fluxbb/post.php

   1 <?php
   2 /***********************************************************************
   3
   4   Copyright (C) 2002-2005  Rickard Andersson (rickard@punbb.org)
   5
   6   This file is part of PunBB.
   7
   8   PunBB is free software; you can redistribute it and/or modify it
   9   under the terms of the GNU General Public License as published
  10   by the Free Software Foundation; either version 2 of the License,
  11   or (at your option) any later version.
  12
  13   PunBB is distributed in the hope that it will be useful, but
  14   WITHOUT ANY WARRANTY; without even the implied warranty of
  15   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  16   GNU General Public License for more details.
  17
  18   You should have received a copy of the GNU General Public License
  19   along with this program; if not, write to the Free Software
  20   Foundation, Inc., 59 Temple Place, Suite 330, Boston,
  21   MA  02111-1307  USA
  22
  23 ************************************************************************/
  24
  25
  26 define('PUN_ROOT', './');
  27 require PUN_ROOT.'include/common.php';
  28
  29
  30 if ($pun_user['g_read_board'] == '0')
  31         message($lang_common['No view']);
  32
  33
  34 $tid = isset($_GET['tid']) ? intval($_GET['tid']) : 0;
  35 $fid = isset($_GET['fid']) ? intval($_GET['fid']) : 0;
  36 if ($tid < 1 && $fid < 1 || $tid > 0 && $fid > 0)
  37         message($lang_common['Bad request']);
  38
  39 // Fetch some info about the topic and/or the forum
  40 if ($tid)
  41         $result = $db->query('SELECT f.id, f.forum_name, f.moderators, f.redirect_url, fp.post_replies, fp.post_topics, t.subject, t.closed FROM '.$db->prefix.'topics AS t INNER JOIN '.$db->prefix.'forums AS f ON f.id=t.forum_id LEFT JOIN '.$db->prefix.'forum_perms AS fp ON (fp.forum_id=f.id AND fp.group_id='.$pun_user['g_id'].') WHERE (fp.read_forum IS NULL OR fp.read_forum=1) AND t.id='.$tid) or error('Unable to fetch forum info', __FILE__, __LINE__, $db->error());
  42 else
  43         $result = $db->query('SELECT f.id, f.forum_name, f.moderators, f.redirect_url, fp.post_replies, fp.post_topics FROM '.$db->prefix.'forums AS f LEFT JOIN '.$db->prefix.'forum_perms AS fp ON (fp.forum_id=f.id AND fp.group_id='.$pun_user['g_id'].') WHERE (fp.read_forum IS NULL OR fp.read_forum=1) AND f.id='.$fid) or error('Unable to fetch forum info', __FILE__, __LINE__, $db->error());
  44
  45 if (!$db->num_rows($result))
  46         message($lang_common['Bad request']);
  47
  48 $cur_posting = $db->fetch_assoc($result);
  49
  50 // Is someone trying to post into a redirect forum?
  51 if ($cur_posting['redirect_url'] != '')
  52         message($lang_common['Bad request']);
  53
  54 // Sort out who the moderators are and if we are currently a moderator (or an admin)
  55 $mods_array = ($cur_posting['moderators'] != '') ? unserialize($cur_posting['moderators']) : array();
  56 $is_admmod = ($pun_user['g_id'] == PUN_ADMIN || ($pun_user['g_id'] == PUN_MOD && array_key_exists($pun_user['username'], $mods_array))) ? true : false;
  57
  58 // Do we have permission to post?
  59 if ((($tid && (($cur_posting['post_replies'] == '' && $pun_user['g_post_replies'] == '0') || $cur_posting['post_replies'] == '0')) ||
  60         ($fid && (($cur_posting['post_topics'] == '' && $pun_user['g_post_topics'] == '0') || $cur_posting['post_topics'] == '0')) ||
  61         (isset($cur_posting['closed']) && $cur_posting['closed'] == '1')) &&
  62         !$is_admmod)
  63         message($lang_common['No permission']);
  64
  65 // Load the post.php language file
  66 require PUN_ROOT.'lang/'.$pun_user['language'].'/post.php';
  67
  68 // Start with a clean slate
  69 $errors = array();
  70
  71
  72 // Did someone just hit "Submit" or "Preview"?
