<?php

/**

* MyBB 1.8

* Copyright 2014 MyBB Group, All Rights Reserved

*

* Website: http://www.mybb.com

* License: http://www.mybb.com/about/license

*

*/

define("IN_MYBB", 1);

define('THIS_SCRIPT', 'showthread.php');

$templatelist = "showthread,postbit,postbit_author_user,postbit_author_guest,showthread_newthread,showthread_newreply,showthread_newreply_closed,postbit_avatar,postbit_find,postbit_pm,postbit_www,postbit_email,postbit_edit,postbit_quote,postbit_report";

$templatelist .= ",multipage,multipage_breadcrumb,multipage_end,multipage_jump_page,multipage_nextpage,multipage_page,multipage_page_current,multipage_page_link_current,multipage_prevpage,multipage_start,showthread_inlinemoderation_softdelete,showthread_poll_editpoll";

$templatelist .= ",postbit_editedby,showthread_similarthreads,showthread_similarthreads_bit,postbit_iplogged_show,postbit_iplogged_hiden,postbit_profilefield,showthread_quickreply,showthread_printthread,showthread_add_poll,showthread_send_thread,showthread_inlinemoderation_restore";

$templatelist .= ",forumjump_advanced,forumjump_special,forumjump_bit,postbit_attachments,postbit_attachments_attachment,postbit_attachments_thumbnails,postbit_attachments_images_image,postbit_attachments_images,showthread_quickreply_options_stick,postbit_status";

$templatelist .= ",postbit_inlinecheck,showthread_inlinemoderation,postbit_attachments_thumbnails_thumbnail,postbit_ignored,postbit_multiquote,showthread_moderationoptions_custom_tool,showthread_moderationoptions_custom,showthread_inlinemoderation_custom_tool";

$templatelist .= ",showthread_usersbrowsing,showthread_usersbrowsing_user,showthread_poll_option,showthread_poll,showthread_quickreply_options_signature,showthread_threaded_bitactive,showthread_threaded_bit,postbit_attachments_attachment_unapproved";

$templatelist .= ",showthread_moderationoptions_openclose,showthread_moderationoptions_stickunstick,showthread_moderationoptions_delete,showthread_moderationoptions_threadnotes,showthread_moderationoptions_manage,showthread_moderationoptions_deletepoll";

$templatelist .= ",postbit_userstar,postbit_reputation_formatted_link,postbit_warninglevel_formatted,postbit_quickrestore,forumdisplay_password,forumdisplay_password_wrongpass,postbit_purgespammer,showthread_inlinemoderation_approve,forumdisplay_thread_icon";

$templatelist .= ",showthread_moderationoptions_softdelete,showthread_moderationoptions_restore,post_captcha,post_captcha_recaptcha_invisible,post_captcha_nocaptcha,post_captcha_hcaptcha_invisible,post_captcha_hcaptcha,showthread_moderationoptions,showthread_inlinemoderation_standard,showthread_inlinemoderation_manage";

$templatelist .= ",showthread_ratethread,postbit_posturl,postbit_icon,postbit_editedby_editreason,attachment_icon,global_moderation_notice,showthread_poll_option_multiple,postbit_gotopost,postbit_rep_button,postbit_warninglevel,showthread_threadnoteslink";

$templatelist .= ",showthread_moderationoptions_approve,showthread_moderationoptions_unapprove,showthread_inlinemoderation_delete,showthread_moderationoptions_standard,showthread_quickreply_options_close,showthread_inlinemoderation_custom,showthread_search";

$templatelist .= ",postbit_profilefield_multiselect_value,postbit_profilefield_multiselect,showthread_subscription,postbit_deleted_member,postbit_away,postbit_warn,postbit_classic,postbit_reputation,postbit_deleted,postbit_offline,postbit_online,postbit_signature";

$templatelist .= ",postbit_editreason,postbit_quickdelete,showthread_threadnotes_viewnotes,showthread_threadedbox,showthread_poll_resultbit,showthread_poll_results,showthread_threadnotes,showthread_classic_header,showthread_poll_undovote,postbit_groupimage";

require_once "./global.php";

require_once MYBB_ROOT."inc/functions_post.php";

require_once MYBB_ROOT."inc/functions_indicators.php";

require_once MYBB_ROOT."inc/class_parser.php";

$parser = new postParser;

// Load global language phrases

$lang->load("showthread");

// If there is no tid but a pid, trick the system into thinking there was a tid anyway.

