approve.php

<?php
// This file is part of Moodle - http://moodle.org/
//
// Moodle is free software: you can redistribute it and/or modify
// it under the terms of the GNU General Public License as published by
// the Free Software Foundation, either version 3 of the License, or
// (at your option) any later version.
//
// Moodle is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
// GNU General Public License for more details.
//
// You should have received a copy of the GNU General Public License
// along with Moodle.  If not, see <http://www.gnu.org/licenses/>.
// Script used to approve moderated comments. This can be called in two ways;
// from email (which is a GET request) and from the web (which is POST).
require_once('../../config.php');
require_once('locallib.php');

// Shared parameter
$mcommentid = required_param('mcomment', PARAM_INT);

// Parameters for each type
if ($_SERVER['REQUEST_METHOD'] == 'GET') {
    $email = true;
    // Check request parameters from email
    $key = required_param('key', PARAM_ALPHANUM);
    $approve = required_param('approve', PARAM_INT) ? true : false;
} else {
    $email = false;
    // Check request parameters from web
    require_sesskey();
    if (optional_param('bapprove', false, PARAM_TEXT)) {
        $approve = true;
    } else {
        required_param('breject', PARAM_TEXT); // Sanity check
        $approve = false;
    }
    $redirectlower = optional_param('last', 0, PARAM_INT) ? false : true;
}

// Load comment and check it
if (!($mcomment = $DB->get_record('oublog_comments_moderated', array('id'=> $mcommentid)))) {
    throw new moodle_exception('invalidrequest', 'error');
}

// Use post page for continue on error messages
$backlink = $CFG->wwwroot . '/mod/oublog/viewpost.php?post=' .
        $mcomment->postid;

// Load post, blog, etc
if (!$post = oublog_get_post($mcomment->postid, false)) {
    throw new moodle_exception('error_unspecified', 'oublog', $backlink, 'A1');
}
if (!($oublog = oublog_get_blog_from_postid($post->id))) {
    throw new moodle_exception('error_unspecified', 'oublog', $backlink, 'A2');
}
if (!$cm = get_coursemodule_from_instance('oublog', $oublog->id)) {
    throw new moodle_exception('invalidcoursemodule', 'error', $backlink);
}
if (!$course = $DB->get_record("course", array("id"=>$cm->course))) {
    throw new moodle_exception('coursemisconf', 'error', $backlink);
}

// Check state
if ($mcomment->approval) {
   throw new moodle_exception('error_alreadyapproved', 'oublog', $backlink);
}
if ($email && $key !== $mcomment->secretkey) {
    throw new moodle_exception('error_wrongkey', 'oublog', $backlink);
}

// Require login, it to be your own post, and commenting permission
require_login($course, $cm);
$context = context_module::instance($cm->id);
oublog_check_view_permissions($oublog, $context, $cm);
if ($USER->id !== $post->userid ||
        !oublog_can_view_post($post, $USER, $context, $cm, $oublog) ||
        !oublog_can_comment($cm, $oublog, $post)) {
    throw new moodle_exception('accessdenied', 'oublog', $backlink);
}

// The post must (still) allow public comments
if ($post->allowcomments < OUBLOG_COMMENTS_ALLOWPUBLIC ||
    $oublog->allowcomments < OUBLOG_COMMENTS_ALLOWPUBLIC) {
    throw new moodle_exception('error_moderatednotallowed', 'oublog', $backlink);
}

// OK they are actually allowed to approve / reject this
if (!$approvedcomment = oublog_approve_comment($mcomment, $approve)) {
    throw new moodle_exception('error_unspecified', 'oublog', 'A5', $backlink);
}

// Redirect back to view post
$target = 'viewpost.php?post=' . $post->id;
if (!$email && $redirectlower) {
    $target .= '#awaiting';
}

if ($approvedcomment > 0 ) {
    // Log approved comment event.
    $params = array(
            'context' => $context,
            'objectid' => $approvedcomment,
            'other' => array(
                'postid' => $mcomment->postid,
                'mcommentid' => $mcommentid,
                'oublogid' => $oublog->id
            )
    );
    $event = \mod_oublog\event\comment_approved::create($params);
    $event->trigger();
}
redirect($target);