<?php
// $Id: comment_post.php,v 1.33 2004/12/26 19:11:51 onokazu Exp $
//  ------------------------------------------------------------------------ //
//                XOOPS - PHP Content Management System                      //
//                    Copyright (c) 2000 XOOPS.org                           //
//                       <http://www.xoops.org/>                             //
//  ------------------------------------------------------------------------ //
//  This program is free software; you can redistribute it and/or modify     //
//  it under the terms of the GNU General Public License as published by     //
//  the Free Software Foundation; either version 2 of the License, or        //
//  (at your option) any later version.                                      //
//                                                                           //
//  You may not change or alter any portion of this comment or credits       //
//  of supporting developers from this source code or any supporting         //
//  source code which is considered copyrighted (c) material of the          //
//  original comment or credit authors.                                      //
//                                                                           //
//  This program is distributed in the hope that it will be useful,          //
//  but WITHOUT ANY WARRANTY; without even the implied warranty of           //
//  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the            //
//  GNU General Public License for more details.                             //
//                                                                           //
//  You should have received a copy of the GNU General Public License        //
//  along with this program; if not, write to the Free Software              //
//  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307 USA //
//  ------------------------------------------------------------------------ //
// Author: Kazumi Ono (AKA onokazu)                                          //
// URL: http://www.xoops.org/ http://jp.xoops.org/  http://www.myweb.ne.jp/  //
// Project: The XOOPS Project (http://www.xoops.org/)                        //
// ------------------------------------------------------------------------- //

if (!defined('XOOPS_ROOT_PATH') || !is_object($xoopsModule)) {
	exit();
}
include_once XOOPS_ROOT_PATH.'/language/'.$xoopsConfig['language'].'/comment.php';
include_once XOOPS_ROOT_PATH.'/include/comment_constants.php';
if ('system' == $xoopsModule->getVar('dirname')) {
	$com_id = isset($_POST['com_id']) ? intval($_POST['com_id']) : 0;
	if (empty($com_id)) {
		exit();
	}
	$comment_handler =& xoops_gethandler('comment');
	$comment =& $comment_handler->get($com_id);
	$module_handler =& xoops_gethandler('module');
	$module =& $module_handler->get($comment->getVar('com_modid'));
	$comment_config = $module->getInfo('comments');
	$com_modid = $module->getVar('mid');
	$redirect_page = XOOPS_URL.'/modules/system/admin.php?fct=comments&amp;com_modid='.$com_modid.'&amp;com_itemid';
	$moddir = $module->getVar('dirname');
	unset($comment);
} else {
	if (XOOPS_COMMENT_APPROVENONE == $xoopsModuleConfig['com_rule']) {
		exit();
	}
	$comment_config = $xoopsModule->getInfo('comments');
	$com_modid = $xoopsModule->getVar('mid');
	$redirect_page = $comment_config['pageName'].'?';
	if (isset($comment_config['extraParams']) && is_array($comment_config['extraParams'])) {
		$extra_params = '';
		foreach ($comment_config['extraParams'] as $extra_param) {
			$extra_params .= isset($_POST[$extra_param]) ? $extra_param.'='.$_POST[$extra_param].'&amp;' : $extra_param.'=&amp;';
		}
		$redirect_page .= $extra_params;
	}
	$redirect_page .= $comment_config['itemName'];
	$comment_url = $redirect_page;
	$moddir = $xoopsModule->getVar('dirname');
}
$op = '';
if (!empty($_POST)) {
	foreach ($_POST as $k => $v) {
		${$k} = $v;
	}
	if (isset($com_dopost)) {
		$op = 'post';
	}
	if (isset($com_dopreview)) {
		$op = 'preview';
	}
	if (isset($com_dodelete)) {
		$op = 'delete';
	}
	$com_mode = isset($com_mode) ? htmlspecialchars(trim($com_mode), ENT_QUOTES) : 'flat';
	$com_order = isset($com_order) ? intval($com_order) : XOOPS_COMMENT_OLD1ST;
	$com_id = isset($com_id) ? intval($com_id) : 0;
	$com_itemid = isset($com_itemid) ? intval($com_itemid) : 0;
	$com_status = isset($com_status) ? intval($com_status) : 0;
	$dosmiley = (isset($dosmiley) && intval($dosmiley) > 0) ? 1 : 0;
	$doxcode = (isset($doxcode) && intval($doxcode) > 0) ? 1 : 0;
	$dobr = (isset($dobr) && intval($dobr) > 0) ? 1 : 0;
} else {
	exit();
}

