0byt3m1n1

Path: /data/applications/aps/tikiwiki/3.2.0-5/standard/htdocs/ [ Home ]
File: comments.php
<?php

// $start_time = microtime(true);

// $Id: /cvsroot/tikiwiki/tiki/comments.php,v 1.80.2.9 2008-02-28 12:56:33 nyloth Exp $

// Copyright (c) 2002-2007, Luis Argerich, Garland Foster, Eduardo Polidor, et. al.
// All Rights Reserved. See copyright.txt for details and a complete list of authors.
// Licensed under the GNU LESSER GENERAL PUBLIC LICENSE. See license.txt for details.

// This file sets up the information needed to display
// the comments preferences, post-comment box and the
// list of comments. Finally it displays blog-comments.tpl
// using this information

// Setup URLS for the Comments next and prev buttons and use variables that
// cannot be aliased by normal tiki variables.
// Traverse each _REQUEST data adn put them in an array

//this script may only be included - so its better to err & die if called directly.
//smarty is not there - we need setup
require_once('tiki-setup.php');  
$access->check_script($_SERVER["SCRIPT_NAME"],basename(__FILE__));

require_once ('lib/tikilib.php'); # httpScheme()

/* 
 * Determine the settings used to display the thread
 */

// user requests that could be used to change thread display settings
$handled_requests = array('comments_per_page', 'thread_style', 'thread_sort_mode');

// Set global site prefs to initialize vars
foreach ( $handled_requests as $request_name ) {
        if ( isset($prefs['forum_'.$request_name]) ) {
                $$request_name = $prefs['forum_'.$request_name];
        }
}

// First override existing values (e.g. coming from forum specific settings) by user specific requests if we allow them
//   (we empty those user specific requests if they are denied)
if ( $prefs['forum_thread_user_settings'] == 'y' ) {
	foreach ( $handled_requests as $request_name ) {
		if ( isset($_REQUEST[$request_name]) ) {
			$$request_name = $_REQUEST[$request_name];
			$smarty->assign($request_name.'_param', '&amp;'.$request_name.'='.$_REQUEST[$request_name]);
			if ( $prefs['forum_thread_user_settings_keep'] == 'y' ) $_SESSION['forums_'.$request_name] = $_REQUEST[$request_name];
		}
	}
} else foreach ( $handled_requests as $request_name ) unset($_REQUEST[$request_name]);

// Then determine the final value for thread display settings
if ( isset($forum_mode) && $forum_mode == 'y' ) {
	// If we are in a forum thread

	if ( $prefs['forum_thread_user_settings'] == 'y' && $prefs['forum_thread_user_settings_keep'] == 'y' ) {
		// If 'forum_thread_user_settings' is enabled (allow user to change thread display settings)
		// and if the 'forum_thread_user_settings_keep' is enabled (keep user settings for all forums during his session)
		// ... we check session vars
		//  !! Session var is not used when there is an explicit user request !!

		foreach ( $handled_requests as $request_name )
			if ( isset($_SESSION['forums_'.$request_name]) && ! isset($_REQUEST[$request_name]) )
				$$request_name = $_SESSION['forums_'.$request_name];

	} else {
		// Fallback to global values if 'forum_thread_user_settings_keep' is disabled AND if :
		//    - forum specific settings are set to empty (i.e. 'default')
		// or - 'forum_thread_defaults_by_forum' is disabled (don't allow settings by forum)
		//  !! Global value is not used when there is an explicit user request !!

                foreach ( $handled_requests as $request_name )
                        if ( ( ! isset($$request_name) || $$request_name == '' || $prefs['forum_thread_defaults_by_forum'] != 'y' )
                                        && ! isset($_REQUEST[$request_name])
                           ) $$request_name = $prefs['forum_'.$request_name];
        }

	if ( $forum_info['is_flat'] == 'y' ) {
		// If we have a flat forum (i.e. we reply only to the first message / thread)
		// ... we then override $thread_style and force a 'plain' style
		$thread_style = 'commentStyle_plain';
	}

