Post.php 113 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146114711481149115011511152115311541155115611571158115911601161116211631164116511661167116811691170117111721173117411751176117711781179118011811182118311841185118611871188118911901191119211931194119511961197119811991200120112021203120412051206120712081209121012111212121312141215121612171218121912201221122212231224122512261227122812291230123112321233123412351236123712381239124012411242124312441245124612471248124912501251125212531254125512561257125812591260126112621263126412651266126712681269127012711272127312741275127612771278127912801281128212831284128512861287128812891290129112921293129412951296129712981299130013011302130313041305130613071308130913101311131213131314131513161317131813191320132113221323132413251326132713281329133013311332133313341335133613371338133913401341134213431344134513461347134813491350135113521353135413551356135713581359136013611362136313641365136613671368136913701371137213731374137513761377137813791380138113821383138413851386138713881389139013911392139313941395139613971398139914001401140214031404140514061407140814091410141114121413141414151416141714181419142014211422142314241425142614271428142914301431143214331434143514361437143814391440144114421443144414451446144714481449145014511452145314541455145614571458145914601461146214631464146514661467146814691470147114721473147414751476147714781479148014811482148314841485148614871488148914901491149214931494149514961497149814991500150115021503150415051506150715081509151015111512151315141515151615171518151915201521152215231524152515261527152815291530153115321533153415351536153715381539154015411542154315441545154615471548154915501551155215531554155515561557155815591560156115621563156415651566156715681569157015711572157315741575157615771578157915801581158215831584158515861587158815891590159115921593159415951596159715981599160016011602160316041605160616071608160916101611161216131614161516161617161816191620162116221623162416251626162716281629163016311632163316341635163616371638163916401641164216431644164516461647164816491650165116521653165416551656165716581659166016611662166316641665166616671668166916701671167216731674167516761677167816791680168116821683168416851686168716881689169016911692169316941695169616971698169917001701170217031704170517061707170817091710171117121713171417151716171717181719172017211722172317241725172617271728172917301731173217331734173517361737173817391740174117421743174417451746174717481749175017511752175317541755175617571758175917601761176217631764176517661767176817691770177117721773177417751776177717781779178017811782178317841785178617871788178917901791179217931794179517961797179817991800180118021803180418051806180718081809181018111812181318141815181618171818181918201821182218231824182518261827182818291830183118321833183418351836183718381839184018411842184318441845184618471848184918501851185218531854185518561857185818591860186118621863186418651866186718681869187018711872187318741875187618771878187918801881188218831884188518861887188818891890189118921893189418951896189718981899190019011902190319041905190619071908190919101911191219131914191519161917191819191920192119221923192419251926192719281929193019311932193319341935193619371938193919401941194219431944194519461947194819491950195119521953195419551956195719581959196019611962196319641965196619671968196919701971197219731974197519761977197819791980198119821983198419851986198719881989199019911992199319941995199619971998199920002001200220032004200520062007200820092010201120122013201420152016201720182019202020212022202320242025202620272028202920302031203220332034203520362037203820392040204120422043204420452046204720482049205020512052205320542055205620572058205920602061206220632064206520662067206820692070207120722073207420752076207720782079208020812082208320842085208620872088208920902091209220932094209520962097209820992100210121022103210421052106210721082109211021112112211321142115211621172118211921202121212221232124212521262127212821292130213121322133213421352136213721382139214021412142214321442145214621472148214921502151215221532154215521562157215821592160216121622163216421652166216721682169217021712172217321742175217621772178217921802181218221832184218521862187218821892190219121922193219421952196219721982199220022012202220322042205220622072208220922102211221222132214221522162217221822192220222122222223222422252226222722282229223022312232223322342235223622372238223922402241224222432244224522462247224822492250225122522253225422552256225722582259226022612262226322642265226622672268226922702271227222732274227522762277227822792280228122822283228422852286228722882289229022912292229322942295229622972298229923002301230223032304230523062307230823092310231123122313231423152316231723182319232023212322232323242325232623272328232923302331233223332334233523362337233823392340234123422343234423452346234723482349235023512352235323542355235623572358235923602361236223632364236523662367236823692370237123722373237423752376237723782379238023812382238323842385238623872388238923902391239223932394239523962397239823992400240124022403240424052406240724082409241024112412241324142415241624172418241924202421242224232424242524262427242824292430243124322433243424352436243724382439244024412442244324442445244624472448244924502451245224532454245524562457245824592460246124622463246424652466246724682469247024712472247324742475247624772478247924802481248224832484248524862487248824892490249124922493249424952496249724982499250025012502250325042505250625072508250925102511251225132514251525162517251825192520252125222523252425252526252725282529253025312532253325342535253625372538253925402541254225432544254525462547254825492550255125522553255425552556255725582559256025612562256325642565256625672568256925702571257225732574257525762577257825792580258125822583258425852586258725882589259025912592259325942595259625972598259926002601260226032604260526062607260826092610261126122613261426152616261726182619262026212622262326242625262626272628262926302631263226332634263526362637263826392640264126422643264426452646264726482649265026512652265326542655265626572658265926602661266226632664266526662667266826692670267126722673267426752676267726782679268026812682268326842685268626872688268926902691269226932694269526962697269826992700270127022703270427052706270727082709271027112712271327142715271627172718271927202721272227232724272527262727272827292730273127322733273427352736273727382739274027412742274327442745274627472748274927502751275227532754275527562757275827592760276127622763276427652766276727682769277027712772277327742775277627772778277927802781278227832784278527862787278827892790279127922793279427952796279727982799280028012802280328042805280628072808280928102811281228132814281528162817281828192820282128222823282428252826282728282829283028312832283328342835283628372838283928402841284228432844284528462847284828492850285128522853285428552856285728582859286028612862286328642865286628672868286928702871287228732874287528762877287828792880288128822883288428852886288728882889289028912892289328942895289628972898289929002901290229032904290529062907290829092910291129122913291429152916291729182919292029212922292329242925292629272928292929302931293229332934293529362937293829392940294129422943294429452946294729482949295029512952295329542955295629572958295929602961296229632964296529662967296829692970297129722973297429752976297729782979298029812982298329842985298629872988298929902991299229932994299529962997299829993000300130023003300430053006300730083009301030113012301330143015301630173018301930203021302230233024302530263027302830293030303130323033303430353036303730383039304030413042304330443045304630473048304930503051305230533054305530563057305830593060306130623063306430653066306730683069307030713072307330743075307630773078307930803081308230833084308530863087308830893090309130923093309430953096309730983099310031013102310331043105310631073108310931103111
  1. <?php
  2. /**
  3. * The job of this file is to handle everything related to posting replies,
  4. * new topics, quotes, and modifications to existing posts. It also handles
  5. * quoting posts by way of javascript.
  6. * Simple Machines Forum (SMF)
  7. *
  8. * @package SMF
  9. * @author Simple Machines http://www.simplemachines.org
  10. * @copyright 2011 Simple Machines
  11. * @license http://www.simplemachines.org/about/smf/license.php BSD
  12. *
  13. * @version 2.1 Alpha 1
  14. */
  15. if (!defined('SMF'))
  16. die('Hacking attempt...');
  17. /**
  18. * handles showing the post screen, loading the post to be modified, and loading any post quoted.
  19. * - additionally handles previews of posts.
  20. * - @uses the Post template and language file, main sub template.
  21. * - allows wireless access using the protocol_post sub template.
  22. * - requires different permissions depending on the actions, but most notably post_new, post_reply_own, and post_reply_any.
  23. * - shows options for the editing and posting of calendar events and attachments, as well as the posting of polls.
  24. * - accessed from ?action=post.
  25. */
  26. function Post()
  27. {
  28. global $txt, $scripturl, $topic, $modSettings, $board;
  29. global $user_info, $sc, $board_info, $context, $settings;
  30. global $sourcedir, $options, $smcFunc, $language;
  31. loadLanguage('Post');
  32. // You can't reply with a poll... hacker.
  33. if (isset($_REQUEST['poll']) && !empty($topic) && !isset($_REQUEST['msg']))
  34. unset($_REQUEST['poll']);
  35. // Posting an event?
  36. $context['make_event'] = isset($_REQUEST['calendar']);
  37. $context['robot_no_index'] = true;
  38. // You must be posting to *some* board.
  39. if (empty($board) && !$context['make_event'])
  40. fatal_lang_error('no_board', false);
  41. require_once($sourcedir . '/Subs-Post.php');
  42. // Any files to include for post?
  43. if (!isset($post_includes) && !empty($modSettings['integrate_post_include']))
  44. {
  45. $post_includes = explode(',', $modSettings['integrate_post_include']);
  46. foreach ($post_includes as $include)
  47. {
  48. $include = strtr(trim($include), array('$boarddir' => $boarddir, '$sourcedir' => $sourcedir, '$themedir' => $settings['theme_dir']));
  49. if (file_exists($include))
  50. require_once($include);
  51. }
  52. }
  53. if (isset($_REQUEST['xml']))
  54. {
  55. $context['sub_template'] = 'post';
  56. // Just in case of an earlier error...
  57. $context['preview_message'] = '';
  58. $context['preview_subject'] = '';
  59. }
  60. // No message is complete without a topic.
  61. if (empty($topic) && !empty($_REQUEST['msg']))
  62. {
  63. $request = $smcFunc['db_query']('', '
  64. SELECT id_topic
  65. FROM {db_prefix}messages
  66. WHERE id_msg = {int:msg}',
  67. array(
  68. 'msg' => (int) $_REQUEST['msg'],
  69. ));
  70. if ($smcFunc['db_num_rows']($request) != 1)
  71. unset($_REQUEST['msg'], $_POST['msg'], $_GET['msg']);
  72. else
  73. list ($topic) = $smcFunc['db_fetch_row']($request);
  74. $smcFunc['db_free_result']($request);
  75. }
  76. // Check if it's locked. It isn't locked if no topic is specified.
  77. if (!empty($topic))
  78. {
  79. $request = $smcFunc['db_query']('', '
  80. SELECT
  81. t.locked, IFNULL(ln.id_topic, 0) AS notify, t.is_sticky, t.id_poll, t.id_last_msg, mf.id_member,
  82. t.id_first_msg, mf.subject,
  83. CASE WHEN ml.poster_time > ml.modified_time THEN ml.poster_time ELSE ml.modified_time END AS last_post_time
  84. FROM {db_prefix}topics AS t
  85. LEFT JOIN {db_prefix}log_notify AS ln ON (ln.id_topic = t.id_topic AND ln.id_member = {int:current_member})
  86. LEFT JOIN {db_prefix}messages AS mf ON (mf.id_msg = t.id_first_msg)
  87. LEFT JOIN {db_prefix}messages AS ml ON (ml.id_msg = t.id_last_msg)
  88. WHERE t.id_topic = {int:current_topic}
  89. LIMIT 1',
  90. array(
  91. 'current_member' => $user_info['id'],
  92. 'current_topic' => $topic,
  93. )
  94. );
  95. list ($locked, $context['notify'], $sticky, $pollID, $context['topic_last_message'], $id_member_poster, $id_first_msg, $first_subject, $lastPostTime) = $smcFunc['db_fetch_row']($request);
  96. $smcFunc['db_free_result']($request);
  97. // If this topic already has a poll, they sure can't add another.
  98. if (isset($_REQUEST['poll']) && $pollID > 0)
  99. unset($_REQUEST['poll']);
  100. if (empty($_REQUEST['msg']))
  101. {
  102. if ($user_info['is_guest'] && !allowedTo('post_reply_any') && (!$modSettings['postmod_active'] || !allowedTo('post_unapproved_replies_any')))
  103. is_not_guest();
  104. // By default the reply will be approved...
  105. $context['becomes_approved'] = true;
  106. if ($id_member_poster != $user_info['id'])
  107. {
  108. if ($modSettings['postmod_active'] && allowedTo('post_unapproved_replies_any') && !allowedTo('post_reply_any'))
  109. $context['becomes_approved'] = false;
  110. else
  111. isAllowedTo('post_reply_any');
  112. }
  113. elseif (!allowedTo('post_reply_any'))
  114. {
  115. if ($modSettings['postmod_active'] && allowedTo('post_unapproved_replies_own') && !allowedTo('post_reply_own'))
  116. $context['becomes_approved'] = false;
  117. else
  118. isAllowedTo('post_reply_own');
  119. }
  120. }
  121. else
  122. $context['becomes_approved'] = true;
  123. $context['can_lock'] = allowedTo('lock_any') || ($user_info['id'] == $id_member_poster && allowedTo('lock_own'));
  124. $context['can_sticky'] = allowedTo('make_sticky') && !empty($modSettings['enableStickyTopics']);
  125. $context['notify'] = !empty($context['notify']);
  126. $context['sticky'] = isset($_REQUEST['sticky']) ? !empty($_REQUEST['sticky']) : $sticky;
  127. }
  128. else
  129. {
  130. $context['becomes_approved'] = true;
  131. if ((!$context['make_event'] || !empty($board)))
  132. {
  133. if ($modSettings['postmod_active'] && !allowedTo('post_new') && allowedTo('post_unapproved_topics'))
  134. $context['becomes_approved'] = false;
  135. else
  136. isAllowedTo('post_new');
  137. }
  138. $locked = 0;
  139. // @todo These won't work if you're making an event.
  140. $context['can_lock'] = allowedTo(array('lock_any', 'lock_own'));
  141. $context['can_sticky'] = allowedTo('make_sticky') && !empty($modSettings['enableStickyTopics']);
  142. $context['notify'] = !empty($context['notify']);
  143. $context['sticky'] = !empty($_REQUEST['sticky']);
  144. }
  145. // @todo These won't work if you're posting an event!
  146. $context['can_notify'] = allowedTo('mark_any_notify');
  147. $context['can_move'] = allowedTo('move_any');
  148. $context['move'] = !empty($_REQUEST['move']);
  149. $context['announce'] = !empty($_REQUEST['announce']);
  150. // You can only announce topics that will get approved...
  151. $context['can_announce'] = allowedTo('announce_topic') && $context['becomes_approved'];
  152. $context['locked'] = !empty($locked) || !empty($_REQUEST['lock']);
  153. $context['can_quote'] = empty($modSettings['disabledBBC']) || !in_array('quote', explode(',', $modSettings['disabledBBC']));
  154. // Generally don't show the approval box... (Assume we want things approved)
  155. $context['show_approval'] = false;
  156. // An array to hold all the attachments for this topic.
  157. $context['current_attachments'] = array();
  158. // Don't allow a post if it's locked and you aren't all powerful.
  159. if ($locked && !allowedTo('moderate_board'))
  160. fatal_lang_error('topic_locked', false);
  161. // Check the users permissions - is the user allowed to add or post a poll?
  162. if (isset($_REQUEST['poll']) && $modSettings['pollMode'] == '1')
  163. {
  164. // New topic, new poll.
  165. if (empty($topic))
  166. isAllowedTo('poll_post');
  167. // This is an old topic - but it is yours! Can you add to it?
  168. elseif ($user_info['id'] == $id_member_poster && !allowedTo('poll_add_any'))
  169. isAllowedTo('poll_add_own');
  170. // If you're not the owner, can you add to any poll?
  171. else
  172. isAllowedTo('poll_add_any');
  173. require_once($sourcedir . '/Subs-Members.php');
  174. $allowedVoteGroups = groupsAllowedTo('poll_vote', $board);
  175. // Set up the poll options.
  176. $context['poll_options'] = array(
  177. 'max_votes' => empty($_POST['poll_max_votes']) ? '1' : max(1, $_POST['poll_max_votes']),
  178. 'hide' => empty($_POST['poll_hide']) ? 0 : $_POST['poll_hide'],
  179. 'expire' => !isset($_POST['poll_expire']) ? '' : $_POST['poll_expire'],
  180. 'change_vote' => isset($_POST['poll_change_vote']),
  181. 'guest_vote' => isset($_POST['poll_guest_vote']),
  182. 'guest_vote_enabled' => in_array(-1, $allowedVoteGroups['allowed']),
  183. );
  184. // Make all five poll choices empty.
  185. $context['choices'] = array(
  186. array('id' => 0, 'number' => 1, 'label' => '', 'is_last' => false),
  187. array('id' => 1, 'number' => 2, 'label' => '', 'is_last' => false),
  188. array('id' => 2, 'number' => 3, 'label' => '', 'is_last' => false),
  189. array('id' => 3, 'number' => 4, 'label' => '', 'is_last' => false),
  190. array('id' => 4, 'number' => 5, 'label' => '', 'is_last' => true)
  191. );
  192. $context['last_choice_id'] = 4;
  193. }
  194. if ($context['make_event'])
  195. {
  196. // They might want to pick a board.
  197. if (!isset($context['current_board']))
  198. $context['current_board'] = 0;
  199. // Start loading up the event info.
  200. $context['event'] = array();
  201. $context['event']['title'] = isset($_REQUEST['evtitle']) ? htmlspecialchars(stripslashes($_REQUEST['evtitle'])) : '';
  202. $context['event']['id'] = isset($_REQUEST['eventid']) ? (int) $_REQUEST['eventid'] : -1;
  203. $context['event']['new'] = $context['event']['id'] == -1;
  204. // Permissions check!
  205. isAllowedTo('calendar_post');
  206. // Editing an event? (but NOT previewing!?)
  207. if (empty($context['event']['new']) && !isset($_REQUEST['subject']))
  208. {
  209. // If the user doesn't have permission to edit the post in this topic, redirect them.
  210. if ((empty($id_member_poster) || $id_member_poster != $user_info['id'] || !allowedTo('modify_own')) && !allowedTo('modify_any'))
  211. {
  212. require_once($sourcedir . '/Calendar.php');
  213. return CalendarPost();
  214. }
  215. // Get the current event information.
  216. $request = $smcFunc['db_query']('', '
  217. SELECT
  218. id_member, title, MONTH(start_date) AS month, DAYOFMONTH(start_date) AS day,
  219. YEAR(start_date) AS year, (TO_DAYS(end_date) - TO_DAYS(start_date)) AS span
  220. FROM {db_prefix}calendar
  221. WHERE id_event = {int:id_event}
  222. LIMIT 1',
  223. array(
  224. 'id_event' => $context['event']['id'],
  225. )
  226. );
  227. $row = $smcFunc['db_fetch_assoc']($request);
  228. $smcFunc['db_free_result']($request);
  229. // Make sure the user is allowed to edit this event.
  230. if ($row['id_member'] != $user_info['id'])
  231. isAllowedTo('calendar_edit_any');
  232. elseif (!allowedTo('calendar_edit_any'))
  233. isAllowedTo('calendar_edit_own');
  234. $context['event']['month'] = $row['month'];
  235. $context['event']['day'] = $row['day'];
  236. $context['event']['year'] = $row['year'];
  237. $context['event']['title'] = $row['title'];
  238. $context['event']['span'] = $row['span'] + 1;
  239. }
  240. else
  241. {
  242. $today = getdate();
  243. // You must have a month and year specified!