switch ( $op ) {

case "delete":
	include XOOPS_ROOT_PATH.'/include/comment_delete.php';
	break;
case "preview":
	$myts =& MyTextSanitizer::getInstance();
	$doimage = 1;
	$com_title = $myts->htmlSpecialChars($myts->stripSlashesGPC($com_title));
	$dohtml = isset($dohtml) ? intval($dohtml) : 0;
	if ($dohtml != 0) {
		if (is_object($xoopsUser)) {
			if (!$xoopsUser->isAdmin($com_modid)) {
				$sysperm_handler =& xoops_gethandler('groupperm');
				if (!$sysperm_handler->checkRight('system_admin', XOOPS_SYSTEM_COMMENT, $xoopsUser->getGroups())) {
					$dohtml = 0;
				}
			}
		} else {
			$dohtml = 0;
		}
	}
	$p_comment =& $myts->previewTarea($com_text, $dohtml, $dosmiley, $doxcode, $doimage, $dobr);
	$com_icon = isset($com_icon) ? $com_icon : '';
	$noname = isset($noname) ? intval($noname) : 0;
	$com_text = $myts->htmlSpecialChars($myts->stripSlashesGPC($com_text));
	if ($xoopsModule->getVar('dirname') != 'system') {
		include XOOPS_ROOT_PATH.'/header.php';
		themecenterposts($com_title, $p_comment);
		include XOOPS_ROOT_PATH.'/include/comment_form.php';
		include XOOPS_ROOT_PATH.'/footer.php';
	} else {
		xoops_cp_header();
		themecenterposts($com_title, $p_comment);
		include XOOPS_ROOT_PATH.'/include/comment_form.php';
		xoops_cp_footer();
	}
	break;
case "post":
	$doimage = 1;
	$comment_handler =& xoops_gethandler('comment');
	$add_userpost = false;
	$call_approvefunc = false;
	$call_updatefunc = false;
	// RMV-NOTIFY - this can be set to 'comment' or 'comment_submit'
	$notify_event = false;
	if (!empty($com_id)) {
		$comment =& $comment_handler->get($com_id);
		$accesserror = false;

