createcontent.php | searchcode

/paproject/web/includes/blocks/createcontent.php

https://github.com/paragjagdale/people-aggregator
PHP | 343 lines | 254 code | 34 blank | 55 comment | 87 complexity | 3a60dbbc16ae267b22bc100cbf3c9c37 MD5 | raw file

<?php
/** !
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
* [filename] is a part of PeopleAggregator.
* [description including history]
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
* @author [creator, or "Original Author"]
* @license http://bit.ly/aVWqRV PayAsYouGo License
* @copyright Copyright (c) 2010 Broadband Mechanics
* @package PeopleAggregator
*/
?>
<?php
//TO DO: while saving content save function should be called once
//variable for Blog save should be according to criteria specified

require_once "api/BlogPost/BlogPost.php";
require_once "api/Contribution/Contribution.php";
require_once "api/Suggestion/Suggestion.php";
require_once "web/includes/functions/auto_email_notify.php";
require_once "api/Activities/Activities.php";
require_once "api/api_constants.php";

// echo "_POST <pre>".print_r($_POST,1)."</pre>"; exit;

$user = get_user();
if (isset($_POST['publish']) && $content_type == 'BlogPost') {
  if (!empty($_POST['attach_media_html'])) {
  	$_POST["description"] .= "\n<br clear=\"all\"/><br /><br />\n".$_POST['attach_media_html'];
  }


  /* data_array is used to populate the form with the values in case of error */
  $data_array["blog_title"] = trim($_POST["blog_title"]);

  filter_all_post($_POST);
  $valid_post_types = array('BlogPost', 'Contribution', 'Suggestion');
  $type = (isset($_POST) && isset($_POST['blog_type']) && in_array($_POST['blog_type'], $valid_post_types))
    ? $_POST['blog_type'] : 'BlogPost';

  $pattern = '/(https?:\/\/)?(((www\.)?([a-zA-Z0-9_\.\-]*)\b\.[a-z]{2,4}(\.[a-z]{2})?)|(localhost))(:[0-9]*)?((\/[a-zA-Z0-9_\-\.]*)+)?(\.[a-z]*)?(\?\S+)?/';
  $redirect = (isset($_POST) && isset($_POST['redirect']) && preg_match($pattern, $_POST['redirect']))
    ? $_POST['redirect'] : '';

  $data_array['blog_type'] = trim($type);
  $data_array["description"] = trim($_POST["description"]);
  $data_array["tags"] = trim($_POST["tags"]);
  $error = FALSE;
  $post_err = "";

  if(preg_match_all('#<([^>]+)>#i', $data_array["blog_title"], $matches)) {
    $error = TRUE;
    $post_err.= "Title contains illegal HTML code: <br />";
    $found_tags = array();
    foreach($matches[1] as $html_tag) {
      if( 0 !== strpos(trim($html_tag), "/")) {
        $post_err.= htmlspecialchars("<$html_tag>") . "<br />";
      }
    }
  }

  if (empty($data_array["blog_title"])) {
    $error = TRUE;
    $post_err = "Post Title cannot be empty.<br />";
  }

  if (empty($data_array["description"]) ) {
    $error = TRUE;
    $post_err.= "Description cannot be empty.<br />";
  }
  // if no error then do the rest of work
  if ( !$error ) {
    ////////////get tags
    $terms = array();
  	$tags = preg_split('/\s*,\s*/' , strtolower($_POST['tags']));
    $tags = array_unique($tags);
    foreach ($tags as $term) {
      $tr = trim($term);
      if ($tr) {
        $terms[] = $tr;
      }
    }
    /////////////////
    // check to see if user wants to edit the post
    // now just edit and redirect to permalink

