PHP-Quelltext

<?php
include("forum/kopf.php");

if (intval($_REQUEST['postid'])>0) {
 $postid=$_REQUEST['postid'];
 $forumpost=$DB->fetch_array($DB->query("SELECT * FROM ".$db_tab['forumpost']." WHERE forumpost_id='".$postid."' LIMIT 1"));
 if ($forumpost['forumpost_autorid']!=$USER['id']) {
  $forumthread=$DB->fetch_array($DB->query("SELECT forumthread_catid FROM ".$db_tab['forumthread']." WHERE forumthread_id='".$forumpost['forumpost_threadid']."' LIMIT 1"));
  $forumcat=$forumcat_cache[$forumthread['forumthread_catid']];
  } 
 }
else unset($postid);

if (($forumpost['forumpost_autorid']==$USER['id'] && $forumpost['forumpost_autorid']>0) || userrights($forumcat['forumcat_mods'])=="true") {
 if (isset($_POST['action'])) $ACTION=$_POST['action'];
 else $ACTION='view';
 
 if ($ACTION==$_POST['cancel']) {header("location: include.php?path=forum/showthread.php&threadid=".$forumpost['forumpost_threadid']."&postid=".$postid."&PHPKITSID=".session_id()."#post".$postid); exit();}
 elseif ($_POST['delete_post']==1) eval ("\$site_body.= \"".getTemplate("forum/editpost_delete")."\";");
 elseif ($ACTION==$_POST['delete'] && $_POST['delete_confirm']=="confirmed") {
  $DB->query("DELETE FROM ".$db_tab['forumpost']." WHERE forumpost_id='".$postid."' LIMIT 1");
  if ($threadcount=$DB->fetch_array($DB->query("SELECT forumpost_time, forumpost_autor, forumpost_autorid FROM ".$db_tab['forumpost']." WHERE forumpost_threadid='".$forumpost['forumpost_threadid']."' ORDER by forumpost_time DESC LIMIT 1"))) {
   $DB->query("UPDATE ".$db_tab['forumthread']." SET forumthread_lastreply_time='".$threadcount['forumpost_time']."',forumthread_lastreply_autor='".$threadcount['forumpost_autor']."', forumthread_lastreply_autorid='".$threadcount['forumpost_autorid']."' WHERE forumthread_id='".$forumpost['forumpost_threadid']."'");            
   header ("location: include.php?path=forum/showthread.php&threadid=".$forumpost[forumpost_threadid]."&PHPKITSID=".session_id().""); exit();
   }
  else {
   $cat=$DB->fetch_array($DB->query("SELECT forumthread_catid FROM ".$db_tab['forumthread']." WHERE forumthread_id='".$forumpost['forumpost_threadid']."' LIMIT 1"));
   $DB->query("DELETE FROM ".$db_tab['forumthread']." WHERE forumthread_id='".$forumpost['forumpost_threadid']."' LIMIT 1");
   header ("location: include.php?path=forum/showcat.php&catid=".$cat['forumthread_catid']."&PHPKITSID=".session_id()); exit();
   }
  }
 elseif ($ACTION==$_POST['save']) {
  $DB->query("UPDATE ".$db_tab['forumpost']." SET forumpost_title='".addslashes($_POST['post_title'])."', forumpost_text='".addslashes($_POST['content'])."', forumpost_icon='".$_POST['post_icon']."',forumpost_bbcode='".$_POST['post_bbcode']."', forumpost_smilies='".$_POST['post_smilies']."', forumpost_editcount=forumpost_editcount+1, forumpost_edittime='".time()."',forumpost_editautor='".$USER['nick']."' WHERE forumpost_id='".$postid."'");
  header("location: include.php?path=forum/showthread.php&threadid=".$forumpost['forumpost_threadid']."&postid=".$postid."&PHPKITSID=".session_id()."#post".$postid); exit();
  }
 else {
  eval ("\$theme_icon= \"".getTemplate("forum/newpost_noicon")."\";");
  $dir="images/icons";
  $width=2;
  $a=opendir($dir);
  while ($datei=readdir($a)) {
   if (strstr($datei,".gif")) {
    if ($width==10) {$theme_icon.="</tr><tr>"; $width=1;}
    if ($forumpost['forumpost_icon']==$datei) $iconoption=" checked";
    eval ("\$theme_icon.= \"".getTemplate("forum/newpost_icons")."\";");
    $width++;
    unset($iconoption);
    }
   }
  $cs=10-$width;
  if ($cs > 0 ) $theme_icon.='<td colspan="'.$cs.'"></td>';
  closedir($a);
  
