API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Jan 8th, 2020
217
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 50.60 KB | None | 0 0
raw download clone embed print report
  1. <?php
  2. /**
  3. *
  4. * This file is part of the phpBB Forum Software package.
  5. *
  6. * @copyright (c) phpBB Limited <https://www.phpbb.com>
  7. * @license GNU General Public License, version 2 (GPL-2.0)
  8. *
  9. * For full copyright and license information, please see
  10. * the docs/CREDITS.txt file.
  11. *
  12. */
  13.  
  14. /**
  15. * @ignore
  16. */
  17. if (!defined('IN_PHPBB'))
  18. {
  19. exit;
  20. }
  21.  
  22. /**
  23. * Compose private message
  24. * Called from ucp_pm with mode == 'compose'
  25. */
  26. function compose_pm($id, $mode, $action, $user_folders = array())
  27. {
  28. global $template, $db, $auth, $user, $cache;
  29. global $phpbb_root_path, $phpEx, $config, $language;
  30. global $request, $phpbb_dispatcher, $phpbb_container;
  31.  
  32. // Damn php and globals - i know, this is horrible
  33. // Needed for handle_message_list_actions()
  34. global $refresh, $submit, $preview;
  35.  
  36. if (!function_exists('generate_smilies'))
  37. {
  38. include($phpbb_root_path . 'includes/functions_posting.' . $phpEx);
  39. }
  40.  
  41. if (!function_exists('display_custom_bbcodes'))
  42. {
  43. include($phpbb_root_path . 'includes/functions_display.' . $phpEx);
  44. }
  45.  
  46. if (!class_exists('parse_message'))
  47. {
  48. include($phpbb_root_path . 'includes/message_parser.' . $phpEx);
  49. }
  50.  
  51. if (!$action)
  52. {
  53. $action = 'post';
  54. }
  55. add_form_key('ucp_pm_compose');
  56.  
  57. // Grab only parameters needed here
  58. $to_user_id = $request->variable('u', 0);
  59. $to_group_id = $request->variable('g', 0);
  60. $msg_id = $request->variable('p', 0);
  61. $draft_id = $request->variable('d', 0);
  62.  
  63. // Reply to all triggered (quote/reply)
  64. $reply_to_all = $request->variable('reply_to_all', 0);
  65.  
  66. $address_list = $request->variable('address_list', array('' => array(0 => '')));
  67.  
  68. $preview = (isset($_POST['preview'])) ? true : false;
  69. $save = (isset($_POST['save'])) ? true : false;
  70. $load = (isset($_POST['load'])) ? true : false;
  71. $cancel = (isset($_POST['cancel']) && !isset($_POST['save'])) ? true : false;
  72. $delete = (isset($_POST['delete'])) ? true : false;
  73.  
  74. $remove_u = (isset($_REQUEST['remove_u'])) ? true : false;
  75. $remove_g = (isset($_REQUEST['remove_g'])) ? true : false;
  76. $add_to = (isset($_REQUEST['add_to'])) ? true : false;
  77. $add_bcc = (isset($_REQUEST['add_bcc'])) ? true : false;
  78.  
  79. $refresh = isset($_POST['add_file']) || isset($_POST['delete_file']) || $save || $load
  80. || $remove_u || $remove_g || $add_to || $add_bcc;
  81. $submit = $request->is_set_post('post') && !$refresh && !$preview;
  82.  
  83. $action = ($delete && !$preview && !$refresh && $submit) ? 'delete' : $action;
  84. $select_single = ($config['allow_mass_pm'] && $auth->acl_get('u_masspm')) ? false : true;
  85.  
  86. $error = array();
  87. $current_time = time();
  88.  
  89. /** @var \phpbb\group\helper $group_helper */
  90. $group_helper = $phpbb_container->get('group_helper');
  91.  
  92. // Was cancel pressed? If so then redirect to the appropriate page
  93. if ($cancel)
  94. {
  95. if ($msg_id)
  96. {
  97. redirect(append_sid("{$phpbb_root_path}ucp.$phpEx", 'i=pm&amp;mode=view&amp;action=view_message&amp;p=' . $msg_id));
  98. }
  99. redirect(append_sid("{$phpbb_root_path}ucp.$phpEx", 'i=pm'));
  100. }
  101.  
  102. // Since viewtopic.php language entries are used in several modes,
  103. // we include the language file here
  104. $user->add_lang('viewtopic');
  105.  
  106. /**
  107. * Modify the default vars before composing a PM
  108. *
  109. * @event core.ucp_pm_compose_modify_data
  110. * @var int msg_id post_id in the page request
  111. * @var int to_user_id The id of whom the message is to
  112. * @var int to_group_id The id of the group the message is to
  113. * @var bool submit Whether the form has been submitted
  114. * @var bool preview Whether the user is previewing the PM or not
  115. * @var string action One of: post, reply, quote, forward, quotepost, edit, delete, smilies
  116. * @var bool delete Whether the user is deleting the PM
  117. * @var int reply_to_all Value of reply_to_all request variable.
  118. * @since 3.1.4-RC1
  119. */
  120. $vars = array(
  121. 'msg_id',
  122. 'to_user_id',
  123. 'to_group_id',
  124. 'submit',
  125. 'preview',
  126. 'action',
  127. 'delete',
  128. 'reply_to_all',
  129. );
  130. extract($phpbb_dispatcher->trigger_event('core.ucp_pm_compose_modify_data', compact($vars)));
  131.  
  132. // Output PM_TO box if message composing
  133. if ($action != 'edit')
  134. {
  135. // Add groups to PM box
  136. if ($config['allow_mass_pm'] && $auth->acl_get('u_masspm_group'))
  137. {
  138. $sql = 'SELECT g.group_id, g.group_name, g.group_type, g.group_colour
  139. FROM ' . GROUPS_TABLE . ' g';
  140.  
  141. if (!$auth->acl_gets('a_group', 'a_groupadd', 'a_groupdel'))
  142. {
  143. $sql .= ' LEFT JOIN ' . USER_GROUP_TABLE . ' ug
  144. ON (
  145. g.group_id = ug.group_id
  146. AND ug.user_id = ' . $user->data['user_id'] . '
  147. AND ug.user_pending = 0
  148. )
  149. WHERE (g.group_type <> ' . GROUP_HIDDEN . ' OR ug.user_id = ' . $user->data['user_id'] . ')';
  150. }
  151.  
  152. $sql .= ($auth->acl_gets('a_group', 'a_groupadd', 'a_groupdel')) ? ' WHERE ' : ' AND ';
  153.  
  154. $sql .= 'g.group_receive_pm = 1
  155. ORDER BY g.group_type DESC, g.group_name ASC';
  156. $result = $db->sql_query($sql);
  157.  
  158. $group_options = '';
  159. while ($row = $db->sql_fetchrow($result))
  160. {
  161. $group_options .= '<option' . (($row['group_type'] == GROUP_SPECIAL) ? ' class="sep"' : '') . ' value="' . $row['group_id'] . '"' . ($row['group_colour'] ? ' style="color: #' . $row['group_colour'] . '"' : '') . '>' . $group_helper->get_name($row['group_name']) . '</option>';
  162. }
  163. $db->sql_freeresult($result);
  164. }
  165.  
  166. $template->assign_vars(array(
  167. 'S_SHOW_PM_BOX' => true,
  168. 'S_ALLOW_MASS_PM' => ($config['allow_mass_pm'] && $auth->acl_get('u_masspm')) ? true : false,
  169. 'S_GROUP_OPTIONS' => ($config['allow_mass_pm'] && $auth->acl_get('u_masspm_group')) ? $group_options : '',
  170. 'U_FIND_USERNAME' => append_sid("{$phpbb_root_path}memberlist.$phpEx", "mode=searchuser&amp;form=postform&amp;field=username_list&amp;select_single=" . (int) $select_single),
  171. ));
  172. }
  173.  
  174. $sql = '';
  175. $folder_id = 0;
  176.  
  177. // What is all this following SQL for? Well, we need to know
  178. // some basic information in all cases before we do anything.
  179. switch ($action)
  180. {
  181. case 'post':
  182. if (!$auth->acl_get('u_sendpm'))
  183. {
  184. send_status_line(403, 'Forbidden');
  185. trigger_error('NO_AUTH_SEND_MESSAGE');
  186. }
  187. break;
  188.  
  189. case 'reply':
  190. case 'quote':
  191. case 'forward':
  192. case 'quotepost':
  193. if (!$msg_id)
  194. {
  195. trigger_error('NO_MESSAGE');
  196. }
  197.  
  198. if (!$auth->acl_get('u_sendpm'))
  199. {
  200. send_status_line(403, 'Forbidden');
  201. trigger_error('NO_AUTH_SEND_MESSAGE');
  202. }
  203.  
