Code Forge

<?php

/***************************************************************************

 *                                posting.php

 *                            -------------------

 *   begin                : Saturday, Feb 13, 2001

 *   copyright            : (C) 2001 The phpBB Group

 *   email                : support@phpbb.com

 *

 *   $Id$

 *

 *

 ***************************************************************************/

/***************************************************************************

 *

 *   This program is free software; you can redistribute it and/or modify

 *   it under the terms of the GNU General Public License as published by

 *   the Free Software Foundation; either version 2 of the License, or

 *   (at your option) any later version.

 *

 ***************************************************************************/

define('IN_PHPBB', true);

$phpbb_root_path = './';

include($phpbb_root_path . 'extension.inc');

include($phpbb_root_path . 'common.'.$phpEx);

include($phpbb_root_path . 'includes/bbcode.'.$phpEx);

include($phpbb_root_path . 'includes/functions_post.'.$phpEx);

//

// Check and set various parameters

//

$params = array('submit' => 'post', 'confirm' => 'confirm', 'preview' => 'preview', 'delete' => 'delete', 'poll_delete' => 'poll_delete', 'poll_add' => 'add_poll_option', 'poll_edit' => 'edit_poll_option', 'mode' => 'mode');

while( list($var, $param) = @each($params) )

{

        if ( !empty($HTTP_POST_VARS[$param]) || !empty($HTTP_GET_VARS[$param]) )

        {

                $$var = ( !empty($HTTP_POST_VARS[$param]) ) ? $HTTP_POST_VARS[$param] : $HTTP_GET_VARS[$param];

        }

        else

        {

                $$var = '';

        }

}

$params = array('forum_id' => POST_FORUM_URL, 'topic_id' => POST_TOPIC_URL, 'post_id' => POST_POST_URL);

while( list($var, $param) = @each($params) )

{

        if ( !empty($HTTP_POST_VARS[$param]) || !empty($HTTP_GET_VARS[$param]) )

        {

                $$var = ( !empty($HTTP_POST_VARS[$param]) ) ? intval($HTTP_POST_VARS[$param]) : intval($HTTP_GET_VARS[$param]);

        }

        else

        {

                $$var = '';

        }

}

$refresh = $preview || $poll_add || $poll_edit || $poll_delete;

//

// Set topic type

//

$topic_type = ( !empty($HTTP_POST_VARS['topictype']) ) ? intval($HTTP_POST_VARS['topictype']) : POST_NORMAL;

//

// If the mode is set to topic review then output

// that review ...

//

if ( $mode == 'topicreview' )

{

        require($phpbb_root_path . 'includes/topic_review.'.$phpEx);

        topic_review($topic_id, false);

        exit;

}

else if ( $mode == 'smilies' )

{

        generate_smilies('window', PAGE_POSTING);

        exit;

}

//

// Start session management

//

$userdata = session_pagestart($user_ip, PAGE_POSTING);

init_userprefs($userdata);

//

// End session management

//

//

// Was cancel pressed? If so then redirect to the appropriate

// page, no point in continuing with any further checks

//

if ( isset($HTTP_POST_VARS['cancel']) )

{

        if ( $post_id )

        {

                $redirect = "viewtopic.$phpEx?" . POST_POST_URL . "=$post_id";

                $post_append = "#$post_id";

        }

        else if ( $topic_id )

        {

                $redirect = "viewtopic.$phpEx?" . POST_TOPIC_URL . "=$topic_id";

                $post_append = '';

        }

        else if ( $forum_id )

        {

                $redirect = "viewforum.$phpEx?" . POST_FORUM_URL . "=$forum_id";

                $post_append = '';

        }

        else

        {

                $redirect = "index.$phpEx";

                $post_append = '';

        }

        $header_location = ( @preg_match('/Microsoft|WebSTAR|Xitami/', getenv('SERVER_SOFTWARE')) ) ? 'Refresh: 0; URL=' : 'Location: ';

        header($header_location . append_sid($redirect, true) . $post_append);

        exit;

}

//

// What auth type do we need to check?

