mirror of
https://github.com/WhatCD/Gazelle.git
synced 2024-12-13 02:46:30 +00:00
59 lines
2.3 KiB
PHP
59 lines
2.3 KiB
PHP
<?
|
|
//******************************************************************************//
|
|
//--------------- Take mass pm -------------------------------------------------//
|
|
// This pages handles the backend of the 'send mass pm' function. It checks //
|
|
// the data, and if it all validates, it sends a pm to everyone who snatched //
|
|
// the torrent. //
|
|
//******************************************************************************//
|
|
|
|
authorize();
|
|
|
|
enforce_login();
|
|
|
|
require(SERVER_ROOT.'/classes/class_validate.php');
|
|
$Validate = new VALIDATE;
|
|
|
|
$TorrentID = (int)$_POST['torrentid'];
|
|
$GroupID = (int)$_POST['groupid'];
|
|
$Subject = $_POST['subject'];
|
|
$Message = $_POST['message'];
|
|
|
|
//******************************************************************************//
|
|
//--------------- Validate data in edit form -----------------------------------//
|
|
|
|
// FIXME: Still need a better perm name
|
|
if(!check_perms('site_moderate_requests')) {
|
|
error(403);
|
|
}
|
|
|
|
$Validate->SetFields('torrentid','1','number','Invalid torrent ID.',array('maxlength'=>1000000000, 'minlength'=>1)); // we shouldn't have torrent IDs higher than a billion
|
|
$Validate->SetFields('groupid','1','number','Invalid group ID.',array('maxlength'=>1000000000, 'minlength'=>1)); // we shouldn't have group IDs higher than a billion either
|
|
$Validate->SetFields('subject','0','string','Invalid subject.',array('maxlength'=>1000, 'minlength'=>1));
|
|
$Validate->SetFields('message','0','string','Invalid message.',array('maxlength'=>10000, 'minlength'=>1));
|
|
$Err = $Validate->ValidateForm($_POST); // Validate the form
|
|
|
|
if($Err){
|
|
error($Err);
|
|
header('Location: '.$_SERVER['HTTP_REFERER']);
|
|
die();
|
|
}
|
|
|
|
//******************************************************************************//
|
|
//--------------- Send PMs to users --------------------------------------------//
|
|
|
|
$DB->query('SELECT uid FROM xbt_snatched WHERE fid='.$TorrentID);
|
|
|
|
if ($DB->record_count()>0) {
|
|
// Save this because send_pm uses $DB to run its own query... Oops...
|
|
$Snatchers = $DB->to_array();
|
|
foreach ($Snatchers as $UserID) {
|
|
Misc::send_pm($UserID[0],0,db_string($Subject),db_string($Message));
|
|
}
|
|
}
|
|
|
|
Misc::write_log($LoggedUser['Username']." sent mass notice to snatches of torrent $TorrentID in group $GroupID");
|
|
|
|
header("Location: torrents.php?id=$GroupID");
|
|
|
|
?>
|