diff options
Diffstat (limited to 'phpBB/posting.php')
| -rw-r--r-- | phpBB/posting.php | 2601 |
1 files changed, 563 insertions, 2038 deletions
diff --git a/phpBB/posting.php b/phpBB/posting.php index 96c88cc379..d93349582e 100644 --- a/phpBB/posting.php +++ b/phpBB/posting.php @@ -27,284 +27,64 @@ include($phpbb_root_path . 'includes/post.'.$phpEx); include($phpbb_root_path . 'includes/bbcode.'.$phpEx); include($phpbb_root_path . 'includes/search.'.$phpEx); -// ----------------------- -// Page specific functions // +// Check and set various parameters +// +$params = array('submit' => 'post', 'confirm' => 'confirm', 'preview' => 'preview', 'delete' => 'delete', 'poll_delete' => 'poll_delete', 'poll_add' => 'add_poll_option', 'poll_edit' => 'edit_poll_option', 'mode' => 'mode', 'forum_id' => POST_FORUM_URL, 'topic_id' => POST_TOPIC_URL, 'post_id' => POST_POST_URL); -function topic_review($topic_id, $is_inline_review) +while( list($var, $param) = @each($params) ) { - global $db, $board_config, $template, $lang, $images, $theme, $phpEx; - global $userdata, $user_ip; - global $orig_word, $replacement_word; - global $starttime; - - if( !$is_inline_review ) - { - if( !isset($topic_id) ) - { - message_die(GENERAL_MESSAGE, 'Topic_not_exist'); - } - - // - // Get topic info ... - // - $sql = "SELECT f.forum_id, f.auth_view, f.auth_read, f.auth_post, f.auth_reply, f.auth_edit, f.auth_delete, f.auth_sticky, f.auth_announce, f.auth_pollcreate, f.auth_vote, f.auth_attachments - FROM " . TOPICS_TABLE . " t, " . FORUMS_TABLE . " f - WHERE t.topic_id = $topic_id - AND f.forum_id = t.forum_id"; - if(!$result = $db->sql_query($sql)) - { - message_die(GENERAL_ERROR, "Couldn't obtain topic information", "", __LINE__, __FILE__, $sql); - } - - if( !$total_rows = $db->sql_numrows($result) ) - { - message_die(GENERAL_MESSAGE, 'Topic_post_not_exist'); - } - $forum_row = $db->sql_fetchrow($result); - - $forum_id = $forum_row['forum_id']; - - // - // Start session management - // - $userdata = session_pagestart($user_ip, $forum_id); - init_userprefs($userdata); - // - // End session management - // - - $is_auth = array(); - $is_auth = auth(AUTH_ALL, $forum_id, $userdata, $forum_row); - - } - - // - // Define censored word matches - // - if( empty($orig_word) && empty($replacement_word) ) + if ( !empty($HTTP_POST_VARS[$param]) || !empty($HTTP_GET_VARS[$param]) ) { - $orig_word = array(); - $replacement_word = array(); - obtain_word_list($orig_word, $replacement_word); - } - - - // - // Dump out the page header and load viewtopic body template - // - if( !$is_inline_review ) - { - $gen_simple_header = TRUE; - - $page_title = $lang['Review_topic'] ." - $topic_title"; - include($phpbb_root_path . 'includes/page_header.'.$phpEx); - - $template->set_filenames(array( - "reviewbody" => "posting_topic_review.tpl") - ); - } - - // - // Go ahead and pull all data for this topic - // - $sql = "SELECT u.username, u.user_id, p.*, pt.post_text, pt.post_subject, pt.bbcode_uid - FROM " . POSTS_TABLE . " p, " . USERS_TABLE . " u, " . POSTS_TEXT_TABLE . " pt - WHERE p.topic_id = $topic_id - AND p.poster_id = u.user_id - AND p.post_id = pt.post_id - ORDER BY p.post_time DESC - LIMIT " . $board_config['posts_per_page']; - if( !($result = $db->sql_query($sql)) ) - { - message_die(GENERAL_ERROR, "Couldn't obtain post/user information.", "", __LINE__, __FILE__, $sql); - } - - // - // Okay, let's do the loop, yeah come on baby let's do the loop - // and it goes like this ... - // - if ( $row = $db->sql_fetchrow($result) ) - { - do - { - $poster_id = $row['user_id']; - $poster = $row['username']; - - $post_date = create_date($board_config['default_dateformat'], $row['post_time'], $board_config['board_timezone']); - - $mini_post_img = '<img src="' . $images['icon_minipost'] . '" alt="' . $lang['Post'] . '" />'; - - // - // Handle anon users posting with usernames - // - if( $poster_id == ANONYMOUS && $row['post_username'] != '' ) - { - $poster = $row['post_username']; - $poster_rank = $lang['Guest']; - } - - $post_subject = ( $row['post_subject'] != "" ) ? $row['post_subject'] : ""; - - $message = $row['post_text']; - $bbcode_uid = $row['bbcode_uid']; - - // - // If the board has HTML off but the post has HTML - // on then we process it, else leave it alone - // - if( !$board_config['allow_html'] ) - { - if( $row['enable_html'] ) - { - $message = preg_replace("#(<)([\/]?.*?)(>)#is", "<\\2>", $message); - } - } - - if( $bbcode_uid != "" ) - { - $message = ( $board_config['allow_bbcode'] ) ? bbencode_second_pass($message, $bbcode_uid) : preg_replace("/\:[0-9a-z\:]+\]/si", "]", $message); - } - - $message = make_clickable($message); - - if( count($orig_word) ) - { - $post_subject = preg_replace($orig_word, $replacement_word, $post_subject); - $message = preg_replace($orig_word, $replacement_word, $message); - } - - if( $board_config['allow_smilies'] && $row['enable_smilies'] ) - { - $message = smilies_pass($message); - } - - $message = str_replace("\n", "<br />", $message); - - // - // Again this will be handled by the templating - // code at some point - // - $row_color = ( !($i % 2) ) ? $theme['td_color1'] : $theme['td_color2']; - $row_class = ( !($i % 2) ) ? $theme['td_class1'] : $theme['td_class2']; - - $template->assign_block_vars("postrow", array( - "ROW_COLOR" => "#" . $row_color, - "ROW_CLASS" => $row_class, - - "MINI_POST_IMG" => $mini_post_img, - "POSTER_NAME" => $poster, - "POST_DATE" => $post_date, - "POST_SUBJECT" => $post_subject, - "MESSAGE" => $message) - ); - } - while( $row = $db->sql_fetchrow($result) ); + $$var = ( !empty($HTTP_POST_VARS[$param]) ) ? $HTTP_POST_VARS[$param] : $HTTP_GET_VARS[$param]; } else { - message_die(GENERAL_MESSAGE, 'Topic_post_not_exist', "", __LINE__, __FILE__, $sql); - } - - $template->assign_vars(array( - "L_POSTED" => $lang['Posted'], - "L_POST_SUBJECT" => $lang['Post_subject'], - "L_TOPIC_REVIEW" => $lang['Topic_review']) - ); - - if( !$is_inline_review ) - { - $template->pparse("reviewbody"); - - include($phpbb_root_path . 'includes/page_tail.'.$phpEx); + $$var = ""; } } -// -// End page specific functions -// --------------------------- - +$refresh = $preview || $poll_add || $poll_edit || $poll_delete; - - -// ------------------------------------------- -// Do some initial checks, set basic variables, -// etc. // -$html_entities_match = array("#&#", "#<#", "#>#", "#\"#"); -$html_entities_replace = array("&", "<", ">", """); -$error = false; - -$submit = ( isset($HTTP_POST_VARS['submit']) ) ? TRUE : 0; -$cancel = ( isset($HTTP_POST_VARS['cancel']) ) ? TRUE : 0; -$preview = ( isset($HTTP_POST_VARS['preview']) ) ? TRUE : 0; -$confirm = ( isset($HTTP_POST_VARS['confirm']) ) ? TRUE : 0; -$delete = ( isset($HTTP_POST_VARS['delete']) ) ? TRUE : 0; -$poll_delete = ( isset($HTTP_POST_VARS['poll_delete']) ) ? TRUE : 0; - -$poll_add_option = ( isset($HTTP_POST_VARS['add_poll_option']) ) ? TRUE : 0; -$poll_edit_option = ( isset($HTTP_POST_VARS['edit_poll_option']) ) ? TRUE : 0; -$poll_delete_option = ( isset($HTTP_POST_VARS['del_poll_option']) ) ? TRUE : 0; - -$refresh = $preview || $poll_add_option || $poll_edit_option || $poll_delete_option; +// Set topic type +// +$topic_type = ( !empty($HTTP_POST_VARS['topictype']) ) ? $HTTP_POST_VARS['topictype'] : POST_ANNOUNCE; // -// Mode, topic_id, post_id and forum_id settings +// If the mode is set to topic review then output +// that review ... // -if( isset($HTTP_POST_VARS['mode']) || isset($HTTP_GET_VARS['mode']) ) -{ - $mode = ( isset($HTTP_POST_VARS['mode']) ) ? $HTTP_POST_VARS['mode'] : $HTTP_GET_VARS['mode']; -} -else -{ - $mode = ""; -} - -if( isset($HTTP_GET_VARS[POST_FORUM_URL]) || isset($HTTP_POST_VARS[POST_FORUM_URL]) ) -{ - $forum_id = (isset($HTTP_POST_VARS[POST_FORUM_URL])) ? $HTTP_POST_VARS[POST_FORUM_URL] : $HTTP_GET_VARS[POST_FORUM_URL]; -} -else -{ - $forum_id = ""; -} - -if( isset($HTTP_GET_VARS[POST_POST_URL]) || isset($HTTP_POST_VARS[POST_POST_URL]) ) -{ - $post_id = (isset($HTTP_POST_VARS[POST_POST_URL])) ? $HTTP_POST_VARS[POST_POST_URL] : $HTTP_GET_VARS[POST_POST_URL]; -} -else +if( $mode == "topicreview" ) { - $post_id = ""; -} + require($phpbb_root_path . 'includes/topic_review.'.$phpEx); -if( isset($HTTP_GET_VARS[POST_TOPIC_URL]) || isset($HTTP_POST_VARS[POST_TOPIC_URL]) ) -{ - $topic_id = (isset($HTTP_POST_VARS[POST_TOPIC_URL])) ? $HTTP_POST_VARS[POST_TOPIC_URL] : $HTTP_GET_VARS[POST_TOPIC_URL]; + topic_review($topic_id, false); + exit; } -else +else if( $mode == "smilies" ) { - $topic_id = ""; + generate_smilies("window", PAGE_POSTING); + exit; } - // // Was cancel pressed? If so then redirect to the appropriate // page, no point in continuing with any further checks // -if( $cancel ) +if( isset($HTTP_POST_VARS['cancel']) ) { - if($post_id != "") + if ( $post_id ) { $redirect = "viewtopic.$phpEx?" . POST_POST_URL . "=$post_id"; $post_append = "#$post_id"; } - else if($topic_id != "") + else if ( $topic_id ) { $redirect = "viewtopic.$phpEx?" . POST_TOPIC_URL . "=$topic_id"; $post_append = ""; } - else if($forum_id != "") + else if ( $forum_id ) { $redirect = "viewforum.$phpEx?" . POST_FORUM_URL . "=$forum_id"; $post_append = ""; @@ -314,33 +94,9 @@ if( $cancel ) $redirect = "index.$phpEx"; $post_append = ""; } - header("Location:" . append_sid($redirect) . $post_append, true); -} -// -// Continue var definitions -// - - - - -// -// If the mode is set to topic review then output -// that review ... -// -if( $mode == "topicreview" ) -{ - topic_review($topic_id, false); - exit; + header("Location: " . append_sid($redirect) . $post_append, true); } -else if( $mode == "smilies" ) -{ - generate_smilies("window", PAGE_POSTING); - exit; -} - - - // // Start session management @@ -351,208 +107,14 @@ init_userprefs($userdata); // End session management // - - -// -// Set toggles for various options -// -if( !$board_config['allow_html'] ) -{ - $html_on = 0; -} -else -{ - $html_on = ( $submit || $refresh ) ? ( ( !empty($HTTP_POST_VARS['disable_html']) ) ? 0 : TRUE ) : ( ( $userdata['user_id'] == ANONYMOUS ) ? $board_config['allow_html'] : $userdata['user_allowhtml'] ); -} - -if( !$board_config['allow_bbcode'] ) -{ - $bbcode_on = 0; -} -else -{ - $bbcode_on = ( $submit || $refresh ) ? ( ( !empty($HTTP_POST_VARS['disable_bbcode']) ) ? 0 : TRUE ) : ( ( $userdata['user_id'] == ANONYMOUS ) ? $board_config['allow_bbcode'] : $userdata['user_allowbbcode'] ); -} - -if( !$board_config['allow_smilies'] ) -{ - $smilies_on = 0; -} -else -{ - $smilies_on = ( $submit || $refresh ) ? ( ( !empty($HTTP_POST_VARS['disable_smilies']) ) ? 0 : TRUE ) : ( ( $userdata['user_id'] == ANONYMOUS ) ? $board_config['allow_smilies'] : $userdata['user_allowsmile'] ); -} - -$attach_sig = ( $submit || $refresh ) ? ( ( !empty($HTTP_POST_VARS['attach_sig']) ) ? TRUE : 0 ) : ( ( $userdata['user_id'] == ANONYMOUS ) ? 