controller/new.php
<?php
require(LanguagePath . 'new.php');
require (LibraryPath . 'Geetestlib.class.php');
Auth(1, 0, true);
$ErrorCodeList = require(LibraryPath . 'code/new.error.code.php');
$Error = '';
$ErrorCode = $ErrorCodeList['Default'];
$Title = '';
$Content = '';
$TagsArray = array();
if ($_SERVER['REQUEST_METHOD'] == 'POST') {
SetStyle('api', 'API');
if (!ReferCheck(Request('Post', 'FormHash'))) {
AlertMsg($Lang['Error_Unknown_Referer'], $Lang['Error_Unknown_Referer'], 403);
}
$Title = Request('Post', 'Title');
$Content = Request('Post', 'Content');
$TagsArray = isset($_POST['Tag']) ? $_POST['Tag'] : array();
do {
if ($Config['AllowNewTopic'] === 'false' && $CurUserRole < 3) {
$Error = $Lang['Prohibited_New_Topic'];
$ErrorCode = $ErrorCodeList['Prohibited_New_Topic'];
break;
}
//发帖至少要间隔8秒
if (DEBUG_MODE === false && ($CurUserRole < 3 && ($TimeStamp - intval($CurUserInfo['LastPostTime'])) <= intval($Config['PostingInterval']))) {
$Error = $Lang['Posting_Too_Often'];
$ErrorCode = $ErrorCodeList['Posting_Too_Often'];
break;
}
//Geetest
if($Config['CAPTCHAmethod']== 'geetest' && $Config['GeetestID']!= 'null' && $Config['GeetestKey']!= 'null'){
session_start();
$GtSdk = new GeetestLib($Config['GeetestID'], $Config['GeetestKey']);
$data = array(
"user_id" => GetCookie('UserID'), # 网站用户id
"client_type" => GetCookie('View'), #web:电脑上的浏览器；h5:手机上的浏览器，包括移动应用内完全内置的web_view；native：通过原生SDK植入APP应用的方式
"ip_address" => CurIP() # 请在此处传输用户请求验证时所携带的IP
);
if ($_SESSION['gtserver'] == 1) { //服务器正常
$result = $GtSdk->success_validate($_POST['geetest_challenge'], $_POST['geetest_validate'], $_POST['geetest_seccode'], $data);
if (!$result) {
$Error = "CAPTCHA验证失败，请重试";
$ErrorCode = $ErrorCodeList['CAPTCHA_Verify'];
break;
}
} else {
if (!$GtSdk->fail_validate($_POST['geetest_challenge'],$_POST['geetest_validate'],$_POST['geetest_seccode'])) {
$Error = "CAPTCHA验证失败，请重试";
$ErrorCode = $ErrorCodeList['CAPTCHA_Verify'];
break;
}
}
}
if (!$Title) {
$Error = $Lang['Title_Empty'];
$ErrorCode = $ErrorCodeList['Title_Empty'];
break;
}
if (strlen($Title) > $Config['MaxTitleChars'] || strlen($Content) > $Config['MaxPostChars']) {
$Error = str_replace('{{MaxPostChars}}', $Config['MaxPostChars'], str_replace('{{MaxTitleChars}}', $Config['MaxTitleChars'], $Lang['Too_Long']));
$ErrorCode = $ErrorCodeList['Too_Long'];
break;
}
$TagsArray = TagsDiff($TagsArray, array());
if ($Config['AllowEmptyTags'] !== 'true' && (empty($TagsArray) || in_array('', $TagsArray) || count($TagsArray) > $Config["MaxTagsNum"])) {
$Error = $Lang['Tags_Empty'];
$ErrorCode = $ErrorCodeList['Tags_Empty'];
break;
}
// 内容过滤系统
$TitleFilterResult = Filter($Title);
$ContentFilterResult = Filter($Content);
$GagTime = ($TitleFilterResult['GagTime'] > $ContentFilterResult['GagTime']) ? $TitleFilterResult['GagTime'] : $ContentFilterResult['GagTime'];
$GagTime = $CurUserRole < 3 ? $GagTime : 0;
$Prohibited = $TitleFilterResult['Prohibited'] | $ContentFilterResult['Prohibited'];
if ($Prohibited){
$Error = $Lang['Prohibited_Content'];
$ErrorCode = $ErrorCodeList['Prohibited_Content'];
if ($GagTime) {
//禁言用户 $GagTime 秒
UpdateUserInfo(array(
"LastPostTime" => $TimeStamp + $GagTime
));
}
break;
}
$Title = $TitleFilterResult['Content'];
$Content = $ContentFilterResult['Content'];
try {
$DB->beginTransaction();
//获取已存在的标签
if (!empty($TagsArray)) {
$TagsExistArray = $DB->query("SELECT ID, Name FROM `" . PREFIX . "tags` WHERE `Name` IN (?)", $TagsArray);
} else {
$TagsExistArray = array();
}
$TagsExist = ArrayColumn($TagsExistArray, 'Name');
$TagsID = ArrayColumn($TagsExistArray, 'ID');
