PageRenderTime 57ms CodeModel.GetById 24ms RepoModel.GetById 0ms app.codeStats 1ms

/moderate.php

https://bitbucket.org/delroth/fluxbb-djangofr
PHP | 926 lines | 646 code | 196 blank | 84 comment | 150 complexity | 25fd47b384adf0f5b07934612248bfe1 MD5 | raw file
Possible License(s): GPL-2.0 
    

  1. <?php
    2. 

  2. 

  3. /**
    4. 

  4.  * Copyright (C) 2008-2010 FluxBB
    5. 

  5.  * based on code by Rickard Andersson copyright (C) 2002-2008 PunBB
    6. 

  6.  * License: http://www.gnu.org/licenses/gpl.html GPL version 2 or higher
    7. 

  7.  */
    8. 

  8. 

  9. define('PUN_ROOT', './');
    10. 

  10. require PUN_ROOT.'include/common.php';
    11. 

  11. 

  12. 

  13. // This particular function doesn't require forum-based moderator access. It can be used
    14. 

  14. // by all moderators and admins
    15. 

  15. if (isset($_GET['get_host']))
    16. 

  16. {
    17. 

  17. 	if (!$pun_user['is_admmod'])
    18. 

  18. 		message($lang_common['No permission']);
    19. 

  19. 

  20. 	// Is get_host an IP address or a post ID?
    21. 

  21. 	if (@preg_match('/^[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}$/', $_GET['get_host']) || @preg_match('/^((([0-9A-Fa-f]{1,4}:){7}[0-9A-Fa-f]{1,4})|(([0-9A-Fa-f]{1,4}:){6}:[0-9A-Fa-f]{1,4})|(([0-9A-Fa-f]{1,4}:){5}:([0-9A-Fa-f]{1,4}:)?[0-9A-Fa-f]{1,4})|(([0-9A-Fa-f]{1,4}:){4}:([0-9A-Fa-f]{1,4}:){0,2}[0-9A-Fa-f]{1,4})|(([0-9A-Fa-f]{1,4}:){3}:([0-9A-Fa-f]{1,4}:){0,3}[0-9A-Fa-f]{1,4})|(([0-9A-Fa-f]{1,4}:){2}:([0-9A-Fa-f]{1,4}:){0,4}[0-9A-Fa-f]{1,4})|(([0-9A-Fa-f]{1,4}:){6}((\b((25[0-5])|(1\d{2})|(2[0-4]\d)|(\d{1,2}))\b)\.){3}(\b((25[0-5])|(1\d{2})|(2[0-4]\d)|(\d{1,2}))\b))|(([0-9A-Fa-f]{1,4}:){0,5}:((\b((25[0-5])|(1\d{2})|(2[0-4]\d)|(\d{1,2}))\b)\.){3}(\b((25[0-5])|(1\d{2})|(2[0-4]\d)|(\d{1,2}))\b))|(::([0-9A-Fa-f]{1,4}:){0,5}((\b((25[0-5])|(1\d{2})|(2[0-4]\d)|(\d{1,2}))\b)\.){3}(\b((25[0-5])|(1\d{2})|(2[0-4]\d)|(\d{1,2}))\b))|([0-9A-Fa-f]{1,4}::([0-9A-Fa-f]{1,4}:){0,5}[0-9A-Fa-f]{1,4})|(::([0-9A-Fa-f]{1,4}:){0,6}[0-9A-Fa-f]{1,4})|(([0-9A-Fa-f]{1,4}:){1,7}:))$/', $_GET['get_host']))
    22. 

  22. 		$ip = $_GET['get_host'];
    23. 

  23. 	else
    24. 

  24. 	{
    25. 

  25. 		$get_host = intval($_GET['get_host']);
    26. 

  26. 		if ($get_host < 1)
    27. 

  27. 			message($lang_common['Bad request']);
    28. 

  28. 

  29. 		$result = $db->query('SELECT poster_ip FROM '.$db->prefix.'posts WHERE id='.$get_host) or error('Unable to fetch post IP address', __FILE__, __LINE__, $db->error());
    30. 

  30. 		if (!$db->num_rows($result))
    31. 

  31. 			message($lang_common['Bad request']);
    32. 

  32. 

  33. 		$ip = $db->result($result);
    34. 

  34. 	}
    35. 

  35. 

  36. 	// Load the misc.php language file
    37. 

  37. 	require PUN_ROOT.'lang/'.$pun_user['language'].'/misc.php';
    38. 

  38. 

  39. 	message(sprintf($lang_misc['Host info 1'], $ip).'<br />'.sprintf($lang_misc['Host info 2'], @gethostbyaddr($ip)).'<br /><br /><a href="admin_users.php?show_users='.$ip.'">'.$lang_misc['Show more users'].'</a>');
    40. 

  40. }
    41. 

  41. 

  42. 

  43. // All other functions require moderator/admin access
    44. 

  44. $fid = isset($_GET['fid']) ? intval($_GET['fid']) : 0;
    45. 

  45. if ($fid < 1)
    46. 

  46. 	message($lang_common['Bad request']);
    47. 

  47. 

  48. $result = $db->query('SELECT moderators FROM '.$db->prefix.'forums WHERE id='.$fid) or error('Unable to fetch forum info', __FILE__, __LINE__, $db->error());
    49. 

  49. 

  50. $moderators = $db->result($result);
    51. 

  51. $mods_array = ($moderators != '') ? unserialize($moderators) : array();
    52. 

  52. 

  53. if ($pun_user['g_id'] != PUN_ADMIN && ($pun_user['g_moderator'] == '0' || !array_key_exists($pun_user['username'], $mods_array)))
    54. 

  54. 	message($lang_common['No permission']);
    55. 

  55. 

  56. // Get topic/forum tracking data
    57. 

  57. if (!$pun_user['is_guest'])
    58. 

  58. 	$tracked_topics = get_tracked_topics();
    59. 

  59. 

  60. // Load the misc.php language file
    61. 

  61. require PUN_ROOT.'lang/'.$pun_user['language'].'/misc.php';
    62. 

  62. 

  63. 

  64. // All other topic moderation features require a topic ID in GET
    65. 

  65. if (isset($_GET['tid']))
    66. 

  66. {
    67. 

  67. 	$tid = intval($_GET['tid']);
    68. 

  68. 	if ($tid < 1)
    69. 

  69. 		message($lang_common['Bad request']);
    70. 

  70. 

  71. 	// Fetch some info about the topic
    72. 

  72. 	$result = $db->query('SELECT t.subject, t.num_replies, t.first_post_id, f.id AS forum_id, forum_name FROM '.$db->prefix.'topics AS t INNER JOIN '.$db->prefix.'forums AS f ON f.id=t.forum_id LEFT JOIN '.$db->prefix.'subscriptions AS s ON (t.id=s.topic_id AND s.user_id='.$pun_user['id'].') LEFT JOIN '.$db->prefix.'forum_perms AS fp ON (fp.forum_id=f.id AND fp.group_id='.$pun_user['g_id'].') WHERE (fp.read_forum IS NULL OR fp.read_forum=1) AND f.id='.$fid.' AND t.id='.$tid.' AND t.moved_to IS NULL') or error('Unable to fetch topic info', __FILE__, __LINE__, $db->error());
    73. 

  73. 	if (!$db->num_rows($result))
    74. 

  74. 		message($lang_common['Bad request']);
    75. 

  75. 

  76. 	$cur_topic = $db->fetch_assoc($result);
    77. 

  77. 

  78. 	// Delete one or more posts
    79. 

  79. 	if (isset($_POST['delete_posts']) || isset($_POST['delete_posts_comply']))
    80. 

  80. 	{
    81. 

  81. 		$posts = isset($_POST['posts']) ? $_POST['posts'] : array();
    82. 

  82. 		if (empty($posts))
    83. 

  83. 			message($lang_misc['No posts selected']);
    84. 

  84. 

  85. 		if (isset($_POST['delete_posts_comply']))
    86. 

  86. 		{
    87. 

  87. 			confirm_referrer('moderate.php');
    88. 

  88. 

  89. 			if (@preg_match('/[^0-9,]/', $posts))
    90. 

  90. 				message($lang_common['Bad request']);
    91. 

  91. 

  92. 			// Verify that the post IDs are valid
    93. 

  93. 			$result = $db->query('SELECT 1 FROM '.$db->prefix.'posts WHERE id IN('.$posts.') AND topic_id='.$tid) or error('Unable to check posts', __FILE__, __LINE__, $db->error());
    94. 

  94. 

  95. 			if ($db->num_rows($result) != substr_count($posts, ',') + 1)
    96. 