  204. if ($action == 'quotepost')
  205. {
  206. $sql = 'SELECT p.post_id as msg_id, p.forum_id, p.post_text as message_text, p.poster_id as author_id, p.post_time as message_time, p.bbcode_bitfield, p.bbcode_uid, p.enable_sig, p.enable_smilies, p.enable_magic_url, t.topic_title as message_subject, u.username as quote_username
  207. FROM ' . POSTS_TABLE . ' p, ' . TOPICS_TABLE . ' t, ' . USERS_TABLE . " u
  208. WHERE p.post_id = $msg_id
  209. AND t.topic_id = p.topic_id
  210. AND u.user_id = p.poster_id";
  211. }
  212. else
  213. {
  214. $sql = 'SELECT t.folder_id, p.*, u.username as quote_username
  215. FROM ' . PRIVMSGS_TO_TABLE . ' t, ' . PRIVMSGS_TABLE . ' p, ' . USERS_TABLE . ' u
  216. WHERE t.user_id = ' . $user->data['user_id'] . "
  217. AND p.author_id = u.user_id
  218. AND t.msg_id = p.msg_id
  219. AND p.msg_id = $msg_id";
  220. }
  221. break;
  222.  
  223. case 'edit':
  224. if (!$msg_id)
  225. {
  226. trigger_error('NO_MESSAGE');
  227. }
  228.  
  229. // check for outbox (not read) status, we do not allow editing if one user already having the message
  230. $sql = 'SELECT p.*, t.folder_id
  231. FROM ' . PRIVMSGS_TO_TABLE . ' t, ' . PRIVMSGS_TABLE . ' p
  232. WHERE t.user_id = ' . $user->data['user_id'] . '
  233. AND t.folder_id = ' . PRIVMSGS_OUTBOX . "
  234. AND t.msg_id = $msg_id
  235. AND t.msg_id = p.msg_id";
  236. break;
  237.  
  238. case 'delete':
  239. if (!$auth->acl_get('u_pm_delete'))
  240. {
  241. send_status_line(403, 'Forbidden');
  242. trigger_error('NO_AUTH_DELETE_MESSAGE');
  243. }
  244.  
  245. if (!$msg_id)
  246. {
  247. trigger_error('NO_MESSAGE');
  248. }
  249.  
  250. $sql = 'SELECT msg_id, pm_unread, pm_new, author_id, folder_id
  251. FROM ' . PRIVMSGS_TO_TABLE . '
  252. WHERE user_id = ' . $user->data['user_id'] . "
  253. AND msg_id = $msg_id";
  254. break;
  255.  
  256. case 'smilies':
  257. generate_smilies('window', 0);
  258. break;
  259.  
  260. default:
  261. trigger_error('NO_ACTION_MODE', E_USER_ERROR);
  262. break;
  263. }
  264.  
  265. if ($action == 'forward' && (!$config['forward_pm'] || !$auth->acl_get('u_pm_forward')))
  266. {
  267. send_status_line(403, 'Forbidden');
  268. trigger_error('NO_AUTH_FORWARD_MESSAGE');
  269. }
  270.  
  271. if ($action == 'edit' && !$auth->acl_get('u_pm_edit'))
  272. {
  273. send_status_line(403, 'Forbidden');
  274. trigger_error('NO_AUTH_EDIT_MESSAGE');
  275. }
  276.  
  277. if ($sql)
  278. {
  279. /**
  280. * Alter sql query to get message for user to write the PM
  281. *
  282. * @event core.ucp_pm_compose_compose_pm_basic_info_query_before
  283. * @var string sql String with the query to be executed
  284. * @var int msg_id topic_id in the page request
  285. * @var int to_user_id The id of whom the message is to
  286. * @var int to_group_id The id of the group whom the message is to
  287. * @var bool submit Whether the user is sending the PM or not
  288. * @var bool preview Whether the user is previewing the PM or not
  289. * @var string action One of: post, reply, quote, forward, quotepost, edit, delete, smilies
  290. * @var bool delete Whether the user is deleting the PM
  291. * @var int reply_to_all Value of reply_to_all request variable.
  292. * @since 3.1.0-RC5
  293. * @changed 3.2.0-a1 Removed undefined variables
  294. */
  295. $vars = array(
  296. 'sql',
  297. 'msg_id',
  298. 'to_user_id',
  299. 'to_group_id',
  300. 'submit',
  301. 'preview',
  302. 'action',
  303. 'delete',
  304. 'reply_to_all',
  305. );
  306. extract($phpbb_dispatcher->trigger_event('core.ucp_pm_compose_compose_pm_basic_info_query_before', compact($vars)));
  307.  
  308. $result = $db->sql_query($sql);
  309. $post = $db->sql_fetchrow($result);
  310. $db->sql_freeresult($result);
  311.  
  312. if (!$post)
  313. {
  314. // If editing it could be the recipient already read the message...
  315. if ($action == 'edit')
  316. {
  317. $sql = 'SELECT p.*, t.folder_id
  318. FROM ' . PRIVMSGS_TO_TABLE . ' t, ' . PRIVMSGS_TABLE . ' p
  319. WHERE t.user_id = ' . $user->data['user_id'] . "
  320. AND t.msg_id = $msg_id
  321. AND t.msg_id = p.msg_id";
  322. $result = $db->sql_query($sql);
  323. $post = $db->sql_fetchrow($result);
  324. $db->sql_freeresult($result);
  325.  
  326. if ($post)
  327. {
  328. trigger_error('NO_EDIT_READ_MESSAGE');
  329. }
  330. }
  331.  
  332. trigger_error('NO_MESSAGE');
  333. }
  334.  
  335. if ($action == 'quotepost')
  336. {
  337. if (($post['forum_id'] && !$auth->acl_get('f_read', $post['forum_id'])) || (!$post['forum_id'] && !$auth->acl_getf_global('f_read')))
  338. {
  339. send_status_line(403, 'Forbidden');
  340. trigger_error('NOT_AUTHORISED');
  341. }
  342.  
  343. /**
  344. * Get the result of querying for the post to be quoted in the pm message
  345. *
  346. * @event core.ucp_pm_compose_quotepost_query_after
  347. * @var string sql The original SQL used in the query
  348. * @var array post Associative array with the data of the quoted post
  349. * @var array msg_id The post_id that was searched to get the message for quoting
  350. * @var int to_user_id Users the message is sent to
  351. * @var int to_group_id Groups the message is sent to
  352. * @var bool submit Whether the user is sending the PM or not
  353. * @var bool preview Whether the user is previewing the PM or not
  354. * @var string action One of: post, reply, quote, forward, quotepost, edit, delete, smilies
  355. * @var bool delete If deleting message
  356. * @var int reply_to_all Value of reply_to_all request variable.
  357. * @since 3.1.0-RC5
  358. * @changed 3.2.0-a1 Removed undefined variables
  359. */
  360. $vars = array(
  361. 'sql',
  362. 'post',
  363. 'msg_id',
  364. 'to_user_id',
  365. 'to_group_id',
  366. 'submit',
  367. 'preview',
  368. 'action',
  369. 'delete',
  370. 'reply_to_all',
  371. );
  372. extract($phpbb_dispatcher->trigger_event('core.ucp_pm_compose_quotepost_query_after', compact($vars)));
  373.  
  374. // Passworded forum?
  375. if ($post['forum_id'])
  376. {
  377. $sql = 'SELECT forum_id, forum_name, forum_password
  378. FROM ' . FORUMS_TABLE . '
  379. WHERE forum_id = ' . (int) $post['forum_id'];
  380. $result = $db->sql_query($sql);
  381. $forum_data = $db->sql_fetchrow($result);
  382. $db->sql_freeresult($result);
  383.  
  384. if (!empty($forum_data['forum_password']))
  385. {
  386. login_forum_box($forum_data);
  387. }
  388. }
  389. }
  390.  
  391. $msg_id = (int) $post['msg_id'];
  392. $folder_id = (isset($post['folder_id'])) ? $post['folder_id'] : 0;
  393. $message_text = (isset($post['message_text'])) ? $post['message_text'] : '';
  394.  
  395. if ((!$post['author_id'] || ($post['author_id'] == ANONYMOUS && $action != 'delete')) && $msg_id)
  396. {
  397. trigger_error('NO_AUTHOR');
  398. }
  399.  
  400. if ($action == 'quotepost')
  401. {
  402. // Decode text for message display
  403. decode_message($message_text, $post['bbcode_uid']);
  404. }
  405.  
  406. if ($action != 'delete')
  407. {
  408. $enable_urls = $post['enable_magic_url'];
  409. $enable_sig = (isset($post['enable_sig'])) ? $post['enable_sig'] : 0;
  410.  
