Gazelle/sections/reports/report.php

<?

include(SERVER_ROOT.'/sections/reports/array.php');

if (empty($_GET['type']) || empty($_GET['id']) || !is_number($_GET['id'])) {
	error(404);
}

if (!array_key_exists($_GET['type'], $Types)) {
	error(403);
}
$Short = $_GET['type'];
$Type = $Types[$Short];

$ID = $_GET['id'];

switch ($Short) {
	case 'user':
		$DB->query("
			SELECT Username
			FROM users_main
			WHERE ID = $ID");
		if (!$DB->has_results()) {
			error(404);
		}
		list($Username) = $DB->next_record();
		break;

	case 'request_update':
		$NoReason = true;
		$DB->query("
			SELECT Title, Description, TorrentID, CategoryID, Year
			FROM requests
			WHERE ID = $ID");
		if (!$DB->has_results()) {
			error(404);
		}
		list($Name, $Desc, $Filled, $CategoryID, $Year) = $DB->next_record();
		if ($Filled || ($CategoryID != 0 && ($Categories[$CategoryID - 1] != 'Music' || $Year != 0))) {
			error(403);
		}
		break;

	case 'request':
		$DB->query("
			SELECT Title, Description, TorrentID
			FROM requests
			WHERE ID = $ID");
		if (!$DB->has_results()) {
			error(404);
		}
		list($Name, $Desc, $Filled) = $DB->next_record();
		break;

	case 'collage':
		$DB->query("
			SELECT Name, Description
			FROM collages
			WHERE ID = $ID");
		if (!$DB->has_results()) {
			error(404);
		}
		list($Name, $Desc) = $DB->next_record();
		break;

	case 'thread':
		$DB->query("
			SELECT ft.Title, ft.ForumID, um.Username
			FROM forums_topics AS ft
				JOIN users_main AS um ON um.ID = ft.AuthorID
			WHERE ft.ID = $ID");
		if (!$DB->has_results()) {
			error(404);
		}
		list($Title, $ForumID, $Username) = $DB->next_record();
		$DB->query("
			SELECT MinClassRead
			FROM forums
			WHERE ID = $ForumID");
		list($MinClassRead) = $DB->next_record();
		if (!empty($LoggedUser['DisableForums'])
				|| ($MinClassRead > $LoggedUser['EffectiveClass'] && (!isset($LoggedUser['CustomForums'][$ForumID]) || $LoggedUser['CustomForums'][$ForumID] == 0))
				|| (isset($LoggedUser['CustomForums'][$ForumID]) && $LoggedUser['CustomForums'][$ForumID] == 0)) {
			error(403);
		}
		break;

	case 'post':
		$DB->query("
			SELECT fp.Body, fp.TopicID, um.Username
			FROM forums_posts AS fp
				JOIN users_main AS um ON um.ID = fp.AuthorID
			WHERE fp.ID = $ID");
		if (!$DB->has_results()) {
			error(404);
		}
		list($Body, $TopicID, $Username) = $DB->next_record();
		$DB->query("
			SELECT ForumID
			FROM forums_topics
			WHERE ID = $TopicID");
		list($ForumID) = $DB->next_record();
		$DB->query("
			SELECT MinClassRead
			FROM forums
			WHERE ID = $ForumID");
		list($MinClassRead) = $DB->next_record();
		if (!empty($LoggedUser['DisableForums'])
				|| ($MinClassRead > $LoggedUser['EffectiveClass'] && (!isset($LoggedUser['CustomForums'][$ForumID]) || $LoggedUser['CustomForums'][$ForumID] == 0))
				|| (isset($LoggedUser['CustomForums'][$ForumID]) && $LoggedUser['CustomForums'][$ForumID] == 0)) {
			error(403);
		}
		break;

	case 'comment':
		$DB->query("
			SELECT c.Body, um.Username
			FROM comments AS c
				JOIN users_main AS um ON um.ID = c.AuthorID
			WHERE c.ID = $ID");
		if (!$DB->has_results()) {
			error(404);
		}
		list($Body, $Username) = $DB->next_record();
		break;
}

View::show_header('Report a '.$Type['title'], 'bbcode,jquery.validate,form_validate');
?>
<div class="thin">
	<div class="header">
		<h2>Report <?=$Type['title']?></h2>
	</div>
	<h3>Reporting guidelines</h3>
	<div class="box pad">
		<p>Following these guidelines will help the moderators deal with your report in a timely fashion. </p>
		<ul>
<?	foreach ($Type['guidelines'] as $Guideline) { ?>
			<li><?=$Guideline?></li>
<?	} ?>
		</ul>
		<p>In short, please include as much detail as possible when reporting. Thank you. </p>
	</div>
<?

