<?php /*************************************************************************** * functions_posting.php * ------------------- * begin : Saturday, Feb 13, 2001 * copyright : (C) 2001 The phpBB Group * email : support@phpbb.com * * $Id$ * ***************************************************************************/ /*************************************************************************** * * This program is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation; either version 2 of the License, or * (at your option) any later version. * ***************************************************************************/ // Fill smiley templates (or just the variables) with smileys // Either in a window or inline function generate_smilies($mode) { global $SID, $auth, $db, $user, $config, $template; global $starttime, $phpEx, $phpbb_root_path; // TODO: To be added to the schema - discuss this first please :) $config['max_smilies_inline'] = 20; if ($mode == 'window') { $page_title = $user->lang['TOPIC_REVIEW'] . " - $topic_title"; include($phpbb_root_path . 'includes/page_header.'.$phpEx); $template->set_filenames(array( 'body' => 'posting_smilies.html') ); } $where_sql = ($mode == 'inline') ? 'WHERE display_on_posting = 1 ' : ''; $sql = "SELECT emoticon, code, smile_url, smile_width, smile_height FROM " . SMILIES_TABLE . " $where_sql ORDER BY smile_order"; $result = $db->sql_query($sql); $num_smilies = 0; $smile_array = array(); if ($row = $db->sql_fetchrow($result)) { do { if (!in_array($row['smile_url'], $smile_array)) { if ($mode == 'window' || ($mode == 'inline' && $num_smilies < $config['max_smilies_inline'])) { $template->assign_block_vars('emoticon', array( 'SMILEY_CODE' => $row['code'], 'SMILEY_IMG' => $config['smilies_path'] . '/' . $row['smile_url'], 'SMILEY_WIDTH' => $row['smile_width'], 'SMILEY_HEIGHT' => $row['smile_height'], 'SMILEY_DESC' => $row['emoticon']) ); } $smile_array[] = $row['smile_url']; $num_smilies++; } } while ($row = $db->sql_fetchrow($result)); $db->sql_freeresult($result); if ($mode == 'inline' && $num_smilies >= $config['max_smilies_inline']) { $template->assign_vars(array( 'S_SHOW_EMOTICON_LINK' => true, 'U_MORE_SMILIES' => "posting.$phpEx$SID&mode=smilies") ); } } if ($mode == 'window') { include($phpbb_root_path . 'includes/page_tail.'.$phpEx); } } // Generate Topic Icons function generate_topic_icons($mode, $enable_icons) { global $template, $config; if (!$enable_icons) { return false; } // Grab icons $icons = array(); obtain_icons($icons); if (sizeof($icons)) { foreach ($icons as $id => $data) { if ($data['display']) { $template->assign_block_vars('topic_icon', array( 'ICON_ID' => $id, 'ICON_IMG' => $phpbb_root_path . $config['icons_path'] . '/' . $data['img'], 'ICON_WIDTH' => $data['width'], 'ICON_HEIGHT' => $data['height'], 'S_ICON_CHECKED' => ($id == $icon_id && $mode != 'reply') ? ' checked="checked"' : '') ); } } return true; } return false; } // DECODE TEXT -> This will/should be handled by bbcode.php eventually function decode_text(&$message) { global $config, $censors; $server_protocol = ($config['cookie_secure']) ? 'https://' : 'http://'; $server_port = ($config['server_port'] <> 80) ? ':' . trim($config['server_port']) . '/' : '/'; $match = array( '#<!\-\- b \-\-><b>(.*?)</b><!\-\- b \-\->#s', '#<!\-\- u \-\-><u>(.*?)</u><!\-\- u \-\->#s', '#<!\-\- e \-\-><a href="mailto:(.*?)">.*?</a><!\-\- e \-\->#', '#<!\-\- m \-\-><a href="(.*?)" target="_blank">.*?</a><!\-\- m \-\->#', '#<!\-\- w \-\-><a href="http:\/\/(.*?)" target="_blank">.*?</a><!\-\- w \-\->#', '#<!\-\- l \-\-><a href="(.*?)" target="_blank">.*?</a><!\-\- l \-\->#', '#<!\-\- s(.*?) \-\-><img src="\{SMILE_PATH\}\/.*? \/><!\-\- s\1 \-\->#', ); $replace = array( '[b]\1[/b]', '[u]\1[/u]', '\1', '\1', '\1', $server_protocol . trim($config['server_name']) . $server_port . preg_replace('/^\/?(.*?)(\/)?