only hidden messages were shown to non-admin users in erErrorReportManager::readFromSQL()
[iserv-mod-error-reporter.git] / src / index.php
1 <?php
2 /**
3 * @file index.php
4 * Main page to show the error reports
5 * @author Roland Hieber (roland.hieber@wilhelm-gym.net)
6 * @date 21.10.2007
7 * @package iserv_errorreporter
8 *
9 * Copyright © 2007 Roland Hieber
10 *
11 * Permission is hereby granted, free of charge, to any person obtaining
12 * copy of this software and associated documentation files (the "Software"),
13 * to deal in the Software without restriction, including without limitation
14 * the rights to use, copy, modify, merge, publish, distribute, sublicense,
15 * and/or sell copies of the Software, and to permit persons to whom the
16 * Software is furnished to do so, subject to the following conditions:
17 *
18 * The above copyright notice and this permission notice shall be included in
19 * all copies or substantial portions of the Software.
20 *
21 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
22 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
23 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
24 * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
25 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
26 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
27 * THE SOFTWARE.
28 */
29
30 /** @todo turn this into a class */
31 require_once("mod_error-reporter/init.inc");
32 require_once("sec/secure.inc");
33
34 html_header("<style type='text/css'>
35 td.errors-form-description {
36 width: 12em;
37 }
38 </style>");
39
40 $getAction = @$_GET["action"];
41 $getUid = @$_GET["uid"];
42
43 $postMachine = @stripslashes($_POST["machine"]);
44 $postText = @stripslashes($_POST["text"]);
45 $postHidden = @$_POST["hidden"];
46 $postSubmit = @$_POST["submit"];
47
48 $strError = "";
49
50 PageBlue(_c("error-reporter:Report an error"), "mod_error-reporter");
51
52 if(!$cfgErrors->userHasAccess()) {
53 printf("<p class='err'>%s</p>\n", ER_ERROR_ACCESS_DENIED);
54 _PageBlue();
55 exit();
56 }
57
58 // Probably we have to delete an error report
59 if($getAction == "delete" and isset($getUid)) {
60 // Are you really sure?
61 if(@$_POST["surely_delete"] == _("Delete")) {
62 $doc->deleteErrorReport($getUid);
63 // Reload to get rid of POST data
64 header("Location: {$_SERVER["PHP_SELF"]}");
65 } elseif(@$_POST["surely_cancel"] == _("Cancel")) {
66 header("Location: {$_SERVER["PHP_SELF"]}");
67 } else {
68 // Ask the user to delete the message
69 Title(_c("error-reporter:Delete an error report"));
70 // Check if the specified report exists
71 if(!$doc->getErrorReportByID($getUid)) {
72 echo sprintf("<p class='err'>%s</p>",
73 _c("error-reporter:The specified error report does not exist!"));
74 Option(_("Back"), null, "href='".$_SERVER["PHP_SELF"]."'", "back");
75 } else {
76 if($cfgErrors->userIsAdmin() or $doc->userIsOwner($getUid)) {
77 echo sprintf("<form action='%s' method='post'>\n",
78 $view->getDeleteURL($getUid));
79 echo sprintf("<p>%s</p>", _c("error-reporter:You are about to delete ".
80 "the following error report:"));
81 $view->printErrorReport($doc->getErrorReportByID($getUid), true, false);
82 echo sprintf("<p><input type='submit' class='submit' ".
83 "name='surely_delete' value='%s' />\n&nbsp;<input type='submit' ".
84 "class='submit' name='surely_cancel' value='%s' />\n</p></form>",
85 _("Delete"), _("Cancel"));
86 } else {
87 echo sprintf("<p class='err'>%s</p>",
88 _c("error-reporter:You are not allowed to delete this report."));
89 Option(_("Back"), null, "href='".$_SERVER["PHP_SELF"]."'", "back");
90 }
91 }
92 _PageBlue();
93 exit();
94 }
95 }
96
97 // form for reloading the page via javascript
98 echo sprintf("<form action='%s' method='get'></form>\n", $_SERVER["PHP_SELF"]);
99
100 // probably we have to insert an error report
101 if(($getAction == "submit" and $postSubmit == _("Insert")))
102 {
103 // All fields must be filled out
104 if((trim($postMachine) == "") or (trim($postText) == "")) {
105 $strError = _c("error-reporter:You have to fill out all the fields in ".
106 "the form.");
107 } else {
108 // Write to database
109 $nNewUid = null;
110 $er = new erErrorReport(time(), $_SESSION["act"], $postMachine, $postText, $postHidden == "true");
111 try {
112 $nNewUid = $doc->writeErrorReport($er);
113 } catch(Exception $e) {
114 echo sprintf("<p class='err'>%s</p>", $e->getMessage());
115 }
116
117 if($nNewUid !== null) {
118 echo sprintf("<p class='err'>%s</p>", _c("error-reporter:The report was ".
119 "submitted. Thank you for your help."));
120 }
121
122 $postText = "";
123 $postMachine = "";
124 $postHidden = "false";
125 }
126 }
127
128 // Show already existent (and visible) error reports
129 if($doc->getNumErrorReports() > 0) {
130 Title(_c("error-reporter:Reports that have already been submitted:"));
131 echo sprintf("<p>%s</p>", _c("error-reporter:These errors should not be ".
132 "resubmitted."));
133 $view->printErrorReports($doc->getErrorReports(array(ER_ERM_SORT_DATE =>
134 ER_ERM_SORT_DESC)));
135 }
136
137 // Form for submitting a new error report
138 echo "<p />\n";
139 Title(_c("error-reporter:Report an error"));
140 Option(_c("error-reporter:Recommened reading"), _c("error-reporter:“How to ".
141 "Report Bugs Effectively”, by Simon G. Tatham"), "target='_blank' href='".
142 _c("error-reporter:http://www.chiark.greenend.org.uk/~sgtatham/bugs.html").
143 "'");
144
145 // Print the error here
146 if($strError != "")
147 echo "<p class='err'>$strError</p>\n";
148
149 echo sprintf("<p>%s</p>\n", _c("error-reporter:Please write your report as ".
150 "precise as possible to help us solve the problem. The more precise the ".
151 "report is, the faster the error can be fixed. Please include also any ".
152 "error messages you have recieved."));
153 echo "<form name='form' id='form' method='post' action='?action=submit'>\n".
154 "<{$GLOBALS["invtbl"]}>\n";
155 echo sprintf("<tr><td class='errors-form-description'>%s</td>".
156 "<td><input type='text' name='machine' size='55' value='%s' /></td></tr>\n",
157 _c("error-reporter:Affected machine:"), q($postMachine));
158 echo sprintf("<tr><td class='errors-form-description'>%s</td><td>".
159 "<textarea name='text' cols='40' rows='5'>%s</textarea></td></tr>\n",
160 _c("error-reporter:Description of the error:"), q($postText));
161 echo sprintf("<tr><td /><td><input type='hidden' name='hidden' ".
162 "value='false' /><input type='checkbox' id='hidden' name='hidden' ".
163 "value='true'%s><label for='hidden'>%s</label></td></tr>\n",
164 ($postHidden == "true") ? " checked='checked'" : "", _c("error-reporter:".
165 "Visible only for administrators (use this if your report is about security ".
166 "issues)"));
167 echo sprintf("<tr><td /><td><input type='submit' name='submit' value='%s' />".
168 "d></tr>\n", _("Insert"));
169 echo "</table></form><p />\n";
170
171 _PageBlue();
172 ?>
This page took 0.080237 seconds and 5 git commands to generate.