<?php
$title = 'Edit Comments';
$parent_file = 'edit.php';
require_once('admin-header.php');
if (empty($_GET['mode'])) $mode = 'view';
else $mode = htmlspecialchars($_GET['mode']);
?>
<ul id="adminmenu2">
	<li><a href="edit.php"><?php echo _LANG_E_LATEST_POSTS; ?></a></li>
    <li><a href="edit-comments.php" class="current"><?php echo _LANG_E_LATEST_COMMENTS; ?></a></li>
    <li class="last"><a href="moderation.php"><?php echo _LANG_E_AWAIT_MODER; ?></a></li>
</ul>
<script type="text/javascript">
<!--
function checkAll(form)
{
	for (i = 0, n = form.elements.length; i < n; i++) {
		if(form.elements[i].type == "checkbox") {
			if(form.elements[i].checked == true)
				form.elements[i].checked = false;
			else
				form.elements[i].checked = true;
		}
	}
}
//-->
</script>
<div class="wrap">
<form name="searchform" action="" method="get"> 
  <fieldset> 
  <legend><?php echo _LANG_EC_SHOW_COM; ?></legend> 
  <input type="text" name="s" value="<?php if (isset($_GET['s'])) echo htmlspecialchars($_GET['s']); ?>" size="17" />
  <input type="submit" name="submit" value="<?php echo _LANG_E_BTN_POSTS; ?>" />  
  <input type="hidden" name="mode" value="<?php echo $mode; ?>" />
  (<?php echo _LANG_EC_SEARCH_MODE; ?>)
  </fieldset> 
</form>
<p><a href="?mode=view"><?php echo _LANG_EC_VIEW_MODE; ?></a> | <a href="?mode=edit"><?php echo _LANG_EC_EDIT_MODE; ?></a></p>
<?php
if (!empty($delete_comments)) {

	// I had this all as one query but then realized we weren't checking permissions on each comment.
	$del_comments = ''; $safe_delete_commeents = ''; $i = 0;
	foreach ($delete_comments as $comment) { // Check the permissions on each
		$comment = intval($comment);
		$post_id = $wpdb->get_var("SELECT comment_post_id FROM $tablecomments WHERE comment_id = $comment");
		$authordata = get_userdata($wpdb->get_var("SELECT post_author FROM $tableposts WHERE id = $post_id"));
		if (($user_level > $authordata->user_level) or ($user_login == $authordata->user_login)) {
			$wpdb->query("DELETE FROM $tablecomments WHERE comment_id = $comment");
			++$i;
		}
	}
	echo "<div class='wrap'><p>" . sprintf(_LANG_EC_COM_DELETED, $i) . "</p></div>";
}

if (isset($_GET['s'])) {
	$s = $wpdb->escape($_GET['s']);
	$comments = $wpdb->get_results("SELECT * FROM $tablecomments  WHERE
		comment_author LIKE '%$s%' OR
		comment_author_email LIKE '%$s%' OR
		comment_author_url LIKE ('%$s%') OR
		comment_author_ip LIKE ('%$s%') OR
		comment_content LIKE ('%$s%')
		ORDER BY comment_date DESC");
} else {
  $comments = $wpdb->get_results("SELECT * FROM $tablecomments ORDER BY comment_date DESC "); // was LIMIT 20
}
if ('view' == $mode) {
	if ($comments) {
		echo '<ol>';
		foreach ($comments as $comment) {
		$authordata = get_userdata($wpdb->get_var("SELECT post_author FROM $tableposts WHERE ID = $comment->comment_post_id"));
			$comment_status = wp_get_comment_status($comment->comment_id);
			if ('unapproved' == $comment_status) {
				echo '<li class="unapproved" style="border-bottom: 1px solid #ccc;">';
			} else {
				echo '<li style="border-bottom: 1px solid #ccc;">';
			}
		?>		
        <p><strong><?php echo _LANG_EFC_COM_NAME; ?></strong> <?php comment_author() ?> <?php if ($comment->comment_author_email) { ?>| <strong><?php echo _LANG_EFC_COM_MAIL; ?></strong> <?php comment_author_email_link() ?> <?php } if ($comment->comment_author_email) { ?> | <strong><?php echo _LANG_EFC_COM_URI; ?></strong> <?php comment_author_url_link() ?> <?php } ?>| <strong>IP:</strong> <a href="http://ws.arin.net/cgi-bin/whois.pl?queryinput=<?php comment_author_IP() ?>"><?php comment_author_IP() ?></a></p>
		
