<?php

/**

* @package phpBBex

* @copyright (c) 2015 phpBB Group, Vegalogic Software

* @license GNU Public License

*/

define('IN_PHPBB', true);

if (!defined('PHPBB_ROOT_PATH')) { define('PHPBB_ROOT_PATH', './'); }

require_once(PHPBB_ROOT_PATH . 'common.php');

require_once(PHPBB_ROOT_PATH . 'includes/functions_display.php');

require_once(PHPBB_ROOT_PATH . 'includes/bbcode.php');

// Start session management

$user->session_begin();

$auth->acl($user->data);

// Initial var setup

$forum_id = request_var('f', 0);

$topic_id = request_var('t', 0);

$post_id = request_var('p', 0);

$start = request_var('start', 0);

$view = request_var('view', '');

$default_sort_days = 0;

$default_sort_key = $user->data['user_post_sortby_type'] ?: 't';

$default_sort_dir = $user->data['user_post_sortby_dir'] ?: 'a';

$sort_days = request_var('st', $default_sort_days);

$sort_key = request_var('sk', $default_sort_key);

$sort_dir = request_var('sd', $default_sort_dir);

/**

* @todo normalize?

*/

$hilit_words = empty($config['search_highlight_keywords']) ? '' : request_var('hilit', '', true);

// Do we have a topic or post id?

if (!$topic_id && !$post_id)

{

trigger_error('NO_TOPIC');

}

// Find first unread post if requested.

if ($view && !$post_id)

{

if (!$forum_id)

{

$sql = 'SELECT forum_id

FROM ' . TOPICS_TABLE . "

WHERE topic_id = $topic_id";

$result = $db->sql_query($sql);

$forum_id = (int) $db->sql_fetchfield('forum_id');

$db->sql_freeresult($result);

if (!$forum_id)

{

trigger_error('NO_TOPIC');

}

}

if ($view == 'unread')

{

// Get topic tracking info

$topic_tracking_info = get_complete_topic_tracking($forum_id, $topic_id);

$topic_last_read = $topic_tracking_info[$topic_id] ?? 0;

$sql = 'SELECT post_id, topic_id, forum_id

FROM ' . POSTS_TABLE . "

WHERE topic_id = $topic_id

" . (($auth->acl_get('m_approve', $forum_id)) ? '' : 'AND post_approved = 1') . "

AND (post_time > $topic_last_read OR post_merged > $topic_last_read)

AND forum_id = $forum_id

ORDER BY post_time ASC";

$result = $db->sql_query_limit($sql, 1);

$row = $db->sql_fetchrow($result);

$db->sql_freeresult($result);

if (!$row)

{

$sql = 'SELECT topic_last_post_id as post_id, topic_id, forum_id

FROM ' . TOPICS_TABLE . '

WHERE topic_id = ' . $topic_id;

$result = $db->sql_query($sql);

$row = $db->sql_fetchrow($result);

$db->sql_freeresult($result);

}

if (!$row)

{

// Setup user environment so we can process lang string

$user->setup('viewtopic');

trigger_error('NO_TOPIC');

}

$post_id = $row['post_id'];

$topic_id = $row['topic_id'];

$forum_id = $row['forum_id'];

}

}

// This rather complex gaggle of code handles querying for topics but

// also allows for direct linking to a post (and the calculation of which

// page the post is on and the correct display of viewtopic)

$sql_array = [

'SELECT' => 't.*, f.*',

'FROM' => [FORUMS_TABLE => 'f'],

];

// The FROM-Order is quite important here, else t.* columns can not be correctly bound.

if ($post_id)

{

$sql_array['SELECT'] .= ', p.post_approved, p.post_time, p.post_id';

$sql_array['FROM'][POSTS_TABLE] = 'p';

}

// Topics table need to be the last in the chain

$sql_array['FROM'][TOPICS_TABLE] = 't';

if ($user->data['is_registered'])

{

$sql_array['SELECT'] .= ', tw.notify_status';

$sql_array['LEFT_JOIN'] = [];

$sql_array['LEFT_JOIN'][] = [

'FROM' => [TOPICS_WATCH_TABLE => 'tw'],

'ON' => 'tw.user_id = ' . $user->data['user_id'] . ' AND t.topic_id = tw.topic_id'

];

if ($config['allow_bookmarks'])

{

$sql_array['SELECT'] .= ', bm.topic_id as bookmarked';

$sql_array['LEFT_JOIN'][] = [

'FROM' => [BOOKMARKS_TABLE => 'bm'],

'ON' => 'bm.user_id = ' . $user->data['user_id'] . ' AND t.topic_id = bm.topic_id'

];

}

if ($config['load_db_lastread'])

{

$sql_array['SELECT'] .= ', tt.mark_time, ft.mark_time as forum_mark_time';

$sql_array['LEFT_JOIN'][] = [

'FROM' => [TOPICS_TRACK_TABLE => 'tt'],

'ON' => 'tt.user_id = ' . $user->data['user_id'] . ' AND t.topic_id = tt.topic_id'

];

$sql_array['LEFT_JOIN'][] = [

'FROM' => [FORUMS_TRACK_TABLE => 'ft'],

'ON' => 'ft.user_id = ' . $user->data['user_id'] . ' AND t.forum_id = ft.forum_id'

];

}

}

if (!$post_id)

{

$sql_array['WHERE'] = "t.topic_id = $topic_id";

}

else

{

$sql_array['WHERE'] = "p.post_id = $post_id AND t.topic_id = p.topic_id";

}

$sql_array['WHERE'] .= ' AND f.forum_id = t.forum_id';

$sql = $db->sql_build_query('SELECT', $sql_array);

$result = $db->sql_query($sql);

$topic_data = $db->sql_fetchrow($result);

$db->sql_freeresult($result);

