PageRenderTime 72ms CodeModel.GetById 17ms RepoModel.GetById 0ms app.codeStats 1ms

/source/module/forum/forum_misc.php

https://github.com/jinbo51/DiscuzX
PHP | 1806 lines | 1578 code | 222 blank | 6 comment | 562 complexity | c5b88d9f2fc8d84c5ce3dd83d9b02536 MD5 | raw file
Possible License(s): BSD-3-Clause

Large files files are truncated, but you can click here to view the full file

    

  1. <?php
    2. 

  2. 

  3. /**
    4. 

  4.  *      [Discuz!] (C)2001-2099 Comsenz Inc.
    5. 

  5.  *      This is NOT a freeware, use is subject to license terms
    6. 

  6.  *
    7. 

  7.  *      $Id: forum_misc.php 33347 2013-05-30 08:24:40Z jeffjzhang $
    8. 

  8.  */
    9. 

  9. 

  10. if(!defined('IN_DISCUZ')) {
    11. 

  11. 	exit('Access Denied');
    12. 

  12. }
    13. 

  13. define('NOROBOT', TRUE);
    14. 

  14. 

  15. require_once libfile('function/post');
    16. 

  16. 

  17. $feed = array();
    18. 

  18. if($_GET['action'] == 'paysucceed') {
    19. 

  19. 	$orderid = trim($_GET['orderid']);
    20. 

  20. 	$url = !empty($orderid) ? 'forum.php?mod=trade&orderid='.$orderid : 'home.php?mod=spacecp&ac=credit';
    21. 

  21. 	showmessage('payonline_succeed', $url);
    22. 

  22. 

  23. } elseif($_GET['action'] == 'nav') {
    24. 

  24. 

  25. 	require_once libfile('misc/forumselect', 'include');
    26. 

  26. 	exit;
    27. 

  27. 

  28. } elseif($_GET['action'] == 'attachcredit') {
    29. 

  29. 	if($_GET['formhash'] != FORMHASH) {
    30. 

  30. 		showmessage('undefined_action', NULL);
    31. 

  31. 	}
    32. 

  32. 

  33. 	$aid = intval($_GET['aid']);
    34. 

  34. 

  35. 	$attach = C::t('forum_attachment_n')->fetch('aid:'.$aid, $aid);
    36. 

  36. 	$thread = C::t('forum_thread')->fetch_by_tid_displayorder($attach['tid'], 0);
    37. 

  37. 

  38. 	checklowerlimit('getattach', 0, 1, $thread['fid']);
    39. 

  39. 	$getattachcredits = updatecreditbyaction('getattach', $_G['uid'], array(), '', 1, 1, $thread['fid']);
    40. 

  40. 	$_G['policymsg'] = $p = '';
    41. 

  41. 	if($getattachcredits['updatecredit']) {
    42. 

  42. 		if($getattachcredits['updatecredit']) for($i = 1;$i <= 8;$i++) {
    43. 

  43. 			if($policy = $getattachcredits['extcredits'.$i]) {
    44. 

  44. 				$_G['policymsg'] .= $p.($_G['setting']['extcredits'][$i]['img'] ? $_G['setting']['extcredits'][$i]['img'].' ' : '').$_G['setting']['extcredits'][$i]['title'].' '.$policy.' '.$_G['setting']['extcredits'][$i]['unit'];
    45. 

  45. 				$p = ', ';
    46. 

  46. 			}
    47. 

  47. 		}
    48. 

  48. 	}
    49. 

  49. 

  50. 	$ck = substr(md5($aid.TIMESTAMP.md5($_G['config']['security']['authkey'])), 0, 8);
    51. 

  51. 	$aidencode = aidencode($aid, 0, $attach['tid']);
    52. 

  52. 	showmessage('attachment_credit', "forum.php?mod=attachment&aid=$aidencode&ck=$ck", array('policymsg' => $_G['policymsg'], 'filename' => $attach['filename']), array('redirectmsg' => 1, 'login' => 1));
    53. 

  53. 

  54. } elseif($_GET['action'] == 'attachpay') {
    55. 

  55. 	$aid = intval($_GET['aid']);
    56. 

  56. 	if(!$aid) {
    57. 

  57. 		showmessage('parameters_error');
    58. 

  58. 	} elseif(!isset($_G['setting']['extcredits'][$_G['setting']['creditstransextra'][1]])) {
    59. 

  59. 		showmessage('credits_transaction_disabled');
    60. 

  60. 	} elseif(!$_G['uid']) {
    61. 

  61. 		showmessage('group_nopermission', NULL, array('grouptitle' => $_G['group']['grouptitle']), array('login' => 1));
    62. 

  62. 	} else {
    63. 

  63. 		$attachtable = !empty($_GET['tid']) ? 'tid:'.dintval($_GET['tid']) : 'aid:'.$aid;
    64. 

  64. 		$attach = C::t('forum_attachment_n')->fetch($attachtable, $aid);
    65. 

  65. 		$attachmember = getuserbyuid($attach['uid']);
    66. 

  66. 		$attach['author'] = $attachmember['username'];
    67. 

  67. 		if($attach['price'] <= 0) {
    68. 

  68. 			showmessage('undefined_action');
    69. 

  69. 		}
    70. 

  70. 	}
    71. 

  71. 

  72. 	if($attach['readperm'] && $attach['readperm'] > $_G['group']['readaccess']) {
    73. 

  73. 		showmessage('attachment_forum_nopermission', NULL, array(), array('login' => 1));
    74. 

  74. 	}
    75. 

  75. 

  76. 	$balance = getuserprofile('extcredits'.$_G['setting']['creditstransextra'][1]);
    77. 

  77. 	$status = $balance < $attach['price'] ? 1 : 0;
    78. 

  78. 

  79. 	if($_G['adminid'] == 3) {
    80. 

  80. 		$fid = C::t('forum_thread')->fetch($attach['tid']);
    81. 

  81. 		$fid = $fid['fid'];
    82. 

  82. 		$ismoderator = C::t('forum_moderator')->fetch_uid_by_fid_uid($fid, $_G['uid']);
    83. 

  83. 	} elseif(in_array($_G['adminid'], array(1, 2))) {
    84. 

  84. 		$ismoderator = 1;
    85. 

  85. 	} else {
    86. 

  86. 		$ismoderator = 0;
    87. 

  87. 	}
    88. 

  88. 	$exemptvalue = $ismoderator ? 64 : 8;
    89. 

  89. 	if($_G['uid'] == $attach['uid'] || $_G['group']['exempt'] & $exemptvalue) {
    90. 

  90. 		$status = 2;
    91. 

  91. 	} else {
    92. 

  92. 		$payrequired = $_G['uid'] ? !C::t('common_credit_log')->count_by_uid_operation_relatedid($_G['uid'], 'BAC', $attach['aid']) : 1;
    93. 

  93. 		$status = $payrequired ? $status : 2;
    94. 

  94. 	}
    95. 

  95. 	$balance = $status != 2 ? $balance - $attach['price'] : $balance;
    96. 

  96. 

  97. 	$sidauth = rawurlencode(authcode($_G['sid'], 'ENCODE', $_G['authkey']));
    98. 

  98. 

  99. 	$aidencode = aidencode($aid, 0, $attach['tid']);
    100. 

  100. 

  101. 	if(C::t('common_credit_log')->count_by_uid_operation_relatedid($_G['uid'], 'BAC', $aid)) {
    102. 

  102. 		showmessage('attachment_yetpay', "forum.php?mod=attachment&aid=$aidencode", array(), array('redirectmsg' => 1));
    103. 

  103. 	}
    104. 

  104. 

  105. 	$attach['netprice'] = $status != 2 ? round($attach['price'] * (1 - $_G['setting']['creditstax'])) : 0;
    106. 

  106. 	$lockid = 'attachpay_'.$_G['uid'];
    107. 

  107. 	if(!submitcheck('paysubmit')) {
    108. 

  108. 		include template('forum/attachpay');
    109. 

  109. 	} elseif(!discuz_process::islocked($lockid)) {
    110. 

  110. 		if(!empty($_GET['buyall'])) {
    111. 

  111. 			$aids = $prices = array();
    112. 

  112. 			$tprice = 0;
    113. 

  113. 			foreach(C::t('forum_attachment_n')->fetch_all_by_id('aid:'.$aid, 'pid', $attach['pid'], '', false, true) as $tmp) {
    114. 

  114. 				$aids[$tmp['aid']] = $tmp['aid'];
    115. 

  115. 				$prices[$tmp['aid']] = $status != 2 ? array($tmp['price'], round($tmp['price'] * (1 - $_G['setting']['creditstax']))) : array(0, 0);
    116. 

  116. 			}
    117. 

  117. 			if($aids) {
    118. 

  118. 				foreach(C::t('common_credit_log')->fetch_all_by_uid_operation_relatedid($_G['uid'], 'BAC', $aids) as $tmp) {
    119. 

  119. 					unset($aids[$tmp['relatedid']]);
    120. 

  120. 				}
    121. 

  121. 			}
    122. 

  122. 			foreach($aids as $aid) {
    123. 

  123. 				$tprice += $prices[$aid][0];
    124. 

  124. 			}
    125. 

  125. 			$status = getuserprofile('extcredits'.$_G['setting']['creditstransextra'][1]) < $tprice ? 1 : 0;
    126. 

  126. 		} else {
    127. 

  127. 			$aids = array($aid);
    128. 

  128. 			$prices[$aid] = $status != 2 ? array($attach['price'], $attach['netprice']) : array(0, 0);
    129. 

  129. 		}
    130. 

  130. 

  131. 		if($status == 1) {
    132. 

  132. 			showmessage('credits_balance_insufficient', '', array('title' => $_G['setting']['extcredits'][$_G['setting']['creditstransextra'][1]]['title'], 'minbalance' => $attach['price']));
    133. 

  133. 		}
    134. 

  134. 		foreach($aids as $aid) {
    135. 

  135. 			$updateauthor = 1;
    136. 

  136. 			$authorEarn = $prices[$aid][1];
    137. 

  137. 			if($_G['setting']['maxincperthread'] > 0) {
    138. 

  138. 				$extcredit = 'extcredits'.$_G['setting']['creditstransextra'][1];
    139. 

  139. 				$alog = C::t('common_credit_log')->count_credit_by_uid_operation_relatedid($attach['uid'], 'SAC', $aid, $_G['setting']['creditstransextra'][1]);
    140. 

  140. 				if($alog >= $_G['setting']['maxincperthread']) {
    141. 

  141. 					$updateauthor = 0;
    142. 

  142. 				} else {
    143. 

  143. 					$authorEarn = min($_G['setting']['maxincperthread'] - $alog['credit'], $prices[$aid][1]);
    144. 

  144. 				}
    145. 

  145. 			}
    146. 

  146. 			if($updateauthor) {
    147. 

  147. 				updatemembercount($attach['uid'], array($_G['setting']['creditstransextra'][1] => $authorEarn), 1, 'SAC', $aid);
    148. 

  148. 			}
    149. 

  149. 			updatemembercount($_G['uid'], array($_G['setting']['creditstransextra'][1] => -$prices[$aid][0]), 1, 'BAC', $aid);
    150. 

