array (
'comments_table' => 'comments',
'counter_table' => 'post'
),
'ajax' => array (
'comments_table' => 'comments',
'counter_table' => 'post'
),
'lastcomments' => array (
'comments_table' => 'comments',
'counter_table' => 'post'
),
);
if (! is_array($allowed_areas[$area]) ) die ("Hacking attempt! Not Allowed Area");
require_once ENGINE_DIR . '/classes/parse.class.php';
$parse = new ParseFilter( );
$parse->safe_mode = true;
$parse->allow_url = $user_group[$member_id['user_group']]['allow_url'];
$parse->allow_image = $user_group[$member_id['user_group']]['allow_image'];
$id = intval( $_REQUEST['id'] );
$action = $_REQUEST['action'];
$subaction = $_REQUEST['subaction'];
if( $id and $action == "comm_edit" and $subaction != "addcomment" ) {
$row = $db->super_query( "select * from " . PREFIX . "_{$allowed_areas[$area]['comments_table']} where id = '$id'" );
$tpl->load_template( 'addcomments.tpl' );
$have_perm = 0;
$row['date'] = strtotime( $row['date'] );
if( $is_logged and (($member_id['name'] == $row['autor'] and $row['is_register'] and $user_group[$member_id['user_group']]['allow_editc']) or $member_id['user_group'] == '1' or $user_group[$member_id['user_group']]['edit_allc']) ) $have_perm = 1;
if ( $user_group[$member_id['user_group']]['edit_limit'] AND (($row['date'] + ($user_group[$member_id['user_group']]['edit_limit'] * 60)) < $_TIME) ) {
$have_perm = 0;
}
if( $have_perm ) {
if( $config['allow_comments_wysiwyg'] != "yes" ) {
include_once ENGINE_DIR . '/modules/bbcode.php';
$text = $parse->decodeBBCodes( $row['text'], false );
} else
$text = $parse->decodeBBCodes( $row['text'], TRUE, $config['allow_comments_wysiwyg'] );
if( $config['allow_comments_wysiwyg'] == "yes" ) {
include_once ENGINE_DIR . '/editor/comments.php';
$allow_comments_ajax = true;
$tpl->set( '{editor}', $wysiwyg );
} else {
$tpl->set( '{editor}', $bb_code );
}
$tpl->set( '{text}', $text );
$tpl->set( '{title}', $lang['comm_title'] );
$tpl->set_block( "'\\[sec_code\\](.*?)\\[/sec_code\\]'si", "" );
$tpl->set( '{sec_code}', "" );
$tpl->set_block( "'\\[not-logged\\].*?\\[/not-logged\\]'si", "" );
$tpl->copy_template = "";
$tpl->compile( 'content' );
$tpl->clear();
} else
msgbox( $lang['comm_err_2'], $lang['comm_err_3'] );
} elseif( $id and $action == "comm_edit" and $subaction == "addcomment" ) {
$row = $db->super_query( "SELECT * FROM " . PREFIX . "_{$allowed_areas[$area]['comments_table']} where id = '$id'" );
$have_perm = 0;
$row['date'] = strtotime( $row['date'] );
if( $row['autor'] and $is_logged and (($member_id['name'] == $row['autor'] and $row['is_register'] and $user_group[$member_id['user_group']]['allow_editc']) or $member_id['user_group'] == '1' or $user_group[$member_id['user_group']]['edit_allc']) ) $have_perm = 1;
if ( $user_group[$member_id['user_group']]['edit_limit'] AND (($row['date'] + ($user_group[$member_id['user_group']]['edit_limit'] * 60)) < $_TIME) ) {
$have_perm = 0;
}
if( $have_perm ) {
if( $config['allow_comments_wysiwyg'] != "yes" ) $comments = $db->safesql( $parse->BB_Parse( $parse->process( $_POST['comments'] ), false ) );
else {
$parse->wysiwyg = true;
$parse->ParseFilter( Array ('div', 'span', 'p', 'br', 'strong', 'em', 'ul', 'li', 'ol' ), Array (), 0, 1 );
if( $user_group[$member_id['user_group']]['allow_url'] ) $parse->tagsArray[] = 'a';
if( $user_group[$member_id['user_group']]['allow_image'] ) $parse->tagsArray[] = 'img';
$comments = $db->safesql( $parse->BB_Parse( $parse->process( $_POST['comments'] ) ) );
}
//* Автоперенос длинных слов
if( intval( $config['auto_wrap'] ) ) {
$comments = preg_split( '((>)|(<))', $comments, - 1, PREG_SPLIT_DELIM_CAPTURE );
$n = count( $comments );
for($i = 0; $i < $n; $i ++) {
if( $comments[$i] == "<" ) {
$i ++;
continue;
}