0 : $userdata['user_attachsig'] ); - -// -// Here we do various lookups to find topic_id, forum_id, post_id etc. -// Doing it here prevents spoofing (eg. faking forum_id, topic_id or post_id -// -if( $mode != "newtopic" ) -{ - if( $mode == "reply" || $mode == "quote" || $mode == "vote" ) - { - if( ( $mode == "reply" || $mode == "vote" ) && $topic_id ) - { - $sql = "SELECT f.forum_id, f.forum_status, f.forum_name, t.topic_status - FROM " . FORUMS_TABLE . " f, " . TOPICS_TABLE . " t - WHERE t.topic_id = $topic_id - AND f.forum_id = t.forum_id"; - } - else if( $mode == "quote" && $post_id ) - { - $sql = "SELECT f.forum_id, f.forum_status, f.forum_name, t.topic_id, t.topic_status - FROM " . POSTS_TABLE . " p, " . TOPICS_TABLE . " t, " . FORUMS_TABLE . " f - WHERE p.post_id = $post_id - AND t.topic_id = p.topic_id - AND f.forum_id = t.forum_id"; - } - else - { - $message = ( $mode == "quote" ) ? $lang['No_post_id'] : $lang['No_topic_id']; - message_die(GENERAL_MESSAGE, $message); - } - } - else if( $mode == "editpost" || $mode == "delete" ) - { - if( $post_id ) - { - $sql = "SELECT t.topic_id, t.topic_status, t.topic_first_post_id, t.topic_last_post_id, t.topic_vote, f.forum_id, f.forum_name, f.forum_status, f.forum_last_post_id - FROM " . POSTS_TABLE . " p, " . TOPICS_TABLE . " t, " . FORUMS_TABLE . " f - WHERE p.post_id = $post_id - AND t.topic_id = p.topic_id - AND f.forum_id = t.forum_id"; - } - else - { - message_die(GENERAL_MESSAGE, $lang['No_post_id']); - } - } - else - { - message_die(GENERAL_MESSAGE, $lang['No_valid_mode']); - } - - if( $result = $db->sql_query($sql) ) - { - $check_row = $db->sql_fetchrow($result); - - $forum_id = $check_row['forum_id']; - - $forum_name = $check_row['forum_name']; - $topic_status = $check_row['topic_status']; - $forum_status = $check_row['forum_status']; - - if( $mode == "editpost" || $mode == "delete" ) - { - $topic_id = $check_row['topic_id']; - - $is_first_post_topic = ($check_row['topic_first_post_id'] == $post_id) ? TRUE : 0; - $is_last_post_topic = ($check_row['topic_last_post_id'] == $post_id) ? TRUE : 0; - $is_last_post_forum = ($check_row['forum_last_post_id'] == $post_id) ? TRUE : 0; - - $post_has_poll = ($check_row['topic_vote']) ? TRUE : 0; - - if( $is_first_post_topic && $post_has_poll ) - { - $sql = "SELECT vd.vote_id, SUM(vr.vote_result) AS vote_sum - FROM " . VOTE_DESC_TABLE . " vd, " . VOTE_RESULTS_TABLE . " vr - WHERE vd.topic_id = $topic_id - AND vr.vote_id = vd.vote_id - GROUP BY vd.vote_id"; - if( !($result = $db->sql_query($sql)) ) - { - message_die(GENERAL_ERROR, "Couldn't obtain vote data for this topic", "", __LINE__, __FILE__, $sql); - } - - $vote_results_sum = 0; - if( $row = $db->sql_fetchrow($result) ) - { - $vote_id = $row['vote_id']; - $vote_results_sum = $row['vote_sum']; - } - $can_edit_poll = ( !$vote_results_sum ) ? TRUE : 0; - } - else - { - $can_edit_poll = 0; - } - } - else - { - if( $mode == "quote" ) - { - $topic_id = $check_row['topic_id']; - } - - $is_first_post_topic = 0; - $is_last_post_topic = 0; - $post_has_poll = 0; - $can_edit_poll = 0; - } - } - else - { - message_die(GENERAL_MESSAGE, $lang['No_such_post']); - } -} -else -{ - $sql = "SELECT forum_name, forum_status - FROM " . FORUMS_TABLE . " - WHERE forum_id = $forum_id"; - if( $result = $db->sql_query($sql) ) - { - $check_row = $db->sql_fetchrow($result); - - $forum_status = $check_row['forum_status']; - $forum_name = $check_row['forum_name']; - $topic_status = TOPIC_UNLOCKED; - - $is_first_post_topic = TRUE; - $is_last_post_topic = 0; - $post_has_poll = 0; - $can_edit_poll = 0; - - } - else - { - message_die(GENERAL_MESSAGE, $lang['Forum_not_exist']); - } -} - -// -// Set topic type -// -if( isset($HTTP_POST_VARS['topictype']) ) -{ - if( $HTTP_POST_VARS['topictype'] == "announce" ) - { - $topic_type = POST_ANNOUNCE; - } - else if( $HTTP_POST_VARS['topictype'] == "sticky" ) - { - $topic_type = POST_STICKY; - } - else - { - $topic_type = POST_NORMAL; - } -} -else -{ - $topic_type = POST_NORMAL; -} - // -// Auth checks +// What auth type do we need to check? // -$auth_type = AUTH_ALL; +$is_auth = array(); switch( $mode ) { case 'newtopic': - if( $topic_type == POST_ANNOUNCE ) + if( $topic_type == POST_ANNOUNCE ) { $is_auth_type = "auth_announce"; } @@ -565,1709 +127,660 @@ switch( $mode ) $is_auth_type = "auth_post"; } break; - case 'reply': case 'quote': $is_auth_type = "auth_reply"; break; - case 'editpost': $is_auth_type = "auth_edit"; break; - case 'delete': + case 'poll_delete': $is_auth_type = "auth_delete"; break; - case 'vote': $is_auth_type = "auth_vote"; break; - case 'topicreview': $is_auth_type = "auth_read"; break; - default: message_die(GENERAL_MESSAGE, $lang['No_post_mode']); break; } // -// Do required auth check -// -$is_auth = auth($auth_type, $forum_id, $userdata); - -// -// The user is not authed, if they're not logged in then redirect -// them, else show them an error message +// Here we do various lookups to find topic_id, forum_id, post_id etc. +// Doing it here prevents spoofing (eg. faking forum_id, topic_id or post_id // -if( !$is_auth[$is_auth_type] ) +$error_msg = ""; +$post_data = array(); +switch ( $mode ) { - if( !$userdata['session_logged_in'] ) - { - switch( $mode ) + case 'newtopic': + if ( empty($forum_id) ) { - case 'newtopic': - $redirect = "mode=newtopic&" . POST_FORUM_URL . "=$forum_id"; - break; - case 'reply': - case 'topicreview': - $redirect = "mode=reply&" . POST_TOPIC_URL . "=$topic_id"; - break; - case 'quote': - $redirect = "mode=quote&" . POST_POST_URL ."=$post_id"; - break; - case 'editpost': - $redirect = "mode=editpost&" . POST_POST_URL ."=$post_id&" . POST_TOPIC_URL . "=$topic_id"; - break; + message_die(GENERAL_MESSAGE, $lang['Forum_not_exist']); } - header("Location: " . append_sid("login.$phpEx?redirect=posting.$phpEx&" . $redirect, true)); - - } - else - { - $message = sprintf($lang['Sorry_' . $is_auth_type], $is_auth[$is_auth_type . "_type"]); - } + $sql = "SELECT * + FROM " . FORUMS_TABLE . " + WHERE forum_id = $forum_id"; + break; - message_die(GENERAL_MESSAGE, $message); -} -// -// End Auth -// + case 'reply': + case 'vote': + if ( empty( $topic_id) ) + { + message_die(GENERAL_MESSAGE, $lang['No_topic_id']); + } -// -// Is topic or forum locked? -// -if( $forum_status == FORUM_LOCKED && !$is_auth['auth_mod']) -{ - message_die(GENERAL_MESSAGE, $lang['Forum_locked']); -} -else if( $topic_status == TOPIC_LOCKED && !$is_auth['auth_mod']) -{ - message_die(GENERAL_MESSAGE, $lang['Topic_locked']); -} + $sql = "SELECT f.*, t.topic_status + FROM " . FORUMS_TABLE . " f, " . TOPICS_TABLE . " t + WHERE t.topic_id = $topic_id + AND f.forum_id = t.forum_id"; + break; -// -// Notify on reply -// -if( ( $mode == "reply" || $mode == "editpost" ) && $topic_id ) -{ - if( $submit || $refresh ) - { - $notify_user = ( !empty($HTTP_POST_VARS['notify']) ) ? TRUE : 0; - } - else - { - $sql = "SELECT topic_id - FROM " . TOPICS_WATCH_TABLE . " - WHERE topic_id = $topic_id - AND user_id = " . $userdata['user_id']; - if( !$result = $db->sql_query($sql) ) + case 'quote': + case 'editpost': + case 'delete': + case 'poll_delete': + if ( empty($post_id) ) { - message_die(GENERAL_ERROR, "Couldn't obtain topic watch information", "", __LINE__, __FILE__, $sql); + message_die(GENERAL_MESSAGE, $lang['No_post_id']); } - $notify_user = ( $db->sql_numrows($result) ) ? TRUE : $userdata['user_notify']; - } -} -else -{ - $notify_user = ( $submit || $preview ) ? ( ( !empty($HTTP_POST_VARS['notify']) ) ? TRUE : 0 ) : $userdata['user_notify']; -} - -// -// End variable checks and definitions -// ----------------------------------- + $select_sql = ( !$submit ) ? ", t.topic_title, p.enable_bbcode, p.enable_html, p.enable_smilies, p.enable_sig, p.post_username, pt.post_subject, pt.post_text, pt.bbcode_uid, u.username, u.user_id, u.user_sig" : ""; + $from_sql = ( !$submit ) ? ", " . POSTS_TEXT_TABLE . " pt, " . USERS_TABLE . " u" : ""; + $where_sql = ( !$submit ) ? "AND pt.post_id = p.post_id AND u.user_id = p.poster_id" : ""; + $sql = "SELECT f.*, t.topic_id, t.topic_status, t.topic_type, t.topic_first_post_id, t.topic_last_post_id, t.topic_vote, p.post_id, p.poster_id" . $select_sql . " + FROM " . POSTS_TABLE . " p, " . TOPICS_TABLE . " t, " . FORUMS_TABLE . " f" . $from_sql . " + WHERE p.post_id = $post_id + AND t.topic_id = p.topic_id + AND f.forum_id = p.forum_id + $where_sql"; + break; -// ------------------------------------------------------- -// All initial checks complete, we can not start the major -// posting related code -// + default: + message_die(GENERAL_MESSAGE, $lang['No_valid_mode']); +} -if( $submit && $mode != "vote" ) +if ( $result = $db->sql_query($sql) ) { - if( !empty($HTTP_POST_VARS['username']) ) - { - $post_username = trim(strip_tags($HTTP_POST_VARS['username'])); + $post_info = $db->sql_fetchrow($result); - if( !validate_username(stripslashes($post_username)) ) - { - $error = TRUE; - if(!empty($error_msg)) - { - $error_msg .= "<br />"; - } - $error_msg .= $lang['Invalid_username']; - } - } - else - { - $post_username = ""; - } + $forum_id = $post_info['forum_id']; + $forum_name = $post_info['forum_name']; - if( !empty($HTTP_POST_VARS['subject']) ) - { - $post_subject = trim(strip_tags(htmlspecialchars($HTTP_POST_VARS['subject']))); - } - else - { - $post_subject = ""; - if( ( $mode == "newtopic" || ( $mode == "editpost" && $is_first_post_topic ) ) && empty($post_subject) ) - { - $error = TRUE; - if( !empty($error_msg) ) - { - $error_msg .= "<br />"; - } - $error_msg .= $lang['Empty_subject']; - } - } + $is_auth = auth(AUTH_ALL, $forum_id, $userdata, $post_info); - if( !empty($HTTP_POST_VARS['message']) ) - { - $post_message = trim($HTTP_POST_VARS['message']); + if ( $post_info['forum_status'] == FORUM_LOCKED && !$is_auth['auth_mod']) + { + message_die(GENERAL_MESSAGE, $lang['Forum_locked']); + } + else if ( $mode != "newtopic" && $post_info['topic_status'] == TOPIC_LOCKED && !$is_auth['auth_mod']) + { + message_die(GENERAL_MESSAGE, $lang['Topic_locked']); + } - if( !$error ) - { - $bbcode_uid = ( $bbcode_on ) ? make_bbcode_uid() : ""; - $post_message = prepare_message($post_message, $html_on, $bbcode_on, $smilies_on, $bbcode_uid); - } - } - else + if ( $mode == "editpost" || $mode == "delete" || $mode == "poll_delete" ) { - $error = TRUE; - if(!empty($error_msg)) - { - $error_msg .= "<br />"; - } - $error_msg .= $lang['Empty_message']; - } + $topic_id = $post_info['topic_id']; - // - // Handle poll stuff - // - $topic_vote = 0; + $post_data['poster_post'] = ( $post_info['poster_id'] == $userdata['user_id'] ) ? true : false; + $post_data['first_post'] = ( $post_info['topic_first_post_id'] == $post_id ) ? true : false; + $post_data['last_post'] = ( $post_info['topic_last_post_id'] == $post_id ) ? true : false; + $post_data['last_topic'] = ( $post_info['forum_last_post_id'] == $post_id ) ? true : false; + $post_data['has_poll'] = ( $post_info['topic_vote'] ) ? true : false; + $post_data['topic_type'] = $post_info['topic_type']; - if( $mode == "newtopic" || $mode == "editpost" ) - { - if( $is_auth['auth_pollcreate'] && $is_first_post_topic ) + if ( $post_data['first_post'] && $post_data['has_poll'] ) { - $poll_title = ( isset($HTTP_POST_VARS['poll_title']) ) ? trim(strip_tags(htmlspecialchars($HTTP_POST_VARS['poll_title']))) : ""; - $poll_length = ( isset($HTTP_POST_VARS['poll_length']) ) ? intval($HTTP_POST_VARS['poll_length']) : 0; - if( $poll_length < 0 ) - { - $poll_length = 0; - } - - $poll_options = 0; - $poll_option_list = array(); - if( isset($HTTP_POST_VARS['poll_option_text']) ) + $sql = "SELECT * + FROM " . VOTE_DESC_TABLE . " vd, " . VOTE_RESULTS_TABLE . " vr + WHERE vd.topic_id = $topic_id + AND vr.vote_id = vd.vote_id + ORDER BY vr.vote_option_id"; + if ( !($result = $db->sql_query($sql)) ) { - while( list($option_id, $option_text) = each($HTTP_POST_VARS['poll_option_text']) ) - { - $poll_option_list[$option_id] = trim(strip_tags(htmlspecialchars($option_text))); - $poll_options++; - } + message_die(GENERAL_ERROR, "Couldn't obtain vote data for this topic", "", __LINE__, __FILE__, $sql); } - if( $poll_title == "" && $poll_options ) + $poll_options = array(); + $poll_results_sum = 0; + if ( $row = $db->sql_fetchrow($result) ) { - $error = TRUE; - if(!empty($error_msg)) - { - $error_msg .= "<br />"; - } - $error_msg .