fenglin/bbs/post_service.php

<?
        require_once "../lib/common.inc.php";
        require_once "../lib/db_open.inc.php";
        require_once "./common_lib.inc.php";
        require_once "./session_init.inc.php";
        require_once "../lib/lml.inc.php";
        require_once "./check_sub.inc.php";
        require_once "../lib/str_process.inc.php";
?>
<? 
        force_login();

        $id = (isset($_POST["id"]) ? intval($_POST["id"]) : 0);
        $reply_id = (isset($_POST["reply_id"]) ? intval($_POST["reply_id"]) : 0);
        $sid = (isset($_POST["sid"]) ? intval($_POST["sid"]) : $BBS_default_sid);
        $title = (isset($_POST["title"]) ? trim($_POST["title"]) : "");
        $transship = (isset($_POST["transship"]) && $_POST["transship"] == "1" ? 1 : 0);
        $content = (isset($_POST["content"]) ? $_POST["content"] : "");
        $emoji = (isset($_POST["emoji"]) ? intval($_POST["emoji"]) : 1);
        $reply_note = (isset($_POST["reply_note"]) && $_POST["reply_note"] == "1" ? 1 : 0);
        $sign_id = (isset($_POST["sign_id"]) ? intval($_POST["sign_id"]) : 0);

        $result_set = array(
                "return" => array(
                        "code" => 0,
                        "tid" => 0,
                        "aid" => 0,
                        "message" => "",
                        "errorFields" => array(),
                )
        );

        header("Content-Type:application/json; charset=utf-8");

        // Validate input
        if ($title == "")
        {
                $result_set["return"]["code"] = -1;
                array_push($result_set["return"]["errorFields"], array(
                        "id" => "title",
                        "errMsg" => "不能为空",
                ));
        }

        if ($emoji <= 0 || $emoji > $BBS_emoji_count)
        {
                $result_set["return"]["code"] = -1;
                array_push($result_set["return"]["errorFields"], array(
                        "id" => "emoji",
                        "errMsg" => "选择有误",
                ));
        }

        if ($sign_id < 0 || $sign_id > 3)
        {
                $result_set["return"]["code"] = -1;
                array_push($result_set["return"]["errorFields"], array(
                        "id" => "sign",
                        "errMsg" => "选择有误",
                ));
        }

        if ($result_set["return"]["code"] != 0)
        {
                mysqli_close($db_conn);
                exit(json_encode($result_set));
        }

        // Append sign
        if ($sign_id > 0)
        {
                $sql = "SELECT sign_" . $sign_id . " AS sign FROM user_pubinfo WHERE UID = " . $_SESSION["BBS_uid"];
                $rs = mysqli_query($db_conn, $sql);
                if ($rs == false)
                {
                        $result_set["return"]["code"] = -2;
                        $result_set["return"]["message"] = "Query sign error: " . mysqli_error($db_conn);
        
                        mysqli_close($db_conn);
                        exit(json_encode($result_set));
                }

                if($row = mysqli_fetch_array($rs))
                {
                        $content .= ("\n\n--\n" . split_line($row["sign"], "", 80, 10) . "\n");
                }
                mysqli_free_result($rs);
        }

        // Append indication of article update
        if ($id != 0)
        {
                $content .= ("\n--\n※作者已于 " . date("Y-m-d H:i:s") . " 修改本文※\n");
        }

        // Filter badwords and truncate
        $title = check_badwords(split_line($title, "", 80, 1));
        $content = check_badwords($content);
        $length = str_length(LML($content, false, false, 1024));

        // Initial variables
        $tid = 0;
        $nickname = "";
        $exp = 0;

        // Begin transaction
        $rs = mysqli_query($db_conn, "SET autocommit=0");
        if ($rs == false)
        {
                $result_set["return"]["code"] = -2;
                $result_set["return"]["message"] = "Mysqli error: " . mysqli_error($db_conn);

                mysqli_close($db_conn);
                exit(json_encode($result_set));
        }
        
        $rs = mysqli_query($db_conn, "BEGIN");
        if ($rs == false)
        {
                $result_set["return"]["code"] = -2;
                $result_set["return"]["message"] = "Mysqli error: " . mysqli_error($db_conn);

                mysqli_close($db_conn);
                exit(json_encode($result_set));
        }

        if($id == 0) // Post article
        {
                if (time() - $_SESSION["BBS_last_sub_tm"] < 5)
                {
                        $result_set["return"]["code"] = -1;
                        array_push($result_set["return"]["errorFields"], array(
                                "id" => "prompt",
                                "errMsg" => "发帖过于频繁，请稍等",
                        ));

                        mysqli_close($db_conn);
                        exit(json_encode($result_set));
                }
        
                if ($reply_id == 0) // Post new thread
                {
                        $sql = "SELECT SID FROM section_config WHERE SID = $sid AND enable";

                        $rs = mysqli_query($db_conn, $sql);
                        if ($rs == false)
                        {
                                $result_set["return"]["code"] = -2;
                                $result_set["return"]["message"] = "Query section error: " . mysqli_error($db_conn);
                
                                mysqli_close($db_conn);
                                exit(json_encode($result_set));
                        }
                
                        if (mysqli_num_rows($rs) == 0)
                        {
                                $result_set["return"]["code"] = -1;
                                array_push($result_set["return"]["errorFields"], array(
                                        "id" => "prompt",
                                        "errMsg" => "版块不存在！",
                                ));
                
                                mysqli_close($db_conn);
                                exit(json_encode($result_set));
                        }
                        mysqli_free_result($rs);

                        if (!$_SESSION["BBS_priv"]->checkpriv($sid, S_POST))
                        {
                                $result_set["return"]["code"] = -1;
                                array_push($result_set["return"]["errorFields"], array(
                                        "id" => "prompt",
                                        "errMsg" => "您无权发表文章！",
                                ));
                
                                mysqli_close($db_conn);
                                exit(json_encode($result_set));
                        }

                        if (check_post_count(5, $sid, true, $db_conn) != true)
                        {
                                $result_set["return"]["code"] = -1;
                                array_push($result_set["return"]["errorFields"], array(
                                        "id" => "prompt",
                                        "errMsg" => "本版连续发表主题数量达到上限",
                                ));
                
