mirror of
https://github.com/e107inc/e107.git
synced 2025-01-16 20:28:28 +01:00
265 lines
7.6 KiB
PHP
265 lines
7.6 KiB
PHP
<?php
|
|
/*
|
|
+ ----------------------------------------------------------------------------+
|
|
| e107 website system
|
|
|
|
|
| ©Steve Dunstan 2001-2002
|
|
| http://e107.org
|
|
| jalist@e107.org
|
|
|
|
|
| Released under the terms and conditions of the
|
|
| GNU General Public License (http://gnu.org).
|
|
|
|
|
| $Source: /cvs_backup/e107_0.8/submitnews.php,v $
|
|
| $Revision: 1.9 $
|
|
| $Date: 2009-04-21 21:26:59 $
|
|
| $Author: e107steved $
|
|
+----------------------------------------------------------------------------+
|
|
*/
|
|
|
|
require_once("class2.php");
|
|
$e_wysiwyg = varsettrue($pref['subnews_htmlarea']) ? "submitnews_item" : "";
|
|
require_once(HEADERF);
|
|
|
|
if (!isset($pref['subnews_class']))
|
|
{
|
|
$pref['subnews_class'] = '0';
|
|
}
|
|
|
|
if (!check_class($pref['subnews_class']))
|
|
{
|
|
$ns->tablerender(NWSLAN_12, NWSLAN_11);
|
|
require_once(FOOTERF);
|
|
exit;
|
|
}
|
|
|
|
if (isset($_POST['submitnews_submit']) && $_POST['submitnews_title'] && $_POST['submitnews_item'])
|
|
{
|
|
$ip = $e107->getip();
|
|
$fp = new floodprotect;
|
|
if ($fp->flood("submitnews", "submitnews_datestamp") == FALSE)
|
|
{
|
|
header("location:".e_BASE."index.php");
|
|
exit;
|
|
}
|
|
|
|
$submitnews_user = (USER ? USERNAME : trim($tp->toDB($_POST['submitnews_name'])));
|
|
$submitnews_email = (USER ? USEREMAIL : trim(check_email($tp->toDB($_POST['submitnews_email']))));
|
|
$submitnews_title = $tp->toDB($_POST['submitnews_title']);
|
|
$submitnews_item = $tp->toDB($_POST['submitnews_item']);
|
|
$submitnews_item = str_replace("src="e107_images", "src="".SITEURL."e107_images", $submitnews_item);
|
|
$submitnews_file = "";
|
|
$submitnews_error = FALSE;
|
|
if (!$submitnews_user || !$submitnews_email)
|
|
{
|
|
$message = SUBNEWSLAN_7;
|
|
$submitnews_error = TRUE;
|
|
}
|
|
|
|
// ==== Process File Upload ====
|
|
if ($_FILES['file_userfile'] && $pref['subnews_attach'] && $pref['upload_enabled'] && check_class($pref['upload_class']) && FILE_UPLOADS)
|
|
{
|
|
require_once(e_HANDLER."upload_handler.php");
|
|
$uploaded = file_upload(e_IMAGE . "newspost_images/");
|
|
$filename = $uploaded[0]['name'];
|
|
$filetype = $uploaded[0]['type'];
|
|
$filesize = $uploaded[0]['size'];
|
|
$fileext = substr(strrchr($filename, "."), 1);
|
|
|
|
if ($filename && $fileext != "jpg" && $fileext != "gif" && $fileext != "png")
|
|
{
|
|
$message = SUBNEWSLAN_3;
|
|
$submitnews_error = TRUE;
|
|
}
|
|
|
|
if (!$pref['upload_maxfilesize'])
|
|
{
|
|
$pref['upload_maxfilesize'] = ini_get('upload_max_filesize') * 1048576;
|
|
}
|
|
|
|
if ($filesize > $pref['upload_maxfilesize'])
|
|
{
|
|
$message = SUBNEWSLAN_4;
|
|
$submitnews_error = TRUE;
|
|
}
|
|
|
|
