- Welcome to SleePyCode Forums.
Recent posts
#91
PasteBin / Paste-1267996162:v:use_geshi-1...
Last post by SleePy - Mar 07, 2010, 09:09 PM$dir = '/home/svn/simpledesk/trunk/language-php/';
$files = scandir($dir);
$data = array();
foreach ($files as $temp)
{
$txt = array(); $helptxt = array();
include($dir . '/' . $temp);
foreach ($txt as $key => $value)
$data[$temp][$key] = $value;
}
$files = scandir($dir);
$data = array();
foreach ($files as $temp)
{
$txt = array(); $helptxt = array();
include($dir . '/' . $temp);
foreach ($txt as $key => $value)
$data[$temp][$key] = $value;
}
#92
PasteBin / Paste-1267306440:v:use_geshi-1...
Last post by Guest - Feb 27, 2010, 09:34 PM<?php
/**********************************************************************************
* Post.php *
***********************************************************************************
* SMF: Simple Machines Forum *
* Open-Source Project Inspired by Zef Hemel (zef@zefhemel.com) *
* =============================================================================== *
* Software Version: SMF 2.0 RC2 *
* Software by: Simple Machines (http://www.simplemachines.org) *
* Copyright 2006-2009 by: Simple Machines LLC (http://www.simplemachines.org) *
* 2001-2006 by: Lewis Media (http://www.lewismedia.com) *
* Support, News, Updates at: http://www.simplemachines.org *
***********************************************************************************
* This program is free software; you may redistribute it and/or modify it under *
* the terms of the provided license as published by Simple Machines LLC. *
* *
* This program is distributed in the hope that it is and will be useful, but *
* WITHOUT ANY WARRANTIES; without even any implied warranty of MERCHANTABILITY *
* or FITNESS FOR A PARTICULAR PURPOSE. *
* *
* See the "license.txt" file for details of the Simple Machines license. *
* The latest version can always be found at http://www.simplemachines.org. *
**********************************************************************************/
if (!defined('SMF'))
die('Hacking attempt...');
/* The job of this file is to handle everything related to posting replies,
new topics, quotes, and modifications to existing posts. It also handles
quoting posts by way of javascript.
void Post()
- handles showing the post screen, loading the post to be modified, and
loading any post quoted.
- additionally handles previews of posts.
- uses the Post template and language file, main sub template.
- allows wireless access using the protocol_post sub template.
- requires different permissions depending on the actions, but most
notably post_new, post_reply_own, and post_reply_any.
- shows options for the editing and posting of calendar events and
attachments, as well as the posting of polls.
- accessed from ?action=post.
void Post2()
- actually posts or saves the message composed with Post().
- requires various permissions depending on the action.
- handles attachment, post, and calendar saving.
- sends off notifications, and allows for announcements and moderation.
- accessed from ?action=post2.
void AnnounceTopic()
- handle the announce topic function (action=announce).
- checks the topic announcement permissions and loads the announcement
template.
- requires the announce_topic permission.
- uses the ManageMembers template and Post language file.
- call the right function based on the sub-action.
void AnnouncementSelectMembergroup()
- lets the user select the membergroups that will receive the topic
announcement.
void AnnouncementSend()
- splits the members to be sent a topic announcement into chunks.
- composes notification messages in all languages needed.
- does the actual sending of the topic announcements in chunks.
- calculates a rough estimate of the percentage items sent.
void notifyMembersBoard(notifyData)
- notifies members who have requested notification for new topics
posted on a board of said posts.
- receives data on the topics to send out notifications to by the passed in array.
- only sends notifications to those who can *currently* see the topic
(it doesn't matter if they could when they requested notification.)
- loads the Post language file multiple times for each language if the
userLanguage setting is set.
void getTopic()
- gets a summary of the most recent posts in a topic.
- depends on the topicSummaryPosts setting.
- if you are editing a post, only shows posts previous to that post.
void QuoteFast()
- loads a post an inserts it into the current editing text box.
- uses the Post language file.
- uses special (sadly browser dependent) javascript to parse entities
for internationalization reasons.
- accessed with ?action=quotefast.
void JavaScriptModify()
// !!!
*/
function Post()
{
global $txt, $scripturl, $topic, $modSettings, $board;
global $user_info, $sc, $board_info, $context, $settings;
global $sourcedir, $options, $smcFunc, $language;
loadLanguage('Post');
// You can't reply with a poll... hacker.
if (isset($_REQUEST['poll']) && !empty($topic) && !isset($_REQUEST['msg']))
unset($_REQUEST['poll']);
// Posting an event?
$context['make_event'] = isset($_REQUEST['calendar']);
$context['robot_no_index'] = true;
// You must be posting to *some* board.
if (empty($board) && !$context['make_event'])
fatal_lang_error('no_board', false);
require_once($sourcedir . '/Subs-Post.php');
if (isset($_REQUEST['xml']))
{
$context['sub_template'] = 'post';
// Just in case of an earlier error...
$context['preview_message'] = '';
$context['preview_subject'] = '';
}
// No message is comlete without a topic.
if (empty($topic) && !empty($_REQUEST['msg']))
{
$request = $smcFunc['db_query']('', '
SELECT id_topic
FROM {db_prefix}messages
WHERE id_msg = {int:msg}',
array(
'msg' => (int) $_REQUEST['msg'],
));
if ($smcFunc['db_num_rows']($request) != 1)
unset($_REQUEST['msg'], $_POST['msg'], $_GET['msg']);
else
list($topic) = $smcFunc['db_fetch_row']($request);
$smcFunc['db_free_result']($request);
}
// Check if it's locked. It isn't locked if no topic is specified.
if (!empty($topic))
{
$request = $smcFunc['db_query']('', '
SELECT
t.locked, IFNULL(ln.id_topic, 0) AS notify, t.is_sticky, t.id_poll, t.num_replies, mf.id_member,
t.id_first_msg, mf.subject,
CASE WHEN ml.poster_time > ml.modified_time THEN ml.poster_time ELSE ml.modified_time END AS last_post_time
FROM {db_prefix}topics AS t
LEFT JOIN {db_prefix}log_notify AS ln ON (ln.id_topic = t.id_topic AND ln.id_member = {int:current_member})
LEFT JOIN {db_prefix}messages AS mf ON (mf.id_msg = t.id_first_msg)
LEFT JOIN {db_prefix}messages AS ml ON (ml.id_msg = t.id_last_msg)
WHERE t.id_topic = {int:current_topic}
LIMIT 1',
array(
'current_member' => $user_info['id'],
'current_topic' => $topic,
)
);
list ($locked, $context['notify'], $sticky, $pollID, $context['num_replies'], $ID_MEMBER_POSTER, $id_first_msg, $first_subject, $lastPostTime) = $smcFunc['db_fetch_row']($request);
$smcFunc['db_free_result']($request);
// If this topic already has a poll, they sure can't add another.
if (isset($_REQUEST['poll']) && $pollID > 0)
unset($_REQUEST['poll']);
if (empty($_REQUEST['msg']))
{
if ($user_info['is_guest'] && !allowedTo('post_reply_any') && (!$modSettings['postmod_active'] || !allowedTo('post_unapproved_replies_any')))
is_not_guest();
// By default the reply will be approved...
$context['becomes_approved'] = true;
if ($ID_MEMBER_POSTER != $user_info['id'])
{
if ($modSettings['postmod_active'] && allowedTo('post_unapproved_replies_any') && !allowedTo('post_reply_any'))
$context['becomes_approved'] = false;
else
isAllowedTo('post_reply_any');
}
elseif (!allowedTo('post_reply_any'))
{
if ($modSettings['postmod_active'] && allowedTo('post_unapproved_replies_own') && !allowedTo('post_reply_own'))
$context['becomes_approved'] = false;
else
isAllowedTo('post_reply_own');
}
}
else
$context['becomes_approved'] = true;
$context['can_lock'] = allowedTo('lock_any') || ($user_info['id'] == $ID_MEMBER_POSTER && allowedTo('lock_own'));
$context['can_sticky'] = allowedTo('make_sticky') && !empty($modSettings['enableStickyTopics']);
$context['notify'] = !empty($context['notify']);
$context['sticky'] = isset($_REQUEST['sticky']) ? !empty($_REQUEST['sticky']) : $sticky;
}
else
{
$context['becomes_approved'] = true;
if ((!$context['make_event'] || !empty($board)))
{
if ($modSettings['postmod_active'] && !allowedTo('post_new') && allowedTo('post_unapproved_topics'))
$context['becomes_approved'] = false;
else
isAllowedTo('post_new');
}
$locked = 0;
// !!! These won't work if you're making an event.
$context['can_lock'] = allowedTo(array('lock_any', 'lock_own'));
$context['can_sticky'] = allowedTo('make_sticky') && !empty($modSettings['enableStickyTopics']);
$context['notify'] = !empty($context['notify']);
$context['sticky'] = !empty($_REQUEST['sticky']);
}
// !!! These won't work if you're posting an event!
$context['can_notify'] = allowedTo('mark_any_notify');
$context['can_move'] = allowedTo('move_any');
$context['move'] = !empty($_REQUEST['move']);
$context['announce'] = !empty($_REQUEST['announce']);
// You can only annouce topics that will get approved...
$context['can_announce'] = allowedTo('announce_topic') && $context['becomes_approved'];
$context['locked'] = !empty($locked) || !empty($_REQUEST['lock']);
// Generally don't show the approval box... (Assume we want things approved)
$context['show_approval'] = false;
// An array to hold all the attachments for this topic.
$context['current_attachments'] = array();
// Don't allow a post if it's locked and you aren't all powerful.
if ($locked && !allowedTo('moderate_board'))
fatal_lang_error('topic_locked', false);
// Check the users permissions - is the user allowed to add or post a poll?
if (isset($_REQUEST['poll']) && $modSettings['pollMode'] == '1')
{
// New topic, new poll.
if (empty($topic))
isAllowedTo('poll_post');
// This is an old topic - but it is yours! Can you add to it?
elseif ($user_info['id'] == $ID_MEMBER_POSTER && !allowedTo('poll_add_any'))
isAllowedTo('poll_add_own');
// If you're not the owner, can you add to any poll?
else
isAllowedTo('poll_add_any');
require_once($sourcedir . '/Subs-Members.php');
$allowedVoteGroups = groupsAllowedTo('poll_vote', $board);
// Set up the poll options.
$context['poll_options'] = array(
'max_votes' => empty($_POST['poll_max_votes']) ? '1' : max(1, $_POST['poll_max_votes']),
'hide' => empty($_POST['poll_hide']) ? 0 : $_POST['poll_hide'],
'expire' => !isset($_POST['poll_expire']) ? '' : $_POST['poll_expire'],
'change_vote' => isset($_POST['poll_change_vote']),
'guest_vote' => isset($_POST['poll_guest_vote']),
'guest_vote_enabled' => in_array(-1, $allowedVoteGroups['allowed']),
);
// Make all five poll choices empty.
$context['choices'] = array(
array('id' => 0, 'number' => 1, 'label' => '', 'is_last' => false),
array('id' => 1, 'number' => 2, 'label' => '', 'is_last' => false),
array('id' => 2, 'number' => 3, 'label' => '', 'is_last' => false),
array('id' => 3, 'number' => 4, 'label' => '', 'is_last' => false),
array('id' => 4, 'number' => 5, 'label' => '', 'is_last' => true)
);
}
if ($context['make_event'])
{
// They might want to pick a board.
if (!isset($context['current_board']))
$context['current_board'] = 0;
// Start loading up the event info.
$context['event'] = array();
$context['event']['title'] = isset($_REQUEST['evtitle']) ? htmlspecialchars(stripslashes($_REQUEST['evtitle'])) : '';
$context['event']['id'] = isset($_REQUEST['eventid']) ? (int) $_REQUEST['eventid'] : -1;
$context['event']['new'] = $context['event']['id'] == -1;
// Permissions check!
isAllowedTo('calendar_post');
// Editing an event? (but NOT previewing!?)
if (!$context['event']['new'] && !isset($_REQUEST['subject']))
{
// If the user doesn't have permission to edit the post in this topic, redirect them.
if (($ID_MEMBER_POSTER != $user_info['id'] || !allowedTo('modify_own')) && !allowedTo('modify_any'))
{
require_once($sourcedir . '/Calendar.php');
return CalendarPost();
}
// Get the current event information.
$request = $smcFunc['db_query']('', '
SELECT
id_member, title, MONTH(start_date) AS month, DAYOFMONTH(start_date) AS day,
YEAR(start_date) AS year, (TO_DAYS(end_date) - TO_DAYS(start_date)) AS span
FROM {db_prefix}calendar
WHERE id_event = {int:id_event}
LIMIT 1',
array(
'id_event' => $context['event']['id'],
)
);
$row = $smcFunc['db_fetch_assoc']($request);
$smcFunc['db_free_result']($request);
// Make sure the user is allowed to edit this event.
if ($row['id_member'] != $user_info['id'])
isAllowedTo('calendar_edit_any');
elseif (!allowedTo('calendar_edit_any'))
isAllowedTo('calendar_edit_own');
$context['event']['month'] = $row['month'];
$context['event']['day'] = $row['day'];
$context['event']['year'] = $row['year'];
$context['event']['title'] = $row['title'];
$context['event']['span'] = $row['span'] + 1;
}
else
{
$today = getdate();
// You must have a month and year specified!
if (!isset($_REQUEST['month']))
$_REQUEST['month'] = $today['mon'];
if (!isset($_REQUEST['year']))
$_REQUEST['year'] = $today['year'];
$context['event']['month'] = (int) $_REQUEST['month'];
$context['event']['year'] = (int) $_REQUEST['year'];
$context['event']['day'] = isset($_REQUEST['day']) ? $_REQUEST['day'] : ($_REQUEST['month'] == $today['mon'] ? $today['mday'] : 0);
$context['event']['span'] = isset($_REQUEST['span']) ? $_REQUEST['span'] : 1;
// Make sure the year and month are in the valid range.
if ($context['event']['month'] < 1 || $context['event']['month'] > 12)
fatal_lang_error('invalid_month', false);
if ($context['event']['year'] < $modSettings['cal_minyear'] || $context['event']['year'] > $modSettings['cal_maxyear'])
fatal_lang_error('invalid_year', false);
// Get a list of boards they can post in.
$boards = boardsAllowedTo('post_new');
if (empty($boards))
fatal_lang_error('cannot_post_new', 'user');
// Load a list of boards for this event in the context.
require_once($sourcedir . '/Subs-MessageIndex.php');
$boardListOptions = array(
'included_boards' => in_array(0, $boards) ? null : $boards,
'not_redirection' => true,
'use_permissions' => true,
'selected_board' => empty($context['current_board']) ? $modSettings['cal_defaultboard'] : $context['current_board'],
);
$context['event']['categories'] = getBoardList($boardListOptions);
}
// Find the last day of the month.
$context['event']['last_day'] = (int) strftime('%d', mktime(0, 0, 0, $context['event']['month'] == 12 ? 1 : $context['event']['month'] + 1, 0, $context['event']['month'] == 12 ? $context['event']['year'] + 1 : $context['event']['year']));
$context['event']['board'] = !empty($board) ? $board : $modSettings['cal_defaultboard'];
}
if (empty($context['post_errors']))
$context['post_errors'] = array();
// See if any new replies have come along.
if (empty($_REQUEST['msg']) && !empty($topic))
{
if (empty($options['no_new_reply_warning']) && isset($_REQUEST['num_replies']))
{
$newReplies = $context['num_replies'] > $_REQUEST['num_replies'] ? $context['num_replies'] - $_REQUEST['num_replies'] : 0;
if (!empty($newReplies))
{
if ($newReplies == 1)
$txt['error_new_reply'] = isset($_GET['num_replies']) ? $txt['error_new_reply_reading'] : $txt['error_new_reply'];
else
$txt['error_new_replies'] = sprintf(isset($_GET['num_replies']) ? $txt['error_new_replies_reading'] : $txt['error_new_replies'], $newReplies);
// If they've come from the display page then we treat the error differently....
if (isset($_GET['num_replies']))
$newRepliesError = $newReplies;
else
$context['post_error'][$newReplies == 1 ? 'new_reply' : 'new_replies'] = true;
$modSettings['topicSummaryPosts'] = $newReplies > $modSettings['topicSummaryPosts'] ? max($modSettings['topicSummaryPosts'], 5) : $modSettings['topicSummaryPosts'];
}
}
// Check whether this is a really old post being bumped...
if (!empty($modSettings['oldTopicDays']) && $lastPostTime + $modSettings['oldTopicDays'] * 86400 < time() && empty($sticky) && !isset($_REQUEST['subject']))
$oldTopicError = true;
}
// Get a response prefix (like 'Re:') in the default forum language.
if (!isset($context['response_prefix']) && !($context['response_prefix'] = cache_get_data('response_prefix')))
{
if ($language === $user_info['language'])
$context['response_prefix'] = $txt['response_prefix'];
else
{
loadLanguage('index', $language, false);
$context['response_prefix'] = $txt['response_prefix'];
loadLanguage('index');
}
cache_put_data('response_prefix', $context['response_prefix'], 600);
}
// Previewing, modifying, or posting?
if (isset($_REQUEST['message']) || !empty($context['post_error']))
{
// Validate inputs.
if (empty($context['post_error']))
{
if (htmltrim__recursive(htmlspecialchars__recursive($_REQUEST['subject'])) == '')
$context['post_error']['no_subject'] = true;
if (htmltrim__recursive(htmlspecialchars__recursive($_REQUEST['message'])) == '')
$context['post_error']['no_message'] = true;
if (!empty($modSettings['max_messageLength']) && strlen($_REQUEST['message']) > $modSettings['max_messageLength'])
$context['post_error']['long_message'] = true;
// Are you... a guest?
if ($user_info['is_guest'])
{
$_REQUEST['guestname'] = !isset($_REQUEST['guestname']) ? '' : trim($_REQUEST['guestname']);
$_REQUEST['email'] = !isset($_REQUEST['email']) ? '' : trim($_REQUEST['email']);
// Validate the name and email.
if (!isset($_REQUEST['guestname']) || trim(strtr($_REQUEST['guestname'], '_', ' ')) == '')
$context['post_error']['no_name'] = true;
elseif ($smcFunc['strlen']($_REQUEST['guestname']) > 25)
$context['post_error']['long_name'] = true;
else
{
require_once($sourcedir . '/Subs-Members.php');
if (isReservedName(htmlspecialchars($_REQUEST['guestname']), 0, true, false))
$context['post_error']['bad_name'] = true;
}
if (empty($modSettings['guest_post_no_email']))
{
if (!isset($_REQUEST['email']) || $_REQUEST['email'] == '')
$context['post_error']['no_email'] = true;
elseif (preg_match('~^[0-9A-Za-z=_+\-/][0-9A-Za-z=_\'+\-/\.]*@[\w\-]+(\.[\w\-]+)*(\.[\w]{2,6})$~', $_REQUEST['email']) == 0)
$context['post_error']['bad_email'] = true;
}
}
// This is self explanatory - got any questions?
if (isset($_REQUEST['question']) && trim($_REQUEST['question']) == '')
$context['post_error']['no_question'] = true;
// This means they didn't click Post and get an error.
$really_previewing = true;
}
else
{
if (!isset($_REQUEST['subject']))
$_REQUEST['subject'] = '';
if (!isset($_REQUEST['message']))
$_REQUEST['message'] = '';
if (!isset($_REQUEST['icon']))
$_REQUEST['icon'] = 'xx';
// They are previewing if they asked to preview (i.e. came from quick reply).
$really_previewing = !empty($_POST['preview']);
}
// In order to keep the approval status flowing through, we have to pass it through the form...
$context['becomes_approved'] = empty($_REQUEST['not_approved']);
$context['show_approval'] = isset($_REQUEST['approve']) ? ($_REQUEST['approve'] ? 2 : 1) : 0;
$context['can_announce'] &= $context['becomes_approved'];
// Set up the inputs for the form.
