projectpost.php

<?php
/*======================================================================*\
|| #################################################################### ||
|| # vBulletin Project Tools 2.0.0 - Licence Number VBP05E32E9
|| # ---------------------------------------------------------------- # ||
|| # Copyright ©2000-2008 Jelsoft Enterprises Ltd. All Rights Reserved. ||
|| # This file may not be redistributed in whole or significant part. # ||
|| # ---------------- VBULLETIN IS NOT FREE SOFTWARE ---------------- # ||
|| # http://www.vbulletin.com | http://www.vbulletin.com/license.html # ||
|| #################################################################### ||
\*======================================================================*/

// ####################### SET PHP ENVIRONMENT ###########################
error_reporting(E_ALL & ~E_NOTICE);

// #################### DEFINE IMPORTANT CONSTANTS #######################
define('THIS_SCRIPT', 'projectpost');
define('CSRF_PROTECTION', true);

// ################### PRE-CACHE TEMPLATES AND DATA ######################
// get special phrase groups
$phrasegroups = array('projecttools', 'posting');

// get special data templates from the datastore
$specialtemplates = array(
	'pt_bitfields',
	'pt_permissions',
	'pt_issuestatus',
	'pt_issuetype',
	'pt_projects',
	'pt_categories',
	'pt_assignable',
	'pt_versions',
	'smiliecache',
	'bbcodecache',
);

// pre-cache templates used by all actions
$globaltemplates = array(
	'pt_navbar_search',
);

// pre-cache templates used by specific actions
$actiontemplates = array(
	'addissue' => array(
		'pt_postissue',
		'pt_postissue_short',
		'pt_preview',
		'newpost_usernamecode',
		'optgroup'
	),
	'addreply' => array(
		'pt_postreply',
		'pt_postreply_quote',
		'pt_preview',
		'newpost_usernamecode',
		'pt_historybit',
		'bbcode_code',
		'bbcode_html',
		'bbcode_php',
		'bbcode_quote',
	),
	'manageattach' => array(
		'pt_manageattach'
	),
	'managesubscriptions' => array(
		'pt_managesubscriptions',
		'pt_subscriptionbit',
		'USERCP_SHELL',
		'usercp_nav_folderbit',
		'pt_usercp_navbit',
		'pt_project_subscriptionbit'
	),
	'managesubscription' => array(
		'pt_managesubscription'
	),
	'manageprojectsubscription' => array(
		'pt_checkbox_option',
		'pt_manageprojectsubscription'
	),
	'moveissue' => array(
		'optgroup',
		'pt_move_issue'
	),
	'moveissue2' => array(
		'optgroup',
		'pt_move_issue_confirm'
	),
);

$actiontemplates['postreply'] = $actiontemplates['editreply'] = $actiontemplates['addreply'];
$actiontemplates['postissue'] = $actiontemplates['editissue'] = $actiontemplates['addissue'];

if ($_REQUEST['do'] == 'managesubscriptions')
{
	$phrasegroups[] = 'user';
}

define('GET_EDIT_TEMPLATES', true);


// ######################### REQUIRE BACK-END ############################
require_once('./global.php');
if (empty($vbulletin->products['vbprojecttools']))
{
	standard_error(fetch_error('product_not_installed_disabled'));
}

require_once(DIR . '/includes/functions_projecttools.php');
require_once(DIR . '/includes/functions_pt_posting.php');

if (!function_exists('ini_size_to_bytes') OR (($current_memory_limit = ini_size_to_bytes(@ini_get('memory_limit'))) < 128 * 1024 * 1024 AND $current_memory_limit > 0))
{
	@ini_set('memory_limit', 128 * 1024 * 1024);
}

if (!($vbulletin->userinfo['permissions']['ptpermissions'] & $vbulletin->bf_ugp_ptpermissions['canviewprojecttools']))
{
	print_no_permission();
}

($hook = vBulletinHook::fetch_hook('projectpost_start')) ? eval($hook) : false;

// #######################################################################
// ######################## START MAIN SCRIPT ############################
// #######################################################################

// #######################################################################
if ($_POST['do'] == 'postreply' OR $_REQUEST['do'] == 'addreply' OR $_REQUEST['do'] == 'editreply')
{
	$vbulletin->input->clean_array_gpc('r', array(
		'issueid' => TYPE_UINT,
		'issuenoteid' => TYPE_UINT,
		'fromquickreply' => TYPE_UINT,
	));

	if ($vbulletin->GPC['issuenoteid'])
	{
		$issuenote = $db->query_first("
			SELECT *
			FROM " . TABLE_PREFIX . "pt_issuenote
			WHERE issuenoteid = " . $vbulletin->GPC['issuenoteid']
		);
		$vbulletin->GPC['issueid'] = $issuenote['issueid'];
	}
	else
	{
		$issuenote = array(
			'issuenoteid' => 0,
			'isfirstnote' => 0
		);
	}

	$issue = verify_issue($vbulletin->GPC['issueid']);
	$project = verify_project($issue['projectid']);
	$issueperms = fetch_project_permissions($vbulletin->userinfo, $project['projectid'], $issue['issuetypeid']);
	$posting_perms = prepare_issue_posting_pemissions($issue, $issueperms);

	if (!$issuenote['issuenoteid'])
	{
		if (!$posting_perms['can_reply'])
		{
			print_no_permission();
		}

		// setup default subscribe type for QR
		if ($vbulletin->GPC['fromquickreply'])
		{
			if (!$issue['subscribetype'])
			{
				switch ($vbulletin->userinfo['autosubscribe'])
				{
					case -1: $_POST['subscribetype'] = ''; break;
					case  0: $_POST['subscribetype'] = 'none'; break;
					case  1: $_POST['subscribetype'] = 'instant'; break;
					case  2: $_POST['subscribetype'] = 'daily'; break;
					case  3: $_POST['subscribetype'] = 'weekly'; break;
					default: $_POST['subscribetype'] = ''; break;
				}
			}
			else
			{
				 $_POST['subscribetype'] = $issue['subscribetype'];
			}
		}
	}
	else
	{
		if (!can_edit_issue_note($issue, $issuenote, $issueperms))
		{
			print_no_permission();
		}
	}

	($hook = vBulletinHook::fetch_hook('projectpost_reply_setup')) ? eval($hook) : false;
}

// #######################################################################
if ($_POST['do'] == 'postreply')
{
	$vbulletin->input->clean_array_gpc('p', array(
		'message'          => TYPE_STR,
		'wysiwyg'          => TYPE_BOOL,
		'private'          => TYPE_BOOL,
		'delete'           => TYPE_STR,
		'undelete'         => TYPE_BOOL,
		'reason'           => TYPE_NOHTML,
		'petitionstatusid' => TYPE_UINT,
		'changestatusid'   => TYPE_UINT,
		'subscribetype'    => TYPE_NOHTML,
		'preview'          => TYPE_NOHTML,
	));

	if ($vbulletin->GPC['wysiwyg'])
	{
		require_once(DIR . '/includes/functions_wysiwyg.php');
		$vbulletin->GPC['message'] = convert_wysiwyg_html_to_bbcode($vbulletin->GPC['message'], $vbulletin->options['pt_allowhtml']);
	}

	($hook = vBulletinHook::fetch_hook('projectpost_postreply_start')) ? eval($hook) : false;

	if (!$issuenote['issuenoteid'])
	{
		if ($vbulletin->GPC['petitionstatusid'] AND (!$vbulletin->pt_issuestatus["$issue[issuestatusid]"]['canpetitionfrom'] OR !($issueperms['postpermissions'] & $vbulletin->pt_bitfields['post']['canpetition'])))
		{
			$vbulletin->GPC['petitionstatusid'] = 0;
		}
	}
	else
	{
		$vbulletin->GPC['petitionstatusid'] = 0;
	}

	// prepare note
	$issuenotedata =& datamanager_init(
		$vbulletin->GPC['petitionstatusid'] ? 'Pt_IssueNote_Petition' : 'Pt_IssueNote_User',
		$vbulletin,
		ERRTYPE_ARRAY,
		'pt_issuenote'
	);
	$issuenotedata->set_info('do_floodcheck', !can_moderate());


	if ($issuenote['issuenoteid'])
	{
		// an edit
		$issuenotedata->set_existing($issuenote);
		$issuenotedata->set_info('reason', $vbulletin->GPC['reason']);

		if ($vbulletin->GPC['delete'])
		{
			if ($issuenote['isfirstnote'])
			{
				print_no_permission();
			}

			if (!($issueperms['postpermissions'] & $vbulletin->pt_bitfields['post']['candeletenote']) OR
				($issuenote['userid'] != $vbulletin->userinfo['userid'] AND !($issueperms['postpermissions'] & $vbulletin->pt_bitfields['post']['candeletenoteothers']))
			)
			{
				print_no_permission();
			}

			$issuenotedata->delete($vbulletin->GPC['delete'] == 'hard');

			$vbulletin->url = 'project.php?' . $vbulletin->session->vars['sessionurl'] . "issueid=$issue[issueid]";
			eval(print_standard_redirect('pt_issuenote_deleted'));
		}
		else if ($vbulletin->GPC['undelete'])
		{
			if (!($issueperms['postpermissions'] & $vbulletin->pt_bitfields['post']['candeletenote']) OR !($issueperms['generalpermissions'] & $vbulletin->pt_bitfields['general']['canmanage']))
			{
				print_no_permission();
			}

			$issuenotedata->undelete();

			$vbulletin->url = 'project.php?' . $vbulletin->session->vars['sessionurl'] . "do=gotonote&amp;issuenoteid=$issuenote[issuenoteid]";
			eval(print_standard_redirect('pt_issuenote_undeleted'));
		}

		if (!$issuenote['isfirstnote'])
		{
			if (!($issueperms['postpermissions'] & $vbulletin->pt_bitfields['post']['caneditprivate']))
			{
				// can't set an existing issue to private, so it stays this way
			}
			else if ($vbulletin->GPC['private'])
			{
				// make it private
				$issuenotedata->set('visible', 'private');
			}
			else
			{
				// make it visible if it was private, else leave it as is
				$issuenotedata->set('visible', $issuenote['visible'] == 'private' ? 'visible': $issuenote['visible']);
			}
		}
	}
	else
	{
		// an insert
		$issuenotedata->set('userid', $vbulletin->userinfo['userid']);
		$issuenotedata->set('username', $vbulletin->userinfo['username']);
		if (!($issueperms['postpermissions'] & $vbulletin->pt_bitfields['post']['cancreateprivate']))
		{
			// new issue -- can't make private
			$issuenotedata->set('visible', 'visible');
		}
		else
		{
			$issuenotedata->set('visible', $vbulletin->GPC['private'] ? 'private' : 'visible');
		}
		$issuenotedata->set('issueid', $issue['issueid']);
	}

	$issuenotedata->set_info('parseurl', $vbulletin->options['pt_allowbbcode']);
	$issuenotedata->setr('pagetext', $vbulletin->GPC['message']);

	if ($vbulletin->GPC['petitionstatusid'] AND !$issuenote['issuenoteid'])
	{
		$issuenotedata->set_info('petitionstatusid', $vbulletin->GPC['petitionstatusid']);
	}

	($hook = vBulletinHook::fetch_hook('projectpost_postreply_save')) ? eval($hook) : false;

	$issuenotedata->pre_save();

	if ($issuenotedata->errors OR $vbulletin->GPC['preview'])
	{
		$preview = prepare_pt_note_preview($vbulletin->GPC, $issuenotedata, $issuenote, $issue);
		define('IS_PREVIEW', true);
		$_REQUEST['do'] = 'editreply';

