[1082] | 1 | <?php |
---|
| 2 | // +-----------------------------------------------------------------------+ |
---|
[2297] | 3 | // | Piwigo - a PHP based picture gallery | |
---|
| 4 | // +-----------------------------------------------------------------------+ |
---|
[5196] | 5 | // | Copyright(C) 2008-2010 Piwigo Team http://piwigo.org | |
---|
[2297] | 6 | // | Copyright(C) 2003-2008 PhpWebGallery Team http://phpwebgallery.net | |
---|
| 7 | // | Copyright(C) 2002-2003 Pierrick LE GALL http://le-gall.net/pierrick | |
---|
| 8 | // +-----------------------------------------------------------------------+ |
---|
| 9 | // | This program is free software; you can redistribute it and/or modify | |
---|
| 10 | // | it under the terms of the GNU General Public License as published by | |
---|
| 11 | // | the Free Software Foundation | |
---|
| 12 | // | | |
---|
| 13 | // | This program is distributed in the hope that it will be useful, but | |
---|
| 14 | // | WITHOUT ANY WARRANTY; without even the implied warranty of | |
---|
| 15 | // | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU | |
---|
| 16 | // | General Public License for more details. | |
---|
| 17 | // | | |
---|
| 18 | // | You should have received a copy of the GNU General Public License | |
---|
| 19 | // | along with this program; if not, write to the Free Software | |
---|
| 20 | // | Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, | |
---|
| 21 | // | USA. | |
---|
| 22 | // +-----------------------------------------------------------------------+ |
---|
[1082] | 23 | |
---|
| 24 | /** |
---|
| 25 | * This file is included by the picture page to manage user comments |
---|
[1090] | 26 | * |
---|
[1082] | 27 | */ |
---|
[1737] | 28 | |
---|
[1610] | 29 | // the picture is commentable if it belongs at least to one category which |
---|
| 30 | // is commentable |
---|
| 31 | $page['show_comments'] = false; |
---|
| 32 | foreach ($related_categories as $category) |
---|
[1082] | 33 | { |
---|
[1610] | 34 | if ($category['commentable'] == 'true') |
---|
[1082] | 35 | { |
---|
[1610] | 36 | $page['show_comments'] = true; |
---|
| 37 | break; |
---|
| 38 | } |
---|
| 39 | } |
---|
| 40 | |
---|
| 41 | if ( $page['show_comments'] and isset( $_POST['content'] ) ) |
---|
| 42 | { |
---|
[2029] | 43 | if ( is_a_guest() and !$conf['comments_forall'] ) |
---|
[1610] | 44 | { |
---|
| 45 | die ('Session expired'); |
---|
| 46 | } |
---|
| 47 | |
---|
| 48 | $comm = array( |
---|
[6438] | 49 | 'author' => trim( @$_POST['author'] ), |
---|
| 50 | 'content' => trim( $_POST['content'] ), |
---|
[1610] | 51 | 'image_id' => $page['image_id'], |
---|
| 52 | ); |
---|
| 53 | |
---|
[1849] | 54 | include_once(PHPWG_ROOT_PATH.'include/functions_comment.inc.php'); |
---|
[2101] | 55 | |
---|
[1860] | 56 | $comment_action = insert_user_comment($comm, @$_POST['key'], $infos ); |
---|
[1610] | 57 | |
---|
[1849] | 58 | switch ($comment_action) |
---|
[1737] | 59 | { |
---|
[1849] | 60 | case 'moderate': |
---|
[5021] | 61 | array_push( $infos, l10n('An administrator must authorize your comment before it is visible.') ); |
---|
[1849] | 62 | case 'validate': |
---|
[5021] | 63 | array_push( $infos, l10n('Your comment has been registered')); |
---|
[1849] | 64 | break; |
---|
[2101] | 65 | case 'reject': |
---|
[1849] | 66 | set_status_header(403); |
---|
