705 lines
29 KiB
Text
705 lines
29 KiB
Text
|
<?_c
|
||
|
|
# This code was forked from the LiveJournal project owned and operated
|
||
|
|
# by Live Journal, Inc. The code has been modified and expanded by
|
||
|
|
# Dreamwidth Studios, LLC. These files were originally licensed under
|
||
|
|
# the terms of the license supplied by Live Journal, Inc, which can
|
||
|
|
# currently be found at:
|
||
|
|
#
|
||
|
|
# http://code.livejournal.org/trac/livejournal/browser/trunk/LICENSE-LiveJournal.txt
|
||
|
|
#
|
||
|
|
# In accordance with the original license, this code and all its
|
||
|
|
# modifications are provided under the GNU General Public License.
|
||
|
|
# A copy of that license can be found in the LICENSE file included as
|
||
|
|
# part of this distribution.
|
||
|
|
_c?>
|
||
|
|
<?page
|
||
|
|
title=><?_ML .title _ML?>
|
||
|
|
body<=
|
||
|
|
<?_code
|
||
|
|
{
|
||
|
|
use strict;
|
||
|
|
use vars qw(%GET %POST);
|
||
|
|
BML::decl_params(_default => qr/./);
|
||
|
|
|
||
|
|
my $head = \$_[1]->{'head'};
|
||
|
|
my $bodyopts = \$_[1]->{'bodyopts'};
|
||
|
|
|
||
|
|
my $remote = LJ::get_remote();
|
||
|
|
return "<?needlogin?>" unless $remote;
|
||
|
|
|
||
|
|
my $mode = $GET{'mode'} || $POST{'mode'} || "init";
|
||
|
|
if ($GET{'itemid'} || $POST{'itemid'}) { $mode = "edit"; }
|
||
|
|
|
||
|
|
LJ::need_res( { priority => $LJ::OLD_RES_PRIORITY }, 'stc/entry.css' );
|
||
|
|
LJ::need_res( 'js/6alib/inputcomplete.js' );
|
||
|
|
|
||
|
|
# are they asking to be authed as someone else?
|
||
|
|
my $authas = $GET{'authas'} || $remote->{'user'};
|
||
|
|
my $u = LJ::get_authas_user($authas);
|
||
|
|
return LJ::bad_input( $ML{'error.invalidauth'} )
|
||
|
|
unless $u;
|
||
|
|
return LJ::bad_input( $ML{'error.person'} )
|
||
|
|
unless $u->is_individual;
|
||
|
|
|
||
|
|
# are we modify a community post?
|
||
|
|
my $usejournal = $GET{'usejournal'} || $POST{'usejournal'} || $GET{'journal'};
|
||
|
|
undef $usejournal if $usejournal eq $u->{'user'}; # ignore if it's the user
|
||
|
|
|
||
|
|
# extra get arguments
|
||
|
|
my $getextra = '';
|
||
|
|
$getextra .= "authas=$authas&" if $authas ne $u->{'user'};
|
||
|
|
$getextra .= "usejournal=$usejournal&" if $usejournal;
|
||
|
|
chop $getextra;
|
||
|
|
$getextra = "?$getextra" if $getextra;
|
||
|
|
|
||
|
|
my $entry_chooser = sub {
|
||
|
|
my $ret;
|
||
|
|
my $ref = shift;
|
||
|
|
my %opts = @_;
|
||
|
|
|
||
|
|
my %res = %$ref;
|
||
|
|
|
||
|
|
$ret .= "<table summary='' style='width: 100%;'><tr><td>";
|
||
|
|
my %props = ();
|
||
|
|
for (my $i=1; $i<=$res{'prop_count'}; $i++) {
|
||
|
|
$props{$res{"prop_${i}_itemid"}}->{$res{"prop_${i}_name"}} = $res{"prop_${i}_value"};
|
||
|
|
}
|
||
|
|
|
||
|
|
my $ev_count = $res{'events_count'};
|
||
|
|
for (my $i=1; $i<=$ev_count; $i++) {
|
||
|
|
my $itemid = $res{"events_${i}_itemid"};
|
||
|
|
my $ditemid = $itemid * 256 + $res{"events_${i}_anum"};
|
||
|
|
|
||
|
|
$ret .= "<?hr?><table summary=''><tr valign='top'><td align='middle'>";
|
||
|
|
$ret .= "<form method='post' action='editjournal$getextra'>\n";
|
||
|
|
$ret .= LJ::html_hidden('itemid',$ditemid,'mode',"edit");
|
||
|
|
$ret .= LJ::html_submit( "itemid-$ditemid", $ML{'.edit.this.entry'} );
|
||
|
|
$ret .= "</form>";
|
||
|
|
$ret .= "</td><td>";
|
||
|
|
|
||
|
|
$ret .= " <b><label for='itemid-$ditemid'>" . $res{"events_${i}_eventtime"} . "</label></b>";
|
||
|
|
$ret .= " (Posted by: " . LJ::ljuser($res{"events_${i}_poster"}) . ")" if $usejournal;
