<?
session_start();

$document = array();
$script = "";
$init = "";

require "../lib/getnpost.php";
require "../lib/config.php";
require "../lib/dbconnect.php";
require "../lib/auth.php";
require "../lib/common.php";

require "community_common.php";

function mkWrite(
	&$document, &$script, &$init, $bdid, $page, $msid, $sn, $ss, $sc, $st
) {
	global $PSYCHENAME, $PsycheAdmin;
	global $mscatarray;

	$ste = urlencode($st);

	if ($msid) {
		$result = mysql_query("select mssubject, mscontent
from messages
where msid = '$msid'");

		list($mssubject, $mscontent) = mysql_fetch_row($result);

//		$mssubject = "[re] " . $mssubject;

		$mscontent = str_replace("<br />", "", $mscontent);
		$mscontent = "\n\n\n" . preg_replace("/^/m", "> ", $mscontent);

		$mscatstring = "";
		$mscatscript = "";
	} else {
		$somsca = sizeof($mscatarray);

		$mscatstring = <<<EOS
<select id="mscat" name="mscat" style="width: 65px;">
<option value="" style="background-color: #f2f2f2;">Á¾·ù</option>

EOS;

		for ($i = 0; $i < $somsca; $i++) {
			$mscatstring .= <<<EOS
<option value="{$mscatarray[$i][0]}">{$mscatarray[$i][1]}</option>

EOS;
		}

		if ($PsycheAdmin) {
			$mscatstring .= <<<EOS
<option value="N">°øÁö</option>

EOS;
		}

		$mscatstring .= <<<EOS
</select>

EOS;

		$mscatscript = <<<EOS

	if (!f.mscat.selectedIndex) {
		alert("±Û Á¾·ù¸¦ ¼±ÅÃÇØ ÁÖ¼¼¿ä.");
		f.mscat.focus();

		return false;
	}

EOS;
	}

	$document['main'] .= <<<EOS
<form id="writeform" enctype="multipart/form-data"
 action="{$_SERVER['PHP_SELF']}" method="post" onsubmit="return checkWrite();">
            <table width="670" border="0" cellspacing="0" cellpadding="0">
              <tr>
                <td>{$document['caption']}</td>
              </tr>
            </table>
            <br>
            <table width="670" border="0" cellspacing="0" cellpadding="0">
<tr>
                <td height="5" bgcolor="87AE49"></td>
              </tr>
              <tr>
                <td height="2"></td>
              </tr>
            </table>
            <table width="670" border="0" cellspacing="0" cellpadding="0">
              <tr>
                <td width="15"><img src="/community/images/boxleft.gif" width="15" height="35"></td>
                <td width="640" background="/community/images/boxpat.gif"><table width="640" border="0" cellspacing="0" cellpadding="0">
                    <tr> 
                      <td width="70" align="center"><img src="/community/images/t_subject.gif" width="22" height="11"></td>
                      <td width="1"><img src="/community/images/boxtitle_bar.gif" width="1" height="15"></td>
                      <td style="padding-left:15px">
$mscatstring
<input type="text" id="mssubject" name="mssubject" class="box01" value="$mssubject" style="width: 425px;"></td>
                    </tr>
                  </table></td>
                <td width="15"><img src="/community/images/boxright.gif" width="15" height="35"></td>
              </tr>
            </table>
           
            <table width="668" border="0" cellspacing="0" cellpadding="0">
              <tr> 
                <td width="668" height="30" align="center"> <table width="640" border="0" cellspacing="0" cellpadding="0">
<tr> 
                      <td width="70" align="center"><img src="/community/images/t_name.gif" width="32" height="11"></td>
                      <td width="1"><img src="/community/images/boxtitle_bar.gif" width="1" height="15"></td>
                      <td width="386" style="padding-left:15px">$PSYCHENAME</td>
                      <td width="183" align="right"></td>
                    </tr>
                  </table>
                </td>
              </tr>
			  
            </table>
			<table width="670" border="0" cellspacing="0" cellpadding="0">
              <tr> 
                <td height="1" bgcolor="E5E3E3"></td>
              </tr>
           
            </table>
			<table width="670" border="0" cellspacing="0" cellpadding="0">
              <tr> 
                <td height="30" align="center" bgcolor="F7F6F6"><table width="640" border="0" cellspacing="0" cellpadding="0">
                    <tr> 
                      <td width="70" align="center"><img src="/community/images/t_file.gif" width="42" height="11"></td>
                      <td width="1"><img src="/community/images/boxtitle_bar.gif" width="1" height="15"></td>
                      <td style="padding-left:15px"> <table width="540" border="0" cellspacing="0" cellpadding="0">
<tr> 
                            <td width="409">
							<table width="100%" border="0" cellspacing="0" cellpadding="2">
                                <tr> 
                                  <td height="20">
<input type="file" id="msattach0" name="msattach0" class="box02" /><br />
<input type="hidden" id="msattachmax" name="msattachmax" value="1" />
</td>
                                </tr>
                              </table></td>
                            <td width="131" align="right" valign="middle"><a href="javascript:addAttachField()"><img src="/images/file_add.gif" width="66" height="12" border="0"></a></td>
                          </tr>
                        </table></td>
                    </tr>
                  </table></td>
              </tr>
             
            </table>
			<table width="670" border="0" cellspacing="0" cellpadding="0">
              <tr> 
                <td height="1" bgcolor="E5E3E3"></td>
              </tr>
           