  73 if (isset($_POST['form_sent']))
  74 {
  75         // Make sure form_user is correct
  76         if (($pun_user['is_guest'] && $_POST['form_user'] != 'Guest') || (!$pun_user['is_guest'] && $_POST['form_user'] != $pun_user['username']))
  77                 message($lang_common['Bad request']);
  78
  79         // Flood protection
  80         if (!$pun_user['is_guest'] && !isset($_POST['preview']) && $pun_user['last_post'] != '' && (time() - $pun_user['last_post']) < $pun_user['g_post_flood'])
  81                 $errors[] = $lang_post['Flood start'].' '.$pun_user['g_post_flood'].' '.$lang_post['flood end'];
  82
  83         // If it's a new topic
  84         if ($fid)
  85         {
  86                 $subject = pun_trim($_POST['req_subject']);
  87
  88                 if ($subject == '')
  89                         $errors[] = $lang_post['No subject'];
  90                 else if (pun_strlen($subject) > 70)
  91                         $errors[] = $lang_post['Too long subject'];
  92                 else if ($pun_config['p_subject_all_caps'] == '0' && strtoupper($subject) == $subject && $pun_user['g_id'] > PUN_MOD)
  93                         $subject = ucwords(strtolower($subject));
  94         }
  95
  96         // If the user is logged in we get the username and e-mail from $pun_user
  97         if (!$pun_user['is_guest'])
  98         {
  99                 $username = $pun_user['username'];
 100                 $email = $pun_user['email'];
 101         }
 102         // Otherwise it should be in $_POST
 103         else
 104         {
 105                 $username = trim($_POST['req_username']);
 106                 $email = strtolower(trim(($pun_config['p_force_guest_email'] == '1') ? $_POST['req_email'] : $_POST['email']));
 107
 108                 // Load the register.php/profile.php language files
 109                 require PUN_ROOT.'lang/'.$pun_user['language'].'/prof_reg.php';
 110                 require PUN_ROOT.'lang/'.$pun_user['language'].'/register.php';
 111
 112                 // It's a guest, so we have to validate the username
 113                 if (strlen($username) < 2)
 114                         $errors[] = $lang_prof_reg['Username too short'];
 115                 else if (!strcasecmp($username, 'Guest') || !strcasecmp($username, $lang_common['Guest']))
 116                         $errors[] = $lang_prof_reg['Username guest'];
 117                 else if (preg_match('/[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}/', $username))
 118                         $errors[] = $lang_prof_reg['Username IP'];
 119
 120                 if ((strpos($username, '[') !== false || strpos($username, ']') !== false) && strpos($username, '\'') !== false && strpos($username, '"') !== false)
 121                         $errors[] = $lang_prof_reg['Username reserved chars'];
 122                 if (preg_match('#\[b\]|\[/b\]|\[u\]|\[/u\]|\[i\]|\[/i\]|\[color|\[/color\]|\[quote\]|\[quote=|\[/quote\]|\[code\]|\[/code\]|\[img\]|\[/img\]|\[url|\[/url\]|\[email|\[/email\]#i', $username))
 123                         $errors[] = $lang_prof_reg['Username BBCode'];
 124
 125                 // Check username for any censored words
 126                 $temp = censor_words($username);
 127                 if ($temp != $username)
 128                         $errors[] = $lang_register['Username censor'];
 129
 130                 // Check that the username (or a too similar username) is not already registered
 131                 $result = $db->query('SELECT username FROM '.$db->prefix.'users WHERE (username=\''.$db->escape($username).'\' OR username=\''.$db->escape(preg_replace('/[^\w]/', '', $username)).'\') AND id>1') or error('Unable to fetch user info', __FILE__, __LINE__, $db->error());
 132                 if ($db->num_rows($result))
 133                 {
 134                         $busy = $db->result($result);
 135                         $errors[] = $lang_register['Username dupe 1'].' '.pun_htmlspecialchars($busy).'. '.$lang_register['Username dupe 2'];
 136                 }
 137
 138                 if ($pun_config['p_force_guest_email'] == '1' || $email != '')
 139                 {
 140                         require PUN_ROOT.'include/email.php';
 141                         if (!is_valid_email($email))
 142                                 $errors[] = $lang_common['Invalid e-mail'];
 143                 }
 144         }
 145
 146         // Clean up message from POST
 147         $message = pun_linebreaks(pun_trim($_POST['req_message']));
 148
 149         if ($message == '')
 150                 $errors[] = $lang_post['No message'];
 151         else if (strlen($message) > 65535)
 152                 $errors[] = $lang_post['Too long message'];
 153         else if ($pun_config['p_message_all_caps'] == '0' && strtoupper($message) == $message && $pun_user['g_id'] > PUN_MOD)
 154                 $message = ucwords(strtolower($message));
 155
 156         // Validate BBCode syntax
 157         if ($pun_config['p_message_bbcode'] == '1' && strpos($message, '[') !== false && strpos($message, ']') !== false)
 158         {
 159                 require PUN_ROOT.'include/parser.php';
 160                 $message = preparse_bbcode($message, $errors);
 161         }
 162
 163
 164         require PUN_ROOT.'include/search_idx.php';
 165
 166         $hide_smilies = isset($_POST['hide_smilies']) ? 1 : 0;
 167         $subscribe = isset($_POST['subscribe']) ? 1 : 0;
 168
 169         $now = time();
 170
 171         // Did everything go according to plan?
