sakura/public/posting.php

<?php
/*
 * Sakura Forum Posting
 */

// Declare Namespace
namespace Sakura;

use Sakura\Forum\Forum;
use Sakura\Forum\Post;
use Sakura\Forum\Thread;
use Sakura\Perms\Forum as ForumPerms;

// Include components
require_once '../sakura.php';

// Set location
$topicId = isset($_GET['t']) ?
$_GET['t'] :
(
    isset($_GET['p']) ?
    (new Post($_GET['p']))->thread :
    0
);

// Get the topic
if ($topicId) {
    $thread = new Thread($topicId);
}

$forumId = isset($_GET['f']) ?
$_GET['f'] :
($topicId ? $thread->forum : 0);

// Creare forum class
$forum = new Forum($forumId);

// Check if the user has access to the forum
if (!$forum->permission(ForumPerms::VIEW, $currentUser->id)
    || !$forum->permission(ForumPerms::REPLY, $currentUser->id)) {
    // Set render data
    $renderData['page'] = [
        'title' => 'Information',
        'message' => 'You do not have access to this forum.',
    ];

    // Set parse variables
    Template::vars($renderData);

    // Print page contents
    echo Template::render('global/information');
    exit;
}

// Check if the user has access to the forum
if (!isset($thread)
    && !$forum->permission(ForumPerms::CREATE_THREADS, $currentUser->id)) {
    // Set render data
    $renderData['page'] = [
        'title' => 'Information',
        'message' => 'You are not allowed to create threads in this forum.',
    ];

    // Set parse variables
    Template::vars($renderData);

    // Print page contents
    echo Template::render('global/information');
    exit;
}

$mode = isset($_GET['f'])
// New thread
 ? 'f'
: (
    isset($_GET['t'])
    // Reply to thread
     ? 't'
    : (
        isset($_GET['p'])
        // Quoting a post
         ? 'p'
        : null
    )
);

// Check if we're in reply mode
if ($mode != 'f') {
    // Attempt to get the topic
    $thread = $thread ? $thread : new Thread($topicId);

    // Prompt an error if the topic doesn't exist
    if (!$thread->id) {
        // Add page specific things
        $renderData['page'] = [
            'redirect' => (isset($_SERVER['HTTP_REFERER']) ? $_SERVER['HTTP_REFERER'] : Router::route('forums.index')),
            'message' => 'The requested post does not exist.',
        ];

        // Set parse variables
        Template::vars($renderData);

        // Print page contents
        echo Template::render('global/information');
        exit;
    }

    // Prompt an error if the topic doesn't exist
    if ($thread->status == 1
        && !$forum->permission(ForumPerms::LOCK, $currentUser->id)) {

        // Add page specific things
        $renderData['page'] = [
            'redirect' => (isset($_SERVER['HTTP_REFERER']) ? $_SERVER['HTTP_REFERER'] : Router::route('forums.index')),
            'message' => 'The thread you tried to reply to is locked.',
        ];

        // Set parse variables
        Template::vars($renderData);

        // Print page contents
        echo Template::render('global/information');
        exit;
    } elseif ($mode == 'p'
        && isset($_GET['edit'])
        && $_GET['edit'] == $_GET['p']
        && array_key_exists($_GET['p'], $thread->posts())) {

        // Permissions
        if (!$currentUser->permission(ForumPerms::EDIT_OWN, Perms::FORUM)) {
            // Add page specific things
            $renderData['page'] = [
                'redirect' => (isset($_SERVER['HTTP_REFERER']) ? $_SERVER['HTTP_REFERER'] : Router::route('forums.index')),
                'message' => 'You are not allowed to edit posts!',
            ];

            // Set parse variables
            Template::vars($renderData);

            // Print page contents
            echo Template::render('global/information');
            exit;
        }

        // Checks
        if ($thread->posts()[$_GET['p']]->poster->id != $currentUser->id
            && !$forum->permission(ForumPerms::EDIT_ANY, $currentUser->id)) {

            // Add page specific things
            $renderData['page'] = [
                'redirect' => (isset($_SERVER['HTTP_REFERER']) ? $_SERVER['HTTP_REFERER'] : Router::route('forums.index')),
                'message' => 'You can only edit your own posts!',
            ];

            // Set parse variables
            Template::vars($renderData);

            // Print page contents
            echo Template::render('global/information');
            exit;
        }