= $lang['Empty_poll_title']; - } + $poll_title = $row['vote_text']; + $poll_id = $row['vote_id']; + $poll_length = $row['vote_length'] / 86400; - if( $poll_title != "" ) - { - if( $poll_options < 2 ) - { - $error = TRUE; - if(!empty($error_msg)) - { - $error_msg .= "<br />"; - } - $error_msg .= $lang['To_few_poll_options']; - } - else if( $poll_options > $board_config['max_poll_options'] ) + do { - $error = TRUE; - if(!empty($error_msg)) - { - $error_msg .= "<br />"; - } - $error_msg .= $lang['To_many_poll_options']; + $poll_options[$row['vote_option_id']] = $row['vote_option_text']; + $poll_results_sum += $row['vote_result']; } + while ( $row = $db->sql_fetchrow($result) ); } - if( $poll_title != "" && $poll_options >= 2 && $poll_options <= $board_config['max_poll_options'] ) - { - $topic_vote = 1; - $sql_topic_vote_edit = ", topic_vote = 1"; - } + $post_data['edit_poll'] = ( ( !$poll_results_sum || $is_auth['auth_mod'] ) && $post_data['first_post'] ) ? true : 0; } - } -} - -// -// Submit or confirm ... big chunk of code ... can probably be -// still further reduced, will look at it later, possibly for -// 2.2 -// -if( ( $submit || $confirm || $mode == "delete" ) && !$error ) -{ - $current_time = time(); - - // - // Which mode was selected? - // - if( $mode == "newtopic" || $mode == "reply" ) - { - // - // Flood control - // - $where_sql = ( $userdata['user_id'] == ANONYMOUS ) ? "poster_ip = '$user_ip'" : "poster_id = " . $userdata['user_id']; - - $sql = "SELECT MAX(post_time) AS last_post_time - FROM " . POSTS_TABLE . " - WHERE $where_sql"; - if($result = $db->sql_query($sql)) + else { - $db_row = $db->sql_fetchrow($result); - - if( $last_post_time = $db_row['last_post_time'] ) - { - if( ($current_time - $last_post_time) < $board_config['flood_interval'] ) - { - message_die(GENERAL_MESSAGE, $lang['Flood_Error']); - } - } + $post_data['edit_poll'] = false; } + // - // End Flood control + // Can this user edit/delete the post/poll? // - - if( $mode == "newtopic" ) + if ( $post_info['poster_id'] != $userdata['user_id'] && !$is_auth['auth_mod'] ) { - $sql = "INSERT INTO " . TOPICS_TABLE . " (topic_title, topic_poster, topic_time, forum_id, topic_status, topic_type, topic_vote) - VALUES ('" . str_replace("\'", "''", $post_subject) . "', " . $userdata['user_id'] . ", $current_time, $forum_id, " . TOPIC_UNLOCKED . ", $topic_type, $topic_vote)"; - $result = $db->sql_query($sql, BEGIN_TRANSACTION); - if( !$result ) - { - message_die(GENERAL_ERROR, "Error inserting data into topics table", "", __LINE__, __FILE__, $sql); - } - - $new_topic_id = $db->sql_nextid(); + $message = ( $delete || $mode == "delete" ) ? $lang['Delete_own_posts'] : $lang['Edit_own_posts']; + $message .= '<br /><br />' . sprintf($lang['Click_return_topic'], '<a href="' . append_sid("viewtopic.$phpEx?" . POST_TOPIC_URL . "=$topic_id") . '">', '</a>'); - // - // Handle poll ... - // - if( $is_auth['auth_pollcreate'] && $topic_vote ) - { - $sql = "INSERT INTO " . VOTE_DESC_TABLE . " (topic_id, vote_text, vote_start, vote_length) - VALUES ($new_topic_id, '" . str_replace("\'", "''", $poll_title) . "', $current_time, " . ( $poll_length * 86400 ) . ")"; - if( $result = $db->sql_query($sql) ) - { - $new_vote_id = $db->sql_nextid(); - - $poll_option_id = 1; - while( list($option_id, $option_text) = each($poll_option_list) ) - { - $sql = "INSERT INTO " . VOTE_RESULTS_TABLE . " (vote_id, vote_option_id, vote_option_text, vote_result) - VALUES ($new_vote_id, $poll_option_id, '" . str_replace("\'", "''", $option_text) . "', 0)"; - if( !$result = $db->sql_query($sql) ) - { - // Rollback ... - if(SQL_LAYER == "mysql") - { - $sql_del_t = "DELETE FROM " . TOPICS_TABLE . " - WHERE topic_id = $topic_id"; - $db->sql_query($sql_del_t); - $sql_del_v = "DELETE FROM " . VOTE_DESC_TABLE . " - WHERE vote_id = $new_vote_id"; - $db->sql_query($sql_del_v); - } - message_die(GENERAL_ERROR, "Couldn't insert new poll options", "", __LINE__, __FILE__, $sql); - } - $poll_option_id++; - } - } - else - { - if(SQL_LAYER == "mysql") - { - // Rollback ... - $sql_del_t = "DELETE FROM " . TOPICS_TABLE . " - WHERE topic_id = $topic_id"; - $db->sql_query($sql_del_t); - } - message_die(GENERAL_ERROR, "Couldn't insert new poll information", "", __LINE__, __FILE__, $sql); - } - } + message_die(GENERAL_MESSAGE, $message); } - else + else if ( !$post_data['last_post'] && !$is_auth['auth_mod'] && ( $mode == "delete" || $delete ) ) { - $new_topic_id = $topic_id; + message_die(GENERAL_MESSAGE, $lang['Cannot_delete_replied']); } - - $sql = "INSERT INTO " . POSTS_TABLE . " (topic_id, forum_id, poster_id, post_username, post_time, poster_ip, enable_bbcode, enable_html, enable_smilies, enable_sig) - VALUES ($new_topic_id, $forum_id, " . $userdata['user_id'] . ", '" . str_replace("\'", "''", $post_username) . "', $current_time, '$user_ip', $bbcode_on, $html_on, $smilies_on, $attach_sig)"; - $result = ($mode == "reply") ? $db->sql_query($sql, BEGIN_TRANSACTION) : $db->sql_query($sql); - - if( $result ) + else if ( !$post_data['edit_poll'] && !$is_auth['auth_mod'] && ( $mode == "poll_delete" || $poll_delete ) ) { - $new_post_id = $db->sql_nextid(); - - $sql = "INSERT INTO " . POSTS_TEXT_TABLE . " (post_id, post_subject, bbcode_uid, post_text) - VALUES ($new_post_id, '" . str_replace("\'", "''", $post_subject) . "', '$bbcode_uid', '" . str_replace("\'", "''", $post_message) . "')"; - - if( $db->sql_query($sql) ) - { - $first_post_sql = ( $mode == "newtopic" ) ?", topic_first_post_id = $new_post_id" : ""; - $sql = "UPDATE " . TOPICS_TABLE . " - SET topic_last_post_id = $new_post_id" . $first_post_sql; - if($mode == "reply") - { - $sql .= ", topic_replies = topic_replies + 1 "; - } - $sql .= " WHERE topic_id = $new_topic_id"; - - if( $db->sql_query($sql) ) - { - $sql = "UPDATE " . FORUMS_TABLE . " - SET forum_last_post_id = $new_post_id, forum_posts = forum_posts + 1"; - if( $mode == "newtopic" ) - { - $sql .= ", forum_topics = forum_topics + 1"; - } - - $sql .= " WHERE forum_id = $forum_id"; - - if( $db->sql_query($sql) ) - { - $sql = "UPDATE " . USERS_TABLE . " - SET user_posts = user_posts + 1 - WHERE user_id = " . $userdata['user_id']; - - if( $db->sql_query($sql, END_TRANSACTION)) - { - add_search_words($new_post_id, stripslashes($post_message), stripslashes($post_subject)); - - // - // Email users who are watching this topic - // - if( $mode == "reply" ) - { - $sql = "SELECT u.user_id, u.username, u.user_email, u.user_lang, t.topic_title - FROM " . TOPICS_WATCH_TABLE . " tw, " . TOPICS_TABLE . " t, " . USERS_TABLE . " u - WHERE tw.topic_id = $new_topic_id - AND tw.user_id NOT IN (" . $userdata['user_id'] . ", " . ANONYMOUS . " ) - AND tw.notify_status = " . TOPIC_WATCH_UN_NOTIFIED . " - AND t.topic_id = tw.topic_id - AND u.user_id = tw.user_id"; - if( $result = $db->sql_query($sql) ) - { - include($phpbb_root_path . 'includes/emailer.'.$phpEx); - $emailer = new emailer($board_config['smtp_delivery']); - - $orig_word = array(); - $replacement_word = array(); - obtain_word_list($orig_word, $replacement_word); - - $email_headers = "From: " . $board_config['board_email'] . "\nReturn-Path: " . $board_config['board_email'] . "\r\n"; - - $update_watched_sql = ""; - while( $row = $db->sql_fetchrow($result) ) - { - if( empty($topic_title) ) - { - $topic_title = preg_replace($orig_word, $replacement_word, $row['topic_title']); - } - - if( $row['user_email'] != "") - { - $emailer->use_template("topic_notify", $row['user_lang']); - $emailer->email_address($row['user_email']); - $emailer->set_subject($lang['Topic_reply_notification']); - $emailer->extra_headers($email_headers); - - $emailer->assign_vars(array( - "EMAIL_SIG" => str_replace("<br />", "\n", "-- \n" . $board_config['board_email_sig']), - "USERNAME" => $row['username'], - "SITENAME" => $board_config['sitename'], - "TOPIC_TITLE" => $topic_title, - - "U_TOPIC" => $script_url . "?" . POST_POST_URL . "=$new_post_id#$new_post_id", - "U_STOP_WATCHING_TOPIC" => $script_url . "?" . POST_TOPIC_URL . "=$new_topic_id&unwatch=topic") - ); - - $emailer->send(); - $emailer->reset(); - - if($update_watched_sql != "") - { - $update_watched_sql .= ", "; - } - $update_watched_sql .= $row['user_id']; - } - } - - if($update_watched_sql != "") - { - $sql = "UPDATE " . TOPICS_WATCH_TABLE . " - SET notify_status = " . TOPIC_WATCH_NOTIFIED . " - WHERE topic_id = $new_topic_id - AND user_id IN ($update_watched_sql)"; - $db->sql_query($sql); - } - } - } - - // - // Handle notification request ... - // - if( isset($notify_user) ) - { - if($mode == "reply") - { - $sql = "SELECT * - FROM " . TOPICS_WATCH_TABLE . " - WHERE topic_id = $new_topic_id - AND user_id = " . $userdata['user_id']; - if( !$result = $db->sql_query($sql) ) - { - message_die(GENERAL_ERROR, "Couldn't obtain topic watch information", "", __LINE__, __FILE__, $sql); - } - - if( $db->sql_numrows($result) ) - { - if( !$notify_user ) - { - $sql = "DELETE FROM " . TOPICS_WATCH_TABLE . " - WHERE topic_id = $new_topic_id - AND user_id = " . $userdata['user_id']; - if( !$result = $db->sql_query($sql) ) - { - message_die(GENERAL_ERROR, "Couldn't delete topic watch information", "", __LINE__, __FILE__, $sql); - } - } - } - else if( $notify_user ) - { - $sql = "INSERT INTO " . TOPICS_WATCH_TABLE . " (user_id, topic_id, notify_status) - VALUES (" . $userdata['user_id'] . ", $new_topic_id, 0)"; - if( !$result = $db->sql_query($sql) ) - { - message_die(GENERAL_ERROR, "Couldn't insert topic watch information", "", __LINE__, __FILE__, $sql); - } - } - } - else if( $notify_user ) - { - $sql = "INSERT INTO " . TOPICS_WATCH_TABLE . " (user_id, topic_id, notify_status) - VALUES (" . $userdata['user_id'] . ", $new_topic_id, 0)"; - if( !$result = $db->sql_query($sql) ) - { - message_die(GENERAL_ERROR, "Couldn't insert topic watch information", "", __LINE__, __FILE__, $sql); - } - } - } - - $tracking_topics = ( isset($HTTP_COOKIE_VARS[$board_config['cookie_name'] . "_t"]) ) ? unserialize($HTTP_COOKIE_VARS[$board_config['cookie_name'] . "_t"]) : array(); - - if( count($tracking_topics) == 150 && empty($tracking_topics['' . $new_topic_id . '']) ) - { - asort($tracking_topics); - unset($tracking_topics[key($tracking_topics)]); - } - - $tracking_topics['' . $new_topic_id . ''] = time(); - - setcookie($board_config['cookie_name'] . "_t", serialize($tracking_topics), 0, $board_config['cookie_path'], $board_config['cookie_domain'], $board_config['cookie_secure']); - - // - // If we get here the post has been inserted successfully. - // - $template->assign_vars(array( - "META" => '<meta http-equiv="refresh" content="3;url=' . append_sid("viewtopic.$phpEx?" . POST_POST_URL . "=$new_post_id") . '#' . $new_post_id . '">') - ); - - $message = $lang['Stored'] . "<br /><br />" . sprintf($lang['Click_view_message'], "<a href=\"" . append_sid("viewtopic.$phpEx?" . POST_POST_URL . "=$new_post_id") . "#$new_post_id\">", "</a>") . "<br /><br />" . sprintf($lang['Click_return_forum'], "<a href=\"" . append_sid("viewforum.