Vergleich inc/datahandlers/post.php - 1.8.0 - 1.8.20

  Keine Änderungen   Hinzugefügt   Modifiziert   Entfernt
Zeile 53Zeile 53
	 * post = New post
* thread = New thread
* edit = Editing a thread or post

	 * post = New post
* thread = New thread
* edit = Editing a thread or post

 
	 *
* @var string

	 */
public $action;

	 */
public $action;


/**


/**

	 * Array of data inserted in to a post.

	 * Array of data inserted in to a post.

	 *
* @var array

	 *
* @var array

	 */
public $post_insert_data = array();

	 */
public $post_insert_data = array();


/**


/**

	 * Array of data used to update a post.
*
* @var array
*/
public $post_update_data = array();

	 * Array of data used to update a post.
*
* @var array
*/
public $post_update_data = array();





	/**
* Post ID currently being manipulated by the datahandlers.
*

	/**
* Post ID currently being manipulated by the datahandlers.
*

Zeile 79Zeile 81

/**
* Array of data inserted in to a thread.


/**
* Array of data inserted in to a thread.

	 *

	 *

	 * @var array
*/
public $thread_insert_data = array();

/**
* Array of data used to update a thread.

	 * @var array
*/
public $thread_insert_data = array();

/**
* Array of data used to update a thread.

	 *
* @var array
*/

	 *
* @var array
*/

	public $thread_update_data = array();

	public $thread_update_data = array();


/**


/**

	 * Thread ID currently being manipulated by the datahandlers.
*
* @var int
*/
public $tid = 0;

	 * Thread ID currently being manipulated by the datahandlers.
*
* @var int
*/
public $tid = 0;





	/**
* Values to be returned after inserting/updating a post/thread.
*
* @var array
*/
public $return_values = array();

	/**
* Values to be returned after inserting/updating a post/thread.
*
* @var array
*/
public $return_values = array();


/**









/**
* Is this the first post of a thread when editing
*
* @var boolean
*/
public $first_post = false;

/**

	 * Verifies the author of a post and fetches the username if necessary.
*
* @return boolean True if the author information is valid, false if invalid.
*/
function verify_author()
{

	 * Verifies the author of a post and fetches the username if necessary.
*
* @return boolean True if the author information is valid, false if invalid.
*/
function verify_author()
{

		global $mybb;

		global $mybb, $lang;


$post = &$this->data;



$post = &$this->data;


Zeile 129Zeile 138
			$post['username'] = $user['username'];
}
// if the uid is 0 verify the username

			$post['username'] = $user['username'];
}
// if the uid is 0 verify the username

		else if($post['uid'] == 0 && $post['username'] != $lang->guest)
{

		else if($post['uid'] == 0 && $post['username'] != '')
{

			// Set up user handler
require_once MYBB_ROOT."inc/datahandlers/user.php";
$userhandler = new UserDataHandler();

			// Set up user handler
require_once MYBB_ROOT."inc/datahandlers/user.php";
$userhandler = new UserDataHandler();

			



			$data_array = array('username' => $post['username']);
$userhandler->set_data($data_array);

			$data_array = array('username' => $post['username']);
$userhandler->set_data($data_array);

			



			if(!$userhandler->verify_username())
{
// invalid username

			if(!$userhandler->verify_username())
{
// invalid username

 
				$this->errors = array_merge($this->errors, $userhandler->get_errors());
return false;
}

if($userhandler->verify_username_exists())
{
// username is in use

				$this->errors = array_merge($this->errors, $userhandler->get_errors());
return false;
}
}


				$this->errors = array_merge($this->errors, $userhandler->get_errors());
return false;
}
}


		// After all of this, if we still don't have a username, force the username as "Guest" (Note, this is not translatable as it is always a fallback)
if(!$post['username'])
{
$post['username'] = "Guest";
}

// Sanitize the username
$post['username'] = htmlspecialchars_uni($post['username']);

 
		return true;
}

/**
* Verifies a post subject.
*

		return true;
}

/**
* Verifies a post subject.
*

	 * @param string True if the subject is valid, false if invalid.

 
	 * @return boolean True when valid, false when not valid.
*/
function verify_subject()

	 * @return boolean True when valid, false when not valid.
*/
function verify_subject()

Zeile 170Zeile 177
		$subject = &$post['subject'];
$subject = trim_blank_chrs($subject);


		$subject = &$post['subject'];
$subject = trim_blank_chrs($subject);


		// Are we editing an existing thread or post?

 
		if($this->method == "update" && $post['pid'])

		if($this->method == "update" && $post['pid'])

		{
if(empty($post['tid']))
{
$query = $db->simple_select("posts", "tid", "pid='".(int)$post['pid']."'");
$post['tid'] = $db->fetch_field($query, "tid");
}
// Here we determine if we're editing the first post of a thread or not.
$options = array(
"limit" => 1,
"limit_start" => 0,
"order_by" => "dateline",
"order_dir" => "asc"
);
$query = $db->simple_select("posts", "pid", "tid='".$post['tid']."'", $options);
$first_check = $db->fetch_array($query);
if($first_check['pid'] == $post['pid'])
{
$first_post = true;
}
else
{
$first_post = false;
}


		{
























			// If this is the first post there needs to be a subject, else make it the default one.

			// If this is the first post there needs to be a subject, else make it the default one.

			if(my_strlen($subject) == 0 && $first_post)

			if(my_strlen($subject) == 0 && $this->first_post)

			{
$this->set_error("firstpost_no_subject");
return false;

			{
$this->set_error("firstpost_no_subject");
return false;

Zeile 254Zeile 237
	/**
* Verifies a post message.
*

	/**
* Verifies a post message.
*

	 * @param string The message content.

