<?php

// AcmlmBoard XD - Thread submission/preview page

// Access: users

include("lib/common.php");

$title = __("New thread");

AssertForbidden("makeThread");

if(!$loguserid) //Not logged in?

Kill(__("You must be logged in to post."));

if(isset($_POST['id']))

$_GET['id'] = $_POST['id'];

if(!isset($_GET['id']))

Kill(__("Forum ID unspecified."));

$fid = (int)$_GET['id'];

if($loguser['powerlevel'] < 0)

Kill(__("You're banned."));

$qFora = "select * from forums where id=".$fid;

$rFora = Query($qFora);

if(NumRows($rFora))

$forum = Fetch($rFora);

else

Kill(__("Unknown forum ID."));

if($forum['locked'])

Kill(__("This forum is locked."));

if($forum['minpowerthread'] > $loguser['powerlevel'])

Kill(__("You are not allowed to post threads in this forum."));

if(!isset($_POST['poll']) || isset($_GET['poll']))

$_POST['poll'] = $_GET['poll'];

$isHidden = (int)($forum['minpower'] > 0);

$onlineUsers = OnlineUsers($fid);

write(

"

<script type=\"text/javascript\" src=\"lib/jscolor/jscolor.js\"></script>

<script type=\"text/javascript\">

window.addEventListener(\"load\", hookUpControls, false);

</script>

");

if(!$noAjax)

write(

"

<script type=\"text/javascript\">

onlineFID = {0};

window.addEventListener(\"load\", startOnlineUsers, false);

</script>

<div class=\"header0 cell1 center outline smallFonts\" style=\"overflow: auto;\">

&nbsp;

<span id=\"onlineUsers\">

{1}

</span>

&nbsp;

</div>

", $fid, $onlineUsers);

if($_POST['poll'])

MakeCrumbs(array(__("Main")=>"./", $forum['title']=>"forum.php?id=".$fid, __("New poll")=>""), $links);

else

MakeCrumbs(array(__("Main")=>"./", $forum['title']=>"forum.php?id=".$fid, __("New thread")=>""), $links);

if(isset($_POST['title']))

$_POST['title'] = htmlentities2($_POST['title']);

if(isset($_POST['pollQuestion']))

$_POST['pollQuestion'] = htmlentities2($_POST['pollQuestion']);

//$_POST['pollQuestion'] = htmlentities2(stripslashes($_POST['pollQuestion']));

if($_POST['text'] && CheckTableBreaks($_POST['text']))

{

$_POST['action'] = "";

Alert(__("This post would break the board layout."), __("I'm sorry, Dave."));

}

if($_POST['text'] && $_POST['action'] != __("Preview"))

{

$words = explode(" ", $_POST['text']);

$wordCount = count($words);

if($wordCount < 2)

{

$_POST['action'] = "";

Alert(__("Your post is too short to have any real meaning. Try a little harder."), __("I'm sorry, Dave."));

}

}

if($_POST['text'] && $_POST['action'] == __("Post"))

{

$lastPost = time() - $loguser['lastposttime'];

if($lastPost < 30)

{

$_POST['action'] = "";

Alert(__("You're going too damn fast! Slow down a little."), __("Hold your horses."));

}

}

if($_POST['action'] == __("Post"))

{

$trimmedTitle = trim(str_replace('&nbsp;', ' ', $_POST['title']));

if($_POST['text'] && $trimmedTitle != "")

{

$post = htmlentities2(deSlashMagic($_POST['text']));

$post = str_replace("\n","##TSURUPETTANYOUJO##", $post);

TidyPost($post);

$post = str_replace("##TSURUPETTANYOUJO##","\n", $post);

$post = mysql_real_escape_string($post);

$options = 0;

if($_POST['nopl']) $options |= 1;

if($_POST['nosm']) $options |= 2;

if($_POST['nobr']) $options |= 4;

if($_POST['iconid'])

{

$_POST['iconid'] = (int)$_POST['iconid'];

if($_POST['iconid'] < 255)

$iconurl = "img/icons/icon".$_POST['iconid'].".png";

else

$iconurl = justEscape($_POST['iconurl']);

}

$mod = '0, 0';

if(CanMod($loguserid, $forum['id']))

$mod = (($_POST['lock'] == 'on') ? '1':'0').', '.(($_POST['stick'] == 'on') ? '1':'0');

// Guess who forgot to make sure not every thread was a poll? XD -- Arbe

if($_POST['poll'])

{

$doubleVote = ($_POST['multivote']) ? 1 : 0;

$qPoll = "insert into poll (question, doublevote) values ('".justEscape($_POST['pollQuestion'])."', ".$doubleVote.")";

$rPoll = Query($qPoll);

$pod = mysql_insert_id();

for($pops = 0; $pops < $_POST['pollOptions']; $pops++)