  411. $message_attachment = (isset($post['message_attachment'])) ? $post['message_attachment'] : 0;
  412. $message_subject = $post['message_subject'];
  413. $message_time = $post['message_time'];
  414. $bbcode_uid = $post['bbcode_uid'];
  415.  
  416. $quote_username = (isset($post['quote_username'])) ? $post['quote_username'] : '';
  417. $icon_id = (isset($post['icon_id'])) ? $post['icon_id'] : 0;
  418.  
  419. if (($action == 'reply' || $action == 'quote' || $action == 'quotepost') && !count($address_list) && !$refresh && !$submit && !$preview)
  420. {
  421. // Add the original author as the recipient if quoting a post or only replying and not having checked "reply to all"
  422. if ($action == 'quotepost' || !$reply_to_all)
  423. {
  424. $address_list = array('u' => array($post['author_id'] => 'to'));
  425. }
  426. else
  427. {
  428. // We try to include every previously listed member from the TO Header - Reply to all
  429. $address_list = rebuild_header(array('to' => $post['to_address']));
  430.  
  431. // Add the author (if he is already listed then this is no shame (it will be overwritten))
  432. $address_list['u'][$post['author_id']] = 'to';
  433.  
  434. // Now, make sure the user itself is not listed. ;)
  435. if (isset($address_list['u'][$user->data['user_id']]))
  436. {
  437. unset($address_list['u'][$user->data['user_id']]);
  438. }
  439. }
  440. }
  441. else if ($action == 'edit' && !count($address_list) && !$refresh && !$submit && !$preview)
  442. {
  443. // Rebuild TO and BCC Header
  444. $address_list = rebuild_header(array('to' => $post['to_address'], 'bcc' => $post['bcc_address']));
  445. }
  446.  
  447. if ($action == 'quotepost')
  448. {
  449. $check_value = 0;
  450. }
  451. else
  452. {
  453. $check_value = (($post['enable_bbcode']+1) << 8) + (($post['enable_smilies']+1) << 4) + (($enable_urls+1) << 2) + (($post['enable_sig']+1) << 1);
  454. }
  455. }
  456. }
  457. else
  458. {
  459. $message_attachment = 0;
  460. $message_text = $message_subject = '';
  461.  
  462. /**
  463. * Predefine message text and subject
  464. *
  465. * @event core.ucp_pm_compose_predefined_message
  466. * @var string message_text Message text
  467. * @var string message_subject Messate subject
  468. * @since 3.1.11-RC1
  469. */
  470. $vars = array('message_text', 'message_subject');
  471. extract($phpbb_dispatcher->trigger_event('core.ucp_pm_compose_predefined_message', compact($vars)));
  472.  
  473. if ($to_user_id && $to_user_id != ANONYMOUS && $action == 'post')
  474. {
  475. $address_list['u'][$to_user_id] = 'to';
  476. }
  477. else if ($to_group_id && $action == 'post')
  478. {
  479. $address_list['g'][$to_group_id] = 'to';
  480. }
  481. $check_value = 0;
  482. }
  483.  
  484. if (($to_group_id || isset($address_list['g'])) && (!$config['allow_mass_pm'] || !$auth->acl_get('u_masspm_group')))
  485. {
  486. send_status_line(403, 'Forbidden');
  487. trigger_error('NO_AUTH_GROUP_MESSAGE');
  488. }
  489.  
  490. if ($action == 'edit' && !$refresh && !$preview && !$submit)
  491. {
  492. if (!($message_time > time() - ($config['pm_edit_time'] * 60) || !$config['pm_edit_time']))
  493. {
  494. trigger_error('CANNOT_EDIT_MESSAGE_TIME');
  495. }
  496. }
  497.  
  498. if ($action == 'post')
  499. {
  500. $template->assign_var('S_NEW_MESSAGE', true);
  501. }
  502.  
  503. if (!isset($icon_id))
  504. {
  505. $icon_id = 0;
  506. }
  507.  
  508. /* @var $plupload \phpbb\plupload\plupload */
  509. $plupload = $phpbb_container->get('plupload');
  510. $message_parser = new parse_message();
  511. $message_parser->set_plupload($plupload);
  512.  
  513. $message_parser->message = ($action == 'reply') ? '' : $message_text;
  514. unset($message_text);
  515.  
  516. $s_action = append_sid("{$phpbb_root_path}ucp.$phpEx", "i=$id&amp;mode=$mode&amp;action=$action", true, $user->session_id);
  517. $s_action .= (($folder_id) ? "&amp;f=$folder_id" : '') . (($msg_id) ? "&amp;p=$msg_id" : '');
  518.  
  519. // Delete triggered ?
  520. if ($action == 'delete')
  521. {
  522. // Folder id has been determined by the SQL Statement
  523. // $folder_id = $request->variable('f', PRIVMSGS_NO_BOX);
  524.  
  525. // Do we need to confirm ?
  526. if (confirm_box(true))
  527. {
  528. delete_pm($user->data['user_id'], $msg_id, $folder_id);
  529.  
  530. // jump to next message in "history"? nope, not for the moment. But able to be included later.
  531. $meta_info = append_sid("{$phpbb_root_path}ucp.$phpEx", "i=pm&amp;folder=$folder_id");
  532. $message = $user->lang['MESSAGE_DELETED'];
  533.  
  534. meta_refresh(3, $meta_info);
  535. $message .= '<br /><br />' . sprintf($user->lang['RETURN_FOLDER'], '<a href="' . $meta_info . '">', '</a>');
  536. trigger_error($message);
  537. }
  538. else
  539. {
  540. $s_hidden_fields = array(
  541. 'p' => $msg_id,
  542. 'f' => $folder_id,
  543. 'action' => 'delete'
  544. );
  545.  
  546. // "{$phpbb_root_path}ucp.$phpEx?i=pm&amp;mode=compose"
  547. confirm_box(false, 'DELETE_MESSAGE', build_hidden_fields($s_hidden_fields));
  548. }
  549.  
  550. redirect(append_sid("{$phpbb_root_path}ucp.$phpEx", 'i=pm&amp;mode=view&amp;action=view_message&amp;p=' . $msg_id));
  551. }
  552.  
  553. // Get maximum number of allowed recipients
  554. $max_recipients = phpbb_get_max_setting_from_group($db, $user->data['user_id'], 'max_recipients');
  555.  
  556. // If it is 0, there is no limit set and we use the maximum value within the config.
  557. $max_recipients = (!$max_recipients) ? $config['pm_max_recipients'] : $max_recipients;
  558.  
  559. // If this is a quote/reply "to all"... we may increase the max_recpients to the number of original recipients
  560. if (($action == 'reply' || $action == 'quote') && $max_recipients && $reply_to_all)
  561. {
  562. // We try to include every previously listed member from the TO Header
  563. $list = rebuild_header(array('to' => $post['to_address']));
  564.  
  565. // Can be an empty array too ;)
  566. $list = (!empty($list['u'])) ? $list['u'] : array();
  567. $list[$post['author_id']] = 'to';
  568.  
  569. if (isset($list[$user->data['user_id']]))
  570. {
  571. unset($list[$user->data['user_id']]);
  572. }
  573.  
  574. $max_recipients = ($max_recipients < count($list)) ? count($list) : $max_recipients;
  575.  
  576. unset($list);
  577. }
  578.  
  579. // Handle User/Group adding/removing
  580. handle_message_list_actions($address_list, $error, $remove_u, $remove_g, $add_to, $add_bcc);
  581.  
  582. // Check mass pm to group permission
  583. if ((!$config['allow_mass_pm'] || !$auth->acl_get('u_masspm_group')) && !empty($address_list['g']))
  584. {
  585. $address_list = array();
  586. $error[] = $user->lang['NO_AUTH_GROUP_MESSAGE'];
  587. }
  588.  
  589. // Check mass pm to users permission
  590. if ((!$config['allow_mass_pm'] || !$auth->acl_get('u_masspm')) && num_recipients($address_list) > 1)
  591. {
  592. $address_list = get_recipients($address_list, 1);
  593. $error[] = $user->lang('TOO_MANY_RECIPIENTS', 1);
  594. }
  595.  
  596. // Check for too many recipients
  597. if (!empty($address_list['u']) && $max_recipients && count($address_list['u']) > $max_recipients)
  598. {
  599. $address_list = get_recipients($address_list, $max_recipients);
  600. $error[] = $user->lang('TOO_MANY_RECIPIENTS', $max_recipients);
  601. }
  602.  
  603. // Always check if the submitted attachment data is valid and belongs to the user.
  604. // Further down (especially in submit_post()) we do not check this again.
  605. $message_parser->get_submitted_attachment_data();
  606.  
