previewcomment.php

一个全功能的国外博客商业程序

} else {
$entry_cat = mysql_fetch_assoc(mysql_query("SELECT ec_id, name FROM bhost_entrycategories WHERE ec_id='$entry_info[ec_id]' AND u_id='$user_info[u_id]'"));
$entry_category = "<a href='#'>$entry_cat[name]</a>";
}

// CHECK FOR MISSING AVATAR FIRST
$entry_avatar = $entry_author[avatar];
$avatar_stripped = str_replace(" ", "", $entry_avatar);
if($avatar_stripped == "" OR $avatar_stripped == "http://") {
$entry_avatar = url("/images/", "images/noavatar2.gif");
}

 $search_array3 = Array("<%EntryDate%>", "<%EntryTitle%>", "<%EntryURL%>", "<%EntryBody%>", "<%EntryAuthor%>", "<%EntryAuthorAvatar%>", "<%EntryTime%>", "<%EntryCategory%>", "<SendThisLink>", "</SendThisLink>");
 $replace_array3 = Array(cdate("$user_info[format_date]", timezone($entry_info[date])), "$entrytitle", "#", "$entrybody", "$entry_author[display_name]", "$entry_avatar", cdate("$user_info[format_time]", timezone($entry_info[date])), "$entry_category", "<a href='#'>", "</a>");
 $insert = str_replace($search_array3, $replace_array3, $insert);

 if($remove_comments != "yes") {
  $insert = str_replace("<%CommentPostURL%>", "#", $insert);

  $insert = str_replace("<%EntryCommentCount%>", $numofcomments, $insert);
  $commentcount = occurrencecount("<Comment>", "</Comment>", $insert, "0");
  for($f=0;$f<$commentcount;$f++) {
  $insert2 = "";
  $comment = between("<Comment>", "</Comment>", $insert);
  $comments = mysql_query("SELECT * FROM bhost_comments WHERE u_id='$user_info[u_id]' AND e_id='$e_id' ORDER BY date");
   while($comment_info = mysql_fetch_assoc($comments)) {
    $comment_author_check = mysql_num_rows(mysql_query("SELECT u_id FROM bhost_users WHERE username='$comment_info[username]'"));
    $comment_author = @mysql_fetch_assoc(mysql_query("SELECT u_id, avatar FROM bhost_users WHERE username='$comment_info[username]' AND u_id='$comment_info[author_u_id]'"));
    if($comment_author_check == 1) { 
     $commentauthor = "<a href='#'>$comment_info[username]</a>"; 
     if(str_replace(" ", "", $comment_author[avatar]) == "") { $commentauthoravatar = "./images/noavatar.gif"; } else { $commentauthoravatar = "$comment_author[avatar]"; }
    } else { 
     if($comment_info[author_u_id] != "0") {
     $commentauthor = "<a href='#'>$comment_info[username]</a>";
     } else {
      if($comment_info[username] != "<b>Administrator</b>" & $c_id == $comment_info[c_id]) { $comment_info[username] = $nickname; } 
      $commentauthor = $comment_info[username];
     }
     $commentauthoravatar = "./images/noavatar.gif";
    }

