rendered paste body<?php/*************************************************************************** * viewpost.php * ------------------- * begin : Saturday, May 06, 2006 * copyright : (C) 2006 phpBBModders * email : evil@phpbbmodders.com * * $Id: viewpost.php,v 1.0.5.0 2006/8/28 21:36:20 eviL3 Exp $ * * ***************************************************************************//*************************************************************************** * * This program is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation; either version 2 of the License, or * (at your option) any later version. * ***************************************************************************/ /*************************************************************************** * * This is a Modified viewtopic.php, that only shows one Post. All credit * Goes to the phpBB team. Thanks guys, you're great! * eviL<3 * ***************************************************************************/define('IN_PHPBB', true);$phpbb_root_path = './';include($phpbb_root_path . 'extension.inc');include($phpbb_root_path . 'common.'.$phpEx);include($phpbb_root_path . 'includes/bbcode.'.$phpEx);//// Start initial var setup//if ( isset($HTTP_GET_VARS[POST_POST_URL])){ $post_id = intval($HTTP_GET_VARS[POST_POST_URL]);}$start = ( isset($HTTP_GET_VARS['start']) ) ? intval($HTTP_GET_VARS['start']) : 0;if (!$post_id){ message_die(GENERAL_MESSAGE, 'No_posts_topic');}//// This rather complex gaggle of code handles querying for topics but// also allows for direct linking to a post (and the calculation of which// page the post is on and the correct display of viewtopic)//$join_sql_table = (!$post_id) ? '' : ", " . POSTS_TABLE . " p, " . POSTS_TABLE . " p2 ";$join_sql = (!$post_id) ? "t.topic_id = $topic_id" : "p.post_id = $post_id AND t.topic_id = p.topic_id AND p2.topic_id = p.topic_id AND p2.post_id <= $post_id";$count_sql = (!$post_id) ? '' : ", COUNT(p2.post_id) AS prev_posts";$order_sql = (!$post_id) ? '' : "GROUP BY p.post_id, t.topic_id, t.topic_title, t.topic_status, t.topic_replies, t.topic_time, t.topic_type, t.topic_vote, t.topic_last_post_id, f.forum_name, f.forum_status, f.forum_id, f.auth_view, f.auth_read, f.auth_post, f.auth_reply, f.auth_edit, f.auth_delete, f.auth_sticky, f.auth_announce, f.auth_pollcreate, f.auth_vote, f.auth_attachments ORDER BY p.post_id ASC";$sql = "SELECT t.topic_id, t.topic_title, t.topic_status, t.topic_replies, t.topic_time, t.topic_type, t.topic_vote, t.topic_last_post_id, f.forum_name, f.forum_status, f.forum_id, f.auth_view, f.auth_read, f.auth_post, f.auth_reply, f.auth_edit, f.auth_delete, f.auth_sticky, f.auth_announce, f.auth_pollcreate, f.auth_vote, f.auth_attachments" . $count_sql . " FROM " . TOPICS_TABLE . " t, " . FORUMS_TABLE . " f" . $join_sql_table . " WHERE $join_sql AND f.forum_id = t.forum_id $order_sql";if ( !($result = $db->sql_query($sql)) ){ message_die(GENERAL_ERROR, "Could not obtain topic information", '', __LINE__, __FILE__, $sql);}if ( !($forum_topic_data = $db->sql_fetchrow($result)) ){ message_die(GENERAL_MESSAGE, 'Topic_post_not_exist');}$forum_id = intval($forum_topic_data['forum_id']);//// Start session management//$userdata = session_pagestart($user_ip, PAGE_VIEWPOST);init_userprefs($userdata);//// End session management////// Start auth check//$is_auth = array();$is_auth = auth(AUTH_ALL, $forum_id, $userdata, $forum_topic_data);if( !$is_auth['auth_view'] || !$is_auth['auth_read'] ){ if ( !$userdata['session_logged_in'] ) { $redirect = ($post_id) ? POST_POST_URL . "=$post_id" : POST_TOPIC_URL . "=$topic_id"; $redirect .= ($start) ? "&start=$start" : ''; redirect(append_sid("login.$phpEx?redirect=viewtopic.$phpEx&$redirect", true)); } $message = ( !$is_auth['auth_view'] ) ? $lang['Topic_post_not_exist'] : sprintf($lang['Sorry_auth_read'], $is_auth['auth_read_type']); message_die(GENERAL_MESSAGE, $message);}//// End auth check//$forum_name = $forum_topic_data['forum_name'];$topic_title = $forum_topic_data['topic_title'];$topic_id = intval($forum_topic_data['topic_id']);$topic_time = $forum_topic_data['topic_time'];if ($post_id){ $start = floor(($forum_topic_data['prev_posts'] - 1) / intval($board_config['posts_per_page'])) * intval($board_config['posts_per_page']);}//// Go ahead and pull all data for this topic//$sql = "SELECT u.username, u.user_id, u.user_posts, u.user_from, u.user_website, u.user_email, u.user_icq, u.user_aim, u.user_yim, u.user_regdate, u.user_msnm, u.user_viewemail, u.user_rank, u.user_sig, u.user_sig_bbcode_uid, u.user_avatar, u.user_avatar_type, u.user_allowavatar, u.user_allowsmile, p.