|
||
|
|
|
||
|
|
### security indicator
|
||
|
|
my $sec = ' ';
|
||
|
|
if ($res{"events_${i}_security"} eq "private") {
|
||
|
|
$sec .= BML::fill_template("securityprivate");
|
||
|
|
} elsif ($res{"events_${i}_security"} eq "usemask") {
|
||
|
|
if ($res{"events_${i}_allowmask"} == 0) { # custom security with no group -- essentially private
|
||
|
|
$sec .= BML::fill_template("securityprivate");
|
||
|
|
} elsif ($res{"events_${i}_allowmask"} > 1) { # custom group
|
||
|
|
$sec .= BML::fill_template("securitygroups");
|
||
|
|
} else { # friends only
|
||
|
|
$sec .= BML::fill_template("securityprotected");
|
||
|
|
}
|
||
|
|
}
|
||
|
|
$ret .= $sec;
|
||
|
|
|
||
|
|
if (my $subj = $res{"events_${i}_subject"}) {
|
||
|
|
LJ::CleanHTML::clean_subject_all(\$subj);
|
||
|
|
# clean_subject_all returns plain text, so no HTML escaping here
|
||
|
|
$ret .= " <i>$subj</i>";
|
||
|
|
}
|
||
|
|
$ret .= "<br />\n";
|
||
|
|
|
||
|
|
# Use LJ::Entry object and event_html_summary for cleaner HTML handling
|
||
|
|
my $journal_u = $usejournal ? LJ::load_user($usejournal) : $u;
|
||
|
|
my $entry = LJ::Entry->new($journal_u, ditemid => $ditemid);
|
||
|
|
if ($entry && $entry->valid && $entry->visible_to($remote)) {
|
||
|
|
my $event = $entry->event_html_summary(300);
|
||
|
|
if ( defined $event && length $event ) {
|
||
|
|
$ret .= $event;
|
||
|
|
}
|
||
|
|
else {
|
||
|
|
$ret .= $ML{'.htmlonly'};
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
$ret .= "</td></tr></table>\n";
|
||
|
|
}
|
||
|
|
$ret .= "</td>";
|
||
|
|
$ret .= "</tr></table>";
|
||
|
|
|
||
|
|
return $ret;
|
||
|
|
};
|
||
|
|
|
||
|
|
if ($mode eq "edit")
|
||
|
|
{
|
||
|
|
# user object for community if we're modifying one
|
||
|
|
my $usejournal_u;
|
||
|
|
if ($usejournal) {
|
||
|
|
$usejournal_u = LJ::load_user($usejournal);
|
||
|
|
return LJ::bad_input( $ML{'error.nocomm'} )
|
||
|
|
unless $usejournal_u;
|
||
|
|
return LJ::bad_input( $ML{'error.invalidauth'} )
|
||
|
|
unless $usejournal_u->is_comm;
|
||
|
|
}
|
||
|
|
|
||
|
|
###
|
||
|
|
### HAVE AN ITEMID TO EDIT
|
||
|
|
###
|
||
|
|
|
||
|
|
if ($GET{'itemid'} || $POST{'itemid'}) {
|
||
|
|
|
||
|
|
# the 'itemid' form element is really an 'itemid'
|
||
|
|
my $ditemid = $GET{'itemid'} || $POST{'itemid'};
|
||
|
|
my $anum = $ditemid % 256;
|
||
|
|
my $itemid = $ditemid >> 8;
|
||
|
|
|
||
|
|
my $u_for_entry = $usejournal ? $usejournal_u : $u;
|
||
|
|
my $entry_obj = LJ::Entry->new($u_for_entry, ditemid => $ditemid);
|
||
|
|
|
||
|
|
# this is a sanity check, make sure the entry we got is visible to the
|
||
|
|
# person trying to edit it.
|
||
|
|
return "<?h1 $ML{'Error'} h1?><?p $ML{'.error.nofind'} p?>"
|
||
|
|
unless $entry_obj->visible_to( $remote );
|
||
|
|
|
||
|
|
# do getevents request
|
||
|
|
my %res = ();
|
||
|
|
LJ::do_request({ 'mode' => 'getevents',
|
||
|
|
'selecttype' => 'one',
|
||
|
|
'ver' => $LJ::PROTOCOL_VER,
|
||
|
|
'user' => $u->{'user'},
|
||
|
|
'usejournal' => $usejournal,
|
||
|
|
'itemid' => $itemid },
|
||
|
|
\%res,
|
||
|
|
{ "noauth" => 1,
|
||
|
|
'u' => $u,
|
||
|
|
ignorecanuse => 1 }
|
||
|
|
);
|
||
|
|
|
||
|
|
# was there a protocol error?
|
||
|
|
return "<?h1 $ML{'Error'} h1?><?p $res{'errmsg'} p?>"
|
||
|
|
unless $res{'success'} eq 'OK';
|
||
|
|
|
||
|
|
# does the requested entry exist?
|
||
|
|
return "<?h1 $ML{'Error'} h1?><?p $ML{'.error.nofind'} p?>"
|
||
|
|
unless $res{'events_count'} && $res{'events_1_anum'} == $anum;