		($hook = vBulletinHook::fetch_hook('projectpost_postreply_preview')) ? eval($hook) : false;
	}
	else
	{
		if (!$issuenote['issuenoteid'])
		{
			$issuenoteid = $issuenotedata->save();
			$issuenote = $issuenotedata->pt_issuenote;
			$issuenote['issuenoteid'] = $issuenoteid;

			send_issue_reply_notification($issue, $issuenote);
			handle_issue_subscription_change($issue['issueid'], $issue['subscribetype'], $vbulletin->GPC['subscribetype']);

			// trying to change the status while replying -- ensure we can actually do that
			if ($vbulletin->GPC['changestatusid'])
			{
				if ($posting_perms['status_edit'])
				{
					// changing status - make sure the type is right
					$status = $vbulletin->pt_issuestatus[$vbulletin->GPC['changestatusid']];
					if ($status AND $issue['issuetypeid'] == $status['issuetypeid'])
					{
						$issuedata =& datamanager_init('Pt_Issue', $vbulletin, ERRTYPE_SILENT);
						$issuedata->set_info('project', $project);
						$issuedata->set_existing($issue);
						$issuedata->set('issuestatusid', $vbulletin->GPC['changestatusid']);
						$issuedata->save();
					}
				}
			}

			($hook = vBulletinHook::fetch_hook('projectpost_postreply_complete')) ? eval($hook) : false;

			$vbulletin->url = 'project.php?' . $vbulletin->session->vars['sessionurl'] . "do=gotonote&amp;issuenoteid=$issuenote[issuenoteid]";
			eval(print_standard_redirect('pt_issuenote_inserted'));
		}
		else
		{
			$issuenotedata->save();

			($hook = vBulletinHook::fetch_hook('projectpost_postreply_complete')) ? eval($hook) : false;

			$vbulletin->url = 'project.php?' . $vbulletin->session->vars['sessionurl'] . "do=gotonote&amp;issuenoteid=$issuenote[issuenoteid]";
			eval(print_standard_redirect('pt_issuenote_edited'));
		}
	}
}

// #######################################################################
if ($_REQUEST['do'] == 'addreply' OR $_REQUEST['do'] == 'editreply')
{
	$vbulletin->input->clean_array_gpc('r', array(
		'quotenoteid'      => TYPE_UINT,
		'petitionstatusid' => TYPE_UINT,
		'changestatusid'   => TYPE_UINT,
	));

	// determine what they can actually do
	$posting_perms = prepare_issue_posting_pemissions($issue, $issueperms);

	($hook = vBulletinHook::fetch_hook('projectpost_addreply_start')) ? eval($hook) : false;

	eval('$usernamecode = "' . fetch_template('newpost_usernamecode') . '";');

	$show['editnote'] = ($issuenote['issuenoteid'] != 0);

	if ($issuenote['issuenoteid'])
	{
		$show['private_edit'] = ($issueperms['postpermissions'] & $vbulletin->pt_bitfields['post']['caneditprivate']);
	}
	else
	{
		$show['private_edit'] = ($issueperms['postpermissions'] & $vbulletin->pt_bitfields['post']['cancreateprivate']);
	}

	$edit_history = '';

	if (!$issue['subscribetype'] AND !defined('IS_PREVIEW'))
	{
		switch ($vbulletin->userinfo['autosubscribe'])
		{
			case -1: $issue['subscribetype'] = ''; break;
			case  0: $issue['subscribetype'] = 'none'; break;
			case  1: $issue['subscribetype'] = 'instant'; break;
			case  2: $issue['subscribetype'] = 'daily'; break;
			case  3: $issue['subscribetype'] = 'weekly'; break;
			default: $issue['subscribetype'] = ''; break;
		}
	}

	$show['quoted_private_auto'] = false; // true if we automatically set the note to private

	if (!$issuenote['issuenoteid'])
	{
		if (!$vbulletin->pt_issuestatus["$issue[issuestatusid]"]['canpetitionfrom'])
		{
			$show['status_petition'] = false;
		}
		else
		{
			$show['status_petition'] = ($issueperms['postpermissions'] & $vbulletin->pt_bitfields['post']['canpetition']);
		}

		$show['delete_option'] = false;
		$show['undelete_option'] = false;
		$show['reason_option'] = false;

		$subscribe_selected = array(
			'donot' => ($issue['subscribetype'] == '' ? ' selected="selected"' : ''),
			'none' => ($issue['subscribetype'] == 'none' ? ' selected="selected"' : ''),
			'instant' => ($issue['subscribetype'] == 'instant' ? ' selected="selected"' : ''),
			'daily' => ($issue['subscribetype'] == 'daily' ? ' selected="selected"' : ''),
			'weekly' => ($issue['subscribetype'] == 'weekly' ? ' selected="selected"' : ''),
		);
		$show['subscribe_option'] = ($vbulletin->userinfo['userid'] > 0);

		if ($vbulletin->GPC['quotenoteid'])
		{
			$issuenote['pagetext'] = fetch_pt_quoted_note($vbulletin->GPC['quotenoteid'], $issue['issueid'], $issueperms, $quoted_private);
			if ($quoted_private AND ($issueperms['postpermissions'] & $vbulletin->pt_bitfields['post']['cancreateprivate']))
			{
				// quoting a private note, make this private by default if we can
				$issuenote['visible'] = 'private';
				$show['quoted_private_auto'] = true;
			}
		}
		else if (!defined('IS_PREVIEW'))
		{
			$issuenote['pagetext'] = '';
		}
	}
	else
	{
		$show['status_petition'] = false;
		$show['subscribe_option'] = false;

		if ($issuenote['issuenoteid'] == $issue['firstnoteid'])
		{
			$show['undelete_option'] = false;
			$show['delete_option'] = false;
			$show['private_edit'] = false;
		}
		else if ($issuenote['visible'] == 'deleted')
		{
			$show['undelete_option'] = (($issueperms['postpermissions'] & $vbulletin->pt_bitfields['post']['candeletenote']) AND ($issueperms['generalpermissions'] & $vbulletin->pt_bitfields['general']['canmanage']));
			$show['delete_option'] = false;
		}
		else
		{
			$show['undelete_option'] = false;
			$show['delete_option'] = (($issueperms['postpermissions'] & $vbulletin->pt_bitfields['post']['candeletenote']) AND
				($issuenote['userid'] == $vbulletin->userinfo['userid'] OR $issueperms['postpermissions'] & $vbulletin->pt_bitfields['post']['candeletenoteothers'])
			);
		}

		$show['reason_option'] = (!$show['undelete_option']); // show reason only when we're not showing undelete

		// show edit history
		require_once(DIR . '/includes/class_bbcode.php');
		$bbcode =& new vB_BbCodeParser($vbulletin, fetch_tag_list());

		require_once(DIR . '/includes/functions_pt_notehistory.php');

		$previous_edits =& fetch_note_history($issuenote['issuenoteid']);
		while ($history = $db->fetch_array($previous_edits))
		{
			$edit_history .= build_history_bit($history, $bbcode);
		}
	}

	// issue status for petition
	if ($show['status_petition'] OR $posting_perms['status_edit'])
	{
		$petition_options = build_issuestatus_select(
			$vbulletin->pt_issuetype["$issue[issuetypeid]"]['statuses'],
			$posting_perms['status_edit'] ? $vbulletin->GPC['changestatusid'] : $vbulletin->GPC['petitionstatusid'],
			array($issue['issuestatusid'])
		);
	}
	else
	{
		$petition_options = '';
	}

	// editor
	require_once(DIR . '/includes/functions_editor.php');
	$editorid = construct_edit_toolbar(
		htmlspecialchars_uni($issuenote['pagetext']),
		false,
		'pt',
		$vbulletin->options['pt_allowsmilies'],
		true,
		false
	);

	$private_checked = ($issuenote['visible'] == 'private' ? ' checked="checked"' : '');

	// navbar and output
	$navbits = construct_navbits(array(
		'project.php' . $vbulletin->session->vars['sessionurl_q'] => $vbphrase['projects'],
		"project.php?" . $vbulletin->session->vars['sessionurl'] . "projectid=$project[projectid]" => $project['title_clean'],
		"project.php?" . $vbulletin->session->vars['sessionurl'] . "issueid=$issue[issueid]" => $issue['title'],
		'' => ($issuenote['issuenoteid'] ? $vbphrase['edit_reply'] : $vbphrase['post_reply'])
	));
	eval('$navbar = "' . fetch_template('navbar') . '";');

	($hook = vBulletinHook::fetch_hook('projectpost_addreply_complete')) ? eval($hook) : false;

	eval('print_output("' . fetch_template('pt_postreply') . '");');
}

// #######################################################################
if ($_POST['do'] == 'postissue' OR $_REQUEST['do'] == 'addissue' OR $_REQUEST['do'] == 'editissue')
{
	$vbulletin->input->clean_array_gpc('r', array(
		'issueid' => TYPE_UINT,
		'projectid' => TYPE_UINT,
		'issuetypeid' => TYPE_NOHTML
	));

	if ($vbulletin->GPC['issueid'])
	{
		// editing an issue
		$issue = verify_issue($vbulletin->GPC['issueid'], true, array('milestone'));

		$project = verify_project($issue['projectid']);
		verify_issuetypeid($issue['issuetypeid'], $project['projectid']);

		$projectperms = fetch_project_permissions($vbulletin->userinfo, $project['projectid']);
		$issueperms = $projectperms["$issue[issuetypeid]"];
		$posting_perms = prepare_issue_posting_pemissions($issue, $issueperms);

		if (!$posting_perms['issue_edit'])
		{
			print_no_permission();
		}
	}
	else
	{
		// posting a new issue
		$project = verify_project($vbulletin->GPC['projectid']);
		$projectperms = fetch_project_permissions($vbulletin->userinfo, $project['projectid']);

		$type_choices = array_keys($vbulletin->pt_projects["$project[projectid]"]['types']);

		$can_post = array();
		foreach ($type_choices AS $issuetype)
		{
			if ($projectperms["$issuetype"]['postpermissions'] & $vbulletin->pt_bitfields['post']['canpostnew']
				AND $projectperms["$issuetype"]['generalpermissions'] & $vbulletin->pt_bitfields['general']['canview'])
			{
				if (!$vbulletin->GPC['issuetypeid'] OR $vbulletin->GPC['issuetypeid'] == $issuetype)
				{
					$can_post[] = $issuetype;
				}
			}
		}

		if (!$can_post)
		{
			print_no_permission();
		}
		else if (sizeof($can_post) == 1)
		{
			$vbulletin->GPC['issuetypeid'] = $can_post[0];
		}

		if ($vbulletin->GPC['issuetypeid'])
		{
			// we have a issue type, don't need the short form
			verify_issuetypeid($vbulletin->GPC['issuetypeid'], $project['projectid']);

			$issue = array(
				'issueid' => 0,
				'projectid' => $project['projectid'],
				'issuestatusid' => $vbulletin->pt_projects["$project[projectid]"]['types'][$vbulletin->GPC['issuetypeid']],
				'issuetypeid' => $vbulletin->GPC['issuetypeid'],
				'issuetype' => $vbphrase['issuetype_' . $vbulletin->GPC['issuetypeid'] . '_singular'],
				'projectcategoryid' => 0,
				'title' => '',
				'summary' => '',
				'pagetext' => '',
				'priority' => 0
			);

