forked from grinnellplans/grinnellplans-php
/
read.php
executable file
·212 lines (206 loc) · 11.1 KB
/
read.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
<?php
require_once ('Plans.php');
require ('functions-main.php');
require ("syntax-classes.php");
$idcookie = User::id();
$dbh = db_connect();
$page = new PlansPage('Plan', 'readplan', PLANSVNAME, 'read.php');
$searchnum = (isset($_GET['searchnum']) ? $_GET['searchnum'] : false);
$searchname = (isset($_GET['searchname']) ? $_GET['searchname'] : false);
if (User::logged_in()) {
populate_page($page, $dbh, $idcookie);
} else
//begin guest user display
{
populate_guest_page($page);
}
if (!$searchnum) //if no search number given
{
if (isvaliduser($dbh, $searchname)) //if valid username, change to num
{
$searchnum = get_item($dbh, "userid", "accounts", "username", $searchname);
} else
//if is not a valid username
{
if ($searchname) //if a searchname has been given
{
$searchname = htmlentities($searchname);
if ($idcookie) {
//if a searchname has been given, but there is no user with that exact name, search the usernames to see which if any users have that string in their username
$partial_list = partial_search($dbh, "userid,username", "accounts", "username", $searchname, "username");
$part_count = count($partial_list);
if ($part_count == 0) //if no users have that string in username, tell user
{
$nouser = new AlertText("User <b>$searchname</b> does not exist and there are no names with the term in them.", 'No such user');
$page->append($nouser);
} else
//but if there are usernames with string in them, display them
{
$nouser = new AlertText("User <b>$searchname</b> does not exist.<br>However there are <b>$part_count</b> names with $searchname in them.<br>These names are:", 'No such user');;
$page->append($nouser);
$namelist = new WidgetList('partial_name_matches', true);
$page->append($namelist);
$o = 0;
while ($partial_list[$o][0]) //loop through displaying the usernames as links
{
$name = new PlanLink($partial_list[$o][1]);
$namelist->append($name);
$o++;
} //while ($partial_list [$o][0])
} //if partial names
$searchlink = new Hyperlink('search_for_term', true, "search.php?mysearch=$searchname", "Search Plans for \"$searchname\"");
$page->append($searchlink);
} else {
$err = new AlertText('There is either no plan with that name or it is not viewable to guests.' . ' Please <a href="index.php">Log in</a> or <a href="register.php">Register</a>.', 'Plan not available');
$page->append($err);
}
} else {
$err = new AlertText('Must enter a name', 'Input needed');
$page->append($err);
}
interface_disp_page($page);
db_disconnect($dbh);
exit();
} //if not valid username
} //$if (!$searchnum)
//begin displaying if there is a user with name or number given
// Create the new page
if (User::logged_in()) {
//TODO add searchname instead?
$page->url = add_param($page->url, 'searchnum', $searchnum);
$addtolist = (isset($_POST['addtolist']) ? (bool)$_POST['addtolist'] : false);
// if person is manipulating which tier this plan is on their autoread list
if (isset($_POST['block_user'])) {
if ($_POST['block_user'] == 1) {
$user = User::get();
if ($user->webview == 1) {
$warning = new AlertText("Warning! Your plan is set to be viewable by guests. This will allow blocked users to read your plan
simply by logging out. If you would like to change this setting, please visit
<a href=\"/webview.php\">the guest settings page</a>.");
$page->append($warning);
}
Block::addBlock($idcookie, $searchnum);
$msg = new InfoText("<p>You have blocked this user. Blocking a user is one-directional. Selecting \"Block\" renders the contents of your plan unavailable to this user. Neither will see any [planlove] by the other, and any updates either make will not show up on each other’s planwatch.</p>
<p>If this block was made in error, please use the option at the bottom of the page to un-do.</p>");
} else {
Block::removeBlock($idcookie, $searchnum);
$msg = new InfoText("User " . $planinfo[0][0] . " has been unblocked.");
}
$page->append($msg);
} else if ($addtolist) {
$privlevel = (isset($_POST['privlevel']) ? (int)$_POST['privlevel'] : 0);
if ($privlevel == 0) {
mysqli_query($dbh,"DELETE FROM autofinger WHERE owner = '$idcookie' and interest = '$searchnum'");
$yay = new InfoText("User " . $planinfo[0][0] . " removed from your autoread list.");
} else if ($privlevel > 0 && $privlevel <= 3) {
mysqli_query($dbh,"INSERT INTO autofinger (owner, interest, priority) VALUES ('$idcookie', '$searchnum', '$privlevel') ON DUPLICATE KEY UPDATE priority=$privlevel");
$yay = new InfoText("User " . $planinfo[0][0] . " is now on your autoread list with priority level of " . $privlevel . ".");
}
$page->append($yay);
}
// Update autofinger as read.