$NewTags = TagsDiff($TagsArray, $TagsExist);
//新建不存在的标签
if ($NewTags) {
foreach ($NewTags as $Name) {
$DB->query("INSERT INTO `" . PREFIX . "tags`
(`ID`, `Name`,`Followers`,`Icon`,`Description`, `IsEnabled`, `TotalPosts`, `MostRecentPostTime`, `DateCreated`)
VALUES (?,?,?,?,?,?,?,?,?)", array(
null,
$Name,
0,
0,
null,
1,
1,
$TimeStamp,
$TimeStamp
));
$TagsID[] = $DB->lastInsertId();
}
//更新全站统计数据
$NewConfig = array(
"NumTags" => $Config["NumTags"] + count($NewTags)
);
//var_dump($NewTags);
}
$TagsArray = array_merge($TagsExist, $NewTags);
//往Topics表插入数据
$TopicData = array(
"ID" => null,
"Topic" => htmlspecialchars($Title),
"Tags" => implode("|", $TagsArray), //过滤不合法的标签请求
"UserID" => $CurUserID,
"UserName" => $CurUserName,
"LastName" => "",
"PostTime" => $TimeStamp,
"LastTime" => $TimeStamp,
"IsGood" => 0,
"IsTop" => 0,
"IsLocked" => 0,
"IsDel" => 0,
"IsVote" => 0,
"Views" => 0,
"Replies" => 0,
"Favorites" => 0,
"RatingSum" => 0,
"TotalRatings" => 0,
"LastViewedTime" => 0,
"PostsTableName" => null,
"ThreadStyle" => "",
"Lists" => "",
"ListsTime" => $TimeStamp,
"Log" => ""
);
$NewTopicResult = $DB->query("INSERT INTO `" . PREFIX . "topics`
(
`ID`,
`Topic`,
`Tags`,
`UserID`,
`UserName`,
`LastName`,
`PostTime`,
`LastTime`,
`IsGood`,
`IsTop`,
`IsLocked`,
`IsDel`,
`IsVote`,
`Views`,
`Replies`,
`Favorites`,
`RatingSum`,
`TotalRatings`,
`LastViewedTime`,
`PostsTableName`,
`ThreadStyle`,
`Lists`,
`ListsTime`,
`Log`
)
VALUES
(
:ID,
:Topic,
:Tags,
:UserID,
:UserName,
:LastName,
:PostTime,
:LastTime,
:IsGood,
:IsTop,
:IsLocked,
:IsDel,
:IsVote,
:Views,
:Replies,
:Favorites,
:RatingSum,
:TotalRatings,
:LastViewedTime,
:PostsTableName,
:ThreadStyle,
:Lists,
:ListsTime,
:Log
)", $TopicData);
$TopicID = $DB->lastInsertId();
//往Posts表插入数据
$PostData = array(
"ID" => null,
"TopicID" => $TopicID,
"IsTopic" => 1,
"UserID" => $CurUserID,
"UserName" => $CurUserName,
"Subject" => CharCV($Title),
"Content" => XssEscape($Content),
"PostIP" => $CurIP,
"PostTime" => $TimeStamp
);
$NewPostResult = $DB->query("INSERT INTO `" . PREFIX . "posts`
(`ID`, `TopicID`, `IsTopic`, `UserID`, `UserName`, `Subject`, `Content`, `PostIP`, `PostTime`)
VALUES (:ID,:TopicID,:IsTopic,:UserID,:UserName,:Subject,:Content,:PostIP,:PostTime)", $PostData);
$PostID = $DB->lastInsertId();
if ($NewTopicResult && $NewPostResult) {
//更新全站统计数据
$NewConfig = array(
"NumTopics" => $Config["NumTopics"] + 1,
"DaysTopics" => $Config["DaysTopics"] + 1
);
UpdateConfig($NewConfig);
//更新用户自身统计数据
UpdateUserInfo(array(
"Topics" => $CurUserInfo['Topics'] + 1,
"LastPostTime" => $TimeStamp + $GagTime
));
//标记附件所对应的帖子标签
$DB->query("UPDATE `" . PREFIX . "upload` SET PostID=? WHERE `PostID`=0 and `UserName`=?", array(
$PostID,
$CurUserName
));
//记录标签与TopicID的对应关系
foreach ($TagsID as $TagID) {
$DB->query("INSERT INTO `" . PREFIX . "posttags`
(`TagID`, `TopicID`, `PostID`)
VALUES (?,?,?)", array(
$TagID,
$TopicID,
$PostID
));
}
//更新标签统计数据
if ($TagsExist) {
$DB->query("UPDATE `" . PREFIX . "tags` SET TotalPosts=TotalPosts+1, MostRecentPostTime=" . $TimeStamp . " WHERE `Name` in (?)", $TagsExist);
}
//添加提醒消息
AddingNotifications($Content, $TopicID, $PostID);
//清理首页内存缓存
if ($MCache) {
$MCache->delete(MemCachePrefix . 'Homepage');
}
//跳转到主题页
//Redirect('t/'.$TopicID);
}
$DB->commit();
} catch(Exception $ex) {
$DB->rollBack();
$Error = $Lang['Posting_Too_Often'];
$ErrorCode = $ErrorCodeList['Posting_Too_Often'];
}
} while (false);
}
$DB->CloseConnection();
// 页面变量
$PageTitle = $Lang['Create_New_Topic'];
$ContentFile = $TemplatePath . 'new.php';
include($TemplatePath . 'layout.php');