skylight Made in France. | mange toi le truc bien crade pour poster un msg 
Code :
- $threadid=verifyid("thread",$threadid);
- $threadinfo=getthreadinfo($threadid);
- if (!$threadinfo[visible]) {
- $idname="thread";
- eval("standarderror(\"".gettemplate("error_invalidid" )."\" );" );
- }
- if (!$threadinfo[open]) {
- if (!ismoderator($threadinfo[forumid],"canopenclose" )) {
- eval("standardredirect(\"".gettemplate("redir
- ect_threadclosed" )."\",\"showthread.php?s=$s
- ession[sessionhash]&threadid=$threadid\" );" );
- exit;
- }
- }
- $permissions=getpermissions($threadinfo[forumid]);
- if (($bbuserinfo['userid']!=$threadinfo['postuserid'] or $bbuserinfo['userid']==0) and (!$permissions['canviewothers'] or !$permissions['canreplyothers'])) {
- show_nopermission();
- }
- if (!$permissions['canview'] or (!$permissions['canreplyown'] and $bbuserinfo['userid']==$threadinfo['postuserid'])) {
- show_nopermission();
- }
- updateuserforum($threadinfo['forumid']);
- // ############################### start post reply ###############################
- if ($HTTP_POST_VARS['action']=="postreply" ) {
- // check for subject and message
- $message=trim($message);
- if ($message=="" ) {
- eval("standarderror(\"".gettemplate("error_nosubject" )."\" );" );
- exit;
- }
- // decode check boxes
- $parseurl=iif(trim($parseurl)=="yes",1,0);
- $email=iif(trim($email)=="yes",1,0);
- $allowsmilie=iif(trim($disablesmilies)=="yes",0,1);
- $signature=iif(trim($signature)=="yes",1,0);
- $preview=iif(trim($preview)!="",1,0);
- if ($wordwrap!=0) {
- $threadinfo[title]=dowordwrap($threadinfo[title]);
- }
- $foruminfo=getforuminfo($threadinfo[forumid]);
- $forumid=$foruminfo['forumid'];
- if ($foruminfo['allowposting']==0) {
- eval("standarderror(\"".gettemplate("error_forumclosed" )."\" );" );
- }
- $visible=!$foruminfo[moderatenew];
- // auto bypass queueing for admins/mods
- if (ismoderator($foruminfo[forumid])) {
- $visible=1;
- }
- if ($parseurl) {
- $message=parseurl($message);
- }
- // remove sessionhash from urls:
- $message=ereg_replace("&sessionhash=[a-z0-9]{32}","",$message);
- $message=ereg_replace("\\?sessionhash=[a-z0-9]{32}","",$message);
- $message=ereg_replace("&s=[a-z0-9]{32}","",$message);
- $message=ereg_replace("\\?s=[a-z0-9]{32}(&)?","?",$message);
- if (strlen($message)>$postmaxchars and $postmaxchars!=0) {
- eval("standarderror(\"".gettemplate("error_toolong" )."\" );" );
- }
- if ($preview) {
- $previewpost=1;
- $previewmessage=bbcodeparse($message,$threadinfo[forumid],$allowsmilie);
- if ($signature) {
- $post['signature'] = bbcodeparse($bbuserinfo['signature'],0,$allowsmilie);
- eval("\$post[signature] = \"".gettemplate("postbit_signature" )."\";" );
- $previewmessage.=$post['signature'];
- }
- eval("\$postpreview=\"".gettemplate("newpost_postpreview" )."\";" );
- $parseurlchecked=iif($parseurl,"checked","" );
- $emailchecked=iif($email,"checked","" );
- $disablesmilieschecked=iif(!$allowsmilie,"checked","" );
- $signaturechecked=iif($signature,"checked","" );
- $previewchecked=0;
- if ($rating) {
- $rate["$rating"] = " selected";
- }
- $action="newreply";
- } else {
- $username = $HTTP_POST_VARS['username'];
- $password = $HTTP_POST_VARS['password'];
- if (isset($username)) {
- $username = trim($username);
- $username = eregi_replace("( ){2,}", " ", $username);
- if (!$username) {
- eval("standarderror(\"".gettemplate("error_nousername" )."\" );" );
