1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174117511761177117811791180118111821183118411851186118711881189119011911192119311941195119611971198119912001201120212031204120512061207120812091210121112121213121412151216121712181219122012211222122312241225122612271228122912301231123212331234123512361237123812391240124112421243124412451246124712481249125012511252125312541255125612571258125912601261126212631264126512661267126812691270127112721273127412751276127712781279128012811282128312841285128612871288128912901291129212931294129512961297129812991300130113021303130413051306130713081309131013111312131313141315131613171318131913201321132213231324132513261327132813291330133113321333133413351336133713381339134013411342134313441345134613471348134913501351135213531354135513561357135813591360136113621363136413651366136713681369137013711372137313741375137613771378137913801381138213831384138513861387138813891390139113921393139413951396139713981399140014011402140314041405140614071408140914101411141214131414141514161417141814191420142114221423142414251426142714281429143014311432143314341435143614371438143914401441144214431444144514461447144814491450145114521453145414551456145714581459146014611462146314641465146614671468146914701471147214731474147514761477147814791480148114821483148414851486148714881489149014911492149314941495149614971498149915001501150215031504150515061507150815091510151115121513151415151516151715181519152015211522152315241525152615271528152915301531153215331534153515361537153815391540154115421543154415451546154715481549155015511552155315541555155615571558155915601561156215631564156515661567156815691570157115721573157415751576157715781579158015811582158315841585158615871588158915901591159215931594159515961597159815991600160116021603160416051606160716081609161016111612161316141615161616171618161916201621162216231624162516261627162816291630163116321633163416351636163716381639164016411642164316441645164616471648164916501651165216531654165516561657165816591660166116621663166416651666166716681669167016711672167316741675167616771678167916801681168216831684168516861687168816891690169116921693169416951696169716981699170017011702170317041705170617071708170917101711171217131714171517161717171817191720172117221723172417251726172717281729173017311732173317341735173617371738173917401741174217431744174517461747174817491750175117521753175417551756175717581759176017611762176317641765176617671768176917701771177217731774177517761777177817791780178117821783178417851786178717881789179017911792179317941795179617971798179918001801180218031804180518061807180818091810181118121813181418151816181718181819182018211822182318241825182618271828182918301831183218331834183518361837183818391840184118421843184418451846184718481849185018511852185318541855185618571858185918601861186218631864186518661867186818691870187118721873187418751876187718781879188018811882188318841885188618871888188918901891189218931894189518961897189818991900190119021903190419051906190719081909191019111912191319141915191619171918191919201921192219231924192519261927192819291930193119321933193419351936193719381939194019411942194319441945194619471948194919501951195219531954195519561957195819591960196119621963196419651966196719681969197019711972197319741975197619771978197919801981198219831984198519861987198819891990199119921993199419951996199719981999200020012002200320042005200620072008200920102011201220132014201520162017201820192020202120222023202420252026202720282029203020312032203320342035203620372038203920402041204220432044204520462047204820492050205120522053205420552056205720582059206020612062206320642065206620672068206920702071207220732074207520762077207820792080208120822083208420852086208720882089209020912092209320942095209620972098209921002101210221032104210521062107210821092110211121122113211421152116211721182119212021212122212321242125212621272128212921302131213221332134213521362137213821392140214121422143214421452146214721482149215021512152215321542155215621572158215921602161216221632164216521662167216821692170217121722173217421752176217721782179218021812182218321842185218621872188218921902191219221932194219521962197219821992200220122022203220422052206220722082209221022112212221322142215221622172218221922202221222222232224222522262227222822292230223122322233223422352236223722382239224022412242224322442245224622472248224922502251225222532254225522562257225822592260226122622263226422652266226722682269227022712272227322742275227622772278227922802281228222832284228522862287228822892290229122922293229422952296229722982299230023012302230323042305230623072308230923102311231223132314231523162317231823192320232123222323232423252326232723282329233023312332233323342335233623372338233923402341234223432344234523462347234823492350235123522353235423552356235723582359236023612362236323642365236623672368236923702371237223732374237523762377237823792380238123822383238423852386238723882389239023912392239323942395239623972398239924002401240224032404240524062407240824092410241124122413241424152416241724182419242024212422242324242425242624272428242924302431243224332434243524362437243824392440244124422443244424452446244724482449245024512452245324542455245624572458245924602461246224632464246524662467246824692470247124722473247424752476247724782479248024812482248324842485248624872488248924902491249224932494249524962497249824992500250125022503250425052506250725082509251025112512251325142515251625172518251925202521252225232524252525262527252825292530253125322533253425352536253725382539254025412542254325442545254625472548254925502551255225532554255525562557255825592560256125622563256425652566256725682569257025712572257325742575257625772578257925802581258225832584258525862587258825892590259125922593259425952596259725982599260026012602260326042605260626072608260926102611261226132614261526162617261826192620262126222623262426252626262726282629263026312632263326342635263626372638263926402641264226432644264526462647264826492650265126522653265426552656265726582659266026612662266326642665266626672668266926702671267226732674267526762677267826792680268126822683268426852686268726882689269026912692269326942695269626972698269927002701270227032704270527062707270827092710271127122713271427152716271727182719272027212722272327242725272627272728272927302731273227332734273527362737273827392740274127422743274427452746274727482749275027512752275327542755275627572758275927602761276227632764276527662767276827692770277127722773277427752776277727782779278027812782278327842785278627872788278927902791279227932794279527962797279827992800280128022803280428052806280728082809281028112812281328142815281628172818281928202821282228232824282528262827282828292830283128322833283428352836283728382839284028412842284328442845284628472848284928502851285228532854285528562857285828592860286128622863286428652866286728682869287028712872287328742875287628772878287928802881288228832884288528862887288828892890289128922893289428952896289728982899290029012902290329042905290629072908290929102911291229132914291529162917291829192920292129222923292429252926292729282929293029312932293329342935293629372938293929402941294229432944294529462947294829492950295129522953295429552956295729582959296029612962296329642965296629672968296929702971297229732974297529762977297829792980298129822983298429852986298729882989299029912992299329942995299629972998299930003001300230033004300530063007300830093010301130123013301430153016301730183019302030213022302330243025302630273028302930303031303230333034303530363037303830393040304130423043304430453046304730483049305030513052305330543055305630573058305930603061306230633064 |
- <?php
- /**
- * The job of this file is to handle everything related to posting replies,
- * new topics, quotes, and modifications to existing posts. It also handles
- * quoting posts by way of javascript.
- * Simple Machines Forum (SMF)
- *
- * @package SMF
- * @author Simple Machines http://www.simplemachines.org
- * @copyright 2011 Simple Machines
- * @license http://www.simplemachines.org/about/smf/license.php BSD
- *
- * @version 2.1 Alpha 1
- */
- if (!defined('SMF'))
- die('Hacking attempt...');
- /**
- * handles showing the post screen, loading the post to be modified, and loading any post quoted.
- *
- * - additionally handles previews of posts.
- * - @uses the Post template and language file, main sub template.
- * - allows wireless access using the protocol_post sub template.
- * - requires different permissions depending on the actions, but most notably post_new, post_reply_own, and post_reply_any.
- * - shows options for the editing and posting of calendar events and attachments, as well as the posting of polls.
- * - accessed from ?action=post.
- */
- function Post($post_errors = array())
- {
- global $txt, $scripturl, $topic, $modSettings, $board;
- global $user_info, $sc, $board_info, $context, $settings;
- global $sourcedir, $options, $smcFunc, $language;
- loadLanguage('Post');
- // You can't reply with a poll... hacker.
- if (isset($_REQUEST['poll']) && !empty($topic) && !isset($_REQUEST['msg']))
- unset($_REQUEST['poll']);
- // Posting an event?
- $context['make_event'] = isset($_REQUEST['calendar']);
- $context['robot_no_index'] = true;
- // You must be posting to *some* board.
- if (empty($board) && !$context['make_event'])
- fatal_lang_error('no_board', false);
- require_once($sourcedir . '/Subs-Post.php');
- if (isset($_REQUEST['xml']))
- {
- $context['sub_template'] = 'post';
- // Just in case of an earlier error...
- $context['preview_message'] = '';
- $context['preview_subject'] = '';
- }
- // No message is complete without a topic.
- if (empty($topic) && !empty($_REQUEST['msg']))
- {
- $request = $smcFunc['db_query']('', '
- SELECT id_topic
- FROM {db_prefix}messages
- WHERE id_msg = {int:msg}',
- array(
- 'msg' => (int) $_REQUEST['msg'],
- ));
- if ($smcFunc['db_num_rows']($request) != 1)
- unset($_REQUEST['msg'], $_POST['msg'], $_GET['msg']);
- else
- list ($topic) = $smcFunc['db_fetch_row']($request);
- $smcFunc['db_free_result']($request);
- }
- // Check if it's locked. It isn't locked if no topic is specified.
- if (!empty($topic))
- {
- $request = $smcFunc['db_query']('', '
- SELECT
- t.locked, IFNULL(ln.id_topic, 0) AS notify, t.is_sticky, t.id_poll, t.id_last_msg, mf.id_member,
- t.id_first_msg, mf.subject,
- CASE WHEN ml.poster_time > ml.modified_time THEN ml.poster_time ELSE ml.modified_time END AS last_post_time
- FROM {db_prefix}topics AS t
- LEFT JOIN {db_prefix}log_notify AS ln ON (ln.id_topic = t.id_topic AND ln.id_member = {int:current_member})
- LEFT JOIN {db_prefix}messages AS mf ON (mf.id_msg = t.id_first_msg)
- LEFT JOIN {db_prefix}messages AS ml ON (ml.id_msg = t.id_last_msg)
- WHERE t.id_topic = {int:current_topic}
- LIMIT 1',
- array(
- 'current_member' => $user_info['id'],
- 'current_topic' => $topic,
- )
- );
- list ($locked, $context['notify'], $sticky, $pollID, $context['topic_last_message'], $id_member_poster, $id_first_msg, $first_subject, $lastPostTime) = $smcFunc['db_fetch_row']($request);
- $smcFunc['db_free_result']($request);
- // If this topic already has a poll, they sure can't add another.
- if (isset($_REQUEST['poll']) && $pollID > 0)
- unset($_REQUEST['poll']);
- if (empty($_REQUEST['msg']))
- {
- if ($user_info['is_guest'] && !allowedTo('post_reply_any') && (!$modSettings['postmod_active'] || !allowedTo('post_unapproved_replies_any')))
- is_not_guest();
- // By default the reply will be approved...
- $context['becomes_approved'] = true;
- if ($id_member_poster != $user_info['id'])
- {
- if ($modSettings['postmod_active'] && allowedTo('post_unapproved_replies_any') && !allowedTo('post_reply_any'))
- $context['becomes_approved'] = false;
- else
- isAllowedTo('post_reply_any');
- }
- elseif (!allowedTo('post_reply_any'))
- {
- if ($modSettings['postmod_active'] && allowedTo('post_unapproved_replies_own') && !allowedTo('post_reply_own'))
- $context['becomes_approved'] = false;
- else
- isAllowedTo('post_reply_own');
- }
- }
- else
- $context['becomes_approved'] = true;
- $context['can_lock'] = allowedTo('lock_any') || ($user_info['id'] == $id_member_poster && allowedTo('lock_own'));
- $context['can_sticky'] = allowedTo('make_sticky') && !empty($modSettings['enableStickyTopics']);
- $context['notify'] = !empty($context['notify']);
- $context['sticky'] = isset($_REQUEST['sticky']) ? !empty($_REQUEST['sticky']) : $sticky;
- // Check whether this is a really old post being bumped...
- if (!empty($modSettings['oldTopicDays']) && $lastPostTime + $modSettings['oldTopicDays'] * 86400 < time() && empty($sticky) && !isset($_REQUEST['subject']))
- $post_errors[] = array('old_topic', array($modSettings['oldTopicDays']));
- }
- else
- {
- $context['becomes_approved'] = true;
- if ((!$context['make_event'] || !empty($board)))
- {
- if ($modSettings['postmod_active'] && !allowedTo('post_new') && allowedTo('post_unapproved_topics'))
- $context['becomes_approved'] = false;
- else
- isAllowedTo('post_new');
- }
- $locked = 0;
- // @todo These won't work if you're making an event.
- $context['can_lock'] = allowedTo(array('lock_any', 'lock_own'));
- $context['can_sticky'] = allowedTo('make_sticky') && !empty($modSettings['enableStickyTopics']);
- $context['notify'] = !empty($context['notify']);
- $context['sticky'] = !empty($_REQUEST['sticky']);
- }
- // @todo These won't work if you're posting an event!
- $context['can_notify'] = allowedTo('mark_any_notify');
- $context['can_move'] = allowedTo('move_any');
- $context['move'] = !empty($_REQUEST['move']);
- $context['announce'] = !empty($_REQUEST['announce']);
- // You can only announce topics that will get approved...
- $context['can_announce'] = allowedTo('announce_topic') && $context['becomes_approved'];
- $context['locked'] = !empty($locked) || !empty($_REQUEST['lock']);
- $context['can_quote'] = empty($modSettings['disabledBBC']) || !in_array('quote', explode(',', $modSettings['disabledBBC']));
- // Generally don't show the approval box... (Assume we want things approved)
- $context['show_approval'] = allowedTo('approve_posts') && $context['becomes_approved'] ? 2 : (allowedTo('approve_posts') ? 1 : 0);
- // An array to hold all the attachments for this topic.
- $context['current_attachments'] = array();
- // Don't allow a post if it's locked and you aren't all powerful.
- if ($locked && !allowedTo('moderate_board'))
- fatal_lang_error('topic_locked', false);
- // Check the users permissions - is the user allowed to add or post a poll?
- if (isset($_REQUEST['poll']) && $modSettings['pollMode'] == '1')
- {
- // New topic, new poll.
- if (empty($topic))
- isAllowedTo('poll_post');
- // This is an old topic - but it is yours! Can you add to it?
- elseif ($user_info['id'] == $id_member_poster && !allowedTo('poll_add_any'))
- isAllowedTo('poll_add_own');
- // If you're not the owner, can you add to any poll?
- else
- isAllowedTo('poll_add_any');
- require_once($sourcedir . '/Subs-Members.php');
- $allowedVoteGroups = groupsAllowedTo('poll_vote', $board);
- // Set up the poll options.
- $context['poll_options'] = array(
- 'max_votes' => empty($_POST['poll_max_votes']) ? '1' : max(1, $_POST['poll_max_votes']),
- 'hide' => empty($_POST['poll_hide']) ? 0 : $_POST['poll_hide'],
- 'expire' => !isset($_POST['poll_expire']) ? '' : $_POST['poll_expire'],
- 'change_vote' => isset($_POST['poll_change_vote']),
- 'guest_vote' => isset($_POST['poll_guest_vote']),
- 'guest_vote_enabled' => in_array(-1, $allowedVoteGroups['allowed']),
- );
- // Make all five poll choices empty.
- $context['choices'] = array(
- array('id' => 0, 'number' => 1, 'label' => '', 'is_last' => false),
- array('id' => 1, 'number' => 2, 'label' => '', 'is_last' => false),
- array('id' => 2, 'number' => 3, 'label' => '', 'is_last' => false),
- array('id' => 3, 'number' => 4, 'label' => '', 'is_last' => false),
- array('id' => 4, 'number' => 5, 'label' => '', 'is_last' => true)
- );
- $context['last_choice_id'] = 4;
- }
- if ($context['make_event'])
- {
- // They might want to pick a board.
- if (!isset($context['current_board']))
- $context['current_board'] = 0;
- // Start loading up the event info.
- $context['event'] = array();
- $context['event']['title'] = isset($_REQUEST['evtitle']) ? htmlspecialchars(stripslashes($_REQUEST['evtitle'])) : '';
- $context['event']['id'] = isset($_REQUEST['eventid']) ? (int) $_REQUEST['eventid'] : -1;
- $context['event']['new'] = $context['event']['id'] == -1;
- // Permissions check!
- isAllowedTo('calendar_post');
- // Editing an event? (but NOT previewing!?)
- if (empty($context['event']['new']) && !isset($_REQUEST['subject']))
- {
- // If the user doesn't have permission to edit the post in this topic, redirect them.
- if ((empty($id_member_poster) || $id_member_poster != $user_info['id'] || !allowedTo('modify_own')) && !allowedTo('modify_any'))
- {
- require_once($sourcedir . '/Calendar.php');
- return CalendarPost();
- }
- // Get the current event information.
