PageRenderTime 28ms CodeModel.GetById 19ms RepoModel.GetById 0ms app.codeStats 0ms

/source/module/forum/forum_misc.php

https://github.com/kuaileshike/upload
PHP | 1663 lines | 1448 code | 209 blank | 6 comment | 517 complexity | e2f56ef2675063b11a0c45db4d694329 MD5 | raw file

Large files files are truncated, but you can click here to view the full file

    

  1. <?php
    2. 

  2. 

  3. /**
    4. 

  4.  *      [Discuz!] (C)2001-2099 Comsenz Inc.
    5. 

  5.  *      This is NOT a freeware, use is subject to license terms
    6. 

  6.  *
    7. 

  7.  *      $Id: forum_misc.php 31609 2012-09-13 09:09:43Z liulanbo $
    8. 

  8.  */
    9. 

  9. 

  10. if(!defined('IN_DISCUZ')) {
    11. 

  11. 	exit('Access Denied');
    12. 

  12. }
    13. 

  13. define('NOROBOT', TRUE);
    14. 

  14. 

  15. require_once libfile('function/post');
    16. 

  16. 

  17. $feed = array();
    18. 

  18. if($_GET['action'] == 'paysucceed') {
    19. 

  19. 	$orderid = trim($_GET['orderid']);
    20. 

  20. 	$url = !empty($orderid) ? 'forum.php?mod=trade&orderid='.$orderid : 'home.php?mod=spacecp&ac=credit';
    21. 

  21. 	showmessage('payonline_succeed', $url);
    22. 

  22. 

  23. } elseif($_GET['action'] == 'nav') {
    24. 

  24. 

  25. 	require_once libfile('misc/forumselect', 'include');
    26. 

  26. 	exit;
    27. 

  27. 

  28. } elseif($_GET['action'] == 'attachcredit') {
    29. 

  29. 	if($_GET['formhash'] != FORMHASH) {
    30. 

  30. 		showmessage('undefined_action', NULL);
    31. 

  31. 	}
    32. 

  32. 

  33. 	$aid = intval($_GET['aid']);
    34. 

  34. 

  35. 	$attach = C::t('forum_attachment_n')->fetch('aid:'.$aid, $aid);
    36. 

  36. 	$thread = C::t('forum_thread')->fetch_by_tid_displayorder($attach['tid'], 0);
    37. 

  37. 

  38. 	checklowerlimit('getattach', 0, 1, $thread['fid']);
    39. 

  39. 	$getattachcredits = updatecreditbyaction('getattach', $_G['uid'], array(), '', 1, 1, $thread['fid']);
    40. 

  40. 	$_G['policymsg'] = $p = '';
    41. 

  41. 	if($getattachcredits['updatecredit']) {
    42. 

  42. 		if($getattachcredits['updatecredit']) for($i = 1;$i <= 8;$i++) {
    43. 

  43. 			if($policy = $getattachcredits['extcredits'.$i]) {
    44. 

  44. 				$_G['policymsg'] .= $p.($_G['setting']['extcredits'][$i]['img'] ? $_G['setting']['extcredits'][$i]['img'].' ' : '').$_G['setting']['extcredits'][$i]['title'].' '.$policy.' '.$_G['setting']['extcredits'][$i]['unit'];
    45. 

  45. 				$p = ', ';
    46. 

  46. 			}
    47. 

  47. 		}
    48. 

  48. 	}
    49. 

  49. 

  50. 	$ck = substr(md5($aid.TIMESTAMP.md5($_G['config']['security']['authkey'])), 0, 8);
    51. 

  51. 	$aidencode = aidencode($aid, 0, $attach['tid']);
    52. 

  52. 	showmessage('attachment_credit', "forum.php?mod=attachment&aid=$aidencode&ck=$ck", array('policymsg' => $_G['policymsg'], 'filename' => $attach['filename']), array('redirectmsg' => 1, 'login' => 1));
    53. 

  53. 

  54. } elseif($_GET['action'] == 'attachpay') {
    55. 

  55. 	$aid = intval($_GET['aid']);
    56. 

  56. 	if(!$aid) {
    57. 

  57. 		showmessage('parameters_error');
    58. 

  58. 	} elseif(!isset($_G['setting']['extcredits'][$_G['setting']['creditstransextra'][1]])) {
    59. 

  59. 		showmessage('credits_transaction_disabled');
    60. 

  60. 	} elseif(!$_G['uid']) {
    61. 

  61. 		showmessage('group_nopermission', NULL, array('grouptitle' => $_G['group']['grouptitle']), array('login' => 1));
    62. 

  62. 	} else {
    63. 

  63. 		$attachtable = !empty($_GET['tid']) ? 'tid:'.dintval($_GET['tid']) : 'aid:'.$aid;
    64. 

  64. 		$attach = C::t('forum_attachment_n')->fetch($attachtable, $aid);
    65. 

  65. 		$attachmember = getuserbyuid($attach['uid']);
    66. 

  66. 		$attach['author'] = $attachmember['username'];
    67. 

  67. 		if($attach['price'] <= 0) {
    68. 

  68. 			showmessage('undefined_action');
    69. 

  69. 		}
    70. 

  70. 	}
    71. 

  71. 

  72. 	if($attach['readperm'] && $attach['readperm'] > $_G['group']['readaccess']) {
    73. 

  73. 		showmessage('attachment_forum_nopermission', NULL, array(), array('login' => 1));
    74. 

  74. 	}
    75. 

  75. 

  76. 	$balance = getuserprofile('extcredits'.$_G['setting']['creditstransextra'][1]);
    77. 

  77. 	$status = $balance < $attach['price'] ? 1 : 0;
    78. 

  78. 

  79. 	if($_G['adminid'] == 3) {
    80. 

  80. 		$fid = C::t('forum_thread')->fetch($attach['tid']);
    81. 

  81. 		$fid = $fid['fid'];
    82. 

  82. 		$ismoderator = C::t('forum_moderator')->fetch_uid_by_fid_uid($fid, $_G['uid']);
    83. 

  83. 	} elseif(in_array($_G['adminid'], array(1, 2))) {
    84. 

  84. 		$ismoderator = 1;
    85. 

  85. 	} else {
    86. 

  86. 		$ismoderator = 0;
    87. 

  87. 	}
    88. 

  88. 	$exemptvalue = $ismoderator ? 64 : 8;
    89. 

  89. 	if($_G['uid'] == $attach['uid'] || $_G['group']['exempt'] & $exemptvalue) {
    90. 

  90. 		$status = 2;
    91. 

  91. 	} else {
    92. 

  92. 		$payrequired = $_G['uid'] ? !C::t('common_credit_log')->count_by_uid_operation_relatedid($_G['uid'], 'BAC', $attach['aid']) : 1;
    93. 

  93. 		$status = $payrequired ? $status : 2;
    94. 

  94. 	}
    95. 

  95. 	$balance = $status != 2 ? $balance - $attach['price'] : $balance;
    96. 

  96. 

  97. 	$sidauth = rawurlencode(authcode($_G['sid'], 'ENCODE', $_G['authkey']));
    98. 

  98. 

  99. 	$aidencode = aidencode($aid, 0, $attach['tid']);
    100. 

  100. 

  101. 	if(C::t('common_credit_log')->count_by_uid_operation_relatedid($_G['uid'], 'BAC', $aid)) {
    102. 

  102. 		showmessage('attachment_yetpay', "forum.php?mod=attachment&aid=$aidencode", array(), array('redirectmsg' => 1));
    103. 

  103. 	}
    104. 

  104. 

  105. 	$attach['netprice'] = $status != 2 ? round($attach['price'] * (1 - $_G['setting']['creditstax'])) : 0;
    106. 

  106. 

  107. 	if(!submitcheck('paysubmit')) {
    108. 

  108. 		include template('forum/attachpay');
    109. 

  109. 	} else {
    110. 

  110. 		if(!empty($_GET['buyall'])) {
    111. 

  111. 			$aids = $prices = array();
    112. 

  112. 			$tprice = 0;
    113. 

  113. 			foreach(C::t('forum_attachment_n')->fetch_all_by_id('aid:'.$aid, 'pid', $attach['pid'], '', false, true) as $tmp) {
    114. 

  114. 				$aids[$tmp['aid']] = $tmp['aid'];
    115. 

  115. 				$prices[$tmp['aid']] = $status != 2 ? array($tmp['price'], round($tmp['price'] * (1 - $_G['setting']['creditstax']))) : array(0, 0);
    116. 

  116. 			}
    117. 

  117. 			if($aids) {
    118. 

  118. 				foreach(C::t('common_credit_log')->fetch_all_by_uid_operation_relatedid($_G['uid'], 'BAC', $aids) as $tmp) {
    119. 

  119. 					unset($aids[$tmp['relatedid']]);
    120. 

  120. 				}
    121. 

  121. 			}
    122. 

  122. 			foreach($aids as $aid) {
    123. 

  123. 				$tprice += $prices[$aid][0];
    124. 

  124. 			}
    125. 

  125. 			$status = getuserprofile('extcredits'.$_G['setting']['creditstransextra'][1]) < $tprice ? 1 : 0;
    126. 

  126. 		} else {
    127. 

  127. 			$aids = array($aid);
    128. 

  128. 			$prices[$aid] = $status != 2 ? array($attach['price'], $attach['netprice']) : array(0, 0);
    129. 

  129. 		}
    130. 

  130. 

  131. 		if($status == 1) {
    132. 

  132. 			showmessage('credits_balance_insufficient', '', array('title' => $_G['setting']['extcredits'][$_G['setting']['creditstransextra'][1]]['title'], 'minbalance' => $attach['price']));
    133. 

  133. 		}
    134. 

  134. 		foreach($aids as $aid) {
    135. 

  135. 			$updateauthor = 1;
    136. 

  136. 			$authorEarn = $prices[$aid][1];
    137. 

  137. 			if($_G['setting']['maxincperthread'] > 0) {
    138. 

  138. 				$extcredit = 'extcredits'.$_G['setting']['creditstransextra'][1];
    139. 

  139. 				$alog = C::t('common_credit_log')->count_credit_by_uid_operation_relatedid($attach['uid'], 'SAC', $aid, $_G['setting']['creditstransextra'][1]);
    140. 

  140. 				if($alog >= $_G['setting']['maxincperthread']) {
    141. 

  141. 					$updateauthor = 0;
    142. 

  142. 				} else {
    143. 

  143. 					$authorEarn = min($_G['setting']['maxincperthread'] - $alog['credit'], $prices[$aid][1]);
    144. 

  144. 				}
    145. 

  145. 			}
    146. 

  146. 			if($updateauthor) {
    147. 

  147. 				updatemembercount($attach['uid'], array($_G['setting']['creditstransextra'][1] => $authorEarn), 1, 'SAC', $aid);
    148. 

  148. 			}
    149. 

  149. 			updatemembercount($_G['uid'], array($_G['setting']['creditstransextra'][1] => -$prices[$aid][0]), 1, 'BAC', $aid);
    150. 

