swg-source/auth-site
1
0
Fork 0
mirror of https://github.com/SWG-Source/auth-site.git synced 2026-07-13 22:01:16 -04:00
Code Issues Projects Releases Wiki Activity
Files
e41c456007fa464defff45ee48d7a318cbeaeeca
auth-site/html/forums/moderation.php
T
theswgsource 54f6f8e5e7 initial commit
2018-04-29 02:36:24 -07:00

3330 lines
90 KiB
PHP
Raw Blame History

<?php
/**
* MyBB 1.8
* Copyright 2014 MyBB Group, All Rights Reserved
*
* Website: http://www.mybb.com
* License: http://www.mybb.com/about/license
*
*/
define("IN_MYBB", 1);
define('THIS_SCRIPT', 'moderation.php');
$templatelist = "changeuserbox,loginbox,moderation_delayedmoderation_custommodtool,moderation_delayedmodaction_notes,moderation_delayedmoderation_merge,moderation_delayedmoderation_move";
$templatelist .= ",moderation_delayedmoderation,moderation_deletethread,moderation_deletepoll,moderation_mergeposts_post,moderation_viewthreadnotes,moderation_confirmation,moderation_purgespammer";
$templatelist .= ",moderation_move,moderation_threadnotes_modaction,moderation_threadnotes_delayedmodaction,moderation_threadnotes,moderation_getip_modoptions,moderation_getip,moderation_getpmip";
$templatelist .= ",moderation_split_post,moderation_inline_deletethreads,moderation_inline_movethreads,moderation_inline_deleteposts,moderation_inline_mergeposts,moderation_threadnotes_modaction_error";
$templatelist .= ",moderation_inline_splitposts,forumjump_special,forumjump_advanced,forumdisplay_password_wrongpass,forumdisplay_password,moderation_inline_moveposts,moderation_delayedmodaction_error";
$templatelist .= ",moderation_delayedmodaction_notes_thread_single,moderation_delayedmodaction_notes_thread_multiple,moderation_delayedmodaction_notes_forum,moderation_delayedmodaction_notes_new_forum";
$templatelist .= ",moderation_delayedmodaction_notes_redirect,moderation_delayedmodaction_notes_merge,moderation_delayedmoderation_thread,moderation_threadnotes_modaction_thread,forumjump_bit";
$templatelist .= ",moderation_delayedmoderation_date_day,moderation_delayedmoderation_date_month,moderation_threadnotes_modaction_post,moderation_merge,moderation_split,moderation_threadnotes_modaction_forum";
require_once "./global.php";
require_once MYBB_ROOT."inc/functions_post.php";
require_once MYBB_ROOT."inc/functions_upload.php";
require_once MYBB_ROOT."inc/class_parser.php";
$parser = new postParser;
require_once MYBB_ROOT."inc/class_moderation.php";
$moderation = new Moderation;
// Load global language phrases
$lang->load("moderation");
$plugins->run_hooks("moderation_start");
$tid = $mybb->get_input('tid', MyBB::INPUT_INT);
$pid = $mybb->get_input('pid', MyBB::INPUT_INT);
$fid = $mybb->get_input('fid', MyBB::INPUT_INT);
$pmid = $mybb->get_input('pmid', MyBB::INPUT_INT);
if($pid)
{
$post = get_post($pid);
if(!$post)
{
error($lang->error_invalidpost);
}
$tid = $post['tid'];
}
if($tid)
{
$thread = get_thread($tid);
if(!$thread)
{
error($lang->error_invalidthread);
}
$fid = $thread['fid'];
}
if($fid)
{
$modlogdata['fid'] = $fid;
$forum = get_forum($fid);
// Make navigation
build_forum_breadcrumb($fid);
// Get our permissions all nice and setup
$permissions = forum_permissions($fid);
}
if($pmid > 0)
{
$query = $db->simple_select('privatemessages', 'uid, subject, ipaddress, fromid', "pmid = $pmid");
$pm = $db->fetch_array($query);
if(!$pm)
{
error($lang->error_invalidpm);
}
}
// Get some navigation if we need it
$mybb->input['action'] = $mybb->get_input('action');
switch($mybb->input['action'])
{
case "reports":
add_breadcrumb($lang->reported_posts);
break;
case "allreports":
add_breadcrumb($lang->all_reported_posts);
break;
}
if(isset($thread))
{
$thread['subject'] = htmlspecialchars_uni($parser->parse_badwords($thread['subject']));
add_breadcrumb($thread['subject'], get_thread_link($thread['tid']));
$modlogdata['tid'] = $thread['tid'];
}
if(isset($forum))
{
// Check if this forum is password protected and we have a valid password
check_forum_password($forum['fid']);
}
$mybb->user['username'] = htmlspecialchars_uni($mybb->user['username']);
eval("\$loginbox = \"".$templates->get("changeuserbox")."\";");
$allowable_moderation_actions = array("getip", "getpmip", "cancel_delayedmoderation", "delayedmoderation", "threadnotes", "purgespammer", "viewthreadnotes");
if($mybb->request_method != "post" && !in_array($mybb->input['action'], $allowable_moderation_actions))
{
error_no_permission();
}
// Begin!
switch($mybb->input['action'])
{
// Delayed Moderation
case "cancel_delayedmoderation":
// Verify incoming POST request
verify_post_check($mybb->get_input('my_post_key'));
add_breadcrumb($lang->delayed_moderation);
if(!is_moderator($fid, "canmanagethreads"))
{
error_no_permission();
}
$plugins->run_hooks('moderation_cancel_delayedmoderation');
$db->delete_query("delayedmoderation", "did='".$mybb->get_input('did', MyBB::INPUT_INT)."'");
if($tid == 0)
{
moderation_redirect(get_forum_link($fid), $lang->redirect_delayed_moderation_cancelled);
}
else
{
moderation_redirect("moderation.php?action=delayedmoderation&amp;tid={$tid}&amp;my_post_key={$mybb->post_code}", $lang->redirect_delayed_moderation_cancelled);
}
break;
case "do_delayedmoderation":
case "delayedmoderation":
// Verify incoming POST request
verify_post_check($mybb->get_input('my_post_key'));
$localized_time_offset = $mybb->user['timezone']*3600 + $mybb->user['dst']*3600;
if(!$mybb->get_input('date_day', MyBB::INPUT_INT))
{
$mybb->input['date_day'] = gmdate('d', TIME_NOW + $localized_time_offset);
}
if(!$mybb->get_input('date_month', MyBB::INPUT_INT))
{
$mybb->input['date_month'] = gmdate('m', TIME_NOW + $localized_time_offset);
}
// Assume in-line moderation if TID is not set
if(!empty($mybb->input['tid']))
{
$mybb->input['tids'] = $tid;
}
else
{
if($mybb->get_input('inlinetype') == 'search')
{
$tids = getids($mybb->get_input('searchid'), 'search');
}
else
{
$fid = $mybb->get_input('fid', MyBB::INPUT_INT);
$tids = getids($fid, "forum");
}
if(count($tids) < 1)
{
error($lang->error_inline_nothreadsselected);
}
$mybb->input['tids'] = $tids;
}
add_breadcrumb($lang->delayed_moderation);
if(!is_moderator($fid, "canmanagethreads"))
{
error_no_permission();
}
$errors = array();
$customthreadtools = "";
$allowed_types = array('openclosethread', 'softdeleterestorethread', 'deletethread', 'move', 'stick', 'merge', 'removeredirects', 'removesubscriptions', 'approveunapprovethread');
$mybb->input['type'] = $mybb->get_input('type');
switch($db->type)
{
case "pgsql":
case "sqlite":
$query = $db->simple_select("modtools", 'tid, name', "(','||forums||',' LIKE '%,$fid,%' OR ','||forums||',' LIKE '%,-1,%' OR forums='') AND type = 't'");
break;
default:
$query = $db->simple_select("modtools", 'tid, name', "(CONCAT(',',forums,',') LIKE '%,$fid,%' OR CONCAT(',',forums,',') LIKE '%,-1,%' OR forums='') AND type = 't'");
}
while($tool = $db->fetch_array($query))
{
$allowed_types[] = "modtool_".$tool['tid'];
$tool['name'] = htmlspecialchars_uni($tool['name']);
$checked = "";
if($mybb->input['type'] == "modtool_".$tool['tid'])
{
$checked = "checked=\"checked\"";
}
eval("\$customthreadtools .= \"".$templates->get("moderation_delayedmoderation_custommodtool")."\";");
}
$mybb->input['delayedmoderation'] = $mybb->get_input('delayedmoderation', MyBB::INPUT_ARRAY);
if($mybb->input['action'] == "do_delayedmoderation" && $mybb->request_method == "post")
{
if(!in_array($mybb->input['type'], $allowed_types))
{
$mybb->input['type'] = '';
$errors[] = $lang->error_delayedmoderation_unsupported_type;
}
if($mybb->input['type'] == 'move' && (!isset($mybb->input['delayedmoderation']['method']) || !in_array($mybb->input['delayedmoderation']['method'], array('move', 'redirect', 'copy'))))
{
$mybb->input['delayedmoderation']['method'] = '';
$errors[] = $lang->error_delayedmoderation_unsupported_method;
}
if($mybb->input['type'] == 'move')
{
$newforum = get_forum($fid);
if(!$newforum || $newforum['type'] != "f" || $newforum['type'] == "f" && $newforum['linkto'] != '')
{
$errors[] = $lang->error_invalidforum;
}
}
if($mybb->input['date_day'] > 31 || $mybb->input['date_day'] < 1)
{
$errors[] = $lang->error_delayedmoderation_invalid_date_day;
}
if($mybb->input['date_month'] > 12 || $mybb->input['date_month'] < 1)
{
$errors[] = $lang->error_delayedmoderation_invalid_date_month;
}
if($mybb->input['date_year'] < gmdate('Y', TIME_NOW + $localized_time_offset))
{
$errors[] = $lang->error_delayedmoderation_invalid_date_year;
}
$date_time = explode(' ', $mybb->get_input('date_time'));
$date_time = explode(':', (string)$date_time[0]);
if(stristr($mybb->input['date_time'], 'pm'))
{
$date_time[0] = 12+$date_time[0];
if($date_time[0] >= 24)
{
$date_time[0] = '00';
}
}
$rundate = gmmktime((int)$date_time[0], (int)$date_time[1], date('s', TIME_NOW), $mybb->get_input('date_month', MyBB::INPUT_INT), $mybb->get_input('date_day', MyBB::INPUT_INT), $mybb->get_input('date_year', MyBB::INPUT_INT)) - $localized_time_offset;
if(!$errors)
{
if(is_array($mybb->input['tids']))
{
$mybb->input['tids'] = implode(',' , $mybb->input['tids']);
}
$did = $db->insert_query("delayedmoderation", array(
'type' => $db->escape_string($mybb->input['type']),
'delaydateline' => (int)$rundate,
'uid' => $mybb->user['uid'],
'tids' => $db->escape_string($mybb->input['tids']),
'fid' => $fid,
'dateline' => TIME_NOW,
'inputs' => $db->escape_string(my_serialize($mybb->input['delayedmoderation']))
));
$plugins->run_hooks('moderation_do_delayedmoderation');
$rundate_format = my_date('relative', $rundate, '', 2);
$lang->redirect_delayed_moderation_thread = $lang->sprintf($lang->redirect_delayed_moderation_thread, $rundate_format);
if(!empty($mybb->input['tid']))
{
moderation_redirect(get_thread_link($thread['tid']), $lang->redirect_delayed_moderation_thread);
}
else
{
if($mybb->get_input('inlinetype') == 'search')
{
moderation_redirect(get_forum_link($fid), $lang->sprintf($lang->redirect_delayed_moderation_search, $rundate_format));
}
else
{
moderation_redirect(get_forum_link($fid), $lang->sprintf($lang->redirect_delayed_moderation_forum, $rundate_format));
}
}
}
else
{
$type_selected = array();
foreach($allowed_types as $type)
{
$type_selected[$type] = '';
}
$type_selected[$mybb->get_input('type')] = "checked=\"checked\"";
$method_selected = array('move' => '', 'redirect' => '', 'copy' => '');
if(isset($mybb->input['delayedmoderation']['method']))
{
$method_selected[$mybb->input['delayedmoderation']['method']] = "checked=\"checked\"";
}
foreach(array('redirect_expire', 'new_forum', 'subject', 'threadurl') as $value)
{
if(!isset($mybb->input['delayedmoderation'][$value]))
{
$mybb->input['delayedmoderation'][$value] = '';
}
}
$mybb->input['delayedmoderation']['redirect_expire'] = (int)$mybb->input['delayedmoderation']['redirect_expire'];
$mybb->input['delayedmoderation']['new_forum'] = (int)$mybb->input['delayedmoderation']['new_forum'];
$mybb->input['delayedmoderation']['subject'] = htmlspecialchars_uni($mybb->input['delayedmoderation']['subject']);
$mybb->input['delayedmoderation']['threadurl'] = htmlspecialchars_uni($mybb->input['delayedmoderation']['threadurl']);
