diff -r 8f6143115bf5 -r a8a21e1c7afa punbb/moderate.php --- a/punbb/moderate.php Wed Jul 11 21:28:39 2007 -0400 +++ b/punbb/moderate.php Thu Jul 12 01:04:01 2007 -0400 @@ -23,15 +23,18 @@ ************************************************************************/ -define('PUN_ROOT', './'); -require PUN_ROOT.'include/common.php'; +//define('PUN_ROOT', './'); +//require PUN_ROOT.'include/common.php'; + +global $pun_db, $pun_user, $pun_config, $lang_common; + // This particular function doesn't require forum-based moderator access. It can be used // by all moderators and admins. if (isset($_GET['get_host'])) { - if ($pun_user['g_id'] > PUN_MOD) + if ($pun_user['g_id'] < PUN_MOD) message($lang_common['No permission']); // Is get_host an IP address or a post ID? @@ -43,11 +46,11 @@ if ($get_host < 1) message($lang_common['Bad request']); - $result = $db->query('SELECT poster_ip FROM '.$db->prefix.'posts WHERE id='.$get_host) or error('Unable to fetch post IP address', __FILE__, __LINE__, $db->error()); - if (!$db->num_rows($result)) + $result = $pun_db->query('SELECT poster_ip FROM '.$pun_db->prefix.'posts WHERE id='.$get_host) or error('Unable to fetch post IP address', __FILE__, __LINE__, $pun_db->error()); + if (!$pun_db->num_rows($result)) message($lang_common['Bad request']); - $ip = $db->result($result); + $ip = $pun_db->result($result); } message('The IP address is: '.$ip.'
The host name is: '.@gethostbyaddr($ip).'

Show more users for this IP'); @@ -59,9 +62,9 @@ if ($fid < 1) message($lang_common['Bad request']); -$result = $db->query('SELECT moderators FROM '.$db->prefix.'forums WHERE id='.$fid) or error('Unable to fetch forum info', __FILE__, __LINE__, $db->error()); +$result = $pun_db->query('SELECT moderators FROM '.$pun_db->prefix.'forums WHERE id='.$fid) or error('Unable to fetch forum info', __FILE__, __LINE__, $pun_db->error()); -$moderators = $db->result($result); +$moderators = $pun_db->result($result); $mods_array = ($moderators != '') ? unserialize($moderators) : array(); if ($pun_user['g_id'] != PUN_ADMIN && ($pun_user['g_id'] != PUN_MOD || !array_key_exists($pun_user['username'], $mods_array))) @@ -80,11 +83,11 @@ message($lang_common['Bad request']); // Fetch some info about the topic - $result = $db->query('SELECT t.subject, t.num_replies, f.id AS forum_id, forum_name FROM '.$db->prefix.'topics AS t INNER JOIN '.$db->prefix.'forums AS f ON f.id=t.forum_id LEFT JOIN '.$db->prefix.'subscriptions AS s ON (t.id=s.topic_id AND s.user_id='.$pun_user['id'].') LEFT JOIN '.$db->prefix.'forum_perms AS fp ON (fp.forum_id=f.id AND fp.group_id='.$pun_user['g_id'].') WHERE (fp.read_forum IS NULL OR fp.read_forum=1) AND f.id='.$fid.' AND t.id='.$tid.' AND t.moved_to IS NULL') or error('Unable to fetch topic info', __FILE__, __LINE__, $db->error()); - if (!$db->num_rows($result)) + $result = $pun_db->query('SELECT t.subject, t.num_replies, f.id AS forum_id, forum_name FROM '.$pun_db->prefix.'topics AS t INNER JOIN '.$pun_db->prefix.'forums AS f ON f.id=t.forum_id LEFT JOIN '.$pun_db->prefix.'subscriptions AS s ON (t.id=s.topic_id AND s.user_id='.$pun_user['id'].') LEFT JOIN '.$pun_db->prefix.'forum_perms AS fp ON (fp.forum_id=f.id AND fp.group_id='.$pun_user['g_id'].') WHERE (fp.read_forum IS NULL OR fp.read_forum=1) AND f.id='.$fid.' AND t.id='.$tid.' AND t.moved_to IS NULL') or error('Unable to fetch topic info', __FILE__, __LINE__, $pun_db->error()); + if (!$pun_db->num_rows($result)) message($lang_common['Bad request']); - $cur_topic = $db->fetch_assoc($result); + $cur_topic = $pun_db->fetch_assoc($result); // Delete one or more posts @@ -102,30 +105,30 @@ message($lang_common['Bad request']); // Verify that the post IDs are valid - $result = $db->query('SELECT 1 FROM '.