function addComment($params)
{
$name = isset($_POST['comname']) ? addslashes(trim($_POST['comname'])) : '';
$content = isset($_POST['comment']) ? addslashes(trim($_POST['comment'])) : '';
$mail = isset($_POST['commail']) ? addslashes(trim($_POST['commail'])) : '';
$url = isset($_POST['comurl']) ? addslashes(trim($_POST['comurl'])) : '';
$imgcode = isset($_POST['imgcode']) ? addslashes(trim(strtoupper($_POST['imgcode']))) : '';
$blogId = isset($_POST['gid']) ? intval($_POST['gid']) : -1;
$pid = isset($_POST['pid']) ? intval($_POST['pid']) : 0;
if (ISLOGIN === true) {
$CACHE = Cache::getInstance();
$user_cache = $CACHE->readCache('user');
$name = addslashes($user_cache[UID]['name_orig']);
$mail = addslashes($user_cache[UID]['mail']);
$url = addslashes(BLOG_URL);
}
if ($url && strncasecmp($url, 'http', 4)) {
$url = 'http://' . $url;
}
doAction('comment_post');
$Comment_Model = new Comment_Model();
$Comment_Model->setCommentCookie($name, $mail, $url);
if ($Comment_Model->isLogCanComment($blogId) === false) {
emMsg('评论失败：该文章已关闭评论');
} elseif ($Comment_Model->isCommentExist($blogId, $name, $content) === true) {
emMsg('评论失败：已存在相同内容评论');
} elseif (ROLE == ROLE_VISITOR && $Comment_Model->isCommentTooFast() === true) {
emMsg('评论失败：您提交评论的速度太快了，请稍后再发表评论');
} elseif (empty($name)) {
emMsg('评论失败：请填写姓名');
} elseif (strlen($name) > 20) {
emMsg('评论失败：姓名不符合规范');
} elseif ($mail != '' && !checkMail($mail)) {
emMsg('评论失败：邮件地址不符合规范');
} elseif (ISLOGIN == false && $Comment_Model->isNameAndMailValid($name, $mail) === false) {
emMsg('评论失败：禁止使用管理员昵称或邮箱评论');
} elseif (!empty($url) && preg_match("/^(http|https)\\:\\/\\/[^<>'\"]*\$/", $url) == false) {
emMsg('评论失败：主页地址不符合规范', 'javascript:history.back(-1);');
} elseif (empty($content)) {
emMsg('评论失败：请填写评论内容');
} elseif (strlen($content) > 8000) {
emMsg('评论失败：内容不符合规范');
} elseif (ROLE == ROLE_VISITOR && Option::get('comment_needchinese') == 'y' && !preg_match('/[\\x{4e00}-\\x{9fa5}]/iu', $content)) {
emMsg('评论失败：评论内容需包含中文');
} elseif (ISLOGIN == false && Option::get('comment_code') == 'y' && session_start() && (empty($imgcode) || $imgcode !== $_SESSION['code'])) {
emMsg('评论失败：验证码错误');
} else {
$_SESSION['code'] = null;
$Comment_Model->addComment($name, $content, $mail, $url, $imgcode, $blogId, $pid);
}
}
}
if ($url && strncasecmp($url, 'http', 4)) {
$url = 'http://' . $url;
}
doAction('comment_post');
if ($Comment_Model->isLogCanComment($blogId) === false) {
mMsg('评论失败：该文章已关闭评论', $targetBlogUrl);
} elseif ($Comment_Model->isCommentExist($blogId, $name, $content) === true) {
mMsg('评论失败：已存在相同内容评论', $targetBlogUrl);
} elseif ($Comment_Model->isCommentTooFast() === true) {
mMsg('评论失败：您提交评论的速度太快了，请稍后再发表评论', $targetBlogUrl);
} elseif (strlen($name) > 20 || strlen($name) == 0) {
mMsg('评论失败：姓名不符合规范', $targetBlogUrl);
} elseif ($mail != '' && !checkMail($mail)) {
mMsg('评论失败：邮件地址不符合规范', $targetBlogUrl);
} elseif (ISLOGIN == false && $Comment_Model->isNameAndMailValid($name, $mail) === false) {
mMsg('评论失败：禁止使用管理员昵称或邮箱评论', $targetBlogUrl);
} elseif (strlen($content) == '' || strlen($content) > 2000) {
mMsg('评论失败：内容不符合规范', $targetBlogUrl);
} elseif (ROLE == ROLE_VISITOR && Option::get('comment_needchinese') == 'y' && !preg_match('/[\\x{4e00}-\\x{9fa5}]/iu', $content)) {
mMsg('评论失败：评论内容需包含中文', $targetBlogUrl);
} elseif (ISLOGIN == false && Option::get('comment_code') == 'y' && session_start() && $imgcode != $_SESSION['code']) {
mMsg('评论失败：验证码错误', $targetBlogUrl);
} else {
$DB = Database::getInstance();
$ipaddr = getIp();
$utctimestamp = time();
if ($pid != 0) {
$comment = $Comment_Model->getOneComment($pid);
$content = '@' . addslashes($comment['poster']) . '：' . $content;
}