  96. 				message($lang_common['Bad request']);
    97. 

  97. 

  98. 			// Delete the posts
    99. 

  99. 			$db->query('DELETE FROM '.$db->prefix.'posts WHERE id IN('.$posts.')') or error('Unable to delete posts', __FILE__, __LINE__, $db->error());
    100. 

  100. 

  101. 			require PUN_ROOT.'include/search_idx.php';
    102. 

  102. 			strip_search_index($posts);
    103. 

  103. 

  104. 			// Get last_post, last_post_id, and last_poster for the topic after deletion
    105. 

  105. 			$result = $db->query('SELECT id, poster, posted FROM '.$db->prefix.'posts WHERE topic_id='.$tid.' ORDER BY id DESC LIMIT 1') or error('Unable to fetch post info', __FILE__, __LINE__, $db->error());
    106. 

  106. 			$last_post = $db->fetch_assoc($result);
    107. 

  107. 

  108. 			// How many posts did we just delete?
    109. 

  109. 			$num_posts_deleted = substr_count($posts, ',') + 1;
    110. 

  110. 

  111. 			// Update the topic
    112. 

  112. 			$db->query('UPDATE '.$db->prefix.'topics SET last_post='.$last_post['posted'].', last_post_id='.$last_post['id'].', last_poster=\''.$db->escape($last_post['poster']).'\', num_replies=num_replies-'.$num_posts_deleted.' WHERE id='.$tid) or error('Unable to update topic', __FILE__, __LINE__, $db->error());
    113. 

  113. 

  114. 			update_forum($fid);
    115. 

  115. 

  116. 			redirect('viewtopic.php?id='.$tid, $lang_misc['Delete posts redirect']);
    117. 

  117. 		}
    118. 

  118. 

  119. 

  120. 		$page_title = array(pun_htmlspecialchars($pun_config['o_board_title']), $lang_misc['Moderate']);
    121. 

  121. 		define('PUN_ACTIVE_PAGE', 'index');
    122. 

  122. 		require PUN_ROOT.'header.php';
    123. 

  123. 

  124. ?>
    125. 

  125. <div class="blockform">
    126. 

  126. 	<h2><span><?php echo $lang_misc['Delete posts'] ?></span></h2>
    127. 

  127. 	<div class="box">
    128. 

  128. 		<form method="post" action="moderate.php?fid=<?php echo $fid ?>&amp;tid=<?php echo $tid ?>">
    129. 

  129. 			<div class="inform">
    130. 

  130. 				<fieldset>
    131. 

  131. 					<legend><?php echo $lang_misc['Confirm delete legend'] ?></legend>
    132. 

  132. 					<div class="infldset">
    133. 

  133. 						<input type="hidden" name="posts" value="<?php echo implode(',', array_map('intval', array_keys($posts))) ?>" />
    134. 

  134. 						<p><?php echo $lang_misc['Delete posts comply'] ?></p>
    135. 

  135. 					</div>
    136. 

  136. 				</fieldset>
    137. 

  137. 			</div>
    138. 

  138. 			<p class="buttons"><input type="submit" name="delete_posts_comply" value="<?php echo $lang_misc['Delete'] ?>" /> <a href="javascript:history.go(-1)"><?php echo $lang_common['Go back'] ?></a></p>
    139. 

  139. 		</form>
    140. 

  140. 	</div>
    141. 

  141. </div>
    142. 

  142. <?php
    143. 

  143. 

  144. 		require PUN_ROOT.'footer.php';
    145. 

  145. 	}
    146. 

  146. 	else if (isset($_POST['split_posts']) || isset($_POST['split_posts_comply']))
    147. 

  147. 	{
    148. 

  148. 		$posts = isset($_POST['posts']) ? $_POST['posts'] : array();
    149. 

  149. 		if (empty($posts))
    150. 

  150. 			message($lang_misc['No posts selected']);
    151. 

  151. 

  152. 		if (isset($_POST['split_posts_comply']))
    153. 

  153. 		{
    154. 

  154. 			confirm_referrer('moderate.php');
    155. 

  155. 

  156. 			if (@preg_match('/[^0-9,]/', $posts))
    157. 

  157. 				message($lang_common['Bad request']);
    158. 

  158. 

  159. 			// How many posts did we just split off?
    160. 

  160. 			$num_posts_splitted = substr_count($posts, ',') + 1;
    161. 

  161. 

  162. 			// Verify that the post IDs are valid
    163. 

  163. 			$result = $db->query('SELECT 1 FROM '.$db->prefix.'posts WHERE id IN('.$posts.') AND topic_id='.$tid) or error('Unable to check posts', __FILE__, __LINE__, $db->error());
    164. 

  164. 

  165. 			if ($db->num_rows($result) != $num_posts_splitted)
    166. 

  166. 				message($lang_common['Bad request']);
    167. 

  167. 

  168. 			// Load the post.php language file
    169. 

  169. 			require PUN_ROOT.'lang/'.$pun_user['language'].'/post.php';
    170. 

  170. 

  171. 			// Check subject
    172. 

  172. 			$new_subject = isset($_POST['new_subject']) ? pun_trim($_POST['new_subject']) : '';
    173. 

  173. 

  174. 			if ($new_subject == '')
    175. 

  175. 				message($lang_post['No subject']);
    176. 

  176. 			else if (pun_strlen($new_subject) > 70)
    177. 

  177. 				message($lang_post['Too long subject']);
    178. 

  178. 

  179. 			// Get data from the new first post
    180. 

  180. 			$result = $db->query('SELECT p.id, p.poster, p.posted FROM '.$db->prefix.'posts AS p WHERE id IN('.$posts.') ORDER BY p.id ASC LIMIT 1') or error('Unable to get first post', __FILE__, __LINE__, $db->error());
    181. 

  181. 			$first_post_data = $db->fetch_assoc($result);
    182. 

  182. 

  183. 			// Create the new topic
    184. 

  184. 			$db->query('INSERT INTO '.$db->prefix.'topics (poster, subject, posted, first_post_id, forum_id) VALUES (\''.$db->escape($first_post_data['poster']).'\', \''.$db->escape($new_subject).'\', '.$first_post_data['posted'].', '.$first_post_data['id'].', '.$fid.')') or error('Unable to create new topic', __FILE__, __LINE__, $db->error());
    185. 

  185. 			$new_tid = $db->insert_id();
    186. 

  186. 

  187. 			// Move the posts to the new topic
    188. 

  188. 			$db->query('UPDATE '.$db->prefix.'posts SET topic_id='.$new_tid.' WHERE id IN('.$posts.')') or error('Unable to move posts into new topic', __FILE__, __LINE__, $db->error());
    189. 

  189. 

  190. 			// Get last_post, last_post_id, and last_poster from the topic and update it
    191. 

  191. 			$result = $db->query('SELECT id, poster, posted FROM '.$db->prefix.'posts WHERE topic_id='.$tid.' ORDER BY id DESC LIMIT 1') or error('Unable to fetch post info', __FILE__, __LINE__, $db->error());
    192. 

  192. 			$last_post_data = $db->fetch_assoc($result);
    193. 

  193. 			$db->query('UPDATE '.$db->prefix.'topics SET last_post='.$last_post_data['posted'].', last_post_id='.$last_post_data['id'].', last_poster=\''.$db->escape($last_post_data['poster']).'\', num_replies=num_replies-'.$num_posts_splitted.' WHERE id='.$tid) or error('Unable to update topic', __FILE__, __LINE__, $db->error());
    194. 

  194. 

  195. 			// Get last_post, last_post_id, and last_poster from the new topic and update it
    196. 

  196. 			$result = $db->query('SELECT id, poster, posted FROM '.$db->prefix.'posts WHERE topic_id='.$new_tid.' ORDER BY id DESC LIMIT 1') or error('Unable to fetch post info', __FILE__, __LINE__, $db->error());
    197. 

  197. 			$last_post_data = $db->fetch_assoc($result);
    198. 

  198. 			$db->query('UPDATE '.$db->prefix.'topics SET last_post='.$last_post_data['posted'].', last_post_id='.$last_post_data['id'].', last_poster=\''.$db->escape($last_post_data['poster']).'\', num_replies='.($num_posts_splitted-1).' WHERE id='.$new_tid) or error('Unable to update topic', __FILE__, __LINE__, $db->error());
    199. 

  199. 

  200. 			update_forum($fid);
    201. 

  201. 

  202. 			redirect('viewtopic.php?id='.$new_tid, $lang_misc['Split posts redirect']);
    203. 

  203. 		}
    204. 

  204. 