 172         if (empty($errors) && !isset($_POST['preview']))
 173         {
 174                 // If it's a reply
 175                 if ($tid)
 176                 {
 177                         if (!$pun_user['is_guest'])
 178                         {
 179                                 // Insert the new post
 180                                 $db->query('INSERT INTO '.$db->prefix.'posts (poster, poster_id, poster_ip, message, hide_smilies, posted, topic_id) VALUES(\''.$db->escape($username).'\', '.$pun_user['id'].', \''.get_remote_address().'\', \''.$db->escape($message).'\', \''.$hide_smilies.'\', '.$now.', '.$tid.')') or error('Unable to create post', __FILE__, __LINE__, $db->error());
 181                                 $new_pid = $db->insert_id();
 182
 183                                 // To subscribe or not to subscribe, that ...
 184                                 if ($pun_config['o_subscriptions'] == '1' && $subscribe)
 185                                 {
 186                                         $result = $db->query('SELECT 1 FROM '.$db->prefix.'subscriptions WHERE user_id='.$pun_user['id'].' AND topic_id='.$tid) or error('Unable to fetch subscription info', __FILE__, __LINE__, $db->error());
 187                                         if (!$db->num_rows($result))
 188                                                 $db->query('INSERT INTO '.$db->prefix.'subscriptions (user_id, topic_id) VALUES('.$pun_user['id'].' ,'.$tid.')') or error('Unable to add subscription', __FILE__, __LINE__, $db->error());
 189                                 }
 190                         }
 191                         else
 192                         {
 193                                 // It's a guest. Insert the new post
 194                                 $email_sql = ($pun_config['p_force_guest_email'] == '1' || $email != '') ? '\''.$email.'\'' : 'NULL';
 195                                 $db->query('INSERT INTO '.$db->prefix.'posts (poster, poster_ip, poster_email, message, hide_smilies, posted, topic_id) VALUES(\''.$db->escape($username).'\', \''.get_remote_address().'\', '.$email_sql.', \''.$db->escape($message).'\', \''.$hide_smilies.'\', '.$now.', '.$tid.')') or error('Unable to create post', __FILE__, __LINE__, $db->error());
 196                                 $new_pid = $db->insert_id();
 197                         }
 198
 199                         // Count number of replies in the topic
 200                         $result = $db->query('SELECT COUNT(id) FROM '.$db->prefix.'posts WHERE topic_id='.$tid) or error('Unable to fetch post count for topic', __FILE__, __LINE__, $db->error());
 201                         $num_replies = $db->result($result, 0) - 1;
 202
 203                         // Update topic
 204                         $db->query('UPDATE '.$db->prefix.'topics SET num_replies='.$num_replies.', last_post='.$now.', last_post_id='.$new_pid.', last_poster=\''.$db->escape($username).'\' WHERE id='.$tid) or error('Unable to update topic', __FILE__, __LINE__, $db->error());
 205
 206                         update_search_index('post', $new_pid, $message);
 207
 208                         update_forum($cur_posting['id']);
 209
 210                         // Should we send out notifications?