		<?php comment_text() ?>

        <p><?php echo _LANG_E_POST_WHEN; ?><?php echo ' '; comment_date('M j, g:i A'); ?> | <?php 
			if (($user_level > $authordata->user_level) or ($user_login == $authordata->user_login)) {
				echo "<a href=\"post.php?action=editcomment&amp;comment=".$comment->comment_id."\">" . _LANG_EC_LINK_EDIT . "</a>";
				echo " | <a href=\"post.php?action=deletecomment&amp;p=".$comment->comment_post_id."&amp;comment=".$comment->comment_id."\" onclick=\"return confirm('" . sprintf("You are about to delete this comment by \'%s\'\\n  \'Cancel\' to stop, \'OK\' to delete.", $comment->comment_author) . "')\">" . _LANG_EC_LINK_DELETE . "</a> - ";
			} // end if any comments to show
			// Get post title
			$post_title = $wpdb->get_var("SELECT post_title FROM $tableposts WHERE ID = $comment->comment_post_id");
			$post_title = ('' == $post_title) ? "# $comment->comment_post_id" : $post_title;
			?> <a href="post.php?action=edit&amp;post=<?php echo $comment->comment_post_id; ?>"><?php printf(_LANG_EC_EDIT_POST, stripslashes($post_title)); ?></a> | <a href="<?php echo get_permalink($comment->comment_post_id); ?>"><?php echo _LANG_EC_LINK_VIEW; ?></a></p>
		</li>

		<?php 
		} // end foreach
	echo '</ol>';
	} else {

		?>
		<p>
        <strong><?php echo _LANG_EC_NO_FOUND; ?></strong></p>
		
		<?php
	} // end if ($comments)
} elseif ('edit' == $mode) {

	if ($comments) {
		echo '<form name="deletecomments" id="deletecomments" action="" method="post"> 
		<table width="100%" cellpadding="3" cellspacing="3">
  <tr>
    <th scope="col">*</th>
    <th scope="col">' .  _LANG_EFC_COM_NAME . '</th>
    <th scope="col">' .  _LANG_EFC_COM_MAIL . '</th>
    <th scope="col">' . 'IP' . '</th>
    <th scope="col">' . _LANG_EC_COM_EXCERPT . '</th>
	<th scope="col" colspan="3">' .  _LANG_WAF_CUSTOM_ACTION . '</th>
  </tr>';
		foreach ($comments as $comment) {
		$authordata = get_userdata($wpdb->get_var("SELECT post_author FROM $tableposts WHERE ID = $comment->comment_post_id"));
		$bgcolor = ('#eee' == $bgcolor) ? 'none' : '#eee';
?>
  <tr style='background-color: <?php echo $bgcolor; ?>'>
    <td><?php if (($user_level > $authordata->user_level) or ($user_login == $authordata->user_login)) { ?><input type="checkbox" name="delete_comments[]" value="<?php echo $comment->comment_id; ?>" /><?php } ?></td>
    <td><?php comment_author_link() ?></td>
    <td><?php comment_author_email_link() ?></td>
    <td><a href="http://ws.arin.net/cgi-bin/whois.pl?queryinput=<?php comment_author_IP() ?>"><?php comment_author_IP() ?></a></td>
    <td><?php comment_excerpt(); ?></td>
    <td><a href="<?php echo get_permalink($comment->comment_post_id); ?>#comment-<?php comment_id() ?>" class="edit"><?php echo _LANG_EC_LINK_VIEW; ?></a></td>
    <td><?php if (($user_level > $authordata->user_level) or ($user_login == $authordata->user_login)) {
	echo "<a href='post.php?action=editcomment&amp;comment=$comment->comment_id' class='edit'>" .  _LANG_EC_LINK_EDIT . "</a>"; } ?></td>
    <td><?php if (($user_level > $authordata->user_level) or ($user_login == $authordata->user_login)) {
            echo "<a href=\"post.php?action=deletecomment&amp;p=".$comment->comment_post_id."&amp;comment=".$comment->comment_id."\" onclick=\"return confirm('" . sprintf("You are about to delete this comment by \'%s\'\\n  \'Cancel\' to stop, \'OK\' to delete.", $comment->comment_author) . "')\"    class='delete'>" . _LANG_EC_LINK_DELETE . "</a>"; } ?></td>
  </tr>
		<?php 
		} // end foreach
	?></table>
    <p><a href="javascript:;" onclick="checkAll(document.getElementById('deletecomments')); return false; "><?php echo _LANG_EC_CHECK_INVERT; ?></a></p>
            <p style="text-align: right;"><input type="submit" name="Submit" value="<?php echo _LANG_EC_CHECK_DELETE; ?>" onclick="return confirm('You are about to delete these comments permanently \'Cancel\' to stop, \'OK\' to delete.')" />	</p>
  </form>
<?php
	} else {
?>
<p>
<strong><?php echo _LANG_EC_NO_FOUND; ?></strong>
</p>
<?php
	} // end if ($comments)
}
	?>

</div>

<?php 
include('admin-footer.php');
?>