	 * @return bool

	 */
function verify_message()
{

	 */
function verify_message()
{

		global $mybb;

		global $db, $mybb;


$post = &$this->data;
$post['message'] = trim_blank_chrs($post['message']);


$post = &$this->data;
$post['message'] = trim_blank_chrs($post['message']);





		// Do we even have a message at all?
if(my_strlen($post['message']) == 0)
{
$this->set_error("missing_message");
return false;
}

		// Do we even have a message at all?
if(my_strlen($post['message']) == 0)
{
$this->set_error("missing_message");
return false;
}


// If this board has a maximum message length check if we're over it. Use strlen because SQL limits are in bytes
else if(strlen($post['message']) > $mybb->settings['maxmessagelength'] && $mybb->settings['maxmessagelength'] > 0 && !is_moderator($post['fid'], "", $post['uid']))
{
$this->set_error("message_too_long", array($mybb->settings['maxmessagelength'], strlen($post['message'])));
return false;
}

// And if we've got a minimum message length do we meet that requirement too?

 
		else
{

		else
{

 
			$limit = (int)$mybb->settings['maxmessagelength'];
$dblimit = 0;

// If database is mysql or mysqli check field type and set max database limit
if(stripos($db->type, 'my') !== false)
{
$fields = $db->show_fields_from("posts");
$type = $fields[array_search('message', array_column($fields, 'Field'))]['Type'];
switch(strtolower($type))
{
case 'longtext':
$dblimit = 4294967295;
break;
case 'mediumtext':
$dblimit = 16777215;
break;
case 'text':
default:
$dblimit = 65535;
break;
}
}

if($limit > 0 || $dblimit > 0)
{
$is_moderator = is_moderator($post['fid'], "", $post['uid']);
// Consider minimum in user defined and database limit other than 0
if($limit > 0 && $dblimit > 0)
{
$limit = $is_moderator ? $dblimit : min($limit, $dblimit);
}
else
{
$limit = max($limit, $dblimit);
}

if(strlen($post['message']) > $limit && (!$is_moderator || $limit == $dblimit))
{
$this->set_error("message_too_long", array($limit, strlen($post['message'])));
return false;
}
}


			if(!isset($post['fid']))
{
$post['fid'] = 0;
}

			if(!isset($post['fid']))
{
$post['fid'] = 0;
}

 


			if(!$mybb->settings['mycodemessagelength'])
{
// Check to see of the text is full of MyCode

			if(!$mybb->settings['mycodemessagelength'])
{
// Check to see of the text is full of MyCode

Zeile 326Zeile 344
	/**
* Verify that the user is not flooding the system.
*

	/**
* Verify that the user is not flooding the system.
*

	* @return boolean True

	* @return boolean

	*/
function verify_post_flooding()
{

	*/
function verify_post_flooding()
{

Zeile 365Zeile 383
		return true;
}


		return true;
}


 
	/**
* @param bool $simple_mode
*
* @return array|bool
*/

	function verify_post_merge($simple_mode=false)
{
global $mybb, $db, $session;

	function verify_post_merge($simple_mode=false)
{
global $mybb, $db, $session;

Zeile 390Zeile 413
		}

// Check to see if this person is in a usergroup that is excluded

		}

// Check to see if this person is in a usergroup that is excluded

		if($mybb->settings['postmergeuignore'] == -1)
{
return true;
}
elseif($mybb->settings['postmergeuignore'] != '' && is_member($mybb->settings['postmergeuignore'], $post['uid']))

		if(is_member($mybb->settings['postmergeuignore'], $post['uid']))





		{
return true;
}

		{
return true;
}

Zeile 494Zeile 513
			else
{
$parser_options['allow_smilies'] = 0;

			else
{
$parser_options['allow_smilies'] = 0;

			}

$image_check = $parser->parse_message($post['message'], $parser_options);

			}

$image_check = $parser->parse_message($post['message'], $parser_options);


// And count the number of image tags in the message.
$image_count = substr_count($image_check, "<img");


// And count the number of image tags in the message.
$image_count = substr_count($image_check, "<img");

Zeile 507Zeile 526
				return false;
}
}

				return false;
}
}

 

return true;

	}

/**

	}

/**

Zeile 535Zeile 556
				return false;
}
}

				return false;
}
}

	}




return true;
}


/**
* Verify the reply-to post.


/**
* Verify the reply-to post.

Zeile 549Zeile 572

// Check if the post being replied to actually exists in this thread.
if($post['replyto'])


// Check if the post being replied to actually exists in this thread.
if($post['replyto'])

		{

		{

			$query = $db->simple_select("posts", "pid", "pid='".(int)$post['replyto']."'");
$valid_post = $db->fetch_array($query);
if(!$valid_post['pid'])
{
$post['replyto'] = 0;

			$query = $db->simple_select("posts", "pid", "pid='".(int)$post['replyto']."'");
$valid_post = $db->fetch_array($query);
if(!$valid_post['pid'])
{
$post['replyto'] = 0;

			}

			}

			else
{
return true;
}

			else
{
return true;
}

		}


		}


		// If this post isn't a reply to a specific post, attach it to the first post.
if(!$post['replyto'])
{

		// If this post isn't a reply to a specific post, attach it to the first post.
if(!$post['replyto'])
{

Zeile 574Zeile 597
			$query = $db->simple_select("posts", "pid", "tid='{$post['tid']}'", $options);
$reply_to = $db->fetch_array($query);
$post['replyto'] = $reply_to['pid'];

			$query = $db->simple_select("posts", "pid", "tid='{$post['tid']}'", $options);
$reply_to = $db->fetch_array($query);
$post['replyto'] = $reply_to['pid'];

		}

return true;

		}

return true;

	}

/**

	}

/**

Zeile 624Zeile 647
	function verify_prefix()
{
$prefix = &$this->data['prefix'];

	function verify_prefix()
{
$prefix = &$this->data['prefix'];


$prefix_cache = build_prefixes();

 

// If a valid prefix isn't supplied, don't assign one.
if(empty($prefix))


// If a valid prefix isn't supplied, don't assign one.
if(empty($prefix))

		{

		{

			$prefix = 0;
}
else
{

			$prefix = 0;
}
else
{

 
			if(!empty($this->data['tid']))
{
// Fetch the thread
$thread = get_thread($this->data['tid']);
}


			$prefix_cache = build_prefixes($prefix);

if(empty($prefix_cache))

			$prefix_cache = build_prefixes($prefix);

if(empty($prefix_cache))

