root/trunk/plog-admin/plog-feedback.php

<?php
// load configuration variables from database, plog-globals, & plog-includes/plog-functions
require_once(dirname(dirname(__FILE__))."/plog-load-config.php");
require(PLOGGER_DIR."plog-admin/plog-admin.php");

global $inHead;

$inHead = '<script type="text/javascript" src="'.$config['gallery_url'].'plog-admin/js/ajax_editing.js"></script>';

$output = "\n\t" . '<h1>'. plog_tr("Manage Feedback") . '</h1>' . "\n";

if (isset($_REQUEST['action'])) {
    if ($_REQUEST['action'] == "approve-delete") {
        // here we will determine if we need to perform an approved or delete action.
        $num_items = 0;

        // perform the delete function on the selected items
        if (isset($_REQUEST['delete_checked'])) {
            if (isset($_REQUEST['selected'])) {
                foreach($_REQUEST['selected'] as $del_id) {
                    // lets build the query string
                    $del_id = intval($del_id);

                    $query = "DELETE FROM ".TABLE_PREFIX."comments WHERE `id`= '".$del_id."'";
                    $result = run_query($query);

                    $num_items++;
                }

                $output .= "\n\t".'<p class="actions">'.sprintf(plog_tr('You have deleted %d comment(s) successfully.'),$num_items).'</p>';

            } else{
                $output .= "\n\t".'<p class="errors">'.plog_tr('Nothing selected to delete!').'</p>';
            }
        } else if (isset($_REQUEST['approve_checked'])) {
            // set the approval bit to 1 for all selected comments

            if (isset($_REQUEST['selected'])) {
                foreach($_REQUEST['selected'] as $appr_id) {
                    // lets build the query string
                    $appr_id = intval($appr_id);

                    $query = "UPDATE ".TABLE_PREFIX."comments SET `approved` = 1 WHERE `id`= '".$appr_id."'";
                    $result = run_query($query);

                    $num_items++;
                }

                $output .= "\n\t<p class=\"actions\">" . sprintf(plog_tr('You have approved %d comment(s) successfully.'),$num_items) . "</p>";
            } else {
                $output .= "\n\t<p class=\"errors\">". plog_tr('Nothing selected to approve!') . "</p>";
            }
        }
    } else if ($_REQUEST['action'] == "edit-comment") {
        // show the edit form
        $output .= plog_edit_comment_form($_REQUEST['pid']);
        $edit_page = 1;
    } else if ($_REQUEST['action'] == "update-comment") {
        if (!isset($_REQUEST['cancel'])) {
            // update comment in database
            $result = update_comment($_POST['pid'],$_POST['author'],$_POST['email'],$_POST['url'],$_POST['comment']);
            if (isset($result['errors'])) {
                $output .= "\n\t" . '<p class="errors">' . $result['errors'] . '</p>';
            } else if (isset($result['output'])) {
                $output .= "\n\t" . '<p class="actions">' . $result['output'] . '</p>';
            }
        }
    }
}

if (!isset($edit_page)) {
    // lets iterate through all the content and build a table
    // set the default level if nothing is specified

    // handle pagination
    // lets determine the limit filter based on current page and number of results per page
    if (isset($_REQUEST['entries_per_page'])) {
        $_SESSION['entries_per_page'] = $_REQUEST['entries_per_page'];
    } else if (!isset($_SESSION['entries_per_page'])){
        $_SESSION['entries_per_page'] = 20;
    }

    $plog_page = isset($_REQUEST['plog_page']) ? $_REQUEST['plog_page'] : 1; // default to the first page

    $first_item = ($plog_page - 1) * $_SESSION['entries_per_page'];
    if ($first_item < 0) {
        $first_item = 0;
    }
    $limit = "LIMIT ".$first_item.", ".$_SESSION['entries_per_page'];

    // lets generate the pagination menu as well
    $recordCount = "SELECT count(*) AS num_comments FROM ".TABLE_PREFIX."comments WHERE `approved` = 1";
    $totalRowsResult = mysql_query($recordCount);
    $num_comments = mysql_result($totalRowsResult,"num_comments");

    $query = "SELECT COUNT(*) as in_moderation from ".TABLE_PREFIX."comments WHERE `approved` = 0";
    $mod_result = run_query($query);
    $num_comments_im = mysql_result($mod_result, "in_moderation");

