Mozilla/mozilla/webtools/update/developers/approval.php

<?php
require_once('../core/init.php');
require_once('./core/sessionconfig.php');
$function = $_GET['function'];
$page_title = 'Mozilla Update :: Developer Control Panel :: Manage Approval
Queue';
require_once(HEADER);
$skipqueue='true';
require_once('./inc_sidebar.php');

if ($_SESSION["level"]=="admin" or $_SESSION["level"]=="editor") {
    //Do Nothing, they're good. :-)
} else {
    echo"<h1>Access Denied</h1>\n";
    echo"You do not have access to the Approval Queue.";
    require_once(FOOTER);
    exit;
}
?>

<?php
if (!$function or $function=="approvalqueue") {
//Overview page for admins/editors to see all the waiting approval queue items...
?>
<?php
if ($_POST["submit"]=="Submit") {
include"inc_approval.php"; //Get the resuable process_approval() function.

echo"<h2>Processing changes to approval queue, please wait...</h2>\n";
//echo"<pre>"; print_r($_POST); echo"</pre>\n";

for ($i=1; $_POST["maxvid"]>=$i; $i++) {
$type = escape_string($_POST["type_$i"]);
$testos = escape_string($_POST["testos_$i"]);
$testbuild = escape_string($_POST["testbuild_$i"]);
$comments = escape_string($_POST["comments_$i"]);
$approval = escape_string($_POST["approval_$i"]);
$file = escape_string($_POST["file_$i"]);

if ($_POST["installation_$i"]) { $installation = escape_string($_POST["installation_$i"]); } else { $installation = "NO";}
if ($_POST["uninstallation_$i"]) { $uninstallation = escape_string($_POST["uninstallation_$i"]); } else { $uninstallation = "NO";}
if ($_POST["appworks_$i"]) { $appworks = escape_string($_POST["appworks_$i"]); } else { $appworks = "NO";}
if ($_POST["cleanprofile_$i"]) { $cleanprofile = escape_string($_POST["cleanprofile_$i"]); } else { $cleanprofile = "NO";}

if ($type=="E") {
if ($_POST["newchrome_$i"]) { $newchrome = escape_string($_POST["newchrome_$i"]); } else { $newchrome = "NO";}
if ($_POST["worksasdescribed_$i"]) { $worksasdescribed = escape_string($_POST["worksasdescribed_$i"]); } else { $worksasdescribed = "NO";}
} else if ($type=="T") {
if ($_POST["visualerrors_$i"]) { $visualerrors = escape_string($_POST["visualerrors_$i"]); } else { $visualerrors = "NO";}
if ($_POST["allelementsthemed_$i"]) { $allelementsthemed = escape_string($_POST["allelementsthemed_$i"]); } else { $allelementsthemed = "NO";}
}

if ($approval !="noaction") {

$name = escape_string($_POST["name_$i"]);
$version = escape_string($_POST["version_$i"]);
if ($type=="T") {
    if ($approval=="YES") {
        if ($installation=="YES" and $uninstallation=="YES" and $appworks=="YES" and $cleanprofile=="YES" and $visualerrors=="YES" and $allelementsthemed=="YES" and $testos and $testbuild) {
            $approval_result = process_approval($type, $file, "approve");
        } else {
            echo"Error: Approval of $name $version cannot be processed because of missing data. Fill in the required fields and try again.<br>\n";
        }
    } else {
        if ($comments) {
            $approval_result = process_approval($type, $file, "deny");
        } else {
            echo"Error: Denial of $name $version cannot be processed because of missing data. Fill in the required fields and try again.<br>\n";
        }

    }

} else if ($type=="E") {
    if ($approval=="YES") {
        if ($installation=="YES" and $uninstallation=="YES" and $appworks=="YES" and $cleanprofile=="YES" and $newchrome=="YES" and $worksasdescribed=="YES" and $testos and $testbuild) {
            $approval_result = process_approval($type, $file, "approve");
        } else {
            echo"Error: Approval of $name $version cannot be processed because of missing data. Fill in the required fields and try again.<br>\n";
        }
    } else {
        if ($comments) {
            $approval_result = process_approval($type, $file, "deny");    
        } else {
            echo"Error: Denial of $name $version cannot be processed because of missing data. Fill in the required fields and try again.<br>\n";
        }
    }
}