} else {
	// If we are not in a forum (e.g. wiki page comments, ...), we use other fallback values
	if ( ! isset($comments_per_page) ) $comments_per_page = 10;
	if ( ! isset($thread_sort_mode) ) $thread_sort_mode = 'commentDate_desc';
	if ( ! isset($thread_style) ) $thread_style = 'commentStyle_threaded';	
}

// Assign final values to smarty vars in order
foreach ( $handled_requests as $request_name ) $smarty->assign($request_name, $$request_name);

if ( ! isset($_REQUEST["comment_rating"]) ) $_REQUEST["comment_rating"] = '';
$comments_aux = array();

// show/hide comments zone on request and store the status in a cookie (also works with javascript off)
if (isset($_REQUEST['comzone'])) {
	$comments_show = 'n';
	$comzone_state = $_REQUEST['comzone'];
	if ($comzone_state=='show'||$comzone_state=='o') {
		$comments_show = 'y';
		if (!isset($_COOKIE['comzone'])||$_COOKIE['comzone']=='c') setcookie('comzone','o');	
	} 
	if ($comzone_state=='hide'||$comzone_state=='c') {
		if (!isset($_COOKIE['comzone'])||$_COOKIE['comzone']=='o') setcookie('comzone','c');
	}
} else {
	$comments_show = 'n';
}
$comments_t_query = '';
$comments_first = 1;

foreach ($comments_vars as $c_name) {
        $comments_avar["name"] = $c_name;

        if (isset($_REQUEST[$c_name])) {
                $comments_avar["value"] = $_REQUEST[$c_name];
                $comments_aux[] = $comments_avar;
        }

        if (isset($_REQUEST[$c_name])) {
                if ($comments_first) {
                        $comments_first = 0;

                        $comments_t_query .= "?$c_name=" . urlencode($_REQUEST["$c_name"]);
                } else {
                        $comments_t_query .= "&amp;$c_name=" . urlencode($_REQUEST["$c_name"]);
                }
        }
}

$smarty->assign('comments_request_data', $comments_aux);

if (!isset($_REQUEST['comments_threshold'])) {
        $_REQUEST['comments_threshold'] = 0;
} else {
	$smarty->assign('comments_threshold_param', '&amp;comments_threshold='.$_REQUEST['comments_threshold']);
}

$smarty->assign('comments_threshold', $_REQUEST['comments_threshold']);
// This sets up comments father as the father
$comments_parsed = parse_url($tikilib->httpPrefix().$_SERVER["REQUEST_URI"]);

if (!isset($comments_parsed["query"])) {
	$comments_parsed["query"] = '';
}

TikiLib::parse_str($comments_parsed["query"], $comments_query);
$comments_father = $comments_parsed["path"];

$comments_complete_father = $comments_father . $comments_t_query;

if (strstr($comments_complete_father, "?")) {
	$comments_complete_father .= '&amp;';
} else {
	$comments_complete_father .= '?';
}

$smarty->assign('comments_father', $comments_father);
$smarty->assign('comments_complete_father', $comments_complete_father);

if (!isset($_REQUEST["comments_threadId"])) {
	$_REQUEST["comments_threadId"] = 0;
}
$smarty->assign("comments_threadId", $_REQUEST["comments_threadId"]);

// The same for replies to comments threads

if (!isset($_REQUEST["comments_reply_threadId"])) {
	$_REQUEST["comments_reply_threadId"] = 0;
}
$smarty->assign("comments_reply_threadId", $_REQUEST["comments_reply_threadId"]);

// Include the library for comments (if not included)
include_once ("lib/commentslib.php");global $dbTiki;
$commentslib = new Comments($dbTiki);

if (!isset($comments_prefix_var)) {
	$comments_prefix_var = '';
}

if( ! isset( $comments_objectId ) ) {
	if (!isset($_REQUEST[$comments_object_var])) {
		die ("The comments_object_var variable cannot be found as a REQUEST variable");
	}
	$comments_objectId = $comments_prefix_var . $_REQUEST["$comments_object_var"];
}

