drupal/modules/diary.module

<?php

$module = array("find" => "diary_find",
                "help" => "diary_help",
                "menu" => "diary_menu",
                "page"  => "diary_page",
                "admin" => "diary_admin",
                "block" => "diary_block",
                "export" => "diary_export");

include_once "includes/common.inc";

function diary_find($keys) {
  global $user;
  $find = array();
  $result = db_query("SELECT d.*, u.userid FROM diaries d LEFT JOIN users u ON d.author = u.id WHERE d.text LIKE '%$keys%' ORDER BY d.timestamp DESC LIMIT 20");
  while ($diary = db_fetch_object($result)) {
    array_push($find, array("title" => "$diary->userid's diary", "link" => (user_access($user, "diary") ? "admin.php?mod=diary&op=edit&id=$diary->id" : "module.php?mod=diary&op=view&name=$diary->userid"), "user" => $diary->userid, "date" => $diary->timestamp));
  }
  return $find;

}

function diary_page_overview($num = 20) {
  global $theme, $user;

  $result = db_query("SELECT d.*, u.userid FROM diaries d LEFT JOIN users u ON d.author = u.id ORDER BY d.timestamp DESC LIMIT $num");

  while ($diary = db_fetch_object($result)) {
    if ($time != date("F jS", $diary->timestamp)) {
      $output .= "<B>". $date = t(date("l", $diary->timestamp)) .", ". t(date("F", $diary->timestamp)) ." ". date("j", $diary->timestamp) ."</B>\n";
      $time = date("F jS", $diary->timestamp);
    }
    $output .= "<DL>\n";
    $output .= " <DD><P><B>$diary->userid ". t("wrote") .":</B></P></DD>\n";
    $output .= " <DL>\n";
    $output .= "  <DD><P>". check_output($diary->text, 1) ."</P><P>[ <A HREF=\"module.php?mod=diary&op=view&name=$diary->userid\">". t("more") ."</A> ]</P></DD>\n";
    $output .= " </DL>\n";
    $output .= "</DL>\n";
  }

  $theme->header();
  $theme->box(t("Online diary"), $output);
  $theme->footer();

}

function diary_page_entry($timestamp, $text, $id = 0) {
  if ($id) {
    $output .= "<DL>\n";
    $output .= " <DT><B>". format_date($timestamp, "large") .":</B></DT>\n";
    $output .= " <DD><P>[ <A HREF=\"module.php?mod=diary&op=edit&id=$id\">". t("edit") ."</A> | <A HREF=\"module.php?mod=diary&op=delete&id=$id\">". t("delete") ."</A> ]</P><P>". check_output($text, 1) ."</P></DD>\n";
    $output .= "</DL>\n";
  }
  else {
    $output .= "<DL>\n";
    $output .= " <DT><B>". format_date($timestamp, "large") .":</B></DT>\n";
    $output .= " <DD><P>". check_output($text, 1) ."</P></DD>\n";
    $output .= "</DL>\n";
  }
  return $output;
}

function diary_page_display($username) {
  global $theme, $user;

  $username = empty($username) ? $user->userid : $username;

  $result = db_query("SELECT d.*, u.userid FROM diaries d LEFT JOIN users u ON d.author = u.id WHERE u.userid = '$username' ORDER BY timestamp DESC");

  if ($username == $user->userid) {
    $output .= diary_page_entry(time(), "<BIG><A HREF=\"module.php?mod=diary&op=add\">". t("Add new diary entry!") ."</A></BIG><P>");
    while ($diary = db_fetch_object($result)) $output .= diary_page_entry($diary->timestamp, $diary->text, $diary->id);
  }
  else {
    $output .= "<B>". t("Username") .":</B> ". format_username($username);
    while ($diary = db_fetch_object($result)) $output .= diary_page_entry($diary->timestamp, $diary->text);
  }