Zeile 644Zeile 671
			if($prefix_cache['groups'] != "-1")
{
if(!empty($this->data['edit_uid']))

			if($prefix_cache['groups'] != "-1")
{
if(!empty($this->data['edit_uid']))

				{

				{

					// Post is being edited
$user = get_user($this->data['edit_uid']);

					// Post is being edited
$user = get_user($this->data['edit_uid']);

				}

				}

				else

				else

				{

				{

					$user = get_user($this->data['uid']);

					$user = get_user($this->data['uid']);

				}

if(!is_member($prefix_cache['groups'], array('usergroup' => $user['usergroup'], 'additionalgroups' => $user['additionalgroups'])))
{
$this->set_error('invalid_prefix');
return false;
}

				}

if(!is_member($prefix_cache['groups'], array('usergroup' => $user['usergroup'], 'additionalgroups' => $user['additionalgroups'])) && (empty($this->data['tid']) || $prefix != $thread['prefix']))
{
$this->set_error('invalid_prefix');
return false;
}

			}
if($prefix_cache['forums'] != "-1")
{
// Decide whether this prefix can be used in our forum
$forums = explode(",", $prefix_cache['forums']);


			}
if($prefix_cache['forums'] != "-1")
{
// Decide whether this prefix can be used in our forum
$forums = explode(",", $prefix_cache['forums']);


				if(!in_array($this->data['fid'], $forums))

				if(!in_array($this->data['fid'], $forums) && (empty($this->data['tid']) || $prefix != $thread['prefix']))

				{
$this->set_error('invalid_prefix');
return false;
}
}
}

				{
$this->set_error('invalid_prefix');
return false;
}
}
}





		// Does this forum require a prefix?
$forum = get_forum($this->data['fid']);


		// Does this forum require a prefix?
$forum = get_forum($this->data['fid']);


Zeile 684Zeile 711
			{
// Post is being edited
$user = get_user($this->data['edit_uid']);

			{
// Post is being edited
$user = get_user($this->data['edit_uid']);

			}

			}

			else

			else

			{

			{

				$user = get_user($this->data['uid']);
}

$prefix_cache = build_prefixes();

				$user = get_user($this->data['uid']);
}

$prefix_cache = build_prefixes();





			if(!empty($prefix_cache))
{
foreach($prefix_cache as $required)

			if(!empty($prefix_cache))
{
foreach($prefix_cache as $required)

Zeile 704Zeile 731
						if(!in_array($forum['fid'], $forums))
{
continue;

						if(!in_array($forum['fid'], $forums))
{
continue;

						}
}

if($required['groups'] != "-1")
{
if(!is_member($required['groups'], array('usergroup' => $user['usergroup'], 'additionalgroups' => $user['additionalgroups'])))
{
$num_prefixes = true;
}
}
else

						}
}

if(is_member($required['groups'], array('usergroup' => $user['usergroup'], 'additionalgroups' => $user['additionalgroups'])))








					{
$num_prefixes = true;
}
}

					{
$num_prefixes = true;
}
}

			}


			}


			if($prefix == 0 && $num_prefixes)
{
$this->set_error('require_prefix');
return false;
}
}

			if($prefix == 0 && $num_prefixes)
{
$this->set_error('require_prefix');
return false;
}
}





		return true;
}


		return true;
}


Zeile 739Zeile 759
	function validate_post()
{
global $mybb, $db, $plugins;

	function validate_post()
{
global $mybb, $db, $plugins;


$post = &$this->data;


$post = &$this->data;

		$time = TIME_NOW;

		$time = TIME_NOW;





		$this->action = "post";

		$this->action = "post";





		if($this->method != "update" && !$post['savedraft'])

		if($this->method != "update" && !$post['savedraft'])

		{

		{

			$this->verify_post_flooding();

			$this->verify_post_flooding();

 
		}

// Are we editing an existing thread or post?
if($this->method == "update")
{
if(empty($post['tid']))
{
$query = $db->simple_select("posts", "tid", "pid='".(int)$post['pid']."'");
$post['tid'] = $db->fetch_field($query, "tid");
}
// Here we determine if we're editing the first post of a thread or not.
$options = array(
"limit" => 1,
"limit_start" => 0,
"order_by" => "dateline",
"order_dir" => "asc"
);
$query = $db->simple_select("posts", "pid", "tid='".$post['tid']."'", $options);
$first_check = $db->fetch_array($query);
if($first_check['pid'] == $post['pid'])
{
$this->first_post = true;
}

		}

// Verify all post assets.

		}

// Verify all post assets.

Zeile 787Zeile 830
		if($this->method == "insert" || array_key_exists('options', $post))
{
$this->verify_options();

		if($this->method == "insert" || array_key_exists('options', $post))
{
$this->verify_options();

 
		}

if($this->method == "update" && $this->first_post)
{
$this->verify_prefix();

		}

$plugins->run_hooks("datahandler_post_validate_post", $this);

// We are done validating, return.
$this->set_validated(true);

		}

$plugins->run_hooks("datahandler_post_validate_post", $this);

// We are done validating, return.
$this->set_validated(true);

		if(count($this->get_errors()) > 0)

		if(count($this->get_errors()) > 0)

		{
return false;
}

		{
return false;
}

Zeile 839Zeile 887
		else
{
// Automatic subscription to the thread

		else
{
// Automatic subscription to the thread

			if($post['options']['subscriptionmethod'] != "" && $post['uid'] > 0)
{
switch($post['options']['subscriptionmethod'])
{
case "pm":
$notification = 2;
break;
case "email":
$notification = 1;
break;
default:
$notification = 0;
}


			if($post['uid'] > 0)
{













				require_once MYBB_ROOT."inc/functions_user.php";

				require_once MYBB_ROOT."inc/functions_user.php";

				add_subscribed_thread($post['tid'], $notification, $post['uid']);



















				if($post['options']['subscriptionmethod'] == "")
{
remove_subscribed_thread($post['tid'], $post['uid']);
}
else
{
switch($post['options']['subscriptionmethod'])
{
case "pm":
$notification = 2;
break;
case "email":
$notification = 1;
break;
default:
$notification = 0;
}
add_subscribed_thread($post['tid'], $notification, $post['uid']);
}

			}

			}





			// Perform any selected moderation tools.
$ismod = is_moderator($post['fid'], "", $post['uid']);

			// Perform any selected moderation tools.
$ismod = is_moderator($post['fid'], "", $post['uid']);

			if($ismod)

			if($ismod && isset($post['modoptions']))

			{
$lang->load($this->language_file, true);

			{
$lang->load($this->language_file, true);





				$modoptions = $post['modoptions'];
$modlogdata['fid'] = $thread['fid'];
$modlogdata['tid'] = $thread['tid'];


				$modoptions = $post['modoptions'];
$modlogdata['fid'] = $thread['fid'];
$modlogdata['tid'] = $thread['tid'];


				$newstick = $newclosed = '';

if(!isset($modoptions['closethread']))
{
$modoptions['closethread'] = 0;
}

				$modoptions_update = array();







// Close the thread.


