mirror of
https://github.com/danpros/htmly.git
synced 2026-04-17 11:16:00 +05:30
1041 lines
No EOL
31 KiB
PHP
1041 lines
No EOL
31 KiB
PHP
<?php
|
|
if (!defined('HTMLY')) die('HTMLy');
|
|
|
|
use PHPMailer\PHPMailer\PHPMailer;
|
|
use PHPMailer\PHPMailer\Exception;
|
|
|
|
/**
|
|
* Check if local comments system is enabled
|
|
*
|
|
* @return bool
|
|
*/
|
|
function local()
|
|
{
|
|
return config('comment.system') === 'local';
|
|
}
|
|
|
|
/**
|
|
* Get comments configuration value
|
|
*
|
|
* @param string $key Configuration key (use 'reload' to force cache reload)
|
|
* @return mixed Configuration value or null
|
|
*/
|
|
function comments_config($key)
|
|
{
|
|
static $_config = array();
|
|
|
|
$config_file = 'config/comments.ini';
|
|
|
|
// Allow cache reload
|
|
if ($key === 'reload') {
|
|
$_config = array();
|
|
return null;
|
|
}
|
|
|
|
if (empty($_config) && file_exists($config_file)) {
|
|
$_config = parse_ini_file($config_file, false);
|
|
}
|
|
|
|
return isset($_config[$key]) ? $_config[$key] : null;
|
|
}
|
|
|
|
/**
|
|
* Save comments configuration
|
|
*
|
|
* @param array $data Configuration data to save
|
|
* @return bool Success status
|
|
*/
|
|
function save_comments_config($data = array())
|
|
{
|
|
$config_file = 'config/comments.ini';
|
|
|
|
if (!file_exists($config_file)) {
|
|
return false;
|
|
}
|
|
|
|
$string = file_get_contents($config_file);
|
|
|
|
foreach ($data as $word => $value) {
|
|
// Ensure null and empty values are saved as empty strings
|
|
if ($value === null || $value === '') {
|
|
$value = '""';
|
|
} else {
|
|
// Encode value
|
|
$value = json_encode($value, JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE);
|
|
}
|
|
|
|
$map = array('\r\n' => ' \n ', '\r' => ' \n ');
|
|
$value = trim(strtr($value, $map));
|
|
|
|
// Escape dots in the key for regex
|
|
$escapedWord = str_replace('.', '\.', $word);
|
|
|
|
// Try to replace existing line
|
|
$pattern = "/^" . $escapedWord . " = .*/m";
|
|
if (preg_match($pattern, $string)) {
|
|
$string = preg_replace($pattern, $word . ' = ' . $value, $string);
|
|
} else {
|
|
// If line doesn't exist, add it at the end
|
|
$string = rtrim($string) . "\n" . $word . ' = ' . $value . "\n";
|
|
}
|
|
}
|
|
|
|
$string = rtrim($string) . "\n";
|
|
$result = file_put_contents($config_file, $string, LOCK_EX);
|
|
|
|
// Clear PHP opcache for this file
|
|
if (function_exists('opcache_invalidate')) {
|
|
opcache_invalidate($config_file, true);
|
|
}
|
|
|
|
// Clear cache after saving
|
|
if ($result !== false) {
|
|
comments_config('reload');
|
|
}
|
|
|
|
return $result;
|
|
}
|
|
|
|
/**
|
|
* Get comments file path for a post/page
|
|
* Replicates content file path inside comments folder
|
|
*
|
|
* @param string $url is the page url (e.g., "post/htmly-simple-comment-system" or "author/emidio")
|
|
* @param string $file is the content markdown file (optional)
|
|
* @return string File path (e.g., "content/comments/post/htmly-simple-comment-system.json")
|
|
*/
|
|
|
|
function get_comments_file($url, $mdfile = null)
|
|
{
|
|
// $view -> static/main/post/profile
|
|
if ($mdfile) {
|
|
if (preg_match('#comments[/\\\\].+\.json#', $mdfile)) {
|
|
if (is_file($mdfile)) {
|
|
return $mdfile;
|
|
}
|
|
}
|
|
else {
|
|
$comments_file = get_comments_file_from_md($mdfile);
|
|
}
|
|
}
|
|
else {
|
|
$comments_file = get_comments_file_from_url($url);
|
|
}
|
|
return $comments_file;
|
|
}
|
|
|
|
|
|
function get_comments_file_from_md($mdfile) {
|
|
$file_parts = explode('_', pathinfo($mdfile, PATHINFO_FILENAME));
|
|
|
|
if (count($file_parts) > 1) {
|
|
$file = reset($file_parts) . '_' . end($file_parts) . '.json';
|
|
}
|
|
else {
|
|
$file = reset($file_parts) . '.json';
|
|
}
|
|
|
|
$path = preg_replace('/content/', 'content/comments', pathinfo($mdfile, PATHINFO_DIRNAME), 1);
|
|
return $path . '/' . $file;
|
|
}
|
|
|
|
function get_comments_file_from_url($url) {
