Vergleich editpost.php - 1.2.6 - 1.2.14

  Keine Änderungen   Hinzugefügt   Modifiziert   Entfernt
Zeile 3Zeile 3
 * MyBB 1.2
* Copyright � 2006 MyBB Group, All Rights Reserved
*

 * MyBB 1.2
* Copyright � 2006 MyBB Group, All Rights Reserved
*

 * Website: http://www.mybboard.com
* License: http://www.mybboard.com/eula.html

 * Website: http://www.mybboard.net
* License: http://www.mybboard.net/eula.html

 *

 *

 * $Id: editpost.php 2749 2007-02-10 13:33:47Z CraKteR $

 * $Id: editpost.php 3951 2008-06-25 21:10:59Z Tikitiki $

 */

define("IN_MYBB", 1);

 */

define("IN_MYBB", 1);

Zeile 83Zeile 83
}

if($mybb->input['action'] == "deletepost" && $mybb->request_method == "post")

}

if($mybb->input['action'] == "deletepost" && $mybb->request_method == "post")

{

{	

	if(is_moderator($fid, "candeleteposts") != "yes")

	if(is_moderator($fid, "candeleteposts") != "yes")

	{
if($thread['closed'] == "yes")





	{
if($thread['closed'] == "yes")
{
error($lang->redirect_threadclosed);
}
if($forumpermissions['candeleteposts'] == "no")

		{

		{

			error($lang->redirect_threadclosed);
}
if($forumpermissions['candeleteposts'] == "no")
{
error_no_permission();
}
if($mybb->user['uid'] != $post['uid'])
{
error_no_permission();

			error_no_permission();
}
if($mybb->user['uid'] != $post['uid'])
{
error_no_permission();





		}
}
}
else

		}
}
}
else

{

{	

	if(is_moderator($fid, "caneditposts") != "yes")
{
if($thread['closed'] == "yes")

	if(is_moderator($fid, "caneditposts") != "yes")
{
if($thread['closed'] == "yes")

Zeile 122Zeile 122
		{
$lang->edit_time_limit = sprintf($lang->edit_time_limit, $mybb->settings['edittimelimit']);
error($lang->edit_time_limit);

		{
$lang->edit_time_limit = sprintf($lang->edit_time_limit, $mybb->settings['edittimelimit']);
error($lang->edit_time_limit);

		}
}
}

		}
}
}


// Password protected forums


// Password protected forums

check_forum_password($fid, $forum['password']);

check_forum_password($forum['parentlist']);


if(!$mybb->input['attachmentaid'] && ($mybb->input['newattachment'] || ($mybb->input['action'] == "do_editpost" && $mybb->input['submit'] && $_FILES['attachment'])))
{


if(!$mybb->input['attachmentaid'] && ($mybb->input['newattachment'] || ($mybb->input['action'] == "do_editpost" && $mybb->input['submit'] && $_FILES['attachment'])))
{

Zeile 147Zeile 147
	}
}


	}
}


if($mybb->input['attachmentaid'] && isset($mybb->input['attachmentact'])) // Lets remove/approve/unapprove the attachment

if($mybb->input['attachmentaid'] && isset($mybb->input['attachmentact']) && $mybb->input['action'] == "do_editpost" && $mybb->request_method == "post") // Lets remove/approve/unapprove the attachment

{ 
$mybb->input['attachmentaid'] = intval($mybb->input['attachmentaid']);

{ 
$mybb->input['attachmentaid'] = intval($mybb->input['attachmentaid']);

	if($mybb->input['attachmentact'] == "remove")

	if($mybb->input['attachmentact'] == "remove" && $mybb->input['posthash'])

	{
remove_attachment($pid, $mybb->input['posthash'], $mybb->input['attachmentaid']);
}

	{
remove_attachment($pid, $mybb->input['posthash'], $mybb->input['attachmentaid']);
}

	elseif($mybb->input['attachmentact'] == "approve")

	elseif($mybb->input['attachmentact'] == "approve" && is_moderator($fid, 'caneditposts') == 'yes')

	{
$update_sql = array("visible" => 1);
$db->update_query(TABLE_PREFIX."attachments", $update_sql, "aid='{$mybb->input['attachmentaid']}'");
}

