File: /var/www/html/phpmyfaq/admin/ajax.comment.php
<?php
/**
* AJAX: deletes comments with the given id.
*
* This Source Code Form is subject to the terms of the Mozilla Public License,
* v. 2.0. If a copy of the MPL was not distributed with this file, You can
* obtain one at http://mozilla.org/MPL/2.0/.
*
* @package phpMyFAQ
* @author Thorsten Rinne <thorsten@phpmyfaq.de>
* @copyright 2009-2022 phpMyFAQ Team
* @license http://www.mozilla.org/MPL/2.0/ Mozilla Public License Version 2.0
* @link https://www.phpmyfaq.de
* @since 2009-03-20
*/
use phpMyFAQ\Comments;
use phpMyFAQ\Filter;
use phpMyFAQ\Helper\HttpHelper;
if (!defined('IS_VALID_PHPMYFAQ')) {
http_response_code(400);
exit();
}
$ajaxAction = Filter::filterInput(INPUT_POST, 'ajaxaction', FILTER_UNSAFE_RAW);
$http = new HttpHelper();
$http->setContentType('application/json');
$http->addHeader();
if ('delete' === $ajaxAction && $user->perm->hasPermission($user->getUserId(), 'delcomment')) {
$comment = new Comments($faqConfig);
$checkFaqs = [
'filter' => FILTER_VALIDATE_INT,
'flags' => FILTER_REQUIRE_ARRAY,
];
$checkNews = [
'filter' => FILTER_VALIDATE_INT,
'flags' => FILTER_REQUIRE_ARRAY,
];
$success = false;
$faqComments = Filter::filterInputArray(INPUT_POST, ['faq_comments' => $checkFaqs]);
$newsComments = Filter::filterInputArray(INPUT_POST, ['news_comments' => $checkNews]);
if (!is_null($faqComments['faq_comments'])) {
foreach ($faqComments['faq_comments'] as $commentId => $recordId) {
$success = $comment->deleteComment($recordId, $commentId);
}
}
if (!is_null($newsComments['news_comments'])) {
foreach ($newsComments['news_comments'] as $commentId => $recordId) {
$success = $comment->deleteComment($recordId, $commentId);
}
}
$http->setStatus(200);
$http->sendWithHeaders($success);
} else {
$http->setStatus(401);
$http->sendWithHeaders(false);
}