phpBB

<?php

/**

*

* @package phpBB3

* @version $Id$

* @copyright (c) 2005 phpBB Group

* @license http://opensource.org/licenses/gpl-license.php GNU Public License

*

*/

/**

* @ignore

*/

define('IN_PHPBB', true);

if (!defined('PHPBB_ROOT_PATH')) define('PHPBB_ROOT_PATH', './');

if (!defined('PHP_EXT')) define('PHP_EXT', substr(strrchr(__FILE__, '.'), 1));

include(PHPBB_ROOT_PATH . 'common.' . PHP_EXT);

include(PHPBB_ROOT_PATH . 'includes/functions_display.' . PHP_EXT);

include(PHPBB_ROOT_PATH . 'includes/bbcode.' . PHP_EXT);

// Start session management

$user->session_begin();

$auth->acl($user->data);

// Initial var setup

$forum_id	= request_var('f', 0);

$topic_id	= request_var('t', 0);

$post_id	= request_var('p', 0);

$voted_id	= request_var('vote_id', array('' => 0));

$start		= request_var('start', 0);

$view		= request_var('view', '');

$default_sort_days	= (!empty($user->data['user_post_show_days'])) ? $user->data['user_post_show_days'] : 0;

$default_sort_key	= (!empty($user->data['user_post_sortby_type'])) ? $user->data['user_post_sortby_type'] : 't';

$default_sort_dir	= (!empty($user->data['user_post_sortby_dir'])) ? $user->data['user_post_sortby_dir'] : 'a';

$sort_days	= request_var('st', $default_sort_days);

$sort_key	= request_var('sk', $default_sort_key);

$sort_dir	= request_var('sd', $default_sort_dir);

$update		= request_var('update', false);

/**

* @todo normalize?

*/

$hilit_words	= request_var('hilit', '', true);

// Do we have a topic or post id?

if (!$topic_id && !$post_id)

{

	trigger_error('NO_TOPIC');

}

// Find topic id if user requested a newer or older topic

if ($view && !$post_id)

{

	if (!$forum_id)

	{

		$sql = 'SELECT forum_id

			FROM ' . TOPICS_TABLE . "

			WHERE topic_id = $topic_id";

		$result = $db->sql_query($sql);

		$forum_id = (int) $db->sql_fetchfield('forum_id');

		$db->sql_freeresult($result);

		if (!$forum_id)

		{

			trigger_error('NO_TOPIC');

		}

	}

	if ($view == 'unread')

	{

		// Get topic tracking info

		$topic_tracking_info = get_complete_topic_tracking($forum_id, $topic_id);

		$topic_last_read = (isset($topic_tracking_info[$topic_id])) ? $topic_tracking_info[$topic_id] : 0;

		$sql = 'SELECT post_id, topic_id, forum_id

			FROM ' . POSTS_TABLE . "

			WHERE topic_id = $topic_id

				" . (($auth->acl_get('m_approve', $forum_id)) ? '' : 'AND post_approved = 1') . "

				AND post_time > $topic_last_read

			ORDER BY post_time ASC";

		$result = $db->sql_query_limit($sql, 1);

		$row = $db->sql_fetchrow($result);

		$db->sql_freeresult($result);

		if (!$row)

		{

			$sql = 'SELECT topic_last_post_id as post_id, topic_id, forum_id

				FROM ' . TOPICS_TABLE . '

				WHERE topic_id = ' . $topic_id;

			$result = $db->sql_query($sql);

			$row = $db->sql_fetchrow($result);

			$db->sql_freeresult($result);

		}

		if (!$row)

		{

			// Setup user environment so we can process lang string

			$user->setup('viewtopic');

			trigger_error('NO_TOPIC');

		}

		$post_id = $row['post_id'];

		$topic_id = $row['topic_id'];

	}

	else if ($view == 'next' || $view == 'previous')

	{

		$sql_condition = ($view == 'next') ? '>' : '<';

		$sql_ordering = ($view == 'next') ? 'ASC' : 'DESC';

		$sql = 'SELECT forum_id, topic_last_post_time

			FROM ' . TOPICS_TABLE . '