			$issueperms = $projectperms["$issue[issuetypeid]"];
			if (!($issueperms['postpermissions'] & $vbulletin->pt_bitfields['post']['canpostnew'])
				OR !($issueperms['generalpermissions'] & $vbulletin->pt_bitfields['general']['canview']))
			{
				print_no_permission();
			}
		}
		else
		{
			// no issue type, need the short form
			$issue = array(
				'issueid' => 0,
				'projectid' => $project['projectid'],
				'title' => '',
				'summary' => '',
				'pagetext' => '',
				'priority' => 0
			);
		}
	}

	($hook = vBulletinHook::fetch_hook('projectpost_issue_setup')) ? eval($hook) : false;
}

// #######################################################################
if ($_POST['do'] == 'postissue')
{
	$vbulletin->input->clean_array_gpc('p', array(
		'title' => TYPE_NOHTML,
		'summary' => TYPE_NOHTML,
		'issuestatusid' => TYPE_UINT,
		'priority' => TYPE_UINT,
		'appliesversionid' => TYPE_UINT,
		'addressedversionid' => TYPE_INT,
		'milestoneid' => TYPE_UINT,
		'projectcategoryid' => TYPE_UINT,
		'message' => TYPE_STR,
		'wysiwyg' => TYPE_BOOL,
		'appliedtags' => TYPE_ARRAY_NOHTML,
		'unappliedtags' => TYPE_ARRAY_NOHTML,
		'customtag' => TYPE_NOHTML,
		'submit_addtag' => TYPE_STR,
		'submit_removetag' => TYPE_STR,
		'assigned' => TYPE_ARRAY_UINT,
		'unassigned' => TYPE_ARRAY_UINT,
		'submit_assign' => TYPE_STR,
		'submit_unassign' => TYPE_STR,
		'assignself' => TYPE_BOOL,
		'private' => TYPE_BOOL,
		'close_issue' => TYPE_BOOL,
		'original_state' => TYPE_STR,
		'delete' => TYPE_STR,
		'undelete' => TYPE_BOOL,
		'reason' => TYPE_NOHTML,
		'subscribetype' => TYPE_NOHTML,
		'preview' => TYPE_NOHTML,
	));

	if ($vbulletin->GPC['wysiwyg'])
	{
		require_once(DIR . '/includes/functions_wysiwyg.php');
		$vbulletin->GPC['message'] = convert_wysiwyg_html_to_bbcode($vbulletin->GPC['message'], $vbulletin->options['pt_allowhtml']);
	}

	($hook = vBulletinHook::fetch_hook('projectpost_postissue_start')) ? eval($hook) : false;

	// determine what they can actually do
	$posting_perms = prepare_issue_posting_pemissions($issue, $issueperms);

	if ($posting_perms['status_edit'] AND $vbulletin->GPC['issuestatusid'])
	{
		// changing status - make sure the type is right
		$status = $vbulletin->pt_issuestatus[$vbulletin->GPC['issuestatusid']];
		if (!$status)
		{
			standard_error(fetch_error('invalidid', $vbphrase['issue_status'], $vbulletin->options['contactuslink']));
		}

		if ($issue['issuetypeid'] != $status['issuetypeid'])
		{
			// trying to change the type and we can't
			standard_error(fetch_error('invalidid', $vbphrase['issue_status'], $vbulletin->options['contactuslink']));
		}
	}
	else
	{
		$vbulletin->GPC['issuestatusid'] = $issue['issuestatusid'];
	}

	// prepare issue
	$issuedata =& datamanager_init('Pt_Issue', $vbulletin, ERRTYPE_ARRAY);
	$issuedata->set_info('project', $project);
	if ($issue['issueid'])
	{
		$issuedata->set_existing($issue);

		if ($vbulletin->GPC['delete'])
		{
			if (!($issueperms['postpermissions'] & $vbulletin->pt_bitfields['post']['candeleteissue'])
				OR (!($issueperms['postpermissions'] & $vbulletin->pt_bitfields['post']['candeleteissueothers']) AND $vbulletin->userinfo['userid'] != $issue['submituserid'])
			)
			{
				print_no_permission();
			}

			$issuedata->delete($vbulletin->GPC['delete'] == 'hard');

			$vbulletin->url = 'project.php?' . $vbulletin->session->vars['sessionurl'] . "projectid=$project[projectid]";
			eval(print_standard_redirect('pt_issue_deleted'));
		}
		else if ($vbulletin->GPC['undelete'])
		{
			if (!($issueperms['postpermissions'] & $vbulletin->pt_bitfields['post']['candeleteissue']) OR !($issueperms['generalpermissions'] & $vbulletin->pt_bitfields['general']['canmanage']))
			{
				print_no_permission();
			}

			$issuedata->undelete();

			$vbulletin->url = 'project.php?' . $vbulletin->session->vars['sessionurl'] . "issueid=$issue[issueid]";
			eval(print_standard_redirect('pt_issue_undeleted'));
		}
	}

	$issuedata->set('title', $vbulletin->GPC['title']);
	$issuedata->set('summary', $vbulletin->GPC['summary']);
	$issuedata->set('issuestatusid', $vbulletin->GPC['issuestatusid']);
	$issuedata->set('priority', $vbulletin->GPC['priority']);
	$issuedata->set('projectcategoryid', $vbulletin->GPC['projectcategoryid']);
	$issuedata->set('appliesversionid', $vbulletin->GPC['appliesversionid']);

	if ($posting_perms['status_edit'])
	{
		switch ($vbulletin->GPC['addressedversionid'])
		{
			case -1:
				$issuedata->set('isaddressed', 1);
				$issuedata->set('addressedversionid', 0);
				break;

			case 0:
				$issuedata->set('isaddressed', 0);
				$issuedata->set('addressedversionid', 0);
				break;

			default:
				$issuedata->set('isaddressed', 1);
				$issuedata->set('addressedversionid', $vbulletin->GPC['addressedversionid']);
				break;
		}
	}

	if ($posting_perms['milestone_edit'])
	{
		$issuedata->set('milestoneid', $vbulletin->GPC['milestoneid']);
	}

	if ($posting_perms['issue_close'] AND $vbulletin->GPC_exists['original_state'])
	{
		if (!$issue['issueid']
			OR ($vbulletin->GPC['close_issue'] AND $vbulletin->GPC['original_state'] == 'open')
			OR (!$vbulletin->GPC['close_issue'] AND $vbulletin->GPC['original_state'] == 'closed')
		)
		{
			// new issue or we tried to change the state
			$issuedata->set('state', $vbulletin->GPC['close_issue'] ? 'closed' : 'open');
		}
	}

	$existing_tags = array();
	$existing_assignments = array();

	if (!$issue['issueid'])
	{
		$issuedata->set('projectid', $project['projectid']);
		$issuedata->set('issuetypeid', $vbulletin->GPC['issuetypeid']);

		$issuedata->set('submituserid', $vbulletin->userinfo['userid']);
		$issuedata->set('submitusername', $vbulletin->userinfo['username']);
		$issuedata->set('visible', ($posting_perms['private_edit'] AND $vbulletin->GPC['private']) ? 'private' : 'visible');
		$issuedata->set('lastpost', TIMENOW);
	}
	else
	{
		if ($posting_perms['private_edit'])
		{
			if ($vbulletin->GPC['private'])
			{
				// make it private
				$issuedata->set('visible', 'private');
			}
			else
			{
				// make it visible if it was private, else leave it as is
				$issuedata->set('visible', $issue['visible'] == 'private' ? 'visible': $issue['visible']);
			}
		}

		// tags
		$tag_data = $db->query_read("
			SELECT tag.tagtext
			FROM " . TABLE_PREFIX . "pt_issuetag AS issuetag
			INNER JOIN " . TABLE_PREFIX . "pt_tag AS tag ON (issuetag.tagid = tag.tagid)
			WHERE issuetag.issueid = $issue[issueid]
			ORDER BY tag.tagtext
		");
		while ($tag = $db->fetch_array($tag_data))
		{
			$existing_tags[] = $tag['tagtext'];
		}

		// assignments
		$assignment_data = $db->query_read("
			SELECT user.userid
			FROM " . TABLE_PREFIX . "pt_issueassign AS issueassign
			INNER JOIN " . TABLE_PREFIX . "user AS user ON (user.userid = issueassign.userid)
			WHERE issueassign.issueid = $issue[issueid]
			ORDER BY user.username
		");
		while ($assignment = $db->fetch_array($assignment_data))
		{
			$existing_assignments["$assignment[userid]"] = $assignment['userid'];
		}
	}

	// prepare tag changes
	if ($posting_perms['tags_edit'])
	{
		$issuedata->set_info('allow_tag_creation', $posting_perms['can_custom_tag']);
		prepare_tag_changes($vbulletin->GPC, $existing_tags, $tag_add, $tag_remove);

		foreach ($tag_add AS $tag)
		{
			$issuedata->add_tag($tag);
		}

		foreach ($tag_remove AS $tag)
		{
			$issuedata->remove_tag($tag);
		}
	}

	// prepare first note
	$issuenote =& datamanager_init('Pt_IssueNote_User', $vbulletin, ERRTYPE_ARRAY, 'pt_issuenote');
	$issuenote->set_info('do_floodcheck', !can_moderate());
	$issuenote->set_info('parseurl', $vbulletin->options['pt_allowbbcode']);
	if ($issue['issueid'])
	{
		$issuenote->set_existing($issue);

		$issuenote->set('pagetext', $vbulletin->GPC['message']);
		$issuenote->set_info('reason', $vbulletin->GPC['reason']);
	}
	else
	{
		$issuenote->set('userid', $vbulletin->userinfo['userid']);
		$issuenote->set('username', $vbulletin->userinfo['username']);
		$issuenote->set('visible', 'visible');
		$issuenote->set('isfirstnote', 1);
		$issuenote->set('pagetext', $vbulletin->GPC['message']);
	}

	($hook = vBulletinHook::fetch_hook('projectpost_postissue_save')) ? eval($hook) : false;

	$issuedata->set_info('perform_activity_updates', $issuedata->have_issue_changes());

	$issuedata->pre_save();
	if (!$issuedata->errors)
	{
		$issuenote->pre_save();
	}

	$errors = array_merge($issuedata->errors, $issuenote->errors);

	if ($errors OR $vbulletin->GPC['preview'])
	{
		if ($errors)
		{
			require_once(DIR . '/includes/functions_newpost.php');
			$preview = construct_errors($errors);
		}
		else
		{
			require_once(DIR . '/includes/class_bbcode.php');
			$bbcode =& new vB_BbCodeParser($vbulletin, fetch_tag_list());
			$preview_text =  $bbcode->parse($vbulletin->GPC['message'], 'pt');

			eval('$preview = "' . fetch_template('pt_preview') . '";');
		}

		$input_map = array(
			'title' => $vbulletin->GPC['title'],
			'summary' => $vbulletin->GPC['summary'],
			'issuestatusid' => $vbulletin->GPC['issuestatusid'],
			'priority' => $vbulletin->GPC['priority'],
			'projectcategoryid' => $vbulletin->GPC['projectcategoryid'],
			'appliesversionid' => $vbulletin->GPC['appliesversionid'],
			'addressedversionid' => $vbulletin->GPC['addressedversionid'],
			'private' => $vbulletin->GPC['private'],
			'reason' => $vbulletin->GPC['reason'],
			'subscribetype' => $vbulletin->GPC['subscribetype'],
		);