*, pt.post_text, pt.post_text_compiled, pt.post_subject, pt.bbcode_uid FROM " . POSTS_TABLE . " p, " . USERS_TABLE . " u, " . POSTS_TEXT_TABLE . " pt WHERE pt.post_id = p.post_id AND u.user_id = p.poster_id AND $post_id = p.post_id ORDER BY p.post_time $post_time_order";if ( !($result = $db->sql_query($sql)) ){ message_die(GENERAL_ERROR, "Could not obtain post/user information.", '', __LINE__, __FILE__, $sql);}$postrow = array();if ($row = $db->sql_fetchrow($result)){ $postrow = $row; $db->sql_freeresult($result);}else { include($phpbb_root_path . 'includes/functions_admin.' . $phpEx); sync('topic', $topic_id); message_die(GENERAL_MESSAGE, $lang['No_posts_topic']); } $sql = "SELECT * FROM " . RANKS_TABLE . " ORDER BY rank_special, rank_min";if ( !($result = $db->sql_query($sql)) ){ message_die(GENERAL_ERROR, "Could not obtain ranks information.", '', __LINE__, __FILE__, $sql);}$ranksrow = array();while ( $row = $db->sql_fetchrow($result) ){ $ranksrow[] = $row;}$db->sql_freeresult($result);//// Define censored word matches//$orig_word = array();$replacement_word = array();obtain_word_list($orig_word, $replacement_word);//// Censor topic title//if ( count($orig_word) ){ $topic_title = preg_replace($orig_word, $replacement_word, $topic_title);}//// Was a highlight request part of the URI?//$highlight_match = $highlight = '';if (isset($HTTP_GET_VARS['highlight'])){ // Split words and phrases $words = explode(' ', trim(htmlspecialchars($HTTP_GET_VARS['highlight']))); for($i = 0; $i < sizeof($words); $i++) { if (trim($words[$i]) != '') { $highlight_match .= (($highlight_match != '') ? '|' : '') . str_replace('*', '\w*', preg_quote($words[$i], '#')); } } unset($words); $highlight = urlencode($HTTP_GET_VARS['highlight']); $highlight_match = phpbb_rtrim($highlight_match, "\\");}//// Post, reply and other URL generation for// templating vars//$view_forum_url = append_sid("viewforum.$phpEx?" . POST_FORUM_URL . "=$forum_id");//// Set a cookie for this topic//if ( $userdata['session_logged_in'] ){ $tracking_topics = ( isset($HTTP_COOKIE_VARS[$board_config['cookie_name'] . '_t']) ) ? unserialize($HTTP_COOKIE_VARS[$board_config['cookie_name'] . '_t']) : array(); $tracking_forums = ( isset($HTTP_COOKIE_VARS[$board_config['cookie_name'] . '_f']) ) ? unserialize($HTTP_COOKIE_VARS[$board_config['cookie_name'] . '_f']) : array(); if ( !empty($tracking_topics[$topic_id]) && !empty($tracking_forums[$forum_id]) ) { $topic_last_read = ( $tracking_topics[$topic_id] > $tracking_forums[$forum_id] ) ? $tracking_topics[$topic_id] : $tracking_forums[$forum_id]; } else if ( !empty($tracking_topics[$topic_id]) || !empty($tracking_forums[$forum_id]) ) { $topic_last_read = ( !empty($tracking_topics[$topic_id]) ) ? $tracking_topics[$topic_id] : $tracking_forums[$forum_id]; } else { $topic_last_read = $userdata['user_lastvisit']; } if ( count($tracking_topics) >= 150 && empty($tracking_topics[$topic_id]) ) { asort($tracking_topics); unset($tracking_topics[key($tracking_topics)]); } $tracking_topics[$topic_id] = time(); setcookie($board_config['cookie_name'] . '_t', serialize($tracking_topics), 0, $board_config['cookie_path'], $board_config['cookie_domain'], $board_config['cookie_secure']);}//// Load templates//$template->set_filenames(array( 'body' => 'viewpost_body.tpl'));//// Output page header//$gen_simple_header = FALSE;$page_title = $lang['View_single_post'] .' - ' . $topic_title;include($phpbb_root_path . 'includes/page_header.'.$phpEx);//// Does this topic contain a poll?//if ( !empty($forum_topic_data['topic_vote']) ){ $s_hidden_fields = ''; $sql = "SELECT vd.vote_id, vd.vote_text, vd.vote_start, vd.vote_length, vr.vote_option_id, vr.vote_option_text, vr.vote_result FROM " . VOTE_DESC_TABLE . " vd, " . VOTE_RESULTS_TABLE . " vr WHERE vd.topic_id = $topic_id AND vr.vote_id = vd.vote_id ORDER BY vr.vote_option_id ASC"; if ( !