WB 2.08.x

<?php

* Website Baker is a PHP-based Content Management System (CMS)

* designed with one goal in mind: to enable its users to produce websites

* with ease.

*

* WebsiteBaker is free software; you can redistribute it and/or

* modify it under the terms of the GNU General Public License

* as published by the Free Software Foundation; either version 2

* of the License, or (at your option) any later version.

*

* WebsiteBaker is distributed in the hope that it will be useful,

* but WITHOUT ANY WARRANTY; without even the implied warranty of

* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

* See the GNU General Public License for more details.

*

* You should have received a copy of the GNU General Public License

* along with this program; if not, write to the Free Software

* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.

*

*                   WebsiteBaker Extra Information

*

*

 * @package         news

 * @author          Ryan Djurovich

 * @copyright       2004-2009, Ryan Djurovich

 * @copyright       2009-2010, Website Baker Org. e.V.

 * @filesource		$HeadURL$

 * @author          Ryan Djurovich

 * @copyright       2004-2009, Ryan Djurovich

 * @link			http://www.websitebaker2.org/

 * @copyright       2009-2010, Website Baker Org. e.V.

 * @link			http://start.websitebaker2.org/impressum-datenschutz.php

 * @license         http://www.gnu.org/licenses/gpl.html

 * @version         $Id$

 * @platform        WebsiteBaker 2.8.x

 * @requirements    PHP 4.3.4 and higher

 * @lastmodified    $Date$

 *

// Must include code to stop this file being access directly

if(defined('WB_PATH') == false) { exit("Cannot access this file directly"); }

// load module language file

$lang = (dirname(__FILE__)) . '/languages/' . LANGUAGE . '.php';

require_once(!file_exists($lang) ? (dirname(__FILE__)) . '/languages/EN.php' : $lang );

//overwrite php.ini on Apache servers for valid SESSION ID Separator

{

}

// Check if there is a start point defined

if(isset($_GET['p']) AND is_numeric($_GET['p']) AND $_GET['p'] >= 0)

{

	$position = $_GET['p'];

}

// Get user's username, display name, email, and id - needed for insertion into post info

$users = array();

$query_users = $database->query("SELECT user_id,username,display_name,email FROM ".TABLE_PREFIX."users");

if($query_users->numRows() > 0)

{

		// Insert user info into users array

		$user_id = $user['user_id'];

		$users[$user_id]['username'] = $user['username'];

		$users[$user_id]['display_name'] = $user['display_name'];

		$users[$user_id]['email'] = $user['email'];

	}

}

// Get groups (title, if they are active, and their image [if one has been uploaded])

if (isset($groups))

{

   unset($groups);

}

$groups[0]['title'] = '';

$groups[0]['active'] = true;

$groups[0]['image'] = '';

$query_users = $database->query("SELECT group_id,title,active FROM ".TABLE_PREFIX."mod_news_groups WHERE section_id = '$section_id' ORDER BY position ASC");

if($query_users->numRows() > 0)

{

		// Insert user info into users array

		$group_id = $group['group_id'];

		$groups[$group_id]['title'] = ($group['title']);

		$groups[$group_id]['active'] = $group['active'];

		if(file_exists(WB_PATH.MEDIA_DIRECTORY.'/.news/image'.$group_id.'.jpg'))

        {

			$groups[$group_id]['image'] = WB_URL.MEDIA_DIRECTORY.'/.news/image'.$group_id.'.jpg';

		}

	}

}

// Check if we should show the main page or a post itself

if(!defined('POST_ID') OR !is_numeric(POST_ID))

{

	// Check if we should only list posts from a certain group

	if(isset($_GET['g']) AND is_numeric($_GET['g']))

    {

		$query_extra = " AND group_id = '".$_GET['g']."'";

	}

	// Check if we should only list posts from a certain group

	if(isset($_GET['g']) AND is_numeric($_GET['g']))

    {

		$query_extra = " AND group_id = '".$_GET['g']."'";

	}

	// Get settings

	$query_settings = $database->query("SELECT * FROM ".TABLE_PREFIX."mod_news_settings WHERE section_id = '$section_id'");

	if($query_settings->numRows() > 0)

