'; $CNT_TMP .= "\n\n"; $CNT_TMP .= ' Forum '."\n"; $CNT_TMP .= ' Topics '."\n"; $CNT_TMP .= ' Posts '."\n"; $CNT_TMP .= ' Last '; $CNT_TMP .= "\n\n"; if($content['forum']['sel'] != '') { $content['forum']['sel'] = 'AND (forum_id='.$content['forum']['sel'].')'; } $content["forum"]['selected'] = array(); foreach($content["forum"]['selection'] as $content["forum"]['selected_value']) { $content["forum"]['selected'][intval($content["forum"]['selected_value'])] = ''; } $sql_f = "SELECT * FROM ".DB_PREPEND."phpwcms_forum WHERE forum_entry=0 AND forum_deleted=0 ".$content['forum']['sel']; if($result_f = mysql_query($sql_f, $db) or die("error while listing forums")) { while($row_f = mysql_fetch_assoc($result_f)) { if(isset($content["forum"]['selected'][$row_f["forum_id"]]) && $row_f['forum_title']) { $CNT_TMP .= "\n"; $CNT_TMP .= '

'."\n"; $CNT_TMP .= ''; $CNT_TMP .= ''; $CNT_TMP .= html_specialchars($row_f["forum_title"]).''; if($row_f['forum_text'] != '') { $CNT_TMP .= '
'.html_specialchars($row_f['forum_text']).''; } $CNT_TMP .= "\n"; $CNT_TMP .= ''; $CNT_TMP .= $row_f['forum_ctopic'].''."\n"; $CNT_TMP .= ''; $CNT_TMP .= $row_f['forum_cpost'].''."\n"; $CNT_TMP .= ' '; if(!empty($row_f['forum_lastpost'])) { $content["forum"]['lastpost'] = explode(':', $row_f['forum_lastpost']); $CNT_TMP .= date('Y/m/d H:i', $content["forum"]['lastpost'][0]); } else { $CNT_TMP .= date('Y/m/d H:i', $row_f['forum_created']); } $CNT_TMP .= ' '; $CNT_TMP .= ''."\n"; $CNT_TMP .= "\n\n"; } } mysql_free_result($result_f); } $CNT_TMP .= ''; // end List forums /** * FORUM */ } elseif($content['forum']['ACTION'] === 1) { // list topics $row_f['forum_id'] = $content['forum']['GET']; $row_f["forum_title"] = 'Current'; $sql_f = "SELECT * FROM ".DB_PREPEND."phpwcms_forum WHERE forum_entry=0 AND forum_deleted=0 "; $sql_f .= "AND forum_id=".$content['forum']['GET']." LIMIT 1"; if($result_f = mysql_query($sql_f, $db) or die("error while retrieving forum info")) { $row_f = mysql_fetch_assoc($result_f); mysql_free_result($result_f); } switch($content['forum']['MODE']) { case 'newtopic': $content['forum']['topic'] = array('subject' => '', 'message' => '', 'notify' => 1, 'error' => ''); // Process newtopic POST values if(isset($_POST['forum_subject'])) { $content['forum']['topic']['subject'] = remove_unsecure_rptags(clean_slweg($_POST['forum_subject'])); $content['forum']['topic']['message'] = remove_unsecure_rptags(clean_slweg($_POST['forum_message'])); $content['forum']['topic']['notify'] = isset($_POST['forum_notify']) ? 1 : 0; if(empty($content['forum']['topic']['message'])) { $content['forum']['topic']['error'] = 'There has to be a message for your topic'; } // if no error fill in or update topic if(empty($content['forum']['topic']['error'])) { $sql_topic = "INSERT INTO ".DB_PREPEND."phpwcms_forum SET "; $sql_topic .= "forum_entry = '1', "; // a topic $sql_topic .= "forum_cid = '".$row_f["forum_id"]."', "; $sql_topic .= "forum_title = '".aporeplace($content['forum']['topic']['subject'])."', "; $sql_topic .= "forum_created = '".time()."', "; $sql_topic .= "forum_text = '".aporeplace($content['forum']['topic']['message'])."'"; // save new topic if(@mysql_query($sql_topic, $db)) { //update forum info $sql_topic = "UPDATE ".DB_PREPEND."phpwcms_forum SET "; $sql_topic .= "forum_ctopic='".($row_f["forum_ctopic"]+1)."', "; $sql_topic .= "forum_cpost='".($row_f["forum_cpost"]+1)."', "; $sql_topic .= "forum_lastpost='".time().':'.intval(mysql_insert_id()).":2' "; $sql_topic .= "WHERE forum_entry=0 AND forum_id=".$row_f["forum_id"]." LIMIT 1"; @mysql_query($sql_topic, $db); headerRedirect($content['forum']['ARTICLE'].'&forum='.$row_f["forum_id"]); } else { $content['forum']['topic']['error'] = 'Error while creating new topic.'; } } } // Topic new form $CNT_TMP .= '