if(!empty($mybb->input['pid']) && !isset($mybb->input['tid']))

{

// see if we already have the post information

if(isset($style) && $style['pid'] == $mybb->get_input('pid', MyBB::INPUT_INT) && $style['tid'])

{

$mybb->input['tid'] = $style['tid'];

unset($style['tid']); // stop the thread caching code from being tricked

}

else

{

$options = array(

"limit" => 1

);

$query = $db->simple_select("posts", "fid,tid,visible", "pid=".$mybb->get_input('pid', MyBB::INPUT_INT), $options);

$post = $db->fetch_array($query);

if(empty($post) || ($post['visible'] == 0 && !is_moderator($post['fid'], 'canviewunapprove')) || ($post['visible'] == -1 && !is_moderator($post['fid'], 'canviewdeleted')))

{

// post does not exist --> show corresponding error

error($lang->error_invalidpost);

}

$mybb->input['tid'] = $post['tid'];

}

}

// Get the thread details from the database.

$thread = get_thread($mybb->get_input('tid', MyBB::INPUT_INT));

if(!$thread || substr($thread['closed'], 0, 6) == "moved|")

{

error($lang->error_invalidthread);

}

// Get thread prefix if there is one.

$thread['threadprefix'] = '';

$thread['displayprefix'] = '';

if($thread['prefix'] != 0)

{

$threadprefix = build_prefixes($thread['prefix']);

if(!empty($threadprefix['prefix']))

{

$thread['threadprefix'] = htmlspecialchars_uni($threadprefix['prefix']).'&nbsp;';

$thread['displayprefix'] = $threadprefix['displaystyle'].'&nbsp;';

}

}

$reply_subject = $parser->parse_badwords($thread['subject']);

$thread['subject'] = htmlspecialchars_uni($reply_subject);

// Subject too long? Shorten it to avoid error message

if(my_strlen($reply_subject) > 85)

{

$reply_subject = my_substr($reply_subject, 0, 82).'...';

}

$reply_subject = htmlspecialchars_uni($reply_subject);

$tid = $thread['tid'];

$fid = $thread['fid'];

if(!$thread['username'])

{

$thread['username'] = $lang->guest;

}

$thread['username'] = htmlspecialchars_uni($thread['username']);

$forumpermissions = forum_permissions($thread['fid']);

// Set here to fetch only approved/deleted posts (and then below for a moderator we change this).

if($forumpermissions['canviewdeletionnotice'] != 0)

{

$visibleonly = " AND visible IN (-1,1)";

$visibleonly2 = "AND p.visible IN (-1,1) AND t.visible IN (-1,1)";

}

else

{

$visibleonly = " AND visible=1";

$visibleonly2 = "AND p.visible=1 AND t.visible=1";

}

// Is the currently logged in user a moderator of this forum?

if(is_moderator($fid))

{

$ismod = true;

if(is_moderator($fid, "canviewdeleted") == true || is_moderator($fid, "canviewunapprove") == true)

{

if(is_moderator($fid, "canviewunapprove") == true && is_moderator($fid, "canviewdeleted") == false)

{

$visibleonly = " AND visible IN (0,1)";

$visibleonly2 = "AND p.visible IN (0,1) AND t.visible IN (0,1)";

}

elseif(is_moderator($fid, "canviewdeleted") == true && is_moderator($fid, "canviewunapprove") == false)

{

$visibleonly = " AND visible IN (-1,1)";

$visibleonly2 = "AND p.visible IN (-1,1) AND t.visible IN (-1,1)";

}

else

{

$visibleonly = " AND visible IN (-1,0,1)";

$visibleonly2 = "AND p.visible IN (-1,0,1) AND t.visible IN (-1,0,1)";

}

}

}

else

{

$ismod = false;

}

// Make sure we are looking at a real thread here.

if(($thread['visible'] != 1 && $ismod == false) || ($thread['visible'] == 0 && !is_moderator($fid, "canviewunapprove")) || ($thread['visible'] == -1 && !is_moderator($fid, "canviewdeleted")))

{

// Allow viewing own unapproved thread

if (!($mybb->user['uid'] && $mybb->settings['showownunapproved'] && $thread['visible'] == 0 && ($thread['uid'] == $mybb->user['uid'])))

{

error($lang->error_invalidthread);

}

}

// Does the user have permission to view this thread?

if($forumpermissions['canview'] != 1 || $forumpermissions['canviewthreads'] != 1)

{

error_no_permission();

}

if(isset($forumpermissions['canonlyviewownthreads']) && $forumpermissions['canonlyviewownthreads'] == 1 && $thread['uid'] != $mybb->user['uid'])

{

error_no_permission();

}

$archive_url = build_archive_link("thread", $tid);

// Does the thread belong to a valid forum?