$phpEx?" . POST_FORUM_URL . "=$forum_id") . "\">", "</a>"); - - message_die(GENERAL_MESSAGE, $message); - } - else - { - message_die(GENERAL_ERROR, "Error updating users table", "", __LINE__, __FILE__, $sql); - } - } - else - { - message_die(GENERAL_ERROR, "Error updating forums table", "", __LINE__, __FILE__, $sql); - } - } - else - { - message_die(GENERAL_ERROR, "Error updating topics table", "", __LINE__, __FILE__, $sql); - } - } - else - { - // Rollback - if(SQL_LAYER == "mysql") - { - $sql = "DELETE FROM " . POSTS_TABLE . " - WHERE post_id = $new_post_id"; - $db->sql_query($sql); - } - message_die(GENERAL_ERROR, "Error inserting data into posts text table", "", __LINE__, __FILE__, $sql); - } + message_die(GENERAL_MESSAGE, $lang['Cannot_delete_poll']); } - else + } + else + { + if ( $mode == "quote" ) { - message_die(GENERAL_ERROR, "Error inserting data into posts table", "", __LINE__, __FILE__, $sql); + $topic_id = $post_info['topic_id']; } - // - // End of mode = newtopic || reply - // + $post_data['first_post'] = ( $mode == "newtopic" ) ? true : 0; + $post_data['last_post'] = false; + $post_data['has_poll'] = false; + $post_data['edit_poll'] = false; } - else if( $mode == "editpost" || $mode == "delete" ) +} +else +{ + message_die(GENERAL_MESSAGE, $lang['No_such_post']); +} + +// +// The user is not authed, if they're not logged in then redirect +// them, else show them an error message +// +if ( !$is_auth[$is_auth_type] ) +{ + if ( $userdata['session_logged_in'] ) { - $sql = "SELECT poster_id - FROM " . POSTS_TABLE . " - WHERE post_id = $post_id"; - if($result = $db->sql_query($sql)) - { - $row = $db->sql_fetchrow($result); + message_die(GENERAL_MESSAGE, sprintf($lang['Sorry_' . $is_auth_type], $is_auth[$is_auth_type . "_type"])); + } - $poster_id = $row['poster_id']; + switch( $mode ) + { + case 'newtopic': + $redirect = "mode=newtopic&" . POST_FORUM_URL . "=" . $forum_id; + break; + case 'reply': + case 'topicreview': + $redirect = "mode=reply&" . POST_TOPIC_URL . "=" . $topic_id; + break; + case 'quote': + case 'editpost': + $redirect = "mode=quote&" . POST_POST_URL ."=" . $post_id; + break; + } - if( $userdata['user_id'] != $poster_id && !$is_auth['auth_mod']) - { - $message = ( $delete || $mode == "delete" ) ? $lang['Delete_own_posts'] : $lang['Edit_own_posts']; - $message .="<br /><br />" . sprintf($lang['Click_return_topic'], "<a href=\"" . append_sid("viewtopic.$phpEx?" . POST_TOPIC_URL . "=$topic_id") . "\">", "</a>"); + header("Location: " . append_sid("login.$phpEx?redirect=posting.$phpEx&" . $redirect, true)); +} - message_die(GENERAL_MESSAGE, $message); - } - } - else - { - message_die(GENERAL_ERROR, "Couldn't obtain post information", "", __LINE__, __FILE__, $sql); - } +// +// Set toggles for various options +// +if( !$board_config['allow_html'] ) +{ + $html_on = 0; +} +else +{ + $html_on = ( $submit || $refresh ) ? ( ( !empty($HTTP_POST_VARS['disable_html']) ) ? 0 : TRUE ) : ( ( $userdata['user_id'] == ANONYMOUS ) ? $board_config['allow_html'] : $userdata['user_allowhtml'] ); +} - // - // The user has chosen to delete a post or a poll - // - if( ( $delete || $mode == "delete" ) && ( ( $is_auth['auth_delete'] && !$is_last_post_topic && !$is_auth['auth_mod'] ) ) ) - { - $message = $lang['Cannot_delete_replied'] . "<br /><br />" . sprintf($lang['Click_return_topic'], "<a href=\"" . append_sid("viewtopic.$phpEx?" . POST_TOPIC_URL . "=$topic_id") . "\">", "</a>"); +if( !$board_config['allow_bbcode'] ) +{ + $bbcode_on = 0; +} +else +{ + $bbcode_on = ( $submit || $refresh ) ? ( ( !empty($HTTP_POST_VARS['disable_bbcode']) ) ? 0 : TRUE ) : ( ( $userdata['user_id'] == ANONYMOUS ) ? $board_config['allow_bbcode'] : $userdata['user_allowbbcode'] ); +} - message_die(GENERAL_MESSAGE, $message); - } - else if( ( $delete || $poll_delete || $mode == "delete" ) && ( ( $is_auth['auth_delete'] && $is_last_post_topic ) || $is_auth['auth_mod'] ) ) +if( !$board_config['allow_smilies'] ) +{ + $smilies_on = 0; +} +else +{ + $smilies_on = ( $submit || $refresh ) ? ( ( !empty($HTTP_POST_VARS['disable_smilies']) ) ? 0 : TRUE ) : ( ( $userdata['user_id'] == ANONYMOUS ) ? $board_config['allow_smilies'] : $userdata['user_allowsmile'] ); +} + +if ( $submit || $refresh ) +{ + $notify_user = ( !empty($HTTP_POST_VARS['notify']) ) ? TRUE : 0; +} +else +{ + if ( $mode != "newtopic" ) + { + $sql = "SELECT topic_id + FROM " . TOPICS_WATCH_TABLE . " + WHERE topic_id = $topic_id + AND user_id = " . $userdata['user_id']; + if ( !($result = $db->sql_query($sql)) ) { - // - // Output a confirmation message if the user - // chose to delete this post - // - if( ( $delete || $poll_delete || $mode == "delete" ) && !$confirm ) - { - $s_hidden_fields = '<input type="hidden" name="mode" value="' . $mode . '" /><input type="hidden" name="' . POST_TOPIC_URL . '" value="'. $topic_id . '" /><input type="hidden" name="' . POST_POST_URL . '" value="' . $post_id . '" />'; + message_die(GENERAL_ERROR, "Couldn't obtain topic watch information", "", __LINE__, __FILE__, $sql); + } - $s_hidden_fields .= ( $delete || $mode == "delete" ) ? '<input type="hidden" name="delete" value="true" />' : '<input type="hidden" name="poll_delete" value="true" />'; + $notify_user = ( $db->sql_fetchrow($result) ) ? TRUE : $userdata['user_notify']; + } + else + { + $notify_user = $userdata['user_notify']; + } +} - $l_confirm = ( ( $delete || $mode == "delete" ) ? $lang['Confirm_delete'] : $lang['Confirm_delete_poll'] ); +$attach_sig = ( $submit || $refresh ) ? ( ( !empty($HTTP_POST_VARS['attach_sig']) ) ? TRUE : 0 ) : ( ( $userdata['user_id'] == ANONYMOUS ) ? 0 : $userdata['user_attachsig'] ); - // - // Output confirmation page - // - include($phpbb_root_path . 'includes/page_header.'.$phpEx); +// -------------------- +// What shall we do? +// +if ( ( $delete || $poll_delete || $mode == "delete" ) && !$confirm ) +{ + // + // Confirm deletion + // + $s_hidden_fields = '<input type="hidden" name="' . POST_POST_URL . '" value="' . $post_id . '" />'; + $s_hidden_fields .= ( $delete || $mode == "delete" ) ? '<input type="hidden" name="mode" value="delete" />' : '<input type="hidden" name="mode" value="poll_delete" />'; - $template->set_filenames(array( - "confirm_body" => "confirm_body.tpl") - ); - $template->assign_vars(array( - "MESSAGE_TITLE" => $lang['Information'], - "MESSAGE_TEXT" => $l_confirm, + $l_confirm = ( $delete || $mode == "delete" ) ? $lang['Confirm_delete'] : $lang['Confirm_delete_poll']; - "L_YES" => $lang['Yes'], - "L_NO" => $lang['No'], + // + // Output confirmation page + // + include($phpbb_root_path . 'includes/page_header.'.$phpEx); - "S_CONFIRM_ACTION" => append_sid("posting.$phpEx"), - "S_HIDDEN_FIELDS" => $s_hidden_fields) - ); - $template->pparse("confirm_body"); + $template->set_filenames(array( + "confirm_body" => "confirm_body.tpl") + ); - include($phpbb_root_path . 'includes/page_tail.'.$phpEx); + $template->assign_vars(array( + "MESSAGE_TITLE" => $lang['Information'], + "MESSAGE_TEXT" => $l_confirm, - } - else if( $confirm && ( $delete || $poll_delete || $mode == "delete" ) ) - { - // - // Delete poll - // - if( $is_first_post_topic && $post_has_poll && ( $can_edit_poll || $is_auth['auth_mod'] ) ) - { - $sql = "DELETE FROM " . VOTE_USERS_TABLE . " - WHERE vote_id = " . $rowset[0]['vote_id']; - if($db->sql_query($sql, BEGIN_TRANSACTION)) - { - $sql = "DELETE FROM " . VOTE_RESULTS_TABLE . " - WHERE vote_id = " . $rowset[0]['vote_id']; - if($db->sql_query($sql)) - { - $sql = "DELETE FROM " . VOTE_DESC_TABLE . " - WHERE vote_id = " . $rowset[0]['vote_id']; - if($db->sql_query($sql, END_TRANSACTION)) - { - // - // If we're just deleting the poll then show results - // and jump back to topic - // - if( $poll_delete ) - { - $sql = "UPDATE " . TOPICS_TABLE . " - SET topic_vote = 0 - WHERE topic_id = $topic_id"; - if($db->sql_query($sql)) - { - $template->assign_vars(array( - "META" => '<meta http-equiv="refresh" content="3;url=' . append_sid("viewtopic.$phpEx?" . POST_TOPIC_URL . "=$topic_id") . '">') - ); - - $message = $lang['Poll_delete'] . "<br /><br />" . sprintf($lang['Click_return_topic'], "<a href=\"" . append_sid("viewtopic.$phpEx?" . POST_TOPIC_URL . "=$topic_id") . "\">", "</a>"); - - message_die(GENERAL_MESSAGE, $message); - } - else - { - message_die(GENERAL_ERROR, "Couldn't update topics vote information", "", __LINE__, __FILE__, $sql); - } - } - else if( !$is_last_post_topic ) - { - $sql = "UPDATE " . TOPICS_TABLE . " - SET topic_vote = 0 - WHERE topic_id = $topic_id"; - if( !$result = $db->sql_query($sql) ) - { - message_die(GENERAL_ERROR, "Couldn't update topic poll field", "", __LINE__, __FILE__, $sql); - } - } - } - else - { - message_die(GENERAL_ERROR, "Couldn't delete from vote descriptions table", "", __LINE__, __FILE__, $sql); - } - } - else - { - message_die(GENERAL_ERROR, "Couldn't delete from vote results table", "", __LINE__, __FILE__, $sql); - } - } - else - { - message_die(GENERAL_ERROR, "Couldn't delete from vote users table", "", __LINE__, __FILE__, $sql); - } - } - else if( $post_has_poll && !$can_edit_poll && $poll_delete ) - { - $message = $lang['Cannot_delete_poll'] . "<br /><br />" . sprintf($lang['Click_return_topic'], "<a href=\"" . append_sid("viewtopic.$phpEx?" . POST_TOPIC_URL . "=$topic_id") . "\">", "</a>"); + "L_YES" => $lang['Yes'], + "L_NO" => $lang['No'], - message_die(GENERAL_MESSAGE, $message); - } - else if( !$is_first_post_topic && $poll_delete ) - { - $message = $lang['Post_has_no_poll'] . "<br /><br />" . sprintf($lang['Click_return_topic'], "<a href=\"" . append_sid("viewtopic.$phpEx?" . POST_TOPIC_URL . "=$topic_id") . "\">", "</a>"); + "S_CONFIRM_ACTION" => append_sid("posting.$phpEx"), + "S_HIDDEN_FIELDS" => $s_hidden_fields) + ); - message_die(GENERAL_MESSAGE, $message); - } + $template->pparse("confirm_body"); - if( $delete || $mode == "delete" ) - { - $sql = "UPDATE " . USERS_TABLE . " - SET user_posts = user_posts - 1 - WHERE user_id = " . $poster_id; - if( !$db->sql_query($sql, BEGIN_TRANSACTION) ) - { - message_die(GENERAL_MESSAGE, "Couldn't update users post count", "", __LINE__, __FILE__, $sql); - } - - $sql = "DELETE FROM " . SEARCH_MATCH_TABLE . " - WHERE post_id = $post_id"; - $result = $db->sql_query($sql); - if( !$result ) - { - message_die(GENERAL_ERROR, "Couldn't delete word match entry for this post", "", __LINE__, __FILE__, $sql); - } - - // - // Removes redundant words from wordlist table - // - remove_unmatched_words(); - - $sql = "DELETE FROM " . POSTS_TEXT_TABLE . " - WHERE post_id = $post_id"; - if( $db->sql_query($sql) ) - { - $sql = "DELETE FROM " . POSTS_TABLE . " - WHERE post_id = $post_id"; - if($db->sql_query($sql)) - { - if( $is_last_post_topic && $is_first_post_topic ) - { - // - // Delete the topic completely, updating the forum_last_post_id - // if necessary and removing any users currently watching this topic - // - if( $db->sql_query($sql) ) - { - $sql = "DELETE FROM " . TOPICS_TABLE . " - WHERE topic_id = $topic_id"; - if( $db->sql_query($sql) ) - { - $sql = "DELETE FROM " . TOPICS_WATCH_TABLE . " - WHERE topic_id = $topic_id"; - - $sql_forum_upd = "forum_posts = forum_posts - 1, forum_topics = forum_topics - 1"; - - $if_die_msg = "Error deleting from topics watch table"; - } - else - { - message_die(GENERAL_ERROR, "Error deleting from topics table", "", __LINE__, __FILE__, $sql); - } - } - else - { - message_die(GENERAL_ERROR, "Error deleting from post table", "", __LINE__, __FILE__, $sql); - } - } - else if( $is_last_post_topic ) - { - // - // Delete the post and update the _last_post_id's of both - // the topic and forum if necessary - // - if($db->sql_query($sql)) - { - $sql = "SELECT MAX(post_id) AS new_last_post_id - FROM " . POSTS_TABLE . " - WHERE topic_id = $topic_id"; - - if($result = $db->sql_query($sql)) - { - $row = $db->sql_fetchrow($result); - - $sql = "UPDATE " . TOPICS_TABLE . " - SET topic_replies = topic_replies - 1, topic_last_post_id = " . $row['new_last_post_id'] . " - WHERE topic_id = $topic_id"; - - $sql_forum_upd = "forum_posts = forum_posts - 1"; - - $if_die_msg = "Error updating topics table"; - } - else - { - message_die(GENERAL_ERROR, "Error obtaining new last topic