  150. 

  151. 			$aidencode = aidencode($aid, 0, $_GET['tid']);
    152. 

  152. 		}
    153. 

  153. 

  154. 		if(count($aids) > 1) {
    155. 

  155. 			showmessage('attachment_buyall', 'forum.php?mod=redirect&goto=findpost&ptid='.$attach['tid'].'&pid='.$attach['pid']);
    156. 

  156. 		} else {
    157. 

  157. 			$_G['forum_attach_filename'] = $attach['filename'];
    158. 

  158. 			showmessage('attachment_buy', "forum.php?mod=attachment&aid=$aidencode", array('filename' => $_G['forum_attach_filename']), array('redirectmsg' => 1));
    159. 

  159. 		}
    160. 

  160. 	}
    161. 

  161. 

  162. } elseif($_GET['action'] == 'viewattachpayments') {
    163. 

  163. 

  164. 	$aid = intval($_GET['aid']);
    165. 

  165. 	$extcreditname = 'extcredits'.$_G['setting']['creditstransextra'][1];
    166. 

  166. 

  167. 	$loglist = array();
    168. 

  168. 	$logs = C::t('common_credit_log')->fetch_all_by_uid_operation_relatedid(0, 'BAC', $aid);
    169. 

  169. 	$luids = array();
    170. 

  170. 	foreach($logs as $log) {
    171. 

  171. 		$luids[$log['uid']] = $log['uid'];
    172. 

  172. 	}
    173. 

  173. 	$members = C::t('common_member')->fetch_all($luids);
    174. 

  174. 	foreach($logs as $log) {
    175. 

  175. 		$log['username'] = $members[$log['uid']]['username'];
    176. 

  176. 		$log['dateline'] = dgmdate($log['dateline'], 'u');
    177. 

  177. 		$log[$extcreditname] = abs($log[$extcreditname]);
    178. 

  178. 		$loglist[] = $log;
    179. 

  179. 	}
    180. 

  180. 	include template('forum/attachpay_view');
    181. 

  181. 

  182. } elseif($_GET['action'] == 'getonlines') {
    183. 

  183. 

  184. 	$num = C::app()->session->count();
    185. 

  185. 	showmessage($num);
    186. 

  186. 

  187. } elseif($_GET['action'] == 'upload') {
    188. 

  188. 

  189. 	$type = !empty($_GET['type']) && in_array($_GET['type'], array('image', 'file')) ? $_GET['type'] : 'image';
    190. 

  190. 	$attachexts = $imgexts = '';
    191. 

  191. 	$_G['group']['allowpostattach'] = $_G['forum']['allowpostattach'] != -1 && ($_G['forum']['allowpostattach'] == 1 || (!$_G['forum']['postattachperm'] && $_G['group']['allowpostattach']) || ($_G['forum']['postattachperm'] && forumperm($_G['forum']['postattachperm'])));
    192. 

  192. 	$_G['group']['allowpostimage'] = $_G['forum']['allowpostimage'] != -1 && ($_G['forum']['allowpostimage'] == 1 || (!$_G['forum']['postimageperm'] && $_G['group']['allowpostimage']) || ($_G['forum']['postimageperm'] && forumperm($_G['forum']['postimageperm'])));
    193. 

  193. 	$_G['group']['attachextensions'] = $_G['forum']['attachextensions'] ? $_G['forum']['attachextensions'] : $_G['group']['attachextensions'];
    194. 

  194. 	if($_G['group']['attachextensions']) {
    195. 

  195. 		$imgexts = explode(',', str_replace(' ', '', $_G['group']['attachextensions']));
    196. 

  196. 		$imgexts = array_intersect(array('jpg','jpeg','gif','png','bmp'), $imgexts);
    197. 

  197. 		$imgexts = implode(', ', $imgexts);
    198. 

  198. 	} else {
    199. 

  199. 		$imgexts = 'jpg, jpeg, gif, png, bmp';
    200. 

  200. 	}
    201. 

  201. 	if($type == 'image' && (!$_G['group']['allowpostimage'] || !$imgexts)) {
    202. 

  202. 		showmessage('no_privilege_postimage');
    203. 

  203. 	}
    204. 

  204. 	if($type == 'file' && !$_G['group']['allowpostattach']) {
    205. 

  205. 		showmessage('no_privilege_postattach');
    206. 

  206. 	}
    207. 

  207. 	include template('forum/upload');
    208. 

  208. 

  209. } elseif($_GET['action'] == 'comment') {
    210. 

  210. 

  211. 	if(!$_G['setting']['commentnumber']) {
    212. 

  212. 		showmessage('postcomment_closed');
    213. 

  213. 	}
    214. 

  214. 	$thread = C::t('forum_thread')->fetch($_GET['tid']);
    215. 

  215. 	if($thread['closed'] && !$_G['forum']['ismoderator']) {
    216. 

  216. 		showmessage('thread_closed');
    217. 

  217. 	}
    218. 

  218. 	$post = C::t('forum_post')->fetch('tid:'.$_G['tid'], $_GET['pid']);
    219. 

  219. 	if($_G['group']['allowcommentitem'] && !empty($_G['uid']) && $post['authorid'] != $_G['uid']) {
    220. 

  220. 		$thread = C::t('forum_thread')->fetch($post['tid']);
    221. 

  221. 		$itemi = $thread['special'];
    222. 

  222. 		if($thread['special'] > 0) {
    223. 

  223. 			if($thread['special'] == 2){
    224. 

  224. 				$thread['special'] = $post['first'] || C::t('forum_trade')->check_goods($post['pid']) ? 2 : 0;
    225. 

  225. 			} elseif($thread['special'] == 127) {
    226. 

  226. 				$thread['special'] = $_GET['special'];
    227. 

  227. 			} else {
    228. 

  228. 				$thread['special'] = $post['first'] ? $thread['special'] : 0;
    229. 

  229. 			}
    230. 

  230. 		}
    231. 

  231. 		$_G['setting']['commentitem'] = $_G['setting']['commentitem'][$thread['special']];
    232. 

  232. 		if($thread['special'] == 0) {
    233. 

  233. 			loadcache('forums');
    234. 

  234. 			if($_G['cache']['forums'][$post['fid']]['commentitem']) {
    235. 

  235. 				$_G['setting']['commentitem'] = $_G['cache']['forums'][$post['fid']]['commentitem'];
    236. 

  236. 			}
    237. 

  237. 		}
    238. 

  238. 		if($_G['setting']['commentitem'] && !C::t('forum_postcomment')->count_by_pid($_GET['pid'], $_G['uid'], 1)) {
    239. 

  239. 			$commentitem = explode("\n", $_G['setting']['commentitem']);
    240. 

  240. 		}
    241. 

  241. 	}
    242. 

  242. 	if(!$post || !($_G['setting']['commentpostself'] || $post['authorid'] != $_G['uid']) || !(($post['first'] && $_G['setting']['commentfirstpost'] && in_array($_G['group']['allowcommentpost'], array(1, 3)) || (!$post['first'] && in_array($_G['group']['allowcommentpost'], array(2, 3)))))) {
    243. 

  243. 		showmessage('postcomment_error');
    244. 

  244. 	}
    245. 

  245. 	$extra = !empty($_GET['extra']) ? rawurlencode($_GET['extra']) : '';
    246. 

  246. 	$seccodecheck = ($_G['setting']['seccodestatus'] & 4) && (!$_G['setting']['seccodedata']['minposts'] || getuserprofile('posts') < $_G['setting']['seccodedata']['minposts']);
    247. 

  247. 	$secqaacheck = $_G['setting']['secqaa']['status'] & 2 && (!$_G['setting']['secqaa']['minposts'] || getuserprofile('posts') < $_G['setting']['secqaa']['minposts']);
    248. 

  248. 

  249. 	include template('forum/comment');
    250. 

  250. 

  251. } elseif($_GET['action'] == 'commentmore') {
    252. 

  252. 

  253. 	if(!$_G['setting']['commentnumber'] || !$_G['inajax']) {
    254. 

  254. 		showmessage('postcomment_closed');
    255. 

  255. 	}
    256. 

  256. 	require_once libfile('function/discuzcode');
    257. 

  257. 	$commentlimit = intval($_G['setting']['commentnumber']);
    258. 

  258. 	$page = max(1, $_G['page']);
    259. 

  259. 	$start_limit = ($page - 1) * $commentlimit;
    260. 

  260. 	$comments = array();
    261. 

  261. 	foreach(C::t('forum_postcomment')->fetch_all_by_search(null, $_GET['pid'], null, null, null, null, null, $start_limit, $commentlimit) as $comment) {
    262. 

  262. 		$comment['avatar'] = avatar($comment['authorid'], 'small');
    263. 

  263. 		$comment['dateline'] = dgmdate($comment['dateline'], 'u');
    264. 

  264. 		$comment['comment'] = str_replace(array('[b]', '[/b]', '[/color]'), array('<b>', '</b>', '</font>'), preg_replace("/\[color=([#\w]+?)\]/i", "<font color=\"\\1\">", $comment['comment']));
    265. 

  265. 		$comments[] = $comment;
    266. 

  266. 	}
    267. 

  267. 	$totalcomment = C::t('forum_postcomment')->fetch_standpoint_by_pid($_GET['pid']);
    268. 

  268. 	$totalcomment = $totalcomment['comment'];
    269. 

  269. 	$totalcomment = preg_replace('/<i>([\.\d]+)<\/i>/e', "'<i class=\"cmstarv\" style=\"background-position:20px -'.(intval(\\1) * 16).'px\">'.sprintf('%1.1f', \\1).'</i>'.(\$cic++ % 2 ? '<br />' : '');", $totalcomment);
    270. 

  270. 	$count = C::t('forum_postcomment')->count_by_search(null, $_GET['pid']);
    271. 

  271. 	$multi = multi($count, $commentlimit, $page, "forum.php?mod=misc&action=commentmore&tid=$_G[tid]&pid=$_GET[pid]");
    272. 

  272. 	include template('forum/comment_more');
    273. 

  273. 

  274. } elseif($_GET['action'] == 'postappend') {
    275. 

  275. 

  276. 	if(!$_G['setting']['postappend']) {
    277. 

  277. 		showmessage('postappend_not_open');
    278. 

  278. 	}
    279. 

  279. 

  280. 	$post = C::t('forum_post')->fetch('tid:'.$_G['tid'], $_GET['pid']);
    281. 

  281. 	if($post['authorid'] != $_G['uid']) {
    282. 

  282. 		showmessage('postappend_only_yourself');
    283. 

  283. 	}
    284. 

  284. 	if(submitcheck('postappendsubmit')) {
    285. 

  285. 		$message = censor($_GET['postappendmessage']);
    286. 

  286. 		$sppos = 0;
    287. 

  287. 		if($post['first'] && strexists($post['message'], chr(0).chr(0).chr(0))) {
    288. 

  288. 			$sppos = strpos($post['message'], chr(0).chr(0).chr(0));
    289. 

  289. 			$specialextra = substr($post['message'], $sppos + 3);
    290. 

