';
} else {
$icon_fmt = '#' . $del_permatext . ' ';
}
$show_cmt .= jsAddSlashes('' . $icon_fmt . '');
$show_cmt .= jsAddSlashes('\n');
$show_cmt .= jsAddSlashes('' . $del_note . '\n');
$show_cmt .= jsAddSlashes('
\n';
} else {
$icon_fmt = '#' . $permatext . ' ';
}
$variable .= jsAddSlashes('' . $icon_fmt . '');
$variable .= jsAddSlashes('' . $del_note . '\n');
$variable .= jsAddSlashes('\n') . PHP_EOL;
}
}
return $variable;
}
$subfile_count = array(); // Individual comment thread count
$cmt_count = '1'; // Comment count excluding replies
$total_count = '1'; // Comment count including replies
$show_cmt = ''; // Will contain all comments
// Function for adding deletion notice to output
function deletion_notice($file, $check) {
global $dir, $show_cmt, $indentation, $icon_fmt, $root_dir, $del_note, $subfile_count, $total_count, $cmt_count, $icons, $icon_size;
// Check whether to generate output
if (!empty($check) and $check == 'yes' or $check == 'true') {
// Generate permalink
$del_permatext = (end(explode('-', basename($file, '.xml'))) - 1);
if (preg_match('/-/', basename($file, '.xml'))) {
$del_permalink = 'c' . str_replace('-', 'r', basename($file, '.xml'));
$del_permalink = basename($del_permalink, end(explode('r', $del_permalink))) . (end(explode('r', $del_permalink)) - 1);
} else {
$del_permalink = 'c' . (basename($file, '.xml') - 1);
}
// Calculate CSS padding for reply indentation
if (($del_dashes = substr_count(basename($file), '-')) != '0' and $check == 'yes') {
$del_indent = ($icon_size + 20) * $del_dashes;
} else {
$del_indent = '0';
}
$del_indent_side = ($indentation == 'right') ? '16px ' . $del_indent . 'px 12px 0px' : '16px 0px 12px ' . $del_indent . 'px';
$show_cmt .= jsAddSlashes('\n');
$show_cmt .= jsAddSlashes('';
} else {
$icon_fmt = '#' . $del_permatext . ' ';
}
$show_cmt .= jsAddSlashes('' . $icon_fmt . '');
$show_cmt .= jsAddSlashes(''))) . '
', '', '
', '', '', ''); $clean_code = preg_replace('/(((ftp|http|https){1}:\/\/)[a-zA-Z0-9-@:%_\+.~#?&\/=]+)/i', '\\1 ', $_POST['comment']); // Add space to end of URLs to separate '&' characters from escaped HTML tags $clean_code = str_ireplace($data_search, $data_replace, preg_replace('/\n{2,}/', "\n\r\n", preg_replace('/^\s+$/m', '', rtrim($clean_code, " \r\n")))); // Escape HTML tags; remove trailing new lines $clean_code = preg_replace('/(((ftp|http|https){1}:\/\/)[a-zA-Z0-9-@:%_\+.~#?&\/=]+)([\s]{0,})/i', '\\1', $clean_code); // Add HTML anchor tag to URLs $clean_code = preg_replace_callback('/\[img\]
', '
', ''), $clean_code);
$clean_code = str_ireplace(array(''), array('
', '
', ''), $clean_code); $clean_code = preg_replace_callback('/(
)(.*?)(<\/code>){1,}/i', function($arr) { return '' . str_ireplace('<br>', '
', htmlspecialchars(preg_replace('/(
){1,}(
){1,}/', '\\2', preg_replace('/<\/?a(\s+.*?>|>)/', '', $arr[2])), null, null, false)) . $arr[3];}, $clean_code);
$clean_code = preg_replace_callback('/()(.*?)(<\/pre>){1,}/i', function($arr) { return $arr[1] . preg_replace('/(
){1,}(
){1,}/', '\\2', $arr[2]) . $arr[3];}, $clean_code);
$clean_code = str_replace(array('\n
', '
'), array('\n', '\n
'), $clean_code);
$clean_code = str_ireplace('
', '\n', $clean_code);
// Open comment template; prepare data
$write_cmt = simplexml_load_file('template.xml');
$write_cmt['name'] = trim($name, ' ');
$write_cmt['email'] = (isset($_POST['email']) and $_POST['email'] != 'E-mail Address') ? str_replace('"', '"', encrypt(stripslashes($_POST['email']))) : '';
$write_cmt['passwd'] = (isset($_POST['password']) and !empty($_POST['password']) and $_POST['password'] != 'Password') ? md5(encrypt(stripslashes($_POST['password']))) : '';
$write_cmt['website'] = (isset($website)) ? trim($website, ' ') : '';
$write_cmt['date'] = date('m/d/Y - g:ia');
