comment_id = $comment_id;
}
}
// }}}
class Comment { // {{{
public function Comment($row) {
$this->owner_id = $row['user_id'];
$this->owner_name = $row['user_name'];
$this->comment = $row['comment'];
$this->comment_id = $row['comment_id'];
$this->image_id = $row['image_id'];
$this->poster_ip = $row['poster_ip'];
}
public function to_html($trim=false) {
global $user;
$i_uid = int_escape($this->owner_id);
$h_name = html_escape($this->owner_name);
$h_poster_ip = html_escape($this->poster_ip);
$h_comment = ($trim ? substr(bbcode_to_text($this->comment), 0, 50)."..." : bbcode_to_html($this->comment));
$i_comment_id = int_escape($this->comment_id);
$i_image_id = int_escape($this->image_id);
$h_userlink = "$h_name";
$h_dellink = $user->is_admin() ?
"
($h_poster_ip, Del)" : "";
$h_imagelink = $trim ? ">>>\n" : "";
return "
$h_userlink: $h_comment $h_imagelink $h_dellink
"; } } // }}} class CommentList extends Extension { // event handler {{{ public function receive_event($event) { if(is_a($event, 'InitExtEvent')) { global $config; if($config->get_int("ext_comments_version") < 1) { $this->install(); } } if(is_a($event, 'PageRequestEvent') && ($event->page == "comment")) { if($event->get_arg(0) == "add") { $this->add_comment_wrapper($_POST['image_id'], $_POST['comment']); } else if($event->get_arg(0) == "delete") { global $user; global $page; if($user->is_admin()) { // FIXME: post, not args if($event->count_args() == 3) { send_event(new CommentDeletionEvent($event->get_arg(1))); $page->set_mode("redirect"); $page->set_redirect(make_link("post/view/".$event->get_arg(2))); } } else { // FIXME: denied message } } else if($event->get_arg(0) == "rss") { $this->build_rss(); } else if($event->get_arg(0) == "list") { $this->build_page($event->get_arg(1)); } } if(is_a($event, 'PageRequestEvent') && ($event->page == "index")) { global $page; global $config; if($config->get_int("comment_count") > 0) { $page->add_side_block(new Block("Comments", $this->build_recent_comments()), 50); } } if(is_a($event, 'DisplayingImageEvent')) { global $page; $page->add_main_block(new Block("Comments", $this->build_image_comments($event->image->id). $this->build_postbox($event->image->id)), 50); } if(is_a($event, 'ImageDeletionEvent')) { $this->delete_comments($event->image->id); } if(is_a($event, 'CommentDeletionEvent')) { $this->delete_comment($event->comment_id); } if(is_a($event, 'SetupBuildingEvent')) { $sb = new SetupBlock("Comment Options"); $sb->add_label("Allow anonymous comments "); $sb->add_bool_option("comment_anon"); $sb->add_label("Full List >>>"; return $html; } private function build_postbox($image_id) { if($this->can_comment()) { $i_image_id = int_escape($image_id); return "
"; } else { return "You need to create an account before you can comment
"; } } private function query_to_html($query, $args, $trim=false) { global $database; global $config; $html = ""; $result = $database->db->Execute($query, $args); while(!$result->EOF) { $comment = new Comment($result->fields); $html .= $comment->to_html($trim); $result->MoveNext(); } return $html; } // }}} // add / remove / edit comments {{{ private function is_comment_limit_hit() { global $user; global $config; global $database; $window = int_escape($config->get_int('comment_window')); $max = int_escape($config->get_int('comment_limit')); $result = $database->db->Execute("SELECT * FROM comments WHERE owner_ip = ? ". "AND posted > date_sub(now(), interval ? minute)", Array($_SERVER['REMOTE_ADDR'], $window)); $recent_comments = $result->RecordCount(); return ($recent_comments >= $max); } private function is_spam($text) { global $user; global $config; if(strlen($config->get_string('comment_wordpress_key')) == 0) { return false; } else { $comment = array( 'author' => $user->name, 'email' => $user->email, 'website' => '', 'body' => $text, 'permalink' => '', ); $akismet = new Akismet( 'http://www.yourdomain.com/', $config->get_string('comment_wordpress_key'), $comment); if($akismet->errorsExist()) { return false; } else { return $akismet->isSpam(); } } } private function can_comment() { global $config; global $user; return ($config->get_bool('comment_anon') || !$user->is_anonymous()); } private function add_comment_wrapper($image_id, $comment) { global $user; global $database; global $config; global $page; $page->set_title("Error"); $page->set_heading("Error"); $page->add_side_block(new NavBlock()); if(!$config->get_bool('comment_anon') && $user->is_anonymous()) { $page->add_main_block(new Block("Permission Denied", "Anonymous posting has been disabled")); } else if(trim($comment) == "") { $page->add_main_block(new Block("Comment Empty", "Comments need text...")); } else if($this->is_comment_limit_hit()) { $page->add_main_block(new Block("Comment Limit Hit", "You've posted several comments recently; wait a minute and try again...")); } else if($this->is_spam($comment)) { $page->add_main_block(new Block("Spam Detected", "Akismet thinks that your comment is spam. Try rewriting the comment?")); } else { $database->db->Execute( "INSERT INTO comments(image_id, owner_id, owner_ip, posted, comment) ". "VALUES(?, ?, ?, now(), ?)", array($image_id, $user->id, $_SERVER['REMOTE_ADDR'], $comment)); $page->set_mode("redirect"); $page->set_redirect(make_link("post/view/".int_escape($image_id))); } } private function delete_comments($image_id) { global $database; $database->db->Execute("DELETE FROM comments WHERE image_id=?", array($image_id)); } private function delete_comment($comment_id) { global $database; $database->db->Execute("DELETE FROM comments WHERE id=?", array($comment_id)); } // }}} } add_event_listener(new CommentList()); ?>