  $theme->header();
  $theme->box(t("Online diary"), $output);
  $theme->footer();
}

function diary_page_add() {
  global $theme, $user, $allowed_html;

  $output .= "<FORM ACTION=\"module.php?mod=diary\" METHOD=\"post\">\n";

  $output .= "<P>\n";
  $output .= " <TEXTAREA WRAP=\"virtual\" COLS=\"50\" ROWS=\"15\" NAME=\"text\"></TEXTAREA><BR>\n";
  $output .= " <SMALL><I>". t("Allowed HTML tags") .": ". htmlspecialchars($allowed_html) .".</I></SMALL>\n";
  $output .= "</P>\n";

  $output .= "<P>\n";
  $output .= " <INPUT TYPE=\"submit\" NAME=\"op\" VALUE=\"Preview diary entry\">\n";
  $output .= "</P>\n";

  $output .= "</FORM>\n";

  $theme->header();
  $theme->box(t("Edit your diary"), $output);
  $theme->footer();
}

function diary_page_delete($id) {
  db_query("DELETE FROM diaries WHERE id = '$id'");
  watchdog("message", "diary: diary entry deleted");
}

function diary_page_edit($id) {
  global $theme, $user, $allowed_html;

  $result = db_query("SELECT * FROM diaries WHERE id = '$id'");
  $diary = db_fetch_object($result);

  $output .= diary_page_entry($diary->timestamp, $diary->text);

  $output .= "<FORM ACTION=\"module.php?mod=diary\" METHOD=\"post\">\n";
  $output .= "<P>\n";
  $output .= " <TEXTAREA WRAP=\"virtual\" COLS=\"50\" ROWS=\"15\" NAME=\"text\">". check_textarea($diary->text) ."</TEXTAREA><BR>\n";
  $output .= " <SMALL><I>". t("Allowed HTML tags") .": ". htmlspecialchars($allowed_html) .".</I></SMALL>\n";
  $output .= "</P>\n";
  $output .= "<P>\n";
  $output .= " <INPUT TYPE=\"hidden\" NAME=\"id\" VALUE=\"$diary->id\">\n";
  $output .= " <INPUT TYPE=\"hidden\" NAME=\"timestamp\" VALUE=\"$diary->timestamp\">\n";
  $output .= " <INPUT TYPE=\"submit\" NAME=\"op\" VALUE=\"Preview diary entry\"> <INPUT TYPE=\"submit\" NAME=\"op\" VALUE=\"Submit diary entry\">\n";
  $output .= "</P>\n";
  $output .= "</FORM>\n";

  $theme->header();
  $theme->box(t("Edit your diary"), $output);
  $theme->footer();
}

function diary_page_preview($text, $timestamp, $id = 0) {
  global $theme, $user, $allowed_html;

  $output .= diary_page_entry($timestamp, $text);

  $output .= "<FORM ACTION=\"module.php?mod=diary\" METHOD=\"post\">\n";
  $output .= "<P>\n";
  $output .= " <TEXTAREA WRAP=\"virtual\" COLS=\"50\" ROWS=\"15\" NAME=\"text\">". check_textarea($text) ."</TEXTAREA><BR>\n";
  $output .= " <SMALL><I>". t("Allowed HTML tags") .": ". htmlspecialchars($allowed_html) .".</I></SMALL>\n";
  $output .= "</P>\n";
  $output .= "<P>\n";
  $output .= " <INPUT TYPE=\"hidden\" NAME=\"id\" VALUE=\"$id\">\n";
  $output .= " <INPUT TYPE=\"submit\" NAME=\"op\" VALUE=\"Preview diary entry\">\n";
  $output .= " <INPUT TYPE=\"submit\" NAME=\"op\" VALUE=\"Submit diary entry\">\n";
  $output .= "</P>\n";

  $output .= "</FORM>\n";

