forum.php

<?php

	require_once 'lib/function.php';
	
	
	$_GET['id']     = filter_int($_GET['id']);
	$_GET['user']   = filter_int($_GET['user']);
	$_GET['feat']   = filter_int($_GET['feat']);
	$_GET['fav']    = filter_bool($_GET['fav']);
	$_GET['act']    = filter_string($_GET['act']);
	

	if ($loguser['id']) {
		$postread = $sql->getresultsbykey("SELECT forum, readdate FROM forumread WHERE user = {$loguser['id']}");
	}
	
	$specialscheme = $specialtitle = NULL;
		
	$forumlist   = "";
	$fonline     = "";
	$forum_error = "";

	// Add/remove favorites
	if ($_GET['act'] == 'add' || $_GET['act'] == 'rem') {
		if (!$loguser['id']) {
			$meta['noindex'] = true; // prevent search engines from indexing
			errorpage("You need to be logged in to edit your favorites!", "forum.php?id={$t['forum']}", 'return to the forum');
		}
		$_GET['thread'] = filter_int($_GET['thread']);
		load_thread($_GET['thread']);
		
		$favorited = $sql->resultq("SELECT COUNT(*) FROM favorites WHERE thread = {$_GET['thread']} AND user = {$loguser['id']}");
		if ($_GET['act'] == 'add' && !$favorited) {
			$sql->query("INSERT INTO favorites (user, thread) VALUES ({$loguser['id']},{$_GET['thread']})");
			$tx = "\"{$thread['title']}\" has been added to your favorites.";
		} else if ($_GET['act'] == 'rem' && $favorited) {
			$sql->query("DELETE FROM favorites WHERE user = {$loguser['id']} AND thread = {$_GET['thread']}");
			$tx = "\"{$thread['title']}\" has been removed from your favorites.";
		} else {
			die(header("Location: forum.php?id={$thread['forum']}"));
		}
		
		errorpage($tx, "forum.php?id={$thread['forum']}", 'return to the forum');
	}
	
	// Favorites view
	if ($_GET['fav']) {
		if (!$loguser['id']) {
			$meta['noindex'] = true; // prevent search engines from indexing what they can't access
			errorpage("You need to be logged in to view your favorites.", 'login.php', 'log in (then try again)');
		}

		$forum['title'] = 'Favorites';
		// Viewing another user's favorites?
		if ($_GET['user'] && $_GET['user'] != $loguser['id'] && $isadmin)
			$forum['title'] .= ' of '.$sql->resultq("SELECT name FROM users WHERE id = {$_GET['user']}");
		else
			$_GET['user'] = $loguser['id'];
		
		$threadcount = $sql->resultq("SELECT COUNT(*) FROM favorites where user = {$_GET['user']}");
		$pageurl = "fav=1";
	}
	// Featured threads display
	else if ($_GET['feat']) {
		$pageurl        = "feat={$_GET['feat']}";
		$forum['title'] = "Featured threads";
		$where          = "enabled = ".($_GET['feat']-1);
		if ($_GET['user']) {
			$userdata = load_user($_GET['user']);
			if (!$userdata) {
				$meta['noindex'] = true; // prevent search engines from indexing what they can't access
				errorpage("No user with that ID exists.",'index.php','the index page');
			}
			$pageurl        .= "&user={$_GET['user']}";
			$forum['title'] .= " by {$userdata['name']}";
			$where          .= " AND user = {$_GET['user']}";
		}
		if ($_GET['feat'] == 1) {
			$forum['title'] .= " (Archive)";
		}
		$threadcount = $sql->resultq("SELECT COUNT(*) FROM threads_featured WHERE {$where}");
	}
	// Posts by user
	else if ($_GET['user']) {
		$userdata = $sql->fetchq("SELECT $userfields FROM users u WHERE id = {$_GET['user']}");
		
		if (!$userdata) {
			$meta['noindex'] = true; // prevent search engines from indexing what they can't access
			errorpage("No user with that ID exists.",'index.php','the index page');
		}

		$forum['title'] = "Threads by {$userdata['name']}";
		$threadcount = $sql->resultq("SELECT COUNT(*) FROM threads where user = {$_GET['user']}");
		$pageurl = "user={$_GET['user']}";
	}
	else if ($_GET['id']) { # Default case, show forum with id
		load_forum($_GET['id']);
		$ismod = ismod($_GET['id']);
		if ($forum_error) {
			$forum_error = "<table class='table'>{$forum_error}</table>";
		}
		
