index.php

<?php
//Created by the unblock-en-l dev team (test commit)
error_reporting(E_ALL);
ini_set('display_errors', 'On');

require_once('src/network.php');
forceHTTPS();
require_once('template.php');
require_once('src/unblocklib.php');
require_once('src/exceptions.php');
require_once('src/appealObject.php');
require_once('src/banObject.php');
require_once('src/logObject.php');  
require_once('sitemaintain.php');

checkOnline();

$publickey = @$CONFIG['recaptcha']['publickey'];
$privatekey = @$CONFIG['recaptcha']['privatekey'];
$captchaErr = null;
$errorMessages = '';
$appeal = null;
$email = null;
$blocker = null;
$appealText = null;
$edits = null;
$blockReason = null;
$otherInfo = null;
$hasAccount = null;
$wikiAccount = null;
$autoBlock = null;

if(loggedIn()){
   header("Location: " . getRootURL() . "home.php");
}

$success = false;

// Handle submitted form
if(isset($_POST["submit"])){
   
   debug('form submitted <br/>');
   
   try{
      
      
      $ip = Appeal::getIPFromServer();
      $email = $_POST["appeal_email"];
      $registered = (isset($_POST["appeal_hasAccount"]) ? ($_POST["appeal_hasAccount"] ? true : false) : false);
      $wikiAccount = (isset($_POST["appeal_wikiAccountName"]) ? $_POST["appeal_wikiAccountName"] : null);
      if (isset($_POST["appeal_autoblock"]) && $_POST["appeal_autoblock"] == 1) {
        $autoblock = true;      
      }
      if (!isset($_POST["appeal_autoblock"]) || (isset($_POST["appeal_autoblock"]) && $_POST["appeal_autoblock"] == 0)) {
        $autoblock = false;      
      }
       
      $ban = Ban::isBanned($ip, $email, $wikiAccount);
      if($ban){
         $expiry = $ban->getExpiry();
         $avoidable = strcmp($ban->getTarget(), $wikiAccount) == 0 && !$registered;
         $message = ($ban->isIP() ? "Your IP address" : $ban->getTarget()) . " has been banned " . 
            ($expiry ? "until " . $expiry : "indefinitely") . " by " . $ban->getAdmin()->getUsername() .
            " for the reason '" . $ban->getReason() . "'.";
         if($avoidable){
            $message .= " You may be able to resubmit your appeal by selecting a different username.";
         }
         else{
            $message .= " If you still wish to appeal your block, you may visit us on IRC at " . 
               "<a href=\"http://webchat.freenode.net/?channels=wikipedia-en-unblock\">#wikipedia-en-unblock</a> " .
                "(if you haven't already done so).";
         }
         throw new UTRSCredentialsException($message);
      }
      if (!Appeal::noSpamCheck($ip)) {
          throw new UTRSValidationException('Our spam prevention system is not working right now. Please try again later.');
      }
      if ($registered && !$autoblock && !Appeal::verifyBlock($wikiAccount, TRUE)) {
        throw new UTRSValidationException('The username you entered ('.$wikiAccount.') is not currently blocked. Please verify that you are blocked by following the instructions above.');
      }
      elseif ($registered && $autoblock  && !Appeal::verifyBlock($ip, FALSE)) {
        throw new UTRSValidationException('Your IP Address ('.$ip.') is not currently blocked. Is it your account that is blocked?');
      }
      elseif (!$registered && !Appeal::verifyBlock($ip, FALSE)) {
        throw new UTRSValidationException('Your IP Address ('.$ip.') is not currently blocked. If you have an account, please select \'Yes\' to "Do you have an account on Wikipedia?".');
      }
      if ($registered && !Appeal::verifyNoPublicAppeal($wikiAccount)) {
        throw new UTRSValidationException('You are currently appealing your block on your talkpage. The UTRS team does not hear appeals already in the process of being reviewed.');
      }
      elseif (!$registered && !Appeal::verifyNoPublicAppeal($ip)) {
        throw new UTRSValidationException('You are currently appealing your block on your talkpage. The UTRS team does not hear appeals already in the process of being reviewed.');
      }
      if ($registered) {
	      if (Appeal::activeAppeal($email, $wikiAccount)) {
	        throw new UTRSValidationException("It looks like you have already submitted an appeal to UTRS. Please wait for that appeal to be reviewed. If you think this message is in error, please contact the email at the bottom of the page.");
	      }
      }
	  else {
		  if (Appeal::activeAppeal($email, NULL)) {
		  	throw new UTRSValidationException("It looks like you have already submitted an appeal to UTRS. Please wait for that appeal to be reviewed. If you think this message is in error, please contact the email at the bottom of the page.");
		  }
      }

