xXx

Hexid M1n1 5h3ll MobiLe

C:/www/familytree/mods/comments2/_[ Writable ]

File:C:/www/familytree/mods/comments2/ajx_commentsmod.php

<?php

// This is a database insert/mailing & delete script for the Usercomments mod

include( "tng_begin.php");
if( !$cms['support'] )
	$cms['tngpath'] = "";

if (!$currentuser && !isset($_POST['formguestname']) ) die("Sorry");
if (!isset($_POST['subm']) && !isset($_POST['formguestname']) ) die("Sorry!");

$errortext = "";
$errorno = 0;

if ($_POST['jobtype'] == "insert") {

	$jobtype = "insert";
	$commentsAdminmail = true;
	$commentsAdminmailGuest = true;

	if ($commentsGuestcaptcha && isset($_POST['cmtCaptRep']) && isset($_SESSION['commentsNr']) && $_SESSION['commentsNr'] != "") {

		if ($_POST['cmtCaptRep'] != "") {
			// A new guest who's selected an image
			if ($_SESSION['commentsNr'] != $_POST['cmtCaptRep']) {
				// Wrong image! Redo the Captcha
				$outstring = getCaptcha();
				$errorno = 10;
				$errortext = $text['commentWrongSelect'];
				$cmtCaptRepValue = "";
			} else {
				$_SESSION['commentsNr'] = "";
				$cmtCaptRepValue = "";
			}
		} else {
			$errorno = 11;
			$errortext = $text['commentNoSelect'];
			$cmtCaptRepValue = "";
		}
	}

	if ($errorno == 0 && !$currentuser) {

		// Check that a name is present

		$guestname = $_POST['formguestname'];
		if ($guestname == "") {
			$errorno = 7;
			$errortext = $text['commentError2'];
		} else {
			$_SESSION['commentsGuestName'] = $_POST['formguestname'];
		}
	}

	if ($errorno == 0) {

		// Check that a text is present

		if ($_POST['commentThetext'] == "") {
			$errorno = 8;
			$errortext = $text['commentError1'];
		}
	}

	if ($errorno == 0) {

		if (isset($_POST['formguestname']) ) {
			$tsubm = $_POST['formguestname'] . " (".$text['commentGuest'].")";
		} else {
			$tsubm = $_POST['subm'];
		}
		$ttext = $_POST['commentThetext'];
		$tpid = $_POST['pid'];
		$ttree = $_POST['tree'];
		$tpnn = $_POST['pnn'];
		$type = $_POST['type'];
		$hitta = array("<", "{", "[", ">", "}", "]", "$", "#");
		$commtext = str_replace($hitta, "", $ttext);
		$mailcomm = $commtext;
		$commtext = insertLinks($commtext);
		$commtext = htmlentities($commtext, ENT_QUOTES, $charset, 0);
		$commtext = str_replace("\\&#039;", "&#039;", $commtext);
		$commtext = str_replace("\\&quot;", "&quot;", $commtext);
		$commtext = nl2br($commtext);
		$commtext = str_replace(chr(13), "", $commtext);
		$commtext = str_replace(chr(10), "", $commtext);
		while (strpos($commtext, "<br /><br /><br />") !== false) {
			$commtext = str_replace("<br /><br /><br />", "<br /><br />", $commtext);
		}
		if (strrpos($commtext,"<br />") == strlen($commtext) -6) {
			$commtext = substr($commtext,0,-6);
		}
		if ($commentsAdminmail || $commentsAdminmailGuest) {
			$many = $lineending.$lineending.$lineending;
			$few = $lineending.$lineending;
			while (strpos($mailcomm, $many) !== false) {
				$mailcomm = str_replace($many, $few, $mailcomm);
			}
			$dummy = strlen($lineending);
			while (strrpos($mailcomm,$lineending) == strlen($mailcomm) -$dummy) {
				$mailcomm = substr($mailcomm,0,-$dummy);
			}
		}
		$approved = 0; if ( ($currentuser && !$commentsApproveusers) || (!$currentuser && !$commentsApproveguests) ) $approved = 1;

