-
Notifications
You must be signed in to change notification settings - Fork 23
/
comment.php
550 lines (425 loc) · 28.7 KB
/
comment.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
<?php
/*
* Copyright (C) 2013-2020 Luna
* Based on code by FluxBB copyright (C) 2008-2012 FluxBB
* Based on code by Rickard Andersson copyright (C) 2002-2008 PunBB
* Licensed under GPLv2 (http://getluna.org/license.php)
*/
define('LUNA_ROOT', dirname(__FILE__).'/');
require LUNA_ROOT.'include/common.php';
if ($luna_user['g_read_board'] == '0')
message(__('You do not have permission to view this page.', 'luna'), false, '403 Forbidden');
$tid = isset($_GET['tid']) ? intval($_GET['tid']) : 0;
$fid = isset($_GET['fid']) ? intval($_GET['fid']) : 0;
if ($tid < 1 && $fid < 1 || $tid > 0 && $fid > 0)
message(__('Bad request. The link you followed is incorrect, outdated or you are simply not allowed to hang around here.', 'luna'), false, '404 Not Found');
// Fetch some info about the thread and/or the forum
if ($tid)
$result = $db->query('SELECT f.id AS fid, f.forum_name, f.moderators, f.color, fp.comment, fp.create_threads, t.subject, t.closed, t.soft AS soft, s.user_id AS is_subscribed, t.id AS tid FROM '.$db->prefix.'threads AS t INNER JOIN '.$db->prefix.'forums AS f ON f.id=t.forum_id LEFT JOIN '.$db->prefix.'forum_perms AS fp ON (fp.forum_id=f.id AND fp.group_id='.$luna_user['g_id'].') LEFT JOIN '.$db->prefix.'thread_subscriptions AS s ON (t.id=s.thread_id AND s.user_id='.$luna_user['id'].') WHERE (fp.read_forum IS NULL OR fp.read_forum=1) AND t.id='.$tid) or error('Unable to fetch forum info', __FILE__, __LINE__, $db->error());
else
$result = $db->query('SELECT f.id AS fid, f.forum_name, f.moderators, f.color, fp.comment, fp.create_threads FROM '.$db->prefix.'forums AS f LEFT JOIN '.$db->prefix.'forum_perms AS fp ON (fp.forum_id=f.id AND fp.group_id='.$luna_user['g_id'].') WHERE (fp.read_forum IS NULL OR fp.read_forum=1) AND f.id='.$fid) or error('Unable to fetch forum info', __FILE__, __LINE__, $db->error());
if (!$db->num_rows($result))
message(__('Bad request. The link you followed is incorrect, outdated or you are simply not allowed to hang around here.', 'luna'), false, '404 Not Found');
$cur_commenting = $db->fetch_assoc($result);
$is_soft = $cur_commenting['soft'];
$is_subscribed = $tid && $cur_commenting['is_subscribed'];
// Sort out who the moderators are and if we are currently a moderator (or an admin)
$mods_array = ($cur_commenting['moderators'] != '') ? unserialize($cur_commenting['moderators']) : array();
$is_admmod = ($luna_user['g_id'] == LUNA_ADMIN || ($luna_user['g_moderator'] == '1' && array_key_exists($luna_user['username'], $mods_array))) ? true : false;
if ($tid && $luna_config['o_censoring'] == '1')
$cur_commenting['subject'] = censor_words($cur_commenting['subject']);
// Do we have permission to comment?
if ((($tid && (($cur_commenting['comment'] == '' && $luna_user['g_comment'] == '0') || $cur_commenting['comment'] == '0')) ||
($fid && (($cur_commenting['create_threads'] == '' && $luna_user['g_create_threads'] == '0') || $cur_commenting['create_threads'] == '0')) ||
(isset($cur_commenting['closed']) && $cur_commenting['closed'] == '1')) &&
!$is_admmod)
message(__('You do not have permission to access this page.', 'luna'), false, '403 Forbidden');
// Start with a clean slate
$errors = array();
// Did someone just hit "Submit" or "Preview"?
