root/phpBB2/posting.php

<?php
/***************************************************************************</span>
<span class="code-comment"> *                posting.php
 *                -------------------
 *   begin        : Saturday, Feb 13, 2001
 *   copyright        : (C) 2001 The phpBB Group
 *   email        : support@phpbb.com
 *
 *   $Id: posting.php,v 1.159.2.27 2005/10/30 15:17:13 acydburn Exp $
 *
 *
 ***************************************************************************/

/***************************************************************************
 *
 *   This program is free software; you can redistribute it and/or modify
 *   it under the terms of the GNU General Public License as published by
 *   the Free Software Foundation; either version 2 of the License, or
 *   (at your option) any later version.
 *
 ***************************************************************************/

if ( !defined('IN_PHPBB2_BRIDGE') ) {</span>
<span class="code-keyword">    trigger_error('Invalid access');
}

define('IN_PHPBB', true);
$root_path = './';</span>
<span class="code-lang">include($root_path . 'extension.inc');
include($root_path . 'phpBB2/includes/bbcode.'.$phpEx);
include($root_path . 'phpBB2/includes/functions_post.'.$phpEx);
include($root_path . 'include/bbcode/bbcode.lib.php');
include($root_path . 'include/functions_post.'.$phpEx);

//</span>
<span class="code-comment">// Check and set various parameters
//
$params = array('submit' => 'post', 'preview' => 'preview', 'delete' => 'delete', 'poll_delete' => 'poll_delete', 'poll_add' => 'add_poll_option', 'poll_edit' => 'edit_poll_option', 'mode' => 'mode');</span>
<span class="code-lang">
foreach ( $params AS $var => $param ) {
    $$var = request_var($param, '');
}

$confirm = isset($_POST['confirm']) ? true : false;
$sid = request_var('sid', '');

$params = array('forum_id' => POST_FORUM_URL, 'topic_id' => POST_TOPIC_URL, 'post_id' => POST_POST_URL);</span>
<span class="code-lang">
foreach ( $params AS $var => $param ) {
    $$var = request_var($param, 0);
}

$refresh = $preview || $poll_add || $poll_edit || $poll_delete;
$orig_word = $replacement_word = array();

//</span>
<span class="code-comment">// Set topic type
//
$topic_type = request_var('topictype', POST_NORMAL);
$topic_type = ( in_array($topic_type, array(POST_NORMAL, POST_STICKY, POST_ANNOUNCE)) ) ? $topic_type : POST_NORMAL;
$topic_first_post_sticky = request_var('topic_first_post_sticky', 0);

//</span>
<span class="code-comment">// If the mode is set to topic review then output
// that review ...
//
if ( $mode == 'topicreview' )</span>
<span class="code-keyword">{
    require($root_path . 'phpBB2/includes/topic_review.'.$phpEx);

    topic_review($topic_id, false);
    gc();
}

//</span>
<span class="code-comment">// Start session management
//
$userdata = session_pagestart($user_ip);
init_userprefs($userdata);
//</span>
<span class="code-comment">// End session management
//

//
check_ban(BAN_FORUM_POST);
//</span>
<span class="code-comment">
//
// Was cancel pressed? If so then redirect to the appropriate
// page, no point in continuing with any further checks
//

// FIXME: In Cancel delete post: redirect is unable to parle a full url !

if ( isset($_POST['cancel']) )</span>
<span class="code-keyword">{
    if ( $post_id )
    {
        //$redirect = "viewtopic.$phpEx?" . POST_POST_URL . "=$post_id";
        $redirect = $root_path . "phpbb2.php?page=viewtopic&" . POST_POST_URL . "=$post_id";
        $post_append = "#$post_id";
    }
    else if ( $topic_id )
    {
        //$redirect = "viewtopic.$phpEx?" . POST_TOPIC_URL . "=$topic_id";
        $redirect = $root_path . "phpbb2.php?page=viewtopic&" . POST_TOPIC_URL . "=$topic_id";
        $post_append = '';
    }
    else if ( $forum_id )
    {
        //$redirect = "viewforum.$phpEx?" . POST_FORUM_URL . "=$forum_id";
        $redirect = $root_path . "phpbb2.php?page=viewforum&" . POST_FORUM_URL . "=$forum_id";
        $post_append = '';
    }
    else
    {
        //$redirect = "index.$phpEx";
        $redirect = $root_path . "phpbb2.php?";
        $post_append = '';
    }

    redirect(append_sid($redirect) . $post_append);

}

//</span>
<span class="code-comment">// What auth type do we need to check?
//
$is_auth = array();</span>
<span class="code-lang">switch( $mode )
{
    case 'newtopic':
        if ( $topic_type == POST_ANNOUNCE )
        {
            $is_auth_type = 'auth_announce';
        }
        else if ( $topic_type == POST_STICKY )
        {
            $is_auth_type = 'auth_sticky';
        }
        else
        {
            $is_auth_type = 'auth_post';
        }
        break;
    case 'reply':
    case 'quote':
        $is_auth_type = 'auth_reply';
        break;
    case 'editpost':
        $is_auth_type = 'auth_edit';
        break;
    case 'delete':
    case 'poll_delete':
        $is_auth_type = 'auth_delete';
        break;
    case 'vote':
        $is_auth_type = 'auth_vote';
        break;
    case 'topicreview':
        $is_auth_type = 'auth_read';
        break;
    default:
        trigger_error($lang['no_post_mode']);
        return;
        break;
}

//</span>
<span class="code-comment">// Here we do various lookups to find topic_id, forum_id, post_id etc.
// Doing it here prevents spoofing (eg. faking forum_id, topic_id or post_id
//
$error_msg = '';
$post_data = array();</span>
<span class="code-lang">switch ( $mode )
{
    case 'newtopic':
        if ( empty($forum_id) )
        {
            trigger_error($lang['forum_not_exist']);
            return;
        }