    // filter based on whether were looking at approved comments or unmoderated comments
    if (isset($_REQUEST['moderate']) && $_REQUEST['moderate'] == 1) {
        $approved = 0;
        $moderate = 1;
    } else {
        $approved = 1;
        $moderate = 0;
    }
    $output .= "\n\t\t" . '<form id="contentList" action="'.$_SERVER['PHP_SELF'].'?moderate='.$moderate.'" method="post">';

    if ($approved) {
        $pagination_menu = generate_pagination("admin", "feedback", $plog_page, $num_comments, $_SESSION['entries_per_page']);
    } else {
        $pagination_menu = generate_pagination("admin", "feedback", $plog_page, $num_comments_im, $_SESSION['entries_per_page'], array("moderate" => 1));
    }
    $pagination_menu = "\n\t\t" . '<div class="pagination">'.$pagination_menu.'</div>';

    // generate javascript init function for ajax editing
    $query = "SELECT *, UNIX_TIMESTAMP(`date`) AS `unix_date` from ".TABLE_PREFIX."comments WHERE `approved` = ".$approved." ORDER BY `id` DESC ".$limit;
    $result = run_query($query);

    if (mysql_num_rows($result) > 0) {
        $output .= "\n\t\t" . '<script type="text/javascript">';
        $output .= "\n\t\t\tEvent.observe(window, 'load', init, false);";
        $output .= "\n\t\t\tfunction init() {";

        while($row = mysql_fetch_assoc($result)) {
            $output .= "\n\t\t\tmakeEditable('comment-comment-".$row['id']."');
                makeEditable('comment-author-".$row['id']."');
                makeEditable('comment-url-".$row['id']."');
                makeEditable('comment-email-".$row['id']."');";
        }

        $output .= "\n\t\t\t}";
        $output .= "\n\t\t</script>";
    }

    $query = "SELECT *, UNIX_TIMESTAMP(`date`) AS `unix_date` from ".TABLE_PREFIX."comments WHERE `approved` = ".$approved." ORDER BY `id` DESC ".$limit;
    $result = run_query($query);

    $empty = 0;
    $allowedCommentKeys = array("unix_date", "author", "email", "url", "comment");
    if ($result) {
        if (mysql_num_rows($result) == 0) {
            if ($approved) {
                $output .= "\n\t\t" . '<p class="actions">' . plog_tr('You have no user comments on your gallery.') . '</p>';
            } else {
                $output .= "\n\t\t" . '<p class="actions">' . plog_tr('You have no comments waiting for approval.') . '</p>';
            }
            $empty = 1;
        }
        if ($approved) {
            if ($num_comments_im > 0) {
                $output.= "\n\t\t" . '<p class="actions">' . sprintf(plog_tr('You have %d comment(s) waiting for approval.'),$num_comments_im) . ' <a href="plog-feedback.php?moderate=1">' . plog_tr('Click here') . '</a> to review and approve/delete the moderated comment(s).</p>';
            }
        }

        $counter = 0;
        $allowedCommentKeys = array("unix_date", "author", "email", "url", "comment");

                $output .= "\n\n\t\t" . '<div class="entries-page">'.generate_pagination_view_menu().'
        </div>' . "\n";

                if (!$empty) { $output .= $pagination_menu; }

        while($row = mysql_fetch_assoc($result)) {
            // if we're on our first iteration, dump the header
            if ($counter == 0) {
                if ($approved) {

                    $output .= "\n\n\t\t" . '<div id="comment-count">' . sprintf(plog_tr('You have <strong>%d</strong> user comment(s).'),$num_comments) . '</div>';

                } else {

                    $output .= "\n\n\t\t" . '<div id="comment-count">' . sprintf(plog_tr('You have <strong>%d</strong> user comment(s) awaiting approval.'),$num_comments_im) . '</div>';

                }

                $output .= "\n\n\t\t" . '<table style="width: 100%;" cellpadding="4">
            <tr class="header">
                <th class="table-header-left"></th>
                <th class="table-header-middle">' . plog_tr('Thumb') . '</th>';

                foreach ($row as $name => $value) {
                    if (in_array($name, $allowedCommentKeys)) { 
                        $output .= "\n\t\t\t\t<th class=\"table-header-middle\">". plog_tr(ucfirst($name)) ."</th>";
                    }
                }

                $output .= "\n\t\t\t\t" . '<th class="table-header-right">' . plog_tr('Actions') . '</th>
            </tr>';
            }

            if ($counter%2 == 0) {
                $table_row_color = "color-1";
            } else {
                $table_row_color = "color-2";
            }

            // start a new table row (alternating colors)
            $output .= "\n\t\t\t".'<tr class="'.$table_row_color.'">';

            // give the row a checkbox
            $output .= "\n\t\t\t\t" . '<td><input type="checkbox" name="selected[]" value="'.$row['id'].'" /></td>';

