Add the rest of the changes

1 files changed, 185 insertions, 184 deletions

diff --git a/includes/model/Post.php b/includes/model/Post.php
index 49fd640..1b64490 100644..100755
--- a/includes/model/Post.php
+++ b/includes/model/Post.php
@@ -1,184 +1,185 @@
-<?php
-include_once './includes/Session.php';
-include_once './includes/Database.php';
-include_once './includes/model/User.php';
-include_once './includes/model/Thread.php';
-
-// Utility functions for building the post HTML
-
-function create_quote(int $id): string
-{
-	$sql = "SELECT post_content, post_author, post_thread, user_name FROM posts LEFT JOIN users ON post_author = user_id WHERE post_id = ?;";
-	$result = Database::get()->query($sql, "i", $id);
-
-	$reply = $result[0];
-
-	if (empty($reply)) {
-		return '<blockquote><span style="color:red;">This post has been deleted</span></blockquote>';
-	}
-
-	return '<blockquote><a href="/viewthread.php?id=' . $reply['post_thread'] . '#p' . $id . '">Quote from ' . $reply['user_name'] . '</a><br>' . $reply['post_content'] . '</blockquote>';
-}
-
-function format_post_content(string $post_content)
-{
-	$post_content = preg_replace_callback('/>#\d+/', function ($matches) {
-		$result = "";
-		foreach ($matches as $match) {
-			$id = (int) filter_var($match, FILTER_SANITIZE_NUMBER_INT);
-			$result .= create_quote($id);
-		}
-		return $result;
-	}, $post_content);
-
-	$result = $post_content;
-
-	// Replace newline characters with HTML <br> tags
-	$result = nl2br($result);
-
-	// Replace YouTube URLs with embedded YouTube videos.
-	$result = preg_replace(
-		"/\s*[a-zA-Z\/:]*youtu(be.com\/watch\?v=|.be\/)([a-zA-Z0-9\-_]+)([a-zA-Z0-9\/*-_?&;%=.]*)/i",
-		'<br><iframe class="youtube-embed" src="//www.youtube.com/embed/$2" allowfullscreen></iframe>', $result);
-
-	// Replace Image URLs with embedded images.
-	$result = preg_replace('@\b(http(s)?://)([^\s]*?(?:\.[a-z\d?=/_-]+)+(?:\.jpg|\.png|\.gif))(?![^<]*?(?:</\w+>|/?>))@i', '<img class="image-embed" src="http$2://$3" alt="http$2://$3" />', $result);
-
-	// Replace other URLs with links.
-	return preg_replace('@\b(http(s)?://)([^\s]*?(?:\.[a-z\d?=/_-]+)+)(?![^<]*?(?:</\w+>|/?>))@i', '<a href="http$2://$3">$0</a>', $result);
-}
-
-class Post
-{
-	public $id;
-	public $content;
-	public $date_created;
-	public $date_edited;
-	public $thread;
-	public $author;
-
-	private $has_value = false;
-
-	public function __construct($id)
-	{
-		$sql = "SELECT post_content, post_date_created, post_date_edited, post_thread, post_author FROM posts WHERE post_id = ?;";
-		$result = Database::get()->query($sql, "i", $id);
-
-		if (empty($result)) {
-			return;
-		}
-
-		$this->id = $id;
-		$this->content = $result[0]['post_content'];
-		$this->date_created = $result[0]['post_date_created'];
-		$this->date_edited = $result[0]['post_date_edited'];
-		$this->thread = new Thread($result[0]['post_thread']);
-
-		$this->author = new User();
-		$this->author->get_by_id($result[0]['post_author']);
-
-		$this->has_value = true;
-	}
-
-	public function has_value()
-	{
-		return $this->has_value;
-	}
-
-	/**
-	 * Get the post content from the database and return it as a string ready for HTML display
-	 */
-	function get_content(): string
-	{
-		// Build the header
-		$result = '<div class="header" id="p' . $this->id . '"><b>#' . $this->id . '</b>';
-		$result .= ' Posted by <a href="viewuser.php?id=' . $this->author->id . '">' . $this->author->name . '</a>';
-		$result .= ' on ' . date('m/d/Y g:ia', strtotime($this->date_created));
-		$result .= '</div>';
-
-		// Append the formatted post content
-		$result .= '<span class="post-content">' . format_post_content($this->content) . '</span>';
-
-		return $result;
-	}
-
-	function set_content(string $post_content)
-	{
-		// User must be signed in
-		if (!Session::get()->is_signed_in()) {
-			trigger_error('You must be signed in to edit this post!');
-			return;
-		}
-
-		// User must have permission to edit the post
-		$current_user = Session::get()->get_current_user();
-		if ($current_user->id != $this->author->id) {
-			trigger_error("You don't have sufficient permissions to edit this post.");
-			return;
-		}
-
-		// Set the post content and the post edit date
-		$sql = "UPDATE posts SET post_content = ?, post_date_edited = CONVERT_TZ(NOW(), 'SYSTEM', '+00:00') WHERE post_id = ?;";
-		Database::get()->query($sql, "si", $post_content, $this->id);
-	}
-
-	function delete()
-	{
-		// User must be signed in
-		if (!Session::get()->is_signed_in()) {
-			trigger_error('You must be signed in to delete a post!');
-			return;
-		}
-
-		// User must have permission to delete the post
-		if (Session::get()->get_current_user()->level != USER_LEVEL_MODERATOR) {
-			trigger_error("You don't have sufficient permissions to delete this post.");
-			return;
-		}
-
-		// Delete the post from the database
-		Database::get()->query("DELETE FROM posts WHERE post_id = ?", "i", $this->id);
-
-		// Decrement the post count of the category
-		Database::get()->query("UPDATE categories SET `cat_post_count` = `cat_post_count` - '1' WHERE cat_id = ?", "i", $this->thread->category->id);
-	}
-
-	public static function create($post_content, $post_thread, $post_category)
-	{
-		// User must be signed in
-		if (!Session::get()->is_signed_in()) {
-			trigger_error('You must be signed in to create a post');
-			return;
-		}
-
-		$user = Session::get()->get_current_user();
-
-		// Insert the post into the database
-		$sql = "INSERT INTO posts(post_content, post_date_created, post_thread, post_author) VALUES (?, CONVERT_TZ(NOW(), 'SYSTEM', '+00:00'), ?, ?);";
-		Database::get()->query($sql, "sii", $post_content, $post_thread, $user->id);
-
-		// Increment the category's post count
-		$sql = "UPDATE categories SET `cat_post_count` = `cat_post_count` + '1' WHERE cat_id = ?;";
-		Database::get()->query($sql, "i", $post_category);
-
-		// Set the last post date of the parent thread
-		$sql = "UPDATE threads SET thread_date_lastpost = CONVERT_TZ(NOW(), 'SYSTEM', '+00:00') WHERE thread_id = ?;";
-		Database::get()->query($sql, "i", $post_thread);
-	}
-
-	public static function get_all_posts(): array
-	{
-		$sql = "SELECT post_id FROM posts";
-		$result = Database::get()->query($sql);
-
-		$posts = array();
-
-		foreach ($result as $row) {
-			$post = new Post();
-			$post->get_from_database($row['post_id']);
-			array_push($posts, $post);
-		}
-
-		return $posts;
-	}
-}
+<?php

