/**
* Anti-hammer protection
*
* @param int $hammer Hammer rate
* @param string $action Action type
* @param int $lastseen User last seen timestamp
* @return int
*/
function cot_shield_hammer($hammer, $action, $lastseen)
{
global $cfg, $sys;
if ($action == 'Hammering') {
cot_shield_protect();
cot_shield_clearaction();
cot_plugin_active('hits') && cot_stat_inc('totalantihammer');
}
if ($sys['now'] - $lastseen < 4) {
$hammer++;
if ($hammer > $cfg['shieldzhammer']) {
cot_shield_update(180, 'Hammering');
cot_log('IP banned 3 mins, was hammering', 'sec');
$hammer = 0;
}
} else {
if ($hammer > 0) {
$hammer--;
}
}
return $hammer;
}
$c = cot_import('c', 'G', 'TXT');
if (!empty($c) && !isset($structure['projects'][$c])) {
$c = '';
}
list($usr['auth_read'], $usr['auth_write'], $usr['isadmin']) = cot_auth('projects', 'any', 'RWA');
cot_block($usr['auth_write']);
/* === Hook === */
$extp = cot_getextplugins('projects.add.first');
foreach ($extp as $pl) {
include $pl;
}
/* ===== */
$sys['parser'] = $cfg['projects']['parser'];
$parser_list = cot_get_parsers();
if ($a == 'add') {
cot_shield_protect();
$ritem = array();
/* === Hook === */
foreach (cot_getextplugins('projects.add.add.first') as $pl) {
include $pl;
}
/* ===== */
$ritem = cot_projects_import('POST', array(), $usr);
list($usr['auth_read'], $usr['auth_write'], $usr['isadmin']) = cot_auth('projects', $ritem['item_cat']);
cot_block($usr['auth_write']);
/* === Hook === */
foreach (cot_getextplugins('projects.add.add.import') as $pl) {
include $pl;
}
/* ===== */
cot_projects_validate($ritem);
public function editAction()
{
global $structure, $cot_extrafields, $db_structure;
$id = cot_import('id', 'G', 'INT');
// id Объявления
$c = cot_import('c', 'G', 'TXT');
$act = cot_import('act', 'G', 'ALP');
if (empty($act)) {
$act = cot_import('act', 'P', 'ALP');
}
/* === Hook === */
foreach (cot_getextplugins('advboard.edit.first') as $pl) {
include $pl;
}
/* ===== */
// Права на любую категорию доски объявлений
list(cot::$usr['auth_read'], cot::$usr['auth_write'], cot::$usr['isadmin']) = cot_auth('advboard', 'any');
cot_block(cot::$usr['auth_write']);
if (!$c || !isset($structure['advboard'][$c])) {
cot_die_message(404, TRUE);
}
$category = $structure['advboard'][$c];
$category['config'] = cot::$cfg['advboard']['cat_' . $c];
$category['code'] = $c;
// Extra fields for structure
foreach ($cot_extrafields[$db_structure] as $exfld) {
$uname = $exfld['field_name'];
$val = $structure['advboard'][$c][$exfld['field_name']];
$category[$uname . '_title'] = isset(cot::$L['structure_' . $exfld['field_name'] . '_title']) ? cot::$L['structure_' . $exfld['field_name'] . '_title'] : $exfld['field_description'];
$category[$uname] = cot_build_extrafields_data('structure', $exfld, $val);
$category[$uname . '_value'] = $val;
}
$published = 0;
if (!$id) {
$advert = new advboard_model_Advert();
$advert->category = $c;
$advert->user = cot::$usr['id'];
} else {
$advert = advboard_model_Advert::getById($id);
if (!$advert) {
cot_die_message(404, TRUE);
}
if (!cot::$usr['isadmin']) {
if ($advert->user != cot::$usr['id']) {
cot_die_message(404, TRUE);
}
}
if ($c != $advert->category && isset($structure['advboard'][$advert->category])) {
$tmp = array('c' => $advert->category, 'a' => 'edit', 'id' => $advert->id);
if (!empty($act)) {
$tmp['act'] = $act;
}
cot_redirect(cot_url('advboard', array('c' => $advert->category, 'a' => 'edit', 'id' => $advert->id), '', true));
}
if ($act == 'clone') {
$id = null;
$advert = clone $advert;
// Установить статус и пользователя нового объекта
$advert->user = cot::$usr['id'];
$advert->state = advboard_model_Advert::DRAFT;
}
$published = $advert->state < 2 ? 1 : 0;
}
//Проверим права на категорию:
list(cot::$usr['auth_read'], cot::$usr['auth_write'], cot::$usr['isadmin'], cot::$usr['auth_upload']) = cot_auth('advboard', $c, 'RWA1');
if ($structure['advboard'][$c]['locked'] && !cot::$usr['isadmin']) {
cot_die_message(602, TRUE);
} elseif ($advert->id == 0) {
// Если у пользователя нет прав на подачу объявления, то ищем категорию куда он может подать оьбъявление