// Close the thread.

				if($modoptions['closethread'] == 1 && $thread['closed'] != 1)

				if(!empty($modoptions['closethread']) && $thread['closed'] != 1 && is_moderator($post['fid'], "canopenclosethreads", $post['uid']))

				{

				{

					$newclosed = "closed=1";

					$modoptions_update['closed'] = $closed = 1;

					log_moderator_action($modlogdata, $lang->thread_closed);

					log_moderator_action($modlogdata, $lang->thread_closed);

					$closed = 1;

 
				}

// Open the thread.

				}

// Open the thread.

				if($modoptions['closethread'] != 1 && $thread['closed'] == 1)

				if(empty($modoptions['closethread']) && $thread['closed'] == 1 && is_moderator($post['fid'], "canopenclosethreads", $post['uid']))

				{

				{

					$newclosed = "closed=0";

					$modoptions_update['closed'] = $closed = 0;

					log_moderator_action($modlogdata, $lang->thread_opened);

					log_moderator_action($modlogdata, $lang->thread_opened);

					$closed = 0;

 
				}


				}


				if(!isset($modoptions['stickthread']))


				// Stick the thread.
if(!empty($modoptions['stickthread']) && $thread['sticky'] != 1 && is_moderator($post['fid'], "canstickunstickthreads", $post['uid']))

				{

				{

					$modoptions['stickthread'] = 0;
}

// Stick the thread.
if($modoptions['stickthread'] == 1 && $thread['sticky'] != 1)
{
$newstick = "sticky='1'";

					$modoptions_update['sticky'] = 1;







					log_moderator_action($modlogdata, $lang->thread_stuck);

					log_moderator_action($modlogdata, $lang->thread_stuck);

				}


				}


				// Unstick the thread.

				// Unstick the thread.

				if($modoptions['stickthread'] != 1 && $thread['sticky'])
{
$newstick = "sticky='0'";

				if(empty($modoptions['stickthread']) && $thread['sticky'] == 1 && is_moderator($post['fid'], "canstickunstickthreads", $post['uid']))
{
$modoptions_update['sticky'] = 0;

					log_moderator_action($modlogdata, $lang->thread_unstuck);

					log_moderator_action($modlogdata, $lang->thread_unstuck);

				}

				}


// Execute moderation options.


// Execute moderation options.

				if($newstick && $newclosed)

				if($modoptions_update)

				{

				{

					$sep = ",";
}
else
{
$sep = '';
}
if($newstick || $newclosed)
{
$db->write_query("
UPDATE ".TABLE_PREFIX."threads
SET {$newclosed}{$sep}{$newstick}
WHERE tid='{$thread['tid']}'
");

					$db->update_query('threads', $modoptions_update, "tid='{$thread['tid']}'");













				}

				}

			}

			}


// Fetch the forum this post is being made in
$forum = get_forum($post['fid']);


// Fetch the forum this post is being made in
$forum = get_forum($post['fid']);





			// Decide on the visibility of this post.
$forumpermissions = forum_permissions($post['fid'], $post['uid']);
if($forumpermissions['modposts'] == 1 && !$ismod)
{

			// Decide on the visibility of this post.
$forumpermissions = forum_permissions($post['fid'], $post['uid']);
if($forumpermissions['modposts'] == 1 && !$ismod)
{

				$visible = 0;
}
else
{
$visible = 1;

				$visible = 0;
}
else
{
$visible = 1;

			}

// Are posts from this user being moderated? Change visibility

			}

// Are posts from this user being moderated? Change visibility

Zeile 952Zeile 982
		if(!isset($post['pid']))
{
$post['pid'] = 0;

		if(!isset($post['pid']))
{
$post['pid'] = 0;

		}

		}


$post['pid'] = (int)$post['pid'];
$post['uid'] = (int)$post['uid'];


$post['pid'] = (int)$post['pid'];
$post['uid'] = (int)$post['uid'];





		if($post['pid'] > 0)
{
$query = $db->simple_select("posts", "tid", "pid='{$post['pid']}' AND uid='{$post['uid']}' AND visible='-2'");
$draft_check = $db->fetch_field($query, "tid");
}
else

		if($post['pid'] > 0)
{
$query = $db->simple_select("posts", "tid", "pid='{$post['pid']}' AND uid='{$post['uid']}' AND visible='-2'");
$draft_check = $db->fetch_field($query, "tid");
}
else

		{

		{

			$draft_check = false;
}

			$draft_check = false;
}





		if($this->method != "update" && $visible == 1)
{
$double_post = $this->verify_post_merge();

		if($this->method != "update" && $visible == 1)
{
$double_post = $this->verify_post_merge();

Zeile 979Zeile 1009
				$post['message'] = $double_post['message'] .= "\n".$mybb->settings['postmergesep']."\n".$post['message'];
$update_query = array(
"message" => $db->escape_string($double_post['message'])

				$post['message'] = $double_post['message'] .= "\n".$mybb->settings['postmergesep']."\n".$post['message'];
$update_query = array(
"message" => $db->escape_string($double_post['message'])

				);

				);

				$update_query['edituid'] = (int)$post['uid'];
$update_query['edittime'] = TIME_NOW;

				$update_query['edituid'] = (int)$post['uid'];
$update_query['edittime'] = TIME_NOW;

				$query = $db->update_query("posts", $update_query, "pid='".$double_post['pid']."'");