$write_cmt['ipaddr'] = ($ip_addrs == 'yes') ? $_SERVER['REMOTE_ADDR'] : '';
$write_cmt['likes'] = '0';
$write_cmt->body = $clean_code; // Final comment body
// Edit comment
if (isset($_POST['edit']) and (isset($_POST['password']) and isset($_POST['cmtfile'])) and !isset($_POST['delete'])) {
if (file_exists($dir . '/' . $_POST['cmtfile'] . '.xml')) {
$edit_cmt = simplexml_load_file($dir . '/' . sanitize($_POST['cmtfile'] . '.xml'));
// Check if password matches the one in the file
if (md5(encrypt(stripslashes($_POST['password']))) == $edit_cmt['passwd']) {
// Write edited comment to file
$edit_cmt['name'] = $write_cmt['name'];
$edit_cmt['email'] = $write_cmt['email'];
$edit_cmt['website'] = $write_cmt['website'];
if ($clean_code != $edit_cmt->body) $edit_cmt->body = $clean_code;
$edit_cmt->asXML($dir . '/' . sanitize($_POST['cmtfile']) . '.xml');
// Set "Password" and "Login" cookies
setcookie('password', str_replace('"', '"', stripslashes($_POST['password'])), $expire, '/', str_replace('www.', '', $domain));
setcookie('hashover-' . strtolower(str_replace(' ', '-', $name)), hash('ripemd160', $write_cmt['email'] . $write_cmt['passwd']), $expire, '/', str_replace('www.', '', $domain));
}
}
// Kick visitor back to comment
header('Location: ' . $_SERVER['HTTP_REFERER'] . '#c' . str_replace('-', 'r', $_POST['cmtfile'])); exit;
}
read_comments($dir, 'no'); // Read comments without output
// Rename file for reply
if (isset($_POST['reply_to']) and !empty($_POST['reply_to'])) {
if (!preg_match('/[a-zA-Z]/i', $_POST['reply_to']) and file_exists($dir . '/' . $_POST['reply_to'] . ".xml")) {
// Set reply directory information & "cookie" for successful reply
$reply_dir = $dir . '/' . $_POST['reply_to'] . '.xml';
$cmt_file = $dir . '/' . $_POST['reply_to'] . '-' . $subfile_count["$reply_dir"] . '.xml';
setcookie('replied', $_POST['reply_to'], $expire, '/', str_replace('www.', '', $domain));
}
} else {
$cmt_file = $dir . '/' . $cmt_count . '.xml';
}
// Write comment to file
if ($write_cmt->asXML(sanitize($cmt_file))) {
chmod($cmt_file, 0711);
// Send notification e-mails
$permalink = 'c' . str_replace('-', 'r', basename($cmt_file, '.xml'));
$from_email = (isset($_POST['email']) and $_POST['email'] != 'E-mail Address') ? $name . ' <' . $_POST['email'] . '>' : $name;
$reverse_datasearch = array('"', '<', '>', '
\n', '\n', '
', ' ', '\r');
$reverse_datareplace = array('"', '<', '>', PHP_EOL, PHP_EOL, "\r", ' ', "\r");
$to_webmaster = '';
// Notify commenter of reply
if (isset($_POST['reply_to']) and !empty($_POST['reply_to'])) {
if (!preg_match('/[a-zA-Z]/i', $_POST['reply_to']) and file_exists($dir . '/' . $_POST['reply_to'] . ".xml")) {
$get_cmt = simplexml_load_file($dir . '/' . sanitize($_POST['reply_to'] . '.xml'));
$to_commenter = "\nIn reply to:\n\n\t" . str_replace($reverse_datasearch, $reverse_datareplace, strip_tags($get_cmt->body)) . "\n\n";
$to_webmaster = "\nIn reply to " . $get_cmt['name'] . ":\n\n\t" . str_replace($reverse_datasearch, $reverse_datareplace, strip_tags($get_cmt->body)) . "\n\n";
$decryto = encrypt($get_cmt['email']);
if (!empty($decryto) and $decryto != $enotify and $decryto != $_POST['email']) {
mail($decryto, $_SERVER['HTTP_HOST'] . ' - New Reply', "From $name:\n\n\t" . strip_tags(stripslashes($_POST['comment'])) . "\n\n$to_commenter----\nPermalink: $page_url" . '#' . $permalink . "\nPage: $page_url", $header);
}
}
}
// Notify webmaster via e-mail
if ($write_cmt['email'] != encrypt($enotify)) {
mail($enotify, 'New Comment', "From $from_email:\n\n\t" . str_replace($reverse_datasearch, $reverse_datareplace, strip_tags($clean_code)) . "\n\n$to_webmaster----\nPermalink: $page_url" . '#' . $permalink . "\nPage: $page_url", $header);
}
