1
|
<?php
|
2
|
|
3
|
// $Id: view.php 892 2008-12-29 08:47:53Z Ruebenwurzel $
|
4
|
|
5
|
/*
|
6
|
|
7
|
Website Baker Project <http://www.websitebaker.org/>
|
8
|
Copyright (C) 2004-2008, Ryan Djurovich
|
9
|
|
10
|
Website Baker is free software; you can redistribute it and/or modify
|
11
|
it under the terms of the GNU General Public License as published by
|
12
|
the Free Software Foundation; either version 2 of the License, or
|
13
|
(at your option) any later version.
|
14
|
|
15
|
Website Baker is distributed in the hope that it will be useful,
|
16
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
17
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
18
|
GNU General Public License for more details.
|
19
|
|
20
|
You should have received a copy of the GNU General Public License
|
21
|
along with Website Baker; if not, write to the Free Software
|
22
|
Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
23
|
|
24
|
*/
|
25
|
|
26
|
// Must include code to stop this file being access directly
|
27
|
if(defined('WB_PATH') == false) { exit("Cannot access this file directly"); }
|
28
|
|
29
|
// check if frontend.css file needs to be included into the <body></body> of view.php
|
30
|
if((!function_exists('register_frontend_modfiles') || !defined('MOD_FRONTEND_CSS_REGISTERED')) && file_exists(WB_PATH .'/modules/news/frontend.css')) {
|
31
|
echo '<style type="text/css">';
|
32
|
include(WB_PATH .'/modules/news/frontend.css');
|
33
|
echo "\n</style>\n";
|
34
|
}
|
35
|
|
36
|
//overwrite php.ini on Apache servers for valid SESSION ID Separator
|
37
|
if(function_exists('ini_set')) {
|
38
|
ini_set('arg_separator.output', '&');
|
39
|
}
|
40
|
|
41
|
// Check if there is a start point defined
|
42
|
if(isset($_GET['p']) AND is_numeric($_GET['p']) AND $_GET['p'] >= 0) {
|
43
|
$position = $_GET['p'];
|
44
|
} else {
|
45
|
$position = 0;
|
46
|
}
|
47
|
|
48
|
// Get user's username, display name, email, and id - needed for insertion into post info
|
49
|
$users = array();
|
50
|
$query_users = $database->query("SELECT user_id,username,display_name,email FROM ".TABLE_PREFIX."users");
|
51
|
if($query_users->numRows() > 0) {
|
52
|
while($user = $query_users->fetchRow()) {
|
53
|
// Insert user info into users array
|
54
|
$user_id = $user['user_id'];
|
55
|
$users[$user_id]['username'] = $user['username'];
|
56
|
$users[$user_id]['display_name'] = $user['display_name'];
|
57
|
$users[$user_id]['email'] = $user['email'];
|
58
|
}
|
59
|
}
|
60
|
|
61
|
// Get groups (title, if they are active, and their image [if one has been uploaded])
|
62
|
$groups[0]['title'] = '';
|
63
|
$groups[0]['active'] = true;
|
64
|
$groups[0]['image'] = '';
|
65
|
$query_users = $database->query("SELECT group_id,title,active FROM ".TABLE_PREFIX."mod_news_groups WHERE section_id = '$section_id' ORDER BY position ASC");
|
66
|
if($query_users->numRows() > 0) {
|
67
|
while($group = $query_users->fetchRow()) {
|
68
|
// Insert user info into users array
|
69
|
$group_id = $group['group_id'];
|
70
|
$groups[$group_id]['title'] = ($group['title']);
|
71
|
