Guest User

posting.php

a guest
May 9th, 2012
155
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 63.14 KB | None | 0 0
  1. <?php
  2. /**
  3. *
  4. * @package phpBB3
  5. * @version $Id$
  6. * @copyright (c) 2005 phpBB Group
  7. * @license http://opensource.org/licenses/gpl-license.php GNU Public License
  8. *
  9. */
  10.  
  11. /**
  12. * @ignore
  13. */
  14. define('IN_PHPBB', true);
  15. $phpbb_root_path = (defined('PHPBB_ROOT_PATH')) ? PHPBB_ROOT_PATH : './';
  16. $phpEx = substr(strrchr(__FILE__, '.'), 1);
  17. include($phpbb_root_path . 'common.' . $phpEx);
  18. include($phpbb_root_path . 'includes/functions_posting.' . $phpEx);
  19. include($phpbb_root_path . 'includes/functions_display.' . $phpEx);
  20. include($phpbb_root_path . 'includes/message_parser.' . $phpEx);
  21.  
  22.  
  23. // Start session management
  24. $user->session_begin();
  25. $auth->acl($user->data);
  26.  
  27.  
  28. // Grab only parameters needed here
  29. $post_id = request_var('p', 0);
  30. $topic_id = request_var('t', 0);
  31. $forum_id = request_var('f', 0);
  32. $draft_id = request_var('d', 0);
  33. $lastclick = request_var('lastclick', 0);
  34.  
  35. $submit = (isset($_POST['post'])) ? true : false;
  36. $preview = (isset($_POST['preview'])) ? true : false;
  37. $save = (isset($_POST['save'])) ? true : false;
  38. $load = (isset($_POST['load'])) ? true : false;
  39. $delete = (isset($_POST['delete'])) ? true : false;
  40. $cancel = (isset($_POST['cancel']) && !isset($_POST['save'])) ? true : false;
  41.  
  42. $refresh = (isset($_POST['add_file']) || isset($_POST['delete_file']) || isset($_POST['full_editor']) || isset($_POST['cancel_unglobalise']) || $save || $load) ? true : false;
  43. $mode = ($delete && !$preview && !$refresh && $submit) ? 'delete' : request_var('mode', '');
  44.  
  45. $error = $post_data = array();
  46. $current_time = time();
  47.  
  48. // Was cancel pressed? If so then redirect to the appropriate page
  49. if ($cancel || ($current_time - $lastclick < 2 && $submit))
  50. {
  51. $f = ($forum_id) ? 'f=' . $forum_id . '&amp;' : '';
  52. $redirect = ($post_id) ? append_sid("{$phpbb_root_path}viewtopic.$phpEx", $f . 'p=' . $post_id) . '#p' . $post_id : (($topic_id) ? append_sid("{$phpbb_root_path}viewtopic.$phpEx", $f . 't=' . $topic_id) : (($forum_id) ? append_sid("{$phpbb_root_path}viewforum.$phpEx", 'f=' . $forum_id) : append_sid("{$phpbb_root_path}index.$phpEx")));
  53. redirect($redirect);
  54. }
  55.  
  56. if (in_array($mode, array('post', 'reply', 'quote', 'edit', 'delete')) && !$forum_id)
  57. {
  58. trigger_error('NO_FORUM');
  59. }
  60.  
  61. // We need to know some basic information in all cases before we do anything.
  62. switch ($mode)
  63. {
  64. case 'post':
  65. $sql = 'SELECT *
  66. FROM ' . FORUMS_TABLE . "
  67. WHERE forum_id = $forum_id";
  68. break;
  69.  
  70. case 'bump':
  71. case 'reply':
  72. if (!$topic_id)
  73. {
  74. trigger_error('NO_TOPIC');
  75. }
  76.  
  77. // Force forum id
  78. $sql = 'SELECT forum_id
  79. FROM ' . TOPICS_TABLE . '
  80. WHERE topic_id = ' . $topic_id;
  81. $result = $db->sql_query($sql);
  82. $f_id = (int) $db->sql_fetchfield('forum_id');
  83. $db->sql_freeresult($result);
  84.  
  85. $forum_id = (!$f_id) ? $forum_id : $f_id;
  86.  
  87. $sql = 'SELECT f.*, t.*
  88. FROM ' . TOPICS_TABLE . ' t, ' . FORUMS_TABLE . " f
  89. WHERE t.topic_id = $topic_id
  90. AND (f.forum_id = t.forum_id
  91. OR f.forum_id = $forum_id)" .
  92. (($auth->acl_get('m_approve', $forum_id)) ? '' : 'AND t.topic_approved = 1');
  93. break;
  94.  
  95. case 'quote':
  96. case 'edit':
  97. case 'delete':
  98. if (!$post_id)
  99. {
  100. $user->setup('posting');
  101. trigger_error('NO_POST');
  102. }
  103.  
  104. // Force forum id
  105. $sql = 'SELECT forum_id
  106. FROM ' . POSTS_TABLE . '
  107. WHERE post_id = ' . $post_id;
  108. $result = $db->sql_query($sql);
  109. $f_id = (int) $db->sql_fetchfield('forum_id');
  110. $db->sql_freeresult($result);
  111.  
  112. $forum_id = (!$f_id) ? $forum_id : $f_id;
  113.  
  114. $sql = 'SELECT f.*, t.*, p.*, u.username, u.username_clean, u.user_sig, u.user_sig_bbcode_uid, u.user_sig_bbcode_bitfield
  115. FROM ' . POSTS_TABLE . ' p, ' . TOPICS_TABLE . ' t, ' . FORUMS_TABLE . ' f, ' . USERS_TABLE . " u
  116. WHERE p.post_id = $post_id
  117. AND t.topic_id = p.topic_id
  118. AND u.user_id = p.poster_id
  119. AND (f.forum_id = t.forum_id
  120. OR f.forum_id = $forum_id)" .
  121. (($auth->acl_get('m_approve', $forum_id)) ? '' : 'AND p.post_approved = 1');
  122. break;
  123.  
  124. case 'smilies':
  125. $sql = '';
  126. generate_smilies('window', $forum_id);
  127. break;
  128.  
  129. case 'popup':
  130. if ($forum_id)
  131. {
  132. $sql = 'SELECT forum_style
  133. FROM ' . FORUMS_TABLE . '
  134. WHERE forum_id = ' . $forum_id;
  135. }
  136. else
  137. {
  138. upload_popup();
  139. return;
  140. }
  141. break;
  142.  
  143. default:
  144. $sql = '';
  145. break;
  146. }
  147.  
  148. if (!$sql)
  149. {
  150. $user->setup('posting');
  151. trigger_error('NO_POST_MODE');
  152. }
  153.  
  154. $result = $db->sql_query($sql);
  155. $post_data = $db->sql_fetchrow($result);
  156. $db->sql_freeresult($result);
  157.  
  158. if (!$post_data)
  159. {
  160. if (!($mode == 'post' || $mode == 'bump' || $mode == 'reply'))
  161. {
  162. $user->setup('posting');
  163. }
  164. trigger_error(($mode == 'post' || $mode == 'bump' || $mode == 'reply') ? 'NO_TOPIC' : 'NO_POST');
  165. }
  166.  
  167. // Not able to reply to unapproved posts/topics
  168. // TODO: add more descriptive language key
  169. if ($auth->acl_get('m_approve', $forum_id) && ((($mode == 'reply' || $mode == 'bump') && !$post_data['topic_approved']) || ($mode == 'quote' && !$post_data['post_approved'])))
  170. {
  171. trigger_error(($mode == 'reply' || $mode == 'bump') ? 'TOPIC_UNAPPROVED' : 'POST_UNAPPROVED');
  172. }
  173.  
  174. if ($mode == 'popup')
  175. {
  176. upload_popup($post_data['forum_style']);
  177. return;
  178. }
  179.  
  180. $user->setup(array('posting', 'mcp', 'viewtopic'), $post_data['forum_style']);
  181.  
  182. if ($config['enable_post_confirm'] && !$user->data['is_registered'])
  183. {
  184. include($phpbb_root_path . 'includes/captcha/captcha_factory.' . $phpEx);
  185. $captcha =& phpbb_captcha_factory::get_instance($config['captcha_plugin']);
  186. $captcha->init(CONFIRM_POST);
  187. }
  188.  
  189. // Use post_row values in favor of submitted ones...
  190. $forum_id = (!empty($post_data['forum_id'])) ? (int) $post_data['forum_id'] : (int) $forum_id;
  191. $topic_id = (!empty($post_data['topic_id'])) ? (int) $post_data['topic_id'] : (int) $topic_id;
  192. $post_id = (!empty($post_data['post_id'])) ? (int) $post_data['post_id'] : (int) $post_id;
  193.  
  194. // Need to login to passworded forum first?
  195. if ($post_data['forum_password'])
  196. {
  197. login_forum_box(array(
  198. 'forum_id' => $forum_id,
  199. 'forum_password' => $post_data['forum_password'])
  200. );
  201. }
  202.  
  203. // Check permissions
  204. if ($user->data['is_bot'])
  205. {
  206. redirect(append_sid("{$phpbb_root_path}index.$phpEx"));
  207. }
  208.  
  209. // Is the user able to read within this forum?
  210. if (!$auth->acl_get('f_read', $forum_id))
  211. {
  212. if ($user->data['user_id'] != ANONYMOUS)
  213. {
  214. trigger_error('USER_CANNOT_READ');
  215. }
  216.  
  217. login_box('', $user->lang['LOGIN_EXPLAIN_POST']);
  218. }
  219.  
  220. // Permission to do the action asked?
  221. $is_authed = false;
  222.  
  223. switch ($mode)
  224. {
  225. case 'post':
  226. if ($auth->acl_get('f_post', $forum_id))
  227. {
  228. $is_authed = true;
  229. }
  230. break;
  231.  
  232. case 'bump':
  233. if ($auth->acl_get('f_bump', $forum_id))
  234. {
  235. $is_authed = true;
  236. }
  237. break;
  238.  
  239. case 'quote':
  240.  
  241. $post_data['post_edit_locked'] = 0;
  242.  
  243. // no break;
  244.  
  245. case 'reply':
  246. if ($auth->acl_get('f_reply', $forum_id))
  247. {
  248. $is_authed = true;
  249. }
  250. break;
  251.  
  252. case 'edit':
  253. if ($user->data['is_registered'] && $auth->acl_gets('f_edit', 'm_edit', $forum_id))
  254. {
  255. $is_authed = true;
  256. }
  257. break;
  258.  
  259. case 'delete':
  260. if ($user->data['is_registered'] && $auth->acl_gets('f_delete', 'm_delete', $forum_id))
  261. {
  262. $is_authed = true;
  263. }
  264. break;
  265. }
  266.  
  267. if (!$is_authed)
  268. {
  269. $check_auth = ($mode == 'quote') ? 'reply' : $mode;
  270.  
  271. if ($user->data['is_registered'])
  272. {
  273. trigger_error('USER_CANNOT_' . strtoupper($check_auth));
  274. }
  275.  
