'p.poster_ip', 'FROM' => 'posts AS p', 'WHERE' => 'p.id='.$get_host ); ($hook = get_hook('mr_qr_get_poster_ip')) ? eval($hook) : null; $result = $pun_db->query_build($query) or error(__FILE__, __LINE__); if (!$pun_db->num_rows($result)) message($lang_common['Bad request']); $ip = $pun_db->result($result); } message(sprintf($lang_misc['Hostname lookup'], $ip, @gethostbyaddr($ip), ''.$lang_misc['Show more users'].'')); } // All other functions require moderator/admin access $fid = isset($_GET['fid']) ? intval($_GET['fid']) : 0; if ($fid < 1) message($lang_common['Bad request']); // Get some info about the forum we're moderating $query = array( 'SELECT' => 'f.forum_name, f.redirect_url, f.num_topics, f.moderators', 'FROM' => 'forums AS f', 'JOINS' => array( array( 'LEFT JOIN' => 'forum_perms AS fp', 'ON' => '(fp.forum_id=f.id AND fp.group_id='.$pun_user['g_id'].')' ) ), 'WHERE' => '(fp.read_forum IS NULL OR fp.read_forum=1) AND f.id='.$fid ); ($hook = get_hook('mr_qr_get_forum_data')) ? eval($hook) : null; $result = $pun_db->query_build($query) or error(__FILE__, __LINE__); if (!$pun_db->num_rows($result)) message($lang_common['Bad request']); $cur_forum = $pun_db->fetch_assoc($result); // Make sure we're not trying to moderate a redirect forum if ($cur_forum['redirect_url'] != '') message($lang_common['Bad request']); // Setup the array of moderators $mods_array = ($cur_forum['moderators'] != '') ? unserialize($cur_forum['moderators']) : array(); if ($pun_user['g_id'] != PUN_ADMIN && ($pun_user['g_moderator'] != '1' || !array_key_exists($pun_user['username'], $mods_array))) message($lang_common['No permission']); // Get topic/forum tracking data if (!$pun_user['is_guest']) $tracked_topics = get_tracked_topics(); // Did someone click a cancel button? if (isset($_POST['cancel'])) redirect(pun_link($pun_url['forum'], array($fid, sef_friendly($cur_forum['forum_name']))), $lang_common['Cancel redirect']); // All other topic moderation features require a topic id in GET if (isset($_GET['tid'])) { ($hook = get_hook('mr_post_actions_selected')) ? eval($hook) : null; $tid = intval($_GET['tid']); if ($tid < 1) message($lang_common['Bad request']); // Fetch some info about the topic $query = array( 'SELECT' => 't.subject, t.poster, t.first_post_id, t.posted, t.num_replies', 'FROM' => 'topics AS t', 'WHERE' => 't.id='.$tid.' AND t.moved_to IS NULL' ); ($hook = get_hook('mr_qr_get_topic_info')) ? eval($hook) : null; $result = $pun_db->query_build($query) or error(__FILE__, __LINE__); if (!$pun_db->num_rows($result)) message($lang_common['Bad request']); $cur_topic = $pun_db->fetch_assoc($result); // User pressed the cancel button if (isset($_POST['delete_posts_cancel'])) redirect(pun_link($pun_url['topic'], array($tid, sef_friendly($cur_topic['subject']))), $lang_common['Cancel redirect']); // Delete one or more posts if (isset($_POST['delete_posts']) || isset($_POST['delete_posts_comply'])) { ($hook = get_hook('mr_delete_posts_form_submitted')) ? eval($hook) : null; $posts = $_POST['posts']; if (empty($posts)) message($lang_misc['No posts selected']); if (isset($_POST['delete_posts_comply'])) { if (!isset($_POST['req_confirm'])) redirect(pun_link($pun_url['topic'], array($tid, sef_friendly($cur_topic['subject']))), $lang_common['No confirm redirect']); ($hook = get_hook('mr_confirm_delete_posts_form_submitted')) ? eval($hook) : null; if (@preg_match('/[^0-9,]/', $posts)) message($lang_common['Bad request']); // Verify that the post IDs are valid $query = array( 'SELECT' => 'COUNT(p.id)', 'FROM' => 'posts AS p', 'WHERE' => 'p.id IN('.