// link to unapproved post or incorrect link

if (!$topic_data)

{

// If post_id was submitted, we try at least to display the topic as a last resort...

if ($post_id && $topic_id)

{

redirect(append_sid(PHPBB_ROOT_PATH . 'viewtopic.php', "t=$topic_id"));

}

trigger_error('NO_TOPIC');

}

$forum_id = (int) $topic_data['forum_id'];

// This is for determining where we are (page)

if ($post_id)

{

// are we where we are supposed to be?

if (!$topic_data['post_approved'] && !$auth->acl_get('m_approve', $topic_data['forum_id']))

{

// If post_id was submitted, we try at least to display the topic as a last resort...

if ($topic_id)

{

redirect(append_sid(PHPBB_ROOT_PATH . 'viewtopic.php', "t=$topic_id"));

}

trigger_error('NO_TOPIC');

}

if ($post_id == $topic_data['topic_first_post_id'] || $post_id == $topic_data['topic_last_post_id'])

{

$check_sort = ($post_id == $topic_data['topic_first_post_id']) ? 'd' : 'a';

if ($sort_dir == $check_sort)

{

$topic_data['prev_posts'] = ($auth->acl_get('m_approve', $forum_id)) ? $topic_data['topic_replies_real'] : $topic_data['topic_replies'];

}

else

{

$topic_data['prev_posts'] = 0;

}

}

else

{

$sql = 'SELECT COUNT(p.post_id) AS prev_posts

FROM ' . POSTS_TABLE . " p

WHERE p.topic_id = {$topic_data['topic_id']}

" . ((!$auth->acl_get('m_approve', $forum_id)) ? 'AND p.post_approved = 1' : '');

if ($sort_dir == 'd')

{

$sql .= " AND (p.post_time > {$topic_data['post_time']} OR (p.post_time = {$topic_data['post_time']} AND p.post_id >= {$topic_data['post_id']}))";

}

else

{

$sql .= " AND (p.post_time < {$topic_data['post_time']} OR (p.post_time = {$topic_data['post_time']} AND p.post_id <= {$topic_data['post_id']}))";

}

$result = $db->sql_query($sql);

$row = $db->sql_fetchrow($result);

$db->sql_freeresult($result);

$topic_data['prev_posts'] = $row['prev_posts'] - 1;

}

}

$topic_id = (int) $topic_data['topic_id'];

//

$topic_replies = ($auth->acl_get('m_approve', $forum_id)) ? $topic_data['topic_replies_real'] : $topic_data['topic_replies'];

// Check sticky/announcement time limit

if ($topic_data['topic_type'] != POST_NORMAL && $topic_data['topic_time_limit'] && ($topic_data['topic_time'] + $topic_data['topic_time_limit']) < time())

{

$sql = 'UPDATE ' . TOPICS_TABLE . '

SET topic_type = ' . POST_NORMAL . ', topic_time_limit = 0

WHERE topic_id = ' . $topic_id;

$db->sql_query($sql);

$topic_data['topic_type'] = POST_NORMAL;

$topic_data['topic_time_limit'] = 0;

}

// Setup look and feel

$user->setup('viewtopic');

if (!$topic_data['topic_approved'] && !$auth->acl_get('m_approve', $forum_id))

{

trigger_error('NO_TOPIC');

}

// Start auth check

if (!$auth->acl_get('f_read', $forum_id))

{

if ($user->data['user_id'] != ANONYMOUS)

{

trigger_error('SORRY_AUTH_READ');

}

login_box('', $user->lang['LOGIN_EXPLAIN_VIEWFORUM']);

}

// Forum is passworded ... check whether access has been granted to this

// user this session, if not show login box

if ($topic_data['forum_password'])

{

login_forum_box($topic_data);

}

// Redirect to login or to the correct post upon emailed notification links

if (isset($_GET['e']))

{

$jump_to = request_var('e', 0);

$redirect_url = append_sid(PHPBB_ROOT_PATH . 'viewtopic.php', "t=$topic_id");

if ($user->data['user_id'] == ANONYMOUS)

{

login_box($redirect_url . "&amp;p=$post_id&amp;e=$jump_to", $user->lang['LOGIN_NOTIFY_TOPIC']);

}

if ($jump_to > 0)

{

// We direct the already logged in user to the correct post...

redirect($redirect_url . ((!$post_id) ? "&amp;p=$jump_to" : "&amp;p=$post_id") . "#p$jump_to");

}

}

// Recalc start position, should be after $user->setup()

if ($start)

{

$start = floor($start / $config['posts_per_page']) * $config['posts_per_page'];

}

// What is start equal to?

if ($post_id)

{

$start = floor(($topic_data['prev_posts']) / $config['posts_per_page']) * $config['posts_per_page'];

}

// Get topic tracking info

if (!isset($topic_tracking_info))

{

$topic_tracking_info = [];

// Get topic tracking info

if ($config['load_db_lastread'] && $user->data['is_registered'])

{

$tmp_topic_data = [$topic_id => $topic_data];

$topic_tracking_info = get_topic_tracking($forum_id, $topic_id, $tmp_topic_data, [$forum_id => $topic_data['forum_mark_time']]);

unset($tmp_topic_data);

}

}

// Post ordering options

$limit_days = [0 => $user->lang['ALL_POSTS'], 1 => $user->lang['1_DAY'], 7 => $user->lang['7_DAYS'], 14 => $user->lang['2_WEEKS'], 30 => $user->lang['1_MONTH'], 90 => $user->lang['3_MONTHS'], 180 => $user->lang['6_MONTHS'], 365 => $user->lang['1_YEAR']];

$sort_by_text = ['t' => $user->lang['POST_TIME'], 'a' => $user->lang['AUTHOR'], 's' => $user->lang['SUBJECT']];

