/**
* Browse all the reported posts...
* @todo this needs to be given its own file?
*/
public function action_reportedPosts()
{
global $txt, $context, $scripturl, $user_info;
loadTemplate('ModerationCenter');
require_once SUBSDIR . '/Moderation.subs.php';
// Put the open and closed options into tabs, because we can...
$context[$context['moderation_menu_name']]['tab_data'] = array('title' => $txt['mc_reported_posts'], 'help' => '', 'description' => $txt['mc_reported_posts_desc']);
// This comes under the umbrella of moderating posts.
if ($user_info['mod_cache']['bq'] == '0=1') {
isAllowedTo('moderate_forum');
}
// Are they wanting to view a particular report?
if (!empty($_REQUEST['report'])) {
return $this->action_modReport();
}
// Set up the comforting bits...
$context['page_title'] = $txt['mc_reported_posts'];
$context['sub_template'] = 'reported_posts';
// Are we viewing open or closed reports?
$context['view_closed'] = isset($_GET['sa']) && $_GET['sa'] == 'closed' ? 1 : 0;
// Are we doing any work?
if ((isset($_GET['ignore']) || isset($_GET['close'])) && isset($_GET['rid'])) {
checkSession('get');
$_GET['rid'] = (int) $_GET['rid'];
// Update the report...
if (isset($_GET['ignore'])) {
updateReportsStatus((int) $_GET['rid'], 'ignore', (int) $_GET['ignore']);
} elseif (isset($_GET['close'])) {
updateReportsStatus((int) $_GET['rid'], 'close', (int) $_GET['close']);
}
// Time to update.
updateSettings(array('last_mod_report_action' => time()));
recountOpenReports();
} elseif (isset($_POST['close']) && isset($_POST['close_selected'])) {
checkSession('post');
// All the ones to update...
$toClose = array();
foreach ($_POST['close'] as $rid) {
$toClose[] = (int) $rid;
}
if (!empty($toClose)) {
updateReportsStatus($toClose, 'close', 1);
// Time to update.
updateSettings(array('last_mod_report_action' => time()));
recountOpenReports();
}
}
// How many entries are we viewing?
$context['total_reports'] = totalReports($context['view_closed']);
// So, that means we can page index, yes?
$context['page_index'] = constructPageIndex($scripturl . '?action=moderate;area=reports' . ($context['view_closed'] ? ';sa=closed' : ''), $_GET['start'], $context['total_reports'], 10);
$context['start'] = $_GET['start'];
// By George, that means we in a position to get the reports, golly good.
$context['reports'] = getModReports($context['view_closed'], $context['start'], 10);
$report_ids = array_keys($context['reports']);
$report_boards_ids = array();
foreach ($context['reports'] as $row) {
$context['reports'][$row['id_report']] = array('board' => $row['id_board'], 'id' => $row['id_report'], 'topic_href' => $scripturl . '?topic=' . $row['id_topic'] . '.msg' . $row['id_msg'] . '#msg' . $row['id_msg'], 'report_href' => $scripturl . '?action=moderate;area=reports;report=' . $row['id_report'], 'author' => array('id' => $row['id_author'], 'name' => $row['author_name'], 'link' => $row['id_author'] ? '<a href="' . $scripturl . '?action=profile;u=' . $row['id_author'] . '">' . $row['author_name'] . '</a>' : $row['author_name'], 'href' => $scripturl . '?action=profile;u=' . $row['id_author']), 'comments' => array(), 'time_started' => standardTime($row['time_started']), 'last_updated' => standardTime($row['time_updated']), 'subject' => $row['subject'], 'body' => parse_bbc($row['body']), 'num_reports' => $row['num_reports'], 'closed' => $row['closed'], 'ignore' => $row['ignore_all'], 'buttons' => array('quickmod_check' => array('checkbox' => !$context['view_closed'], 'name' => 'close', 'value' => $row['id_report']), 'details' => array('href' => $scripturl . '?action=moderate;area=reports;report=' . $row['id_report'], 'text' => $txt['mc_reportedp_details']), 'ignore' => array('href' => $scripturl . '?action=moderate;area=reports' . ($context['view_closed'] ? ';sa=closed' : '') . ';ignore=' . (int) (!$row['ignore_all']) . ';rid=' . $row['id_report'] . ';start=' . $context['start'] . ';' . $context['session_var'] . '=' . $context['session_id'], 'text' => $row['ignore_all'] ? $txt['mc_reportedp_unignore'] : $txt['mc_reportedp_ignore'], 'custom' => $row['ignore_all'] ? '' : 'onclick="return confirm(' . JavaScriptEscape($txt['mc_reportedp_ignore_confirm']) . ');"'), 'close' => array('href' => $scripturl . '?action=moderate;area=reports' . ($context['view_closed'] ? ';sa=closed' : '') . ';close=' . (int) (!$row['closed']) . ';rid=' . $row['id_report'] . ';start=' . $context['start'] . ';' . $context['session_var'] . '=' . $context['session_id'], 'text' => $context['view_closed'] ? $txt['mc_reportedp_open'] : $txt['mc_reportedp_close'])));
$report_boards_ids[] = $row['id_board'];
}
// Get the names of boards these topics are in.
