364 lines
No EOL
17 KiB
PHP
364 lines
No EOL
17 KiB
PHP
<?php
|
|
if (!defined('IN_INDEX')) {
|
|
header('Location: ../index.php');
|
|
exit;
|
|
}
|
|
|
|
if (isset($_REQUEST['id']))
|
|
$id = intval($_REQUEST['id']);
|
|
else {
|
|
header('Location: index.php');
|
|
exit;
|
|
}
|
|
|
|
if (isset($_GET['page']))
|
|
$page = intval($_GET['page']);
|
|
else
|
|
$page = 1;
|
|
|
|
if (isset($_GET['order']) && $_GET['order'] == 'last_reply')
|
|
$order = 'last_reply';
|
|
else
|
|
$order = 'time';
|
|
|
|
if (isset($_SESSION[$settings['session_prefix'] . 'user_id'])) {
|
|
$tmp_user_id = $_SESSION[$settings['session_prefix'] . 'user_id'];
|
|
} else {
|
|
$tmp_user_id = 0;
|
|
}
|
|
|
|
$isUser = isset($_SESSION[$settings['session_prefix'].'user_type']) && isset($_SESSION[$settings['session_prefix'].'user_id']);
|
|
$isModOrAdmin = $isUser && ($_SESSION[$settings['session_prefix'].'user_type'] == 1 || $_SESSION[$settings['session_prefix'].'user_type'] == 2);
|
|
|
|
if (isset($id) && $id > 0) {
|
|
$result = @mysqli_query($connid, "SELECT ft.id, ft.pid, ft.tid, ft.user_id, UNIX_TIMESTAMP(ft.time + INTERVAL " . $time_difference . " MINUTE) AS disp_time,
|
|
UNIX_TIMESTAMP(ft.time) AS time, UNIX_TIMESTAMP(edited + INTERVAL " . $time_difference . " MINUTE) AS edit_time,
|
|
UNIX_TIMESTAMP(edited - INTERVAL " . $settings['edit_delay'] . " MINUTE) AS edited_diff, edited_by, name, email,
|
|
subject, hp, location, ip, text, cache_text, show_signature, category, locked, views, edit_key,
|
|
user_name, user_type, user_email, email_contact, user_hp, user_location, signature, cache_signature, rst.user_id AS req_user,
|
|
" . $db_settings['akismet_rating_table'] . ".spam AS akismet_spam, spam_check_status,
|
|
" . $db_settings['b8_rating_table'] . ".spam AS b8_spam, training_type
|
|
FROM " . $db_settings['forum_table'] . " AS ft
|
|
LEFT JOIN " . $db_settings['entry_cache_table'] . " ON " . $db_settings['entry_cache_table'] . ".cache_id=ft.id
|
|
LEFT JOIN " . $db_settings['userdata_table'] . " ON " . $db_settings['userdata_table'] . ".user_id=ft.user_id
|
|
LEFT JOIN " . $db_settings['userdata_cache_table'] . " ON " . $db_settings['userdata_cache_table'] . ".cache_id=" . $db_settings['userdata_table'] . ".user_id
|
|
LEFT JOIN " . $db_settings['read_status_table'] . " AS rst ON rst.posting_id = ft.id AND rst.user_id = " . intval($tmp_user_id) . "
|
|
LEFT JOIN " . $db_settings['akismet_rating_table'] . " ON " . $db_settings['akismet_rating_table'] . ".`eid` = `ft`.`id`
|
|
LEFT JOIN " . $db_settings['b8_rating_table'] . " ON " . $db_settings['b8_rating_table'] . ".`eid` = `ft`.`id`
|
|
WHERE ft.id = " . intval($id)) or raise_error('database_error', mysqli_error($connid));
|
|
|
|
if (mysqli_num_rows($result) == 1) {
|
|
$entrydata = mysqli_fetch_array($result);
|
|
mysqli_free_result($result);
|
|
|
|
$entrydata['formated_time'] = format_time($lang['time_format_full'], $entrydata['disp_time']);
|
|
$entrydata['tags'] = getEntryTags($id);
|
|
|
|
// category of this posting accessible by user?