$form_subject = strtr($smcFunc['htmlspecialchars']($_REQUEST['subject']), array("\r" => '', "\n" => '', "\t" => ''));
$form_message = $smcFunc['htmlspecialchars']($_REQUEST['message'], ENT_QUOTES);
// Make sure the subject isn't too long - taking into account special characters.
if ($smcFunc['strlen']($form_subject) > 100)
$form_subject = $smcFunc['substr']($form_subject, 0, 100);
// Have we inadvertently trimmed off the subject of useful information?
if ($smcFunc['htmltrim']($form_subject) === '')
$context['post_error']['no_subject'] = true;
// Any errors occurred?
if (!empty($context['post_error']))
{
loadLanguage('Errors');
$context['error_type'] = 'minor';
$context['post_error']['messages'] = array();
foreach ($context['post_error'] as $post_error => $dummy)
{
if ($post_error == 'messages')
continue;
if ($post_error == 'long_message')
$txt['error_' . $post_error] = sprintf($txt['error_' . $post_error], $modSettings['max_messageLength']);
$context['post_error']['messages'][] = $txt['error_' . $post_error];
// If it's not a minor error flag it as such.
if (!in_array($post_error, array('new_reply', 'not_approved', 'new_replies', 'old_topic', 'need_qr_verification')))
$context['error_type'] = 'serious';
}
}
if (isset($_REQUEST['poll']))
{
$context['question'] = isset($_REQUEST['question']) ? $smcFunc['htmlspecialchars'](trim($_REQUEST['question'])) : '';
$context['choices'] = array();
$choice_id = 0;
$_POST['options'] = empty($_POST['options']) ? array() : htmlspecialchars__recursive($_POST['options']);
foreach ($_POST['options'] as $option)
{
if (trim($option) == '')
continue;
$context['choices'][] = array(
'id' => $choice_id++,
'number' => $choice_id,
'label' => $option,
'is_last' => false
);
}
if (count($context['choices']) < 2)
{
$context['choices'][] = array(
'id' => $choice_id++,
'number' => $choice_id,
'label' => '',
'is_last' => false
);
$context['choices'][] = array(
'id' => $choice_id++,
'number' => $choice_id,
'label' => '',
'is_last' => false
);
}
$context['choices'][count($context['choices']) - 1]['is_last'] = true;
}
// Are you... a guest?
if ($user_info['is_guest'])
{
$_REQUEST['guestname'] = !isset($_REQUEST['guestname']) ? '' : trim($_REQUEST['guestname']);
$_REQUEST['email'] = !isset($_REQUEST['email']) ? '' : trim($_REQUEST['email']);
$_REQUEST['guestname'] = htmlspecialchars($_REQUEST['guestname']);
$context['name'] = $_REQUEST['guestname'];
$_REQUEST['email'] = htmlspecialchars($_REQUEST['email']);
$context['email'] = $_REQUEST['email'];
$user_info['name'] = $_REQUEST['guestname'];
}
// Only show the preview stuff if they hit Preview.
if ($really_previewing == true || isset($_REQUEST['xml']))
{
// Set up the preview message and subject and censor them...
$context['preview_message'] = $form_message;
preparsecode($form_message, true);
preparsecode($context['preview_message']);
// Do all bulletin board code tags, with or without smileys.
$context['preview_message'] = parse_bbc($context['preview_message'], isset($_REQUEST['ns']) ? 0 : 1);
if ($form_subject != '')
{
$context['preview_subject'] = $form_subject;
censorText($context['preview_subject']);
censorText($context['preview_message']);
}
else
$context['preview_subject'] = '' . $txt['no_subject'] . '';
// Protect any CDATA blocks.
if (isset($_REQUEST['xml']))
$context['preview_message'] = strtr($context['preview_message'], array(']]>' => ']]]]><![CDATA[>'));
}
// Set up the checkboxes.
$context['notify'] = !empty($_REQUEST['notify']);
$context['use_smileys'] = !isset($_REQUEST['ns']);
$context['icon'] = isset($_REQUEST['icon']) ? preg_replace('~[\./\\\\*\':"<>]~', '', $_REQUEST['icon']) : 'xx';
// Set the destination action for submission.
$context['destination'] = 'post2;start=' . $_REQUEST['start'] . (isset($_REQUEST['msg']) ? ';msg=' . $_REQUEST['msg'] . ';' . $context['session_var'] . '=' . $context['session_id'] : '') . (isset($_REQUEST['poll']) ? ';poll' : '');
$context['submit_label'] = isset($_REQUEST['msg']) ? $txt['save'] : $txt['post'];
// Previewing an edit?
if (isset($_REQUEST['msg']) && !empty($topic))
{
// Get the existing message.
$request = $smcFunc['db_query']('', '
SELECT
m.id_member, m.modified_time, m.smileys_enabled, m.body,
m.poster_name, m.poster_email, m.subject, m.icon, m.approved,
IFNULL(a.size, -1) AS filesize, a.filename, a.id_attach,
a.approved AS attachment_approved, t.id_member_started AS id_member_poster,
m.poster_time
FROM {db_prefix}messages AS m
INNER JOIN {db_prefix}topics AS t ON (t.id_topic = {int:current_topic})
LEFT JOIN {db_prefix}attachments AS a ON (a.id_msg = m.id_msg AND a.attachment_type = {int:attachment_type})
WHERE m.id_msg = {int:id_msg}
AND m.id_topic = {int:current_topic}',
array(
'current_topic' => $topic,
'attachment_type' => 0,
'id_msg' => $_REQUEST['msg'],
)
);
// The message they were trying to edit was most likely deleted.
// !!! Change this error message?
if ($smcFunc['db_num_rows']($request) == 0)
fatal_lang_error('no_board', false);
$row = $smcFunc['db_fetch_assoc']($request);
$attachment_stuff = array($row);
while ($row2 = $smcFunc['db_fetch_assoc']($request))
$attachment_stuff[] = $row2;
$smcFunc['db_free_result']($request);
if ($row['id_member'] == $user_info['id'] && !allowedTo('modify_any'))
{
// Give an extra five minutes over the disable time threshold, so they can type - assuming the post is public.
if ($row['approved'] && !empty($modSettings['edit_disable_time']) && $row['poster_time'] + ($modSettings['edit_disable_time'] + 5) * 60 < time())
fatal_lang_error('modify_post_time_passed', false);
elseif ($row['id_member_poster'] == $user_info['id'] && !allowedTo('modify_own'))
isAllowedTo('modify_replies');
else
isAllowedTo('modify_own');
}
elseif ($row['id_member_poster'] == $user_info['id'] && !allowedTo('modify_any'))
isAllowedTo('modify_replies');
else
isAllowedTo('modify_any');
if (!empty($modSettings['attachmentEnable']))
{
$request = $smcFunc['db_query']('', '
SELECT IFNULL(size, -1) AS filesize, filename, id_attach, approved
FROM {db_prefix}attachments
WHERE id_msg = {int:id_msg}
AND attachment_type = {int:attachment_type}',
array(
'id_msg' => (int) $_REQUEST['msg'],
'attachment_type' => 0,
)
);
while ($row = $smcFunc['db_fetch_assoc']($request))
{
if ($row['filesize'] <= 0)
continue;
$context['current_attachments'][] = array(
'name' => $row['filename'],
'id' => $row['id_attach'],
'approved' => $row['approved'],
);
}
$smcFunc['db_free_result']($request);
}
// Allow moderators to change names....
if (allowedTo('moderate_forum') && !empty($topic))
{
$request = $smcFunc['db_query']('', '
SELECT id_member, poster_name, poster_email
FROM {db_prefix}messages
WHERE id_msg = {int:id_msg}
AND id_topic = {int:current_topic}
LIMIT 1',
array(
'current_topic' => $topic,
'id_msg' => (int) $_REQUEST['msg'],
)
);
$row = $smcFunc['db_fetch_assoc']($request);
$smcFunc['db_free_result']($request);
if (empty($row['id_member']))
{
$context['name'] = htmlspecialchars($row['poster_name']);
$context['email'] = htmlspecialchars($row['poster_email']);
}
}
}
// No check is needed, since nothing is really posted.
checkSubmitOnce('free');
}
// Editing a message...
elseif (isset($_REQUEST['msg']) && !empty($topic))
{
checkSession('get');
$_REQUEST['msg'] = (int) $_REQUEST['msg'];
// Get the existing message.
$request = $smcFunc['db_query']('', '
SELECT
m.id_member, m.modified_time, m.smileys_enabled, m.body,
m.poster_name, m.poster_email, m.subject, m.icon, m.approved,
IFNULL(a.size, -1) AS filesize, a.filename, a.id_attach,
a.approved AS attachment_approved, t.id_member_started AS id_member_poster,
m.poster_time
FROM {db_prefix}messages AS m
INNER JOIN {db_prefix}topics AS t ON (t.id_topic = {int:current_topic})
LEFT JOIN {db_prefix}attachments AS a ON (a.id_msg = m.id_msg AND a.attachment_type = {int:attachment_type})
WHERE m.id_msg = {int:id_msg}
AND m.id_topic = {int:current_topic}',
array(
'current_topic' => $topic,
'attachment_type' => 0,
'id_msg' => $_REQUEST['msg'],
)
);
// The message they were trying to edit was most likely deleted.
// !!! Change this error message?
if ($smcFunc['db_num_rows']($request) == 0)
fatal_lang_error('no_board', false);
$row = $smcFunc['db_fetch_assoc']($request);
$attachment_stuff = array($row);
while ($row2 = $smcFunc['db_fetch_assoc']($request))
$attachment_stuff[] = $row2;
$smcFunc['db_free_result']($request);
if ($row['id_member'] == $user_info['id'] && !allowedTo('modify_any'))
{
// Give an extra five minutes over the disable time threshold, so they can type - assuming the post is public.
if ($row['approved'] && !empty($modSettings['edit_disable_time']) && $row['poster_time'] + ($modSettings['edit_disable_time'] + 5) * 60 < time())
fatal_lang_error('modify_post_time_passed', false);
elseif ($row['id_member_poster'] == $user_info['id'] && !allowedTo('modify_own'))
isAllowedTo('modify_replies');
else
isAllowedTo('modify_own');
}
elseif ($row['id_member_poster'] == $user_info['id'] && !allowedTo('modify_any'))
isAllowedTo('modify_replies');
else
isAllowedTo('modify_any');
// When was it last modified?
if (!empty($row['modified_time']))
$context['last_modified'] = timeformat($row['modified_time']);
// Get the stuff ready for the form.
$form_subject = $row['subject'];
$form_message = un_preparsecode($row['body']);
censorText($form_message);
censorText($form_subject);
// Check the boxes that should be checked.
$context['use_smileys'] = !empty($row['smileys_enabled']);
$context['icon'] = $row['icon'];
// Show an "approve" box if the user can approve it, and the message isn't approved.
if (!$row['approved'] && !$context['show_approval'])
$context['show_approval'] = allowedTo('approve_posts');
// Load up 'em attachments!
foreach ($attachment_stuff as $attachment)
{
if ($attachment['filesize'] >= 0 && !empty($modSettings['attachmentEnable']))
$context['current_attachments'][] = array(
'name' => $attachment['filename'],
'id' => $attachment['id_attach'],
'approved' => $attachment['attachment_approved'],
);
}
// Allow moderators to change names....
if (allowedTo('moderate_forum') && empty($row['id_member']))
{
$context['name'] = htmlspecialchars($row['poster_name']);
$context['email'] = htmlspecialchars($row['poster_email']);
}
// Set the destinaton.
$context['destination'] = 'post2;start=' . $_REQUEST['start'] . ';msg=' . $_REQUEST['msg'] . ';' . $context['session_var'] . '=' . $context['session_id'] . (isset($_REQUEST['poll']) ? ';poll' : '');
$context['submit_label'] = $txt['save'];
}
// Posting...
else
{
// By default....
$context['use_smileys'] = true;
$context['icon'] = 'xx';
if ($user_info['is_guest'])
{
$context['name'] = isset($_SESSION['guest_name']) ? $_SESSION['guest_name'] : '';
$context['email'] =isset($_SESSION['guest_email']) ? $_SESSION['guest_email'] : '';
}
$context['destination'] = 'post2;start=' . $_REQUEST['start'] . (isset($_REQUEST['poll']) ? ';poll' : '');
$context['submit_label'] = $txt['post'];
// Posting a quoted reply?
if (!empty($topic) && !empty($_REQUEST['quote']))
{
checkSession('get');
// Make sure they _can_ quote this post, and if so get it.
$request = $smcFunc['db_query']('', '
SELECT m.subject, IFNULL(mem.real_name, m.poster_name) AS poster_name, m.poster_time, m.body
FROM {db_prefix}messages AS m
INNER JOIN {db_prefix}boards AS b ON (b.id_board = m.id_board AND {query_see_board})
LEFT JOIN {db_prefix}members AS mem ON (mem.id_member = m.id_member)
WHERE m.id_msg = {int:id_msg}' . (!$modSettings['postmod_active'] || allowedTo('approve_posts') ? '' : '
AND m.approved = {int:is_approved}') . '
LIMIT 1',
array(
'id_msg' => (int) $_REQUEST['quote'],
'is_approved' => 1,
)
);
if ($smcFunc['db_num_rows']($request) == 0)
fatal_lang_error('quoted_post_deleted', false);
list ($form_subject, $mname, $mdate, $form_message) = $smcFunc['db_fetch_row']($request);
$smcFunc['db_free_result']($request);
// Add 'Re: ' to the front of the quoted subject.
if (trim($context['response_prefix']) != '' && $smcFunc['strpos']($form_subject, trim($context['response_prefix'])) !== 0)
$form_subject = $context['response_prefix'] . $form_subject;
// Censor the message and subject.
censorText($form_message);
censorText($form_subject);
// But if it's in HTML world, turn them into htmlspecialchar's so they can be edited!
if (strpos($form_message, '
}
$form_message = implode('', $parts);
}
$form_message = preg_replace('~<br ?/?' . '>~i', "\n", $form_message);
// Remove any nested quotes, if necessary.
if (!empty($modSettings['removeNestedQuotes']))
$form_message = preg_replace(array('~\n?\[quote.*?\].+?\[/quote\]\n?~is', '~^\n~', '~\[/quote\]~'), '', $form_message);
// Add a quote string on the front and end.
$form_message = '
}
// Posting a reply without a quote?
elseif (!empty($topic) && empty($_REQUEST['quote']))
{
// Get the first message's subject.
$form_subject = $first_subject;
// Add 'Re: ' to the front of the subject.
if (trim($context['response_prefix']) != '' && $form_subject != '' && $smcFunc['strpos']($form_subject, trim($context['response_prefix'])) !== 0)
$form_subject = $context['response_prefix'] . $form_subject;
// Censor the subject.
censorText($form_subject);
$form_message = '';
}
else
{
$form_subject = isset($_GET['subject']) ? $_GET['subject'] : '';
$form_message = '';
}
}
// !!! This won't work if you're posting an event.
if (allowedTo('post_attachment') || allowedTo('post_unapproved_attachments'))
{
if (empty($_SESSION['temp_attachments']))
$_SESSION['temp_attachments'] = array();
if (!empty($modSettings['currentAttachmentUploadDir']))
{
if (!is_array($modSettings['attachmentUploadDir']))
$modSettings['attachmentUploadDir'] = unserialize($modSettings['attachmentUploadDir']);
// Just use the current path for temp files.
$current_attach_dir = $modSettings['attachmentUploadDir'][$modSettings['currentAttachmentUploadDir']];
}
else
$current_attach_dir = $modSettings['attachmentUploadDir'];
// If this isn't a new post, check the current attachments.
if (isset($_REQUEST['msg']))
{
$request = $smcFunc['db_query']('', '
SELECT COUNT(*), SUM(size)
FROM {db_prefix}attachments
WHERE id_msg = {int:id_msg}
AND attachment_type = {int:attachment_type}',
array(
'id_msg' => (int) $_REQUEST['msg'],
'attachment_type' => 0,
)
);
list ($quantity, $total_size) = $smcFunc['db_fetch_row']($request);
$smcFunc['db_free_result']($request);
}
else
{
$quantity = 0;
$total_size = 0;
}
$temp_start = 0;
if (!empty($_SESSION['temp_attachments']))
foreach ($_SESSION['temp_attachments'] as $attachID => $name)
{
$temp_start++;
if (preg_match('~^post_tmp_' . $user_info['id'] . '_\d+$~', $attachID) == 0)
{
unset($_SESSION['temp_attachments'][$attachID]);
continue;
}
if (!empty($_POST['attach_del']) && !in_array($attachID, $_POST['attach_del']))
{
$deleted_attachments = true;
unset($_SESSION['temp_attachments'][$attachID]);
@unlink($current_attach_dir . '/' . $attachID);
continue;
}
$quantity++;
$total_size += filesize($current_attach_dir . '/' . $attachID);
$context['current_attachments'][] = array(
'name' => $name,
'id' => $attachID,
'approved' => 1,
);
}
if (!empty($_POST['attach_del']))
{
$del_temp = array();
foreach ($_POST['attach_del'] as $i => $dummy)
$del_temp[$i] = (int) $dummy;
foreach ($context['current_attachments'] as $k => $dummy)
if (!in_array($dummy['id'], $del_temp))
{
$context['current_attachments'][$k]['unchecked'] = true;
$deleted_attachments = !isset($deleted_attachments) || is_bool($deleted_attachments) ? 1 : $deleted_attachments + 1;
$quantity--;
}
}
if (!empty($_FILES['attachment']))
foreach ($_FILES['attachment']['tmp_name'] as $n => $dummy)
{
if ($_FILES['attachment']['name'][$n] == '')
continue;
if (!is_uploaded_file($_FILES['attachment']['tmp_name'][$n]) || (@ini_get('open_basedir') == '' && !file_exists($_FILES['attachment']['tmp_name'][$n])))
fatal_lang_error('attach_timeout', 'critical');
if (!empty($modSettings['attachmentSizeLimit']) && $_FILES['attachment']['size'][$n] > $modSettings['attachmentSizeLimit'] * 1024)
fatal_lang_error('file_too_big', false, array($modSettings['attachmentSizeLimit']));
$quantity++;
if (!empty($modSettings['attachmentNumPerPostLimit']) && $quantity > $modSettings['attachmentNumPerPostLimit'])
fatal_lang_error('attachments_limit_per_post', false, array($modSettings['attachmentNumPerPostLimit']));
$total_size += $_FILES['attachment']['size'][$n];
if (!empty($modSettings['attachmentPostLimit']) && $total_size > $modSettings['attachmentPostLimit'] * 1024)
fatal_lang_error('file_too_big', false, array($modSettings['attachmentPostLimit']));
if (!empty($modSettings['attachmentCheckExtensions']))
{
if (!in_array(strtolower(substr(strrchr($_FILES['attachment']['name'][$n], '.'), 1)), explode(',', strtolower($modSettings['attachmentExtensions']))))
fatal_error($_FILES['attachment']['name'][$n] . '.
' . $txt['cant_upload_type'] . ' ' . $modSettings['attachmentExtensions'] . '.', false);
}
if (!empty($modSettings['attachmentDirSizeLimit']))
{
// Make sure the directory isn't full.