    {

		$fetch_settings = $query_settings->fetchRow();

		$setting_header = ($fetch_settings['header']);

		$setting_post_loop = ($fetch_settings['post_loop']);

		$setting_footer = ($fetch_settings['footer']);

		$setting_posts_per_page = $fetch_settings['posts_per_page'];

		$setting_post_loop = '';

		$setting_footer = '';

		$setting_posts_per_page = '';

	}

	$t = time();

	// Get total number of posts

	$query_total_num = $database->query("SELECT post_id, section_id FROM ".TABLE_PREFIX."mod_news_posts

		WHERE section_id = '$section_id' AND active = '1' AND title != '' $query_extra

		AND (published_when = '0' OR published_when <= $t) AND (published_until = 0 OR published_until >= $t)");

	$total_num = $query_total_num->numRows();

	// Work-out if we need to add limit code to sql

	if($setting_posts_per_page != 0)

    {

		$limit_sql = " LIMIT $position, $setting_posts_per_page";

	}

	// Query posts (for this page)

	$query_posts = $database->query("SELECT * FROM ".TABLE_PREFIX."mod_news_posts

		WHERE section_id = '$section_id' AND active = '1' AND title != ''$query_extra

		AND (published_when = '0' OR published_when <= $t) AND (published_until = 0 OR published_until >= $t)

		ORDER BY position DESC".$limit_sql);

	$num_posts = $query_posts->numRows();

	// Create previous and next links

	if($setting_posts_per_page != 0)

    {

		if($position > 0)

        {

			if(isset($_GET['g']) AND is_numeric($_GET['g']))

            {

				$pl_prepend = '<a href="?p='.($position-$setting_posts_per_page).'&amp;g='.$_GET['g'].'">&lt;&lt; ';

			}

			$pl_append = '</a>';

			$previous_link = $pl_prepend.$TEXT['PREVIOUS'].$pl_append;

			$previous_page_link = $pl_prepend.$TEXT['PREVIOUS_PAGE'].$pl_append;

			$previous_page_link = '';

		}

		if($position + $setting_posts_per_page >= $total_num)

        {

			$next_link = '';

			$next_page_link = '';

            {

				$nl_prepend = '<a href="?p='.($position+$setting_posts_per_page).'&amp;g='.$_GET['g'].'"> ';

			}

			$nl_append = ' &gt;&gt;</a>';

			$next_link = $nl_prepend.$TEXT['NEXT'].$nl_append;

			$next_page_link = $nl_prepend.$TEXT['NEXT_PAGE'].$nl_append;

		}

		if($position+$setting_posts_per_page > $total_num)

        {

			$num_of = $position+$num_posts;

		}

		$out_of = ($position+1).'-'.$num_of.' '.strtolower($TEXT['OUT_OF']).' '.$total_num;

		$of = ($position+1).'-'.$num_of.' '.strtolower($TEXT['OF']).' '.$total_num;

		$display_previous_next_links = '';

	}

	if ($num_posts === 0)

    {

		$setting_header = '';

		$setting_post_loop = '';

		$setting_footer = '';

		$setting_posts_per_page = '';

	}

	// Print header

	if($display_previous_next_links == 'none')

    {

		print  str_replace( array('[NEXT_PAGE_LINK]','[NEXT_LINK]','[PREVIOUS_PAGE_LINK]','[PREVIOUS_LINK]','[OUT_OF]','[OF]','[DISPLAY_PREVIOUS_NEXT_LINKS]'),

                            array('','','','','','', $display_previous_next_links), $setting_header);

                            array($next_page_link, $next_link, $previous_page_link, $previous_link, $out_of, $of, $display_previous_next_links), $setting_header);

	}

	if($num_posts > 0)

    {

		if($query_extra != '')

        {

			?>

			<div class="selected-group-title">

				<?php print '<a href="'.htmlspecialchars(strip_tags($_SERVER['PHP_SELF'])).'">'.PAGE_TITLE.'</a> &gt;&gt; '.$groups[$_GET['g']]['title']; ?>

