X-Git-Url: http://git.sourceforge.jp/view?p=nucleus-jp%2Fnucleus-jp-ancient.git;a=blobdiff_plain;f=utf8%2Fnucleus%2Flibs%2FCOMMENTS.php;h=a04927ae4c4e38f9eefd7f5fe5a54e94f233c58c;hp=215494616f581fed0436e103942897c3f7e0f8ac;hb=b5f3f1bf515d9979f70fd0043dc562d6c6ca3a4b;hpb=9133cfc6678513cdd7a9f9571d5027c1b719e962 diff --git a/utf8/nucleus/libs/COMMENTS.php b/utf8/nucleus/libs/COMMENTS.php index 2154946..a04927a 100755 --- a/utf8/nucleus/libs/COMMENTS.php +++ b/utf8/nucleus/libs/COMMENTS.php @@ -18,327 +18,327 @@ * @version $Id$ * $NucleusJP: COMMENTS.php,v 1.9.2.1 2007/08/08 05:32:21 kimitake Exp $ */ - -if ( !function_exists('requestVar') ) exit; -require_once dirname(__FILE__) . '/COMMENTACTIONS.php'; - -class COMMENTS { - - // item for which comment are being displayed - var $itemid; - - // reference to the itemActions object that is calling the showComments function - var $itemActions; - - // total amount of comments displayed - var $commentcount; - - /** - * Creates a new COMMENTS object for the given blog and item - * - * @param $itemid - * id of the item - */ - function COMMENTS($itemid) { - $this->itemid = intval($itemid); - } - - /** - * Used when parsing comments - * - * @param $itemActions - * itemActions object, that will take care of the parsing - */ - function setItemActions(&$itemActions) { - $this->itemActions =& $itemActions; - } - - /** - * Shows maximum $max comments to the given item using the given template - * returns the amount of shown comments (if maxToShow = -1, then there is no limit) - * - * @param template - * template to use - * @param maxToShow - * max. comments to show - * @param showNone - * indicates if the 'no comments' thingie should be outputted when there are no comments - * (useful for closed items) - * @param highlight - * Highlight to use (if any) - */ - function showComments($template, $maxToShow = -1, $showNone = 1, $highlight = '') { - global $CONF, $manager; - - // create parser object & action handler - $actions =& new COMMENTACTIONS($this); - $parser =& new PARSER($actions->getDefinedActions(),$actions); - $actions->setTemplate($template); - $actions->setParser($parser); - - if ($maxToShow == 0) { - $this->commentcount = $this->amountComments(); - } else { - $query = 'SELECT c.citem as itemid, c.cnumber as commentid, c.cbody as body, c.cuser as user, c.cmail as userid, c.cemail as email, c.cmember as memberid, c.ctime, c.chost as host, c.cip as ip, c.cblog as blogid' - . ' FROM '.sql_table('comment').' as c' - . ' WHERE c.citem=' . $this->itemid - . ' ORDER BY c.ctime'; - - $comments = sql_query($query); - $this->commentcount = mysql_num_rows($comments); - } - - // if no result was found - if ($this->commentcount == 0) { - // note: when no reactions, COMMENTS_HEADER and COMMENTS_FOOTER are _NOT_ used - if ($showNone) $parser->parse($template['COMMENTS_NONE']); - return 0; - } - - // if too many comments to show - if (($maxToShow != -1) && ($this->commentcount > $maxToShow)) { - $parser->parse($template['COMMENTS_TOOMUCH']); - return 0; - } - - $parser->parse($template['COMMENTS_HEADER']); - - while ( $comment = mysql_fetch_assoc($comments) ) { - $comment['timestamp'] = strtotime($comment['ctime']); - $actions->setCurrentComment($comment); - $actions->setHighlight($highlight); - $manager->notify('PreComment', array('comment' => &$comment)); - $parser->parse($template['COMMENTS_BODY']); - $manager->notify('PostComment', array('comment' => &$comment)); - } - - $parser->parse($template['COMMENTS_FOOTER']); - - mysql_free_result($comments); - - return $this->commentcount; - } - - /** - * Returns the amount of comments for this itemid - */ - function amountComments() { - $query = 'SELECT COUNT(*)' - . ' FROM '.sql_table('comment').' as c' - . ' WHERE c.citem='. $this->itemid; - $res = sql_query($query); - $arr = mysql_fetch_row($res); - - return $arr[0]; - } - - /** - * Adds a new comment to the database - */ - function addComment($timestamp, $comment) { - global $CONF, $member, $manager; - - $blogid = getBlogIDFromItemID($this->itemid); - - $settings =& $manager->getBlog($blogid); - $settings->readSettings(); - - if (!$settings->commentsEnabled()) - return _ERROR_COMMENTS_DISABLED; - - if (!$settings->isPublic() && !$member->isLoggedIn()) - return _ERROR_COMMENTS_NONPUBLIC; - - // member name protection - if ($CONF['ProtectMemNames'] && !$member->isLoggedIn() && MEMBER::isNameProtected($comment['user'])) - return _ERROR_COMMENTS_MEMBERNICK; - - // email required protection - if ($settings->emailRequired() && strlen($comment['email']) == 0 && !$member->isLoggedIn()) { - return _ERROR_EMAIL_REQUIRED; - } - - $comment['timestamp'] = $timestamp; - $comment['host'] = gethostbyaddr(serverVar('REMOTE_ADDR')); - $comment['ip'] = serverVar('REMOTE_ADDR'); - - // if member is logged in, use that data - if ($member->isLoggedIn()) { - $comment['memberid'] = $member->getID(); - $comment['user'] = ''; - $comment['userid'] = ''; - $comment['email'] = ''; - } else { - $comment['memberid'] = 0; - } - - // spam check - $continue = false; - $plugins = array(); - - if (isset($manager->subscriptions['ValidateForm'])) - $plugins = array_merge($plugins, $manager->subscriptions['ValidateForm']); - - if (isset($manager->subscriptions['PreAddComment'])) - $plugins = array_merge($plugins, $manager->subscriptions['PreAddComment']); - - if (isset($manager->subscriptions['PostAddComment'])) - $plugins = array_merge($plugins, $manager->subscriptions['PostAddComment']); - - $plugins = array_unique($plugins); - - while (list(,$plugin) = each($plugins)) { - $p = $manager->getPlugin($plugin); - $continue = $continue || $p->supportsFeature('handleSpam'); - } - - $spamcheck = array ( - 'type' => 'comment', - 'body' => $comment['body'], - 'id' => $comment['itemid'], - 'live' => true, - 'return' => $continue - ); - - if ($member->isLoggedIn()) { - $spamcheck['author'] = $member->displayname; - $spamcheck['email'] = $member->email; - } else { - $spamcheck['author'] = $comment['user']; - $spamcheck['email'] = $comment['email']; - $spamcheck['url'] = $comment['userid']; - } - - $manager->notify('SpamCheck', array ('spamcheck' => &$spamcheck)); - - if (!$continue && isset($spamcheck['result']) && $spamcheck['result'] == true) - return _ERROR_COMMENTS_SPAM; - - - // isValidComment returns either "1" or an error message - $isvalid = $this->isValidComment($comment, $spamcheck); - if ($isvalid != 1) - return $isvalid; - - // send email to notification address, if any - if ($settings->getNotifyAddress() && $settings->notifyOnComment()) { - - $mailto_msg = _NOTIFY_NC_MSG . ' ' . $this->itemid . "\n"; -// $mailto_msg .= $CONF['IndexURL'] . 'index.php?itemid=' . $this->itemid . "\n\n"; - $temp = parse_url($CONF['Self']); - if ($temp['scheme']) { - $mailto_msg .