Lots of work on posting. New topic and reply functionality is mostly done. Edit post loads the form but needs database functionality

All this is only been tested on Postgres, donno if it works as well on MySQL yet, will test when I can get access to sourceforge again git-svn-id: file:///svn/phpbb/trunk@328 89ea8834-ac86-4346-8a33-228a782c2dd0
author: James Atkinson <thefinn@users.sourceforge.net> 2001-05-26 00:25:50 +0000
committer: James Atkinson <thefinn@users.sourceforge.net> 2001-05-26 00:25:50 +0000
commit: bb1679af9a8079e5531ef743e51c548a6e7e820b (patch)
tree: 0b7e113f2141d6a3f63fc96557049fb50c4a4bea /phpBB/posting.php
parent: 0fee31117bf2573efbea4a8b2a70b16b648adb79 (diff)
download: forums-bb1679af9a8079e5531ef743e51c548a6e7e820b.tar
forums-bb1679af9a8079e5531ef743e51c548a6e7e820b.tar.gz
forums-bb1679af9a8079e5531ef743e51c548a6e7e820b.tar.bz2
forums-bb1679af9a8079e5531ef743e51c548a6e7e820b.tar.xz
forums-bb1679af9a8079e5531ef743e51c548a6e7e820b.zip
1 files changed, 281 insertions, 40 deletions
diff --git a/phpBB/posting.php b/phpBB/posting.php
index 811a75aedc..a74783ed08 100644
--- a/phpBB/posting.php
+++ b/phpBB/posting.php
@@ -85,11 +85,27 @@ function prepare_message($message, $html_on, $bbocde_on, $smile_on, $bbcode_uid
 // Put AUTH code here
 //
 
+$error = FALSE;
 
-switch($mode)
+//
+// Prepare our message and subject on a 'submit' 
+//
+if(isset($HTTP_POST_VARS['submit']))
 {
-	case 'newtopic':
-		if(isset($HTTP_POST_VARS['submit']))
+	$subject = trim(strip_tags(htmlspecialchars($HTTP_POST_VARS['subject'])));	
+	if($mode == 'newtopic' && empty($subject))
+	{
+		$error = TRUE;
+		if(isset($error_msg))
+		{
+			$error_msg .= "<br />";
+		}
+		$error_msg .= $l_emptysubj;
+	}
+	
+	if(!empty($HTTP_POST_VARS['message']))
+	{
+		if(!$error)
 		{
 			if(isset($HTTP_POST_VARS['disable_html']) || !$board_config['allow_html'])
 			{
@@ -109,7 +125,7 @@ switch($mode)
 				$uid = make_bbcode_uid();
 				$bbocde_on = TRUE;
 			}
-
+		
 			if(isset($HTTP_POST_VARS['disable_smile']))
 			{
 				$smile_on = FALSE;
@@ -120,13 +136,38 @@ switch($mode)
 			}
 
 			$message = prepare_message($HTTP_POST_VARS['message'], $html_on, $bbocde_on, $smile_on, $uid);
-
+			
 			if(isset($HTTP_POST_VARS['attach_sig']) && !empty($userdata['user_sig']))
 			{
 				$message .= "[addsig]";
 			}
-			$subject = trim(strip_tags(htmlspecialchars($HTTP_POST_VARS['subject'])));
-			$topic_time = gmmktime(gmdate("h, i, s, m, d, Y"));
+		}
+		else
+		{
+			// do stripslashes incase magic_quotes is on.
+			$message = stripslashes($HTTP_POST_VARS['message']);
+		}
+	}
+	else
+	{
+		$error = TRUE;
+		if(isset($error_msg))
+		{
+			$error_msg .= "<br />";
+		}
+		$error_msg .= $l_emptymsg;
+	}
+}
+
+switch($mode)
+{
+	case 'newtopic':
+		$page_title = " $l_postnew";
+		$section_title = $l_postnewin;
+		
+		if(isset($HTTP_POST_VARS['submit']) && !$error)
+		{
+			$topic_time = get_gmt_ts();
 			$topic_notify = ($HTTP_POST_VARS['notify']) ? $HTTP_POST_VARS['notify'] : 0;
 			$sql  = "INSERT INTO ".TOPICS_TABLE." (topic_title, topic_poster, topic_time, forum_id, topic_notify, topic_status)
 						VALUES ('$subject', ".$userdata['user_id'].", ".$topic_time.", $forum_id, $topic_notify, ".UNLOCKED.")";
@@ -149,6 +190,12 @@ switch($mode)
 							$sql = "UPDATE ".FORUMS_TABLE." SET forum_last_post_id = $new_post_id, forum_posts = forum_posts + 1, forum_topics = forum_topics + 1 WHERE forum_id = $forum_id";
 							if($db->sql_query($sql))
 							{
+								if($userdata['user_id'] != ANONYMOUS)
+								{
+									$sql = "UPDATE ".USERS_TABLE." SET user_posts = user_posts + 1 WHERE user_id = ".$userdata['user_id'];
+									$db->sql_query($sql);
+								}
+
 								include('includes/page_header.'.$phpEx);
 								// If we get here the post has been inserted successfully.
 								$msg = "$l_stored<br />$l_click <a href=\"".append_sid("viewtopic.$phpEx?".POST_TOPIC_URL."=$new_topic_id")."\">$l_here</a>
@@ -220,23 +267,216 @@ switch($mode)
 					error_die(QUERY_ERROR);
 				}
 			}
-
-
-
 		}
       else if(isset($HTTP_POST_VARS['preview']))
       {
 