  205. 		$page_title = array(pun_htmlspecialchars($pun_config['o_board_title']), $lang_misc['Moderate']);
    206. 

  206. 		$focus_element = array('subject','new_subject');
    207. 

  207. 		define('PUN_ACTIVE_PAGE', 'index');
    208. 

  208. 		require PUN_ROOT.'header.php';
    209. 

  209. 

  210. ?>
    211. 

  211. <div class="blockform">
    212. 

  212. 	<h2><span><?php echo $lang_misc['Split posts'] ?></span></h2>
    213. 

  213. 	<div class="box">
    214. 

  214. 		<form id="subject" method="post" action="moderate.php?fid=<?php echo $fid ?>&amp;tid=<?php echo $tid ?>">
    215. 

  215. 			<div class="inform">
    216. 

  216. 				<fieldset>
    217. 

  217. 					<legend><?php echo $lang_misc['Confirm split legend'] ?></legend>
    218. 

  218. 					<div class="infldset">
    219. 

  219. 						<input type="hidden" name="posts" value="<?php echo implode(',', array_map('intval', array_keys($posts))) ?>" />
    220. 

  220. 						<label class="required"><strong><?php echo $lang_misc['New subject'] ?> <span><?php echo $lang_common['Required'] ?></span></strong><br /><input type="text" name="new_subject" size="80" maxlength="70" /><br /></label>
    221. 

  221. 						<p><?php echo $lang_misc['Split posts comply'] ?></p>
    222. 

  222. 					</div>
    223. 

  223. 				</fieldset>
    224. 

  224. 			</div>
    225. 

  225. 			<p class="buttons"><input type="submit" name="split_posts_comply" value="<?php echo $lang_misc['Split'] ?>" /> <a href="javascript:history.go(-1)"><?php echo $lang_common['Go back'] ?></a></p>
    226. 

  226. 		</form>
    227. 

  227. 	</div>
    228. 

  228. </div>
    229. 

  229. <?php
    230. 

  230. 

  231. 		require PUN_ROOT.'footer.php';
    232. 

  232. 	}
    233. 

  233. 

  234. 

  235. 	// Show the moderate posts view
    236. 

  236. 

  237. 	// Load the viewtopic.php language file
    238. 

  238. 	require PUN_ROOT.'lang/'.$pun_user['language'].'/topic.php';
    239. 

  239. 

  240. 	// Used to disable the Move and Delete buttons if there are no replies to this topic
    241. 

  241. 	$button_status = ($cur_topic['num_replies'] == 0) ? ' disabled="disabled"' : '';
    242. 

  242. 

  243. 

  244. 	// Determine the post offset (based on $_GET['p'])
    245. 

  245. 	$num_pages = ceil(($cur_topic['num_replies'] + 1) / $pun_user['disp_posts']);
    246. 

  246. 

  247. 	$p = (!isset($_GET['p']) || $_GET['p'] <= 1 || $_GET['p'] > $num_pages) ? 1 : intval($_GET['p']);
    248. 

  248. 	$start_from = $pun_user['disp_posts'] * ($p - 1);
    249. 

  249. 

  250. 	// Generate paging links
    251. 

  251. 	$paging_links = '<span class="pages-label">'.$lang_common['Pages'].' </span>'.paginate($num_pages, $p, 'moderate.php?fid='.$fid.'&amp;tid='.$tid);
    252. 

  252. 

  253. 

  254. 	if ($pun_config['o_censoring'] == '1')
    255. 

  255. 		$cur_topic['subject'] = censor_words($cur_topic['subject']);
    256. 

  256. 

  257. 

  258. 	$page_title = array(pun_htmlspecialchars($pun_config['o_board_title']), pun_htmlspecialchars($cur_topic['forum_name']), pun_htmlspecialchars($cur_topic['subject']));
    259. 

  259. 	define('PUN_ACTIVE_PAGE', 'index');
    260. 

  260. 	require PUN_ROOT.'header.php';
    261. 

  261. 

  262. ?>
    263. 

  263. <div class="linkst">
    264. 

  264. 	<div class="inbox crumbsplus">
    265. 

  265. 		<ul class="crumbs">
    266. 

  266. 			<li><a href="index.php"><?php echo $lang_common['Index'] ?></a></li>
    267. 

  267. 			<li><span>»&#160;</span><a href="viewforum.php?id=<?php echo $fid ?>"><?php echo pun_htmlspecialchars($cur_topic['forum_name']) ?></a></li>
    268. 

  268. 			<li><span>»&#160;</span><a href="viewtopic.php?id=<?php echo $tid ?>"><?php echo pun_htmlspecialchars($cur_topic['subject']) ?></a></li>
    269. 

  269. 			<li><span>»&#160;</span><strong><?php echo $lang_misc['Moderate'] ?></strong></li>
    270. 

  270. 		</ul>
    271. 

  271. 		<div class="pagepost">
    272. 

  272. 			<p class="pagelink conl"><?php echo $paging_links ?></p>
    273. 

  273. 		</div>
    274. 

  274. 		<div class="clearer"></div>
    275. 

  275. 	</div>
    276. 

  276. </div>
    277. 

  277. 

  278. <form method="post" action="moderate.php?fid=<?php echo $fid ?>&amp;tid=<?php echo $tid ?>">
    279. 

  279. <?php
    280. 

  280. 

  281. 	require PUN_ROOT.'include/parser.php';
    282. 

  282. 

  283. 	$post_count = 0; // Keep track of post numbers
    284. 

  284. 

  285. 	// Retrieve a list of post IDs, LIMIT is (really) expensive so we only fetch the IDs here then later fetch the remaining data
    286. 

  286. 	$result = $db->query('SELECT id FROM '.$db->prefix.'posts WHERE topic_id='.$tid.' ORDER BY id LIMIT '.$start_from.','.$pun_user['disp_posts']) or error('Unable to fetch post IDs', __FILE__, __LINE__, $db->error());
    287. 

  287. 

  288. 	$post_ids = array();
    289. 

  289. 	for ($i = 0;$cur_post_id = $db->result($result, $i);$i++)
    290. 

  290. 		$post_ids[] = $cur_post_id;
    291. 

  291. 

  292. 	// Retrieve the posts (and their respective poster)
    293. 

  293. 	$result = $db->query('SELECT u.title, u.num_posts, g.g_id, g.g_user_title, p.id, p.poster, p.poster_id, p.message, p.hide_smilies, p.use_bbcode, p.posted, p.edited, p.edited_by FROM '.$db->prefix.'posts AS p INNER JOIN '.$db->prefix.'users AS u ON u.id=p.poster_id INNER JOIN '.$db->prefix.'groups AS g ON g.g_id=u.group_id WHERE p.id IN ('.implode(',', $post_ids).') ORDER BY p.id', true) or error('Unable to fetch post info', __FILE__, __LINE__, $db->error());
    294. 

  294. 

  295. 	while ($cur_post = $db->fetch_assoc($result))
    296. 

  296. 	{
    297. 

  297. 		$post_count++;
    298. 

  298. 

  299. 		// If the poster is a registered user
    300. 

  300. 		if ($cur_post['poster_id'] > 1)
    301. 

  301. 		{
    302. 

  302. 			if ($pun_user['g_view_users'] == '1')
    303. 

  303. 				$poster = '<a href="profile.php?id='.$cur_post['poster_id'].'">'.pun_htmlspecialchars($cur_post['poster']).'</a>';
    304. 

  304. 			else
    305. 

  305. 				$poster = pun_htmlspecialchars($cur_post['poster']);
    306. 

  306. 

  307. 			// get_title() requires that an element 'username' be present in the array
    308. 

  308. 			$cur_post['username'] = $cur_post['poster'];
    309. 

  309. 			$user_title = get_title($cur_post);
    310. 

  310. 

  311. 			if ($pun_config['o_censoring'] == '1')
    312. 

  312. 				$user_title = censor_words($user_title);
    313. 

  313. 		}
    314. 

  314. 		// If the poster is a guest (or a user that has been deleted)
    315. 

  315. 		else
    316. 

  316. 		{
    317. 

  317. 			$poster = pun_htmlspecialchars($cur_post['poster']);
    318. 

  318. 			$user_title = $lang_topic['Guest'];
    319. 

  319. 		}
    320. 

  320. 

  321. 		// Perform the main parsing of the message (BBCode, smilies, censor words etc)
    322. 

  322. 		$cur_post['message'] = parse_message($cur_post['message'], $cur_post['use_bbcode'], $cur_post['hide_smilies']);
    323. 

  323. 

  324. ?>
    325. 

  325. 

