sql_query($sql)) { $db_row = $db->sql_fetchrow($result); $last_post_time = $db_row['last_post_time']; $current_time = get_gmt_ts(); if(($current_time - $last_post_time) < $board_config['flood_interval']) { $error = TRUE; $error_msg = $lang['Flood_Error']; } } } // // End: Flood control // // // Handle anon posting with usernames // if(isset($HTTP_POST_VARS['username'])) { $username = trim(strip_tags(htmlspecialchars(stripslashes($HTTP_POST_VARS['username'])))); if(!validate_username($username)) { $error = TRUE; if(isset($error_msg)) { $error_msg .= "
"; } $error_msg .= $lang['Bad_username']; } } else { $username = ""; } $subject = trim(strip_tags(htmlspecialchars(stripslashes($HTTP_POST_VARS['subject'])))); if($mode == 'newtopic' && empty($subject)) { $error = TRUE; if(isset($error_msg)) { $error_msg .= "
"; } $error_msg .= $lang['Empty_subject']; } // // You can't make it both an annoumcement and a stick topic // if($annouce && $sticky) { $error = TRUE; if(isset($error_msg)) { $error_msg .= "
"; } $error_msg .= $lang['Annouce_and_sticky']; } if(!empty($HTTP_POST_VARS['message'])) { if(!$error && !$preview) { $smile_on = ($disable_smilies) ? FALSE : TRUE; $html_on = ($disable_html) ? FALSE : TRUE; if($disable_bbcode) { $bbcode_on = FALSE; } else { $bbcode_uid = make_bbcode_uid(); $bbcode_on = TRUE; } $message = prepare_message(stripslashes($HTTP_POST_VARS['message']), $html_on, $bbcode_on, $smile_on, $bbcode_uid); if($attach_sig && !empty($userdata['user_sig'])) { $message .= (eregi(" $", $message)) ? "[addsig]" : " [addsig]"; } } else { // do stripslashes incase magic_quotes is on. $message = stripslashes($HTTP_POST_VARS['message']); } } else { $error = TRUE; if(isset($error_msg)) { $error_msg .= "
"; } $error_msg .= $lang['Empty_msg']; } } // // If submitted then update tables // according to the mode // if($mode == "newtopic" || $mode == "reply") { $page_title = ($mode == "newtopic") ? " " . $lang['Post_new_topic'] : " " . $lang['Post_reply']; $section_title = ($mode == "newtopic") ? $lang['Post_new_topic_in'] : " " . $Lang['Post_reply_to']; if(isset($HTTP_POST_VARS['submit']) && !$error && !$preview) { $topic_time = get_gmt_ts(); if($mode == "reply") { $new_topic_id = $HTTP_POST_VARS[POST_TOPIC_URL]; } else if($mode == "newtopic") { $topic_notify = ($HTTP_POST_VARS['notify']) ? 1 : 0; $sql = "INSERT INTO " . TOPICS_TABLE . " (topic_title, topic_poster, topic_time, forum_id, topic_notify, topic_status, topic_type) VALUES ('$subject', " . $userdata['user_id'] . ", " . $topic_time . ", $forum_id, $topic_notify, " . TOPIC_UNLOCKED . ", $topic_type)"; if($result = $db->sql_query($sql, BEGIN_TRANSACTION)) { $new_topic_id = $db->sql_nextid(); } else { message_die(GENERAL_ERROR, "Error inserting data into topics table", "", __LINE__, __FILE__, $sql); } } if($mode == "reply" || ( $mode == "newtopic" && $result ) ) { $sql = "INSERT INTO " . POSTS_TABLE . " (topic_id, forum_id, poster_id, post_username, post_time, poster_ip, bbcode_uid) VALUES ($new_topic_id, $forum_id, " . $userdata['user_id'] . ", '$username', $topic_time, '$user_ip', '$bbcode_uid')"; if($mode == "reply") { $result = $db->sql_query($sql, BEGIN_TRANSACTION); } else { $result = $db->sql_query($sql); } if($result) { $new_post_id = $db->sql_nextid(); $sql = "INSERT INTO " . POSTS_TEXT_TABLE . " (post_id, post_subject, post_text) VALUES ($new_post_id, '$subject', '$message')"; if($db->sql_query($sql)) { $sql = "UPDATE " . TOPICS_TABLE . " SET topic_last_post_id = $new_post_id"; if($mode == "reply") { $sql .