159 lines
7.5 KiB
PHP
159 lines
7.5 KiB
PHP
<?php
|
|
require_once('../wp-includes/wp-l10n.php');
|
|
|
|
$title = __('Edit Comments');
|
|
$parent_file = 'edit.php';
|
|
require_once('admin-header.php');
|
|
if (empty($_GET['mode'])) $mode = 'view';
|
|
else $mode = $_GET['mode'];
|
|
?>
|
|
<ul id="adminmenu2">
|
|
<li><a href="edit.php"><?php _e('Posts') ?></a></li>
|
|
<li><a href="edit-comments.php" class="current"><?php _e('Comments') ?></a></li>
|
|
<li class="last"><a href="moderation.php"><?php _e('Awaiting Moderation') ?></a></li>
|
|
</ul>
|
|
<script type="text/javascript">
|
|
<!--
|
|
function checkAll(form)
|
|
{
|
|
for (i = 0, n = form.elements.length; i < n; i++) {
|
|
if(form.elements[i].type == "checkbox") {
|
|
if(form.elements[i].checked == true)
|
|
form.elements[i].checked = false;
|
|
else
|
|
form.elements[i].checked = true;
|
|
}
|
|
}
|
|
}
|
|
//-->
|
|
</script>
|
|
<div class="wrap">
|
|
<form name="searchform" action="" method="get">
|
|
<fieldset>
|
|
<legend><?php _e('Show Comments That Contain...') ?></legend>
|
|
<input type="text" name="s" value="<?php if (isset($s)) echo $s; ?>" size="17" />
|
|
<input type="submit" name="submit" value="<?php _e('Search') ?>" />
|
|
<input type="hidden" name="mode" value="<?php echo $mode; ?>" />
|
|
<?php _e('(Searches within comment text, email, URI, and IP address.)') ?>
|
|
</fieldset>
|
|
</form>
|
|
<p><a href="?mode=view"><?php _e('View Mode') ?></a> | <a href="?mode=edit"><?php _e('Mass Edit Mode') ?></a></p>
|
|
<?php
|
|
if (!empty($delete_comments)) {
|
|
|
|
// I had this all as one query but then realized we weren't checking permissions on each comment.
|
|
$del_comments = ''; $safe_delete_commeents = ''; $i = 0;
|
|
foreach ($delete_comments as $comment) { // Check the permissions on each
|
|
$comment = intval($comment);
|
|
$post_id = $wpdb->get_var("SELECT comment_post_ID FROM $tablecomments WHERE comment_ID = $comment");
|
|
$authordata = get_userdata($wpdb->get_var("SELECT post_author FROM $tableposts WHERE ID = $post_id"));
|
|
if (($user_level > $authordata->user_level) or ($user_login == $authordata->user_login)) {
|
|
$wpdb->query("DELETE FROM $tablecomments WHERE comment_ID = $comment");
|
|
++$i;
|
|
}
|
|
}
|
|
echo "<div class='wrap'><p>" . sprintf(__('%s comments deleted.'), $i) . "</p></div>";
|
|
}
|
|
|
|
if (isset($_GET['s'])) {
|
|
$s = $wpdb->escape($_GET['s']);
|
|
$comments = $wpdb->get_results("SELECT * FROM $tablecomments WHERE
|
|
comment_author LIKE '%$s%' OR
|
|
comment_author_email LIKE '%$s%' OR
|
|
comment_author_url LIKE ('%$s%') OR
|
|
comment_author_IP LIKE ('%$s%') OR
|
|
comment_content LIKE ('%$s%')
|
|
ORDER BY comment_date DESC");
|
|
} else {
|
|
$comments = $wpdb->get_results("SELECT * FROM $tablecomments ORDER BY comment_date DESC LIMIT 20");
|
|
}
|
|
if ('view' == $mode) {
|
|
if ($comments) {
|
|
echo '<ol>';
|
|
foreach ($comments as $comment) {
|
|
$authordata = get_userdata($wpdb->get_var("SELECT post_author FROM $tableposts WHERE ID = $comment->comment_post_ID"));
|
|
$comment_status = wp_get_comment_status($comment->comment_ID);
|
|
if ('unapproved' == $comment_status) {
|
|
echo '<li class="unapproved" style="border-bottom: 1px solid #ccc;">';
|
|
} else {
|
|
echo '<li style="border-bottom: 1px solid #ccc;">';
|
|
}
|
|
?>
|
|
<p><strong><?php _e('Name:') ?></strong> <?php comment_author() ?> <?php if ($comment->comment_author_email) { ?>| <strong><?php _e('Email:') ?></strong> <?php comment_author_email_link() ?> <?php } if ($comment->comment_author_email) { ?> | <strong><?php _e('URI:') ?></strong> <?php comment_author_url_link() ?> <?php } ?>| <strong><?php _e('IP:') ?></strong> <a href="http://ws.arin.net/cgi-bin/whois.pl?queryinput=<?php comment_author_IP() ?>"><?php comment_author_IP() ?></a></p>
|
|
|
|
<?php comment_text() ?>
|
|
|
|
<p><?php _e('Posted'); echo ' '; comment_date('M j, g:i A'); ?> | <?php
|
|
if (($user_level > $authordata->user_level) or ($user_login == $authordata->user_login)) {