		$issue = $issuedata->pt_issue + $issuedata->existing + $input_map;
		$issue['pagetext'] = (isset($issuenote->pt_issue['pagetext']) ? $issuenote->fetch_field('pagetext') : $vbulletin->GPC['message']);
		$issue['issueid'] = intval($issue['issueid']);
		$issue['issuetype'] = $vbphrase["issuetype_$issue[issuetypeid]_singular"];

		if ($vbulletin->GPC['assigned'])
		{
			$preview_assigned = array();
			foreach ($vbulletin->GPC['assigned'] AS $val)
			{
				$preview_assigned["$val"] = $val;
			}
		}
		else
		{
			$preview_assigned = array();
		}
		$issue['isassigned'] = (!empty($vbulletin->GPC['assignself']) OR isset($preview_assigned[$vbulletin->userinfo['userid']]));

		if ($vbulletin->GPC['appliedtags'])
		{
			$preview_tags = array();
			foreach ($vbulletin->GPC['appliedtags'] AS $val)
			{
				$preview_tags["$val"] = $val;
			}
		}
		else
		{
			$preview_tags = array();
		}

		define('IS_PREVIEW', true);
		$_REQUEST['do'] = 'editissue';

		($hook = vBulletinHook::fetch_hook('projectpost_postissue_preview')) ? eval($hook) : false;
	}
	else
	{
		if ($issue['issueid'])
		{
			$issuedata->save();
			if ($vbulletin->GPC['message'] != $issue['pagetext'])
			{
				$issuenote->save();
			}
			$log_assignment_changes = true;
		}
		else
		{
			$issue['issueid'] = $issuedata->save();
			$issuenote->set('issueid', $issue['issueid']);
			$issue['issuenoteid'] = $issuenote->save();
			$log_assignment_changes = false;
		}

		// user assignments
		process_assignment_changes($vbulletin->GPC, $posting_perms, $existing_assignments, $project, $issue, $log_assignment_changes);

		// done
		if ($vbulletin->GPC['issueid'])
		{
			($hook = vBulletinHook::fetch_hook('projectpost_postissue_complete')) ? eval($hook) : false;

			$vbulletin->url = 'project.php?' . $vbulletin->session->vars['sessionurl'] . "issueid=$issue[issueid]";
			eval(print_standard_redirect('pt_issue_edited'));
		}
		else
		{
			handle_issue_subscription_change($issue['issueid'], '', $vbulletin->GPC['subscribetype']);

			($hook = vBulletinHook::fetch_hook('projectpost_postissue_complete')) ? eval($hook) : false;

			$vbulletin->url = 'project.php?' . $vbulletin->session->vars['sessionurl'] . "issueid=$issue[issueid]";
			eval(print_standard_redirect('pt_issue_inserted'));
		}
	}
}

// #######################################################################
if ($_REQUEST['do'] == 'addissue' OR $_REQUEST['do'] == 'editissue')
{
	// navbar - do this up here because of pt_postissue_short
	$navbits = array(
		'project.php' . $vbulletin->session->vars['sessionurl_q'] => $vbphrase['projects'],
		"project.php?" . $vbulletin->session->vars['sessionurl'] . "projectid=$project[projectid]" => $project['title_clean']
	);
	if ($issue['issueid'])
	{
		$navbits["project.php?" . $vbulletin->session->vars['sessionurl'] . "issueid=$issue[issueid]"] = $issue['title'];
		$navbits[''] = $vbphrase['edit_issue'];
	}
	else
	{
		$navbits[''] = $vbphrase['post_new_issue'];
	}

	($hook = vBulletinHook::fetch_hook('projectpost_addissue_start')) ? eval($hook) : false;

	$navbits = construct_navbits($navbits);
	eval('$navbar = "' . fetch_template('navbar') . '";');

	eval('$usernamecode = "' . fetch_template('newpost_usernamecode') . '";');

	if (!$issue['issuetypeid'])
	{
		// need to select an issue type first
		$projectperms = fetch_project_permissions($vbulletin->userinfo, $project['projectid']);
		foreach (array_keys($vbulletin->pt_issuetype) AS $issuetypeid)
		{
			$show["type_$issuetypeid"] = (($projectperms["$issuetypeid"]['generalpermissions'] & $vbulletin->pt_bitfields['general']['canview'])
				AND ($projectperms["$issuetypeid"]['postpermissions'] & $vbulletin->pt_bitfields['post']['canpostnew']));
		}

		$optionclass = '';
		$optionselected = '';
		$issuetype_options = '';

		foreach (array_keys($vbulletin->pt_projects["$project[projectid]"]['types']) AS $type)
		{
			if (!($projectperms["$type"]['generalpermissions'] & $vbulletin->pt_bitfields['general']['canview']) OR !($projectperms["$type"]['postpermissions'] & $vbulletin->pt_bitfields['post']['canpostnew']))
			{
				continue;
			}

			$optionvalue = $type;
			$optiontitle = $vbphrase["issuetype_{$type}_singular"];
			eval('$issuetype_options .= "' . fetch_template('option') . '";');
		}

		eval('print_output("' . fetch_template('pt_postissue_short') . '");');
	}

	// ######
	if ($issue['issueid'])
	{
		// editing an issue
		if ($issue['visible'] == 'deleted')
		{
			$show['undelete_option'] = (($issueperms['postpermissions'] & $vbulletin->pt_bitfields['post']['candeleteissue']) AND ($issueperms['generalpermissions'] & $vbulletin->pt_bitfields['general']['canmanage']));
			$show['delete_option'] = false;
		}
		else
		{
			$show['undelete_option'] = false;
			$show['delete_option'] = (($issueperms['postpermissions'] & $vbulletin->pt_bitfields['post']['candeleteissue'])
				AND ($issueperms['postpermissions'] & $vbulletin->pt_bitfields['post']['candeleteissueothers'] OR $vbulletin->userinfo['userid'] == $issue['submituserid'])
			);
		}

		$show['reason_option'] = (!$show['undelete_option']); // show reason only when we're not showing undelete
	}
	else
	{
		if (!defined('IS_PREVIEW'))
		{
			$vbulletin->input->clean_array_gpc('p', array(
				'title' => TYPE_NOHTML,
				'summary' => TYPE_NOHTML
			));

			if ($vbulletin->GPC_exists['title'])
			{
				$issue['title'] = $vbulletin->GPC['title'];
			}
			if ($vbulletin->GPC_exists['summary'])
			{
				$issue['summary'] = $vbulletin->GPC['summary'];
			}
		}

		$show['delete_option'] = false;
		$show['undelete_option'] = false;
		$show['reason_option'] = false;
	}

	// setup posting permissions
	$posting_perms = prepare_issue_posting_pemissions($issue, $issueperms);
	$show['status_edit'] = $posting_perms['status_edit'];
	$show['tags_edit'] = $posting_perms['tags_edit'];
	$show['can_custom_tag'] = $posting_perms['can_custom_tag'];
	$show['assign_checkbox'] = $posting_perms['assign_checkbox'];
	$show['assign_dropdown'] = $posting_perms['assign_dropdown'];
	$show['private_edit'] = $posting_perms['private_edit'];
	$assign_checkbox_checked = $posting_perms['assign_checkbox_checked'];

	$show['close_issue'] = $posting_perms['issue_close'];
	$close_issue_checked = ($issue['state'] == 'closed' ? ' checked="checked"' : '');

	// setup default subscribe type
	if ($issue['subscribetype'] === NULL)
	{
		switch ($vbulletin->userinfo['autosubscribe'])
		{
			case -1: $issue['subscribetype'] = ''; break;
			case 0: $issue['subscribetype'] = 'none'; break;
			case 1: $issue['subscribetype'] = 'instant'; break;
			case 2: $issue['subscribetype'] = 'daily'; break;
			case 3: $issue['subscribetype'] = 'weekly'; break;
			default: $issue['subscribetype'] = ''; break;
		}
	}

	$subscribe_selected = array(
		'donot' => ($issue['subscribetype'] == '' ? ' selected="selected"' : ''),
		'none' => ($issue['subscribetype'] == 'none' ? ' selected="selected"' : ''),
		'instant' => ($issue['subscribetype'] == 'instant' ? ' selected="selected"' : ''),
		'daily' => ($issue['subscribetype'] == 'daily' ? ' selected="selected"' : ''),
		'weekly' => ($issue['subscribetype'] == 'weekly' ? ' selected="selected"' : ''),
	);
	$show['subscribe_option'] = (!$issue['issueid'] AND $vbulletin->userinfo['userid'] > 0);

	// setup milestones
	$show['milestone'] = ($issueperms['generalpermissions'] & $vbulletin->pt_bitfields['general']['canviewmilestone'] AND $project['milestonecount']);
	$show['milestone_edit'] = ($show['milestone'] AND $posting_perms['milestone_edit']);
	$milestone_options = fetch_milestone_select($project['projectid'], $issue['milestoneid']);

	// figure out viable status/type options
	if ($show['status_edit'])
	{
		$projectperms = fetch_project_permissions($vbulletin->userinfo, $project['projectid']);
		$status_options = build_issuestatus_select(
			$vbulletin->pt_issuetype["$issue[issuetypeid]"]['statuses'],
			$issue['issuestatusid']
		);
	}
	else
	{
		$issue['issuestatus'] =  $vbphrase["issuestatus$issue[issuestatusid]"];
	}

	$category_options = '';
	foreach ($vbulletin->pt_categories AS $category)
	{
		if ($category['projectid'] != $project['projectid'])
		{
			continue;
		}

		$optionvalue = $category['projectcategoryid'];
		$optiontitle = $category['title'];
		$optionselected = ($issue['projectcategoryid'] == $category['projectcategoryid'] ? ' selected="selected"' : '');
		eval('$category_options .= "' . fetch_template('option') . '";');
	}

	// setup priority options
	$priority_selected = array_fill(0, 11, ''); // 0 - 10, inclusive
	$priority_selected["$issue[priority]"] = ' selected="selected"';

	// setup versions
	$version_groups = array();
	$version_query = $db->query_read("
		SELECT projectversion.projectversionid, projectversion.versionname, projectversiongroup.groupname
		FROM " . TABLE_PREFIX . "pt_projectversion AS projectversion
		INNER JOIN " . TABLE_PREFIX . "pt_projectversiongroup AS projectversiongroup ON
			(projectversion.projectversiongroupid = projectversiongroup.projectversiongroupid)
		WHERE projectversion.projectid = $project[projectid]
		ORDER BY projectversion.effectiveorder DESC
	");
	while ($version = $db->fetch_array($version_query))
	{
		$version_groups["$version[groupname]"]["$version[projectversionid]"] = $version['versionname'];
	}

	$applies_versions = '';
	$addressed_versions = '';
	$optionclass = '';
	foreach ($version_groups AS $optgroup_label => $versions)
	{
		$group_applies = '';
		$group_addressed = '';
		foreach ($versions AS $optionvalue => $optiontitle)
		{
			$optionselected = ($issue['appliesversionid'] == $optionvalue ? ' selected="selected"' : '');
			eval('$group_applies .= "' . fetch_template('option') . '";');

			$optionselected = (($issue['isaddressed'] AND $issue['addressedversionid'] == $optionvalue) ? ' selected="selected"' : '');
			eval('$group_addressed .= "' . fetch_template('option') . '";');
		}

		$optgroup_options = $group_applies;
		eval('$applies_versions .= "' . fetch_template('optgroup') . '";');

		$optgroup_options = $group_addressed;
		eval('$addressed_versions .= "' . fetch_template('optgroup') . '";');
	}

	$applies_unknown_selected = ($issue['appliesversionid'] == 0 ? ' selected="selected"' : '');

	if ($posting_perms['status_edit'])
	{
		$addressed_unaddressed_selected = ($issue['isaddressed'] == 0 ? ' selected="selected"' : '');
		$addressed_next_selected = (($issue['isaddressed'] == 1 AND $issue['addressedversionid'] == 0) ? ' selected="selected"' : '');
	}