  $theme->header();
  $theme->box(t("Edit your diary"), $output);
  $theme->footer();
}

function diary_page_submit($text, $id = 0) {
  global $user, $theme;

  if ($id) {
    watchdog("message", "diary: old diary entry updated");
    db_query("UPDATE diaries SET text = '$text' WHERE id = '$id'");
  }
  else {
    watchdog("diary", "diary: new diary entry added");
    db_query("INSERT INTO diaries (author, text, timestamp) VALUES ('$user->id', '$text', '". time() ."')");
  }

  header("Location: module.php?mod=diary&op=view&name=$user->userid");
}

function diary_page() {
  global $op, $id, $name, $text, $timestamp;

  // Security check:
  if (strstr($id, " ") || strstr($name, " ")) {
    watchdog("error", "diary: attempt to provide malicious input through URI");
    exit();
  }

  switch($op) {
    case "add":
      diary_page_add();
      break;
    case "delete":
      diary_page_delete(check_input($id));
      diary_page_display(check_input($name));
      break;
   case "edit":
      diary_page_edit(check_input($id));
      break;
    case "view":
      diary_page_display(check_input($name));
      break;
    case "Preview diary entry":
      if ($id) diary_page_preview(($text ? check_output($text) : ""), check_input($timestamp), check_input($id));
      else diary_page_preview(($text ? check_output($text) : ""), time());
      break;
    case "Submit diary entry":
      if ($id) diary_page_submit(check_input($text), check_input($id));
      else diary_page_submit(check_input($text));
      break;
    default:
      diary_page_overview();
  }
}

function diary_help() {
 ?>
  <P>Drupal's diary module allows registered users to maintain an online diary.  It provides easy-to-write and easy-to-read online diaries or journals that can be filled with daily thoughts, poetry, boneless blabber, spiritual theories, intimate details, valuable experiences, cynical rants, semi-coherent comments, writing experiments, artistic babblings, critics on current facts, fresh insights, diverse dreams, chronicles and mumbling madness available for public consumption.</P>
 <?php
}

function diary_menu() {
  return array("<A HREF=\"module.php?mod=diary&op=add\">". t("edit your diary") ."</A>", "<A HREF=\"module.php?mod=diary&op=view\">". t("view your diary") ."</A>");
}

function diary_block() {
  $result = db_query("SELECT u.userid, d.timestamp FROM diaries d LEFT JOIN users u ON d.author = u.id ORDER BY timestamp DESC LIMIT 10");

  while ($diary = db_fetch_object($result)) {
    if ($time != date("F jS", $diary->timestamp)) {
      $content .= "<P><B>". t(date("l", $diary->timestamp)) ."</B> (". date("m/d/Y", $diary->timestamp) .")</P>\n";
      $time = date("F jS", $diary->timestamp);
    }
    $content .= "<LI><A HREF=\"module.php?mod=diary&op=view&name=$diary->userid\">$diary->userid</A></LI>\n";
  }

  $block[0]["subject"] = "Recent diary entries";
  $block[0]["content"] = $content;
  $block[0]["info"] = "Recent diary entries";
  $block[0]["link"] = "module.php?mod=diary";

  return $block;
}

function diary_admin_edit($id) {
  $result = db_query("SELECT d.*, u.userid FROM diaries d LEFT JOIN users u ON d.author = u.id WHERE d.id = '$id'");

  $diary = db_fetch_object($result);

  $output .= "<FORM ACTION=\"admin.php?mod=diary&op=save&id=$id\" METHOD=\"post\">\n";

  $output .= "<P>\n";
  $output .= " <B>Author:</B><BR>\n";
  $output .= " ". format_username($diary->userid) ."\n";
  $output .= "</P>\n";

  $output .= "<P>\n";
  $output .= "<B>Diary entry:</B><BR>\n";
  $output .= " <TEXTAREA WRAP=\"virtual\" COLS=\"50\" ROWS=\"10\" NAME=\"text\">". check_textarea($diary->text) ."</TEXTAREA><BR>\n";
  $output .= "</P>\n";

