Changeset 41 for trunk/picture.php

Timestamp:

Jul 26, 2003, 2:38:20 PM (21 years ago)

Author:

z0rglub

Message:

anti-flood system

File:

• trunk/picture.php (modified) (2 diffs)

trunk/picture.php

@@ -288 +288 @@
 $lien_image = $cat_directory.$page['file'];
 
-// calcul de la largeur et de la hauteur
+// calculation of width and height
 if ( $page['width'] == "" )
 {
@@ -515 +515 @@
   {
     $author = $user['username'];
-    if ( $_POST['author'] != '' )
-    {
-      $author = $_POST['author'];
-    }
-    $query = 'INSERT INTO '.PREFIX_TABLE.'comments';
-    $query.= ' (author,date,image_id,content,validated) VALUES';
-    $query.= " ('".$author."',".time().",".$page['id'];
-    $query.= ",'".htmlspecialchars( $_POST['content'], ENT_QUOTES)."'";
-    if ( !$conf['comments_validation'] or $user['status'] == 'admin' )
-      $query.= ",'true'";
+    if ( $_POST['author'] != '' ) $author = $_POST['author'];
+
+    // anti-flood system
+    $reference_date = time() - $conf['anti-flood_time'];
+    $query = 'SELECT id';
+    $query.= ' FROM '.PREFIX_TABLE.'comments';
+    $query.= ' WHERE date > '.$reference_date;
+    $query.= " AND author = '".$author."'";
+    $query.= ';';
+    if ( mysql_num_rows( mysql_query( $query ) ) == 0
+         or $conf['anti-flood_time'] == 0 )
+    {
+      $query = 'INSERT INTO '.PREFIX_TABLE.'comments';
+      $query.= ' (author,date,image_id,content,validated) VALUES';
+      $query.= " ('".$author."',".time().",".$page['id'];
+      $query.= ",'".htmlspecialchars( $_POST['content'], ENT_QUOTES)."'";
+      if ( !$conf['comments_validation'] or $user['status'] == 'admin' )
+        $query.= ",'true'";
+      else
+        $query.= ",'false'";
+      $query.= ');';
+      mysql_query( $query );
+      // information message
+      $vtp->addSession( $handle, 'information' );
+      $message = $lang['comment_added'];
+      if ( $conf['comments_validation'] and $user['status'] != 'admin' )
+      {
+        $message.= '<br />'.$lang['comment_to_validate'];
+      }
+      $vtp->setVar( $handle, 'information.content', $message );
+      $vtp->closeSession( $handle, 'information' );
+    }
     else
-      $query.= ",'false'";
-    $query.= ');';
-    mysql_query( $query );
-    $vtp->addSession( $handle, 'information' );
-    $message = $lang['comment_added'];
-    if ( $conf['comments_validation'] and $user['status'] != 'admin' )
-    {
-      $message.= '<br />'.$lang['comment_to_validate'];
-    }
-    $vtp->setVar( $handle, 'information.content', $message );
-    $vtp->closeSession( $handle, 'information' );
+    {
+      // information message
+      $vtp->addSession( $handle, 'information' );
+      $message = $lang['comment_anti-flood'];
+      $vtp->setVar( $handle, 'information.content', $message );
+      $vtp->closeSession( $handle, 'information' );
+    }
   }
   // comment deletion