- }
- if ($userinfo=$DB_site->query_first("
- SELECT user.*,userfield.*
- FROM user,userfield
- WHERE (username='".addslashes(htmlspecialchars($username))."' OR
- username='".addslashes(eregi_replace("[^A-Za-z0-9]","",$username))."') AND
- user.userid=userfield.userid" )) {
- if (!$password) {
- eval("standarderror(\"".gettemplate("error_usernametaken" )."\" );" );
- } elseif (md5($password)!=$userinfo['password']) {
- eval("standarderror(\"".gettemplate("error_wrongpassword" )."\" );" );
- } else {
- $bbuserinfo = $userinfo;
- $postusername = $bbuserinfo['username'];
- if ($user['cookieuser']==1) {
- vbsetcookie("bbuserid",$user['userid']);
- vbsetcookie("bbpassword",$user['password']);
- }
- $DB_site->query("UPDATE session SET userid='$bbuserinfo[userid]' WHERE sessionhash='".addslashes($session['dbsessionhash'])."'" );
- }
- } else {
- $postusername = htmlspecialchars($username);
- }
- } else {
- $postusername = $bbuserinfo['username'];
- }
- if ($enablefloodcheck) {
- if ($bbuserinfo[userid]!=0 and time()-$bbuserinfo[lastpost]<=$floodchecktime and !ismoderator($foruminfo[forumid])) {
- eval("standarderror(\"".gettemplate("error_floodcheck" )."\" );" );
- exit;
- }
- }
- // check max images
- if ($maximages!=0) {
- $parsedmessage=bbcodeparse($message,$forumid,$allowsmilie);
- if (countchar($parsedmessage,"<img" )>$maximages) {
- eval("standarderror(\"".gettemplate("error_toomanyimages" )."\" );" );
- exit;
- }
- }
- if ($visible) {
- sendnotification ($threadinfo['threadid'], $bbuserinfo['userid'], 0);
- }
- if ($logip==1 or $logip==2) {
- $ipaddress=iif(getenv("REMOTE_ADDR" )!="",getenv("REMOTE_ADDR" ),$HTTP_HOST);
- } else {
- $ipaddress="";
- }
- if (!isset($iconid) or $iconid=="" ) {
- $iconid=0;
- }
- $iconid = intval($iconid);
- /*if ($bbuserinfo[userid]==0) {
- $postusername=$bbuserinfo[username];
- } else {
- $postusername="";
- }*/
- $title=censortext($title);
- $message=censortext($message);
- // sort attachement
- if ($permissions[canpostattachment] and trim($attachment)!="none" and trim($attachment)!="" and trim($attachment_name)!="" ) {
- $attachmentid=acceptupload($foruminfo[moderateattach]);
- } else {
- $attachmentid=0;
- }
- if ($email&&$bbuserinfo[userid]!=0) {
- if (!$checkid=$DB_site->query_first("SELECT subscribethreadid FROM subscribethread WHERE userid=$bbuserinfo[userid] AND threadid=$threadid" )) {
- $DB_site->query("INSERT INTO subscribethread (subscribethreadid,userid,threadid) VALUES (NULL,$bbuserinfo[userid],$threadid)" );
- }
- }
- // see if there has been a post identical to this in the last 5 mins. If so, update that one, as user has probably done a double post
- $datecut=time()-300;
- if ($prevpost=$DB_site->query_first("SELECT attachmentid,postid,visible FROM post WHERE threadid='$threadid' AND username='".addslashes($postusername)."' AND userid='$bbuserinfo[userid]' AND title='".addslashes(htmlspecialchars($title))."' AND dateline>$datecut AND pagetext='".addslashes($message)."'" )) {
- $postid=$prevpost[postid];
- if ($prevpost[attachmentid]!=0) {
- $DB_site->query("DELETE FROM attachment WHERE attachmentid = '$prevpost[attachmentid]'" );
- if ($attachmentid==0) {
- $DB_site->query("UPDATE thread SET attach = attach - 1 WHERE threadid = '$threadid'" );
- }
- }
- $DB_site->query("UPDATE post SET title='".addslashes(htmlspecialchars($title
- ))."',pagetext='".addslashes($messag
