Vergleich editpost.php - 1.8.8 - 1.8.21

Keine Änderungen Hinzugefügt Modifiziert Entfernt
Zeile 11	Zeile 11
define("IN_MYBB", 1); define('THIS_SCRIPT', 'editpost.php');	define("IN_MYBB", 1); define('THIS_SCRIPT', 'editpost.php');
$templatelist = "editpost,previewpost,changeuserbox,codebuttons,post_attachments_attachment_postinsert,post_attachments_attachment_mod_unapprove,postbit_attachments_thumbnails,posticons"; $templatelist .= ",editpost_delete,forumdisplay_password_wrongpass,forumdisplay_password,editpost_reason,post_attachments_attachment_remove,post_attachments_update,post_subscription_method"; $templatelist .= ",postbit_avatar,postbit_find,postbit_pm,postbit_rep_button,postbit_www,postbit_email,postbit_reputation,postbit_warn,postbit_warninglevel,postbit_author_user,error_attacherror";	$templatelist = "editpost,previewpost,changeuserbox,codebuttons,post_attachments_attachment_postinsert,post_attachments_attachment_mod_unapprove,postbit_attachments_thumbnails,postbit_profilefield_multiselect_value"; $templatelist .= ",editpost_delete,forumdisplay_password_wrongpass,forumdisplay_password,editpost_reason,post_attachments_attachment_remove,post_attachments_update,post_subscription_method,postbit_profilefield_multiselect"; $templatelist .= ",postbit_avatar,postbit_find,postbit_pm,postbit_rep_button,postbit_www,postbit_email,postbit_reputation,postbit_warn,postbit_warninglevel,postbit_author_user,posticons";
$templatelist .= ",postbit_signature,postbit_classic,postbit,postbit_attachments_thumbnails_thumbnail,postbit_attachments_images_image,postbit_attachments_attachment,postbit_attachments_attachment_unapproved"; $templatelist .= ",posticons_icon,post_prefixselect_prefix,post_prefixselect_single,newthread_postpoll,editpost_disablesmilies,post_attachments_attachment_mod_approve,post_attachments_attachment_unapproved";	$templatelist .= ",postbit_signature,postbit_classic,postbit,postbit_attachments_thumbnails_thumbnail,postbit_attachments_images_image,postbit_attachments_attachment,postbit_attachments_attachment_unapproved"; $templatelist .= ",posticons_icon,post_prefixselect_prefix,post_prefixselect_single,newthread_postpoll,editpost_disablesmilies,post_attachments_attachment_mod_approve,post_attachments_attachment_unapproved";
$templatelist .= ",postbit_warninglevel_formatted,postbit_reputation_formatted_link,editpost_disablesmilies_hidden,attachment_icon,post_attachments_attachment,post_attachments_add,post_attachments";	$templatelist .= ",postbit_warninglevel_formatted,postbit_reputation_formatted_link,editpost_signature,attachment_icon,post_attachments_attachment,post_attachments_add,post_attachments,editpost_postoptions";
$templatelist .= ",postbit_attachments_images,global_moderation_notice,post_attachments_new,postbit_attachments,postbit_online,postbit_away,postbit_offline,postbit_gotopost,postbit_userstar,postbit_icon"; require_once "./global.php";	$templatelist .= ",postbit_attachments_images,global_moderation_notice,post_attachments_new,postbit_attachments,postbit_online,postbit_away,postbit_offline,postbit_gotopost,postbit_userstar,postbit_icon"; require_once "./global.php";
Zeile 49	Zeile 49
$post = get_post($pid); }	$post = get_post($pid); }
if(!$post)	if(!$post \|\| ($post['visible'] == -1 && $mybb->input['action'] != "restorepost"))
{ error($lang->error_invalidpost); }	{ error($lang->error_invalidpost); }
Zeile 71	Zeile 71
if($thread['visible'] == 0 && !is_moderator($fid, "canviewunapprove") \|\| $thread['visible'] == -1 && !is_moderator($fid, "canviewdeleted") \|\| ($thread['visible'] < -1 && $thread['uid'] != $mybb->user['uid'])) {	if($thread['visible'] == 0 && !is_moderator($fid, "canviewunapprove") \|\| $thread['visible'] == -1 && !is_moderator($fid, "canviewdeleted") \|\| ($thread['visible'] < -1 && $thread['uid'] != $mybb->user['uid'])) {
error($lang->error_invalidthread);	if($thread['visible'] == 0 && !($mybb->settings['showownunapproved'] && $thread['uid'] == $mybb->user['uid'])) { error($lang->error_invalidthread); }
} if(!$forum \|\| $forum['type'] != "f") {	} if(!$forum \|\| $forum['type'] != "f") {
Zeile 107	Zeile 110
if($mybb->settings['smilieinserter'] != 0) { $smilieinserter = build_clickable_smilies();	if($mybb->settings['smilieinserter'] != 0) { $smilieinserter = build_clickable_smilies();
}	}
$mybb->input['action'] = $mybb->get_input('action'); if(!$mybb->input['action'] \|\| isset($mybb->input['previewpost']))	$mybb->input['action'] = $mybb->get_input('action'); if(!$mybb->input['action'] \|\| isset($mybb->input['previewpost']))
{	{
$mybb->input['action'] = "editpost"; } if($mybb->input['action'] == "deletepost" && $mybb->request_method == "post") { if(!is_moderator($fid, "candeleteposts") && !is_moderator($fid, "cansoftdeleteposts") && $pid != $thread['firstpost'] \|\| !is_moderator($fid, "candeletethreads") && !is_moderator($fid, "cansoftdeletethreads") && $pid == $thread['firstpost'])	$mybb->input['action'] = "editpost"; } if($mybb->input['action'] == "deletepost" && $mybb->request_method == "post") { if(!is_moderator($fid, "candeleteposts") && !is_moderator($fid, "cansoftdeleteposts") && $pid != $thread['firstpost'] \|\| !is_moderator($fid, "candeletethreads") && !is_moderator($fid, "cansoftdeletethreads") && $pid == $thread['firstpost'])
