XoopsModules25x / xfguestbook

admin/main.php

<?php
//
//  ------------------------------------------------------------------------ //
//             XF Guestbook                                                  //
// ------------------------------------------------------------------------- //
//  This program is free software; you can redistribute it and/or modify     //
//  it under the terms of the GNU General Public License as published by     //
//  the Free Software Foundation; either version 2 of the License, or        //
//  (at your option) any later version.                                      //
//                                                                           //
//  You may not change or alter any portion of this comment or credits       //
//  of supporting developers from this source code or any supporting         //
//  source code which is considered copyrighted (c) material of the          //
//  original comment or credit authors.                                      //
//                                                                           //
//  This program is distributed in the hope that it will be useful,          //
//  but WITHOUT ANY WARRANTY; without even the implied warranty of           //
//  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the            //
//  GNU General Public License for more details.                             //
//                                                                           //
//  You should have received a copy of the GNU General Public License        //
//  along with this program; if not, write to the Free Software              //
//  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307 USA //
//  ------------------------------------------------------------------------ //

use Xmf\Module\Admin;
use Xmf\Request;
use XoopsModules\Xfguestbook;
use XoopsModules\Xfguestbook\Helper;

require_once __DIR__ . '/admin_header.php';
require_once dirname(__DIR__) . '/include/cp_functions.php';

/** @var Helper $helper */
$helper = Helper::getInstance();

if (null === $helper->getConfig('flagdir')) {
    redirect_header(XOOPS_URL . '/modules/system/admin.php?fct=modulesadmin&op=update&module=' . $xoopsModule->dirname(), 4, AM_XFGUESTBOOK_MUST_UPDATE);
}

if (Request::hasVar('op', 'GET')) {
    $op = $_GET['op'];
} elseif (Request::hasVar('op', 'POST')) {
    $op = $_POST['op'];
} else {
    $op = 'show';
}

if (Request::hasVar('msg_id', 'GET')) {
    $msg_id = Request::getInt('msg_id', 0, 'GET');
} else {
    $msg_id = Request::getInt('msg_id', 0, 'POST');
}

$msgHandler = $helper->getHandler('Message');

function delete()
{
    global $msgHandler, $xoopsModule;
    $msg_count = (!empty($_POST['msg_id']) && is_array($_POST['msg_id'])) ? count($_POST['msg_id']) : 0;
    if ($msg_count > 0) {
        $messagesent = AM_XFGUESTBOOK_MSGDELETED;
        for ($i = 0; $i < $msg_count; $i++) {
            $msg      = $msgHandler->get($_POST['msg_id'][$i]);
            $filename = $msg->getVar('title');
            $filename = $msg->getVar('photo');
            if (!$msgHandler->delete($msg)) {
                $messagesent = AM_XFGUESTBOOK_ERRORDEL;
            }
            if ('' !== $filename) {
                $filename = XOOPS_UPLOAD_PATH . '/' . $xoopsModule->getVar('dirname') . '/' . $filename;
                unlink($filename);
            }
        }
    } else {
        $messagesent = AM_XFGUESTBOOK_NOMSG;
    }
    redirect_header($_SERVER['SCRIPT_NAME'], 2, $messagesent);
}

function approve()
{
    global $msgHandler;
    $msg_count = (!empty($_POST['msg_id']) && is_array($_POST['msg_id'])) ? count($_POST['msg_id']) : 0;
    if ($msg_count > 0) {
        $messagesent = AM_XFGUESTBOOK_VALIDATE;
        for ($i = 0; $i < $msg_count; $i++) {
            $msg = $msgHandler->get($_POST['msg_id'][$i]);
            $msg->setVar('moderate', 0);
            if (!$msgHandler->insert($msg)) {
                $messagesent = AM_XFGUESTBOOK_ERRORVALID;
            }
        }
    } else {
        $messagesent = AM_XFGUESTBOOK_NOMSG;
    }
    redirect_header($_SERVER['SCRIPT_NAME'], 2, $messagesent);
}

function banish()
{
    global $msgHandler, $xoopsDB;
    $msg_count = (!empty($_POST['msg_id']) && is_array($_POST['msg_id'])) ? count($_POST['msg_id']) : 0;
    if ($msg_count > 0) {
        $messagesent = AM_XFGUESTBOOK_BANISHED;
        for ($i = 0; $i < $msg_count; $i++) {
            $msg    = $msgHandler->get($_POST['msg_id'][$i]);
            $ip[$i] = $msg->getVar('poster_ip');
            $msg->setVar('moderate', 1);
            if (!$msgHandler->insert($msg)) {
                $messagesent = AM_XFGUESTBOOK_ERRORBANISHED;
            }
        }
        $ip     = array_unique($ip);

The variable $ip does not seem to be defined for all execution paths leading up to this point.