$forumselect = build_forum_jump("", $mybb->input['delayedmoderation']['new_forum'], 1, '', 0, true, '', "delayedmoderation[new_forum]");
}
}
else
{
$type_selected = array();
foreach($allowed_types as $type)
{
$type_selected[$type] = '';
}
$type_selected['openclosethread'] = "checked=\"checked\"";
$method_selected = array('move' => 'checked="checked"', 'redirect' => '', 'copy' => '');
$mybb->input['delayedmoderation']['redirect_expire'] = '';
$mybb->input['delayedmoderation']['subject'] = $thread['subject'];
$mybb->input['delayedmoderation']['threadurl'] = '';
$forumselect = build_forum_jump("", $fid, 1, '', 0, true, '', "delayedmoderation[new_forum]");
}
if(isset($errors) && count($errors) > 0)
{
$display_errors = inline_error($errors);
}
else
{
$display_errors = '';
}
$forum_cache = $cache->read("forums");
$actions = array(
'openclosethread' => $lang->open_close_thread,
'softdeleterestorethread' => $lang->softdelete_restore_thread,
'deletethread' => $lang->delete_thread,
'move' => $lang->move_copy_thread,
'stick' => $lang->stick_unstick_thread,
'merge' => $lang->merge_threads,
'removeredirects' => $lang->remove_redirects,
'removesubscriptions' => $lang->remove_subscriptions,
'approveunapprovethread' => $lang->approve_unapprove_thread
);
switch($db->type)
{
case "pgsql":
case "sqlite":
$query = $db->simple_select("modtools", 'tid, name', "(','||forums||',' LIKE '%,$fid,%' OR ','||forums||',' LIKE '%,-1,%' OR forums='') AND type = 't'");
break;
default:
$query = $db->simple_select("modtools", 'tid, name', "(CONCAT(',',forums,',') LIKE '%,$fid,%' OR CONCAT(',',forums,',') LIKE '%,-1,%' OR forums='') AND type = 't'");
}
while($tool = $db->fetch_array($query))
{
$actions['modtool_'.$tool['tid']] = htmlspecialchars_uni($tool['name']);
}
$delayedmods = '';
$trow = alt_trow(1);
if($tid == 0)
{
// Inline thread moderation is used
if($mybb->get_input('inlinetype') == 'search')
{
$tids = getids($mybb->get_input('searchid'), 'search');
}
else
{
$tids = getids($fid, "forum");
}
$where_array = array();
switch($db->type)
{
case "pgsql":
case "sqlite":
foreach($tids as $like)
{
$where_array[] = "','||d.tids||',' LIKE '%,".$db->escape_string($like).",%'";
}
$where_statement = implode(" OR ", $where_array);
break;
default:
foreach($tids as $like)
{
$where_array[] = "CONCAT(',',d.tids,',') LIKE '%,".$db->escape_string($like).",%'";
}
$where_statement = implode(" OR ", $where_array);
}
$query = $db->query("
SELECT d.*, u.username, f.name AS fname
FROM ".TABLE_PREFIX."delayedmoderation d
LEFT JOIN ".TABLE_PREFIX."users u ON (u.uid=d.uid)
LEFT JOIN ".TABLE_PREFIX."forums f ON (f.fid=d.fid)
WHERE ".$where_statement."
ORDER BY d.dateline DESC
LIMIT 0, 20
");
}
else
{
switch($db->type)
{
case "pgsql":
case "sqlite":
$query = $db->query("
SELECT d.*, u.username, f.name AS fname
FROM ".TABLE_PREFIX."delayedmoderation d
LEFT JOIN ".TABLE_PREFIX."users u ON (u.uid=d.uid)
LEFT JOIN ".TABLE_PREFIX."forums f ON (f.fid=d.fid)
WHERE ','||d.tids||',' LIKE '%,{$tid},%'
ORDER BY d.dateline DESC
LIMIT 0, 20
");
break;
default:
$query = $db->query("
SELECT d.*, u.username, f.name AS fname
FROM ".TABLE_PREFIX."delayedmoderation d
LEFT JOIN ".TABLE_PREFIX."users u ON (u.uid=d.uid)
LEFT JOIN ".TABLE_PREFIX."forums f ON (f.fid=d.fid)
WHERE CONCAT(',',d.tids,',') LIKE '%,{$tid},%'
ORDER BY d.dateline DESC
LIMIT 0, 20
");
}
}
while($delayedmod = $db->fetch_array($query))
{
$delayedmod['dateline'] = my_date("jS M Y, {$mybb->settings['timeformat']}", $delayedmod['delaydateline']);
$delayedmod['username'] = htmlspecialchars_uni($delayedmod['username']);
$delayedmod['profilelink'] = build_profile_link($delayedmod['username'], $delayedmod['uid']);
$delayedmod['action'] = $actions[$delayedmod['type']];
$info = '';
if(strpos($delayedmod['tids'], ',') === false)
{
$delayed_thread = get_thread($delayedmod['tids']);
$delayed_thread['link'] = get_thread_link($delayed_thread['tid']);
$delayed_thread['subject'] = htmlspecialchars_uni($parser->parse_badwords($delayed_thread['subject']));
eval("\$info .= \"".$templates->get("moderation_delayedmodaction_notes_thread_single")."\";");
}
else
{
eval("\$info .= \"".$templates->get("moderation_delayedmodaction_notes_thread_multiple")."\";");
}
if($delayedmod['fname'])
{
$delayedmod['link'] = get_forum_link($delayedmod['fid']);
$delayedmod['fname'] = htmlspecialchars_uni($delayedmod['fname']);
eval("\$info .= \"".$templates->get("moderation_delayedmodaction_notes_forum")."\";");
}
$delayedmod['inputs'] = my_unserialize($delayedmod['inputs']);
if($delayedmod['type'] == 'move')
{
$delayedmod['link'] = get_forum_link($delayedmod['inputs']['new_forum']);
$delayedmod['name'] = htmlspecialchars_uni($forum_cache[$delayedmod['inputs']['new_forum']]['name']);
eval("\$info .= \"".$templates->get("moderation_delayedmodaction_notes_new_forum")."\";");
if($delayedmod['inputs']['method'] == "redirect")
{
if((int)$delayedmod['inputs']['redirect_expire'] == 0)
{
$redirect_expire_bit = $lang->redirect_forever;
}
else
{
$redirect_expire_bit = (int)$delayedmod['inputs']['redirect_expire']." {$lang->days}";
}
eval("\$info .= \"".$templates->get("moderation_delayedmodaction_notes_redirect")."\";");
}
}
else if($delayedmod['type'] == 'merge')
{
$delayedmod['subject'] = htmlspecialchars_uni($delayedmod['inputs']['subject']);
$delayedmod['threadurl'] = htmlspecialchars_uni($delayedmod['inputs']['threadurl']);
eval("\$info .= \"".$templates->get("moderation_delayedmodaction_notes_merge")."\";");
}
eval("\$delayedmods .= \"".$templates->get("moderation_delayedmodaction_notes")."\";");
$trow = alt_trow();
}
if(!$delayedmods)
{
$cols = 5;
eval("\$delayedmods = \"".$templates->get("moderation_delayedmodaction_error")."\";");
}
$url = '';
if($mybb->get_input('tid', MyBB::INPUT_INT))
{
$lang->threads = $lang->thread;
$thread['link'] = get_thread_link($tid);
eval("\$threads = \"".$templates->get("moderation_delayedmoderation_thread")."\";");
eval("\$moderation_delayedmoderation_merge = \"".$templates->get("moderation_delayedmoderation_merge")."\";");
}
else
{
if($mybb->get_input('inlinetype') == 'search')
{
$tids = getids($mybb->get_input('searchid'), 'search');
$url = htmlspecialchars_uni($mybb->get_input('url'));
}
else
{
$tids = getids($fid, "forum");
}
if(count($tids) < 1)
{
error($lang->error_inline_nothreadsselected);
}
$threads = $lang->sprintf($lang->threads_selected, count($tids));
$moderation_delayedmoderation_merge = '';
}
$mybb->input['redirect_expire'] = $mybb->get_input('redirect_expire');
eval("\$moderation_delayedmoderation_move = \"".$templates->get("moderation_delayedmoderation_move")."\";");
// Generate form elements for date form
$dateday = '';
for($day = 1; $day <= 31; ++$day)
{
$selected = '';
if($mybb->get_input('date_day', MyBB::INPUT_INT) == $day)
{
$selected = ' selected="selected"';
}
eval('$dateday .= "'.$templates->get('moderation_delayedmoderation_date_day').'";');
}
$datemonth = array();
foreach(array('01', '02', '03', '04', '05', '06', '07', '08', '09', '10', '11', '12') as $month)
{
$datemonth[$month] = '';
if($mybb->get_input('date_month', MyBB::INPUT_INT) == (int)$month)
{
$datemonth[$month] = ' selected="selected"';
}
}
eval('$datemonth = "'.$templates->get('moderation_delayedmoderation_date_month').'";');
$dateyear = gmdate('Y', TIME_NOW + $localized_time_offset);
$datetime = gmdate($mybb->settings['timeformat'], TIME_NOW + $localized_time_offset);
$plugins->run_hooks("moderation_delayedmoderation");
eval("\$delayedmoderation = \"".$templates->get("moderation_delayedmoderation")."\";");
output_page($delayedmoderation);
break;
// Open or close a thread
case "openclosethread":
// Verify incoming POST request
verify_post_check($mybb->get_input('my_post_key'));
if(!is_moderator($fid, "canopenclosethreads"))
{
error_no_permission();
}
if($thread['closed'] == 1)
{
$openclose = $lang->opened;
$redirect = $lang->redirect_openthread;
$moderation->open_threads($tid);
}
else
{
$openclose = $lang->closed;
$redirect = $lang->redirect_closethread;
$moderation->close_threads($tid);
}
$lang->mod_process = $lang->sprintf($lang->mod_process, $openclose);
log_moderator_action($modlogdata, $lang->mod_process);
moderation_redirect(get_thread_link($thread['tid']), $redirect);
break;
// Stick or unstick that post to the top bab!
case "stick":
// Verify incoming POST request
verify_post_check($mybb->get_input('my_post_key'));
if(!is_moderator($fid, "canstickunstickthreads"))
{
error_no_permission();
}
$plugins->run_hooks("moderation_stick");
if($thread['sticky'] == 1)
{
$stuckunstuck = $lang->unstuck;
$redirect = $lang->redirect_unstickthread;
$moderation->unstick_threads($tid);
}
else
{
$stuckunstuck = $lang->stuck;
$redirect = $lang->redirect_stickthread;
$moderation->stick_threads($tid);
}
$lang->mod_process = $lang->sprintf($lang->mod_process, $stuckunstuck);
log_moderator_action($modlogdata, $lang->mod_process);
moderation_redirect(get_thread_link($thread['tid']), $redirect);
break;
// Remove redirects to a specific thread
case "removeredirects":
// Verify incoming POST request
verify_post_check($mybb->get_input('my_post_key'));
if(!is_moderator($fid, "canmanagethreads"))
{
error_no_permission();
}
$plugins->run_hooks("moderation_removeredirects");
$moderation->remove_redirects($tid);
log_moderator_action($modlogdata, $lang->redirects_removed);
moderation_redirect(get_thread_link($thread['tid']), $lang->redirect_redirectsremoved);
break;
// Delete thread confirmation page
case "deletethread":
add_breadcrumb($lang->nav_deletethread);
if(!is_moderator($fid, "candeletethreads"))
{
if($permissions['candeletethreads'] != 1 || $mybb->user['uid'] != $thread['uid'])
{
error_no_permission();
}
}
$plugins->run_hooks("moderation_deletethread");
eval("\$deletethread = \"".$templates->get("moderation_deletethread")."\";");
output_page($deletethread);
break;
// Delete the actual thread here
case "do_deletethread":
// Verify incoming POST request
verify_post_check($mybb->get_input('my_post_key'));
if(!is_moderator($fid, "candeletethreads"))
{
if($permissions['candeletethreads'] != 1 || $mybb->user['uid'] != $thread['uid'])
{
error_no_permission();
}
}
$plugins->run_hooks("moderation_do_deletethread");
// Log the subject of the deleted thread
$modlogdata['thread_subject'] = $thread['subject'];
$thread['subject'] = $db->escape_string($thread['subject']);
$lang->thread_deleted = $lang->sprintf($lang->thread_deleted, $thread['subject']);
log_moderator_action($modlogdata, $lang->thread_deleted);
$moderation->delete_thread($tid);
mark_reports($tid, "thread");
moderation_redirect(get_forum_link($fid), $lang->redirect_threaddeleted);
break;
// Delete the poll from a thread confirmation page
case "deletepoll":
add_breadcrumb($lang->nav_deletepoll);
if(!is_moderator($fid, "canmanagepolls"))
{
if($permissions['candeletethreads'] != 1 || $mybb->user['uid'] != $thread['uid'])
{
error_no_permission();
}
}
$plugins->run_hooks("moderation_deletepoll");
$query = $db->simple_select("polls", "pid", "tid='$tid'");
$poll = $db->fetch_array($query);
if(!$poll)
{
error($lang->error_invalidpoll);
}
eval("\$deletepoll = \"".$templates->get("moderation_deletepoll")."\";");
output_page($deletepoll);
break;
// Delete the actual poll here!