id", "", __LINE__, __FILE__, $sql); - } - } - else - { - message_die(GENERAL_ERROR, "Error deleting from post table", "", __LINE__, __FILE__, $sql); - } - } - else if( $is_auth['auth_mod'] ) - { - // - // It's not last and it's not both first and last so it's somewhere in - // the middle(!) Only moderators can delete these posts, all we need do - // is update the forums table data as necessary - // - $first_post_sql = ""; - if( $is_first_post_topic ) - { - $sql = "SELECT MIN(post_id) AS first_post - FROM " . POSTS_TABLE . " - WHERE topic_id = $topic_id"; - if($result = $db->sql_query($sql)) - { - if( $row = $db->sql_fetchrow($result) ) - { - $first_post_sql = ", topic_first_post_id = " . $row['first_post']; - } - } - } - - $sql = "UPDATE " . TOPICS_TABLE . " - SET topic_replies = topic_replies - 1" . $first_post_sql . " - WHERE topic_id = $topic_id"; - - $sql_forum_upd = "forum_posts = forum_posts - 1"; - - $if_die_msg = "Couldn't delete from posts table"; - } - - // - // Updating the forum is common to all three possibilities, - // _remember_ we're still in a transaction here! - // - if( $db->sql_query($sql) ) - { - if( $is_last_post_forum ) - { - $sql = "SELECT MAX(post_id) AS new_post_id - FROM " . POSTS_TABLE . " - WHERE forum_id = $forum_id"; - - if($result = $db->sql_query($sql)) - { - $row = $db->sql_fetchrow($result); - } - else - { - message_die(GENERAL_ERROR, "Couldn't obtain new last post id for the forum", "", __LINE__, __FILE__, $sql); - } - - $last_post_id_forum = ( !empty($row['new_post_id']) ) ? $row['new_post_id'] : 0; - - $new_last_sql = ", forum_last_post_id = " . $last_post_id_forum; - } - else - { - $new_last_sql = ""; - } - - $sql = "UPDATE " . FORUMS_TABLE . " - SET " . $sql_forum_upd . $new_last_sql . " - WHERE forum_id = $forum_id"; - - if($db->sql_query($sql, END_TRANSACTION)) - { - // - // If we get here the post has been deleted successfully. - // - $message = $lang['Deleted']; - - if( !$is_first_post_topic || !$is_last_post_topic ) - { - $template->assign_vars(array( - "META" => '<meta http-equiv="refresh" content="3;url= ' . append_sid("viewtopic.$phpEx?" . POST_TOPIC_URL . "=$topic_id") . '">') - ); - - $message .= "<br /><br />" . sprintf($lang['Click_return_topic'], "<a href=\"" . append_sid("viewtopic.$phpEx?" . POST_TOPIC_URL . "=$topic_id") . "\">", "</a>"); - - } - else - { - $template->assign_vars(array( - "META" => '<meta http-equiv="refresh" content="3;url=' . append_sid("viewforum.$phpEx?" . POST_FORUM_URL . "=$forum_id") . '">') - ); - } - $message .= "<br /><br />" . sprintf($lang['Click_return_forum'], "<a href=\"" . append_sid("viewforum.$phpEx?" . POST_FORUM_URL . "=$forum_id") . "\">", "</a>"); - - message_die(GENERAL_MESSAGE, $message); - } - else - { - message_die(GENERAL_ERROR, "Error updating forums table", "", __LINE__, __FILE__, $sql); - } - } - else - { - message_die(GENERAL_ERROR, $if_die_msg, "", __LINE__, __FILE__, $sql); - } - } - else - { - message_die(GENERAL_ERROR, "Error deleting from posts table", "", __LINE__, __FILE__, $sql); - } - } - else - { - message_die(GENERAL_ERROR, "Error deleting from posts text table", "", __LINE__, __FILE__, $sql); - } - } - } - else - { - header("Location: " . append_sid("viewtopic.$phpEx?" . POST_TOPIC_URL . "=$topic_id", true)); - } - } - else + include($phpbb_root_path . 'includes/page_tail.'.$phpEx); +} +else if ( $mode == "vote" ) +{ + // + // Vote in a poll + // + if ( !empty($HTTP_POST_VARS['vote_id']) ) + { + $vote_option_id = $HTTP_POST_VARS['vote_id']; + + $sql = "SELECT vd.vote_id + FROM " . VOTE_DESC_TABLE . " vd, " . VOTE_RESULTS_TABLE . " vr + WHERE vd.topic_id = $topic_id + AND vr.vote_id = vd.vote_id + AND vr.vote_option_id = $vote_option_id + GROUP BY vd.vote_id"; + if ( !($result = $db->sql_query($sql)) ) { - if( !$is_last_post_topic && ( !$is_auth['auth_mod'] || $row['poster_id'] == $userdata['user_id'] ) ) - { - $edited_sql = ", post_edit_time = $current_time, post_edit_count = post_edit_count + 1 "; - } - else - { - $edited_sql = ""; - } - - // - // Handle changing user notification - // - if( isset($notify_user) ) - { - $sql = "SELECT * - FROM " . TOPICS_WATCH_TABLE . " - WHERE topic_id = $topic_id - AND user_id = " . $userdata['user_id']; - if( !$result = $db->sql_query($sql) ) - { - message_die(GENERAL_ERROR, "Couldn't obtain topic watch information", "", __LINE__, __FILE__, $sql); - } - - if( $db->sql_numrows($result) ) - { - if( !$notify_user ) - { - $sql = "DELETE FROM " . TOPICS_WATCH_TABLE . " - WHERE topic_id = $topic_id - AND user_id = " . $userdata['user_id']; - if( !$result = $db->sql_query($sql) ) - { - message_die(GENERAL_ERROR, "Couldn't delete topic watch information", "", __LINE__, __FILE__, $sql); - } - } - } - else if( $notify_user ) - { - $sql = "INSERT INTO " . TOPICS_WATCH_TABLE . " (user_id, topic_id, notify_status) - VALUES (" . $userdata['user_id'] . ", $topic_id, 0)"; - if( !$result = $db->sql_query($sql) ) - { - message_die(GENERAL_ERROR, "Couldn't insert topic watch information", "", __LINE__, __FILE__, $sql); - } - } - } - - // - // Clear out the old matches - // - $sql = "DELETE FROM " . SEARCH_MATCH_TABLE . " - WHERE post_id = $post_id"; - $result = $db->sql_query($sql, BEGIN_TRANSACTION); - if( !$result ) - { - message_die(GENERAL_ERROR, "Couldn't delete word match entry for this post", "", __LINE__, __FILE__, $sql); - } - - $sql = "UPDATE " . POSTS_TABLE . " - SET enable_bbcode = $bbcode_on, enable_html = $html_on, enable_smilies = $smilies_on, enable_sig = $attach_sig" . $edited_sql . " - WHERE post_id = $post_id"; - if($db->sql_query($sql)) - { - $sql = "UPDATE " . POSTS_TEXT_TABLE . " - SET post_text = '" . str_replace("\'", "''", $post_message) . "', bbcode_uid = '$bbcode_uid', post_subject = '" . str_replace("\'", "''", $post_subject) . "' - WHERE post_id = $post_id"; - - if( $is_first_post_topic ) - { - if( $db->sql_query($sql) ) - { - add_search_words($post_id, stripslashes($post_message), stripslashes($post_subject)); - remove_unmatched_words(); - - // - // Update topics table here - // - $sql = "UPDATE " . TOPICS_TABLE . " - SET topic_title = '" . str_replace("\'", "''", $post_subject) . "', topic_type = $topic_type" . $sql_topic_vote_edit . " - WHERE topic_id = $topic_id"; - if($db->sql_query($sql, END_TRANSACTION)) - { - // - // Update of voting required? - // - if( $is_auth['auth_pollcreate'] && $topic_vote ) - { - if( $post_has_poll && ( $can_edit_poll || $is_auth['auth_mod'] ) ) - { - $sql = "SELECT vote_option_id, vote_result - FROM " . VOTE_RESULTS_TABLE . " - WHERE vote_id = $vote_id - ORDER BY vote_option_id ASC"; - if( !$result = $db->sql_query($sql) ) - { - message_die(GENERAL_ERROR, "Couldn't obtain vote data results for this topic", "", __LINE__, __FILE__, $sql); - } - - if( $db->sql_numrows($result) ) - { - $old_poll_result = array(); - while( $row = $db->sql_fetchrow($result) ) - { - $old_poll_result[$row['vote_option_id']] = $row['vote_result']; - } - - // - // Previous entry with no results (or a moderator), update - // - $sql = "UPDATE " . VOTE_DESC_TABLE . " - SET vote_text = '" . str_replace("\'", "''", $poll_title) . "', vote_length = " . ( $poll_length * 86400 ) . " - WHERE topic_id = $topic_id"; - if( $result = $db->sql_query($sql, BEGIN_TRANSACTION) ) - { - $sql = "DELETE FROM " . VOTE_RESULTS_TABLE . " - WHERE vote_id = $vote_id"; - if( $result = $db->sql_query($sql) ) - { - $poll_option_id = 1; - while( list($option_id, $option_text) = each($poll_option_list) ) - { - $vote_result = ( $old_poll_result[$option_id] ) ? $old_poll_result[$option_id] : 0; - - $sql = "INSERT INTO " . VOTE_RESULTS_TABLE . " (vote_id, vote_option_id, vote_option_text, vote_result) - VALUES ($vote_id, $poll_option_id, '" . str_replace("\'", "''", $option_text) . "', $vote_result)"; - if( !$result = $db->sql_query($sql) ) - { - message_die(GENERAL_ERROR, "Couldn't insert new poll options", "", __LINE__, __FILE__, $sql); - } - $poll_option_id++; - } - } - else - { - message_die(GENERAL_ERROR, "Couldn't delete existing options", "", __LINE__, __FILE__, $sql); - } - } - } - else - { - message_die(GENERAL_ERROR, "Failed to obtain row set for this poll", "", __LINE__, __FILE__, $sql); - } - } - else - { - // - // No previous entry, create new - // - $sql = "INSERT INTO " . VOTE_DESC_TABLE . " (topic_id, vote_text, vote_start, vote_length) - VALUES ($topic_id, '" . str_replace("\'", "''", $poll_title) . "', $current_time, " . ( $poll_length * 86400 ) . ")"; - if( $result = $db->sql_query($sql, BEGIN_TRANSACTION) ) - { - $new_vote_id = $db->sql_nextid(); - - $poll_option_id = 1; - while( list($option_id, $option_text) = each($poll_option_list) ) - { - $sql = "INSERT INTO " . VOTE_RESULTS_TABLE . " (vote_id, vote_option_id, vote_option_text, vote_result) - VALUES ($new_vote_id, $poll_option_id, '" . str_replace("\'", "''", $option_text) . "', 0)"; - if( !$result = $db->sql_query($sql) ) - { - // Rollback ... - if(SQL_LAYER == "mysql") - { - $sql_del_v = "DELETE FROM " . VOTE_DESC_TABLE . " - WHERE vote_id = $new_vote_id"; - $db->sql_query($sql_del_v); - } - message_die(GENERAL_ERROR, "Couldn't insert new poll options", "", __LINE__, __FILE__, $sql); - } - $poll_option_id++; - } - } - } - } - - // - // If we get here the post has been inserted successfully. - // - $template->assign_vars(array( - "META" => '<meta http-equiv="refresh" content="3;url=' . append_sid("viewtopic.$phpEx?" . POST_POST_URL . "=$post_id") . '#' . $post_id . '">') - ); - - $message = $lang['Stored'] . "<br /><br />" . sprintf($lang['Click_view_message'], "<a href=\"" . append_sid("viewtopic.$phpEx?" . POST_POST_URL . "=$post_id") . "#$post_id\">", "</a>") . "<br /><br />" . sprintf($lang['Click_return_topic'], "<a href=\"" . append_sid("viewforum.$phpEx?" . POST_FORUM_URL . "=$forum_id") . "\">", "</a>"); - - message_die(GENERAL_MESSAGE, $message); - } - else - { - message_die(GENERAL_ERROR, "Updating topics table", "", __LINE__, __FILE__, $sql); - } - } - } - else - { - add_search_words($post_id, stripslashes($post_message), stripslashes($post_subject)); - remove_unmatched_words(); - - if( $db->sql_query($sql, END_TRANSACTION) ) - { - // - // If we get here the post has been inserted successfully. - // - $template->assign_vars(array( - "META" => '<meta http-equiv="refresh" content="3;url=' . append_sid("viewtopic.$phpEx?" . POST_POST_URL . "=$post_id") . '#' . $post_id . '">') - ); - - $message = $lang['Stored'] . "<br /><br />" . sprintf($lang['Click_view_message'], "<a href=\"" . append_sid("viewtopic.$phpEx?" . POST_POST_URL . "=$post_id") . "#$post_id\">", "</a>") . "<br /><br />" . sprintf($lang['Click_return_forum'], "<a href=\"" . append_sid("viewforum.$phpEx?" . POST_FORUM_URL . "=$forum_id") . "\">", "</a>"); - - message_die(GENERAL_MESSAGE, $message); - } - else - { - message_die(GENERAL_ERROR, "Error updating posts text table", "", __LINE__, __FILE__, $sql); - } - } - } - else - { - message_die(GENERAL_ERROR, "Error updating posts text table", "", __LINE__, __FILE__, $sql); - } + message_die(GENERAL_ERROR, "Couldn't obtain vote data for this topic", "", __LINE__, __FILE__, $sql); } - // - // End of mode = editpost - // - } - else if( $mode == "vote" ) - { - if( !empty($HTTP_POST_VARS['vote_id']) ) + if ( $vote_info = $db->sql_fetchrow($result) ) { - $vote_option_id = $HTTP_POST_VARS['vote_id']; + $vote_id = $vote_info['vote_id']; - $sql = "SELECT vd.vote_id, MAX(vr.vote_option_id) AS max_vote_option - FROM " . VOTE_DESC_TABLE . " vd, " . VOTE_RESULTS_TABLE . " vr - WHERE vd.topic_id = $topic_id - AND vr.vote_id = vd.vote_id - GROUP BY vd.vote_id"; - if( !