3096e63828
so it is explicit that we exit in those functions that so we know it isn't necessary to put an exit after we call them
68 lines
2.4 KiB
PHP
68 lines
2.4 KiB
PHP
<?php
|
|
/**
|
|
* Deletes a comment.
|
|
*
|
|
* Mandatory parameters:
|
|
* - iCommentId, comment identifier
|
|
*
|
|
* Optional parameters:
|
|
* - sWhy, reason for deleting the comment
|
|
* - iDeleteIt, 1 if the deletion has been confirmed
|
|
*/
|
|
|
|
// application environment
|
|
include("path.php");
|
|
require(BASE."include/incl.php");
|
|
require(BASE."include/application.php");
|
|
require(BASE."include/mail.php");
|
|
|
|
$aClean = array(); //array of filtered user input
|
|
|
|
$aClean['sWhy'] = makeSafe($_REQUEST['sWhy']);
|
|
$aClean['iCommentId'] = makeSafe($_REQUEST['iCommentId']);
|
|
$aClean['iDeleteIt'] = makeSafe($_REQUEST['iDeleteIt']);
|
|
|
|
$oComment = new Comment($aClean['iCommentId']);
|
|
|
|
/**
|
|
* if we aren't an admin or the maintainer of this app we shouldn't be
|
|
* allowed to delete any comments
|
|
*/
|
|
if (!$_SESSION['current']->hasPriv("admin")
|
|
&& !$_SESSION['current']->isMaintainer($oComment->iVersionId)
|
|
&& !$_SESSION['current']->isSuperMaintainer($oComment->iAppId))
|
|
{
|
|
util_show_error_page_and_exit("You don't have sufficient privileges to delete this comment.");
|
|
}
|
|
|
|
// let's show the deletion form if the user want's to explain why he deleted the comment
|
|
if($_SESSION['current']->getPref("confirm_comment_deletion") != "no" && !isset($aClean['iDeleteIt']))
|
|
{
|
|
apidb_header("Delete Comment");
|
|
$sMessageTitle = "<b>Please state why you are deleting the following comment</b>";
|
|
echo "<form method=\"post\" action=\"".$_SERVER['PHP_SELF']."\">\n";
|
|
echo html_frame_start($sMessageTitle,500,"",0);
|
|
echo "<br />";
|
|
echo html_frame_start($oComment->sSubject,500);
|
|
echo htmlify_urls($oComment->sBody), "<br /><br />\n";
|
|
echo html_frame_end();
|
|
echo '<table width="100%" border=0 cellpadding=0 cellspacing=1>',"\n";
|
|
echo "<tr class=color1><td colspan=2><textarea name=\"sWhy\" cols=\"70\" rows=\"15\" wrap=\"virtual\"></textarea></td></tr>\n";
|
|
echo "<tr class=color1><td colspan=2 align=center>\n";
|
|
echo " <input type=\"submit\" value=\"Delete Comment\" class=\"button\" />\n";
|
|
echo "</td></tr>\n";
|
|
echo "</table>\n";
|
|
echo html_frame_end();
|
|
echo "<input type=\"hidden\" name=\"iDeleteIt\" value=\"1\" />\n";
|
|
echo "<input type=\"hidden\" name=\"iCommentId\" value=\"".$oComment->iCommentId."\" />";
|
|
echo "</form>";
|
|
|
|
apidb_footer();
|
|
// otherwise, just delete the comment
|
|
} else
|
|
{
|
|
$oComment->delete($aClean['sWhy']);
|
|
util_redirect_and_exit(apidb_fullurl("appview.php?iVersionId=".$oComment->iVersionId));
|
|
}
|
|
?>
|