if (isset($_POST['form_sent'])) {
// Flood protection
if (!isset($_POST['preview']) && $luna_user['last_comment'] != '' && (time() - $luna_user['last_comment']) < $luna_user['g_comment_flood'])
$errors[] = sprintf(__('At least %s seconds have to pass between comments. Please wait %s seconds and try commenting again.', 'luna'), $luna_user['g_comment_flood'], $luna_user['g_comment_flood'] - (time() - $luna_user['last_comment']));
// If it's a new thread
if ($fid) {
$subject = luna_trim($_POST['req_subject']);
if ($luna_config['o_censoring'] == '1')
$censored_subject = luna_trim(censor_words($subject));
if ($subject == '')
$errors[] = __('Threads must contain a subject.', 'luna');
elseif ($luna_config['o_censoring'] == '1' && $censored_subject == '')
$errors[] = __('Threads must contain a subject. After applying censoring filters, your subject was empty.', 'luna');
elseif (luna_strlen($subject) > 70)
$errors[] = __('Subjects cannot be longer than 70 characters.', 'luna');
elseif ($luna_config['o_subject_all_caps'] == '0' && is_all_uppercase($subject) && !$luna_user['is_admmod'])
$errors[] = __('Subjects cannot contain only capital letters.', 'luna');
}
// If the user is logged in we get the username and email from $luna_user
if (!$luna_user['is_guest']) {
$username = $luna_user['username'];
$email = $luna_user['email'];
$id = $luna_user['id'];
}
// Otherwise it should be in $_POST
else {
$username = luna_trim($_POST['req_username']);
$email = strtolower(luna_trim(($luna_config['o_force_guest_email'] == '1') ? $_POST['req_email'] : $_POST['email']));
$banned_email = false;
// It's a guest, so we have to validate the username
check_username($username);
if ($luna_config['o_force_guest_email'] == '1' || $email != '') {
require LUNA_ROOT.'include/email.php';
if (!is_valid_email($email))
$errors[] = __('The email address you entered is invalid.', 'luna');
// Check if it's a banned email address
// we should only check guests because members' addresses are already verified
if ($luna_user['is_guest'] && is_banned_email($email)) {
if ($luna_config['o_allow_banned_email'] == '0')
$errors[] = __('The email address you entered is banned in this forum. Please choose another email address.', 'luna');
$banned_email = true; // Used later when we send an alert email
}
}
}
// Clean up message from POST
$orig_message = $message = luna_linebreaks(luna_trim($_POST['req_message']));
// Here we use strlen() not luna_strlen() as we want to limit the comment to LUNA_MAX_COMMENT_SIZE bytes, not characters
if (strlen($message) > LUNA_MAX_COMMENT_SIZE)
$errors[] = sprintf(__('Comments cannot be longer than %s bytes.', 'luna'), forum_number_format(LUNA_MAX_COMMENT_SIZE));
elseif ($luna_config['o_message_all_caps'] == '0' && is_all_uppercase($message) && !$luna_user['is_admmod'])
$errors[] = __('Comments cannot contain only capital letters.', 'luna');
// Validate BBCode syntax
require LUNA_ROOT.'include/parser.php';
$message = preparse_bbcode($message, $errors);
if (empty($errors)) {
if ($message == '')
$errors[] = __('You must enter a message.', 'luna');
elseif ($luna_config['o_censoring'] == '1') {
// Censor message to see if that causes problems
$censored_message = luna_trim(censor_words($message));
if ($censored_message == '')
$errors[] = __('You must enter a message. After applying censoring filters, your message was empty.', 'luna');
}
}
$hide_smilies = isset($_POST['hide_smilies']) ? '1' : '0';
$subscribe = isset($_POST['subscribe']) ? '1' : '0';
$pin_thread = isset($_POST['pin_thread']) && $is_admmod ? '1' : '0';
// Replace four-byte characters (MySQL cannot handle them)
$message = strip_bad_multibyte_chars($message);
$now = time();
// Did everything go according to plan?
