--- lbbs/src/article_post.c 2025/06/14 01:40:52 1.6 +++ lbbs/src/article_post.c 2025/06/15 13:42:38 1.19 @@ -14,46 +14,75 @@ * * ***************************************************************************/ +#define _POSIX_C_SOURCE 200809L + #include "article_post.h" #include "article_cache.h" #include "editor.h" #include "screen.h" +#include "bbs.h" #include "log.h" #include "io.h" #include "lml.h" #include "database.h" +#include "user_priv.h" #include #include #include +#include #define TITLE_INPUT_MAX_LEN 74 #define ARTICLE_CONTENT_MAX_LEN 1024 * 1024 * 4 // 4MB #define ARTICLE_QUOTE_MAX_LINES 20 #define ARTICLE_QUOTE_LINE_MAX_LEN 76 -int article_post(SECTION_LIST *p_section) +#define MODIFY_DT_MAX_LEN 50 + +int article_post(const SECTION_LIST *p_section, ARTICLE *p_article_new) { + MYSQL *db = NULL; + MYSQL_RES *rs = NULL; + MYSQL_ROW row; + char sql[SQL_BUFFER_LEN]; + char *sql_content = NULL; EDITOR_DATA *p_editor_data = NULL; - char title[BBS_article_title_max_len + 1]; char title_input[TITLE_INPUT_MAX_LEN + 1]; + char title_f[BBS_article_title_max_len * 2 + 1]; + char *content = NULL; + char *content_f = NULL; + long len_content; + char nickname_f[BBS_nickname_max_len * 2 + 1]; int sign_id = 0; long len; int ch; char *p, *q; + long ret = 0; - if (p_section == NULL) + if (p_section == NULL || p_article_new == NULL) { log_error("NULL pointer error\n"); } - title[0] = '\0'; + if (!checkpriv(&BBS_priv, p_section->sid, S_POST)) + { + clearscr(); + moveto(1, 1); + prints("您没有权限在本版块发表文章\n"); + press_any_key(); + + return 0; + } + + p_article_new->title[0] = '\0'; title_input[0] = '\0'; + p_article_new->transship = 0; p_editor_data = editor_data_load(""); if (p_editor_data == NULL) { log_error("editor_data_load() error\n"); - return -2; + ret = -1; + goto cleanup; } // Set title and sign @@ -61,9 +90,9 @@ int article_post(SECTION_LIST *p_section { clearscr(); moveto(21, 1); - prints("发表文章于 %s[%s] 讨论区", p_section->stitle, p_section->sname); + prints("发表文章于 %s[%s] 讨论区，类型: %s", p_section->stitle, p_section->sname, (p_article_new->transship ? "转载" : "原创")); moveto(22, 1); - prints("标题: %s", (title[0] == '\0' ? "[无]" : title)); + prints("标题: %s", (p_article_new->title[0] == '\0' ? "[无]" : p_article_new->title)); moveto(23, 1); prints("使用第 %d 个签名", sign_id); @@ -72,7 +101,7 @@ int article_post(SECTION_LIST *p_section prints(" 按0~3选签名档(0表示不使用)"); moveto(24, 1); - prints("T改标题, C取消, Enter继续: "); + prints("T改标题, C取消, Z设为转载, Y设为原创, Enter继续: "); iflush(); ch = 0; } @@ -81,6 +110,9 @@ int article_post(SECTION_LIST *p_section { switch (toupper(ch)) { + case KEY_NULL: + case KEY_TIMEOUT: + goto cleanup; case CR: igetch_reset(); break; @@ -96,8 +128,8 @@ int article_post(SECTION_LIST *p_section len = q - p; if (*p != '\0') { - memcpy(title, p, (size_t)len + 1); - memcpy(title_input, title, (size_t)len + 1); + memcpy(p_article_new->title, p, (size_t)len + 1); + memcpy(title_input, p_article_new->title, (size_t)len + 1); } ch = 0; break; @@ -107,6 +139,12 @@ int article_post(SECTION_LIST *p_section prints("取消..."); press_any_key(); goto cleanup; + case 'Y': + p_article_new->transship = 0; + break; + case 'Z': + p_article_new->transship = 1; + break; case '0': case '1': case '2': @@ -120,7 +158,7 @@ int article_post(SECTION_LIST *p_section break; } - if (ch != CR || title[0] == '\0') + if (ch != CR || p_article_new->title[0] == '\0') { continue; } @@ -138,6 +176,9 @@ int article_post(SECTION_LIST *p_section { switch (toupper(ch)) { + case KEY_NULL: + case KEY_TIMEOUT: + goto cleanup; case CR: igetch_reset(); case 'S': @@ -166,22 +207,225 @@ int article_post(SECTION_LIST *p_section } } - // editor_data_save(p_editor_data, p_data_new, data_new_len); - log_common("Debug: post article\n"); + if (SYS_server_exit) // Do not save data on shutdown + { + goto cleanup; + } + + content = malloc(ARTICLE_CONTENT_MAX_LEN); + if (content == NULL) + { + log_error("malloc(content) error: OOM\n"); + ret = -1; + goto cleanup; + } + + len_content = editor_data_save(p_editor_data, content, ARTICLE_CONTENT_MAX_LEN); + if (len_content < 0) + { + log_error("editor_data_save() error\n"); + ret = -1; + goto cleanup; + } + + db = db_open(); + if (db == NULL) + { + log_error("db_open() error: %s\n", mysql_error(db)); + ret = -1; + goto cleanup; + } + + if (sign_id > 0) + { + snprintf(sql, sizeof(sql), + "SELECT sign_%d AS sign FROM user_pubinfo WHERE UID = %d", + sign_id, BBS_priv.uid); + + if (mysql_query(db, sql) != 0) + { + log_error("Query sign error: %s\n", mysql_error(db)); + ret = -1; + goto cleanup; + } + if ((rs = mysql_use_result(db)) == NULL) + { + log_error("Get sign data failed\n"); + ret = -1; + goto cleanup; + } + + if ((row = mysql_fetch_row(rs))) + { + len_content += snprintf(content + len_content, + ARTICLE_CONTENT_MAX_LEN - (size_t)len_content, + "\n\n--\n%s\n", row[0]); + } + mysql_free_result(rs); + rs = NULL; + } + + // Begin transaction + if (mysql_query(db, "SET autocommit=0") != 0) + { + log_error("SET autocommit=0 error: %s\n", mysql_error(db)); + ret = -1; + goto cleanup; + } + + if (mysql_query(db, "BEGIN") != 0) + { + log_error("Begin transaction error: %s\n", mysql_error(db)); + ret = -1; + goto cleanup; + } + + // Secure SQL parameters + content_f = malloc((size_t)len_content * 2 + 1); + if (content_f == NULL) + { + log_error("malloc(content_f) error: OOM\n"); + ret = -1; + goto cleanup; + } + + mysql_real_escape_string(db, nickname_f, BBS_nickname, (unsigned long)strnlen(BBS_nickname, sizeof(BBS_nickname))); + mysql_real_escape_string(db, title_f, p_article_new->title, strnlen(p_article_new->title, sizeof(p_article_new->title))); + mysql_real_escape_string(db, content_f, content, (unsigned long)len_content); + + free(content); + content = NULL; + + // Add content + sql_content = malloc(SQL_BUFFER_LEN + (size_t)len_content * 2 + 1); + if (sql_content == NULL) + { + log_error("malloc(sql_content) error: OOM\n"); + ret = -1; + goto cleanup; + } + + snprintf(sql_content, SQL_BUFFER_LEN + (size_t)len_content * 2 + 1, + "INSERT INTO bbs_content(AID, content) values(0, '%s')", + content_f); + + free(content_f); + content_f = NULL; + + if (mysql_query(db, sql_content) != 0) + { + log_error("Add article content error: %s\n", mysql_error(db)); + ret = -1; + goto cleanup; + } + + p_article_new->cid = (int32_t)mysql_insert_id(db); + + free(sql_content); + sql_content = NULL; + + // Add article + snprintf(sql, sizeof(sql), + "INSERT