= ", topic_replies = topic_replies + 1 "; } $sql .= " WHERE topic_id = $new_topic_id"; if($db->sql_query($sql)) { $sql = "UPDATE " . FORUMS_TABLE . " SET forum_last_post_id = $new_post_id, forum_posts = forum_posts + 1, forum_topics = forum_topics + 1 WHERE forum_id = $forum_id"; if($db->sql_query($sql)) { $sql = "UPDATE " . USERS_TABLE . " SET user_posts = user_posts + 1 WHERE user_id = " . $userdata['user_id']; if($db->sql_query($sql, END_TRANSACTION)) { // // If we get here the post has been inserted successfully. // $msg = $lang['Stored'] . "

" . $lang['Click'] . " " . $lang['Here'] . " " . $lang['to_view_message'] . "

" . $lang['Click'] . " " . $lang['Here'] . " ". $lang['to_return_forum']; message_die(GENERAL_MESSAGE, $msg); } else { message_die(GENERAL_ERROR, "Error updating users table", "", __LINE__, __FILE__, $sql); } } else { // Rollback ? message_die(GENERAL_ERROR, "Error updating forums table", "", __LINE__, __FILE__, $sql); } } else { // Rollback ? message_die(GENERAL_ERROR, "Error updating topics table", "", __LINE__, __FILE__, $sql); } } else { // Rollback ? message_die(GENERAL_ERROR, "Error inserting data into posts text table", "", __LINE__, __FILE__, $sql); } } else { // Rollback ? message_die(GENERAL_ERROR, "Error inserting data into posts table", "", __LINE__, __FILE__, $sql); } } } } else if($mode == "quote" && !$preview) { $page_title = " " . $lang['Post_reply']; $section_title = " " . $Lang['Post_reply_to']; if( isset($HTTP_GET_VARS[POST_POST_URL]) ) { $post_id = $HTTP_GET_VARS[POST_POST_URL]; $sql = "SELECT p.*, pt.post_text, pt.post_subject, u.username, u.user_id, u.user_sig, t.topic_title, t.topic_notify, t.topic_type FROM " . POSTS_TABLE . " p, " . USERS_TABLE . " u, " . TOPICS_TABLE . " t, " . POSTS_TEXT_TABLE . " pt WHERE p.post_id = $post_id AND pt.post_id = p.post_id AND p.topic_id = t.topic_id AND p.poster_id = u.user_id"; if($result = $db->sql_query($sql)) { $postrow = $db->sql_fetchrow($result); $poster = stripslashes(trim($postrow['username'])); $subject = stripslashes(trim($postrow['post_subject'])); $message = stripslashes(trim($postrow['post_text'])); if(eregi("\[addsig]$", $message)) { $attach_sig = TRUE; } $message = eregi_replace("\[addsig]$", "", $message); // Removes UID from BBCode entries $message = preg_replace("/\:[0-9a-z\:]*?\]/si", "]", $message); // This has not been implemented yet! //$message = desmile($message); $message = str_replace("
", "\n", $message); $message = undo_htmlspecialchars($message); // Special handling for tags in the message, which can break the editing form.. $message = preg_replace('##si', '</TEXTAREA>', $message); $msg_date = create_date($board_config['default_dateformat'], $postrow['post_time'], $board_config['default_timezone']); $message = "On " . $msg_date . " " . $poster . " wrote:\n\n[quote]\n" . $message . "\n[/quote]"; } else { message_die(GENERAL_ERROR, "Couldn't obtain post and post text", "", __LINE__, __FILE__, $sql); } } else { message_die(GENERAL_MESSAGE, "Sorry but there is no such post"); } } else if($mode == "editpost") { $page_title = " " . $lang['Edit_post']; $section_title = $lang['Edit_post_in']; if(isset($HTTP_POST_VARS['submit']) && !$error && !