  244. if (!isset($_REQUEST['month']))
  245. $_REQUEST['month'] = $today['mon'];
  246. if (!isset($_REQUEST['year']))
  247. $_REQUEST['year'] = $today['year'];
  248. $context['event']['month'] = (int) $_REQUEST['month'];
  249. $context['event']['year'] = (int) $_REQUEST['year'];
  250. $context['event']['day'] = isset($_REQUEST['day']) ? $_REQUEST['day'] : ($_REQUEST['month'] == $today['mon'] ? $today['mday'] : 0);
  251. $context['event']['span'] = isset($_REQUEST['span']) ? $_REQUEST['span'] : 1;
  252. // Make sure the year and month are in the valid range.
  253. if ($context['event']['month'] < 1 || $context['event']['month'] > 12)
  254. fatal_lang_error('invalid_month', false);
  255. if ($context['event']['year'] < $modSettings['cal_minyear'] || $context['event']['year'] > $modSettings['cal_maxyear'])
  256. fatal_lang_error('invalid_year', false);
  257. // Get a list of boards they can post in.
  258. $boards = boardsAllowedTo('post_new');
  259. if (empty($boards))
  260. fatal_lang_error('cannot_post_new', 'user');
  261. // Load a list of boards for this event in the context.
  262. require_once($sourcedir . '/Subs-MessageIndex.php');
  263. $boardListOptions = array(
  264. 'included_boards' => in_array(0, $boards) ? null : $boards,
  265. 'not_redirection' => true,
  266. 'use_permissions' => true,
  267. 'selected_board' => empty($context['current_board']) ? $modSettings['cal_defaultboard'] : $context['current_board'],
  268. );
  269. $context['event']['categories'] = getBoardList($boardListOptions);
  270. }
  271. // Find the last day of the month.
  272. $context['event']['last_day'] = (int) strftime('%d', mktime(0, 0, 0, $context['event']['month'] == 12 ? 1 : $context['event']['month'] + 1, 0, $context['event']['month'] == 12 ? $context['event']['year'] + 1 : $context['event']['year']));
  273. $context['event']['board'] = !empty($board) ? $board : $modSettings['cal_defaultboard'];
  274. }
  275. if (empty($context['post_errors']))
  276. $context['post_errors'] = array();
  277. // See if any new replies have come along.
  278. // Huh, $_REQUEST['msg'] is set upon submit, so this doesn't get executed at submit
  279. // only at preview
  280. if (empty($_REQUEST['msg']) && !empty($topic))
  281. {
  282. if (empty($options['no_new_reply_warning']) && isset($_REQUEST['last_msg']) && $context['topic_last_message'] > $_REQUEST['last_msg'])
  283. {
  284. $request = $smcFunc['db_query']('', '
  285. SELECT COUNT(*)
  286. FROM {db_prefix}messages
  287. WHERE id_topic = {int:current_topic}
  288. AND id_msg > {int:last_msg}' . (!$modSettings['postmod_active'] || allowedTo('approve_posts') ? '' : '
  289. AND approved = {int:approved}') . '
  290. LIMIT 1',
  291. array(
  292. 'current_topic' => $topic,
  293. 'last_msg' => (int) $_REQUEST['last_msg'],
  294. 'approved' => 1,
  295. )
  296. );
  297. list ($context['new_replies']) = $smcFunc['db_fetch_row']($request);
  298. $smcFunc['db_free_result']($request);
  299. if (!empty($context['new_replies']))
  300. {
  301. if ($context['new_replies'] == 1)
  302. $txt['error_new_reply'] = isset($_GET['last_msg']) ? $txt['error_new_reply_reading'] : $txt['error_new_reply'];
  303. else
  304. $txt['error_new_replies'] = sprintf(isset($_GET['last_msg']) ? $txt['error_new_replies_reading'] : $txt['error_new_replies'], $context['new_replies']);
  305. // If they've come from the display page then we treat the error differently....
  306. if (isset($_GET['last_msg']))
  307. $newRepliesError = $context['new_replies'];
  308. else
  309. $context['post_error'][$context['new_replies'] == 1 ? 'new_reply' : 'new_replies'] = true;
  310. $modSettings['topicSummaryPosts'] = $context['new_replies'] > $modSettings['topicSummaryPosts'] ? max($modSettings['topicSummaryPosts'], 5) : $modSettings['topicSummaryPosts'];
  311. }
  312. }
  313. // Check whether this is a really old post being bumped...
  314. if (!empty($modSettings['oldTopicDays']) && $lastPostTime + $modSettings['oldTopicDays'] * 86400 < time() && empty($sticky) && !isset($_REQUEST['subject']))
  315. $oldTopicError = true;
  316. }
  317. // Get a response prefix (like 'Re:') in the default forum language.
  318. if (!isset($context['response_prefix']) && !($context['response_prefix'] = cache_get_data('response_prefix')))
  319. {
  320. if ($language === $user_info['language'])
  321. $context['response_prefix'] = $txt['response_prefix'];
  322. else
  323. {
  324. loadLanguage('index', $language, false);
  325. $context['response_prefix'] = $txt['response_prefix'];
  326. loadLanguage('index');
  327. }
  328. cache_put_data('response_prefix', $context['response_prefix'], 600);
  329. }
  330. // Previewing, modifying, or posting?
  331. // Do we have a body, but an error happened.
  332. if (isset($_REQUEST['message']) || !empty($context['post_error']))
  333. {
  334. // Validate inputs.
  335. if (empty($context['post_error']))
  336. {
  337. if (htmltrim__recursive(htmlspecialchars__recursive($_REQUEST['subject'])) == '')
  338. $context['post_error']['no_subject'] = true;
  339. if (htmltrim__recursive(htmlspecialchars__recursive($_REQUEST['message'])) == '')
  340. $context['post_error']['no_message'] = true;
  341. if (!empty($modSettings['max_messageLength']) && $smcFunc['strlen']($_REQUEST['message']) > $modSettings['max_messageLength'])
  342. $context['post_error']['long_message'] = true;
  343. // Are you... a guest?
  344. if ($user_info['is_guest'])
  345. {
  346. $_REQUEST['guestname'] = !isset($_REQUEST['guestname']) ? '' : trim($_REQUEST['guestname']);
  347. $_REQUEST['email'] = !isset($_REQUEST['email']) ? '' : trim($_REQUEST['email']);
  348. // Validate the name and email.
  349. if (!isset($_REQUEST['guestname']) || trim(strtr($_REQUEST['guestname'], '_', ' ')) == '')
  350. $context['post_error']['no_name'] = true;
  351. elseif ($smcFunc['strlen']($_REQUEST['guestname']) > 25)
  352. $context['post_error']['long_name'] = true;
  353. else
  354. {
  355. require_once($sourcedir . '/Subs-Members.php');
  356. if (isReservedName(htmlspecialchars($_REQUEST['guestname']), 0, true, false))
  357. $context['post_error']['bad_name'] = true;
  358. }
  359. if (empty($modSettings['guest_post_no_email']))
  360. {
  361. if (!isset($_REQUEST['email']) || $_REQUEST['email'] == '')
  362. $context['post_error']['no_email'] = true;
  363. elseif (preg_match('~^[0-9A-Za-z=_+\-/][0-9A-Za-z=_\'+\-/\.]*@[\w\-]+(\.[\w\-]+)*(\.[\w]{2,6})$~', $_REQUEST['email']) == 0)
  364. $context['post_error']['bad_email'] = true;
  365. }
  366. }
  367. // This is self explanatory - got any questions?
  368. if (isset($_REQUEST['question']) && trim($_REQUEST['question']) == '')
  369. $context['post_error']['no_question'] = true;
  370. // This means they didn't click Post and get an error.
  371. $really_previewing = true;
  372. }
  373. else
  374. {
  375. if (!isset($_REQUEST['subject']))
  376. $_REQUEST['subject'] = '';
  377. if (!isset($_REQUEST['message']))
  378. $_REQUEST['message'] = '';
  379. if (!isset($_REQUEST['icon']))
  380. $_REQUEST['icon'] = 'xx';
  381. // They are previewing if they asked to preview (i.e. came from quick reply).
  382. $really_previewing = !empty($_POST['preview']);
  383. }
  384. // In order to keep the approval status flowing through, we have to pass it through the form...
  385. $context['becomes_approved'] = empty($_REQUEST['not_approved']);
  386. $context['show_approval'] = isset($_REQUEST['approve']) ? ($_REQUEST['approve'] ? 2 : 1) : 0;
  387. $context['can_announce'] &= $context['becomes_approved'];
  388. // Set up the inputs for the form.
  389. $form_subject = strtr($smcFunc['htmlspecialchars']($_REQUEST['subject']), array("\r" => '', "\n" => '', "\t" => ''));
  390. $form_message = $smcFunc['htmlspecialchars']($_REQUEST['message'], ENT_QUOTES);
  391. // Make sure the subject isn't too long - taking into account special characters.
  392. if ($smcFunc['strlen']($form_subject) > 100)
  393. $form_subject = $smcFunc['substr']($form_subject, 0, 100);
  394. // Have we inadvertently trimmed off the subject of useful information?
  395. if ($smcFunc['htmltrim']($form_subject) === '')
  396. $context['post_error']['no_subject'] = true;
  397. // Any errors occurred?
  398. if (!empty($context['post_error']))
  399. {
  400. loadLanguage('Errors');
  401. $context['error_type'] = 'minor';
  402. $context['post_error']['messages'] = array();
  403. foreach ($context['post_error'] as $post_error => $dummy)
  404. {
  405. if ($post_error == 'messages')
  406. continue;
  407. if ($post_error == 'long_message')
  408. $txt['error_' . $post_error] = sprintf($txt['error_' . $post_error], $modSettings['max_messageLength']);
  409. $context['post_error']['messages'][] = $txt['error_' . $post_error];
  410. // If it's not a minor error flag it as such.
  411. if (!in_array($post_error, array('new_reply', 'not_approved', 'new_replies', 'old_topic', 'need_qr_verification', 'no_subject')))
  412. $context['error_type'] = 'serious';
  413. }
  414. }
  415. if (isset($_REQUEST['poll']))
  416. {
  417. $context['question'] = isset($_REQUEST['question']) ? $smcFunc['htmlspecialchars'](trim($_REQUEST['question'])) : '';
  418. $context['choices'] = array();
  419. $choice_id = 0;
  420. $_POST['options'] = empty($_POST['options']) ? array() : htmlspecialchars__recursive($_POST['options']);
  421. foreach ($_POST['options'] as $option)
  422. {
  423. if (trim($option) == '')
  424. continue;
  425. $context['choices'][] = array(
  426. 'id' => $choice_id++,
  427. 'number' => $choice_id,
  428. 'label' => $option,
  429. 'is_last' => false
  430. );
  431. }
  432. // One empty option for those with js disabled...I know are few... :P
  433. $context['choices'][] = array(
  434. 'id' => $choice_id++,
  435. 'number' => $choice_id,
  436. 'label' => '',
  437. 'is_last' => false
  438. );
  439. if (count($context['choices']) < 2)
  440. {
  441. $context['choices'][] = array(
  442. 'id' => $choice_id++,
  443. 'number' => $choice_id,
  444. 'label' => '',
  445. 'is_last' => false
  446. );
  447. }
  448. $context['last_choice_id'] = $choice_id;
  449. $context['choices'][count($context['choices']) - 1]['is_last'] = true;
  450. }
  451. // Are you... a guest?
  452. if ($user_info['is_guest'])
  453. {
  454. $_REQUEST['guestname'] = !isset($_REQUEST['guestname']) ? '' : trim($_REQUEST['guestname']);
  455. $_REQUEST['email'] = !isset($_REQUEST['email']) ? '' : trim($_REQUEST['email']);
  456. $_REQUEST['guestname'] = htmlspecialchars($_REQUEST['guestname']);
  457. $context['name'] = $_REQUEST['guestname'];
  458. $_REQUEST['email'] = htmlspecialchars($_REQUEST['email']);
  459. $context['email'] = $_REQUEST['email'];
  460. $user_info['name'] = $_REQUEST['guestname'];
  461. }
  462. // Only show the preview stuff if they hit Preview.
  463. if ($really_previewing == true || isset($_REQUEST['xml']))
  464. {
  465. // Set up the preview message and subject and censor them...
  466. $context['preview_message'] = $form_message;
  467. preparsecode($form_message, true);
  468. preparsecode($context['preview_message']);
  469. // Do all bulletin board code tags, with or without smileys.
  470. $context['preview_message'] = parse_bbc($context['preview_message'], isset($_REQUEST['ns']) ? 0 : 1);
  471. censorText($context['preview_message']);
  472. if ($form_subject != '')
  473. {
  474. $context['preview_subject'] = $form_subject;
  475. censorText($context['preview_subject']);
  476. }
  477. else
  478. $context['preview_subject'] = '<em>' . $txt['no_subject'] . '</em>';
  479. // Protect any CDATA blocks.
  480. if (isset($_REQUEST['xml']))
  481. $context['preview_message'] = strtr($context['preview_message'], array(']]>' => ']]]]><![CDATA[>'));
  482. }
  483. // Set up the checkboxes.
  484. $context['notify'] = !empty($_REQUEST['notify']);
  485. $context['use_smileys'] = !isset($_REQUEST['ns']);
  486. $context['icon'] = isset($_REQUEST['icon']) ? preg_replace('~[\./\\\\*\':"<>]~', '', $_REQUEST['icon']) : 'xx';
  487. // Set the destination action for submission.
  488. $context['destination'] = 'post2;start=' . $_REQUEST['start'] . (isset($_REQUEST['msg']) ? ';msg=' . $_REQUEST['msg'] . ';' . $context['session_var'] . '=' . $context['session_id'] : '') . (isset($_REQUEST['poll']) ? ';poll' : '');
  489. $context['submit_label'] = isset($_REQUEST['msg']) ? $txt['save'] : $txt['post'];
  490. // Previewing an edit?
  491. if (isset($_REQUEST['msg']) && !empty($topic))
  492. {
  493. // Get the existing message.
  494. $request = $smcFunc['db_query']('', '
  495. SELECT
  496. m.id_member, m.modified_time, m.smileys_enabled, m.body,
  497. m.poster_name, m.poster_email, m.subject, m.icon, m.approved,
  498. IFNULL(a.size, -1) AS filesize, a.filename, a.id_attach,
  499. a.approved AS attachment_approved, t.id_member_started AS id_member_poster,
  500. m.poster_time
  501. FROM {db_prefix}messages AS m
  502. INNER JOIN {db_prefix}topics AS t ON (t.id_topic = {int:current_topic})
  503. LEFT JOIN {db_prefix}attachments AS a ON (a.id_msg = m.id_msg AND a.attachment_type = {int:attachment_type})
  504. WHERE m.id_msg = {int:id_msg}
  505. AND m.id_topic = {int:current_topic}',
  506. array(
  507. 'current_topic' => $topic,
  508. 'attachment_type' => 0,
  509. 'id_msg' => $_REQUEST['msg'],
  510. )
  511. );
  512. // The message they were trying to edit was most likely deleted.
  513. // @todo Change this error message?
  514. if ($smcFunc['db_num_rows']($request) == 0)
  515. fatal_lang_error('no_board', false);
  516. $row = $smcFunc['db_fetch_assoc']($request);
  517. $attachment_stuff = array($row);
  518. while ($row2 = $smcFunc['db_fetch_assoc']($request))
  519. $attachment_stuff[] = $row2;
  520. $smcFunc['db_free_result']($request);
  521. if ($row['id_member'] == $user_info['id'] && !allowedTo('modify_any'))
  522. {
  523. // Give an extra five minutes over the disable time threshold, so they can type - assuming the post is public.
  524. if ($row['approved'] && !empty($modSettings['edit_disable_time']) && $row['poster_time'] + ($modSettings['edit_disable_time'] + 5) * 60 < time())
  525. fatal_lang_error('modify_post_time_passed', false);
  526. elseif ($row['id_member_poster'] == $user_info['id'] && !allowedTo('modify_own'))
  527. isAllowedTo('modify_replies');
  528. else
  529. isAllowedTo('modify_own');
  530. }
  531. elseif ($row['id_member_poster'] == $user_info['id'] && !allowedTo('modify_any'))
  532. isAllowedTo('modify_replies');
  533. else
  534. isAllowedTo('modify_any');
  535. if (!empty($modSettings['attachmentEnable']))
  536. {
  537. $request = $smcFunc['db_query']('', '
  538. SELECT IFNULL(size, -1) AS filesize, filename, id_attach, approved
  539. FROM {db_prefix}attachments
  540. WHERE id_msg = {int:id_msg}
  541. AND attachment_type = {int:attachment_type}
  542. ORDER BY id_attach',
  543. array(
  544. 'id_msg' => (int) $_REQUEST['msg'],
  545. 'attachment_type' => 0,
  546. )
  547. );
  548. while ($row = $smcFunc['db_fetch_assoc']($request))
  549. {
  550. if ($row['filesize'] <= 0)
  551. continue;
  552. $context['current_attachments'][] = array(
  553. 'name' => htmlspecialchars($row['filename']),
  554. 'size' => $row['filesize'],
  555. 'id' => $row['id_attach'],
  556. 'approved' => $row['approved'],
  557. );
  558. }
  559. $smcFunc['db_free_result']($request);
  560. }
  561. // Allow moderators to change names....
  562. if (allowedTo('moderate_forum') && !empty($topic))
  563. {
  564. $request = $smcFunc['db_query']('', '
  565. SELECT id_member, poster_name, poster_email
  566. FROM {db_prefix}messages
  567. WHERE id_msg = {int:id_msg}
  568. AND id_topic = {int:current_topic}
  569. LIMIT 1',
  570. array(
  571. 'current_topic' => $topic,
  572. 'id_msg' => (int) $_REQUEST['msg'],
  573. )
  574. );
  575. $row = $smcFunc['db_fetch_assoc']($request);
  576. $smcFunc['db_free_result']($request);
  577. if (empty($row['id_member']))
  578. {
  579. $context['name'] = htmlspecialchars($row['poster_name']);
  580. $context['email'] = htmlspecialchars($row['poster_email']);
  581. }
  582. }
  583. }
  584. // No check is needed, since nothing is really posted.
  585. checkSubmitOnce('free');
  586. }
  587. // Editing a message...
  588. elseif (isset($_REQUEST['msg']) && !empty($topic))
  589. {
  590. $_REQUEST['msg'] = (int) $_REQUEST['msg'];
  591. // Get the existing message.
  592. $request = $smcFunc['db_query']('', '
  593. SELECT
  594. m.id_member, m.modified_time, m.smileys_enabled, m.body,
  595. m.poster_name, m.poster_email, m.subject, m.icon, m.approved,
  596. IFNULL(a.size, -1) AS filesize, a.filename, a.id_attach,
  597. a.approved AS attachment_approved, t.id_member_started AS id_member_poster,
  598. m.poster_time
  599. FROM {db_prefix}messages AS m
  600. INNER JOIN {db_prefix}topics AS t ON (t.id_topic = {int:current_topic})
  601. LEFT JOIN {db_prefix}attachments AS a ON (a.id_msg = m.id_msg AND a.attachment_type = {int:attachment_type})
  602. WHERE m.id_msg = {int:id_msg}
  603. AND m.id_topic = {int:current_topic}',
  604. array(
  605. 'current_topic' => $topic,
  606. 'attachment_type' => 0,
  607. 'id_msg' => $_REQUEST['msg'],
  608. )
  609. );
  610. // The message they were trying to edit was most likely deleted.