$db->prefix.'posts WHERE id IN('.$posts.') AND topic_id='.$tid) or error('Unable to check posts', __FILE__, __LINE__, $db->error()); + $result = $pun_db->query('SELECT 1 FROM '.$pun_db->prefix.'posts WHERE id IN('.$posts.') AND topic_id='.$tid) or error('Unable to check posts', __FILE__, __LINE__, $pun_db->error()); - if ($db->num_rows($result) != substr_count($posts, ',') + 1) + if ($pun_db->num_rows($result) != substr_count($posts, ',') + 1) message($lang_common['Bad request']); // Delete the posts - $db->query('DELETE FROM '.$db->prefix.'posts WHERE id IN('.$posts.')') or error('Unable to delete posts', __FILE__, __LINE__, $db->error()); + $pun_db->query('DELETE FROM '.$pun_db->prefix.'posts WHERE id IN('.$posts.')') or error('Unable to delete posts', __FILE__, __LINE__, $pun_db->error()); require PUN_ROOT.'include/search_idx.php'; strip_search_index($posts); // Get last_post, last_post_id, and last_poster for the topic after deletion - $result = $db->query('SELECT id, poster, posted FROM '.$db->prefix.'posts WHERE topic_id='.$tid.' ORDER BY id DESC LIMIT 1') or error('Unable to fetch post info', __FILE__, __LINE__, $db->error()); - $last_post = $db->fetch_assoc($result); + $result = $pun_db->query('SELECT id, poster, posted FROM '.$pun_db->prefix.'posts WHERE topic_id='.$tid.' ORDER BY id DESC LIMIT 1') or error('Unable to fetch post info', __FILE__, __LINE__, $pun_db->error()); + $last_post = $pun_db->fetch_assoc($result); // How many posts did we just delete? $num_posts_deleted = substr_count($posts, ',') + 1; // Update the topic - $db->query('UPDATE '.$db->prefix.'topics SET last_post='.$last_post['posted'].', last_post_id='.$last_post['id'].', last_poster=\''.$db->escape($last_post['poster']).'\', num_replies=num_replies-'.$num_posts_deleted.' WHERE id='.$tid) or error('Unable to update topic', __FILE__, __LINE__, $db->error()); + $pun_db->query('UPDATE '.$pun_db->prefix.'topics SET last_post='.$last_post['posted'].', last_post_id='.$last_post['id'].', last_poster=\''.$pun_db->escape($last_post['poster']).'\', num_replies=num_replies-'.$num_posts_deleted.' WHERE id='.$tid) or error('Unable to update topic', __FILE__, __LINE__, $pun_db->error()); update_forum($fid); - redirect('viewtopic.php?id='.$tid, $lang_misc['Delete posts redirect']); + pun_redirect('viewtopic.php?id='.$tid, $lang_misc['Delete posts redirect']); } @@ -172,7 +175,7 @@ $start_from = $pun_user['disp_posts'] * ($p - 1); // Generate paging links - $paging_links = $lang_common['Pages'].': '.paginate($num_pages, $p, 'moderate.php?fid='.$fid.'&tid='.$tid); + $paging_links = $lang_common['Pages'].': '.pun_paginate($num_pages, $p, 'moderate.php?fid='.$fid.'&tid='.$tid); if ($pun_config['o_censoring'] == '1') @@ -200,9 +203,9 @@ $post_count = 0; // Keep track of post numbers // Retrieve the posts (and their respective poster) - $result = $db->query('SELECT u.title, u.num_posts, g.g_id, g.g_user_title, p.id, p.poster, p.poster_id, p.message, p.hide_smilies, p.posted, p.edited, p.edited_by FROM '.$db->prefix.'posts AS p INNER JOIN '.$db->prefix.'users AS u ON u.id=p.poster_id INNER JOIN '.$db->prefix.'groups AS g ON g.g_id=u.group_id WHERE p.topic_id='.$tid.' ORDER BY p.id LIMIT '.$start_from.','.$pun_user['disp_posts'], true) or error('Unable to fetch post info', __FILE__, __LINE__, $db->error()); + $result = $pun_db->query('SELECT u.title, u.num_posts, g.g_id, g.g_user_title, p.id, p.poster, p.poster_id, p.message, p.hide_smilies, p.posted, p.edited, p.edited_by FROM '.$pun_db->prefix.'posts AS p INNER JOIN '.$pun_db->prefix.'users AS u ON u.id=p.poster_id INNER JOIN '.$pun_db->prefix.'groups AS g ON g.g_id=u.group_id WHERE p.topic_id='.$tid.' ORDER BY p.id LIMIT '.