|
|
if (is_array($category_ids) && !in_array($entrydata['category'], $category_ids)) {
|
|
header("Location: index.php");
|
|
exit;
|
|
}
|
|
|
|
if (isset($_SESSION[$settings['session_prefix'] . 'user_id'])) {
|
|
// bookmark handling
|
|
$user_id = $_SESSION[$settings['session_prefix'] . 'user_id'];
|
|
$bookmark_result = mysqli_query($connid, "SELECT TRUE AS 'bookmark' FROM " . $db_settings['bookmark_table'] . " WHERE `user_id` = " . intval($user_id) . " AND `posting_id` = " . intval($id) . "") or raise_error('database_error', mysqli_error($connid));
|
|
$bookmark = mysqli_fetch_row($bookmark_result);
|
|
mysqli_free_result($bookmark_result);
|
|
if (isset($bookmark) && intval($bookmark) == 1)
|
|
$entrydata['bookmarkedby'] = intval($user_id);
|
|
// read-status handling
|
|
$rstatus = save_read_status($connid, $user_id, $id);
|
|
}
|
|
|
|
if ($entrydata['req_user'] !== NULL and is_numeric($entrydata['req_user']))
|
|
$entrydata['is_read'] = true;
|
|
else
|
|
$entrydata['is_read'] = false;
|
|
|
|
$entrydata['spam'] = $entrydata['akismet_spam'] || $entrydata['b8_spam'] ? 1 : 0;
|
|
|
|
$smarty->assign('is_read', $entrydata['is_read']);
|
|
|
|
if (isset($settings['count_views']) && $settings['count_views'] == 1)
|
|
mysqli_query($connid, "UPDATE " . $db_settings['forum_table'] . " SET time=time, last_reply=last_reply, edited=edited, views=views+1 WHERE id=" . $id);
|
|
|
|
if ($entrydata['user_id'] > 0) {
|
|
if ($settings['avatars'] == 2) {
|
|
$avatarInfo = getAvatar($entrydata['user_id']);
|
|
$avatar['image'] = $avatarInfo === false ? false : $avatarInfo[2];
|
|
|
|
if (isset($avatar) && $avatar['image'] !== false) {
|
|
$image_info = getimagesize($avatar['image']);
|
|
$avatar['width'] = $image_info[0];
|
|
$avatar['height'] = $image_info[1];
|
|
$smarty->assign('avatar', $avatar);
|
|
}
|
|
}
|
|
|
|
$entrydata['email'] = $entrydata['user_email'];
|
|
$entrydata['location'] = $entrydata['user_location'];
|
|
$entrydata['hp'] = $entrydata['user_hp'];
|
|
} else
|
|
$entrydata['email_contact'] = 2;
|
|
} else {
|
|
header("Location: index.php");
|
|
exit;
|
|
}
|
|
} else {
|
|
header("Location: index.php");
|
|
exit;
|
|
}
|
|
|
|
if ($entrydata['cache_text'] == '') {
|
|
// no cached text so parse it and cache it:
|
|
$ftext = html_format($entrydata['text']);
|
|
// make sure not to make a double entry:
|
|
@mysqli_query($connid, "DELETE FROM " . $db_settings['entry_cache_table'] . " WHERE cache_id=" . intval($entrydata['id']));
|
|
@mysqli_query($connid, "INSERT INTO " . $db_settings['entry_cache_table'] . " (cache_id, cache_text) VALUES (" . intval($entrydata['id']) . ",'" . mysqli_real_escape_string($connid, $ftext) . "')");
|
|
} else {
|
|
$ftext = $entrydata['cache_text'];
|
|
}
|
|
|
|
if (isset($_REQUEST['ajax_preview'])) {
|
|
header('Content-Type: application/xml; charset=UTF-8');
|
|
echo '<?xml version="1.0"?>';
|
|
?><posting><content><![CDATA[<?php
|
|
echo $ftext;
|
|
?>]]></content><locked><?php
|
|
echo $entrydata['locked'];
|
|
?></locked></posting><?php
|
|
exit;
|
|
}
|
|
|
|
// Select data for thread-tree
|
|
$thread = $entrydata['tid'];
|
|
// Override '$display_spam_query_and' variable, which was set in main.inc.php, to display current message in tree
|
|
if ($entrydata['spam'] == 1 && isset($id))
|
|
$display_spam_query_and .= " OR `ft`.`id` = " . intval($id);
|
|
$result = mysqli_query($connid, "SELECT id, pid, tid, ft.user_id, UNIX_TIMESTAMP(ft.time) AS time, UNIX_TIMESTAMP(ft.time + INTERVAL " . $time_difference . " MINUTE) AS disp_time,
|
|
