<<<<<<< HEAD
<?php

/*
 * Nucleus: PHP/MySQL Weblog CMS (http://nucleuscms.org/)
 * Copyright (C) 2002-2009 The Nucleus Group
 *
 * This program is free software; you can redistribute it and/or
 * modify it under the terms of the GNU General Public License
 * as published by the Free Software Foundation; either version 2
 * of the License, or (at your option) any later version.
 * (see nucleus/documentation/index.html#license for more info)
 */
/**
 * Actions that can be called via action.php
 *
 * @license http://nucleuscms.org/license.txt GNU General Public License
 * @copyright Copyright (C) 2002-2009 The Nucleus Group
 * @version $Id: ACTION.php 1646 2012-01-29 10:47:32Z sakamocchi $
 */
class Action
{
	/**
	 * Action::__construct()
	 *  Constructor for an new ACTION object
	 * 
	 * @param	void
	 * @return	void
	 */
	public function __construct()
	{
		return;
	}
	
	/**
	 * Action::doAction()
	 *  Calls functions that handle an action called from action.php
	 * 
	 * @param	string	$action	action type
	 * @return	mixed
	 */
	public function doAction($action)
	{
		switch ( $action )
		{
			case 'autodraft':
				return $this->autoDraft();
				break;
			case 'updateticket':
				return $this->updateTicket();
				break;
			case 'addcomment':
				return $this->addComment();
				break;
			case 'sendmessage':
				return $this->sendMessage();
				break;
			case 'createaccount':
				return $this->createAccount();
				break;
			case 'forgotpassword':
				return $this->forgotPassword();
				break;
			case 'votepositive':
				return $this->doKarma('pos');
				break;
			case 'votenegative':
				return $this->doKarma('neg');
				break;
			case 'plugin':
				return $this->callPlugin();
				break;
			default:
				doError(_ERROR_BADACTION);
				break;
		}
		return;
	}
	
	/**
	 * Action::addComment()
	 * Adds a new comment to an item (if IP isn't banned)
	 * 
	 * @param	void
	 * @return	void
	 */
	private function addComment()
	{
		global $CONF, $errormessage, $manager;
		
		$post['itemid']	= intPostVar('itemid');
		$post['user']	= postVar('user');
		$post['userid']	= postVar('userid');
		$post['email']	= postVar('email');
		$post['body']	= postVar('body');
		$post['remember'] = intPostVar('remember');
		
		// begin if: "Remember Me" box checked
		if ( $post['remember'] == 1 )
		{
			$lifetime = time() + 2592000;
			setcookie($CONF['CookiePrefix'] . 'comment_user', $post['user'], $lifetime, '/', '', 0);
			setcookie($CONF['CookiePrefix'] . 'comment_userid', $post['userid'], $lifetime, '/', '', 0);
			setcookie($CONF['CookiePrefix'] . 'comment_email', $post['email'], $lifetime, '/', '', 0);
		}
		
		$comments = new Comments($post['itemid']);
		
		$blog_id = getBlogIDFromItemID($post['itemid']);
		$this->checkban($blog_id);
		$blog =& $manager->getBlog($blog_id);
		
		// note: PreAddComment and PostAddComment gets called somewhere inside addComment
		$errormessage = $comments->addComment($blog->getCorrectTime(), $post);
		
		if ( $errormessage != '1' )
		{
			// show error message using default skin for blo
			return array(
				'message'	=> $errormessage,
				'skinid'	=> $blog->getDefaultSkin()
			);
		}
		else
		{
			// redirect when adding comments succeeded
			if ( postVar('url') )
			{
				redirect(postVar('url') );
			}
			else
			{
				$url = Link::create_item_link($post['itemid']);
				redirect($url);
			}
		}
		return;
	}
	
	/**
	 * Action::sendMessage()
	 * Sends a message from the current member to the member given as argument
	 * 
	 * @param	void
	 * @return	void
	 */
	private function sendMessage()
	{
		global $CONF, $member;
		
		$error = $this->validateMessage();
		
		if ( $error != '' )
		{
			return array('message' => $error);
		}
		
		if ( !$member->isLoggedIn() )
		{
			$fromMail = postVar('frommail');
			$fromName = _MMAIL_FROMANON;
		}
		else
		{
			$fromMail = $member->getEmail();
			$fromName = $member->getDisplayName();
		}
		
