Subversion Repositories Applications.papyrus

<?php

////////////////////////////////////////////////////////////////////////////////
//                                                                            //
//   Copyright (C) 2006  Phorum Development Team                              //
//   http://www.phorum.org                                                    //
//                                                                            //
//   This program is free software. You can redistribute it and/or modify     //
//   it under the terms of either the current Phorum License (viewable at     //
//   phorum.org) or the Phorum License that was distributed with this file    //
//                                                                            //
//   This program is distributed in the hope that it will be useful,          //
//   but WITHOUT ANY WARRANTY, without even the implied warranty of           //
//   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.                     //
//                                                                            //
//   You should have received a copy of the Phorum License                    //
//   along with this program.                                                 //
////////////////////////////////////////////////////////////////////////////////

if(!defined("PHORUM")) return;

// Check if the user is allowed to post a new message or a reply.
if( ($mode == "post" && !phorum_user_access_allowed(PHORUM_USER_ALLOW_NEW_TOPIC)) ||
    ($mode == "reply" && !phorum_user_access_allowed(PHORUM_USER_ALLOW_REPLY)) ) { if ($PHORUM["DATA"]["LOGGEDIN"]) {
        // If users are logged in and can't post, they don't have rights to do so.
        $PHORUM["DATA"]["MESSAGE"] = $PHORUM["DATA"]["LANG"]["NoPost"];
    } else {
        // Check if they could post if logged in. If so, let them know to log in.
        if( ($mode == "reply" && $PHORUM["reg_perms"] & PHORUM_USER_ALLOW_REPLY) ||
            ($mode == "post" && $PHORUM["reg_perms"] & PHORUM_USER_ALLOW_NEW_TOPIC) ) {
            $PHORUM["DATA"]["MESSAGE"] = $PHORUM["DATA"]["LANG"]["PleaseLoginPost"];
        } else {
                $PHORUM["DATA"]["MESSAGE"] = $PHORUM["DATA"]["LANG"]["NoPost"];
        }
    }
    $error_flag = true;
    return;

// Check that they are logged in according to the security settings in
// the admin. If they aren't then either set a message with a login link
// (when running as include) or redirect to the login page.
} elseif($PHORUM["DATA"]["LOGGEDIN"] && !$PHORUM["DATA"]["FULLY_LOGGEDIN"]){

    if (isset($PHORUM["postingargs"]["as_include"])) {

        // Generate the URL to return to after logging in.
        $args = array(PHORUM_REPLY_URL, $PHORUM["args"][1]);
        if (isset($PHORUM["args"][2])) $args[] = $PHORUM["args"][2];
        if (isset($PHORUM["args"]["quote"])) $args[] = "quote=1";
        $redir = urlencode(call_user_func_array('phorum_get_url', $args));
        $url = phorum_get_url(PHORUM_LOGIN_URL, "redir=$redir");
        
        $PHORUM["DATA"]["URL"]["REDIRECT"] = $url;
        $PHORUM["DATA"]["BACKMSG"] = $PHORUM["DATA"]["LANG"]["LogIn"];
        $PHORUM["DATA"]["MESSAGE"] = $PHORUM["DATA"]["LANG"]["PeriodicLogin"];
        $error_flag = true;
        return;

    } else {

        // Generate the URL to return to after logging in.
        $args = array(PHORUM_POSTING_URL);
        if (isset($PHORUM["args"][1])) $args[] = $PHORUM["args"][1];
        if (isset($PHORUM["args"][2])) $args[] = $PHORUM["args"][2];
        if (isset($PHORUM["args"]["quote"])) $args[] = "quote=1";
        $redir = urlencode(call_user_func_array('phorum_get_url', $args));

        phorum_redirect_by_url(phorum_get_url(PHORUM_LOGIN_URL,"redir=$redir"));
        exit();

    } 
}

// Put read-only user info in the message.
if ($mode == "post" || $mode == "reply")
{
    if ($PHORUM["DATA"]["LOGGEDIN"]){
        $message["user_id"] = $PHORUM["user"]["user_id"];
        $message["author"]  = $PHORUM["user"]["username"];
    } else {
        $message["user_id"] = 0;
    }
}

// On finishing up, find the original message data in case we're
// editing or replying. Put read-only data in the message to prevent
// data tampering.
if ($finish && ($mode == 'edit' || $mode == 'reply'))
{
    $id = $mode == "edit" ? "message_id" : "parent_id";
    $origmessage = phorum_db_get_message($message[$id]);
    if (! $origmessage) {
        phorum_redirect_by_url(phorum_get_url(PHORUM_INDEX_URL));
        exit();
    }

    // Copy read-only information for editing messages.
    if ($mode == "edit") {
        $message = phorum_posting_merge_db2form($message, $origmessage, READONLYFIELDS);
    // Copy read-only information for replying to messages.
    } else {
        $message["parent_id"] = $origmessage["message_id"];
        $message["thread"] = $origmessage["thread"];
    }
}

// We never store the email address in the message in case it
// was posted by a registered user.
if ($message["user_id"]) {
    $message["email"] = "";
}

// Find the startmessage for the thread.
if ($mode == "reply" || $mode == "edit") {
    $top_parent = phorum_db_get_message($message["thread"]);
}

// Do permission checks for replying to messages.
if ($mode == "reply")
{
    // Find the direct parent for this message.
    if ($message["thread"] != $message["parent_id"]) {
        $parent = phorum_db_get_message($message["parent_id"]);
    } else {
        $parent = $top_parent;
    }

    // If this thread is unapproved, then get out.
    $unapproved =
        empty($top_parent) ||
        empty($parent) ||
        $top_parent["closed"] ||
        $top_parent["status"] != PHORUM_STATUS_APPROVED ||
        $parent["status"] != PHORUM_STATUS_APPROVED;

    if ($unapproved) 
    {
        // In case we run the editor included in the read page,
        // we should not redirect to the listpage for moderators.
        // Else a moderator can never read an unapproved message.
        if (isset($PHORUM["postingargs"]["as_include"])) {
            if ($PHORUM["DATA"]["MODERATOR"]) {
                $PHORUM["DATA"]["MESSAGE"] = $PHORUM["DATA"]["LANG"]["UnapprovedMessage"];
                $error_flag = true;
                return;
            }
        }

        // In other cases, redirect users that are replying to
        // unapproved messages to the message list.
        phorum_redirect_by_url(phorum_get_url(PHORUM_LIST_URL));
        exit;
    }

}

// Do permission checks for editing messages.
if ($mode == "edit")
{
    // Check if the user is allowed to edit this post.
    $timelim = $PHORUM["user_edit_timelimit"];
    $useredit =
        $message["user_id"] == $PHORUM["user"]["user_id"] &&
        phorum_user_access_allowed(PHORUM_USER_ALLOW_EDIT) &&
        ! empty($top_parent) &&
        ! $top_parent["closed"] &&
        (! $timelim || $message["datestamp"] + ($timelim * 60) >= time());

    // Moderators are allowed to edit message, but not messages from
    // announcement threads. Announcements may only be edited by users
    // for which the option "announcement" is set as allowed.
    $moderatoredit =
        $PHORUM["DATA"]["MODERATOR"] &&
        $message["forum_id"] == $PHORUM["forum_id"] &&
        ($message["special"] != "announcement" || 
         $PHORUM["DATA"]["OPTION_ALLOWED"]["announcement"]);

    if (!$useredit && !$moderatoredit) {
        $PHORUM["DATA"]["MESSAGE"] =
            $PHORUM["DATA"]["LANG"]["EditPostForbidden"];
        $error_flag = true;
        return;
    }
}


?>