= createItemLink($this->itemid) . "\n\n"; - } else { - $tempurl = $settings->getURL(); - if (substr($tempurl, -1) == '/' || substr($tempurl, -4) == '.php') { - $mailto_msg .= $tempurl . '?itemid=' . $this->itemid . "\n\n"; - } else { - $mailto_msg .= $tempurl . '/?itemid=' . $this->itemid . "\n\n"; - } - } - if ($comment['memberid'] == 0) { - $mailto_msg .= _NOTIFY_USER . ' ' . $comment['user'] . "\n"; - $mailto_msg .= _NOTIFY_USERID . ' ' . $comment['userid'] . "\n"; - } else { - $mailto_msg .= _NOTIFY_MEMBER .' ' . $member->getDisplayName() . ' (ID=' . $member->getID() . ")\n"; - } - $mailto_msg .= _NOTIFY_HOST . ' ' . $comment['host'] . "\n"; - $mailto_msg .= _NOTIFY_COMMENT . "\n " . $comment['body'] . "\n"; - $mailto_msg .= getMailFooter(); - - $item =& $manager->getItem($this->itemid, 0, 0); - $mailto_title = _NOTIFY_NC_TITLE . ' ' . strip_tags($item['title']) . ' (' . $this->itemid . ')'; - - $frommail = $member->getNotifyFromMailAddress($comment['email']); - - $notify =& new NOTIFICATION($settings->getNotifyAddress()); - $notify->notify($mailto_title, $mailto_msg , $frommail); - } - - $comment = COMMENT::prepare($comment); - - $manager->notify('PreAddComment',array('comment' => &$comment, 'spamcheck' => &$spamcheck)); - - $name = addslashes($comment['user']); - $url = addslashes($comment['userid']); - $email = addslashes($comment['email']); - $body = addslashes($comment['body']); - $host = addslashes($comment['host']); - $ip = addslashes($comment['ip']); - $memberid = intval($comment['memberid']); - $timestamp = date('Y-m-d H:i:s', $comment['timestamp']); - $itemid = $this->itemid; - - $qSql = 'SELECT COUNT(*) AS result ' - . 'FROM ' . sql_table('comment') - . ' WHERE ' - . 'cmail = "' . $url . '"' - . ' AND cmember = "' . $memberid . '"' - . ' AND cbody = "' . $body . '"' - . ' AND citem = "' . $itemid . '"' - . ' AND cblog = "' . $blogid . '"'; - $result = (integer) quickQuery($qSql); - if ($result > 0) { - return _ERROR_BADACTION; - } - - $query = 'INSERT INTO '.sql_table('comment').' (CUSER, CMAIL, CEMAIL, CMEMBER, CBODY, CITEM, CTIME, CHOST, CIP, CBLOG) ' - . "VALUES ('$name', '$url', '$email', $memberid, '$body', $itemid, '$timestamp', '$host', '$ip', '$blogid')"; - - sql_query($query); - - // post add comment - $commentid = mysql_insert_id(); - $manager->notify('PostAddComment',array('comment' => &$comment, 'commentid' => &$commentid, 'spamcheck' => &$spamcheck)); - - // succeeded ! - return true; - } - - /** - * Checks if a comment is valid and call plugins - * that can check if the comment is a spam comment - */ - function isValidComment(&$comment, & $spamcheck) { - global $member, $manager; - - // check if there exists a item for this date - $item =& $manager->getItem($this->itemid,0,0); - - if (!$item) - return _ERROR_NOSUCHITEM; - - if ($item['closed']) - return _ERROR_ITEMCLOSED; - - // don't allow words that are too long - if (eregi('[a-zA-Z0-9|\.,;:!\?=\/\\]{90,90}',$comment['body']) != false) - return _ERROR_COMMENT_LONGWORD; - - // check lengths of comment - if (strlen($comment['body'])<3) - return _ERROR_COMMENT_NOCOMMENT; - - if (strlen($comment['body'])>5000) - return _ERROR_COMMENT_TOOLONG; - - // only check username if no member logged in - if (!$member->isLoggedIn()) - if (strlen($comment['user'])<2) - return _ERROR_COMMENT_NOUSERNAME; - - if ((strlen($comment['email']) != 0) && !