$sort_by_sql = ['t' => 'p.post_time', 'a' => ['u.username_clean', 'p.post_id'], 's' => ['p.post_subject', 'p.post_id']];

$join_user_sql = ['a' => true, 't' => false, 's' => false];

$s_limit_days = $s_sort_key = $s_sort_dir = $u_sort_param = '';

gen_sort_selects($limit_days, $sort_by_text, $sort_days, $sort_key, $sort_dir, $s_limit_days, $s_sort_key, $s_sort_dir, $u_sort_param, $default_sort_days, $default_sort_key, $default_sort_dir);

// Obtain correct post count and ordering SQL if user has

// requested anything different

if ($sort_days)

{

$min_post_time = time() - ($sort_days * 86400);

$sql = 'SELECT COUNT(post_id) AS num_posts

FROM ' . POSTS_TABLE . "

WHERE topic_id = $topic_id

AND post_time >= $min_post_time

" . (($auth->acl_get('m_approve', $forum_id)) ? '' : 'AND post_approved = 1');

$result = $db->sql_query($sql);

$total_posts = (int) $db->sql_fetchfield('num_posts');

$db->sql_freeresult($result);

$limit_posts_time = "AND p.post_time >= $min_post_time ";

if (isset($_POST['sort']))

{

$start = 0;

}

}

else

{

$total_posts = $topic_replies + 1;

$limit_posts_time = '';

}

// Was a highlight request part of the URI?

$highlight_match = $highlight = '';

if ($hilit_words)

{

$highlight_match = phpbb_clean_search_string($hilit_words);

$highlight = urlencode($highlight_match);

$highlight_match = str_replace('\*', '\w+?', preg_quote($highlight_match, '#'));

$highlight_match = preg_replace('#(?<=^|\s)\\\\w\*\?(?=\s|$)#', '\w+?', $highlight_match);

$highlight_match = str_replace(' ', '|', $highlight_match);

}

// Make sure $start is set to the last page if it exceeds the amount

if ($start < 0 || $start >= $total_posts)

{

$start = ($start < 0) ? 0 : floor(($total_posts - 1) / $config['posts_per_page']) * $config['posts_per_page'];

}

// General Viewtopic URL for return links

$viewtopic_url = append_sid(PHPBB_ROOT_PATH . 'viewtopic.php', "t=$topic_id" . (($start == 0) ? '' : "&amp;start=$start") . ((strlen($u_sort_param)) ? "&amp;$u_sort_param" : '') . (($highlight_match) ? "&amp;hilit=$highlight" : ''));

// Are we watching this topic?

$s_watching_topic = [

'link' => '',

'title' => '',

'is_watching' => false,

];

if (($config['email_enable'] || $config['jab_enable']) && $config['allow_topic_notify'])

{

$notify_status = $topic_data['notify_status'] ?? null;

watch_topic_forum('topic', $s_watching_topic, $user->data['user_id'], $forum_id, $topic_id, $notify_status, $start, $topic_data['topic_title']);

// Reset forum notification if forum notify is set

if ($config['allow_forum_notify'])

{

$s_watching_forum = $s_watching_topic;

watch_topic_forum('forum', $s_watching_forum, $user->data['user_id'], $forum_id, 0);

}

}

// Bookmarks

if ($config['allow_bookmarks'] && $user->data['is_registered'] && request_var('bookmark', 0))

{

if (check_link_hash(request_var('hash', ''), "topic_$topic_id"))

{

if (!$topic_data['bookmarked'])

{

$sql = 'INSERT INTO ' . BOOKMARKS_TABLE . ' ' . $db->sql_build_array('INSERT', [

'user_id' => $user->data['user_id'],

'topic_id' => $topic_id,

]);

$db->sql_query($sql);

}

else

{

$sql = 'DELETE FROM ' . BOOKMARKS_TABLE . "

WHERE user_id = {$user->data['user_id']}

AND topic_id = $topic_id";

$db->sql_query($sql);

}

if (!empty($config['skip_typical_notices']))

{

redirect($viewtopic_url);

}

$message = (($topic_data['bookmarked']) ? $user->lang['BOOKMARK_REMOVED'] : $user->lang['BOOKMARK_ADDED']) . '<br /><br />' . sprintf($user->lang['RETURN_TOPIC'], '<a href="' . $viewtopic_url . '">', '</a>');

}

else

{

$message = $user->lang['BOOKMARK_ERR'] . '<br /><br />' . sprintf($user->lang['RETURN_TOPIC'], '<a href="' . $viewtopic_url . '">', '</a>');

}

meta_refresh(3, $viewtopic_url);

trigger_error($message);

}

// Grab icons

$icons = $cache->obtain_icons();

// Grab extensions

$extensions = [];

if ($topic_data['topic_attachment'])

{

$extensions = $cache->obtain_attach_extensions($forum_id);

}

// Forum rules listing

$s_forum_rules = '';

gen_forum_auth_level('topic', $forum_id, $topic_data['forum_status']);

// Quick mod tools

$allow_change_type = ($auth->acl_get('m_', $forum_id) || ($user->data['is_registered'] && $user->data['user_id'] == $topic_data['topic_poster']));

$mod_action = append_sid(PHPBB_ROOT_PATH . 'mcp.php', "f=$forum_id&amp;t=$topic_id&amp;quickmod=1&amp;redirect=" . urlencode(str_replace('&amp;', '&', $viewtopic_url)), true, $user->session_id);

$mod_lock = ($auth->acl_get('m_lock', $forum_id) || ($auth->acl_get('f_user_lock', $forum_id) && $user->data['is_registered'] && $user->data['user_id'] == $topic_data['topic_poster'] && $topic_data['topic_status'] == ITEM_UNLOCKED)) ? (($topic_data['topic_status'] == ITEM_UNLOCKED) ? 'lock' : 'unlock') : false;

