<?php

/*

 * Decir

 * Version 0.1

 * Copyright (C) 2007 Dan Fuhry

 * edit.php - edit posts that already exist

 *

 * This program is Free Software; you can redistribute and/or modify it under the terms of the GNU General Public License

 * as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

 *

 * This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied

 * warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for details.

 */

require('common.php');

$pid = $paths->getParam(1);

if ( strval(intval($pid)) !== $pid )

{

  die_friendly('Error', '<p>Invalid post ID</p>');

}

$pid = intval($pid);

// Obtain post info

$q = $db->sql_query('SELECT p.post_id, p.topic_id, p.post_subject, t.post_text, t.bbcode_uid, p.poster_id, p.post_deleted FROM '.table_prefix."decir_posts AS p

                       LEFT JOIN ".table_prefix."decir_posts_text AS t

                         ON (t.post_id = p.post_id)

                       WHERE p.post_id = $pid;");

if ( !$q )

  $db->_die('Decir delete.php');

if ( $db->numrows() < 1 )

{

  die_friendly('Error', '<p>The post you requested does not exist.</p>');

}

$row = $db->fetchrow();

$db->free_result();

$tid = intval($row['topic_id']);

$acl_type = ( $row['poster_id'] == $session->user_id && $session->user_logged_in ) ? 'decir_edit_own' : 'decir_edit_other';

$post_perms = $session->fetch_page_acl(strval($pid), 'DecirPost');

if ( !$post_perms->get_permissions($acl_type) )

{

  die_friendly('Error', '<p>You do not have permission to edit this post.</p>');

}

$edit_reason = '';

if ( isset($_GET['act']) && $_GET['act'] == 'submit' )

{

  if ( isset($_POST['do']['delete']) )

  {

    // Nuke it

    $result = decir_delete_post($pid, $_POST['edit_reason'], ( $_POST['delete_method'] == 'hard' ));

    if ( $result )

    {

      $url = makeUrlNS('Special', 'Forum/Topic/' . $tid, false, true) . '#post' . $pid;

      redirect($url, 'Post deleted', 'The selected post has been deleted.', 4);

    }

    $edit_reason = htmlspecialchars($_POST['edit_reason']);

  }

  else if ( isset($_POST['do']['restore']) )

  {

    $result = decir_restore_post($pid);

    if ( $result )

    {

      $url = makeUrlNS('Special', 'Forum/Topic/' . $tid, false, true) . '#post' . $pid;

      redirect($url, 'Post restored', 'The selected post has been restored.', 4);

    }

  }

  else if ( isset($_POST['do']['noop']) )

  {

    $url = makeUrlNS('Special', 'Forum/Post/' . $pid, false, true) . '#post' . $pid;

    redirect($url, '', '', 0);

  }

}

$template->header(true);

$form_submit_url = makeUrlNS('Special', 'Forum/Delete/' . $pid, 'act=submit', true);

?>

<form action="<?php echo $form_submit_url; ?>" method="post" enctype="multipart/form-data">

  <?php if ( $row['post_deleted'] == 1 ):

  if ( isset($_GET['act']) && $_GET['act'] == 'restore' ): ?>

  <p>Are you sure you want to restore this post so that it is visible to the public?</p>

  <p><input type="submit" name="do[restore]" value="Restore post" tabindex="3" /> <input tabindex="4" type="submit" name="do[noop]" value="Cancel" /></p>

  <?php else: ?>

  <p>Are you sure you want to permanently delete this post?</p>

  <p><input type="hidden" name="delete_method" value="hard" /><input type="submit" name="do[delete]" value="Delete post" tabindex="3" /> <input tabindex="4" type="submit" name="do[noop]" value="Cancel" /></p>

  <?php endif;

        else: ?>

  <p>To delete this post, please enter a reason for deletion and click the appropriate button below.</p>

  <p>Please note that if this the first post in the thread, the entire thread will be removed.</p>

  <p><label><input type="radio" name="delete_method" value="soft" onclick="document.getElementById('decir_reason_box').style.display = 'inline';" checked="checked" tabindex="1" /> Soft delete</label> - <small>Post is replaced with the message you enter here. The original post is not removed from the database and is still visible to administrators.</small></p>

  <p><input type="text" name="edit_reason" value="<?php echo $edit_reason; ?>" tabindex="2" style="width: 97%;" id="decir_reason_box" /></p>

  <p><label><input type="radio" name="delete_method" value="hard" onclick="document.getElementById('decir_reason_box').style.display = 'none';" /> Physically remove post</label> - <small>Irreversibly removes the post from the database.</small></p>

  <p><input type="submit" name="do[delete]" value="Delete post" tabindex="3" /> <input tabindex="4" type="submit" name="do[noop]" value="Cancel" /></p>

  <?php endif; ?>

</form>

<?php

$template->footer(true);

?>