statsLib.php

<?php
error_reporting(E_ALL);
ini_set('display_errors', 'On');

require_once('exceptions.php');
require_once('unblocklib.php');
require_once('appealObject.php');
require_once('userObject.php');

/**
 * Get an array containing database rows representing the desired appeals.
 * @param array $criteria an array of strings that is converted to a WHERE clause.
 * {"columnName" => "value", " AND columnName2" => "value2", ... }
 * @param int $limit the maximum number to return
 * @param string $orderby the column name to sort by
 * @return a reference to the result of the query
 */
function queryAppeals(array $criteria = array(), $limit = "", $orderby = "", $timestamp = 0){
	$db = connectToDB();
	
	if ($timestamp == 0) {
		$query = "SELECT " . Appeal::getColumnsForSelect() . " FROM appeal";
	} else {
		$query = "SELECT " . Appeal::getColumnsForSelect() . ", l.timestamp FROM appeal,";
		$query .= " (SELECT appealID, MAX(timestamp) as timestamp FROM comment GROUP BY appealID) AS l";
	}
	$query .= " WHERE";
	//Parse all of the criteria
	foreach($criteria as $item => $value) {
		$query .= " " . $item . "= '" . $value . "'";
	}
	if ($timestamp == 1) {
		$query .= "AND appeal.appealID = l.appealID";
	}
	//If there is an order, use it.
	if ($orderby != "") {
		$query .= " ORDER BY " . $orderby;
	}
	//If there is a limit, use it.
	if ($limit != "") {
		$query .= " LIMIT 0," . $limit;
	}
	
	debug($query);
	
	$result = mysql_query($query, $db);
	
	if(!$result){
		$error = mysql_error($db);
		debug('ERROR: ' . $error . '<br/>');
		throw new UTRSDatabaseException($error);
	}
	
	return $result;
}

/**
* Returns a list in an HTML table
* @param Array $criteria the column and value to filter by
* @param integer $limit optional the number of items to return
* @param String $orderby optional order of the results and direction
*/
function printAppealList(array $criteria = array(), $limit = "", $orderby = "", $timestamp = 0) {
	
	$currentUser = getCurrentUser();
	$secure = $currentUser->getUseSecure();
	
	// get rows from DB. Throws UTRSDatabaseException
	$result = queryAppeals($criteria, $limit, $orderby, $timestamp);
	
	$rows = mysql_num_rows($result);
	
	//If there are no new unblock requests
	if ($rows == 0) {
		$norequests = "<b>No unblock requests in queue</b>";
		return $norequests;
	} else {
		$requests = "<table class=\"appealList\">";
		//Begin formatting the unblock requests
		for ($i=0; $i < $rows; $i++) {
			//Grab the rowset
			$data = mysql_fetch_array($result);
			$appeal = new Appeal($data);
			
			$requests .= "\t<tr>\n";
			$requests .= "\t\t<td>" . $appeal->getID() . ".</td>\n";
			$requests .= "\t\t<td><a style=\"color:green\" href='appeal.php?id=" . $appeal->getID() . "'>Zoom</a></td>\n";
			$requests .= "\t\t<td><a style=\"color:blue\" href='" . getWikiLink("user:".$appeal->getCommonName(), $secure) . "' target='_NEW'>" . $appeal->getCommonName() . "</a></td>\n";
			if ($timestamp == 1) {
				$requests .= "\t\t<td>" . $data['timestamp'] . "</td>\n";
			}
			$requests .= "\t</tr>\n";
		}
		
		$requests .= "</table>";
		
		return $requests;
	}
}

/**
 * Returns a list of all new appeals
 */
function printNewRequests() {
	$criteria =  array('status' => Appeal::$STATUS_NEW);
	return printAppealList($criteria);
}

/**
 * Return a list of all appeals where the appealer has replied to a question, and is awaiting further review
 */
function printToolAdmin() {
	$criteria =  array('status' => Appeal::$STATUS_AWAITING_ADMIN);
	return printAppealList($criteria);
}