case "do_deletepoll":
// Verify incoming POST request
verify_post_check($mybb->get_input('my_post_key'));
if(!isset($mybb->input['delete']))
{
error($lang->redirect_pollnotdeleted);
}
if(!is_moderator($fid, "canmanagepolls"))
{
if($permissions['candeletethreads'] != 1 || $mybb->user['uid'] != $thread['uid'])
{
error_no_permission();
}
}
$query = $db->simple_select("polls", "pid", "tid = $tid");
$poll = $db->fetch_array($query);
if(!$poll)
{
error($lang->error_invalidpoll);
}
$plugins->run_hooks("moderation_do_deletepoll");
$lang->poll_deleted = $lang->sprintf($lang->poll_deleted, $thread['subject']);
log_moderator_action($modlogdata, $lang->poll_deleted);
$moderation->delete_poll($poll['pid']);
moderation_redirect(get_thread_link($thread['tid']), $lang->redirect_polldeleted);
break;
// Approve a thread
case "approvethread":
// Verify incoming POST request
verify_post_check($mybb->get_input('my_post_key'));
if(!is_moderator($fid, "canapproveunapprovethreads"))
{
error_no_permission();
}
$thread = get_thread($tid);
$plugins->run_hooks("moderation_approvethread");
$lang->thread_approved = $lang->sprintf($lang->thread_approved, $thread['subject']);
log_moderator_action($modlogdata, $lang->thread_approved);
$moderation->approve_threads($tid, $fid);
moderation_redirect(get_thread_link($thread['tid']), $lang->redirect_threadapproved);
break;
// Unapprove a thread
case "unapprovethread":
// Verify incoming POST request
verify_post_check($mybb->get_input('my_post_key'));
if(!is_moderator($fid, "canapproveunapprovethreads"))
{
error_no_permission();
}
$thread = get_thread($tid);
$plugins->run_hooks("moderation_unapprovethread");
$lang->thread_unapproved = $lang->sprintf($lang->thread_unapproved, $thread['subject']);
log_moderator_action($modlogdata, $lang->thread_unapproved);
$moderation->unapprove_threads($tid);
moderation_redirect(get_thread_link($thread['tid']), $lang->redirect_threadunapproved);
break;
// Restore a thread
case "restorethread":
// Verify incoming POST request
verify_post_check($mybb->get_input('my_post_key'));
if(!is_moderator($fid, "canrestorethreads"))
{
error_no_permission();
}
$thread = get_thread($tid);
$plugins->run_hooks("moderation_restorethread");
$lang->thread_restored = $lang->sprintf($lang->thread_restored, $thread['subject']);
log_moderator_action($modlogdata, $lang->thread_restored);
$moderation->restore_threads($tid);
moderation_redirect(get_thread_link($thread['tid']), $lang->redirect_threadrestored);
break;
// Soft delete a thread
case "softdeletethread":
// Verify incoming POST request
verify_post_check($mybb->get_input('my_post_key'));
if(!is_moderator($fid, "cansoftdeletethreads"))
{
error_no_permission();
}
$thread = get_thread($tid);
$plugins->run_hooks("moderation_softdeletethread");
$lang->thread_soft_deleted = $lang->sprintf($lang->thread_soft_deleted, $thread['subject']);
log_moderator_action($modlogdata, $lang->thread_soft_deleted);
$moderation->soft_delete_threads($tid);
moderation_redirect(get_thread_link($thread['tid']), $lang->redirect_threadsoftdeleted);
break;
// Move a thread
case "move":
add_breadcrumb($lang->nav_move);
if(!is_moderator($fid, "canmanagethreads"))
{
error_no_permission();
}
$plugins->run_hooks("moderation_move");
$forumselect = build_forum_jump("", '', 1, '', 0, true, '', "moveto");
eval("\$movethread = \"".$templates->get("moderation_move")."\";");
output_page($movethread);
break;
// Let's get this thing moving!
case "do_move":
// Verify incoming POST request
verify_post_check($mybb->get_input('my_post_key'));
$moveto = $mybb->get_input('moveto', MyBB::INPUT_INT);
$method = $mybb->get_input('method');
if(!is_moderator($fid, "canmanagethreads"))
{
error_no_permission();
}
// Check if user has moderator permission to move to destination
if(!is_moderator($moveto, "canmanagethreads") && !is_moderator($fid, "canmovetononmodforum"))
{
error_no_permission();
}
$newperms = forum_permissions($moveto);
if($newperms['canview'] == 0 && !is_moderator($fid, "canmovetononmodforum"))
{
error_no_permission();
}
$newforum = get_forum($moveto);
if(!$newforum || $newforum['type'] != "f" || $newforum['type'] == "f" && $newforum['linkto'] != '')
{
error($lang->error_invalidforum);
}
if($method != "copy" && $thread['fid'] == $moveto)
{
error($lang->error_movetosameforum);
}
$plugins->run_hooks('moderation_do_move');
$expire = 0;
if($mybb->get_input('redirect_expire', MyBB::INPUT_INT) > 0)
{
$expire = TIME_NOW + ($mybb->get_input('redirect_expire', MyBB::INPUT_INT) * 86400);
}
$the_thread = $tid;
$newtid = $moderation->move_thread($tid, $moveto, $method, $expire);
switch($method)
{
case "copy":
log_moderator_action($modlogdata, $lang->thread_copied);
break;
default:
case "move":
case "redirect":
log_moderator_action($modlogdata, $lang->thread_moved);
break;
}
moderation_redirect(get_thread_link($newtid), $lang->redirect_threadmoved);
break;
// Viewing thread notes
case "viewthreadnotes":
if(!is_moderator($fid))
{
error_no_permission();
}
// Make sure we are looking at a real thread here.
if(!$thread)
{
error($lang->error_nomember);
}
$plugins->run_hooks('moderation_viewthreadnotes');
$lang->view_notes_for = $lang->sprintf($lang->view_notes_for, $thread['subject']);
$thread['notes'] = nl2br(htmlspecialchars_uni($thread['notes']));
eval("\$viewthreadnotes = \"".$templates->get("moderation_viewthreadnotes", 1, 0)."\";");
echo $viewthreadnotes;
break;
// Thread notes editor
case "threadnotes":
add_breadcrumb($lang->nav_threadnotes);
if(!is_moderator($fid, "canmanagethreads"))
{
error_no_permission();
}
$thread['notes'] = htmlspecialchars_uni($parser->parse_badwords($thread['notes']));
$trow = alt_trow(1);
if(is_moderator($fid, "canviewmodlog"))
{
$query = $db->query("
SELECT l.*, u.username, t.subject AS tsubject, f.name AS fname, p.subject AS psubject
FROM ".TABLE_PREFIX."moderatorlog l
LEFT JOIN ".TABLE_PREFIX."users u ON (u.uid=l.uid)
LEFT JOIN ".TABLE_PREFIX."threads t ON (t.tid=l.tid)
LEFT JOIN ".TABLE_PREFIX."forums f ON (f.fid=l.fid)
LEFT JOIN ".TABLE_PREFIX."posts p ON (p.pid=l.pid)
WHERE t.tid='$tid'
ORDER BY l.dateline DESC
LIMIT 0, 20
");
$modactions = '';
while($modaction = $db->fetch_array($query))
{
$modaction['dateline'] = my_date("jS M Y, G:i", $modaction['dateline']);
$modaction['username'] = htmlspecialchars_uni($modaction['username']);
$modaction['profilelink'] = build_profile_link($modaction['username'], $modaction['uid']);
$modaction['action'] = htmlspecialchars_uni($modaction['action']);
$info = '';
if($modaction['tsubject'])
{
$modaction['tsubject'] = htmlspecialchars_uni($parser->parse_badwords($modaction['tsubject']));
$modaction['threadlink'] = get_thread_link($modaction['tid']);
eval("\$info .= \"".$templates->get("moderation_threadnotes_modaction_thread")."\";");
}
if($modaction['fname'])
{
$modaction['fname'] = htmlspecialchars_uni($modaction['fname']);
$modaction['forumlink'] = get_forum_link($modaction['fid']);
eval("\$info .= \"".$templates->get("moderation_threadnotes_modaction_forum")."\";");
}
if($modaction['psubject'])
{
$modaction['psubject'] = htmlspecialchars_uni($parser->parse_badwords($modaction['psubject']));
$modaction['postlink'] = get_post_link($modaction['pid']);
eval("\$info .= \"".$templates->get("moderation_threadnotes_modaction_post")."\";");
}
eval("\$modactions .= \"".$templates->get("moderation_threadnotes_modaction")."\";");
$trow = alt_trow();
}
if(!$modactions)
{
eval("\$modactions = \"".$templates->get("moderation_threadnotes_modaction_error")."\";");
}
}
$actions = array(
'openclosethread' => $lang->open_close_thread,
'deletethread' => $lang->delete_thread,
'move' => $lang->move_copy_thread,
'stick' => $lang->stick_unstick_thread,
'merge' => $lang->merge_threads,
'removeredirects' => $lang->remove_redirects,
'removesubscriptions' => $lang->remove_subscriptions,
'approveunapprovethread' => $lang->approve_unapprove_thread
);
switch($db->type)
{
case "pgsql":
case "sqlite":
$query = $db->simple_select("modtools", 'tid, name', "(','||forums||',' LIKE '%,$fid,%' OR ','||forums||',' LIKE '%,-1,%' OR forums='') AND type = 't'");
break;
default:
$query = $db->simple_select("modtools", 'tid, name', "(CONCAT(',',forums,',') LIKE '%,$fid,%' OR CONCAT(',',forums,',') LIKE '%,-1,%' OR forums='') AND type = 't'");
}
while($tool = $db->fetch_array($query))
{
$actions['modtool_'.$tool['tid']] = htmlspecialchars_uni($tool['name']);
}
$forum_cache = $cache->read("forums");
$trow = alt_trow(1);
switch($db->type)
{
case "pgsql":
case "sqlite":
$query = $db->query("
SELECT d.*, u.username, f.name AS fname
FROM ".TABLE_PREFIX."delayedmoderation d
LEFT JOIN ".TABLE_PREFIX."users u ON (u.uid=d.uid)
LEFT JOIN ".TABLE_PREFIX."forums f ON (f.fid=d.fid)
WHERE ','||d.tids||',' LIKE '%,{$tid},%'
ORDER BY d.dateline DESC
LIMIT 0, 20
");
break;
default:
$query = $db->query("
SELECT d.*, u.username, f.name AS fname
FROM ".TABLE_PREFIX."delayedmoderation d
LEFT JOIN ".TABLE_PREFIX."users u ON (u.uid=d.uid)
LEFT JOIN ".TABLE_PREFIX."forums f ON (f.fid=d.fid)
WHERE CONCAT(',',d.tids,',') LIKE '%,{$tid},%'
ORDER BY d.dateline DESC
LIMIT 0, 20
");
}
$delayedmods = '';
while($delayedmod = $db->fetch_array($query))
{
$delayedmod['dateline'] = my_date("jS M Y, G:i", $delayedmod['delaydateline']);
$delayedmod['username'] = htmlspecialchars_uni($delayedmod['username']);
$delayedmod['profilelink'] = build_profile_link($delayedmod['username'], $delayedmod['uid']);
$delayedmod['action'] = $actions[$delayedmod['type']];
$info = '';
if(strpos($delayedmod['tids'], ',') === false)
{
$delayed_thread['link'] = get_thread_link($delayedmod['tids']);
$delayed_thread['subject'] = htmlspecialchars_uni($thread['subject']);
eval("\$info .= \"".$templates->get("moderation_delayedmodaction_notes_thread_single")."\";");
}
else
{
eval("\$info .= \"".$templates->get("moderation_delayedmodaction_notes_thread_multiple")."\";");
}
if($delayedmod['fname'])
{
$delayedmod['link'] = get_forum_link($delayedmod['fid']);
$delayedmod['fname'] = htmlspecialchars_uni($delayedmod['fname']);
eval("\$info .= \"".$templates->get("moderation_delayedmodaction_notes_forum")."\";");
}
$delayedmod['inputs'] = my_unserialize($delayedmod['inputs']);
if($delayedmod['type'] == 'move')
{
$delayedmod['link'] = get_forum_link($delayedmod['inputs']['new_forum']);
$delayedmod['name'] = htmlspecialchars_uni($forum_cache[$delayedmod['inputs']['new_forum']]['name']);
eval("\$info .= \"".$templates->get("moderation_delayedmodaction_notes_new_forum")."\";");
if($delayedmod['inputs']['method'] == "redirect")
{
if((int)$delayedmod['inputs']['redirect_expire'] == 0)
{
$redirect_expire_bit = $lang->redirect_forever;
}
else
{
$redirect_expire_bit = (int)$delayedmod['inputs']['redirect_expire']." {$lang->days}";
}
eval("\$info .= \"".$templates->get("moderation_delayedmodaction_notes_redirect")."\";");
}
}
else if($delayedmod['type'] == 'merge')
{
$delayedmod['subject'] = htmlspecialchars_uni($delayedmod['inputs']['subject']);
$delayedmod['threadurl'] = htmlspecialchars_uni($delayedmod['inputs']['threadurl']);
eval("\$info .= \"".$templates->get("moderation_delayedmodaction_notes_merge")."\";");
}
eval("\$delayedmods .= \"".$templates->get("moderation_threadnotes_delayedmodaction")."\";");
$trow = alt_trow();
}
if(!$delayedmods)
{
$cols = 4;
eval("\$delayedmods = \"".$templates->get("moderation_delayedmodaction_error")."\";");
}
$plugins->run_hooks("moderation_threadnotes");
eval("\$threadnotes = \"".$templates->get("moderation_threadnotes")."\";");
output_page($threadnotes);
break;
// Update the thread notes!
