<?php

/*

 * Decir

 * Version 0.1

 * Copyright (C) 2007 Dan Fuhry

 * edit.php - edit posts that already exist

 *

 * This program is Free Software; you can redistribute and/or modify it under the terms of the GNU General Public License

 * as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

 *

 * This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied

 * warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for details.

 */

require('common.php');

require('bbcode.php');

$pid = $paths->getParam(1);

if ( strval(intval($pid)) !== $pid )

{

  die_friendly('Error', '<p>Invalid post ID</p>');

}

$pid = intval($pid);

// Obtain post info

$q = $db->sql_query('SELECT p.post_id, p.post_subject, t.post_text, t.bbcode_uid, p.poster_id FROM '.table_prefix."decir_posts AS p

                       LEFT JOIN ".table_prefix."decir_posts_text AS t

                         ON (t.post_id = p.post_id)

                       WHERE p.post_id = $pid;");

if ( !$q )

  $db->_die('Decir edit.php');

if ( $db->numrows() < 1 )

{

  die_friendly('Error', '<p>The post you requested does not exist.</p>');

}

$row = $db->fetchrow();

$db->free_result();

$own_post = ( $row['poster_id'] == $session->user_id && $session->user_logged_in );

$acl_type = ( $own_post ) ? 'decir_edit_own' : 'decir_edit_other';

$post_perms = $session->fetch_page_acl(strval($pid), 'DecirPost');

if ( !$post_perms->get_permissions($acl_type) )

{

  die_friendly('Error', '<p>You do not have permission to edit this post.</p>');

}

$show_preview = false;

$form_submit_url = makeUrlNS('Special', 'Forum/Edit/' . $pid, 'act=submit', true);

$post_text = htmlspecialchars(bbcode_strip_uid($row['post_text'], $row['bbcode_uid']));

$post_subject = htmlspecialchars($row['post_subject']);

$edit_reason = '';

if ( isset($_GET['act']) && $_GET['act'] == 'submit' )

{

  if ( isset($_POST['do']['preview']) )

  {

    $show_preview = true;

    $post_text = htmlspecialchars($_POST['post_text']);

    $post_subject = htmlspecialchars($_POST['post_subject']);

    $edit_reason = htmlspecialchars($_POST['edit_reason']);

    $message_render = render_bbcode($post_text);

    $message_render = RenderMan::smilieyize($message_render);

  }

  else if ( isset($_POST['do']['save']) )

  {

    // Save changes

    if ( isset($_POST['do']['delete']) )

    {

      // Check permissions (of course!)

      $acl_type = ( $own_post

                    ? ( $_POST['delete_method'] == 'hard' ? 'decir_delete_own_post_hard'   : 'decir_delete_own_post_soft' )

                    : ( $_POST['delete_method'] == 'hard' ? 'decir_delete_other_post_hard' : 'decir_delete_other_post_soft' )

                  );

      if ( !$post_perms->get_permissions($acl_type) )

      {

        die_friendly('Error', '<p>You do not have access to perform this type of deletion on this post.</p>');

      }

      // Nuke it

      $result = decir_delete_post($pid, $_POST['edit_reason']);

      if ( $result )

      {

        $url = makeUrlNS('Special', 'Forum/Post/' . $pid, false, true) . '#post' . $pid;

        redirect($url, 'Post deleted', 'The selected post has been deleted.', 4);

      }

    }

    $post_text = trim(htmlspecialchars($_POST['post_text']));

    $post_subject = trim(htmlspecialchars($_POST['post_subject']));

    $edit_reason = trim(htmlspecialchars($_POST['edit_reason']));

    $errors = array();

    if ( empty($post_text) )

      $errors[] = 'Please enter some post text.';

    $result = decir_edit_post($pid, $post_subject, $post_text, $edit_reason);

    if ( $result )

    {

      $url = makeUrlNS('Special', 'Forum/Post/' . $pid, false, true) . '#post' . $pid;

      redirect($url, 'Post successful', 'Your changes to this post have been saved.', 4);

    }

  }

  else if ( isset($_POST['do']['noop']) )

  {

    $url = makeUrlNS('Special', 'Forum/Post/' . $pid, false, true) . '#post' . $pid;

    redirect($url, '', '', 0);

  }

}

// add JS for editor

$template->add_header('<!-- DECIR BEGIN -->

    <script type="text/javascript" src="' . scriptPath . '/decir/js/bbcedit.js"></script>

    <script type="text/javascript" src="' . scriptPath . '/decir/js/colorpick/jquery.js"></script>

    <script type="text/javascript" src="' . scriptPath . '/decir/js/colorpick/farbtastic.js"></script>

    <link rel="stylesheet" type="text/css" href="' . scriptPath . '/decir/js/bbcedit.css" />

    <link rel="stylesheet" type="text/css" href="' . scriptPath . '/decir/js/colorpick/farbtastic.css" />

    <!-- DECIR END -->');

$template->header();

if ( $show_preview )

{

  echo '<div style="border: 1px solid #222222; background-color: #F0F0F0; padding: 10px; max-height: 300px; clip: rect(0px,auto,auto,0px); overflow: auto; margin: 10px 0;">

          <h2>Post preview</h2>

          <p>' . $message_render . '</p>

        </div>';

}

?>

<form action="<?php echo $form_submit_url; ?>" method="post" enctype="multipart/form-data">

  <div class="tblholder">

    <table border="0" cellspacing="1" cellpadding="4">

      <tr>

        <th colspan="2">Editing post: <?php echo $post_subject; ?></th>

      </tr>

      <tr>

        <td class="row2">Delete post:</td>

        <td class="row1"><label><input type="checkbox" name="do[delete]" /> To delete this post, check this box and click Save.</label><br /><small>If this is the first post in the thread, the entire thread will be deleted.</small></td>

      </tr>

      <tr>

        <td class="row2">Post subject:</td>

        <td class="row1"><input type="text" name="post_subject" value="<?php echo $post_subject; ?>" style="width: 100%;" /></td>

      </tr>

      <tr>

        <td class="row2">Reason for editing:</td>

        <td class="row1"><input type="text" name="edit_reason" value="<?php echo $edit_reason; ?>" style="width: 100%;" /></td>

      </tr>

      <tr>

        <td class="row3" colspan="2">

          <textarea name="post_text" class="bbcode" rows="20" cols="80"><?php echo $post_text; ?></textarea>

        </td>

      </tr>

      <tr>

        <th class="subhead" colspan="2">

          <input type="submit" name="do[save]" value="Save changes" />

          <input type="submit" name="do[preview]" value="Show preview" />

          <input type="submit" name="do[noop]" value="Cancel" />

        </th>

      </tr>

    </table>

  </div>

</form>

<?php

$template->footer();

?>