        $badips = Xfguestbook\Utility::get_badips();
        foreach ($ip as $oneip) {
            if (!in_array($oneip, $badips)) {
                $sql    = 'INSERT INTO ' . $xoopsDB->prefix('xfguestbook_badips') . " (ip_value) VALUES ('$oneip')";
                $result = $xoopsDB->query($sql);
            }
        }
    } else {
        $messagesent = AM_XFGUESTBOOK_NOMSG;
    }

    redirect_header($_SERVER['SCRIPT_NAME'], 2, $messagesent);
}

function show()
{
    global $msgHandler, $xoopsModule, $pathIcon16;
    $pick              = Request::getInt('pick', 0, 'GET');
    $start             = Request::getInt('start', 0, 'GET');
    $sel_status        = Request::getInt('sel_status', 0, 'GET');
    $sel_order         = Request::getInt('sel_order', 0, 'GET');
    $limit             = 10;
    $status_option0    = '';
    $status_option1    = '';
    $status_option2    = '';
    $order_option_asc  = '';
    $order_option_desc = '';

    switch ($sel_status) {
        case 0:
            $status_option0 = 'selected';
            $title          = AM_XFGUESTBOOK_ALLMSG;
            $criteria       = new \Criteria('msg_id', 0, '>');
            $criteria->setSort('post_time');
            break;
        case 1:
            $status_option1 = 'selected';
            $title          = AM_XFGUESTBOOK_PUBMSG;
            $criteria       = new \Criteria('moderate', '0');
            $criteria->setSort('post_time');
            break;
        case 2:
            $status_option2 = 'selected';
            $title          = AM_XFGUESTBOOK_WAITMSG;
            $criteria       = new \Criteria('moderate', '1');
            $criteria->setSort('post_time');
            break;
    }

    switch ($sel_order) {
        case 1:
            $order_option_asc = 'selected';
            $criteria->setOrder('ASC');

The variable $criteria does not seem to be defined for all execution paths leading up to this point.

            break;
        case 0:
            $order_option_desc = 'selected';
            $criteria->setOrder('DESC');
            break;
    }

    $totalcount = $msgHandler->countMsg($criteria);
    $criteria->setOrder('DESC');
    $criteria->setLimit($limit);
    $criteria->setStart($start);
    $msg = $msgHandler->getObjects($criteria);

    $badips = Xfguestbook\Utility::get_badips();

    /* -- Code to show selected terms -- */
    echo "<form name='pick' id='pick' action='" . $_SERVER['SCRIPT_NAME'] . '\' method=\'GET\' style=\'margin: 0;\'>';

    echo "
        <table width='100%' cellspacing='1' cellpadding='2' border='0' style='border-left: 1px solid #c0c0c0; border-top: 1px solid #c0c0c0; border-right: 1px solid #c0c0c0;'>
            <tr>
                <td><span style='font-weight: bold; font-size: 12px; font-variant: small-caps;'>" . $title . ' : ' . $totalcount . "</span></td>

The variable $title does not seem to be defined for all execution paths leading up to this point.

                <td align='right'>
                " . AM_XFGUESTBOOK_DISPLAY . " :
                    <select name='sel_status' onchange='submit()'>
                        <option value = '0' $status_option0>" . AM_XFGUESTBOOK_ALLMSG . " </option>
                        <option value = '1' $status_option1>" . AM_XFGUESTBOOK_PUBMSG . " </option>
                        <option value = '2' $status_option2>" . AM_XFGUESTBOOK_WAITMSG . ' </option>
                    </select>
                ' . AM_XFGUESTBOOK_SELECT_SORT . "
                    <select name='sel_order' onchange='submit()'>
                        <option value = '1' $order_option_asc>" . AM_XFGUESTBOOK_SORT_ASC . "</option>
                        <option value = '0' $order_option_desc>" . AM_XFGUESTBOOK_SORT_DESC . '</option>
                    </select>
                </td>
            </tr>
        </table>
        </form>';
    /* -- end code to show selected terms -- */