        $sql = "SELECT *
            FROM " . FORUMS_TABLE . "
            WHERE forum_id = $forum_id";
        break;

    case 'reply':
    case 'vote':
        if ( empty( $topic_id) )
        {
            trigger_error($lang['no_topic_id']);
            return;
        }

        $sql = "SELECT f.*, t.topic_status, t.topic_title, t.topic_type, t.topic_id
            FROM " . FORUMS_TABLE . " f, " . TOPICS_TABLE . " t
            WHERE t.topic_id = $topic_id
                AND f.forum_id = t.forum_id";
        break;

    case 'quote':
    case 'editpost':
    case 'delete':
    case 'poll_delete':
        if ( empty($post_id) )
        {
            trigger_error($lang['no_post_id']);
            return;
        }

        //$select_sql = (!$submit) ? ', t.topic_title, p.enable_bbcode, p.enable_html, p.enable_smilies, p.enable_sig, p.post_username, pt.post_subject, pt.post_text, u.name AS username, u.uid, u.user_sig' : '';
        //$from_sql = ( !$submit ) ? ", " . POSTS_TEXT_TABLE . " pt, " . USERS_TABLE . " u" : '';
        //$where_sql = ( !$submit ) ? "AND pt.post_id = p.post_id AND u.uid = p.poster_id" : '';
        $select_sql = ', t.topic_title, p.enable_bbcode, p.enable_html, p.enable_smilies, p.enable_sig, p.post_username, p.post_time, pt.post_subject, pt.post_text, u.name AS username, u.uid, u.user_sig';
        $from_sql = ", " . POSTS_TEXT_TABLE . " pt, " . USERS_TABLE . " u";
        $where_sql = "AND pt.post_id = p.post_id AND u.uid = p.poster_id";

        $sql = "SELECT f.*, t.topic_id, t.topic_status, t.topic_type, t.topic_first_post_id, t.topic_last_post_id, t.topic_vote, t.topic_first_post_sticky, p.post_id, p.poster_id" . $select_sql . "
            FROM " . POSTS_TABLE . " p, " . TOPICS_TABLE . " t, " . FORUMS_TABLE . " f" . $from_sql . "
            WHERE p.post_id = $post_id
                AND t.topic_id = p.topic_id
                AND f.forum_id = p.forum_id
                $where_sql";
        break;

    default:
        trigger_error($lang['no_valid_mode']);
        return;
}
$result = $db->sql_query($sql);</span>
<span class="code-lang">
if ( $post_info = $db->sql_fetchrow($result) )
{
    $db->sql_freeresult($result);

    $forum_id = $post_info['forum_id'];
    $forum_name = $post_info['forum_name'];

    // www.phpBB-SEO.com SEO TOOLKIT BEGIN
    $seo->setForumUrl($forum_id, $forum_name);
    if ( $mode <> 'newtopic' ) {
        $seo->set_parent($post_info['topic_id'], $seo->seo_static['topic'], $forum_id, $seo->seo_static['forum']);
        $seo->set_url($post_info['topic_title'], $post_info['topic_id'], $seo->seo_static['topic']);
    }
    // www.phpBB-SEO.com SEO TOOLKIT END

    $is_auth = auth(AUTH_ALL, $forum_id, $userdata, $post_info);

    if ( $post_info['forum_status'] == FORUM_LOCKED && !$is_auth['auth_mod'])
    {
       trigger_error($lang['forum_locked']);
       return;
    }
    else if ( $mode != 'newtopic' && $post_info['topic_status'] == TOPIC_LOCKED && !$is_auth['auth_mod'])
    {
       trigger_error($lang['topic_locked']);
       return;
    }

    if ( $mode == 'editpost' || $mode == 'delete' || $mode == 'poll_delete' )
    {
        $topic_id = $post_info['topic_id'];

        $post_data['poster_post'] = ( $post_info['poster_id'] == $userdata['uid'] ) ? true : false;
        $post_data['first_post'] = ( $post_info['topic_first_post_id'] == $post_id ) ? true : false;
        $post_data['last_post'] = ( $post_info['topic_last_post_id'] == $post_id ) ? true : false;
        $post_data['last_topic'] = ( $post_info['forum_last_post_id'] == $post_id ) ? true : false;
        $post_data['has_poll'] = ( $post_info['topic_vote'] ) ? true : false;
        $post_data['topic_type'] = $post_info['topic_type'];
        $post_data['poster_id'] = $post_info['poster_id'];
        $post_data['topic_first_post_sticky'] = $post_info['topic_first_post_sticky'];

        if ( $post_data['first_post'] && $post_data['has_poll'] )
        {
            $sql = "SELECT *
                FROM " . VOTE_DESC_TABLE . " vd, " . VOTE_RESULTS_TABLE . " vr
                WHERE vd.topic_id = $topic_id
                    AND vr.vote_id = vd.vote_id
                ORDER BY vr.vote_option_id";
            $result = $db->sql_query($sql);
            $poll_options = array();
            $poll_results_sum = 0;
            if ( $row = $db->sql_fetchrow($result) )
            {
                $poll_title = $row['vote_text'];
                $poll_id = $row['vote_id'];
                $poll_length = $row['vote_length'] / 86400;

                do
                {
                    $poll_options[$row['vote_option_id']] = $row['vote_option_text'];
                    $poll_results_sum += $row['vote_result'];
                }
                while ( $row = $db->sql_fetchrow($result) );
            }
            $db->sql_freeresult($result);