  326. <div id="p<?php echo $cur_post['id'] ?>" class="blockpost<?php if($cur_post['id'] == $cur_topic['first_post_id']) echo ' firstpost' ?><?php echo ($post_count % 2 == 0) ? ' roweven' : ' rowodd' ?><?php if ($post_count == 1) echo ' blockpost1' ?>">
    327. 

  327. 	<h2><span><span class="conr">#<?php echo ($start_from + $post_count) ?></span> <a href="viewtopic.php?pid=<?php echo $cur_post['id'].'#p'.$cur_post['id'] ?>"><?php echo format_time($cur_post['posted']) ?></a></span></h2>
    328. 

  328. 	<div class="box">
    329. 

  329. 		<div class="inbox">
    330. 

  330. 			<div class="postbody">
    331. 

  331. 				<div class="postleft">
    332. 

  332. 					<dl>
    333. 

  333. 						<dt><strong><?php echo $poster ?></strong></dt>
    334. 

  334. 						<dd class="usertitle"><strong><?php echo $user_title ?></strong></dd>
    335. 

  335. 					</dl>
    336. 

  336. 				</div>
    337. 

  337. 				<div class="postright">
    338. 

  338. 					<h3 class="nosize"><?php echo $lang_common['Message'] ?></h3>
    339. 

  339. 					<div class="postmsg">
    340. 

  340. 						<?php echo $cur_post['message']."\n" ?>
    341. 

  341. <?php if ($cur_post['edited'] != '') echo "\t\t\t\t\t\t".'<p class="postedit"><em>'.$lang_topic['Last edit'].' '.pun_htmlspecialchars($cur_post['edited_by']).' ('.format_time($cur_post['edited']).')</em></p>'."\n"; ?>
    342. 

  342. 					</div>
    343. 

  343. 				</div>
    344. 

  344. 			</div>
    345. 

  345. 		</div>
    346. 

  346. 		<div class="inbox">
    347. 

  347. 			<div class="postfoot clearb">
    348. 

  348. 				<div class="postfootright"><?php echo ($cur_post['id'] != $cur_topic['first_post_id']) ? '<p class="multidelete"><label><strong>'.$lang_misc['Select'].'</strong>&#160;<input type="checkbox" name="posts['.$cur_post['id'].']" value="1" /></label></p>' : '<p>'.$lang_misc['Cannot select first'].'</p>' ?></div>
    349. 

  349. 			</div>
    350. 

  350. 		</div>
    351. 

  351. 	</div>
    352. 

  352. </div>
    353. 

  353. 

  354. <?php
    355. 

  355. 

  356. 	}
    357. 

  357. 

  358. ?>
    359. 

  359. <div class="postlinksb">
    360. 

  360. 	<div class="inbox">
    361. 

  361. 		<div class="pagepost">
    362. 

  362. 			<p class="pagelink conl"><?php echo $paging_links ?></p>
    363. 

  363. 			<p class="conr modbuttons"><input type="submit" name="split_posts" value="<?php echo $lang_misc['Split'] ?>"<?php echo $button_status ?> /> <input type="submit" name="delete_posts" value="<?php echo $lang_misc['Delete'] ?>"<?php echo $button_status ?> /></p>
    364. 

  364. 		</div>
    365. 

  365. 	</div>
    366. 

  366. </div>
    367. 

  367. </form>
    368. 

  368. <?php
    369. 

  369. 

  370. 	require PUN_ROOT.'footer.php';
    371. 

  371. }
    372. 

  372. 

  373. 

  374. // Move one or more topics
    375. 

  375. if (isset($_REQUEST['move_topics']) || isset($_POST['move_topics_to']))
    376. 

  376. {
    377. 

  377. 	if (isset($_POST['move_topics_to']))
    378. 

  378. 	{
    379. 

  379. 		confirm_referrer('moderate.php');
    380. 

  380. 

  381. 		if (@preg_match('/[^0-9,]/', $_POST['topics']))
    382. 

  382. 			message($lang_common['Bad request']);
    383. 

  383. 

  384. 		$topics = explode(',', $_POST['topics']);
    385. 

  385. 		$move_to_forum = isset($_POST['move_to_forum']) ? intval($_POST['move_to_forum']) : 0;
    386. 

  386. 		if (empty($topics) || $move_to_forum < 1)
    387. 

  387. 			message($lang_common['Bad request']);
    388. 

  388. 

  389. 		// Verify that the topic IDs are valid
    390. 

  390. 		$result = $db->query('SELECT 1 FROM '.$db->prefix.'topics WHERE id IN('.implode(',',$topics).') AND forum_id='.$fid) or error('Unable to check topics', __FILE__, __LINE__, $db->error());
    391. 

  391. 

  392. 		if ($db->num_rows($result) != count($topics))
    393. 

  393. 			message($lang_common['Bad request']);
    394. 

  394. 

  395. 		// Delete any redirect topics if there are any (only if we moved/copied the topic back to where it was once moved from)
    396. 

  396. 		$db->query('DELETE FROM '.$db->prefix.'topics WHERE forum_id='.$move_to_forum.' AND moved_to IN('.implode(',',$topics).')') or error('Unable to delete redirect topics', __FILE__, __LINE__, $db->error());
    397. 

  397. 

  398. 		// Move the topic(s)
    399. 

  399. 		$db->query('UPDATE '.$db->prefix.'topics SET forum_id='.$move_to_forum.' WHERE id IN('.implode(',',$topics).')') or error('Unable to move topics', __FILE__, __LINE__, $db->error());
    400. 

  400. 

  401. 		// Should we create redirect topics?
    402. 

  402. 		if (isset($_POST['with_redirect']))
    403. 

  403. 		{
    404. 

  404. 			foreach ($topics as $cur_topic)
    405. 

  405. 			{
    406. 

  406. 				// Fetch info for the redirect topic
    407. 

  407. 				$result = $db->query('SELECT poster, subject, posted, last_post FROM '.$db->prefix.'topics WHERE id='.$cur_topic) or error('Unable to fetch topic info', __FILE__, __LINE__, $db->error());
    408. 

  408. 				$moved_to = $db->fetch_assoc($result);
    409. 

  409. 

  410. 				// Create the redirect topic
    411. 

  411. 				$db->query('INSERT INTO '.$db->prefix.'topics (poster, subject, posted, last_post, moved_to, forum_id) VALUES(\''.$db->escape($moved_to['poster']).'\', \''.$db->escape($moved_to['subject']).'\', '.$moved_to['posted'].', '.$moved_to['last_post'].', '.$cur_topic.', '.$fid.')') or error('Unable to create redirect topic', __FILE__, __LINE__, $db->error());
    412. 

  412. 			}
    413. 

  413. 		}
    414. 

  414. 

  415. 		update_forum($fid); // Update the forum FROM which the topic was moved
    416. 

  416. 		update_forum($move_to_forum); // Update the forum TO which the topic was moved
    417. 

  417. 

  418. 		$redirect_msg = (count($topics) > 1) ? $lang_misc['Move topics redirect'] : $lang_misc['Move topic redirect'];
    419. 

  419. 		redirect('viewforum.php?id='.$move_to_forum, $redirect_msg);
    420. 

  420. 	}
    421. 

  421. 

  422. 	if (isset($_POST['move_topics']))
    423. 

  423. 	{
    424. 

  424. 		$topics = isset($_POST['topics']) ? $_POST['topics'] : array();
    425. 

  425. 		if (empty($topics))
    426. 

  426. 			message($lang_misc['No topics selected']);
    427. 

  427. 

  428. 		$topics = implode(',', array_map('intval', array_keys($topics)));
    429. 

  429. 		$action = 'multi';
    430. 

  430. 	}
    431. 

  431. 	else
    432. 

  432. 	{
    433. 

  433. 		$topics = intval($_GET['move_topics']);
    434. 

  434. 		if ($topics < 1)
    435. 

  435. 			message($lang_common['Bad request']);
    436. 

  436. 

  437. 		$action = 'single';
    438. 

  438. 	}
    439. 

  439. 

  440. 	$result = $db->query('SELECT c.id AS cid, c.cat_name, f.id AS fid, f.forum_name FROM '.$db->prefix.'categories AS c INNER JOIN '.$db->prefix.'forums AS f ON c.id=f.cat_id LEFT JOIN '.$db->prefix.'forum_perms AS fp ON (fp.forum_id=f.id AND fp.group_id='.$pun_user['g_id'].') WHERE (fp.read_forum IS NULL OR fp.read_forum=1) AND f.redirect_url IS NULL ORDER BY c.disp_position, c.id, f.disp_position') or error('Unable to fetch category/forum list', __FILE__, __LINE__, $db->error());
    441. 