if (!empty($report_ids)) {
require_once SUBSDIR . '/Boards.subs.php';
$board_names = getBoardList(array('included_boards' => $report_boards_ids), true);
// Add the board name to the report array
foreach ($context['reports'] as $id_report => $report) {
if (!empty($board_names[$report['board']])) {
$context['reports'][$id_report]['board_name'] = $board_names[$report['board']]['board_name'];
}
}
}
// Now get all the people who reported it.
if (!empty($report_ids)) {
$comments = getReportsUserComments($report_ids);
foreach ($comments as $id_rep => $rows) {
foreach ($rows as $row) {
$context['reports'][$id_rep]['comments'][] = array('id' => $row['id_comment'], 'message' => $row['comment'], 'raw_time' => $row['time_sent'], 'time' => standardTime($row['time_sent']), 'html_time' => htmlTime($row['time_sent']), 'timestamp' => forum_time(true, $row['time_sent']), 'member' => array('id' => $row['id_member'], 'name' => empty($row['reporter']) ? $txt['guest'] : $row['reporter'], 'link' => $row['id_member'] ? '<a href="' . $scripturl . '?action=profile;u=' . $row['id_member'] . '">' . $row['reporter'] . '</a>' : (empty($row['reporter']) ? $txt['guest'] : $row['reporter']), 'href' => $row['id_member'] ? $scripturl . '?action=profile;u=' . $row['id_member'] : ''));
}
}
}
}
/**
* Remove a specific message.
* !! This includes permission checks.
*
* - normally, local and global should be the localCookies and globalCookies settings, respectively.
* - uses boardurl to determine these two things.
*
* @param int $message The message id
* @param bool $decreasePostCount if true users' post count will be reduced
*/
function removeMessage($message, $decreasePostCount = true)
{
global $board, $modSettings, $user_info;
$db = database();
if (empty($message) || !is_numeric($message)) {
return false;
}
$request = $db->query('', '
SELECT
m.id_member, m.icon, m.poster_time, m.subject,' . (empty($modSettings['search_custom_index_config']) ? '' : ' m.body,') . '
m.approved, t.id_topic, t.id_first_msg, t.id_last_msg, t.num_replies, t.id_board,
t.id_member_started AS id_member_poster,
b.count_posts
FROM {db_prefix}messages AS m
INNER JOIN {db_prefix}topics AS t ON (t.id_topic = m.id_topic)
INNER JOIN {db_prefix}boards AS b ON (b.id_board = t.id_board)
WHERE m.id_msg = {int:id_msg}
LIMIT 1', array('id_msg' => $message));
if ($db->num_rows($request) == 0) {
return false;
}
$row = $db->fetch_assoc($request);
$db->free_result($request);
if (empty($board) || $row['id_board'] != $board) {
$delete_any = boardsAllowedTo('delete_any');
if (!in_array(0, $delete_any) && !in_array($row['id_board'], $delete_any)) {
$delete_own = boardsAllowedTo('delete_own');
$delete_own = in_array(0, $delete_own) || in_array($row['id_board'], $delete_own);
$delete_replies = boardsAllowedTo('delete_replies');
$delete_replies = in_array(0, $delete_replies) || in_array($row['id_board'], $delete_replies);
if ($row['id_member'] == $user_info['id']) {
if (!$delete_own) {
if ($row['id_member_poster'] == $user_info['id']) {
if (!$delete_replies) {
fatal_lang_error('cannot_delete_replies', 'permission');
}
} else {
fatal_lang_error('cannot_delete_own', 'permission');
}
} elseif (($row['id_member_poster'] != $user_info['id'] || !$delete_replies) && !empty($modSettings['edit_disable_time']) && $row['poster_time'] + $modSettings['edit_disable_time'] * 60 < time()) {
fatal_lang_error('modify_post_time_passed', false);
}
} elseif ($row['id_member_poster'] == $user_info['id']) {
if (!$delete_replies) {
fatal_lang_error('cannot_delete_replies', 'permission');
}
} else {
fatal_lang_error('cannot_delete_any', 'permission');
}
}
// Can't delete an unapproved message, if you can't see it!
