@@ -20,67 +20,67 @@ |
||
20 | 20 | |
21 | 21 | class PageEditComment extends InternalPageBase |
22 | 22 | { |
23 | - /** |
|
24 | - * Main function for this page, when no specific actions are called. |
|
25 | - * @throws ApplicationLogicException |
|
26 | - */ |
|
27 | - protected function main() |
|
28 | - { |
|
29 | - $commentId = WebRequest::getInt('id'); |
|
30 | - if ($commentId === null) { |
|
31 | - throw new ApplicationLogicException('Comment ID not specified'); |
|
32 | - } |
|
23 | + /** |
|
24 | + * Main function for this page, when no specific actions are called. |
|
25 | + * @throws ApplicationLogicException |
|
26 | + */ |
|
27 | + protected function main() |
|
28 | + { |
|
29 | + $commentId = WebRequest::getInt('id'); |
|
30 | + if ($commentId === null) { |
|
31 | + throw new ApplicationLogicException('Comment ID not specified'); |
|
32 | + } |
|
33 | 33 | |
34 | - $database = $this->getDatabase(); |
|
34 | + $database = $this->getDatabase(); |
|
35 | 35 | |
36 | - /** @var Comment $comment */ |
|
37 | - $comment = Comment::getById($commentId, $database); |
|
38 | - if ($comment === false) { |
|
39 | - throw new ApplicationLogicException('Comment not found'); |
|
40 | - } |
|
36 | + /** @var Comment $comment */ |
|
37 | + $comment = Comment::getById($commentId, $database); |
|
38 | + if ($comment === false) { |
|
39 | + throw new ApplicationLogicException('Comment not found'); |
|
40 | + } |
|
41 | 41 | |
42 | - $currentUser = User::getCurrent($database); |
|
43 | - if ($comment->getUser() !== $currentUser->getId() && !$this->barrierTest('editOthers', $currentUser)) { |
|
44 | - throw new AccessDeniedException($this->getSecurityManager()); |
|
45 | - } |
|
42 | + $currentUser = User::getCurrent($database); |
|
43 | + if ($comment->getUser() !== $currentUser->getId() && !$this->barrierTest('editOthers', $currentUser)) { |
|
44 | + throw new AccessDeniedException($this->getSecurityManager()); |
|
45 | + } |
|
46 | 46 | |
47 | - /** @var Request $request */ |
|
48 | - $request = Request::getById($comment->getRequest(), $database); |
|
47 | + /** @var Request $request */ |
|
48 | + $request = Request::getById($comment->getRequest(), $database); |
|
49 | 49 | |
50 | - if ($request === false) { |
|
51 | - throw new ApplicationLogicException('Request was not found.'); |
|
52 | - } |
|
50 | + if ($request === false) { |
|
51 | + throw new ApplicationLogicException('Request was not found.'); |
|
52 | + } |
|
53 | 53 | |
54 | - if (WebRequest::wasPosted()) { |
|
55 | - $this->validateCSRFToken(); |
|
56 | - $newComment = WebRequest::postString('newcomment'); |
|
57 | - $visibility = WebRequest::postString('visibility'); |
|
54 | + if (WebRequest::wasPosted()) { |
|
55 | + $this->validateCSRFToken(); |
|
56 | + $newComment = WebRequest::postString('newcomment'); |
|
57 | + $visibility = WebRequest::postString('visibility'); |
|
58 | 58 | |
59 | - if ($visibility !== 'user' && $visibility !== 'admin') { |
|
60 | - throw new ApplicationLogicException('Comment visibility is not valid'); |
|
61 | - } |
|
59 | + if ($visibility !== 'user' && $visibility !== 'admin') { |
|
60 | + throw new ApplicationLogicException('Comment visibility is not valid'); |
|
61 | + } |
|
62 | 62 | |
63 | - // optimisticly lock from the load of the edit comment form |
|
64 | - $updateVersion = WebRequest::postInt('updateversion'); |
|
65 | - $comment->setUpdateVersion($updateVersion); |
|
63 | + // optimisticly lock from the load of the edit comment form |
|
64 | + $updateVersion = WebRequest::postInt('updateversion'); |
|
65 | + $comment->setUpdateVersion($updateVersion); |
|
66 | 66 | |
67 | - $comment->setComment($newComment); |
|
68 | - $comment->setVisibility($visibility); |
|
67 | + $comment->setComment($newComment); |
|
68 | + $comment->setVisibility($visibility); |
|
69 | 69 | |
70 | - $comment->save(); |
|
70 | + $comment->save(); |
|
71 | 71 | |
72 | - Logger::editComment($database, $comment, $request); |
|
73 | - $this->getNotificationHelper()->commentEdited($comment, $request); |
|
74 | - SessionAlert::success("Comment has been saved successfully"); |
|
72 | + Logger::editComment($database, $comment, $request); |
|
73 | + $this->getNotificationHelper()->commentEdited($comment, $request); |
|
74 | + SessionAlert::success("Comment has been saved successfully"); |
|
75 | 75 | |
76 | - $this->redirect('viewRequest', null, array('id' => $comment->getRequest())); |
|
77 | - } |
|
78 | - else { |
|
79 | - $this->assignCSRFToken(); |
|
80 | - $this->assign('comment', $comment); |
|
81 | - $this->assign('request', $request); |
|
82 | - $this->assign('user', User::getById($comment->getUser(), $database)); |
|
83 | - $this->setTemplate('edit-comment.tpl'); |
|
84 | - } |
|
85 | - } |
|
76 | + $this->redirect('viewRequest', null, array('id' => $comment->getRequest())); |
|
77 | + } |
|
78 | + else { |
|
79 | + $this->assignCSRFToken(); |
|
80 | + $this->assign('comment', $comment); |
|
81 | + $this->assign('request', $request); |
|
82 | + $this->assign('user', User::getById($comment->getUser(), $database)); |
|
83 | + $this->setTemplate('edit-comment.tpl'); |
|
84 | + } |
|
85 | + } |
|
86 | 86 | } |
@@ -12,17 +12,17 @@ |
||
12 | 12 | |
13 | 13 | class PageRegisterOption extends InternalPageBase |
14 | 14 | { |
15 | - /** |
|
16 | - * Main function for this page, when no specific actions are called. |
|
17 | - * @return void |
|
18 | - */ |
|
19 | - protected function main() |
|
20 | - { |
|
21 | - $this->setTemplate('registration/option.tpl'); |
|
22 | - } |
|
15 | + /** |
|
16 | + * Main function for this page, when no specific actions are called. |
|
17 | + * @return void |
|
18 | + */ |
|
19 | + protected function main() |
|
20 | + { |
|
21 | + $this->setTemplate('registration/option.tpl'); |
|
22 | + } |
|
23 | 23 | |
24 | - protected function isProtectedPage() |
|
25 | - { |
|
26 | - return false; |
|
27 | - } |
|
24 | + protected function isProtectedPage() |
|
25 | + { |
|
26 | + return false; |
|
27 | + } |
|
28 | 28 | } |
@@ -10,19 +10,19 @@ |
||
10 | 10 | |
11 | 11 | class PageRegisterStandard extends PageRegisterBase |
12 | 12 | { |
13 | - /** |
|
14 | - * @return string |
|
15 | - */ |