$posts.') AND p.id!='.$cur_topic['first_post_id'].' AND p.topic_id='.$tid ); ($hook = get_hook('mr_qr_verify_post_ids')) ? eval($hook) : null; $result = $pun_db->query_build($query) or error(__FILE__, __LINE__); if ($pun_db->result($result) != substr_count($posts, ',') + 1) message($lang_common['Bad request']); // Delete the posts $query = array( 'DELETE' => 'posts', 'WHERE' => 'id IN('.$posts.')' ); ($hook = get_hook('mr_qr_delete_posts')) ? eval($hook) : null; $pun_db->query_build($query) or error(__FILE__, __LINE__); if ($db_type != 'mysql' && $db_type != 'mysqli') { require PUN_ROOT.'include/search_idx.php'; strip_search_index($posts); } // Get last_post, last_post_id, and last_poster for the topic after deletion $query = array( 'SELECT' => 'p.id, p.poster, p.posted', 'FROM' => 'posts AS p', 'WHERE' => 'p.topic_id='.$tid, 'ORDER BY' => 'p.id', 'LIMIT' => '1' ); ($hook = get_hook('mr_qr_get_topic_last_post_data')) ? eval($hook) : null; $result = $pun_db->query_build($query) or error(__FILE__, __LINE__); $last_post = $pun_db->fetch_assoc($result); // How many posts did we just delete? $num_posts_deleted = substr_count($posts, ',') + 1; // Update the topic $query = array( 'UPDATE' => 'topics', 'SET' => 'last_post='.$last_post['posted'].', last_post_id='.$last_post['id'].', last_poster=\''.$pun_db->escape($last_post['poster']).'\', num_replies=num_replies-'.$num_posts_deleted, 'WHERE' => 'id='.$tid ); ($hook = get_hook('mr_qr_update_topic')) ? eval($hook) : null; $pun_db->query_build($query) or error(__FILE__, __LINE__); sync_forum($fid); redirect(pun_link($pun_url['topic'], array($tid, sef_friendly($cur_topic['subject']))), $lang_misc['Delete posts redirect']); } // Setup form $pun_page['set_count'] = $pun_page['fld_count'] = 0; $pun_page['form_action'] = pun_link($pun_url['delete_multiple'], array($fid, $tid)); $pun_page['hidden_fields'] = array( '', '' ); // Setup breadcrumbs $pun_page['crumbs'] = array( array($pun_config['o_board_title'], pun_link($pun_url['index'])), array($cur_forum['forum_name'], pun_link($pun_url['forum'], array($fid, sef_friendly($cur_forum['forum_name'])))), array($cur_topic['subject'], pun_link($pun_url['topic'], array($tid, sef_friendly($cur_topic['subject'])))), $lang_misc['Delete posts'] ); ($hook = get_hook('mr_confirm_delete_posts_pre_header_load')) ? eval($hook) : null; define('PUN_PAGE', 'dialogue'); require PUN_ROOT.'header.php'; ?>

$pun_page['num_pages']) ? 1 : $_GET['p']; $pun_page['start_from'] = $pun_user['disp_posts'] * ($pun_page['page'] - 1); $pun_page['finish_at'] = min(($pun_page['start_from'] + $pun_user['disp_posts']), ($cur_topic['num_replies'] + 1)); // Generate paging links $pun_page['page_post'] = '

'.$lang_common['Pages'].' '.paginate($pun_page['num_pages'], $pun_page['page'], $pun_url['delete_multiple'], $lang_common['Paging separator'], array($fid, $tid)).'