//

$is_auth = array();

switch( $mode )

{

        case 'newtopic':

                if ( $topic_type == POST_ANNOUNCE )

                {

                        $is_auth_type = 'auth_announce';

                }

                else if ( $topic_type == POST_STICKY )

                {

                        $is_auth_type = 'auth_sticky';

                }

                else

                {

                        $is_auth_type = 'auth_post';

                }

                break;

        case 'reply':

        case 'quote':

                $is_auth_type = 'auth_reply';

                break;

        case 'editpost':

                $is_auth_type = 'auth_edit';

                break;

        case 'delete':

        case 'poll_delete':

                $is_auth_type = 'auth_delete';

                break;

        case 'vote':

                $is_auth_type = 'auth_vote';

                break;

        case 'topicreview':

                $is_auth_type = 'auth_read';

                break;

        default:

                message_die(GENERAL_MESSAGE, $lang['No_post_mode']);

                break;

}

//

// Here we do various lookups to find topic_id, forum_id, post_id etc.

// Doing it here prevents spoofing (eg. faking forum_id, topic_id or post_id

//

$error_msg = '';

$post_data = array();

switch ( $mode )

{

        case 'newtopic':

                if ( empty($forum_id) )

                {

                        message_die(GENERAL_MESSAGE, $lang['Forum_not_exist']);

                }

                $sql = "SELECT *

                        FROM " . FORUMS_TABLE . "

                        WHERE forum_id = $forum_id";

                break;

        case 'reply':

        case 'vote':

                if ( empty( $topic_id) )

                {

                        message_die(GENERAL_MESSAGE, $lang['No_topic_id']);

                }

                $sql = "SELECT f.*, t.topic_status

                        FROM " . FORUMS_TABLE . " f, " . TOPICS_TABLE . " t

                        WHERE t.topic_id = $topic_id

                                AND f.forum_id = t.forum_id";

                break;

        case 'quote':

        case 'editpost':

        case 'delete':

        case 'poll_delete':

                if ( empty($post_id) )

                {

                        message_die(GENERAL_MESSAGE, $lang['No_post_id']);

                }

                $select_sql = ( !$submit ) ? ", t.topic_title, p.enable_bbcode, p.enable_html, p.enable_smilies, p.enable_sig, p.post_username, pt.post_subject, pt.post_text, pt.bbcode_uid, u.username, u.user_id, u.user_sig" : '';

                $from_sql = ( !$submit ) ? ", " . POSTS_TEXT_TABLE . " pt, " . USERS_TABLE . " u" : '';

                $where_sql = ( !$submit ) ? "AND pt.post_id = p.post_id AND u.user_id = p.poster_id" : '';

                $sql = "SELECT f.*, t.topic_id, t.topic_status, t.topic_type, t.topic_first_post_id, t.topic_last_post_id, t.topic_vote, p.post_id, p.poster_id" . $select_sql . "

                        FROM " . POSTS_TABLE . " p, " . TOPICS_TABLE . " t, " . FORUMS_TABLE . " f" . $from_sql . "

                        WHERE p.post_id = $post_id

                                AND t.topic_id = p.topic_id

                                AND f.forum_id = p.forum_id

                                $where_sql";

                break;

        default:

                message_die(GENERAL_MESSAGE, $lang['No_valid_mode']);

}

if ( $result = $db->sql_query($sql) )

{

        $post_info = $db->sql_fetchrow($result);

        $forum_id = $post_info['forum_id'];

        $forum_name = $post_info['forum_name'];

        $is_auth = auth(AUTH_ALL, $forum_id, $userdata, $post_info);

        if ( $post_info['forum_status'] == FORUM_LOCKED && !$is_auth['auth_mod'])

        {

           message_die(GENERAL_MESSAGE, $lang['Forum_locked']);

