376 lines
14 KiB
PHP
376 lines
14 KiB
PHP
|
<?php
|
||
|
|
|
||
|
|
/**
|
||
|
|
* [Discuz!] (C)2001-2099 Comsenz Inc.
|
||
|
|
* This is NOT a freeware, use is subject to license terms
|
||
|
|
*
|
||
|
|
* $Id: admincp_comment.php 28774 2012-03-12 10:09:50Z chenmengshu $
|
||
|
|
*/
|
||
|
|
|
||
|
|
if(!defined('IN_DISCUZ') || !defined('IN_ADMINCP')) {
|
||
|
|
exit('Access Denied');
|
||
|
|
}
|
||
|
|
|
||
|
|
$detail = $_GET['detail'];
|
||
|
|
$idtype = $_GET['idtype'];
|
||
|
|
$id = $_GET['id'];
|
||
|
|
$author = $_GET['author'];
|
||
|
|
$authorid = $_GET['authorid'];
|
||
|
|
$uid = $_GET['uid'];
|
||
|
|
$message = $_GET['message'];
|
||
|
|
$ip = $_GET['ip'];
|
||
|
|
$users = $_GET['users'];
|
||
|
|
$starttime = $_GET['starttime'];
|
||
|
|
$endtime = $_GET['endtime'];
|
||
|
|
$searchsubmit = $_GET['searchsubmit'];
|
||
|
|
$cids = $_GET['cids'];
|
||
|
|
$page = max(1, $_GET['page']);
|
||
|
|
|
||
|
|
$fromumanage = $_GET['fromumanage'] ? 1 : 0;
|
||
|
|
|
||
|
|
cpheader();
|
||
|
|
if(empty($operation)) {
|
||
|
|
if(!submitcheck('commentsubmit')) {
|
||
|
|
|
||
|
|
if($fromumanage) {
|
||
|
|
$starttime = !preg_match("/^(0|\d{4}\-\d{1,2}\-\d{1,2})$/", $starttime) ? '' : $starttime;
|
||
|
|
$endtime = $_G['adminid'] == 3 || !preg_match("/^(0|\d{4}\-\d{1,2}\-\d{1,2})$/", $endtime) ? '' : $endtime;
|
||
|
|
} else {
|
||
|
|
$starttime = !preg_match("/^(0|\d{4}\-\d{1,2}\-\d{1,2})$/", $starttime) ? dgmdate(TIMESTAMP - 86400 * 7, 'Y-n-j') : $starttime;
|
||
|
|
$endtime = $_G['adminid'] == 3 || !preg_match("/^(0|\d{4}\-\d{1,2}\-\d{1,2})$/", $endtime) ? dgmdate(TIMESTAMP, 'Y-n-j') : $endtime;
|
||
|
|
}
|
||
|
|
|
||
|
|
shownav('topic', 'nav_comment');
|
||
|
|
showsubmenu('nav_comment', array(
|
||
|
|
array('comment_comment', 'comment', 1),
|
||
|
|
array('comment_article_comment', 'comment&operation=article', 0),
|
||
|
|
array('comment_topic_comment', 'comment&operation=topic', 0)
|
||
|
|
));
|
||
|
|
showtips('comment_tips');
|
||
|
|
echo <<<EOT
|
||
|
|
<script type="text/javascript" src="static/js/calendar.js"></script>
|
||
|
|
<script type="text/JavaScript">
|
||
|
|
function page(number) {
|
||
|
|
$('commentforum').page.value=number;
|
||
|
|
$('commentforum').searchsubmit.click();
|
||
|
|
}
|
||
|
|
</script>
|
||
|
|
EOT;
|
||
|
|
showtagheader('div', 'searchposts', !$searchsubmit);
|
||
|
|
showformheader("comment", '', 'commentforum');
|
||
|
|
showhiddenfields(array('page' => $page, 'pp' => $_GET['pp'] ? $_GET['pp'] : $_GET['perpage']));
|
||
|
|
showtableheader();
|
||
|
|
showsetting('comment_search_detail', 'detail', $detail, 'radio');
|
||
|
|
showsetting('comment_search_perpage', '', $_GET['perpage'], "<select name='perpage'><option value='20'>$lang[perpage_20]</option><option value='50'>$lang[perpage_50]</option><option value='100'>$lang[perpage_100]</option></select>");