case "do_threadnotes":
// Verify incoming POST request
verify_post_check($mybb->get_input('my_post_key'));
if(!is_moderator($fid, "canmanagethreads"))
{
error_no_permission();
}
$plugins->run_hooks("moderation_do_threadnotes");
log_moderator_action($modlogdata, $lang->thread_notes_edited);
$sqlarray = array(
"notes" => $db->escape_string($mybb->get_input('threadnotes')),
);
$db->update_query("threads", $sqlarray, "tid='$tid'");
moderation_redirect(get_thread_link($thread['tid']), $lang->redirect_threadnotesupdated);
break;
// Let's look up the ip address of a post
case "getip":
add_breadcrumb($lang->nav_getip);
if(!is_moderator($fid, "canviewips"))
{
error_no_permission();
}
$post['ipaddress'] = my_inet_ntop($db->unescape_binary($post['ipaddress']));
$hostname = @gethostbyaddr($post['ipaddress']);
if(!$hostname || $hostname == $post['ipaddress'])
{
$hostname = $lang->resolve_fail;
}
$post['username'] = htmlspecialchars_uni($post['username']);
$username = build_profile_link($post['username'], $post['uid']);
// Moderator options
$modoptions = "";
if($mybb->usergroup['canmodcp'] == 1 && $mybb->usergroup['canuseipsearch'] == 1)
{
$ipaddress = $post['ipaddress'];
eval("\$modoptions = \"".$templates->get("moderation_getip_modoptions")."\";");
}
$plugins->run_hooks('moderation_getip');
eval("\$getip = \"".$templates->get("moderation_getip")."\";");
output_page($getip);
break;
// Let's look up the ip address of a PM
case "getpmip":
if($pmid <= 0)
{
error($lang->error_invalidpm);
}
add_breadcrumb($lang->nav_pms, "private.php");
$pm['subject'] = htmlspecialchars_uni($parser->parse_badwords($pm['subject']));
add_breadcrumb($pm['subject'], "private.php?action=read&amp;pmid={$pmid}");
add_breadcrumb($lang->nav_getpmip);
if(!$mybb->usergroup['issupermod'])
{
error_no_permission();
}
$pm['ipaddress'] = my_inet_ntop($db->unescape_binary($pm['ipaddress']));
$hostname = @gethostbyaddr($pm['ipaddress']);
if(!$hostname || $hostname == $pm['ipaddress'])
{
$hostname = $lang->resolve_fail;
}
$name = $db->fetch_field($db->simple_select('users', 'username', "uid = {$pm['fromid']}"), 'username');
$username = build_profile_link($name, $pm['fromid']);
// Moderator options
$modoptions = "";
if($mybb->usergroup['canmodcp'] == 1 && $mybb->usergroup['canuseipsearch'] == 1)
{
$ipaddress = $pm['ipaddress'];
eval("\$modoptions = \"".$templates->get("moderation_getip_modoptions")."\";");
}
$plugins->run_hooks('moderation_getpmip');
eval("\$getpmip = \"".$templates->get("moderation_getpmip")."\";");
output_page($getpmip);
break;
// Merge threads
case "merge":
add_breadcrumb($lang->nav_merge);
if(!is_moderator($fid, "canmanagethreads"))
{
error_no_permission();
}
$plugins->run_hooks("moderation_merge");
eval("\$merge = \"".$templates->get("moderation_merge")."\";");
output_page($merge);
break;
// Let's get those threads together baby! (Merge threads)
case "do_merge":
// Verify incoming POST request
verify_post_check($mybb->get_input('my_post_key'));
if(!is_moderator($fid, "canmanagethreads"))
{
error_no_permission();
}
$plugins->run_hooks("moderation_do_merge");
// explode at # sign in a url (indicates a name reference) and reassign to the url
$realurl = explode("#", $mybb->get_input('threadurl'));
$mybb->input['threadurl'] = $realurl[0];
// Are we using an SEO URL?
if(substr($mybb->input['threadurl'], -4) == "html")
{
// Get thread to merge's tid the SEO way
preg_match("#thread-([0-9]+)?#i", $mybb->input['threadurl'], $threadmatch);
preg_match("#post-([0-9]+)?#i", $mybb->input['threadurl'], $postmatch);
if($threadmatch[1])
{
$parameters['tid'] = $threadmatch[1];
}
if($postmatch[1])
{
$parameters['pid'] = $postmatch[1];
}
}
else
{
// Get thread to merge's tid the normal way
$splitloc = explode(".php", $mybb->input['threadurl']);
$temp = explode("&", my_substr($splitloc[1], 1));
if(!empty($temp))
{
for($i = 0; $i < count($temp); $i++)
{
$temp2 = explode("=", $temp[$i], 2);
$parameters[$temp2[0]] = $temp2[1];
}
}
else
{
$temp2 = explode("=", $splitloc[1], 2);
$parameters[$temp2[0]] = $temp2[1];
}
}
if(!empty($parameters['pid']) && empty($parameters['tid']))
{
$post = get_post($parameters['pid']);
$mergetid = (int)$post['tid'];
}
elseif(!empty($parameters['tid']))
{
$mergetid = (int)$parameters['tid'];
}
else
{
$mergetid = 0;
}
$mergethread = get_thread($mergetid);
if(!$mergethread)
{
error($lang->error_badmergeurl);
}
if($mergetid == $tid)
{ // sanity check
error($lang->error_mergewithself);
}
if(!is_moderator($mergethread['fid'], "canmanagethreads"))
{
error_no_permission();
}
if(isset($mybb->input['subject']))
{
$subject = $mybb->get_input('subject');
}
else
{
$subject = $thread['subject'];
}
$moderation->merge_threads($mergetid, $tid, $subject);
log_moderator_action($modlogdata, $lang->thread_merged);
moderation_redirect(get_thread_link($tid), $lang->redirect_threadsmerged);
break;
// Divorce the posts in this thread (Split!)
case "split":
add_breadcrumb($lang->nav_split);
if(!is_moderator($fid, "canmanagethreads"))
{
error_no_permission();
}
$query = $db->query("
SELECT p.*, u.*
FROM ".TABLE_PREFIX."posts p
LEFT JOIN ".TABLE_PREFIX."users u ON (p.uid=u.uid)
WHERE tid='$tid'
ORDER BY dateline ASC
");
$numposts = $db->num_rows($query);
if($numposts <= 1)
{
error($lang->error_cantsplitonepost);
}
$altbg = "trow1";
$posts = '';
while($post = $db->fetch_array($query))
{
$postdate = my_date('relative', $post['dateline']);
$post['username'] = htmlspecialchars_uni($post['username']);
$parser_options = array(
"allow_html" => $forum['allowhtml'],
"allow_mycode" => $forum['allowmycode'],
"allow_smilies" => $forum['allowsmilies'],
"allow_imgcode" => $forum['allowimgcode'],
"allow_videocode" => $forum['allowvideocode'],
"filter_badwords" => 1
);
if($post['smilieoff'] == 1)
{
$parser_options['allow_smilies'] = 0;
}
$message = $parser->parse_message($post['message'], $parser_options);
eval("\$posts .= \"".$templates->get("moderation_split_post")."\";");
$altbg = alt_trow();
}
$forumselect = build_forum_jump("", $fid, 1, '', 0, true, '', "moveto");
$plugins->run_hooks("moderation_split");
eval("\$split = \"".$templates->get("moderation_split")."\";");
output_page($split);
break;
// Let's break them up buddy! (Do the split)
case "do_split":
// Verify incoming POST request
verify_post_check($mybb->get_input('my_post_key'));
if(!is_moderator($fid, "canmanagethreads"))
{
error_no_permission();
}
$plugins->run_hooks("moderation_do_split");
$mybb->input['splitpost'] = $mybb->get_input('splitpost', MyBB::INPUT_ARRAY);
if(empty($mybb->input['splitpost']))
{
error($lang->error_nosplitposts);
}
$query = $db->simple_select("posts", "COUNT(*) AS totalposts", "tid='{$tid}'");
$count = $db->fetch_array($query);
if($count['totalposts'] == 1)
{
error($lang->error_cantsplitonepost);
}
if($count['totalposts'] == count($mybb->input['splitpost']))
{
error($lang->error_cantsplitall);
}
if(!empty($mybb->input['moveto']))
{
$moveto = $mybb->get_input('moveto', MyBB::INPUT_INT);
}
else
{
$moveto = $fid;
}
$newforum = get_forum($moveto);
if(!$newforum || $newforum['type'] != "f" || $newforum['type'] == "f" && $newforum['linkto'] != '')
{
error($lang->error_invalidforum);
}
$pids = array();
// move the selected posts over
$query = $db->simple_select("posts", "pid", "tid='$tid'");
while($post = $db->fetch_array($query))
{
if(isset($mybb->input['splitpost'][$post['pid']]) && $mybb->input['splitpost'][$post['pid']] == 1)
{
$pids[] = $post['pid'];
}
mark_reports($post['pid'], "post");
}
$newtid = $moderation->split_posts($pids, $tid, $moveto, $mybb->get_input('newsubject'));
log_moderator_action($modlogdata, $lang->thread_split);
moderation_redirect(get_thread_link($newtid), $lang->redirect_threadsplit);
break;
// Delete Thread Subscriptions
case "removesubscriptions":
// Verify incoming POST request
verify_post_check($mybb->get_input('my_post_key'));
if(!is_moderator($fid, "canmanagethreads"))
{
error_no_permission();
}
$plugins->run_hooks("moderation_removesubscriptions");
$moderation->remove_thread_subscriptions($tid, true);
log_moderator_action($modlogdata, $lang->removed_subscriptions);
moderation_redirect(get_thread_link($thread['tid']), $lang->redirect_removed_subscriptions);
break;
// Delete Threads - Inline moderation
case "multideletethreads":
add_breadcrumb($lang->nav_multi_deletethreads);
if(!empty($mybb->input['searchid']))
{
// From search page
$threads = getids($mybb->get_input('searchid'), 'search');
if(!is_moderator_by_tids($threads, 'candeletethreads'))
{
error_no_permission();
}
}
else
{
$threads = getids($fid, 'forum');
if(!is_moderator($fid, 'candeletethreads'))
{
error_no_permission();
}
}
if(count($threads) < 1)
{
error($lang->error_inline_nothreadsselected);
}
$inlineids = implode("|", $threads);
if($mybb->get_input('inlinetype') == 'search')
{
clearinline($mybb->get_input('searchid', MyBB::INPUT_INT), 'search');
}
else
{
clearinline($fid, 'forum');
}
$return_url = htmlspecialchars_uni($mybb->get_input('url'));
eval("\$multidelete = \"".$templates->get("moderation_inline_deletethreads")."\";");
output_page($multidelete);
break;
// Actually delete the threads - Inline moderation
case "do_multideletethreads":
// Verify incoming POST request
verify_post_check($mybb->get_input('my_post_key'));
$threadlist = explode("|", $mybb->get_input('threads'));
if(!is_moderator_by_tids($threadlist, "candeletethreads"))
{
error_no_permission();
}
foreach($threadlist as $tid)
{
$tid = (int)$tid;
$moderation->delete_thread($tid);
$tlist[] = $tid;
}
log_moderator_action($modlogdata, $lang->multi_deleted_threads);
if($mybb->get_input('inlinetype') == 'search')
{
clearinline($mybb->get_input('searchid', MyBB::INPUT_INT), 'search');
}
else
{
clearinline($fid, 'forum');
}
mark_reports($tlist, "threads");
moderation_redirect(get_forum_link($fid), $lang->redirect_inline_threadsdeleted);
break;
// Open threads - Inline moderation
case "multiopenthreads":
// Verify incoming POST request
verify_post_check($mybb->get_input('my_post_key'));
if(!empty($mybb->input['searchid']))
{
// From search page
$threads = getids($mybb->get_input('searchid'), 'search');
if(!is_moderator_by_tids($threads, 'canopenclosethreads'))
{
error_no_permission();
}
}
else
{
$threads = getids($fid, 'forum');
if(!is_moderator($fid, 'canopenclosethreads'))
{
error_no_permission();
}
}
if(count($threads) < 1)
{
error($lang->error_inline_nothreadsselected);
}
$moderation->open_threads($threads);
log_moderator_action($modlogdata, $lang->multi_opened_threads);
if($mybb->get_input('inlinetype') == 'search')
{
clearinline($mybb->get_input('searchid', MyBB::INPUT_INT), 'search');
}
else
{
clearinline($fid, 'forum');
}
moderation_redirect(get_forum_link($fid), $lang->redirect_inline_threadsopened);
break;
// Close threads - Inline moderation
case "multiclosethreads":
// Verify incoming POST request
verify_post_check($mybb->get_input('my_post_key'));
if(!empty($mybb->input['searchid']))
{
// From search page
$threads = getids($mybb->get_input('searchid'), 'search');
if(!is_moderator_by_tids($threads, 'canopenclosethreads'))
{
error_no_permission();
}
}
else
{
$threads = getids($fid, 'forum');
if(!is_moderator($fid, 'canopenclosethreads'))
{
error_no_permission();
}
}
if(count($threads) < 1)
