lkddi/nexusphp
1
0
Fork 0
mirror of https://github.com/lkddi/nexusphp.git synced 2026-04-05 07:20:58 +08:00
Code Issues Packages Projects Releases Wiki Activity
Files
c074b1e1ed8a1ef3a1d2edb3331e45e736a5aa8b
nexusphp/public/modtask.php

355 lines
19 KiB
PHP
Raw Normal View History

init
2020-12-26 01:42:23 +08:00
<?php
add composer
2021-01-13 19:32:26 +08:00
require "../include/bittorrent.php";
init
2020-12-26 01:42:23 +08:00
dbconn();
require(get_langfile_path("",true));
loggedinorreturn();
function puke()
{
$msg = "User ".$CURUSER["username"]." (id: ".$CURUSER["id"].") is hacking user's profile. IP : ".getip();
write_log($msg,'mod');
stderr("Error", "Permission denied. For security reason, we logged this action");
}
if (get_user_class() < $prfmanage_class)
puke();
$action = $_POST["action"];
if ($action == "confirmuser")
{
$userid = $_POST["userid"];
$confirm = $_POST["confirm"];
sql_query('UPDATE `users` SET `status` = \''.mysql_real_escape_string($confirm).'\', `info` = NULL WHERE `id` = '.mysql_real_escape_string($userid).' LIMIT 1;') or sqlerr(__FILE__, __LINE__);
header("Location: " . get_protocol_prefix() . "$BASEURL/unco.php?status=1");
die;
}
if ($action == "edituser")
{
$userid = $_POST["userid"];
admin add downloadpos manage
2022-07-23 23:35:43 +08:00
$userInfo = \App\Models\User::query()->findOrFail($userid, ['id', 'passkey']);
recover some $_GET & $POST variable keep be integer
2021-01-06 00:56:13 +08:00
$class = intval($_POST["class"] ?? 0);
init
2020-12-26 01:42:23 +08:00
$vip_added = ($_POST["vip_added"] == 'yes' ? 'yes' : 'no');
admin add claim
2022-07-02 15:08:23 +08:00
$vip_until = !empty($_POST["vip_until"]) ? $_POST['vip_until'] : null;
user ban log
2021-05-12 13:45:00 +08:00
fixed modtask.php
2021-02-26 15:18:53 +08:00
$warned = $_POST["warned"] ?? '';
recover some $_GET & $POST variable keep be integer
2021-01-06 00:56:13 +08:00
$warnlength = intval($_POST["warnlength"] ?? 0);
init
2020-12-26 01:42:23 +08:00
$warnpm = $_POST["warnpm"];
$title = $_POST["title"];
$avatar = $_POST["avatar"];
$signature = $_POST["signature"];
$enabled = $_POST["enabled"];
$uploadpos = $_POST["uploadpos"];
$downloadpos = $_POST["downloadpos"];
$noad = $_POST["noad"];
$noaduntil = $_POST["noaduntil"];
$privacy = $_POST["privacy"];
$forumpost = $_POST["forumpost"];
$chpassword = $_POST["chpassword"];
$passagain = $_POST["passagain"];
user ban log
2021-05-12 13:45:00 +08:00
init
2020-12-26 01:42:23 +08:00
$supportlang = $_POST["supportlang"];
$support = $_POST["support"];
user ban log
2021-05-12 13:45:00 +08:00
$supportfor = $_POST["supportfor"];
init
2020-12-26 01:42:23 +08:00
$moviepicker = $_POST["moviepicker"];
$pickfor = $_POST["pickfor"];
$stafffor = $_POST["staffduties"];
user ban log
2021-05-12 13:45:00 +08:00
init
2020-12-26 01:42:23 +08:00
if (!is_valid_id($userid) || !is_valid_user_class($class))
stderr("Error", "Bad user ID or class ID.");
if (get_user_class() <= $class)
stderr("Error", "You have no permission to change user's class to ".get_user_class_name($class,false,false,true).". BTW, how do you get here?");
$res = sql_query("SELECT * FROM users WHERE id = ".sqlesc($userid)) or sqlerr(__FILE__, __LINE__);
