Project

General

Profile

« Previous | Next » 

Revision 649

Added by thorn almost 17 years ago

Improved ASP in news-module.

View differences:

trunk/wb/modules/news/comment_page.php
68 68 
	<input type="text" name="title" maxlength="255" style="width: 90%;"<?php if(isset($_SESSION['comment_title'])) { echo ' value="'.$_SESSION['comment_title'].'"'; unset($_SESSION['comment_title']); } ?> />
69 69 
	<br /><br />
70 70 
	<?php echo $TEXT['COMMENT'];
71 
	// naming this field c0mment is part of ASP
72 71 
	?>:
73 72 
	<br />
74 
	<textarea name="c0mment" style="width: 90%; height: 150px;"><?php if(isset($_SESSION['comment_body'])) { echo $_SESSION['comment_body']; unset($_SESSION['comment_body']); } ?></textarea>
73 
	<?php if(ENABLED_ASP) { ?>
74 
		<textarea name="c0mment_<?php echo date('W'); ?>" style="width: 90%; height: 150px;"><?php if(isset($_SESSION['comment_body'])) { echo $_SESSION['comment_body']; unset($_SESSION['comment_body']); } ?></textarea>
75 
	<?php } else { ?>
76 
		<textarea name="comment" style="width: 90%; height: 150px;"><?php if(isset($_SESSION['comment_body'])) { echo $_SESSION['comment_body']; unset($_SESSION['comment_body']); } ?></textarea>
77 
	<?php } ?>
75 78 
	<br /><br />
76 79 
	<?php
77 80 
	if(isset($_SESSION['captcha_error'])) {
trunk/wb/modules/news/submit_comment.php
30 30 
$wb = new wb;
31 31 

  		




  32
  32
  
    
// Check if we should show the form or add a comment


  		




  33
  
  
    
if(is_numeric($_GET['page_id']) AND is_numeric($_GET['section_id']) AND isset($_GET['post_id']) AND is_numeric($_GET['post_id']) AND isset($_POST['c0mment']) AND $_POST['c0mment'] != '') {


  		




  
  33
  
    
if(is_numeric($_GET['page_id']) AND is_numeric($_GET['section_id']) AND isset($_GET['post_id']) AND is_numeric($_GET['post_id'])


  		




  
  34
  
    
	AND ( ENABLED_ASP AND isset($_POST['c0mment_'.date('W')]) AND $_POST['c0mment_'.date('W')] != '')


  		




  
  35
  
    
	OR  (!ENABLED_ASP AND isset($_POST['comment']) AND $_POST['comment'] != '')


  		




  
  36
  
    
) {


  		




  34
  37
  
    
	


  		




  
  38
  
    
	if(ENABLED_ASP)


  		




  
  39
  
    
		$comment = $_POST['c0mment_'.date('W')];


  		




  
  40
  
    
	else


  		




  
  41
  
    
		$comment = $_POST['comment'];


  		




  
  42
  
    
	


  		




  35
  43
  
    
	// Check captcha


  		




  36
  44
  
    
	$query_settings = $database->query("SELECT use_captcha FROM ".TABLE_PREFIX."mod_news_settings WHERE section_id = '".$_GET['section_id']."'");


  		




  37
  45
  
    
	if($query_settings->numRows() == 0) { 


  		




  ......




  60
  68
  
    
				if(!isset($_POST['captcha']) OR !isset($_SESSION['captcha']) OR $_POST['captcha'] != $_SESSION['captcha']) {


  		




  61
  69
  
    
					$_SESSION['captcha_error'] = $MESSAGE['MOD_FORM']['INCORRECT_CAPTCHA'];


  		




  62
  70
  
    
					$_SESSION['comment_title'] = $_POST['title'];


  		




  63
  
  
    
					$_SESSION['comment_body'] = $_POST['c0mment'];


  		




  
  71
  
    
					$_SESSION['comment_body'] = $comment;


  		




  64
  72
  
    
					exit(header('Location: '.WB_URL."/modules/news/comment.php?id={$_GET['post_id']}&sid={$_GET['section_id']}"));


  		




  65
  73
  
    
				}


  		




  66
  74
  
    
			} else {


  		




  67
  75
  
    
				$_SESSION['captcha_error'] = $MESSAGE['MOD_FORM']['INCORRECT_CAPTCHA'];


  		




  68
  76
  
    
				$_SESSION['comment_title'] = $_POST['title'];


  		




  69
  
  
    
				$_SESSION['comment_body'] = $_POST['c0mment'];


  		




  
  77
  
    
				$_SESSION['comment_body'] = $comment;


  		




  70
  78
  
    
				exit(header('Location: '.WB_URL."/modules/news/comment.php?id={$_GET['post_id']}&sid={$_GET['section_id']}"));


  		




  71
  79
  
    
			}


  		




  72
  80
  
    
		}


  		




  ......




  83
  91
  
    
	$section_id = $_GET['section_id'];


  		




  84
  92
  
    
	$post_id = $_GET['post_id'];


  		




  85
  93
  
    
	$title = $wb->add_slashes(strip_tags($_POST['title']));


  		




  86
  
  
    
	$comment = $wb->add_slashes(strip_tags($_POST['c0mment']));


  		




  
  94
  
    
	$comment = $wb->add_slashes(strip_tags($comment));


  		




  87
  95
  
    
	$commented_when = mktime();


  		




  88
  96
  
    
	if($wb->is_authenticated() == true) {


  		




  89
  97
  
    
		$commented_by = $wb->get_user_id();


  		












Also available in:  Unified diff