	{
$update_sql = array("visible" => 1);
$db->update_query(TABLE_PREFIX."attachments", $update_sql, "aid='{$mybb->input['attachmentaid']}'");
}

	elseif($mybb->input['attachmentact'] == "unapprove")

	elseif($mybb->input['attachmentact'] == "unapprove" && is_moderator($fid, 'caneditposts') == 'yes')

	{
$update_sql = array("visible" => 0);
$db->update_query(TABLE_PREFIX."attachments", $update_sql, "aid='{$mybb->input['attachmentaid']}'");

	{
$update_sql = array("visible" => 0);
$db->update_query(TABLE_PREFIX."attachments", $update_sql, "aid='{$mybb->input['attachmentaid']}'");

Zeile 172Zeile 172

if($mybb->input['action'] == "deletepost" && $mybb->request_method == "post")
{


if($mybb->input['action'] == "deletepost" && $mybb->request_method == "post")
{

 
	// Verify incoming POST request
verify_post_check($mybb->input['my_post_key']);


	$plugins->run_hooks("editpost_deletepost");

if($mybb->input['delete'] == "yes")

	$plugins->run_hooks("editpost_deletepost");

if($mybb->input['delete'] == "yes")

Zeile 193Zeile 196
			if($forumpermissions['candeletethreads'] == "yes")
{
delete_thread($tid);

			if($forumpermissions['candeletethreads'] == "yes")
{
delete_thread($tid);

				update_forum_count($fid);

 
				mark_reports($tid, "thread");
log_moderator_action($modlogdata, "Deleted Thread");
redirect("forumdisplay.php?fid=$fid", $lang->redirect_threaddeleted);

				mark_reports($tid, "thread");
log_moderator_action($modlogdata, "Deleted Thread");
redirect("forumdisplay.php?fid=$fid", $lang->redirect_threaddeleted);

Zeile 209Zeile 211
			{
// Select the first post before this
delete_post($pid, $tid);

			{
// Select the first post before this
delete_post($pid, $tid);

				update_thread_count($tid);
update_forum_count($fid);

 
				mark_reports($pid, "post");
log_moderator_action($modlogdata, "Deleted Post");
$query = $db->simple_select(TABLE_PREFIX."posts", "pid", "tid='{$tid}' AND dateline <= '{$post['dateline']}'", array("limit" => 1, "order_by" => "dateline", "order_dir" => "desc"));

				mark_reports($pid, "post");
log_moderator_action($modlogdata, "Deleted Post");
$query = $db->simple_select(TABLE_PREFIX."posts", "pid", "tid='{$tid}' AND dateline <= '{$post['dateline']}'", array("limit" => 1, "order_by" => "dateline", "order_dir" => "desc"));

Zeile 239Zeile 239

if($mybb->input['action'] == "do_editpost" && $mybb->request_method == "post")
{


if($mybb->input['action'] == "do_editpost" && $mybb->request_method == "post")
{





	// Verify incoming POST request
verify_post_check($mybb->input['my_post_key']);


	$plugins->run_hooks("editpost_do_editpost_start");

	$plugins->run_hooks("editpost_do_editpost_start");





	// Set up posthandler.
require_once MYBB_ROOT."inc/datahandlers/post.php";
$posthandler = new PostDataHandler("update");

	// Set up posthandler.
require_once MYBB_ROOT."inc/datahandlers/post.php";
$posthandler = new PostDataHandler("update");

Zeile 256Zeile 258
		"username" => $mybb->user['username'],
"edit_uid" => $mybb->user['uid'],
"message" => $mybb->input['message'],

		"username" => $mybb->user['username'],
"edit_uid" => $mybb->user['uid'],
"message" => $mybb->input['message'],

	);

	);


// Set up the post options from the input.
$post['options'] = array(


// Set up the post options from the input.
$post['options'] = array(

Zeile 287Zeile 289
		{
$url = "polls.php?action=newpoll&tid=$tid&polloptions=".$mybb->input['numpolloptions'];
$redirect = $lang->redirect_postedited_poll;

		{
$url = "polls.php?action=newpoll&tid=$tid&polloptions=".$mybb->input['numpolloptions'];
$redirect = $lang->redirect_postedited_poll;

		}

		}

		// Otherwise, send them back to their post
else
{

		// Otherwise, send them back to their post
else
{

Zeile 297Zeile 299
		$plugins->run_hooks("editpost_do_editpost_end");

redirect($url, $redirect);

		$plugins->run_hooks("editpost_do_editpost_end");

redirect($url, $redirect);

