<?php

/*-------------------------------------------------------+

| PHP-Fusion Content Management System

| Copyright (C) 2002 - 2008 Nick Jones

| http://www.php-fusion.co.uk/

+--------------------------------------------------------+

| Filename: shoutbox_panel.php

| Author: Nick Jones (Digitanium)

+--------------------------------------------------------+

| This program is released as free software under the

| Affero GPL license. You can redistribute it and/or

| modify it under the terms of this license which you

| can read by viewing the included agpl.txt or online

| at www.gnu.org/licenses/agpl.html. Removal of this

| copyright header is strictly prohibited without

| written permission from the original author(s).

+--------------------------------------------------------*/

if (!defined("IN_FUSION")) { die("Access Denied"); }

include INFUSIONS."pd_warning/warning.inc.php";



$link = FUSION_SELF.(FUSION_QUERY ? "?".FUSION_QUERY : "");

$link = preg_replace("^(&amp;|\?)s_action=(edit|delete)&amp;shout_id=\d*^", "", $link);

$sep = stristr($link, "?") ? "&amp;" : "?";



if (iMEMBER && (isset($_GET['s_action']) && $_GET['s_action'] == "delete") && (isset($_GET['shout_id']) && isnum($_GET['shout_id']))) {

   if ((iADMIN && checkrights("S")) || (iMEMBER && dbcount("(shout_id)", DB_SHOUTBOX, "shout_id='".$_GET['shout_id']."' AND shout_name='".$userdata['user_id']."'"))) {

      $result = dbquery("DELETE FROM ".DB_SHOUTBOX." WHERE shout_id='".$_GET['shout_id']."'".(iADMIN ? "" : " AND shout_name='".$userdata['user_id']."'"));

   }

   redirect($link);

}



function sbwrap($text) {

   

   $i = 0; $tags = 0; $chars = 0; $res = "";

   

   $str_len = strlen($text);

   

   for ($i = 0; $i < $str_len; $i++) {

      $chr = substr($text, $i, 1);

      if ($chr == "<") {

         if (substr($text, ($i + 1), 6) == "a href" || substr($text, ($i + 1), 3) == "img") {

            $chr = " ".$chr;

            $chars = 0;

         }

         $tags++;

      } elseif ($chr == "&") {

         if (substr($text, ($i + 1), 5) == "quot;") {

            $chars = $chars - 5;

         } elseif (substr($text, ($i + 1), 4) == "amp;" || substr($text, ($i + 1), 4) == "#39;" || substr($text, ($i + 1), 4) == "#92;") {

            $chars = $chars - 4;

         } elseif (substr($text, ($i + 1), 3) == "lt;" || substr($text, ($i + 1), 3) == "gt;") {

            $chars = $chars - 3;

         }

      } elseif ($chr == ">") {

         $tags--;

      } elseif ($chr == " ") {

         $chars = 0;

      } elseif (!$tags) {

         $chars++;

      }

      

      if (!$tags && $chars == 18) {

         $chr .= "<br />";

         $chars = 0;

      }

      $res .= $chr;

   }

   

   return $res;

}



openside($locale['global_150']);

if (iMEMBER || $settings['guestposts'] == "1") {

   include_once INCLUDES."bbcode_include.php";

   if (isset($_POST['post_shout'])) {

      $flood = false;

      if (iMEMBER) {

         $shout_name = $userdata['user_id'];

      } elseif ($settings['guestposts'] == "1") {

         $shout_name = trim(stripinput($_POST['shout_name']));

         $shout_name = preg_replace("(^[0-9]*)", "", $shout_name);

         if (isnum($shout_name)) { $shout_name = ""; }

         include_once INCLUDES."securimage/securimage.php";

         $securimage = new Securimage();

         if (!isset($_POST['sb_captcha_code']) || $securimage->check($_POST['sb_captcha_code']) == false) { redirect($link); }

      }

      $shout_message = str_replace("\n", " ", $_POST['shout_message']);

      $shout_message = preg_replace("/^(.{255}).*$/", "$1", $shout_message);