                                mysqli_close($db_conn);
                                exit(json_encode($result_set));
                        }
                }
                else // Reply article
                {
                        $sql = "SELECT TID, SID, title, `lock` FROM bbs WHERE AID = $reply_id AND visible";
                        
                        $rs = mysqli_query($db_conn, $sql);
                        if ($rs == false)
                        {
                                $result_set["return"]["code"] = -2;
                                $result_set["return"]["message"] = "Query article error: " . mysqli_error($db_conn);
                
                                mysqli_close($db_conn);
                                exit(json_encode($result_set));
                        }

                        if ($row = mysqli_fetch_array($rs))
                        {
                                $tid = $row["TID"];
                                $sid = $row["SID"];
                                $r_title = $row["title"];
                                $lock = $row["lock"];
                        }
                        else
                        {
                                $result_set["return"]["code"] = -1;
                                array_push($result_set["return"]["errorFields"], array(
                                        "id" => "prompt",
                                        "errMsg" => "回复的文章不存在！",
                                ));
                
                                mysqli_close($db_conn);
                                exit(json_encode($result_set));
                        } 
                        mysqli_free_result($rs);

                        if ($tid != 0) // Article to be replied is not the head of topic thread
                        {
                                $sql = "SELECT SID, title, `lock` FROM bbs WHERE AID = $tid AND visible";

                                $rs = mysqli_query($db_conn, $sql);
                                if ($rs == false)
                                {
                                        $result_set["return"]["code"] = -2;
                                        $result_set["return"]["message"] = "Query article error: " . mysqli_error($db_conn);
                        
                                        mysqli_close($db_conn);
                                        exit(json_encode($result_set));
                                }
        
                                if ($row = mysqli_fetch_array($rs))
                                {
                                        $sid = $row["SID"]; // In case of inconsistent SID data
                                        $r_title = $row["title"];
                                        $lock = $row["lock"];
                                }
                                else
                                {
                                        $result_set["return"]["code"] = -1;
                                        array_push($result_set["return"]["errorFields"], array(
                                                "id" => "prompt",
                                                "errMsg" => "回复的主题不存在！",
                                        ));
                        
                                        mysqli_close($db_conn);
                                        exit(json_encode($result_set));
                                }
                                mysqli_free_result($rs);                                
                        }
                        else
                        {
                                $tid = $reply_id; // Set tid to the head of the replied thread
                        }

                        if (!$_SESSION["BBS_priv"]->checkpriv($sid, S_POST))
                        {
                                $result_set["return"]["code"] = -1;
                                array_push($result_set["return"]["errorFields"], array(
                                        "id" => "prompt",
                                        "errMsg" => "您无权发表文章！",
                                ));
                
                                mysqli_close($db_conn);
                                exit(json_encode($result_set));
                        }

                        if ($lock)
                        {
                                $result_set["return"]["code"] = -1;
                                array_push($result_set["return"]["errorFields"], array(
                                        "id" => "prompt",
                                        "errMsg" => "该主题谢绝回复！",
                                ));
                
                                mysqli_close($db_conn);
                                exit(json_encode($result_set));
                        }

                        if (check_post_count(10, $sid, false, $db_conn) != true)
                        {
                                $result_set["return"]["code"] = -1;
                                array_push($result_set["return"]["errorFields"], array(
                                        "id" => "prompt",
                                        "errMsg" => "本版连续发表主题数量达到上限",
                                ));
                
                                mysqli_close($db_conn);
                                exit(json_encode($result_set));
                        }
                }

                $sql = "SELECT nickname, exp FROM user_pubinfo WHERE UID = " . $_SESSION["BBS_uid"];
                $rs = mysqli_query($db_conn, $sql);
                if ($rs == false)
                {
                        $result_set["return"]["code"] = -2;
                        $result_set["return"]["message"] = "Query user pubinfo error: " . mysqli_error($db_conn);
        
                        mysqli_close($db_conn);
                        exit(json_encode($result_set));
                }
        
                if($row = mysqli_fetch_array($rs))
                {
                        $nickname = $row["nickname"];
                        $exp = $row["exp"];
                }
                mysqli_free_result($rs);
        }
        else // Modify article
        {
                $sql = "SELECT TID, UID, SID, excerption FROM bbs WHERE AID = $id AND visible";

                $rs = mysqli_query($db_conn, $sql);
                if ($rs == false)
                {
                        $result_set["return"]["code"] = -2;
                        $result_set["return"]["message"] = "Query article error: " . mysqli_error($db_conn);
        
                        mysqli_close($db_conn);
                        exit(json_encode($result_set));
                }
        
                if($row = mysqli_fetch_array($rs))
                {
                        $tid = ($row["TID"] > 0 ? $row["TID"] : $id);
                        $uid = $row["UID"];
                        $sid = $row["SID"];
                        $excerption = $row["excerption"];
                }
                else
                {
                        $result_set["return"]["code"] = -1;
                        array_push($result_set["return"]["errorFields"], array(
                                "id" => "prompt",
                                "errMsg" => "修改的文章不存在！",
                        ));
        
                        mysqli_close($db_conn);
                        exit(json_encode($result_set));
                }
                mysqli_free_result($rs);
                
                if (!($_SESSION["BBS_priv"]->checkpriv($sid, S_POST) && $_SESSION["BBS_uid"] == $uid && (!$excerption)))
                {
                        $result_set["return"]["code"] = -1;
                        array_push($result_set["return"]["errorFields"], array(
                                "id" => "prompt",
                                "errMsg" => "您无权修改此文章！",
                        ));
        
                        mysqli_close($db_conn);
                        exit(json_encode($result_set));
                } 
        }

        //Process upload attachment
        $atta_id_list = "-1";
        $attachment_count = (isset($_FILES['attachment']['error']) ? count($_FILES['attachment']['error']) : 0);

        if ($attachment_count >= $BBS_upload_count_limit)
        {
                $result_set["return"]["code"] = -1;
                array_push($result_set["return"]["errorFields"], array(
                        "id" => "attachment",
                        "errMsg" => "文件数量超过限制",
                ));

                mysqli_close($db_conn);
                exit(json_encode($result_set));
        }

        $upload_limit = 0;
        $upload_used = 0;
        $upload_size = 0;

        if ($attachment_count > 0)
        {
                $sql = "SELECT upload_limit FROM user_pubinfo WHERE UID = " . $_SESSION["BBS_uid"];
                $rs = mysqli_query($db_conn, $sql);
                if ($rs == false)
                {
                        $result_set["return"]["code"] = -2;
                        $result_set["return"]["message"] = "Query upload limit error: " . mysqli_error($db_conn);
        