			</div>

			<?php

		}

			if(isset($groups[$post['group_id']]['active']) AND $groups[$post['group_id']]['active'] != false)

            { // Make sure parent group is active

				$uid = $post['posted_by']; // User who last modified the post

				// Workout date and time of last modified post

				if ($post['published_when'] === '0') $post['published_when'] = time();

				if ($post['published_when'] > $post['posted_when'])

                {

					$post_date = gmdate(DATE_FORMAT, $post['published_when']+TIMEZONE);

					$post_time = gmdate(TIME_FORMAT, $post['published_when']+TIMEZONE);

					$post_time = gmdate(TIME_FORMAT, $post['posted_when']+TIMEZONE);

				}

				$publ_date = date(DATE_FORMAT,$post['published_when']);

				$publ_time = date(TIME_FORMAT,$post['published_when']);

				// Work-out the post link

				$post_link = page_link($post['link']);

                $post_link_path = str_replace(WB_URL, WB_PATH,$post_link);

                if(file_exists($post_link_path))

                {

    				$create_time = date(TIME_FORMAT, filemtime ( $post_link_path ));

                } else {

                    $create_time = $publ_time;

                }

				if(isset($_GET['p']) AND $position > 0)

                {

					$post_link .= '?p='.$position;

				}

				if(isset($_GET['g']) AND is_numeric($_GET['g']))

                {

					if(isset($_GET['p']) AND $position > 0) { $post_link .= '&'; } else { $post_link .= '?'; }

                    {

					$post_link .= 'g='.$_GET['g'];

                    }

				}

				// Get group id, title, and image

				$group_id = $post['group_id'];

				$group_title = $groups[$group_id]['title'];

				$group_image = $groups[$group_id]['image'];

				$display_image = ($group_image == '') ? "none" : "inherit";

				$display_group = ($group_id == 0) ? 'none' : 'inherit';

				if ($group_image != "") $group_image= "<img src='".$group_image."' alt='".$group_title."' />";

				// Replace [wblink--PAGE_ID--] with real link

				$short = ($post['content_short']);

				$wb->preprocess($short);

				// Replace vars with values

				$post_long_len = strlen($post['content_long']);

				$vars = array('[PAGE_TITLE]', '[GROUP_ID]', '[GROUP_TITLE]', '[GROUP_IMAGE]', '[DISPLAY_GROUP]', '[DISPLAY_IMAGE]', '[TITLE]', '[SHORT]', '[LINK]', '[MODI_DATE]', '[MODI_TIME]', '[CREATED_DATE]', '[CREATED_TIME]', '[PUBLISHED_DATE]', '[PUBLISHED_TIME]', '[USER_ID]', '[USERNAME]', '[DISPLAY_NAME]', '[EMAIL]', '[TEXT_READ_MORE]','[SHOW_READ_MORE]');

				if(isset($users[$uid]['username']) AND $users[$uid]['username'] != '')

                {

					if($post_long_len < 9)

                    {

					}

                    {

					}

				}

				print str_replace($vars, $values, $setting_post_loop);

			}

		}

	}

    // Print footer

    if($display_previous_next_links == 'none')

    {

    	print  str_replace(array('[NEXT_PAGE_LINK]','[NEXT_LINK]','[PREVIOUS_PAGE_LINK]','[PREVIOUS_LINK]','[OUT_OF]','[OF]','[DISPLAY_PREVIOUS_NEXT_LINKS]'), array('','','','','','', $display_previous_next_links), $setting_footer);

    }

    else

    {

    	print str_replace(array('[NEXT_PAGE_LINK]','[NEXT_LINK]','[PREVIOUS_PAGE_LINK]','[PREVIOUS_LINK]','[OUT_OF]','[OF]','[DISPLAY_PREVIOUS_NEXT_LINKS]'), array($next_page_link, $next_link, $previous_page_link, $previous_link, $out_of, $of, $display_previous_next_links), $setting_footer);

    }

}

elseif(defined('POST_ID') AND is_numeric(POST_ID))