  290. 			$post['message'] = substr($post['message'], 0, $sppos);
    291. 

  291. 		}
    292. 

  292. 		$message = $post['message'] . "\n\n[b]".lang('forum/misc', 'postappend_content')." (".dgmdate(TIMESTAMP)."):[/b]\n$message";
    293. 

  293. 		if($sppos) {
    294. 

  294. 			$message .= chr(0).chr(0).chr(0).$specialextra;
    295. 

  295. 		}
    296. 

  296. 		require_once libfile('function/post');
    297. 

  297. 		$bbcodeoff = checkbbcodes($message, 0);
    298. 

  298. 		C::t('forum_post')->update('tid:'.$_G['tid'], $_GET['pid'], array(
    299. 

  299. 			'message' => $message,
    300. 

  300. 			'bbcodeoff' => $bbcodeoff,
    301. 

  301. 		));
    302. 

  302. 		showmessage('postappend_add_succeed', "forum.php?mod=viewthread&tid=$post[tid]&pid=$post[pid]&page=$_GET[page]&extra=$_GET[extra]#pid$post[pid]", array('tid' => $post['tid'], 'pid' => $post['pid']));
    303. 

  303. 	} else {
    304. 

  304. 		include template('forum/postappend');
    305. 

  305. 	}
    306. 

  306. 

  307. } elseif($_GET['action'] == 'pubsave') {
    308. 

  308. 

  309. 	$return = threadpubsave($_G['tid']);
    310. 

  310. 	if($return > 0) {
    311. 

  311. 		showmessage('post_newthread_succeed', dreferer(), array('coverimg' => ''));
    312. 

  312. 	} elseif($return == -1) {
    313. 

  313. 		showmessage('post_newthread_mod_succeed', dreferer(), array('coverimg' => ''));
    314. 

  314. 	} elseif($return == -2) {
    315. 

  315. 		showmessage('post_reply_mod_succeed', dreferer());
    316. 

  316. 	} else {
    317. 

  317. 		showmessage('thread_nonexistence');
    318. 

  318. 	}
    319. 

  319. 

  320. } elseif($_GET['action'] == 'loadsave') {
    321. 

  321. 

  322. 	$message = '&nbsp;';
    323. 

  323. 	$savepost = C::t('forum_post')->fetch(0, $_GET['pid']);
    324. 

  324. 	if($savepost) {
    325. 

  325. 		$message = $savepost['message'];
    326. 

  326. 		if($_GET['type']) {
    327. 

  327. 			require_once libfile('function/discuzcode');
    328. 

  328. 			$message = discuzcode($message, $savepost['smileyoff'], $savepost['bbcodeoff'], $savepost['htmlon']);
    329. 

  329. 		}
    330. 

  330. 		$message = $message ? $message : '&nbsp;';
    331. 

  331. 	}
    332. 

  332. 	include template('common/header_ajax');
    333. 

  333. 	echo $message;
    334. 

  334. 	include template('common/footer_ajax');
    335. 

  335. 	exit;
    336. 

  336. 

  337. } elseif($_GET['action'] == 'replynotice') {
    338. 

  338. 	$tid = intval($_GET['tid']);
    339. 

  339. 	$status = $_GET['op'] == 'ignore' ? 0 : 1;
    340. 

  340. 	if(!empty($tid)) {
    341. 

  341. 		$thread = C::t('forum_thread')->fetch_by_tid_displayorder($tid, 0);
    342. 

  342. 		if($thread['authorid'] == $_G['uid']) {
    343. 

  343. 			$thread['status'] = setstatus(6, $status, $thread['status']);
    344. 

  344. 			C::t('forum_thread')->update($tid, array('status'=>$thread['status']), true);
    345. 

  345. 			showmessage('replynotice_success_'.$status);
    346. 

  346. 		}
    347. 

  347. 	}
    348. 

  348. 	showmessage('replynotice_error', 'forum.php?mod=viewthread&tid='.$tid);
    349. 

  349. 

  350. } elseif($_GET['action'] == 'removeindexheats') {
    351. 

  351. 

  352. 	if($_G['adminid'] != 1) {
    353. 

  353. 		showmessage('no_privilege_indexheats');
    354. 

  354. 	}
    355. 

  355. 	C::t('forum_thread')->update($_G['tid'], array('heats'=>0));
    356. 

  356. 	require_once libfile('function/cache');
    357. 

  357. 	updatecache('heats');
    358. 

  358. 	dheader('Location: '.dreferer());
    359. 

  359. 

  360. } else {
    361. 

  361. 

  362. 	if(empty($_G['forum']['allowview'])) {
    363. 

  363. 		if(!$_G['forum']['viewperm'] && !$_G['group']['readaccess']) {
    364. 

  364. 			showmessage('group_nopermission', NULL, array('grouptitle' => $_G['group']['grouptitle']), array('login' => 1));
    365. 

  365. 		} elseif($_G['forum']['viewperm'] && !forumperm($_G['forum']['viewperm'])) {
    366. 

  366. 			showmessage('forum_nopermission', NULL, array($_G['group']['grouptitle']), array('login' => 1));
    367. 

  367. 		}
    368. 

  368. 	}
    369. 

  369. 

  370. 	$thread = C::t('forum_thread')->fetch($_G['tid']);
    371. 

  371. 	if(!($thread['displayorder']>=0 || $thread['displayorder']==-4 && $thread['authorid']==$_G['uid'])) {
    372. 

  372. 		$thread = array();
    373. 

  373. 	}
    374. 

  374. 	if($thread['readperm'] && $thread['readperm'] > $_G['group']['readaccess'] && !$_G['forum']['ismoderator'] && $thread['authorid'] != $_G['uid']) {
    375. 

  375. 		showmessage('thread_nopermission', NULL, array('readperm' => $thread['readperm']), array('login' => 1));
    376. 

  376. 	}
    377. 

  377. 

  378. 	if($_G['forum']['password'] && $_G['forum']['password'] != $_G['cookie']['fidpw'.$_G['fid']]) {
    379. 

  379. 		showmessage('forum_passwd', "forum.php?mod=forumdisplay&fid=$_G[fid]");
    380. 

  380. 	}
    381. 

  381. 

  382. 

  383. 	if(!$thread) {
    384. 

  384. 		showmessage('thread_nonexistence');
    385. 

  385. 	}
    386. 

  386. 

  387. 	if($_G['forum']['type'] == 'forum') {
    388. 

  388. 		$navigation = '<a href="forum.php">'.$_G['setting']['navs'][2]['navname']."</a> <em>&rsaquo;</em> <a href=\"forum.php?mod=forumdisplay&fid=$_G[fid]\">".$_G['forum']['name']."</a> <em>&rsaquo;</em> <a href=\"forum.php?mod=viewthread&tid=$_G[tid]\">$thread[subject]</a> ";
    389. 

  389. 		$navtitle = strip_tags($_G['forum']['name']).' - '.$thread['subject'];
    390. 

  390. 	} elseif($_G['forum']['type'] == 'sub') {
    391. 

  391. 		$fup = C::t('forum_forum')->fetch($_G['forum']['fup']);
    392. 

  392. 		$navigation = '<a href="forum.php">'.$_G['setting']['navs'][2]['navname']."</a> <em>&rsaquo;</em> <a href=\"forum.php?mod=forumdisplay&fid=$fup[fid]\">$fup[name]</a> &raquo; <a href=\"forum.php?mod=forumdisplay&fid=$_G[fid]\">".$_G['forum']['name']."</a> <em>&rsaquo;</em> <a href=\"forum.php?mod=viewthread&tid=$_G[tid]\">$thread[subject]</a> ";
    393. 

  393. 		$navtitle = strip_tags($fup['name']).' - '.strip_tags($_G['forum']['name']).' - '.$thread['subject'];
    394. 

  394. 	}
    395. 

  395. 

  396. }
    397. 

  397. 

  398. if($_GET['action'] == 'votepoll' && submitcheck('pollsubmit', 1)) {
    399. 

  399. 

  400. 	if(!$_G['group']['allowvote']) {
    401. 

  401. 		showmessage('group_nopermission', NULL, array('grouptitle' => $_G['group']['grouptitle']), array('login' => 1));
    402. 

  402. 	} elseif(!empty($thread['closed'])) {
    403. 

  403. 		showmessage('thread_poll_closed', NULL, array(), array('login' => 1));
    404. 

  404. 	} elseif(empty($_GET['pollanswers'])) {
    405. 

  405. 		showmessage('thread_poll_invalid', NULL, array(), array('login' => 1));
    406. 

  406. 	}
    407. 

  407. 

  408. 	$pollarray = C::t('forum_poll')->fetch($_G['tid']);
    409. 

  409. 	$overt = $pollarray['overt'];
    410. 

  410. 	if(!$pollarray) {
    411. 

  411. 		showmessage('poll_not_found');
    412. 

  412. 	} elseif($pollarray['expiration'] && $pollarray['expiration'] < TIMESTAMP) {
    413. 

  413. 		showmessage('poll_overdue', NULL, array(), array('login' => 1));
    414. 

  414. 	} elseif($pollarray['maxchoices'] && $pollarray['maxchoices'] < count($_GET['pollanswers'])) {
    415. 

  415. 		showmessage('poll_choose_most', NULL, array('maxchoices' => $pollarray['maxchoices']), array('login' => 1));
    416. 

  416. 	}
    417. 

  417. 

  418. 	$voterids = $_G['uid'] ? $_G['uid'] : $_G['clientip'];
    419. 

  419. 

  420. 	$polloptionid = array();
    421. 

  421. 	$query = C::t('forum_polloption')->fetch_all_by_tid($_G['tid']);
    422. 

  422. 	foreach($query as $pollarray) {
    423. 

  423. 		if(strexists("\t".$pollarray['voterids']."\t", "\t".$voterids."\t")) {
    424. 

  424. 			showmessage('thread_poll_voted', NULL, array(), array('login' => 1));
    425. 

  425. 		}
    426. 

  426. 		$polloptionid[] = $pollarray['polloptionid'];
    427. 

  427. 	}
    428. 

  428. 

  429. 	$polloptionids = '';
    430. 

  430. 	foreach($_GET['pollanswers'] as $key => $id) {
    431. 

  431. 		if(!in_array($id, $polloptionid)) {
    432. 

  432. 			showmessage('parameters_error');
    433. 

  433. 		}
    434. 

  434. 		unset($polloptionid[$key]);
    435. 

  435. 		$polloptionids[] = $id;
    436. 

  436. 	}
    437. 

  437. 

  438. 	C::t('forum_polloption')->update_vote($polloptionids, $voterids."\t", 1);
    439. 

  439. 	C::t('forum_thread')->update($_G['tid'], array('lastpost'=>$_G['timestamp']), true);
    440. 

  440. 	C::t('forum_poll')->update_vote($_G['tid']);
    441. 

  441. 	C::t('forum_pollvoter')->insert(array(
    442. 

  442. 		'tid' => $_G['tid'],
    443. 