|
||
|
|
|
||
|
|
# are we authorized to edit other peoples' posts in this community?
|
||
|
|
my $disabled_save = 0;
|
||
|
|
my $disabled_delete = 0;
|
||
|
|
my $disabled_spamdelete = 0;
|
||
|
|
if ( $usejournal && $res{'events_1_poster'} ne $u->user ) {
|
||
|
|
$disabled_delete = ! $u->can_manage( $usejournal_u );
|
||
|
|
$disabled_save++;
|
||
|
|
}
|
||
|
|
$disabled_spamdelete = $disabled_delete || !$usejournal || ($res{'events_1_poster'} eq $u->{'user'});
|
||
|
|
$disabled_spamdelete ||= LJ::sysban_check( 'spamreport', $usejournal_u->user ) if $usejournal_u;
|
||
|
|
|
||
|
|
# read-only posters and journals cannot be edited
|
||
|
|
if (!$disabled_save && ($u->is_readonly || ($usejournal_u && $usejournal_u->is_readonly))) {
|
||
|
|
$disabled_save++;
|
||
|
|
}
|
||
|
|
|
||
|
|
return BML::redirect( "/entry/" . $u_for_entry->user . "/$ditemid/edit" )
|
||
|
|
if ! $disabled_save && LJ::BetaFeatures->user_in_beta( $remote => "updatepage" );
|
||
|
|
|
||
|
|
###
|
||
|
|
### SAVE EDITS
|
||
|
|
###
|
||
|
|
|
||
|
|
# add in this value in case we had to submit the form using
|
||
|
|
# javascript
|
||
|
|
if ( $POST{'submit_value'} ) {
|
||
|
|
$POST{$POST{'submit_value'}} = 1;
|
||
|
|
}
|
||
|
|
|
||
|
|
# are we spellchecking before we post?
|
||
|
|
my $spellcheck_html;
|
||
|
|
my $did_spellcheck;
|
||
|
|
if ($LJ::SPELLER && $POST{'action:spellcheck'}) {
|
||
|
|
$did_spellcheck++;
|
||
|
|
my $s = new LJ::SpellCheck { 'spellcommand' => $LJ::SPELLER,
|
||
|
|
'color' => '<?hotcolor?>', };
|
||
|
|
my $event = LJ::ehtml($POST{'event'});
|
||
|
|
$spellcheck_html = $s->check_html(\$event);
|
||
|
|
$spellcheck_html = "<?inerr $ML{'entryform.spellcheck.noerrors'} inerr?>" unless $spellcheck_html ne "";
|
||
|
|
}
|
||
|
|
|
||
|
|
# TODO: Move this to the protocol?
|
||
|
|
if ($POST{'action:savemaintainer'} && !$disabled_spamdelete) {
|
||
|
|
return LJ::bad_input($ML{'error.invalidform'}) unless LJ::check_form_auth();
|
||
|
|
|
||
|
|
my @props = qw( adult_content_maintainer_reason adult_content_maintainer opt_nocomments_maintainer );
|
||
|
|
|
||
|
|
my $propset = {};
|
||
|
|
foreach my $pname (@props) {
|
||
|
|
my $p = LJ::get_prop("log", $pname);
|
||
|
|
next unless $p;
|
||
|
|
$propset->{$pname} = $POST{"prop_$pname"};
|
||
|
|
}
|
||
|
|
LJ::set_logprop($usejournal_u, $itemid, $propset);
|
||
|
|
|
||
|
|
return BML::redirect($entry_obj->url);
|
||
|
|
}
|
||
|
|
|
||
|
|
# they clicked the save or delete button
|
||
|
|
if (!$spellcheck_html && ($POST{'action:save'} || $POST{'action:delete'} || $POST{'action:deletespam'})) {
|
||
|
|
return LJ::bad_input($ML{'error.invalidform'}) unless LJ::check_form_auth();
|
||
|
|
|
||
|
|
my %req = ( 'mode' => 'editevent',
|
||
|
|
'ver' => $LJ::PROTOCOL_VER,
|
||
|
|
'user' => $u->{'user'},
|
||
|
|
'usejournal' => $usejournal,
|
||
|
|
'itemid' => $itemid,
|
||
|
|
'xpost' => '0'
|
||
|
|
);
|
||
|
|
LJ::entry_form_decode(\%req, \%POST);
|
||
|
|
|
||
|
|
# Delete
|
||
|
|
$req{'event'} = '' if $POST{'action:delete'} || $POST{'action:deletespam'};
|
||
|
|
|
||
|
|
# mark as spam, if need be
|
||
|
|
LJ::mark_entry_as_spam($usejournal_u, $itemid) if $POST{'action:deletespam'};
|
||
|
|
|
||
|
|
# if the action is to delete it, then let's note that
|
||
|
|
if ($POST{'action:delete'} || $POST{'action:deletespam'}) {
|
||
|
|
# now log the event created above
|
||
|
|
($usejournal ? $usejournal_u : $u)->log_event('delete_entry', {
|
||
|
|
remote => $remote,
|
||
|
|
actiontarget => $ditemid,
|
||
|
|
method => 'web',
|
||
|
|
});
|
||
|
|
}
|
||
|
|
|
||
|
|
# check for spam domains
|
||
|
|
LJ::Hooks::run_hooks('spam_check', $u, \%req, 'entry');
|
||
|
|
|
||
|
|
# do editevent request
|
||
|
|
LJ::do_request(\%req, \%res, { 'noauth' => 1, 'u' => $u });
|
||
|
|
|
||
|
|
# check response
|
||
|
|
unless ($res{'success'} eq "OK") {
|
||
|
|
return "<?h1 $ML{'Error'} h1?><?p <ul><li><b>$res{'errmsg'}</b></li></ul> p?>";
|
||
|
|
}
|
||
|
|
|
||
|
|
my $deleted = $req{event} ? 0 : 1;
|
||
|
|
my $journalu = $usejournal ? $usejournal_u : $u;
|
||
|
|
my $j_base = $journalu->journal_base;
|
||
|
|
my $entry_url = $entry_obj->url;
|
||
|
|
my $edititemlink = "/editjournal?itemid=$ditemid";
|
||
|
|
my $edit_url = $edititemlink . "&journal=" . $journalu->user;