$start_from.','.$pun_user['disp_posts'], true) or error('Unable to fetch post info', __FILE__, __LINE__, $pun_db->error()); - while ($cur_post = $db->fetch_assoc($result)) + while ($cur_post = $pun_db->fetch_assoc($result)) { $post_count++; @@ -295,17 +298,17 @@ if (empty($topics) || $move_to_forum < 1) message($lang_common['Bad request']); - // Verify that the topic IDs are valid - $result = $db->query('SELECT 1 FROM '.$db->prefix.'topics WHERE id IN('.implode(',',$topics).') AND forum_id='.$fid) or error('Unable to check topics', __FILE__, __LINE__, $db->error()); - - if ($db->num_rows($result) != count($topics)) + // Verify that the topic IDs are valid + $result = $pun_db->query('SELECT 1 FROM '.$pun_db->prefix.'topics WHERE id IN('.implode(',',$topics).') AND forum_id='.$fid) or error('Unable to check topics', __FILE__, __LINE__, $pun_db->error()); + + if ($pun_db->num_rows($result) != count($topics)) message($lang_common['Bad request']); // Delete any redirect topics if there are any (only if we moved/copied the topic back to where it where it was once moved from) - $db->query('DELETE FROM '.$db->prefix.'topics WHERE forum_id='.$move_to_forum.' AND moved_to IN('.implode(',',$topics).')') or error('Unable to delete redirect topics', __FILE__, __LINE__, $db->error()); + $pun_db->query('DELETE FROM '.$pun_db->prefix.'topics WHERE forum_id='.$move_to_forum.' AND moved_to IN('.implode(',',$topics).')') or error('Unable to delete redirect topics', __FILE__, __LINE__, $pun_db->error()); // Move the topic(s) - $db->query('UPDATE '.$db->prefix.'topics SET forum_id='.$move_to_forum.' WHERE id IN('.implode(',',$topics).')') or error('Unable to move topics', __FILE__, __LINE__, $db->error()); + $pun_db->query('UPDATE '.$pun_db->prefix.'topics SET forum_id='.$move_to_forum.' WHERE id IN('.implode(',',$topics).')') or error('Unable to move topics', __FILE__, __LINE__, $pun_db->error()); // Should we create redirect topics? if (isset($_POST['with_redirect'])) @@ -313,11 +316,11 @@ while (list(, $cur_topic) = @each($topics)) { // Fetch info for the redirect topic - $result = $db->query('SELECT poster, subject, posted, last_post FROM '.$db->prefix.'topics WHERE id='.$cur_topic) or error('Unable to fetch topic info', __FILE__, __LINE__, $db->error()); - $moved_to = $db->fetch_assoc($result); + $result = $pun_db->query('SELECT poster, subject, posted, last_post FROM '.$pun_db->prefix.'topics WHERE id='.$cur_topic) or error('Unable to fetch topic info', __FILE__, __LINE__, $pun_db->error()); + $moved_to = $pun_db->fetch_assoc($result); // Create the redirect topic - $db->query('INSERT INTO '.$db->prefix.'topics (poster, subject, posted, last_post, moved_to, forum_id) VALUES(\''.$db->escape($moved_to['poster']).'\', \''.$db->escape($moved_to['subject']).'\', '.$moved_to['posted'].', '.$moved_to['last_post'].', '.$cur_topic.', '.$fid.')') or error('Unable to create redirect topic', __FILE__, __LINE__, $db->error()); + $pun_db->query('INSERT INTO '.$pun_db->prefix.'topics (poster, subject, posted, last_post, moved_to, forum_id) VALUES(\''.$pun_db->escape($moved_to['poster']).'\', \''.$pun_db->escape($moved_to['subject']).'\', '.$moved_to['posted'].', '.$moved_to['last_post'].', '.$cur_topic.', '.$fid.')') or error('Unable to create redirect topic', __FILE__, __LINE__, $pun_db->error()); } } @@ -325,7 +328,7 @@ update_forum($move_to_forum); // Update the forum TO which the topic was moved $redirect_msg = (count($topics) > 1) ? $lang_misc['Move topics redirect'] : $lang_misc['Move topic redirect']; - redirect('viewforum.php?id='.$move_to_forum, $redirect_msg); + pun_redirect('viewforum.php?id='.$move_to_forum, $redirect_msg); } if (isset($_POST['move_topics'])) @@ -363,10 +366,10 @@