- e)."',allowsmilie='$allowsmilie'
- ;,showsignature='$signature',iconid=&
- #039;$iconid',attachmentid='$attachmen
- tid' WHERE postid='$postid'" );
- // redirect
- if ($prevpost[visible]) {
- $goto="showthread.php?s=$session[sessionhash]&postid=$postid#post$postid";
- } else {
- $goto="forumdisplay.php?s=$session[sessionhash]&forumid=$forumid";
- }
- eval("standardredirect(\"".gettemplate("redirect_postthanks" )."\",\"$goto\" );" );
- } else {
- if ($attachmentid and !$foruminfo[moderateattach]) {
- $DB_site->query("UPDATE thread SET attach = attach + 1 WHERE threadid = '$threadid'" );
- }
- $DB_site->query("INSERT INTO post (postid,threadid,title,username,userid,dateline,at
- tachmentid,pagetext,allowsmilie,showsignature,ipad
- dress,iconid,visible) VALUES (NULL,'$threadid','".addslashes
- (htmlspecialchars($title))."','".add
- slashes($postusername)."','$bbuserinf
- o[userid]','".time()."','
- ;$attachmentid','".addslashes($messag
- e)."','$allowsmilie','$si
- gnature','$ipaddress','$ic
- onid','$visible')" );
- $postid=$DB_site->insert_id();
- indexpost($postid,0);
- if ($visible) {
- if ($threadinfo[replycount]%10==0) {
- $replies=$DB_site->query_first("SELECT COUNT(*)-1 AS replies FROM post WHERE threadid='$threadid'" );
- $DB_site->query("UPDATE thread SET lastpost='".time()."',replycount=&#
- 039;$replies[replies]',lastposter='".
- addslashes($postusername)."' WHERE threadid='$threadid'" );
- } else {
- $DB_site->query("UPDATE thread SET lastpost='".time()."',replycount=rep
- lycount+1,lastposter='".addslashes($postuse
- rname)."' WHERE threadid='$threadid'" );
- }
- }
- if ($rating > 0 and $rating < 6 and $foruminfo['allowratings'] == 1) {
- if ($permissions['canthreadrate']) {
- $vote = intval($rating);
- if ($ratingsel = $DB_site->query_first("SELECT vote, threadrateid
- FROM threadrate
- WHERE userid='$bbuserinfo[userid]'
- AND threadid = '$threadid'" )) {
- if ($votechange) {
- if ($vote != $ratingsel['vote']) {
- $voteupdate = $vote - $ratingsel['vote'];
- $DB_site->query("UPDATE threadrate SET vote='$vote'
- WHERE threadrateid=$ratingsel[threadrateid]" );
- $DB_site->query("UPDATE thread SET votetotal=votetotal+$voteupdate
- WHERE threadid='$threadid'" );
- }
- }
- } else {
- $DB_site->query("INSERT INTO threadrate (threadid,userid,vote)
- VALUES ('$threadid','$bbuserinfo[userid
- ]','$vote')" );
- $DB_site->query("UPDATE thread SET votetotal=votetotal+$vote,votenum=votenum+1
- WHERE threadid='$threadid'" );
- }
- }
- }
- // update forum stuff
- if ($visible==1) {
- $DB_site->query("UPDATE forum SET replycount=replycount+1,lastpost='".time().
- "',lastposter='".addslashes($postuse
- rname)."' WHERE forumid IN ($foruminfo[parentlist])" );
- }
- // update user stuff
- $dotitle="";
- if ($bbuserinfo[userid]!=0)
- {
- if ($bbuserinfo[customtitle]==0 && $foruminfo[countposts])
- {
- $usergroup=$DB_site->query_first("SELECT usertitle FROM usergroup WHERE usergroupid='$bbuserinfo[usergroupid]'" );
- if ($usergroup[usertitle]=="" ) {
- $gettitle=$DB_site->query_first("SELECT title FROM usertitle WHERE minposts<=$bbuserinfo[posts]".iif ($foruminfo['countposts'],"+1","" )." ORDER BY minposts DESC LIMIT 1" );
- $usertitle=$gettitle[title];
- } else {
- $usertitle=$usergroup[usertitle];
- }
- $dotitle="usertitle='".addslashes($usertitle)."',";
- }
- $DB_site->query("UPDATE user SET
- ".iif ($foruminfo[countposts],"posts=posts+1,","" )."
