<?php

/***********************************************************************

  Copyright (C) 2002-2005  Rickard Andersson (rickard@punbb.org)

  This file is part of PunBB.

  PunBB is free software; you can redistribute it and/or modify it

  under the terms of the GNU General Public License as published

  by the Free Software Foundation; either version 2 of the License,

  or (at your option) any later version.

  PunBB is distributed in the hope that it will be useful, but

  WITHOUT ANY WARRANTY; without even the implied warranty of

  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

  GNU General Public License for more details.

  You should have received a copy of the GNU General Public License

  along with this program; if not, write to the Free Software

  Foundation, Inc., 59 Temple Place, Suite 330, Boston,

  MA  02111-1307  USA

************************************************************************/

// This particular function doesn't require forum-based moderator access. It can be used

// by all moderators and admins.

if (isset($_GET['get_host']))

{

		message($lang_common['No permission']);

	// Is get_host an IP address or a post ID?

	if (@preg_match('/[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}/', $_GET['get_host']))

		$ip = $_GET['get_host'];

	else

	{

		$get_host = intval($_GET['get_host']);

		if ($get_host < 1)

			message($lang_common['Bad request']);

			message($lang_common['Bad request']);

	}

	message('The IP address is: '.$ip.'<br />The host name is: '.@gethostbyaddr($ip).'<br /><br /><a href="admin_users.php?show_users='.$ip.'">Show more users for this IP</a>');

}

// All other functions require moderator/admin access

$fid = isset($_GET['fid']) ? intval($_GET['fid']) : 0;

if ($fid < 1)

	message($lang_common['Bad request']);

$mods_array = ($moderators != '') ? unserialize($moderators) : array();

if ($pun_user['g_id'] != PUN_ADMIN && ($pun_user['g_id'] != PUN_MOD || !array_key_exists($pun_user['username'], $mods_array)))

	message($lang_common['No permission']);

// Load the misc.php language file

require PUN_ROOT.'lang/'.$pun_user['language'].'/misc.php';

// All other topic moderation features require a topic id in GET

if (isset($_GET['tid']))

{

	$tid = intval($_GET['tid']);

	if ($tid < 1)

		message($lang_common['Bad request']);

	// Fetch some info about the topic

		message($lang_common['Bad request']);

	// Delete one or more posts

	if (isset($_POST['delete_posts']) || isset($_POST['delete_posts_comply']))

	{

		$posts = $_POST['posts'];

		if (empty($posts))

			message($lang_misc['No posts selected']);

		if (isset($_POST['delete_posts_comply']))

		{

			confirm_referrer('moderate.php');

			if (@preg_match('/[^0-9,]/', $posts))

				message($lang_common['Bad request']);

			// Verify that the post IDs are valid

				message($lang_common['Bad request']);

			// Delete the posts

			require PUN_ROOT.'include/search_idx.php';

			strip_search_index($posts);

			// Get last_post, last_post_id, and last_poster for the topic after deletion

			// How many posts did we just delete?

			$num_posts_deleted = substr_count($posts, ',') + 1;

			// Update the topic

			update_forum($fid);

		}

		$page_title = pun_htmlspecialchars($pun_config['o_board_title']).' / '.$lang_misc['Moderate'];

		require PUN_ROOT.'header.php';

?>

<div class="blockform">

	<h2><span><?php echo $lang_misc['Delete posts'] ?></span></h2>

	<div class="box">

		<form method="post" action="moderate.php?fid=<?php echo $fid ?>&amp;tid=<?php echo $tid ?>">

			<div class="inform">

				<fieldset>

					<legend><?php echo $lang_misc['Confirm delete legend'] ?></legend>

					<div class="infldset">

						<input type="hidden" name="posts" value="<?php echo implode(',', array_keys($posts)) ?>" />

						<p><?php echo $lang_misc['Delete posts comply'] ?></p>

					</div>

				</fieldset>

			</div>

			<p><input type="submit" name="delete_posts_comply" value="<?php echo $lang_misc['Delete'] ?>" /><a href="javascript:history.go(-1)"><?php echo $lang_common['Go back'] ?></a></p>