//Approval for this file was successful, print the output message.
if ($approval_result) {
   if ($approval=="YES") {
       echo"$name $version was granted approval<br>\n";
   } else if ($approval=="NO") {
       echo"$name $version was denied approval<br>\n";
   }    

}


}

}

}
?>

<h1>Extensions/Themes Awaiting Approval</h1>
<div style="margin-left: 20px; font-size: 8pt;"><a href="?function=approvalhistory">Approval Log History</a></div>
<TABLE BORDER=0 CELLPADDING=1 CELLSPACING=1 ALIGN=CENTER STYLE="border: 0px; width: 100%;">
<form name="approvalqueue" method="post" action="?">
<?php
$i=0;
$sql ="SELECT TM.ID, `Type`, `vID`, `Name`, `Description`, TV.Version, `OSName`, `URI` FROM `main` TM
INNER JOIN `version` TV ON TM.ID = TV.ID
INNER JOIN `os` TOS ON TV.OSID=TOS.OSID
WHERE `approved` = '?' GROUP BY TV.URI ORDER BY TV.DateUpdated ASC";
 $sql_result = mysql_query($sql, $connection) or trigger_error("MySQL Error ".mysql_errno().": ".mysql_error()."", E_USER_NOTICE);
 $num_results = mysql_num_rows($sql_result);
  while ($row = mysql_fetch_array($sql_result)) {
   $i++;
   $id = $row["ID"];
   $type = $row["Type"];
   $uri = $row["URI"];
   $authors = ""; $j="";
   $authid = array();
   $sql2 = "SELECT `UserName`, TAX.`UserID` from `authorxref` TAX INNER JOIN `userprofiles` TU ON TAX.UserID = TU.UserID WHERE TAX.ID='$row[ID]' ORDER BY `UserName` ASC";
     $sql_result2 = mysql_query($sql2, $connection) or trigger_error("MySQL Error ".mysql_errno().": ".mysql_error()."", E_USER_NOTICE);
     while ($row2 = mysql_fetch_array($sql_result2)) { $j++;
      $authid[] = $row2['UserID'];
      $authors .="$row2[UserName]"; if (mysql_num_rows($sql_result2) > $j) { $authors .=", "; } 
     }
   $categories = ""; $j="";
   $sql2 = "SELECT `CatName` from `categoryxref` TCX INNER JOIN `categories` TC ON TCX.CategoryID = TC.CategoryID WHERE TCX.ID='$row[ID]' ORDER BY `CatName` ASC";
     $sql_result2 = mysql_query($sql2, $connection) or trigger_error("MySQL Error ".mysql_errno().": ".mysql_error()."", E_USER_NOTICE);
     if (mysql_num_rows($sql_result2)=="1") {$categories = "Category: "; } else { $categories = "Categories: "; }
     while ($row2 = mysql_fetch_array($sql_result2)) { $j++;
      $categories .="$row2[CatName]"; if (mysql_num_rows($sql_result2) > $j) { $categories .=", "; } 
     }

    $sql2 = "SELECT `PreviewID` FROM `previews` WHERE `ID`='$id' AND `preview`='YES' LIMIT 1";
     $sql_result2 = mysql_query($sql2, $connection) or trigger_error("MySQL Error ".mysql_errno().": ".mysql_error()."", E_USER_NOTICE);
     if (mysql_num_rows($sql_result2)=="1") {
        $listpreview="(<span class=\"tooltip\" TITLE=\"Item has a preview for the List Page\"><a href=\"previews.php?id=$id\">View Previews</a></span>)";
     } else {
        $listpreview="(<span class=\"tooltip\" TITLE=\"Previews/Screenshots are required for Themes, recommended for Extensions.\">No Previews</span>)";
     }