'; $CNT_TMP .= ''; $CNT_TMP .= "\n\n".'\n\n

'; $CNT_TMP .= 'Forum overview / '; $CNT_TMP .= ''; $CNT_TMP .= html_specialchars($row_f["forum_title"])."

"; $CNT_TMP .= ''."\n\n"; $CNT_TMP .= ''."\n\n"; // Topic message Error if(!empty($content['forum']['topic']['error'])) { $CNT_TMP .= "\n"; $CNT_TMP .= ''."\n"; $CNT_TMP .= '\n\n"; } // Topic Subject $CNT_TMP .= "\n"; $CNT_TMP .= ''."\n"; $CNT_TMP .= ''; $CNT_TMP .= "\n\n"; // Topic Message $CNT_TMP .= "\n"; $CNT_TMP .= ''."\n"; $CNT_TMP .= ''; $CNT_TMP .= "\n\n"; // Reply Options $CNT_TMP .= "\n"; $CNT_TMP .= ''."\n"; $CNT_TMP .= '

Write New Topic

'.html_specialchars($content['forum']['topic']['error']); $CNT_TMP .= "

title

message

</td>';
		$CNT_TMP .= "\n</tr>\n";
		
		// Topic Options
		$CNT_TMP .= "<tr>\n";
		$CNT_TMP .= '<td class="rowLabel" width="20%"><span class="rowTextLabel">options</span></td>'."\n";
		$CNT_TMP .= '<td class="rowPost" width="80%"><table cellspacing="0" cellpadding="1" border="0">';
		$CNT_TMP .= '<tr><td><input type="checkbox" name="forum_notify" id="forum_notify" value="1"'.is_checked(1, $content['forum']['topic']['notify'], 1, 0);
		$CNT_TMP .= ' /></td><td><label for="forum_notify"><span class="rowText">Notify me on reply</span></label>';
		$CNT_TMP .= "</td></tr></table></td>\n</tr>\n";
		
		// Topic Send Button
		$CNT_TMP .= "<tr>\n";
		$CNT_TMP .= '<td colspan="2" class="catBottom">';
		$CNT_TMP .= '<input type="submit" name="forum_topic_submit" value="Send" class="forumButton" />';
		$CNT_TMP .= "</td>\n</tr>\n";
		
		
		$CNT_TMP .= '</table>';
		$CNT_TMP .= '</form>';
		
	
		break;
	
	
		default:
		$CNT_TMP .= '<table width="100%" cellspacing="2" cellpadding="2" border="0" align="center">'."\n<tr>\n";
		$CNT_TMP .= '<td width="50" valign="middle"><a href="'.$content['forum']['ARTICLE'].'&mode=newtopic';
		$CNT_TMP .= '&forum='.$row_f["forum_id"].'">';
		$CNT_TMP .= '<img src="img/forum/silver/post.gif" alt="Post new topic" border="0"></a></td>'."\n";
		$CNT_TMP .= '<td width="95%" align="left" valign="middle"><span class="navForum">   ';
		$CNT_TMP .= '<a href="'.$content['forum']['ARTICLE'].'">Forum overview</a> / ';
		$CNT_TMP .= '<a href="'.$content['forum']['ARTICLE'].'&forum='.$row_f["forum_id"].'">';
		$CNT_TMP .= html_specialchars($row_f["forum_title"])."</a></span></td>\n";
		$CNT_TMP .= '<td align="left" nowrap="nowrap" valign="middle"> </td>';
		$CNT_TMP .= "\n</tr>\n</table>";
	
