ops-Gazelle/sections/reportsv2/resolve_handle.php

<?php
/** @phpstan-var \Gazelle\User $Viewer */
/** @phpstan-var \Gazelle\Cache $Cache */
/** @phpstan-var \Twig\Environment $Twig */

declare(strict_types=1);

namespace Gazelle;

use Gazelle\Enum\TorrentFlag;

/*
 * This is the backend of the AJAXy reports resolve (When you press the shiny submit button).
 * This page shouldn't output anything except in error. If you do want output, it will be put
 * straight into the table where the report used to be. Currently output is only given when
 * a collision occurs or a POST attack is detected.
 */

if (!$Viewer->permitted('admin_reports')) {
    json_die("failure", "forbidden");
}

authorize();

$fromReportPage = !isset($_POST['from_delete']);
$reportTypeMan  = new Manager\Torrent\ReportType();
$reportMan      = new Manager\Torrent\Report(new Manager\Torrent());
$userMan        = new Manager\User();

$report = $reportMan->findById((int)($_POST['reportid'] ?? 0));
if (is_null($report)) {
    // torrent is being deleted using RM link
    $torMan = new Manager\Torrent();
    $torrent = $torMan->findById((int)($_POST['torrentid'] ?? 0));
    if (is_null($torrent)) {
        json_die("failure", "torrent not found");
    }
    $reportType = $reportTypeMan->findByType($_POST['resolve_type'] ?? '');
    if (is_null($reportType)) {
        json_die("failure", "bad report type");
    }
    $report = $reportMan->create(
        torrent:     $torrent,
        user:        $Viewer,
        reportType:  $reportType,
        irc:         new Util\Irc(),
        reason:      '',
        otherIdList: '',
    );
} else {
    $torrent = $report->torrent();
}

if (is_null($torrent)) {
    $report->moderatorResolve($Viewer, 'Report already dealt with (torrent deleted).');
    $Cache->delete_value('num_torrent_reportsv2');
    json_die("failure", "torrent already deleted?");
}
$torrentId = $torrent->id;
if (isset($_POST['delete']) && $torrent->hasUploadLock()) {
    json_die("failure", "You requested to delete the torrent $torrentId, but this is currently not possible because the upload process is still running. Please try again later.");
}

$modNote = trim($_POST['uploader_pm']);
if ($_POST['pm_type'] != 'Uploader') {
    $modNote = '';
}

$weeksWarned = (int)$_POST['warning'];
if (!in_array($weeksWarned, range(0, 8))) {
    json_die("failure", "error weeks warning");
}

if ($fromReportPage && in_array($_POST['resolve_type'], ['manual', 'dismiss'])) {
    if ($_POST['comment']) {
        $comment = $_POST['comment'];
    } elseif ($_POST['resolve_type'] === 'manual') {
        $comment = 'Report was resolved manually.';
    } else {
        $comment = 'Report was dismissed as invalid.';
    }
    if ($report->moderatorResolve($Viewer, $comment)) {
        $Cache->delete_value('num_torrent_reportsv2');
    } else {
        echo $Twig->render('reportsv2/already-resolved.twig', ['report' => $report]);
    }
    exit;
}

if ($fromReportPage && !$report->moderatorResolve($Viewer, $_POST['comment'] ?? '')) {
    echo $Twig->render('reportsv2/already-resolved.twig', ['report' => $report]);
    exit;
}

if ($_POST['resolve_type'] == $report->type()) {
    $reportTypeName = $report->reportType()->name();
} else {
    $reportType = $reportTypeMan->findByType($_POST['resolve_type'] ?? '');
    if (is_null($reportType)) {
        json_die("failure", "invalid report type");
    }
    $reportTypeName = $reportType->name();
}

$sendPM = false;
if ($_POST['resolve_type'] === 'tags_lots') {
    $report->addTorrentFlag(TorrentFlag::badTag, $Viewer);
    $sendPM = true;
} elseif ($_POST['resolve_type'] === 'folders_bad') {
    $report->addTorrentFlag(TorrentFlag::badFolder, $Viewer);
    $sendPM = true;
} elseif ($_POST['resolve_type'] === 'filename') {
    $report->addTorrentFlag(TorrentFlag::badFile, $Viewer);
    $sendPM = true;
} elseif ($_POST['resolve_type'] === 'lineage') {
    $report->addTorrentFlag(TorrentFlag::noLineage, $Viewer);
} elseif ($_POST['resolve_type'] === 'lossyapproval') {
    $report->addTorrentFlag(TorrentFlag::lossyMaster, $Viewer);
}