		/* TODO: validation */
		$memberid = postVar('memberid');
		$tomem = new Member();
		$tomem->readFromId($memberid);
		
		/* TODO: validation */
		$message = postVar('message');
		$message  = _MMAIL_MSG . ' ' . $fromName . "\n"
			. '(' . _MMAIL_FROMNUC. ' ' . $CONF['IndexURL'] .") \n\n"
			. _MMAIL_MAIL . " \n\n"
			. $message;
		$message .= Notification::get_mail_footer();
		
		$title = _MMAIL_TITLE . ' ' . $fromName;
		Notification::mail($tomem->getEmail(), $title, $message, $fromMail, i18n::get_current_charset());
		
		/* TODO: validation */
		$url = postVar('url');
		if ( empty($url) )
		{
			$CONF['MemberURL'] = $CONF['IndexURL'];
			
			if ( $CONF['URLMode'] == 'pathinfo' )
			{
				$data = array(
					'memberid'	=> $tomem->getID(),
					'name'		=> $tomem->getDisplayName()
				);
				$url = Link::create_link('member', $data);
			}
			else
			{
				$url = $CONF['IndexURL'] . Link::create_member_link($tomem->getID());
			}
		}
		redirect($url );
		
		return;
	}
	
	/**
	 * Action::validateMessage()
	 *  Checks if a mail to a member is allowed
	 *  Returns a string with the error message if the mail is disallowed
	 * 
	 * @param		void
	 * @return	String	Null character string
	 */
	private function validateMessage()
	{
		global $CONF, $member, $manager;
		
		if ( !$CONF['AllowMemberMail'] )
		{
			return _ERROR_MEMBERMAILDISABLED;
		}
		
		if ( !$member->isLoggedIn() && !$CONF['NonmemberMail'] )
		{
			return _ERROR_DISALLOWED;
		}
		
		if ( !$member->isLoggedIn() && !Notification::address_validation(postVar('frommail')) )
		{
			return _ERROR_BADMAILADDRESS;
		}
		
		/*
		 * let plugins do verification (any plugin which thinks the comment is
		 * invalid can change 'error' to something other than '')
		 */
		$result = '';
		$data = array(
			'type'	=> 'membermail',
			'error'	=> &$result
		);
		$manager->notify('ValidateForm', $data);
		
		return $result;
	}
	
	/**
	 * Action::createAccount()
	 * Creates a new user account
	 *  
	 * @param	void
	 * @return	mixed
	 */
	private function createAccount()
	{
		global $CONF, $manager;
		
		if ( array_key_exists('AllowMemberCreate', $CONF) && !$CONF['AllowMemberCreate'] )
		{
			doError(_ERROR_MEMBERCREATEDISABLED);
		}
		
		// evaluate content from FormExtra
		$result = 1;
		$data = array(
			'type'	=> 'membermail',
			'error'	=> &$result
		);
		$manager->notify('ValidateForm', $data);
		
		if ( $result != 1 )
		{
			return $result;
		}
		
		// even though the member can not log in, set some random initial password. One never knows.
		srand((double) microtime() * 1000000);
		$initialPwd = md5(uniqid(rand(), TRUE) );
		
		// create member (non admin/can not login/no notes/random string as password)
		$name		= Entity::shorten(postVar('name'), 32, '');
		$relname	= postVar('realname');
		$email		= postVar('email');
		$url		= postVar('url');
		
		$r = Member::create($name, $realname, $initialPwd, $email, $url, 0, 0, '');
		
		if ( $r != 1 )
		{
			return $r;
		}
		
		// send message containing password.
		$newmem = new Member();
		$newmem->readFromName($name);
		$newmem->sendActivationLink('register');
		
		$manager->notify('PostRegister', array('member' => &$newmem) );
		
		if ( postVar('desturl') )
		{
			redirect(postVar('desturl') );
		}
		
		return 1;
	}
	
	/**
	 * Action::forgotPassword()
	 * Sends a new password
	 * 
	 * @param	void
	 * @return	void
	 */
	private function forgotPassword()
	{
		$membername = trim(postVar('name') );
		
		if ( !Member::exists($membername) )
		{
			doError(_ERROR_NOSUCHMEMBER);
		}
		
		$mem = Member::createFromName($membername);
		