  150. 

  151. 			$aidencode = aidencode($aid, 0, $_GET['tid']);
    152. 

  152. 		}
    153. 

  153. 		discuz_process::unlock($lockid);
    154. 

  154. 		if(count($aids) > 1) {
    155. 

  155. 			showmessage('attachment_buyall', 'forum.php?mod=redirect&goto=findpost&ptid='.$attach['tid'].'&pid='.$attach['pid']);
    156. 

  156. 		} else {
    157. 

  157. 			$_G['forum_attach_filename'] = $attach['filename'];
    158. 

  158. 			showmessage('attachment_buy', "forum.php?mod=attachment&aid=$aidencode", array('filename' => $_G['forum_attach_filename']), array('redirectmsg' => 1));
    159. 

  159. 		}
    160. 

  160. 	}
    161. 

  161. 

  162. } elseif($_GET['action'] == 'viewattachpayments') {
    163. 

  163. 

  164. 	$aid = intval($_GET['aid']);
    165. 

  165. 	$extcreditname = 'extcredits'.$_G['setting']['creditstransextra'][1];
    166. 

  166. 

  167. 	$loglist = array();
    168. 

  168. 	$logs = C::t('common_credit_log')->fetch_all_by_uid_operation_relatedid(0, 'BAC', $aid);
    169. 

  169. 	$luids = array();
    170. 

  170. 	foreach($logs as $log) {
    171. 

  171. 		$luids[$log['uid']] = $log['uid'];
    172. 

  172. 	}
    173. 

  173. 	$members = C::t('common_member')->fetch_all($luids);
    174. 

  174. 	foreach($logs as $log) {
    175. 

  175. 		$log['username'] = $members[$log['uid']]['username'];
    176. 

  176. 		$log['dateline'] = dgmdate($log['dateline'], 'u');
    177. 

  177. 		$log[$extcreditname] = abs($log[$extcreditname]);
    178. 

  178. 		$loglist[] = $log;
    179. 

  179. 	}
    180. 

  180. 	include template('forum/attachpay_view');
    181. 

  181. 

  182. } elseif($_GET['action'] == 'getonlines') {
    183. 

  183. 

  184. 	$num = C::app()->session->count();
    185. 

  185. 	showmessage($num);
    186. 

  186. 

  187. } elseif($_GET['action'] == 'upload') {
    188. 

  188. 

  189. 	$type = !empty($_GET['type']) && in_array($_GET['type'], array('image', 'file')) ? $_GET['type'] : 'image';
    190. 

  190. 	$attachexts = $imgexts = '';
    191. 

  191. 	$_G['group']['allowpostattach'] = $_G['forum']['allowpostattach'] != -1 && ($_G['forum']['allowpostattach'] == 1 || (!$_G['forum']['postattachperm'] && $_G['group']['allowpostattach']) || ($_G['forum']['postattachperm'] && forumperm($_G['forum']['postattachperm'])));
    192. 

  192. 	$_G['group']['allowpostimage'] = $_G['forum']['allowpostimage'] != -1 && ($_G['forum']['allowpostimage'] == 1 || (!$_G['forum']['postimageperm'] && $_G['group']['allowpostimage']) || ($_G['forum']['postimageperm'] && forumperm($_G['forum']['postimageperm'])));
    193. 

  193. 	$_G['group']['attachextensions'] = $_G['forum']['attachextensions'] ? $_G['forum']['attachextensions'] : $_G['group']['attachextensions'];
    194. 

  194. 	if($_G['group']['attachextensions']) {
    195. 

  195. 		$imgexts = explode(',', str_replace(' ', '', $_G['group']['attachextensions']));
    196. 

  196. 		$imgexts = array_intersect(array('jpg','jpeg','gif','png','bmp'), $imgexts);
    197. 

  197. 		$imgexts = implode(', ', $imgexts);
    198. 

  198. 	} else {
    199. 

  199. 		$imgexts = 'jpg, jpeg, gif, png, bmp';
    200. 

  200. 	}
    201. 

  201. 	if($type == 'image' && (!$_G['group']['allowpostimage'] || !$imgexts)) {
    202. 

  202. 		showmessage('no_privilege_postimage');
    203. 

  203. 	}
    204. 

  204. 	if($type == 'file' && !$_G['group']['allowpostattach']) {
    205. 

  205. 		showmessage('no_privilege_postattach');
    206. 

  206. 	}
    207. 

  207. 	include template('forum/upload');
    208. 

  208. 

  209. } elseif($_GET['action'] == 'comment') {
    210. 

  210. 

  211. 	if(!$_G['setting']['commentnumber']) {
    212. 

  212. 		showmessage('postcomment_closed');
    213. 

  213. 	}
    214. 

  214. 	$thread = C::t('forum_thread')->fetch($_GET['tid']);
    215. 

  215. 	if($thread['closed'] && !$_G['forum']['ismoderator']) {
    216. 

  216. 		showmessage('thread_closed');
    217. 

  217. 	}
    218. 

  218. 	$post = C::t('forum_post')->fetch('tid:'.$_G['tid'], $_GET['pid']);
    219. 

  219. 	if($_G['group']['allowcommentitem'] && !empty($_G['uid']) && $post['authorid'] != $_G['uid']) {
    220. 

  220. 		$thread = C::t('forum_thread')->fetch($post['tid']);
    221. 

  221. 		$itemi = $thread['special'];
    222. 

  222. 		if($thread['special'] > 0) {
    223. 

  223. 			if($thread['special'] == 2){
    224. 

  224. 				$thread['special'] = $post['first'] || C::t('forum_trade')->check_goods($post['pid']) ? 2 : 0;
    225. 

  225. 			} elseif($thread['special'] == 127) {
    226. 

  226. 				$thread['special'] = $_GET['special'];
    227. 

  227. 			} else {
    228. 

  228. 				$thread['special'] = $post['first'] ? $thread['special'] : 0;
    229. 

  229. 			}
    230. 

  230. 		}
    231. 

  231. 		$_G['setting']['commentitem'] = $_G['setting']['commentitem'][$thread['special']];
    232. 

  232. 		if($thread['special'] == 0) {
    233. 

  233. 			loadcache('forums');
    234. 

  234. 			if($_G['cache']['forums'][$post['fid']]['commentitem']) {
    235. 

  235. 				$_G['setting']['commentitem'] = $_G['cache']['forums'][$post['fid']]['commentitem'];
    236. 

  236. 			}
    237. 

  237. 		}
    238. 

  238. 		if($_G['setting']['commentitem'] && !C::t('forum_postcomment')->count_by_pid($_GET['pid'], $_G['uid'], 1)) {
    239. 

  239. 			$commentitem = explode("\n", $_G['setting']['commentitem']);
    240. 

  240. 		}
    241. 

  241. 	}
    242. 

  242. 	if(!$post || !($_G['setting']['commentpostself'] || $post['authorid'] != $_G['uid']) || !(($post['first'] && $_G['setting']['commentfirstpost'] && in_array($_G['group']['allowcommentpost'], array(1, 3)) || (!$post['first'] && in_array($_G['group']['allowcommentpost'], array(2, 3)))))) {
    243. 

  243. 		showmessage('postcomment_error');
    244. 

  244. 	}
    245. 

  245. 	$extra = !empty($_GET['extra']) ? rawurlencode($_GET['extra']) : '';
    246. 

  246. 	$seccodecheck = ($_G['setting']['seccodestatus'] & 4) && (!$_G['setting']['seccodedata']['minposts'] || getuserprofile('posts') < $_G['setting']['seccodedata']['minposts']);
    247. 

  247. 	$secqaacheck = $_G['setting']['secqaa']['status'] & 2 && (!$_G['setting']['secqaa']['minposts'] || getuserprofile('posts') < $_G['setting']['secqaa']['minposts']);
    248. 

  248. 

  249. 	include template('forum/comment');
    250. 

  250. 

  251. } elseif($_GET['action'] == 'commentmore') {
    252. 

  252. 

  253. 	if(!$_G['setting']['commentnumber'] || !$_G['inajax']) {
    254. 

  254. 		showmessage('postcomment_closed');
    255. 

  255. 	}
    256. 

  256. 	require_once libfile('function/discuzcode');
    257. 

  257. 	$commentlimit = intval($_G['setting']['commentnumber']);
    258. 

  258. 	$page = max(1, $_G['page']);
    259. 

  259. 	$start_limit = ($page - 1) * $commentlimit;
    260. 

  260. 	$comments = array();
    261. 

  261. 	foreach(C::t('forum_postcomment')->fetch_all_by_search(null, $_GET['pid'], null, null, null, null, null, $start_limit, $commentlimit) as $comment) {
    262. 

  262. 		$comment['avatar'] = avatar($comment['authorid'], 'small');
    263. 

  263. 		$comment['dateline'] = dgmdate($comment['dateline'], 'u');
    264. 

  264. 		$comment['comment'] = str_replace(array('[b]', '[/b]', '[/color]'), array('<b>', '</b>', '</font>'), preg_replace("/\[color=([#\w]+?)\]/i", "<font color=\"\\1\">", $comment['comment']));
    265. 

  265. 		$comments[] = $comment;
    266. 

  266. 	}
    267. 

  267. 	$totalcomment = C::t('forum_postcomment')->fetch_standpoint_by_pid($_GET['pid']);
    268. 

  268. 	$totalcomment = $totalcomment['comment'];
    269. 

  269. 	$totalcomment = preg_replace('/<i>([\.\d]+)<\/i>/e', "'<i class=\"cmstarv\" style=\"background-position:20px -'.(intval(\\1) * 16).'px\">'.sprintf('%1.1f', \\1).'</i>'.(\$cic++ % 2 ? '<br />' : '');", $totalcomment);
    270. 

  270. 	$count = C::t('forum_postcomment')->count_by_search(null, $_GET['pid']);
    271. 

  271. 	$multi = multi($count, $commentlimit, $page, "forum.php?mod=misc&action=commentmore&tid=$_G[tid]&pid=$_GET[pid]");
    272. 

  272. 	include template('forum/comment_more');
    273. 

  273. 

  274. } elseif($_GET['action'] == 'postappend') {
    275. 

  275. 

  276. 	if(!$_G['setting']['postappend']) {
    277. 

  277. 		showmessage('postappend_not_open');
    278. 

  278. 	}
    279. 

  279. 

  280. 	$post = C::t('forum_post')->fetch('tid:'.$_G['tid'], $_GET['pid']);
    281. 

  281. 	if($post['authorid'] != $_G['uid']) {
    282. 

  282. 		showmessage('postappend_only_yourself');
    283. 

  283. 	}
    284. 

  284. 	if(submitcheck('postappendsubmit')) {
    285. 

  285. 		$message = censor($_GET['postappendmessage']);
    286. 

  286. 		$sppos = 0;
    287. 

  287. 		if($post['first'] && strexists($post['message'], chr(0).chr(0).chr(0))) {
    288. 

  288. 			$sppos = strpos($post['message'], chr(0).chr(0).chr(0));
    289. 

  289. 			$specialextra = substr($post['message'], $sppos + 3);
    290. 