|
|
// not using $view actually
|
|
|
|
// strip site_url prefix and query string if present
|
|
$url = trim(parse_url($url, PHP_URL_PATH), '/');
|
|
|
|
// 0. test pattern: author
|
|
if (preg_match('#^author/([^/]+)$#', $url, $matches)) {
|
|
$authorfile = 'content/' . $matches[1] . '/author.md';
|
|
$file = pathinfo($authorfile, PATHINFO_FILENAME) . '.json';
|
|
$path = preg_replace('/content/', 'content/comments', pathinfo($authorfile, PATHINFO_DIRNAME), 1);
|
|
return $path . '/' . $file;
|
|
}
|
|
|
|
// 1. test pattern: /YYYY/MM/name (post with default permalink)
|
|
if (preg_match('#^(\d{4})/(\d{2})/(.+)$#', $url, $matches)) {
|
|
$post = find_post($matches[1], $matches[2], $matches[3]);
|
|
if ($post && isset($post['current']->file)) {
|
|
|
|
$file_parts = explode('_', pathinfo($post['current']->file, PATHINFO_FILENAME));
|
|
|
|
$file = reset($file_parts) . '_' . end($file_parts) . '.json';
|
|
$path = preg_replace('/content/', 'content/comments', pathinfo($post['current']->file, PATHINFO_DIRNAME), 1);
|
|
|
|
return $path . '/' . $file; }
|
|
}
|
|
|
|
// 2. test pattern with custom permalink /[prefix]/name
|
|
$permalink_prefix = permalink_type();
|
|
if ($permalink_prefix != 'default' && strpos($url, $permalink_prefix . '/') === 0) {
|
|
$name = substr($url, strlen($permalink_prefix) + 1);
|
|
$post = find_post(null, null, $name);
|
|
if ($post && isset($post['current']->file)) {
|
|
|
|
$file_parts = explode('_', pathinfo($post['current']->file, PATHINFO_FILENAME));
|
|
|
|
$file = reset($file_parts) . '_' . end($file_parts) . '.json';
|
|
$path = preg_replace('/content/', 'content/comments', pathinfo($post['current']->file, PATHINFO_DIRNAME), 1);
|
|
|
|
return $path . '/' . $file;
|
|
}
|
|
}
|
|
|
|
// 4. test pattern static page: /slug
|
|
if (strpos($url, '/') === false) {
|
|
$page = find_page($url);
|
|
if ($page && isset($page['current']->file)) {
|
|
|
|
$file = pathinfo($page['current']->file, PATHINFO_FILENAME) . '.json';
|
|
$path = preg_replace('/content/', 'content/comments', pathinfo($page['current']->file, PATHINFO_DIRNAME), 1);
|
|
|
|
return $path . '/' . $file;
|
|
}
|
|
}
|
|
|
|
// 2. test pattern sub page: /parent/sub
|
|
if (substr_count($url, '/') == 1) {
|
|
list($parent, $sub) = explode('/', $url, 2);
|
|
$subpage = find_subpage($parent, $sub);
|
|
if ($subpage && isset($subpage['current']->file)) {
|
|
|
|
$file = pathinfo($subpage['current']->file, PATHINFO_FILENAME) . '.json';
|
|
$path = preg_replace('/content/', 'content/comments', pathinfo($subpage['current']->file, PATHINFO_DIRNAME), 1);
|
|
|
|
return $path . '/' . $file;
|
|
}
|
|
}
|
|
|
|
// not found
|
|
return null;
|
|
|
|
}
|
|
|
|
|
|
/**
|
|
* Get all comments for a post/page
|
|
*
|
|
* @param string $postId Post or page ID
|
|
* @param bool $includeUnpublished Include unpublished comments (for admin)
|
|
* @return array Comments array
|
|
*/
|
|
function getComments($url, $mdfile = null, $includeUnpublished = false)
|
|
{
|
|
$file = get_comments_file($url, $mdfile);
|
|
|
|
if (!file_exists($file)) {
|
|
return array();
|
|
}
|
|
|
|
$content = file_get_contents($file);
|
|
$comments = json_decode($content, true);
|
|
|
|
if (!is_array($comments)) {
|
|
return array();
|
|
}
|
|
|
|
// Filter unpublished comments if not admin view
|
|
if (!$includeUnpublished) {
|
|
$comments = array_filter($comments, function($comment) {
|
|
return isset($comment['published']) && $comment['published'] === true;
|
|
});
|
|
}
|
|
|
|
// Sort by date (oldest first)
|
|
usort($comments, function($a, $b) {
|
|
return $a['timestamp'] - $b['timestamp'];
|
|
});
|
|
|
|
return $comments;
|
|
}
|
|
|
|
/**
|
|
* Get all comments across all posts (for admin)
|
|
*
|
|
* @param int $page Page number (default: null for all comments)
|
|
* @param int $perpage Comments per page (default: null for all comments)
|
|
