viewvc.cgi/inncomm/index.php

<?

set_magic_quotes_runtime(0);

include("inc/class.FastTemplate.pinc");
include("inc/conn.inc");
include("inc/fixsql.inc");

$tpl = new FastTemplate("./html");

$tpl->define(
        array(
                main => "main.html",
                nologin => "nologin.html",
                listall => "list.html",
                newtopic => "new.html",
                startnew => "startnew.html",
                ttable => "topics-table.html",
                theader => "topics-header.html",
                trow => "topics-row.html",
                reply => "reply.html",
                checkboxes => "checkboxes.html"
        )
);

if (isset($PHP_AUTH_USER)) {
        $sth = $dbh->prepare("select id,login,passwd,full_name,analitical,solution from osobe where login like '$PHP_AUTH_USER'");
        $sth->execute();
        if ($row=$sth->fetchrow_hash()) {
                if ($row && $row[passwd] == $PHP_AUTH_PW) {
                        $md5user=md5($PHP_AUTH_USER.$PHP_AUTH_PW);
                        $osoba_id=$row[id];
                        if ($row[analitical] == "t") {
                                $analitical_room=1;
                                $tpl->assign(array( ROOM => "You are member of analitical room" ));
                        } else {
                                $sql_poruke_where.="and poruke.analitical is false";
                        }
                        if ($row[solution] == "t") {
                                $solution_room=1;
                                $sql_poruke_where.="and poruke.solution is true";
                                $tpl->assign(array( ROOM => "You are in solution room" ));
                        }
                        $tpl->assign(array(
                                FULL_NAME => $row[full_name],
                                RELOGIN => "$PHP_SELF?relogin=$md5user"
                        ));
                }
        } else {        // try to verify user via pop3
                include("class.POP3.php3");
                $pop3 = new POP3();

                if($pop3->connect("intranet.pliva.hr")) {
                        $Count = $pop3->login($PHP_AUTH_USER,$PHP_AUTH_PW);
                        if ( $Count != -1 ) {
                                $pop3->quit();
                                // o.k., user exists now insert it in db!
                                include("finger.inc");
                                $full_name=finger($PHP_AUTH_USER);
                                $dbh->dbh_do("insert into osobe (login,full_name,email,passwd) values ('$PHP_AUTH_USER','$full_name','$PHP_AUTH_USER@pliva.hr','$PHP_AUTH_PW')");
                                $sth = $dbh->prepare("select last_value as id from osobe_id_seq");
                                $sth->execute();
                                $row=$sth->fetchrow_hash();
                                $md5user=md5($PHP_AUTH_USER.$PHP_AUTH_PW);
                                $osoba_id=$row[id];
                                $tpl->assign(array(
                                        FULL_NAME => $row[full_name],
                                        RELOGIN => "$PHP_SELF?relogin=$md5user"
                                ));
                        }
                }
        }
}
if (md5($PHP_AUTH_USER.$PHP_AUTH_PW) != $md5user || isset($relogin) && $md5user == $relogin ) {
        header("WWW-authenticate: basic realm=\"Innovation Commitie\"") ;
        header("HTTP/1.0 401 Unauthorized") ;
        $tpl->parse(MAIN, "nologin");
        $tpl->parse(MAIN, "main");
        $tpl->FastPrint();
        exit ;
}

//---- insert reply into database

        if (isset($insert_reply) && isset($p)) {
                $sth=$dbh->prepare("select sadrzaj,level,thread_id,pos from poruke where id=$p");
                $sth->execute();
                $row=$sth->fetchrow_hash();

                $thread_id=$row[thread_id];
                if ($thread_id == 0) $thread_id=$p; // reply to top level topic

                $level=$row[level] + 1;
                $pos=$row[pos];

                while(strlen($pos) < $level) $pos.="a";
                $sth=$dbh->prepare("select pos from poruke where pos like '$pos'");
                $sth->execute();
                if ($row=$sth->fetchrow_hash()) {
                        for($i=0; $i<$level; $i++) $mask.="_";
                        $sth=$dbh->prepare("select pos from poruke where thread_id=$thread_id and pos like '$mask' order by pos desc limit 1");
                        $sth->execute();
                        if ($row=$sth->fetchrow_hash()) {
                                $pos=$row[pos];
                                $pos_l=substr($pos,0,strlen($pos)-1);
                                $pos_r=substr($pos,strlen($pos)-1,1);
                                $pos_r++;
                                $pos=$pos_l.$pos_r;
                        }
                }

                function fix_checkbox($what) {
                        if (isset($GLOBALS[$what])) {
                                $GLOBALS[$what]="true";
                        } else {
                                $GLOBALS[$what]="false";
                        }
                }

                fix_checkbox("analitical");
                fix_checkbox("solution");