// Set blank cookie for successful comment, kick visitor back to comment
setcookie('replied', '', $expire, '/', str_replace('www.', '', $domain));
setcookie('hashover-' . strtolower(str_replace(' ', '-', $name)), hash('ripemd160', $write_cmt['email'] . $write_cmt['passwd']), $expire, '/', str_replace('www.', '', $domain));
header('Location: ' . $_SERVER['HTTP_REFERER'] . '#' . $permalink);
exit;
} else {
header('Location: ' . $_SERVER['HTTP_REFERER'] . '#comments');
exit;
}
} else {
setcookie('success', 'no', $expire, '/', str_replace('www.', '', $domain)); // Set failed comment cookie
if (isset($_POST['reply_to']) and !empty($_POST['reply_to'])) setcookie('replied', $_POST['reply_to'], $expire, '/', str_replace('www.', '', $domain));
header('Location: ' . $_SERVER['HTTP_REFERER'] . '#comments'); exit; // Kick visitor back to comment form
}
}
// Check if either a comment or reply failed to post
if (isset($_COOKIE['success']) and $_COOKIE['success'] == 'no') {
if (!isset($_COOKIE['replied']) and empty($_COOKIE['replied'])) {
setcookie('success', '', $expire, '/', str_replace('www.', '', $domain));
} else {
$comment_form = $reply_form;
$post_button = 'Post Reply';
setcookie('replied', '', $expire, '/', str_replace('www.', '', $domain));
setcookie('success', '', $expire, '/', str_replace('www.', '', $domain));
}
}
// Change document type to match following output
if ($mode == 'javascript') {
header('Content-Type: text/javascript');
} else {
echo '' . "\n\n" : PHP_EOL;
if ($page_title = 'yes') {
$js_title = ($mode == 'javascript') ? "'+pagetitle+'" : '';
$js_title = (isset($_GET['pagetitle'])) ? ' on "' . $_GET['pagetitle'] . '"' : $js_title;
$rss_title = (isset($_GET['pagetitle'])) ? $_GET['pagetitle'] : "'+document.title+'";
}
if ($mode == 'php') {
echo '' . PHP_EOL;
} else {
echo '// Place "hashover" DIV' . PHP_EOL;
echo 'if (document.getElementById("hashover") == null) {' . PHP_EOL;
echo "\t" . 'document.write("\n");' . PHP_EOL;
echo '}' . PHP_EOL . PHP_EOL;
}
$tab = ($mode == 'javascript') ? "\t" : '';
$end_curly = ($mode == 'javascript') ? "}\n\n" : '';
echo jsAddSlashes('
Post a Comment' . $js_title . ':
\n');
echo jsAddSlashes('
\n'). PHP_EOL;
// Display three most popular comments
if (!empty($top_likes)) {
$ts = (count($top_likes) != '1') ? 's' : '';
echo jsAddSlashes('
Most Popular Comment' . $ts . ':\n') . PHP_EOL;
for ($p = 0; $p != $top_cmts; $p++) {
if (!empty($top_likes)) {
echo parse_comments(array_shift($top_likes), '', 'no');
}
}
echo jsAddSlashes('
') . PHP_EOL;
}
// Display comment count
echo jsAddSlashes('
Showing ' . $script = ($cmt_count == "1") ? '0 Comments:' : display_count() . ':');
// Display comments, if there are no comments display a note
if (!empty($show_cmt)) {
echo $show_cmt;
} else {
echo jsAddSlashes('\n');
echo jsAddSlashes('
\n');
echo jsAddSlashes('\n');
echo jsAddSlashes('Be the first to comment!');
echo jsAddSlashes('\n\n') . PHP_EOL;
}
echo jsAddSlashes('
\n');
echo jsAddSlashes('HashOver Comments ·\n');
if ($cmt_count != '1') {
if ($mode == 'javascript') {
echo jsAddSlashes('RSS Feed ·\n');
} else {
echo jsAddSlashes('RSS Feed ·\n');
}
}
// Script execution ending time
$exec_time = explode(' ', microtime());
$exec_end = $exec_time[1] + $exec_time[0];
$exec_time = ($exec_end - $exec_start);
echo jsAddSlashes('Source Code ·\n');
echo ($mode == 'javascript') ? jsAddSlashes('JavaScript ·\n') : '';
echo jsAddSlashes('ChangeLog ·\n');
echo jsAddSlashes('Archives
\n');
echo jsAddSlashes(' \n');
if ($mode == 'php') {
echo '';
} else {
echo PHP_EOL . '// Place all content on page' . PHP_EOL;
echo 'document.getElementById("hashover").innerHTML = show_cmt;' . PHP_EOL . PHP_EOL;
echo '// Script Execution Time: ' . round($exec_time, 5) . ' Seconds';
}
?>