$feedbacks = array();
$errors = array();
if (isset($_REQUEST['comments_postComment']) || isset($_REQUEST['comments_postComment_anonymous'])) {
	if (isset($forum_mode) && $forum_mode == 'y') {
		$forum_info = $commentslib->get_forum($_REQUEST['forumId']);
		$threadId = $commentslib->post_in_forum($forum_info, $_REQUEST, $feedbacks, $errors);
		if (!empty($threadId) && empty($errors)) {
				$url = "tiki-view_forum_thread.php?forumId=" . $_REQUEST['forumId'] . "&comments_parentId=" . $_REQUEST['comments_parentId'];
				if (!empty($_REQUEST['comments_threshold'])) 
					$url .= "&amp;comments_threshold=".$_REQUEST['comments_threshold'];
				if (!empty($_REQUEST['comments_offset'])) 
					$url .= "&amp;comments_offset=".$_REQUEST['comments_offset'];
				if (!empty($_REQUEST['comments_per_page'])) 
					$url .= "&amp;comments_per_page=".$_REQUEST['comments_per_page'];
				if (!empty($_REQUEST['thread_style'])) 
					$url .= "&amp;thread_style=".$_REQUEST['thread_style'];
				if (!empty($_REQUEST['thread_sort_mode'])) 
					$url .= "&amp;thread_sort_mode=".$_REQUEST['thread_sort_mode'];			
				if (!empty($feedbacks)) {
					$_SESSION['feedbacks'] = $feedbacks;
				}
				header('location: ' . $url);
		}
	} else {
		$threadId =  $commentslib->post_in_object($comments_objectId, $_REQUEST, $feedbacks, $errors);
		if ((!empty($threadId) && empty($errors) && $prefs['feature_user_watches'] == 'y') && ($prefs['wiki_watch_comments'] == 'y') && (isset($_REQUEST["page"]))) {
				include_once ('lib/webmail/tikimaillib.php');
				$nots = $commentslib->get_event_watches('wiki_page_changed', $_REQUEST["page"]);
				$isBuilt = false;
				global $notificationlib; include_once("lib/notifications/notificationlib.php");
				$emails = $notificationlib->get_mail_events('wiki_comment_changes', $_REQUEST["page"]);
				foreach ($emails as $email) {
					$already = false;
					foreach ($nots as $not) {
						if ($not['email'] == $email) {
							$already = true;
							break;
						}
					}
					if (!$already)
						$nots[] = array("user"=>"", "hash"=>"", "email"=>$email);
				}
				foreach ($nots as $not) {
					if ($prefs['wiki_watch_editor'] != 'y' && $not['user'] == $user)
						break;
					if (!$isBuilt) {
						$isBuilt = true;
						$smarty->assign('mail_page', $_REQUEST["page"]);
						$smarty->assign('mail_date', date("U"));
						$smarty->assign('mail_user', $user);
						$smarty->assign('mail_title', $_REQUEST["comments_title"]);
						$smarty->assign('mail_comment', $_REQUEST["comments_data"]);
						$smarty->assign('mail_hash', $not['hash']);
						$foo = parse_url($_SERVER["REQUEST_URI"]);
						$machine = $tikilib->httpPrefix(). dirname( $foo["path"] );
						$smarty->assign('mail_machine', $machine);
						$parts = explode('/', $foo['path']);

						if (count($parts) > 1)
							unset ($parts[count($parts) - 1]);

						$smarty->assign('mail_machine_raw', $tikilib->httpPrefix(). implode('/', $parts));
						// TODO: mail_machine_site may be required for some sef url with rewrite to sub-directory. To refine. (nkoth)  
						$smarty->assign('mail_machine_site', $tikilib->httpPrefix());
						$mail = new TikiMail();
					}
					global $prefs;// TODO: optimise by grouping user by language
					$languageEmail = $tikilib->get_user_preference($not['user'], "language", $prefs['site_language']);
					$mail->setUser($not['user']);
					$mail_data = $smarty->fetchLang($languageEmail, 'mail/user_watch_wiki_page_comment_subject.tpl');
					$mail->setSubject(sprintf($mail_data, $_REQUEST["page"]));
					$mail_data = $smarty->fetchLang($languageEmail, 'mail/user_watch_wiki_page_comment.tpl');
					$mail->setText($mail_data);
					$mail->buildMessage();
					$mail->send(array($not['email']));
				}
			}
	}
	$smarty->assign_by_ref('errors', $errors);
	$smarty->assign_by_ref('feedbacks', $feedbacks);
}