$dirSize = 0;
$dir = @opendir($current_attach_dir) or fatal_lang_error('cant_access_upload_path', 'critical');
while ($file = readdir($dir))
{
if ($file == '.' || $file == '..')
continue;
if (preg_match('~^post_tmp_\d+_\d+$~', $file) != 0)
{
// Temp file is more than 5 hours old!
if (filemtime($current_attach_dir . '/' . $file) < time() - 18000)
@unlink($current_attach_dir . '/' . $file);
continue;
}
$dirSize += filesize($current_attach_dir . '/' . $file);
}
closedir($dir);
// Too big! Maybe you could zip it or something...
if ($_FILES['attachment']['size'][$n] + $dirSize > $modSettings['attachmentDirSizeLimit'] * 1024)
fatal_lang_error('ran_out_of_space');
}
if (!is_writable($current_attach_dir))
fatal_lang_error('attachments_no_write', 'critical');
$attachID = 'post_tmp_' . $user_info['id'] . '_' . $temp_start++;
$_SESSION['temp_attachments'][$attachID] = basename($_FILES['attachment']['name'][$n]);
$context['current_attachments'][] = array(
'name' => basename($_FILES['attachment']['name'][$n]),
'id' => $attachID,
'approved' => 1,
);
$destName = $current_attach_dir . '/' . $attachID;
if (!move_uploaded_file($_FILES['attachment']['tmp_name'][$n], $destName))
fatal_lang_error('attach_timeout', 'critical');
@chmod($destName, 0644);
}
}
// If we are coming here to make a reply, and someone has already replied... make a special warning message.
if (isset($newRepliesError))
{
$context['post_error']['messages'][] = $newRepliesError == 1 ? $txt['error_new_reply'] : $txt['error_new_replies'];
$context['error_type'] = 'minor';
}
if (isset($oldTopicError))
{
$context['post_error']['messages'][] = sprintf($txt['error_old_topic'], $modSettings['oldTopicDays']);
$context['error_type'] = 'minor';
}
// What are you doing? Posting a poll, modifying, previewing, new post, or reply...
if (isset($_REQUEST['poll']))
$context['page_title'] = $txt['new_poll'];
elseif ($context['make_event'])
$context['page_title'] = $context['event']['id'] == -1 ? $txt['calendar_post_event'] : $txt['calendar_edit'];
elseif (isset($_REQUEST['msg']))
$context['page_title'] = $txt['modify_msg'];
elseif (isset($_REQUEST['subject'], $context['preview_subject']))
$context['page_title'] = $txt['preview'] . ' - ' . strip_tags($context['preview_subject']);
elseif (empty($topic))
$context['page_title'] = $txt['start_new_topic'];
else
$context['page_title'] = $txt['post_reply'];
// Build the link tree.
if (empty($topic))
$context['linktree'][] = array(
'name' => '' . $txt['start_new_topic'] . ''
);
else
$context['linktree'][] = array(
'url' => $scripturl . '?topic=' . $topic . '.' . $_REQUEST['start'],
'name' => $form_subject,
'extra_before' => '<span' . ($settings['linktree_inline'] ? ' class="smalltext"' : '') . '><strong class="nav">' . $context['page_title'] . ' ( </span>',
'extra_after' => '<span' . ($settings['linktree_inline'] ? ' class="smalltext"' : '') . '><strong class="nav"> )</span>'
);
// Give wireless a linktree url to the post screen, so that they can switch to full version.
if (WIRELESS)
$context['linktree'][count($context['linktree']) - 1]['url'] = $scripturl . '?action=post;' . (!empty($topic) ? 'topic=' . $topic : 'board=' . $board) . '.' . $_REQUEST['start'] . (isset($_REQUEST['msg']) ? ';msg=' . (int) $_REQUEST['msg'] . ';' . $context['session_var'] . '=' . $context['session_id'] : '') ;
// If they've unchecked an attachment, they may still want to attach that many more files, but don't allow more than num_allowed_attachments.
// !!! This won't work if you're posting an event.
$context['num_allowed_attachments'] = empty($modSettings['attachmentNumPerPostLimit']) ? 50 : min($modSettings['attachmentNumPerPostLimit'] - count($context['current_attachments']) + (isset($deleted_attachments) ? $deleted_attachments : 0), $modSettings['attachmentNumPerPostLimit']);
$context['can_post_attachment'] = !empty($modSettings['attachmentEnable']) && $modSettings['attachmentEnable'] == 1 && (allowedTo('post_attachment') || ($modSettings['postmod_active'] && allowedTo('post_unapproved_attachments'))) && $context['num_allowed_attachments'] > 0;
$context['can_post_attachment_unapproved'] = allowedTo('post_attachment');
$context['subject'] = addcslashes($form_subject, '"');
$context['message'] = str_replace(array('"', '<', '>', ' '), array('"', '<', '>', ' '), $form_message);
// Needed for the editor and message icons.
require_once($sourcedir . '/Subs-Editor.php');
// Now create the editor.
$editorOptions = array(
'id' => 'message',
'value' => $context['message'],
'labels' => array(
'post_button' => $context['submit_label'],
),
// We do XML preview here.
'preview_type' => 2,
);
create_control_richedit($editorOptions);
// Store the ID.
$context['post_box_name'] = $editorOptions['id'];
$context['attached'] = '';
$context['make_poll'] = isset($_REQUEST['poll']);
// Message icons - customized icons are off?
$context['icons'] = getMessageIcons($board);
if (!empty($context['icons']))
$context['icons'][count($context['icons']) - 1]['is_last'] = true;
$context['icon_url'] = '';
for ($i = 0, $n = count($context['icons']); $i < $n; $i++)
{
$context['icons'][$i]['selected'] = $context['icon'] == $context['icons'][$i]['value'];
if ($context['icons'][$i]['selected'])
$context['icon_url'] = $context['icons'][$i]['url'];
}
if (empty($context['icon_url']))
{
$context['icon_url'] = $settings[file_exists($settings['theme_dir'] . '/images/post/' . $context['icon'] . '.gif') ? 'images_url' : 'default_images_url'] . '/post/' . $context['icon'] . '.gif';
array_unshift($context['icons'], array(
'value' => $context['icon'],
'name' => $txt['current_icon'],
'url' => $context['icon_url'],
'is_last' => empty($context['icons']),
'selected' => true,
));
}
if (!empty($topic) && !empty($modSettings['topicSummaryPosts']))
getTopic();
// If the user can post attachments prepare the warning labels.
if ($context['can_post_attachment'])
{
$context['allowed_extensions'] = strtr($modSettings['attachmentExtensions'], array(',' => ', '));
$context['attachment_restrictions'] = array();
$attachmentRestrictionTypes = array('attachmentNumPerPostLimit', 'attachmentPostLimit', 'attachmentSizeLimit');
foreach ($attachmentRestrictionTypes as $type)
if (!empty($modSettings[$type]))
$context['attachment_restrictions'][] = sprintf($txt['attach_restrict_' . $type], $modSettings[$type]);
}
$context['back_to_topic'] = isset($_REQUEST['goback']) || (isset($_REQUEST['msg']) && !isset($_REQUEST['subject']));
$context['show_additional_options'] = !empty($_POST['additional_options']) || !empty($_SESSION['temp_attachments']) || !empty($deleted_attachments);
$context['is_new_topic'] = empty($topic);
$context['is_new_post'] = !isset($_REQUEST['msg']);
$context['is_first_post'] = $context['is_new_topic'] || (isset($_REQUEST['msg']) && $_REQUEST['msg'] == $id_first_msg);
// Do we need to show the visual verification image?
$context['require_verification'] = !$user_info['is_mod'] && !$user_info['is_admin'] && !empty($modSettings['posts_require_captcha']) && ($user_info['posts'] < $modSettings['posts_require_captcha'] || ($user_info['is_guest'] && $modSettings['posts_require_captcha'] == -1));
if ($context['require_verification'])
{
require_once($sourcedir . '/Subs-Editor.php');
$verificationOptions = array(
'id' => 'post',
);
$context['require_verification'] = create_control_verification($verificationOptions);
$context['visual_verification_id'] = $verificationOptions['id'];
}
// If they came from quick reply, and have to enter verification details, give them some notice.
if (!empty($_REQUEST['from_qr']) && !empty($context['require_verification']))
{
$context['post_error']['messages'][] = $txt['enter_verification_details'];
$context['error_type'] = 'minor';
}
// WYSIWYG only works if BBC is enabled
$modSettings['disable_wysiwyg'] = !empty($modSettings['disable_wysiwyg']) || empty($modSettings['enableBBC']);
// Register this form in the session variables.
checkSubmitOnce('register');
// Finally, load the template.
if (WIRELESS)
$context['sub_template'] = WIRELESS_PROTOCOL . '_post';
elseif (!isset($_REQUEST['xml']))
loadTemplate('Post');
}
function Post2()
{
global $board, $topic, $txt, $modSettings, $sourcedir, $context;
global $user_info, $board_info, $options, $smcFunc;
// No need!
$context['robot_no_index'] = true;
// If we came from WYSIWYG then turn it back into BBC regardless.
if (!empty($_REQUEST['message_mode']) && isset($_REQUEST['message']))
{
require_once($sourcedir . '/Subs-Editor.php');
$_REQUEST['message'] = html_to_bbc($_REQUEST['message']);
// We need to unhtml it now as it gets done shortly.
$_REQUEST['message'] = un_htmlspecialchars($_REQUEST['message']);
// We need this for everything else.
$_POST['message'] = $_REQUEST['message'];
}
// Previewing? Go back to start.
if (isset($_REQUEST['preview']))
return Post();
// Prevent double submission of this form.
checkSubmitOnce('check');
// No errors as yet.
$post_errors = array();
// If the session has timed out, let the user re-submit their form.
if (checkSession('post', '', false) != '')
$post_errors[] = 'session_timeout';
// Wrong verification code?
if (!$user_info['is_admin'] && !$user_info['is_mod'] && !empty($modSettings['posts_require_captcha']) && ($user_info['posts'] < $modSettings['posts_require_captcha'] || ($user_info['is_guest'] && $modSettings['posts_require_captcha'] == -1)))
{
require_once($sourcedir . '/Subs-Editor.php');
$verificationOptions = array(
'id' => 'post',
);
$context['require_verification'] = create_control_verification($verificationOptions, empty($_REQUEST['from_qr']));
// If it's someone from quick reply, don't show them errors.
if (!empty($_REQUEST['from_qr']))
{
$context['post_error']['need_qr_verification'] = true;
return Post();
}
elseif (is_array($context['require_verification']))
$post_errors = array_merge($post_errors, $context['require_verification']);
}
require_once($sourcedir . '/Subs-Post.php');
loadLanguage('Post');
// If this isn't a new topic load the topic info that we need.
if (!empty($topic))
{
$request = $smcFunc['db_query']('', '
SELECT locked, is_sticky, id_poll, approved, num_replies, id_first_msg, id_member_started, id_board
FROM {db_prefix}topics
WHERE id_topic = {int:current_topic}
LIMIT 1',
array(
'current_topic' => $topic,
)
);
$topic_info = $smcFunc['db_fetch_assoc']($request);
$smcFunc['db_free_result']($request);
// Though the topic should be there, it might have vanished.
if (!is_array($topic_info))
fatal_lang_error('topic_doesnt_exist');
// Did this topic suddenly move? Just checking...
if ($topic_info['id_board'] != $board)
fatal_lang_error('not_a_topic');
}
// Replying to a topic?
if (!empty($topic) && !isset($_REQUEST['msg']))
{
// Don't allow a post if it's locked.
if ($topic_info['locked'] != 0 && !allowedTo('moderate_board'))
fatal_lang_error('topic_locked', false);
// Sorry, multiple polls aren't allowed... yet. You should stop giving me ideas :P.
if (isset($_REQUEST['poll']) && $topic_info['id_poll'] > 0)
unset($_REQUEST['poll']);
// Do the permissions and approval stuff...
$becomesApproved = true;
if ($topic_info['id_member_started'] != $user_info['id'])
{
if ($modSettings['postmod_active'] && allowedTo('post_unapproved_replies_any') && !allowedTo('post_reply_any'))
$becomesApproved = false;
else
isAllowedTo('post_reply_any');
}
elseif (!allowedTo('post_reply_any'))
{
if ($modSettings['postmod_active'] && allowedTo('post_unapproved_replies_own') && !allowedTo('post_reply_own'))
$becomesApproved = false;
else
isAllowedTo('post_reply_own');
}
if (isset($_POST['lock']))
{
// Nothing is changed to the lock.
if ((empty($topic_info['locked']) && empty($_POST['lock'])) || (!empty($_POST['lock']) && !empty($topic_info['locked'])))
unset($_POST['lock']);
// You're have no permission to lock this topic.
elseif (!allowedTo(array('lock_any', 'lock_own')) || (!allowedTo('lock_any') && $user_info['id'] != $topic_info['id_member_started']))
unset($_POST['lock']);
// You are allowed to (un)lock your own topic only.
elseif (!allowedTo('lock_any'))
{
// You cannot override a moderator lock.
if ($topic_info['locked'] == 1)
unset($_POST['lock']);
else
$_POST['lock'] = empty($_POST['lock']) ? 0 : 2;
}
// Hail mighty moderator, (un)lock this topic immediately.
else
$_POST['lock'] = empty($_POST['lock']) ? 0 : 1;
}
// So you wanna (un)sticky this...let's see.
if (isset($_POST['sticky']) && (empty($modSettings['enableStickyTopics']) || $_POST['sticky'] == $topic_info['is_sticky'] || !allowedTo('make_sticky')))
unset($_POST['sticky']);
// If the number of replies has changed, if the setting is enabled, go back to Post() - which handles the error.
$newReplies = isset($_POST['num_replies']) && $topic_info['num_replies'] > $_POST['num_replies'] ? $topic_info['num_replies'] - $_POST['num_replies'] : 0;
if (empty($options['no_new_reply_warning']) && !empty($newReplies))
{
$_REQUEST['preview'] = true;
return Post();
}
$posterIsGuest = $user_info['is_guest'];
}
// Posting a new topic.
elseif (empty($topic))
{
// Now don't be silly, new topics will get their own id_msg soon enough.
unset($_REQUEST['msg'], $_POST['msg'], $_GET['msg']);
// Do like, the permissions, for safety and stuff...
$becomesApproved = true;
if ($modSettings['postmod_active'] && !allowedTo('post_new') && allowedTo('post_unapproved_topics'))
$becomesApproved = false;
else
isAllowedTo('post_new');
if (isset($_POST['lock']))
{
// New topics are by default not locked.
if (empty($_POST['lock']))
unset($_POST['lock']);
// Besides, you need permission.
elseif (!allowedTo(array('lock_any', 'lock_own')))
unset($_POST['lock']);
// A moderator-lock (1) can override a user-lock (2).
else
$_POST['lock'] = allowedTo('lock_any') ? 1 : 2;
}
if (isset($_POST['sticky']) && (empty($modSettings['enableStickyTopics']) || empty($_POST['sticky']) || !allowedTo('make_sticky')))
unset($_POST['sticky']);
$posterIsGuest = $user_info['is_guest'];
}
// Modifying an existing message?
elseif (isset($_REQUEST['msg']) && !empty($topic))
{
$_REQUEST['msg'] = (int) $_REQUEST['msg'];
$request = $smcFunc['db_query']('', '
SELECT id_member, poster_name, poster_email, poster_time, approved
FROM {db_prefix}messages
WHERE id_msg = {int:id_msg}
LIMIT 1',
array(
'id_msg' => $_REQUEST['msg'],
)
);
if ($smcFunc['db_num_rows']($request) == 0)
fatal_lang_error('cant_find_messages', false);
$row = $smcFunc['db_fetch_assoc']($request);
$smcFunc['db_free_result']($request);
if (!empty($topic_info['locked']) && !allowedTo('moderate_board'))
fatal_lang_error('topic_locked', false);
if (isset($_POST['lock']))
{
// Nothing changes to the lock status.
if ((empty($_POST['lock']) && empty($topic_info['locked'])) || (!empty($_POST['lock']) && !empty($topic_info['locked'])))
unset($_POST['lock']);
// You're simply not allowed to (un)lock this.
elseif (!allowedTo(array('lock_any', 'lock_own')) || (!allowedTo('lock_any') && $user_info['id'] != $topic_info['id_member_started']))
unset($_POST['lock']);
// You're only allowed to lock your own topics.
elseif (!allowedTo('lock_any'))
{
// You're not allowed to break a moderator's lock.
if ($topic_info['locked'] == 1)
unset($_POST['lock']);
// Lock it with a soft lock or unlock it.
else
$_POST['lock'] = empty($_POST['lock']) ? 0 : 2;
}
// You must be the moderator.
else
$_POST['lock'] = empty($_POST['lock']) ? 0 : 1;
}
// Change the sticky status of this topic?
if (isset($_POST['sticky']) && (!allowedTo('make_sticky') || $_POST['sticky'] == $topic_info['is_sticky']))
unset($_POST['sticky']);
if ($row['id_member'] == $user_info['id'] && !allowedTo('modify_any'))
{
if ((!$modSettings['postmod_active'] || $row['approved']) && !empty($modSettings['edit_disable_time']) && $row['poster_time'] + ($modSettings['edit_disable_time'] + 5) * 60 < time())
fatal_lang_error('modify_post_time_passed', false);
elseif ($topic_info['id_member_started'] == $user_info['id'] && !allowedTo('modify_own'))
isAllowedTo('modify_replies');
else
isAllowedTo('modify_own');
}
elseif ($topic_info['id_member_started'] == $user_info['id'] && !allowedTo('modify_any'))
{
isAllowedTo('modify_replies');
// If you're modifying a reply, I say it better be logged...
$moderationAction = true;
}
else
{
isAllowedTo('modify_any');
// Log it, assuming you're not modifying your own post.
if ($row['id_member'] != $user_info['id'])
$moderationAction = true;
}
$posterIsGuest = empty($row['id_member']);
// Can they approve it?
$can_approve = allowedTo('approve_posts');
$becomesApproved = $modSettings['postmod_active'] ? ($can_approve && !$row['approved'] ? (!empty($_REQUEST['approve']) ? 1 : 0) : $row['approved']) : 1;
$approve_has_changed = $row['approved'] != $becomesApproved;
if (!allowedTo('moderate_forum') || !$posterIsGuest)
{
$_POST['guestname'] = $row['poster_name'];
$_POST['email'] = $row['poster_email'];
}
}
// If the poster is a guest evaluate the legality of name and email.
if ($posterIsGuest)
{
$_POST['guestname'] = !isset($_POST['guestname']) ? '' : trim($_POST['guestname']);
$_POST['email'] = !isset($_POST['email']) ? '' : trim($_POST['email']);
if ($_POST['guestname'] == '' || $_POST['guestname'] == '_')
$post_errors[] = 'no_name';
if ($smcFunc['strlen']($_POST['guestname']) > 25)
$post_errors[] = 'long_name';
if (empty($modSettings['guest_post_no_email']))
{
// Only check if they changed it!
if (!isset($row) || $row['poster_email'] != $_POST['email'])
{
if (!allowedTo('moderate_forum') && (!isset($_POST['email']) || $_POST['email'] == ''))
$post_errors[] = 'no_email';
if (!allowedTo('moderate_forum') && preg_match('~^[0-9A-Za-z=_+\-/][0-9A-Za-z=_\'+\-/\.]*@[\w\-]+(\.[\w\-]+)*(\.[\w]{2,6})$~', $_POST['email']) == 0)
$post_errors[] = 'bad_email';
}
// Now make sure this email address is not banned from posting.
isBannedEmail($_POST['email'], 'cannot_post', sprintf($txt['you_are_post_banned'], $txt['guest_title']));
}
// In case they are making multiple posts this visit, help them along by storing their name.
if (empty($post_errors))
{
$_SESSION['guest_name'] = $_POST['guestname'];
$_SESSION['guest_email'] = $_POST['email'];
}
}
// Check the subject and message.
if (!isset($_POST['subject']) || $smcFunc['htmltrim']($smcFunc['htmlspecialchars']($_POST['subject'])) === '')
$post_errors[] = 'no_subject';
if (!isset($_POST['message']) || $smcFunc['htmltrim']($smcFunc['htmlspecialchars']($_POST['message']), ENT_QUOTES) === '')
$post_errors[] = 'no_message';
elseif (!empty($modSettings['max_messageLength']) && $smcFunc['strlen']($_POST['message']) > $modSettings['max_messageLength'])
$post_errors[] = 'long_message';
else
{
// Prepare the message a bit for some additional testing.