[5021] | 67 | array_push($infos, l10n('Your comment has NOT been registered because it did not pass the validation rules') ); |
---|
[1849] | 68 | break; |
---|
| 69 | default: |
---|
| 70 | trigger_error('Invalid comment action '.$comment_action, E_USER_WARNING); |
---|
[1737] | 71 | } |
---|
[1082] | 72 | |
---|
[2227] | 73 | $template->assign( |
---|
| 74 | ($comment_action=='reject') ? 'errors' : 'infos', |
---|
| 75 | $infos |
---|
| 76 | ); |
---|
[1610] | 77 | |
---|
| 78 | // allow plugins to notify what's going on |
---|
| 79 | trigger_action( 'user_comment_insertion', |
---|
| 80 | array_merge($comm, array('action'=>$comment_action) ) |
---|
| 81 | ); |
---|
[1082] | 82 | } |
---|
[2155] | 83 | elseif ( isset($_POST['content']) ) |
---|
| 84 | { |
---|
| 85 | set_status_header(403); |
---|
| 86 | die('ugly spammer'); |
---|
| 87 | } |
---|
[1082] | 88 | |
---|
| 89 | if ($page['show_comments']) |
---|
| 90 | { |
---|
[5654] | 91 | if ( !is_admin() ) |
---|
| 92 | { |
---|
| 93 | $validated_clause = ' AND validated = \'true\''; |
---|
| 94 | } |
---|
| 95 | else |
---|
| 96 | { |
---|
| 97 | $validated_clause = ''; |
---|
| 98 | } |
---|
| 99 | |
---|
[3145] | 100 | // number of comments for this picture |
---|
| 101 | $query = ' |
---|
[5654] | 102 | SELECT |
---|
| 103 | COUNT(*) AS nb_comments |
---|
[3145] | 104 | FROM '.COMMENTS_TABLE.' |
---|
[5654] | 105 | WHERE image_id = '.$page['image_id'] |
---|
| 106 | .$validated_clause.' |
---|
| 107 | ;'; |
---|
[4325] | 108 | $row = pwg_db_fetch_assoc( pwg_query( $query ) ); |
---|
[1082] | 109 | |
---|
| 110 | // navigation bar creation |
---|
[1084] | 111 | if (!isset($page['start'])) |
---|
[1082] | 112 | { |
---|
| 113 | $page['start'] = 0; |
---|
| 114 | } |
---|
[1090] | 115 | |
---|
[2227] | 116 | $navigation_bar = create_navigation_bar( |
---|
[1503] | 117 | duplicate_picture_url(array(), array('start')), |
---|
[1082] | 118 | $row['nb_comments'], |
---|
| 119 | $page['start'], |
---|
| 120 | $conf['nb_comment_page'], |
---|
[1084] | 121 | true // We want a clean URL |
---|
[1082] | 122 | ); |
---|
[1090] | 123 | |
---|
[2227] | 124 | $template->assign( |
---|
[1082] | 125 | array( |
---|
[2227] | 126 | 'COMMENT_COUNT' => $row['nb_comments'], |
---|
[3172] | 127 | 'navbar' => $navigation_bar, |
---|
[1082] | 128 | ) |
---|
| 129 | ); |
---|
| 130 | |
---|
| 131 | if ($row['nb_comments'] > 0) |
---|
| 132 | { |
---|
| 133 | $query = ' |
---|
[5654] | 134 | SELECT |
---|
| 135 | com.id, |
---|
| 136 | author, |
---|
| 137 | author_id, |
---|
| 138 | '.$conf['user_fields']['username'].' AS username, |
---|
| 139 | date, |
---|
| 140 | image_id, |
---|
| 141 | content, |
---|
| 142 | validated |
---|
[3450] | 143 | FROM '.COMMENTS_TABLE.' AS com |
---|
| 144 | LEFT JOIN '.USERS_TABLE.' AS u |
---|
[3452] | 145 | ON u.'.$conf['user_fields']['id'].' = author_id |
---|
[5654] | 146 | WHERE image_id = '.$page['image_id'].' |
---|
| 147 | '.$validated_clause.' |
---|
[1082] | 148 | ORDER BY date ASC |
---|
[4607] | 149 | LIMIT '.$conf['nb_comment_page'].' OFFSET '.$page['start'].' |
---|
[1082] | 150 | ;'; |
---|
| 151 | $result = pwg_query( $query ); |
---|
| 152 | |
---|
[4325] | 153 | while ($row = pwg_db_fetch_assoc($result)) |
---|
[1082] | 154 | { |
---|
[3488] | 155 | if (!empty($row['author'])) |
---|
[3450] | 156 | { |
---|
| 157 | $author = $row['author']; |
---|
| 158 | if ($author == 'guest') |
---|