            $post_data['edit_poll'] = ( ( !$poll_results_sum || $is_auth['auth_mod'] ) && $post_data['first_post'] ) ? true : 0;
        }
        else
        {
            $post_data['edit_poll'] = ($post_data['first_post'] && $is_auth['auth_pollcreate']) ? true : false;
        }

        //
        // Can this user edit/delete the post/poll?
        //
        if ( $post_info['poster_id'] != $userdata['uid'] && !$is_auth['auth_mod'] )
        {
            $message = ( $delete || $mode == 'delete' ) ? $lang['delete_own_posts'] : $lang['edit_own_posts'];
            //$message .= '<br /><br />' . sprintf($lang['click_return_topic'], '<a href="' . append_sid("viewtopic.$phpEx?" . POST_TOPIC_URL . "=$topic_id") . '">', '</a>');
            $message .= '<br /><br />' . sprintf($lang['click_return_topic'], '<a href="' . append_sid($root_path . "phpbb2.php?page=viewtopic&" . POST_TOPIC_URL . "=$topic_id") . '">', '</a>');

            trigger_error($message);
            return;
        }
        else if ( !$post_data['last_post'] && !$is_auth['auth_mod'] && ( $mode == 'delete' || $delete ) )
        {
            trigger_error($lang['cannot_delete_replied']);
            return;
        }
        else if ( !$post_data['edit_poll'] && !$is_auth['auth_mod'] && ( $mode == 'poll_delete' || $poll_delete ) )
        {
            trigger_error($lang['cannot_delete_poll']);
            return;
        }
        // BEGIN Moderator Tags
        // Ordinary users can't delete moderated posts
        else if ( check_mod_tags($is_auth['auth_mod'], $post_info['post_text']) && ( $mode == 'delete' || $delete ) )
        {
            trigger_error($lang['mod_no_delete'], $lang['mod_restrictions']);
            return;
        }
        // END Moderator Tags
    }
    else
    {
        if ( $mode == 'quote' )
        {
            $topic_id = $post_info['topic_id'];
        }
        if ( $mode == 'newtopic' )
        {
            $post_data['topic_type'] = POST_NORMAL;
        }

        $post_data['first_post'] = ( $mode == 'newtopic' ) ? true : 0;
        $post_data['last_post'] = false;
        $post_data['has_poll'] = false;
        $post_data['edit_poll'] = false;
    }
    if ( $mode == 'poll_delete' && !isset($poll_id) )
    {
        trigger_error($lang['no_such_post']);
        return;
    }
}
else
{
    trigger_error($lang['no_such_post']);
    return;
}

//</span>
<span class="code-comment">// The user is not authed, if they're not logged in then redirect
// them, else show them an error message
//
if ( !$is_auth[$is_auth_type] )</span>
<span class="code-keyword">{
    if ( $userdata['session_logged_in'] )
    {
        trigger_error(sprintf($lang['Sorry_' . $is_auth_type], $is_auth[$is_auth_type . "_type"]));
        return;
    }

    switch( $mode )
    {
        case 'newtopic':
            $redirect = "mode=newtopic&" . POST_FORUM_URL . "=" . $forum_id;
            break;
        case 'reply':
        case 'topicreview':
            $redirect = "mode=reply&" . POST_TOPIC_URL . "=" . $topic_id;
            break;
        case 'quote':
        case 'editpost':
            $redirect = "mode=quote&" . POST_POST_URL ."=" . $post_id;
            break;
    }

    loggedinorreturn();
    //redirect(append_sid($root_path . "login.php?returnto=" . rawurlencode("phpbb2.$phpEx?page=posting&" . $redirect)));
}

//</span>
<span class="code-comment">// Set toggles for various options
//
if ( !$config['allow_html'] )</span>
<span class="code-keyword">{
    $html_on = 0;
}
else
{
    $html_on = ( $submit || $refresh ) ? ( ( isset($_POST['disable_html']) ) ? 0 : true ) : false;
}

if ( !$config['allow_bbcode'] )
{
    $bbcode_on = 0;
}
else
{
    $bbcode_on = ( $submit || $refresh ) ? ( ( isset($_POST['disable_bbcode']) ) ? 0 : true ) : $config['allow_bbcode'];
}

if ( !$config['allow_smilies'] )
{
    $smilies_on = 0;
}
else
{
    $smilies_on = ( $submit || $refresh ) ? ( ( isset($_POST['disable_smilies']) ) ? 0 : true ) : $config['allow_smilies'];
}

if ( ($submit || $refresh) && $is_auth['auth_read'])
{
    $notify_user = ( isset($_POST['notify']) ) ? true : 0;
}
else
{
    if ( $mode != 'newtopic' && $userdata['session_logged_in'] && $is_auth['auth_read'] )
    {
        $sql = "SELECT checkcomm_for_id
            FROM " . COMMENTS_NOTIFY_TABLE . "
            WHERE checkcomm_for_id = $topic_id
            AND checkcomm_type = " . TYPE_FORUM_POST . "
                AND checkcomm_userid = " . $userdata['uid'];
        $result = $db->sql_query($sql);

        $notify_user = ( $db->sql_fetchrow($result) ) ? TRUE : $userdata['commentpm'];
        $db->sql_freeresult($result);
    }
    else
    {
        $notify_user = ( $userdata['session_logged_in'] && $is_auth['auth_read'] ) ? $userdata['commentpm'] : 0;
    }
}
$attach_sig = ( $submit || $refresh ) ? ( ( isset($_POST['attach_sig']) ) ? TRUE : 0 ) : ( ( $userdata['uid'] == ANONYMOUS ) ? 0 : ( $userdata['user_sig'] != '' ? TRUE : 0 ) );