  $post_title=htmlentities($forumpost['forumpost_title']);
  $post_text=stripslashes(htmlentities($forumpost['forumpost_text']));

  unset($sign_format);
  if ($config['forum_ubb']==1) {
   if ($forumpost['forumpost_bbcode']==1) $bbcode=" checked";
   eval ("\$sign_format= \"".getTemplate("format_text")."\";");
   eval ("\$option_bbcode= \"".getTemplate("forum/editpost_option_bbcode")."\";");
   }
  if ($config['forum_smilies']==1) {
   $smilies=new smilies();
   $sign_format.=$smilies->getSmilies(1);
   if ($forumpost['forumpost_smilies']==1) $smilies='checked';
   eval ("\$option_smilies= \"".getTemplate("forum/editpost_option_smilies")."\";");
   }
  if ($sign_format) eval ("\$sign_format= \"".getTemplate("format_table")."\";");

  eval ("\$option_delete= \"".getTemplate("forum/editpost_option_delete")."\";");
  if ($option_smilies!='' || $option_bbcode!='' || $option_delete!='') eval ("\$editpost_option= \"".getTemplate("forum/editpost_option")."\";");

  eval ("\$site_body.= \"".getTemplate("forum/editpost")."\";");
  }
 }
else {$event=1; include("admin/config/event.php");}
include("forum/fuss.php");
?>

Quellcode

<script language="Javascript" src="admin/lib/mycode.js"></script>

<table class="forumbody" cellspacing="1" cellpadding="4" width="100%">
 <tr>
  <td class="heads" colspan="2">Beitrag editieren</td>
 </tr>
	<form method="post" name="myform" action="include.php?path=forum/editpost.php">
	<input type="hidden" name="mode" value="0" onFocus="mymode()" />
	<input type="hidden" name="mode" value="0" onFocus="mymode()" />
	<input type="hidden" name="postid" value="$postid" />
	$post_error
	$user_info
 <tr>
   <td class="left" width="20%">Titel</td>
   <td class="right" width="80%">
	<input type="text" name="post_title" value="$post_title" size="35" /></td>
 </tr>
 <tr>
  <td class="left">Icon</td>
  <td class="right">
	<table border="0" cellspacing="0" cellpadding="2">
	$theme_icon
	</table>
  </td>
 </tr>
 <tr>
  <td class="left" valign="top">
	<table border="0" cellspacing="0" cellpadding="0">
	 <tr>
	  <td>Nachricht</td>
	 </tr>
	</table>
  </td>
  <td class="right">
	<table border="0" cellspacing="2" cellpadding="0" width="100%">
	 <tr>
	  <td width="80%" valign="top"><textarea name="content" cols="60" rows="12" style="width:100%" wrap="soft" onFocus=myselection(this) onclick=myselection(this) onChange=myselection(this)>$post_text</textarea></td>
	  <td width="20%" valign="top">$sign_format</td>
	 </tr>
	</table>
  </td>
 </tr>
	$editpost_option
 <tr>
  <td class="heads" colspan="2" align="center">
	<input type="submit" name="action" value="$lang[save]" />
	<input type="hidden" name="save" value="$lang[save]" />
	<input type="submit" name="action" value="$lang[cancel]" />
	<input type="hidden" name="cancel" value="$lang[cancel]" /></td>
 </tr>
	</form>
</table>