<?php

/************************************************************************/
/* PHP-NUKE: Web Portal System                                          */
/* ===========================                                          */
/*                                                                      */
/* Copyright (c) 2002 by Francisco Burzi                                */
/* http://phpnuke.org                                                   */
/*                                                                      */
/* This program is free software. You can redistribute it and/or modify */
/* it under the terms of the GNU General Public License as published by */
/* the Free Software Foundation; either version 2 of the License.       */
/************************************************************************/
/*         Additional security & Abstraction layer conversion           */
/*                           2003 chatserv                              */
/*      http://www.nukefixes.com -- http://www.nukeresources.com        */
/************************************************************************/

if ( !defined('MODULE_FILE') )
{
   die("You can't access this file directly...");
}
//@require_once("mainfile.php");
$module_name = basename(dirname(__FILE__));
get_lang($module_name);
$pagetitle = "- "._SURVEYS."";

function format_url($comment) {
    global $nukeurl;
    unset($location);
    $comment = $comment;
    $links = array();
    $hrefs = array();
    $pos = 0;
    while (!(($pos = strpos($comment,"<",$pos)) === false)) {
   $pos++;
   $endpos = strpos($comment,">",$pos);
   $tag = substr($comment,$pos,$endpos-$pos);
   $tag = trim($tag);
   if (isset($location)) {
           if (!strcasecmp(strtok($tag," "),"/A")) {
           $link = substr($comment,$linkpos,$pos-1-$linkpos);
           $links[] = $link;
           $hrefs[] = $location;
           unset($location);
           }
       $pos = $endpos+1;
   } else {
       if (!strcasecmp(strtok($tag," "),"A")) {
      if (eregi("HREF[ \t\n\r\v]*=[ \t\n\r\v]*\"([^\"]*)\"",$tag,$regs));
      else if (eregi("HREF[ \t\n\r\v]*=[ \t\n\r\v]*([^ \t\n\r\v]*)",$tag,$regs));
      else $regs[1] = "";
      if ($regs[1]) {
              $location = $regs[1];
      }
      $pos = $endpos+1;
      $linkpos = $pos;
       } else {
      $pos = $endpos+1;
       }
   }
    }
    for ($i=0; $i<sizeof($links); $i++) {
   if (!eregi("://", $hrefs[$i])) {
       $hrefs[$i] = $nukeurl;
   } elseif (!eregi("mailto://", $hrefs[$i])) {
       $href = explode("/",$hrefs[$i]);
       $href = " [$href[2]]";
       $comment = ereg_replace(">$links[$i]</a>", " title='$hrefs[$i]'> $links[$i]</a>$href", $comment);
   }
    }
    return($comment);
}

function modone() {
   global $admin, $moderate, $module_name;
   if(((isset($admin)) && ($moderate == 1)) || ($moderate==2)) echo "<form action=\"modules.php?name=$module_name&amp;file=comments\" method=\"post\">";
}

function modtwo($tid, $score, $reason) {
   global $admin, $user, $moderate, $reasons;
   if((((isset($admin)) && ($moderate == 1)) || ($moderate == 2)) && ($user)) {
      echo " | <select name=dkn$tid>";
      for($i=0; $i<sizeof($reasons); $i++) {
         echo "<option value=\"$score:$i\">$reasons[$i]</option>\n";
      }
      echo "</select>";
   }
}

function modthree($pollID, $mode, $order, $thold=0) {
   global $admin, $user, $moderate;
   if((((isset($admin)) && ($moderate == 1)) || ($moderate==2)) && ($user)) echo "<center><input type=hidden name=pollID value=$pollID><input type=hidden name=mode value=$mode><input type=hidden name=order value=$order><input type=hidden name=thold value=$thold>
   <input type=hidden name=op value=moderate>
   <input type=image src=images/menu/moderate.gif border=0></form></center>";
}

function navbar($pollID, $title, $thold, $mode, $order) {
    global $user, $bgcolor1, $bgcolor2, $textcolor1, $textcolor2, $anonpost, $pollcomm, $prefix, $db, $module_name;
    OpenTable();
    $pollID = intval($pollID);
    $query = $db->sql_query("SELECT pollID FROM ".$prefix."_pollcomments where pollID='$pollID'");
    if(!$query) $count = 0; else $count = $db->sql_numrows($query);
    $row = $db->sql_fetchrow($db->sql_query("SELECT pollTitle from ".$prefix."_poll_desc where pollID='$pollID'"));
    $title = stripslashes(check_html($row['pollTitle'], "nohtml"));
    if(!isset($thold)) $thold=0;
    echo "\n\n<!-- COMMENTS NAVIGATION BAR START -->\n\n";
    echo "<table width=\"99%\" border=\"0\" cellspacing=\"1\" cellpadding=\"2\">\n";
    if($title) {
   echo "<tr><td bgcolor=\"$bgcolor2\" align=\"center\"><font class=\"content\" color=\"$textcolor1\">\"$title\" | ";
       if(is_user($user)) {
      echo "<a href=\"account.html&amp;op=editcomm\"><font color=\"$textcolor1\">"._CONFIGURE."</font></a>";
       } else {
      echo "<a href=\"account.html\"><font color=\"$textcolor1\">"._LOGINCREATE."</font></a>";
       }
       if(($count==1)) {
           echo " | <B>$count</B> "._COMMENT."</font></td></tr>\n";
       } else {
           echo " | <B>$count</B> "._COMMENTS."</font></td></tr>\n";
       }
    }
    echo "<tr><td bgcolor=\"$bgcolor1\" align=\"center\" width=\"100%\">\n";
    cookiedecode($user);
    if (($pollcomm) AND ($mode != "nocomments")) {
   if ($anonpost==1 OR is_admin($admin) OR is_user($user)) {
       echo "<form action=\"modules.php?name=$module_name&amp;file=comments\" method=\"post\">"
      ."<input type=\"hidden\" name=\"pid\" value=\"$pid\">"
      ."<input type=\"hidden\" name=\"pollID\" value=\"$pollID\">"
      ."<input type=\"hidden\" name=\"op\" value=\"Reply\">"
      ."<input type=\"submit\" value=\""._REPLYMAIN."\"></td></form></tr>";
   }
    }
    echo "<tr><td bgcolor=\"$bgcolor2\" align=\"center\"><font class=\"tiny\">"._COMMENTSWARNING."</font></td></tr>\n"
     ."</table>"
     ."\n\n<!-- COMMENTS NAVIGATION BAR END -->\n\n";
    CloseTable();
    if ($anonpost == 0 AND !is_user($user)) {
        echo "<br>";
     OpenTable();
     echo "<center>"._NOANONCOMMENTS."</center>";
     CloseTable();
    }
}

