216 lines
8.6 KiB
PHP
216 lines
8.6 KiB
PHP
|
<?php
|
||
|
|
define("SVRJS_MOD_DIRECTORY", null);
|
||
|
|
define("SVRJS_MOD_DIRECTORY_MODERATION", null);
|
||
|
|
include '../config.php';
|
||
|
|
$appModerationRoot = dirname($_SERVER['SCRIPT_NAME']);
|
||
|
|
if ($appModerationRoot[strlen($appModerationRoot) - 1] != "/") $appModerationRoot = $appModerationRoot . '/';
|
||
|
|
$appRoot = dirname($_SERVER['SCRIPT_NAME'], 2);
|
||
|
|
if ($appRoot[strlen($appRoot) - 1] != "/") $appRoot = $appRoot . '/';
|
||
|
|
define('APP_ROOT', $appRoot);
|
||
|
|
define('APP_FSROOT', dirname(__FILE__, 2));
|
||
|
|
define('APP_MODERATION_FILENAME', basename($_SERVER['SCRIPT_NAME']));
|
||
|
|
define('APP_MODERATION_ROOT', $appModerationRoot);
|
||
|
|
include '../vendor/autoload.php';
|
||
|
|
include '../includes/init.php';
|
||
|
|
include '../includes/moderation_init.php';
|
||
|
|
|
||
|
|
$errorMessage = null;
|
||
|
|
$modApproved = false;
|
||
|
|
$modRejected = false;
|
||
|
|
$modData = null;
|
||
|
|
|
||
|
|
if ($_SERVER['REQUEST_METHOD'] == 'POST') {
|
||
|
|
if (!isset($_POST['_csrf']) || $_POST['_csrf'] != $_SESSION['moderation_csrf']) {
|
||
|
|
$errorMessage = "Potential CSRF attack detected.";
|
||
|
|
} elseif (!isset($_POST['id']) || !$_POST['id']) {
|
||
|
|
$errorMessage = "You need to send the pending mod ID";
|
||
|
|
} elseif (!filter_var($_POST['id'], FILTER_VALIDATE_INT)) {
|
||
|
|
$errorMessage = "Invalid pending mod ID";
|
||
|
|
} else {
|
||
|
|
$modID = intval($_POST['id']);
|
||
|
|
$statement = $connection->prepare("SELECT
|
||
|
|
mods.id AS id,
|
||
|
|
mods.is_removed AS is_removed,
|
||
|
|
mods.name AS name,
|
||
|
|
mods.slug AS slug,
|
||
|
|
mods.description AS description,
|
||
|
|
mods.image_ext AS image_ext,
|
||
|
|
mods.is_paid AS is_paid,
|
||
|
|
mods.category AS category,
|
||
|
|
mods.link AS link,
|
||
|
|
mods.docs_link AS docs_link,
|
||
|
|
mods.is_paid AS is_paid,
|
||
|
|
users.username AS username,
|
||
|
|
users.email AS user_email,
|
||
|
|
users.id AS user
|
||
|
|
FROM mods
|
||
|
|
JOIN users ON users.id = mods.user
|
||
|
|
AND users.is_suspended = 0
|
||
|
|
AND users.is_deleted = 0
|
||
|
|
AND users.is_verified = 1
|
||
|
|
WHERE mods.id = ?");
|
||
|
|
if (!$statement) {
|
||
|
|
$errorMessage = "An unexcepted error occurred when checking the mod.";
|
||
|
|
} else {
|
||
|
|
$statement->bind_param('i', $modID);
|
||
|
|
$statement->execute();
|
||
|
|
$result = $statement->get_result();
|
||
|
|
if (!$result) {
|
||
|
|
$errorMessage = "An unexcepted error occurred when checking the mod.";
|
||
|
|
$statement->close();
|
||
|
|
} else {
|
||
|
|
$modData = $result->fetch_assoc();
|
||
|
|
$statement->close();
|
||
|
|
if (!$modData) {
|
||
|
|
$errorMessage = "The mod doesn't exist.";
|
||
|
|
} else {
|
||
|
|
if (!isset($_POST['action'])) {
|
||
|
|
$errorMessage = "No action specified.";
|
||
|
|
} elseif ($_POST['action'] == "remove") {
|
||
|
|
if (!isset($_POST['reason']) || !$_POST['reason']) {
|
||
|
|
$errorMessage = "You need to specify the reason for removal.";
|
||
|
|
} elseif ($modData['is_removed']) {
|
||
|
|
$errorMessage = "The mod is already removed.";
|
||
|
|
} else {
|
||
|
|