$forum = get_forum($fid);

if(!$forum || $forum['type'] != "f")

{

error($lang->error_invalidforum);

}

$threadnoteslink = '';

if(is_moderator($fid, "canmanagethreads") && !empty($thread['notes']))

{

eval('$threadnoteslink = "'.$templates->get('showthread_threadnoteslink').'";');

}

// Check if this forum is password protected and we have a valid password

check_forum_password($forum['fid']);

// If there is no specific action, we must be looking at the thread.

if(!$mybb->get_input('action'))

{

$mybb->input['action'] = "thread";

}

// Jump to the unread posts.

if($mybb->input['action'] == "newpost")

{

// First, figure out what time the thread or forum were last read

$query = $db->simple_select("threadsread", "dateline", "uid='{$mybb->user['uid']}' AND tid='{$thread['tid']}'");

$thread_read = $db->fetch_field($query, "dateline");

if($mybb->settings['threadreadcut'] > 0 && $mybb->user['uid'])

{

$query = $db->simple_select("forumsread", "dateline", "fid='{$fid}' AND uid='{$mybb->user['uid']}'");

$forum_read = $db->fetch_field($query, "dateline");

$read_cutoff = TIME_NOW-$mybb->settings['threadreadcut']*60*60*24;

if($forum_read == 0 || $forum_read < $read_cutoff)

{

$forum_read = $read_cutoff;

}

}

else

{

$forum_read = (int)my_get_array_cookie("forumread", $fid);

}

if($mybb->settings['threadreadcut'] > 0 && $mybb->user['uid'] && $thread['lastpost'] > $forum_read)

{

$cutoff = TIME_NOW-$mybb->settings['threadreadcut']*60*60*24;

if($thread['lastpost'] > $cutoff)

{

if($thread_read)

{

$lastread = $thread_read;

}

else

{

// Set $lastread to zero to make sure 'lastpost' is invoked in the last IF

$lastread = 0;

}

}

}

if(!$lastread)

{

$readcookie = $threadread = (int)my_get_array_cookie("threadread", $thread['tid']);

if($readcookie > $forum_read)

{

$lastread = $readcookie;

}

else

{

$lastread = $forum_read;

}

}

if($cutoff && $lastread < $cutoff)

{

$lastread = $cutoff;

}

// Next, find the proper pid to link to.

$options = array(

"limit_start" => 0,

"limit" => 1,

"order_by" => "dateline, pid",

);

$lastread = (int)$lastread;

$query = $db->simple_select("posts", "pid", "tid='{$tid}' AND dateline > '{$lastread}' {$visibleonly}", $options);

$newpost = $db->fetch_array($query);

if($newpost['pid'] && $lastread)

{

$highlight = '';

if($mybb->get_input('highlight'))

{

$string = "&";

if($mybb->seo_support == true)

{

$string = "?";

}

$highlight = $string."highlight=".$mybb->get_input('highlight');

}

header("Location: ".htmlspecialchars_decode(get_post_link($newpost['pid'], $tid)).$highlight."#pid{$newpost['pid']}");

}

else

{

// show them to the last post

$mybb->input['action'] = "lastpost";

}

}

// Jump to the last post.

if($mybb->input['action'] == "lastpost")

{

if(my_strpos($thread['closed'], "moved|"))

{

$query = $db->query("

SELECT p.pid

FROM ".TABLE_PREFIX."posts p

LEFT JOIN ".TABLE_PREFIX."threads t ON(p.tid=t.tid)

WHERE t.fid='".$thread['fid']."' AND t.closed NOT LIKE 'moved|%' {$visibleonly2}

ORDER BY p.dateline DESC, p.pid DESC

LIMIT 1

");

$pid = $db->fetch_field($query, "pid");

}

else

{

$options = array(

'order_by' => 'dateline DESC, pid DESC',

'limit_start' => 0,

'limit' => 1

);

$query = $db->simple_select('posts', 'pid', "tid={$tid} {$visibleonly}", $options);

$pid = $db->fetch_field($query, "pid");

}

header("Location: ".htmlspecialchars_decode(get_post_link($pid, $tid))."#pid{$pid}");

exit;

}

// Jump to the next newest posts.

if($mybb->input['action'] == "nextnewest")