$arr = mysql_fetch_assoc($res) or puke();
user ban log
2021-05-12 13:45:00 +08:00
$user = \App\Models\User::query()->findOrFail($userid);
init
2020-12-26 01:42:23 +08:00
$curenabled = $arr["enabled"];
$curparked = $arr["parked"];
$curuploadpos = $arr["uploadpos"];
$curdownloadpos = $arr["downloadpos"];
$curforumpost = $arr["forumpost"];
$curclass = $arr["class"];
$curwarned = $arr["warned"];
user ban log
2021-05-12 13:45:00 +08:00
init
2020-12-26 01:42:23 +08:00
$updateset[] = "stafffor = " . sqlesc($stafffor);
$updateset[] = "pickfor = " . sqlesc($pickfor);
$updateset[] = "picker = " . sqlesc($moviepicker);
finish plugin: sticky promotion
2022-06-08 14:15:59 +08:00
$updateset[] = "enabled = " . sqlesc($enabled);
init
2020-12-26 01:42:23 +08:00
$updateset[] = "uploadpos = " . sqlesc($uploadpos);
$updateset[] = "downloadpos = " . sqlesc($downloadpos);
$updateset[] = "forumpost = " . sqlesc($forumpost);
$updateset[] = "avatar = " . sqlesc($avatar);
$updateset[] = "signature = " . sqlesc($signature);
$updateset[] = "title = " . sqlesc($title);
$updateset[] = "support = " . sqlesc($support);
$updateset[] = "supportfor = " . sqlesc($supportfor);
$updateset[] = "supportlang = ".sqlesc($supportlang);
user ban log
2021-05-12 13:45:00 +08:00
$banLog = [];
fixed modtask.php
2021-02-26 15:18:53 +08:00
if(get_user_class()<=$cruprfmanage_class)
init
2020-12-26 01:42:23 +08:00
{
$modcomment = $arr["modcomment"];
}
if(get_user_class() >= $cruprfmanage_class)
{
$email = $_POST["email"];
$username = $_POST["username"];
$modcomment = $_POST["modcomment"];
$downloaded = $_POST["downloaded"];
$ori_downloaded = $_POST["ori_downloaded"];
$uploaded = $_POST["uploaded"];
$ori_uploaded = $_POST["ori_uploaded"];
$bonus = $_POST["bonus"];
$ori_bonus = $_POST["ori_bonus"];
$invites = $_POST["invites"];
$added = sqlesc(date("Y-m-d H:i:s"));
if ($arr['email'] != $email){
$updateset[] = "email = " . sqlesc($email);
fix modtask.php
2021-02-27 13:27:08 +08:00
$modcomment = date("Y-m-d") . " - Email changed from $arr[email] to $email by {$CURUSER['username']}.\n". $modcomment;
init
2020-12-26 01:42:23 +08:00
$subject = sqlesc($lang_modtask_target[get_user_lang($userid)]['msg_email_change']);
fix modtask.php
2021-02-27 13:27:08 +08:00
$msg = sqlesc($lang_modtask_target[get_user_lang($userid)]['msg_your_email_changed_from'].$arr['email'].$lang_modtask_target[get_user_lang($userid)]['msg_to_new'] . $email .$lang_modtask_target[get_user_lang($userid)]['msg_by'].$CURUSER['username']);
init
2020-12-26 01:42:23 +08:00
sql_query("INSERT INTO messages (sender, receiver, subject, msg, added) VALUES(0, $userid, $subject, $msg, $added)") or sqlerr(__FILE__, __LINE__);
}
if ($arr['username'] != $username){
$updateset[] = "username = " . sqlesc($username);
fix modtask.php
2021-02-27 13:27:08 +08:00
$modcomment = date("Y-m-d") . " - Usernmae changed from $arr[username] to $username by {$CURUSER['username']}.\n". $modcomment;
init
2020-12-26 01:42:23 +08:00
$subject = sqlesc($lang_modtask_target[get_user_lang($userid)]['msg_username_change']);
fix modtask.php
2021-02-27 13:27:08 +08:00