$statement = $connection->prepare('UPDATE mods SET is_removed = 1 WHERE id = ?');
|
||
|
|
if (!$statement) {
|
||
|
|
$errorMessage = "An unexpected error occurred while removing the mod.";
|
||
|
|
} else {
|
||
|
|
$statement->bind_param('i', $modData['id']);
|
||
|
|
if (!$statement->execute()) {
|
||
|
|
$errorMessage = "An unexpected error occurred while removing the mod.";
|
||
|
|
$statement->close();
|
||
|
|
} else {
|
||
|
|
$modRemoved = true;
|
||
|
|
$statement->close();
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
} elseif ($_POST['action'] == "restore") {
|
||
|
|
if (!$modData['is_removed']) {
|
||
|
|
$errorMessage = "The mod is already restored.";
|
||
|
|
} else {
|
||
|
|
$statement = $connection->prepare('UPDATE mods SET is_removed = 0 WHERE id = ?');
|
||
|
|
if (!$statement) {
|
||
|
|
$errorMessage = "An unexpected error occurred while restoring the mod.";
|
||
|
|
} else {
|
||
|
|
$statement->bind_param('i', $modData['id']);
|
||
|
|
if (!$statement->execute()) {
|
||
|
|
$errorMessage = "An unexpected error occurred while restoring the mod.";
|
||
|
|
$statement->close();
|
||
|
|
} else {
|
||
|
|
$modRestored = true;
|
||
|
|
$statement->close();
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
$errorMessage = "Unknown action specified.";
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
$pageTitle = "Mods";
|
||
|
|
include '../includes/moderation_header.php';
|
||
|
|
?>
|
||
|
|
<h1>Mods</h1>
|
||
|
|
<?php if ($errorMessage) echo '<p class="form-error">' . htmlspecialchars($errorMessage) . '</p>'; ?>
|
||
|
|
<?php
|
||
|
|
if ($modRemoved) {
|
||
|
|
echo '<p>Mod has been removed.</p>';
|
||
|
|
} elseif ($modRestored) {
|
||
|
|
echo '<p>Mod has been restored.</p>';
|
||
|
|
}
|
||
|
|
?>
|
||
|
|
<?php
|
||
|
|
$result = $connection->query('SELECT
|
||
|
|
mods.id AS id,
|
||
|
|
mods.name AS name,
|
||
|
|
mods.slug AS slug,
|
||
|
|
mods.description AS description,
|
||
|
|
mods.image_ext AS image_ext,
|
||
|
|
mods.is_paid AS is_paid,
|
||
|
|
mods.link AS link,
|
||
|
|
mods.docs_link AS docs_link,
|
||
|
|
mods.is_removed AS is_removed,
|
||
|
|
categories.name AS category,
|
||
|
|
users.username AS user,
|
||
|
|
users.id AS user_id
|
||
|
|
FROM mods
|
||
|
|
LEFT JOIN categories ON categories.id = mods.category
|
||
|
|
JOIN users ON users.id = mods.user
|
||
|
|
AND users.is_suspended = 0
|
||
|
|
AND users.is_deleted = 0
|
||
|
|
AND users.is_verified = 1
|
||
|
|
ORDER BY mods.id DESC;');
|
||
|
|
if (!$result) {
|
||
|
|
echo "<p>An unexpected error occurred while fetching mods.</p>";
|
||
|
|
} else {
|
||
|
|
$modsPresent = false;
|
||
|
|
while ($mod = $result->fetch_assoc()) {
|
||
|
|
$modsPresent = true;
|
||
|
|
echo '<div class="mod">
|
||
|
|
<img src="' . htmlspecialchars(APP_ROOT . 'img/' . (isset($mod['image_ext']) && $mod['image_ext'] ? 'mods/' . urlencode(str_replace(['/', '\\'], '', $mod['slug'])) . '.' . urlencode(str_replace(['/', '\\'], '', $mod['image_ext'])) : 'mod-missing.png')) . '" alt="' . htmlspecialchars($mod['name']) . ' cover image">
|
||
|
|
<div class="mod-info">
|
||
|
|
<h2>' . htmlspecialchars($mod['name']) . '</h2>
|
||
|
|