if (empty($errors) && !isset($_POST['preview'])) {
require LUNA_ROOT.'include/search_idx.php';
// If it's a reply
if ($tid) {
if (!$luna_user['is_guest']) {
$new_tid = $tid;
// Insert the new comment
$db->query('INSERT INTO '.$db->prefix.'comments (commenter, commenter_id, commenter_ip, message, hide_smilies, commented, thread_id, soft) VALUES(\''.$db->escape($username).'\', '.$luna_user['id'].', \''.$db->escape(get_remote_address()).'\', \''.$db->escape($message).'\', '.$hide_smilies.', '.$now.', '.$tid.', '.$is_soft.')') or error('Unable to create comment', __FILE__, __LINE__, $db->error());
$new_pid = $db->insert_id();
// To subscribe or not to subscribe, that ...
if ($luna_config['o_thread_subscriptions'] == '1') {
if ($subscribe && !$is_subscribed)
$db->query('INSERT INTO '.$db->prefix.'thread_subscriptions (user_id, thread_id) VALUES('.$luna_user['id'].' ,'.$tid.')') or error('Unable to add subscription', __FILE__, __LINE__, $db->error());
elseif (!$subscribe && $is_subscribed)
$db->query('DELETE FROM '.$db->prefix.'thread_subscriptions WHERE user_id='.$luna_user['id'].' AND thread_id='.$tid) or error('Unable to remove subscription', __FILE__, __LINE__, $db->error());
}
} else {
// It's a guest. Insert the new comment
$email_sql = ($luna_config['o_force_guest_email'] == '1' || $email != '') ? '\''.$db->escape($email).'\'' : 'NULL';
$db->query('INSERT INTO '.$db->prefix.'comments (commenter, commenter_ip, commenter_email, message, hide_smilies, commented, thread_id) VALUES(\''.$db->escape($username).'\', \''.$db->escape(get_remote_address()).'\', '.$email_sql.', \''.$db->escape($message).'\', '.$hide_smilies.', '.$now.', '.$tid.')') or error('Unable to create comment', __FILE__, __LINE__, $db->error());
$new_pid = $db->insert_id();
}
if (!$luna_user['is_guest'])
$user_id_commenter = $db->escape($id);
else
$user_id_commenter = '1';
// Update thread
$db->query('UPDATE '.$db->prefix.'threads SET num_replies=num_replies+1, last_comment='.$now.', last_comment_id='.$new_pid.', last_commenter=\''.$db->escape($username).'\', last_commenter_id=\''.$user_id_commenter.'\' WHERE id='.$tid) or error('Unable to update thread', __FILE__, __LINE__, $db->error());
update_search_index('comment', $new_pid, $message);
update_forum($cur_commenting['fid']);
// Should we send out notifications?