{
error($lang->error_inline_nothreadsselected);
}
$moderation->close_threads($threads);
log_moderator_action($modlogdata, $lang->multi_closed_threads);
if($mybb->get_input('inlinetype') == 'search')
{
clearinline($mybb->get_input('searchid', MyBB::INPUT_INT), 'search');
}
else
{
clearinline($fid, 'forum');
}
moderation_redirect(get_forum_link($fid), $lang->redirect_inline_threadsclosed);
break;
// Approve threads - Inline moderation
case "multiapprovethreads":
// Verify incoming POST request
verify_post_check($mybb->get_input('my_post_key'));
if(!empty($mybb->input['searchid']))
{
// From search page
$threads = getids($mybb->get_input('searchid'), 'search');
if(!is_moderator_by_tids($threads, 'canapproveunapprovethreads'))
{
error_no_permission();
}
}
else
{
$threads = getids($fid, 'forum');
if(!is_moderator($fid, 'canapproveunapprovethreads'))
{
error_no_permission();
}
}
if(count($threads) < 1)
{
error($lang->error_inline_nothreadsselected);
}
$moderation->approve_threads($threads, $fid);
log_moderator_action($modlogdata, $lang->multi_approved_threads);
if($mybb->get_input('inlinetype') == 'search')
{
clearinline($mybb->get_input('searchid', MyBB::INPUT_INT), 'search');
}
else
{
clearinline($fid, 'forum');
}
$cache->update_stats();
moderation_redirect(get_forum_link($fid), $lang->redirect_inline_threadsapproved);
break;
// Unapprove threads - Inline moderation
case "multiunapprovethreads":
// Verify incoming POST request
verify_post_check($mybb->get_input('my_post_key'));
if(!empty($mybb->input['searchid']))
{
// From search page
$threads = getids($mybb->get_input('searchid'), 'search');
if(!is_moderator_by_tids($threads, 'canapproveunapprovethreads'))
{
error_no_permission();
}
}
else
{
$threads = getids($fid, 'forum');
if(!is_moderator($fid, 'canapproveunapprovethreads'))
{
error_no_permission();
}
}
if(count($threads) < 1)
{
error($lang->error_inline_nothreadsselected);
}
$moderation->unapprove_threads($threads, $fid);
log_moderator_action($modlogdata, $lang->multi_unapproved_threads);
if($mybb->get_input('inlinetype') == 'search')
{
clearinline($mybb->get_input('searchid', MyBB::INPUT_INT), 'search');
}
else
{
clearinline($fid, 'forum');
}
$cache->update_stats();
moderation_redirect(get_forum_link($fid), $lang->redirect_inline_threadsunapproved);
break;
// Restore threads - Inline moderation
case "multirestorethreads":
// Verify incoming POST request
verify_post_check($mybb->get_input('my_post_key'));
if(!empty($mybb->input['searchid']))
{
// From search page
$threads = getids($mybb->get_input('searchid'), 'search');
if(!is_moderator_by_tids($threads, 'canrestorethreads'))
{
error_no_permission();
}
}
else
{
$threads = getids($fid, 'forum');
if(!is_moderator($fid, 'canrestorethreads'))
{
error_no_permission();
}
}
if(count($threads) < 1)
{
error($lang->error_inline_nothreadsselected);
}
$moderation->restore_threads($threads);
log_moderator_action($modlogdata, $lang->multi_restored_threads);
if($mybb->get_input('inlinetype') == 'search')
{
clearinline($mybb->get_input('searchid', MyBB::INPUT_INT), 'search');
}
else
{
clearinline($fid, 'forum');
}
$cache->update_stats();
moderation_redirect(get_forum_link($fid), $lang->redirect_inline_threadsrestored);
break;
// Soft delete threads - Inline moderation
case "multisoftdeletethreads":
// Verify incoming POST request
verify_post_check($mybb->get_input('my_post_key'));
if(!empty($mybb->input['searchid']))
{
// From search page
$threads = getids($mybb->get_input('searchid'), 'search');
if(!is_moderator_by_tids($threads, 'cansoftdeletethreads'))
{
error_no_permission();
}
}
else
{
$threads = getids($fid, 'forum');
if(!is_moderator($fid, 'cansoftdeletethreads'))
{
error_no_permission();
}
}
if(count($threads) < 1)
{
error($lang->error_inline_nothreadsselected);
}
$moderation->soft_delete_threads($threads);
log_moderator_action($modlogdata, $lang->multi_soft_deleted_threads);
if($mybb->get_input('inlinetype') == 'search')
{
clearinline($mybb->get_input('searchid', MyBB::INPUT_INT), 'search');
}
else
{
clearinline($fid, 'forum');
}
$cache->update_stats();
moderation_redirect(get_forum_link($fid), $lang->redirect_inline_threadssoftdeleted);
break;
// Stick threads - Inline moderation
case "multistickthreads":
// Verify incoming POST request
verify_post_check($mybb->get_input('my_post_key'));
if(!empty($mybb->input['searchid']))
{
// From search page
$threads = getids($mybb->get_input('searchid'), 'search');
if(!is_moderator_by_tids($threads, 'canstickunstickthreads'))
{
error_no_permission();
}
}
else
{
$threads = getids($fid, 'forum');
if(!is_moderator($fid, 'canstickunstickthreads'))
{
error_no_permission();
}
}
if(count($threads) < 1)
{
error($lang->error_inline_nothreadsselected);
}
$moderation->stick_threads($threads);
log_moderator_action($modlogdata, $lang->multi_stuck_threads);
if($mybb->get_input('inlinetype') == 'search')
{
clearinline($mybb->get_input('searchid', MyBB::INPUT_INT), 'search');
}
else
{
clearinline($fid, 'forum');
}
moderation_redirect(get_forum_link($fid), $lang->redirect_inline_threadsstuck);
break;
// Unstick threads - Inline moderaton
case "multiunstickthreads":
// Verify incoming POST request
verify_post_check($mybb->get_input('my_post_key'));
if(!empty($mybb->input['searchid']))
{
// From search page
$threads = getids($mybb->get_input('searchid'), 'search');
if(!is_moderator_by_tids($threads, 'canstickunstickthreads'))
{
error_no_permission();
}
}
else
{
$threads = getids($fid, 'forum');
if(!is_moderator($fid, 'canstickunstickthreads'))
{
error_no_permission();
}
}
if(count($threads) < 1)
{
error($lang->error_inline_nothreadsselected);
}
$moderation->unstick_threads($threads);
log_moderator_action($modlogdata, $lang->multi_unstuck_threads);
if($mybb->get_input('inlinetype') == 'search')
{
clearinline($mybb->get_input('searchid', MyBB::INPUT_INT), 'search');
}
else
{
clearinline($fid, 'forum');
}
moderation_redirect(get_forum_link($fid), $lang->redirect_inline_threadsunstuck);
break;
// Move threads - Inline moderation
case "multimovethreads":
add_breadcrumb($lang->nav_multi_movethreads);
if(!empty($mybb->input['searchid']))
{
// From search page
$threads = getids($mybb->get_input('searchid'), 'search');
if(!is_moderator_by_tids($threads, 'canmanagethreads'))
{
error_no_permission();
}
}
else
{
$threads = getids($fid, 'forum');
if(!is_moderator($fid, 'canmanagethreads'))
{
error_no_permission();
}
}
if(count($threads) < 1)
{
error($lang->error_inline_nothreadsselected);
}
$inlineids = implode("|", $threads);
if($mybb->get_input('inlinetype') == 'search')
{
clearinline($mybb->get_input('searchid', MyBB::INPUT_INT), 'search');
}
else
{
clearinline($fid, 'forum');
}
$forumselect = build_forum_jump("", '', 1, '', 0, true, '', "moveto");
$return_url = htmlspecialchars_uni($mybb->get_input('url'));
eval("\$movethread = \"".$templates->get("moderation_inline_movethreads")."\";");
output_page($movethread);
break;
// Actually move the threads in Inline moderation
case "do_multimovethreads":
// Verify incoming POST request
verify_post_check($mybb->get_input('my_post_key'));
$moveto = $mybb->get_input('moveto', MyBB::INPUT_INT);
$threadlist = explode("|", $mybb->get_input('threads'));
if(!is_moderator_by_tids($threadlist, 'canmanagethreads'))
{
error_no_permission();
}
foreach($threadlist as $tid)
{
$tids[] = (int)$tid;
}
// Make sure moderator has permission to move to the new forum
$newperms = forum_permissions($moveto);
if(($newperms['canview'] == 0 || !is_moderator($moveto, 'canmanagethreads')) && !is_moderator_by_tids($tids, 'canmovetononmodforum'))
{
error_no_permission();
}
$newforum = get_forum($moveto);
if(!$newforum || $newforum['type'] != "f" || $newforum['type'] == "f" && $newforum['linkto'] != '')
{
error($lang->error_invalidforum);
}
$moderation->move_threads($tids, $moveto);
log_moderator_action($modlogdata, $lang->multi_moved_threads);
moderation_redirect(get_forum_link($moveto), $lang->redirect_inline_threadsmoved);
break;
// Delete posts - Inline moderation
case "multideleteposts":
add_breadcrumb($lang->nav_multi_deleteposts);
if($mybb->get_input('inlinetype') == 'search')
{
$posts = getids($mybb->get_input('searchid'), 'search');
}
else
{
$posts = getids($tid, 'thread');
}
if(count($posts) < 1)
{
error($lang->error_inline_nopostsselected);
}
if(!is_moderator_by_pids($posts, "candeleteposts"))
{
error_no_permission();
}
$inlineids = implode("|", $posts);
if($mybb->get_input('inlinetype') == 'search')
{
clearinline($mybb->get_input('searchid', MyBB::INPUT_INT), 'search');
}
else
{
clearinline($tid, 'thread');
}
$return_url = htmlspecialchars_uni($mybb->get_input('url'));
eval("\$multidelete = \"".$templates->get("moderation_inline_deleteposts")."\";");
output_page($multidelete);
break;
// Actually delete the posts in inline moderation
case "do_multideleteposts":
// Verify incoming POST request
verify_post_check($mybb->get_input('my_post_key'));
$postlist = explode("|", $mybb->get_input('posts'));
if(!is_moderator_by_pids($postlist, "candeleteposts"))
{
error_no_permission();
}
$postlist = array_map('intval', $postlist);
$pids = implode(',', $postlist);
$tids = array();
if($pids)
{
$query = $db->simple_select("threads", "tid", "firstpost IN({$pids})");
while($threadid = $db->fetch_field($query, "tid"))
{
$tids[] = $threadid;
}
}
$deletecount = 0;
foreach($postlist as $pid)
{
$pid = (int)$pid;
$moderation->delete_post($pid);
$plist[] = $pid;
$deletecount++;
}
// If we have multiple threads, we must be coming from the search
if(!empty($tids))
{
foreach($tids as $tid)
{
$moderation->delete_thread($tid);
mark_reports($tid, "thread");
$url = get_forum_link($fid);
}
}
// Otherwise we're just deleting from showthread.php
else
{
$query = $db->simple_select("posts", "pid", "tid = $tid");
$numposts = $db->num_rows($query);
if(!$numposts)
{
$moderation->delete_thread($tid);
mark_reports($tid, "thread");
$url = get_forum_link($fid);
}
else
{
mark_reports($plist, "posts");
$url = get_thread_link($thread['tid']);
}
}
$lang->deleted_selective_posts = $lang->sprintf($lang->deleted_selective_posts, $deletecount);
log_moderator_action($modlogdata, $lang->deleted_selective_posts);
moderation_redirect($url, $lang->redirect_postsdeleted);
break;
// Merge posts - Inline moderation
case "multimergeposts":
add_breadcrumb($lang->nav_multi_mergeposts);
if($mybb->get_input('inlinetype') == 'search')
{
$posts = getids($mybb->get_input('searchid'), 'search');
}
else
{
$posts = getids($tid, 'thread');
}
// Add the selected posts from other threads
foreach($mybb->cookies as $key => $value)
{
if(strpos($key, "inlinemod_thread") !== false && $key != "inlinemod_thread$tid")
{
$inlinepostlist = explode("|", $mybb->cookies[$key]);
foreach($inlinepostlist as $p)
{
$p = (int)$p;
if(!empty($p))
{
$posts[] = (int)$p;
}
}
// Remove the cookie once its data is retrieved
my_unsetcookie($key);
}
}
if(empty($posts))
{
error($lang->error_inline_nopostsselected);
}
if(!is_moderator_by_pids($posts, "canmanagethreads"))
{
error_no_permission();
}
$postlist = "";
$query = $db->query("
SELECT p.*, u.*
FROM ".TABLE_PREFIX."posts p
LEFT JOIN ".TABLE_PREFIX."users u ON (p.uid=u.uid)
WHERE pid IN (".implode($posts, ",").")