'; // Navigation links for header and page numbering for title/meta description if ($pun_page['page'] < $pun_page['num_pages']) { $pun_page['nav'][] = ''; $pun_page['nav'][] = ''; } if ($pun_page['page'] > 1) { $pun_page['nav'][] = ''; $pun_page['nav'][] = ''; } // Generate page information if ($pun_page['num_pages'] > 1) $pun_page['main_info'] = ''.sprintf($lang_common['Page number'], $pun_page['page'], $pun_page['num_pages']).' '.sprintf($lang_common['Paged info'], $lang_common['Posts'], $pun_page['start_from'] + 1, $pun_page['finish_at'], $cur_topic['num_replies'] + 1); else $pun_page['main_info'] = sprintf($lang_common['Page info'], $lang_common['Posts'], ($cur_topic['num_replies'] + 1)); if ($pun_config['o_censoring'] == '1') $cur_topic['subject'] = censor_words($cur_topic['subject']); // Setup form $pun_page['form_action'] = pun_link($pun_url['delete_multiple'], array($fid, $tid)); // Setup breadcrumbs $pun_page['crumbs'] = array( array($pun_config['o_board_title'], pun_link($pun_url['index'])), array($cur_forum['forum_name'], pun_link($pun_url['forum'], array($fid, sef_friendly($cur_forum['forum_name'])))), array($cur_topic['subject'], pun_link($pun_url['topic'], array($tid, sef_friendly($cur_topic['subject'])))), $lang_topic['Delete posts'] ); ($hook = get_hook('mr_post_actions_pre_header_load')) ? eval($hook) : null; define('PUN_PAGE', 'modtopic'); require PUN_ROOT.'header.php'; ?>

'u.title, u.num_posts, g.g_id, g.g_user_title, p.id, p.poster, p.poster_id, p.message, p.hide_smilies, p.posted, p.edited, p.edited_by', 'FROM' => 'posts AS p', 'JOINS' => array( array( 'INNER JOIN' => 'users AS u', 'ON' => 'u.id=p.poster_id' ), array( 'INNER JOIN' => 'groups AS g', 'ON' => 'g.g_id=u.group_id' ) ), 'WHERE' => 'p.topic_id='.$tid, 'ORDER BY' => 'p.id', 'LIMIT' => $pun_page['start_from'].','.$pun_user['disp_posts'] ); ($hook = get_hook('mr_qr_get_posts')) ? eval($hook) : null; $result = $pun_db->query_build($query) or error(__FILE__, __LINE__); while ($cur_post = $pun_db->fetch_assoc($result)) { ++$pun_page['item_count']; $pun_page['post_options'] = $pun_page['message'] = array(); $pun_page['user_ident'] = ''; $pun_page['user_info'] = ''; $cur_post['username'] = $cur_post['poster']; // Generate the post heading $pun_page['item_ident'] = array( 'num' => ''.($pun_page['start_from'] + $pun_page['item_count']).'', 'user' => ''.($cur_topic['posted'] == $cur_post['posted'] ? sprintf($lang_topic['Topic by'], pun_htmlencode($cur_post['username'])) : sprintf($lang_topic['Reply by'], pun_htmlencode($cur_post['username']))).'', 'date' => ''.format_time($cur_post['posted']).'' ); $pun_page['item_head'] = ''; // Generate the checkbox field if ($cur_post['id'] != $cur_topic['first_post_id']) $pun_page['item_select'] = '
'; // Generate author identification $pun_page['user_ident'] = (($cur_post['poster_id'] > 1) ? ''.pun_htmlencode($cur_post['username']).'' : ''.pun_htmlencode($cur_post['username']).''); $pun_page['user_info'] = '
  • '.$lang_topic['Title'].' '.get_title($cur_post).'
    • '; // Give the post some class $pun_page['item_status'] = array( 'post', ($pun_page['item_count'] % 2 == 0) ? 'odd' : 'even' ); if ($pun_page['item_count'] == 1) $pun_page['item_status'][] = 'firstpost'; if (($pun_page['start_from'] + $pun_page['item_count']) == $pun_page['finish_at']) $pun_page['item_status'][] = 'lastpost'; if ($cur_post['id'] == $cur_topic['first_post_id']) $pun_page['item_status'][] = 'topicpost'; if ($cur_post['id'] == $cur_topic['first_post_id']) $pun_page['item_subject'] = $lang_common['Topic'].': '.$cur_topic['subject']; else $pun_page['item_subject'] = $lang_common['Re'].' '.$cur_topic['subject']; // Perform the main parsing of the message (BBCode, smilies, censor words etc) $pun_page['message'][] = parse_message($cur_post['message'], $cur_post['hide_smilies']); if ($cur_post['edited'] != '') $pun_page['message'][] = '

    '.sprintf($lang_topic['Last edited'], pun_htmlencode($cur_post['edited_by']), format_time($cur_post['edited'])).'