INTO bbs(SID, TID, UID, username, nickname, title, CID, transship, " + "sub_dt, sub_ip, reply_note, exp, last_reply_dt, icon, length) " + "VALUES(%d, 0, %d, '%s', '%s', '%s', %d, %d, NOW(), '%s', 1, %d, NOW(), 1, %ld)", + p_section->sid, BBS_priv.uid, BBS_username, nickname_f, title_f, + p_article_new->cid, p_article_new->transship, hostaddr_client, BBS_user_exp, len_content); + + if (mysql_query(db, sql) != 0) + { + log_error("Add article error: %s\n", mysql_error(db)); + ret = -1; + goto cleanup; + } + + p_article_new->aid = (int32_t)mysql_insert_id(db); + + // Link content to article + snprintf(sql, sizeof(sql), + "UPDATE bbs_content SET AID = %d WHERE CID = %d", + p_article_new->aid, p_article_new->cid); + + if (mysql_query(db, sql) != 0) + { + log_error("Update content error: %s\n", mysql_error(db)); + ret = -1; + goto cleanup; + } + + // Add exp + if (checkpriv(&BBS_priv, p_section->sid, S_GETEXP)) // Except in test section + { + snprintf(sql, sizeof(sql), + "UPDATE user_pubinfo SET exp = exp + %d WHERE UID = %d", + (p_article_new->transship ? 5 : 15), BBS_priv.uid); + + if (mysql_query(db, sql) != 0) + { + log_error("Update exp error: %s\n", mysql_error(db)); + ret = -1; + goto cleanup; + } + } + + // Add log + snprintf(sql, sizeof(sql), + "INSERT INTO bbs_article_op(AID, UID, type, op_dt, op_ip)" + "VALUES(%d, %d, 'A', NOW(), '%s')", + p_article_new->aid, BBS_priv.uid, hostaddr_client); + + if (mysql_query(db, sql) != 0) + { + log_error("Add log error: %s\n", mysql_error(db)); + ret = -1; + goto cleanup; + } + + // Commit transaction + if (mysql_query(db, "COMMIT") != 0) + { + log_error("Commit transaction error: %s\n", mysql_error(db)); + ret = -1; + goto cleanup; + } + + mysql_close(db); + db = NULL; + + clearscr(); + moveto(1, 1); + prints("发送完成，新文章通常会在%d秒后可见", BBS_section_list_load_interval); + press_any_key(); + ret = 1; // Success cleanup: + mysql_close(db); + + // Cleanup buffers editor_data_cleanup(p_editor_data); - return 0; + free(sql_content); + free(content); + free(content_f); + + return (int)ret; } -int article_modify(SECTION_LIST *p_section, ARTICLE *p_article) +int article_modify(const SECTION_LIST *p_section, const ARTICLE *p_article, ARTICLE *p_article_new) { - MYSQL *db; - MYSQL_RES *rs; + MYSQL *db = NULL; + MYSQL_RES *rs = NULL; MYSQL_ROW row; char sql[SQL_BUFFER_LEN]; + char *sql_content = NULL; + char *content = NULL; + char *content_f = NULL; + long len_content; int ch; + long ret = 0; + time_t now; + struct tm tm_modify_dt; + char str_modify_dt[MODIFY_DT_MAX_LEN + 1]; EDITOR_DATA *p_editor_data = NULL; @@ -190,11 +434,22 @@ int article_modify(SECTION_LIST *p_secti log_error("NULL pointer error\n"); } + if (p_article->excerption) // Modify is not allowed + { + clearscr(); + moveto(1, 1); + prints("该文章无法被编辑，请联系版主。"); + press_any_key(); + + return 0; + } + db = db_open(); if (db == NULL) { log_error("db_open() error: %s\n", mysql_error(db)); - return -1; + ret = -1; + goto cleanup; } snprintf(sql, sizeof(sql), @@ -206,27 +461,48 @@ int article_modify(SECTION_LIST *p_secti if (mysql_query(db, sql) != 0) { log_error("Query article content error: %s\n", mysql_error(db)); - return -2; + ret = -1; + goto cleanup; } if ((rs = mysql_use_result(db)) == NULL) { log_error("Get article content data failed\n"); - return -2; + ret = -1; + goto cleanup; } if ((row = mysql_fetch_row(rs))) { - p_editor_data = editor_data_load(row[1]); + content = malloc(ARTICLE_CONTENT_MAX_LEN); + if (content == NULL) + { + log_error("malloc(content) error: OOM\n"); + ret = -1; + goto cleanup; + } + + strncpy(content, row[1], ARTICLE_CONTENT_MAX_LEN - 1); + content[ARTICLE_CONTENT_MAX_LEN - 1] = '\0'; + + // Remove control sequence + len_content = ctrl_seq_filter(content); + + p_editor_data = editor_data_load(content); if (p_editor_data == NULL) { log_error("editor_data_load(aid=%d, cid=%d) error\n", p_article->aid, atoi(row[0])); - mysql_free_result(rs); - mysql_close(db); - return -3; + ret = -1; + goto cleanup; } + + free(content); + content = NULL; } mysql_free_result(rs); + rs = NULL; + mysql_close(db); + db = NULL; for (ch = 'E'; !SYS_server_exit && toupper(ch) == 'E';) { @@ -241,6 +517,9 @@ int article_modify(SECTION_LIST *p_secti { switch (toupper(ch)) { + case KEY_NULL: + case KEY_TIMEOUT: + goto cleanup; case CR: igetch_reset(); case 'S': @@ -261,27 +540,179 @@ int article_modify(SECTION_LIST *p_secti } } - // editor_data_save(p_editor_data, p_data_new, data_new_len); - log_common("Debug: modify article\n"); + if (SYS_server_exit) // Do not save data on shutdown + { + goto cleanup; + } + + // Allocate buffers in big size + content = malloc(ARTICLE_CONTENT_MAX_LEN); + if (content == NULL) + { + log_error("malloc(content) error: OOM\n"); + ret = -1; + goto cleanup; + } + + len_content = editor_data_save(p_editor_data, content, ARTICLE_CONTENT_MAX_LEN - LINE_BUFFER_LEN); + if (len_content < 0) + { + log_error("editor_data_save() error\n"); + ret = -1; + goto cleanup; + } + + time(&now); + localtime_r(&now, &tm_modify_dt); + strftime(str_modify_dt, sizeof(str_modify_dt), "%Y-%m-%d %H:%M:%S (UTC %z)", &tm_modify_dt); + + len_content += snprintf(content + len_content, LINE_BUFFER_LEN, + "\n--\n※ 作者已于 %s 修改本文※\n", + str_modify_dt); + + db = db_open(); + if (db == NULL) + { + log_error("db_open() error: %s\n", mysql_error(db)); + ret = -1; + goto cleanup; + } + + // Begin transaction + if (mysql_query(db, "SET autocommit=0") != 0) + { + log_error("SET autocommit=0 error: %s\n", mysql_error(db)); + ret = -1; + goto cleanup; + } + + if (mysql_query(db, "BEGIN") != 0) + { + log_error("Begin transaction error: %s\n", mysql_error(db)); + ret = -1; + goto cleanup; + } + + // Secure SQL parameters + content_f = malloc((size_t)len_content * 2 + 1); + if (content_f == NULL) + { + log_error("malloc(content_f) error: OOM\n"); + ret = -1; + goto cleanup; + } + + mysql_real_escape_string(db, content_f, content, (unsigned long)len_content); + + free(content); + content = NULL; + + // Add content + sql_content = malloc(SQL_BUFFER_LEN + (size_t)len_content * 2 + 1); + if (sql_content == NULL) + { + log_error("malloc(sql_content) error: OOM\n"); + ret = -1; + goto cleanup; + } + + snprintf(sql_content, SQL_BUFFER_LEN + (size_t)len_content * 2 + 1, + "INSERT INTO bbs_content(AID, content) values(%d, '%s')", + p_article->aid, content_f); + + free(content_f); + content_f = NULL; + + if (mysql_query(db, sql_content) != 