|
||
|
|
|
||
|
|
# update crosspost if we're posting to our own journal and have
|
||
|
|
# selected crosspost.
|
||
|
|
my $xpost_result = '';
|
||
|
|
if ($journalu == $remote && ($POST{prop_xpost_check} || $GET{prop_xpost_check})) {
|
||
|
|
my ($xpost_successes, $xpost_failures) =
|
||
|
|
LJ::Protocol::schedule_xposts($remote, $ditemid, $deleted,
|
||
|
|
sub {
|
||
|
|
my $acctid = (shift)->acctid;
|
||
|
|
($POST{"prop_xpost_$acctid"} || $GET{"prop_xpost_$acctid"},
|
||
|
|
{password => $POST{"prop_xpost_password_$acctid"}
|
||
|
|
|| $GET{"prop_xpost_password_$acctid"},
|
||
|
|
auth_challenge => $POST{"prop_xpost_chal_$acctid"}
|
||
|
|
|| $GET{"prop_xpost_chal_$acctid"},
|
||
|
|
auth_response => $POST{"prop_xpost_resp_$acctid"}
|
||
|
|
|| $GET{"prop_xpost_resp_$acctid"}})
|
||
|
|
});
|
||
|
|
$xpost_result .= "<ul>\n";
|
||
|
|
$xpost_result .= join("\n",
|
||
|
|
map {"<li>"
|
||
|
|
. BML::ml('xpost.request.success2',
|
||
|
|
{ account => $_->displayname, sitenameshort => $LJ::SITENAMESHORT } )
|
||
|
|
. "</li>"}
|
||
|
|
@{$xpost_successes});
|
||
|
|
$xpost_result .= join("\n",
|
||
|
|
map {"<li><div style='color: red;'><strong>"
|
||
|
|
. BML::ml('xpost.request.failed',
|
||
|
|
{account => $_->displayname,
|
||
|
|
'editurl' => $edititemlink})
|
||
|
|
. " </strong></div></li>"}
|
||
|
|
@{$xpost_failures});
|
||
|
|
$xpost_result .= "</ul>\n";
|
||
|
|
$xpost_result .= "<br/>";
|
||
|
|
}
|
||
|
|
|
||
|
|
my $result = "<?h1 $ML{'.success.head'} h1?>";
|
||
|
|
$result .= "<table summary='' border='0' width='100%'><tr valign='top'><td>";
|
||
|
|
|
||
|
|
my $message;
|
||
|
|
|
||
|
|
if ($deleted) {
|
||
|
|
$result .= ($journalu->is_community) ?
|
||
|
|
"<?p $ML{'.success.delete.comm'} p?>" :
|
||
|
|
"<?p $ML{'.success.delete'} p?>";
|
||
|
|
$result .= "<?p $ML{'.success.deletespam'} p?>" if $POST{'action:deletespam'};
|
||
|
|
|
||
|
|
$result .= $xpost_result;
|
||
|
|
my $deleted_extras = LJ::Hooks::run_hook('entry_deleted_page_extras');
|
||
|
|
$result .= $deleted_extras if defined $deleted_extras;
|
||
|
|
} else {
|
||
|
|
$message = LJ::auto_linkify( LJ::html_newlines( LJ::ehtml( $res{message} ) ) );
|
||
|
|
$result .= ($journalu->is_community) ?
