bashclub/piler
1
0
Fork 0
mirror of https://bitbucket.org/jsuto/piler.git synced 2025-06-13 01:37:02 +02:00
Code Issues Packages Projects Releases Wiki Activity

prototype of message removal

Browse Source 
Signed-off-by: Janos SUTO <sj@acts.hu>
This commit is contained in:
Janos SUTO
2019-07-16 21:31:48 +02:00
parent ea3b0c372b
commit 4b2eefb712
4 changed files with 76 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

51
webui/controller/message/remove.php Normal file
View File

@ -0,0 +1,51 @@
<?php
class ControllerMessageRemove extends Controller {
public function index(){
$this->id = "content";
$this->template = "message/bulkremove.tpl";
$this->layout = "common/layout-empty";
$session = Registry::get('session');
$request = Registry::get('request');
$db = Registry::get('db');
$this->load->model('search/search');
$this->load->model('search/message');
$this->load->model('user/user');
$this->document->title = $this->data['text_message'];
if(!isset($this->request->get['id']) || $this->request->get['id'] == '') { die("no id parameter given"); }
if(!isset($this->request->get['confirmed']) || $this->request->get['confirmed'] != 1) { die("not confirmed"); }
$id = (int)$this->request->get['id'];
// FIXME: For the moment data officer has no permission to see the message
if(!$this->model_search_search->check_your_permission_by_id($id)) {
die("no permission for $id");
}
$this->data['username'] = Registry::get('username');
if(Registry::get('data_officer') == 0) {
die("go away");
}
// Shouldn't we ask for a token or something as well?
AUDIT(ACTION_REMOVE_MESSAGE, '', '', $id, '');
$db->query("UPDATE " . TABLE_META . " SET retained=? WHERE id=?", [NOW, $id]);
$db->query("UPDATE " . TABLE_DELETED . " SET deleted=1 WHERE id=?", [$id]);
syslog(LOG_INFO, $this->data['username'] . " removed message: $id");
$this->data['x'] = $this->data['text_successfully_removed'];
$this->render();
}
}