function DisplayKids ($tid, $mode, $order=0, $thold=0, $level=0, $dummy=0, $tblwidth=99) {
   global $datetime, $user, $cookie, $bgcolor1, $reasons, $anonymous, $anonpost, $commentlimit, $prefix, $module_name, $db;
   $comments = 0;
   cookiedecode($user);
        $tid = intval($tid);
   $result = $db->sql_query("SELECT tid, pid, pollID, date, name, email, host_name, subject, comment, score, reason from ".$prefix."_pollcomments where pid = '$tid' order by date, tid");
   if ($mode == 'nested') {
      /* without the tblwidth variable, the tables run off the screen with netscape
         in nested mode in long threads so the text can't be read. */
   while($row = $db->sql_fetchrow($result)) {
                        $r_tid = intval($row['tid']);
                        $r_pid = intval($row['pid']);
                        $r_pollID = intval($row['pollID']);
                        $r_date = $row['date'];
                        $r_name = stripslashes($row['name']);
                        $r_email = stripslashes($row['email']);
                        $r_host_name = $row['host_name'];
                        $r_subject = stripslashes(check_html($row['subject'], "nohtml"));
                        $r_comment = stripslashes($row['comment']);
                        $r_score = intval($row['score']);
                        $r_reason = intval($row['reason']);
         if($r_score >= $thold) {
            if (!isset($level)) {
            } else {
               if (!$comments) {
                  echo "<ul>";
                  $tblwidth -= 5;
               }
            }
            $comments++;
            if (!eregi("[a-z0-9]",$r_name)) $r_name = $anonymous;
            if (!eregi("[a-z0-9]",$r_subject)) $r_subject = "["._NOSUBJECT."]";
         // enter hex color between first two appostrophe for second alt bgcolor
            $r_bgcolor = ($dummy%2)?"":"#E6E6D2";
            echo "<a name=\"$r_tid\">";
            echo "<table width=90% border=0><tr bgcolor=\"$r_bgcolor\"><td>";
            formatTimestamp($r_date);
            if ($r_email) {
               echo "<p><b>$r_subject</b> <font class=content>";
               if(!$cookie[7]) {
                  echo "("._SCORE." $r_score";
                  if($r_reason>0) echo ", $reasons[$r_reason]";
                  echo ")";
               }
               echo "<br>"._BY." <a href=\"mailto:$r_email\">$r_name</a> <font class=content><b>($r_email)</b></font> "._ON." $datetime";
            } else {
               echo "<p><b>$r_subject</b> <font class=content>";
               if(!$cookie[7]) {
                  echo "("._SCORE." $r_score";
                  if($r_reason>0) echo ", $reasons[$r_reason]";
                  echo ")";
               }
               echo "<br>"._BY." $r_name "._ON." $datetime";
            }         
            if ($r_name != $anonymous) {
                $row2 = $db->sql_fetchrow($db->sql_query("SELECT user_id FROM ".$prefix."_users WHERE username='$r_name'"));
                $r_uid = intval($row2['user_id']);
                echo "<BR>(<a href=\"account.html&amp;op=userinfo&amp;username=$r_name\">"._USERINFO."</a> | <a href=\"modules.php?name=Private_Messages&amp;mode=post&amp;u=$r_uid\">"._SENDAMSG."</a>) ";
            }
            $row_url = $db->sql_fetchrow($db->sql_query("SELECT user_website FROM ".$prefix."_users WHERE username='$r_name'"));
            $url = stripslashes($row_url['user_website']);
            if ($url != "http://" AND $url != "" AND eregi("http://", $url)) { echo "<a href=\"$url\" target=\"new\">$url</a> "; }
            echo "</font></td></tr><tr><td>";
            if(($cookie[10]) && (strlen($r_comment) > $cookie[10])) echo substr("$r_comment", 0, $cookie[10])."<br><br><b><a href=\"modules.php?name=$module_name&amp;file=comments&amp;pollID=$r_pollID&amp;tid=$r_tid&amp;mode=$mode&amp;order=$order&amp;thold=$thold\">"._READREST."</a></b>";
            elseif(strlen($r_comment) > $commentlimit) echo substr("$r_comment", 0, $commentlimit)."<br><br><b><a href=\"modules.php?name=$module_name&amp;file=comments&amp;pollID=$r_pollID&amp;tid=$r_tid&amp;mode=$mode&amp;order=$order&amp;thold=$thold\">"._READREST."</a></b>";
            else echo $r_comment;
            echo "</td></tr></table><br><p>";
            if ($anonpost==1 OR is_admin($admin) OR is_user($user)) {
                echo "<font class=content color=\"$bgcolor2\"> [ <a href=\"modules.php?name=$module_name&amp;file=comments&amp;op=Reply&amp;pid=$r_tid&amp;pollID=$r_pollID&amp;mode=$mode&amp;order=$order&amp;thold=$thold\">"._REPLY."</a>";
            }
            modtwo($r_tid, $r_score, $r_reason);
            echo " ]</font><p>";
            DisplayKids($r_tid, $mode, $order, $thold, $level+1, $dummy+1, $tblwidth);
         }
      }
   } elseif ($mode == 'flat') {
   while($row = $db->sql_fetchrow($result)) {
                        $r_tid = intval($row['tid']);
                        $r_pid = intval($row['pid']);
                        $r_pollID = intval($row['pollID']);