		if (is_object($xoopsUser)) {
			$sysperm_handler =& xoops_gethandler('groupperm');
			if ($xoopsUser->isAdmin($com_modid) || $sysperm_handler->checkRight('system_admin', XOOPS_SYSTEM_COMMENT, $xoopsUser->getGroups())) {
				$dohtml = (!empty($dohtml)) ? 1 : 0;
				if (!empty($com_status) && $com_status != XOOPS_COMMENT_PENDING) {
					$old_com_status = $comment->getVar('com_status');
					$comment->setVar('com_status', $com_status);
					// if changing status from pending state, increment user post
					if (XOOPS_COMMENT_PENDING == $old_com_status) {
						$add_userpost = true;
						if (XOOPS_COMMENT_ACTIVE == $com_status) {
							$call_updatefunc = true;
							$call_approvefunc = true;
							// RMV-NOTIFY
							$notify_event = 'comment';
						}
					} elseif (XOOPS_COMMENT_HIDDEN == $old_com_status && XOOPS_COMMENT_ACTIVE == $com_status) {
						$call_updatefunc = true;
						// Comments can not be directly posted hidden,
						// no need to send notification here
					} elseif (XOOPS_COMMENT_ACTIVE == $old_com_status && XOOPS_COMMENT_HIDDEN == $com_status) {
						$call_updatefunc = true;
					}
				}
			} else {
				$dohtml = 0;
				if ($comment->getVar('com_uid') != $xoopsUser->getVar('uid')) {
					$accesserror = true;
				}
			}
		} else {
			$dohtml = 0;
			$accesserror = true;
		}
		if (false != $accesserror) {
			redirect_header($redirect_page.'='.$com_itemid.'&amp;com_id='.$com_id.'&amp;com_mode='.$com_mode.'&amp;com_order='.$com_order, 1, _NOPERM);
			exit();
		}
	} else {
		$comment = $comment_handler->create();
		$comment->setVar('com_created', time());
		$comment->setVar('com_pid', $com_pid);
		$comment->setVar('com_itemid', $com_itemid);
		$comment->setVar('com_rootid', $com_rootid);
		$comment->setVar('com_ip', xoops_getenv('REMOTE_ADDR'));
		if (is_object($xoopsUser)) {
			$sysperm_handler =& xoops_gethandler('groupperm');
			if ($xoopsUser->isAdmin($com_modid) || $sysperm_handler->checkRight('system_admin', XOOPS_SYSTEM_COMMENT, $xoopsUser->getGroups())) {
				$dohtml = (!empty($dohtml)) ? 1 : 0;
				$comment->setVar('com_status', XOOPS_COMMENT_ACTIVE);
				$add_userpost = true;
				$call_approvefunc = true;
				$call_updatefunc = true;
				// RMV-NOTIFY
				$notify_event = 'comment';
			} else {
				$dohtml = 0;
				switch ($xoopsModuleConfig['com_rule']) {
				case XOOPS_COMMENT_APPROVEALL:
				case XOOPS_COMMENT_APPROVEUSER:
					$comment->setVar('com_status', XOOPS_COMMENT_ACTIVE);
					$add_userpost = true;
					$call_approvefunc = true;
					$call_updatefunc = true;
					// RMV-NOTIFY
					$notify_event = 'comment';
					break;
				case XOOPS_COMMENT_APPROVEADMIN:
				default:
					$comment->setVar('com_status', XOOPS_COMMENT_PENDING);
					$notify_event = 'comment_submit';
					break;
				}
			}
			if (!empty($xoopsModuleConfig['com_anonpost']) && !empty($noname)) {
				$uid = 0;
			} else {
				$uid = $xoopsUser->getVar('uid');
			}
		} else {
			$dohtml = 0;
			$uid = 0;
			if ($xoopsModuleConfig['com_anonpost'] != 1) {
				redirect_header($redirect_page.'='.$com_itemid.'&amp;com_id='.$com_id.'&amp;com_mode='.$com_mode.'&amp;com_order='.$com_order, 1, _NOPERM);
				exit();
			}
		}
		if ($uid == 0) {
			switch ($xoopsModuleConfig['com_rule']) {
			case XOOPS_COMMENT_APPROVEALL:
				$comment->setVar('com_status', XOOPS_COMMENT_ACTIVE);
				$add_userpost = true;
				$call_approvefunc = true;
				$call_updatefunc = true;
				// RMV-NOTIFY
				$notify_event = 'comment';
				break;
			case XOOPS_COMMENT_APPROVEADMIN:
			case XOOPS_COMMENT_APPROVEUSER:
			default:
				$comment->setVar('com_status', XOOPS_COMMENT_PENDING);
				// RMV-NOTIFY
				$notify_event = 'comment_submit';
				break;
			}
		}
		$comment->setVar('com_uid', $uid);
	}
	$com_title = xoops_trim($com_title);
	$com_title = ($com_title == '') ? _NOTITLE : $com_title;
	$comment->setVar('com_title', $com_title);
	$comment->setVar('com_text', $com_text);
	$comment->setVar('dohtml', $dohtml);
	$comment->setVar('dosmiley', $dosmiley);
	$comment->setVar('doxcode', $doxcode);
	$comment->setVar('doimage', $doimage);
	$comment->setVar('dobr', $dobr);
	$icon = isset($com_icon) ? $com_icon : '';
	$comment->setVar('com_icon', $icon);
	$comment->setVar('com_modified', time());
	$comment->setVar('com_modid', $com_modid);
	if (isset($extra_params)) {
		$comment->setVar('com_exparams', $extra_params);
	}
	if (false != $comment_handler->insert($comment)) {
		$newcid = $comment->getVar('com_id');

		// set own id as root id if this is a top comment
		if ($com_rootid == 0) {
			$com_rootid = $newcid;
			if (!$comment_handler->updateByField($comment, 'com_rootid', $com_rootid)) {
				$comment_handler->delete($comment);
				include XOOPS_ROOT_PATH.'/header.php';
				xoops_error();
				include XOOPS_ROOT_PATH.'/footer.php';
			}
		}

		// call custom approve function if any
		if (false != $call_approvefunc && isset($comment_config['callback']['approve']) && trim($comment_config['callback']['approve']) != '') {
			$skip = false;
			if (!function_exists($comment_config['callback']['approve'])) {
				if (isset($comment_config['callbackFile'])) {
					$callbackfile = trim($comment_config['callbackFile']);
					if ($callbackfile != '' && file_exists(XOOPS_ROOT_PATH.'/modules/'.$moddir.'/'.$callbackfile)) {
						include_once XOOPS_ROOT_PATH.'/modules/'.$moddir.'/'.$callbackfile;
					}
					if (!function_exists($comment_config['callback']['approve'])) {
						$skip = true;
					}
				} else {
					$skip = true;
				}
			}
			if (!$skip) {
				$comment_config['callback']['approve']($comment);
			}
		}

