[OzzModz] Can't Report Own Content 2.0.1

[Ozzy47]

ozzy47 submitted a new resource:

[OzzModz] Can't Report Own Content - Users can not report own content

This simple addon removes the ability for users to report their own content. There are no settings, just install it and forget it.

This removes the report function in the following locations:

• Posts
• Profile posts
• Profiles
• Conversation posts

Read more about this resource...

 

[Lukas W.]

Looks like you're using template mods to hide the report button conditionally. Couple of thoughts on this: Using that approach would still allow people to send reports either by A) having a link to the report page for the content (which can technically be inferred from looking at the report link of other contents and the edit/delete link of the given content) or B) posting to the endpoint directly. It would probably be better to alter the canReport() function of the respective entities instead, something simple like the function below should do. That would also make sure it works with any type of 3rd party custom display that has its own report button.

public function canReport(&$error = null, User $asUser = null)
{
    $asUser = $asUser ?: \XF::visitor();
    return parent::canReport($error, $asUser) && $asUser->user_id !== $this->user_id;
}

 

[Ozzy47]

Looks like you're using template mods to hide the report button conditionally. Couple of thoughts on this: Using that approach would still allow people to send reports either by A) having a link to the report page for the content (which can technically be inferred from looking at the report link of other contents and the edit/delete link of the given content) or B) posting to the endpoint directly. It would probably be better to alter the canReport() function of the respective entities instead, something simple like the function below should do. That would also make sure it works with any type of 3rd party custom display that has its own report button.

public function canReport(&$error = null, User $asUser = null)
{
    $asUser = $asUser ?: \XF::visitor();
    return parent::canReport($error, $asUser) && $asUser->user_id !== $this->user_id;
}

Thanks, I'll add this in the next version. Once I find all the right places.

 

[Lukas W.]

Once I find all the right places.

You'd want to extend:

• XF\Entity\Post
• XF\Entity\ProfilePost
• XF\Entity\ProfilePostComment
• XF\Entity\ConversationMessage

If you want to support 1st party addons:

• XFMG\Entity\Album
• XFMG\Entity\MediaItem
• XFMG\Entity\Comment
• XFRM\Entity\ResourceUpdate
• XFRM\Entity\ResourceRating

To extend XF\Entity\User, you'll need a slightly different function than the one above:

public function canReport(&$error = null)
{
    return parent::canReport($error) && \XF::visitor()->user_id !== $this->user_id;
}

 

[Ozzy47]

You'd want to extend:

• XF\Entity\Post
• XF\Entity\ProfilePost
• XF\Entity\ProfilePostComment
• XF\Entity\ConversationMessage

If you want to support 1st party addons:

• XFMG\Entity\Album
• XFMG\Entity\MediaItem
• XFMG\Entity\Comment
• XFRM\Entity\ResourceUpdate
• XFRM\Entity\ResourceRating

To extend XF\Entity\User, you'll need a slightly different function than the one above:

public function canReport(&$error = null)
{
    return parent::canReport($error) && \XF::visitor()->user_id !== $this->user_id;
}

Thank you, I appreciate the time and the help.

 

[Ozzy47]

To extend XF\Entity\User, you'll need a slightly different function than the one above:

public function canReport(&$error = null)
{
    return parent::canReport($error) && \XF::visitor()->user_id !== $this->user_id;
}

There is a problem with the user entity, applying any trpe of check there removes the button in every profile. It's related to this XF bug report, https://xenforo.com/community/threa...an-be-reported-check-is-not-performed.178568/

So for the time being I am just going to have to use the TM for that.

 

[Lukas W.]

You could combine that with the following extension for XF\Pub\Controller\Member to prevent bypassing that by accessing the route directly:

public function actionReport(ParameterBag $params)
{
    $user = $this->assertViewableUser($params->user_id);
    if($user->user_id === \XF::visitor()->user_id) {
        return $this->noPermission();
    }
    return parent::actionReport($params);
}

 

[Ozzy47]

Lemme give that a shot.

 

[Ozzy47]

You could combine that with the following extension for XF\Pub\Controller\Member to prevent bypassing that by accessing the route directly:

public function actionReport(ParameterBag $params)
{
    $user = $this->assertViewableUser($params->user_id);
    if($user->user_id === \XF::visitor()->user_id) {
        return $this->noPermission();
    }
    return parent::actionReport($params);
}

That still does not fix the fact that extending the User entity causes the button to be removed from every users profile, not just the visitors. Also, combining that and extending XF\Pub\Controller\Member will not allow reporting anyone even accessing the url directly. It's a bug XF is going to have to fix in the User entity.

 

[Lukas W.]

That still does not fix the fact that extending the User entity causes the button to be removed from every users profile, not just the visitors. Also, combining that and extending XF\Pub\Controller\Member will not allow reporting anyone even accessing the url directly. It's a bug XF is going to have to fix in the User entity.

Oh yeah, I was a bit unclear there, sorry. I meant combine that with your template modification to hide the button.

 

[Ozzy47]

I'm still on my first cup of coffee so I am probably a bit daft ATM anyway.

 

[gogo]

It'd be great if you can make the following location selectable.

• Posts
• Profile posts
• Profiles
• Conversation posts

 

[Ozzy47]

I'll think about it.

 

[Dragonfruit]

Suggestion; if this can be extended to prevent reporting on mods & admins, that'd be great.

 

[Ozzy47]

Ozzy47 updated [OzzModz] Can't Report Own Content with a new update entry:

[OzzModz] Can't Report Own Content for XenForo 2.1+ Update 2.0.1

Support: XF 2.2

Read the rest of this update entry...