		// check if e-mail address is correct
		$email = postVar('email');
		if ( $mem->getEmail() != $email )
		{
			doError(_ERROR_INCORRECTEMAIL);
		}
		
		// send activation link
		$mem->sendActivationLink('forgot');
		
		// redirection
		$url = postVar('url');
		if ( !empty($url) )
		{
			redirect(postVar('url') );
		}
		else
		{
			echo _MSG_ACTIVATION_SENT;
			echo "<br />"
			    . "<br />"
			    . "Return to <a href=\"{$CONF['IndexURL']}\" title=\"{$CONF['SiteName']}\">{$CONF['SiteName']}</a>\n";
		}
		
		return;
	}
	
	/**
	 * Action::doKarma()
	 * Handle karma votes
	 * 
	 * @param	string	$type	pos or neg
	 * @return	Void
	 */
	private function doKarma($type)
	{
		global $itemid, $member, $CONF, $manager;
		
		// check if itemid exists
		if ( !$manager->existsItem($itemid, 0, 0) )
		{
			doError(_ERROR_NOSUCHITEM);
		}
		
		$blogid = getBlogIDFromItemID($itemid);
		$this->checkban($blogid);
		
		$karma =& $manager->getKarma($itemid);
		
		// check if not already voted
		if ( !$karma->isVoteAllowed(serverVar('REMOTE_ADDR') ) )
		{
			doError(_ERROR_VOTEDBEFORE);
		}
		
		// check if item does allow voting
		$item =& $manager->getItem($itemid, 0, 0);
		
		if ( $item['closed'] )
		{
			doError(_ERROR_ITEMCLOSED);
		}
		
		switch ( $type )
		{
			case 'pos':
				$karma->votePositive();
			break;
			
			case 'neg':
				$karma->voteNegative();
			break;
		}
		
		$blog =& $manager->getBlog($blogid);
		
		// send email to notification address, if any
		if ( $blog->getNotifyAddress() && $blog->notifyOnVote() )
		{
			$message = _NOTIFY_KV_MSG . ' ' . $itemid . "\n";
			$itemLink = Link::create_item_link((integer)$itemid);
			$temp = parse_url($itemLink);
			
			if ( !$temp['scheme'] )
			{
				$itemLink = $CONF['IndexURL'] . $itemLink;
			}
			
			$message .= $itemLink . "\n\n";
			
			if ( $member->isLoggedIn() )
			{
				$message .= _NOTIFY_MEMBER . ' ' . $member->getDisplayName() . ' (ID=' . $member->getID() . ")\n";
			}
			
			$message .= _NOTIFY_IP . ' ' . serverVar('REMOTE_ADDR') . "\n";
			$message .= _NOTIFY_HOST . ' ' .  gethostbyaddr(serverVar('REMOTE_ADDR'))  . "\n";
			$message .= _NOTIFY_VOTE . "\n " . $type . "\n";
			$message .= Notification::get_mail_footer();
			
			$subject = _NOTIFY_KV_TITLE . ' ' . strip_tags($item['title']) . ' (' . $itemid . ')';
			
			$from = $member->getNotifyFromMailAddress();
			
			Notification::mail($blog->getNotifyAddress(), $subject, $message, $from, i18n::get_current_charset());
		}
		
		$refererUrl = serverVar('HTTP_REFERER');
		
		if ( !$refererUrl )
		{
			$url = $itemLink;
		}
		else
		{
			$url = $refererUrl;
		}
		
		redirect($url);
		return;
	}
	
	/**
	 * Action::callPlugin()
	 * Calls a plugin action
	 * 
	 * @param	void
	 * @return	void
	 */
	private function callPlugin()
	{
		global $manager;
		
		$name = requestVar('name');
		$pluginName = "NP_{$name}";
		$actionType = requestVar('type');
		
		// 1: check if plugin is installed
		if ( !$manager->pluginInstalled($pluginName) )
		{
			doError(_ERROR_NOSUCHPLUGIN);
		}
		