  607. if ($message_attachment && !$submit && !$refresh && !$preview && $action == 'edit')
  608. {
  609. // Do not change to SELECT *
  610. $sql = 'SELECT attach_id, is_orphan, attach_comment, real_filename, filesize
  611. FROM ' . ATTACHMENTS_TABLE . "
  612. WHERE post_msg_id = $msg_id
  613. AND in_message = 1
  614. AND is_orphan = 0
  615. ORDER BY filetime DESC";
  616. $result = $db->sql_query($sql);
  617. $message_parser->attachment_data = array_merge($message_parser->attachment_data, $db->sql_fetchrowset($result));
  618. $db->sql_freeresult($result);
  619. }
  620.  
  621. if (!in_array($action, array('quote', 'edit', 'delete', 'forward')))
  622. {
  623. $enable_sig = ($config['allow_sig'] && $config['allow_sig_pm'] && $auth->acl_get('u_sig') && $user->optionget('attachsig'));
  624. $enable_smilies = ($config['allow_smilies'] && $auth->acl_get('u_pm_smilies') && $user->optionget('smilies'));
  625. $enable_bbcode = ($config['allow_bbcode'] && $auth->acl_get('u_pm_bbcode') && $user->optionget('bbcode'));
  626. $enable_urls = true;
  627. }
  628.  
  629. $drafts = false;
  630.  
  631. // User own some drafts?
  632. if ($auth->acl_get('u_savedrafts') && $action != 'delete')
  633. {
  634. $sql = 'SELECT draft_id
  635. FROM ' . DRAFTS_TABLE . '
  636. WHERE forum_id = 0
  637. AND topic_id = 0
  638. AND user_id = ' . $user->data['user_id'] .
  639. (($draft_id) ? " AND draft_id <> $draft_id" : '');
  640. $result = $db->sql_query_limit($sql, 1);
  641. $row = $db->sql_fetchrow($result);
  642. $db->sql_freeresult($result);
  643.  
  644. if ($row)
  645. {
  646. $drafts = true;
  647. }
  648. }
  649.  
  650. if ($action == 'edit')
  651. {
  652. $message_parser->bbcode_uid = $bbcode_uid;
  653. }
  654.  
  655. $bbcode_status = ($config['allow_bbcode'] && $config['auth_bbcode_pm'] && $auth->acl_get('u_pm_bbcode')) ? true : false;
  656. $smilies_status = ($config['allow_smilies'] && $config['auth_smilies_pm'] && $auth->acl_get('u_pm_smilies')) ? true : false;
  657. $img_status = ($config['auth_img_pm'] && $auth->acl_get('u_pm_img')) ? true : false;
  658. $flash_status = ($config['auth_flash_pm'] && $auth->acl_get('u_pm_flash')) ? true : false;
  659. $url_status = ($config['allow_post_links']) ? true : false;
  660.  
  661. // Save Draft
  662. if ($save && $auth->acl_get('u_savedrafts'))
  663. {
  664. $subject = $request->variable('subject', '', true);
  665. $subject = (!$subject && $action != 'post') ? $user->lang['NEW_MESSAGE'] : $subject;
  666. $message = $request->variable('message', '', true);
  667.  
  668. if ($subject && $message)
  669. {
  670. if (confirm_box(true))
  671. {
  672. $message_parser->message = $message;
  673. $message_parser->parse($bbcode_status, $url_status, $smilies_status, $img_status, $flash_status, true, $url_status);
  674.  
  675. $sql = 'INSERT INTO ' . DRAFTS_TABLE . ' ' . $db->sql_build_array('INSERT', array(
  676. 'user_id' => $user->data['user_id'],
  677. 'topic_id' => 0,
  678. 'forum_id' => 0,
  679. 'save_time' => $current_time,
  680. 'draft_subject' => $subject,
  681. 'draft_message' => $message_parser->message,
  682. )
  683. );
  684. $db->sql_query($sql);
  685.  
  686. $redirect_url = append_sid("{$phpbb_root_path}ucp.$phpEx", "i=pm&amp;mode=$mode");
  687.  
  688. meta_refresh(3, $redirect_url);
  689. $message = $user->lang['DRAFT_SAVED'] . '<br /><br />' . sprintf($user->lang['RETURN_UCP'], '<a href="' . $redirect_url . '">', '</a>');
  690.  
  691. trigger_error($message);
  692. }
  693. else
  694. {
  695. $s_hidden_fields = build_hidden_fields(array(
  696. 'mode' => $mode,
  697. 'action' => $action,
  698. 'save' => true,
  699. 'subject' => $subject,
  700. 'message' => $message,
  701. 'u' => $to_user_id,
  702. 'g' => $to_group_id,
  703. 'p' => $msg_id)
  704. );
  705. $s_hidden_fields .= build_address_field($address_list);
  706.  
  707. confirm_box(false, 'SAVE_DRAFT', $s_hidden_fields);
  708. }
  709. }
  710. else
  711. {
  712. if (utf8_clean_string($subject) === '')
  713. {
  714. $error[] = $user->lang['EMPTY_MESSAGE_SUBJECT'];
  715. }
  716.  
  717. if (utf8_clean_string($message) === '')
  718. {
  719. $error[] = $user->lang['TOO_FEW_CHARS'];
  720. }
  721. }
  722.  
  723. unset($subject, $message);
  724. }
  725.  
  726. // Load Draft
  727. if ($draft_id && $auth->acl_get('u_savedrafts'))
  728. {
  729. $sql = 'SELECT draft_subject, draft_message
  730. FROM ' . DRAFTS_TABLE . "
  731. WHERE draft_id = $draft_id
  732. AND topic_id = 0
  733. AND forum_id = 0
  734. AND user_id = " . $user->data['user_id'];
  735. $result = $db->sql_query_limit($sql, 1);
  736.  
  737. if ($row = $db->sql_fetchrow($result))
  738. {
  739. $message_parser->message = $row['draft_message'];
  740. $message_subject = $row['draft_subject'];
  741.  
  742. $template->assign_var('S_DRAFT_LOADED', true);
  743. }
  744. else
  745. {
  746. $draft_id = 0;
  747. }
  748. $db->sql_freeresult($result);
  749. }
  750.  
  751. // Load Drafts
  752. if ($load && $drafts)
  753. {
  754. load_drafts(0, 0, $id, $action, $msg_id);
  755. }
  756.  
  757. if ($submit || $preview || $refresh)
  758. {
  759. if (($submit || $preview) && !check_form_key('ucp_pm_compose'))
  760. {
  761. $error[] = $user->lang['FORM_INVALID'];
  762. }
  763. $subject = $request->variable('subject', '', true);
  764. $message_parser->message = $request->variable('message', '', true);
  765.  
  766. $icon_id = $request->variable('icon', 0);
  767.  
  768. $enable_bbcode = (!$bbcode_status || isset($_POST['disable_bbcode'])) ? false : true;
  769. $enable_smilies = (!$smilies_status || isset($_POST['disable_smilies'])) ? false : true;
  770. $enable_urls = (isset($_POST['disable_magic_url'])) ? 0 : 1;
  771. $enable_sig = (!$config['allow_sig'] ||!$config['allow_sig_pm']) ? false : ((isset($_POST['attach_sig'])) ? true : false);
  772.  
  773. /**
  774. * Modify private message
  775. *
  776. * @event core.ucp_pm_compose_modify_parse_before
  777. * @var bool enable_bbcode Whether or not bbcode is enabled
  778. * @var bool enable_smilies Whether or not smilies are enabled
  779. * @var bool enable_urls Whether or not urls are enabled
  780. * @var bool enable_sig Whether or not signature is enabled
  781. * @var string subject PM subject text
  782. * @var object message_parser The message parser object
  783. * @var bool submit Whether or not the form has been sumitted
  784. * @var bool preview Whether or not the signature is being previewed
  785. * @var array error Any error strings
  786. * @since 3.1.10-RC1
  787. */
  788. $vars = array(
  789. 'enable_bbcode',
  790. 'enable_smilies',
  791. 'enable_urls',
  792. 'enable_sig',
  793. 'subject',
  794. 'message_parser',
  795. 'submit',
  796. 'preview',
  797. 'error',
  798. );
  799. extract($phpbb_dispatcher->trigger_event('core.ucp_pm_compose_modify_parse_before', compact($vars)));
  800.  
  801. // Parse Attachments - before checksum is calculated
  802. if ($message_parser->check_attachment_form_token($language, $request, 'ucp_pm_compose'))
  803. {
  804. $message_parser->parse_attachments('fileupload', $action, 0, $submit, $preview, $refresh, true);
  805. }
  806.  
  807. if (count($message_parser->warn_msg) && !($remove_u || $remove_g || $add_to || $add_bcc))
  808. {
  809. $error[] = implode('<br />', $message_parser->warn_msg);
  810. $message_parser->warn_msg = array();
  811. }
  812.  
