demos/blog/protected/Pages/Posts/ViewPost.php


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89

<?php
/**
 * ViewPost class file
 *
 * @author Qiang Xue <qiang.xue@gmail.com>
 * @link http://www.pradosoft.com/
 * @copyright Copyright &copy; 2006 PradoSoft
 * @license http://www.pradosoft.com/license/
 * @version $Id: ViewPost.php 3189 2012-07-12 12:16:21Z ctrlaltca $
 */

/**
 * ViewPost class
 *
 * @author Qiang Xue <qiang.xue@gmail.com>
 * @link http://www.pradosoft.com/
 * @copyright Copyright &copy; 2006 PradoSoft
 * @license http://www.pradosoft.com/license/
 */
class ViewPost extends BlogPage
{
	private $_post=null;

	public function onInit($param)
	{
		parent::onInit($param);
		$id=TPropertyValue::ensureInteger($this->Request['id']);
		$this->_post=$this->DataAccess->queryPostByID($id);
		if($this->_post===null)
			throw new BlogException(500,'post_id_invalid',$id);
		// if post is not published, only the author and admin can view it
		if($this->_post->Status!==PostRecord::STATUS_PUBLISHED && $this->_post->Status!==PostRecord::STATUS_STICKY && !$this->User->IsAdmin && $this->User->ID!==$this->_post->AuthorID)
			throw new BlogException(500,'post_view_disallowed',$id);
		$this->Title=htmlentities($this->_post->Title,ENT_QUOTES,'UTF-8');
	}

	public function getCanEditPost()
	{
		$user=$this->getUser();
		return $user->getIsAdmin() || $user->getID()===$this->_post->AuthorID;
	}

	public function getCurrentPost()
	{
		return $this->_post;
	}

	public function onLoad($param)
	{
		parent::onLoad($param);
		$this->Status->Visible=$this->_post->Status!==PostRecord::STATUS_PUBLISHED && $this->_post->Status!==PostRecord::STATUS_STICKY;
		$this->CategoryList->DataSource=$this->DataAccess->queryCategoriesByPostID($this->_post->ID);
		$this->CategoryList->dataBind();
		$this->CommentList->DataSource=$this->DataAccess->queryCommentsByPostID($this->_post->ID);
		$this->CommentList->dataBind();
	}

	public function submitCommentButtonClicked($sender,$param)
	{
		if($this->IsValid)
		{
			$commentRecord=new CommentRecord;
			$commentRecord->PostID=$this->CurrentPost->ID;
			$commentRecord->AuthorName=$this->CommentAuthor->SafeText;
			$commentRecord->AuthorEmail=$this->CommentEmail->Text;
			$commentRecord->AuthorWebsite=$this->CommentWebsite->SafeText;
			$commentRecord->AuthorIP=$this->Request->UserHostAddress;
			$commentRecord->Content=$this->CommentContent->SafeText;
			$commentRecord->CreateTime=time();
			$commentRecord->Status=0;
			$this->DataAccess->insertComment($commentRecord);
			$this->Response->reload();
		}
	}

	public function deleteButtonClicked($sender,$param)
	{
		$this->DataAccess->deletePost($this->CurrentPost->ID);
		$this->gotoDefaultPage();
	}

	public function repeaterItemCommand($sender,$param)
	{
		$id=TPropertyValue::ensureInteger($param->CommandParameter);
		$this->DataAccess->deleteComment($id);
		$this->Response->reload();
	}
}