($result = $db->sql_query($sql)) ) { message_die(GENERAL_ERROR, "Could not obtain vote data for this topic", '', __LINE__, __FILE__, $sql); } if ( $vote_info = $db->sql_fetchrowset($result) ) { $db->sql_freeresult($result); $vote_options = count($vote_info); $vote_id = $vote_info[0]['vote_id']; $vote_title = $vote_info[0]['vote_text']; $sql = "SELECT vote_id FROM " . VOTE_USERS_TABLE . " WHERE vote_id = $vote_id AND vote_user_id = " . intval($userdata['user_id']); if ( !($result = $db->sql_query($sql)) ) { message_die(GENERAL_ERROR, "Could not obtain user vote data for this topic", '', __LINE__, __FILE__, $sql); } $user_voted = ( $row = $db->sql_fetchrow($result) ) ? TRUE : 0; $db->sql_freeresult($result); if ( isset($HTTP_GET_VARS['vote']) || isset($HTTP_POST_VARS['vote']) ) { $view_result = ( ( ( isset($HTTP_GET_VARS['vote']) ) ? $HTTP_GET_VARS['vote'] : $HTTP_POST_VARS['vote'] ) == 'viewresult' ) ? TRUE : 0; } else { $view_result = 0; } $poll_expired = ( $vote_info[0]['vote_length'] ) ? ( ( $vote_info[0]['vote_start'] + $vote_info[0]['vote_length'] < time() ) ? TRUE : 0 ) : 0; if ( $user_voted || $view_result || $poll_expired || !$is_auth['auth_vote'] || $forum_topic_data['topic_status'] == TOPIC_LOCKED ) { $template->set_filenames(array( 'pollbox' => 'viewtopic_poll_result.tpl') ); $vote_results_sum = 0; for($i = 0; $i < $vote_options; $i++) { $vote_results_sum += $vote_info[$i]['vote_result']; } $vote_graphic = 0; $vote_graphic_max = count($images['voting_graphic']); for($i = 0; $i < $vote_options; $i++) { $vote_percent = ( $vote_results_sum > 0 ) ? $vote_info[$i]['vote_result'] / $vote_results_sum : 0; $vote_graphic_length = round($vote_percent * $board_config['vote_graphic_length']); $vote_graphic_img = $images['voting_graphic'][$vote_graphic]; $vote_graphic = ($vote_graphic < $vote_graphic_max - 1) ? $vote_graphic + 1 : 0; if ( count($orig_word) ) { $vote_info[$i]['vote_option_text'] = preg_replace($orig_word, $replacement_word, $vote_info[$i]['vote_option_text']); } $template->assign_block_vars("poll_option", array( 'POLL_OPTION_CAPTION' => $vote_info[$i]['vote_option_text'], 'POLL_OPTION_RESULT' => $vote_info[$i]['vote_result'], 'POLL_OPTION_PERCENT' => sprintf("%.1d%%", ($vote_percent * 100)), 'POLL_OPTION_IMG' => $vote_graphic_img, 'POLL_OPTION_IMG_WIDTH' => $vote_graphic_length) ); } $template->assign_vars(array( 'L_TOTAL_VOTES' => $lang['Total_votes'], 'TOTAL_VOTES' => $vote_results_sum) ); } else { $template->set_filenames(array( 'pollbox' => 'viewtopic_poll_ballot.tpl') ); for($i = 0; $i < $vote_options; $i++) { if ( count($orig_word) ) { $vote_info[$i]['vote_option_text'] = preg_replace($orig_word, $replacement_word, $vote_info[$i]['vote_option_text']); } $template->assign_block_vars("poll_option", array( 'POLL_OPTION_ID' => $vote_info[$i]['vote_option_id'], 'POLL_OPTION_CAPTION' => $vote_info[$i]['vote_option_text']) ); } $template->assign_vars(array( 'L_SUBMIT_VOTE' => $lang['Submit_vote'], 'L_VIEW_RESULTS' => $lang['View_results'], 'U_VIEW_RESULTS' => append_sid("viewtopic.$phpEx?" . POST_TOPIC_URL . "=$topic_id&postdays=$post_days&postorder=$post_order&vote=viewresult")) ); $s_hidden_fields = '<input type="hidden" name="topic_id" value="' . $topic_id . '" /><input type="hidden" name="mode" value="vote" />'; } if ( count($orig_word) ) { $vote_title = preg_replace($orig_word, $replacement_word, $vote_title); } $s_hidden_fields .= '<input type="hidden" name="sid" value="' . $userdata['session_id'] . '" />'; $template->assign_vars(array( 'POLL_QUESTION' => $vote_title, 'S_HIDDEN_FIELDS' => $s_hidden_fields, 'S_POLL_ACTION' => append_sid("posting.