if (!cot::$usr['auth_write']) {
foreach ($structure['advboard'] as $catCode => $catRow) {
$auth_write = cot_auth('advboard', $catCode, 'W');
if ($auth_write) {
cot_redirect(cot_url('advboard', array('c' => $catCode, 'a' => 'edit'), '', true));
}
}
}
cot_block(cot::$usr['auth_write']);
}
// Владелец объявления
$user = array();
if ($advert->user > 0) {
$user = cot_user_data($advert->user);
}
$periodItems = adv_periodItems($c);
// Сохранение
if ($act == 'save') {
unset($_POST['id'], $_POST['user']);
cot_shield_protect();
/* === Hook === */
foreach (cot_getextplugins('advboard.save.first') as $pl) {
include $pl;
}
/* ===== */
// импортировать даты
$begin = (int) cot_import_date('begin');
$expire = (int) cot_import_date('expire');
if ($begin == 0) {
$begin = !empty($advert->begin) ? $advert->begin : cot::$sys['now'];
}
// Пересчитать период публикации объявления
if ($expire == 0 && cot::$cfg['advboard']['cat_' . $c]['maxPeriod'] > 0) {
$period = cot_import('period', 'P', 'INT');
$maxPeriod = max($periodItems);
if (empty($period)) {
$period = $maxPeriod;
}
if (!cot::$usr['isadmin'] && $period > $maxPeriod) {
$period = $maxPeriod;
}
if ($period > 0) {
$expire = $begin + $period * 86400;
}
}
if ($category['config']['title_require']) {
$advert->setValidator('title', 'required');
}
// Валидатор 'allowemptytext'
if (!$category['config']['allowemptytext']) {
$advert->setValidator('text', 'required');
}
if ($category['config']['phone_require']) {
// проверить надичие заполненного поля в профиле пользователя - владельца
if (empty($user['user_phone'])) {
$advert->setValidator('phone', 'required');
}
}
if ($category['config']['city_require']) {
// Проверить наличие заполненного города (id или названия) в профиле владельца
if (empty($user['user_city_name']) && empty($user['user_city'])) {
if (cot_plugin_active('regioncity')) {
$advert->setValidator('city', function ($value) {
$value = (int) $value;
if ($value == 0) {
return cot::$L['field_required'] . ': ' . advboard_model_Advert::fieldLabel('city');
}
return true;
});
} else {
$advert->setValidator('city_name', 'required');
}
}
}
if (cot::$usr['id'] == 0) {
$advert->setValidator('person', 'required');
// Email
$email = cot_import('email', 'P', 'TXT');
if (cot::$cfg['advboard']['guestEmailRequire']) {
if ($email == '') {
cot_error(cot::$L['advboard_err_noemail'], 'email');
}
}
if ($email != '') {
$tmp = advert_checkEmail($email);
if ($tmp !== true) {
cot_error($tmp, 'email');
}
}
// Капча
if (cot::$cfg['advboard']['guestUseCaptcha']) {
$verify = cot_import('verify', 'P', 'TXT');
if (!cot_captcha_validate($verify)) {
cot_error(cot::$L['captcha_verification_failed'], 'verify');
}
}
}
$advert->setData($_POST);
$advert->begin = $begin;
$advert->expire = $expire;
if (!cot::$usr['isadmin']) {
if (!cot::$cfg['advboard']['cat_' . $c]['allowSticky']) {
$advert->sticky = 0;
}
if (cot::$usr['id'] == 0) {
$advert->sticky = 0;
}
// гости не дают срочных объявлений
}
$advert->category = $c;
if (empty($advert->user) || !cot::$usr['isadmin']) {
$advert->user = cot::$usr['id'];
}
$published = cot_import('published', 'P', 'BOL');
if (!$published) {
$advert->state = advboard_model_Advert::DRAFT;
} elseif (cot::$usr['isadmin'] || cot_auth('advboard', $c, '2')) {
$advert->state = advboard_model_Advert::PUBLISHED;
} else {
$advert->state = advboard_model_Advert::AWAITING_MODERATION;
}
/* === Hook === */
foreach (cot_getextplugins('advboard.save.validate') as $pl) {
include $pl;
}
/* ===== */
// There is some errors
if (!$advert->validate() || cot_error_found()) {
$urlParams = array('c' => $c, 'a' => 'edit');
if ($advert->id > 0) {
$urlParams['id'] = $advert->id;
}
cot_redirect(cot_url('advboard', $urlParams, '', true));
}
if (empty($advert->sort)) {
$advert->sort = cot::$sys['now'];
}
$isNew = $advert->id == 0;
// Сохранение
if ($advert->save()) {
// Для незарега запомним id страницы для чтого, чтобы он мог ее отредактировать в пределах сесии
if ($isNew) {
if (cot::$usr['id'] == 0) {
if (empty($_SESSION['advboard'])) {