$/', '\1', trim($config['script_path'])) . '/\1', '\1', ); if (empty($censors)) { $censors = array(); obtain_word_list($censors); } $message = preg_replace($match, $replace, $message); return; } // Quote Text function quote_text(&$message, $username = '') { $message = ' [quote' . ( (empty($username)) ? ']' : '="' . addslashes(trim($username)) . '"]') . trim($message) . '[/quote] '; } // Topic Review function topic_review($topic_id, $is_inline_review = false) { global $SID, $db, $config, $template, $user, $auth, $phpEx, $phpbb_root_path, $starttime; global $censors; // Define censored word matches if (empty($censors)) { $censors = array(); obtain_word_list($censors); } if (!$is_inline_review) { // Get topic info ... $sql = "SELECT t.topic_title, f.forum_id FROM " . TOPICS_TABLE . " t, " . FORUMS_TABLE . " f WHERE t.topic_id = $topic_id AND f.forum_id = t.forum_id"; $result = $db->sql_query($sql); if (!($row = $db->sql_fetchrow($result))) { trigger_error($user->lang['NO_TOPIC']); } $forum_id = intval($row['forum_id']); $topic_title = $row['topic_title']; if (!$auth->acl_gets('f_read', 'm_', 'a_', $forum_id)) { trigger_error($user->lang['SORRY_AUTH_READ']); } if (count($orig_word)) { $topic_title = preg_replace($censors['match'], $censors['replace'], $topic_title); } } else { $template->assign_vars(array( 'S_DISPLAY_INLINE' => true) ); } // Go ahead and pull all data for this topic $sql = "SELECT u.username, u.user_id, p.* FROM " . POSTS_TABLE . " p, " . USERS_TABLE . " u WHERE p.topic_id = $topic_id AND p.poster_id = u.user_id ORDER BY p.post_time DESC"; $result = $db->sql_query_limit($sql, $config['posts_per_page']); // Okay, let's do the loop, yeah come on baby let's do the loop // and it goes like this ... if ($row = $db->sql_fetchrow($result)) { $i = 0; do { $poster_id = $row['user_id']; $poster = $row['username']; // Handle anon users posting with usernames if($poster_id == ANONYMOUS && $row['post_username'] != '') { $poster = $row['post_username']; $poster_rank = $user->lang['GUEST']; } $post_subject = ($row['post_subject'] != '') ? $row['post_subject'] : ''; $message = $row['post_text']; if ($row['enable_smilies']) { $message = str_replace('<img src="{SMILE_PATH}', '<img src="' . $phpbb_root_path . $config['smilies_path'], $message); } if (count($orig_word)) { $post_subject = preg_replace($censors['match'], $censors['replace'], $post_subject); $message = preg_replace($censors['match'], $censors['replace'], $message); } $template->assign_block_vars('postrow', array( 'MINI_POST_IMG' => $user->img('goto_post', $user->lang['POST']), 'POSTER_NAME' => $poster, 'POST_DATE' => $user->format_date($row['post_time']), 'POST_SUBJECT' => $post_subject, 'MESSAGE' => nl2br($message), 'S_ROW_COUNT' => $i++) ); } while ($row = $db->sql_fetchrow($result)); } else { trigger_error($user->lang['NO_TOPIC']); } $db->sql_freeresult($result); $template->assign_vars(array( 'L_MESSAGE' => $user->lang['MESSAGE'], 'L_POSTED' => $user->lang['POSTED'], 'L_POST_SUBJECT'=> $user->lang['POST_SUBJECT'], 'L_TOPIC_REVIEW'=> $user->lang['TOPIC_REVIEW']) ); if (!$is_inline_review) { $page_title = $user->lang['TOPIC_REVIEW'] . ' - ' . $topic_title; include($phpbb_root_path . 'includes/page_header.'.$phpEx); $template->set_filenames(array( 'body' => 'posting_topic_review.html') ); include($phpbb_root_path . 'includes/page_tail.'.