Gazelle/sections/tools/managers/email_delete_requests.php

<?

if (!check_perms('users_mod')) {
  error(403);
}

$QueryID = $DB->query("
  SELECT SQL_CALC_FOUND_ROWS *
  FROM email_delete_requests");

$DB->query("SELECT FOUND_ROWS()");
list($NumResults) = $DB->next_record();
$DB->set_query_id($QueryID);

$Requests = $DB->to_array();

if (isset($_GET['deny']) && isset($_GET['email'])) {
  authorize();

  $Deny = ($_GET['deny'] == "true");
  $Email = db_string($_GET['email']);

  $DB->query("
    DELETE FROM email_delete_requests
    WHERE Email = '$Email'");

  $DB->query("
    SELECT UserID
    FROM users_history_emails
    WHERE Email = '$Email'");
  if ($DB->has_results()) {
    list($UserID) = $DB->next_record();
    if ($UserID != $_GET['userid']) {
      $Err = "The UserID is incorrect?";
    }
  } else {
    $Err = "That email doesn't exist.";
  }

  if (empty($Err)) {
    if (!$Deny) {
      $DB->query("
        SELECT Email
        FROM users_history_emails
        WHERE UserID = '$UserID'");
      $ToDelete = array();
      while (list($EncEmail) = $DB->next_record()) {
        if (DBCrypt::decrypt($Email) == DBCrypt::decrypt($EncEmail)) {
          $ToDelete[] = $EncEmail;
        }
      }
      forEach ($ToDelete as $DelEmail) {
        $DB->query("
          DELETE FROM users_history_emails
          WHERE UserID = $UserID
            AND Email = '$DelEmail'");
      }
      $Succ = "Email deleted.";
      Misc::send_pm($UserID, 0, "Email Deletion Request Accepted.", "Your email deletion request has been accepted. What email? I don't know! We don't have it anymore!");
    } else {
      $Succ = "Request denied.";
      Misc::send_pm($UserID, 0, "Email Deletion Request Denied.", "Your email deletion request has been denied.\n\nIf you wish to discuss this matter further, please create a staff PM, or join #oppaitime-help on IRC to speak with a staff member.");
    }
  }

  $Cache->delete_value('num_email_delete_requests');
}

View::show_header("Email Deletion Requests");

?>

<div class="header">
  <h2>Email Deletion Requests</h2>
</div>

<? if (isset($Err)) { ?>
<span>Error: <?=$Err?></span>
<? } elseif (isset($Succ)) { ?>
<span>Success: <?=$Succ?></span>
<? } ?>

<div class="thin">
  <table width="100%">
    <tr class="colhead">
      <td>User</td>
      <td>Email</td>
      <td>Reason</td>
      <td>Accept</td>
      <td>Deny</td>
    </tr>
<? foreach ($Requests as $Request) { ?>
    <tr>
      <td><?=Users::format_username($Request['UserID'])?></td>
      <td><?=DBCrypt::decrypt($Request['Email'])?></td>
      <td><?=display_str($Request['Reason'])?></td>
      <td><a href="tools.php?action=delete_email&auth=<?=$LoggedUser['AuthKey']?>&email=<?=urlencode($Request['Email'])?>&userid=<?=$Request['UserID']?>&deny=false" class="brackets">Accept</a></td>
      <td><a href="tools.php?action=delete_email&auth=<?=$LoggedUser['AuthKey']?>&email=<?=urlencode($Request['Email'])?>&userid=<?=$Request['UserID']?>&deny=true" class="brackets">Deny</a></td>
    </tr>
<? } ?>
  </table>
</div>

<? View::show_footer(); ?>