	}

	}

}

if(!$mybb->input['action'] || $mybb->input['action'] == "editpost")

}

if(!$mybb->input['action'] || $mybb->input['action'] == "editpost")

Zeile 374Zeile 376
		}
$query = $db->query("SELECT SUM(filesize) AS ausage FROM ".TABLE_PREFIX."attachments WHERE uid='".$mybb->user['uid']."'");
$usage = $db->fetch_array($query);

		}
$query = $db->query("SELECT SUM(filesize) AS ausage FROM ".TABLE_PREFIX."attachments WHERE uid='".$mybb->user['uid']."'");
$usage = $db->fetch_array($query);

		if($usage['ausage'] > ($mybb->usergroup['attachquota']*1000) && $mybb->usergroup['attachquota'] != 0)

		if($usage['ausage'] > ($mybb->usergroup['attachquota']*1024) && $mybb->usergroup['attachquota'] != 0)

		{
$noshowattach = 1;
}
if($mybb->usergroup['attachquota'] == 0)
{
$friendlyquota = $lang->unlimited;

		{
$noshowattach = 1;
}
if($mybb->usergroup['attachquota'] == 0)
{
$friendlyquota = $lang->unlimited;

		}

		}

		else
{

		else
{

			$friendlyquota = get_friendly_size($mybb->usergroup['attachquota']*1000);

			$friendlyquota = get_friendly_size($mybb->usergroup['attachquota']*1024);

		}
$friendlyusage = get_friendly_size($usage['ausage']);
$lang->attach_quota = sprintf($lang->attach_quota, $friendlyusage, $friendlyquota);

		}
$friendlyusage = get_friendly_size($usage['ausage']);
$lang->attach_quota = sprintf($lang->attach_quota, $friendlyusage, $friendlyquota);

Zeile 393Zeile 395
			eval("\$newattach = \"".$templates->get("post_attachments_new")."\";");
}
eval("\$attachbox = \"".$templates->get("post_attachments")."\";");

			eval("\$newattach = \"".$templates->get("post_attachments_new")."\";");
}
eval("\$attachbox = \"".$templates->get("post_attachments")."\";");

	}

	}

	if(!$mybb->input['attachmentaid'] && !$mybb->input['newattachment'] && !$mybb->input['previewpost'] && !$maximageserror)
{
$message = $post['message'];
$subject = $post['subject'];

	if(!$mybb->input['attachmentaid'] && !$mybb->input['newattachment'] && !$mybb->input['previewpost'] && !$maximageserror)
{
$message = $post['message'];
$subject = $post['subject'];

	}

	}

	else
{
$message = $mybb->input['message'];
$subject = $mybb->input['subject'];

	else
{
$message = $mybb->input['message'];
$subject = $mybb->input['subject'];

	}

	}


$query = $db->simple_select(TABLE_PREFIX."posts", "*", "tid='{$tid}'", array("limit" => 1, "order_by" => "dateline", "order_dir" => "asc"));
$firstcheck = $db->fetch_array($query);
if($firstcheck['pid'] == $pid && $forumpermissions['canpostpolls'] != "no" && $thread['poll'] < 1)


$query = $db->simple_select(TABLE_PREFIX."posts", "*", "tid='{$tid}'", array("limit" => 1, "order_by" => "dateline", "order_dir" => "asc"));
$firstcheck = $db->fetch_array($query);
if($firstcheck['pid'] == $pid && $forumpermissions['canpostpolls'] != "no" && $thread['poll'] < 1)

	{

	{

		$lang->max_options = sprintf($lang->max_options, $mybb->settings['maxpolloptions']);
$numpolloptions = "2";
eval("\$pollbox = \"".$templates->get("newthread_postpoll")."\";");
}

		$lang->max_options = sprintf($lang->max_options, $mybb->settings['maxpolloptions']);
$numpolloptions = "2";
eval("\$pollbox = \"".$templates->get("newthread_postpoll")."\";");
}


if($mybb->input['previewpost'] || $post_errors)


if($mybb->input['previewpost'] && !$post_errors)

	{

	{

		$previewmessage = $message;
$message = htmlspecialchars_uni($message);
$subject = htmlspecialchars_uni($subject);












		// Set up posthandler.
require_once MYBB_ROOT."inc/datahandlers/post.php";
$posthandler = new PostDataHandler("update");
$posthandler->action = "post";