$phpEx); } } // Update Last Post Informations function update_last_post_information($type, $id) { global $db; switch ($type) { case 'forum': $sql_select_add = ', f.forum_parents'; $sql_table_add = ', ' . FORUMS_TABLE . ' f'; $sql_where_add = 'AND (t.forum_id = f.forum_id) AND (f.forum_id = ' . $id . ')'; $sql_update_table = FORUMS_TABLE; break; case 'topic': $sql_select_add = ''; $sql_table_add = ''; $sql_where_add = 'AND (t.topic_id = ' . $id . ')'; $sql_update_table = TOPICS_TABLE; break; default: return; } $sql = "SELECT p.post_id, p.poster_id, p.post_time, u.username, p.post_username " . $sql_select_add . " FROM " . POSTS_TABLE . " p, " . USERS_TABLE . " u, " . TOPICS_TABLE . " t " . $sql_table_add . " WHERE p.post_approved = 1 AND t.topic_approved = 1 AND p.poster_id = u.user_id AND t.topic_id = p.topic_id $sql_where_add ORDER BY p.post_time DESC"; $result = $db->sql_query_limit($sql, 1); $row = $db->sql_fetchrow($result); $db->sql_freeresult($result); if ($type == 'forum') { // Update forums: last post info, topics, posts ... we need to update // each parent too ... $forum_ids = $id; $forum_parents = trim($row['forum_parents']); if ($forum_parents != '') { $forum_parents = unserialize($forum_parents); foreach ($forum_parents as $parent_forum_id => $parent_name) { $forum_ids .= ', ' . $parent_forum_id; } } $where_clause = 'forum_id IN (' . $forum_ids . ')'; } else if ($type == 'topic') { $where_clause = 'topic_id = ' . $id; } $update_sql = array( $type . '_last_post_id' => intval($row['post_id']), $type . '_last_post_time' => intval($row['post_time']), $type . '_last_poster_id' => intval($row['poster_id']), $type . '_last_poster_name' => (intval($row['poster_id']) == ANONYMOUS) ? trim($row['post_username']) : trim($row['username']) ); $sql = 'UPDATE ' . $sql_update_table . ' SET ' . $db->sql_build_array('UPDATE', $update_sql) . ' WHERE ' . $where_clause; $db->sql_query($sql); } function user_notification($mode, $subject, $forum_id, $topic_id, $post_id) { global $db, $user, $config, $phpEx; $topic_notification = (($mode == 'reply') || ($mode == 'quote')) ? true : false; $newtopic_notification = ($mode == 'post') ? true : false; // Get banned User ID's $sql = "SELECT ban_userid FROM " . BANLIST_TABLE; $result = $db->sql_query($sql); $user_id_sql = ''; while ( $row = $db->sql_fetchrow($result) ) { if ( isset($row['ban_userid']) ) { $user_id_sql = ", " . $row['ban_userid']; } } if ($topic_notification) { $sql = "SELECT u.user_id, u.username, u.user_email, u.user_lang, t.topic_title, f.forum_name FROM " . TOPICS_WATCH_TABLE . " tw, " . TOPICS_TABLE . " t, " . USERS_TABLE . " u, " . FORUMS_TABLE . " f WHERE tw.topic_id = $topic_id AND tw.user_id NOT IN (" . $user->data['user_id'] . ", " . ANONYMOUS . $user_id_sql . " ) AND tw.notify_status = 0 AND f.forum_id = $forum_id AND t.topic_id = tw.topic_id AND u.user_id = tw.user_id"; } else if ($newtopic_notification) { $sql = "SELECT u.user_id, u.username, u.user_email, u.user_lang, f.forum_name FROM " . USERS_TABLE . " u, " . FORUMS_WATCH_TABLE . " fw, " . FORUMS_TABLE . " f WHERE fw.forum_id = $forum_id AND fw.user_id NOT IN (" . $user->data['user_id'] . ", " . ANONYMOUS . $user_id_sql . " ) AND fw.notify_status = 0 AND f.forum_id = fw.forum_id AND u.user_id = fw.user_id"; } else { trigger_error('WRONG_NOTIFICATION_MODE'); } $result = $db->sql_query($sql); if (empty($censors)) { $censors = array(); obtain_word_list($censors); } include($phpbb_root_path . 'includes/emailer.'.$phpEx); $emailer = new emailer($config['smtp_delivery']); $script_name = preg_replace("/^\/?(.*?)\/?$/", "\\1", trim($config['script_path'])); $script_name_forum = ( $script_name != '' ) ? $script_name . '/viewforum.'.$phpEx : 'viewforum.'.$phpEx; $script_name_topic = ( $script_name != '' ) ? $script_name . '/viewtopic.'.$phpEx : 'viewtopic.'.$phpEx; $server_name = trim($config['server_name']); $server_protocol = ( $config['cookie_secure'] ) ? 'https://' : 'http://'; $server_port = ( $config['server_port'] <> 80 ) ? ':' . trim($config['server_port']) . '/' : '/'; $email_headers = "From: " . $config['board_email'] . "\nReturn-Path: " . $config['board_email'] . "\r\n"; $update_watched_sql_topic = ''; $update_watched_sql_forum = ''; $email_users = array(); if ( $row = $db->sql_fetchrow($result) ) { if ($topic_notification) { $topic_title = $row['topic_title']; decode_text($topic_title); $topic_title = (sizeof($censors)) ? preg_replace($censors['match'], $censors['replace'], $topic_title) : $topic_title; } else { decode_text($subject); $topic_title = (sizeof($censors)) ? preg_replace($censors['match'], $censors['replace'], $subject) : $subject; } do { if (trim($row['user_email']) != '') { $row['email_template'] = ($topic_notification) ? 