        }

        else if ( $mode != 'newtopic' && $post_info['topic_status'] == TOPIC_LOCKED && !$is_auth['auth_mod'])

        {

           message_die(GENERAL_MESSAGE, $lang['Topic_locked']);

        }

        if ( $mode == 'editpost' || $mode == 'delete' || $mode == 'poll_delete' )

        {

                $topic_id = $post_info['topic_id'];

                $post_data['poster_post'] = ( $post_info['poster_id'] == $userdata['user_id'] ) ? true : false;

                $post_data['first_post'] = ( $post_info['topic_first_post_id'] == $post_id ) ? true : false;

                $post_data['last_post'] = ( $post_info['topic_last_post_id'] == $post_id ) ? true : false;

                $post_data['last_topic'] = ( $post_info['forum_last_post_id'] == $post_id ) ? true : false;

                $post_data['has_poll'] = ( $post_info['topic_vote'] ) ? true : false;

                $post_data['topic_type'] = $post_info['topic_type'];

                $post_data['poster_id'] = $post_info['poster_id'];

                if ( $post_data['first_post'] && $post_data['has_poll'] )

                {

                        $sql = "SELECT *

                                FROM " . VOTE_DESC_TABLE . " vd, " . VOTE_RESULTS_TABLE . " vr

                                WHERE vd.topic_id = $topic_id

                                        AND vr.vote_id = vd.vote_id

                                ORDER BY vr.vote_option_id";

                        if ( !($result = $db->sql_query($sql)) )

                        {

                                message_die(GENERAL_ERROR, 'Could not obtain vote data for this topic', '', __LINE__, __FILE__, $sql);

                        }

                        $poll_options = array();

                        $poll_results_sum = 0;

                        if ( $row = $db->sql_fetchrow($result) )

                        {

                                $poll_title = $row['vote_text'];

                                $poll_id = $row['vote_id'];

                                $poll_length = $row['vote_length'] / 86400;

                                do

                                {

                                        $poll_options[$row['vote_option_id']] = $row['vote_option_text'];

                                        $poll_results_sum += $row['vote_result'];

                                }

                                while ( $row = $db->sql_fetchrow($result) );

                        }

                        $post_data['edit_poll'] = ( ( !$poll_results_sum || $is_auth['auth_mod'] ) && $post_data['first_post'] ) ? true : 0;

                }

                else

                {

                        $post_data['edit_poll'] = false;

                }

                //

                // Can this user edit/delete the post/poll?

                //

                if ( $post_info['poster_id'] != $userdata['user_id'] && !$is_auth['auth_mod'] )

                {

                        $message = ( $delete || $mode == 'delete' ) ? $lang['Delete_own_posts'] : $lang['Edit_own_posts'];

                        $message .= '<br /><br />' . sprintf($lang['Click_return_topic'], '<a href="' . append_sid("viewtopic.$phpEx?" . POST_TOPIC_URL . "=$topic_id") . '">', '</a>');

                        message_die(GENERAL_MESSAGE, $message);

                }

                else if ( !$post_data['last_post'] && !$is_auth['auth_mod'] && ( $mode == 'delete' || $delete ) )

                {

                        message_die(GENERAL_MESSAGE, $lang['Cannot_delete_replied']);

                }

                else if ( !$post_data['edit_poll'] && !$is_auth['auth_mod'] && ( $mode == 'poll_delete' || $poll_delete ) )

                {

                        message_die(GENERAL_MESSAGE, $lang['Cannot_delete_poll']);

                }

        }

        else

        {

                if ( $mode == 'quote' )

                {

                        $topic_id = $post_info['topic_id'];

                }

                $post_data['first_post'] = ( $mode == 'newtopic' ) ? true : 0;

                $post_data['last_post'] = false;

                $post_data['has_poll'] = false;

                $post_data['edit_poll'] = false;

        }

}

else

{

        message_die(GENERAL_MESSAGE, $lang['No_such_post']);