$merge = false;



// --------------------</span>
<span class="code-comment">//  What shall we do?
//
if ( ( $delete || $poll_delete || $mode == 'delete' ) && !$confirm )</span>
<span class="code-keyword">{
    //
    // Confirm deletion
    //
    $s_hidden_fields = '<input type="hidden" name="' . POST_POST_URL . '" value="' . $post_id . '" />';
    $s_hidden_fields .= ( $delete || $mode == "delete" ) ? '<input type="hidden" name="mode" value="delete" />' : '<input type="hidden" name="mode" value="poll_delete" />';
    $s_hidden_fields .= '<input type="hidden" name="sid" value="' . $userdata['session_id'] . '" />';


    $l_confirm = ( $delete || $mode == 'delete' ) ? $lang['confirm_delete'] : $lang['confirm_delete_poll'];

    //
    // Output confirmation page
    //
    stdhead($lang['forums'] . ( isset($page_title) ? ' :: ' . $page_title : '' ), false);

    $template->assign_vars(array(
        'MESSAGE_TITLE' => $lang['information'],
        'MESSAGE_TEXT' => $l_confirm,

        //'S_CONFIRM_ACTION' => append_sid("posting.$phpEx"),
        'S_CONFIRM_ACTION' => append_sid($root_path . "phpbb2.php?page=posting"),
        'S_HIDDEN_FIELDS' => $s_hidden_fields)
    );

    $template->set_filenames(array(
        'body' => 'forum/confirm_body.tpl')
    );

    return;
}
else if ( $mode == 'vote' )
{
    //
    // Vote in a poll
    //
    if ( isset($_POST['vote_id']) )
    {
        $vote_option_id = intval($_POST['vote_id']);

        $sql = "SELECT vd.vote_id
            FROM " . VOTE_DESC_TABLE . " vd, " . VOTE_RESULTS_TABLE . " vr
            WHERE vd.topic_id = $topic_id
                AND vr.vote_id = vd.vote_id
                AND vr.vote_option_id = $vote_option_id
            GROUP BY vd.vote_id";
        $result = $db->sql_query($sql);

        if ( $vote_info = $db->sql_fetchrow($result) )
        {
            $vote_id = $vote_info['vote_id'];

            $sql = "SELECT *
                FROM " . VOTE_USERS_TABLE . "
                WHERE vote_id = $vote_id
                    AND vote_user_id = " . $userdata['uid'];
            $result2 = $db->sql_query($sql);

            if ( !($row = $db->sql_fetchrow($result2)) )
            {
                $sql = "UPDATE " . VOTE_RESULTS_TABLE . "
                    SET vote_result = vote_result + 1
                    WHERE vote_id = $vote_id
                        AND vote_option_id = $vote_option_id";
                $db->sql_query($sql);

                $sql = "INSERT INTO " . VOTE_USERS_TABLE . " (vote_id, vote_user_id, vote_user_ip, vote_cast)
                    VALUES ($vote_id, " . $userdata['uid'] . ", '$user_ip', $vote_option_id)";
                $db->sql_query($sql);

                $message = $lang['vote_cast'];
            }
            else
            {
                $message = $lang['already_voted'];
            }
            $db->sql_freeresult($result2);
        }
        else
        {
            $message = $lang['no_vote_option'];
        }
        $db->sql_freeresult($result);

        meta_refresh(3, append_sid($root_path . "phpbb2.php?page=viewtopic&" . POST_TOPIC_URL . "=$topic_id"));
        //$message .=  '<br /><br />' . sprintf($lang['click_view_message'], '<a href="' . append_sid("viewtopic.$phpEx?" . POST_TOPIC_URL . "=$topic_id") . '">', '</a>');
        $message .=  '<br /><br />' . sprintf($lang['click_view_message'], '<a href="' . append_sid($root_path . "phpbb2.php?page=viewtopic&" . POST_TOPIC_URL . "=$topic_id") . '">', '</a>');
        trigger_error($message);
        return;
    }
    else
    {
        //redirect(append_sid("viewtopic.$phpEx?" . POST_TOPIC_URL . "=$topic_id"));
        redirect(append_sid($root_path . "phpbb2.php?page=viewtopic&" . POST_TOPIC_URL . "=$topic_id"));
    }
}
else if ( $submit || $confirm )
{
    //
    // Submit post/vote (newtopic, edit, reply, etc.)
    //
    $return_message = '';
    $return_meta = '';
    // session id check
    if ($sid == '' || $sid != $userdata['session_id'])
    {
        $error_msg .= (!empty($error_msg)) ? '<br />' . $lang['session_invalid'] : $lang['session_invalid'];
    }

    switch ( $mode )
    {
        case 'editpost':
        case 'newtopic':
        case 'reply':
            $username = request_var('username', '');
            $subject = request_var('subject', '');
            $message = request_var('message', '');

            $poll_title = ( isset($_POST['poll_title']) && $is_auth['auth_pollcreate'] ) ? request_var('poll_title', '') : '';
            $poll_options = ( isset($_POST['poll_option_text']) && $is_auth['auth_pollcreate'] ) ? request_var('poll_option_text', array(0 => '') ) : '';
            $poll_length = ( isset($_POST['poll_length']) && $is_auth['auth_pollcreate'] ) ? request_var('poll_length', 0) : '';

            $time2merge = intval($config['time_to_merge']) * 3600;

            if ( ($mode == 'reply') && ($userdata['uid'] != ANONYMOUS) )
            {
                $sql = "SELECT p.post_id, p.poster_id, p.post_created, pt.post_text FROM " . POSTS_TABLE . " p, ". POSTS_TEXT_TABLE ." pt WHERE p.topic_id = $topic_id AND pt.post_id = p.post_id ORDER  BY post_time DESC LIMIT 1";
                $result = $db->sql_query($sql);