{

$options = array(

"limit_start" => 0,

"limit" => 1,

"order_by" => "lastpost"

);

$query = $db->simple_select('threads', '*', "fid={$thread['fid']} AND lastpost > {$thread['lastpost']} {$visibleonly} AND closed NOT LIKE 'moved|%'", $options);

$nextthread = $db->fetch_array($query);

// Are there actually next newest posts?

if(!$nextthread['tid'])

{

error($lang->error_nonextnewest);

}

$options = array(

"limit_start" => 0,

"limit" => 1,

"order_by" => "dateline DESC, pid DESC",

);

$query = $db->simple_select('posts', 'pid', "tid='{$nextthread['tid']}'", $options);

// Redirect to the proper page.

$pid = $db->fetch_field($query, "pid");

header("Location: ".htmlspecialchars_decode(get_post_link($pid, $nextthread['tid']))."#pid{$pid}");

exit;

}

// Jump to the next oldest posts.

if($mybb->input['action'] == "nextoldest")

{

$options = array(

"limit" => 1,

"limit_start" => 0,

"order_by" => "lastpost",

"order_dir" => "desc"

);

$query = $db->simple_select("threads", "*", "fid=".$thread['fid']." AND lastpost < ".$thread['lastpost']." {$visibleonly} AND closed NOT LIKE 'moved|%'", $options);

$nextthread = $db->fetch_array($query);

// Are there actually next oldest posts?

if(!$nextthread['tid'])

{

error($lang->error_nonextoldest);

}

$options = array(

"limit_start" => 0,

"limit" => 1,

"order_by" => "dateline DESC, pid DESC",

);

$query = $db->simple_select("posts", "pid", "tid='".$nextthread['tid']."'", $options);

// Redirect to the proper page.

$pid = $db->fetch_field($query, "pid");

header("Location: ".htmlspecialchars_decode(get_post_link($pid, $nextthread['tid']))."#pid{$pid}");

exit;

}

$pid = $mybb->input['pid'] = $mybb->get_input('pid', MyBB::INPUT_INT);

// Forumdisplay cache

$forum_stats = $cache->read("forumsdisplay");

$breadcrumb_multipage = array();

if($mybb->settings['showforumpagesbreadcrumb'])

{

// How many pages are there?

if(!$mybb->settings['threadsperpage'] || (int)$mybb->settings['threadsperpage'] < 1)

{

$mybb->settings['threadsperpage'] = 20;

}

$query = $db->simple_select("forums", "threads, unapprovedthreads, deletedthreads", "fid = '{$fid}'", array('limit' => 1));

$forum_threads = $db->fetch_array($query);

$threadcount = $forum_threads['threads'];

if(is_moderator($fid, "canviewdeleted") == true || is_moderator($fid, "canviewunapprove") == true)

{

if(is_moderator($fid, "canviewdeleted") == true)

{

$threadcount += $forum_threads['deletedthreads'];

}

if(is_moderator($fid, "canviewunapprove") == true)

{

$threadcount += $forum_threads['unapprovedthreads'];

}

}

elseif($forumpermissions['canviewdeletionnotice'] != 0)

{

$threadcount += $forum_threads['deletedthreads'];

}

// Limit to only our own threads

$uid_only = '';

if(isset($forumpermissions['canonlyviewownthreads']) && $forumpermissions['canonlyviewownthreads'] == 1)

{

$uid_only = " AND uid = '".$mybb->user['uid']."'";

$query = $db->simple_select("threads", "COUNT(tid) AS threads", "fid = '$fid' $visibleonly $uid_only", array('limit' => 1));

$threadcount = $db->fetch_field($query, "threads");

}

// If we have 0 threads double check there aren't any "moved" threads

if($threadcount == 0)

{

$query = $db->simple_select("threads", "COUNT(tid) AS threads", "fid = '$fid' $visibleonly $uid_only", array('limit' => 1));

$threadcount = $db->fetch_field($query, "threads");

}

$stickybit = " OR sticky=1";

if($thread['sticky'] == 1)

{

$stickybit = " AND sticky=1";

}

// Figure out what page the thread is actually on

switch($db->type)

{

case "pgsql":

$query = $db->query("

SELECT COUNT(tid) as threads

FROM ".TABLE_PREFIX."threads

WHERE fid = '$fid' AND (lastpost >= '".(int)$thread['lastpost']."'{$stickybit}) {$visibleonly} {$uid_only}