<p><span class="badge">' . ($mod['is_paid'] ? 'Paid' : 'Gratis') . '</span>' . ($mod['is_removed'] ? '<span class="badge">Removed</span>' : '') . '</p>
|
||
|
|
<p>' . (isset($mod['description']) && $mod['description'] ? str_replace(["\r\n", "\n", "\r"], '<br/>', htmlspecialchars(shortenDescription($mod['description']))) : "<i>No description</i>") . '</p>
|
||
|
|
<p><strong>Publisher:</strong> <a href="' . htmlspecialchars(APP_MODERATION_ROOT . 'user.php?user=' . urlencode($mod['user'])) . '">' . htmlspecialchars($mod['user']) . '</a> | <strong>Category:</strong> ' . htmlspecialchars($mod['category']) . '</p>
|
||
|
|
<p><strong>Download URL:</strong> ' . htmlspecialchars($mod['link']) . '</p>
|
||
|
|
' . ($mod['docs_link'] ? '<p><strong>Documentation URL:</strong> ' . htmlspecialchars($mod['docs_link']) . '</p>' : '') . '
|
||
|
|
' . ($mod['is_removed'] ? '<form action="' . htmlspecialchars(APP_MODERATION_ROOT . 'mods.php') . '" method="post" class="form">
|
||
|
|
<div class="form-block">
|
||
|
|
<input type="submit" value="Restore">
|
||
|
|
</div>
|
||
|
|
<input type="hidden" name="_csrf" value="' . htmlspecialchars($_SESSION['moderation_csrf']) . '">
|
||
|
|
<input type="hidden" name="action" value="restore">
|
||
|
|
<input type="hidden" name="id" value="' . htmlspecialchars(strval($mod['id'])) . '">
|
||
|
|
</form>' : '<form action="' . htmlspecialchars(APP_MODERATION_ROOT . 'mods.php') . '" method="post" class="form">
|
||
|
|
<div class="form-block">
|
||
|
|
<label for="remove-reason-' . htmlspecialchars(strval($mod['id'])) . '">Reason for removal:</label>
|
||
|
|
<textarea name="reason" id="remove-reason-' . htmlspecialchars(strval($mod['id'])) . '" required></textarea>
|
||
|
|
</div>
|
||
|
|
<div class="form-block">
|
||
|
|
<input type="submit" value="Remove">
|
||
|
|
</div>
|
||
|
|
<input type="hidden" name="_csrf" value="' . htmlspecialchars($_SESSION['moderation_csrf']) . '">
|
||
|
|
<input type="hidden" name="action" value="remove">
|
||
|
|
<input type="hidden" name="id" value="' . htmlspecialchars(strval($mod['id'])) . '">
|
||
|
|
</form>') . '
|
||
|
|
</div>
|
||
|
|
</div>';
|
||
|
|
}
|
||
|
|
if (!$modsPresent) {
|
||
|
|
echo '<p>No mods.</p>';
|
||
|
|
}
|
||
|
|
}
|
||
|
|
?>
|
||
|
|
<?php
|
||
|
|
include '../includes/moderation_footer.php';
|
||
|
|
|
||
|
|
if ($modRemoved) {
|
||
|
|
sendEmail(
|
||
|
|
[[
|
||
|
|
"name" => $modData['username'],
|
||
|
|
"address" => $modData['user_email']
|
||
|
|
]],
|
||
|
|
'Your mod has been removed.',
|
||
|
|
'Unfortunately, your "' . str_replace(["\r\n", "\n", "\r"], '', $modData['name']) . "\" mod has been removed by the moderator. Below is the reason why the moderator removed this mod:\n\n" . $_POST['reason']
|
||
|
|
);
|
||
|
|
} elseif ($modRestored) {
|
||
|
|
sendEmail(
|
||
|
|
[[
|
||
|
|
"name" => $modData['username'],
|
||
|
|
"address" => $modData['user_email']
|
||
|
|
]],
|
||
|
|
'Your mod has been restored.',
|
||
|
|
'Your "' . str_replace(["\r\n", "\n", "\r"], '', $modData['name']) . '" mod has been restored by the moderator and is now listed again on SVR.JS Mods directory.'
|
||
|
|
);
|
||
|
|
}
|
||
|
|
|
||
|
|
include '../includes/moderation_final.php';
|
||
|
|
include '../includes/final.php';
|
||
|
|
?>
|