  290. 			$post['message'] = substr($post['message'], 0, $sppos);
    291. 

  291. 		}
    292. 

  292. 		$message = $post['message'] . "\n\n[b]".lang('forum/misc', 'postappend_content')." (".dgmdate(TIMESTAMP)."):[/b]\n$message";
    293. 

  293. 		if($sppos) {
    294. 

  294. 			$message .= chr(0).chr(0).chr(0).$specialextra;
    295. 

  295. 		}
    296. 

  296. 		require_once libfile('function/post');
    297. 

  297. 		$bbcodeoff = checkbbcodes($message, 0);
    298. 

  298. 		C::t('forum_post')->update('tid:'.$_G['tid'], $_GET['pid'], array(
    299. 

  299. 			'message' => $message,
    300. 

  300. 			'bbcodeoff' => $bbcodeoff,
    301. 

  301. 		));
    302. 

  302. 		showmessage('postappend_add_succeed', "forum.php?mod=viewthread&tid=$post[tid]&pid=$post[pid]&page=$_GET[page]&extra=$_GET[extra]#pid$post[pid]", array('tid' => $post['tid'], 'pid' => $post['pid']));
    303. 

  303. 	} else {
    304. 

  304. 		include template('forum/postappend');
    305. 

  305. 	}
    306. 

  306. 

  307. } elseif($_GET['action'] == 'pubsave') {
    308. 

  308. 

  309. 	$return = threadpubsave($_G['tid']);
    310. 

  310. 	if($return > 0) {
    311. 

  311. 		showmessage('post_newthread_succeed', dreferer(), array('coverimg' => ''));
    312. 

  312. 	} elseif($return == -1) {
    313. 

  313. 		showmessage('post_newthread_mod_succeed', dreferer(), array('coverimg' => ''));
    314. 

  314. 	} elseif($return == -2) {
    315. 

  315. 		showmessage('post_reply_mod_succeed', dreferer());
    316. 

  316. 	} else {
    317. 

  317. 		showmessage('thread_nonexistence');
    318. 

  318. 	}
    319. 

  319. 

  320. } elseif($_GET['action'] == 'loadsave') {
    321. 

  321. 

  322. 	$message = '&nbsp;';
    323. 

  323. 	$savepost = C::t('forum_post')->fetch(0, $_GET['pid']);
    324. 

  324. 	if($savepost) {
    325. 

  325. 		$message = $savepost['message'];
    326. 

  326. 		if($_GET['type']) {
    327. 

  327. 			require_once libfile('function/discuzcode');
    328. 

  328. 			$message = discuzcode($message, $savepost['smileyoff'], $savepost['bbcodeoff'], $savepost['htmlon']);
    329. 

  329. 		}
    330. 

  330. 		$message = $message ? $message : '&nbsp;';
    331. 

  331. 	}
    332. 

  332. 	include template('common/header_ajax');
    333. 

  333. 	echo $message;
    334. 

  334. 	include template('common/footer_ajax');
    335. 

  335. 	exit;
    336. 

  336. 

  337. } elseif($_GET['action'] == 'replynotice') {
    338. 

  338. 	$tid = intval($_GET['tid']);
    339. 

  339. 	$status = $_GET['op'] == 'ignore' ? 0 : 1;
    340. 

  340. 	if(!empty($tid)) {
    341. 

  341. 		$thread = C::t('forum_thread')->fetch_by_tid_displayorder($tid, 0);
    342. 

  342. 		if($thread['authorid'] == $_G['uid']) {
    343. 

  343. 			$thread['status'] = setstatus(6, $status, $thread['status']);
    344. 

  344. 			C::t('forum_thread')->update($tid, array('status'=>$thread['status']), true);
    345. 

  345. 			showmessage('replynotice_success_'.$status);
    346. 

  346. 		}
    347. 

  347. 	}
    348. 

  348. 	showmessage('replynotice_error', 'forum.php?mod=viewthread&tid='.$tid);
    349. 

  349. 

  350. } elseif($_GET['action'] == 'removeindexheats') {
    351. 

  351. 

  352. 	if($_G['adminid'] != 1) {
    353. 

  353. 		showmessage('no_privilege_indexheats');
    354. 

  354. 	}
    355. 

  355. 	C::t('forum_thread')->update($_G['tid'], array('heats'=>0));
    356. 

  356. 	require_once libfile('function/cache');
    357. 

  357. 	updatecache('heats');
    358. 

  358. 	dheader('Location: '.dreferer());
    359. 

  359. 

  360. } elseif($_GET['action'] == 'showdarkroom') {
    361. 

  361. 

  362. 	include_once libfile('class/member');
    363. 

  363. 	if($_G['setting']['darkroom']) {
    364. 

  364. 		$limit = $_G['tpp'];
    365. 

  365. 		$cid = $_GET['cid'] ? dintval($_GET['cid']) : 0;
    366. 

  366. 		$crimelist = array();
    367. 

  367. 		$i = 0;
    368. 

  368. 		foreach(C::t('common_member_crime')->fetch_all_by_cid($cid, array(4, 5), $limit) as $crime) {
    369. 

  369. 			$i++;
    370. 

  370. 			$cid = $crime['cid'];
    371. 

  371. 			if(isset($crimelist[$crime['uid']])) {
    372. 

  372. 				continue;
    373. 

  373. 			}
    374. 

  374. 			$crime['action'] = lang('forum/template', crime_action_ctl::$actions[$crime['action']]);
    375. 

  375. 			$crime['dateline'] = dgmdate($crime['dateline'], 'u');
    376. 

  376. 			$crimelist[$crime['uid']] = $crime;
    377. 

  377. 		}
    378. 

  378. 		if($crimelist && $i == $limit) {
    379. 

  379. 			$dataexist = 1;
    380. 

  380. 		} else {
    381. 

  381. 			$dataexist = 0;
    382. 

  382. 		}
    383. 

  383. 		foreach(C::t('common_member')->fetch_all(array_keys($crimelist)) as $uid => $user) {
    384. 

  384. 			if($user['groupid'] == 4 || $user['groupid'] == 5) {
    385. 

  385. 				$crimelist[$uid]['username'] = $user['username'];
    386. 

  386. 				$crimelist[$uid]['groupexpiry'] = $user['groupexpiry'] ? dgmdate($user['groupexpiry'], 'u') : lang('forum/misc', 'never_expired');
    387. 

  387. 			} else {
    388. 

  388. 				unset($crimelist[$uid]);
    389. 

  389. 			}
    390. 

  390. 		}
    391. 

  391. 		if($_GET['ajaxdata'] === 'json') {
    392. 

  392. 			showmessage(array('dataexist' => $dataexist, 'cid' => $cid), '', $crimelist);
    393. 

  393. 		} else {
    394. 

  394. 			include_once template("forum/darkroom");
    395. 

  395. 		}
    396. 

  396. 		exit;
    397. 

  397. 	}
    398. 

  398. 	showmessage('undefined_action');
    399. 

  399. } elseif($_GET['action'] == 'shortcut') {
    400. 

  400. 

  401. 	if($_GET['type'] == 'ico') {
    402. 

  402. 		$shortcut = @readfile(DISCUZ_ROOT.'favicon.ico');
    403. 

  403. 		$filename = 'favicon.ico';
    404. 

  404. 	} else {
    405. 

  405. 		$shortcut = '[InternetShortcut]
    406. 

  406. URL='.$_G['siteurl'].'
    407. 

  407. IconFile='.$_G['siteurl'].'favicon.ico
    408. 

  408. IconIndex=1
    409. 

  409. ';
    410. 

  410. 		$filename = $_G['setting']['bbname'].'.url';
    411. 

  411. 	}
    412. 

  412. 

  413. 	if(!strexists($_SERVER['HTTP_USER_AGENT'], 'MSIE')) {
    414. 

  414. 		$filename = diconv($filename, CHARSET, 'UTF-8');
    415. 

  415. 	} else {
    416. 

  416. 		$filename = diconv($filename, CHARSET, 'GBK');
    417. 

  417. 	}
    418. 

  418. 	dheader('Content-type: application/octet-stream');
    419. 

  419. 	dheader('Content-Disposition: attachment; filename="'.$filename.'"');
    420. 

  420. 	echo $shortcut;
    421. 

  421. 	exit;
    422. 

  422. } elseif($_GET['action'] == 'livelastpost') {
    423. 

  423. 	$fid = dintval($_GET['fid']);
    424. 

  424. 	$forum = C::t('forum_forumfield')->fetch($fid);
    425. 

  425. 	$livetid = $forum['livetid'];
    426. 

  426. 	$postlist = array();
    427. 

  427. 	if($livetid) {
    428. 

  428. 		$thread = C::t('forum_thread')->fetch($livetid);
    429. 

  429. 		$postlist['count'] = $thread['replies'];
    430. 

  430. 		$postarr = C::t('forum_post')->fetch_all_by_tid('tid:'.$livetid, $livetid, true, 'DESC', 20);
    431. 

  431. 		ksort($postarr);
    432. 

  432. 		foreach($postarr as $post) {
    433. 

  433. 			if($post['first'] == 1 || getstatus($post['status'], 1)) {
    434. 

  434. 				continue;
    435. 

  435. 			}
    436. 

  436. 			$contentarr = array(
    437. 

  437. 				'authorid' => !$post['anonymous'] ? $post['authorid'] : '',
    438. 

  438. 				'author' => !$post['anonymous'] ? $post['author'] : lang('forum/misc', 'anonymous'),
    439. 

  439. 				'message' => str_replace("\r\n", '<br>', messagecutstr($post['message'])),
    440. 

  440. 				'dateline' => dgmdate($post['dateline'], 'u'),
    441. 

  441. 				'avatar' => !$post['anonymous'] ? avatar($post['authorid'], 'small') : '',
    442. 

  442. 			);
    443. 

  443. 			$postlist['list'][$post['pid']] = $contentarr;
    444. 

  444. 		}
    445. 

  445. 	}
    446. 

  446. 

  447. 	showmessage('', '', $postlist);
    448. 

  448. 	exit;
    449. 

  449. 

  450. } else {
    451. 

  451. 

  452. 	if(empty($_G['forum']['allowview'])) {
    453. 

  453. 		if(!$_G['forum']['viewperm'] && !$_G['group']['readaccess']) {
    454. 

  454. 			showmessage('group_nopermission', NULL, array('grouptitle' => $_G['group']['grouptitle']), array('login' => 1));
    455. 

  455. 		} elseif($_G['forum']['viewperm'] && !forumperm($_G['forum']['viewperm'])) {
    456. 

  456. 			showmessage('forum_nopermission', NULL, array($_G['group']['grouptitle']), array('login' => 1));
    457. 

  457. 		}
    458. 

  458. 	}
    459. 

  459. 

  460. 	$thread = C::t('forum_thread')->fetch($_G['tid']);
    461. 

  461. 	if(!($thread['displayorder']>=0 || $thread['displayorder']==-4 && $thread['authorid']==$_G['uid'])) {
    462. 

  462. 		$thread = array();
    463. 

  463. 	}
    464. 

