<?php
require "include/bittorrent.php";
dbconn();
require_once(get_langfile_path());
loggedinorreturn();
parked();

if (get_user_class() < $staffmem_class)
	permissiondenied();

$count = get_row_count("reports");
if (!$count) {
	stderr($lang_reports['std_oho'], $lang_reports['std_no_report']);
}
stdhead($lang_reports['head_reports']);
$perpage = 10;
list($pagertop, $pagerbottom, $limit) = pager($perpage, $count, "reports.php?");
begin_main_frame();
print("<h1 align=center>" . $lang_reports['text_reports'] . "</h1>");
print("<table border=1 cellspacing=0 cellpadding=5 align=center>\n");
print("<tr><td class=colhead><nobr>" . $lang_reports['col_added'] . "</nobr></td><td class=colhead>" . $lang_reports['col_reporter'] . "</td><td class=colhead>" . $lang_reports['col_reporting'] . "</td><td class=colhead>被举报者</td><td class=colhead><nobr>" . $lang_reports['col_type'] . "</nobr></td><td class=colhead>" . $lang_reports['col_reason'] . "</td><td class=colhead><nobr>" . $lang_reports['col_dealt_with'] . "</nobr></td><td class=colhead><nobr>回复</nobr></td><td class=colhead><nobr>" . $lang_reports['col_action'] . "</nobr></td>");

print("<form method=post action=takeupdate.php>");
$reportres = sql_query("SELECT * FROM reports ORDER BY dealtwith ASC, id DESC $limit");
while ($row = mysql_fetch_array($reportres)) {
	if ($row['dealtwith'])
		$dealtwith = "<font color=green>" . $lang_reports['text_yes'] . "</font> - " . get_username($row['dealtby']);
	else
		$dealtwith = "<font color=red>" . $lang_reports['text_no'] . "</font>";
	switch ($row['type']) {
		case "torrent": {
				$type = $lang_reports['text_torrent'];
				$res = sql_query("SELECT id, name, owner FROM torrents WHERE id=" . sqlesc($row['reportid']));
				if (mysql_num_rows($res) == 0)
					$reporting = $lang_reports['text_torrent_does_not_exist'];
				else {
					$arr = mysql_fetch_array($res);
					$reporting = "<a href=details.php?id=" . $arr['id'] . ">" . htmlspecialchars($arr['name']) . "</a>";
				}
				$reported = $arr['owner'];
				break;
			}
		case "user": {
				$type = $lang_reports['text_user'];
				$res = sql_query("SELECT id FROM users WHERE id=" . sqlesc($row['reportid']));
				if (mysql_num_rows($res) == 0)
					$reporting = $lang_reports['text_user_does_not_exist'];
				else {
					$arr = mysql_fetch_array($res);
					$reporting = get_username($arr['id']);
				}
				$reported = $arr['id'];
				break;
			}
		case "offer": {
				$type = $lang_reports['text_offer'];
				$res = sql_query("SELECT id, name FROM offers WHERE id=" . sqlesc($row['reportid']));
				if (mysql_num_rows($res) == 0)
					$reporting = $lang_reports['text_offer_does_not_exist'];
				else {
					$arr = mysql_fetch_array($res);
					$reporting = "<a href=\"offers.php?id=" . $arr[id] . "&off_details=1\">" . htmlspecialchars($arr['name']) . "</a>";
				}
				break;
			}

		case "request": {
				$type = '求种';
				$res = sql_query("SELECT id, name ,userid FROM req WHERE id=" . sqlesc($row['reportid']));
				if (mysql_num_rows($res) == 0)
					$reporting = $lang_reports['text_request_does_not_exist'];
				else {
					$arr = mysql_fetch_array($res);
					$reporting = "<a href=\"viewrequest.php?action=view&id=" . $arr[id] . "&req_details=1\">" . htmlspecialchars($arr['name']) . "</a>";
				}
				$reported = $arr['userid'];
				break;
			}