ORDER BY dateline ASC
");
$altbg = "trow1";
while($post = $db->fetch_array($query))
{
$postdate = my_date('relative', $post['dateline']);
$parser_options = array(
"allow_html" => $forum['allowhtml'],
"allow_mycode" => $forum['allowmycode'],
"allow_smilies" => $forum['allowsmilies'],
"allow_imgcode" => $forum['allowimgcode'],
"allow_videocode" => $forum['allowvideocode'],
"filter_badwords" => 1
);
if($post['smilieoff'] == 1)
{
$parser_options['allow_smilies'] = 0;
}
$message = $parser->parse_message($post['message'], $parser_options);
eval("\$postlist .= \"".$templates->get("moderation_mergeposts_post")."\";");
$altbg = alt_trow();
}
$inlineids = implode("|", $posts);
if($mybb->get_input('inlinetype') == 'search')
{
clearinline($mybb->get_input('searchid', MyBB::INPUT_INT), 'search');
}
else
{
clearinline($tid, 'thread');
}
$return_url = htmlspecialchars_uni($mybb->get_input('url'));
eval("\$multimerge = \"".$templates->get("moderation_inline_mergeposts")."\";");
output_page($multimerge);
break;
// Actually merge the posts - Inline moderation
case "do_multimergeposts":
// Verify incoming POST request
verify_post_check($mybb->get_input('my_post_key'));
$mergepost = $mybb->get_input('mergepost', MyBB::INPUT_ARRAY);
if(count($mergepost) <= 1)
{
error($lang->error_nomergeposts);
}
foreach($mergepost as $pid => $yes)
{
$postlist[] = (int)$pid;
}
if(!is_moderator_by_pids($postlist, "canmanagethreads"))
{
error_no_permission();
}
$masterpid = $moderation->merge_posts($postlist, $tid, $mybb->input['sep']);
mark_reports($postlist, "posts");
log_moderator_action($modlogdata, $lang->merged_selective_posts);
moderation_redirect(get_post_link($masterpid)."#pid$masterpid", $lang->redirect_inline_postsmerged);
break;
// Split posts - Inline moderation
case "multisplitposts":
add_breadcrumb($lang->nav_multi_splitposts);
if($mybb->get_input('inlinetype') == 'search')
{
$posts = getids($mybb->get_input('searchid'), 'search');
}
else
{
$posts = getids($tid, 'thread');
}
if(count($posts) < 1)
{
error($lang->error_inline_nopostsselected);
}
if(!is_moderator_by_pids($posts, "canmanagethreads"))
{
error_no_permission();
}
$posts = array_map('intval', $posts);
$pidin = implode(',', $posts);
// Make sure that we are not splitting a thread with one post
// Select number of posts in each thread that the splitted post is in
$query = $db->query("
SELECT DISTINCT p.tid, COUNT(q.pid) as count
FROM ".TABLE_PREFIX."posts p
LEFT JOIN ".TABLE_PREFIX."posts q ON (p.tid=q.tid)
WHERE p.pid IN ($pidin)
GROUP BY p.tid, p.pid
");
$threads = $pcheck = array();
while($tcheck = $db->fetch_array($query))
{
if((int)$tcheck['count'] <= 1)
{
error($lang->error_cantsplitonepost);
}
$threads[] = $pcheck[] = $tcheck['tid']; // Save tids for below
}
// Make sure that we are not splitting all posts in the thread
// The query does not return a row when the count is 0, so find if some threads are missing (i.e. 0 posts after removal)
$query = $db->query("
SELECT DISTINCT p.tid, COUNT(q.pid) as count
FROM ".TABLE_PREFIX."posts p
LEFT JOIN ".TABLE_PREFIX."posts q ON (p.tid=q.tid)
WHERE p.pid IN ($pidin) AND q.pid NOT IN ($pidin)
GROUP BY p.tid, p.pid
");
$pcheck2 = array();
while($tcheck = $db->fetch_array($query))
{
if($tcheck['count'] > 0)
{
$pcheck2[] = $tcheck['tid'];
}
}
if(count($pcheck2) != count($pcheck))
{
// One or more threads do not have posts after splitting
error($lang->error_cantsplitall);
}
$inlineids = implode("|", $posts);
if($mybb->get_input('inlinetype') == 'search')
{
clearinline($mybb->get_input('searchid', MyBB::INPUT_INT), 'search');
}
else
{
clearinline($tid, 'thread');
}
$forumselect = build_forum_jump("", $fid, 1, '', 0, true, '', "moveto");
$return_url = htmlspecialchars_uni($mybb->get_input('url'));
eval("\$splitposts = \"".$templates->get("moderation_inline_splitposts")."\";");
output_page($splitposts);
break;
// Actually split the posts - Inline moderation
case "do_multisplitposts":
// Verify incoming POST request
verify_post_check($mybb->get_input('my_post_key'));
$plist = array();
$postlist = explode("|", $mybb->get_input('posts'));
foreach($postlist as $pid)
{
$pid = (int)$pid;
$plist[] = $pid;
}
if(!is_moderator_by_pids($plist, "canmanagethreads"))
{
error_no_permission();
}
// Ensure all posts exist
$posts = array();
if(!empty($plist))
{
$query = $db->simple_select('posts', 'pid', 'pid IN ('.implode(',', $plist).')');
while($pid = $db->fetch_field($query, 'pid'))
{
$posts[] = $pid;
}
}
if(empty($posts))
{
error($lang->error_inline_nopostsselected);
}
$pidin = implode(',', $posts);
// Make sure that we are not splitting a thread with one post
// Select number of posts in each thread that the splitted post is in
$query = $db->query("
SELECT DISTINCT p.tid, COUNT(q.pid) as count
FROM ".TABLE_PREFIX."posts p
LEFT JOIN ".TABLE_PREFIX."posts q ON (p.tid=q.tid)
WHERE p.pid IN ($pidin)
GROUP BY p.tid, p.pid
");
$pcheck = array();
while($tcheck = $db->fetch_array($query))
{
if((int)$tcheck['count'] <= 1)
{
error($lang->error_cantsplitonepost);
}
$pcheck[] = $tcheck['tid']; // Save tids for below
}
// Make sure that we are not splitting all posts in the thread
// The query does not return a row when the count is 0, so find if some threads are missing (i.e. 0 posts after removal)
$query = $db->query("
SELECT DISTINCT p.tid, COUNT(q.pid) as count
FROM ".TABLE_PREFIX."posts p
LEFT JOIN ".TABLE_PREFIX."posts q ON (p.tid=q.tid)
WHERE p.pid IN ($pidin) AND q.pid NOT IN ($pidin)
GROUP BY p.tid, p.pid
");
$pcheck2 = array();
while($tcheck = $db->fetch_array($query))
{
if($tcheck['count'] > 0)
{
$pcheck2[] = $tcheck['tid'];
}
}
if(count($pcheck2) != count($pcheck))
{
// One or more threads do not have posts after splitting
error($lang->error_cantsplitall);
}
if(isset($mybb->input['moveto']))
{
$moveto = $mybb->get_input('moveto', MyBB::INPUT_INT);
}
else
{
$moveto = $fid;
}
$newforum = get_forum($moveto);
if(!$newforum || $newforum['type'] != "f" || $newforum['type'] == "f" && $newforum['linkto'] != '')
{
error($lang->error_invalidforum);
}
$newsubject = $mybb->get_input('newsubject');
$newtid = $moderation->split_posts($posts, $tid, $moveto, $newsubject);
$pid_list = implode(', ', $posts);
$lang->split_selective_posts = $lang->sprintf($lang->split_selective_posts, $pid_list, $newtid);
log_moderator_action($modlogdata, $lang->split_selective_posts);
moderation_redirect(get_thread_link($newtid), $lang->redirect_threadsplit);
break;
// Move posts - Inline moderation
case "multimoveposts":
add_breadcrumb($lang->nav_multi_moveposts);
if($mybb->get_input('inlinetype') == 'search')
{
$posts = getids($mybb->get_input('searchid'), 'search');
}
else
{
$posts = getids($tid, 'thread');
}
if(count($posts) < 1)
{
error($lang->error_inline_nopostsselected);
}
if(!is_moderator_by_pids($posts, "canmanagethreads"))
{
error_no_permission();
}
$posts = array_map('intval', $posts);
$pidin = implode(',', $posts);
// Make sure that we are not moving posts in a thread with one post
// Select number of posts in each thread that the moved post is in
$query = $db->query("
SELECT DISTINCT p.tid, COUNT(q.pid) as count
FROM ".TABLE_PREFIX."posts p
LEFT JOIN ".TABLE_PREFIX."posts q ON (p.tid=q.tid)
WHERE p.pid IN ($pidin)
GROUP BY p.tid, p.pid
");
$threads = $pcheck = array();
while($tcheck = $db->fetch_array($query))
{
if((int)$tcheck['count'] <= 1)
{
error($lang->error_cantsplitonepost);
}
$threads[] = $pcheck[] = $tcheck['tid']; // Save tids for below
}
// Make sure that we are not moving all posts in the thread
// The query does not return a row when the count is 0, so find if some threads are missing (i.e. 0 posts after removal)
$query = $db->query("
SELECT DISTINCT p.tid, COUNT(q.pid) as count
FROM ".TABLE_PREFIX."posts p
LEFT JOIN ".TABLE_PREFIX."posts q ON (p.tid=q.tid)
WHERE p.pid IN ($pidin) AND q.pid NOT IN ($pidin)
GROUP BY p.tid, p.pid
");
$pcheck2 = array();
while($tcheck = $db->fetch_array($query))
{
if($tcheck['count'] > 0)
{
$pcheck2[] = $tcheck['tid'];
}
}
if(count($pcheck2) != count($pcheck))
{
// One or more threads do not have posts after splitting
error($lang->error_cantmoveall);
}
$inlineids = implode("|", $posts);
if($mybb->get_input('inlinetype') == 'search')
{
clearinline($mybb->get_input('searchid', MyBB::INPUT_INT), 'search');
}
else
{
clearinline($tid, 'thread');
}
$forumselect = build_forum_jump("", $fid, 1, '', 0, true, '', "moveto");
eval("\$moveposts = \"".$templates->get("moderation_inline_moveposts")."\";");
output_page($moveposts);
break;
// Actually split the posts - Inline moderation
case "do_multimoveposts":
// Verify incoming POST request
verify_post_check($mybb->get_input('my_post_key'));
$plugins->run_hooks("moderation_do_multimoveposts");
// explode at # sign in a url (indicates a name reference) and reassign to the url
$realurl = explode("#", $mybb->get_input('threadurl'));
$mybb->input['threadurl'] = $realurl[0];
// Are we using an SEO URL?