* @return array All comments with post info, or array with paginated comments and total count
|
|
*/
|
|
|
|
function getAllComments($page = null, $perpage = null)
|
|
{
|
|
$commentsDir = 'content/comments/';
|
|
if (!is_dir($commentsDir)) {
|
|
return array();
|
|
}
|
|
|
|
$iterator = new RecursiveIteratorIterator(
|
|
new RecursiveDirectoryIterator($commentsDir, RecursiveDirectoryIterator::SKIP_DOTS),
|
|
RecursiveIteratorIterator::SELF_FIRST
|
|
);
|
|
|
|
$files = array();
|
|
foreach ($iterator as $file) {
|
|
if ($file->isFile() && strtolower($file->getExtension()) === 'json') {
|
|
// $files[] = $file->getPathname();
|
|
$files[] = str_replace('\\', '/', $file->getPathname());
|
|
}
|
|
}
|
|
|
|
$allComments = array();
|
|
|
|
foreach ($files as $file) {
|
|
$comments = getComments('', $file, true);
|
|
$url = get_url_from_file($file);
|
|
foreach ($comments as $comment) {
|
|
$comment['file'] = $file;
|
|
$comment['url'] = $url;
|
|
$allComments[] = $comment;
|
|
}
|
|
}
|
|
|
|
// Sort by date (newest first)
|
|
usort($allComments, function($a, $b) {
|
|
return $b['timestamp'] - $a['timestamp'];
|
|
});
|
|
|
|
// If pagination parameters are provided, return paginated results
|
|
if ($page !== null && $perpage !== null) {
|
|
$total = count($allComments);
|
|
$offset = ($page - 1) * $perpage;
|
|
$paginatedComments = array_slice($allComments, $offset, $perpage);
|
|
return array($paginatedComments, $total);
|
|
}
|
|
|
|
return $allComments;
|
|
}
|
|
|
|
|
|
function getPublishedComments($limit = 5)
|
|
{
|
|
$comments = array();
|
|
$counter = 0;
|
|
$allComments = getAllComments();
|
|
foreach ($allComments as $comment) {
|
|
if ($comment['published'] == 1) {
|
|
$comments[] = $comment;
|
|
}
|
|
if (count($comments) >= $limit) break;
|
|
}
|
|
return $comments;
|
|
}
|
|
|
|
|
|
/**
|
|
* Generate unique comment ID
|
|
*
|
|
* @return string Unique comment ID
|
|
*/
|
|
function generateCommentId()
|
|
{
|
|
return uniqid('comment_', true);
|
|
}
|
|
|
|
/**
|
|
* Build comment tree for nested display
|
|
*
|
|
* @param array $comments Flat array of comments
|
|
* @param string $parentId Parent comment ID (null for root)
|
|
* @param int $level Nesting level
|
|
* @return array Tree structure
|
|
*/
|
|
function buildCommentTree($comments, $parentId = null, $level = 0)
|
|
{
|
|
$tree = array();
|
|
|
|
foreach ($comments as $comment) {
|
|
$commentParent = isset($comment['parent_id']) ? $comment['parent_id'] : null;
|
|
|
|
if ($commentParent === $parentId) {
|
|
$comment['level'] = $level;
|
|
$comment['children'] = buildCommentTree($comments, $comment['id'], $level + 1);
|
|
$tree[] = $comment;
|
|
}
|
|
}
|
|
|
|
return $tree;
|
|
}
|
|
|
|
|
|
/**
|
|
* Calculate seconds difference from now
|
|
*
|
|
* @param int/string $timestamp
|
|
* @return difference in seconds
|
|
*/
|
|
function secondsGenerationSubmit($timestamp) {
|
|
if (!is_numeric($timestamp)) {
|
|
return null; // invalid value
|
|
}
|
|
|
|
$timestampJS = (int) $timestamp;
|
|
$timestampServer = time();
|
|
|
|
return $timestampServer - $timestampJS;
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
* Validate comment data
|
|
*
|
|
* @param array $data Comment data
|
|
* @return array Array with 'valid' boolean and 'errors' array
|
|
*/
|
|
function validateComment($data)
|
|
{
|
|
$errors = array();
|
|
|
|
// Validate name
|
|
if (empty($data['name']) || strlen(trim($data['name'])) < 2) {
|
|
$errors[] = 'comment_submission_error_shortname';
|
|
}
|
|
|
|
// Validate email
|
|
if (empty($data['email']) || !filter_var($data['email'], FILTER_VALIDATE_EMAIL)) {
|
|
$errors[] = 'comment_submission_error_email';
|
|
}
|
|
|
|
// Validate comment text
|
|
if (empty($data['comment']) || strlen(trim($data['comment'])) < 3) {
|
|
$errors[] = 'comment_submission_error_short';
|
|
}
|
|
|
|
// Validate honeypot (if enabled)
|
|
if (comments_config('comments.honeypot') === 'true') {