        // Reassign post for ease
        $post = $thread->posts()[$_GET['p']];

        // Set variables
        $posting = array_merge($posting, [
            'subject' => $post->subject,
            'text' => BBcode::toEditor($post->text),
            'id' => $post->id,
        ]);
        // Post deletion
    } elseif ($mode == 'p'
        && isset($_GET['delete'])
        && $_GET['delete'] == $_GET['p']
        && array_key_exists($_GET['p'], $thread->posts())) {

        // Permissions
        if (!$currentUser->permission(ForumPerms::DELETE_OWN, Perms::FORUM)) {
            // Add page specific things
            $renderData['page'] = [
                'redirect' => (isset($_SERVER['HTTP_REFERER']) ? $_SERVER['HTTP_REFERER'] : Router::route('forums.index')),
                'message' => 'You are not allowed to delete posts!',
            ];

            // Set parse variables
            Template::vars($renderData);

            // Print page contents
            echo Template::render('global/information');
            exit;
        }

        // Checks
        if ($thread->posts()[$_GET['p']]->poster->id != $currentUser->id
            && !$forum->permission(ForumPerms::DELETE_ANY, $currentUser->id)) {
            // Add page specific things
            $renderData['page'] = [
                'redirect' => (isset($_SERVER['HTTP_REFERER']) ? $_SERVER['HTTP_REFERER'] : Router::route('forums.index')),
                'message' => 'You can only delete your own posts!',
            ];

            // Set parse variables
            Template::vars($renderData);

            // Print page contents
            echo Template::render('global/information');
            exit;
        }

        // Submit mode
        if (isset($_POST['timestamp'], $_POST['sessionid'], $_POST['post_id'])) {
            // Post deletion code
            if (isset($_POST['yes'])) {
                // Delete the post
                DB::table('posts')
                    ->where('post_id', $_POST['post_id'])
                    ->delete();

                // Reload the topic
                $thread = new Thread($topicId);

                // If there's no more posts left in the topic delete it as well
                if (!$thread->replyCount()) {
                    DB::table('topics')
                        ->where('topic_id', $thread->id)
                        ->delete();
                }

                // Add page specific things
                $renderData['page'] = [
                    'redirect' => ($thread->replyCount() ? Router::route('forums.thread', $thread->id) : Router::route('forums.index')),
                    'message' => 'Your post has been deleted!',
                ];

                // Set parse variables
                Template::vars($renderData);

                // Print page contents
                echo Template::render('global/information');
                exit;
                // Return to previous page
            } else {
                header('Location: ' . Router::route('forums.post', $_POST['post_id']));
                exit;
            }
        }

        // Form mode
        $renderData = array_merge($renderData, [
            'message' => "Are you sure you want to delete your reply to {$thread->title}?",
            'conditions' => [
                'post_id' => $thread->posts()[$_GET['p']]->id,
            ],
        ]);

        // Set parse variables
        Template::vars($renderData);

        // Print page contents
        echo Template::render('global/confirm');
        exit;
    }
}

// Check if a post is being made
if (isset($_POST['post'])) {
    // Check if an ID is set
    $post = null;

    if (isset($_POST['id'])) {
        // Attempt to create a post object
        $post = new Post($_POST['id']);

        // Check if the post israel
        if ($post->id == $_POST['id']) {
            $post->subject = $_POST['subject'];
            $post->text = $_POST['text'];
            $post->editTime = time();
            $post->editReason = '';
            $post->editUser = $currentUser;
            $post = $post->update();
        } else {
            $post = null;
        }
    }

    // Add page specific things
    $renderData['page'] = [ // Why does fail just kind of not redirect to anywhere
        'redirect' => $post ? Router::route('forums.post', $post->id) : '',
        'message' => $post ? 'Made the post!' : 'Something is wrong with your post!',
        'success' => $post ? 1 : 0,
    ];

    // Print page contents or if the AJAX request is set only display the render data
    if (isset($_REQUEST['ajax'])) {
        echo $renderData['page']['message'] . '|' .
            $renderData['page']['success'] . '|' .
            $renderData['page']['redirect'];
    } else {
        // Set parse variables
        Template::vars($renderData);

        // Print page contents
        echo Template::render('global/information');
    }
    exit;
}

$route = isset($thread) ? Router::route('forums.thread', $thread->id) : Router::route('forums.new', $forum->id);
header("Location: {$route}#reply");