  443. 		'uid' => $_G['uid'],
    444. 

  444. 		'username' => $_G['username'],
    445. 

  445. 		'options' => implode("\t", $_GET['pollanswers']),
    446. 

  446. 		'dateline' => $_G['timestamp'],
    447. 

  447. 		));
    448. 

  448. 	updatecreditbyaction('joinpoll');
    449. 

  449. 

  450. 	$space = array();
    451. 

  451. 	space_merge($space, 'field_home');
    452. 

  452. 

  453. 	if($overt && !empty($space['privacy']['feed']['newreply'])) {
    454. 

  454. 		$feed['icon'] = 'poll';
    455. 

  455. 		$feed['title_template'] = 'feed_thread_votepoll_title';
    456. 

  456. 		$feed['title_data'] = array(
    457. 

  457. 			'subject' => "<a href=\"forum.php?mod=viewthread&tid=$_G[tid]\">$thread[subject]</a>",
    458. 

  458. 			'author' => "<a href=\"home.php?mod=space&uid=$thread[authorid]\">$thread[author]</a>",
    459. 

  459. 			'hash_data' => "tid{$_G[tid]}"
    460. 

  460. 		);
    461. 

  461. 		$feed['id'] = $_G['tid'];
    462. 

  462. 		$feed['idtype'] = 'tid';
    463. 

  463. 		postfeed($feed);
    464. 

  464. 	}
    465. 

  465. 

  466. 	if(!empty($_G['inajax'])) {
    467. 

  467. 		showmessage('thread_poll_succeed', "forum.php?mod=viewthread&tid=$_G[tid]".($_GET['from'] ? '&from='.$_GET['from'] : ''), array(), array('location' => true));
    468. 

  468. 	} else {
    469. 

  469. 		showmessage('thread_poll_succeed', "forum.php?mod=viewthread&tid=$_G[tid]".($_GET['from'] ? '&from='.$_GET['from'] : ''));
    470. 

  470. 	}
    471. 

  471. 

  472. } elseif($_GET['action'] == 'viewvote') {
    473. 

  473. 	if($_G[forum_thread][special] != 1) {
    474. 

  474. 		showmessage('thread_poll_none');
    475. 

  475. 	}
    476. 

  476. 	require_once libfile('function/post');
    477. 

  477. 	$polloptionid = is_numeric($_GET['polloptionid']) ? $_GET['polloptionid'] : '';
    478. 

  478. 

  479. 	$page = intval($_GET['page']) ? intval($_GET['page']) : 1;
    480. 

  480. 	$perpage = 100;
    481. 

  481. 	$pollinfo = C::t('forum_poll')->fetch($_G['tid']);
    482. 

  482. 	$overt = $pollinfo['overt'];
    483. 

  483. 

  484. 	$polloptions = array();
    485. 

  485. 	$query = C::t('forum_polloption')->fetch_all_by_tid($_G['tid']);
    486. 

  486. 	foreach($query as $options) {
    487. 

  487. 		if(empty($polloptionid)) {
    488. 

  488. 			$polloptionid = $options['polloptionid'];
    489. 

  489. 		}
    490. 

  490. 		$options['polloption'] = preg_replace("/\[url=(https?){1}:\/\/([^\[\"']+?)\](.+?)\[\/url\]/i",
    491. 

  491. 			"<a href=\"\\1://\\2\" target=\"_blank\">\\3</a>", $options['polloption']);
    492. 

  492. 		$polloptions[] = $options;
    493. 

  493. 	}
    494. 

  494. 

  495. 	$arrvoterids = array();
    496. 

  496. 	if($overt || $_G['adminid'] == 1 || $thread['authorid'] == $_G['uid']) {
    497. 

  497. 		$polloptioninfo = C::t('forum_polloption')->fetch($polloptionid);
    498. 

  498. 		$voterids = $polloptioninfo['voterids'];
    499. 

  499. 		$arrvoterids = explode("\t", trim($voterids));
    500. 

  500. 	} else {
    501. 

  501. 		showmessage('thread_poll_nopermission');
    502. 

  502. 	}
    503. 

  503. 

  504. 	if(!empty($arrvoterids)) {
    505. 

  505. 		$count = count($arrvoterids);
    506. 

  506. 		$multi = $perpage * ($page - 1);
    507. 

  507. 		$multipage = multi($count, $perpage, $page, "forum.php?mod=misc&action=viewvote&tid=$_G[tid]&polloptionid=$polloptionid".( $_GET[handlekey] ? "&handlekey=".$_GET[handlekey] : '' ));
    508. 

  508. 		$arrvoterids = array_slice($arrvoterids, $multi, $perpage);
    509. 

  509. 	}
    510. 

  510. 	$voterlist = $voter = array();
    511. 

  511. 	if($arrvoterids) {
    512. 

  512. 		$voterlist = C::t('common_member')->fetch_all($arrvoterids);
    513. 

  513. 	}
    514. 

  514. 	include template('forum/viewthread_poll_voter');
    515. 

  515. 

  516. } elseif($_GET['action'] == 'rate' && $_GET['pid']) {
    517. 

  517. 

  518. 	if($_GET['showratetip']) {
    519. 

  519. 		include template('forum/rate');
    520. 

  520. 		exit();
    521. 

  521. 	}
    522. 

  522. 

  523. 	if(!$_G['inajax']) {
    524. 

  524. 		showmessage('undefined_action');
    525. 

  525. 	}
    526. 

  526. 	if(!$_G['group']['raterange']) {
    527. 

  527. 		showmessage('group_nopermission', NULL, array('grouptitle' => $_G['group']['grouptitle']), array('login' => 1));
    528. 

  528. 	} elseif($_G['setting']['modratelimit'] && $_G['adminid'] == 3 && !$_G['forum']['ismoderator']) {
    529. 

  529. 		showmessage('thread_rate_moderator_invalid', NULL);
    530. 

  530. 	}
    531. 

  531. 	$reasonpmcheck = $_G['group']['reasonpm'] == 2 || $_G['group']['reasonpm'] == 3 ? 'checked="checked" disabled' : '';
    532. 

  532. 	if(($_G['group']['reasonpm'] == 2 || $_G['group']['reasonpm'] == 3) || !empty($_GET['sendreasonpm'])) {
    533. 

  533. 		$forumname = strip_tags($_G['forum']['name']);
    534. 

  534. 		$sendreasonpm = 1;
    535. 

  535. 	} else {
    536. 

  536. 		$sendreasonpm = 0;
    537. 

  537. 	}
    538. 

  538. 

  539. 	$post = C::t('forum_post')->fetch('tid:'.$_G['tid'], $_GET['pid']);
    540. 

  540. 	if($post['invisible'] != 0 || $post['authorid'] == 0) {
    541. 

  541. 		$post = array();
    542. 

  542. 	}
    543. 

  543. 

  544. 	if(!$post || $post['tid'] != $thread['tid'] || !$post['authorid']) {
    545. 

  545. 		showmessage('rate_post_error');
    546. 

  546. 	} elseif(!$_G['forum']['ismoderator'] && $_G['setting']['karmaratelimit'] && TIMESTAMP - $post['dateline'] > $_G['setting']['karmaratelimit'] * 3600) {
    547. 

  547. 		showmessage('thread_rate_timelimit', NULL, array('karmaratelimit' => $_G['setting']['karmaratelimit']));
    548. 

  548. 	} elseif($post['authorid'] == $_G['uid'] || $post['tid'] != $_G['tid']) {
    549. 

  549. 		showmessage('thread_rate_member_invalid', NULL);
    550. 

  550. 	} elseif($post['anonymous']) {
    551. 

  551. 		showmessage('thread_rate_anonymous', NULL);
    552. 

  552. 	} elseif($post['status'] & 1) {
    553. 

  553. 		showmessage('thread_rate_banned', NULL);
    554. 

  554. 	}
    555. 

  555. 

  556. 	$allowrate = TRUE;
    557. 

  557. 	if(!$_G['setting']['dupkarmarate']) {
    558. 

  558. 		if(C::t('forum_ratelog')->count_by_uid_pid($_G['uid'], $_GET['pid'])) {
    559. 

  559. 			showmessage('thread_rate_duplicate', NULL);
    560. 

  560. 		}
    561. 

  561. 	}
    562. 

  562. 

  563. 	$page = intval($_GET['page']);
    564. 

  564. 

  565. 	require_once libfile('function/misc');
    566. 

  566. 

  567. 	$maxratetoday = getratingleft($_G['group']['raterange']);
    568. 

  568. 

  569. 	if(!submitcheck('ratesubmit', 1)) {
    570. 

  570. 		$referer = $_G['siteurl'].'forum.php?mod=viewthread&tid='.$_G['tid'].'&page='.$page.($_GET['from'] ? '&from='.$_GET['from'] : '').'#pid'.$_GET['pid'];
    571. 

  571. 		$ratelist = getratelist($_G['group']['raterange']);
    572. 

  572. 		include template('forum/rate');
    573. 

  573. 

  574. 	} else {
    575. 

  575. 

  576. 		$reason = checkreasonpm();
    577. 

  577. 		$rate = $ratetimes = 0;
    578. 

  578. 		$creditsarray = $sub_self_credit = array();
    579. 

  579. 		getuserprofile('extcredits1');
    580. 

  580. 		foreach($_G['group']['raterange'] as $id => $rating) {
    581. 

  581. 			$score = intval($_GET['score'.$id]);
    582. 

  582. 			if(isset($_G['setting']['extcredits'][$id]) && !empty($score)) {
    583. 

  583. 				if($rating['isself'] && (intval($_G['member']['extcredits'.$id]) - $score < 0)) {
    584. 

  584. 					showmessage('thread_rate_range_self_invalid', '', array('extcreditstitle' => $_G['setting']['extcredits'][$id]['title']));
    585. 

  585. 				}
    586. 

  586. 				if(abs($score) <= $maxratetoday[$id]) {
    587. 

  587. 					if($score > $rating['max'] || $score < $rating['min']) {
    588. 

  588. 						showmessage('thread_rate_range_invalid');
    589. 

  589. 					} else {
    590. 

  590. 						$creditsarray[$id] = $score;
    591. 

  591. 						if($rating['isself']) {
    592. 

  592. 							$sub_self_credit[$id] = -abs($score);
    593. 

  593. 						}
    594. 

  594. 						$rate += $score;
    595. 

  595. 						$ratetimes += ceil(max(abs($rating['min']), abs($rating['max'])) / 5);
    596. 

  596. 					}
    597. 

  597. 				} else {
    598. 

  598. 					showmessage('thread_rate_ctrl');
    599. 

  599. 				}
    600. 

  600. 			}
    601. 

  601. 		}
    602. 

  602. 

  603. 		if(!$creditsarray) {
    604. 

  604. 			showmessage('thread_rate_range_invalid', NULL);
    605. 

  605. 		}
    606. 

  606. 

  607. 		updatemembercount($post['authorid'], $creditsarray, 1, 'PRC', $_GET['pid']);
    608. 

  608. 

  609. 		if(!empty($sub_self_credit)) {
    610. 

