'.$cur_error.'';
($hook = get_hook('mi_pre_email_errors')) ? eval($hook) : null;
?>
'.$lang_common['Required'].'') ?>
', $tpl_temp, $tpl_main);
ob_end_clean();
// END SUBST -
require FORUM_ROOT.'footer.php';
}
// Report a post?
else if (isset($_GET['report']))
{
if ($forum_user['is_guest'])
message($lang_common['No permission']);
$post_id = intval($_GET['report']);
if ($post_id < 1)
message($lang_common['Bad request']);
($hook = get_hook('mi_report_selected')) ? eval($hook) : null;
// User pressed the cancel button
if (isset($_POST['cancel']))
redirect(forum_link($forum_url['post'], $post_id), $lang_common['Cancel redirect']);
if (isset($_POST['form_sent']))
{
($hook = get_hook('mi_report_form_submitted')) ? eval($hook) : null;
// Flood protection
if ($forum_user['last_email_sent'] != '' && (time() - $forum_user['last_email_sent']) < $forum_user['g_email_flood'] && (time() - $forum_user['last_email_sent']) >= 0)
message(sprintf($lang_misc['Report flood'], $forum_user['g_email_flood']));
// Clean up reason from POST
$reason = forum_linebreaks(forum_trim($_POST['req_reason']));
if ($reason == '')
message($lang_misc['No reason']);
// Get some info about the topic we're reporting
$query = array(
'SELECT' => 't.id, t.subject, t.forum_id',
'FROM' => 'posts AS p',
'JOINS' => array(
array(
'INNER JOIN' => 'topics AS t',
'ON' => 't.id=p.topic_id'
)
),
'WHERE' => 'p.id='.$post_id
);
($hook = get_hook('mi_report_qr_get_topic_data')) ? eval($hook) : null;
$result = $forum_db->query_build($query) or error(__FILE__, __LINE__);
if (!$forum_db->num_rows($result))
message($lang_common['Bad request']);
list($topic_id, $subject, $forum_id) = $forum_db->fetch_row($result);
($hook = get_hook('mi_report_pre_reports_sent')) ? eval($hook) : null;
// Should we use the internal report handling?
if ($forum_config['o_report_method'] == 0 || $forum_config['o_report_method'] == 2)
{
$query = array(
'INSERT' => 'post_id, topic_id, forum_id, reported_by, created, message',
'INTO' => 'reports',
'VALUES' => $post_id.', '.$topic_id.', '.$forum_id.', '.$forum_user['id'].', '.time().', \''.$forum_db->escape($reason).'\''
);
($hook = get_hook('mi_report_add_report')) ? eval($hook) : null;
$forum_db->query_build($query) or error(__FILE__, __LINE__);
}
// Should we e-mail the report?
if ($forum_config['o_report_method'] == 1 || $forum_config['o_report_method'] == 2)
{
// We send it to the complete mailing-list in one swoop
if ($forum_config['o_mailing_list'] != '')
{
$mail_subject = 'Report('.$forum_id.') - \''.$subject.'\'';
$mail_message = 'User \''.$forum_user['username'].'\' has reported the following message:'."\n".forum_link($forum_url['post'], $post_id)."\n\n".'Reason:'."\n".$reason;
if (!defined('FORUM_EMAIL_FUNCTIONS_LOADED'))
require FORUM_ROOT.'include/email.php';
($hook = get_hook('mi_report_modify_message')) ? eval($hook) : null;
forum_mail($forum_config['o_mailing_list'], $mail_subject, $mail_message);
}
}
// Set last_email_sent time to prevent flooding
$query = array(
'UPDATE' => 'users',
'SET' => 'last_email_sent='.time(),
'WHERE' => 'id='.$forum_user['id']
);
($hook = get_hook('mi_report_qr_update_last_email_sent')) ? eval($hook) : null;
$forum_db->query_build($query) or error(__FILE__, __LINE__);
($hook = get_hook('mi_report_pre_redirect')) ? eval($hook) : null;
redirect(forum_link($forum_url['post'], $post_id), $lang_misc['Report redirect']);
}
// Setup form
$forum_page['group_count'] = $forum_page['item_count'] = $forum_page['fld_count'] = 0;
$forum_page['form_action'] = forum_link($forum_url['report'], $post_id);
$forum_page['hidden_fields'] = array(
'form_sent' => '
'.$lang_common['Required'].'') ?>
', $tpl_temp, $tpl_main);
ob_end_clean();
// END SUBST -
require FORUM_ROOT.'footer.php';
}
// Subscribe to a topic?
else if (isset($_GET['subscribe']))
{
if ($forum_user['is_guest'] || $forum_config['o_subscriptions'] != '1')
message($lang_common['No permission']);
$topic_id = intval($_GET['subscribe']);
if ($topic_id < 1)
message($lang_common['Bad request']);
// We validate the CSRF token. If it's set in POST and we're at this point, the token is valid.