}

//

// The user is not authed, if they're not logged in then redirect

// them, else show them an error message

//

if ( !$is_auth[$is_auth_type] )

{

        if ( $userdata['session_logged_in'] )

        {

                message_die(GENERAL_MESSAGE, sprintf($lang['Sorry_' . $is_auth_type], $is_auth[$is_auth_type . "_type"]));

        }

        switch( $mode )

        {

                case 'newtopic':

                        $redirect = "mode=newtopic&" . POST_FORUM_URL . "=" . $forum_id;

                        break;

                case 'reply':

                case 'topicreview':

                        $redirect = "mode=reply&" . POST_TOPIC_URL . "=" . $topic_id;

                        break;

                case 'quote':

                case 'editpost':

                        $redirect = "mode=quote&" . POST_POST_URL ."=" . $post_id;

                        break;

        }

        $header_location = ( @preg_match('/Microsoft|WebSTAR|Xitami/', getenv('SERVER_SOFTWARE')) ) ? 'Refresh: 0; URL=' : 'Location: ';

        header($header_location . append_sid("login.$phpEx?redirect=posting.$phpEx&" . $redirect, true));

        exit;

}

//

// Set toggles for various options

//

if ( !$board_config['allow_html'] )

{

        $html_on = 0;

}

else

{

        $html_on = ( $submit || $refresh ) ? ( ( !empty($HTTP_POST_VARS['disable_html']) ) ? 0 : TRUE ) : ( ( $userdata['user_id'] == ANONYMOUS ) ? $board_config['allow_html'] : $userdata['user_allowhtml'] );

}

if ( !$board_config['allow_bbcode'] )

{

        $bbcode_on = 0;

}

else

{

        $bbcode_on = ( $submit || $refresh ) ? ( ( !empty($HTTP_POST_VARS['disable_bbcode']) ) ? 0 : TRUE ) : ( ( $userdata['user_id'] == ANONYMOUS ) ? $board_config['allow_bbcode'] : $userdata['user_allowbbcode'] );

}

if ( !$board_config['allow_smilies'] )

{

        $smilies_on = 0;

}

else

{

        $smilies_on = ( $submit || $refresh ) ? ( ( !empty($HTTP_POST_VARS['disable_smilies']) ) ? 0 : TRUE ) : ( ( $userdata['user_id'] == ANONYMOUS ) ? $board_config['allow_smilies'] : $userdata['user_allowsmile'] );

}

if ( $submit || $refresh )

{

        $notify_user = ( !empty($HTTP_POST_VARS['notify']) ) ? TRUE : 0;

}

else

{

        if ( $mode != 'newtopic' && $userdata['session_logged_in'] )

        {

                $sql = "SELECT topic_id

                        FROM " . TOPICS_WATCH_TABLE . "

                        WHERE topic_id = $topic_id

                                AND user_id = " . $userdata['user_id'];

                if ( !($result = $db->sql_query($sql)) )

                {

                        message_die(GENERAL_ERROR, 'Could not obtain topic watch information', '', __LINE__, __FILE__, $sql);

                }

                $notify_user = ( $db->sql_fetchrow($result) ) ? TRUE : $userdata['user_notify'];

        }

        else

        {

                $notify_user = ( $userdata['session_logged_in'] ) ? $userdata['user_notify'] : 0;

        }

}

$attach_sig = ( $submit || $refresh ) ? ( ( !empty($HTTP_POST_VARS['attach_sig']) ) ? TRUE : 0 ) : ( ( $userdata['user_id'] == ANONYMOUS ) ? 0 : $userdata['user_attachsig'] );

// --------------------

//  What shall we do?