  610. 			updatemembercount($_G['uid'], $sub_self_credit, 1, 'RSC', $_GET['pid']);
    611. 

  611. 		}
    612. 

  612. 		C::t('forum_post')->increase_rate_by_pid('tid:'.$_G['tid'], $_GET['pid'], $rate, $ratetimes);
    613. 

  613. 		if($post['first']) {
    614. 

  614. 			$threadrate = intval(@($post['rate'] + $rate) / abs($post['rate'] + $rate));
    615. 

  615. 			C::t('forum_thread')->update($_G['tid'], array('rate'=>$threadrate));
    616. 

  616. 

  617. 		}
    618. 

  618. 

  619. 		require_once libfile('function/discuzcode');
    620. 

  620. 		$sqlvalues = $comma = '';
    621. 

  621. 		$sqlreason = censor(trim($_GET['reason']));
    622. 

  622. 		$sqlreason = cutstr(dhtmlspecialchars($sqlreason), 40, '.');
    623. 

  623. 		foreach($creditsarray as $id => $addcredits) {
    624. 

  624. 			$insertarr = array(
    625. 

  625. 				'pid' => $_GET['pid'],
    626. 

  626. 				'uid' => $_G['uid'],
    627. 

  627. 				'username' => $_G['username'],
    628. 

  628. 				'extcredits' => $id,
    629. 

  629. 				'dateline' => $_G['timestamp'],
    630. 

  630. 				'score' => $addcredits,
    631. 

  631. 				'reason' => $sqlreason
    632. 

  632. 			);
    633. 

  633. 			C::t('forum_ratelog')->insert($insertarr);
    634. 

  634. 		}
    635. 

  635. 

  636. 		include_once libfile('function/post');
    637. 

  637. 		$_G['forum']['threadcaches'] && @deletethreadcaches($_G['tid']);
    638. 

  638. 

  639. 		$reason = dhtmlspecialchars(censor(trim($reason)));
    640. 

  640. 		if($sendreasonpm) {
    641. 

  641. 			$ratescore = $slash = '';
    642. 

  642. 			foreach($creditsarray as $id => $addcredits) {
    643. 

  643. 				$ratescore .= $slash.$_G['setting']['extcredits'][$id]['title'].' '.($addcredits > 0 ? '+'.$addcredits : $addcredits).' '.$_G['setting']['extcredits'][$id]['unit'];
    644. 

  644. 				$slash = ' / ';
    645. 

  645. 			}
    646. 

  646. 			sendreasonpm($post, 'rate_reason', array(
    647. 

  647. 				'tid' => $thread['tid'],
    648. 

  648. 				'pid' => $_GET['pid'],
    649. 

  649. 				'subject' => $thread['subject'],
    650. 

  650. 				'ratescore' => $ratescore,
    651. 

  651. 				'reason' => $reason,
    652. 

  652. 				'from_id' => 0,
    653. 

  653. 				'from_idtype' => 'rate'
    654. 

  654. 			));
    655. 

  655. 		}
    656. 

  656. 

  657. 		$logs = array();
    658. 

  658. 		foreach($creditsarray as $id => $addcredits) {
    659. 

  659. 			$logs[] = dhtmlspecialchars("$_G[timestamp]\t{$_G[member][username]}\t$_G[adminid]\t$post[author]\t$id\t$addcredits\t$_G[tid]\t$thread[subject]\t$reason");
    660. 

  660. 		}
    661. 

  661. 		update_threadpartake($post['tid']);
    662. 

  662. 		C::t('forum_postcache')->delete($_GET['pid']);
    663. 

  663. 		writelog('ratelog', $logs);
    664. 

  664. 

  665. 		showmessage('thread_rate_succeed', dreferer());
    666. 

  666. 	}
    667. 

  667. } elseif($_GET['action'] == 'removerate' && $_GET['pid']) {
    668. 

  668. 

  669. 	if(!$_G['forum']['ismoderator'] || !$_G['group']['raterange']) {
    670. 

  670. 		showmessage('no_privilege_removerate');
    671. 

  671. 	}
    672. 

  672. 

  673. 	$reasonpmcheck = $_G['group']['reasonpm'] == 2 || $_G['group']['reasonpm'] == 3 ? 'checked="checked" disabled' : '';
    674. 

  674. 	if(($_G['group']['reasonpm'] == 2 || $_G['group']['reasonpm'] == 3) || !empty($_GET['sendreasonpm'])) {
    675. 

  675. 		$forumname = strip_tags($_G['forum']['name']);
    676. 

  676. 		$sendreasonpm = 1;
    677. 

  677. 	} else {
    678. 

  678. 		$sendreasonpm = 0;
    679. 

  679. 	}
    680. 

  680. 

  681. 	foreach($_G['group']['raterange'] as $id => $rating) {
    682. 

  682. 		$maxratetoday[$id] = $rating['mrpd'];
    683. 

  683. 	}
    684. 

  684. 	$post = C::t('forum_post')->fetch('tid:'.$_G['tid'], $_GET['pid']);
    685. 

  685. 	if($post['invisible'] != 0 || $post['authorid'] == 0) {
    686. 

  686. 		$post = array();
    687. 

  687. 	}
    688. 

  688. 

  689. 	if(!$post || $post['tid'] != $thread['tid'] || !$post['authorid']) {
    690. 

  690. 		showmessage('rate_post_error');
    691. 

  691. 	}
    692. 

  692. 

  693. 	require_once libfile('function/misc');
    694. 

  694. 

  695. 	if(!submitcheck('ratesubmit')) {
    696. 

  696. 

  697. 		$referer = $_G['siteurl'].'forum.php?mod=viewthread&tid='.$_G['tid'].'&page='.$page.($_GET['from'] ? '&from='.$_GET['from'] : '').'#pid'.$_GET['pid'];
    698. 

  698. 		$ratelogs = array();
    699. 

  699. 

  700. 		foreach(C::t('forum_ratelog')->fetch_all_by_pid($_GET['pid'], 'ASC') as $ratelog) {
    701. 

  701. 			$ratelog['dbdateline'] = $ratelog['dateline'];
    702. 

  702. 			$ratelog['dateline'] = dgmdate($ratelog['dateline'], 'u');
    703. 

  703. 			$ratelog['scoreview'] = $ratelog['score'] > 0 ? '+'.$ratelog['score'] : $ratelog['score'];
    704. 

  704. 			$ratelogs[] = $ratelog;
    705. 

  705. 		}
    706. 

  706. 

  707. 		include template('forum/rate');
    708. 

  708. 

  709. 	} else {
    710. 

  710. 

  711. 		$reason = checkreasonpm();
    712. 

  712. 

  713. 		if(!empty($_GET['logidarray'])) {
    714. 

  714. 			if($sendreasonpm) {
    715. 

  715. 				$ratescore = $slash = '';
    716. 

  716. 			}
    717. 

  717. 

  718. 			$rate = $ratetimes = 0;
    719. 

  719. 			$logs = array();
    720. 

  720. 			foreach(C::t('forum_ratelog')->fetch_all_by_pid($_GET['pid']) as $ratelog) {
    721. 

  721. 				if(in_array($ratelog['uid'].' '.$ratelog['extcredits'].' '.$ratelog['dateline'], $_GET['logidarray'])) {
    722. 

  722. 					$rate += $ratelog['score'] = -$ratelog['score'];
    723. 

  723. 					$ratetimes += ceil(max(abs($rating['min']), abs($rating['max'])) / 5);
    724. 

  724. 					updatemembercount($post['authorid'], array($ratelog['extcredits'] => $ratelog['score']));
    725. 

  725. 					C::t('common_credit_log')->delete_by_uid_operation_relatedid($post['authorid'], 'PRC', $_GET['pid']);
    726. 

  726. 					C::t('forum_ratelog')->delete_by_pid_uid_extcredits_dateline($_GET['pid'], $ratelog['uid'], $ratelog['extcredits'], $ratelog['dateline']);
    727. 

  727. 					$logs[] = dhtmlspecialchars("$_G[timestamp]\t{$_G[member][username]}\t$_G[adminid]\t$ratelog[username]\t$ratelog[extcredits]\t$ratelog[score]\t$_G[tid]\t$thread[subject]\t$reason\tD");
    728. 

  728. 					if($sendreasonpm) {
    729. 

  729. 						$ratescore .= $slash.$_G['setting']['extcredits'][$ratelog['extcredits']]['title'].' '.($ratelog['score'] > 0 ? '+'.$ratelog['score'] : $ratelog['score']).' '.$_G['setting']['extcredits'][$ratelog['extcredits']]['unit'];
    730. 

  730. 						$slash = ' / ';
    731. 

  731. 					}
    732. 

  732. 				}
    733. 

  733. 			}
    734. 

  734. 			C::t('forum_postcache')->delete($_GET['pid']);
    735. 

  735. 			writelog('ratelog', $logs);
    736. 

  736. 

  737. 			if($sendreasonpm) {
    738. 

  738. 				sendreasonpm($post, 'rate_removereason', array(
    739. 

  739. 					'tid' => $thread['tid'],
    740. 

  740. 					'pid' => $_GET['pid'],
    741. 

  741. 					'subject' => $thread['subject'],
    742. 

  742. 					'ratescore' => $ratescore,
    743. 

  743. 					'reason' => $reason,
    744. 

  744. 					'from_id' => 0,
    745. 

  745. 					'from_idtype' => 'removerate'
    746. 

  746. 				));
    747. 

  747. 			}
    748. 

  748. 			C::t('forum_post')->increase_rate_by_pid('tid:'.$_G['tid'], $_GET['pid'], $rate, $ratetimes);
    749. 

  749. 			if($post['first']) {
    750. 

  750. 				$threadrate = @intval(@($post['rate'] + $rate) / abs($post['rate'] + $rate));
    751. 

  751. 				C::t('forum_thread')->update($_G['tid'], array('rate'=>$threadrate));
    752. 

  752. 			}
    753. 

  753. 

  754. 		}
    755. 

  755. 

  756. 		showmessage('thread_rate_removesucceed', dreferer());
    757. 

  757. 

  758. 	}
    759. 

  759. 

  760. } elseif($_GET['action'] == 'viewratings' && $_GET['pid']) {
    761. 

  761. 

  762. 	$loglist = $logcount = array();
    763. 

  763. 

  764. 	$post = C::t('forum_post')->fetch('tid:'.$_G['tid'], $_GET['pid']);
    765. 

  765. 	if($post['invisible'] != 0) {
    766. 

  766. 		$post = array();
    767. 

  767. 	}
    768. 

  768. 	if($post) {
    769. 

  769. 		$loglist = C::t('forum_ratelog')->fetch_all_by_pid($_GET['pid']);
    770. 

  770. 	}
    771. 

  771. 	if(empty($post) || empty($loglist)) {
    772. 

  772. 		showmessage('thread_rate_log_nonexistence');
    773. 

  773. 	}
    774. 

  774. 	if($post['tid'] != $thread['tid']) {
    775. 