		$CNT_TMP .= '<table width="100%" cellpadding="2" cellspacing="1" border="0" class="tableForum">';
		$CNT_TMP .= "\n<tr>\n";
		$CNT_TMP .= '<th colspan="2" nowrap="nowrap" class="thForum"> Topics </th>'."\n";
		$CNT_TMP .= '<th width="50" class="thTopic" nowrap="nowrap"> Replies </th>'."\n";
		$CNT_TMP .= '<th width="50" class="thPost" nowrap="nowrap"> Author </th>'."\n";
		$CNT_TMP .= '<th class="thLastPost" nowrap="nowrap" align="center"> Last </th>';
		$CNT_TMP .= "\n</tr>\n";
		
		
		$sql_topic  = "SELECT * FROM ".DB_PREPEND."phpwcms_forum WHERE forum_entry=1 AND forum_deleted=0 ";
		$sql_topic .= "AND forum_cid=".$row_f["forum_id"]." ORDER BY forum_changed DESC";
		
		if($result_t = mysql_query($sql_topic, $db) or die("error while listing topic for current forum")) {
			while($row_t = mysql_fetch_assoc($result_t)) {
			
				get_fe_userinfo($row_t['forum_uid']);
						
				$CNT_TMP .= "<tr>\n";
				$CNT_TMP .= '<td width="19" class="rowIcon" align="center" valign="middle"><img src="img/forum/silver/folder.gif" alt=""></td>'."\n";
				
				$CNT_TMP .= '<td width="100%" class="rowForum"><span class="rowTextForumlink">';
				$CNT_TMP .= '<a href="'.$content['forum']['ARTICLE'].'&topic='.$row_t["forum_id"].'">';
				$CNT_TMP .= html_specialchars($row_t["forum_title"])."</a></span></td>\n";
			
				$CNT_TMP .= '<td width="50" class="rowTopic" align="center" valign="middle"><span class="rowTextSmall">';
				$CNT_TMP .= $row_t['forum_cpost'].'</span></td>'."\n";
			
				$CNT_TMP .= '<td width="50" class="rowPost" align="center" valign="middle"><span class="rowTextSmall"> ';
				$CNT_TMP .= html_specialchars($GLOBALS['FE_USER'][$row_t['forum_uid']]['login']).' </span></td>'."\n";
			
				$CNT_TMP .= '<td class="rowLastPost" align="center" valign="middle" nowrap="nowrap"><span class="rowTextSmall"> ';
				
				if(!empty($row_t['forum_lastpost'])) {
						$content["forum"]['lastpost'] = explode(':', $row_t['forum_lastpost']);
						$CNT_TMP .= date('Y/m/d H:i', $content["forum"]['lastpost'][0]);
				} else {
					$CNT_TMP .= date('Y/m/d H:i', $row_t["forum_created"]);
				}
				
				$CNT_TMP .= ' </span></td>'."\n";
			
				$CNT_TMP .= "\n</tr>\n";

}
			mysql_free_result($result_t);
		}

$CNT_TMP .= '</table>';
	
	}

} elseif($content['forum']['ACTION'] === 2) {
	// show topic and related posts
		
	$row_t['forum_id']		= $content['forum']['GET'];
	$row_t["forum_title"]	= 'Current';
	$sql_t  = "SELECT * FROM ".DB_PREPEND."phpwcms_forum WHERE forum_entry=1 AND forum_deleted=0 ";
	$sql_t .= "AND forum_id=".$content['forum']['GET']." LIMIT 1";
	if($result_t = mysql_query($sql_t, $db) or die("error while retrieving topic info")) {
		$row_t = mysql_fetch_assoc($result_t);
		mysql_free_result($result_t);
		
		$sql_f  = "SELECT * FROM ".DB_PREPEND."phpwcms_forum WHERE forum_entry=0 AND forum_deleted=0 ";
		$sql_f .= "AND forum_id=".$row_t['forum_cid']." LIMIT 1";
		if($result_f = mysql_query($sql_f, $db) or die("error while retrieving related forum info")) {
			$row_f = mysql_fetch_assoc($result_f);
			mysql_free_result($result_f);
		}
	}
			
	
	switch($content['forum']['MODE']) {
	
	
		case 'reply':
		