{

  // print '<h2>'.POST_ID.'/'.PAGE_ID.'/'.POST_SECTION.'</h2>';

  if(defined('POST_SECTION') AND POST_SECTION == $section_id)

  {

	// Get settings

	$query_settings = $database->query("SELECT * FROM ".TABLE_PREFIX."mod_news_settings WHERE section_id = '$section_id'");

	if($query_settings->numRows() > 0)

    {

		$fetch_settings = $query_settings->fetchRow();

		$setting_post_header = ($fetch_settings['post_header']);

		$setting_post_footer = ($fetch_settings['post_footer']);

		$setting_comments_header = ($fetch_settings['comments_header']);

		$setting_comments_loop = ($fetch_settings['comments_loop']);

		$setting_comments_footer = ($fetch_settings['comments_footer']);

		$setting_post_footer = '';

		$setting_comments_header = '';

		$setting_comments_loop = '';

		$setting_comments_footer = '';

    }

	// Get page info

	$query_page = $database->query("SELECT link FROM ".TABLE_PREFIX."pages WHERE page_id = '".PAGE_ID."'");

	if($query_page->numRows() > 0)

    {

		$page = $query_page->fetchRow();

		$page_link = page_link($page['link']);

		if(isset($_GET['p']) AND $position > 0)

        {

			$page_link .= '?p='.$_GET['p'];

		}

		if(isset($_GET['g']) AND is_numeric($_GET['g']))

        {

			if(isset($_GET['p']) AND $position > 0) { $page_link .= '&'; } else { $page_link .= '?'; }

			$page_link .= 'g='.$_GET['g'];

		}

	}

	// Get post info

	$t = time();

	$query_post = $database->query("SELECT * FROM ".TABLE_PREFIX."mod_news_posts

		WHERE post_id = '".POST_ID."' AND active = '1'

	if($query_post->numRows() > 0)

    {

		$post = $query_post->fetchRow();

		if(isset($groups[$post['group_id']]['active']) AND $groups[$post['group_id']]['active'] != false)

        { // Make sure parent group is active

			$uid = $post['posted_by']; // User who last modified the post

			// Workout date and time of last modified post

			if ($post['published_when'] === '0') $post['published_when'] = time();

			if ($post['published_when'] > $post['posted_when'])

            {

				$post_date = gmdate(DATE_FORMAT, $post['published_when']+TIMEZONE);

				$post_time = gmdate(TIME_FORMAT, $post['published_when']+TIMEZONE);

			}

            else

            {

				$post_date = gmdate(DATE_FORMAT, $post['posted_when']+TIMEZONE);

				$post_time = gmdate(TIME_FORMAT, $post['posted_when']+TIMEZONE);

			}

			$publ_date = date(DATE_FORMAT,$post['published_when']);

			$publ_time = date(TIME_FORMAT,$post['published_when']);

				// Work-out the post link

				$post_link = page_link($post['link']);

                $post_link_path = str_replace(WB_URL, WB_PATH,$post_link);

                if(file_exists($post_link_path))

                {

    				$create_time = date(TIME_FORMAT, filemtime ( $post_link_path ));

                } else {

                    $create_time = $publ_time;

                }

			// Get group id, title, and image

			$group_id = $post['group_id'];

			$group_title = $groups[$group_id]['title'];

			$group_image = $groups[$group_id]['image'];

			$display_image = ($group_image == '') ? "none" : "inherit";

			$display_group = ($group_id == 0) ? 'none' : 'inherit';

			if ($group_image != "") $group_image= "<img src='".$group_image."' alt='".$group_title."' />";

			$vars = array('[PAGE_TITLE]', '[GROUP_ID]', '[GROUP_TITLE]', '[GROUP_IMAGE]', '[DISPLAY_GROUP]', '[DISPLAY_IMAGE]', '[TITLE]', '[SHORT]', '[BACK]', '[TEXT_BACK]', '[TEXT_LAST_CHANGED]', '[MODI_DATE]', '[TEXT_AT]', '[MODI_TIME]', '[CREATED_DATE]', '[CREATED_TIME]', '[PUBLISHED_DATE]', '[PUBLISHED_TIME]', '[TEXT_POSTED_BY]', '[TEXT_ON]', '[USER_ID]', '[USERNAME]', '[DISPLAY_NAME]', '[EMAIL]');