		// 2: call plugin
		$pluginObject =& $manager->getPlugin($pluginName);
		if ( !$pluginObject )
		{
			$error = 'Could not load plugin (see actionlog)';
		}
		else
		{
			$error = $pluginObject->doAction($actionType);
		}
		
		/*
		 * doAction returns error when:
		 *  - an error occurred (duh)
		 *  - no actions are allowed (doAction is not implemented)
		 */
		if ( $error )
		{
			doError($error);
		}
		
		return;
	}
	
	/**
	 * Action::checkban()
	 *  Checks if an IP or IP range is banned
	 * 
	 * @param	integer	$blogid
	 * @return	void
	 */
	private function checkban($blogid)
	{
		// check if banned
		$ban = Ban::isBanned($blogid, serverVar('REMOTE_ADDR') );
		
		if ( $ban != 0 )
		{
			doError(_ERROR_BANNED1 . $ban->iprange . _ERROR_BANNED2 . $ban->message . _ERROR_BANNED3);
		}
		
		return;
	}
	
	/**
	 * Action::updateTicket()
	 * Gets a new ticket
	 * 
	 * @param	void
	 * @return	boolean	FALSE
	 */
	private function updateTicket()
	{
		global $manager;
		
		if ( !$manager->checkTicket() )
		{
			echo _ERROR . ':' . _ERROR_BADTICKET;
		}
		else
		{
			echo $manager->getNewTicket();
		}
		
		return FALSE;
	}
	
	/**
	 * Action::autoDraft()
	 * Handles AutoSaveDraft
	 * 
	 * @param	void
	 * @return	boolean	FALSE
	 */
	private function autoDraft()
	{
		global $manager;
		
		if ( !$manager->checkTicket() )
		{
			echo _ERROR . ':' . _ERROR_BADTICKET;
		}
		else
		{
			$manager->loadClass('ITEM');
			$info = Item::createDraftFromRequest();
			
			if ( $info['status'] != 'error' )
			{
				echo $info['draftid'];
			}
			else
			{
				echo $info['message'];
			}
		}
		
		return FALSE;
	}
}

=======
<?php

/*
 * Nucleus: PHP/MySQL Weblog CMS (http://nucleuscms.org/)
 * Copyright (C) 2002-2009 The Nucleus Group
 *
 * This program is free software; you can redistribute it and/or
 * modify it under the terms of the GNU General Public License
 * as published by the Free Software Foundation; either version 2
 * of the License, or (at your option) any later version.
 * (see nucleus/documentation/index.html#license for more info)
 */
/**
 * Actions that can be called via action.php
 *
 * @license http://nucleuscms.org/license.txt GNU General Public License
 * @copyright Copyright (C) 2002-2009 The Nucleus Group
 * @version $Id: ACTION.php 1646 2012-01-29 10:47:32Z sakamocchi $
 */
class Action
{
	/**
	 * Action::__construct()
	 *  Constructor for an new ACTION object
	 * 
	 * @param	void
	 * @return	void
	 */
	public function __construct()
	{
		return;
	}
	
	/**
	 * Action::doAction()
	 *  Calls functions that handle an action called from action.php
	 * 
	 * @param	string	$action	action type
	 * @return	mixed
	 */
	public function doAction($action)
	{
		switch ( $action )
		{
			case 'autodraft':
				return $this->autoDraft();
				break;
			case 'updateticket':
				return $this->updateTicket();
				break;
			case 'addcomment':
				return $this->addComment();
				break;
			case 'sendmessage':
				return $this->sendMessage();
				break;
			case 'createaccount':
				return $this->createAccount();
				break;
			case 'forgotpassword':
				return $this->forgotPassword();
				break;
			case 'votepositive':
				return $this->doKarma('pos');
				break;
			case 'votenegative':
				return $this->doKarma('neg');
				break;
			case 'plugin':
				return $this->callPlugin();
				break;
			default:
				doError(_ERROR_BADACTION);
				break;
		}
		return;
	}
	
	/**
	 * Action::addComment()
	 * Adds a new comment to an item (if IP isn't banned)
	 * 
	 * @param	void
	 * @return	void
	 */
	private function addComment()
	{
		global $CONF, $errormessage, $manager;
		