  611. //@todo Change this error message?
  612. if ($smcFunc['db_num_rows']($request) == 0)
  613. fatal_lang_error('no_board', false);
  614. $row = $smcFunc['db_fetch_assoc']($request);
  615. $attachment_stuff = array($row);
  616. while ($row2 = $smcFunc['db_fetch_assoc']($request))
  617. $attachment_stuff[] = $row2;
  618. $smcFunc['db_free_result']($request);
  619. if ($row['id_member'] == $user_info['id'] && !allowedTo('modify_any'))
  620. {
  621. // Give an extra five minutes over the disable time threshold, so they can type - assuming the post is public.
  622. if ($row['approved'] && !empty($modSettings['edit_disable_time']) && $row['poster_time'] + ($modSettings['edit_disable_time'] + 5) * 60 < time())
  623. fatal_lang_error('modify_post_time_passed', false);
  624. elseif ($row['id_member_poster'] == $user_info['id'] && !allowedTo('modify_own'))
  625. isAllowedTo('modify_replies');
  626. else
  627. isAllowedTo('modify_own');
  628. }
  629. elseif ($row['id_member_poster'] == $user_info['id'] && !allowedTo('modify_any'))
  630. isAllowedTo('modify_replies');
  631. else
  632. isAllowedTo('modify_any');
  633. // When was it last modified?
  634. if (!empty($row['modified_time']))
  635. $context['last_modified'] = timeformat($row['modified_time']);
  636. // Get the stuff ready for the form.
  637. $form_subject = $row['subject'];
  638. $form_message = un_preparsecode($row['body']);
  639. censorText($form_message);
  640. censorText($form_subject);
  641. // Check the boxes that should be checked.
  642. $context['use_smileys'] = !empty($row['smileys_enabled']);
  643. $context['icon'] = $row['icon'];
  644. // Show an "approve" box if the user can approve it, and the message isn't approved.
  645. if (!$row['approved'] && !$context['show_approval'])
  646. $context['show_approval'] = allowedTo('approve_posts');
  647. // Sort the attachments so they are in the order saved
  648. $temp = array();
  649. foreach ($attachment_stuff as $attachment)
  650. {
  651. if ($attachment['filesize'] >= 0 && !empty($modSettings['attachmentEnable']))
  652. $temp[$attachment['id_attach']] = $attachment;
  653. }
  654. ksort($temp);
  655. // Load up 'em attachments!
  656. foreach ($temp as $attachment)
  657. {
  658. $context['current_attachments'][] = array(
  659. 'name' => htmlspecialchars($attachment['filename']),
  660. 'size' => $attachment['filesize'],
  661. 'id' => $attachment['id_attach'],
  662. 'approved' => $attachment['attachment_approved'],
  663. );
  664. }
  665. // Allow moderators to change names....
  666. if (allowedTo('moderate_forum') && empty($row['id_member']))
  667. {
  668. $context['name'] = htmlspecialchars($row['poster_name']);
  669. $context['email'] = htmlspecialchars($row['poster_email']);
  670. }
  671. // Set the destinaton.
  672. $context['destination'] = 'post2;start=' . $_REQUEST['start'] . ';msg=' . $_REQUEST['msg'] . ';' . $context['session_var'] . '=' . $context['session_id'] . (isset($_REQUEST['poll']) ? ';poll' : '');
  673. $context['submit_label'] = $txt['save'];
  674. }
  675. // Posting...
  676. else
  677. {
  678. // By default....
  679. $context['use_smileys'] = true;
  680. $context['icon'] = 'xx';
  681. if ($user_info['is_guest'])
  682. {
  683. $context['name'] = isset($_SESSION['guest_name']) ? $_SESSION['guest_name'] : '';
  684. $context['email'] = isset($_SESSION['guest_email']) ? $_SESSION['guest_email'] : '';
  685. }
  686. $context['destination'] = 'post2;start=' . $_REQUEST['start'] . (isset($_REQUEST['poll']) ? ';poll' : '');
  687. $context['submit_label'] = $txt['post'];
  688. // Posting a quoted reply?
  689. if (!empty($topic) && !empty($_REQUEST['quote']))
  690. {
  691. // Make sure they _can_ quote this post, and if so get it.
  692. $request = $smcFunc['db_query']('', '
  693. SELECT m.subject, IFNULL(mem.real_name, m.poster_name) AS poster_name, m.poster_time, m.body
  694. FROM {db_prefix}messages AS m
  695. INNER JOIN {db_prefix}boards AS b ON (b.id_board = m.id_board AND {query_see_board})
  696. LEFT JOIN {db_prefix}members AS mem ON (mem.id_member = m.id_member)
  697. WHERE m.id_msg = {int:id_msg}' . (!$modSettings['postmod_active'] || allowedTo('approve_posts') ? '' : '
  698. AND m.approved = {int:is_approved}') . '
  699. LIMIT 1',
  700. array(
  701. 'id_msg' => (int) $_REQUEST['quote'],
  702. 'is_approved' => 1,
  703. )
  704. );
  705. if ($smcFunc['db_num_rows']($request) == 0)
  706. fatal_lang_error('quoted_post_deleted', false);
  707. list ($form_subject, $mname, $mdate, $form_message) = $smcFunc['db_fetch_row']($request);
  708. $smcFunc['db_free_result']($request);
  709. // Add 'Re: ' to the front of the quoted subject.
  710. if (trim($context['response_prefix']) != '' && $smcFunc['strpos']($form_subject, trim($context['response_prefix'])) !== 0)
  711. $form_subject = $context['response_prefix'] . $form_subject;
  712. // Censor the message and subject.
  713. censorText($form_message);
  714. censorText($form_subject);
  715. // But if it's in HTML world, turn them into htmlspecialchar's so they can be edited!
  716. if (strpos($form_message, '[html]') !== false)
  717. {
  718. $parts = preg_split('~(\[/code\]|\[code(?:=[^\]]+)?\])~i', $form_message, -1, PREG_SPLIT_DELIM_CAPTURE);
  719. for ($i = 0, $n = count($parts); $i < $n; $i++)
  720. {
  721. // It goes 0 = outside, 1 = begin tag, 2 = inside, 3 = close tag, repeat.
  722. if ($i % 4 == 0)
  723. $parts[$i] = preg_replace('~\[html\](.+?)\[/html\]~ise', '\'[html]\' . preg_replace(\'~<br\s?/?' . '>~i\', \'&lt;br /&gt;<br />\', \'$1\') . \'[/html]\'', $parts[$i]);
  724. }
  725. $form_message = implode('', $parts);
  726. }
  727. $form_message = preg_replace('~<br ?/?' . '>~i', "\n", $form_message);
  728. // Remove any nested quotes, if necessary.
  729. if (!empty($modSettings['removeNestedQuotes']))
  730. $form_message = preg_replace(array('~\n?\[quote.*?\].+?\[/quote\]\n?~is', '~^\n~', '~\[/quote\]~'), '', $form_message);
  731. // Add a quote string on the front and end.
  732. $form_message = '[quote author=' . $mname . ' link=topic=' . $topic . '.msg' . (int) $_REQUEST['quote'] . '#msg' . (int) $_REQUEST['quote'] . ' date=' . $mdate . ']' . "\n" . rtrim($form_message) . "\n" . '[/quote]';
  733. }
  734. // Posting a reply without a quote?
  735. elseif (!empty($topic) && empty($_REQUEST['quote']))
  736. {
  737. // Get the first message's subject.
  738. $form_subject = $first_subject;
  739. // Add 'Re: ' to the front of the subject.
  740. if (trim($context['response_prefix']) != '' && $form_subject != '' && $smcFunc['strpos']($form_subject, trim($context['response_prefix'])) !== 0)
  741. $form_subject = $context['response_prefix'] . $form_subject;
  742. // Censor the subject.
  743. censorText($form_subject);
  744. $form_message = '';
  745. }
  746. else
  747. {
  748. $form_subject = isset($_GET['subject']) ? $_GET['subject'] : '';
  749. $form_message = '';
  750. }
  751. }
  752. $context['can_post_attachment'] = !empty($modSettings['attachmentEnable']) && $modSettings['attachmentEnable'] == 1 && (allowedTo('post_attachment') || ($modSettings['postmod_active'] && allowedTo('post_unapproved_attachments')));
  753. if ($context['can_post_attachment'])
  754. {
  755. // If there are attachments, calculate the total size and how many.
  756. $context['attachments']['total_size'] = 0;
  757. $context['attachments']['quantity'] = 0;
  758. if (!empty($context['current_attachments']))
  759. if (!empty($modSettings['currentAttachmentUploadDir']))
  760. {
  761. if (!is_array($modSettings['attachmentUploadDir']))
  762. $modSettings['attachmentUploadDir'] = unserialize($modSettings['attachmentUploadDir']);
  763. // Just use the current path for temp files.
  764. $current_attach_dir = $modSettings['attachmentUploadDir'][$modSettings['currentAttachmentUploadDir']];
  765. }
  766. else
  767. $current_attach_dir = $modSettings['attachmentUploadDir'];
  768. // If this isn't a new post, check the current attachments.
  769. if (isset($_REQUEST['msg']))
  770. {
  771. $context['attachments']['quantity'] = count($context['current_attachments']);
  772. foreach ($context['current_attachments'] as $attachment)
  773. $context['attachments']['total_size'] += $attachment['size'];
  774. }
  775. // A bit of house keeping first.
  776. if (!empty($_SESSION['temp_attachments']) && count($_SESSION['temp_attachments']) == 1)
  777. unset($_SESSION['temp_attachments']);
  778. if (!empty($_SESSION['temp_attachments']))
  779. {
  780. // Is this a request to delete them?
  781. if (isset($_GET['delete_temp']))
  782. {
  783. foreach ($_SESSION['temp_attachments'] as $attachID => $attachment)
  784. {
  785. if (strpos($attachID, 'post_tmp_' . $user_info['id']) !== false)
  786. if (file_exists($attachment['tmp_name']))
  787. unlink($attachment['tmp_name']);
  788. }
  789. $context['post_error']['messages'][] = $txt['error_temp_attachments_gone'];
  790. $_SESSION['temp_attachments'] = array();
  791. }
  792. // Hmm, coming in fresh and there are files in session.
  793. elseif ($context['current_action'] != 'post2' || !empty($_POST['from_qr']))
  794. {
  795. // Let's be nice and see if they belong here first.
  796. if ((empty($_REQUEST['msg']) && empty($_SESSION['temp_attachments']['post']['msg']) && $_SESSION['temp_attachments']['post']['board'] == $board) || (!empty($_REQUEST['msg']) && $_SESSION['temp_attachments']['post']['msg'] == $_REQUEST['msg']))
  797. {
  798. // See if any files still exist before showing the warning message and the files attached.
  799. foreach ($_SESSION['temp_attachments'] as $attachID => $attachment)
  800. {
  801. if (strpos($attachID, 'post_tmp_' . $user_info['id']) === false)
  802. continue;
  803. if (file_exists($attachment['tmp_name']))
  804. {
  805. $context['post_error']['messages'][] = $txt['error_temp_attachments_new'];
  806. $context['files_in_session_warning'] = $txt['attached_files_in_session'];
  807. unset($_SESSION['temp_attachments']['post']['files']);
  808. break;
  809. }
  810. }
  811. }
  812. else
  813. {
  814. // Since, they don't belong here. Let's inform the user that they exist..
  815. if (!empty($topic))
  816. $delete_link = '<a href="' . $scripturl . '?action=post' .(!empty($_REQUEST['msg']) ? (';msg=' . $_REQUEST['msg']) : '') . (!empty($_REQUEST['last_msg']) ? (';last_msg=' . $_REQUEST['last_msg']) : '') . ';topic=' . $topic . ';delete_temp">' . $txt['here'] . '</a>';
  817. else
  818. $delete_link = '<a href="' . $scripturl . '?action=post;board=' . $board . ';delete_temp">' . $txt['here'] . '</a>';
  819. // Compile a list of the files to show the user.
  820. $file_list = array();
  821. foreach ($_SESSION['temp_attachments'] as $attachID => $attachment)
  822. if (strpos($attachID, 'post_tmp_' . $user_info['id']) !== false)
  823. $file_list[] = $attachment['name'];
  824. $_SESSION['temp_attachments']['post']['files'] = $file_list;
  825. $file_list = '<div class="attachments">' . implode('<br />', $file_list) . '</div>';
  826. if (!empty($_SESSION['temp_attachments']['post']['msg']))
  827. {
  828. // We have a message id, so we can link back to the old topic they were trying to edit..
  829. $goback_link = '<a href="' . $scripturl . '?action=post' .(!empty($_SESSION['temp_attachments']['post']['msg']) ? (';msg=' . $_SESSION['temp_attachments']['post']['msg']) : '') . (!empty($_SESSION['temp_attachments']['post']['last_msg']) ? (';last_msg=' . $_SESSION['temp_attachments']['post']['last_msg']) : '') . ';topic=' . $_SESSION['temp_attachments']['post']['topic'] . ';additionalOptions">' . $txt['here'] . '</a>';
  830. $context['post_error']['messages'][] = vsprintf($txt['error_temp_attachments_found'], array($delete_link, $goback_link, $file_list));
  831. $context['ignore_temp_attachments'] = true;
  832. }
  833. else
  834. {
  835. $context['post_error']['messages'][] = vsprintf($txt['error_temp_attachments_lost'], array($delete_link, $file_list));
  836. $context['ignore_temp_attachments'] = true;
  837. }
  838. }
  839. }
  840. if (!empty($context['we_are_history']))
  841. $context['post_error']['messages'][] = '<br />' . $context['we_are_history'];
  842. foreach ($_SESSION['temp_attachments'] as $attachID => $attachment)
  843. {
  844. if (isset($context['ignore_temp_attachments']) || isset($_SESSION['temp_attachments']['post']['files']))
  845. break;
  846. if ($attachID != 'initial_error' && strpos($attachID, 'post_tmp_' . $user_info['id']) === false)
  847. continue;
  848. if ($attachID == 'initial_error')
  849. {
  850. $context['post_error']['messages'][] = '<br />' . $txt['attach_no_upload'] . '<div style="padding: 0 1em;">' . (is_array($attachment) ? vsprintf($txt[$attachment[0]], $attachment[1]) : $txt[$attachment]) . '</div>';
  851. unset($_SESSION['temp_attachments']);
  852. break;
  853. }
  854. // Show any errors which might of occured.
  855. if (!empty($attachment['errors']))
  856. {
  857. $errors = empty($errors) ? '<br />' : '';
  858. $errors .= vsprintf($txt['attach_warning'], $attachment['name']) . '<div style="padding: 0 1em;">';
  859. foreach($attachment['errors'] as $error)
  860. $errors .= (is_array($error) ? vsprintf($txt[$error[0]], $error[1]) : $txt[$error]) . '<br />';
  861. $errors .= '</div>';
  862. $context['post_error']['messages'][] = $errors;
  863. // Take out the trash.
  864. unset($_SESSION['temp_attachments'][$attachID]);
  865. if (file_exists($attachment['tmp_name']))
  866. unlink($attachment['tmp_name']);
  867. continue;
  868. }
  869. // More house keeping.
  870. if (!file_exists($attachment['tmp_name']))
  871. {
  872. unset($_SESSION['temp_attachments'][$attachID]);
  873. continue;
  874. }
  875. $context['attachments']['quantity']++;
  876. $context['attachments']['total_size'] += $attachment['size'];
  877. if (!isset($context['files_in_session_warning']))
  878. $context['files_in_session_warning'] = $txt['attached_files_in_session'];
  879. $context['current_attachments'][] = array(
  880. 'name' => '<u>' . htmlspecialchars($attachment['name']) . '</u>',
  881. 'size' => $attachment['size'],
  882. 'id' => $attachID,
  883. 'unchecked' => false,
  884. 'approved' => 1,
  885. );
  886. }
  887. }
  888. }
  889. if (!empty($context['post_error']['messages']) && (isset($newRepliesError) || isset($oldTopicError)))
  890. $context['post_error']['messages'][] = '<br />';
  891. // If we are coming here to make a reply, and someone has already replied... make a special warning message.
  892. if (isset($newRepliesError))
  893. {
  894. $context['post_error']['messages'][] = $newRepliesError == 1 ? $txt['error_new_reply'] : $txt['error_new_replies'];
  895. $context['error_type'] = 'minor';
  896. }
  897. if (isset($oldTopicError))
  898. {
  899. $context['post_error']['messages'][] = sprintf($txt['error_old_topic'], $modSettings['oldTopicDays']);
  900. $context['error_type'] = 'minor';
  901. }
  902. // What are you doing? Posting a poll, modifying, previewing, new post, or reply...
  903. if (isset($_REQUEST['poll']))
  904. $context['page_title'] = $txt['new_poll'];
  905. elseif ($context['make_event'])
  906. $context['page_title'] = $context['event']['id'] == -1 ? $txt['calendar_post_event'] : $txt['calendar_edit'];
  907. elseif (isset($_REQUEST['msg']))
  908. $context['page_title'] = $txt['modify_msg'];
  909. elseif (isset($_REQUEST['subject'], $context['preview_subject']))
  910. $context['page_title'] = $txt['preview'] . ' - ' . strip_tags($context['preview_subject']);
  911. elseif (empty($topic))
  912. $context['page_title'] = $txt['start_new_topic'];
  913. else
  914. $context['page_title'] = $txt['post_reply'];
  915. // Build the link tree.
  916. if (empty($topic))
  917. $context['linktree'][] = array(
  918. 'name' => '<em>' . $txt['start_new_topic'] . '</em>'
  919. );
  920. else
  921. $context['linktree'][] = array(
  922. 'url' => $scripturl . '?topic=' . $topic . '.' . $_REQUEST['start'],
  923. 'name' => $form_subject,
  924. 'extra_before' => '<span><strong class="nav">' . $context['page_title'] . ' ( </strong></span>',
  925. 'extra_after' => '<span><strong class="nav"> )</strong></span>'
  926. );
  927. // Give wireless a linktree url to the post screen, so that they can switch to full version.
  928. if (WIRELESS)
  929. $context['linktree'][count($context['linktree']) - 1]['url'] = $scripturl . '?action=post;' . (!empty($topic) ? 'topic=' . $topic : 'board=' . $board) . '.' . $_REQUEST['start'] . (isset($_REQUEST['msg']) ? ';msg=' . (int) $_REQUEST['msg'] . ';' . $context['session_var'] . '=' . $context['session_id'] : '');
  930. $context['subject'] = addcslashes($form_subject, '"');
  931. $context['message'] = str_replace(array('"', '<', '>', '&nbsp;'), array('&quot;', '&lt;', '&gt;', ' '), $form_message);
  932. // Needed for the editor and message icons.
  933. require_once($sourcedir . '/Subs-Editor.php');
  934. // Now create the editor.
