Vergleich editpost.php - 1.2.3 - 1.2.12

Keine Änderungen Hinzugefügt Modifiziert Entfernt
Zeile 3	Zeile 3
* MyBB 1.2 * Copyright � 2006 MyBB Group, All Rights Reserved *	* MyBB 1.2 * Copyright � 2006 MyBB Group, All Rights Reserved *
* Website: http://www.mybboard.com * License: http://www.mybboard.com/eula.html	* Website: http://www.mybboard.net * License: http://www.mybboard.net/eula.html
*	*
* $Id: editpost.php 2749 2007-02-10 13:33:47Z CraKteR $	* $Id: editpost.php 3596 2008-01-20 08:27:39Z Tikitiki $
*/ define("IN_MYBB", 1);	*/ define("IN_MYBB", 1);
Zeile 83	Zeile 83
} if($mybb->input['action'] == "deletepost" && $mybb->request_method == "post")	} if($mybb->input['action'] == "deletepost" && $mybb->request_method == "post")
{	{
if(is_moderator($fid, "candeleteposts") != "yes")	if(is_moderator($fid, "candeleteposts") != "yes")
{ if($thread['closed'] == "yes")	{ if($thread['closed'] == "yes") { error($lang->redirect_threadclosed); } if($forumpermissions['candeleteposts'] == "no")
{	{
error($lang->redirect_threadclosed); } if($forumpermissions['candeleteposts'] == "no") { error_no_permission(); } if($mybb->user['uid'] != $post['uid']) { error_no_permission();	error_no_permission(); } if($mybb->user['uid'] != $post['uid']) { error_no_permission();
} } } else	} } } else
{	{
if(is_moderator($fid, "caneditposts") != "yes") { if($thread['closed'] == "yes")	if(is_moderator($fid, "caneditposts") != "yes") { if($thread['closed'] == "yes")
Zeile 122	Zeile 122
{ $lang->edit_time_limit = sprintf($lang->edit_time_limit, $mybb->settings['edittimelimit']); error($lang->edit_time_limit);	{ $lang->edit_time_limit = sprintf($lang->edit_time_limit, $mybb->settings['edittimelimit']); error($lang->edit_time_limit);
} } }	} } }
// Password protected forums	// Password protected forums
check_forum_password($fid, $forum['password']);	check_forum_password($forum['parentlist']);
if(!$mybb->input['attachmentaid'] && ($mybb->input['newattachment'] \|\| ($mybb->input['action'] == "do_editpost" && $mybb->input['submit'] && $_FILES['attachment']))) {	if(!$mybb->input['attachmentaid'] && ($mybb->input['newattachment'] \|\| ($mybb->input['action'] == "do_editpost" && $mybb->input['submit'] && $_FILES['attachment']))) {
Zeile 139	Zeile 139
if($attachedfile['error']) { eval("\$attacherror = \"".$templates->get("error_attacherror")."\";");	if($attachedfile['error']) { eval("\$attacherror = \"".$templates->get("error_attacherror")."\";");
$mybb->input['action'] = "editpost"; } if(!$mybb->input['submit'])	$mybb->input['action'] = "editpost"; } if(!$mybb->input['submit'])
{ $mybb->input['action'] = "editpost"; }	{ $mybb->input['action'] = "editpost"; }
Zeile 157	Zeile 157
elseif($mybb->input['attachmentact'] == "approve") { $update_sql = array("visible" => 1);	elseif($mybb->input['attachmentact'] == "approve") { $update_sql = array("visible" => 1);
$db->update_query(TABLE_PREFIX."attachments", $update_sql, "aid='{$mybb->input['attachmentaid']}'");	$db->update_query(TABLE_PREFIX."attachments", $update_sql, "aid='{$mybb->input['attachmentaid']}'");
} elseif($mybb->input['attachmentact'] == "unapprove") {	} elseif($mybb->input['attachmentact'] == "unapprove") {
Zeile 165	Zeile 165
$db->update_query(TABLE_PREFIX."attachments", $update_sql, "aid='{$mybb->input['attachmentaid']}'"); } if(!$mybb->input['submit'])	$db->update_query(TABLE_PREFIX."attachments", $update_sql, "aid='{$mybb->input['attachmentaid']}'"); } if(!$mybb->input['submit'])
