admin_reports.php

<?php
require_once 'engine/init.php';
protect_page();
admin_only($user_data);
include 'layout/overall/header.php';

// Report status types. When a player make new report it will be default to 0.
// Feel free to add/remove and change name/color of status types.
$statusTypes = array(
    0 => '<font color="purple">Reported</font>',
    1 => '<font color="darkblue">To-Do List</font>',
    2 => '<font color="red">Confirmed bug</font>',
    3 => '<font color="grey">Invalid</font>',
    4 => '<font color="grey">Rejected</font>',
    5 => '<font color="green"><b>Fixed</b></font>'
);
// Which status IDs should give option to add to changelog?
$statusChangeLog = array(0,5);

// Autohide rows that have these status IDs:
$hideStatus = array(3, 4, 5);

// Fetch data from SQL
$reportsData = mysql_select_multi('SELECT id, name, posx, posy, posz, report_description, date, status FROM znote_player_reports ORDER BY id DESC;');
// If sql data is not empty
if ($reportsData !== false) {
    // Order reports array by ID for easy reference later on.
    $reports = array();
    for ($i = 0; $i < count($reportsData); $i++)
        foreach ($statusTypes as $key => $value)
            if ($key == $reportsData[$i]['status'])
                $reports[$key][$reportsData[$i]['id']] = $reportsData[$i];
}

// POST logic (Update report and give player points)
if (!empty($_POST)) {
    // Fetch POST data
    $playerName = getValue($_POST['playerName']);
    $status = getValue($_POST['status']);
    $price = getValue($_POST['price']);
    $customPoints = getValue($_POST['customPoints']);
    $reportId = getValue($_POST['id']);

    $changelogReportId = (int)$_POST['changelogReportId'];
    $changelogValue = &$_POST['changelogValue'];
    $changelogText = getValue($_POST['changelogText']);
    $changelogStatus = ($changelogReportId !== false && $changelogValue === '2' && $changelogText !== false) ? true : false;

    if ($customPoints !== false) $price = (int)($price + $customPoints);

    // Update SQL
    mysql_update("UPDATE `znote_player_reports` SET `status`='$status' WHERE `id`='$reportId' LIMIT 1;");
    echo "<h1>Report status updated to ".$statusTypes[(int)$status] ."!</h1>";
    // Update local array representation
    foreach ($reports as $sid => $sa) 
        foreach ($sa as $rid => $ra) 
            if ($reportId == $rid) {
                $reports[$status][$reportId] = $reports[$sid][$rid];
                $reports[$status][$reportId]['status'] = $status;
                unset($reports[$sid][$rid]);
            }

    // If we should do anything with changelog:
    if ($changelogStatus) {
        $time = time();
        // Check if changelog exist (`id`, `text`, `time`, `report_id`, `status`)
        $changelog = mysql_select_single("SELECT * FROM `znote_changelog` WHERE `report_id`='$changelogReportId' LIMIT 1;");
        // If changelog exist
        $updatechangelog = false;
        if ($changelog !== false) {
            // Update it
            mysql_update("UPDATE `znote_changelog` SET `text`='$changelogText', `time`='$time' WHERE `id`='".$changelog['id']."' LIMIT 1;");
            echo "<h2>Changelog message updated!</h2>";
            $updatechangelog = true;
        } else {
            // Create it
            mysql_insert("INSERT INTO `znote_changelog` (`text`, `time`, `report_id`, `status`) 
                VALUES ('$changelogText', '$time', '$changelogReportId', '$status');");
            echo "<h2>Changelog message created!</h2>";
            $updatechangelog = true;
        }
        if ($updatechangelog) {
            // Cache changelog
            $cache = new Cache('engine/cache/changelog');
            $cache->setContent(mysql_select_multi("SELECT `id`, `text`, `time`, `report_id`, `status` FROM `znote_changelog` ORDER BY `id` DESC;"));
            $cache->save();
        }
        
    }
    // If we should give user price
    if ($price > 0) {
        $account = mysql_select_single("SELECT `a`.`id`, `a`.`email` FROM `accounts` AS `a` 
            INNER JOIN `players` AS `p` ON `p`.`account_id` = `a`.`id`
            WHERE `p`.`name` = '$playerName' LIMIT 1;");
        
        if ($account !== false) {
            // transaction log
            mysql_insert("INSERT INTO `znote_paypal` VALUES ('', '$reportId', 'report@admin.".$user_data['name']." to ".$account['email']."', '".$account['id']."', '0', '".$price."')");
            // Process payment
            $data = mysql_select_single("SELECT `points` AS `old_points` FROM `znote_accounts` WHERE `account_id`='".$account['id']."';");
            // Give points to user
            $new_points = $data['old_points'] + $price;
            mysql_update("UPDATE `znote_accounts` SET `points`='$new_points' WHERE `account_id`='".$account['id']."'");

            // Remind GM that he sent points to character
            echo "<font color='green' size='5'>".$playerName." has been granted ".$price." points for his reports.</font>";
        }
    }