                $last_post_data = $db->sql_fetchrow($result);
                $last_post_id = $last_post_data['post_id'];
                $last_poster = $last_post_data['poster_id'];
                $last_post_created = $last_post_data['post_created'];
                $last_post_text = $last_post_data['post_text'];

                if ( ($last_poster == $userdata['uid']) && ((time() - $last_post_created) < $time2merge) && (!check_mod_tags($is_auth['auth_mod'], $last_post_text)) )
                {
                    $merge = true;
                }

                $db->sql_freeresult($result);
            }

            if ( !$merge )
            {

                prepare_post($mode, $post_data, $bbcode_on, $html_on, $smilies_on, $error_msg, $username, $subject, $message, $poll_title, $poll_options, $poll_length);

                if ( $error_msg == '' )
                {
                    $topic_type = ( $topic_type != $post_data['topic_type'] && !$is_auth['auth_sticky'] && !$is_auth['auth_announce'] ) ? $post_data['topic_type'] : $topic_type;

                    submit_post($mode, $post_data, $return_message, $return_meta, $forum_id, $topic_id, $post_id, $poll_id, $topic_type, $bbcode_on, $html_on, $smilies_on, $attach_sig, str_replace("\'", "''", $username), str_replace("\'", "''", $subject), str_replace("\'", "''", $message), str_replace("\'", "''", $poll_title), $poll_options, $poll_length, $topic_first_post_sticky);
                }
            }
            else
            {
                $error_msg = '';
                submit_merged_post($last_post_id, $forum_id, $subject, $message, $return_message, $return_meta);
            }
        break;

        case 'delete':
        case 'poll_delete':
            if ($error_msg != '')
            {
                trigger_error($error_msg);
            }
            delete_post($mode, $post_data, $return_message, $return_meta, $forum_id, $topic_id, $post_id, $poll_id);
        break;
    }

    if ( $error_msg == '' )
    {
        if ( $mode != 'editpost' && (!$merge))
        {
            $user_id = ( $mode == 'reply' || $mode == 'newtopic' ) ? $userdata['uid'] : $post_data['poster_id'];
            update_post_stats($mode, $post_data, $forum_id, $topic_id, $post_id, $user_id);
        }

        if ($error_msg == '' && $mode != 'poll_delete' && (!$merge))
        {
            user_notification($notify_user, TYPE_FORUM_POST, array('mode' => $mode, 'topic_title' => $post_info['topic_title'], 'topic_id' => $topic_id, 'post_id' => $post_id));
        }

        /*if ( $mode == 'newtopic' || $mode == 'reply' )
        {
            $tracking_topics = ( !empty($_COOKIE[$config['cookie_name'] . '_t']) ) ? unserialize($_COOKIE[$config['cookie_name'] . '_t']) : array();
            $tracking_forums = ( !empty($_COOKIE[$config['cookie_name'] . '_f']) ) ? unserialize($_COOKIE[$config['cookie_name'] . '_f']) : array();

            if ( count($tracking_topics) + count($tracking_forums) == 100 && empty($tracking_topics[$topic_id]) )
            {
                asort($tracking_topics);
                unset($tracking_topics[key($tracking_topics)]);
            }

            $tracking_topics[$topic_id] = time();

            set_cookie('t', serialize($tracking_topics));
        }*/

        $template->assign_vars(array(
            'META' => $return_meta
            ));
        trigger_error($return_message);
        return;
    }
}

if( $refresh || isset($_POST['del_poll_option']) || $error_msg != '' )
{
    $username = request_var('username', '');
    $subject = request_var('subject', '');
    $message = request_var('message', '');

    $poll_title = request_var('poll_title', '');
    $poll_length = request_var('poll_length', 0);
    $poll_option_text = request_var('poll_option_text', array( 0 => '' ) );
    $poll_options = array();

         foreach ( $poll_option_text AS $option_id => $option_text ) {
            if( isset($_POST['del_poll_option'][$option_id]) )
            {
                  unset($poll_option_text[$option_id]);
            }
            else if ( !empty($option_text) )
            {
                  $poll_options[$option_id] = $option_text;
            }
        }

    if ( isset($poll_add) && isset($_POST['add_poll_option_text']) && !empty($_POST['add_poll_option_text']) )
    {
        $poll_options[] = request_var('add_poll_option_text', '');
    }

    if ( $mode == 'newtopic' || $mode == 'reply')
    {
        $user_sig = ( $userdata['user_sig'] != '' && $config['allow_sig'] ) ? $userdata['user_sig'] : '';
    }
    else if ( $mode == 'editpost' )
    {
        $user_sig = ( $post_info['user_sig'] != '' && $config['allow_sig'] ) ? $post_info['user_sig'] : '';
    }

    if( $preview )
    {

        $bb_code = new bbcode;

        $preview_message = prepare_message(unprepare_message($message), $html_on, $bbcode_on, $smilies_on);
        $preview_subject = $subject;
        $preview_username = $username;
        // BEGIN Moderator Tags
        // Tags [mod] [/mod] are prohibited for everyone except moderators and administrators (preview)
        if ( check_mod_tags($is_auth['auth_mod'], $preview_message) )
        {
            trigger_error($lang['mod_reserved']);
            return;
        }
        // END Moderator Tags