if(substr($mybb->input['threadurl'], -4) == "html")
{
// Get thread to merge's tid the SEO way
preg_match("#thread-([0-9]+)?#i", $mybb->input['threadurl'], $threadmatch);
preg_match("#post-([0-9]+)?#i", $mybb->input['threadurl'], $postmatch);
if($threadmatch[1])
{
$parameters['tid'] = $threadmatch[1];
}
if($postmatch[1])
{
$parameters['pid'] = $postmatch[1];
}
}
else
{
// Get thread to merge's tid the normal way
$splitloc = explode(".php", $mybb->input['threadurl']);
$temp = explode("&", my_substr($splitloc[1], 1));
if(!empty($temp))
{
for($i = 0; $i < count($temp); $i++)
{
$temp2 = explode("=", $temp[$i], 2);
$parameters[$temp2[0]] = $temp2[1];
}
}
else
{
$temp2 = explode("=", $splitloc[1], 2);
$parameters[$temp2[0]] = $temp2[1];
}
}
if(!empty($parameters['pid']) && empty($parameters['tid']))
{
$query = $db->simple_select("posts", "tid", "pid='".(int)$parameters['pid']."'");
$post = $db->fetch_array($query);
$newtid = $post['tid'];
}
elseif(!empty($parameters['tid']))
{
$newtid = $parameters['tid'];
}
else
{
$newtid = 0;
}
$newtid = (int)$newtid;
$newthread = get_thread($newtid);
if(!$newthread)
{
error($lang->error_badmovepostsurl);
}
if($newtid == $tid)
{ // sanity check
error($lang->error_movetoself);
}
$postlist = explode("|", $mybb->get_input('posts'));
$plist = array();
foreach($postlist as $pid)
{
$pid = (int)$pid;
$plist[] = $pid;
}
if(!is_moderator_by_pids($plist, "canmanagethreads"))
{
error_no_permission();
}
// Ensure all posts exist
$posts = array();
if(!empty($plist))
{
$query = $db->simple_select('posts', 'pid', 'pid IN ('.implode(',', $plist).')');
while($pid = $db->fetch_field($query, 'pid'))
{
$posts[] = $pid;
}
}
if(empty($posts))
{
error($lang->error_inline_nopostsselected);
}
$pidin = implode(',', $posts);
// Make sure that we are not moving posts in a thread with one post
// Select number of posts in each thread that the moved post is in
$query = $db->query("
SELECT DISTINCT p.tid, COUNT(q.pid) as count
FROM ".TABLE_PREFIX."posts p
LEFT JOIN ".TABLE_PREFIX."posts q ON (p.tid=q.tid)
WHERE p.pid IN ($pidin)
GROUP BY p.tid, p.pid
");
$threads = $pcheck = array();
while($tcheck = $db->fetch_array($query))
{
if((int)$tcheck['count'] <= 1)
{
error($lang->error_cantsplitonepost);
}
$threads[] = $pcheck[] = $tcheck['tid']; // Save tids for below
}
// Make sure that we are not moving all posts in the thread
// The query does not return a row when the count is 0, so find if some threads are missing (i.e. 0 posts after removal)
$query = $db->query("
SELECT DISTINCT p.tid, COUNT(q.pid) as count
FROM ".TABLE_PREFIX."posts p
LEFT JOIN ".TABLE_PREFIX."posts q ON (p.tid=q.tid)
WHERE p.pid IN ($pidin) AND q.pid NOT IN ($pidin)
GROUP BY p.tid, p.pid
");
$pcheck2 = array();
while($tcheck = $db->fetch_array($query))
{
if($tcheck['count'] > 0)
{
$pcheck2[] = $tcheck['tid'];
}
}
if(count($pcheck2) != count($pcheck))
{
// One or more threads do not have posts after splitting
error($lang->error_cantmoveall);
}
$newtid = $moderation->split_posts($posts, $tid, $newthread['fid'], $db->escape_string($newthread['subject']), $newtid);
$pid_list = implode(', ', $posts);
$lang->move_selective_posts = $lang->sprintf($lang->move_selective_posts, $pid_list, $newtid);
log_moderator_action($modlogdata, $lang->move_selective_posts);
moderation_redirect(get_thread_link($newtid), $lang->redirect_moveposts);
break;
// Approve posts - Inline moderation
case "multiapproveposts":
// Verify incoming POST request
verify_post_check($mybb->get_input('my_post_key'));
if($mybb->get_input('inlinetype') == 'search')
{
$posts = getids($mybb->get_input('searchid'), 'search');
}
else
{
$posts = getids($tid, 'thread');
}
if(count($posts) < 1)
{
error($lang->error_inline_nopostsselected);
}
if(!is_moderator_by_pids($posts, "canapproveunapproveposts"))
{
error_no_permission();
}
$pids = array();
foreach($posts as $pid)
{
$pids[] = (int)$pid;
}
$moderation->approve_posts($pids);
log_moderator_action($modlogdata, $lang->multi_approve_posts);
if($mybb->get_input('inlinetype') == 'search')
{
clearinline($mybb->get_input('searchid', MyBB::INPUT_INT), 'search');
}
else
{
clearinline($tid, 'thread');
}
moderation_redirect(get_thread_link($thread['tid']), $lang->redirect_inline_postsapproved);
break;
// Unapprove posts - Inline moderation
case "multiunapproveposts":
// Verify incoming POST request
verify_post_check($mybb->get_input('my_post_key'));
if($mybb->get_input('inlinetype') == 'search')
{
$posts = getids($mybb->get_input('searchid'), 'search');
}
else
{
$posts = getids($tid, 'thread');
}
if(count($posts) < 1)
{
error($lang->error_inline_nopostsselected);
}
$pids = array();
if(!is_moderator_by_pids($posts, "canapproveunapproveposts"))
{
error_no_permission();
}
foreach($posts as $pid)
{
$pids[] = (int)$pid;
}
$moderation->unapprove_posts($pids);
log_moderator_action($modlogdata, $lang->multi_unapprove_posts);
if($mybb->get_input('inlinetype') == 'search')
{
clearinline($mybb->get_input('searchid', MyBB::INPUT_INT), 'search');
}
else
{
clearinline($tid, 'thread');
}
moderation_redirect(get_thread_link($thread['tid']), $lang->redirect_inline_postsunapproved);
break;
// Restore posts - Inline moderation
case "multirestoreposts":
// Verify incoming POST request
verify_post_check($mybb->get_input('my_post_key'));
if($mybb->get_input('inlinetype') == 'search')
{
$posts = getids($mybb->get_input('searchid'), 'search');
}
else
{
$posts = getids($tid, 'thread');
}
if(count($posts) < 1)
{
error($lang->error_inline_nopostsselected);
}
if(!is_moderator_by_pids($posts, "canrestoreposts"))
{
error_no_permission();
}
$pids = array();
foreach($posts as $pid)
{
$pids[] = (int)$pid;
}
$moderation->restore_posts($pids);
log_moderator_action($modlogdata, $lang->multi_restore_posts);
if($mybb->get_input('inlinetype') == 'search')
{
clearinline($mybb->get_input('searchid', MyBB::INPUT_INT), 'search');
}
else
{
clearinline($tid, 'thread');
}
moderation_redirect(get_thread_link($thread['tid']), $lang->redirect_inline_postsrestored);
break;
// Soft delete posts - Inline moderation
case "multisoftdeleteposts":
// Verify incoming POST request
verify_post_check($mybb->get_input('my_post_key'));
if($mybb->get_input('inlinetype') == 'search')
{
$posts = getids($mybb->get_input('searchid'), 'search');
}
else
{
$posts = getids($tid, 'thread');
}
if(count($posts) < 1)
{
error($lang->error_inline_nopostsselected);
}
$pids = array();
if(!is_moderator_by_pids($posts, "cansoftdeleteposts"))
{
error_no_permission();
}
foreach($posts as $pid)
{
$pids[] = (int)$pid;
}
$moderation->soft_delete_posts($pids);
log_moderator_action($modlogdata, $lang->multi_soft_delete_posts);
if($mybb->get_input('inlinetype') == 'search')
{
clearinline($mybb->get_input('searchid', MyBB::INPUT_INT), 'search');
}
else
{
clearinline($tid, 'thread');
}
moderation_redirect(get_thread_link($thread['tid']), $lang->redirect_inline_postssoftdeleted);
break;
case "do_purgespammer":
case "purgespammer":
require_once MYBB_ROOT."inc/functions_user.php";
$groups = explode(",", $mybb->settings['purgespammergroups']);
if(!in_array($mybb->user['usergroup'], $groups))
{
error_no_permission();
}
$uid = $mybb->input['uid'];
$user = get_user($uid);
if(!$user['uid'] || !purgespammer_show($user['postnum'], $user['usergroup'], $user['uid']))
{
error($lang->purgespammer_invalid_user);
}
if($mybb->input['action'] == "do_purgespammer")
{
verify_post_check($mybb->get_input('my_post_key'));
$user_deleted = false;
// Run the hooks first to avoid any issues when we delete the user
$plugins->run_hooks("moderation_purgespammer_purge");
require_once MYBB_ROOT.'inc/datahandlers/user.php';
$userhandler = new UserDataHandler('delete');
if($mybb->settings['purgespammerbandelete'] == "ban")
{
// First delete everything
$userhandler->delete_content($uid);
$userhandler->delete_posts($uid);
// Next ban him (or update the banned reason, shouldn't happen)
$query = $db->simple_select("banned", "uid", "uid = '{$uid}'");
if($db->num_rows($query) > 0)
{
$banupdate = array(
"reason" => $db->escape_string($mybb->settings['purgespammerbanreason'])
);
$db->update_query('banned', $banupdate, "uid = '{$uid}'");
}
else
{
$insert = array(
"uid" => $uid,
"gid" => (int)$mybb->settings['purgespammerbangroup'],
"oldgroup" => 2,
"oldadditionalgroups" => "",
"olddisplaygroup" => 0,
"admin" => (int)$mybb->user['uid'],
"dateline" => TIME_NOW,
"bantime" => "---",
"lifted" => 0,
"reason" => $db->escape_string($mybb->settings['purgespammerbanreason'])
);
$db->insert_query('banned', $insert);
}
// Add the IP's to the banfilters
foreach(array($user['regip'], $user['lastip']) as $ip)
{
$ip = my_inet_ntop($db->unescape_binary($ip));
$query = $db->simple_select("banfilters", "type", "type = 1 AND filter = '".$db->escape_string($ip)."'");
if($db->num_rows($query) == 0)
{
$insert = array(
"filter" => $db->escape_string($ip),
"type" => 1,
"dateline" => TIME_NOW
);
$db->insert_query("banfilters", $insert);
}
}
// Clear the profile
$userhandler->clear_profile($uid, $mybb->settings['purgespammerbangroup']);
$cache->update_banned();
$cache->update_bannedips();
$cache->update_awaitingactivation();
// Update reports cache
$cache->update_reportedcontent();
}
elseif($mybb->settings['purgespammerbandelete'] == "delete")
{
$user_deleted = $userhandler->delete_user($uid, 1);
}
// Submit the user to stop forum spam
if(!empty($mybb->settings['purgespammerapikey']))
{
$sfs = @fetch_remote_file("http://stopforumspam.com/add.php?username=" . urlencode($user['username']) . "&ip_addr=" . urlencode(my_inet_ntop($db->unescape_binary($user['lastip']))) . "&email=" . urlencode($user['email']) . "&api_key=" . urlencode($mybb->settings['purgespammerapikey']));
}
log_moderator_action(array('uid' => $uid, 'username' => $user['username']), $lang->purgespammer_modlog);
if($user_deleted)
{
redirect($mybb->settings['bburl'], $lang->purgespammer_success);
}
else
{
redirect(get_profile_link($uid), $lang->purgespammer_success);
}
}
else if($mybb->input['action'] == "purgespammer")
{
$plugins->run_hooks("moderation_purgespammer_show");
add_breadcrumb($lang->purgespammer);