	$issue = fetch_issue_version_text($issue);

	// set up appliable tags
	$unapplied_tags = '';
	$applied_tags = '';

	$tag_data = $db->query_read("
		SELECT tag.tagtext, IF(issuetag.tagid IS NOT NULL, 1, 0) AS isapplied
		FROM " . TABLE_PREFIX . "pt_tag AS tag
		LEFT JOIN " . TABLE_PREFIX . "pt_issuetag AS issuetag ON (issuetag.tagid = tag.tagid AND issuetag.issueid = $issue[issueid])
		ORDER BY tag.tagtext
	");

	$optionselected = '';
	$optionclass = '';
	while ($tag = $db->fetch_array($tag_data))
	{
		$optionvalue = $optiontitle = $tag['tagtext'];
		if ((!defined('IS_PREVIEW') AND $tag['isapplied']) OR (defined('IS_PREVIEW') AND isset($preview_tags["$tag[tagtext]"])))
		{
			unset($preview_tags["$tag[tagtext]"]);
			eval('$applied_tags .= "' . fetch_template('option') . '";');
		}
		else
		{
			eval('$unapplied_tags .= "' . fetch_template('option') . '";');
		}
	}

	if (defined('IS_PREVIEW') AND !empty($preview_tags))
	{
		foreach ($preview_tags AS $optionvalue => $optiontitle)
		{
			eval('$applied_tags .= "' . fetch_template('option') . '";');
		}
	}

	// set up assignable users
	$assigned_user_list = array();

	if (defined('IS_PREVIEW'))
	{
		$assigned_user_list = $preview_assigned;
	}
	else if ($issue['issueid'])
	{
		// assignments
		$assignments = '';
		$assignment_data = $db->query_read("
			SELECT user.userid
			FROM " . TABLE_PREFIX . "pt_issueassign AS issueassign
			INNER JOIN " . TABLE_PREFIX . "user AS user ON (user.userid = issueassign.userid)
			WHERE issueassign.issueid = $issue[issueid]
			ORDER BY user.username
		");
		while ($assignment = $db->fetch_array($assignment_data))
		{
			$assigned_user_list["$assignment[userid]"] = $assignment['userid'];
		}
	}

	$unassigned_users = '';
	$assigned_users = '';

	$optionselected = '';
	$optionclass = '';
	foreach ($vbulletin->pt_assignable["$project[projectid]"]["$issue[issuetypeid]"] AS $optionvalue => $optiontitle)
	{
		if (isset($assigned_user_list["$optionvalue"]))
		{
			eval('$assigned_users .= "' . fetch_template('option') . '";');
		}
		else
		{
			eval('$unassigned_users .= "' . fetch_template('option') . '";');
		}
	}

	$vbphrase['applies_version_issuetype'] = $vbphrase["applies_version_$issue[issuetypeid]"];
	$vbphrase['addressed_version_issuetype'] = $vbphrase["addressed_version_$issue[issuetypeid]"];

	// editor
	require_once(DIR . '/includes/functions_editor.php');
	$editorid = construct_edit_toolbar(
		htmlspecialchars_uni($issue['pagetext']),
		false,
		'pt',
		$vbulletin->options['pt_allowsmilies'],
		true,
		false
	);

	$private_checked = ($issue['visible'] == 'private' ? ' checked="checked"' : '');

	($hook = vBulletinHook::fetch_hook('projectpost_addissue_complete')) ? eval($hook) : false;

	eval('print_output("' . fetch_template('pt_postissue') . '");');
}

// #######################################################################
if ($_POST['do'] == 'uploadattachment')
{
	$vbulletin->input->clean_array_gpc('p', array(
		'issueid' => TYPE_UINT
	));
	$vbulletin->input->clean_gpc('f', 'attachment', TYPE_FILE);

	$issue = verify_issue($vbulletin->GPC['issueid']);
	$project = verify_project($issue['projectid']);

	$issueperms = fetch_project_permissions($vbulletin->userinfo, $project['projectid'], $issue['issuetypeid']);
	if (!($issueperms['attachpermissions'] & $vbulletin->pt_bitfields['attach']['canattach']) OR is_issue_closed($issue, $issueperms))
	{
		print_no_permission();
	}

	($hook = vBulletinHook::fetch_hook('projectpost_attachment_upload')) ? eval($hook) : false;

	if ($vbulletin->GPC['attachment'])
	{
		require_once(DIR . '/includes/class_upload_pt.php');
		require_once(DIR . '/includes/class_image.php');

		require_once(DIR . '/includes/class_dm.php');
		require_once(DIR . '/includes/class_dm_attachment_pt.php');

		$attachdata =& vB_DataManager_Attachment_Pt::fetch_library($vbulletin, ERRTYPE_STANDARD);
		$upload =& new vB_Upload_Attachment_Pt($vbulletin);
		$image =& vB_Image::fetch_library($vbulletin);

		$upload->data =& $attachdata;
		$upload->image =& $image;
		$upload->issueinfo = $issue;

		$attachment = array(
			'name'     =>& $vbulletin->GPC['attachment']['name'],
			'tmp_name' =>& $vbulletin->GPC['attachment']['tmp_name'],
			'error'    =>&	$vbulletin->GPC['attachment']['error'],
			'size'     =>& $vbulletin->GPC['attachment']['size'],
		);

		$attachmentid = $upload->process_upload($attachment);
		if ($error = $upload->fetch_error())
		{
			standard_error($error);
		}
	}

	$vbulletin->url = 'project.php?' . $vbulletin->session->vars['sessionurl'] . "issueid=$issue[issueid]#attachments";
	eval(print_standard_redirect('pt_attachment_uploaded'));
}

// #######################################################################
if ($_POST['do'] == 'updateattach')
{
	$vbulletin->input->clean_array_gpc('p', array(
		'attachmentid' => TYPE_UINT,
		'delete' => TYPE_BOOL,
		'obsolete' => TYPE_BOOL,
		'unobsolete' => TYPE_BOOL,
	));

	$attachment = $db->query_first("
		SELECT issueattach.*
		FROM " . TABLE_PREFIX . "pt_issueattach AS issueattach
		WHERE issueattach.attachmentid = " . $vbulletin->GPC['attachmentid']
	);

	$issue = verify_issue($attachment['issueid']);
	$project = verify_project($issue['projectid']);

	$issueperms = fetch_project_permissions($vbulletin->userinfo, $project['projectid'], $issue['issuetypeid']);
	if (!($issueperms['attachpermissions'] & $vbulletin->pt_bitfields['attach']['canattachedit'])
		OR (!($issueperms['attachpermissions'] & $vbulletin->pt_bitfields['attach']['canattacheditothers']) AND $vbulletin->userinfo['userid'] != $attachment['userid'])
	)
	{
		print_no_permission();
	}

	require_once(DIR . '/includes/class_dm.php');
	require_once(DIR . '/includes/class_dm_attachment_pt.php');

	$attachdata =& vB_DataManager_Attachment_Pt::fetch_library($vbulletin, ERRTYPE_STANDARD);
	$attachdata->set_existing($attachment);

	($hook = vBulletinHook::fetch_hook('projectpost_attachment_update')) ? eval($hook) : false;

	if ($vbulletin->GPC['delete'])
	{
		$attachdata->delete();

		$vbulletin->url = 'project.php?' . $vbulletin->session->vars['sessionurl'] . "issueid=$issue[issueid]#attachments";
		eval(print_standard_redirect('pt_attachment_deleted'));
	}
	else if ($vbulletin->GPC['obsolete'] OR $vbulletin->GPC['unobsolete'])
	{
		if ($vbulletin->GPC['obsolete'])
		{
			$attachdata->set('status', 'obsolete');
		}
		else if ($vbulletin->GPC['unobsolete'])
		{
			$attachdata->set('status', 'current');
		}
		$attachdata->save();

		$vbulletin->url = 'project.php?' . $vbulletin->session->vars['sessionurl'] . "issueid=$issue[issueid]#attachments";
		eval(print_standard_redirect('pt_attachment_edited'));
	}
	else
	{
		// we did nothing, just make it look like an edit
		$vbulletin->url = 'project.php?' . $vbulletin->session->vars['sessionurl'] . "issueid=$issue[issueid]#attachments";
		eval(print_standard_redirect('pt_attachment_edited'));
	}
}

// #######################################################################
if ($_REQUEST['do'] == 'manageattach')
{
	$vbulletin->input->clean_array_gpc('r', array(
		'attachmentid' => TYPE_UINT
	));

	$attachment = $db->query_first("
		SELECT issueattach.*
		FROM " . TABLE_PREFIX . "pt_issueattach AS issueattach
		WHERE issueattach.attachmentid = " . $vbulletin->GPC['attachmentid']
	);

	$issue = verify_issue($attachment['issueid']);
	$project = verify_project($issue['projectid']);

	$issueperms = fetch_project_permissions($vbulletin->userinfo, $project['projectid'], $issue['issuetypeid']);
	if (!($issueperms['attachpermissions'] & $vbulletin->pt_bitfields['attach']['canattachedit'])
		OR (!($issueperms['attachpermissions'] & $vbulletin->pt_bitfields['attach']['canattacheditothers']) AND $vbulletin->userinfo['userid'] != $attachment['userid'])
	)
	{
		print_no_permission();
	}

	// navbar and output
	$navbits = construct_navbits(array(
		'project.php' . $vbulletin->session->vars['sessionurl_q'] => $vbphrase['projects'],
		"project.php?" . $vbulletin->session->vars['sessionurl'] . "projectid=$project[projectid]" => $project['title_clean'],
		"project.php?" . $vbulletin->session->vars['sessionurl'] . "issueid=$issue[issueid]" => $issue['title'],
		'' => $vbphrase['manage_attachment']
	));
	eval('$navbar = "' . fetch_template('navbar') . '";');

	($hook = vBulletinHook::fetch_hook('projectpost_attachment_manage')) ? eval($hook) : false;

	eval('print_output("' . fetch_template('pt_manageattach') . '");');
}

// #######################################################################
if ($_POST['do'] == 'updateprojectsubscription')
{
	$vbulletin->input->clean_array_gpc('p', array(
		'projectid' => TYPE_UINT,
		'issuetypes' => TYPE_ARRAY_NOHTML,
		'subscribetype' => TYPE_NOHTML
	));

	if (!$vbulletin->userinfo['userid'])
	{
		print_no_permission();
	}

	$project = verify_project($vbulletin->GPC['projectid']);
	$projectperms = fetch_project_permissions($vbulletin->userinfo, $project['projectid']);

	switch ($vbulletin->GPC['subscribetype'])
	{
		case 'none':
		case 'daily':
		case 'weekly':
			break;

		default:
			$vbulletin->GPC['subscribetype'] = 'none';
	}

	($hook = vBulletinHook::fetch_hook('projectpost_projectsubscription_update')) ? eval($hook) : false;

	foreach ($vbulletin->GPC['issuetypes'] AS $issuetypeid)
	{
		if (!($projectperms["$issuetypeid"]['generalpermissions'] & $vbulletin->pt_bitfields['general']['canview']))
		{
			continue;
		}

		$db->query_write("
			REPLACE INTO " . TABLE_PREFIX . "pt_projecttypesubscribe
				(userid, projectid, issuetypeid, subscribetype)
			VALUES
				(" . $vbulletin->userinfo['userid'] . ",
				$project[projectid],
				'" . $db->escape_string($issuetypeid) . "',
				'" . $db->escape_string($vbulletin->GPC['subscribetype']) . "')
		");
	}