        //
        // Finalise processing as per viewtopic
        //
        $user_sig = ( $config['allow_sig'] == 2 ) ? preg_replace ('#((\r)+?(\n)+?)*(\[url(.*)\])?\[img\](.+)\[/img\](\[/url\])?#i', '', $user_sig) : $user_sig ;
        if( !$html_on )
        {
            if( $user_sig != '' )
            {
                $user_sig = preg_replace('#(<)([\/]?.*?)(>)#is', '&lt;\2&gt;', $user_sig);
            }
        }

        if( $attach_sig && $user_sig != '' )
        {
                $bb_code->parse($user_sig);
                $user_sig = $bb_code->get_html();
        }

        if( $bbcode_on )
        {
                $bb_code->parse($preview_message);
                $preview_message = $bb_code->get_html();
        }



        $preview_username = censor_text($preview_username);
        $preview_subject = censor_text($preview_subject);
        $preview_message = censor_text($preview_message);

        if( $attach_sig && $user_sig != '' )
        {
            $preview_message = $preview_message . '<br /><br />_________________<br />' . $user_sig;
        }

        //$preview_message = str_replace("\n", '<br />', $preview_message);

        $template->set_filenames(array(
            'preview' => 'forum/posting_preview.tpl')
        );

        $template->assign_vars(array(
            'TOPIC_TITLE' => $preview_subject,
            'POST_SUBJECT' => $preview_subject,
            'POSTER_NAME' => $preview_username,
            'POST_DATE' => create_date(time()),
            'MESSAGE' => $preview_message )

        );
        $tpl = $template->assign_display('preview');
        $template->assign_vars(array(
            'POST_PREVIEW_BOX' => $tpl)
        );
    }
    else if( $error_msg != '' )
    {
        $template->set_filenames(array(
            'reg_header' => 'forum/error_body.tpl')
        );
        $template->assign_vars(array(
            'ERROR_MESSAGE' => $error_msg)
        );
        $tpl = $template->assign_display('reg_header');
        $template->assign_vars(array(
            'ERROR_BOX' => $tpl)
        );
    }
}
else
{
    //
    // User default entry point
    //
    if ( $mode == 'newtopic' )
    {
        $user_sig = ( $userdata['user_sig'] != '' ) ? $userdata['user_sig'] : '';

        $username = ($userdata['session_logged_in']) ? $userdata['name'] : '';
        $poll_title = '';
        $poll_length = '';
        $subject = '';
        $message = '';
    }
    else if ( $mode == 'reply' )
    {
        $user_sig = ( $userdata['user_sig'] != '' ) ? $userdata['user_sig'] : '';

        $username = ( $userdata['session_logged_in'] ) ? $userdata['name'] : '';
        $subject = '';
        $message = '';

    }
    else if ( $mode == 'quote' || $mode == 'editpost' )
    {
        $subject = ( $post_data['first_post'] ) ? $post_info['topic_title'] : $post_info['post_subject'];
        $message = $post_info['post_text'];
        $username = '';

        if ( $mode == 'editpost' )
        {
            $attach_sig = ( $post_info['enable_sig'] && $post_info['user_sig'] != '' ) ? TRUE : 0;
            $user_sig = $post_info['user_sig'];

            $html_on = ( $post_info['enable_html'] ) ? true : false;
            $bbcode_on = ( $post_info['enable_bbcode'] ) ? true : false;
            $smilies_on = ( $post_info['enable_smilies'] ) ? true : false;
            // BEGIN Moderator Tags
            // Ordinary users can't edit moderated posts
            if ( check_mod_tags($is_auth['auth_mod'], $message) )
            {
                trigger_error($lang['mod_no_edit']);
                return;
            }
            // END Moderator Tags
        }
        else
        {
            $attach_sig = ( $userdata['user_sig'] != '' ) ? TRUE : 0;
            $user_sig = $userdata['user_sig'];
        }

        $message = str_replace('<', '&lt;', $message);
        $message = str_replace('>', '&gt;', $message);
        $message = str_replace('<br />', "\n", $message);

        if ( $mode == 'quote' )
        {
            $msg_date =  create_date($post_info['post_time']);

            // Use trim to get rid of spaces placed there by MS-SQL 2000
            $quote_username = ( trim($post_info['post_username']) != '' ) ? $post_info['post_username'] : $post_info['username'];
            $message = '[quote="' . $quote_username . '"]' . $message . '[/quote]';

            // BEGIN Moderator Tags
            // Remove mod tags when quoting
            if ( !empty($message) )
            {
            $message = preg_replace("/\[mod.*?\].*?\[\/mod.*?\]/si", '', $message);
            }
            // END Moderator Tags

            if ( !preg_match('/^Re:/', $subject) && strlen($subject) > 0 )
            {
                $subject = 'Re: ' . $subject;
            }

            $mode = 'reply';
        }
        else
        {
            $username = ( $post_info['uid'] == ANONYMOUS && !empty($post_info['post_username']) ) ? $post_info['post_username'] : '';
        }
    }
}

//</span>
<span class="code-comment">// Signature toggle selection
//
if( $user_sig != '' )</span>
<span class="code-keyword">{
    $template->assign_block_vars('switch_signature_checkbox', array());
}

//</span>
<span class="code-comment">// HTML toggle selection
//
if ( $config['allow_html'] )</span>
<span class="code-keyword">{
    $html_status = $lang['html_is_on'];
    $template->assign_block_vars('switch_html_checkbox', array());
}
else
{
    $html_status = $lang['html_is_off'];
}

//</span>
<span class="code-comment">// BBCode toggle selection
//
if ( $config['allow_bbcode'] )</span>
<span class="code-keyword">{
    $bbcode_status = $lang['bbcode_is_on'];
    $template->assign_block_vars('switch_bbcode_checkbox', array());
}
else
{
    $bbcode_status = $lang['bbcode_is_off'];
}