/**
 * Return a list of all appeals where the appealer has replied to a question, and is awaiting further review
 */
function printUserReplyNeeded() {
	$criteria =  array('status' => Appeal::$STATUS_AWAITING_USER);
	return printAppealList($criteria);
}

/**
 * Return a list of all appeals that have been flagged for checkuser attention
 */
function printProxyCheckNeeded() {
	$criteria =  array('status' => Appeal::$STATUS_AWAITING_PROXY);
	return printAppealList($criteria);
}

/**
 * Return a list of all appeals that have been flagged for checkuser attention
 */
function printCheckuserNeeded() {
	$criteria =  array('status' => Appeal::$STATUS_AWAITING_CHECKUSER);
	return printAppealList($criteria);
}

/**
 * Return a list of the last five appeals to be closed
 */
function printRecentClosed() {
	$db = connectToDB();
	
	$currentUser = getCurrentUser();
	$secure = $currentUser->getUseSecure();
	
	/*
	$query = "SELECT a.appealID, a.wikiAccountName, a.ip, l.timestamp";
	$query .= " FROM appeal a,";
	$query .= " (SELECT appealID, MAX(timestamp) as timestamp";
	$query .= " FROM actionAppealLog";
	$query .= " WHERE comment = 'Closed'";
	$query .= " GROUP BY appealID) l";
	$query .= " WHERE l.appealID = a.appealID";
	$query .= " AND a.status = 'CLOSED'";
	$query .= " ORDER BY l.timestamp DESC LIMIT 0,5";
	*/
	
	$query = "SELECT a.appealID, a.wikiAccountName, a.ip, c.timestamp";
	$query .= " FROM appeal a, comment c";
	$query .= " WHERE a.lastLogId = c.commentID";
	$query .= " AND c.comment = 'Closed'";
	$query .= " ORDER BY c.timestamp DESC LIMIT 0,5;";
	
	
	// get rows from DB. Throws UTRSDatabaseException
	$result = mysql_query($query, $db);
	
	$rows = mysql_num_rows($result);
	
	//If there are no new unblock requests
	if ($rows == 0) {
		$norequests = "<b>No unblock requests in queue</b>";
		return $norequests;
	} else {
		$requests = "<table class=\"appealList\">";
		//Begin formatting the unblock requests
		for ($i=0; $i < $rows; $i++) {
			//Grab the rowset
			$data = mysql_fetch_array($result);
			$appealId = $data['appealID'];
			
			$appeal = Appeal::getAppealById($data['appealID']);
						
			$requests .= "\t<tr>\n";
			$requests .= "\t\t<td>" . $appeal->getID() . ".</td>\n";
			$requests .= "\t\t<td><a style=\"color:green\" href='appeal.php?id=" . $appeal->getID() . "'>Zoom</a></td>\n";
			$requests .= "\t\t<td><a style=\"color:blue\" href='" . getWikiLink("user:" . $appeal->getCommonName(), $secure) . "' target='_NEW'>" . $appeal->getCommonName() . "</a></td>\n";
			$requests .= "\t\t<td>" . $data['timestamp'] . "</td>\n";
			$requests .= "\t</tr>\n";
		}
		
		$requests .= "</table>";
		
		return $requests;
	}
}

function printBacklog() {
	$db = connectToDB();
	
	$currentUser = getCurrentUser();
	$secure = $currentUser->getUseSecure();
	