$result = $db->sql_query($sql) ) + $sql = "SELECT * + FROM " . VOTE_USERS_TABLE . " + WHERE vote_id = $vote_id + AND vote_user_id = " . $userdata['user_id']; + if ( !($result = $db->sql_query($sql)) ) { - message_die(GENERAL_ERROR, "Couldn't obtain vote data for this topic", "", __LINE__, __FILE__, $sql); + message_die(GENERAL_ERROR, "Couldn't obtain user vote data for this topic", "", __LINE__, __FILE__, $sql); } - if( $vote_options = $db->sql_numrows($result) ) + if ( !($row = $db->sql_fetchrow($result)) ) { - $vote_info = $db->sql_fetchrow($result); - - if( $vote_info['max_vote_option'] < $vote_option_id ) - { - $template->assign_vars(array( - "META" => '<meta http-equiv="refresh" content="3;url=' . append_sid("viewtopic.$phpEx?" . POST_TOPIC_URL . "= $topic_id") . '">') - ); - - $message = $lang['No_vote_option'] . "<br /><br />" . sprintf($lang['Click_view_message'], "<a href=\"" . append_sid("viewtopic.$phpEx?" . POST_TOPIC_URL . "=$topic_id") . "\">", "</a>"); - - message_die(GENERAL_MESSAGE, $message); - } - - $vote_id = $vote_info['vote_id']; - - $sql = "SELECT * - FROM " . VOTE_USERS_TABLE . " + $sql = "UPDATE " . VOTE_RESULTS_TABLE . " + SET vote_result = vote_result + 1 WHERE vote_id = $vote_id - AND vote_user_id = " . $userdata['user_id']; - if( !$result = $db->sql_query($sql) ) + AND vote_option_id = $vote_option_id"; + if ( !$db->sql_query($sql, BEGIN_TRANSACTION) ) { - message_die(GENERAL_ERROR, "Couldn't obtain user vote data for this topic", "", __LINE__, __FILE__, $sql); + message_die(GENERAL_ERROR, "Couldn't update poll result", "", __LINE__, __FILE__, $sql); } - $user_voted = ( $db->sql_numrows($result) ) ? TRUE : 0; - - if( !$user_voted ) + $sql = "INSERT INTO " . VOTE_USERS_TABLE . " (vote_id, vote_user_id, vote_user_ip) + VALUES ($vote_id, " . $userdata['user_id'] . ", '$user_ip')"; + if ( !$db->sql_query($sql, END_TRANSACTION) ) { - $sql = "UPDATE " . VOTE_RESULTS_TABLE . " - SET vote_result = vote_result + 1 - WHERE vote_id = $vote_id - AND vote_option_id = $vote_option_id"; - if( $db->sql_query($sql, BEGIN_TRANSACTION) ) - { - $sql = "INSERT INTO " . VOTE_USERS_TABLE . " (vote_id, vote_user_id, vote_user_ip) - VALUES ($vote_id, " . $userdata['user_id'] . ", '$user_ip')"; - if( $db->sql_query($sql, END_TRANSACTION) ) - { - - $template->assign_vars(array( - "META" => '<meta http-equiv="refresh" content="3;url=' . append_sid("viewtopic.$phpEx?" . POST_TOPIC_URL . "=$topic_id") . '">') - ); - - $message = $lang['Vote_cast'] . "<br /><br />" . sprintf($lang['Click_return_topic'], "<a href=\"" . append_sid("viewtopic.$phpEx?" . POST_TOPIC_URL . "=$topic_id") . "\">", "</a>"); - - message_die(GENERAL_MESSAGE, $message); - } - else - { - if(SQL_LAYER == "mysql") - { - $sql_rewind = "UPDATE " . VOTE_RESULTS_TABLE . " - SET vote_option_result = vote_option_result - 1 - WHERE vote_id = $vote_id - AND vote_option_id = $vote_option_id"; - $db->sql_query($sql_rewind); - } - - message_die(GENERAL_ERROR, "Error updating vote users table", "", __LINE__, __FILE__, $sql); - } - } - else - { - message_die(GENERAL_ERROR, "Error updating vote results table", "", __LINE__, __FILE__, $sql); - } + message_die(GENERAL_ERROR, "Couldn't insert user_id for poll", "", __LINE__, __FILE__, $sql); } - else - { - $template->assign_vars(array( - "META" => '<meta http-equiv="refresh" content="3;url=' . append_sid("viewtopic.$phpEx?" . POST_TOPIC_URL . "=$topic_id") . '">') - ); - - $message = $lang['Already_voted'] . "<br /><br />" . sprintf($lang['Click_view_message'], "<a href=\"" . append_sid("viewtopic.$phpEx?" . POST_TOPIC_URL . "=$topic_id") . "\">", "</a>"); - message_die(GENERAL_MESSAGE, $message); - } + $message = $lang['Vote_cast']; + } + else + { + $message = $lang['Already_voted']; } } else { - $message = $lang['No_vote_option'] . "<br /><br />" . sprintf($lang['Click_view_message'], "<a href=\"" . append_sid("viewtopic.$phpEx?" . POST_TOPIC_URL . "=$topic_id") . "\">", "</a>"); - - message_die(GENERAL_MESSAGE, $message); + $message = $lang['No_vote_option']; } - // - // End of mode = vote - // - } + $template->assign_vars(array( + "META" => '<meta http-equiv="refresh" content="3;url=' . append_sid("viewtopic.$phpEx?" . POST_TOPIC_URL . "=$topic_id") . '">') + ); + $message .= '<br /><br />' . sprintf($lang['Click_view_message'], '<a href="' . append_sid("viewtopic.$phpEx?" . POST_TOPIC_URL . "=$topic_id") . '">', '</a>'); + message_die(GENERAL_MESSAGE, $message); + } } -else if( $preview || $refresh || $error ) +else if ( $submit || $confirm ) { - // - // If we're previewing or refreshing then obtain the data - // passed to the script, process it a little, do some checks - // where neccessary, etc. + // Submit post/vote (newtopic, edit, reply, etc.) // - $post_username = ( isset($HTTP_POST_VARS['username']) ) ? trim(strip_tags(stripslashes($HTTP_POST_VARS['username']))) : ""; - $post_subject = ( isset($HTTP_POST_VARS['subject']) ) ? trim(strip_tags(stripslashes($HTTP_POST_VARS['subject']))) : ""; - $post_message = ( isset($HTTP_POST_VARS['message']) ) ? trim($HTTP_POST_VARS['message']) : ""; - $post_message = preg_replace('#<textarea>#si', '<textarea>', $post_message); + $return_message = ""; + $return_meta = ""; - $poll_title = ( isset($HTTP_POST_VARS['poll_title']) ) ? trim(strip_tags(stripslashes($HTTP_POST_VARS['poll_title']))) : ""; - $poll_length = ( isset($HTTP_POST_VARS['poll_length']) ) ? intval($HTTP_POST_VARS['poll_length']) : 0; + switch ( $mode ) + { + case 'editpost': - $poll_options = 0; - $poll_option_list = array(); + case 'newtopic': + case 'reply': + $username = ( !empty($HTTP_POST_VARS['username']) ) ? $HTTP_POST_VARS['username'] : ""; + $subject = ( !empty($HTTP_POST_VARS['subject']) ) ? $HTTP_POST_VARS['subject'] : ""; + $message = ( !empty($HTTP_POST_VARS['message']) ) ? $HTTP_POST_VARS['message'] : ""; + $poll_title = ( isset($HTTP_POST_VARS['poll_title']) && $is_auth['auth_pollcreate'] ) ? $HTTP_POST_VARS['poll_title'] : ""; + $poll_options = ( isset($HTTP_POST_VARS['poll_option_text']) && $is_auth['auth_pollcreate'] ) ? $HTTP_POST_VARS['poll_option_text'] : ""; + $poll_length = ( isset($HTTP_POST_VARS['poll_length']) && $is_auth['auth_pollcreate'] ) ? $HTTP_POST_VARS['poll_length'] : ""; + $bbcode_uid = ""; - if( isset($HTTP_POST_VARS['del_poll_option']) ) - { - if( isset($HTTP_POST_VARS['poll_option_text']) ) - { - while( list($option_id, $option_text) = each($HTTP_POST_VARS['poll_option_text']) ) + prepare_post($mode, $post_data, $bbcode_on, $html_on, $smilies_on, $error_msg, $username, $bbcode_uid, $subject, $message, $poll_title, $poll_options, $poll_length); + + if ( $error_msg == "" ) { - if( !isset($HTTP_POST_VARS['del_poll_option'][$option_id]) ) - { - $poll_option_list[$option_id] = trim(strip_tags(stripslashes($option_text))); - $poll_options++; - } + $topic_type = ( $topic_type != $post_data['topic_type'] && !$is_auth['auth_sticky'] && !$is_auth['auth_announce'] ) ? $post_data['topic_type'] : $topic_type; + + submit_post($mode, $post_data, $return_message, $return_meta, $forum_id, $topic_id, $post_id, $poll_id, $topic_type, $bbcode_on, $html_on, $smilies_on, $attach_sig, $bbcode_uid, str_replace("\'", "''", $username), str_replace("\'", "''", $subject), str_replace("\'", "''", $message), str_replace("\'", "''", $poll_title), $poll_options, $poll_length); + user_notification($mode, $post_data, $forum_id, $topic_id, $post_id, $notify_user); } - } + break; + + case 'delete': + case 'poll_delete': + delete_post($mode, $post_data, $return_message, $return_meta, $forum_id, $topic_id, $post_id, $poll_id); + break; } - else + + if ( $error_msg == "" ) { - if( isset($HTTP_POST_VARS['poll_option_text']) ) + if ( $mode == "newtopic" || $mode == "reply" ) { - @reset($HTTP_POST_VARS['poll_option_text']); - while( list($option_id, $option_text) = each($HTTP_POST_VARS['poll_option_text']) ) + $tracking_topics = ( !empty($HTTP_COOKIE_VARS[$board_config['cookie_name'] . "_t"]) ) ? unserialize($HTTP_COOKIE_VARS[$board_config['cookie_name'] . "_t"]) : array(); + $tracking_forums = ( !empty($HTTP_COOKIE_VARS[$board_config['cookie_name'] . "_f"]) ) ? unserialize($HTTP_COOKIE_VARS[$board_config['cookie_name'] . "_f"]) : array(); + + if ( count($tracking_topics) + count($tracking_forums) == 100 && empty($tracking_topics[$topic_id]) ) { - $poll_option_list[$option_id] = trim(strip_tags(preg_replace($html_entities_match, $html_entities_replace, stripslashes($option_text)))); - $poll_options++; + asort($tracking_topics); + unset($tracking_topics[key($tracking_topics)]); } + + $tracking_topics[$topic_id] = time(); + + setcookie($board_config['cookie_name'] . "_t", serialize($tracking_topics), 0, $board_config['cookie_path'], $board_config['cookie_domain'], $board_config['cookie_secure']); } - if( isset($HTTP_POST_VARS['add_poll_option']) ) + $template->assign_vars(array( + "META" => $return_meta) + ); + message_die(GENERAL_MESSAGE, $return_message); + } +} + +// +// +// +if( $refresh || isset($HTTP_POST_VARS['del_poll_option']) || $error_msg != "" ) +{ + $username = ( !empty($HTTP_POST_VARS['username']) ) ? htmlspecialchars(trim(stripslashes($HTTP_POST_VARS['username']))) : ""; + $subject = ( !empty($HTTP_POST_VARS['subject']) ) ? htmlspecialchars(trim(stripslashes($HTTP_POST_VARS['subject']))) : ""; + $message = ( !empty($HTTP_POST_VARS['message']) ) ? trim(stripslashes($HTTP_POST_VARS['message'])) : ""; + + $poll_title = ( !empty($HTTP_POST_VARS['poll_title']) ) ? htmlspecialchars(trim(stripslashes($HTTP_POST_VARS['poll_title']))) : ""; + $poll_length = ( isset($HTTP_POST_VARS['poll_length']) ) ? max(0, intval($HTTP_POST_VARS['poll_length'])) : 0; + + $poll_options = array(); + if ( !empty($HTTP_POST_VARS['poll_option_text']) ) + { + while( list($option_id, $option_text) = @each($HTTP_POST_VARS['poll_option_text']) ) { - if( $poll_options < $board_config['max_poll_options'] ) + if( isset($HTTP_POST_VARS['del_poll_option'][$option_id]) ) { - $new_poll_option = trim(strip_tags(stripslashes($HTTP_POST_VARS['add_poll_option_text']))); - - if($new_poll_option != "") - { - $poll_option_list[] = $new_poll_option; - } + unset($poll_options[$option_id]); } - else + else if ( !empty($option_text) ) { - $error = TRUE; - if(!empty($error_msg)) - { - $error_msg .= "<br />"; - } - $error_msg .= $lang['To_many_poll_options']; + $poll_options[$option_id] = htmlspecialchars(trim(stripslashes($option_text))); } } } - // - // Do mode specific things - // - if( $mode == "newtopic" ) + if ( isset($poll_add) && !empty($HTTP_POST_VARS['add_poll_option_text']) ) { + $poll_options[] = htmlspecialchars(trim(stripslashes($HTTP_POST_VARS['add_poll_option_text']))); + } - $page_title = $lang['Post_a_new_topic']; - $display_poll = ( $is_auth['auth_pollcreate'] ) ? TRUE : 0; - + if ( $mode == 'newtopic' || $mode == 'reply') + { $user_sig = ( $userdata['user_sig'] != "" ) ? $userdata['user_sig'] : ""; - } - else if( $mode == "reply" ) + else if ( $mode == 'editpost' ) { - - $page_title = $lang['Post_a_reply']; - $display_poll = 0; - - $user_sig = ( $userdata['user_sig'] != "" ) ? $userdata['user_sig'] : ""; - + $user_sig = ( $post_info['user_sig'] != "" ) ? $post_info['user_sig'] : ""; } - else if( $mode == "editpost" ) + + if( $preview ) { - $page_title = $lang['Edit_Post']; + $orig_word = array(); + $replacement_word = array(); + obtain_word_list($orig_word, $replacement_word); - $sql = "SELECT u.user_id, u.user_sig - FROM " . POSTS_TABLE . " p, " . USERS_TABLE . " u - WHERE p.post_id = $post_id - AND u.user_id = p.poster_id"; - if($result = $db->sql_query($sql)) - { - $postrow = $db->sql_fetchrow($result); + $bbcode_uid = ( $bbcode_on ) ? make_bbcode_uid() : ""; + $preview_message = stripslashes(prepare_message(addslashes($message), $html_on, $bbcode_on, $smilies_on, $bbcode_uid)); + $preview_subject = $subject; + $preview_username = $username; - if($userdata['user_id'] != $postrow['user_id'] && !