modules/guestbook/guestbook.module

<?php
// $Id: guestbook.module,v 1.19 2009/03/10 23:14:36 sun Exp $

if (module_exists("spam") == true) {
  if (file_exists("modules/spam/spam.module")) {
    include_once "modules/spam/spam.module";
  }
  else if (file_exists("sites/all/modules/spam/spam.module")) {   include_once "sites/all/modules/spam/spam.module"; }
}

/**
 * Flags for use in the "guestbook_mode" variable.
 */
define('GUESTBOOK_SITE_GUESTBOOK', 0x0001);
define('GUESTBOOK_USER_GUESTBOOKS', 0x0002);

/**
 * Flags for use in the "guestbook_pager_position" variable.
 */
define('GUESTBOOK_PAGER_ABOVE', 0x0001);
define('GUESTBOOK_PAGER_BELOW', 0x0002);

define('GUESTBOOK_TEXTAREA_ROWS', 8);

/**
 * Implementation of hook_menu().
 */
function guestbook_menu() {
  $items = array();
  $guestbook_mode = variable_get('guestbook_mode', GUESTBOOK_SITE_GUESTBOOK | GUESTBOOK_USER_GUESTBOOKS);

  $items['admin/settings/guestbook'] = array( 
    'title' => 'Guestbook',
    'page callback' => 'drupal_get_form',
    'page arguments' => array('guestbook_admin_settings'),
    'access arguments' => array('administer site configuration'),
  );

  // User guestbooks.
  if ($guestbook_mode & GUESTBOOK_USER_GUESTBOOKS) {
    $items['guestbooks'] = array( 
      'title' => 'Guestbooks',
      'page callback' => 'guestbook_list',
      'access arguments' => array('access user guestbooks'),
    );
    $items['user/%user/guestbook'] = array( 
      'title' => 'User guestbook',
      'title callback' => '_guestbook_info',
      'title arguments' => array(1, 'title'),
      'page callback' => 'guestbook_page',
      'page arguments' => array(1),
      'access callback' => 'user_access',
      'access arguments' => array('access user guestbooks'),
      'type' => MENU_LOCAL_TASK,
    );
    $items['user/%user/guestbook/sign'] = array( 
      'title' => 'Add guestbook entry',
      'page callback' => 'guestbook_page_form',
      'page arguments' => array(1),
      'access arguments' => array('post in user guestbooks'),
      'type' => MENU_CALLBACK,
    );
  }
  // Site guestbook.
  if ($guestbook_mode & GUESTBOOK_SITE_GUESTBOOK) {
    $items['guestbook'] = array( 
      'title' => variable_get('guestbook_site_title', t('Site guestbook')),
      'page callback' => 'guestbook_page',
      'page arguments' => array(0),
      'access arguments' => array('access site guestbook'),
    );
    $items['guestbook/sign'] = array( 
      'title' => 'Add guestbook entry',
      'page callback' => 'guestbook_page_form',
      'page arguments' => array(0),
      'access arguments' => array('post in site guestbook'),
      'type' => MENU_CALLBACK,
    );
  }

  return $items;
}

/**
 * Implementation of hook_user().
 */
function guestbook_user($op, &$edit, &$user, $category = '') {
  $guestbook_mode = variable_get('guestbook_mode', GUESTBOOK_SITE_GUESTBOOK | GUESTBOOK_USER_GUESTBOOKS);
  if ($guestbook_mode & GUESTBOOK_USER_GUESTBOOKS) {
    switch ($op) {
      case 'view':
        if (user_access('access user guestbooks') && empty($user->guestbook_status)) {
          $title = t("Read @username's guestbook.", array('@username' => $user->name));
          $link  = l(t('View recent guestbook entries'), "user/$user->uid/guestbook", array('attributes' => array('title' => $title)));
          $user->content['summary']['guestbook'] = array(
            '#type' => 'user_profile_item',
            '#title' => t('Guestbook'),
            '#value' => $link,
            '#attributes' => array('class' => 'guestbook'),
          );
        }
        break;