  464. 	if($thread['readperm'] && $thread['readperm'] > $_G['group']['readaccess'] && !$_G['forum']['ismoderator'] && $thread['authorid'] != $_G['uid']) {
    465. 

  465. 		showmessage('thread_nopermission', NULL, array('readperm' => $thread['readperm']), array('login' => 1));
    466. 

  466. 	}
    467. 

  467. 

  468. 	if($_G['forum']['password'] && $_G['forum']['password'] != $_G['cookie']['fidpw'.$_G['fid']]) {
    469. 

  469. 		showmessage('forum_passwd', "forum.php?mod=forumdisplay&fid=$_G[fid]");
    470. 

  470. 	}
    471. 

  471. 

  472. 

  473. 	if(!$thread) {
    474. 

  474. 		showmessage('thread_nonexistence');
    475. 

  475. 	}
    476. 

  476. 

  477. 	if($_G['forum']['type'] == 'forum') {
    478. 

  478. 		$navigation = '<a href="forum.php">'.$_G['setting']['navs'][2]['navname']."</a> <em>&rsaquo;</em> <a href=\"forum.php?mod=forumdisplay&fid=$_G[fid]\">".$_G['forum']['name']."</a> <em>&rsaquo;</em> <a href=\"forum.php?mod=viewthread&tid=$_G[tid]\">$thread[subject]</a> ";
    479. 

  479. 		$navtitle = strip_tags($_G['forum']['name']).' - '.$thread['subject'];
    480. 

  480. 	} elseif($_G['forum']['type'] == 'sub') {
    481. 

  481. 		$fup = C::t('forum_forum')->fetch($_G['forum']['fup']);
    482. 

  482. 		$navigation = '<a href="forum.php">'.$_G['setting']['navs'][2]['navname']."</a> <em>&rsaquo;</em> <a href=\"forum.php?mod=forumdisplay&fid=$fup[fid]\">$fup[name]</a> &raquo; <a href=\"forum.php?mod=forumdisplay&fid=$_G[fid]\">".$_G['forum']['name']."</a> <em>&rsaquo;</em> <a href=\"forum.php?mod=viewthread&tid=$_G[tid]\">$thread[subject]</a> ";
    483. 

  483. 		$navtitle = strip_tags($fup['name']).' - '.strip_tags($_G['forum']['name']).' - '.$thread['subject'];
    484. 

  484. 	}
    485. 

  485. 

  486. }
    487. 

  487. 

  488. if($_GET['action'] == 'votepoll' && submitcheck('pollsubmit', 1)) {
    489. 

  489. 

  490. 	if(!$_G['group']['allowvote']) {
    491. 

  491. 		showmessage('group_nopermission', NULL, array('grouptitle' => $_G['group']['grouptitle']), array('login' => 1));
    492. 

  492. 	} elseif(!empty($thread['closed'])) {
    493. 

  493. 		showmessage('thread_poll_closed', NULL, array(), array('login' => 1));
    494. 

  494. 	} elseif(empty($_GET['pollanswers'])) {
    495. 

  495. 		showmessage('thread_poll_invalid', NULL, array(), array('login' => 1));
    496. 

  496. 	}
    497. 

  497. 

  498. 	$pollarray = C::t('forum_poll')->fetch($_G['tid']);
    499. 

  499. 	$overt = $pollarray['overt'];
    500. 

  500. 	if(!$pollarray) {
    501. 

  501. 		showmessage('poll_not_found');
    502. 

  502. 	} elseif($pollarray['expiration'] && $pollarray['expiration'] < TIMESTAMP) {
    503. 

  503. 		showmessage('poll_overdue', NULL, array(), array('login' => 1));
    504. 

  504. 	} elseif($pollarray['maxchoices'] && $pollarray['maxchoices'] < count($_GET['pollanswers'])) {
    505. 

  505. 		showmessage('poll_choose_most', NULL, array('maxchoices' => $pollarray['maxchoices']), array('login' => 1));
    506. 

  506. 	}
    507. 

  507. 

  508. 	$voterids = $_G['uid'] ? $_G['uid'] : $_G['clientip'];
    509. 

  509. 

  510. 	$polloptionid = array();
    511. 

  511. 	$query = C::t('forum_polloption')->fetch_all_by_tid($_G['tid']);
    512. 

  512. 	foreach($query as $pollarray) {
    513. 

  513. 		if(strexists("\t".$pollarray['voterids']."\t", "\t".$voterids."\t")) {
    514. 

  514. 			showmessage('thread_poll_voted', NULL, array(), array('login' => 1));
    515. 

  515. 		}
    516. 

  516. 		$polloptionid[] = $pollarray['polloptionid'];
    517. 

  517. 	}
    518. 

  518. 

  519. 	$polloptionids = '';
    520. 

  520. 	foreach($_GET['pollanswers'] as $key => $id) {
    521. 

  521. 		if(!in_array($id, $polloptionid)) {
    522. 

  522. 			showmessage('parameters_error');
    523. 

  523. 		}
    524. 

  524. 		unset($polloptionid[$key]);
    525. 

  525. 		$polloptionids[] = $id;
    526. 

  526. 	}
    527. 

  527. 

  528. 	C::t('forum_polloption')->update_vote($polloptionids, $voterids."\t", 1);
    529. 

  529. 	C::t('forum_thread')->update($_G['tid'], array('lastpost'=>$_G['timestamp']), true);
    530. 

  530. 	C::t('forum_poll')->update_vote($_G['tid']);
    531. 

  531. 	C::t('forum_pollvoter')->insert(array(
    532. 

  532. 		'tid' => $_G['tid'],
    533. 

  533. 		'uid' => $_G['uid'],
    534. 

  534. 		'username' => $_G['username'],
    535. 

  535. 		'options' => implode("\t", $_GET['pollanswers']),
    536. 

  536. 		'dateline' => $_G['timestamp'],
    537. 

  537. 		));
    538. 

  538. 	updatecreditbyaction('joinpoll');
    539. 

  539. 

  540. 	$space = array();
    541. 

  541. 	space_merge($space, 'field_home');
    542. 

  542. 

  543. 	if($overt && !empty($space['privacy']['feed']['newreply'])) {
    544. 

  544. 		$feed['icon'] = 'poll';
    545. 

  545. 		$feed['title_template'] = 'feed_thread_votepoll_title';
    546. 

  546. 		$feed['title_data'] = array(
    547. 

  547. 			'subject' => "<a href=\"forum.php?mod=viewthread&tid=$_G[tid]\">$thread[subject]</a>",
    548. 

  548. 			'author' => "<a href=\"home.php?mod=space&uid=$thread[authorid]\">$thread[author]</a>",
    549. 

  549. 			'hash_data' => "tid{$_G[tid]}"
    550. 

  550. 		);
    551. 

  551. 		$feed['id'] = $_G['tid'];
    552. 

  552. 		$feed['idtype'] = 'tid';
    553. 

  553. 		postfeed($feed);
    554. 

  554. 	}
    555. 

  555. 

  556. 	if(!empty($_G['inajax'])) {
    557. 

  557. 		showmessage('thread_poll_succeed', "forum.php?mod=viewthread&tid=$_G[tid]".($_GET['from'] ? '&from='.$_GET['from'] : ''), array(), array('location' => true));
    558. 

  558. 	} else {
    559. 

  559. 		showmessage('thread_poll_succeed', "forum.php?mod=viewthread&tid=$_G[tid]".($_GET['from'] ? '&from='.$_GET['from'] : ''));
    560. 

  560. 	}
    561. 

  561. 

  562. } elseif($_GET['action'] == 'viewvote') {
    563. 

  563. 	if($_G[forum_thread][special] != 1) {
    564. 

  564. 		showmessage('thread_poll_none');
    565. 

  565. 	}
    566. 

  566. 	require_once libfile('function/post');
    567. 

  567. 	$polloptionid = is_numeric($_GET['polloptionid']) ? $_GET['polloptionid'] : '';
    568. 

  568. 

  569. 	$page = intval($_GET['page']) ? intval($_GET['page']) : 1;
    570. 

  570. 	$perpage = 100;
    571. 

  571. 	$pollinfo = C::t('forum_poll')->fetch($_G['tid']);
    572. 

  572. 	$overt = $pollinfo['overt'];
    573. 

  573. 

  574. 	$polloptions = array();
    575. 

  575. 	$query = C::t('forum_polloption')->fetch_all_by_tid($_G['tid']);
    576. 

  576. 	foreach($query as $options) {
    577. 

  577. 		if(empty($polloptionid)) {
    578. 

  578. 			$polloptionid = $options['polloptionid'];
    579. 

  579. 		}
    580. 

  580. 		$options['polloption'] = preg_replace("/\[url=(https?){1}:\/\/([^\[\"']+?)\](.+?)\[\/url\]/i",
    581. 

  581. 			"<a href=\"\\1://\\2\" target=\"_blank\">\\3</a>", $options['polloption']);
    582. 

  582. 		$polloptions[] = $options;
    583. 

  583. 	}
    584. 

  584. 

  585. 	$arrvoterids = array();
    586. 

  586. 	if($overt || $_G['adminid'] == 1 || $thread['authorid'] == $_G['uid']) {
    587. 

  587. 		$polloptioninfo = C::t('forum_polloption')->fetch($polloptionid);
    588. 

  588. 		$voterids = $polloptioninfo['voterids'];
    589. 

  589. 		$arrvoterids = explode("\t", trim($voterids));
    590. 

  590. 	} else {
    591. 

  591. 		showmessage('thread_poll_nopermission');
    592. 

  592. 	}
    593. 

  593. 

  594. 	if(!empty($arrvoterids)) {
    595. 

  595. 		$count = count($arrvoterids);
    596. 

  596. 		$multi = $perpage * ($page - 1);
    597. 

  597. 		$multipage = multi($count, $perpage, $page, "forum.php?mod=misc&action=viewvote&tid=$_G[tid]&polloptionid=$polloptionid".( $_GET[handlekey] ? "&handlekey=".$_GET[handlekey] : '' ));
    598. 

  598. 		$arrvoterids = array_slice($arrvoterids, $multi, $perpage);
    599. 

  599. 	}
    600. 

  600. 	$voterlist = $voter = array();
    601. 

  601. 	if($arrvoterids) {
    602. 

  602. 		$voterlist = C::t('common_member')->fetch_all($arrvoterids);
    603. 

  603. 	}
    604. 

  604. 	include template('forum/viewthread_poll_voter');
    605. 

  605. 

  606. } elseif($_GET['action'] == 'rate' && $_GET['pid']) {
    607. 

  607. 

  608. 	if($_GET['showratetip']) {
    609. 

  609. 		include template('forum/rate');
    610. 

  610. 		exit();
    611. 

  611. 	}
    612. 

  612. 

  613. 	if(!$_G['inajax']) {
    614. 

  614. 		showmessage('undefined_action');
    615. 

  615. 	}
    616. 

  616. 	if(!$_G['group']['raterange']) {
    617. 

  617. 		showmessage('group_nopermission', NULL, array('grouptitle' => $_G['group']['grouptitle']), array('login' => 1));
    618. 

  618. 	} elseif($_G['setting']['modratelimit'] && $_G['adminid'] == 3 && !$_G['forum']['ismoderator']) {
    619. 