  813. // Parse message
  814. $message_parser->parse($enable_bbcode, ($config['allow_post_links']) ? $enable_urls : false, $enable_smilies, $img_status, $flash_status, true, $config['allow_post_links']);
  815.  
  816. // On a refresh we do not care about message parsing errors
  817. if (count($message_parser->warn_msg) && !$refresh)
  818. {
  819. $error[] = implode('<br />', $message_parser->warn_msg);
  820. }
  821.  
  822. if ($action != 'edit' && !$preview && !$refresh && $config['flood_interval'] && !$auth->acl_get('u_ignoreflood'))
  823. {
  824. // Flood check
  825. $last_post_time = $user->data['user_lastpost_time'];
  826.  
  827. if ($last_post_time)
  828. {
  829. if ($last_post_time && ($current_time - $last_post_time) < intval($config['flood_interval']))
  830. {
  831. $error[] = $user->lang['FLOOD_ERROR'];
  832. }
  833. }
  834. }
  835.  
  836. // Subject defined
  837. if ($submit)
  838. {
  839. if (utf8_clean_string($subject) === '')
  840. {
  841. $error[] = $user->lang['EMPTY_MESSAGE_SUBJECT'];
  842. }
  843.  
  844. if (!count($address_list))
  845. {
  846. $error[] = $user->lang['NO_RECIPIENT'];
  847. }
  848. }
  849.  
  850. // Store message, sync counters
  851. if (!count($error) && $submit)
  852. {
  853. $pm_data = array(
  854. 'msg_id' => (int) $msg_id,
  855. 'from_user_id' => $user->data['user_id'],
  856. 'from_user_ip' => $user->ip,
  857. 'from_username' => $user->data['username'],
  858. 'reply_from_root_level' => (isset($post['root_level'])) ? (int) $post['root_level'] : 0,
  859. 'reply_from_msg_id' => (int) $msg_id,
  860. 'icon_id' => (int) $icon_id,
  861. 'enable_sig' => (bool) $enable_sig,
  862. 'enable_bbcode' => (bool) $enable_bbcode,
  863. 'enable_smilies' => (bool) $enable_smilies,
  864. 'enable_urls' => (bool) $enable_urls,
  865. 'bbcode_bitfield' => $message_parser->bbcode_bitfield,
  866. 'bbcode_uid' => $message_parser->bbcode_uid,
  867. 'message' => $message_parser->message,
  868. 'attachment_data' => $message_parser->attachment_data,
  869. 'filename_data' => $message_parser->filename_data,
  870. 'address_list' => $address_list
  871. );
  872.  
  873. // ((!$message_subject) ? $subject : $message_subject)
  874. $msg_id = submit_pm($action, $subject, $pm_data);
  875.  
  876. $return_message_url = append_sid("{$phpbb_root_path}ucp.$phpEx", 'i=pm&amp;mode=view&amp;p=' . $msg_id);
  877. $inbox_folder_url = append_sid("{$phpbb_root_path}ucp.$phpEx", 'i=pm&amp;folder=inbox');
  878. $outbox_folder_url = append_sid("{$phpbb_root_path}ucp.$phpEx", 'i=pm&amp;folder=outbox');
  879.  
  880. $folder_url = '';
  881. if (($folder_id > 0) && isset($user_folders[$folder_id]))
  882. {
  883. $folder_url = append_sid("{$phpbb_root_path}ucp.$phpEx", 'i=pm&amp;folder=' . $folder_id);
  884. }
  885.  
  886. $return_box_url = ($action === 'post' || $action === 'edit') ? $outbox_folder_url : $inbox_folder_url;
  887. $return_box_lang = ($action === 'post' || $action === 'edit') ? 'PM_OUTBOX' : 'PM_INBOX';
  888.  
  889. $save_message = ($action === 'edit') ? $user->lang['MESSAGE_EDITED'] : $user->lang['MESSAGE_STORED'];
  890. $message = $save_message . '<br /><br />' . $user->lang('VIEW_PRIVATE_MESSAGE', '<a href="' . $return_message_url . '">', '</a>');
  891.  
  892. $last_click_type = 'CLICK_RETURN_FOLDER';
  893. if ($folder_url)
  894. {
  895. $message .= '<br /><br />' . sprintf($user->lang['CLICK_RETURN_FOLDER'], '<a href="' . $folder_url . '">', '</a>', $user_folders[$folder_id]['folder_name']);
  896. $last_click_type = 'CLICK_GOTO_FOLDER';
  897. }
  898. $message .= '<br /><br />' . sprintf($user->lang[$last_click_type], '<a href="' . $return_box_url . '">', '</a>', $user->lang[$return_box_lang]);
  899.  
  900. meta_refresh(3, $return_message_url);
  901. trigger_error($message);
  902. }
  903.  
  904. $message_subject = $subject;
  905. }
  906.  
  907. // Preview
  908. if (!count($error) && $preview)
  909. {
  910. $preview_message = $message_parser->format_display($enable_bbcode, $enable_urls, $enable_smilies, false);
  911.  
  912. $preview_signature = $user->data['user_sig'];
  913. $preview_signature_uid = $user->data['user_sig_bbcode_uid'];
  914. $preview_signature_bitfield = $user->data['user_sig_bbcode_bitfield'];
  915.  
  916. // Signature
  917. if ($enable_sig && $config['allow_sig'] && $preview_signature)
  918. {
  919. $bbcode_flags = ($enable_bbcode ? OPTION_FLAG_BBCODE : 0) + ($enable_smilies ? OPTION_FLAG_SMILIES : 0) + ($enable_urls ? OPTION_FLAG_LINKS : 0);
  920. $preview_signature = generate_text_for_display($preview_signature, $preview_signature_uid, $preview_signature_bitfield, $bbcode_flags);
  921. }
  922. else
  923. {
  924. $preview_signature = '';
  925. }
  926.  
  927. // Attachment Preview
  928. if (count($message_parser->attachment_data))
  929. {
  930. $template->assign_var('S_HAS_ATTACHMENTS', true);
  931.  
  932. $update_count = array();
  933. $attachment_data = $message_parser->attachment_data;
  934.  
  935. parse_attachments(false, $preview_message, $attachment_data, $update_count, true);
  936.  
  937. foreach ($attachment_data as $i => $attachment)
  938. {
  939. $template->assign_block_vars('attachment', array(
  940. 'DISPLAY_ATTACHMENT' => $attachment)
  941. );
  942. }
  943. unset($attachment_data);
  944. }
  945.  
  946. $preview_subject = censor_text($subject);
  947.  
  948. if (!count($error))
  949. {
  950. $template->assign_vars(array(
  951. 'PREVIEW_SUBJECT' => $preview_subject,
  952. 'PREVIEW_MESSAGE' => $preview_message,
  953. 'PREVIEW_SIGNATURE' => $preview_signature,
  954.  
  955. 'S_DISPLAY_PREVIEW' => true)
  956. );
  957. }
  958. unset($message_text);
  959. }
  960.  
  961. // Decode text for message display
  962. $bbcode_uid = (($action == 'quote' || $action == 'forward') && !$preview && !$refresh && (!count($error) || (count($error) && !$submit))) ? $bbcode_uid : $message_parser->bbcode_uid;
  963.  
  964. $message_parser->decode_message($bbcode_uid);
  965.  
  966. if (($action == 'quote' || $action == 'quotepost') && !$preview && !$refresh && !$submit)
  967. {
  968. if ($action == 'quotepost')
  969. {
  970. $post_id = $request->variable('p', 0);
  971. if ($config['allow_post_links'])
  972. {
  973. $message_link = generate_board_url() . "/viewtopic.$phpEx?p={$post_id}#p{$post_id}";
  974. $message_link_subject = "{$user->lang['SUBJECT']}{$user->lang['COLON']} {$message_subject}";
  975. if ($bbcode_status)
  976. {
  977. $message_link = "[url=" . $message_link . "]" . $message_link_subject . "[/url]\n\n";
  978. }
  979. else
  980. {
  981. <<<<<<< CURRENT_FILE
  982. $message_link = $message_link . " - "
  983. ======= DIFF_SEP_EXPLAIN
  984. $message_link = $message_link . " - " . $message_link_subject . "\n\n";
  985. }
  986. }
  987. else
  988. {
  989. $message_link = $user->lang['SUBJECT'] . $user->lang['COLON'] . ' ' . $message_subject . " (" . generate_board_url() . "/viewtopic.$phpEx?p={$post_id}#p{$post_id})\n\n";
  990. }
  991. }
  992. else
  993. {
  994. $message_link = '';
  995. }
  996. $quote_attributes = array(
  997. 'author' => $quote_username,
  998. 'time' => $post['message_time'],
  999. 'user_id' => $post['author_id'],
  1000. );
  1001. if ($action === 'quotepost')
  1002. {
  1003. $quote_attributes['post_id'] = $post['msg_id'];
  1004. }
  1005.  