    echo "<table border='1' width='100%' cellpadding ='2' cellspacing='1'>";
    echo "<tr class='bg3'>";
    echo "<td align='center'></td>";
    echo "<td align='center'><b><input type='hidden' name='op' value='delete'></td>";
    echo "<td align='center'><b>" . AM_XFGUESTBOOK_NAME . '</td>';
    echo "<td align='center'><b>" . AM_XFGUESTBOOK_TITLE . '</td>';
    echo "<td align='center'><b>" . AM_XFGUESTBOOK_MESSAGE . '</td>';
    echo "<td align='center'><b>" . AM_XFGUESTBOOK_DATE . '</td>';
    echo "<td align='center'><b>" . AM_XFGUESTBOOK_ACTION . '</td>';
    echo '</tr>';

    if ('0' != $totalcount) {
        echo "<form name='msglist' id='list' action='" . $_SERVER['SCRIPT_NAME'] . '\' method=\'POST\' style=\'margin: 0;\'>';

        /** @var \XoopsModules\Xfguestbook\Message $onemsg */
        foreach ($msg as $onemsg) {
            $all_msg              = [];
            $all_msg['post_time'] = formatTimestamp($onemsg->getVar('post_time'));
            $all_msg['msg_id']    = $onemsg->getVar('msg_id');
            $all_msg['user']      = ($onemsg->getVar('user_id') > 0) ? \XoopsUser::getUnameFromId($onemsg->getVar('user_id')) : $onemsg->getVar('uname');
            $all_msg['action']    = "<a href='main.php?op=edit&amp;msg_id=" . $onemsg->getVar('msg_id') . '\'><img src=\'' . $pathIcon16 . "/edit.png'></a>";
            $img_status           = "<img src='" . XOOPS_URL . '/modules/' . $xoopsModule->dirname() . '/assets/images/';
            if ($onemsg->getVar('moderate')) {
                $img_status .= "ic15_question.gif'>";
            } else {
                $img_status .= "ic15_ok.gif'>";
            }
            $all_msg['title']   = "<a href='../index.php?op=show_one&msg_id=" . $onemsg->getVar('msg_id') . '\'>' . $onemsg->getVar('title') . '</a>';
            $all_msg['message'] = $onemsg->getVar('message');

            if ($onemsg->getVar('photo')) {
                $all_msg['message'] = '<img src="' . XOOPS_UPLOAD_URL . '/' . $xoopsModule->getVar('dirname') . '/' . $onemsg->getVar('photo') . '" align = "left" hspace ="10">' . $onemsg->getVar('message');
            } else {
                $all_msg['message'] = $onemsg->getVar('message');
            }

            echo '<tr>';
            echo "<td align='center' class='even'><input type='checkbox' name='msg_id[]' id='msg_id[]' value='" . $all_msg['msg_id'] . '\'></td>';
            echo "<td align='center' class = 'head'><b>" . $img_status . '</b></td>';
            echo "<td align='center' class = 'even'>" . $all_msg['user'] . '</td>';
            echo "<td align='left' class = 'odd'>" . $all_msg['title'] . '</td>';
            echo "<td align='left' class = 'even'>" . $all_msg['message'] . '</td>';
            echo "<td class='odd'>" . $all_msg['post_time'] . '<br>';
            if (in_array($onemsg->getVar('poster_ip'), $badips)) {
                echo "<span style='color: #FF0000; '><b>" . $onemsg->getVar('poster_ip') . '</b></span></td>';
            } else {
                echo $onemsg->getVar('poster_ip') . '</td>';
            }
            echo "<td align='center' class='even'>" . $all_msg['action'] . '</td>';
            echo '</tr>';
            unset($all_msg);
        }
        echo "<tr class='foot'><td><select name='op'>";
        if (1 != $sel_status) {
            echo "<option value='approve'>" . AM_XFGUESTBOOK_PUB . '</option>';
        }
        echo "<option value='delete'>" . _DELETE . '</option>';
        echo "<option value='banish'>" . AM_XFGUESTBOOK_BAN . '</option>';
        echo '</select>&nbsp;</td>';
        echo "<td colspan='6'>" . $GLOBALS['xoopsSecurity']->getTokenHTML() . "<input type='submit' value='" . _GO . '\'>';
        echo '</td></tr>';
        echo '</form>';
    } else {
        echo "<tr ><td align='center' colspan ='10' class = 'head'><b>" . AM_XFGUESTBOOK_NOMSG . '</b></td></tr>';
    }
    echo '</table><br>';
    if ($totalcount > $limit) {
        require_once XOOPS_ROOT_PATH . '/class/pagenav.php';
        $pagenav = new \XoopsPageNav($totalcount, $limit, $start, 'start', 'sel_status=' . $sel_status . '&sel_order=' . $sel_order);
        echo "<div class='center;' class = 'head'>" . $pagenav->renderNav() . '</div><br>';
    } else {
        echo '';
    }
    echo '<br>';
}

