{

global $session, $availableRequestStates, $createdid;

global $smarty, $locationProvider, $rdnsProvider, $antispoofProvider;

global $xffTrustProvider, $enableEmailConfirm;

$database = gGetDb();

$request = Request::getById($id, $database);

if ($request == false) {

// Notifies the user and stops the script.

BootstrapSkin::displayAlertBox("Could not load the requested request!", "alert-error", "Error", true, false);

BootstrapSkin::displayInternalFooter();

die();

}

$smarty->assign('ecenable', $enableEmailConfirm);

if (isset($_GET['ecoverride']) && User::getCurrent()->isAdmin()) {

$smarty->assign('ecoverride', true);

}

else {

$smarty->assign('ecoverride', false);

}

$smarty->assign('request', $request);

$smarty->assign("usernamerawunicode", html_entity_decode($request->getName()));

$smarty->assign("iplocation", $locationProvider->getIpLocation($request->getTrustedIp()));

$createdreason = EmailTemplate::getById($createdid, gGetDb());

$smarty->assign("createdEmailTemplate", $createdreason);

#region setup whether data is viewable or not

$viewableDataStatement = $database->prepare(<<<SQL

SELECT COUNT(*)

FROM request

WHERE

(

email = :email

OR ip = :trustedIp

OR forwardedip LIKE :trustedProxy

)

AND reserved = :reserved

AND emailconfirm = 'Confirmed'

AND status != 'Closed';

SQL

);

$viewableDataStatement->bindValue(":email", $request->getEmail());

$viewableDataStatement->bindValue(":reserved", User::getCurrent()->getId());

$viewableDataStatement->bindValue(":trustedIp", $request->getTrustedIp());

$viewableDataStatement->bindValue(":trustedProxy", '%' . $request->getTrustedIp() . '%');

$viewableDataStatement->execute();

$viewableData = $viewableDataStatement->fetchColumn();

$viewableDataStatement->closeCursor();

$hideinfo = ($viewableData == 0);

#endregion

if ($request->getStatus() == "Closed") {

$hash = md5($request->getId() . $request->getEmail() . $request->getTrustedIp() . microtime()); //If the request is closed, change the hash based on microseconds similar to the checksums.

$smarty->assign("isclosed", true);

}

else {

$hash = md5($request->getId() . $request->getEmail() . $request->getTrustedIp());

$smarty->assign("isclosed", false);

}

$smarty->assign("hash", $hash);

if ($hash == $urlhash) {

$correcthash = true;

}

else {

$correcthash = false;

}

$smarty->assign("showinfo", false);

if ($hideinfo == false || $correcthash == true || User::getCurrent()->isAdmin() || User::getCurrent()->isCheckuser()) {

$smarty->assign("showinfo", true);

}

// force to not show, overriden later

$smarty->assign("proxyip", "");

if ($hideinfo == false || $correcthash == true || User::getCurrent()->isAdmin() || User::getCurrent()->isCheckuser()) {

$smarty->assign("proxyip", $request->getForwardedIp());

if ($request->getForwardedIp()) {

$smartyproxies = array(); // Initialize array to store data to be output in Smarty template.

$smartyproxiesindex = 0;

$proxies = explode(",", $request->getForwardedIp());

$proxies[] = $request->getIp();

$origin = $proxies[0];

$smarty->assign("origin", $origin);

$proxies = array_reverse($proxies);

$trust = true;

global $rfc1918ips;

foreach ($proxies as $proxynum => $p) {

$p2 = trim($p);

$smartyproxies[$smartyproxiesindex]['ip'] = $p2;

// get data on this IP.

$trusted = $xffTrustProvider->isTrusted($p2);

$ipisprivate = ipInRange($rfc1918ips, $p2);

if (!$ipisprivate) {

$iprdns = $rdnsProvider->getRdns($p2);

$iplocation = $locationProvider->getIpLocation($p2);

}

else {

// this is going to fail, so why bother trying?

$iprdns = false;

$iplocation = false;

}

// current trust chain status BEFORE this link

$pretrust = $trust;

// is *this* link trusted?

