Dragonfly CMS - German Community

// Displays comments for a specific picture
function html_comments($pid)
{
	global $CONFIG, $USER, $CURRENT_ALBUM_DATA, $username, $user_avatar,$FAVPICS,$CURRENT_PIC_DATA,$THEME_DIR;
	global $template_image_comments, $template_add_your_comment, $db;
	$html = '';
	if (!$CONFIG['enable_smilies']) {
		$tmpl_comment_edit_box = template_extract_block($template_image_comments, 'edit_box_no_smilies', '{EDIT}');
		template_extract_block($template_image_comments, 'edit_box_smilies');
		template_extract_block($template_add_your_comment, 'input_box_smilies');
	} else {
		$tmpl_comment_edit_box = template_extract_block($template_image_comments, 'edit_box_smilies', '{EDIT}');
		template_extract_block($template_image_comments, 'edit_box_no_smilies');
		template_extract_block($template_add_your_comment, 'input_box_no_smilies');
	}
	$tmpl_comments_buttons = template_extract_block($template_image_comments, 'buttons', '{BUTTONS}');
	$tmpl_comments_ipinfo = template_extract_block($template_image_comments, 'ipinfo', '{IPINFO}');
	$result = $db->sql_query("SELECT msg_id, msg_author, msg_body, msg_date, author_id, author_md5_id, msg_raw_ip, msg_hdr_ip FROM {$CONFIG['TABLE_COMMENTS']} WHERE pid='$pid' ORDER BY msg_id ASC",false, __FILE__,__LINE__);

while ($row = $db->sql_fetchrow($result)) {
		$user_can_edit = (GALLERY_ADMIN_MODE || (USER_ID > 1 && USER_ID == $row['author_id'] && USER_CAN_POST_COMMENTS) || (USER_ID < 2 && USER_CAN_POST_COMMENTS && $USER['ID'] == $row['author_md5_id']));
		$comment_buttons = $user_can_edit ? $tmpl_comments_buttons : '';
		$comment_edit_box = $user_can_edit ? $tmpl_comment_edit_box : '';
		$comment_ipinfo = ($row['msg_raw_ip'] && GALLERY_ADMIN_MODE)?$tmpl_comments_ipinfo : '';
		if ($CONFIG['enable_smilies']) {
			$comment_body = set_smilies(make_clickable($row['msg_body']));
			$smilies = smilies_table('onerow', 'msg_body', "f{$row['msg_id']}");
		} else {
			$comment_body = make_clickable($row['msg_body']);
			$smilies = '';
		}
		$params = array('{EDIT}' => &$comment_edit_box,
			'{BUTTONS}' => &$comment_buttons,
			'{IPINFO}' => &$comment_ipinfo
		);
		$template = template_eval($template_image_comments, $params);
		$info = '';
		if (!in_array($pid, $FAVPICS)) {
			$info = '<a href="' . getlink('&amp;file=addfav&amp;pid=' . $CURRENT_PIC_DATA['pid']) . '" >' . ADDFAV . '</a>';
		} else {
			$info = '<a href="' . getlink('&amp;file=addfav&amp;pid=' . $CURRENT_PIC_DATA['pid']) . '" >' . REMFAV . '</a>';
		}

//Comment Avatar

$poster_avatar = '';
	if ( $row['user_avatar_type'] && $row['user_allowavatar'] ) {
		switch( $row['user_avatar_type'] )
		{
			case "1":
				$poster_avatar = '<img src="uploads/avatars/' . $row['user_avatar'] . '" alt="" border="0" width="50"/><br/>';
				break;
			case "2":
				$poster_avatar = '<img src="' . $row['user_avatar'] . '" alt="" border="0" width="50"/><br/>';
				break;
			case "3":
				$poster_avatar = '<img src="/images/avatars/' . $row['user_avatar'] . '" alt="" border="0" width="50"/><br/>';
				break;
		}
	}

		$params = array('{MSG_AUTHOR}' => $row['msg_author'],
			'{MSG_ID}' => $row['msg_id'],
			'{MSG_TYPE}' => GALLERY_ADMIN_MODE ? 'text' : 'hidden',
			'{EDIT_TITLE}' => COM_EDIT_TITLE,
			'{CONFIRM_DELETE}' => CONFIRM_DELETE_COM,
			'{DELETE_LINK}' => getlink("&file=delete"),
			'{DELETE_TEXT}' => DELETE.' '.COMMENT,
			'{MSG_DATE}' => localised_date($row['msg_date'], COMMENT_DATE_FMT),
			'{MSG_BODY}' => &$comment_body,
			'{MSG_AVATAR}' => &$poster_avatar,
			'{MSG_BODY_RAW}' => $row['msg_body'],
			'{OK}' => OK,
			'{SMILIES}' => $smilies,
			'{HDR_IP}' => decode_ip($row['msg_hdr_ip']),
			'{RAW_IP}' => decode_ip($row['msg_raw_ip']),
			'{ACTION}' => 'action="'.getlink('&file=db_input').'" enctype="multipart/form-data" accept-charset="utf-8"',
			'{ADDFAVLINK}' => getlink("&file=addfav&pid=$pid"),
			'{ADDFAVTEXT}' => $info,
			'{THEMEDIR}' => $THEME_DIR,

		);
		$html .= template_eval($template, $params);
	}
	if (USER_CAN_POST_COMMENTS && $CURRENT_ALBUM_DATA['comments']) {
		if (USER_ID > 1) {
			$username_input = '<input type="hidden" name="msg_author" value="' . CPG_USERNAME . '" />';
			template_extract_block($template_add_your_comment, 'username_input', $username_input);
			// $username = '';
		} else {
			$username = isset($USER['name']) ? '"' . htmlprepare($USER['name']) . '"' : '"' . YOUR_NAME . '" onclick="javascript:this.value=\'\';"';
		}
		if (!in_array($pid, $FAVPICS)) {
			$info = '<a href="' . getlink('&amp;file=addfav&amp;pid=' . $CURRENT_PIC_DATA['pid']) . '" >' . ADDFAV . '</a>';
		} else {
			$info = '<a href="' . getlink('&amp;file=addfav&amp;pid=' . $CURRENT_PIC_DATA['pid']) . '" >' . REMFAV . '</a>';
		}
		$params = array('{ADD_YOUR_COMMENT}' => ADD_YOUR_COMMENT,
			// Modified Name and comment field
			'{NAME}' => COM_NAME,
			'{COMMENT}' => COMMENT,
			'{PIC_ID}' => $pid,
			'{username}' => $username,
			'{MAX_COM_LENGTH}' => $CONFIG['max_com_size'],
			'{OK}' => OK,
			'{SMILIES}' => '',
			'{ACTION}' => 'action="'.getlink("&file=db_input").'" enctype="multipart/form-data" accept-charset="utf-8"',
			'{ADDFAVLINK}' => getlink("&file=addfav&pid=$pid"),
			'{ADDFAVTEXT}' => $info

		);
		if ($CONFIG['enable_smilies']) $params['{SMILIES}'] = smilies_table('onerow', 'message', 'post');
//		if ($CONFIG['enable_smilies']) $params['{SMILIES}'] = generate_smilies();
		$html .= template_eval($template_add_your_comment, $params);
	}
	if (USER_ID > 1 or $CONFIG['allow_anon_fullsize'] or USER_IS_ADMIN) {
		return $html;
	}
}