				$db->update_query("posts", $update_query, "pid='".$double_post['pid']."'");


if($draft_check)
{


if($draft_check)
{

Zeile 1023Zeile 1053
			}
}


			}
}


		if($visible == 1 && $thread['visible'] == 1)

		if($visible == 1)

		{
$now = TIME_NOW;


		{
$now = TIME_NOW;


Zeile 1031Zeile 1061
			$update_array = array(
'lastpost' => "'{$now}'"
);

			$update_array = array(
'lastpost' => "'{$now}'"
);

			if($forum['usepostcounts'] != 0)

			if($forum['usepostcounts'] != 0 && $thread['visible'] == 1)

			{
$update_array['postnum'] = 'postnum+1';
}

			{
$update_array['postnum'] = 'postnum+1';
}

Zeile 1099Zeile 1129
		$thread_update = array();
if($visible == 1 && $thread['visible'] == 1)
{

		$thread_update = array();
if($visible == 1 && $thread['visible'] == 1)
{

			$thread = get_thread($post['tid']);

 
			require_once MYBB_ROOT.'inc/class_parser.php';
$parser = new Postparser;

$done_users = array();

$subject = $parser->parse_badwords($thread['subject']);

			require_once MYBB_ROOT.'inc/class_parser.php';
$parser = new Postparser;

$done_users = array();

$subject = $parser->parse_badwords($thread['subject']);

			$excerpt = $parser->text_parse_message($post['message'], array('me_username' => $post['username'], 'filter_badwords' => 1, 'safe_html' => 1));








$parser_options = array(
'me_username' => $post['username'],
'filter_badwords' => 1
);

$excerpt = $parser->text_parse_message($post['message'], $parser_options);

			$excerpt = my_substr($excerpt, 0, $mybb->settings['subscribeexcerpt']).$lang->emailbit_viewthread;

// Fetch any users subscribed to this thread receiving instant notification and queue up their subscription notices
$query = $db->query("

			$excerpt = my_substr($excerpt, 0, $mybb->settings['subscribeexcerpt']).$lang->emailbit_viewthread;

// Fetch any users subscribed to this thread receiving instant notification and queue up their subscription notices
$query = $db->query("

				SELECT u.username, u.email, u.uid, u.language, u.loginkey, u.salt, u.regdate, s.subscriptionkey, s.notification

				SELECT u.username, u.email, u.uid, u.language, u.loginkey, u.salt, u.regdate, s.notification

				FROM ".TABLE_PREFIX."threadsubscriptions s
LEFT JOIN ".TABLE_PREFIX."users u ON (u.uid=s.uid)
WHERE (s.notification='1' OR s.notification='2') AND s.tid='{$post['tid']}'
AND s.uid != '{$post['uid']}'
AND u.lastactive>'{$thread['lastpost']}'
");

				FROM ".TABLE_PREFIX."threadsubscriptions s
LEFT JOIN ".TABLE_PREFIX."users u ON (u.uid=s.uid)
WHERE (s.notification='1' OR s.notification='2') AND s.tid='{$post['tid']}'
AND s.uid != '{$post['uid']}'
AND u.lastactive>'{$thread['lastpost']}'
");

 

$args = array(
'this' => &$this,
'done_users' => &$done_users,
'users' => array()
);


			while($subscribedmember = $db->fetch_array($query))
{
if($done_users[$subscribedmember['uid']])
{
continue;
}

			while($subscribedmember = $db->fetch_array($query))
{
if($done_users[$subscribedmember['uid']])
{
continue;
}

 

$args['users'][$subscribedmember['uid']] = (int)$subscribedmember['uid'];


				$done_users[$subscribedmember['uid']] = 1;

$forumpermissions = forum_permissions($thread['fid'], $subscribedmember['uid']);

				$done_users[$subscribedmember['uid']] = 1;

$forumpermissions = forum_permissions($thread['fid'], $subscribedmember['uid']);

Zeile 1157Zeile 1202
					{
$emailsubject = $lang->emailsubject_subscription;
$emailmessage = $lang->email_subscription;

					{
$emailsubject = $lang->emailsubject_subscription;
$emailmessage = $lang->email_subscription;

 
					}

// If the poster is unregistered and hasn't set a username, call them Guest
if(!$post['uid'] && !$post['username'])
{
$post['username'] = htmlspecialchars_uni($lang->guest);

					}
}
else
{

					}
}
else
{

					if($subscribedmember['notification'] == 1)



if(($subscribedmember['notification'] == 1 && !isset($langcache[$uselang]['emailsubject_subscription'])) || !isset($langcache[$uselang]['guest']))

					{

					{

						if(!isset($langcache[$uselang]['emailsubject_subscription']))




						$userlang = new MyLanguage;
$userlang->set_path(MYBB_ROOT."inc/languages");
$userlang->set_language($uselang);
if($subscribedmember['notification'] == 1)

						{

						{

							$userlang = new MyLanguage;
$userlang->set_path(MYBB_ROOT."inc/languages");
$userlang->set_language($uselang);

 
							$userlang->load("messages");
$langcache[$uselang]['emailsubject_subscription'] = $userlang->emailsubject_subscription;
$langcache[$uselang]['email_subscription'] = $userlang->email_subscription;

							$userlang->load("messages");
$langcache[$uselang]['emailsubject_subscription'] = $userlang->emailsubject_subscription;
$langcache[$uselang]['email_subscription'] = $userlang->email_subscription;

							unset($userlang);

 
						}

						}

 
						$userlang->load("global");

$langcache[$uselang]['guest'] = $userlang->guest;
unset($userlang);
}
if($subscribedmember['notification'] == 1)
{

						$emailsubject = $langcache[$uselang]['emailsubject_subscription'];
$emailmessage = $langcache[$uselang]['email_subscription'];

						$emailsubject = $langcache[$uselang]['emailsubject_subscription'];
$emailmessage = $langcache[$uselang]['email_subscription'];

 
					}

// If the poster is unregistered and hasn't set a username, call them Guest
if(!$post['uid'] && !$post['username'])
{
$post['username'] = $langcache[$uselang]['guest'];

