mirror of
https://gitlab.archlinux.org/archlinux/aurweb.git
synced 2025-02-03 10:43:03 +01:00
03c6304e19
Add a new function has_credential() that checks whether the currently logged in user is allowed to perform a given action. Moving all permission handling to this central place makes adding new user groups and adjusting permissions much more convenient. Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
53 lines
1.9 KiB
PHP
53 lines
1.9 KiB
PHP
<?php
|
|
$base_id = pkgbase_from_pkgid($row['ID']);
|
|
$count = pkgbase_comments_count($base_id);
|
|
?>
|
|
<div id="news">
|
|
<h3>
|
|
<a href="<?= htmlentities(get_pkgbase_uri($pkgbase_name), ENT_QUOTES) . '?' . mkurl('comments=all') ?>" title="<?= __('View all %s comments' , $count) ?>"><?= __('Latest Comments') ?></a>
|
|
<span class="arrow"></span>
|
|
</h3>
|
|
|
|
<?php while (list($indx, $row) = each($comments)): ?>
|
|
<?php if ($row['UserName'] && $SID):
|
|
$row['UserName'] = "<a href=\"" . get_user_uri($row['UserName']) . "\">{$row['UserName']}</a>";
|
|
endif; ?>
|
|
<h4>
|
|
<?php if (can_delete_comment_array($row)): ?>
|
|
<form method="post" action="<?= htmlspecialchars(get_pkgbase_uri($pkgbase_name), ENT_QUOTES); ?>">
|
|
<fieldset style="display:inline;">
|
|
<input type="hidden" name="action" value="do_DeleteComment" />
|
|
<input type="hidden" name="comment_id" value="<?= $row['ID'] ?>" />
|
|
<input type="hidden" name="token" value="<?= htmlspecialchars($_COOKIE['AURSID']) ?>" />
|
|
<input type="image" src="/images/x.png" alt="<?= __('Delete comment') ?>" name="submit" value="1" />
|
|
</fieldset>
|
|
<?php if ($row['UserName']): ?>
|
|
<?= __('Comment by %s', $row['UserName']) ?>
|
|
<?php else: ?>
|
|
<?= __('Anonymous comment') ?>
|
|
<?php endif; ?>
|
|
</form>
|
|
<?php else: ?>
|
|
<?php if ($row['UserName']): ?>
|
|
<?= __('Comment by %s', $row['UserName']) ?>
|
|
<?php else: ?>
|
|
<?= __('Anonymous comment') ?>
|
|
<?php endif; ?>
|
|
<?php endif; ?>
|
|
</h4>
|
|
<p class="timestamp"><?= gmdate('Y-m-d H:i', $row['CommentTS']) ?></p>
|
|
<div class="article-content">
|
|
<p>
|
|
<?= parse_comment($row['Comments']) ?>
|
|
</p>
|
|
</div>
|
|
<?php endwhile; ?>
|
|
</div>
|
|
|
|
<?php if ($count > 10 && !isset($_GET['comments'])): ?>
|
|
<div id="news">
|
|
<h3>
|
|
<a href="<?= htmlentities(get_pkgbase_uri($pkgbase_name), ENT_QUOTES) . '?' . mkurl('comments=all') ?>" title="<?= __('View all %s comments', $count) ?>"><?= __('All comments', $count) ?></a>
|
|
</h3>
|
|
</div>
|
|
<?php endif; ?>
|