	$vbulletin->url = 'project.php?' . $vbulletin->session->vars['sessionurl'] . "projectid=$project[projectid]";
	eval(print_standard_redirect('pt_subscriptions_updated'));
}

// #######################################################################
if ($_REQUEST['do'] == 'manageprojectsubscription')
{
	$vbulletin->input->clean_array_gpc('r', array(
		'projectid' => TYPE_UINT
	));

	if (!$vbulletin->userinfo['userid'])
	{
		print_no_permission();
	}

	$project = verify_project($vbulletin->GPC['projectid']);
	$projectperms = fetch_project_permissions($vbulletin->userinfo, $project['projectid']);

	foreach ($vbulletin->pt_issuetype AS $issuetypeid => $typeinfo)
	{
		if (!($projectperms["$issuetypeid"]['generalpermissions'] & $vbulletin->pt_bitfields['general']['canview']))
		{
			continue;
		}

		$optionid = "type_$issuetypeid";
		$optionname = "issuetypes[]";
		$optionvalue = $issuetypeid;
		$optionchecked = '';
		$optiontitle = $vbphrase["issuetype_{$issuetypeid}_plural"];

		eval('$issuetypes .= "' . fetch_template('pt_checkbox_option') . '";');
	}

	if (!$issuetypes)
	{
		print_no_permission();
	}

	// navbar and output
	$navbits = construct_navbits(array(
		'project.php' . $vbulletin->session->vars['sessionurl_q'] => $vbphrase['projects'],
		"project.php?" . $vbulletin->session->vars['sessionurl'] . "projectid=$project[projectid]" => $project['title_clean'],
		'' => $vbphrase['manage_project_subscription']
	));
	eval('$navbar = "' . fetch_template('navbar') . '";');

	($hook = vBulletinHook::fetch_hook('projectpost_project_subscription_manage')) ? eval($hook) : false;

	eval('print_output("' . fetch_template('pt_manageprojectsubscription') . '");');
}

// #######################################################################
if ($_POST['do'] == 'updatesubscription')
{
	$vbulletin->input->clean_array_gpc('p', array(
		'issueid' => TYPE_UINT,
		'subscribetype' => TYPE_NOHTML
	));

	$issue = verify_issue($vbulletin->GPC['issueid']);
	$project = verify_project($issue['projectid']);

	$issueperms = fetch_project_permissions($vbulletin->userinfo, $project['projectid'], $issue['issuetypeid']);

	if (!$vbulletin->userinfo['userid'])
	{
		print_no_permission();
	}

	($hook = vBulletinHook::fetch_hook('projectpost_subscription_update')) ? eval($hook) : false;

	if ($vbulletin->GPC['subscribetype'])
	{
		$subscriptiondata =& datamanager_init('Pt_IssueSubscribe', $vbulletin, ERRTYPE_STANDARD);
		$subscriptiondata->set('subscribetype', $vbulletin->GPC['subscribetype']);
		$subscriptiondata->set('issueid', $issue['issueid']);
		$subscriptiondata->set('userid', $vbulletin->userinfo['userid']);
		$subscriptiondata->save();
	}
	else
	{
		$subscription = $db->query_first("
			SELECT *
			FROM " . TABLE_PREFIX . "pt_issuesubscribe
			WHERE issueid = $issue[issueid]
				AND userid = " . $vbulletin->userinfo['userid']
		);
		if ($subscription)
		{
			$subscriptiondata =& datamanager_init('Pt_IssueSubscribe', $vbulletin, ERRTYPE_STANDARD);
			$subscriptiondata->set_existing($subscription);
			$subscriptiondata->delete();
		}
	}

	$vbulletin->url = 'project.php?' . $vbulletin->session->vars['sessionurl'] . "issueid=$issue[issueid]";
	eval(print_standard_redirect('pt_subscriptions_updated'));
}

// #######################################################################
if ($_REQUEST['do'] == 'managesubscription')
{
	$vbulletin->input->clean_array_gpc('r', array(
		'issueid' => TYPE_UINT
	));

	$issue = verify_issue($vbulletin->GPC['issueid']);
	$project = verify_project($issue['projectid']);

	$issueperms = fetch_project_permissions($vbulletin->userinfo, $project['projectid'], $issue['issuetypeid']);

	if (!$vbulletin->userinfo['userid'])
	{
		print_no_permission();
	}

	$subscription = $db->query_first("
		SELECT *
		FROM " . TABLE_PREFIX . "pt_issuesubscribe
		WHERE issueid = $issue[issueid]
			AND userid = " . $vbulletin->userinfo['userid']
	);

	// navbar and output
	$navbits = construct_navbits(array(
		'project.php' . $vbulletin->session->vars['sessionurl_q'] => $vbphrase['projects'],
		"project.php?" . $vbulletin->session->vars['sessionurl'] . "projectid=$project[projectid]" => $project['title_clean'],
		"project.php?" . $vbulletin->session->vars['sessionurl'] . "issueid=$issue[issueid]" => $issue['title'],
		'' => $vbphrase['manage_subscription']
	));
	eval('$navbar = "' . fetch_template('navbar') . '";');

	if ($subscription)
	{
		$subscription_selected = array("$subscription[subscribetype]" => ' selected="selected"');
	}
	else
	{
		$type_map = array('none', 'instant', 'daily', 'weekly');

		$type = (($vbulletin->userinfo['autosubscribe'] == 9999 OR $vbulletin->userinfo['autosubscribe'] == -1) ? 'none' : $type_map[$vbulletin->userinfo['autosubscribe']]);

		$subscription_selected = array($type => ' selected="selected"');
	}

	($hook = vBulletinHook::fetch_hook('projectpost_subscription_manage')) ? eval($hook) : false;

	eval('print_output("' . fetch_template('pt_managesubscription') . '");');
}

// #######################################################################
if ($_POST['do'] == 'updatesubscriptions')
{
	$vbulletin->input->clean_array_gpc('p', array(
		'issuesubscription' => TYPE_ARRAY_INT,
		'what' => TYPE_STR
	));

	if (!$vbulletin->userinfo['userid'])
	{
		print_no_permission();
	}

	switch ($vbulletin->GPC['what'])
	{
		case 'unsubscribe':
		case 'none':
		case 'instant':
		case 'daily':
		case 'weekly':
			break;

		default:
			$vbulletin->GPC['what'] = 'none';
	}

	if ($vbulletin->GPC['issuesubscription'])
	{
		if ($vbulletin->GPC['what'] == 'unsubscribe')
		{
			$db->query_write("
				DELETE FROM " . TABLE_PREFIX . "pt_issuesubscribe
				WHERE userid = " . $vbulletin->userinfo['userid'] . "
					AND issueid IN (" . implode(',', $vbulletin->GPC['issuesubscription']) . ")
			");
		}
		else
		{
			$db->query_write("
				UPDATE " . TABLE_PREFIX . "pt_issuesubscribe SET
					subscribetype = '" . $db->escape_string($vbulletin->GPC['what']) . "'
				WHERE userid = " . $vbulletin->userinfo['userid'] . "
					AND issueid IN (" . implode(',', $vbulletin->GPC['issuesubscription']) . ")
			");
		}
	}

	$vbulletin->url = 'project.php' . $vbulletin->session->vars['sessionurl_q'];
	eval(print_standard_redirect('pt_subscriptions_updated'));
}

// #######################################################################
if ($_POST['do'] == 'updateprojectsubscriptions')
{
	$vbulletin->input->clean_array_gpc('p', array(
		'projectsubscription' => TYPE_ARRAY_ARRAY,
		'what' => TYPE_STR
	));

	if (!$vbulletin->userinfo['userid'])
	{
		print_no_permission();
	}

	switch ($vbulletin->GPC['what'])
	{
		case 'unsubscribe':
		case 'none':
		case 'daily':
		case 'weekly':
			break;

		default:
			$vbulletin->GPC['what'] = 'none';
	}

	if ($vbulletin->GPC['what'] == 'unsubscribe')
	{
		foreach ($vbulletin->GPC['projectsubscription'] AS $projectid => $types)
		{
			$projectid = intval($projectid);

			foreach ($types AS $issuetypeid => $devnull)
			{
				$db->query_write("
					DELETE FROM " . TABLE_PREFIX . "pt_projecttypesubscribe
					WHERE userid = " . $vbulletin->userinfo['userid'] . "
						AND projectid = $projectid
						AND issuetypeid = '" . $db->escape_string($issuetypeid) . "'
				");
			}
		}
	}
	else
	{
		foreach ($vbulletin->GPC['projectsubscription'] AS $projectid => $types)
		{
			$projectid = intval($projectid);

			foreach ($types AS $issuetypeid => $devnull)
			{
				$db->query_write("
					UPDATE " . TABLE_PREFIX . "pt_projecttypesubscribe SET
						subscribetype = '" . $db->escape_string($vbulletin->GPC['what']) . "'
					WHERE userid = " . $vbulletin->userinfo['userid'] . "
						AND projectid = $projectid
						AND issuetypeid = '" . $db->escape_string($issuetypeid) . "'
				");
			}
		}
	}

	$vbulletin->url = 'project.php' . $vbulletin->session->vars['sessionurl_q'];
	eval(print_standard_redirect('pt_subscriptions_updated'));
}

// #######################################################################
if ($_REQUEST['do'] == 'managesubscriptions')
{
	$vbulletin->input->clean_array_gpc('r', array(
		'pagenumber' => TYPE_UINT
	));

	if (!$vbulletin->userinfo['userid'])
	{
		print_no_permission();
	}

	$perms_query = build_issue_permissions_query($vbulletin->userinfo);
	if (!$perms_query)
	{
		print_no_permission();
	}

	// issues per page = 0 means "unlmiited"
	if (!$vbulletin->options['pt_issuesperpage'])
	{
		$vbulletin->options['pt_issuesperpage'] = 999999;
	}

	$marking = ($vbulletin->options['threadmarking'] AND $vbulletin->userinfo['userid']);

	build_issue_private_lastpost_sql_all($vbulletin->userinfo, $private_lastpost_join, $private_lastpost_fields);

	$replycount_clause = fetch_private_replycount_clause($vbulletin->userinfo);

	// wrapping this in a do-while allows us to detect if someone goes to a page
	// that's too high and take them back to the last page seamlessly
	do
	{
		if (!$vbulletin->GPC['pagenumber'])
		{
			$vbulletin->GPC['pagenumber'] = 1;
		}
		$start = ($vbulletin->GPC['pagenumber'] - 1) * $vbulletin->options['pt_issuesperpage'];

		$subscriptions = $db->query_read("
			SELECT SQL_CALC_FOUND_ROWS issue.*, issuesubscribe.subscribetype
				" . ($marking ? ", issueread.readtime AS issueread, projectread.readtime AS projectread" : '') . "
				" . ($private_lastpost_fields ? ", $private_lastpost_fields" : '') . "
				" . ($replycount_clause ? ", $replycount_clause AS replycount" : '') . "
			FROM " . TABLE_PREFIX . "pt_issuesubscribe AS issuesubscribe
			INNER JOIN " . TABLE_PREFIX . "pt_issue AS issue ON (issue.issueid = issuesubscribe.issueid)
			" . ($marking ? "
				LEFT JOIN " . TABLE_PREFIX . "pt_issueread AS issueread ON (issueread.issueid = issue.issueid AND issueread.userid = " . $vbulletin->userinfo['userid'] . ")
				LEFT JOIN " . TABLE_PREFIX . "pt_projectread as projectread ON (projectread.projectid = issue.projectid AND projectread.userid = " . $vbulletin->userinfo['userid'] . " AND projectread.issuetypeid = issue.issuetypeid)
			" : '') . "
			$private_lastpost_join
			WHERE issuesubscribe.userid = " . $vbulletin->userinfo['userid'] . "
				AND (" . implode(' OR ', $perms_query) . ")
			ORDER BY lastpost DESC
			LIMIT $start, " . $vbulletin->options['pt_issuesperpage']
		);

		list($issue_count) = $db->query_first("SELECT FOUND_ROWS()", DBARRAY_NUM);
		if ($start >= $issue_count)
		{
			$vbulletin->GPC['pagenumber'] = ceil($issue_count / $vbulletin->options['pt_issuesperpage']);
		}
	}
	while ($start >= $issue_count AND $issue_count);