    $this_comment = $comment;
    $comment_edit = "no";
    $comment_delete = "no";
    $comment_ip = "no";
    if($is_admin_logged_in == "yes") {
     $comment_edit = "yes";
     $comment_delete = "yes";
     if($user_info[logip_comments] == "1") { $comment_ip = "yes"; } else { $comment_ip = "no"; }
    } elseif($member_info[u_id] == $user_info[u_id] & $is_logged_in == "yes") {
     $comment_edit = "yes";
     $comment_delete = "yes";
     if($user_info[logip_comments] == "1") { $comment_ip = "yes"; } else { $comment_ip = "no"; }
    } elseif($member_info[u_id] == $comment_author[u_id] & $is_logged_in == "yes") {
     if($user_info[manage_comments] == "3") {
      $comment_edit = "yes";
      $comment_delete = "yes";
      $comment_ip = "no";
     } elseif($user_info[manage_comments] == "2") {
      $comment_edit = "no";
      $comment_delete = "yes";
      $comment_ip = "no";
     } elseif($user_info[manage_comments] == "1") {
      $comment_edit = "yes";
      $comment_delete = "no";
      $comment_ip = "no";
     } else {
      $comment_edit = "no";
      $comment_delete = "no";
      $comment_ip = "no";
     }
    } else {
     $comment_edit = "no";
     $comment_delete = "no";
     $comment_ip = "no";
    }
    if($comment_edit == "yes") {
     $this_comment = str_replace("<CommentEdit>", "<a href='#'>", $this_comment);
     $this_comment = str_replace("</CommentEdit>", "</a>", $this_comment);
    } else {
      $this_comment = str_replace("<CommentEdit>".between("<CommentEdit>", "</CommentEdit>", $this_comment)."</CommentEdit>", "", $this_comment);
    }
    if($comment_delete == "yes") {
     $this_comment = str_replace("<CommentDelete>", "<a href='#'>", $this_comment);
     $this_comment = str_replace("</CommentDelete>", "</a>", $this_comment);
    } else {
      $this_comment = str_replace("<CommentDelete>".between("<CommentDelete>", "</CommentDelete>", $this_comment)."</CommentDelete>", "", $this_comment);
    }
    if($comment_ip == "yes") {
     if($comment_info[IP] == "") { $IP = "IP Not Logged"; } else { $IP = $comment_info[IP]; }
     $this_comment = str_replace("<%CommentAuthorIP%>", "($IP)", $this_comment);
    } else {
     $this_comment = str_replace("<%CommentAuthorIP%>", "", $this_comment);
    }

   if($c_id == $comment_info[c_id]) {
   $comment_info[title] = htmlspecialchars(stripslashes($_POST['title']), ENT_QUOTES);
   if($is_logged_in == "yes" & $is_admin_logged_in != "yes") { $username = "<a href='#'>$member_info[username]</a>"; } else { $username = $member_info[username]; }
   $comment_info[contents] = htmlspecialchars(stripslashes($_POST['contents']), ENT_QUOTES);
   $comment_info[contents] = str_replace("<!--StartEdit-->".between("<!--StartEdit-->", "<!--EndEdit-->", $comment_info[contents])."<!--EndEdit-->", "", $comment_info[contents]);
   $comment_info[contents] = str_replace("\n", "<br>", $comment_info[contents])."<!--StartEdit--><br><br><font style='font-size: 8pt;'><i>Edited by $username on ".cdate("F j, Y", time())." at ".cdate("g:i a", time())."</i></font><!--EndEdit-->";;
   }

   // CENSOR BAD WORDS FOR PREVIEW
   $bad_words = explode(",", trim($admin_info[banned_badwords]));
   $bad_words_replace = explode(",", trim($admin_info[banned_badwords_replace]));
   $comment_info[contents] = str_replace($bad_words, $bad_words_replace, $comment_info[contents]);
   $comment_info[title] = str_replace($bad_words, $bad_words_replace, $comment_info[title]);

   $insert2 .= "<a name='c$comment_info[c_id]'></a>".$this_comment;  
   $search_array4 = Array("<%CommentDate%>", "<%CommentTitle%>", "<%CommentBody%>", "<%CommentAuthor%>", "<%CommentAuthorAvatar%>", "<%CommentTime%>", "<%CommentURL%>");
   $replace_array4 = Array(cdate("$user_info[format_date]", timezone($comment_info[date])), "$comment_info[title]", "$comment_info[contents]", "$commentauthor", "$commentauthoravatar", cdate("$user_info[format_time]", timezone($comment_info[date])), "#");
   $insert2 = str_replace($search_array4, $replace_array4, $insert2);
   }

  if($c_id == "") {
   if($_POST['from'] == "0") { $commentauthor = $_POST['nickname']; $commentauthoravatar = "./images/noavatar.gif"; } else { 
     if($member_info[username] == "<b>Administrator</b>") { 
       $commentauthor = "<b>Administrator</b>"; 
       $commentauthoravatar = "./images/noavatar.gif";
     } else { 
       $commentauthor = "<a href='#'>$member_info[username]</a>"; 
       if(str_replace(" ", "", $member_info[avatar]) == "") { $commentauthoravatar = "./images/noavatar.gif"; } else { $commentauthoravatar = "$member_info[avatar]"; }
     }
   }
   $comment_info[title] = htmlspecialchars(stripslashes($_POST['title']), ENT_QUOTES);
   $comment_info[contents] = str_replace("\n", "<br>", htmlspecialchars(stripslashes($_POST['contents']), ENT_QUOTES));
   $comment_info[date] = time();
   $comment_info[IP] = $_POST['IP'];