		$threadcount 	= $forum['numthreads'];
		$specialscheme 	= $forum['specialscheme'];
		$specialtitle 	= $forum['specialtitle'];
		$pageurl = "id={$_GET['id']}";
	}
	else {
		$meta['noindex'] = true; // prevent search engines from indexing what they can't access
		errorpage("No forum specified.","index.php",'the index page');
	}

	
	pageheader($forum['title'], $specialscheme, $specialtitle);
	if ($_GET['id']) {
		print "<table class='table'><td class='tdbg1 fonts center'>".onlineusers($forum)."</table>";
	}
	$hotcount = $sql->resultq('SELECT hotcount FROM misc');
	if ($hotcount <= 0) $hotcount = 0xFFFF;
	
	
	$ppp = get_ppp();
	$tpp = get_tpp();
	
	$_GET['page'] = filter_int($_GET['page']);
    $min = $_GET['page'] * $tpp;
	


	// Breadcrumbs bar / new thread links
	$links = array(
		[$forum['title'], NULL]
	);
	$barright = $forumlist = '';
	if ($_GET['id']) {
		$forumlist = doforumlist($_GET['id']);
		
		// Make sure we can create polls
		$barright = "".
			(($forum['pollstyle'] != -2) ? "<a href='newthread.php?poll=1&id={$_GET['id']}'>{$newpollpic}</a>" : $nopollpic)
			." - <a href='newthread.php?id={$_GET['id']}'>{$newthreadpic}</a>";
		if ($ismod) {
			$barright .= " - <a href='admin-forumbans.php?forum={$_GET['id']}'>Edit forum bans</a>";
		}
	}
	if ($_GET['feat']) {
		$barright = "Show: <a href='?feat=2'>Current</a> - <a href='?feat=1'>Archive</a>";
	}
	$infotable = dobreadcrumbs($links, $barright); 
	

	// Forum page list at the top & bottom
	$forumpagelinks = '';
	if($threadcount > $tpp) {
		if (isset($_GET['tpp'])) $pageurl .= "&tpp=$tpp";
		$forumpagelinks = "<table style='width: 100%'><tr><td class='fonts'>".pagelist("?$pageurl", $threadcount, $tpp, true)."</td></tr></table>";
    }

	
	$threadlist = "{$forum_error}<table class='table'>";

	if ($_GET['id']) {
		// Main forum view: Get the last announcement from
		// both the annc forum and the current forum
		
		// Conditional labels
		if ($_GET['id'] == $config['announcement-forum']) {
			$ac = [$config['announcement-forum'], "0"]; // Don't show forum attachments in the annc forum
		} else {
			$ac = [$config['announcement-forum'], "{$_GET['id']} AND t.announcement = 1"];
		}
		$al = ['A','Forum a'];
		
		for ($i = 0; $i < 2; ++$i) {
			
			$annc = $sql->fetchq("
				SELECT $userfields, t.id aid, t.title atitle, t.description adesc,
				       t.firstpostdate date, t.forum, r.readdate
				FROM threads t
				LEFT JOIN users            u ON t.user = u.id
				LEFT JOIN announcementread r ON t.forum = r.forum AND r.user = {$loguser['id']}
				WHERE t.forum = {$ac[$i]}
				ORDER BY t.firstpostdate DESC
				LIMIT 1
			");
			
			if ($annc) {
				$threadlist .= 
					"<tr>
						<td colspan=7 class='tdbgh center fonts'>
							{$al[$i]}nnouncements
						</td>
					</tr>
					<tr>
						<td class='tdbg2 center'>
							". ($loguser['id'] && $annc['readdate'] < $annc['date'] ? $statusicons['new'] : "&nbsp;") ."
						</td>
						<td class='tdbg1' colspan=6>
							<a href=announcement.php".($i ? "?f={$annc['forum']}" : "").">{$annc['atitle']}</a> -- Posted by ".getuserlink($annc)." on ".printdate($annc['date'])."
						</td>
					</tr>";
			}
		}
    } else {
		// Get forum names in threads by user / favourite list
		$forumnames = $sql->getresultsbykey("SELECT id, title FROM forums WHERE !minpower OR minpower <= {$loguser['powerlevel']}");
	}
	
	
	// Get threads
	if ($loguser['id']) {
		$q_trval 	= ", r.read tread, r.time treadtime ";
		$q_trjoin 	= "LEFT JOIN threadsread r ON t.id = r.tid AND r.uid = {$loguser['id']} ";
	} else {
		$q_trval = $q_trjoin = "";
	}
	
	// Now with FETCH_NAMED capabilities
	if ($_GET['fav']) {
		$threads = $sql->query("
			SELECT  t.*, f.minpower, f.pollstyle, f.id forumid, f.login,
			        ".set_userfields('u1')." uid, 
			        ".set_userfields('u2')." uid
					$q_trval
			
			FROM threads t
			LEFT JOIN users      u1 ON t.user       =  u1.id
			LEFT JOIN users      u2 ON t.lastposter =  u2.id
			LEFT JOIN forums      f ON t.forum      =   f.id
			LEFT JOIN favorites fav ON t.id         = fav.thread
			$q_trjoin
			