$msg = sqlesc($lang_modtask_target[get_user_lang($userid)]['msg_your_username_changed_from'].$arr['username'].$lang_modtask_target[get_user_lang($userid)]['msg_to_new'] . $username .$lang_modtask_target[get_user_lang($userid)]['msg_by'].$CURUSER['username']);
init
2020-12-26 01:42:23 +08:00
sql_query("INSERT INTO messages (sender, receiver, subject, msg, added) VALUES(0, $userid, $subject, $msg, $added)") or sqlerr(__FILE__, __LINE__);
}
finish plugin: sticky promotion
2022-06-08 14:15:59 +08:00
if ($ori_downloaded != $downloaded){
$updateset[] = "downloaded = " . sqlesc($downloaded);
$modcomment = date("Y-m-d") . " - Downloaded amount changed from $arr[downloaded] to $downloaded by {$CURUSER['username']}.\n". $modcomment;
$subject = sqlesc($lang_modtask_target[get_user_lang($userid)]['msg_downloaded_change']);
$msg = sqlesc($lang_modtask_target[get_user_lang($userid)]['msg_your_downloaded_changed_from'].mksize($arr['downloaded']).$lang_modtask_target[get_user_lang($userid)]['msg_to_new'] . mksize($downloaded) .$lang_modtask_target[get_user_lang($userid)]['msg_by'].$CURUSER['username']);
sql_query("INSERT INTO messages (sender, receiver, subject, msg, added) VALUES(0, $userid, $subject, $msg, $added)") or sqlerr(__FILE__, __LINE__);
}
if ($ori_uploaded != $uploaded){
$updateset[] = "uploaded = " . sqlesc($uploaded);
$modcomment = date("Y-m-d") . " - Uploaded amount changed from $arr[uploaded] to $uploaded by {$CURUSER['username']}.\n". $modcomment;
$subject = sqlesc($lang_modtask_target[get_user_lang($userid)]['msg_uploaded_change']);
$msg = sqlesc($lang_modtask_target[get_user_lang($userid)]['msg_your_uploaded_changed_from'].mksize($arr['uploaded']).$lang_modtask_target[get_user_lang($userid)]['msg_to_new'] . mksize($uploaded) .$lang_modtask_target[get_user_lang($userid)]['msg_by'].$CURUSER['username']);
sql_query("INSERT INTO messages (sender, receiver, subject, msg, added) VALUES(0, $userid, $subject, $msg, $added)") or sqlerr(__FILE__, __LINE__);
}
if ($ori_bonus != $bonus){
$updateset[] = "seedbonus = " . sqlesc($bonus);
$modcomment = date("Y-m-d") . " - Bonus amount changed from $arr[seedbonus] to $bonus by {$CURUSER['username']}.\n". $modcomment;
$subject = sqlesc($lang_modtask_target[get_user_lang($userid)]['msg_bonus_change']);
$msg = sqlesc($lang_modtask_target[get_user_lang($userid)]['msg_your_bonus_changed_from'].$arr['seedbonus'].$lang_modtask_target[get_user_lang($userid)]['msg_to_new'] . $bonus .$lang_modtask_target[get_user_lang($userid)]['msg_by'].$CURUSER['username']);
sql_query("INSERT INTO messages (sender, receiver, subject, msg, added) VALUES(0, $userid, $subject, $msg, $added)") or sqlerr(__FILE__, __LINE__);
}
if ($arr['invites'] != $invites){
$updateset[] = "invites = " . sqlesc($invites);
$modcomment = date("Y-m-d") . " - Invite amount changed from $arr[invites] to $invites by {$CURUSER['username']}.\n". $modcomment;
$subject = sqlesc($lang_modtask_target[get_user_lang($userid)]['msg_invite_change']);
$msg = sqlesc($lang_modtask_target[get_user_lang($userid)]['msg_your_invite_changed_from'].$arr['invites'].$lang_modtask_target[get_user_lang($userid)]['msg_to_new'] . $invites .$lang_modtask_target[get_user_lang($userid)]['msg_by'].$CURUSER['username']);
