| \n" . "$subject |
New topic in $forumname forum
\n"); } else { $res = do_mysql_query("SELECT * FROM topics WHERE id=$id") or sqlerr(__FILE__, __LINE__); $arr = mysql_fetch_assoc($res) or stderr("Forum error", "Topic not found."); $subject = $arr["subject"]; print("Reply to topic: $subject
"); } begin_frame("Compose", true); print("\n"); stdfoot(); die; } //-------- Action: Delete post if ($action == "deletepost") { $postid = (int) $_GET["postid"]; $sure = (int) $_GET["sure"]; if (get_user_class() < UC_MODERATOR || !is_valid_id($postid)) stderr( _("Error"),_("Permission denied")); //------- Get topic id $res = do_mysql_query("SELECT topicid FROM posts WHERE id=$postid") or sqlerr(__FILE__, __LINE__); $arr = mysql_fetch_row($res) or stderr( _("Error"), "Post not found"); $topicid = $arr[0]; //------- We can not delete the post if it is the only one of the topic $res = do_mysql_query("SELECT COUNT(*) FROM posts WHERE topicid=$topicid") or sqlerr(__FILE__, __LINE__); $arr = mysql_fetch_row($res); if ($arr[0] < 2) stderr( _("Error"), "Can't delete post; it is the only post of the topic. You should\n" . "delete the topic instead.\n"); /* //------- Get the id of the last post before the one we're deleting $res = do_mysql_query("SELECT id FROM posts WHERE topicid=$topicid AND id < $postid ORDER BY id DESC LIMIT 1") or sqlerr(__FILE__, __LINE__); if (mysql_num_rows($res) == 0) $redirtopost = ""; else { $arr = mysql_fetch_row($res); $redirtopost = "&page=p$arr[0]#$arr[0]"; } */ //------- Make sure we know what we do :-) if (!$sure) { stderr("Delete post", "Sanity check: You are about to delete a post. Click\n" . "here if you are sure."); } //------- Delete post do_mysql_query("DELETE FROM posts WHERE id=$postid") or sqlerr(__FILE__, __LINE__); //Update topic reply counter do_mysql_query("UPDATE topics SET replies=replies-1 WHERE topicid=".$topicid); //------- Update topic //update_topic_last_post($topicid); header("Location: forums.php?action=viewtopic&topicid=$topicid$redirtopost"); die; } //-------- Action: Lock topic if ($action == "locktopic") { $forumid = (int) $_GET["forumid"]; $topicid = (int) $_GET["topicid"]; $page = (int) $_GET["page"]; if (!is_valid_id($topicid) || get_user_class() < UC_MODERATOR) stderr( _("Error"),_("Permission denied")); do_mysql_query("UPDATE topics SET locked='yes' WHERE id=$topicid") or sqlerr(__FILE__, __LINE__); header("Location: forums.php?action=viewforum&forumid=$forumid&page=$page"); die; } //-------- Action: Unlock topic if ($action == "unlocktopic") { $forumid = (int) $_GET["forumid"]; $topicid = (int) $_GET["topicid"]; $page = (int) $_GET["page"]; if (!is_valid_id($topicid) || get_user_class() < UC_MODERATOR) die; do_mysql_query("UPDATE topics SET locked='no' WHERE id=$topicid") or sqlerr(__FILE__, __LINE__); header("Location: forums.php?action=viewforum&forumid=$forumid&page=$page"); die; } //-------- Action: Set locked on/off if ($action == "setlocked") { $topicid = (int) $_POST["topicid"]; if (!$topicid || get_user_class() < UC_MODERATOR) stderr( _("Error"),_("Permission denied")); $locked = sqlesc($_POST["locked"]); do_mysql_query("UPDATE topics SET locked=$locked WHERE id=$topicid") or sqlerr(__FILE__, __LINE__); header("Location: $_POST[returnto]"); die; } //-------- Action: Set sticky on/off if ($action == "setsticky") { $topicid = (int) $_POST["topicid"]; if (!$topicid || get_user_class() < UC_MODERATOR) stderr( _("Error"),_("Permission denied")); $sticky = sqlesc($_POST["sticky"]); do_mysql_query("UPDATE topics SET sticky=$sticky WHERE id=$topicid") or sqlerr(__FILE__, __LINE__); header("Location: $_POST[returnto]"); die; } //-------- Action: Rename topic if ($action == 'renametopic') { if( get_user_class() < UC_MODERATOR) stderr( _("Error"),_("Permission denied")); $topicid = (int) $_POST['topicid']; if (!is_valid_id($topicid)) stderr( _("Error"),"Invalid ID"); $subject = htmlspecialchars($_POST['subject']); if ($subject == '') stderr('Error', 'You must enter a new title!'); $subject = sqlesc($subject); do_mysql_query("UPDATE topics SET subject=$subject WHERE id=$topicid") or sqlerr(); $returnto = '?action=viewtopic&topicid='.