|
||
|
|
"<?p $ML{'.success.edited.comm'} p?>" :
|
||
|
|
"<?p $ML{'.success.edited'} p?>";
|
||
|
|
$result .= "<div class='alert-box'>$message</div>" if $message;
|
||
|
|
$result .= $xpost_result;
|
||
|
|
if ($POST{'action:save'} && $entry_obj->is_suspended) {
|
||
|
|
$result .= "<?p " . BML::ml('.success.editedstillsuspended') . " p?>";
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
if (!$deleted) {
|
||
|
|
my $security_ml;
|
||
|
|
my $filternames = '';
|
||
|
|
my $c_or_p = $journalu->is_community ? 'c' : 'p';
|
||
|
|
|
||
|
|
if ($req{"security"} eq "private") {
|
||
|
|
$security_ml = "post.security.private.$c_or_p";
|
||
|
|
} elsif ($req{"security"} eq "usemask") {
|
||
|
|
if ($req{"allowmask"} == 0) { # custom security with no group -- essentially private
|
||
|
|
$security_ml = "post.security.private.$c_or_p";
|
||
|
|
} elsif ($req{"allowmask"} > 1) { # custom group
|
||
|
|
$filternames = $journalu->security_group_display( $req{allowmask} );
|
||
|
|
$security_ml = "post.security.custom";
|
||
|
|
} else { # access list only
|
||
|
|
$security_ml = "post.security.access.$c_or_p";
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
$security_ml = "post.security.public";
|
||
|
|
}
|
||
|
|
|
||
|
|
$result .= "<?p " . BML::ml( $security_ml, { filters => $filternames } ) . " p?>";
|
||
|
|
|
||
|
|
my $subject = $req{subject};
|
||
|
|
|
||
|
|
if ( length $subject > 0 ) {
|
||
|
|
# use the HTML cleaner on the entry subject,
|
||
|
|
# then display it without escaping
|
||
|
|
LJ::CleanHTML::clean_subject( \$subject );
|
||
|
|
} else {
|
||
|
|
# display (no subject) if subject is empty
|
||
|
|
$subject = $ML{'.extradata.subj.no_subject'};
|
||
|
|
}
|
||
|
|
|
||
|
|
$result .= "<?p " . $ML{'.extradata.subj'} . " $subject p?>";
|
||
|
|
}
|
||
|
|
|
||
|
|
$result .= "<div id='fromhere'>$ML{'.success.fromhere'}<ul>";
|
||
|
|
$result .= "<li><a href='$entry_url'>$ML{'.success.fromhere.viewentry'}</a></li>" unless $deleted;
|
||
|
|
$result .= "<li><a href='$edit_url'>$ML{'.success.fromhere.editentry'}</a></li>" unless $deleted;
|
||
|
|
$result .= ($journalu->is_community) ?
|
||
|
|
"<li><a href='$j_base'>$ML{'.success.fromhere.viewentries.comm'}</a></li>" :
|
||
|
|
"<li><a href='$j_base'>$ML{'.success.fromhere.viewentries'}</a></li>";
|
||
|
|
$result .= "<li><a href='$LJ::SITEROOT/editjournal'>$ML{'.success.fromhere.manageentries'}</a></li>" unless $journalu->is_community;
|
||
|
|
$result .= "</ul></div>";
|
||
|
|
$result .= "</td>";
|
||
|
|
|
||
|
|
$result .= "</tr></table>";
|
||
|
|
|
||
|
|
return $result;
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
###
|
||
|
|
### SHOW EDIT FORM
|
||
|
|
###
|
||
|
|
|
||
|
|
my $auth = "<p class='pkg'><label for='' class='left'>$ML{'.auth.poster'}</label>";
|
||
|
|
$auth .= "<span id='poster' class='float-left'>";
|
||
|
|
$auth .= $usejournal ? LJ::ljuser($res{'events_1_poster'}) . " in community " . LJ::ljuser($usejournal)
|
||
|
|
: LJ::ljuser($remote);
|
||
|
|
$auth .= LJ::html_hidden("usejournal", $usejournal);
|
||
|
|
$auth .= "</span></p>";
|
||
|
|
my $username = $usejournal ? $usejournal : $remote->user;
|
||
|
|
$auth .= "<script>getUserTags('$username');</script>";
|
||
|
|
|
||
|
|
|
||
|
|
my ($year, $mon, $mday, $hour, $min) = split(/\D/, $res{"events_1_eventtime"});
|
||
|
|
my $datetime; my $date = LJ::html_datetime_decode({ 'name' => "date_ymd", }, \%POST);
|
||
|
|
if ($date ne "0000-00-00 00:00:00") {
|
||
|
|
my ($date, $time) = split( m/ /, $date);
|
||
|
|
$datetime = "$date $POST{'hour'}:$POST{'min'}";
|
||
|
|
} else {
|
||
|
|
$datetime = "$year-$mon-$mday $hour:$min";
|
||
|
|
}
|
||
|
|
|
||
|
|
my $subject = $POST{'subject'} || $res{'events_1_subject'};
|
||
|
|
my $event = $POST{'event'} || $res{'events_1_event'};
|
||
|
|
|
||
|
|
my $curmask = $res{'events_1_allowmask'};
|
||
|
|
my $cursec = $res{'events_1_security'} || $POST{'security'};
|
||
|
|
if ($cursec eq 'usemask') {
|
||
|
|
$cursec = $curmask == 1 ? "friends" : "custom";
|
||
|
|
}
|
||
|
|
|
||
|
|
# start edit form
|
||
|
|
my $ret; my $js;
|
||
|
|
$ret .= "<table summary=''><tr><td>";
|
||
|
|