$preview) { if(isset($HTTP_POST_VARS['delete_post'])) { // // To be completed! // } else { $post_id = $HTTP_POST_VARS[POST_POST_URL]; $new_topic_id = $HTTP_POST_VARS[POST_TOPIC_URL]; $sql = "UPDATE " . POSTS_TABLE . " SET bbcode_uid = '$bbcode_uid' WHERE post_id = $post_id"; if($db->sql_query($sql, BEGIN_TRANSACTION)) { $sql = "UPDATE " . POSTS_TEXT_TABLE . " SET post_text = '$message', post_subject = '$subject' WHERE post_id = $post_id"; if($is_first_post) { if($db->sql_query($sql)) { // // Update topics table here, set notification level and such // $sql = "UPDATE " . TOPICS_TABLE . " SET topic_title = '$subject', topic_notify = '$notify', topic_type = '".$topic_type."' WHERE topic_id = $new_topic_id"; if($db->sql_query($sql, END_TRANSACTION)) { // // If we get here the post has been inserted successfully. // $msg = $lang['Stored'] . "

" . $lang['Click'] . " " . $lang['Here'] . " " . $lang['to_view_message'] . "

" . $lang['Click'] . " " . $lang['Here'] . " ". $lang['to_return_forum']; message_die(GENERAL_MESSAGE, $msg); } else { message_die(GENERAL_ERROR, "Updating topics table", "", __LINE__, __FILE__, $sql); } } } else { if($db->sql_query($sql, END_TRANSACTION)) { // // If we get here the post has been inserted successfully. // $msg = $lang['Stored'] . "

" . $lang['Click'] . " " . $lang['Here'] . " " . $lang['to_view_message'] . "

" . $lang['Click'] . " " . $lang['Here'] . " ". $lang['to_return_forum']; message_die(GENERAL_MESSAGE, $msg); } else { message_die(GENERAL_ERROR, "Error updating posts text table", "", __LINE__, __FILE__, $sql); } } } else { message_die(GENERAL_ERROR, "Error updating posts text table", "", __LINE__, __FILE__, $sql); } } } else if(!$preview) { $post_id = ($HTTP_GET_VARS[POST_POST_URL]) ? $HTTP_GET_VARS[POST_POST_URL] : $HTTP_POST_VARS[POST_POST_URL]; if(!empty($post_id)) { $sql = "SELECT p.*, pt.post_text, pt.post_subject, u.username, u.user_id, u.user_sig, t.topic_title, t.topic_notify, t.topic_type FROM " . POSTS_TABLE . " p, " . USERS_TABLE . " u, " . TOPICS_TABLE . " t, " . POSTS_TEXT_TABLE . " pt WHERE p.post_id = $post_id AND pt.post_id = p.post_id AND p.topic_id = t.topic_id AND p.poster_id = u.user_id"; if($result = $db->sql_query($sql)) { $postrow = $db->sql_fetchrow($result); if($userdata['user_id'] != $postrow['user_id'] && !$is_auth['auth_mod']) { message_die(GENERAL_MESSAGE, $lang['Sorry_edit_own_posts']); } $subject = stripslashes(trim($postrow['post_subject'])); $message = stripslashes(trim($postrow['post_text'])); if(eregi("\[addsig]$", $message)) { $attach_sig = TRUE; } $message = eregi_replace("\[addsig]$", "", $message); // Removes UID from BBCode entries $message = preg_replace("/\:[0-9a-z\:]*?\]/si", "]", $message); // This has not been implemented yet! //$message = desmile($message); $message = str_replace("
", "\n", $message); $message = undo_htmlspecialchars($message); // Special handling for tags in the message, which can break the editing form.. $message = preg_replace('##si', '</TEXTAREA>', $message); if($is_first_post) { $notify_show = TRUE; if($postrow['topic_notify']) { $notify = TRUE; } $subject = stripslashes($postrow['topic_title']); switch($postrow['topic_type']) { case POST_ANNOUNCE: $is_announce = TRUE; break; case POST_STICKY: $is_sticky = TRUE; break; } } } } else { message_die(GENERAL_MESSAGE, "Sorry but there is no such post"); } } } // end if ... mode // // Output page // include('includes/page_header.'.