                        $r_date = $row['date'];
                        $r_name = stripslashes($row['name']);
                        $r_email = stripslashes($row['email']);
                        $r_host_name = $row['host_name'];
                        $r_subject = stripslashes(check_html($row['subject'], "nohtml"));
                        $r_comment = stripslashes($row['comment']);
                        $r_score = intval($row['score']);
                        $r_reason = intval($row['reason']);
         if($r_score >= $thold) {
            if (!eregi("[a-z0-9]",$r_name)) $r_name = $anonymous;
            if (!eregi("[a-z0-9]",$r_subject)) $r_subject = "["._NOSUBJECT."]";
            echo "<a name=\"$r_tid\">";
            echo "<hr><table width=99% border=0><tr bgcolor=\"$bgcolor1\"><td>";
            formatTimestamp($r_date);
            if ($r_email) {
               echo "<p><b>$r_subject</b> <font class=content>";
               if(!$cookie[7]) {
                  echo "("._SCORE." $r_score";
                  if($r_reason>0) echo ", $reasons[$r_reason]";
                  echo ")";
               }
               echo "<br>"._BY." <a href=\"mailto:$r_email\">$r_name</a> <font class=content><b>($r_email)</b></font> "._ON." $datetime";
            } else {
               echo "<p><b>$r_subject</b> <font class=content>";
               if(!$cookie[7]) {
                  echo "("._SCORE." $r_score";
                  if($r_reason>0) echo ", $reasons[$r_reason]";
                  echo ")";
               }
               echo "<br>"._BY." $r_name "._ON." $datetime";
            }         
            if ($r_name != $anonymous) {
                $row3 = $db->sql_fetchrow($db->sql_query("SELECT user_id FROM ".$prefix."_users WHERE username='$r_name'"));
                $ruid = intval($row3['user_id']);
                echo "<BR>(<a href=\"account.html&amp;op=userinfo&amp;username=$r_name\">"._USERINFO."</a> | <a href=\"modules.php?name=Private_Messages&amp;mode=post&amp;u=$ruid\">"._SENDAMSG."</a>) ";
            }
            $row_url2 = $db->sql_fetchrow($db->sql_query("SELECT user_website FROM ".$prefix."_users WHERE username='$r_name'"));
            $url = $row_url2['user_website'];
            if ($url != "http://" AND $url != "" AND eregi("http://", $url)) { echo "<a href=\"$url\" target=\"new\">$url</a> "; }
            echo "</font></td></tr><tr><td>";
            if(($cookie[10]) && (strlen($r_comment) > $cookie[10])) echo substr("$r_comment", 0, $cookie[10])."<br><br><b><a href=\"modules.php?name=$module_name&amp;file=comments&amp;pollID=$r_pollID&amp;tid=$r_tid&amp;mode=$mode&amp;order=$order&amp;thold=$thold\">"._READREST."</a></b>";
            elseif(strlen($r_comment) > $commentlimit) echo substr("$r_comment", 0, $commentlimit)."<br><br><b><a href=\"modules.php?name=$module_name&amp;file=comments&amp;pollID=$r_pollID&amp;tid=$r_tid&amp;mode=$mode&amp;order=$order&amp;thold=$thold\">"._READREST."</a></b>";
            else echo $r_comment;
            echo "</td></tr></table><br><p><font class=content color=\"$bgcolor2\"> [ <a href=\"modules.php?name=$module_name&amp;file=comments&amp;op=Reply&amp;pid=$r_tid&amp;pollID=$r_pollID&amp;mode=$mode&amp;order=$order&amp;thold=$thold\">"._REPLY."</a>";
            modtwo($r_tid, $r_score, $r_reason);
            echo " ]</font><p>";
            DisplayKids($r_tid, $mode, $order, $thold);
         }
      }
   } else {
   while($row = $db->sql_fetchrow($result)) {
                        $r_tid = intval($row['tid']);
                        $r_pid = intval($row['pid']);
                        $r_pollID = intval($row['pollID']);
                        $r_date = $row['date'];
                        $r_name = stripslashes($row['name']);
                        $r_email = stripslashes($row['email']);
                        $r_host_name = $row['host_name'];
                        $r_subject = stripslashes(check_html($row['subject'], "nohtml"));
                        $r_comment = stripslashes($row['comment']);
                        $r_score = intval($row['score']);
                        $r_reason = intval($row['reason']);
         if($r_score >= $thold) {
            if (!isset($level)) {
            } else {
               if (!$comments) {
                  echo "<ul>";
               }
            }
            $comments++;
            if (!eregi("[a-z0-9]",$r_name)) $r_name = $anonymous;
            if (!eregi("[a-z0-9]",$r_subject)) $r_subject = "["._NOSUBJECT."]";
            formatTimestamp($r_date);
            echo "<li><font class=\"content\"><a href=\"modules.php?name=$module_name&amp;file=comments&amp;op=showreply&amp;tid=$r_tid&amp;pollID=$r_pollID&amp;pid=$r_pid&amp;mode=$mode&amp;order=$order&amp;thold=$thold#$r_tid\">$r_subject</a> "._BY." $r_name "._ON." $datetime</font><br>";
            DisplayKids($r_tid, $mode, $order, $thold, $level+1, $dummy+1);
         }
      }
   }
   if ($level && $comments) {
      echo "</ul>";
   }