	$pagenav = construct_page_nav(
		$vbulletin->GPC['pagenumber'],
		$vbulletin->options['pt_issuesperpage'],
		$issue_count,
		'projectpost.php?' . $vbulletin->session->vars['sessionurl'] . "do=managesubscriptions",
		''
	);

	$subscriptionbits = '';
	while ($issue = $db->fetch_array($subscriptions))
	{
		$issue = prepare_issue($issue);
		$issue['notification'] = $vbphrase["$issue[subscribetype]"];

		($hook = vBulletinHook::fetch_hook('projectpost_subscription_bit')) ? eval($hook) : false;

		eval('$subscriptionbits .= "' . fetch_template('pt_subscriptionbit') . '";');
	}

	// project subscriptions
	build_project_private_lastpost_sql_all($vbulletin->userinfo,
		$private_lastpost_join, $private_lastpost_fields
	);

	$projecttype_subscriptions = $db->query_read("
		SELECT project.*, projecttype.*
			" . ($private_lastpost_fields ? ", $private_lastpost_fields" : '') . "
			, projecttypesubscribe.subscribetype
		FROM " . TABLE_PREFIX . "pt_projecttypesubscribe AS projecttypesubscribe
		INNER JOIN " . TABLE_PREFIX . "pt_projecttype AS projecttype ON
			(projecttype.projectid = projecttypesubscribe.projectid AND projecttype.issuetypeid = projecttypesubscribe.issuetypeid)
		INNER JOIN " . TABLE_PREFIX . "pt_project AS project ON (project.projectid = projecttypesubscribe.projectid)
		INNER JOIN " . TABLE_PREFIX . "pt_issuetype AS issuetype ON (issuetype.issuetypeid = projecttypesubscribe.issuetypeid)
		$private_lastpost_join
		WHERE projecttypesubscribe.userid = " . $vbulletin->userinfo['userid'] . "
		ORDER BY project.displayorder, issuetype.displayorder
	");
	$project_subscriptionbits = '';
	while ($projecttype = $db->fetch_array($projecttype_subscriptions))
	{
		$issueperms = fetch_project_permissions($vbulletin->userinfo, $projecttype['projectid'], $projecttype['issuetypeid']);
		if (!($issueperms['generalpermissions'] & $vbulletin->pt_bitfields['general']['canview']))
		{
			continue;
		}

		$projecttype['issuetype'] = $vbphrase["issuetype_$projecttype[issuetypeid]_plural"];
		if ($typeicon = $vbulletin->pt_issuetype["$projecttype[issuetypeid]"]['iconfile'])
		{
			$projecttype['typeicon'] = $typeicon;
		}

		$show['private_lastpost'] = (($issueperms['generalpermissions'] & $vbulletin->pt_bitfields['general']['canviewothers']) ? false : true);

		if ($projecttype['lastpost'])
		{
			$projecttype['lastpostdate'] = vbdate($vbulletin->options['dateformat'], $projecttype['lastpost'], true);
			$projecttype['lastposttime'] = vbdate($vbulletin->options['timeformat'], $projecttype['lastpost']);
			$projecttype['lastissuetitle_short'] = fetch_trimmed_title(fetch_censored_text($projecttype['lastissuetitle']));
		}
		else
		{
			$projecttype['lastpostdate'] = '';
			$projecttype['lastposttime'] = '';
		}

		$projecttype['notification'] = $vbphrase["$projecttype[subscribetype]"];

		eval('$project_subscriptionbits .= "' . fetch_template('pt_project_subscriptionbit') . '";');
	}

	require_once(DIR . '/includes/functions_user.php');
	construct_usercp_nav('ptsubscriptions');

	// navbar and output
	$navbits = construct_navbits(array(
		'usercp.php' . $vbulletin->session->vars['sessionurl_q'] => $vbphrase['user_control_panel'],
		'project.php' . $vbulletin->session->vars['sessionurl_q'] => $vbphrase['projects'],
		'' => $vbphrase['issue_subscriptions']
	));
	eval('$navbar = "' . fetch_template('navbar') . '";');

	($hook = vBulletinHook::fetch_hook('projectpost_subscription_complete')) ? eval($hook) : false;

	// shell template
	eval('$HTML = "' . fetch_template('pt_managesubscriptions') . '";');
	eval('print_output("' . fetch_template('USERCP_SHELL') . '");');
}

// #######################################################################
if ($_POST['do'] == 'processpetition')
{
	$vbulletin->input->clean_array_gpc('p', array(
		'issuenoteid' => TYPE_UINT,
		'confirm' => TYPE_ARRAY_STR
	));

	$issuenote = $db->query_first("
		SELECT issuenote.*, issuepetition.*
		FROM " . TABLE_PREFIX . "pt_issuenote AS issuenote
		INNER JOIN " . TABLE_PREFIX . "pt_issuepetition AS issuepetition ON (issuepetition.issuenoteid = issuenote.issuenoteid)
		WHERE issuenote.issuenoteid = " . $vbulletin->GPC['issuenoteid'] . "
	");
	$issue = verify_issue($issuenote['issueid']);
	$project = verify_project($issue['projectid']);

	$issueperms = fetch_project_permissions($vbulletin->userinfo, $project['projectid'], $issue['issuetypeid']);
	$posting_perms = prepare_issue_posting_pemissions($issue, $issueperms);

	if (!$posting_perms['status_edit'])
	{
		// if you can't edit the status, you can't process the petition
		print_no_permission();
	}

	if ($issuenote['resolution'] != 'pending')
	{
		standard_error(fetch_error('pt_petition_not_pending'));
	}

	$petitiondata =& datamanager_init('Pt_IssuePetition', $vbulletin, ERRTYPE_STANDARD);
	$petitiondata->set_existing($issuenote);
	$petitiondata->set('resolution', !empty($vbulletin->GPC['confirm']['yes']) ? 'accepted' : 'rejected');

	($hook = vBulletinHook::fetch_hook('projectpost_petition')) ? eval($hook) : false;

	$petitiondata->save();

	$vbulletin->url = 'project.php?' . $vbulletin->session->vars['sessionurl'] . "do=gotonote&amp;issuenoteid=$issuenote[issuenoteid]";
	eval(print_standard_redirect('pt_petition_processed'));
}

// #######################################################################
if ($_REQUEST['do'] == 'changeissuestate')
{
	$vbulletin->input->clean_array_gpc('r', array(
		'issueid' => TYPE_UINT,
		'fromstate' => TYPE_NOHTML,
		'securitytoken' => TYPE_NOHTML,
	));

	$issue = verify_issue($vbulletin->GPC['issueid']);
	$project = verify_project($issue['projectid']);

	$issueperms = fetch_project_permissions($vbulletin->userinfo, $project['projectid'], $issue['issuetypeid']);
	$posting_perms = prepare_issue_posting_pemissions($issue, $issueperms);

	if (!$posting_perms['issue_close'])
	{
		print_no_permission();
	}

	switch ($vbulletin->GPC['fromstate'])
	{
		case 'open':
		case 'closed':
			break;

		default:
			$vbulletin->GPC['fromstate'] = 'open';
	}

	if ($vbulletin->userinfo['userid'] != 0 AND !verify_security_token($vbulletin->GPC['securitytoken'], $vbulletin->userinfo['securitytoken_raw']))
	{
		standard_error(fetch_error('pt_action_error',
			"projectpost.php?" . $vbulletin->session->vars['sessionurl']
				. "do=changeissuestate"
				. "&amp;issueid=$issue[issueid]"
				. "&amp;securitytoken=" . $vbulletin->userinfo['securitytoken']
				. "&amp;fromstate=" . $vbulletin->GPC['fromstate']
		));
	}

	$issuedata =& datamanager_init('Pt_Issue', $vbulletin, ERRTYPE_STANDARD);
	$issuedata->set_info('project', $project);
	$issuedata->set_existing($issue);
	$issuedata->set('state', $vbulletin->GPC['fromstate'] == 'open' ? 'closed' : 'open');
	$issuedata->save();

	$vbulletin->url = 'project.php?' . $vbulletin->session->vars['sessionurl'] . "issueid=$issue[issueid]";
	eval(print_standard_redirect('pt_issue_state_modified'));
}

// #######################################################################
if ($_REQUEST['do'] == 'changeissueprivacy')
{
	$vbulletin->input->clean_array_gpc('r', array(
		'issueid' => TYPE_UINT,
		'from' => TYPE_NOHTML,
		'securitytoken' => TYPE_NOHTML,
	));

	$issue = verify_issue($vbulletin->GPC['issueid']);
	$project = verify_project($issue['projectid']);

	$issueperms = fetch_project_permissions($vbulletin->userinfo, $project['projectid'], $issue['issuetypeid']);
	$posting_perms = prepare_issue_posting_pemissions($issue, $issueperms);

	if (!$posting_perms['issue_edit'] OR !$posting_perms['private_edit'])
	{
		print_no_permission();
	}

	if ($issue['visible'] != 'visible' AND $issue['visible'] != 'private')
	{
		standard_error(fetch_error('invalidid', $vbphrase['issue'], $vbulletin->options['contactuslink']));
	}

	switch ($vbulletin->GPC['from'])
	{
		case 'private':
		case 'public':
			break;

		default:
			$vbulletin->GPC['from'] = 'public';
	}

	if ($vbulletin->userinfo['userid'] != 0 AND !verify_security_token($vbulletin->GPC['securitytoken'], $vbulletin->userinfo['securitytoken_raw']))
	{
		standard_error(fetch_error('pt_action_error',
			"projectpost.php?" . $vbulletin->session->vars['sessionurl']
				. "do=changeissueprivacy"
				. "&amp;issueid=$issue[issueid]"
				. "&amp;securitytoken=" . $vbulletin->userinfo['securitytoken']
				. "&amp;from=" . $vbulletin->GPC['from']
		));
	}

	$issuedata =& datamanager_init('Pt_Issue', $vbulletin, ERRTYPE_STANDARD);
	$issuedata->set_existing($issue);
	$issuedata->set('visible', $vbulletin->GPC['from'] == 'public' ? 'private' : 'public');
	$issuedata->save();

	$vbulletin->url = 'project.php?' . $vbulletin->session->vars['sessionurl'] . "issueid=$issue[issueid]";
	eval(print_standard_redirect('pt_issue_state_modified'));
}

// #######################################################################
if ($_POST['do'] == 'processmoveissue')
{
	$vbulletin->input->clean_array_gpc('p', array(
		'issueid' => TYPE_UINT,
		'projectid' => TYPE_UINT,
		'issuetypeid' => TYPE_NOHTML,
		'projectcategoryid' => TYPE_UINT,
		'appliesversionid' => TYPE_UINT,
		'addressedversionid' => TYPE_INT,
		'issuestatusid' => TYPE_UINT,
		'milestoneid' => TYPE_UINT
	));