  775. 		showmessage('targetpost_donotbelongto_thisthread');
    776. 

  776. 	}
    777. 

  777. 	if($_G['setting']['bannedmessages']) {
    778. 

  778. 		$postmember = getuserbyuid($post['authorid']);
    779. 

  779. 		$post['groupid'] = $postmember['groupid'];
    780. 

  780. 	}
    781. 

  781. 

  782. 	foreach($loglist as $k => $log) {
    783. 

  783. 		$logcount[$log['extcredits']] += $log['score'];
    784. 

  784. 		$log['dateline'] = dgmdate($log['dateline'], 'u');
    785. 

  785. 		$log['score'] = $log['score'] > 0 ? '+'.$log['score'] : $log['score'];
    786. 

  786. 		$log['reason'] = dhtmlspecialchars($log['reason']);
    787. 

  787. 		$loglist[$k] = $log;
    788. 

  788. 	}
    789. 

  789. 

  790. 	include template('forum/rate_view');
    791. 

  791. 

  792. } elseif($_GET['action'] == 'viewwarning' && $_GET['uid']) {
    793. 

  793. 

  794. 	$warnuser = getuserbyuid($_GET['uid']);
    795. 

  795. 	$warnuser = $warnuser['username'];
    796. 

  796. 	if(!$warnuser) {
    797. 

  797. 		showmessage('member_no_found');
    798. 

  798. 	}
    799. 

  799. 

  800. 	$warnings = array();
    801. 

  801. 	$warnings = C::t('forum_warning')->fetch_all_by_authorid($_GET['uid']);
    802. 

  802. 

  803. 	if(!$warnings) {
    804. 

  804. 		showmessage('thread_warning_nonexistence');
    805. 

  805. 	}
    806. 

  806. 

  807. 	foreach($warnings as $key => $warning) {
    808. 

  808. 		$warning['dateline'] = dgmdate($warning['dateline'], 'u');
    809. 

  809. 		$warning['reason'] = dhtmlspecialchars($warning['reason']);
    810. 

  810. 		$warnings[$key] = $warning;
    811. 

  811. 	}
    812. 

  812. 	$warnnum = count($warnings);
    813. 

  813. 

  814. 	include template('forum/warn_view');
    815. 

  815. 

  816. } elseif($_GET['action'] == 'pay') {
    817. 

  817. 

  818. 	if(!isset($_G['setting']['extcredits'][$_G['setting']['creditstransextra'][1]])) {
    819. 

  819. 		showmessage('credits_transaction_disabled');
    820. 

  820. 	} elseif($thread['price'] <= 0 || $thread['special'] <> 0) {
    821. 

  821. 		showmessage('thread_pay_error', NULL);
    822. 

  822. 	} elseif(!$_G['uid']) {
    823. 

  823. 		showmessage('group_nopermission', NULL, array('grouptitle' => $_G['group']['grouptitle']), array('login' => 1));
    824. 

  824. 	}
    825. 

  825. 

  826. 	if(($balance = getuserprofile('extcredits'.$_G['setting']['creditstransextra'][1]) - $thread['price']) < ($minbalance = 0)) {
    827. 

  827. 		if($_G['setting']['creditstrans'][0] == $_G['setting']['creditstransextra'][1]) {
    828. 

  828. 			showmessage('credits_balance_insufficient_and_charge', '', array('title' => $_G['setting']['extcredits'][$_G['setting']['creditstransextra'][1]]['title'], 'minbalance' => $thread['price']));
    829. 

  829. 		} else {
    830. 

  830. 			showmessage('credits_balance_insufficient', '', array('title' => $_G['setting']['extcredits'][$_G['setting']['creditstransextra'][1]]['title'], 'minbalance' => $thread['price']));
    831. 

  831. 		}
    832. 

  832. 	}
    833. 

  833. 

  834. 	if(C::t('common_credit_log')->count_by_uid_operation_relatedid($_G['uid'], 'BTC', $_G['tid'])) {
    835. 

  835. 		showmessage('credits_buy_thread', 'forum.php?mod=viewthread&tid='.$_G['tid'].($_GET['from'] ? '&from='.$_GET['from'] : ''));
    836. 

  836. 	}
    837. 

  837. 

  838. 	$thread['netprice'] = floor($thread['price'] * (1 - $_G['setting']['creditstax']));
    839. 

  839. 

  840. 	if(!submitcheck('paysubmit')) {
    841. 

  841. 

  842. 		include template('forum/pay');
    843. 

  843. 

  844. 	} else {
    845. 

  845. 

  846. 		$updateauthor = true;
    847. 

  847. 		$authorEarn = $thread['netprice'];
    848. 

  848. 		if($_G['setting']['maxincperthread'] > 0) {
    849. 

  849. 			$extcredit = 'extcredits'.$_G['setting']['creditstransextra'][1];
    850. 

  850. 			$log = C::t('common_credit_log')->count_credit_by_uid_operation_relatedid($thread['authorid'], 'STC', $_G['tid'], $_G['setting']['creditstransextra'][1]);
    851. 

  851. 			if($log >= $_G['setting']['maxincperthread']) {
    852. 

  852. 				$updateauthor = false;
    853. 

  853. 			} else {
    854. 

  854. 				$authorEarn = min($_G['setting']['maxincperthread'] - $log['credit'], $thread['netprice']);
    855. 

  855. 			}
    856. 

  856. 		}
    857. 

  857. 		if($updateauthor) {
    858. 

  858. 			updatemembercount($thread['authorid'], array($_G['setting']['creditstransextra'][1] => $authorEarn), 1, 'STC', $_G['tid']);
    859. 

  859. 		}
    860. 

  860. 		updatemembercount($_G['uid'], array($_G['setting']['creditstransextra'][1] => -$thread['price']), 1, 'BTC', $_G['tid']);
    861. 

  861. 

  862. 		showmessage('thread_pay_succeed', "forum.php?mod=viewthread&tid=$_G[tid]".($_GET['from'] ? '&from='.$_GET['from'] : ''));
    863. 

  863. 

  864. 	}
    865. 

  865. 

  866. } elseif($_GET['action'] == 'viewpayments') {
    867. 

  867. 	$extcreditname = 'extcredits'.$_G['setting']['creditstransextra'][1];
    868. 

  868. 	$loglist = array();
    869. 

  869. 	$logs = C::t('common_credit_log')->fetch_all_by_uid_operation_relatedid(0, 'BTC', $_G['tid']);
    870. 

  870. 	$luids = array();
    871. 

  871. 	foreach($logs as $log) {
    872. 

  872. 		$luids[$log['uid']] = $log['uid'];
    873. 

  873. 	}
    874. 

  874. 	$members = C::t('common_member')->fetch_all($luids);
    875. 

  875. 	foreach($logs as $log) {
    876. 

  876. 		$log['username'] = $members[$log['uid']]['username'];
    877. 

  877. 		$log['dateline'] = dgmdate($log['dateline'], 'u');
    878. 

  878. 		$log[$extcreditname] = abs($log[$extcreditname]);
    879. 

  879. 		$loglist[] = $log;
    880. 

  880. 	}
    881. 

  881. 	include template('forum/pay_view');
    882. 

  882. 

  883. } elseif($_GET['action'] == 'viewthreadmod' && $_G['tid']) {
    884. 

  884. 

  885. 	$modactioncode = lang('forum/modaction');
    886. 

  886. 	$loglist = array();
    887. 

  887. 

  888. 	foreach(C::t('forum_threadmod')->fetch_all_by_tid($_G['tid']) as $log) {
    889. 

  889. 		$log['dateline'] = dgmdate($log['dateline'], 'u');
    890. 

  890. 		$log['expiration'] = !empty($log['expiration']) ? dgmdate($log['expiration'], 'd') : '';
    891. 

  891. 		$log['status'] = empty($log['status']) ? 'style="text-decoration: line-through" disabled' : '';
    892. 

  892. 		if(!$modactioncode[$log['action']] && preg_match('/S(\d\d)/', $log['action'], $a) || $log['action'] == 'SPA') {
    893. 

  893. 			loadcache('stamps');
    894. 

  894. 			if($log['action'] == 'SPA') {
    895. 

  895. 				$log['action'] = 'SPA'.$log['stamp'];
    896. 

  896. 				$stampid = $log['stamp'];
    897. 

  897. 			} else {
    898. 

  898. 				$stampid = intval($a[1]);
    899. 

  899. 			}
    900. 

  900. 			$modactioncode[$log['action']] = $modactioncode['SPA'].' '.$_G['cache']['stamps'][$stampid]['text'];
    901. 

  901. 		} elseif(preg_match('/L(\d\d)/', $log['action'], $a)) {
    902. 

  902. 			loadcache('stamps');
    903. 

  903. 			$modactioncode[$log['action']] = $modactioncode['SLA'].' '.$_G['cache']['stamps'][intval($a[1])]['text'];
    904. 

  904. 		}
    905. 

  905. 		if($log['magicid']) {
    906. 

  906. 			loadcache('magics');
    907. 

  907. 			$log['magicname'] = $_G['cache']['magics'][$log['magicid']]['name'];
    908. 

  908. 		}
    909. 

  909. 		$loglist[] = $log;
    910. 

  910. 	}
    911. 

  911. 

  912. 	if(empty($loglist)) {
    913. 

  913. 		showmessage('threadmod_nonexistence');
    914. 

  914. 	}
    915. 

  915. 

  916. 	include template('forum/viewthread_mod');
    917. 

  917. 

  918. } elseif($_GET['action'] == 'bestanswer' && $_G['tid'] && $_GET['pid'] && submitcheck('bestanswersubmit')) {
    919. 

  919. 

  920. 	$forward = 'forum.php?mod=viewthread&tid='.$_G['tid'].($_GET['from'] ? '&from='.$_GET['from'] : '');
    921. 

  921. 	$post = C::t('forum_post')->fetch('tid:'.$_G['tid'], $_GET['pid'], false);
    922. 

  922. 	if($post['tid'] != $_G['tid']) {
    923. 

  923. 		$post = array();
    924. 

  924. 	}
    925. 

  925. 

  926. 	if(!($thread['special'] == 3 && $post && ($_G['forum']['ismoderator'] && (!$_G['setting']['rewardexpiration'] || $_G['setting']['rewardexpiration'] > 0 && ($_G['timestamp'] - $thread['dateline']) / 86400 > $_G['setting']['rewardexpiration']) || $thread['authorid'] == $_G['uid']) && $post['authorid'] != $thread['authorid'] && $post['first'] == 0 && $_G['uid'] != $post['authorid'] && $thread['price'] > 0)) {
    927. 

  927. 		showmessage('reward_cant_operate');
    928. 

  928. 	} elseif($post['authorid'] == $thread['authorid']) {
    929. 

  929. 		showmessage('reward_cant_self');
    930. 

  930. 	} elseif($thread['price'] < 0) {
    931. 

  931. 		showmessage('reward_repeat_selection');
    932. 

  932. 	}
    933. 