	/*
	$query = "SELECT DISTINCT a.appealID, a.wikiAccountName, a.ip, DateDiff(Now(), cc.last_action) as since_last_action";
	$query .= " FROM appeal a LEFT JOIN";
	$query .= " (SELECT timestamp, appealID, comment";
	$query .= " FROM comment";
	$query .= " WHERE action = 1 ORDER BY commentID DESC) c";
	$query .= " ON c.appealID = a.appealID";
	$query .= " LEFT JOIN (SELECT appealID, Max(timestamp) as last_action";
	$query .= " FROM comment";
	$query .= " WHERE action = 1";
	$query .= " GROUP BY appealID) cc";
	$query .= " ON cc.appealID = c.appealID";
	$query .= " WHERE DateDiff(Now(), cc.last_action) > 7";
	$query .= " AND cc.last_action = c.timestamp";
	$query .= " AND c.comment != 'Closed'";
	$query .= " ORDER BY last_action ASC;";
	*/
	
	$query = "SELECT DISTINCT a.appealID, a.wikiAccountName, a.ip, DateDiff(Now(), c.timestamp) as since_last_action";
	$query .= " FROM appeal a, comment c";
	$query .= " WHERE a.lastLogId = c.commentID";
	$query .= " AND c.comment != 'Closed'";
	$query .= " AND DateDiff(Now(), c.timestamp) > 7";
	$query .= " ORDER BY c.timestamp ASC";
	
	
	// get rows from DB. Throws UTRSDatabaseException
	$result = mysql_query($query, $db);
	
	$rows = mysql_num_rows($result);
	
	//If there are no new unblock requests
	if ($rows == 0) {
		$norequests = "<b>No unblock requests in queue</b>";
		return $norequests;
	} else {
		$requests = "<table class=\"appealList\">";
		//Begin formatting the unblock requests
		for ($i=0; $i < $rows; $i++) {
			//Grab the rowset
			$data = mysql_fetch_array($result);
			$appealId = $data['appealID'];
			$appeal = Appeal::getAppealById($data['appealID']);
										
			$requests .= "\t<tr>\n";
			$requests .= "\t\t<td>" . $appeal->getID() . ".</td>\n";
			$requests .= "\t\t<td><a style=\"color:green\" href='appeal.php?id=" . $appeal->getID(). "'>Zoom</a></td>\n";
			$requests .= "\t\t<td><a style=\"color:blue\" href='" . getWikiLink("user:" .$appeal->getCommonName(), $secure) . "' target='_NEW'>" . $appeal->getCommonName() . "</a></td>\n";
			$requests .= "\t\t<td> " . $data['since_last_action'] . " days since last action</td>\n";
			$requests .= "\t</tr>\n";
		}
	
		$requests .= "</table>";
	
		return $requests;
	}
}

function printReviewer() {
	$criteria = array('status' => Appeal::$STATUS_AWAITING_REVIEWER);
	return printAppealList($criteria);
}

function printOnHold() {
	$criteria = array('status' => Appeal::$STATUS_ON_HOLD);
	return printAppealList($criteria);
}

function printMyQueue() {
	$user = User::getUserByUsername($_SESSION['user']);
	$criteria = array('handlingAdmin' => $user->getUserId(), ' AND status !' => Appeal::$STATUS_CLOSED);
	return printAppealList($criteria, "", "", 1);
}

function printAssigned($userId) {
	$user = User::getUserById($userId);
	$criteria = array('handlingAdmin' => $user->getUserId(), ' AND status !' => Appeal::$STATUS_CLOSED);
	return printAppealList($criteria, "", "", 1);
}

function printClosed($userId) {
	$user = User::getUserById($userId);
	$criteria = array('handlingAdmin' => $user->getUserId(), ' AND status ' => Appeal::$STATUS_CLOSED);
	return printAppealList($criteria, "", "", 1);
}


function printMyReview() {
	$user = User::getUserByUsername($_SESSION['user']);
	$criteria = array('handlingAdmin' => $user->getUserId(), ' AND status' => Appeal::$STATUS_AWAITING_REVIEWER);
	return printAppealList($criteria, "", "", 1);
}
/**
 * Get an array containing database rows representing the desired users.
 * @param array $criteria an array of strings that is converted to a WHERE clause.
 * {"columnName" => "value", " AND columnName2" => "value2", ... }
 * @param int $limit the maximum number to return
 * @param string $orderby the column name to sort by
 * @return a reference to the result of the query
 */
function queryUsers(array $criteria = array(), $limit = "", $orderby = ""){
	$db = connectToDB();
	