{

if($_POST['pollOption'.$pops])

{

$pollColor = filterPollColors($_POST['pollColor'.$pops]);

$newID = FetchResult("SELECT id+1 FROM poll_choices WHERE (SELECT COUNT(*) FROM poll_choices p2 WHERE p2.id=poll_choices.id+1)=0 ORDER BY id ASC LIMIT 1");

if($newID < 1) $newID = 1;

$qPollOption = "insert into poll_choices (id, poll, choice, color) values (".$newID.", ".$pod.", '".justEscape($_POST['pollOption'.$pops])."', '".$pollColor."')";

$rPollOption = Query($qPollOption);

}

}

}

else

$pod = 0;

//Yeah, that was me ^^; -- Kawa

$newID = FetchResult("SELECT id+1 FROM threads WHERE (SELECT COUNT(*) FROM threads t2 WHERE t2.id=threads.id+1)=0 ORDER BY id ASC LIMIT 1");

if($newID < 1) $newID = 1;

$qThreads = "insert into threads (id, forum, user, title, icon, lastpostdate, lastposter, closed, sticky, poll) values (".$newID.",".$fid.",".$loguserid.",'".justEscape($_POST['title'])."','".$iconurl."',".time().",".$loguserid.", ".$mod.", ".$pod.")";

$rThreads = Query($qThreads);

$tid = mysql_insert_id();

$qUsers = "update users set posts=".($loguser['posts']+1).", lastposttime=".time()." where id=".$loguserid." limit 1";

$rUsers = Query($qUsers);

$qPosts = "insert into posts (thread, user, date, ip, num, options, mood) values (".$tid.",".$loguserid.",".time().",'".$_SERVER['REMOTE_ADDR']."',".($loguser['posts']+1).", ".$options.", ".(int)$_POST['mood'].")";

$rPosts = Query($qPosts);

$pid = mysql_insert_id();

$qPostsText = "insert into posts_text (pid,text) values (".$pid.",'".$post."')";

$rPostsText = Query($qPostsText);

$qFora = "update forums set numthreads=".($forum['numthreads']+1).", numposts=".($forum['numposts']+1).", lastpostdate=".time().", lastpostuser=".$loguserid.", lastpostid=".$pid." where id=".$fid." limit 1";

$rFora = Query($qFora);

Query("update threads set lastpostid = ".$pid." where id = ".$tid);

Report("New ".($_POST['poll'] ? "poll" : "thread")." by [b]".$loguser['name']."[/]: [b]".$_POST['title']."[/] (".$forum['title'].") -> [g]#HERE#?tid=".$tid, $isHidden);

Redirect(__("Posted!"), "thread.php?id=".$tid, __("the thread"));

exit();

}

else

{

if($trimmedTitle)

Alert(__("Enter a message and try again."), __("Your post is empty."));

else if($_POST['text'])

Alert(__("Enter a thread title and try again."), __("Your thread is unnamed."));

else

Alert(__("Enter a message and a thread title and try again."), __("Your post is empty."));

}

}

if($_POST['text'])

{

//$prefill = htmlentities2(stripslashes($_POST['text']));

$prefill = htmlentities2(deSlashMagic($_POST['text']));

$prefill = str_replace("\n","##TSURUPETTANYOUJO##", $prefill);

TidyPost($prefill);

$prefill = str_replace("##TSURUPETTANYOUJO##","\n", $prefill);

}

if($_POST['title'])

$trefill = htmlentities2(deSlashMagic($_POST['title']));

//$trefill = htmlentities2(stripslashes($_POST['title']));

if($_POST['action'] == __("Preview"))

{

if($_POST['text'] && $_POST['title'])

{

if($_POST['poll'])

{

$options = array();

$noColors = 0;

$defaultColors = array(

"#000000","#0000B6","#00B600","#00B6B6","#B60000","#B600B6","#B66700","#B6B6B6",

"#676767","#6767FF","#67FF67","#67FFFF","#FF6767","#FF67FF","#FFFF67","#FFFFFF",);

for($i = 0; $i < $_POST['pollOptions']; $i++)

{

$options[] = array("choice"=>$_POST['pollOption'.$i], "color"=>$_POST['pollColor'.$i]);

}

$totalVotes = count($options);

foreach($options as $option)

{

if($option['color'] == "")

$option['color'] = $defaultColors[($pops + 9) % 16];

$votes = 1;

$cellClass = ($cellClass+1) % 2;

$label = format("{1}", $pc[$pops], $option['choice']);

$bar = "";

if($totalVotes > 0)

{

$width = 100 * ($votes / $totalVotes);

$alt = format("{0}&nbsp;of&nbsp;{1},&nbsp;{2}%", $votes, $totalVotes, $width);

$bar = format("<div class=\"pollbar\" style=\"background: {0}; width: {1}%;\" title=\"{2}\">&nbsp;{3}</div>", $option['color'], $width, $alt, $votes);

if($width == 0)

$bar = "&nbsp;".$votes;

}

$pollLines .= format(

"

<tr class=\"cell{0}\">

<td>

{1}

</td>

<td class=\"width75\">

<div class=\"pollbarContainer\">

{2}

</div>

</td>

</tr>

", $cellClass, $label, $bar);

$pops++;

}

write(

"

<table class=\"outline margin\">

<tr class=\"header0\">

<th colspan=\"2\">

".__("Poll")."