 211                         if ($pun_config['o_subscriptions'] == '1')
 212                         {
 213                                 // Get the post time for the previous post in this topic
 214                                 $result = $db->query('SELECT posted FROM '.$db->prefix.'posts WHERE topic_id='.$tid.' ORDER BY id DESC LIMIT 1, 1') or error('Unable to fetch post info', __FILE__, __LINE__, $db->error());
 215                                 $previous_post_time = $db->result($result);
 216
 217                                 // Get any subscribed users that should be notified (banned users are excluded)
 218                                 $result = $db->query('SELECT u.id, u.email, u.notify_with_post, u.language FROM '.$db->prefix.'users AS u INNER JOIN '.$db->prefix.'subscriptions AS s ON u.id=s.user_id LEFT JOIN '.$db->prefix.'forum_perms AS fp ON (fp.forum_id='.$cur_posting['id'].' AND fp.group_id=u.group_id) LEFT JOIN '.$db->prefix.'online AS o ON u.id=o.user_id LEFT JOIN '.$db->prefix.'bans AS b ON u.username=b.username WHERE b.username IS NULL AND COALESCE(o.logged, u.last_visit)>'.$previous_post_time.' AND (fp.read_forum IS NULL OR fp.read_forum=1) AND s.topic_id='.$tid.' AND u.id!='.intval($pun_user['id'])) or error('Unable to fetch subscription info', __FILE__, __LINE__, $db->error());
 219                                 if ($db->num_rows($result))
 220                                 {
 221                                         require_once PUN_ROOT.'include/email.php';
 222
 223                                         $notification_emails = array();
 224
 225                                         // Loop through subscribed users and send e-mails
 226                                         while ($cur_subscriber = $db->fetch_assoc($result))
 227                                         {
 228                                                 // Is the subscription e-mail for $cur_subscriber['language'] cached or not?
 229                                                 if (!isset($notification_emails[$cur_subscriber['language']]))
 230                                                 {
 231                                                         if (file_exists(PUN_ROOT.'lang/'.$cur_subscriber['language'].'/mail_templates/new_reply.tpl'))
 232                                                         {
 233                                                                 // Load the "new reply" template
 234                                                                 $mail_tpl = trim(file_get_contents(PUN_ROOT.'lang/'.$cur_subscriber['language'].'/mail_templates/new_reply.tpl'));
 235
 236                                                                 // Load the "new reply full" template (with post included)
 237                                                                 $mail_tpl_full = trim(file_get_contents(PUN_ROOT.'lang/'.$cur_subscriber['language'].'/mail_templates/new_reply_full.tpl'));
 238
 239                                                                 // The first row contains the subject (it also starts with "Subject:")
 240                                                                 $first_crlf = strpos($mail_tpl, "\n");
 241                                                                 $mail_subject = trim(substr($mail_tpl, 8, $first_crlf-8));
 242                                                                 $mail_message = trim(substr($mail_tpl, $first_crlf));
 243
 244                                                                 $first_crlf = strpos($mail_tpl_full, "\n");
 245                                                                 $mail_subject_full = trim(substr($mail_tpl_full, 8, $first_crlf-8));
 246                                                                 $mail_message_full = trim(substr($mail_tpl_full, $first_crlf));
 247
 248                                                                 $mail_subject = str_replace('<topic_subject>', '\''.$cur_posting['subject'].'\'', $mail_subject);
 249                                                                 $mail_message = str_replace('<topic_subject>', '\''.$cur_posting['subject'].'\'', $mail_message);
 250                                                                 $mail_message = str_replace('<replier>', $username, $mail_message);
 251                                                                 $mail_message = str_replace('<post_url>', $pun_config['o_base_url'].'/viewtopic.php?pid='.$new_pid.'#p'.$new_pid, $mail_message);
 252                                                                 $mail_message = str_replace('<unsubscribe_url>', $pun_config['o_base_url'].'/misc.php?unsubscribe='.$tid, $mail_message);
 253                                                                 $mail_message = str_replace('<board_mailer>', $pun_config['o_board_title'].' '.$lang_common['Mailer'], $mail_message);
 254
 255                                                                 $mail_subject_full = str_replace('<topic_subject>', '\''.$cur_posting['subject'].'\'', $mail_subject_full);
 256                                                                 $mail_message_full = str_replace('<topic_subject>', '\''.$cur_posting['subject'].'\'', $mail_message_full);
 257                                                                 $mail_message_full = str_replace('<replier>', $username, $mail_message_full);
 258                                                                 $mail_message_full = str_replace('<message>', $message, $mail_message_full);
 259                                                                 $mail_message_full = str_replace('<post_url>', $pun_config['o_base_url'].'/viewtopic.php?pid='.$new_pid.'#p'.$new_pid, $mail_message_full);