    '; ($hook = get_hook('mr_post_actions_row_pre_display')) ? eval($hook) : null; ?>

    />

    'f.forum_name', 'FROM' => 'forums AS f', 'WHERE' => 'f.id='.$move_to_forum ); ($hook = get_hook('mr_qr_get_move_to_forum_name')) ? eval($hook) : null; $result = $pun_db->query_build($query) or error(__FILE__, __LINE__); if (!$pun_db->num_rows($result)) message($lang_common['Bad request']); $move_to_forum_name = $pun_db->result($result); // Verify that the topic IDs are valid $query = array( 'SELECT' => 'COUNT(t.id)', 'FROM' => 'topics AS t', 'WHERE' => 't.id IN('.implode(',', $topics).') AND t.forum_id='.$fid ); ($hook = get_hook('mr_qr_verify_topic_ids')) ? eval($hook) : null; $result = $pun_db->query_build($query) or error(__FILE__, __LINE__); if ($pun_db->result($result) != count($topics)) message($lang_common['Bad request']); // Delete any redirect topics if there are any (only if we moved/copied the topic back to where it where it was once moved from) $query = array( 'DELETE' => 'topics', 'WHERE' => 'forum_id='.$move_to_forum.' AND moved_to IN('.implode(',', $topics).')' ); ($hook = get_hook('mr_qr_delete_redirect_topics')) ? eval($hook) : null; $pun_db->query_build($query) or error(__FILE__, __LINE__); // Move the topic(s) $query = array( 'UPDATE' => 'topics', 'SET' => 'forum_id='.$move_to_forum, 'WHERE' => 'id IN('.implode(',', $topics).')' ); ($hook = get_hook('mr_qr_move_topics')) ? eval($hook) : null; $pun_db->query_build($query) or error(__FILE__, __LINE__); // Should we create redirect topics? if (isset($_POST['with_redirect'])) { while (list(, $cur_topic) = @each($topics)) { // Fetch info for the redirect topic $query = array( 'SELECT' => 't.poster, t.subject, t.posted, t.last_post', 'FROM' => 'topics AS t', 'WHERE' => 't.id='.$cur_topic ); ($hook = get_hook('mr_qr_get_redirect_topic_data')) ? eval($hook) : null; $result = $pun_db->query_build($query) or error(__FILE__, __LINE__); $moved_to = $pun_db->fetch_assoc($result); // Create the redirect topic $query = array( 'INSERT' => 'poster, subject, posted, last_post, moved_to, forum_id', 'INTO' => 'topics', 'VALUES' => '\''.$pun_db->escape($moved_to['poster']).'\', \''.$pun_db->escape($moved_to['subject']).'\', '.$moved_to['posted'].', '.$moved_to['last_post'].', '.$cur_topic.', '.$fid ); ($hook = get_hook('mr_qr_add_redirect_topic')) ? eval($hook) : null; $pun_db->query_build($query) or error(__FILE__, __LINE__); } } sync_forum($fid); // Synchronize the forum FROM which the topic was moved sync_forum($move_to_forum); // Synchronize the forum TO which the topic was moved $pun_page['redirect_msg'] = (count($topics) > 1) ? $lang_misc['Move topics redirect'] : $lang_misc['Move topic redirect']; redirect(pun_link($pun_url['forum'], array($move_to_forum, sef_friendly($move_to_forum_name))), $pun_page['redirect_msg']); } if (isset($_POST['move_topics'])) { $topics = isset($_POST['topics']) ? $_POST['topics'] : array(); if (empty($topics)) message($lang_misc['No topics selected']); $topics = implode(',', array_keys($topics)); $action = 'multi'; } else { $topics = intval($_GET['move_topics']); if ($topics < 1) message($lang_common['Bad request']); $action = 'single'; // Fetch the topic subject $query = array( 'SELECT' => 't.subject', 'FROM' => 'topics AS t', 'WHERE' => 't.id='.$topics ); ($hook = get_hook('mr_qr_get_topic_to_move_subject')) ? eval($hook) : null; $result = $pun_db->query_build($query) or error(__FILE__, __LINE__); if (!