//

// -------------------------------------------------------------

$phpbb_root_path = './';

$phpEx = substr(strrchr(__FILE__, '.'), 1);

include($phpbb_root_path . 'common.'.$phpEx);

// Grab only parameters needed here

$post_id = request_var('p', 0);

$topic_id = request_var('t', 0);

$forum_id = request_var('f', 0);

$draft_id = request_var('d', 0);

$lastclick = request_var('lastclick', 0);

$refresh = isset($_POST['add_file']) || isset($_POST['delete_file']) || isset($_POST['edit_comment']) || isset($_POST['cancel_unglobalise']) || $save || $load;

$error = array();

$current_time = time();

extract($db->sql_fetchrow($result));

$db->sql_freeresult($result);

$forum_id = (int) $forum_id;

$topic_id = (int) $topic_id;

$post_edit_locked = (int) $post_edit_locked;

if ($forum_password)

{

}

$post_subject = (in_array($mode, array('quote', 'edit', 'delete'))) ? $post_subject : $topic_title;

//

foreach ($message_parser->attachment_data as $pos => $var_ary)

{

$message_parser->attachment_data[$pos]['filesize'] = (int) $message_parser->attachment_data[$pos]['filesize'];

$message_parser->attachment_data[$pos]['filetime'] = (int) $message_parser->attachment_data[$pos]['filetime'];

if (!in_array($mode, array('quote', 'edit', 'delete')))

{

}

// User own some drafts?

if ($user->data['user_id'] != ANONYMOUS && $auth->acl_get('u_savedrafts') && $mode != 'delete')

if ($db->sql_fetchrow($result))

{

}

}

}

trigger_error('DELETE_OWN_POSTS');

}

if ($mode == 'delete' && $poster_id == $user->data['user_id'] && $auth->acl_get('f_delete', $forum_id) && $post_id != $topic_last_post_id)

{

trigger_error('CANNOT_DELETE_REPLIED');

// HTML, BBCode, Smilies, Images and Flash status

// Bump Topic

if ($mode == 'bump' && ($bump_time = bump_topic_allowed($forum_id, $topic_bumped, $topic_last_post_time, $topic_poster, $topic_last_poster_id)))

meta_refresh(3, "viewtopic.$phpEx$SID&f=$forum_id&t=$topic_id&p=$topic_last_post_id#$topic_last_post_id");

$message = $user->lang['TOPIC_BUMPED'] . '<br /><br />' . sprintf($user->lang['VIEW_MESSAGE'], '<a href="viewtopic.' . $phpEx . $SID . "&amp;f=$forum_id&amp;t=$topic_id&amp;p=$topic_last_post_id#$topic_last_post_id\">", '</a>') . '<br /><br />' . sprintf($user->lang['RETURN_FORUM'], '<a href="viewforum.' . $phpEx . $SID .'&amp;f=' . $forum_id . '">', '</a>');

trigger_error($message);

}

else if ($mode == 'bump')

if ($save && $user->data['user_id'] != ANONYMOUS && $auth->acl_get('u_savedrafts'))

{

$subject = preg_replace('#&amp;(\#[0-9]+;)#', '&\1', request_var('subject', ''));

$message = (isset($_POST['message'])) ? htmlspecialchars(trim(str_replace(array('\\\'', '\\"', '\\0', '\\\\'), array('\'', '"', '\0', '\\'), $_POST['message']))) : '';

$message = preg_replace('#&amp;(\#[0-9]+;)#', '&\1', $message);

{

$sql = 'INSERT INTO ' . DRAFTS_TABLE . ' ' . $db->sql_build_array('INSERT', array(

'user_id' => $user->data['user_id'],

'draft_message' => $message));

$db->sql_query($sql);

meta_refresh(3, $meta_info);

$topic_cur_post_id = request_var('topic_cur_post_id', 0);

$subject = request_var('subject', '');

{

$subject = phpbb_strtolower($subject);

}

$message_parser->message = (isset($_POST['message'])) ? htmlspecialchars(trim(str_replace(array('\\\'', '\\"', '\\0', '\\\\'), array('\'', '"', '\0', '\\'), $_POST['message']))) : '';

$message_parser->message = preg_replace('#&amp;(\#[0-9]+;)#', '&\1', $message_parser->message);

$topic_type = (isset($_POST['topic_type'])) ? (int) $_POST['topic_type'] : (($mode != 'post') ? $topic_type : POST_NORMAL);

$topic_time_limit = (isset($_POST['topic_time_limit'])) ? (int) $_POST['topic_time_limit'] : (($mode != 'post') ? $topic_time_limit : 0);