$is_auth['auth_mod']) + // + // Finalise processing as per viewtopic + // + if( !$html_on ) + { + if( $user_sig != "" || !$userdata['user_allowhtml'] ) { - message_die(GENERAL_MESSAGE, $lang['Sorry_edit_own_posts']); + $user_sig = preg_replace("#(<)([\/]?.*?)(>)#is", "<\\2>", $user_sig); } + } - $user_sig = ( $postrow['user_sig'] != "" ) ? $postrow['user_sig'] : ""; + if( $attach_sig && $user_sig != "" && $userdata['user_sig_bbcode_uid'] ) + { + $user_sig = bbencode_second_pass($user_sig, $userdata['user_sig_bbcode_uid']); } - else + + if( $bbcode_on ) { - message_die(GENERAL_ERROR, "Couldn't obtain post and post text", "", __LINE__, __FILE__, $sql); + $preview_message = bbencode_second_pass($preview_message, $bbcode_uid); } - if( $is_auth['auth_pollcreate'] && $is_first_post_topic ) + if( !empty($orig_word) ) { - $display_poll = ( !$post_has_poll || ( $post_has_poll && ( $is_auth['auth_mod'] || $can_edit_poll ) ) ) ? TRUE : 0; + $preview_username = ( !empty($username) ) ? preg_replace($orig_word, $replacement_word, $preview_username) : ""; + $preview_subject = ( !empty($subject) ) ? preg_replace($orig_word, $replacement_word, $preview_subject) : ""; + $preview_message = ( !empty($preview_message) ) ? preg_replace($orig_word, $replacement_word, $preview_message) : ""; } - else + + if( $user_sig != "" ) + { + $user_sig = make_clickable($user_sig); + } + $preview_message = make_clickable($preview_message); + + if( $smilies_on ) + { + if( $userdata['user_allowsmile'] && $user_sig != "" ) + { + $user_sig = smilies_pass($user_sig); + } + + $preview_message = smilies_pass($preview_message); + } + + if( $attach_sig && $user_sig != "" ) { - $display_poll = 0; + $preview_message = $preview_message . "<br /><br />_________________<br />" . $user_sig; } + + $preview_message = str_replace("\n", "<br />", $preview_message); + + $template->set_filenames(array( + "preview" => "posting_preview.tpl") + ); + + $template->assign_vars(array( + "TOPIC_TITLE" => $preview_subject, + "POST_SUBJECT" => $preview_subject, + "POSTER_NAME" => $preview_username, + "POST_DATE" => create_date($board_config['default_dateformat'], time(), $board_config['board_timezone']), + "MESSAGE" => $preview_message, + + "L_POST_SUBJECT" => $lang['Post_subject'], + "L_PREVIEW" => $lang['Preview'], + "L_POSTED" => $lang['Posted']) + ); + $template->assign_var_from_handle("POST_PREVIEW_BOX", "preview"); + } + else if( $error_msg != "" ) + { + $template->set_filenames(array( + "reg_header" => "error_body.tpl") + ); + $template->assign_vars(array( + "ERROR_MESSAGE" => $error_msg) + ); + $template->assign_var_from_handle("ERROR_BOX", "reg_header"); } } else { // - // This is the entry point for posting, some basic variables - // are set, for editpost/quote the original message is obtained - // and for editpost a check is done to ensure the user isn't - // trying to edit someone elses post ( additional checks on polling - // capability are also carried out ) + // User default entry point // - - if( $mode == "newtopic" ) + if ( $mode == 'newtopic' ) { - - $page_title = $lang['Post_a_new_topic']; - - $display_poll = ( $is_auth['auth_pollcreate'] ) ? TRUE : 0; - $poll_title = ""; - $poll_length = 0; - $user_sig = ( $userdata['user_sig'] != "" ) ? $userdata['user_sig'] : ""; - $post_username = ($userdata['session_logged_in']) ? $userdata['username'] : ""; - $post_subject = ""; - $post_message = ""; - + $username = ($userdata['session_logged_in']) ? $userdata['username'] : ""; + $poll_title = ""; + $poll_length = ""; + $subject = ""; + $message = ""; } - else if( $mode == "reply" ) + else if ( $mode == 'reply' ) { - - $page_title = $lang['Post_a_reply']; - - $display_poll = 0; - $poll_title = ""; - $poll_length = 0; - $user_sig = ( $userdata['user_sig'] != "" ) ? $userdata['user_sig'] : ""; - $post_username = ($userdata['session_logged_in']) ? $userdata['username'] : ""; - $post_subject = ""; - $post_message = ""; + $username = ( $userdata['session_logged_in'] ) ? $userdata['username'] : ""; + $subject = ""; + $message = ""; } - else if( $mode == "editpost" || $mode == "quote" && ( !$preview && !$refresh ) ) + else if ( $mode == 'quote' || $mode == 'editpost' ) { + $subject = ( $post_data['first_post'] ) ? $post_info['topic_title'] : $post_info['post_subject']; + $message = $post_info['post_text']; - $sql = "SELECT p.*, pt.post_text, pt.post_subject, pt.bbcode_uid, u.username, u.user_id, u.user_sig, t.topic_title, t.topic_type, t.topic_vote - FROM " . POSTS_TABLE . " p, " . USERS_TABLE . " u, " . TOPICS_TABLE . " t, " . POSTS_TEXT_TABLE . " pt - WHERE p.post_id = $post_id - AND pt.post_id = p.post_id - AND p.topic_id = t.topic_id - AND p.poster_id = u.user_id"; - if($result = $db->sql_query($sql)) + if ( $mode == "editpost" ) { - $postrow = $db->sql_fetchrow($result); - - if( $mode == "editpost" ) - { - if($userdata['user_id'] != $postrow['user_id'] && !$is_auth['auth_mod']) - { - message_die(GENERAL_MESSAGE, $lang['Sorry_edit_own_posts']); - } - } - - $post_user_id = $postrow['user_id']; - $post_username = ( $post_user_id == ANONYMOUS && $postrow['post_username'] != "" ) ? $postrow['post_username'] : $postrow['username']; - $post_subject = $postrow['post_subject']; - $post_message = $postrow['post_text']; - $post_bbcode_uid = $postrow['bbcode_uid']; - $post_bbcode_enabled = ($postrow['enable_bbcode'] == 1); + $attach_sig = ( $post_info['enable_sig'] && $post_info['user_sig'] != "" ) ? TRUE : 0; + $user_sig = $post_info['user_sig']; + } + else + { + $attach_sig = ( $userdata['user_attachsig'] ) ? TRUE : 0; + $user_sig = $userdata['user_sig']; + } - if( $mode == "editpost" ) - { - $attach_sig = ( $postrow['enable_sig'] && $postrow['user_sig'] != "" ) ? TRUE : 0; - $user_sig = $postrow['user_sig']; - } - else - { - $attach_sig = ( $userdata['user_attachsig'] ) ? TRUE : 0; - $user_sig = $userdata['user_sig']; - } + if ( $post_info['bbcode_uid'] != "" ) + { + $message = preg_replace("/\:(([a-z0-9]:)?)" . $post_info['bbcode_uid'] . "/si", "", $message); + } + $message = str_replace("<br />", "\n", $message); + $message = preg_replace('#</textarea>#si', '</textarea>', $message); - if ($post_bbcode_enabled) - { - $post_message = preg_replace("/\:(([a-z0-9]:)?)$post_bbcode_uid/si", "", $post_message); - } - $post_message = str_replace("<br />", "\n", $post_message); - $post_message = preg_replace('#</textarea>#si', '</textarea>', $post_message); - - // - // Finish off edit/quote grab by doing specific - // things for each mode - // - if( $mode == "quote" ) - { - $page_title = $lang['Post_a_reply']; + if ( $mode == 'quote' ) + { + $orig_word = array(); + $replacement_word = array(); + obtain_word_list($orig_word, $replace_word); - $msg_date = create_date($board_config['default_dateformat'], $postrow['post_time'], $board_config['board_timezone']); + $msg_date = create_date($board_config['default_dateformat'], $postrow['post_time'], $board_config['board_timezone']); - $post_message = "[quote=\"" . $post_username . "\"]\n" . $post_message . "\n[/quote]"; + $message = '[quote="' . $post_info['username'] . '"]' . $message . '[/quote]'; - $mode = "reply"; - } - else if( $mode == "editpost" ) + if ( !empty($orig_word) ) { - $page_title = $lang['Edit_Post']; - - $html_on = ( $postrow['enable_html'] && $board_config['allow_html'] ) ? TRUE : 0; - $bbcode_on = ( $postrow['enable_bbcode'] && $board_config['allow_bbcode'] ) ? TRUE : 0; - $smilies_on = ( $postrow['enable_smilies'] && $board_config['allow_smilies'] ) ? TRUE : 0; - - if( $is_first_post_topic ) - { - $post_subject = $postrow['topic_title']; - $topic_type = $postrow['topic_type']; - - if( $is_auth['auth_pollcreate'] && ( $can_edit_poll || $is_auth['auth_mod'] ) ) - { - $sql = "SELECT vd.vote_text, vd.vote_length, vr.vote_option_id, vr.vote_option_text - FROM " . VOTE_DESC_TABLE . " vd, " . VOTE_RESULTS_TABLE . " vr - WHERE vd.topic_id = $topic_id - AND vr.vote_id = vd.vote_id - ORDER BY vr.vote_option_id ASC"; - if( !$result = $db->sql_query($sql) ) - { - message_die(GENERAL_ERROR, "Couldn't obtain vote data for this topic", "", __LINE__, __FILE__, $sql); - } - - $vote_results_sum = 0; - if( $row = $db->sql_fetchrow($result) ) - { - $poll_title = $row['vote_text']; - $poll_length = $row['vote_length']; - - $poll_option_list[$row['vote_option_id']] = $row['vote_option_text']; - while( $row = $db->sql_fetchrow($result) ) - { - $poll_option_list[$row['vote_option_id']] = $row['vote_option_text']; - } - } - $poll_length = $poll_length / 86400; - - $display_poll = TRUE; - } - else - { - $display_poll = ( $is_auth['auth_pollcreate'] && !$post_has_poll ) ? TRUE : 0; - $poll_length = 0; - } - } - else - { - $display_poll = 0; - } + $subject = ( !empty($subject) ) ? preg_replace($orig_word, $replace_word, $subject) : ""; + $message = ( !empty($message) ) ? preg_replace($orig_word, $replace_word, $message) : ""; } - else + + if ( !preg_match("/^Re:/", $subject) && strlen($subject) > 0 ) { - message_die(GENERAL_ERROR, "Couldn't obtain post and post text", "", __LINE__, __FILE__, $sql); + $subject = 'Re: ' . $subject; } - } - } - -} -// -// Major posting code complete -// --------------------------- - - -// -------------------- -// Generate page output -// - -// -// Include page header -// -include($phpbb_root_path . 'includes/page_header.'.$phpEx); - -$template->set_filenames(array( - "body" => "posting_body.tpl", - "pollbody" => "posting_poll_body.tpl", - "jumpbox" => "jumpbox.tpl", - "reviewbody" => "posting_topic_review.tpl") -); - -$jumpbox = make_jumpbox(); -$template->assign_vars(array( - "L_GO" => $lang['Go'], - "L_JUMP_TO" => $lang['Jump_to'], - "L_SELECT_FORUM" => $lang['Select_forum'], - - "S_JUMPBOX_LIST" => $jumpbox, - "S_JUMPBOX_ACTION" => append_sid("viewforum.$phpEx")) -); -$template->assign_var_from_handle("JUMPBOX", "jumpbox"); - -$template->assign_vars(array( - "FORUM_NAME" => $forum_name, - "L_POST_A" => $page_title, - "L_POST_SUBJECT" => $lang['Post_subject'], - - "U_VIEW_FORUM" => append_sid("viewforum.$phpEx?" . POST_FORUM_URL . "=$forum_id")) -); -// -// Output preview of post if requested -// -if( $preview && !$error ) -{ - $orig_word = array(); - $replacement_word = array(); - $result = obtain_word_list($orig_word, $replacement_word); - - $bbcode_uid = ( $bbcode_on ) ? make_bbcode_uid() : ""; - $preview_message = stripslashes(prepare_message($post_message, $html_on, $bbcode_on, $smilies_on, $bbcode_uid)); - - // - // Finalise processing as per viewtopic - // - if( !$html_on ) - { - if( $user_sig != "" || !$userdata['user_allowhtml'] ) - { - $user_sig = preg_replace("#(<)([\/]?.*?)