			WHERE topic_id = ' . $topic_id;

		$result = $db->sql_query($sql);

		$row = $db->sql_fetchrow($result);

		$db->sql_freeresult($result);

		if (!$row)

		{

			$user->setup('viewtopic');

			// OK, the topic doesn't exist. This error message is not helpful, but technically correct.

			trigger_error(($view == 'next') ? 'NO_NEWER_TOPICS' : 'NO_OLDER_TOPICS');

		}

		else

		{

			$sql = 'SELECT topic_id, forum_id

				FROM ' . TOPICS_TABLE . '

				WHERE forum_id = ' . $row['forum_id'] . "

					AND topic_moved_id = 0

					AND topic_last_post_time $sql_condition {$row['topic_last_post_time']}

					" . (($auth->acl_get('m_approve', $row['forum_id'])) ? '' : 'AND topic_approved = 1') . "

				ORDER BY topic_last_post_time $sql_ordering";

			$result = $db->sql_query_limit($sql, 1);

			$row = $db->sql_fetchrow($result);

			$db->sql_freeresult($result);

			if (!$row)

			{

				$user->setup('viewtopic');

				trigger_error(($view == 'next') ? 'NO_NEWER_TOPICS' : 'NO_OLDER_TOPICS');

			}

			else

			{

				$topic_id = $row['topic_id'];

				// Check for global announcement correctness?

				if (!$row['forum_id'] && !$forum_id)

				{

					trigger_error('NO_TOPIC');

				}

				else if ($row['forum_id'])

				{

					$forum_id = $row['forum_id'];

				}

			}

		}

	}

	// Check for global announcement correctness?

	if ((!isset($row) || !$row['forum_id']) && !$forum_id)

	{

		trigger_error('NO_TOPIC');

	}

	else if (isset($row) && $row['forum_id'])

	{

		$forum_id = $row['forum_id'];

	}

}

// This rather complex gaggle of code handles querying for topics but

// also allows for direct linking to a post (and the calculation of which

// page the post is on and the correct display of viewtopic)

$sql_array = array(

	'SELECT'	=> 't.*, f.*',

	'FROM'		=> array(FORUMS_TABLE => 'f'),

);

// The FROM-Order is quite important here, else t.* columns can not be correctly bound.

if ($post_id)

{

	$sql_array['FROM'][POSTS_TABLE] = 'p';

}

// Topics table need to be the last in the chain

$sql_array['FROM'][TOPICS_TABLE] = 't';

if ($user->data['is_registered'])

{

	$sql_array['SELECT'] .= ', tw.notify_status';

	$sql_array['LEFT_JOIN'] = array();

	$sql_array['LEFT_JOIN'][] = array(

		'FROM'	=> array(TOPICS_WATCH_TABLE => 'tw'),

		'ON'	=> 'tw.user_id = ' . $user->data['user_id'] . ' AND t.topic_id = tw.topic_id'

	);

	if ($config['allow_bookmarks'])

	{

		$sql_array['SELECT'] .= ', bm.topic_id as bookmarked';

		$sql_array['LEFT_JOIN'][] = array(

			'FROM'	=> array(BOOKMARKS_TABLE => 'bm'),

			'ON'	=> 'bm.user_id = ' . $user->data['user_id'] . ' AND t.topic_id = bm.topic_id'

		);

	}

	if ($config['load_db_lastread'])

	{

		$sql_array['SELECT'] .= ', tt.mark_time, ft.mark_time as forum_mark_time';

		$sql_array['LEFT_JOIN'][] = array(

			'FROM'	=> array(TOPICS_TRACK_TABLE => 'tt'),

			'ON'	=> 'tt.user_id = ' . $user->data['user_id'] . ' AND t.topic_id = tt.topic_id'

		);

		$sql_array['LEFT_JOIN'][] = array(

			'FROM'	=> array(FORUMS_TRACK_TABLE => 'ft'),

			'ON'	=> 'ft.user_id = ' . $user->data['user_id'] . ' AND t.forum_id = ft.forum_id'

		);

	}

}

if (!$post_id)