		$post['itemid']	= intPostVar('itemid');
		$post['user']	= postVar('user');
		$post['userid']	= postVar('userid');
		$post['email']	= postVar('email');
		$post['body']	= postVar('body');
		$post['remember'] = intPostVar('remember');
		
		// begin if: "Remember Me" box checked
		if ( $post['remember'] == 1 )
		{
			$lifetime = time() + 2592000;
			setcookie($CONF['CookiePrefix'] . 'comment_user', $post['user'], $lifetime, '/', '', 0);
			setcookie($CONF['CookiePrefix'] . 'comment_userid', $post['userid'], $lifetime, '/', '', 0);
			setcookie($CONF['CookiePrefix'] . 'comment_email', $post['email'], $lifetime, '/', '', 0);
		}
		
		$item =& $manager->getItem($post['itemid'], 0, 0);
		$this->checkban($item['blogid']);
		$blog =& $manager->getBlog($item['blogid']);
		
		// note: PreAddComment and PostAddComment gets called somewhere inside addComment
		$comments = new Comments($post['itemid']);
		$errormessage = $comments->addComment($blog->getCorrectTime(), $post);
		
		if ( $errormessage != '1' )
		{
			// show error message using default skin for blo
			return array(
				'message'	=> $errormessage,
				'skinid'	=> $blog->getDefaultSkin()
			);
		}
		else
		{
			// redirect when adding comments succeeded
			if ( postVar('url') )
			{
				redirect(postVar('url') );
			}
			else
			{
				$url = Link::create_item_link($post['itemid']);
				redirect($url);
			}
		}
		return;
	}
	
	/**
	 * Action::sendMessage()
	 * Sends a message from the current member to the member given as argument
	 * 
	 * @param	void
	 * @return	void
	 */
	private function sendMessage()
	{
		global $CONF, $member;
		
		$error = $this->validateMessage();
		
		if ( $error != '' )
		{
			return array('message' => $error);
		}
		
		if ( !$member->isLoggedIn() )
		{
			$fromMail = postVar('frommail');
			$fromName = _MMAIL_FROMANON;
		}
		else
		{
			$fromMail = $member->getEmail();
			$fromName = $member->getDisplayName();
		}
		
		/* TODO: validation */
		$memberid = postVar('memberid');
		$tomem = new Member();
		$tomem->readFromId($memberid);
		
		/* TODO: validation */
		$message = postVar('message');
		$message  = _MMAIL_MSG . ' ' . $fromName . "\n"
			. '(' . _MMAIL_FROMNUC. ' ' . $CONF['IndexURL'] .") \n\n"
			. _MMAIL_MAIL . " \n\n"
			. $message;
		$message .= Notification::get_mail_footer();
		
		$title = _MMAIL_TITLE . ' ' . $fromName;
		Notification::mail($tomem->getEmail(), $title, $message, $fromMail, i18n::get_current_charset());
		
		/* TODO: validation */
		$url = postVar('url');
		if ( empty($url) )
		{
			$CONF['MemberURL'] = $CONF['IndexURL'];
			
			if ( $CONF['URLMode'] == 'pathinfo' )
			{
				$data = array(
					'memberid'	=> $tomem->getID(),
					'name'		=> $tomem->getDisplayName()
				);
				$url = Link::create_link('member', $data);
			}
			else
			{
				$url = $CONF['IndexURL'] . Link::create_member_link($tomem->getID());
			}
		}
		redirect($url );
		
		return;
	}
	
	/**
	 * Action::validateMessage()
	 *  Checks if a mail to a member is allowed
	 *  Returns a string with the error message if the mail is disallowed
	 * 
	 * @param		void
	 * @return	String	Null character string
	 */
	private function validateMessage()
	{
		global $CONF, $member, $manager;
		
		if ( !$CONF['AllowMemberMail'] )
		{
			return _ERROR_MEMBERMAILDISABLED;
		}
		
		if ( !$member->isLoggedIn() && !$CONF['NonmemberMail'] )
		{
			return _ERROR_DISALLOWED;
		}
		
		if ( !$member->isLoggedIn() && !Notification::address_validation(postVar('frommail')) )
		{
			return _ERROR_BADMAILADDRESS;
		}
		