if ($modSettings['postmod_active'] && !$row['approved'] && $row['id_member'] != $user_info['id'] && !(in_array(0, $delete_any) || in_array($row['id_board'], $delete_any))) {
$approve_posts = !empty($user_info['mod_cache']['ap']) ? $user_info['mod_cache']['ap'] : boardsAllowedTo('approve_posts');
if (!in_array(0, $approve_posts) && !in_array($row['id_board'], $approve_posts)) {
return false;
}
}
} else {
// Check permissions to delete this message.
if ($row['id_member'] == $user_info['id']) {
if (!allowedTo('delete_own')) {
if ($row['id_member_poster'] == $user_info['id'] && !allowedTo('delete_any')) {
isAllowedTo('delete_replies');
} elseif (!allowedTo('delete_any')) {
isAllowedTo('delete_own');
}
} elseif (!allowedTo('delete_any') && ($row['id_member_poster'] != $user_info['id'] || !allowedTo('delete_replies')) && !empty($modSettings['edit_disable_time']) && $row['poster_time'] + $modSettings['edit_disable_time'] * 60 < time()) {
fatal_lang_error('modify_post_time_passed', false);
}
} elseif ($row['id_member_poster'] == $user_info['id'] && !allowedTo('delete_any')) {
isAllowedTo('delete_replies');
} else {
isAllowedTo('delete_any');
}
if ($modSettings['postmod_active'] && !$row['approved'] && $row['id_member'] != $user_info['id'] && !allowedTo('delete_own')) {
isAllowedTo('approve_posts');
}
}
// Delete the *whole* topic, but only if the topic consists of one message.
if ($row['id_first_msg'] == $message) {
if (empty($board) || $row['id_board'] != $board) {
$remove_any = boardsAllowedTo('remove_any');
$remove_any = in_array(0, $remove_any) || in_array($row['id_board'], $remove_any);
if (!$remove_any) {
$remove_own = boardsAllowedTo('remove_own');
$remove_own = in_array(0, $remove_own) || in_array($row['id_board'], $remove_own);
}
if ($row['id_member'] != $user_info['id'] && !$remove_any) {
fatal_lang_error('cannot_remove_any', 'permission');
} elseif (!$remove_any && !$remove_own) {
fatal_lang_error('cannot_remove_own', 'permission');
}
} else {
// Check permissions to delete a whole topic.
if ($row['id_member'] != $user_info['id']) {
isAllowedTo('remove_any');
} elseif (!allowedTo('remove_any')) {
isAllowedTo('remove_own');
}
}
// ...if there is only one post.
if (!empty($row['num_replies'])) {
fatal_lang_error('delFirstPost', false);
}
// This needs to be included for topic functions
require_once SUBSDIR . '/Topic.subs.php';
removeTopics($row['id_topic']);
return true;
}
// Deleting a recycled message can not lower anyone's post count.
if ($row['icon'] == 'recycled') {
$decreasePostCount = false;
}
// This is the last post, update the last post on the board.
if ($row['id_last_msg'] == $message) {
// Find the last message, set it, and decrease the post count.
$request = $db->query('', '
SELECT id_msg, id_member
FROM {db_prefix}messages
WHERE id_topic = {int:id_topic}
AND id_msg != {int:id_msg}
ORDER BY ' . ($modSettings['postmod_active'] ? 'approved DESC, ' : '') . 'id_msg DESC
LIMIT 1', array('id_topic' => $row['id_topic'], 'id_msg' => $message));
$row2 = $db->fetch_assoc($request);
$db->free_result($request);
$db->query('', '
UPDATE {db_prefix}topics
SET
id_last_msg = {int:id_last_msg},
id_member_updated = {int:id_member_updated}' . (!$modSettings['postmod_active'] || $row['approved'] ? ',
num_replies = CASE WHEN num_replies = {int:no_replies} THEN 0 ELSE num_replies - 1 END' : ',
unapproved_posts = CASE WHEN unapproved_posts = {int:no_unapproved} THEN 0 ELSE unapproved_posts - 1 END') . '
WHERE id_topic = {int:id_topic}', array('id_last_msg' => $row2['id_msg'], 'id_member_updated' => $row2['id_member'], 'no_replies' => 0, 'no_unapproved' => 0, 'id_topic' => $row['id_topic']));
} else {
$db->query('', '
UPDATE {db_prefix}topics
SET ' . ($row['approved'] ? '
num_replies = CASE WHEN num_replies = {int:no_replies} THEN 0 ELSE num_replies - 1 END' : '
unapproved_posts = CASE WHEN unapproved_posts = {int:no_unapproved} THEN 0 ELSE unapproved_posts - 1 END') . '
WHERE id_topic = {int:id_topic}', array('no_replies' => 0, 'no_unapproved' => 0, 'id_topic' => $row['id_topic']));
}
// Default recycle to false.
