polygon-website-foss/directory_admin/invites.php

95 lines
3.5 KiB
PHP

<?php
require $_SERVER['DOCUMENT_ROOT'].'/api/private/core.php';
Users::RequireAdmin();
$Alert = false;
if ($_SERVER["REQUEST_METHOD"] == "POST")
{
$LastTicket = db::run(
"SELECT TimeCreated FROM InviteTickets WHERE CreatedBy = :UserID AND TimeCreated + 5 > UNIX_TIMESTAMP()",
[":UserID" => SESSION["user"]["id"]]
);
if($LastTicket->rowCount())
{
$Alert = ["Text" => "Please wait ".GetReadableTime($LastTicket->fetchColumn(), ["RelativeTime" => "5 seconds"])." before creating a new invite ticket", "Color" => "danger"];
}
else
{
$Ticket = sprintf("PolygonTicket(%s)", bin2hex(random_bytes(16)));
db::run(
"INSERT INTO InviteTickets (Ticket, TimeCreated, CreatedBy) VALUES (:Ticket, UNIX_TIMESTAMP(), :UserID)",
[":Ticket" => $Ticket, ":UserID" => SESSION["user"]["id"]]
);
Users::LogStaffAction(sprintf(
"[ Create Invite Ticket ] %s created an invite ticket with the key \"%s\"",
SESSION["user"]["username"], $Ticket
));
$Alert = ["Text" => sprintf("Your key has been created! <code>%s</code>", $Ticket), "Color" => "success"];
}
}
$Page = $_GET["Page"] ?? 1;
$TicketCount = db::run("SELECT COUNT(*) FROM InviteTickets")->fetchColumn();
$Pagination = Pagination($Page, $TicketCount, 20);
$Tickets = db::run(
"SELECT InviteTickets.*, Users1.username AS CreatedByName, Users2.username AS UsedByName FROM InviteTickets
INNER JOIN users AS Users1 ON Users1.id = InviteTickets.CreatedBy
LEFT JOIN users AS Users2 ON Users2.id = InviteTickets.UsedBy
ORDER BY TimeCreated DESC LIMIT 20 OFFSET :Offset",
[":Offset" => $Pagination->Offset]
);
PageBuilder::$Config["title"] = "Invite Tickets";
PageBuilder::BuildHeader();
?>
<?php if($Alert !== false) { ?><div class="alert alert-<?=$Alert["Color"]?> px-2 py-1" role="alert"><?=$Alert["Text"]?></div><?php } ?>
<div class="row">
<div class="col-9">
<h3 class="font-weight-normal pb-0">Invite Tickets</h3>
</div>
<div class="col-3 text-right">
<form method="post">
<button class="btn btn-sm btn-success" type="submit">Create Ticket (single use)</button>
</form>
</div>
</div>
<table class="table table-hover">
<thead class="bg-light">
<tr>
<th class="font-weight-normal py-2" scope="col">Ticket</th>
<th class="font-weight-normal py-2" scope="col">Creator</th>
<th class="font-weight-normal py-2" scope="col">Used By</th>
<th class="font-weight-normal py-2" scope="col">Created</th>
</tr>
</thead>
<tbody>
<?php while($Ticket = $Tickets->fetch(PDO::FETCH_OBJ)) { ?>
<tr>
<td><code><?=htmlspecialchars($Ticket->Ticket)?></code></td>
<td><a href="/user?ID=<?=$Ticket->CreatedBy?>"><?=$Ticket->CreatedByName?></a></td>
<?php if ($Ticket->UsedBy == NULL) { ?>
<td>No One</td>
<?php } else { ?>
<td><a href="/user?ID=<?=$Ticket->UsedBy?>"><?=$Ticket->UsedByName?></a></td>
<?php } ?>
<td title="<?=date('j/n/Y g:i:s A \G\M\T', $Ticket->TimeCreated)?>"><?=date('j/n/Y', $Ticket->TimeCreated)?></td>
</tr>
<?php } ?>
</tbody>
</table>
<?php if($Pagination->Pages > 1) { ?>
<div class="pagination form-inline justify-content-center">
<a class="btn btn-light back<?=$Pagination->Page<=1?' disabled':'" href="?Page='.($Pagination->Page-1)?>"><h5 class="mb-0"><i class="fal fa-caret-left"></i></h5></a>
<span class="px-3">Page <?=$Pagination->Page?> of <?=$Pagination->Pages?></span>
<a class="btn btn-light next<?=$Pagination->Page>=$Pagination->Pages?' disabled':'" href="?Page='.($Pagination->Page+1)?>"><h5 class="mb-0"><i class="fal fa-caret-right"></i></h5></a>
</div>
<?php } ?>
<?php PageBuilder::BuildFooter(); ?>