    $track = null;          // NOTE: by Zoran Hron; trackback never has been used !?
    if( !empty($cid) ) {
      $condition = array('content_id' => $cid);
      $is_active = ACTIVE;
      if (PA::is_moderated_content())
        $content = Content::load_all_content_for_moderation(NULL, $condition);
      if (!empty($content)) {
        $is_active = $content[0]['is_active'];
      }

      switch($type) {
        case 'BlogPost':
        default:
          $r = BlogPost::save_blogpost($cid, PA::$login_uid, $_POST["blog_title"], $_POST["description"], $track, $terms, -1, $is_active);
          break;

        case 'Contribution':
          $r = Contribution::save_contribution($cid, PA::$login_uid, $_POST["blog_title"], $_POST["description"], $track, $terms, -1, $is_active);
		  if($type == 'Contribution' && $redirect != '') {
            $url_parts = parse_url($redirect);
            parse_str($url_parts['query'], $query_args);

			// save extra information about CC Contributions
			$contribution_id = null;
			$contribution_type = null;
			$contribution_title = null;
			if(isset($query_args['conversation_id'])) {
				$contribution_type = 'conversation';
				$contribution_id = $query_args['conversation_id'];
			}
			if(isset($query_args['issue_id'])) {
				$contribution_type = 'issue';
				$contribution_id = $query_args['issue_id'];
			}
			if(isset($query_args['title'])) {
				$contribution_title = $query_args['title'];
				unset($query_args['title']);
			}
			if(isset($contribution_id) && isset($contribution_type)) {
				$res = Dal::query("INSERT INTO {cc_contributions} (content_id, contribution_id, type, title) VALUES (?, ?, ?, ?)", array(intval($r['cid']), $contribution_id, $contribution_type, $contribution_title));
			}

            if(!isset($query_args['title'])) {
              $query_args['title'] = $_POST["blog_title"];
            }
            if(!isset($query_args['link'])) {
              $query_args['link'] = PA::$url.'/content/cid='.$r['cid'];
            }
            $redirect = $url_parts['scheme'].'://'.$url_parts['host'];
			$redirect .= (isset($url_parts['port']) && $url_parts['port'] != '' && $url_parts['port'] != '80') ? ':'.$url_parts['port'] : '';
			$redirect .= $url_parts['path'].'?'.http_build_query($query_args);
		  }
          break;

        case 'Suggestion':
          $r = Suggestion::save_suggestion($cid, PA::$login_uid, $_POST["blog_title"], $_POST["description"], $track, $terms, -1, $is_active);
          break;
      }

      if($r['cid'] == $cid) {
        $login_required_str = null;
        $content_author_image = uihelper_resize_mk_user_img($user->picture, 80, 80,'alt="'.$user->first_name.'" align="left" style="padding: 0px 12px 12px 0px;"');
        if(PA::is_moderated_content()) {
          $login_required_str = '&login_required=true';
        }
/*
        $network_owner = new User();
        $network_owner->load((int)PA::$network_info->owner_id);
        $network_owner_name = User::map_ids_to_logins(PA::$network_info->owner_id);
        $params['recipient_username'] = $network_owner->login_name;
        $params['recipient_firstname'] = $network_owner->first_name;
        $params['recipient_lastname'] = $network_owner->last_name;
        $params['cid'] = $r['cid'];
        $params['first_name'] = $user->first_name;
        $params['user_id'] = $user->user_id;
        $params['user_image'] = $content_author_image;
        $params['content_title'] = $_POST["blog_title"];
        $params['network_name'] = PA::$network_info->name;
        $_content_url = PA::$url . PA_ROUTE_CONTENT . '/cid='.$r['cid'].$login_required_str;
        $params['content_url'] = "<a href=\"$_content_url\">$_content_url</a>";
        $_content_moderation_url = PA::$url.'/'.FILE_NETWORK_MANAGE_CONTENT;
        $params['content_moderation_url'] = "<a href=\"$_content_moderation_url\">$_content_moderation_url</a>";
        $params['config_site_name'] = PA::$site_name;
        $params['network_owner_name'] = $network_owner_name[PA::$network_info->owner_id];
        auto_email_notification('content_modified', $params);
*/
        $content_obj = Content::load_content((int)$r['cid']);
        PANotify::send("content_modified", PA::$network_info, $user, $content_obj);