|
16 | - protected function getRegistrationTemplate() |
|
17 | - { |
|
18 | - return "registration/register.tpl"; |
|
19 | - } |
|
13 | + /** |
|
14 | + * @return string |
|
15 | + */ |
|
16 | + protected function getRegistrationTemplate() |
|
17 | + { |
|
18 | + return "registration/register.tpl"; |
|
19 | + } |
|
20 | 20 | |
21 | - /** |
|
22 | - * @return string |
|
23 | - */ |
|
24 | - protected function getDefaultRole() |
|
25 | - { |
|
26 | - return 'user'; |
|
27 | - } |
|
21 | + /** |
|
22 | + * @return string |
|
23 | + */ |
|
24 | + protected function getDefaultRole() |
|
25 | + { |
|
26 | + return 'user'; |
|
27 | + } |
|
28 | 28 | } |
@@ -15,37 +15,37 @@ |
||
15 | 15 | |
16 | 16 | class PageSiteNotice extends InternalPageBase |
17 | 17 | { |
18 | - /** |
|
19 | - * Main function for this page, when no specific actions are called. |
|
20 | - * @return void |
|
21 | - */ |
|
22 | - protected function main() |
|
23 | - { |
|
24 | - $this->setHtmlTitle('Site Notice'); |
|
25 | - |
|
26 | - $database = $this->getDatabase(); |
|
27 | - |
|
28 | - /** @var SiteNotice $siteNoticeMessage */ |
|
29 | - $siteNoticeMessage = SiteNotice::getById(1, $database); |
|
30 | - |
|
31 | - // Dual-mode |
|
32 | - if (WebRequest::wasPosted()) { |
|
33 | - $this->validateCSRFToken(); |
|
34 | - |
|
35 | - $siteNoticeMessage->setContent(WebRequest::postString('mailtext')); |
|
36 | - $siteNoticeMessage->setUpdateVersion(WebRequest::postInt('updateversion')); |
|
37 | - $siteNoticeMessage->save(); |
|
38 | - |
|
39 | - Logger::siteNoticeEdited($database, $siteNoticeMessage); |
|
40 | - $this->getNotificationHelper()->siteNoticeEdited(); |
|
41 | - |
|
42 | - $this->redirect(); |
|
43 | - } |
|
44 | - else { |
|
45 | - $this->assignCSRFToken(); |
|
46 | - |
|
47 | - $this->setTemplate('site-notice/edit-form.tpl'); |
|
48 | - $this->assign('message', $siteNoticeMessage); |
|
49 | - } |
|
50 | - } |
|
18 | + /** |
|
19 | + * Main function for this page, when no specific actions are called. |
|
20 | + * @return void |
|
21 | + */ |
|
22 | + protected function main() |
|
23 | + { |
|
24 | + $this->setHtmlTitle('Site Notice'); |
|
25 | + |
|
26 | + $database = $this->getDatabase(); |
|
27 | + |
|
28 | + /** @var SiteNotice $siteNoticeMessage */ |
|
29 | + $siteNoticeMessage = SiteNotice::getById(1, $database); |
|
30 | + |
|
31 | + // Dual-mode |
|
32 | + if (WebRequest::wasPosted()) { |
|
33 | + $this->validateCSRFToken(); |
|
34 | + |
|
35 | + $siteNoticeMessage->setContent(WebRequest::postString('mailtext')); |
|
36 | + $siteNoticeMessage->setUpdateVersion(WebRequest::postInt('updateversion')); |
|
37 | + $siteNoticeMessage->save(); |
|
38 | + |
|
39 | + Logger::siteNoticeEdited($database, $siteNoticeMessage); |
|
40 | + $this->getNotificationHelper()->siteNoticeEdited(); |
|
41 | + |
|
42 | + $this->redirect(); |
|
43 | + } |
|
44 | + else { |
|
45 | + $this->assignCSRFToken(); |
|
46 | + |
|
47 | + $this->setTemplate('site-notice/edit-form.tpl'); |
|
48 | + $this->assign('message', $siteNoticeMessage); |
|
49 | + } |
|
50 | + } |
|
51 | 51 | } |
@@ -12,20 +12,20 @@ |
||
12 | 12 | |
13 | 13 | class Page404 extends InternalPageBase |
14 | 14 | { |
15 | - /** |
|
16 | - * Main function for this page, when no actions are called. |
|
17 | - */ |
|
18 | - protected function main() |
|
19 | - { |
|
20 | - if (!headers_sent()) { |
|
21 | - header("HTTP/1.1 404 Not Found"); |
|
22 | - } |
|
15 | + /** |
|
16 | + * Main function for this page, when no actions are called. |
|
17 | + */ |
|
18 | + protected function main() |
|
19 | + { |
|
20 | + if (!headers_sent()) { |
|
21 | + header("HTTP/1.1 404 Not Found"); |
|
22 | + } |
|
23 | 23 | |
24 | - $this->setTemplate("404.tpl"); |
|
25 | - } |
|
24 | + $this->setTemplate("404.tpl"); |
|
25 | + } |
|
26 | 26 | |
27 | - protected function isProtectedPage() |
|
28 | - { |
|
29 | - return false; |
|
30 | - } |
|
27 | + protected function isProtectedPage() |
|
28 | + { |
|
29 | + return false; |
|
30 | + } |
|
31 | 31 | } |
@@ -20,156 +20,156 @@ |
||
20 | 20 | |
21 | 21 | class PageSearch extends InternalPageBase |
22 | 22 | { |
23 | - /** |
|
24 | - * Main function for this page, when no specific actions are called. |
|
25 | - */ |
|
26 | - protected function main() |
|
27 | - { |
|
28 | - $this->setHtmlTitle('Search'); |
|
29 | - |
|
30 | - // Dual-mode page |
|
31 | - if (WebRequest::wasPosted()) { |
|
32 | - $this->validateCSRFToken(); |
|
33 | - |
|
34 | - $searchType = WebRequest::postString('type'); |
|
35 | - $searchTerm = WebRequest::postString('term'); |
|
36 | - |
|
37 | - $validationError = ""; |
|
38 | - if (!$this->validateSearchParameters($searchType, $searchTerm, $validationError)) { |
|
39 | - SessionAlert::error($validationError, "Search error"); |
|
40 | - $this->redirect("search"); |
|
41 | - |
|
42 | - return; |
|
43 | - } |
|
44 | - |
|
45 | - $results = array(); |
|
46 | - |
|
47 | - switch ($searchType) { |
|
48 | - case 'name': |
|
49 | - $results = $this->getNameSearchResults($searchTerm); |
|
50 | - break; |
|
51 | - case 'email': |
|
52 | - $results = $this->getEmailSearchResults($searchTerm); |
|
53 | - break; |
|
54 | - case 'ip': |
|
55 | - $results = $this->getIpSearchResults($searchTerm); |
|
56 | - break; |
|
57 | - } |
|
58 | - |
|
59 | - // deal with results |
|
60 | - $this->assign('requests', $results); |
|
61 | - $this->assign('term', $searchTerm); |
|
62 | - $this->assign('target', $searchType); |
|
63 | - |
|
64 | - $userIds = array_map( |
|
65 | - function(Request $entry) { |
|
66 | - return $entry->getReserved(); |
|
67 | - }, |
|
68 | - $results); |
|
69 | - $userList = UserSearchHelper::get($this->getDatabase())->inIds($userIds)->fetchMap('username'); |
|
70 | - $this->assign('userlist', $userList); |
|
71 | - |
|
72 | - $currentUser = User::getCurrent($this->getDatabase()); |
|
73 | - $this->assign('canBan', $this->barrierTest('set', $currentUser, PageBan::class)); |
|
74 | - $this->assign('canBreakReservation', $this->barrierTest('force', $currentUser, PageBreakReservation::class)); |
|
75 | - |
|
76 | - $this->assignCSRFToken(); |
|
77 | - $this->setTemplate('search/searchResult.tpl'); |
|
78 | - } |
|