$phpEx); // // Start: Error handling // if($error) { $template->set_filenames(array( "reg_header" => "error_body.tpl") ); $template->assign_vars(array( "ERROR_MESSAGE" => $error_msg) ); $template->pparse("reg_header"); } // // End: error handling // if(empty($username)) { $username = $userdata['username']; } // // Start: Preview Post // if($preview && !$error) { switch($topic_type) { case POST_ANNOUNCE: $is_announce = TRUE; break; case POST_STICKY: $is_sticky = TRUE; break; } $preview_message = $message; $bbcode_uid = make_bbcode_uid(); $preview_message = prepare_message($preview_message, TRUE, TRUE, TRUE, $bbcode_uid); $preview_message = bbencode_second_pass($preview_message, $bbcode_uid); $preview_message = make_clickable($preview_message); $template->set_filenames(array("preview" => "posting_preview.tpl")); $template->assign_vars(array( "TOPIC_TITLE" => $subject, "POST_SUBJECT" => $subject, "ROW_COLOR" => "#" . $theme['td_color1'], "POSTER_NAME" => $username, "POST_DATE" => create_date($board_config['default_dateformat'], time(), $board_config['default_timezone']), "MESSAGE" => stripslashes(nl2br($preview_message)), "L_PREVIEW" => $lang['Preview'], "L_POSTED" => $lang['Posted']) ); $template->pparse("preview"); } // // End: Preview Post // // // Show the same form for each mode. // if(!isset($HTTP_GET_VARS[POST_FORUM_URL]) && !isset($HTTP_POST_VARS[POST_FORUM_URL])) { message_die(GENERAL_ERROR, "Sorry but there is no such forum"); } $sql = "SELECT forum_name FROM " . FORUMS_TABLE . " WHERE forum_id = $forum_id"; if(!$result = $db->sql_query($sql)) { message_die(GENERAL_ERROR, "Could not obtain forum information.", "", __LINE__, __FILE__, $sql); } $forum_info = $db->sql_fetchrow($result); $forum_name = stripslashes($forum_info['forum_name']); $template->set_filenames(array( "body" => "posting_body.tpl", "jumpbox" => "jumpbox.tpl") ); $jumpbox = make_jumpbox(); $template->assign_vars(array( "JUMPBOX_LIST" => $jumpbox, "SELECT_NAME" => POST_FORUM_URL) ); $template->assign_var_from_handle("JUMPBOX", "jumpbox"); $template->assign_vars(array( "FORUM_ID" => $forum_id, "FORUM_NAME" => $forum_name, "L_POSTNEWIN" => $section_title, "U_VIEW_FORUM" => append_sid("viewforum.$phpEx?" . POST_FORUM_URL . "=$forum_id")) ); if($userdata['session_logged_in']) { $username_input = $userdata["username"]; $password_input = ""; } else { $username_input = ''; $password_input = ''; } $subject_input = ''; $message_input = ''; if($board_config['allow_html']) { $html_status = $lang['HTML'] . $lang['is_ON']; $html_toggle = '"; if($mode == "newtopic") { $post_a = $lang['Post_a_new_topic']; } else if($mode == "reply") { $post_a = $lang['Post_a_reply']; } else if($mode == "editpost") { $post_a = $lang['Edit_Post']; } $template->assign_vars(array( "USERNAME_INPUT" => $username_input, "PASSWORD_INPUT" => $password_input, "SUBJECT_INPUT" => $subject_input, "MESSAGE_INPUT" => $message_input, "HTML_STATUS" => $html_status, "HTML_TOGGLE" => $html_toggle, "SMILE_TOGGLE" => $smile_toggle, "SIG_TOGGLE" => $sig_toggle, "NOTIFY_TOGGLE" => $notify_toggle, "TYPE_TOGGLE" => $topic_type_toggle, "BBCODE_TOGGLE" => $bbcode_toggle, "BBCODE_STATUS" => $bbcode_status, "L_SUBJECT" => $lang['Subject'], "L_MESSAGE_BODY" => $lang['Message_body'], "L_OPTIONS" => $lang['Options'], "L_PREVIEW" => $lang['Preview'], "L_SUBMIT" => $lang['Submit_post'], "L_CANCEL" => $lang['Cancel_post'], "L_POST_A" => $post_a, "S_POST_ACTION" => append_sid("posting.$phpEx"), "S_HIDDEN_FORM_FIELDS" => $hidden_form_fields) ); $template->pparse("body"); include('includes/page_tail.'.$phpEx); ?>