Title: Post a Comment
Plugin: Starburst-Blog

<h1>Web Blog</h1>

You shouldn't see this page.

<perl>
	# Load the blog config.
	$root->{blogcfg} = &readConfig('blog.conf') unless exists $root->{blogcfg};

	my $action = $query->{action} || 'index';
	my $id = $query->{id} || '';
	my $entry = {};

	if (length $id > 0) {
		if (&entryExists($id)) {
			# Good. Read this entry.
			$entry = &readEntry($id);
		}
		else {
			$root->{content} = "<h1>Missing Entry</h1>";
			return 1;
		}
	}

	if ($action eq 'index') {
		$root->{content} = "<h1>Comments</h1>\n\n";

		# Get the comments on this.
		my @comments = &getComments($id);
		if (scalar(@comments)) {
			my $ln = 0;
			foreach my $line (@comments) {
				my ($ip,$time,$name,$msg) = split(/<>/, $line, 4);
				my $stamp = &timeFormat($root->{blogcfg}->{blog}->{timestamp}, $time);

				# Get an avatar.
				my $avatar = "<img src=\"$root->{conf}->{site}->{public}/avatars/user_guest.png\" "
					. "width=\"100\" height=\"100\" alt=\"Guest\"><br>\n"
					. "<strong>guest</strong>\n";
				my $intro = "<em>Posted by somebody</em><p>\n\n";

				if ($name =~ /^guest:/i) {
					$name =~ s/^guest://i;
					$intro = "<em>Posted by $name (Guest)</em><p>\n\n";
				}
				else {
					&readUser($name) unless exists $root->{users}->{$name};
					my $nick = $name;
					my $pos = $root->{conf}->{powers}->{$root->{users}->{$name}->{power}};
					if (&userExists($name)) {
						$nick = &getNickname($name);
					}
					$intro = "<em>Posted by <a href=\"\$link:profile;user=$name\">"
						. "$nick</a> ($pos)</em><p>\n\n";

					# Do they have an avatar?
					if (length $root->{users}->{$name}->{avatar} > 0) {
						$avatar = "<a href=\"\$link:profile;user=$name\">"
							. "<img src=\"$root->{users}->{$name}->{avatar}\" width=\"100\" "
							. "height=\"100\" alt=\"$nick\"></a><br>\n"
							. "<a href=\"\$link:profile;user=$name\">$name</a>\n";
					}
					else {
						$avatar = "<a href=\"\$link:profile;user=$name\">"
							. "<img src=\"$root->{conf}->{site}->{public}/avatars/"
							. "user_guest.png\" width=\"100\" "
							. "height=\"100\" alt=\"$nick\"></a><br>\n"
							. "<a href=\"\$link:profile;user=$name\">$name</a>\n";
					}
				}

				$root->{content} .= "<div style=\"border: 1px dashed #000000; padding: 10px; margin-bottom: 10px\">\n"
					. "<div style=\"float: left; width: 100px; margin-right: 5px; "
					. "text-align: center; padding: 2px; border: 1px solid #000000; "
					. "background-color: #FFFFFF\">\n"
					. "$avatar"
					. "</div>\n"
					. "<strong>$stamp</strong><br>\n"
					. "$intro"
					. "$msg\n";

				if ($root->{auth}) {
					my $perm = &getBlogPermissions();
					if ($perm eq 'authors') {
						$root->{content} .= "<br><br>\n"
							. "<small>[<a href=\"\$link:blog.comment;action=delete;id=$id;line=$ln\" "
							. "onClick=\"return window.confirm('Are you sure you want to delete this comment?')\">"
							. "delete</a>]</small>\n";
					}
				}

				$root->{content} .= "<div style=\"clear: both\"></div>\n</div>\n";

				$ln++;
			}
		}
		else {
			$root->{content} .= "Nobody has commented on this entry yet. Why not "
				. "be the first?\n\n";
		}

		# Are we allowed to comment?
		my $canComment = 1;
		if (not $root->{auth}) {
			if ($root->{blogcfg}->{comments}->{allowguests} == 0) {
				$canComment = 0;
			}
		}

		if ($canComment) {
			$root->{content} .= "<h2>Leave a Comment</h2>\n\n"
				. "<form name=\"comment\" action=\"\$link\" method=\"post\">\n"
				. "<input type=\"hidden\" name=\"p\" value=\"blog.comment\">\n"
				. "<input type=\"hidden\" name=\"action\" value=\"save\">\n"
				. "<input type=\"hidden\" name=\"id\" value=\"$id\">\n"
				. "<strong>Name:</strong><br>\n";

			if ($root->{auth}) {
				$root->{content} .= "<input type=\"hidden\" name=\"name\" value=\"$root->{me}\">\n"
					. ucfirst($root->{me})
					. "<br>\n";
			}
			else {
				$root->{content} .= "<input type=\"text\" size=\"20\" name=\"name\"><br>\n";
			}