$topic_mod = '';

$topic_mod .= ($auth->acl_get('m_move', $forum_id) && $topic_data['topic_status'] != ITEM_MOVED) ? '<option value="move">' . $user->lang['MOVE_TOPIC'] . '</option>' : '';

$topic_mod .= ($auth->acl_get('m_split', $forum_id)) ? '<option value="split">' . $user->lang['SPLIT_TOPIC'] . '</option>' : '';

$topic_mod .= ($auth->acl_get('m_merge', $forum_id)) ? '<option value="merge">' . $user->lang['MERGE_POSTS'] . '</option>' : '';

$topic_mod .= ($auth->acl_get('m_merge', $forum_id)) ? '<option value="merge_topic">' . $user->lang['MERGE_TOPIC'] . '</option>' : '';

$topic_mod .= ($auth->acl_get('m_move', $forum_id)) ? '<option value="fork">' . $user->lang['FORK_TOPIC'] . '</option>' : '';

$topic_mod .= ($allow_change_type && $auth->acl_gets('f_sticky', 'f_announce', $forum_id) && $topic_data['topic_type'] != POST_NORMAL) ? '<option value="make_normal">' . $user->lang['MAKE_NORMAL'] . '</option>' : '';

$topic_mod .= ($allow_change_type && $auth->acl_get('f_sticky', $forum_id) && $topic_data['topic_type'] != POST_STICKY) ? '<option value="make_sticky">' . $user->lang['MAKE_STICKY'] . '</option>' : '';

$topic_mod .= ($allow_change_type && $auth->acl_get('f_announce', $forum_id) && $topic_data['topic_type'] != POST_ANNOUNCE) ? '<option value="make_announce">' . $user->lang['MAKE_ANNOUNCE'] . '</option>' : '';

$topic_mod .= ($allow_change_type && $auth->acl_get('f_announce', $forum_id) && $topic_data['topic_type'] != POST_GLOBAL) ? '<option value="make_global">' . $user->lang['MAKE_GLOBAL'] . '</option>' : '';

$topic_mod .= ($mod_lock!==false) ? (($topic_data['topic_status'] == ITEM_UNLOCKED) ? '<option value="lock">' . $user->lang['LOCK_TOPIC'] . '</option>' : '<option value="unlock">' . $user->lang['UNLOCK_TOPIC'] . '</option>') : '';

$topic_mod .= ($auth->acl_get('m_delete', $forum_id)) ? '<option value="delete_topic">' . $user->lang['DELETE_TOPIC'] . '</option>' : '';

$topic_mod .= ($auth->acl_get('m_', $forum_id)) ? '<option value="topic_logs">' . $user->lang['VIEW_TOPIC_LOGS'] . '</option>' : '';

// If we've got a hightlight set pass it on to pagination.

$pagination = generate_pagination(append_sid(PHPBB_ROOT_PATH . 'viewtopic.php', "t=$topic_id" . ((strlen($u_sort_param)) ? "&amp;$u_sort_param" : '') . (($highlight_match) ? "&amp;hilit=$highlight" : '')), $total_posts, $config['posts_per_page'], $start);

// Navigation links

generate_forum_nav($topic_data);

// Forum Rules

generate_forum_rules($topic_data);

// Moderators

$forum_moderators = [];

get_moderators($forum_moderators, $forum_id);

// This is only used for print view so ...

$server_path = (!$view) ? PHPBB_ROOT_PATH : generate_board_url() . '/';

// Replace naughty words in title

$topic_data['topic_title'] = censor_text($topic_data['topic_title']);

$s_search_hidden_fields = [

't' => $topic_id,

'sf' => 'msgonly',

];

if (!empty($_EXTRA_URL))

{

foreach ($_EXTRA_URL as $url_param)

{

$url_param = explode('=', $url_param, 2);

$s_search_hidden_fields[$url_param[0]] = $url_param[1];

}

}

// Send vars to template

$template->assign_vars([

'FORUM_ID' => $forum_id,

'FORUM_NAME' => $topic_data['forum_name'],

'FORUM_DESC' => generate_text_for_display($topic_data['forum_desc'], $topic_data['forum_desc_uid'], $topic_data['forum_desc_bitfield'], $topic_data['forum_desc_options']),

'TOPIC_ID' => $topic_id,

'TOPIC_TITLE' => $topic_data['topic_title'],

'TOPIC_POSTER' => $topic_data['topic_poster'],

'TOPIC_AUTHOR_FULL' => get_username_string('full', $topic_data['topic_poster'], $topic_data['topic_first_poster_name'], $topic_data['topic_first_poster_colour']),

'TOPIC_AUTHOR_COLOUR' => get_username_string('colour', $topic_data['topic_poster'], $topic_data['topic_first_poster_name'], $topic_data['topic_first_poster_colour']),

'TOPIC_AUTHOR' => get_username_string('username', $topic_data['topic_poster'], $topic_data['topic_first_poster_name'], $topic_data['topic_first_poster_colour']),

'PAGINATION' => $pagination,

'PAGE_NUMBER' => on_page($total_posts, $config['posts_per_page'], $start),

'TOTAL_POSTS' => ($total_posts == 1) ? $user->lang['VIEW_TOPIC_POST'] : sprintf($user->lang['VIEW_TOPIC_POSTS'], $total_posts),

'U_MCP_FORUM' => ($auth->acl_get('m_', $forum_id)) ? append_sid(PHPBB_ROOT_PATH . 'mcp.php', "i=main&amp;mode=forum_view&amp;f=$forum_id", true, $user->session_id) : '',

'U_MCP_TOPIC' => ($auth->acl_get('m_', $forum_id)) ? append_sid(PHPBB_ROOT_PATH . 'mcp.php', "i=main&amp;mode=topic_view&amp;f=$forum_id&amp;t=$topic_id" . (($start == 0) ? '' : "&amp;start=$start") . ((strlen($u_sort_param)) ? "&amp;$u_sort_param" : ''), true, $user->session_id) : '',