| 159 | { |
---|
| 160 | $author = l10n('guest'); |
---|
| 161 | } |
---|
| 162 | } |
---|
| 163 | else |
---|
| 164 | { |
---|
[4304] | 165 | $author = stripslashes($row['username']); |
---|
[3450] | 166 | } |
---|
| 167 | |
---|
[3122] | 168 | $tpl_comment = |
---|
[1082] | 169 | array( |
---|
[3450] | 170 | 'AUTHOR' => trigger_event('render_comment_author', $author), |
---|
[1090] | 171 | |
---|
[3122] | 172 | 'DATE' => format_date( $row['date'], true), |
---|
[1090] | 173 | |
---|
[2227] | 174 | 'CONTENT' => trigger_event('render_comment_content',$row['content']), |
---|
[1082] | 175 | ); |
---|
| 176 | |
---|
[3450] | 177 | if (can_manage_comment('delete', $row['author_id'])) |
---|
[3445] | 178 | { |
---|
[5195] | 179 | $tpl_comment['U_DELETE'] = add_url_params( |
---|
| 180 | $url_self, |
---|
| 181 | array( |
---|
| 182 | 'action'=>'delete_comment', |
---|
| 183 | 'comment_to_delete'=>$row['id'], |
---|
| 184 | 'pwg_token' => get_pwg_token(), |
---|
| 185 | ) |
---|
| 186 | ); |
---|
[3445] | 187 | } |
---|
[3450] | 188 | if (can_manage_comment('edit', $row['author_id'])) |
---|
[3445] | 189 | { |
---|
[5195] | 190 | $tpl_comment['U_EDIT'] = add_url_params( |
---|
| 191 | $url_self, |
---|
| 192 | array( |
---|
| 193 | 'action'=>'edit_comment', |
---|
| 194 | 'comment_to_edit'=>$row['id'], |
---|
| 195 | 'pwg_token' => get_pwg_token(), |
---|
| 196 | ) |
---|
| 197 | ); |
---|
[3445] | 198 | if (isset($edit_comment) and ($row['id'] == $edit_comment)) |
---|
| 199 | { |
---|
| 200 | $tpl_comment['IN_EDIT'] = true; |
---|
| 201 | $key = get_comment_post_key($page['image_id']); |
---|
| 202 | $tpl_comment['KEY'] = $key; |
---|
| 203 | $tpl_comment['CONTENT'] = $row['content']; |
---|
| 204 | } |
---|
| 205 | } |
---|
[1082] | 206 | if (is_admin()) |
---|
| 207 | { |
---|
[3409] | 208 | if ($row['validated'] != 'true') |
---|
| 209 | { |
---|
[5195] | 210 | $tpl_comment['U_VALIDATE'] = add_url_params( |
---|
| 211 | $url_self, |
---|
| 212 | array( |
---|
| 213 | 'action' => 'validate_comment', |
---|
| 214 | 'comment_to_validate' => $row['id'], |
---|
| 215 | 'pwg_token' => get_pwg_token(), |
---|
| 216 | ) |
---|
| 217 | ); |
---|
[3409] | 218 | } |
---|
[1082] | 219 | } |
---|
[2227] | 220 | $template->append('comments', $tpl_comment); |
---|
[1082] | 221 | } |
---|
| 222 | } |
---|
| 223 | |
---|
[5649] | 224 | $show_add_comment_form = true; |
---|
| 225 | if (isset($edit_comment)) |
---|
[1082] | 226 | { |
---|
[5649] | 227 | $show_add_comment_form = false; |
---|
| 228 | } |
---|
| 229 | if (is_a_guest() and !$conf['comments_forall']) |
---|
| 230 | { |
---|
| 231 | $show_add_comment_form = false; |
---|
| 232 | } |
---|
| 233 | |
---|
| 234 | if ($show_add_comment_form) |
---|
| 235 | { |
---|
[1849] | 236 | $key = get_comment_post_key($page['image_id']); |
---|
[1744] | 237 | $content = ''; |
---|
| 238 | if ('reject'===@$comment_action) |
---|
| 239 | { |
---|
[6438] | 240 | $content = htmlspecialchars( stripslashes($comm['content']) ); |
---|
[1744] | 241 | } |
---|
[2227] | 242 | $template->assign('comment_add', |
---|
[1737] | 243 | array( |
---|
[2227] | 244 | 'F_ACTION' => $url_self, |
---|
[1744] | 245 | 'KEY' => $key, |
---|
[2227] | 246 | 'CONTENT' => $content, |
---|
| 247 | 'SHOW_AUTHOR' => !is_classic_user() |
---|
[1737] | 248 | )); |
---|
[1082] | 249 | } |
---|
| 250 | } |
---|
| 251 | |
---|
| 252 | ?> |
---|