Approve.php

<?php
/*
	Question2Answer by Gideon Greenspan and contributors
	http://www.question2answer.org/

	This program is free software; you can redistribute it and/or
	modify it under the terms of the GNU General Public License
	as published by the Free Software Foundation; either version 2
	of the License, or (at your option) any later version.

	This program is distributed in the hope that it will be useful,
	but WITHOUT ANY WARRANTY; without even the implied warranty of
	MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
	GNU General Public License for more details.

	More about this license: http://www.question2answer.org/license.php
*/

namespace Q2A\Controllers\Admin;

use Q2A\Controllers\BaseController;
use Q2A\Database\DbConnection;
use Q2A\Middleware\Auth\MinimumUserLevel;

/**
 * Controller for admin page showing new users waiting for approval.
 */
class Approve extends BaseController
{
	public function __construct(DbConnection $db)
	{
		require_once QA_INCLUDE_DIR . 'app/admin.php';
		require_once QA_INCLUDE_DIR . 'db/admin.php';

		parent::__construct($db);

		// Check we're not using single-sign on integration

		if (QA_FINAL_EXTERNAL_USERS) {
			qa_fatal_error('User accounts are handled by external code');
		}
	}

	public function index()
	{
		// Find most flagged questions, answers, comments

		$userid = qa_get_logged_in_userid();

		$users = qa_db_get_unapproved_users(qa_opt('page_size_users'));
		$userfields = qa_db_select_with_pending(qa_db_userfields_selectspec());


		// Check admin privileges (do late to allow one DB query)

		if (qa_get_logged_in_level() < QA_USER_LEVEL_MODERATOR) {
			$qa_content = qa_content_prepare();
			$qa_content['error'] = qa_lang_html('users/no_permission');
			return $qa_content;
		}


		// Check to see if any were approved or blocked here

		$pageerror = qa_admin_check_clicks();


		// Prepare content for theme

		$qa_content = qa_content_prepare();

		$qa_content['title'] = qa_lang_html('admin/recent_users_title');
		$qa_content['error'] = isset($pageerror) ? $pageerror : qa_admin_page_error();

		$qa_content['message_list'] = array(
			'form' => array(
				'tags' => 'method="post" action="' . qa_self_html() . '"',

				'hidden' => array(
					'code' => qa_get_form_security_code('admin/click'),
				),
			),

			'messages' => array(),
		);


		if (count($users)) {
			foreach ($users as $user) {
				$message = array();

				$message['tags'] = 'id="p' . qa_html($user['userid']) . '"'; // use p prefix for qa_admin_click() in qa-admin.js

				$message['content'] = qa_lang_html('users/registered_label') . ' ' .
					strtr(qa_lang_html('users/x_ago_from_y'), array(
						'^1' => qa_time_to_string(qa_opt('db_time') - $user['created']),
						'^2' => qa_ip_anchor_html(@inet_ntop($user['createip'])),
					)) . '<br/>';

				$htmlemail = qa_html($user['email']);

				$message['content'] .= qa_lang_html('users/email_label') . ' <a href="mailto:' . $htmlemail . '">' . $htmlemail . '</a>';

				if (qa_opt('confirm_user_emails')) {
					$message['content'] .= '<small> - ' . qa_lang_html(($user['flags'] & QA_USER_FLAGS_EMAIL_CONFIRMED) ? 'users/email_confirmed' : 'users/email_not_confirmed') . '</small>';
				}

				foreach ($userfields as $userfield) {
					if (strlen(@$user['profile'][$userfield['title']]))
						$message['content'] .= '<br/>' . qa_html($userfield['content'] . ': ' . $user['profile'][$userfield['title']]);
				}

				$message['meta_order'] = qa_lang_html('main/meta_order');
				$message['who']['data'] = qa_get_one_user_html($user['handle']);

				$message['form'] = array(
					'style' => 'light',

					'buttons' => array(
						'approve' => array(
							'tags' => 'name="admin_' . $user['userid'] . '_userapprove" onclick="return qa_admin_click(this);"',
							'label' => qa_lang_html('question/approve_button'),
							'popup' => qa_lang_html('admin/approve_user_popup'),
						),

						'block' => array(
							'tags' => 'name="admin_' . $user['userid'] . '_userblock" onclick="return qa_admin_click(this);"',
							'label' => qa_lang_html('admin/block_button'),
							'popup' => qa_lang_html('admin/block_user_popup'),
						),
					),
				);

				$qa_content['message_list']['messages'][] = $message;
			}
		} else {
			$qa_content['title'] = qa_lang_html('admin/no_unapproved_found');
		}


		$qa_content['navigation']['sub'] = qa_admin_sub_navigation();
		$qa_content['script_rel'][] = 'qa-content/qa-admin.js?' . QA_VERSION;


		return $qa_content;
	}
}