					}
}


					}
}


Zeile 1183Zeile 1247
					$emailsubject = $lang->sprintf($emailsubject, $subject);

$post_code = md5($subscribedmember['loginkey'].$subscribedmember['salt'].$subscribedmember['regdate']);

					$emailsubject = $lang->sprintf($emailsubject, $subject);

$post_code = md5($subscribedmember['loginkey'].$subscribedmember['salt'].$subscribedmember['regdate']);

					$emailmessage = $lang->sprintf($emailmessage, $subscribedmember['username'], $post['username'], $mybb->settings['bbname'], $subject, $excerpt, $mybb->settings['bburl'], str_replace("&amp;", "&", get_thread_link($thread['tid'], 0, "newpost")), $thread['tid'], $subscribedmember['subscriptionkey'], $post_code);

					$emailmessage = $lang->sprintf($emailmessage, $subscribedmember['username'], $post['username'], $mybb->settings['bbname'], $subject, $excerpt, $mybb->settings['bburl'], str_replace("&amp;", "&", get_thread_link($thread['tid'], 0, "newpost")), $thread['tid'], $post_code);

					$new_email = array(
"mailto" => $db->escape_string($subscribedmember['email']),
"mailfrom" => '',

					$new_email = array(
"mailto" => $db->escape_string($subscribedmember['email']),
"mailfrom" => '',

Zeile 1200Zeile 1264
					$post_code = md5($subscribedmember['loginkey'].$subscribedmember['salt'].$subscribedmember['regdate']);
$pm = array(
'subject' => array('pmsubject_subscription', $subject),

					$post_code = md5($subscribedmember['loginkey'].$subscribedmember['salt'].$subscribedmember['regdate']);
$pm = array(
'subject' => array('pmsubject_subscription', $subject),

						'message' => array('pm_subscription', $subscribedmember['username'], $post['username'], $subject, $excerpt, $mybb->settings['bburl'], str_replace("&amp;", "&", get_thread_link($thread['tid'], 0, "newpost")), $thread['tid'], $subscribedmember['subscriptionkey'], $post_code),

						'message' => array('pm_subscription', $subscribedmember['username'], $post['username'], $subject, $excerpt, $mybb->settings['bburl'], str_replace("&amp;", "&", get_thread_link($thread['tid'], 0, "newpost")), $thread['tid'], $post_code),

						'touid' => $subscribedmember['uid'],
'language' => $subscribedmember['language'],
'language_file' => 'messages'

						'touid' => $subscribedmember['uid'],
'language' => $subscribedmember['language'],
'language_file' => 'messages'

Zeile 1208Zeile 1272
					send_pm($pm, -1, true);
}
}

					send_pm($pm, -1, true);
}
}

 

$plugins->run_hooks('datahandler_post_insert_subscribed', $args);


			// Have one or more emails been queued? Update the queue count
if(isset($queued_email) && $queued_email == 1)
{

			// Have one or more emails been queued? Update the queue count
if(isset($queued_email) && $queued_email == 1)
{

Zeile 1216Zeile 1283

$thread_update = array('replies' => '+1');



$thread_update = array('replies' => '+1');


			// Update forum count

			// Update counters

			update_last_post($post['tid']);
update_forum_counters($post['fid'], array("posts" => "+1"));
update_forum_lastpost($thread['fid']);

			update_last_post($post['tid']);
update_forum_counters($post['fid'], array("posts" => "+1"));
update_forum_lastpost($thread['fid']);

Zeile 1240Zeile 1307
			// Update the unapproved posts count for the current forum
$thread_update = array('replies' => '+1');
update_forum_counters($post['fid'], array("deletedposts" => "+1"));

			// Update the unapproved posts count for the current forum
$thread_update = array('replies' => '+1');
update_forum_counters($post['fid'], array("deletedposts" => "+1"));

 
		}

// Update last poster
if($visible == 1 && $thread['visible'] != 1)
{
update_last_post($post['tid']);

		}

$query = $db->simple_select("attachments", "COUNT(aid) AS attachmentcount", "pid='{$this->pid}' AND visible='1'");

		}

$query = $db->simple_select("attachments", "COUNT(aid) AS attachmentcount", "pid='{$this->pid}' AND visible='1'");

Zeile 1278Zeile 1351
		if(!$thread['savedraft'])
{
$this->verify_post_flooding();

		if(!$thread['savedraft'])
{
$this->verify_post_flooding();

		}


		}


		if($this->method == "insert" || array_key_exists('uid', $thread))
{
$this->verify_author();

		if($this->method == "insert" || array_key_exists('uid', $thread))
{
$this->verify_author();

		}

		}


if($this->method == "insert" || array_key_exists('prefix', $thread))


if($this->method == "insert" || array_key_exists('prefix', $thread))

		{

		{

			$this->verify_prefix();

			$this->verify_prefix();

		}


		}


		if($this->method == "insert" || array_key_exists('subject', $thread))
{
$this->verify_subject();
}

if($this->method == "insert" || array_key_exists('message', $thread))

		if($this->method == "insert" || array_key_exists('subject', $thread))
{
$this->verify_subject();
}

if($this->method == "insert" || array_key_exists('message', $thread))

		{

		{

			$this->verify_message();
$this->verify_image_count();
$this->verify_video_count();

			$this->verify_message();
$this->verify_image_count();
$this->verify_video_count();

Zeile 1305Zeile 1378
		if($this->method == "insert" || array_key_exists('dateline', $thread))
{
$this->verify_dateline();

		if($this->method == "insert" || array_key_exists('dateline', $thread))
{
$this->verify_dateline();

		}

		}


if($this->method == "insert" || array_key_exists('icon', $thread))
{


if($this->method == "insert" || array_key_exists('icon', $thread))
{

Zeile 1384Zeile 1457

// Have a post ID but not a thread ID - fetch thread ID
if(!empty($thread['pid']) && !$thread['tid'])


// Have a post ID but not a thread ID - fetch thread ID
if(!empty($thread['pid']) && !$thread['tid'])

		{

		{

			$query = $db->simple_select("posts", "tid", "pid='{$thread['pid']}");
$thread['tid'] = $db->fetch_field($query, "tid");