//

if ( ( $delete || $poll_delete || $mode == 'delete' ) && !$confirm )

{

        //

        // Confirm deletion

        //

        $s_hidden_fields = '<input type="hidden" name="' . POST_POST_URL . '" value="' . $post_id . '" />';

        $s_hidden_fields .= ( $delete || $mode == "delete" ) ? '<input type="hidden" name="mode" value="delete" />' : '<input type="hidden" name="mode" value="poll_delete" />';

        $l_confirm = ( $delete || $mode == 'delete' ) ? $lang['Confirm_delete'] : $lang['Confirm_delete_poll'];

        //

        // Output confirmation page

        //

        include($phpbb_root_path . 'includes/page_header.'.$phpEx);

        $template->set_filenames(array(

                'confirm_body' => 'confirm_body.tpl')

        );

        $template->assign_vars(array(

                'MESSAGE_TITLE' => $lang['Information'],

                'MESSAGE_TEXT' => $l_confirm,

                'L_YES' => $lang['Yes'],

                'L_NO' => $lang['No'],

                'S_CONFIRM_ACTION' => append_sid("posting.$phpEx"),

                'S_HIDDEN_FIELDS' => $s_hidden_fields)

        );

        $template->pparse('confirm_body');

        include($phpbb_root_path . 'includes/page_tail.'.$phpEx);

}

else if ( $mode == 'vote' )

{

        //

        // Vote in a poll

        //

        if ( !empty($HTTP_POST_VARS['vote_id']) )

        {

                $vote_option_id = intval($HTTP_POST_VARS['vote_id']);

                $sql = "SELECT vd.vote_id

                        FROM " . VOTE_DESC_TABLE . " vd, " . VOTE_RESULTS_TABLE . " vr

                        WHERE vd.topic_id = $topic_id

                                AND vr.vote_id = vd.vote_id

                                AND vr.vote_option_id = $vote_option_id

                        GROUP BY vd.vote_id";

                if ( !($result = $db->sql_query($sql)) )

                {

                        message_die(GENERAL_ERROR, 'Could not obtain vote data for this topic', '', __LINE__, __FILE__, $sql);

                }

                if ( $vote_info = $db->sql_fetchrow($result) )

                {

                        $vote_id = $vote_info['vote_id'];

                        $sql = "SELECT *

                                FROM " . VOTE_USERS_TABLE . "

                                WHERE vote_id = $vote_id

                                        AND vote_user_id = " . $userdata['user_id'];

                        if ( !($result = $db->sql_query($sql)) )

                        {

                                message_die(GENERAL_ERROR, 'Could not obtain user vote data for this topic', '', __LINE__, __FILE__, $sql);

                        }

                        if ( !($row = $db->sql_fetchrow($result)) )

                        {

                                $sql = "UPDATE " . VOTE_RESULTS_TABLE . "

                                        SET vote_result = vote_result + 1

                                        WHERE vote_id = $vote_id

                                                AND vote_option_id = $vote_option_id";

                                if ( !$db->sql_query($sql, BEGIN_TRANSACTION) )

                                {

                                        message_die(GENERAL_ERROR, 'Could not update poll result', '', __LINE__, __FILE__, $sql);

                                }

                                $sql = "INSERT INTO " . VOTE_USERS_TABLE . " (vote_id, vote_user_id, vote_user_ip)

                                        VALUES ($vote_id, " . $userdata['user_id'] . ", '$user_ip')";

                                if ( !$db->sql_query($sql, END_TRANSACTION) )

                                {

                                        message_die(GENERAL_ERROR, "Could not insert user_id for poll", "", __LINE__, __FILE__, $sql);

                                }

                                $message = $lang['Vote_cast'];

                        }

                        else

                        {

                                $message = $lang['Already_voted'];

                        }

                }

                else

                {

                        $message = $lang['No_vote_option'];

                }

                $template->assign_vars(array(

                        'META' => '<meta http-equiv="refresh" content="3;url=' . append_sid("viewtopic.$phpEx?" . POST_TOPIC_URL . "=$topic_id") . '">')

                );

                $message .=  '<br /><br />' . sprintf($lang['Click_view_message'], '<a href="' . append_sid("viewtopic.$phpEx?" . POST_TOPIC_URL . "=$topic_id") . '">', '</a>');

                message_die(GENERAL_MESSAGE, $message);

        }

}

else if ( $submit || $confirm )

{

        //

        // Submit post/vote (newtopic, edit, reply, etc.)

