Gazelle/sections/tools/misc/manipulate_tree.php

<?
//Props to Leto of StC.
if (
	!check_perms('users_view_invites') &&
	!check_perms('users_disable_users') &&
	!check_perms('users_edit_invites') &&
	!check_perms('users_disable_any')
) { error(404); }
View::show_header("Manipulate Invite Tree");

if($_POST['id']) {
	authorize();

	if(!is_number($_POST['id'])) { error(403); }
	if(!$_POST['comment']) { error('Please enter a comment to add to the users affected.');
	} else { $Comment = db_string($_POST['comment']); }
	$UserID = $_POST['id'];
	$DB->query("SELECT
		t1.TreePosition,
		t1.TreeID,
		t1.TreeLevel,
		(SELECT
			t2.TreePosition FROM invite_tree AS t2
			WHERE TreeID=t1.TreeID AND TreeLevel=t1.TreeLevel AND t2.TreePosition>t1.TreePosition
			ORDER BY TreePosition LIMIT 1
		) AS MaxPosition
		FROM invite_tree AS t1
		WHERE t1.UserID=$UserID");
	list($TreePosition, $TreeID, $TreeLevel, $MaxPosition) = $DB->next_record();
	if(!$MaxPosition){ $MaxPosition = 1000000; } // $MaxPermission is null if the user is the last one in that tree on that level
	if(!$TreeID){ return; }
		$DB->query("
			SELECT
			UserID
			FROM invite_tree
			WHERE TreeID=$TreeID
			AND TreePosition>$TreePosition
			AND TreePosition<$MaxPosition
			AND TreeLevel>$TreeLevel
			ORDER BY TreePosition");
	$BanList = array();

	while(list($Invitee) = $DB->next_record()) {
		$BanList[]=$Invitee;
	}

	foreach ($BanList as $Key => $InviteeID) {
		if ($_POST['perform']=='nothing') {
			$DB->query("SELECT
					AdminComment
					FROM users_info
					WHERE UserID='".$InviteeID."'");
			list($AdminComment)=$DB->next_record();
			$DBComment = $Comment."\n\n".$AdminComment;
			$DB->query("UPDATE
					users_info
					SET AdminComment='".$DBComment."'
					WHERE UserID='".$InviteeID."'");
			$Msg = "Successfully commented on entire invite tree!";
		} elseif ($_POST['perform']=='disable') {
			$DB->query("SELECT
					AdminComment
					FROM users_info
					WHERE UserID='".$InviteeID."'");
			list($AdminComment)=$DB->next_record();
			$DBComment = $Comment."\n\n".$AdminComment;
			$DB->query("UPDATE
					users_info
					SET AdminComment='".$DBComment."'
					WHERE UserID='".$InviteeID."'");
			$DB->query("UPDATE
					users_main
					SET Enabled='2'
					WHERE ID='".$InviteeID."'");
			$Msg = "Successfully banned entire invite tree!";
		} elseif ($_POST['perform']=='inviteprivs') { //DisableInvites =1
			$DB->query("UPDATE
					users_info
					SET DisableInvites='1'
					WHERE UserID='".$InviteeID."'");
			$DB->query("SELECT
					AdminComment
					FROM users_info
					WHERE UserID='".$InviteeID."'");
			list($AdminComment)=$DB->next_record();
			$DBComment = $Comment."\n\n".$AdminComment;
			$DB->query("UPDATE
					users_info
					SET AdminComment='".$DBComment."'
					WHERE UserID='".$InviteeID."'");
			$Msg = "Successfully removed invite privileges from entire tree!";
		} else {
			error(403);
		}
	}
}
?>

<div class="thin">
	<? if($Msg) { ?>
	<div class="center">
		<p style="color: red;text-align:center;"><?=$Msg?></p>
	</div>
	<? } ?>
	<form class="manage_form" name="user" action="" method="post">
		<input type="hidden" id="action" name="action" value="manipulate_tree" />
		<input type="hidden" name="auth" value="<?=$LoggedUser['AuthKey']?>" />
		<table class="layout">
			<tr>
				<td class="label"><strong>UserID</strong></td>
				<td>
					<input type="text" size="10" name="id" id="id" />
				</td>
				<td class="label"><strong>Mandatory comment!</strong></td>
				<td>
					<input type="text" size="40" name="comment" id="comment" />
				</td>
			</tr>
			<tr>
				<td class="label"><strong>Action: </strong></td>
				<td colspan="2">
					<select name="perform">
						<option value="nothing"<? if($_POST['perform']==='nothing'){echo ' selected="selected"';}?>>Do nothing</option>
						<option value="disable"<? if($_POST['perform']==='disable'){echo ' selected="selected"';}?>>Disable entire tree</option>
						<option value="inviteprivs"<? if($_POST['perform']==='inviteprivs'){echo ' selected="selected"';}?>>Disable invites privileges</option>
					</select>
				</td><td align="left">
					<input type="submit" value="Go" />
				</td>
			</tr>
		</table>
	</form>
</div>

<? View::show_footer(); ?>