|
|
if (!empty($data['website'])) {
|
|
$errors[] = 'comment_submission_error_spam';
|
|
}
|
|
}
|
|
|
|
// Validate js and time (if enabled) - minimum 2 seconds, maximum 600 seconds
|
|
if (comments_config('comments.jstime') === 'true') {
|
|
if (!$data['company'] || secondsGenerationSubmit($data['company']) < 3 || secondsGenerationSubmit($data['company']) > 3600) {
|
|
$errors[] = 'comment_submission_error_spam';
|
|
}
|
|
}
|
|
|
|
return array(
|
|
'valid' => empty($errors),
|
|
'errors' => $errors
|
|
);
|
|
}
|
|
|
|
/**
|
|
* Insert a new comment
|
|
*
|
|
* @param string $url or $mdfile (the content md file) - if mdfile not provided falls back using url
|
|
* @param array $data Comment data (name, email, comment, parent_id, notify)
|
|
* @return array Result with 'success' boolean and 'message' or 'comment_id'
|
|
*/
|
|
function commentInsert($data, $url, $mdfile = null)
|
|
{
|
|
// Validate comment
|
|
$validation = validateComment($data);
|
|
if (!$validation['valid']) {
|
|
return array(
|
|
'success' => false,
|
|
'message' => implode(', ', $validation['errors'])
|
|
);
|
|
}
|
|
|
|
// Get existing comments
|
|
$file = get_comments_file($url, $mdfile = null);
|
|
$comments = array();
|
|
if (file_exists($file)) {
|
|
$content = file_get_contents($file);
|
|
$comments = json_decode($content, true);
|
|
if (!is_array($comments)) {
|
|
$comments = array();
|
|
}
|
|
}
|
|
|
|
// Create new comment
|
|
$commentId = generateCommentId();
|
|
$timestamp = time();
|
|
|
|
$comment = array(
|
|
'id' => $commentId,
|
|
'name' => trim($data['name']),
|
|
'email' => trim($data['email']),
|
|
'comment' => trim($data['comment']),
|
|
'timestamp' => $timestamp,
|
|
'date' => date('Y-m-d H:i:s', $timestamp),
|
|
'parent_id' => isset($data['parent_id']) && !empty($data['parent_id']) ? $data['parent_id'] : null,
|
|
'notify' => isset($data['notify']) && $data['notify'] === '1',
|
|
'published' => comments_config('comments.moderation') !== 'true', // Auto-publish if moderation disabled
|
|
'ip' => $_SERVER['REMOTE_ADDR'] ?? 'unknown'
|
|
);
|
|
|
|
// Add comment to array
|
|
$comments[] = $comment;
|
|
|
|
// Save to file
|
|
$json = json_encode($comments, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
|
|
// Create path if not exists
|
|
if (!is_dir(dirname($file))) {
|
|
mkdir(dirname($file), 0755, true); // true = recursively
|
|
}
|
|
if (file_put_contents($file, $json, LOCK_EX) === false) {
|
|
return array(
|
|
'success' => false,
|
|
'message' => 'comment_submission_error'
|
|
);
|
|
}
|
|
|
|
// Subscription handling
|
|
if ($comment['notify']) {
|
|
setSubscription($comment['email'], 'subscribe');
|
|
}
|
|
|
|
// Clearing cache if comment is published, otherwise doesn't display on page
|
|
if ($comment['published']) {
|
|
rebuilt_cache('all');
|
|
clear_cache();
|
|
}
|
|
|
|
|
|
// Send notifications - notify admin always, notify subscribers only if published
|
|
sendCommentNotifications($url, $comment, $comments, true, $comment['published']);
|
|
|
|
return array(
|
|
'success' => true,
|
|
'comment_id' => $commentId,
|
|
'message' => $comment['published'] ? 'comment_submission_success' : 'comment_submission_moderation'
|
|
);
|
|
}
|
|
|
|
|
|
|
|
// action can be subscribe, confirm, unsubscribe
|
|
function setSubscription($email, $action) {
|
|
$subscriptions_dir = 'content/comments/.subscriptions';
|
|
if (!is_dir($subscriptions_dir)) {
|
|
mkdir($subscriptions_dir);
|
|
}
|
|
$subscription_file = $subscriptions_dir . '/' . encryptEmailForFilename($email, comments_config('comments.salt'));
|
|
|
|
$subscription = getSubscription($email);
|
|
|
|
if ($action == 'subscribe') {
|
|
if ($subscription['status'] == 'subscribed') {
|
|
return true;
|
|
}
|
|
elseif ($subscription['status'] == 'waiting') {
|
|
sendSubscriptionEmail($email);
|
|
}
|
|
else {
|
|
$subscription['status'] = 'waiting';
|
|