$_POST['message'] = $smcFunc['htmlspecialchars']($_POST['message'], ENT_QUOTES);
// Preparse code. (Zef)
if ($user_info['is_guest'])
$user_info['name'] = $_POST['guestname'];
preparsecode($_POST['message']);
// Let's see if there's still some content left without the tags.
if ($smcFunc['htmltrim'](strip_tags(parse_bbc($_POST['message'], false), '<img>')) === '' && (!allowedTo('admin_forum') || strpos($_POST['message'], '[html]') === false))
$post_errors[] = 'no_message';
}
if (isset($_POST['calendar']) && !isset($_REQUEST['deleteevent']) && $smcFunc['htmltrim']($_POST['evtitle']) === '')
$post_errors[] = 'no_event';
// You are not!
if (isset($_POST['message']) && strtolower($_POST['message']) == 'i am the administrator.' && !$user_info['is_admin'])
fatal_error('Knave! Masquerader! Charlatan!', false);
// Validate the poll...
if (isset($_REQUEST['poll']) && $modSettings['pollMode'] == '1')
{
if (!empty($topic) && !isset($_REQUEST['msg']))
fatal_lang_error('no_access', false);
// This is a new topic... so it's a new poll.
if (empty($topic))
isAllowedTo('poll_post');
// Can you add to your own topics?
elseif ($user_info['id'] == $topic_info['id_member_started'] && !allowedTo('poll_add_any'))
isAllowedTo('poll_add_own');
// Can you add polls to any topic, then?
else
isAllowedTo('poll_add_any');
if (!isset($_POST['question']) || trim($_POST['question']) == '')
$post_errors[] = 'no_question';
$_POST['options'] = empty($_POST['options']) ? array() : htmltrim__recursive($_POST['options']);
// Get rid of empty ones.
foreach ($_POST['options'] as $k => $option)
if ($option == '')
unset($_POST['options'][$k], $_POST['options'][$k]);
// What are you going to vote between with one choice?!?
if (count($_POST['options']) < 2)
$post_errors[] = 'poll_few';
}
if ($posterIsGuest)
{
// If user is a guest, make sure the chosen name isn't taken.
require_once($sourcedir . '/Subs-Members.php');
if (isReservedName($_POST['guestname'], 0, true, false) && (!isset($row['poster_name']) || $_POST['guestname'] != $row['poster_name']))
$post_errors[] = 'bad_name';
}
// If the user isn't a guest, get his or her name and email.
elseif (!isset($_REQUEST['msg']))
{
$_POST['guestname'] = $user_info['username'];
$_POST['email'] = $user_info['email'];
}
// Any mistakes?
if (!empty($post_errors))
{
loadLanguage('Errors');
// Previewing.
$_REQUEST['preview'] = true;
$context['post_error'] = array('messages' => array());
foreach ($post_errors as $post_error)
{
$context['post_error'][$post_error] = true;
if ($post_error == 'long_message')
$txt['error_' . $post_error] = sprintf($txt['error_' . $post_error], $modSettings['max_messageLength']);
$context['post_error']['messages'][] = $txt['error_' . $post_error];
}
return Post();
}
// Make sure the user isn't spamming the board.
if (!isset($_REQUEST['msg']))
spamProtection('post');
// At about this point, we're posting and that's that.
ignore_user_abort(true);
@set_time_limit(300);
// Add special html entities to the subject, name, and email.
$_POST['subject'] = strtr($smcFunc['htmlspecialchars']($_POST['subject']), array("\r" => '', "\n" => '', "\t" => ''));
$_POST['guestname'] = htmlspecialchars($_POST['guestname']);
$_POST['email'] = htmlspecialchars($_POST['email']);
// At this point, we want to make sure the subject isn't too long.
if ($smcFunc['strlen']($_POST['subject']) > 100)
$_POST['subject'] = $smcFunc['substr']($_POST['subject'], 0, 100);
// Make the poll...
if (isset($_REQUEST['poll']))
{
// Make sure that the user has not entered a ridiculous number of
/**********************************************************************************
* Post.php *
***********************************************************************************
* SMF: Simple Machines Forum *
* Open-Source Project Inspired by Zef Hemel (zef@zefhemel.com) *
* =============================================================================== *
* Software Version: SMF 2.0 RC2 *
* Software by: Simple Machines (http://www.simplemachines.org) *
* Copyright 2006-2009 by: Simple Machines LLC (http://www.simplemachines.org) *
* 2001-2006 by: Lewis Media (http://www.lewismedia.com) *
* Support, News, Updates at: http://www.simplemachines.org *
***********************************************************************************
* This program is free software; you may redistribute it and/or modify it under *
* the terms of the provided license as published by Simple Machines LLC. *
* *
* This program is distributed in the hope that it is and will be useful, but *
* WITHOUT ANY WARRANTIES; without even any implied warranty of MERCHANTABILITY *
* or FITNESS FOR A PARTICULAR PURPOSE. *
* *
* See the "license.txt" file for details of the Simple Machines license. *
* The latest version can always be found at http://www.simplemachines.org. *
**********************************************************************************/
if (!defined('SMF'))
die('Hacking attempt...');
/* The job of this file is to handle everything related to posting replies,
new topics, quotes, and modifications to existing posts. It also handles
quoting posts by way of javascript.
void Post()
- handles showing the post screen, loading the post to be modified, and
loading any post quoted.
- additionally handles previews of posts.
- uses the Post template and language file, main sub template.
- allows wireless access using the protocol_post sub template.
- requires different permissions depending on the actions, but most
notably post_new, post_reply_own, and post_reply_any.
- shows options for the editing and posting of calendar events and
attachments, as well as the posting of polls.
- accessed from ?action=post.
void Post2()
- actually posts or saves the message composed with Post().
- requires various permissions depending on the action.
- handles attachment, post, and calendar saving.
- sends off notifications, and allows for announcements and moderation.
- accessed from ?action=post2.
void AnnounceTopic()
- handle the announce topic function (action=announce).
- checks the topic announcement permissions and loads the announcement
template.
- requires the announce_topic permission.
- uses the ManageMembers template and Post language file.
- call the right function based on the sub-action.
void AnnouncementSelectMembergroup()
- lets the user select the membergroups that will receive the topic
announcement.
void AnnouncementSend()
- splits the members to be sent a topic announcement into chunks.
- composes notification messages in all languages needed.
- does the actual sending of the topic announcements in chunks.
- calculates a rough estimate of the percentage items sent.
void notifyMembersBoard(notifyData)
- notifies members who have requested notification for new topics
posted on a board of said posts.
- receives data on the topics to send out notifications to by the passed in array.
- only sends notifications to those who can *currently* see the topic
(it doesn't matter if they could when they requested notification.)
- loads the Post language file multiple times for each language if the
userLanguage setting is set.
void getTopic()
- gets a summary of the most recent posts in a topic.
- depends on the topicSummaryPosts setting.
- if you are editing a post, only shows posts previous to that post.
void QuoteFast()
- loads a post an inserts it into the current editing text box.
- uses the Post language file.
- uses special (sadly browser dependent) javascript to parse entities
for internationalization reasons.
- accessed with ?action=quotefast.
void JavaScriptModify()
// !!!
*/
function Post()
{
global $txt, $scripturl, $topic, $modSettings, $board;
global $user_info, $sc, $board_info, $context, $settings;
global $sourcedir, $options, $smcFunc, $language;
loadLanguage('Post');
// You can't reply with a poll... hacker.
if (isset($_REQUEST['poll']) && !empty($topic) && !isset($_REQUEST['msg']))
unset($_REQUEST['poll']);
// Posting an event?
$context['make_event'] = isset($_REQUEST['calendar']);
$context['robot_no_index'] = true;
// You must be posting to *some* board.
if (empty($board) && !$context['make_event'])
fatal_lang_error('no_board', false);
require_once($sourcedir . '/Subs-Post.php');
if (isset($_REQUEST['xml']))
{
$context['sub_template'] = 'post';
// Just in case of an earlier error...
$context['preview_message'] = '';
$context['preview_subject'] = '';
}
// No message is comlete without a topic.
if (empty($topic) && !empty($_REQUEST['msg']))
{
$request = $smcFunc['db_query']('', '
SELECT id_topic
FROM {db_prefix}messages
WHERE id_msg = {int:msg}',
array(
'msg' => (int) $_REQUEST['msg'],
));
if ($smcFunc['db_num_rows']($request) != 1)
unset($_REQUEST['msg'], $_POST['msg'], $_GET['msg']);
else
list($topic) = $smcFunc['db_fetch_row']($request);
$smcFunc['db_free_result']($request);
}
// Check if it's locked. It isn't locked if no topic is specified.
if (!empty($topic))
{
$request = $smcFunc['db_query']('', '
SELECT
t.locked, IFNULL(ln.id_topic, 0) AS notify, t.is_sticky, t.id_poll, t.num_replies, mf.id_member,
t.id_first_msg, mf.subject,
CASE WHEN ml.poster_time > ml.modified_time THEN ml.poster_time ELSE ml.modified_time END AS last_post_time
FROM {db_prefix}topics AS t
LEFT JOIN {db_prefix}log_notify AS ln ON (ln.id_topic = t.id_topic AND ln.id_member = {int:current_member})
LEFT JOIN {db_prefix}messages AS mf ON (mf.id_msg = t.id_first_msg)
LEFT JOIN {db_prefix}messages AS ml ON (ml.id_msg = t.id_last_msg)
WHERE t.id_topic = {int:current_topic}
LIMIT 1',
array(
'current_member' => $user_info['id'],
'current_topic' => $topic,
)
);
list ($locked, $context['notify'], $sticky, $pollID, $context['num_replies'], $ID_MEMBER_POSTER, $id_first_msg, $first_subject, $lastPostTime) = $smcFunc['db_fetch_row']($request);
$smcFunc['db_free_result']($request);
// If this topic already has a poll, they sure can't add another.
if (isset($_REQUEST['poll']) && $pollID > 0)
unset($_REQUEST['poll']);
if (empty($_REQUEST['msg']))
{
if ($user_info['is_guest'] && !allowedTo('post_reply_any') && (!$modSettings['postmod_active'] || !allowedTo('post_unapproved_replies_any')))
is_not_guest();
// By default the reply will be approved...
$context['becomes_approved'] = true;
if ($ID_MEMBER_POSTER != $user_info['id'])
{
if ($modSettings['postmod_active'] && allowedTo('post_unapproved_replies_any') && !allowedTo('post_reply_any'))
$context['becomes_approved'] = false;
else
isAllowedTo('post_reply_any');
}
elseif (!allowedTo('post_reply_any'))
{
if ($modSettings['postmod_active'] && allowedTo('post_unapproved_replies_own') && !allowedTo('post_reply_own'))
$context['becomes_approved'] = false;
else
isAllowedTo('post_reply_own');
}
}
else
$context['becomes_approved'] = true;
$context['can_lock'] = allowedTo('lock_any') || ($user_info['id'] == $ID_MEMBER_POSTER && allowedTo('lock_own'));
$context['can_sticky'] = allowedTo('make_sticky') && !empty($modSettings['enableStickyTopics']);
$context['notify'] = !empty($context['notify']);
$context['sticky'] = isset($_REQUEST['sticky']) ? !empty($_REQUEST['sticky']) : $sticky;
}
else
{
$context['becomes_approved'] = true;
if ((!$context['make_event'] || !empty($board)))
{
if ($modSettings['postmod_active'] && !allowedTo('post_new') && allowedTo('post_unapproved_topics'))
$context['becomes_approved'] = false;
else
isAllowedTo('post_new');
}
$locked = 0;
// !!! These won't work if you're making an event.
$context['can_lock'] = allowedTo(array('lock_any', 'lock_own'));
$context['can_sticky'] = allowedTo('make_sticky') && !empty($modSettings['enableStickyTopics']);
$context['notify'] = !empty($context['notify']);
$context['sticky'] = !empty($_REQUEST['sticky']);
}
// !!! These won't work if you're posting an event!
$context['can_notify'] = allowedTo('mark_any_notify');
$context['can_move'] = allowedTo('move_any');
$context['move'] = !empty($_REQUEST['move']);
$context['announce'] = !empty($_REQUEST['announce']);
// You can only annouce topics that will get approved...
$context['can_announce'] = allowedTo('announce_topic') && $context['becomes_approved'];
$context['locked'] = !empty($locked) || !empty($_REQUEST['lock']);
// Generally don't show the approval box... (Assume we want things approved)
$context['show_approval'] = false;
// An array to hold all the attachments for this topic.
$context['current_attachments'] = array();
// Don't allow a post if it's locked and you aren't all powerful.
if ($locked && !allowedTo('moderate_board'))
fatal_lang_error('topic_locked', false);
// Check the users permissions - is the user allowed to add or post a poll?
if (isset($_REQUEST['poll']) && $modSettings['pollMode'] == '1')
{
// New topic, new poll.
if (empty($topic))
isAllowedTo('poll_post');
// This is an old topic - but it is yours! Can you add to it?
elseif ($user_info['id'] == $ID_MEMBER_POSTER && !allowedTo('poll_add_any'))
isAllowedTo('poll_add_own');
// If you're not the owner, can you add to any poll?
else
isAllowedTo('poll_add_any');
require_once($sourcedir . '/Subs-Members.php');
$allowedVoteGroups = groupsAllowedTo('poll_vote', $board);
// Set up the poll options.
$context['poll_options'] = array(
'max_votes' => empty($_POST['poll_max_votes']) ? '1' : max(1, $_POST['poll_max_votes']),
'hide' => empty($_POST['poll_hide']) ? 0 : $_POST['poll_hide'],
'expire' => !isset($_POST['poll_expire']) ? '' : $_POST['poll_expire'],
'change_vote' => isset($_POST['poll_change_vote']),
'guest_vote' => isset($_POST['poll_guest_vote']),
'guest_vote_enabled' => in_array(-1, $allowedVoteGroups['allowed']),
);
// Make all five poll choices empty.
$context['choices'] = array(
array('id' => 0, 'number' => 1, 'label' => '', 'is_last' => false),
array('id' => 1, 'number' => 2, 'label' => '', 'is_last' => false),
array('id' => 2, 'number' => 3, 'label' => '', 'is_last' => false),
array('id' => 3, 'number' => 4, 'label' => '', 'is_last' => false),
array('id' => 4, 'number' => 5, 'label' => '', 'is_last' => true)
);
}
if ($context['make_event'])
{
// They might want to pick a board.
if (!isset($context['current_board']))
$context['current_board'] = 0;
// Start loading up the event info.
$context['event'] = array();
$context['event']['title'] = isset($_REQUEST['evtitle']) ? htmlspecialchars(stripslashes($_REQUEST['evtitle'])) : '';
$context['event']['id'] = isset($_REQUEST['eventid']) ? (int) $_REQUEST['eventid'] : -1;
$context['event']['new'] = $context['event']['id'] == -1;
// Permissions check!
isAllowedTo('calendar_post');
// Editing an event? (but NOT previewing!?)
if (!$context['event']['new'] && !isset($_REQUEST['subject']))
{
// If the user doesn't have permission to edit the post in this topic, redirect them.
if (($ID_MEMBER_POSTER != $user_info['id'] || !allowedTo('modify_own')) && !allowedTo('modify_any'))
{
require_once($sourcedir . '/Calendar.php');
return CalendarPost();
}
// Get the current event information.
$request = $smcFunc['db_query']('', '
SELECT
id_member, title, MONTH(start_date) AS month, DAYOFMONTH(start_date) AS day,
YEAR(start_date) AS year, (TO_DAYS(end_date) - TO_DAYS(start_date)) AS span
FROM {db_prefix}calendar
WHERE id_event = {int:id_event}
LIMIT 1',
array(
'id_event' => $context['event']['id'],
)
);
$row = $smcFunc['db_fetch_assoc']($request);
$smcFunc['db_free_result']($request);
// Make sure the user is allowed to edit this event.
if ($row['id_member'] != $user_info['id'])
isAllowedTo('calendar_edit_any');
elseif (!allowedTo('calendar_edit_any'))
isAllowedTo('calendar_edit_own');
$context['event']['month'] = $row['month'];
$context['event']['day'] = $row['day'];
$context['event']['year'] = $row['year'];
$context['event']['title'] = $row['title'];
$context['event']['span'] = $row['span'] + 1;
}
else
{
$today = getdate();
// You must have a month and year specified!
if (!isset($_REQUEST['month']))
$_REQUEST['month'] = $today['mon'];
if (!isset($_REQUEST['year']))
$_REQUEST['year'] = $today['year'];
$context['event']['month'] = (int) $_REQUEST['month'];
$context['event']['year'] = (int) $_REQUEST['year'];
$context['event']['day'] = isset($_REQUEST['day']) ? $_REQUEST['day'] : ($_REQUEST['month'] == $today['mon'] ? $today['mday'] : 0);
$context['event']['span'] = isset($_REQUEST['span']) ? $_REQUEST['span'] : 1;
// Make sure the year and month are in the valid range.
if ($context['event']['month'] < 1 || $context['event']['month'] > 12)
fatal_lang_error('invalid_month', false);
if ($context['event']['year'] < $modSettings['cal_minyear'] || $context['event']['year'] > $modSettings['cal_maxyear'])
fatal_lang_error('invalid_year', false);
// Get a list of boards they can post in.
$boards = boardsAllowedTo('post_new');
if (empty($boards))
fatal_lang_error('cannot_post_new', 'user');
// Load a list of boards for this event in the context.
require_once($sourcedir . '/Subs-MessageIndex.php');
$boardListOptions = array(
'included_boards' => in_array(0, $boards) ? null : $boards,
'not_redirection' => true,
'use_permissions' => true,
'selected_board' => empty($context['current_board']) ? $modSettings['cal_defaultboard'] : $context['current_board'],
);
$context['event']['categories'] = getBoardList($boardListOptions);
}
// Find the last day of the month.
$context['event']['last_day'] = (int) strftime('%d', mktime(0, 0, 0, $context['event']['month'] == 12 ? 1 : $context['event']['month'] + 1, 0, $context['event']['month'] == 12 ? $context['event']['year'] + 1 : $context['event']['year']));
$context['event']['board'] = !empty($board) ? $board : $modSettings['cal_defaultboard'];
}
if (empty($context['post_errors']))
$context['post_errors'] = array();
// See if any new replies have come along.
if (empty($_REQUEST['msg']) && !empty($topic))
{
if (empty($options['no_new_reply_warning']) && isset($_REQUEST['num_replies']))
{
$newReplies = $context['num_replies'] > $_REQUEST['num_replies'] ? $context['num_replies'] - $_REQUEST['num_replies'] : 0;
if (!empty($newReplies))
{
if ($newReplies == 1)
$txt['error_new_reply'] = isset($_GET['num_replies']) ? $txt['error_new_reply_reading'] : $txt['error_new_reply'];
else
$txt['error_new_replies'] = sprintf(isset($_GET['num_replies']) ? $txt['error_new_replies_reading'] : $txt['error_new_replies'], $newReplies);
// If they've come from the display page then we treat the error differently....
if (isset($_GET['num_replies']))
$newRepliesError = $newReplies;
else
$context['post_error'][$newReplies == 1 ? 'new_reply' : 'new_replies'] = true;
$modSettings['topicSummaryPosts'] = $newReplies > $modSettings['topicSummaryPosts'] ? max($modSettings['topicSummaryPosts'], 5) : $modSettings['topicSummaryPosts'];
}
}
// Check whether this is a really old post being bumped...
if (!empty($modSettings['oldTopicDays']) && $lastPostTime + $modSettings['oldTopicDays'] * 86400 < time() && empty($sticky) && !isset($_REQUEST['subject']))
$oldTopicError = true;
}
// Get a response prefix (like 'Re:') in the default forum language.
if (!isset($context['response_prefix']) && !($context['response_prefix'] = cache_get_data('response_prefix')))
{
if ($language === $user_info['language'])
$context['response_prefix'] = $txt['response_prefix'];
else
{
loadLanguage('index', $language, false);
$context['response_prefix'] = $txt['response_prefix'];
loadLanguage('index');
}
cache_put_data('response_prefix', $context['response_prefix'], 600);
}
// Previewing, modifying, or posting?
if (isset($_REQUEST['message']) || !empty($context['post_error']))
{
// Validate inputs.
if (empty($context['post_error']))
{
if (htmltrim__recursive(htmlspecialchars__recursive($_REQUEST['subject'])) == '')
$context['post_error']['no_subject'] = true;
if (htmltrim__recursive(htmlspecialchars__recursive($_REQUEST['message'])) == '')
$context['post_error']['no_message'] = true;
if (!empty($modSettings['max_messageLength']) && strlen($_REQUEST['message']) > $modSettings['max_messageLength'])
$context['post_error']['long_message'] = true;
// Are you... a guest?
if ($user_info['is_guest'])
{
$_REQUEST['guestname'] = !isset($_REQUEST['guestname']) ? '' : trim($_REQUEST['guestname']);
$_REQUEST['email'] = !isset($_REQUEST['email']) ? '' : trim($_REQUEST['email']);
// Validate the name and email.
if (!isset($_REQUEST['guestname']) || trim(strtr($_REQUEST['guestname'], '_', ' ')) == '')
$context['post_error']['no_name'] = true;
elseif ($smcFunc['strlen']($_REQUEST['guestname']) > 25)
$context['post_error']['long_name'] = true;
else
{
require_once($sourcedir . '/Subs-Members.php');
if (isReservedName(htmlspecialchars($_REQUEST['guestname']), 0, true, false))
$context['post_error']['bad_name'] = true;
}
if (empty($modSettings['guest_post_no_email']))
{
if (!isset($_REQUEST['email']) || $_REQUEST['email'] == '')
$context['post_error']['no_email'] = true;
elseif (preg_match('~^[0-9A-Za-z=_+\-/][0-9A-Za-z=_\'+\-/\.]*@[\w\-]+(\.[\w\-]+)*(\.[\w]{2,6})$~', $_REQUEST['email']) == 0)
$context['post_error']['bad_email'] = true;
}
}
// This is self explanatory - got any questions?
if (isset($_REQUEST['question']) && trim($_REQUEST['question']) == '')
$context['post_error']['no_question'] = true;
// This means they didn't click Post and get an error.