  1006. /** @var \phpbb\language\language $language */
  1007. $language = $phpbb_container->get('language');
  1008. /** @var \phpbb\textformatter\utils_interface $text_formatter_utils */
  1009. $text_formatter_utils = $phpbb_container->get('text_formatter.utils');
  1010. phpbb_format_quote($language, $message_parser, $text_formatter_utils, $bbcode_status, $quote_attributes, $message_link);
  1011. }
  1012.  
  1013. if (($action == 'reply' || $action == 'quote' || $action == 'quotepost') && !$preview && !$refresh)
  1014. {
  1015. $message_subject = ((!preg_match('/^Re:/', $message_subject)) ? 'Re: ' : '') . censor_text($message_subject);
  1016.  
  1017. /**
  1018. * This event allows you to modify the PM subject of the PM being quoted
  1019. *
  1020. * @event core.pm_modify_message_subject
  1021. * @var string message_subject String with the PM subject already censored.
  1022. * @since 3.2.8-RC1
  1023. */
  1024. $vars = array('message_subject');
  1025. extract($phpbb_dispatcher->trigger_event('core.pm_modify_message_subject', compact($vars)));
  1026. }
  1027.  
  1028. if ($action == 'forward' && !$preview && !$refresh && !$submit)
  1029. {
  1030. $fwd_to_field = write_pm_addresses(array('to' => $post['to_address']), 0, true);
  1031.  
  1032. if ($config['allow_post_links'])
  1033. {
  1034. $quote_username_text = '[url=' . generate_board_url() . "/memberlist.$phpEx?mode=viewprofile&amp;u={$post['author_id']}]{$quote_username}[/url]";
  1035. }
  1036. else
  1037. {
  1038. $quote_username_text = $quote_username . ' (' . generate_board_url() . "/memberlist.$phpEx?mode=viewprofile&amp;u={$post['author_id']})";
  1039. }
  1040.  
  1041. $forward_text = array();
  1042. $forward_text[] = $user->lang['FWD_ORIGINAL_MESSAGE'];
  1043. $forward_text[] = sprintf($user->lang['FWD_SUBJECT'], censor_text($message_subject));
  1044. $forward_text[] = sprintf($user->lang['FWD_DATE'], $user->format_date($message_time, false, true));
  1045. $forward_text[] = sprintf($user->lang['FWD_FROM'], $quote_username_text);
  1046. $forward_text[] = sprintf($user->lang['FWD_TO'], implode($user->lang['COMMA_SEPARATOR'], $fwd_to_field['to']));
  1047.  
  1048. $quote_text = $phpbb_container->get('text_formatter.utils')->generate_quote(
  1049. censor_text($message_parser->message),
  1050. array('author' => $quote_username)
  1051. );
  1052. $message_parser->message = implode("\n", $forward_text) . "\n\n" . $quote_text;
  1053. $message_subject = ((!preg_match('/^Fwd:/', $message_subject)) ? 'Fwd: ' : '') . censor_text($message_subject);
  1054. }
  1055.  
  1056. $attachment_data = $message_parser->attachment_data;
  1057. $filename_data = $message_parser->filename_data;
  1058. $message_text = $message_parser->message;
  1059.  
  1060. // MAIN PM PAGE BEGINS HERE
  1061.  
  1062. // Generate smiley listing
  1063. generate_smilies('inline', 0);
  1064.  
  1065. // Generate PM Icons
  1066. $s_pm_icons = false;
  1067. if ($config['enable_pm_icons'])
  1068. {
  1069. $s_pm_icons = posting_gen_topic_icons($action, $icon_id);
  1070. }
  1071.  
  1072. // Generate inline attachment select box
  1073. posting_gen_inline_attachments($attachment_data);
  1074.  
  1075. // Build address list for display
  1076. // array('u' => array($author_id => 'to'));
  1077. if (count($address_list))
  1078. {
  1079. // Get Usernames and Group Names
  1080. $result = array();
  1081. if (!empty($address_list['u']))
  1082. {
  1083. $sql = 'SELECT user_id as id, username as name, user_colour as colour
  1084. FROM ' . USERS_TABLE . '
  1085. WHERE ' . $db->sql_in_set('user_id', array_map('intval', array_keys($address_list['u']))) . '
  1086. ORDER BY username_clean ASC';
  1087. $result['u'] = $db->sql_query($sql);
  1088. }
  1089.  
  1090. if (!empty($address_list['g']))
  1091. {
  1092. $sql = 'SELECT g.group_id AS id, g.group_name AS name, g.group_colour AS colour, g.group_type
  1093. FROM ' . GROUPS_TABLE . ' g';
  1094.  
  1095. if (!$auth->acl_gets('a_group', 'a_groupadd', 'a_groupdel'))
  1096. {
  1097. $sql .= ' LEFT JOIN ' . USER_GROUP_TABLE . ' ug
  1098. ON (
  1099. g.group_id = ug.group_id
  1100. AND ug.user_id = ' . $user->data['user_id'] . '
  1101. AND ug.user_pending = 0
  1102. )
  1103. WHERE (g.group_type <> ' . GROUP_HIDDEN . ' OR ug.user_id = ' . $user->data['user_id'] . ')';
  1104. }
  1105.  
  1106. $sql .= ($auth->acl_gets('a_group', 'a_groupadd', 'a_groupdel')) ? ' WHERE ' : ' AND ';
  1107.  
  1108. $sql .= 'g.group_receive_pm = 1
  1109. AND ' . $db->sql_in_set('g.group_id', array_map('intval', array_keys($address_list['g']))) . '
  1110. ORDER BY g.group_name ASC';
  1111.  
  1112. $result['g'] = $db->sql_query($sql);
  1113. }
  1114.  
  1115. $u = $g = array();
  1116. $_types = array('u', 'g');
  1117. foreach ($_types as $type)
  1118. {
  1119. if (isset($result[$type]) && $result[$type])
  1120. {
  1121. while ($row = $db->sql_fetchrow($result[$type]))
  1122. {
  1123. if ($type == 'g')
  1124. {
  1125. $row['name'] = $group_helper->get_name($row['name']);
  1126. }
  1127.  
  1128. ${$type}[$row['id']] = array('name' => $row['name'], 'colour' => $row['colour']);
  1129. }
  1130. $db->sql_freeresult($result[$type]);
  1131. }
  1132. }
  1133.  
  1134. // Now Build the address list
  1135. foreach ($address_list as $type => $adr_ary)
  1136. {
  1137. foreach ($adr_ary as $id => $field)
  1138. {
  1139. if (!isset(${$type}[$id]))
  1140. {
  1141. unset($address_list[$type][$id]);
  1142. continue;
  1143. }
  1144.  
  1145. $field = ($field == 'to') ? 'to' : 'bcc';
  1146. $type = ($type == 'u') ? 'u' : 'g';
  1147. $id = (int) $id;
  1148.  
  1149. $tpl_ary = array(
  1150. 'IS_GROUP' => ($type == 'g') ? true : false,
  1151. 'IS_USER' => ($type == 'u') ? true : false,
  1152. 'UG_ID' => $id,
  1153. 'NAME' => ${$type}[$id]['name'],
  1154. 'COLOUR' => (${$type}[$id]['colour']) ? '#' . ${$type}[$id]['colour'] : '',
  1155. 'TYPE' => $type,
  1156. );
  1157.  
  1158. if ($type == 'u')
  1159. {
  1160. $tpl_ary = array_merge($tpl_ary, array(
  1161. 'U_VIEW' => get_username_string('profile', $id, ${$type}[$id]['name'], ${$type}[$id]['colour']),
  1162. 'NAME_FULL' => get_username_string('full', $id, ${$type}[$id]['name'], ${$type}[$id]['colour']),
  1163. ));
  1164. }
  1165. else
  1166. {
  1167. $tpl_ary = array_merge($tpl_ary, array(
  1168. 'U_VIEW' => append_sid("{$phpbb_root_path}memberlist.$phpEx", 'mode=group&amp;g=' . $id),
  1169. ));
  1170. }
  1171.  
  1172. $template->assign_block_vars($field . '_recipient', $tpl_ary);
  1173. }
  1174. }
  1175. }
  1176.  
  1177. // Build hidden address list
  1178. $s_hidden_address_field = build_address_field($address_list);
  1179.  
  1180. $bbcode_checked = (isset($enable_bbcode)) ? !$enable_bbcode : (($config['allow_bbcode'] && $auth->acl_get('u_pm_bbcode')) ? !$user->optionget('bbcode') : 1);
  1181. $smilies_checked = (isset($enable_smilies)) ? !$enable_smilies : (($config['allow_smilies'] && $auth->acl_get('u_pm_smilies')) ? !$user->optionget('smilies') : 1);
  1182. $urls_checked = (isset($enable_urls)) ? !$enable_urls : 0;
  1183. $sig_checked = $enable_sig;
  1184.  
