safe_mode = true; if( $action == "mass_approve" ) { if( $_REQUEST['user_hash'] == "" or $_REQUEST['user_hash'] != $dle_login_hash ) { die( "Hacking attempt! User not found" ); } if( $config['allow_comments_wysiwyg'] == "yes" ) { $parse->wysiwyg = true; $use_html = true; $parse->ParseFilter( Array ('div', 'a', 'span', 'p', 'br' ), Array (), 0, 1 ); } else $use_html = false; if( ! $_POST['selected_comments'] ) { msg( "error", $lang['mass_error'], $lang['mass_acomm'], "?mod=cmoderation" ); } foreach ( $_POST['selected_comments'] as $c_id ) { $c_id = intval( $c_id ); $comments = $db->safesql( $parse->BB_Parse( $parse->process( $_POST['selected_text'][$c_id] ), $use_html ) ); $post_id = intval( $_POST['post_id'][$c_id] ); $db->query( "UPDATE " . PREFIX . "_comments set text='{$comments}', approve='1' WHERE id='{$c_id}'" ); $db->query( "UPDATE " . PREFIX . "_post set comm_num=comm_num+1 WHERE id='{$post_id}'" ); } clear_cache(); msg( "info", $lang['mass_head'], $lang['mass_approve_ok'], "?mod=cmoderation" ); } if( $action == "mass_delete" ) { if( $_REQUEST['user_hash'] == "" or $_REQUEST['user_hash'] != $dle_login_hash ) { die( "Hacking attempt! User not found" ); } if( ! $_POST['selected_comments'] ) { msg( "error", $lang['mass_error'], $lang['mass_dcomm'], "?mod=cmoderation" ); } foreach ( $_POST['selected_comments'] as $c_id ) { $c_id = intval( $c_id ); $row = $db->super_query( "SELECT user_id FROM " . PREFIX . "_comments WHERE id='$c_id'" ); if( $row['user_id'] ) $db->query( "UPDATE " . USERPREFIX . "_users set comm_num=comm_num-1 where user_id='{$row['user_id']}'" ); $db->query( "DELETE FROM " . PREFIX . "_comments WHERE id='$c_id'" ); } clear_cache(); msg( "info", $lang['mass_head'], $lang['mass_delokc'], "?mod=cmoderation" ); } $js_array[] = "engine/classes/js/dle_ajax.js"; echoheader( "", "" ); $entries = ""; $db->query( "SELECT " . PREFIX . "_comments.id, post_id, " . PREFIX . "_comments.autor, text, ip , " . PREFIX . "_post.title, " . PREFIX . "_post.date as newsdate, " . PREFIX . "_post.alt_name, " . PREFIX . "_post.category, " . PREFIX . "_post.flag FROM " . PREFIX . "_comments LEFT JOIN " . PREFIX . "_post ON " . PREFIX . "_comments.post_id=" . PREFIX . "_post.id WHERE " . PREFIX . "_comments.approve = '0' ORDER BY " . PREFIX . "_comments.date DESC" ); while ( $row = $db->get_array() ) { if( $config['allow_comments_wysiwyg'] == "yes" ) { $row['text'] = $parse->decodeBBCodes( $row['text'] ); } else $row['text'] = $parse->decodeBBCodes( $row['text'], false ); $row['text'] = ""; $row['newsdate'] = strtotime( $row['newsdate'] ); if( $config['allow_alt_url'] == "yes" ) { if( $row['flag'] and $config['seo_type'] ) { if( intval( $row['category'] ) and $config['seo_type'] == 2 ) { $full_link = $config['http_home_url'] . get_url( intval( $row['category'] ) ) . "/" . $row['post_id'] . "-" . $row['alt_name'] . ".html"; } else { $full_link = $config['http_home_url'] . $row['post_id'] . "-" . $row['alt_name'] . ".html"; } } else { $full_link = $config['http_home_url'] . date( 'Y/m/d/', $row['newsdate'] ) . $row['alt_name'] . ".html"; } } else { $full_link = $config['http_home_url'] . "index.php?newsid=" . $row['post_id']; } $news_title = "" . stripslashes( $row['title'] ) . ""; $entries .= ""; $entries .= ""; $entries .= ""; $entries .= ""; $entries .= ""; $entries .= "

" . stripslashes( $row['autor'] ) . "	" . stripslashes( $row['ip'] ) . "	{$lang['cmod_n_title']} {$news_title} " . $row['text'] . "

"; } $db->free(); echo << HTML; echofooter(); ?>