misuzu/public-legacy/forum/posting.php

<?php
namespace Misuzu;

use stdClass;
use RuntimeException;
use Misuzu\Forum\{ForumCategoryInfo,ForumPostInfo,ForumTopicInfo};
use Misuzu\Parsers\Parser;
use Index\XDateTime;
use Carbon\CarbonImmutable;

if(!isset($msz) || !($msz instanceof \Misuzu\MisuzuContext))
    die('Script must be called through the Misuzu route dispatcher.');

if(!$msz->authInfo->isLoggedIn)
    Template::throwError(401);

$currentUser = $msz->authInfo->userInfo;
$currentUserId = $currentUser->id;
if($msz->usersCtx->hasActiveBan($currentUser))
    Template::throwError(403);

$forumPostingModes = [
    'create', 'edit', 'quote', 'preview',
];

if(!empty($_POST)) {
    $mode = !empty($_POST['post']['mode']) && is_string($_POST['post']['mode']) ? $_POST['post']['mode'] : 'create';
    $postId = !empty($_POST['post']['id']) && is_string($_POST['post']['id']) ? (int)$_POST['post']['id'] : 0;
    $topicId = !empty($_POST['post']['topic']) && is_string($_POST['post']['topic']) ? (int)$_POST['post']['topic'] : 0;
    $forumId = !empty($_POST['post']['forum']) && is_string($_POST['post']['forum']) ? (int)$_POST['post']['forum'] : 0;
} else {
    $mode = !empty($_GET['m']) && is_string($_GET['m']) ? $_GET['m'] : 'create';
    $postId = !empty($_GET['p']) && is_string($_GET['p']) ? (int)$_GET['p'] : 0;
    $topicId = !empty($_GET['t']) && is_string($_GET['t']) ? (int)$_GET['t'] : 0;
    $forumId = !empty($_GET['f']) && is_string($_GET['f']) ? (int)$_GET['f'] : 0;
}

if(!in_array($mode, $forumPostingModes, true))
    Template::throwError(400);

if($mode === 'preview') {
    header('Content-Type: text/plain; charset=utf-8');

    $postText = (string)($_POST['post']['text']);
    $postParser = (int)($_POST['post']['parser']);

    if(!Parser::isValid($postParser)) {
        http_response_code(400);
        return;
    }

    http_response_code(200);
    echo Parser::instance($postParser)->parseText(htmlspecialchars($postText));
    return;
}

if(empty($postId) && empty($topicId) && empty($forumId))
    Template::throwError(404);

if(empty($postId)) {
    $hasPostInfo = false;
} else {
    try {
        $postInfo = $msz->forumCtx->posts->getPost(postId: (string)$postId);
    } catch(RuntimeException $ex) {
        Template::throwError(404);
    }

    if($postInfo->deleted)
        Template::throwError(404);

    // should automatic cross-quoting be a thing? if so, check if $topicId is < 1 first <-- what did i mean by this?
    $topicId = $postInfo->topicId;
    $hasPostInfo = true;
}

if(empty($topicId)) {
    $hasTopicInfo = false;
} else {
    try {
        $topicInfo = $msz->forumCtx->topics->getTopic(topicId: $topicId);
    } catch(RuntimeException $ex) {
        Template::throwError(404);
    }

    if($topicInfo->deleted)
        Template::throwError(404);

    $forumId = $topicInfo->categoryId;
    $originalPostInfo = $msz->forumCtx->posts->getPost(topicInfo: $topicInfo);
    $hasTopicInfo = true;
}

if(empty($forumId)) {
    $hasCategoryInfo = false;
} else {
    try {
        $categoryInfo = $msz->forumCtx->categories->getCategory(categoryId: $forumId);
    } catch(RuntimeException $ex) {
        Template::throwError(404);
    }

    $hasCategoryInfo = true;
}

if(!isset($categoryInfo) || !($categoryInfo instanceof ForumCategoryInfo))
    Template::throwError(404);