		$content['forum']['reply'] = array('subject' => '', 'message' => '', 'notify' => 1, 'error' => '');
		
		// Process newtopic POST values
		if(isset($_POST['forum_subject'])) {
		
			$content['forum']['reply']['subject'] = remove_unsecure_rptags(clean_slweg($_POST['forum_subject']));
			$content['forum']['reply']['message'] = remove_unsecure_rptags(clean_slweg($_POST['forum_message']));
			$content['forum']['reply']['notify']  = isset($_POST['forum_notify']) ? 1 : 0;
			
			if(empty($content['forum']['reply']['message'])) {
				$content['forum']['reply']['error'] = 'There has to be a message for your reply';
			}
		
			// if no error fill in or update topic
			if(empty($content['forum']['reply']['error'])) {
				
				$sql_reply  = "INSERT INTO ".DB_PREPEND."phpwcms_forum SET ";
				$sql_reply .= "forum_entry = '2', "; // a reply
				$sql_reply .= "forum_cid = '".$row_t["forum_id"]."', ";
				$sql_reply .= "forum_title = '".aporeplace($content['forum']['reply']['subject'])."', ";
				$sql_reply .= "forum_created = '".time()."', ";
				$sql_reply .= "forum_text = '".aporeplace($content['forum']['reply']['message'])."'";
				
				// save new topic
				if(@mysql_query($sql_reply, $db)) {
					
					//update forum info
					$sql_reply  = "UPDATE ".DB_PREPEND."phpwcms_forum SET ";
					$sql_reply .= "forum_cpost='".($row_f["forum_cpost"]+1)."', ";
					$sql_reply .= "forum_lastpost='".time().':'.intval(mysql_insert_id()).":2' ";
					$sql_reply .= "WHERE forum_entry=0 AND forum_id=".$row_f["forum_id"]." LIMIT 1";
					@mysql_query($sql_reply, $db);
					
					//update topic info
					$sql_reply  = "UPDATE ".DB_PREPEND."phpwcms_forum SET ";
					$sql_reply .= "forum_cpost='".($row_t["forum_cpost"]+1)."', ";
					$sql_reply .= "forum_lastpost='".time().':'.intval(mysql_insert_id()).":2' ";
					$sql_reply .= "WHERE forum_entry=1 AND forum_id=".$row_t["forum_id"]." LIMIT 1";
					@mysql_query($sql_reply, $db);
					
					headerRedirect($content['forum']['ARTICLE'].'&topic='.$row_t["forum_id"]);
									
				} else {
					$content['forum']['topic']['error'] = 'Error while creating new reply.';
				}
			
			}
		
		
		}
		
		// reply new form
		$CNT_TMP .= '<form name="newreply" action="'.$content['forum']['ARTICLE'].'&mode=reply';
		$CNT_TMP .= '&topic='.$row_t["forum_id"].'" method="post">';

$CNT_TMP .= '<table width="100%" cellspacing="2" cellpadding="2" border="0" align="center">';
		$CNT_TMP .= "\n<tr>\n".'<td align="left" class="navForum">';
		$CNT_TMP .= '<a href="'.$content['forum']['ARTICLE'].'">Forum overview</a> / ';
		$CNT_TMP .= '<a href="'.$content['forum']['ARTICLE'].'&forum='.$row_f["forum_id"].'">';
		$CNT_TMP .= html_specialchars($row_f["forum_title"])."</a></td>\n</tr>\n</table>";
		
		
		$CNT_TMP .= '<table width="100%" cellpadding="3" cellspacing="1" border="0" class="tableForum">'."\n<tr>\n";
		$CNT_TMP .= '<th colspan="2" nowrap="nowrap" class="thForum"><strong>Write Reply</strong></th>'."\n</tr>\n";
		
		// Reply message Error
		if(!empty($content['forum']['reply']['error'])) {
			$CNT_TMP .= "<tr>\n";
			$CNT_TMP .= '<td class="rowError" width="20%"> </td>'."\n";
			$CNT_TMP .= '<td class="rowError" width="80%">'.html_specialchars($content['forum']['reply']['error']);
			$CNT_TMP .= "</td>\n</tr>\n";
		}
		