		</form>

	</div>

</div>

<?php

		require PUN_ROOT.'footer.php';

	}

	// Show the delete multiple posts view

	// Load the viewtopic.php language file

	require PUN_ROOT.'lang/'.$pun_user['language'].'/topic.php';

	// Used to disable the Move and Delete buttons if there are no replies to this topic

	$button_status = ($cur_topic['num_replies'] == 0) ? ' disabled' : '';

	// Determine the post offset (based on $_GET['p'])

	$num_pages = ceil(($cur_topic['num_replies'] + 1) / $pun_user['disp_posts']);

	$p = (!isset($_GET['p']) || $_GET['p'] <= 1 || $_GET['p'] > $num_pages) ? 1 : $_GET['p'];

	$start_from = $pun_user['disp_posts'] * ($p - 1);

	// Generate paging links

	if ($pun_config['o_censoring'] == '1')

		$cur_topic['subject'] = censor_words($cur_topic['subject']);

	$page_title = pun_htmlspecialchars($pun_config['o_board_title']).' / '.$cur_topic['subject'];

	require PUN_ROOT.'header.php';

?>

<div class="linkst">

	<div class="inbox">

		<p class="pagelink conl"><?php echo $paging_links ?></p>

		<ul><li><a href="index.php"><?php echo $lang_common['Index'] ?></a></li><li>&nbsp;&raquo;&nbsp;<a href="viewforum.php?id=<?php echo $fid ?>"><?php echo pun_htmlspecialchars($cur_topic['forum_name']) ?></a></li><li>&nbsp;&raquo;&nbsp;<?php echo pun_htmlspecialchars($cur_topic['subject']) ?></li></ul>

		<div class="clearer"></div>

	</div>

</div>

<form method="post" action="moderate.php?fid=<?php echo $fid ?>&amp;tid=<?php echo $tid ?>">

<?php

	require PUN_ROOT.'include/parser.php';

	$bg_switch = true;	// Used for switching background color in posts

	$post_count = 0;	// Keep track of post numbers

	// Retrieve the posts (and their respective poster)

	{

		$post_count++;

		// If the poster is a registered user.

		if ($cur_post['poster_id'] > 1)

		{

			$poster = '<a href="profile.php?id='.$cur_post['poster_id'].'">'.pun_htmlspecialchars($cur_post['poster']).'</a>';

			// get_title() requires that an element 'username' be present in the array

			$cur_post['username'] = $cur_post['poster'];

			$user_title = get_title($cur_post);

			if ($pun_config['o_censoring'] == '1')

				$user_title = censor_words($user_title);

		}

		// If the poster is a guest (or a user that has been deleted)

		else

		{

			$poster = pun_htmlspecialchars($cur_post['poster']);

			$user_title = $lang_topic['Guest'];

		}

		// Switch the background color for every message.

		$bg_switch = ($bg_switch) ? $bg_switch = false : $bg_switch = true;

		$vtbg = ($bg_switch) ? ' roweven' : ' rowodd';

		// Perform the main parsing of the message (BBCode, smilies, censor words etc)

		$cur_post['message'] = parse_message($cur_post['message'], $cur_post['hide_smilies']);

?>

<div class="blockpost<?php echo $vtbg ?>">

	<a name="<?php echo $cur_post['id'] ?>"></a>

	<h2><span><span class="conr">#<?php echo ($start_from + $post_count) ?>&nbsp;</span><a href="viewtopic.php?pid=<?php echo $cur_post['id'].'#p'.$cur_post['id'] ?>"><?php echo format_time($cur_post['posted']) ?></a></span></h2>

	<div class="box">

		<div class="inbox">

			<div class="postleft">

				<dl>

					<dt><strong><?php echo $poster ?></strong></dt>

					<dd><strong><?php echo $user_title ?></strong></dd>

				</dl>

			</div>

			<div class="postright">

				<h3 class="nosize"><?php echo $lang_common['Message'] ?></h3>

				<div class="postmsg">

					<?php echo $cur_post['message']."\n" ?>

<?php if ($cur_post['edited'] != '') echo "\t\t\t\t\t".'<p class="postedit"><em>'.$lang_topic['Last edit'].' '.pun_htmlspecialchars($cur_post['edited_by']).' ('.format_time($cur_post['edited']).')</em></p>'."\n"; ?>