{

	$sql_array['WHERE'] = "t.topic_id = $topic_id";

}

else

{

	$sql_array['WHERE'] = "p.post_id = $post_id AND t.topic_id = p.topic_id" . ((!$auth->acl_get('m_approve', $forum_id)) ? ' AND p.post_approved = 1' : '');

}

$sql_array['WHERE'] .= ' AND (f.forum_id = t.forum_id';

if (!$forum_id)

{

	// If it is a global announcement make sure to set the forum id to a postable forum

	$sql_array['WHERE'] .= ' OR (t.topic_type = ' . POST_GLOBAL . '

		AND f.forum_type = ' . FORUM_POST . ')';

}

else

{

	$sql_array['WHERE'] .= ' OR (t.topic_type = ' . POST_GLOBAL . "

		AND f.forum_id = $forum_id)";

}

$sql_array['WHERE'] .= ')';

// Join to forum table on topic forum_id unless topic forum_id is zero

// whereupon we join on the forum_id passed as a parameter ... this

// is done so navigation, forum name, etc. remain consistent with where

// user clicked to view a global topic

$sql = $db->sql_build_query('SELECT', $sql_array);

$result = $db->sql_query($sql);

$topic_data = $db->sql_fetchrow($result);

$db->sql_freeresult($result);

if (!$topic_data)

{

	// If post_id was submitted, we try at least to display the topic as a last resort...

	if ($post_id && $forum_id && $topic_id)

	{

		redirect(append_sid('viewtopic', "f=$forum_id&t=$topic_id"));

	}

	trigger_error('NO_TOPIC');

}

// This is for determining where we are (page)

if ($post_id)

{

	if ($post_id == $topic_data['topic_first_post_id'] || $post_id == $topic_data['topic_last_post_id'])

	{

		$check_sort = ($post_id == $topic_data['topic_first_post_id']) ? 'd' : 'a';

		if ($sort_dir == $check_sort)

		{

			$topic_data['prev_posts'] = ($auth->acl_get('m_approve', $forum_id)) ? $topic_data['topic_replies_real'] : $topic_data['topic_replies'];

		}

		else

		{

			$topic_data['prev_posts'] = 0;

		}

	}

	else

	{

		$sql = 'SELECT COUNT(p1.post_id) AS prev_posts

			FROM ' . POSTS_TABLE . ' p1, ' . POSTS_TABLE . " p2

			WHERE p1.topic_id = {$topic_data['topic_id']}

				AND p2.post_id = {$post_id}

				" . ((!$auth->acl_get('m_approve', $forum_id)) ? 'AND p1.post_approved = 1' : '') . '

				AND ' . (($sort_dir == 'd') ? 'p1.post_time >= p2.post_time' : 'p1.post_time <= p2.post_time');

		$result = $db->sql_query($sql);

		$row = $db->sql_fetchrow($result);

		$db->sql_freeresult($result);

		$topic_data['prev_posts'] = $row['prev_posts'] - 1;

	}

}

$forum_id = (int) $topic_data['forum_id'];

$topic_id = (int) $topic_data['topic_id'];

//

$topic_replies = ($auth->acl_get('m_approve', $forum_id)) ? $topic_data['topic_replies_real'] : $topic_data['topic_replies'];

// Check sticky/announcement time limit

if (($topic_data['topic_type'] == POST_STICKY || $topic_data['topic_type'] == POST_ANNOUNCE) && $topic_data['topic_time_limit'] && ($topic_data['topic_time'] + $topic_data['topic_time_limit']) < time())

{

	$sql = 'UPDATE ' . TOPICS_TABLE . '

		SET topic_type = ' . POST_NORMAL . ', topic_time_limit = 0

		WHERE topic_id = ' . $topic_id;

	$db->sql_query($sql);

	$topic_data['topic_type'] = POST_NORMAL;

	$topic_data['topic_time_limit'] = 0;

}

// Setup look and feel

$user->setup('viewtopic', $topic_data['forum_style']);

if (!$topic_data['topic_approved'] && !$auth->acl_get('m_approve', $forum_id))