        //

        $return_message = '';

        $return_meta = '';

        switch ( $mode )

        {

                case 'editpost':

                case 'newtopic':

                case 'reply':

                        $username = ( !empty($HTTP_POST_VARS['username']) ) ? $HTTP_POST_VARS['username'] : '';

                        $subject = ( !empty($HTTP_POST_VARS['subject']) ) ? trim($HTTP_POST_VARS['subject']) : '';

                        $message = ( !empty($HTTP_POST_VARS['message']) ) ? $HTTP_POST_VARS['message'] : '';

                        $poll_title = ( isset($HTTP_POST_VARS['poll_title']) && $is_auth['auth_pollcreate'] ) ? $HTTP_POST_VARS['poll_title'] : '';

                        $poll_options = ( isset($HTTP_POST_VARS['poll_option_text']) && $is_auth['auth_pollcreate'] ) ? $HTTP_POST_VARS['poll_option_text'] : '';

                        $poll_length = ( isset($HTTP_POST_VARS['poll_length']) && $is_auth['auth_pollcreate'] ) ? $HTTP_POST_VARS['poll_length'] : '';

                        $bbcode_uid = '';

                        prepare_post($mode, $post_data, $bbcode_on, $html_on, $smilies_on, $error_msg, $username, $bbcode_uid, $subject, $message, $poll_title, $poll_options, $poll_length);

                        if ( $error_msg == '' )

                        {

                                $topic_type = ( $topic_type != $post_data['topic_type'] && !$is_auth['auth_sticky'] && !$is_auth['auth_announce'] ) ? $post_data['topic_type'] : $topic_type;

                                submit_post($mode, $post_data, $return_message, $return_meta, $forum_id, $topic_id, $post_id, $poll_id, $topic_type, $bbcode_on, $html_on, $smilies_on, $attach_sig, $bbcode_uid, str_replace("\'", "''", $username), str_replace("\'", "''", $subject), str_replace("\'", "''", $message), str_replace("\'", "''", $poll_title), $poll_options, $poll_length);

                                if ( $error_msg == '' )

                                {

                                        user_notification($mode, $post_data, $forum_id, $topic_id, $post_id, $notify_user);

                                }

                        }

                        break;

                case 'delete':

                case 'poll_delete':

                        delete_post($mode, $post_data, $return_message, $return_meta, $forum_id, $topic_id, $post_id, $poll_id);

                        break;

        }

        if ( $error_msg == '' )

        {

                if ( $mode != 'editpost' )

                {

                        $user_id = ( $mode == 'reply' || $mode == 'newtopic' ) ? $userdata['user_id'] : $post_data['poster_id'];

                        update_post_stats($mode, $post_data, $forum_id, $topic_id, $post_id, $user_id);

                }

                if ( $mode == 'newtopic' || $mode == 'reply' )

                {

                        $tracking_topics = ( !empty($HTTP_COOKIE_VARS[$board_config['cookie_name'] . '_t']) ) ? unserialize($HTTP_COOKIE_VARS[$board_config['cookie_name'] . '_t']) : array();

                        $tracking_forums = ( !empty($HTTP_COOKIE_VARS[$board_config['cookie_name'] . '_f']) ) ? unserialize($HTTP_COOKIE_VARS[$board_config['cookie_name'] . '_f']) : array();

                        if ( count($tracking_topics) + count($tracking_forums) == 100 && empty($tracking_topics[$topic_id]) )

                        {

                                asort($tracking_topics);

                                unset($tracking_topics[key($tracking_topics)]);

                        }

                        $tracking_topics[$topic_id] = time();

                        setcookie($board_config['cookie_name'] . '_t', serialize($tracking_topics), 0, $board_config['cookie_path'], $board_config['cookie_domain'], $board_config['cookie_secure']);

