mirror of
https://github.com/Xkeeper0/jul.git
synced 2025-05-19 08:40:21 -07:00
449 lines
16 KiB
PHP
449 lines
16 KiB
PHP
<?php
|
|
require_once 'lib/function.php';
|
|
$id = intval($_GET['id']);
|
|
$user = intval($_GET['user']);
|
|
|
|
// Skip to last post/end thread
|
|
if ($_GET['lpt'])
|
|
$gotopost = $sql->resultq("SELECT MIN(`id`) FROM `posts` WHERE `thread` = '{$id}' AND `date` > '".intval($_GET['lpt'])."'");
|
|
if ($_GET['end'] || ($_GET['lpt'] && !$gotopost))
|
|
$gotopost = $sql->resultq("SELECT MAX(`id`) FROM `posts` WHERE `thread` = '{$id}'");
|
|
if ($gotopost)
|
|
return header("Location: ?pid={$gotopost}#{$gotopost}");
|
|
|
|
// Poll votes
|
|
if ($id && ($_GET['addvote'] || $_GET['delvote'])) {
|
|
$option = (($_GET['addvote']) ? 'addvote' : 'delvote');
|
|
$choice = intval($_GET[$option]);
|
|
|
|
$pollid = $sql->resultq("SELECT poll FROM threads WHERE id='{$id}'");
|
|
if (!$pollid)
|
|
return header("Location: ?id={$id}#{$id}");
|
|
|
|
$poll = $sql->fetchq("SELECT * FROM poll WHERE id='$pollid'");
|
|
$confirm = md5($loguser['name'] . "sillysaltstring");
|
|
|
|
// no wrong poll bullshit
|
|
$valid = $sql->resultq("SELECT COUNT(*) FROM `poll_choices` WHERE `poll` = '$pollid' AND `id` = '$choice'");
|
|
|
|
if ($log && $poll && !$poll['closed'] && $_GET['dat'] == $confirm && $valid) {
|
|
if ($option == 'addvote') {
|
|
if (!$poll['doublevote'])
|
|
$sql->query("DELETE FROM `pollvotes` WHERE `user` = '$loguserid' AND `poll` = '$pollid'");
|
|
$sql->query("INSERT INTO pollvotes (poll,choice,user) VALUES ($pollid,$choice,$loguserid)");
|
|
}
|
|
else
|
|
$sql->query("DELETE FROM `pollvotes` WHERE `user` = '$loguserid' AND `poll` = '$pollid' AND `choice` = '$choice'");
|
|
}
|
|
return header("Location: ?id={$id}#{$id}");
|
|
}
|
|
|
|
$ppp = (($_GET['ppp']) ? intval($_GET['ppp']) : (($log) ? $loguser['postsperpage'] : 20));
|
|
$ppp = max(min($ppp, 500), 1);
|
|
|
|
if ($_GET['pid']) {
|
|
$pid = intval($_GET['pid']);
|
|
$id = $sql->resultq("SELECT `thread` FROM `posts` WHERE `id` = '{$pid}'");
|
|
if (!$id) {
|
|
$meta['noindex'] = true; // prevent search engines from indexing
|
|
require_once 'lib/layout.php';
|
|
errorpage("Couldn't find a post with ID #".intval($pid).". Perhaps it's been deleted?",'the index page',"index.php");
|
|
}
|
|
$numposts = $sql->resultq("SELECT COUNT(*) FROM `posts` WHERE `thread` = '{$id}' AND `id` < '{$pid}'");
|
|
$page = floor($numposts / $ppp);
|
|
}
|
|
|
|
define('E_BADPOSTS', -1);
|
|
define('E_BADFORUM', -2);
|
|
$thread_error = 0;
|
|
|
|
$thread = array();
|
|
|
|
// fuck brace overkill
|
|
if ($id) do {
|
|
$thread = $sql->fetchq("SELECT * FROM threads WHERE id=$id");
|
|
$tlinks = '';
|
|
|
|
if (!$thread) {
|
|
$meta['noindex'] = true; // prevent search engines from indexing
|
|
if (!$ismod) {
|
|
trigger_error("Accessed nonexistant thread number #$id", E_USER_NOTICE);