  619. 		showmessage('thread_rate_moderator_invalid', NULL);
    620. 

  620. 	}
    621. 

  621. 	$reasonpmcheck = $_G['group']['reasonpm'] == 2 || $_G['group']['reasonpm'] == 3 ? 'checked="checked" disabled' : '';
    622. 

  622. 	if(($_G['group']['reasonpm'] == 2 || $_G['group']['reasonpm'] == 3) || !empty($_GET['sendreasonpm'])) {
    623. 

  623. 		$forumname = strip_tags($_G['forum']['name']);
    624. 

  624. 		$sendreasonpm = 1;
    625. 

  625. 	} else {
    626. 

  626. 		$sendreasonpm = 0;
    627. 

  627. 	}
    628. 

  628. 

  629. 	$post = C::t('forum_post')->fetch('tid:'.$_G['tid'], $_GET['pid']);
    630. 

  630. 	if($post['invisible'] != 0 || $post['authorid'] == 0) {
    631. 

  631. 		$post = array();
    632. 

  632. 	}
    633. 

  633. 

  634. 	if(!$post || $post['tid'] != $thread['tid'] || !$post['authorid']) {
    635. 

  635. 		showmessage('rate_post_error');
    636. 

  636. 	} elseif(!$_G['forum']['ismoderator'] && $_G['setting']['karmaratelimit'] && TIMESTAMP - $post['dateline'] > $_G['setting']['karmaratelimit'] * 3600) {
    637. 

  637. 		showmessage('thread_rate_timelimit', NULL, array('karmaratelimit' => $_G['setting']['karmaratelimit']));
    638. 

  638. 	} elseif($post['authorid'] == $_G['uid'] || $post['tid'] != $_G['tid']) {
    639. 

  639. 		showmessage('thread_rate_member_invalid', NULL);
    640. 

  640. 	} elseif($post['anonymous']) {
    641. 

  641. 		showmessage('thread_rate_anonymous', NULL);
    642. 

  642. 	} elseif($post['status'] & 1) {
    643. 

  643. 		showmessage('thread_rate_banned', NULL);
    644. 

  644. 	}
    645. 

  645. 

  646. 	$allowrate = TRUE;
    647. 

  647. 	if(!$_G['setting']['dupkarmarate']) {
    648. 

  648. 		if(C::t('forum_ratelog')->count_by_uid_pid($_G['uid'], $_GET['pid'])) {
    649. 

  649. 			showmessage('thread_rate_duplicate', NULL);
    650. 

  650. 		}
    651. 

  651. 	}
    652. 

  652. 

  653. 	$page = intval($_GET['page']);
    654. 

  654. 

  655. 	require_once libfile('function/misc');
    656. 

  656. 

  657. 	$maxratetoday = getratingleft($_G['group']['raterange']);
    658. 

  658. 

  659. 	if(!submitcheck('ratesubmit')) {
    660. 

  660. 		$referer = $_G['siteurl'].'forum.php?mod=viewthread&tid='.$_G['tid'].'&page='.$page.($_GET['from'] ? '&from='.$_GET['from'] : '').'#pid'.$_GET['pid'];
    661. 

  661. 		$ratelist = getratelist($_G['group']['raterange']);
    662. 

  662. 		include template('forum/rate');
    663. 

  663. 

  664. 	} else {
    665. 

  665. 

  666. 		$reason = checkreasonpm();
    667. 

  667. 		$rate = $ratetimes = 0;
    668. 

  668. 		$creditsarray = $sub_self_credit = array();
    669. 

  669. 		getuserprofile('extcredits1');
    670. 

  670. 		foreach($_G['group']['raterange'] as $id => $rating) {
    671. 

  671. 			$score = intval($_GET['score'.$id]);
    672. 

  672. 			if(isset($_G['setting']['extcredits'][$id]) && !empty($score)) {
    673. 

  673. 				if($rating['isself'] && (intval($_G['member']['extcredits'.$id]) - $score < 0)) {
    674. 

  674. 					showmessage('thread_rate_range_self_invalid', '', array('extcreditstitle' => $_G['setting']['extcredits'][$id]['title']));
    675. 

  675. 				}
    676. 

  676. 				if(abs($score) <= $maxratetoday[$id]) {
    677. 

  677. 					if($score > $rating['max'] || $score < $rating['min']) {
    678. 

  678. 						showmessage('thread_rate_range_invalid');
    679. 

  679. 					} else {
    680. 

  680. 						$creditsarray[$id] = $score;
    681. 

  681. 						if($rating['isself']) {
    682. 

  682. 							$sub_self_credit[$id] = -abs($score);
    683. 

  683. 						}
    684. 

  684. 						$rate += $score;
    685. 

  685. 						$ratetimes += ceil(max(abs($rating['min']), abs($rating['max'])) / 5);
    686. 

  686. 					}
    687. 

  687. 				} else {
    688. 

  688. 					showmessage('thread_rate_ctrl');
    689. 

  689. 				}
    690. 

  690. 			}
    691. 

  691. 		}
    692. 

  692. 

  693. 		if(!$creditsarray) {
    694. 

  694. 			showmessage('thread_rate_range_invalid', NULL);
    695. 

  695. 		}
    696. 

  696. 

  697. 		updatemembercount($post['authorid'], $creditsarray, 1, 'PRC', $_GET['pid']);
    698. 

  698. 

  699. 		if(!empty($sub_self_credit)) {
    700. 

  700. 			updatemembercount($_G['uid'], $sub_self_credit, 1, 'RSC', $_GET['pid']);
    701. 

  701. 		}
    702. 

  702. 		C::t('forum_post')->increase_rate_by_pid('tid:'.$_G['tid'], $_GET['pid'], $rate, $ratetimes);
    703. 

  703. 		if($post['first']) {
    704. 

  704. 			$threadrate = intval(@($post['rate'] + $rate) / abs($post['rate'] + $rate));
    705. 

  705. 			C::t('forum_thread')->update($_G['tid'], array('rate'=>$threadrate));
    706. 

  706. 

  707. 		}
    708. 

  708. 

  709. 		require_once libfile('function/discuzcode');
    710. 

  710. 		$sqlvalues = $comma = '';
    711. 

  711. 		$sqlreason = censor(trim($_GET['reason']));
    712. 

  712. 		$sqlreason = cutstr(dhtmlspecialchars($sqlreason), 40, '.');
    713. 

  713. 		foreach($creditsarray as $id => $addcredits) {
    714. 

  714. 			$insertarr = array(
    715. 

  715. 				'pid' => $_GET['pid'],
    716. 

  716. 				'uid' => $_G['uid'],
    717. 

  717. 				'username' => $_G['username'],
    718. 

  718. 				'extcredits' => $id,
    719. 

  719. 				'dateline' => $_G['timestamp'],
    720. 

  720. 				'score' => $addcredits,
    721. 

  721. 				'reason' => $sqlreason
    722. 

  722. 			);
    723. 

  723. 			C::t('forum_ratelog')->insert($insertarr);
    724. 

  724. 		}
    725. 

  725. 

  726. 		include_once libfile('function/post');
    727. 

  727. 		$_G['forum']['threadcaches'] && @deletethreadcaches($_G['tid']);
    728. 

  728. 

  729. 		$reason = dhtmlspecialchars(censor(trim($reason)));
    730. 

  730. 		if($sendreasonpm) {
    731. 

  731. 			$ratescore = $slash = '';
    732. 

  732. 			foreach($creditsarray as $id => $addcredits) {
    733. 

  733. 				$ratescore .= $slash.$_G['setting']['extcredits'][$id]['title'].' '.($addcredits > 0 ? '+'.$addcredits : $addcredits).' '.$_G['setting']['extcredits'][$id]['unit'];
    734. 

  734. 				$slash = ' / ';
    735. 

  735. 			}
    736. 

  736. 			sendreasonpm($post, 'rate_reason', array(
    737. 

  737. 				'tid' => $thread['tid'],
    738. 

  738. 				'pid' => $_GET['pid'],
    739. 

  739. 				'subject' => $thread['subject'],
    740. 

  740. 				'ratescore' => $ratescore,
    741. 

  741. 				'reason' => $reason,
    742. 

  742. 				'from_id' => 0,
    743. 

  743. 				'from_idtype' => 'rate'
    744. 

  744. 			));
    745. 

  745. 		}
    746. 

  746. 

  747. 		$logs = array();
    748. 

  748. 		foreach($creditsarray as $id => $addcredits) {
    749. 

  749. 			$logs[] = dhtmlspecialchars("$_G[timestamp]\t{$_G[member][username]}\t$_G[adminid]\t$post[author]\t$id\t$addcredits\t$_G[tid]\t$thread[subject]\t$reason");
    750. 

  750. 		}
    751. 

  751. 		update_threadpartake($post['tid']);
    752. 

  752. 		C::t('forum_postcache')->delete($_GET['pid']);
    753. 

  753. 		writelog('ratelog', $logs);
    754. 

  754. 

  755. 		showmessage('thread_rate_succeed', dreferer());
    756. 

  756. 	}
    757. 

  757. } elseif($_GET['action'] == 'removerate' && $_GET['pid']) {
    758. 

  758. 

  759. 	if(!$_G['forum']['ismoderator'] || !$_G['group']['raterange']) {
    760. 

  760. 		showmessage('no_privilege_removerate');
    761. 

  761. 	}
    762. 

  762. 

  763. 	$reasonpmcheck = $_G['group']['reasonpm'] == 2 || $_G['group']['reasonpm'] == 3 ? 'checked="checked" disabled' : '';
    764. 

  764. 	if(($_G['group']['reasonpm'] == 2 || $_G['group']['reasonpm'] == 3) || !empty($_GET['sendreasonpm'])) {
    765. 

  765. 		$forumname = strip_tags($_G['forum']['name']);
    766. 

  766. 		$sendreasonpm = 1;
    767. 

  767. 	} else {
    768. 

  768. 		$sendreasonpm = 0;
    769. 

  769. 	}
    770. 

  770. 

  771. 	foreach($_G['group']['raterange'] as $id => $rating) {
    772. 

  772. 		$maxratetoday[$id] = $rating['mrpd'];
    773. 

  773. 	}
    774. 

  774. 	$post = C::t('forum_post')->fetch('tid:'.$_G['tid'], $_GET['pid']);
    775. 

  775. 	if($post['invisible'] != 0 || $post['authorid'] == 0) {
    776. 

  776. 		$post = array();
    777. 

  777. 	}
    778. 

  778. 

  779. 	if(!$post || $post['tid'] != $thread['tid'] || !$post['authorid']) {
    780. 

  780. 		showmessage('rate_post_error');
    781. 

  781. 	}
    782. 

  782. 

  783. 	require_once libfile('function/misc');
    784. 

  784. 

  785. 	if(!submitcheck('ratesubmit')) {
    786. 

  786. 

  787. 		$referer = $_G['siteurl'].'forum.php?mod=viewthread&tid='.$_G['tid'].'&page='.$page.($_GET['from'] ? '&from='.$_GET['from'] : '').'#pid'.$_GET['pid'];
    788. 