$ret .= "<div style='width: 100%; float: left;'><form method='post' action='editjournal$getextra' id='updateForm' name='updateForm'>";
|
||
|
|
$ret .= LJ::form_auth();
|
||
|
|
$ret .= LJ::html_hidden('itemid', $ditemid,'mode','edit','edited',1) . "\n";
|
||
|
|
|
||
|
|
$event = LJ::durl($event);
|
||
|
|
my $journalu = $usejournal ? LJ::load_user($usejournal) : $remote;
|
||
|
|
LJ::EmbedModule->parse_module_embed($journalu, \$event, edit => 1);
|
||
|
|
$event = LJ::eurl($event);
|
||
|
|
|
||
|
|
my $suspend_msg = $entry_obj && $entry_obj->should_show_suspend_msg_to($remote) ? 1 : 0;
|
||
|
|
my $entry = {
|
||
|
|
'mode' => "edit",
|
||
|
|
'auth_as_remote' => 1,
|
||
|
|
'subject' => $subject,
|
||
|
|
'event' => $event,
|
||
|
|
'datetime' => $datetime,
|
||
|
|
'usejournal' => $usejournal,
|
||
|
|
'security' => $cursec,
|
||
|
|
'security_mask' => $curmask,
|
||
|
|
'auth' => $auth,
|
||
|
|
'remote' => $remote,
|
||
|
|
'spellcheck_html' => $spellcheck_html,
|
||
|
|
'richtext' => LJ::is_enabled('richtext'),
|
||
|
|
'mood' => $res{'events_1_'},
|
||
|
|
'disabled_save' => $disabled_save,
|
||
|
|
'disabled_delete' => $disabled_delete,
|
||
|
|
'disabled_spamdelete' => $disabled_spamdelete,
|
||
|
|
'maintainer_mode' => !$disabled_spamdelete,
|
||
|
|
'suspended' => $suspend_msg,
|
||
|
|
};
|
||
|
|
for (my $i = 1; $i <= $res{'prop_count'}; $i++) {
|
||
|
|
$entry->{"prop_" . $res{"prop_${i}_name"}} = $res{"prop_${i}_value"};
|
||
|
|
}
|
||
|
|
|
||
|
|
# add property for current music button displaying if last.fm user specified
|
||
|
|
$entry->{prop_last_fm_user} = $u_for_entry->prop('last_fm_user');
|
||
|
|
|
||
|
|
# add property for xpost data (this is removed by the getevents protocol)
|
||
|
|
# FIXME: this should be added by the entry form, but since it doesn't have an
|
||
|
|
# entry object right now, this is just easier
|
||
|
|
$entry->{prop_xpost} = $entry_obj->prop( 'xpost' );
|
||
|
|
|
||
|
|
$entry->{$_} = $POST{$_} foreach keys %POST;
|
||
|
|
$entry->{'richtext_default'} = $entry->{"prop_used_rte"} ? 1 : 0,
|
||
|
|
|
||
|
|
my $onload;
|
||
|
|
|
||
|
|
if ( $res{events_1_converted_with_loss} ) {
|
||
|
|
$ret .= "<div class='warning-box'>$ML{'.invalid_encoding'} </div><br/>";
|
||
|
|
}
|
||
|
|
|
||
|
|
$ret .= LJ::entry_form($entry, \$$head, \$onload);
|
||
|
|
$ret .= "</form></div>";
|
||
|
|
$ret .= "</td>";
|
||
|
|
|
||
|
|
$ret .= "</tr></table>";
|
||
|
|
|
||
|
|
# javascript to initialize entry form since we've just called into entry_form
|
||
|
|
# -- shove into \$head which is a reference into $_[1]->{head} and will
|
||
|
|
# be placed in the correct BML head portion later
|
||
|
|
# -- this is a hack, should be done by weblib and pushed into \$$head above
|
||
|
|
# in a way which is compatible with both this page and update
|
||
|
|
$$head .= qq{
|
||
|
|
<script type="text/javascript">
|
||
|
|
//<![CDATA[
|
||
|
|
function init_update_bml () {
|
||
|
|
$onload
|
||
|
|
}
|
||
|
|
//]]>
|
||
|
|
</script>
|
||
|
|
};
|
||
|
|
|
||
|
|
return $ret;
|
||
|
|
}
|
||
|
|
|
||
|
|
###
|
||
|
|
### NO ITEMID - SELECT ENTRY TO EDIT
|
||
|
|
###
|
||
|
|
|
||
|
|
### already authenticated from above
|
||
|
|
|
||
|
|
return BML::redirect("$LJ::SITEROOT/editjournal")
|
||
|
|
unless LJ::did_post();
|
||
|
|
|
||
|
|
my %res;
|
||
|
|
my %req = (
|
||
|
|
'mode' => 'getevents',
|
||
|
|
'ver' => $LJ::PROTOCOL_VER,
|
||
|
|
'user' => $u->{'user'},
|
||
|
|
'usejournal' => $usejournal,
|
||
|
|
'truncate' => 300,
|
||
|
|
'noprops' => 1,
|
||
|
|
);
|
||
|
|
|
||
|
|
# last 1
|
||
|
|
if ($POST{'selecttype'} eq "last") {
|
||
|
|
$req{'selecttype'} = 'one';
|
||
|
|
$req{'itemid'} = -1;
|
||
|
|
|
||
|
|
# last n
|
||
|
|
} elsif ($POST{'selecttype'} eq 'lastn') {
|
||
|
|
$req{'selecttype'} = 'lastn';
|
||
|
|
$req{'howmany'} = $POST{'howmany'};
|
||
|
|
|
||
|
|
# day
|
||
|
|
} elsif ($POST{'selecttype'} eq 'day') {
|
||
|
|
$req{'selecttype'} = 'day';
|
||
|
|
$req{$_} = $POST{$_} foreach qw(year month day);
|
||
|
|
}
|
||
|
|
|
||
|
|
# do getevents request
|
||
|
|
LJ::do_request(\%req, \%res, { 'noauth' => 1, 'u' => $u });
|
||
|
|
|
||
|
|
# check response
|
||
|
|
unless ($res{'success'} eq "OK") {
|
||
|
|
return "<?h1 $ML{'Error'} h1?>\n" .