'topic_notify' : 'newtopic_notify'; $email_users[] = $row; if ($topic_notification) { $update_watched_sql_topic .= ($update_watched_sql_topic != '') ? ', ' . $row['user_id'] : $row['user_id']; } else { $update_watched_sql_forum .= ($update_watched_sql_forum != '') ? ', ' . $row['user_id'] : $row['user_id']; } } } while ($row = $db->sql_fetchrow($result)); } // Handle remaining Notifications (Forum) if ($topic_notification) { $already_notified = ($update_watched_sql_topic == '') ? '' : $update_watched_sql_topic . ', '; $already_notified .= ($update_watched_sql_forum == '') ? '' : $update_watched_sql_forum . ', '; $sql = "SELECT u.user_id, u.username, u.user_email, u.user_lang, t.topic_title, f.forum_name FROM " . TOPICS_TABLE . " t, " . USERS_TABLE . " u, " . FORUMS_WATCH_TABLE . " fw, " . FORUMS_TABLE . " f WHERE fw.forum_id = $forum_id AND fw.user_id NOT IN (" . $already_notified . $user->data['user_id'] . ", " . ANONYMOUS . $user_id_sql . " ) AND fw.notify_status = 0 AND t.topic_id = $topic_id AND f.forum_id = fw.forum_id AND u.user_id = fw.user_id"; $result = $db->sql_query($sql); if ($row = $db->sql_fetchrow($result)) { $topic_title = $row['topic_title']; decode_text($topic_title); $topic_title = (sizeof($censors)) ? preg_replace($censors['match'], $censors['replace'], $topic_title) : $topic_title; do { if (trim($row['user_email']) != '') { $row['email_template'] = 'forum_notify'; $email_users[] = $row; $update_watched_sql_forum .= ($update_watched_sql_forum != '') ? ', ' . $row['user_id'] : $row['user_id']; } } while ($row = $db->sql_fetchrow($result)); } } @reset($email_users); foreach ($email_users as $row) { $emailer->use_template($row['email_template'], $row['user_lang']); $emailer->email_address($row['user_email']); $emailer->set_subject(); $emailer->extra_headers($email_headers); $emailer->assign_vars(array( 'EMAIL_SIG' => str_replace("<br />", "\n", "-- \n" . $config['board_email_sig']), 'USERNAME' => $row['username'], 'SITENAME' => $config['sitename'], 'TOPIC_TITLE' => $topic_title, 'U_TOPIC' => $server_protocol . $server_name . $server_port . $script_name_topic . '?p=' . $post_id . '#' . $post_id, 'U_FORUM' => $server_protocol . $server_name . $server_port . $script_name_forum . '?f=' . $forum_id, 'FORUM_NAME' => $row['forum_name'], 'U_STOP_WATCHING_TOPIC' => $server_protocol . $server_name . $server_port . $script_name_topic . '?t=' . $topic_id . '&unwatch=topic', 'U_STOP_WATCHING_FORUM' => $server_protocol . $server_name . $server_port . $script_name_forum . '?f=' . $forum_id . '&unwatch=forum') ); $emailer->send(); $emailer->reset(); } if ($update_watched_sql_topic != '') { $sql = "UPDATE " . TOPICS_WATCH_TABLE . " SET notify_status = 1 WHERE topic_id = " . $topic_id . " AND user_id IN (" . $update_watched_sql_topic . ")"; $db->sql_query($sql); } if ($update_watched_sql_forum != '') { $sql = "UPDATE " . FORUMS_WATCH_TABLE . " SET notify_status = 1 WHERE forum_id = " . $forum_id . " AND user_id IN (" . $update_watched_sql_forum . ")"; $db->sql_query($sql); } } // Format text to be displayed - from viewtopic.php function format_display($message, $html, $bbcode, $uid, $url, $smilies, $sig) { global $auth, $forum_id, $config, $censors, $user; // If the board has HTML off but the post has HTML // on then we process it, else leave it alone if ($html && $auth->acl_get('f_bbcode', $forum_id)) { $message = preg_replace('#(<)([\/]?.*?)(>)#is', "<\\2>", $message); } // Second parse bbcode here // If we allow users to disable display of emoticons // we'll need an appropriate check and preg_replace here $message = (empty($smilies) || empty($config['allow_smilies'])) ? preg_replace('#<!