'MODERATORS' => (isset($forum_moderators[$forum_id]) && sizeof($forum_moderators[$forum_id])) ? implode(', ', $forum_moderators[$forum_id]) : '',

'POST_IMG' => ($topic_data['forum_status'] == ITEM_LOCKED) ? $user->img('button_topic_locked', 'FORUM_LOCKED') : $user->img('button_topic_new', 'POST_NEW_TOPIC'),

'QUOTE_IMG' => $user->img('icon_post_quote', 'REPLY_WITH_QUOTE'),

'REPLY_IMG' => ($topic_data['forum_status'] == ITEM_LOCKED || $topic_data['topic_status'] == ITEM_LOCKED) ? $user->img('button_topic_locked', 'TOPIC_LOCKED') : $user->img('button_topic_reply', 'REPLY_TO_TOPIC'),

'EDIT_IMG' => $user->img('icon_post_edit', 'EDIT_POST'),

'DELETE_IMG' => $user->img('icon_post_delete', 'DELETE_POST'),

'INFO_IMG' => $user->img('icon_post_info', 'VIEW_INFO'),

'PROFILE_IMG' => $user->img('icon_user_profile', 'READ_PROFILE'),

'SEARCH_IMG' => $user->img('icon_user_search', 'SEARCH_USER_POSTS'),

'PM_IMG' => $user->img('icon_contact_pm', 'SEND_PRIVATE_MESSAGE'),

'EMAIL_IMG' => $user->img('icon_contact_email', 'SEND_EMAIL'),

'WWW_IMG' => $user->img('icon_contact_www', 'VISIT_WEBSITE'),

'JABBER_IMG' => $user->img('icon_contact_jabber', 'JABBER'),

'TELEGRAM_IMG' => $user->img('icon_contact_telegram', 'TELEGRAM'),

'REPORT_IMG' => $user->img('icon_post_report', 'REPORT_POST'),

'REPORTED_IMG' => $user->img('icon_topic_reported', 'POST_REPORTED'),

'UNAPPROVED_IMG' => $user->img('icon_topic_unapproved', 'POST_UNAPPROVED'),

'WARN_IMG' => $user->img('icon_user_warn', 'WARN_USER'),

'S_IS_LOCKED' => ($topic_data['topic_status'] != ITEM_UNLOCKED || $topic_data['forum_status'] != ITEM_UNLOCKED),

'S_SELECT_SORT_DIR' => $s_sort_dir,

'S_SELECT_SORT_KEY' => $s_sort_key,

'S_SELECT_SORT_DAYS' => $s_limit_days,

'S_SINGLE_MODERATOR' => count($forum_moderators[$forum_id] ?? []) == 1,

'S_TOPIC_ACTION' => append_sid(PHPBB_ROOT_PATH . 'viewtopic.php', "t=$topic_id" . (($start == 0) ? '' : "&amp;start=$start")),

'S_TOPIC_MOD' => ($topic_mod != '') ? '<select name="action" id="quick-mod-select">' . $topic_mod . '</select>' : '',

'S_MOD_ACTION' => $mod_action,

'U_LOCK_TOPIC' => ($mod_lock ? ($mod_action . "&action=" . $mod_lock) : false),

'S_VIEWTOPIC' => true,

'S_DISPLAY_SEARCHBOX' => ($auth->acl_get('u_search') && $auth->acl_get('f_search', $forum_id) && $config['load_search']),

'S_SEARCHBOX_ACTION' => append_sid(PHPBB_ROOT_PATH . 'search.php'),

'S_SEARCH_LOCAL_HIDDEN_FIELDS' => build_hidden_fields($s_search_hidden_fields),

'S_DISPLAY_POST_INFO' => ($topic_data['forum_type'] == FORUM_POST && ($auth->acl_get('f_post', $forum_id) || $user->data['user_id'] == ANONYMOUS)),

'S_DISPLAY_REPLY_INFO' => ($topic_data['forum_type'] == FORUM_POST && ($auth->acl_get('f_reply', $forum_id) || $user->data['user_id'] == ANONYMOUS)),

'S_ENABLE_FEEDS_TOPIC' => ($config['feed_topic'] && !phpbb_optionget(FORUM_OPTION_FEED_EXCLUDE, $topic_data['forum_options'])),

'S_RATE_ENABLED' => $config['rate_enabled'] && (!$config['rate_no_negative'] || !$config['rate_no_positive']),

'U_CANONICAL' => generate_board_url() . "/viewtopic.php?t=$topic_id" . (($start) ? "&amp;start=$start" : ''),

'U_TOPIC' => "{$server_path}viewtopic.php?t=$topic_id",

'U_FORUM' => $server_path,

'U_VIEW_TOPIC' => $viewtopic_url,

'U_VIEW_FORUM' => append_sid(PHPBB_ROOT_PATH . 'viewforum.php', 'f=' . $forum_id),

'U_PRINT_TOPIC' => $viewtopic_url . '&amp;view=print',

'U_EMAIL_TOPIC' => ($config['email_enable'] && $config['board_email_form'] && $user->data['is_registered'] && $auth->acl_get('u_sendemail')) ? append_sid(PHPBB_ROOT_PATH . 'memberlist.php', "mode=email&amp;t=$topic_id") : '',

'U_WATCH_TOPIC' => $s_watching_topic['link'],

'L_WATCH_TOPIC' => $s_watching_topic['title'],

'S_WATCHING_TOPIC' => $s_watching_topic['is_watching'],

'U_BOOKMARK_TOPIC' => ($user->data['is_registered'] && $config['allow_bookmarks']) ? $viewtopic_url . '&amp;bookmark=1&amp;hash=' . generate_link_hash("topic_$topic_id") : '',