GROUP BY lastpost

ORDER BY lastpost DESC

");

break;

default:

$query = $db->simple_select("threads", "COUNT(tid) as threads", "fid = '$fid' AND (lastpost >= '".(int)$thread['lastpost']."'{$stickybit}) {$visibleonly} {$uid_only}", array('order_by' => 'lastpost', 'order_dir' => 'desc'));

}

$thread_position = $db->fetch_field($query, "threads");

$thread_page = ceil(($thread_position/$mybb->settings['threadsperpage']));

$breadcrumb_multipage = array(

"num_threads" => $threadcount,

"current_page" => $thread_page

);

}

// Build the navigation.

build_forum_breadcrumb($fid, $breadcrumb_multipage);

add_breadcrumb($thread['displayprefix'].$thread['subject'], get_thread_link($thread['tid']));

$plugins->run_hooks("showthread_start");

// Show the entire thread (taking into account pagination).

if($mybb->input['action'] == "thread")

{

// This is a workaround to fix threads which data may get "corrupted" due to lag or other still unknown reasons

if($thread['firstpost'] == 0 || $thread['dateline'] == 0)

{

update_first_post($tid);

}

// Does this thread have a poll?

if($thread['poll'])

{

$options = array(

"limit" => 1

);

$query = $db->simple_select("polls", "*", "pid='".$thread['poll']."'", $options);

$poll = $db->fetch_array($query);

$poll['timeout'] = $poll['timeout']*60*60*24;

$expiretime = $poll['dateline'] + $poll['timeout'];

$now = TIME_NOW;

// If the poll or the thread is closed or if the poll is expired, show the results.

if($poll['closed'] == 1 || $thread['closed'] == 1 || ($expiretime < $now && $poll['timeout'] > 0) || $forumpermissions['canvotepolls'] != 1)

{

$showresults = 1;

}

if($forumpermissions['canvotepolls'] != 1)

{

$nopermission = 1;

}

// Check if the user has voted before...

if($mybb->user['uid'])

{

$user_check = "uid='{$mybb->user['uid']}'";

}

else

{

$user_check = "uid='0' AND ipaddress=".$db->escape_binary($session->packedip);

}

$query = $db->simple_select("pollvotes", "*", "{$user_check} AND pid='".$poll['pid']."'");

while($votecheck = $db->fetch_array($query))

{

$alreadyvoted = 1;

$votedfor[$votecheck['voteoption']] = 1;

}

$optionsarray = explode("||~|~||", $poll['options']);

$votesarray = explode("||~|~||", $poll['votes']);

$poll['question'] = htmlspecialchars_uni($poll['question']);

$polloptions = '';

$totalvotes = 0;

$poll['totvotes'] = 0;

for($i = 1; $i <= $poll['numoptions']; ++$i)

{

$poll['totvotes'] = $poll['totvotes'] + $votesarray[$i-1];

}

// Loop through the poll options.

for($i = 1; $i <= $poll['numoptions']; ++$i)

{

// Set up the parser options.

$parser_options = array(

"allow_html" => $forum['allowhtml'],

"allow_mycode" => $forum['allowmycode'],

"allow_smilies" => $forum['allowsmilies'],

"allow_imgcode" => $forum['allowimgcode'],

"allow_videocode" => $forum['allowvideocode'],

"filter_badwords" => 1

);

if($mybb->user['showimages'] != 1 && $mybb->user['uid'] != 0 || $mybb->settings['guestimages'] != 1 && $mybb->user['uid'] == 0)

{

$parser_options['allow_imgcode'] = 0;

}

if($mybb->user['showvideos'] != 1 && $mybb->user['uid'] != 0 || $mybb->settings['guestvideos'] != 1 && $mybb->user['uid'] == 0)

{

$parser_options['allow_videocode'] = 0;

}

$option = $parser->parse_message($optionsarray[$i-1], $parser_options);

$votes = $votesarray[$i-1];

$totalvotes += $votes;

$number = $i;

// Mark the option the user voted for.

if(!empty($votedfor[$number]))

{

$optionbg = "trow2";

$votestar = "*";

}

else

{

$optionbg = "trow1";

$votestar = "";

}

// If the user already voted or if the results need to be shown, do so; else show voting screen.

if(isset($alreadyvoted) || isset($showresults))

{

if((int)$votes == "0")

{

$percent = "0";

}

else

{

$percent = number_format($votes / $poll['totvotes'] * 100, 2);

}

$imagewidth = round($percent);

eval("\$polloptions .= \"".$templates->get("showthread_poll_resultbit")."\";");

}

else

{

if($poll['multiple'] == 1)

{

eval("\$polloptions .= \"".$templates->get("showthread_poll_option_multiple")."\";");

}

else

{

eval("\$polloptions .= \"".$templates->get("showthread_poll_option")."\";");

}

}

}

// If there are any votes at all, all votes together will be 100%; if there are no votes, all votes together will be 0%.

if($poll['totvotes'])

{

$totpercent = "100%";

}

else

{

$totpercent = "0%";

}

// Check if user is allowed to edit posts; if so, show "edit poll" link.