	$query = "SELECT * FROM user";
	$query .= " WHERE";
	//Parse all of the criteria
	foreach($criteria as $item => $value) {
		$query .= " " . $item . " = '" . $value . "'";
	}
	//If there is an order, use it.
	if ($orderby != "") {
		$query .= " ORDER BY " . $orderby;
	}
	//If there is a limit, use it.
	if ($limit != "") {
		$query .= " LIMIT 0," . $limit;
	}
	
	debug($query);
	
	$result = mysql_query($query, $db);
	
	if(!$result){
		$error = mysql_error($db);
		debug('ERROR: ' . $error . '<br/>');
		throw new UTRSDatabaseException($error);
	}
	
	return $result;
}

function printUserList(array $criteria = array(), $limit = "", $orderBy = ""){
	$currentUser = getCurrentUser();
	$secure = $currentUser->getUseSecure();
	
	$result = queryUsers($criteria, $limit, $orderBy);
	
	$rows = mysql_num_rows($result);
	
	if($rows == 0){
		echo "<b>No users meet this criteria.</b>";
	}
	else{
		$list = "<table class=\"appealList\">";
		//Begin formatting the unblock requests
		for ($i=0; $i < $rows; $i++) {
			//Grab the rowset
			$data = mysql_fetch_array($result);
			$userId = $data['userID'];
			$username = $data['username'];
			$wikiAccount = "User:" . $data['wikiAccount'];
						
			$list .= "\t<tr>\n";
			$list .= "\t\t<td>" . $userId . ".</td>\n";
			$list .= "\t\t<td><a style=\"color:green\" href=\"userMgmt.php?userId=" . $userId . "\">Manage</a></td>\n";
			$list .= "\t\t<td>" . $username . "</td>\n";
			$list .= "\t\t<td><a style=\"color:blue\" href='" . getWikiLink($wikiAccount, $secure) . "' target='_NEW'>" . $wikiAccount . "</a></td>\n";
			$list .= "\t</tr>\n";
		}
		
		$list .= "</table>";
		
		return $list;
	}
}

function printUnapprovedAccounts(){
	return printUserList(array("approved" => "0"), "", "registered ASC");	
}

function printInactiveAccounts(){
	return printUserList(array("approved" => "1", " AND active" => "0"), "", "username ASC");	
}

function printActiveAccounts(){
	return printUserList(array("approved" => "1", " AND active" => "1", " AND toolAdmin" =>  "0"), "", "username ASC");	
}

function printAdmins(){
	return printUserList(array("toolAdmin" => "1", " AND active" => "1"), "", "username ASC");	
}

function printCheckusers(){
	return printUserList(array("checkuser" => "1", " AND active" => "1"), "", "username ASC");		
}

function printDevelopers(){
	return printUserList(array("developer" => "1"), "", "username ASC");		
}

function getNumberAppealsClosedByUser($userId){
	$query = "SELECT COUNT(*) AS numClosed FROM appeal WHERE status = '" . Appeal::$STATUS_CLOSED . 
			 "' AND handlingAdmin = '" . $userId . "'";
	
	$db = connectToDB();
	
	$result = mysql_query($query, $db);
	
	if(!$result){
		$error = mysql_error($db);
		debug('ERROR: ' . $error . '<br/>');
		throw new UTRSDatabaseException($error);
	}
	
	$data = mysql_fetch_assoc($result);
	
	return $data['numClosed'];
}

function printUserLogs($userId){
	if(!$userId){
		throw new UTRSIllegalArgumentException($userId, "A valid userID", "printUserLogs()");
	}
	
	$db = connectToDB();
	