$comments[$i] = preg_replace( "#([^\s\n\r]{" . intval( $config['auto_wrap'] ) . "})#i", "\\1
", $comments[$i] );
}
$comments = join( "", $comments );
}
if( dle_strlen( $comments, $config['charset'] ) > $config['comments_maxlen'] ) {
msgbox( $lang['comm_err_2'], $lang['news_err_3'] . " $lang[all_prev]" );
} elseif( intval($config['comments_minlen']) AND dle_strlen( $comments, $config['charset'] ) < $config['comments_minlen'] ) {
msgbox( $lang['comm_err_2'], $lang['news_err_40'] . " $lang[all_prev]" );
} elseif( $parse->not_allowed_tags ) {
msgbox( $lang['comm_err_2'], $lang['news_err_33'] . " $lang[all_prev]" );
} elseif( $parse->not_allowed_text ) {
msgbox( $lang['comm_err_2'], $lang['news_err_37'] . " $lang[all_prev]" );
} else {
$db->query( "UPDATE " . PREFIX . "_{$allowed_areas[$area]['comments_table']} set text='$comments' where id='$id'" );
msgbox( $lang['comm_ok'], $lang['comm_ok_1'] . " $lang[all_prev]" );
}
} else
msgbox( $lang['comm_err_2'], $lang['comm_err_3'] );
} elseif( $_POST['mass_action'] == "mass_combine" AND count($_POST['selected_comments']) > 1 ) {
if( $_POST['dle_allow_hash'] != "" AND $_POST['dle_allow_hash'] == $dle_login_hash AND $is_logged AND $user_group[$member_id['user_group']]['del_allc'] ) {
$comments_array = array();
$ids_array = array();
foreach ( $_POST['selected_comments'] as $id ) {
$comments_array[] = intval( $id );
}
$comments = implode("','", $comments_array);
$sql_result = $db->query( "SELECT id, text FROM " . PREFIX . "_{$allowed_areas[$area]['comments_table']} where id IN ('" . $comments . "') ORDER BY date " . $config['comm_msort'] );
$comments = array();
while ( $row = $db->get_row( $sql_result ) ) {
$ids_array[] = $row['id'];
$comments[] = stripslashes( $row['text'] );
}
$db->free( $sql_result );
$comment = $db->safesql( implode("
", $comments) );
$db->query( "UPDATE " . PREFIX . "_{$allowed_areas[$area]['comments_table']} SET text='{$comment}' WHERE id='{$ids_array[0]}'" );
unset ($ids_array[0]);
foreach ( $ids_array as $id ) {
$row = $db->super_query( "SELECT * FROM " . PREFIX . "_{$allowed_areas[$area]['comments_table']} where id = '$id'" );
$author = $row['autor'];
$is_reg = $row['is_register'];
$post_id = $row['post_id'];
$db->query( "DELETE FROM " . PREFIX . "_{$allowed_areas[$area]['comments_table']} WHERE id = '$id'" );
if( $is_reg ) {
$db->query( "UPDATE " . USERPREFIX . "_users set comm_num=comm_num-1 where name ='$author'" );
}
$db->query( "UPDATE " . PREFIX . "_{$allowed_areas[$area]['counter_table']} SET comm_num=comm_num-1 where id='$post_id'" );
}
clear_cache( 'news_' );
header( "Location: {$_SESSION['referrer']}" );
die();
} else msgbox( $lang['comm_err_2'], $lang['comm_err_4'] );
} elseif( $_POST['mass_action'] == "mass_delete" AND count($_POST['selected_comments']) ) {
if( $_POST['dle_allow_hash'] != "" AND $_POST['dle_allow_hash'] == $dle_login_hash AND $is_logged AND $user_group[$member_id['user_group']]['del_allc'] ) {
foreach ( $_POST['selected_comments'] as $id ) {
$id = intval( $id );
$row = $db->super_query( "SELECT * FROM " . PREFIX . "_{$allowed_areas[$area]['comments_table']} where id = '$id'" );
$author = $row['autor'];
$is_reg = $row['is_register'];
$post_id = $row['post_id'];
$db->query( "DELETE FROM " . PREFIX . "_{$allowed_areas[$area]['comments_table']} WHERE id = '$id'" );
if( $is_reg ) {
$db->query( "UPDATE " . USERPREFIX . "_users set comm_num=comm_num-1 where name ='$author'" );
}
$db->query( "UPDATE " . PREFIX . "_{$allowed_areas[$area]['counter_table']} SET comm_num=comm_num-1 where id='$post_id'" );
}
clear_cache( 'news_' );
header( "Location: {$_SESSION['referrer']}" );
die();
} else msgbox( $lang['comm_err_2'], $lang['comm_err_4'] );
} else
msgbox( $lang['comm_err_2'], $lang['comm_err_5']." {$lang['all_prev']}" );
?>