{ $mybb->input['action'] = "editpost"; }	{ $mybb->input['action'] = "editpost"; }
} if($mybb->input['action'] == "deletepost" && $mybb->request_method == "post") {	} if($mybb->input['action'] == "deletepost" && $mybb->request_method == "post") {
	// Verify incoming POST request verify_post_check($mybb->input['my_post_key']);
$plugins->run_hooks("editpost_deletepost"); if($mybb->input['delete'] == "yes")	$plugins->run_hooks("editpost_deletepost"); if($mybb->input['delete'] == "yes")
Zeile 193	Zeile 196
if($forumpermissions['candeletethreads'] == "yes") { delete_thread($tid);	if($forumpermissions['candeletethreads'] == "yes") { delete_thread($tid);
update_forum_count($fid);
mark_reports($tid, "thread"); log_moderator_action($modlogdata, "Deleted Thread"); redirect("forumdisplay.php?fid=$fid", $lang->redirect_threaddeleted);	mark_reports($tid, "thread"); log_moderator_action($modlogdata, "Deleted Thread"); redirect("forumdisplay.php?fid=$fid", $lang->redirect_threaddeleted);
Zeile 209	Zeile 211
{ // Select the first post before this delete_post($pid, $tid);	{ // Select the first post before this delete_post($pid, $tid);
update_thread_count($tid); update_forum_count($fid);
mark_reports($pid, "post"); log_moderator_action($modlogdata, "Deleted Post"); $query = $db->simple_select(TABLE_PREFIX."posts", "pid", "tid='{$tid}' AND dateline <= '{$post['dateline']}'", array("limit" => 1, "order_by" => "dateline", "order_dir" => "desc"));	mark_reports($pid, "post"); log_moderator_action($modlogdata, "Deleted Post"); $query = $db->simple_select(TABLE_PREFIX."posts", "pid", "tid='{$tid}' AND dateline <= '{$post['dateline']}'", array("limit" => 1, "order_by" => "dateline", "order_dir" => "desc"));
Zeile 239	Zeile 239
if($mybb->input['action'] == "do_editpost" && $mybb->request_method == "post") {	if($mybb->input['action'] == "do_editpost" && $mybb->request_method == "post") {
	// Verify incoming POST request verify_post_check($mybb->input['my_post_key']);
$plugins->run_hooks("editpost_do_editpost_start"); // Set up posthandler.	$plugins->run_hooks("editpost_do_editpost_start"); // Set up posthandler.
Zeile 338	Zeile 340
else { $posthash_query = "";	else { $posthash_query = "";
}	}
$query = $db->simple_select(TABLE_PREFIX."attachments", "*", "{$posthash_query}pid='{$pid}'"); $attachments = ''; while($attachment = $db->fetch_array($query))	$query = $db->simple_select(TABLE_PREFIX."attachments", "*", "{$posthash_query}pid='{$pid}'"); $attachments = ''; while($attachment = $db->fetch_array($query))
Zeile 354	Zeile 356
if(is_moderator($fid) == "yes") { if($attachment['visible'] == 1)	if(is_moderator($fid) == "yes") { if($attachment['visible'] == 1)
{	{
eval("\$attach_mod_options = \"".$templates->get("post_attachments_attachment_mod_unapprove")."\";"); } else	eval("\$attach_mod_options = \"".$templates->get("post_attachments_attachment_mod_unapprove")."\";"); } else
Zeile 365	Zeile 367
if($attachment['visible'] != 1) { eval("\$attachments .= \"".$templates->get("post_attachments_attachment_unapproved")."\";");	if($attachment['visible'] != 1) { eval("\$attachments .= \"".$templates->get("post_attachments_attachment_unapproved")."\";");
}	}
else { eval("\$attachments .= \"".$templates->get("post_attachments_attachment")."\";");	else { eval("\$attachments .= \"".$templates->get("post_attachments_attachment")."\";");
Zeile 374	Zeile 376