$json = json_encode($subscription, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
|
|
file_put_contents($subscription_file, $json);
|
|
sendSubscriptionEmail($email);
|
|
return true;
|
|
}
|
|
|
|
}
|
|
elseif ($action == 'confirm' && $subscription['status'] == 'waiting') {
|
|
$subscription['status'] = 'subscribed';
|
|
$json = json_encode($subscription, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
|
|
file_put_contents($subscription_file, $json);
|
|
return true;
|
|
}
|
|
elseif ($action == 'unsubscribe') {
|
|
@unlink($subscription_file);
|
|
return true;
|
|
}
|
|
else {
|
|
// nothing here
|
|
return false;
|
|
}
|
|
}
|
|
|
|
|
|
// returns array
|
|
function getSubscription($email) {
|
|
$subscriptions_dir = 'content/comments/.subscriptions';
|
|
$subscription_file = $subscriptions_dir . '/' . encryptEmailForFilename($email, comments_config('comments.salt'));
|
|
if (!file_exists($subscription_file)) {
|
|
$subscription['status'] = 'no';
|
|
$subscription['date'] = date('Y-m-d H:i:s');
|
|
$subscription['email'] = $email;
|
|
return $subscription;
|
|
}
|
|
else {
|
|
$subscription = json_decode(file_get_data($subscription_file), true);
|
|
return $subscription;
|
|
}
|
|
}
|
|
|
|
|
|
|
|
function confirmSubscription($filename) {
|
|
$subscriptions_dir = 'content/comments/.subscriptions';
|
|
$subscription_file = $subscriptions_dir . '/' . $filename;
|
|
if (sanitizedSubscriptionFile($filename) && file_exists($subscription_file)) {
|
|
$subscription = json_decode(file_get_data($subscription_file), true);
|
|
setSubscription($subscription['email'], 'confirm');
|
|
return true;
|
|
}
|
|
return false;
|
|
}
|
|
|
|
|
|
function sanitizedSubscriptionFile($filename) {
|
|
// no path traversal, sanitizing filename
|
|
$filename = basename($filename);
|
|
if (!preg_match('/^[a-zA-Z0-9._-]+$/', $filename)) {
|
|
return false;
|
|
}
|
|
|
|
$subscriptions_dir = 'content/comments/.subscriptions';
|
|
$subscription_file = $subscriptions_dir . '/' . $filename;
|
|
|
|
// check if path is invalid
|
|
$real_file = realpath($subscription_file);
|
|
$real_dir = realpath($subscriptions_dir);
|
|
|
|
if ($real_file === false || $real_dir === false) {
|
|
return false;
|
|
}
|
|
|
|
// check if path outside .subscriptions dir (we are DELETING files!)
|
|
if (strpos($real_file, $real_dir . DIRECTORY_SEPARATOR) !== 0) {
|
|
return false;
|
|
}
|
|
|
|
return true;
|
|
|
|
}
|
|
|
|
|
|
|
|
function deleteSubscription($filename) {
|
|
$subscriptions_dir = 'content/comments/.subscriptions';
|
|
$subscription_file = $subscriptions_dir . '/' . $filename;
|
|
|
|
if (sanitizedSubscriptionFile($filename) && file_exists($subscription_file)) {
|
|
@unlink($subscription_file);
|
|
return true;
|
|
}
|
|
return false;
|
|
}
|
|
|
|
|
|
|
|
|
|
function encryptEmailForFilename(string $email, string $secretKey) {
|
|
// Normalize email
|
|
$email = strtolower(trim($email));
|
|
// Create HMAC hash
|
|
$hash = hash_hmac('sha256', $email, $secretKey, true);
|
|
|
|
// URL-safe Base64 (filename-safe)
|
|
$safe = rtrim(strtr(base64_encode($hash), '+/', '-_'), '=');
|
|
return $safe;
|
|
}
|
|
|
|
|
|
|
|
function sendSubscriptionEmail($email) {
|
|
try {
|
|
$mail = new PHPMailer(true);
|
|
|
|
// Server settings
|
|
$mail->isSMTP();
|
|
$mail->Host = comments_config('comments.mail.host');
|
|
$mail->SMTPAuth = true;
|
|
$mail->Username = comments_config('comments.mail.username');
|
|
$mail->Password = comments_config('comments.mail.password');
|
|
$mail->Port = comments_config('comments.mail.port');
|
|
|
|
$encryption = comments_config('comments.mail.encryption');
|
|
if ($encryption === 'tls') {
|
|
$mail->SMTPSecure = PHPMailer::ENCRYPTION_STARTTLS;
|
|
} elseif ($encryption === 'ssl') {
|
|
$mail->SMTPSecure = PHPMailer::ENCRYPTION_SMTPS;
|
|
}
|
|
|
|
// Recipients
|
|
$mail->setFrom(
|
|
comments_config('comments.mail.from.email'),
|
|