UNIX_TIMESTAMP(last_reply) AS last_reply, name, user_name, user_type, subject, category, marked, text, rst.user_id AS req_user,
|
|
" . $db_settings['akismet_rating_table'] . ".spam AS akismet_spam,
|
|
" . $db_settings['b8_rating_table'] . ".spam AS b8_spam
|
|
FROM " . $db_settings['forum_table'] . " AS ft
|
|
LEFT JOIN " . $db_settings['userdata_table'] . " ON " . $db_settings['userdata_table'] . ".user_id = ft.user_id
|
|
LEFT JOIN " . $db_settings['read_status_table'] . " AS rst ON rst.posting_id = ft.id AND rst.user_id = " . intval($tmp_user_id) . "
|
|
LEFT JOIN " . $db_settings['akismet_rating_table'] . " ON " . $db_settings['akismet_rating_table'] . ".`eid` = `ft`.`id`
|
|
LEFT JOIN " . $db_settings['b8_rating_table'] . " ON " . $db_settings['b8_rating_table'] . ".`eid` = `ft`.`id`
|
|
WHERE tid = " . $thread . $display_spam_query_and . " ORDER BY time ASC");
|
|
|
|
if (!$result)
|
|
raise_error('database_error', mysqli_error($connid));
|
|
|
|
while ($data = mysqli_fetch_array($result)) {
|
|
if ($data['user_id'] > 0) {
|
|
if (!$data['user_name'])
|
|
$data['name'] = $lang['unknown_user'];
|
|
else
|
|
$data['name'] = htmlspecialchars($data['user_name']);
|
|
} else
|
|
$data['name'] = htmlspecialchars($data['name']);
|
|
$data['subject'] = htmlspecialchars($data['subject']);
|
|
$data['formated_time'] = format_time($lang['time_format'], $data['disp_time']);
|
|
|
|
// set read or new status of messages
|
|
$data = getMessageStatus($data, $last_visit);
|
|
|
|
if ($data['text'] == '')
|
|
$data['no_text'] = true;
|
|
unset($data['text']);
|
|
|
|
if (isset($categories[$data['category']]) && $categories[$data['category']] != '')
|
|
$data['category_name'] = $categories[$data["category"]];
|
|
$data_array[$data['id']] = $data;
|
|
$child_array[$data['pid']][] = $data['id'];
|
|
if ($data['pid'] == $id)
|
|
$direct_replies[] = $data['id'];
|
|
$last = $data['id'];
|
|
if ($data['pid'] > $last)
|
|
$last = $data['id'];
|
|
$data['spam'] = $data['akismet_spam'] || $data['b8_spam'] ? 1 : 0;
|
|
}
|
|
if (isset($child_array)) {
|
|
$smarty->assign('child_array', $child_array);
|
|
get_thread_items($child_array, $entrydata['tid'], $entrydata['id']);
|
|
$thread_items_count = count($thread_items);
|
|
if ($thread_items_count > 1) {
|
|
foreach ($thread_items as $key => $val) {
|
|
if ($val == $entrydata['id'])
|
|
$current_key = $key;
|
|
}
|
|
if ($entrydata['id'] != $thread_items[0])
|
|
$smarty->assign('link_rel_first', 'index.php?id=' . $thread_items[0]);
|
|
if (isset($current_key) && isset($thread_items[$current_key - 1]))
|
|
$smarty->assign('link_rel_prev', 'index.php?id=' . $thread_items[$current_key - 1]);
|
|
if (isset($current_key) && isset($thread_items[$current_key + 1]))
|
|
$smarty->assign('link_rel_next', 'index.php?id=' . $thread_items[$current_key + 1]);
|
|
if ($entrydata['id'] != $thread_items[$thread_items_count - 1])
|
|
$smarty->assign('link_rel_last', 'index.php?id=' . $thread_items[$thread_items_count - 1]);
|
|
}
|
|
}
|
|
|
|
mysqli_free_result($result);
|
|
|
|
// tags:
|
|
if (isset($entrydata['tags']) && $entrydata['tags']) {
|
|
$tags_array = array();
|
|
$i = 0;
|
|
foreach ($entrydata['tags'] as $tag) {
|
|
if (my_strpos($tag, ' ', 0, $lang['charset']))
|
|
$tag_escaped = '"' . $tag . '"';
|
|
else
|
|
$tag_escaped = $tag;
|
|
|
|
$tags_array[$i]['escaped'] = urlencode($tag_escaped);
|
|
$tags_array[$i]['display'] = htmlspecialchars($tag);
|
|
$keywords[] = htmlspecialchars($tag);
|
|
$i++;
|
|
}
|
|
if (isset($tags_array) && !empty($tags_array))
|
|
$smarty->assign('tags', $tags_array);
