Changeset 2860 for trunk/bb-edit.php

Timestamp:

02/10/2011 08:33:59 AM (15 years ago)

Author:

johnjamesjacoby

Message:

Add ability for capable users to edit anonymous topic/post user data. Fixes #1463.

File:

• trunk/bb-edit.php (modified) (2 diffs)

trunk/bb-edit.php

@@ -6 +6 @@
 $post_id = (int) $_POST['post_id'];
 
-$bb_post  = bb_get_post( $post_id );
+$bb_post = bb_get_post( $post_id );
 
 if ( !$bb_post ) {
@@ -21 +21 @@
     add_filter('bb_is_first_where', 'bb_no_where');
 
-if ( bb_is_first( $bb_post->post_id ) && bb_current_user_can( 'edit_topic', $bb_post->topic_id ) ) {
-    bb_insert_topic( array(
-        'topic_title' => stripslashes( $_POST['topic'] ),
-        'topic_id' => $bb_post->topic_id
-    ) );
+// Check possible anonymous user data
+$post_author = $post_email = $post_url = '';
+
+if ( !bb_get_user( get_post_author_id( $post_id ) ) ) {
+    if ( !$post_author = sanitize_user( trim( $_POST['author'] ) ) )
+        bb_die( __( 'Every post needs an author name!' ) );
+    elseif ( !$post_email = sanitize_email( trim( $_POST['email'] ) ) )
+        bb_die( __( 'Every post needs a valid email address!' ) );
+
+    if ( !empty( $_POST['url'] ) )
+        $post_url = esc_url( trim( $_POST['url'] ) );
 }
 
-bb_insert_post( array(
-    'post_text' => stripslashes( $_POST['post_content'] ),
-    'post_id' => $post_id,
-    'topic_id' => $bb_post->topic_id
-) );
+// Loop through possible anonymous post data
+foreach( array('post_author', 'post_email', 'post_url') as $field ) {
+    if ( ! empty( $$field ) ) {
+        $post_data[$field] = $$field;
+    }
+}
+
+// Setup topic data
+if ( bb_is_first( $bb_post->post_id ) && bb_current_user_can( 'edit_topic', $bb_post->topic_id ) ) {
+
+    $post_data['topic_title'] = stripslashes( $_POST['topic'] );
+    $post_data['topic_id']    = $bb_post->topic_id;
+
+    bb_insert_topic( $post_data );
+}
+
+// Setup post data
+$post_data['post_text'] = stripslashes( $_POST['post_content'] );
+$post_data['post_id']   = $post_id;
+
+bb_insert_post( $post_data );
 
 if ( $post_id ) {