			WHERE fav.user = {$_GET['user']}
			ORDER BY t.sticky DESC, t.lastpostdate DESC
					
			LIMIT $min,$tpp			
		");

	} else if ($_GET['feat']) {
		$threads = $sql->query("
			SELECT 	t.*, f.id forumid, f.minpower, f.login,
			        ".set_userfields('u1')." uid, 
			        ".set_userfields('u2')." uid
			        $q_trval
			
			FROM threads t
			LEFT JOIN threads_featured  tf ON t.id         = tf.thread
			LEFT JOIN users             u1 ON t.user       = u1.id
			LEFT JOIN users             u2 ON t.lastposter = u2.id
			LEFT JOIN forums             f ON t.forum      =  f.id
			$q_trjoin
			
			WHERE (tf.enabled = ".($_GET['feat']-1).")".($_GET['user'] ? " AND t.user = {$_GET['user']}" : "")."
			ORDER BY t.lastpostdate DESC
					
			LIMIT $min,$tpp			
		"); //  OR t.featured = 1
	} else if ($_GET['user']) {
		$vals = [
			'u1name'		=> $userdata['name'],		
			'u1sex'			=> $userdata['sex'],
			'u1powerlevel'	=> $userdata['powerlevel'],
			'u1aka'			=> $userdata['aka'],
			'u1birthday'	=> $userdata['birthday'],
			'u1namecolor'	=> $userdata['namecolor']
		];
		$threads = $sql->queryp("
			SELECT 	t.*, f.minpower, f.pollstyle, f.id forumid, f.login,
			        ".set_userfields('u1', $vals).", 
			        ".set_userfields('u')." uid
					$q_trval
			
			FROM threads t
			LEFT JOIN users  u ON t.lastposter = u.id
			LEFT JOIN forums f ON t.forum      = f.id
			$q_trjoin
			
			WHERE t.user = {$_GET['user']}
			ORDER BY t.sticky DESC, t.lastpostdate DESC
					
			LIMIT $min,$tpp" ,$vals);
	} else {
		$threads = $sql->query("
			SELECT 	t.*,
			        ".set_userfields('u1')." uid, 
			        ".set_userfields('u2')." uid
			        $q_trval
			
			FROM threads t
			LEFT JOIN users      u1 ON t.user       =  u1.id
			LEFT JOIN users      u2 ON t.lastposter =  u2.id
			$q_trjoin
			
			WHERE t.forum = {$_GET['id']}
			ORDER BY t.sticky DESC, t.lastpostdate DESC
					
			LIMIT $min,$tpp			
		");
	}
    $threadlist .= "<tr>
		<td class='tdbgh center' width=30></td>
		<td class='tdbgh center' colspan=2 width=*> Thread</td>
		<td class='tdbgh center' width=14%>Started by</td>
		<td class='tdbgh center' width=60> Replies</td>
		<td class='tdbgh center' width=60> Views</td>
		<td class='tdbgh center' width=150> Last post</td>
	</tr>";

	$sticklast    = 0;
	$maxfromstart = (($loguser['pagestyle']) ?  9 :  4);
	$maxfromend   = (($loguser['pagestyle']) ? 20 : 10);
		
	$_GET['page'] = 0; // horrible hack for pagelist()

	if ($sql->num_rows($threads) <= 0) {
		$threadlist .= 
			"<tr>
				<td class='tdbg1 center' style='font-style:italic;' colspan=7>
					There are no threads to display.
				</td>
			</tr>";
	} else for ($i = 1; $thread = $sql->fetch($threads, PDO::FETCH_NAMED); ++$i) {
		
		// Sticky (or featured) separator
		$marker = ($_GET['feat'] ? $thread['featured'] : $thread['sticky']);
		if ($sticklast && !$marker)
			$threadlist .= "<tr><td class='tdbgh center' colspan=7><img src='images/_.gif' height=6 width=6>";
		$sticklast = $marker;
		
		// Always check the powerlevel if we're not showing a forum id
		if (!$_GET['id'] && !can_view_forum($thread)) {
			$threadlist .= "<tr><td class='tdbg2 fonts center' colspan=7>(restricted)</td></tr>";
			continue;
		}

		// Disabled polls
		if ($_GET['id'] && $forum['pollstyle'] == -2)
			$thread['poll'] = 0;

		
		
		/*
			Thread status icon
		*/
		$new          = "&nbsp;";
		$newpost      = false;
		$threadstatus	= "";