}

function DisplayBabies ($tid, $level=0, $dummy=0) {
   global $datetime, $anonymous, $prefix, $db, $module_name;
   $comments = 0;
        $tid = intval($tid);
   $result = $db->sql_query("SELECT tid, pid, pollID, date, name, email, host_name, subject, comment, score, reason from ".$prefix."_pollcomments where pid = '$tid' order by date, tid");
   while($row = $db->sql_fetchrow($result)) {
                        $r_tid = intval($row['tid']);
                        $r_pid = intval($row['pid']);
                        $r_pollID = intval($row['pollID']);
                        $r_date = $row['date'];
                        $r_name = stripslashes($row['name']);
                        $r_email = stripslashes($row['email']);
                        $r_host_name = $row['host_name'];
                        $r_subject = stripslashes(check_html($row['subject'], "nohtml"));
                        $r_comment = stripslashes($row['comment']);
                        $r_score = intval($row['score']);
                        $r_reason = intval($row['reason']);
      if (!isset($level)) {
      } else {
         if (!$comments) {
            echo "<ul>";
         }
      }
      $comments++;
      if (!eregi("[a-z0-9]",$r_name)) { $r_name = $anonymous; }
      if (!eregi("[a-z0-9]",$r_subject)) { $r_subject = "["._NOSUBJECT."]"; }
      formatTimestamp($r_date);
      echo "<a href=\"modules.php?name=$module_name&amp;file=comments&amp;op=showreply&amp;tid=$r_tid&amp;mode=$mode&amp;order=$order&amp;thold=$thold\">$r_subject</a><font class=\"content\"> "._BY." $r_name "._ON." $datetime<br>";
      DisplayBabies($r_tid, $level+1, $dummy+1);
   }
   if ($level && $comments) {
      echo "</ul>";
   }
}

function DisplayTopic ($pollID, $pid=0, $tid=0, $mode="thread", $order=0, $thold=0, $level=0, $nokids=0) {
   global $hr, $user, $datetime, $cookie, $mainfile, $admin, $commentlimit, $anonymous, $reasons, $anonpost, $foot1, $foot2, $foot3, $foot4, $prefix, $module_name, $db, $admin_file;
   if($mainfile) {
      global $title, $bgcolor1, $bgcolor2, $bgcolor3;
   } else {
      global $title, $bgcolor1, $bgcolor2, $bgcolor3;
      @include("mainfile.php");
      @include("header.php");
   }
   if ($pid!=0) {
       @include("header.php");
   }
   $count_times = 0;
   cookiedecode($user);
   $q = "select tid, pid, pollID, date, name, email, host_name, subject, comment, score, reason from ".$prefix."_pollcomments where pollID='$pollID' and pid='$pid'";
   if($thold != "") {
      $q .= " and score>='$thold'";
   } else {
      $q .= " and score>='0'";
   }
   if ($order==1) $q .= " order by date desc";
   if ($order==2) $q .= " order by score desc";
   $something = $db->sql_query($q);
   $num_tid = $db->sql_numrows($something);
   navbar($pollID, $title, $thold, $mode, $order);
   modone();
   while ($count_times < $num_tid) {
       echo "<br>";
       OpenTable();
      $row_q = $db->sql_fetchrow($something);
      $tid = intval($row_q['tid']);
      $pid = intval($row_q['pid']);
      $pollID = intval($row_q['pollID']);
      $date = $row_q['date'];
      $c_name = stripslashes($row_q['name']);
      $email = stripslashes($row_q['email']);
      $host_name = $row_q['host_name'];
      $subject = stripslashes(check_html($row_q['subject'], "nohtml"));
      $comment = stripslashes($row_q['comment']);
      $score = intval($row_q['score']);
      $reason = intval($row_q['reason']);
      if ($c_name == "") { $c_name = $anonymous; }
      if ($subject == "") { $subject = "["._NOSUBJECT."]"; }   
      echo "<a name=\"$tid\">";
      echo "<table width=99% border=0><tr bgcolor=\"$bgcolor1\"><td width=500>";
      formatTimestamp($date);
      if ($email) {
         echo "<p><b>$subject</b> <font class=content>";
         if(!$cookie[7]) {
            echo "("._SCORE." $score";
            if($reason>0) echo ", $reasons[$reason]";
            echo ")";
         }
         echo "<br>"._BY." <a href=\"mailto:$email\">$c_name</a> <b>($email)</b> "._ON." $datetime";
      } else {
         echo "<p><b>$subject</b> <font class=content>";
         if(!$cookie[7]) {
            echo "("._SCORE." $score";
            if($reason>0) echo ", $reasons[$reason]";
            echo ")";
         }
         echo "<br>"._BY." $c_name "._ON." $datetime";
      }         
      