                $sadrzaj=trim($sadrzaj);
                $dbh->dbh_do(fixsql("insert into poruke (thread_id,reply_id,osoba_id,sadrzaj,level,pos,analitical,solution) values ($thread_id,$p,$osoba_id,'$sadrzaj',$level,'$pos',$analitical,$solution)"));

                $sth=$dbh->prepare("select currval('poruke_id_seq') as id");
                $sth->execute();

                if ($row=$sth->fetchrow_hash()) {
                        $p=$row[id];    // poruka_id for later
                }
                $what="show";

        } elseif (isset($insert_newtopic)) {

//---- insert new topic into database

                if (isset($osoba_id)) {
                        $dbh->dbh_do(fixsql("insert into poruke (thread_id,osoba_id,sadrzaj) values (0,$osoba_id,'$sadrzaj')"));
                        $sth=$dbh->prepare("select currval('poruke_id_seq') as id");
                        $sth->execute();
                        if ($row=$sth->fetchrow_hash()) {
                                $t=$row[id];    // topic for later
                                $title=trim($title);
                                $dbh->dbh_do(fixsql("insert into topics (id,title) values ($t,'$title')"));
                        }
                }
        }

//----- end of inserts/updates...

if (($what=="reply" || $what="show") && isset($t)) {
        $sql_where=" and topics.id=$t";
}

if ($solution_room == 1) {
        // don't limit just to topics starts
        $sql_where.=" and poruke.thread_id=topics.id and poruke.thread_id!=0";
} else {
        // limit just to topics start
        $sql_where.=" and poruke.id=topics.id and poruke.thread_id=0";
}

$sth = $dbh->prepare("select topics.id as topic_id,title,sadrzaj,full_name,poruke.datum as datum
        from topics,poruke,osobe
        where poruke.osoba_id=osobe.id $sql_where $sql_poruke_where
        order by datum asc
        ");

$sth->execute();
$topics="";
while ($row=$sth->fetchrow_hash()) {
        $tpl->assign( array(
                TITLE => $row[title],
                AUTHOR => $row[full_name],
                DATE => $row[datum],
                SADRZAJ => $row[sadrzaj],
                COMMENTS => "<a href=\"$PHP_SELF?what=show&t=$row[topic_id]\">comments&gt;&gt;</a>",
                PHP_SELF => $PHP_SELF
        ));
        $tpl->parse(ROWS,".theader");

        if (isset($t) && $t==$row[topic_id]) {
                $sth2 = $dbh->prepare("
                        select poruke.id as id,sadrzaj as topic,level,thread_id,reply_id,full_name,poruke.datum as datum,poruke.analitical as poruka_analitical
                        from poruke,osobe
                        where (thread_id=$t or poruke.id=$t) and poruke.osoba_id=osobe.id $sql_poruke_where
                order by pos
                ");
                $sth2->execute();

                while ($row2=$sth2->fetchrow_hash()) {
                        $l_ul=$r_ul="";
                        for ($i=0; $i<$row2[level]; $i++) {
                                $l_ul.="<ul>";
                                $r_ul.="</ul>";
                        }
                        // don't indent in solution room
                        if ($solution_room == 1) { $l_ul=$r_ul=""; }
                        $tpl->assign( array(
                                L_INDENT => $l_ul,
                                R_INDENT => $r_ul
                                ));
                        $topic=trim(strip_tags($row2[topic]));
                        if (isset($p) && $p == $row2[id] && $what=="reply") {
                                $topic="<font color=red>$topic...</font>";
                                $tpl->assign( array( P => $p, T => $t ));
                                if ($analitical_room == 1) {
                                        $tpl->parse(CHECKBOXES, ".checkboxes");
                                }
                                $tpl->parse(REPLY, ".reply");
                        } elseif (isset($p) && $p == $row2[id]) {
                                $topic="<font color=red>$topic...</font>";
                                $tpl->assign( array( P => $p, T => $t ));
                        } else {
                                if (!isset($p)) { $p=$t; }
                                $tmp_t=$row2[thread_id];
                                if ($tmp_t == 0) { $tmp_t=$row2[id]; }
                                $tpl->assign( array(
                                        REPLY => "<a href=\"$PHP_SELF?what=reply&p=$row2[id]&t=$tmp_t\">reply</a>"
                                ));
                        }
                        $this.="<br>";