(isValidMailAddress($comment['email']))) { - return _ERROR_BADMAILADDRESS; - } - - // let plugins do verification (any plugin which thinks the comment is invalid - // can change 'error' to something other than '1') - $result = 1; - $manager->notify('ValidateForm', array('type' => 'comment', 'comment' => &$comment, 'error' => &$result, 'spamcheck' => &$spamcheck)); - - return $result; - } - -} - + +if ( !function_exists('requestVar') ) exit; +require_once dirname(__FILE__) . '/COMMENTACTIONS.php'; + +class COMMENTS { + + // item for which comment are being displayed + var $itemid; + + // reference to the itemActions object that is calling the showComments function + var $itemActions; + + // total amount of comments displayed + var $commentcount; + + /** + * Creates a new COMMENTS object for the given blog and item + * + * @param $itemid + * id of the item + */ + function COMMENTS($itemid) { + $this->itemid = intval($itemid); + } + + /** + * Used when parsing comments + * + * @param $itemActions + * itemActions object, that will take care of the parsing + */ + function setItemActions(&$itemActions) { + $this->itemActions =& $itemActions; + } + + /** + * Shows maximum $max comments to the given item using the given template + * returns the amount of shown comments (if maxToShow = -1, then there is no limit) + * + * @param template + * template to use + * @param maxToShow + * max. comments to show + * @param showNone + * indicates if the 'no comments' thingie should be outputted when there are no comments + * (useful for closed items) + * @param highlight + * Highlight to use (if any) + */ + function showComments($template, $maxToShow = -1, $showNone = 1, $highlight = '') { + global $CONF, $manager; + + // create parser object & action handler + $actions =& new COMMENTACTIONS($this); + $parser =& new PARSER($actions->getDefinedActions(),$actions); + $actions->setTemplate($template); + $actions->setParser($parser); + + if ($maxToShow == 0) { + $this->commentcount = $this->amountComments(); + } else { + $query = 'SELECT c.citem as itemid, c.cnumber as commentid, c.cbody as body, c.cuser as user, c.cmail as userid, c.cemail as email, c.cmember as memberid, c.ctime, c.chost as host, c.cip as ip, c.cblog as blogid' + . ' FROM '.sql_table('comment').' as c' + . ' WHERE c.citem=' . $this->itemid + . ' ORDER BY c.ctime'; + + $comments = sql_query($query); + $this->commentcount = sql_num_rows($comments); + } + + // if no result was found + if ($this->commentcount == 0) { + // note: when no reactions, COMMENTS_HEADER and COMMENTS_FOOTER are _NOT_ used + if ($showNone) $parser->parse($template['COMMENTS_NONE']); + return 0; + } + + // if too many comments to show + if (($maxToShow != -1) && ($this->commentcount > $maxToShow)) { + $parser->parse($template['COMMENTS_TOOMUCH']); + return 0; + } + + $parser->parse($template['COMMENTS_HEADER']); + + while ( $comment = sql_fetch_assoc($comments) ) { + $comment['timestamp'] = strtotime($comment['ctime']); + $actions->setCurrentComment($comment); + $actions->setHighlight($highlight); + $manager->notify('PreComment', array('comment' => &$comment)); + $parser->parse($template['COMMENTS_BODY']); + $manager->notify('PostComment', array('comment' => &$comment)); + } + + $parser->parse($template['COMMENTS_FOOTER']); + + sql_free_result($comments); + + return $this->commentcount; + } + + /** + * Returns the amount of comments for this itemid + */ + function amountComments() { + $query = 'SELECT COUNT(*)' + . ' FROM '.sql_table('comment').' as c' + . ' WHERE c.citem='. $this->itemid; + $res = sql_query($query); + $arr = sql_fetch_row($res); + + return $arr[0]; + } + + /** + * Adds a new comment to the database + */ + function addComment($timestamp, $comment) { + global $CONF, $member, $manager; + + $blogid = getBlogIDFromItemID($this->itemid); + + $settings =& $manager->getBlog($blogid); + $settings->readSettings(); + + if (!