79 | - else { |
|
80 | - $this->assignCSRFToken(); |
|
81 | - $this->setTemplate('search/searchForm.tpl'); |
|
82 | - } |
|
83 | - } |
|
84 | - |
|
85 | - /** |
|
86 | - * Gets search results by name |
|
87 | - * |
|
88 | - * @param string $searchTerm |
|
89 | - * |
|
90 | - * @returns Request[] |
|
91 | - */ |
|
92 | - private function getNameSearchResults($searchTerm) |
|
93 | - { |
|
94 | - $padded = '%' . $searchTerm . '%'; |
|
95 | - |
|
96 | - /** @var Request[] $requests */ |
|
97 | - $requests = RequestSearchHelper::get($this->getDatabase()) |
|
98 | - ->byName($padded) |
|
99 | - ->excludingPurgedData($this->getSiteConfiguration()) |
|
100 | - ->fetch(); |
|
101 | - |
|
102 | - return $requests; |
|
103 | - } |
|
104 | - |
|
105 | - /** |
|
106 | - * Gets search results by email |
|
107 | - * |
|
108 | - * @param string $searchTerm |
|
109 | - * |
|
110 | - * @return Request[] |
|
111 | - * @throws ApplicationLogicException |
|
112 | - */ |
|
113 | - private function getEmailSearchResults($searchTerm) |
|
114 | - { |
|
115 | - if ($searchTerm === "@") { |
|
116 | - throw new ApplicationLogicException('The search term "@" is not valid for email address searches!'); |
|
117 | - } |
|
118 | - |
|
119 | - $padded = '%' . $searchTerm . '%'; |
|
120 | - |
|
121 | - /** @var Request[] $requests */ |
|
122 | - $requests = RequestSearchHelper::get($this->getDatabase()) |
|
123 | - ->byEmailAddress($padded) |
|
124 | - ->excludingPurgedData($this->getSiteConfiguration()) |
|
125 | - ->fetch(); |
|
126 | - |
|
127 | - return $requests; |
|
128 | - } |
|
129 | - |
|
130 | - /** |
|
131 | - * Gets search results by IP address or XFF IP address |
|
132 | - * |
|
133 | - * @param string $searchTerm |
|
134 | - * |
|
135 | - * @returns Request[] |
|
136 | - */ |
|
137 | - private function getIpSearchResults($searchTerm) |
|
138 | - { |
|
139 | - /** @var Request[] $requests */ |
|
140 | - $requests = RequestSearchHelper::get($this->getDatabase()) |
|
141 | - ->byIp($searchTerm) |
|
142 | - ->excludingPurgedData($this->getSiteConfiguration()) |
|
143 | - ->fetch(); |
|
144 | - |
|
145 | - return $requests; |
|
146 | - } |
|
147 | - |
|
148 | - /** |
|
149 | - * @param string $searchType |
|
150 | - * @param string $searchTerm |
|
151 | - * |
|
152 | - * @param string $errorMessage |
|
153 | - * |
|
154 | - * @return bool true if parameters are valid |
|
155 | - * @throws ApplicationLogicException |
|
156 | - */ |
|
157 | - protected function validateSearchParameters($searchType, $searchTerm, &$errorMessage) |
|
158 | - { |
|
159 | - if (!in_array($searchType, array('name', 'email', 'ip'))) { |
|
160 | - $errorMessage = 'Unknown search type'; |
|
161 | - |
|
162 | - return false; |
|
163 | - } |
|
164 | - |
|
165 | - if ($searchTerm === '%' || $searchTerm === '' || $searchTerm === null) { |
|
166 | - $errorMessage = 'No search term specified entered'; |
|
167 | - |
|
168 | - return false; |
|
169 | - } |
|
170 | - |
|
171 | - $errorMessage = ""; |
|
172 | - |
|
173 | - return true; |
|
174 | - } |
|
23 | + /** |
|
24 | + * Main function for this page, when no specific actions are called. |
|
25 | + */ |
|
26 | + protected function main() |
|
27 | + { |
|
28 | + $this->setHtmlTitle('Search'); |
|
29 | + |
|
30 | + // Dual-mode page |
|
31 | + if (WebRequest::wasPosted()) { |
|
32 | + $this->validateCSRFToken(); |
|
33 | + |
|
34 | + $searchType = WebRequest::postString('type'); |
|
35 | + $searchTerm = WebRequest::postString('term'); |
|
36 | + |
|
37 | + $validationError = ""; |
|
38 | + if (!$this->validateSearchParameters($searchType, $searchTerm, $validationError)) { |
|
39 | + SessionAlert::error($validationError, "Search error"); |
|
40 | + $this->redirect("search"); |
|
41 | + |
|
42 | + return; |
|
43 | + } |
|
44 | + |
|
45 | + $results = array(); |
|
46 | + |
|
47 | + switch ($searchType) { |
|
48 | + case 'name': |
|
49 | + $results = $this->getNameSearchResults($searchTerm); |
|
50 | + break; |
|
51 | + case 'email': |
|
52 | + $results = $this->getEmailSearchResults($searchTerm); |
|
53 | + break; |
|
54 | + case 'ip': |
|
55 | + $results = $this->getIpSearchResults($searchTerm); |
|
56 | + break; |
|
57 | + } |
|
58 | + |
|
59 | + // deal with results |
|
60 | + $this->assign('requests', $results); |
|
61 | + $this->assign('term', $searchTerm); |
|
62 | + $this->assign('target', $searchType); |
|
63 | + |
|
64 | + $userIds = array_map( |
|
65 | + function(Request $entry) { |
|
66 | + return $entry->getReserved(); |
|
67 | + }, |
|
68 | + $results); |
|
69 | + $userList = UserSearchHelper::get($this->getDatabase())->inIds($userIds)->fetchMap('username'); |
|
70 | + $this->assign('userlist', $userList); |
|
71 | + |
|
72 | + $currentUser = User::getCurrent($this->getDatabase()); |
|
73 | + $this->assign('canBan', $this->barrierTest('set', $currentUser, PageBan::class)); |
|
74 | + $this->assign('canBreakReservation', $this->barrierTest('force', $currentUser, PageBreakReservation::class)); |
|
75 | + |
|
76 | + $this->assignCSRFToken(); |
|
77 | + $this->setTemplate('search/searchResult.tpl'); |
|
78 | + } |
|
79 | + else { |
|
80 | + $this->assignCSRFToken(); |
|
81 | + $this->setTemplate('search/searchForm.tpl'); |
|
82 | + } |
|
83 | + } |
|
84 | + |
|
85 | + /** |
|
86 | + * Gets search results by name |
|
87 | + * |
|
88 | + * @param string $searchTerm |
|
89 | + * |
|
90 | + * @returns Request[] |
|
91 | + */ |
|
92 | + private function getNameSearchResults($searchTerm) |
|
93 | + { |
|
94 | + $padded = '%' . $searchTerm . '%'; |
|
95 | + |
|
96 | + /** @var Request[] $requests */ |
|
97 | + $requests = RequestSearchHelper::get($this->getDatabase()) |
|
98 | + ->byName($padded) |
|
99 | + ->excludingPurgedData($this->getSiteConfiguration()) |
|
100 | + ->fetch(); |
|
101 | + |
|
102 | + return $requests; |
|
103 | + } |
|
104 | + |
|
105 | + /** |
|
106 | + * Gets search results by email |
|
107 | + * |
|
108 | + * @param string $searchTerm |
|
109 | + * |
|
110 | + * @return Request[] |
|
111 | + * @throws ApplicationLogicException |
|
112 | + */ |
|
113 | + private function getEmailSearchResults($searchTerm) |
|
114 | + { |
|
115 | + if ($searchTerm === "@") { |
|