|
|
require_once 'lib/layout.php';
|
|
notAuthorizedError();
|
|
}
|
|
|
|
if ($sql->resultq("SELECT COUNT(*) FROM `posts` WHERE `thread` = '{$id}'") <= 0) {
|
|
require_once 'lib/layout.php';
|
|
errorpage("Thread ID #{$id} doesn't exist, and no posts are associated with the invalid thread ID.",'the index page',"index.php");
|
|
}
|
|
|
|
// Mod+ can see and possibly remove bad posts
|
|
$thread_error = E_BADPOSTS;
|
|
$thread['closed'] = true;
|
|
$thread['title'] = "Bad posts with ID #$id";
|
|
break;
|
|
}
|
|
|
|
$thread['title'] = str_replace("<", "<", $thread['title']);
|
|
|
|
$forumid = intval($thread['forum']);
|
|
$forum = $sql->fetchq("SELECT * FROM forums WHERE id=$forumid");
|
|
|
|
if (!$forum) {
|
|
$meta['noindex'] = true; // prevent search engines from indexing
|
|
if (!$ismod) {
|
|
trigger_error("Accessed thread number #$id with bad forum ID $forumid", E_USER_WARNING);
|
|
require_once 'lib/layout.php';
|
|
notAuthorizedError();
|
|
}
|
|
$thread_error = E_BADFORUM;
|
|
$forum['title'] = " --- BAD FORUM ID --- ";
|
|
break;
|
|
}
|
|
|
|
if ($forum['minpower'] > max(0, $power)) {
|
|
if ($log)
|
|
trigger_error("Attempted to access thread $id in level-$forum[minpower] restricted forum $forumid (user's powerlevel: ".intval($loguser['powerlevel']).")", E_USER_NOTICE);
|
|
$meta['noindex'] = true; // prevent search engines from indexing what they can't access
|
|
require_once 'lib/layout.php';
|
|
notAuthorizedError();
|
|
}
|
|
|
|
$specialscheme = $forum['specialscheme'];
|
|
|
|
if ($log) {
|
|
$readdate = $sql->resultq("SELECT `readdate` FROM `forumread` WHERE `user` = '$loguserid' AND `forum` = '$forumid'");
|
|
|
|
if ($thread['lastpostdate'] > $readdate)
|
|
$sql->query("REPLACE INTO threadsread SET `uid` = '$loguserid', `tid` = '$thread[id]', `time` = '".ctime()."', `read` = '1'");
|
|
|
|
$unreadcount = $sql->resultq(
|
|
"SELECT COUNT(*) FROM `threads` ".
|
|
"WHERE `id` NOT IN (SELECT `tid` FROM `threadsread` WHERE `uid` = '$loguserid' AND `read` = '1') ".
|
|
"AND `lastpostdate` > '$readdate' AND `forum` = '$forumid'");
|
|
if ($unreadcount == 0)
|
|
$sql->query("REPLACE INTO forumread VALUES ('$loguserid', '$forumid', '".ctime().'\')');
|
|
}
|
|
|
|
$tlinks = array();
|
|
|
|
// Favorites
|
|
if ($log) {
|
|
if ($sql->fetchq("SELECT * FROM favorites WHERE user={$loguserid} AND thread={$id}"))
|
|
$tlinks[] = "<a href='forum.php?act=rem&thread={$id}' style='white-space:nowrap;'>Remove from favorites</a>";
|
|
else
|
|
$tlinks[] = "<a href='forum.php?act=add&thread={$id}' style='white-space:nowrap;'>Add to favorites</a>";
|
|
}
|
|
|
|
$tnext = $sql->resultq("SELECT id FROM threads WHERE forum=$forumid AND lastpostdate>$thread[lastpostdate] ORDER BY lastpostdate ASC LIMIT 1");
|
|
if ($tnext) $tlinks[] = "<a href='?id={$tnext}' style='white-space:nowrap;'>Next newer thread</a>";