  $output .= "<P>\n";
  $output .= " <INPUT TYPE=\"submit\" NAME=\"op\" VALUE=\"Save diary entry\">\n";
  $output .= "</P>\n";
  $output .= "</FORM>\n";

  print $output;
}

function diary_admin_save($id, $text) {
  db_query("UPDATE diaries SET text = '$text' WHERE id = $id");
  watchdog("message", "diary: modified entry #$id.");
}

function diary_admin_delete($id) {
  db_query("DELETE FROM diaries WHERE id = '$id'");
  watchdog("message", "diary: deleted entry #$id.");
}

function diary_admin_display($order = "date") {
  // Initialize variables:
  $fields = array("author" => "author", "date" => "timestamp DESC");

  // Perform SQL query:
  $result = db_query("SELECT d.*, u.userid FROM diaries d LEFT JOIN users u ON u.id = d.author ORDER BY d.$fields[$order] LIMIT 50");

  // Display stories:
  $output .= "<TABLE BORDER=\"1\" CELLPADDING=\"2\" CELLSPACING=\"2\">\n";
  $output .= " <TR>\n";
  $output .= "  <TH ALIGN=\"right\" COLSPAN=\"4\">\n";
  $output .= "   <FORM ACTION=\"admin.php?mod=diary\" METHOD=\"post\">\n";
  $output .= "    <SELECT NAME=\"order\">\n";
  foreach ($fields as $key=>$value) {
    $output .= "     <OPTION VALUE=\"$key\"". ($key == $order ? " SELECTED" : "") .">Sort by $key</OPTION>\n";
  }
  $output .= "    </SELECT>\n";
  $output .= "    <INPUT TYPE=\"submit\" NAME=\"op\" VALUE=\"Update\">\n";
  $output .= "   </FORM>\n";
  $output .= "  </TH>\n";
  $output .= " </TR>\n";

  $output .= " <TR>\n";
  $output .= "  <TH>subject</TH>\n";
  $output .= "  <TH>author</TH>\n";
  $output .= "  <TH COLSPAN=\"2\">operations</TH>\n";
  $output .= " </TR>\n";

  while ($diary = db_fetch_object($result)) {
    $output .= " <TR><TD><A HREF=\"module.php?mod=diary&op=view&name=$diary->userid\">$diary->userid on ". format_date($diary->timestamp, "small") ."</A></TD><TD>". format_username($diary->userid) ."</TD><TD ALIGN=\"center\"><A HREF=\"admin.php?mod=diary&op=edit&id=$diary->id\">edit</A></TD><TD ALIGN=\"center\"><A HREF=\"admin.php?mod=diary&op=delete&id=$diary->id\">delete</A></TD></TR>\n";
  }

  $output .= "</TABLE>\n";

  print $output;
}


function diary_admin() {
  global $op, $id, $mod, $keys, $text, $order;

  print "<SMALL><A HREF=\"admin.php?mod=diary\">overview</A> | <A HREF=\"admin.php?mod=diary&op=search\">search diary</A> | <A HREF=\"admin.php?mod=diary&op=help\">help</A></SMALL><HR>\n";

  switch ($op) {
    case "delete":
      diary_admin_delete(check_input($id));
      diary_admin_display();
      break;
    case "edit":
      diary_admin_edit(check_input($id));
      break;
    case "help":
      diary_help();
      break;
    case "search":
      print search_form($keys);
      print search_data($keys, $mod);
      break;
    case "Save diary entry":
      diary_admin_save(check_input($id), check_input($text));
      diary_admin_display();
      break;
    case "Update":
      diary_admin_display(check_input($order));
      break;
    default:
      diary_admin_display();
  }
}

function diary_export($uri) {
  if ($uri[2] == "diary") {
    print "TODO: export diary for user $uri[3]";
  }
}

?>