   $sql2 = "SELECT `UserName`,`UserEmail`,`date` FROM `approvallog` TA INNER JOIN `userprofiles` TU ON TA.UserID = TU.UserID WHERE `ID`='$row[ID]' AND `vID`='$row[vID]' and `action`='Approval?' ORDER BY `date` DESC LIMIT 1";
    $sql_result2 = mysql_query($sql2, $connection) or trigger_error("MySQL Error ".mysql_errno().": ".mysql_error()."", E_USER_NOTICE);
      $row2 = mysql_fetch_array($sql_result2);
        if ($row2[date]) {$date = $row2[date]; } else { $date = $row[DateUpdated]; } 
        $date = date("l, F d, Y, g:i:sa", strtotime("$date"));
  echo"<TR><TD COLSPAN=4><h2><a href=\"listmanager.php?function=editversion&id=$row[ID]&vid=$row[vID]\">$row[Name] $row[Version]</a> by $authors</h2></TD></TR>\n";

  echo"<TR>";
  echo"<TD style=\"font-size: 8pt;\"><strong>Works with: </strong>";
  $sql3 = "SELECT `shortname`, `MinAppVer`, `MaxAppVer` FROM `version` TV INNER JOIN `applications` TA ON TV.AppID = TA.AppID WHERE `URI`='" . escape_string($row['URI']) . "' ORDER BY `AppName` ASC";
  $sql_result3 = mysql_query($sql3, $connection) or trigger_error("MySQL Error ".mysql_errno().": ".mysql_error()."", E_USER_NOTICE);

    // Array of applications this item is associated with.
    $apps = array();

  while ($row3 = mysql_fetch_array($sql_result3)) {
    echo ucwords($row3['shortname']) . " {$row3['MinAppVer']}-{$row3['MaxAppVer']} \n";

    // Throw application compatibility into array.
    $apps[] = strtolower($row3['shortname']);
  }

  if($row[OSName] != "ALL") { echo" ($row[OSName])"; }

    // Escape each instance of name/uri for javascript.
    if ($type=="T") {
        // Show Themes install link.
        echo " <span>(<a href=\"javascript:void(InstallTrigger.installChrome(InstallTrigger.SKIN,'".addslashes($row['URI'])."','".addslashes($row['Name']." ".$row['Version'])."'))\">Install Now</a>)</span>\n";
    } else {
        // Show extensions install link.
        echo " <span>(<a href=\"javascript:void(InstallTrigger.install({'".addslashes($row['Name'].$row['Version'])."':'".addslashes($row['URI'])."'}))\">Install Now</a>)</span>";
    }

    // Show a download now link.
    echo '<span>(<a href="' . $row['URI'] . '">Download Now</a>)</span>'."\n";

  echo"</TD>\n";
  echo"</TR>\n";

  echo"<TR><TD style=\"font-size: 8pt;\">".nl2br($row[Description])." ($categories) $listpreview</TD></TR>\n";

  echo"<TR>\n";
  if ($row2[UserName]) {
    echo"<TD COLSPAN=2 style=\"font-size: 8pt;\"><strong>Requested by:</strong> <a href=\"mailto:$row2[UserEmail]\">$row2[UserName]</a> on $date</TD>\n";
  } else {
    echo"<TD COLSPAN=2></TD>\n";
  }
  echo"</TR>\n";
  
  // Author can not approve their own work unless they are an admin
  $disabled = (in_array($_SESSION['uid'], $authid) && $_SESSION["level"]!="admin") ? ' disabled="disabled"' : '';
//Approval Form for this Extension Item
  echo"<TR><TD COLSPAN=4><h3 style=\"margin-top: 0px\">Tested On:</h3></TD></TR>\n";