$settings->commentsEnabled()) + return _ERROR_COMMENTS_DISABLED; + + if (!$settings->isPublic() && !$member->isLoggedIn()) + return _ERROR_COMMENTS_NONPUBLIC; + + // member name protection + if ($CONF['ProtectMemNames'] && !$member->isLoggedIn() && MEMBER::isNameProtected($comment['user'])) + return _ERROR_COMMENTS_MEMBERNICK; + + // email required protection + if ($settings->emailRequired() && strlen($comment['email']) == 0 && !$member->isLoggedIn()) { + return _ERROR_EMAIL_REQUIRED; + } + + $comment['timestamp'] = $timestamp; + $comment['host'] = gethostbyaddr(serverVar('REMOTE_ADDR')); + $comment['ip'] = serverVar('REMOTE_ADDR'); + + // if member is logged in, use that data + if ($member->isLoggedIn()) { + $comment['memberid'] = $member->getID(); + $comment['user'] = ''; + $comment['userid'] = ''; + $comment['email'] = ''; + } else { + $comment['memberid'] = 0; + } + + // spam check + $continue = false; + $plugins = array(); + + if (isset($manager->subscriptions['ValidateForm'])) + $plugins = array_merge($plugins, $manager->subscriptions['ValidateForm']); + + if (isset($manager->subscriptions['PreAddComment'])) + $plugins = array_merge($plugins, $manager->subscriptions['PreAddComment']); + + if (isset($manager->subscriptions['PostAddComment'])) + $plugins = array_merge($plugins, $manager->subscriptions['PostAddComment']); + + $plugins = array_unique($plugins); + + while (list(,$plugin) = each($plugins)) { + $p = $manager->getPlugin($plugin); + $continue = $continue || $p->supportsFeature('handleSpam'); + } + + $spamcheck = array ( + 'type' => 'comment', + 'body' => $comment['body'], + 'id' => $comment['itemid'], + 'live' => true, + 'return' => $continue + ); + + if ($member->isLoggedIn()) { + $spamcheck['author'] = $member->displayname; + $spamcheck['email'] = $member->email; + } else { + $spamcheck['author'] = $comment['user']; + $spamcheck['email'] = $comment['email']; + $spamcheck['url'] = $comment['userid']; + } + + $manager->notify('SpamCheck', array ('spamcheck' => &$spamcheck)); + + if (!$continue && isset($spamcheck['result']) && $spamcheck['result'] == true) + return _ERROR_COMMENTS_SPAM; + + + // isValidComment returns either "1" or an error message + $isvalid = $this->isValidComment($comment, $spamcheck); + if ($isvalid != 1) + return $isvalid; + + // send email to notification address, if any + if ($settings->getNotifyAddress() && $settings->notifyOnComment()) { + + $mailto_msg = _NOTIFY_NC_MSG . ' ' . $this->itemid . "\n"; +// $mailto_msg .= $CONF['IndexURL'] . 'index.php?itemid=' . $this->itemid . "\n\n"; + $temp = parse_url($CONF['Self']); + if ($temp['scheme']) { + $mailto_msg .= createItemLink($this->itemid) . "\n\n"; + } else { + $tempurl = $settings->getURL(); + if (substr($tempurl, -1) == '/' || substr($tempurl, -4) == '.php') { + $mailto_msg .= $tempurl . '?itemid=' . $this->itemid . "\n\n"; + } else { + $mailto_msg .= $tempurl . '/?itemid=' . $this->itemid . "\n\n"; + } + } + if ($comment['memberid'] == 0) { + $mailto_msg .