$groups[$group_id]['active'] = $group['active'];
|
72
|
if(file_exists(WB_PATH.MEDIA_DIRECTORY.'/.news/image'.$group_id.'.jpg')) {
|
73
|
$groups[$group_id]['image'] = WB_URL.MEDIA_DIRECTORY.'/.news/image'.$group_id.'.jpg';
|
74
|
} else {
|
75
|
$groups[$group_id]['image'] = '';
|
76
|
}
|
77
|
}
|
78
|
}
|
79
|
|
80
|
// Check if we should show the main page or a post itself
|
81
|
if(!defined('POST_ID') OR !is_numeric(POST_ID)) {
|
82
|
|
83
|
// Check if we should only list posts from a certain group
|
84
|
if(isset($_GET['g']) AND is_numeric($_GET['g'])) {
|
85
|
$query_extra = " AND group_id = '".$_GET['g']."'";
|
86
|
} else {
|
87
|
$query_extra = '';
|
88
|
}
|
89
|
|
90
|
// Get settings
|
91
|
$query_settings = $database->query("SELECT * FROM ".TABLE_PREFIX."mod_news_settings WHERE section_id = '$section_id'");
|
92
|
if($query_settings->numRows() > 0) {
|
93
|
$fetch_settings = $query_settings->fetchRow();
|
94
|
$setting_header = ($fetch_settings['header']);
|
95
|
$setting_post_loop = ($fetch_settings['post_loop']);
|
96
|
$setting_footer = ($fetch_settings['footer']);
|
97
|
$setting_posts_per_page = $fetch_settings['posts_per_page'];
|
98
|
} else {
|
99
|
$setting_header = '';
|
100
|
$setting_post_loop = '';
|
101
|
$setting_footer = '';
|
102
|
$setting_posts_per_page = '';
|
103
|
}
|
104
|
|
105
|
$t = time();
|
106
|
// Get total number of posts
|
107
|
$query_total_num = $database->query("SELECT post_id FROM ".TABLE_PREFIX."mod_news_posts
|
108
|
WHERE section_id = '$section_id' AND active = '1' AND title != '' $query_extra
|
109
|
AND (published_when = '0' OR published_when <= $t) AND (published_until = 0 OR published_until >= $t)");
|
110
|
$total_num = $query_total_num->numRows();
|
111
|
|
112
|
// Work-out if we need to add limit code to sql
|
113
|
if($setting_posts_per_page != 0) {
|
114
|
$limit_sql = " LIMIT $position,$setting_posts_per_page";
|
115
|
} else {
|
116
|
$limit_sql = "";
|
117
|
}
|
118
|
|
119
|
// Query posts (for this page)
|
120
|
$query_posts = $database->query("SELECT * FROM ".TABLE_PREFIX."mod_news_posts
|
121
|
WHERE section_id = '$section_id' AND active = '1' AND title != ''$query_extra
|
122
|
AND (published_when = '0' OR published_when <= $t) AND (published_until = 0 OR published_until >= $t)
|
123
|
ORDER BY position DESC".$limit_sql);
|
124
|
$num_posts = $query_posts->numRows();
|
125
|
|
126
|
// Create previous and next links
|
127
|
if($setting_posts_per_page != 0) {
|
128
|
if($position > 0) {
|
129
|
if(isset($_GET['g']) AND is_numeric($_GET['g'])) {
|
130
|
$pl_prepend = '<a href="?p='.($position-$setting_posts_per_page).'&g='.$_GET['g'].'"><< ';
|
131
|
} else {
|
132
|
$pl_prepend = '<a href="?p='.($position-$setting_posts_per_page).'"><< ';
|
133
|
}
|
134
|
$pl_append = '</a>';
|
135
|
$previous_link = $pl_prepend.$TEXT['PREVIOUS'].$pl_append;
|
136
|
$previous_page_link = $pl_prepend.$TEXT['PREVIOUS_PAGE'].$pl_append;
|
137
|
} else {
|
138
|
$previous_link = '';
|
139
|
$previous_page_link = '';
|
140
|
}
|
141
|
if($position+$setting_posts_per_page >= $total_num) {
|
142
|
$next_link = '';
|