      $shout_message = trim(stripinput(censorwords($shout_message)));

      if (iMEMBER && (isset($_GET['s_action']) && $_GET['s_action'] == "edit") && (isset($_GET['shout_id']) && isnum($_GET['shout_id']))) {

         $comment_updated = false;

         if ((iADMIN && checkrights("S")) || (iMEMBER && dbcount("(shout_id)", DB_SHOUTBOX, "shout_id='".$_GET['shout_id']."' AND shout_name='".$userdata['user_id']."'"))) {

            if ($shout_message) {

               $result = dbquery("UPDATE ".DB_SHOUTBOX." SET shout_message='$shout_message' WHERE shout_id='".$_GET['shout_id']."'".(iADMIN ? "" : " AND shout_name='".$userdata['user_id']."'"));

            }

         }

         redirect($link);

      } elseif ($shout_name && $shout_message) {

         require_once INCLUDES."flood_include.php";

         if (!flood_control("shout_datestamp", DB_SHOUTBOX, "shout_ip='".USER_IP."'")) {

            $result = dbquery("INSERT INTO ".DB_SHOUTBOX." (shout_name, shout_message, shout_datestamp, shout_ip) VALUES ('$shout_name', '$shout_message', '".time()."', '".USER_IP."')");

         }

      }

      redirect($link);

   }

   if (iMEMBER && (isset($_GET['s_action']) && $_GET['s_action'] == "edit") && (isset($_GET['shout_id']) && isnum($_GET['shout_id']))) {

      $esresult = dbquery(

         "SELECT ts.*, tu.user_id, tu.user_name FROM ".DB_SHOUTBOX." ts

         LEFT JOIN ".DB_USERS." tu ON ts.shout_name=tu.user_id

         WHERE ts.shout_id='".$_GET['shout_id']."'"

      );

      if (dbrows($esresult)) {

         $esdata = dbarray($esresult);

         if ((iADMIN && checkrights("S")) || (iMEMBER && $esdata['shout_name'] == $userdata['user_id'] && isset($esdata['user_name']))) {

            if ((isset($_GET['s_action']) && $_GET['s_action'] == "edit") && (isset($_GET['shout_id']) && isnum($_GET['shout_id']))) {

               $edit_url = $sep."s_action=edit&amp;shout_id=".$esdata['shout_id'];

            } else {

               $edit_url = "";

            }

            $shout_link = $link.$edit_url;

            $shout_message = $esdata['shout_message'];

         }

      } else {

         $shout_link = $link;

         $shout_message = "";

      }

   } else {

      $shout_link = $link;

      $shout_message = "";

   }

   

   echo "<a id='edit_shout' name='edit_shout'></a>\n";

   echo "<form name='shout_form' method='post' action='".$shout_link."'>\n";

   if (iGUEST) {

      echo $locale['global_151']."<br />\n";

      echo "<input type='text' name='shout_name' value='' class='textbox' maxlength='30' style='width:140px' /><br />\n";

      echo $locale['global_152']."<br />\n";

   }

   echo "<textarea name='shout_message' rows='4' cols='20' class='textbox' style=\"width:140px;\" onfocus=\"if(this.value=='Ingen Support, Links og andet snavs i denne Shoutbox!!!')this.value='';\" onblur=\"if(this.value=='')this.value='Ingen Support, Links og andet snavs i denne Shoutbox!!!';\" >".$shout_message.(empty($shout_message)?"Ingen Support, Links og andet snavs i denne Shoutbox!!!":"")."</textarea><br />\n";

   echo display_bbcodes("150px;", "shout_message", "shout_form", "smiley|b|u|url|color")."\n";

   if (iGUEST) {

      echo $locale['global_158']."<br />\n";

      echo "<img id='sb_captcha' src='".INCLUDES."securimage/securimage_show.php' alt='' /><br />\n";

    echo "<a href='".INCLUDES."securimage/securimage_play.php'><img src='".INCLUDES."securimage/images/audio_icon.gif' alt='' class='tbl-border' style='margin-bottom:1px' /></a>\n";

    echo "<a href='#' onclick=\"document.getElementById('sb_captcha').src = '".INCLUDES."securimage/securimage_show.php?sid=' + Math.random(); return false\"><img src='".INCLUDES."securimage/images/refresh.gif' alt='' class='tbl-border' /></a><br />\n";

      echo $locale['global_159']."<br />\n<input type='text' name='sb_captcha_code' class='textbox' style='width:100px' /><br />\n";