$pun_db->num_rows($result)) message($lang_common['Bad request']); $subject = $pun_db->result($result); } // Get forums we can move the post into $query = array( 'SELECT' => 'c.id AS cid, c.cat_name, f.id AS fid, f.forum_name', 'FROM' => 'categories AS c', 'JOINS' => array( array( 'INNER JOIN' => 'forums AS f', 'ON' => 'c.id=f.cat_id' ), array( 'LEFT JOIN' => 'forum_perms AS fp', 'ON' => '(fp.forum_id=f.id AND fp.group_id='.$pun_user['g_id'].')' ) ), 'WHERE' => '(fp.read_forum IS NULL OR fp.read_forum=1) AND f.redirect_url IS NULL AND f.id!='.$fid, 'ORDER BY' => 'c.disp_position, c.id, f.disp_position' ); ($hook = get_hook('mr_qr_get_target_forums')) ? eval($hook) : null; $result = $pun_db->query_build($query) or error(__FILE__, __LINE__); $num_forums = $pun_db->num_rows($result); if (!$num_forums) message($lang_misc['Nowhere to move']); $forum_list = array(); for ($i = 0; $i < $num_forums; ++$i) $forum_list[] = $pun_db->fetch_assoc($result); // Setup form $pun_page['fld_count'] = $pun_page['set_count'] = 0; $pun_page['form_action'] = pun_link($pun_url['moderate_forum'], $fid); $pun_page['hidden_fields'] = array( '', '' ); // Setup breadcrumbs $pun_page['crumbs'][] = array($pun_config['o_board_title'], pun_link($pun_url['index'])); $pun_page['crumbs'][] = array($cur_forum['forum_name'], pun_link($pun_url['forum'], array($fid, sef_friendly($cur_forum['forum_name'])))); if ($action == 'single') $pun_page['crumbs'][] = array($subject, pun_link($pun_url['topic'], array($topics, sef_friendly($subject)))); else $pun_page['crumbs'][] = array($lang_misc['Moderate forum'], pun_link($pun_url['moderate_forum'], $fid)); $pun_page['crumbs'][] = ($action == 'single') ? $lang_misc['Move topic'] : $lang_misc['Move topics']; ($hook = get_hook('mr_move_topics_pre_header_load')) ? eval($hook) : null; define('PUN_PAGE', 'dialogue'); require PUN_ROOT.'header.php'; ?>

    'COUNT(t.id)', 'FROM' => 'topics AS t', 'WHERE' => 't.id IN('.$topics.') AND t.forum_id='.$fid ); ($hook = get_hook('mr_qr_verify_topic_ids2')) ? eval($hook) : null; $result = $pun_db->query_build($query) or error(__FILE__, __LINE__); if ($pun_db->result($result) != substr_count($topics, ',') + 1) message($lang_common['Bad request']); // Delete the topics and any redirect topics $query = array( 'DELETE' => 'topics', 'WHERE' => 'id IN('.$topics.') OR moved_to IN('.$topics.')' ); ($hook = get_hook('mr_qr_delete_topics')) ? eval($hook) : null; $pun_db->query_build($query) or error(__FILE__, __LINE__); // Delete any subscriptions $query = array( 'DELETE' => 'subscriptions', 'WHERE' => 'topic_id IN('.$topics.')' ); ($hook = get_hook('mr_qr_delete_subscriptions')) ? eval($hook) : null; $pun_db->query_build($query) or error(__FILE__, __LINE__); if ($db_type != 'mysql' && $db_type != 'mysqli') { // Create a list of the post ID's in the deleted topic and strip the search index $query = array( 'SELECT' => 'p.id', 'FROM' => 'posts AS p', 'WHERE' => 'p.topic_id IN('.$topics.')' ); ($hook = get_hook('mr_qr_get_deleted_posts')) ? eval($hook) : null; $result = $pun_db->query_build($query) or error(__FILE__, __LINE__); $post_ids = ''; while ($row = $pun_db->fetch_row($result)) $post_ids .= ($post_ids != '') ? ','.$row[0] : $row[0]; // Strip the search index provided we're not just deleting redirect topics if ($post_ids != '') { require PUN_ROOT.'include/search_idx.php'; strip_search_index($post_ids); } } // Delete posts $query = array( 'DELETE' => 'posts', 'WHERE' => 'topic_id IN('.