		case "post": {
				$type = $lang_reports['text_forum_post'];
				$res = sql_query("SELECT topics.id AS topicid, topics.subject AS subject, posts.userid AS postuserid FROM topics LEFT JOIN posts ON posts.topicid = topics.id WHERE posts.id=" . sqlesc($row['reportid']));
				if (mysql_num_rows($res) == 0)
					$reporting = $lang_reports['text_post_does_not_exist'];
				else {
					$arr = mysql_fetch_array($res);
					$reporting = $lang_reports['text_post_id'] . $row['reportid'] . $lang_reports['text_of_topic'] . "<b><a href=\"forums.php?action=viewtopic&topicid=" . $arr['topicid'] . "&page=p" . htmlspecialchars($row['reportid']) . "#pid" . htmlspecialchars($row['reportid']) . "\">" . htmlspecialchars($arr['subject']) . "</a></b>" . $lang_reports['text_by'] . get_username($arr['postuserid']);
				}
				$reported = $arr['postuserid'];
				break;
			}
		case "comment": {
				$type = $lang_reports['text_comment'];
				$res = sql_query("SELECT id, user, torrent, offer, request FROM comments WHERE id=" . sqlesc($row['reportid']));
				if (mysql_num_rows($res) == 0)
					$reporting = $lang_reports['text_comment_does_not_exist'];
				else {
					$arr = mysql_fetch_array($res);
					if ($arr['torrent']) {
						$name = get_single_value("torrents", "name", "WHERE id=" . sqlesc($arr['torrent']));
						$url = "details.php?id=" . $arr['torrent'] . "#cid" . $row['reportid'];
						$of = $lang_reports['text_of_torrent'];
					} elseif ($arr['offer']) {
						$name = get_single_value("offers", "name", "WHERE id=" . sqlesc($arr['offer']));
						$url = "offers.php?id=" . $arr['offer'] . "&off_details=1#cid" . $row['reportid'];
						$of = $lang_reports['text_of_offer'];
					} elseif ($arr['request']) {
						$name = get_single_value("req", "name", "WHERE id=" . sqlesc($arr['request']));
						$url = "viewrequest.php?action=view&id=" . $arr['request'] . "&req_details=1#cid" . $row['reportid'];
						$of = $lang_reports['text_of_request'];
					} else //Comment belongs to no one
						$of = "unknown";
					$reporting = $lang_reports['text_comment_id'] . $row['reportid'] . $of . "<b><a href=\"" . $url . "\">" . htmlspecialchars($name) . "</a></b>" . $lang_reports['text_by'] . get_username($arr['user']);
					$reported = $arr['user'];
				}
				break;
			}
		case "subtitle": {
				$type = $lang_reports['text_subtitle'];
				$res = sql_query("SELECT id, torrent_id, title, uppedby FROM subs WHERE id=" . sqlesc($row['reportid']));
				if (mysql_num_rows($res) == 0)
					$reporting = $lang_reports['text_subtitle_does_not_exist'];
				else {
					$arr = mysql_fetch_array($res);
					$reporting = "<a href=\"downloadsubs.php?torrentid=" . $arr['torrent_id'] . "&subid=" . $arr['id'] . "\">" . htmlspecialchars($arr['title']) . "</a>" . $lang_reports['text_for_torrent_id'] . "<a href=\"details.php?id=" . $arr['torrent_id'] . "\">" . $arr['torrent_id'] . "</a>";
				}
				$reported = $arr['uppedby'];
				break;
			}
		default: {
				break;
			}
	}

	print("<tr><td class=rowfollow><nobr>" . gettime($row['added']) . "</nobr></td><td class=rowfollow>" . get_username($row['addedby']) . "</td><td class=rowfollow>" . $reporting . "</td><td class=rowfollow><nobr>" . get_username($reported) . "</nobr></td><td class=rowfollow><nobr>" . $type . "</nobr></td><td class=rowfollow>" . htmlspecialchars($row['reason']) . "</td><td class=rowfollow><nobr>" . $dealtwith . "</nobr></td><td class=rowfollow><a href='sendmessage.php?receiver=$row[addedby]' target='_blank'>回复</a></td><td class=rowfollow><input type=\"checkbox\" name=\"delreport[]\" value=\"" . $row['id'] . "\" /></td></tr>\n");
	if ($row['reported'] == 0)
		sql_query("UPDATE reports SET reported = $reported WHERE id = " . $row['id']) or sqlerr(__FILE__, __LINE__);
}
?>
<tr><td class="colhead" colspan="10" align="right">设为已处理并改变<b style="color: red">举报者</b>的魔力值<input type="text" name="bonus" style="width: 50px" value="100" />以及<b style="color: red">被举报者</b><input type="text" name="bonus2" style="width: 50px" value="-100" />(填"0"为不奖励/扣除魔力值) <input type="submit" name="setdealt" value="<?= $lang_reports['submit_set_dealt'] ?>" /> <input type="submit" name="delete" value="<?= $lang_reports['submit_delete'] ?>" /></td></tr>
</form>
<?php
print("</table>");
print($pagerbottom);
end_main_frame();
stdfoot();