phpgtk__legacy/manual1/admin-notes.php

<?php
header('Location: http://php-gtk.audean.com');

//require_once 'cvs-auth.inc';
require_once '../include/email-validation.inc';
require_once '../include/shared-manual1.inc';

$mailto = 'gtk-webmaster@lists.php.net';
$num_entries_per_page = 50;

if (isset($MAGIC_COOKIE)) {
	list($user, $pass) = explode(":", base64_decode($MAGIC_COOKIE));
}

if (!strstr($MYSITE, "gtk.php.net")) {
	header("Location: http://gtk.php.net/manual1/admin-notes.php");
	exit;
}

commonHeader("PHP-GTK 1 Manual Notes Administration");
echo "<h1>PHP-GTK 1 Manual Notes Administration</h1>\n\n";

echo "<p>If you just want to browse the manual notes, you're better off " .
	"<a href=\"http://gtk.php.net/manual1/browse-notes.php\">here</a>.</p>\n";

if ($action != '') {

	list ($action, $id) = explode(' ', $action);

	if ($action!='edit'&& !isset($MAGIC_COOKIE)) {
		echo "<p><b>Authorization failed.</b></p>";
		commonFooter();
		exit;
	}

	switch($action) {
	case 'delete':
		$query = 'SELECT *,UNIX_TIMESTAMP(ts) AS xwhen FROM note WHERE id='.$id;
		if ($result = mysql_query($query)) {
			$row = mysql_fetch_array($result);
			mail($mailto, "note ".$row['id']." deleted from ".$row['sect']." by $user", stripslashes($row['note']), "From: ".$user."@php.net");
			$query = 'DELETE FROM note WHERE id=' . $id;
			if (mysql_query($query)) {
				echo '<p><b>Note deleted.</b></p>';
				if ($popup) {
					echo '<script language="javascript">window.close();</script>';
				}
			}
		}
		break;

	case 'reject':
		$reject_text  = "If you are receiving this email is because your note posted\n";
		$reject_text .= "to the on-line PHP-GTK 1 manual has been removed by one of the editors.\n\n";
		$reject_text .= "Read the following paragraphs carefully, because they contain\n";
		$reject_text .= "pointers to resources better suited for requesting support or\n";
		$reject_text .= "reporting bugs, none of which are to be included in manual notes\n";
		$reject_text .= "because there are mechanisms and groups in place to deal with\n";
		$reject_text .= "those issues.\n\n";
		$reject_text .= "The user contributed notes are not an appropriate place to\n";
		$reject_text .= "ask questions, report bugs or suggest new features; please\n";
		$reject_text .= "use the resources listed in <http://gtk.php.net/resources.php>\n";
		$reject_text .= "for those purposes. This was clearly stated in the page\n";
		$reject_text .= "you used to submit your note, please carefully re-read\n";
		$reject_text .= "those instructions before submitting future contributions.\n\n";
		$reject_text .= "Bug Submissions should be entered at <http://bugs.php.net/>\n";
		$reject_text .= "Feature Requests should also be entered at <http://bugs.php.net/>\n";
		$reject_text .= "Support and ways to find answers to your guestions can be found\n";
		$reject_text .= "at <http://gtk.php.net/resources.php>\n\n";
		$reject_text .= "Your note has been removed from the on-line manual.\n\n";
		$query = 'SELECT *,UNIX_TIMESTAMP(ts) AS xwhen FROM note WHERE id='.$id;
		if ($result = mysql_query($query)) {
			$row = mysql_fetch_array($result);
			// email the submitter if the address looks reasonable
			// uses functions in include/email-validation.inc
			$submitter = clean_AntiSPAM($row['user']);
			echo "<p>Note ".$row['id']." by: ".$row['user']." ($submitter) ";
			if (is_emailable_address($submitter)) {
				mail($submitter,"note ".$row['id']." rejected and deleted from ".$row['sect']." by notes editor $user",$reject_text."----- Copy of your note below -----\n\n".stripslashes($row['note']),"From: ".$user."@php.net");
			}
			// email to the list
			mail($mailto, "note ".$row['id']." rejected and deleted from ".$row['sect']." by $user", stripslashes($row['note']), "From: ".$user."@php.net");
			$query = 'DELETE FROM note WHERE id=' . $id;
			if (mysql_query($query)) {
				echo '<b>rejected and deleted.</b></p>';
			}
			if ($popup) {
				echo '<script language="javascript">window.close();</script>';
			}
		}
		break;

