<?php
/******************************************************************************
* SendTopic.php                                                               *
*******************************************************************************
* SMF: Simple Machines Forum                                                  *
* Open-Source Project Inspired by Zef Hemel (zef@zefhemel.com)                *
* =========================================================================== *
* Software Version:           SMF 1.0                                         *
* Software by:                Simple Machines (http://www.simplemachines.org) *
* Copyright 2001-2004 by:     Lewis Media (http://www.lewismedia.com)         *
* Support, News, Updates at:  http://www.simplemachines.org                   *
*******************************************************************************
* This program is free software; you may redistribute it and/or modify it     *
* under the terms of the provided license as published by Lewis Media.        *
*                                                                             *
* This program is distributed in the hope that it is and will be useful,      *
* but WITHOUT ANY WARRANTIES; without even any implied warranty of            *
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.                        *
*                                                                             *
* See the "license.txt" file for details of the Simple Machines license.      *
* The latest version can always be found at http://www.simplemachines.org.    *
******************************************************************************/
if (!defined('SMF'))
	die('Hacking attempt...');

/*	The functions in this file deal with sending topics toa friend or
	moderator, and those functions are:

	void SendTopic()
		- sends information about a topic to a friend.
		- uses the SendTopic template, with the main sub template.
		- requires the send_topic permission.
		- redirects back to the first page of the topic when done.
		- is accessed via ?action=sendtopic.

	void ReportToModerator()
		- gathers data from the user to report abuse to the moderator(s).
		- uses the ReportToModerator template, main sub template.
		- requires the report_any permission.
		- is enabled by the enableReportToMod setting.
		- uses ReportToModerator2() if post data was sent.
		- accessed through ?action=reporttm.

	void ReportToModerator2()
		- sends off emails to all the moderators.
		- sends to moderators and global moderators. (1 and 2)
		- called by ReportToModerator(), and thus has the same permission
		  and setting requirements as it does.
		- accessed through ?action=reporttm when posting.
*/

// Send a topic to a friend.
function SendTopic()
{
	global $topic, $txt, $db_prefix, $context, $scripturl, $sourcedir;

	// Check permissions...
	isAllowedTo('send_topic');

	// We need at least a topic... go away if you don't have one.
	if (empty($topic))
		fatal_lang_error(472, false);

	// Get the topic's subject.
	$request = db_query("
		SELECT m.subject
		FROM {$db_prefix}messages AS m, {$db_prefix}topics AS t
		WHERE t.ID_TOPIC = $topic
			AND t.ID_FIRST_MSG = m.ID_MSG
		LIMIT 1", __FILE__, __LINE__);
	if (mysql_num_rows($request) == 0)
		fatal_lang_error(472, false);
	$row = mysql_fetch_assoc($request);
	mysql_free_result($request);

	// Censor the subject....
	censorText($row['subject']);

	// Sending yet, or just getting prepped?
	if (empty($_POST['send']))
	{
		loadTemplate('SendTopic');
		$context['page_title'] = sprintf($txt['sendtopic_title'], $row['subject']);
		$context['start'] = $_REQUEST['start'];

		return;
	}

	// Actually send the message...
	checkSession();

	// This is needed for sendmail().
	require_once($sourcedir . '/Subs-Post.php');

	// Trim the names..
	$_POST['y_name'] = trim($_POST['y_name']);
	$_POST['r_name'] = trim($_POST['r_name']);

	// Make sure they aren't playing "let's use a fake email".
	if ($_POST['y_name'] == '_' || !isset($_POST['y_name']) || $_POST['y_name'] == '')
		fatal_lang_error(75, false);
	if (!isset($_POST['y_email']) || $_POST['y_email'] == '')
		fatal_lang_error(76, false);
	if (!preg_match('/^[0-9A-Za-z@\._\-]+$/', $_POST['y_email']))
		fatal_lang_error(243, false);

	// The receiver should be valid to.
	if ($_POST['r_name'] == '_' || !isset($_POST['r_name']) || $_POST['r_name'] == '')
		fatal_lang_error(75, false);
	if (!isset($_POST['r_email']) || $_POST['r_email'] == '')
		fatal_lang_error(76, false);
	if (!preg_match('/^[0-9A-Za-z@\._\-]+$/', $_POST['r_email']))
		fatal_lang_error(243, false);

	// Emails don't like entities...
	$row['subject'] = un_htmlspecialchars($row['subject']);

	// And off we go!
	sendmail($_POST['r_email'], $txt[118] . ': ' . $row['subject'] . ' (' . $txt[318] . ' ' . $_POST['y_name'] . ')',
		sprintf($txt['sendtopic_dear'], $_POST['r_name']) . "\n\n" .
		sprintf($txt['sendtopic_this_topic'], $row['subject']) . ":\n\n" .
		$scripturl . '?topic=' . $topic . ".0\n\n" .
		(!empty($_POST['comment']) ? $txt['sendtopic2'] . ":\n" . $_POST['comment'] . "\n\n" : '') .
		$txt['sendtopic_thanks'] . ",\n" .
		$_POST['y_name'], $_POST['y_email']);

	// Back to the topic!
	redirectexit('topic=' . $topic . '.0');
}

// Report a post to the moderator... ask for a comment.
function ReportToModerator()
{
	global $txt, $db_prefix, $topic, $modSettings, $user_info, $ID_MEMBER, $context;