|
|
if (isset($keywords) && !empty($keywords))
|
|
$smarty->assign('keywords', implode(', ', $keywords));
|
|
}
|
|
$category = $category;
|
|
$smarty->assign('id', intval($entrydata['id']));
|
|
$smarty->assign('tid', intval($entrydata['tid']));
|
|
$smarty->assign('pid', intval($entrydata['pid']));
|
|
$smarty->assign('posting_user_id', intval($entrydata['user_id']));
|
|
$smarty->assign('page_title', htmlspecialchars($entrydata['subject']));
|
|
$smarty->assign('subject', htmlspecialchars($entrydata['subject']));
|
|
|
|
if ($entrydata['user_id'] > 0) {
|
|
if (!$entrydata['user_name'])
|
|
$name = $lang['unknown_user'];
|
|
else
|
|
$name = htmlspecialchars($entrydata['user_name']);
|
|
} else
|
|
$name = htmlspecialchars($entrydata['name']);
|
|
|
|
$smarty->assign('name', $name);
|
|
|
|
$smarty->assign('user_type', htmlspecialchars($entrydata['user_type']));
|
|
$smarty->assign('disp_time', htmlspecialchars($entrydata['disp_time']));
|
|
$smarty->assign('formated_time', htmlspecialchars($entrydata['formated_time']));
|
|
$smarty->assign('locked', htmlspecialchars($entrydata['locked']));
|
|
|
|
$ago['days'] = floor((TIMESTAMP - $entrydata['time']) / 86400);
|
|
$ago['hours'] = floor(((TIMESTAMP - $entrydata['time']) / 3600) - ($ago['days'] * 24));
|
|
$ago['minutes'] = floor(((TIMESTAMP - $entrydata['time']) / 60) - ($ago['hours'] * 60 + $ago['days'] * 1440));
|
|
if ($ago['hours'] > 12)
|
|
$ago['days_rounded'] = $ago['days'] + 1;
|
|
else
|
|
$ago['days_rounded'] = $ago['days'];
|
|
$smarty->assign('ago', $ago);
|
|
|
|
$authorization = get_edit_authorization($id, $entrydata['user_id'], $entrydata['edit_key'], $entrydata['time'], $entrydata['locked']);
|
|
if ($authorization['edit'] == true)
|
|
$options['edit'] = true;
|
|
if ($authorization['delete'] == true)
|
|
$options['delete'] = true;
|
|
|
|
if (isset($direct_replies))
|
|
$smarty->assign('direct_replies', $direct_replies);
|
|
if ($settings['count_views'] == 1) {
|
|
$views = $entrydata['views'] - 1; // this subtracts the first view by the author after posting
|
|
if ($views < 0)
|
|
$views = 0; // prevents negative number of views
|
|
$smarty->assign('views', $entrydata['views']);
|
|
}
|
|
$smarty->assign('ip', $entrydata['ip']);
|
|
if ($entrydata['akismet_spam'] == 1 || $entrydata['b8_spam'] == 1)
|
|
$smarty->assign('spam', true);
|
|
if (isset($categories[$entrydata["category"]]) && $categories[$entrydata['category']] != '') {
|
|
$smarty->assign('category_name', $categories[$entrydata["category"]]);
|
|
}
|
|
|
|
if (empty($entrydata['email_contact']))
|
|
$entrydata["email_contact"] = 0;
|
|
if ($entrydata['hp'] != '') {
|
|
$entrydata['hp'] = add_http_if_no_protocol($entrydata['hp']);
|
|
$smarty->assign('hp', $entrydata["hp"]);
|
|
}
|
|
if ($entrydata['email'] != '' && ($isModOrAdmin || $isUser && $entrydata['email_contact'] > 0 || $entrydata['email_contact'] == 2))
|
|
$smarty->assign('email', true);
|
|
if ($entrydata['location'] != '')
|
|
$smarty->assign('location', htmlspecialchars($entrydata['location']));
|
|
|
|
$subnav_link = array(
|
|
'mode' => 'index',
|
|
'name' => 'thread_entry_back_link',
|
|
'title' => 'thread_entry_back_title'
|
|
);
|
|
|
|
// edited:
|
|
if ($entrydata["edited_diff"] > 0 && $entrydata["edited_diff"] > $entrydata["time"] && $settings['show_if_edited'] == 1) {
|
|
$smarty->assign('edited', true);
|
|
$smarty->assign('edit_time', htmlspecialchars($entrydata['edit_time']));
|
|
$entrydata['formated_edit_time'] = format_time($lang['time_format_full'], $entrydata['edit_time']);
|
|