$perms = $msz->authInfo->getPerms('forum', $categoryInfo);

if($categoryInfo->archived
    || (isset($topicInfo) && $topicInfo->locked && !$perms->check(Perm::F_TOPIC_LOCK))
    || !$perms->check(Perm::F_CATEGORY_VIEW)
    || !$perms->check(Perm::F_POST_CREATE)
    || (!isset($topicInfo) && !$perms->check(Perm::F_TOPIC_CREATE)))
    Template::throwError(403);

if(!$categoryInfo->mayHaveTopics)
    Template::throwError(400);

$topicTypes = [];

if($mode === 'create' || $mode === 'edit') {
    $topicTypes['discussion'] = 'Normal discussion';

    if($perms->check(Perm::F_TOPIC_STICKY))
        $topicTypes['sticky'] = 'Sticky topic';
    if($perms->check(Perm::F_TOPIC_ANNOUNCE_LOCAL))
        $topicTypes['announce'] = 'Announcement';
    if($perms->check(Perm::F_TOPIC_ANNOUNCE_GLOBAL))
        $topicTypes['global'] = 'Global Announcement';
}

// edit mode stuff
if($mode === 'edit') {
    if(!isset($postInfo) || !($postInfo instanceof ForumPostInfo))
        Template::throwError(404);
    if(!$perms->check($postInfo->userId === $currentUserId ? Perm::F_POST_EDIT_OWN : Perm::F_POST_EDIT_ANY))
        Template::throwError(403);
}

$notices = [];

if(!empty($_POST)) {
    $topicTitle = $_POST['post']['title'] ?? '';
    $postText = $_POST['post']['text'] ?? '';
    $postParser = (int)($_POST['post']['parser'] ?? Parser::BBCODE);
    $topicType = isset($_POST['post']['type']) ? $_POST['post']['type'] : null;
    $postSignature = isset($_POST['post']['signature']);

    if(!CSRF::validateRequest()) {
        $notices[] = 'Could not verify request.';
    } else {
        $isEditingTopic = empty($topicInfo) || ($mode === 'edit' && $originalPostInfo->id == $postInfo->id);

        if($mode === 'create') {
            $postTimeout = $cfg->getInteger('forum.posting.timeout', 5);
            if($postTimeout > 0) {
                $postTimeoutThreshold = new CarbonImmutable(sprintf('-%d seconds', $postTimeout));
                $lastPostCreatedAt = $msz->forumCtx->posts->getUserLastPostCreatedAt($currentUser);

                if(XDateTime::compare($lastPostCreatedAt, $postTimeoutThreshold) > 0) {
                    $waitSeconds = $postTimeout + ((int)$lastPostCreatedAt->format('U') - time());

                    $notices[] = sprintf("You're posting too quickly! Please wait %s seconds before posting again.", number_format($waitSeconds));
                    $notices[] = "It's possible that your post went through successfully and you pressed the submit button twice by accident.";
                }
            }
        }

        if($isEditingTopic) {
            $originalTopicTitle = $topicInfo?->title ?? null; // @phpstan-ignore-line: nope it can be null
            $topicTitleChanged = $topicTitle !== $originalTopicTitle;
            $originalTopicType = $topicInfo?->typeString ?? 'discussion'; // @phpstan-ignore-line: this also
            $topicTypeChanged = $topicType !== null && $topicType !== $originalTopicType;

            $topicTitleLengths = $cfg->getValues([
                ['forum.topic.minLength:i', 3],
                ['forum.topic.maxLength:i', 100],
            ]);

            $topicTitleLength = mb_strlen(trim($topicTitle));
            if($topicTitleLength < $topicTitleLengths['forum.topic.minLength'])
                $notices[] = 'Topic title was too short.';
            elseif($topicTitleLength > $topicTitleLengths['forum.topic.maxLength'])
                $notices[] = 'Topic title was too long.';

            if($mode === 'create' && $topicType === null) {
                $topicType = array_key_first($topicTypes);
            } elseif(!array_key_exists($topicType, $topicTypes) && $topicTypeChanged) {
                $notices[] = 'You are not allowed to set this topic type.';
            }
        }

        if(!Parser::isValid($postParser))
            $notices[] = 'Invalid parser selected.';

        $postTextLengths = $cfg->getValues([
            ['forum.post.minLength:i', 1],
            ['forum.post.maxLength:i', 60000],
        ]);