            </table>
            <table width="670" border="0" cellspacing="0" cellpadding="10">
              <tr> 
                <td width="85" height="250">&nbsp;</td>
                <td width="585" height="200" valign="top" style="line-height:18px"><textarea id="mscontent" name="mscontent" class="box02" style="width: 500px; height: 284px;">$mscontent</textarea>
                <!----<p>
                <script src="embed_rex.js"></script>
                <p>
                ---->
                </td>
              </tr>
            </table>
            <table width="670" border="0" cellspacing="0" cellpadding="0">
              <tr> 
                <td height="1" bgcolor="9DBD6B"></td>
              </tr>
              <tr> 
                <td height="25" align="center" bgcolor="F7F6F6">&nbsp;</td>
              </tr>
            </table>
            <table width="670" border="0" cellspacing="0" cellpadding="5">
              <tr> 
                <td width="329"><a href="list.php?bdid=$bdid&page=$page&sn=$sn&ss=$ss&sc=$sc&st=$ste"><img src="/images/b_list.gif" width="52" height="20" border="0"></a></td>
                <td width="321" align="right"><input type="image" src="/images/b_ok.gif" width="52" height="20"> 
                </td>
              </tr>
            </table>
<input type="hidden" id="bdid" name="bdid" value="$bdid" />
<input type="hidden" id="page" name="page" value="$page" />
<input type="hidden" id="msid" name="msid" value="$msid" />
<input type="hidden" name="writesubmit" value="1" />
</form>

EOS;

	$script .= <<<EOS
function addAttachField() {
	elMsAtMax = document.getElementById("msattachmax");
	msatmax = parseInt(elMsAtMax.value);
	elMsAtMax.value = msatmax + 1;

	elFile = document.createElement("input");
	elFile.type = "file";
	elFile.id = "msattach" + msatmax;
	elFile.name = "msattach" + msatmax;
	elFile.className = "box02";
	elMsAtMax.parentNode.insertBefore(elFile, elMsAtMax);

	elBR = document.createElement("br");
	elMsAtMax.parentNode.insertBefore(elBR, elMsAtMax);
}

function checkWrite() {
	f = document.getElementById("writeform");

$mscatscript

	if (!f.mssubject.value) {
		alert("Á¦¸ñÀ» ÀÔ·ÂÇØ ÁÖ¼¼¿ä.");
		f.mssubject.focus();

		return false;
	}

	if (!f.mscontent.value) {
		alert("³»¿ëÀ» ÀÔ·ÂÇØ ÁÖ¼¼¿ä.");
		f.mscontent.focus();

		return false;
	}



	return true;
}

EOS;
}

## Start

mkBoardCommon($document, $bdid);

if (!$PSYCHEID) {
        header("Location: https://www.prosigner.com/member/signin.php?from=$ReqURI");

	return;
}

if (!$bdid) {
	header("Location: community.php");

	return;
}

if ($BDPRIVW == "A" && !$PsycheAdmin) {
	header("Location: community.php");

	return;
}

if ($writesubmit) {
	mysql_query("lock table messages write");

	if (!$PsycheAdmin) $mssubject = htmlspecialchars($mssubject);

	if (!$PsycheAdmin) {
		$mscontent = htmlspecialchars($mscontent);
	}
	$mscontent = nl2br($mscontent);

	if ($msid) {
		$result = mysql_query("select mscat, msgroup, msdepth, msseq
from messages where msid = '$msid'");

		list($mscat, $msgroup, $msdepth, $msseq)
		= mysql_fetch_row($result);

		if (!$msgroup) {
			mysql_query("update messages set msgroup = '$msid'
where msid = '$msid'");

			$msgroup = $msid;
		}

		$msdepth++;

		mysql_query("update messages set msseq = msseq + 1
where msseq >= '$msseq'");
	} else {
		$msgroup = 0;
		$msdepth = 0;

		$result = mysql_query("select max(msseq) from messages");
		list($msseq) = mysql_fetch_row($result);
		$msseq++;
	}

	mysql_query("insert into messages
(bdid, usid, msname, mssubject, mscontent, mstime,
 mscat, msgroup, msdepth, msseq) values
('$bdid', '$PSYCHEID', '$PSYCHENAME', '$mssubject', '$mscontent', now(),
 '$mscat', '$msgroup', '$msdepth', '$msseq')");

	$msid = mysql_insert_id();

	mysql_query("unlock tables");

	$msattaches = 0;

	for ($i = 0; $i < $msattachmax; $i++) {
		$msatvar = "msattach" . $i;

		if ($_FILES[$msatvar]['size']) {
			$_FILES[$msatvar]['name']
			= str_replace("\\'", "", $_FILES[$msatvar]['name']);

			mysql_query("insert into attaches
(msid, atname, attype) values
('$msid', '{$_FILES[$msatvar]['name']}', '{$_FILES[$msatvar]['type']}')");

			$atid = mysql_insert_id();

			$msatpath = $BOARD_ATTACHPATH . "/AT_" . $atid . "_" .
				    $_FILES[$msatvar]['name'];

			move_uploaded_file(
				$_FILES[$msatvar]['tmp_name'], $msatpath
			);

			$msattaches++;
		}
	}

	if ($msattaches) {
		mysql_query("update messages set msattaches = '$msattaches'
where msid = '$msid'");
	}

	header("Location: read.php?bdid=$bdid&page=$page&msid=$msid");

	return;
}

mkWrite($document, $script, $init, $bdid, $page, $msid, $sn, $ss, $sc, $st);

require "community_template.php";
?>