//</span>
<span class="code-comment">// Smilies toggle selection
//
if ( $config['allow_smilies'] )</span>
<span class="code-keyword">{
    $smilies_status = $lang['smilies_are_on'];
    $template->assign_block_vars('switch_smilies_checkbox', array());
}
else
{
    $smilies_status = $lang['smilies_are_off'];
}

if( !$userdata['session_logged_in'] || ( $mode == 'editpost' && $post_info['poster_id'] == ANONYMOUS ) )
{
    $template->assign_block_vars('switch_username_select', array());
}

//</span>
<span class="code-comment">// Notify checkbox - only show if user is logged in
//
if ( $userdata['session_logged_in'] && $is_auth['auth_read'] )</span>
<span class="code-keyword">{
    if ( $mode != 'editpost' || ( $mode == 'editpost' && $post_info['poster_id'] != ANONYMOUS ) )
    {
        $template->assign_block_vars('switch_notify_checkbox', array());
    }
}

//</span>
<span class="code-comment">// Delete selection
//
if ( $mode == 'editpost' && ( ( $is_auth['auth_delete'] && $post_data['last_post'] && ( !$post_data['has_poll'] || $post_data['edit_poll'] ) ) || $is_auth['auth_mod'] ) )</span>
<span class="code-keyword">{
    $template->assign_block_vars('switch_delete_checkbox', array());
}

//</span>
<span class="code-comment">// Topic type selection
//
$topic_type_toggle = '';</span>
<span class="code-lang">if ( $mode == 'newtopic' || ( $mode == 'editpost' && $post_data['first_post'] ) )
{
    $template->assign_block_vars('switch_type_toggle', array());

    if( $is_auth['auth_sticky'] )
    {
        $topic_type_toggle .= '<input type="radio" name="topictype" value="' . POST_STICKY . '"';
        if ( $post_data['topic_type'] == POST_STICKY || $topic_type == POST_STICKY )
        {
            $topic_type_toggle .= ' checked="checked"';
        }
        $topic_type_toggle .= ' /> ' . $lang['post_sticky'] . '&nbsp;&nbsp;';

    }

    if( $is_auth['auth_announce'] )
    {
        $topic_type_toggle .= '<input type="radio" name="topictype" value="' . POST_ANNOUNCE . '"';
        if ( $post_data['topic_type'] == POST_ANNOUNCE || $topic_type == POST_ANNOUNCE )
        {
            $topic_type_toggle .= ' checked="checked"';
        }
        $topic_type_toggle .= ' /> ' . $lang['post_announcement'] . '&nbsp;&nbsp;';
    }

    if ( $topic_type_toggle != '' )
    {
        $topic_type_toggle = $lang['post_topic_as'] . ': <input type="radio" name="topictype" value="' . POST_NORMAL .'"' . ( ( $post_data['topic_type'] == POST_NORMAL || $topic_type == POST_NORMAL ) ? ' checked="checked"' : '' ) . ' /> ' . $lang['post_normal'] . '&nbsp;&nbsp;' . $topic_type_toggle;
    }

    if( $is_auth['auth_sticky'] ) {

        $topic_type_toggle .= '<br /><input type="checkbox" name="topic_first_post_sticky" value="1"' . ( $post_data['topic_first_post_sticky'] ? ' checked="checked"' : '' ) . ' /> ' . $lang['topic_first_post_sticky'];
    }
}

$hidden_form_fields = '<input type="hidden" name="mode" value="' . $mode . '" />';
$hidden_form_fields .= '<input type="hidden" name="sid" value="' . $userdata['session_id'] . '" />';</span>
<span class="code-lang">

switch( $mode )
{
    case 'newtopic':
        $page_title = $lang['post_a_new_topic'];
        $hidden_form_fields .= '<input type="hidden" name="' . POST_FORUM_URL . '" value="' . $forum_id . '" />';
        break;

    case 'reply':
        $page_title = $lang['post_a_reply'];
        $hidden_form_fields .= '<input type="hidden" name="' . POST_TOPIC_URL . '" value="' . $topic_id . '" />';
        break;

    case 'editpost':
        $page_title = $lang['edit_post'];
        $hidden_form_fields .= '<input type="hidden" name="' . POST_POST_URL . '" value="' . $post_id . '" />';
        break;
}

// Generate smilies listing for page output
generate_smilies('inline');

//</span>
<span class="code-comment">// Include page header
//
stdhead($lang['forums'] . ( isset($page_title) ? ' :: ' . $page_title : '' ), false);

$template->set_filenames(array(</span>
<span class="code-lang">    'pollbody' => 'forum/posting_poll_body.tpl',
    'reviewbody' => 'forum/posting_topic_review.tpl')
);
//make_jumpbox('viewforum.'.$phpEx);</span>
<span class="code-comment">// Begin Simple Subforums MOD
$all_forums = array();
make_jumpbox_ref('phpbb2.php?page=viewforum', $forum_id, $all_forums);

$parent_id = 0;</span>
<span class="code-lang">for( $i = 0; $i < count($all_forums); $i++ )
{
    if( $all_forums[$i]['forum_id'] == $forum_id )
    {
        $parent_id = $all_forums[$i]['forum_parent'];
    }
}

if( $parent_id )
{
    for( $i = 0; $i < count($all_forums); $i++)
    {
        if( $all_forums[$i]['forum_id'] == $parent_id )
        {
            $template->assign_vars(array(
                'PARENT_FORUM'            => 1,
                'U_VIEW_PARENT_FORUM'    => append_sid($root_path . "phpbb2.php?page=viewforum&amp;" . POST_FORUM_URL . "=" . $all_forums[$i]['forum_id']),
                'PARENT_FORUM_NAME'        => $all_forums[$i]['forum_name'],
                ));
        }
    }
}
// End Simple Subforums MOD
Multi_BBCode();