   // CENSOR BAD WORDS FOR PREVIEW
   $bad_words = explode(",", trim($admin_info[banned_badwords]));
   $bad_words_replace = explode(",", trim($admin_info[banned_badwords_replace]));
   $comment_info[contents] = str_replace($bad_words, $bad_words_replace, $comment_info[contents]);
   $comment_info[title] = str_replace($bad_words, $bad_words_replace, $comment_info[title]);

    $this_comment = $comment;
    $comment_edit = "no";
    $comment_delete = "no";
    $comment_ip = "no";
    if($is_admin_logged_in == "yes") {
     $comment_edit = "yes";
     $comment_delete = "yes";
     if($user_info[logip_comments] == "1") { $comment_ip = "yes"; } else { $comment_ip = "no"; }
    } elseif($member_info[u_id] == $user_info[u_id] & $is_logged_in == "yes") {
     $comment_edit = "yes";
     $comment_delete = "yes";
     if($user_info[logip_comments] == "1") { $comment_ip = "yes"; } else { $comment_ip = "no"; }
    } elseif($_POST['from'] != 0) {
     if($user_info[manage_comments] == "3") {
      $comment_edit = "yes";
      $comment_delete = "yes";
      $comment_ip = "no";
     } elseif($user_info[manage_comments] == "2") {
      $comment_edit = "no";
      $comment_delete = "yes";
      $comment_ip = "no";
     } elseif($user_info[manage_comments] == "1") {
      $comment_edit = "yes";
      $comment_delete = "no";
      $comment_ip = "no";
     } else {
      $comment_edit = "no";
      $comment_delete = "no";
      $comment_ip = "no";
     }
    }
    if($comment_edit == "yes") {
     $this_comment = str_replace("<CommentEdit>", "<a href='#'>", $this_comment);
     $this_comment = str_replace("</CommentEdit>", "</a>", $this_comment);
    } else {
      $this_comment = str_replace("<CommentEdit>".between("<CommentEdit>", "</CommentEdit>", $this_comment)."</CommentEdit>", "", $this_comment);
    }
    if($comment_delete == "yes") {
     $this_comment = str_replace("<CommentDelete>", "<a href='#'>", $this_comment);
     $this_comment = str_replace("</CommentDelete>", "</a>", $this_comment);
    } else {
      $this_comment = str_replace("<CommentDelete>".between("<CommentDelete>", "</CommentDelete>", $this_comment)."</CommentDelete>", "", $this_comment);
    }
    if($comment_ip == "yes") {
     if($comment_info[IP] == "") { $IP = "IP Not Logged"; } else { $IP = $comment_info[IP]; }
     $this_comment = str_replace("<%CommentAuthorIP%>", "($IP)", $this_comment);
    } else {
     $this_comment = str_replace("<%CommentAuthorIP%>", "", $this_comment);
    }

   $insert2 .= "<a name='cnew'></a>".$this_comment;  
   $search_array4 = Array("<%CommentDate%>", "<%CommentTitle%>", "<%CommentBody%>", "<%CommentAuthor%>", "<%CommentAuthorAvatar%>", "<%CommentTime%>", "<%CommentURL%>");
   $replace_array4 = Array(cdate("$user_info[format_date]", timezone($comment_info[date])), "$comment_info[title]", "$comment_info[contents]", "$commentauthor", "$commentauthoravatar", cdate("$user_info[format_time]", timezone($comment_info[date])), "#");
   $insert2 = str_replace($search_array4, $replace_array4, $insert2);
  }

  $insert = str_replace("<Comment>".$comment."</Comment>", $insert2, $insert);
  }
 }

 if($group_info[allow_trackback] != "0" | $entry_info[trackbacks] != "0") {
  $insert = str_replace("<%EntryTrackbackURL%>", "#", $insert);