				</div>

				<?php if ($start_from + $post_count > 1) echo '<p class="multidelete"><label><strong>'.$lang_misc['Select'].'</strong>&nbsp;&nbsp;<input type="checkbox" name="posts['.$cur_post['id'].']" value="1" /></label></p>'."\n" ?>

			</div>

			<div class="clearer"></div>

		</div>

	</div>

</div>

<?php

	}

?>

<div class="postlinksb">

	<div class="inbox">

		<p class="pagelink conl"><?php echo $paging_links ?></p>

		<p class="conr"><input type="submit" name="delete_posts" value="<?php echo $lang_misc['Delete'] ?>"<?php echo $button_status ?> /></p>

		<div class="clearer"></div>

	</div>

</div>

</form>

<?php

	require PUN_ROOT.'footer.php';

}

// Move one or more topics

if (isset($_REQUEST['move_topics']) || isset($_POST['move_topics_to']))

{

	if (isset($_POST['move_topics_to']))

	{

		confirm_referrer('moderate.php');

		if (@preg_match('/[^0-9,]/', $_POST['topics']))

			message($lang_common['Bad request']);

		$topics = explode(',', $_POST['topics']);

		$move_to_forum = isset($_POST['move_to_forum']) ? intval($_POST['move_to_forum']) : 0;

		if (empty($topics) || $move_to_forum < 1)

			message($lang_common['Bad request']);

			message($lang_common['Bad request']);

		// Delete any redirect topics if there are any (only if we moved/copied the topic back to where it where it was once moved from)

		// Move the topic(s)

		// Should we create redirect topics?

		if (isset($_POST['with_redirect']))

		{

			while (list(, $cur_topic) = @each($topics))

			{

				// Fetch info for the redirect topic

				// Create the redirect topic

			}

		}

		update_forum($fid);				// Update the forum FROM which the topic was moved

		update_forum($move_to_forum);	// Update the forum TO which the topic was moved

		$redirect_msg = (count($topics) > 1) ? $lang_misc['Move topics redirect'] : $lang_misc['Move topic redirect'];

	}

	if (isset($_POST['move_topics']))

	{

		$topics = isset($_POST['topics']) ? $_POST['topics'] : array();

		if (empty($topics))

			message($lang_misc['No topics selected']);

		$topics = implode(',', array_keys($topics));

		$action = 'multi';

	}

	else

	{

		$topics = intval($_GET['move_topics']);

		if ($topics < 1)

			message($lang_common['Bad request']);

		$action = 'single';

	}

	$page_title = pun_htmlspecialchars($pun_config['o_board_title']).' / Moderate';

	require PUN_ROOT.'header.php';

?>

<div class="blockform">

	<h2><span><?php echo ($action == 'single') ? $lang_misc['Move topic'] : $lang_misc['Move topics'] ?></span></h2>

	<div class="box">

		<form method="post" action="moderate.php?fid=<?php echo $fid ?>">

			<div class="inform">

			<input type="hidden" name="topics" value="<?php echo $topics ?>" />

				<fieldset>

					<legend><?php echo $lang_misc['Move legend'] ?></legend>

					<div class="infldset">

						<label><?php echo $lang_misc['Move to'] ?>

						<br /><select name="move_to_forum">

<?php

	$cur_category = 0;

	{

		if ($cur_forum['cid'] != $cur_category)	// A new category since last iteration?