			$query = $db->simple_select("posts", "tid", "pid='{$thread['pid']}");
$thread['tid'] = $db->fetch_field($query, "tid");

		}


		}


		if(isset($thread['pid']) && $thread['pid'] > 0)

		if(isset($thread['pid']) && $thread['pid'] > 0)

		{

		{

			$query = $db->simple_select("posts", "pid", "pid='{$thread['pid']}' AND uid='{$thread['uid']}' AND visible='-2'");
$draft_check = $db->fetch_field($query, "pid");
}

			$query = $db->simple_select("posts", "pid", "pid='{$thread['pid']}' AND uid='{$thread['uid']}' AND visible='-2'");
$draft_check = $db->fetch_field($query, "pid");
}

Zeile 1401Zeile 1474

// Are we updating a post which is already a draft? Perhaps changing it into a visible post?
if($draft_check)


// Are we updating a post which is already a draft? Perhaps changing it into a visible post?
if($draft_check)

		{
$this->thread_insert_data = array(
"subject" => $db->escape_string($thread['subject']),
"icon" => (int)$thread['icon'],
"username" => $db->escape_string($thread['username']),
"dateline" => (int)$thread['dateline'],
"lastpost" => (int)$thread['dateline'],

		{
$this->thread_insert_data = array(
"subject" => $db->escape_string($thread['subject']),
"icon" => (int)$thread['icon'],
"username" => $db->escape_string($thread['username']),
"dateline" => (int)$thread['dateline'],
"lastpost" => (int)$thread['dateline'],

				"lastposter" => $db->escape_string($thread['username']),
"visible" => $visible
);

				"lastposter" => $db->escape_string($thread['username']),
"visible" => $visible
);

Zeile 1447Zeile 1520
				"dateline" => (int)$thread['dateline'],
"lastpost" => (int)$thread['dateline'],
"lastposter" => $db->escape_string($thread['username']),

				"dateline" => (int)$thread['dateline'],
"lastpost" => (int)$thread['dateline'],
"lastposter" => $db->escape_string($thread['username']),

 
				"lastposteruid" => $thread['uid'],

				"views" => 0,
"replies" => 0,
"visible" => $visible,
"notes" => ''

				"views" => 0,
"replies" => 0,
"visible" => $visible,
"notes" => ''

			);

$plugins->run_hooks("datahandler_post_insert_thread", $this);


			);

$plugins->run_hooks("datahandler_post_insert_thread", $this);


			$this->tid = $db->insert_query("threads", $this->thread_insert_data);

$this->post_insert_data = array(

			$this->tid = $db->insert_query("threads", $this->thread_insert_data);

$this->post_insert_data = array(

Zeile 1502Zeile 1576
			}

// Perform any selected moderation tools.

			}

// Perform any selected moderation tools.

			if(is_moderator($thread['fid'], "", $thread['uid']) && is_array($thread['modoptions']))

			if(is_moderator($thread['fid'], "", $thread['uid']) && isset($thread['modoptions']))

			{
$lang->load($this->language_file, true);


			{
$lang->load($this->language_file, true);


Zeile 1513Zeile 1587
					$modlogdata['tid'] = $thread['tid'];
}


					$modlogdata['tid'] = $thread['tid'];
}


				$newclosed = $newstick = '';

				$modoptions_update = array();


// Close the thread.


// Close the thread.

				if(isset($modoptions['closethread']) && $modoptions['closethread'] == 1)

				if(!empty($modoptions['closethread']) && is_moderator($thread['fid'], "canopenclosethreads", $thread['uid']))

				{

				{

					$newclosed = "closed=1";

					$modoptions_update['closed'] = 1;

					log_moderator_action($modlogdata, $lang->thread_closed);
}

// Stick the thread.

					log_moderator_action($modlogdata, $lang->thread_closed);
}

// Stick the thread.

				if(isset($modoptions['stickthread']) && $modoptions['stickthread'] == 1)

				if(!empty($modoptions['stickthread']) && is_moderator($thread['fid'], "canstickunstickthreads", $thread['uid']))

				{

				{

					$newstick = "sticky='1'";

					$modoptions_update['sticky'] = 1;

					log_moderator_action($modlogdata, $lang->thread_stuck);
}

// Execute moderation options.

					log_moderator_action($modlogdata, $lang->thread_stuck);
}

// Execute moderation options.

				if($newstick && $newclosed)
{
$sep = ",";
}
else
{
$sep = '';
}
if($newstick || $newclosed)
{
$db->write_query("
UPDATE ".TABLE_PREFIX."threads
SET $newclosed$sep$newstick
WHERE tid='{$this->tid}'
");

				if($modoptions_update)
{
$db->update_query('threads', $modoptions_update, "tid='{$this->tid}'");













				}
}
if($visible == 1)

				}
}
if($visible == 1)

Zeile 1556Zeile 1618
					$update_query = array();
// Only update the lastpost column of the user if the date of the thread is newer than their last post.
if($thread['dateline'] > $user['lastpost'])

					$update_query = array();
// Only update the lastpost column of the user if the date of the thread is newer than their last post.
if($thread['dateline'] > $user['lastpost'])

					{

					{

						// Yes this has a single quote within a double quote. It's not a bug.
$update_query['lastpost'] = "'{$thread['dateline']}'";

						// Yes this has a single quote within a double quote. It's not a bug.
$update_query['lastpost'] = "'{$thread['dateline']}'";

					}

					}

					// Update the post count if this forum allows post counts to be tracked
if($forum['usepostcounts'] != 0)

					// Update the post count if this forum allows post counts to be tracked
if($forum['usepostcounts'] != 0)

					{

					{

						$update_query['postnum'] = "postnum+1";
}
if($forum['usethreadcounts'] != 0)
{
$update_query['threadnum'] = 'threadnum+1';

						$update_query['postnum'] = "postnum+1";
}
if($forum['usethreadcounts'] != 0)
{
$update_query['threadnum'] = 'threadnum+1';

					}

					}


// Only update the table if we need to.
if(!empty($update_query))
{
$db->update_query("users", $update_query, "uid='{$thread['uid']}'", 1, true);
}


// Only update the table if we need to.
if(!empty($update_query))
{
$db->update_query("users", $update_query, "uid='{$thread['uid']}'", 1, true);
}

				}


				}


				if(!isset($forum['lastpost']))
{
$forum['lastpost'] = 0;

				if(!isset($forum['lastpost']))
{
$forum['lastpost'] = 0;

Zeile 1585Zeile 1647
				$done_users = array();

// Queue up any forum subscription notices to users who are subscribed to this forum.