if ($luna_config['o_thread_subscriptions'] == '1') {
// Get the comment time for the previous comment in this thread
$result = $db->query('SELECT commented FROM '.$db->prefix.'comments WHERE thread_id='.$tid.' ORDER BY id DESC LIMIT 1, 1') or error('Unable to fetch comment info', __FILE__, __LINE__, $db->error());
$previous_comment_time = $db->result($result);
// Get any subscribed users that should be notified (banned users are excluded)
$result = $db->query('SELECT u.id, u.email, u.notify_with_comment, u.language FROM '.$db->prefix.'users AS u INNER JOIN '.$db->prefix.'thread_subscriptions AS s ON u.id=s.user_id LEFT JOIN '.$db->prefix.'forum_perms AS fp ON (fp.forum_id='.$cur_commenting['fid'].' AND fp.group_id=u.group_id) LEFT JOIN '.$db->prefix.'online AS o ON u.id=o.user_id LEFT JOIN '.$db->prefix.'bans AS b ON u.username=b.username WHERE b.username IS NULL AND COALESCE(o.logged, u.last_visit)>'.$previous_comment_time.' AND (fp.read_forum IS NULL OR fp.read_forum=1) AND s.thread_id='.$tid.' AND u.id!='.$luna_user['id']) or error('Unable to fetch subscription info', __FILE__, __LINE__, $db->error());
if ($db->num_rows($result)) {
require_once LUNA_ROOT.'include/email.php';
$notification_emails = array();
if ($luna_config['o_censoring'] == '1')
$cleaned_message = bbcode2email($censored_message, -1);
else
$cleaned_message = bbcode2email($message, -1);
// Loop through subscribed users and send emails and notifications
while ($cur_subscriber = $db->fetch_assoc($result)) {
// First of all, add a new notification
new_notification($cur_subscriber['id'], get_base_url().'/thread.php?pid='.$new_pid.'#p'.$new_pid, sprintf(__('%s replied to %s', 'luna'), $username, $cur_commenting['subject']), 'fa-comment');
// Is the subscription email for $cur_subscriber['language'] cached or not?
if (!isset($notification_emails[$cur_subscriber['language']])) {
// Load the "new reply" template
$mail_tpl = trim(__('Subject: Reply to thread: "<thread_subject>"
<replier> has replied to the thread "<thread_subject>" to which you are subscribed. There may be more new replies, but this is the only notification you will receive until you visit the board again.
The comment is located at <comment_url>
You can unsubscribe by going to <unsubscribe_url>
--
<board_mailer> Mailer
(Do not reply to this message)', 'luna'));
// Load the "new reply full" template (with comment included)
$mail_tpl_full = trim(__('Subject: Reply to thread: "<thread_subject>"
<replier> has replied to the thread "<thread_subject>" to which you are subscribed. There may be more new replies, but this is the only notification you will receive until you visit the board again.
The comment is located at <comment_url>
The message reads as follows:
-----------------------------------------------------------------------
<message>
-----------------------------------------------------------------------
You can unsubscribe by going to <unsubscribe_url>
--
<board_mailer> Mailer
(Do not reply to this message)', 'luna'));
// The first row contains the subject (it also starts with "Subject:")
$first_crlf = strpos($mail_tpl, "\n");
$mail_subject = trim(substr($mail_tpl, 8, $first_crlf-8));
$mail_message = trim(substr($mail_tpl, $first_crlf));
$first_crlf = strpos($mail_tpl_full, "\n");
$mail_subject_full = trim(substr($mail_tpl_full, 8, $first_crlf-8));
$mail_message_full = trim(substr($mail_tpl_full, $first_crlf));
$mail_subject = str_replace('<thread_subject>', $cur_commenting['subject'], $mail_subject);
$mail_message = str_replace('<thread_subject>', $cur_commenting['subject'], $mail_message);
$mail_message = str_replace('<replier>', $username, $mail_message);
$mail_message = str_replace('<comment_url>', get_base_url().'/thread.php?pid='.$new_pid.'#p'.$new_pid, $mail_message);
$mail_message = str_replace('<unsubscribe_url>', get_base_url().'/misc.php?action=unsubscribe&tid='.$tid, $mail_message);
$mail_message = str_replace('<board_mailer>', $luna_config['o_board_title'], $mail_message);
