<?php

/**

 * bbPress Reply Functions

 *

 * @package bbPress

 * @subpackage Functions

 */

// Exit if accessed directly

if ( !defined( 'ABSPATH' ) ) exit;

/** Insert ********************************************************************/

/**

 * A wrapper for wp_insert_post() that also includes the necessary meta values

 * for the reply to function properly.

 *

 * @since bbPress (r3349)

 *

 * @uses bbp_parse_args()

 * @uses bbp_get_reply_post_type()

 * @uses wp_insert_post()

 * @uses update_post_meta()

 *

 * @param array $reply_data Forum post data

 * @param arrap $reply_meta Forum meta data

 */

function bbp_insert_reply( $reply_data = array(), $reply_meta = array() ) {

	// Forum

	$default_reply = array(

		'post_parent'    => 0, // topic ID

		'post_status'    => bbp_get_public_status_id(),

		'post_type'      => bbp_get_reply_post_type(),

		'post_author'    => bbp_get_current_user_id(),

		'post_password'  => '',

		'post_content'   => '',

		'post_title'     => '',

		'menu_order'     => 0,

		'comment_status' => 'closed'

	);

	$reply_data = bbp_parse_args( $reply_data, $default_reply, 'insert_reply' );

	// Insert reply

	$reply_id   = wp_insert_post( $reply_data );

	// Bail if no reply was added

	if ( empty( $reply_id ) )

		return false;

	// Forum meta

	$default_meta = array(

		'author_ip' => bbp_current_author_ip(),

		'forum_id'  => 0,

		'topic_id'  => 0,

	);

	$reply_meta = bbp_parse_args( $reply_meta, $default_meta, 'insert_reply_meta' );

	// Insert reply meta

	foreach ( $reply_meta as $meta_key => $meta_value )

		update_post_meta( $reply_id, '_bbp_' . $meta_key, $meta_value );

	// Update the topic

	$topic_id = bbp_get_reply_topic_id( $reply_id );

	if ( !empty( $topic_id ) )

		bbp_update_topic( $topic_id );

	// Return new reply ID

	return $reply_id;

}

/** Post Form Handlers ********************************************************/

/**

 * Handles the front end reply submission

 *

 * @since bbPress (r2574)

 *

 * @uses bbp_add_error() To add an error message

 * @uses bbp_verify_nonce_request() To verify the nonce and check the request

 * @uses bbp_is_anonymous() To check if an anonymous post is being made

 * @uses current_user_can() To check if the current user can publish replies

 * @uses bbp_get_current_user_id() To get the current user id

 * @uses bbp_filter_anonymous_post_data() To filter anonymous data

 * @uses bbp_set_current_anonymous_user_data() To set the anonymous user

 *                                                cookies

 * @uses is_wp_error() To check if the value retrieved is a {@link WP_Error}

 * @uses remove_filter() To remove 'wp_filter_kses' filters if needed

 * @uses esc_attr() For sanitization

 * @uses bbp_check_for_flood() To check for flooding

 * @uses bbp_check_for_duplicate() To check for duplicates

 * @uses apply_filters() Calls 'bbp_new_reply_pre_title' with the title

 * @uses apply_filters() Calls 'bbp_new_reply_pre_content' with the content

 * @uses bbp_get_reply_post_type() To get the reply post type

 * @uses wp_set_post_terms() To set the topic tags

 * @uses wp_insert_post() To insert the reply

 * @uses do_action() Calls 'bbp_new_reply' with the reply id, topic id, forum

 *                    id, anonymous data and reply author

 * @uses bbp_get_reply_url() To get the paginated url to the reply

 * @uses wp_safe_redirect() To redirect to the reply url

 * @uses bbPress::errors::get_error_message() To get the {@link WP_Error} error

 *                                              message

 */

function bbp_new_reply_handler() {

	// Bail if not a POST action

	if ( 'POST' !== strtoupper( $_SERVER['REQUEST_METHOD'] ) )

		return;

	// Bail if action is not bbp-new-reply

	if ( empty( $_POST['action'] ) || ( 'bbp-new-reply' !== $_POST['action'] ) )

		return;

	// Nonce check

	if ( ! bbp_verify_nonce_request( 'bbp-new-reply' ) ) {

		bbp_add_error( 'bbp_rew_reply_nonce', __( '<strong>ERROR</strong>: Are you sure you wanted to do that?', 'bbpress' ) );

		return;

	}

	// Define local variable(s)

	$topic_id = $forum_id = $reply_author = $anonymous_data = 0;