                        mysqli_close($db_conn);
                        exit(json_encode($result_set));
                }
        
                if ($row = mysqli_fetch_array($rs))
                {
                        $upload_limit = $row["upload_limit"];
                }
                mysqli_free_result($rs);
        
                $sql = "SELECT COUNT(size) AS upload_used FROM upload_file WHERE UID = " . $_SESSION["BBS_uid"] .
                                " AND deleted = 0";
        
                $rs = mysqli_query($db_conn, $sql);
                if ($rs == false)
                {
                        $result_set["return"]["code"] = -2;
                        $result_set["return"]["message"] = "Query upload file error: " . mysqli_error($db_conn);
        
                        mysqli_close($db_conn);
                        exit(json_encode($result_set));
                }
        
                if ($row = mysqli_fetch_array($rs))
                {
                        $upload_used = $row["upload_used"];
                }
                mysqli_free_result($rs);
        }

        // Validate attachments
        for ($i = 0; $i < $attachment_count; $i++)
        {
                if (!isset($_FILES['attachment']['error'][$i]) || $_FILES['attachment']['error'][$i] != UPLOAD_ERR_OK)
                {
                        $result_set["return"]["code"] = -1;
                        array_push($result_set["return"]["errorFields"], array(
                                "id" => "attachment",
                                "errMsg" => "上传文件错误",
                        ));
        
                        mysqli_close($db_conn);
                        exit(json_encode($result_set));
                }

                $filesize = $_FILES['attachment']['size'][$i];
                $filename = $_FILES['attachment']['name'][$i];

                if ($filesize > 0)
                {
                        if ($filesize > 1024 * 1024 * 2)
                        {
                                $result_set["return"]["code"] = -1;
                                array_push($result_set["return"]["errorFields"], array(
                                        "id" => "attachment",
                                        "errMsg" => "文件大小超过限制",
                                ));
                
                                mysqli_close($db_conn);
                                exit(json_encode($result_set));
                        }

                        $upload_used += $filesize;
                        if ($upload_used > $upload_limit)
                        {
                                $result_set["return"]["code"] = -1;
                                array_push($result_set["return"]["errorFields"], array(
                                        "id" => "attachment",
                                        "errMsg" => "用户上传空间配额不足",
                                ));
                
                                mysqli_close($db_conn);
                                exit(json_encode($result_set));
                        }

                        $ext = strtolower(substr($filename, (strrpos($filename, ".") ? strrpos($filename, ".") + 1 : 0)));
                        switch ($ext)
                        {
                                case "bmp":
                                case "gif":
                                case "jpg":
                                case "jpeg":
                                case "png":
                                case "tif":
                                case "tiff":
                                case "txt":
                                case "zip":
                                case "rar":
                                        break;
                                default:
                                        $result_set["return"]["code"] = -1;
                                        array_push($result_set["return"]["errorFields"], array(
                                                "id" => "attachment",
                                                "errMsg" => "不支持的文件扩展名",
                                        ));
                                        
                                        mysqli_close($db_conn);
                                        exit(json_encode($result_set));
                        }
        
                        $finfo = new finfo(FILEINFO_MIME_TYPE);
                        $mime_type = $finfo->file($_FILES['attachment']['tmp_name'][$i]);
                        $real_ext = array_search($mime_type, array(
                                        'txt' => 'text/plain',
                                        'bmp' => 'image/x-ms-bmp',
                                        'jpg' => 'image/jpeg',
                                        'png' => 'image/png',
                                        'gif' => 'image/gif',
                                        'tif' => 'image/tiff',
                                        'rar' => 'application/x-rar',
                                        'zip' => 'application/zip',
                                        ), true);
                        
                        if ($real_ext === false)
                        {
                                $result_set["return"]["code"] = -1;
                                array_push($result_set["return"]["errorFields"], array(
                                        "id" => "attachment",
                                        "errMsg" => "不支持的文件格式",
                                ));
                                
                                mysqli_close($db_conn);
                                exit(json_encode($result_set));
                        }
                }
        }

        // Store attachments
        for ($i = 0; $i < $attachment_count; $i++)
        {
                $filesize = $_FILES['attachment']['size'][$i];
                $filename = $_FILES['attachment']['name'][$i];

                $sql = "INSERT INTO upload_file(UID, size, filename, `check`) VALUES(" .
                                $_SESSION["BBS_uid"] . ", $filesize, '$filename', 0)";

                $rs = mysqli_query($db_conn, $sql);
                if ($rs == false)
                {
                        $result_set["return"]["code"] = -2;
                        $result_set["return"]["message"] = "Add upload file error: " . mysqli_error($db_conn);
        
                        mysqli_close($db_conn);
                        exit(json_encode($result_set));
                }
        
                $attachment_id = mysqli_insert_id($db_conn);
                $atta_id_list .= ("," . $attachment_id);

                $file_path = "upload/" . $attachment_id;
                if(!move_uploaded_file($_FILES['attachment']['tmp_name'][$i], $file_path))
                {
                        $result_set["return"]["code"] = -2;
                        $result_set["return"]["message"] = "Copy file error";
        
                        mysqli_close($db_conn);
                        exit(json_encode($result_set));
                }
        }

        // Add content
        $sql = "INSERT INTO bbs_content(AID, content) values(0, '" .
                        mysqli_real_escape_string($db_conn, $content) . "')";

        $rs = mysqli_query($db_conn, $sql);
        if ($rs == false)
        {
                $result_set["return"]["code"] = -2;
                $result_set["return"]["message"] = "Add content error: " . mysqli_error($db_conn);
        
                mysqli_close($db_conn);
                exit(json_encode($result_set));
        }
        $cid = mysqli_insert_id($db_conn);

        if($id == 0) // Post article
        {
                $sql = "INSERT INTO bbs(SID, TID, UID, username, nickname, title, CID, transship,
                                sub_dt, sub_ip, reply_note, exp, last_reply_dt, icon, length)
                                VALUES($sid, $tid, " . $_SESSION["BBS_uid"] . ", '" .
                                $_SESSION["BBS_username"] . "', '" .
                                mysqli_real_escape_string($db_conn, $nickname) . "', '" .
                                mysqli_real_escape_string($db_conn, $title) . "', " .
                                "$cid, $transship, NOW(), '" . client_addr() .
                                "', $reply_note, $exp, NOW(), $emoji, $length)";