      $appeal = Appeal::newUntrusted($_POST);
      debug('object created <br/>');

      $appeal->insert();

      // Send confirmation email.
      $confirmURL = getRootURL() . "reply.php?id=". $appeal->getID() .
         "&confirmEmail=" . urlencode($appeal->getEmail()) .
         "&token=" . $appeal->getEmailToken();

      $headers = "From: Unblock Review Team <noreply-unblock@toolserver.org>\r\n";
      $headers .= "MIME-Version: 1.0\r\n";
      $headers .= "Content-Type: text/html; charset=ISO-8859-1\r\n";
      $body = "This is an automated message from the English Wikipedia Unblock Ticket Request System. " .
         "In order for your appeal to be processed, you need to confirm that the email address " .
         "you entered with your appeal is valid. To do this, simply click the link below.  If you " .
         "did not file an appeal then simply do nothing, and the appeal will be deleted.<br /><br />" .
         "<a href=\"" . htmlspecialchars($confirmURL) . "\">" . htmlspecialchars($confirmURL) . "</a>";

      mail($appeal->getEmail(), "Unblock appeal email address confirmation", $body, $headers);

      $success = true;
      
      $log = Log::getCommentsByAppealId($appeal->getID());
      $log->addNewItem("Appeal Created", 1);
      Log::ircNotification("\x033New appeal has been created for\x032 " . $appeal->getCommonName() . " \x033(\x032 " . $appeal->getID() . " \x033) URL: " . getRootURL() . "appeal.php?id=" . $appeal->getID(), 1);
   }
   catch (UTRSValidationException $ex){
   	  $errorMessages = $ex->getMessage() . $errorMessages;
   	  $hasAccount = (isset($_POST["appeal_hasAccount"]) ? ($_POST["appeal_hasAccount"] ? true : false) : false);
   	  $autoBlock = (isset($_POST["appeal_autoblock"]) ? ($_POST["appeal_autoblock"] ? true : false) : false);
   }
   catch(UTRSException $ex){
      $errorMessages = $ex->getMessage() . $errorMessages;
      $hasAccount = (isset($_POST["appeal_hasAccount"]) ? ($_POST["appeal_hasAccount"] ? true : false) : false);
      $autoBlock = (isset($_POST["appeal_autoblock"]) ? ($_POST["appeal_autoblock"] ? true : false) : false);
      // TODO: not sure how to include the other fields due to the javascript
   }
   catch(ErrorException $ex){
      $errorMessages = $ex->getMessage() . $errorMessages;
      $hasAccount = (isset($_POST["appeal_hasAccount"]) ? ($_POST["appeal_hasAccount"] ? true : false) : false);
      $autoBlock = (isset($_POST["appeal_autoblock"]) ? ($_POST["appeal_autoblock"] ? true : false) : false);
   }
}