 260                                                                 $mail_message_full = str_replace('<unsubscribe_url>', $pun_config['o_base_url'].'/misc.php?unsubscribe='.$tid, $mail_message_full);
 261                                                                 $mail_message_full = str_replace('<board_mailer>', $pun_config['o_board_title'].' '.$lang_common['Mailer'], $mail_message_full);
 262
 263                                                                 $notification_emails[$cur_subscriber['language']][0] = $mail_subject;
 264                                                                 $notification_emails[$cur_subscriber['language']][1] = $mail_message;
 265                                                                 $notification_emails[$cur_subscriber['language']][2] = $mail_subject_full;
 266                                                                 $notification_emails[$cur_subscriber['language']][3] = $mail_message_full;
 267
 268                                                                 $mail_subject = $mail_message = $mail_subject_full = $mail_message_full = null;
 269                                                         }
 270                                                 }
 271
 272                                                 // We have to double check here because the templates could be missing
 273                                                 if (isset($notification_emails[$cur_subscriber['language']]))
 274                                                 {
 275                                                         if ($cur_subscriber['notify_with_post'] == '0')
 276                                                                 pun_mail($cur_subscriber['email'], $notification_emails[$cur_subscriber['language']][0], $notification_emails[$cur_subscriber['language']][1]);
 277                                                         else
 278                                                                 pun_mail($cur_subscriber['email'], $notification_emails[$cur_subscriber['language']][2], $notification_emails[$cur_subscriber['language']][3]);
 279                                                 }
 280                                         }
 281                                 }
 282                         }
 283                 }
 284                 // If it's a new topic
 285                 else if ($fid)
 286                 {
 287                         // Create the topic
 288                         $db->query('INSERT INTO '.$db->prefix.'topics (poster, subject, posted, last_post, last_poster, forum_id) VALUES(\''.$db->escape($username).'\', \''.$db->escape($subject).'\', '.$now.', '.$now.', \''.$db->escape($username).'\', '.$fid.')') or error('Unable to create topic', __FILE__, __LINE__, $db->error());
 289                         $new_tid = $db->insert_id();
 290
 291                         if (!$pun_user['is_guest'])
 292                         {
 293                                 // To subscribe or not to subscribe, that ...
 294                                 if ($pun_config['o_subscriptions'] == '1' && (isset($_POST['subscribe']) && $_POST['subscribe'] == '1'))
 295                                         $db->query('INSERT INTO '.$db->prefix.'subscriptions (user_id, topic_id) VALUES('.$pun_user['id'].' ,'.$new_tid.')') or error('Unable to add subscription', __FILE__, __LINE__, $db->error());
 296
 297                                 // Create the post ("topic post")
 298                                 $db->query('INSERT INTO '.$db->prefix.'posts (poster, poster_id, poster_ip, message, hide_smilies, posted, topic_id) VALUES(\''.$db->escape($username).'\', '.$pun_user['id'].', \''.get_remote_address().'\', \''.$db->escape($message).'\', \''.$hide_smilies.'\', '.$now.', '.$new_tid.')') or error('Unable to create post', __FILE__, __LINE__, $db->error());
 299                         }
 300                         else
 301                         {
 302                                 // Create the post ("topic post")
 303                                 $email_sql = ($pun_config['p_force_guest_email'] == '1' || $email != '') ? '\''.$email.'\'' : 'NULL';
 304                                 $db->query('INSERT INTO '.$db->prefix.'posts (poster, poster_ip, poster_email, message, hide_smilies, posted, topic_id) VALUES(\''.$db->escape($username).'\', \''.get_remote_address().'\', '.$email_sql.', \''.$db->escape($message).'\', \''.$hide_smilies.'\', '.$now.', '.$new_tid.')') or error('Unable to create post', __FILE__, __LINE__, $db->error());
 305                         }
 306                         $new_pid = $db->insert_id();
 307
 308                         // Update the topic with last_post_id
 309                         $db->query('UPDATE '.$db->prefix.'topics SET last_post_id='.$new_pid.' WHERE id='.$new_tid) or error('Unable to update topic', __FILE__, __LINE__, $db->error());
 310
 311                         update_search_index('post', $new_pid, $message, $subject);
 312
 313                         update_forum($fid);
 314                 }
 315
 316                 // If the posting user is logged in, increment his/her post count
 317                 if (!$pun_user['is_guest'])
 318                 {
 319                         $low_prio = ($db_type == 'mysql') ? 'LOW_PRIORITY ' : '';
 320                         $db->query('UPDATE '.$low_prio.$db->prefix.'users SET num_posts=num_posts+1, last_post='.$now.' WHERE id='.$pun_user['id']) or error('Unable to update user', __FILE__, __LINE__, $db->error());
 321                 }
 322
 323                 redirect('viewtopic.php?pid='.$new_pid.'#p'.$new_pid, $lang_post['Post redirect']);
 324         }
 325 }
 326
 327
 328 // If a topic id was specified in the url (it's a reply).