$icon_id = request_var('icon', 0);

$enable_urls = (isset($_POST['disable_magic_url'])) ? 0 : 1;

// Faster than crc32

$check_value = (($preview || $refresh) && isset($_POST['status_switch'])) ? (int) $_POST['status_switch'] : (($enable_html+1) << 16) + (($enable_bbcode+1) << 8) + (($enable_smilies+1) << 4) + (($enable_urls+1) << 2) + (($enable_sig+1) << 1);

{

// Delete Poll

$sql = 'DELETE FROM ' . POLL_OPTIONS_TABLE . ', ' . POLL_VOTES_TABLE . "

{

if (topic_review($topic_id, $forum_id, 'post_review', $topic_cur_post_id))

{

}

}

// Validate username

// TODO

{

include($phpbb_root_path . 'includes/functions_user.' . $phpEx);

$username = strip_tags(htmlspecialchars($username));

{

$error[] = $result;

}

}

// Parse subject

{

$error[] = $user->lang['EMPTY_SUBJECT'];

}

$row = $db->sql_fetchrow($result);

{

$to_forum_id = request_var('to_forum_id', 0);

if (!$to_forum_id)

{

$template->assign_vars(array(

);

}

else

{

{

// Lock/Unlock Topic

$change_topic_status = $topic_status;

if ($topic_status == ITEM_LOCKED && !$topic_lock && $perm_lock_unlock)

{

$db->sql_query($sql);

$user_lock = ($auth->acl_get('f_user_lock', $forum_id) && $user->data['user_id'] != ANONYMOUS && $user->data['user_id'] == $topic_poster) ? 'USER_' : '';

add_log('mod', $forum_id, $topic_id, sprintf($user->lang['LOGM_' . $user_lock . (($change_topic_status == ITEM_LOCKED) ? 'LOCK' : 'UNLOCK')], '<a href="' . generate_board_url() . "/viewtopic.$phpEx$SID&amp;f=$forum_id&amp;t=$topic_id" . '" class="gen" target="_blank">' . $topic_title . '</a>'));

}

}

$post_data = array(

'topic_first_post_id' => (int) $topic_first_post_id,

'topic_last_post_id' => (int) $topic_last_post_id,

'topic_time_limit' => (int) $topic_time_limit,

'enable_indexing' => (bool) $enable_indexing,

'message_md5' => (int) $message_md5,

'post_checksum' => (int) $post_checksum,

'forum_parents' => $forum_parents,

'forum_name' => $forum_name,

'notify' => $notify,

format_display($preview_message, $preview_signature, $message_parser->bbcode_uid, $preview_signature_uid, $enable_html, $enable_bbcode, $enable_urls, $enable_smilies, $enable_sig);

// Poll Preview

{

decode_text($poll_title, $message_parser->bbcode_uid);

$template->assign_vars(array(

'POLL_QUESTION' => $preview_poll_title)

);

foreach ($poll_options as $option)

{

$template->assign_block_vars('poll_option', array(

);

}

}

include($phpbb_root_path . 'includes/functions_display.' . $phpEx);

$extensions = $update_count = array();

}

}

$bbcode_uid = ($mode == 'quote' && !$preview && !$refresh && !sizeof($error)) ? $bbcode_uid : $message_parser->bbcode_uid;

decode_text($post_text, $bbcode_uid);

if ($subject)

{

decode_text($subject, $bbcode_uid);

// Generate Topic icons

if ($enable_icons)

{

// Grab icons

}

}

}

}

// Topic type selection ... only for first post in topic.

if ($mode == 'post' || ($mode == 'edit' && $post_id == $topic_first_post_id))

{

$topic_types = array(

if ($auth->acl_get('f_' . $auth_key, $forum_id))

{

$topic_type_array[] = array(

'VALUE' => $topic_value['const'],

'S_CHECKED' => ($topic_type == $topic_value['const'] || ($forum_id == 0 && $topic_value['const'] == POST_GLOBAL)) ? ' checked="checked"' : '',

'VALUE' => POST_NORMAL,

'S_CHECKED' => ($topic_type == POST_NORMAL) ? ' checked="checked"' : '',

'L_TOPIC_TYPE' => $user->lang['POST_NORMAL'])),

$topic_type_array

);

}

$template->assign_vars(array(

);

}

}

'L_MESSAGE_BODY_EXPLAIN'=> (intval($config['max_post_chars'])) ? sprintf($user->lang['MESSAGE_BODY_EXPLAIN'], intval($config['max_post_chars'])) : '',