$_SESSION['advboard'] = array();
}
if (!in_array($id, $_SESSION['advboard'])) {
$_SESSION['advboard'][] = $advert->id;
}
}
if ($advert->state == advboard_model_Advert::PUBLISHED) {
cot_message(cot::$L['advboard_created']);
}
} else {
if ($advert->state == advboard_model_Advert::PUBLISHED) {
cot_message(cot::$L['advboard_updated']);
}
}
if ($advert->state == advboard_model_Advert::AWAITING_MODERATION) {
cot_message(cot::$L['advboard_awaiting_moderation']);
} elseif ($advert->state == advboard_model_Advert::DRAFT) {
cot_message(cot::$L['Saved']);
}
$redirectUrl = $advert->getUrl(true);
/* === Hook === */
foreach (cot_getextplugins('advboard.save.done') as $pl) {
include $pl;
}
/* ===== */
// Редирект на станицу объявления
cot_redirect($redirectUrl);
}
}
$crumbs = cot_structure_buildpath('advboard', $c);
if (cot::$cfg['advboard']['firstCrumb']) {
array_unshift($crumbs, array(cot_url('advboard'), cot::$L['advboard_ads']));
}
if (!$id) {
$crumbs[] = $title = cot::$L['advboard_add_new'];
cot::$out['subtitle'] = $title;
} else {
$crumbs[] = array($advert->url, $advert->title);
$crumbs[] = cot::$L['Edit'];
$title = cot::$L['advboard_advert'] . ' #' . $advert->id;
if (!empty($advert->title)) {
$title = $advert->title;
}
$title .= ': ' . cot::$L['Edit'];
if (!empty(cot::$out['subtitle'])) {
$title .= ' - ' . cot::$out['subtitle'];
}
cot::$out['subtitle'] = $title;
}
// Elemets placeholders
$placeHolder_Person = '';
$placeHolder_Phone = '';
$placeHolder_Email = '';
$placeHolder_City = '';
//if($advboard->user == cot::$usr['id'] && cot::$usr['id'] > 0) {
if (!empty($user)) {
// Контакное лицо
$placeHolder_Person = cot_user_full_name($user);
// Телефон
if (!empty($user['user_phone'])) {
$placeHolder_Phone = $user['user_phone'];
}
// email
if (!$user['user_hideemail']) {
$placeHolder_Email = $user['user_email'];
}
// город
if (!empty($user['user_city_name'])) {
$placeHolder_City = $user['user_city_name'];
}
}
// 'input_textarea_editor', 'input_textarea_medieditor', 'input_textarea_minieditor', ''
$editor = 'input_textarea_editor';
/* === Hook === */
foreach (cot_getextplugins('advboard.edit.main') as $pl) {
include $pl;
}
/* ===== */
$minYear = date('Y');
$maxYear = $minYear + 30;
$price = $advert->rawValue('price');
if ($price <= 0) {
$price = '';
}
$formElements = array('hidden' => array('element' => cot_inputbox('hidden', 'act', 'save')), 'category' => array('element' => cot_selectbox_structure('advboard', $advert->category, 'category'), 'label' => advboard_model_Advert::fieldLabel('category')), 'price' => array('element' => cot_inputbox('text', 'price', $price), 'label' => advboard_model_Advert::fieldLabel('price'), 'hint' => cot::$L['advboard_price_hint']), 'title' => array('element' => cot_inputbox('text', 'title', $advert->rawValue('title')), 'required' => true, 'label' => advboard_model_Advert::fieldLabel('title')), 'description' => array('element' => cot_inputbox('text', 'description', $advert->rawValue('description')), 'label' => advboard_model_Advert::fieldLabel('description')), 'text' => array('element' => cot_textarea('text', $advert->rawValue('text'), 5, 120, '', $editor), 'label' => advboard_model_Advert::fieldLabel('text')), 'person' => array('element' => cot_inputbox('text', 'person', $advert->rawValue('person'), array('class' => 'form-control', 'placeholder' => $placeHolder_Person)), 'label' => advboard_model_Advert::fieldLabel('person'), 'required' => cot::$usr['id'] == 0), 'email' => array('element' => cot_inputbox('text', 'email', $advert->rawValue('email'), array('class' => 'form-control', 'placeholder' => $placeHolder_Email)), 'label' => advboard_model_Advert::fieldLabel('email')), 'city' => array('element' => cot_inputbox('text', 'city_name', $advert->rawValue('city_name'), array('class' => 'form-control', 'placeholder' => $placeHolder_City)), 'label' => advboard_model_Advert::fieldLabel('city_name'), 'required' => $category['config']['city_require']), 'phone' => array('element' => cot_inputbox('text', 'phone', $advert->rawValue('phone'), array('class' => 