  276. login_box('', $user->lang['LOGIN_EXPLAIN_' . strtoupper($mode)]);
  277. }
  278.  
  279. // Is the user able to post within this forum?
  280. if ($post_data['forum_type'] != FORUM_POST && in_array($mode, array('post', 'bump', 'quote', 'reply')))
  281. {
  282. trigger_error('USER_CANNOT_FORUM_POST');
  283. }
  284.  
  285. // Forum/Topic locked?
  286. if (($post_data['forum_status'] == ITEM_LOCKED || (isset($post_data['topic_status']) && $post_data['topic_status'] == ITEM_LOCKED)) && !$auth->acl_get('m_edit', $forum_id))
  287. {
  288. trigger_error(($post_data['forum_status'] == ITEM_LOCKED) ? 'FORUM_LOCKED' : 'TOPIC_LOCKED');
  289. }
  290.  
  291. // Can we edit this post ... if we're a moderator with rights then always yes
  292. // else it depends on editing times, lock status and if we're the correct user
  293. if ($mode == 'edit' && !$auth->acl_get('m_edit', $forum_id))
  294. {
  295. if ($user->data['user_id'] != $post_data['poster_id'])
  296. {
  297. trigger_error('USER_CANNOT_EDIT');
  298. }
  299.  
  300. if (!($post_data['post_time'] > time() - ($config['edit_time'] * 60) || !$config['edit_time']))
  301. {
  302. trigger_error('CANNOT_EDIT_TIME');
  303. }
  304.  
  305. if ($post_data['post_edit_locked'])
  306. {
  307. trigger_error('CANNOT_EDIT_POST_LOCKED');
  308. }
  309. }
  310.  
  311. // Handle delete mode...
  312. if ($mode == 'delete')
  313. {
  314. handle_post_delete($forum_id, $topic_id, $post_id, $post_data);
  315. return;
  316. }
  317.  
  318. // Handle bump mode...
  319. if ($mode == 'bump')
  320. {
  321. if ($bump_time = bump_topic_allowed($forum_id, $post_data['topic_bumped'], $post_data['topic_last_post_time'], $post_data['topic_poster'], $post_data['topic_last_poster_id'])
  322. && check_link_hash(request_var('hash', ''), "topic_{$post_data['topic_id']}"))
  323. {
  324. $meta_url = phpbb_bump_topic($forum_id, $topic_id, $post_data, $current_time);
  325. meta_refresh(3, $meta_url);
  326.  
  327. $message = $user->lang['TOPIC_BUMPED'] . '<br /><br />' . sprintf($user->lang['VIEW_MESSAGE'], '<a href="' . $meta_url . '">', '</a>');
  328. $message .= '<br /><br />' . sprintf($user->lang['RETURN_FORUM'], '<a href="' . append_sid("{$phpbb_root_path}viewforum.$phpEx", 'f=' . $forum_id) . '">', '</a>');
  329.  
  330. trigger_error($message);
  331. }
  332.  
  333. trigger_error('BUMP_ERROR');
  334. }
  335.  
  336. // Subject length limiting to 60 characters if first post...
  337. if ($mode == 'post' || ($mode == 'edit' && $post_data['topic_first_post_id'] == $post_data['post_id']))
  338. {
  339. $template->assign_var('S_NEW_MESSAGE', true);
  340. }
  341.  
  342. // Determine some vars
  343. if (isset($post_data['poster_id']) && $post_data['poster_id'] == ANONYMOUS)
  344. {
  345. $post_data['quote_username'] = (!empty($post_data['post_username'])) ? $post_data['post_username'] : $user->lang['GUEST'];
  346. }
  347. else
  348. {
  349. $post_data['quote_username'] = isset($post_data['username']) ? $post_data['username'] : '';
  350. }
  351.  
  352. $post_data['post_edit_locked'] = (isset($post_data['post_edit_locked'])) ? (int) $post_data['post_edit_locked'] : 0;
  353. $post_data['post_subject_md5'] = (isset($post_data['post_subject']) && $mode == 'edit') ? md5($post_data['post_subject']) : '';
  354. $post_data['post_subject'] = (in_array($mode, array('quote', 'edit'))) ? $post_data['post_subject'] : ((isset($post_data['topic_title'])) ? $post_data['topic_title'] : '');
  355. $post_data['topic_time_limit'] = (isset($post_data['topic_time_limit'])) ? (($post_data['topic_time_limit']) ? (int) $post_data['topic_time_limit'] / 86400 : (int) $post_data['topic_time_limit']) : 0;
  356. $post_data['poll_length'] = (!empty($post_data['poll_length'])) ? (int) $post_data['poll_length'] / 86400 : 0;
  357. $post_data['poll_start'] = (!empty($post_data['poll_start'])) ? (int) $post_data['poll_start'] : 0;
  358. $post_data['icon_id'] = (!isset($post_data['icon_id']) || in_array($mode, array('quote', 'reply'))) ? 0 : (int) $post_data['icon_id'];
  359. $post_data['poll_options'] = array();
  360.  
  361. // Get Poll Data
  362. if ($post_data['poll_start'])
  363. {
  364. $sql = 'SELECT poll_option_text
  365. FROM ' . POLL_OPTIONS_TABLE . "
  366. WHERE topic_id = $topic_id
  367. ORDER BY poll_option_id";
  368. $result = $db->sql_query($sql);
  369.  
  370. while ($row = $db->sql_fetchrow($result))
  371. {
  372. $post_data['poll_options'][] = trim($row['poll_option_text']);
  373. }
  374. $db->sql_freeresult($result);
  375. }
  376.  
  377. if ($mode == 'edit')
  378. {
  379. $original_poll_data = array(
  380. 'poll_title' => $post_data['poll_title'],
  381. 'poll_length' => $post_data['poll_length'],
  382. 'poll_max_options' => $post_data['poll_max_options'],
  383. 'poll_option_text' => implode("\n", $post_data['poll_options']),
  384. 'poll_start' => $post_data['poll_start'],
  385. 'poll_last_vote' => $post_data['poll_last_vote'],
  386. 'poll_vote_change' => $post_data['poll_vote_change'],
  387. );
  388. }
  389.  
  390. $orig_poll_options_size = sizeof($post_data['poll_options']);
  391.  
  392. $message_parser = new parse_message();
  393.  
  394. if (isset($post_data['post_text']))
  395. {
  396. $message_parser->message = &$post_data['post_text'];
  397. unset($post_data['post_text']);
  398. }
  399.  
  400. // Set some default variables
  401. $uninit = array('post_attachment' => 0, 'poster_id' => $user->data['user_id'], 'enable_magic_url' => 0, 'topic_status' => 0, 'topic_type' => POST_NORMAL, 'post_subject' => '', 'topic_title' => '', 'post_time' => 0, 'post_edit_reason' => '', 'notify_set' => 0);
  402.  
  403. foreach ($uninit as $var_name => $default_value)
  404. {
  405. if (!isset($post_data[$var_name]))
  406. {
  407. $post_data[$var_name] = $default_value;
  408. }
  409. }
  410. unset($uninit);
  411.  
  412. // Always check if the submitted attachment data is valid and belongs to the user.
  413. // Further down (especially in submit_post()) we do not check this again.
  414. $message_parser->get_submitted_attachment_data($post_data['poster_id']);
  415.  
  416. if ($post_data['post_attachment'] && !$submit && !$refresh && !$preview && $mode == 'edit')
  417. {
  418. // Do not change to SELECT *
  419. $sql = 'SELECT attach_id, is_orphan, attach_comment, real_filename
  420. FROM ' . ATTACHMENTS_TABLE . "
  421. WHERE post_msg_id = $post_id
  422. AND in_message = 0
  423. AND is_orphan = 0
  424. ORDER BY filetime DESC";
  425. $result = $db->sql_query($sql);
  426. $message_parser->attachment_data = array_merge($message_parser->attachment_data, $db->sql_fetchrowset($result));
  427. $db->sql_freeresult($result);
  428. }
  429.  
  430. if ($post_data['poster_id'] == ANONYMOUS)
  431. {
  432. $post_data['username'] = ($mode == 'quote' || $mode == 'edit') ? trim($post_data['post_username']) : '';
  433. }
  434. else
  435. {
  436. $post_data['username'] = ($mode == 'quote' || $mode == 'edit') ? trim($post_data['username']) : '';
  437. }
  438.  
  439. $post_data['enable_urls'] = $post_data['enable_magic_url'];
  440.  
  441. if ($mode != 'edit')
  442. {
  443. $post_data['enable_sig'] = ($config['allow_sig'] && $user->optionget('attachsig')) ? true: false;
  444. $post_data['enable_smilies'] = ($config['allow_smilies'] && $user->optionget('smilies')) ? true : false;
  445. $post_data['enable_bbcode'] = ($config['allow_bbcode'] && $user->optionget('bbcode')) ? true : false;
  446. $post_data['enable_urls'] = true;
  447. }
  448.  
  449. $post_data['enable_magic_url'] = $post_data['drafts'] = false;
  450.  
  451. // User own some drafts?
  452. if ($user->data['is_registered'] && $auth->acl_get('u_savedrafts') && ($mode == 'reply' || $mode == 'post' || $mode == 'quote'))
  453. {
  454. $sql = 'SELECT draft_id
  455. FROM ' . DRAFTS_TABLE . '
  456. WHERE user_id = ' . $user->data['user_id'] .
  457. (($forum_id) ? ' AND forum_id = ' . (int) $forum_id : '') .
  458. (($topic_id) ? ' AND topic_id = ' . (int) $topic_id : '') .
  459. (($draft_id) ? " AND draft_id <> $draft_id" : '');
  460. $result = $db->sql_query_limit($sql, 1);
  461.  
  462. if ($db->sql_fetchrow($result))
  463. {
  464. $post_data['drafts'] = true;
  465. }
  466. $db->sql_freeresult($result);
  467. }
  468.  
  469. $check_value = (($post_data['enable_bbcode']+1) << 8) + (($post_data['enable_smilies']+1) << 4) + (($post_data['enable_urls']+1) << 2) + (($post_data['enable_sig']+1) << 1);
  470.  
  471. // Check if user is watching this topic
  472. if ($mode != 'post' && $config['allow_topic_notify'] && $user->data['is_registered'])
  473. {
  474. $sql = 'SELECT topic_id
  475. FROM ' . TOPICS_WATCH_TABLE . '
  476. WHERE topic_id = ' . $topic_id . '
  477. AND user_id = ' . $user->data['user_id'];
  478. $result = $db->sql_query($sql);
  479. $post_data['notify_set'] = (int) $db->sql_fetchfield('topic_id');
  480. $db->sql_freeresult($result);
  481. }
  482.  
  483. // Do we want to edit our post ?
  484. if ($mode == 'edit' && $post_data['bbcode_uid'])
  485. {
  486. $message_parser->bbcode_uid = $post_data['bbcode_uid'];
  487. }
  488.  
