Gazelle/sections/delete/take_delete_email.php

<?

enforce_login();
authorize();

if (!isset($_POST['emails']) || !is_array($_POST['emails'])) {
  error("Stop that.");
}

if (!apcu_exists('DBKEY')) {
  error(403);
}

$EncEmails = $_POST['emails'];

$Reason = $_POST['reason'] ?? '';

forEach ($EncEmails as $EncEmail) {
  $DB->query("
    SELECT UserID
    FROM users_history_emails
    WHERE Email = '".db_string($EncEmail)."'");

  if (!$DB->has_results()) {
    error('Email not found');
  }

  list($UserID) = $DB->next_record();

  if (!check_perms('users_mod') && ($UserID != $LoggedUser['ID'])) {
    error(403);
  }

  $DB->query("
    SELECT Email
    FROM users_main
    WHERE ID = '$UserID'");

  if (!$DB->has_results()) {
    error(404);
  }

  list($Curr) = $DB->next_record();
  $Curr = DBCrypt::decrypt($Curr);

  if ($Curr == DBCrypt::decrypt($EncEmail)) {
    error("You can't delete your current email.");
  }
}

//Okay I think everything checks out.

$DB->query("
  INSERT INTO email_delete_requests
    (UserID, Email, Reason, Time)
  VALUES
    ('$UserID', '".db_string($EncEmails[0])."', '".db_string($Reason)."', '".sqltime()."')");

$Cache->delete_value('num_email_delete_requests');

View::show_header('Email Deletion Request');
?>

<div class="thin">
  <h2 id="general">Email Deletion Request</h2>
  <div class="box pad" style="padding: 10px 10px 10px 20px;">
    <p>Your request has been sent. Please wait for it to be acknowledged.</p>
    <p>After it's accepted or denied by staff, you will receive a PM response.</p>
    <p><a href="/index.php">Return</a></p>
  </div>
</div>
<? View::show_footer(); ?>