switch ($op) {
    case 'save':
        global $xoopsModule;
        if (!$GLOBALS['xoopsSecurity']->check()) {
            redirect_header('index.php', 2, implode('<br>', $GLOBALS['xoopsSecurity']->getErrors()));
        }
        $msgstop = '';
        $msg     = $msgHandler->get($msg_id);
        $del_img = Request::getInt('del_img', 0, 'POST');
        if ($del_img) {
            $filename = XOOPS_UPLOAD_PATH . '/' . $xoopsModule->getVar('dirname') . '/' . $msg->getVar('photo');
            unlink($filename);
            $msg->setVar('photo', '');
        } elseif (!empty($_FILES['photo']['name'])) {
            Xfguestbook\Utility::upload();
            $photo      = str_replace('tmp_', 'msg_', $preview_name);
            $photos_dir = XOOPS_UPLOAD_PATH . '/' . $xoopsModule->getVar('dirname') . '/';
            rename($photos_dir . $preview_name, $photos_dir . $photo);
            if ('' !== $msg->getVar('photo')) {
                $filename = XOOPS_UPLOAD_PATH . '/' . $xoopsModule->getVar('dirname') . '/' . $msg->getVar('photo');
                unlink($filename);
            }
            $msg->setVar('photo', $photo);
        }
        if (!empty($msgstop)) {
            redirect_header('main.php?op=edit&msg_id=' . $msg_id, 2, $msgstop);
        }
        $uname    = Request::getString('uname', '', 'POST');
        $email    = Request::getString('email', '', 'POST');
        $url      = Request::getString('url', '', 'POST');
        $title    = Request::getString('title', '', 'POST');
        $message  = Request::getString('message', '', 'POST');
        $note     = Request::getString('note', '', 'POST');
        $gender   = Request::getString('gender', '', 'POST');
        $country  = Request::getString('country', '', 'POST');
        $other    = Request::getString('other', '', 'POST');
        $moderate = Request::getInt('moderate', 0, 'POST');

        $msg->setVar('uname', $uname);
        $msg->setVar('email', $email);
        $msg->setVar('url', $url);
        $msg->setVar('title', $title);
        $msg->setVar('message', $message);
        $msg->setVar('note', $note);
        $msg->setVar('gender', $gender);
        if ('' !== $country) {
            $msg->setVar('country', $country);
            $msg->setVar('flagdir', $helper->getConfig('flagdir'));
        }
        $msg->setVar('other', $other);
        $msg->setVar('moderate', $moderate);
        if ($msgHandler->insert($msg)) {
            redirect_header('main.php?op=show', 1, AM_XFGUESTBOOK_MSGMOD);
        } else {
            redirect_header('main.php?op=show', 2, AM_XFGUESTBOOK_MSGERROR);
        }
        break;
    case 'edit':
        xoops_cp_header();
        $adminObject = Admin::getInstance();
        $adminObject->displayNavigation(basename(__FILE__));
        //xfguestbook_admin_menu(0);
        $msg = $msgHandler->get($msg_id);
        require_once dirname(__DIR__) . '/include/form_edit.inc.php';
        $msg_form->display();
        require_once __DIR__ . '/admin_footer.php';
        //xoops_cp_footer();
        break;
    case 'approve':
        approve();
        break;
    case 'delete':
        delete();
        break;
    case 'banish':
        banish();
        break;
    case 'show':
    default:
        xoops_cp_header();
        $adminObject = Admin::getInstance();
        $adminObject->displayNavigation(basename(__FILE__));
        //xfguestbook_admin_menu(0);
        show();
        require_once __DIR__ . '/admin_footer.php';
        //xoops_cp_footer();
        break;
}