|
||
|
|
"<?p $ML{'.error.getting'} <ul><li><b><?_eh $res{'errmsg'} _eh?></b></li></ul> p?>";
|
||
|
|
}
|
||
|
|
|
||
|
|
# only one item returned? go directly to edit it
|
||
|
|
if ($res{'events_count'} == 1) {
|
||
|
|
my $ditemid = ($res{'events_1_itemid'} << 8) + $res{'events_1_anum'};
|
||
|
|
my $ditemid_get = $getextra ? "$getextra&itemid=$ditemid" : "?itemid=$ditemid";
|
||
|
|
return BML::redirect("$LJ::SITEROOT/editjournal$ditemid_get");
|
||
|
|
}
|
||
|
|
|
||
|
|
# how many results did we get?
|
||
|
|
my $ev_count = $res{'events_count'};
|
||
|
|
unless ($ev_count) {
|
||
|
|
if ($req{'selecttype'} eq 'lastn') {
|
||
|
|
return "<?h1 $ML{'.no.entries.found'} h1?>\n" .
|
||
|
|
"<?p $ML{'.no.entries.exist'} p?>\n";
|
||
|
|
}
|
||
|
|
|
||
|
|
return "<?h1 $ML{'.no.entries.found'} h1?>\n" .
|
||
|
|
"<?p $ML{'.no.entries.match'} p?>\n";
|
||
|
|
}
|
||
|
|
|
||
|
|
### display results
|
||
|
|
return $entry_chooser->(\%res, show_ad => 1);
|
||
|
|
} elsif ($mode eq "init") {
|
||
|
|
my $ret = '';
|
||
|
|
|
||
|
|
# no authentication needs to be done on this page, it's just a form anyway
|
||
|
|
|
||
|
|
$ret .= "<table summary='' style='width: 100%;'><tr><td>";
|
||
|
|
|
||
|
|
# user switcher
|
||
|
|
$ret .= "<form action='editjournal' method='get'>\n";
|
||
|
|
$ret .= LJ::make_authas_select($remote, { 'authas' => $GET{'authas'}, 'type' => 'P' });
|
||
|
|
$ret .= "</form>\n\n";
|
||
|
|
|
||
|
|
# header
|
||
|
|
$ret .= "<?p " . BML::ml( '.desc' );
|
||
|
|
$ret .= " " . BML::ml( '.massprivacy', { aopts => "href='$LJ::SITEROOT/editprivacy'" } ) if $remote->can_use_mass_privacy;
|
||
|
|
$ret .= " p?>\n";
|
||
|
|
|
||
|
|
# edit form
|
||
|
|
$ret .= "<form action='editjournal$getextra' method='post'>\n";
|
||
|
|
$ret .= LJ::html_hidden("mode","edit");
|
||
|
|
$ret .= "<table summary='' class='highlight-box'>\n";
|
||
|
|
|
||
|
|
# view type
|
||
|
|
$ret .= "<tr valign=\"top\"><td>$ML{'.viewwhat'}</td>\n<td>\n";
|
||
|
|
$ret .= LJ::html_check({ 'type' => 'radio', 'name' => 'selecttype', 'id' => 'selecttype-last',
|
||
|
|
'value' => 'last', 'selected' => 1 });
|
||
|
|
$ret .= "<label for='selecttype-last'>$ML{'.recententry'}</label><br />\n";
|
||
|
|
|
||
|
|
$ret .= LJ::html_check({ 'type' => 'radio', 'name' => 'selecttype',
|
||
|
|
'id' => 'selecttype-lastn', 'value' => 'lastn' }) . " ";
|
||
|
|
$ret .= LJ::html_text({ 'name' => 'howmany', 'size' => '3', 'maxlength' => '2', 'value' => '20',
|
||
|
|
'onchange' => "checkRadioButton('selecttype-lastn');" }) . " ";
|
||
|
|
$ret .= "<label for='selecttype-lastn'>$ML{'.recententries'}</label><br />\n";
|
||
|
|
|
||
|
|
$ret .= LJ::html_check({ 'type' => 'radio', 'name' => 'selecttype',
|
||
|
|
'id' => 'selecttype-day', 'value' => 'day' });
|
||
|
|
$ret .= "<label for='selecttype-day'>$ML{'.certainday'}</label>";
|
||
|
|
|
||
|
|
my @time = localtime(time);
|
||
|
|
my $mday = sprintf("%02d", $time[3]);