116 | + throw new ApplicationLogicException('The search term "@" is not valid for email address searches!'); |
|
117 | + } |
|
118 | + |
|
119 | + $padded = '%' . $searchTerm . '%'; |
|
120 | + |
|
121 | + /** @var Request[] $requests */ |
|
122 | + $requests = RequestSearchHelper::get($this->getDatabase()) |
|
123 | + ->byEmailAddress($padded) |
|
124 | + ->excludingPurgedData($this->getSiteConfiguration()) |
|
125 | + ->fetch(); |
|
126 | + |
|
127 | + return $requests; |
|
128 | + } |
|
129 | + |
|
130 | + /** |
|
131 | + * Gets search results by IP address or XFF IP address |
|
132 | + * |
|
133 | + * @param string $searchTerm |
|
134 | + * |
|
135 | + * @returns Request[] |
|
136 | + */ |
|
137 | + private function getIpSearchResults($searchTerm) |
|
138 | + { |
|
139 | + /** @var Request[] $requests */ |
|
140 | + $requests = RequestSearchHelper::get($this->getDatabase()) |
|
141 | + ->byIp($searchTerm) |
|
142 | + ->excludingPurgedData($this->getSiteConfiguration()) |
|
143 | + ->fetch(); |
|
144 | + |
|
145 | + return $requests; |
|
146 | + } |
|
147 | + |
|
148 | + /** |
|
149 | + * @param string $searchType |
|
150 | + * @param string $searchTerm |
|
151 | + * |
|
152 | + * @param string $errorMessage |
|
153 | + * |
|
154 | + * @return bool true if parameters are valid |
|
155 | + * @throws ApplicationLogicException |
|
156 | + */ |
|
157 | + protected function validateSearchParameters($searchType, $searchTerm, &$errorMessage) |
|
158 | + { |
|
159 | + if (!in_array($searchType, array('name', 'email', 'ip'))) { |
|
160 | + $errorMessage = 'Unknown search type'; |
|
161 | + |
|
162 | + return false; |
|
163 | + } |
|
164 | + |
|
165 | + if ($searchTerm === '%' || $searchTerm === '' || $searchTerm === null) { |
|
166 | + $errorMessage = 'No search term specified entered'; |
|
167 | + |
|
168 | + return false; |
|
169 | + } |
|
170 | + |
|
171 | + $errorMessage = ""; |
|
172 | + |
|
173 | + return true; |
|
174 | + } |
|
175 | 175 | } |
@@ -91,7 +91,7 @@ discard block |
||
91 | 91 | */ |
92 | 92 | private function getNameSearchResults($searchTerm) |
93 | 93 | { |
94 | - $padded = '%' . $searchTerm . '%'; |
|
94 | + $padded = '%'.$searchTerm.'%'; |
|
95 | 95 | |
96 | 96 | /** @var Request[] $requests */ |
97 | 97 | $requests = RequestSearchHelper::get($this->getDatabase()) |
@@ -116,7 +116,7 @@ discard block |
||
116 | 116 | throw new ApplicationLogicException('The search term "@" is not valid for email address searches!'); |
117 | 117 | } |
118 | 118 | |
119 | - $padded = '%' . $searchTerm . '%'; |
|
119 | + $padded = '%'.$searchTerm.'%'; |
|
120 | 120 | |
121 | 121 | /** @var Request[] $requests */ |
122 | 122 | $requests = RequestSearchHelper::get($this->getDatabase()) |
@@ -21,310 +21,310 @@ |
||
21 | 21 | |
22 | 22 | class PageBan extends InternalPageBase |
23 | 23 | { |
24 | - /** |
|
25 | - * Main function for this page, when no specific actions are called. |
|
26 | - */ |
|
27 | - protected function main() |
|
28 | - { |
|
29 | - $this->assignCSRFToken(); |
|
30 | - |
|
31 | - $this->setHtmlTitle('Bans'); |
|
32 | - |
|
33 | - $bans = Ban::getActiveBans(null, $this->getDatabase()); |
|
34 | - |
|
35 | - $userIds = array_map( |
|
36 | - function(Ban $entry) { |
|
37 | - return $entry->getUser(); |
|
38 | - }, |
|
39 | - $bans); |
|
40 | - $userList = UserSearchHelper::get($this->getDatabase())->inIds($userIds)->fetchMap('username'); |
|
41 | - |
|
42 | - $user = User::getCurrent($this->getDatabase()); |
|
43 | - $this->assign('canSet', $this->barrierTest('set', $user)); |
|
44 | - $this->assign('canRemove', $this->barrierTest('remove', $user)); |
|
45 | - |
|
46 | - $this->assign('usernames', $userList); |
|
47 | - $this->assign('activebans', $bans); |
|
48 | - $this->setTemplate('bans/banlist.tpl'); |
|
49 | - } |
|
50 | - |
|
51 | - /** |
|
52 | - * Entry point for the ban set action |
|
53 | - */ |
|
54 | - protected function set() |
|
55 | - { |
|
56 | - $this->setHtmlTitle('Bans'); |
|
57 | - |
|
58 | - // dual-mode action |
|
59 | - if (WebRequest::wasPosted()) { |
|
60 | - try { |
|
61 | - $this->handlePostMethodForSetBan(); |
|
62 | - } |
|
63 | - catch (ApplicationLogicException $ex) { |
|
64 | - SessionAlert::error($ex->getMessage()); |
|
65 | - $this->redirect("bans", "set"); |
|
66 | - } |
|
67 | - } |
|
68 | - else { |
|
69 | - $this->handleGetMethodForSetBan(); |
|
70 | - } |
|
71 | - } |
|
72 | - |
|
73 | - /** |
|
74 | - * Entry point for the ban remove action |
|
75 | - */ |
|
76 | - protected function remove() |
|
77 | - { |
|
78 | - $this->setHtmlTitle('Bans'); |
|
79 | - |
|
80 | - $ban = $this->getBanForUnban(); |
|
81 | - |
|
82 | - // dual mode |
|
83 | - if (WebRequest::wasPosted()) { |
|
84 | - $this->validateCSRFToken(); |
|
85 | - $unbanReason = WebRequest::postString('unbanreason'); |
|
86 | - |
|
87 | - if ($unbanReason === null || trim($unbanReason) === "") { |
|
88 | - SessionAlert::error('No unban reason specified'); |
|
89 | - $this->redirect("bans", "remove", array('id' => $ban->getId())); |
|
90 | - } |
|
91 | - |
|
92 | - // set optimistic locking from delete form page load |
|
93 | - $updateVersion = WebRequest::postInt('updateversion'); |
|
94 | - $ban->setUpdateVersion($updateVersion); |
|
95 | - |
|
96 | - $database = $this->getDatabase(); |
|
97 | - $ban->setActive(false); |
|
98 | - $ban->save(); |
|
99 | - |
|
100 | - Logger::unbanned($database, $ban, $unbanReason); |
|
101 | - |
|
102 | - SessionAlert::quick('Disabled ban.'); |
|
103 | - $this->getNotificationHelper()->unbanned($ban, $unbanReason); |
|
104 | - |
|
105 | - $this->redirect('bans'); |
|
106 | - } |
|
107 | - else { |
|
108 | - $this->assignCSRFToken(); |
|
109 | - $this->assign('ban', $ban); |
|
110 | - $this->setTemplate('bans/unban.tpl'); |
|
111 | - } |
|
112 | - } |
|
113 | - |
|
114 | - /** |
|
115 | - * @throws ApplicationLogicException |
|
116 | - */ |
|
117 | - private function getBanDuration() |
|
118 | - { |
|
119 | - $duration = WebRequest::postString('duration'); |
|
120 | - if ($duration === "other") { |
|
121 | - $duration = strtotime(WebRequest::postString('otherduration')); |
|
122 | - |
|
123 | - if (!$duration) { |
|