  489. // HTML, BBCode, Smilies, Images and Flash status
  490. $bbcode_status = ($config['allow_bbcode'] && $auth->acl_get('f_bbcode', $forum_id)) ? true : false;
  491. $smilies_status = ($config['allow_smilies'] && $auth->acl_get('f_smilies', $forum_id)) ? true : false;
  492. $img_status = ($bbcode_status && $auth->acl_get('f_img', $forum_id)) ? true : false;
  493. $url_status = ($config['allow_post_links']) ? true : false;
  494. $flash_status = ($bbcode_status && $auth->acl_get('f_flash', $forum_id) && $config['allow_post_flash']) ? true : false;
  495. $quote_status = true;
  496.  
  497. // Save Draft
  498. if ($save && $user->data['is_registered'] && $auth->acl_get('u_savedrafts') && ($mode == 'reply' || $mode == 'post' || $mode == 'quote'))
  499. {
  500. $subject = utf8_normalize_nfc(request_var('subject', '', true));
  501. $subject = (!$subject && $mode != 'post') ? $post_data['topic_title'] : $subject;
  502. $message = utf8_normalize_nfc(request_var('message', '', true));
  503.  
  504. if ($subject && $message)
  505. {
  506. if (confirm_box(true))
  507. {
  508. $sql = 'INSERT INTO ' . DRAFTS_TABLE . ' ' . $db->sql_build_array('INSERT', array(
  509. 'user_id' => (int) $user->data['user_id'],
  510. 'topic_id' => (int) $topic_id,
  511. 'forum_id' => (int) $forum_id,
  512. 'save_time' => (int) $current_time,
  513. 'draft_subject' => (string) $subject,
  514. 'draft_message' => (string) $message)
  515. );
  516. $db->sql_query($sql);
  517.  
  518. $meta_info = ($mode == 'post') ? append_sid("{$phpbb_root_path}viewforum.$phpEx", 'f=' . $forum_id) : append_sid("{$phpbb_root_path}viewtopic.$phpEx", "f=$forum_id&amp;t=$topic_id");
  519.  
  520. meta_refresh(3, $meta_info);
  521.  
  522. $message = $user->lang['DRAFT_SAVED'] . '<br /><br />';
  523. $message .= ($mode != 'post') ? sprintf($user->lang['RETURN_TOPIC'], '<a href="' . $meta_info . '">', '</a>') . '<br /><br />' : '';
  524. $message .= sprintf($user->lang['RETURN_FORUM'], '<a href="' . append_sid("{$phpbb_root_path}viewforum.$phpEx", 'f=' . $forum_id) . '">', '</a>');
  525.  
  526. trigger_error($message);
  527. }
  528. else
  529. {
  530. $s_hidden_fields = build_hidden_fields(array(
  531. 'mode' => $mode,
  532. 'save' => true,
  533. 'f' => $forum_id,
  534. 't' => $topic_id,
  535. 'subject' => $subject,
  536. 'message' => $message,
  537. 'attachment_data' => $message_parser->attachment_data,
  538. )
  539. );
  540.  
  541. $hidden_fields = array(
  542. 'icon_id' => 0,
  543.  
  544. 'disable_bbcode' => false,
  545. 'disable_smilies' => false,
  546. 'disable_magic_url' => false,
  547. 'attach_sig' => true,
  548. 'lock_topic' => false,
  549.  
  550. 'topic_type' => POST_NORMAL,
  551. 'topic_time_limit' => 0,
  552.  
  553. 'poll_title' => '',
  554. 'poll_option_text' => '',
  555. 'poll_max_options' => 1,
  556. 'poll_length' => 0,
  557. 'poll_vote_change' => false,
  558. );
  559.  
  560. foreach ($hidden_fields as $name => $default)
  561. {
  562. if (!isset($_POST[$name]))
  563. {
  564. // Don't include it, if its not available
  565. unset($hidden_fields[$name]);
  566. continue;
  567. }
  568.  
  569. if (is_bool($default))
  570. {
  571. // Use the string representation
  572. $hidden_fields[$name] = request_var($name, '');
  573. }
  574. else
  575. {
  576. $hidden_fields[$name] = request_var($name, $default);
  577. }
  578. }
  579.  
  580. $s_hidden_fields .= build_hidden_fields($hidden_fields);
  581.  
  582. confirm_box(false, 'SAVE_DRAFT', $s_hidden_fields);
  583. }
  584. }
  585. else
  586. {
  587. if (utf8_clean_string($subject) === '')
  588. {
  589. $error[] = $user->lang['EMPTY_SUBJECT'];
  590. }
  591.  
  592. if (utf8_clean_string($message) === '')
  593. {
  594. $error[] = $user->lang['TOO_FEW_CHARS'];
  595. }
  596. }
  597. unset($subject, $message);
  598. }
  599.  
  600. // Load requested Draft
  601. if ($draft_id && ($mode == 'reply' || $mode == 'quote' || $mode == 'post') && $user->data['is_registered'] && $auth->acl_get('u_savedrafts'))
  602. {
  603. $sql = 'SELECT draft_subject, draft_message
  604. FROM ' . DRAFTS_TABLE . "
  605. WHERE draft_id = $draft_id
  606. AND user_id = " . $user->data['user_id'];
  607. $result = $db->sql_query_limit($sql, 1);
  608. $row = $db->sql_fetchrow($result);
  609. $db->sql_freeresult($result);
  610.  
  611. if ($row)
  612. {
  613. $post_data['post_subject'] = $row['draft_subject'];
  614. $message_parser->message = $row['draft_message'];
  615.  
  616. $template->assign_var('S_DRAFT_LOADED', true);
  617. }
  618. else
  619. {
  620. $draft_id = 0;
  621. }
  622. }
  623.  
  624. // Load draft overview
  625. if ($load && ($mode == 'reply' || $mode == 'quote' || $mode == 'post') && $post_data['drafts'])
  626. {
  627. load_drafts($topic_id, $forum_id);
  628. }
  629.  
  630.  
  631. if ($submit || $preview || $refresh)
  632. {
  633. $post_data['topic_cur_post_id'] = request_var('topic_cur_post_id', 0);
  634. $post_data['post_subject'] = utf8_normalize_nfc(request_var('subject', '', true));
  635. $message_parser->message = utf8_normalize_nfc(request_var('message', '', true));
  636.  
  637. $post_data['username'] = utf8_normalize_nfc(request_var('username', $post_data['username'], true));
  638. $post_data['post_edit_reason'] = (!empty($_POST['edit_reason']) && $mode == 'edit' && $auth->acl_get('m_edit', $forum_id)) ? utf8_normalize_nfc(request_var('edit_reason', '', true)) : '';
  639.  
  640. $post_data['orig_topic_type'] = $post_data['topic_type'];
  641. $post_data['topic_type'] = request_var('topic_type', (($mode != 'post') ? (int) $post_data['topic_type'] : POST_NORMAL));
  642. $post_data['topic_time_limit'] = request_var('topic_time_limit', (($mode != 'post') ? (int) $post_data['topic_time_limit'] : 0));
  643.  
  644. if ($post_data['enable_icons'] && $auth->acl_get('f_icons', $forum_id))
  645. {
  646. $post_data['icon_id'] = request_var('icon', (int) $post_data['icon_id']);
  647. }
  648.  
  649. $post_data['enable_bbcode'] = (!$bbcode_status || isset($_POST['disable_bbcode'])) ? false : true;
  650. $post_data['enable_smilies'] = (!$smilies_status || isset($_POST['disable_smilies'])) ? false : true;
  651. $post_data['enable_urls'] = (isset($_POST['disable_magic_url'])) ? 0 : 1;
  652. $post_data['enable_sig'] = (!$config['allow_sig'] || !$auth->acl_get('f_sigs', $forum_id) || !$auth->acl_get('u_sig')) ? false : ((isset($_POST['attach_sig']) && $user->data['is_registered']) ? true : false);
  653.  
  654. // www.phpBB-SEO.com SEO TOOLKIT BEGIN
  655. if (!empty($phpbb_seo->seo_opt['sql_rewrite'])) {
  656. if ($mode == 'post' || ($mode == 'edit' && $post_data['topic_first_post_id'] == $post_id)) {
  657. $phpbb_seo->set_url($post_data['forum_name'], $forum_id, 'forum');
  658. $_parent = $post_data['topic_type'] == POST_GLOBAL ? $phpbb_seo->seo_static['global_announce'] : $phpbb_seo->seo_url['forum'][$forum_id];
  659. $_t = !empty($post_data['topic_id']) ? max(0, (int) $post_data['topic_id'] ) : 0;
  660. $_url = $phpbb_seo->url_can_edit($forum_id) ? utf8_normalize_nfc(request_var('url', '', true)) : ( isset($post_data['topic_url']) ? $post_data['topic_url'] : '' );
  661. if (!$phpbb_seo->check_url('topic', $_url, $_parent)) {
  662. if (!empty($_url)) {
  663. // Here we get rid of the seo delim (-t) and put it back even in simple mod
  664. // to be able to handle all cases at once
  665. $_url = preg_replace('`' . $phpbb_seo->seo_delim['topic'] . '$`i', '', $_url);
  666. $_title = $phpbb_seo->get_url_info('topic', $_url . $phpbb_seo->seo_delim['topic'] . $_t);
  667. } else {
  668. $_title = $phpbb_seo->modrtype > 2 ? censor_text($post_data['post_subject']) : '';
  669. }
  670. unset($phpbb_seo->seo_url['topic'][$_t]);
  671. $_url = $phpbb_seo->get_url_info('topic', $phpbb_seo->prepare_url( 'topic', $_title, $_t, $_parent , (( empty($_title) || ($_title == $phpbb_seo->seo_static['topic']) ) ? true : false)), 'url');
  672. unset($phpbb_seo->seo_url['topic'][$_t]);
  673. }
  674. $post_data['topic_url'] = $_url;
  675. }
  676. }
  677. // www.phpBB-SEO.com SEO TOOLKIT END
  678. if ($config['allow_topic_notify'] && $user->data['is_registered'])
  679. {
  680. $notify = (isset($_POST['notify'])) ? true : false;
  681. }
  682. else
  683. {
  684. $notify = false;
  685. }
  686.  
  687. $topic_lock = (isset($_POST['lock_topic'])) ? true : false;
  688. $post_lock = (isset($_POST['lock_post'])) ? true : false;
  689. $poll_delete = (isset($_POST['poll_delete'])) ? true : false;
  690.  
  691. if ($submit)
  692. {
  693. $status_switch = (($post_data['enable_bbcode']+1) << 8) + (($post_data['enable_smilies']+1) << 4) + (($post_data['enable_urls']+1) << 2) + (($post_data['enable_sig']+1) << 1);
  694. $status_switch = ($status_switch != $check_value);
  695. }
  696. else
  697. {
  698. $status_switch = 1;
  699. }
  700.  
  701. // Delete Poll
  702. if ($poll_delete && $mode == 'edit' && sizeof($post_data['poll_options']) &&
  703. ((!$post_data['poll_last_vote'] && $post_data['poster_id'] == $user->data['user_id'] && $auth->acl_get('f_delete', $forum_id)) || $auth->acl_get('m_delete', $forum_id)))
  704. {
  705. if ($submit && check_form_key('posting'))
  706. {
  707. $sql = 'DELETE FROM ' . POLL_OPTIONS_TABLE . "
  708. WHERE topic_id = $topic_id";
  709. $db->sql_query($sql);
  710.  