		/*
		 * let plugins do verification (any plugin which thinks the comment is
		 * invalid can change 'error' to something other than '')
		 */
		$result = '';
		$data = array(
			'type'	=> 'membermail',
			'error'	=> &$result
		);
		$manager->notify('ValidateForm', $data);
		
		return $result;
	}
	
	/**
	 * Action::createAccount()
	 * Creates a new user account
	 *  
	 * @param	void
	 * @return	mixed
	 */
	private function createAccount()
	{
		global $CONF, $manager;
		
		if ( array_key_exists('AllowMemberCreate', $CONF) && !$CONF['AllowMemberCreate'] )
		{
			doError(_ERROR_MEMBERCREATEDISABLED);
			return;
		}
		
		// evaluate content from FormExtra
		$result = 1;
		$data = array(
			'type'	=> 'membermail',
			'error'	=> &$result
		);
		$manager->notify('ValidateForm', $data);
		
		if ( $result != 1 )
		{
			return $result;
		}
		
		// even though the member can not log in, set some random initial password. One never knows.
		srand((double) microtime() * 1000000);
		$initialPwd = md5(uniqid(rand(), TRUE) );
		
		// create member (non admin/can not login/no notes/random string as password)
		$name		= Entity::shorten(postVar('name'), 32, '');
		$relname	= postVar('realname');
		$email		= postVar('email');
		$url		= postVar('url');
		
		$r = Member::create($name, $realname, $initialPwd, $email, $url, 0, 0, '');
		
		if ( $r != 1 )
		{
			return $r;
		}
		
		// send message containing password.
		$newmem = new Member();
		$newmem->readFromName($name);
		$newmem->sendActivationLink('register');

		$data = array('member' => $newmem);
		$manager->notify('PostRegister', $data);
		
		if ( postVar('desturl') )
		{
			redirect(postVar('desturl') );
		}
		
		return 1;
	}
	
	/**
	 * Action::forgotPassword()
	 * Sends a new password
	 * 
	 * @param	void
	 * @return	void
	 */
	private function forgotPassword()
	{
		$membername = trim(postVar('name') );
		
		if ( !Member::exists($membername) )
		{
			doError(_ERROR_NOSUCHMEMBER);
			return;
		}
		
		$mem = Member::createFromName($membername);
		
		// check if e-mail address is correct
		$email = postVar('email');
		if ( $mem->getEmail() != $email )
		{
			doError(_ERROR_INCORRECTEMAIL);
			return;
		}
		
		// send activation link
		$mem->sendActivationLink('forgot');
		
		// redirection
		$url = postVar('url');
		if ( !empty($url) )
		{
			redirect(postVar('url') );
		}
		else
		{
			echo _MSG_ACTIVATION_SENT;
			echo "<br />"
			    . "<br />"
			    . "Return to <a href=\"{$CONF['IndexURL']}\" title=\"{$CONF['SiteName']}\">{$CONF['SiteName']}</a>\n";
		}
		
		return;
	}
	
	/**
	 * Action::doKarma()
	 * Handle karma votes
	 * 
	 * @param	string	$type	pos or neg
	 * @return	Void
	 */
	private function doKarma($type)
	{
		global $itemid, $member, $CONF, $manager;
		
		// check if itemid exists
		if ( !$manager->existsItem($itemid, 0, 0) )
		{
			doError(_ERROR_NOSUCHITEM);
			return;
		}
		
		$item =& $manager->getItem($itemid, 0, 0);
		$this->checkban($item['blogid']);
		
		$karma =& $manager->getKarma($itemid);
		
		// check if not already voted
		if ( !$karma->isVoteAllowed(serverVar('REMOTE_ADDR') ) )
		{
			doError(_ERROR_VOTEDBEFORE);
			return;
		}
		
		// check if item does allow voting
		$item =& $manager->getItem($itemid, 0, 0);
		
		if ( $item['closed'] )
		{
			doError(_ERROR_ITEMCLOSED);
			return;
		}
		
		switch ( $type )
		{
			case 'pos':
				$karma->votePositive();
			break;
			
			case 'neg':
				$karma->voteNegative();
			break;
		}
		
		$blog =& $manager->getBlog($blogid);
		