 
       }
+
+		break;
+	case 'reply':
+		$page_title = " $l_reply";
+		$section_title = $l_postreplyto;
+		
+		if(isset($HTTP_POST_VARS['submit']) && !$error)
+		{
+			$new_topic_id = $HTTP_POST_VARS[POST_TOPIC_URL];
+			$topic_time = get_gmt_ts();
+
+				$sql = "INSERT INTO ".POSTS_TABLE." (topic_id, forum_id, poster_id, post_time, poster_ip, bbcode_uid)
+						  VALUES ($new_topic_id, $forum_id, ".$userdata['user_id'].", $topic_time, '".encode_ip($user_ip)."', '$uid')";
+
+			if($db->sql_query($sql))
+			{
+				$new_post_id = $db->sql_nextid();
+				$sql = "INSERT INTO ".POSTS_TEXT_TABLE." VALUES ($new_post_id, '".$message."')";
+				if($db->sql_query($sql))
+				{
+					$sql = "UPDATE ".TOPICS_TABLE." SET topic_last_post_id = $new_post_id, topic_replies = topic_replies + 1 WHERE topic_id = $new_topic_id";
+					if($db->sql_query($sql))
+					{
+						$sql = "UPDATE ".FORUMS_TABLE." SET forum_last_post_id = $new_post_id, forum_posts = forum_posts + 1 WHERE forum_id = $forum_id";
+						if($db->sql_query($sql))
+						{
+							if($userdata['user_id'] != ANONYMOUS)
+							{
+								
+								$sql = "UPDATE ".USERS_TABLE." SET user_posts = user_posts + 1 WHERE user_id = ".$userdata['user_id'];
+								$db->sql_query($sql);
+							}
+							include('includes/page_header.'.$phpEx);
+							// If we get here the post has been inserted successfully.
+							$msg = "$l_stored<br />$l_click <a href=\"".append_sid("viewtopic.$phpEx?".POST_TOPIC_URL."=$new_topic_id#$new_post_id")."\">$l_here</a>
+  										$l_viewmsg<br />$l_click <a href=\"".append_sid("viewforum.$phpEx?".POST_FORUM_URL."=$forum_id")."\">$l_here</a> $l_returntopic";
+
+							$template->set_filenames(array(
+								"reg_header" => "error_body.tpl"
+							));
+							$template->assign_vars(array(
+								"ERROR_MESSAGE" => $msg
+							));
+							$template->pparse("reg_header");
+
+							include('includes/page_tail.'.$phpEx);
+						}
+						else
+						{
+							error_die(QUERY_ERROR);
+						}
+					}
+					else
+					{
+						if(DEBUG)
+						{
+							$error = $db->sql_error();
+							error_die(QUERY_ERROR, "Error updating topics table.<br>Reason: ".$error['message']."<br>Query: $sql", __LINE__, __FILE__);
+						}
+						else
+						{
+							error_die(QUERY_ERROR);
+						}
+					}
+				}
+				else
+				{
+					if(DEBUG)
+					{
+						$error = $db->sql_error();
+						error_die(QUERY_ERROR, "Error inserting data into posts text table.<br>Reason: ".$error['message']."<br>Query: $sql", __LINE__, __FILE__);
+					}
+					else
+					{
+						error_die(QUERY_ERROR);
+					}
+				}
+			}
+			else
+			{
+				if(DEBUG)
+				{
+					$error = $db->sql_error();
+					error_die(QUERY_ERROR, "Error inserting data into posts table.<br>Reason: ".$error['message']."<br>Query: $sql", __LINE__, __FILE__);
+				}
+				else