  788. 		$ratelogs = array();
    789. 

  789. 

  790. 		foreach(C::t('forum_ratelog')->fetch_all_by_pid($_GET['pid'], 'ASC') as $ratelog) {
    791. 

  791. 			$ratelog['dbdateline'] = $ratelog['dateline'];
    792. 

  792. 			$ratelog['dateline'] = dgmdate($ratelog['dateline'], 'u');
    793. 

  793. 			$ratelog['scoreview'] = $ratelog['score'] > 0 ? '+'.$ratelog['score'] : $ratelog['score'];
    794. 

  794. 			$ratelogs[] = $ratelog;
    795. 

  795. 		}
    796. 

  796. 

  797. 		include template('forum/rate');
    798. 

  798. 

  799. 	} else {
    800. 

  800. 

  801. 		$reason = checkreasonpm();
    802. 

  802. 

  803. 		if(!empty($_GET['logidarray'])) {
    804. 

  804. 			if($sendreasonpm) {
    805. 

  805. 				$ratescore = $slash = '';
    806. 

  806. 			}
    807. 

  807. 

  808. 			$rate = $ratetimes = 0;
    809. 

  809. 			$logs = array();
    810. 

  810. 			foreach(C::t('forum_ratelog')->fetch_all_by_pid($_GET['pid']) as $ratelog) {
    811. 

  811. 				if(in_array($ratelog['uid'].' '.$ratelog['extcredits'].' '.$ratelog['dateline'], $_GET['logidarray'])) {
    812. 

  812. 					$rate += $ratelog['score'] = -$ratelog['score'];
    813. 

  813. 					$ratetimes += ceil(max(abs($rating['min']), abs($rating['max'])) / 5);
    814. 

  814. 					updatemembercount($post['authorid'], array($ratelog['extcredits'] => $ratelog['score']));
    815. 

  815. 					C::t('common_credit_log')->delete_by_uid_operation_relatedid($post['authorid'], 'PRC', $_GET['pid']);
    816. 

  816. 					C::t('forum_ratelog')->delete_by_pid_uid_extcredits_dateline($_GET['pid'], $ratelog['uid'], $ratelog['extcredits'], $ratelog['dateline']);
    817. 

  817. 					$logs[] = dhtmlspecialchars("$_G[timestamp]\t{$_G[member][username]}\t$_G[adminid]\t$ratelog[username]\t$ratelog[extcredits]\t$ratelog[score]\t$_G[tid]\t$thread[subject]\t$reason\tD");
    818. 

  818. 					if($sendreasonpm) {
    819. 

  819. 						$ratescore .= $slash.$_G['setting']['extcredits'][$ratelog['extcredits']]['title'].' '.($ratelog['score'] > 0 ? '+'.$ratelog['score'] : $ratelog['score']).' '.$_G['setting']['extcredits'][$ratelog['extcredits']]['unit'];
    820. 

  820. 						$slash = ' / ';
    821. 

  821. 					}
    822. 

  822. 				}
    823. 

  823. 			}
    824. 

  824. 			C::t('forum_postcache')->delete($_GET['pid']);
    825. 

  825. 			writelog('ratelog', $logs);
    826. 

  826. 

  827. 			if($sendreasonpm) {
    828. 

  828. 				sendreasonpm($post, 'rate_removereason', array(
    829. 

  829. 					'tid' => $thread['tid'],
    830. 

  830. 					'pid' => $_GET['pid'],
    831. 

  831. 					'subject' => $thread['subject'],
    832. 

  832. 					'ratescore' => $ratescore,
    833. 

  833. 					'reason' => $reason,
    834. 

  834. 					'from_id' => 0,
    835. 

  835. 					'from_idtype' => 'removerate'
    836. 

  836. 				));
    837. 

  837. 			}
    838. 

  838. 			C::t('forum_post')->increase_rate_by_pid('tid:'.$_G['tid'], $_GET['pid'], $rate, $ratetimes);
    839. 

  839. 			if($post['first']) {
    840. 

  840. 				$threadrate = @intval(@($post['rate'] + $rate) / abs($post['rate'] + $rate));
    841. 

  841. 				C::t('forum_thread')->update($_G['tid'], array('rate'=>$threadrate));
    842. 

  842. 			}
    843. 

  843. 

  844. 		}
    845. 

  845. 

  846. 		showmessage('thread_rate_removesucceed', dreferer());
    847. 

  847. 

  848. 	}
    849. 

  849. 

  850. } elseif($_GET['action'] == 'viewratings' && $_GET['pid']) {
    851. 

  851. 

  852. 	$loglist = $logcount = array();
    853. 

  853. 

  854. 	$post = C::t('forum_post')->fetch('tid:'.$_G['tid'], $_GET['pid']);
    855. 

  855. 	if($post['invisible'] != 0) {
    856. 

  856. 		$post = array();
    857. 

  857. 	}
    858. 

  858. 	if($post) {
    859. 

  859. 		$loglist = C::t('forum_ratelog')->fetch_all_by_pid($_GET['pid']);
    860. 

  860. 	}
    861. 

  861. 	if(empty($post) || empty($loglist)) {
    862. 

  862. 		showmessage('thread_rate_log_nonexistence');
    863. 

  863. 	}
    864. 

  864. 	if($post['tid'] != $thread['tid']) {
    865. 

  865. 		showmessage('targetpost_donotbelongto_thisthread');
    866. 

  866. 	}
    867. 

  867. 	if($_G['setting']['bannedmessages']) {
    868. 

  868. 		$postmember = getuserbyuid($post['authorid']);
    869. 

  869. 		$post['groupid'] = $postmember['groupid'];
    870. 

  870. 	}
    871. 

  871. 

  872. 	foreach($loglist as $k => $log) {
    873. 

  873. 		$logcount[$log['extcredits']] += $log['score'];
    874. 

  874. 		$log['dateline'] = dgmdate($log['dateline'], 'u');
    875. 

  875. 		$log['score'] = $log['score'] > 0 ? '+'.$log['score'] : $log['score'];
    876. 

  876. 		$log['reason'] = dhtmlspecialchars($log['reason']);
    877. 

  877. 		$loglist[$k] = $log;
    878. 

  878. 	}
    879. 

  879. 

  880. 	include template('forum/rate_view');
    881. 

  881. 

  882. } elseif($_GET['action'] == 'viewwarning' && $_GET['uid']) {
    883. 

  883. 

  884. 	$warnuser = getuserbyuid($_GET['uid']);
    885. 

  885. 	$warnuser = $warnuser['username'];
    886. 

  886. 	if(!$warnuser) {
    887. 

  887. 		showmessage('member_no_found');
    888. 

  888. 	}
    889. 

  889. 

  890. 	$warnings = array();
    891. 

  891. 	$warnings = C::t('forum_warning')->fetch_all_by_authorid($_GET['uid']);
    892. 

  892. 

  893. 	if(!$warnings) {
    894. 

  894. 		showmessage('thread_warning_nonexistence');
    895. 

  895. 	}
    896. 

  896. 

  897. 	foreach($warnings as $key => $warning) {
    898. 

  898. 		$warning['dateline'] = dgmdate($warning['dateline'], 'u');
    899. 

  899. 		$warning['reason'] = dhtmlspecialchars($warning['reason']);
    900. 

  900. 		$warnings[$key] = $warning;
    901. 

  901. 	}
    902. 

  902. 	$warnnum = count($warnings);
    903. 

  903. 

  904. 	include template('forum/warn_view');
    905. 

  905. 

  906. } elseif($_GET['action'] == 'pay') {
    907. 

  907. 

  908. 	if(!isset($_G['setting']['extcredits'][$_G['setting']['creditstransextra'][1]])) {
    909. 

  909. 		showmessage('credits_transaction_disabled');
    910. 

  910. 	} elseif($thread['price'] <= 0 || $thread['special'] <> 0) {
    911. 

  911. 		showmessage('thread_pay_error', NULL);
    912. 

  912. 	} elseif(!$_G['uid']) {
    913. 

  913. 		showmessage('group_nopermission', NULL, array('grouptitle' => $_G['group']['grouptitle']), array('login' => 1));
    914. 

  914. 	}
    915. 

  915. 

  916. 	if(($balance = getuserprofile('extcredits'.$_G['setting']['creditstransextra'][1]) - $thread['price']) < ($minbalance = 0)) {
    917. 

  917. 		if($_G['setting']['creditstrans'][0] == $_G['setting']['creditstransextra'][1]) {
    918. 

  918. 			showmessage('credits_balance_insufficient_and_charge', '', array('title' => $_G['setting']['extcredits'][$_G['setting']['creditstransextra'][1]]['title'], 'minbalance' => $thread['price']));
    919. 

  919. 		} else {
    920. 

  920. 			showmessage('credits_balance_insufficient', '', array('title' => $_G['setting']['extcredits'][$_G['setting']['creditstransextra'][1]]['title'], 'minbalance' => $thread['price']));
    921. 

  921. 		}
    922. 

  922. 	}
    923. 

  923. 

  924. 	if(C::t('common_credit_log')->count_by_uid_operation_relatedid($_G['uid'], 'BTC', $_G['tid'])) {
    925. 

  925. 		showmessage('credits_buy_thread', 'forum.php?mod=viewthread&tid='.$_G['tid'].($_GET['from'] ? '&from='.$_GET['from'] : ''));
    926. 

  926. 	}
    927. 

  927. 

  928. 	$thread['netprice'] = floor($thread['price'] * (1 - $_G['setting']['creditstax']));
    929. 

  929. 

  930. 	if(!submitcheck('paysubmit')) {
    931. 

  931. 

  932. 		include template('forum/pay');
    933. 

  933. 

  934. 	} else {
    935. 

  935. 

  936. 		$updateauthor = true;
    937. 

  937. 		$authorEarn = $thread['netprice'];
    938. 

  938. 		if($_G['setting']['maxincperthread'] > 0) {
    939. 

  939. 			$extcredit = 'extcredits'.$_G['setting']['creditstransextra'][1];
    940. 

  940. 			$log = C::t('common_credit_log')->count_credit_by_uid_operation_relatedid($thread['authorid'], 'STC', $_G['tid'], $_G['setting']['creditstransextra'][1]);
    941. 

  941. 			if($log >= $_G['setting']['maxincperthread']) {
    942. 

  942. 				$updateauthor = false;
    943. 

  943. 			} else {
    944. 

  944. 				$authorEarn = min($_G['setting']['maxincperthread'] - $log['credit'], $thread['netprice']);
    945. 

  945. 			}
    946. 

  946. 		}
    947. 

  947. 		if($updateauthor) {
    948. 

  948. 			updatemembercount($thread['authorid'], array($_G['setting']['creditstransextra'][1] => $authorEarn), 1, 'STC', $_G['tid']);
    949. 

  949. 		}
    950. 

  950. 		updatemembercount($_G['uid'], array($_G['setting']['creditstransextra'][1] => -$thread['price']), 1, 'BTC', $_G['tid']);
    951. 

  951. 

  952. 		showmessage('thread_pay_succeed', "forum.php?mod=viewthread&tid=$_G[tid]".($_GET['from'] ? '&from='.$_GET['from'] : ''));
    953. 