  441. 	if ($db->num_rows($result) < 2)
    442. 

  442. 		message($lang_misc['Nowhere to move']);
    443. 

  443. 

  444. 	$page_title = array(pun_htmlspecialchars($pun_config['o_board_title']), $lang_misc['Moderate']);
    445. 

  445. 	define('PUN_ACTIVE_PAGE', 'index');
    446. 

  446. 	require PUN_ROOT.'header.php';
    447. 

  447. 

  448. ?>
    449. 

  449. <div class="blockform">
    450. 

  450. 	<h2><span><?php echo ($action == 'single') ? $lang_misc['Move topic'] : $lang_misc['Move topics'] ?></span></h2>
    451. 

  451. 	<div class="box">
    452. 

  452. 		<form method="post" action="moderate.php?fid=<?php echo $fid ?>">
    453. 

  453. 			<div class="inform">
    454. 

  454. 			<input type="hidden" name="topics" value="<?php echo $topics ?>" />
    455. 

  455. 				<fieldset>
    456. 

  456. 					<legend><?php echo $lang_misc['Move legend'] ?></legend>
    457. 

  457. 					<div class="infldset">
    458. 

  458. 						<label><?php echo $lang_misc['Move to'] ?>
    459. 

  459. 						<br /><select name="move_to_forum">
    460. 

  460. <?php
    461. 

  461. 

  462. 	$cur_category = 0;
    463. 

  463. 	while ($cur_forum = $db->fetch_assoc($result))
    464. 

  464. 	{
    465. 

  465. 		if ($cur_forum['cid'] != $cur_category) // A new category since last iteration?
    466. 

  466. 		{
    467. 

  467. 			if ($cur_category)
    468. 

  468. 				echo "\t\t\t\t\t\t\t".'</optgroup>'."\n";
    469. 

  469. 

  470. 			echo "\t\t\t\t\t\t\t".'<optgroup label="'.pun_htmlspecialchars($cur_forum['cat_name']).'">'."\n";
    471. 

  471. 			$cur_category = $cur_forum['cid'];
    472. 

  472. 		}
    473. 

  473. 

  474. 		if ($cur_forum['fid'] != $fid)
    475. 

  475. 			echo "\t\t\t\t\t\t\t\t".'<option value="'.$cur_forum['fid'].'">'.pun_htmlspecialchars($cur_forum['forum_name']).'</option>'."\n";
    476. 

  476. 	}
    477. 

  477. 

  478. ?>
    479. 

  479. 							</optgroup>
    480. 

  480. 						</select>
    481. 

  481. 						<br /></label>
    482. 

  482. 						<div class="rbox">
    483. 

  483. 							<label><input type="checkbox" name="with_redirect" value="1"<?php if ($action == 'single') echo ' checked="checked"' ?> /><?php echo $lang_misc['Leave redirect'] ?><br /></label>
    484. 

  484. 						</div>
    485. 

  485. 					</div>
    486. 

  486. 				</fieldset>
    487. 

  487. 			</div>
    488. 

  488. 			<p class="buttons"><input type="submit" name="move_topics_to" value="<?php echo $lang_misc['Move'] ?>" /> <a href="javascript:history.go(-1)"><?php echo $lang_common['Go back'] ?></a></p>
    489. 

  489. 		</form>
    490. 

  490. 	</div>
    491. 

  491. </div>
    492. 

  492. <?php
    493. 

  493. 

  494. 	require PUN_ROOT.'footer.php';
    495. 

  495. }
    496. 

  496. 

  497. // Merge two or more topics
    498. 

  498. else if (isset($_POST['merge_topics']) || isset($_POST['merge_topics_comply']))
    499. 

  499. {
    500. 

  500. 	if (isset($_POST['merge_topics_comply']))
    501. 

  501. 	{
    502. 

  502. 		confirm_referrer('moderate.php');
    503. 

  503. 

  504. 		if (@preg_match('/[^0-9,]/', $_POST['topics']))
    505. 

  505. 			message($lang_common['Bad request']);
    506. 

  506. 

  507. 		$topics = explode(',', $_POST['topics']);
    508. 

  508. 		if (count($topics) < 2)
    509. 

  509. 			message($lang_misc['Not enough topics selected']);
    510. 

  510. 

  511. 		// Verify that the topic IDs are valid (moved topics can not be merged?)
    512. 

  512. 		// $result = $db->query('SELECT 1 FROM '.$db->prefix.'topics WHERE id IN('.implode(',', $topics).') AND moved_to IS NULL AND forum_id='.$fid) or error('Unable to check topics', __FILE__, __LINE__, $db->error());
    513. 

  513. 		$result = $db->query('SELECT 1 FROM '.$db->prefix.'topics WHERE id IN('.implode(',', $topics).') AND forum_id='.$fid) or error('Unable to check topics', __FILE__, __LINE__, $db->error());
    514. 

  514. 		if ($db->num_rows($result) != count($topics))
    515. 

  515. 			message($lang_common['Bad request']);
    516. 

  516. 

  517. 		// Fetch the topic that we're merging into
    518. 

  518. 		$result = $db->query('SELECT t.id FROM '.$db->prefix.'topics AS t WHERE t.id IN('.implode(',', $topics).') ORDER BY posted LIMIT 1') or error('Unable to get topic', __FILE__, __LINE__, $db->error());
    519. 

  519. 		$merge_to_tid = $db->result($result);
    520. 

  520. 

  521. 		// Make any redirect topics point to our new, merged topic
    522. 

  522. 		$query = 'UPDATE '.$db->prefix.'topics SET moved_to='.$merge_to_tid.' WHERE moved_to IN('.implode(',', $topics).')';
    523. 

  523. 

  524. 		// Should we create redirect topics?
    525. 

  525. 		if (isset($_POST['with_redirect']))
    526. 

  526. 			$query .= ' OR (id IN('.implode(',', $topics).') AND id != '.$merge_to_tid.')';
    527. 

  527. 

  528. 		$db->query($query) or error('Unable to make redirection topics', __FILE__, __LINE__, $db->error());
    529. 

  529. 

  530. 		// Merge the posts into the topic
    531. 

  531. 		$db->query('UPDATE '.$db->prefix.'posts SET topic_id='.$merge_to_tid.' WHERE topic_id IN('.implode(',', $topics).')') or error('Unable to merge the posts into the topic', __FILE__, __LINE__, $db->error());
    532. 

  532. 

  533. 		// Delete any subscriptions
    534. 

  534. 		$db->query('DELETE FROM '.$db->prefix.'subscriptions WHERE topic_id IN('.implode(',', $topics).') AND topic_id != '.$merge_to_tid) or error('Unable to delete subscriptions', __FILE__, __LINE__, $db->error());
    535. 

  535. 

  536. 		// Without redirection the old topics are removed
    537. 

  537. 		if (!isset($_POST['with_redirect']))
    538. 

  538. 			$db->query('DELETE FROM '.$db->prefix.'topics WHERE id IN('.implode(',', $topics).') AND id != '.$merge_to_tid) or error('Unable to delete old topics', __FILE__, __LINE__, $db->error());
    539. 

  539. 

  540. 		// Count number of replies in the topic
    541. 

  541. 		$result = $db->query('SELECT COUNT(id) FROM '.$db->prefix.'posts WHERE topic_id='.$merge_to_tid) or error('Unable to fetch post count for topic', __FILE__, __LINE__, $db->error());
    542. 

  542. 		$num_replies = $db->result($result, 0) - 1;
    543. 

  543. 

  544. 		// Get last_post, last_post_id and last_poster
    545. 

  545. 		$result = $db->query('SELECT posted, id, poster FROM '.$db->prefix.'posts WHERE topic_id='.$merge_to_tid.' ORDER BY id DESC LIMIT 1') or error('Unable to get last post info', __FILE__, __LINE__, $db->error());
    546. 

  546. 		list($last_post, $last_post_id, $last_poster) = $db->fetch_row($result);
    547. 

  547. 

  548. 		// Update topic
    549. 

  549. 		$db->query('UPDATE '.$db->prefix.'topics SET num_replies='.$num_replies.', last_post='.$last_post.', last_post_id='.$last_post_id.', last_poster=\''.$db->escape($last_poster).'\' WHERE id='.$merge_to_tid) or error('Unable to update topic', __FILE__, __LINE__, $db->error());
    550. 

  550. 

  551.         // Update the thread/mail association
    552. 

  552.         $db->query('UPDATE '.$db->prefix.'mail_thread_assoc SET id_thread='.$merge_to_tid.' WHERE id_thread IN('.implode(',', $topics).')') or error('Unable to update the thread association', __FILE__, __LINE__, $db->error());
    553. 