'FORUM_NAME' => $forum_name,

'TOPIC_TITLE' => $topic_title,

'MODERATORS' => (sizeof($moderators)) ? implode(', ', $moderators[$forum_id]) : '',

'USERNAME' => ((!$preview && $mode != 'quote') || $preview) ? stripslashes($username) : '',

'POST_DATE' => ($post_time) ? $user->format_date($post_time) : '',

'ERROR' => (sizeof($error)) ? implode('<br />', $error) : '',

'TOPIC_TIME_LIMIT' => (int) $topic_time_limit,

'U_VIEW_FORUM' => "viewforum.$phpEx$SID&amp;f=" . $forum_id,

'U_VIEWTOPIC' => ($mode != 'post') ? "viewtopic.$phpEx$SID&amp;$forum_id&amp;t=$topic_id" : '',

'S_DISPLAY_PREVIEW' => ($preview && !sizeof($error)),

'S_EDIT_POST' => ($mode == 'edit'),

'S_SHOW_TOPIC_ICONS' => $s_topic_icons,

'S_HTML_ALLOWED' => $html_status,

'S_HTML_CHECKED' => ($html_checked) ? ' checked="checked"' : '',

'S_BBCODE_ALLOWED' => $bbcode_status,

'S_BBCODE_CHECKED' => ($bbcode_checked) ? ' checked="checked"' : '',

'S_SMILIES_ALLOWED' => $smilies_status,

'S_SMILIES_CHECKED' => ($smilies_checked) ? ' checked="checked"' : '',

'S_SIGNATURE_CHECKED' => ($sig_checked) ? ' checked="checked"' : '',

'S_NOTIFY_CHECKED' => ($notify_checked) ? ' checked="checked"' : '',

'S_LOCK_TOPIC_CHECKED' => ($lock_topic_checked) ? ' checked="checked"' : '',

'S_LOCK_POST_CHECKED' => ($lock_post_checked) ? ' checked="checked"' : '',

'S_MAGIC_URL_CHECKED' => ($urls_checked) ? ' checked="checked"' : '',

'S_TYPE_TOGGLE' => $topic_type_toggle,

'S_FORM_ENCTYPE' => $form_enctype,

'S_POST_ACTION' => $s_action,

);

// Poll entry

{

$template->assign_vars(array(

'L_POLL_OPTIONS_EXPLAIN'=> sprintf($user->lang['POLL_OPTIONS_EXPLAIN'], $config['max_poll_options']),

'POLL_TITLE' => $poll_title,

'POLL_LENGTH' => $poll_length)

);

}

{

$template->assign_vars(array(

);

}

// Attachment entry

{

$template->assign_vars(array(

);

if (sizeof($message_parser->attachment_data))

{

$template->assign_vars(array(

);

$count = 0;

{

if (topic_review($topic_id, $forum_id))

{

}

}

{

global $db, $user, $censors, $config, $phpbb_root_path, $phpEx, $auth;

if (!$topic_notification && !$forum_notification)

{

trigger_error('WRONG_NOTIFICATION_MODE');

}

{

$censors = array();

obtain_word_list($censors);

}

unset($email_list_ary);

{

$messenger->queue->save();

}

global $censors, $config, $phpbb_root_path, $phpEx, $SID;

// Define censored word matches

{

$censors = array();

obtain_word_list($censors);

ORDER BY p.post_time DESC';

$result = $db->sql_query_limit($sql, $config['posts_per_page']);

if (!$row = $db->sql_fetchrow($result))

{

}

$bbcode_bitfield = 0;

$poster = $row['username'];

// Handle anon users posting with usernames

{

$poster = $row['post_username'];

$poster_rank = $user->lang['GUEST'];

}

if ($row['bbcode_bitfield'])

{

$bbcode->bbcode_second_pass($message, $row['bbcode_uid'], $row['bbcode_bitfield']);

}

if (sizeof($censors['match']))

{

$post_subject = preg_replace($censors['match'], $censors['replace'], $post_subject);

$template->assign_var('QUOTE_IMG', $user->img('btn_quote', $user->lang['QUOTE_POST']));

}

}

$db->sql_transaction();

{

// Try to delete topic, we may had an previous error causing inconsistency

if ($post_mode = 'delete_topic')

{

}

trigger_error('ALREADY_DELETED');

}

switch ($post_mode)

{

case 'delete_topic':

if ($data['topic_type'] != POST_GLOBAL)

{

$sql_data[FORUMS_TABLE] .= ($data['topic_approved']) ? ', forum_topics = forum_topics - 1' : '';

}

$sql_data[FORUMS_TABLE] .= implode(', ', update_last_post_information('forum', $forum_id));