$edit_poll = '';

if(is_moderator($fid, 'canmanagepolls'))

{

eval("\$edit_poll = \"".$templates->get("showthread_poll_editpoll")."\";");

}

// Decide what poll status to show depending on the status of the poll and whether or not the user voted already.

if(isset($alreadyvoted) || isset($showresults) || isset($nopermission))

{

if($alreadyvoted)

{

$pollstatus = $lang->already_voted;

$undovote = '';

if($mybb->usergroup['canundovotes'] == 1)

{

eval("\$undovote = \"".$templates->get("showthread_poll_undovote")."\";");

}

}

elseif($nopermission)

{

$pollstatus = $lang->no_voting_permission;

}

else

{

$pollstatus = $lang->poll_closed;

}

$lang->total_votes = $lang->sprintf($lang->total_votes, $totalvotes);

eval("\$pollbox = \"".$templates->get("showthread_poll_results")."\";");

$plugins->run_hooks("showthread_poll_results");

}

else

{

$closeon = '&nbsp;';

if($poll['timeout'] != 0)

{

$closeon = $lang->sprintf($lang->poll_closes, my_date($mybb->settings['dateformat'], $expiretime));

}

$publicnote = '&nbsp;';

if($poll['public'] == 1)

{

$publicnote = $lang->public_note;

}

eval("\$pollbox = \"".$templates->get("showthread_poll")."\";");

$plugins->run_hooks("showthread_poll");

}

}

else

{

$pollbox = "";

}

// Create the forum jump dropdown box.

if($mybb->settings['enableforumjump'] != 0)

{

$forumjump = build_forum_jump("", $fid, 1);

}

// Fetch some links

$next_oldest_link = get_thread_link($tid, 0, "nextoldest");

$next_newest_link = get_thread_link($tid, 0, "nextnewest");

// Mark this thread as read

mark_thread_read($tid, $fid);

// If the forum is not open, show closed newreply button unless the user is a moderator of this forum.

$newthread = $newreply = '';

if($forum['open'] != 0 && $forum['type'] == "f")

{

if($forumpermissions['canpostthreads'] != 0 && $mybb->user['suspendposting'] != 1)

{

eval("\$newthread = \"".$templates->get("showthread_newthread")."\";");

}

// Show the appropriate reply button if this thread is open or closed

if($forumpermissions['canpostreplys'] != 0 && $mybb->user['suspendposting'] != 1 && ($thread['closed'] != 1 || is_moderator($fid, "canpostclosedthreads")) && ($thread['uid'] == $mybb->user['uid'] || $forumpermissions['canonlyreplyownthreads'] != 1))

{

eval("\$newreply = \"".$templates->get("showthread_newreply")."\";");

}

elseif($thread['closed'] == 1)

{

eval("\$newreply = \"".$templates->get("showthread_newreply_closed")."\";");

}

}

// Create the admin tools dropdown box.

if($ismod == true)

{

$closelinkch = $stickch = '';

if($thread['closed'] == 1)

{

$closelinkch = ' checked="checked"';

}

if($thread['sticky'])

{

$stickch = ' checked="checked"';

}

if(is_moderator($thread['fid'], "canopenclosethreads"))

{

eval("\$closeoption .= \"".$templates->get("showthread_quickreply_options_close")."\";");

}

if(is_moderator($thread['fid'], "canstickunstickthreads"))

{

eval("\$closeoption .= \"".$templates->get("showthread_quickreply_options_stick")."\";");

}

$inlinecount = "0";

$inlinecookie = "inlinemod_thread".$tid;

$plugins->run_hooks("showthread_ismod");

}

else

{

$modoptions = "&nbsp;";

$inlinemod = $closeoption = '';

}

// Increment the thread view.

if($mybb->settings['delayedthreadviews'] == 1)

{

$db->shutdown_query("INSERT INTO ".TABLE_PREFIX."threadviews (tid) VALUES('{$tid}')");

}

else

{

$db->shutdown_query("UPDATE ".TABLE_PREFIX."threads SET views=views+1 WHERE tid='{$tid}'");

}

++$thread['views'];

// Work out the thread rating for this thread.