  953. 

  954. 	}
    955. 

  955. 

  956. } elseif($_GET['action'] == 'viewpayments') {
    957. 

  957. 	$extcreditname = 'extcredits'.$_G['setting']['creditstransextra'][1];
    958. 

  958. 	$loglist = array();
    959. 

  959. 	$logs = C::t('common_credit_log')->fetch_all_by_uid_operation_relatedid(0, 'BTC', $_G['tid']);
    960. 

  960. 	$luids = array();
    961. 

  961. 	foreach($logs as $log) {
    962. 

  962. 		$luids[$log['uid']] = $log['uid'];
    963. 

  963. 	}
    964. 

  964. 	$members = C::t('common_member')->fetch_all($luids);
    965. 

  965. 	foreach($logs as $log) {
    966. 

  966. 		$log['username'] = $members[$log['uid']]['username'];
    967. 

  967. 		$log['dateline'] = dgmdate($log['dateline'], 'u');
    968. 

  968. 		$log[$extcreditname] = abs($log[$extcreditname]);
    969. 

  969. 		$loglist[] = $log;
    970. 

  970. 	}
    971. 

  971. 	include template('forum/pay_view');
    972. 

  972. 

  973. } elseif($_GET['action'] == 'viewthreadmod' && $_G['tid']) {
    974. 

  974. 

  975. 	$modactioncode = lang('forum/modaction');
    976. 

  976. 	$loglist = array();
    977. 

  977. 

  978. 	foreach(C::t('forum_threadmod')->fetch_all_by_tid($_G['tid']) as $log) {
    979. 

  979. 		$log['dateline'] = dgmdate($log['dateline'], 'u');
    980. 

  980. 		$log['expiration'] = !empty($log['expiration']) ? dgmdate($log['expiration'], 'd') : '';
    981. 

  981. 		$log['status'] = empty($log['status']) ? 'style="text-decoration: line-through" disabled' : '';
    982. 

  982. 		if(!$modactioncode[$log['action']] && preg_match('/S(\d\d)/', $log['action'], $a) || $log['action'] == 'SPA') {
    983. 

  983. 			loadcache('stamps');
    984. 

  984. 			if($log['action'] == 'SPA') {
    985. 

  985. 				$log['action'] = 'SPA'.$log['stamp'];
    986. 

  986. 				$stampid = $log['stamp'];
    987. 

  987. 			} else {
    988. 

  988. 				$stampid = intval($a[1]);
    989. 

  989. 			}
    990. 

  990. 			$modactioncode[$log['action']] = $modactioncode['SPA'].' '.$_G['cache']['stamps'][$stampid]['text'];
    991. 

  991. 		} elseif(preg_match('/L(\d\d)/', $log['action'], $a)) {
    992. 

  992. 			loadcache('stamps');
    993. 

  993. 			$modactioncode[$log['action']] = $modactioncode['SLA'].' '.$_G['cache']['stamps'][intval($a[1])]['text'];
    994. 

  994. 		}
    995. 

  995. 		if($log['magicid']) {
    996. 

  996. 			loadcache('magics');
    997. 

  997. 			$log['magicname'] = $_G['cache']['magics'][$log['magicid']]['name'];
    998. 

  998. 		}
    999. 

  999. 		$loglist[] = $log;
    1000. 

  1000. 	}
    1001. 

  1001. 

  1002. 	if(empty($loglist)) {
    1003. 

  1003. 		showmessage('threadmod_nonexistence');
    1004. 

  1004. 	}
    1005. 

  1005. 

  1006. 	include template('forum/viewthread_mod');
    1007. 

  1007. 

  1008. } elseif($_GET['action'] == 'bestanswer' && $_G['tid'] && $_GET['pid'] && submitcheck('bestanswersubmit')) {
    1009. 

  1009. 

  1010. 	$forward = 'forum.php?mod=viewthread&tid='.$_G['tid'].($_GET['from'] ? '&from='.$_GET['from'] : '');
    1011. 

  1011. 	$post = C::t('forum_post')->fetch('tid:'.$_G['tid'], $_GET['pid'], false);
    1012. 

  1012. 	if($post['tid'] != $_G['tid']) {
    1013. 

  1013. 		$post = array();
    1014. 

  1014. 	}
    1015. 

  1015. 

  1016. 	if(!($thread['special'] == 3 && $post && ($_G['forum']['ismoderator'] && (!$_G['setting']['rewardexpiration'] || $_G['setting']['rewardexpiration'] > 0 && ($_G['timestamp'] - $thread['dateline']) / 86400 > $_G['setting']['rewardexpiration']) || $thread['authorid'] == $_G['uid']) && $post['authorid'] != $thread['authorid'] && $post['first'] == 0 && $_G['uid'] != $post['authorid'] && $thread['price'] > 0)) {
    1017. 

  1017. 		showmessage('reward_cant_operate');
    1018. 

  1018. 	} elseif($post['authorid'] == $thread['authorid']) {
    1019. 

  1019. 		showmessage('reward_cant_self');
    1020. 

  1020. 	} elseif($thread['price'] < 0) {
    1021. 

  1021. 		showmessage('reward_repeat_selection');
    1022. 

  1022. 	}
    1023. 

  1023. 	updatemembercount($post['authorid'], array($_G['setting']['creditstransextra'][2] => $thread['price']), 1, 'RAC', $_G['tid']);
    1024. 

  1024. 	$thread['price'] = '-'.$thread['price'];
    1025. 

  1025. 	C::t('forum_thread')->update($_G['tid'], array('price'=>$thread['price']));
    1026. 

  1026. 	C::t('forum_post')->update('tid:'.$_G['tid'], $_GET['pid'], array(
    1027. 

  1027. 		'dateline' => $thread['dateline'] + 1,
    1028. 

  1028. 	));
    1029. 

  1029. 

  1030. 	$thread['dateline'] = dgmdate($thread['dateline']);
    1031. 

  1031. 	if($_G['uid'] != $thread['authorid']) {
    1032. 

  1032. 		notification_add($thread['authorid'], 'reward', 'reward_question', array(
    1033. 

  1033. 			'tid' => $thread['tid'],
    1034. 

  1034. 			'subject' => $thread['subject'],
    1035. 

  1035. 		));
    1036. 

  1036. 	}
    1037. 

  1037. 	if($thread['authorid'] == $_G['uid']) {
    1038. 

  1038. 		notification_add($post['authorid'], 'reward', 'reward_bestanswer', array(
    1039. 

  1039. 			'tid' => $thread['tid'],
    1040. 

  1040. 			'subject' => $thread['subject'],
    1041. 

  1041. 		));
    1042. 

  1042. 	} else {
    1043. 

  1043. 		notification_add($post['authorid'], 'reward', 'reward_bestanswer_moderator', array(
    1044. 

  1044. 			'tid' => $thread['tid'],
    1045. 

  1045. 			'subject' => $thread['subject'],
    1046. 

  1046. 		));
    1047. 

  1047. 	}
    1048. 

  1048. 

  1049. 

  1050. 	showmessage('reward_completion', $forward);
    1051. 

  1051. 

  1052. } elseif($_GET['action'] == 'activityapplies') {
    1053. 

  1053. 

  1054. 	if(!$_G['uid']) {
    1055. 

  1055. 		showmessage('not_loggedin', NULL, array(), array('login' => 1));
    1056. 

  1056. 	}
    1057. 

  1057. 

  1058. 	if(submitcheck('activitysubmit')) {
    1059. 

  1059. 		$activity = C::t('forum_activity')->fetch($_G['tid']);
    1060. 

  1060. 		if($activity['expiration'] && $activity['expiration'] < TIMESTAMP) {
    1061. 

  1061. 			showmessage('activity_stop', NULL, array(), array('login' => 1));
    1062. 

  1062. 		}
    1063. 

  1063. 		$applyinfo = array();
    1064. 

  1064. 		$applyinfo = C::t('forum_activityapply')->fetch_info_for_user($_G['uid'], $_G['tid']);
    1065. 

  1065. 		if($applyinfo && $applyinfo['verified'] < 2) {
    1066. 

  1066. 			showmessage('activity_repeat_apply', NULL, array(), array('login' => 1));
    1067. 

  1067. 		}
    1068. 

  1068. 		$payvalue = intval($_GET['payvalue']);
    1069. 

  1069. 		$payment = $_GET['payment'] ? $payvalue : -1;
    1070. 

  1070. 		$message = cutstr(dhtmlspecialchars($_GET['message']), 200);
    1071. 

  1071. 		$verified = $thread['authorid'] == $_G['uid'] ? 1 : 0;
    1072. 

  1072. 		if($activity['ufield']) {
    1073. 

  1073. 			$ufielddata = array();
    1074. 

  1074. 			$activity['ufield'] = dunserialize($activity['ufield']);
    1075. 

  1075. 			if(!empty($activity['ufield']['userfield'])) {
    1076. 

  1076. 				$censor = discuz_censor::instance();
    1077. 

  1077. 				loadcache('profilesetting');
    1078. 

  1078. 				foreach($activity['ufield']['userfield'] as $filedname) {
    1079. 

  1079. 					$value = $_POST[$filedname];
    1080. 

  1080. 					if(is_array($value)) {
    1081. 

  1081. 						$value = implode(',', $value);
    1082. 

  1082. 					}
    1083. 

  1083. 					$value = cutstr(dhtmlspecialchars(trim($value)), 100, '.');
    1084. 

  1084. 					if($_G['cache']['profilesetting'][$filedname]['formtype'] == 'file' && !preg_match("/^https?:\/\/(.*)?\.(jpg|png|gif|jpeg|bmp)$/i", $value)) {
    1085. 

  1085. 						showmessage('activity_imgurl_error');
    1086. 

  1086. 					}
    1087. 

  1087. 					if(empty($value) && $filedname != 'residedist' && $filedname != 'residecommunity') {
    1088. 

  1088. 						showmessage('activity_exile_field');
    1089. 

  1089. 					}
    1090. 

  1090. 					$ufielddata['userfield'][$filedname] = $value;
    1091. 

  1091. 				}
    1092. 

  1092. 			}
    1093. 

  1093. 			if(!empty($activity['ufield']['extfield'])) {
    1094. 

  1094. 				foreach($activity['ufield']['extfield'] as $fieldid) {
    1095. 

  1095. 					$value = cutstr(dhtmlspecialchars(trim($_GET[''.$fieldid])), 50, '.');
    1096. 

  1096. 					$ufielddata['extfield'][$fieldid] = $value;
    1097. 

  1097. 				}
    1098. 

  1098. 			}
    1099. 

  1099. 			$ufielddata = !empty($ufielddata) ? serialize($ufielddata) : '';
    1100. 

  1100. 		}
    1101. 

  1101. 		if($_G['setting']['activitycredit'] && $activity['credit'] && empty($applyinfo['verified'])) {
    1102. 

  1102. 			checklowerlimit(array('extcredits'.$_G['setting']['activitycredit'] => '-'.$activity['credit']));
    1103. 

  1103. 			updatemembercount($_G['uid'], array($_G['setting']['activitycredit'] => '-'.$activity['credit']), true, 'ACC', $_G['tid']);
    1104. 