if ($filename && !$submitnews_error)
|
|
{
|
|
$today = getdate();
|
|
$submitnews_file = USERID."_".$today[0]."_".str_replace(" ", "_", substr($submitnews_title, 0, 6)).".".$fileext;
|
|
if ($pref['subnews_resize'])
|
|
{
|
|
require_once(e_HANDLER."resize_handler.php");
|
|
|
|
if (!resize_image(e_IMAGE."newspost_images/".$filename, e_IMAGE."newspost_images/".$submitnews_file, $pref['subnews_resize']))
|
|
{
|
|
rename(e_IMAGE."newspost_images/".$filename, e_IMAGE."newspost_images/".$submitnews_file);
|
|
}
|
|
}
|
|
elseif ($filename)
|
|
{
|
|
rename(e_IMAGE."newspost_images/".$filename, e_IMAGE."newspost_images/".$submitnews_file);
|
|
}
|
|
}
|
|
|
|
if ($filename && !file_exists(e_IMAGE."newspost_images/".$submitnews_file))
|
|
{
|
|
$submitnews_file = "";
|
|
}
|
|
}
|
|
|
|
if ($submitnews_error == FALSE)
|
|
{
|
|
$sql->db_Insert("submitnews", "0, '$submitnews_user', '$submitnews_email', '$submitnews_title', '".intval($_POST['cat_id'])."', '$submitnews_item', '".time()."', '$ip', '0', '$submitnews_file' ");
|
|
$edata_sn = array("user" => $submitnews_user, "email" => $submitnews_email, "itemtitle" => $submitnews_title, "catid" => intval($_POST['cat_id']), "item" => $submitnews_item, "ip" => $ip, "newname" => $submitnews_file);
|
|
$e_event->trigger("subnews", $edata_sn);
|
|
$ns->tablerender(LAN_133, "<div style='text-align:center'>".LAN_134."</div>");
|
|
require_once(FOOTERF);
|
|
exit;
|
|
}
|
|
else
|
|
{
|
|
require_once(e_HANDLER."message_handler.php");
|
|
message_handler("P_ALERT", $message);
|
|
}
|
|
}
|
|
|
|
if (!defined("USER_WIDTH")) { define("USER_WIDTH","width:95%"); }
|
|
|
|
$text = "
|
|
<div style='text-align:center'>
|
|
<form id='dataform' method='post' action='".e_SELF."' enctype='multipart/form-data' onsubmit='return frmVerify()'>
|
|
<table style='".USER_WIDTH."' class='fborder'>";
|
|
|
|
if (!empty($pref['news_subheader']))
|
|
{
|
|
$text .= "
|
|
<tr>
|
|
<td colspan='2' class='forumheader3'>".$tp->toHTML($pref['news_subheader'], TRUE, "TITLE")."<br /></td>
|
|
</tr>";
|
|
}
|
|
|
|
if (!USER)
|
|
{
|
|
$text .= "
|
|
<tr>
|
|
<td style='width:20%' class='forumheader3'>".LAN_7."</td>
|
|
<td style='width:80%' class='forumheader3'>
|
|
<input class='tbox' type='text' name='submitnews_name' size='60' value='".$tp->toHTML($submitnews_user,FALSE,'USER_TITLE')."' maxlength='100' />
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td style='width:20%' class='forumheader3'>".LAN_112."</td>
|
|
<td style='width:80%' class='forumheader3'>
|
|
<input class='tbox' type='text' name='submitnews_email' size='60' value='".$tp->toHTML($submitnews_email, FALSE, 'LINKTEXT')."' maxlength='100' />
|
|
</td>
|
|
</tr>";
|
|
}
|
|
|
|
$text .= "
|
|
<tr>
|
|
<td style='width:20%' class='forumheader3'>".NWSLAN_6.": </td>
|
|
<td style='width:80%' class='forumheader3'>";
|
|
|