		{

			if ($cur_category)

				echo "\t\t\t\t\t\t\t".'</optgroup>'."\n";

			echo "\t\t\t\t\t\t\t".'<optgroup label="'.pun_htmlspecialchars($cur_forum['cat_name']).'">'."\n";

			$cur_category = $cur_forum['cid'];

		}

		if ($cur_forum['fid'] != $fid)

			echo "\t\t\t\t\t\t\t\t".'<option value="'.$cur_forum['fid'].'">'.pun_htmlspecialchars($cur_forum['forum_name']).'</option>'."\n";

	}

?>

							</optgroup>

						</select>

						<br /></label>

						<div class="rbox">

							<label><input type="checkbox" name="with_redirect" value="1"<?php if ($action == 'single') echo ' checked="checked"' ?> /><?php echo $lang_misc['Leave redirect'] ?><br /></label>

						</div>

					</div>

				</fieldset>

			</div>

			<p><input type="submit" name="move_topics_to" value="<?php echo $lang_misc['Move'] ?>" /><a href="javascript:history.go(-1)"><?php echo $lang_common['Go back'] ?></a></p>

		</form>

	</div>

</div>

<?php

	require PUN_ROOT.'footer.php';

}

// Delete one or more topics

if (isset($_REQUEST['delete_topics']) || isset($_POST['delete_topics_comply']))

{

	$topics = isset($_POST['topics']) ? $_POST['topics'] : array();

	if (empty($topics))

		message($lang_misc['No topics selected']);

	if (isset($_POST['delete_topics_comply']))

	{

		confirm_referrer('moderate.php');

		if (@preg_match('/[^0-9,]/', $topics))

			message($lang_common['Bad request']);

		require PUN_ROOT.'include/search_idx.php';

			message($lang_common['Bad request']);

		// Delete the topics and any redirect topics

		// Delete any subscriptions

		// Create a list of the post ID's in this topic and then strip the search index

		$post_ids = '';

			$post_ids .= ($post_ids != '') ? ','.$row[0] : $row[0];

		// We have to check that we actually have a list of post ID's since we could be deleting just a redirect topic

		if ($post_ids != '')

			strip_search_index($post_ids);

		// Delete posts

		update_forum($fid);

	}

	$page_title = pun_htmlspecialchars($pun_config['o_board_title']).' / '.$lang_misc['Moderate'];

	require PUN_ROOT.'header.php';

?>

<div class="blockform">

	<h2><?php echo $lang_misc['Delete topics'] ?></h2>

	<div class="box">

		<form method="post" action="moderate.php?fid=<?php echo $fid ?>">

			<input type="hidden" name="topics" value="<?php echo implode(',', array_keys($topics)) ?>" />

			<div class="inform">

				<fieldset>

					<legend><?php echo $lang_misc['Confirm delete legend'] ?></legend>

					<div class="infldset">

						<p><?php echo $lang_misc['Delete topics comply'] ?></p>

					</div>

				</fieldset>

			</div>

			<p><input type="submit" name="delete_topics_comply" value="<?php echo $lang_misc['Delete'] ?>" /><a href="javascript:history.go(-1)"><?php echo $lang_common['Go back'] ?></a></p>

		</form>

	</div>

</div>

<?php

	require PUN_ROOT.'footer.php';

}

// Open or close one or more topics

else if (isset($_REQUEST['open']) || isset($_REQUEST['close']))

{

	$action = (isset($_REQUEST['open'])) ? 0 : 1;

	// There could be an array of topic ID's in $_POST

	if (isset($_POST['open']) || isset($_POST['close']))

	{

		confirm_referrer('moderate.php');

		$topics = isset($_POST['topics']) ? @array_map('intval', @array_keys($_POST['topics'])) : array();

		if (empty($topics))

			message($lang_misc['No topics selected']);

		$redirect_msg = ($action) ? $lang_misc['Close topics redirect'] : $lang_misc['Open topics redirect'];

	}

	// Or just one in $_GET

	else

	{

		confirm_referrer('viewtopic.php');

		$topic_id = ($action) ? intval($_GET['close']) : intval($_GET['open']);

		if ($topic_id < 1)

			message($lang_common['Bad request']);

		$redirect_msg = ($action) ? $lang_misc['Close topic redirect'] : $lang_misc['Open topic redirect'];

	}

}

// Stick a topic

else if (isset($_GET['stick']))

{

	confirm_referrer('viewtopic.php');