comments_config('comments.mail.from.name')
|
|
);
|
|
$mail->addAddress($email);
|
|
|
|
// Content
|
|
$mail->isHTML(true);
|
|
$mail->CharSet = 'UTF-8';
|
|
|
|
$mail->Subject = i18n('comment_subscribe_confirmation') . ' '.config('blog.title');
|
|
$mail->Body = "
|
|
<h3>" . i18n('comment_subscribe_thread') . ": ".config('site.url')."</h3>
|
|
<p>" . i18n('comment_subscribe_request') . " ".config('blog.title')."</p>
|
|
<p>" . i18n('comment_subscribe_never_requested') . "</p>
|
|
<p>" . i18n('comment_subscribe_click') . " <a href=\"".config('site.url')."?subscribe=".encryptEmailForFilename($email, comments_config('comments.salt'))."\"><b>" . i18n('comment_subscribe_here') . "</b></a> " . i18n('comment_subscribe_confirm_message') . "</p>
|
|
<p> </p>
|
|
<p>" . i18n('comment_subscribe_unsubscribe_message') . " ".config('blog.title')." " . i18n('comment_subscribe_unsubscribe_anytime') . ": <a href=\"".config('site.url')."?unsubscribe=".encryptEmailForFilename($email, comments_config('comments.salt'))."\"><b>" . i18n('comment_unsubscribe') . "</b></a>.</p>
|
|
<p> </p>
|
|
";
|
|
|
|
$mail->send();
|
|
return true;
|
|
} catch (Exception $e) {
|
|
error_log("Subscription notification email failed: {$mail->ErrorInfo}");
|
|
return false;
|
|
}
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
/**
|
|
* Publish a comment (approve from moderation)
|
|
*
|
|
* @param string $file comment file
|
|
* @param string $commentId Comment ID
|
|
* @return bool Success status
|
|
*/
|
|
function commentPublish($file, $commentId)
|
|
{
|
|
|
|
if (!file_exists($file)) {
|
|
return false;
|
|
}
|
|
|
|
$content = file_get_contents($file);
|
|
$comments = json_decode($content, true);
|
|
|
|
if (!is_array($comments)) {
|
|
return false;
|
|
}
|
|
|
|
$updated = false;
|
|
foreach ($comments as &$comment) {
|
|
if ($comment['id'] === $commentId) {
|
|
$comment['published'] = true;
|
|
$updated = true;
|
|
|
|
$url = get_url_from_file($file);
|
|
|
|
// Send notifications only to subscribers when publishing (admin already saw it in moderation)
|
|
sendCommentNotifications($url, $comment, $comments, false, true);
|
|
break;
|
|
}
|
|
}
|
|
|
|
if (!$updated) {
|
|
return false;
|
|
}
|
|
|
|
$json = json_encode($comments, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
|
|
|
|
rebuilt_cache('all');
|
|
clear_cache();
|
|
|
|
return file_put_contents($file, $json, LOCK_EX) !== false;
|
|
}
|
|
|
|
/**
|
|
* Delete a comment
|
|
*
|
|
* @param string $mdfile (content md file)
|
|
* @param string $commentId Comment ID
|
|
* @return bool Success status
|
|
*/
|
|
function commentDelete($mdfile, $commentId)
|
|
{
|
|
$file = get_comments_file(null, $mdfile);
|
|
if (!file_exists($file)) {
|
|
return false;
|
|
}
|
|
|
|
$content = file_get_contents($file);
|
|
$comments = json_decode($content, true);
|
|
|
|
if (!is_array($comments)) {
|
|
return false;
|
|
}
|
|
|
|
// Remove comment and its children
|
|
$comments = array_filter($comments, function($comment) use ($commentId) {
|
|
return $comment['id'] !== $commentId &&
|
|
(empty($comment['parent_id']) || $comment['parent_id'] !== $commentId);
|
|
});
|
|
|
|
// Reindex array
|
|
$comments = array_values($comments);
|
|
|
|
$json = json_encode($comments, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
|
|
|
|
rebuilt_cache('all');
|
|
clear_cache();
|
|
|
|
return file_put_contents($file, $json, LOCK_EX) !== false;
|
|
}
|
|
|
|
/**
|
|
* Modify a comment
|
|
*
|
|
* @param string $file (comments json file)
|
|
* @param string $commentId Comment ID
|
|
* @param array $data New comment data
|
|
* @return bool Success status
|
|
*/
|
|
function commentModify($file, $commentId, $data)
|
|
{
|
|
if (!file_exists($file)) {
|
|
return false;
|
|
}
|
|
|
|
$content = file_get_contents($file);
|
|
$comments = json_decode($content, true);
|
|
|
|
if (!is_array($comments)) {
|
|
return false;
|
|
}
|
|
|
|
$updated = false;