			$root->{content} .= "<strong>Message:</strong><br>\n"
				. "<textarea cols=\"30\" rows=\"6\" name=\"message\"></textarea><p>\n\n"
				. "<input type=\"submit\" value=\"Post Comment\">\n\n"
				. "<div style=\"display: none\">\n"
				. "Do not edit these fields.<br>\n"
				. "<input type=\"text\" size=\"20\" name=\"email\" value=\"\"><br>\n"
				. "<input type=\"text\" size=\"20\" name=\"url\" value=\"http://\"><br>\n"
				. "<textarea cols=\"20\" rows=\"2\" name=\"comment\"></textarea>\n"
				. "</div>\n"
				. "</form>\n";
		}
		else {
			$root->{content} .= "<h2>Leave a Comment</h2>\n\n"
				. "You must be <a href=\"\$link:login\">logged in</a> to comment "
				. "on this entry.";
		}
	}
	elsif ($action eq 'save') {
		my $name = $query->{name} || 'Anonymous';
		my $msg  = $query->{message} || '';
		my $trap1 = $query->{email} || '';
		my $trap2 = $query->{url} || '';
		my $trap3 = $query->{comment} || '';

		my $denied = 0;
		if ($trap1 ne '') {
			$denied++;
		}
		if ($trap2 ne 'http://') {
			$denied++;
		}
		if ($trap3 ne '') {
			$denied++;
		}
		if (length $msg == 0) {
			$denied++;
		}

		if ($denied) {
			$root->{content} = "<h1>Comment Denied</h1>\n\n"
				. "Your comment wasn't acceptible. Please try again.";
			return 1;
		}

		# Filter the message.
		$msg =~ s~&~&amp;~ig;
		$msg =~ s~<~&lt;~ig;
		$msg =~ s~>~&gt;~ig;
		$name =~ s~&~&amp;~ig;
		$name =~ s~<~&lt;~ig;
		$name =~ s~>~&gt;~ig;

		# Handle newlines.
		$msg =~ s~\x0a~<br>~ig;
		$msg =~ s~\x0d~~ig;
		$name =~ s~[\x0d\x0a]~~ig;

		# Logged in?
		if ($root->{auth} == 1) {
			$name = $root->{me};
		}
		else {
			$name = "guest:$name";
		}

		# Add the comment.
		&blogComment($id,
			name    => $name,
			message => $msg,
		);

		$root->{content} = "<h1>Comment Posted</h1>\n\n"
			. "Your comment has been posted. <a href=\"\$link:blog;id=$id\">"
			. "Return to the entry</a>.";

		# Send an e-mail to the site administrator.
		$msg =~ s/<br>/\n/g;
		my %smtp = (
			Smtp => $root->{conf}->{mail}->{server},
			From => "Starburst Blog <$root->{conf}->{mail}->{from}>",
			To   => $root->{conf}->{site}->{webmaster},
			Subject => "New Blog Comment: $entry->{subject}",
			Message => "Dear $root->{conf}->{site}->{title} Administrator:\n\n"
				. "A new blog comment, written by $name, has been posted to your "
				. "blog entry titled \"$entry->{subject}\"\n\n"
				. "---\n"
				. "$msg\n"
				. "---\n\n"
				. "Click the link below to view this entry and the new comment:\n"
				. "http://$ENV{SERVER_NAME}/?p=blog;id=$id\n\n"
				. "Note: this message was automatically generated. Do not reply "
				. "to this e-mail.",
		);
		sendEmail(%smtp);
	}
	elsif ($action eq 'delete') {
		$root->{content} = "<h1>Delete Comments</h1>\n\n";
		my $line = (defined $query->{line} ? $query->{line} : '');

		# Make sure we have permission.
		my $perm = &getBlogPermissions();
		if ($perm eq 'authors') {
			if (length $line > 0) {
				# Request this line to be deleted.
				&deleteComment($id,$line);

				$root->{content} = "<h1>Comment Deleted</h1>\n\n"
					. "<strong>DO NOT REFRESH THIS PAGE.</strong> The comment on line $line "
					. "has been deleted. "
					. "<a href=\"\$link:blog;id=$id\">Back to Entry</a>.";
			}
			else {
				$root->{content} = "<h1>Unknown Line</h1>\n\n"
					. "No valid comment entry was given.";
			}
		}
		else {
			$root->{content} = "<h1>Access Denied</h1>\n\n"
				. "You do not have permission to delete this comment.";
		}
	}
</perl>