$really_previewing = true;
}
else
{
if (!isset($_REQUEST['subject']))
$_REQUEST['subject'] = '';
if (!isset($_REQUEST['message']))
$_REQUEST['message'] = '';
if (!isset($_REQUEST['icon']))
$_REQUEST['icon'] = 'xx';
// They are previewing if they asked to preview (i.e. came from quick reply).
$really_previewing = !empty($_POST['preview']);
}
// In order to keep the approval status flowing through, we have to pass it through the form...
$context['becomes_approved'] = empty($_REQUEST['not_approved']);
$context['show_approval'] = isset($_REQUEST['approve']) ? ($_REQUEST['approve'] ? 2 : 1) : 0;
$context['can_announce'] &= $context['becomes_approved'];
// Set up the inputs for the form.
$form_subject = strtr($smcFunc['htmlspecialchars']($_REQUEST['subject']), array("\r" => '', "\n" => '', "\t" => ''));
$form_message = $smcFunc['htmlspecialchars']($_REQUEST['message'], ENT_QUOTES);
// Make sure the subject isn't too long - taking into account special characters.
if ($smcFunc['strlen']($form_subject) > 100)
$form_subject = $smcFunc['substr']($form_subject, 0, 100);
// Have we inadvertently trimmed off the subject of useful information?
if ($smcFunc['htmltrim']($form_subject) === '')
$context['post_error']['no_subject'] = true;
// Any errors occurred?
if (!empty($context['post_error']))
{
loadLanguage('Errors');
$context['error_type'] = 'minor';
$context['post_error']['messages'] = array();
foreach ($context['post_error'] as $post_error => $dummy)
{
if ($post_error == 'messages')
continue;
if ($post_error == 'long_message')
$txt['error_' . $post_error] = sprintf($txt['error_' . $post_error], $modSettings['max_messageLength']);
$context['post_error']['messages'][] = $txt['error_' . $post_error];
// If it's not a minor error flag it as such.
if (!in_array($post_error, array('new_reply', 'not_approved', 'new_replies', 'old_topic', 'need_qr_verification')))
$context['error_type'] = 'serious';
}
}
if (isset($_REQUEST['poll']))
{
$context['question'] = isset($_REQUEST['question']) ? $smcFunc['htmlspecialchars'](trim($_REQUEST['question'])) : '';
$context['choices'] = array();
$choice_id = 0;
$_POST['options'] = empty($_POST['options']) ? array() : htmlspecialchars__recursive($_POST['options']);
foreach ($_POST['options'] as $option)
{
if (trim($option) == '')
continue;
$context['choices'][] = array(
'id' => $choice_id++,
'number' => $choice_id,
'label' => $option,
'is_last' => false
);
}
if (count($context['choices']) < 2)
{
$context['choices'][] = array(
'id' => $choice_id++,
'number' => $choice_id,
'label' => '',
'is_last' => false
);
$context['choices'][] = array(
'id' => $choice_id++,
'number' => $choice_id,
'label' => '',
'is_last' => false
);
}
$context['choices'][count($context['choices']) - 1]['is_last'] = true;
}
// Are you... a guest?
if ($user_info['is_guest'])
{
$_REQUEST['guestname'] = !isset($_REQUEST['guestname']) ? '' : trim($_REQUEST['guestname']);
$_REQUEST['email'] = !isset($_REQUEST['email']) ? '' : trim($_REQUEST['email']);
$_REQUEST['guestname'] = htmlspecialchars($_REQUEST['guestname']);
$context['name'] = $_REQUEST['guestname'];
$_REQUEST['email'] = htmlspecialchars($_REQUEST['email']);
$context['email'] = $_REQUEST['email'];
$user_info['name'] = $_REQUEST['guestname'];
}
// Only show the preview stuff if they hit Preview.
if ($really_previewing == true || isset($_REQUEST['xml']))
{
// Set up the preview message and subject and censor them...
$context['preview_message'] = $form_message;
preparsecode($form_message, true);
preparsecode($context['preview_message']);
// Do all bulletin board code tags, with or without smileys.
$context['preview_message'] = parse_bbc($context['preview_message'], isset($_REQUEST['ns']) ? 0 : 1);
if ($form_subject != '')
{
$context['preview_subject'] = $form_subject;
censorText($context['preview_subject']);
censorText($context['preview_message']);
}
else
$context['preview_subject'] = '' . $txt['no_subject'] . '';
// Protect any CDATA blocks.
if (isset($_REQUEST['xml']))
$context['preview_message'] = strtr($context['preview_message'], array(']]>' => ']]]]><![CDATA[>'));
}
// Set up the checkboxes.
$context['notify'] = !empty($_REQUEST['notify']);
$context['use_smileys'] = !isset($_REQUEST['ns']);
$context['icon'] = isset($_REQUEST['icon']) ? preg_replace('~[\./\\\\*\':"<>]~', '', $_REQUEST['icon']) : 'xx';
// Set the destination action for submission.
$context['destination'] = 'post2;start=' . $_REQUEST['start'] . (isset($_REQUEST['msg']) ? ';msg=' . $_REQUEST['msg'] . ';' . $context['session_var'] . '=' . $context['session_id'] : '') . (isset($_REQUEST['poll']) ? ';poll' : '');
$context['submit_label'] = isset($_REQUEST['msg']) ? $txt['save'] : $txt['post'];
// Previewing an edit?
if (isset($_REQUEST['msg']) && !empty($topic))
{
// Get the existing message.
$request = $smcFunc['db_query']('', '
SELECT
m.id_member, m.modified_time, m.smileys_enabled, m.body,
m.poster_name, m.poster_email, m.subject, m.icon, m.approved,
IFNULL(a.size, -1) AS filesize, a.filename, a.id_attach,
a.approved AS attachment_approved, t.id_member_started AS id_member_poster,
m.poster_time
FROM {db_prefix}messages AS m
INNER JOIN {db_prefix}topics AS t ON (t.id_topic = {int:current_topic})
LEFT JOIN {db_prefix}attachments AS a ON (a.id_msg = m.id_msg AND a.attachment_type = {int:attachment_type})
WHERE m.id_msg = {int:id_msg}
AND m.id_topic = {int:current_topic}',
array(
'current_topic' => $topic,
'attachment_type' => 0,
'id_msg' => $_REQUEST['msg'],
)
);
// The message they were trying to edit was most likely deleted.
// !!! Change this error message?
if ($smcFunc['db_num_rows']($request) == 0)
fatal_lang_error('no_board', false);
$row = $smcFunc['db_fetch_assoc']($request);
$attachment_stuff = array($row);
while ($row2 = $smcFunc['db_fetch_assoc']($request))
$attachment_stuff[] = $row2;
$smcFunc['db_free_result']($request);
if ($row['id_member'] == $user_info['id'] && !allowedTo('modify_any'))
{
// Give an extra five minutes over the disable time threshold, so they can type - assuming the post is public.
if ($row['approved'] && !empty($modSettings['edit_disable_time']) && $row['poster_time'] + ($modSettings['edit_disable_time'] + 5) * 60 < time())
fatal_lang_error('modify_post_time_passed', false);
elseif ($row['id_member_poster'] == $user_info['id'] && !allowedTo('modify_own'))
isAllowedTo('modify_replies');
else
isAllowedTo('modify_own');
}
elseif ($row['id_member_poster'] == $user_info['id'] && !allowedTo('modify_any'))
isAllowedTo('modify_replies');
else
isAllowedTo('modify_any');
if (!empty($modSettings['attachmentEnable']))
{
$request = $smcFunc['db_query']('', '
SELECT IFNULL(size, -1) AS filesize, filename, id_attach, approved
FROM {db_prefix}attachments
WHERE id_msg = {int:id_msg}
AND attachment_type = {int:attachment_type}',
array(
'id_msg' => (int) $_REQUEST['msg'],
'attachment_type' => 0,
)
);
while ($row = $smcFunc['db_fetch_assoc']($request))
{
if ($row['filesize'] <= 0)
continue;
$context['current_attachments'][] = array(
'name' => $row['filename'],
'id' => $row['id_attach'],
'approved' => $row['approved'],
);
}
$smcFunc['db_free_result']($request);
}
// Allow moderators to change names....
if (allowedTo('moderate_forum') && !empty($topic))
{
$request = $smcFunc['db_query']('', '
SELECT id_member, poster_name, poster_email
FROM {db_prefix}messages
WHERE id_msg = {int:id_msg}
AND id_topic = {int:current_topic}
LIMIT 1',
array(
'current_topic' => $topic,
'id_msg' => (int) $_REQUEST['msg'],
)
);
$row = $smcFunc['db_fetch_assoc']($request);
$smcFunc['db_free_result']($request);
if (empty($row['id_member']))
{
$context['name'] = htmlspecialchars($row['poster_name']);
$context['email'] = htmlspecialchars($row['poster_email']);
}
}
}
// No check is needed, since nothing is really posted.
checkSubmitOnce('free');
}
// Editing a message...
elseif (isset($_REQUEST['msg']) && !empty($topic))
{
checkSession('get');
$_REQUEST['msg'] = (int) $_REQUEST['msg'];
// Get the existing message.
$request = $smcFunc['db_query']('', '
SELECT
m.id_member, m.modified_time, m.smileys_enabled, m.body,
m.poster_name, m.poster_email, m.subject, m.icon, m.approved,
IFNULL(a.size, -1) AS filesize, a.filename, a.id_attach,
a.approved AS attachment_approved, t.id_member_started AS id_member_poster,
m.poster_time
FROM {db_prefix}messages AS m
INNER JOIN {db_prefix}topics AS t ON (t.id_topic = {int:current_topic})
LEFT JOIN {db_prefix}attachments AS a ON (a.id_msg = m.id_msg AND a.attachment_type = {int:attachment_type})
WHERE m.id_msg = {int:id_msg}
AND m.id_topic = {int:current_topic}',
array(
'current_topic' => $topic,
'attachment_type' => 0,
'id_msg' => $_REQUEST['msg'],
)
);
// The message they were trying to edit was most likely deleted.
// !!! Change this error message?
if ($smcFunc['db_num_rows']($request) == 0)
fatal_lang_error('no_board', false);
$row = $smcFunc['db_fetch_assoc']($request);
$attachment_stuff = array($row);
while ($row2 = $smcFunc['db_fetch_assoc']($request))
$attachment_stuff[] = $row2;
$smcFunc['db_free_result']($request);
if ($row['id_member'] == $user_info['id'] && !allowedTo('modify_any'))
{
// Give an extra five minutes over the disable time threshold, so they can type - assuming the post is public.
if ($row['approved'] && !empty($modSettings['edit_disable_time']) && $row['poster_time'] + ($modSettings['edit_disable_time'] + 5) * 60 < time())
fatal_lang_error('modify_post_time_passed', false);
elseif ($row['id_member_poster'] == $user_info['id'] && !allowedTo('modify_own'))
isAllowedTo('modify_replies');
else
isAllowedTo('modify_own');
}
elseif ($row['id_member_poster'] == $user_info['id'] && !allowedTo('modify_any'))
isAllowedTo('modify_replies');
else
isAllowedTo('modify_any');
// When was it last modified?
if (!empty($row['modified_time']))
$context['last_modified'] = timeformat($row['modified_time']);
// Get the stuff ready for the form.
$form_subject = $row['subject'];
$form_message = un_preparsecode($row['body']);
censorText($form_message);
censorText($form_subject);
// Check the boxes that should be checked.
$context['use_smileys'] = !empty($row['smileys_enabled']);
$context['icon'] = $row['icon'];
// Show an "approve" box if the user can approve it, and the message isn't approved.
if (!$row['approved'] && !$context['show_approval'])
$context['show_approval'] = allowedTo('approve_posts');
// Load up 'em attachments!
foreach ($attachment_stuff as $attachment)
{
if ($attachment['filesize'] >= 0 && !empty($modSettings['attachmentEnable']))
$context['current_attachments'][] = array(
'name' => $attachment['filename'],
'id' => $attachment['id_attach'],
'approved' => $attachment['attachment_approved'],
);
}
// Allow moderators to change names....
if (allowedTo('moderate_forum') && empty($row['id_member']))
{
$context['name'] = htmlspecialchars($row['poster_name']);
$context['email'] = htmlspecialchars($row['poster_email']);
}
// Set the destinaton.
$context['destination'] = 'post2;start=' . $_REQUEST['start'] . ';msg=' . $_REQUEST['msg'] . ';' . $context['session_var'] . '=' . $context['session_id'] . (isset($_REQUEST['poll']) ? ';poll' : '');
$context['submit_label'] = $txt['save'];
}
// Posting...
else
{
// By default....
$context['use_smileys'] = true;
$context['icon'] = 'xx';
if ($user_info['is_guest'])
{
$context['name'] = isset($_SESSION['guest_name']) ? $_SESSION['guest_name'] : '';
$context['email'] =isset($_SESSION['guest_email']) ? $_SESSION['guest_email'] : '';
}
$context['destination'] = 'post2;start=' . $_REQUEST['start'] . (isset($_REQUEST['poll']) ? ';poll' : '');
$context['submit_label'] = $txt['post'];
// Posting a quoted reply?
if (!empty($topic) && !empty($_REQUEST['quote']))
{
checkSession('get');
// Make sure they _can_ quote this post, and if so get it.
$request = $smcFunc['db_query']('', '
SELECT m.subject, IFNULL(mem.real_name, m.poster_name) AS poster_name, m.poster_time, m.body
FROM {db_prefix}messages AS m
INNER JOIN {db_prefix}boards AS b ON (b.id_board = m.id_board AND {query_see_board})
LEFT JOIN {db_prefix}members AS mem ON (mem.id_member = m.id_member)
WHERE m.id_msg = {int:id_msg}' . (!$modSettings['postmod_active'] || allowedTo('approve_posts') ? '' : '
AND m.approved = {int:is_approved}') . '
LIMIT 1',
array(
'id_msg' => (int) $_REQUEST['quote'],
'is_approved' => 1,
)
);
if ($smcFunc['db_num_rows']($request) == 0)
fatal_lang_error('quoted_post_deleted', false);
list ($form_subject, $mname, $mdate, $form_message) = $smcFunc['db_fetch_row']($request);
$smcFunc['db_free_result']($request);
// Add 'Re: ' to the front of the quoted subject.
if (trim($context['response_prefix']) != '' && $smcFunc['strpos']($form_subject, trim($context['response_prefix'])) !== 0)
$form_subject = $context['response_prefix'] . $form_subject;
// Censor the message and subject.
censorText($form_message);
censorText($form_subject);
// But if it's in HTML world, turn them into htmlspecialchar's so they can be edited!
if (strpos($form_message, '
') !== false)
{
$parts = preg_split('~(\[/code\]|\[code(?:=[^\]]+)?\])~i', $form_message, -1, PREG_SPLIT_DELIM_CAPTURE);
for ($i = 0, $n = count($parts); $i < $n; $i++)
{
// It goes 0 = outside, 1 = begin tag, 2 = inside, 3 = close tag, repeat.
if ($i % 4 == 0)
$parts[$i] = preg_replace('~\[html\](.+?)\[/html\]~ise', '\'[html]\' . preg_replace(\'~<br\s?/?' . '>~i\', \'<br /><br />\', \'$1\') . \'
\'', $parts[$i]);{
$parts = preg_split('~(\[/code\]|\[code(?:=[^\]]+)?\])~i', $form_message, -1, PREG_SPLIT_DELIM_CAPTURE);
for ($i = 0, $n = count($parts); $i < $n; $i++)
{
// It goes 0 = outside, 1 = begin tag, 2 = inside, 3 = close tag, repeat.
if ($i % 4 == 0)
$parts[$i] = preg_replace('~\[html\](.+?)\[/html\]~ise', '\'[html]\' . preg_replace(\'~<br\s?/?' . '>~i\', \'<br /><br />\', \'$1\') . \'
}
$form_message = implode('', $parts);
}
$form_message = preg_replace('~<br ?/?' . '>~i', "\n", $form_message);
// Remove any nested quotes, if necessary.
if (!empty($modSettings['removeNestedQuotes']))
$form_message = preg_replace(array('~\n?\[quote.*?\].+?\[/quote\]\n?~is', '~^\n~', '~\[/quote\]~'), '', $form_message);
// Add a quote string on the front and end.
$form_message = '
Quote from: ' . $mname . ' link=topic=' . $topic . '.msg' . (int) $_REQUEST['quote'. '#msg' . (int) $_REQUEST['quote'] . ' date=' . $mdate . ']' . "\n" . rtrim($form_message) . "\n" . '';
}
// Posting a reply without a quote?
elseif (!empty($topic) && empty($_REQUEST['quote']))
{
// Get the first message's subject.
$form_subject = $first_subject;
// Add 'Re: ' to the front of the subject.
if (trim($context['response_prefix']) != '' && $form_subject != '' && $smcFunc['strpos']($form_subject, trim($context['response_prefix'])) !== 0)
$form_subject = $context['response_prefix'] . $form_subject;
// Censor the subject.
censorText($form_subject);
$form_message = '';
}
else
{
$form_subject = isset($_GET['subject']) ? $_GET['subject'] : '';
$form_message = '';
}
}
// !!! This won't work if you're posting an event.
if (allowedTo('post_attachment') || allowedTo('post_unapproved_attachments'))
{
if (empty($_SESSION['temp_attachments']))
$_SESSION['temp_attachments'] = array();
if (!empty($modSettings['currentAttachmentUploadDir']))
{
if (!is_array($modSettings['attachmentUploadDir']))
$modSettings['attachmentUploadDir'] = unserialize($modSettings['attachmentUploadDir']);
// Just use the current path for temp files.
$current_attach_dir = $modSettings['attachmentUploadDir'][$modSettings['currentAttachmentUploadDir']];
}
else
$current_attach_dir = $modSettings['attachmentUploadDir'];
// If this isn't a new post, check the current attachments.
if (isset($_REQUEST['msg']))
{
$request = $smcFunc['db_query']('', '
SELECT COUNT(*), SUM(size)
FROM {db_prefix}attachments
WHERE id_msg = {int:id_msg}
AND attachment_type = {int:attachment_type}',
array(
'id_msg' => (int) $_REQUEST['msg'],
'attachment_type' => 0,
)
);
list ($quantity, $total_size) = $smcFunc['db_fetch_row']($request);
$smcFunc['db_free_result']($request);
}
else
{
$quantity = 0;
$total_size = 0;
}
$temp_start = 0;
if (!empty($_SESSION['temp_attachments']))
foreach ($_SESSION['temp_attachments'] as $attachID => $name)
{
$temp_start++;
if (preg_match('~^post_tmp_' . $user_info['id'] . '_\d+$~', $attachID) == 0)
{
unset($_SESSION['temp_attachments'][$attachID]);
continue;
}
if (!empty($_POST['attach_del']) && !in_array($attachID, $_POST['attach_del']))
{
$deleted_attachments = true;
unset($_SESSION['temp_attachments'][$attachID]);
@unlink($current_attach_dir . '/' . $attachID);
continue;
}
$quantity++;
$total_size += filesize($current_attach_dir . '/' . $attachID);
$context['current_attachments'][] = array(
'name' => $name,
'id' => $attachID,
'approved' => 1,
);
}
if (!empty($_POST['attach_del']))
{
$del_temp = array();
foreach ($_POST['attach_del'] as $i => $dummy)
$del_temp[$i] = (int) $dummy;
foreach ($context['current_attachments'] as $k => $dummy)
if (!in_array($dummy['id'], $del_temp))
{
$context['current_attachments'][$k]['unchecked'] = true;
$deleted_attachments = !isset($deleted_attachments) || is_bool($deleted_attachments) ? 1 : $deleted_attachments + 1;
$quantity--;
}
}
if (!empty($_FILES['attachment']))
foreach ($_FILES['attachment']['tmp_name'] as $n => $dummy)
{
if ($_FILES['attachment']['name'][$n] == '')
continue;
if (!is_uploaded_file($_FILES['attachment']['tmp_name'][$n]) || (@ini_get('open_basedir') == '' && !file_exists($_FILES['attachment']['tmp_name'][$n])))
fatal_lang_error('attach_timeout', 'critical');
if (!empty($modSettings['attachmentSizeLimit']) && $_FILES['attachment']['size'][$n] > $modSettings['attachmentSizeLimit'] * 1024)
fatal_lang_error('file_too_big', false, array($modSettings['attachmentSizeLimit']));
$quantity++;
if (!empty($modSettings['attachmentNumPerPostLimit']) && $quantity > $modSettings['attachmentNumPerPostLimit'])
fatal_lang_error('attachments_limit_per_post', false, array($modSettings['attachmentNumPerPostLimit']));
$total_size += $_FILES['attachment']['size'][$n];
if (!empty($modSettings['attachmentPostLimit']) && $total_size > $modSettings['attachmentPostLimit'] * 1024)
fatal_lang_error('file_too_big', false, array($modSettings['attachmentPostLimit']));
if (!empty($modSettings['attachmentCheckExtensions']))
{
if (!in_array(strtolower(substr(strrchr($_FILES['attachment']['name'][$n], '.'), 1)), explode(',', strtolower($modSettings['attachmentExtensions']))))
fatal_error($_FILES['attachment']['name'][$n] . '.