{ if($thread['closed'] == 1) {	{ if($thread['closed'] == 1) {
error($lang->redirect_threadclosed);	error($lang->redirect_threadclosed);
}	}
if($forumpermissions['candeleteposts'] == 0 && $pid != $thread['firstpost'] \|\| $forumpermissions['candeletethreads'] == 0 && $pid == $thread['firstpost'])	if($forumpermissions['candeleteposts'] == 0 && $pid != $thread['firstpost'] \|\| $forumpermissions['candeletethreads'] == 0 && $pid == $thread['firstpost'])
{ error_no_permission(); } if($mybb->user['uid'] != $post['uid']) { error_no_permission(); } // User can't delete unapproved post if($post['visible'] == 0) { error_no_permission(); }	{ error_no_permission(); } if($mybb->user['uid'] != $post['uid']) { error_no_permission(); } // User can't delete unapproved post unless allowed for own if($post['visible'] == 0 && !($mybb->settings['showownunapproved'] && $post['uid'] == $mybb->user['uid'])) { error_no_permission(); }
} if($post['visible'] == -1 && $mybb->settings['soft_delete'] == 1) {	} if($post['visible'] == -1 && $mybb->settings['soft_delete'] == 1) {
Zeile 159	Zeile 162
} if($forumpermissions['caneditposts'] == 0) {	} if($forumpermissions['caneditposts'] == 0) {
error_no_permission(); } if($mybb->user['uid'] != $post['uid']) {	error_no_permission(); } if($mybb->user['uid'] != $post['uid']) {
error_no_permission(); } // Edit time limit $time = TIME_NOW; if($mybb->usergroup['edittimelimit'] != 0 && $post['dateline'] < ($time-($mybb->usergroup['edittimelimit']*60)))	error_no_permission(); } // Edit time limit $time = TIME_NOW; if($mybb->usergroup['edittimelimit'] != 0 && $post['dateline'] < ($time-($mybb->usergroup['edittimelimit']*60)))
{	{
$lang->edit_time_limit = $lang->sprintf($lang->edit_time_limit, $mybb->usergroup['edittimelimit']); error($lang->edit_time_limit); } // User can't edit unapproved post	$lang->edit_time_limit = $lang->sprintf($lang->edit_time_limit, $mybb->usergroup['edittimelimit']); error($lang->edit_time_limit); } // User can't edit unapproved post
if($post['visible'] == 0 \|\| $post['visible'] == -1) {	if(($post['visible'] == 0 && !($mybb->settings['showownunapproved'] && $post['uid'] == $mybb->user['uid'])) \|\| $post['visible'] == -1) {
error_no_permission(); } }	error_no_permission(); } }
}	}
// Check if this forum is password protected and we have a valid password check_forum_password($forum['fid']); if((empty($_POST) && empty($_FILES)) && $mybb->get_input('processed', MyBB::INPUT_INT) == '1')	// Check if this forum is password protected and we have a valid password check_forum_password($forum['fid']); if((empty($_POST) && empty($_FILES)) && $mybb->get_input('processed', MyBB::INPUT_INT) == '1')
{ error($lang->error_cannot_upload_php_post); }	{ error($lang->error_empty_post_input); }
$attacherror = ''; if($mybb->settings['enableattachments'] == 1 && !$mybb->get_input('attachmentaid', MyBB::INPUT_INT) && ($mybb->get_input('newattachment') \|\| $mybb->get_input('updateattachment') \|\| ($mybb->input['action'] == "do_editpost" && isset($mybb->input['submit']) && $_FILES['attachment'])))	$attacherror = ''; if($mybb->settings['enableattachments'] == 1 && !$mybb->get_input('attachmentaid', MyBB::INPUT_INT) && ($mybb->get_input('newattachment') \|\| $mybb->get_input('updateattachment') \|\| ($mybb->input['action'] == "do_editpost" && isset($mybb->input['submit']) && $_FILES['attachment'])))
{ // Verify incoming POST request verify_post_check($mybb->get_input('my_post_key')); // If there's an attachment, check it and upload it if($_FILES['attachment']['size'] > 0 && $forumpermissions['canpostattachments'] != 0) { $query = $db->simple_select("attachments", "aid", "filename='".$db->escape_string($_FILES['attachment']['name'])."' AND pid='{$pid}'"); $updateattach = $db->fetch_field($query, "aid"); $update_attachment = false; if($updateattach > 0 && $mybb->get_input('updateattachment') && ($mybb->usergroup['caneditattachments'] \|\| $forumpermissions['caneditattachments'])) { $update_attachment = true; } $attachedfile = upload_attachment($_FILES['attachment'], $update_attachment); } if(!empty($attachedfile['error'])) { eval("\$attacherror = \"".$templates->get("error_attacherror")."\";"); $mybb->input['action'] = "editpost";	{ // Verify incoming POST request verify_post_check($mybb->get_input('my_post_key')); if($pid) { $attachwhere = "pid='{$pid}'"; } else { $attachwhere = "posthash='".$db->escape_string($mybb->get_input('posthash'))."'"; } $ret = add_attachments($pid, $forumpermissions, $attachwhere, "editpost"); if(!empty($ret['errors'])) { $errors = $ret['errors']; } // Do we have attachment errors? if(!empty($errors)) { $attacherror = inline_error($errors);
}	}
	// If we were dealing with an attachment but didn't click 'Update Post', force the post edit page again.