[EDIT] basic edit support

1 files changed, 32 insertions, 5 deletions

diff --git a/inc/mod/pages.php b/inc/mod/pages.php
index 75f7ffb4..8cabae6d 100644
--- a/inc/mod/pages.php
+++ b/inc/mod/pages.php
@@ -994,11 +994,38 @@ function mod_edit_post($board, $post) {
 	if (!hasPermission($config['mod']['editpost'], $board))
 		error($config['error']['noaccess']);
 
-	// error("Unimplemented!");		
-	$args = array(
-		'test' => 1
-	);
-	mod_page(_('Edit post'), 'mod/edit_post_form.html', $args);
+	$security_token = make_secure_link_token($board . '/ban/' . $post);
+	
+	$query = prepare(sprintf('SELECT * FROM `posts_%s` WHERE `id` = :id', $board));
+	$query->bindValue(':id', $post);
+	$query->execute() or error(db_error($query));
+
+	if (!$_post = $query->fetch(PDO::FETCH_ASSOC))
+		error($config['error']['404']);
+	
+	if(isset($_POST['mode']) && $_POST['mode'] == "edit")
+	{
+		$query = prepare(sprintf("UPDATE `posts_%s` SET `name` = :name,`email` = :email,`subject` = :subject,`body` = :body WHERE `id` = :id",$board));
+		$query->bindValue(':id', $post);
+		$query->bindValue('name', $_POST['name']);
+		$query->bindValue(':email', $_POST['email']);
+		$query->bindValue(':subject', $_POST['subject']);
+		$query->bindValue(':body', $_POST['body']);
+		$query->execute() or error(db_error($query));
+
+		header('Location: ?/' . sprintf($config['board_path'], $board) . $config['file_index'], true, $config['redirect_http']);		
+	} else {
+		$args = array(
+			'token' => $security_token,
+			'name' => $_post['name'],
+			'email' => $_post['email'],
+			'subject' => $_post['subject'],
+			'body' => $_post['body'],
+			'mode' => "edit"
+		);
+
+		mod_page(_('Edit post'), 'mod/edit_post_form.html', $args);
+	}
 }
 
 function mod_delete($board, $post) {