- $request = $smcFunc['db_query']('', '
- SELECT
- id_member, title, MONTH(start_date) AS month, DAYOFMONTH(start_date) AS day,
- YEAR(start_date) AS year, (TO_DAYS(end_date) - TO_DAYS(start_date)) AS span
- FROM {db_prefix}calendar
- WHERE id_event = {int:id_event}
- LIMIT 1',
- array(
- 'id_event' => $context['event']['id'],
- )
- );
- $row = $smcFunc['db_fetch_assoc']($request);
- $smcFunc['db_free_result']($request);
- // Make sure the user is allowed to edit this event.
- if ($row['id_member'] != $user_info['id'])
- isAllowedTo('calendar_edit_any');
- elseif (!allowedTo('calendar_edit_any'))
- isAllowedTo('calendar_edit_own');
- $context['event']['month'] = $row['month'];
- $context['event']['day'] = $row['day'];
- $context['event']['year'] = $row['year'];
- $context['event']['title'] = $row['title'];
- $context['event']['span'] = $row['span'] + 1;
- }
- else
- {
- $today = getdate();
- // You must have a month and year specified!
- if (!isset($_REQUEST['month']))
- $_REQUEST['month'] = $today['mon'];
- if (!isset($_REQUEST['year']))
- $_REQUEST['year'] = $today['year'];
- $context['event']['month'] = (int) $_REQUEST['month'];
- $context['event']['year'] = (int) $_REQUEST['year'];
- $context['event']['day'] = isset($_REQUEST['day']) ? $_REQUEST['day'] : ($_REQUEST['month'] == $today['mon'] ? $today['mday'] : 0);
- $context['event']['span'] = isset($_REQUEST['span']) ? $_REQUEST['span'] : 1;
- // Make sure the year and month are in the valid range.
- if ($context['event']['month'] < 1 || $context['event']['month'] > 12)
- fatal_lang_error('invalid_month', false);
- if ($context['event']['year'] < $modSettings['cal_minyear'] || $context['event']['year'] > $modSettings['cal_maxyear'])
- fatal_lang_error('invalid_year', false);
- // Get a list of boards they can post in.
- $boards = boardsAllowedTo('post_new');
- if (empty($boards))
- fatal_lang_error('cannot_post_new', 'user');
- // Load a list of boards for this event in the context.
- require_once($sourcedir . '/Subs-MessageIndex.php');
- $boardListOptions = array(
- 'included_boards' => in_array(0, $boards) ? null : $boards,
- 'not_redirection' => true,
- 'use_permissions' => true,
- 'selected_board' => empty($context['current_board']) ? $modSettings['cal_defaultboard'] : $context['current_board'],
- );
- $context['event']['categories'] = getBoardList($boardListOptions);
- }
- // Find the last day of the month.
- $context['event']['last_day'] = (int) strftime('%d', mktime(0, 0, 0, $context['event']['month'] == 12 ? 1 : $context['event']['month'] + 1, 0, $context['event']['month'] == 12 ? $context['event']['year'] + 1 : $context['event']['year']));
- $context['event']['board'] = !empty($board) ? $board : $modSettings['cal_defaultboard'];
- }
- // See if any new replies have come along.
- // Huh, $_REQUEST['msg'] is set upon submit, so this doesn't get executed at submit
- // only at preview
- if (empty($_REQUEST['msg']) && !empty($topic))
- {
- if (empty($options['no_new_reply_warning']) && isset($_REQUEST['last_msg']) && $context['topic_last_message'] > $_REQUEST['last_msg'])
- {
- $request = $smcFunc['db_query']('', '
- SELECT COUNT(*)
- FROM {db_prefix}messages
- WHERE id_topic = {int:current_topic}
- AND id_msg > {int:last_msg}' . (!$modSettings['postmod_active'] || allowedTo('approve_posts') ? '' : '
- AND approved = {int:approved}') . '
- LIMIT 1',
- array(
- 'current_topic' => $topic,
- 'last_msg' => (int) $_REQUEST['last_msg'],
- 'approved' => 1,
- )
- );
- list ($context['new_replies']) = $smcFunc['db_fetch_row']($request);
- $smcFunc['db_free_result']($request);
- if (!empty($context['new_replies']))
- {
- if ($context['new_replies'] == 1)
- $txt['error_new_replies'] = isset($_GET['last_msg']) ? $txt['error_new_reply_reading'] : $txt['error_new_reply'];
- else
- $txt['error_new_replies'] = sprintf(isset($_GET['last_msg']) ? $txt['error_new_replies_reading'] : $txt['error_new_replies'], $context['new_replies']);
- $post_errors[] = 'new_replies';
- $modSettings['topicSummaryPosts'] = $context['new_replies'] > $modSettings['topicSummaryPosts'] ? max($modSettings['topicSummaryPosts'], 5) : $modSettings['topicSummaryPosts'];
- }
- }
- }
- // Get a response prefix (like 'Re:') in the default forum language.
- if (!isset($context['response_prefix']) && !($context['response_prefix'] = cache_get_data('response_prefix')))
- {
- if ($language === $user_info['language'])
- $context['response_prefix'] = $txt['response_prefix'];
- else
- {
- loadLanguage('index', $language, false);
- $context['response_prefix'] = $txt['response_prefix'];
- loadLanguage('index');
- }
- cache_put_data('response_prefix', $context['response_prefix'], 600);
- }
- // Previewing, modifying, or posting?
- // Do we have a body, but an error happened.
- if (isset($_REQUEST['message']) || !empty($context['post_error']))
- {
- // Validate inputs.
- if (empty($context['post_error']))
- {
- // This means they didn't click Post and get an error.
- $really_previewing = true;
- }
- else
- {
- if (!isset($_REQUEST['subject']))
- $_REQUEST['subject'] = '';
- if (!isset($_REQUEST['message']))
- $_REQUEST['message'] = '';
- if (!isset($_REQUEST['icon']))
- $_REQUEST['icon'] = 'xx';
- // They are previewing if they asked to preview (i.e. came from quick reply).
- $really_previewing = !empty($_POST['preview']);
- }
- // In order to keep the approval status flowing through, we have to pass it through the form...
- $context['becomes_approved'] = empty($_REQUEST['not_approved']);
- $context['show_approval'] = isset($_REQUEST['approve']) ? ($_REQUEST['approve'] ? 2 : 1) : 0;
- $context['can_announce'] &= $context['becomes_approved'];
- // Set up the inputs for the form.
- $form_subject = strtr($smcFunc['htmlspecialchars']($_REQUEST['subject']), array("\r" => '', "\n" => '', "\t" => ''));
- $form_message = $smcFunc['htmlspecialchars']($_REQUEST['message'], ENT_QUOTES);
- // Make sure the subject isn't too long - taking into account special characters.
- if ($smcFunc['strlen']($form_subject) > 100)
- $form_subject = $smcFunc['substr']($form_subject, 0, 100);
- if (isset($_REQUEST['poll']))
- {
- $context['question'] = isset($_REQUEST['question']) ? $smcFunc['htmlspecialchars'](trim($_REQUEST['question'])) : '';
- $context['choices'] = array();
- $choice_id = 0;
- $_POST['options'] = empty($_POST['options']) ? array() : htmlspecialchars__recursive($_POST['options']);
- foreach ($_POST['options'] as $option)
- {
- if (trim($option) == '')
- continue;
- $context['choices'][] = array(
- 'id' => $choice_id++,
- 'number' => $choice_id,
- 'label' => $option,
- 'is_last' => false
- );
- }
- // One empty option for those with js disabled...I know are few... :P
- $context['choices'][] = array(
- 'id' => $choice_id++,
- 'number' => $choice_id,
- 'label' => '',
- 'is_last' => false
- );
- if (count($context['choices']) < 2)
- {
- $context['choices'][] = array(
- 'id' => $choice_id++,
- 'number' => $choice_id,
- 'label' => '',
- 'is_last' => false
- );
- }
- $context['last_choice_id'] = $choice_id;
- $context['choices'][count($context['choices']) - 1]['is_last'] = true;
- }
- // Are you... a guest?
- if ($user_info['is_guest'])
- {
- $_REQUEST['guestname'] = !isset($_REQUEST['guestname']) ? '' : trim($_REQUEST['guestname']);
- $_REQUEST['email'] = !isset($_REQUEST['email']) ? '' : trim($_REQUEST['email']);
- $_REQUEST['guestname'] = htmlspecialchars($_REQUEST['guestname']);
- $context['name'] = $_REQUEST['guestname'];
- $_REQUEST['email'] = htmlspecialchars($_REQUEST['email']);
- $context['email'] = $_REQUEST['email'];
- $user_info['name'] = $_REQUEST['guestname'];
- }
- // Only show the preview stuff if they hit Preview.
- if (($really_previewing == true || isset($_REQUEST['xml'])) && !isset($_POST['id_draft']))
- {
- // Set up the preview message and subject and censor them...
- $context['preview_message'] = $form_message;
- preparsecode($form_message, true);
- preparsecode($context['preview_message']);
- // Do all bulletin board code tags, with or without smileys.
- $context['preview_message'] = parse_bbc($context['preview_message'], isset($_REQUEST['ns']) ? 0 : 1);
- censorText($context['preview_message']);
- if ($form_subject != '')
- {
- $context['preview_subject'] = $form_subject;
- censorText($context['preview_subject']);
- }
- else
- $context['preview_subject'] = '<em>' . $txt['no_subject'] . '</em>';
- // Protect any CDATA blocks.
- if (isset($_REQUEST['xml']))
- $context['preview_message'] = strtr($context['preview_message'], array(']]>' => ']]]]><![CDATA[>'));
- }
- // Set up the checkboxes.
- $context['notify'] = !empty($_REQUEST['notify']);
- $context['use_smileys'] = !isset($_REQUEST['ns']);
- $context['icon'] = isset($_REQUEST['icon']) ? preg_replace('~[\./\\\\*\':"<>]~', '', $_REQUEST['icon']) : 'xx';
- // Set the destination action for submission.
- $context['destination'] = 'post2;start=' . $_REQUEST['start'] . (isset($_REQUEST['msg']) ? ';msg=' . $_REQUEST['msg'] . ';' . $context['session_var'] . '=' . $context['session_id'] : '') . (isset($_REQUEST['poll']) ? ';poll' : '');
- $context['submit_label'] = isset($_REQUEST['msg']) ? $txt['save'] : $txt['post'];
- // Previewing an edit?
- if (isset($_REQUEST['msg']) && !empty($topic))
- {
- // Get the existing message.
- $request = $smcFunc['db_query']('', '
- SELECT
- m.id_member, m.modified_time, m.smileys_enabled, m.body,
- m.poster_name, m.poster_email, m.subject, m.icon, m.approved,
- IFNULL(a.size, -1) AS filesize, a.filename, a.id_attach,
- a.approved AS attachment_approved, t.id_member_started AS id_member_poster,
- m.poster_time, log.id_action
- FROM {db_prefix}messages AS m
- INNER JOIN {db_prefix}topics AS t ON (t.id_topic = {int:current_topic})
- LEFT JOIN {db_prefix}attachments AS a ON (a.id_msg = m.id_msg AND a.attachment_type = {int:attachment_type})
- LEFT JOIN {db_prefix}log_actions AS log ON (m.id_topic = log.id_topic AND log.action = {string:announce_action})
- WHERE m.id_msg = {int:id_msg}
- AND m.id_topic = {int:current_topic}',
- array(
- 'current_topic' => $topic,
- 'attachment_type' => 0,
- 'id_msg' => $_REQUEST['msg'],
- 'announce_action' => 'announce_topic',
- )
- );
- // The message they were trying to edit was most likely deleted.
- // @todo Change this error message?
- if ($smcFunc['db_num_rows']($request) == 0)
- fatal_lang_error('no_board', false);
- $row = $smcFunc['db_fetch_assoc']($request);
- $attachment_stuff = array($row);
- while ($row2 = $smcFunc['db_fetch_assoc']($request))
- $attachment_stuff[] = $row2;
- $smcFunc['db_free_result']($request);
- if ($row['id_member'] == $user_info['id'] && !allowedTo('modify_any'))
- {
- // Give an extra five minutes over the disable time threshold, so they can type - assuming the post is public.
- if ($row['approved'] && !empty($modSettings['edit_disable_time']) && $row['poster_time'] + ($modSettings['edit_disable_time'] + 5) * 60 < time())
- fatal_lang_error('modify_post_time_passed', false);
- elseif ($row['id_member_poster'] == $user_info['id'] && !allowedTo('modify_own'))
- isAllowedTo('modify_replies');
- else
- isAllowedTo('modify_own');
- }
- elseif ($row['id_member_poster'] == $user_info['id'] && !allowedTo('modify_any'))
- isAllowedTo('modify_replies');
- else
- isAllowedTo('modify_any');
- if (!empty($modSettings['attachmentEnable']))
- {
- $request = $smcFunc['db_query']('', '
- SELECT IFNULL(size, -1) AS filesize, filename, id_attach, approved
- FROM {db_prefix}attachments
- WHERE id_msg = {int:id_msg}
- AND attachment_type = {int:attachment_type}
- ORDER BY id_attach',
- array(
- 'id_msg' => (int) $_REQUEST['msg'],
- 'attachment_type' => 0,
- )
- );
- while ($row = $smcFunc['db_fetch_assoc']($request))
- {
- if ($row['filesize'] <= 0)
- continue;
- $context['current_attachments'][] = array(
- 'name' => htmlspecialchars($row['filename']),
- 'size' => $row['filesize'],
- 'id' => $row['id_attach'],
- 'approved' => $row['approved'],
- );
- }
- $smcFunc['db_free_result']($request);
- }
- if ($context['can_announce'] && !empty($row['id_action']))
- {
- loadLanguage('Errors');
- $context['post_error']['messages'][] = $txt['error_topic_already_announced'];
- }
- // Allow moderators to change names....
- if (allowedTo('moderate_forum') && !empty($topic))
- {
- $request = $smcFunc['db_query']('', '
- SELECT id_member, poster_name, poster_email
- FROM {db_prefix}messages
- WHERE id_msg = {int:id_msg}
- AND id_topic = {int:current_topic}
- LIMIT 1',
- array(
- 'current_topic' => $topic,
- 'id_msg' => (int) $_REQUEST['msg'],
- )
- );
- $row = $smcFunc['db_fetch_assoc']($request);
- $smcFunc['db_free_result']($request);
- if (empty($row['id_member']))
- {
- $context['name'] = htmlspecialchars($row['poster_name']);
- $context['email'] = htmlspecialchars($row['poster_email']);
- }
- }
- }
- // No check is needed, since nothing is really posted.
- checkSubmitOnce('free');
- }
- // Editing a message...
- elseif (isset($_REQUEST['msg']) && !empty($topic))
- {
- $_REQUEST['msg'] = (int) $_REQUEST['msg'];
- // Get the existing message.
- $request = $smcFunc['db_query']('', '
- SELECT
- m.id_member, m.modified_time, m.smileys_enabled, m.body,
- m.poster_name, m.poster_email, m.subject, m.icon, m.approved,
- IFNULL(a.size, -1) AS filesize, a.filename, a.id_attach,
- a.approved AS attachment_approved, t.id_member_started AS id_member_poster,
- m.poster_time, log.id_action
- FROM {db_prefix}messages AS m
- INNER JOIN {db_prefix}topics AS t ON (t.id_topic = {int:current_topic})
- LEFT JOIN {db_prefix}attachments AS a ON (a.id_msg = m.id_msg AND a.attachment_type = {int:attachment_type})
- LEFT JOIN {db_prefix}log_actions AS log ON (m.id_topic = log.id_topic AND log.action = {string:announce_action})
- WHERE m.id_msg = {int:id_msg}
- AND m.id_topic = {int:current_topic}',
- array(
- 'current_topic' => $topic,
- 'attachment_type' => 0,
- 'id_msg' => $_REQUEST['msg'],
- 'announce_action' => 'announce_topic',
- )
- );
- // The message they were trying to edit was most likely deleted.
- if ($smcFunc['db_num_rows']($request) == 0)
- fatal_lang_error('no_message', false);
- $row = $smcFunc['db_fetch_assoc']($request);
- $attachment_stuff = array($row);
- while ($row2 = $smcFunc['db_fetch_assoc']($request))
- $attachment_stuff[] = $row2;
- $smcFunc['db_free_result']($request);
- if ($row['id_member'] == $user_info['id'] && !allowedTo('modify_any'))
- {
- // Give an extra five minutes over the disable time threshold, so they can type - assuming the post is public.