sql_query("INSERT INTO messages (sender, receiver, subject, msg, added) VALUES(0, $userid, $subject, $msg, $added)") or sqlerr(__FILE__, __LINE__);
}
init
2020-12-26 01:42:23 +08:00
}
if(get_user_class() == UC_STAFFLEADER)
{
$donor = $_POST["donor"];
$donated = $_POST["donated"];
$donated_cny = $_POST["donated_cny"];
$this_donated_usd = $donated - $arr["donated"];
$this_donated_cny = $donated_cny - $arr["donated_cny"];
$memo = sqlesc(htmlspecialchars($_POST["donation_memo"]));
user ban log
2021-05-12 13:45:00 +08:00
fixed modtask.php
2021-02-26 15:23:00 +08:00
if ($donated != $arr['donated'] || $donated_cny != $arr['donated_cny']) {
init
2020-12-26 01:42:23 +08:00
$added = sqlesc(date("Y-m-d H:i:s"));
sql_query("INSERT INTO funds (usd, cny, user, added, memo) VALUES ($this_donated_usd, $this_donated_cny, $userid, $added, $memo)") or sqlerr(__FILE__, __LINE__);
$updateset[] = "donated = " . sqlesc($donated);
$updateset[] = "donated_cny = " . sqlesc($donated_cny);
}
$updateset[] = "donor = " . sqlesc($donor);
admin add claim
2022-07-02 15:08:23 +08:00
$updateset[] = "donoruntil = " . sqlesc(!empty($_POST['donoruntil']) ? $_POST['donoruntil'] : null);
init
2020-12-26 01:42:23 +08:00
}
user ban log
2021-05-12 13:45:00 +08:00
init
2020-12-26 01:42:23 +08:00
if ($chpassword != "" AND $passagain != "") {
unset($passupdate);
$passupdate=false;
user ban log
2021-05-12 13:45:00 +08:00
init
2020-12-26 01:42:23 +08:00
if ($chpassword == $username OR strlen($chpassword) > 40 OR strlen($chpassword) < 6 OR $chpassword != $passagain)
$passupdate=false;
else
$passupdate=true;
}
user ban log
2021-05-12 13:45:00 +08:00
fix invite.php
2021-02-28 02:15:11 +08:00
if (isset($passupdate) && $passupdate) {
init
2020-12-26 01:42:23 +08:00
$sec = mksecret();
$passhash = md5($sec . $chpassword . $sec);
$updateset[] = "secret = " . sqlesc($sec);
$updateset[] = "passhash = " . sqlesc($passhash);
}
if ($curclass >= get_user_class())
puke();
if ($curclass != $class)
{
$what = ($class > $curclass ? $lang_modtask_target[get_user_lang($userid)]['msg_promoted'] : $lang_modtask_target[get_user_lang($userid)]['msg_demoted']);
$subject = sqlesc($lang_modtask_target[get_user_lang($userid)]['msg_class_change']);
fixed modtask.php
2021-02-26 15:23:00 +08:00
$msg = sqlesc($lang_modtask_target[get_user_lang($userid)]['msg_you_have_been'].$what.$lang_modtask_target[get_user_lang($userid)]['msg_to'] . get_user_class_name($class) .$lang_modtask_target[get_user_lang($userid)]['msg_by'].$CURUSER['username']);
init
2020-12-26 01:42:23 +08:00
$added = sqlesc(date("Y-m-d H:i:s"));
sql_query("INSERT INTO messages (sender, receiver, subject, msg, added) VALUES(0, $userid, $subject, $msg, $added)") or sqlerr(__FILE__, __LINE__);
$updateset[] = "class = $class";
$what = ($class > $curclass ? "Promoted" : "Demoted");
fix modtask.php
2021-02-27 13:27:08 +08:00
$modcomment = date("Y-m-d") . " - $what to '" . get_user_class_name($class) . "' by {$CURUSER['username']}.\n". $modcomment;
init
2020-12-26 01:42:23 +08:00
}
if ($class == UC_VIP)
{
$updateset[] = "vip_added = ".sqlesc($vip_added);
if ($vip_added == 'yes')
$updateset[] = "vip_until = ".sqlesc($vip_until);
$subject = sqlesc($lang_modtask_target[get_user_lang($userid)]['msg_your_vip_status_changed']);