include(SERVER_ROOT.'/classes/text.class.php'); // Text formatting class
$Text = new TEXT;


switch ($Short) {
	case 'user':
?>
	<p>You are reporting the user <strong><?=display_str($Username)?></strong></p>
<?
		break;
	case 'request_update':
?>
	<p>You are reporting the request:</p>
	<table>
		<tr class="colhead">
			<td>Title</td>
			<td>Description</td>
			<td>Filled?</td>
		</tr>
		<tr>
			<td><?=display_str($Name)?></td>
			<td><?=$Text->full_format($Desc)?></td>
			<td><strong><?=($Filled == 0 ? 'No' : 'Yes')?></strong></td>
		</tr>
	</table>
	<br />

	<div class="box pad center">
		<p><strong>It will greatly increase the turnover rate of the updates if you can fill in as much of the following details as possible.</strong></p>
		<form class="create_form" id="report_form" name="report" action="" method="post">
			<input type="hidden" name="action" value="takereport" />
			<input type="hidden" name="auth" value="<?=$LoggedUser['AuthKey']?>" />
			<input type="hidden" name="id" value="<?=$ID?>" />
			<input type="hidden" name="type" value="<?=$Short?>" />
			<table class="layout">
				<tr>
					<td class="label">Year (required)</td>
					<td>
						<input type="text" size="4" name="year" class="required" />
					</td>
				</tr>
				<tr>
					<td class="label">Release type</td>
					<td>
						<select id="releasetype" name="releasetype">
							<option value="0">---</option>
<?		foreach ($ReleaseTypes as $Key => $Val) { ?>
							<option value="<?=$Key?>"<?=(!empty($ReleaseType) ? ($Key == $ReleaseType ? ' selected="selected"' : '') : '')?>><?=$Val?></option>
<?		} ?>
						</select>
					</td>
				</tr>
				<tr>
					<td class="label">Comment</td>
					<td>
						<textarea rows="8" cols="80" name="comment" class="required"></textarea>
					</td>
				</tr>
			</table>
			<br />
			<br />
			<input type="submit" value="Submit report" />
		</form>
	</div>
<?
		break;
	case 'request':
?>
	<p>You are reporting the request:</p>
	<table>
		<tr class="colhead">
			<td>Title</td>
			<td>Description</td>
			<td>Filled?</td>
		</tr>
		<tr>
			<td><?=display_str($Name)?></td>
			<td><?=$Text->full_format($Desc)?></td>
			<td><strong><?=($Filled == 0 ? 'No' : 'Yes')?></strong></td>
		</tr>
	</table>
<?
		break;
	case 'collage':
?>
	<p>You are reporting the collage:</p>
	<table>
		<tr class="colhead">
			<td>Title</td>
			<td>Description</td>
		</tr>
		<tr>
			<td><?=display_str($Name)?></td>
			<td><?=$Text->full_format($Desc)?></td>
		</tr>
	</table>
<?
		break;
	case 'thread':
?>
	<p>You are reporting the thread:</p>
	<table>
		<tr class="colhead">
			<td>Username</td>
			<td>Title</td>
		</tr>
		<tr>
			<td><?=display_str($Username)?></td>
			<td><?=display_str($Title)?></td>
		</tr>
	</table>
<?
		break;
	case 'post':
?>
	<p>You are reporting the post:</p>
	<table>
		<tr class="colhead">
			<td>Username</td>
			<td>Body</td>
		</tr>
		<tr>
			<td><?=display_str($Username)?></td>
			<td><?=$Text->full_format($Body)?></td>
		</tr>
	</table>
<?
		break;
	case 'comment':
?>
	<p>You are reporting the <?=$Types[$Short]['title']?>:</p>
	<table>
		<tr class="colhead">
			<td>Username</td>
			<td>Body</td>
		</tr>
		<tr>
			<td><?=display_str($Username)?></td>
			<td><?=$Text->full_format($Body)?></td>
		</tr>
	</table>
<?
	break;
}
if (empty($NoReason)) {
?>
	<h3>Reason</h3>
	<div class="box pad center">
		<form class="create_form" name="report" id="report_form" action="" method="post">
			<input type="hidden" name="action" value="takereport" />
			<input type="hidden" name="auth" value="<?=$LoggedUser['AuthKey']?>" />
			<input type="hidden" name="id" value="<?=$ID?>" />
			<input type="hidden" name="type" value="<?=$Short?>" />
			<textarea class="required" rows="10" cols="95" name="reason"></textarea><br /><br />
			<input type="submit" value="Submit report" />
		</form>
	</div>
<?
}
// close <div class="thin"> ?>
</div>
<?
View::show_footer();
?>