  553. 

  554. 		// Update the forum FROM which the topic was moved and redirect
    555. 

  555. 		update_forum($fid);
    556. 

  556. 		redirect('viewforum.php?id='.$fid, $lang_misc['Merge topics redirect']);
    557. 

  557. 	}
    558. 

  558. 

  559. 	$topics = isset($_POST['topics']) ? $_POST['topics'] : array();
    560. 

  560. 	if (count($topics) < 2)
    561. 

  561. 		message($lang_misc['Not enough topics selected']);
    562. 

  562. 

  563. 	$page_title = array(pun_htmlspecialchars($pun_config['o_board_title']), $lang_misc['Moderate']);
    564. 

  564. 	define('PUN_ACTIVE_PAGE', 'index');
    565. 

  565. 	require PUN_ROOT.'header.php';
    566. 

  566. 

  567. ?>
    568. 

  568. <div class="blockform">
    569. 

  569. 	<h2><span><?php echo $lang_misc['Merge topics'] ?></span></h2>
    570. 

  570. 	<div class="box">
    571. 

  571. 		<form method="post" action="moderate.php?fid=<?php echo $fid ?>">
    572. 

  572. 			<input type="hidden" name="topics" value="<?php echo implode(',', array_map('intval', array_keys($topics))) ?>" />
    573. 

  573. 			<div class="inform">
    574. 

  574. 				<fieldset>
    575. 

  575. 					<legend><?php echo $lang_misc['Confirm merge legend'] ?></legend>
    576. 

  576. 					<div class="infldset">
    577. 

  577. 						<div class="rbox">
    578. 

  578. 							<label><input type="checkbox" name="with_redirect" value="1" /><?php echo $lang_misc['Leave redirect'] ?><br /></label>
    579. 

  579. 						</div>
    580. 

  580. 					</div>
    581. 

  581. 				</fieldset>
    582. 

  582. 			</div>
    583. 

  583. 			<p class="buttons"><input type="submit" name="merge_topics_comply" value="<?php echo $lang_misc['Merge'] ?>" /> <a href="javascript:history.go(-1)"><?php echo $lang_common['Go back'] ?></a></p>
    584. 

  584. 		</form>
    585. 

  585. 	</div>
    586. 

  586. </div>
    587. 

  587. <?php
    588. 

  588. 

  589. 	require PUN_ROOT.'footer.php';
    590. 

  590. }
    591. 

  591. 

  592. // Delete one or more topics
    593. 

  593. else if (isset($_POST['delete_topics']) || isset($_POST['delete_topics_comply']))
    594. 

  594. {
    595. 

  595. 	$topics = isset($_POST['topics']) ? $_POST['topics'] : array();
    596. 

  596. 	if (empty($topics))
    597. 

  597. 		message($lang_misc['No topics selected']);
    598. 

  598. 

  599. 	if (isset($_POST['delete_topics_comply']))
    600. 

  600. 	{
    601. 

  601. 		confirm_referrer('moderate.php');
    602. 

  602. 

  603. 		if (@preg_match('/[^0-9,]/', $topics))
    604. 

  604. 			message($lang_common['Bad request']);
    605. 

  605. 

  606. 		require PUN_ROOT.'include/search_idx.php';
    607. 

  607. 

  608. 		// Verify that the topic IDs are valid
    609. 

  609. 		$result = $db->query('SELECT 1 FROM '.$db->prefix.'topics WHERE id IN('.$topics.') AND forum_id='.$fid) or error('Unable to check topics', __FILE__, __LINE__, $db->error());
    610. 

  610. 

  611. 		if ($db->num_rows($result) != substr_count($topics, ',') + 1)
    612. 

  612. 			message($lang_common['Bad request']);
    613. 

  613. 

  614. 		// Delete the topics and any redirect topics
    615. 

  615. 		$db->query('DELETE FROM '.$db->prefix.'topics WHERE id IN('.$topics.') OR moved_to IN('.$topics.')') or error('Unable to delete topic', __FILE__, __LINE__, $db->error());
    616. 

  616. 

  617. 		// Delete any subscriptions
    618. 

  618. 		$db->query('DELETE FROM '.$db->prefix.'subscriptions WHERE topic_id IN('.$topics.')') or error('Unable to delete subscriptions', __FILE__, __LINE__, $db->error());
    619. 

  619. 

  620. 		// Create a list of the post IDs in this topic and then strip the search index
    621. 

  621. 		$result = $db->query('SELECT id FROM '.$db->prefix.'posts WHERE topic_id IN('.$topics.')') or error('Unable to fetch posts', __FILE__, __LINE__, $db->error());
    622. 

  622. 

  623. 		$post_ids = '';
    624. 

  624. 		while ($row = $db->fetch_row($result))
    625. 

  625. 			$post_ids .= ($post_ids != '') ? ','.$row[0] : $row[0];
    626. 

  626. 

  627. 		// We have to check that we actually have a list of post IDs since we could be deleting just a redirect topic
    628. 

  628. 		if ($post_ids != '')
    629. 

  629. 			strip_search_index($post_ids);
    630. 

  630. 

  631. 		// Delete posts
    632. 

  632. 		$db->query('DELETE FROM '.$db->prefix.'posts WHERE topic_id IN('.$topics.')') or error('Unable to delete posts', __FILE__, __LINE__, $db->error());
    633. 

  633. 

  634. 		update_forum($fid);
    635. 

  635. 

  636. 		redirect('viewforum.php?id='.$fid, $lang_misc['Delete topics redirect']);
    637. 

  637. 	}
    638. 

  638. 

  639. 

  640. 	$page_title = array(pun_htmlspecialchars($pun_config['o_board_title']), $lang_misc['Moderate']);
    641. 

  641. 	define('PUN_ACTIVE_PAGE', 'index');
    642. 

  642. 	require PUN_ROOT.'header.php';
    643. 

  643. 

  644. ?>
    645. 

  645. <div class="blockform">
    646. 

  646. 	<h2><span><?php echo $lang_misc['Delete topics'] ?></span></h2>
    647. 

  647. 	<div class="box">
    648. 

  648. 		<form method="post" action="moderate.php?fid=<?php echo $fid ?>">
    649. 

  649. 			<input type="hidden" name="topics" value="<?php echo implode(',', array_map('intval', array_keys($topics))) ?>" />
    650. 

  650. 			<div class="inform">
    651. 

  651. 				<fieldset>
    652. 

  652. 					<legend><?php echo $lang_misc['Confirm delete legend'] ?></legend>
    653. 

  653. 					<div class="infldset">
    654. 

  654. 						<p><?php echo $lang_misc['Delete topics comply'] ?></p>
    655. 

  655. 					</div>
    656. 

  656. 				</fieldset>
    657. 

  657. 			</div>
    658. 

  658. 			<p class="buttons"><input type="submit" name="delete_topics_comply" value="<?php echo $lang_misc['Delete'] ?>" /><a href="javascript:history.go(-1)"><?php echo $lang_common['Go back'] ?></a></p>
    659. 

  659. 		</form>
    660. 

  660. 	</div>
    661. 

  661. </div>
    662. 

  662. <?php
    663. 

  663. 

  664. 	require PUN_ROOT.'footer.php';
    665. 

  665. }
    666. 

  666. 

  667. 

  668. // Open or close one or more topics
    669. 

  669. else if (isset($_REQUEST['open']) || isset($_REQUEST['close']))
    670. 

  670. {
    671. 

  671. 	$action = (isset($_REQUEST['open'])) ? 0 : 1;
    672. 

  672. 

  673. 	// There could be an array of topic IDs in $_POST
    674. 

  674. 	if (isset($_POST['open']) || isset($_POST['close']))
    675. 

  675. 	{
    676. 

  676. 		confirm_referrer('moderate.php');
    677. 

  677. 

  678. 		$topics = isset($_POST['topics']) ? @array_map('intval', @array_keys($_POST['topics'])) : array();
    679. 

  679. 		if (empty($topics))
    680. 

  680. 			message($lang_misc['No topics selected']);
    681. 

  681. 

  682. 		$db->query('UPDATE '.$db->prefix.'topics SET closed='.$action.' WHERE id IN('.implode(',', $topics).') AND forum_id='.$fid) or error('Unable to close topics', __FILE__, __LINE__, $db->error());
    683. 

  683. 

  684. 		$redirect_msg = ($action) ? $lang_misc['Close topics redirect'] : $lang_misc['Open topics redirect'];
    685. 

  685. 		redirect('moderate.php?fid='.$fid, $redirect_msg);
    686. 

  686. 	}
    687. 