fixed modtask.php
2021-02-26 15:23:00 +08:00
$msg = sqlesc($lang_modtask_target[get_user_lang($userid)]['msg_vip_status_changed_by'].$CURUSER['username']);
init
2020-12-26 01:42:23 +08:00
$added = sqlesc(date("Y-m-d H:i:s"));
sql_query("INSERT INTO messages (sender, receiver, subject, msg, added) VALUES (0, $userid, $subject, $msg, $added)") or sqlerr(__FILE__, __LINE__);
fix modtask.php
2021-02-27 13:27:08 +08:00
$modcomment = date("Y-m-d") . " - VIP status changed by {$CURUSER['username']}. VIP added: ".$vip_added.($vip_added == 'yes' ? "; VIP until: ".$vip_until : "").".\n". $modcomment;
init
2020-12-26 01:42:23 +08:00
}
user ban log
2021-05-12 13:45:00 +08:00
init
2020-12-26 01:42:23 +08:00
if ($warned && $curwarned != $warned)
{
$updateset[] = "warned = " . sqlesc($warned);
add PT-Gen api point setting
2021-01-19 17:35:05 +08:00
$updateset[] = "warneduntil = null";
init
2020-12-26 01:42:23 +08:00
if ($warned == 'no')
{
fix modtask.php
2021-02-27 13:27:08 +08:00
$modcomment = date("Y-m-d") . " - Warning removed by {$CURUSER['username']}.\n". $modcomment;
init
2020-12-26 01:42:23 +08:00
$subject = sqlesc($lang_modtask_target[get_user_lang($userid)]['msg_warn_removed']);
$msg = sqlesc($lang_modtask_target[get_user_lang($userid)]['msg_your_warning_removed_by'] . $CURUSER['username'] . ".");
}
$added = sqlesc(date("Y-m-d H:i:s"));
sql_query("INSERT INTO messages (sender, receiver, subject, msg, added) VALUES (0, $userid, $subject, $msg, $added)") or sqlerr(__FILE__, __LINE__);
}
elseif ($warnlength)
{
if ($warnlength == 255)
{
$modcomment = date("Y-m-d") . " - Warned by " . $CURUSER['username'] . ".\nReason: $warnpm.\n". $modcomment;
fixed modtask.php
2021-02-26 15:23:00 +08:00
$msg = sqlesc($lang_modtask_target[get_user_lang($userid)]['msg_you_are_warned_by'].$CURUSER['username']."." . ($warnpm ? $lang_modtask_target[get_user_lang($userid)]['msg_reason'].$warnpm : ""));
add PT-Gen api point setting
2021-01-19 17:35:05 +08:00
$updateset[] = "warneduntil = null";
init
2020-12-26 01:42:23 +08:00
}else{
user ban log
2021-05-12 13:45:00 +08:00
$warneduntil = date("Y-m-d H:i:s",(strtotime(date("Y-m-d H:i:s")) + $warnlength * 604800));
init
2020-12-26 01:42:23 +08:00
$dur = $warnlength . $lang_modtask_target[get_user_lang($userid)]['msg_week'] . ($warnlength > 1 ? $lang_modtask_target[get_user_lang($userid)]['msg_s'] : "");
$msg = sqlesc($lang_modtask_target[get_user_lang($userid)]['msg_you_are_warned_for'].$dur.$lang_modtask_target[get_user_lang($userid)]['msg_by'] . $CURUSER['username'] . "." . ($warnpm ? $lang_modtask_target[get_user_lang($userid)]['msg_reason'].$warnpm : ""));
$modcomment = date("Y-m-d") . " - Warned for $dur by " . $CURUSER['username'] . ".\nReason: $warnpm.\n". $modcomment;
$updateset[] = "warneduntil = '$warneduntil'";
}
$subject = sqlesc($lang_modtask_target[get_user_lang($userid)]['msg_you_are_warned']);
$added = sqlesc(date("Y-m-d H:i:s"));
sql_query("INSERT INTO messages (sender, receiver, subject, msg, added) VALUES (0, $userid, $subject, $msg, $added)") or sqlerr(__FILE__, __LINE__);
fixed modtask.php
2021-02-26 15:23:00 +08:00
