<?php
function bb_remote_create_reply_thread()
{
// useClass('EmailSystem');
// Check default post status of user group
$status='1';
$username=strip_tags(addslashes(getPost('username')));
$thread_id=addslashes(getPost('thread_id'));
$forum_id=addslashes(getPost('forum_id',''));
$thread_title=addslashes(getPost('thread_title'));
$attach_files=addslashes(getPost('attach_files'));
$method=trim(addslashes(getPost('method','reply')));
$useID=rand(10,15);
$post_id=newID($useID);
$db=new Database();
$loadUserData=$db->query("select user_id,email from user_mst where username='".$username."' AND group_c IN (select group_c from group_permission_data where permission_c='BB30028')");
if(count($loadUserData)==0)
{
echo responseData('User not have permission to access this api','yes');die();
}
$user_id=$loadUserData[0]['user_id'];
// Detect last time send reply
// Mysql TIMESTAMPDIFF(MINUTE,T.runTime,NOW()) > 20
$insertData=array(
'post_id'=>$post_id,
'thread_id'=>$thread_id,
'forum_id'=>$forum_id,
'content'=>strip_tags_blacklist(addslashes(getPost('content')),['iframe']),
'user_id'=>$user_id,
);
if(!isset($insertData['content'][1]))
{
echo responseData('Content not allow blank!','yes');die();
}
$threadData=$db->query("select * from bb_threads_data where thread_id='".$thread_id."'");
if(count($threadData)==0)
{
echo responseData('Thread that you reply not exist!','yes');die();
}
$loadData=$db->query("select count(*) as total from bb_posts_data where thread_id='".$thread_id."'");
$totalPost=(int)$loadData[0]['total']+1;
$insertData['sort_order']=$totalPost;
$queryStr=arrayToInsertStr('bb_posts_data',$insertData);
$db->nonquery($queryStr);
BB_Threads::updateThreadStats($thread_id);
BB_Forum::updateStats($forum_id);
BB_System::updateStats();
$userData=$db->query("select * from user_mst where user_id='".$user_id."'");
$db->nonquery("update bb_forum_data set last_thread_title='".$threadData[0]['title']."',last_thread_friendly_url='".$threadData[0]['friendly_url']."',last_thread_author_avatar='".$userData[0]['avatar']."',last_thread_author_username='".$username."',last_thread_dt=NOW(),total_posts=total_posts+1 where forum_id='".$forum_id."'");
$thread_url='';
$thread_url=SITE_URL."t-".$threadData[0]['friendly_url'].'/post-'.$post_id;
saveActivities('bb_thread_add_reply','Reply thread '.$thread_title,$username);
if(isset($attach_files[5]))
{
$attachPath='';
$attachName='';
$splitFiles=explode('|||',$attach_files);
$total=count($splitFiles);
$filePath='';
$fileID='';
for ($i=0; $i < $total; $i++) {
if(isset($splitFiles[$i][2]))
{
$filePath=ROOT_PATH.str_replace(SITE_URL,"",$splitFiles[$i]);
if(!file_exists($filePath))
{
continue;
}
$useID=rand(10,20);
$fileID=newID($useID);
$attachName=$fileID.'.data';
$attachPath=BB_ATTACH_FILES_PATH.$attachName;
$file_type=mime_content_type(trim($filePath));
$file_size=filesize(trim($filePath));
copy($filePath,$attachPath);
// Remove old file
if(file_exists($filePath))
{
unlink($filePath);
}
$insertData=array(
'file_id'=>$fileID,
'post_id'=>$post_id,
'file_path'=>'public/bb_contents/attach_files/'.$attachName,
'file_name'=>basename(trim($filePath)),
'data_type'=>'post',
'file_type'=>$file_type,
'file_size'=>$file_size,
'user_id'=>$user_id,
);
$queryStr=arrayToInsertStr('bb_thread_attach_files_data',$insertData);
$db->nonquery($queryStr);
}
}
}
BB_User::updateThreadCountStats($user_id);
BB_User::updateForumCountStats($forum_id);
$savePath=BB_CACHES_PATH.'forums.php';
if(file_exists($savePath))
{
unlink($savePath);
}
echo responseData($thread_url,'no');die();
}
|
Download