		// reply Subject
		$CNT_TMP .= "<tr>\n";
		$CNT_TMP .= '<td class="rowLabel" width="20%"><span class="rowTextLabel">title</span></td>'."\n";
		$CNT_TMP .= '<td class="rowPost" width="80%"><input type="text" name="forum_subject" size="45" maxlength="60" ';
		$CNT_TMP .= 'style="width:425px" class="forumInputText" value="'.html_specialchars($content['forum']['reply']['subject']).'" /></td>';
		$CNT_TMP .= "\n</tr>\n";
		
		// Reply Message
		$CNT_TMP .= "<tr>\n";
		$CNT_TMP .= '<td class="rowLabel" width="20%" valign="top"><span class="rowTextLabel" style="line-height:23px">message</span></td>'."\n";
		$CNT_TMP .= '<td class="rowPost" width="80%"><textarea name="forum_message" wrap="VIRTUAL" cols="35" rows="15" ';
		$CNT_TMP .= 'style="width:425px" class="forumTextareaText">'.html_specialchars($content['forum']['reply']['message']).'

options

'; $CNT_TMP .= ''."\n"; $CNT_TMP .= '\n"; $CNT_TMP .= ''; $CNT_TMP .= "\n\n

\n"; $CNT_TMP .= '

'; $CNT_TMP .= ' Post new topic

'; $CNT_TMP .= ' '; $CNT_TMP .= ''; $CNT_TMP .= ' Post reply

'; $CNT_TMP .= '

'; $CNT_TMP .= 'Forum overview / '; $CNT_TMP .= ''; $CNT_TMP .= html_specialchars($row_f["forum_title"])."

"; // list posts $CNT_TMP .= ''; $CNT_TMP .= "\n\n"; $CNT_TMP .= ''."\n"; $CNT_TMP .= ''."\n"; $CNT_TMP .= "\n\n"; $CNT_TMP .= "\n\n"; $CNT_TMP .= '\n"; $CNT_TMP .= '\n\n"; $sql_post = "SELECT * FROM ".DB_PREPEND."phpwcms_forum WHERE forum_entry=2 AND forum_deleted=0 "; $sql_post .= "AND forum_cid=".$row_t["forum_id"]." ORDER BY forum_created ASC"; if($result_p = mysql_query($sql_post, $db) or die("error while listing topic for current forum")) { $row_p_alter = 0; while($row_p = mysql_fetch_assoc($result_p)) { $CNT_TMP .= ''."\n"; $row_p_alter_class = ($row_p_alter % 2) ? 'rowReply' : 'rowReplyA'; get_fe_userinfo($row_p["forum_uid"]); $CNT_TMP .= "\n\n"; $CNT_TMP .= '\n"; $CNT_TMP .= '\n\n"; $row_p_alter++; } mysql_free_result($result_p); } $CNT_TMP .= ''."\n"; $CNT_TMP .= '

Author	Message
'; get_fe_userinfo($row_t["forum_uid"]); $CNT_TMP .= html_specialchars($GLOBALS['FE_USER'][$row_t['forum_uid']]['login'])."	'; $CNT_TMP .= ''; $CNT_TMP .= 'composed: '; $CNT_TMP .= international_date_format($phpwcms['default_lang'], 'j F Y H:i', $row_t["forum_created"]); $CNT_TMP .= ' title: '.html_specialchars($row_t["forum_title"]); $CNT_TMP .= ' '.html_specialchars($row_t["forum_text"]); $CNT_TMP .= "

'; $CNT_TMP .= html_specialchars($GLOBALS['FE_USER'][$row_p['forum_uid']]['login'])."	'; $CNT_TMP .= ''; $CNT_TMP .= 'composed: '; $CNT_TMP .= international_date_format($phpwcms['default_lang'], 'j F Y H:i', $row_p["forum_created"]); $CNT_TMP .= ' title: '.html_specialchars($row_p["forum_title"]); $CNT_TMP .= ' '.html_specialchars($row_p["forum_text"]); $CNT_TMP .= "

'; } } unset($content['forum']); ?>