+				{
+					error_die(QUERY_ERROR);
+				}
+			}
+		}
+		break;
+	case 'editpost':
+		$page_title = " $l_editpost";
+		$section_title = $l_editpostin;
+		if(isset($HTTP_POST_VARS['submit']) && !$error)
+		{
+			if(isset($HTTP_POST_VARS['delete_post']))
+			{
+				
+				
+			}
+			else
+			{
+								
+				
+				
+			}
+		}
+		else
+		{
+			$post_id = ($HTTP_GET_VARS[POST_POST_URL]) ? $HTTP_GET_VARS[POST_POST_URL] : $HTTP_POST_VARS[POST_POST_URL];
+			if(!empty($post_id))
+			{
+
+   			$sql = "SELECT p.*, pt.post_text, u.username, u.user_id, u.user_sig, t.topic_title, t.topic_notify 
+   						FROM ".POSTS_TABLE." p, ".USERS_TABLE." u, ".TOPICS_TABLE." t, ".POSTS_TEXT_TABLE." pt 
+   						WHERE (p.post_id = '$post_id') 
+   						AND pt.post_id = p.post_id
+   						AND (p.topic_id = t.topic_id) 
+   						AND (p.poster_id = u.user_id)";
+   						
+				if($result = $db->sql_query($sql))
+				{
+					$postrow = $db->sql_fetchrowset($result);
+					$message = stripslashes($postrow[0]['post_text']);
+					$message = eregi_replace("\[addsig]$", "\n_________________\n" . stripslashes($postrow[0]['user_sig']), $message);
+					$message = str_replace("<br />", "\n", $message);
+					
+					// These have not been implemented yet!
+					/*
+					$message = bbdecode($message);
+					$message = desmile($message);
+					 */
+					 
+   				$message = undo_htmlspecialchars($message);
+   				
+   				// Special handling for </textarea> tags in the message, which can break the editing form..
+   				$message = preg_replace('#</textarea>#si', '&lt;/TEXTAREA&gt;', $message);
+   				
+   				// is_first_post needs functionality!
+   				if($postrow[0]['topic_notify'] && $is_first_post)
+   				{
+   					$notify = TRUE;
+   				}
+					
+					if($is_first_post)
+					{
+						$subject = stripslashes($postrow[0]['topic_title']);
+					}
+   			}
+   			else
+   			{
+   				if(DEBUG)
+   				{
+   					$error = $db->error();
+   					error_die(QUERY_ERROR, "Error get post information. <br>Reason: ".$error['message']."<br>Query: $sql", __LINE__, __FILE__);
+   				}
+   				else
+   				{
+   					error_die(QUERY_ERROR);
+   				}
+   			}
+   		}
+   		else
+   		{
+   			error_die(GENERAL_ERROR, "Sorry, no there is no such post");
+   		}
+		}
+	break;
+} // end switch
+
+
+
+
+
+include('includes/page_header.'.$phpEx);
+
+//
+// Start: Error handling
+//
+if($error)
+{
+	$template->set_filenames(array(
+						"reg_header" => "error_body.tpl"
+	));
+	$template->assign_vars(array(
+						"ERROR_MESSAGE" => $error_msg
+	));
+	$template->pparse("reg_header");
+}
+//
+// End: error handling
+//
+
+//
+// Show the same form for each mode.
+//
 		if(!isset($HTTP_GET_VARS[POST_FORUM_URL]) && !isset($HTTP_POST_VARS[POST_FORUM_URL]))
 		{
 			error_die(GENERAL_ERROR, "Sorry, no there is no such forum");
 		}
 