- if ($row['approved'] && !empty($modSettings['edit_disable_time']) && $row['poster_time'] + ($modSettings['edit_disable_time'] + 5) * 60 < time())
- fatal_lang_error('modify_post_time_passed', false);
- elseif ($row['id_member_poster'] == $user_info['id'] && !allowedTo('modify_own'))
- isAllowedTo('modify_replies');
- else
- isAllowedTo('modify_own');
- }
- elseif ($row['id_member_poster'] == $user_info['id'] && !allowedTo('modify_any'))
- isAllowedTo('modify_replies');
- else
- isAllowedTo('modify_any');
- if ($context['can_announce'] && !empty($row['id_action']))
- {
- loadLanguage('Errors');
- $context['post_error']['messages'][] = $txt['error_topic_already_announced'];
- }
- // When was it last modified?
- if (!empty($row['modified_time']))
- $context['last_modified'] = timeformat($row['modified_time']);
- // Get the stuff ready for the form.
- $form_subject = $row['subject'];
- $form_message = un_preparsecode($row['body']);
- censorText($form_message);
- censorText($form_subject);
- // Check the boxes that should be checked.
- $context['use_smileys'] = !empty($row['smileys_enabled']);
- $context['icon'] = $row['icon'];
- // Show an "approve" box if the user can approve it, and the message isn't approved.
- if (!$row['approved'] && !$context['show_approval'])
- $context['show_approval'] = allowedTo('approve_posts');
- // Sort the attachments so they are in the order saved
- $temp = array();
- foreach ($attachment_stuff as $attachment)
- {
- if ($attachment['filesize'] >= 0 && !empty($modSettings['attachmentEnable']))
- $temp[$attachment['id_attach']] = $attachment;
- }
- ksort($temp);
- // Load up 'em attachments!
- foreach ($temp as $attachment)
- {
- $context['current_attachments'][] = array(
- 'name' => htmlspecialchars($attachment['filename']),
- 'size' => $attachment['filesize'],
- 'id' => $attachment['id_attach'],
- 'approved' => $attachment['attachment_approved'],
- );
- }
- // Allow moderators to change names....
- if (allowedTo('moderate_forum') && empty($row['id_member']))
- {
- $context['name'] = htmlspecialchars($row['poster_name']);
- $context['email'] = htmlspecialchars($row['poster_email']);
- }
- // Set the destinaton.
- $context['destination'] = 'post2;start=' . $_REQUEST['start'] . ';msg=' . $_REQUEST['msg'] . ';' . $context['session_var'] . '=' . $context['session_id'] . (isset($_REQUEST['poll']) ? ';poll' : '');
- $context['submit_label'] = $txt['save'];
- }
- // Posting...
- else
- {
- // By default....
- $context['use_smileys'] = true;
- $context['icon'] = 'xx';
- if ($user_info['is_guest'])
- {
- $context['name'] = isset($_SESSION['guest_name']) ? $_SESSION['guest_name'] : '';
- $context['email'] = isset($_SESSION['guest_email']) ? $_SESSION['guest_email'] : '';
- }
- $context['destination'] = 'post2;start=' . $_REQUEST['start'] . (isset($_REQUEST['poll']) ? ';poll' : '');
- $context['submit_label'] = $txt['post'];
- // Posting a quoted reply?
- if (!empty($topic) && !empty($_REQUEST['quote']))
- {
- // Make sure they _can_ quote this post, and if so get it.
- $request = $smcFunc['db_query']('', '
- SELECT m.subject, IFNULL(mem.real_name, m.poster_name) AS poster_name, m.poster_time, m.body
- FROM {db_prefix}messages AS m
- INNER JOIN {db_prefix}boards AS b ON (b.id_board = m.id_board AND {query_see_board})
- LEFT JOIN {db_prefix}members AS mem ON (mem.id_member = m.id_member)
- WHERE m.id_msg = {int:id_msg}' . (!$modSettings['postmod_active'] || allowedTo('approve_posts') ? '' : '
- AND m.approved = {int:is_approved}') . '
- LIMIT 1',
- array(
- 'id_msg' => (int) $_REQUEST['quote'],
- 'is_approved' => 1,
- )
- );
- if ($smcFunc['db_num_rows']($request) == 0)
- fatal_lang_error('quoted_post_deleted', false);
- list ($form_subject, $mname, $mdate, $form_message) = $smcFunc['db_fetch_row']($request);
- $smcFunc['db_free_result']($request);
- // Add 'Re: ' to the front of the quoted subject.
- if (trim($context['response_prefix']) != '' && $smcFunc['strpos']($form_subject, trim($context['response_prefix'])) !== 0)
- $form_subject = $context['response_prefix'] . $form_subject;
- // Censor the message and subject.
- censorText($form_message);
- censorText($form_subject);
- // But if it's in HTML world, turn them into htmlspecialchar's so they can be edited!
- if (strpos($form_message, '[html]') !== false)
- {
- $parts = preg_split('~(\[/code\]|\[code(?:=[^\]]+)?\])~i', $form_message, -1, PREG_SPLIT_DELIM_CAPTURE);
- for ($i = 0, $n = count($parts); $i < $n; $i++)
- {
- // It goes 0 = outside, 1 = begin tag, 2 = inside, 3 = close tag, repeat.
- if ($i % 4 == 0)
- $parts[$i] = preg_replace('~\[html\](.+?)\[/html\]~ise', '\'[html]\' . preg_replace(\'~<br\s?/?' . '>~i\', \'<br /><br />\', \'$1\') . \'[/html]\'', $parts[$i]);
- }
- $form_message = implode('', $parts);
- }
- $form_message = preg_replace('~<br ?/?' . '>~i', "\n", $form_message);
- // Remove any nested quotes, if necessary.
- if (!empty($modSettings['removeNestedQuotes']))
- $form_message = preg_replace(array('~\n?\[quote.*?\].+?\[/quote\]\n?~is', '~^\n~', '~\[/quote\]~'), '', $form_message);
- // Add a quote string on the front and end.
- $form_message = '[quote author=' . $mname . ' link=topic=' . $topic . '.msg' . (int) $_REQUEST['quote'] . '#msg' . (int) $_REQUEST['quote'] . ' date=' . $mdate . ']' . "\n" . rtrim($form_message) . "\n" . '[/quote]';
- }
- // Posting a reply without a quote?
- elseif (!empty($topic) && empty($_REQUEST['quote']))
- {
- // Get the first message's subject.
- $form_subject = $first_subject;
- // Add 'Re: ' to the front of the subject.
- if (trim($context['response_prefix']) != '' && $form_subject != '' && $smcFunc['strpos']($form_subject, trim($context['response_prefix'])) !== 0)
- $form_subject = $context['response_prefix'] . $form_subject;
- // Censor the subject.
- censorText($form_subject);
- $form_message = '';
- }
- else
- {
- $form_subject = isset($_GET['subject']) ? $_GET['subject'] : '';
- $form_message = '';
- }
- }
- $context['can_post_attachment'] = !empty($modSettings['attachmentEnable']) && $modSettings['attachmentEnable'] == 1 && (allowedTo('post_attachment') || ($modSettings['postmod_active'] && allowedTo('post_unapproved_attachments')));
- if ($context['can_post_attachment'])
- {
- // If there are attachments, calculate the total size and how many.
- $context['attachments']['total_size'] = 0;
- $context['attachments']['quantity'] = 0;
- if (!empty($context['current_attachments']))
- if (!empty($modSettings['currentAttachmentUploadDir']))
- {
- if (!is_array($modSettings['attachmentUploadDir']))
- $modSettings['attachmentUploadDir'] = unserialize($modSettings['attachmentUploadDir']);
- // Just use the current path for temp files.
- $current_attach_dir = $modSettings['attachmentUploadDir'][$modSettings['currentAttachmentUploadDir']];
- }
- else
- $current_attach_dir = $modSettings['attachmentUploadDir'];
- // If this isn't a new post, check the current attachments.
- if (isset($_REQUEST['msg']))
- {
- $context['attachments']['quantity'] = count($context['current_attachments']);
- foreach ($context['current_attachments'] as $attachment)
- $context['attachments']['total_size'] += $attachment['size'];
- }
- // A bit of house keeping first.
- if (!empty($_SESSION['temp_attachments']) && count($_SESSION['temp_attachments']) == 1)
- unset($_SESSION['temp_attachments']);
- if (!empty($_SESSION['temp_attachments']))
- {
- // Is this a request to delete them?
- if (isset($_GET['delete_temp']))
- {
- foreach ($_SESSION['temp_attachments'] as $attachID => $attachment)
- {
- if (strpos($attachID, 'post_tmp_' . $user_info['id']) !== false)
- if (file_exists($attachment['tmp_name']))
- unlink($attachment['tmp_name']);
- }
- $post_errors[] = 'temp_attachments_gone';
- $_SESSION['temp_attachments'] = array();
- }
- // Hmm, coming in fresh and there are files in session.
- elseif ($context['current_action'] != 'post2' || !empty($_POST['from_qr']))
- {
- // Let's be nice and see if they belong here first.
- if ((empty($_REQUEST['msg']) && empty($_SESSION['temp_attachments']['post']['msg']) && $_SESSION['temp_attachments']['post']['board'] == $board) || (!empty($_REQUEST['msg']) && $_SESSION['temp_attachments']['post']['msg'] == $_REQUEST['msg']))
- {
- // See if any files still exist before showing the warning message and the files attached.
- foreach ($_SESSION['temp_attachments'] as $attachID => $attachment)
- {
- if (strpos($attachID, 'post_tmp_' . $user_info['id']) === false)
- continue;
- if (file_exists($attachment['tmp_name']))
- {
- $post_errors[] = 'temp_attachments_new';
- $context['files_in_session_warning'] = $txt['attached_files_in_session'];
- unset($_SESSION['temp_attachments']['post']['files']);
- break;
- }
- }
- }
- else
- {
- // Since, they don't belong here. Let's inform the user that they exist..
- if (!empty($topic))
- $delete_link = '<a href="' . $scripturl . '?action=post' .(!empty($_REQUEST['msg']) ? (';msg=' . $_REQUEST['msg']) : '') . (!empty($_REQUEST['last_msg']) ? (';last_msg=' . $_REQUEST['last_msg']) : '') . ';topic=' . $topic . ';delete_temp">' . $txt['here'] . '</a>';
- else
- $delete_link = '<a href="' . $scripturl . '?action=post;board=' . $board . ';delete_temp">' . $txt['here'] . '</a>';
- // Compile a list of the files to show the user.
- $file_list = array();
- foreach ($_SESSION['temp_attachments'] as $attachID => $attachment)
- if (strpos($attachID, 'post_tmp_' . $user_info['id']) !== false)
- $file_list[] = $attachment['name'];
- $_SESSION['temp_attachments']['post']['files'] = $file_list;
- $file_list = '<div class="attachments">' . implode('<br />', $file_list) . '</div>';
- if (!empty($_SESSION['temp_attachments']['post']['msg']))
- {
- // We have a message id, so we can link back to the old topic they were trying to edit..
- $goback_link = '<a href="' . $scripturl . '?action=post' .(!empty($_SESSION['temp_attachments']['post']['msg']) ? (';msg=' . $_SESSION['temp_attachments']['post']['msg']) : '') . (!empty($_SESSION['temp_attachments']['post']['last_msg']) ? (';last_msg=' . $_SESSION['temp_attachments']['post']['last_msg']) : '') . ';topic=' . $_SESSION['temp_attachments']['post']['topic'] . ';additionalOptions">' . $txt['here'] . '</a>';
- $post_errors[] = array('temp_attachments_found', array($delete_link, $goback_link, $file_list));
- $context['ignore_temp_attachments'] = true;
- }
- else
- {
- $post_errors[] = array('temp_attachments_lost', array($delete_link, $file_list));
- $context['ignore_temp_attachments'] = true;
- }
- }
- }
- if (!empty($context['we_are_history']))
- $post_errors[] = $context['we_are_history'];
- foreach ($_SESSION['temp_attachments'] as $attachID => $attachment)
- {
- if (isset($context['ignore_temp_attachments']) || isset($_SESSION['temp_attachments']['post']['files']))
- break;
- if ($attachID != 'initial_error' && strpos($attachID, 'post_tmp_' . $user_info['id']) === false)
- continue;
- if ($attachID == 'initial_error')
- {
- $txt['error_attach_initial_error'] = $txt['attach_no_upload'] . '<div style="padding: 0 1em;">' . (is_array($attachment) ? vsprintf($txt[$attachment[0]], $attachment[1]) : $txt[$attachment]) . '</div>';
- $post_errors[] = 'attach_initial_error';
- unset($_SESSION['temp_attachments']);
- break;
- }
- // Show any errors which might of occured.
- if (!empty($attachment['errors']))
- {
- $txt['error_attach_errrors'] = empty($txt['error_attach_errrors']) ? '<br />' : '';
- $txt['error_attach_errrors'] .= vsprintf($txt['attach_warning'], $attachment['name']) . '<div style="padding: 0 1em;">';
- foreach ($attachment['errors'] as $error)
- $txt['error_attach_errrors'] .= (is_array($error) ? vsprintf($txt[$error[0]], $error[1]) : $txt[$error]) . '<br />';
- $txt['error_attach_errrors'] .= '</div>';
- $post_errors[] = 'attach_errrors';
- // Take out the trash.
- unset($_SESSION['temp_attachments'][$attachID]);
- if (file_exists($attachment['tmp_name']))
- unlink($attachment['tmp_name']);
- continue;
- }
- // More house keeping.
- if (!file_exists($attachment['tmp_name']))
- {
- unset($_SESSION['temp_attachments'][$attachID]);
- continue;
- }
- $context['attachments']['quantity']++;
- $context['attachments']['total_size'] += $attachment['size'];
- if (!isset($context['files_in_session_warning']))
- $context['files_in_session_warning'] = $txt['attached_files_in_session'];
- $context['current_attachments'][] = array(
- 'name' => '<u>' . htmlspecialchars($attachment['name']) . '</u>',
- 'size' => $attachment['size'],
- 'id' => $attachID,
- 'unchecked' => false,
- 'approved' => 1,
- );
- }
- }
- }
- // Do we need to show the visual verification image?
- $context['require_verification'] = !$user_info['is_mod'] && !$user_info['is_admin'] && !empty($modSettings['posts_require_captcha']) && ($user_info['posts'] < $modSettings['posts_require_captcha'] || ($user_info['is_guest'] && $modSettings['posts_require_captcha'] == -1));
- if ($context['require_verification'])
- {
- require_once($sourcedir . '/Subs-Editor.php');
- $verificationOptions = array(
- 'id' => 'post',
- );
- $context['require_verification'] = create_control_verification($verificationOptions);
- $context['visual_verification_id'] = $verificationOptions['id'];
- }
- // If they came from quick reply, and have to enter verification details, give them some notice.
- if (!empty($_REQUEST['from_qr']) && !empty($context['require_verification']))
- $post_errors[] = 'need_qr_verification';
- /*
- * There are two error types: serious and miinor. Serious errors
- * actually tell the user that a real error has occurred, while minor
- * errors are like warnings that let them know that something with
- * their post isn't right.
- */
- $minor_errors = array('not_approved', 'new_replies', 'old_topic', 'need_qr_verification', 'no_subject');
- call_integration_hook('integrate_post_errors', array($post_errors, $minor_errors));
- // Any errors occurred?
- if (!empty($post_errors))
- {
- loadLanguage('Errors');
- $context['error_type'] = 'minor';
- foreach ($post_errors as $post_error)
- if (is_array($post_error))
- {
- $post_error_id = $post_error[0];
- $context['post_error'][$post_error_id] = vsprintf($txt['error_' . $post_error_id], $post_error[1]);
- // If it's not a minor error flag it as such.
- if (!in_array($post_error_id, $minor_errors))
- $context['error_type'] = 'serious';
- }
- else
- {
- $context['post_error'][$post_error] = $txt['error_' . $post_error];
- // If it's not a minor error flag it as such.
- if (!in_array($post_error, $minor_errors))
- $context['error_type'] = 'serious';
- }
- }
- // What are you doing? Posting a poll, modifying, previewing, new post, or reply...
- if (isset($_REQUEST['poll']))
- $context['page_title'] = $txt['new_poll'];
- elseif ($context['make_event'])
- $context['page_title'] = $context['event']['id'] == -1 ? $txt['calendar_post_event'] : $txt['calendar_edit'];
- elseif (isset($_REQUEST['msg']))
- $context['page_title'] = $txt['modify_msg'];
- elseif (isset($_REQUEST['subject'], $context['preview_subject']))
- $context['page_title'] = $txt['preview'] . ' - ' . strip_tags($context['preview_subject']);
- elseif (empty($topic))
- $context['page_title'] = $txt['start_new_topic'];
- else
- $context['page_title'] = $txt['post_reply'];
- // Build the link tree.