' . $txt['cant_upload_type'] . ' ' . $modSettings['attachmentExtensions'] . '.', false);
}
if (!empty($modSettings['attachmentDirSizeLimit']))
{
// Make sure the directory isn't full.
$dirSize = 0;
$dir = @opendir($current_attach_dir) or fatal_lang_error('cant_access_upload_path', 'critical');
while ($file = readdir($dir))
{
if ($file == '.' || $file == '..')
continue;
if (preg_match('~^post_tmp_\d+_\d+$~', $file) != 0)
{
// Temp file is more than 5 hours old!
if (filemtime($current_attach_dir . '/' . $file) < time() - 18000)
@unlink($current_attach_dir . '/' . $file);
continue;
}
$dirSize += filesize($current_attach_dir . '/' . $file);
}
closedir($dir);
// Too big! Maybe you could zip it or something...
if ($_FILES['attachment']['size'][$n] + $dirSize > $modSettings['attachmentDirSizeLimit'] * 1024)
fatal_lang_error('ran_out_of_space');
}
if (!is_writable($current_attach_dir))
fatal_lang_error('attachments_no_write', 'critical');
$attachID = 'post_tmp_' . $user_info['id'] . '_' . $temp_start++;
$_SESSION['temp_attachments'][$attachID] = basename($_FILES['attachment']['name'][$n]);
$context['current_attachments'][] = array(
'name' => basename($_FILES['attachment']['name'][$n]),
'id' => $attachID,
'approved' => 1,
);
$destName = $current_attach_dir . '/' . $attachID;
if (!move_uploaded_file($_FILES['attachment']['tmp_name'][$n], $destName))
fatal_lang_error('attach_timeout', 'critical');
@chmod($destName, 0644);
}
}
// If we are coming here to make a reply, and someone has already replied... make a special warning message.
if (isset($newRepliesError))
{
$context['post_error']['messages'][] = $newRepliesError == 1 ? $txt['error_new_reply'] : $txt['error_new_replies'];
$context['error_type'] = 'minor';
}
if (isset($oldTopicError))
{
$context['post_error']['messages'][] = sprintf($txt['error_old_topic'], $modSettings['oldTopicDays']);
$context['error_type'] = 'minor';
}
// What are you doing? Posting a poll, modifying, previewing, new post, or reply...
if (isset($_REQUEST['poll']))
$context['page_title'] = $txt['new_poll'];
elseif ($context['make_event'])
$context['page_title'] = $context['event']['id'] == -1 ? $txt['calendar_post_event'] : $txt['calendar_edit'];
elseif (isset($_REQUEST['msg']))
$context['page_title'] = $txt['modify_msg'];
elseif (isset($_REQUEST['subject'], $context['preview_subject']))
$context['page_title'] = $txt['preview'] . ' - ' . strip_tags($context['preview_subject']);
elseif (empty($topic))
$context['page_title'] = $txt['start_new_topic'];
else
$context['page_title'] = $txt['post_reply'];
// Build the link tree.
if (empty($topic))
$context['linktree'][] = array(
'name' => '' . $txt['start_new_topic'] . ''
);
else
$context['linktree'][] = array(
'url' => $scripturl . '?topic=' . $topic . '.' . $_REQUEST['start'],
'name' => $form_subject,
'extra_before' => '<span' . ($settings['linktree_inline'] ? ' class="smalltext"' : '') . '><strong class="nav">' . $context['page_title'] . ' ( </span>',
'extra_after' => '<span' . ($settings['linktree_inline'] ? ' class="smalltext"' : '') . '><strong class="nav"> )</span>'
);
// Give wireless a linktree url to the post screen, so that they can switch to full version.
if (WIRELESS)
$context['linktree'][count($context['linktree']) - 1]['url'] = $scripturl . '?action=post;' . (!empty($topic) ? 'topic=' . $topic : 'board=' . $board) . '.' . $_REQUEST['start'] . (isset($_REQUEST['msg']) ? ';msg=' . (int) $_REQUEST['msg'] . ';' . $context['session_var'] . '=' . $context['session_id'] : '') ;
// If they've unchecked an attachment, they may still want to attach that many more files, but don't allow more than num_allowed_attachments.
// !!! This won't work if you're posting an event.
$context['num_allowed_attachments'] = empty($modSettings['attachmentNumPerPostLimit']) ? 50 : min($modSettings['attachmentNumPerPostLimit'] - count($context['current_attachments']) + (isset($deleted_attachments) ? $deleted_attachments : 0), $modSettings['attachmentNumPerPostLimit']);
$context['can_post_attachment'] = !empty($modSettings['attachmentEnable']) && $modSettings['attachmentEnable'] == 1 && (allowedTo('post_attachment') || ($modSettings['postmod_active'] && allowedTo('post_unapproved_attachments'))) && $context['num_allowed_attachments'] > 0;
$context['can_post_attachment_unapproved'] = allowedTo('post_attachment');
$context['subject'] = addcslashes($form_subject, '"');
$context['message'] = str_replace(array('"', '<', '>', ' '), array('"', '<', '>', ' '), $form_message);
// Needed for the editor and message icons.
require_once($sourcedir . '/Subs-Editor.php');
// Now create the editor.
$editorOptions = array(
'id' => 'message',
'value' => $context['message'],
'labels' => array(
'post_button' => $context['submit_label'],
),
// We do XML preview here.
'preview_type' => 2,
);
create_control_richedit($editorOptions);
// Store the ID.
$context['post_box_name'] = $editorOptions['id'];
$context['attached'] = '';
$context['make_poll'] = isset($_REQUEST['poll']);
// Message icons - customized icons are off?
$context['icons'] = getMessageIcons($board);
if (!empty($context['icons']))
$context['icons'][count($context['icons']) - 1]['is_last'] = true;
$context['icon_url'] = '';
for ($i = 0, $n = count($context['icons']); $i < $n; $i++)
{
$context['icons'][$i]['selected'] = $context['icon'] == $context['icons'][$i]['value'];
if ($context['icons'][$i]['selected'])
$context['icon_url'] = $context['icons'][$i]['url'];
}
if (empty($context['icon_url']))
{
$context['icon_url'] = $settings[file_exists($settings['theme_dir'] . '/images/post/' . $context['icon'] . '.gif') ? 'images_url' : 'default_images_url'] . '/post/' . $context['icon'] . '.gif';
array_unshift($context['icons'], array(
'value' => $context['icon'],
'name' => $txt['current_icon'],
'url' => $context['icon_url'],
'is_last' => empty($context['icons']),
'selected' => true,
));
}
if (!empty($topic) && !empty($modSettings['topicSummaryPosts']))
getTopic();
// If the user can post attachments prepare the warning labels.
if ($context['can_post_attachment'])
{
$context['allowed_extensions'] = strtr($modSettings['attachmentExtensions'], array(',' => ', '));
$context['attachment_restrictions'] = array();
$attachmentRestrictionTypes = array('attachmentNumPerPostLimit', 'attachmentPostLimit', 'attachmentSizeLimit');
foreach ($attachmentRestrictionTypes as $type)
if (!empty($modSettings[$type]))
$context['attachment_restrictions'][] = sprintf($txt['attach_restrict_' . $type], $modSettings[$type]);
}
$context['back_to_topic'] = isset($_REQUEST['goback']) || (isset($_REQUEST['msg']) && !isset($_REQUEST['subject']));
$context['show_additional_options'] = !empty($_POST['additional_options']) || !empty($_SESSION['temp_attachments']) || !empty($deleted_attachments);
$context['is_new_topic'] = empty($topic);
$context['is_new_post'] = !isset($_REQUEST['msg']);
$context['is_first_post'] = $context['is_new_topic'] || (isset($_REQUEST['msg']) && $_REQUEST['msg'] == $id_first_msg);
// Do we need to show the visual verification image?
$context['require_verification'] = !$user_info['is_mod'] && !$user_info['is_admin'] && !empty($modSettings['posts_require_captcha']) && ($user_info['posts'] < $modSettings['posts_require_captcha'] || ($user_info['is_guest'] && $modSettings['posts_require_captcha'] == -1));
if ($context['require_verification'])
{
require_once($sourcedir . '/Subs-Editor.php');
$verificationOptions = array(
'id' => 'post',
);
$context['require_verification'] = create_control_verification($verificationOptions);
$context['visual_verification_id'] = $verificationOptions['id'];
}
// If they came from quick reply, and have to enter verification details, give them some notice.
if (!empty($_REQUEST['from_qr']) && !empty($context['require_verification']))
{
$context['post_error']['messages'][] = $txt['enter_verification_details'];
$context['error_type'] = 'minor';
}
// WYSIWYG only works if BBC is enabled
$modSettings['disable_wysiwyg'] = !empty($modSettings['disable_wysiwyg']) || empty($modSettings['enableBBC']);
// Register this form in the session variables.
checkSubmitOnce('register');
// Finally, load the template.
if (WIRELESS)
$context['sub_template'] = WIRELESS_PROTOCOL . '_post';
elseif (!isset($_REQUEST['xml']))
loadTemplate('Post');
}
function Post2()
{
global $board, $topic, $txt, $modSettings, $sourcedir, $context;
global $user_info, $board_info, $options, $smcFunc;
// No need!
$context['robot_no_index'] = true;
// If we came from WYSIWYG then turn it back into BBC regardless.
if (!empty($_REQUEST['message_mode']) && isset($_REQUEST['message']))
{
require_once($sourcedir . '/Subs-Editor.php');
$_REQUEST['message'] = html_to_bbc($_REQUEST['message']);
// We need to unhtml it now as it gets done shortly.
$_REQUEST['message'] = un_htmlspecialchars($_REQUEST['message']);
// We need this for everything else.
$_POST['message'] = $_REQUEST['message'];
}
// Previewing? Go back to start.
if (isset($_REQUEST['preview']))
return Post();
// Prevent double submission of this form.
checkSubmitOnce('check');
// No errors as yet.
$post_errors = array();
// If the session has timed out, let the user re-submit their form.
if (checkSession('post', '', false) != '')
$post_errors[] = 'session_timeout';
// Wrong verification code?
if (!$user_info['is_admin'] && !$user_info['is_mod'] && !empty($modSettings['posts_require_captcha']) && ($user_info['posts'] < $modSettings['posts_require_captcha'] || ($user_info['is_guest'] && $modSettings['posts_require_captcha'] == -1)))
{
require_once($sourcedir . '/Subs-Editor.php');
$verificationOptions = array(
'id' => 'post',
);
$context['require_verification'] = create_control_verification($verificationOptions, empty($_REQUEST['from_qr']));
// If it's someone from quick reply, don't show them errors.
if (!empty($_REQUEST['from_qr']))
{
$context['post_error']['need_qr_verification'] = true;
return Post();
}
elseif (is_array($context['require_verification']))
$post_errors = array_merge($post_errors, $context['require_verification']);
}
require_once($sourcedir . '/Subs-Post.php');
loadLanguage('Post');
// If this isn't a new topic load the topic info that we need.
if (!empty($topic))
{
$request = $smcFunc['db_query']('', '
SELECT locked, is_sticky, id_poll, approved, num_replies, id_first_msg, id_member_started, id_board
FROM {db_prefix}topics
WHERE id_topic = {int:current_topic}
LIMIT 1',
array(
'current_topic' => $topic,
)
);
$topic_info = $smcFunc['db_fetch_assoc']($request);
$smcFunc['db_free_result']($request);
// Though the topic should be there, it might have vanished.
if (!is_array($topic_info))
fatal_lang_error('topic_doesnt_exist');
// Did this topic suddenly move? Just checking...
if ($topic_info['id_board'] != $board)
fatal_lang_error('not_a_topic');
}
// Replying to a topic?
if (!empty($topic) && !isset($_REQUEST['msg']))
{
// Don't allow a post if it's locked.
if ($topic_info['locked'] != 0 && !allowedTo('moderate_board'))
fatal_lang_error('topic_locked', false);
// Sorry, multiple polls aren't allowed... yet. You should stop giving me ideas :P.
if (isset($_REQUEST['poll']) && $topic_info['id_poll'] > 0)
unset($_REQUEST['poll']);
// Do the permissions and approval stuff...
$becomesApproved = true;
if ($topic_info['id_member_started'] != $user_info['id'])
{
if ($modSettings['postmod_active'] && allowedTo('post_unapproved_replies_any') && !allowedTo('post_reply_any'))
$becomesApproved = false;
else
isAllowedTo('post_reply_any');
}
elseif (!allowedTo('post_reply_any'))
{
if ($modSettings['postmod_active'] && allowedTo('post_unapproved_replies_own') && !allowedTo('post_reply_own'))
$becomesApproved = false;
else
isAllowedTo('post_reply_own');
}
if (isset($_POST['lock']))
{
// Nothing is changed to the lock.
if ((empty($topic_info['locked']) && empty($_POST['lock'])) || (!empty($_POST['lock']) && !empty($topic_info['locked'])))
unset($_POST['lock']);
// You're have no permission to lock this topic.
elseif (!allowedTo(array('lock_any', 'lock_own')) || (!allowedTo('lock_any') && $user_info['id'] != $topic_info['id_member_started']))
unset($_POST['lock']);
// You are allowed to (un)lock your own topic only.
elseif (!allowedTo('lock_any'))
{
// You cannot override a moderator lock.
if ($topic_info['locked'] == 1)
unset($_POST['lock']);
else
$_POST['lock'] = empty($_POST['lock']) ? 0 : 2;
}
// Hail mighty moderator, (un)lock this topic immediately.
else
$_POST['lock'] = empty($_POST['lock']) ? 0 : 1;
}
// So you wanna (un)sticky this...let's see.
if (isset($_POST['sticky']) && (empty($modSettings['enableStickyTopics']) || $_POST['sticky'] == $topic_info['is_sticky'] || !allowedTo('make_sticky')))
unset($_POST['sticky']);
// If the number of replies has changed, if the setting is enabled, go back to Post() - which handles the error.
$newReplies = isset($_POST['num_replies']) && $topic_info['num_replies'] > $_POST['num_replies'] ? $topic_info['num_replies'] - $_POST['num_replies'] : 0;
if (empty($options['no_new_reply_warning']) && !empty($newReplies))
{
$_REQUEST['preview'] = true;
return Post();
}
$posterIsGuest = $user_info['is_guest'];
}
// Posting a new topic.
elseif (empty($topic))
{
// Now don't be silly, new topics will get their own id_msg soon enough.
unset($_REQUEST['msg'], $_POST['msg'], $_GET['msg']);
// Do like, the permissions, for safety and stuff...
$becomesApproved = true;
if ($modSettings['postmod_active'] && !allowedTo('post_new') && allowedTo('post_unapproved_topics'))
$becomesApproved = false;
else
isAllowedTo('post_new');
if (isset($_POST['lock']))
{
// New topics are by default not locked.
if (empty($_POST['lock']))
unset($_POST['lock']);
// Besides, you need permission.
elseif (!allowedTo(array('lock_any', 'lock_own')))
unset($_POST['lock']);
// A moderator-lock (1) can override a user-lock (2).
else
$_POST['lock'] = allowedTo('lock_any') ? 1 : 2;
}
if (isset($_POST['sticky']) && (empty($modSettings['enableStickyTopics']) || empty($_POST['sticky']) || !allowedTo('make_sticky')))
unset($_POST['sticky']);
$posterIsGuest = $user_info['is_guest'];
}
// Modifying an existing message?
elseif (isset($_REQUEST['msg']) && !empty($topic))
{
$_REQUEST['msg'] = (int) $_REQUEST['msg'];
$request = $smcFunc['db_query']('', '
SELECT id_member, poster_name, poster_email, poster_time, approved
FROM {db_prefix}messages
WHERE id_msg = {int:id_msg}
LIMIT 1',
array(
'id_msg' => $_REQUEST['msg'],
)
);
if ($smcFunc['db_num_rows']($request) == 0)
fatal_lang_error('cant_find_messages', false);
$row = $smcFunc['db_fetch_assoc']($request);
$smcFunc['db_free_result']($request);
if (!empty($topic_info['locked']) && !allowedTo('moderate_board'))
fatal_lang_error('topic_locked', false);
if (isset($_POST['lock']))
{
// Nothing changes to the lock status.
if ((empty($_POST['lock']) && empty($topic_info['locked'])) || (!empty($_POST['lock']) && !empty($topic_info['locked'])))
unset($_POST['lock']);
// You're simply not allowed to (un)lock this.
elseif (!allowedTo(array('lock_any', 'lock_own')) || (!allowedTo('lock_any') && $user_info['id'] != $topic_info['id_member_started']))
unset($_POST['lock']);
// You're only allowed to lock your own topics.
elseif (!allowedTo('lock_any'))
{
// You're not allowed to break a moderator's lock.
if ($topic_info['locked'] == 1)
unset($_POST['lock']);
// Lock it with a soft lock or unlock it.
else
$_POST['lock'] = empty($_POST['lock']) ? 0 : 2;
}
// You must be the moderator.
else
$_POST['lock'] = empty($_POST['lock']) ? 0 : 1;
}
// Change the sticky status of this topic?
if (isset($_POST['sticky']) && (!allowedTo('make_sticky') || $_POST['sticky'] == $topic_info['is_sticky']))
unset($_POST['sticky']);
if ($row['id_member'] == $user_info['id'] && !allowedTo('modify_any'))
{
if ((!$modSettings['postmod_active'] || $row['approved']) && !empty($modSettings['edit_disable_time']) && $row['poster_time'] + ($modSettings['edit_disable_time'] + 5) * 60 < time())
fatal_lang_error('modify_post_time_passed', false);
elseif ($topic_info['id_member_started'] == $user_info['id'] && !allowedTo('modify_own'))
isAllowedTo('modify_replies');
else
isAllowedTo('modify_own');
}
elseif ($topic_info['id_member_started'] == $user_info['id'] && !allowedTo('modify_any'))
{
isAllowedTo('modify_replies');
// If you're modifying a reply, I say it better be logged...
$moderationAction = true;
}
else
{
isAllowedTo('modify_any');
// Log it, assuming you're not modifying your own post.
if ($row['id_member'] != $user_info['id'])
$moderationAction = true;
}
$posterIsGuest = empty($row['id_member']);
// Can they approve it?