  935. $editorOptions = array(
  936. 'id' => 'message',
  937. 'value' => $context['message'],
  938. 'labels' => array(
  939. 'post_button' => $context['submit_label'],
  940. ),
  941. // add height and width for the editor
  942. 'height' => '175px',
  943. 'width' => '100%',
  944. // We do XML preview here.
  945. 'preview_type' => 2,
  946. );
  947. create_control_richedit($editorOptions);
  948. // Store the ID.
  949. $context['post_box_name'] = $editorOptions['id'];
  950. $context['attached'] = '';
  951. $context['make_poll'] = isset($_REQUEST['poll']);
  952. // Message icons - customized icons are off?
  953. $context['icons'] = getMessageIcons($board);
  954. if (!empty($context['icons']))
  955. $context['icons'][count($context['icons']) - 1]['is_last'] = true;
  956. // Are we starting a poll? if set the poll icon as selected if its available
  957. if (isset($_REQUEST['poll']))
  958. {
  959. foreach ($context['icons'] as $icons)
  960. {
  961. if (isset($icons['value']) && $icons['value'] == 'poll')
  962. {
  963. // if found we are done
  964. $context['icon'] = 'poll';
  965. break;
  966. }
  967. }
  968. }
  969. $context['icon_url'] = '';
  970. for ($i = 0, $n = count($context['icons']); $i < $n; $i++)
  971. {
  972. $context['icons'][$i]['selected'] = $context['icon'] == $context['icons'][$i]['value'];
  973. if ($context['icons'][$i]['selected'])
  974. $context['icon_url'] = $context['icons'][$i]['url'];
  975. }
  976. if (empty($context['icon_url']))
  977. {
  978. $context['icon_url'] = $settings[file_exists($settings['theme_dir'] . '/images/post/' . $context['icon'] . '.png') ? 'images_url' : 'default_images_url'] . '/post/' . $context['icon'] . '.png';
  979. array_unshift($context['icons'], array(
  980. 'value' => $context['icon'],
  981. 'name' => $txt['current_icon'],
  982. 'url' => $context['icon_url'],
  983. 'is_last' => empty($context['icons']),
  984. 'selected' => true,
  985. ));
  986. }
  987. if (!empty($topic) && !empty($modSettings['topicSummaryPosts']))
  988. getTopic();
  989. // If the user can post attachments prepare the warning labels.
  990. if ($context['can_post_attachment'])
  991. {
  992. // If they've unchecked an attachment, they may still want to attach that many more files, but don't allow more than num_allowed_attachments.
  993. $context['num_allowed_attachments'] = empty($modSettings['attachmentNumPerPostLimit']) ? 50 : min($modSettings['attachmentNumPerPostLimit'] - count($context['current_attachments']), $modSettings['attachmentNumPerPostLimit']);
  994. $context['can_post_attachment_unapproved'] = allowedTo('post_attachment');
  995. $context['attachment_restrictions'] = array();
  996. $context['allowed_extensions'] = strtr(strtolower($modSettings['attachmentExtensions']), array(',' => ', '));
  997. $attachmentRestrictionTypes = array('attachmentNumPerPostLimit', 'attachmentPostLimit', 'attachmentSizeLimit');
  998. foreach ($attachmentRestrictionTypes as $type)
  999. if (!empty($modSettings[$type]))
  1000. {
  1001. $context['attachment_restrictions'][] = sprintf($txt['attach_restrict_' . $type], comma_format($modSettings[$type], 0));
  1002. // Show some numbers. If they exist.
  1003. if ($type == 'attachmentNumPerPostLimit' && $context['attachments']['quantity'] > 0)
  1004. $context['attachment_restrictions'][] = sprintf($txt['attach_remaining'], $modSettings['attachmentNumPerPostLimit'] - $context['attachments']['quantity']);
  1005. elseif ($type == 'attachmentPostLimit' && $context['attachments']['total_size'] > 0)
  1006. $context['attachment_restrictions'][] = sprintf($txt['attach_available'], comma_format(round(max($modSettings['attachmentPostLimit'] - ($context['attachments']['total_size'] / 1028), 0)), 0));
  1007. }
  1008. }
  1009. $context['back_to_topic'] = isset($_REQUEST['goback']) || (isset($_REQUEST['msg']) && !isset($_REQUEST['subject']));
  1010. $context['show_additional_options'] = !empty($_POST['additional_options']) || isset($_SESSION['temp_attachments']['post']) || isset($_GET['additionalOptions']);
  1011. $context['is_new_topic'] = empty($topic);
  1012. $context['is_new_post'] = !isset($_REQUEST['msg']);
  1013. $context['is_first_post'] = $context['is_new_topic'] || (isset($_REQUEST['msg']) && $_REQUEST['msg'] == $id_first_msg);
  1014. // Do we need to show the visual verification image?
  1015. $context['require_verification'] = !$user_info['is_mod'] && !$user_info['is_admin'] && !empty($modSettings['posts_require_captcha']) && ($user_info['posts'] < $modSettings['posts_require_captcha'] || ($user_info['is_guest'] && $modSettings['posts_require_captcha'] == -1));
  1016. if ($context['require_verification'])
  1017. {
  1018. require_once($sourcedir . '/Subs-Editor.php');
  1019. $verificationOptions = array(
  1020. 'id' => 'post',
  1021. );
  1022. $context['require_verification'] = create_control_verification($verificationOptions);
  1023. $context['visual_verification_id'] = $verificationOptions['id'];
  1024. }
  1025. // If they came from quick reply, and have to enter verification details, give them some notice.
  1026. if (!empty($_REQUEST['from_qr']) && !empty($context['require_verification']))
  1027. {
  1028. $context['post_error']['messages'][] = $txt['enter_verification_details'];
  1029. $context['error_type'] = 'minor';
  1030. }
  1031. // WYSIWYG only works if BBC is enabled
  1032. $modSettings['disable_wysiwyg'] = !empty($modSettings['disable_wysiwyg']) || empty($modSettings['enableBBC']);
  1033. // Register this form in the session variables.
  1034. checkSubmitOnce('register');
  1035. // Finally, load the template.
  1036. if (WIRELESS && WIRELESS_PROTOCOL != 'wap')
  1037. $context['sub_template'] = WIRELESS_PROTOCOL . '_post';
  1038. elseif (!isset($_REQUEST['xml']))
  1039. loadTemplate('Post');
  1040. }
  1041. /**
  1042. * actually posts or saves the message composed with Post().
  1043. * requires various permissions depending on the action.
  1044. * handles attachment, post, and calendar saving.
  1045. * sends off notifications, and allows for announcements and moderation.
  1046. * accessed from ?action=post2.
  1047. */
  1048. function Post2()
  1049. {
  1050. global $board, $topic, $txt, $modSettings, $sourcedir, $context;
  1051. global $user_info, $board_info, $options, $smcFunc;
  1052. // Sneaking off, are we?
  1053. if (empty($_POST) && empty($topic))
  1054. {
  1055. if (empty($_SERVER['CONTENT_LENGTH']))
  1056. redirectexit('action=post;board=' . $board . '.0');
  1057. else
  1058. fatal_lang_error('post_upload_error', false);
  1059. }
  1060. elseif (empty($_POST) && !empty($topic))
  1061. redirectexit('action=post;topic=' . $topic . '.0');
  1062. // No need!
  1063. $context['robot_no_index'] = true;
  1064. // Any files to include for post?
  1065. if (!empty($modSettings['integrate_post_include']))
  1066. {
  1067. $post_includes = explode(',', $modSettings['integrate_post_include']);
  1068. foreach ($post_includes as $include)
  1069. {
  1070. $include = strtr(trim($include), array('$boarddir' => $boarddir, '$sourcedir' => $sourcedir, '$themedir' => $settings['theme_dir']));
  1071. if (file_exists($include))
  1072. require_once($include);
  1073. }
  1074. }
  1075. // If we came from WYSIWYG then turn it back into BBC regardless.
  1076. if (!empty($_REQUEST['message_mode']) && isset($_REQUEST['message']))
  1077. {
  1078. require_once($sourcedir . '/Subs-Editor.php');
  1079. $_REQUEST['message'] = html_to_bbc($_REQUEST['message']);
  1080. // We need to unhtml it now as it gets done shortly.
  1081. $_REQUEST['message'] = un_htmlspecialchars($_REQUEST['message']);
  1082. // We need this for everything else.
  1083. $_POST['message'] = $_REQUEST['message'];
  1084. }
  1085. // Previewing? Go back to start.
  1086. if (isset($_REQUEST['preview']))
  1087. return Post();
  1088. // Prevent double submission of this form.
  1089. checkSubmitOnce('check');
  1090. // No errors as yet.
  1091. $post_errors = array();
  1092. // If the session has timed out, let the user re-submit their form.
  1093. if (checkSession('post', '', false) != '')
  1094. $post_errors[] = 'session_timeout';
  1095. // Wrong verification code?
  1096. if (!$user_info['is_admin'] && !$user_info['is_mod'] && !empty($modSettings['posts_require_captcha']) && ($user_info['posts'] < $modSettings['posts_require_captcha'] || ($user_info['is_guest'] && $modSettings['posts_require_captcha'] == -1)))
  1097. {
  1098. require_once($sourcedir . '/Subs-Editor.php');
  1099. $verificationOptions = array(
  1100. 'id' => 'post',
  1101. );
  1102. $context['require_verification'] = create_control_verification($verificationOptions, true);
  1103. if (is_array($context['require_verification']))
  1104. $post_errors = array_merge($post_errors, $context['require_verification']);
  1105. }
  1106. require_once($sourcedir . '/Subs-Post.php');
  1107. loadLanguage('Post');
  1108. // First check to see if they are trying to delete any current attachments.
  1109. if (isset($_POST['attach_del']))
  1110. {
  1111. $keep_temp = array();
  1112. $keep_ids = array();
  1113. foreach ($_POST['attach_del'] as $dummy)
  1114. if (strpos($dummy, 'post_tmp_' . $user_info['id']) !== false)
  1115. $keep_temp[] = $dummy;
  1116. else
  1117. $keep_ids[] = (int) $dummy;
  1118. if (isset($_SESSION['temp_attachments']))
  1119. foreach($_SESSION['temp_attachments'] as $attachID => $attachment)
  1120. {
  1121. if ((isset($_SESSION['temp_attachments']['post']['files'], $attachment['name']) && in_array($attachment['name'], $_SESSION['temp_attachments']['post']['files'])) || in_array($attachID, $keep_temp) || strpos($attachID, 'post_tmp_' . $user_info['id']) === false)
  1122. continue;
  1123. unset($_SESSION['temp_attachments'][$attachID]);
  1124. unlink($attachment['tmp_name']);
  1125. }
  1126. if (!empty($_REQUEST['msg']))
  1127. {
  1128. require_once($sourcedir . '/ManageAttachments.php');
  1129. $attachmentQuery = array(
  1130. 'attachment_type' => 0,
  1131. 'id_msg' => (int) $_REQUEST['msg'],
  1132. 'not_id_attach' => $keep_ids,
  1133. );
  1134. removeAttachments($attachmentQuery);
  1135. }
  1136. }
  1137. // Then try to upload any attachments.
  1138. $context['can_post_attachment'] = !empty($modSettings['attachmentEnable']) && $modSettings['attachmentEnable'] == 1 && (allowedTo('post_attachment') || ($modSettings['postmod_active'] && allowedTo('post_unapproved_attachments')));
  1139. if ($context['can_post_attachment'] && !empty($_FILES['attachment']) && empty($_POST['from_qr']))
  1140. {
  1141. // Make sure we're uploading to the right place.
  1142. if (!empty($modSettings['currentAttachmentUploadDir']))
  1143. {
  1144. if (!is_array($modSettings['attachmentUploadDir']))
  1145. $modSettings['attachmentUploadDir'] = unserialize($modSettings['attachmentUploadDir']);
  1146. // The current directory, of course!
  1147. $context['attach_dir'] = $modSettings['attachmentUploadDir'][$modSettings['currentAttachmentUploadDir']];
  1148. }
  1149. else
  1150. $context['attach_dir'] = $modSettings['attachmentUploadDir'];
  1151. // Is the attachments folder actualy there?
  1152. if (!is_dir($context['attach_dir']))
  1153. {
  1154. $initial_error = 'attach_folder_warning';
  1155. log_error(sprintf($txt['attach_folder_admin_warning'], $context['attach_dir']), 'critical');
  1156. }
  1157. // Check that the attachments folder is writable. No sense in proceeding if it isn't.
  1158. if (empty($initial_error) && !is_writable($context['attach_dir']))
  1159. {
  1160. // But, let's try to make it writable first.
  1161. chmod($context['attach_dir'], 0755);
  1162. if (!is_writable($context['attach_dir']))
  1163. {
  1164. chmod($context['attach_dir'], 0775);
  1165. if (!is_writable($context['attach_dir']))
  1166. {
  1167. chmod($context['attach_dir'], 0777);
  1168. if (!is_writable($context['attach_dir']))
  1169. $initial_error = 'attachments_no_write';
  1170. }
  1171. }
  1172. }
  1173. if (!isset($initial_error) && !isset($context['attachments']))
  1174. {
  1175. // If this isn't a new post, check the current attachments.
  1176. if (isset($_REQUEST['msg']))
  1177. {
  1178. $request = $smcFunc['db_query']('', '
  1179. SELECT COUNT(*), SUM(size)
  1180. FROM {db_prefix}attachments
  1181. WHERE id_msg = {int:id_msg}
  1182. AND attachment_type = {int:attachment_type}',
  1183. array(
  1184. 'id_msg' => (int) $_REQUEST['msg'],
  1185. 'attachment_type' => 0,
  1186. )
  1187. );
  1188. list ($context['attachments']['quantity'], $context['attachments']['total_size']) = $smcFunc['db_fetch_row']($request);
  1189. $smcFunc['db_free_result']($request);
  1190. }
  1191. else
  1192. $context['attachments'] = array(
  1193. 'quantity' => 0,
  1194. 'total_size' => 0,
  1195. );
  1196. }
  1197. // Hmm. There are still files in session.
  1198. $ignore_temp = false;
  1199. if (!empty($_SESSION['temp_attachments']['post']['files']) && count($_SESSION['temp_attachments']) > 1)
  1200. {
  1201. // Let's try to keep them. But...
  1202. $ignore_temp = true;
  1203. // If new files are being added. We can't ignore those
  1204. foreach ($_FILES['attachment']['tmp_name'] as $dummy)
  1205. if (!empty($dummy))
  1206. {
  1207. $ignore_temp = false;
  1208. break;
  1209. }
  1210. // Need to make space for the new files. So, bye bye.
  1211. if (!$ignore_temp)
  1212. {
  1213. foreach ($_SESSION['temp_attachments'] as $attachID => $attachment)
  1214. if (strpos($attachID, 'post_tmp_' . $user_info['id']) !== false)
  1215. unlink($attachment['tmp_name']);
  1216. $context['we_are_history'] = $txt['error_temp_attachments_flushed'];
  1217. $_SESSION['temp_attachments'] = array();
  1218. }
  1219. }
  1220. if (!isset($_FILES['attachment']['name']))
  1221. $_FILES['attachment']['tmp_name'] = array();
  1222. if (!isset($_SESSION['temp_attachments']))
  1223. $_SESSION['temp_attachments'] = array();
  1224. // Remember where we are at. If it's anywhere at all.
  1225. if (!$ignore_temp)
  1226. $_SESSION['temp_attachments']['post'] = array(
  1227. 'msg' => !empty($_REQUEST['msg']) ? $_REQUEST['msg'] : 0,
  1228. 'last_msg' => !empty($_REQUEST['last_msg']) ? $_REQUEST['last_msg'] : 0,
  1229. 'topic' => !empty($topic) ? $topic : 0,
  1230. 'board' => !empty($board) ? $board : 0,
  1231. );
  1232. // If we have an itital error, lets just display it.
  1233. if (!empty($initial_error))
  1234. {
  1235. $_SESSION['temp_attachments']['initial_error'] = $initial_error;
  1236. // And delete the files 'cos they ain't going nowhere.
  1237. foreach ($_FILES['attachment']['tmp_name'] as $n => $dummy)
  1238. if (file_exists($_FILES['attachment']['tmp_name'][$n]))
  1239. unlink($_FILES['attachment']['tmp_name'][$n]);
  1240. $_FILES['attachment']['tmp_name'] = array();
  1241. }
  1242. // Loop through $_FILES['attachment'] array and move each file to the current attachments folder.
  1243. foreach ($_FILES['attachment']['tmp_name'] as $n => $dummy)
  1244. {
  1245. if ($_FILES['attachment']['name'][$n] == '')
  1246. continue;
  1247. // First, let's first check for PHP upload errors.
  1248. $errors = array();
  1249. if (!empty($_FILES['attachment']['error'][$n]))
  1250. {
  1251. if ($_FILES['attachment']['error'][$n] == 2)
  1252. $errors[] = array('file_too_big', array($modSettings['attachmentSizeLimit']));
  1253. elseif ($_FILES['attachment']['error'][$n] == 6)
  1254. log_error($_FILES['attachment']['name'][$n] . ': ' . $txt['php_upload_error_6'], 'critical');
  1255. else
  1256. log_error($_FILES['attachment']['name'][$n] . ': ' . $txt['php_upload_error_' . $_FILES['attachment']['error'][$n]]);
  1257. if (empty($errors))
  1258. $errors[] = 'attach_php_error';
  1259. }
  1260. // Try to move and rename the file before doing any more checks on it.
  1261. $attachID = 'post_tmp_' . $user_info['id'] . '_' . md5(mt_rand());
  1262. $destName = $context['attach_dir'] . '/' . $attachID;
  1263. if (empty($errors))
  1264. {
  1265. $_SESSION['temp_attachments'][$attachID] = array(
  1266. 'name' => htmlspecialchars(basename($_FILES['attachment']['name'][$n])),
  1267. 'tmp_name' => $destName,
  1268. 'size' => $_FILES['attachment']['size'][$n],
  1269. 'type' => $_FILES['attachment']['type'][$n],
  1270. 'errors' => array(),
  1271. );
  1272. // Move the file to the attachments folder with a temp name for now.
  1273. if (@move_uploaded_file($_FILES['attachment']['tmp_name'][$n], $destName))
  1274. @chmod($destName, 0644);
  1275. else
  1276. {
  1277. $_SESSION['temp_attachments'][$attachID]['errors'][] = 'attach_timeout';
  1278. if (file_exists($_FILES['attachment']['tmp_name'][$n]))
  1279. unlink($_FILES['attachment']['tmp_name'][$n]);
  1280. }
  1281. }
  1282. else
  1283. {
  1284. $_SESSION['temp_attachments'][$attachID] = array(
  1285. 'name' => htmlspecialchars(basename($_FILES['attachment']['name'][$n])),
  1286. 'tmp_name' => $destName,
  1287. 'errors' => $errors,
  1288. );
  1289. if (file_exists($_FILES['attachment']['tmp_name'][$n]))
  1290. unlink($_FILES['attachment']['tmp_name'][$n]);
  1291. }
  1292. // If there's no errors to this pont. We still do need to apply some addtional checks before we are finished.
