<?
/* K-Rate
(C) Rinalds Uzkalns, 2003-2004. All Rights Reserved
http://turn-k.net

Version: 1.00 (22.09.04)
*/
?>
<?

include 'modules/forums/get_rights.php';

include 'modules/forums/strip_tags.php';

$en['message'] = replace_br($en['message']);

if (isset($en['preview_thread'])) {
        $en['forum_preview_thread'] = TRUE;
        load_template('modules/forums/templates/forum_post_thread.tpl');
} elseif (isset($en['preview_post'])) {
        $en['forum_preview_post'] = TRUE;
        load_template('modules/forums/templates/forum_post_reply.tpl');
} else {
$res = sql_query("SELECT * FROM $forumtable WHERE f_id=$en[id] AND f_post<=".$en['level']);
if ($line['t_mods_only'] == 1 && $en['level'] < 3) forum_rights_redir($en['id'],3);
if (sql_num_rows($res) == 0) forum_rights_redir($en['id']);
$line = sql_fetch_assoc($res);

        $en['nick'] = strip_tags($en['nick']);
        $user = $en['m_id'] == 0 ? $en['nick'] : $en['m_user'];
        $user = sql_escape_string(stripslashes($user));
        $en['title'] = sql_escape_string(stripslashes($en['title']));
        foreach ($en as $key => $value) $en[$key] = sql_escape_string(stripslashes($value));
//        if (forum_strip_tags == 'Yes')
//                $en['message'] = strip_tags($en['message'],forum_allowed_tags);

//verification
        $err = array();
        if ($en['message'] == '') $err[] = _f_err_text;
        if ($en['title'] == '' && $en['act'] == 'new') $err[] = _f_err_title;
        if (count($err) > 0) {
                $en['err'] = '<font color=red><b>'._error.': '.implode('<br>',$err).'</b></font><Br><br>';
                if ($en['act'] == 'new') {
                        load_template('modules/forums/templates/forum_post_thread.tpl');
                        } else {
                        load_template('modules/forums/templates/forum_post_reply.tpl');
                        }
                }
        else
                {

if ($en['act'] == 'new') {
    //create new thread
        $en['m_id'] = (int)$en['m_id'];
        sql_query("INSERT INTO $fthreadtable (t_member,t_time,t_forum,t_name,t_descr,t_username)
                                      VALUES (".(int)$en['m_id'].", ".time().",$line[f_id],'$en[title]','$en[descr]','$user')");
        $en['thread'] = sql_insert_id();
   //update forum stats
        sql_query("UPDATE $forumtable SET f_threads=f_threads+1 WHERE f_id=$en[id]");
        }

   //check posting rights
        if ($en['act'] != 'new') {
                $res = sql_query("SELECT * FROM $fthreadtable LEFT JOIN $forumtable ON t_forum=f_id WHERE t_id=$en[thread]");
                $line = sql_fetch_assoc($res);
                if ($line['f_post'] > $en['level'])
                        forum_rights_redir($en['id']);
                }

    //edit post?
        if ((int)$en['message_id'] != 0) {
        
                include 'includes/verify_session.php';
                $res = sql_query("SELECT * FROM $fposttable WHERE p_member=$en[m_id] AND p_id='$en[message_id]'");
                if (sql_num_rows($res) == 0) call404();

                sql_query("UPDATE $fposttable SET p_text='$en[message]',p_title='$en[title]' WHERE p_id=$en[message_id]");
        
                }

    //add new post
        else {

                sql_query("INSERT INTO $fposttable (p_member,p_username,p_thread,p_time,p_title,p_text,p_ip)
                                            VALUES (".(int)$en['m_id'].", '$user',$en[thread],".time().",'$en[title]','$en[message]','$ip')");

                $en['post_id'] = sql_insert_id();
        
            //update thread/forum/member statistics
                sql_query("UPDATE $fthreadtable SET t_posts=t_posts+1, t_last=$en[post_id], t_last_time=".time()." WHERE t_id=$en[thread]");
                sql_query("UPDATE $forumtable SET f_posts=f_posts+1, f_last=$en[post_id] WHERE f_id=$en[id]");

                if ($en['m_id'] != 0) {
                        sql_query("UPDATE $fmembtable SET fm_posts=fm_posts+1 WHERE fm_id=$en[m_id]");
                        if (sql_affected_rows() == 0)
                                sql_query("INSERT INTO $fmembtable (fm_id,fm_posts,fm_status_name) VALUES ($en[m_id],1,'".sql_escape_string(forum_status_name)."')");
                        }

                }
                
    //get post page number
        $pg = sql_fetch_assoc(sql_query("SELECT COUNT(*) AS cnt FROM $fposttable WHERE p_thread=$en[thread]"));
        $en['page'] = ceil($pg['cnt']/forum_num_posts);

    //return to message or show info
        if (forum_show_after == 'No') {
                load_template('modules/forums/templates/message_posted.tpl');
                } else {
                ob_clean();
                header('Location: '.constant('dir').'forum_thread/'.$en['thread'].'/'.$en['page'].'#'.$en['post_id']);
                exit;
                }
        }

}
?>