$updateset[] = "warned = 'yes', timeswarned = timeswarned+1, lastwarned=$added, warnedby={$CURUSER['id']}";
init
2020-12-26 01:42:23 +08:00
}
finish plugin: sticky promotion
2022-06-08 14:15:59 +08:00
if ($enabled != $curenabled)
{
if ($enabled == 'yes') {
$modcomment = date("Y-m-d") . " - Enabled by " . $CURUSER['username']. ".\n". $modcomment;
if (get_single_value("users","class","WHERE id = ".sqlesc($userid)) == UC_PEASANT){
$length = 30*86400; // warn users until 30 days
$until = sqlesc(date("Y-m-d H:i:s",(strtotime(date("Y-m-d H:i:s")) + $length)));
sql_query("UPDATE users SET enabled='yes', leechwarn='yes', leechwarnuntil=$until WHERE id = ".sqlesc($userid));
}
else{
sql_query("UPDATE users SET enabled='yes', leechwarn='no' WHERE id = ".sqlesc($userid)) or sqlerr(__FILE__, __LINE__);
}
} else {
$modcomment = date("Y-m-d") . " - Disabled by " . $CURUSER['username']. ".\n". $modcomment;
$banLog = [
'uid' => $userid,
'username' => $user->username,
'operator' => $CURUSER['id'],
'reason' => nexus_trans('user.edit_ban_reason', [], $user->locale),
];
}
}
init
2020-12-26 01:42:23 +08:00
if ($arr['noad'] != $noad){
$updateset[]='noad = '.sqlesc($noad);
$modcomment = date("Y-m-d") . " - No Ad set to ".$noad." by ". $CURUSER['username']. ".\n". $modcomment;
}
if ($arr['noaduntil'] != $noaduntil){
$updateset[]='noaduntil = '.sqlesc($noaduntil);
$modcomment = date("Y-m-d") . " - No Ad Until set to ".$noaduntil." by ". $CURUSER['username']. ".\n". $modcomment;
}
if ($privacy == "low" OR $privacy == "normal" OR $privacy == "strong")
$updateset[] = "privacy = " . sqlesc($privacy);
user ban log
2021-05-12 13:45:00 +08:00
fix invite.php
2021-02-28 02:15:11 +08:00
if (isset($_POST["resetkey"]) && $_POST["resetkey"] == "yes")
init
2020-12-26 01:42:23 +08:00
{
$newpasskey = md5($arr['username'].date("Y-m-d H:i:s").$arr['passhash']);
$updateset[] = "passkey = ".sqlesc($newpasskey);
}
if ($forumpost != $curforumpost)
{
if ($forumpost == 'yes')
{
$modcomment = date("Y-m-d") . " - Posting enabled by " . $CURUSER['username'] . ".\n" . $modcomment;
$subject = sqlesc($lang_modtask_target[get_user_lang($userid)]['msg_posting_rights_restored']);
$msg = sqlesc($lang_modtask_target[get_user_lang($userid)]['msg_your_posting_rights_restored']. $CURUSER['username'] . $lang_modtask_target[get_user_lang($userid)]['msg_you_can_post']);
$added = sqlesc(date("Y-m-d H:i:s"));
sql_query("INSERT INTO messages (sender, receiver, subject, msg, added) VALUES (0, $userid, $subject, $msg, $added)") or sqlerr(__FILE__, __LINE__);
}
else
{
$modcomment = date("Y-m-d") . " - Posting disabled by " . $CURUSER['username'] . ".\n" . $modcomment;
$subject = sqlesc($lang_modtask_target[get_user_lang($userid)]['msg_posting_rights_removed']);
$msg = sqlesc($lang_modtask_target[get_user_lang($userid)]['msg_your_posting_rights_removed'] . $CURUSER['username'] . $lang_modtask_target[get_user_lang($userid)]['msg_probable_reason']);
$added = sqlesc(date("Y-m-d H:i:s"));
sql_query("INSERT INTO messages (sender, receiver, subject, msg, added) VALUES (0, $userid, $subject, $msg, $added)") or sqlerr(__FILE__, __LINE__);
}
}
if ($uploadpos != $curuploadpos)
{
if ($uploadpos == 'yes')
{