  711. $sql = 'DELETE FROM ' . POLL_VOTES_TABLE . "
  712. WHERE topic_id = $topic_id";
  713. $db->sql_query($sql);
  714.  
  715. $topic_sql = array(
  716. 'poll_title' => '',
  717. 'poll_start' => 0,
  718. 'poll_length' => 0,
  719. 'poll_last_vote' => 0,
  720. 'poll_max_options' => 0,
  721. 'poll_vote_change' => 0
  722. );
  723.  
  724. $sql = 'UPDATE ' . TOPICS_TABLE . '
  725. SET ' . $db->sql_build_array('UPDATE', $topic_sql) . "
  726. WHERE topic_id = $topic_id";
  727. $db->sql_query($sql);
  728. }
  729.  
  730. $post_data['poll_title'] = $post_data['poll_option_text'] = '';
  731. $post_data['poll_vote_change'] = $post_data['poll_max_options'] = $post_data['poll_length'] = 0;
  732. }
  733. else
  734. {
  735. $post_data['poll_title'] = utf8_normalize_nfc(request_var('poll_title', '', true));
  736. $post_data['poll_length'] = request_var('poll_length', 0);
  737. $post_data['poll_option_text'] = utf8_normalize_nfc(request_var('poll_option_text', '', true));
  738. $post_data['poll_max_options'] = request_var('poll_max_options', 1);
  739. $post_data['poll_vote_change'] = ($auth->acl_get('f_votechg', $forum_id) && $auth->acl_get('f_vote', $forum_id) && isset($_POST['poll_vote_change'])) ? 1 : 0;
  740. }
  741.  
  742. // If replying/quoting and last post id has changed
  743. // give user option to continue submit or return to post
  744. // notify and show user the post made between his request and the final submit
  745. if (($mode == 'reply' || $mode == 'quote') && $post_data['topic_cur_post_id'] && $post_data['topic_cur_post_id'] != $post_data['topic_last_post_id'])
  746. {
  747. // Only do so if it is allowed forum-wide
  748. if ($post_data['forum_flags'] & FORUM_FLAG_POST_REVIEW)
  749. {
  750. if (topic_review($topic_id, $forum_id, 'post_review', $post_data['topic_cur_post_id']))
  751. {
  752. $template->assign_var('S_POST_REVIEW', true);
  753. }
  754.  
  755. $submit = false;
  756. $refresh = true;
  757. }
  758. }
  759.  
  760. // Parse Attachments - before checksum is calculated
  761. $message_parser->parse_attachments('fileupload', $mode, $forum_id, $submit, $preview, $refresh);
  762.  
  763. // Grab md5 'checksum' of new message
  764. $message_md5 = md5($message_parser->message);
  765.  
  766. // If editing and checksum has changed we know the post was edited while we're editing
  767. // Notify and show user the changed post
  768. if ($mode == 'edit' && $post_data['forum_flags'] & FORUM_FLAG_POST_REVIEW)
  769. {
  770. $edit_post_message_checksum = request_var('edit_post_message_checksum', '');
  771. $edit_post_subject_checksum = request_var('edit_post_subject_checksum', '');
  772.  
  773. // $post_data['post_checksum'] is the checksum of the post submitted in the meantime
  774. // $message_md5 is the checksum of the post we're about to submit
  775. // $edit_post_message_checksum is the checksum of the post we're editing
  776. // ...
  777.  
  778. // We make sure nobody else made exactly the same change
  779. // we're about to submit by also checking $message_md5 != $post_data['post_checksum']
  780. if (($edit_post_message_checksum !== '' && $edit_post_message_checksum != $post_data['post_checksum'] && $message_md5 != $post_data['post_checksum'])
  781. || ($edit_post_subject_checksum !== '' && $edit_post_subject_checksum != $post_data['post_subject_md5'] && md5($post_data['post_subject']) != $post_data['post_subject_md5']))
  782. {
  783. if (topic_review($topic_id, $forum_id, 'post_review_edit', $post_id))
  784. {
  785. $template->assign_vars(array(
  786. 'S_POST_REVIEW' => true,
  787.  
  788. 'L_POST_REVIEW' => $user->lang['POST_REVIEW_EDIT'],
  789. 'L_POST_REVIEW_EXPLAIN' => $user->lang['POST_REVIEW_EDIT_EXPLAIN'],
  790. ));
  791. }
  792.  
  793. $submit = false;
  794. $refresh = true;
  795. }
  796. }
  797.  
  798. // Check checksum ... don't re-parse message if the same
  799. $update_message = ($mode != 'edit' || $message_md5 != $post_data['post_checksum'] || $status_switch || strlen($post_data['bbcode_uid']) < BBCODE_UID_LEN) ? true : false;
  800.  
  801. // Also check if subject got updated...
  802. $update_subject = $mode != 'edit' || ($post_data['post_subject_md5'] && $post_data['post_subject_md5'] != md5($post_data['post_subject']));
  803.  
  804. // Parse message
  805. if ($update_message)
  806. {
  807. if (sizeof($message_parser->warn_msg))
  808. {
  809. $error[] = implode('<br />', $message_parser->warn_msg);
  810. $message_parser->warn_msg = array();
  811. }
  812.  
  813. $message_parser->parse($post_data['enable_bbcode'], ($config['allow_post_links']) ? $post_data['enable_urls'] : false, $post_data['enable_smilies'], $img_status, $flash_status, $quote_status, $config['allow_post_links']);
  814.  
  815. // On a refresh we do not care about message parsing errors
  816. if (sizeof($message_parser->warn_msg) && $refresh)
  817. {
  818. $message_parser->warn_msg = array();
  819. }
  820. }
  821. else
  822. {
  823. $message_parser->bbcode_bitfield = $post_data['bbcode_bitfield'];
  824. }
  825.  
  826. if ($mode != 'edit' && !$preview && !$refresh && $config['flood_interval'] && !$auth->acl_get('f_ignoreflood', $forum_id))
  827. {
  828. // Flood check
  829. $last_post_time = 0;
  830.  
  831. if ($user->data['is_registered'])
  832. {
  833. $last_post_time = $user->data['user_lastpost_time'];
  834. }
  835. else
  836. {
  837. $sql = 'SELECT post_time AS last_post_time
  838. FROM ' . POSTS_TABLE . "
  839. WHERE poster_ip = '" . $user->ip . "'
  840. AND post_time > " . ($current_time - $config['flood_interval']);
  841. $result = $db->sql_query_limit($sql, 1);
  842. if ($row = $db->sql_fetchrow($result))
  843. {
  844. $last_post_time = $row['last_post_time'];
  845. }
  846. $db->sql_freeresult($result);
  847. }
  848.  
  849. if ($last_post_time && ($current_time - $last_post_time) < intval($config['flood_interval']))
  850. {
  851. $error[] = $user->lang['FLOOD_ERROR'];
  852. }
  853. }
  854.  
  855. // Validate username
  856. if (($post_data['username'] && !$user->data['is_registered']) || ($mode == 'edit' && $post_data['poster_id'] == ANONYMOUS && $post_data['username'] && $post_data['post_username'] && $post_data['post_username'] != $post_data['username']))
  857. {
  858. include($phpbb_root_path . 'includes/functions_user.' . $phpEx);
  859.  
  860. $user->add_lang('ucp');
  861.  
  862. if (($result = validate_username($post_data['username'], (!empty($post_data['post_username'])) ? $post_data['post_username'] : '')) !== false)
  863. {
  864. $error[] = $user->lang[$result . '_USERNAME'];
  865. }
  866.  
  867. if (($result = validate_string($post_data['username'], false, $config['min_name_chars'], $config['max_name_chars'])) !== false)
  868. {
  869. $min_max_amount = ($result == 'TOO_SHORT') ? $config['min_name_chars'] : $config['max_name_chars'];
  870. $error[] = sprintf($user->lang['FIELD_' . $result], $user->lang['USERNAME'], $min_max_amount);
  871. }
  872. }
  873.  
  874. if ($config['enable_post_confirm'] && !$user->data['is_registered'] && in_array($mode, array('quote', 'post', 'reply')))
  875. {
  876. $captcha_data = array(
  877. 'message' => utf8_normalize_nfc(request_var('message', '', true)),
  878. 'subject' => utf8_normalize_nfc(request_var('subject', '', true)),
  879. 'username' => utf8_normalize_nfc(request_var('username', '', true)),
  880. );
  881. $vc_response = $captcha->validate($captcha_data);
  882. if ($vc_response)
  883. {
  884. $error[] = $vc_response;
  885. }
  886. }
  887.  
  888. // check form
  889. if (($submit || $preview) && !check_form_key('posting'))
  890. {
  891. $error[] = $user->lang['FORM_INVALID'];
  892. }
  893.  
  894. // Parse subject
  895. if (!$preview && !$refresh && utf8_clean_string($post_data['post_subject']) === '' && ($mode == 'post' || ($mode == 'edit' && $post_data['topic_first_post_id'] == $post_id)))
  896. {
  897. $error[] = $user->lang['EMPTY_SUBJECT'];
  898. }
  899.  
  900. $post_data['poll_last_vote'] = (isset($post_data['poll_last_vote'])) ? $post_data['poll_last_vote'] : 0;
  901.  
  902. if ($post_data['poll_option_text'] &&
  903. ($mode == 'post' || ($mode == 'edit' && $post_id == $post_data['topic_first_post_id']/* && (!$post_data['poll_last_vote'] || $auth->acl_get('m_edit', $forum_id))*/))
  904. && $auth->acl_get('f_poll', $forum_id))
  905. {
  906. $poll = array(
  907. 'poll_title' => $post_data['poll_title'],
  908. 'poll_length' => $post_data['poll_length'],
  909. 'poll_max_options' => $post_data['poll_max_options'],
  910. 'poll_option_text' => $post_data['poll_option_text'],
  911. 'poll_start' => $post_data['poll_start'],
  912. 'poll_last_vote' => $post_data['poll_last_vote'],
  913. 'poll_vote_change' => $post_data['poll_vote_change'],
  914. 'enable_bbcode' => $post_data['enable_bbcode'],
  915. 'enable_urls' => $post_data['enable_urls'],
  916. 'enable_smilies' => $post_data['enable_smilies'],
  917. 'img_status' => $img_status
  918. );
  919.  
  920. $message_parser->parse_poll($poll);
  921.  
  922. $post_data['poll_options'] = (isset($poll['poll_options'])) ? $poll['poll_options'] : array();
  923. $post_data['poll_title'] = (isset($poll['poll_title'])) ? $poll['poll_title'] : '';
  924.  
  925. /* We reset votes, therefore also allow removing options
  926. if ($post_data['poll_last_vote'] && ($poll['poll_options_size'] < $orig_poll_options_size))
  927. {
  928. $message_parser->warn_msg[] = $user->lang['NO_DELETE_POLL_OPTIONS'];
  929. }*/
  930. }
  931. else if ($mode == 'edit' && $post_id == $post_data['topic_first_post_id'] && $auth->acl_get('f_poll', $forum_id))
  932. {
  933. // The user removed all poll options, this is equal to deleting the poll.
