X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=actions%2Fdeletenotice.php;h=ba8e86d0f495b7d4227b32ba1f0820b3cb3f471f;hb=0bb65f8739371bdb0b49f41f14fb284c239dda53;hp=bae0eac1b42ba7ef67f2448f3ca433b44422c81a;hpb=1a02d681fa1de7c2daed2ecc951f4c9bf1c13976;p=quix0rs-gnu-social.git diff --git a/actions/deletenotice.php b/actions/deletenotice.php index bae0eac1b4..ba8e86d0f4 100644 --- a/actions/deletenotice.php +++ b/actions/deletenotice.php @@ -1,9 +1,12 @@ . + * + * @category Personal + * @package StatusNet + * @author Evan Prodromou + * @author Sarven Capadisli + * @copyright 2008 StatusNet, Inc. + * @license http://www.fsf.org/licensing/licenses/agpl-3.0.html GNU Affero General Public License version 3.0 + * @link http://status.net/ */ -if (!defined('LACONICA')) { exit(1); } - -require_once(INSTALLDIR.'/lib/deleteaction.php'); +if (!defined('STATUSNET') && !defined('LACONICA')) { + exit(1); +} -class DeletenoticeAction extends DeleteAction +class DeletenoticeAction extends Action { + var $error = null; + var $user = null; + var $notice = null; + var $profile = null; + var $user_profile = null; + + function prepare($args) + { + parent::prepare($args); + + $this->user = common_current_user(); + $notice_id = $this->trimmed('notice'); + $this->notice = Notice::staticGet($notice_id); + + if (!$this->notice) { + common_user_error(_('No such notice.')); + exit; + } + + $this->profile = $this->notice->getProfile(); + $this->user_profile = $this->user->getProfile(); + + return true; + } + function handle($args) { parent::handle($args); - # XXX: Ajax! + + if (!common_logged_in()) { + common_user_error(_('Not logged in.')); + exit; + } else if ($this->notice->profile_id != $this->user_profile->id && + !$this->user->hasRight(Right::DELETEOTHERSNOTICE)) { + common_user_error(_('Can\'t delete this notice.')); + exit; + } + // XXX: Ajax! if ($_SERVER['REQUEST_METHOD'] == 'POST') { - $this->delete_notice(); + $this->deleteNotice(); } else if ($_SERVER['REQUEST_METHOD'] == 'GET') { - $this->show_form(); + $this->showForm(); } } - function get_instructions() + /** + * Show the page notice + * + * Shows instructions for the page + * + * @return void + */ + + function showPageNotice() + { + $instr = $this->getInstructions(); + $output = common_markup_to_html($instr); + + $this->elementStart('div', 'instructions'); + $this->raw($output); + $this->elementEnd('div'); + } + + function getInstructions() { - return _('You are about to permanently delete a notice. Once this is done, it cannot be undone.'); + return _('You are about to permanently delete a notice. ' . + 'Once this is done, it cannot be undone.'); } - function get_title() + function title() { return _('Delete notice'); } - function show_form($error=null) + /** + * Wrapper for showing a page + * + * Stores an error and shows the page + * + * @param string $error Error, if any + * + * @return void + */ + + function showForm($error = null) { - $user = common_current_user(); + $this->error = $error; + $this->showPage(); + } + + /** + * Insert delete notice form into the content + * + * @return void + */ - common_show_header($this->get_title(), array($this, 'show_header'), $error, - array($this, 'show_top')); - $this->elementStart('form', array('id' => 'notice_delete_form', - 'method' => 'post', - 'action' => common_local_url('deletenotice'))); + function showContent() + { + $this->elementStart('form', array('id' => 'form_notice_delete', + 'class' => 'form_settings', + 'method' => 'post', + 'action' => common_local_url('deletenotice'))); + $this->elementStart('fieldset'); + $this->element('legend', null, _('Delete notice')); $this->hidden('token', common_session_token()); $this->hidden('notice', $this->trimmed('notice')); - $this->elementStart('p'); - $this->element('span', array('id' => 'confirmation_text'), _('Are you sure you want to delete this notice?')); - - $this->element('input', array('id' => 'submit_no', - 'name' => 'submit', - 'type' => 'submit', - 'value' => _('No'))); - $this->element('input', array('id' => 'submit_yes', - 'name' => 'submit', - 'type' => 'submit', - 'value' => _('Yes'))); - $this->elementEnd('p'); + $this->element('p', null, _('Are you sure you want to delete this notice?')); + $this->submit('form_action-no', _('No'), 'submit form_action-primary', 'no', _("Do not delete this notice")); + $this->submit('form_action-yes', _('Yes'), 'submit form_action-secondary', 'yes', _('Delete this notice')); + $this->elementEnd('fieldset'); $this->elementEnd('form'); - common_show_footer(); } - function delete_notice() + function deleteNotice() { - # CSRF protection + // CSRF protection $token = $this->trimmed('token'); + if (!$token || $token != common_session_token()) { - $this->show_form(_('There was a problem with your session token. Try again, please.')); + $this->showForm(_('There was a problem with your session token. ' . + ' Try again, please.')); return; } + + if ($this->arg('yes')) { + $this->notice->delete(); + } + $url = common_get_returnto(); - $confirmed = $this->trimmed('submit'); - if ($confirmed == _('Yes')) { - $user = common_current_user(); - $notice_id = $this->trimmed('notice'); - $notice = Notice::staticGet($notice_id); - $replies = new Reply; - $replies->get('notice_id', $notice_id); - - common_dequeue_notice($notice); - if (common_config('memcached', 'enabled')) { - $notice->blowSubsCache(); - } - $replies->delete(); - $notice->delete(); + + if ($url) { + common_set_returnto(null); } else { - if ($url) { - common_set_returnto(null); - } else { - $url = common_local_url('public'); - } + $url = common_local_url('public'); } - common_redirect($url); + + common_redirect($url, 303); } }