// If it's in GET, we need to make sure it's valid.
if (!isset($_POST['csrf_token']) && (!isset($_GET['csrf_token']) || $_GET['csrf_token'] !== generate_form_token('subscribe'.$topic_id.$forum_user['id'])))
csrf_confirm_form();
($hook = get_hook('mi_subscribe_selected')) ? eval($hook) : null;
// Make sure the user can view the topic
$query = array(
'SELECT' => 'subject',
'FROM' => 'topics AS t',
'JOINS' => array(
array(
'LEFT JOIN' => 'forum_perms AS fp',
'ON' => '(fp.forum_id=t.forum_id AND fp.group_id='.$forum_user['g_id'].')'
)
),
'WHERE' => '(fp.read_forum IS NULL OR fp.read_forum=1) AND t.id='.$topic_id.' AND t.moved_to IS NULL'
);
($hook = get_hook('mi_subscribe_qr_topic_exists')) ? eval($hook) : null;
$result = $forum_db->query_build($query) or error(__FILE__, __LINE__);
if (!$forum_db->num_rows($result))
message($lang_common['Bad request']);
$subject = $forum_db->result($result);
$query = array(
'SELECT' => '1',
'FROM' => 'subscriptions AS s',
'WHERE' => 'user_id='.$forum_user['id'].' AND topic_id='.$topic_id
);
($hook = get_hook('mi_subscribe_qr_check_subscribed')) ? eval($hook) : null;
$result = $forum_db->query_build($query) or error(__FILE__, __LINE__);
if ($forum_db->num_rows($result))
message($lang_misc['Already subscribed']);
$query = array(
'INSERT' => 'user_id, topic_id',
'INTO' => 'subscriptions',
'VALUES' => $forum_user['id'].' ,'.$topic_id
);
($hook = get_hook('mi_subscribe_add_subscription')) ? eval($hook) : null;
$forum_db->query_build($query) or error(__FILE__, __LINE__);
($hook = get_hook('mi_subscribe_pre_redirect')) ? eval($hook) : null;
redirect(forum_link($forum_url['topic'], array($topic_id, sef_friendly($subject))), $lang_misc['Subscribe redirect']);
}
// Unsubscribe from a topic?
else if (isset($_GET['unsubscribe']))
{
if ($forum_user['is_guest'] || $forum_config['o_subscriptions'] != '1')
message($lang_common['No permission']);
$topic_id = intval($_GET['unsubscribe']);
if ($topic_id < 1)
message($lang_common['Bad request']);
// We validate the CSRF token. If it's set in POST and we're at this point, the token is valid.
// If it's in GET, we need to make sure it's valid.
if (!isset($_POST['csrf_token']) && (!isset($_GET['csrf_token']) || $_GET['csrf_token'] !== generate_form_token('unsubscribe'.$topic_id.$forum_user['id'])))
csrf_confirm_form();
($hook = get_hook('mi_unsubscribe_selected')) ? eval($hook) : null;
$query = array(
'SELECT' => 't.subject',
'FROM' => 'topics AS t',
'JOINS' => array(
array(
'INNER JOIN' => 'subscriptions AS s',
'ON' => 's.user_id='.$forum_user['id'].' AND s.topic_id=t.id'
)
),
'WHERE' => 't.id='.$topic_id
);
($hook = get_hook('mi_unsubscribe_qr_check_subscribed')) ? eval($hook) : null;
$result = $forum_db->query_build($query) or error(__FILE__, __LINE__);
if (!$forum_db->num_rows($result))
message($lang_misc['Not subscribed']);
$subject = $forum_db->result($result);
$query = array(
'DELETE' => 'subscriptions',
'WHERE' => 'user_id='.$forum_user['id'].' AND topic_id='.$topic_id
);
($hook = get_hook('mi_unsubscribe_qr_delete_subscription')) ? eval($hook) : null;
$result = $forum_db->query_build($query) or error(__FILE__, __LINE__);
($hook = get_hook('mi_unsubscribe_pre_redirect')) ? eval($hook) : null;
redirect(forum_link($forum_url['topic'], array($topic_id, sef_friendly($subject))), $lang_misc['Unsubscribe redirect']);
}
($hook = get_hook('mi_new_action')) ? eval($hook) : null;
message($lang_common['Bad request']);