$template->assign_vars(array(</span>
<span class="code-lang">    'FORUM_NAME' => $forum_name,
    'L_POST_A' => $page_title,
    'U_VIEW_FORUM' => append_sid($root_path . "phpbb2.php?page=viewforum&amp;" . POST_FORUM_URL . "=$forum_id"))
);

//</span>
<span class="code-comment">// Output the data to the template
//
$template->assign_vars(array(</span>
<span class="code-lang">    // BEGIN Moderator Tags
    'EDITOR_NAME' => $userdata['name'],
    // END Moderator Tags
    'USERNAME' => $username,
    'SUBJECT' => $subject,
    'MESSAGE' => $message,
    'HTML_STATUS' => $html_status,
    'SMILIES_STATUS' => $smilies_status,
    'BBCODE_STATUS' => $bbcode_status,
    'L_DISABLE_HTML' => $lang['disable_html_post'],
    'L_DISABLE_BBCODE' => $lang['disable_bbcode_post'],
    'L_DISABLE_SMILIES' => $lang['disable_smilies_post'],
    'L_NOTIFY_ON_REPLY' => $lang['notify'],

    'L_BBCODE_CLOSE_TAGS' => $lang['close_tags'],

    //'U_VIEWTOPIC' => ( $mode == 'reply' ) ? append_sid("viewtopic.$phpEx?" . POST_TOPIC_URL . "=$topic_id&amp;postorder=desc") : '',
    'U_VIEWTOPIC' => ( $mode == 'reply' ) ? append_sid($root_path . "phpbb2.php?page=viewtopic&amp;" . POST_TOPIC_URL . "=$topic_id&amp;postorder=desc") : '',
    //'U_REVIEW_TOPIC' => ( $mode == 'reply' ) ? append_sid("posting.$phpEx?mode=topicreview&amp;" . POST_TOPIC_URL . "=$topic_id") : '',
    //FIXME:
    'U_REVIEW_TOPIC' => ( $mode == 'reply' ) ? append_sid($root_path . "phpbb2.php?page=posting&amp;mode=topicreview&amp;" . POST_TOPIC_URL . "=$topic_id") : '',
    'S_HTML_CHECKED' => ( !$html_on ) ? 'checked="checked"' : '',
    'S_BBCODE_CHECKED' => ( !$bbcode_on ) ? 'checked="checked"' : '',
    'S_SMILIES_CHECKED' => ( !$smilies_on ) ? 'checked="checked"' : '',
    'S_SIGNATURE_CHECKED' => ( $attach_sig ) ? 'checked="checked"' : '',
    'S_NOTIFY_CHECKED' => ( $notify_user ) ? 'checked="checked"' : '',
    'S_TYPE_TOGGLE' => $topic_type_toggle,
    'S_TOPIC_ID' => $topic_id,
    //'S_POST_ACTION' => append_sid("posting.$phpEx"),
    'S_POST_ACTION' => append_sid($root_path . "phpbb2.php?page=posting"),
    'S_HIDDEN_FORM_FIELDS' => $hidden_form_fields)
);

//</span>
<span class="code-comment">// Output the data to the template (for MAIL.RU Keyboard)
//
$template->assign_vars(array(</span>
<span class="code-lang">    'S_VISIBILITY_RULES' => 'position:absolute;visibility:hidden;',
    'S_VISIBILITY_KEYB' => 'position:absolute;visibility:hidden;',
    'S_VISIBILITY_OFF' => '')
);

//</span>
<span class="code-comment">// Poll entry switch/output
//
if( ( $mode == 'newtopic' || ( $mode == 'editpost' && $post_data['edit_poll']) ) && $is_auth['auth_pollcreate'] )</span>
<span class="code-keyword">{
    $template->assign_vars(array(
        'L_ADD_A_POLL' => $lang['add_poll'],
        'L_UPDATE_OPTION' => $lang['update'],
        'L_DELETE_OPTION' => $lang['delete'],
        'L_POLL_LENGTH' => $lang['poll_for'],
        'L_POLL_LENGTH_EXPLAIN' => $lang['poll_for_explain'],
        'L_POLL_DELETE' => $lang['delete_poll'],

        'POLL_TITLE' => $poll_title,
        'POLL_LENGTH' => $poll_length)
    );

    if( $mode == 'editpost' && $post_data['edit_poll'] && $post_data['has_poll'])
    {
        $template->assign_block_vars('switch_poll_delete_toggle', array());
    }

    if( !empty($poll_options) )
    {
        while( list($option_id, $option_text) = each($poll_options) )
        {
            $template->assign_block_vars('poll_option_rows', array(
                'POLL_OPTION' => str_replace('"', '&quot;', $option_text),

                'S_POLL_OPTION_NUM' => $option_id)
            );
        }
    }

    $tpl = $template->assign_display('pollbody');
        $template->assign_vars(array(
            'POLLBOX' => $tpl)
        );
}

//</span>
<span class="code-comment">// Topic review
//
if( $mode == 'reply' && $is_auth['auth_read'] )</span>
<span class="code-keyword">{
    require($root_path . 'phpBB2/includes/topic_review.'.$phpEx);
    topic_review($topic_id, true);

    $template->assign_block_vars('switch_inline_mode', array());
    $tpl = $template->assign_display('reviewbody');
    $template->assign_vars(array(
        'TOPIC_REVIEW_BOX' => $tpl)
    );
}

$template->set_filenames(array(</span>
<span class="code-lang">    'body' => 'forum/posting_body.tpl')
);

return;

?>