COMMENTREPORT::create()

Complexity

Conditions	9
Paths	22

Size

Total Lines	149
Code Lines	70

Duplication

Lines	0
Ratio	0 %

Importance

Changes

0

<?php
    public function create($COMMENT, $reportdata) {
        // For when a user posts a report on a comment.
        // $reportdata is an array like:
        //	array (
        //		'body' => 'some text',

58% of this comment could be valid code. Did you maybe forget this after debugging?

        //		'firstname'	=> 'Billy',

58% of this comment could be valid code. Did you maybe forget this after debugging?

        //		'lastname'	=> 'Nomates',

58% of this comment could be valid code. Did you maybe forget this after debugging?

        //		'email'		=> 'billy@nomates.com'

50% of this comment could be valid code. Did you maybe forget this after debugging?

        //	)
        // But if the report was made by a logged-in user, only the
        // 'body' element should really contain anything, because
        // we use $THEUSER's id to get the rest.

        // $COMMENT is an existing COMMENT object, needed for setting
        // its modflag and comment_id.

        global $THEUSER, $PAGE;

Use of global functionality is not recommended; it makes your code harder to test, and less reusable.

        if (!$THEUSER->is_able_to('reportcomment')) {
            $PAGE->error_message ("Sorry, you are not allowed to post reports.");
            return false;
        }

        if (is_numeric($THEUSER->user_id()) && $THEUSER->user_id() > 0) {
            // Flood check - make sure the user hasn't just posted a report recently.
            // To help prevent accidental duplicates, among other nasty things.
            // (Non-logged in users are all id == 0.)

            $flood_time_limit = 20; // How many seconds until a user can post again?

            $q = $this->db->query("SELECT report_id
                            FROM	commentreports
                            WHERE	user_id = '" . $THEUSER->user_id() . "'
                            AND		reported + 0 > NOW() - $flood_time_limit");

            if ($q->rows() > 0) {
                $PAGE->error_message("Sorry, we limit people to posting one report per $flood_time_limit seconds to help prevent duplicate reports. Please go back and try again, thanks.");
                return false;
            }
        }


        // Tidy up body.
        $body = filter_user_input($reportdata['body'], 'comment'); // In utility.php

        $time = gmdate("Y-m-d H:i:s");

        if ($THEUSER->isloggedin()) {
            $sql = "INSERT INTO commentreports
                                    (comment_id, body, reported, user_id)
                            VALUES	(:comment_id,
                                    :body,
                                    :time,
                                    :user_id
                                    )
                        ";
            $params = array(
                ':comment_id' => $COMMENT->comment_id(),
                ':body' => $body,
                ':time' => $time,
                ':user_id' => $THEUSER->user_id()
            );
        } else {
            $sql = "INSERT INTO commentreports
                                    (comment_id, body, reported, firstname, lastname, email)
                            VALUES	(:comment_id,
                                    :body,
                                    :time,
                                    :firstname,
                                    :lastname,
                                    :email
                                    )
                        ";
            $params = array(
                ':comment_id' => $COMMENT->comment_id(),
                ':body' => $body,
                ':time' => $time,
                ':firstname' => $reportdata['firstname'],
                ':lastname' => $reportdata['lastname'],
                ':email' => $reportdata['email'],
            );
        }

        $q = $this->db->query($sql, $params);

        if ($q->success()) {
            // Inserted OK, so set up this object's variables.
            $this->report_id 	= $q->insert_id();
            $this->comment_id 	= $COMMENT->comment_id();
            $this->body			= $body;
            $this->reported		= $time;

            if ($THEUSER->isloggedin()) {
                $this->user_id		= $THEUSER->user_id();
                $this->firstname	= $THEUSER->firstname();
                $this->lastname		= $THEUSER->lastname();
            } else {
                $this->email		= $reportdata['email'];
                $this->firstname 	= $reportdata['firstname'];
                $this->lastname		= $reportdata['lastname'];
            }


            // Set the comment's modflag to on.
            $COMMENT->set_modflag('on');


            // Notify those who need to know that there's a new report.

            $URL = new \MySociety\TheyWorkForYou\Url('admin_commentreport');
            $URL->insert(array(
                'rid'=>$this->report_id,
                'cid'=>$this->comment_id
            ));

            $emailbody = "A new comment report has been filed by " . $this->user_name() . ".\n\n";
            $emailbody .= "COMMENT:\n" . $COMMENT->body() . "\n\n";
            $emailbody .= "REPORT:\n" . $this->body . "\n\n";
            $emailbody .= "To manage this report follow this link: https://" . DOMAIN . $URL->generate('none') . "\n";

The constant DOMAIN was not found. Maybe you did not declare it correctly or list all dependencies?

            send_email(REPORTLIST, 'New comment report', $emailbody);

The constant REPORTLIST was not found. Maybe you did not declare it correctly or list all dependencies?

            // Send an email to the user to thank them.

            if ($THEUSER->isloggedin()) {
                $email = $THEUSER->email();
            } else {
                $email = $this->email();
            }

            $data = array (
                'to' 			=> $email,
                'template' 		=> 'report_acknowledge'
            );
            $merge = array (
                'FIRSTNAME' 	=> $this->firstname(),
                'LASTNAME' 		=> $this->lastname(),
                'COMMENTURL' 	=> "https://" . DOMAIN . $COMMENT->url(),
                'REPORTBODY' 	=> strip_tags($this->body())
            );


            // send_template_email in utility.php.
            send_template_email($data, $merge);

            return true;
        } else {
            return false;
        }