|
|
$tprev = $sql->resultq("SELECT id FROM threads WHERE forum=$forumid AND lastpostdate<$thread[lastpostdate] ORDER BY lastpostdate DESC LIMIT 1");
|
|
if ($tprev) $tlinks[] = "<a href='?id={$tprev}' style='white-space:nowrap;'>Next older thread</a>";
|
|
|
|
$tlinks = implode(' | ', $tlinks);
|
|
|
|
// Description for bots
|
|
$text = $sql->resultq("SELECT text FROM posts_text pt LEFT JOIN posts p ON (pt.pid = p.id) WHERE p.thread=$id ORDER BY pt.pid ASC LIMIT 1");
|
|
$text = strip_tags(str_replace(array("[", "]", "\r\n"), array("<", ">", " "), $text));
|
|
$text = ((strlen($text) > 160) ? substr($text, 0, 157) . "..." : $text);
|
|
$text = str_replace("\"", """, $text);
|
|
$meta['description'] = $text;
|
|
|
|
$sql->query("UPDATE threads SET views=views+1 WHERE id=$id");
|
|
|
|
$windowtitle = "{$forum['title']}: {$thread['title']}";
|
|
} while (false);
|
|
elseif($user) {
|
|
$uname = $sql->resultq("SELECT name FROM users WHERE id={$user}");
|
|
if (!$uname) {
|
|
$meta['noindex'] = true; // prevent search engines from indexing what they can't access
|
|
require_once 'lib/layout.php';
|
|
errorpage("User ID #{$user} doesn't exist.",'the index page',"index.php");
|
|
}
|
|
|
|
$thread['replies'] = $sql->resultq("SELECT count(*) FROM posts WHERE user={$user}") - 1;
|
|
$thread['title'] = "Posts by {$uname}";
|
|
$windowtitle = "Posts by {$uname}";
|
|
$tlinks = '';
|
|
}
|
|
else {
|
|
$meta['noindex'] = true; // prevent search engines from indexing what they can't access
|
|
require_once 'lib/layout.php';
|
|
errorpage("No thread specified.",'the index page',"index.php");
|
|
}
|
|
|
|
//temporary
|
|
if ($windowtitle) $windowtitle = "$boardname -- $windowtitle";
|
|
require_once 'lib/layout.php';
|
|
|
|
$fonline = "";
|
|
if ($id && !$thread_error) {
|
|
$fonline = fonlineusers($forumid);
|
|
if (@mysql_num_rows($sql->query("SELECT user FROM forummods WHERE forum=$forumid and user=$loguserid")))
|
|
$ismod = true;
|
|
}
|
|
|
|
$modfeats = '';
|
|
if ($id && $ismod) {
|
|
$trashid = 27;
|
|
|
|
$fulledit = "<a href='editthread.php?id={$id}'>Edit thread<a>";
|
|
$linklist = array();
|
|
$link = "<a href='editthread.php?id={$id}&action";
|
|
|
|
if (!$thread['sticky'])
|
|
$linklist[] = "$link=qstick'>Stick</a>";
|
|
else
|
|
$linklist[] = "$link=qunstick'>Unstick</a>";
|
|
|
|
if (!$thread['closed'])
|
|
$linklist[] = "$link=qclose'>Close</a>";
|
|
else
|
|
$linklist[] = "$link=qunclose'>Open</a>";
|
|
|
|
if ($thread['forum'] != $trashid)
|
|
$linklist[] = "$link=trashthread'>Trash</a>";
|
|
|
|
//$linklist[] = "$link=delete'>Delete</a>";
|
|
$linklist = implode(' | ', $linklist);
|
|
$modfeats = "<tr>$tccellcls colspan=2>Moderating options: $linklist -- $fulledit</td></tr>";
|
|
}
|
|
|
|
$errormsgs = '';
|
|
if ($thread_error) {
|
|
switch($thread_error) {
|
|