$rating = '';

if($mybb->settings['allowthreadratings'] != 0 && $forum['allowtratings'] != 0)

{

$rated = 0;

$lang->load("ratethread");

if($thread['numratings'] <= 0)

{

$thread['width'] = 0;

$thread['averagerating'] = 0;

$thread['numratings'] = 0;

}

else

{

$thread['averagerating'] = (float)round($thread['totalratings']/$thread['numratings'], 2);

$thread['width'] = (int)round($thread['averagerating'])*20;

$thread['numratings'] = (int)$thread['numratings'];

}

if($thread['numratings'])

{

// At least >someone< has rated this thread, was it me?

// Check if we have already voted on this thread - it won't show hover effect then.

$query = $db->simple_select("threadratings", "uid", "tid='{$tid}' AND uid='{$mybb->user['uid']}'");

$rated = $db->fetch_field($query, 'uid');

}

$not_rated = '';

if(!$rated)

{

$not_rated = ' star_rating_notrated';

}

$ratingvotesav = $lang->sprintf($lang->rating_average, $thread['numratings'], $thread['averagerating']);

eval("\$ratethread = \"".$templates->get("showthread_ratethread")."\";");

}

// Work out if we are showing unapproved posts as well (if the user is a moderator etc.)

if($ismod && is_moderator($fid, "canviewdeleted") == true && is_moderator($fid, "canviewunapprove") == false)

{

$visible = "AND p.visible IN (-1,1)";

}

elseif($ismod && is_moderator($fid, "canviewdeleted") == false && is_moderator($fid, "canviewunapprove") == true)

{

$visible = "AND p.visible IN (0,1)";

}

elseif($ismod && is_moderator($fid, "canviewdeleted") == true && is_moderator($fid, "canviewunapprove") == true)

{

$visible = "AND p.visible IN (-1,0,1)";

}

elseif($forumpermissions['canviewdeletionnotice'] != 0 && $ismod == false)

{

$visible = "AND p.visible IN (-1,1)";

}

else

{

$visible = "AND p.visible='1'";

}

// Can this user perform searches? If so, we can show them the "Search thread" form

if($forumpermissions['cansearch'] != 0)

{

eval("\$search_thread = \"".$templates->get("showthread_search")."\";");

}

// Fetch the ignore list for the current user if they have one

$ignored_users = array();

if($mybb->user['uid'] > 0 && $mybb->user['ignorelist'] != "")

{

$ignore_list = explode(',', $mybb->user['ignorelist']);

foreach($ignore_list as $uid)

{

$ignored_users[$uid] = 1;

}

}

// Fetch profile fields to display on postbit

$pfcache = $cache->read('profilefields');

if(is_array($pfcache))

{

foreach($pfcache as $profilefield)

{

if($profilefield['postbit'] != 1)

{

continue;

}

$profile_fields[$profilefield['fid']] = $profilefield;

}

}

// Which thread mode is our user using by default?

if(!empty($mybb->user['threadmode']))

{

$defaultmode = $mybb->user['threadmode'];

}

else if($mybb->settings['threadusenetstyle'] == 1)

{

$defaultmode = 'threaded';

}

else

{

$defaultmode = 'linear';

}

// If mode is unset, set the default mode

if(!isset($mybb->input['mode']))

{

$mybb->input['mode'] = $defaultmode;

}

// Threaded or linear display?

$threadexbox = '';

if($mybb->get_input('mode') == 'threaded')

{

$isfirst = 1;

// Are we linked to a specific pid?

if($mybb->input['pid'])

{

$where = "AND p.pid='".$mybb->input['pid']."'";

}

else

{

$where = " ORDER BY dateline, pid LIMIT 0, 1";

}

$query = $db->query("

SELECT u.*, u.username AS userusername, p.*, f.*, r.reporters, eu.username AS editusername

FROM ".TABLE_PREFIX."posts p

LEFT JOIN ".TABLE_PREFIX."reportedcontent r ON (r.id=p.pid AND r.type='post' AND r.reportstatus != 1)

LEFT JOIN ".TABLE_PREFIX."users u ON (u.uid=p.uid)

LEFT JOIN ".TABLE_PREFIX."userfields f ON (f.ufid=u.uid)

LEFT JOIN ".TABLE_PREFIX."users eu ON (eu.uid=p.edituid)

WHERE p.tid='$tid' $visible $where

");

$showpost = $db->fetch_array($query);

// Choose what pid to display.

if(!$mybb->input['pid'])

{

$mybb->input['pid'] = $showpost['pid'];

}

// Is there actually a pid to display?

if(!$showpost['pid'])

{

error($lang->error_invalidpost);

}

$attachcache = array();

if($mybb->settings['enableattachments'] == 1 && $thread['attachmentcount'] > 0 || is_moderator($fid, 'caneditposts'))

{

// Get the attachments for this post.