  1185. switch ($action)
  1186. {
  1187. case 'post':
  1188. $page_title = $user->lang['POST_NEW_PM'];
  1189. break;
  1190.  
  1191. case 'quote':
  1192. $page_title = $user->lang['POST_QUOTE_PM'];
  1193. break;
  1194.  
  1195. case 'quotepost':
  1196. $page_title = $user->lang['POST_PM_POST'];
  1197. break;
  1198.  
  1199. case 'reply':
  1200. $page_title = $user->lang['POST_REPLY_PM'];
  1201. break;
  1202.  
  1203. case 'edit':
  1204. $page_title = $user->lang['POST_EDIT_PM'];
  1205. break;
  1206.  
  1207. case 'forward':
  1208. $page_title = $user->lang['POST_FORWARD_PM'];
  1209. break;
  1210.  
  1211. default:
  1212. trigger_error('NO_ACTION_MODE', E_USER_ERROR);
  1213. break;
  1214. }
  1215.  
  1216. $s_hidden_fields = (isset($check_value)) ? '<input type="hidden" name="status_switch" value="' . $check_value . '" />' : '';
  1217. $s_hidden_fields .= ($draft_id || isset($_REQUEST['draft_loaded'])) ? '<input type="hidden" name="draft_loaded" value="' . ((isset($_REQUEST['draft_loaded'])) ? $request->variable('draft_loaded', 0) : $draft_id) . '" />' : '';
  1218.  
  1219. $form_enctype = (@ini_get('file_uploads') == '0' || strtolower(@ini_get('file_uploads')) == 'off' || !$config['allow_pm_attach'] || !$auth->acl_get('u_pm_attach')) ? '' : ' enctype="multipart/form-data"';
  1220.  
  1221. /** @var \phpbb\controller\helper $controller_helper */
  1222. $controller_helper = $phpbb_container->get('controller.helper');
  1223.  
  1224. // Start assigning vars for main posting page ...
  1225. $template_ary = array(
  1226. 'L_POST_A' => $page_title,
  1227. 'L_ICON' => $user->lang['PM_ICON'],
  1228. 'L_MESSAGE_BODY_EXPLAIN' => $user->lang('MESSAGE_BODY_EXPLAIN', (int) $config['max_post_chars']),
  1229.  
  1230. 'SUBJECT' => (isset($message_subject)) ? $message_subject : '',
  1231. 'MESSAGE' => $message_text,
  1232. 'BBCODE_STATUS' => $user->lang(($bbcode_status ? 'BBCODE_IS_ON' : 'BBCODE_IS_OFF'), '<a href="' . $controller_helper->route('phpbb_help_bbcode_controller') . '">', '</a>'),
  1233. 'IMG_STATUS' => ($img_status) ? $user->lang['IMAGES_ARE_ON'] : $user->lang['IMAGES_ARE_OFF'],
  1234. 'FLASH_STATUS' => ($flash_status) ? $user->lang['FLASH_IS_ON'] : $user->lang['FLASH_IS_OFF'],
  1235. 'SMILIES_STATUS' => ($smilies_status) ? $user->lang['SMILIES_ARE_ON'] : $user->lang['SMILIES_ARE_OFF'],
  1236. 'URL_STATUS' => ($url_status) ? $user->lang['URL_IS_ON'] : $user->lang['URL_IS_OFF'],
  1237. 'MAX_FONT_SIZE' => (int) $config['max_post_font_size'],
  1238. 'MINI_POST_IMG' => $user->img('icon_post_target', $user->lang['PM']),
  1239. 'ERROR' => (count($error)) ? implode('<br />', $error) : '',
  1240. 'MAX_RECIPIENTS' => ($config['allow_mass_pm'] && ($auth->acl_get('u_masspm') || $auth->acl_get('u_masspm_group'))) ? $max_recipients : 0,
  1241.  
  1242. 'S_COMPOSE_PM' => true,
  1243. 'S_EDIT_POST' => ($action == 'edit'),
  1244. 'S_SHOW_PM_ICONS' => $s_pm_icons,
  1245. 'S_BBCODE_ALLOWED' => ($bbcode_status) ? 1 : 0,
  1246. 'S_BBCODE_CHECKED' => ($bbcode_checked) ? ' checked="checked"' : '',
  1247. 'S_SMILIES_ALLOWED' => $smilies_status,
  1248. 'S_SMILIES_CHECKED' => ($smilies_checked) ? ' checked="checked"' : '',
  1249. 'S_SIG_ALLOWED' => ($config['allow_sig'] && $config['allow_sig_pm'] && $auth->acl_get('u_sig')),
  1250. 'S_SIGNATURE_CHECKED' => ($sig_checked) ? ' checked="checked"' : '',
  1251. 'S_LINKS_ALLOWED' => $url_status,
  1252. 'S_MAGIC_URL_CHECKED' => ($urls_checked) ? ' checked="checked"' : '',
  1253. 'S_SAVE_ALLOWED' => ($auth->acl_get('u_savedrafts') && $action != 'edit') ? true : false,
  1254. 'S_HAS_DRAFTS' => ($auth->acl_get('u_savedrafts') && $drafts),
  1255. 'S_FORM_ENCTYPE' => $form_enctype,
  1256. 'S_ATTACH_DATA' => json_encode($message_parser->attachment_data),
  1257.  
  1258. 'S_BBCODE_IMG' => $img_status,
  1259. 'S_BBCODE_FLASH' => $flash_status,
  1260. 'S_BBCODE_QUOTE' => true,
  1261. 'S_BBCODE_URL' => $url_status,
  1262.  
  1263. 'S_POST_ACTION' => $s_action,
  1264. 'S_HIDDEN_ADDRESS_FIELD' => $s_hidden_address_field,
  1265. 'S_HIDDEN_FIELDS' => $s_hidden_fields,
  1266.  
  1267. 'S_CLOSE_PROGRESS_WINDOW' => isset($_POST['add_file']),
  1268. 'U_PROGRESS_BAR' => append_sid("{$phpbb_root_path}posting.$phpEx", 'f=0&amp;mode=popup'),
  1269. 'UA_PROGRESS_BAR' => addslashes(append_sid("{$phpbb_root_path}posting.$phpEx", 'f=0&amp;mode=popup')),
  1270. );
  1271.  
  1272. /**
  1273. * Modify the default template vars
  1274. *
  1275. * @event core.ucp_pm_compose_template
  1276. * @var array template_ary Template variables
  1277. * @since 3.2.6-RC1
  1278. */
  1279. $vars = array('template_ary');
  1280. extract($phpbb_dispatcher->trigger_event('core.ucp_pm_compose_template', compact($vars)));
  1281.  
  1282. $template->assign_vars($template_ary);
  1283.  
  1284. // Build custom bbcodes array
  1285. display_custom_bbcodes();
  1286.  
  1287. // Show attachment box for adding attachments if true
  1288. $allowed = ($auth->acl_get('u_pm_attach') && $config['allow_pm_attach'] && $form_enctype);
  1289.  
  1290. if ($allowed)
  1291. {
  1292. $max_files = ($auth->acl_gets('a_', 'm_')) ? 0 : (int) $config['max_attachments_pm'];
  1293. $plupload->configure($cache, $template, $s_action, false, $max_files);
  1294. }
  1295.  
  1296. // Attachment entry
  1297. posting_gen_attachment_entry($attachment_data, $filename_data, $allowed);
  1298.  
  1299. // Message History
  1300. if ($action == 'reply' || $action == 'quote' || $action == 'forward')
  1301. {
  1302. if (message_history($msg_id, $user->data['user_id'], $post, array(), true))
  1303. {
  1304. $template->assign_var('S_DISPLAY_HISTORY', true);
  1305. }
  1306. }
  1307. }
  1308.  
  1309. /**
  1310. * For composing messages, handle list actions
  1311. */
  1312. function handle_message_list_actions(&$address_list, &$error, $remove_u, $remove_g, $add_to, $add_bcc)
  1313. {
  1314. global $auth, $db, $user;
  1315. global $request, $phpbb_dispatcher;
  1316.  
  1317. // Delete User [TO/BCC]
  1318. if ($remove_u && $request->variable('remove_u', array(0 => '')))
  1319. {
  1320. $remove_user_id = array_keys($request->variable('remove_u', array(0 => '')));
  1321.  
  1322. if (isset($remove_user_id[0]))
  1323. {
  1324. unset($address_list['u'][(int) $remove_user_id[0]]);
  1325. }
  1326. }
  1327.  
  1328. // Delete Group [TO/BCC]
  1329. if ($remove_g && $request->variable('remove_g', array(0 => '')))
  1330. {
  1331. $remove_group_id = array_keys($request->variable('remove_g', array(0 => '')));
  1332.  