	$reply_title = $reply_content = $terms = '';

	/** Reply Author **********************************************************/

	// User is anonymous

	if ( bbp_is_anonymous() ) {

		// Filter anonymous data

		$anonymous_data = bbp_filter_anonymous_post_data();

		// Anonymous data checks out, so set cookies, etc...

		if ( !empty( $anonymous_data ) && is_array( $anonymous_data ) ) {

			bbp_set_current_anonymous_user_data( $anonymous_data );

		}

	// User is logged in

	} else {

		// User cannot create replies

		if ( !current_user_can( 'publish_replies' ) ) {

			bbp_add_error( 'bbp_reply_permissions', __( '<strong>ERROR</strong>: You do not have permission to reply.', 'bbpress' ) );

		}

		// Reply author is current user

		$reply_author = bbp_get_current_user_id();

	}

	/** Topic ID **************************************************************/

	// Handle Topic ID to append reply to

	if ( isset( $_POST['bbp_topic_id'] ) ) {

		$topic_id = (int) $_POST['bbp_topic_id'];

	} else {

		bbp_add_error( 'bbp_reply_topic_id', __( '<strong>ERROR</strong>: Topic ID is missing.', 'bbpress' ) );

	}

	/** Forum ID **************************************************************/

	// Handle Forum ID to adjust counts of

	if ( isset( $_POST['bbp_forum_id'] ) ) {

		$forum_id = (int) $_POST['bbp_forum_id'];

	} elseif ( !empty( $topic_id ) ) {

		$forum_id = bbp_get_topic_forum_id( $topic_id );

	} else {

		bbp_add_error( 'bbp_reply_forum_id', __( '<strong>ERROR</strong>: Forum ID is missing.', 'bbpress' ) );

	}

	/** Unfiltered HTML *******************************************************/

	// Remove wp_filter_kses filters from title and content for capable users and if the nonce is verified

	if ( current_user_can( 'unfiltered_html' ) && !empty( $_POST['_bbp_unfiltered_html_reply'] ) && wp_create_nonce( 'bbp-unfiltered-html-reply_' . $topic_id ) == $_POST['_bbp_unfiltered_html_reply'] ) {

		remove_filter( 'bbp_new_reply_pre_title',   'wp_filter_kses' );

		remove_filter( 'bbp_new_reply_pre_content', 'wp_filter_kses' );

	}

	/** Reply Title ***********************************************************/

	if ( !empty( $_POST['bbp_reply_title'] ) )

		$reply_title = esc_attr( strip_tags( $_POST['bbp_reply_title'] ) );

	// Filter and sanitize

	$reply_title = apply_filters( 'bbp_new_reply_pre_title', $reply_title );

	// No reply title

	if ( empty( $reply_title ) )

		bbp_add_error( 'bbp_reply_title', __( '<strong>ERROR</strong>: Your reply needs a title.', 'bbpress' ) );

	/** Reply Content *********************************************************/

	if ( !empty( $_POST['bbp_reply_content'] ) )

		$reply_content = $_POST['bbp_reply_content'];

	// Filter and sanitize

	$reply_content = apply_filters( 'bbp_new_reply_pre_content', $reply_content );

	// No reply content

	if ( empty( $reply_content ) )

		bbp_add_error( 'bbp_reply_content', __( '<strong>ERROR</strong>: Your reply cannot be empty.', 'bbpress' ) );

	/** Reply Flooding ********************************************************/

	if ( !bbp_check_for_flood( $anonymous_data, $reply_author ) )

		bbp_add_error( 'bbp_reply_flood', __( '<strong>ERROR</strong>: Slow down; you move too fast.', 'bbpress' ) );

	/** Reply Duplicate *******************************************************/

	if ( !bbp_check_for_duplicate( array( 'post_type' => bbp_get_reply_post_type(), 'post_author' => $reply_author, 'post_content' => $reply_content, 'post_parent' => $topic_id, 'anonymous_data' => $anonymous_data ) ) )

		bbp_add_error( 'bbp_reply_duplicate', __( '<strong>ERROR</strong>: Duplicate reply detected; it looks as though you&#8217;ve already said that!', 'bbpress' ) );

	/** Reply Blacklist *******************************************************/

	if ( !bbp_check_for_blacklist( $anonymous_data, $reply_author, $reply_title, $reply_content ) )

		bbp_add_error( 'bbp_reply_blacklist', __( '<strong>ERROR</strong>: Your reply cannot be created at this time.', 'bbpress' ) );