$mail_subject_full = str_replace('<thread_subject>', $cur_commenting['subject'], $mail_subject_full);
$mail_message_full = str_replace('<thread_subject>', $cur_commenting['subject'], $mail_message_full);
$mail_message_full = str_replace('<replier>', $username, $mail_message_full);
$mail_message_full = str_replace('<message>', $cleaned_message, $mail_message_full);
$mail_message_full = str_replace('<comment_url>', get_base_url().'/thread.php?pid='.$new_pid.'#p'.$new_pid, $mail_message_full);
$mail_message_full = str_replace('<unsubscribe_url>', get_base_url().'/misc.php?action=unsubscribe&tid='.$tid, $mail_message_full);
$mail_message_full = str_replace('<board_mailer>', $luna_config['o_board_title'], $mail_message_full);
$notification_emails[$cur_subscriber['language']][0] = $mail_subject;
$notification_emails[$cur_subscriber['language']][1] = $mail_message;
$notification_emails[$cur_subscriber['language']][2] = $mail_subject_full;
$notification_emails[$cur_subscriber['language']][3] = $mail_message_full;
$mail_subject = $mail_message = $mail_subject_full = $mail_message_full = null;
}
// We have to double check here because the templates could be missing
if (isset($notification_emails[$cur_subscriber['language']])) {
if ($cur_subscriber['notify_with_comment'] == '0')
luna_mail($cur_subscriber['email'], $notification_emails[$cur_subscriber['language']][0], $notification_emails[$cur_subscriber['language']][1]);
else
luna_mail($cur_subscriber['email'], $notification_emails[$cur_subscriber['language']][2], $notification_emails[$cur_subscriber['language']][3]);
}
}
unset($cleaned_message);
}
}
}
// If it's a new thread
elseif ($fid) {
if (!$luna_user['is_guest'])
$user_id_commenter = $db->escape($id);
else
$user_id_commenter = '1';
// Create the thread
$db->query('INSERT INTO '.$db->prefix.'threads (commenter, subject, commented, last_comment, last_commenter, last_commenter_id, pinned, forum_id) VALUES(\''.$db->escape($username).'\', \''.$db->escape($subject).'\', '.$now.', '.$now.', \''.$db->escape($username).'\', '.$user_id_commenter.', '.$pin_thread.', '.$fid.')') or error('Unable to create thread', __FILE__, __LINE__, $db->error());
$new_tid = $db->insert_id();
if (!$luna_user['is_guest']) {
// To subscribe or not to subscribe, that ...
if ($luna_config['o_thread_subscriptions'] == '1' && $subscribe)
$db->query('INSERT INTO '.$db->prefix.'thread_subscriptions (user_id, thread_id) VALUES('.$luna_user['id'].' ,'.$new_tid.')') or error('Unable to add subscription', __FILE__, __LINE__, $db->error());
// Create the comment ("thread comment")
$db->query('INSERT INTO '.$db->prefix.'comments (commenter, commenter_id, commenter_ip, message, hide_smilies, commented, thread_id) VALUES(\''.$db->escape($username).'\', '.$luna_user['id'].', \''.$db->escape(get_remote_address()).'\', \''.$db->escape($message).'\', '.$hide_smilies.', '.$now.', '.$new_tid.')') or error('Unable to create comment', __FILE__, __LINE__, $db->error());
} else {
// Create the comment ("thread comment")
$email_sql = ($luna_config['o_force_guest_email'] == '1' || $email != '') ? '\''.$db->escape($email).'\'' : 'NULL';
$db->query('INSERT INTO '.$db->prefix.'comments (commenter, commenter_ip, commenter_email, message, hide_smilies, commented, thread_id) VALUES(\''.$db->escape($username).'\', \''.$db->escape(get_remote_address()).'\', '.$email_sql.', \''.$db->escape($message).'\', '.$hide_smilies.', '.$now.', '.$new_tid.')') or error('Unable to create comment', __FILE__, __LINE__, $db->error());
}
$new_pid = $db->insert_id();
// Update the thread with last_comment_id
$db->query('UPDATE '.$db->prefix.'threads SET last_comment_id='.$new_pid.', first_comment_id='.$new_pid.' WHERE id='.$new_tid) or error('Unable to update thread', __FILE__, __LINE__, $db->error());
update_search_index('comment', $new_pid, $message, $subject);
update_forum($fid);
// Should we send out notifications?