'L_BOOKMARK_TOPIC' => ($user->data['is_registered'] && $config['allow_bookmarks'] && $topic_data['bookmarked']) ? $user->lang['BOOKMARK_TOPIC_REMOVE'] : $user->lang['BOOKMARK_TOPIC'],

'S_BOOKMARKED_TOPIC' => ($user->data['is_registered'] && $config['allow_bookmarks'] && $topic_data['bookmarked']),

'U_POST_NEW_TOPIC' => ($auth->acl_get('f_post', $forum_id) || $user->data['user_id'] == ANONYMOUS) ? append_sid(PHPBB_ROOT_PATH . 'posting.php', "mode=post&amp;f=$forum_id") : '',

'U_POST_REPLY_TOPIC' => ($auth->acl_get('f_reply', $forum_id) || $user->data['user_id'] == ANONYMOUS) ? append_sid(PHPBB_ROOT_PATH . 'posting.php', "mode=reply&amp;f=$forum_id&amp;t=$topic_id") : '',

'U_BUMP_TOPIC' => (bump_topic_allowed($forum_id, $topic_data['topic_bumped'], $topic_data['topic_last_post_time'], $topic_data['topic_poster'], $topic_data['topic_last_poster_id'])) ? append_sid(PHPBB_ROOT_PATH . 'posting.php', "mode=bump&amp;f=$forum_id&amp;t=$topic_id&amp;hash=" . generate_link_hash("topic_$topic_id")) : '']

);

// Does this topic contain a poll?

$s_can_vote = false;

if (!empty($topic_data['poll_start']))

{

$sql = 'SELECT o.*, p.bbcode_bitfield, p.bbcode_uid

FROM ' . POLL_OPTIONS_TABLE . ' o, ' . POSTS_TABLE . " p

WHERE o.topic_id = $topic_id

AND p.post_id = {$topic_data['topic_first_post_id']}

AND p.topic_id = o.topic_id

ORDER BY o.poll_option_id";

$result = $db->sql_query($sql);

$poll_info = [];

while ($row = $db->sql_fetchrow($result))

{

$poll_info[] = $row;

}

$db->sql_freeresult($result);

$cur_voted_id = [];

if ($user->data['is_registered'])

{

$sql = 'SELECT poll_option_id

FROM ' . POLL_VOTES_TABLE . '

WHERE topic_id = ' . $topic_id . '

AND vote_user_id = ' . $user->data['user_id'];

$result = $db->sql_query($sql);

while ($row = $db->sql_fetchrow($result))

{

$cur_voted_id[] = $row['poll_option_id'];

}

$db->sql_freeresult($result);

}

// Can not vote at all if no vote permission

$s_can_vote = $user->data['is_registered'] && $auth->acl_get('f_vote', $forum_id)

&& (($topic_data['poll_length'] != 0 && $topic_data['poll_start'] + $topic_data['poll_length'] > time()) || $topic_data['poll_length'] == 0)

&& $topic_data['topic_status'] != ITEM_LOCKED

&& $topic_data['forum_status'] != ITEM_LOCKED

&& (!sizeof($cur_voted_id) || ($auth->acl_get('f_votechg', $forum_id) && $topic_data['poll_vote_change']));

$s_display_results = (!$s_can_vote || ($s_can_vote && sizeof($cur_voted_id)) || $view == 'viewpoll');

$update = request_var('update', false);

$unvote = request_var('unvote', false);

if ($s_can_vote && ($update || $unvote))

{

$voted_id = request_var('vote_id', ['' => 0]);

$voted_id = (sizeof($voted_id) > 1) ? array_unique($voted_id) : $voted_id;

if (!$unvote && (!sizeof($voted_id) || sizeof($voted_id) > $topic_data['poll_max_options']) || in_array(VOTE_CONVERTED, $cur_voted_id) || !check_form_key('posting'))

{

$redirect_url = append_sid(PHPBB_ROOT_PATH . 'viewtopic.php', "t=$topic_id" . (($start == 0) ? '' : "&amp;start=$start"));

meta_refresh(5, $redirect_url);

if (!$unvote && !sizeof($voted_id))

{

$message = 'NO_VOTE_OPTION';

}

else if (!$unvote && sizeof($voted_id) > $topic_data['poll_max_options'])

{

$message = 'TOO_MANY_VOTE_OPTIONS';

}

else if (in_array(VOTE_CONVERTED, $cur_voted_id))

{

$message = 'VOTE_CONVERTED';

}

else

{

$message = 'FORM_INVALID';

}

$message = $user->lang[$message] . '<br /><br />' . sprintf($user->lang['RETURN_TOPIC'], '<a href="' . $redirect_url . '">', '</a>');

trigger_error($message);

}

if ($unvote)

{

$voted_id = [];

}

foreach ($voted_id as $option)

{

if (in_array($option, $cur_voted_id))

{

continue;

}

$sql = 'UPDATE ' . POLL_OPTIONS_TABLE . '

SET poll_option_total = poll_option_total + 1

WHERE poll_option_id = ' . (int) $option . '

AND topic_id = ' . (int) $topic_id;

$db->sql_query($sql);

$sql_ary = [

'topic_id' => (int) $topic_id,

'poll_option_id' => (int) $option,

'vote_user_id' => (int) $user->data['user_id'],

'vote_time' => (int) time(),

'vote_user_ip' => (string) $user->ip,

];

$sql = 'INSERT INTO ' . POLL_VOTES_TABLE . ' ' . $db->sql_build_array('INSERT', $sql_ary);

$db->sql_query($sql);

}

foreach ($cur_voted_id as $option)

{

if (!in_array($option, $voted_id))