case E_BADPOSTS: $errortext='This thread does not exist, but posts exist that are associated with this invalid thread ID.'; break;
|
|
case E_BADFORUM: $errortext='This thread has an invalid forum ID; it is located in a forum that does not exist.'; break;
|
|
}
|
|
$errormsgs = "<tr><td style='background:#cc0000;color:#eeeeee;text-align:center;font-weight:bold;'>$errortext</td></tr>";
|
|
}
|
|
|
|
if ($forum['pollstyle'] != -2 && $thread['poll']) {
|
|
$poll = $sql->fetchq("SELECT * FROM poll WHERE id='$thread[poll]'");
|
|
|
|
$uservote = array();
|
|
if ($log) {
|
|
$lsql = $sql->query("SELECT `choice` FROM `pollvotes` WHERE `poll` = '$poll[id]' AND `user` = '$loguserid'");
|
|
while ($userchoice = $sql->fetch($lsql, MYSQL_ASSOC))
|
|
$uservote[$userchoice['choice']] = true;
|
|
}
|
|
|
|
if ($forum['pollstyle'] >= 0)
|
|
$pollstyle = $forum['pollstyle'];
|
|
else
|
|
$pollstyle = $loguser['pollstyle'];
|
|
|
|
$tvotes2 = $sql->resultq("SELECT count(*) FROM pollvotes WHERE poll=$poll[id]");
|
|
$tvotesi = $sql->resultq("SELECT sum(u.`influence`) as influence FROM pollvotes p LEFT JOIN users u ON p.user = u.id WHERE poll=$poll[id]");
|
|
|
|
$pollvotes = $sql->getresultsbykey("SELECT choice, count(*) cnt FROM pollvotes WHERE poll=$poll[id] GROUP BY choice WITH ROLLUP",'choice','cnt');
|
|
$pollinflu = $sql->getresultsbykey("SELECT choice, sum(u.influence) as inf FROM pollvotes p LEFT JOIN users u ON p.user = u.id WHERE poll=$poll[id] GROUP BY choice WITH ROLLUP",'choice','inf');
|
|
|
|
$tvotes_u = $sql->resultq("SELECT count(distinct `user`) FROM pollvotes WHERE poll=$poll[id]");
|
|
$tvotes_c = $pollvotes[""];
|
|
$tvotes_i = $pollinflu[""];
|
|
|
|
$confirm = md5($loguser['name'] . "sillysaltstring");
|
|
|
|
$pollcs = $sql->query("SELECT * FROM poll_choices WHERE poll=$poll[id]");
|
|
while ($pollc = $sql->fetch($pollcs)) {
|
|
$votes = intval($pollvotes[$pollc['id']]);
|
|
$influ = intval($pollinflu[$pollc['id']]);
|
|
|
|
if ($pollstyle) {
|
|
if ($tvotes_i != 0)
|
|
$pct = $pct2 = sprintf('%02.1f', $influ / $tvotes_i * 100);
|
|
else
|
|
$pct = $pct2 = "0.0";
|
|
$votes = intval($influ)." point".($influ == 1 ? '' : 's')." ($votes)";
|
|
}
|
|
else {
|
|
if ($tvotes_c != 0) {
|
|
$pct = sprintf('%02.1f', $votes / $tvotes_c * 100);
|
|
$pct2 = sprintf('%02.1f', $votes / $tvotes_u * 100);
|
|
} else
|
|
$pct = $pct2 = "0.0";
|
|
$votes = "$votes vote".($votes == 1 ? '' : 's');
|
|
}
|
|
|
|
$barpart = "<table cellpadding=0 cellspacing=0 width=$pct% bgcolor='".($pollc['color'] ? $pollc['color'] : "cccccc")."'><td> </table>";
|
|
if ($pct == "0.0")
|
|
$barpart = ' ';
|
|
|
|
if ($uservote[$pollc['id']]) {
|
|
$linkact = 'del';
|
|
$dot = "<img src=\"images/dot4.gif\" align=\"absmiddle\"> ";
|
|
}
|
|
else {
|
|
$linkact = 'add';
|
|
$dot = "<img src=\"images/_.gif\" width=8 height=8 align=\"absmiddle\"> ";
|
|
}
|
|
|
|
$link = '';
|
|
if ($log && !$poll['closed'])