if ($luna_config['o_forum_subscriptions'] == '1') {
// Get any subscribed users that should be notified (banned users are excluded)
$result = $db->query('SELECT u.id, u.email, u.notify_with_comment, u.language FROM '.$db->prefix.'users AS u INNER JOIN '.$db->prefix.'forum_subscriptions AS s ON u.id=s.user_id LEFT JOIN '.$db->prefix.'forum_perms AS fp ON (fp.forum_id='.$cur_commenting['fid'].' AND fp.group_id=u.group_id) LEFT JOIN '.$db->prefix.'bans AS b ON u.username=b.username WHERE b.username IS NULL AND (fp.read_forum IS NULL OR fp.read_forum=1) AND s.forum_id='.$cur_commenting['fid'].' AND u.id!='.$luna_user['id']) or error('Unable to fetch subscription info', __FILE__, __LINE__, $db->error());
if ($db->num_rows($result)) {
require_once LUNA_ROOT.'include/email.php';
$notification_emails = array();
if ($luna_config['o_censoring'] == '1')
$cleaned_message = bbcode2email($censored_message, -1);
else
$cleaned_message = bbcode2email($message, -1);
// Loop through subscribed users and send emails
while ($cur_subscriber = $db->fetch_assoc($result)) {
// First of all, add a new notification
new_notification($cur_subscriber['id'], get_base_url().'/thread.php?pid='.$new_pid.'#p'.$new_pid, sprintf(__('%s created a new thread in %s', 'luna'), $username, $cur_commenting['forum_name']), 'fa-comments-o');
// Is the subscription email for $cur_subscriber['language'] cached or not?
if (!isset($notification_emails[$cur_subscriber['language']])) {
// Load the "new thread" template
$mail_tpl = trim(__('Subject: New thread in forum: "<forum_name>"
<commenter> has commented a new thread "<thread_subject>" in the forum "<forum_name>", to which you are subscribed.
The thread is located at <thread_url>
You can unsubscribe by going to <unsubscribe_url>
--
<board_mailer> Mailer
(Do not reply to this message)', 'luna'));
// Load the "new thread full" template (with comment included)
$mail_tpl_full = trim(__('Subject: New thread in forum: "<forum_name>"
<commenter> has commented a new thread "<thread_subject>" in the forum "<forum_name>", to which you are subscribed.
The thread is located at <thread_url>
The message reads as follows:
-----------------------------------------------------------------------
<message>
-----------------------------------------------------------------------
You can unsubscribe by going to <unsubscribe_url>
--
<board_mailer> Mailer
(Do not reply to this message)', 'luna'));
// The first row contains the subject (it also starts with "Subject:")
$first_crlf = strpos($mail_tpl, "\n");
$mail_subject = trim(substr($mail_tpl, 8, $first_crlf-8));
$mail_message = trim(substr($mail_tpl, $first_crlf));
$first_crlf = strpos($mail_tpl_full, "\n");
$mail_subject_full = trim(substr($mail_tpl_full, 8, $first_crlf-8));
$mail_message_full = trim(substr($mail_tpl_full, $first_crlf));
$mail_subject = str_replace('<forum_name>', $cur_commenting['forum_name'], $mail_subject);
$mail_message = str_replace('<thread_subject>', $luna_config['o_censoring'] == '1' ? $censored_subject : $subject, $mail_message);
$mail_message = str_replace('<forum_name>', $cur_commenting['forum_name'], $mail_message);
$mail_message = str_replace('<commenter>', $username, $mail_message);
$mail_message = str_replace('<thread_url>', get_base_url().'/thread.php?id='.$new_tid, $mail_message);
$mail_message = str_replace('<unsubscribe_url>', get_base_url().'/misc.php?action=unsubscribe&fid='.$cur_commenting['fid'], $mail_message);
$mail_message = str_replace('<board_mailer>', $luna_config['o_board_title'], $mail_message);
$mail_subject_full = str_replace('<forum_name>', $cur_commenting['forum_name'], $mail_subject_full);