- if (empty($topic))
- $context['linktree'][] = array(
- 'name' => '<em>' . $txt['start_new_topic'] . '</em>'
- );
- else
- $context['linktree'][] = array(
- 'url' => $scripturl . '?topic=' . $topic . '.' . $_REQUEST['start'],
- 'name' => $form_subject,
- 'extra_before' => '<span><strong class="nav">' . $context['page_title'] . ' ( </strong></span>',
- 'extra_after' => '<span><strong class="nav"> )</strong></span>'
- );
- // Give wireless a linktree url to the post screen, so that they can switch to full version.
- if (WIRELESS)
- $context['linktree'][count($context['linktree']) - 1]['url'] = $scripturl . '?action=post;' . (!empty($topic) ? 'topic=' . $topic : 'board=' . $board) . '.' . $_REQUEST['start'] . (isset($_REQUEST['msg']) ? ';msg=' . (int) $_REQUEST['msg'] . ';' . $context['session_var'] . '=' . $context['session_id'] : '');
- $context['subject'] = addcslashes($form_subject, '"');
- $context['message'] = str_replace(array('"', '<', '>', ' '), array('"', '<', '>', ' '), $form_message);
- // Are post drafts enabled?
- $context['drafts_save'] = !empty($modSettings['drafts_enabled']) && !empty($modSettings['drafts_post_enabled']) && allowedTo('post_draft');
- $context['drafts_autosave'] = !empty($context['drafts_save']) && !empty($modSettings['drafts_autosave_enabled']) && allowedTo('post_autosave_draft');
- // Build a list of drafts that they can load in to the editor
- if (!empty($context['drafts_save']))
- {
- require_once($sourcedir . '/Drafts.php');
- ShowDrafts($user_info['id'], $topic);
- }
- // Needed for the editor and message icons.
- require_once($sourcedir . '/Subs-Editor.php');
- // Now create the editor.
- $editorOptions = array(
- 'id' => 'message',
- 'value' => $context['message'],
- 'labels' => array(
- 'post_button' => $context['submit_label'],
- ),
- // add height and width for the editor
- 'height' => '275px',
- 'width' => '100%',
- // We do XML preview here.
- 'preview_type' => 2,
- );
- create_control_richedit($editorOptions);
- // Store the ID.
- $context['post_box_name'] = $editorOptions['id'];
- $context['attached'] = '';
- $context['make_poll'] = isset($_REQUEST['poll']);
- // Message icons - customized icons are off?
- $context['icons'] = getMessageIcons($board);
- if (!empty($context['icons']))
- $context['icons'][count($context['icons']) - 1]['is_last'] = true;
- // Are we starting a poll? if set the poll icon as selected if its available
- if (isset($_REQUEST['poll']))
- {
- foreach ($context['icons'] as $icons)
- {
- if (isset($icons['value']) && $icons['value'] == 'poll')
- {
- // if found we are done
- $context['icon'] = 'poll';
- break;
- }
- }
- }
- $context['icon_url'] = '';
- for ($i = 0, $n = count($context['icons']); $i < $n; $i++)
- {
- $context['icons'][$i]['selected'] = $context['icon'] == $context['icons'][$i]['value'];
- if ($context['icons'][$i]['selected'])
- $context['icon_url'] = $context['icons'][$i]['url'];
- }
- if (empty($context['icon_url']))
- {
- $context['icon_url'] = $settings[file_exists($settings['theme_dir'] . '/images/post/' . $context['icon'] . '.png') ? 'images_url' : 'default_images_url'] . '/post/' . $context['icon'] . '.png';
- array_unshift($context['icons'], array(
- 'value' => $context['icon'],
- 'name' => $txt['current_icon'],
- 'url' => $context['icon_url'],
- 'is_last' => empty($context['icons']),
- 'selected' => true,
- ));
- }
- if (!empty($topic) && !empty($modSettings['topicSummaryPosts']))
- getTopic();
- // If the user can post attachments prepare the warning labels.
- if ($context['can_post_attachment'])
- {
- // If they've unchecked an attachment, they may still want to attach that many more files, but don't allow more than num_allowed_attachments.
- $context['num_allowed_attachments'] = empty($modSettings['attachmentNumPerPostLimit']) ? 50 : min($modSettings['attachmentNumPerPostLimit'] - count($context['current_attachments']), $modSettings['attachmentNumPerPostLimit']);
- $context['can_post_attachment_unapproved'] = allowedTo('post_attachment');
- $context['attachment_restrictions'] = array();
- $context['allowed_extensions'] = strtr(strtolower($modSettings['attachmentExtensions']), array(',' => ', '));
- $attachmentRestrictionTypes = array('attachmentNumPerPostLimit', 'attachmentPostLimit', 'attachmentSizeLimit');
- foreach ($attachmentRestrictionTypes as $type)
- if (!empty($modSettings[$type]))
- {
- $context['attachment_restrictions'][] = sprintf($txt['attach_restrict_' . $type], comma_format($modSettings[$type], 0));
- // Show some numbers. If they exist.
- if ($type == 'attachmentNumPerPostLimit' && $context['attachments']['quantity'] > 0)
- $context['attachment_restrictions'][] = sprintf($txt['attach_remaining'], $modSettings['attachmentNumPerPostLimit'] - $context['attachments']['quantity']);
- elseif ($type == 'attachmentPostLimit' && $context['attachments']['total_size'] > 0)
- $context['attachment_restrictions'][] = sprintf($txt['attach_available'], comma_format(round(max($modSettings['attachmentPostLimit'] - ($context['attachments']['total_size'] / 1028), 0)), 0));
- }
- }
- $context['back_to_topic'] = isset($_REQUEST['goback']) || (isset($_REQUEST['msg']) && !isset($_REQUEST['subject']));
- $context['show_additional_options'] = !empty($_POST['additional_options']) || isset($_SESSION['temp_attachments']['post']) || isset($_GET['additionalOptions']);
- $context['is_new_topic'] = empty($topic);
- $context['is_new_post'] = !isset($_REQUEST['msg']);
- $context['is_first_post'] = $context['is_new_topic'] || (isset($_REQUEST['msg']) && $_REQUEST['msg'] == $id_first_msg);
- // WYSIWYG only works if BBC is enabled
- $modSettings['disable_wysiwyg'] = !empty($modSettings['disable_wysiwyg']) || empty($modSettings['enableBBC']);
- // Register this form in the session variables.
- checkSubmitOnce('register');
- // Finally, load the template.
- if (WIRELESS && WIRELESS_PROTOCOL != 'wap')
- $context['sub_template'] = WIRELESS_PROTOCOL . '_post';
- elseif (!isset($_REQUEST['xml']))
- loadTemplate('Post');
- }
- /**
- * Posts or saves the message composed with Post().
- *
- * requires various permissions depending on the action.
- * handles attachment, post, and calendar saving.
- * sends off notifications, and allows for announcements and moderation.
- * accessed from ?action=post2.
- */
- function Post2()
- {
- global $board, $topic, $txt, $modSettings, $sourcedir, $context;
- global $user_info, $board_info, $options, $smcFunc;
- // Sneaking off, are we?
- if (empty($_POST) && empty($topic))
- {
- if (empty($_SERVER['CONTENT_LENGTH']))
- redirectexit('action=post;board=' . $board . '.0');
- else
- fatal_lang_error('post_upload_error', false);
- }
- elseif (empty($_POST) && !empty($topic))
- redirectexit('action=post;topic=' . $topic . '.0');
- // No need!
- $context['robot_no_index'] = true;
- // Previewing? Go back to start.
- if (isset($_REQUEST['preview']))
- return Post();
- // Prevent double submission of this form.
- checkSubmitOnce('check');
- // No errors as yet.
- $post_errors = array();
- // If the session has timed out, let the user re-submit their form.
- if (checkSession('post', '', false) != '')
- $post_errors[] = 'session_timeout';
- // Wrong verification code?
- if (!$user_info['is_admin'] && !$user_info['is_mod'] && !empty($modSettings['posts_require_captcha']) && ($user_info['posts'] < $modSettings['posts_require_captcha'] || ($user_info['is_guest'] && $modSettings['posts_require_captcha'] == -1)))
- {
- require_once($sourcedir . '/Subs-Editor.php');
- $verificationOptions = array(
- 'id' => 'post',
- );
- $context['require_verification'] = create_control_verification($verificationOptions, true);
- if (is_array($context['require_verification']))
- $post_errors = array_merge($post_errors, $context['require_verification']);
- }
- require_once($sourcedir . '/Subs-Post.php');
- loadLanguage('Post');
- // Drafts enabled?
- if (!empty($modSettings['drafts_enabled']) && isset($_POST['save_draft']))
- require_once($sourcedir . '/Drafts.php');
- // First check to see if they are trying to delete any current attachments.
- if (isset($_POST['attach_del']))
- {
- $keep_temp = array();
- $keep_ids = array();
- foreach ($_POST['attach_del'] as $dummy)
- if (strpos($dummy, 'post_tmp_' . $user_info['id']) !== false)
- $keep_temp[] = $dummy;
- else
- $keep_ids[] = (int) $dummy;
- if (isset($_SESSION['temp_attachments']))
- foreach($_SESSION['temp_attachments'] as $attachID => $attachment)
- {
- if ((isset($_SESSION['temp_attachments']['post']['files'], $attachment['name']) && in_array($attachment['name'], $_SESSION['temp_attachments']['post']['files'])) || in_array($attachID, $keep_temp) || strpos($attachID, 'post_tmp_' . $user_info['id']) === false)
- continue;
- unset($_SESSION['temp_attachments'][$attachID]);
- unlink($attachment['tmp_name']);
- }
- if (!empty($_REQUEST['msg']))
- {
- require_once($sourcedir . '/ManageAttachments.php');
- $attachmentQuery = array(
- 'attachment_type' => 0,
- 'id_msg' => (int) $_REQUEST['msg'],
- 'not_id_attach' => $keep_ids,
- );
- removeAttachments($attachmentQuery);
- }
- }
- // Then try to upload any attachments.
- $context['can_post_attachment'] = !empty($modSettings['attachmentEnable']) && $modSettings['attachmentEnable'] == 1 && (allowedTo('post_attachment') || ($modSettings['postmod_active'] && allowedTo('post_unapproved_attachments')));
- if ($context['can_post_attachment'] && !empty($_FILES['attachment']) && empty($_POST['from_qr']))
- {
- // Make sure we're uploading to the right place.
- if (!empty($modSettings['currentAttachmentUploadDir']))
- {
- if (!is_array($modSettings['attachmentUploadDir']))
- $modSettings['attachmentUploadDir'] = unserialize($modSettings['attachmentUploadDir']);
- // The current directory, of course!
- $context['attach_dir'] = $modSettings['attachmentUploadDir'][$modSettings['currentAttachmentUploadDir']];
- }
- else
- $context['attach_dir'] = $modSettings['attachmentUploadDir'];
- // Is the attachments folder actualy there?
- if (!is_dir($context['attach_dir']))
- {
- $initial_error = 'attach_folder_warning';
- log_error(sprintf($txt['attach_folder_admin_warning'], $context['attach_dir']), 'critical');
- }
- // Check that the attachments folder is writable. No sense in proceeding if it isn't.
- if (empty($initial_error) && !is_writable($context['attach_dir']))
- {
- // But, let's try to make it writable first.
- chmod($context['attach_dir'], 0755);
- if (!is_writable($context['attach_dir']))
- {
- chmod($context['attach_dir'], 0775);
- if (!is_writable($context['attach_dir']))
- {
- chmod($context['attach_dir'], 0777);
- if (!is_writable($context['attach_dir']))
- $initial_error = 'attachments_no_write';
- }
- }
- }
- if (!isset($initial_error) && !isset($context['attachments']))
- {
- // If this isn't a new post, check the current attachments.
- if (isset($_REQUEST['msg']))
- {
- $request = $smcFunc['db_query']('', '
- SELECT COUNT(*), SUM(size)
- FROM {db_prefix}attachments
- WHERE id_msg = {int:id_msg}
- AND attachment_type = {int:attachment_type}',
- array(
- 'id_msg' => (int) $_REQUEST['msg'],
- 'attachment_type' => 0,
- )
- );
- list ($context['attachments']['quantity'], $context['attachments']['total_size']) = $smcFunc['db_fetch_row']($request);
- $smcFunc['db_free_result']($request);
- }
- else
- $context['attachments'] = array(
- 'quantity' => 0,
- 'total_size' => 0,
- );
- }
- // Hmm. There are still files in session.
- $ignore_temp = false;
- if (!empty($_SESSION['temp_attachments']['post']['files']) && count($_SESSION['temp_attachments']) > 1)
- {
- // Let's try to keep them. But...
- $ignore_temp = true;
- // If new files are being added. We can't ignore those
- foreach ($_FILES['attachment']['tmp_name'] as $dummy)
- if (!empty($dummy))
- {
- $ignore_temp = false;
- break;
- }
- // Need to make space for the new files. So, bye bye.
- if (!$ignore_temp)
- {
- foreach ($_SESSION['temp_attachments'] as $attachID => $attachment)
- if (strpos($attachID, 'post_tmp_' . $user_info['id']) !== false)
- unlink($attachment['tmp_name']);
- $context['we_are_history'] = 'temp_attachments_flushed';
- $_SESSION['temp_attachments'] = array();
- }
- }
- if (!isset($_FILES['attachment']['name']))
- $_FILES['attachment']['tmp_name'] = array();
- if (!isset($_SESSION['temp_attachments']))
- $_SESSION['temp_attachments'] = array();
- // Remember where we are at. If it's anywhere at all.
- if (!$ignore_temp)
- $_SESSION['temp_attachments']['post'] = array(
- 'msg' => !empty($_REQUEST['msg']) ? $_REQUEST['msg'] : 0,
- 'last_msg' => !empty($_REQUEST['last_msg']) ? $_REQUEST['last_msg'] : 0,
- 'topic' => !empty($topic) ? $topic : 0,
- 'board' => !empty($board) ? $board : 0,
- );
- // If we have an itital error, lets just display it.
- if (!empty($initial_error))
- {
- $_SESSION['temp_attachments']['initial_error'] = $initial_error;
- // And delete the files 'cos they ain't going nowhere.
- foreach ($_FILES['attachment']['tmp_name'] as $n => $dummy)
- if (file_exists($_FILES['attachment']['tmp_name'][$n]))
- unlink($_FILES['attachment']['tmp_name'][$n]);
- $_FILES['attachment']['tmp_name'] = array();
- }
- // Loop through $_FILES['attachment'] array and move each file to the current attachments folder.
- foreach ($_FILES['attachment']['tmp_name'] as $n => $dummy)
- {
- if ($_FILES['attachment']['name'][$n] == '')
- continue;
- // First, let's first check for PHP upload errors.
- $errors = array();
- if (!empty($_FILES['attachment']['error'][$n]))
- {
- if ($_FILES['attachment']['error'][$n] == 2)
- $errors[] = array('file_too_big', array($modSettings['attachmentSizeLimit']));
- elseif ($_FILES['attachment']['error'][$n] == 6)
- log_error($_FILES['attachment']['name'][$n] . ': ' . $txt['php_upload_error_6'], 'critical');
- else
- log_error($_FILES['attachment']['name'][$n] . ': ' . $txt['php_upload_error_' . $_FILES['attachment']['error'][$n]]);
- if (empty($errors))
- $errors[] = 'attach_php_error';
- }
- // Try to move and rename the file before doing any more checks on it.
- $attachID = 'post_tmp_' . $user_info['id'] . '_' . md5(mt_rand());
- $destName = $context['attach_dir'] . '/' . $attachID;
- if (empty($errors))
- {
- $_SESSION['temp_attachments'][$attachID] = array(
- 'name' => htmlspecialchars(basename($_FILES['attachment']['name'][$n])),
- 'tmp_name' => $destName,
- 'size' => $_FILES['attachment']['size'][$n],
- 'type' => $_FILES['attachment']['type'][$n],
- 'errors' => array(),
- );
- // Move the file to the attachments folder with a temp name for now.
- if (@move_uploaded_file($_FILES['attachment']['tmp_name'][$n], $destName))
- @chmod($destName, 0644);
- else
- {
- $_SESSION['temp_attachments'][$attachID]['errors'][] = 'attach_timeout';
- if (file_exists($_FILES['attachment']['tmp_name'][$n]))
- unlink($_FILES['attachment']['tmp_name'][$n]);
- }
- }
- else
- {
- $_SESSION['temp_attachments'][$attachID] = array(
- 'name' => htmlspecialchars(basename($_FILES['attachment']['name'][$n])),
- 'tmp_name' => $destName,
- 'errors' => $errors,
- );
- if (file_exists($_FILES['attachment']['tmp_name'][$n]))
- unlink($_FILES['attachment']['tmp_name'][$n]);
- }
- // If there's no errors to this pont. We still do need to apply some addtional checks before we are finished.