 329 if ($tid)
 330 {
 331         $action = $lang_post['Post a reply'];
 332         $form = '<form id="post" method="post" action="post.php?action=post&amp;tid='.$tid.'" onsubmit="this.submit.disabled=true;if(process_form(this)){return true;}else{this.submit.disabled=false;return false;}">';
 333
 334         // If a quote-id was specified in the url.
 335         if (isset($_GET['qid']))
 336         {
 337                 $qid = intval($_GET['qid']);
 338                 if ($qid < 1)
 339                         message($lang_common['Bad request']);
 340
 341                 $result = $db->query('SELECT poster, message FROM '.$db->prefix.'posts WHERE id='.$qid.' AND topic_id='.$tid) or error('Unable to fetch quote info', __FILE__, __LINE__, $db->error());
 342                 if (!$db->num_rows($result))
 343                         message($lang_common['Bad request']);
 344
 345                 list($q_poster, $q_message) = $db->fetch_row($result);
 346
 347                 $q_message = str_replace('[img]', '[url]', $q_message);
 348                 $q_message = str_replace('[/img]', '[/url]', $q_message);
 349                 $q_message = pun_htmlspecialchars($q_message);
 350
 351                 if ($pun_config['p_message_bbcode'] == '1')
 352                 {
 353                         // If username contains a square bracket, we add "" or '' around it (so we know when it starts and ends)
 354                         if (strpos($q_poster, '[') !== false || strpos($q_poster, ']') !== false)
 355                         {
 356                                 if (strpos($q_poster, '\'') !== false)
 357                                         $q_poster = '"'.$q_poster.'"';
 358                                 else
 359                                         $q_poster = '\''.$q_poster.'\'';
 360                         }
 361                         else
 362                         {
 363                                 // Get the characters at the start and end of $q_poster
 364                                 $ends = substr($q_poster, 0, 1).substr($q_poster, -1, 1);
 365
 366                                 // Deal with quoting "Username" or 'Username' (becomes '"Username"' or "'Username'")
 367                                 if ($ends == '\'\'')
 368                                         $q_poster = '"'.$q_poster.'"';
 369                                 else if ($ends == '""')
 370                                         $q_poster = '\''.$q_poster.'\'';
 371                         }
 372
 373                         $quote = '[quote='.$q_poster.']'.$q_message.'[/quote]'."\n";
 374                 }
 375                 else
 376                         $quote = '> '.$q_poster.' '.$lang_common['wrote'].':'."\n\n".'> '.$q_message."\n";
 377         }
 378
 379         $forum_name = '<a href="viewforum.php?id='.$cur_posting['id'].'">'.pun_htmlspecialchars($cur_posting['forum_name']).'</a>';
 380 }
 381 // If a forum_id was specified in the url (new topic).
 382 else if ($fid)
 383 {
 384         $action = $lang_post['Post new topic'];
 385         $form = '<form id="post" method="post" action="post.php?action=post&amp;fid='.$fid.'" onsubmit="return process_form(this)">';
 386
 387         $forum_name = pun_htmlspecialchars($cur_posting['forum_name']);
 388 }
 389 else
 390         message($lang_common['Bad request']);
 391
 392
 393 $page_title = pun_htmlspecialchars($pun_config['o_board_title']).' / '.$action;
 394 $required_fields = array('req_email' => $lang_common['E-mail'], 'req_subject' => $lang_common['Subject'], 'req_message' => $lang_common['Message']);
 395 $focus_element = array('post');
 396
 397 if (!$pun_user['is_guest'])
 398         $focus_element[] = ($fid) ? 'req_subject' : 'req_message';
 399 else
 400 {
 401         $required_fields['req_username'] = $lang_post['Guest name'];
 402         $focus_element[] = 'req_username';
 403 }
 404
 405 require PUN_ROOT.'header.php';
 406
 407 ?>
 408 <div class="linkst">
 409         <div class="inbox">
 410                 <ul><li><a href="index.php"><?php echo $lang_common['Index'] ?></a></li><li>&nbsp;&raquo;&nbsp;<?php echo $forum_name ?><?php if (isset($cur_posting['subject'])) echo '</li><li>&nbsp;&raquo;&nbsp;'.pun_htmlspecialchars($cur_posting['subject']) ?></li></ul>
 411         </div>
 412 </div>
 413
 414 <?php
 415
 416 // If there are errors, we display them
 417 if (!empty($errors))
 418 {
 419
 420 ?>
 421 <div id="posterror" class="block">
 422         <h2><span><?php echo $lang_post['Post errors'] ?></span></h2>
 423         <div class="box">