                        if ($row2[poruka_analitical] == "t") {
                                $topic="<i>$topic</i>";
                        }

                        $tpl->assign( array(
                                        AUTHOR => $row2[full_name],
                                        DATE => $row2[datum],
                                        SADRZAJ => $topic
                                ));
#                       $tpl->parse(ROWS,".theader");
                        $tpl->parse(ROWS,".trow");
                }
        } else {
                // non-unroll topics
                $tpl->assign( array(
                                SADRZAJ => $row[sadrzaj],
                                COMMENTS => "<a href=\"$PHP_SELF?what=show&t=$row[topic_id]\">comments&gt;&gt;</a>"
                        ));
#               $tpl->parse(ROWS,".theader");
                $tpl->parse(ROWS,".trow");
        }

}
$tpl->parse(TOPIC_LIST, "ttable");

$tpl->assign( array(
                PHP_SELF => $PHP_SELF,
                TITLE => "List of topics"
        ) );

if ($what != "new") {
        $tpl->parse(START_NEW_TOPIC, "startnew");
}
$tpl->parse(MAIN, "listall");
if ($what == "new") {
        $tpl->parse(MAIN, ".newtopic");
        $tpl->assign(array( TITLE => "Start of new topic" ));
} elseif ($what == "show") {
        $tpl->assign(array(
                TITLE => "Select article for reply",
                P => $p
        ));
} elseif ($what == "reply") {
        $tpl->assign(array(
                TITLE => "Reply to selected article",
                P => $p
        ));
}
$tpl->parse(MAIN, "main");

$tpl->FastPrint();

#include("debug.inc");