124 | - throw new ApplicationLogicException('Invalid ban time'); |
|
125 | - } |
|
126 | - elseif (time() > $duration) { |
|
127 | - throw new ApplicationLogicException('Ban time has already expired!'); |
|
128 | - } |
|
129 | - |
|
130 | - return $duration; |
|
131 | - } |
|
132 | - elseif ($duration === "-1") { |
|
133 | - $duration = -1; |
|
134 | - |
|
135 | - return $duration; |
|
136 | - } |
|
137 | - else { |
|
138 | - $duration = WebRequest::postInt('duration') + time(); |
|
139 | - |
|
140 | - return $duration; |
|
141 | - } |
|
142 | - } |
|
143 | - |
|
144 | - /** |
|
145 | - * @param string $type |
|
146 | - * @param string $target |
|
147 | - * |
|
148 | - * @throws ApplicationLogicException |
|
149 | - */ |
|
150 | - private function validateBanType($type, $target) |
|
151 | - { |
|
152 | - switch ($type) { |
|
153 | - case 'IP': |
|
154 | - $this->validateIpBan($target); |
|
155 | - |
|
156 | - return; |
|
157 | - case 'Name': |
|
158 | - // No validation needed here. |
|
159 | - return; |
|
160 | - case 'EMail': |
|
161 | - $this->validateEmailBanTarget($target); |
|
162 | - |
|
163 | - return; |
|
164 | - default: |
|
165 | - throw new ApplicationLogicException("Unknown ban type"); |
|
166 | - } |
|
167 | - } |
|
168 | - |
|
169 | - /** |
|
170 | - * Handles the POST method on the set action |
|
171 | - * |
|
172 | - * @throws ApplicationLogicException |
|
173 | - * @throws Exception |
|
174 | - */ |
|
175 | - private function handlePostMethodForSetBan() |
|
176 | - { |
|
177 | - $this->validateCSRFToken(); |
|
178 | - $reason = WebRequest::postString('banreason'); |
|
179 | - $target = WebRequest::postString('target'); |
|
180 | - |
|
181 | - // Checks whether there is a reason entered for ban. |
|
182 | - if ($reason === null || trim($reason) === "") { |
|
183 | - throw new ApplicationLogicException('You must specify a ban reason'); |
|
184 | - } |
|
185 | - |
|
186 | - // Checks whether there is a target entered to ban. |
|
187 | - if ($target === null || trim($target) === "") { |
|
188 | - throw new ApplicationLogicException('You must specify a target to be banned'); |
|
189 | - } |
|
190 | - |
|
191 | - // Validate ban duration |
|
192 | - $duration = $this->getBanDuration(); |
|
193 | - |
|
194 | - // Validate ban type & target for that type |
|
195 | - $type = WebRequest::postString('type'); |
|
196 | - $this->validateBanType($type, $target); |
|
197 | - |
|
198 | - $database = $this->getDatabase(); |
|
199 | - |
|
200 | - if (count(Ban::getActiveBans($target, $database)) > 0) { |
|
201 | - throw new ApplicationLogicException('This target is already banned!'); |
|
202 | - } |
|
203 | - |
|
204 | - $ban = new Ban(); |
|
205 | - $ban->setDatabase($database); |
|
206 | - $ban->setActive(true); |
|
207 | - $ban->setType($type); |
|
208 | - $ban->setTarget($target); |
|
209 | - $ban->setUser(User::getCurrent($database)->getId()); |
|
210 | - $ban->setReason($reason); |
|
211 | - $ban->setDuration($duration); |
|
212 | - |
|
213 | - $ban->save(); |
|
214 | - |
|
215 | - Logger::banned($database, $ban, $reason); |
|
216 | - |
|
217 | - $this->getNotificationHelper()->banned($ban); |
|
218 | - SessionAlert::quick('Ban has been set.'); |
|
219 | - |
|
220 | - $this->redirect('bans'); |
|
221 | - } |
|
222 | - |
|
223 | - /** |
|
224 | - * Handles the GET method on the set action |
|
225 | - */ |
|
226 | - protected function handleGetMethodForSetBan() |
|
227 | - { |
|
228 | - $this->setTemplate('bans/banform.tpl'); |
|
229 | - $this->assignCSRFToken(); |
|
230 | - |
|
231 | - $banType = WebRequest::getString('type'); |
|
232 | - $banTarget = WebRequest::getInt('request'); |
|
233 | - |
|
234 | - $database = $this->getDatabase(); |
|
235 | - |
|
236 | - // if the parameters are null, skip loading a request. |
|
237 | - if ($banType === null |
|
238 | - || !in_array($banType, array('IP', 'Name', 'EMail')) |
|
239 | - || $banTarget === null |
|
240 | - || $banTarget === 0 |
|
241 | - ) { |
|
242 | - $this->assign('bantarget', ''); |
|
243 | - $this->assign('bantype', ''); |
|
244 | - |
|
245 | - return; |
|
246 | - } |
|
247 | - |
|
248 | - // Set the ban type, which the user has indicated. |
|
249 | - $this->assign('bantype', $banType); |
|
250 | - |
|
251 | - // Attempt to resolve the correct target |
|
252 | - /** @var Request $request */ |
|
253 | - $request = Request::getById($banTarget, $database); |
|
254 | - if ($request === false) { |
|
255 | - $this->assign('bantarget', ''); |
|
256 | - |
|
257 | - return; |
|
258 | - } |
|
259 | - |
|
260 | - $realTarget = ''; |
|
261 | - switch ($banType) { |
|
262 | - case 'EMail': |
|
263 | - $realTarget = $request->getEmail(); |
|
264 | - break; |
|
265 | - case 'IP': |
|
266 | - $xffProvider = $this->getXffTrustProvider(); |
|
267 | - $realTarget = $xffProvider->getTrustedClientIp($request->getIp(), $request->getForwardedIp()); |
|
268 | - break; |
|
269 | - case 'Name': |
|
270 | - $realTarget = $request->getName(); |
|
271 | - break; |
|
272 | - } |
|
273 | - |
|
274 | - $this->assign('bantarget', $realTarget); |
|
275 | - } |
|
276 | - |
|
277 | - /** |
|
278 | - * Validates an IP ban target |
|
279 | - * |
|
280 | - * @param string $target |
|
281 | - * |
|
282 | - * @throws ApplicationLogicException |
|
283 | - */ |
|
284 | - private function validateIpBan($target) |
|
285 | - { |
|
286 | - $squidIpList = $this->getSiteConfiguration()->getSquidList(); |
|
287 | - |
|
288 | - if (filter_var($target, FILTER_VALIDATE_IP) === false) { |
|
289 | - throw new ApplicationLogicException('Invalid target - IP address expected.'); |
|
290 | - } |
|
291 | - |
|
292 | - if (in_array($target, $squidIpList)) { |
|
293 | - throw new ApplicationLogicException("This IP address is on the protected list of proxies, and cannot be banned."); |
|
294 | - } |
|
295 | - } |
|
296 | - |
|
297 | - /** |
|
298 | - * Validates an email address as a ban target |
|
299 | - * |
|
300 | - * @param string $target |
|
301 | - * |
|
302 | - * @throws ApplicationLogicException |
|
303 | - */ |
|
304 | - private function validateEmailBanTarget($target) |
|
305 | - { |
|
306 | - if (filter_var($target, FILTER_VALIDATE_EMAIL) !== $target) { |
|