$phpEx?mode=vote&" . POST_TOPIC_URL . "=$topic_id")) ); $template->assign_var_from_handle('POLL_DISPLAY', 'pollbox'); }}// Start Removed loop$poster_id = $postrow['user_id'];$poster = ( $poster_id == ANONYMOUS ) ? $lang['Guest'] : $postrow['username'];$post_date = create_date($board_config['default_dateformat'], $postrow['post_time'], $board_config['board_timezone']);$poster_avatar = '';if ( $postrow['user_avatar_type'] && $poster_id != ANONYMOUS && $postrow['user_allowavatar'] ){ switch( $postrow['user_avatar_type'] ) { case USER_AVATAR_UPLOAD: $poster_avatar = ( $board_config['allow_avatar_upload'] ) ? '<img src="' . $board_config['avatar_path'] . '/' . $postrow['user_avatar'] . '" alt="" border="0" />' : ''; break; case USER_AVATAR_REMOTE: $poster_avatar = ( $board_config['allow_avatar_remote'] ) ? '<img src="' . $postrow['user_avatar'] . '" alt="" border="0" />' : ''; break; case USER_AVATAR_GALLERY: $poster_avatar = ( $board_config['allow_avatar_local'] ) ? '<img src="' . $board_config['avatar_gallery_path'] . '/' . $postrow['user_avatar'] . '" alt="" border="0" />' : ''; break; }}// Added for XS BBCode Parser$sig_cache = array();//// Define the little post icon//if ( $userdata['session_logged_in'] && $postrow['post_time'] > $userdata['user_lastvisit'] && $postrow['post_time'] > $topic_last_read ){ $mini_post_img = $images['icon_minipost_new']; $mini_post_alt = $lang['New_post'];}else{ $mini_post_img = $images['icon_minipost']; $mini_post_alt = $lang['Post'];}$mini_post_url = append_sid("viewtopic.$phpEx?" . POST_POST_URL . '=' . $postrow['post_id']) . '#' . $postrow['post_id'];//// Generate ranks, set them to empty string initially.//$poster_rank = '';$rank_image = '';if ( $postrow['user_id'] == ANONYMOUS ){}else if ( $postrow['user_rank'] ){ for($j = 0; $j < count($ranksrow); $j++) { if ( $postrow['user_rank'] == $ranksrow[$j]['rank_id'] && $ranksrow[$j]['rank_special'] ) { $poster_rank = $ranksrow[$j]['rank_title']; $rank_image = ( $ranksrow[$j]['rank_image'] ) ? '<img src="' . $ranksrow[$j]['rank_image'] . '" alt="' . $poster_rank . '" title="' . $poster_rank . '" border="0" /><br />' : ''; } }}else{ for($j = 0; $j < count($ranksrow); $j++) { if ( $postrow['user_posts'] >= $ranksrow[$j]['rank_min'] && !$ranksrow[$j]['rank_special'] ) { $poster_rank = $ranksrow[$j]['rank_title']; $rank_image = ( $ranksrow[$j]['rank_image'] ) ? '<img src="' . $ranksrow[$j]['rank_image'] . '" alt="' . $poster_rank . '" title="' . $poster_rank . '" border="0" /><br />' : ''; } }}//// Handle anon users posting with usernames//if ( $poster_id == ANONYMOUS && $postrow['post_username'] != '' ){ $poster = $postrow['post_username']; $poster_rank = $lang['Guest'];}$temp_url = '';if ( $poster_id != ANONYMOUS ){ $temp_url = append_sid("profile.$phpEx?mode=viewprofile&" . POST_USERS_URL . "=$poster_id"); $profile_img = '<a href="' . $temp_url . '"><img src="' . $images['icon_profile'] . '" alt="' . $lang['Read_profile'] . '" title="' . $lang['Read_profile'] . '" border="0" /></a>'; $profile = '<a href="' . $temp_url . '">' . $lang['Read_profile'] . '</a>'; $temp_url = append_sid("privmsg.$phpEx?mode=post&" . POST_USERS_URL . "=$poster_id"); $pm_img = '<a href="' . $temp_url . '"><img src="' . $images['icon_pm'] . '" alt="' . $lang['Send_private_message'] . '" title="' . $lang['Send_private_message'] . '" border="0" /></a>'; $pm = '<a href="' . $temp_url . '">' . $lang['Send_private_message'] . '</a>'; if ( !empty($postrow['user_viewemail']) || $is_auth['auth_mod'] ) { $email_uri = ( $board_config['board_email_form'] ) ? append_sid("profile.$phpEx?mode=email&" . POST_USERS_URL .'=' . $poster_id) : 'mailto:' . $postrow['user_email']; $email_img = '<a href="' . $email_uri . '"><img src="' . $images['icon_email'] . '" alt="' . $lang['Send_email'] . '" title="' . $lang['Send_email'] . '" border="0" /></a>'; $email = '<a href="' . $email_uri . '">' . $lang['Send_email'] . '</a>'; } else { $email_img = ''; $email = ''; } $www_img = ( $postrow['user_website'] ) ? '<a href="' . $postrow['user_website'] . '" target="_userwww"><img src="' . $images['icon_www'] . '" alt="' . $lang['Visit_website'] . '" title="' . $lang['Visit_website'] . '" border="0" /></a>' : ''; $www = ( $postrow['user_website'] ) ? '<a href="' . $postrow['user_website'] . '" target="_userwww">' . $lang['Visit_website'] . '</a>' : ''; if ( !empty($postrow['user_icq']) ) { $icq_status_img = '<a href="http://wwp.icq.com/' . $postrow['user_icq'] . '#pager"><img src="http://web.icq.com/whitepages/online?icq=' . $postrow['user_icq'] . '&img=5" width="18" height="18" border="0" /></a>'; $icq_img = '<a href="http://wwp.icq.com/scripts/search.dll?to=' . $postrow['user_icq'] . '"><img src="' . $images['icon_icq'] . '" alt="' . $lang['ICQ'] . '" title="' . $lang['ICQ'] . '" border="0" /></a>'; $icq = '<a href="http://wwp.icq.com/scripts/search.dll?to=' . $postrow['user_icq'] . '">' . $lang['ICQ'] . '</a>'; } else { $icq_status_img = ''; $icq_img = ''; $icq = ''; } $aim_img = ( $postrow['user_aim'] ) ? '<a href="aim:goim?screenname=' . $postrow['user_aim'] . '&message=Hello+Are+you+there?"