$sql_data[TOPICS_TABLE] = 'topic_replies_real = topic_replies_real - 1' . (($data['post_approved']) ? ', topic_replies = topic_replies - 1' : '');

break;

$sql_data[FORUMS_TABLE] = 'forum_posts = forum_posts - 1';

}

$sql_data[FORUMS_TABLE] .= implode(', ', update_last_post_information('forum', $forum_id));

$sql_data[TOPICS_TABLE] = 'topic_bumped = 0, topic_bumper = 0, topic_replies_real = topic_replies_real - 1' . (($data['post_approved']) ? ', topic_replies = topic_replies - 1' : '');

}

$sql_data[USERS_TABLE] = ($auth->acl_get('f_postcount', $forum_id)) ? 'user_posts = user_posts - 1' : '';

$db->sql_transaction();

foreach ($sql_data as $table => $update_sql)

{

{

$db->sql_query("UPDATE $table SET $update_sql WHERE " . $where_sql[$table]);

}

case 'edit_first_post':

case 'edit':

{

$sql_data[POSTS_TABLE]['sql'] = array(

'post_edit_time' => $current_time

'enable_smilies' => $data['enable_smilies'],

'enable_magic_url' => $data['enable_urls'],

'enable_sig' => $data['enable_sig'],

'post_subject' => $subject,

'post_text' => $message,

'post_checksum' => $data['message_md5'],

'post_encoding' => $user->lang['ENCODING'],

'post_attachment' => (sizeof($filename_data['physical_filename'])) ? 1 : 0,

'icon_id' => $data['icon_id'],

'topic_approved' => ($auth->acl_get('f_moderate', $data['forum_id'])) ? 0 : 1,

'topic_title' => $subject,

'topic_type' => $topic_type,

'topic_time_limit' => ($topic_type == POST_STICKY || $topic_type == POST_ANNOUNCE) ? ($data['topic_time_limit'] * 86400) : 0,

'topic_attachment' => (sizeof($filename_data['physical_filename'])) ? 1 : 0

);

{

$sql_data[TOPICS_TABLE]['sql'] = array_merge($sql_data[TOPICS_TABLE]['sql'], array(

'poll_title' => $poll['poll_title'],

'topic_first_poster_name' => stripslashes($username),

'topic_type' => $topic_type,

'topic_time_limit' => ($topic_type == POST_STICKY || $topic_type == POST_ANNOUNCE) ? ($data['topic_time_limit'] * 86400) : 0,

'topic_attachment' => ($post_mode == 'edit_topic') ? ((sizeof($filename_data['physical_filename'])) ? 1 : 0) : $data['topic_attachment']

);

'topic_last_post_id' => $data['post_id'],

'topic_last_post_time' => $current_time,

'topic_last_poster_id' => (int) $user->data['user_id'],

);

}

unset($sql_data[POSTS_TABLE]['sql']);

}

// Are we globalising or unglobalising?

if ($post_mode == 'edit_first_post' || $post_mode == 'edit_topic')

if ((int)$row['topic_type'] != POST_GLOBAL && $topic_type == POST_GLOBAL)

{

// Decrement topic/post count

$sql_data[FORUMS_TABLE]['stat'] = array();

$sql_data[FORUMS_TABLE]['stat'][] = 'forum_posts = forum_posts - ' . ($row['topic_replies_real'] + 1);

else if ((int)$row['topic_type'] == POST_GLOBAL && $topic_type != POST_GLOBAL)

{

// Increment topic/post count

$sql_data[FORUMS_TABLE]['stat'] = array();

$sql_data[FORUMS_TABLE]['stat'][] = 'forum_posts = forum_posts + ' . ($row['topic_replies_real'] + 1);

}

// Update Poll Tables and Attachment Entries

{

$cur_poll_options = array();

{

if (trim($poll['poll_options'][$i]))

{

{

$sql = 'INSERT INTO ' . POLL_OPTIONS_TABLE . " (poll_option_id, topic_id, poll_option_text)

VALUES ($i, " . $data['topic_id'] . ", '" . $db->sql_escape($poll['poll_options'][$i]) . "')";

}

// Submit Attachments

{

$space_taken = $files_added = 0;

foreach ($attach_data as $attach_row)

$db->sql_query($sql);

}

}

$db->sql_transaction('commit');

{

if ($post_mode == 'post')

{

}

if ($post_mode == 'reply')

{

}

}

foreach ($sql_data as $table => $update_ary)

{

{

$db->sql_query("UPDATE $table SET " . implode(', ', $update_ary['stat']) . ' WHERE ' . $where_sql[$table]);

}

}

}

{

if (!$change)

{