\-\- s(.*?) \-\-><img src="\{SMILE_PATH\}\/.*? \/><!\-\- s\1 \-\->#', '\1', $message) : str_replace('<img src="{SMILE_PATH}', '<img src="' . $config['smilies_path'], $message); // Replace naughty words such as farty pants if (sizeof($censors)) { $message = str_replace('\"', '"', substr(preg_replace('#(\>(((?>([^><]+|(?R)))*)\<))#se', "preg_replace(\$censors['match'], \$censors['replace'], '\\0')", '>' . $message . '<'), 1, -1)); } $message = nl2br($message); // Signature $user_sig = ($sig && $config['allow_sig']) ? trim($user->data['user_sig']) : ''; if ($user_sig != '' && $auth->acl_gets('f_sigs', 'm_', 'a_', $forum_id)) { if (!$auth->acl_get('f_html', $forum_id) && $user->data['user_allowhtml']) { $user_sig = preg_replace('#(<)([\/]?.*?)(>)#is', "<\\2>", $user_sig); } $user_sig = (empty($user->data['user_allowsmile']) || empty($config['enable_smilies'])) ? preg_replace('#<!\-\- s(.*?) \-\-><img src="\{SMILE_PATH\}\/.*? \/><!\-\- s\1 \-\->#', '\1', $user_sig) : str_replace('<img src="{SMILE_PATH}', '<img src="' . $config['smilies_path'], $user_sig); if (sizeof($censors)) { $user_sig = str_replace('\"', '"', substr(preg_replace('#(\>(((?>([^><]+|(?R)))*)\<))#se', "preg_replace(\$censors['match'], \$censors['replace'], '\\0')", '>' . $user_sig . '<'), 1, -1)); } $user_sig = '<br />_________________<br />' . nl2br($user_sig); } else { $user_sig = ''; } $message = (empty($smilies) || empty($config['allow_smilies'])) ? preg_replace('#<!\-\- s(.*?) \-\-><img src="\{SMILE_PATH\}\/.*? \/><!\-\- s\1 \-\->#', '\1', $message) : str_replace('<img src="{SMILE_PATH}', '<img src="' . $config['smilies_path'], $message); $message .= $user_sig; return($message); } // Submit Poll function submit_poll($topic_id, $mode, $poll) { global $db; $cur_poll_options = array(); if ($poll['poll_start'] && $mode == 'edit') { $sql = "SELECT * FROM " . POLL_OPTIONS_TABLE . " WHERE topic_id = " . $topic_id . " ORDER BY poll_option_id"; $result = $db->sql_query($sql); while ($cur_poll_options[] = $db->sql_fetchrow($result)); $db->sql_freeresult($result); } for ($i = 0; $i < sizeof($poll['poll_options']); $i++) { if (trim($poll['poll_options'][$i]) != '') { if (empty($cur_poll_options[$i])) { $sql = "INSERT INTO " . POLL_OPTIONS_TABLE . " (poll_option_id, topic_id, poll_option_text) VALUES (" . $i . ", " . $topic_id . ", '" . $db->sql_escape($poll['poll_options'][$i]) . "')"; $db->sql_query($sql); } else if ($poll['poll_options'][$i] != $cur_poll_options[$i]) { $sql = "UPDATE " . POLL_OPTIONS_TABLE . " SET poll_option_text = '" . $db->sql_escape($poll['poll_options'][$i]) . "' WHERE poll_option_id = " . $cur_poll_options[$i]['poll_option_id']; $db->sql_query($sql); } } } if (sizeof($poll['poll_options']) < sizeof($cur_poll_options)) { $sql = "DELETE FROM " . POLL_OPTIONS_TABLE . " WHERE poll_option_id > " . sizeof($poll['poll_options']) . " AND topic_id = " . $topic_id; $db->sql_query($sql); } } // Submit Post function submit_post($mode, $message, $subject, $username, $topic_type, $bbcode_uid, $poll, $post_data) { global $db, $auth, $user, $config, $phpEx, $SID, $template; $search = new fulltext_search(); $current_time = time(); $post_data['subject'] = $subject; $db->sql_transaction(); // Initial Topic table info if ( ($mode == 'post') || ($mode == 'edit' && $post_data['topic_first_post_id'] == $post_data['post_id'])) { $topic_sql = array( 'forum_id' => $post_data['forum_id'], 'topic_title' => stripslashes($subject), 'topic_time' => $current_time, 'topic_type' => $topic_type, 'topic_approved' => (($post_data['enable_moderate']) && !$auth->acl_gets('f_ignorequeue', 'm_', 'a_', $post_data['forum_id'])) ? 