} $query = $db->query("SELECT SUM(filesize) AS ausage FROM ".TABLE_PREFIX."attachments WHERE uid='".$mybb->user['uid']."'"); $usage = $db->fetch_array($query);	} $query = $db->query("SELECT SUM(filesize) AS ausage FROM ".TABLE_PREFIX."attachments WHERE uid='".$mybb->user['uid']."'"); $usage = $db->fetch_array($query);
if($usage['ausage'] > ($mybb->usergroup['attachquota']*1000) && $mybb->usergroup['attachquota'] != 0)	if($usage['ausage'] > ($mybb->usergroup['attachquota']*1024) && $mybb->usergroup['attachquota'] != 0)
{ $noshowattach = 1; } if($mybb->usergroup['attachquota'] == 0) { $friendlyquota = $lang->unlimited;	{ $noshowattach = 1; } if($mybb->usergroup['attachquota'] == 0) { $friendlyquota = $lang->unlimited;
}	}
else {	else {
$friendlyquota = get_friendly_size($mybb->usergroup['attachquota']*1000);	$friendlyquota = get_friendly_size($mybb->usergroup['attachquota']*1024);
} $friendlyusage = get_friendly_size($usage['ausage']); $lang->attach_quota = sprintf($lang->attach_quota, $friendlyusage, $friendlyquota);	} $friendlyusage = get_friendly_size($usage['ausage']); $lang->attach_quota = sprintf($lang->attach_quota, $friendlyusage, $friendlyquota);
Zeile 393	Zeile 395
eval("\$newattach = \"".$templates->get("post_attachments_new")."\";"); } eval("\$attachbox = \"".$templates->get("post_attachments")."\";");	eval("\$newattach = \"".$templates->get("post_attachments_new")."\";"); } eval("\$attachbox = \"".$templates->get("post_attachments")."\";");
}	}
if(!$mybb->input['attachmentaid'] && !$mybb->input['newattachment'] && !$mybb->input['previewpost'] && !$maximageserror) { $message = $post['message']; $subject = $post['subject'];	if(!$mybb->input['attachmentaid'] && !$mybb->input['newattachment'] && !$mybb->input['previewpost'] && !$maximageserror) { $message = $post['message']; $subject = $post['subject'];
}	}
else { $message = $mybb->input['message']; $subject = $mybb->input['subject'];	else { $message = $mybb->input['message']; $subject = $mybb->input['subject'];
}	}
$query = $db->simple_select(TABLE_PREFIX."posts", "*", "tid='{$tid}'", array("limit" => 1, "order_by" => "dateline", "order_dir" => "asc")); $firstcheck = $db->fetch_array($query); if($firstcheck['pid'] == $pid && $forumpermissions['canpostpolls'] != "no" && $thread['poll'] < 1)	$query = $db->simple_select(TABLE_PREFIX."posts", "*", "tid='{$tid}'", array("limit" => 1, "order_by" => "dateline", "order_dir" => "asc")); $firstcheck = $db->fetch_array($query); if($firstcheck['pid'] == $pid && $forumpermissions['canpostpolls'] != "no" && $thread['poll'] < 1)
{	{
$lang->max_options = sprintf($lang->max_options, $mybb->settings['maxpolloptions']); $numpolloptions = "2"; eval("\$pollbox = \"".$templates->get("newthread_postpoll")."\";"); }	$lang->max_options = sprintf($lang->max_options, $mybb->settings['maxpolloptions']); $numpolloptions = "2"; eval("\$pollbox = \"".$templates->get("newthread_postpoll")."\";"); }
if($mybb->input['previewpost'] \|\| $post_errors)	if($mybb->input['previewpost'] && !$post_errors)
{	{
$previewmessage = $message; $message = htmlspecialchars_uni($message); $subject = htmlspecialchars_uni($subject);	// Set up posthandler. require_once MYBB_ROOT."inc/datahandlers/post.php"; $posthandler = new PostDataHandler("update"); $posthandler->action = "post"; // Set the post data that came from the input to the $post array. $post = array( "pid" => $mybb->input['pid'], "subject" => $mybb->input['subject'], "icon" => $mybb->input['icon'], "uid" => $post['uid'], "edit_uid" => $mybb->user['uid'], "message" => $mybb->input['message'], );