|
|
$link = "<a href='?id={$id}&dat={$confirm}&{$linkact}vote=$pollc[id]'>";
|
|
|
|
$choices .= "<tr>
|
|
$tccell1l width=20%>$dot$link".($pollc['choice'])."</a></td>
|
|
$tccell2l width=60%>$barpart</td>
|
|
$tccell1 width=20%>".($poll['doublevote'] ? "$pct% of users, $votes ($pct2%)" : "$pct%, $votes")."</td>
|
|
</tr>";
|
|
}
|
|
|
|
if ($poll['closed']) $polltext = 'This poll is closed.';
|
|
else $polltext = 'Multi-voting is '.(($poll['doublevote']) ? 'enabled.' : 'disabled.');
|
|
if ($tvotes_u != 1) $s_have = 's have';
|
|
else $s_have = ' has';
|
|
|
|
if ($ismod)
|
|
$polledit = "<!-- edit would go here -->";
|
|
|
|
$polltbl = "$tblstart
|
|
<tr>$tccellc colspan=3><b>".htmlspecialchars($poll['question'])."</td></tr>
|
|
<tr>$tccell2ls colspan=3>".nl2br(dofilters($poll['briefing']))."</td></tr>
|
|
$choices
|
|
<tr>$tccell2l colspan=3>$smallfont $polltext $tvotes_u user$s_have voted. $polledit</td></tr>
|
|
$tblend<br>
|
|
";
|
|
}
|
|
|
|
loadtlayout();
|
|
switch($loguser['viewsig']) {
|
|
case 1: $sfields = ',headtext,signtext'; break;
|
|
case 2: $sfields = ',u.postheader headtext,u.signature signtext'; break;
|
|
default: $sfields = ''; break;
|
|
}
|
|
$ufields = userfields();
|
|
|
|
$activity = $sql->query("SELECT user, count(*) num FROM posts WHERE date>".(ctime() - 86400)." GROUP BY user");
|
|
while ($n = $sql->fetch($activity))
|
|
$act[$n['user']] = $n['num'];
|
|
|
|
$postlist = "
|
|
$polltbl
|
|
$tblstart
|
|
$modfeats
|
|
$errormsgs
|
|
";
|
|
|
|
if ($log && $id && $forum['id']) {
|
|
$headlinks .= " - <a href=index.php?action=markforumread&forumid=$forum[id]>Mark forum read</a>";
|
|
$header = makeheader($header1, $headlinks, $header2 . (($fonline) ? "$tblstart$tccell1s>$fonline$tblend" : ""));
|
|
}
|
|
|
|
$threadforumlinks = "
|
|
<table width=100%><td align=left>$fonttag<a href=index.php>".$boardname."</a>"
|
|
.
|
|
(($forum['title']) ? " - <a href=forum.php?id=$forumid>$forum[title]</a>" : "")
|
|
.
|
|
" - $thread[title]</td><td align=right>$smallfont
|
|
";
|
|
if ($forumid) {
|
|
if ($forum['pollstyle'] != -2) $threadforumlinks .= "<a href=newthread.php?poll=1&id=$forumid>$newpollpic</a> - ";
|
|
else $threadforumlinks .= "<img src=\"images/nopolls.png\" align=\"absmiddle\"> - ";
|
|
$threadforumlinks .= "<a href=newthread.php?id=$forumid>$newthreadpic</a>";
|
|
if (!$thread['closed']) $threadforumlinks .= " - <a href=newreply.php?id=$id>$newreplypic</a>";
|
|
else $threadforumlinks .= " - $closedpic";
|
|
}
|
|
$threadforumlinks .= '</table>';
|
|
|
|
$page = max(0, $page);
|
|
$min = $ppp * $page;
|
|
|
|
if ($user) $searchon = "user={$user}";
|
|
else $searchon = "thread={$id}";
|
|
|
|
$posts = $sql->query(
|
|
"SELECT p.*,text$sfields,edited,editdate,options,tagval,u.id uid,name,$ufields,regdate ".
|
|
"FROM posts_text, posts p LEFT JOIN users u ON p.user=u.id ".