  1293. if (empty($_SESSION['temp_attachments'][$attachID]['errors']))
  1294. attachmentChecks($attachID);
  1295. }
  1296. }
  1297. // Mod authors, finally a hook to hang an alternate attachment upload system upon
  1298. // Upload to the current attachment folder with the file name $attachID or 'post_tmp_' . $user_info['id'] . '_' . md5(mt_rand())
  1299. // Populate $_SESSION['temp_attachments'][$attachID] with the following:
  1300. // name => The file name
  1301. // tmp_name => Path to the temp file ($context['attach_dir'] . '/' . $attachID).
  1302. // size => File size (required).
  1303. // type => MIME type (optional if not available on upload).
  1304. // errors => An array of errors (use the index of the $txt variable for that error).
  1305. // Template changes can be done using "integrate_upload_template".
  1306. call_integration_hook('integrate_attachment_upload', array());
  1307. // If this isn't a new topic load the topic info that we need.
  1308. if (!empty($topic))
  1309. {
  1310. $request = $smcFunc['db_query']('', '
  1311. SELECT locked, is_sticky, id_poll, approved, id_first_msg, id_last_msg, id_member_started, id_board
  1312. FROM {db_prefix}topics
  1313. WHERE id_topic = {int:current_topic}
  1314. LIMIT 1',
  1315. array(
  1316. 'current_topic' => $topic,
  1317. )
  1318. );
  1319. $topic_info = $smcFunc['db_fetch_assoc']($request);
  1320. $smcFunc['db_free_result']($request);
  1321. // Though the topic should be there, it might have vanished.
  1322. if (!is_array($topic_info))
  1323. fatal_lang_error('topic_doesnt_exist');
  1324. // Did this topic suddenly move? Just checking...
  1325. if ($topic_info['id_board'] != $board)
  1326. fatal_lang_error('not_a_topic');
  1327. }
  1328. // Replying to a topic?
  1329. if (!empty($topic) && !isset($_REQUEST['msg']))
  1330. {
  1331. // Don't allow a post if it's locked.
  1332. if ($topic_info['locked'] != 0 && !allowedTo('moderate_board'))
  1333. fatal_lang_error('topic_locked', false);
  1334. // Sorry, multiple polls aren't allowed... yet. You should stop giving me ideas :P.
  1335. if (isset($_REQUEST['poll']) && $topic_info['id_poll'] > 0)
  1336. unset($_REQUEST['poll']);
  1337. // Do the permissions and approval stuff...
  1338. $becomesApproved = true;
  1339. if ($topic_info['id_member_started'] != $user_info['id'])
  1340. {
  1341. if ($modSettings['postmod_active'] && allowedTo('post_unapproved_replies_any') && !allowedTo('post_reply_any'))
  1342. $becomesApproved = false;
  1343. else
  1344. isAllowedTo('post_reply_any');
  1345. }
  1346. elseif (!allowedTo('post_reply_any'))
  1347. {
  1348. if ($modSettings['postmod_active'] && allowedTo('post_unapproved_replies_own') && !allowedTo('post_reply_own'))
  1349. $becomesApproved = false;
  1350. else
  1351. isAllowedTo('post_reply_own');
  1352. }
  1353. if (isset($_POST['lock']))
  1354. {
  1355. // Nothing is changed to the lock.
  1356. if ((empty($topic_info['locked']) && empty($_POST['lock'])) || (!empty($_POST['lock']) && !empty($topic_info['locked'])))
  1357. unset($_POST['lock']);
  1358. // You're have no permission to lock this topic.
  1359. elseif (!allowedTo(array('lock_any', 'lock_own')) || (!allowedTo('lock_any') && $user_info['id'] != $topic_info['id_member_started']))
  1360. unset($_POST['lock']);
  1361. // You are allowed to (un)lock your own topic only.
  1362. elseif (!allowedTo('lock_any'))
  1363. {
  1364. // You cannot override a moderator lock.
  1365. if ($topic_info['locked'] == 1)
  1366. unset($_POST['lock']);
  1367. else
  1368. $_POST['lock'] = empty($_POST['lock']) ? 0 : 2;
  1369. }
  1370. // Hail mighty moderator, (un)lock this topic immediately.
  1371. else
  1372. $_POST['lock'] = empty($_POST['lock']) ? 0 : 1;
  1373. }
  1374. // So you wanna (un)sticky this...let's see.
  1375. if (isset($_POST['sticky']) && (empty($modSettings['enableStickyTopics']) || $_POST['sticky'] == $topic_info['is_sticky'] || !allowedTo('make_sticky')))
  1376. unset($_POST['sticky']);
  1377. // If the number of replies has changed, if the setting is enabled, go back to Post() - which handles the error.
  1378. if (empty($options['no_new_reply_warning']) && isset($_POST['last_msg']) && $topic_info['id_last_msg'] > $_POST['last_msg'])
  1379. {
  1380. $_REQUEST['preview'] = true;
  1381. return Post();
  1382. }
  1383. $posterIsGuest = $user_info['is_guest'];
  1384. }
  1385. // Posting a new topic.
  1386. elseif (empty($topic))
  1387. {
  1388. // Now don't be silly, new topics will get their own id_msg soon enough.
  1389. unset($_REQUEST['msg'], $_POST['msg'], $_GET['msg']);
  1390. // Do like, the permissions, for safety and stuff...
  1391. $becomesApproved = true;
  1392. if ($modSettings['postmod_active'] && !allowedTo('post_new') && allowedTo('post_unapproved_topics'))
  1393. $becomesApproved = false;
  1394. else
  1395. isAllowedTo('post_new');
  1396. if (isset($_POST['lock']))
  1397. {
  1398. // New topics are by default not locked.
  1399. if (empty($_POST['lock']))
  1400. unset($_POST['lock']);
  1401. // Besides, you need permission.
  1402. elseif (!allowedTo(array('lock_any', 'lock_own')))
  1403. unset($_POST['lock']);
  1404. // A moderator-lock (1) can override a user-lock (2).
  1405. else
  1406. $_POST['lock'] = allowedTo('lock_any') ? 1 : 2;
  1407. }
  1408. if (isset($_POST['sticky']) && (empty($modSettings['enableStickyTopics']) || empty($_POST['sticky']) || !allowedTo('make_sticky')))
  1409. unset($_POST['sticky']);
  1410. $posterIsGuest = $user_info['is_guest'];
  1411. }
  1412. // Modifying an existing message?
  1413. elseif (isset($_REQUEST['msg']) && !empty($topic))
  1414. {
  1415. $_REQUEST['msg'] = (int) $_REQUEST['msg'];
  1416. $request = $smcFunc['db_query']('', '
  1417. SELECT id_member, poster_name, poster_email, poster_time, approved
  1418. FROM {db_prefix}messages
  1419. WHERE id_msg = {int:id_msg}
  1420. LIMIT 1',
  1421. array(
  1422. 'id_msg' => $_REQUEST['msg'],
  1423. )
  1424. );
  1425. if ($smcFunc['db_num_rows']($request) == 0)
  1426. fatal_lang_error('cant_find_messages', false);
  1427. $row = $smcFunc['db_fetch_assoc']($request);
  1428. $smcFunc['db_free_result']($request);
  1429. if (!empty($topic_info['locked']) && !allowedTo('moderate_board'))
  1430. fatal_lang_error('topic_locked', false);
  1431. if (isset($_POST['lock']))
  1432. {
  1433. // Nothing changes to the lock status.
  1434. if ((empty($_POST['lock']) && empty($topic_info['locked'])) || (!empty($_POST['lock']) && !empty($topic_info['locked'])))
  1435. unset($_POST['lock']);
  1436. // You're simply not allowed to (un)lock this.
  1437. elseif (!allowedTo(array('lock_any', 'lock_own')) || (!allowedTo('lock_any') && $user_info['id'] != $topic_info['id_member_started']))
  1438. unset($_POST['lock']);
  1439. // You're only allowed to lock your own topics.
  1440. elseif (!allowedTo('lock_any'))
  1441. {
  1442. // You're not allowed to break a moderator's lock.
  1443. if ($topic_info['locked'] == 1)
  1444. unset($_POST['lock']);
  1445. // Lock it with a soft lock or unlock it.
  1446. else
  1447. $_POST['lock'] = empty($_POST['lock']) ? 0 : 2;
  1448. }
  1449. // You must be the moderator.
  1450. else
  1451. $_POST['lock'] = empty($_POST['lock']) ? 0 : 1;
  1452. }
  1453. // Change the sticky status of this topic?
  1454. if (isset($_POST['sticky']) && (!allowedTo('make_sticky') || $_POST['sticky'] == $topic_info['is_sticky']))
  1455. unset($_POST['sticky']);
  1456. if ($row['id_member'] == $user_info['id'] && !allowedTo('modify_any'))
  1457. {
  1458. if ((!$modSettings['postmod_active'] || $row['approved']) && !empty($modSettings['edit_disable_time']) && $row['poster_time'] + ($modSettings['edit_disable_time'] + 5) * 60 < time())
  1459. fatal_lang_error('modify_post_time_passed', false);
  1460. elseif ($topic_info['id_member_started'] == $user_info['id'] && !allowedTo('modify_own'))
  1461. isAllowedTo('modify_replies');
  1462. else
  1463. isAllowedTo('modify_own');
  1464. }
  1465. elseif ($topic_info['id_member_started'] == $user_info['id'] && !allowedTo('modify_any'))
  1466. {
  1467. isAllowedTo('modify_replies');
  1468. // If you're modifying a reply, I say it better be logged...
  1469. $moderationAction = true;
  1470. }
  1471. else
  1472. {
  1473. isAllowedTo('modify_any');
  1474. // Log it, assuming you're not modifying your own post.
  1475. if ($row['id_member'] != $user_info['id'])
  1476. $moderationAction = true;
  1477. }
  1478. $posterIsGuest = empty($row['id_member']);
  1479. // Can they approve it?
  1480. $can_approve = allowedTo('approve_posts');
  1481. $becomesApproved = $modSettings['postmod_active'] ? ($can_approve && !$row['approved'] ? (!empty($_REQUEST['approve']) ? 1 : 0) : $row['approved']) : 1;
  1482. $approve_has_changed = $row['approved'] != $becomesApproved;
  1483. if (!allowedTo('moderate_forum') || !$posterIsGuest)
  1484. {
  1485. $_POST['guestname'] = $row['poster_name'];
  1486. $_POST['email'] = $row['poster_email'];
  1487. }
  1488. }
  1489. // If the poster is a guest evaluate the legality of name and email.
  1490. if ($posterIsGuest)
  1491. {
  1492. $_POST['guestname'] = !isset($_POST['guestname']) ? '' : trim($_POST['guestname']);
  1493. $_POST['email'] = !isset($_POST['email']) ? '' : trim($_POST['email']);
  1494. if ($_POST['guestname'] == '' || $_POST['guestname'] == '_')
  1495. $post_errors[] = 'no_name';
  1496. if ($smcFunc['strlen']($_POST['guestname']) > 25)
  1497. $post_errors[] = 'long_name';
  1498. if (empty($modSettings['guest_post_no_email']))
  1499. {
  1500. // Only check if they changed it!
  1501. if (!isset($row) || $row['poster_email'] != $_POST['email'])
  1502. {
  1503. if (!allowedTo('moderate_forum') && (!isset($_POST['email']) || $_POST['email'] == ''))
  1504. $post_errors[] = 'no_email';
  1505. if (!allowedTo('moderate_forum') && preg_match('~^[0-9A-Za-z=_+\-/][0-9A-Za-z=_\'+\-/\.]*@[\w\-]+(\.[\w\-]+)*(\.[\w]{2,6})$~', $_POST['email']) == 0)
  1506. $post_errors[] = 'bad_email';
  1507. }
  1508. // Now make sure this email address is not banned from posting.
  1509. isBannedEmail($_POST['email'], 'cannot_post', sprintf($txt['you_are_post_banned'], $txt['guest_title']));
  1510. }
  1511. // In case they are making multiple posts this visit, help them along by storing their name.
  1512. if (empty($post_errors))
  1513. {
  1514. $_SESSION['guest_name'] = $_POST['guestname'];
  1515. $_SESSION['guest_email'] = $_POST['email'];
  1516. }
  1517. }
  1518. // Check the subject and message.
  1519. if (!isset($_POST['subject']) || $smcFunc['htmltrim']($smcFunc['htmlspecialchars']($_POST['subject'])) === '')
  1520. $post_errors[] = 'no_subject';
  1521. if (!isset($_POST['message']) || $smcFunc['htmltrim']($smcFunc['htmlspecialchars']($_POST['message']), ENT_QUOTES) === '')
  1522. $post_errors[] = 'no_message';
  1523. elseif (!empty($modSettings['max_messageLength']) && $smcFunc['strlen']($_POST['message']) > $modSettings['max_messageLength'])
  1524. $post_errors[] = 'long_message';
  1525. else
  1526. {
  1527. // Prepare the message a bit for some additional testing.
  1528. $_POST['message'] = $smcFunc['htmlspecialchars']($_POST['message'], ENT_QUOTES);
  1529. // Preparse code. (Zef)
  1530. if ($user_info['is_guest'])
  1531. $user_info['name'] = $_POST['guestname'];
  1532. preparsecode($_POST['message']);
  1533. // Let's see if there's still some content left without the tags.
  1534. if ($smcFunc['htmltrim'](strip_tags(parse_bbc($_POST['message'], false), '<img>')) === '' && (!allowedTo('admin_forum') || strpos($_POST['message'], '[html]') === false))
  1535. $post_errors[] = 'no_message';
  1536. }
  1537. if (isset($_POST['calendar']) && !isset($_REQUEST['deleteevent']) && $smcFunc['htmltrim']($_POST['evtitle']) === '')
  1538. $post_errors[] = 'no_event';
  1539. // You are not!
  1540. if (isset($_POST['message']) && strtolower($_POST['message']) == 'i am the administrator.' && !$user_info['is_admin'])
  1541. fatal_error('Knave! Masquerader! Charlatan!', false);
  1542. // Validate the poll...
  1543. if (isset($_REQUEST['poll']) && $modSettings['pollMode'] == '1')
  1544. {
  1545. if (!empty($topic) && !isset($_REQUEST['msg']))
  1546. fatal_lang_error('no_access', false);
  1547. // This is a new topic... so it's a new poll.
  1548. if (empty($topic))
  1549. isAllowedTo('poll_post');
  1550. // Can you add to your own topics?
  1551. elseif ($user_info['id'] == $topic_info['id_member_started'] && !allowedTo('poll_add_any'))
  1552. isAllowedTo('poll_add_own');
  1553. // Can you add polls to any topic, then?
  1554. else
  1555. isAllowedTo('poll_add_any');
  1556. if (!isset($_POST['question']) || trim($_POST['question']) == '')
  1557. $post_errors[] = 'no_question';
  1558. $_POST['options'] = empty($_POST['options']) ? array() : htmltrim__recursive($_POST['options']);
  1559. // Get rid of empty ones.
  1560. foreach ($_POST['options'] as $k => $option)
  1561. if ($option == '')
  1562. unset($_POST['options'][$k], $_POST['options'][$k]);
  1563. // What are you going to vote between with one choice?!?
  1564. if (count($_POST['options']) < 2)
  1565. $post_errors[] = 'poll_few';
  1566. elseif (count($_POST['options']) > 256)
  1567. $post_errors[] = 'poll_many';
  1568. }
  1569. if ($posterIsGuest)
  1570. {
  1571. // If user is a guest, make sure the chosen name isn't taken.
  1572. require_once($sourcedir . '/Subs-Members.php');
  1573. if (isReservedName($_POST['guestname'], 0, true, false) && (!isset($row['poster_name']) || $_POST['guestname'] != $row['poster_name']))
  1574. $post_errors[] = 'bad_name';
  1575. }
  1576. // If the user isn't a guest, get his or her name and email.
  1577. elseif (!isset($_REQUEST['msg']))
  1578. {
  1579. $_POST['guestname'] = $user_info['username'];
  1580. $_POST['email'] = $user_info['email'];
  1581. }
  1582. // Any mistakes?
  1583. if (!empty($post_errors))
  1584. {
  1585. loadLanguage('Errors');
  1586. // Previewing.
  1587. $_REQUEST['preview'] = true;
  1588. $context['post_error'] = array('messages' => array());
  1589. foreach ($post_errors as $post_error)
  1590. {
  1591. $context['post_error'][$post_error] = true;
  1592. if ($post_error == 'long_message')
  1593. $txt['error_' . $post_error] = sprintf($txt['error_' . $post_error], $modSettings['max_messageLength']);
  1594. $context['post_error']['messages'][] = $txt['error_' . $post_error];
  1595. }
  1596. return Post();
  1597. }
  1598. // Make sure the user isn't spamming the board.
  1599. if (!isset($_REQUEST['msg']))
  1600. spamProtection('post');
  1601. // At about this point, we're posting and that's that.
  1602. ignore_user_abort(true);
  1603. @set_time_limit(300);
  1604. // Add special html entities to the subject, name, and email.
  1605. $_POST['subject'] = strtr($smcFunc['htmlspecialchars']($_POST['subject']), array("\r" => '', "\n" => '', "\t" => ''));
  1606. $_POST['guestname'] = htmlspecialchars($_POST['guestname']);
  1607. $_POST['email'] = htmlspecialchars($_POST['email']);
  1608. // At this point, we want to make sure the subject isn't too long.
  1609. if ($smcFunc['strlen']($_POST['subject']) > 100)
  1610. $_POST['subject'] = $smcFunc['substr']($_POST['subject'], 0, 100);
  1611. // Make the poll...
  1612. if (isset($_REQUEST['poll']))
  1613. {
  1614. // Make sure that the user has not entered a ridiculous number of options..
  1615. if (empty($_POST['poll_max_votes']) || $_POST['poll_max_votes'] <= 0)
  1616. $_POST['poll_max_votes'] = 1;
  1617. elseif ($_POST['poll_max_votes'] > count($_POST['options']))
  1618. $_POST['poll_max_votes'] = count($_POST['options']);
  1619. else
  1620. $_POST['poll_max_votes'] = (int) $_POST['poll_max_votes'];
  1621. $_POST['poll_expire'] = (int) $_POST['poll_expire'];
  1622. $_POST['poll_expire'] = $_POST['poll_expire'] > 9999 ? 9999 : ($_POST['poll_expire'] < 0 ? 0 : $_POST['poll_expire']);
  1623. // Just set it to zero if it's not there..
  1624. if (!isset($_POST['poll_hide']))
  1625. $_POST['poll_hide'] = 0;
  1626. else
  1627. $_POST['poll_hide'] = (int) $_POST['poll_hide'];
  1628. $_POST['poll_change_vote'] = isset($_POST['poll_change_vote']) ? 1 : 0;
  1629. $_POST['poll_guest_vote'] = isset($_POST['poll_guest_vote']) ? 1 : 0;
  1630. // Make sure guests are actually allowed to vote generally.
  1631. if ($_POST['poll_guest_vote'])
  1632. {
  1633. require_once($sourcedir . '/Subs-Members.php');
  1634. $allowedVoteGroups = groupsAllowedTo('poll_vote', $board);
  1635. if (!in_array(-1, $allowedVoteGroups['allowed']))
  1636. $_POST['poll_guest_vote'] = 0;
  1637. }
  1638. // If the user tries to set the poll too far in advance, don't let them.