skinHeader("var accountNameInput = \"<label id=\\\"accountNameLabel\\\" for=\\\"accountName\\\" class=\\\"required\\\">What is the name of your account?</label> <input id=\\\"accountName\\\" type=\\\"text\\\" name=\\\"appeal_wikiAccountName\\\" value=\\\"" . posted('appeal_wikiAccountName') . "\\\"/><br />\";
var autoBlockInput = \"<label id=\\\"autoBlockLabel\\\" for=\\\"autoBlock\\\" class=\\\"required\\\">What has been blocked?</label> &#09; <input id=\\\"autoBlockN\\\" type=\\\"radio\\\" name=\\\"appeal_autoblock\\\" value=\\\"0\\\" " . ($hasAccount ? ($autoBlock ? "" : "checked=\\\"checked\\\"") : "") . " /> My account &#09; <input id=\\\"autoBlockY\\\" type=\\\"radio\\\" name=\\\"appeal_autoblock\\\" value=\\\"1\\\" " . ($hasAccount ? ($autoBlock ? "checked=\\\"checked\\\"" : "") : "") . " /> My IP address or range (my account is not blocked)<br />\";
var desiredAccountInput = \"<label id=\\\"accountNameLabel\\\" for=\\\"accountName\\\">We may be able to create an account for you which you can use to avoid problems like this in the future. If you would like for us to make an account for you, please enter the username you'd like to use here.</label><br/><input id=\\\"accountName\\\" type=\\\"text\\\" name=\\\"appeal_wikiAccountName\\\" value=\\\"" . posted('appeal_wikiAccountName') . "\\\"/><br />\";
var registered = " . ($hasAccount ? "true" : "false") . ";

function hasAccount(){
   var span = document.getElementById(\"variableQuestionSection\");
   span.innerHTML = accountNameInput + \"\\n\" + autoBlockInput;
}

function noAccount() {
   var span = document.getElementById(\"variableQuestionSection\");
   span.innerHTML = desiredAccountInput;
} " . (isset($_POST['appeal_hasAccount']) ? "

window.onload = function ()
{
   if(registered){
      hasAccount();
   }
   else{
      noAccount();
   }
}; " : "" ), $recaptcha=true);
?>
<center><b>Welcome to the Unblock Ticket Request System.</b>
<div id="inputBox">
<?php
if($success){
   displaySuccess("Your appeal has been recorded and is pending email address verification.  Please check your email inbox for a message from UTRS.  If you can't find such a message in your inbox, please check your junk mail folder.");
} else {
?>
<p>If you are presently blocked from editing on Wikipedia (which you may verify by 
clicking <a href="http://en.wikipedia.org/w/index.php?title=Wikipedia:Sandbox&action=edit">here</a>), you may fill out
the form below to have an administrator review your block. Please complete all fields labelled in 
<span class="required">red text</span>, as these are required in order for us to complete a full review of your block.</p>

<p>If you are having trouble editing a particular page or making a particular edit, but are able to edit the page
linked in the previous paragraph, you may not be blocked, but instead could be having difficulty with 
<a href="http://en.wikipedia.org/wiki/Wikipedia:Protection policy">page protection</a> or the 
<a href="http://en.wikipedia.org/wiki/Wikipedia:Edit filter">edit filter</a>. For more information, and instructions on
how to receive assistance, please see those links.</p>

<p><b>For assistance with a block, please complete the form below:</b></p>

<noscript>
<?php displayError("It looks like your browser either doesn't support Javascript, or " .
                             "Javascript is disabled. Elements of this form require Javascript " .
                             "to display properly. Please enable Javascript or use another browser " .
                             "to continue. Thank you!");?>
</noscript>