307 | - throw new ApplicationLogicException('Invalid target - email address expected.'); |
|
308 | - } |
|
309 | - } |
|
310 | - |
|
311 | - /** |
|
312 | - * @return Ban |
|
313 | - * @throws ApplicationLogicException |
|
314 | - */ |
|
315 | - private function getBanForUnban() |
|
316 | - { |
|
317 | - $banId = WebRequest::getInt('id'); |
|
318 | - if ($banId === null || $banId === 0) { |
|
319 | - throw new ApplicationLogicException("The ban ID appears to be missing. This is probably a bug."); |
|
320 | - } |
|
321 | - |
|
322 | - $ban = Ban::getActiveId($banId, $this->getDatabase()); |
|
323 | - |
|
324 | - if ($ban === false) { |
|
325 | - throw new ApplicationLogicException("The specified ban is not currently active, or doesn't exist."); |
|
326 | - } |
|
327 | - |
|
328 | - return $ban; |
|
329 | - } |
|
24 | + /** |
|
25 | + * Main function for this page, when no specific actions are called. |
|
26 | + */ |
|
27 | + protected function main() |
|
28 | + { |
|
29 | + $this->assignCSRFToken(); |
|
30 | + |
|
31 | + $this->setHtmlTitle('Bans'); |
|
32 | + |
|
33 | + $bans = Ban::getActiveBans(null, $this->getDatabase()); |
|
34 | + |
|
35 | + $userIds = array_map( |
|
36 | + function(Ban $entry) { |
|
37 | + return $entry->getUser(); |
|
38 | + }, |
|
39 | + $bans); |
|
40 | + $userList = UserSearchHelper::get($this->getDatabase())->inIds($userIds)->fetchMap('username'); |
|
41 | + |
|
42 | + $user = User::getCurrent($this->getDatabase()); |
|
43 | + $this->assign('canSet', $this->barrierTest('set', $user)); |
|
44 | + $this->assign('canRemove', $this->barrierTest('remove', $user)); |
|
45 | + |
|
46 | + $this->assign('usernames', $userList); |
|
47 | + $this->assign('activebans', $bans); |
|
48 | + $this->setTemplate('bans/banlist.tpl'); |
|
49 | + } |
|
50 | + |
|
51 | + /** |
|
52 | + * Entry point for the ban set action |
|
53 | + */ |
|
54 | + protected function set() |
|
55 | + { |
|
56 | + $this->setHtmlTitle('Bans'); |
|
57 | + |
|
58 | + // dual-mode action |
|
59 | + if (WebRequest::wasPosted()) { |
|
60 | + try { |
|
61 | + $this->handlePostMethodForSetBan(); |
|
62 | + } |
|
63 | + catch (ApplicationLogicException $ex) { |
|
64 | + SessionAlert::error($ex->getMessage()); |
|
65 | + $this->redirect("bans", "set"); |
|
66 | + } |
|
67 | + } |
|
68 | + else { |
|
69 | + $this->handleGetMethodForSetBan(); |
|
70 | + } |
|
71 | + } |
|
72 | + |
|
73 | + /** |
|
74 | + * Entry point for the ban remove action |
|
75 | + */ |
|
76 | + protected function remove() |
|
77 | + { |
|
78 | + $this->setHtmlTitle('Bans'); |
|
79 | + |
|
80 | + $ban = $this->getBanForUnban(); |
|
81 | + |
|
82 | + // dual mode |
|
83 | + if (WebRequest::wasPosted()) { |
|
84 | + $this->validateCSRFToken(); |
|
85 | + $unbanReason = WebRequest::postString('unbanreason'); |
|
86 | + |
|
87 | + if ($unbanReason === null || trim($unbanReason) === "") { |
|
88 | + SessionAlert::error('No unban reason specified'); |
|
89 | + $this->redirect("bans", "remove", array('id' => $ban->getId())); |
|
90 | + } |
|
91 | + |
|
92 | + // set optimistic locking from delete form page load |
|
93 | + $updateVersion = WebRequest::postInt('updateversion'); |
|
94 | + $ban->setUpdateVersion($updateVersion); |
|
95 | + |
|
96 | + $database = $this->getDatabase(); |
|
97 | + $ban->setActive(false); |
|
98 | + $ban->save(); |
|
99 | + |
|
100 | + Logger::unbanned($database, $ban, $unbanReason); |
|
101 | + |
|
102 | + SessionAlert::quick('Disabled ban.'); |
|
103 | + $this->getNotificationHelper()->unbanned($ban, $unbanReason); |
|
104 | + |
|
105 | + $this->redirect('bans'); |
|
106 | + } |
|
107 | + else { |
|
108 | + $this->assignCSRFToken(); |
|
109 | + $this->assign('ban', $ban); |
|
110 | + $this->setTemplate('bans/unban.tpl'); |
|
111 | + } |
|
112 | + } |
|
113 | + |
|
114 | + /** |
|
115 | + * @throws ApplicationLogicException |
|
116 | + */ |
|
117 | + private function getBanDuration() |
|
118 | + { |
|
119 | + $duration = WebRequest::postString('duration'); |
|
120 | + if ($duration === "other") { |
|
121 | + $duration = strtotime(WebRequest::postString('otherduration')); |
|
122 | + |
|
123 | + if (!$duration) { |
|
124 | + throw new ApplicationLogicException('Invalid ban time'); |
|
125 | + } |
|
126 | + elseif (time() > $duration) { |
|
127 | + throw new ApplicationLogicException('Ban time has already expired!'); |
|
128 | + } |
|
129 | + |
|
130 | + return $duration; |
|
131 | + } |
|
132 | + elseif ($duration === "-1") { |
|
133 | + $duration = -1; |
|
134 | + |
|
135 | + return $duration; |
|
136 | + } |
|
137 | + else { |
|
138 | + $duration = WebRequest::postInt('duration') + time(); |
|
139 | + |
|
140 | + return $duration; |
|
141 | + } |
|
142 | + } |
|
143 | + |
|
144 | + /** |
|
145 | + * @param string $type |
|
146 | + * @param string $target |
|
147 | + * |
|
148 | + * @throws ApplicationLogicException |
|
149 | + */ |
|
150 | + private function validateBanType($type, $target) |
|
151 | + { |
|
152 | + switch ($type) { |
|
153 | + case 'IP': |
|
154 | + $this->validateIpBan($target); |
|
155 | + |
|
156 | + return; |
|
157 | + case 'Name': |
|
158 | + // No validation needed here. |
|
159 | + return; |
|
160 | + case 'EMail': |
|
161 | + $this->validateEmailBanTarget($target); |
|
162 | + |
|
163 | + return; |
|
164 | + default: |
|
165 | + throw new ApplicationLogicException("Unknown ban type"); |
|
166 | + } |
|
167 | + } |
|
168 | + |
|
169 | + /** |
|
170 | + * Handles the POST method on the set action |
|
171 | + * |
|
172 | + * @throws ApplicationLogicException |
|
173 | + * @throws Exception |
|
174 | + */ |
|
175 | + private function handlePostMethodForSetBan() |
|
176 | + { |
|
177 | + $this->validateCSRFToken(); |
|
178 | + $reason = WebRequest::postString('banreason'); |
|
179 | + $target = WebRequest::postString('target'); |
|
180 | + |
|
181 | + // Checks whether there is a reason entered for ban. |
|
182 | + if ($reason === null || trim($reason) === "") { |
|
183 | + throw new ApplicationLogicException('You must specify a ban reason'); |
|
184 | + } |
|
185 | + |
|
186 | + // Checks whether there is a target entered to ban. |
|
187 | + if ($target === null || trim($target) === "") { |
|