$recycle = false;
// If recycle topics has been set, make a copy of this message in the recycle board.
// Make sure we're not recycling messages that are already on the recycle board.
if (!empty($modSettings['recycle_enable']) && $row['id_board'] != $modSettings['recycle_board'] && $row['icon'] != 'recycled') {
// Check if the recycle board exists and if so get the read status.
$request = $db->query('', '
SELECT (IFNULL(lb.id_msg, 0) >= b.id_msg_updated) AS is_seen, id_last_msg
FROM {db_prefix}boards AS b
LEFT JOIN {db_prefix}log_boards AS lb ON (lb.id_board = b.id_board AND lb.id_member = {int:current_member})
WHERE b.id_board = {int:recycle_board}', array('current_member' => $user_info['id'], 'recycle_board' => $modSettings['recycle_board']));
if ($db->num_rows($request) == 0) {
fatal_lang_error('recycle_no_valid_board');
}
list($isRead, $last_board_msg) = $db->fetch_row($request);
$db->free_result($request);
// Is there an existing topic in the recycle board to group this post with?
$request = $db->query('', '
SELECT id_topic, id_first_msg, id_last_msg
FROM {db_prefix}topics
WHERE id_previous_topic = {int:id_previous_topic}
AND id_board = {int:recycle_board}', array('id_previous_topic' => $row['id_topic'], 'recycle_board' => $modSettings['recycle_board']));
list($id_recycle_topic, $first_topic_msg, $last_topic_msg) = $db->fetch_row($request);
$db->free_result($request);
// Insert a new topic in the recycle board if $id_recycle_topic is empty.
if (empty($id_recycle_topic)) {
$db->insert('', '{db_prefix}topics', array('id_board' => 'int', 'id_member_started' => 'int', 'id_member_updated' => 'int', 'id_first_msg' => 'int', 'id_last_msg' => 'int', 'unapproved_posts' => 'int', 'approved' => 'int', 'id_previous_topic' => 'int'), array($modSettings['recycle_board'], $row['id_member'], $row['id_member'], $message, $message, 0, 1, $row['id_topic']), array('id_topic'));
}
// Capture the ID of the new topic...
$topicID = empty($id_recycle_topic) ? $db->insert_id('{db_prefix}topics', 'id_topic') : $id_recycle_topic;
// If the topic creation went successful, move the message.
if ($topicID > 0) {
$db->query('', '
UPDATE {db_prefix}messages
SET
id_topic = {int:id_topic},
id_board = {int:recycle_board},
icon = {string:recycled},
approved = {int:is_approved}
WHERE id_msg = {int:id_msg}', array('id_topic' => $topicID, 'recycle_board' => $modSettings['recycle_board'], 'id_msg' => $message, 'recycled' => 'recycled', 'is_approved' => 1));
// Take any reported posts with us...
$db->query('', '
UPDATE {db_prefix}log_reported
SET
id_topic = {int:id_topic},
id_board = {int:recycle_board}
WHERE id_msg = {int:id_msg}', array('id_topic' => $topicID, 'recycle_board' => $modSettings['recycle_board'], 'id_msg' => $message));
// Mark recycled topic as read.
if (!$user_info['is_guest']) {
require_once SUBSDIR . '/Topic.subs.php';
markTopicsRead(array($user_info['id'], $topicID, $modSettings['maxMsgID'], 0), true);
}
// Mark recycle board as seen, if it was marked as seen before.
if (!empty($isRead) && !$user_info['is_guest']) {
require_once SUBSDIR . '/Boards.subs.php';
markBoardsRead($modSettings['recycle_board']);
}
// Add one topic and post to the recycle bin board.