- if (empty($_SESSION['temp_attachments'][$attachID]['errors']))
- attachmentChecks($attachID);
- }
- }
- // Mod authors, finally a hook to hang an alternate attachment upload system upon
- // Upload to the current attachment folder with the file name $attachID or 'post_tmp_' . $user_info['id'] . '_' . md5(mt_rand())
- // Populate $_SESSION['temp_attachments'][$attachID] with the following:
- // name => The file name
- // tmp_name => Path to the temp file ($context['attach_dir'] . '/' . $attachID).
- // size => File size (required).
- // type => MIME type (optional if not available on upload).
- // errors => An array of errors (use the index of the $txt variable for that error).
- // Template changes can be done using "integrate_upload_template".
- call_integration_hook('integrate_attachment_upload');
- // If this isn't a new topic load the topic info that we need.
- if (!empty($topic))
- {
- $request = $smcFunc['db_query']('', '
- SELECT locked, is_sticky, id_poll, approved, id_first_msg, id_last_msg, id_member_started, id_board
- FROM {db_prefix}topics
- WHERE id_topic = {int:current_topic}
- LIMIT 1',
- array(
- 'current_topic' => $topic,
- )
- );
- $topic_info = $smcFunc['db_fetch_assoc']($request);
- $smcFunc['db_free_result']($request);
- // Though the topic should be there, it might have vanished.
- if (!is_array($topic_info))
- fatal_lang_error('topic_doesnt_exist');
- // Did this topic suddenly move? Just checking...
- if ($topic_info['id_board'] != $board)
- fatal_lang_error('not_a_topic');
- }
- // Replying to a topic?
- if (!empty($topic) && !isset($_REQUEST['msg']))
- {
- // Don't allow a post if it's locked.
- if ($topic_info['locked'] != 0 && !allowedTo('moderate_board'))
- fatal_lang_error('topic_locked', false);
- // Sorry, multiple polls aren't allowed... yet. You should stop giving me ideas :P.
- if (isset($_REQUEST['poll']) && $topic_info['id_poll'] > 0)
- unset($_REQUEST['poll']);
- // Do the permissions and approval stuff...
- $becomesApproved = true;
- if ($topic_info['id_member_started'] != $user_info['id'])
- {
- if ($modSettings['postmod_active'] && allowedTo('post_unapproved_replies_any') && !allowedTo('post_reply_any'))
- $becomesApproved = false;
- else
- isAllowedTo('post_reply_any');
- }
- elseif (!allowedTo('post_reply_any'))
- {
- if ($modSettings['postmod_active'] && allowedTo('post_unapproved_replies_own') && !allowedTo('post_reply_own'))
- $becomesApproved = false;
- else
- isAllowedTo('post_reply_own');
- }
- if (isset($_POST['lock']))
- {
- // Nothing is changed to the lock.
- if ((empty($topic_info['locked']) && empty($_POST['lock'])) || (!empty($_POST['lock']) && !empty($topic_info['locked'])))
- unset($_POST['lock']);
- // You're have no permission to lock this topic.
- elseif (!allowedTo(array('lock_any', 'lock_own')) || (!allowedTo('lock_any') && $user_info['id'] != $topic_info['id_member_started']))
- unset($_POST['lock']);
- // You are allowed to (un)lock your own topic only.
- elseif (!allowedTo('lock_any'))
- {
- // You cannot override a moderator lock.
- if ($topic_info['locked'] == 1)
- unset($_POST['lock']);
- else
- $_POST['lock'] = empty($_POST['lock']) ? 0 : 2;
- }
- // Hail mighty moderator, (un)lock this topic immediately.
- else
- $_POST['lock'] = empty($_POST['lock']) ? 0 : 1;
- }
- // So you wanna (un)sticky this...let's see.
- if (isset($_POST['sticky']) && (empty($modSettings['enableStickyTopics']) || $_POST['sticky'] == $topic_info['is_sticky'] || !allowedTo('make_sticky')))
- unset($_POST['sticky']);
- // If drafts are enabled, then pass this off
- if (!empty($modSettings['drafts_enabled']) && isset($_POST['save_draft']))
- {
- SaveDraft($post_errors);
- return Post();
- }
- // If the number of replies has changed, if the setting is enabled, go back to Post() - which handles the error.
- if (empty($options['no_new_reply_warning']) && isset($_POST['last_msg']) && $topic_info['id_last_msg'] > $_POST['last_msg'])
- {
- $_REQUEST['preview'] = true;
- return Post();
- }
- $posterIsGuest = $user_info['is_guest'];
- }
- // Posting a new topic.
- elseif (empty($topic))
- {
- // Now don't be silly, new topics will get their own id_msg soon enough.
- unset($_REQUEST['msg'], $_POST['msg'], $_GET['msg']);
- // Do like, the permissions, for safety and stuff...
- $becomesApproved = true;
- if ($modSettings['postmod_active'] && !allowedTo('post_new') && allowedTo('post_unapproved_topics'))
- $becomesApproved = false;
- else
- isAllowedTo('post_new');
- if (isset($_POST['lock']))
- {
- // New topics are by default not locked.
- if (empty($_POST['lock']))
- unset($_POST['lock']);
- // Besides, you need permission.
- elseif (!allowedTo(array('lock_any', 'lock_own')))
- unset($_POST['lock']);
- // A moderator-lock (1) can override a user-lock (2).
- else
- $_POST['lock'] = allowedTo('lock_any') ? 1 : 2;
- }
- if (isset($_POST['sticky']) && (empty($modSettings['enableStickyTopics']) || empty($_POST['sticky']) || !allowedTo('make_sticky')))
- unset($_POST['sticky']);
- // Saving your new topic as a draft first?
- if (!empty($modSettings['drafts_enabled']) && isset($_POST['save_draft']))
- {
- SaveDraft($post_errors);
- return Post();
- }
- $posterIsGuest = $user_info['is_guest'];
- }
- // Modifying an existing message?
- elseif (isset($_REQUEST['msg']) && !empty($topic))
- {
- $_REQUEST['msg'] = (int) $_REQUEST['msg'];
- $request = $smcFunc['db_query']('', '
- SELECT id_member, poster_name, poster_email, poster_time, approved
- FROM {db_prefix}messages
- WHERE id_msg = {int:id_msg}
- LIMIT 1',
- array(
- 'id_msg' => $_REQUEST['msg'],
- )
- );
- if ($smcFunc['db_num_rows']($request) == 0)
- fatal_lang_error('cant_find_messages', false);
- $row = $smcFunc['db_fetch_assoc']($request);
- $smcFunc['db_free_result']($request);
- if (!empty($topic_info['locked']) && !allowedTo('moderate_board'))
- fatal_lang_error('topic_locked', false);
- if (isset($_POST['lock']))
- {
- // Nothing changes to the lock status.
- if ((empty($_POST['lock']) && empty($topic_info['locked'])) || (!empty($_POST['lock']) && !empty($topic_info['locked'])))
- unset($_POST['lock']);
- // You're simply not allowed to (un)lock this.
- elseif (!allowedTo(array('lock_any', 'lock_own')) || (!allowedTo('lock_any') && $user_info['id'] != $topic_info['id_member_started']))
- unset($_POST['lock']);
- // You're only allowed to lock your own topics.
- elseif (!allowedTo('lock_any'))
- {
- // You're not allowed to break a moderator's lock.
- if ($topic_info['locked'] == 1)
- unset($_POST['lock']);
- // Lock it with a soft lock or unlock it.
- else
- $_POST['lock'] = empty($_POST['lock']) ? 0 : 2;
- }
- // You must be the moderator.
- else
- $_POST['lock'] = empty($_POST['lock']) ? 0 : 1;
- }
- // Change the sticky status of this topic?
- if (isset($_POST['sticky']) && (!allowedTo('make_sticky') || $_POST['sticky'] == $topic_info['is_sticky']))
- unset($_POST['sticky']);
- if ($row['id_member'] == $user_info['id'] && !allowedTo('modify_any'))
- {
- if ((!$modSettings['postmod_active'] || $row['approved']) && !empty($modSettings['edit_disable_time']) && $row['poster_time'] + ($modSettings['edit_disable_time'] + 5) * 60 < time())
- fatal_lang_error('modify_post_time_passed', false);
- elseif ($topic_info['id_member_started'] == $user_info['id'] && !allowedTo('modify_own'))
- isAllowedTo('modify_replies');
- else
- isAllowedTo('modify_own');
- }
- elseif ($topic_info['id_member_started'] == $user_info['id'] && !allowedTo('modify_any'))
- {
- isAllowedTo('modify_replies');
- // If you're modifying a reply, I say it better be logged...
- $moderationAction = true;
- }
- else
- {
- isAllowedTo('modify_any');
- // Log it, assuming you're not modifying your own post.
- if ($row['id_member'] != $user_info['id'])
- $moderationAction = true;
- }
- // If drafts are enabled, then lets send this off to save
- if (!empty($modSettings['drafts_enabled']) && isset($_POST['save_draft']))
- {
- SaveDraft($post_errors);
- return Post();
- }
- $posterIsGuest = empty($row['id_member']);
- // Can they approve it?
- $can_approve = allowedTo('approve_posts');
- $becomesApproved = $modSettings['postmod_active'] ? ($can_approve && !$row['approved'] ? (!empty($_REQUEST['approve']) ? 1 : 0) : $row['approved']) : 1;
- $approve_has_changed = $row['approved'] != $becomesApproved;
- if (!allowedTo('moderate_forum') || !$posterIsGuest)
- {
- $_POST['guestname'] = $row['poster_name'];
- $_POST['email'] = $row['poster_email'];
- }
- }
- // Incase we want to override
- if (allowedTo('approve_posts'))
- {
- $becomesApproved = !isset($_REQUEST['approve']) || !empty($_REQUEST['approve']) ? 1 : 0;
- $approve_has_changed = isset($row['approved']) ? $row['approved'] != $becomesApproved : false;
- }
- // If the poster is a guest evaluate the legality of name and email.
- if ($posterIsGuest)
- {
- $_POST['guestname'] = !isset($_POST['guestname']) ? '' : trim($_POST['guestname']);
- $_POST['email'] = !isset($_POST['email']) ? '' : trim($_POST['email']);
- if ($_POST['guestname'] == '' || $_POST['guestname'] == '_')
- $post_errors[] = 'no_name';
- if ($smcFunc['strlen']($_POST['guestname']) > 25)
- $post_errors[] = 'long_name';
- if (empty($modSettings['guest_post_no_email']))
- {
- // Only check if they changed it!
- if (!isset($row) || $row['poster_email'] != $_POST['email'])
- {
- if (!allowedTo('moderate_forum') && (!isset($_POST['email']) || $_POST['email'] == ''))
- $post_errors[] = 'no_email';
- if (!allowedTo('moderate_forum') && preg_match('~^[0-9A-Za-z=_+\-/][0-9A-Za-z=_\'+\-/\.]*@[\w\-]+(\.[\w\-]+)*(\.[\w]{2,6})$~', $_POST['email']) == 0)
- $post_errors[] = 'bad_email';
- }
- // Now make sure this email address is not banned from posting.
- isBannedEmail($_POST['email'], 'cannot_post', sprintf($txt['you_are_post_banned'], $txt['guest_title']));
- }
- // In case they are making multiple posts this visit, help them along by storing their name.
- if (empty($post_errors))
- {
- $_SESSION['guest_name'] = $_POST['guestname'];
- $_SESSION['guest_email'] = $_POST['email'];
- }
- }
- // Check the subject and message.
- if (!isset($_POST['subject']) || $smcFunc['htmltrim']($smcFunc['htmlspecialchars']($_POST['subject'])) === '')
- $post_errors[] = 'no_subject';
- if (!isset($_POST['message']) || $smcFunc['htmltrim']($smcFunc['htmlspecialchars']($_POST['message']), ENT_QUOTES) === '')
- $post_errors[] = 'no_message';
- elseif (!empty($modSettings['max_messageLength']) && $smcFunc['strlen']($_POST['message']) > $modSettings['max_messageLength'])
- $post_errors[] = array('long_message', array($modSettings['max_messageLength']));
- else
- {
- // Prepare the message a bit for some additional testing.
- $_POST['message'] = $smcFunc['htmlspecialchars']($_POST['message'], ENT_QUOTES);
- // Preparse code. (Zef)
- if ($user_info['is_guest'])
- $user_info['name'] = $_POST['guestname'];
- preparsecode($_POST['message']);
- // Let's see if there's still some content left without the tags.
- if ($smcFunc['htmltrim'](strip_tags(parse_bbc($_POST['message'], false), '<img>')) === '' && (!allowedTo('admin_forum') || strpos($_POST['message'], '[html]') === false))
- $post_errors[] = 'no_message';
- }
- if (isset($_POST['calendar']) && !isset($_REQUEST['deleteevent']) && $smcFunc['htmltrim']($_POST['evtitle']) === '')
- $post_errors[] = 'no_event';
- // You are not!
- if (isset($_POST['message']) && strtolower($_POST['message']) == 'i am the administrator.' && !$user_info['is_admin'])
- fatal_error('Knave! Masquerader! Charlatan!', false);
- // Validate the poll...
- if (isset($_REQUEST['poll']) && $modSettings['pollMode'] == '1')
- {
- if (!empty($topic) && !isset($_REQUEST['msg']))
- fatal_lang_error('no_access', false);
- // This is a new topic... so it's a new poll.
- if (empty($topic))
- isAllowedTo('poll_post');
- // Can you add to your own topics?
- elseif ($user_info['id'] == $topic_info['id_member_started'] && !allowedTo('poll_add_any'))
- isAllowedTo('poll_add_own');
- // Can you add polls to any topic, then?
- else
- isAllowedTo('poll_add_any');
- if (!isset($_POST['question']) || trim($_POST['question']) == '')
- $post_errors[] = 'no_question';
- $_POST['options'] = empty($_POST['options']) ? array() : htmltrim__recursive($_POST['options']);
- // Get rid of empty ones.
- foreach ($_POST['options'] as $k => $option)
- if ($option == '')
- unset($_POST['options'][$k], $_POST['options'][$k]);
- // What are you going to vote between with one choice?!?
- if (count($_POST['options']) < 2)
- $post_errors[] = 'poll_few';
- elseif (count($_POST['options']) > 256)
- $post_errors[] = 'poll_many';
- }
- if ($posterIsGuest)
- {
- // If user is a guest, make sure the chosen name isn't taken.
- require_once($sourcedir . '/Subs-Members.php');
- if (isReservedName($_POST['guestname'], 0, true, false) && (!isset($row['poster_name']) || $_POST['guestname'] != $row['poster_name']))
- $post_errors[] = 'bad_name';
- }
- // If the user isn't a guest, get his or her name and email.
- elseif (!isset($_REQUEST['msg']))
- {
- $_POST['guestname'] = $user_info['username'];
- $_POST['email'] = $user_info['email'];
- }
- // Any mistakes?
- if (!empty($post_errors))
- {
- // Previewing.
- $_REQUEST['preview'] = true;
- return Post($post_errors);
- }
- // Make sure the user isn't spamming the board.
- if (!isset($_REQUEST['msg']))
- spamProtection('post');
- // At about this point, we're posting and that's that.
- ignore_user_abort(true);
- @set_time_limit(300);
- // Add special html entities to the subject, name, and email.
- $_POST['subject'] = strtr($smcFunc['htmlspecialchars']($_POST['subject']), array("\r" => '', "\n" => '', "\t" => ''));
- $_POST['guestname'] = htmlspecialchars($_POST['guestname']);
- $_POST['email'] = htmlspecialchars($_POST['email']);
- // At this point, we want to make sure the subject isn't too long.
- if ($smcFunc['strlen']($_POST['subject']) > 100)
- $_POST['subject'] = $smcFunc['substr']($_POST['subject'], 0, 100);
- // Make the poll...
- if (isset($_REQUEST['poll']))
- {
- // Make sure that the user has not entered a ridiculous number of options..
- if (empty($_POST['poll_max_votes']) || $_POST['poll_max_votes'] <= 0)
- $_POST['poll_max_votes'] = 1;
- elseif ($_POST['poll_max_votes'] > count($_POST['options']))
- $_POST['poll_max_votes'] = count($_POST['options']);
- else
- $_POST['poll_max_votes'] = (int) $_POST['poll_max_votes'];
- $_POST['poll_expire'] = (int) $_POST['poll_expire'];
- $_POST['poll_expire'] = $_POST['poll_expire'] > 9999 ? 9999 : ($_POST['poll_expire'] < 0 ? 0 : $_POST['poll_expire']);
- // Just set it to zero if it's not there..