  1639. if (!empty($_POST['poll_expire']) && $_POST['poll_expire'] < 1)
  1640. fatal_lang_error('poll_range_error', false);
  1641. // Don't allow them to select option 2 for hidden results if it's not time limited.
  1642. elseif (empty($_POST['poll_expire']) && $_POST['poll_hide'] == 2)
  1643. $_POST['poll_hide'] = 1;
  1644. // Clean up the question and answers.
  1645. $_POST['question'] = htmlspecialchars($_POST['question']);
  1646. $_POST['question'] = $smcFunc['truncate']($_POST['question'], 255);
  1647. $_POST['question'] = preg_replace('~&amp;#(\d{4,5}|[2-9]\d{2,4}|1[2-9]\d);~', '&#$1;', $_POST['question']);
  1648. $_POST['options'] = htmlspecialchars__recursive($_POST['options']);
  1649. }
  1650. // ...or attach a new file...
  1651. if (empty($ignore_temp) && $context['can_post_attachment'] && !empty($_SESSION['temp_attachments']) && empty($_POST['from_qr']))
  1652. {
  1653. $attachIDs = array();
  1654. $attach_errors = array();
  1655. if (!empty($context['we_are_history']))
  1656. $attach_errors[] = '<dd>' . $txt['error_temp_attachments_flushed'] . '<br /><br /></dd>';
  1657. foreach ($_SESSION['temp_attachments'] as $attachID => $attachment)
  1658. {
  1659. if ($attachID != 'initial_error' && strpos($attachID, 'post_tmp_' . $user_info['id']) === false)
  1660. continue;
  1661. // If there was an initial error just show that message.
  1662. if ($attachID == 'initial_error')
  1663. {
  1664. $attach_errors[] = '<dt>' . $txt['attach_no_upload'] . '</dt>';
  1665. $attach_errors[] = '<dd>' . (is_array($attachment) ? vsprintf($txt[$attachment[0]], $attachment[1]) : $txt[$attachment]) . '</dd>';
  1666. unset($_SESSION['temp_attachments']);
  1667. break;
  1668. }
  1669. $attachmentOptions = array(
  1670. 'post' => isset($_REQUEST['msg']) ? $_REQUEST['msg'] : 0,
  1671. 'poster' => $user_info['id'],
  1672. 'name' => $attachment['name'],
  1673. 'tmp_name' => $attachment['tmp_name'],
  1674. 'size' => isset($attachment['size']) ? $attachment['size'] : 0,
  1675. 'mime_type' => isset($attachment['type']) ? $attachment['type'] : '',
  1676. 'approved' => !$modSettings['postmod_active'] || allowedTo('post_attachment'),
  1677. 'errors' => $attachment['errors'],
  1678. );
  1679. if (empty($attachment['errors']))
  1680. {
  1681. if (createAttachment($attachmentOptions))
  1682. {
  1683. $attachIDs[] = $attachmentOptions['id'];
  1684. if (!empty($attachmentOptions['thumb']))
  1685. $attachIDs[] = $attachmentOptions['thumb'];
  1686. }
  1687. }
  1688. if (!empty($attachmentOptions['errors']))
  1689. {
  1690. if (isset($br))
  1691. $attach_errors[] = '<dt>&nbsp;</dt>';
  1692. else
  1693. $br = '';
  1694. // Sort out the errors for display and delete any associated files.
  1695. $attach_errors[] = '<dt>' . vsprintf($txt['attach_warning'], $attachment['name']) . '</dt>';
  1696. $log_these = array('attachments_no_write', 'attach_timeout', 'ran_out_of_space', 'cant_access_upload_path', 'attach_0_byte_file');
  1697. foreach ($attachmentOptions['errors'] as $error)
  1698. {
  1699. if (!is_array($error))
  1700. {
  1701. $attach_errors[] = '<dd>' . $txt[$error] . '</dd>';
  1702. if (in_array($error, $log_these))
  1703. log_error($attachment['name'] . ': ' . $txt[$error], 'critical');
  1704. }
  1705. else
  1706. $attach_errors[] = '<dd>' . vsprintf($txt[$error[0]], $error[1]) . '</dd>';
  1707. }
  1708. if (file_exists($attachment['tmp_name']))
  1709. unlink($attachment['tmp_name']);
  1710. }
  1711. }
  1712. unset($_SESSION['temp_attachments']);
  1713. }
  1714. // Make the poll...
  1715. if (isset($_REQUEST['poll']))
  1716. {
  1717. // Create the poll.
  1718. $smcFunc['db_insert']('',
  1719. '{db_prefix}polls',
  1720. array(
  1721. 'question' => 'string-255', 'hide_results' => 'int', 'max_votes' => 'int', 'expire_time' => 'int', 'id_member' => 'int',
  1722. 'poster_name' => 'string-255', 'change_vote' => 'int', 'guest_vote' => 'int'
  1723. ),
  1724. array(
  1725. $_POST['question'], $_POST['poll_hide'], $_POST['poll_max_votes'], (empty($_POST['poll_expire']) ? 0 : time() + $_POST['poll_expire'] * 3600 * 24), $user_info['id'],
  1726. $_POST['guestname'], $_POST['poll_change_vote'], $_POST['poll_guest_vote'],
  1727. ),
  1728. array('id_poll')
  1729. );
  1730. $id_poll = $smcFunc['db_insert_id']('{db_prefix}polls', 'id_poll');
  1731. // Create each answer choice.
  1732. $i = 0;
  1733. $pollOptions = array();
  1734. foreach ($_POST['options'] as $option)
  1735. {
  1736. $pollOptions[] = array($id_poll, $i, $option);
  1737. $i++;
  1738. }
  1739. $smcFunc['db_insert']('insert',
  1740. '{db_prefix}poll_choices',
  1741. array('id_poll' => 'int', 'id_choice' => 'int', 'label' => 'string-255'),
  1742. $pollOptions,
  1743. array('id_poll', 'id_choice')
  1744. );
  1745. }
  1746. else
  1747. $id_poll = 0;
  1748. // Creating a new topic?
  1749. $newTopic = empty($_REQUEST['msg']) && empty($topic);
  1750. $_POST['icon'] = !empty($attachIDs) && $_POST['icon'] == 'xx' ? 'clip' : $_POST['icon'];
  1751. // Collect all parameters for the creation or modification of a post.
  1752. $msgOptions = array(
  1753. 'id' => empty($_REQUEST['msg']) ? 0 : (int) $_REQUEST['msg'],
  1754. 'subject' => $_POST['subject'],
  1755. 'body' => $_POST['message'],
  1756. 'icon' => preg_replace('~[\./\\\\*:"\'<>]~', '', $_POST['icon']),
  1757. 'smileys_enabled' => !isset($_POST['ns']),
  1758. 'attachments' => empty($attachIDs) ? array() : $attachIDs,
  1759. 'approved' => $becomesApproved,
  1760. );
  1761. $topicOptions = array(
  1762. 'id' => empty($topic) ? 0 : $topic,
  1763. 'board' => $board,
  1764. 'poll' => isset($_REQUEST['poll']) ? $id_poll : null,
  1765. 'lock_mode' => isset($_POST['lock']) ? (int) $_POST['lock'] : null,
  1766. 'sticky_mode' => isset($_POST['sticky']) && !empty($modSettings['enableStickyTopics']) ? (int) $_POST['sticky'] : null,
  1767. 'mark_as_read' => true,
  1768. 'is_approved' => !$modSettings['postmod_active'] || empty($topic) || !empty($board_info['cur_topic_approved']),
  1769. );
  1770. $posterOptions = array(
  1771. 'id' => $user_info['id'],
  1772. 'name' => $_POST['guestname'],
  1773. 'email' => $_POST['email'],
  1774. 'update_post_count' => !$user_info['is_guest'] && !isset($_REQUEST['msg']) && $board_info['posts_count'],
  1775. );
  1776. // This is an already existing message. Edit it.
  1777. if (!empty($_REQUEST['msg']))
  1778. {
  1779. // Have admins allowed people to hide their screwups?
  1780. if (time() - $row['poster_time'] > $modSettings['edit_wait_time'] || $user_info['id'] != $row['id_member'])
  1781. {
  1782. $msgOptions['modify_time'] = time();
  1783. $msgOptions['modify_name'] = $user_info['name'];
  1784. }
  1785. // This will save some time...
  1786. if (empty($approve_has_changed))
  1787. unset($msgOptions['approved']);
  1788. modifyPost($msgOptions, $topicOptions, $posterOptions);
  1789. }
  1790. // This is a new topic or an already existing one. Save it.
  1791. else
  1792. {
  1793. createPost($msgOptions, $topicOptions, $posterOptions);
  1794. if (isset($topicOptions['id']))
  1795. $topic = $topicOptions['id'];
  1796. }
  1797. // Editing or posting an event?
  1798. if (isset($_POST['calendar']) && (!isset($_REQUEST['eventid']) || $_REQUEST['eventid'] == -1))
  1799. {
  1800. require_once($sourcedir . '/Subs-Calendar.php');
  1801. // Make sure they can link an event to this post.
  1802. canLinkEvent();
  1803. // Insert the event.
  1804. $eventOptions = array(
  1805. 'board' => $board,
  1806. 'topic' => $topic,
  1807. 'title' => $_POST['evtitle'],
  1808. 'member' => $user_info['id'],
  1809. 'start_date' => sprintf('%04d-%02d-%02d', $_POST['year'], $_POST['month'], $_POST['day']),
  1810. 'span' => isset($_POST['span']) && $_POST['span'] > 0 ? min((int) $modSettings['cal_maxspan'], (int) $_POST['span'] - 1) : 0,
  1811. );
  1812. insertEvent($eventOptions);
  1813. }
  1814. elseif (isset($_POST['calendar']))
  1815. {
  1816. $_REQUEST['eventid'] = (int) $_REQUEST['eventid'];
  1817. // Validate the post...
  1818. require_once($sourcedir . '/Subs-Calendar.php');
  1819. validateEventPost();
  1820. // If you're not allowed to edit any events, you have to be the poster.
  1821. if (!allowedTo('calendar_edit_any'))
  1822. {
  1823. // Get the event's poster.
  1824. $request = $smcFunc['db_query']('', '
  1825. SELECT id_member
  1826. FROM {db_prefix}calendar
  1827. WHERE id_event = {int:id_event}',
  1828. array(
  1829. 'id_event' => $_REQUEST['eventid'],
  1830. )
  1831. );
  1832. $row2 = $smcFunc['db_fetch_assoc']($request);
  1833. $smcFunc['db_free_result']($request);
  1834. // Silly hacker, Trix are for kids. ...probably trademarked somewhere, this is FAIR USE! (parody...)
  1835. isAllowedTo('calendar_edit_' . ($row2['id_member'] == $user_info['id'] ? 'own' : 'any'));
  1836. }
  1837. // Delete it?
  1838. if (isset($_REQUEST['deleteevent']))
  1839. $smcFunc['db_query']('', '
  1840. DELETE FROM {db_prefix}calendar
  1841. WHERE id_event = {int:id_event}',
  1842. array(
  1843. 'id_event' => $_REQUEST['eventid'],
  1844. )
  1845. );
  1846. // ... or just update it?
  1847. else
  1848. {
  1849. $span = !empty($modSettings['cal_allowspan']) && !empty($_REQUEST['span']) ? min((int) $modSettings['cal_maxspan'], (int) $_REQUEST['span'] - 1) : 0;
  1850. $start_time = mktime(0, 0, 0, (int) $_REQUEST['month'], (int) $_REQUEST['day'], (int) $_REQUEST['year']);
  1851. $smcFunc['db_query']('', '
  1852. UPDATE {db_prefix}calendar
  1853. SET end_date = {date:end_date},
  1854. start_date = {date:start_date},
  1855. title = {string:title}
  1856. WHERE id_event = {int:id_event}',
  1857. array(
  1858. 'end_date' => strftime('%Y-%m-%d', $start_time + $span * 86400),
  1859. 'start_date' => strftime('%Y-%m-%d', $start_time),
  1860. 'id_event' => $_REQUEST['eventid'],
  1861. 'title' => $smcFunc['htmlspecialchars']($_REQUEST['evtitle'], ENT_QUOTES),
  1862. )
  1863. );
  1864. }
  1865. updateSettings(array(
  1866. 'calendar_updated' => time(),
  1867. ));
  1868. }
  1869. // Marking read should be done even for editing messages....
  1870. // Mark all the parents read. (since you just posted and they will be unread.)
  1871. if (!$user_info['is_guest'] && !empty($board_info['parent_boards']))
  1872. {
  1873. $smcFunc['db_query']('', '
  1874. UPDATE {db_prefix}log_boards
  1875. SET id_msg = {int:id_msg}
  1876. WHERE id_member = {int:current_member}
  1877. AND id_board IN ({array_int:board_list})',
  1878. array(
  1879. 'current_member' => $user_info['id'],
  1880. 'board_list' => array_keys($board_info['parent_boards']),
  1881. 'id_msg' => $modSettings['maxMsgID'],
  1882. )
  1883. );
  1884. }
  1885. // Turn notification on or off. (note this just blows smoke if it's already on or off.)
  1886. if (!empty($_POST['notify']) && allowedTo('mark_any_notify'))
  1887. {
  1888. $smcFunc['db_insert']('ignore',
  1889. '{db_prefix}log_notify',
  1890. array('id_member' => 'int', 'id_topic' => 'int', 'id_board' => 'int'),
  1891. array($user_info['id'], $topic, 0),
  1892. array('id_member', 'id_topic', 'id_board')
  1893. );
  1894. }
  1895. elseif (!$newTopic)
  1896. $smcFunc['db_query']('', '
  1897. DELETE FROM {db_prefix}log_notify
  1898. WHERE id_member = {int:current_member}
  1899. AND id_topic = {int:current_topic}',
  1900. array(
  1901. 'current_member' => $user_info['id'],
  1902. 'current_topic' => $topic,
  1903. )
  1904. );
  1905. // Log an act of moderation - modifying.
  1906. if (!empty($moderationAction))
  1907. logAction('modify', array('topic' => $topic, 'message' => (int) $_REQUEST['msg'], 'member' => $row['id_member'], 'board' => $board));
  1908. if (isset($_POST['lock']) && $_POST['lock'] != 2)
  1909. logAction(empty($_POST['lock']) ? 'unlock' : 'lock', array('topic' => $topicOptions['id'], 'board' => $topicOptions['board']));
  1910. if (isset($_POST['sticky']) && !empty($modSettings['enableStickyTopics']))
  1911. logAction('sticky', array('topic' => $topicOptions['id'], 'board' => $topicOptions['board']));
  1912. // Notify any members who have notification turned on for this topic - only do this if it's going to be approved(!)
  1913. if ($becomesApproved)
  1914. {
  1915. if ($newTopic)
  1916. {
  1917. $notifyData = array(
  1918. 'body' => $_POST['message'],
  1919. 'subject' => $_POST['subject'],
  1920. 'name' => $user_info['name'],
  1921. 'poster' => $user_info['id'],
  1922. 'msg' => $msgOptions['id'],
  1923. 'board' => $board,
  1924. 'topic' => $topic,
  1925. );
  1926. notifyMembersBoard($notifyData);
  1927. }
  1928. elseif (empty($_REQUEST['msg']))
  1929. {
  1930. // Only send it to everyone if the topic is approved, otherwise just to the topic starter if they want it.
  1931. if ($topic_info['approved'])
  1932. sendNotifications($topic, 'reply');
  1933. else
  1934. sendNotifications($topic, 'reply', array(), $topic_info['id_member_started']);
  1935. }
  1936. }
  1937. // Returning to the topic?
  1938. if (!empty($_REQUEST['goback']))
  1939. {
  1940. // Mark the board as read.... because it might get confusing otherwise.
  1941. $smcFunc['db_query']('', '
  1942. UPDATE {db_prefix}log_boards
  1943. SET id_msg = {int:maxMsgID}
  1944. WHERE id_member = {int:current_member}
  1945. AND id_board = {int:current_board}',
  1946. array(
  1947. 'current_board' => $board,
  1948. 'current_member' => $user_info['id'],
  1949. 'maxMsgID' => $modSettings['maxMsgID'],
  1950. )
  1951. );
  1952. }
  1953. if ($board_info['num_topics'] == 0)
  1954. cache_put_data('board-' . $board, null, 120);
  1955. if (!empty($_POST['announce_topic']))
  1956. redirectexit('action=announce;sa=selectgroup;topic=' . $topic . (!empty($_POST['move']) && allowedTo('move_any') ? ';move' : '') . (empty($_REQUEST['goback']) ? '' : ';goback'));
  1957. if (!empty($_POST['move']) && allowedTo('move_any'))
  1958. redirectexit('action=movetopic;topic=' . $topic . '.0' . (empty($_REQUEST['goback']) ? '' : ';goback'));
  1959. // If there are attachment errors. Let's show a list to the user.
  1960. if (!empty($attach_errors))
  1961. {
  1962. global $settings, $scripturl;
  1963. loadTemplate('Errors');
  1964. $context['sub_template'] = 'attachment_errors';
  1965. $context['page_title'] = $txt['error_occured'];
  1966. $context['error_message'] = '<dl>';
  1967. $context['error_message'] .= implode("\n", $attach_errors);
  1968. $context['error_message'] .= '</dl>';
  1969. $context['linktree'][] = array(
  1970. 'url' => $scripturl . '?topic=' . $topic . '.0',
  1971. 'name' => $_POST['subject'],
  1972. 'extra_before' => $settings['linktree_inline'] ? $txt['topic'] . ': ' : ''
  1973. );
  1974. if (isset($_REQUEST['msg']))
  1975. $context['redirect_link'] = '?topic=' . $topic . '.msg' . $_REQUEST['msg'] . '#msg' . $_REQUEST['msg'];
  1976. else
  1977. $context['redirect_link'] = '?topic=' . $topic . '.new#new';
  1978. $context['back_link'] = '?action=post;msg=' . $msgOptions['id'] . ';topic=' . $topic . ';additionalOptions#postAttachment';
  1979. obExit(null, true);
  1980. }
  1981. // Return to post if the mod is on.
  1982. if (isset($_REQUEST['msg']) && !empty($_REQUEST['goback']))
  1983. redirectexit('topic=' . $topic . '.msg' . $_REQUEST['msg'] . '#msg' . $_REQUEST['msg'], isBrowser('ie'));
  1984. elseif (!empty($_REQUEST['goback']))
  1985. redirectexit('topic=' . $topic . '.new#new', isBrowser('ie'));
  1986. // Dut-dut-duh-duh-DUH-duh-dut-duh-duh! *dances to the Final Fantasy Fanfare...*
  1987. else
  1988. redirectexit('board=' . $board . '.0');
  1989. }
  1990. /**
  1991. * handle the announce topic function (action=announce).
  1992. * checks the topic announcement permissions and loads the announcement template.
  1993. * requires the announce_topic permission.
  1994. * uses the ManageMembers template and Post language file.
  1995. * call the right function based on the sub-action.