$can_approve = allowedTo('approve_posts');
$becomesApproved = $modSettings['postmod_active'] ? ($can_approve && !$row['approved'] ? (!empty($_REQUEST['approve']) ? 1 : 0) : $row['approved']) : 1;
$approve_has_changed = $row['approved'] != $becomesApproved;
if (!allowedTo('moderate_forum') || !$posterIsGuest)
{
$_POST['guestname'] = $row['poster_name'];
$_POST['email'] = $row['poster_email'];
}
}
// If the poster is a guest evaluate the legality of name and email.
if ($posterIsGuest)
{
$_POST['guestname'] = !isset($_POST['guestname']) ? '' : trim($_POST['guestname']);
$_POST['email'] = !isset($_POST['email']) ? '' : trim($_POST['email']);
if ($_POST['guestname'] == '' || $_POST['guestname'] == '_')
$post_errors[] = 'no_name';
if ($smcFunc['strlen']($_POST['guestname']) > 25)
$post_errors[] = 'long_name';
if (empty($modSettings['guest_post_no_email']))
{
// Only check if they changed it!
if (!isset($row) || $row['poster_email'] != $_POST['email'])
{
if (!allowedTo('moderate_forum') && (!isset($_POST['email']) || $_POST['email'] == ''))
$post_errors[] = 'no_email';
if (!allowedTo('moderate_forum') && preg_match('~^[0-9A-Za-z=_+\-/][0-9A-Za-z=_\'+\-/\.]*@[\w\-]+(\.[\w\-]+)*(\.[\w]{2,6})$~', $_POST['email']) == 0)
$post_errors[] = 'bad_email';
}
// Now make sure this email address is not banned from posting.
isBannedEmail($_POST['email'], 'cannot_post', sprintf($txt['you_are_post_banned'], $txt['guest_title']));
}
// In case they are making multiple posts this visit, help them along by storing their name.
if (empty($post_errors))
{
$_SESSION['guest_name'] = $_POST['guestname'];
$_SESSION['guest_email'] = $_POST['email'];
}
}
// Check the subject and message.
if (!isset($_POST['subject']) || $smcFunc['htmltrim']($smcFunc['htmlspecialchars']($_POST['subject'])) === '')
$post_errors[] = 'no_subject';
if (!isset($_POST['message']) || $smcFunc['htmltrim']($smcFunc['htmlspecialchars']($_POST['message']), ENT_QUOTES) === '')
$post_errors[] = 'no_message';
elseif (!empty($modSettings['max_messageLength']) && $smcFunc['strlen']($_POST['message']) > $modSettings['max_messageLength'])
$post_errors[] = 'long_message';
else
{
// Prepare the message a bit for some additional testing.
$_POST['message'] = $smcFunc['htmlspecialchars']($_POST['message'], ENT_QUOTES);
// Preparse code. (Zef)
if ($user_info['is_guest'])
$user_info['name'] = $_POST['guestname'];
preparsecode($_POST['message']);
// Let's see if there's still some content left without the tags.
if ($smcFunc['htmltrim'](strip_tags(parse_bbc($_POST['message'], false), '<img>')) === '' && (!allowedTo('admin_forum') || strpos($_POST['message'], '[html]') === false))
$post_errors[] = 'no_message';
}
if (isset($_POST['calendar']) && !isset($_REQUEST['deleteevent']) && $smcFunc['htmltrim']($_POST['evtitle']) === '')
$post_errors[] = 'no_event';
// You are not!
if (isset($_POST['message']) && strtolower($_POST['message']) == 'i am the administrator.' && !$user_info['is_admin'])
fatal_error('Knave! Masquerader! Charlatan!', false);
// Validate the poll...
if (isset($_REQUEST['poll']) && $modSettings['pollMode'] == '1')
{
if (!empty($topic) && !isset($_REQUEST['msg']))
fatal_lang_error('no_access', false);
// This is a new topic... so it's a new poll.
if (empty($topic))
isAllowedTo('poll_post');
// Can you add to your own topics?
elseif ($user_info['id'] == $topic_info['id_member_started'] && !allowedTo('poll_add_any'))
isAllowedTo('poll_add_own');
// Can you add polls to any topic, then?
else
isAllowedTo('poll_add_any');
if (!isset($_POST['question']) || trim($_POST['question']) == '')
$post_errors[] = 'no_question';
$_POST['options'] = empty($_POST['options']) ? array() : htmltrim__recursive($_POST['options']);
// Get rid of empty ones.
foreach ($_POST['options'] as $k => $option)
if ($option == '')
unset($_POST['options'][$k], $_POST['options'][$k]);
// What are you going to vote between with one choice?!?
if (count($_POST['options']) < 2)
$post_errors[] = 'poll_few';
}
if ($posterIsGuest)
{
// If user is a guest, make sure the chosen name isn't taken.
require_once($sourcedir . '/Subs-Members.php');
if (isReservedName($_POST['guestname'], 0, true, false) && (!isset($row['poster_name']) || $_POST['guestname'] != $row['poster_name']))
$post_errors[] = 'bad_name';
}
// If the user isn't a guest, get his or her name and email.
elseif (!isset($_REQUEST['msg']))
{
$_POST['guestname'] = $user_info['username'];
$_POST['email'] = $user_info['email'];
}
// Any mistakes?
if (!empty($post_errors))
{
loadLanguage('Errors');
// Previewing.
$_REQUEST['preview'] = true;
$context['post_error'] = array('messages' => array());
foreach ($post_errors as $post_error)
{
$context['post_error'][$post_error] = true;
if ($post_error == 'long_message')
$txt['error_' . $post_error] = sprintf($txt['error_' . $post_error], $modSettings['max_messageLength']);
$context['post_error']['messages'][] = $txt['error_' . $post_error];
}
return Post();
}
// Make sure the user isn't spamming the board.
if (!isset($_REQUEST['msg']))
spamProtection('post');
// At about this point, we're posting and that's that.
ignore_user_abort(true);
@set_time_limit(300);
// Add special html entities to the subject, name, and email.
$_POST['subject'] = strtr($smcFunc['htmlspecialchars']($_POST['subject']), array("\r" => '', "\n" => '', "\t" => ''));
$_POST['guestname'] = htmlspecialchars($_POST['guestname']);
$_POST['email'] = htmlspecialchars($_POST['email']);
// At this point, we want to make sure the subject isn't too long.
if ($smcFunc['strlen']($_POST['subject']) > 100)
$_POST['subject'] = $smcFunc['substr']($_POST['subject'], 0, 100);
// Make the poll...
if (isset($_REQUEST['poll']))
{
// Make sure that the user has not entered a ridiculous number of
#93
PasteBin / Paste-1266769879:v:use_geshi-1...
Last post by SleePy - Feb 21, 2010, 04:31 PM function getLegacyAttachmentFilename($filename, $attachment_id)
{
// Remove special accented characters - ie. sÌ (because they won't write to the filesystem well.)
$clean_name = strtr($filename, 'äéöûü¿¡¬√Æ'≈«»… ÀÃÕÅ'Å"â€"“â€â€˜â€™Ã·Ã¿Å¸â,,â,¬â€¹â€ºâ€¡Â·â€šâ€žâ€°Ã,ÃËÈÃÃŽÃÃŒÃ"Ã"Ã'ÚÛÙıˆ¯˘˙˚¸Ëˇ', 'SZszYAAAAAACEEEEIIIINOOOOOOUUUUYaaaaaaceeeeiiiinoooooouuuuyy');
$clean_name = strtr($clean_name, array('ï¬' => 'TH', 'Ë›' => 'th', 'â€"' => 'DH', '' => 'dh', 'ï¬,' => 'ss', 'Ã¥' => 'OE', 'ú' => 'oe', '∆' => 'AE', 'Ê' => 'ae', 'µ' => 'u'));
// Get rid of dots, spaces, and other weird characters.
$clean_name = preg_replace(array('/\s/', '/[^\w_\.\-]/'), array('_', ''), $clean_name);
return $attachment_id . '_' . strtr($clean_name, '.', '_') . md5($clean_name);
}
function getLegacyAttachmentFilenameNew($filename, $attachment_id)
{
// Remove special accented characters - ie. sÌ (because they won't write to the filesystem well.)
$clean_name = strtr($filename, array(chr(138) => 'S', chr(142) => 'Z', chr(154) => 's', chr(158) => 'z', chr(159) => 'Y', chr(192) => 'A', chr(193) => 'A', chr(194) => 'A', chr(195) => 'A', chr(196) => 'A', chr(197) => 'A', chr(199) => 'C', chr(200) => 'E', chr(201) => 'E', chr(202) => 'E', chr(203) => 'E', chr(204) => 'I', chr(205) => 'I', chr(206) => 'I', chr(207) => 'I', chr(209) => 'N', chr(210) => 'O', chr(211) => 'O', chr(212) => 'O', chr(213) => 'O', chr(214) => 'O', chr(216) => 'O', chr(217) => 'U', chr(218) => 'U', chr(219) => 'U', chr(220) => 'U', chr(221) => 'Y', chr(224) => 'a', chr(225) => 'a', chr(226) => 'a', chr(227) => 'a', chr(228) => 'a', chr(229) => 'a', chr(231) => 'c', chr(232) => 'e', chr(233) => 'e', chr(234) => 'e', chr(235) => 'e', chr(236) => 'i', chr(237) => 'i', chr(238) => 'i', chr(239) => 'i', chr(241) => 'n', chr(242) => 'o', chr(243) => 'o', chr(244) => 'o', chr(245) => 'o', chr(246) => 'o', chr(248) => 'o', chr(249) => 'u', chr(250) => 'u', chr(251) => 'u', chr(252) => 'u', chr(253) => 'y', chr(255) => 'y'));
$clean_name = strtr($clean_name, array(chr(222) => 'TH', chr(254) => 'th', chr(208) => 'DH', chr(240) => 'dh', chr(223) => 'ss', chr(140) => 'OE', chr(156) => 'oe', chr(198) => 'AE', chr(230) => 'ae', chr(181) => 'u'));
// Get rid of dots, spaces, and other weird characters.
$clean_name = preg_replace(array('/\s/', '/[^\w_\.\-]/'), array('_', ''), $clean_name);
return $attachment_id . '_' . strtr($clean_name, '.', '_') . md5($clean_name);
}
{
// Remove special accented characters - ie. sÌ (because they won't write to the filesystem well.)
$clean_name = strtr($filename, 'äéöûü¿¡¬√Æ'≈«»… ÀÃÕÅ'Å"â€"“â€â€˜â€™Ã·Ã¿Å¸â,,â,¬â€¹â€ºâ€¡Â·â€šâ€žâ€°Ã,ÃËÈÃÃŽÃÃŒÃ"Ã"Ã'ÚÛÙıˆ¯˘˙˚¸Ëˇ', 'SZszYAAAAAACEEEEIIIINOOOOOOUUUUYaaaaaaceeeeiiiinoooooouuuuyy');
$clean_name = strtr($clean_name, array('ï¬' => 'TH', 'Ë›' => 'th', 'â€"' => 'DH', '' => 'dh', 'ï¬,' => 'ss', 'Ã¥' => 'OE', 'ú' => 'oe', '∆' => 'AE', 'Ê' => 'ae', 'µ' => 'u'));
// Get rid of dots, spaces, and other weird characters.
$clean_name = preg_replace(array('/\s/', '/[^\w_\.\-]/'), array('_', ''), $clean_name);
return $attachment_id . '_' . strtr($clean_name, '.', '_') . md5($clean_name);
}
function getLegacyAttachmentFilenameNew($filename, $attachment_id)
{
// Remove special accented characters - ie. sÌ (because they won't write to the filesystem well.)
$clean_name = strtr($filename, array(chr(138) => 'S', chr(142) => 'Z', chr(154) => 's', chr(158) => 'z', chr(159) => 'Y', chr(192) => 'A', chr(193) => 'A', chr(194) => 'A', chr(195) => 'A', chr(196) => 'A', chr(197) => 'A', chr(199) => 'C', chr(200) => 'E', chr(201) => 'E', chr(202) => 'E', chr(203) => 'E', chr(204) => 'I', chr(205) => 'I', chr(206) => 'I', chr(207) => 'I', chr(209) => 'N', chr(210) => 'O', chr(211) => 'O', chr(212) => 'O', chr(213) => 'O', chr(214) => 'O', chr(216) => 'O', chr(217) => 'U', chr(218) => 'U', chr(219) => 'U', chr(220) => 'U', chr(221) => 'Y', chr(224) => 'a', chr(225) => 'a', chr(226) => 'a', chr(227) => 'a', chr(228) => 'a', chr(229) => 'a', chr(231) => 'c', chr(232) => 'e', chr(233) => 'e', chr(234) => 'e', chr(235) => 'e', chr(236) => 'i', chr(237) => 'i', chr(238) => 'i', chr(239) => 'i', chr(241) => 'n', chr(242) => 'o', chr(243) => 'o', chr(244) => 'o', chr(245) => 'o', chr(246) => 'o', chr(248) => 'o', chr(249) => 'u', chr(250) => 'u', chr(251) => 'u', chr(252) => 'u', chr(253) => 'y', chr(255) => 'y'));
$clean_name = strtr($clean_name, array(chr(222) => 'TH', chr(254) => 'th', chr(208) => 'DH', chr(240) => 'dh', chr(223) => 'ss', chr(140) => 'OE', chr(156) => 'oe', chr(198) => 'AE', chr(230) => 'ae', chr(181) => 'u'));
// Get rid of dots, spaces, and other weird characters.
$clean_name = preg_replace(array('/\s/', '/[^\w_\.\-]/'), array('_', ''), $clean_name);
return $attachment_id . '_' . strtr($clean_name, '.', '_') . md5($clean_name);
}
#94
PasteBin / Paste-1266769803:v:use_geshi-1...
Last post by SleePy - Feb 21, 2010, 04:30 PM function getLegacyAttachmentFilenameNew($filename, $attachment_id)
{
// Remove special accented characters - ie. sÌ (because they won't write to the filesystem well.)
$clean_name = strtr($filename, array(chr(138) => 'S', chr(142) => 'Z', chr(154) => 's', chr(158) => 'z', chr(159) => 'Y', chr(192) => 'A', chr(193) => 'A', chr(194) => 'A', chr(195) => 'A', chr(196) => 'A', chr(197) => 'A', chr(199) => 'C', chr(200) => 'E', chr(201) => 'E', chr(202) => 'E', chr(203) => 'E', chr(204) => 'I', chr(205) => 'I', chr(206) => 'I', chr(207) => 'I', chr(209) => 'N', chr(210) => 'O', chr(211) => 'O', chr(212) => 'O', chr(213) => 'O', chr(214) => 'O', chr(216) => 'O', chr(217) => 'U', chr(218) => 'U', chr(219) => 'U', chr(220) => 'U', chr(221) => 'Y', chr(224) => 'a', chr(225) => 'a', chr(226) => 'a', chr(227) => 'a', chr(228) => 'a', chr(229) => 'a', chr(231) => 'c', chr(232) => 'e', chr(233) => 'e', chr(234) => 'e', chr(235) => 'e', chr(236) => 'i', chr(237) => 'i', chr(238) => 'i', chr(239) => 'i', chr(241) => 'n', chr(242) => 'o', chr(243) => 'o', chr(244) => 'o', chr(245) => 'o', chr(246) => 'o', chr(248) => 'o', chr(249) => 'u', chr(250) => 'u', chr(251) => 'u', chr(252) => 'u', chr(253) => 'y', chr(255) => 'y'));
$clean_name = strtr($clean_name, array(chr(222) => 'TH', chr(254) => 'th', chr(208) => 'DH', chr(240) => 'dh', chr(223) => 'ss', chr(140) => 'OE', chr(156) => 'oe', chr(198) => 'AE', chr(230) => 'ae', chr(181) => 'u'));
// Get rid of dots, spaces, and other weird characters.
$clean_name = preg_replace(array('/\s/', '/[^\w_\.\-]/'), array('_', ''), $clean_name);
return $attachment_id . '_' . strtr($clean_name, '.', '_') . md5($clean_name);
}
{
// Remove special accented characters - ie. sÌ (because they won't write to the filesystem well.)
$clean_name = strtr($filename, array(chr(138) => 'S', chr(142) => 'Z', chr(154) => 's', chr(158) => 'z', chr(159) => 'Y', chr(192) => 'A', chr(193) => 'A', chr(194) => 'A', chr(195) => 'A', chr(196) => 'A', chr(197) => 'A', chr(199) => 'C', chr(200) => 'E', chr(201) => 'E', chr(202) => 'E', chr(203) => 'E', chr(204) => 'I', chr(205) => 'I', chr(206) => 'I', chr(207) => 'I', chr(209) => 'N', chr(210) => 'O', chr(211) => 'O', chr(212) => 'O', chr(213) => 'O', chr(214) => 'O', chr(216) => 'O', chr(217) => 'U', chr(218) => 'U', chr(219) => 'U', chr(220) => 'U', chr(221) => 'Y', chr(224) => 'a', chr(225) => 'a', chr(226) => 'a', chr(227) => 'a', chr(228) => 'a', chr(229) => 'a', chr(231) => 'c', chr(232) => 'e', chr(233) => 'e', chr(234) => 'e', chr(235) => 'e', chr(236) => 'i', chr(237) => 'i', chr(238) => 'i', chr(239) => 'i', chr(241) => 'n', chr(242) => 'o', chr(243) => 'o', chr(244) => 'o', chr(245) => 'o', chr(246) => 'o', chr(248) => 'o', chr(249) => 'u', chr(250) => 'u', chr(251) => 'u', chr(252) => 'u', chr(253) => 'y', chr(255) => 'y'));
$clean_name = strtr($clean_name, array(chr(222) => 'TH', chr(254) => 'th', chr(208) => 'DH', chr(240) => 'dh', chr(223) => 'ss', chr(140) => 'OE', chr(156) => 'oe', chr(198) => 'AE', chr(230) => 'ae', chr(181) => 'u'));
// Get rid of dots, spaces, and other weird characters.
$clean_name = preg_replace(array('/\s/', '/[^\w_\.\-]/'), array('_', ''), $clean_name);
return $attachment_id . '_' . strtr($clean_name, '.', '_') . md5($clean_name);
}
#95
PasteBin / Paste-1266298370:v:use_geshi-1...
Last post by B - Feb 16, 2010, 05:32 AM 'profile_features' => array(
'title' => $txt['manual_category_profile_features'],
'description' => '',
'areas' => array(
'profile_info' => array(
'label' => $txt['manual_section_profile_info'],
'template' => 'manual_profile_info_summary',
'description' => $txt['manual_entry_profile_info_desc'],
'subsections' => array(
'summary' => array($txt['manual_entry_profile_info_summary'], 'manual_profile_info_summary'),
'posts' => array($txt['manual_entry_profile_info_posts'], 'manual_profile_info_posts'),
'stats' => array($txt['manual_entry_profile_info_stats'], 'manual_profile_info_stats'),
),
),
'title' => $txt['manual_category_profile_features'],
'description' => '',
'areas' => array(
'profile_info' => array(
'label' => $txt['manual_section_profile_info'],
'template' => 'manual_profile_info_summary',
'description' => $txt['manual_entry_profile_info_desc'],
'subsections' => array(
'summary' => array($txt['manual_entry_profile_info_summary'], 'manual_profile_info_summary'),
'posts' => array($txt['manual_entry_profile_info_posts'], 'manual_profile_info_posts'),
'stats' => array($txt['manual_entry_profile_info_stats'], 'manual_profile_info_stats'),
),
),
#96
PasteBin / Paste-1265750641:v:use_geshi-1...
Last post by SleePy-uBuntu - Feb 09, 2010, 09:24 PM SELECT hdt.id_ticket, hdt.id_last_msg, hdt.id_member_started, hdt.id_member_updated, hdt.id_member_assigned,
hdt.subject, hdt.status, hdt.num_replies, hdt.private, hdt.urgency, hdtr_first.poster_name AS ticket_opener, hdtr_last.poster_time,
IFNULL(hdlr.id_msg, 0) AS log_read
FROM smf_helpdesk_tickets AS hdt
INNER JOIN smf_helpdesk_ticket_replies AS hdtr_first ON (hdt.id_first_msg = hdtr_first.id_msg)
INNER JOIN smf_helpdesk_ticket_replies AS hdtr_last ON (hdt.id_last_msg = hdtr_last.id_msg)
LEFT JOIN smf_helpdesk_log_read AS hdlr ON (hdt.id_ticket = hdlr.id_ticket AND hdlr.id_member = 1)
WHERE 1=1
AND status NOT IN(3, 6)
ORDER BY hdtr_last.poster_time
LIMIT 213310, 10
in .../Sources/SimpleDesk.php line 314, which took 10.973104 seconds at 0.13512111 into request.
hdt.subject, hdt.status, hdt.num_replies, hdt.private, hdt.urgency, hdtr_first.poster_name AS ticket_opener, hdtr_last.poster_time,
IFNULL(hdlr.id_msg, 0) AS log_read
FROM smf_helpdesk_tickets AS hdt
INNER JOIN smf_helpdesk_ticket_replies AS hdtr_first ON (hdt.id_first_msg = hdtr_first.id_msg)
INNER JOIN smf_helpdesk_ticket_replies AS hdtr_last ON (hdt.id_last_msg = hdtr_last.id_msg)
LEFT JOIN smf_helpdesk_log_read AS hdlr ON (hdt.id_ticket = hdlr.id_ticket AND hdlr.id_member = 1)
WHERE 1=1
AND status NOT IN(3, 6)
ORDER BY hdtr_last.poster_time
LIMIT 213310, 10
in .../Sources/SimpleDesk.php line 314, which took 10.973104 seconds at 0.13512111 into request.