$db->query('', '
UPDATE {db_prefix}boards
SET
num_topics = num_topics + {int:num_topics_inc},
num_posts = num_posts + 1' . ($message > $last_board_msg ? ', id_last_msg = {int:id_merged_msg}' : '') . '
WHERE id_board = {int:recycle_board}', array('num_topics_inc' => empty($id_recycle_topic) ? 1 : 0, 'recycle_board' => $modSettings['recycle_board'], 'id_merged_msg' => $message));
// Lets increase the num_replies, and the first/last message ID as appropriate.
if (!empty($id_recycle_topic)) {
$db->query('', '
UPDATE {db_prefix}topics
SET num_replies = num_replies + 1' . ($message > $last_topic_msg ? ', id_last_msg = {int:id_merged_msg}' : '') . ($message < $first_topic_msg ? ', id_first_msg = {int:id_merged_msg}' : '') . '
WHERE id_topic = {int:id_recycle_topic}', array('id_recycle_topic' => $id_recycle_topic, 'id_merged_msg' => $message));
}
// Make sure this message isn't getting deleted later on.
$recycle = true;
// Make sure we update the search subject index.
updateSubjectStats($topicID, $row['subject']);
}
// If it wasn't approved don't keep it in the queue.
if (!$row['approved']) {
$db->query('', '
DELETE FROM {db_prefix}approval_queue
WHERE id_msg = {int:id_msg}
AND id_attach = {int:id_attach}', array('id_msg' => $message, 'id_attach' => 0));
}
}
$db->query('', '
UPDATE {db_prefix}boards
SET ' . ($row['approved'] ? '
num_posts = CASE WHEN num_posts = {int:no_posts} THEN 0 ELSE num_posts - 1 END' : '
unapproved_posts = CASE WHEN unapproved_posts = {int:no_unapproved} THEN 0 ELSE unapproved_posts - 1 END') . '
WHERE id_board = {int:id_board}', array('no_posts' => 0, 'no_unapproved' => 0, 'id_board' => $row['id_board']));
// If the poster was registered and the board this message was on incremented
// the member's posts when it was posted, decrease his or her post count.
if (!empty($row['id_member']) && $decreasePostCount && empty($row['count_posts']) && $row['approved']) {
updateMemberData($row['id_member'], array('posts' => '-'));
}
// Only remove posts if they're not recycled.
if (!$recycle) {
// Remove the likes!
$db->query('', '
DELETE FROM {db_prefix}message_likes
WHERE id_msg = {int:id_msg}', array('id_msg' => $message));
// Remove the mentions!
$db->query('', '
DELETE FROM {db_prefix}log_mentions
WHERE id_msg = {int:id_msg}', array('id_msg' => $message));
// Remove the message!
$db->query('', '
DELETE FROM {db_prefix}messages
WHERE id_msg = {int:id_msg}', array('id_msg' => $message));
if (!empty($modSettings['search_custom_index_config'])) {
$customIndexSettings = unserialize($modSettings['search_custom_index_config']);
$words = text2words($row['body'], $customIndexSettings['bytes_per_word'], true);
if (!empty($words)) {
$db->query('', '
DELETE FROM {db_prefix}log_search_words
WHERE id_word IN ({array_int:word_list})
AND id_msg = {int:id_msg}', array('word_list' => $words, 'id_msg' => $message));
}
}
// Delete attachment(s) if they exist.
require_once SUBSDIR . '/ManageAttachments.subs.php';
$attachmentQuery = array('attachment_type' => 0, 'id_msg' => $message);
removeAttachments($attachmentQuery);
// Delete follow-ups too
require_once SUBSDIR . '/FollowUps.subs.php';
// If it is an entire topic
if ($row['id_first_msg'] == $message) {
$db->query('', '
DELETE FROM {db_prefix}follow_ups
WHERE follow_ups IN ({array_int:topics})', array('topics' => $row['id_topic']));
}
// Allow mods to remove message related data of their own (likes, maybe?)
call_integration_hook('integrate_remove_message', array($message));
}
// Update the pesky statistics.
updateMessageStats();
updateStats('topic');
updateSettings(array('calendar_updated' => time()));
// And now to update the last message of each board we messed with.
require_once SUBSDIR . '/Post.subs.php';
if ($recycle) {
updateLastMessages(array($row['id_board'], $modSettings['recycle_board']));
} else {
updateLastMessages($row['id_board']);
}
// Close any moderation reports for this message.
require_once SUBSDIR . '/Moderation.subs.php';
$updated_reports = updateReportsStatus($message, 'close', 1);
if ($updated_reports != 0) {
updateSettings(array('last_mod_report_action' => time()));
recountOpenReports();
}
return false;
}