    // If you are admin you can see the Poster IP address (you have this right, no?)
    // with this you can see who is flaming you... ha-ha-ha

   if (is_active("Journal")) {
       $row = $db->sql_fetchrow($db->sql_query("SELECT jid from ".$prefix."_journal where aid='$c_name' AND status='yes' order by pdate,jid DESC limit 0,1"));
       $jid = intval($row['jid']);
       if ($jid != "" AND isset($jid)) {
      $journal = " | <a href=\"modules.php?name=Journal&amp;file=display&amp;jid=$jid\">"._JOURNAL."</a>";
       } else {
      $journal = "";
       }
   }
      if ($c_name != $anonymous) {
          $row2 = $db->sql_fetchrow($db->sql_query("SELECT user_id FROM ".$prefix."_users WHERE username='$c_name'"));
          $r_uid = intval($row2['user_id']);
          echo "<br>(<a href=\"account.html&amp;op=userinfo&amp;username=$c_name\">"._USERINFO."</a> | <a href=\"modules.php?name=Private_Messages&amp;mode=post&amp;u=$r_uid\">"._SENDAMSG."</a>$journal) ";
      }
      $row_url = $db->sql_fetchrow($db->sql_query("SELECT user_website FROM ".$prefix."_users WHERE username='$c_name'"));
      $url = stripslashes($row_url['user_website']);
      if ($url != "http://" AND $url != "" AND eregi("http://", $url)) { echo "<a href=\"$url\" target=\"new\">$url</a> "; }
      
      if(is_admin($admin)) {
          $row3 = $db->sql_fetchrow($db->sql_query("SELECT host_name from ".$prefix."_pollcomments where tid='$tid'"));
          $host_name = $row3['host_name'];
          echo "<br><b>(IP: $host_name)</b>";
      }
      
      echo "</font></td></tr><tr><td>";
      if(($cookie[10]) && (strlen($comment) > $cookie[10])) echo substr("$comment", 0, $cookie[10])."<br><br><b><a href=\"modules.php?name=$module_name&amp;file=comments&amp;pollID=$pollID&amp;tid=$tid&amp;mode=$mode&amp;order=$order&amp;thold=$thold\">"._READREST."</a></b>";
      elseif(strlen($comment) > $commentlimit) echo substr("$comment", 0, $commentlimit)."<br><br><b><a href=\"modules.php?name=$module_name&amp;file=comments&amp;pollID=$pollID&tid=$tid&mode=$mode&order=$order&thold=$thold\">"._READREST."</a></b>";
      else echo $comment;
      echo "</td></tr></table><br><p>";
      if ($anonpost==1 OR is_admin($admin) OR is_user($user)) {
          echo "<font class=\"content\"> [ <a href=\"modules.php?name=$module_name&amp;file=comments&amp;op=Reply&amp;pid=$tid&amp;pollID=$pollID&amp;mode=$mode&amp;order=$order&amp;thold=$thold\">"._REPLY."</a>";
      }
      if ($pid != 0) {
          $row4 = $db->sql_fetchrow($db->sql_query("SELECT pid from ".$prefix."_pollcomments where tid='$pid'"));
          $erin = intval($row4['pid']);
         echo "| <a href=\"modules.php?name=$module_name&amp;file=comments&amp;pollID=$pollID&amp;pid=$erin&amp;mode=$mode&amp;order=$order&amp;thold=$thold\">"._PARENT."</a>";
      }
      modtwo($tid, $score, $reason);
      
      if(is_admin($admin)) {
          echo " | <a href=\"".$admin_file.".php?op=RemovePollComment&amp;tid=$tid&amp;pollID=$pollID\">"._DELETE."</a> ]</font><p>";
      } elseif ($anonpost != 0 OR is_admin($admin) OR is_user($user)) {
          echo " ]</font><p>";
      }
      