            // give the row a thumbnail, we need to look up the parent picture for the comment
            $picture = get_picture_by_id($row['parent_id']);
            $thumbpath = generate_thumb($picture['path'], $picture['id'], THUMB_SMALL);

            // generate XHTML with thumbnail and link to picture view.
            $imgtag = '<img src="'.$thumbpath.'" title="'.$picture['caption'].'" alt="'.$picture['caption'].'" />';
            $output .= "\n\t\t\t\t" . '<td><div class="img-shadow"><a href="'.generate_thumb($picture['path'], $picture['id'], THUMB_LARGE).'" rel="lightbox" title="'.plogger_get_picture_caption().'">'.$imgtag.'</a></div></td>';

            foreach ($row as $key => $value) {
                $value = SmartStripSlashes(htmlspecialchars($value));
                if ($value == '') {
                    $value = '&nbsp;';
                }

                if ($key == "unix_date") {
                    $output .= "\n\t\t\t\t" . '<td>'.date($config['date_format'], $value).'</td>';
                } else if ($key == "allow_comments") {
                    if ($value) {
                        $output .= "\n\t\t\t\t<td>". plog_tr('Yes') . "</td>";
                    } else {
                        $output .= "\n\t\t\t\t<td>" . plog_tr('No') . "</td>";
                    }
                }
                //else if ($key == "ip") {
                //    $output .= "<td>" . @gethostbyaddr($value) . "</td>";
                //}
                else {
                    if (in_array($key, $allowedCommentKeys))
                            $output .= "\n\t\t\t\t".'<td><p id="comment-'.$key.'-'.$row['id'].'">'.$value.'</p></td>';
                }
            }

            // $output .= our actions panel
            $query = "?action=edit-comment&amp;pid=$row[id]";
            $output .= "\n\t\t\t\t" . '<td>
                    <div style="text-align: center;">
                        <a href="'.$_SERVER['PHP_SELF'].$query.'&amp;entries_per_page='.$_SESSION['entries_per_page'].'&amp;moderate='.$moderate.'"><img src="'.$config['gallery_url'].'plog-admin/images/edit.gif" alt="'.plog_tr('Edit').'" title="'.plog_tr('Edit').'" /></a>
                        &nbsp;&nbsp;<a href="'.$_SERVER['PHP_SELF'].'?action=approve-delete&amp;delete_checked=1&amp;selected[]='.$row['id'].'&amp;moderate='.$moderate.'" onclick="return confirm(\'' . plog_tr('Are you sure you want to delete this comment?') . '\');"><img src="'.$config['gallery_url'].'plog-admin/images/x.gif" alt="'.plog_tr('Delete').'" title="'.plog_tr('Delete').'" /></a>';

            if (!$approved){
                $output .= "\n\t\t\t\t\t\t".'&nbsp;&nbsp;<a href="'.$_SERVER['PHP_SELF'].'?action=approve-delete&amp;approve_checked=1&amp;selected[]='.$row['id'].'&amp;moderate=1" onclick="return confirm(\''.plog_tr('Are you sure you want to approve this comment?').'\');"><img src="'.$config['gallery_url'].'plog-admin/images/new_file.gif" alt="'.plog_tr('Approve').'" title="'.plog_tr('Approve').'" /></a>';
            }

            $output .= "\n\t\t\t\t\t</div>\n\t\t\t\t</td>\n\t\t\t</tr>";
            $counter++;
        }

        if ($counter > 0) {
            $output .= "\n\t\t\t" . '<tr class="footer">
                <td colspan="9"></td>
            </tr>
        </table>';
        }
    }

    if (!$empty) {
        $output .= "\n\n\t\t" . '<div class="invert-selection"><a href="#" onclick="checkAll(document.getElementById(\'contentList\')); return false;">' . plog_tr('Invert Checkbox Selection') . '</a></div>
            '.$pagination_menu;
    }

    $output .= "\n\n\t\t" . '<div>
            <input type="hidden" name="action" value="approve-delete" />
            <input class="submit" type="submit" name="delete_checked" onclick="return confirm(\''. plog_tr('Are you sure you want to delete the selected comments?') . '\');" value="' . plog_tr('Delete Checked') . '" />';

    if (!$approved) {
        $output .= "\n\t\t\t" . '<input class="submit" type="submit" name="approve_checked" onclick="return confirm(\'' . plog_tr('Are you sure you want to approve the selected comments?') . '\');" value="' . plog_tr('Approve Checked') . '" />';
    }

    $output .= "\n\t\t" . '</div>' . "\n\t\t" . '</form>'. "\n";
}

display($output, "feedback");

?>