  933. 	updatemembercount($post['authorid'], array($_G['setting']['creditstransextra'][2] => $thread['price']), 1, 'RAC', $_G['tid']);
    934. 

  934. 	$thread['price'] = '-'.$thread['price'];
    935. 

  935. 	C::t('forum_thread')->update($_G['tid'], array('price'=>$thread['price']));
    936. 

  936. 	C::t('forum_post')->update('tid:'.$_G['tid'], $_GET['pid'], array(
    937. 

  937. 		'dateline' => $thread['dateline'] + 1,
    938. 

  938. 	));
    939. 

  939. 

  940. 	$thread['dateline'] = dgmdate($thread['dateline']);
    941. 

  941. 	if($_G['uid'] != $thread['authorid']) {
    942. 

  942. 		notification_add($thread['authorid'], 'reward', 'reward_question', array(
    943. 

  943. 			'tid' => $thread['tid'],
    944. 

  944. 			'subject' => $thread['subject'],
    945. 

  945. 		));
    946. 

  946. 	}
    947. 

  947. 	if($thread['authorid'] == $_G['uid']) {
    948. 

  948. 		notification_add($post['authorid'], 'reward', 'reward_bestanswer', array(
    949. 

  949. 			'tid' => $thread['tid'],
    950. 

  950. 			'subject' => $thread['subject'],
    951. 

  951. 		));
    952. 

  952. 	} else {
    953. 

  953. 		notification_add($post['authorid'], 'reward', 'reward_bestanswer_moderator', array(
    954. 

  954. 			'tid' => $thread['tid'],
    955. 

  955. 			'subject' => $thread['subject'],
    956. 

  956. 		));
    957. 

  957. 	}
    958. 

  958. 

  959. 

  960. 	showmessage('reward_completion', $forward);
    961. 

  961. 

  962. } elseif($_GET['action'] == 'activityapplies') {
    963. 

  963. 

  964. 	if(!$_G['uid']) {
    965. 

  965. 		showmessage('not_loggedin', NULL, array(), array('login' => 1));
    966. 

  966. 	}
    967. 

  967. 

  968. 	if(submitcheck('activitysubmit')) {
    969. 

  969. 		$activity = C::t('forum_activity')->fetch($_G['tid']);
    970. 

  970. 		if($activity['expiration'] && $activity['expiration'] < TIMESTAMP) {
    971. 

  971. 			showmessage('activity_stop', NULL, array(), array('login' => 1));
    972. 

  972. 		}
    973. 

  973. 		$applyinfo = array();
    974. 

  974. 		$applyinfo = C::t('forum_activityapply')->fetch_info_for_user($_G['uid'], $_G['tid']);
    975. 

  975. 		if($applyinfo && $applyinfo['verified'] < 2) {
    976. 

  976. 			showmessage('activity_repeat_apply', NULL, array(), array('login' => 1));
    977. 

  977. 		}
    978. 

  978. 		$payvalue = intval($_GET['payvalue']);
    979. 

  979. 		$payment = $_GET['payment'] ? $payvalue : -1;
    980. 

  980. 		$message = cutstr(dhtmlspecialchars($_GET['message']), 200);
    981. 

  981. 		$verified = $thread['authorid'] == $_G['uid'] ? 1 : 0;
    982. 

  982. 		if($activity['ufield']) {
    983. 

  983. 			$ufielddata = array();
    984. 

  984. 			$activity['ufield'] = dunserialize($activity['ufield']);
    985. 

  985. 			if(!empty($activity['ufield']['userfield'])) {
    986. 

  986. 				$censor = discuz_censor::instance();
    987. 

  987. 				loadcache('profilesetting');
    988. 

  988. 

  989. 				foreach($_POST as $key => $value) {
    990. 

  990. 					if(empty($_G['cache']['profilesetting'][$key])) continue;
    991. 

  991. 					if(is_array($value)) {
    992. 

  992. 						$value = implode(',', $value);
    993. 

  993. 					}
    994. 

  994. 					$value = cutstr(dhtmlspecialchars(trim($value)), 100, '.');
    995. 

  995. 					if($_G['cache']['profilesetting'][$key]['formtype'] == 'file' && !preg_match("/^https?:\/\/(.*)?\.(jpg|png|gif|jpeg|bmp)$/i", $value)) {
    996. 

  996. 						showmessage('activity_imgurl_error');
    997. 

  997. 					}
    998. 

  998. 					if(empty($value) && $key != 'residedist' && $key != 'residecommunity') {
    999. 

  999. 						showmessage('activity_exile_field');
    1000. 

  1000. 					}
    1001. 

  1001. 					$ufielddata['userfield'][$key] = $value;
    1002. 

  1002. 				}
    1003. 

  1003. 			}
    1004. 

  1004. 			if(!empty($activity['ufield']['extfield'])) {
    1005. 

  1005. 				foreach($activity['ufield']['extfield'] as $fieldid) {
    1006. 

  1006. 					$value = cutstr(dhtmlspecialchars(trim($_GET[''.$fieldid])), 50, '.');
    1007. 

  1007. 					$ufielddata['extfield'][$fieldid] = $value;
    1008. 

  1008. 				}
    1009. 

  1009. 			}
    1010. 

  1010. 			$ufielddata = !empty($ufielddata) ? serialize($ufielddata) : '';
    1011. 

  1011. 		}
    1012. 

  1012. 		if($_G['setting']['activitycredit'] && $activity['credit'] && empty($applyinfo['verified'])) {
    1013. 

  1013. 			checklowerlimit(array('extcredits'.$_G['setting']['activitycredit'] => '-'.$activity['credit']));
    1014. 

  1014. 			updatemembercount($_G['uid'], array($_G['setting']['activitycredit'] => '-'.$activity['credit']), true, 'ACC', $_G['tid']);
    1015. 

  1015. 		}
    1016. 

  1016. 		if($applyinfo && $applyinfo['verified'] == 2) {
    1017. 

  1017. 			$newinfo = array(
    1018. 

  1018. 				'tid' => $_G['tid'],
    1019. 

  1019. 				'username' => $_G['username'],
    1020. 

  1020. 				'uid' => $_G['uid'],
    1021. 

  1021. 				'message' => $message,
    1022. 

  1022. 				'verified' => $verified,
    1023. 

  1023. 				'dateline' => $_G['timestamp'],
    1024. 

  1024. 				'payment' => $payment,
    1025. 

  1025. 				'ufielddata' => $ufielddata
    1026. 

  1026. 			);
    1027. 

  1027. 			C::t('forum_activityapply')->update($applyinfo['appyid'], $newinfo);
    1028. 

  1028. 		} else {
    1029. 

  1029. 			$data = array('tid' => $_G['tid'], 'username' => $_G['username'], 'uid' => $_G['uid'], 'message' => $message, 'verified' => $verified, 'dateline' => $_G['timestamp'], 'payment' => $payment, 'ufielddata' => $ufielddata);
    1030. 

  1030. 			C::t('forum_activityapply')->insert($data);
    1031. 

  1031. 		}
    1032. 

  1032. 

  1033. 		$applynumber = C::t('forum_activityapply')->fetch_count_for_thread($_G['tid']);
    1034. 

  1034. 		C::t('forum_activity')->update($_G['tid'], array('applynumber' => $applynumber));
    1035. 

  1035. 

  1036. 		if($thread['authorid'] != $_G['uid']) {
    1037. 

  1037. 			notification_add($thread['authorid'], 'activity', 'activity_notice', array(
    1038. 

  1038. 				'tid' => $_G['tid'],
    1039. 

  1039. 				'subject' => $thread['subject'],
    1040. 

  1040. 			));
    1041. 

  1041. 			$space = array();
    1042. 

  1042. 			space_merge($space, 'field_home');
    1043. 

  1043. 

  1044. 			if(!empty($space['privacy']['feed']['newreply'])) {
    1045. 

  1045. 				$feed['icon'] = 'activity';
    1046. 

  1046. 				$feed['title_template'] = 'feed_reply_activity_title';
    1047. 

  1047. 				$feed['title_data'] = array(
    1048. 

  1048. 					'subject' => "<a href=\"forum.php?mod=viewthread&tid=$_G[tid]\">$thread[subject]</a>",
    1049. 

  1049. 					'hash_data' => "tid{$_G[tid]}"
    1050. 

  1050. 				);
    1051. 

  1051. 				$feed['id'] = $_G['tid'];
    1052. 

  1052. 				$feed['idtype'] = 'tid';
    1053. 

  1053. 				postfeed($feed);
    1054. 

  1054. 			}
    1055. 

  1055. 		}
    1056. 

  1056. 		showmessage('activity_completion', "forum.php?mod=viewthread&tid=$_G[tid]".($_GET['from'] ? '&from='.$_GET['from'] : ''), array(), array('showdialog' => 1, 'showmsg' => true, 'locationtime' => true, 'alert' => 'right'));
    1057. 

  1057. 

  1058. 	} elseif(submitcheck('activitycancel')) {
    1059. 

  1059. 		C::t('forum_activityapply')->delete_for_user($_G['uid'], $_G['tid']);
    1060. 

  1060. 		$applynumber = C::t('forum_activityapply')->fetch_count_for_thread($_G['tid']);
    1061. 

  1061. 		C::t('forum_activity')->update($_G['tid'], array('applynumber' => $applynumber));
    1062. 

  1062. 		$message = cutstr(dhtmlspecialchars($_GET['message']), 200);
    1063. 

  1063. 		if($thread['authorid'] != $_G['uid']) {
    1064. 

  1064. 			notification_add($thread['authorid'], 'activity', 'activity_cancel', array(
    1065. 

  1065. 				'tid' => $_G['tid'],
    1066. 

  1066. 				'subject' => $thread['subject'],
    1067. 

  1067. 				'reason' => $message
    1068. 

  1068. 			));
    1069. 

  1069. 		}
    1070. 

  1070. 		showmessage('activity_cancel_success', "forum.php?mod=viewthread&tid=$_G[tid]&do=viewapplylist".($_GET['from'] ? '&from='.$_GET['from'] :''), array(), array('showdialog' => 1, 'closetime' => true));
    1071. 

  1071. 	}
    1072. 

  1072. 

  1073. } elseif($_GET['action'] == 'getactivityapplylist') {
    1074. 

  1074. 	$pp = $_G['setting']['activitypp'];
    1075. 

  1075. 	$page = max(1, $_G['page']);
    1076. 

  1076. 	$start = ($page - 1) * $pp;
    1077. 

  1077. 	$activity = C::t('forum_activity')->fetch($_G['tid']);
    1078. 

  1078. 	if(!$activity || $thread['special'] != 4) {
    1079. 

  1079. 		showmessage('undefined_action');
    1080. 

  1080. 	}
    1081. 

  1081. 	$query = C::t('forum_activityapply')->fetch_all_for_thread($_G['tid'], $start, $pp);
    1082. 

  1082. 	foreach($query as $activityapplies) {
    1083. 

  1083. 		$activityapplies['dateline'] = dgmdate($activityapplies['dateline']);
    1084. 