0) + { + log_error("Add article content error: %s\n", mysql_error(db)); + ret = -1; + goto cleanup; + } + + p_article_new->cid = (int32_t)mysql_insert_id(db); + + free(sql_content); + sql_content = NULL; + + // Update article + snprintf(sql, sizeof(sql), + "UPDATE bbs SET CID = %d, length = %ld, excerption = 0 WHERE AID = %d", // Set excerption = 0 explictly in case of rare condition + p_article_new->cid, len_content, p_article->aid); + + if (mysql_query(db, sql) != 0) + { + log_error("Add article error: %s\n", mysql_error(db)); + ret = -1; + goto cleanup; + } + + if (mysql_query(db, sql) != 0) + { + log_error("Update content error: %s\n", mysql_error(db)); + ret = -1; + goto cleanup; + } + + // Add log + snprintf(sql, sizeof(sql), + "INSERT INTO bbs_article_op(AID, UID, type, op_dt, op_ip)" + "VALUES(%d, %d, 'M', NOW(), '%s')", + p_article->aid, BBS_priv.uid, hostaddr_client); + + if (mysql_query(db, sql) != 0) + { + log_error("Add log error: %s\n", mysql_error(db)); + ret = -1; + goto cleanup; + } + + // Commit transaction + if (mysql_query(db, "COMMIT") != 0) + { + log_error("Commit transaction error: %s\n", mysql_error(db)); + ret = -1; + goto cleanup; + } + + mysql_close(db); + db = NULL; + + clearscr(); + moveto(1, 1); + prints("修改完成，新内容通常会在%d秒后可见", BBS_section_list_load_interval); + press_any_key(); + ret = 1; // Success cleanup: + mysql_free_result(rs); + mysql_close(db); + + // Cleanup buffers editor_data_cleanup(p_editor_data); - return 0; + free(sql_content); + free(content); + free(content_f); + + return (int)ret; } -int article_reply(SECTION_LIST *p_section, ARTICLE *p_article) +int article_reply(const SECTION_LIST *p_section, const ARTICLE *p_article, ARTICLE *p_article_new) { - MYSQL *db; - MYSQL_RES *rs; + MYSQL *db = NULL; + MYSQL_RES *rs = NULL; MYSQL_ROW row; - char sql[SQL_BUFFER_LEN]; - char content[LINE_BUFFER_LEN * ARTICLE_QUOTE_MAX_LINES + 1]; - char content_f[ARTICLE_CONTENT_MAX_LEN]; long line_offsets[ARTICLE_QUOTE_MAX_LINES + 1]; + char sql[SQL_BUFFER_LEN]; + char *sql_content = NULL; EDITOR_DATA *p_editor_data = NULL; - char title[BBS_article_title_max_len + 1]; - char title_input[BBS_article_title_max_len + 1 + 4]; // + "Re: " + char title_input[BBS_article_title_max_len + sizeof("Re: ")]; + char title_f[BBS_article_title_max_len * 2 + 1]; + char *content = NULL; + char *content_f = NULL; + long len_content; + char nickname_f[BBS_nickname_max_len * 2 + 1]; int sign_id = 0; long len; int ch; @@ -290,13 +721,25 @@ int article_reply(SECTION_LIST *p_sectio int display_len; long quote_content_lines; long i; + long ret = 0; + int topic_locked = 0; if (p_section == NULL || p_article == NULL) { log_error("NULL pointer error\n"); } - title[0] = '\0'; + if (!checkpriv(&BBS_priv, p_section->sid, S_POST)) + { + clearscr(); + moveto(1, 1); + prints("您没有权限在本版块发表文章\n"); + press_any_key(); + + return 0; + } + + p_article_new->title[0] = '\0'; snprintf(title_input, sizeof(title_input), "Re: %s", p_article->title); len = split_line(title_input, TITLE_INPUT_MAX_LEN, &eol, &display_len); title_input[len] = '\0'; @@ -305,7 +748,48 @@ int article_reply(SECTION_LIST *p_sectio if (db == NULL) { log_error("db_open() error: %s\n", mysql_error(db)); - return -1; + ret = -1; + goto cleanup; + } + + snprintf(sql, sizeof(sql), + "SELECT `lock` FROM bbs WHERE AID = %d", + (p_article->tid == 0 ? p_article->aid : p_article->tid)); + + if (mysql_query(db, sql) != 0) + { + log_error("Query article status error: %s\n", mysql_error(db)); + ret = -1; + goto cleanup; + } + if ((rs = mysql_store_result(db)) == NULL) + { + log_error("Get article status data failed\n"); + ret = -1; + goto cleanup; + } + + if ((row = mysql_fetch_row(rs))) + { + if (atoi(row[0]) != 0) + { + topic_locked = 1; + } + } + mysql_free_result(rs); + rs = NULL; + + if (topic_locked) // Reply is not allowed + { + mysql_close(db); + db = NULL; + + clearscr(); + moveto(1, 1); + prints("该主题谢绝回复"); + press_any_key(); + + goto cleanup; } snprintf(sql, sizeof(sql), @@ -317,39 +801,84 @@ int article_reply(SECTION_LIST *p_sectio if (mysql_query(db, sql) != 0) { log_error("Query article content error: %s\n", mysql_error(db)); - return -2; + ret = -1; + goto cleanup; } if ((rs = mysql_use_result(db)) == NULL) { log_error("Get article content data failed\n"); - return -2; + ret = -1; + goto cleanup; } if ((row = mysql_fetch_row(rs))) { + content = malloc(ARTICLE_CONTENT_MAX_LEN); + if (content == NULL) + { + log_error("malloc(content) error: OOM\n"); + ret = -1; + goto cleanup; + } + + content_f = malloc(ARTICLE_CONTENT_MAX_LEN); + if (content_f == NULL) + { + log_error("malloc(content_f) error: OOM\n"); + ret = -1; + goto cleanup; + } + // Apply LML render to content body len = lml_plain(row[1], content_f, ARTICLE_CONTENT_MAX_LEN); content_f[len] = '\0'; + // Remove control sequence + len = ctrl_seq_filter(content_f); + + len = snprintf(content, ARTICLE_CONTENT_MAX_LEN, + "\n\n【 在 %s (%s) 的大作中提到: 】\n", + p_article->username, p_article->nickname); + quote_content_lines = split_data_lines(content_f, ARTICLE_QUOTE_LINE_MAX_LEN, line_offsets, ARTICLE_QUOTE_MAX_LINES + 1); - for (i = 0, len = 0; i < quote_content_lines; i++) + for (i = 0; i < quote_content_lines; i++) { memcpy(content + len, ": ", 2); // quote line prefix len += 2; memcpy(content + len, content_f + line_offsets[i], (size_t)(line_offsets[i + 1] - line_offsets[i])); len += (line_offsets[i + 1] - line_offsets[i]); + if (content[len - 1] != '\n') // Appennd \n if not exist + { + content[len] = '\n'; + len++; + } + } + if (content[len - 1] != '\n') // Appennd \n if not exist + { + content[len] = '\n'; + len++; } content[len] = '\0'; + + free(content_f); + content_f = NULL; + + p_editor_data = editor_data_load(content); + if (p_editor_data == NULL) + { + log_error("editor_data_load(aid=%d, cid=%d) error\n", p_article->aid, atoi(row[0])); + ret = -1; + goto cleanup; + } + + free(content); + content = NULL; } mysql_free_result(rs); - mysql_close(db); + rs = NULL; - p_editor_data = editor_data_load(content); - if (p_editor_data == NULL) - { - log_error("editor_data_load(aid=%d, cid=%d) error\n", p_article->aid, atoi(row[0])); - return -3; - } + mysql_close(db); + db = NULL; // Set title and sign for (ch = 'T'; !SYS_server_exit;) @@ -358,7 +887,7 @@ int article_reply(SECTION_LIST *p_sectio moveto(21, 1); prints("回复文章于 %s[%s] 讨论区", p_section->stitle, p_section->sname); moveto(22, 