$modcomment = date("Y-m-d") . " - Upload enabled by " . $CURUSER['username'] . ".\n" . $modcomment;
$subject = sqlesc($lang_modtask_target[get_user_lang($userid)]['msg_upload_rights_restored']);
$msg = sqlesc($lang_modtask_target[get_user_lang($userid)]['msg_your_upload_rights_restored'] . $CURUSER['username'] . $lang_modtask_target[get_user_lang($userid)]['msg_you_upload_can_upload']);
$added = sqlesc(date("Y-m-d H:i:s"));
sql_query("INSERT INTO messages (sender, receiver, subject, msg, added) VALUES (0, $userid, $subject, $msg, $added)") or sqlerr(__FILE__, __LINE__);
}
else
{
$modcomment = date("Y-m-d") . " - Upload disabled by " . $CURUSER['username'] . ".\n" . $modcomment;
$subject = sqlesc($lang_modtask_target[get_user_lang($userid)]['msg_upload_rights_removed']);
$msg = sqlesc($lang_modtask_target[get_user_lang($userid)]['msg_your_upload_rights_removed'] . $CURUSER['username'] . $lang_modtask_target[get_user_lang($userid)]['msg_probably_reason_two']);
$added = sqlesc(date("Y-m-d H:i:s"));
sql_query("INSERT INTO messages (sender, receiver, subject, msg, added) VALUES (0, $userid, $subject, $msg, $added)") or sqlerr(__FILE__, __LINE__);
}
}
if ($downloadpos != $curdownloadpos)
{
if ($downloadpos == 'yes')
{
$modcomment = date("Y-m-d") . " - Download enabled by " . $CURUSER['username'] . ".\n" . $modcomment;
$subject = sqlesc($lang_modtask_target[get_user_lang($userid)]['msg_download_rights_restored']);
$msg = sqlesc($lang_modtask_target[get_user_lang($userid)]['msg_your_download_rights_restored']. $CURUSER['username'] . $lang_modtask_target[get_user_lang($userid)]['msg_you_can_download']);
$added = sqlesc(date("Y-m-d H:i:s"));
sql_query("INSERT INTO messages (sender, receiver, subject, msg, added) VALUES (0, $userid, $subject, $msg, $added)") or sqlerr(__FILE__, __LINE__);
}
else
{
$modcomment = date("Y-m-d") . " - Download disabled by " . $CURUSER['username'] . ".\n" . $modcomment;
$subject = sqlesc($lang_modtask_target[get_user_lang($userid)]['msg_download_rights_removed']);
$msg = sqlesc($lang_modtask_target[get_user_lang($userid)]['msg_your_download_rights_removed'] . $CURUSER['username'] . $lang_modtask_target[get_user_lang($userid)]['msg_probably_reason_three']);
$added = sqlesc(date("Y-m-d H:i:s"));
sql_query("INSERT INTO messages (sender, receiver, subject, msg, added) VALUES (0, $userid, $subject, $msg, $added)") or sqlerr(__FILE__, __LINE__);
}
user ban log
2021-05-12 13:45:00 +08:00
}
init
2020-12-26 01:42:23 +08:00
$updateset[] = "modcomment = " . sqlesc($modcomment);
user ban log
2021-05-12 13:45:00 +08:00
sql_query("UPDATE users SET " . implode(", ", $updateset) . " WHERE id=$userid") or sqlerr(__FILE__, __LINE__);
if (!empty($banLog)) {
\App\Models\UserBanLog::query()->insert($banLog);
}
admin add claim
2022-07-02 15:08:23 +08:00
\Nexus\Database\NexusDB::cache_del("user_{$userid}_content");
admin add downloadpos manage
2022-07-23 23:35:43 +08:00
\Nexus\Database\NexusDB::cache_del('user_passkey_'.$userInfo->passkey.'_content');
init
2020-12-26 01:42:23 +08:00
$returnto = htmlspecialchars($_POST["returnto"]);
header("Location: " . get_protocol_prefix() . "$BASEURL/$returnto");
die;
}
puke();
?>
Reference in New Issue Copy Permalink