      DisplayKids($tid, $mode, $order, $thold, $level);
      echo "</ul>";
      if($hr) echo "<hr noshade size=1>";
      echo "</p>";
      $count_times += 1;
       CloseTable();
   }
   modthree($pollID, $mode, $order, $thold);
   if($pid==0) return array($pollID, $pid, $subject);
   else @include("footer.php");
}

function singlecomment($tid, $pollID, $mode, $order, $thold) {
   @include("header.php");
   global $user, $cookie, $datetime, $bgcolor1, $bgcolor2, $bgcolor3, $anonpost, $admin, $anonymous, $prefix, $db, $module_name;
        $tid = intval($tid);
        $pollID = intval($pollID);
   $row = $db->sql_fetchrow($db->sql_query("SELECT date, name, email, subject, comment, score, reason from ".$prefix."_pollcomments where tid='$tid' and pollID='$pollID'"));
   $date = $row['date'];
   $name = stripslashes($row['name']);
   $email = stripslashes($row['email']);
   $subject = stripslashes(check_html($row['subject'], "nohtml"));
   $comment = stripslashes($row['comment']);
   $score = intval($row['score']);
   $reason = intval($row['reason']);
   $titlebar = "<b>$subject</b>";
   if($name == "") $name = $anonymous;
   if($subject == "") $subject = "["._NOSUBJECT."]";
   modone();
   echo "<table width=99% border=0><tr bgcolor=\"$bgcolor1\"><td width=500>";
   formatTimestamp($date);
   if($email) echo "<p><b>$subject</b> <font class=content>("._SCORE." $score)<br>"._BY." <a href=\"mailto:$email\"><font color=\"$bgcolor2\">$name</font></a> <font class=content><b>($email)</b></font> "._ON." $datetime";
   else echo "<p><b>$subject</b> <font class=content>("._SCORE." $score)<br>"._BY." $name "._ON." $datetime";
   echo "</td></tr><tr><td>$comment</td></tr></table><br><p><font class=content color=\"$bgcolor2\"> [ <a href=\"modules.php?name=$module_name&amp;file=comments&amp;op=Reply&pid=$tid&pollID=$pollID&mode=$mode&order=$order&thold=$thold\">"._REPLY."</a> | <a href=\"modules.php?name=$module_name&amp;pollID=$pollID\">"._ROOT."</a>";
   modtwo($tid, $score, $reason);
   echo " ]";
   modthree($pollID, $mode, $order, $thold);
   @include("footer.php");
}

function reply ($pid, $pollID, $mode, $order, $thold) {
    @include("header.php");
    global $user, $cookie, $datetime, $bgcolor1, $bgcolor2, $bgcolor3, $AllowableHTML, $anonymous, $prefix, $anonpost, $dbi, $module_name, $db;
    $pid = intval($pid);
    $pollID = intval($pollID);
    $order = htmlentities($order);
    $thold = htmlentities($thold);
    $mode = htmlentities($mode);
    if ($anonpost == 0 AND !is_user($user)) {
   OpenTable();
   echo "<center><font class=title><b>"._SURVEYCOM."</b></font></center>";
   CloseTable();
   echo "<br>";
   OpenTable();
   echo "<center>"._NOANONCOMMENTS."<br><br>"._GOBACK."</center>";
   CloseTable();
    } else {
   if($pid!=0) {
      list($date, $name, $email, $subject, $comment, $score) = $db->sql_fetchrow($db->sql_query("select date, name, email, subject, comment, score from ".$prefix."_pollcomments where tid='$pid'"));
                $score = intval($score);
   } else {
      list($subject) = $db->sql_fetchrow($db->sql_query("select pollTitle FROM ".$prefix."_poll_desc where pollID='$pollID'"));
   }
   if($comment == "") {
       $comment = $temp_comment;
   }
   $titlebar = "<b>$subject</b>";
   if($name == "") $name = $anonymous;
   if($subject == "") $subject = "["._NOSUBJECT."]";
   formatTimestamp($date);
   OpenTable();
   echo "<center><font class=\"title\"><b>"._SURVEYCOM."</b></font></center>";
   CloseTable();
   echo "<br>";
   OpenTable();
   echo "<center><font class=\"content\"><b>$subject</b></center><br>";
   if ($comment == "") {
       echo "<center><i>"._DIRECTCOM."</i></font></center><br>";
   } else {
       echo "<br>$comment</font>";
   }
   CloseTable();
   if(!isset($pid) || !isset($pollID)) { echo "Something is not right. This message is just to keep things from messing up down the road"; exit(); }
   if($pid == 0) {
      list($subject) = $db->sql_fetchrow($db->sql_query("select pollTitle from ".$prefix."_poll_desc where pollID='$pollID'"));
   } else {
      list($subject) = $db->sql_fetchrow($db->sql_query("select subject from ".$prefix."_pollcomments where tid='$pid'"));
   }
   echo "<br>";
   OpenTable();
   echo "<form action=\"modules.php?name=$module_name&amp;file=comments\" method=\"post\">";
   echo "<font class=\"content\"><b>"._YOURNAME.":</b></font> ";
   if (is_user($user)) {
      cookiedecode($user);
      echo "<font class=\"content\"><a href=\"account.html\">$cookie[1]</a> [ <a href=\"account.html&amp;op=logout\">"._LOGOUT."</a> ]</font>";
   } else {
      echo "<font class=\"content\">$anonymous</font>";
      $xanonpost=1;
   }
   echo "<br><br><font class=\"content\"><B>"._SUBJECT.":</B></FONT><BR>";
   if (!eregi("Re:",$subject)) $subject = "Re: ".substr($subject,0,81)."";
   echo "<INPUT TYPE=\"text\" NAME=\"subject\" SIZE=50 maxlength=85 value=\"$subject\"><BR>";
   echo "<br><br><font class=\"content\"><B>"._UCOMMENT.":</B></FONT><BR>"
      ."<TEXTAREA wrap=virtual cols=50 rows=10 name=comment></TEXTAREA><br>
      <font class=\"content\">"._ALLOWEDHTML."<br>";
      while (list($key,)= each($AllowableHTML)) echo " &lt;".$key."&gt;";
      echo "<br>";
   if (is_user($user) AND ($anonpost == 1)) { echo "<INPUT type=checkbox name=xanonpost> "._POSTANON."<br>"; }
   echo "<INPUT type=\"hidden\" name=\"pid\" value=\"$pid\">"
      ."<INPUT type=\"hidden\" name=\"pollID\" value=\"$pollID\">"
      ."<INPUT type=\"hidden\" name=\"mode\" value=\"$mode\">"
      ."<INPUT type=\"hidden\" name=\"order\" value=\"$order\">"
      ."<INPUT type=\"hidden\" name=\"thold\" value=\"$thold\">"
      ."<br><INPUT type=submit name=op value=\""._PREVIEW."\"> "
      ."<INPUT type=submit name=op value=\""._OK."\"> "
      ."<SELECT name=\"posttype\">"
      ."<OPTION value=\"exttrans\">"._EXTRANS."</option>"
      ."<OPTION value=\"html\" >"._HTMLFORMATED."</option>"
      ."<OPTION value=\"plaintext\" SELECTED>"._PLAINTEXT."</option>"
      ."</SELECT>"
      ."</FORM>";
   CloseTable();
    }
    @include("footer.php");
}

