post_comment.php

Go to the documentation of this file.

<?php
// $Id: post_comment.php 902 2012-01-03 07:09:16Z i.bitcero $
// --------------------------------------------------------------
// Red México Common Utilities
// A framework for Red México Modules
// Author: Eduardo Cortés <i.bitcero@gmail.com>
// Email: i.bitcero@gmail.com
// License: GPL 2.0
// --------------------------------------------------------------

include '../../mainfile.php';

$action = rmc_server_var($_REQUEST, 'action', '');
$rmc_config = RMFunctions::configs();

if (!$rmc_config['enable_comments']){
    redirect_header(rmc_server_var($_REQUEST, 'comment_url', XOOPS_URL), 1, __('Sorry, comments has been disabled by administrator', 'rmcommon'));
    die();
}

if ($action=='save'){

        if (!$xoopsSecurity->checkReferer()){
            redirect_header(XOOPS_URL, 2, __('You are not allowed to do this action!', 'rmcommon'));
            die();
        }

        // Check if user is a Registered User
        if(!$xoopsUser){
            
            $name = rmc_server_var($_POST, 'comment_name', '');
            $email = rmc_server_var($_POST, 'comment_email', '');
            $url = rmc_server_var($_POST, 'comment_url', '');
            $xuid = 0;
            
        } else {
            
            $name = $xoopsUser->getVar('uname');
            $email = $xoopsUser->getVar('email');
            $url = $xoopsUser->getVar('url');
            $xuid = $xoopsUser->uid();
            
        }

        // Check uri
        $uri = urldecode(rmc_server_var($_POST, 'uri', ''));
        if (trim($uri)==''){
            header('loaction: '.XOOPS_URL);
            die();
        }
        
        if ($name=='' || $email==''){
                redirect_header($uri, 2, __('You must provide your name and email in order to can post comments','rmcommon'));
                die();
        }

    if (!$xoopsUser && !$rmc_config['anonymous_comments']){
        redirect_header($uri, 2, __('Sorry, you are not allowed to post comments!', 'rmcommon'));
        die();
    }
    
        // Check params
        $params = rmc_server_var($_POST, 'params', '');
        if (trim($params)==''){
            redirect_header($uri, 2, __('There are not params to save!','rmcommon'));
            die();
        }

        // Object type
        $type = rmc_server_var($_POST, 'type', '');
        if (trim($type)==''){
            redirect_header($uri, 2, __('Object type missing!','rmcommon'));
            die();
        }

        // Object name
        $object = strtolower(rmc_server_var($_POST, 'object', ''));
        if (trim($object)==''){
            redirect_header($uri, 2, __('Object name missing!','rmcommon'));
            die();
        }

        // Text
        $text = rmc_server_var($_POST, 'comment_text', '');
        if (trim($text)==''){
            redirect_header($uri, 2, __('You must write a message!','rmcommon'));
            die();
        }

        RMEvents::get()->run_event('rmcommon.comment.postdata', $uri);

        // Save comment user
        $db = XoopsDatabaseFactory::getDatabaseConnection();
        if($xoopsUser){
            
            $sql = "SELECT id_user FROM ".$db->prefix("rmc_comusers")." WHERE xuid=".$xoopsUser->uid();
            
        } else {
            
            $sql = "SELECT id_user FROM ".$db->prefix("rmc_comusers")." WHERE email='$email'";
            
        }

        $result = $db->query($sql);
        list($uid) = $db->fetchRow($result);

        if ($uid<=0){
            
            $db->queryF("INSERT INTO ".$db->prefix("rmc_comusers")." (`xuid`,`name`,`email`,`url`) VALUES ('$xuid','$name','$email','$url')");
            $uid = $db->getInsertId();
            
        } else {
            
            $db->queryF("UPDATE ".$db->prefix("rmc_comusers")." SET `name`='$name',`email`='$email',`url`='$url' WHERE id_user='$uid'");
            
        }

        $comment = new RMComment();
        $comment->setVar('id_obj', $object);
        $comment->setVar('type', $type);
        $comment->setVar('parent', isset($parent) ? $parent : 0);
        $comment->setVar('params', $params);
        $comment->setVar('content', $text);
        $comment->setVar('user', $uid);
        $comment->setVar('ip', $_SERVER['REMOTE_ADDR']);
        $comment->setVar('posted', time());