  1996. */
  1997. function AnnounceTopic()
  1998. {
  1999. global $context, $txt, $topic;
  2000. isAllowedTo('announce_topic');
  2001. validateSession();
  2002. if (empty($topic))
  2003. fatal_lang_error('topic_gone', false);
  2004. loadLanguage('Post');
  2005. loadTemplate('Post');
  2006. $subActions = array(
  2007. 'selectgroup' => 'AnnouncementSelectMembergroup',
  2008. 'send' => 'AnnouncementSend',
  2009. );
  2010. $context['page_title'] = $txt['announce_topic'];
  2011. // Call the function based on the sub-action.
  2012. $subActions[isset($_REQUEST['sa']) && isset($subActions[$_REQUEST['sa']]) ? $_REQUEST['sa'] : 'selectgroup']();
  2013. }
  2014. /**
  2015. * Allow a user to chose the membergroups to send the announcement to.
  2016. * lets the user select the membergroups that will receive the topic announcement.
  2017. */
  2018. function AnnouncementSelectMembergroup()
  2019. {
  2020. global $txt, $context, $topic, $board, $board_info, $smcFunc;
  2021. $groups = array_merge($board_info['groups'], array(1));
  2022. foreach ($groups as $id => $group)
  2023. $groups[$id] = (int) $group;
  2024. $context['groups'] = array();
  2025. if (in_array(0, $groups))
  2026. {
  2027. $context['groups'][0] = array(
  2028. 'id' => 0,
  2029. 'name' => $txt['announce_regular_members'],
  2030. 'member_count' => 'n/a',
  2031. );
  2032. }
  2033. // Get all membergroups that have access to the board the announcement was made on.
  2034. $request = $smcFunc['db_query']('', '
  2035. SELECT mg.id_group, COUNT(mem.id_member) AS num_members
  2036. FROM {db_prefix}membergroups AS mg
  2037. LEFT JOIN {db_prefix}members AS mem ON (mem.id_group = mg.id_group OR FIND_IN_SET(mg.id_group, mem.additional_groups) != 0 OR mg.id_group = mem.id_post_group)
  2038. WHERE mg.id_group IN ({array_int:group_list})
  2039. GROUP BY mg.id_group',
  2040. array(
  2041. 'group_list' => $groups,
  2042. 'newbie_id_group' => 4,
  2043. )
  2044. );
  2045. while ($row = $smcFunc['db_fetch_assoc']($request))
  2046. {
  2047. $context['groups'][$row['id_group']] = array(
  2048. 'id' => $row['id_group'],
  2049. 'name' => '',
  2050. 'member_count' => $row['num_members'],
  2051. );
  2052. }
  2053. $smcFunc['db_free_result']($request);
  2054. // Now get the membergroup names.
  2055. $request = $smcFunc['db_query']('', '
  2056. SELECT id_group, group_name
  2057. FROM {db_prefix}membergroups
  2058. WHERE id_group IN ({array_int:group_list})',
  2059. array(
  2060. 'group_list' => $groups,
  2061. )
  2062. );
  2063. while ($row = $smcFunc['db_fetch_assoc']($request))
  2064. $context['groups'][$row['id_group']]['name'] = $row['group_name'];
  2065. $smcFunc['db_free_result']($request);
  2066. // Get the subject of the topic we're about to announce.
  2067. $request = $smcFunc['db_query']('', '
  2068. SELECT m.subject
  2069. FROM {db_prefix}topics AS t
  2070. INNER JOIN {db_prefix}messages AS m ON (m.id_msg = t.id_first_msg)
  2071. WHERE t.id_topic = {int:current_topic}',
  2072. array(
  2073. 'current_topic' => $topic,
  2074. )
  2075. );
  2076. list ($context['topic_subject']) = $smcFunc['db_fetch_row']($request);
  2077. $smcFunc['db_free_result']($request);
  2078. censorText($context['announce_topic']['subject']);
  2079. $context['move'] = isset($_REQUEST['move']) ? 1 : 0;
  2080. $context['go_back'] = isset($_REQUEST['goback']) ? 1 : 0;
  2081. $context['sub_template'] = 'announce';
  2082. }
  2083. /**
  2084. * Send the announcement in chunks.
  2085. * splits the members to be sent a topic announcement into chunks.
  2086. * composes notification messages in all languages needed.
  2087. * does the actual sending of the topic announcements in chunks.
  2088. * calculates a rough estimate of the percentage items sent.
  2089. */
  2090. function AnnouncementSend()
  2091. {
  2092. global $topic, $board, $board_info, $context, $modSettings;
  2093. global $language, $scripturl, $txt, $user_info, $sourcedir, $smcFunc;
  2094. checkSession();
  2095. // @todo Might need an interface?
  2096. $chunkSize = empty($modSettings['mail_queue']) ? 50 : 500;
  2097. $context['start'] = empty($_REQUEST['start']) ? 0 : (int) $_REQUEST['start'];
  2098. $groups = array_merge($board_info['groups'], array(1));
  2099. if (isset($_POST['membergroups']))
  2100. $_POST['who'] = explode(',', $_POST['membergroups']);
  2101. // Check whether at least one membergroup was selected.
  2102. if (empty($_POST['who']))
  2103. fatal_lang_error('no_membergroup_selected');
  2104. // Make sure all membergroups are integers and can access the board of the announcement.
  2105. foreach ($_POST['who'] as $id => $mg)
  2106. $_POST['who'][$id] = in_array((int) $mg, $groups) ? (int) $mg : 0;
  2107. // Get the topic subject and censor it.
  2108. $request = $smcFunc['db_query']('', '
  2109. SELECT m.id_msg, m.subject, m.body
  2110. FROM {db_prefix}topics AS t
  2111. INNER JOIN {db_prefix}messages AS m ON (m.id_msg = t.id_first_msg)
  2112. WHERE t.id_topic = {int:current_topic}',
  2113. array(
  2114. 'current_topic' => $topic,
  2115. )
  2116. );
  2117. list ($id_msg, $context['topic_subject'], $message) = $smcFunc['db_fetch_row']($request);
  2118. $smcFunc['db_free_result']($request);
  2119. censorText($context['topic_subject']);
  2120. censorText($message);
  2121. $message = trim(un_htmlspecialchars(strip_tags(strtr(parse_bbc($message, false, $id_msg), array('<br />' => "\n", '</div>' => "\n", '</li>' => "\n", '&#91;' => '[', '&#93;' => ']')))));
  2122. // We need this in order to be able send emails.
  2123. require_once($sourcedir . '/Subs-Post.php');
  2124. // Select the email addresses for this batch.
  2125. $request = $smcFunc['db_query']('', '
  2126. SELECT mem.id_member, mem.email_address, mem.lngfile
  2127. FROM {db_prefix}members AS mem
  2128. WHERE mem.id_member != {int:current_member}' . (!empty($modSettings['allow_disableAnnounce']) ? '
  2129. AND mem.notify_announcements = {int:notify_announcements}' : '') . '
  2130. AND mem.is_activated = {int:is_activated}
  2131. AND (mem.id_group IN ({array_int:group_list}) OR mem.id_post_group IN ({array_int:group_list}) OR FIND_IN_SET({raw:additional_group_list}, mem.additional_groups) != 0)
  2132. AND mem.id_member > {int:start}
  2133. ORDER BY mem.id_member
  2134. LIMIT ' . $chunkSize,
  2135. array(
  2136. 'current_member' => $user_info['id'],
  2137. 'group_list' => $_POST['who'],
  2138. 'notify_announcements' => 1,
  2139. 'is_activated' => 1,
  2140. 'start' => $context['start'],
  2141. 'additional_group_list' => implode(', mem.additional_groups) != 0 OR FIND_IN_SET(', $_POST['who']),
  2142. )
  2143. );
  2144. // All members have received a mail. Go to the next screen.
  2145. if ($smcFunc['db_num_rows']($request) == 0)
  2146. {
  2147. if (!empty($_REQUEST['move']) && allowedTo('move_any'))
  2148. redirectexit('action=movetopic;topic=' . $topic . '.0' . (empty($_REQUEST['goback']) ? '' : ';goback'));
  2149. elseif (!empty($_REQUEST['goback']))
  2150. redirectexit('topic=' . $topic . '.new;boardseen#new', isBrowser('ie'));
  2151. else
  2152. redirectexit('board=' . $board . '.0');
  2153. }
  2154. $announcements = array();
  2155. // Loop through all members that'll receive an announcement in this batch.
  2156. while ($row = $smcFunc['db_fetch_assoc']($request))
  2157. {
  2158. $cur_language = empty($row['lngfile']) || empty($modSettings['userLanguage']) ? $language : $row['lngfile'];
  2159. // If the language wasn't defined yet, load it and compose a notification message.
  2160. if (!isset($announcements[$cur_language]))
  2161. {
  2162. $replacements = array(
  2163. 'TOPICSUBJECT' => $context['topic_subject'],
  2164. 'MESSAGE' => $message,
  2165. 'TOPICLINK' => $scripturl . '?topic=' . $topic . '.0',
  2166. );
  2167. $emaildata = loadEmailTemplate('new_announcement', $replacements, $cur_language);
  2168. $announcements[$cur_language] = array(
  2169. 'subject' => $emaildata['subject'],
  2170. 'body' => $emaildata['body'],
  2171. 'recipients' => array(),
  2172. );
  2173. }
  2174. $announcements[$cur_language]['recipients'][$row['id_member']] = $row['email_address'];
  2175. $context['start'] = $row['id_member'];
  2176. }
  2177. $smcFunc['db_free_result']($request);
  2178. // For each language send a different mail - low priority...
  2179. foreach ($announcements as $lang => $mail)
  2180. sendmail($mail['recipients'], $mail['subject'], $mail['body'], null, null, false, 5);
  2181. $context['percentage_done'] = round(100 * $context['start'] / $modSettings['latestMember'], 1);
  2182. $context['move'] = empty($_REQUEST['move']) ? 0 : 1;
  2183. $context['go_back'] = empty($_REQUEST['goback']) ? 0 : 1;
  2184. $context['membergroups'] = implode(',', $_POST['who']);
  2185. $context['sub_template'] = 'announcement_send';
  2186. // Go back to the correct language for the user ;).
  2187. if (!empty($modSettings['userLanguage']))
  2188. loadLanguage('Post');
  2189. }
  2190. /**
  2191. * notifies members who have requested notification for new topics
  2192. * * posted on a board of said posts.
  2193. * receives data on the topics to send out notifications to by the passed in array.
  2194. * only sends notifications to those who can *currently* see the topic (it doesn't matter if they could when they requested notification.)
  2195. * loads the Post language file multiple times for each language if the userLanguage setting is set.
  2196. * @param array &$topicData
  2197. */
  2198. function notifyMembersBoard(&$topicData)
  2199. {
  2200. global $txt, $scripturl, $language, $user_info;
  2201. global $modSettings, $sourcedir, $board, $smcFunc, $context;
  2202. require_once($sourcedir . '/Subs-Post.php');
  2203. // Do we have one or lots of topics?
  2204. if (isset($topicData['body']))
  2205. $topicData = array($topicData);
  2206. // Find out what boards we have... and clear out any rubbish!
  2207. $boards = array();
  2208. foreach ($topicData as $key => $topic)
  2209. {
  2210. if (!empty($topic['board']))
  2211. $boards[$topic['board']][] = $key;
  2212. else
  2213. {
  2214. unset($topic[$key]);
  2215. continue;
  2216. }
  2217. // Censor the subject and body...
  2218. censorText($topicData[$key]['subject']);
  2219. censorText($topicData[$key]['body']);
  2220. $topicData[$key]['subject'] = un_htmlspecialchars($topicData[$key]['subject']);
  2221. $topicData[$key]['body'] = trim(un_htmlspecialchars(strip_tags(strtr(parse_bbc($topicData[$key]['body'], false), array('<br />' => "\n", '</div>' => "\n", '</li>' => "\n", '&#91;' => '[', '&#93;' => ']')))));
  2222. }
  2223. // Just the board numbers.
  2224. $board_index = array_unique(array_keys($boards));
  2225. if (empty($board_index))
  2226. return;
  2227. // Yea, we need to add this to the digest queue.
  2228. $digest_insert = array();
  2229. foreach ($topicData as $id => $data)
  2230. $digest_insert[] = array($data['topic'], $data['msg'], 'topic', $user_info['id']);
  2231. $smcFunc['db_insert']('',
  2232. '{db_prefix}log_digest',
  2233. array(
  2234. 'id_topic' => 'int', 'id_msg' => 'int', 'note_type' => 'string', 'exclude' => 'int',
  2235. ),
  2236. $digest_insert,
  2237. array()
  2238. );
  2239. // Find the members with notification on for these boards.
  2240. $members = $smcFunc['db_query']('', '
  2241. SELECT
  2242. mem.id_member, mem.email_address, mem.notify_regularity, mem.notify_send_body, mem.lngfile,
  2243. ln.sent, ln.id_board, mem.id_group, mem.additional_groups, b.member_groups,
  2244. mem.id_post_group
  2245. FROM {db_prefix}log_notify AS ln
  2246. INNER JOIN {db_prefix}boards AS b ON (b.id_board = ln.id_board)
  2247. INNER JOIN {db_prefix}members AS mem ON (mem.id_member = ln.id_member)
  2248. WHERE ln.id_board IN ({array_int:board_list})
  2249. AND mem.id_member != {int:current_member}
  2250. AND mem.is_activated = {int:is_activated}
  2251. AND mem.notify_types != {int:notify_types}
  2252. AND mem.notify_regularity < {int:notify_regularity}
  2253. ORDER BY mem.lngfile',
  2254. array(
  2255. 'current_member' => $user_info['id'],
  2256. 'board_list' => $board_index,
  2257. 'is_activated' => 1,
  2258. 'notify_types' => 4,
  2259. 'notify_regularity' => 2,
  2260. )
  2261. );
  2262. while ($rowmember = $smcFunc['db_fetch_assoc']($members))
  2263. {
  2264. if ($rowmember['id_group'] != 1)
  2265. {
  2266. $allowed = explode(',', $rowmember['member_groups']);
  2267. $rowmember['additional_groups'] = explode(',', $rowmember['additional_groups']);
  2268. $rowmember['additional_groups'][] = $rowmember['id_group'];
  2269. $rowmember['additional_groups'][] = $rowmember['id_post_group'];
  2270. if (count(array_intersect($allowed, $rowmember['additional_groups'])) == 0)
  2271. continue;
  2272. }
  2273. $langloaded = loadLanguage('index', empty($rowmember['lngfile']) || empty($modSettings['userLanguage']) ? $language : $rowmember['lngfile'], false);
  2274. // Now loop through all the notifications to send for this board.
  2275. if (empty($boards[$rowmember['id_board']]))
  2276. continue;
  2277. $sentOnceAlready = 0;
  2278. foreach ($boards[$rowmember['id_board']] as $key)
  2279. {
  2280. // Don't notify the guy who started the topic!
  2281. // @todo In this case actually send them a "it's approved hooray" email :P
  2282. if ($topicData[$key]['poster'] == $rowmember['id_member'])
  2283. continue;
  2284. // Setup the string for adding the body to the message, if a user wants it.
  2285. $send_body = empty($modSettings['disallow_sendBody']) && !empty($rowmember['notify_send_body']);
  2286. $replacements = array(
  2287. 'TOPICSUBJECT' => $topicData[$key]['subject'],
  2288. 'TOPICLINK' => $scripturl . '?topic=' . $topicData[$key]['topic'] . '.new#new',
  2289. 'MESSAGE' => $topicData[$key]['body'],
  2290. 'UNSUBSCRIBELINK' => $scripturl . '?action=notifyboard;board=' . $topicData[$key]['board'] . '.0',
  2291. );
  2292. if (!$send_body)
  2293. unset($replacements['MESSAGE']);
  2294. // Figure out which email to send off
  2295. $emailtype = '';
  2296. // Send only if once is off or it's on and it hasn't been sent.
  2297. if (!empty($rowmember['notify_regularity']) && !$sentOnceAlready && empty($rowmember['sent']))
  2298. $emailtype = 'notify_boards_once';
  2299. elseif (empty($rowmember['notify_regularity']))
  2300. $emailtype = 'notify_boards';
  2301. if (!empty($emailtype))
  2302. {
  2303. $emailtype .= $send_body ? '_body' : '';
  2304. $emaildata = loadEmailTemplate($emailtype, $replacements, $langloaded);
  2305. sendmail($rowmember['email_address'], $emaildata['subject'], $emaildata['body'], null, null, false, 3);
  2306. }
  2307. $sentOnceAlready = 1;
  2308. }
  2309. }
  2310. $smcFunc['db_free_result']($members);
  2311. loadLanguage('index', $user_info['language']);
  2312. // Sent!
  2313. $smcFunc['db_query']('', '
  2314. UPDATE {db_prefix}log_notify
  2315. SET sent = {int:is_sent}
  2316. WHERE id_board IN ({array_int:board_list})
  2317. AND id_member != {int:current_member}',
  2318. array(
  2319. 'current_member' => $user_info['id'],
  2320. 'board_list' => $board_index,
  2321. 'is_sent' => 1,
  2322. )
  2323. );
  2324. }
  2325. /**
  2326. * Get the topic for display purposes.
  2327. * gets a summary of the most recent posts in a topic.
  2328. * depends on the topicSummaryPosts setting.
  2329. * if you are editing a post, only shows posts previous to that post.
  2330. */
  2331. function getTopic()
  2332. {
  2333. global $topic, $modSettings, $context, $smcFunc, $counter, $options;
  2334. if (isset($_REQUEST['xml']))
  2335. $limit = '
  2336. LIMIT ' . (empty($context['new_replies']) ? '0' : $context['new_replies']);
  2337. else
  2338. $limit = empty($modSettings['topicSummaryPosts']) ? '' : '
  2339. LIMIT ' . (int) $modSettings['topicSummaryPosts'];
  2340. // If you're modifying, get only those posts before the current one. (otherwise get all.)
  2341. $request = $smcFunc['db_query']('', '
  2342. SELECT
  2343. IFNULL(mem.real_name, m.poster_name) AS poster_name, m.poster_time,
  2344. m.body, m.smileys_enabled, m.id_msg, m.id_member
  2345. FROM {db_prefix}messages AS m
  2346. LEFT JOIN {db_prefix}members AS mem ON (mem.id_member = m.id_member)
  2347. WHERE m.id_topic = {int:current_topic}' . (isset($_REQUEST['msg']) ? '
  2348. AND m.id_msg < {int:id_msg}' : '') .(!$modSettings['postmod_active'] || allowedTo('approve_posts') ? '' : '
  2349. AND m.approved = {int:approved}') . '
  2350. ORDER BY m.id_msg DESC' . $limit,
  2351. array(
  2352. 'current_topic' => $topic,
  2353. 'id_msg' => isset($_REQUEST['msg']) ? (int) $_REQUEST['msg'] : 0,
  2354. 'approved' => 1,
  2355. )
  2356. );
  2357. $context['previous_posts'] = array();
  2358. while ($row = $smcFunc['db_fetch_assoc']($request))
  2359. {
  2360. // Censor, BBC, ...