- if (!isset($_POST['poll_hide']))
- $_POST['poll_hide'] = 0;
- else
- $_POST['poll_hide'] = (int) $_POST['poll_hide'];
- $_POST['poll_change_vote'] = isset($_POST['poll_change_vote']) ? 1 : 0;
- $_POST['poll_guest_vote'] = isset($_POST['poll_guest_vote']) ? 1 : 0;
- // Make sure guests are actually allowed to vote generally.
- if ($_POST['poll_guest_vote'])
- {
- require_once($sourcedir . '/Subs-Members.php');
- $allowedVoteGroups = groupsAllowedTo('poll_vote', $board);
- if (!in_array(-1, $allowedVoteGroups['allowed']))
- $_POST['poll_guest_vote'] = 0;
- }
- // If the user tries to set the poll too far in advance, don't let them.
- if (!empty($_POST['poll_expire']) && $_POST['poll_expire'] < 1)
- fatal_lang_error('poll_range_error', false);
- // Don't allow them to select option 2 for hidden results if it's not time limited.
- elseif (empty($_POST['poll_expire']) && $_POST['poll_hide'] == 2)
- $_POST['poll_hide'] = 1;
- // Clean up the question and answers.
- $_POST['question'] = htmlspecialchars($_POST['question']);
- $_POST['question'] = $smcFunc['truncate']($_POST['question'], 255);
- $_POST['question'] = preg_replace('~&#(\d{4,5}|[2-9]\d{2,4}|1[2-9]\d);~', '&#$1;', $_POST['question']);
- $_POST['options'] = htmlspecialchars__recursive($_POST['options']);
- }
- // ...or attach a new file...
- if (empty($ignore_temp) && $context['can_post_attachment'] && !empty($_SESSION['temp_attachments']) && empty($_POST['from_qr']))
- {
- $attachIDs = array();
- $attach_errors = array();
- if (!empty($context['we_are_history']))
- $attach_errors[] = '<dd>' . $txt['error_temp_attachments_flushed'] . '<br /><br /></dd>';
- foreach ($_SESSION['temp_attachments'] as $attachID => $attachment)
- {
- if ($attachID != 'initial_error' && strpos($attachID, 'post_tmp_' . $user_info['id']) === false)
- continue;
- // If there was an initial error just show that message.
- if ($attachID == 'initial_error')
- {
- $attach_errors[] = '<dt>' . $txt['attach_no_upload'] . '</dt>';
- $attach_errors[] = '<dd>' . (is_array($attachment) ? vsprintf($txt[$attachment[0]], $attachment[1]) : $txt[$attachment]) . '</dd>';
- unset($_SESSION['temp_attachments']);
- break;
- }
- $attachmentOptions = array(
- 'post' => isset($_REQUEST['msg']) ? $_REQUEST['msg'] : 0,
- 'poster' => $user_info['id'],
- 'name' => $attachment['name'],
- 'tmp_name' => $attachment['tmp_name'],
- 'size' => isset($attachment['size']) ? $attachment['size'] : 0,
- 'mime_type' => isset($attachment['type']) ? $attachment['type'] : '',
- 'approved' => !$modSettings['postmod_active'] || allowedTo('post_attachment'),
- 'errors' => $attachment['errors'],
- );
- if (empty($attachment['errors']))
- {
- if (createAttachment($attachmentOptions))
- {
- $attachIDs[] = $attachmentOptions['id'];
- if (!empty($attachmentOptions['thumb']))
- $attachIDs[] = $attachmentOptions['thumb'];
- }
- }
- if (!empty($attachmentOptions['errors']))
- {
- if (isset($br))
- $attach_errors[] = '<dt> </dt>';
- else
- $br = '';
- // Sort out the errors for display and delete any associated files.
- $attach_errors[] = '<dt>' . vsprintf($txt['attach_warning'], $attachment['name']) . '</dt>';
- $log_these = array('attachments_no_write', 'attach_timeout', 'ran_out_of_space', 'cant_access_upload_path', 'attach_0_byte_file');
- foreach ($attachmentOptions['errors'] as $error)
- {
- if (!is_array($error))
- {
- $attach_errors[] = '<dd>' . $txt[$error] . '</dd>';
- if (in_array($error, $log_these))
- log_error($attachment['name'] . ': ' . $txt[$error], 'critical');
- }
- else
- $attach_errors[] = '<dd>' . vsprintf($txt[$error[0]], $error[1]) . '</dd>';
- }
- if (file_exists($attachment['tmp_name']))
- unlink($attachment['tmp_name']);
- }
- }
- unset($_SESSION['temp_attachments']);
- }
- // Make the poll...
- if (isset($_REQUEST['poll']))
- {
- // Create the poll.
- $smcFunc['db_insert']('',
- '{db_prefix}polls',
- array(
- 'question' => 'string-255', 'hide_results' => 'int', 'max_votes' => 'int', 'expire_time' => 'int', 'id_member' => 'int',
- 'poster_name' => 'string-255', 'change_vote' => 'int', 'guest_vote' => 'int'
- ),
- array(
- $_POST['question'], $_POST['poll_hide'], $_POST['poll_max_votes'], (empty($_POST['poll_expire']) ? 0 : time() + $_POST['poll_expire'] * 3600 * 24), $user_info['id'],
- $_POST['guestname'], $_POST['poll_change_vote'], $_POST['poll_guest_vote'],
- ),
- array('id_poll')
- );
- $id_poll = $smcFunc['db_insert_id']('{db_prefix}polls', 'id_poll');
- // Create each answer choice.
- $i = 0;
- $pollOptions = array();
- foreach ($_POST['options'] as $option)
- {
- $pollOptions[] = array($id_poll, $i, $option);
- $i++;
- }
- $smcFunc['db_insert']('insert',
- '{db_prefix}poll_choices',
- array('id_poll' => 'int', 'id_choice' => 'int', 'label' => 'string-255'),
- $pollOptions,
- array('id_poll', 'id_choice')
- );
- call_integration_hook('integrate_poll_add_edit', array($id_poll, false));
- }
- else
- $id_poll = 0;
- // Creating a new topic?
- $newTopic = empty($_REQUEST['msg']) && empty($topic);
- $_POST['icon'] = !empty($attachIDs) && $_POST['icon'] == 'xx' ? 'clip' : $_POST['icon'];
- // Collect all parameters for the creation or modification of a post.
- $msgOptions = array(
- 'id' => empty($_REQUEST['msg']) ? 0 : (int) $_REQUEST['msg'],
- 'subject' => $_POST['subject'],
- 'body' => $_POST['message'],
- 'icon' => preg_replace('~[\./\\\\*:"\'<>]~', '', $_POST['icon']),
- 'smileys_enabled' => !isset($_POST['ns']),
- 'attachments' => empty($attachIDs) ? array() : $attachIDs,
- 'approved' => $becomesApproved,
- );
- $topicOptions = array(
- 'id' => empty($topic) ? 0 : $topic,
- 'board' => $board,
- 'poll' => isset($_REQUEST['poll']) ? $id_poll : null,
- 'lock_mode' => isset($_POST['lock']) ? (int) $_POST['lock'] : null,
- 'sticky_mode' => isset($_POST['sticky']) && !empty($modSettings['enableStickyTopics']) ? (int) $_POST['sticky'] : null,
- 'mark_as_read' => true,
- 'is_approved' => !$modSettings['postmod_active'] || empty($topic) || !empty($board_info['cur_topic_approved']),
- );
- $posterOptions = array(
- 'id' => $user_info['id'],
- 'name' => $_POST['guestname'],
- 'email' => $_POST['email'],
- 'update_post_count' => !$user_info['is_guest'] && !isset($_REQUEST['msg']) && $board_info['posts_count'],
- );
- // This is an already existing message. Edit it.
- if (!empty($_REQUEST['msg']))
- {
- // Have admins allowed people to hide their screwups?
- if (time() - $row['poster_time'] > $modSettings['edit_wait_time'] || $user_info['id'] != $row['id_member'])
- {
- $msgOptions['modify_time'] = time();
- $msgOptions['modify_name'] = $user_info['name'];
- }
- // This will save some time...
- if (empty($approve_has_changed))
- unset($msgOptions['approved']);
- modifyPost($msgOptions, $topicOptions, $posterOptions);
- }
- // This is a new topic or an already existing one. Save it.
- else
- {
- createPost($msgOptions, $topicOptions, $posterOptions);
- if (isset($topicOptions['id']))
- $topic = $topicOptions['id'];
- }
- // Editing or posting an event?
- if (isset($_POST['calendar']) && (!isset($_REQUEST['eventid']) || $_REQUEST['eventid'] == -1))
- {
- require_once($sourcedir . '/Subs-Calendar.php');
- // Make sure they can link an event to this post.
- canLinkEvent();
- // Insert the event.
- $eventOptions = array(
- 'board' => $board,
- 'topic' => $topic,
- 'title' => $_POST['evtitle'],
- 'member' => $user_info['id'],
- 'start_date' => sprintf('%04d-%02d-%02d', $_POST['year'], $_POST['month'], $_POST['day']),
- 'span' => isset($_POST['span']) && $_POST['span'] > 0 ? min((int) $modSettings['cal_maxspan'], (int) $_POST['span'] - 1) : 0,
- );
- insertEvent($eventOptions);
- }
- elseif (isset($_POST['calendar']))
- {
- $_REQUEST['eventid'] = (int) $_REQUEST['eventid'];
- // Validate the post...
- require_once($sourcedir . '/Subs-Calendar.php');
- validateEventPost();
- // If you're not allowed to edit any events, you have to be the poster.
- if (!allowedTo('calendar_edit_any'))
- {
- // Get the event's poster.
- $request = $smcFunc['db_query']('', '
- SELECT id_member
- FROM {db_prefix}calendar
- WHERE id_event = {int:id_event}',
- array(
- 'id_event' => $_REQUEST['eventid'],
- )
- );
- $row2 = $smcFunc['db_fetch_assoc']($request);
- $smcFunc['db_free_result']($request);
- // Silly hacker, Trix are for kids. ...probably trademarked somewhere, this is FAIR USE! (parody...)
- isAllowedTo('calendar_edit_' . ($row2['id_member'] == $user_info['id'] ? 'own' : 'any'));
- }
- // Delete it?
- if (isset($_REQUEST['deleteevent']))
- $smcFunc['db_query']('', '
- DELETE FROM {db_prefix}calendar
- WHERE id_event = {int:id_event}',
- array(
- 'id_event' => $_REQUEST['eventid'],
- )
- );
- // ... or just update it?
- else
- {
- $span = !empty($modSettings['cal_allowspan']) && !empty($_REQUEST['span']) ? min((int) $modSettings['cal_maxspan'], (int) $_REQUEST['span'] - 1) : 0;
- $start_time = mktime(0, 0, 0, (int) $_REQUEST['month'], (int) $_REQUEST['day'], (int) $_REQUEST['year']);
- $smcFunc['db_query']('', '
- UPDATE {db_prefix}calendar
- SET end_date = {date:end_date},
- start_date = {date:start_date},
- title = {string:title}
- WHERE id_event = {int:id_event}',
- array(
- 'end_date' => strftime('%Y-%m-%d', $start_time + $span * 86400),
- 'start_date' => strftime('%Y-%m-%d', $start_time),
- 'id_event' => $_REQUEST['eventid'],
- 'title' => $smcFunc['htmlspecialchars']($_REQUEST['evtitle'], ENT_QUOTES),
- )
- );
- }
- updateSettings(array(
- 'calendar_updated' => time(),
- ));
- }
- // Marking read should be done even for editing messages....
- // Mark all the parents read. (since you just posted and they will be unread.)
- if (!$user_info['is_guest'] && !empty($board_info['parent_boards']))
- {
- $smcFunc['db_query']('', '
- UPDATE {db_prefix}log_boards
- SET id_msg = {int:id_msg}
- WHERE id_member = {int:current_member}
- AND id_board IN ({array_int:board_list})',
- array(
- 'current_member' => $user_info['id'],
- 'board_list' => array_keys($board_info['parent_boards']),
- 'id_msg' => $modSettings['maxMsgID'],
- )
- );
- }
- // Turn notification on or off. (note this just blows smoke if it's already on or off.)
- if (!empty($_POST['notify']) && allowedTo('mark_any_notify'))
- {
- $smcFunc['db_insert']('ignore',
- '{db_prefix}log_notify',
- array('id_member' => 'int', 'id_topic' => 'int', 'id_board' => 'int'),
- array($user_info['id'], $topic, 0),
- array('id_member', 'id_topic', 'id_board')
- );
- }
- elseif (!$newTopic)
- $smcFunc['db_query']('', '
- DELETE FROM {db_prefix}log_notify
- WHERE id_member = {int:current_member}
- AND id_topic = {int:current_topic}',
- array(
- 'current_member' => $user_info['id'],
- 'current_topic' => $topic,
- )
- );
- // Log an act of moderation - modifying.
- if (!empty($moderationAction))
- logAction('modify', array('topic' => $topic, 'message' => (int) $_REQUEST['msg'], 'member' => $row['id_member'], 'board' => $board));
- if (isset($_POST['lock']) && $_POST['lock'] != 2)
- logAction(empty($_POST['lock']) ? 'unlock' : 'lock', array('topic' => $topicOptions['id'], 'board' => $topicOptions['board']));
- if (isset($_POST['sticky']) && !empty($modSettings['enableStickyTopics']))
- logAction('sticky', array('topic' => $topicOptions['id'], 'board' => $topicOptions['board']));
- // Notify any members who have notification turned on for this topic - only do this if it's going to be approved(!)
- if ($becomesApproved)
- {
- if ($newTopic)
- {
- $notifyData = array(
- 'body' => $_POST['message'],
- 'subject' => $_POST['subject'],
- 'name' => $user_info['name'],
- 'poster' => $user_info['id'],
- 'msg' => $msgOptions['id'],
- 'board' => $board,
- 'topic' => $topic,
- );
- notifyMembersBoard($notifyData);
- }
- elseif (empty($_REQUEST['msg']))
- {
- // Only send it to everyone if the topic is approved, otherwise just to the topic starter if they want it.
- if ($topic_info['approved'])
- sendNotifications($topic, 'reply');
- else
- sendNotifications($topic, 'reply', array(), $topic_info['id_member_started']);
- }
- }
- // Returning to the topic?
- if (!empty($_REQUEST['goback']))
- {
- // Mark the board as read.... because it might get confusing otherwise.
- $smcFunc['db_query']('', '
- UPDATE {db_prefix}log_boards
- SET id_msg = {int:maxMsgID}
- WHERE id_member = {int:current_member}
- AND id_board = {int:current_board}',
- array(
- 'current_board' => $board,
- 'current_member' => $user_info['id'],
- 'maxMsgID' => $modSettings['maxMsgID'],
- )
- );
- }
- if ($board_info['num_topics'] == 0)
- cache_put_data('board-' . $board, null, 120);
- if (!empty($_POST['announce_topic']))
- redirectexit('action=announce;sa=selectgroup;topic=' . $topic . (!empty($_POST['move']) && allowedTo('move_any') ? ';move' : '') . (empty($_REQUEST['goback']) ? '' : ';goback'));
- if (!empty($_POST['move']) && allowedTo('move_any'))
- redirectexit('action=movetopic;topic=' . $topic . '.0' . (empty($_REQUEST['goback']) ? '' : ';goback'));
- // If there are attachment errors. Let's show a list to the user.
- if (!empty($attach_errors))
- {
- global $settings, $scripturl;
- loadTemplate('Errors');
- $context['sub_template'] = 'attachment_errors';
- $context['page_title'] = $txt['error_occured'];
- $context['error_message'] = '<dl>';
- $context['error_message'] .= implode("\n", $attach_errors);
- $context['error_message'] .= '</dl>';
- $context['linktree'][] = array(
- 'url' => $scripturl . '?topic=' . $topic . '.0',
- 'name' => $_POST['subject'],
- );
- if (isset($_REQUEST['msg']))
- $context['redirect_link'] = '?topic=' . $topic . '.msg' . $_REQUEST['msg'] . '#msg' . $_REQUEST['msg'];
- else
- $context['redirect_link'] = '?topic=' . $topic . '.new#new';
- $context['back_link'] = '?action=post;msg=' . $msgOptions['id'] . ';topic=' . $topic . ';additionalOptions#postAttachment';
- obExit(null, true);
- }
- // Return to post if the mod is on.
