*

***************************************************************************/

$phpbb_root_path = "./";

include($phpbb_root_path . 'extension.inc');

include($phpbb_root_path . 'common.'.$phpEx);

//

// Set initial conditions

//

{

$forum_id = (isset($HTTP_POST_VARS[POST_FORUM_URL])) ? $HTTP_POST_VARS[POST_FORUM_URL] : $HTTP_GET_VARS[POST_FORUM_URL];

}

{

if( isset($HTTP_POST_VARS['submit']) || isset($HTTP_POST_VARS['preview']) )

{

}

else

{

AND user_id = " . $userdata['user_id'];

if( !$result = $db->sql_query($sql) )

{

}

//

// Doing it here prevents spoofing (eg. faking forum_id, topic_id or post_id

//

if( $mode != "newtopic" )

{

if($mode == "reply" && !empty($topic_id) )

{

AND f.forum_id = t.forum_id";

$msg = $lang['No_topic_id'];

}

else if( !empty($post_id) )

{

AND f.forum_id = t.forum_id";

$msg = $lang['No_post_id'];

{

if( isset($post_id) )

{

LIMIT 1";

}

else

$check_row = $db->sql_fetchrow($result);

$forum_id = $check_row['forum_id'];

$forum_status = $check_row['forum_status'];

if( $mode == "editpost" )

{

}

else

{

}

else

{

WHERE forum_id = $forum_id";

if($result = $db->sql_query($sql))

{

}

//

// ... note that we send NOT'ed version of the disable vars to the function

//

$message = prepare_message(stripslashes($HTTP_POST_VARS['message']), $html_on, $bbcode_on, $smilies_on, $bbcode_uid);

$message .= (ereg(" $", $message)) ? "[addsig]" : " [addsig]";

}

}

{

$message = stripslashes(trim($HTTP_POST_VARS['message']));

}

if($mode == "reply" || ( $mode == "newtopic" && $result ) )

{

VALUES ($new_topic_id, $forum_id, " . $userdata['user_id'] . ", '$username', $topic_time, '$user_ip', '$bbcode_uid', $bbcode_on, $html_on, $smilies_on)";

if($mode == "reply")

{

{

$new_post_id = $db->sql_nextid();

VALUES ($new_post_id, '$subject', '$message')";

if($db->sql_query($sql))

{

SET topic_last_post_id = $new_post_id";

if($mode == "reply")

{

if($db->sql_query($sql))

{

SET forum_last_post_id = $new_post_id, forum_posts = forum_posts + 1";

if($mode == "newtopic")

{

if($db->sql_query($sql))

{

WHERE user_id = " . $userdata['user_id'];

if($db->sql_query($sql, END_TRANSACTION))

//

if($mode == "reply")

{

AND u.user_id = tw.user_id";

if( $result = $db->sql_query($sql) )

{

$path = (dirname($HTTP_SERVER_VARS['REQUEST_URI']) == "/") ? "" : dirname($HTTP_SERVER_VARS['REQUEST_URI']);

$emailer->assign_vars(array(

"SITENAME" => $board_config['sitename'],

"TOPIC_TITLE" => $email_set[$i]['topic_title'],

"UN_WATCH_URL" => "http://" . $HTTP_SERVER_VARS['SERVER_NAME'] . $path . "/viewtopic.$phpEx?" . POST_TOPIC_URL . "=$new_topic_id&unwatch=topic",

"EMAIL_SIG" => $board_config['board_email'])

);

{

$update_watched_sql .= " OR ";

}

}

}

if($update_watched_sql != "")

{

$sql = "UPDATE " . TOPICS_WATCH_TABLE . "

AND $update_watched_sql";

$db->sql_query($sql);

}

{

if($mode == "reply")

{

AND user_id = " . $userdata['user_id'];

if( !$result = $db->sql_query($sql) )

{

{

if( !$notify )

{

AND user_id = " . $userdata['user_id'];

if( !$result = $db->sql_query($sql) )

{

}

else if( $notify )

{

VALUES (" . $userdata['user_id'] . ", $new_topic_id, 0)";

if( !$result = $db->sql_query($sql) )

{

}

else if( $notify )

{

VALUES (" . $userdata['user_id'] . ", $new_topic_id, 0)";

if( !$result = $db->sql_query($sql) )

{

{

if(SQL_LAYER == "mysql")

{

WHERE post_id = $new_post_id";

if( !$db->sql_query($sql) )

{

if( isset($post_id) )

{

AND p.poster_id = u.user_id";

if($result = $db->sql_query($sql))

{

$message = str_replace("<br />", "\n", $message);

$message = undo_htmlspecialchars($message);

// Special handling for </textarea> tags in the message, which can break the editing form..