- $dotitle"."lastpost='".time()."' WHERE userid='$bbuserinfo[userid]'" );
- }
- // send email to moderators
- if ($enableemail) {
- $moderators=$DB_site->query_first("SELECT newpostemail FROM forum WHERE forumid='$threadinfo[forumid]'" );
- $mods=$DB_site->query("SELECT DISTINCT user.email FROM moderator LEFT JOIN user USING (userid) WHERE moderator.forumid IN ($foruminfo[parentlist]) AND moderator.newpostemail=1" );
- while ($mod=$DB_site->fetch_array($mods)) {
- $moderators[newpostemail].=' '.$mod[email];
- }
- $moderators[newpostemail]=trim($moderators[newpostemail]);
- if ($moderators[newpostemail]!="" ) {
- $bbuserinfo['username']=unhtmlspecialchars($bbuserinfo['username']); //for emails
- $mods=explode(" ",$moderators[newpostemail]);
- while (list($key,$val)=each($mods)) {
- if (trim($val)!="" ) {
- $subject=$threadtitle;
- $toemail=$val;
- eval("\$emailmsg = \"".gettemplate("email_moderator",1,0)."\";" );
- eval("\$emailsubject = \"".gettemplate("emailsubject_moderator",1,0)."\";" );
- mail($toemail,$emailsubject,$emailmsg,"From: \"$bbtitle Mailer\" <$webmasteremail>" );
- }
- }
- $bbuserinfo['username']=htmlspecialchars($bbuserinfo['username']); //back to norm
- }
- }
- // redirect
- if ($visible) {
- $goto="showthread.php?s=$session[sessionhash]&postid=$postid#post$postid";
- } else {
- $goto="forumdisplay.php?s=$session[sessionhash]&forumid=$threadinfo[forumid]";
- }
- eval("standardredirect(\"".gettemplate("redirect_postthanks" )."\",\"$goto\" );" );
- }
- }
- }
- // ############################### start new reply ###############################
- if ($action=="newreply" ) {
- if ($wordwrap!=0) {
- $threadinfo[title]=dowordwrap($threadinfo[title]);
- }
-
- $message = htmlspecialchars($message); // Without this, a </textarea> in the message breaks the form on preview
- $title = htmlspecialchars($title);
- $foruminfo=getforuminfo($threadinfo[forumid]);
- $threadratingoption = '';
- if ($foruminfo['allowratings']==1 and $permissions['canthreadrate']==1) {
- if ($rating=$DB_site->query_first("SELECT vote, threadrateid FROM threadrate
- WHERE userid = $bbuserinfo[userid] AND threadid = '$threadid'" )) {
- if ($votechange) {
- $rate[$rating[vote]] = " selected";
- eval("\$threadratingoption = \"".gettemplate("newreply_ratethread" )."\";" );
- } else {
- $threadratingoption = "";
- }
- } else {
- eval("\$threadratingoption = \"".gettemplate("newreply_ratethread" )."\";" );
- }
- }
- if ($foruminfo['allowposting']==0) {
- eval("standarderror(\"".gettemplate("error_forumclosed" )."\" );" );
- }
- $bbcodeon=iif($foruminfo[allowbbcode],$ontext,$offtext);
- $imgcodeon=iif($foruminfo[allowimages],$ontext,$offtext);
- $htmlcodeon=iif($foruminfo[allowhtml],$ontext,$offtext);
- $smilieson=iif($foruminfo[allowsmilies],$ontext,$offtext);
- // draw nav bar
- $navbar=makenavbar($threadid,"thread",1);
- unset($ignore);
- $ignorelist = explode(' ', $bbuserinfo['ignorelist']);
- while ( list($key, $val)=each($ignorelist) ) {
- $ignore[$val] = 1;
- }
- if ($ignore) {
- eval("\$ignoreduser = \"".gettemplate("threadreviewbit_ignore" )."\";" );
- } else {
- $ignoreduser = '';
- }
- $posts=$DB_site->query("
- SELECT IF(post.userid=0,post.username,user.username) AS username,
- post.pagetext,post.allowsmilie,post.userid FROM post
- LEFT JOIN user ON user.userid=post.userid
- WHERE post.visible=1 AND post.threadid='$threadid'
- ORDER BY dateline DESC" );
- if (($bbuserinfo[maxposts] != -1) and ($bbuserinfo[maxposts] != 0)) {
- $maxposts = $bbuserinfo[maxposts];
- }
|
|
FORUM HardWare.fr
![[:wam]](https://forum-images.hardware.fr/images/perso/wam.gif "[:wam]")
![[:totozz]](https://forum-images.hardware.fr/images/perso/totozz.gif "[:totozz]")
![[:audi]](https://forum-images.hardware.fr/images/perso/audi.gif "[:audi]")