  934. $poll = array(
  935. 'poll_title' => '',
  936. 'poll_length' => 0,
  937. 'poll_max_options' => 0,
  938. 'poll_option_text' => '',
  939. 'poll_start' => 0,
  940. 'poll_last_vote' => 0,
  941. 'poll_vote_change' => 0,
  942. 'poll_options' => array(),
  943. );
  944.  
  945. $post_data['poll_options'] = array();
  946. $post_data['poll_title'] = '';
  947. $post_data['poll_start'] = $post_data['poll_length'] = $post_data['poll_max_options'] = $post_data['poll_last_vote'] = $post_data['poll_vote_change'] = 0;
  948. }
  949. else if (!$auth->acl_get('f_poll', $forum_id) && ($mode == 'edit') && ($post_id == $post_data['topic_first_post_id']) && ($original_poll_data['poll_title'] != ''))
  950. {
  951. // We have a poll but the editing user is not permitted to create/edit it.
  952. // So we just keep the original poll-data.
  953. $poll = array_merge($original_poll_data, array(
  954. 'enable_bbcode' => $post_data['enable_bbcode'],
  955. 'enable_urls' => $post_data['enable_urls'],
  956. 'enable_smilies' => $post_data['enable_smilies'],
  957. 'img_status' => $img_status,
  958. ));
  959.  
  960. $message_parser->parse_poll($poll);
  961.  
  962. $post_data['poll_options'] = (isset($poll['poll_options'])) ? $poll['poll_options'] : array();
  963. $post_data['poll_title'] = (isset($poll['poll_title'])) ? $poll['poll_title'] : '';
  964. }
  965. else
  966. {
  967. $poll = array();
  968. }
  969.  
  970. // Check topic type
  971. if ($post_data['topic_type'] != POST_NORMAL && ($mode == 'post' || ($mode == 'edit' && $post_data['topic_first_post_id'] == $post_id)))
  972. {
  973. switch ($post_data['topic_type'])
  974. {
  975. case POST_GLOBAL:
  976. case POST_ANNOUNCE:
  977. $auth_option = 'f_announce';
  978. break;
  979.  
  980. case POST_STICKY:
  981. $auth_option = 'f_sticky';
  982. break;
  983.  
  984. default:
  985. $auth_option = '';
  986. break;
  987. }
  988.  
  989. if (!$auth->acl_get($auth_option, $forum_id))
  990. {
  991. // There is a special case where a user edits his post whereby the topic type got changed by an admin/mod.
  992. // Another case would be a mod not having sticky permissions for example but edit permissions.
  993. if ($mode == 'edit')
  994. {
  995. // To prevent non-authed users messing around with the topic type we reset it to the original one.
  996. $post_data['topic_type'] = $post_data['orig_topic_type'];
  997. }
  998. else
  999. {
  1000. $error[] = $user->lang['CANNOT_POST_' . str_replace('F_', '', strtoupper($auth_option))];
  1001. }
  1002. }
  1003. }
  1004.  
  1005. if (sizeof($message_parser->warn_msg))
  1006. {
  1007. $error[] = implode('<br />', $message_parser->warn_msg);
  1008. }
  1009.  
  1010. // DNSBL check
  1011. if ($config['check_dnsbl'] && !$refresh)
  1012. {
  1013. if (($dnsbl = $user->check_dnsbl('post')) !== false)
  1014. {
  1015. $error[] = sprintf($user->lang['IP_BLACKLISTED'], $user->ip, $dnsbl[1]);
  1016. }
  1017. }
  1018.  
  1019. // Store message, sync counters
  1020. if (!sizeof($error) && $submit)
  1021. {
  1022. // Check if we want to de-globalize the topic... and ask for new forum
  1023. if ($post_data['topic_type'] != POST_GLOBAL)
  1024. {
  1025. $sql = 'SELECT topic_type, forum_id
  1026. FROM ' . TOPICS_TABLE . "
  1027. WHERE topic_id = $topic_id";
  1028. $result = $db->sql_query($sql);
  1029. $row = $db->sql_fetchrow($result);
  1030. $db->sql_freeresult($result);
  1031.  
  1032. if ($row && !$row['forum_id'] && $row['topic_type'] == POST_GLOBAL)
  1033. {
  1034. $to_forum_id = request_var('to_forum_id', 0);
  1035.  
  1036. if ($to_forum_id)
  1037. {
  1038. $sql = 'SELECT forum_type
  1039. FROM ' . FORUMS_TABLE . '
  1040. WHERE forum_id = ' . $to_forum_id;
  1041. $result = $db->sql_query($sql);
  1042. $forum_type = (int) $db->sql_fetchfield('forum_type');
  1043. $db->sql_freeresult($result);
  1044.  
  1045. if ($forum_type != FORUM_POST || !$auth->acl_get('f_post', $to_forum_id) || (!$auth->acl_get('m_approve', $to_forum_id) && !$auth->acl_get('f_noapprove', $to_forum_id)))
  1046. {
  1047. $to_forum_id = 0;
  1048. }
  1049. }
  1050.  
  1051. if (!$to_forum_id)
  1052. {
  1053. include_once($phpbb_root_path . 'includes/functions_admin.' . $phpEx);
  1054.  
  1055. $template->assign_vars(array(
  1056. 'S_FORUM_SELECT' => make_forum_select(false, false, false, true, true, true),
  1057. 'S_UNGLOBALISE' => true)
  1058. );
  1059.  
  1060. $submit = false;
  1061. $refresh = true;
  1062. }
  1063. else
  1064. {
  1065. if (!$auth->acl_get('f_post', $to_forum_id))
  1066. {
  1067. // This will only be triggered if the user tried to trick the forum.
  1068. trigger_error('NOT_AUTHORISED');
  1069. }
  1070.  
  1071. $forum_id = $to_forum_id;
  1072. }
  1073. }
  1074. }
  1075.  
  1076. if ($submit)
  1077. {
  1078. // Lock/Unlock Topic
  1079. $change_topic_status = $post_data['topic_status'];
  1080. $perm_lock_unlock = ($auth->acl_get('m_lock', $forum_id) || ($auth->acl_get('f_user_lock', $forum_id) && $user->data['is_registered'] && !empty($post_data['topic_poster']) && $user->data['user_id'] == $post_data['topic_poster'] && $post_data['topic_status'] == ITEM_UNLOCKED)) ? true : false;
  1081.  
  1082. if ($post_data['topic_status'] == ITEM_LOCKED && !$topic_lock && $perm_lock_unlock)
  1083. {
  1084. $change_topic_status = ITEM_UNLOCKED;
  1085. }
  1086. else if ($post_data['topic_status'] == ITEM_UNLOCKED && $topic_lock && $perm_lock_unlock)
  1087. {
  1088. $change_topic_status = ITEM_LOCKED;
  1089. }
  1090.  
  1091. if ($change_topic_status != $post_data['topic_status'])
  1092. {
  1093. $sql = 'UPDATE ' . TOPICS_TABLE . "
  1094. SET topic_status = $change_topic_status
  1095. WHERE topic_id = $topic_id
  1096. AND topic_moved_id = 0";
  1097. $db->sql_query($sql);
  1098.  
  1099. $user_lock = ($auth->acl_get('f_user_lock', $forum_id) && $user->data['is_registered'] && $user->data['user_id'] == $post_data['topic_poster']) ? 'USER_' : '';
  1100.  
  1101. add_log('mod', $forum_id, $topic_id, 'LOG_' . $user_lock . (($change_topic_status == ITEM_LOCKED) ? 'LOCK' : 'UNLOCK'), $post_data['topic_title']);
  1102. }
  1103.  
  1104. // Lock/Unlock Post Edit
  1105. if ($mode == 'edit' && $post_data['post_edit_locked'] == ITEM_LOCKED && !$post_lock && $auth->acl_get('m_edit', $forum_id))
  1106. {
  1107. $post_data['post_edit_locked'] = ITEM_UNLOCKED;
  1108. }
  1109. else if ($mode == 'edit' && $post_data['post_edit_locked'] == ITEM_UNLOCKED && $post_lock && $auth->acl_get('m_edit', $forum_id))
  1110. {
  1111. $post_data['post_edit_locked'] = ITEM_LOCKED;
  1112. }
  1113.  
  1114. $data = array(
  1115. 'topic_title' => (empty($post_data['topic_title'])) ? $post_data['post_subject'] : $post_data['topic_title'],
  1116. 'topic_first_post_id' => (isset($post_data['topic_first_post_id'])) ? (int) $post_data['topic_first_post_id'] : 0,
  1117. 'topic_last_post_id' => (isset($post_data['topic_last_post_id'])) ? (int) $post_data['topic_last_post_id'] : 0,
  1118. 'topic_time_limit' => (int) $post_data['topic_time_limit'],
  1119. 'topic_attachment' => (isset($post_data['topic_attachment'])) ? (int) $post_data['topic_attachment'] : 0,
  1120. 'post_id' => (int) $post_id,
  1121. 'topic_id' => (int) $topic_id,
  1122. 'forum_id' => (int) $forum_id,
  1123. 'icon_id' => (int) $post_data['icon_id'],
  1124. 'poster_id' => (int) $post_data['poster_id'],
  1125. 'enable_sig' => (bool) $post_data['enable_sig'],
  1126. 'enable_bbcode' => (bool) $post_data['enable_bbcode'],
  1127. 'enable_smilies' => (bool) $post_data['enable_smilies'],
  1128. 'enable_urls' => (bool) $post_data['enable_urls'],
  1129. 'enable_indexing' => (bool) $post_data['enable_indexing'],
  1130. 'message_md5' => (string) $message_md5,
  1131. 'post_time' => (isset($post_data['post_time'])) ? (int) $post_data['post_time'] : $current_time,
  1132. 'post_checksum' => (isset($post_data['post_checksum'])) ? (string) $post_data['post_checksum'] : '',
  1133. 'post_edit_reason' => $post_data['post_edit_reason'],
  1134. 'post_edit_user' => ($mode == 'edit') ? $user->data['user_id'] : ((isset($post_data['post_edit_user'])) ? (int) $post_data['post_edit_user'] : 0),
  1135. 'forum_parents' => $post_data['forum_parents'],
  1136. 'forum_name' => $post_data['forum_name'],
  1137. 'notify' => $notify,
  1138. 'notify_set' => $post_data['notify_set'],
  1139. 'poster_ip' => (isset($post_data['poster_ip'])) ? $post_data['poster_ip'] : $user->ip,
  1140. 'post_edit_locked' => (int) $post_data['post_edit_locked'],
  1141. 'bbcode_bitfield' => $message_parser->bbcode_bitfield,
  1142. 'bbcode_uid' => $message_parser->bbcode_uid,
  1143. 'message' => $message_parser->message,
  1144. 'attachment_data' => $message_parser->attachment_data,
  1145. 'filename_data' => $message_parser->filename_data,
  1146.  