143
|
$next_page_link = '';
|
144
|
} else {
|
145
|
if(isset($_GET['g']) AND is_numeric($_GET['g'])) {
|
146
|
$nl_prepend = '<a href="?p='.($position+$setting_posts_per_page).'&g='.$_GET['g'].'"> ';
|
147
|
} else {
|
148
|
$nl_prepend = '<a href="?p='.($position+$setting_posts_per_page).'"> ';
|
149
|
}
|
150
|
$nl_append = ' >></a>';
|
151
|
$next_link = $nl_prepend.$TEXT['NEXT'].$nl_append;
|
152
|
$next_page_link = $nl_prepend.$TEXT['NEXT_PAGE'].$nl_append;
|
153
|
}
|
154
|
if($position+$setting_posts_per_page > $total_num) {
|
155
|
$num_of = $position+$num_posts;
|
156
|
} else {
|
157
|
$num_of = $position+$setting_posts_per_page;
|
158
|
}
|
159
|
$out_of = ($position+1).'-'.$num_of.' '.strtolower($TEXT['OUT_OF']).' '.$total_num;
|
160
|
$of = ($position+1).'-'.$num_of.' '.strtolower($TEXT['OF']).' '.$total_num;
|
161
|
$display_previous_next_links = '';
|
162
|
} else {
|
163
|
$display_previous_next_links = 'none';
|
164
|
}
|
165
|
|
166
|
// Print header
|
167
|
if($display_previous_next_links == 'none') {
|
168
|
echo str_replace(array('[NEXT_PAGE_LINK]','[NEXT_LINK]','[PREVIOUS_PAGE_LINK]','[PREVIOUS_LINK]','[OUT_OF]','[OF]','[DISPLAY_PREVIOUS_NEXT_LINKS]'), array('','','','','','', $display_previous_next_links), $setting_header);
|
169
|
} else {
|
170
|
echo str_replace(array('[NEXT_PAGE_LINK]','[NEXT_LINK]','[PREVIOUS_PAGE_LINK]','[PREVIOUS_LINK]','[OUT_OF]','[OF]','[DISPLAY_PREVIOUS_NEXT_LINKS]'), array($next_page_link, $next_link, $previous_page_link, $previous_link, $out_of, $of, $display_previous_next_links), $setting_header);
|
171
|
}
|
172
|
|
173
|
if($num_posts > 0) {
|
174
|
if($query_extra != '') {
|
175
|
?>
|
176
|
<div class="selected_group_title">
|
177
|
<?php echo '<a href="'.htmlspecialchars(strip_tags($_SERVER['PHP_SELF'])).'">'.PAGE_TITLE.'</a> >> '.$groups[$_GET['g']]['title']; ?>
|
178
|
</div>
|
179
|
<?php
|
180
|
}
|
181
|
while($post = $query_posts->fetchRow()) {
|
182
|
if(isset($groups[$post['group_id']]['active']) AND $groups[$post['group_id']]['active'] != false) { // Make sure parent group is active
|
183
|
$uid = $post['posted_by']; // User who last modified the post
|
184
|
// Workout date and time of last modified post
|
185
|
$post_date = gmdate(DATE_FORMAT, $post['posted_when']+TIMEZONE);
|
186
|
$post_time = gmdate(TIME_FORMAT, $post['posted_when']+TIMEZONE);
|
187
|
$publ_date = date(DATE_FORMAT,$post['published_when']);
|
188
|
$publ_time = date(TIME_FORMAT,$post['published_when']);
|
189
|
// Work-out the post link
|
190
|
$post_link = page_link($post['link']);
|
191
|
if(isset($_GET['p']) AND $position > 0) {
|
192
|
$post_link .= '?p='.$position;
|
193
|
}
|
194
|
if(isset($_GET['g']) AND is_numeric($_GET['g'])) {
|
195
|
if(isset($_GET['p']) AND $position > 0) { $post_link .= '&'; } else { $post_link .= '?'; }
|
196
|
$post_link .= 'g='.$_GET['g'];
|
197
|
}
|
198
|
// Get group id, title, and image
|
199
|
$group_id = $post['group_id'];
|
200
|
$group_title = $groups[$group_id]['title'];
|
201
|
$group_image = $groups[$group_id]['image'];
|
202
|
if($group_image == '') { $display_image = 'none'; } else { $display_image = ''; }