'form-control', 'placeholder' => $placeHolder_Phone)), 'label' => advboard_model_Advert::fieldLabel('phone'), 'required' => $category['config']['phone_require']), 'sticky' => array('element' => cot_checkbox($advert->sticky, 'sticky', advboard_model_Advert::fieldLabel('sticky')), 'label' => advboard_model_Advert::fieldLabel('sticky')), 'published' => array('element' => cot_checkbox($published, 'published', cot::$L['advboard_published'] . '?'), 'label' => cot::$L['advboard_published'] . '?'), 'begin' => array('element' => cot_selectbox_date($advert->begin, 'long', 'begin', $maxYear, $minYear), 'label' => advboard_model_Advert::fieldLabel('begin')), 'expire' => array('element' => cot_selectbox_date($advert->expire, 'long', 'expire', $maxYear, $minYear), 'label' => advboard_model_Advert::fieldLabel('expire')), 'sort' => array('element' => cot_selectbox_date($advert->sort, 'long', 'sort', $maxYear, $minYear), 'label' => advboard_model_Advert::fieldLabel('sort')), 'period' => array('element' => cot_selectbox('', 'period', $periodItems, array(), false), 'label' => cot::$L['advboard_period']));
if (!empty($cot_extrafields[cot::$db->advboard])) {
// Extra fields for ads
foreach ($cot_extrafields[cot::$db->advboard] as $exfld) {
$fName = $exfld['field_name'];
$formElements[$fName] = array('element' => cot_build_extrafields($fName, $exfld, $advert->rawValue($fName)));
if ($exfld['field_type'] !== 'checkbox') {
$formElements[$fName]['label'] = isset(cot::$L['advboard_' . $exfld['field_name'] . '_title']) ? cot::$L['advboard_' . $exfld['field_name'] . '_title'] : advboard_model_Advert::fieldLabel($fName);
}
}
}
if (cot_plugin_active('regioncity')) {
$formElements['city']['element'] = rec_select2_city('city', $advert->rawValue('city'), true, array('class' => 'form-control', 'placeholder' => $placeHolder_City));
}
if ($category['config']['city_require']) {
$formElements['city']['required'] = true;
}
if ($category['config']['phone_require']) {
$formElements['phone']['required'] = true;
}
// Hints
if (!empty($user)) {
// Контакное лицо
$formElements['person']['hint'] = cot::$L['advboard_leave_empty_to_use'] . ": " . cot_user_full_name($user);
// Телефон
if (!empty($user['user_phone'])) {
$formElements['phone']['hint'] = cot::$L['advboard_leave_empty_to_use'] . ": " . $user['user_phone'];
}
// email
if (!$user['user_hideemail']) {
$formElements['email']['hint'] = cot::$L['advboard_leave_empty_to_use'] . ": " . $user['user_email'];
}
// город
if (!empty($user['user_city_name'])) {
$formElements['city']['hint'] = cot::$L['advboard_leave_empty_to_use'] . ": " . $user['user_city_name'];
}
}
if (!cot::$usr['isadmin']) {
unset($formElements['begin']);
unset($formElements['expire']);
unset($formElements['sort']);
if (cot::$usr['id'] == 0) {
if (cot::$cfg['advboard']['guestEmailRequire']) {
$formElements['email']['required'] = true;
}
// Гости не дают срочных объявлений
unset($formElements['sticky']);
// Капча
if (cot::$cfg['advboard']['guestUseCaptcha']) {
$formElements['verify'] = array('element' => cot_inputbox('text', 'verify'), 'img' => cot_captcha_generate(), 'label' => cot::$L['advboard_captcha'], 'required' => true);
}
}
if (!cot::$cfg['advboard']['cat_' . $c]['allowSticky'] && isset($formElements['sticky'])) {
unset($formElements['sticky']);
}
} else {
// Администратор напрямую указывает дату окончания публикации
unset($formElements['period']);
}
$actionParams = array('a' => 'edit', 'c' => $advert->category);
if ($advert->id > 0) {
$actionParams['id'] = $advert->id;
}
$view = new View();
$view->breadcrumbs = cot_breadcrumbs($crumbs, cot::$cfg['homebreadcrumb'], true);
$view->page_title = $title;
$view->category = $category;
$view->advert = $advert;
$view->user = $user;
$view->formElements = $formElements;
$view->formAction = cot_url('advboard', $actionParams);
/* === Hook === */
foreach (cot_getextplugins('advboard.edit.view') as $pl) {
include $pl;
}
/* ===== */
return $view->render(array('advboard', 'edit', $structure['advboard'][$c]['tpl']));
}