$adminMessage   = trim($_POST['admin_message']);
$logMessage     = isset($_POST['log_message']) ? trim($_POST['log_message']) : null;
$name           = $torrent->fullName() . ' (' . byte_format($torrent->size()) . ')';
$path           = $torrent->path();
$uploader       = $torrent->uploader();
$pmUploader     = $sendPM || $weeksWarned > 0 || isset($_POST['delete']);
$revokeUpload   = isset($_POST['upload']);
$replacementId  = 0;

//Log and delete
if (!isset($_POST['delete'])) {
    $torrent->flush();
    $Log = $logMessage ?? "No log message (torrent wasn't deleted).";
} elseif ($torrent->isDeleted()) {
    $Log = $logMessage ?? "No log message (torrent was already deleted).";
} else {
    [$ok, $message] = $torrent->removeTorrent( /** @phpstan-ignore-line TorrentAbstract vs Torrent confusion */
        $Viewer,
        sprintf('%s (%s)', $reportTypeName, $logMessage ?? 'none'),
        $report->reportType()->trackerReason()
    );
    if (!$ok) {
        echo "Failure: $message<br />";
        exit;
    }

    $logList = ["Torrent $torrentId ($name) uploaded by {$uploader->username()} was deleted by {$Viewer->username()}"];
    if ($_POST['resolve_type'] != 'custom') {
        $logList[] = "for the reason: {$reportTypeName}.";
    }
    if ($logMessage) {
        $logList[] = ", $logMessage";
    }
    $Log = implode(' ', $logList);

    if (
        in_array($_POST['resolve_type'], ['checksum_trump', 'trump'])
        && preg_match('/torrentid=([0-9]+)/', $logMessage, $match) === 1
    ) {
        $replacementId = (int)$match[1];
    }
}

// send PMs to those concerned
if ($modNote || $pmUploader) {
    $message = [
        "[url=torrents.php?torrentid=$torrentId]Your above torrent[/url] was reported "
        . (isset($_POST['delete']) ? 'and has been deleted.' : 'but not deleted.')
    ];
    $reportReason = $report->reportType()->pmBody();
    if ($reportReason != '') {
         $message[] = "Reason: $reportReason";
    }
    if ($weeksWarned > 0) {
        $message[] = "This has resulted in a [url=wiki.php?action=article&name=warnings]{$weeksWarned} week warning.[/url]";
    }
    if ($revokeUpload) {
        $message[] = 'This has ' . ($weeksWarned > 0 ? 'also ' : '') . "resulted in the loss of your upload privileges.";
    }
    if ($Log) {
        $message[] = "[url=log.php?search=Torrent+{$torrentId}]Log message[/url]:[quote]{$Log}[/quote]";
    }
    if ($modNote) {
        $message[] = "[quote={$Viewer->username()}]{$modNote}[/quote]";
    }
    $message[] = "Report was handled by [user]{$Viewer->username()}[/user].";

    $uploader->inbox()->createSystem("Uploaded torrent removed: $name", implode("\n\n", $message));
    $userMan->sendRemovalPm($uploader, $torrentId, $name, $path, $Log, $replacementId, false);
}

if ($weeksWarned > 0) {
    $reason = $message = "Uploader of torrent ($torrentId) $name which was resolved with the preset: $reportTypeName.";
    if ($adminMessage) {
        $reason .= " ($adminMessage)";
    }
    if ($revokeUpload) {
        $reason  .= ' (Upload privileges removed).';
        $message .= ' (Upload privileges removed).';
    }
    $uploader->warn($weeksWarned, $reason, $Viewer, $message);
} else {
    $staffNote = [];
    if ($revokeUpload) {
        $staffNote[] = "Upload privileges removed by {$Viewer->username()}\nReason: Uploader of torrent ($torrentId) $name which was [url={$report->location()}]resolved with the preset: {$reportTypeName}[/url].";
    }
    if ($adminMessage) {
        // They did nothing of note, but still want to mark it (Or upload and mark)
        $staffNote[] = $revokeUpload
            ? "mod note: $adminMessage"
            : "torrent ($torrentId) $name [url={$report->location()}]was reported[/url]: $adminMessage";
    }
    if ($staffNote) {
        $uploader->addStaffNote(implode(', ', $staffNote));
    }
}

if ($revokeUpload) {
    $uploader->toggleAttr('disable-upload', true);
}
$uploader->modify(); // if there are notes to add

// Now we've done everything, update the DB with values
if ($fromReportPage) {
    $report->finalize($Log, $_POST['comment']);
}