	$issue = verify_issue($vbulletin->GPC['issueid']);
	$project = verify_project($issue['projectid']);
	$new_project = verify_project($vbulletin->GPC['projectid']);

	verify_issuetypeid($vbulletin->GPC['issuetypeid'], $new_project['projectid']);

	$issueperms = fetch_project_permissions($vbulletin->userinfo, $project['projectid'], $issue['issuetypeid']);
	$new_issueperms = fetch_project_permissions($vbulletin->userinfo, $new_project['projectid'], $vbulletin->GPC['issuetypeid']);

	$posting_perms = prepare_issue_posting_pemissions($issue, $issueperms);
	$new_posting_perms = prepare_issue_posting_pemissions($issue, $new_issueperms);

	if (!($issueperms['generalpermissions'] & $vbulletin->pt_bitfields['general']['canmoveissue']))
	{
		print_no_permission();
	}

	// Check we can both view and post the target issue type
	if (!($new_issueperms['generalpermissions'] & $vbulletin->pt_bitfields['general']['canview'])
		OR !($new_issueperms['postpermissions'] & $vbulletin->pt_bitfields['post']['canpostnew']))
	{
		print_no_permission();
	}

	$issuedata =& datamanager_init('Pt_Issue', $vbulletin, ERRTYPE_CP);
	$issuedata->set_existing($issue);
	$issuedata->set_info('perform_activity_updates', false);
	$issuedata->set_info('insert_change_log', false);

	$issuedata->set('issuetypeid', $vbulletin->GPC['issuetypeid']);
	$issuedata->set('projectid', $vbulletin->GPC['projectid']);
	$issuedata->set('projectcategoryid', $vbulletin->GPC['projectcategoryid']);
	$issuedata->set('appliesversionid', $vbulletin->GPC['appliesversionid']);

	if ($posting_perms['status_edit'] AND $new_posting_perms['status_edit'])
	{
		$issuedata->set('issuestatusid', $vbulletin->GPC['issuestatusid']);
	}
	else if (!$issuedata->validate_issuestatusid($issue['issuestatusid']))
	{
		// status is no longer valid, but can't be edited. Reset to default.
		$issuedata->set('issuestatusid',
			$vbulletin->pt_projects[$vbulletin->GPC['projectid']]['types'][$vbulletin->GPC['issuetypeid']]
		);
	}

	if ($posting_perms['milestone_edit'])
	{
		$issuedata->set('milestoneid', $vbulletin->GPC['milestoneid']);
	}
	else if (!$issuedata->validate_milestoneid($issue['milestoneid']))
	{
		// milestone is no longer valid, but can't be edited. Reset to default.
		$issuedata->set('milestoneid', 0);
	}

	switch ($vbulletin->GPC['addressedversionid'])
	{
		case -1:
			$issuedata->set('isaddressed', 1);
			$issuedata->set('addressedversionid', 0);
			break;

		case 0:
			$issuedata->set('isaddressed', 0);
			$issuedata->set('addressedversionid', 0);
			break;

		default:
			$issuedata->set('isaddressed', 1);
			$issuedata->set('addressedversionid', $vbulletin->GPC['addressedversionid']);
			break;
	}

	$issuedata->save();

	$vbulletin->url = 'project.php?' . $vbulletin->session->vars['sessionurl'] . "issueid=$issue[issueid]";
	eval(print_standard_redirect('pt_issue_state_modified'));
}

// #######################################################################
if ($_POST['do'] == 'moveissue2')
{
	$vbulletin->input->clean_array_gpc('r', array(
		'issueid' => TYPE_UINT,
		'project-issuetype' => TYPE_NOHTML,
	));

	list($projectid, $issuetypeid) = explode('-', $vbulletin->GPC['project-issuetype']);

	$issue = verify_issue($vbulletin->GPC['issueid'], true, array('milestone'));
	$project = verify_project($issue['projectid']);
	$new_project = verify_project($projectid);

	verify_issuetypeid($issuetypeid, $new_project['projectid']);

	$new_issuetype = $vbphrase["issuetype_{$issuetypeid}_singular"];

	$issueperms = fetch_project_permissions($vbulletin->userinfo, $project['projectid'], $issue['issuetypeid']);
	$new_issueperms = fetch_project_permissions($vbulletin->userinfo, $new_project['projectid'], $issuetypeid);

	$posting_perms = prepare_issue_posting_pemissions($issue, $issueperms);
	$new_posting_perms = prepare_issue_posting_pemissions($issue, $new_issueperms);

	$show['status_edit'] = ($posting_perms['status_edit'] AND $new_posting_perms['status_edit']);

	if (!($issueperms['generalpermissions'] & $vbulletin->pt_bitfields['general']['canmoveissue']))
	{
		print_no_permission();
	}

	// Check we can both view and post the target issue type
	if (!($new_issueperms['generalpermissions'] & $vbulletin->pt_bitfields['general']['canview'])
		OR !($new_issueperms['postpermissions'] & $vbulletin->pt_bitfields['post']['canpostnew']))
	{
		print_no_permission();
	}

	// categories
	$category_options = '';
	$optionclass = '';
	foreach ($vbulletin->pt_categories AS $category)
	{
		if ($category['projectid'] != $new_project['projectid'])
		{
			continue;
		}

		$optionvalue = $category['projectcategoryid'];
		$optiontitle = $category['title'];
		$optionselected = ($issue['projectcategoryid'] == $category['projectcategoryid'] ? ' selected="selected"' : '');
		eval('$category_options .= "' . fetch_template('option') . '";');
	}
	$category_unknown_selected = ($issue['projectcategoryid'] == 0 ? ' selected="selected"' : '');

	// setup versions
	$version_groups = array();
	$version_query = $db->query_read("
		SELECT projectversion.projectversionid, projectversion.versionname, projectversiongroup.groupname
		FROM " . TABLE_PREFIX . "pt_projectversion AS projectversion
		INNER JOIN " . TABLE_PREFIX . "pt_projectversiongroup AS projectversiongroup ON
			(projectversion.projectversiongroupid = projectversiongroup.projectversiongroupid)
		WHERE projectversion.projectid = $new_project[projectid]
		ORDER BY projectversion.effectiveorder DESC
	");
	while ($version = $db->fetch_array($version_query))
	{
		$version_groups["$version[groupname]"]["$version[projectversionid]"] = $version['versionname'];
	}

	$applies_versions = '';
	$addressed_versions = '';
	$optionclass = '';
	foreach ($version_groups AS $optgroup_label => $versions)
	{
		$group_applies = '';
		$group_addressed = '';
		foreach ($versions AS $optionvalue => $optiontitle)
		{
			$optionselected = ($issue['appliesversionid'] == $optionvalue ? ' selected="selected"' : '');
			eval('$group_applies .= "' . fetch_template('option') . '";');

			$optionselected = (($issue['isaddressed'] AND $issue['addressedversionid'] == $optionvalue) ? ' selected="selected"' : '');
			eval('$group_addressed .= "' . fetch_template('option') . '";');
		}

		$optgroup_options = $group_applies;
		eval('$applies_versions .= "' . fetch_template('optgroup') . '";');

		$optgroup_options = $group_addressed;
		eval('$addressed_versions .= "' . fetch_template('optgroup') . '";');
	}

	$applies_unknown_selected = ($issue['appliesversionid'] == 0 ? ' selected="selected"' : '');
	$addressed_unaddressed_selected = ($issue['isaddressed'] == 0 ? ' selected="selected"' : '');
	$addressed_next_selected = (($issue['isaddressed'] == 1 AND $issue['addressedversionid'] == 0) ? ' selected="selected"' : '');

	// status
	$status_options = build_issuestatus_select(
		$vbulletin->pt_issuetype["$issuetypeid"]['statuses'],
		$issue['issuestatusid']
	);

	// setup milestones
	$show['milestone'] = ($new_issueperms['generalpermissions'] & $vbulletin->pt_bitfields['general']['canviewmilestone']);
	$show['milestone_edit'] = ($show['milestone'] AND $new_posting_perms['milestone_edit']);
	$milestone_options = fetch_milestone_select($new_project['projectid'], $issue['milestoneid']);

	$navbits = array(
		'project.php' . $vbulletin->session->vars['sessionurl_q'] => $vbphrase['projects'],
		"project.php?" . $vbulletin->session->vars['sessionurl'] . "projectid=$project[projectid]" => $project['title_clean'],
		'project.php?' . $vbulletin->session->vars['sessionurl'] . "issueid=$issue[issueid]" => $issue['title'],
		'' => $vbphrase['edit_issue']
	);

	$navbits = construct_navbits($navbits);
	eval('$navbar = "' . fetch_template('navbar') . '";');

	eval('print_output("' . fetch_template('pt_move_issue_confirm') . '");');

}

// #######################################################################
if ($_REQUEST['do'] == 'moveissue')
{
	$vbulletin->input->clean_array_gpc('r', array(
		'issueid' => TYPE_UINT,
	));

	$issue = verify_issue($vbulletin->GPC['issueid']);
	$project = verify_project($issue['projectid']);

	$issueperms = fetch_project_permissions($vbulletin->userinfo, $project['projectid'], $issue['issuetypeid']);
	$posting_perms = prepare_issue_posting_pemissions($issue, $issueperms);

	if (!($issueperms['generalpermissions'] & $vbulletin->pt_bitfields['general']['canmoveissue']))
	{
		print_no_permission();
	}

	$project_type_select = '';
	$optionclass = '';
	foreach ($vbulletin->pt_projects AS $projectid => $projectinfo)
	{
		$project_perms["$projectid"] = fetch_project_permissions($vbulletin->userinfo, $projectid);

		$optgroup_options = '';
		foreach (array_keys($projectinfo['types']) AS $type)
		{
			// Check we can both view and post the target issue type
			if (!($project_perms["$projectid"]["$type"]['generalpermissions'] & $vbulletin->pt_bitfields['general']['canview']) OR !($project_perms["$projectid"]["$type"]['postpermissions'] & $vbulletin->pt_bitfields['post']['canpostnew']))
			{
				continue;
			}
			$optionvalue = $projectinfo['projectid'] . '-' . $type;
			$optiontitle = $vbphrase["issuetype_{$type}_singular"];
			$optionselected = (($issue['issuetypeid'] == $type AND $issue['projectid'] == $projectid) ? ' selected="selected"' : '');
			eval('$optgroup_options .= "' . fetch_template('option') . '";');
		}

		if (empty($optgroup_options))
		{
			continue;
		}

		$optgroup_label = $projectinfo['title'];
		eval('$project_type_select .= "' . fetch_template('optgroup') . '";');
	}

	$navbits = array(
		'project.php' . $vbulletin->session->vars['sessionurl_q'] => $vbphrase['projects'],
		"project.php?" . $vbulletin->session->vars['sessionurl'] . "projectid=$project[projectid]" => $project['title_clean'],
		'project.php?' . $vbulletin->session->vars['sessionurl'] . "issueid=$issue[issueid]" => $issue['title'],
		'' => $vbphrase['edit_issue']
	);

	$navbits = construct_navbits($navbits);
	eval('$navbar = "' . fetch_template('navbar') . '";');

	eval('print_output("' . fetch_template('pt_move_issue') . '");');

}

/*======================================================================*\
|| ####################################################################
|| # Downloaded: 17:45, Tue Nov 18th 2008
|| # RCS: $Revision: 27970 $
|| ####################################################################
\*======================================================================*/
?>