|
||
|
|
showsetting('comment_idtype', array('idtype', array(
|
||
|
|
array('', $lang['all']),
|
||
|
|
array('uid', $lang['comment_uid']),
|
||
|
|
array('blogid', $lang['comment_blogid']),
|
||
|
|
array('picid', $lang['comment_picid']),
|
||
|
|
array('sid', $lang['comment_sid']),
|
||
|
|
)), 'comment_idtype', 'select');
|
||
|
|
showsetting('comment_search_id', 'id', $id, 'text');
|
||
|
|
showsetting('comment_search_author', 'author', $author, 'text');
|
||
|
|
showsetting('comment_search_authorid', 'authorid', $authorid, 'text');
|
||
|
|
showsetting('comment_search_uid', 'uid', $uid, 'text');
|
||
|
|
showsetting('comment_search_message', 'message', $message, 'text');
|
||
|
|
showsetting('comment_search_ip', 'ip', $ip, 'text');
|
||
|
|
showsetting('comment_search_time', array('starttime', 'endtime'), array($starttime, $endtime), 'daterange');
|
||
|
|
echo '<input type="hidden" name="fromumanage" value="'.$fromumanage.'">';
|
||
|
|
showsubmit('searchsubmit');
|
||
|
|
showtablefooter();
|
||
|
|
showformfooter();
|
||
|
|
showtagfooter('div');
|
||
|
|
|
||
|
|
} else {
|
||
|
|
$cids = authcode($cids, 'DECODE');
|
||
|
|
$cidsadd = $cids ? explode(',', $cids) : $_GET['delete'];
|
||
|
|
include_once libfile('function/delete');
|
||
|
|
$deletecount = count(deletecomments($cidsadd));
|
||
|
|
$cpmsg = cplang('comment_succeed', array('deletecount' => $deletecount));
|
||
|
|
|
||
|
|
?>
|
||
|
|
<script type="text/JavaScript">alert('<?php echo $cpmsg;?>');parent.$('commentforum').searchsubmit.click();</script>
|
||
|
|
<?php
|
||
|
|
|
||
|
|
}
|
||
|
|
|
||
|
|
if(submitcheck('searchsubmit', 1)) {
|
||
|
|
|
||
|
|
$comments = $commentcount = '0';
|
||
|
|
$sql = $error = '';
|
||
|
|
$authorids = array();
|
||
|
|
$author = trim($author);
|
||
|
|
|
||
|
|
if($id !='') {
|
||
|
|
$id = explode(',', $id);
|
||
|
|
}
|
||
|
|
|
||
|
|
if($author != '') {
|
||
|
|
$authorids = C::t('common_member')->fetch_all_uid_by_username(array_map('trim', explode(',', $author)));
|
||
|
|
if (!$authorids) {
|
||
|
|
$authorids = array(-1);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
$authorid = trim($authorid, ', ');
|
||
|
|
if($authorid != '') {
|
||
|
|
if (!$authorids) {
|
||
|
|
$authorids = explode(',', $authorid);
|
||
|
|
} else {
|
||
|
|
$authorids = array_intersect($authorids, explode(',', $authorid));
|
||
|
|
}
|
||
|
|
if (!$authorids) {
|
||
|
|
$authorids = array(-1);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
if($_G['adminid'] == 1 && $endtime != dgmdate(TIMESTAMP, 'Y-n-j')) {
|
||
|
|
if($endtime != '') {
|
||
|
|
$endtime = strtotime($endtime);
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
$endtime = TIMESTAMP;
|
||
|
|
}
|
||
|
|
|
||
|
|
