<?php
  require_once 'conn.php';
  require_once 'functions.php';
  require_once 'header.php';
  
  $subject\; =\; \text{'}\text{'};\; if\; (isset($_GET['topicid'])) {
    $topicid\; =$_GET['topicid'];
  } else {
    $topicid\; =\; "";\; \}\; if\; (isset($_GET['forumid'])) {
    $forumid\; =$_GET['forumid'];
  } else {
    $forumid\; =\; "";\; \}\; if\; (isset($_GET['reid'])) {
    $reid\; =$_GET['reid'];
  }
  $body\; =\; \text{'}\text{'};$post = '';
  $authorid\; =$_SESSION['user_id'];
  $edit\_mode\; =\; FALSE;\; if\; (isset($_GET['a'])
      and $\_GET[\text{'}a\text{'}]\; ==\; \text{'}edit\text{'}\; and\; isset($_GET['post'])
      and $\_GET[\text{'}post\text{'}])\; \{$edit_mode = TRUE;
  }
  
  require_once 'header.php';
  
  if (!isset($\_SESSION[\text{'}user\_id\text{'}]))\; \{\; echo\; "$<div class=\"notice\">" .
         "You must be logged in to post.  Please <a href=\"" .
         "login.php\">Log in</a> before posting a message." .
         "</div>";
  } elseif (edit_mode and $\_SESSION[\text{'}user\_id\text{'}]\; !=$authorid) {
    echo "<div class=\"noauth\">" .
         "You are not authorized to edit this post.  Please contact " .
         "your administrator.</div>";
  } else {
    if ($edit\_mode)\; \{$sql = "SELECT * FROM forum_posts p, forum_forum f " .
             "WHERE p.id = " . $\_GET[\text{'}post\text{'}]\; .\; "\; AND\; p.forum\_id\; =\; f.id";$result = mysql_query($sql,$conn)
        or die('Could not retrieve post data; ' . mysql_error());
  
      $row\; =\; mysql\_fetch\_array($result);
  
      $subject\; =$row['subject'];
      $topicid\; =$row['topic_id'];
      $forumid\; =$row['forum_id'];
      $body\; =$row['body'];
      $post\; =$_GET['post'];
      $authorid\; =$row['author_id'];
    } else {
  
      if ($topicid\; ==\; "")\; \{$topicid = 0;
        $topicname\; =\; "New\; Topic";\; \}\; else\; \{\; if\; ($reid != "") {
          $sql\; =\; "SELECT\; subject\; FROM\; forum\_posts\; WHERE\; id\; =\; "\; .$reid;
          $result\; =\; mysql\_query($sql, $conn)\; or\; die(\text{'}Could\; not\; retrieve\; topic;\; \text{'}\; .\; mysql\_error());\; if\; (mysql\_num\_rows($result) > 0) {
            $row\; =\; mysql\_fetch\_array($result);
            $re\; =\; preg\_replace("/(re:\; )/i","",$row['subject']);
          }
        }
        $sql\; =\; "SELECT\; subject\; FROM\; forum\_posts\; WHERE\; id\; =\; ";$sql .= $topicid\; .\; "\; AND\; topic\_id\; =\; 0\; AND\; forum\_id\; =$forumid";
        $result\; =\; mysql\_query($sql,$conn)\; or\; die(\text{'}Could\; not\; retrieve\; topic;\; \text{'}\; .\; mysql\_error());\; if\; (mysql\_num\_rows($result) > 0) {
          $row\; =\; mysql\_fetch\_array($result);
          $topicname\; =\; "Reply\; to$<em>" . row['subject'] . "</em>\n";
          $subject\; =\; ($re == ""?"":"Re: " . $re);\; \}\; else\; \{$topicname = "Reply";
          $topicid\; =\; 0;\; \}\; \}\; \}\; if\; ($forumid == "" or $forumid\; ==\; 0)$forumid = 1;
    $sql\; =\; "SELECT\; forum\_name\; FROM\; forum\_forum\; "\; .\; "WHERE\; id\; =\; \text{'}"\; .$forumid . "'";
    $result\; =\; mysql\_query($sql, $conn)\; or\; die(\text{'}Could\; not\; retrieve\; forum\; name;\; \text{'}\; .\; mysql\_error());$row = mysql_fetch_array($result);$forumname = $row[\text{'}forum\_name\text{'}];\; ?>$<form id="forumpost" method="post" action=<transact-post.php>>
  
    <h3><?php echo edit_mode
                   ?"Edit Post"
                   :"$forumname:$topicname"; ?>
    </h3>
    <p>
      Subject:<br>
      <input type="text" class="subject" name="subject" maxlength="255"
        value="<?php echo $subject;\; ?>">$</p>
    <p>
      Body:<br>
      <textarea class="body" name="body" rows="10" cols="60"><?php
        echo body; ?></textarea>
    </p>
    <p>
    <?php
  
    if ($edit\_mode)\; \{\; echo\; \text{'}$<input type="submit" class="submit" name="action" ' .
           "value=\"Save Changes\">\n";
    } else {
      echo '<input type="submit" class="submit" name="action" ' .
           "value=\"Submit New Post\">\n";
    }
  ?>
    </p>
  <?php
    echo "<input type=\"hidden\" name=\"post\" " .
         "value=\"post\">\n";
    echo "<input type=\"hidden\" name=\"topic_id\" " .
         "value=\"$topicid\backslash ">\backslash n";\; echo\; "$<input type=\"hidden\" name=\"forum_id\" " .
         "value=\"forumid\">\n";
    echo "<input type=\"hidden\" name=\"author_id\" " .
         "value=\"$authorid\backslash ">\backslash n";\; echo\; "$</form>\n";
  }
  require_once 'footer.php';
  ?>