if (($tiki_p_vote_comments == 'y' && (!isset($forum_mode) || $forum_mode == 'n')) || ($tiki_p_forum_vote == 'y' && isset($forum_mode) && $forum_mode == 'y')) {
	// Process a vote here

	if (isset($_REQUEST["comments_vote"]) && isset($_REQUEST["comments_threadId"])) {
		if (!$user && !isset($_COOKIE['PHPSESSID'])) {
			$smarty->assign_by_ref('msg',tra('Cookies must be allowed to vote'));
			$smarty->display("error.tpl");
			die;
		}
		$comments_show = 'y';

		if (!$tikilib->user_has_voted($user, 'comment' . $_REQUEST["comments_threadId"])) {
			$commentslib->vote_comment($_REQUEST["comments_threadId"], $user, $_REQUEST["comments_vote"]);

			$tikilib->register_user_vote($user, 'comment' . $_REQUEST["comments_threadId"]);
		}

		$_REQUEST["comments_threadId"] = 0;
		$smarty->assign('comments_threadId', 0);
	}
}

// Comments Moderation
if ( (!isset($forum_mode) || $forum_mode == 'n') && $tiki_p_admin_comments == 'y' && isset($_REQUEST["comments_threadId"]) && !empty($_REQUEST['comments_approve']) ) {

	if ( $_REQUEST['comments_approve'] == 'y' ) {
		$commentslib->approve_comment($_REQUEST["comments_threadId"]);
	} elseif ( $_REQUEST['comments_approve'] == 'n' ) {
		$commentslib->reject_comment($_REQUEST["comments_threadId"]);
	}
}

// Comments and Forum Locking
if ( $prefs['feature_comments_locking'] == 'y' && ! empty($_REQUEST['comments_lock']) && ! empty($comments_objectId) && ( ! isset($forum_mode) || $forum_mode == 'n' ) && $tiki_p_lock_comments == 'y' ) {
	if ( $_REQUEST['comments_lock'] == 'y' ) {
		$commentslib->lock_object_thread($comments_objectId);
	} elseif ( $_REQUEST['comments_lock'] == 'n' ) {
		$commentslib->unlock_object_thread($comments_objectId);
	}
}

if (($tiki_p_remove_comments == 'y' && (!isset($forum_mode) || $forum_mode == 'n'))
		|| (isset($forum_mode) && $forum_mode =='y' && $tiki_p_admin_forum == 'y' ) ) {
	if (isset($_REQUEST["comments_remove"]) && isset($_REQUEST["comments_threadId"])) {
		$area = 'delcomment';
		if ($prefs['feature_ticketlib2'] != 'y' or (isset($_POST['daconfirm']) and isset($_SESSION["ticket_$area"]))) {
			key_check($area);
			$comments_show = 'y';
			$commentslib->remove_comment($_REQUEST["comments_threadId"]);
			$_REQUEST["comments_threadId"] = 0;
			$smarty->assign('comments_threadId', 0);
		} else {
			key_get($area);
		}
	}
}

if ($_REQUEST["comments_threadId"] > 0) {
	$comment_info = $commentslib->get_comment($_REQUEST["comments_threadId"]);

	$smarty->assign('comment_title', $comment_info["title"]);
	$smarty->assign('comment_rating', $comment_info["comment_rating"]);	
	$smarty->assign('comment_data', $comment_info["data"]);
} elseif ($_REQUEST["comments_reply_threadId"] > 0) {
	// Replies to comments.