0 : 1, 'icon_id' => $post_data['icon_id'], 'topic_poster' => intval($user->data['user_id']), 'topic_first_poster_name' => ($username != '') ? stripslashes($username) : (($user->data['user_id'] == ANONYMOUS) ? '' : stripslashes($user->data['username'])), ); if (!empty($poll['poll_options'])) { $topic_sql = array_merge($topic_sql, array( 'poll_title' => stripslashes($poll['poll_title']), 'poll_start' => ($poll['poll_start']) ? $poll['poll_start'] : $current_time, 'poll_length' => $poll['poll_length'] * 3600 )); } $sql = ($mode == 'post') ? 'INSERT INTO ' . TOPICS_TABLE . ' ' . $db->sql_build_array('INSERT', $topic_sql) : 'UPDATE ' . TOPICS_TABLE . ' SET ' . $db->sql_build_array('UPDATE', $topic_sql) . ' WHERE topic_id = ' . $post_data['topic_id']; $db->sql_query($sql); $post_data['topic_id'] = ($mode == 'post') ? $db->sql_nextid() : $post_data['topic_id']; } // Post table info $post_sql = array( 'topic_id' => $post_data['topic_id'], 'forum_id' => $post_data['forum_id'], 'poster_id' => ($mode == 'edit') ? $post_data['poster_id'] : intval($user->data['user_id']), 'post_username' => ($username != '') ? stripslashes($username) : '', 'post_subject' => stripslashes($subject), 'icon_id' => $post_data['icon_id'], 'poster_ip' => $user->ip, 'post_time' => $current_time, 'post_approved' => ($post_data['enable_moderate'] && !$auth->acl_gets('f_ignorequeue', 'm_', 'a_', $post_data['forum_id'])) ? 0 : 1, 'post_edit_time' => ($mode == 'edit' && $post_data['poster_id'] == $user->data['user_id']) ? $current_time : 0, 'enable_sig' => $post_data['enable_sig'], 'enable_bbcode' => $post_data['enable_bbcode'], 'enable_html' => $post_data['enable_html'], 'enable_smilies' => $post_data['enable_smilies'], 'enable_magic_url' => $post_data['enable_urls'], 'bbcode_uid' => $bbcode_uid, ); if ($mode != 'edit' || $post_data['message_md5'] != $post_data['post_checksum']) { $post_sql = array_merge($post_sql, array( 'post_checksum' => $post_data['message_md5'], 'post_text' => stripslashes($message), 'post_encoding' => $user->lang['ENCODING'] )); } $sql = ($mode == 'edit' && $post_data['poster_id'] == intval($user->data['user_id'])) ? 'UPDATE ' . POSTS_TABLE . ' SET ' . $db->sql_build_array('UPDATE', $post_sql) . ' , post_edit_count = post_edit_count + 1 WHERE post_id = ' . $post_data['post_id'] : 'INSERT INTO ' . POSTS_TABLE . ' ' . $db->sql_build_array('INSERT', $post_sql); $db->sql_query($sql); $post_data['post_id'] = ($mode == 'edit') ? $post_data['post_id'] : $db->sql_nextid(); // poll options if (!empty($poll['poll_options'])) { submit_poll($post_data['topic_id'], $mode, $poll); } // Fulltext parse if ($mode != 'edit' || $post_data['message_md5'] != $post_data['post_checksum']) { $result = $search->add($mode, $post_data['post_id'], $message, $subject); } // Sync forums, topics and users ... if ($mode != 'edit') { // Update forums: last post info, topics, posts ... we need to update // each parent too ... $forum_ids = $post_data['forum_id']; if (!empty($post_data['forum_parents'])) { $post_data['forum_parents'] = unserialize($post_data['forum_parents']); foreach ($post_data['forum_parents'] as $parent_forum_id => $parent_name) { $forum_ids .= ', ' . $parent_forum_id; } } $forum_topics_sql = ($mode == 'post') ? ', forum_topics = forum_topics + 1' : ''; $forum_sql = array( 'forum_last_post_id' => $post_data['post_id'], 'forum_last_post_time' => $current_time, 'forum_last_poster_id' => intval($user->data['user_id']), 'forum_last_poster_name'=> ($user->data['user_id'] == ANONYMOUS) ? stripslashes($username) : $user->data['username'], ); $sql = 'UPDATE ' . FORUMS_TABLE . ' SET ' . $db->sql_build_array('UPDATE', $forum_sql) . ', forum_posts = forum_posts + 1' . $forum_topics_sql . ' WHERE forum_id IN (' . $forum_ids . ')'; $db->sql_query($sql); // Update topic: first/last post info, replies $topic_sql = array( 'topic_last_post_id' => $post_data['post_id'], 'topic_last_post_time' => $current_time, 'topic_last_poster_id' => intval($user->data['user_id']), 