-		$pagetype = "newtopic";
-		$page_title = " $l_postnew";
-
+		
 		$sql = "SELECT forum_name, forum_access
 					FROM ".FORUMS_TABLE."
 					WHERE forum_id = $forum_id";
@@ -261,8 +501,6 @@ switch($mode)
 			$about_posting = "$l_modusers $l_inthisforum";
 		}
 
-		include('includes/page_header.'.$phpEx);
-
 		$template->set_filenames(array(
 											"body" => "posting_body.tpl",
 											"jumpbox" => "jumpbox.tpl")
@@ -273,14 +511,17 @@ switch($mode)
 											"SELECT_NAME" => POST_FORUM_URL)
 									  );
 		$template->assign_var_from_handle("JUMPBOX", "jumpbox");
+		
+
 		$template->assign_vars(array(
-										"L_POSTNEWIN" => $l_postnewin,
+										"L_POSTNEWIN" => $section_title,
 										"FORUM_ID" => $forum_id,
 										"FORUM_NAME" => $forum_name,
 
 										"U_VIEW_FORUM" => append_sid("viewforum.$phpEx?".POST_FORUM_URL."=$forum_id"))
 									 );
 
+
 		if($userdata['session_logged_in'])
 		{
 			$username_input = $userdata["username"];
@@ -301,7 +542,7 @@ switch($mode)
 		{
 			$html_status = $l_htmlis . " " . $l_on;
 			$html_toggle = '<input type="checkbox" name="disable_html" ';
-			if($disable_html)
+			if($disable_html || $userdata['user_allowhtml'])
 			{
 				$html_toggle .= 'checked';
 			}
@@ -315,7 +556,7 @@ switch($mode)
 		{
 			$bbcode_status = $l_bbcodeis . " " . $l_on;
 			$bbcode_toggle = '<input type="checkbox" name="disable_bbcode" ';
-			if($disable_bbcode)
+			if($disable_bbcode || $userdata['user_allowbbcode'])
 			{
 				$bbcode_toggle .= "checked";
 			}
@@ -327,27 +568,37 @@ switch($mode)
 		}
 
 		$smile_toggle = '<input type="checkbox" name="disable_smile" ';
-		if($disable_smile)
+		if($disable_smile || $userdata['user_allowsmile'])
 		{
 			$smile_toggle .= "checked";
 		}
 		$smile_toggle .= "> $l_disable $l_smilies $l_onthispost";
 
-		$sig_toggle = '<input type="checkbox" name="attach_sig" ';
-		if($attach_sig || $userdata["attach_sig"] == 1)
+		if($mode != 'editpost')
 		{
-			$sig_toggle .= "checked";
+			$sig_toggle = '<input type="checkbox" name="attach_sig" ';
+			if($attach_sig || $userdata['user_attachsig'] == 1)
+			{
+				$sig_toggle .= "checked";
+			}
+			$sig_toggle .= "> $l_attachsig";
 		}
-		$sig_toggle .= "> $l_attachsig";
-
-		$notify_toggle = '<input type="checkbox" name="notify" ';
-		if($notify || $userdata["always_notify"] == 1)
+		
+		if($mode == 'newtopic' || ($mode == 'editpost' && $notify))
 		{
-			$notify_toggle .= "checked";
+			$notify_toggle = '<input type="checkbox" name="notify" ';
+			if($notify || $userdata["always_notify"] == 1)
+			{
+				$notify_toggle .= "checked";
+			}
+			$notify_toggle .= "> $l_notify";
 		}
-		$notify_toggle .= "> $l_notify";
 
-		$hidden_form_fields = "<input type=\"hidden\" name=\"mode\" value=\"$mode\"><input type=\"hidden\" name=\"".POST_FORUM_URL."\" value=\"$forum_id\"><input type=\"hidden\" name=\"topic_id\" value=\"$topic_id\">";
+		if($mode == 'reply' || $mode == 'editpost')
+		{
+			$topic_id = ($HTTP_GET_VARS[POST_TOPIC_URL]) ? $HTTP_GET_VARS[POST_TOPIC_URL] : $HTTP_POST_VARS[POST_TOPIC_URL];
+		}
+		$hidden_form_fields = "<input type=\"hidden\" name=\"mode\" value=\"$mode\"><input type=\"hidden\" name=\"".POST_FORUM_URL."\" value=\"$forum_id\"><input type=\"hidden\" name=\"".POST_TOPIC_URL."\" value=\"$topic_id\">";
 
 		$template->assign_vars(array(
 				"L_ABOUT_POST" => $l_aboutpost,
@@ -376,14 +627,4 @@ switch($mode)
 		);
 		$template->pparse("body");
 		include('includes/page_tail.'.$phpEx);
-		break;
-	case 'reply':
-
-		break;
-	case 'editpost':
-
-		break;
-}
-
-
-?>
+?>
+\ No newline at end of file
author	James Atkinson <thefinn@users.sourceforge.net>	2001-05-26 00:25:50 +0000
committer	James Atkinson <thefinn@users.sourceforge.net>	2001-05-26 00:25:50 +0000
commit	bb1679af9a8079e5531ef743e51c548a6e7e820b (patch)
tree	0b7e113f2141d6a3f63fc96557049fb50c4a4bea /phpBB/posting.php
parent	0fee31117bf2573efbea4a8b2a70b16b648adb79 (diff)
download	forums-bb1679af9a8079e5531ef743e51c548a6e7e820b.tar forums-bb1679af9a8079e5531ef743e51c548a6e7e820b.tar.gz forums-bb1679af9a8079e5531ef743e51c548a6e7e820b.tar.bz2 forums-bb1679af9a8079e5531ef743e51c548a6e7e820b.tar.xz forums-bb1679af9a8079e5531ef743e51c548a6e7e820b.zip