function replyPreview ($pid, $pollID, $subject, $comment, $xanonpost, $mode, $order, $thold, $posttype) {
   @include("header.php");
   global $user, $cookie, $AllowableHTML, $anonymous, $module_name;
   cookiedecode($user);
   $subject = stripslashes(check_html($subject, "nohtml"));
   $comment = stripslashes($comment);
        $pid = intval($pid);
        $pollID = intval($pollID);
   if (!isset($pid) || !isset($pollID)) {
       echo ""._NOTRIGHT."";
       exit();
   }
   OpenTable();
   echo "<center><font class=\"title\"><b>"._SURVEYCOMPRE."</b></font></center>";
   CloseTable();
   echo "<br>";
   OpenTable();
   echo "<b>$subject</b><br>";
   echo "<font class=content>"._BY." ";
   if (is_user($user)) {
       echo "$cookie[1]";
   } else {
       echo "$anonymous ";
   }
   echo ""._ONN."</font><br><br>";
   if ($posttype=="exttrans") {
       echo nl2br(htmlspecialchars($comment));
   } elseif ($posttype=="plaintext") {
       echo nl2br($comment);
   } else {
       echo $comment;
   }
   CloseTable();
   echo "<br>";
   OpenTable();
   echo "<form action=\"modules.php?name=$module_name&amp;file=comments\" method=\"post\">"
       ."<font class=\"content\"><B>"._YOURNAME.":</B></FONT> ";
   if (is_user($user)) {
       echo "<font class=\"content\"><a href=\"account.html\">$cookie[1]</a> <font class=\"content\">[ <a href=\"account.html&amp;op=logout\">"._LOGOUT."</a> ]</font>";
   } else {
       echo "<font class=\"content\">$anonymous</font>";
   }
   echo "<br><br><font class=\"content\"><B>"._SUBJECT.":</B></FONT><BR>"
      ."<INPUT TYPE=\"text\" name=\"subject\" size=\"50\" maxlength=\"85\" value=\"$subject\"><br><br>"
      ."<P><font class=\"content\"><B>"._UCOMMENT.":</B></FONT><BR>"
      ."<TEXTAREA wrap=\"virtual\" cols=\"50\" rows=\"10\" name=\"comment\">$comment</TEXTAREA><br>";
      echo"<font class=\"content\">"._ALLOWEDHTML."<br>";
      while (list($key,)= each($AllowableHTML)) echo " &lt;".$key."&gt;";
      echo "<br>";      
   if (($xanonpost) AND ($anonpost == 1)) {
       echo "<INPUT type=\"checkbox\" name=\"xanonpost\" checked> "._POSTANON."<br>";
   } elseif ((is_user($user)) AND ($anonpost == 1)) {
       echo "<INPUT type=\"checkbox\" name=\"xanonpost\"> "._POSTANON."<br>";
   }
   echo "<INPUT type=\"hidden\" name=\"pid\" value=\"$pid\">"
      ."<INPUT type=\"hidden\" name=\"pollID\" value=\"$pollID\"><INPUT type=\"hidden\" name=\"mode\" value=\"$mode\">"
      ."<INPUT type=\"hidden\" name=\"order\" value=\"$order\"><INPUT type=\"hidden\" name=\"thold\" value=\"$thold\">"
      ."<br><INPUT type=submit name=op value=\""._PREVIEW."\"> "
      ."<INPUT type=submit name=op value=\""._OK."\"> <SELECT name=\"posttype\"><OPTION value=\"exttrans\"";
      if($posttype=="exttrans") echo" SELECTED";
      echo  ">"._EXTRANS."<OPTION value=\"html\"";;
      if($posttype=="html") echo" SELECTED";
      echo ">"._HTMLFORMATED."<OPTION value=\"plaintext\"";
      if(($posttype!="exttrans") && ($posttype!="html")) echo" SELECTED";
      echo ">"._PLAINTEXT."</SELECT></FORM>";
    CloseTable();
    @include("footer.php");
}