$topics.')' ); ($hook = get_hook('mr_qr_delete_topic_posts')) ? eval($hook) : null; $pun_db->query_build($query) or error(__FILE__, __LINE__); sync_forum($fid); redirect(pun_link($pun_url['forum'], array($fid, sef_friendly($cur_forum['forum_name']))), $lang_misc['Delete topics redirect']); } // Setup form $pun_page['fld_count'] = $pun_page['set_count'] = 0; $pun_page['form_action'] = pun_link($pun_url['moderate_forum'], $fid); $pun_page['hidden_fields'] = array( '', '' ); // Setup breadcrumbs $pun_page['crumbs'] = array( array($pun_config['o_board_title'], pun_link($pun_url['index'])), array($cur_forum['forum_name'], pun_link($pun_url['forum'], array($fid, sef_friendly($cur_forum['forum_name'])))), array($lang_misc['Moderate forum'], pun_link($pun_url['moderate_forum'], $fid)), $lang_misc['Delete topics'] ); ($hook = get_hook('mr_delete_topics_pre_header_load')) ? eval($hook) : null; define('PUN_PAGE', 'dialogue'); require PUN_ROOT.'header.php'; ?>

    'topics', 'SET' => 'closed='.$action, 'WHERE' => 'id IN('.implode(',', $topics).') AND forum_id='.$fid ); ($hook = get_hook('mr_qr_open_close_topics')) ? eval($hook) : null; $pun_db->query_build($query) or error(__FILE__, __LINE__); $pun_page['redirect_msg'] = ($action) ? $lang_misc['Close topics redirect'] : $lang_misc['Open topics redirect']; redirect(pun_link($pun_url['moderate_forum'], $fid), $pun_page['redirect_msg']); } // Or just one in $_GET else { $topic_id = ($action) ? intval($_GET['close']) : intval($_GET['open']); if ($topic_id < 1) message($lang_common['Bad request']); // We validate the CSRF token. If it's set in POST and we're at this point, the token is valid. // If it's in GET, we need to make sure it's valid. if (!isset($_POST['csrf_token']) && (!isset($_GET['csrf_token']) || $_GET['csrf_token'] !== generate_form_token(($action ? 'close' : 'open').$topic_id))) csrf_confirm_form(); // Get the topic subject $query = array( 'SELECT' => 't.subject', 'FROM' => 'topics AS t', 'WHERE' => 't.id='.$topic_id.' AND forum_id='.$fid ); ($hook = get_hook('mr_qr_get_open_close_topic_subject')) ? eval($hook) : null; $result = $pun_db->query_build($query) or error(__FILE__, __LINE__); if (!$pun_db->num_rows($result)) message($lang_common['Bad request']); $subject = $pun_db->result($result); $query = array( 'UPDATE' => 'topics', 'SET' => 'closed='.$action, 'WHERE' => 'id='.$topic_id.' AND forum_id='.$fid ); ($hook = get_hook('mr_qr_open_close_topic')) ? eval($hook) : null; $pun_db->query_build($query) or error(__FILE__, __LINE__); $pun_page['redirect_msg'] = ($action) ? $lang_misc['Close topic redirect'] : $lang_misc['Open topic redirect']; redirect(pun_link($pun_url['topic'], array($topic_id, sef_friendly($subject))), $pun_page['redirect_msg']); } } // Stick a topic else if (isset($_GET['stick'])) { $stick = intval($_GET['stick']); if ($stick < 1) message($lang_common['Bad request']); // We validate the CSRF token. If it's set in POST and we're at this point, the token is valid. // If it's in GET, we need to make sure it's valid. if (!isset($_POST['csrf_token']) && (!isset($_GET['csrf_token']) || $_GET['csrf_token'] !== generate_form_token('stick'.$stick))) csrf_confirm_form(); ($hook = get_hook('mr_stick_topic_selected')) ? eval($hook) : null; // Get the topic subject $query = array( 'SELECT' => 't.subject', 'FROM' => 'topics AS t', 'WHERE' => 't.id='.$stick.' AND forum_id='.$fid ); ($hook = get_hook('mr_qr_get_stick_topic_subject')) ? eval($hook) : null; $result = $pun_db->query_build($query) or error(__FILE__, __LINE__); if (!$pun_db->num_rows($result)) message($lang_common['Bad request']); $subject = $pun_db->result($result); $query = array( 'UPDATE' => 'topics', 'SET' => 'sticky=1', 'WHERE' => 'id='.$stick.' AND forum_id='.