  1333. if (isset($remove_group_id[0]))
  1334. {
  1335. unset($address_list['g'][(int) $remove_group_id[0]]);
  1336. }
  1337. }
  1338.  
  1339. // Add Selected Groups
  1340. $group_list = $request->variable('group_list', array(0));
  1341.  
  1342. // Build usernames to add
  1343. $usernames = $request->variable('username', '', true);
  1344. $usernames = (empty($usernames)) ? array() : array($usernames);
  1345.  
  1346. $username_list = $request->variable('username_list', '', true);
  1347. if ($username_list)
  1348. {
  1349. $usernames = array_merge($usernames, explode("\n", $username_list));
  1350. }
  1351.  
  1352. // If add to or add bcc not pressed, users could still have usernames listed they want to add...
  1353. if (!$add_to && !$add_bcc && (count($group_list) || count($usernames)))
  1354. {
  1355. $add_to = true;
  1356.  
  1357. global $refresh, $submit, $preview;
  1358.  
  1359. $refresh = true;
  1360. $submit = false;
  1361.  
  1362. // Preview is only true if there was also a message entered
  1363. if ($request->variable('message', ''))
  1364. {
  1365. $preview = true;
  1366. }
  1367. }
  1368.  
  1369. // Add User/Group [TO]
  1370. if ($add_to || $add_bcc)
  1371. {
  1372. $type = ($add_to) ? 'to' : 'bcc';
  1373.  
  1374. if (count($group_list))
  1375. {
  1376. foreach ($group_list as $group_id)
  1377. {
  1378. $address_list['g'][$group_id] = $type;
  1379. }
  1380. }
  1381.  
  1382. // User ID's to add...
  1383. $user_id_ary = array();
  1384.  
  1385. // Reveal the correct user_ids
  1386. if (count($usernames))
  1387. {
  1388. $user_id_ary = array();
  1389. user_get_id_name($user_id_ary, $usernames, array(USER_NORMAL, USER_FOUNDER, USER_INACTIVE));
  1390.  
  1391. // If there are users not existing, we will at least print a notice...
  1392. if (!count($user_id_ary))
  1393. {
  1394. $error[] = $user->lang['PM_NO_USERS'];
  1395. }
  1396. }
  1397.  
  1398. // Add Friends if specified
  1399. $friend_list = array_keys($request->variable('add_' . $type, array(0)));
  1400. $user_id_ary = array_merge($user_id_ary, $friend_list);
  1401.  
  1402. foreach ($user_id_ary as $user_id)
  1403. {
  1404. if ($user_id == ANONYMOUS)
  1405. {
  1406. continue;
  1407. }
  1408.  
  1409. $address_list['u'][$user_id] = $type;
  1410. }
  1411. }
  1412.  
  1413. // Check for disallowed recipients
  1414. if (!empty($address_list['u']))
  1415. {
  1416. $can_ignore_allow_pm = $auth->acl_gets('a_', 'm_') || $auth->acl_getf_global('m_');
  1417.  
  1418. // Administrator deactivated users check and we need to check their
  1419. // PM status (do they want to receive PM's?)
  1420. // Only check PM status if not a moderator or admin, since they
  1421. // are allowed to override this user setting
  1422. $sql = 'SELECT user_id, user_allow_pm
  1423. FROM ' . USERS_TABLE . '
  1424. WHERE ' . $db->sql_in_set('user_id', array_keys($address_list['u'])) . '
  1425. AND (
  1426. (user_type = ' . USER_INACTIVE . '
  1427. AND user_inactive_reason = ' . INACTIVE_MANUAL . ')
  1428. ' . ($can_ignore_allow_pm ? '' : ' OR user_allow_pm = 0') . '
  1429. )';
  1430.  
  1431. $result = $db->sql_query($sql);
  1432.  
  1433. $removed_no_pm = $removed_no_permission = false;
  1434. while ($row = $db->sql_fetchrow($result))
  1435. {
  1436. if (!$can_ignore_allow_pm && !$row['user_allow_pm'])
  1437. {
  1438. $removed_no_pm = true;
  1439. }
  1440. else
  1441. {
  1442. $removed_no_permission = true;
  1443. }
  1444.  
  1445. unset($address_list['u'][$row['user_id']]);
  1446. }
  1447. $db->sql_freeresult($result);
  1448.  
  1449. // print a notice about users not being added who do not want to receive pms
  1450. if ($removed_no_pm)
  1451. {
  1452. $error[] = $user->lang['PM_USERS_REMOVED_NO_PM'];
  1453. }
  1454.  
  1455. // print a notice about users not being added who do not have permission to receive PMs
  1456. if ($removed_no_permission)
  1457. {
  1458. $error[] = $user->lang['PM_USERS_REMOVED_NO_PERMISSION'];
  1459. }
  1460.  
  1461. if (!count(array_keys($address_list['u'])))
  1462. {
  1463. return;
  1464. }
  1465.  
  1466. // Check if users have permission to read PMs
  1467. $can_read = $auth->acl_get_list(array_keys($address_list['u']), 'u_readpm');
  1468. $can_read = (empty($can_read) || !isset($can_read[0]['u_readpm'])) ? array() : $can_read[0]['u_readpm'];
  1469. $cannot_read_list = array_diff(array_keys($address_list['u']), $can_read);
  1470. if (!empty($cannot_read_list))
  1471. {
  1472. foreach ($cannot_read_list as $cannot_read)
  1473. {
  1474. unset($address_list['u'][$cannot_read]);
  1475. }
  1476.  
  1477. $error[] = $user->lang['PM_USERS_REMOVED_NO_PERMISSION'];
  1478. }
  1479.  
  1480. // Check if users are banned
  1481. $banned_user_list = phpbb_get_banned_user_ids(array_keys($address_list['u']), false);
  1482. if (!empty($banned_user_list))
  1483. {
  1484. foreach ($banned_user_list as $banned_user)
  1485. {
  1486. unset($address_list['u'][$banned_user]);
  1487. }
  1488.  
  1489. $error[] = $user->lang['PM_USERS_REMOVED_NO_PERMISSION'];
  1490. }
  1491. }
  1492.  
  1493. /**
  1494. * Event for additional message list actions
  1495. *
  1496. * @event core.message_list_actions
  1497. * @var array address_list The assoc array with the recipient user/group ids
  1498. * @var array error The array containing error data
  1499. * @var bool remove_u The variable for removing a user
  1500. * @var bool remove_g The variable for removing a group
  1501. * @var bool add_to The variable for adding a user to the [TO] field
  1502. * @var bool add_bcc The variable for adding a user to the [BCC] field
  1503. * @since 3.2.4-RC1
  1504. */
  1505. $vars = array('address_list', 'error', 'remove_u', 'remove_g', 'add_to', 'add_bcc');
  1506. extract($phpbb_dispatcher->trigger_event('core.message_list_actions', compact($vars)));
  1507. }
  1508.  
  1509. /**
  1510. * Build the hidden field for the recipients. Needed, as the variable is not read via $request->variable().
  1511. */
  1512. function build_address_field($address_list)
  1513. {
  1514. $s_hidden_address_field = '';
  1515. foreach ($address_list as $type => $adr_ary)
  1516. {
  1517. foreach ($adr_ary as $id => $field)
  1518. {
  1519. $s_hidden_address_field .= '<input type="hidden" name="address_list[' . (($type == 'u') ? 'u' : 'g') . '][' . (int) $id . ']" value="' . (($field == 'to') ? 'to' : 'bcc') . '" />';
  1520. }
  1521. }
  1522. return $s_hidden_address_field;
  1523. }
  1524.  
  1525. /**
  1526. * Return number of private message recipients
  1527. */
  1528. function num_recipients($address_list)
  1529. {
  1530. $num_recipients = 0;
  1531.  
  1532. foreach ($address_list as $field => $adr_ary)
  1533. {
  1534. $num_recipients += count($adr_ary);
  1535. }
  1536.  
  1537. return $num_recipients;
  1538. }
  1539.  
  1540. /**
  1541. * Get number of 'num_recipients' recipients from first position
  1542. */
  1543. function get_recipients($address_list, $num_recipients = 1)
  1544. {
  1545. $recipient = array();
  1546.  
  1547. $count = 0;
  1548. foreach ($address_list as $field => $adr_ary)
  1549. {
  1550. foreach ($adr_ary as $id => $type)
  1551. {
  1552. if ($count >= $num_recipients)
  1553. {
  1554. break 2;
  1555. }
  1556. $recipient[$field][$id] = $type;
  1557. $count++;
  1558. }
  1559. }
  1560.  
  1561. return $recipient;
  1562. }
  1563.  
  1564. >>>>>>> NEW_FILE
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!