tablerender(NWSLAN_12, NWSLAN_11); require_once(FOOTERF); exit; } if (!defined("USER_WIDTH")) { define("USER_WIDTH","width:95%"); } class submitNews { private $minWidth = 1024; private $minHeight = 768; function __construct() { $mes = e107::getMessage(); $minDimensions = e107::pref('core','subnews_attach_minsize',false); if(empty($minDimensions)) { $this->minWidth = 0; $this->minHeight = 0; } else { $tmp = explode('×',$minDimensions); $this->minWidth = intval($tmp[0]); $this->minHeight = intval($tmp[1]); } if(isset($_POST['submitnews_submit']) && !empty($_POST['submitnews_title']) && !empty($_POST['submitnews_item'])) { $this->process(); } echo $mes->render(); $this->form(); } function process() { $ip = e107::getIPHandler()->getIP(FALSE); $tp = e107::getParser(); $pref = e107::pref('core'); $sql = e107::getDb(); $mes = e107::getMessage(); $fp = new floodprotect; if ($fp->flood("submitnews", "submitnews_datestamp") == false) { e107::redirect(); exit; } $submitnews_user = (USER ? USERNAME : trim($tp->toDB($_POST['submitnews_name']))); $submitnews_email = (USER ? USEREMAIL : trim(check_email($tp->toDB($_POST['submitnews_email'])))); $submitnews_title = $tp->filter($_POST['submitnews_title']); $submitnews_item = $tp->filter($_POST['submitnews_item']); // $submitnews_item = str_replace("src="e107_images", "src="".SITEURL."e107_images", $submitnews_item); $submitnews_file = ""; $submitnews_error = false; $submitnews_filearray = array(); if (!$submitnews_user || !$submitnews_email) { $message = SUBNEWSLAN_7; $submitnews_error = TRUE; } // ==== Process File Upload ==== if (FILE_UPLOADS && !empty($_FILES['file_userfile']['name'][0]) && vartrue($pref['subnews_attach']) && vartrue($pref['upload_enabled']) && check_class($pref['upload_class'])) { $uploaded = e107::getFile()->getUploaded(e_UPLOAD, 'unique', array('file_mask' => 'jpg,gif,png', 'max_file_count' => 3)); if (empty($uploaded)) // Non-specific error { $submitnews_error = true; $message = SUBNEWSLAN_8; } else { foreach($uploaded as $c=>$v) { // Check if images is too small. if(!empty($this->minWidth) && !empty($v['img-width']) && (intval($v['img-width']) < $this->minWidth || intval($v['img-width']) < $this->minHeight)) { //TODO Lan and review wording. $mes->addWarning("One of your images has dimensions smaller than ".$this->minWidth."px x ".$this->minHeight."px. Please correct the attachment and submit the form again. "); return false; } if (varset($uploaded[$c]['error'],0) != 0) { $submitnews_error = TRUE; $message = handle_upload_messages($uploaded); } else { if (isset($uploaded[$c]['name']) && isset($uploaded[$c]['type']) && isset($uploaded[$c]['size'])) { $filename = $uploaded[$c]['name']; $filetype = $uploaded[$c]['type']; $filesize = $uploaded[$c]['size']; $fileext = substr(strrchr($filename, "."), 1); $today = getdate(); $submitnews_file = USERID."_".$today[0]."_".$c."_".str_replace(" ", "_", substr($submitnews_title, 0, 6)).".".$fileext; if (is_numeric($pref['subnews_resize']) && ($pref['subnews_resize'] > 30) && ($pref['subnews_resize'] < 5000)) { require_once(e_HANDLER.'resize_handler.php'); if (!resize_image(e_UPLOAD.$filename, e_UPLOAD.$submitnews_file, $pref['subnews_resize'])) { rename(e_UPLOAD.$filename, e_UPLOAD.$submitnews_file); } } elseif ($filename) { rename(e_UPLOAD.$filename, e_UPLOAD.$submitnews_file); } } } if ($filename && file_exists(e_UPLOAD.$submitnews_file)) { $submitnews_filearray[] = $submitnews_file; } } } } if ($submitnews_error === false) { $insertQry = array( 'submitnews_id' => 0, 'submitnews_name' => $submitnews_user, 'submitnews_email' => $submitnews_email, 'submitnews_user' => USERID, 'submitnews_title' => $submitnews_title, 'submitnews_category' => intval($_POST['cat_id']), 'submitnews_item' => $submitnews_item, 'submitnews_datestamp' => time(), 'submitnews_ip' => $ip, 'submitnews_auth' => '0', 'submitnews_file' => implode(',',$submitnews_filearray), 'submitnews_keywords' => $tp->filter($_POST['submitnews_keywords'], 'str'), 'submitnews_description' => $tp->filter($_POST['submitnews_description'], 'str'), 'submitnews_summary' => $tp->filter($_POST['submitnews_summary'], 'str'), 'submitnews_media' => json_encode($_POST['submitnews_media'],JSON_PRETTY_PRINT) ); if(!$sql->insert("submitnews", $insertQry)) { $mes->addError(LAN_134); return false; } // $sql->insert("submitnews", "0, '$submitnews_user', '$submitnews_email', '$submitnews_title', '".intval($_POST['cat_id'])."', '$submitnews_item', '".time()."', '$ip', '0', '".implode(',',$submitnews_filearray)."' "); $edata_sn = array("user" => $submitnews_user, "email" => $submitnews_email, "itemtitle" => $submitnews_title, "catid" => intval($_POST['cat_id']), "item" => $submitnews_item, "image" => $submitnews_file, "ip" => $ip); e107::getEvent()->trigger("subnews", $edata_sn); // bc e107::getEvent()->trigger("user_news_submit", $edata_sn); $mes->addSuccess(LAN_134); // echo $mes->render(); unset($_POST); // $ns->tablerender(LAN_THANK_YOU, "