= _NOTIFY_USER . ' ' . $comment['user'] . "\n"; + $mailto_msg .= _NOTIFY_USERID . ' ' . $comment['userid'] . "\n"; + } else { + $mailto_msg .= _NOTIFY_MEMBER .' ' . $member->getDisplayName() . ' (ID=' . $member->getID() . ")\n"; + } + $mailto_msg .= _NOTIFY_HOST . ' ' . $comment['host'] . "\n"; + $mailto_msg .= _NOTIFY_COMMENT . "\n " . $comment['body'] . "\n"; + $mailto_msg .= getMailFooter(); + + $item =& $manager->getItem($this->itemid, 0, 0); + $mailto_title = _NOTIFY_NC_TITLE . ' ' . strip_tags($item['title']) . ' (' . $this->itemid . ')'; + + $frommail = $member->getNotifyFromMailAddress($comment['email']); + + $notify =& new NOTIFICATION($settings->getNotifyAddress()); + $notify->notify($mailto_title, $mailto_msg , $frommail); + } + + $comment = COMMENT::prepare($comment); + + $manager->notify('PreAddComment',array('comment' => &$comment, 'spamcheck' => &$spamcheck)); + + $name = addslashes($comment['user']); + $url = addslashes($comment['userid']); + $email = addslashes($comment['email']); + $body = addslashes($comment['body']); + $host = addslashes($comment['host']); + $ip = addslashes($comment['ip']); + $memberid = intval($comment['memberid']); + $timestamp = date('Y-m-d H:i:s', $comment['timestamp']); + $itemid = $this->itemid; + + $qSql = 'SELECT COUNT(*) AS result ' + . 'FROM ' . sql_table('comment') + . ' WHERE ' + . 'cmail = "' . $url . '"' + . ' AND cmember = "' . $memberid . '"' + . ' AND cbody = "' . $body . '"' + . ' AND citem = "' . $itemid . '"' + . ' AND cblog = "' . $blogid . '"'; + $result = (integer) quickQuery($qSql); + if ($result > 0) { + return _ERROR_BADACTION; + } + + $query = 'INSERT INTO '.sql_table('comment').' (CUSER, CMAIL, CEMAIL, CMEMBER, CBODY, CITEM, CTIME, CHOST, CIP, CBLOG) ' + . "VALUES ('$name', '$url', '$email', $memberid, '$body', $itemid, '$timestamp', '$host', '$ip', '$blogid')"; + + sql_query($query); + + // post add comment + $commentid = sql_insert_id(); + $manager->notify('PostAddComment',array('comment' => &$comment, 'commentid' => &$commentid, 'spamcheck' => &$spamcheck)); + + // succeeded ! + return true; + } + + /** + * Checks if a comment is valid and call plugins + * that can check if the comment is a spam comment + */ + function isValidComment(&$comment, & $spamcheck) { + global $member, $manager; + + // check if there exists a item for this date + $item =& $manager->getItem($this->itemid,0,0); + + if (!$item) + return _ERROR_NOSUCHITEM; + + if ($item['closed']) + return _ERROR_ITEMCLOSED; + + // don't allow words that are too long + if (eregi('[a-zA-Z0-9|\.,;:!\?=\/\\]{90,90}',$comment['body']) != false) + return _ERROR_COMMENT_LONGWORD; + + // check lengths of comment + if (strlen($comment['body'])<3) + return _ERROR_COMMENT_NOCOMMENT; + + if (strlen($comment['body'])>5000) + return _ERROR_COMMENT_TOOLONG; + + // only check username if no member logged in + if (!$member->isLoggedIn()) + if (strlen($comment['user'])<2) + return _ERROR_COMMENT_NOUSERNAME; + + if ((strlen($comment['email']) != 0) && !(isValidMailAddress($comment['email']))) { + return _ERROR_BADMAILADDRESS; + } + + // let plugins do verification (any plugin which thinks the comment is invalid + // can change 'error' to something other than '1') + $result = 1; + $manager->notify('ValidateForm', array('type' => 'comment', 'comment' => &$comment, 'error' => &$result, 'spamcheck' => &$spamcheck)); + + return $result; + } + +} + ?> \ No newline at end of file