$lang->purgespammer_purge = $lang->sprintf($lang->purgespammer_purge, htmlspecialchars_uni($user['username']));
if($mybb->settings['purgespammerbandelete'] == "ban")
{
$lang->purgespammer_purge_desc = $lang->sprintf($lang->purgespammer_purge_desc, $lang->purgespammer_ban);
}
else
{
$lang->purgespammer_purge_desc = $lang->sprintf($lang->purgespammer_purge_desc, $lang->purgespammer_delete);
}
eval("\$purgespammer = \"".$templates->get('moderation_purgespammer')."\";");
output_page($purgespammer);
}
break;
default:
require_once MYBB_ROOT."inc/class_custommoderation.php";
$custommod = new CustomModeration;
$tool = $custommod->tool_info($mybb->get_input('action', MyBB::INPUT_INT));
if($tool !== false)
{
// Verify incoming POST request
verify_post_check($mybb->get_input('my_post_key'));
$options = my_unserialize($tool['threadoptions']);
if(!is_member($tool['groups']))
{
error_no_permission();
}
if(!empty($options['confirmation']) && empty($mybb->input['confirm']))
{
add_breadcrumb($lang->confirm_execute_tool);
$lang->confirm_execute_tool_desc = $lang->sprintf($lang->confirm_execute_tool_desc, htmlspecialchars_uni($tool['name']));
$modtype = $mybb->get_input('modtype');
$inlinetype = $mybb->get_input('inlinetype');
$searchid = $mybb->get_input('searchid');
$url = htmlspecialchars_uni($mybb->get_input('url'));
$plugins->run_hooks('moderation_confirmation');
eval('$page = "'.$templates->get('moderation_confirmation').'";');
output_page($page);
exit;
}
if($tool['type'] == 't' && $mybb->get_input('modtype') == 'inlinethread')
{
if($mybb->get_input('inlinetype') == 'search')
{
$tids = getids($mybb->get_input('searchid'), 'search');
}
else
{
$tids = getids($fid, "forum");
}
if(count($tids) < 1)
{
error($lang->error_inline_nopostsselected);
}
if(!is_moderator_by_tids($tids, "canusecustomtools"))
{
error_no_permission();
}
$thread_options = my_unserialize($tool['threadoptions']);
if($thread_options['movethread'] && $forum_cache[$thread_options['movethread']]['type'] != "f")
{
error($lang->error_movetocategory);
}
$custommod->execute($mybb->get_input('action', MyBB::INPUT_INT), $tids);
$lang->custom_tool = $lang->sprintf($lang->custom_tool, $tool['name']);
log_moderator_action($modlogdata, $lang->custom_tool);
if($mybb->get_input('inlinetype') == 'search')
{
clearinline($mybb->get_input('searchid', MyBB::INPUT_INT), 'search');
$lang->redirect_customtool_search = $lang->sprintf($lang->redirect_customtool_search, $tool['name']);
$return_url = htmlspecialchars_uni($mybb->get_input('url'));
redirect($return_url, $lang->redirect_customtool_search);
}
else
{
clearinline($fid, "forum");
$lang->redirect_customtool_forum = $lang->sprintf($lang->redirect_customtool_forum, $tool['name']);
redirect(get_forum_link($fid), $lang->redirect_customtool_forum);
}
break;
}
elseif($tool['type'] == 't' && $mybb->get_input('modtype') == 'thread')
{
if(!is_moderator_by_tids($tid, "canusecustomtools"))
{
error_no_permission();
}
$thread_options = my_unserialize($tool['threadoptions']);
if($thread_options['movethread'] && $forum_cache[$thread_options['movethread']]['type'] != "f")
{
error($lang->error_movetocategory);
}
$ret = $custommod->execute($mybb->get_input('action', MyBB::INPUT_INT), $tid);
$lang->custom_tool = $lang->sprintf($lang->custom_tool, $tool['name']);
log_moderator_action($modlogdata, $lang->custom_tool);
if($ret == 'forum')
{
$lang->redirect_customtool_forum = $lang->sprintf($lang->redirect_customtool_forum, $tool['name']);
moderation_redirect(get_forum_link($fid), $lang->redirect_customtool_forum);
}
else
{
$lang->redirect_customtool_thread = $lang->sprintf($lang->redirect_customtool_thread, $tool['name']);
moderation_redirect(get_thread_link($thread['tid']), $lang->redirect_customtool_thread);
}
break;
}
elseif($tool['type'] == 'p' && $mybb->get_input('modtype') == 'inlinepost')
{
if($mybb->get_input('inlinetype') == 'search')
{
$pids = getids($mybb->get_input('searchid'), 'search');
}
else
{
$pids = getids($tid, 'thread');
}
if(count($pids) < 1)
{
error($lang->error_inline_nopostsselected);
}
if(!is_moderator_by_pids($pids, "canusecustomtools"))
{
error_no_permission();
}
// Get threads which are associated with the posts
$tids = array();
$options = array(
'order_by' => 'dateline',
'order_dir' => 'asc'
);
$query = $db->simple_select("posts", "DISTINCT tid, dateline", "pid IN (".implode(',',$pids).")", $options);
while($row = $db->fetch_array($query))
{
$tids[] = $row['tid'];
}
$ret = $custommod->execute($mybb->get_input('action', MyBB::INPUT_INT), $tids, $pids);
$lang->custom_tool = $lang->sprintf($lang->custom_tool, $tool['name']);
log_moderator_action($modlogdata, $lang->custom_tool);
if($mybb->get_input('inlinetype') == 'search')
{
clearinline($mybb->get_input('searchid', MyBB::INPUT_INT), 'search');
$lang->redirect_customtool_search = $lang->sprintf($lang->redirect_customtool_search, $tool['name']);
$return_url = htmlspecialchars_uni($mybb->get_input('url'));
redirect($return_url, $lang->redirect_customtool_search);
}
else
{
clearinline($tid, 'thread');
if($ret == 'forum')
{
$lang->redirect_customtool_forum = $lang->sprintf($lang->redirect_customtool_forum, $tool['name']);
moderation_redirect(get_forum_link($fid), $lang->redirect_customtool_forum);
}
else
{
$lang->redirect_customtool_thread = $lang->sprintf($lang->redirect_customtool_thread, $tool['name']);
moderation_redirect(get_thread_link($tid), $lang->redirect_customtool_thread);
}
}
break;
}
}
error_no_permission();
break;
}
/**
* Some little handy functions for our inline moderation
*
* @param int $id
* @param string $type
*
* @return array
*/
function getids($id, $type)
{
global $mybb;
$newids = array();
$cookie = "inlinemod_".$type.$id;
if(isset($mybb->cookies[$cookie]))
{
$cookie_ids = explode("|", $mybb->cookies[$cookie]);
foreach($cookie_ids as $cookie_id)
{
if(empty($cookie_id))
{
continue;
}
if($cookie_id == 'ALL')
{
$newids += getallids($id, $type);
}
else
{
$newids[] = (int)$cookie_id;
}
}
}
return $newids;
}
/**
* @param int $id
* @param string $type
*
* @return array
*/
function getallids($id, $type)
{
global $db, $mybb;
$ids = array();
// Get any removed threads (after our user hit 'all')
$removed_ids = array();
$cookie = "inlinemod_".$type.$id."_removed";
if(isset($mybb->cookies[$cookie]))
{
$removed_ids = explode("|", $mybb->cookies[$cookie]);
if(!is_array($removed_ids))
{
$removed_ids = array();
}
}
// "Select all Threads in this forum" only supported by forumdisplay and search
if($type == 'forum')
{
$query = $db->simple_select("threads", "tid", "fid='".(int)$id."'");
while($tid = $db->fetch_field($query, "tid"))
{
if(in_array($tid, $removed_ids))
{
continue;
}
$ids[] = $tid;
}
}
else if($type == 'search')
{
$query = $db->simple_select("searchlog", "resulttype, posts, threads", "sid='".$db->escape_string($id)."' AND uid='{$mybb->user['uid']}'", 1);
$searchlog = $db->fetch_array($query);
if($searchlog['resulttype'] == 'posts')
{
$ids = explode(',', $searchlog['posts']);
}
else
{
$ids = explode(',', $searchlog['threads']);
}
if(is_array($ids))
{
foreach($ids as $key => $tid)
{
if(in_array($tid, $removed_ids))
{
unset($ids[$key]);
}
}
}
}
return $ids;
}
/**
* @param int $id
* @param string $type
*/
function clearinline($id, $type)
{
my_unsetcookie("inlinemod_".$type.$id);
my_unsetcookie("inlinemod_{$type}{$id}_removed");
}
/**
* @param int $id
* @param string $type
*/
function extendinline($id, $type)
{
my_setcookie("inlinemod_{$type}{$id}", '', TIME_NOW+3600);
my_setcookie("inlinemod_{$type}{$id}_removed", '', TIME_NOW+3600);
}
/**
* Checks if the current user is a moderator of all the posts specified
*
* Note: If no posts are specified, this function will return true. It is the
* responsibility of the calling script to error-check this case if necessary.
*
* @param array $posts Array of post IDs
* @param string $permission Permission to check
* @return bool True if moderator of all; false otherwise
*/
function is_moderator_by_pids($posts, $permission='')
{
global $db, $mybb;
// Speedy determination for supermods/admins and guests
if($mybb->usergroup['issupermod'])
{
return true;
}
elseif(!$mybb->user['uid'])
{
return false;
}
// Make an array of threads if not an array
if(!is_array($posts))
{
$posts = array($posts);
}
// Validate input
$posts = array_map('intval', $posts);
$posts[] = 0;
// Get forums
$posts_string = implode(',', $posts);
$query = $db->simple_select("posts", "DISTINCT fid", "pid IN ($posts_string)");
while($forum = $db->fetch_array($query))
{
if(!is_moderator($forum['fid'], $permission))
{
return false;
}
}
return true;
}
/**
* Checks if the current user is a moderator of all the threads specified
*
* Note: If no threads are specified, this function will return true. It is the
* responsibility of the calling script to error-check this case if necessary.
*
* @param array $threads Array of thread IDs
* @param string $permission Permission to check
* @return bool True if moderator of all; false otherwise
*/
function is_moderator_by_tids($threads, $permission='')
{
global $db, $mybb;
// Speedy determination for supermods/admins and guests
if($mybb->usergroup['issupermod'])
{
return true;
}
elseif(!$mybb->user['uid'])
{
return false;
}
// Make an array of threads if not an array
if(!is_array($threads))
{
$threads = array($threads);
}
// Validate input
$threads = array_map('intval', $threads);
$threads[] = 0;
// Get forums
$threads_string = implode(',', $threads);
$query = $db->simple_select("threads", "DISTINCT fid", "tid IN ($threads_string)");
while($forum = $db->fetch_array($query))
{
if(!is_moderator($forum['fid'], $permission))
{
return false;
}
}
return true;
}
/**
* Special redirect that takes a return URL into account
* @param string $url URL
* @param string $message Message
* @param string $title Title
*/
function moderation_redirect($url, $message="", $title="")
{
global $mybb;
if(!empty($mybb->input['url']))
{
redirect(htmlentities($mybb->input['url']), $message, $title);
}
redirect($url, $message, $title);
}
Reference in New Issue View Git Blame Copy Permalink