<?php
/*-------------------------------------------------------+
| PHP-Fusion Content Management System
| Copyright (C) 2002 - 2010 Nick Jones
| http://www.php-fusion.co.uk/
+--------------------------------------------------------+
| Filename: php_bbcode_save.php
| Author: Wooya
+--------------------------------------------------------+
| This program is released as free software under the
| Affero GPL license. You can redistribute it and/or
| modify it under the terms of this license which you
| can read by viewing the included agpl.txt or online
| at www.gnu.org/licenses/agpl.html. Removal of this
| copyright header is strictly prohibited without
| written permission from the original author(s).
+--------------------------------------------------------*/
require "../../maincore.php";
require INCLUDES."class.httpdownload.php";

function unstripinput($text) {
   if (QUOTES_GPC) $text = stripslashes($text);
   $search = array("\n", "&amp;", "&quot;", "&#39;", "&#92;", "&quot;", "&#39;", "&lt;", "&gt;");
   $replace = array("\r\n", "&", "\"", "'", "\\", '\"', "\'", "<", ">");
   $text = str_replace($search, $replace, $text);
   return $text;
}

if ((isset($_GET['thread_id']) && isnum($_GET['thread_id'])) && (isset($_GET['post_id']) && isnum($_GET['post_id'])) && (isset($_GET['code_id']) && isnum($_GET['code_id']))) {
	$result = dbquery(
		"SELECT fp.*, ff.* FROM ".DB_POSTS." AS fp
		INNER JOIN ".DB_FORUMS." AS ff ON ff.forum_id=fp.forum_id
		WHERE fp.thread_id='".$_GET['thread_id']."' AND fp.post_id='".$_GET['post_id']."'"
	);
	if (dbrows($result)) {
		$data = dbarray($result);
		if (!checkgroup($data['forum_access']) || !$data['forum_cat']) {
			redirect(BASEDIR."forum/viewthread.php?thread_id=".$_GET['thread_id']);
		}
		$text = $data['post_message'];
		preg_match_all("#\[php\](.*?)\[/php\]#si", $text, $matches, PREG_PATTERN_ORDER);
		if (isset($matches[1][$_GET['code_id']])) {
			$text = unstripinput($matches[1][$_GET['code_id']]);
			$filename = "php_".$_GET['thread_id']."_".$_GET['post_id']."_".$_GET['code_id'].".php";
			$object = new httpdownload;
			$object->set_bydata($text);
			$object->use_resume = true;
			$object->set_filename($filename);
			$object->download();
		}
	}
}
?>