$topicid; if ($returnto) header("Location: $returnto"); die; } //-------- Action: View forum if ($action == "viewforum") { $forumid = (int) $_GET["forumid"]; if (!is_valid_id($forumid)) stderr( _("Error"),"Invalid ID"); $page = (int) $_GET["page"]; $userid = $CURUSER["id"]; //------ Get forum name $res = do_mysql_query("SELECT name, minclassread, topiccount FROM forums WHERE id=".$forumid) or sqlerr(__FILE__, __LINE__); $arr = mysql_fetch_assoc($res) or die; $forumname = $arr["name"]; if (get_user_class() < $arr["minclassread"]) stderr( _("Error"),_("Permission denied")); //------ Get topic count $perpage = $CURUSER["topicsperpage"]; if (!$perpage) $perpage = 20; /* $res = do_mysql_query("SELECT COUNT(*) FROM topics WHERE forumid=$forumid") or sqlerr(__FILE__, __LINE__); $arr = mysql_fetch_row($res); $num = $arr[0]; */ $num = $arr['topiccount']; if ($page == 0) $page = 1; $first = ($page * $perpage) - $perpage + 1; $last = $first + $perpage - 1; if ($last > $num) $last = $num; $pages = floor($num / $perpage); if ($perpage * $pages < $num) ++$pages; //------ Build menu $menu = "\n";
$lastspace = false;
for ($i = 1; $i <= $pages; ++$i)
{
if ($i == $page)
$menu .= "$i\n";
elseif ($i > 3 && ($i < $pages - 2) && ($page - $i > 3 || $i - $page > 3))
{
if ($lastspace)
continue;
$menu .= "... \n";
$lastspace = true;
}
else
{
$menu .= "$i\n";
$lastspace = false;
}
if ($i < $pages)
$menu .= "|\n";
}
$menu .= "
\n";
if ($page == 1)
$menu .= "<< Prev";
else
$menu .= "<< Prev";
$menu .= " ";
$menu .= "Search | Catch up\n";
$menu .= " ";
if ($last == $num)
$menu .= "Next >>";
else
$menu .= "Next >>";
$menu .= "
| Topic | Replies | Views | Author | Last post | ||
" .
"
| $replies | $topic_views | ".$topicarr['user_name']." | ".$topicarr['lastpost_txt']." |
No topics found
\n"); print("\n"); print("\n"); print("\n"); print("
| New posts | Locked topic |
You are not permitted to start new topics in this forum.
\n"); print("\n"); print("\n"); if ($maypost) print("\n"); print("
| Topic | Forum | ||
| $forumname |
More than $maxresults items found, displaying first $maxresults.
\n"); print("\n"); } else print("Nothing found"); stdfoot(); die; } if ($action == "search") { stdhead("Forum Search"); print("Query: " . htmlspecialchars($keywords) . "
\n"); $maxresults = 50; $res = do_mysql_query("SELECT id,topicid,userid,added FROM posts WHERE MATCH (body) AGAINST (" . sqlesc($keywords) . ") LIMIT " . ($maxresults + 1)) or sqlerr(__FILE__, __LINE__); // search and display results... $num = mysql_num_rows($res); if ($num > $maxresults) { $num = $maxresults; print("Found more than $maxresults posts; displaying first $num.
\n"); } if ($num == 0) print("Sorry, nothing found!
"); else { print("\n"); print("\n"); for ($i = 0; $i < $num; ++$i) { $post = mysql_fetch_assoc($res); $res2 = do_mysql_query("SELECT forumid, subject FROM topics WHERE id=$post[topicid]") or sqlerr(__FILE__, __LINE__); $topic = mysql_fetch_assoc($res2); $res2 = do_mysql_query("SELECT name,minclassread FROM forums WHERE id=$topic[forumid]") or sqlerr(__FILE__, __LINE__); $forum = mysql_fetch_assoc($res2); if ($forum["name"] == "" || $forum["minclassread"] > $CURUSER["class"]) continue; $res2 = do_mysql_query("SELECT username FROM users WHERE id=$post[userid]") or sqlerr(__FILE__, __LINE__); $user = mysql_fetch_assoc($res2); if ($user["username"] == "") $user["username"] = "[$post[userid]]"; print("\n"); } print("
| Post | Topic | Forum | Posted by |
| $post[id] | " . htmlspecialchars($topic["subject"]) . " | " . htmlspecialchars($forum["name"]) . " | $user[username] at $post[added] |
Search again
\n"); } } print("\n"); stdfoot(); die; } //-------- Handle unknown action if ($action != "") stderr("Forum Error", "Unknown action."); //-------- Default action: View forums if (isset($_GET["catchup"])) catch_up(); //-------- Get forums $forums_res = do_mysql_query("SELECT id,name,description,topiccount,postcount,minclassread, IF(lastpost_txt = '', 'N/A', lastpost_txt) as lastpost_str FROM forums ORDER BY sort, name") or sqlerr(__FILE__, __LINE__); stdhead("Forums"); print("| Forum | Topics | Posts | Last post | ||
| $topiccount | $postcount | ".$forums_arr['lastpost_str']." |