isSpecialUser(S_MODERATOR)) { // Can't moderate without being moderator error_page("You are not authorized to moderate this post."); } // See if "action" is provided - either through post or get if (!post_str('action', true)) { if (!get_str('action', true)){ error_page("You must specify an action..."); } else { $action = get_str('action'); } } else { $action = post_str('action'); } $post = new Post(get_int('id')); $thread = $post->getThread(); if ($action=="hide"){ $result = $post->hide(); if ($thread->getPostCount() == 0) { $result = $thread->hide(); } } elseif ($action=="unhide"){ $result = $post->unhide(); } elseif ($action=="move"){ $destination_thread = new Thread(post_int('threadid')); $result = $post->move($destination_thread); if ($thread->getPostCount() == 0) { $thread->hide(); } } elseif ($action=="banish_user"){ if (!$user->isSpecialUser(S_ADMIN)) { // Can't banish without being administrator error_page("You are not authorized to banish this user."); } $userid = get_int('userid'); $user = newUser($userid); if (!$user) { error_page("no user"); } $t = time() + 14*86400; // two weeks $query = "update forum_preferences set banished_until=$t where userid=$userid"; $result = mysql_query($query); if ($result) { echo "User $user->name has been banished for 2 weeks."; send_banish_email($user); } else { echo "DB failure for $query"; echo mysql_error(); } page_tail(); exit(); } else { error_page("Unknown action "); } if ($result) { if (post_str('reason', true)){ send_moderation_email($post, post_str("reason")); } header('Location: forum_thread.php?id='.$thread->getID()); } else { error_page("Moderation failed"); } ?>