  echo"<TR><TD COLSPAN=4 style=\"font-size: 8pt\">\n";
  echo"<input name=\"type_$i\" type=\"hidden\" value=\"$type\">\n";
  echo"<input name=\"file_$i\" type=\"hidden\" value=\"$uri\">\n";
  echo"<input name=\"name_$i\" type=\"hidden\" value=\"$row[Name]\">\n";
  echo"<input name=\"version_$i\" type=\"hidden\" value=\"$row[Version]\">\n";
  echo"<span class=\"tooltip\" title=\"What OS(es) did you test in? Windows, Linux, MacOSX, etc\">OSes:</span> <input name=\"testos_$i\" type=\"text\" size=\"10\"$disabled>\n";
  echo"<span class=\"tooltip\" title=\"What app(s) version(s)/build(s)? (Ex. Firefox 1.0RC1 or 0.10+ 20041010)\">Apps:</span> <input name=\"testbuild_$i\" type=\"text\" size=\"10\"$disabled>\n";
  echo"<span class=\"tooltip\" title=\"Comments to Author (Will Be E-Mailed w/ Notice of your Action)\">Comments (to author):</span> <input name=\"comments_$i\" type=\"text\" size=\"35\"$disabled>"; 
  echo"</TD></TR>\n";
  echo"<TR><TD COLSPAN=4 style=\"font-size: 8pt\">\n";
  echo"<input name=\"installation_$i\" type=\"checkbox\" value=\"YES\"$disabled><span class=\"tooltip\" TITLE=\"Installs OK?\">Install?</span>\n";
  echo"<input name=\"uninstallation_$i\" type=\"checkbox\" value=\"YES\"$disabled><span class=\"tooltip\" TITLE=\"Uninstalls OK?\">Uninstall?</span>\n";
  echo"<input name=\"appworks_$i\" type=\"checkbox\" value=\"YES\"$disabled><span class=\"tooltip\" TITLE=\"App Works OK? (Loading pages/messages, Tabs, Back/Forward)\">App Works? </span>\n";
  echo"<input name=\"cleanprofile_$i\" type=\"checkbox\" value=\"YES\"$disabled><span class=\"tooltip\" TITLE=\"Using a Clean Profile? (I.E. Works with No Major Extensions Installed, like TBE)\">Clean Profile?</span>\n";
if ($type=="E") {
  echo"<input name=\"newchrome_$i\" type=\"checkbox\" value=\"YES\"$disabled><span class=\"tooltip\" TITLE=\"Extension Added Chrome to the UI?\">New Chrome?</span>\n";
  echo"<input name=\"worksasdescribed_$i\" type=\"checkbox\" value=\"YES\"$disabled><span class=\"tooltip\" TITLE=\"Item Works as Author Describes\">Works?</span>\n";
} else if ($type=="T") {
  echo"<input name=\"visualerrors_$i\" type=\"checkbox\" value=\"YES\"$disabled><span class=\"tooltip\" TITLE=\"No Visual Errors / Rendering Problems\">Visual Errors?</span>\n";
  echo"<input name=\"allelementsthemed_$i\" type=\"checkbox\" value=\"YES\"$disabled><span class=\"tooltip\" TITLE=\"All Components Themed? (Including No Missing Icons?)\">Theme Complete?</span>\n";
}
  echo"</TD></TR>\n";

  echo"<TR><TD COLSPAN=4 style=\"font-size: 8pt\"><strong>Action:</strong> \n";
  echo"<input name=\"approval_$i\" type=\"radio\" value=\"YES\"$disabled>Approve&nbsp;&nbsp;";
  echo"<input name=\"approval_$i\" type=\"radio\" value=\"NO\"$disabled>Deny&nbsp;&nbsp;";
  echo"<input name=\"approval_$i\" type=\"radio\" checked=\"checked\" VALUE=\"noaction\"$disabled>No Action\n";
  echo"</TD></TR>\n";
 }

echo"<input name=\"maxvid\" type=\"hidden\" value=\"$i\">\n";
?>
<?php if ($num_results > "0") { ?>
<TR><TD COLSPAN=4 style="height: 8px"></td></tr>
<TR><TD COLSPAN=4><img src="../images/faq_small.png" border=0 height=16 width=16 alt=""> Before pressing submit, please make sure all the information you entered above is complete and correct. For themes, a preview screenshot is required for approval. A preview image is recommended for extensions.</TD></TR>
<TR><TD COLSPAN=4 ALIGN=CENTER><input name="submit" type="submit" value="Submit">&nbsp;&nbsp;<input name="reset" type="reset" value="Reset"></TD></TR>
<?php } else { ?>
<TR><TD COLSPAN=4 ALIGN=CENTER>No items are pending approval at this time</TD></TR>
<?php } ?>
</form>
</TABLE>