+include_once './includes/Session.php';

+include_once './includes/Database.php';

+include_once './includes/model/User.php';

+include_once './includes/model/Thread.php';

+

+// Utility functions for building the post HTML

+

+function create_quote(int $id): string

+{

+	$sql = "SELECT post_content, post_author, post_thread, user_name FROM posts LEFT JOIN users ON post_author = user_id WHERE post_id = ?;";

+	$result = Database::get()->query($sql, "i", $id);

+

+	$reply = $result[0];

+

+	if (empty($reply)) {

+		return '<blockquote><span style="color:red;">This post has been deleted</span></blockquote>';

+	}

+

+	return '<blockquote><a href="/viewthread.php?id=' . $reply['post_thread'] . '#p' . $id . '">Quote from ' . $reply['user_name'] . '</a><br>' . $reply['post_content'] . '</blockquote>';

+}

+

+function format_post_content(string $post_content)

+{

+	$post_content = preg_replace_callback('/>#\d+/', function ($matches) {

+		$result = "";

+		foreach ($matches as $match) {

+			$id = (int) filter_var($match, FILTER_SANITIZE_NUMBER_INT);

+			$result .= create_quote($id);

+		}

+		return $result;

+	}, $post_content);

+

+	$result = $post_content;

+

+	// Replace newline characters with HTML <br> tags

+	$result = nl2br($result);

+

+	// Replace YouTube URLs with embedded YouTube videos.

+	$result = preg_replace(

+		"/\s*[a-zA-Z\/:]*youtu(be.com\/watch\?v=|.be\/)([a-zA-Z0-9\-_]+)([a-zA-Z0-9\/*-_?&;%=.]*)/i",

+		'<br><iframe class="youtube-embed" src="//www.youtube.com/embed/$2" allowfullscreen></iframe>', $result);

+

+	// Replace Image URLs with embedded images.

+	$result = preg_replace('@\b(http(s)?://)([^\s]*?(?:\.[a-z\d?=/_-]+)+(?:\.jpg|\.png|\.gif))(?![^<]*?(?:</\w+>|/?>))@i', '<img class="image-embed" src="http$2://$3" alt="http$2://$3" />', $result);

+

+	// Replace other URLs with links.