if(($_G['adminid'] == 2 && $endtime - $starttime > 86400 * 16) || ($_G['adminid'] == 3 && $endtime - $starttime > 86400 * 8)) {
|
||
|
|
$error = 'comment_mod_range_illegal';
|
||
|
|
}
|
||
|
|
|
||
|
|
$uid = trim($uid, ', ');
|
||
|
|
if($uid !='') {
|
||
|
|
$uid = explode(',', $uid);
|
||
|
|
}
|
||
|
|
|
||
|
|
if(!$error) {
|
||
|
|
if($commentcount = C::t('home_comment')->fetch_all_search(3, $id, $authorids, $uid, $ip, $message, $idtype, $starttime, $endtime)) {
|
||
|
|
if($detail) {
|
||
|
|
$_GET['perpage'] = intval($_GET['perpage']) < 1 ? 20 : intval($_GET['perpage']);
|
||
|
|
$perpage = $_GET['pp'] ? $_GET['pp'] : $_GET['perpage'];
|
||
|
|
$query = C::t('home_comment')->fetch_all_search(1, $id, $authorids, $uid, $ip, $message, $idtype, $starttime, $endtime, (($page - 1) * $perpage), $perpage);
|
||
|
|
$comments = '';
|
||
|
|
|
||
|
|
foreach ($query as $comment) {
|
||
|
|
$comment['dateline'] = dgmdate($comment['dateline']);
|
||
|
|
switch($comment['idtype']) {
|
||
|
|
case 'picid':
|
||
|
|
$address = "<a href=\"home.php?mod=space&uid=$comment[uid]&do=album&picid=$comment[id]\" target=\"_blank\">$comment[message]</a>";
|
||
|
|
break;
|
||
|
|
case 'uid':
|
||
|
|
$address = "<a href=\"home.php?mod=space&uid=$comment[uid]&do=wall\" target=\"_blank\">$comment[message]</a>";
|
||
|
|
break;
|
||
|
|
case 'sid':
|
||
|
|
$address = "<a href=\"home.php?mod=space&uid=1&do=share&id=$comment[id]\" target=\"_blank\">$comment[message]</a>";
|
||
|
|
break;
|
||
|
|
case 'blogid':
|
||
|
|
$address = "<a href=\"home.php?mod=space&uid=$comment[uid]&do=blog&id=$comment[id]\" target=\"_blank\">$comment[message]</a>";
|
||
|
|
break;
|
||
|
|
}
|
||
|
|
$comments .= showtablerow('', '', array(
|
||
|
|
"<input class=\"checkbox\" type=\"checkbox\" name=\"delete[]\" value=\"$comment[cid]\" />",
|
||
|
|
$address,
|
||
|
|
"<a href=\"home.php?mod=space&uid=$comment[uid]\" target=\"_blank\">$comment[author]</a>",
|
||
|
|
$comment['ip'],
|
||
|
|
$comment['idtype'],
|
||
|
|
$comment['dateline']
|
||
|
|
), TRUE);
|
||
|
|
}
|
||
|
|
$multi = multi($commentcount, $perpage, $page, ADMINSCRIPT."?action=comment");
|
||
|
|
$multi = preg_replace("/href=\"".ADMINSCRIPT."\?action=comment&page=(\d+)\"/", "href=\"javascript:page(\\1)\"", $multi);
|
||
|
|
$multi = str_replace("window.location='".ADMINSCRIPT."?action=comment&page='+this.value", "page(this.value)", $multi);
|
||
|
|
} else {
|
||
|
|
$query = C::t('home_comment')->fetch_all_search(2, $id, $authorids, $uid, $ip, $message, $idtype, $starttime, $endtime);
|
||
|
|
foreach ($query as $comment) {
|
||
|
|
$cids .= ','.$comment['cid'];
|
||
|
|
}
|
||
|
|
}
|
||
|
|
} else
|
||
|
|
$error = 'comment_post_nonexistence';
|
||
|
|
}
|
||
|
|
|
||
|
|
showtagheader('div', 'postlist', $searchsubmit);
|
||
|
|
showformheader('comment&frame=no', 'target="commentframe"');
|
||
|
|