1); - prints("标题: %s", (title[0] == '\0' ? "[无]" : title)); + prints("标题: %s", (p_article_new->title[0] == '\0' ? "[无]" : p_article_new->title)); moveto(23, 1); prints("使用第 %d 个签名", sign_id); @@ -376,6 +905,9 @@ int article_reply(SECTION_LIST *p_sectio { switch (toupper(ch)) { + case KEY_NULL: + case KEY_TIMEOUT: + goto cleanup; case CR: igetch_reset(); break; @@ -391,8 +923,8 @@ int article_reply(SECTION_LIST *p_sectio len = q - p; if (*p != '\0') { - memcpy(title, p, (size_t)len + 1); - memcpy(title_input, title, (size_t)len + 1); + memcpy(p_article_new->title, p, (size_t)len + 1); + memcpy(title_input, p_article_new->title, (size_t)len + 1); } ch = 0; break; @@ -415,7 +947,7 @@ int article_reply(SECTION_LIST *p_sectio break; } - if (ch != CR || title[0] == '\0') + if (ch != CR || p_article_new->title[0] == '\0') { continue; } @@ -433,6 +965,9 @@ int article_reply(SECTION_LIST *p_sectio { switch (toupper(ch)) { + case KEY_NULL: + case KEY_TIMEOUT: + goto cleanup; case CR: igetch_reset(); case 'S': @@ -461,11 +996,223 @@ int article_reply(SECTION_LIST *p_sectio } } - // editor_data_save(p_editor_data, p_data_new, data_new_len); - log_common("Debug: reply article\n"); + if (SYS_server_exit) // Do not save data on shutdown + { + goto cleanup; + } + + content = malloc(ARTICLE_CONTENT_MAX_LEN); + if (content == NULL) + { + log_error("malloc(content) error: OOM\n"); + ret = -1; + goto cleanup; + } + + len_content = editor_data_save(p_editor_data, content, ARTICLE_CONTENT_MAX_LEN); + if (len_content < 0) + { + log_error("editor_data_save() error\n"); + ret = -1; + goto cleanup; + } + + db = db_open(); + if (db == NULL) + { + log_error("db_open() error: %s\n", mysql_error(db)); + ret = -1; + goto cleanup; + } + + if (sign_id > 0) + { + snprintf(sql, sizeof(sql), + "SELECT sign_%d AS sign FROM user_pubinfo WHERE UID = %d", + sign_id, BBS_priv.uid); + + if (mysql_query(db, sql) != 0) + { + log_error("Query sign error: %s\n", mysql_error(db)); + ret = -1; + goto cleanup; + } + if ((rs = mysql_use_result(db)) == NULL) + { + log_error("Get sign data failed\n"); + ret = -1; + goto cleanup; + } + + if ((row = mysql_fetch_row(rs))) + { + len_content += snprintf(content + len_content, + ARTICLE_CONTENT_MAX_LEN - (size_t)len_content, + "\n\n--\n%s\n", row[0]); + } + mysql_free_result(rs); + rs = NULL; + } + + // Begin transaction + if (mysql_query(db, "SET autocommit=0") != 0) + { + log_error("SET autocommit=0 error: %s\n", mysql_error(db)); + ret = -1; + goto cleanup; + } + + if (mysql_query(db, "BEGIN") != 0) + { + log_error("Begin transaction error: %s\n", mysql_error(db)); + ret = -1; + goto cleanup; + } + + // Secure SQL parameters + content_f = malloc((size_t)len_content * 2 + 1); + if (content_f == NULL) + { + log_error("malloc(content_f) error: OOM\n"); + ret = -1; + goto cleanup; + } + + mysql_real_escape_string(db, nickname_f, BBS_nickname, (unsigned long)strnlen(BBS_nickname, sizeof(BBS_nickname))); + mysql_real_escape_string(db, title_f, p_article_new->title, strnlen(p_article_new->title, sizeof(p_article_new->title))); + mysql_real_escape_string(db, content_f, content, (unsigned long)len_content); + + free(content); + content = NULL; + + // Add content + sql_content = malloc(SQL_BUFFER_LEN + (size_t)len_content * 2 + 1); + if (sql_content == NULL) + { + log_error("malloc(sql_content) error: OOM\n"); + ret = -1; + goto cleanup; + } + + snprintf(sql_content, SQL_BUFFER_LEN + (size_t)len_content * 2 + 1, + "INSERT INTO bbs_content(AID, content) values(0, '%s')", + content_f); + + free(content_f); + content_f = NULL; + + if (mysql_query(db, sql_content) != 0) + { + log_error("Add article content error: %s\n", mysql_error(db)); + ret = -1; + goto cleanup; + } + + p_article_new->cid = (int32_t)mysql_insert_id(db); + + free(sql_content); + sql_content = NULL; + + // Add article + snprintf(sql, sizeof(sql), + "INSERT INTO bbs(SID, TID, UID, username, nickname, title, CID, transship, " + "sub_dt, sub_ip, reply_note, exp, last_reply_dt, icon, length) " + "VALUES(%d, %d, %d, '%s', '%s', '%s', %d, 0, NOW(), '%s', 1, %d, NOW(), 1, %ld)", + p_section->sid, (p_article->tid == 0 ? p_article->aid : p_article->tid), + BBS_priv.uid, BBS_username, nickname_f, title_f, + p_article_new->cid, hostaddr_client, BBS_user_exp, len_content); + + if (mysql_query(db, sql) != 0) + { + log_error("Add article error: %s\n", mysql_error(db)); + ret = -1; + goto cleanup; + } + + p_article_new->aid = (int32_t)mysql_insert_id(db); + + // Update topic article + snprintf(sql, sizeof(sql), + "UPDATE bbs SET reply_count = reply_count + 1, " + "last_reply_dt = NOW(), last_reply_UID=%d, last_reply_username = '%s', " + "last_reply_nickname = '%s' WHERE AID = %d", + BBS_priv.uid, BBS_username, nickname_f, + (p_article->tid == 0 ? p_article->aid : p_article->tid)); + + if (mysql_query(db, sql) != 0) + { + log_error("Update topic article error: %s\n", mysql_error(db)); + ret = -1; + goto cleanup; + } + + // Link content to article + snprintf(sql, sizeof(sql), + "UPDATE bbs_content SET AID = %d WHERE CID = %d", + p_article_new->aid, p_article_new->cid); + + if (mysql_query(db, sql) != 0) + { + log_error("Update content error: %s\n", mysql_error(db)); + ret = -1; + goto cleanup; + } + + // Add exp + if (checkpriv(&BBS_priv, p_section->sid, S_GETEXP)) // Except in test section + { + snprintf(sql, sizeof(sql), + "UPDATE user_pubinfo SET exp = exp + %d WHERE UID = %d", + 3, BBS_priv.uid); + + if (mysql_query(db, sql) != 0) + { + log_error("Update exp error: %s\n", mysql_error(db)); + ret = -1; + goto cleanup; + } + } + + // Add log + snprintf(sql, sizeof(sql), + "INSERT INTO bbs_article_op(AID, UID, type, op_dt, op_ip)" + "VALUES(%d, %d, 'A', NOW(), '%s')", + p_article_new->aid, BBS_priv.uid, hostaddr_client); + + if (mysql_query(db, sql) != 0) + { + log_error("Add log error: %s\n", mysql_error(db)); + ret = -1; + goto cleanup; + } + + // Commit transaction + if (mysql_query(db, "COMMIT") != 0) + { + log_error("Commit transaction error: %s\n", mysql_error(db)); + ret = -1; + goto cleanup; + } + + mysql_close(db); + db = NULL; + + clearscr(); + moveto(1, 1); + prints("发送完成，新文章通常会在%d秒后可见", BBS_section_list_load_interval); + press_any_key(); + ret = 1; // Success cleanup: + mysql_free_result(rs); + mysql_close(db); + + // Cleanup buffers editor_data_cleanup(p_editor_data); - return 0; + free(sql_content); + free(content); + free(content_f); + + return (int)ret; }