- if (isset($_REQUEST['msg']) && !empty($_REQUEST['goback']))
- redirectexit('topic=' . $topic . '.msg' . $_REQUEST['msg'] . '#msg' . $_REQUEST['msg'], isBrowser('ie'));
- elseif (!empty($_REQUEST['goback']))
- redirectexit('topic=' . $topic . '.new#new', isBrowser('ie'));
- // Dut-dut-duh-duh-DUH-duh-dut-duh-duh! *dances to the Final Fantasy Fanfare...*
- else
- redirectexit('board=' . $board . '.0');
- }
- /**
- * handle the announce topic function (action=announce).
- *
- * checks the topic announcement permissions and loads the announcement template.
- * requires the announce_topic permission.
- * uses the ManageMembers template and Post language file.
- * call the right function based on the sub-action.
- */
- function AnnounceTopic()
- {
- global $context, $txt, $topic;
- isAllowedTo('announce_topic');
- validateSession();
- if (empty($topic))
- fatal_lang_error('topic_gone', false);
- loadLanguage('Post');
- loadTemplate('Post');
- $subActions = array(
- 'selectgroup' => 'AnnouncementSelectMembergroup',
- 'send' => 'AnnouncementSend',
- );
- $context['page_title'] = $txt['announce_topic'];
- // Call the function based on the sub-action.
- $subActions[isset($_REQUEST['sa']) && isset($subActions[$_REQUEST['sa']]) ? $_REQUEST['sa'] : 'selectgroup']();
- }
- /**
- * Allow a user to chose the membergroups to send the announcement to.
- *
- * lets the user select the membergroups that will receive the topic announcement.
- */
- function AnnouncementSelectMembergroup()
- {
- global $txt, $context, $topic, $board, $board_info, $smcFunc;
- $groups = array_merge($board_info['groups'], array(1));
- foreach ($groups as $id => $group)
- $groups[$id] = (int) $group;
- $context['groups'] = array();
- if (in_array(0, $groups))
- {
- $context['groups'][0] = array(
- 'id' => 0,
- 'name' => $txt['announce_regular_members'],
- 'member_count' => 'n/a',
- );
- }
- // Get all membergroups that have access to the board the announcement was made on.
- $request = $smcFunc['db_query']('', '
- SELECT mg.id_group, COUNT(mem.id_member) AS num_members
- FROM {db_prefix}membergroups AS mg
- LEFT JOIN {db_prefix}members AS mem ON (mem.id_group = mg.id_group OR FIND_IN_SET(mg.id_group, mem.additional_groups) != 0 OR mg.id_group = mem.id_post_group)
- WHERE mg.id_group IN ({array_int:group_list})
- GROUP BY mg.id_group',
- array(
- 'group_list' => $groups,
- 'newbie_id_group' => 4,
- )
- );
- while ($row = $smcFunc['db_fetch_assoc']($request))
- {
- $context['groups'][$row['id_group']] = array(
- 'id' => $row['id_group'],
- 'name' => '',
- 'member_count' => $row['num_members'],
- );
- }
- $smcFunc['db_free_result']($request);
- // Now get the membergroup names.
- $request = $smcFunc['db_query']('', '
- SELECT id_group, group_name
- FROM {db_prefix}membergroups
- WHERE id_group IN ({array_int:group_list})',
- array(
- 'group_list' => $groups,
- )
- );
- while ($row = $smcFunc['db_fetch_assoc']($request))
- $context['groups'][$row['id_group']]['name'] = $row['group_name'];
- $smcFunc['db_free_result']($request);
- // Get the subject of the topic we're about to announce.
- $request = $smcFunc['db_query']('', '
- SELECT m.subject
- FROM {db_prefix}topics AS t
- INNER JOIN {db_prefix}messages AS m ON (m.id_msg = t.id_first_msg)
- WHERE t.id_topic = {int:current_topic}',
- array(
- 'current_topic' => $topic,
- )
- );
- list ($context['topic_subject']) = $smcFunc['db_fetch_row']($request);
- $smcFunc['db_free_result']($request);
- censorText($context['announce_topic']['subject']);
- $context['move'] = isset($_REQUEST['move']) ? 1 : 0;
- $context['go_back'] = isset($_REQUEST['goback']) ? 1 : 0;
- $context['sub_template'] = 'announce';
- }
- /**
- * Send the announcement in chunks.
- *
- * splits the members to be sent a topic announcement into chunks.
- * composes notification messages in all languages needed.
- * does the actual sending of the topic announcements in chunks.
- * calculates a rough estimate of the percentage items sent.
- */
- function AnnouncementSend()
- {
- global $topic, $board, $board_info, $context, $modSettings;
- global $language, $scripturl, $txt, $user_info, $sourcedir, $smcFunc;
- checkSession();
- $context['start'] = empty($_REQUEST['start']) ? 0 : (int) $_REQUEST['start'];
- $groups = array_merge($board_info['groups'], array(1));
- if (isset($_POST['membergroups']))
- $_POST['who'] = explode(',', $_POST['membergroups']);
- // Check whether at least one membergroup was selected.
- if (empty($_POST['who']))
- fatal_lang_error('no_membergroup_selected');
- // Make sure all membergroups are integers and can access the board of the announcement.
- foreach ($_POST['who'] as $id => $mg)
- $_POST['who'][$id] = in_array((int) $mg, $groups) ? (int) $mg : 0;
- // Get the topic subject and censor it.
- $request = $smcFunc['db_query']('', '
- SELECT m.id_msg, m.subject, m.body
- FROM {db_prefix}topics AS t
- INNER JOIN {db_prefix}messages AS m ON (m.id_msg = t.id_first_msg)
- WHERE t.id_topic = {int:current_topic}',
- array(
- 'current_topic' => $topic,
- )
- );
- list ($id_msg, $context['topic_subject'], $message) = $smcFunc['db_fetch_row']($request);
- $smcFunc['db_free_result']($request);
- censorText($context['topic_subject']);
- censorText($message);
- $message = trim(un_htmlspecialchars(strip_tags(strtr(parse_bbc($message, false, $id_msg), array('<br />' => "\n", '</div>' => "\n", '</li>' => "\n", '[' => '[', ']' => ']')))));
- // We need this in order to be able send emails.
- require_once($sourcedir . '/Subs-Post.php');
- // Select the email addresses for this batch.
- $request = $smcFunc['db_query']('', '
- SELECT mem.id_member, mem.email_address, mem.lngfile
- FROM {db_prefix}members AS mem
- WHERE (mem.id_group IN ({array_int:group_list}) OR mem.id_post_group IN ({array_int:group_list}) OR FIND_IN_SET({raw:additional_group_list}, mem.additional_groups) != 0)' . (!empty($modSettings['allow_disableAnnounce']) ? '
- AND mem.notify_announcements = {int:notify_announcements}' : '') . '
- AND mem.is_activated = {int:is_activated}
- AND mem.id_member > {int:start}
- ORDER BY mem.id_member
- LIMIT {int:chunk_size}',
- array(
- 'group_list' => $_POST['who'],
- 'notify_announcements' => 1,
- 'is_activated' => 1,
- 'start' => $context['start'],
- 'additional_group_list' => implode(', mem.additional_groups) != 0 OR FIND_IN_SET(', $_POST['who']),
- // @todo Might need an interface?
- 'chunk_size' => empty($modSettings['mail_queue']) ? 50 : 500,
- )
- );
- // All members have received a mail. Go to the next screen.
- if ($smcFunc['db_num_rows']($request) == 0)
- {
- logAction('announce_topic', array('topic' => $topic), 'user');
- if (!empty($_REQUEST['move']) && allowedTo('move_any'))
- redirectexit('action=movetopic;topic=' . $topic . '.0' . (empty($_REQUEST['goback']) ? '' : ';goback'));
- elseif (!empty($_REQUEST['goback']))
- redirectexit('topic=' . $topic . '.new;boardseen#new', isBrowser('ie'));
- else
- redirectexit('board=' . $board . '.0');
- }
- $announcements = array();
- // Loop through all members that'll receive an announcement in this batch.
- while ($row = $smcFunc['db_fetch_assoc']($request))
- {
- $cur_language = empty($row['lngfile']) || empty($modSettings['userLanguage']) ? $language : $row['lngfile'];
- // If the language wasn't defined yet, load it and compose a notification message.
- if (!isset($announcements[$cur_language]))
- {
- $replacements = array(
- 'TOPICSUBJECT' => $context['topic_subject'],
- 'MESSAGE' => $message,
- 'TOPICLINK' => $scripturl . '?topic=' . $topic . '.0',
- );
- $emaildata = loadEmailTemplate('new_announcement', $replacements, $cur_language);
- $announcements[$cur_language] = array(
- 'subject' => $emaildata['subject'],
- 'body' => $emaildata['body'],
- 'recipients' => array(),
- );
- }
- $announcements[$cur_language]['recipients'][$row['id_member']] = $row['email_address'];
- $context['start'] = $row['id_member'];
- }
- $smcFunc['db_free_result']($request);
- // For each language send a different mail - low priority...
- foreach ($announcements as $lang => $mail)
- sendmail($mail['recipients'], $mail['subject'], $mail['body'], null, null, false, 5);
- $context['percentage_done'] = round(100 * $context['start'] / $modSettings['latestMember'], 1);
- $context['move'] = empty($_REQUEST['move']) ? 0 : 1;
- $context['go_back'] = empty($_REQUEST['goback']) ? 0 : 1;
- $context['membergroups'] = implode(',', $_POST['who']);
- $context['sub_template'] = 'announcement_send';
- // Go back to the correct language for the user ;).
- if (!empty($modSettings['userLanguage']))
- loadLanguage('Post');
- }
- /**
- * Notifies members who have requested notification for new topics posted on a board of said posts.
- *
- * receives data on the topics to send out notifications to by the passed in array.
- * only sends notifications to those who can *currently* see the topic (it doesn't matter if they could when they requested notification.)
- * loads the Post language file multiple times for each language if the userLanguage setting is set.
- * @param array &$topicData
- */
- function notifyMembersBoard(&$topicData)
- {
- global $txt, $scripturl, $language, $user_info;
- global $modSettings, $sourcedir, $board, $smcFunc, $context;
- require_once($sourcedir . '/Subs-Post.php');
- // Do we have one or lots of topics?
- if (isset($topicData['body']))
- $topicData = array($topicData);
- // Find out what boards we have... and clear out any rubbish!
- $boards = array();
- foreach ($topicData as $key => $topic)
- {
- if (!empty($topic['board']))
- $boards[$topic['board']][] = $key;
- else
- {
- unset($topic[$key]);
- continue;
- }
- // Censor the subject and body...
- censorText($topicData[$key]['subject']);
- censorText($topicData[$key]['body']);
- $topicData[$key]['subject'] = un_htmlspecialchars($topicData[$key]['subject']);
- $topicData[$key]['body'] = trim(un_htmlspecialchars(strip_tags(strtr(parse_bbc($topicData[$key]['body'], false), array('<br />' => "\n", '</div>' => "\n", '</li>' => "\n", '[' => '[', ']' => ']')))));
- }
- // Just the board numbers.
- $board_index = array_unique(array_keys($boards));
- if (empty($board_index))
- return;
- // Yea, we need to add this to the digest queue.
- $digest_insert = array();
- foreach ($topicData as $id => $data)
- $digest_insert[] = array($data['topic'], $data['msg'], 'topic', $user_info['id']);
- $smcFunc['db_insert']('',
- '{db_prefix}log_digest',
- array(
- 'id_topic' => 'int', 'id_msg' => 'int', 'note_type' => 'string', 'exclude' => 'int',
- ),
- $digest_insert,
- array()
- );
- // Find the members with notification on for these boards.
- $members = $smcFunc['db_query']('', '
- SELECT
- mem.id_member, mem.email_address, mem.notify_regularity, mem.notify_send_body, mem.lngfile,
- ln.sent, ln.id_board, mem.id_group, mem.additional_groups, b.member_groups,
- mem.id_post_group
- FROM {db_prefix}log_notify AS ln
- INNER JOIN {db_prefix}boards AS b ON (b.id_board = ln.id_board)
- INNER JOIN {db_prefix}members AS mem ON (mem.id_member = ln.id_member)
- WHERE ln.id_board IN ({array_int:board_list})
- AND mem.id_member != {int:current_member}
- AND mem.is_activated = {int:is_activated}
- AND mem.notify_types != {int:notify_types}
- AND mem.notify_regularity < {int:notify_regularity}
- ORDER BY mem.lngfile',
- array(
- 'current_member' => $user_info['id'],
- 'board_list' => $board_index,
- 'is_activated' => 1,
- 'notify_types' => 4,
- 'notify_regularity' => 2,
- )
- );
- while ($rowmember = $smcFunc['db_fetch_assoc']($members))
- {
- if ($rowmember['id_group'] != 1)
- {
- $allowed = explode(',', $rowmember['member_groups']);
- $rowmember['additional_groups'] = explode(',', $rowmember['additional_groups']);
- $rowmember['additional_groups'][] = $rowmember['id_group'];
- $rowmember['additional_groups'][] = $rowmember['id_post_group'];
- if (count(array_intersect($allowed, $rowmember['additional_groups'])) == 0)
- continue;
- }
- $langloaded = loadLanguage('index', empty($rowmember['lngfile']) || empty($modSettings['userLanguage']) ? $language : $rowmember['lngfile'], false);
- // Now loop through all the notifications to send for this board.
- if (empty($boards[$rowmember['id_board']]))
- continue;
- $sentOnceAlready = 0;
- foreach ($boards[$rowmember['id_board']] as $key)
- {
- // Don't notify the guy who started the topic!
- // @todo In this case actually send them a "it's approved hooray" email :P
- if ($topicData[$key]['poster'] == $rowmember['id_member'])
- continue;
- // Setup the string for adding the body to the message, if a user wants it.
- $send_body = empty($modSettings['disallow_sendBody']) && !empty($rowmember['notify_send_body']);
- $replacements = array(
- 'TOPICSUBJECT' => $topicData[$key]['subject'],
- 'TOPICLINK' => $scripturl . '?topic=' . $topicData[$key]['topic'] . '.new#new',
- 'MESSAGE' => $topicData[$key]['body'],
- 'UNSUBSCRIBELINK' => $scripturl . '?action=notifyboard;board=' . $topicData[$key]['board'] . '.0',
- );
- if (!$send_body)
- unset($replacements['MESSAGE']);
- // Figure out which email to send off
- $emailtype = '';
- // Send only if once is off or it's on and it hasn't been sent.
- if (!empty($rowmember['notify_regularity']) && !$sentOnceAlready && empty($rowmember['sent']))
- $emailtype = 'notify_boards_once';
- elseif (empty($rowmember['notify_regularity']))
- $emailtype = 'notify_boards';
- if (!empty($emailtype))
- {
- $emailtype .= $send_body ? '_body' : '';
- $emaildata = loadEmailTemplate($emailtype, $replacements, $langloaded);
- sendmail($rowmember['email_address'], $emaildata['subject'], $emaildata['body'], null, null, false, 3);
- }
- $sentOnceAlready = 1;
- }
- }
- $smcFunc['db_free_result']($members);
- loadLanguage('index', $user_info['language']);
- // Sent!
- $smcFunc['db_query']('', '
- UPDATE {db_prefix}log_notify
- SET sent = {int:is_sent}
- WHERE id_board IN ({array_int:board_list})
- AND id_member != {int:current_member}',
- array(
- 'current_member' => $user_info['id'],
- 'board_list' => $board_index,
- 'is_sent' => 1,
- )
- );
- }
- /**
- * Get the topic for display purposes.
- *
- * gets a summary of the most recent posts in a topic.
- * depends on the topicSummaryPosts setting.
- * if you are editing a post, only shows posts previous to that post.
- */
- function getTopic()
- {
- global $topic, $modSettings, $context, $smcFunc, $counter, $options;
- if (isset($_REQUEST['xml']))
- $limit = '
- LIMIT ' . (empty($context['new_replies']) ? '0' : $context['new_replies']);
- else
- $limit = empty($modSettings['topicSummaryPosts']) ? '' : '
- LIMIT ' . (int) $modSettings['topicSummaryPosts'];
- // If you're modifying, get only those posts before the current one. (otherwise get all.)
- $request = $smcFunc['db_query']('', '
- SELECT
- IFNULL(mem.real_name, m.poster_name) AS poster_name, m.poster_time,
- m.body, m.smileys_enabled, m.id_msg, m.id_member
- FROM {db_prefix}messages AS m
- LEFT JOIN {db_prefix}members AS mem ON (mem.id_member = m.id_member)
- WHERE m.id_topic = {int:current_topic}' . (isset($_REQUEST['msg']) ? '
- AND m.id_msg < {int:id_msg}' : '') .(!$modSettings['postmod_active'] || allowedTo('approve_posts') ? '' : '
- AND m.approved = {int:approved}') . '
- ORDER BY m.id_msg DESC' . $limit,
- array(
- 'current_topic' => $topic,
- 'id_msg' => isset($_REQUEST['msg']) ? (int) $_REQUEST['msg'] : 0,
- 'approved' => 1,
- )
- );
- $context['previous_posts'] = array();
- while ($row = $smcFunc['db_fetch_assoc']($request))
- {
- // Censor, BBC, ...