<?php 
if($errorMessages){
   displayError($errorMessages);
}

echo '<form name="unblockAppeal" id="unblockAppeal" action="index.php" method="POST">';
echo '<label id="emailLabel" for="accountName" class="required">What is your email address? <b>If you do not supply a deliverable email address, we will be unable to reply to your appeal and therefore it will not be considered.<br /><font color=red>Note: There is inconsistent delivery to Microsoft email services (such as: live.com, hotmail.com, outlook.com, etc.). If you use one of these services, we can not guarantee that you will receive a confirmation email. Please avoid using these services.</font></b></label> <input id="email" type="text" name="appeal_email" value="' . posted('appeal_email') . '"/><br /><br />';
echo '<label id="registeredLabel" for="registered" class="required">Do you have an account on Wikipedia?</label> &#09; <input id="registeredY" type="radio" name="appeal_hasAccount" value="1" onClick="hasAccount()" ' . (isset($_POST['appeal_hasAccount']) ? ($hasAccount ? 'checked="checked"' : '') : "") . ' /> Yes &#09; <input id="registeredN" type="radio" name="appeal_hasAccount" value="0" onClick="noAccount()" ' . (isset($_POST['appeal_hasAccount']) ? (!$hasAccount ? 'checked="checked"' : '') : '') . ' /> No<br /><br />';
echo '<span id="variableQuestionSection"></span><br />';
echo '<!--<label id="blockingAdminLabel" for="blockingAdmin">According to your block message, which administrator placed this block?</label>  --><input id="blockingAdmin" type="hidden" name="appeal_blockingAdmin" value="No one"/><!--<br /><br />-->';
echo '<label id="appealLabel" for="appeal" class="required">Why do you believe you should be unblocked?</label><br /><br />';
echo '<textarea id="Appeal" maxlength="4060" name="appeal_appealText" rows="5" >' . posted('appeal_appealText') . '</textarea>';
echo '<span id="sizeAppeal"></span>';
echo '<br /><br />';
echo '<label id="editsLabel" for="edits" class="required">If you are unblocked, what articles do you intend to edit?</label><br /><br />';
echo '<textarea id="Edits" maxlength="1024" name="appeal_intendedEdits" rows="5" >' . posted('appeal_intendedEdits') . '</textarea>';
echo '<span id="sizeEdits"></span>';
echo '<br /><br />';
echo '<label id="blockInfoLabel" for="blockReaon" class="required">Why do you think there is a block currently affecting you? If you believe it\'s in error, tell us how.</label><br /><br />';
echo '<textarea id="Block" maxlength="1024" name="appeal_blockReason" rows="5" >' . posted('appeal_blockReason') . '</textarea>';
echo '<span id="sizeBlock"></span>';
echo '<br /><br />';
echo '<label id="otherInfoLabel" for="otherInfo">Is there anything else you would like us to consider when reviewing your block?</label><br /><br />';
echo '<textarea id="Other" maxlength="2048" name="appeal_otherInfo" rows="3" >' . posted('appeal_otherInfo') . '</textarea>';
echo '<span id="sizeOther"></span>';
echo '<br /><br />';

?>

<div class="g-recaptcha" data-sitekey="<?php echo $publickey; ?>"></div>

<small>
<p>By submitting this unblock request, you are consenting to allow us to collect information about
your computer and that you agree with our <a href="privacy.php">Privacy Policy</a>.  This information
will in most cases allow us to distinguish you from any vandals editing from the same location. We do
not store this information any longer than necessary, and do not share it with any third party. For more
information, please see our <a href="privacy.php">Privacy Policy.</a>

By using this project, you agree that any private information you give to this project may be made publicly available and not be treated as confidential.

By using this project, you agree that the volunteer administrators of this project will have access to any data you submit. This can include your IP address, your username/password combination for accounts created in Labs services, and any other information that you send. The volunteer administrators of this project are bound by the Wikimedia Labs Terms of Use, and are not allowed to share this information or use it in any non-approved way.

Since access to this information is fundamental to the operation of Wikimedia Labs, these terms regarding use of your data expressly override the Wikimedia Foundation's Privacy Policy as it relates to the use and access of your personal information.

By clicking "Submit Appeal", you agree to these terms and the terms of the <a href="privacy.php">Privacy Policy</a> and the <a href="https://wikitech.wikimedia.org/wiki/Wikitech:Labs_Terms_of_use" target="_new">Wikimedia Labs Terms of Use</a>.</p></small>
<?php

echo '<input type="submit" name="submit" id="submit" value="Submit Appeal"/>';
echo '</form>';

} /* !$success */
?>

<p>Please remember that Wikipedia administrators are volunteers; it may take some time for your appeal to be reviewed, and a courteous appeal will be met with a courteous response. If you feel it is taking too long for your appeal to be reviewed, you can usually appeal your block on your user talk page (<a href="http://en.wikipedia.org/wiki/Special:Mytalk">located here</a>) by copying this text and pasting it in a new section on the bottom of your page: <b><tt>{{unblock|1=your reason here}}</tt></b> Be sure to replace "your reason here" with your appeal.</p>
</div></center>
<?php 

skinFooter();
?>