|
|
"WHERE {$searchon} AND p.id=pid ORDER BY p.id LIMIT $min,$ppp");
|
|
|
|
preplayouts($posts);
|
|
|
|
for ($i = 0; $post = $sql->fetch($posts); $i++) {
|
|
$postlist .= '<tr>';
|
|
|
|
$bg = $i % 2 + 1;
|
|
|
|
$quote = "<a href=\"?pid=$post[id]#$post[id]\">Link</a>";
|
|
if ($id and ! $thread['closed'])
|
|
$quote .= " | <a href=newreply.php?id=$id&postid=$post[id]>Quote</a>";
|
|
|
|
$edit = '';
|
|
if ($ismod || (!$banned && $post['user'] == $loguserid)) {
|
|
if (!$thread['closed'])
|
|
$edit = ($quote ? ' | ' : '') . "<a href=editpost.php?id=$post[id]>Edit</a>";
|
|
$edit .= ($quote || $edit ? ' | ' : ''). "<a href=editpost.php?id=$post[id]&action=delete>Delete</a>";
|
|
}
|
|
|
|
if ($isadmin)
|
|
$ip = " | IP: <a href=ipsearch.php?ip=$post[ip]>$post[ip]</a>";
|
|
|
|
if (!$id) {
|
|
// Enable caching for these
|
|
$pthread = $sql->fetchq("SELECT id,title,forum FROM threads WHERE id=$post[thread]", MYSQL_BOTH, true);
|
|
$pforum = $sql->fetchq("SELECT minpower FROM forums WHERE id=".intval($pthread[forum]), MYSQL_BOTH, true);
|
|
}
|
|
$post['act'] = $act[$post['user']];
|
|
|
|
if ($pforum['minpower'] <= $power or ! $pforum['minpower'])
|
|
$postlist .= threadpost($post, $bg, $pthread);
|
|
else
|
|
$postlist .=
|
|
"<table class=\"table\" cellspacing=0>
|
|
<tr><td class='tbl font tdbg$bg' align=center><small><i>
|
|
(post in restricted forum)
|
|
</i></small></td></tr>
|
|
</table>";
|
|
}
|
|
|
|
$query = preg_replace("'page=(\d*)'si", '', '?'.getenv("QUERY_STRING"));
|
|
$query = preg_replace("'pid=(\d*)'si", "id={$id}", $query);
|
|
$query = preg_replace("'&{2,}'si", "&", $query);
|
|
if ($query && substr($query, -1) != "&")
|
|
$query .= "&";
|
|
if (!$page)
|
|
$page = 0;
|
|
|
|
$pageend = (int)($thread['replies'] / $ppp);
|
|
$pagelinks = "Pages:";
|
|
if ($thread['replies'] < $ppp)
|
|
$pagelinks = '';
|
|
else for ($i = 0; $i <= $pageend; $i++) {
|
|
// restrict page range to sane values
|
|
if ($i > 9 && $i < $pageend-9) {
|
|
if ($i < $page-4) {
|
|
$i = min($page-4, $pageend-9);
|
|
$pagelinks .= " ...";
|
|
}
|
|
if ($i > $page+4) {
|
|
$i = $pageend-9;
|
|
$pagelinks .= " ...";
|
|
}
|
|
}
|
|
|
|
if ($i == $page)
|
|
$pagelinks .= " ".($i + 1);
|
|
else
|
|
$pagelinks .= " <a href='$query"."page=$i'>".($i + 1)."</a>";
|
|
}
|
|
|
|
print $header.sizelimitjs()."
|
|
$threadforumlinks
|
|
<table width=100%><td align=left>$smallfont$pagelinks</td><td align=right>$smallfont$tlinks</table>
|
|
$postlist
|
|
$tblstart
|
|
$modfeats
|
|
$tblend
|
|
<table width=100%><td align=left>$smallfont$pagelinks</td><td align=right>$smallfont$tlinks</table>
|
|
$threadforumlinks
|
|
$footer";
|
|
printtimedif($startingtime);
|
|
|
|
|
|
function notAuthorizedError() {
|
|
global $log;
|
|
$redir = (($log) ? 'index.php' : 'login.php');
|
|
$rtext = (($log) ? 'the index page' : 'log in (then try again)');
|
|
errorpage("Couldn't enter the forum. You don't have access to this restricted forum.", $rtext, $redir);
|
|
} |