	case 'edit':
		echo "<p>Only people with " . make_link('http://www.php.net/cvs-php.php', 'CVS accounts') .
			" are able to edit the manual notes, so please don't email us asking why this doesn't work for you.</p>";
		$query = 'SELECT *,UNIX_TIMESTAMP(ts) AS xwhen FROM note WHERE id='.$id;
		if ($result = mysql_query($query)) {
			$row = mysql_fetch_array($result);
			echo '<form method="POST" action="/manual1/admin-notes.php">';
			echo '<table border="0" cellpadding="5" cellspacing="0" bgcolor="#e0e0e0">';
			echo '<tr valign="top"><TD align="right"><small>E-mail:<br></small></td>' .
				'<td><input type="text" size="40" name="nuser" value="',$row['user'], '"><br /></td></tr>';
			echo '<tr valign="top"><TD align="right"><small>Note:<br></small></td>' .
				'<td><textarea name="note" rows="8" cols="50">' . $row['note'] . '</textarea><br /></td></tr>';
			echo '<tr valign="top"><TD align="right"><small>Reset rating:<br></small></td>' .
				'<td><select name="rating">';
			echo '<option value="0">leave unchanged';
			echo '<option value="-1">clear all votes';
			for ($i = 1; $i <= 5; $i++) {
				echo '<option value="' . $i . '">set to '.$i. "\n";
			}
			echo '</select><br /></td></tr>';

			echo '<tr bgcolor="#cccccc"><td colspan="2"></td></tr>';

			echo '<tr valign="top"><td align="right"><small>Your CVS username:<br></small></td>' .
				'<td><input type="text" size="8" name="user" value="' . $user . '"><br /></td></tr>';
			echo '<tr valign="top"><td align="right"><small>Your CVS password:<br></small></td>' .
				'<td><input type="password" size="8" name="pass" value="' . $pass . '"><br /></td></tr>';
			echo '<tr valign="top"><td align="right"><small>Remember me:<br></small></td>' .
				'<td><input type="checkbox" name="saveme" checked value="1"><br /></td></tr>';

			echo '<tr><td colspan="2"><input type="submit" name="action" value="modify ' .  $id . '"></td></tr>';
			echo "</table></form>\n";
			commonFooter();
			exit;
		} else {
			echo "<p><b>Unable to find note for editing.</b></p>\n";
		}
		break;

	case 'modify':
		$query = 'SELECT *,UNIX_TIMESTAMP(ts) AS xwhen FROM note WHERE id='.$id;
		if ($result = mysql_query($query)) {
			$row = mysql_fetch_array($result);
		}
		$add_url = "\n\nhttp://gtk.php.net/manual1/en/".$row['sect']."\n";
		$query = "UPDATE note SET user='$nuser', note='$note'";
		$rating = (int)$rating;
		if ($rating==-1) {
			$query .= ", votes=0, rating=0";
		} else if ($rating > 0) {
			$query .= ",votes=10, rating=(10*".$rating.")";
		}
		$query .= " WHERE id=$id";
		if (mysql_query($query)) {
			echo "<p><b>Record modified.</b></p>";
			mail($mailto, "note ".$row['id']." modified in ".$row['sect']." by $user",stripslashes($note).$add_url,"From: ".$user."@php.net");
		} else {
			echo "<p><b>Record not modified (query failed).</b></p>";
		}
		break;

	default:
		if (!empty($action)) {
			echo "<p><b>Didn't understand action '$action'.</b></p>";
		}
	} // end of switch

} // end of if($action != "")


$MAGIC_COOKIE = 'temp';
include 'browse.php';

commonFooter();

?>