'topic_last_poster_name'=> ($username != '') ? stripslashes($username) : (($user->data['user_id'] == ANONYMOUS) ? '' : stripslashes($user->data['username'])), ); if ($mode == 'post') { $topic_sql = array_merge($topic_sql, array( 'topic_first_post_id' => $post_data['post_id'], )); } $topic_replies_sql = ($mode == 'reply') ? ', topic_replies = topic_replies + 1' : ''; $sql = 'UPDATE ' . TOPICS_TABLE . ' SET ' . $db->sql_build_array('UPDATE', $topic_sql) . $topic_replies_sql . ' WHERE topic_id = ' . $post_data['topic_id']; $db->sql_query($sql); // Update user post count ... if appropriate if (!empty($post_data['enable_post_count']) && $user->data['user_id'] != ANONYMOUS) { $sql = 'UPDATE ' . USERS_TABLE . ' SET user_posts = user_posts + 1 WHERE user_id = ' . intval($user->data['user_id']); $db->sql_query($sql); } // post counts for index, etc. if ($mode == 'post') { set_config('num_topics', $config['num_topics'] + 1, TRUE); } set_config('num_posts', $config['num_posts'] + 1, TRUE); } // Topic Notification if ((!$post_data['notify_set']) && ($post_data['notify'])) { $sql = "INSERT INTO " . TOPICS_WATCH_TABLE . " (user_id, topic_id) VALUES (" . $user->data['user_id'] . ", " . $post_data['topic_id'] . ")"; $db->sql_query($sql); } else if (($post_data['notify_set']) && (!$post_data['notify'])) { $sql = "DELETE FROM " . TOPICS_WATCH_TABLE . " WHERE user_id = " . $user->data['user_id'] . " AND topic_id = " . $post_data['topic_id']; $db->sql_query($sql); } // Mark this topic as read and posted to. $mark_mode = ($mode == 'reply' || $mode == 'quote') ? 'post' : 'topic'; markread($mark_mode, $post_data['forum_id'], $post_data['topic_id'], $post_data['post_id']); $db->sql_transaction('commit'); // Send Notifications if (($mode != 'edit') && ($mode != 'delete')) { user_notification($mode, stripslashes($post_data['subject']), $post_data['forum_id'], $post_data['topic_id'], $post_data['post_id']); } $template->assign_vars(array( 'META' => '<meta http-equiv="refresh" content="5; url=viewtopic.' . $phpEx . $SID . '&f=' . $post_data['forum_id'] . '&p=' . $post_data['post_id'] . '#' . $post_data['post_id'] . '">') ); $message = ($post_data['enable_moderate']) ? 'POST_STORED_MOD' : 'POST_STORED'; $message = $user->lang[$message] . '<br /><br />' . sprintf($user->lang['VIEW_MESSAGE'], '<a href="viewtopic.' . $phpEx . $SID .'&p=' . $post_data['post_id'] . '#' . $post_data['post_id'] . '">', '</a>') . '<br /><br />' . sprintf($user->lang['RETURN_FORUM'], '<a href="viewforum.' . $phpEx . $SID .'&f=' . $post_data['forum_id'] . '">', '</a>'); trigger_error($message); } // Delete Poll function delete_poll($topic_id) { global $db; $sql = "DELETE FROM " . POLL_OPTIONS_TABLE . " WHERE topic_id = " . $topic_id; $db->sql_query($sql); $sql = "DELETE FROM " . POLL_VOTES_TABLE . " WHERE topic_id = " . $topic_id; $db->sql_query($sql); $topic_sql = array( 'poll_title' => '', 'poll_start' => 0, 'poll_length' => 0, 'poll_last_vote' => 0 ); $sql = 'UPDATE ' . TOPICS_TABLE . ' SET ' . $db->sql_build_array('UPDATE', $topic_sql) . ' WHERE topic_id = ' . $topic_id; $db->sql_query($sql); } // Delete Post. Please be sure user have the correct Permissions before calling this function function delete_post($mode, $post_id, $topic_id, $forum_id, $post_data) { global $db, $template, $user, $phpEx, $SID; $search = new fulltext_search(); $db->sql_transaction(); $sql = "DELETE FROM " . POSTS_TABLE . " WHERE post_id = " . $post_id; $db->sql_query($sql); // User tries to delete the post twice ? Exit... we do not want the topics table screwed up. if ($db->sql_affectedrows() == 0) { return ($user->lang['ALREADY_DELETED']); } $forum_sql = array(); $topic_sql = array(); $user_sql = array(); $forum_update_sql = ''; $user_update_sql = ''; $topic_update_sql = 'topic_replies = topic_replies - 1'; // Only one post... delete topic if ($post_data['topic_first_post_id'] == $post_data['topic_last_post_id']) { $sql = "DELETE FROM " . TOPICS_TABLE . " WHERE topic_id = " . $topic_id . " OR topic_moved_id = " . $topic_id; $db->sql_query($sql); $sql = "DELETE FROM " . TOPICS_WATCH_TABLE . " WHERE topic_id = " . $topic_id; $db->sql_query($sql); $forum_update_sql .