+	return preg_replace('@\b(http(s)?://)([^\s]*?(?:\.[a-z\d?=/_-]+)+)(?![^<]*?(?:</\w+>|/?>))@i', '<a href="http$2://$3">$0</a>', $result);

+}

+

+class Post

+{

+	public $id;

+	public $content;

+	public $date_created;

+	public $thread;

+	public $author;

+

+	private $has_value = false;

+

+	public function __construct($id)

+	{

+		$sql = "SELECT post_content, post_date_created, post_thread, post_author FROM posts WHERE post_id = ?;";

+		$result = Database::get()->query($sql, "i", $id);

+

+		if (empty($result)) {

+			return;

+		}

+

+		$this->id = $id;

+		$this->content = $result[0]['post_content'];

+		$this->date_created = $result[0]['post_date_created'];

+		$this->thread = new Thread($result[0]['post_thread']);

+

+		$this->author = new User();

+		$this->author->get_by_id($result[0]['post_author']);

+

+		$this->has_value = true;

+	}

+

+	public function has_value()

+	{

+		return $this->has_value;

+	}

+

+	/**

+	 * Get the post content from the database and return it as a string ready for HTML display

+	 */

+	function get_content(): string

+	{

+		// Build the header

+		$result = '<div class="header" id="p' . $this->id . '"><b>#' . $this->id . '</b>';

+		$result .= ' Posted by <a href="viewuser.php?id=' . $this->author->id . '">' . $this->author->name . '</a>';

+		$result .= ' on ' . date('m/d/Y g:ia', strtotime($this->date_created));

+		if (Session::get()->is_signed_in() && Session::get()->get_current_user()->level == USER_LEVEL_MODERATOR) {

+			$result .= '<a href="moderate.php?type=post&id=' . $this->id . '" style="float:right;">[Options]</a>';

+		}

+		$result .= '</div>';

+

+		// Append the formatted post content

+		$result .= '<span class="post-content">' . format_post_content($this->content) . '</span>';

+

+		return $result;

+	}

+

+	function set_content(string $post_content)

+	{

+		// User must be signed in

+		if (!Session::get()->is_signed_in()) {

+			trigger_error('You must be signed in to edit this post!');

+			return;

+		}

+

+		// User must have permission to edit the post

+		$current_user = Session::get()->get_current_user();

+		if ($current_user->id != $this->author->id) {

+			trigger_error("You don't have sufficient permissions to edit this post.");

+			return;

+		}

+

+		// Set the post content and the post edit date

+		$sql = "UPDATE posts SET post_content = ? WHERE post_id = ?;";

+		Database::get()->query($sql, "si", $post_content, $this->id);

+	}

+

+	function delete()

+	{

+		// User must be signed in

+		if (!Session::get()->is_signed_in()) {

+			trigger_error('You must be signed in to delete a post!');

+			return;

+		}

+

+		// User must have permission to delete the post

+		if (Session::get()->get_current_user()->level != USER_LEVEL_MODERATOR) {

+			trigger_error("You don't have sufficient permissions to delete this post.");

+			return;

+		}

+

+		// Delete the post from the database

+		Database::get()->query("DELETE FROM posts WHERE post_id = ?", "i", $this->id);

+

+		// Decrement the post count of the category

+		Database::get()->query("UPDATE categories SET `cat_post_count` = `cat_post_count` - '1' WHERE cat_id = ?", "i", $this->thread->category->id);

+	}

+

+	public static function create($post_content, $post_thread, $post_category)

+	{

+		// User must be signed in

+		if (!Session::get()->is_signed_in()) {

+			trigger_error('You must be signed in to create a post');

+			return;

+		}

+

+		$user = Session::get()->get_current_user();

+

+		// Insert the post into the database

+		$sql = "INSERT INTO posts(post_content, post_date_created, post_thread, post_author) VALUES (?, CONVERT_TZ(NOW(), 'SYSTEM', '+00:00'), ?, ?);";

+		Database::get()->query($sql, "sii", $post_content, $post_thread, $user->id);

+

+		// Increment the category's post count

+		$sql = "UPDATE categories SET `cat_post_count` = `cat_post_count` + '1' WHERE cat_id = ?;";

+		Database::get()->query($sql, "i", $post_category);

+

+		// Set the last post date of the parent thread

+		$sql = "UPDATE threads SET thread_date_lastpost = CONVERT_TZ(NOW(), 'SYSTEM', '+00:00') WHERE thread_id = ?;";

+		Database::get()->query($sql, "i", $post_thread);

+	}

+

+	public static function get_all_posts(): array

+	{

+		$sql = "SELECT post_id FROM posts";

+		$result = Database::get()->query($sql);

+

+		$posts = array();

+

+		foreach ($result as $row) {

+			$post = new Post();

+			$post->get_from_database($row['post_id']);

+			array_push($posts, $post);

+		}

+

+		return $posts;

+	}

+}