><img src="' . $images['icon_aim'] . '" alt="' . $lang['AIM'] . '" title="' . $lang['AIM'] . '" border="0" /></a>' : ''; $aim = ( $postrow['user_aim'] ) ? '<a href="aim:goim?screenname=' . $postrow['user_aim'] . '&message=Hello+Are+you+there?">' . $lang['AIM'] . '</a>' : ''; $temp_url = append_sid("profile.$phpEx?mode=viewprofile&" . POST_USERS_URL . "=$poster_id"); $msn_img = ( $postrow['user_msnm'] ) ? '<a href="' . $temp_url . '"><img src="' . $images['icon_msnm'] . '" alt="' . $lang['MSNM'] . '" title="' . $lang['MSNM'] . '" border="0" /></a>' : ''; $msn = ( $postrow['user_msnm'] ) ? '<a href="' . $temp_url . '">' . $lang['MSNM'] . '</a>' : ''; $yim_img = ( $postrow['user_yim'] ) ? '<a href="http://edit.yahoo.com/config/send_webmesg?.target=' . $postrow['user_yim'] . '&.src=pg"><img src="' . $images['icon_yim'] . '" alt="' . $lang['YIM'] . '" title="' . $lang['YIM'] . '" border="0" /></a>' : ''; $yim = ( $postrow['user_yim'] ) ? '<a href="http://edit.yahoo.com/config/send_webmesg?.target=' . $postrow['user_yim'] . '&.src=pg">' . $lang['YIM'] . '</a>' : '';}else{ $profile_img = ''; $profile = ''; $pm_img = ''; $pm = ''; $email_img = ''; $email = ''; $www_img = ''; $www = ''; $icq_status_img = ''; $icq_img = ''; $icq = ''; $aim_img = ''; $aim = ''; $msn_img = ''; $msn = ''; $yim_img = ''; $yim = '';}$temp_url = append_sid("posting.$phpEx?mode=quote&" . POST_POST_URL . "=" . $postrow['post_id']);$quote_img = '<a href="' . $temp_url . '"><img src="' . $images['icon_quote'] . '" alt="' . $lang['Reply_with_quote'] . '" title="' . $lang['Reply_with_quote'] . '" border="0" /></a>';$quote = '<a href="' . $temp_url . '">' . $lang['Reply_with_quote'] . '</a>';if ( ( $userdata['user_id'] == $poster_id && $is_auth['auth_edit'] ) || $is_auth['auth_mod'] ){ $temp_url = append_sid("posting.$phpEx?mode=editpost&" . POST_POST_URL . "=" . $postrow['post_id']); $edit_img = '<a href="' . $temp_url . '"><img src="' . $images['icon_edit'] . '" alt="' . $lang['Edit_delete_post'] . '" title="' . $lang['Edit_delete_post'] . '" border="0" /></a>'; $edit = '<a href="' . $temp_url . '">' . $lang['Edit_delete_post'] . '</a>';}else{ $edit_img = ''; $edit = '';}if ( $is_auth['auth_mod'] ){ $temp_url = "modcp.$phpEx?mode=ip&" . POST_POST_URL . "=" . $postrow['post_id'] . "&" . POST_TOPIC_URL . "=" . $topic_id . "&sid=" . $userdata['session_id']; $ip_img = '<a href="' . $temp_url . '"><img src="' . $images['icon_ip'] . '" alt="' . $lang['View_IP'] . '" title="' . $lang['View_IP'] . '" border="0" /></a>'; $ip = '<a href="' . $temp_url . '">' . $lang['View_IP'] . '</a>'; $temp_url = "posting.$phpEx?mode=delete&" . POST_POST_URL . "=" . $postrow['post_id'] . "&sid=" . $userdata['session_id']; $delpost_img = '<a href="' . $temp_url . '"><img src="' . $images['icon_delpost'] . '" alt="' . $lang['Delete_post'] . '" title="' . $lang['Delete_post'] . '" border="0" /></a>'; $delpost = '<a href="' . $temp_url . '">' . $lang['Delete_post'] . '</a>';}else{ $ip_img = ''; $ip = ''; if ( $userdata['user_id'] == $poster_id && $is_auth['auth_delete'] && $forum_topic_data['topic_last_post_id'] == $postrow['post_id'] ) { $temp_url = "posting.$phpEx?mode=delete&" . POST_POST_URL . "=" . $postrow['post_id'] . "&sid=" . $userdata['session_id']; $delpost_img = '<a href="' . $temp_url . '"><img src="' . $images['icon_delpost'] . '" alt="' . $lang['Delete_post'] . '" title="' . $lang['Delete_post'] . '" border="0" /></a>'; $delpost = '<a href="' . $temp_url . '">' . $lang['Delete_post'] . '</a>'; } else { $delpost_img = ''; $delpost = ''; }}$post_subject = ( $postrow['post_subject'] != '' ) ? $postrow['post_subject'] : '';$message = $postrow['post_text'];// add XS BBCode parser if( preg_match('/\[you/i', $message) || preg_match('/\[hide/i', $message) || preg_match('/\[version/i', $message) ) { $message_compiled = false; } else { $message_compiled = empty($postrow['post_text_compiled']) ? false : $postrow['post_text_compiled']; }$bbcode_uid = $postrow['bbcode_uid'];$user_sig = ( $postrow['enable_sig'] && $postrow['user_sig'] != '' && $board_config['allow_sig'] ) ? $postrow['user_sig'] : '';$user_sig_bbcode_uid = $postrow['user_sig_bbcode_uid'];//// Note! The order used for parsing the message _is_ important, moving things around could break any// output//// // Parse message and/or sig for BBCode if reqd // $xs_bbcode->allow_bbcode = $board_config['allow_bbcode']; $xs_bbcode->allow_smilies = $board_config['allow_smilies']; $xs_bbcode->allow_remote_urls = $board_config['livelinks_enable']; if($user_sig && empty($sig_cache[$postrow['user_id']])) { $xs_bbcode->is_sig = true; $user_sig = $xs_bbcode->parse($user_sig, $user_sig_bbcode_uid); $sig_cache[$postrow['user_id']] = $user_sig; $xs_bbcode->is_sig = false; } elseif($user_sig) { $user_sig = $sig_cache[$postrow['user_id']]; } if($message_compiled === false) { $xs_bbcode->allow_smilies = $board_config['allow_smilies'] && $postrow['user_allowsmile'] ? true : false; $GLOBALS['code_post_id'] = $postrow['post_id']; $message = $xs_bbcode->parse($message, $bbcode_uid); $GLOBALS['code_post_id'] = 0; // update database $sql = "UPDATE " . POSTS_TEXT_TABLE . " SET post_text_compiled='" . addslashes($message) . "' WHERE post_id='" . $postrow['post_id'] . "'"; if( !($db->sql_query($sql)) ) { message_die(GENERAL_ERROR, 'Unable to update compiled text for this post: ' . $postrow['post_id'], '', __LINE__, __FILE__, $sql); } } else { $message = $message_compiled; }/*// original code commented to add CA's BBCode Parser // // If the board has HTML off but the post has HTML // on then we process it, else leave it alone // if ( !$board_config['allow_html'] || !$userdata['user_allowhtml']) { if ( $user_sig != '' ) { $user_sig = preg_replace('#(<)([\/]?.*?)(>)#is', "<\\2>", $user_sig); } if ( $postrow['enable_html'] ) { $message = preg_replace('#(<)([\/]?.*?)(>)#is', "<\\2>", $message); } } // // Parse message and/or sig for BBCode if reqd // if ($user_sig != '' && $user_sig_bbcode_uid != '') { $user_sig = ($board_config['allow_bbcode']) ? bbencode_second_pass($user_sig, $user_sig_bbcode_uid) : preg_replace("/\:$user_sig_bbcode_uid/si", '', $user_sig); } if ($bbcode_uid != '') { $message = ($board_config['allow_bbcode']) ? bbencode_second_pass($message, $bbcode_uid) : preg_replace("/\:$bbcode_uid/si", '', $message); } if ( $user_sig != '' ) { $user_sig = make_clickable($user_sig); } $message = make_clickable($message); // // Parse smilies // if ( $board_config['allow_smilies'] ) { if ( $postrow['user_allowsmile'] && $user_sig != '' ) { $user_sig = smilies_pass($user_sig); } if ( $postrow['enable_smilies'] ) { $message = smilies_pass($message); } }// end comment*///// Highlight active words (primarily for search)//if ($highlight_match){ // This has been back-ported from 3.0 CVS $message = preg_replace('#(?!<.*)(?<!\w)(' . $highlight_match . ')(?!\w|[^<>]*>)#i', '<b style="color:#'.$theme['fontcolor3'].'">\1</b>', $message);}//// Replace naughty words//if (count($orig_word)){ $post_subject = preg_replace($orig_word, $replacement_word, $post_subject); if ($user_sig != '') { $user_sig = str_replace('\"', '"', substr(@preg_replace('#(\>(((?>([^><]+|(?R)))*)\<))#se', "@preg_replace(\$orig_word, \$replacement_word, '\\0')", '>' . $user_sig . '<'), 1, -1)); } $message = str_replace('\"', '"', substr(@preg_replace('#(\>(((?>([^><]+|(?R)))*)\<))#se', "@preg_replace(\$orig_word, \$replacement_word, '\\0')", '>' . $message . '<'), 1, -1));}//// Replace newlines (we use this rather than nl2br because// till recently it wasn't XHTML compliant)//if ( $user_sig != '' ){ /*// Commented XS BBCode Parser $user_sig = '<br />_________________<br />' . str_replace("\n", "\n<br />\n", $user_sig);*/ $user_sig = '<br />_________________<br />' . $user_sig;}/*// Start Comment BBCode Parser $message = str_replace("\n", "\n<br />\n", $message);// End Comment BBCode Parser*///// Editing information//if ( $postrow['post_edit_count'] ){ $l_edit_time_total = ( $postrow['post_edit_count'] == 1 ) ? $lang['Edited_time_total'] : $lang['Edited_times_total']; $l_edited_by = '<br /><br />' . sprintf($l_edit_time_total, $poster, create_date($board_config['default_dateformat'], $postrow['post_edit_time'], $board_config['board_timezone']), $postrow['post_edit_count']);}else{ $l_edited_by = '';}// Start Edit Notes MOD// End Removed loop//// If we've got a hightlight set pass it on to pagination,// I get annoyed when I lose my highlight after the first page.