                $rs = mysqli_query($db_conn, $sql);
                if ($rs == false)
                {
                        $result_set["return"]["code"] = -2;
                        $result_set["return"]["message"] = "Add article error: " . mysqli_error($db_conn);
        
                        mysqli_close($db_conn);
                        exit(json_encode($result_set));
                }
                $aid = mysqli_insert_id($db_conn);

                //Set last reply info
                if ($reply_id > 0)
                {
                        $sql = "UPDATE bbs SET reply_count = reply_count + 1,
                                        last_reply_dt = now(), last_reply_UID=" . $_SESSION["BBS_uid"] .
                                        ", last_reply_username = '" . $_SESSION["BBS_username"] .
                                        "', last_reply_nickname = '$nickname' WHERE Aid = $tid";

                        $rs = mysqli_query($db_conn, $sql);
                        if ($rs == false)
                        {
                                $result_set["return"]["code"] = -2;
                                $result_set["return"]["message"] = "Update replied article error: " . mysqli_error($db_conn);
                
                                mysqli_close($db_conn);
                                exit(json_encode($result_set));
                        }

                        //Notify the authors of the topic which is replyed.
                        $sql = "SELECT DISTINCT UID FROM bbs WHERE (AID = $tid OR TID = $tid)
                                        AND visible AND reply_note AND UID <> " . $_SESSION["BBS_uid"];

                        $rs = mysqli_query($db_conn, $sql);
                        if ($rs == false)
                        {
                                $result_set["return"]["code"] = -2;
                                $result_set["return"]["message"] = "Read reply info error: " . mysqli_error($db_conn);
                
                                mysqli_close($db_conn);
                                exit(json_encode($result_set));
                        }

                        while ($row = mysqli_fetch_array($rs))
                        {
                                //Send notification message

                                $msg_content = "[hide]SYS_Reply_Article[/hide]有人回复了您所发表/回复的主题文章，快来".
                                        "[article " . $tid . "#" . $aid . "]看看[/article]《" . $r_title . "》吧！\n";

                                $sql = "INSERT INTO bbs_msg(fromUID, toUID, content, send_dt, send_ip)
                                                VALUES($BBS_sys_uid, " . $row["UID"] . ", '" . 
                                                mysqli_real_escape_string($db_conn, $msg_content) .
                                                "', NOW(), '" . client_addr() . "')";

                                $rs_msg = mysqli_query($db_conn, $sql);
                                if ($rs_msg == false)
                                {
                                        $result_set["return"]["code"] = -2;
                                        $result_set["return"]["message"] = "Insert msg error: " . mysqli_error($db_conn);
                        
                                        mysqli_close($db_conn);
                                        exit(json_encode($result_set));
                                }
                        } 

                        mysqli_free_result($rs);
                }
                else
                {
                        $tid = $aid;
                }

                //Add exp
                if ($_SESSION["BBS_priv"]->checkpriv($sid, S_GETEXP)) //Except in test section
                {
                        $rs = user_exp_change($_SESSION["BBS_uid"], ($reply_id > 0 ? 3 : ($transship ? 5 : 15)), $db_conn);
                        if ($rs == false)
                        {
                                $result_set["return"]["code"] = -2;
                                $result_set["return"]["message"] = "Add exp error: " . mysqli_error($db_conn);
                
                                mysqli_close($db_conn);
                                exit(json_encode($result_set));
                        }
                }
        }
        else // Modify article
        {
                $aid = $id;

                $sql = "UPDATE bbs SET CID = $cid, reply_note = $reply_note,
                                icon = $emoji, length = $length WHERE AID = $aid";

                $rs = mysqli_query($db_conn, $sql);
                if ($rs == false)
                {
                        $result_set["return"]["code"] = -2;
                        $result_set["return"]["message"] = "Update article error: " . mysqli_error($db_conn);

                        mysqli_close($db_conn);
                        exit(json_encode($result_set));
                }
        }

        $sql = "UPDATE bbs_content SET AID = $aid WHERE CID = $cid";

        $rs = mysqli_query($db_conn, $sql);
        if ($rs == false)
        {
                $result_set["return"]["code"] = -2;
                $result_set["return"]["message"] = "Update content error: " . mysqli_error($db_conn);

                mysqli_close($db_conn);
                exit(json_encode($result_set));
        }

        $sql = "UPDATE upload_file SET ref_AID = $aid WHERE AID IN ($atta_id_list)";

        $rs = mysqli_query($db_conn, $sql);
        if ($rs == false)
        {
                $result_set["return"]["code"] = -2;
                $result_set["return"]["message"] = "Update upload file error: " . mysqli_error($db_conn);

                mysqli_close($db_conn);
                exit(json_encode($result_set));
        }

        //Add log
        $rs = article_op_log($aid, $_SESSION["BBS_uid"], ($id == 0 ? "A" : "M"), client_addr(), $db_conn);
        if ($rs == false)
        {
                $result_set["return"]["code"] = -2;
                $result_set["return"]["message"] = "Add log error: " . mysqli_error($db_conn);
        
                mysqli_close($db_conn);
                exit(json_encode($result_set));
        }

        // Commit transaction
        $rs = mysqli_query($db_conn, "COMMIT");
        if ($rs == false)
        {
                $result_set["return"]["code"] = -2;
                $result_set["return"]["message"] = "Mysqli error: " . mysqli_error($db_conn);

                mysqli_close($db_conn);
                exit(json_encode($result_set));
        }

        // Set return path
        $result_set["return"]["tid"] = $tid;
        $result_set["return"]["aid"] = $aid;