$mail_message_full = str_replace('<thread_subject>', $luna_config['o_censoring'] == '1' ? $censored_subject : $subject, $mail_message_full);
$mail_message_full = str_replace('<forum_name>', $cur_commenting['forum_name'], $mail_message_full);
$mail_message_full = str_replace('<commenter>', $username, $mail_message_full);
$mail_message_full = str_replace('<message>', $cleaned_message, $mail_message_full);
$mail_message_full = str_replace('<thread_url>', get_base_url().'/thread.php?id='.$new_tid, $mail_message_full);
$mail_message_full = str_replace('<unsubscribe_url>', get_base_url().'/misc.php?action=unsubscribe&fid='.$cur_commenting['fid'], $mail_message_full);
$mail_message_full = str_replace('<board_mailer>', $luna_config['o_board_title'], $mail_message_full);
$notification_emails[$cur_subscriber['language']][0] = $mail_subject;
$notification_emails[$cur_subscriber['language']][1] = $mail_message;
$notification_emails[$cur_subscriber['language']][2] = $mail_subject_full;
$notification_emails[$cur_subscriber['language']][3] = $mail_message_full;
$mail_subject = $mail_message = $mail_subject_full = $mail_message_full = null;
}
// We have to double check here because the templates could be missing
if (isset($notification_emails[$cur_subscriber['language']])) {
if ($cur_subscriber['notify_with_comment'] == '0')
luna_mail($cur_subscriber['email'], $notification_emails[$cur_subscriber['language']][0], $notification_emails[$cur_subscriber['language']][1]);
else
luna_mail($cur_subscriber['email'], $notification_emails[$cur_subscriber['language']][2], $notification_emails[$cur_subscriber['language']][3]);
}
}
unset($cleaned_message);
}
}
}
// If we previously found out that the email was banned
if ($luna_user['is_guest'] && $banned_email && $luna_config['o_mailing_list'] != '') {
// Load the "banned email comment" template
$mail_tpl = trim(__('Subject: Alert - Banned email detected
User "<username>" commented with banned email address: <email>
Comment URL: <comment_url>
--
<board_mailer> Mailer
(Do not reply to this message)', 'luna'));
// The first row contains the subject
$first_crlf = strpos($mail_tpl, "\n");
$mail_subject = trim(substr($mail_tpl, 8, $first_crlf-8));
$mail_message = trim(substr($mail_tpl, $first_crlf));
$mail_message = str_replace('<username>', $username, $mail_message);
$mail_message = str_replace('<email>', $email, $mail_message);
$mail_message = str_replace('<comment_url>', get_base_url().'/thread.php?pid='.$new_pid.'#p'.$new_pid, $mail_message);
$mail_message = str_replace('<board_mailer>', $luna_config['o_board_title'], $mail_message);
luna_mail($luna_config['o_mailing_list'], $mail_subject, $mail_message);
}
// If the commenting user is logged in, increment his/her comment count
if (!$luna_user['is_guest']) {
$db->query('UPDATE '.$db->prefix.'users SET num_comments=num_comments+1, last_comment='.$now.' WHERE id='.$luna_user['id']) or error('Unable to update user', __FILE__, __LINE__, $db->error());
$tracked_threads = get_tracked_threads();
$tracked_threads['threads'][$new_tid] = time();
set_tracked_threads($tracked_threads);
} else {
$db->query('UPDATE '.$db->prefix.'online SET last_comment='.$now.' WHERE ident=\''.$db->escape(get_remote_address()).'\'' ) or error('Unable to update user', __FILE__, __LINE__, $db->error());
}
redirect('thread.php?pid='.$new_pid.'#p'.$new_pid);
}
}
// If a thread ID was specified in the url (it's a reply)
if ($tid) {
$action = __('Add comment', 'luna');