$message = preg_replace('#</textarea>#si', '&lt;/TEXTAREA&gt;', $message);

$page_title = " " . $lang['Edit_post'];

$section_title = $lang['Edit_post_in'];

!$error && !$preview )

{

WHERE post_id = $post_id";

if($result = $db->sql_query($sql))

message_die(GENERAL_MESSAGE, $msg);

}

}

( $is_last_post || $is_auth['auth_mod'] ) )

{

// Output a confirmation message, unless we've over-ridden it on the posting_body form (

// override_confirm set ), this is so people can implement JavaScript checkers if they wish

//

!isset($HTTP_GET_VARS['confirm']) && !isset($HTTP_POST_VARS['confirm']))

{

);

$template->assign_vars(array(

"MESSAGE_TITLE" => $lang['Information'],

"S_HIDDEN_FIELDS" => $s_hidden_fields)

);

$template->pparse("confirm_body");

include($phpbb_root_path . 'includes/page_tail.'.$phpEx);

}

isset($HTTP_POST_VARS['override_confirm']) )

{

WHERE post_id = $post_id";

if($db->sql_query($sql, BEGIN_TRANSACTION))

{

WHERE post_id = $post_id";

if($is_last_post && $is_first_post)

//

if($db->sql_query($sql))

{

WHERE topic_id = $topic_id";

$if_die_msg = "Couldn't delete from topics table";

}

//

if($db->sql_query($sql))

{

WHERE topic_id = $topic_id";

if($result = $db->sql_query($sql))

{

list($new_last_post_id) = $db->sql_fetchrow($result);

WHERE topic_id = $topic_id";

$sql_forum_upd = "forum_posts = forum_posts - 1";

message_die(GENERAL_ERROR, "Error deleting from post table", "", __LINE__, __FILE__, $sql);

}

}

{

//

// It's not last and it's not both first and last so it's somewhere in

$if_die_msg = "Couldn't delete from posts table";

}

//

// Updating the forum is common to all three possibilities,

// _remember_ we're still in a transaction here!

{

if($is_last_post_forum)

{

WHERE forum_id = $forum_id";

if($result = $db->sql_query($sql))

{

list($new_last_post_id) = $db->sql_fetchrow($result);

$new_last_sql = "";

}

WHERE forum_id = $forum_id";

if($db->sql_query($sql, END_TRANSACTION))

// If we get here the post has been deleted successfully.

//

$msg = $lang['Deleted'];

if(!$is_last_post || !$is_first_post)

{

$msg .= "<br /><br />" . $lang['Click'] . " <a href=\"" . append_sid("viewtopic.$phpEx?" . POST_TOPIC_URL . "=$topic_id") . "\">" . $lang['Here'] . "</a> " . $lang['to_return_topic'];

$edited_sql = "";

}

WHERE post_id = $post_id";

if($db->sql_query($sql, BEGIN_TRANSACTION))

{

WHERE post_id = $post_id";

if($is_first_post)

//

// Update topics table here, set notification level and such

//

WHERE topic_id = $topic_id";

if($db->sql_query($sql, END_TRANSACTION))

{

if( !empty($post_id) )

{

AND p.poster_id = u.user_id";

if($result = $db->sql_query($sql))

$message = str_replace("<br />", "\n", $message);

$message = undo_htmlspecialchars($message);

// Special handling for </textarea> tags in the message, which can break the editing form..

$message = preg_replace('#</textarea>#si', '&lt;/TEXTAREA&gt;', $message);

}

//

// preview but doing this here allows us to use it as a

// check for attach_sig later

//

//

// Define censored word matches

//

FROM " . WORDS_TABLE;

if( !$words_result = $db->sql_query($sql) )

{

$preview_message = bbencode_second_pass($preview_message, $bbcode_uid);

//

// HTML handling

//

if( !$html_on )

"preview" => "posting_preview.tpl")

);

$template->assign_vars(array(

"POSTER_NAME" => stripslashes($username),

"POST_DATE" => create_date($board_config['default_dateformat'], time(), $board_config['default_timezone']),

"MESSAGE" => $preview_message,

"L_PREVIEW" => $lang['Preview'],

"L_POSTED" => $lang['Posted'])

);

"L_OPTIONS" => $lang['Options'],

"L_PREVIEW" => $lang['Preview'],

"L_SUBMIT" => $lang['Submit_post'],

"L_POST_A" => $post_a,

"L_HTML_IS" => $lang['HTML'] . " " . $lang['is'],

"L_BBCODE_IS" => $lang['BBCode'] . " " . $lang['is'],

"L_SMILIES_ARE" => $lang['Smilies'] . " " . $lang['are'],

"S_POST_ACTION" => append_sid("posting.$phpEx"),

"S_HIDDEN_FORM_FIELDS" => $hidden_form_fields)