{

$sql = 'UPDATE ' . POLL_OPTIONS_TABLE . '

SET poll_option_total = poll_option_total - 1

WHERE poll_option_id = ' . (int) $option . '

AND topic_id = ' . (int) $topic_id;

$db->sql_query($sql);

$sql = 'DELETE FROM ' . POLL_VOTES_TABLE . '

WHERE topic_id = ' . (int) $topic_id . '

AND poll_option_id = ' . (int) $option . '

AND vote_user_id = ' . (int) $user->data['user_id'];

$db->sql_query($sql);

}

}

$sql = 'UPDATE ' . TOPICS_TABLE . '

SET poll_last_vote = ' . time() . "

WHERE topic_id = $topic_id";

$db->sql_query($sql);

$redirect_url = append_sid(PHPBB_ROOT_PATH . 'viewtopic.php', "t=$topic_id" . (($start == 0) ? '' : "&amp;start=$start"));

if (!empty($config['skip_typical_notices']))

{

redirect($redirect_url);

}

meta_refresh(3, $redirect_url);

trigger_error($user->lang[($unvote ? 'VOTE_CANCELLED' : 'VOTE_SUBMITTED')] . '<br /><br />' . sprintf($user->lang['RETURN_TOPIC'], '<a href="' . $redirect_url . '">', '</a>'));

}

if ($poll_info[0]['bbcode_bitfield'])

{

$poll_bbcode = new bbcode();

}

else

{

$poll_bbcode = false;

}

for ($i = 0, $size = sizeof($poll_info); $i < $size; $i++)

{

$poll_info[$i]['poll_option_text'] = censor_text($poll_info[$i]['poll_option_text']);

if ($poll_bbcode !== false)

{

$poll_bbcode->bbcode_second_pass($poll_info[$i]['poll_option_text'], $poll_info[$i]['bbcode_uid'], $poll_info[$i]['bbcode_bitfield']);

}

$poll_info[$i]['poll_option_text'] = bbcode_nl2br($poll_info[$i]['poll_option_text']);

$poll_info[$i]['poll_option_text'] = smiley_text($poll_info[$i]['poll_option_text']);

}

$topic_data['poll_title'] = censor_text($topic_data['poll_title']);

if ($poll_bbcode !== false)

{

$poll_bbcode->bbcode_second_pass($topic_data['poll_title'], $poll_info[0]['bbcode_uid'], $poll_info[0]['bbcode_bitfield']);

}

$topic_data['poll_title'] = bbcode_nl2br($topic_data['poll_title']);

$topic_data['poll_title'] = smiley_text($topic_data['poll_title']);

unset($poll_bbcode);

// Get poll voters.

$poll_total = 0;

if($topic_data['poll_show_voters'])

{

$sql = '

SELECT u.user_id, u.username, u.user_colour, pv.poll_option_id, pv.vote_time

FROM ' . POLL_VOTES_TABLE . ' pv

LEFT JOIN ' . USERS_TABLE . ' u ON pv.vote_user_id = u.user_id

WHERE pv.topic_id = ' . $topic_id . '

ORDER BY pv.vote_time ASC, pv.vote_user_id ASC';

$result = $db->sql_query($sql);

$voters = [];

$votes = [];

while ($row = $db->sql_fetchrow($result))

{

$voters[(int)$row['user_id']] = true;

$votes[(int)$row['poll_option_id']][] = $row;

}

$poll_total = count($voters);

unset($voters);

$db->sql_freeresult($result);

foreach ($poll_info as &$option)

{

$option['poll_option_voters'] = '';

$option['poll_option_total'] = 0;

if (empty($votes[(int)$option['poll_option_id']]))

{

continue;

}

$option['poll_option_total'] = count($votes[(int)$option['poll_option_id']]);

foreach ($votes[(int)$option['poll_option_id']] as $vote)

{

$option['poll_option_voters'] .= ', ' . get_username_string('full', $vote['user_id'], $vote['username'], $vote['user_colour'], $vote['username'], false, $vote['vote_time'] ? $user->format_date($vote['vote_time']) : '');

}

$option['poll_option_voters'] = ltrim($option['poll_option_voters'], ', ');

}

unset($option);

}

else

{

$sql = 'SELECT COUNT(DISTINCT vote_user_id) as count

FROM ' . POLL_VOTES_TABLE . '

WHERE topic_id = ' . $topic_id;

$result = $db->sql_query($sql);

$poll_total = (int) $db->sql_fetchfield('count');

$db->sql_freeresult($result);

}

foreach ($poll_info as $poll_option)

{

$option_pct = ($poll_total > 0) ? $poll_option['poll_option_total'] / $poll_total : 0;

$option_pct_txt = sprintf("%.1d%%", round($option_pct * 100));

$template->assign_block_vars('poll_option', [

'POLL_OPTION_ID' => $poll_option['poll_option_id'],

'POLL_OPTION_CAPTION' => $poll_option['poll_option_text'],

'POLL_OPTION_RESULT' => $poll_option['poll_option_total'],

'POLL_OPTION_PERCENT' => $option_pct_txt,

'POLL_OPTION_PCT' => round($option_pct * 100),

'POLL_OPTION_IMG' => $user->img('poll_center', $option_pct_txt, round($option_pct * 250)),

'POLL_OPTION_VOTERS' => $poll_option['poll_option_voters'] ?? '',

'POLL_OPTION_VOTED' => (in_array($poll_option['poll_option_id'], $cur_voted_id)),

]);

}

$poll_end = $topic_data['poll_length'] + $topic_data['poll_start'];