$smartyproxies[$smartyproxiesindex]['trustedlink'] = $trusted;

// current trust chain status AFTER this link

$trust = $trust & $trusted;

if ($pretrust && $p2 == $origin) {

$trust = true;

}

$smartyproxies[$smartyproxiesindex]['trust'] = $trust;

$smartyproxies[$smartyproxiesindex]['rdnsfailed'] = $iprdns === false;

$smartyproxies[$smartyproxiesindex]['rdns'] = $iprdns;

$smartyproxies[$smartyproxiesindex]['routable'] = !$ipisprivate;

$smartyproxies[$smartyproxiesindex]['location'] = $iplocation;

if ($iprdns == $p2 && $ipisprivate == false) {

$smartyproxies[$smartyproxiesindex]['rdns'] = null;

}

$smartyproxies[$smartyproxiesindex]['showlinks'] = (!$trust || $p2 == $origin) && !$ipisprivate;

$smartyproxiesindex++;

}

$smarty->assign("proxies", $smartyproxies);

}

}

global $defaultRequestStateKey;

// TODO: remove me and replace with call in the template directly

$smarty->assign("isprotected", $request->isProtected());

$smarty->assign("defaultstate", $defaultRequestStateKey);

$smarty->assign("requeststates", $availableRequestStates);

try {

$spoofs = $antispoofProvider->getSpoofs($request->getName());

}

catch (Exception $ex) {

$spoofs = $ex->getMessage();

}

$smarty->assign("spoofs", $spoofs);

// START LOG DISPLAY

$logs = Logger::getRequestLogsWithComments($request->getId(), $request->getDatabase());

$requestLogs = array();

if (trim($request->getComment()) !== "") {

$requestLogs[] = array(

'type' => 'comment',

'security' => 'user',

'userid' => null,

'user' => $request->getName(),

'entry' => null,

'time' => $request->getDate(),

'canedit' => false,

'id' => $request->getId(),

'comment' => $request->getComment(),

);

}

$namecache = array();

$editableComments = false;

if (User::getCurrent()->isAdmin() || User::getCurrent()->isCheckuser()) {

$editableComments = true;

}

foreach ($logs as $entry) {

// both log and comment have a 'user' field

if (!array_key_exists($entry->getUser(), $namecache)) {

$namecache[$entry->getUser()] = $entry->getUserObject();

}

if ($entry instanceof Comment) {

$requestLogs[] = array(

'type' => 'comment',

'security' => $entry->getVisibility(),

'user' => $namecache[$entry->getUser()]->getUsername(),

'userid' => $entry->getUser() == -1 ? null : $entry->getUser(),

'entry' => null,

'time' => $entry->getTime(),

'canedit' => ($editableComments || $entry->getUser() == User::getCurrent()->getId()),

'id' => $entry->getId(),

'comment' => $entry->getComment(),

);

}

if ($entry instanceof Log) {

$requestLogs[] = array(

'type' => 'log',

'security' => 'user',

'userid' => $entry->getUser() == -1 ? null : $entry->getUser(),

'user' => $namecache[$entry->getUser()]->getUsername(),

'entry' => Logger::getLogDescription($entry),

'time' => $entry->getTimestamp(),

'canedit' => false,

'id' => $entry->getId(),

'comment' => $entry->getComment(),

);

}

}

$smarty->assign("requestLogs", $requestLogs);

// START OTHER REQUESTS BY IP AND EMAIL STUFF

// Displays other requests from this ip.

// assign to user

$userListQuery = "SELECT username FROM user WHERE status = 'User' or status = 'Admin';";

$userListResult = gGetDb()->query($userListQuery);

$userListData = $userListResult->fetchAll(PDO::FETCH_COLUMN);

$userListProcessedData = array();

foreach ($userListData as $userListItem) {

$userListProcessedData[] = "\"" . htmlentities($userListItem) . "\"";

}

$userList = '[' . implode(",", $userListProcessedData) . ']';

$smarty->assign("jsuserlist", $userList);

// end: assign to user

// TODO: refactor this!

$createreasons = EmailTemplate::getActiveTemplates(EmailTemplate::CREATED);

$smarty->assign("createreasons", $createreasons);

$declinereasons = EmailTemplate::getActiveTemplates(EmailTemplate::NOT_CREATED);

$smarty->assign("declinereasons", $declinereasons);

$allcreatereasons = EmailTemplate::getAllActiveTemplates(EmailTemplate::CREATED);

$smarty->assign("allcreatereasons", $allcreatereasons);

$alldeclinereasons = EmailTemplate::getAllActiveTemplates(EmailTemplate::NOT_CREATED);

$smarty->assign("alldeclinereasons", $alldeclinereasons);

$allotherreasons = EmailTemplate::getAllActiveTemplates(false);

$smarty->assign("allotherreasons", $allotherreasons);

return $smarty->fetch("request-zoom.tpl");