		// call custom update function if any
		if (false != $call_updatefunc && isset($comment_config['callback']['update']) && trim($comment_config['callback']['update']) != '') {
			$skip = false;
			if (!function_exists($comment_config['callback']['update'])) {
				if (isset($comment_config['callbackFile'])) {
					$callbackfile = trim($comment_config['callbackFile']);
					if ($callbackfile != '' && file_exists(XOOPS_ROOT_PATH.'/modules/'.$moddir.'/'.$callbackfile)) {
						include_once XOOPS_ROOT_PATH.'/modules/'.$moddir.'/'.$callbackfile;
					}
					if (!function_exists($comment_config['callback']['update'])) {
						$skip = true;
					}
				} else {
					$skip = true;
				}
			}
			if (!$skip) {
				$criteria = new CriteriaCompo(new Criteria('com_modid', $com_modid));
				$criteria->add(new Criteria('com_itemid', $com_itemid));
				$criteria->add(new Criteria('com_status', XOOPS_COMMENT_ACTIVE));
				$comment_count = $comment_handler->getCount($criteria);
				$func = $comment_config['callback']['update'];
				call_user_func_array($func, array($com_itemid, $comment_count, $comment->getVar('com_id')));
			}
		}

		// increment user post if needed
		$uid = $comment->getVar('com_uid');
		if ($uid > 0 && false != $add_userpost) {
			$member_handler =& xoops_gethandler('member');
			$poster =& $member_handler->getUser($uid);
			if (is_object($poster)) {
				$member_handler->updateUserByField($poster, 'posts', $poster->getVar('posts') + 1);
			}
		}

		// RMV-NOTIFY
		// trigger notification event if necessary
		if ($notify_event) {
			$not_modid = $com_modid;
			include_once XOOPS_ROOT_PATH . '/include/notification_functions.php';
			$not_catinfo =& notificationCommentCategoryInfo($not_modid);
			$not_category = $not_catinfo['name'];
			$not_itemid = $com_itemid;
			$not_event = $notify_event;
			// Build an ABSOLUTE URL to view the comment.  Make sure we
			// point to a viewable page (i.e. not the system administration
			// module).
			$comment_tags = array();
			if ('system' == $xoopsModule->getVar('dirname')) {
				$module_handler =& xoops_gethandler('module');
				$not_module =& $module_handler->get($not_modid);
			} else {
				$not_module =& $xoopsModule;
			}
			if (!isset($comment_url)) {
				$com_config =& $not_module->getInfo('comments');
				$comment_url = $com_config['pageName'] . '?';
    			if (isset($com_config['extraParams']) && is_array($com_config['extraParams'])) {
        			$extra_params = '';
        			foreach ($com_config['extraParams'] as $extra_param) {
        			    $extra_params .= isset($_POST[$extra_param]) ? $extra_param.'='.$_POST[$extra_param].'&amp;' : $extra_param.'=&amp;';
            			//$extra_params .= isset($_GET[$extra_param]) ? $extra_param.'='.$_GET[$extra_param].'&amp;' : $extra_param.'=&amp;';
        			}
        			$comment_url .= $extra_params;
    			}
				$comment_url .= $com_config['itemName'];
			}
			$comment_tags['X_COMMENT_URL'] = XOOPS_URL . '/modules/' . $not_module->getVar('dirname') . '/' .$comment_url . '=' . $com_itemid.'&amp;com_id='.$newcid.'&amp;com_rootid='.$com_rootid.'&amp;com_mode='.$com_mode.'&amp;com_order='.$com_order.'#comment'.$newcid;
			$notification_handler =& xoops_gethandler('notification');
			$notification_handler->triggerEvent ($not_category, $not_itemid, $not_event, $comment_tags, false, $not_modid);
		}

		if (!isset($comment_post_results)) {

			// if the comment is active, redirect to posted comment
			if ($comment->getVar('com_status') == XOOPS_COMMENT_ACTIVE) {
				redirect_header($redirect_page.'='.$com_itemid.'&amp;com_id='.$newcid.'&amp;com_rootid='.$com_rootid.'&amp;com_mode='.$com_mode.'&amp;com_order='.$com_order.'#comment'.$newcid, 2, _CM_THANKSPOST);
			} else {
				// not active, so redirect to top comment page
				redirect_header($redirect_page.'='.$com_itemid.'&amp;com_mode='.$com_mode.'&amp;com_order='.$com_order.'#comment'.$newcid, 2, _CM_THANKSPOST);
			}
		}
	} else {
		if (!isset($purge_comment_post_results)) {
			include XOOPS_ROOT_PATH.'/header.php';
			xoops_error($comment->getHtmlErrors());
			include XOOPS_ROOT_PATH.'/footer.php';
		} else {
			$comment_post_results = $comment->getErrors();
		}
	}
	break;
default:
	break;
}
?>