  687. 	// Or just one in $_GET
    688. 

  688. 	else
    689. 

  689. 	{
    690. 

  690. 		confirm_referrer('viewtopic.php');
    691. 

  691. 

  692. 		$topic_id = ($action) ? intval($_GET['close']) : intval($_GET['open']);
    693. 

  693. 		if ($topic_id < 1)
    694. 

  694. 			message($lang_common['Bad request']);
    695. 

  695. 

  696. 		$db->query('UPDATE '.$db->prefix.'topics SET closed='.$action.' WHERE id='.$topic_id.' AND forum_id='.$fid) or error('Unable to close topic', __FILE__, __LINE__, $db->error());
    697. 

  697. 

  698. 		$redirect_msg = ($action) ? $lang_misc['Close topic redirect'] : $lang_misc['Open topic redirect'];
    699. 

  699. 		redirect('viewtopic.php?id='.$topic_id, $redirect_msg);
    700. 

  700. 	}
    701. 

  701. }
    702. 

  702. 

  703. 

  704. // Stick a topic
    705. 

  705. else if (isset($_GET['stick']))
    706. 

  706. {
    707. 

  707. 	confirm_referrer('viewtopic.php');
    708. 

  708. 

  709. 	$stick = intval($_GET['stick']);
    710. 

  710. 	if ($stick < 1)
    711. 

  711. 		message($lang_common['Bad request']);
    712. 

  712. 

  713. 	$db->query('UPDATE '.$db->prefix.'topics SET sticky=\'1\' WHERE id='.$stick.' AND forum_id='.$fid) or error('Unable to stick topic', __FILE__, __LINE__, $db->error());
    714. 

  714. 

  715. 	redirect('viewtopic.php?id='.$stick, $lang_misc['Stick topic redirect']);
    716. 

  716. }
    717. 

  717. 

  718. 

  719. // Unstick a topic
    720. 

  720. else if (isset($_GET['unstick']))
    721. 

  721. {
    722. 

  722. 	confirm_referrer('viewtopic.php');
    723. 

  723. 

  724. 	$unstick = intval($_GET['unstick']);
    725. 

  725. 	if ($unstick < 1)
    726. 

  726. 		message($lang_common['Bad request']);
    727. 

  727. 

  728. 	$db->query('UPDATE '.$db->prefix.'topics SET sticky=\'0\' WHERE id='.$unstick.' AND forum_id='.$fid) or error('Unable to unstick topic', __FILE__, __LINE__, $db->error());
    729. 

  729. 

  730. 	redirect('viewtopic.php?id='.$unstick, $lang_misc['Unstick topic redirect']);
    731. 

  731. }
    732. 

  732. 

  733. 

  734. // No specific forum moderation action was specified in the query string, so we'll display the moderator forum
    735. 

  735. 

  736. // Load the viewforum.php language file
    737. 

  737. require PUN_ROOT.'lang/'.$pun_user['language'].'/forum.php';
    738. 

  738. 

  739. // Fetch some info about the forum
    740. 

  740. $result = $db->query('SELECT f.forum_name, f.redirect_url, f.num_topics, f.sort_by FROM '.$db->prefix.'forums AS f LEFT JOIN '.$db->prefix.'forum_perms AS fp ON (fp.forum_id=f.id AND fp.group_id='.$pun_user['g_id'].') WHERE (fp.read_forum IS NULL OR fp.read_forum=1) AND f.id='.$fid) or error('Unable to fetch forum info', __FILE__, __LINE__, $db->error());
    741. 

  741. if (!$db->num_rows($result))
    742. 

  742. 	message($lang_common['Bad request']);
    743. 

  743. 

  744. $cur_forum = $db->fetch_assoc($result);
    745. 

  745. 

  746. // Is this a redirect forum? In that case, abort!
    747. 

  747. if ($cur_forum['redirect_url'] != '')
    748. 

  748. 	message($lang_common['Bad request']);
    749. 

  749. 

  750. // Determine the topic offset (based on $_GET['p'])
    751. 

  751. $num_pages = ceil($cur_forum['num_topics'] / $pun_user['disp_topics']);
    752. 

  752. 

  753. $p = (!isset($_GET['p']) || $_GET['p'] <= 1 || $_GET['p'] > $num_pages) ? 1 : intval($_GET['p']);
    754. 

  754. $start_from = $pun_user['disp_topics'] * ($p - 1);
    755. 

  755. 

  756. // Generate paging links
    757. 

  757. $paging_links = '<span class="pages-label">'.$lang_common['Pages'].' </span>'.paginate($num_pages, $p, 'moderate.php?fid='.$fid);
    758. 

  758. 

  759. $page_title = array(pun_htmlspecialchars($pun_config['o_board_title']), pun_htmlspecialchars($cur_forum['forum_name']));
    760. 

  760. define('PUN_ACTIVE_PAGE', 'index');
    761. 

  761. require PUN_ROOT.'header.php';
    762. 

  762. 

  763. ?>
    764. 

  764. <div class="linkst">
    765. 

  765. 	<div class="inbox crumbsplus">
    766. 

  766. 		<ul class="crumbs">
    767. 

  767. 			<li><a href="index.php"><?php echo $lang_common['Index'] ?></a></li>
    768. 

  768. 			<li><span>»&#160;</span><a href="viewforum.php?id=<?php echo $fid ?>"><?php echo pun_htmlspecialchars($cur_forum['forum_name']) ?></a></li>
    769. 

  769. 			<li><span>»&#160;</span><strong><?php echo $lang_misc['Moderate'] ?></strong></li>
    770. 

  770. 		</ul>
    771. 

  771. 		<div class="pagepost">
    772. 

  772. 			<p class="pagelink conl"><?php echo $paging_links ?></p>
    773. 

  773. 		</div>
    774. 

  774. 		<div class="clearer"></div>
    775. 

  775. 	</div>
    776. 

  776. </div>
    777. 

  777. 

  778. <form method="post" action="moderate.php?fid=<?php echo $fid ?>">
    779. 

  779. <div id="vf" class="blocktable">
    780. 

  780. 	<h2><span><?php echo pun_htmlspecialchars($cur_forum['forum_name']) ?></span></h2>
    781. 

  781. 	<div class="box">
    782. 

  782. 		<div class="inbox">
    783. 

  783. 			<table cellspacing="0">
    784. 

  784. 			<thead>
    785. 

  785. 				<tr>
    786. 

  786. 					<th class="tcl" scope="col"><?php echo $lang_common['Topic'] ?></th>
    787. 

  787. 					<th class="tc2" scope="col"><?php echo $lang_common['Replies'] ?></th>
    788. 

  788. <?php if ($pun_config['o_topic_views'] == '1'): ?>					<th class="tc3" scope="col"><?php echo $lang_forum['Views'] ?></th>
    789. 

  789. <?php endif; ?>					<th class="tcr"><?php echo $lang_common['Last post'] ?></th>
    790. 

  790. 					<th class="tcmod" scope="col"><?php echo $lang_misc['Select'] ?></th>
    791. 

  791. 				</tr>
    792. 

  792. 			</thead>
    793. 

  793. 			<tbody>
    794. 

  794. <?php
    795. 

  795. 

  796. 

  797. // Retrieve a list of topic IDs, LIMIT is (really) expensive so we only fetch the IDs here then later fetch the remaining data
    798. 

  798. $result = $db->query('SELECT id FROM '.$db->prefix.'topics WHERE forum_id='.$fid.' ORDER BY sticky DESC, '.(($cur_forum['sort_by'] == '1') ? 'posted' : 'last_post').' DESC, id DESC LIMIT '.$start_from.', '.$pun_user['disp_topics']) or error('Unable to fetch topic IDs', __FILE__, __LINE__, $db->error());
    799. 

  799. 

  800. // If there are topics in this forum
    801. 

  801. if ($db->num_rows($result))
    802. 

  802. {
    803. 

  803. 	$topic_ids = array();
    804. 

  804. 	for ($i = 0;$cur_topic_id = $db->result($result, $i);$i++)
    805. 

  805. 		$topic_ids[] = $cur_topic_id;
    806. 

  806. 

  807. 	// Select topics
    808. 

  808. 	$result = $db->query('SELECT id, poster, subject, posted, last_post, last_post_id, last_poster, num_views, num_replies, closed, sticky, moved_to FROM '.$db->prefix.'topics WHERE id IN('.implode(',', $topic_ids).') ORDER BY sticky DESC, '.(($cur_forum['sort_by'] == '1') ? 'posted' : 'last_post').' DESC, id DESC') or error('Unable to fetch topic list for forum', __FILE__, __LINE__, $db->error());
    809. 