	// You can't use this if it's off or you are not allowed to do it.
	isAllowedTo('report_any');

	// If they're posting, it should be processed by ReportToModerator2.
	if (isset($_POST['sc']) || isset($_POST['submit']))
		ReportToModerator2();

	// We need a message ID to check!
	if (empty($_GET['msg']) && empty($_GET['mid']))
		fatal_lang_error(1, false);

	// For compatibility, accept mid, but we should be using msg. (not the flavor kind!)
	$_GET['msg'] = empty($_GET['msg']) ? (int) $_GET['mid'] : (int) $_GET['msg'];

	// Check the message's ID - don't want anyone reporting a post they can't even see!
	$result = db_query("
		SELECT ID_MSG, ID_MEMBER
		FROM {$db_prefix}messages
		WHERE ID_MSG = $_GET[msg]
			AND ID_TOPIC = $topic
		LIMIT 1", __FILE__, __LINE__);
	if (mysql_num_rows($result) == 0)
		fatal_lang_error('smf232');
	list ($_GET['msg'], $member) = mysql_fetch_row($result);
	mysql_free_result($result);

# Sometimes you still need it    
#	if ($member == $ID_MEMBER)
#		fatal_lang_error('rtm_not_own', false);

	// Show the inputs for the comment, etc.
	loadTemplate('SendTopic');
	loadLanguage('Post');

	// This is here so that the user could, in theory, be redirected back to the topic.
	$context['start'] = $_REQUEST['start'];
	$context['message_id'] = $_GET['msg'];

	$context['page_title'] = $txt['rtm1'];
	$context['sub_template'] = 'report';
}

// Send the emails.
function ReportToModerator2()
{
	global $txt, $scripturl, $db_prefix, $topic, $board, $user_info, $ID_MEMBER, $modSettings, $sourcedir, $language;

	// Check their session... don't want them redirected here without their knowledge.
	checkSession();

	// You must have the proper permissions!
	isAllowedTo('report_any');

	require_once($sourcedir . '/Subs-Post.php');

	// Get the basic topic information, and make sure they can see it.
	$_POST['msg'] = (int) $_POST['msg'];

	$request = db_query("
		SELECT m.subject, m.ID_MEMBER, m.posterName, mem.realName
		FROM {$db_prefix}messages AS m
			LEFT JOIN {$db_prefix}members AS mem ON (m.ID_MEMBER = mem.ID_MEMBER)
		WHERE m.ID_MSG = $_POST[msg]
			AND m.ID_TOPIC = $topic
		LIMIT 1", __FILE__, __LINE__);
	if (mysql_num_rows($request) == 0)
		fatal_lang_error('smf232');
	list ($subject, $member, $posterName, $realName) = mysql_fetch_row($request);
	mysql_free_result($request);

# Sometimes you still need to report your own messages    
#	if ($member == $ID_MEMBER)
#		fatal_lang_error('rtm_not_own', false);

	$posterName = un_htmlspecialchars($realName) . ($realName != $posterName ? ' (' . $posterName . ')' : '');
	$reporterName = un_htmlspecialchars($user_info['name']) . ($user_info['name'] != $user_info['username'] && $user_info['username'] != '' ? ' (' . $user_info['username'] . ')' : '');
	$subject = un_htmlspecialchars($subject);

	// Let's get some moderators... for this board.
	$request = db_query("
		SELECT mem.ID_MEMBER, mem.emailAddress, mem.lngfile
		FROM {$db_prefix}members AS mem
			LEFT JOIN {$db_prefix}moderators AS mods ON (mods.ID_MEMBER = mem.ID_MEMBER AND mods.ID_BOARD = $board)
		WHERE mods.ID_MEMBER IS NOT NULL OR mem.ID_GROUP IN (1, 2) OR FIND_IN_SET(1, mem.additionalGroups) OR FIND_IN_SET(2, mem.additionalGroups)
		ORDER BY mem.lngfile", __FILE__, __LINE__);

	// Check that moderators do exist!
	if (mysql_num_rows($request) == 0)
		fatal_lang_error('rtm11', false);

	// Send every moderator an email.
	while ($row = mysql_fetch_assoc($request))
	{
		loadLanguage('Post', empty($row['lngfile']) || empty($modSettings['userLanguage']) ? $language : $row['lngfile'], false);

		// Send it to the moderator.
		sendmail($row['emailAddress'], $txt['rtm3'] . ': ' . $subject . ' ' . $txt['rtm4'] . ' ' . $posterName,
			sprintf($txt['rtm_email1'], $subject) . ' ' . $posterName . ' ' . $txt['rtm_email2'] . ' ' . $reporterName . ' ' . $txt['rtm_email3'] . ":\n\n" .
			$scripturl . '?topic=' . $topic . '.msg' . $_POST['msg'] . '#msg' . $_POST['msg'] . "\n\n" .
			$txt['rtm_email_comment'] . ":\n" .
			$_POST['comment'] . "\n\n" .
			$txt[130], $user_info['email']);
	}
	mysql_free_result($request);

	// Back to the board! (you probably don't want to see the post anymore..)
	redirectexit('board=' . $board . '.0');
}

?>