		// Add to DB
		$query = "INSERT INTO $comments_table (commentsApproved, commentsType, commentsPFID, commentsPFgedcom, commentsName, commentsText, commentsSubmitter) VALUES ($approved,\"$type\",\"$tpid\",\"$ttree\",\"$tpnn\",\"$commtext\",\"$tsubm\");";
		$result = tng_query($query);
		$newCommentID = mysqli_insert_id($link);

		if (!$result) {
			$errortext = "<big>".$text['commentDatabase'].$text['commentErrorinsert']."!</big><br />".$text['commentAlertadmin'];
			$errorno = 1;
		} elseif ( ($currentuser && $commentsAdminmail) || ($commentsAdminmailGuest && $_SESSION['commentsGuestName']) ) {
			$outtext = $text['commentRegarding'].$tpnn."\n".$tngdomain;
			$url = ""; if (substr($tngdomain, -1) != "/") $url = "/";
			if ($type == "persfam") {
				if (substr($tpid, 0, 1) == "F") {
	            			$url .= "familygroup.php?familyID=".$tpid."&tree=".$ttree;
				} else {
					$url .= "getperson.php?personID=".$tpid."&tree=".$ttree;
				}
			} elseif ($type == "place") {
				$url .= "placesearch.php?tree=".$ttree."&psearch=".$tpnn;
			} else {
				$url .= "showmedia.php?mediaID=".$tpid;
			}
			$outtext .= $url . "\n\n".html_entity_decode($tsubm);
			if ($commentsAdminmailGuest && $_SESSION['commentsGuestName']) {
				$outtext .= " - IP: ".$_SERVER['REMOTE_ADDR'];
			}
			$outtext .= " ".$text['commentWrote'];
			if ( ($currentuser && $commentsApproveusers) || ($commentsApproveguests && $_SESSION['commentsGuestName']) ) {
				$outtext .= "\n\n".$text['commentApproveadmin']."\n";
				$errorno = 5;
				$errortext = $text['commentApprovewait'];
			}
			$outtext .= "\n-----------------------------\n".$mailcomm."\n-----------------------------\n";
			// SEND MAIL TO ADMIN!!!!
			// ==============================
			$mailtext = "************ ".date('l jS \of F Y h:i:s A')."  ************\n".$outtext;
			$okay = mail($emailaddr, $text['commentNewMail'], $mailtext, "From: ".$emailaddr);
			if ($okay === FALSE) {
				$errortext = "<big>".$text['commentMail'].$text['commentErrorinsert']."!</big><br />".$text['commentAlertadmin'];
				$errorno = 2;

		        	$select = "SELECT COUNT(commentsName) AS cnt FROM $comments_table WHERE commentsName = '".$tpnn."' AND commentsPFID = '".$tpid."' AND commentsPFgedcom = '".$ttree."';";
				$reply = tng_query($select);
				$row = tng_fetch_assoc($reply);
				if ($row['cnt'] % 2 == 0) $commentBg = "databack"; else $commentBg = "databackalt";
				tng_free_result($reply);

				$outstring = "<tr id='tr".($row['cnt']+1)."' class='".$commentBg."'><td valign='top' align='left' style='min-width:160px; border-bottom:1px solid #909090; padding-top:6px; padding-bottom:6px;'>&nbsp;".$currentuser." ".$text['commentWrote'].":&nbsp;<br /><small><i>&nbsp;(".makeTextdate(date("Y-m-d")).")&nbsp;</i></small></td>";
				$outstring .= "<td></td>";
				$outstring .= "<td valign='top' align='left' style='min-width:50%; max-width:95%; border-bottom:1px solid #909090; border-right:1px solid #909090; padding-top:6px; padding-bottom:6px;'>".$commtext."</td></tr>";
			}
		} elseif ( ($currentuser && $commentsApproveusers) || ($_SESSION['commentsGuestName'] && commentsApproveguests) ) {
			$errorno = 5;
			$errortext = $text['commentApprovewait'];
		}
	}
	// End of errorno == 0

} elseif ($_POST['jobtype'] == "delete") {

	$jobtype = "delete";
	if (isset($_POST['kid'])) {
		$kid = $_POST['kid'];
		$query = "DELETE FROM tng_comments WHERE commentsID = ".$kid.";";
		$result = tng_query($query);
		if (!$result) {
			$errortext = "<big>".$text['commentDatabase'].$text['commentErrordelete']."!</big>";
			$errorno = 4;
		}
	}

} elseif ($_POST['jobtype'] == "approve") {

	$jobtype = "approve";
	if (isset($_POST['kid'])) {
		$kid = $_POST['kid'];
		$query = "UPDATE $comments_table SET commentsApproved = 1 WHERE commentsID = ".$kid.";";
		$result = tng_query($query);
		if (!$result) {
			$errortext = "<big>".$text['commentDatabase'].$text['commentErrorapprove']."!</big>";
			$errorno = 4;
		}
	}