  1147. 'topic_approved' => (isset($post_data['topic_approved'])) ? $post_data['topic_approved'] : false,
  1148. 'post_approved' => (isset($post_data['post_approved'])) ? $post_data['post_approved'] : false,
  1149. // www.phpBB-SEO.com SEO TOOLKIT BEGIN
  1150. if (!empty($phpbb_seo->seo_opt['sql_rewrite'])) {
  1151. $data += array('topic_url' => isset($post_data['topic_url']) ? $post_data['topic_url'] : '');
  1152. }
  1153. // www.phpBB-SEO.com SEO TOOLKIT END
  1154. );
  1155.  
  1156. if ($mode == 'edit')
  1157. {
  1158. $data['topic_replies_real'] = $post_data['topic_replies_real'];
  1159. $data['topic_replies'] = $post_data['topic_replies'];
  1160. }
  1161.  
  1162. // The last parameter tells submit_post if search indexer has to be run
  1163. $redirect_url = submit_post($mode, $post_data['post_subject'], $post_data['username'], $post_data['topic_type'], $poll, $data, $update_message, ($update_message || $update_subject) ? true : false);
  1164.  
  1165. if ($config['enable_post_confirm'] && !$user->data['is_registered'] && (isset($captcha) && $captcha->is_solved() === true) && ($mode == 'post' || $mode == 'reply' || $mode == 'quote'))
  1166. {
  1167. $captcha->reset();
  1168. }
  1169.  
  1170. // Check the permissions for post approval. Moderators are not affected.
  1171. if ((!$auth->acl_get('f_noapprove', $data['forum_id']) && !$auth->acl_get('m_approve', $data['forum_id']) && empty($data['force_approved_state'])) || (isset($data['force_approved_state']) && !$data['force_approved_state']))
  1172. {
  1173. meta_refresh(10, $redirect_url);
  1174. $message = ($mode == 'edit') ? $user->lang['POST_EDITED_MOD'] : $user->lang['POST_STORED_MOD'];
  1175. $message .= (($user->data['user_id'] == ANONYMOUS) ? '' : ' '. $user->lang['POST_APPROVAL_NOTIFY']);
  1176. }
  1177. else
  1178. {
  1179. meta_refresh(3, $redirect_url);
  1180.  
  1181. $message = ($mode == 'edit') ? 'POST_EDITED' : 'POST_STORED';
  1182. $message = $user->lang[$message] . '<br /><br />' . sprintf($user->lang['VIEW_MESSAGE'], '<a href="' . $redirect_url . '">', '</a>');
  1183. }
  1184.  
  1185. $message .= '<br /><br />' . sprintf($user->lang['RETURN_FORUM'], '<a href="' . append_sid("{$phpbb_root_path}viewforum.$phpEx", 'f=' . $data['forum_id']) . '">', '</a>');
  1186. trigger_error($message);
  1187. }
  1188. }
  1189. }
  1190.  
  1191. // Preview
  1192. if (!sizeof($error) && $preview)
  1193. {
  1194. $post_data['post_time'] = ($mode == 'edit') ? $post_data['post_time'] : $current_time;
  1195.  
  1196. $preview_message = $message_parser->format_display($post_data['enable_bbcode'], $post_data['enable_urls'], $post_data['enable_smilies'], false);
  1197.  
  1198. $preview_signature = ($mode == 'edit') ? $post_data['user_sig'] : $user->data['user_sig'];
  1199. $preview_signature_uid = ($mode == 'edit') ? $post_data['user_sig_bbcode_uid'] : $user->data['user_sig_bbcode_uid'];
  1200. $preview_signature_bitfield = ($mode == 'edit') ? $post_data['user_sig_bbcode_bitfield'] : $user->data['user_sig_bbcode_bitfield'];
  1201.  
  1202. // Signature
  1203. if ($post_data['enable_sig'] && $config['allow_sig'] && $preview_signature && $auth->acl_get('f_sigs', $forum_id))
  1204. {
  1205. $parse_sig = new parse_message($preview_signature);
  1206. $parse_sig->bbcode_uid = $preview_signature_uid;
  1207. $parse_sig->bbcode_bitfield = $preview_signature_bitfield;
  1208.  
  1209. // Not sure about parameters for bbcode/smilies/urls... in signatures
  1210. $parse_sig->format_display($config['allow_sig_bbcode'], $config['allow_sig_links'], $config['allow_sig_smilies']);
  1211. $preview_signature = $parse_sig->message;
  1212. unset($parse_sig);
  1213. }
  1214. else
  1215. {
  1216. $preview_signature = '';
  1217. }
  1218.  
  1219. $preview_subject = censor_text($post_data['post_subject']);
  1220.  
  1221. // Poll Preview
  1222. if (!$poll_delete && ($mode == 'post' || ($mode == 'edit' && $post_id == $post_data['topic_first_post_id']/* && (!$post_data['poll_last_vote'] || $auth->acl_get('m_edit', $forum_id))*/))
  1223. && $auth->acl_get('f_poll', $forum_id))
  1224. {
  1225. $parse_poll = new parse_message($post_data['poll_title']);
  1226. $parse_poll->bbcode_uid = $message_parser->bbcode_uid;
  1227. $parse_poll->bbcode_bitfield = $message_parser->bbcode_bitfield;
  1228.  
  1229. $parse_poll->format_display($post_data['enable_bbcode'], $post_data['enable_urls'], $post_data['enable_smilies']);
  1230.  
  1231. if ($post_data['poll_length'])
  1232. {
  1233. $poll_end = ($post_data['poll_length'] * 86400) + (($post_data['poll_start']) ? $post_data['poll_start'] : time());
  1234. }
  1235.  
  1236. $template->assign_vars(array(
  1237. 'S_HAS_POLL_OPTIONS' => (sizeof($post_data['poll_options'])),
  1238. 'S_IS_MULTI_CHOICE' => ($post_data['poll_max_options'] > 1) ? true : false,
  1239.  
  1240. 'POLL_QUESTION' => $parse_poll->message,
  1241.  
  1242. 'L_POLL_LENGTH' => ($post_data['poll_length']) ? sprintf($user->lang['POLL_RUN_TILL'], $user->format_date($poll_end)) : '',
  1243. 'L_MAX_VOTES' => ($post_data['poll_max_options'] == 1) ? $user->lang['MAX_OPTION_SELECT'] : sprintf($user->lang['MAX_OPTIONS_SELECT'], $post_data['poll_max_options']))
  1244. );
  1245.  
  1246. $parse_poll->message = implode("\n", $post_data['poll_options']);
  1247. $parse_poll->format_display($post_data['enable_bbcode'], $post_data['enable_urls'], $post_data['enable_smilies']);
  1248. $preview_poll_options = explode('<br />', $parse_poll->message);
  1249. unset($parse_poll);
  1250.  
  1251. foreach ($preview_poll_options as $key => $option)
  1252. {
  1253. $template->assign_block_vars('poll_option', array(
  1254. 'POLL_OPTION_CAPTION' => $option,
  1255. 'POLL_OPTION_ID' => $key + 1)
  1256. );
  1257. }
  1258. unset($preview_poll_options);
  1259. }
  1260.  
  1261. // Attachment Preview
  1262. if (sizeof($message_parser->attachment_data))
  1263. {
  1264. $template->assign_var('S_HAS_ATTACHMENTS', true);
  1265.  
  1266. $update_count = array();
  1267. $attachment_data = $message_parser->attachment_data;
  1268.  
  1269. parse_attachments($forum_id, $preview_message, $attachment_data, $update_count, true);
  1270.  
  1271. foreach ($attachment_data as $i => $attachment)
  1272. {
  1273. $template->assign_block_vars('attachment', array(
  1274. 'DISPLAY_ATTACHMENT' => $attachment)
  1275. );
  1276. }
  1277. unset($attachment_data);
  1278. }
  1279.  
  1280. if (!sizeof($error))
  1281. {
  1282. $template->assign_vars(array(
  1283. 'PREVIEW_SUBJECT' => $preview_subject,
  1284. 'PREVIEW_MESSAGE' => $preview_message,
  1285. 'PREVIEW_SIGNATURE' => $preview_signature,
  1286.  
  1287. 'S_DISPLAY_PREVIEW' => true)
  1288. );
  1289. }
  1290. }
  1291.  
  1292. // Decode text for message display
  1293. $post_data['bbcode_uid'] = ($mode == 'quote' && !$preview && !$refresh && !sizeof($error)) ? $post_data['bbcode_uid'] : $message_parser->bbcode_uid;
  1294. $message_parser->decode_message($post_data['bbcode_uid']);
  1295.  
  1296. if ($mode == 'quote' && !$submit && !$preview && !$refresh)
  1297. {
  1298. if ($config['allow_bbcode'])
  1299. {
  1300. $message_parser->message = '[quote=&quot;' . $post_data['quote_username'] . '&quot;]' . censor_text(trim($message_parser->message)) . "[/quote]\n";
  1301. }
  1302. else
  1303. {
  1304. $offset = 0;
  1305. $quote_string = "&gt; ";
  1306. $message = censor_text(trim($message_parser->message));
  1307. // see if we are nesting. It's easily tricked but should work for one level of nesting
  1308. if (strpos($message, "&gt;") !== false)
  1309. {
  1310. $offset = 10;
  1311. }
  1312. $message = utf8_wordwrap($message, 75 + $offset, "\n");
  1313.  
  1314. $message = $quote_string . $message;
  1315. $message = str_replace("\n", "\n" . $quote_string, $message);
  1316. $message_parser->message = $post_data['quote_username'] . " " . $user->lang['WROTE'] . ":\n" . $message . "\n";
  1317. }
  1318. }
  1319.  
  1320. if (($mode == 'reply' || $mode == 'quote') && !$submit && !$preview && !$refresh)
  1321. {
  1322. $post_data['post_subject'] = ((strpos($post_data['post_subject'], 'Re: ') !== 0) ? 'Re: ' : '') . censor_text($post_data['post_subject']);
  1323. }
  1324.  
  1325. $attachment_data = $message_parser->attachment_data;
  1326. $filename_data = $message_parser->filename_data;
  1327. $post_data['post_text'] = $message_parser->message;
  1328.  
  1329. if (sizeof($post_data['poll_options']) || !empty($post_data['poll_title']))
  1330. {
  1331. $message_parser->message = $post_data['poll_title'];
  1332. $message_parser->bbcode_uid = $post_data['bbcode_uid'];
  1333.  
  1334. $message_parser->decode_message();
  1335. $post_data['poll_title'] = $message_parser->message;
  1336.  
  1337. $message_parser->message = implode("\n", $post_data['poll_options']);
  1338. $message_parser->decode_message();
  1339. $post_data['poll_options'] = explode("\n", $message_parser->message);
  1340. }
  1341.  
  1342. // MAIN POSTING PAGE BEGINS HERE
  1343.  
  1344. // Forum moderators?
  1345. $moderators = array();
  1346. if ($config['load_moderators'])
  1347. {
  1348. get_moderators($moderators, $forum_id);
  1349. }
  1350.  