 424                 <div class="inbox">
 425                         <p><?php echo $lang_post['Post errors info'] ?></p>
 426                         <ul>
 427 <?php
 428
 429         while (list(, $cur_error) = each($errors))
 430                 echo "\t\t\t\t".'<li><strong>'.$cur_error.'</strong></li>'."\n";
 431 ?>
 432                         </ul>
 433                 </div>
 434         </div>
 435 </div>
 436
 437 <?php
 438
 439 }
 440 else if (isset($_POST['preview']))
 441 {
 442         require_once PUN_ROOT.'include/parser.php';
 443         $preview_message = parse_message($message, $hide_smilies);
 444
 445 ?>
 446 <div id="postpreview" class="blockpost">
 447         <h2><span><?php echo $lang_post['Post preview'] ?></span></h2>
 448         <div class="box">
 449                 <div class="inbox">
 450                         <div class="postright">
 451                                 <div class="postmsg">
 452                                         <?php echo $preview_message."\n" ?>
 453                                 </div>
 454                         </div>
 455                 </div>
 456         </div>
 457 </div>
 458
 459 <?php
 460
 461 }
 462
 463
 464 $cur_index = 1;
 465
 466 ?>
 467 <div class="blockform">
 468         <h2><span><?php echo $action ?></span></h2>
 469         <div class="box">
 470                 <?php echo $form."\n" ?>
 471                         <div class="inform">
 472                                 <fieldset>
 473                                         <legend><?php echo $lang_common['Write message legend'] ?></legend>
 474                                         <div class="infldset txtarea">
 475                                                 <input type="hidden" name="form_sent" value="1" />
 476                                                 <input type="hidden" name="form_user" value="<?php echo (!$pun_user['is_guest']) ? pun_htmlspecialchars($pun_user['username']) : 'Guest'; ?>" />
 477 <?php
 478
 479 if ($pun_user['is_guest'])
 480 {
 481         $email_label = ($pun_config['p_force_guest_email'] == '1') ? '<strong>'.$lang_common['E-mail'].'</strong>' : $lang_common['E-mail'];
 482         $email_form_name = ($pun_config['p_force_guest_email'] == '1') ? 'req_email' : 'email';
 483
 484 ?>                                              <label class="conl"><strong><?php echo $lang_post['Guest name'] ?></strong><br /><input type="text" name="req_username" value="<?php if (isset($_POST['req_username'])) echo pun_htmlspecialchars($username); ?>" size="25" maxlength="25" tabindex="<?php echo $cur_index++ ?>" /><br /></label>
 485                                                 <label class="conl"><?php echo $email_label ?><br /><input type="text" name="<?php echo $email_form_name ?>" value="<?php if (isset($_POST[$email_form_name])) echo pun_htmlspecialchars($email); ?>" size="50" maxlength="50" tabindex="<?php echo $cur_index++ ?>" /><br /></label>
 486                                                 <div class="clearer"></div>
 487 <?php
 488
 489 }
 490
 491 if ($fid): ?>
 492                                                 <label><strong><?php echo $lang_common['Subject'] ?></strong><br /><input class="longinput" type="text" name="req_subject" value="<?php if (isset($_POST['req_subject'])) echo pun_htmlspecialchars($subject); ?>" size="80" maxlength="70" tabindex="<?php echo $cur_index++ ?>" /><br /></label>
 493 <?php endif; ?>                                         <label><strong><?php echo $lang_common['Message'] ?></strong><br />
 494                                                 <textarea name="req_message" rows="20" cols="95" tabindex="<?php echo $cur_index++ ?>"><?php echo isset($_POST['req_message']) ? pun_htmlspecialchars($message) : (isset($quote) ? $quote : ''); ?></textarea><br /></label>
 495                                                 <ul class="bblinks">
 496                                                         <li><a href="help.php#bbcode" onclick="window.open(this.href); return false;"><?php echo $lang_common['BBCode'] ?></a>: <?php echo ($pun_config['p_message_bbcode'] == '1') ? $lang_common['on'] : $lang_common['off']; ?></li>
 497                                                         <li><a href="help.php#img" onclick="window.open(this.href); return false;"><?php echo $lang_common['img tag'] ?></a>: <?php echo ($pun_config['p_message_img_tag'] == '1') ? $lang_common['on'] : $lang_common['off']; ?></li>
 498                                                         <li><a href="help.php#smilies" onclick="window.open(this.href); return false;"><?php echo $lang_common['Smilies'] ?></a>: <?php echo ($pun_config['o_smilies'] == '1') ? $lang_common['on'] : $lang_common['off']; ?></li>