} elseif ($_POST['jobtype'] == "update") {

	$jobtype = "update";
	$tsubm = $_POST['subm'];
	$ttext = $_POST['commentThetext'];
	$tpid = $_POST['pid'];
	$ttree = $_POST['tree'];
	$tpnn = $_POST['pnn'];
	$type = $_POST['type'];
	$hitta = array("<", "{", "[", ">", "}", "]", "$", "#");
	$commtext = str_replace($hitta, "", $ttext);
	$mailcomm = $commtext;
	$commtext = insertLinks($commtext);
	$commtext = htmlentities($commtext, ENT_QUOTES, $charset, 0);
	$commtext = str_replace("\\&#039;", "&#039;", $commtext);
	$commtext = str_replace("\\&quot;", "&quot;", $commtext);
	$commtext = nl2br($commtext);
	$commtext = str_replace(chr(13), "", $commtext);
	$commtext = str_replace(chr(10), "", $commtext);
	while (strpos($commtext, "<br /><br /><br />") !== false) {
		$commtext = str_replace("<br /><br /><br />", "<br /><br />", $commtext);
	}
	if (strrpos($commtext,"<br />") == strlen($commtext) -6) {
		$commtext = substr($commtext,0,-6);
	}

	$query = "UPDATE tng_comments SET commentsText = '".$commtext."' WHERE commentsID = ".$tpid.";";
	$result = tng_query($query);
	if (!$result) {
		$errortext = "<big>".$text['commentDatabase'].$text['commentErrorupdate']."!</big><br />".$text['commentAlertadmin'];
		$errorno = 3;
	}
}
// End post_jobtype-if

?>
<html>
<head>
<script type="text/JavaScript">
function updateParent() {
<?php
if ($errorno > 4 && $errorno < 12) {

?>
parent.document.getElementById("commentErrortd").innerHTML = "<?php echo $errortext; ?>";
parent.document.getElementById("commentErrortbl").style.display = "block";
parent.document.getElementById("commentErrortd").style.display = "block";
<?php
	if (!$currentuser && $commentsGuestcaptcha) {
?>
parent.document.getElementById("cmtCaptRep").value = "<?php echo $cmtCaptRepValue; ?>";
<?php
	}

	if ($errorno == 5) {
?>
parent.document.getElementById('commentThetext').value = '';
parent.document.getElementById('commentFormline').style.display = 'none';
parent.document.getElementById('commentButtons').style.display = 'inline';
<?php
		if ($_SESSION['commentsGuestName']) {
?>
parent.document.getElementById("commentNametd").innerHTML = "<?php echo $_SESSION['commentsGuestName']; ?>";
<?php
		} else {
?>
parent.document.getElementById("commentNametd").innerHTML = "<?php echo $currentuser; ?>";
<?php
		}
	// Nr 6 doesn't exist
	} elseif ($errorno == 7) {
?>
parent.document.getElementById("guestname").focus();
<?php
		if ($commentsGuestcaptcha && !$currentuser) {
?>
parent.document.getElementById("commentsCaptchaDiv").style.display = "none";
<?php
		}
	} elseif ($errorno == 8) {
?>
parent.document.getElementById("commentThetext").focus();
<?php
		if ($commentsGuestcaptcha && !$currentuser) {
?>
parent.document.getElementById("commentsCaptchaDiv").style.display = "none";
<?php
		}
	// Nr 9 doesn't exist
	} elseif ($commentsGuestcaptcha && $errorno == 10) {
?>
parent.document.getElementById("commentsCaptchaDiv").innerHTML = document.getElementById("commentdummy").value;
<?php
	// Nr 11 has only msg
	}
} elseif ($errorno > 0) {

	if ($errorno == 2) {
?>
parent.document.getElementById("commenttable1").innerHTML = parent.document.getElementById("commenttable1").innerHTML + document.getElementById("commentdummy").value;
<?php
	}
?>
parent.document.getElementById("commentErrortd").innerHTML = "<?php echo $errortext; ?>";
parent.document.getElementById("commentErrortbl").style.display = "block";
parent.document.getElementById("commentErrortd").style.display = "block";
parent.document.getElementById("commentThetext").value = "";
parent.document.getElementById("commentFormline").style.display = "none";
parent.document.getElementById("commentNotext").style.display = "none";
<?php
} else {
?>
parent.window.location.hash = "commentsanchor";
parent.window.location.reload(true);
<?php
}
?>
}

// Obsolete?
function showmsg() {
alert("MOD DEV: Check JS function showmsg()");
/*
	parent.document.getElementById("commentErrortd").innerHTML = "<?php echo $errortext; ?>";
	parent.document.getElementById("commentErrortbl").style.display = "block";
	parent.document.getElementById("commentErrortd").style.display = "block";
*/
}

</script>
</head>
<body onload="updateParent();">
<textarea id="commentdummy"><?php echo $outstring; ?></textarea>
</body>
</html>

Your Access Expired	Date. in : 30-10-2025
Regist : 09-12-2024	Expired : 01-12-2027