	/** Reply Status **********************************************************/

	// Maybe put into moderation

	if ( !bbp_check_for_moderation( $anonymous_data, $reply_author, $reply_title, $reply_content ) ) {

		$reply_status = bbp_get_pending_status_id();

	// Default

	} else {

		$reply_status = bbp_get_public_status_id();

	}

	/** Topic Tags ************************************************************/

	// Either replace terms

	if ( bbp_allow_topic_tags() && current_user_can( 'assign_topic_tags' ) && ! empty( $_POST['bbp_topic_tags'] ) ) {

		$terms = esc_attr( strip_tags( $_POST['bbp_topic_tags'] ) );

	// ...or remove them.

	} elseif ( isset( $_POST['bbp_topic_tags'] ) ) {

		$terms = '';

	// Existing terms

	} else {

		$terms = bbp_get_topic_tag_names( $topic_id );

	}

	/** Additional Actions (Before Save) **************************************/

	do_action( 'bbp_new_reply_pre_extras', $topic_id, $forum_id );

	// Bail if errors

	if ( bbp_has_errors() )

		return;

	/** No Errors *************************************************************/

	// Add the content of the form to $reply_data as an array

	// Just in time manipulation of reply data before being created

	$reply_data = apply_filters( 'bbp_new_reply_pre_insert', array(

		'post_author'    => $reply_author,

		'post_title'     => $reply_title,

		'post_content'   => $reply_content,

		'post_status'    => $reply_status,

		'post_parent'    => $topic_id,

		'post_type'      => bbp_get_reply_post_type(),

		'comment_status' => 'closed',

		'menu_order'     => bbp_get_topic_reply_count( $topic_id, false ) + 1

	) );

	// Insert reply

	$reply_id = wp_insert_post( $reply_data );

	/** No Errors *************************************************************/

	// Check for missing reply_id or error

	if ( !empty( $reply_id ) && !is_wp_error( $reply_id ) ) {

		/** Topic Tags ********************************************************/

		// Just in time manipulation of reply terms before being edited

		$terms = apply_filters( 'bbp_new_reply_pre_set_terms', $terms, $topic_id, $reply_id );

		// Insert terms

		$terms = wp_set_post_terms( $topic_id, $terms, bbp_get_topic_tag_tax_id(), false );

		// Term error

		if ( is_wp_error( $terms ) ) {

			bbp_add_error( 'bbp_reply_tags', __( '<strong>ERROR</strong>: There was a problem adding the tags to the topic.', 'bbpress' ) );

		}

		/** Trash Check *******************************************************/

		// If this reply starts as trash, add it to pre_trashed_replies

		// for the topic, so it is properly restored.

		if ( bbp_is_topic_trash( $topic_id ) || ( $reply_data['post_status'] == bbp_get_trash_status_id() ) ) {

			// Trash the reply

			wp_trash_post( $reply_id );

			// Get pre_trashed_replies for topic

			$pre_trashed_replies = get_post_meta( $topic_id, '_bbp_pre_trashed_replies', true );

			// Add this reply to the end of the existing replies

			$pre_trashed_replies[] = $reply_id;

			// Update the pre_trashed_reply post meta

			update_post_meta( $topic_id, '_bbp_pre_trashed_replies', $pre_trashed_replies );

		}

		/** Spam Check ********************************************************/

		// If reply or topic are spam, officially spam this reply

		if ( bbp_is_topic_spam( $topic_id ) || ( $reply_data['post_status'] == bbp_get_spam_status_id() ) )

			add_post_meta( $reply_id, '_bbp_spam_meta_status', bbp_get_public_status_id() );

		/** Update counts, etc... *********************************************/

		do_action( 'bbp_new_reply', $reply_id, $topic_id, $forum_id, $anonymous_data, $reply_author );

		/** Additional Actions (After Save) ***********************************/

		do_action( 'bbp_new_reply_post_extras', $reply_id );

		/** Redirect **********************************************************/

		// Redirect to

		$redirect_to = !empty( $_REQUEST['redirect_to'] ) ? $_REQUEST['redirect_to'] : '';

		// Get the reply URL

		$reply_url = bbp_get_reply_url( $reply_id, $redirect_to );

		// Allow to be filtered

		$reply_url = apply_filters( 'bbp_new_reply_redirect_to', $reply_url, $redirect_to, $reply_id );

		/** Successful Save ***************************************************/

		// Redirect back to new reply

		wp_safe_redirect( $reply_url );