  1084. 		$applylist[] = $activityapplies;
    1085. 

  1085. 	}
    1086. 

  1086. 	$multi = multi($activity['applynumber'], $pp, $page, "forum.php?mod=misc&action=getactivityapplylist&tid=$_G[tid]&pid=$_GET[pid]");
    1087. 

  1087. 	include template('forum/activity_applist_more');
    1088. 

  1088. } elseif($_GET['action'] == 'activityapplylist') {
    1089. 

  1089. 

  1090. 	$isactivitymaster = $thread['authorid'] == $_G['uid'] ||
    1091. 

  1091. 						(in_array($_G['group']['radminid'], array(1, 2)) || ($_G['group']['radminid'] == 3 && $_G['forum']['ismoderator'])
    1092. 

  1092. 						&& $_G['group']['alloweditactivity']);
    1093. 

  1093. 	if(!$isactivitymaster) {
    1094. 

  1094. 		showmessage('activity_is_not_manager');
    1095. 

  1095. 	}
    1096. 

  1096. 

  1097. 	$activity = C::t('forum_activity')->fetch($_G['tid']);
    1098. 

  1098. 	if(empty($activity) || $thread['special'] != 4) {
    1099. 

  1099. 		showmessage('activity_is_not_exists');
    1100. 

  1100. 	}
    1101. 

  1101. 

  1102. 	if(!submitcheck('applylistsubmit')) {
    1103. 

  1103. 		$applylist = array();
    1104. 

  1104. 		$activity['ufield'] = $activity['ufield'] ? dunserialize($activity['ufield']) : array();
    1105. 

  1105. 		$query = C::t('forum_activityapply')->fetch_all_for_thread($_G['tid'], 0, 500, $_GET['uid'], $isactivitymaster);
    1106. 

  1106. 		foreach($query as $activityapplies) {
    1107. 

  1107. 			$ufielddata = '';
    1108. 

  1108. 			$activityapplies['dateline'] = dgmdate($activityapplies['dateline'], 'u');
    1109. 

  1109. 			$activityapplies['ufielddata'] = !empty($activityapplies['ufielddata']) ? dunserialize($activityapplies['ufielddata']) : '';
    1110. 

  1110. 			if($activityapplies['ufielddata']) {
    1111. 

  1111. 				if($activityapplies['ufielddata']['userfield']) {
    1112. 

  1112. 					require_once libfile('function/profile');
    1113. 

  1113. 					loadcache('profilesetting');
    1114. 

  1114. 					$data = '';
    1115. 

  1115. 					foreach($activity['ufield']['userfield'] as $fieldid) {
    1116. 

  1116. 						$data = profile_show($fieldid, $activityapplies['ufielddata']['userfield']);
    1117. 

  1117. 						$ufielddata .= '<li>'.$_G['cache']['profilesetting'][$fieldid]['title'].'&nbsp;&nbsp;:&nbsp;&nbsp;';
    1118. 

  1118. 						if(empty($data)) {
    1119. 

  1119. 							$ufielddata .= '</li>';
    1120. 

  1120. 							continue;
    1121. 

  1121. 						}
    1122. 

  1122. 						if($_G['cache']['profilesetting'][$fieldid]['formtype'] != 'file') {
    1123. 

  1123. 							$ufielddata .= $data;
    1124. 

  1124. 						} else {
    1125. 

  1125. 							$ufielddata .= '<a href="'.$data.'" target="_blank" onclick="zoom(this, this.href, 0, 0, 0); return false;">'.lang('forum/misc', 'activity_viewimg').'</a>';
    1126. 

  1126. 						}
    1127. 

  1127. 						$ufielddata .= '</li>';
    1128. 

  1128. 					}
    1129. 

  1129. 				}
    1130. 

  1130. 				if($activityapplies['ufielddata']['extfield']) {
    1131. 

  1131. 					foreach($activity['ufield']['extfield'] as $name) {
    1132. 

  1132. 						$ufielddata .= '<li>'.$name.'&nbsp;&nbsp;:&nbsp;&nbsp;'.$activityapplies['ufielddata']['extfield'][$name].'</li>';
    1133. 

  1133. 					}
    1134. 

  1134. 				}
    1135. 

  1135. 			}
    1136. 

  1136. 			$activityapplies['ufielddata'] = $ufielddata;
    1137. 

  1137. 			$applylist[] = $activityapplies;
    1138. 

  1138. 		}
    1139. 

  1139. 

  1140. 		$activity['starttimefrom'] = dgmdate($activity['starttimefrom'], 'u');
    1141. 

  1141. 		$activity['starttimeto'] = $activity['starttimeto'] ? dgmdate($activity['starttimeto'], 'u') : 0;
    1142. 

  1142. 		$activity['expiration'] = $activity['expiration'] ? dgmdate($activity['expiration'], 'u') : 0;
    1143. 

  1143. 

  1144. 		include template('forum/activity_applylist');
    1145. 

  1145. 	} else {
    1146. 

  1146. 		if(empty($_GET['applyidarray'])) {
    1147. 

  1147. 			showmessage('activity_choice_applicant');
    1148. 

  1148. 		} else {
    1149. 

  1149. 			$reason = cutstr(dhtmlspecialchars($_GET['reason']), 200);
    1150. 

  1150. 			$tempuid = $uidarray = $unverified = array();
    1151. 

  1151. 			$query = C::t('forum_activityapply')->fetch_all($_GET['applyidarray']);
    1152. 

  1152. 			foreach($query as $row) {
    1153. 

  1153. 				if($row['tid'] == $_G['tid']) {
    1154. 

  1154. 					$tempusers[$row['uid']] = $row['verified'];
    1155. 

  1155. 				}
    1156. 

  1156. 			}
    1157. 

  1157. 			$query  = C::t('common_member')->fetch_all(array_keys($tempusers));
    1158. 

  1158. 			foreach($query as $user) {
    1159. 

  1159. 				$uidarray[] = $user['uid'];
    1160. 

  1160. 				if($tempusers[$user['uid']]['verified'] != 1) {
    1161. 

  1161. 					$unverified[] = $user['uid'];
    1162. 

  1162. 				}
    1163. 

  1163. 			}
    1164. 

  1164. 			$activity_subject = $thread['subject'];
    1165. 

  1165. 

  1166. 			if($_GET['operation'] == 'notification') {
    1167. 

  1167. 				if(empty($uidarray)) {
    1168. 

  1168. 					showmessage('activity_notification_user');
    1169. 

  1169. 				}
    1170. 

  1170. 				if(empty($reason)) {
    1171. 

  1171. 					showmessage('activity_notification_reason');
    1172. 

  1172. 				}
    1173. 

  1173. 				if($uidarray) {
    1174. 

  1174. 					foreach($uidarray as $uid) {
    1175. 

  1175. 						notification_add($uid, 'activity', 'activity_notification', array('tid' => $_G['tid'], 'subject' => $activity_subject, 'msg' => $reason));
    1176. 

  1176. 					}
    1177. 

  1177. 					showmessage('activity_notification_success', "forum.php?mod=viewthread&tid=$_G[tid]&do=viewapplylist".($_GET['from'] ? '&from='.$_GET['from'] : ''), array(), array('showdialog' => 1, 'closetime' => true));
    1178. 

  1178. 				}
    1179. 

  1179. 			} elseif($_GET['operation'] == 'delete') {
    1180. 

  1180. 				if($uidarray) {
    1181. 

  1181. 					C::t('forum_activityapply')->delete_for_thread($_G['tid'], $_GET['applyidarray']);
    1182. 

  1182. 					foreach($uidarray as $uid) {
    1183. 

  1183. 						notification_add($uid, 'activity', 'activity_delete', array(
    1184. 

  1184. 							'tid' => $_G['tid'],
    1185. 

  1185. 							'subject' => $activity_subject,
    1186. 

  1186. 							'reason' => $reason,
    1187. 

  1187. 						));
    1188. 

  1188. 					}
    1189. 

  1189. 				}
    1190. 

  1190. 				$applynumber = C::t('forum_activityapply')->fetch_count_for_thread($_G['tid']);
    1191. 

  1191. 				C::t('forum_activity')->update($_G['tid'], array('applynumber' => $applynumber));
    1192. 

  1192. 				showmessage('activity_delete_completion', "forum.php?mod=viewthread&tid=$_G[tid]&do=viewapplylist".($_GET['from'] ? '&from='.$_GET['from'] : ''), array(), array('showdialog' => 1, 'closetime' => true));
    1193. 

  1193. 			} else {
    1194. 

  1194. 				if($unverified) {
    1195. 

  1195. 					$verified = $_GET['operation'] == 'replenish' ? 2 : 1;
    1196. 

  1196. 

  1197. 					C::t('forum_activityapply')->update_verified_for_thread($verified, $_G['tid'], $_GET['applyidarray']);
    1198. 

  1198. 					$notification_lang = $verified == 1 ? 'activity_apply' : 'activity_replenish';
    1199. 

  1199. 					foreach($unverified as $uid) {
    1200. 

  1200. 						notification_add($uid, 'activity', $notification_lang, array(
    1201. 

  1201. 							'tid' => $_G['tid'],
    1202. 

  1202. 							'subject' => $activity_subject,
    1203. 

  1203. 							'reason' => $reason,
    1204. 

  1204. 						));
    1205. 

  1205. 					}
    1206. 

  1206. 				}
    1207. 

  1207. 				$applynumber = C::t('forum_activityapply')->fetch_count_for_thread($_G['tid']);
    1208. 

  1208. 				C::t('forum_activity')->update($_G['tid'], array('applynumber' => $applynumber));
    1209. 

  1209. 

  1210. 				showmessage('activity_auditing_completion', "forum.php?mod=viewthread&tid=$_G[tid]&do=viewapplylist".($_GET['from'] ? '&from='.$_GET['from'] : ''), array(), array('showdialog' => 1, 'closetime' => true));
    1211. 

  1211. 			}
    1212. 

  1212. 		}
    1213. 

  1213. 	}
    1214. 

  1214. 

  1215. } elseif($_GET['action'] == 'activityexport') {
    1216. 

  1216. 

  1217. 	$isactivitymaster = $thread['authorid'] == $_G['uid'] ||
    1218. 

  1218. 						(in_array($_G['group']['radminid'], array(1, 2)) || ($_G['group']['radminid'] == 3 && $_G['forum']['ismoderator'])
    1219. 

  1219. 						&& $_G['group']['alloweditactivity']);
    1220. 

  1220. 	if(!$isactivitymaster) {
    1221. 

  1221. 		showmessage('activity_is_not_manager');
    1222. 

  1222. 	}
    1223. 

  1223. 

  1224. 	$activity = C::t('forum_activity')->fetch($_G['tid']);
    1225. 

  1225. 	$postinfo = C::t('forum_post')->fetch_threadpost_by_tid_invisible($_G['tid']);
    1226. 

  1226. 	$activity['message'] = $postinfo['message'];
    1227. 

  1227. 	if(empty($activity) || $thr…
    1228.

Large files files are truncated, but you can click here to view the full file