showhiddenfields(array('cids' => authcode($cids, 'ENCODE')));
|
||
|
|
showtableheader(cplang('comment_result').' '.$commentcount.' <a href="###" onclick="$(\'searchposts\').style.display=\'\';$(\'postlist\').style.display=\'none\';$(\'commentforum\').pp.value=\'\';$(\'commentforum\').page.value=\'\';" class="act lightlink normal">'.cplang('research').'</a>', 'fixpadding');
|
||
|
|
|
||
|
|
if($error) {
|
||
|
|
echo "<tr><td class=\"lineheight\" colspan=\"15\">$lang[$error]</td></tr>";
|
||
|
|
} else {
|
||
|
|
if($detail) {
|
||
|
|
showsubtitle(array('', 'message', 'author', 'ip', 'comment_idtype', 'time'));
|
||
|
|
echo $comments;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
showsubmit('commentsubmit', 'delete', $detail ? 'del' : '', '', $multi);
|
||
|
|
showtablefooter();
|
||
|
|
showformfooter();
|
||
|
|
echo '<iframe name="commentframe" style="display:none"></iframe>';
|
||
|
|
showtagfooter('div');
|
||
|
|
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
if($operation == 'article' || $operation == 'topic') {
|
||
|
|
|
||
|
|
$aid = $_GET['aid'];
|
||
|
|
$subject = $_GET['subject'];
|
||
|
|
$idtype = $operation == 'article' ? 'aid' : 'topicid';
|
||
|
|
$tablename = $idtype == 'aid' ? 'portal_article_title' : 'portal_topic';
|
||
|
|
|
||
|
|
if(!submitcheck('articlesubmit')) {
|
||
|
|
|
||
|
|
$starttime = !preg_match("/^(0|\d{4}\-\d{1,2}\-\d{1,2})$/", $starttime) ? dgmdate(TIMESTAMP - 86400 * 7, 'Y-n-j') : $starttime;
|
||
|
|
$endtime = $_G['adminid'] == 3 || !preg_match("/^(0|\d{4}\-\d{1,2}\-\d{1,2})$/", $endtime) ? dgmdate(TIMESTAMP, 'Y-n-j') : $endtime;
|
||
|
|
|
||
|
|
shownav('topic', 'nav_comment');
|
||
|
|
showsubmenu('nav_comment', array(
|
||
|
|
array('comment_comment', 'comment', 0),
|
||
|
|
array('comment_article_comment', 'comment&operation=article', $operation == 'article' ? 1 : 0),
|
||
|
|
array('comment_topic_comment', 'comment&operation=topic', $operation == 'topic' ? 1 : 0)
|
||
|
|
));
|
||
|
|
showtips('comment_'.$operation.'_tips');
|
||
|
|
echo <<<EOT
|
||
|
|
<script type="text/javascript" src="static/js/calendar.js"></script>
|
||
|
|
<script type="text/JavaScript">
|
||
|
|
function page(number) {
|
||
|
|
$('articleforum').page.value=number;
|
||
|
|
$('articleforum').searchsubmit.click();
|
||
|
|
}
|
||
|
|
</script>
|
||
|
|
EOT;
|
||
|
|
showtagheader('div', 'searchposts', !$searchsubmit);
|
||
|
|
showformheader("comment&operation=$operation", '', 'articleforum');
|
||
|
|
showhiddenfields(array('page' => $page, 'pp' => $_GET['pp'] ? $_GET['pp'] : $_GET['perpage']));
|
||
|
|
showtableheader();
|
||
|
|
showsetting('comment_search_perpage', '', $_GET['perpage'], "<select name='perpage'><option value='20'>$lang[perpage_20]</option><option value='50'>$lang[perpage_50]</option><option value='100'>$lang[perpage_100]</option></select>");
