sorbetcms/classes/comments.class.php

<?php
if (!defined('entry') || !entry) {
    die('Not a valid page');
}
/* ===========================

  Sorbet CMS - A PHP based tumblelog CMS forked from Gelato CMS

  Sorbet CMS is a free software licensed under the GPL 3.0

  =========================== */

class comments
{
    public $db;
    public $conf;

    public function __construct()
    {
        global $db;
        global $conf;

        $this->db = $db;
        $this->conf = $conf;
    }

    public function addComment($fieldsArray)
    {
        if ($this->db->insertarDeFormulario($this->conf->tablePrefix."comments", $fieldsArray)) {
            return true;
        } else {
            return false;
        }
    }

    public function generateCookie($fieldsArray)
    {
        $path = dirname(dirname($_SERVER['SCRIPT_NAME']."../"));
        setcookie("cookie_sor_user", $fieldsArray["username"], time() + 30000000, $path);
        setcookie("cookie_sor_email", $fieldsArray["email"], time() + 30000000, $path);
        setcookie("cookie_sor_web", $fieldsArray["web"], time() + 30000000, $path);
    }

    public function isSpam($fieldsArray)
    {
        if (preg_match("/^\d+$/", $fieldsArray["username"])) {
            return true;
        } elseif (trim($fieldsArray["content"]) == "") {
            return true;
        } elseif (preg_match("/^\d+$/", $fieldsArray["content"])) {
            return true;
        } elseif (strtolower($fieldsArray["content"]) == strtolower($fieldsArray["username"])) {
            return true;
        } elseif (preg_match("#^<strong>[^.]+\.\.\.</strong>#", $fieldsArray["content"])) {
            return true;
        } elseif (3 <= preg_match_all("/a href=/", strtolower($fieldsArray["content"]), $matches)) {
            return true;
        } elseif ($this->isBadWord($fieldsArray["content"])) {
            return true;
        } else {
            return false;
        }
    }

    public function isBadWord($str="")
    {
        $bads = array("puto", "viagra", "ringtones", "casino", "buy", "cheap", "order", "poker", "discount", "fuck", "cool", "site", "online", "very", "cholesterol", "milf", "sex", "sexo", "arredamento", "reddit", "sesso", "lesbico", "vzge", "angelcities", "porno", "holdem", "blackjack", "black-jack", "mortgage", "pharmacy", "loan", "refinance", "credit", "alberghi", "scarica", "hotel", "cellulare", "giochi", "gratis", "gif", "animata", "fantasy", "albergo", "blowjob", "delicio", "cosco", "dealerships");
        for ($i=0;$i<sizeof($bads);$i++) {
            if (preg_match("/".$bads[$i]."/i", $str)) {
                return true;
            }
        }
        return false;
    }

    public function getComments($idPost=null, $limit=null, $from=null, $spam=null)
    {
        if (isset($idPost)) {
            $this->db->ejecutarConsulta("select * from ".$this->conf->tablePrefix."comments WHERE id_post=".$idPost." AND spam=0 order by comment_date ASC");
        } else {
            if (isset($limit) && isset($from)) {
                $limit = " LIMIT $from, $limit";
            } else {
                "";
            }
            if (isset($spam)) {
                $sp = "1";
            } else {
                $sp = "0";
            }
            $this->db->ejecutarConsulta("select * from ".$this->conf->tablePrefix."comments WHERE spam=".$sp." order by comment_date ASC".$limit);
        }
        return $this->db->mid_consulta;
    }

    public function getComment($id="")
    {
        $this->db->ejecutarConsulta("select * from ".$this->conf->tablePrefix."comments WHERE id_comment=".$id);
        return $this->db->mid_consulta->fetch();
    }

    public function countComments($idPost=null)
    {
        if (isset($idPost)) {
            $this->db->ejecutarConsulta("select * from ".$this->conf->tablePrefix."comments WHERE id_post=".$idPost." AND spam=0");
        } else {
            $this->db->ejecutarConsulta("select * from ".$this->conf->tablePrefix."comments WHERE spam=0");
        }
        return $this->db->contarRegistros();
    }

    public function deleteComment($idComment)
    {
        if ($this->db->ejecutarConsulta("DELETE FROM ".$this->conf->tablePrefix."comments WHERE id_comment=".$idComment)) {
            return true;
        } else {
            return false;
        }
    }

    public function modifyComment($fieldsArray, $id_comment)
    {
        if ($this->db->modificarDeFormulario($this->conf->tablePrefix."comments", $fieldsArray, "id_comment=$id_comment")) {
            return true;
        } else {
            return false;
        }
    }
}