?>
1	dpavlin	1.1	<?
2
3	dpavlin	1.4	set_magic_quotes_runtime(0);
4
5	dpavlin	1.1	include("inc/class.FastTemplate.pinc");
6			include("inc/conn.inc");
7			include("inc/fixsql.inc");
8
9			$tpl = new FastTemplate("./html");
10
11			$tpl->define(
12			array(
13			main => "main.html",
14			nologin => "nologin.html",
15			listall => "list.html",
16			newtopic => "new.html",
17			startnew => "startnew.html",
18			ttable => "topics-table.html",
19			theader => "topics-header.html",
20			trow => "topics-row.html",
21			reply => "reply.html",
22			checkboxes => "checkboxes.html"
23			)
24			);
25
26			if (isset($PHP_AUTH_USER)) {
27			$sth = $dbh->prepare("select id,login,passwd,full_name,analitical,solution from osobe where login like '$PHP_AUTH_USER'");
28			$sth->execute();
29			if ($row=$sth->fetchrow_hash()) {
30			if ($row && $row[passwd] == $PHP_AUTH_PW) {
31			$md5user=md5($PHP_AUTH_USER.$PHP_AUTH_PW);
32			$osoba_id=$row[id];
33			if ($row[analitical] == "t") {
34			$analitical_room=1;
35			$tpl->assign(array( ROOM => "You are member of analitical room" ));
36			} else {
37			$sql_poruke_where.="and poruke.analitical is false";
38			}
39			if ($row[solution] == "t") {
40			$solution_room=1;
41			$sql_poruke_where.="and poruke.solution is true";
42	dpavlin	1.3	$tpl->assign(array( ROOM => "You are in solution room" ));
43	dpavlin	1.1	}
44			$tpl->assign(array(
45			FULL_NAME => $row[full_name],
46			RELOGIN => "$PHP_SELF?relogin=$md5user"
47			));
48			}
49			} else { // try to verify user via pop3
50			include("class.POP3.php3");
51			$pop3 = new POP3();
52
53			if($pop3->connect("intranet.pliva.hr")) {
54			$Count = $pop3->login($PHP_AUTH_USER,$PHP_AUTH_PW);
55			if ( $Count != -1 ) {
56			$pop3->quit();
57			// o.k., user exists now insert it in db!
58			include("finger.inc");
59			$full_name=finger($PHP_AUTH_USER);
60			$dbh->dbh_do("insert into osobe (login,full_name,email,passwd) values ('$PHP_AUTH_USER','$full_name','$PHP_AUTH_USER@pliva.hr','$PHP_AUTH_PW')");
61			$sth = $dbh->prepare("select last_value as id from osobe_id_seq");
62			$sth->execute();
63			$row=$sth->fetchrow_hash();
64			$md5user=md5($PHP_AUTH_USER.$PHP_AUTH_PW);
65			$osoba_id=$row[id];
66			$tpl->assign(array(
67			FULL_NAME => $row[full_name],
68			RELOGIN => "$PHP_SELF?relogin=$md5user"
69			));
70			}
71			}
72			}
73			}
74			if (md5($PHP_AUTH_USER.$PHP_AUTH_PW) != $md5user \|\| isset($relogin) && $md5user == $relogin ) {
75			header("WWW-authenticate: basic realm=\"Innovation Commitie\"") ;
76			header("HTTP/1.0 401 Unauthorized") ;
77			$tpl->parse(MAIN, "nologin");
78			$tpl->parse(MAIN, "main");
79			$tpl->FastPrint();
80			exit ;
81			}
82
83			//---- insert reply into database
84
85			if (isset($insert_reply) && isset($p)) {
86			$sth=$dbh->prepare("select sadrzaj,level,thread_id,pos from poruke where id=$p");
87			$sth->execute();
88			$row=$sth->fetchrow_hash();
89
90			$thread_id=$row[thread_id];
91			if ($thread_id == 0) $thread_id=$p; // reply to top level topic
92
93			$level=$row[level] + 1;
94			$pos=$row[pos];
95
96			while(strlen($pos) < $level) $pos.="a";
97			$sth=$dbh->prepare("select pos from poruke where pos like '$pos'");
98			$sth->execute();
99			if ($row=$sth->fetchrow_hash()) {
100			for($i=0; $i<$level; $i++) $mask.="_";
101			$sth=$dbh->prepare("select pos from poruke where thread_id=$thread_id and pos like '$mask' order by pos desc limit 1");
102			$sth->execute();
103			if ($row=$sth->fetchrow_hash()) {
104			$pos=$row[pos];
105			$pos_l=substr($pos,0,strlen($pos)-1);
106			$pos_r=substr($pos,strlen($pos)-1,1);
107			$pos_r++;
108			$pos=$pos_l.$pos_r;
109			}
110			}
111
112			function fix_checkbox($what) {
113			if (isset($GLOBALS[$what])) {
114			$GLOBALS[$what]="true";
115			} else {
116	dpavlin	1.2	$GLOBALS[$what]="false";
117	dpavlin	1.1	}
118			}
119
120			fix_checkbox("analitical");
121			fix_checkbox("solution");
122
123	dpavlin	1.2	$sadrzaj=trim($sadrzaj);
124			$dbh->dbh_do(fixsql("insert into poruke (thread_id,reply_id,osoba_id,sadrzaj,level,pos,analitical,solution) values ($thread_id,$p,$osoba_id,'$sadrzaj',$level,'$pos',$analitical,$solution)"));
125	dpavlin	1.1
126			$sth=$dbh->prepare("select currval('poruke_id_seq') as id");
127			$sth->execute();
128
129			if ($row=$sth->fetchrow_hash()) {
130			$p=$row[id]; // poruka_id for later
131			}
132	dpavlin	1.2	$what="show";
133	dpavlin	1.1
134			} elseif (isset($insert_newtopic)) {
135
136			//---- insert new topic into database
137
138			if (isset($osoba_id)) {