        $postTextLength = mb_strlen(trim($postText));
        if($postTextLength < $postTextLengths['forum.post.minLength'])
            $notices[] = 'Post content was too short.';
        elseif($postTextLength > $postTextLengths['forum.post.maxLength'])
            $notices[] = 'Post content was too long.';

        if(empty($notices)) {
            switch($mode) {
                case 'create':
                    if(empty($topicInfo)) {
                        $topicInfo = $msz->forumCtx->topics->createTopic(
                            $categoryInfo,
                            $currentUser,
                            $topicTitle,
                            $topicType
                        );

                        $topicId = $topicInfo->id;
                        $msz->forumCtx->categories->incrementCategoryTopics($categoryInfo);
                    } else
                        $msz->forumCtx->topics->bumpTopic($topicInfo);

                    $postInfo = $msz->forumCtx->posts->createPost(
                        $topicId,
                        $currentUser,
                        $_SERVER['REMOTE_ADDR'],
                        $postText,
                        $postParser,
                        $postSignature,
                        $categoryInfo
                    );

                    $postId = $postInfo->id;
                    $msz->forumCtx->categories->incrementCategoryPosts($categoryInfo);
                    break;

                case 'edit':
                    $markUpdated = $postInfo->userId === $currentUserId
                        && $postInfo->shouldMarkAsEdited
                        && $postText !== $postInfo->body;

                    $msz->forumCtx->posts->updatePost(
                        (string)$postId,
                        remoteAddr: $_SERVER['REMOTE_ADDR'],
                        body: $postText,
                        bodyParser: $postParser,
                        displaySignature: $postSignature,
                        bumpEdited: $markUpdated
                    );

                    if($isEditingTopic && ($topicTitleChanged || $topicTypeChanged))
                        $msz->forumCtx->topics->updateTopic(
                            $topicId,
                            title: $topicTitle,
                            type: $topicType
                        );
                    break;
            }

            if(empty($notices)) { // @phpstan-ignore-line: i'm guessing it gets the type confused at this point
                // does this ternary ever return forum-topic?
                $redirect = $msz->urls->format(empty($topicInfo) ? 'forum-topic' : 'forum-post', [
                    'topic' => $topicId,
                    'post' => $postId,
                ]);
                Tools::redirect($redirect);
                return;
            }
        }
    }
}

if(!empty($topicInfo))
    Template::set('posting_topic', $topicInfo);

if($mode === 'edit') { // $post is pretty much sure to be populated at this point
    $post = new stdClass;
    $post->info = $postInfo;

    if($postInfo->userId !== null) {
        $post->user = $msz->usersCtx->getUserInfo($postInfo->userId);
        $post->colour = $msz->usersCtx->getUserColour($post->user);
        $post->postsCount = $msz->forumCtx->countTotalUserPosts($post->user);
    }

    $post->isOriginalPost = $originalPostInfo->id == $postInfo->id;
    $post->isOriginalPoster = $originalPostInfo->userId !== null && $postInfo->userId !== null
        && $originalPostInfo->userId === $postInfo->userId;

    Template::set('posting_post', $post);
}

try {
    $lastPostInfo = $msz->forumCtx->posts->getPost(userInfo: $currentUser, getLast: true, deleted: false);
    $selectedParser = $lastPostInfo->parser;
} catch(RuntimeException $ex) {
    $selectedParser = Parser::BBCODE;
}

Template::render('forum.posting', [
    'posting_breadcrumbs' => iterator_to_array($msz->forumCtx->categories->getCategoryAncestry($categoryInfo)),
    'global_accent_colour' => $msz->forumCtx->categories->getCategoryColour($categoryInfo),
    'posting_user' => $currentUser,
    'posting_user_colour' => $msz->usersCtx->getUserColour($currentUser),
    'posting_user_posts_count' => $msz->forumCtx->countTotalUserPosts($currentUser),
    'posting_user_preferred_parser' => $selectedParser,
    'posting_forum' => $categoryInfo,
    'posting_notices' => $notices,
    'posting_mode' => $mode,
    'posting_types' => $topicTypes,
    'posting_defaults' => [
        'title' => $topicTitle ?? null,
        'type' => $topicType ?? null,
        'text' => $postText ?? null,
        'parser' => $postParser ?? null,
        'signature' => $postSignature ?? null,
    ],
]);