        //for rivers of people
        $activity = 'content_modified';
        $activity_extra['info'] = ($user->first_name.' modified blog post');
        $activity_extra['blog_name'] =  $_POST["blog_title"];
        $activity_extra['blog_id'] = $r['cid'];
        $activity_extra['blog_url'] = PA::$url . PA_ROUTE_CONTENT . '/cid='.$r['cid'].$login_required_str;
        $extra = serialize($activity_extra);
        $object = $r['cid'];
        if(!PA::is_moderated_content()) {//Write to activity log only when moderation is off
          Activities::save($user->user_id, $activity, $object,$extra);
        }
      }

      //invalidate cache
      if( PA::$network_info ) {
        $nid = '_network_'.PA::$network_info->network_id;
      } else {
        $nid='';
      }
      //unique name
      $cache_id = 'content_'.$cid.$nid;
      CachedTemplate::invalidate_cache($cache_id);
      if (PA::is_moderated_content()) {
        $error_msg = '&msg_id=1004';
      } else {
        $error_msg = '&msg_id=7027';
      }

      $location = PA::$url . PA_ROUTE_CONTENT . "/cid=$cid".$error_msg;
      $location = (isset($redirect) && $redirect != '') ? $redirect : $location;
      header("location:$location");exit;
    }//.. end of edit

    // If we have come this far it means it is not edit and we have to create post
    //save post normally
    if (isset($_POST['route_to_pa_home']) && $_POST['route_to_pa_home'] == 1) {
      $display_on_homepage = DISPLAY_ON_HOMEPAGE;//its zero
    } else {
      $display_on_homepage = NO_DISPLAY_ON_HOMEPAGE;//This will not show up on homepage - flag has opposite values
    }

	$ccid = -1;
	if (!empty(PA::$config->simple['omit_routing'])) {
		$ccid = (!empty($_REQUEST['ccid'])) ? $_REQUEST['ccid'] : -1;
	}

	switch($type) {
		case 'BlogPost':
		default:
			$post_saved = BlogPost::save_blogpost(0, PA::$login_uid, $_POST["blog_title"], $_POST["description"], NULL, $terms, $ccid, 1, $display_on_homepage);
		    break;

		case 'Contribution':
			$post_saved = Contribution::save_contribution(0, PA::$login_uid, $_POST["blog_title"], $_POST["description"], NULL, $terms, $ccid, 1, $display_on_homepage);
		  if($type == 'Contribution' && $redirect != '') {
            $url_parts = parse_url($redirect);
            parse_str($url_parts['query'], $query_args);

			// save extra information about CC Contributions
			$contribution_id = null;
			$contribution_type = null;
			$contribution_title = null;
			if(isset($query_args['conversation_id'])) {
				$contribution_type = 'conversation';
				$contribution_id = $query_args['conversation_id'];
			}
			if(isset($query_args['issue_id'])) {
				$contribution_type = 'issue';
				$contribution_id = $query_args['issue_id'];
			}
			if(isset($query_args['title'])) {
				$contribution_title = $query_args['title'];
				unset($query_args['title']);
			}
			if(isset($contribution_id) && isset($contribution_type)) {
				$res = Dal::query("INSERT INTO {cc_contributions} (content_id, contribution_id, type, title) VALUES (?, ?, ?, ?)", array(intval($post_saved['cid']), $contribution_id, $contribution_type, $contribution_title));
			}

            if(!isset($query_args['title'])) {
              $query_args['title'] = $_POST["blog_title"];
            }
            if(!isset($query_args['link'])) {
              $query_args['link'] = PA::$url.'/content/cid='.$post_saved['cid'];
            }
            $redirect = $url_parts['scheme'].'://'.$url_parts['host'];
			$redirect .= (isset($url_parts['port']) && $url_parts['port'] != '' && $url_parts['port'] != '80') ? ':'.$url_parts['port'] : '';
			$redirect .= $url_parts['path'].'?'.http_build_query($query_args);
		  }
		    break;

		case 'Suggestion':
			$post_saved = Suggestion::save_suggestion(0, PA::$login_uid, $_POST["blog_title"], $_POST["description"], NULL, $terms, $ccid, 1, $display_on_homepage);
	    	break;
	}