	$query = "SELECT * FROM userMgmtLog WHERE target='" . $userId . "'";
	
	debug($query);
	
	$result = mysql_query($query, $db);
	
	if(!$result){
		$error = mysql_error($db);
		debug('ERROR: ' . $error . '<br/>');
		throw new UTRSDatabaseException($error);
	}
	
	$rows = mysql_num_rows($result);
	
	// shouldn't happen, but meh
	if($rows == 0){
		echo "<b>No logs exist for this user.</b>";
	}
	else{
		$target = User::getUserById($userId);
		$list = "<table class=\"appealList\">";
		//Begin formatting the logs
		for ($i=0; $i < $rows; $i++) {
			//Grab the rowset
			$data = mysql_fetch_array($result);
			$doneById = $data['doneBy'];
			$doneBy = User::getUserById($doneById);
			$timestamp = $data['timestamp'];
			$action = $data['action'];
			$reason = $data['reason'];
			$hideTarget = $data['hideTarget'];
						
			$list .= "\t<tr>\n";
			$list .= "\t\t<td>" . $timestamp . " UTC</td>\n";
			$list .= "\t\t<td>" . $doneBy->getUsername() . " " . $action . ($hideTarget ? "" : " " . $target->getUsername()) . 
						($reason ? " (<i>" . $reason . "</i>)" : "") . "</td>\n";
			$list .= "\t</tr>\n";
		}
		
		$list .= "</table>";
		
		return $list;
	}
}

function printTemplateList(){
	
	$db = connectToDB();
	
	$query = "SELECT templateID, name FROM template";
	
	debug($query);
	
	$result = mysql_query($query, $db);
	
	if(!$result){
		$error = mysql_error($db);
		debug('ERROR: ' . $error . '<br/>');
		throw new UTRSDatabaseException($error);
	}
	
	$rows = mysql_num_rows($result);
	
	// shouldn't happen, but meh
	if($rows == 0){
		echo "<b>No templates currently exist.</b>";
	}
	else{
		$user = getCurrentUser();
		$list = "<table class=\"appealList\">";
		//Begin formatting the logs
		for ($i=0; $i < $rows; $i++) {
			//Grab the rowset
			$data = mysql_fetch_array($result);
			$id = $data['templateID'];
			$name = $data['name'];
						
			$list .= "\t<tr>\n";
			$list .= "\t\t<td>" . $name . "</td>\n";
			$list .= "\t\t<td><a style=\"color:green\" href=\"tempMgmt.php?id=" . $id . "\">";
			if(verifyAccess($GLOBALS['ADMIN'])){
				$list .= "Edit";
			}
			else{
				$list .= "View";
			}
			$list .= "</a></td>\n\t</tr>\n";
		}
		
		$list .= "</table>";
		
		return $list;
	}
}

function printLastThirtyActions() {
	
	$db = connectToDB();
	
	$sql = "SELECT * FROM comment WHERE action = 1 ORDER BY timestamp DESC LIMIT 0,30;";
	
	$query = mysql_query($sql, $db);
	
	if(!$query){
		$error = mysql_error($db);
		debug('ERROR: ' . $error . '<br/>');
		throw new UTRSDatabaseException($error);
	}
	
	$num_rows = mysql_num_rows($query);
	
	$HTMLOutput = "";

	$HTMLOutput .= "<table class=\"logLargeTable\">";
	$HTMLOutput .= "<tr>";
	$HTMLOutput .= "<th class=\"logLargeUserHeader\">Appeal</th>";
	$HTMLOutput .= "<th class=\"logLargeUserHeader\">User</th>";
	$HTMLOutput .= "<th class=\"logLargeActionHeader\">Action</th>";
	$HTMLOutput .= "<th class=\"logLargeTimeHeader\">Timestamp</th>";
	$HTMLOutput .= "</tr>";