		// Forum, logged in
		if ($loguser['id'] && $_GET['id'] && $thread['lastpostdate'] > filter_int($postread[$_GET['id']]) && !$thread['tread']) {
			$threadstatus	.= "new";
			$newpost		= true;
			$newpostt		= ($thread['treadtime'] ? $thread['treadtime'] : filter_int($postread[$_GET['id']]));
		}
		// User's thread list / Favorites, logged in
		elseif ($loguser['id'] && !$_GET['id'] && $thread['lastpostdate'] > filter_int($postread[$thread['forumid']]) && !$thread['tread']) {
			$threadstatus	.= "new";
			$newpost		= true;
			$newpostt		= ($thread['treadtime'] ? $thread['treadtime'] : filter_int($postread[$thread['forumid']]));
		}
		// Not logged in
		elseif (!$loguser['id'] && $thread['lastpostdate'] > ctime() - 3600) {
			$threadstatus	.= "new";
			$newpost		= true;
			$newpostt		= ctime() - 3600;	// Mark as new posts made in the last hour
		}

		if ($thread['replies'] >= $hotcount) 	$threadstatus .= "hot";
		if ($thread['closed'])					$threadstatus .= "off";
		
		if ($threadstatus) $new = $statusicons[$threadstatus];

		$posticon = "<img src=\"".htmlspecialchars($thread['icon'])."\">";
		
		

		if (trim($thread['title']) == "")
			$thread['title']	= "<i>hurr durr i'm an idiot who made a blank thread</i>";
		else
			$thread['title'] = htmlspecialchars($thread['title']);//str_replace(array('<', '>'), array('&lt;', '&gt;'), trim($thread['title']));

		$threadtitle	= "<a href='thread.php?id={$thread['id']}'>{$thread['title']}</a>";
		$belowtitle   = array(); // An extra line below the title in certain circumstances
		
		/*
			Secondary thread status icon
		*/
		$sicon			= "";
		if ($thread['announcement'] && (!$_GET['id'] || ($_GET['id'] != $config['announcement-forum']))) {
			$sicon	.= "ann";
		}
		if ($thread['sticky'])	{
			$threadtitle	= "<i>". $threadtitle ."</i>";
			$sicon	.= "sticky";
		}		
		if ($thread['poll']) {
			$sicon	.= "poll";
		}
		if ($sicon)
			$threadtitle	= "<i>{$statusicons[$sicon]}</i> {$threadtitle}";
		
		if ($thread['featured']) {
			$threadtitle = "<b>Featured</b> | {$threadtitle}";
		}

		// Show forum name if not in a forum
		if (!$_GET['id'])
			$belowtitle[] = "In <a href='forum.php?id={$thread['forumid']}'>{$forumnames[$thread['forumid']]}</a>";

		// Extra pages
		$pagelinks = pagelist("thread.php?id={$thread['id']}", $thread['replies'] + 1, $ppp, $maxfromstart, $maxfromend);
		
		if($thread['replies'] >= $ppp) {
			if ($loguser['pagestyle'])
				$belowtitle[] = $pagelinks;
			else
				$threadtitle .= " <span class='pagelinks fonts'>({$pagelinks})</span>";
		}
		
		// The thread description has its own line though
		if ($threaddesc = trim($thread['description']))
			$threadtitle .= "<br><span class='fonts'>".htmlspecialchars($threaddesc)."</span>";

		if (!empty($belowtitle))
			$secondline = '<br><span class="fonts" style="position: relative; top: -1px;">&nbsp;&nbsp;&nbsp;' . implode(' - ', $belowtitle) . '</span>';
		else
			$secondline = '';

		if(!$thread['icon']) $posticon='&nbsp;';
		
		$threadauthor 	= getuserlink(array_column_by_key($thread, 0), $thread['user']);
		$lastposter 	= getuserlink(array_column_by_key($thread, 1), $thread['lastposter']);
		
		$threadlist .= 
			"<tr>
				<td class='tdbg1 center'>$new</td>
				<td class='tdbg2 center thread-icon-td'>
					<div class='thread-icon'>$posticon</div>
				</td>
				<td class='tdbg2'>
					". ($newpost ? "<a href='thread.php?id={$thread['id']}&lpt=$newpostt'>{$statusicons['getnew']}</a> " : "") ."
					$threadtitle$secondline
				</td>
				<td class='tdbg2 center'>{$threadauthor}<!--<span class='fonts'><br>".printdate($thread['firstpostdate'])."</span>--></td>
				<td class='tdbg1 center'>{$thread['replies']}</td>
				<td class='tdbg1 center'>{$thread['views']}</td>
				<td class='tdbg2 center'>
					<div class='lastpost'>
						".printdate($thread['lastpostdate'])."<br>
						by {$lastposter}
						<a href='thread.php?id={$thread['id']}&end=1'>{$statusicons['getlast']}</a>
					</div>
				</td>
			</tr>";
	}
	$threadlist .= "</table>";

	
	
	print "
		{$infotable}
		{$forumpagelinks}
		{$threadlist}
		{$forumpagelinks}
		{$infotable}
		{$forumlist}
	";
	
	pagefooter();