|
203
|
if($group_id == 0) { $display_group = 'none'; } else { $display_group = ''; }
|
204
|
// Replace [wblink--PAGE_ID--] with real link
|
205
|
$short = ($post['content_short']);
|
206
|
$wb->preprocess($short);
|
207
|
// Replace vars with values
|
208
|
$post_long_len = strlen($post['content_long']);
|
209
|
$vars = array('[PAGE_TITLE]', '[GROUP_ID]', '[GROUP_TITLE]', '[GROUP_IMAGE]', '[DISPLAY_GROUP]', '[DISPLAY_IMAGE]', '[TITLE]', '[SHORT]', '[LINK]', '[MODI_DATE]', '[MODI_TIME]', '[PUBLISHED_DATE]', '[PUBLISHED_TIME]', '[USER_ID]', '[USERNAME]', '[DISPLAY_NAME]', '[EMAIL]', '[TEXT_READ_MORE]');
|
210
|
if(isset($users[$uid]['username']) AND $users[$uid]['username'] != '') {
|
211
|
if($post_long_len < 9) {
|
212
|
$values = array(PAGE_TITLE, $group_id, $group_title, $group_image, $display_group, $display_image, $post['title'], $short, $post_link, $post_date, $post_time, $publ_date, $publ_time, $uid, $users[$uid]['username'], $users[$uid]['display_name'], $users[$uid]['email'], '');
|
213
|
} else {
|
214
|
$values = array(PAGE_TITLE, $group_id, $group_title, $group_image, $display_group, $display_image, $post['title'], $short, $post_link, $post_date, $post_time, $publ_date, $publ_time, $uid, $users[$uid]['username'], $users[$uid]['display_name'], $users[$uid]['email'], $TEXT['READ_MORE']);
|
215
|
}
|
216
|
} else {
|
217
|
if($post_long_len < 9) {
|
218
|
$values = array(PAGE_TITLE, $group_id, $group_title, $group_image, $display_group, $display_image, $post['title'], $short, $post_link, $post_date, $post_time, $publ_date, $publ_time, '', '', '', '', '');
|
219
|
} else {
|
220
|
$values = array(PAGE_TITLE, $group_id, $group_title, $group_image, $display_group, $display_image, $post['title'], $short, $post_link, $post_date, $post_time, $publ_date, $publ_time, '', '', '', '', $TEXT['READ_MORE']);
|
221
|
}
|
222
|
}
|
223
|
echo str_replace($vars, $values, $setting_post_loop);
|
224
|
}
|
225
|
}
|
226
|
}
|
227
|
|
228
|
// Print footer
|
229
|
if($display_previous_next_links == 'none') {
|
230
|
echo str_replace(array('[NEXT_PAGE_LINK]','[NEXT_LINK]','[PREVIOUS_PAGE_LINK]','[PREVIOUS_LINK]','[OUT_OF]','[OF]','[DISPLAY_PREVIOUS_NEXT_LINKS]'), array('','','','','','', $display_previous_next_links), $setting_footer);
|
231
|
} else {
|
232
|
echo str_replace(array('[NEXT_PAGE_LINK]','[NEXT_LINK]','[PREVIOUS_PAGE_LINK]','[PREVIOUS_LINK]','[OUT_OF]','[OF]','[DISPLAY_PREVIOUS_NEXT_LINKS]'), array($next_page_link, $next_link, $previous_page_link, $previous_link, $out_of, $of, $display_previous_next_links), $setting_footer);
|
233
|
}
|
234
|
|
235
|
} elseif(defined('POST_ID') AND is_numeric(POST_ID)) {
|
236
|
|
237
|
// Get settings
|
238
|
$query_settings = $database->query("SELECT * FROM ".TABLE_PREFIX."mod_news_settings WHERE section_id = '$section_id'");
|
239
|
if($query_settings->numRows() > 0) {
|
240
|
$fetch_settings = $query_settings->fetchRow();
|
241
|
$setting_post_header = ($fetch_settings['post_header']);
|
242
|
$setting_post_footer = ($fetch_settings['post_footer']);
|
243
|