		// send email to notification address, if any
		if ( $blog->getNotifyAddress() && $blog->notifyOnVote() )
		{
			$message = _NOTIFY_KV_MSG . ' ' . $itemid . "\n";
			$itemLink = Link::create_item_link((integer)$itemid);
			$temp = parse_url($itemLink);
			
			if ( !$temp['scheme'] )
			{
				$itemLink = $CONF['IndexURL'] . $itemLink;
			}
			
			$message .= $itemLink . "\n\n";
			
			if ( $member->isLoggedIn() )
			{
				$message .= _NOTIFY_MEMBER . ' ' . $member->getDisplayName() . ' (ID=' . $member->getID() . ")\n";
			}
			
			$message .= _NOTIFY_IP . ' ' . serverVar('REMOTE_ADDR') . "\n";
			$message .= _NOTIFY_HOST . ' ' .  gethostbyaddr(serverVar('REMOTE_ADDR'))  . "\n";
			$message .= _NOTIFY_VOTE . "\n " . $type . "\n";
			$message .= Notification::get_mail_footer();
			
			$subject = _NOTIFY_KV_TITLE . ' ' . strip_tags($item['title']) . ' (' . $itemid . ')';
			
			$from = $member->getNotifyFromMailAddress();
			
			Notification::mail($blog->getNotifyAddress(), $subject, $message, $from, i18n::get_current_charset());
		}
		
		$refererUrl = serverVar('HTTP_REFERER');
		
		if ( !$refererUrl )
		{
			$url = $itemLink;
		}
		else
		{
			$url = $refererUrl;
		}
		
		redirect($url);
		return;
	}
	
	/**
	 * Action::callPlugin()
	 * Calls a plugin action
	 * 
	 * @param	void
	 * @return	void
	 */
	private function callPlugin()
	{
		global $manager;
		
		$name = requestVar('name');
		$pluginName = "NP_{$name}";
		$actionType = requestVar('type');
		
		// 1: check if plugin is installed
		if ( !$manager->pluginInstalled($pluginName) )
		{
			doError(_ERROR_NOSUCHPLUGIN);
			return;
		}
		
		// 2: call plugin
		$pluginObject =& $manager->getPlugin($pluginName);
		if ( !$pluginObject )
		{
			$error = 'Could not load plugin (see actionlog)';
		}
		else
		{
			$error = $pluginObject->doAction($actionType);
		}
		
		/*
		 * doAction returns error when:
		 *  - an error occurred (duh)
		 *  - no actions are allowed (doAction is not implemented)
		 */
		if ( $error )
		{
			doError($error);
			return;
		}
		
		return;
	}
	
	/**
	 * Action::checkban()
	 *  Checks if an IP or IP range is banned
	 * 
	 * @param	integer	$blogid
	 * @return	void
	 */
	private function checkban($blogid)
	{
		// check if banned
		$ban = Ban::isBanned($blogid, serverVar('REMOTE_ADDR') );
		
		if ( $ban != 0 )
		{
			doError(_ERROR_BANNED1 . $ban->iprange . _ERROR_BANNED2 . $ban->message . _ERROR_BANNED3);
			return;
		}
		
		return;
	}
	
	/**
	 * Action::updateTicket()
	 * Gets a new ticket
	 * 
	 * @param	void
	 * @return	boolean	FALSE
	 */
	private function updateTicket()
	{
		global $manager;
		
		if ( !$manager->checkTicket() )
		{
			echo _ERROR . ':' . _ERROR_BADTICKET;
		}
		else
		{
			echo $manager->getNewTicket();
		}
		
		return FALSE;
	}
	
	/**
	 * Action::autoDraft()
	 * Handles AutoSaveDraft
	 * 
	 * @param	void
	 * @return	boolean	FALSE
	 */
	private function autoDraft()
	{
		global $manager;
		
		if ( !$manager->checkTicket() )
		{
			echo _ERROR . ':' . _ERROR_BADTICKET;
		}
		else
		{
			$manager->loadClass('ITEM');
			$info = Item::createDraftFromRequest();
			
			if ( $info['status'] != 'error' )
			{
				echo $info['draftid'];
			}
			else
			{
				echo $info['message'];
			}
		}
		
		return FALSE;
	}
}

>>>>>>> skinnable-master