        $_SESSION["BBS_last_sub_tm"] = time();

        mysqli_close($db_conn);
        exit(json_encode($result_set));
?>
1	sysadm	1.1	<?
2			require_once "../lib/common.inc.php";
3			require_once "../lib/db_open.inc.php";
4			require_once "./common_lib.inc.php";
5			require_once "./session_init.inc.php";
6			require_once "../lib/lml.inc.php";
7			require_once "./check_sub.inc.php";
8			require_once "../lib/str_process.inc.php";
9			?>
10			<?
11			force_login();
12
13			$id = (isset($_POST["id"]) ? intval($_POST["id"]) : 0);
14			$reply_id = (isset($_POST["reply_id"]) ? intval($_POST["reply_id"]) : 0);
15			$sid = (isset($_POST["sid"]) ? intval($_POST["sid"]) : $BBS_default_sid);
16			$title = (isset($_POST["title"]) ? trim($_POST["title"]) : "");
17			$transship = (isset($_POST["transship"]) && $_POST["transship"] == "1" ? 1 : 0);
18			$content = (isset($_POST["content"]) ? $_POST["content"] : "");
19			$emoji = (isset($_POST["emoji"]) ? intval($_POST["emoji"]) : 1);
20			$reply_note = (isset($_POST["reply_note"]) && $_POST["reply_note"] == "1" ? 1 : 0);
21			$sign_id = (isset($_POST["sign_id"]) ? intval($_POST["sign_id"]) : 0);
22
23			$result_set = array(
24			"return" => array(
25			"code" => 0,
26			"tid" => 0,
27			"aid" => 0,
28			"message" => "",
29			"errorFields" => array(),
30			)
31			);
32
33			header("Content-Type:application/json; charset=utf-8");
34
35			// Validate input
36			if ($title == "")
37			{
38			$result_set["return"]["code"] = -1;
39			array_push($result_set["return"]["errorFields"], array(
40			"id" => "title",
41			"errMsg" => "不能为空",
42			));
43			}
44
45			if ($emoji <= 0 \|\| $emoji > $BBS_emoji_count)
46			{
47			$result_set["return"]["code"] = -1;
48			array_push($result_set["return"]["errorFields"], array(
49			"id" => "emoji",
50			"errMsg" => "选择有误",
51			));
52			}
53
54			if ($sign_id < 0 \|\| $sign_id > 3)
55			{
56			$result_set["return"]["code"] = -1;
57			array_push($result_set["return"]["errorFields"], array(
58			"id" => "sign",
59			"errMsg" => "选择有误",
60			));
61			}
62
63			if ($result_set["return"]["code"] != 0)
64			{
65			mysqli_close($db_conn);
66			exit(json_encode($result_set));
67			}
68
69			// Append sign
70			if ($sign_id > 0)
71			{
72			$sql = "SELECT sign_" . $sign_id . " AS sign FROM user_pubinfo WHERE UID = " . $_SESSION["BBS_uid"];
73			$rs = mysqli_query($db_conn, $sql);
74			if ($rs == false)
75			{
76			$result_set["return"]["code"] = -2;
77			$result_set["return"]["message"] = "Query sign error: " . mysqli_error($db_conn);
78
79			mysqli_close($db_conn);
80			exit(json_encode($result_set));
81			}
82
83			if($row = mysqli_fetch_array($rs))
84			{
85			$content .= ("\n\n--\n" . split_line($row["sign"], "", 80, 10) . "\n");
86			}
87			mysqli_free_result($rs);
88			}
89
90			// Append indication of article update
91			if ($id != 0)
92			{
93			$content .= ("\n--\n※作者已于 " . date("Y-m-d H:i:s") . " 修改本文※\n");
94			}
95
96			// Filter badwords and truncate
97			$title = check_badwords(split_line($title, "", 80, 1));
98			$content = check_badwords($content);
99			$length = str_length(LML($content, false, false, 1024));
100
101			// Initial variables
102			$tid = 0;
103			$nickname = "";
104			$exp = 0;
105
106			// Begin transaction
107			$rs = mysqli_query($db_conn, "SET autocommit=0");
108			if ($rs == false)
109			{
110			$result_set["return"]["code"] = -2;
111			$result_set["return"]["message"] = "Mysqli error: " . mysqli_error($db_conn);
112
113			mysqli_close($db_conn);
114			exit(json_encode($result_set));
115			}
116
117			$rs = mysqli_query($db_conn, "BEGIN");
118			if ($rs == false)
119			{
120			$result_set["return"]["code"] = -2;
121			$result_set["return"]["message"] = "Mysqli error: " . mysqli_error($db_conn);
122
123			mysqli_close($db_conn);
124			exit(json_encode($result_set));
125			}
126
127			if($id == 0) // Post article
128			{
129			if (time() - $_SESSION["BBS_last_sub_tm"] < 5)
130			{
131			$result_set["return"]["code"] = -1;
132			array_push($result_set["return"]["errorFields"], array(
133			"id" => "prompt",
134			"errMsg" => "发帖过于频繁，请稍等",
135			));
136
137			mysqli_close($db_conn);
138			exit(json_encode($result_set));
139			}
140
141			if ($reply_id == 0) // Post new thread
142			{
143			$sql = "SELECT SID FROM section_config WHERE SID = $sid AND enable";
144
145			$rs = mysqli_query($db_conn, $sql);
146			if ($rs == false)
147			{
148			$result_set["return"]["code"] = -2;
149			$result_set["return"]["message"] = "Query section error: " . mysqli_error($db_conn);
150
151			mysqli_close($db_conn);
152			exit(json_encode($result_set));
153			}
154
155			if (mysqli_num_rows($rs) == 0)
156			{
157			$result_set["return"]["code"] = -1;
158			array_push($result_set["return"]["errorFields"], array(
159			"id" => "prompt",
160			"errMsg" => "版块不存在！",
161			));
162
163			mysqli_close($db_conn);
164			exit(json_encode($result_set));
165			}
166			mysqli_free_result($rs);
167
168			if (!$_SESSION["BBS_priv"]->checkpriv($sid, S_POST))
169			{
170			$result_set["return"]["code"] = -1;
171			array_push($result_set["return"]["errorFields"], array(
172			"id" => "prompt",
173			"errMsg" => "您无权发表文章！",
174			));
175
176			mysqli_close($db_conn);
177			exit(json_encode($result_set));
178			}
179
180			if (check_post_count(5, $sid, true, $db_conn) != true)
181			{
182			$result_set["return"]["code"] = -1;
183			array_push($result_set["return"]["errorFields"], array(