(>)#is", "<\\2>", $user_sig); + $mode = 'reply'; } } - - if( $attach_sig && $user_sig != "" && $userdata['user_sig_bbcode_uid'] ) - { - $user_sig = bbencode_second_pass($user_sig, $userdata['user_sig_bbcode_uid']); - } - - if( $bbcode_on ) - { - $preview_message = bbencode_second_pass($preview_message, $bbcode_uid); - } - - if( $attach_sig && $user_sig != "" ) - { - $preview_message = $preview_message . "<br /><br />_________________<br />" . $user_sig; - } - - if( !empty($orig_word) ) - { - $preview_username = ( !empty($post_username) ) ? preg_replace($orig_word, $replacement_word, $post_username) : ""; - $preview_subject = ( !empty($post_subject) ) ? preg_replace($orig_word, $replacement_word, $post_subject) : ""; - $preview_message = ( !empty($preview_message) ) ? preg_replace($orig_word, $replacement_word, $preview_message) : ""; - } - - if( $smilies_on ) - { - $preview_message = smilies_pass($preview_message); - } - - $preview_message = make_clickable($preview_message); - $preview_message = str_replace("\n", "<br />", $preview_message); - - $template->set_filenames(array( - "preview" => "posting_preview.tpl") - ); - $template->assign_vars(array( - "TOPIC_TITLE" => $preview_subject, - "POST_SUBJECT" => $preview_subject, - "POSTER_NAME" => $preview_username, - "POST_DATE" => create_date($board_config['default_dateformat'], time(), $board_config['board_timezone']), - "MESSAGE" => $preview_message, - - "L_PREVIEW" => $lang['Preview'], - "L_POSTED" => $lang['Posted']) - ); - $template->assign_var_from_handle("POST_PREVIEW_BOX", "preview"); -} -// -// End preview output -// - -// -// Start Error handling -// -if( $error ) -{ - $template->set_filenames(array( - "reg_header" => "error_body.tpl") - ); - $template->assign_vars(array( - "ERROR_MESSAGE" => $error_msg) - ); - $template->assign_var_from_handle("ERROR_BOX", "reg_header"); } -// -// End error handling -// - -// -// Send smilies to template -// -generate_smilies("inline", PAGE_POSTING); // -// User not logged in so offer up a username -// field box +// Signature toggle selection // -if( !$userdata['session_logged_in'] || ( $mode == "editpost" && $post_user_id == ANONYMOUS ) ) +if( $user_sig != "" ) { - $template->assign_block_vars("username_select", array()); + $template->assign_block_vars("signature_checkbox", array()); } // // HTML toggle selection // -if( $board_config['allow_html'] ) +if ( $board_config['allow_html'] ) { $html_status = $lang['HTML_is_ON']; $template->assign_block_vars("html_checkbox", array()); @@ -2280,7 +793,7 @@ else // // BBCode toggle selection // -if($board_config['allow_bbcode']) +if ( $board_config['allow_bbcode'] ) { $bbcode_status = $lang['BBCode_is_ON']; $template->assign_block_vars("bbcode_checkbox", array()); @@ -2293,7 +806,7 @@ else // // Smilies toggle selection // -if($board_config['allow_smilies']) +if ( $board_config['allow_smilies'] ) { $smilies_status = $lang['Smilies_are_ON']; $template->assign_block_vars("smilies_checkbox", array()); @@ -2303,21 +816,17 @@ else $smilies_status = $lang['Smilies_are_OFF']; } -// -// Signature toggle selection - only show if -// the user has a signature -// -if( $user_sig != "" ) +if( !$userdata['session_logged_in'] || ( $mode == "editpost" && $post_info['poster_id'] == ANONYMOUS ) ) { - $template->assign_block_vars("signature_checkbox", array()); + $template->assign_block_vars("username_select", array()); } // // Notify checkbox - only show if user is logged in // -if( $userdata['session_logged_in'] ) +if ( $userdata['session_logged_in'] ) { - if( $mode != "editpost" || ( $mode == "editpost" && $post_user_id != ANONYMOUS ) ) + if ( $mode != "editpost" || ( $mode == "editpost" && $post_info['poster_id'] != ANONYMOUS ) ) { $template->assign_block_vars("notify_checkbox", array()); } @@ -2326,7 +835,7 @@ if( $userdata['session_logged_in'] ) // // Delete selection // -if( $mode == 'editpost' && ( ( $is_auth['auth_delete'] && $is_last_post_topic && ( !$post_has_poll || $can_edit_poll ) ) || $is_auth['auth_mod'] ) ) +if ( $mode == 'editpost' && ( ( $is_auth['auth_delete'] && $post_data['last_post'] && ( !$post_data['has_poll'] || $post_data['edit_poll'] ) ) || $is_auth['auth_mod'] ) ) { $template->assign_block_vars("delete_checkbox", array()); } @@ -2334,70 +843,90 @@ if( $mode == 'editpost' && ( ( $is_auth['auth_delete'] && $is_last_post_topic && // // Topic type selection // -$topic_type_radio = ''; -if( $mode == 'newtopic' || ( $mode == 'editpost' && $is_first_post_topic ) ) +$topic_type_toggle = ''; +if ( $mode == 'newtopic' || ( $mode == 'editpost' && $post_data['first_post'] ) ) { $template->assign_block_vars("type_toggle", array()); - if( $is_auth['auth_announce'] ) + if( $is_auth['auth_sticky'] ) { - $announce_toggle = '<input type="radio" name="topictype" value="announce"'; - if( $topic_type == POST_ANNOUNCE ) + $topic_type_toggle .= '<input type="radio" name="topictype" value="' . POST_STICKY . '"'; + if ( $post_data['topic_type'] == POST_STICKY ) { - $announce_toggle .= ' checked="checked"'; + $topic_type_toggle .= ' checked="checked"'; } - $announce_toggle .= ' /> ' . $lang['Post_Announcement'] . ' '; + $topic_type_toggle .= ' /> ' . $lang['Post_Sticky'] . ' '; } - if( $is_auth['auth_sticky'] ) + if( $is_auth['auth_announce'] ) { - $sticky_toggle = '<input type="radio" name="topictype" value="sticky"'; - if( $topic_type == POST_STICKY ) + $topic_type_toggle .= '<input type="radio" name="topictype" value="' . POST_ANNOUNCE . '"'; + if ( $post_data['topic_type'] == POST_ANNOUNCE ) { - $sticky_toggle .= ' checked="checked"'; + $topic_type_toggle .= ' checked="checked"'; } - $sticky_toggle .= ' /> ' . $lang['Post_Sticky'] . ' '; + $topic_type_toggle .= ' /> ' . $lang['Post_Announcement'] . ' '; } - if( $is_auth['auth_announce'] || $is_auth['auth_sticky'] ) + if ( $topic_type_toggle != "" ) { - $topic_type_toggle = $lang['Post_topic_as'] . ': <input type="radio" name="topictype" value="normal"'; - if( $topic_type == POST_NORMAL ) - { - $topic_type_toggle .= ' checked="checked"'; - } - $topic_type_toggle .= ' /> ' . $lang['Post_Normal'] . ' ' . $sticky_toggle . $announce_toggle; + $topic_type_toggle = $lang['Post_topic_as'] . ': <input type="radio" name="topictype" value="' . POST_NORMAL .'"' . ( ( $post_data['topic_type'] == POST_NORMAL ) ? ' checked="checked"' : '' ) . ' /> ' . $lang['Post_Normal'] . ' ' . $topic_type_toggle; } } -// -// Define hidden fields -// $hidden_form_fields = '<input type="hidden" name="mode" value="' . $mode . '" />'; -switch($mode) +switch( $mode ) { case 'newtopic': + $page_title = $lang['Post_a_new_topic']; $hidden_form_fields .= '<input type="hidden" name="' . POST_FORUM_URL . '" value="' . $forum_id . '" />'; break; case 'reply': + $page_title = $lang['Post_a_reply']; $hidden_form_fields .= '<input type="hidden" name="' . POST_TOPIC_URL . '" value="' . $topic_id . '" />'; break; case 'editpost': + $page_title = $lang['Edit_Post']; $hidden_form_fields .= '<input type="hidden" name="' . POST_POST_URL . '" value="' . $post_id . '" />'; break; } +// Generate smilies listing for page output +generate_smilies("inline", PAGE_POSTING); + // -// If post_message is not empty (as per a preview or error ) -// then stripslashes +// Include page header // -if( !empty($post_message) && ( $preview || $error || $refresh ) ) -{ - $post_message = stripslashes(preg_replace($html_entities_match, $html_entities_replace, $post_message)); -} +include($phpbb_root_path . 'includes/page_header.'.$phpEx); + +$template->set_filenames(array( + "body" => "posting_body.tpl", + "pollbody" => "posting_poll_body.tpl", + "jumpbox" => "jumpbox.tpl", + "reviewbody" => "posting_topic_review.tpl") +); + +$jumpbox = make_jumpbox(); +$template->assign_vars(array( + "L_GO" => $lang['Go'], + "L_JUMP_TO" => $lang['Jump_to'], + "L_SELECT_FORUM" => $lang['Select_forum'], + + "S_JUMPBOX_LIST" => $jumpbox, + "S_JUMPBOX_ACTION" => append_sid("viewforum.$phpEx")) +); +$template->assign_var_from_handle("JUMPBOX", "jumpbox"); + +$template->assign_vars(array( + "FORUM_NAME" => $forum_name, + "L_POST_A" => $page_title, + "L_POST_SUBJECT" => $lang['Post_subject'], + + "U_VIEW_FORUM" => append_sid("viewforum.$phpEx?" . POST_FORUM_URL . "=$forum_id")) +); // // This enables the forum/topic title to be output for posting @@ -2409,14 +938,12 @@ $template->assign_block_vars("switch_not_privmsg", array()); // Output the data to the template // $template->assign_vars(array( - "USERNAME" => preg_replace($html_entities_match, $html_entities_replace, $post_username), - "SUBJECT" => preg_replace($html_entities_match, $html_entities_replace, $post_subject), - "MESSAGE" => $post_message, + "USERNAME" => $username, + "SUBJECT" => $subject, + "MESSAGE" => $message, "HTML_STATUS" => $html_status, "BBCODE_STATUS" => sprintf($bbcode_status, '<a href="' . append_sid("faq.$phpEx?mode=bbcode") . '" target="_phpbbcode">', '</a>'), "SMILIES_STATUS" => $smilies_status, - "POLL_TITLE" => preg_replace($html_entities_match, $html_entities_replace, $poll_title), - "POLL_LENGTH" => $poll_length, "L_SUBJECT" => $lang['Subject'], "L_MESSAGE_BODY" => $lang['Message_body'], @@ -2474,14 +1001,14 @@ $template->assign_vars(array( "L_BBCODE_CLOSE_TAGS" => $lang['Close_Tags'], "L_STYLES_TIP" => $lang['Styles_tip'], - "U_VIEWTOPIC" => ( $mode == "reply" ) ? append_sid("viewtopic.$phpEx?" . POST_TOPIC_URL . "=$topic_id&postorder=desc") : "", - "U_REVIEW_TOPIC" => ( $mode == "reply" ) ? append_sid("posting.$phpEx?mode=topicreview&" . POST_TOPIC_URL . "=$topic_id") : "", + "U_VIEWTOPIC" => ( $mode == 'reply' ) ? append_sid("viewtopic.$phpEx?" . POST_TOPIC_URL . "=$topic_id&postorder=desc") : "", + "U_REVIEW_TOPIC" => ( $mode == 'reply' ) ? append_sid("posting.$phpEx?mode=topicreview&" . POST_TOPIC_URL . "=$topic_id") : "", - "S_HTML_CHECKED" => (!$html_on) ? "checked=\"checked\"" : "", - "S_BBCODE_CHECKED" => (!$bbcode_on) ? "checked=\"checked\"" : "", - "S_SMILIES_CHECKED" => (!$smilies_on) ? "checked=\"checked\"" : "", - "S_SIGNATURE_CHECKED" => ($attach_sig) ? "checked=\"checked\"" : "", - "S_NOTIFY_CHECKED" => ($notify_user) ? "checked=\"checked\"" : "", + "S_HTML_CHECKED" => (!$html_on) ? 'checked="checked"' : "", + "S_BBCODE_CHECKED" => (!$bbcode_on) ? 'checked="checked"' : "", + "S_SMILIES_CHECKED" => (!$smilies_on) ? 'checked="checked"' : "", + "S_SIGNATURE_CHECKED" => ($attach_sig) ? 'checked="checked"' : "", + "S_NOTIFY_CHECKED" => ($notify_user) ? 'checked="checked"' : "", "S_TYPE_TOGGLE" => $topic_type_toggle, "S_TOPIC_ID" => $topic_id, "S_POST_ACTION" => append_sid("posting.$phpEx"), @@ -2491,7 +1018,7 @@ $template->assign_vars(array( // // Poll entry switch/output // -if( $display_poll ) +if( ( $mode == "newtopic" || ( $mode == "editpost" && $post_data['first_post'] ) ) && $is_auth['auth_pollcreate'] ) { $template->assign_vars(array( "L_ADD_A_POLL" => $lang['Add_poll'], @@ -2506,20 +1033,21 @@ if( $display_poll ) "L_POLL_LENGTH_EXPLAIN" => $lang['Poll_for_explain'], "L_POLL_DELETE" => $lang['Delete_poll'], + "POLL_TITLE" => $poll_title, "POLL_LENGTH" => $poll_length) ); - if( $mode == "editpost" && ( $can_edit_poll || $is_auth['auth_mod'] ) && $post_has_poll ) + if( $mode == 'editpost' && $post_data['edit_poll'] ) { $template->assign_block_vars("poll_delete_toggle", array()); } - if( isset($poll_option_list) ) + if( !empty($poll_options) ) { - while( list($option_id, $option_text) = each($poll_option_list) ) + while( list($option_id, $option_text) = each($poll_options) ) { $template->assign_block_vars("poll_option_rows", array( - "POLL_OPTION" => preg_replace($html_entities_match, $html_entities_replace, $option_text), + "POLL_OPTION" => $option_text, "S_POLL_OPTION_NUM" => $option_id) ); @@ -2527,19 +1055,16 @@ if( $display_poll ) } $template->assign_var_from_handle("POLLBOX", "pollbody"); - } // // Topic review // -if( $mode == "reply" ) +if( $mode == 'reply' ) { + require($phpbb_root_path . 'includes/topic_review.'.$phpEx); topic_review($topic_id, true); - // - // Enable inline mode ... - // $template->assign_block_vars("switch_inline_mode", array()); $template->assign_var_from_handle("TOPIC_REVIEW_BOX", "reviewbody"); } @@ -2551,4 +1076,4 @@ $template->pparse("body"); include($phpbb_root_path . 'includes/page_tail.'.$phpEx); -?> +?>
\ No newline at end of file |