$query = $db->simple_select("attachments", "*", "pid=".$mybb->input['pid']);

while($attachment = $db->fetch_array($query))

{

$attachcache[$attachment['pid']][$attachment['aid']] = $attachment;

}

}

// Build the threaded post display tree.

$query = $db->query("

SELECT p.username, p.uid, p.pid, p.replyto, p.subject, p.dateline

FROM ".TABLE_PREFIX."posts p

WHERE p.tid='$tid'

$visible

ORDER BY p.dateline, p.pid

");

if(!is_array($postsdone))

{

$postsdone = array();

}

while($post = $db->fetch_array($query))

{

if(!$postsdone[$post['pid']])

{

if($post['pid'] == $mybb->input['pid'] || ($isfirst && !$mybb->input['pid']))

{

$postcounter = count($postsdone);

$isfirst = 0;

}

$tree[$post['replyto']][$post['pid']] = $post;

$postsdone[$post['pid']] = 1;

}

}

$threadedbits = buildtree();

$posts = build_postbit($showpost);

eval("\$threadexbox = \"".$templates->get("showthread_threadedbox")."\";");

$plugins->run_hooks("showthread_threaded");

}

else // Linear display

{

$threadexbox = '';

if(!$mybb->settings['postsperpage'] || (int)$mybb->settings['postsperpage'] < 1)

{

$mybb->settings['postsperpage'] = 20;

}

// Figure out if we need to display multiple pages.

$page = 1;

$perpage = $mybb->settings['postsperpage'];

if($mybb->get_input('page', MyBB::INPUT_INT) && $mybb->get_input('page') != "last")

{

$page = $mybb->get_input('page', MyBB::INPUT_INT);

}

if(!empty($mybb->input['pid']))

{

$post = get_post($mybb->input['pid']);

if(empty($post) || ($post['visible'] == 0 && !is_moderator($post['fid'], 'canviewunapprove')) || ($post['visible'] == -1 && !is_moderator($post['fid'], 'canviewdeleted') && $forumpermissions['canviewdeletionnotice'] == 0))

{

$footer .= '<script type="text/javascript">$(function() { $.jGrowl(\''.$lang->error_invalidpost.'\', {theme: \'jgrowl_error\'}); });</script>';

}

else

{

$query = $db->query("

SELECT COUNT(p.dateline) AS count FROM ".TABLE_PREFIX."posts p

WHERE p.tid = '{$tid}'

AND p.dateline <= '{$post['dateline']}'

{$visible}

");

$result = $db->fetch_field($query, "count");

if(($result % $perpage) == 0)

{

$page = $result / $perpage;

}

else

{

$page = (int)($result / $perpage) + 1;

}

}

}

// Recount replies if user is a moderator or can see the deletion notice to take into account unapproved/deleted posts.

if($ismod || $forumpermissions['canviewdeletionnotice'] != 0)

{

$query = $db->simple_select("posts p", "COUNT(*) AS replies", "p.tid='$tid' $visible");

$cached_replies = $thread['replies']+$thread['unapprovedposts']+$thread['deletedposts'];

$thread['replies'] = $db->fetch_field($query, 'replies')-1;

// The counters are wrong? Rebuild them

// This doesn't cover all cases however it is a good addition to the manual rebuild function

if($thread['replies'] != $cached_replies)

{

require_once MYBB_ROOT."/inc/functions_rebuild.php";

rebuild_thread_counters($thread['tid']);

}

}

elseif($forumpermissions['canviewdeletionnotice'] != 0)

{

$thread['replies'] += $thread['deletedposts'];

}

$postcount = (int)$thread['replies']+1;

$pages = $postcount / $perpage;

$pages = ceil($pages);

if($mybb->get_input('page') == "last")

{

$page = $pages;

}

if($page > $pages || $page <= 0)

{

$page = 1;

}