				$done_users = array();

// Queue up any forum subscription notices to users who are subscribed to this forum.

				$excerpt = my_substr($thread['message'], 0, $mybb->settings['subscribeexcerpt']).$lang->emailbit_viewthread;

				$excerpt = $thread['message'];


// Parse badwords
require_once MYBB_ROOT."inc/class_parser.php";
$parser = new postParser;
$excerpt = $parser->parse_badwords($excerpt);


// Parse badwords
require_once MYBB_ROOT."inc/class_parser.php";
$parser = new postParser;
$excerpt = $parser->parse_badwords($excerpt);







				$excerpt = $parser->text_parse_message($excerpt);
if(strlen($excerpt) > $mybb->settings['subscribeexcerpt'])
{
$excerpt = my_substr($excerpt, 0, $mybb->settings['subscribeexcerpt']).$lang->emailbit_viewthread;
}

				$query = $db->query("
SELECT u.username, u.email, u.uid, u.language, u.loginkey, u.salt, u.regdate
FROM ".TABLE_PREFIX."forumsubscriptions fs

				$query = $db->query("
SELECT u.username, u.email, u.uid, u.language, u.loginkey, u.salt, u.regdate
FROM ".TABLE_PREFIX."forumsubscriptions fs

Zeile 1640Zeile 1706
					{
$emailsubject = $lang->emailsubject_forumsubscription;
$emailmessage = $lang->email_forumsubscription;

					{
$emailsubject = $lang->emailsubject_forumsubscription;
$emailmessage = $lang->email_forumsubscription;

 

// If the poster is unregistered and hasn't set a username, call them Guest
if(!$thread['uid'] && !$thread['username'])
{
$thread['username'] = htmlspecialchars_uni($lang->guest);
}

					}
else
{

					}
else
{

Zeile 1649Zeile 1721
							$userlang->set_path(MYBB_ROOT."inc/languages");
$userlang->set_language($uselang);
$userlang->load("messages");

							$userlang->set_path(MYBB_ROOT."inc/languages");
$userlang->set_language($uselang);
$userlang->load("messages");

 
							$userlang->load("global");

							$langcache[$uselang]['emailsubject_forumsubscription'] = $userlang->emailsubject_forumsubscription;
$langcache[$uselang]['email_forumsubscription'] = $userlang->email_forumsubscription;

							$langcache[$uselang]['emailsubject_forumsubscription'] = $userlang->emailsubject_forumsubscription;
$langcache[$uselang]['email_forumsubscription'] = $userlang->email_forumsubscription;

 
							$langcache[$uselang]['guest'] = $userlang->guest;

							unset($userlang);
}
$emailsubject = $langcache[$uselang]['emailsubject_forumsubscription'];
$emailmessage = $langcache[$uselang]['email_forumsubscription'];

							unset($userlang);
}
$emailsubject = $langcache[$uselang]['emailsubject_forumsubscription'];
$emailmessage = $langcache[$uselang]['email_forumsubscription'];

 

// If the poster is unregistered and hasn't set a username, call them Guest
if(!$thread['uid'] && !$thread['username'])
{
$thread['username'] = $langcache[$uselang]['guest'];
}

					}
$emailsubject = $lang->sprintf($emailsubject, $forum['name']);


					}
$emailsubject = $lang->sprintf($emailsubject, $forum['name']);


Zeile 1723Zeile 1803
	/**
* Updates a post that is already in the database.
*

	/**
* Updates a post that is already in the database.
*

 
	 * @return array

	 */
function update_post()
{

	 */
function update_post()
{

Zeile 1748Zeile 1829

$forum = get_forum($post['fid']);
$forumpermissions = forum_permissions($post['fid'], $post['uid']);


$forum = get_forum($post['fid']);
$forumpermissions = forum_permissions($post['fid'], $post['uid']);


// Check if this is the first post in a thread.
$options = array(
"order_by" => "dateline",
"order_dir" => "asc",
"limit_start" => 0,
"limit" => 1
);
$query = $db->simple_select("posts", "pid", "tid='".(int)$post['tid']."'", $options);
$first_post_check = $db->fetch_array($query);
if($first_post_check['pid'] == $post['pid'])
{
$first_post = true;
}
else
{
$first_post = false;
}

 

// Decide on the visibility of this post.
$ismod = is_moderator($post['fid'], "", $post['uid']);


// Decide on the visibility of this post.
$ismod = is_moderator($post['fid'], "", $post['uid']);

Zeile 1792Zeile 1855
		}

// Update the thread details that might have been changed first.

		}

// Update the thread details that might have been changed first.

		if($first_post)

		if($this->first_post)

		{
$this->tid = $post['tid'];


		{
$this->tid = $post['tid'];


Zeile 1835Zeile 1898
		if(isset($post['editreason']) && trim($post['editreason']) != '')
{
$this->post_update_data['editreason'] = $db->escape_string(trim($post['editreason']));

		if(isset($post['editreason']) && trim($post['editreason']) != '')
{
$this->post_update_data['editreason'] = $db->escape_string(trim($post['editreason']));

 
		}
elseif($post['editreason'] == '')
{
$this->post_update_data['editreason'] = '';

		}

if(isset($post['icon']))

		}

if(isset($post['icon']))

Zeile 1893Zeile 1960
		// Return the thread's first post id and whether or not it is visible.
$this->return_values = array(
'visible' => $visible,

		// Return the thread's first post id and whether or not it is visible.
$this->return_values = array(
'visible' => $visible,

			'first_post' => $first_post

			'first_post' => $this->first_post

		);

$plugins->run_hooks("datahandler_post_update_end", $this);

		);

$plugins->run_hooks("datahandler_post_update_end", $this);