|
if (!$sql->db_Select("news_category"))
|
|
{
|
|
$text .= NWSLAN_10;
|
|
}
|
|
else
|
|
{
|
|
$text .= "
|
|
<select name='submitnews_category' class='tbox'>";
|
|
while (list($cat_id, $cat_name, $cat_icon) = $sql->db_Fetch(MYSQL_NUM))
|
|
{
|
|
$sel = ($_POST['submitnews_category'] == $cat_id) ? "selected='selected'" : "";
|
|
$text .= "<option value='{$cat_id}' {$sel}>".$tp->toHTML($cat_name, FALSE, "defs")."</option>";
|
|
}
|
|
$text .= "</select>";
|
|
}
|
|
|
|
$text .= "
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td style='width:20%' class='forumheader3'>".LAN_62."</td>
|
|
<td style='width:80%' class='forumheader3'>
|
|
<input class='tbox' type='text' id='submitnews_title' name='submitnews_title' size='60' value='".$tp->toHTML($_POST['submitnews_title'],TRUE,'USER_TITLE')."' maxlength='200' style='width:90%' />
|
|
</td>
|
|
</tr>";
|
|
|
|
if (e_WYSIWYG)
|
|
{
|
|
$insertjs = "rows='25'";
|
|
}
|
|
else
|
|
{
|
|
require_once(e_HANDLER."ren_help.php");
|
|
$insertjs = "rows='15' onselect='storeCaret(this);' onclick='storeCaret(this);' onkeyup='storeCaret(this);'";
|
|
}
|
|
|
|
$text .= "
|
|
<tr>
|
|
<td style='width:20%' class='forumheader3'>".LAN_135."</td>
|
|
<td style='width:80%' class='forumheader3'>
|
|
<textarea class='tbox' id='submitnews_item' name='submitnews_item' cols='80' style='max-width:95%' {$insertjs}>".$tp->toHTML($_POST['submitnews_item'],TRUE,'USER_BODY')."</textarea><br />";
|
|
|
|
if (!e_WYSIWYG)
|
|
{
|
|
$text .= display_help("helpb","submitnews");
|
|
}
|
|
|
|
$text .= "
|
|
</td>
|
|
</tr>";
|
|
|
|
if ($pref['subnews_attach'] && $pref['upload_enabled'] && check_class($pref['upload_class']) && FILE_UPLOADS)
|
|
{
|
|
$text .= "
|
|
<tr>
|
|
<td style='width:20%' class='forumheader3'>".SUBNEWSLAN_5."<br /><span class='smalltext'>".SUBNEWSLAN_6."</span></td>
|
|
<td style='width:80%' class='forumheader3'>
|
|
<input class='tbox' type='file' name='file_userfile[]' style='width:90%' />
|
|
</td>
|
|
</tr>";
|
|
}
|
|
|
|
$text .= "
|
|
<tr>
|
|
<td colspan='2' style='text-align:center' class='forumheader'>
|
|
<input class='button' type='submit' name='submitnews_submit' value='".LAN_136."' />
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
</form>
|
|
</div>";
|
|
|
|
$ns->tablerender(LAN_136, $text);
|
|
require_once(FOOTERF);
|
|
|
|
function headerjs()
|
|
{
|
|
$adder = "";
|
|
if (e_WYSIWYG) $adder = 'tinyMCE.triggerSave();';
|
|
$script = "
|
|
<script type=\"text/javascript\">
|
|
function frmVerify()
|
|
{
|
|
{$adder}
|
|
if(document.getElementById('submitnews_title').value == \"\")
|
|
{
|
|
alert('".SUBNEWSLAN_1."');
|
|
return false;
|
|
}
|
|
|
|
if(document.getElementById('submitnews_item').value == \"\")
|
|
{
|
|
alert('".SUBNEWSLAN_2."');
|
|
return false;
|
|
}
|
|
}
|
|
</script>";
|
|
return $script;
|
|
}
|
|
|
|
?>
|