  809. 

  810. 	$button_status = '';
    811. 

  811. 	$topic_count = 0;
    812. 

  812. 	while ($cur_topic = $db->fetch_assoc($result))
    813. 

  813. 	{
    814. 

  814. 

  815. 		++$topic_count;
    816. 

  816. 		$status_text = array();
    817. 

  817. 		$item_status = ($topic_count % 2 == 0) ? 'roweven' : 'rowodd';
    818. 

  818. 		$icon_type = 'icon';
    819. 

  819. 

  820. 		if ($cur_topic['moved_to'] == null)
    821. 

  821. 		{
    822. 

  822. 			$last_post = '<a href="viewtopic.php?pid='.$cur_topic['last_post_id'].'#p'.$cur_topic['last_post_id'].'">'.format_time($cur_topic['last_post']).'</a> <span class="byuser">'.$lang_common['by'].' '.pun_htmlspecialchars($cur_topic['last_poster']).'</span>';
    823. 

  823. 			$ghost_topic = false;
    824. 

  824. 		}
    825. 

  825. 		else
    826. 

  826. 		{
    827. 

  827. 			$last_post = '- - -';
    828. 

  828. 			$ghost_topic = true;
    829. 

  829. 		}
    830. 

  830. 

  831. 		if ($pun_config['o_censoring'] == '1')
    832. 

  832. 			$cur_topic['subject'] = censor_words($cur_topic['subject']);
    833. 

  833. 

  834. 		if ($cur_topic['sticky'] == '1')
    835. 

  835. 		{
    836. 

  836. 			$item_status .= ' isticky';
    837. 

  837. 			$status_text[] = '<span class="stickytext">'.$lang_forum['Sticky'].'</span>';
    838. 

  838. 		}
    839. 

  839. 

  840. 		if ($cur_topic['moved_to'] != 0)
    841. 

  841. 		{
    842. 

  842. 			$subject = '<a href="viewtopic.php?id='.$cur_topic['moved_to'].'">'.pun_htmlspecialchars($cur_topic['subject']).'</a> <span class="byuser">'.$lang_common['by'].' '.pun_htmlspecialchars($cur_topic['poster']).'</span>';
    843. 

  843. 			$status_text[] = '<span class="movedtext">'.$lang_forum['Moved'].'</span>';
    844. 

  844. 			$item_status .= ' imoved';
    845. 

  845. 		}
    846. 

  846. 		else if ($cur_topic['closed'] == '0')
    847. 

  847. 			$subject = '<a href="viewtopic.php?id='.$cur_topic['id'].'">'.pun_htmlspecialchars($cur_topic['subject']).'</a> <span class="byuser">'.$lang_common['by'].' '.pun_htmlspecialchars($cur_topic['poster']).'</span>';
    848. 

  848. 		else
    849. 

  849. 		{
    850. 

  850. 			$subject = '<a href="viewtopic.php?id='.$cur_topic['id'].'">'.pun_htmlspecialchars($cur_topic['subject']).'</a> <span class="byuser">'.$lang_common['by'].' '.pun_htmlspecialchars($cur_topic['poster']).'</span>';
    851. 

  851. 			$status_text[] = '<span class="closedtext">'.$lang_forum['Closed'].'</span>';
    852. 

  852. 			$item_status .= ' iclosed';
    853. 

  853. 		}
    854. 

  854. 

  855. 		if (!$ghost_topic && $cur_topic['last_post'] > $pun_user['last_visit'] && (!isset($tracked_topics['topics'][$cur_topic['id']]) || $tracked_topics['topics'][$cur_topic['id']] < $cur_topic['last_post']) && (!isset($tracked_topics['forums'][$fid]) || $tracked_topics['forums'][$fid] < $cur_topic['last_post']))
    856. 

  856. 		{
    857. 

  857. 			$item_status .= ' inew';
    858. 

  858. 			$icon_type = 'icon icon-new';
    859. 

  859. 			$subject = '<strong>'.$subject.'</strong>';
    860. 

  860. 			$subject_new_posts = '<span class="newtext">[ <a href="viewtopic.php?id='.$cur_topic['id'].'&amp;action=new" title="'.$lang_common['New posts info'].'">'.$lang_common['New posts'].'</a> ]</span>';
    861. 

  861. 		}
    862. 

  862. 		else
    863. 

  863. 			$subject_new_posts = null;
    864. 

  864. 

  865. 		// Insert the status text before the subject
    866. 

  866. 		$subject = implode(' ', $status_text).' '.$subject;
    867. 

  867. 

  868. 		$num_pages_topic = ceil(($cur_topic['num_replies'] + 1) / $pun_user['disp_posts']);
    869. 

  869. 

  870. 		if ($num_pages_topic > 1)
    871. 

  871. 			$subject_multipage = '<span class="pagestext">[ '.paginate($num_pages_topic, -1, 'viewtopic.php?id='.$cur_topic['id']).' ]</span>';
    872. 

  872. 		else
    873. 

  873. 			$subject_multipage = null;
    874. 

  874. 

  875. 		// Should we show the "New posts" and/or the multipage links?
    876. 

  876. 		if (!empty($subject_new_posts) || !empty($subject_multipage))
    877. 

  877. 		{
    878. 

  878. 			$subject .= !empty($subject_new_posts) ? ' '.$subject_new_posts : '';
    879. 

  879. 			$subject .= !empty($subject_multipage) ? ' '.$subject_multipage : '';
    880. 

  880. 		}
    881. 

  881. 

  882. ?>
    883. 

  883. 				<tr class="<?php echo $item_status ?>">
    884. 

  884. 					<td class="tcl">
    885. 

  885. 						<div class="<?php echo $icon_type ?>"><div class="nosize"><?php echo forum_number_format($topic_count + $start_from) ?></div></div>
    886. 

  886. 						<div class="tclcon">
    887. 

  887. 							<div>
    888. 

  888. 								<?php echo $subject."\n" ?>
    889. 

  889. 							</div>
    890. 

  890. 						</div>
    891. 

  891. 					</td>
    892. 

  892. 					<td class="tc2"><?php echo (!$ghost_topic) ? forum_number_format($cur_topic['num_replies']) : '-' ?></td>
    893. 

  893. <?php if ($pun_config['o_topic_views'] == '1'): ?>					<td class="tc3"><?php echo (!$ghost_topic) ? forum_number_format($cur_topic['num_views']) : '-' ?></td>
    894. 

  894. <?php endif; ?>					<td class="tcr"><?php echo $last_post ?></td>
    895. 

  895. 					<td class="tcmod"><input type="checkbox" name="topics[<?php echo $cur_topic['id'] ?>]" value="1" /></td>
    896. 

  896. 				</tr>
    897. 

  897. <?php
    898. 

  898. 

  899. 	}
    900. 

  900. }
    901. 

  901. else
    902. 

  902. {
    903. 

  903. 	$colspan = ($pun_config['o_topic_views'] == '1') ? 5 : 4;
    904. 

  904. 	$button_status = ' disabled="disabled"';
    905. 

  905. 	echo "\t\t\t\t\t".'<tr><td class="tcl" colspan="'.$colspan.'">'.$lang_forum['Empty forum'].'</td></tr>'."\n";
    906. 

  906. }
    907. 

  907. 

  908. ?>
    909. 

  909. 			</tbody>
    910. 

  910. 			</table>
    911. 

  911. 		</div>
    912. 

  912. 	</div>
    913. 

  913. </div>
    914. 

  914. 

  915. <div class="linksb">
    916. 

  916. 	<div class="inbox">
    917. 

  917. 		<div class="pagepost">
    918. 

  918. 			<p class="pagelink conl"><?php echo $paging_links ?></p>
    919. 

  919. 			<p class="conr modbuttons"><input type="submit" name="move_topics" value="<?php echo $lang_misc['Move'] ?>"<?php echo $button_status ?> /> <input type="submit" name="delete_topics" value="<?php echo $lang_misc['Delete'] ?>"<?php echo $button_status ?> /> <input type="submit" name="merge_topics" value="<?php echo $lang_misc['Merge'] ?>"<?php echo $button_status ?> /> <input type="submit" name="open" value="<?php echo $lang_misc['Open'] ?>"<?php echo $button_status ?> /> <input type="submit" name="close" value="<?php echo $lang_misc['Close'] ?>"<?php echo $button_status ?> /></p>
    920. 

  920. 		</div>
    921. 

  921. 	</div>
    922. 

  922. </div>
    923. 

  923. </form>
    924. 

  924. <?php
    925. 

  925. 

  926. require PUN_ROOT.'footer.php';
    927. 

  927.