+$refresh = (isset($_POST['add_file']) || isset($_POST['delete_file']) || isset($_POST['full_editor']) || isset($_POST['cancel_unglobalise']) || $save || $load) ? true : false;

+if ($config['enable_post_confirm'] && !$user->data['is_registered'])

+{

+ include($phpbb_root_path . 'includes/captcha/captcha_factory.' . $phpEx);

+ $captcha =& phpbb_captcha_factory::get_instance($config['captcha_plugin']);

+ $captcha->init(CONFIRM_POST);

+}

+ OR f.forum_id = $forum_id)

+ AND t.topic_approved = 1";

+ (($auth->acl_get('m_approve', $forum_id) && $mode != 'quote') ? '' : 'AND p.post_approved = 1');

+$post_data['post_subject_md5'] = (isset($post_data['post_subject']) && $mode == 'edit') ? md5($post_data['post_subject']) : '';

+$smilies_status = ($config['allow_smilies'] && $auth->acl_get('f_smilies', $forum_id)) ? true : false;

+$quote_status = true;

+ $hidden_fields = array(

+ 'icon_id' => 0,

+

+ 'disable_bbcode' => false,

+ 'disable_smilies' => false,

+ 'disable_magic_url' => false,

+ 'attach_sig' => true,

+ 'lock_topic' => false,

+

+ 'topic_type' => POST_NORMAL,

+ 'topic_time_limit' => 0,

+

+ 'poll_title' => '',

+ 'poll_option_text' => '',

+ 'poll_max_options' => 1,

+ 'poll_length' => 0,

+ 'poll_vote_change' => false,

+ );

+

+ foreach ($hidden_fields as $name => $default)

+ {

+ if (!isset($_POST[$name]))

+ {

+ // Don't include it, if its not available

+ unset($hidden_fields[$name]);

+ continue;

+ }

+

+ if (is_bool($default))

+ {

+ // Use the string representation

+ $hidden_fields[$name] = request_var($name, '');

+ }

+ else

+ {

+ $hidden_fields[$name] = request_var($name, $default);

+ }

+ }

+

+ $s_hidden_fields .= build_hidden_fields($hidden_fields);

+

+

+ if ($post_data['enable_icons'] && $auth->acl_get('f_icons', $forum_id))

+ {

+ $post_data['icon_id'] = request_var('icon', (int) $post_data['icon_id']);

+ }

+ if ($mode == 'edit')

+ {

+ $message_parser->parse_attachments('fileupload', $mode, $forum_id, $submit, $preview, $refresh, false, $post_id, $topic_id);

+ if (sizeof($message_parser->attachment_data))

+ {

+ // Update attachment indicators for post/topic having attachments now, as a precaution if the post does not get stored by submit

+ $sql = 'UPDATE ' . POSTS_TABLE . '

+ SET post_attachment = 1

+ WHERE post_id = ' . $post_id;

+ $db->sql_query($sql);

+

+ $sql = 'UPDATE ' . TOPICS_TABLE . '

+ SET topic_attachment = 1

+ WHERE topic_id = ' . $topic_id;

+ $db->sql_query($sql);

+ }

+ }

+ else

+ {

+ $message_parser->parse_attachments('fileupload', $mode, $forum_id, $submit, $preview, $refresh);

+ }

+

+ // If editing and checksum has changed we know the post was edited while we're editing

+ // Notify and show user the changed post

+ if ($mode == 'edit' && $post_data['forum_flags'] & FORUM_FLAG_POST_REVIEW)

+ {

+ $edit_post_message_checksum = request_var('edit_post_message_checksum', '');

+ $edit_post_subject_checksum = request_var('edit_post_subject_checksum', '');

+

+ // $post_data['post_checksum'] is the checksum of the post submitted in the meantime

+ // $message_md5 is the checksum of the post we're about to submit

+ // $edit_post_message_checksum is the checksum of the post we're editing

+ // ...

+

+ // We make sure nobody else made exactly the same change

+ // we're about to submit by also checking $message_md5 != $post_data['post_checksum']

+ if (($edit_post_message_checksum !== '' && $edit_post_message_checksum != $post_data['post_checksum'] && $message_md5 != $post_data['post_checksum'])

+ || ($edit_post_subject_checksum !== '' && $edit_post_subject_checksum != $post_data['post_subject_md5'] && md5($post_data['post_subject']) != $post_data['post_subject_md5']))

+ {

+ if (topic_review($topic_id, $forum_id, 'post_review_edit', $post_id))

+ {

+ $template->assign_vars(array(

+ 'S_POST_REVIEW' => true,

+

+ 'L_POST_REVIEW' => $user->lang['POST_REVIEW_EDIT'],

+ 'L_POST_REVIEW_EXPLAIN' => $user->lang['POST_REVIEW_EDIT_EXPLAIN'],

+ ));

+ }

+

+ $submit = false;

+ $refresh = true;

+ }

+ }

+

+ // Also check if subject got updated...