$postoptions = $mybb->input['postoptions']; if($postoptions['signature'] == "yes") { $postoptionschecked['signature'] = "checked=\"checked\""; } if($postoptions['emailnotify'] == "yes")	if(!$mybb->input['previewpost'])
{	{
$postoptionschecked['emailnotify'] = "checked=\"checked\"";	$post['uid'] = $mybb->user['uid']; $post['username'] = $mybb->user['username'];
}	}
if($postoptions['disablesmilies'] == "yes")	// Set up the post options from the input. $post['options'] = array( "signature" => $mybb->input['postoptions']['signature'], "emailnotify" => $mybb->input['postoptions']['emailnotify'], "disablesmilies" => $mybb->input['postoptions']['disablesmilies'] ); $posthandler->set_data($post); // Now let the post handler do all the hard work. if(!$posthandler->validate_post()) { $post_errors = $posthandler->get_friendly_errors(); $post_errors = inline_error($post_errors); $mybb->input['action'] = "editpost"; $mybb->input['previewpost'] = 0; } else
{	{
$postoptionschecked['disablesmilies'] = "checked=\"checked\"";	$previewmessage = $message; $message = htmlspecialchars_uni($message); $subject = htmlspecialchars_uni($subject); $postoptions = $mybb->input['postoptions']; if($postoptions['signature'] == "yes") { $postoptionschecked['signature'] = "checked=\"checked\""; } if($postoptions['emailnotify'] == "yes") { $postoptionschecked['emailnotify'] = "checked=\"checked\""; } if($postoptions['disablesmilies'] == "yes") { $postoptionschecked['disablesmilies'] = "checked=\"checked\""; } $pid = intval($mybb->input['pid']);
}	}
$pid = intval($mybb->input['pid']);
} if($mybb->input['previewpost']) { // Figure out the poster's other information. $query = $db->query("	} if($mybb->input['previewpost']) { // Figure out the poster's other information. $query = $db->query("
SELECT u., f.	SELECT u., f., p.dateline
FROM ".TABLE_PREFIX."users u LEFT JOIN ".TABLE_PREFIX."userfields f ON (f.ufid=u.uid)	FROM ".TABLE_PREFIX."users u LEFT JOIN ".TABLE_PREFIX."userfields f ON (f.ufid=u.uid)
WHERE u.uid='".$post['uid']."'	LEFT JOIN ".TABLE_PREFIX."posts p ON (p.uid=u.uid) WHERE u.uid='{$post['uid']}' AND p.pid='{$pid}'
LIMIT 1 "); $postinfo = $db->fetch_array($query);	LIMIT 1 "); $postinfo = $db->fetch_array($query);
Zeile 457	Zeile 501
} // Set the values of the post info array.	} // Set the values of the post info array.
$postinfo['username'] = $postinfo['username'];
$postinfo['userusername'] = $postinfo['username'];	$postinfo['userusername'] = $postinfo['username'];
$postinfo['uid'] = $postinfo['uid'];
$postinfo['message'] = $previewmessage; $postinfo['subject'] = $subject; $postinfo['icon'] = $icon; $postinfo['smilieoff'] = $postoptions['disablesmilies'];	$postinfo['message'] = $previewmessage; $postinfo['subject'] = $subject; $postinfo['icon'] = $icon; $postinfo['smilieoff'] = $postoptions['disablesmilies'];
$postinfo['dateline'] = time();
$postbit = build_postbit($postinfo, 1); eval("\$preview = \"".$templates->get("previewpost")."\";"); }	$postbit = build_postbit($postinfo, 1); eval("\$preview = \"".$templates->get("previewpost")."\";"); }
elseif(!$post_errors)	else if(!$post_errors)
{ $message = htmlspecialchars_uni($message); $subject = htmlspecialchars_uni($subject);	{ $message = htmlspecialchars_uni($message); $subject = htmlspecialchars_uni($subject);