116 lines
3.8 KiB
PHP
116 lines
3.8 KiB
PHP
<?php
|
|
namespace Misuzu;
|
|
|
|
use RuntimeException;
|
|
use InvalidArgumentException;
|
|
use Misuzu\Users\User;
|
|
use Misuzu\Users\UserWarning;
|
|
|
|
if(!User::hasCurrent() || !perms_check_user(MSZ_PERMS_USER, User::getCurrent()->getId(), MSZ_PERM_USER_MANAGE_WARNINGS)) {
|
|
echo render_error(403);
|
|
return;
|
|
}
|
|
|
|
$notices = [];
|
|
$currentUser = User::getCurrent();
|
|
$currentUserId = $currentUser->getId();
|
|
|
|
if(!empty($_POST['lookup']) && is_string($_POST['lookup'])) {
|
|
try {
|
|
$userId = User::byUsername((string)filter_input(INPUT_POST, 'lookup'))->getId();
|
|
} catch(RuntimeException $ex) {
|
|
$userId = 0;
|
|
}
|
|
url_redirect('manage-users-warnings', ['user' => $userId]);
|
|
return;
|
|
}
|
|
|
|
// instead of just kinda taking $_GET['w'] this should really fetch the info from the database
|
|
// and make sure that the user has authority
|
|
if(!empty($_GET['delete'])) {
|
|
try {
|
|
UserWarning::byId((int)filter_input(INPUT_GET, 'w', FILTER_SANITIZE_NUMBER_INT))->delete();
|
|
} catch(RuntimeException $ex) {}
|
|
redirect($_SERVER['HTTP_REFERER'] ?? url('manage-users-warnings'));
|
|
return;
|
|
}
|
|
|
|
if(!empty($_POST['warning']) && is_array($_POST['warning'])) {
|
|
try {
|
|
$warningsUserInfo = User::byId((int)($_POST['warning']['user'] ?? 0));
|
|
$warningsUser = $warningsUserInfo->getId();
|
|
|
|
if(!$currentUser->hasAuthorityOver($warningsUserInfo))
|
|
$notices[] = 'You do not have authority over this user.';
|
|
} catch(RuntimeException $ex) {
|
|
$notices[] = 'This user doesn\'t exist.';
|
|
}
|
|
|
|
if(empty($notices) && !empty($warningsUserInfo)) {
|
|
try {
|
|
$warningInfo = UserWarning::create(
|
|
$warningsUserInfo,
|
|
$currentUser,
|
|
$_POST['warning']['note'],
|
|
$_POST['warning']['private']
|
|
);
|
|
} catch(InvalidArgumentException $ex) {
|
|
$notices[] = $ex->getMessage();
|
|
} catch(RuntimeException $ex) {
|
|
$notices[] = 'Warning creation failed.';
|
|
}
|
|
}
|
|
}
|
|
|
|
if(empty($warningsUser))
|
|
$warningsUser = max(0, (int)($_GET['u'] ?? 0));
|
|
|
|
if(empty($warningsUserInfo))
|
|
try {
|
|
$warningsUserInfo = User::byId($warningsUser);
|
|
} catch(RuntimeException $ex) {
|
|
$warningsUserInfo = null;
|
|
}
|
|
|
|
$warningsPagination = new Pagination(UserWarning::countAll($warningsUserInfo), 10);
|
|
|
|
if(!$warningsPagination->hasValidOffset()) {
|
|
echo render_error(404);
|
|
return;
|
|
}
|
|
|
|
// calling array_flip since the input_select macro wants value => display, but this looks cuter
|
|
$warningDurations = array_flip([
|
|
'Pick a duration...' => 0,
|
|
'5 Minutes' => 60 * 5,
|
|
'15 Minutes' => 60 * 15,
|
|
'30 Minutes' => 60 * 30,
|
|
'45 Minutes' => 60 * 45,
|
|
'1 Hour' => 60 * 60,
|
|
'2 Hours' => 60 * 60 * 2,
|
|
'3 Hours' => 60 * 60 * 3,
|
|
'6 Hours' => 60 * 60 * 6,
|
|
'12 Hours' => 60 * 60 * 12,
|
|
'1 Day' => 60 * 60 * 24,
|
|
'2 Days' => 60 * 60 * 24 * 2,
|
|
'1 Week' => 60 * 60 * 24 * 7,
|
|
'2 Weeks' => 60 * 60 * 24 * 7 * 2,
|
|
'1 Month' => 60 * 60 * 24 * 365 / 12,
|
|
'3 Months' => 60 * 60 * 24 * 365 / 12 * 3,
|
|
'6 Months' => 60 * 60 * 24 * 365 / 12 * 6,
|
|
'9 Months' => 60 * 60 * 24 * 365 / 12 * 9,
|
|
'1 Year' => 60 * 60 * 24 * 365,
|
|
'Permanent' => -1,
|
|
'Until (YYYY-MM-DD) ->' => -100,
|
|
'Until (Seconds) ->' => -200,
|
|
'Until (strtotime) ->' => -300,
|
|
]);
|
|
|
|
Template::render('manage.users.warnings', [
|
|
'warnings' => [
|
|
'notices' => $notices,
|
|
'pagination' => $warningsPagination,
|
|
'list' => UserWarning::all($warningsUserInfo, $warningsPagination),
|
|
'user' => $warningsUserInfo,
|
|
],
|
|
]);
|