</th>

</tr>

<tr class=\"cell0\">

<td colspan=\"2\">

{1}

</td>

</tr>

{2}

</table>

", $cellClass, $_POST['pollQuestion'], $pollLines);

}

$previewPost['text'] = $prefill;

$previewPost['num'] = $loguser['posts']+1;

$previewPost['posts'] = $loguser['posts']+1;

$previewPost['id'] = "???";

$previewPost['options'] = 0;

if($_POST['nopl']) $previewPost['options'] |= 1;

if($_POST['nosm']) $previewPost['options'] |= 2;

if($_POST['nobr']) $previewPost['options'] |= 4;

$previewPost['mood'] = (int)$_POST['mood'];

$previewPost['uid'] = $loguserid;

$copies = explode(",","title,name,displayname,picture,sex,powerlevel,avatar,postheader,signature,signsep,regdate,lastactivity,lastposttime");

foreach($copies as $toCopy)

$previewPost[$toCopy] = $loguser[$toCopy];

MakePost($previewPost, 0, $fid);

} else

{

if($_POST['title'])

Alert(__("Enter a message and try again."), __("Your post is empty."));

else if($_POST['text'])

Alert(__("Enter a thread title and try again."), __("Your thread is unnamed."));

else

Alert(__("Enter a message and a thread title and try again."), __("Your post is empty."));

}

}

if(!$_POST['text']) $_POST['text'] = $post['text'];

if($_POST['text']) $prefill = htmlval(deSlashMagic($_POST['text']));

if($_POST['title']) $trefill = htmlval(deSlashMagic($_POST['title']));

if(!isset($_POST['iconid']))

$_POST['iconid'] = 0;

if($_POST['nopl'])

$nopl = "checked=\"checked\"";

if($_POST['nosm'])

$nosm = "checked=\"checked\"";

if($_POST['nobr'])

$nobr = "checked=\"checked\"";

$iconNoneChecked = ($_POST['iconid'] == 0) ? "checked=\"checked\"" : "";

$iconCustomChecked = ($_POST['iconid'] == 255) ? "checked=\"checked\"" : "";

$i = 1;

$icons = "";

while(is_file("img/icons/icon".$i.".png"))

{

$checked = ($_POST['iconid'] == $i) ? "checked=\"checked\" " : "";

$icons .= format(

"

<label>

<input type=\"radio\" {0} name=\"iconid\" value=\"{1}\" />

<img src=\"img/icons/icon{1}.png\" alt=\"Icon {1}\" onclick=\"javascript:void()\" />

</label>

", $checked, $i);

$i++;

}

write(

"

<table style=\"width: 100%;\">

<tr>

<td style=\"vertical-align: top; border: none;\">

<form action=\"newthread.php\" method=\"post\">

<table class=\"outline margin width100\">

<tr class=\"header1\">

<th colspan=\"2\">

{0}

</th>

</tr>

<tr class=\"cell0\">

<td>

<label for=\"tit\">

".__("Title")."

</label>

</td>

<td>

<input type=\"text\" id=\"tit\" name=\"title\" style=\"width: 98%;\" maxlength=\"60\" value=\"{1}\" />

</td>

</tr>

<tr class=\"cell1\">

<td>

".__("Icon")."

</td>

<td class=\"threadIcons\">

<label>

<input type=\"radio\" {2} name=\"iconid\" value=\"0\" />

<span>".__("None")."</span>

</label>

{3}

<br />

<label>

<input type=\"radio\" {4} name=\"iconid\" value=\"255\" />

<span>".__("Custom")."</span>

</label>

<input type=\"text\" id=\"iconurl\" name=\"iconurl\" style=\"width: 50%;\" maxlength=\"100\" value=\"{5}\" />

</td>

</tr>

", ($_POST['poll'] ? __("New poll") : __("New thread")), $trefill, $iconNoneChecked, $icons, $iconCustomChecked,

htmlval(deSlashMagic($_POST['iconurl'])));

if($_POST['poll'])

{

$first = true;

$pollOptions = "";

for($pops = 0; $pops < $_POST['pollOptions']; $pops++)

{

$cellClass = ($cellClass+1) % 2;

$fixed = htmlval(deSlashMagic($_POST['pollOption'.$pops]));

$pollOptions .= format(

"

