+ $user->setup(array('posting', 'mcp', 'viewtopic'));

+if (!$post_data)

+{

+ trigger_error(($mode == 'post' || $mode == 'bump' || $mode == 'reply') ? 'NO_TOPIC' : 'NO_POST');

+}

+

+// Always check if the submitted attachment data is valid and belongs to the user.

+// Further down (especially in submit_post()) we do not check this again.

+ $sql = 'SELECT attach_id, is_orphan, attach_comment, real_filename

+ AND is_orphan = 0

+$url_status = ($config['allow_post_links']) ? true : false;

+

+ utf8_normalize_nfc(array(&$subject, &$message));

+$solved_captcha = false;

+

+ $post_data['username'] = request_var('username', $post_data['username'], true);

+

+ utf8_normalize_nfc(array(&$post_data['post_subject'], &$message_parser->message, &$post_data['username'], &$post_data['post_edit_reason']));

+ if ($submit)

+ {

+ $sql = 'DELETE FROM ' . POLL_OPTIONS_TABLE . "

+ WHERE topic_id = $topic_id";

+ $db->sql_query($sql);

+ $sql = 'DELETE FROM ' . POLL_VOTES_TABLE . "

+ WHERE topic_id = $topic_id";

+ $db->sql_query($sql);

+

+ $topic_sql = array(

+ 'poll_title' => '',

+ 'poll_start' => 0,

+ 'poll_length' => 0,

+ 'poll_last_vote' => 0,

+ 'poll_max_options' => 0,

+ 'poll_vote_change' => 0

+ );

+ $sql = 'UPDATE ' . TOPICS_TABLE . '

+ SET ' . $db->sql_build_array('UPDATE', $topic_sql) . "

+ WHERE topic_id = $topic_id";

+ $db->sql_query($sql);

+ }

+

+ utf8_normalize_nfc(array(&$post_data['poll_title'], &$post_data['poll_option_text']));

+ if ($post_data['forum_flags'] & FORUM_FLAG_POST_REVIEW)

+ if (sizeof($message_parser->warn_msg))

+ {

+ $error[] = implode('<br />', $message_parser->warn_msg);

+ $message_parser->warn_msg = array();

+ }

+

+ $message_parser->parse($post_data['enable_bbcode'], ($config['allow_post_links']) ? $post_data['enable_urls'] : false, $post_data['enable_smilies'], $img_status, $flash_status, $quote_status, $config['allow_post_links']);

+

+ // On a refresh we do not care about message parsing errors

+ if (sizeof($message_parser->warn_msg) && $refresh)

+ {

+ $message_parser->warn_msg = array();

+ }

+ if (($post_data['username'] && !$user->data['is_registered']) || ($mode == 'edit' && $post_data['username'] && $post_data['post_username'] && $post_data['post_username'] != $post_data['username']))

+ if (($result = validate_username($post_data['username'])) !== false)

+ $user->add_lang('ucp');

+ $error[] = $user->lang[$result . '_USERNAME'];

+ else

+ {

+ $solved_captcha = true;

+ }

+ if (!$refresh && !$post_data['post_subject'] && ($mode == 'post' || ($mode == 'edit' && $post_data['topic_first_post_id'] == $post_id)))

+ // DNSBL check

+ if ($config['check_dnsbl'] && !$refresh)

+ {

+ if (($dnsbl = $user->check_dnsbl()) !== false)

+ {

+ $error[] = sprintf($user->lang['IP_BLACKLISTED'], $user->ip, $dnsbl[1]);

+ }

+ }

+

+ $perm_lock_unlock = ($auth->acl_get('m_lock', $forum_id) || ($auth->acl_get('f_user_lock', $forum_id) && $user->data['is_registered'] && !empty($post_data['topic_poster']) && $user->data['user_id'] == $post_data['topic_poster'] && $post_data['topic_status'] == ITEM_UNLOCKED)) ? true : false;

+ if (!$poll_delete && ($mode == 'post' || ($mode == 'edit' && $post_id == $post_data['topic_first_post_id'] && (!$post_data['poll_last_vote'] || $auth->acl_get('m_edit', $forum_id))))

+ $post_data['post_subject'] = ((strpos($post_data['post_subject'], 'Re: ') !== 0) ? 'Re: ' : '') . censor_text($post_data['post_subject']);

+// If the user is replying or posting and not already watching this topic but set to always being notified we need to overwrite this setting

+$notify_set = ($mode != 'edit' && $config['allow_topic_notify'] && $user->data['is_registered'] && !$post_data['notify_set']) ? $user->data['user_notify'] : $post_data['notify_set'];

+$notify_checked = (isset($notify)) ? $notify : (($mode == 'post') ? $user->data['user_notify'] : $notify_set);

+ if ($solved_captcha === false)

+ {

+ $code = gen_rand_string(mt_rand(5, 8));

+ $confirm_id = md5(unique_id($user->ip));

+

+ $sql = 'INSERT INTO ' . CONFIRM_TABLE . ' ' . $db->sql_build_array('INSERT', array(

+ 'confirm_id' => (string) $confirm_id,

+ 'session_id' => (string) $user->session_id,

+ 'confirm_type' => (int) CONFIRM_POST,

+ 'code' => (string) $code)

+ );

+ $db->sql_query($sql);

+ $template->assign_vars(array(

+ 'S_CONFIRM_CODE' => true,

+ 'CONFIRM_ID' => $confirm_id,

+ 'CONFIRM_IMAGE' => '<img src="' . append_sid("{$phpbb_root_path}ucp.$phpEx", 'mode=confirm&amp;id=' . $confirm_id . '&amp;type=' . CONFIRM_POST) . '" alt="" title="" />',

+ 'L_POST_CONFIRM_EXPLAIN' => sprintf($user->lang['POST_CONFIRM_EXPLAIN'], '<a href="mailto:' . htmlspecialchars($config['board_contact']) . '">', '</a>'),

+ ));

+ }

+$form_enctype = (@ini_get('file_uploads') == '0' || strtolower(@ini_get('file_uploads')) == 'off' || @ini_get('file_uploads') == '0' || !$config['allow_attachments'] || !$auth->acl_get('u_attach') || !$auth->acl_get('f_attach', $forum_id)) ? '' : ' enctype="multipart/form-data"';

+ 'BBCODE_STATUS' => ($bbcode_status) ? sprintf($user->lang['BBCODE_IS_ON'], '<a href="' . append_sid("{$phpbb_root_path}faq.$phpEx", 'mode=bbcode') . '">', '</a>') : sprintf($user->lang['BBCODE_IS_OFF'], '<a href="' . append_sid("{$phpbb_root_path}faq.$phpEx", 'mode=bbcode') . '">', '</a>'),

+ 'URL_STATUS' => ($url_status) ? $user->lang['URL_IS_ON'] : $user->lang['URL_IS_OFF'],

+ 'S_LOCK_TOPIC_ALLOWED' => (($mode == 'edit' || $mode == 'reply' || $mode == 'quote') && ($auth->acl_get('m_lock', $forum_id) || ($auth->acl_get('f_user_lock', $forum_id) && $user->data['is_registered'] && !empty($post_data['topic_poster']) && $user->data['user_id'] == $post_data['topic_poster'] && $post_data['topic_status'] == ITEM_UNLOCKED))) ? true : false,

+ 'S_LINKS_ALLOWED' => $url_status,

+ 'S_BBCODE_URL' => $url_status,

+ 'S_POLL_DELETE_CHECKED' => (!empty($poll_delete)) ? true : false,