  $insert = str_replace("<%TrackbackCount%>", $numoftrackbacks, $insert);
  $trackbackcount = occurrencecount("<Trackback>", "</Trackback>", $insert, "0");
  for($f=0;$f<$trackbackcount;$f++) {
  $insert3 = "";
  $trackback = between("<Trackback>", "</Trackback>", $insert);
  $trackbacks = mysql_query("SELECT * FROM bhost_trackbacks WHERE e_id='$e_id' ORDER BY tb_date");
   while($trackback_info = mysql_fetch_assoc($trackbacks)) {
    $this_trackback = $trackback;
    $trackback_delete = "no";
    if($is_admin_logged_in == "yes") {
     $trackback_delete = "yes";
    } elseif($member_info[u_id] == $user_info[u_id] & $is_logged_in == "yes") {
     $trackback_delete = "yes";
    } else {
     $trackback_delete = "no";
    }
    if($trackback_delete == "yes") {
     $this_trackback = str_replace("<TrackbackDelete>", "<a href='#'>", $this_trackback);
     $this_trackback = str_replace("</TrackbackDelete>", "</a>", $this_trackback);
    } else {
      $this_trackback = str_replace("<TrackbackDelete>".between("<TrackbackDelete>", "</TrackbackDelete>", $this_trackback)."</TrackbackDelete>", "", $this_trackback);
    }

   $insert3 .= "<a name='tb$trackback_info[tb_id]'></a>".$this_trackback;  
   $search_array5 = Array("<%TrackbackBlogName%>", "<%TrackbackURL%>", "<%TrackbackTitle%>", "<%TrackbackExcerpt%>", "<%TrackbackDate%>", "<%TrackbackTime%>");
   $replace_array5 = Array("$trackback_info[tb_blog_name]", "#", "$trackback_info[tb_title]", "$trackback_info[tb_excerpt]", cdate("$user_info[format_date]", timezone($trackback_info[tb_date])), cdate("$user_info[format_time]", timezone($trackback_info[tb_date])));
   $insert3 = str_replace($search_array5, $replace_array5, $insert3);
   }
  $insert = str_replace("<Trackback>".$trackback."</Trackback>", $insert3, $insert);
  }
 }

$template = str_replace("<Entry>".$entry."</Entry>", $insert, $template);

}

// REPLACE ADS AT TOP
if(($group_info[show_ad] == 1 OR $group_info[show_ad] == 3) AND $group_info[html_ad] != "") {
  // FIRST CHECK FOR BODY TAG
  if(preg_match("/<(body)(.*)>/i", $template, $match1)) {
  $template = str_replace($match1[0], "$match1[0]$group_info[html_ad]", $template); 
  // IF BODY TAG CANNOT BE FOUND, CHECK FOR HEAD TAG
  } elseif(preg_match("/<(head)(.*)>/i", $template, $match2)) {
  $template = str_replace($match2[0], "$group_info[html_ad]$match2[0]", $template); 
  // IF BODY AND HEAD TAGS CANT BE FOUND, STICK AD AT VERY TOP
  } else {
  $template = "$group_info[html_ad]$template"; 
  }
}

// REPLACE ADS AT BOTTOM
if(($group_info[show_ad] == 2 OR $group_info[show_ad] == 3) AND $group_info[html_ad_bottom] != "") {
  // FIRST CHECK FOR ENDING BODY TAG
  if(preg_match("/(<\/body>)/i", $template, $match1)) {
  $template = str_replace($match1[0], "$group_info[html_ad_bottom]$match1[0]", $template); 
  } elseif(preg_match("/<(\/html)(.*)>/i", $template, $match2)) {
  $template = str_replace($match2[0], "$group_info[html_ad_bottom]$match2[0]", $template); 
  } else {
  $template = "$template$group_info[html_ad_bottom]"; 
  }
}

$search_vars = Array("<IfPages>", "</IfPages>", "<EarlierLink>", "</EarlierLink>", "<LaterLink>", "</LaterLink>", "<RecentEntry>", "</RecentEntry>", "<Entry>", "</Entry>", "<IfCommentsAllowed>", "</IfCommentsAllowed>", "<IfCommentPostAllowed>", "</IfCommentPostAllowed>", "<Comment>", "</Comment>", "<CommentEdit>", "</CommentEdit>", "<CommentDelete>", "</CommentDelete>", "<IfMainPage>", "</IfMainPage>", "<IfEntryPage>", "</IfEntryPage>", "<IfArchivePage>", "</IfArchivePage>", "<IfCategoriesAllowed>", "</IfCategoriesAllowed>", "<%TrackbackRDF%>", "<IfTrackbacksAllowed>", "</IfTrackbacksAllowed>");
$template = str_replace($search_vars, "", $template);

// OUTPUT WEBLOG
echo $template;
?>