WB 2.08.x

<?php

// $Id: comment_page.php 605 2008-01-26 17:34:39Z thorn $

/*

 Website Baker Project <http://www.websitebaker.org/>

 Copyright (C) 2004-2008, Ryan Djurovich

 Website Baker is free software; you can redistribute it and/or modify

 it under the terms of the GNU General Public License as published by

 the Free Software Foundation; either version 2 of the License, or

 (at your option) any later version.

 Website Baker is distributed in the hope that it will be useful,

 but WITHOUT ANY WARRANTY; without even the implied warranty of

 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

 GNU General Public License for more details.

 You should have received a copy of the GNU General Public License

 along with Website Baker; if not, write to the Free Software

 Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA

*/

// Make sure page cannot be accessed directly

if(!defined('WB_URL')) { 

	header('Location: ../index.php');

	exit(0);

}

require_once(WB_PATH.'/include/captcha/captcha.php');

require_once(WB_PATH.'/include/captcha/asp.php');

if(isset($_SESSION['captcha_retry_news'])) unset($_SESSION['captcha_retry_news']);

// Get comments page template details from db

$query_settings = $database->query("SELECT comments_page,use_captcha,commenting FROM ".TABLE_PREFIX."mod_news_settings WHERE section_id = '".SECTION_ID."'");

if($query_settings->numRows() == 0) {

	header("Location: ".WB_URL.PAGES_DIRECTORY."");

	exit(0);

} else {

	$settings = $query_settings->fetchRow();

	// Print comments page

	echo str_replace('[POST_TITLE]', POST_TITLE, ($settings['comments_page']));

	?>

	<form name="comment" action="<?php echo WB_URL.'/modules/news/submit_comment.php?page_id='.PAGE_ID.'&section_id='.SECTION_ID.'&post_id='.POST_ID; ?>" method="post">

	<?php if(ENABLED_ASP) { // add some honeypot-fields

	?>

	<input type="hidden" name="submitted_when" value="<?php $t=time(); echo $t; $_SESSION['submitted_when']=$t; ?>" />

	<p class="nixhier">

	email address:

	<label for="email">We dont want to know your email-address. Leave this field empty:</label>

	<input id="email" name="email" size="60" value="" /><br />

	Homepage:

	<label for="homepage">Do not enter a homepage-url here, use field comment instead if you want:</label>

	<input id="homepage" name="homepage" size="60" value="" /><br />

	URL:

	<label for="url">Don't write anything in this url field:</label>

	<input id="url" name="url" size="60" value="" /><br />

	Comment:

	<label for="comment">Leave not your comment here:</label>

	<input id="comment" name="comment" size="60" value="" /><br />

	</p>

	<?php }

	?>

	<?php echo $TEXT['TITLE']; ?>:

	<br />

	<input type="text" name="title" maxlength="255" style="width: 90%;"<?php if(isset($_SESSION['comment_title'])) { echo ' value="'.$_SESSION['comment_title'].'"'; unset($_SESSION['comment_title']); } ?> />

	<br /><br />

	<?php echo $TEXT['COMMENT']; 

	// naming this field c0mment is part of ASP

	?>:

	<br />

	<textarea name="c0mment" style="width: 90%; height: 150px;"><?php if(isset($_SESSION['comment_body'])) { echo $_SESSION['comment_body']; unset($_SESSION['comment_body']); } ?></textarea>

	<br /><br />

	<?php

	if(isset($_SESSION['captcha_error'])) {

		echo '<font color="#FF0000">'.$_SESSION['captcha_error'].'</font><br />';

		unset($_SESSION['captcha_error']);

		$_SESSION['captcha_retry_news'] = true;

	}

	// Captcha

	if($settings['use_captcha']) {

	?>

	<table cellpadding="2" cellspacing="0" border="0">

	<tr>

		<td><?php echo $TEXT['VERIFICATION']; ?>:</td>

		<td><?php call_captcha(); ?></td>

	</tr></table>

	<br />

	<?php

	}

	?>

	<input type="submit" name="submit" value="<?php echo $TEXT['ADD']; ?> <?php echo $TEXT['COMMENT']; ?>" />

	</form>	

	<?php

}

?>