|
|
echo "<a href=\"post.php?action=editcomment&comment=".$comment->comment_ID."\">" . __('Edit Comment') . "</a>";
|
|
echo " | <a href=\"post.php?action=deletecomment&p=".$comment->comment_post_ID."&comment=".$comment->comment_ID."\" onclick=\"return confirm('" . sprintf(__("You are about to delete this comment by \'%s\'\\n \'Cancel\' to stop, \'OK\' to delete."), $comment->comment_author) . "')\">" . __('Delete Comment') . "</a> — ";
|
|
} // end if any comments to show
|
|
// Get post title
|
|
$post_title = $wpdb->get_var("SELECT post_title FROM $tableposts WHERE ID = $comment->comment_post_ID");
|
|
$post_title = ('' == $post_title) ? "# $comment->comment_post_ID" : $post_title;
|
|
?> <a href="post.php?action=edit&post=<?php echo $comment->comment_post_ID; ?>"><?php printf(__('Edit Post “%s”'), stripslashes($post_title)); ?></a> | <a href="<?php echo get_permalink($comment->comment_post_ID); ?>"><?php _e('View Post') ?></a></p>
|
|
</li>
|
|
|
|
<?php
|
|
} // end foreach
|
|
echo '</ol>';
|
|
} else {
|
|
|
|
?>
|
|
<p>
|
|
<strong><?php _e('No comments found.') ?></strong></p>
|
|
|
|
<?php
|
|
} // end if ($comments)
|
|
} elseif ('edit' == $mode) {
|
|
|
|
if ($comments) {
|
|
echo '<form name="deletecomments" id="deletecomments" action="" method="post">
|
|
<table width="100%" cellpadding="3" cellspacing="3">
|
|
<tr>
|
|
<th scope="col">*</th>
|
|
<th scope="col">' . __('Name') . '</th>
|
|
<th scope="col">' . __('Email') . '</th>
|
|
<th scope="col">' . __('IP') . '</th>
|
|
<th scope="col">' . __('Comment Excerpt') . '</th>
|
|
<th scope="col" colspan="3">' . __('Actions') . '</th>
|
|
</tr>';
|
|
foreach ($comments as $comment) {
|
|
$authordata = get_userdata($wpdb->get_var("SELECT post_author FROM $tableposts WHERE ID = $comment->comment_post_ID"));
|
|
$bgcolor = ('#eee' == $bgcolor) ? 'none' : '#eee';
|
|
?>
|
|
<tr style='background-color: <?php echo $bgcolor; ?>'>
|
|
<td><?php if (($user_level > $authordata->user_level) or ($user_login == $authordata->user_login)) { ?><input type="checkbox" name="delete_comments[]" value="<?php echo $comment->comment_ID; ?>" /><?php } ?></td>
|
|
<td><?php comment_author_link() ?></td>
|
|
<td><?php comment_author_email_link() ?></td>
|
|
<td><a href="http://ws.arin.net/cgi-bin/whois.pl?queryinput=<?php comment_author_IP() ?>"><?php comment_author_IP() ?></a></td>
|
|
<td><?php comment_excerpt(); ?></td>
|
|
<td><a href="<?php echo get_permalink($comment->comment_post_ID); ?>#comment-<?php comment_ID() ?>" class="edit"><?php _e('View') ?></a></td>
|
|
<td><?php if (($user_level > $authordata->user_level) or ($user_login == $authordata->user_login)) {
|
|
echo "<a href='post.php?action=editcomment&comment=$comment->comment_ID' class='edit'>" . __('Edit') . "</a>"; } ?></td>
|
|
<td><?php if (($user_level > $authordata->user_level) or ($user_login == $authordata->user_login)) {
|
|
echo "<a href=\"post.php?action=deletecomment&p=".$comment->comment_post_ID."&comment=".$comment->comment_ID."\" onclick=\"return confirm('" . sprintf(__("You are about to delete this comment by \'%s\'\\n \'Cancel\' to stop, \'OK\' to delete."), $comment->comment_author) . "')\" class='delete'>" . __('Delete') . "</a>"; } ?></td>
|
|
</tr>
|
|
<?php
|
|
} // end foreach
|
|
?></table>
|
|
<p><a href="javascript:;" onclick="checkAll(document.getElementById('deletecomments')); return false; "><?php _e('Invert Checkbox Selection') ?></a></p>
|
|
<p style="text-align: right;"><input type="submit" name="Submit" value="<?php _e('Delete Checked Comments') ?>" onclick="return confirm('<?php _e("You are about to delete these comments permanently \\n \'Cancel\' to stop, \'OK\' to delete.") ?>')" /> </p>
|
|
</form>
|
|
<?php
|
|
} else {
|
|
?>
|
|
<p>
|
|
<strong><?php _e('No results found.') ?></strong>
|
|
</p>
|
|
<?php
|
|
} // end if ($comments)
|
|
}
|
|
?>
|
|
|
|
</div>
|
|
|
|
<?php
|
|
include('admin-footer.php');
|
|
?>
|