<?php 
} else if ($function=="approvalhistory") {
?>
<style type="text/css">
TD { font-size: 8pt }
</style>
<h1>Approval History Log</h2>
<span style="font-size: 8pt;">Incomplete Basic UI for the Approval History Log. <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=255305">Bug 255305</a>.</span>
<table border=0 cellpadding=2 cellspacing=0 align="Center">
<tr style="background-color:#ccc;font-weight:bold;">
<td>&nbsp;</td>
<td style="font-size: 8pt">ID</td>
<td style="font-size: 8pt">vID</td>
<td style="font-size: 8pt">uID</td>
<td style="font-size: 8pt">Action</td>
<td style="font-size: 8pt">Date</td>
<td style="font-size: 6pt">Install?</td>
<td style="font-size: 6pt">Unistall?</td>
<td style="font-size: 6pt">New Chrome?</td>
<td style="font-size: 6pt">App Works?</td>
<td style="font-size: 6pt">Visual Errors?</td>
<td style="font-size: 6pt">All Elements Themed?</td>
<td style="font-size: 6pt">Clean Profile?</td>
<td style="font-size: 6pt">Works As Described?</td>
<td style="font-size: 6pt">Test Build:</td>
<td style="font-size: 7pt">Test OS:</td>
<td style="font-size: 7pt">Comments:</td>
</tr>
<?php

$_start_date = mysql_real_escape_string($_GET['start']);
$_end_date = mysql_real_escape_string($_GET['end']);

$sql ="SELECT * FROM `approvallog` WHERE 1=1";

if (!empty($_start_date)) {
    $sql .= " AND date >= '{$_start_date}'";
} else {
    // If we don't have a start date, throw in the beginning of the current month
    $_start_date = date('Y-m-01');
    $sql .= " AND date >= '{$_start_date}'";
}
if (!empty($_end_date)) {
    $sql .= " AND date <= '{$_end_date}'";
} else {
    $_end_date = date('Y-m-t');
    $sql .= " AND date <= '{$_end_date}'";
}
$sql .= " ORDER BY `date` DESC";

$_start_date = htmlentities($_start_date);
$_end_date = htmlentities($_end_date);

echo "<p>Showing results between {$_start_date} and {$_end_date}</p>";

// Basically, we're grabbing the start and end dates
// they gave us, and adding or subtracting a week to exaggerate the month they are
// in.  This means they land into the previous or next month for us, and we just have
// to make the start the first, and then figure out the length of the month.  I
// assure you this is temporary and this whole thing is getting rewritten.
echo '
<p>
<a href="?function=approvalhistory&start='.date('Y-m-01',strtotime($_start_date)-604800).'&end='.date('Y-m-t',strtotime($_start_date)-604800).'">&laquo; Prev Month</a> 
<a href="?function=approvalhistory&start='.date('Y-m-01',strtotime($_end_date)+604800).'&end='.date('Y-m-t',strtotime($_end_date)+604800).'">Next Month &raquo;</a>
</p>
';



 $sql_result = mysql_query($sql, $connection) or trigger_error("MySQL Error ".mysql_errno().": ".mysql_error()."", E_USER_NOTICE);
 $num_results = mysql_num_rows($sql_result);
  while ($row = mysql_fetch_array($sql_result)) {
    $i++;
    $logid = $row["LogID"];
    $id = $row["ID"];
    $vid = $row["vID"];
    $userid = $row["UserID"];
    $action = $row["action"];
    $date = $row["date"];
    $installation = $row["Installation"];
    $uninstallation = $row["Uninstallation"];
    $newchrome = $row["NewChrome"];
    $appworks = $row["AppWorks"];
    $visualerrors = $row["VisualErrors"];
    $allelementsthemed = $row["AllElementsThemed"];
    $cleanprofile = $row["CleanProfile"];
    $worksasdescribed = $row["WorksAsDescribed"];
    $testbuild = $row["TestBuild"];
    $testos = $row["TestOS"];
    $comments = $row["comments"];

    $class = ($i % 2) ? 'rowa' : 'rowb';

    echo"<tr class=\"{$class}\">
    <td>$i.</td>
    <td>$id</td>
    <td>$vid</td>
    <td>$userid</td>
    <td>$action</td>
    <td>$date</td>
    <td>$installation</td>
    <td>$uninstallation</td>
    <td>$newchrome</td>
    <td>$appworks</td>
    <td>$visualerrors</td>
    <td>$allelementsthemed</td>
    <td>$cleanprofile</td>
    <td>$worksasdescribed</td>
    <td>$testbuild</td>
    <td>$testos</td>
    <td>$comments</td>
    </tr>\n";
  }
?>
</table>


<?php
} else {}
?>


<!-- close #mBody-->
</div>

<?php
require_once(FOOTER);
?>