  1104. 		}
    1105. 

  1105. 		if($applyinfo && $applyinfo['verified'] == 2) {
    1106. 

  1106. 			$newinfo = array(
    1107. 

  1107. 				'tid' => $_G['tid'],
    1108. 

  1108. 				'username' => $_G['username'],
    1109. 

  1109. 				'uid' => $_G['uid'],
    1110. 

  1110. 				'message' => $message,
    1111. 

  1111. 				'verified' => $verified,
    1112. 

  1112. 				'dateline' => $_G['timestamp'],
    1113. 

  1113. 				'payment' => $payment,
    1114. 

  1114. 				'ufielddata' => $ufielddata
    1115. 

  1115. 			);
    1116. 

  1116. 			C::t('forum_activityapply')->update($applyinfo['applyid'], $newinfo);
    1117. 

  1117. 		} else {
    1118. 

  1118. 			$data = array('tid' => $_G['tid'], 'username' => $_G['username'], 'uid' => $_G['uid'], 'message' => $message, 'verified' => $verified, 'dateline' => $_G['timestamp'], 'payment' => $payment, 'ufielddata' => $ufielddata);
    1119. 

  1119. 			C::t('forum_activityapply')->insert($data);
    1120. 

  1120. 		}
    1121. 

  1121. 

  1122. 		$applynumber = C::t('forum_activityapply')->fetch_count_for_thread($_G['tid']);
    1123. 

  1123. 		C::t('forum_activity')->update($_G['tid'], array('applynumber' => $applynumber));
    1124. 

  1124. 

  1125. 		if($thread['authorid'] != $_G['uid']) {
    1126. 

  1126. 			notification_add($thread['authorid'], 'activity', 'activity_notice', array(
    1127. 

  1127. 				'tid' => $_G['tid'],
    1128. 

  1128. 				'subject' => $thread['subject'],
    1129. 

  1129. 			));
    1130. 

  1130. 			$space = array();
    1131. 

  1131. 			space_merge($space, 'field_home');
    1132. 

  1132. 

  1133. 			if(!empty($space['privacy']['feed']['newreply'])) {
    1134. 

  1134. 				$feed['icon'] = 'activity';
    1135. 

  1135. 				$feed['title_template'] = 'feed_reply_activity_title';
    1136. 

  1136. 				$feed['title_data'] = array(
    1137. 

  1137. 					'subject' => "<a href=\"forum.php?mod=viewthread&tid=$_G[tid]\">$thread[subject]</a>",
    1138. 

  1138. 					'hash_data' => "tid{$_G[tid]}"
    1139. 

  1139. 				);
    1140. 

  1140. 				$feed['id'] = $_G['tid'];
    1141. 

  1141. 				$feed['idtype'] = 'tid';
    1142. 

  1142. 				postfeed($feed);
    1143. 

  1143. 			}
    1144. 

  1144. 		}
    1145. 

  1145. 		showmessage('activity_completion', "forum.php?mod=viewthread&tid=$_G[tid]".($_GET['from'] ? '&from='.$_GET['from'] : ''), array(), array('showdialog' => 1, 'showmsg' => true, 'locationtime' => true, 'alert' => 'right'));
    1146. 

  1146. 

  1147. 	} elseif(submitcheck('activitycancel')) {
    1148. 

  1148. 		C::t('forum_activityapply')->delete_for_user($_G['uid'], $_G['tid']);
    1149. 

  1149. 		$applynumber = C::t('forum_activityapply')->fetch_count_for_thread($_G['tid']);
    1150. 

  1150. 		C::t('forum_activity')->update($_G['tid'], array('applynumber' => $applynumber));
    1151. 

  1151. 		$message = cutstr(dhtmlspecialchars($_GET['message']), 200);
    1152. 

  1152. 		if($thread['authorid'] != $_G['uid']) {
    1153. 

  1153. 			notification_add($thread['authorid'], 'activity', 'activity_cancel', array(
    1154. 

  1154. 				'tid' => $_G['tid'],
    1155. 

  1155. 				'subject' => $thread['subject'],
    1156. 

  1156. 				'reason' => $message
    1157. 

  1157. 			));
    1158. 

  1158. 		}
    1159. 

  1159. 		showmessage('activity_cancel_success', "forum.php?mod=viewthread&tid=$_G[tid]&do=viewapplylist".($_GET['from'] ? '&from='.$_GET['from'] :''), array(), array('showdialog' => 1, 'closetime' => true));
    1160. 

  1160. 	}
    1161. 

  1161. 

  1162. } elseif($_GET['action'] == 'getactivityapplylist') {
    1163. 

  1163. 	$pp = $_G['setting']['activitypp'];
    1164. 

  1164. 	$page = max(1, $_G['page']);
    1165. 

  1165. 	$start = ($page - 1) * $pp;
    1166. 

  1166. 	$activity = C::t('forum_activity')->fetch($_G['tid']);
    1167. 

  1167. 	if(!$activity || $thread['special'] != 4) {
    1168. 

  1168. 		showmessage('undefined_action');
    1169. 

  1169. 	}
    1170. 

  1170. 	$query = C::t('forum_activityapply')->fetch_all_for_thread($_G['tid'], $start, $pp);
    1171. 

  1171. 	foreach($query as $activityapplies) {
    1172. 

  1172. 		$activityapplies['dateline'] = dgmdate($activityapplies['dateline']);
    1173. 

  1173. 		$applylist[] = $activityapplies;
    1174. 

  1174. 	}
    1175. 

  1175. 	$multi = multi($activity['applynumber'], $pp, $page, "forum.php?mod=misc&action=getactivityapplylist&tid=$_G[tid]&pid=$_GET[pid]");
    1176. 

  1176. 	include template('forum/activity_applist_more');
    1177. 

  1177. } elseif($_GET['action'] == 'activityapplylist') {
    1178. 

  1178. 

  1179. 	$isactivitymaster = $thread['authorid'] == $_G['uid'] ||
    1180. 

  1180. 						(in_array($_G['group']['radminid'], array(1, 2)) || ($_G['group']['radminid'] == 3 && $_G['forum']['ismoderator'])
    1181. 

  1181. 						&& $_G['group']['alloweditactivity']);
    1182. 

  1182. 	if(!$isactivitymaster) {
    1183. 

  1183. 		showmessage('activity_is_not_manager');
    1184. 

  1184. 	}
    1185. 

  1185. 

  1186. 	$activity = C::t('forum_activity')->fetch($_G['tid']);
    1187. 

  1187. 	if(empty($activity) || $thread['special'] != 4) {
    1188. 

  1188. 		showmessage('activity_is_not_exists');
    1189. 

  1189. 	}
    1190. 

  1190. 

  1191. 	if(!submitcheck('applylistsubmit')) {
    1192. 

  1192. 		$applylist = array();
    1193. 

  1193. 		$activity['ufield'] = $activity['ufield'] ? dunserialize($activity['ufield']) : array();
    1194. 

  1194. 		$query = C::t('forum_activityapply')->fetch_all_for_thread($_G['tid'], 0, 500, $_GET['uid'], $isactivitymaster);
    1195. 

  1195. 		foreach($query as $activityapplies) {
    1196. 

  1196. 			$ufielddata = '';
    1197. 

  1197. 			$activityapplies['dateline'] = dgmdate($activityapplies['dateline'], 'u');
    1198. 

  1198. 			$activityapplies['ufielddata'] = !empty($activityapplies['ufielddata']) ? dunserialize($activityapplies['ufielddata']) : '';
    1199. 

  1199. 			if($activityapplies['ufielddata']) {
    1200. 

  1200. 				if($activityapplies['ufielddata']['userfield']) {
    1201. 

  1201. 					require_once libfile('function/profile');
    1202. 

  1202. 					loadcache('profilesetting');
    1203. 

  1203. 					$data = '';
    1204. 

  1204. 					foreach($activity['ufield']['userfield'] as $fieldid) {
    1205. 

  1205. 						$data = profile_show($fieldid, $activityapplies['ufielddata']['userfield']);
    1206. 

  1206. 						$ufielddata .= '<li>'.$_G['cache']['profilesetting'][$fieldid]['title'].'&nbsp;&nbsp;:&nbsp;&nbsp;';
    1207. 

  1207. 						if(empty($data)) {
    1208. 

  1208. 							$ufielddata .= '</li>';
    1209. 

  1209. 							continue;
    1210. 

  1210. 						}
    1211. 

  1211. 						if($_G['cache']['profilesetting'][$fieldid]['formtype'] != 'file') {
    1212. 

  1212. 							$ufielddata .= $data;
    1213. 

  1213. 						} else {
    1214. 

  1214. 							$ufielddata .= '<a href="'.$data.'" target="_blank" onclick="zoom(this, this.href, 0, 0, 0); return false;">'.lang('forum/misc', 'activity_viewimg').'</a>';
    1215. 

  1215. 						}
    1216. 

  1216. 						$ufielddata .= '</li>';
    1217. 

  1217. 					}
    1218. 

  1218. 				}
    1219. 

  1219. 				if($activityapplies['ufielddata']['extfield']) {
    1220. 

  1220. 					foreach($activity['ufield']['extfield'] as $name) {
    1221. 

  1221. 						$ufielddata .= '<li>'.$name.'&nbsp;&nbsp;:&nbsp;&nbsp;'.$activityapplies['ufielddata']['extfield'][$name].'</li>';
    1222. 

  1222. 					}
    1223. 

  1223. 				}
    1224. 

  1224. 			}
    1225. 

  1225. 			$activityapplies['ufielddata'] = $ufielddata;
    1226. 

  1226. 			$applylist[] = $activityapplies;
    1227. 

  1227. 		}
    1228. 

  1228. 

  1229. 		$activity['starttimefrom'] = dgmdate($activity['starttimefrom'], 'u');
    1230. 

  1230. 		$activity['starttimeto'] = $activity['starttimeto'] ? dgmdate($activity['starttimeto'], 'u') : 0;
    1231. 

  1231. 		$activity['expiration'] = $activity['expiration'] ? dgmdate($activity['expiration'], 'u') : 0;
    1232. 

  1232. 

  1233. 		include template('forum/activity_applylist');
    1234. 

  1234. 	} else {
    1235. 

  1235. 		if(empty($_GET['applyidarray'])) {
    1236. 

  1236. 			showmessage('activity_choice_applicant');
    1237. 

  1237. 		} else {
    1238. 

  1238. 			$reason = cutstr(dhtmlspecialchars($_GET['reason']), 200);
    1239. 

  1239. 			$tempuid = $uidarray = $unverified = array();
    1240. 

  1240. 			$query = C::t('forum_activityapply')->fetch_all($_GET['applyidarray']);
    1241. 

  1241. 			foreach($query as $row) {
    1242. 

  1242. 				if($row['tid'] == $_G['tid']) {
    1243. 

  1243. 					$tempusers[$row['uid']] = $row['verified'];
    1244. 

  1244. 				}
    1245. 

  1245. 			}
    1246. 

  1246. 			$query  = C::t('common_member')->fe…
    1247.

Large files files are truncated, but you can click here to view the full file