   }

   echo "<br /><input type='submit' name='post_shout' value='".$locale['global_153']."' class='button' />\n";

   echo "</form>\n<br />\n";

} else {

   echo "<div style='text-align:center'>".$locale['global_154']."</div><br />\n";

}

$numrows = dbcount("(shout_id)", DB_SHOUTBOX);

$result = dbquery(

   "SELECT ts.*, tu.user_id, tu.user_name FROM ".DB_SHOUTBOX." ts

   LEFT JOIN ".DB_USERS." tu ON ts.shout_name=tu.user_id

   ORDER BY ts.shout_datestamp DESC LIMIT 0,".$settings['numofshouts']

);

if (dbrows($result)) {

   $i = 0;

   while ($data = dbarray($result)) {

      echo "<div class='shoutboxname'>";

      if ($data['user_name']) {

         echo "<a href='".BASEDIR."profile.php?lookup=".$data['shout_name']."' class='side'>".$data['user_name']."</a>\n";

      } else {

         echo $data['shout_name']."\n";

      }

      echo "</div>\n";

// START PD_WARNING

  $user_points = show_warning_points($data['user_id']);

   echo "<small><a style='cursor:help;' onClick=\"h1171915583();\">".$locale['PDWA200']."</a></small><br />

   <a href='".INFUSIONS."pd_warning/warning.php?postid=".$data['post_id']."' title='".$user_points." ".($user_points==1 ? $locale['PDWA201'] : $locale['PDWA202'])."'>".show_warning_symbols($user_points)."</a>";

// EINDE PD_WARNING

      echo "<div class='shoutboxdate'>".showdate("shortdate", $data['shout_datestamp'])."</div>";

      echo "<div class='shoutbox'>".sbwrap(parseubb(parsesmileys($data['shout_message']), "b|i|u|url|color"))."</div>\n";

      if ((iADMIN && checkrights("S")) || (iMEMBER && $data['shout_name'] == $userdata['user_id'] && isset($data['user_name']))) {

         echo "[<a href='".$link.$sep."s_action=edit&amp;shout_id=".$data['shout_id']."#edit_shout"."' class='side'>".$locale['global_076']."</a>]\n";

         echo "[<a href='".$link.$sep."s_action=delete&amp;shout_id=".$data['shout_id']."' class='side'>".$locale['global_157']."</a>]<br />\n";

      }

      $i++;

      if ($i != $numrows) { echo "<br />\n"; }

   }

   if ($numrows > $settings['numofshouts']) {

      echo "<div style='text-align:center'>\n<a href='".INFUSIONS."shoutbox_panel/shoutbox_archive.php' class='side'>".$locale['global_155']."</a>\n</div>\n";

   }

} else {

   echo "<div>".$locale['global_156']."</div>\n";

}

closeside();

?>

// START PD_WARNING

  $user_points = show_warning_points($data['user_id']);

   echo "<small><a style='cursor:help;' onClick=\"h1171915583();\">".$locale['PDWA200']."</a></small><br />

   <a href='".INFUSIONS."pd_warning/warning.php?postid=".$data['post_id']."' title='".$user_points." ".($user_points==1 ? $locale['PDWA201'] : $locale['PDWA202'])."'>".show_warning_symbols($user_points)."</a>";

// ENDE PD_WARNING

// START PD_WARNING

  $user_points = show_warning_points($data['user_id']);

   echo "<small><a style='cursor:help;' onClick=\"h1171915583();\">".$locale['PDWA200']."</a></small><br />

   ".show_warning_symbols($user_points);

// ENDE PD_WARNING

include INFUSIONS."pd_warning/warning.inc.php";

include_once INFUSIONS."pd_warning/warning.inc.php";

include_once INFUSIONS."pd_warning/warning.inc.php";