|
|
foreach ($comments as &$comment) {
|
|
if ($comment['id'] === $commentId) {
|
|
// Update fields
|
|
if (isset($data['name'])) {
|
|
$comment['name'] = trim($data['name']);
|
|
}
|
|
if (isset($data['email'])) {
|
|
$comment['email'] = trim($data['email']);
|
|
}
|
|
if (isset($data['comment'])) {
|
|
$comment['comment'] = trim($data['comment']);
|
|
}
|
|
if (isset($data['published'])) {
|
|
$comment['published'] = (bool)$data['published'];
|
|
}
|
|
|
|
$comment['modified'] = date('Y-m-d H:i:s');
|
|
$updated = true;
|
|
break;
|
|
}
|
|
}
|
|
|
|
if (!$updated) {
|
|
return false;
|
|
}
|
|
|
|
$json = json_encode($comments, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
|
|
return file_put_contents($file, $json, LOCK_EX) !== false;
|
|
}
|
|
|
|
/**
|
|
* Send comment notifications
|
|
*
|
|
* @param string $url Post or page url
|
|
* @param array $newComment The new comment
|
|
* @param array $allComments All comments for this post
|
|
* @param bool $notifyAdmin Notify admin (default true)
|
|
* @param bool $notifySubscribers Notify subscribers (default true)
|
|
* @return void
|
|
*/
|
|
function sendCommentNotifications($url, $newComment, $allComments, $notifyAdmin = true, $notifySubscribers = true)
|
|
{
|
|
// Check if mail is enabled
|
|
if (comments_config('comments.mail.enabled') !== 'true') {
|
|
return;
|
|
}
|
|
|
|
$recipients = array();
|
|
|
|
// Add admin email - notify if comments.notifyadmin = "true" OR comments.moderation = "true"
|
|
if ($notifyAdmin) {
|
|
$shouldNotifyAdmin = (comments_config('comments.notifyadmin') === 'true') ||
|
|
(comments_config('comments.moderation') === 'true');
|
|
|
|
if ($shouldNotifyAdmin) {
|
|
$adminEmail = comments_config('comments.admin.email');
|
|
if (!empty($adminEmail) && filter_var($adminEmail, FILTER_VALIDATE_EMAIL)) {
|
|
$recipients[$adminEmail] = array(
|
|
'name' => 'Administrator',
|
|
'type' => 'admin'
|
|
);
|
|
}
|
|
}
|
|
}
|
|
|
|
// Add subscribers only if notifySubscribers is true AND comments.notify is enabled
|
|
if ($notifySubscribers && comments_config('comments.notify') === 'true') {
|
|
// Add parent comment author (if replying)
|
|
if (!empty($newComment['parent_id'])) {
|
|
foreach ($allComments as $comment) {
|
|
if ($comment['id'] === $newComment['parent_id'] &&
|
|
$comment['notify'] &&
|
|
$comment['email'] !== $newComment['email']) {
|
|
$subscrition = getSubscription($comment['email']);
|
|
if ($subscrition['status'] == 'subscribed') {
|
|
$recipients[$comment['email']] = array(
|
|
'name' => $comment['name'],
|
|
'type' => 'parent'
|
|
);
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
// Add all commenters in same thread (same JSON file) who want notifications
|
|
foreach ($allComments as $comment) {
|
|
if ($comment['notify'] &&
|
|
$comment['email'] !== $newComment['email'] &&
|
|
$comment['id'] !== $newComment['id']) {
|
|
$subscrition = getSubscription($comment['email']);
|
|
if ($subscrition['status'] == 'subscribed') {
|
|
$recipients[$comment['email']] = array(
|
|
'name' => $comment['name'],
|
|
'type' => 'thread'
|
|
);
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
// Send emails
|
|
foreach ($recipients as $email => $info) {
|
|
sendCommentEmail($email, $info['name'], $url, $newComment, $info['type']);
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Send a single comment notification email
|
|
*
|
|
* @param string $to Recipient email
|
|
* @param string $toName Recipient name
|
|
* @param string $postId Post ID
|
|
* @param array $comment Comment data
|
|
* @param string $type Notification type (admin, parent, thread)
|
|
* @return bool Success status
|
|
*/
|
|
function sendCommentEmail($to, $toName, $url, $comment, $type = 'admin')
|
|
{
|
|
try {
|
|
$mail = new PHPMailer(true);
|
|
|
|
// Server settings
|
|
$mail->isSMTP();
|
|
$mail->Host = comments_config('comments.mail.host');
|
|
$mail->SMTPAuth = true;