$my_result = mysqli_query($dbh,"Select priority From autofinger where owner = '$idcookie' and interest = '$searchnum'");
$onlist = mysqli_fetch_array($my_result);
if ($onlist) {
update_read($dbh, $idcookie, $searchnum); //mark as having been read
$myonlist = $onlist[0];
// Repopulate the page to get updated autoread
populate_page($page, $dbh, $idcookie);
} else {
$myonlist = "X"; //if not on autoread list, show is not on priority list
}
}
//TODO should this go inside if(!$auth) ?
$guest_auth = false;
if (isset($_GET['guest-pass'])) {
$real_pass = get_item($dbh, "guest_password", "accounts", "userid", $searchnum);
if ($real_pass == '') {
$guest_auth = false;
} else if ($real_pass == $_GET['guest-pass']) {
$guest_auth = true;
} else {
$guest_auth = false;
}
}
// Get the user and plan information
$q = Doctrine_Query::create()->from('Accounts a')->leftJoin('a.Plan p')->where('a.userid = ?', $searchnum)->orderBy('p.id ASC');
$user = $q->fetchOne();
if (!$user) {
$page->append(new AlertText("Could not retrieve plan.", 'DB Error', true));
} else if (!$idcookie && $user->webview != 1 && !$guest_auth) {
$page->append(new AlertText("There is either no plan with that name or it is not viewable to guests.", 'Plan not found', false));
} else {
// Perform these queries once for the page
$is_blocking_this_user = Block::isBlocking($idcookie, $searchnum);
$this_user_is_blocking_you = Block::isBlocking($searchnum, $idcookie);
if ($this_user_is_blocking_you && !User::is_admin()) {
$blocked_msg = new AlertText("[$user->username] has enabled the block feature. This plan is not available.");
$page->append($blocked_msg);
} else {
// If we're redirecting from edit.php, assure the user that their change was applied
if (isset($_GET['edit_submit']) && $_GET['edit_submit'] == 1) {
$changed_msg = new InfoText('Plan changed successfully.');
$page->append($changed_msg);
}
if ($is_blocking_this_user) {
$blocked_msg = new InfoText("You have enabled the blocking feature for this user. This means the contents of your plan are unavailable to this user. Searching for your plan, quicklove, and planwatch are also disabled for this user. To unblock, use the button at the bottom of the page.");
$page->append($blocked_msg);
}
// Get the plan text
$plantext = $user->Plan->plan;
// Jumble it if requested
//if ($_GET['jumbled'] == 'yes' || ($_COOKIE['jumbled'] == 'yes' && $_GET['jumbled'] != 'no')) {
// $plantext = jumble($plantext);
//}
$plantext = new PlanText($plantext, false);
$thisplan = new PlanContent($user->username, $user->pseudo, strtotime($user->login), strtotime($user->changed), $plantext);
$page->append($thisplan);
}
$page->title = '[' . $user->username . "]'s Plan";
if (User::logged_in()) //if is a valid user, give them the option of putting the plan on their autoread list, or taking it off, and also if plan is on their autoread list, mark as read and mark time
{
if (!($searchnum == $idcookie)) //if person is not looking at their own plan, give them a small form to set the priority of the persons plan on their autoread list
{
if (!$this_user_is_blocking_you && !$is_blocking_this_user) {
$addform = new Form('autoreadadd', 'Set Priority');
$thisplan->addform = $addform;
$addform->action = "read.php?searchnum=$searchnum";
$addform->method = 'POST';
$item = new HiddenInput('addtolist', 1);
$addform->append($item);
$levels = new FormItemSet('readadd_levels', true);
$addform->append($levels);
for ($j = 0;$j < 4;$j++) {
$item = new RadioInput('privlevel', $j);
if ($j == 0) $item->description = 'X';
else $item->description = "$j";
$item->checked = ($myonlist == $item->description);
$levels->append($item);
}
$item = new SubmitInput('Set Priority');
$addform->append($item);
}
$blocking = new Form('block', 'User blocking options');
$page->append($blocking);
if ($is_blocking_this_user) {
$item = new HiddenInput('block_user', 0);
$blocking->append($item);
$item = new SubmitInput('Unblock this user');
$blocking->append($item);
$explanation = new InfoText("You have blocked [$user->username]. Blocking a user is one-directional. Searching for your plan, quicklove, and planwatch are also disabled for this user. <a href=\"/blocking-about.php\">See the FAQ for more information</a>.
<br /><br />If you wish to remove the block, select \"Unblock this user\".");
$page->append($explanation);
} else {
$item = new HiddenInput('block_user', 1);
$blocking->append($item);
$item = new SubmitInput('Block this user');
$blocking->append($item);
$explanation = new InfoText('Blocking a user is one-directional. Selecting "Block this user" renders the contents of your plan unavailable to this user. Searching for your plan, quicklove, and planwatch will also be disabled for this user. <a href="/blocking-about.php">See the FAQ for more information</a>.');
$page->append($explanation);
}
}
}
}
interface_disp_page($page);
db_disconnect($dbh);
?>