<tr class=\"cell{0}\">

<td>

<label for=\"p{1}\">".__("Option {2}")."</label>

</td>

<td>

<input type=\"text\" id=\"p{1}\" name=\"pollOption{1}\" value=\"{3}\" style=\"width: 50%;\" maxlength=\"40\" >&nbsp;

<label>

".__("Color", 1)."&nbsp;

<input type=\"text\" name=\"pollColor{1}\" value=\"{4}\" size=\"10\" maxlength=\"7\" class=\"color {hash:true,required:false,pickerFaceColor:'black',pickerFace:3,pickerBorder:0,pickerInsetColor:'black',pickerPosition:'left',pickerMode:'HVS'}\" />

</label>

{5}

</td>

</tr>

", $cellClass, $pops, $pops + 1, $fixed,

filterPollColors($_POST['pollColor'.$pops]), ($first ? "&nbsp;(#rrggbb)" : ""));

$first = false;

}

write(

"

<tr class=\"cell0\">

<td>

<label for=\"pq\">

".__("Poll question")."

</label>

</td>

<td>

<input type=\"text\" id=\"pq\" name=\"pollQuestion\" value=\"{0}\" style=\"width: 98%;\" maxlength=\"100\" />

</td>

</tr>

<tr class=\"cell1\">

<td>

<label for=\"pn\">

".__("Number of options")."

</label>

</td>

<td>

<input type=\"text\" id=\"pn\" name=\"pollOptions\" value=\"{1}\" size=\"2\" maxlength=\"2\" />

</td>

</tr>

{2}

", htmlval(deSlashMagic($_POST['pollQuestion'])), $_POST['pollOptions'], $pollOptions);

}

if($_POST['mood'])

$moodSelects[(int)$_POST['mood']] = "selected=\"selected\" ";

$moodOptions = "<option ".$moodSelects[0]."value=\"0\">".__("[Default avatar]")."</option>\n";

$rMoods = Query("select mid, name from moodavatars where uid=".$loguserid." order by mid asc");

while($mood = Fetch($rMoods))

$moodOptions .= format(

"

<option {0} value=\"{1}\">{2}</option>

", $moodSelects[$mood['mid']], $mood['mid'], htmlval($mood['name']));

if(CanMod($loguserid, $forum['id']))

{

$mod = "\n\n<!-- Mod options -->\n";

$mod .= "<label><input type=\"checkbox\" name=\"lock\">&nbsp;".__("Close thread", 1)."</label>\n";

$mod .= "<label><input type=\"checkbox\" name=\"stick\">&nbsp;".__("Sticky", 1)."</label>\n";

$mod .= "<!-- More could follow -->\n\n";

}

if(!$_POST['poll'] || $_POST['pollOptions'])

$postButton = "<input type=\"submit\" name=\"action\" value=\"".__("Post")."\" /> ";

if($_POST['poll'])

$multivote = "<label><input type=\"checkbox\" ".($_POST['multivote'] ? "checked=\"checked\"" : "")." name=\"multivote\" />&nbsp;".__("Multivote", 1)."</label>";

write(

"

<tr class=\"cell0\">

<td>

<label for=\"post\">

Post

</label>

</td>

<td>

<textarea id=\"text\" name=\"text\" rows=\"16\" style=\"width: 98%;\">{0}</textarea>

</td>

</tr>

<tr class=\"cell2\">

<td></td>

<td>

{1}

<input type=\"submit\" name=\"action\" value=\"".__("Preview")."\" />

<select size=\"1\" name=\"mood\">

{2}

</select>

<label>

<input type=\"checkbox\" name=\"nopl\" {3} />&nbsp;".__("Disable post layout", 1)."

</label>

<label>

<input type=\"checkbox\" name=\"nosm\" {4} />&nbsp;".__("Disable smilies", 1)."

</label>

<label>

<input type=\"checkbox\" name=\"nobr\" {8} />&nbsp;".__("Disable auto-<br>", 1)."

</label>

<input type=\"hidden\" name=\"id\" value=\"{5}\" />

<input type=\"hidden\" name=\"poll\" value=\"{6}\" />

{7}

{9}

</td>

</tr>

</table>

</form>

</td>

<td style=\"width: 200px; vertical-align: top; border: none;\">

", $prefill, $postButton, $moodOptions, $nopl, $nosm, $fid, stripslashes($_POST['poll']), $multivote, $nobr, $mod);

DoSmileyBar();

DoPostHelp();

write("

</td>

</tr>

</table>

");

if($_POST['poll'])

MakeCrumbs(array(__("Main")=>"./", $forum['title']=>"forum.php?id=".$fid, __("New poll")=>""), $links);

else

MakeCrumbs(array(__("Main")=>"./", $forum['title']=>"forum.php?id=".$fid, __("New thread")=>""), $links);

?>