//$pagination = ( $highlight != '' ) ? generate_pagination("viewtopic.$phpEx?" . POST_TOPIC_URL . "=$topic_id&postdays=$post_days&postorder=$post_order&highlight=$highlight", $total_replies, $board_config['posts_per_page'], $start) : generate_pagination("viewtopic.$phpEx?" . POST_TOPIC_URL . "=$topic_id&postdays=$post_days&postorder=$post_order", $total_replies, $board_config['posts_per_page'], $start);//// Send vars to template//$template->assign_vars(array( 'TOPIC_ID' => $topic_id, 'TOPIC_TITLE' => $topic_title, 'ROW_COLOR' => '#' . $theme['td_color1'], 'ROW_CLASS' => $theme['td_class1'], 'POSTER_NAME' => $poster, 'POSTER_RANK' => $poster_rank, 'RANK_IMAGE' => $rank_image, 'POSTER_AVATAR' => $poster_avatar, 'POST_DATE' => $post_date, 'POST_SUBJECT' => $post_subject, 'MESSAGE' => $message, 'SIGNATURE' => $user_sig, 'EDITED_MESSAGE' => $l_edited_by, 'MINI_POST_IMG' => $mini_post_img, 'PROFILE_IMG' => $profile_img, 'PROFILE' => $profile, 'SEARCH_IMG' => $search_img, 'SEARCH' => $search, 'PM_IMG' => $pm_img, 'PM' => $pm, 'EMAIL_IMG' => $email_img, 'EMAIL' => $email, 'WWW_IMG' => $www_img, 'WWW' => $www, 'ICQ_STATUS_IMG' => $icq_status_img, 'ICQ_IMG' => $icq_img, 'ICQ' => $icq, 'AIM_IMG' => $aim_img, 'AIM' => $aim, 'MSN_IMG' => $msn_img, 'MSN' => $msn, 'YIM_IMG' => $yim_img, 'YIM' => $yim, 'EDIT_IMG' => $edit_img, 'EDIT' => $edit, 'QUOTE_IMG' => $quote_img, 'QUOTE' => $quote, 'IP_IMG' => $ip_img, 'IP' => $ip, 'DELETE_IMG' => $delpost_img, 'DELETE' => $delpost, 'REPLY_IMG' => $reply_img, 'L_VIEW_SINGLE' => $lang['View_single_post'], 'L_TOPIC' => $lang['Topic'], 'L_AUTHOR' => $lang['Author'], 'L_MESSAGE' => $lang['Message'], 'L_POSTED' => $lang['Posted'], 'L_POST_SUBJECT' => $lang['Post_subject'], 'L_MINI_POST_ALT' => $mini_post_alt, 'U_VIEW_TOPIC' => append_sid("viewtopic.$phpEx?" . POST_TOPIC_URL . "=$topic_id&start=$start&postdays=$post_days&postorder=$post_order&highlight=$highlight"), 'U_MINI_POST' => $mini_post_url, 'U_POST_ID' => $postrow['post_id']));//// Okay, let's NOT do the loop, yeah come on baby let's NOT do the loop// and it goes NOT like this ... LOL// if ( $board_config['edit_notes_enable'] ) { $mode = ( isset($HTTP_GET_VARS['mode']) ) ? htmlspecialchars($HTTP_GET_VARS['mode']) : htmlspecialchars($HTTP_POST_VARS['mode']); $sid = ( isset($HTTP_GET_VARS['sid']) ) ? htmlspecialchars($HTTP_GET_VARS['sid']) : htmlspecialchars($HTTP_POST_VARS['sid']); $u_post_id = ( isset($HTTP_GET_VARS[POST_POST_URL]) ) ? intval($HTTP_GET_VARS[POST_POST_URL]) : intval($HTTP_POST_VARS[POST_POST_URL]); $u_topic_id = ( isset($HTTP_GET_VARS[POST_TOPIC_URL]) ) ? intval($HTTP_GET_VARS[POST_TOPIC_URL]) : intval($HTTP_POST_VARS[POST_TOPIC_URL]); $u_edit_note_id = ( isset($HTTP_GET_VARS['edit_note_id']) ) ? intval($HTTP_GET_VARS['edit_note_id']) : intval($HTTP_POST_VARS['edit_note_id']); $confirm = isset($HTTP_POST_VARS['confirm']) ? true : false; $cancel = isset($HTTP_POST_VARS['cancel']) ? true : false; // Are we trying to delete a note? if ( $mode == 'deletenote' && $sid && $u_edit_note_id && $u_post_id ) { // To delete a note requires a session ID. No SID or invalid one? Die to prevent session hijacking. if ( $sid == '' || $sid != $userdata['session_id'] ) { message_die(GENERAL_ERROR, 'Invalid_session'); } $sql = 'SELECT user_id FROM ' . EDIT_NOTES_TABLE . " WHERE edit_note_id = $u_edit_note_id"; if ( !($result = $db->sql_query($sql)) ) { message_die(GENERAL_ERROR, 'Could not look up user ID for this edit note', '', __LINE__, __FILE__, $sql); } if ( !($row = $db->sql_fetchrow($result)) ) { message_die(GENERAL_ERROR, 'Could not retrieve user ID for this edit note', '', __LINE__, __FILE__, $sql); } $user_id = $row['user_id']; // Auth check. Is the user deleting the note the author or a mod/admin? if ( $is_auth['auth_delete'] != 1 || ( $is_auth['auth_mod'] == 0 && $user_id != $userdata['user_id'] ) ) { message_die(GENERAL_ERROR, $lang['Not_Authorised']); } // Was cancel pressed when deleting a note? if ( $cancel ) { redirect(append_sid("viewtopic.