|
||
|
|
showsetting("comment_{$operation}_subject", 'subject', $subject, 'text');
|
||
|
|
showsetting("comment_{$operation}_id", 'aid', $aid, 'text');
|
||
|
|
showsetting('comment_search_message', 'message', $message, 'text');
|
||
|
|
showsetting('comment_search_author', 'author', $author, 'text');
|
||
|
|
showsetting('comment_search_authorid', 'authorid', $authorid, 'text');
|
||
|
|
showsetting('comment_search_time', array('starttime', 'endtime'), array($starttime, $endtime), 'daterange');
|
||
|
|
showsubmit('searchsubmit');
|
||
|
|
showtablefooter();
|
||
|
|
showformfooter();
|
||
|
|
showtagfooter('div');
|
||
|
|
|
||
|
|
} else {
|
||
|
|
|
||
|
|
|
||
|
|
$commentnum = array();
|
||
|
|
foreach(C::t('portal_comment')->fetch_all($_GET['delete']) as $value) {
|
||
|
|
$commentnum[$value['idtype']][$value['id']] = $value['id'];
|
||
|
|
}
|
||
|
|
if($commentnum['aid']) {
|
||
|
|
C::t('portal_article_count')->increase($commentnum['aid'], array('commentnum' => -1));
|
||
|
|
} elseif($commentnum['topicid']) {
|
||
|
|
C::t('portal_topic')->increase($commentnum['topicid'], array('commentnum' => -1));
|
||
|
|
}
|
||
|
|
C::t('portal_comment')->delete($_GET['delete']);
|
||
|
|
$cpmsg = cplang('comment_article_delete');
|
||
|
|
|
||
|
|
?>
|
||
|
|
<script type="text/JavaScript">alert('<?php echo $cpmsg;?>');parent.$('articleforum').searchsubmit.click();</script>
|
||
|
|
<?php
|
||
|
|
}
|
||
|
|
|
||
|
|
if(submitcheck('searchsubmit')) {
|
||
|
|
|
||
|
|
$comments = $commentcount = '0';
|
||
|
|
$sql = $error = '';
|
||
|
|
$author = trim($author);
|
||
|
|
|
||
|
|
$queryAId = $aid ? array($aid) : array();
|
||
|
|
|
||
|
|
if($subject != '') {
|
||
|
|
|
||
|
|
$ids = array();
|
||
|
|
$query = C::t($tablename)->fetch_all_by_title($idtype, $subject);
|
||
|
|
foreach($query as $value) {
|
||
|
|
$ids[] = intval($value[$idtype]);
|
||
|
|
}
|
||
|
|
$queryAId = array_merge($queryAId, $ids);
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
$queryAuthorIDs = $authorid ? array($authorid) : array();
|
||
|
|
|
||
|
|
if($author != '') {
|
||
|
|
$authorids = C::t('common_member')->fetch_all_uid_by_username(array_map('trim', explode(',', $author)));
|
||
|
|
$queryAuthorIDs = array_merge($queryAuthorIDs, $authorids);
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
if($starttime != '0') {
|
||
|
|
$starttime = strtotime($starttime);
|
||
|
|
}
|
||
|
|
|
||
|
|
$sqlendtime = '';
|
||
|
|
|
||
|
|
if($_G['adminid'] == 1 && $endtime != dgmdate(TIMESTAMP, 'Y-n-j')) {
|
||
|
|
if($endtime != '0') {
|
||
|
|
$sqlendtime = $endtime = strtotime($endtime);
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
$endtime = TIMESTAMP;
|
||
|
|
}
|
||
|
|
|
||
|
|
if(($_G['adminid'] == 2 && $endtime - $starttime > 86400 * 16) || ($_G['adminid'] == 3 && $endtime - $starttime > 86400 * 8)) {