184			"id" => "prompt",
185			"errMsg" => "本版连续发表主题数量达到上限",
186			));
187
188			mysqli_close($db_conn);
189			exit(json_encode($result_set));
190			}
191			}
192			else // Reply article
193			{
194			$sql = "SELECT TID, SID, title, `lock` FROM bbs WHERE AID = $reply_id AND visible";
195
196			$rs = mysqli_query($db_conn, $sql);
197			if ($rs == false)
198			{
199			$result_set["return"]["code"] = -2;
200			$result_set["return"]["message"] = "Query article error: " . mysqli_error($db_conn);
201
202			mysqli_close($db_conn);
203			exit(json_encode($result_set));
204			}
205
206			if ($row = mysqli_fetch_array($rs))
207			{
208			$tid = $row["TID"];
209			$sid = $row["SID"];
210			$r_title = $row["title"];
211			$lock = $row["lock"];
212			}
213			else
214			{
215			$result_set["return"]["code"] = -1;
216			array_push($result_set["return"]["errorFields"], array(
217			"id" => "prompt",
218			"errMsg" => "回复的文章不存在！",
219			));
220
221			mysqli_close($db_conn);
222			exit(json_encode($result_set));
223			}
224			mysqli_free_result($rs);
225
226			if ($tid != 0) // Article to be replied is not the head of topic thread
227			{
228			$sql = "SELECT SID, title, `lock` FROM bbs WHERE AID = $tid AND visible";
229
230			$rs = mysqli_query($db_conn, $sql);
231			if ($rs == false)
232			{
233			$result_set["return"]["code"] = -2;
234			$result_set["return"]["message"] = "Query article error: " . mysqli_error($db_conn);
235
236			mysqli_close($db_conn);
237			exit(json_encode($result_set));
238			}
239
240			if ($row = mysqli_fetch_array($rs))
241			{
242			$sid = $row["SID"]; // In case of inconsistent SID data
243			$r_title = $row["title"];
244			$lock = $row["lock"];
245			}
246			else
247			{
248			$result_set["return"]["code"] = -1;
249			array_push($result_set["return"]["errorFields"], array(
250			"id" => "prompt",
251			"errMsg" => "回复的主题不存在！",
252			));
253
254			mysqli_close($db_conn);
255			exit(json_encode($result_set));
256			}
257			mysqli_free_result($rs);
258			}
259			else
260			{
261			$tid = $reply_id; // Set tid to the head of the replied thread
262			}
263
264			if (!$_SESSION["BBS_priv"]->checkpriv($sid, S_POST))
265			{
266			$result_set["return"]["code"] = -1;
267			array_push($result_set["return"]["errorFields"], array(
268			"id" => "prompt",
269			"errMsg" => "您无权发表文章！",
270			));
271
272			mysqli_close($db_conn);
273			exit(json_encode($result_set));
274			}
275
276			if ($lock)
277			{
278			$result_set["return"]["code"] = -1;
279			array_push($result_set["return"]["errorFields"], array(
280			"id" => "prompt",
281			"errMsg" => "该主题谢绝回复！",
282			));
283
284			mysqli_close($db_conn);
285			exit(json_encode($result_set));
286			}
287
288			if (check_post_count(10, $sid, false, $db_conn) != true)
289			{
290			$result_set["return"]["code"] = -1;
291			array_push($result_set["return"]["errorFields"], array(
292			"id" => "prompt",
293			"errMsg" => "本版连续发表主题数量达到上限",
294			));
295
296			mysqli_close($db_conn);
297			exit(json_encode($result_set));
298			}
299			}
300
301			$sql = "SELECT nickname, exp FROM user_pubinfo WHERE UID = " . $_SESSION["BBS_uid"];
302			$rs = mysqli_query($db_conn, $sql);
303			if ($rs == false)
304			{
305			$result_set["return"]["code"] = -2;
306			$result_set["return"]["message"] = "Query user pubinfo error: " . mysqli_error($db_conn);
307
308			mysqli_close($db_conn);
309			exit(json_encode($result_set));
310			}
311
312			if($row = mysqli_fetch_array($rs))
313			{
314			$nickname = $row["nickname"];
315			$exp = $row["exp"];
316			}
317			mysqli_free_result($rs);
318			}
319			else // Modify article
320			{
321			$sql = "SELECT TID, UID, SID, excerption FROM bbs WHERE AID = $id AND visible";
322
323			$rs = mysqli_query($db_conn, $sql);
324			if ($rs == false)
325			{
326			$result_set["return"]["code"] = -2;
327			$result_set["return"]["message"] = "Query article error: " . mysqli_error($db_conn);
328
329			mysqli_close($db_conn);
330			exit(json_encode($result_set));
331			}
332
333			if($row = mysqli_fetch_array($rs))
334			{
335			$tid = ($row["TID"] > 0 ? $row["TID"] : $id);
336			$uid = $row["UID"];
337			$sid = $row["SID"];
338			$excerption = $row["excerption"];
339			}
340			else
341			{
342			$result_set["return"]["code"] = -1;
343			array_push($result_set["return"]["errorFields"], array(
344			"id" => "prompt",
345			"errMsg" => "修改的文章不存在！",
346			));
347
348			mysqli_close($db_conn);
349			exit(json_encode($result_set));
350			}
351			mysqli_free_result($rs);
352
353			if (!($_SESSION["BBS_priv"]->checkpriv($sid, S_POST) && $_SESSION["BBS_uid"] == $uid && (!$excerption)))
354			{
355			$result_set["return"]["code"] = -1;
356			array_push($result_set["return"]["errorFields"], array(
357			"id" => "prompt",
358			"errMsg" => "您无权修改此文章！",
359			));
360
361			mysqli_close($db_conn);
362			exit(json_encode($result_set));
363			}
364			}
365
366			//Process upload attachment
367			$atta_id_list = "-1";
368			$attachment_count = (isset($_FILES['attachment']['error']) ? count($_FILES['attachment']['error']) : 0);
369
370			if ($attachment_count >= $BBS_upload_count_limit)
371			{
372			$result_set["return"]["code"] = -1;
373			array_push($result_set["return"]["errorFields"], array(
374			"id" => "attachment",
375			"errMsg" => "文件数量超过限制",
376			));
377
378			mysqli_close($db_conn);
379			exit(json_encode($result_set));
380			}
381
382			$upload_limit = 0;
383			$upload_used = 0;