	$comment_info = $commentslib->get_comment($_REQUEST["comments_reply_threadId"]);

	if ( $comment_info['parentId'] > 0 && $forum_info['is_flat'] == 'y' ) {
		$smarty->assign('msg', tra("This forum is flat and doesn't allow replies to other replies"));
		$smarty->display("error.tpl");
		die;
	}

	// Add the replied-to text, with >.
	// Disabled by damian
	//	$smarty->assign('comment_data', '');
	// Re-enabled by rlpowell; my users rely on this.  If you want to disable it, put an option in the forums or something.
	// However, I re-enabled it *working*, instead of broken.  -rlpowell
	// check to see if QUOTE plugin or > should be used -Terence
	global $prefs;
	if ( $comment_info["data"] != ''  ) {
		if ( $prefs['feature_forum_parse'] == 'y' && $prefs['feature_use_quoteplugin'] == 'y' ) {
			$comment_info["data"] = "\n{QUOTE()}" . $comment_info["data"] . '{QUOTE}';
		} else {
			$comment_info["data"] = preg_replace( '/\n/', "\n> ", $comment_info["data"] ) ;
			$comment_info["data"] = "\n> " . $comment_info["data"];
		}
	}
	$smarty->assign( 'comment_data', $comment_info["data"] );

	if( ! array_key_exists( "title", $comment_info ) )
	{
		if( array_key_exists( "comments_title", $_REQUEST ) )
		{
			$comment_info["title"] = $_REQUEST["comments_title"];
		} else {
			$comment_info["title"] = "";
			$_REQUEST["comments_title"] = "";
		}
	}

	$smarty->assign('comment_title', ( $prefs['forum_comments_no_title_prefix'] != 'y' ? tra('Re:').' ' : '' ).$comment_info["title"]);
	$smarty->assign('comments_reply_threadId', $_REQUEST["comments_reply_threadId"]);
} else {
	$smarty->assign('comment_title', '');
	$smarty->assign('comment_rating', '');	
	$smarty->assign('comment_data', '');
}

$smarty->assign('comment_preview', 'n');

if (isset($_REQUEST["comments_previewComment"]) || !empty($errors)) {
	$smarty->assign('comments_preview_title', $_REQUEST["comments_title"]);
	$comments_show = 'y';
	$smarty->assign('comments_preview_data', $commentslib->parse_comment_data(strip_tags($_REQUEST["comments_data"])));
	$smarty->assign('comment_title', $_REQUEST["comments_title"]);
	$smarty->assign('comment_rating', $_REQUEST["comment_rating"]);		
	$smarty->assign('comment_data', $_REQUEST["comments_data"]);
	if (isset($_REQUEST["comments_previewComment"]))
		$smarty->assign('comment_preview', 'y');
}

// Always show comments when a display setting has been explicitely specified
if ( isset($_REQUEST['comments_per_page']) || isset($_REQUEST['thread_style']) || isset($_REQUEST['thread_sort_mode']) ) {
	$comments_show = 'y';
}

if (!isset($_REQUEST["comments_commentFind"])) $_REQUEST["comments_commentFind"] = ''; else $comments_show = 'y';

// Offset setting for the list of comments
if (!isset($_REQUEST["comments_offset"])) {
	$comments_offset = 0;
} else {
	$comments_offset = $_REQUEST["comments_offset"];
}

$smarty->assign('comments_offset', $comments_offset);

// Now check if we are displaying top-level comments or a specific comment
if (!isset($_REQUEST["comments_parentId"])) {
	$_REQUEST["comments_parentId"] = 0;
}

$smarty->assign('comments_parentId', $_REQUEST["comments_parentId"]);

$forum_check = explode(':', $comments_objectId);
if ($forum_check[0] == 'forum' ) {
	$smarty->assign('forumId', $forum_check[1]);
}

if( isset( $_REQUEST["comments_grandParentId"] ) )
{
	$smarty->assign('comments_grandParentId', $_REQUEST["comments_grandParentId"]);
}

if(!empty($forum_mode) && $forum_mode == 'y') {
	$_REQUEST["comments_parentId"] > 0;
}
if (isset($_REQUEST["post_reply"]) && isset($_REQUEST["comments_reply_threadId"]))
$threadId_if_reply = $_REQUEST["comments_reply_threadId"];
else
$threadId_if_reply = 0;