  1351. // Generate smiley listing
  1352. generate_smilies('inline', $forum_id);
  1353.  
  1354. // Generate inline attachment select box
  1355. posting_gen_inline_attachments($attachment_data);
  1356.  
  1357. // Do show topic type selection only in first post.
  1358. $topic_type_toggle = false;
  1359.  
  1360. if ($mode == 'post' || ($mode == 'edit' && $post_id == $post_data['topic_first_post_id']))
  1361. {
  1362. $topic_type_toggle = posting_gen_topic_types($forum_id, $post_data['topic_type']);
  1363. }
  1364.  
  1365. $s_topic_icons = false;
  1366. if ($post_data['enable_icons'] && $auth->acl_get('f_icons', $forum_id))
  1367. {
  1368. $s_topic_icons = posting_gen_topic_icons($mode, $post_data['icon_id']);
  1369. }
  1370.  
  1371. $bbcode_checked = (isset($post_data['enable_bbcode'])) ? !$post_data['enable_bbcode'] : (($config['allow_bbcode']) ? !$user->optionget('bbcode') : 1);
  1372. $smilies_checked = (isset($post_data['enable_smilies'])) ? !$post_data['enable_smilies'] : (($config['allow_smilies']) ? !$user->optionget('smilies') : 1);
  1373. $urls_checked = (isset($post_data['enable_urls'])) ? !$post_data['enable_urls'] : 0;
  1374. $sig_checked = $post_data['enable_sig'];
  1375. $lock_topic_checked = (isset($topic_lock) && $topic_lock) ? $topic_lock : (($post_data['topic_status'] == ITEM_LOCKED) ? 1 : 0);
  1376. $lock_post_checked = (isset($post_lock)) ? $post_lock : $post_data['post_edit_locked'];
  1377.  
  1378. // If the user is replying or posting and not already watching this topic but set to always being notified we need to overwrite this setting
  1379. $notify_set = ($mode != 'edit' && $config['allow_topic_notify'] && $user->data['is_registered'] && !$post_data['notify_set']) ? $user->data['user_notify'] : $post_data['notify_set'];
  1380. $notify_checked = (isset($notify)) ? $notify : (($mode == 'post') ? $user->data['user_notify'] : $notify_set);
  1381.  
  1382. // Page title & action URL
  1383. $s_action = append_sid("{$phpbb_root_path}posting.$phpEx", "mode=$mode&amp;f=$forum_id");
  1384. $s_action .= ($topic_id) ? "&amp;t=$topic_id" : '';
  1385. $s_action .= ($post_id) ? "&amp;p=$post_id" : '';
  1386.  
  1387. switch ($mode)
  1388. {
  1389. case 'post':
  1390. $page_title = $user->lang['POST_TOPIC'];
  1391. break;
  1392.  
  1393. case 'quote':
  1394. case 'reply':
  1395. $page_title = $user->lang['POST_REPLY'];
  1396. break;
  1397.  
  1398. case 'delete':
  1399. case 'edit':
  1400. $page_title = $user->lang['EDIT_POST'];
  1401. break;
  1402. }
  1403.  
  1404. // Build Navigation Links
  1405. generate_forum_nav($post_data);
  1406.  
  1407. // Build Forum Rules
  1408. generate_forum_rules($post_data);
  1409.  
  1410. // Posting uses is_solved for legacy reasons. Plugins have to use is_solved to force themselves to be displayed.
  1411. if ($config['enable_post_confirm'] && !$user->data['is_registered'] && (isset($captcha) && $captcha->is_solved() === false) && ($mode == 'post' || $mode == 'reply' || $mode == 'quote'))
  1412. {
  1413.  
  1414. $template->assign_vars(array(
  1415. 'S_CONFIRM_CODE' => true,
  1416. 'CAPTCHA_TEMPLATE' => $captcha->get_template(),
  1417. ));
  1418. }
  1419.  
  1420. $s_hidden_fields = ($mode == 'reply' || $mode == 'quote') ? '<input type="hidden" name="topic_cur_post_id" value="' . $post_data['topic_last_post_id'] . '" />' : '';
  1421. $s_hidden_fields .= '<input type="hidden" name="lastclick" value="' . $current_time . '" />';
  1422. $s_hidden_fields .= ($draft_id || isset($_REQUEST['draft_loaded'])) ? '<input type="hidden" name="draft_loaded" value="' . request_var('draft_loaded', $draft_id) . '" />' : '';
  1423.  
  1424. if ($mode == 'edit')
  1425. {
  1426. $s_hidden_fields .= build_hidden_fields(array(
  1427. 'edit_post_message_checksum' => $post_data['post_checksum'],
  1428. 'edit_post_subject_checksum' => $post_data['post_subject_md5'],
  1429. ));
  1430. }
  1431.  
  1432. // Add the confirm id/code pair to the hidden fields, else an error is displayed on next submit/preview
  1433. if (isset($captcha) && $captcha->is_solved() !== false)
  1434. {
  1435. $s_hidden_fields .= build_hidden_fields($captcha->get_hidden_fields());
  1436. }
  1437.  
  1438. $form_enctype = (@ini_get('file_uploads') == '0' || strtolower(@ini_get('file_uploads')) == 'off' || !$config['allow_attachments'] || !$auth->acl_get('u_attach') || !$auth->acl_get('f_attach', $forum_id)) ? '' : ' enctype="multipart/form-data"';
  1439. add_form_key('posting');
  1440.  
  1441.  
  1442. // Start assigning vars for main posting page ...
  1443. $template->assign_vars(array(
  1444. 'L_POST_A' => $page_title,
  1445. 'L_ICON' => ($mode == 'reply' || $mode == 'quote' || ($mode == 'edit' && $post_id != $post_data['topic_first_post_id'])) ? $user->lang['POST_ICON'] : $user->lang['TOPIC_ICON'],
  1446. 'L_MESSAGE_BODY_EXPLAIN' => (intval($config['max_post_chars'])) ? sprintf($user->lang['MESSAGE_BODY_EXPLAIN'], intval($config['max_post_chars'])) : '',
  1447.  
  1448. 'FORUM_NAME' => $post_data['forum_name'],
  1449. 'FORUM_DESC' => ($post_data['forum_desc']) ? generate_text_for_display($post_data['forum_desc'], $post_data['forum_desc_uid'], $post_data['forum_desc_bitfield'], $post_data['forum_desc_options']) : '',
  1450. 'TOPIC_TITLE' => censor_text($post_data['topic_title']),
  1451. // www.phpBB-SEO.com SEO TOOLKIT BEGIN
  1452. 'TOPIC_URL' => isset($post_data['topic_url']) ? preg_replace('`' . $phpbb_seo->seo_delim['topic'] . '$`i', '', $post_data['topic_url']) : '',
  1453. 'S_URL' => ($mode == 'post' || ($mode == 'edit' && $post_id == $post_data['topic_first_post_id'])) ? $phpbb_seo->url_can_edit($forum_id) : false,
  1454. // www.phpBB-SEO.com SEO TOOLKIT END
  1455. 'MODERATORS' => (sizeof($moderators)) ? implode(', ', $moderators[$forum_id]) : '',
  1456. 'USERNAME' => ((!$preview && $mode != 'quote') || $preview) ? $post_data['username'] : '',
  1457. 'SUBJECT' => $post_data['post_subject'],
  1458. 'MESSAGE' => $post_data['post_text'],
  1459. 'BBCODE_STATUS' => ($bbcode_status) ? sprintf($user->lang['BBCODE_IS_ON'], '<a href="' . append_sid("{$phpbb_root_path}faq.$phpEx", 'mode=bbcode') . '">', '</a>') : sprintf($user->lang['BBCODE_IS_OFF'], '<a href="' . append_sid("{$phpbb_root_path}faq.$phpEx", 'mode=bbcode') . '">', '</a>'),
  1460. 'IMG_STATUS' => ($img_status) ? $user->lang['IMAGES_ARE_ON'] : $user->lang['IMAGES_ARE_OFF'],
  1461. 'FLASH_STATUS' => ($flash_status) ? $user->lang['FLASH_IS_ON'] : $user->lang['FLASH_IS_OFF'],
  1462. 'SMILIES_STATUS' => ($smilies_status) ? $user->lang['SMILIES_ARE_ON'] : $user->lang['SMILIES_ARE_OFF'],
  1463. 'URL_STATUS' => ($bbcode_status && $url_status) ? $user->lang['URL_IS_ON'] : $user->lang['URL_IS_OFF'],
  1464. 'MAX_FONT_SIZE' => (int) $config['max_post_font_size'],
  1465. 'MINI_POST_IMG' => $user->img('icon_post_target', $user->lang['POST']),
  1466. 'POST_DATE' => ($post_data['post_time']) ? $user->format_date($post_data['post_time']) : '',
  1467. 'ERROR' => (sizeof($error)) ? implode('<br />', $error) : '',
  1468. 'TOPIC_TIME_LIMIT' => (int) $post_data['topic_time_limit'],
  1469. 'EDIT_REASON' => $post_data['post_edit_reason'],
  1470. 'U_VIEW_FORUM' => append_sid("{$phpbb_root_path}viewforum.$phpEx", "f=$forum_id"),
  1471. 'U_VIEW_TOPIC' => ($mode != 'post') ? append_sid("{$phpbb_root_path}viewtopic.$phpEx", "f=$forum_id&amp;t=$topic_id") : '',
  1472. 'U_PROGRESS_BAR' => append_sid("{$phpbb_root_path}posting.$phpEx", "f=$forum_id&amp;mode=popup"),
  1473. 'UA_PROGRESS_BAR' => addslashes(append_sid("{$phpbb_root_path}posting.$phpEx", "f=$forum_id&amp;mode=popup")),
  1474.  