384			$upload_size = 0;
385
386			if ($attachment_count > 0)
387			{
388			$sql = "SELECT upload_limit FROM user_pubinfo WHERE UID = " . $_SESSION["BBS_uid"];
389			$rs = mysqli_query($db_conn, $sql);
390			if ($rs == false)
391			{
392			$result_set["return"]["code"] = -2;
393			$result_set["return"]["message"] = "Query upload limit error: " . mysqli_error($db_conn);
394
395			mysqli_close($db_conn);
396			exit(json_encode($result_set));
397			}
398
399			if ($row = mysqli_fetch_array($rs))
400			{
401			$upload_limit = $row["upload_limit"];
402			}
403			mysqli_free_result($rs);
404
405			$sql = "SELECT COUNT(size) AS upload_used FROM upload_file WHERE UID = " . $_SESSION["BBS_uid"] .
406			" AND deleted = 0";
407
408			$rs = mysqli_query($db_conn, $sql);
409			if ($rs == false)
410			{
411			$result_set["return"]["code"] = -2;
412			$result_set["return"]["message"] = "Query upload file error: " . mysqli_error($db_conn);
413
414			mysqli_close($db_conn);
415			exit(json_encode($result_set));
416			}
417
418			if ($row = mysqli_fetch_array($rs))
419			{
420			$upload_used = $row["upload_used"];
421			}
422			mysqli_free_result($rs);
423			}
424
425			// Validate attachments
426			for ($i = 0; $i < $attachment_count; $i++)
427			{
428			if (!isset($_FILES['attachment']['error'][$i]) \|\| $_FILES['attachment']['error'][$i] != UPLOAD_ERR_OK)
429			{
430			$result_set["return"]["code"] = -1;
431			array_push($result_set["return"]["errorFields"], array(
432			"id" => "attachment",
433			"errMsg" => "上传文件错误",
434			));
435
436			mysqli_close($db_conn);
437			exit(json_encode($result_set));
438			}
439
440			$filesize = $_FILES['attachment']['size'][$i];
441			$filename = $_FILES['attachment']['name'][$i];
442
443			if ($filesize > 0)
444			{
445			if ($filesize > 1024 * 1024 * 2)
446			{
447			$result_set["return"]["code"] = -1;
448			array_push($result_set["return"]["errorFields"], array(
449			"id" => "attachment",
450			"errMsg" => "文件大小超过限制",
451			));
452
453			mysqli_close($db_conn);
454			exit(json_encode($result_set));
455			}
456
457			$upload_used += $filesize;
458			if ($upload_used > $upload_limit)
459			{
460			$result_set["return"]["code"] = -1;
461			array_push($result_set["return"]["errorFields"], array(
462			"id" => "attachment",
463			"errMsg" => "用户上传空间配额不足",
464			));
465
466			mysqli_close($db_conn);
467			exit(json_encode($result_set));
468			}
469
470			$ext = strtolower(substr($filename, (strrpos($filename, ".") ? strrpos($filename, ".") + 1 : 0)));
471			switch ($ext)
472			{
473			case "bmp":
474			case "gif":
475			case "jpg":
476			case "jpeg":
477			case "png":
478			case "tif":
479			case "tiff":
480			case "txt":
481			case "zip":
482			case "rar":
483			break;
484			default:
485			$result_set["return"]["code"] = -1;
486			array_push($result_set["return"]["errorFields"], array(
487			"id" => "attachment",
488			"errMsg" => "不支持的文件扩展名",
489			));
490
491			mysqli_close($db_conn);
492			exit(json_encode($result_set));
493			}
494
495			$finfo = new finfo(FILEINFO_MIME_TYPE);
496			$mime_type = $finfo->file($_FILES['attachment']['tmp_name'][$i]);
497			$real_ext = array_search($mime_type, array(
498			'txt' => 'text/plain',
499			'bmp' => 'image/x-ms-bmp',
500			'jpg' => 'image/jpeg',
501			'png' => 'image/png',
502			'gif' => 'image/gif',
503			'tif' => 'image/tiff',
504			'rar' => 'application/x-rar',
505			'zip' => 'application/zip',
506			), true);
507
508			if ($real_ext === false)
509			{
510			$result_set["return"]["code"] = -1;
511			array_push($result_set["return"]["errorFields"], array(
512			"id" => "attachment",
513			"errMsg" => "不支持的文件格式",
514			));
515
516			mysqli_close($db_conn);
517			exit(json_encode($result_set));
518			}
519			}
520			}
521
522			// Store attachments
523			for ($i = 0; $i < $attachment_count; $i++)
524			{
525			$filesize = $_FILES['attachment']['size'][$i];
526			$filename = $_FILES['attachment']['name'][$i];
527
528			$sql = "INSERT INTO upload_file(UID, size, filename, `check`) VALUES(" .
529			$_SESSION["BBS_uid"] . ", $filesize, '$filename', 0)";
530
531			$rs = mysqli_query($db_conn, $sql);
532			if ($rs == false)
533			{
534			$result_set["return"]["code"] = -2;
535			$result_set["return"]["message"] = "Add upload file error: " . mysqli_error($db_conn);
536
537			mysqli_close($db_conn);
538			exit(json_encode($result_set));
539			}
540
541			$attachment_id = mysqli_insert_id($db_conn);
542			$atta_id_list .= ("," . $attachment_id);
543
544			$file_path = "upload/" . $attachment_id;
545			if(!move_uploaded_file($_FILES['attachment']['tmp_name'][$i], $file_path))
546			{
547			$result_set["return"]["code"] = -2;
548			$result_set["return"]["message"] = "Copy file error";
549
550			mysqli_close($db_conn);
551			exit(json_encode($result_set));
552			}
553			}
554
555			// Add content
556			$sql = "INSERT INTO bbs_content(AID, content) values(0, '" .
557			mysqli_real_escape_string($db_conn, $content) . "')";
558
559			$rs = mysqli_query($db_conn, $sql);
560			if ($rs == false)
561			{
562			$result_set["return"]["code"] = -2;
563			$result_set["return"]["message"] = "Add content error: " . mysqli_error($db_conn);
564
565			mysqli_close($db_conn);
566			exit(json_encode($result_set));
567			}
568			$cid = mysqli_insert_id($db_conn);
569
570			if($id == 0) // Post article
571			{
572			$sql = "INSERT INTO bbs(SID, TID, UID, username, nickname, title, CID, transship,