    $permalink_cid = $post_saved['cid'];
    if (PA::is_moderated_content() && PA::$network_info->owner_id != $user->user_id) {
      Network::moderate_network_content(-1, $permalink_cid);// -1 for contents; not a part of any collection
      $error_msg = "&err=".urlencode(MessagesHandler::get_message(1004));
    }

    $login_required_str = null;
    if(PA::is_moderated_content()) {
      $login_required_str = '&login_required=true';
    }
    $content_obj = Content::load_content((int)$permalink_cid);
    PANotify::send("content_posted", PA::$network_info, $user, $content_obj);
    if ($display_on_homepage == DISPLAY_ON_HOMEPAGE) {
      PANotify::send("content_posted_to_comm_blog", PA::$network_info, $user, $content_obj);
    }
    //for rivers of people
    $activity = 'user_post_a_blog';
    $activity_extra['info'] = $user->first_name.'posted a new blog';
    $activity_extra['blog_name'] =  $_POST["blog_title"];
    $activity_extra['blog_id'] = $permalink_cid;
    $activity_extra['blog_url'] = PA::$url . PA_ROUTE_CONTENT . '/cid=' . $permalink_cid . $login_required_str;
    $extra = serialize($activity_extra);
    $object = $permalink_cid;
    if (!PA::is_moderated_content()) {//Write to activity log only when moderation is off
      Activities::save($user->user_id, $activity, $object,$extra);
    }

    if (empty(PA::$config->simple['omit_routing'])) {
			//save post in groups
    	$routed_to_groups = route2groups();
    }

    // save post to outputthis
    route_to_outputthis($_POST["blog_title"], $_POST["description"]);

    //we have saved it in all the locations lets redirect it to various locations
    if (!empty($_GET['ccid'])) {
      $gid = $_GET['ccid'];
      $group = ContentCollection::load_collection((int)$gid, PA::$login_uid);
      $is_member = Group::get_user_type((int)PA::$login_uid, (int)$gid);
      if ( $is_member == NOT_A_MEMBER) {
        $msg = "&msg_id=7028";
      } else {
      if(($group->reg_type == REG_MODERATED) || (PA::$extra['network_content_moderation'] == NET_YES)) {
          $msg = "&msg_id=1004";
        } else {
          $msg = "&msg_id=7027";
        }
      }
      // it means user is coming from group's page then redirect it to group
      //load group to see if group is if it is moderated
      $location = PA::$url . PA_ROUTE_GROUP . "/gid=".$_REQUEST['ccid'].$msg;
      $location = (isset($redirect) && $redirect != '') ? $redirect : $location;
      header("location:$location");exit;
    } else {
      //just redirect it to permalink page
      if (PA::is_moderated_content()) {
        $error_msg = "&msg_id=1004";
      } else {
        $error_msg = "&msg_id=7027";
      }
      // header("location:".PA::$url . PA_ROUTE_CONTENT . "/cid=".$permalink_cid.$error_msg);exit;
      $location = PA::$url .PA_ROUTE_USER_PRIVATE."?cid=".$permalink_cid.$error_msg;
      $location = (isset($redirect) && $redirect != '') ? $redirect : $location;
      header("location:$location");exit;
    }
  }
   else {//..end of !$error
    $post_err = 'Post could not be saved due to following errors:<br>'.$post_err;
  }
}//$_POST

?>