                }

                $template->assign_vars(array(

                        'META' => $return_meta)

                );

                message_die(GENERAL_MESSAGE, $return_message);

        }

}

if( $refresh || isset($HTTP_POST_VARS['del_poll_option']) || $error_msg != '' )

{

        $username = ( !empty($HTTP_POST_VARS['username']) ) ? htmlspecialchars(trim(stripslashes($HTTP_POST_VARS['username']))) : '';

        $subject = ( !empty($HTTP_POST_VARS['subject']) ) ? htmlspecialchars(trim(stripslashes($HTTP_POST_VARS['subject']))) : '';

        $message = ( !empty($HTTP_POST_VARS['message']) ) ? htmlspecialchars(trim(stripslashes($HTTP_POST_VARS['message']))) : '';

        $poll_title = ( !empty($HTTP_POST_VARS['poll_title']) ) ? htmlspecialchars(trim(stripslashes($HTTP_POST_VARS['poll_title']))) : '';

        $poll_length = ( isset($HTTP_POST_VARS['poll_length']) ) ? max(0, intval($HTTP_POST_VARS['poll_length'])) : 0;

        $poll_options = array();

        if ( !empty($HTTP_POST_VARS['poll_option_text']) )

        {

                while( list($option_id, $option_text) = @each($HTTP_POST_VARS['poll_option_text']) )

                {

                        if( isset($HTTP_POST_VARS['del_poll_option'][$option_id]) )

                        {

                                unset($poll_options[$option_id]);

                        }

                        else if ( !empty($option_text) )

                        {

                                $poll_options[$option_id] = htmlspecialchars(trim(stripslashes($option_text)));

                        }

                }

        }

        if ( isset($poll_add) && !empty($HTTP_POST_VARS['add_poll_option_text']) )

        {

                $poll_options[] = htmlspecialchars(trim(stripslashes($HTTP_POST_VARS['add_poll_option_text'])));

        }

        if ( $mode == 'newtopic' || $mode == 'reply')

        {

                $user_sig = ( $userdata['user_sig'] != '' && $board_config['allow_sig'] ) ? $userdata['user_sig'] : '';

        }

        else if ( $mode == 'editpost' )

        {

                $user_sig = ( $post_info['user_sig'] != '' && $board_config['allow_sig'] ) ? $post_info['user_sig'] : '';

        }

        if( $preview )

        {

                $orig_word = array();

                $replacement_word = array();

                obtain_word_list($orig_word, $replacement_word);

                $bbcode_uid = ( $bbcode_on ) ? make_bbcode_uid() : '';

                $preview_message = stripslashes(prepare_message(addslashes(unprepare_message($message)), $html_on, $bbcode_on, $smilies_on, $bbcode_uid));

                $preview_subject = $subject;

                $preview_username = $username;

                //

                // Finalise processing as per viewtopic

                //

                if( !$html_on )

                {

                        if( $user_sig != '' || !$userdata['user_allowhtml'] )

                        {

                                $user_sig = preg_replace('#(<)([\/]?.*?)(>)#is', '&lt;\2&gt;', $user_sig);

                        }

                }

                if( $attach_sig && $user_sig != '' && $userdata['user_sig_bbcode_uid'] )

                {

                        $user_sig = bbencode_second_pass($user_sig, $userdata['user_sig_bbcode_uid']);

                }

                if( $bbcode_on )

                {

                        $preview_message = bbencode_second_pass($preview_message, $bbcode_uid);

                }

                if( !empty($orig_word) )

                {

                        $preview_username = ( !empty($username) ) ? preg_replace($orig_word, $replacement_word, $preview_username) : '';

                        $preview_subject = ( !empty($subject) ) ? preg_replace($orig_word, $replacement_word, $preview_subject) : '';

                        $preview_message = ( !empty($preview_message) ) ? preg_replace($orig_word, $replacement_word, $preview_message) : '';