188 | + throw new ApplicationLogicException('You must specify a target to be banned'); |
|
189 | + } |
|
190 | + |
|
191 | + // Validate ban duration |
|
192 | + $duration = $this->getBanDuration(); |
|
193 | + |
|
194 | + // Validate ban type & target for that type |
|
195 | + $type = WebRequest::postString('type'); |
|
196 | + $this->validateBanType($type, $target); |
|
197 | + |
|
198 | + $database = $this->getDatabase(); |
|
199 | + |
|
200 | + if (count(Ban::getActiveBans($target, $database)) > 0) { |
|
201 | + throw new ApplicationLogicException('This target is already banned!'); |
|
202 | + } |
|
203 | + |
|
204 | + $ban = new Ban(); |
|
205 | + $ban->setDatabase($database); |
|
206 | + $ban->setActive(true); |
|
207 | + $ban->setType($type); |
|
208 | + $ban->setTarget($target); |
|
209 | + $ban->setUser(User::getCurrent($database)->getId()); |
|
210 | + $ban->setReason($reason); |
|
211 | + $ban->setDuration($duration); |
|
212 | + |
|
213 | + $ban->save(); |
|
214 | + |
|
215 | + Logger::banned($database, $ban, $reason); |
|
216 | + |
|
217 | + $this->getNotificationHelper()->banned($ban); |
|
218 | + SessionAlert::quick('Ban has been set.'); |
|
219 | + |
|
220 | + $this->redirect('bans'); |
|
221 | + } |
|
222 | + |
|
223 | + /** |
|
224 | + * Handles the GET method on the set action |
|
225 | + */ |
|
226 | + protected function handleGetMethodForSetBan() |
|
227 | + { |
|
228 | + $this->setTemplate('bans/banform.tpl'); |
|
229 | + $this->assignCSRFToken(); |
|
230 | + |
|
231 | + $banType = WebRequest::getString('type'); |
|
232 | + $banTarget = WebRequest::getInt('request'); |
|
233 | + |
|
234 | + $database = $this->getDatabase(); |
|
235 | + |
|
236 | + // if the parameters are null, skip loading a request. |
|
237 | + if ($banType === null |
|
238 | + || !in_array($banType, array('IP', 'Name', 'EMail')) |
|
239 | + || $banTarget === null |
|
240 | + || $banTarget === 0 |
|
241 | + ) { |
|
242 | + $this->assign('bantarget', ''); |
|
243 | + $this->assign('bantype', ''); |
|
244 | + |
|
245 | + return; |
|
246 | + } |
|
247 | + |
|
248 | + // Set the ban type, which the user has indicated. |
|
249 | + $this->assign('bantype', $banType); |
|
250 | + |
|
251 | + // Attempt to resolve the correct target |
|
252 | + /** @var Request $request */ |
|
253 | + $request = Request::getById($banTarget, $database); |
|
254 | + if ($request === false) { |
|
255 | + $this->assign('bantarget', ''); |
|
256 | + |
|
257 | + return; |
|
258 | + } |
|
259 | + |
|
260 | + $realTarget = ''; |
|
261 | + switch ($banType) { |
|
262 | + case 'EMail': |
|
263 | + $realTarget = $request->getEmail(); |
|
264 | + break; |
|
265 | + case 'IP': |
|
266 | + $xffProvider = $this->getXffTrustProvider(); |
|
267 | + $realTarget = $xffProvider->getTrustedClientIp($request->getIp(), $request->getForwardedIp()); |
|
268 | + break; |
|
269 | + case 'Name': |
|
270 | + $realTarget = $request->getName(); |
|
271 | + break; |
|
272 | + } |
|
273 | + |
|
274 | + $this->assign('bantarget', $realTarget); |
|
275 | + } |
|
276 | + |
|
277 | + /** |
|
278 | + * Validates an IP ban target |
|
279 | + * |
|
280 | + * @param string $target |
|
281 | + * |
|
282 | + * @throws ApplicationLogicException |
|
283 | + */ |
|
284 | + private function validateIpBan($target) |
|
285 | + { |
|
286 | + $squidIpList = $this->getSiteConfiguration()->getSquidList(); |
|
287 | + |
|
288 | + if (filter_var($target, FILTER_VALIDATE_IP) === false) { |
|
289 | + throw new ApplicationLogicException('Invalid target - IP address expected.'); |
|
290 | + } |
|
291 | + |
|
292 | + if (in_array($target, $squidIpList)) { |
|
293 | + throw new ApplicationLogicException("This IP address is on the protected list of proxies, and cannot be banned."); |
|
294 | + } |
|
295 | + } |
|
296 | + |
|
297 | + /** |
|
298 | + * Validates an email address as a ban target |
|
299 | + * |
|
300 | + * @param string $target |
|
301 | + * |
|
302 | + * @throws ApplicationLogicException |
|
303 | + */ |
|
304 | + private function validateEmailBanTarget($target) |
|
305 | + { |
|
306 | + if (filter_var($target, FILTER_VALIDATE_EMAIL) !== $target) { |
|
307 | + throw new ApplicationLogicException('Invalid target - email address expected.'); |
|
308 | + } |
|
309 | + } |
|
310 | + |
|
311 | + /** |
|
312 | + * @return Ban |
|
313 | + * @throws ApplicationLogicException |
|
314 | + */ |
|
315 | + private function getBanForUnban() |
|
316 | + { |
|
317 | + $banId = WebRequest::getInt('id'); |
|
318 | + if ($banId === null || $banId === 0) { |
|
319 | + throw new ApplicationLogicException("The ban ID appears to be missing. This is probably a bug."); |
|
320 | + } |
|
321 | + |
|
322 | + $ban = Ban::getActiveId($banId, $this->getDatabase()); |
|
323 | + |
|
324 | + if ($ban === false) { |
|
325 | + throw new ApplicationLogicException("The specified ban is not currently active, or doesn't exist."); |
|
326 | + } |
|
327 | + |
|
328 | + return $ban; |
|
329 | + } |
|
330 | 330 | } |
@@ -18,77 +18,77 @@ |
||
18 | 18 | |
19 | 19 | class PageExpandedRequestList extends InternalPageBase |
20 | 20 | { |
21 | - /** |
|
22 | - * Main function for this page, when no specific actions are called. |
|
23 | - * @return void |
|
24 | - * @todo This is very similar to the PageMain code, we could probably generalise this somehow |
|
25 | - */ |
|
26 | - protected function main() |
|
27 | - { |
|
28 | - $config = $this->getSiteConfiguration(); |
|
21 | + /** |
|
22 | + * Main function for this page, when no specific actions are called. |
|
23 | + * @return void |
|
24 | + * @todo This is very similar to the PageMain code, we could probably generalise this somehow |
|
25 | + */ |
|
26 | + protected function main() |
|
27 | + { |
|
28 | + $config = $this->getSiteConfiguration(); |
|
29 | 29 | |
30 | - $requestedStatus = WebRequest::getString('status'); |
|
31 | - $requestStates = $config->getRequestStates(); |
|
30 | + $requestedStatus = WebRequest::getString('status'); |
|
31 | + $requestStates = $config->getRequestStates(); |
|
32 | 32 | |
33 | - if ($requestedStatus !== null && isset($requestStates[$requestedStatus])) { |
|
33 | + if ($requestedStatus !== null && isset($requestStates[$requestedStatus])) { |