$template->assign_vars([

'POLL_QUESTION' => $topic_data['poll_title'],

'POLL_VOTED' => count($cur_voted_id) > 0,

'TOTAL_VOTERS' => $poll_total,

'POLL_LEFT_CAP_IMG' => $user->img('poll_left'),

'POLL_RIGHT_CAP_IMG'=> $user->img('poll_right'),

'L_MAX_VOTES' => ($topic_data['poll_max_options'] == 1) ? $user->lang['MAX_OPTION_SELECT'] : sprintf($user->lang['MAX_OPTIONS_SELECT'], $topic_data['poll_max_options']),

'L_POLL_LENGTH' => ($topic_data['poll_length']) ? sprintf($user->lang[($poll_end > time()) ? 'POLL_RUN_TILL' : 'POLL_ENDED_AT'], $user->format_date($poll_end)) : '',

'S_HAS_POLL' => true,

'S_CAN_VOTE' => $s_can_vote,

'S_DISPLAY_RESULTS' => $s_display_results,

'S_IS_MULTI_CHOICE' => ($topic_data['poll_max_options'] > 1),

'S_POLL_ACTION' => $viewtopic_url,

'S_SHOW_VOTERS' => (bool) $topic_data['poll_show_voters'],

'U_VIEW_RESULTS' => $viewtopic_url . '&amp;view=viewpoll',

]);

unset($poll_end, $poll_info);

}

// If the user is trying to reach the second half of the topic, fetch it starting from the end

$store_reverse = false;

$sql_limit = $config['posts_per_page'];

$sql_sort_order = $direction = '';

if ($start > $total_posts / 2)

{

$store_reverse = true;

if ($start + $config['posts_per_page'] > $total_posts)

{

$sql_limit = min($config['posts_per_page'], max(1, $total_posts - $start));

}

// Select the sort order

$direction = (($sort_dir == 'd') ? 'ASC' : 'DESC');

$sql_start = max(0, $total_posts - $sql_limit - $start);

}

else

{

// Select the sort order

$direction = (($sort_dir == 'd') ? 'DESC' : 'ASC');

$sql_start = $start;

}

if (is_array($sort_by_sql[$sort_key]))

{

$sql_sort_order = implode(' ' . $direction . ', ', $sort_by_sql[$sort_key]) . ' ' . $direction;

}

else

{

$sql_sort_order = $sort_by_sql[$sort_key] . ' ' . $direction;

}

// Container for user details, only process once

$post_list = $user_cache = $id_cache = $attachments = $attach_list = $rowset = $update_count = $post_edit_list = [];

$has_attachments = $display_notice = false;

$bbcode_bitfield = '';

// Go ahead and pull all data for this topic

$sql = 'SELECT p.post_id

FROM ' . POSTS_TABLE . ' p' . (($join_user_sql[$sort_key]) ? ', ' . USERS_TABLE . ' u' : '') . "

WHERE p.topic_id = $topic_id

" . ((!$auth->acl_get('m_approve', $forum_id)) ? 'AND p.post_approved = 1' : '') . "

" . (($join_user_sql[$sort_key]) ? 'AND u.user_id = p.poster_id' : '') . "

$limit_posts_time

ORDER BY $sql_sort_order";

$result = $db->sql_query_limit($sql, $sql_limit, $sql_start);

while ($row = $db->sql_fetchrow($result))

{

if ($topic_data['topic_first_post_show'] && $row['post_id'] == $topic_data['topic_first_post_id'])

{

// Skip first post if it is pinned

continue;

}

$post_list[] = (int) $row['post_id'];

}

$db->sql_freeresult($result);

// If reversed order is used for storing

if ($store_reverse)

{

$post_list = array_reverse($post_list);

}

// Show first post on every page if needed

if ($topic_data['topic_first_post_show'])

{

array_unshift($post_list, (int) $topic_data['topic_first_post_id']);

}

if (!sizeof($post_list))

{

if ($sort_days)

{

trigger_error('NO_POSTS_TIME_FRAME');

}

else

{

trigger_error('NO_TOPIC');

}

}

// Holding maximum post time for marking topic read

// We need to grab it because we do reverse ordering sometimes

$max_post_time = 0;

$sql = $db->sql_build_query('SELECT', [

'SELECT' => 'u.*, z.friend, z.foe, p.*',

'FROM' => [

USERS_TABLE => 'u',

POSTS_TABLE => 'p',

],

'LEFT_JOIN' => [

[

'FROM' => [ZEBRA_TABLE => 'z'],

'ON' => 'z.user_id = ' . $user->data['user_id'] . ' AND z.zebra_id = p.poster_id'

]

],

'WHERE' => $db->sql_in_set('p.post_id', $post_list) . '

AND u.user_id = p.poster_id'

]);

$result = $db->sql_query($sql);

$now = phpbb_gmgetdate(time() + $user->timezone + $user->dst);

// Posts are stored in the $rowset array while $attach_list, $user_cache

// and the global bbcode_bitfield are built

while ($row = $db->sql_fetchrow($result))

{

// Set max_post_time

if ($row['post_time'] > $max_post_time)

{

$max_post_time = max($row['post_time'], $row['post_merged']);

}

$poster_id = (int) $row['poster_id'];

// Does post have an attachment? If so, add it to the list

if ($row['post_attachment'] && $config['allow_attachments'])

{

$attach_list[] = (int) $row['post_id'];

if ($row['post_approved'])

{

$has_attachments = true;

}

}

$rowset[$row['post_id']] = [

'hide_post' => ($row['foe'] && ($view != 'show' || $post_id != $row['post_id'])),

'post_id' => $row['post_id'],

'post_time' => $row['post_time'],

'post_merged' => $row['post_merged'],

'user_id' => $row['user_id'],

'username' => $row['username'],

'user_colour' => $row['user_colour'],

'topic_id' => $row['topic_id'],

'forum_id' => $row['forum_id'],

'post_subject' => $row['post_subject'],

'post_edit_count' => $row['post_edit_count'],

'post_edit_time' => $row['post_edit_time'],