$phpEx?" . POST_POST_URL . "=$u_post_id", true) . "#$u_post_id"); } // Confirm edit note deletion if ( !$confirm ) { $s_hidden_fields = '<input type="hidden" name="' . POST_POST_URL . '" value="' . $u_post_id . '" />'; $s_hidden_fields .= '<input type="hidden" name="mode" value="deletenote" />'; $s_hidden_fields .= '<input type="hidden" name="sid" value="' . $sid . '" />'; $s_hidden_fields .= '<input type="hidden" name="edit_note_id" value="' . $u_edit_note_id . '" />'; $l_confirm = $lang['Confirm_delete_edit_note']; $template->set_filenames(array( 'confirm_body' => 'confirm_body.tpl', )); $template->assign_vars(array( 'MESSAGE_TITLE' => $lang['Information'], 'MESSAGE_TEXT' => $l_confirm, 'L_YES' => $lang['Yes'], 'L_NO' => $lang['No'], 'S_CONFIRM_ACTION' => append_sid("viewtopic.$phpEx?" . POST_TOPIC_URL . "=$u_topic_id"), 'S_HIDDEN_FIELDS' => $s_hidden_fields, )); $template->pparse('confirm_body'); include($phpbb_root_path . 'includes/page_tail.'.$phpEx); } // Actually delete the note if ( $confirm ) { $sql = 'DELETE FROM ' . EDIT_NOTES_TABLE . " WHERE edit_note_id = $u_edit_note_id LIMIT 1"; if ( !($result = $db->sql_query($sql)) ) { message_die(GENERAL_ERROR, 'Could not delete this edit note', '', __LINE__, __FILE__, $sql); } $message = $lang['Edit_note_deleted']; $message .= '<br /><br />' . sprintf($lang['Click_view_message'], '<a href="' . append_sid("viewtopic.$phpEx?" . POST_POST_URL . "=$u_post_id") . "#$u_post_id" . '">', '</a>'); message_die(GENERAL_MESSAGE, $message); } } // Core code. Pull all edit notes for this post. $max_edit_notes = $board_config['max_edit_notes']; $sql = 'SELECT * FROM ' . EDIT_NOTES_TABLE . ' WHERE post_id = ' . $postrow['post_id'] . ' ORDER BY edit_note_time DESC LIMIT ' . $max_edit_notes; if ( !($result = $db->sql_query($sql)) ) { message_die(GENERAL_ERROR, 'Could not look up edit notes for this post', '', __LINE__, __FILE__, $sql); } if ( $db->sql_numrows($result) ) { $template->assign_block_vars('postrow.post_edit_notes', array() ); } while ( $row = $db->sql_fetchrow($result) ) { $edit_note_id = $row['edit_note_id']; $user_id = $row['user_id']; $note = htmlspecialchars($row['note']); // Replace censored words if ( count($orig_word) ) { $note = preg_replace($orig_word, $replacement_word, $note); } $ip = decode_ip($row['ip']); $time = create_date($board_config['default_dateformat'], $row['edit_note_time'], $board_config['board_timezone']); // Match up user IDs with usernames if ( $user_id != ANONYMOUS ) { $sql2 = 'SELECT username, user_level FROM ' . USERS_TABLE . ' WHERE user_id = ' . $user_id; if ( !($result2 = $db->sql_query($sql2)) ) { message_die(GENERAL_ERROR, 'Could not look up username for this edit note', '', __LINE__, __FILE__, $sql); } if ( !($row2 = $db->sql_fetchrow($result2)) ) { message_die(GENERAL_ERROR, 'Could not retrieve username for this edit note', '', __LINE__, __FILE__, $sql); } $username = $row2['username']; $user_level = $row2['user_level']; $user_style = ( $user_level == ADMIN ) ? ' style="color: #' . $theme['fontcolor3'] . '"' : ( ( $user_level == MOD ) ? ' style="color: #' . $theme['fontcolor2'] . '"' : '' ); $u_user_profile = '<a href="' . append_sid("profile.$phpEx?mode=viewprofile&" . POST_USERS_URL . "=$user_id") . '"' . $user_style . '>' . $username . '</a>'; } else { $u_user_profile = $lang['Guest']; } // IP / Delete links for the appropriate user level $u_ip = ( $is_auth['auth_mod'] ) ? ' [ ' . $lang['IP'] . ': <a href="http://whois.sc/' . $ip . '" target="_blank">' . $ip . '</a> ]' : ''; $u_delete_note = ( $is_auth['auth_mod'] || $user_id == $userdata['user_id'] ) ? ' [ <a href="' . "viewtopic.$phpEx?mode=deletenote&" . POST_POST_URL . '=' . $postrow['post_id'] . "&" . POST_TOPIC_URL . "=$topic_id&edit_note_id=$edit_note_id&sid=" . $userdata['session_id'] . '">' . $lang['Delete_note'] . '</a> ]' : ''; $template->assign_block_vars('postrow.post_edit_notes.edit_notes_loop', array( 'L_EDITED_BY' => sprintf($lang['Edited_by'], $u_user_profile, $time), 'NOTE' => $note, 'U_IP' => $u_ip, 'U_DELETE_NOTE' => $u_delete_note, )); } } // End Edit Notes MOD$template->pparse('body');include($phpbb_root_path . 'includes/page_tail.'.$phpEx);?>