function CreateTopic ($xanonpost, $subject, $comment, $pid, $pollID, $host_name, $mode, $order, $thold, $posttype) {
    global $user, $userinfo, $EditedMessage, $cookie, $prefix, $pollcomm, $anonpost, $db, $module_name;
    $author = FixQuotes($author);
    $subject = FixQuotes(filter_text($subject, "nohtml"));
    $comment = format_url($comment);
    if ($posttype=="exttrans") {
       $comment = FixQuotes(nl2br(htmlspecialchars(check_words($comment))));
    } elseif ($posttype=="plaintext") {
       $comment = FixQuotes(nl2br(filter_text($comment)));
    } else {
       $comment = FixQuotes(filter_text($comment));
    }
    if(is_user($user)) {
   getusrinfo($user);
    }
    if ((is_user($user)) && (!$xanonpost)) {
       getusrinfo($user);
   $name = $userinfo[username];
   $email = $userinfo[femail];
   $url = $userinfo[user_website];
   $score = 1;
    } else {
   $name = "";
   $email = "";
   $url = "";
   $score = 0;
    }
    $ip = $_SERVER["REMOTE_HOST"];
    if (empty($ip)) {
        $ip = $_SERVER["REMOTE_ADDR"];
    }
    $pollID = intval($pollID);
    $result = $db->sql_query("select count(*) from ".$prefix."_poll_desc where pollID='$pollID'");
    $fake = $db->sql_numrows($result);
    if ($fake == 1) {
   if ((($anonpost == 0) AND (is_user($user))) OR ($anonpost == 1)) {
       $db->sql_query("insert into ".$prefix."_pollcomments values (NULL, '$pid', '$pollID', now(), '$name', '$email', '$url', '$ip', '$subject', '$comment', '$score', '0')");
       update_points(9);
   } else {
       echo "Nice try...";
       die();
   }
    } else {
   @include("header.php");
   echo "According to my records, the topic you are trying "
       ."to reply to does not exist. If you're just trying to be "
       ."annoying, well then too bad.";
   @include("footer.php");
   die();
    }
    if ($pollcomm == 1) {
   if (isset($cookie[4])) { $options .= "&mode=$cookie[4]"; } else { $options .= "&mode=thread"; }
   if (isset($cookie[5])) { $options .= "&order=$cookie[5]"; } else { $options .= "&order=0"; }
   if (isset($cookie[6])) { $options .= "&thold=$cookie[6]"; } else { $options .= "&thold=0"; }
    } else {
   $options = "";
    }
    Header("Location: modules.php?name=$module_name&op=results&pollID=$pollID$options");
}

switch($op) {

   case "Reply":
      reply($pid, $pollID, $mode, $order, $thold);
      break;

   case ""._PREVIEW."":
      replyPreview ($pid, $pollID, $subject, $comment, $xanonpost, $mode, $order, $thold, $posttype);
      break;

   case ""._OK."":
      CreateTopic($xanonpost, $subject, $comment, $pid, $pollID, $host_name, $mode, $order, $thold, $posttype);
      break;

   case "moderate":
      global $module_name;
         @include("mainfile.php");   
      if((is_admin($admin)) || ($moderate==2)) {
         while(list($tdw, $emp) = each($HTTP_POST_VARS)) {
                                $tdw = intval($tdw);
            if (eregi("dkn",$tdw)) {
               $emp = explode(":", $emp);
               if($emp[1] != 0) {
                  $tdw = ereg_replace("dkn", "", $tdw);
                  $emp[0] = intval($emp[0]);
                  $emp[1] = intval($emp[1]);
                  $tdw = intval($tdw);
                  $q = "UPDATE ".$prefix."_pollcomments SET";
                  if(($emp[1] == 9) && ($emp[0]>=0)) { # Overrated
                     $q .= " score=score-1 where tid='$tdw'";
                  } elseif (($emp[1] == 10) && ($emp[0]<=4)) { # Underrated
                     $q .= " score=score+1 where tid='$tdw'";
                  } elseif (($emp[1] > 4) && ($emp[0]<=4)) {
                     $q .= " score='score+1', reason='$emp[1]' where tid='$tdw'";
                  } elseif (($emp[1] < 5) && ($emp[0] > -1)) {
                     $q .= " score='score-1', reason='$emp[1]' where tid='$tdw'";
                  } elseif (($emp[0] == -1) || ($emp[0] == 5)) {
                     $q .= " reason='$emp[1]' where tid='$tdw'";
                  }
                  if(strlen($q) > 20) $db->sql_query($q);
               }
            }
         }
      }
      Header("Location: modules.php?name=$module_name&op=results&pollID=$pollID");
      break;

   case "showreply":
      DisplayTopic($pollID, $pid, $tid, $mode, $order, $thold);
      break;

   default:
       global $module_name;
      if ((isset($tid)) && (!isset($pid))) {
         singlecomment($tid, $pollID, $mode, $order, $thold);
      } elseif (($mainfile) xor (($pid==0) AND (!isset($pid)))) {
         Header("Location: modules.php?name=$module_name&op=results&pollID=$pollID&mode=$mode&order=$order&thold=$thold");
      } else {
         if(!isset($pid)) $pid=0;
         DisplayTopic($pollID, $pid, $tid, $mode, $order, $thold);
      }
      break;
}

?>