$fid ); ($hook = get_hook('mr_qr_stick_topic')) ? eval($hook) : null; $pun_db->query_build($query) or error(__FILE__, __LINE__); redirect(pun_link($pun_url['topic'], array($stick, sef_friendly($subject))), $lang_misc['Stick topic redirect']); } // Unstick a topic else if (isset($_GET['unstick'])) { $unstick = intval($_GET['unstick']); if ($unstick < 1) message($lang_common['Bad request']); // We validate the CSRF token. If it's set in POST and we're at this point, the token is valid. // If it's in GET, we need to make sure it's valid. if (!isset($_POST['csrf_token']) && (!isset($_GET['csrf_token']) || $_GET['csrf_token'] !== generate_form_token('unstick'.$unstick))) csrf_confirm_form(); ($hook = get_hook('mr_unstick_topic_selected')) ? eval($hook) : null; // Get the topic subject $query = array( 'SELECT' => 't.subject', 'FROM' => 'topics AS t', 'WHERE' => 't.id='.$unstick.' AND forum_id='.$fid ); ($hook = get_hook('mr_qr_get_unstick_topic_subject')) ? eval($hook) : null; $result = $pun_db->query_build($query) or error(__FILE__, __LINE__); if (!$pun_db->num_rows($result)) message($lang_common['Bad request']); $subject = $pun_db->result($result); $query = array( 'UPDATE' => 'topics', 'SET' => 'sticky=0', 'WHERE' => 'id='.$unstick.' AND forum_id='.$fid ); ($hook = get_hook('mr_qr_unstick_topic')) ? eval($hook) : null; $pun_db->query_build($query) or error(__FILE__, __LINE__); redirect(pun_link($pun_url['topic'], array($unstick, sef_friendly($subject))), $lang_misc['Unstick topic redirect']); } ($hook = get_hook('mr_new_action')) ? eval($hook) : null; // No specific forum moderation action was specified in the query string, so we'll display the moderate forum view // Load the viewforum.php language file require PUN_ROOT.'lang/'.$pun_user['language'].'/forum.php'; // Determine the topic offset (based on $_GET['p']) $pun_page['num_pages'] = ceil($cur_forum['num_topics'] / $pun_user['disp_topics']); $pun_page['page'] = (!isset($_GET['p']) || $_GET['p'] <= 1 || $_GET['p'] > $pun_page['num_pages']) ? 1 : $_GET['p']; $pun_page['start_from'] = $pun_user['disp_topics'] * ($pun_page['page'] - 1); $pun_page['finish_at'] = min(($pun_page['start_from'] + $pun_user['disp_topics']), ($cur_forum['num_topics'])); // Generate paging links $pun_page['page_post'] = '

    '.$lang_common['Pages'].' '.paginate($pun_page['num_pages'], $pun_page['page'], $pun_url['moderate_forum'], $lang_common['Paging separator'], $fid).'

    '; // Navigation links for header and page numbering for title/meta description if ($pun_page['page'] < $pun_page['num_pages']) { $pun_page['nav'][] = ''; $pun_page['nav'][] = ''; } if ($pun_page['page'] > 1) { $pun_page['nav'][] = ''; $pun_page['nav'][] = ''; } // Generate page information if ($pun_page['num_pages'] > 1) $pun_page['main_info'] = ''.sprintf($lang_common['Page number'], $pun_page['page'], $pun_page['num_pages']).' '.sprintf($lang_common['Paged info'], $lang_common['Topics'], $pun_page['start_from'] + 1, $pun_page['finish_at'], $cur_forum['num_topics']); else $pun_page['main_info'] = (($pun_db->num_rows($result)) ? sprintf($lang_common['Page info'], $lang_common['Topics'], $cur_forum['num_topics']) : $lang_forum['No topics']); // Setup form $pun_page['fld_count'] = 0; $pun_page['form_action'] = pun_link($pun_url['moderate_forum'], $fid); // Setup breadcrumbs $pun_page['crumbs'] = array( array($pun_config['o_board_title'], pun_link($pun_url['index'])), array($cur_forum['forum_name'], pun_link($pun_url['forum'], array($fid, sef_friendly($cur_forum['forum_name'])))), $lang_forum['Moderate forum'] ); ($hook = get_hook('mr_topic_actions_pre_header_load')) ? eval($hook) : null; define('PUN_PAGE', 'modforum'); require PUN_ROOT.'header.php'; ?>