|
||
|
|
my $mon = sprintf("%02d", $time[4] + 1);
|
||
|
|
my $year = $time[5] + 1900;
|
||
|
|
|
||
|
|
$ret .= LJ::html_text({ 'name' => 'year', 'size' => '5', 'maxlength' => '4', 'value' => $year,
|
||
|
|
'onchange' => "checkRadioButton('selecttype-day');" }) . "-";
|
||
|
|
$ret .= LJ::html_text({ 'name' => 'month', 'size' => '3', 'maxlength' => '2', 'value' => $mon,
|
||
|
|
'onchange' => "checkRadioButton('selecttype-day');" }) . "-";
|
||
|
|
$ret .= LJ::html_text({ 'name' => 'day', 'size' => '3', 'maxlength' => '2', 'value' => $mday,
|
||
|
|
'onchange' => "checkRadioButton('selecttype-day');" }) . "\n";
|
||
|
|
|
||
|
|
$ret .= "</td></tr>\n";
|
||
|
|
|
||
|
|
# use journal
|
||
|
|
$ret .= "<tr valign=\"top\"><td align='right'>$ML{'.in'}</td>\n<td>\n";
|
||
|
|
$ret .= LJ::html_text({ 'name' => 'usejournal', 'size' => '20', 'maxlength' => '25', 'value' => $GET{'usejournal'} }) . " ";
|
||
|
|
$ret .= " $ML{'optional'}</td></tr>";
|
||
|
|
|
||
|
|
# submit button
|
||
|
|
$ret .= "<tr><td> </td><td>" . LJ::html_submit(undef, $ML{'.btn.proceed'}) . "</td></tr>\n";
|
||
|
|
|
||
|
|
$ret .= "</table>\n";
|
||
|
|
$ret .= "</form>\n";
|
||
|
|
|
||
|
|
my %res;
|
||
|
|
my %req = (
|
||
|
|
mode => 'getevents',
|
||
|
|
ver => $LJ::PROTOCOL_VER,
|
||
|
|
user => $u->user,
|
||
|
|
usejournal => $usejournal,
|
||
|
|
truncate => 300,
|
||
|
|
noprops => 1,
|
||
|
|
selecttype => 'lastn',
|
||
|
|
howmany => 5,
|
||
|
|
);
|
||
|
|
|
||
|
|
# do getevents request
|
||
|
|
LJ::do_request(\%req, \%res, { noauth => 1, u => $u });
|
||
|
|
|
||
|
|
if ($res{success} eq "OK" && $res{events_count} > 0) {
|
||
|
|
$ret .= $entry_chooser->(\%res);
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
$ret .= "</td></tr></table>";
|
||
|
|
|
||
|
|
return $ret;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
_code?>
|
||
|
|
<=body
|
||
|
|
|
||
|
|
bodyopts=><?_code return $_[1]->{'bodyopts'}; _code?>
|
||
|
|
head<=
|
||
|
|
|
||
|
|
<?_code return $_[1]->{'head'}; _code?>
|
||
|
|
<?_code return q{
|
||
|
|
<script language="JavaScript" type="text/javascript">
|
||
|
|
<!--
|
||
|
|
/* If radioid exists, check the radio button. */
|
||
|
|
function checkRadioButton(radioid) {
|
||
|
|
if (!document.getElementById) return;
|
||
|
|
var radio = document.getElementById(radioid);
|
||
|
|
if (!radio) return;
|
||
|
|
radio.checked = true;
|
||
|
|
}
|
||
|
|
// -->
|
||
|
|
</script>
|
||
|
|
}; _code?>
|
||
|
|
|
||
|
|
<?_code
|
||
|
|
{
|
||
|
|
my $ret;
|
||
|
|
|
||
|
|
LJ::need_res(qw(
|
||
|
|
js/6alib/core.js
|
||
|
|
js/6alib/dom.js
|
||
|
|
js/6alib/httpreq.js
|
||
|
|
js/livejournal.js
|
||
|
|
js/entry.js
|
||
|
|
js/poll.js
|
||
|
|
js/xpost.js
|
||
|
|
js/md5.js
|
||
|
|
));
|
||
|
|
|
||
|
|
# JS vars for the RTE
|
||
|
|
$ret .= LJ::rte_js_vars($remote);
|
||
|
|
|
||
|
|
return $ret;
|
||
|
|
}
|
||
|
|
_code?>
|
||
|
|
|
||
|
|
|
||
|
|
<=head
|
||
|
|
page?>
|