$form = '<form id="comment" method="post" action="comment.php?action=comment&tid='.$tid.'" onsubmit="window.onbeforeunload=null;this.submit.disabled=true;if(process_form(this)){return true;}else{this.submit.disabled=false;return false;}">';
// If a quote ID was specified in the url
if (isset($_GET['qid'])) {
$qid = intval($_GET['qid']);
if ($qid < 1)
message(__('Bad request. The link you followed is incorrect, outdated or you are simply not allowed to hang around here.', 'luna'), false, '404 Not Found');
$result = $db->query('SELECT commenter, message FROM '.$db->prefix.'comments WHERE id='.$qid.' AND thread_id='.$tid) or error('Unable to fetch quote info', __FILE__, __LINE__, $db->error());
if (!$db->num_rows($result))
message(__('Bad request. The link you followed is incorrect, outdated or you are simply not allowed to hang around here.', 'luna'), false, '404 Not Found');
list($q_commenter, $q_message) = $db->fetch_row($result);
// If the message contains a code tag we have to split it up (text within [code][/code] shouldn't be touched)
if (strpos($q_message, '[code]') !== false && strpos($q_message, '[/code]') !== false) {
list($inside, $outside) = split_text($q_message, '[code]', '[/code]');
$q_message = implode("\1", $outside);
}
// Remove [img] tags from quoted message
$q_message = preg_replace('%\[img(?:=(?:[^\[]*?))?\]((ht|f)tps?://)([^\s<"]*?)\[/img\]%U', '\1\3', $q_message);
// If we split up the message before we have to concatenate it together again (code tags)
if (isset($inside)) {
$outside = explode("\1", $q_message);
$q_message = '';
$num_tokens = count($outside);
for ($i = 0; $i < $num_tokens; ++$i) {
$q_message .= $outside[$i];
if (isset($inside[$i]))
$q_message .= '[code]'.$inside[$i].'[/code]';
}
unset($inside);
}
if ($luna_config['o_censoring'] == '1')
$q_message = censor_words($q_message);
$q_message = luna_htmlspecialchars($q_message);
// If username contains a square bracket, we add "" or '' around it (so we know when it starts and ends)
if (strpos($q_commenter, '[') !== false || strpos($q_commenter, ']') !== false) {
if (strpos($q_commenter, '\'') !== false)
$q_commenter = '"'.$q_commenter.'"';
else
$q_commenter = '\''.$q_commenter.'\'';
} else {
// Get the characters at the start and end of $q_commenter
$ends = substr($q_commenter, 0, 1).substr($q_commenter, -1, 1);
// Deal with quoting "Username" or 'Username' (becomes '"Username"' or "'Username'")
if ($ends == '\'\'')
$q_commenter = '"'.$q_commenter.'"';
elseif ($ends == '""')
$q_commenter = '\''.$q_commenter.'\'';
}
$quote = '[quote='.$q_commenter.']'.$q_message.'[/quote]'."\n";
}
}
// If a forum ID was specified in the url (new thread)
elseif ($fid) {
$action = __('Create thread', 'luna');
$form = '<form id="comment" method="post" action="comment.php?action=comment&fid='.$fid.'" onsubmit="window.onbeforeunload=null;return process_form(this)">';
} else
message(__('Bad request. The link you followed is incorrect, outdated or you are simply not allowed to hang around here.', 'luna'), false, '404 Not Found');
$page_title = array(luna_htmlspecialchars($luna_config['o_board_title']), $action);
$required_fields = array('req_email' => __('Email', 'luna'), 'req_subject' => __('Subject', 'luna'), 'req_message' => __('Message', 'luna'));
$focus_element = array('comment');
if (!$luna_user['is_guest'])
$focus_element[] = ($fid) ? 'req_subject' : 'req_message';
else {
$required_fields['req_username'] = __('Name', 'luna');
$focus_element[] = 'req_username';
}
$cur_index = 1;
define('LUNA_ACTIVE_PAGE', 'comment');
include LUNA_ROOT.'header.php';
require load_page('header.php');
require load_page('comment.php');
require load_page('footer.php');