#97
PasteBin / Paste-1265578909:v:use_geshi-1...
Last post by SleePy - Feb 07, 2010, 09:41 PM// Close bugs.
function svnProjectTools($data, $id_member)
{
global $smcFunc, $sourcedir, $context, $user_profile, $issue, $project;
$project = 2;
if (empty($data->log))
return;
// First, explode all entires by new line.
$entries = explode("\n", $data->log);
$bugs = array();
foreach ($entries as $entry)
{
// Pull out the bug/feature index.
preg_match('~\[[Bug|Feature]+\s+([\d,]+)\]~i', $entry, $matches);
// Nothing to log?
if (empty($matches[1]))
continue;
// Only list them once.
$temp = array_unique(array_map('intval', explode(',', $matches[1])));;
// Dump this into an array whos key is the bug id.
foreach ($temp as $id)
$bugs[$id][] = str_replace($matches[0], 'Revision: ' . $data->revision, $entry);
}
// Mash that multi-dimensional array to a single array.
foreach ($bugs as $id => $bug)
$bugs[$id] = implode("\n", array_unique($bug));
// Still nothing?
if (empty($bugs))
return;
// Some junk we need.
require_once($sourcedir . '/Subs-Post.php');
require_once($sourcedir . '/Subs-Issue.php');
require_once($sourcedir . '/Subs-Project.php');
require_once($sourcedir . '/IssueReport.php');
require_once($sourcedir . '/IssueComment.php');
// Call a few friends.
loadMemberData($id_member);
loadProjectTools();
// Prep the changes.
$posterOptions = array(
'id' => $id_member,
'ip' => $user_profile[$id_member]['member_ip'],
'name' => $data->author,
'email' => $user_profile[$id_member]['email_address'],
);
$issueOptions = array(
'mark_read' => true,
'assignee' => $id_member,
'status' => 5, // Resolved.
);
$commentOptions = array('body' => '');
// Lets do some loops.
foreach ($bugs as $bug => $message)
{
$issue = $bug;
loadIssue();
// Update our body message
$commentOptions['body'] = $smcFunc['htmlspecialchars']($message, ENT_QUOTES);
// Update status and assigne.
$event_data = updateIssue($bug, $issueOptions, $posterOptions, true);
// Fix a Project tracker bug...
if ($event_data === true)
$event_data = array();
// Create a comment.
$id_comment = createComment($project, $bug, $commentOptions, $posterOptions);
$commentOptions['id'] = $id_comment;
// Spam people.
sendIssueNotification(array('id' => $bug, 'project' => $project), $commentOptions, $event_data, 'new_comment', $id_member);
}
}
function svnProjectTools($data, $id_member)
{
global $smcFunc, $sourcedir, $context, $user_profile, $issue, $project;
$project = 2;
if (empty($data->log))
return;
// First, explode all entires by new line.
$entries = explode("\n", $data->log);
$bugs = array();
foreach ($entries as $entry)
{
// Pull out the bug/feature index.
preg_match('~\[[Bug|Feature]+\s+([\d,]+)\]~i', $entry, $matches);
// Nothing to log?
if (empty($matches[1]))
continue;
// Only list them once.
$temp = array_unique(array_map('intval', explode(',', $matches[1])));;
// Dump this into an array whos key is the bug id.
foreach ($temp as $id)
$bugs[$id][] = str_replace($matches[0], 'Revision: ' . $data->revision, $entry);
}
// Mash that multi-dimensional array to a single array.
foreach ($bugs as $id => $bug)
$bugs[$id] = implode("\n", array_unique($bug));
// Still nothing?
if (empty($bugs))
return;
// Some junk we need.
require_once($sourcedir . '/Subs-Post.php');
require_once($sourcedir . '/Subs-Issue.php');
require_once($sourcedir . '/Subs-Project.php');
require_once($sourcedir . '/IssueReport.php');
require_once($sourcedir . '/IssueComment.php');
// Call a few friends.
loadMemberData($id_member);
loadProjectTools();
// Prep the changes.
$posterOptions = array(
'id' => $id_member,
'ip' => $user_profile[$id_member]['member_ip'],
'name' => $data->author,
'email' => $user_profile[$id_member]['email_address'],
);
$issueOptions = array(
'mark_read' => true,
'assignee' => $id_member,
'status' => 5, // Resolved.
);
$commentOptions = array('body' => '');
// Lets do some loops.
foreach ($bugs as $bug => $message)
{
$issue = $bug;
loadIssue();
// Update our body message
$commentOptions['body'] = $smcFunc['htmlspecialchars']($message, ENT_QUOTES);
// Update status and assigne.
$event_data = updateIssue($bug, $issueOptions, $posterOptions, true);
// Fix a Project tracker bug...
if ($event_data === true)
$event_data = array();
// Create a comment.
$id_comment = createComment($project, $bug, $commentOptions, $posterOptions);
$commentOptions['id'] = $id_comment;
// Spam people.
sendIssueNotification(array('id' => $bug, 'project' => $project), $commentOptions, $event_data, 'new_comment', $id_member);
}
}
#98
PasteBin / Paste-1265578715:v:use_geshi-1...
Last post by SleePy - Feb 07, 2010, 09:38 PM// Close bugs.
function svnProjectTools($data, $id_member)
{
global $smcFunc, $sourcedir, $context, $user_profile, $issue, $project;
$project = 2;
if (empty($data->log))
return;
$entries = explode("\n", $data->log);
$bugs = array();
foreach ($entries as $entry)
{
$bug_data = array();
preg_match('~\[[Bug|Feature]+\s+([\d,]+)\]~i', $entry, $matches);
// Nothing to log?
if (empty($matches[1]))
continue;
$temp = array_unique(array_map('intval', explode(',', $matches[1])));;
foreach ($temp as $id)
$bugs[$id][] = str_replace($matches[0], 'Revision: ' . $data->revision, $entry);
}
// Now loop our bugs.
foreach ($bugs as $id => $bug)
$bugs[$id] = implode("\n", array_unique($bug));
// Still nothing?
if (empty($bugs))
return;
require_once($sourcedir . '/Subs-Post.php');
require_once($sourcedir . '/Subs-Issue.php');
require_once($sourcedir . '/Subs-Project.php');
require_once($sourcedir . '/IssueReport.php');
require_once($sourcedir . '/IssueComment.php');
// Get their data.
loadMemberData($id_member);
// Prep the changes.
$posterOptions = array(
'id' => $id_member,
'ip' => $user_profile[$id_member]['member_ip'],
'name' => $data->author,
'email' => $user_profile[$id_member]['email_address'],
);
$issueOptions = array(
'mark_read' => true,
'assignee' => $id_member,
'status' => 5, // Resolved.
);
$commentOptions = array('body' => '');
loadProjectTools();
// Lets do some loops.
foreach ($bugs as $bug => $message)
{
$issue = $bug;
loadIssue();
// Update our body message
$commentOptions['body'] = $smcFunc['htmlspecialchars']($message, ENT_QUOTES);
// Update the info like assigned and status.
$event_data = updateIssue($bug, $issueOptions, $posterOptions, true);
// Fix a Project tracker bug...
if ($event_data === true)
$event_data = array();
// Create a comment.
$id_comment = createComment($project, $bug, $commentOptions, $posterOptions);
$commentOptions['id'] = $id_comment;
// Spam people.
sendIssueNotification(array('id' => $bug, 'project' => $project), $commentOptions, $event_data, 'new_comment', $id_member);
}
}
function svnProjectTools($data, $id_member)
{
global $smcFunc, $sourcedir, $context, $user_profile, $issue, $project;
$project = 2;
if (empty($data->log))
return;
$entries = explode("\n", $data->log);
$bugs = array();
foreach ($entries as $entry)
{
$bug_data = array();
preg_match('~\[[Bug|Feature]+\s+([\d,]+)\]~i', $entry, $matches);
// Nothing to log?
if (empty($matches[1]))
continue;
$temp = array_unique(array_map('intval', explode(',', $matches[1])));;
foreach ($temp as $id)
$bugs[$id][] = str_replace($matches[0], 'Revision: ' . $data->revision, $entry);
}
// Now loop our bugs.
foreach ($bugs as $id => $bug)
$bugs[$id] = implode("\n", array_unique($bug));
// Still nothing?
if (empty($bugs))
return;
require_once($sourcedir . '/Subs-Post.php');
require_once($sourcedir . '/Subs-Issue.php');
require_once($sourcedir . '/Subs-Project.php');
require_once($sourcedir . '/IssueReport.php');
require_once($sourcedir . '/IssueComment.php');
// Get their data.
loadMemberData($id_member);
// Prep the changes.
$posterOptions = array(
'id' => $id_member,
'ip' => $user_profile[$id_member]['member_ip'],
'name' => $data->author,
'email' => $user_profile[$id_member]['email_address'],
);
$issueOptions = array(
'mark_read' => true,
'assignee' => $id_member,
'status' => 5, // Resolved.
);
$commentOptions = array('body' => '');
loadProjectTools();
// Lets do some loops.
foreach ($bugs as $bug => $message)
{
$issue = $bug;
loadIssue();
// Update our body message
$commentOptions['body'] = $smcFunc['htmlspecialchars']($message, ENT_QUOTES);
// Update the info like assigned and status.
$event_data = updateIssue($bug, $issueOptions, $posterOptions, true);
// Fix a Project tracker bug...
if ($event_data === true)
$event_data = array();
// Create a comment.
$id_comment = createComment($project, $bug, $commentOptions, $posterOptions);
$commentOptions['id'] = $id_comment;
// Spam people.
sendIssueNotification(array('id' => $bug, 'project' => $project), $commentOptions, $event_data, 'new_comment', $id_member);
}
}
#99
PasteBin / Paste-1265578633:v:use_geshi-1...
Last post by SleePy - Feb 07, 2010, 09:37 PM// Close bugs.
function svnProjectTools($data, $id_member)
{
global $smcFunc, $sourcedir, $context, $user_profile, $issue, $project;
$project = 2;
if (empty($data->log))
return;
$entries = explode("\n", $data->log);
$bugs = array();
foreach ($entries as $entry)
{
$bug_data = array();
preg_match('~\[[Bug|Feature]+\s+([\d,]+)\]~i', $entry, $matches);
// Nothing to log?
if (empty($matches[1]))
continue;
$temp = array_unique(array_map('intval', explode(',', $matches[1])));;
foreach ($temp as $id)
$bugs[$id][] = str_replace($matches[0], 'Revision: ' . $data->revision, $entry);
}
// Now loop our bugs.
foreach ($bugs as $id => $bug)
$bugs[$id] = implode("\n", array_unique($bug));
// Still nothing?
if (empty($bugs))
return;
require_once($sourcedir . '/Subs-Post.php');
require_once($sourcedir . '/Subs-Issue.php');
require_once($sourcedir . '/Subs-Project.php');
require_once($sourcedir . '/IssueReport.php');
require_once($sourcedir . '/IssueComment.php');
// Get their data.
loadMemberData($id_member);
// Prep the changes.
$posterOptions = array(
'id' => $id_member,
'ip' => $user_profile[$id_member]['member_ip'],
'name' => $data->author,
'email' => $user_profile[$id_member]['email_address'],
);
$issueOptions = array(
'mark_read' => true,
'assignee' => $id_member,
'status' => 5, // Resolved.
);
$commentOptions = array('body' => '');
loadProjectTools();
// Lets do some loops.
foreach ($bugs as $bug => $message)
{
$issue = $bug;
loadIssue();
// Update our body message
$commentOptions['body'] = $smcFunc['htmlspecialchars']($message, ENT_QUOTES);
$event_data = updateIssue($bug, $issueOptions, $posterOptions, true);
if ($event_data === true)
$event_data = array();
$id_comment = createComment($project, $bug, $commentOptions, $posterOptions);
$commentOptions['id'] = $id_comment;
sendIssueNotification(array('id' => $bug, 'project' => $project), $commentOptions, $event_data, 'new_comment', $id_member);
}
}
function svnProjectTools($data, $id_member)
{
global $smcFunc, $sourcedir, $context, $user_profile, $issue, $project;
$project = 2;
if (empty($data->log))
return;
$entries = explode("\n", $data->log);
$bugs = array();
foreach ($entries as $entry)
{
$bug_data = array();
preg_match('~\[[Bug|Feature]+\s+([\d,]+)\]~i', $entry, $matches);
// Nothing to log?
if (empty($matches[1]))
continue;
$temp = array_unique(array_map('intval', explode(',', $matches[1])));;
foreach ($temp as $id)
$bugs[$id][] = str_replace($matches[0], 'Revision: ' . $data->revision, $entry);
}
// Now loop our bugs.
foreach ($bugs as $id => $bug)
$bugs[$id] = implode("\n", array_unique($bug));
// Still nothing?
if (empty($bugs))
return;
require_once($sourcedir . '/Subs-Post.php');
require_once($sourcedir . '/Subs-Issue.php');
require_once($sourcedir . '/Subs-Project.php');
require_once($sourcedir . '/IssueReport.php');
require_once($sourcedir . '/IssueComment.php');
// Get their data.
loadMemberData($id_member);
// Prep the changes.
$posterOptions = array(
'id' => $id_member,
'ip' => $user_profile[$id_member]['member_ip'],
'name' => $data->author,
'email' => $user_profile[$id_member]['email_address'],
);
$issueOptions = array(
'mark_read' => true,
'assignee' => $id_member,
'status' => 5, // Resolved.
);
$commentOptions = array('body' => '');
loadProjectTools();
// Lets do some loops.
foreach ($bugs as $bug => $message)
{
$issue = $bug;
loadIssue();
// Update our body message
$commentOptions['body'] = $smcFunc['htmlspecialchars']($message, ENT_QUOTES);
$event_data = updateIssue($bug, $issueOptions, $posterOptions, true);
if ($event_data === true)
$event_data = array();
$id_comment = createComment($project, $bug, $commentOptions, $posterOptions);
$commentOptions['id'] = $id_comment;
sendIssueNotification(array('id' => $bug, 'project' => $project), $commentOptions, $event_data, 'new_comment', $id_member);
}
}
#100
PasteBin / Paste-1264733301:v:use_geshi-1...
Last post by SleePy - Jan 29, 2010, 02:48 AM 'member_groups' => array(
'header' => array(
'value' => $txt['sitead_download_access'],
),
'data' => array(
'function' => create_function('$rowData', '
global $context, $txt;
$return = \'
<input type="text" name="branch_\' . $rowData[\'id_branch\'] . \'" id="branch_\' . $rowData[\'id_branch\'] . \'" class="auto_suggest_div" disabled="disabled" value="\' . $rowData[\'member_groups\'] . \'" />
<div id="branch_\' . $rowData[\'id_branch\'] . \'_container"></div>
<script language="JavaScript" type="text/javascript" defer="defer"><!-- // --><![CDATA[
var oBranchMember\' . $rowData[\'id_branch\'] . \'Suggest = new smc_AutoSuggest({
sSelf: \\\'oBranchMember\' . $rowData[\'id_branch\'] . \'Suggest\\\',
sRetrieveURL: \\\'\' . $context[\'sa_url\'] . \'/download/branch/ajax?getMemberGroup;search=%search%;%sessionVar%=%sessionID%;xml;time=%time%\\\',
sItemTemplate: \\\'<input type="hidden" name="%post_name%[]" value="%item_id%" /><a href="%item_href%" class="extern" onclick="window.open(this.href, "_blank"); return false;">%item_name%</a> <img src="%images_url%/pm_recipient_delete.gif" alt="%delete_text%" title="%delete_text%" onclick="return %self%.deleteAddedItem(%item_id%);" class="auto_suggest_div" name="delete_link_\' . $rowData[\'id_branch\'] . \'" />\\\',
sSessionId: \\\'\' . $context[\'session_id\'] . \'\\\',
sSessionVar: \\\'\' . $context[\'session_var\'] . \'\\\',
sSuggestId: \\\'branch_\' . $rowData[\'id_branch\'] . \'\\\',
sControlId: \\\'branch_\' . $rowData[\'id_branch\'] . \'\\\',
sSearchType: \\\'member\\\',
sTextDeleteItem: \\\'\' . $txt[\'autosuggest_delete_item\'] . \'\\\',
bItemList: true,
sPostName: \\\'branch_\' . $rowData[\'id_branch\'] . \'_input\\\',
sURLMask: \\\'action=groups;area=viewgroups;sa=members;group=%item_id%\\\',
sItemListContainerId: \\\'branch_\' . $rowData[\'id_branch\'] . \'_container\\\',
aListItems: [\';
$temp = explode(\',\', $rowData[\'member_groups\']);
foreach ($temp as $id)
$return .= \'
{
sItemId: \' . JavaScriptEscape($id) . \',
sItemName: \' . JavaScriptEscape($context[\'membergroups\'][$id]) . \'
},\';
// Clean up that last comma.
$return = substr($return, 0, -1);
$return .= \'
]
});
// ]]></script>\';
return $return;
'),
),
),
'header' => array(
'value' => $txt['sitead_download_access'],
),
'data' => array(
'function' => create_function('$rowData', '
global $context, $txt;
$return = \'
<input type="text" name="branch_\' . $rowData[\'id_branch\'] . \'" id="branch_\' . $rowData[\'id_branch\'] . \'" class="auto_suggest_div" disabled="disabled" value="\' . $rowData[\'member_groups\'] . \'" />
<div id="branch_\' . $rowData[\'id_branch\'] . \'_container"></div>
<script language="JavaScript" type="text/javascript" defer="defer"><!-- // --><![CDATA[
var oBranchMember\' . $rowData[\'id_branch\'] . \'Suggest = new smc_AutoSuggest({
sSelf: \\\'oBranchMember\' . $rowData[\'id_branch\'] . \'Suggest\\\',
sRetrieveURL: \\\'\' . $context[\'sa_url\'] . \'/download/branch/ajax?getMemberGroup;search=%search%;%sessionVar%=%sessionID%;xml;time=%time%\\\',
sItemTemplate: \\\'<input type="hidden" name="%post_name%[]" value="%item_id%" /><a href="%item_href%" class="extern" onclick="window.open(this.href, "_blank"); return false;">%item_name%</a> <img src="%images_url%/pm_recipient_delete.gif" alt="%delete_text%" title="%delete_text%" onclick="return %self%.deleteAddedItem(%item_id%);" class="auto_suggest_div" name="delete_link_\' . $rowData[\'id_branch\'] . \'" />\\\',
sSessionId: \\\'\' . $context[\'session_id\'] . \'\\\',
sSessionVar: \\\'\' . $context[\'session_var\'] . \'\\\',
sSuggestId: \\\'branch_\' . $rowData[\'id_branch\'] . \'\\\',
sControlId: \\\'branch_\' . $rowData[\'id_branch\'] . \'\\\',
sSearchType: \\\'member\\\',
sTextDeleteItem: \\\'\' . $txt[\'autosuggest_delete_item\'] . \'\\\',
bItemList: true,
sPostName: \\\'branch_\' . $rowData[\'id_branch\'] . \'_input\\\',
sURLMask: \\\'action=groups;area=viewgroups;sa=members;group=%item_id%\\\',
sItemListContainerId: \\\'branch_\' . $rowData[\'id_branch\'] . \'_container\\\',
aListItems: [\';
$temp = explode(\',\', $rowData[\'member_groups\']);
foreach ($temp as $id)
$return .= \'
{
sItemId: \' . JavaScriptEscape($id) . \',
sItemName: \' . JavaScriptEscape($context[\'membergroups\'][$id]) . \'
},\';
// Clean up that last comma.
$return = substr($return, 0, -1);
$return .= \'
]
});
// ]]></script>\';
return $return;
'),
),
),