{

	trigger_error('NO_TOPIC');

}

// Start auth check

if (!$auth->acl_get('f_read', $forum_id))

{

	if ($user->data['user_id'] != ANONYMOUS)

	{

		trigger_error('SORRY_AUTH_READ');

	}

	login_box('', $user->lang['LOGIN_VIEWFORUM']);

}

// Forum is passworded ... check whether access has been granted to this

// user this session, if not show login box

if ($topic_data['forum_password'])

{

	login_forum_box($topic_data);

}

// Redirect to login or to the correct post upon emailed notification links

if (isset($_GET['e']))

{

	$jump_to = request_var('e', 0);

	$redirect_url = append_sid('viewtopic', "f=$forum_id&t=$topic_id");

	if ($user->data['user_id'] == ANONYMOUS)

	{

		login_box($redirect_url . "&p=$post_id&e=$jump_to", $user->lang['LOGIN_NOTIFY_TOPIC']);

	}

	if ($jump_to > 0)

	{

		// We direct the already logged in user to the correct post...

		redirect($redirect_url . ((!$post_id) ? "&p=$jump_to" : "&p=$post_id") . "#p$jump_to");

	}

}

// What is start equal to?

if ($post_id)

{

	$start = floor(($topic_data['prev_posts']) / $config['posts_per_page']) * $config['posts_per_page'];

}

// Get topic tracking info

if (!isset($topic_tracking_info))

{

	$topic_tracking_info = array();

	// Get topic tracking info

	if ($config['load_db_lastread'] && $user->data['is_registered'])

	{

		$tmp_topic_data = array($topic_id => $topic_data);

		$topic_tracking_info = get_topic_tracking($forum_id, $topic_id, $tmp_topic_data, array($forum_id => $topic_data['forum_mark_time']));

		unset($tmp_topic_data);

	}

	else if ($config['load_anon_lastread'] || $user->data['is_registered'])

	{

		$topic_tracking_info = get_complete_topic_tracking($forum_id, $topic_id);

	}

}

// Post ordering options

$limit_days = array(0 => $user->lang['ALL_POSTS'], 1 => $user->lang['1_DAY'], 7 => $user->lang['7_DAYS'], 14 => $user->lang['2_WEEKS'], 30 => $user->lang['1_MONTH'], 90 => $user->lang['3_MONTHS'], 180 => $user->lang['6_MONTHS'], 365 => $user->lang['1_YEAR']);

$sort_by_text = array('a' => $user->lang['AUTHOR'], 't' => $user->lang['POST_TIME'], 's' => $user->lang['SUBJECT']);

$sort_by_sql = array('a' => 'u.username_clean', 't' => 'p.post_time', 's' => 'p.post_subject');

$s_limit_days = $s_sort_key = $s_sort_dir = $u_sort_param = '';

gen_sort_selects($limit_days, $sort_by_text, $sort_days, $sort_key, $sort_dir, $s_limit_days, $s_sort_key, $s_sort_dir, $u_sort_param, $default_sort_days, $default_sort_key, $default_sort_dir);

// Obtain correct post count and ordering SQL if user has

// requested anything different

if ($sort_days)

{

	$min_post_time = time() - ($sort_days * 86400);

	$sql = 'SELECT COUNT(post_id) AS num_posts

		FROM ' . POSTS_TABLE . "

		WHERE topic_id = $topic_id

			AND post_time >= $min_post_time

		" . (($auth->acl_get('m_approve', $forum_id)) ? '' : 'AND post_approved = 1');

	$result = $db->sql_query($sql);

	$total_posts = (int) $db->sql_fetchfield('num_posts');

	$db->sql_freeresult($result);

	$limit_posts_time = "AND p.post_time >= $min_post_time ";

	if (isset($_POST['sort']))

	{

		$start = 0;

	}

}

else

{

	$total_posts = $topic_replies + 1;

	$limit_posts_time = '';

}

// Was a highlight request part of the URI?

$highlight_match = $highlight = '';

if ($hilit_words)

{

	foreach (explode(' ', trim($hilit_words)) as $word)

	{

		if (trim($word))

		{