	for ($i = 0; $i < $num_rows; $i++) {
		$styleUser = ($i%2 == 1) ? "largeLogUserOne" : "largeLogUserTwo";
		$styleAction = ($i%2 == 1) ? "largeLogActionOne" : "largeLogActionTwo";
		$styleTime = ($i%2 == 1) ? "largeLogTimeOne" : "largeLogTimeTwo";
		$data = mysql_fetch_array($query);
		$timestamp = (is_numeric($data['timestamp']) ? date("Y-m-d H:m:s", $data['timestamp']) : $data['timestamp']);
		$username = ($data['commentUser']) ? User::getUserById($data['commentUser'])->getUserName() : Appeal::getAppealByID($data['appealID'])->getCommonName();
		$italicsStart = ($data['action']) ? "<i>" : "";
		$italicsEnd = ($data['action']) ? "</i>" : "";
		$appeal = "<a href=\"appeal.php?id=" . $data['appealID'] . "\">" . Appeal::getAppealById($data['appealID'])->getCommonName() . "</a>";
		// if posted by appellant
		if(!$data['commentUser']){
			$styleUser = "highlight";
			$styleAction = "highlight";
			$styleTime = "highlight";
		}
		$HTMLOutput .= "<tr>";
		$HTMLOutput .= "<td valign=top class=\"" . $styleUser . "\">" . $appeal . "</td>";
		$HTMLOutput .= "<td valign=top class=\"" . $styleUser . "\">" . $username . "</td>";
		$HTMLOutput .= "<td valign=top class=\"" . $styleAction . "\">" . $italicsStart . str_replace("\\r\\n", "<br>", $data['comment']) . $italicsEnd . "</td>";
		$HTMLOutput .= "<td valign=top class=\"" . $styleUser . "\">" . $timestamp . "</td>";
		$HTMLOutput .= "</tr>";
	}

	$HTMLOutput .= "</table>";
	
	return $HTMLOutput;
}

function printSitenoticeMessages(){
	$query = "SELECT messageID, LEFT(message, 64) AS summary, CHAR_LENGTH(message) AS length " .
			"FROM sitenotice ORDER BY messageID ASC";
	
	$db = connectToDB();
	
	$result = mysql_query($query, $db);
	
	if(!$result){
		$error = mysql_error($db);
		debug('ERROR: ' . $error . '<br/>');
		throw new UTRSDatabaseException($error);
	}
	
	$rows = mysql_num_rows($result);
	
	if($rows == 0){
		return "<b>There are currently no sitenotice messages.</b>";
	}
	
	$table = "<table class=\"sitenoticeTable\">\n";
	$table .= "<tr>\n";
	$table .= "<th class=\"sitenoticeIDHeader\">ID</th>\n";
	$table .= "<th class=\"sitenoticeTextHeader\">Text</th>\n";
	$table .= "<th class=\"sitenoticeLinkHeader\">&nbsp;</th>\n";
	$table .= "<th class=\"sitenoticeLinkHeader\">&nbsp;</th>\n";
	$table .= "</tr>";
	
	for($i = 0; $i < $rows; $i++){
		$rowData = mysql_fetch_assoc($result);
		$table .= "<tr>\n";
		$table .= "<td style=\"text-align:center;\">" . $rowData['messageID'] . "</td>\n";
		$table .= "<td>\"" . $rowData['summary'] . ($rowData['length'] > 64 ? " ..." : "") . "\"</td>\n";
		$table .= "<td style=\"text-align:center;\"><a href=\"" . getRootURL() . "sitenotice.php?id=" . 
			$rowData['messageID'] . "\">Edit</a></td>\n";
		$table .= "<td style=\"text-align:center;\"><a href=\"" . getRootURL() . "sitenotice.php?delete=" . 
			$rowData['messageID'] . "\">Delete</a></td>\n";
		$table .= "</tr>\n";
	}
	
	$table .= "</table>\n";
	
	return $table;
}
?>