    't.id, t.poster, t.subject, t.posted, t.last_post, t.last_post_id, t.last_poster, t.num_views, t.num_replies, t.closed, t.sticky, t.moved_to', 'FROM' => 'topics AS t', 'WHERE' => 'forum_id='.$fid, 'ORDER BY' => 't.sticky DESC, last_post DESC', 'LIMIT' => $pun_page['start_from'].', '.$pun_user['disp_topics'] ); ($hook = get_hook('mr_qr_get_topics')) ? eval($hook) : null; $result = $pun_db->query_build($query) or error(__FILE__, __LINE__); // If there are topics in this forum. if ($pun_db->num_rows($result)) { $pun_page['button_status'] = ''; $pun_page['item_count'] = 0; while ($cur_topic = $pun_db->fetch_assoc($result)) { ++$pun_page['item_count']; // Start from scratch $pun_page['item_subject'] = $pun_page['item_status'] = $pun_page['item_last_post'] = $pun_page['item_alt_message'] = $pun_page['item_nav'] = array(); $pun_page['item_indicator'] = ''; $pun_page['item_alt_message'][] = $lang_common['Topic'].' '.($pun_page['start_from'] + $pun_page['item_count']); if ($pun_config['o_censoring'] == '1') $cur_topic['subject'] = censor_words($cur_topic['subject']); if ($cur_topic['moved_to'] != null) { $pun_page['item_status'][] = 'moved'; $pun_page['item_last_post'][] = $pun_page['item_alt_message'][] = $lang_forum['Moved']; $pun_page['item_subject'][] = ''.pun_htmlencode($cur_topic['subject']).''; $pun_page['item_subject'][] = ''.sprintf($lang_common['By user'], pun_htmlencode($cur_topic['poster'])).''; $cur_topic['num_replies'] = $cur_topic['num_views'] = ' - '; $pun_page['ghost_topic'] = true; } else { $pun_page['ghost_topic'] = false; if ($cur_topic['sticky'] == '1') { $pun_page['item_subject'][] = $lang_forum['Sticky']; $pun_page['item_status'][] = 'sticky'; } if ($cur_topic['closed'] == '1') { $pun_page['item_subject'][] = $lang_common['Closed']; $pun_page['item_status'][] = 'closed'; } $pun_page['item_subject'][] = ''.pun_htmlencode($cur_topic['subject']).''; $pun_page['item_pages'] = ceil(($cur_topic['num_replies'] + 1) / $pun_user['disp_posts']); if ($pun_page['item_pages'] > 1) $pun_page['item_nav'][] = paginate($pun_page['item_pages'], -1, $pun_url['topic'], $lang_common['Page separator'], array($cur_topic['id'], sef_friendly($cur_topic['subject']))); // Does this topic contain posts we haven't read? If so, tag it accordingly. if ($cur_topic['last_post'] > $pun_user['last_visit'] && (!isset($tracked_topics['topics'][$cur_topic['id']]) || $tracked_topics['topics'][$cur_topic['id']] < $cur_topic['last_post']) && (!isset($tracked_topics['forums'][$fid]) || $tracked_topics['forums'][$fid] < $cur_topic['last_post']) && !$pun_page['ghost_topic']) { $pun_page['item_nav'][] = ''.$lang_common['New posts'].''; $pun_page['item_status'][] = 'new'; } if (!empty($pun_page['item_nav'])) $pun_page['item_subject'][] = '[ '.implode('  ', $pun_page['item_nav']).' ]'; $pun_page['item_subject'][] = ''.sprintf($lang_common['By user'], pun_htmlencode($cur_topic['poster'])).''; $pun_page['item_last_post'][] = ''.format_time($cur_topic['last_post']).''; $pun_page['item_last_post'][] = ''.sprintf($lang_common['By user'], pun_htmlencode($cur_topic['last_poster'])).''; if (empty($pun_page['item_status'])) $pun_page['item_status'][] = 'normal'; $pun_page['subject_label'] = $cur_topic['subject']; } $pun_page['item_style'] = (($pun_page['item_count'] % 2 != 0) ? 'odd' : 'even').' '.implode(' ', $pun_page['item_status']); $pun_page['item_indicator'] = ''.implode(' - ', $pun_page['item_alt_message']).''.$pun_page['item_indicator'].''; ($hook = get_hook('mr_topic_actions_row_pre_display')) ? eval($hook) : null; ?> '.$lang_forum['No topics'].''; ($hook = get_hook('mr_topic_actions_forum_empty')) ? eval($hook) : null; ?>
    - - -
    ', '', '', '' ); ($hook = get_hook('mr_topic_actions_post_topic_list')) ? eval($hook) : null; ?>