// GET logic (Edit report data and specify how many [if any] points to give to user)
} elseif (!empty($_GET)) {
    // Fetch GET data
    $action = getValue($_GET['action']);
    $playerName = getValue($_GET['name']);
    $reportId = getValue($_GET['id']);

    // Fetch the report we intend to modify
    foreach ($reports as $sid => $sa)
        foreach ($sa as $rid => $ra)
            if ($rid == $reportId)
                $report = $reports[$sid][$reportId];
    
    // Create html form
    ?>
    <div style="width: 300px; margin: auto;">
        <form action="admin_reports.php" method="POST">
            Player: <a target="_BLANK" href="characterprofile.php?name=<?php echo $report['name']; ?>"><?php echo $report['name']; ?></a>
            <input type="hidden" name="playerName" value="<?php echo $report['name']; ?>">
            <input type="hidden" name="id" value="<?php echo $report['id']; ?>">
            <br>Set status: 
            <select name="status">
                <?php
                foreach ($statusTypes as $sid => $sname)
                    echo ($sid != $report['status']) ? "<option value='$sid'>$sname</option>" : "<option value='$sid' selected>$sname</option>";
                ?>
            </select><br>
            Give user points:
            <select name="price">
                <option value='0'>0</option>
                <?php
                foreach ($config['paypal_prices'] as $price)
                    echo "<option value='$price'>$price</option>";
                ?>
            </select> + <input name="customPoints" type="text" style="width: 50px;" placeholder="0"><br>
            <?php
            if (in_array($report['status'], $statusChangeLog)) {
                ?>
                <br>
                <input type="hidden" name="changelogReportId" value="<?php echo $report['id']; ?>">
                Add / update changelog message? <select name="changelogValue">
                    <option value="1">No</option>
                    <option value="2">Yes</option>
                </select><br>
                <textarea rows="7" cols="40" maxlength="254" name="changelogText"></textarea>
                <?php
            }
            ?>
            <br>
            <input type="submit" value="Update Report" style="width: 100%;">
        </form>
    </div>
    <?php
}

// If sql data is not empty
if ($reportsData !== false) {
    // Render HTML
    ?>
    <center>
        <?php
        foreach ($reports as $statusId => $statusArray) {
            ?>
            <h2 class="statusType"><?php echo $statusTypes[$statusId]; ?> (<span id="status-<?php echo $statusId; ?>">Visible</span>)</h2>
            <table class="table tbl" border="0" cellspacing="1" cellpadding="4" width="100%">
                <thead>
                    <tr class="yellow" onclick="javascript:toggle('<?php echo $statusId; ?>')">
                        <td width="38%">Info</td>
                        <td>Description</td>
                    </tr>
                </thead>
                <?php
                foreach ($statusArray as $reportId => $report) {
                ?>
                <tbody class="row<?php echo $report['status']; ?>">
                    <tr>
                        <td>
                            <b>Report ID:</b> #<?php echo $report['id']; ?>
                            <br><b>Name:</b> <a href="characterprofile.php?name=<?php echo $report['name']; ?>"><?php echo $report['name']; ?></a>
                            <br><b>Position:</b> <input type="text" disabled value="/pos <?php echo $report['posx'].', '.$report['posy'].', '.$report['posz']; ?>">
                            <br><b>Reported:</b> <?php echo getClock($report['date'], true, true); ?>
                            <br><b>Status:</b> <?php echo $statusTypes[$report['status']]; ?>. <a href="?action=edit&name=<?php echo $report['name'].'&id='.$report['id']; ?>">Edit</a>
                        </td>
                        <td><?php echo $report['report_description']; ?></td>
                    </tr>
                </tbody>
                <?php
               }
            ?></table><?php
        }
        ?>
    </center>
    <?php 
} else echo "<h2>No reports submitted.</h2>";
?>
<style>
tr.yellow[onclick] td {
    font-weight: bold;
    color: white;
    text-align: center;
}
tbody[class^=row] td:last-of-type {
    text-align: center;
}
</style>
<script type="text/javascript">
    // Hide and show tables
    // Written in clean javascript to make it cross-layout compatible.
    function toggle(statusId) {
        var divStatus = 'row' + statusId,
            msgStatus = 'status-' + statusId;

        // Change visibility status
        statusElement = document.getElementById(msgStatus);

        statusElement.innerHTML = (statusElement.innerHTML == 'Visible') ? 'Hidden' : 'Visible';
        // Show/hide elements.
        var elements = document.getElementsByClassName(divStatus);
        for (var i = 0; i < elements.length; i++)
            elements[i].style.display = (elements[i].style.display == 'none') ? 'table-header-group' : 'none';
    }

    <?php // Hide configured tables by default
    foreach ($hideStatus as $statusId)
        echo "toggle($statusId);";
    ?>

    var st = document.body.querySelectorAll('.statusType');
    for(i = 0; i < st.length; i++)
        st[i].addEventListener('click', function(e) {
            toggle(e.currentTarget.querySelector('span').id.match(/(\d)+/)[0]);
        });
</script>
<?php include 'layout/overall/footer.php'; ?>