        // Check if comment must be approved
        if ($xoopsUser && $rmc_config['approve_reg_coms']){
                $comment->setVar('status', 'approved');
        } elseif(!$xoopsUser && $rmc_config['approve_anon_coms']){
                $comment->setVar('status', 'approved');
        } elseif($xoopsUser && $xoopsUser->isAdmin()){
                $comment->setVar('status', 'approved');
        }

        if (!$comment->save()){
            
            redirect_header($uri, 1, __('Comment could not be posted!','rmcommon').'<br />'.$comment->errors());
            
        }

        if ($xoopsUser) $xoopsUser->incrementPost();
        RMEvents::get()->run_event('rmcommon.comment.saved', $comment, $uri);

        // Update comments number if object accepts this functionallity
        if (is_file(XOOPS_ROOT_PATH.'/modules/'.$object.'/class/'.$object.'controller.php')){
            include_once XOOPS_ROOT_PATH.'/modules/'.$object.'/class/'.$object.'controller.php';
            $class = ucfirst($object).'Controller';
            if(class_exists($class)){
                $controller = new $class();
                if (method_exists($controller, 'increment_comments_number')){
                    $controller->increment_comments_number($comment);
                }
            }
            
        }

        redirect_header($uri.'#comment-'.$comment->id(), 1, __('Comment posted successfully!','rmcommon'));
        
} elseif ($action=='edit') {
        
        if (rmc_server_var($_GET, 'ret', '')==''){
                redirect_header(XOOPS_URL, 2, __('Invalid operation','rmcommon'));
                die();
        }
        
    // Check if user is allowed to edit this comment
    if (!$xoopsUser){
        redirect_header(rmc_server_var($_REQUEST, 'comment_url', XOOPS_URL), 1, __('You are not allowed to edit this comment!', 'rmcommon'));
        die();
    }
    
    $id = rmc_server_var($_GET, 'id', 0);
    if ($id<=0){
        redirect_header(rmc_server_var($_REQUEST, 'ret', XOOPS_URL), 1, __('Please specify a comment', 'rmcommon'));
        die();
    }
    
    $comment = new RMComment($id);
    if ($comment->isNew()){
        redirect_header(rmc_server_var($_REQUEST, 'ret', XOOPS_URL), 1, __('Specified comment does not exist!', 'rmcommon'));
        die();
    }
    
    // Check if user is owner
    $editor = new RMCommentUser($comment->getVar('user'));
    if ($xoopsUser->uid()!=$editor->getVar('xuid') && !$xoopsUser->isAdmin($comment->getVar('id_obj'))){
        redirect_header(rmc_server_var($_REQUEST, 'ret', XOOPS_URL), 1, __('You are not allowed to edit this comment!', 'rmcommon'));
        die();
    }
    
        include '../../header.php';
    
    $cpath = XOOPS_ROOT_PATH.'/modules/'.$comment->getVar('id_obj').'/class/'.$comment->getVar('id_obj').'controller.php';
    
    if(is_file($cpath)){
        include $cpath;
        $class = ucfirst($comment->getVar('id_obj')).'Controller';
        $controller = new $class();
    }
    
    $form = new RMForm(__('Edit Comment', 'rmcommon'), 'editComment', 'post_comment.php');
    $form->addElement(new RMFormLabel(__('In reply to', 'rmcommon'), $controller ? $controller->get_item($comment->getVar('params'), $comment):''));
    $form->addElement(new RMFormLabel(__('Posted date','rmcommon'), formatTimestamp($comment->getVar('posted'), 'mysql')));
    $form->addElement(new RMFormLabel(__('Module','rmcommon'), $comment->getVar('id_obj')));
    
    if($xoopsUser->isAdmin()){
        $user = new RMCommentUser($comment->getVar('user'));
        $ele = new RMFormUser(__('Poster','rmcommon'), 'user', false, $user->getVar('xuid')>0 ? $user->getVar('xuid') : 0);
        $form->addElement($ele);
    }
    
    if($xoopsUser->isAdmin($comment->getVAr('id_obj'))){
        $ele = new RMFormRadio(__('Status','rmcommon'), 'status', 1, 0, 2);
        $ele->addOption(__('Approved', 'rmcommon'), 'approved', $comment->getVar('status')=='approved'?1:0);
        $ele->addOption(__('Unapproved', 'rmcommon'), 'waiting', $comment->getVar('status')=='waiting'?1:0);
        $form->addElement($ele);
    }
    