// Set the post data that came from the input to the $post array.
$post = array(
"pid" => $mybb->input['pid'],
"subject" => $mybb->input['subject'],
"icon" => $mybb->input['icon'],
"uid" => $post['uid'],
"edit_uid" => $mybb->user['uid'],
"message" => $mybb->input['message'],
);





		$postoptions = $mybb->input['postoptions'];

if($postoptions['signature'] == "yes")
{
$postoptionschecked['signature'] = "checked=\"checked\"";
}
if($postoptions['emailnotify'] == "yes")

		if(!$mybb->input['previewpost'])







		{

		{

			$postoptionschecked['emailnotify'] = "checked=\"checked\"";


			$post['uid'] = $mybb->user['uid'];
$post['username'] = $mybb->user['username'];

		}

		}

		if($postoptions['disablesmilies'] == "yes")




















// Set up the post options from the input.
$post['options'] = array(
"signature" => $mybb->input['postoptions']['signature'],
"emailnotify" => $mybb->input['postoptions']['emailnotify'],
"disablesmilies" => $mybb->input['postoptions']['disablesmilies']
);

$posthandler->set_data($post);

// Now let the post handler do all the hard work.
if(!$posthandler->validate_post())
{
$post_errors = $posthandler->get_friendly_errors();
$post_errors = inline_error($post_errors);
$mybb->input['action'] = "editpost";
$mybb->input['previewpost'] = 0;
}
else

		{

		{

			$postoptionschecked['disablesmilies'] = "checked=\"checked\"";




















			$previewmessage = $message;
$message = htmlspecialchars_uni($message);
$subject = htmlspecialchars_uni($subject);

$postoptions = $mybb->input['postoptions'];

if($postoptions['signature'] == "yes")
{
$postoptionschecked['signature'] = "checked=\"checked\"";
}
if($postoptions['emailnotify'] == "yes")
{
$postoptionschecked['emailnotify'] = "checked=\"checked\"";
}
if($postoptions['disablesmilies'] == "yes")
{
$postoptionschecked['disablesmilies'] = "checked=\"checked\"";
}

$pid = intval($mybb->input['pid']);

		}

		}


$pid = intval($mybb->input['pid']);

 
	}

if($mybb->input['previewpost'])
{
// Figure out the poster's other information.
$query = $db->query("

	}

if($mybb->input['previewpost'])
{
// Figure out the poster's other information.
$query = $db->query("

			SELECT u.*, f.*

			SELECT u.*, f.*, p.dateline

			FROM ".TABLE_PREFIX."users u
LEFT JOIN ".TABLE_PREFIX."userfields f ON (f.ufid=u.uid)

			FROM ".TABLE_PREFIX."users u
LEFT JOIN ".TABLE_PREFIX."userfields f ON (f.ufid=u.uid)

			WHERE u.uid='".$post['uid']."'


			LEFT JOIN ".TABLE_PREFIX."posts p ON (p.uid=u.uid)
WHERE u.uid='{$post['uid']}' AND p.pid='{$pid}'

			LIMIT 1
");
$postinfo = $db->fetch_array($query);

			LIMIT 1
");
$postinfo = $db->fetch_array($query);

Zeile 457Zeile 501
		}

// Set the values of the post info array.

		}

// Set the values of the post info array.

		$postinfo['username'] = $postinfo['username'];

 
		$postinfo['userusername'] = $postinfo['username'];

		$postinfo['userusername'] = $postinfo['username'];

		$postinfo['uid'] = $postinfo['uid'];

 
		$postinfo['message'] = $previewmessage;
$postinfo['subject'] = $subject;
$postinfo['icon'] = $icon;
$postinfo['smilieoff'] = $postoptions['disablesmilies'];

		$postinfo['message'] = $previewmessage;
$postinfo['subject'] = $subject;
$postinfo['icon'] = $icon;
$postinfo['smilieoff'] = $postoptions['disablesmilies'];

		$postinfo['dateline'] = time();

 

$postbit = build_postbit($postinfo, 1);
eval("\$preview = \"".$templates->get("previewpost")."\";");
}


$postbit = build_postbit($postinfo, 1);
eval("\$preview = \"".$templates->get("previewpost")."\";");
}

	elseif(!$post_errors)

	else if(!$post_errors)

	{
$message = htmlspecialchars_uni($message);
$subject = htmlspecialchars_uni($subject);

	{
$message = htmlspecialchars_uni($message);
$subject = htmlspecialchars_uni($subject);