$comments_coms = $commentslib->get_comments($comments_objectId, $_REQUEST["comments_parentId"],
		$comments_offset, $comments_per_page, $thread_sort_mode, $_REQUEST["comments_commentFind"],
		$_REQUEST['comments_threshold'], $thread_style, $threadId_if_reply);

if ($comments_prefix_var == 'forum:') {
	$comments_cant = $commentslib->count_comments('topic:'. $_REQUEST['comments_parentId']); // comments in the topic not in the forum
} else {
	$comments_cant = $commentslib->count_comments($comments_objectId);
}
$comments_cant_page = $comments_coms['cant'];

$smarty->assign('comments_below', $comments_coms["below"]);
$smarty->assign('comments_cant', $comments_cant);

// Offset management
$comments_maxRecords = $comments_per_page;

if( $comments_maxRecords != 0 )
{
	$comments_cant_pages = ceil($comments_cant_page / $comments_maxRecords);
	$smarty->assign('comments_actual_page', 1 + ($comments_offset / $comments_maxRecords));
} else {
	$comments_cant_pages = 1;
	$smarty->assign('comments_actual_page', 1 );
}
$smarty->assign('comments_cant_pages', $comments_cant_pages);

if ($comments_cant_page > ($comments_offset + $comments_maxRecords)) {
	$smarty->assign('comments_next_offset', $comments_offset + $comments_maxRecords);
} else {
	$smarty->assign('comments_next_offset', -1);
}

// If offset is > 0 then prev_offset
if ($comments_offset > 0) {
	$smarty->assign('comments_prev_offset', $comments_offset - $comments_maxRecords);
} else {
	$smarty->assign('comments_prev_offset', -1);
}

if (!isset($forum_mode) || $forum_mode == 'n') {
	$defaultRows = $prefs['default_rows_textarea_comment'];
	include_once("textareasize.php");
}

if ( ! isset($forum_mode) || $forum_mode == 'n' ) {
	$queued = 0;
	foreach ( $comments_coms['data'] as $k => $v ) {
		if ( $v['approved'] == 'n' ) $queued++;
	}
	$smarty->assign('queued', $queued);
}
$smarty->assign('comments_coms', $comments_coms["data"] );

// Grab the parent comment to show.  -rlpowell
if (isset($_REQUEST["comments_parentId"]) &&
		$_REQUEST["comments_parentId"] > 0 && 
		(($tiki_p_post_comments == 'y' && (!isset($forum_mode) || $forum_mode == 'n')) ||($tiki_p_forum_post == 'y' && isset($forum_mode) && $forum_mode == 'y')) &&
		(isset($_REQUEST['comments_previewComment']) ||
		 isset($_REQUEST['post_reply']))) {
	$parent_com = $commentslib->get_comment($_REQUEST["comments_parentId"]);
	$smarty->assign_by_ref('parent_com', $parent_com);
}

// Get comments / forum lock status
if ( isset($forum_mode) && $forum_mode == 'y' ) {
	$thread_is_locked = ( ! empty($comments_objectId) && $commentslib->is_object_locked($comments_objectId) ) ? 'y' : 'n';
	$forum_is_locked = $thread_is_locked;
	$thread_is_locked = $comment_info['locked'];
	$smarty->assign('forum_is_locked', $forum_is_locked);
	$smarty->assign('thread_is_locked', $thread_is_locked);
} elseif ( $prefs['feature_comments_locking'] == 'y' ) {
	$thread_is_locked = ( ! empty($comments_objectId) && $commentslib->is_object_locked($comments_objectId) ) ? 'y' : 'n';
	$smarty->assign('thread_is_locked', $thread_is_locked);
}

if (!empty($_REQUEST['post_reply'])) {
	$smarty->assign('post_reply', $_REQUEST['post_reply']);
} elseif (!empty($_REQUEST['edit_reply'])) {
	$smarty->assign('edit_reply', $_REQUEST['edit_reply']);
}

if ($prefs['feature_contribution'] == 'y') {
	$contributionItemId = $_REQUEST["comments_threadId"];
	include_once('contribution.php');
}

$smarty->assign('comments_show', $comments_show);