$smarty->assign('formated_edit_time', htmlspecialchars($entrydata['formated_edit_time']));
|
|
|
|
if ($entrydata['user_id'] == $entrydata['edited_by'])
|
|
$edited_by = $name;
|
|
else {
|
|
$result = @mysqli_query($connid, "SELECT user_name FROM " . $db_settings['userdata_table'] . " WHERE user_id = " . intval($entrydata['edited_by']) . " LIMIT 1");
|
|
$edited_data = mysqli_fetch_array($result);
|
|
@mysqli_free_result($result);
|
|
if (!$edited_data['user_name'])
|
|
$edited_by = $lang['unknown_user'];
|
|
else
|
|
$edited_by = htmlspecialchars($edited_data['user_name']);
|
|
}
|
|
$smarty->assign('edited_by', $edited_by);
|
|
}
|
|
|
|
if (isset($entrydata['signature']) && $entrydata['signature'] != '' && $entrydata["show_signature"] == 1) {
|
|
// user has a signature and wants it to be displayed in this posting. Check if it's already cached:
|
|
if ($entrydata['cache_signature'] != '') {
|
|
$smarty->assign('signature', $entrydata['cache_signature']);
|
|
} else {
|
|
$signature = signature_format($entrydata['signature']);
|
|
// cache signature:
|
|
list($row_count) = @mysqli_fetch_row(mysqli_query($connid, "SELECT COUNT(*) FROM " . $db_settings['userdata_cache_table'] . " WHERE cache_id=" . intval($entrydata['user_id'])));
|
|
if ($row_count == 1) {
|
|
mysqli_query($connid, "UPDATE " . $db_settings['userdata_cache_table'] . " SET cache_signature='" . mysqli_real_escape_string($connid, $signature) . "' WHERE cache_id=" . intval($entrydata['user_id']));
|
|
} else {
|
|
@mysqli_query($connid, "DELETE FROM " . $db_settings['userdata_cache_table'] . " WHERE cache_id=" . intval($entrydata['user_id']));
|
|
@mysqli_query($connid, "INSERT INTO " . $db_settings['userdata_cache_table'] . " (cache_id, cache_signature, cache_profile) VALUES (" . intval($entrydata['user_id']) . ",'" . mysqli_real_escape_string($connid, $signature) . "','')");
|
|
}
|
|
$smarty->assign('signature', $signature);
|
|
}
|
|
}
|
|
|
|
if (isset($branch))
|
|
$smarty->assign('branch', $branch);
|
|
if (isset($data_array))
|
|
$smarty->assign("data", $data_array);
|
|
$smarty->assign('posting', $ftext);
|
|
$smarty->assign('subnav_link', $subnav_link);
|
|
$smarty->assign('page', $page);
|
|
$smarty->assign('order', $order);
|
|
$smarty->assign('category', $category);
|
|
if (isset($_SESSION[$settings['session_prefix'] . 'user_type']) && $_SESSION[$settings['session_prefix'] . 'user_type'] > 0) {
|
|
$options['move'] = true;
|
|
$options['lock'] = true;
|
|
}
|
|
if (isset($_SESSION[$settings['session_prefix'] . 'user_id'])) {
|
|
if (isset($entrydata['bookmarkedby']))
|
|
$options['delete_bookmark'] = true;
|
|
else
|
|
$options['add_bookmark'] = true;
|
|
}
|
|
if (isset($_SESSION[$settings['session_prefix'] . 'user_type']) && $_SESSION[$settings['session_prefix'] . 'user_type'] > 0) {
|
|
if (($settings['akismet_key'] != '' && $settings['akismet_entry_check'] == 1 && $entrydata['akismet_spam'] == 0 && $entrydata['spam_check_status'] > 0) || ($settings['b8_entry_check'] == 1 && $entrydata['b8_spam'] == 0 || $entrydata['training_type'] == 0))
|
|
$options['report_spam'] = true;
|
|
if (($settings['akismet_key'] != '' && $settings['akismet_entry_check'] == 1 && $entrydata['akismet_spam'] == 1 && $entrydata['spam_check_status'] > 0) || ($settings['b8_entry_check'] == 1 && $entrydata['b8_spam'] == 1 || $entrydata['training_type'] == 0))
|
|
$options['flag_ham'] = true;
|
|
}
|
|
|
|
if (isset($options))
|
|
$smarty->assign('options', $options);
|
|
$smarty->assign('subtemplate', 'entry.inc.tpl');
|
|
$template = 'main.tpl';
|
|
?>
|