  1475. 'S_PRIVMSGS' => false,
  1476. 'S_CLOSE_PROGRESS_WINDOW' => (isset($_POST['add_file'])) ? true : false,
  1477. 'S_EDIT_POST' => ($mode == 'edit') ? true : false,
  1478. 'S_EDIT_REASON' => ($mode == 'edit' && $auth->acl_get('m_edit', $forum_id)) ? true : false,
  1479. 'S_DISPLAY_USERNAME' => (!$user->data['is_registered'] || ($mode == 'edit' && $post_data['poster_id'] == ANONYMOUS)) ? true : false,
  1480. 'S_SHOW_TOPIC_ICONS' => $s_topic_icons,
  1481. 'S_DELETE_ALLOWED' => ($mode == 'edit' && (($post_id == $post_data['topic_last_post_id'] && $post_data['poster_id'] == $user->data['user_id'] && $auth->acl_get('f_delete', $forum_id) && !$post_data['post_edit_locked'] && ($post_data['post_time'] > time() - ($config['delete_time'] * 60) || !$config['delete_time'])) || $auth->acl_get('m_delete', $forum_id))) ? true : false,
  1482. 'S_BBCODE_ALLOWED' => ($bbcode_status) ? 1 : 0,
  1483. 'S_BBCODE_CHECKED' => ($bbcode_checked) ? ' checked="checked"' : '',
  1484. 'S_SMILIES_ALLOWED' => $smilies_status,
  1485. 'S_SMILIES_CHECKED' => ($smilies_checked) ? ' checked="checked"' : '',
  1486. 'S_SIG_ALLOWED' => ($auth->acl_get('f_sigs', $forum_id) && $config['allow_sig'] && $user->data['is_registered']) ? true : false,
  1487. 'S_SIGNATURE_CHECKED' => ($sig_checked) ? ' checked="checked"' : '',
  1488. 'S_NOTIFY_ALLOWED' => (!$user->data['is_registered'] || ($mode == 'edit' && $user->data['user_id'] != $post_data['poster_id']) || !$config['allow_topic_notify'] || !$config['email_enable']) ? false : true,
  1489. 'S_NOTIFY_CHECKED' => ($notify_checked) ? ' checked="checked"' : '',
  1490. 'S_LOCK_TOPIC_ALLOWED' => (($mode == 'edit' || $mode == 'reply' || $mode == 'quote') && ($auth->acl_get('m_lock', $forum_id) || ($auth->acl_get('f_user_lock', $forum_id) && $user->data['is_registered'] && !empty($post_data['topic_poster']) && $user->data['user_id'] == $post_data['topic_poster'] && $post_data['topic_status'] == ITEM_UNLOCKED))) ? true : false,
  1491. 'S_LOCK_TOPIC_CHECKED' => ($lock_topic_checked) ? ' checked="checked"' : '',
  1492. 'S_LOCK_POST_ALLOWED' => ($mode == 'edit' && $auth->acl_get('m_edit', $forum_id)) ? true : false,
  1493. 'S_LOCK_POST_CHECKED' => ($lock_post_checked) ? ' checked="checked"' : '',
  1494. 'S_LINKS_ALLOWED' => $url_status,
  1495. 'S_MAGIC_URL_CHECKED' => ($urls_checked) ? ' checked="checked"' : '',
  1496. 'S_TYPE_TOGGLE' => $topic_type_toggle,
  1497. 'S_SAVE_ALLOWED' => ($auth->acl_get('u_savedrafts') && $user->data['is_registered'] && $mode != 'edit') ? true : false,
  1498. 'S_HAS_DRAFTS' => ($auth->acl_get('u_savedrafts') && $user->data['is_registered'] && $post_data['drafts']) ? true : false,
  1499. 'S_FORM_ENCTYPE' => $form_enctype,
  1500.  
  1501. 'S_BBCODE_IMG' => $img_status,
  1502. 'S_BBCODE_URL' => $url_status,
  1503. 'S_BBCODE_FLASH' => $flash_status,
  1504. 'S_BBCODE_QUOTE' => $quote_status,
  1505.  
  1506. 'S_POST_ACTION' => $s_action,
  1507. 'S_HIDDEN_FIELDS' => $s_hidden_fields)
  1508. );
  1509.  
  1510. // Build custom bbcodes array
  1511. display_custom_bbcodes();
  1512.  
  1513. // Poll entry
  1514. if (($mode == 'post' || ($mode == 'edit' && $post_id == $post_data['topic_first_post_id']/* && (!$post_data['poll_last_vote'] || $auth->acl_get('m_edit', $forum_id))*/))
  1515. && $auth->acl_get('f_poll', $forum_id))
  1516. {
  1517. $template->assign_vars(array(
  1518. 'S_SHOW_POLL_BOX' => true,
  1519. 'S_POLL_VOTE_CHANGE' => ($auth->acl_get('f_votechg', $forum_id) && $auth->acl_get('f_vote', $forum_id)),
  1520. 'S_POLL_DELETE' => ($mode == 'edit' && sizeof($post_data['poll_options']) && ((!$post_data['poll_last_vote'] && $post_data['poster_id'] == $user->data['user_id'] && $auth->acl_get('f_delete', $forum_id)) || $auth->acl_get('m_delete', $forum_id))),
  1521. 'S_POLL_DELETE_CHECKED' => (!empty($poll_delete)) ? true : false,
  1522.  
  1523. 'L_POLL_OPTIONS_EXPLAIN' => sprintf($user->lang['POLL_OPTIONS_' . (($mode == 'edit') ? 'EDIT_' : '') . 'EXPLAIN'], $config['max_poll_options']),
  1524.  
  1525. 'VOTE_CHANGE_CHECKED' => (!empty($post_data['poll_vote_change'])) ? ' checked="checked"' : '',
  1526. 'POLL_TITLE' => (isset($post_data['poll_title'])) ? $post_data['poll_title'] : '',
  1527. 'POLL_OPTIONS' => (!empty($post_data['poll_options'])) ? implode("\n", $post_data['poll_options']) : '',
  1528. 'POLL_MAX_OPTIONS' => (isset($post_data['poll_max_options'])) ? (int) $post_data['poll_max_options'] : 1,
  1529. 'POLL_LENGTH' => $post_data['poll_length'])
  1530. );
  1531. }
  1532.  
  1533. // Show attachment box for adding attachments if true
  1534. $allowed = ($auth->acl_get('f_attach', $forum_id) && $auth->acl_get('u_attach') && $config['allow_attachments'] && $form_enctype);
  1535.  
  1536. // Attachment entry
  1537. posting_gen_attachment_entry($attachment_data, $filename_data, $allowed);
  1538.  
  1539. // Output page ...
  1540. page_header($page_title, false);
  1541.  
  1542. $template->set_filenames(array(
  1543. 'body' => 'posting_body.html')
  1544. );
  1545.  
  1546. make_jumpbox(append_sid("{$phpbb_root_path}viewforum.$phpEx"));
  1547.  
  1548. // Topic review
  1549. if ($mode == 'reply' || $mode == 'quote')
  1550. {
  1551. if (topic_review($topic_id, $forum_id))
  1552. {
  1553. $template->assign_var('S_DISPLAY_REVIEW', true);
  1554. }
  1555. }
  1556.  
  1557. page_footer();
  1558.  
  1559. /**
  1560. * Show upload popup (progress bar)
  1561. */
  1562. function upload_popup($forum_style = 0)
  1563. {
  1564. global $template, $user;
  1565.  
  1566. ($forum_style) ? $user->setup('posting', $forum_style) : $user->setup('posting');
  1567.  
  1568. page_header($user->lang['PROGRESS_BAR'], false);
  1569.  
  1570. $template->set_filenames(array(
  1571. 'popup' => 'posting_progress_bar.html')
  1572. );
  1573.  
  1574. $template->assign_vars(array(
  1575. 'PROGRESS_BAR' => $user->img('upload_bar', $user->lang['UPLOAD_IN_PROGRESS']))
  1576. );
  1577.  
  1578. $template->display('popup');
  1579.  
  1580. garbage_collection();
  1581. exit_handler();
  1582. }
  1583.  
  1584. /**
  1585. * Do the various checks required for removing posts as well as removing it
  1586. */
  1587. function handle_post_delete($forum_id, $topic_id, $post_id, &$post_data)
  1588. {
  1589. global $user, $db, $auth, $config;
  1590. global $phpbb_root_path, $phpEx;
  1591.  
  1592. // If moderator removing post or user itself removing post, present a confirmation screen
  1593. if ($auth->acl_get('m_delete', $forum_id) || ($post_data['poster_id'] == $user->data['user_id'] && $user->data['is_registered'] && $auth->acl_get('f_delete', $forum_id) && $post_id == $post_data['topic_last_post_id'] && !$post_data['post_edit_locked'] && ($post_data['post_time'] > time() - ($config['delete_time'] * 60) || !$config['delete_time'])))
  1594. {
  1595. $s_hidden_fields = build_hidden_fields(array(
  1596. 'p' => $post_id,
  1597. 'f' => $forum_id,
  1598. 'mode' => 'delete')
  1599. );
  1600.  
  1601. if (confirm_box(true))
  1602. {
  1603. $data = array(
  1604. 'topic_first_post_id' => $post_data['topic_first_post_id'],
  1605. 'topic_last_post_id' => $post_data['topic_last_post_id'],
  1606. 'topic_replies_real' => $post_data['topic_replies_real'],
  1607. 'topic_approved' => $post_data['topic_approved'],
  1608. 'topic_type' => $post_data['topic_type'],
  1609. 'post_approved' => $post_data['post_approved'],
  1610. 'post_reported' => $post_data['post_reported'],
  1611. 'post_time' => $post_data['post_time'],
  1612. 'poster_id' => $post_data['poster_id'],
  1613. 'post_postcount' => $post_data['post_postcount']
  1614. );
  1615.  
  1616. $next_post_id = delete_post($forum_id, $topic_id, $post_id, $data);
  1617. $post_username = ($post_data['poster_id'] == ANONYMOUS && !empty($post_data['post_username'])) ? $post_data['post_username'] : $post_data['username'];
  1618.  
  1619. if ($next_post_id === false)
  1620. {
  1621. add_log('mod', $forum_id, $topic_id, 'LOG_DELETE_TOPIC', $post_data['topic_title'], $post_username);
  1622.  
  1623. $meta_info = append_sid("{$phpbb_root_path}viewforum.$phpEx", "f=$forum_id");
  1624. $message = $user->lang['POST_DELETED'];
  1625. }
  1626. else
  1627. {
  1628. add_log('mod', $forum_id, $topic_id, 'LOG_DELETE_POST', $post_data['post_subject'], $post_username);
  1629.  
  1630. $meta_info = append_sid("{$phpbb_root_path}viewtopic.$phpEx", "f=$forum_id&amp;t=$topic_id&amp;p=$next_post_id") . "#p$next_post_id";
  1631. $message = $user->lang['POST_DELETED'] . '<br /><br />' . sprintf($user->lang['RETURN_TOPIC'], '<a href="' . $meta_info . '">', '</a>');
  1632. }
  1633.  
  1634. meta_refresh(3, $meta_info);
  1635. $message .= '<br /><br />' . sprintf($user->lang['RETURN_FORUM'], '<a href="' . append_sid("{$phpbb_root_path}viewforum.$phpEx", 'f=' . $forum_id) . '">', '</a>');
  1636. trigger_error($message);
  1637. }
  1638. else
  1639. {
  1640. confirm_box(false, 'DELETE_POST', $s_hidden_fields);
  1641. }
  1642. }
  1643.  
  1644. // If we are here the user is not able to delete - present the correct error message
  1645. if ($post_data['poster_id'] != $user->data['user_id'] && $auth->acl_get('f_delete', $forum_id))
  1646. {
  1647. trigger_error('DELETE_OWN_POSTS');
  1648. }
  1649.  
  1650. if ($post_data['poster_id'] == $user->data['user_id'] && $auth->acl_get('f_delete', $forum_id) && $post_id != $post_data['topic_last_post_id'])
  1651. {
  1652. trigger_error('CANNOT_DELETE_REPLIED');
  1653. }
  1654.  
  1655. trigger_error('USER_CANNOT_DELETE');
  1656. }
  1657.  
  1658. ?>
Advertisement
Add Comment
Please, Sign In to add comment