$setting_comments_header = ($fetch_settings['comments_header']);
|
244
|
$setting_comments_loop = ($fetch_settings['comments_loop']);
|
245
|
$setting_comments_footer = ($fetch_settings['comments_footer']);
|
246
|
} else {
|
247
|
$setting_post_header = '';
|
248
|
$setting_post_footer = '';
|
249
|
$setting_comments_header = '';
|
250
|
$setting_comments_loop = '';
|
251
|
$setting_comments_footer = '';
|
252
|
}
|
253
|
|
254
|
// Get page info
|
255
|
$query_page = $database->query("SELECT link FROM ".TABLE_PREFIX."pages WHERE page_id = '".PAGE_ID."'");
|
256
|
if($query_page->numRows() > 0) {
|
257
|
$page = $query_page->fetchRow();
|
258
|
$page_link = page_link($page['link']);
|
259
|
if(isset($_GET['p']) AND $position > 0) {
|
260
|
$page_link .= '?p='.$_GET['p'];
|
261
|
}
|
262
|
if(isset($_GET['g']) AND is_numeric($_GET['g'])) {
|
263
|
if(isset($_GET['p']) AND $position > 0) { $page_link .= '&'; } else { $page_link .= '?'; }
|
264
|
$page_link .= 'g='.$_GET['g'];
|
265
|
}
|
266
|
} else {
|
267
|
exit('Page not found');
|
268
|
}
|
269
|
|
270
|
// Get post info
|
271
|
$t = time();
|
272
|
$query_post = $database->query("SELECT * FROM ".TABLE_PREFIX."mod_news_posts
|
273
|
WHERE post_id = '".POST_ID."' AND active = '1'
|
274
|
AND (published_when = '0' OR published_when <= $t) AND (published_until = 0 OR published_until >= $t)
|
275
|
");
|
276
|
if($query_post->numRows() > 0) {
|
277
|
$post = $query_post->fetchRow();
|
278
|
if(isset($groups[$post['group_id']]['active']) AND $groups[$post['group_id']]['active'] != false) { // Make sure parent group is active
|
279
|
$uid = $post['posted_by']; // User who last modified the post
|
280
|
// Workout date and time of last modified post
|
281
|
$post_date = gmdate(DATE_FORMAT, $post['posted_when']+TIMEZONE);
|
282
|
$post_time = gmdate(TIME_FORMAT, $post['posted_when']+TIMEZONE);
|
283
|
$publ_date = date(DATE_FORMAT,$post['published_when']);
|
284
|
$publ_time = date(TIME_FORMAT,$post['published_when']);
|
285
|
// Get group id, title, and image
|
286
|
$group_id = $post['group_id'];
|
287
|
$group_title = $groups[$group_id]['title'];
|
288
|
$group_image = $groups[$group_id]['image'];
|
289
|
if($group_image == '') { $display_image = 'none'; } else { $display_image = ''; }
|
290
|
if($group_id == 0) { $display_group = 'none'; } else { $display_group = ''; }
|
291
|
$vars = array('[PAGE_TITLE]', '[GROUP_ID]', '[GROUP_TITLE]', '[GROUP_IMAGE]', '[DISPLAY_GROUP]', '[DISPLAY_IMAGE]', '[TITLE]', '[SHORT]', '[BACK]', '[MODI_DATE]', '[MODI_TIME]', '[PUBLISHED_DATE]', '[PUBLISHED_TIME]', '[USER_ID]', '[USERNAME]', '[DISPLAY_NAME]', '[EMAIL]');
|
292
|
$post_short=$post['content_short'];
|
293
|
$wb->preprocess($post_short);
|
294
|
if(isset($users[$uid]['username']) AND $users[$uid]['username'] != '') {
|
295
|
$values = array(PAGE_TITLE, $group_id, $group_title, $group_image, $display_group, $display_image, $post['title'], $post_short, $page_link, $post_date, $post_time, $publ_date, $publ_time, $uid, $users[$uid]['username'], $users[$uid]['display_name'], $users[$uid]['email']);
|
296
|
} else {
|
297
|