 499                                                 </ul>
 500                                         </div>
 501                                 </fieldset>
 502 <?php
 503
 504 $checkboxes = array();
 505 if (!$pun_user['is_guest'])
 506 {
 507         if ($pun_config['o_smilies'] == '1')
 508                 $checkboxes[] = '<label><input type="checkbox" name="hide_smilies" value="1" tabindex="'.($cur_index++).'"'.(isset($_POST['hide_smilies']) ? ' checked="checked"' : '').' />'.$lang_post['Hide smilies'];
 509
 510         if ($pun_config['o_subscriptions'] == '1')
 511                 $checkboxes[] = '<label><input type="checkbox" name="subscribe" value="1" tabindex="'.($cur_index++).'"'.(isset($_POST['subscribe']) ? ' checked="checked"' : '').' />'.$lang_post['Subscribe'];
 512 }
 513 else if ($pun_config['o_smilies'] == '1')
 514         $checkboxes[] = '<label><input type="checkbox" name="hide_smilies" value="1" tabindex="'.($cur_index++).'"'.(isset($_POST['hide_smilies']) ? ' checked="checked"' : '').' />'.$lang_post['Hide smilies'];
 515
 516 if (!empty($checkboxes))
 517 {
 518
 519 ?>
 520                         </div>
 521                         <div class="inform">
 522                                 <fieldset>
 523                                         <legend><?php echo $lang_common['Options'] ?></legend>
 524                                         <div class="infldset">
 525                                                 <div class="rbox">
 526                                                         <?php echo implode('<br /></label>'."\n\t\t\t\t", $checkboxes).'<br /></label>'."\n" ?>
 527                                                 </div>
 528                                         </div>
 529                                 </fieldset>
 530 <?php
 531
 532 }
 533
 534 ?>
 535                         </div>
 536                         <p><input type="submit" name="submit" value="<?php echo $lang_common['Submit'] ?>" tabindex="<?php echo $cur_index++ ?>" accesskey="s" /><input type="submit" name="preview" value="<?php echo $lang_post['Preview'] ?>" tabindex="<?php echo $cur_index++ ?>" accesskey="p" /><a href="javascript:history.go(-1)"><?php echo $lang_common['Go back'] ?></a></p>
 537                 </form>
 538         </div>
 539 </div>
 540
 541 <?php
 542
 543 // Check to see if the topic review is to be displayed.
 544 if ($tid && $pun_config['o_topic_review'] != '0')
 545 {
 546         require_once PUN_ROOT.'include/parser.php';
 547
 548         $result = $db->query('SELECT poster, message, hide_smilies, posted FROM '.$db->prefix.'posts WHERE topic_id='.$tid.' ORDER BY id DESC LIMIT '.$pun_config['o_topic_review']) or error('Unable to fetch topic review', __FILE__, __LINE__, $db->error());
 549
 550 ?>
 551
 552 <div id="postreview" class="blockpost">
 553         <h2><span><?php echo $lang_post['Topic review'] ?></span></h2>
 554 <?php
 555
 556         //Set background switching on
 557         $bg_switch = true;
 558         $post_count = 0;
 559
 560         while ($cur_post = $db->fetch_assoc($result))
 561         {
 562                 // Switch the background color for every message.
 563                 $bg_switch = ($bg_switch) ? $bg_switch = false : $bg_switch = true;
 564                 $vtbg = ($bg_switch) ? ' roweven' : ' rowodd';
 565                 $post_count++;
 566
 567                 $cur_post['message'] = parse_message($cur_post['message'], $cur_post['hide_smilies']);
 568
 569 ?>
 570         <div class="box<?php echo $vtbg ?>">
 571                 <div class="inbox">
 572                         <div class="postleft">
 573                                 <dl>
 574                                         <dt><strong><?php echo pun_htmlspecialchars($cur_post['poster']) ?></strong></dt>
 575                                         <dd><?php echo format_time($cur_post['posted']) ?></dd>
 576                                 </dl>
 577                         </div>
 578                         <div class="postright">
 579                                 <div class="postmsg">
 580                                         <?php echo $cur_post['message'] ?>
 581                                 </div>
 582                         </div>
 583                         <div class="clearer"></div>
 584                 </div>
 585         </div>
 586 <?php
 587
 588         }
 589
 590 ?>
 591 </div>
 592 <?php
 593
 594 }
 595
 596 require PUN_ROOT.'footer.php';