- censorText($row['body']);
- $row['body'] = parse_bbc($row['body'], $row['smileys_enabled'], $row['id_msg']);
- // ...and store.
- $context['previous_posts'][] = array(
- 'counter' => $counter++,
- 'alternate' => $counter % 2,
- 'poster' => $row['poster_name'],
- 'message' => $row['body'],
- 'time' => timeformat($row['poster_time']),
- 'timestamp' => forum_time(true, $row['poster_time']),
- 'id' => $row['id_msg'],
- 'is_new' => !empty($context['new_replies']),
- 'is_ignored' => !empty($modSettings['enable_buddylist']) && !empty($options['posts_apply_ignore_list']) && in_array($row['id_member'], $context['user']['ignoreusers']),
- );
- if (!empty($context['new_replies']))
- $context['new_replies']--;
- }
- $smcFunc['db_free_result']($request);
- }
- /**
- * loads a post an inserts it into the current editing text box.
- * uses the Post language file.
- * uses special (sadly browser dependent) javascript to parse entities for internationalization reasons.
- * accessed with ?action=quotefast.
- */
- function QuoteFast()
- {
- global $modSettings, $user_info, $txt, $settings, $context;
- global $sourcedir, $smcFunc;
- loadLanguage('Post');
- if (!isset($_REQUEST['xml']))
- loadTemplate('Post');
- include_once($sourcedir . '/Subs-Post.php');
- $moderate_boards = boardsAllowedTo('moderate_board');
- // Where we going if we need to?
- $context['post_box_name'] = isset($_GET['pb']) ? $_GET['pb'] : '';
- $request = $smcFunc['db_query']('', '
- SELECT IFNULL(mem.real_name, m.poster_name) AS poster_name, m.poster_time, m.body, m.id_topic, m.subject,
- m.id_board, m.id_member, m.approved
- FROM {db_prefix}messages AS m
- INNER JOIN {db_prefix}topics AS t ON (t.id_topic = m.id_topic)
- INNER JOIN {db_prefix}boards AS b ON (b.id_board = m.id_board AND {query_see_board})
- LEFT JOIN {db_prefix}members AS mem ON (mem.id_member = m.id_member)
- WHERE m.id_msg = {int:id_msg}' . (isset($_REQUEST['modify']) || (!empty($moderate_boards) && $moderate_boards[0] == 0) ? '' : '
- AND (t.locked = {int:not_locked}' . (empty($moderate_boards) ? '' : ' OR b.id_board IN ({array_int:moderation_board_list})') . ')') . '
- LIMIT 1',
- array(
- 'current_member' => $user_info['id'],
- 'moderation_board_list' => $moderate_boards,
- 'id_msg' => (int) $_REQUEST['quote'],
- 'not_locked' => 0,
- )
- );
- $context['close_window'] = $smcFunc['db_num_rows']($request) == 0;
- $row = $smcFunc['db_fetch_assoc']($request);
- $smcFunc['db_free_result']($request);
- $context['sub_template'] = 'quotefast';
- if (!empty($row))
- $can_view_post = $row['approved'] || ($row['id_member'] != 0 && $row['id_member'] == $user_info['id']) || allowedTo('approve_posts', $row['id_board']);
- if (!empty($can_view_post))
- {
- // Remove special formatting we don't want anymore.
- $row['body'] = un_preparsecode($row['body']);
- // Censor the message!
- censorText($row['body']);
- $row['body'] = preg_replace('~<br ?/?' . '>~i', "\n", $row['body']);
- // Want to modify a single message by double clicking it?
- if (isset($_REQUEST['modify']))
- {
- censorText($row['subject']);
- $context['sub_template'] = 'modifyfast';
- $context['message'] = array(
- 'id' => $_REQUEST['quote'],
- 'body' => $row['body'],
- 'subject' => addcslashes($row['subject'], '"'),
- );
- return;
- }
- // Remove any nested quotes.
- if (!empty($modSettings['removeNestedQuotes']))
- $row['body'] = preg_replace(array('~\n?\[quote.*?\].+?\[/quote\]\n?~is', '~^\n~', '~\[/quote\]~'), '', $row['body']);
- $lb = "\n";
- // Add a quote string on the front and end.
- $context['quote']['xml'] = '[quote author=' . $row['poster_name'] . ' link=topic=' . $row['id_topic'] . '.msg' . (int) $_REQUEST['quote'] . '#msg' . (int) $_REQUEST['quote'] . ' date=' . $row['poster_time'] . ']' . $lb . $row['body'] . $lb . '[/quote]';
- $context['quote']['text'] = strtr(un_htmlspecialchars($context['quote']['xml']), array('\'' => '\\\'', '\\' => '\\\\', "\n" => '\\n', '</script>' => '</\' + \'script>'));
- $context['quote']['xml'] = strtr($context['quote']['xml'], array(' ' => ' ', '<' => '<', '>' => '>'));
- $context['quote']['mozilla'] = strtr($smcFunc['htmlspecialchars']($context['quote']['text']), array('"' => '"'));
- }
- //@todo Needs a nicer interface.
- // In case our message has been removed in the meantime.
- elseif (isset($_REQUEST['modify']))
- {
- $context['sub_template'] = 'modifyfast';
- $context['message'] = array(
- 'id' => 0,
- 'body' => '',
- 'subject' => '',
- );
- }
- else
- $context['quote'] = array(
- 'xml' => '',
- 'mozilla' => '',
- 'text' => '',
- );
- }
- /**
- * Used to edit the body or subject of a message inline
- * called from action=jsmodify from script and topic js
- */
- function JavaScriptModify()
- {
- global $sourcedir, $modSettings, $board, $topic, $txt;
- global $user_info, $context, $smcFunc, $language;
- // We have to have a topic!
- if (empty($topic))
- obExit(false);
- checkSession('get');
- require_once($sourcedir . '/Subs-Post.php');
- // Assume the first message if no message ID was given.
- $request = $smcFunc['db_query']('', '
- SELECT
- t.locked, t.num_replies, t.id_member_started, t.id_first_msg,
- m.id_msg, m.id_member, m.poster_time, m.subject, m.smileys_enabled, m.body, m.icon,
- m.modified_time, m.modified_name, m.approved
- FROM {db_prefix}messages AS m
- INNER JOIN {db_prefix}topics AS t ON (t.id_topic = {int:current_topic})
- WHERE m.id_msg = {raw:id_msg}
- AND m.id_topic = {int:current_topic}' . (allowedTo('modify_any') || allowedTo('approve_posts') ? '' : (!$modSettings['postmod_active'] ? '
- AND (m.id_member != {int:guest_id} AND m.id_member = {int:current_member})' : '
- AND (m.approved = {int:is_approved} OR (m.id_member != {int:guest_id} AND m.id_member = {int:current_member}))')),
- array(
- 'current_member' => $user_info['id'],
- 'current_topic' => $topic,
- 'id_msg' => empty($_REQUEST['msg']) ? 't.id_first_msg' : (int) $_REQUEST['msg'],
- 'is_approved' => 1,
- 'guest_id' => 0,
- )
- );
- if ($smcFunc['db_num_rows']($request) == 0)
- fatal_lang_error('no_board', false);
- $row = $smcFunc['db_fetch_assoc']($request);
- $smcFunc['db_free_result']($request);
- // Change either body or subject requires permissions to modify messages.
- if (isset($_POST['message']) || isset($_POST['subject']) || isset($_REQUEST['icon']))
- {
- if (!empty($row['locked']))
- isAllowedTo('moderate_board');
- if ($row['id_member'] == $user_info['id'] && !allowedTo('modify_any'))
- {
- if ((!$modSettings['postmod_active'] || $row['approved']) && !empty($modSettings['edit_disable_time']) && $row['poster_time'] + ($modSettings['edit_disable_time'] + 5) * 60 < time())
- fatal_lang_error('modify_post_time_passed', false);
- elseif ($row['id_member_started'] == $user_info['id'] && !allowedTo('modify_own'))
- isAllowedTo('modify_replies');
- else
- isAllowedTo('modify_own');
- }
- // Otherwise, they're locked out; someone who can modify the replies is needed.
- elseif ($row['id_member_started'] == $user_info['id'] && !allowedTo('modify_any'))
- isAllowedTo('modify_replies');
- else
- isAllowedTo('modify_any');
- // Only log this action if it wasn't your message.
- $moderationAction = $row['id_member'] != $user_info['id'];
- }
- $post_errors = array();
- if (isset($_POST['subject']) && $smcFunc['htmltrim']($smcFunc['htmlspecialchars']($_POST['subject'])) !== '')
- {
- $_POST['subject'] = strtr($smcFunc['htmlspecialchars']($_POST['subject']), array("\r" => '', "\n" => '', "\t" => ''));
- // Maximum number of characters.
- if ($smcFunc['strlen']($_POST['subject']) > 100)
- $_POST['subject'] = $smcFunc['substr']($_POST['subject'], 0, 100);
- }
- elseif (isset($_POST['subject']))
- {
- $post_errors[] = 'no_subject';
- unset($_POST['subject']);
- }
- if (isset($_POST['message']))
- {
- if ($smcFunc['htmltrim']($smcFunc['htmlspecialchars']($_POST['message'])) === '')
- {
- $post_errors[] = 'no_message';
- unset($_POST['message']);
- }
- elseif (!empty($modSettings['max_messageLength']) && $smcFunc['strlen']($_POST['message']) > $modSettings['max_messageLength'])
- {
- $post_errors[] = 'long_message';
- unset($_POST['message']);
- }
- else
- {
- $_POST['message'] = $smcFunc['htmlspecialchars']($_POST['message'], ENT_QUOTES);
- preparsecode($_POST['message']);
- if ($smcFunc['htmltrim'](strip_tags(parse_bbc($_POST['message'], false), '<img>')) === '')
- {
- $post_errors[] = 'no_message';
- unset($_POST['message']);
- }
- }
- }
- if (isset($_POST['lock']))
- {
- if (!allowedTo(array('lock_any', 'lock_own')) || (!allowedTo('lock_any') && $user_info['id'] != $row['id_member']))
- unset($_POST['lock']);
- elseif (!allowedTo('lock_any'))
- {
- if ($row['locked'] == 1)
- unset($_POST['lock']);
- else
- $_POST['lock'] = empty($_POST['lock']) ? 0 : 2;
- }
- elseif (!empty($row['locked']) && !empty($_POST['lock']) || $_POST['lock'] == $row['locked'])
- unset($_POST['lock']);
- else
- $_POST['lock'] = empty($_POST['lock']) ? 0 : 1;
- }
- if (isset($_POST['sticky']) && !allowedTo('make_sticky'))
- unset($_POST['sticky']);
- if (empty($post_errors))
- {
- $msgOptions = array(
- 'id' => $row['id_msg'],
- 'subject' => isset($_POST['subject']) ? $_POST['subject'] : null,
- 'body' => isset($_POST['message']) ? $_POST['message'] : null,
- 'icon' => isset($_REQUEST['icon']) ? preg_replace('~[\./\\\\*\':"<>]~', '', $_REQUEST['icon']) : null,
- );
- $topicOptions = array(
- 'id' => $topic,
- 'board' => $board,
- 'lock_mode' => isset($_POST['lock']) ? (int) $_POST['lock'] : null,
- 'sticky_mode' => isset($_POST['sticky']) && !empty($modSettings['enableStickyTopics']) ? (int) $_POST['sticky'] : null,
- 'mark_as_read' => true,
- );
- $posterOptions = array();
- // Only consider marking as editing if they have edited the subject, message or icon.
- if ((isset($_POST['subject']) && $_POST['subject'] != $row['subject']) || (isset($_POST['message']) && $_POST['message'] != $row['body']) || (isset($_REQUEST['icon']) && $_REQUEST['icon'] != $row['icon']))
- {
- // And even then only if the time has passed...
- if (time() - $row['poster_time'] > $modSettings['edit_wait_time'] || $user_info['id'] != $row['id_member'])
- {
- $msgOptions['modify_time'] = time();
- $msgOptions['modify_name'] = $user_info['name'];
- }
- }
- // If nothing was changed there's no need to add an entry to the moderation log.
- else
- $moderationAction = false;
- modifyPost($msgOptions, $topicOptions, $posterOptions);
- // If we didn't change anything this time but had before put back the old info.
- if (!isset($msgOptions['modify_time']) && !empty($row['modified_time']))
- {
- $msgOptions['modify_time'] = $row['modified_time'];
- $msgOptions['modify_name'] = $row['modified_name'];
- }
- // Changing the first subject updates other subjects to 'Re: new_subject'.
- if (isset($_POST['subject']) && isset($_REQUEST['change_all_subjects']) && $row['id_first_msg'] == $row['id_msg'] && !empty($row['num_replies']) && (allowedTo('modify_any') || ($row['id_member_started'] == $user_info['id'] && allowedTo('modify_replies'))))
- {
- // Get the proper (default language) response prefix first.
- if (!isset($context['response_prefix']) && !($context['response_prefix'] = cache_get_data('response_prefix')))
- {
- if ($language === $user_info['language'])
- $context['response_prefix'] = $txt['response_prefix'];
- else
- {
- loadLanguage('index', $language, false);
- $context['response_prefix'] = $txt['response_prefix'];
- loadLanguage('index');
- }
- cache_put_data('response_prefix', $context['response_prefix'], 600);
- }
- $smcFunc['db_query']('', '
- UPDATE {db_prefix}messages
- SET subject = {string:subject}
- WHERE id_topic = {int:current_topic}
- AND id_msg != {int:id_first_msg}',
- array(
- 'current_topic' => $topic,
- 'id_first_msg' => $row['id_first_msg'],
- 'subject' => $context['response_prefix'] . $_POST['subject'],
- )
- );
- }
- if (!empty($moderationAction))
- logAction('modify', array('topic' => $topic, 'message' => $row['id_msg'], 'member' => $row['id_member'], 'board' => $board));
- }
- if (isset($_REQUEST['xml']))
- {
- $context['sub_template'] = 'modifydone';
- if (empty($post_errors) && isset($msgOptions['subject']) && isset($msgOptions['body']))
- {
- $context['message'] = array(
- 'id' => $row['id_msg'],
- 'modified' => array(
- 'time' => isset($msgOptions['modify_time']) ? timeformat($msgOptions['modify_time']) : '',
- 'timestamp' => isset($msgOptions['modify_time']) ? forum_time(true, $msgOptions['modify_time']) : 0,
- 'name' => isset($msgOptions['modify_time']) ? $msgOptions['modify_name'] : '',
- ),
- 'subject' => $msgOptions['subject'],
- 'first_in_topic' => $row['id_msg'] == $row['id_first_msg'],
- 'body' => strtr($msgOptions['body'], array(']]>' => ']]]]><![CDATA[>')),
- );
- censorText($context['message']['subject']);
- censorText($context['message']['body']);
- $context['message']['body'] = parse_bbc($context['message']['body'], $row['smileys_enabled'], $row['id_msg']);
- }
- // Topic?
- elseif (empty($post_errors))
- {
- $context['sub_template'] = 'modifytopicdone';
- $context['message'] = array(
- 'id' => $row['id_msg'],
- 'modified' => array(
- 'time' => isset($msgOptions['modify_time']) ? timeformat($msgOptions['modify_time']) : '',
- 'timestamp' => isset($msgOptions['modify_time']) ? forum_time(true, $msgOptions['modify_time']) : 0,
- 'name' => isset($msgOptions['modify_time']) ? $msgOptions['modify_name'] : '',
- ),
- 'subject' => isset($msgOptions['subject']) ? $msgOptions['subject'] : '',
- );
- censorText($context['message']['subject']);
- }
- else
- {
- $context['message'] = array(
- 'id' => $row['id_msg'],
- 'errors' => array(),
- 'error_in_subject' => in_array('no_subject', $post_errors),
- 'error_in_body' => in_array('no_message', $post_errors) || in_array('long_message', $post_errors),
- );
- loadLanguage('Errors');
- foreach ($post_errors as $post_error)
- {
- if ($post_error == 'long_message')
- $context['message']['errors'][] = sprintf($txt['error_' . $post_error], $modSettings['max_messageLength']);
- else
- $context['message']['errors'][] = $txt['error_' . $post_error];
- }
- }
- }
- else
- obExit(false);
- }
- ?>
|