+ $update_subject = $mode != 'edit' || ($post_data['post_subject_md5'] && $post_data['post_subject_md5'] != md5($post_data['post_subject']));

+

+ $captcha_data = array(

+ 'message' => utf8_normalize_nfc(request_var('message', '', true)),

+ 'subject' => utf8_normalize_nfc(request_var('subject', '', true)),

+ 'username' => utf8_normalize_nfc(request_var('username', '', true)),

+ );

+ $vc_response = $captcha->validate($captcha_data);

+ if ($vc_response)

+ $error[] = $vc_response;

+ // The last parameter tells submit_post if search indexer has to be run

+ $redirect_url = submit_post($mode, $post_data['post_subject'], $post_data['username'], $post_data['topic_type'], $poll, $data, $update_message, ($update_message || $update_subject) ? true : false);

+

+ if ($config['enable_post_confirm'] && !$user->data['is_registered'] && (isset($captcha) && $captcha->is_solved() === true) && ($mode == 'post' || $mode == 'reply' || $mode == 'quote'))

+ {

+ $captcha->reset();

+ }

+ // Check the permissions for post approval. Moderators are not affected.

+ if (!$auth->acl_get('f_noapprove', $data['forum_id']) && !$auth->acl_get('m_approve', $data['forum_id']))

+ if ($config['allow_bbcode'])

+ {

+ $message_parser->message = '[quote="' . $post_data['quote_username'] . '"]' . censor_text(trim($message_parser->message)) . "[/quote]\n";

+ }

+ else

+ {

+ $offset = 0;

+ $quote_string = "> ";

+ $message = censor_text(trim($message_parser->message));

+ // see if we are nesting. It's easily tricked but should work for one level of nesting

+ if (strpos($message, ">") !== false)

+ {

+ $offset = 10;

+ }

+ $message = utf8_wordwrap($message, 75 + $offset, "\n");

+

+ $message = $quote_string . $message;

+ $message = str_replace("\n", "\n" . $quote_string, $message);

+ $message_parser->message = $post_data['quote_username'] . " " . $user->lang['WROTE'] . " :\n" . $message . "\n";

+ }

+if ($config['load_moderators'])

+{

+ get_moderators($moderators, $forum_id);

+}

+// Posting uses is_solved for legacy reasons. Plugins have to use is_solved to force themselves to be displayed.

+if ($config['enable_post_confirm'] && !$user->data['is_registered'] && (isset($captcha) && $captcha->is_solved() === false) && ($mode == 'post' || $mode == 'reply' || $mode == 'quote'))

+ 'CAPTCHA_TEMPLATE' => $captcha->get_template(),

+if ($mode == 'edit')

+ 'edit_post_message_checksum' => $post_data['post_checksum'],

+ 'edit_post_subject_checksum' => $post_data['post_subject_md5'],

+ ));

+}

+

+// Add the confirm id/code pair to the hidden fields, else an error is displayed on next submit/preview

+if (isset($captcha) && $captcha->is_solved() !== false)

+{

+ $s_hidden_fields .= build_hidden_fields($captcha->get_hidden_fields());

+ 'S_DELETE_ALLOWED' => ($mode == 'edit' && (($post_id == $post_data['topic_last_post_id'] && $post_data['poster_id'] == $user->data['user_id'] && $auth->acl_get('f_delete', $forum_id) && !$post_data['post_edit_locked'] && ($post_data['post_time'] > time() - ($config['delete_time'] * 60) || !$config['delete_time'])) || $auth->acl_get('m_delete', $forum_id))) ? true : false,

+page_header($page_title, false);

+ page_header($user->lang['PROGRESS_BAR'], false);

+ if ($auth->acl_get('m_delete', $forum_id) || ($post_data['poster_id'] == $user->data['user_id'] && $user->data['is_registered'] && $auth->acl_get('f_delete', $forum_id) && $post_id == $post_data['topic_last_post_id'] && !$post_data['post_edit_locked'] && ($post_data['post_time'] > time() - ($config['delete_time'] * 60) || !$config['delete_time'])))

+ add_log('mod', $forum_id, $topic_id, 'LOG_DELETE_TOPIC', $post_data['topic_title'], $post_data['username']);

+ add_log('mod', $forum_id, $topic_id, 'LOG_DELETE_POST', $post_data['post_subject'], $post_data['username']);