			$post_short=$post['content_short'];

			$wb->preprocess($post_short);

			if(isset($users[$uid]['username']) AND $users[$uid]['username'] != '')

            {

				$values = array(PAGE_TITLE, $group_id, $group_title, $group_image, $display_group, $display_image, $post['title'], $post_short, $page_link, $MOD_NEWS['TEXT_BACK'], $MOD_NEWS['TEXT_LAST_CHANGED'],$post_date, $MOD_NEWS['TEXT_AT'], $post_time, $create_date, $create_time, $publ_date, $publ_time, $MOD_NEWS['TEXT_POSTED_BY'], $MOD_NEWS['TEXT_ON'], $uid, $users[$uid]['username'], $users[$uid]['display_name'], $users[$uid]['email']);

			}

			$post_long = ($post['content_long']);

		}

	    	exit(0);

	}

	// Print post header

	print str_replace($vars, $values, $setting_post_header);

	// Replace [wblink--PAGE_ID--] with real link

  	$wb->preprocess($post_long);

	// Print long

	print $post_long;

	// Print post footer

	print str_replace($vars, $values, $setting_post_footer);

	// Show comments section if we have to

	if(($post['commenting'] == 'private' AND isset($wb) AND $wb->is_authenticated() == true) OR $post['commenting'] == 'public')

    {

		// Print comments header

		$vars = array('[ADD_COMMENT_URL]','[TEXT_COMMENTS]');

		$values = array(WB_URL.'/modules/news/comment.php?post_id='.POST_ID.'&section_id='.$section_id, $MOD_NEWS['TEXT_COMMENTS']);

		print str_replace($vars, $values, $setting_comments_header);

		// Query for comments

		$query_comments = $database->query("SELECT title,comment,commented_when,commented_by FROM ".TABLE_PREFIX."mod_news_comments WHERE post_id = '".POST_ID."' ORDER BY commented_when ASC");

        {

			while( false != ($comment = $query_comments->fetchRow()) )

            {

				$comment['comment'] = nl2br($wb->strip_slashes($comment['comment']));

				$comment['title'] = $wb->strip_slashes($comment['title']);

				// Print comments loop

				$commented_date = gmdate(DATE_FORMAT, $comment['commented_when']+TIMEZONE);

				$commented_time = gmdate(TIME_FORMAT, $comment['commented_when']+TIMEZONE);

				$uid = $comment['commented_by'];

				$vars = array('[TITLE]','[COMMENT]','[TEXT_ON]','[DATE]','[TEXT_AT]','[TIME]','[TEXT_BY]','[USER_ID]','[USERNAME]','[DISPLAY_NAME]', '[EMAIL]');

                {

				} else {

					$values = array(($comment['title']), ($comment['comment']), $MOD_NEWS['TEXT_ON'], $commented_date, $MOD_NEWS['TEXT_AT'], $commented_time, $MOD_NEWS['TEXT_BY'], '0', strtolower($TEXT['UNKNOWN']), $TEXT['UNKNOWN'], '');

				}

				print str_replace($vars, $values, $setting_comments_loop);

			}

		} else {

			// Say no comments found

			$content = '';

			if(isset($TEXT['NONE_FOUND'])) {

				$content .= '<tr><td>'.$TEXT['NONE_FOUND'].'<br /></td></tr>';

			}

			print $content;

		}

		// Print comments footer

		$vars = array('[ADD_COMMENT_URL]','[TEXT_ADD_COMMENT]');

		$values = array(WB_URL.'/modules/news/comment.php?post_id='.POST_ID.'&section_id='.$section_id, $MOD_NEWS['TEXT_ADD_COMMENT']);

		print str_replace($vars, $values, $setting_comments_footer);

	}

    {

		$_SESSION['comes_from_view_time'] = time();

	}

}