|
|
$mail->Username = comments_config('comments.mail.username');
|
|
$mail->Password = comments_config('comments.mail.password');
|
|
$mail->Port = comments_config('comments.mail.port');
|
|
|
|
$encryption = comments_config('comments.mail.encryption');
|
|
if ($encryption === 'tls') {
|
|
$mail->SMTPSecure = PHPMailer::ENCRYPTION_STARTTLS;
|
|
} elseif ($encryption === 'ssl') {
|
|
$mail->SMTPSecure = PHPMailer::ENCRYPTION_SMTPS;
|
|
}
|
|
|
|
// Recipients
|
|
$mail->setFrom(
|
|
comments_config('comments.mail.from.email'),
|
|
comments_config('comments.mail.from.name')
|
|
);
|
|
$mail->addAddress($to, $toName);
|
|
|
|
// Content
|
|
$mail->isHTML(true);
|
|
$mail->CharSet = 'UTF-8';
|
|
|
|
if ($type === 'admin') {
|
|
if (comments_config('comments.moderation') === 'true') {
|
|
$mail->Subject = i18n('comment_email_admin_awaiting') . " - " . config('blog.title');
|
|
}
|
|
else {
|
|
$mail->Subject = i18n('comment_email_admin_new') . " - " . config('blog.title');
|
|
}
|
|
$mail->Body = "
|
|
<h3>".i18n('comment_email_new').": {$url}</h3>
|
|
<p><strong>" . i18n('comment_email_from') . ":</strong> {$comment['name']} ({$comment['email']})</p>
|
|
<p><strong>" . i18n('comment') . ":</strong></p>
|
|
<p>" . nl2br(htmlspecialchars($comment['comment'])) . "</p>
|
|
<p><a href='" . site_url() . "admin/comments'>" . i18n('comment_email_moderate'). "</a></p>
|
|
";
|
|
} else {
|
|
$mail->Subject = i18n('comment_email_new_subscribed') . " - " . config('blog.title');
|
|
$mail->Body = "
|
|
<h3>" . i18n('comment_email_new_replied') .": " . site_url() . "{$url}</h3>
|
|
<p><strong>" . i18n('comment_email_from') . ":</strong> {$comment['name']}</p>
|
|
<p><strong>" . i18n('comment') . ":</strong></p>
|
|
<p>" . nl2br(htmlspecialchars($comment['comment'])) . "</p>
|
|
<p><a href='" . site_url() . "{$url}#comment-{$comment['id']}'>" . i18n('comment_email_view_comment') . "</a></p>
|
|
<p> </p>
|
|
<p>" . i18n('comment_subscribe_unsubscribe_message') . " ".config('blog.title')." " . i18n('comment_subscribe_unsubscribe_anytime') . ": <a href=\"".config('site.url')."?unsubscribe=".encryptEmailForFilename($to, comments_config('comments.salt'))."\"><b>" . i18n('comment_unsubscribe') . "</b></a>.</p>
|
|
<p> </p>
|
|
";
|
|
}
|
|
|
|
$mail->send();
|
|
return true;
|
|
} catch (Exception $e) {
|
|
error_log("Comment notification email failed: {$mail->ErrorInfo}");
|
|
return false;
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Get comment count for a post
|
|
*
|
|
* @param string $url Post or page url
|
|
* @param bool $includeUnpublished Include unpublished comments
|
|
* @return int Comment count
|
|
*/
|
|
function getCommentsCount($url, $mdfile = null, $includeUnpublished = false)
|
|
{
|
|
$comments = getComments($url, $mdfile, $includeUnpublished);
|
|
return count($comments);
|
|
}
|
|
|
|
/**
|
|
* Get pending comments count (for admin)
|
|
*
|
|
* @return int Pending comments count
|
|
*/
|
|
function getPendingCommentsCount()
|
|
{
|
|
$allComments = getAllComments();
|
|
$pending = array_filter($allComments, function($comment) {
|
|
return !$comment['published'];
|
|
});
|
|
return count($pending);
|
|
}
|
|
|
|
/**
|
|
* Format comment text (allow basic formatting)
|
|
*
|
|
* @param string $text Comment text
|
|
* @return string Formatted text
|
|
*/
|
|
function formatCommentText($text)
|
|
{
|
|
// Convert line breaks
|
|
$text = nl2br(htmlspecialchars($text, ENT_QUOTES, 'UTF-8'));
|
|
|
|
// Allow simple bold with **text** or __text__
|
|
$text = preg_replace('/\*\*(.+?)\*\*/', '<strong>$1</strong>', $text);
|
|
$text = preg_replace('/__(.+?)__/', '<strong>$1</strong>', $text);
|
|
|
|
return $text;
|
|
}
|
|
|
|
|
|
|
|
|
|
if (isset($_GET['subscribe'])) {
|
|
confirmSubscription($_GET['subscribe']);
|
|
}
|
|
|
|
if (isset($_GET['unsubscribe'])) {
|
|
deleteSubscription($_GET['unsubscribe']);
|
|
}
|
|
|
|
|
|
|
|
?>
|