  2361. censorText($row['body']);
  2362. $row['body'] = parse_bbc($row['body'], $row['smileys_enabled'], $row['id_msg']);
  2363. // ...and store.
  2364. $context['previous_posts'][] = array(
  2365. 'counter' => $counter++,
  2366. 'alternate' => $counter % 2,
  2367. 'poster' => $row['poster_name'],
  2368. 'message' => $row['body'],
  2369. 'time' => timeformat($row['poster_time']),
  2370. 'timestamp' => forum_time(true, $row['poster_time']),
  2371. 'id' => $row['id_msg'],
  2372. 'is_new' => !empty($context['new_replies']),
  2373. 'is_ignored' => !empty($modSettings['enable_buddylist']) && !empty($options['posts_apply_ignore_list']) && in_array($row['id_member'], $context['user']['ignoreusers']),
  2374. );
  2375. if (!empty($context['new_replies']))
  2376. $context['new_replies']--;
  2377. }
  2378. $smcFunc['db_free_result']($request);
  2379. }
  2380. /**
  2381. * loads a post an inserts it into the current editing text box.
  2382. * uses the Post language file.
  2383. * uses special (sadly browser dependent) javascript to parse entities for internationalization reasons.
  2384. * accessed with ?action=quotefast.
  2385. */
  2386. function QuoteFast()
  2387. {
  2388. global $modSettings, $user_info, $txt, $settings, $context;
  2389. global $sourcedir, $smcFunc;
  2390. loadLanguage('Post');
  2391. if (!isset($_REQUEST['xml']))
  2392. loadTemplate('Post');
  2393. include_once($sourcedir . '/Subs-Post.php');
  2394. $moderate_boards = boardsAllowedTo('moderate_board');
  2395. // Where we going if we need to?
  2396. $context['post_box_name'] = isset($_GET['pb']) ? $_GET['pb'] : '';
  2397. $request = $smcFunc['db_query']('', '
  2398. SELECT IFNULL(mem.real_name, m.poster_name) AS poster_name, m.poster_time, m.body, m.id_topic, m.subject,
  2399. m.id_board, m.id_member, m.approved
  2400. FROM {db_prefix}messages AS m
  2401. INNER JOIN {db_prefix}topics AS t ON (t.id_topic = m.id_topic)
  2402. INNER JOIN {db_prefix}boards AS b ON (b.id_board = m.id_board AND {query_see_board})
  2403. LEFT JOIN {db_prefix}members AS mem ON (mem.id_member = m.id_member)
  2404. WHERE m.id_msg = {int:id_msg}' . (isset($_REQUEST['modify']) || (!empty($moderate_boards) && $moderate_boards[0] == 0) ? '' : '
  2405. AND (t.locked = {int:not_locked}' . (empty($moderate_boards) ? '' : ' OR b.id_board IN ({array_int:moderation_board_list})') . ')') . '
  2406. LIMIT 1',
  2407. array(
  2408. 'current_member' => $user_info['id'],
  2409. 'moderation_board_list' => $moderate_boards,
  2410. 'id_msg' => (int) $_REQUEST['quote'],
  2411. 'not_locked' => 0,
  2412. )
  2413. );
  2414. $context['close_window'] = $smcFunc['db_num_rows']($request) == 0;
  2415. $row = $smcFunc['db_fetch_assoc']($request);
  2416. $smcFunc['db_free_result']($request);
  2417. $context['sub_template'] = 'quotefast';
  2418. if (!empty($row))
  2419. $can_view_post = $row['approved'] || ($row['id_member'] != 0 && $row['id_member'] == $user_info['id']) || allowedTo('approve_posts', $row['id_board']);
  2420. if (!empty($can_view_post))
  2421. {
  2422. // Remove special formatting we don't want anymore.
  2423. $row['body'] = un_preparsecode($row['body']);
  2424. // Censor the message!
  2425. censorText($row['body']);
  2426. $row['body'] = preg_replace('~<br ?/?' . '>~i', "\n", $row['body']);
  2427. // Want to modify a single message by double clicking it?
  2428. if (isset($_REQUEST['modify']))
  2429. {
  2430. censorText($row['subject']);
  2431. $context['sub_template'] = 'modifyfast';
  2432. $context['message'] = array(
  2433. 'id' => $_REQUEST['quote'],
  2434. 'body' => $row['body'],
  2435. 'subject' => addcslashes($row['subject'], '"'),
  2436. );
  2437. return;
  2438. }
  2439. // Remove any nested quotes.
  2440. if (!empty($modSettings['removeNestedQuotes']))
  2441. $row['body'] = preg_replace(array('~\n?\[quote.*?\].+?\[/quote\]\n?~is', '~^\n~', '~\[/quote\]~'), '', $row['body']);
  2442. // Make the body HTML if need be.
  2443. if (!empty($_REQUEST['mode']))
  2444. {
  2445. require_once($sourcedir . '/Subs-Editor.php');
  2446. $row['body'] = strtr($row['body'], array('&lt;' => '#smlt#', '&gt;' => '#smgt#', '&amp;' => '#smamp#'));
  2447. $row['body'] = bbc_to_html($row['body']);
  2448. $lb = '<br />';
  2449. }
  2450. else
  2451. $lb = "\n";
  2452. // Add a quote string on the front and end.
  2453. $context['quote']['xml'] = '[quote author=' . $row['poster_name'] . ' link=topic=' . $row['id_topic'] . '.msg' . (int) $_REQUEST['quote'] . '#msg' . (int) $_REQUEST['quote'] . ' date=' . $row['poster_time'] . ']' . $lb . $row['body'] . $lb . '[/quote]';
  2454. $context['quote']['text'] = strtr(un_htmlspecialchars($context['quote']['xml']), array('\'' => '\\\'', '\\' => '\\\\', "\n" => '\\n', '</script>' => '</\' + \'script>'));
  2455. $context['quote']['xml'] = strtr($context['quote']['xml'], array('&nbsp;' => '&#160;', '<' => '&lt;', '>' => '&gt;'));
  2456. $context['quote']['mozilla'] = strtr($smcFunc['htmlspecialchars']($context['quote']['text']), array('&quot;' => '"'));
  2457. }
  2458. //@todo Needs a nicer interface.
  2459. // In case our message has been removed in the meantime.
  2460. elseif (isset($_REQUEST['modify']))
  2461. {
  2462. $context['sub_template'] = 'modifyfast';
  2463. $context['message'] = array(
  2464. 'id' => 0,
  2465. 'body' => '',
  2466. 'subject' => '',
  2467. );
  2468. }
  2469. else
  2470. $context['quote'] = array(
  2471. 'xml' => '',
  2472. 'mozilla' => '',
  2473. 'text' => '',
  2474. );
  2475. }
  2476. function JavaScriptModify()
  2477. {
  2478. global $sourcedir, $modSettings, $board, $topic, $txt;
  2479. global $user_info, $context, $smcFunc, $language;
  2480. // We have to have a topic!
  2481. if (empty($topic))
  2482. obExit(false);
  2483. checkSession('get');
  2484. require_once($sourcedir . '/Subs-Post.php');
  2485. // Assume the first message if no message ID was given.
  2486. $request = $smcFunc['db_query']('', '
  2487. SELECT
  2488. t.locked, t.num_replies, t.id_member_started, t.id_first_msg,
  2489. m.id_msg, m.id_member, m.poster_time, m.subject, m.smileys_enabled, m.body, m.icon,
  2490. m.modified_time, m.modified_name, m.approved
  2491. FROM {db_prefix}messages AS m
  2492. INNER JOIN {db_prefix}topics AS t ON (t.id_topic = {int:current_topic})
  2493. WHERE m.id_msg = {raw:id_msg}
  2494. AND m.id_topic = {int:current_topic}' . (allowedTo('modify_any') || allowedTo('approve_posts') ? '' : (!$modSettings['postmod_active'] ? '
  2495. AND (m.id_member != {int:guest_id} AND m.id_member = {int:current_member})' : '
  2496. AND (m.approved = {int:is_approved} OR (m.id_member != {int:guest_id} AND m.id_member = {int:current_member}))')),
  2497. array(
  2498. 'current_member' => $user_info['id'],
  2499. 'current_topic' => $topic,
  2500. 'id_msg' => empty($_REQUEST['msg']) ? 't.id_first_msg' : (int) $_REQUEST['msg'],
  2501. 'is_approved' => 1,
  2502. 'guest_id' => 0,
  2503. )
  2504. );
  2505. if ($smcFunc['db_num_rows']($request) == 0)
  2506. fatal_lang_error('no_board', false);
  2507. $row = $smcFunc['db_fetch_assoc']($request);
  2508. $smcFunc['db_free_result']($request);
  2509. // Change either body or subject requires permissions to modify messages.
  2510. if (isset($_POST['message']) || isset($_POST['subject']) || isset($_REQUEST['icon']))
  2511. {
  2512. if (!empty($row['locked']))
  2513. isAllowedTo('moderate_board');
  2514. if ($row['id_member'] == $user_info['id'] && !allowedTo('modify_any'))
  2515. {
  2516. if ((!$modSettings['postmod_active'] || $row['approved']) && !empty($modSettings['edit_disable_time']) && $row['poster_time'] + ($modSettings['edit_disable_time'] + 5) * 60 < time())
  2517. fatal_lang_error('modify_post_time_passed', false);
  2518. elseif ($row['id_member_started'] == $user_info['id'] && !allowedTo('modify_own'))
  2519. isAllowedTo('modify_replies');
  2520. else
  2521. isAllowedTo('modify_own');
  2522. }
  2523. // Otherwise, they're locked out; someone who can modify the replies is needed.
  2524. elseif ($row['id_member_started'] == $user_info['id'] && !allowedTo('modify_any'))
  2525. isAllowedTo('modify_replies');
  2526. else
  2527. isAllowedTo('modify_any');
  2528. // Only log this action if it wasn't your message.
  2529. $moderationAction = $row['id_member'] != $user_info['id'];
  2530. }
  2531. $post_errors = array();
  2532. if (isset($_POST['subject']) && $smcFunc['htmltrim']($smcFunc['htmlspecialchars']($_POST['subject'])) !== '')
  2533. {
  2534. $_POST['subject'] = strtr($smcFunc['htmlspecialchars']($_POST['subject']), array("\r" => '', "\n" => '', "\t" => ''));
  2535. // Maximum number of characters.
  2536. if ($smcFunc['strlen']($_POST['subject']) > 100)
  2537. $_POST['subject'] = $smcFunc['substr']($_POST['subject'], 0, 100);
  2538. }
  2539. elseif (isset($_POST['subject']))
  2540. {
  2541. $post_errors[] = 'no_subject';
  2542. unset($_POST['subject']);
  2543. }
  2544. if (isset($_POST['message']))
  2545. {
  2546. if ($smcFunc['htmltrim']($smcFunc['htmlspecialchars']($_POST['message'])) === '')
  2547. {
  2548. $post_errors[] = 'no_message';
  2549. unset($_POST['message']);
  2550. }
  2551. elseif (!empty($modSettings['max_messageLength']) && $smcFunc['strlen']($_POST['message']) > $modSettings['max_messageLength'])
  2552. {
  2553. $post_errors[] = 'long_message';
  2554. unset($_POST['message']);
  2555. }
  2556. else
  2557. {
  2558. $_POST['message'] = $smcFunc['htmlspecialchars']($_POST['message'], ENT_QUOTES);
  2559. preparsecode($_POST['message']);
  2560. if ($smcFunc['htmltrim'](strip_tags(parse_bbc($_POST['message'], false), '<img>')) === '')
  2561. {
  2562. $post_errors[] = 'no_message';
  2563. unset($_POST['message']);
  2564. }
  2565. }
  2566. }
  2567. if (isset($_POST['lock']))
  2568. {
  2569. if (!allowedTo(array('lock_any', 'lock_own')) || (!allowedTo('lock_any') && $user_info['id'] != $row['id_member']))
  2570. unset($_POST['lock']);
  2571. elseif (!allowedTo('lock_any'))
  2572. {
  2573. if ($row['locked'] == 1)
  2574. unset($_POST['lock']);
  2575. else
  2576. $_POST['lock'] = empty($_POST['lock']) ? 0 : 2;
  2577. }
  2578. elseif (!empty($row['locked']) && !empty($_POST['lock']) || $_POST['lock'] == $row['locked'])
  2579. unset($_POST['lock']);
  2580. else
  2581. $_POST['lock'] = empty($_POST['lock']) ? 0 : 1;
  2582. }
  2583. if (isset($_POST['sticky']) && !allowedTo('make_sticky'))
  2584. unset($_POST['sticky']);
  2585. if (empty($post_errors))
  2586. {
  2587. $msgOptions = array(
  2588. 'id' => $row['id_msg'],
  2589. 'subject' => isset($_POST['subject']) ? $_POST['subject'] : null,
  2590. 'body' => isset($_POST['message']) ? $_POST['message'] : null,
  2591. 'icon' => isset($_REQUEST['icon']) ? preg_replace('~[\./\\\\*\':"<>]~', '', $_REQUEST['icon']) : null,
  2592. );
  2593. $topicOptions = array(
  2594. 'id' => $topic,
  2595. 'board' => $board,
  2596. 'lock_mode' => isset($_POST['lock']) ? (int) $_POST['lock'] : null,
  2597. 'sticky_mode' => isset($_POST['sticky']) && !empty($modSettings['enableStickyTopics']) ? (int) $_POST['sticky'] : null,
  2598. 'mark_as_read' => true,
  2599. );
  2600. $posterOptions = array();
  2601. // Only consider marking as editing if they have edited the subject, message or icon.
  2602. if ((isset($_POST['subject']) && $_POST['subject'] != $row['subject']) || (isset($_POST['message']) && $_POST['message'] != $row['body']) || (isset($_REQUEST['icon']) && $_REQUEST['icon'] != $row['icon']))
  2603. {
  2604. // And even then only if the time has passed...
  2605. if (time() - $row['poster_time'] > $modSettings['edit_wait_time'] || $user_info['id'] != $row['id_member'])
  2606. {
  2607. $msgOptions['modify_time'] = time();
  2608. $msgOptions['modify_name'] = $user_info['name'];
  2609. }
  2610. }
  2611. // If nothing was changed there's no need to add an entry to the moderation log.
  2612. else
  2613. $moderationAction = false;
  2614. modifyPost($msgOptions, $topicOptions, $posterOptions);
  2615. // If we didn't change anything this time but had before put back the old info.
  2616. if (!isset($msgOptions['modify_time']) && !empty($row['modified_time']))
  2617. {
  2618. $msgOptions['modify_time'] = $row['modified_time'];
  2619. $msgOptions['modify_name'] = $row['modified_name'];
  2620. }
  2621. // Changing the first subject updates other subjects to 'Re: new_subject'.
  2622. if (isset($_POST['subject']) && isset($_REQUEST['change_all_subjects']) && $row['id_first_msg'] == $row['id_msg'] && !empty($row['num_replies']) && (allowedTo('modify_any') || ($row['id_member_started'] == $user_info['id'] && allowedTo('modify_replies'))))
  2623. {
  2624. // Get the proper (default language) response prefix first.
  2625. if (!isset($context['response_prefix']) && !($context['response_prefix'] = cache_get_data('response_prefix')))
  2626. {
  2627. if ($language === $user_info['language'])
  2628. $context['response_prefix'] = $txt['response_prefix'];
  2629. else
  2630. {
  2631. loadLanguage('index', $language, false);
  2632. $context['response_prefix'] = $txt['response_prefix'];
  2633. loadLanguage('index');
  2634. }
  2635. cache_put_data('response_prefix', $context['response_prefix'], 600);
  2636. }
  2637. $smcFunc['db_query']('', '
  2638. UPDATE {db_prefix}messages
  2639. SET subject = {string:subject}
  2640. WHERE id_topic = {int:current_topic}
  2641. AND id_msg != {int:id_first_msg}',
  2642. array(
  2643. 'current_topic' => $topic,
  2644. 'id_first_msg' => $row['id_first_msg'],
  2645. 'subject' => $context['response_prefix'] . $_POST['subject'],
  2646. )
  2647. );
  2648. }
  2649. if (!empty($moderationAction))
  2650. logAction('modify', array('topic' => $topic, 'message' => $row['id_msg'], 'member' => $row['id_member'], 'board' => $board));
  2651. }
  2652. if (isset($_REQUEST['xml']))
  2653. {
  2654. $context['sub_template'] = 'modifydone';
  2655. if (empty($post_errors) && isset($msgOptions['subject']) && isset($msgOptions['body']))
  2656. {
  2657. $context['message'] = array(
  2658. 'id' => $row['id_msg'],
  2659. 'modified' => array(
  2660. 'time' => isset($msgOptions['modify_time']) ? timeformat($msgOptions['modify_time']) : '',
  2661. 'timestamp' => isset($msgOptions['modify_time']) ? forum_time(true, $msgOptions['modify_time']) : 0,
  2662. 'name' => isset($msgOptions['modify_time']) ? $msgOptions['modify_name'] : '',
  2663. ),
  2664. 'subject' => $msgOptions['subject'],
  2665. 'first_in_topic' => $row['id_msg'] == $row['id_first_msg'],
  2666. 'body' => strtr($msgOptions['body'], array(']]>' => ']]]]><![CDATA[>')),
  2667. );
  2668. censorText($context['message']['subject']);
  2669. censorText($context['message']['body']);
  2670. $context['message']['body'] = parse_bbc($context['message']['body'], $row['smileys_enabled'], $row['id_msg']);
  2671. }
  2672. // Topic?
  2673. elseif (empty($post_errors))
  2674. {
  2675. $context['sub_template'] = 'modifytopicdone';
  2676. $context['message'] = array(
  2677. 'id' => $row['id_msg'],
  2678. 'modified' => array(
  2679. 'time' => isset($msgOptions['modify_time']) ? timeformat($msgOptions['modify_time']) : '',
  2680. 'timestamp' => isset($msgOptions['modify_time']) ? forum_time(true, $msgOptions['modify_time']) : 0,
  2681. 'name' => isset($msgOptions['modify_time']) ? $msgOptions['modify_name'] : '',
  2682. ),
  2683. 'subject' => isset($msgOptions['subject']) ? $msgOptions['subject'] : '',
  2684. );
  2685. censorText($context['message']['subject']);
  2686. }
  2687. else
  2688. {
  2689. $context['message'] = array(
  2690. 'id' => $row['id_msg'],
  2691. 'errors' => array(),
  2692. 'error_in_subject' => in_array('no_subject', $post_errors),
  2693. 'error_in_body' => in_array('no_message', $post_errors) || in_array('long_message', $post_errors),
  2694. );
  2695. loadLanguage('Errors');
  2696. foreach ($post_errors as $post_error)
  2697. {
  2698. if ($post_error == 'long_message')
  2699. $context['message']['errors'][] = sprintf($txt['error_' . $post_error], $modSettings['max_messageLength']);
  2700. else
  2701. $context['message']['errors'][] = $txt['error_' . $post_error];
  2702. }
  2703. }
  2704. }
  2705. else
  2706. obExit(false);
  2707. }
  2708. ?>