139			$dbh->dbh_do(fixsql("insert into poruke (thread_id,osoba_id,sadrzaj) values (0,$osoba_id,'$sadrzaj')"));
140			$sth=$dbh->prepare("select currval('poruke_id_seq') as id");
141			$sth->execute();
142			if ($row=$sth->fetchrow_hash()) {
143			$t=$row[id]; // topic for later
144	dpavlin	1.2	$title=trim($title);
145	dpavlin	1.1	$dbh->dbh_do(fixsql("insert into topics (id,title) values ($t,'$title')"));
146			}
147			}
148			}
149
150			//----- end of inserts/updates...
151
152	dpavlin	1.2	if (($what=="reply" \|\| $what="show") && isset($t)) {
153	dpavlin	1.1	$sql_where=" and topics.id=$t";
154			}
155
156	dpavlin	1.2	if ($solution_room == 1) {
157			// don't limit just to topics starts
158			$sql_where.=" and poruke.thread_id=topics.id and poruke.thread_id!=0";
159			} else {
160			// limit just to topics start
161			$sql_where.=" and poruke.id=topics.id and poruke.thread_id=0";
162			}
163
164	dpavlin	1.1	$sth = $dbh->prepare("select topics.id as topic_id,title,sadrzaj,full_name,poruke.datum as datum
165			from topics,poruke,osobe
166	dpavlin	1.2	where poruke.osoba_id=osobe.id $sql_where $sql_poruke_where
167	dpavlin	1.1	order by datum asc
168			");
169	dpavlin	1.2
170	dpavlin	1.1	$sth->execute();
171			$topics="";
172			while ($row=$sth->fetchrow_hash()) {
173			$tpl->assign( array(
174			TITLE => $row[title],
175			AUTHOR => $row[full_name],
176			DATE => $row[datum],
177			SADRZAJ => $row[sadrzaj],
178	dpavlin	1.2	COMMENTS => "<a href=\"$PHP_SELF?what=show&t=$row[topic_id]\">comments>></a>",
179	dpavlin	1.1	PHP_SELF => $PHP_SELF
180			));
181			$tpl->parse(ROWS,".theader");
182
183			if (isset($t) && $t==$row[topic_id]) {
184			$sth2 = $dbh->prepare("
185			select poruke.id as id,sadrzaj as topic,level,thread_id,reply_id,full_name,poruke.datum as datum,poruke.analitical as poruka_analitical
186			from poruke,osobe
187			where (thread_id=$t or poruke.id=$t) and poruke.osoba_id=osobe.id $sql_poruke_where
188			order by pos
189			");
190			$sth2->execute();
191
192			while ($row2=$sth2->fetchrow_hash()) {
193			$l_ul=$r_ul="";
194			for ($i=0; $i<$row2[level]; $i++) {
195			$l_ul.="<ul>";
196			$r_ul.="</ul>";
197			}
198	dpavlin	1.2	// don't indent in solution room
199			if ($solution_room == 1) { $l_ul=$r_ul=""; }
200	dpavlin	1.1	$tpl->assign( array(
201			L_INDENT => $l_ul,
202			R_INDENT => $r_ul
203			));
204			$topic=trim(strip_tags($row2[topic]));
205	dpavlin	1.2	if (isset($p) && $p == $row2[id] && $what=="reply") {
206	dpavlin	1.1	$topic="<font color=red>$topic...</font>";
207	dpavlin	1.2	$tpl->assign( array( P => $p, T => $t ));
208			if ($analitical_room == 1) {
209			$tpl->parse(CHECKBOXES, ".checkboxes");
210			}
211	dpavlin	1.1	$tpl->parse(REPLY, ".reply");
212	dpavlin	1.2	} elseif (isset($p) && $p == $row2[id]) {
213			$topic="<font color=red>$topic...</font>";
214			$tpl->assign( array( P => $p, T => $t ));
215	dpavlin	1.1	} else {
216			if (!isset($p)) { $p=$t; }
217			$tmp_t=$row2[thread_id];
218			if ($tmp_t == 0) { $tmp_t=$row2[id]; }
219			$tpl->assign( array(
220			REPLY => "<a href=\"$PHP_SELF?what=reply&p=$row2[id]&t=$tmp_t\">reply</a>"
221			));
222			}
223			$this.="<br>";
224
225			if ($row2[poruka_analitical] == "t") {
226			$topic="<i>$topic</i>";
227			}
228
229			$tpl->assign( array(
230			AUTHOR => $row2[full_name],
231			DATE => $row2[datum],
232			SADRZAJ => $topic
233			));
234			# $tpl->parse(ROWS,".theader");
235			$tpl->parse(ROWS,".trow");
236			}
237			} else {
238			// non-unroll topics
239			$tpl->assign( array(
240			SADRZAJ => $row[sadrzaj],
241	dpavlin	1.2	COMMENTS => "<a href=\"$PHP_SELF?what=show&t=$row[topic_id]\">comments>></a>"
242	dpavlin	1.1	));
243			# $tpl->parse(ROWS,".theader");
244			$tpl->parse(ROWS,".trow");
245			}
246
247			}
248			$tpl->parse(TOPIC_LIST, "ttable");
249
250			$tpl->assign( array(
251			PHP_SELF => $PHP_SELF,
252			TITLE => "List of topics"
253			) );
254
255			if ($what != "new") {
256			$tpl->parse(START_NEW_TOPIC, "startnew");
257			}
258			$tpl->parse(MAIN, "listall");
259			if ($what == "new") {
260			$tpl->parse(MAIN, ".newtopic");
261			$tpl->assign(array( TITLE => "Start of new topic" ));
262	dpavlin	1.2	} elseif ($what == "show") {
263			$tpl->assign(array(
264			TITLE => "Select article for reply",
265			P => $p
266			));
267	dpavlin	1.1	} elseif ($what == "reply") {
268			$tpl->assign(array(
269			TITLE => "Reply to selected article",
270			P => $p
271			));
272			}
273			$tpl->parse(MAIN, "main");
274
275			$tpl->FastPrint();
276
277			#include("debug.inc");
278
279			?>