    $form->addElement(new RMFormTextArea(__('Content','rmcommon'), 'content', null, null, $comment->getVar('content','e'),'100%','150px'), true);
    $form->addElement(new RMFormHidden('action', 'saveedit'));
    $ele = new RMFormButtonGroup();
    $ele->addButton('sbt', __('Update Comment','rmcommon'), 'submit');
    $ele->addButton('cancel', __('Cancel','rmcommon'), 'button', 'onclick="history.go(-1);"');
    $form->addElement($ele);
    
    $form->addElement(new RMFormHidden('ret', rmc_server_var($_GET, 'ret', XOOPS_URL)));
    $form->addElement(new RMFormHidden('id', $id));
    
    // Event to modify or add new elements to comments form
    $form = RMEvents::get()->run_event('rmcommon.edit.comment.form', $form);
    
    $form->display();
    
    include '../../footer.php';
        
} elseif($action=='saveedit'){
        
        $ret = rmc_server_var($_POST,'ret','');
        $id = rmc_server_var($_POST,'id',0);
        $page = rmc_server_var($_POST, 'page', 1);
        $filter = rmc_server_var($_POST, 'filter', '');
        $w = rmc_server_var($_POST, 'w', '1');
        
        if ($ret==''){
                redirect_header(XOOPS_URL, 1, __('Invalid Operation','rmcommon'));
                die();
        }
        
        // Check if user is allowed to edit this comment
    if (!$xoopsUser){
        redirect_header($ret, 1, __('You are not allowed to edit this comment!', 'rmcommon'));
        die();
    }
        
        if(!$xoopsSecurity->check()){
                redirect_header($ret, 1, __('You are not allowed to edit this comment!','rmcommon'));
                die();
        }
    
    if ($id<=0){
        redirect_header(XOOPS_URL, 1, __('Please specify a comment','rmcommon'));
        die();
    }
    
    $comment = new RMComment($id);
    if($comment->isNew()){
        redirect_header(XOOPS_URL, 1, __('Specified comment does not exist!','rmcommon'));
        die();
    }
        
        $status = $xoopsUser->isAdmin($comment->getVar('id_obj')) ? rmc_server_var($_POST, 'status', $comment->getVar('status')) : $comment->getVar('status');
        $status = $status=='approved'?$status:'unapproved';
        
        $user = $xoopsUser->isAdmin($comment->getVar('id_obj')) ? rmc_server_var($_POST, 'user', $xoopsUser->getVar('uid')) : $xoopsUser->getVar('uid');
        $content = rmc_server_var($_POST, 'content', '');
    
    if ($content==''){
                redirect_header('post_comment.php?id='.$id.'&ret='.urlencode($ret).'&action=edit', 2, __('You must provide a text for comment!','rmcommon'));
                die();
    }
    
    // save basic info in comment object
    $comment->setVar('content', $content);
    $comment->setVar('status', $status);
    // Modify, if neccessary, the user
    $cuser = new RMCommentUser($comment->getVar('user'));
    if ($cuser->getVar('xuid')!=$user){
        
        if ($user==0){
            $cuser->setVar('xuid', 0);
            $cuser->save();
        } else {
            $xuser = new XoopsUser($user);
            $cuser = new RMCommentUser($xuser->getVar('email'));
            $cuser->setVar('name', $xuser->getVar('uname'));
            $cuser->setVar('email', $xuser->getVar('email'));
            $cuser->setVar('xuid', $user);
            $cuser->setVar('url', $xuser->getVar('url'));
            $cuser->save();
        }
        
        $comment->setVar('user', $cuser->id());
        
    }
    
    RMEvents::get()->run_event('rmcommon.comment.saved', $comment, $ret);

    if ($comment->save()){
        redirect_header($ret.'#comment-'.$comment->id(), 2, __('Comment updated successfully!','rmcommon'));
    } else {
        redirect_header($ret.'#comment-'.$comment->id(), 2, __('Errros ocurrs while trying to update comment!', 'rmcommon'));
    }
        
}