$values = array(PAGE_TITLE, $group_id, $group_title, $group_image, $display_group, $display_image, $post['title'], $post_short, $page_link, $post_date, $post_time, $publ_date, $publ_time, '', '', '', '');
|
298
|
}
|
299
|
$post_long = ($post['content_long']);
|
300
|
}
|
301
|
} else {
|
302
|
$wb->print_error($MESSAGE['FRONTEND']['SORRY_NO_ACTIVE_SECTIONS'], "javascript: history.go(-1);", false);
|
303
|
exit(0);
|
304
|
}
|
305
|
|
306
|
// Print post header
|
307
|
echo str_replace($vars, $values, $setting_post_header);
|
308
|
|
309
|
// Replace [wblink--PAGE_ID--] with real link
|
310
|
$wb->preprocess($post_long);
|
311
|
// Print long
|
312
|
echo $post_long;
|
313
|
|
314
|
// Print post footer
|
315
|
echo str_replace($vars, $values, $setting_post_footer);
|
316
|
|
317
|
// Show comments section if we have to
|
318
|
if(($post['commenting'] == 'private' AND isset($wb) AND $wb->is_authenticated() == true) OR $post['commenting'] == 'public') {
|
319
|
|
320
|
// Print comments header
|
321
|
echo str_replace('[ADD_COMMENT_URL]', WB_URL.'/modules/news/comment.php?id='.POST_ID.'&sid='.$section_id, $setting_comments_header);
|
322
|
|
323
|
// Query for comments
|
324
|
$query_comments = $database->query("SELECT title,comment,commented_when,commented_by FROM ".TABLE_PREFIX."mod_news_comments WHERE post_id = '".POST_ID."' ORDER BY commented_when ASC");
|
325
|
if($query_comments->numRows() > 0) {
|
326
|
while($comment = $query_comments->fetchRow()) {
|
327
|
// Display Comments without slashes, but with new-line characters
|
328
|
$comment['comment'] = nl2br(($comment['comment']));
|
329
|
$comment['title'] = ($comment['title']);
|
330
|
// Print comments loop
|
331
|
$commented_date = gmdate(DATE_FORMAT, $comment['commented_when']+TIMEZONE);
|
332
|
$commented_time = gmdate(TIME_FORMAT, $comment['commented_when']+TIMEZONE);
|
333
|
$uid = $comment['commented_by'];
|
334
|
$vars = array('[TITLE]','[COMMENT]','[DATE]','[TIME]','[USER_ID]','[USERNAME]','[DISPLAY_NAME]', '[EMAIL]');
|
335
|
if(isset($users[$uid]['username']) AND $users[$uid]['username'] != '') {
|
336
|
$values = array(($comment['title']), ($comment['comment']), $commented_date, $commented_time, $uid, ($users[$uid]['username']), ($users[$uid]['display_name']), ($users[$uid]['email']));
|
337
|
} else {
|
338
|
$values = array(($comment['title']), ($comment['comment']), $commented_date, $commented_time, '0', strtolower($TEXT['UNKNOWN']), $TEXT['UNKNOWN'], '');
|
339
|
}
|
340
|
echo str_replace($vars, $values, $setting_comments_loop);
|
341
|
}
|
342
|
} else {
|
343
|
// Say no comments found
|
344
|
if(isset($TEXT['NONE_FOUND'])) {
|
345
|
echo $TEXT['NONE_FOUND'].'<br />';
|
346
|
} else {
|
347
|
echo 'None Found<br />';
|
348
|
}
|
349
|
}
|
350
|
|
351
|
// Print comments footer
|
352
|
echo str_replace('[ADD_COMMENT_URL]', WB_URL.'/modules/news/comment.php&id='.POST_ID.'&sid='.$section_id, $setting_comments_footer);
|
353
|
}
|
354
|
if(ENABLED_ASP) {
|
355
|
$_SESSION['comes_from_view'] = POST_ID;
|
356
|
$_SESSION['comes_from_view_time'] = time();
|
357
|
}
|
358
|
}
|
359
|
|
360
|
?>
|