|
34 | 34 | |
35 | - $this->assignCSRFToken(); |
|
35 | + $this->assignCSRFToken(); |
|
36 | 36 | |
37 | - $database = $this->getDatabase(); |
|
37 | + $database = $this->getDatabase(); |
|
38 | 38 | |
39 | - if ($config->getEmailConfirmationEnabled()) { |
|
40 | - $query = "SELECT * FROM request WHERE status = :type AND emailconfirm = 'Confirmed';"; |
|
41 | - $totalQuery = "SELECT COUNT(id) FROM request WHERE status = :type AND emailconfirm = 'Confirmed';"; |
|
42 | - } |
|
43 | - else { |
|
44 | - $query = "SELECT * FROM request WHERE status = :type;"; |
|
45 | - $totalQuery = "SELECT COUNT(id) FROM request WHERE status = :type;"; |
|
46 | - } |
|
39 | + if ($config->getEmailConfirmationEnabled()) { |
|
40 | + $query = "SELECT * FROM request WHERE status = :type AND emailconfirm = 'Confirmed';"; |
|
41 | + $totalQuery = "SELECT COUNT(id) FROM request WHERE status = :type AND emailconfirm = 'Confirmed';"; |
|
42 | + } |
|
43 | + else { |
|
44 | + $query = "SELECT * FROM request WHERE status = :type;"; |
|
45 | + $totalQuery = "SELECT COUNT(id) FROM request WHERE status = :type;"; |
|
46 | + } |
|
47 | 47 | |
48 | - $statement = $database->prepare($query); |
|
48 | + $statement = $database->prepare($query); |
|
49 | 49 | |
50 | - $totalRequestsStatement = $database->prepare($totalQuery); |
|
50 | + $totalRequestsStatement = $database->prepare($totalQuery); |
|
51 | 51 | |
52 | - $this->assign('defaultRequestState', $config->getDefaultRequestStateKey()); |
|
52 | + $this->assign('defaultRequestState', $config->getDefaultRequestStateKey()); |
|
53 | 53 | |
54 | - $type = $requestedStatus; |
|
54 | + $type = $requestedStatus; |
|
55 | 55 | |
56 | - $statement->bindValue(":type", $type); |
|
57 | - $statement->execute(); |
|
56 | + $statement->bindValue(":type", $type); |
|
57 | + $statement->execute(); |
|
58 | 58 | |
59 | - $requests = $statement->fetchAll(PDO::FETCH_CLASS, Request::class); |
|
59 | + $requests = $statement->fetchAll(PDO::FETCH_CLASS, Request::class); |
|
60 | 60 | |
61 | - /** @var Request $req */ |
|
62 | - foreach ($requests as $req) { |
|
63 | - $req->setDatabase($database); |
|
64 | - } |
|
61 | + /** @var Request $req */ |
|
62 | + foreach ($requests as $req) { |
|
63 | + $req->setDatabase($database); |
|
64 | + } |
|
65 | 65 | |
66 | - $this->assign('requests', $requests); |
|
67 | - $this->assign('header', $type); |
|
66 | + $this->assign('requests', $requests); |
|
67 | + $this->assign('header', $type); |
|
68 | 68 | |
69 | - $totalRequestsStatement->bindValue(':type', $type); |
|
70 | - $totalRequestsStatement->execute(); |
|
71 | - $totalRequests = $totalRequestsStatement->fetchColumn(); |
|
72 | - $totalRequestsStatement->closeCursor(); |
|
73 | - $this->assign('totalRequests', $totalRequests); |
|
69 | + $totalRequestsStatement->bindValue(':type', $type); |
|
70 | + $totalRequestsStatement->execute(); |
|
71 | + $totalRequests = $totalRequestsStatement->fetchColumn(); |
|
72 | + $totalRequestsStatement->closeCursor(); |
|
73 | + $this->assign('totalRequests', $totalRequests); |
|
74 | 74 | |
75 | - $userIds = array_map( |
|
76 | - function(Request $entry) { |
|
77 | - return $entry->getReserved(); |
|
78 | - }, |
|
79 | - $requests |
|
80 | - ); |
|
75 | + $userIds = array_map( |
|
76 | + function(Request $entry) { |
|
77 | + return $entry->getReserved(); |
|
78 | + }, |
|
79 | + $requests |
|
80 | + ); |
|
81 | 81 | |
82 | - $userList = UserSearchHelper::get($this->getDatabase())->inIds($userIds)->fetchMap('username'); |
|
83 | - $this->assign('userlist', $userList); |
|
82 | + $userList = UserSearchHelper::get($this->getDatabase())->inIds($userIds)->fetchMap('username'); |
|
83 | + $this->assign('userlist', $userList); |
|
84 | 84 | |
85 | - $this->assign('requestLimitShowOnly', $config->getMiserModeLimit()); |
|
85 | + $this->assign('requestLimitShowOnly', $config->getMiserModeLimit()); |
|
86 | 86 | |
87 | - $currentUser = User::getCurrent($database); |
|
88 | - $this->assign('canBan', $this->barrierTest('set', $currentUser, PageBan::class)); |
|
89 | - $this->assign('canBreakReservation', $this->barrierTest('force', $currentUser, PageBreakReservation::class)); |
|
87 | + $currentUser = User::getCurrent($database); |
|
88 | + $this->assign('canBan', $this->barrierTest('set', $currentUser, PageBan::class)); |
|
89 | + $this->assign('canBreakReservation', $this->barrierTest('force', $currentUser, PageBreakReservation::class)); |
|
90 | 90 | |
91 | - $this->setTemplate('mainpage/expandedrequestlist.tpl'); |
|
92 | - } |
|
93 | - } |
|
91 | + $this->setTemplate('mainpage/expandedrequestlist.tpl'); |
|
92 | + } |
|
93 | + } |
|
94 | 94 | } |
@@ -13,25 +13,25 @@ |
||
13 | 13 | |
14 | 14 | class ClearOldDataTask extends ConsoleTaskBase |
15 | 15 | { |
16 | - public function execute() |
|
17 | - { |
|
18 | - $dataClearInterval = $this->getSiteConfiguration()->getDataClearInterval(); |
|
16 | + public function execute() |
|
17 | + { |
|
18 | + $dataClearInterval = $this->getSiteConfiguration()->getDataClearInterval(); |
|
19 | 19 | |
20 | - $query = $this->getDatabase()->prepare(<<<SQL |
|
20 | + $query = $this->getDatabase()->prepare(<<<SQL |
|
21 | 21 | UPDATE request |
22 | 22 | SET ip = :ip, forwardedip = null, email = :mail, useragent = '' |
23 | 23 | WHERE date < DATE_SUB(curdate(), INTERVAL {$dataClearInterval}) |
24 | 24 | AND status = 'Closed'; |
25 | 25 | SQL |
26 | - ); |
|
26 | + ); |
|
27 | 27 | |
28 | - $success = $query->execute(array( |
|
29 | - ":ip" => $this->getSiteConfiguration()->getDataClearIp(), |
|
30 | - ":mail" => $this->getSiteConfiguration()->getDataClearEmail(), |
|
31 | - )); |
|
28 | + $success = $query->execute(array( |
|
29 | + ":ip" => $this->getSiteConfiguration()->getDataClearIp(), |
|
30 | + ":mail" => $this->getSiteConfiguration()->getDataClearEmail(), |
|
31 | + )); |
|
32 | 32 | |
33 | - if (!$success) { |
|
34 | - throw new Exception("Error in transaction: Could not clear data."); |
|
35 | - } |
|
36 | - } |
|
33 | + if (!$success) { |
|
34 | + throw new Exception("Error in transaction: Could not clear data."); |
|
35 | + } |
|
36 | + } |
|
37 | 37 | } |
38 | 38 | \ No newline at end of file |