|
||
|
|
$error = 'comment_mod_range_illegal';
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
if(!$error) {
|
||
|
|
|
||
|
|
$commentcount = C::t('portal_comment')->count_all_by_search($queryAId, $queryAuthorIDs, $starttime, $sqlendtime, $idtype, $message);
|
||
|
|
if($commentcount) {
|
||
|
|
$_GET['perpage'] = intval($_GET['perpage']) < 1 ? 20 : intval($_GET['perpage']);
|
||
|
|
$perpage = $_GET['pp'] ? $_GET['pp'] : $_GET['perpage'];
|
||
|
|
$query = C::t('portal_comment')->fetch_all_by_search($queryAId, $queryAuthorIDs, $starttime, $sqlendtime, $idtype, $message, (($page - 1) * $perpage), $perpage);
|
||
|
|
|
||
|
|
$comments = '';
|
||
|
|
|
||
|
|
$mod = $idtype == 'aid' ? 'view' : 'topic';
|
||
|
|
foreach($query as $comment) {
|
||
|
|
$comment['dateline'] = dgmdate($comment['dateline']);
|
||
|
|
$comments .= showtablerow('', '', array(
|
||
|
|
"<input class=\"checkbox\" type=\"checkbox\" name=\"delete[]\" value=\"$comment[cid]\" />",
|
||
|
|
"<a href=\"portal.php?mod=$mod&$idtype=$comment[id]\" target=\"_blank\">$comment[title]</a>",
|
||
|
|
$comment[message],
|
||
|
|
"<a href=\"home.php?mod=space&uid=$comment[uid]\" target=\"_blank\">$comment[username]</a>",
|
||
|
|
$comment['dateline']
|
||
|
|
), TRUE);
|
||
|
|
}
|
||
|
|
|
||
|
|
$multi = multi($commentcount, $perpage, $page, ADMINSCRIPT."?action=comment&operation=$operation");
|
||
|
|
$multi = preg_replace("/href=\"".ADMINSCRIPT."\?action=comment&operation=$operation&page=(\d+)\"/", "href=\"javascript:page(\\1)\"", $multi);
|
||
|
|
$multi = str_replace("window.location='".ADMINSCRIPT."?action=comment&operation=$operation&page='+this.value", "page(this.value)", $multi);
|
||
|
|
|
||
|
|
} else {
|
||
|
|
$error = 'comment_post_nonexistence';
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
showtagheader('div', 'postlist', $searchsubmit);
|
||
|
|
showformheader('comment&operation='.$operation.'&frame=no', 'target="articleframe"');
|
||
|
|
showtableheader(cplang('comment_result').' '.$commentcount.' <a href="###" onclick="$(\'searchposts\').style.display=\'\';$(\'postlist\').style.display=\'none\';$(\'articleforum\').pp.value=\'\';$(\'articleforum\').page.value=\'\';" class="act lightlink normal">'.cplang('research').'</a>', 'fixpadding');
|
||
|
|
|
||
|
|
if($error) {
|
||
|
|
echo "<tr><td class=\"lineheight\" colspan=\"15\">$lang[$error]</td></tr>";
|
||
|
|
} else {
|
||
|
|
showsubtitle(array('', 'article_title', 'message', 'author', 'time'));
|
||
|
|
echo $comments;
|
||
|
|
}
|
||
|
|
|
||
|
|
showsubmit('articlesubmit', 'delete', 'del', '', $multi);
|
||
|
|
showtablefooter();
|
||
|
|
showformfooter();
|
||
|
|
echo '<iframe name="articleframe" style="display:none"></iframe>';
|
||
|
|
showtagfooter('div');
|
||
|
|
|
||
|
|
}
|
||
|
|
}
|
||
|
|
?>
|