		// For good measure

		exit();

	/** Errors ****************************************************************/

	} else {

		$append_error = ( is_wp_error( $reply_id ) && $reply_id->get_error_message() ) ? $reply_id->get_error_message() . ' ' : '';

		bbp_add_error( 'bbp_reply_error', __( '<strong>ERROR</strong>: The following problem(s) have been found with your reply:' . $append_error . 'Please try again.', 'bbpress' ) );

	}

}

/**

 * Handles the front end edit reply submission

 *

 * @uses bbp_add_error() To add an error message

 * @uses bbp_get_reply() To get the reply

 * @uses bbp_verify_nonce_request() To verify the nonce and check the request

 * @uses bbp_is_reply_anonymous() To check if the reply was by an anonymous user

 * @uses current_user_can() To check if the current user can edit that reply

 * @uses bbp_filter_anonymous_post_data() To filter anonymous data

 * @uses is_wp_error() To check if the value retrieved is a {@link WP_Error}

 * @uses remove_filter() To remove 'wp_filter_kses' filters if needed

 * @uses esc_attr() For sanitization

 * @uses apply_filters() Calls 'bbp_edit_reply_pre_title' with the title and

 *                       reply id

 * @uses apply_filters() Calls 'bbp_edit_reply_pre_content' with the content

 *                        reply id

 * @uses wp_set_post_terms() To set the topic tags

 * @uses bbp_has_errors() To get the {@link WP_Error} errors

 * @uses wp_save_post_revision() To save a reply revision

 * @uses bbp_update_reply_revision_log() To update the reply revision log

 * @uses wp_update_post() To update the reply

 * @uses bbp_get_reply_topic_id() To get the reply topic id

 * @uses bbp_get_topic_forum_id() To get the topic forum id

 * @uses do_action() Calls 'bbp_edit_reply' with the reply id, topic id, forum

 *                    id, anonymous data, reply author and bool true (for edit)

 * @uses bbp_get_reply_url() To get the paginated url to the reply

 * @uses wp_safe_redirect() To redirect to the reply url

 * @uses bbPress::errors::get_error_message() To get the {@link WP_Error} error

 *                                             message

 */

function bbp_edit_reply_handler() {

	// Bail if not a POST action

	if ( 'POST' !== strtoupper( $_SERVER['REQUEST_METHOD'] ) )

		return;

	// Bail if action is not bbp-edit-reply

	if ( empty( $_POST['action'] ) || ( 'bbp-edit-reply' !== $_POST['action'] ) )

		return;

	// Define local variable(s)

	$revisions_removed = false;

	$reply = $reply_id = $reply_author = $topic_id = $forum_id = $anonymous_data = 0;

	$reply_title = $reply_content = $reply_edit_reason = $terms = '';

	/** Reply *****************************************************************/

	// Reply id was not passed

	if ( empty( $_POST['bbp_reply_id'] ) ) {

		bbp_add_error( 'bbp_edit_reply_id', __( '<strong>ERROR</strong>: Reply ID not found.', 'bbpress' ) );

		return;

	// Reply id was passed

	} elseif ( is_numeric( $_POST['bbp_reply_id'] ) ) {

		$reply_id = (int) $_POST['bbp_reply_id'];

		$reply    = bbp_get_reply( $reply_id );

	}

	// Nonce check

	if ( ! bbp_verify_nonce_request( 'bbp-edit-reply_' . $reply_id ) ) {

		bbp_add_error( 'bbp_edit_reply_nonce', __( '<strong>ERROR</strong>: Are you sure you wanted to do that?', 'bbpress' ) );

		return;

	}

	// Reply does not exist

	if ( empty( $reply ) ) {

		bbp_add_error( 'bbp_edit_reply_not_found', __( '<strong>ERROR</strong>: The reply you want to edit was not found.', 'bbpress' ) );

		return;

	// Reply exists

	} else {

		// Check users ability to create new reply

		if ( ! bbp_is_reply_anonymous( $reply_id ) ) {

			// User cannot edit this reply

			if ( !current_user_can( 'edit_reply', $reply_id ) ) {

				bbp_add_error( 'bbp_edit_reply_permissions', __( '<strong>ERROR</strong>: You do not have permission to edit that reply.', 'bbpress' ) );

				return;

			}

			// Set reply author

			$reply_author = bbp_get_reply_author_id( $reply_id );

		// It is an anonymous post

		} else {

			// Filter anonymous data

			$anonymous_data = bbp_filter_anonymous_post_data();

		}