reviews moderation

Code: Select all

public function addReview($product_id, $data) {
		$this->db->query("INSERT INTO " . DB_PREFIX . "review SET author = '" . $this->db->escape($data['name']) . "', customer_id = '" . (int)$this->customer->getId() . "', product_id = '" . (int)$product_id . "', text = '" . $this->db->escape(strip_tags($data['text'])) . "', rating = '" . (int)$data['rating'] . "', date_added = NOW()");
	}

Code: Select all

public function addReview($product_id, $data) {
		$this->db->query("INSERT INTO " . DB_PREFIX . "review SET author = '" . $this->db->escape($data['name']) . "', customer_id = '" . (int)$this->customer->getId() . "', product_id = '" . (int)$product_id . "', text = '" . $this->db->escape(strip_tags($data['text'])) . "', rating = '" . (int)$data['rating'] . "', status = '1', date_added = NOW()");
	}

Code: Select all

			$data = $this->request->post;

			$this->load->model('catalog/product');
			$product_info = $this->model_catalog_product->getProduct($product_id);
			
			$message ="<strong>You have a new product review waiting.</strong><br><br>";
			$message.='Product: '.$this->db->escape(strip_tags($product_info['name'])).'<br>';
			$message.='Reviewer: '.$this->db->escape(strip_tags($data['name'])).'<br>';
			$message.='Rating: '.$this->db->escape(strip_tags($data['rating'])).'<br><br>';
			$message.='Text: <br>';
			$message.=$this->db->escape(strip_tags($data['text']))."<br><br>";
			$message.='<a href="'.$this->config->get('config_url').'/admin/index.php">Login to review</a>';
			
			$mail = new Mail($this->config->get('config_mail_protocol'), $this->config->get('config_smtp_host'), $this->config->get('config_smtp_username'), html_entity_decode($this->config->get('config_smtp_password')), $this->config->get('config_smtp_port'), $this->config->get('config_smtp_timeout'));
			$mail->setTo(array($this->config->get('config_email')));
			$mail->setFrom($this->config->get('config_email'));
			$mail->setSender($this->config->get('config_name'));
			$mail->setSubject("Product Review");
			$mail->setHtml($message);

			$mail->send();			

Code: Select all

		if (($this->request->server['REQUEST_METHOD'] == 'POST') && !isset($json['error'])) {
			$this->model_catalog_review->addReview($this->request->get['product_id'], $this->request->post);
			
			$json['success'] = $this->language->get('text_success');