573			sub_dt, sub_ip, reply_note, exp, last_reply_dt, icon, length)
574			VALUES($sid, $tid, " . $_SESSION["BBS_uid"] . ", '" .
575			$_SESSION["BBS_username"] . "', '" .
576			mysqli_real_escape_string($db_conn, $nickname) . "', '" .
577			mysqli_real_escape_string($db_conn, $title) . "', " .
578			"$cid, $transship, NOW(), '" . client_addr() .
579			"', $reply_note, $exp, NOW(), $emoji, $length)";
580
581			$rs = mysqli_query($db_conn, $sql);
582			if ($rs == false)
583			{
584			$result_set["return"]["code"] = -2;
585			$result_set["return"]["message"] = "Add article error: " . mysqli_error($db_conn);
586
587			mysqli_close($db_conn);
588			exit(json_encode($result_set));
589			}
590			$aid = mysqli_insert_id($db_conn);
591
592			//Set last reply info
593			if ($reply_id > 0)
594			{
595			$sql = "UPDATE bbs SET reply_count = reply_count + 1,
596			last_reply_dt = now(), last_reply_UID=" . $_SESSION["BBS_uid"] .
597			", last_reply_username = '" . $_SESSION["BBS_username"] .
598			"', last_reply_nickname = '$nickname' WHERE Aid = $tid";
599
600			$rs = mysqli_query($db_conn, $sql);
601			if ($rs == false)
602			{
603			$result_set["return"]["code"] = -2;
604			$result_set["return"]["message"] = "Update replied article error: " . mysqli_error($db_conn);
605
606			mysqli_close($db_conn);
607			exit(json_encode($result_set));
608			}
609
610			//Notify the authors of the topic which is replyed.
611			$sql = "SELECT DISTINCT UID FROM bbs WHERE (AID = $tid OR TID = $tid)
612			AND visible AND reply_note AND UID <> " . $_SESSION["BBS_uid"];
613
614			$rs = mysqli_query($db_conn, $sql);
615			if ($rs == false)
616			{
617			$result_set["return"]["code"] = -2;
618			$result_set["return"]["message"] = "Read reply info error: " . mysqli_error($db_conn);
619
620			mysqli_close($db_conn);
621			exit(json_encode($result_set));
622			}
623
624			while ($row = mysqli_fetch_array($rs))
625			{
626			//Send notification message
627
628			$msg_content = "[hide]SYS_Reply_Article[/hide]有人回复了您所发表/回复的主题文章，快来".
629			"[article " . $tid . "#" . $aid . "]看看[/article]《" . $r_title . "》吧！\n";
630
631			$sql = "INSERT INTO bbs_msg(fromUID, toUID, content, send_dt, send_ip)
632			VALUES($BBS_sys_uid, " . $row["UID"] . ", '" .
633			mysqli_real_escape_string($db_conn, $msg_content) .
634			"', NOW(), '" . client_addr() . "')";
635
636			$rs_msg = mysqli_query($db_conn, $sql);
637			if ($rs_msg == false)
638			{
639			$result_set["return"]["code"] = -2;
640			$result_set["return"]["message"] = "Insert msg error: " . mysqli_error($db_conn);
641
642			mysqli_close($db_conn);
643			exit(json_encode($result_set));
644			}
645			}
646
647			mysqli_free_result($rs);
648			}
649			else
650			{
651			$tid = $aid;
652			}
653
654			//Add exp
655			if ($_SESSION["BBS_priv"]->checkpriv($sid, S_GETEXP)) //Except in test section
656			{
657			$rs = user_exp_change($_SESSION["BBS_uid"], ($reply_id > 0 ? 3 : ($transship ? 5 : 15)), $db_conn);
658			if ($rs == false)
659			{
660			$result_set["return"]["code"] = -2;
661			$result_set["return"]["message"] = "Add exp error: " . mysqli_error($db_conn);
662
663			mysqli_close($db_conn);
664			exit(json_encode($result_set));
665			}
666			}
667			}
668			else // Modify article
669			{
670			$aid = $id;
671
672			$sql = "UPDATE bbs SET CID = $cid, reply_note = $reply_note,
673			icon = $emoji, length = $length WHERE AID = $aid";
674
675			$rs = mysqli_query($db_conn, $sql);
676			if ($rs == false)
677			{
678			$result_set["return"]["code"] = -2;
679			$result_set["return"]["message"] = "Update article error: " . mysqli_error($db_conn);
680
681			mysqli_close($db_conn);
682			exit(json_encode($result_set));
683			}
684			}
685
686			$sql = "UPDATE bbs_content SET AID = $aid WHERE CID = $cid";
687
688			$rs = mysqli_query($db_conn, $sql);
689			if ($rs == false)
690			{
691			$result_set["return"]["code"] = -2;
692			$result_set["return"]["message"] = "Update content error: " . mysqli_error($db_conn);
693
694			mysqli_close($db_conn);
695			exit(json_encode($result_set));
696			}
697
698			$sql = "UPDATE upload_file SET ref_AID = $aid WHERE AID IN ($atta_id_list)";
699
700			$rs = mysqli_query($db_conn, $sql);
701			if ($rs == false)
702			{
703			$result_set["return"]["code"] = -2;
704			$result_set["return"]["message"] = "Update upload file error: " . mysqli_error($db_conn);
705
706			mysqli_close($db_conn);
707			exit(json_encode($result_set));
708			}
709
710			//Add log
711			$rs = article_op_log($aid, $_SESSION["BBS_uid"], ($id == 0 ? "A" : "M"), client_addr(), $db_conn);
712			if ($rs == false)
713			{
714			$result_set["return"]["code"] = -2;
715			$result_set["return"]["message"] = "Add log error: " . mysqli_error($db_conn);
716
717			mysqli_close($db_conn);
718			exit(json_encode($result_set));
719			}
720
721			// Commit transaction
722			$rs = mysqli_query($db_conn, "COMMIT");
723			if ($rs == false)
724			{
725			$result_set["return"]["code"] = -2;
726			$result_set["return"]["message"] = "Mysqli error: " . mysqli_error($db_conn);
727
728			mysqli_close($db_conn);
729			exit(json_encode($result_set));
730			}
731
732			// Set return path
733			$result_set["return"]["tid"] = $tid;
734			$result_set["return"]["aid"] = $aid;
735
736			$_SESSION["BBS_last_sub_tm"] = time();
737
738			mysqli_close($db_conn);
739			exit(json_encode($result_set));
740			?>
webmaster@leafok.com	ViewVC Help
Powered by ViewVC 1.3.0-beta1