= ($forum_update_sql != '') ? ', ' : ''; $forum_update_sql .= 'forum_topics = forum_topics - 1'; } // Update Post Statistics if ($post_data['enable_post_count']) { $forum_update_sql .= ($forum_update_sql != '') ? ', ' : ''; $forum_update_sql .= 'forum_posts = forum_posts - 1'; $user_update_sql .= ($user_update_sql != '') ? ', ' : ''; $user_update_sql .= 'user_posts = user_posts - 1'; } // TODO: delete common words... maybe just call search_tidy ? // $search->del_words($post_id); $sql = "SELECT p.post_id, p.poster_id, p.post_username, u.username FROM " . POSTS_TABLE . " p, " . USERS_TABLE . " u WHERE p.topic_id = " . $topic_id . " AND p.poster_id = u.user_id AND p.post_approved = 1 ORDER BY p.post_time DESC"; $result = $db->sql_query_limit($sql, 1); $row = $db->sql_fetchrow($result); $db->sql_freeresult($result); // If Post is first post, but not the only post... make next post the topic starter one. ;) if (($post_data['topic_first_post_id'] != $post_data['topic_last_post_id']) && ($post_id == $post_data['topic_first_post_id'])) { $topic_sql = array( 'topic_first_post_id' => intval($row['post_id']), 'topic_first_poster_name' => ( intval($row['poster_id']) == ANONYMOUS) ? trim($row['post_username']) : trim($row['username']) ); } $post_data['next_post_id'] = intval($row['post_id']); // Update Forum, Topic and User with the gathered Informations if (($forum_update_sql != '') || (count($forum_sql) > 0)) { $sql = 'UPDATE ' . FORUMS_TABLE . ' SET ' . ( (count($forum_sql) > 0) ? $db->sql_build_array('UPDATE', $forum_sql) : '') . ( ($forum_update_sql != '') ? ((count($forum_sql) > 0) ? ', ' . $forum_update_sql : $forum_update_sql) : '') . ' WHERE forum_id = ' . $forum_id; $db->sql_query($sql); } if (($topic_update_sql != '') || (count($topic_sql) > 0)) { $sql = 'UPDATE ' . TOPICS_TABLE . ' SET ' . ( (count($topic_sql) > 0) ? $db->sql_build_array('UPDATE', $topic_sql) : '') . ( ($topic_update_sql != '') ? ((count($topic_sql) > 0) ? ', ' . $topic_update_sql : $topic_update_sql) : '') . ' WHERE topic_id = ' . $topic_id; $db->sql_query($sql); } if (($user_update_sql != '') || (count($user_sql) > 0)) { $sql = 'UPDATE ' . USERS_TABLE . ' SET ' . ( (count($user_sql) > 0) ? $db->sql_build_array('UPDATE', $user_sql) : '') . ( ($user_update_sql != '') ? ((count($user_sql) > 0) ? ', ' . $user_update_sql : $user_update_sql) : '') . ' WHERE user_id = ' . $post_data['user_id']; $db->sql_query($sql); } // Update Forum stats... if ($post_data['topic_first_post_id'] != $post_data['topic_last_post_id']) { update_last_post_information('topic', $topic_id); } update_last_post_information('forum', $forum_id); $db->sql_transaction('commit'); if ($post_data['topic_first_post_id'] == $post_data['topic_last_post_id']) { $meta_info = '<meta http-equiv="refresh" content="5; url=viewforum.' . $phpEx . $SID . '&f=' . $forum_id . '">'; $message = $user->lang['DELETED']; } else { $meta_info = '<meta http-equiv="refresh" content="5; url=viewtopic.' . $phpEx . $SID . '&f=' . $forum_id . '&t=' . $topic_id . '&p=' . $post_data['next_post_id'] . '#' . $post_data['next_post_id'] . '">'; $message = $user->lang['DELETED'] . '<br /><br />' . sprintf($user->lang['RETURN_TOPIC'], '<a href="viewtopic.' . $phpEx . $SID . '&f=' . $forum_id . '&t=' . $topic_id . '&p=' . $post_data['next_post_id'] . '#' . $post_data['next_post_id'] . '">', '</a>'); } $template->assign_vars(array( 'META' => $meta_info) ); $message .= '<br /><br />' . sprintf($user->lang['RETURN_FORUM'], '<a href="viewforum.' . $phpEx . $SID . '&f=' . $forum_id . '">', '</a>'); trigger_error($message); return; } ?>