      case 'form':
        if ($category == 'account') {
          $form['guestbook'] = array(
            '#type' => 'fieldset',
            '#title' => t('User guestbook'),
          );
          $form['guestbook']['guestbook_status'] = array(
            '#type' => 'radios',
            '#title' => t('Status'),
            '#default_value' => isset($edit['guestbook_status']) ? $edit['guestbook_status'] : 0,
            '#options' => array(t('Enabled'), t('Disabled')),
          );
          $form['guestbook']['guestbook_send_email'] = array(
            '#type' => 'checkbox',
            '#title' => t('Send email notification'),
            '#description' => t("Uncheck if you don't wish to be notified of new entries to your guestbook."),
            '#default_value' => isset($edit['guestbook_send_email']) ? $edit['guestbook_send_email'] : 0,
          );
          $form['guestbook']['guestbook_intro'] = array(
            '#type' => 'textarea',
            '#title' => t('Intro text'),
            '#default_value' => isset($edit['guestbook_intro']) ? $edit['guestbook_intro'] : '',
            '#cols' => 70,
            '#rows' => GUESTBOOK_TEXTAREA_ROWS,
            '#description' => t('The text that appears on top of your guestbook.'),
          );
          return $form;
        }
        break;

      case 'delete':
        db_query("DELETE FROM {guestbook} WHERE recipient = %d", $user->uid);
        db_query("UPDATE {guestbook} SET author = 0 WHERE author = %d", $user->uid);
        db_query("UPDATE {guestbook} SET commentauthor = 0 WHERE commentauthor = %d", $user->uid);
        break;
    }
  }
}

/**
 * Implementation of hook_perm().
 */
function guestbook_perm() {
  return array(
    'access site guestbook',
    'access user guestbooks',
    'post in site guestbook',
    'post in user guestbooks',
    'moderate all guestbooks',
    'moderate own guestbook',
  );
}

/**
 * Implementation of hook_help().
 */
function guestbook_help($path, $arg) {
  switch ($path) {
    case 'admin/modules#description':
      return t('Adds a site guestbook and individual user guestbooks.');
  }
}

/**
 * Implementation of hook_settings().
 */
function guestbook_admin_settings() {
  $form['guestbook_mode'] = array(
    '#type' => 'radios',
    '#title' => t('Mode'),
    '#default_value' => variable_get('guestbook_mode', GUESTBOOK_SITE_GUESTBOOK | GUESTBOOK_USER_GUESTBOOKS),
    '#options' => array(
      GUESTBOOK_SITE_GUESTBOOK | GUESTBOOK_USER_GUESTBOOKS => t('Site and user guestbooks'),
      GUESTBOOK_SITE_GUESTBOOK => t('Site guestbook only'),
      GUESTBOOK_USER_GUESTBOOKS => t('User guestbooks only'),
    ),
  );

  // Site guestbook.
  $form['site_guestbook'] = array(
    '#type' => 'fieldset',
    '#title' => t('Site guestbook'),
  );
  $form['site_guestbook']['guestbook_site_title'] = array(
    '#type' => 'textfield',
    '#title' => t('Title'),
    '#default_value' => variable_get('guestbook_site_title', 'Site guestbook'),
    '#size' => 30,
    '#maxlength' => 128,
    '#description' => t("The site guestbook's page title."),
  );
  $form['site_guestbook']['guestbook_site_intro'] = array(
    '#type' => 'textarea',
    '#title' => t('Intro text'),
    '#default_value' => variable_get('guestbook_site_intro', ''),
    '#cols' => 70,
    '#rows' => GUESTBOOK_TEXTAREA_ROWS,
    '#description' => t('The text that appears on top of the site guestbook.'),
  );
  $form['site_guestbook']['guestbook_send_email'] = array(
    '#type' => 'textfield',
    '#title' => t('Send an notification to the following e-mail address about new guestbook entries'),
    '#description' => t("Leave blank if you don't wish to be notified"),
    '#size' => 30,
    '#maxlength' => 128,
    '#default_value' => variable_get('guestbook_send_email', ''),
  );

  // User guestbooks.
  $form['user_guestbooks'] = array(
    '#type' => 'fieldset',
    '#title' => t('User guestbooks'),
    '#description' => t('Users can individually disable their guestbook or add an intro text on the user account page.'),
  );

  $form['user_guestbooks']['guestbook_user_link_to'] = array(
    '#type' => 'radios',
    '#title' => t('User link to profile or guestbook'),
    '#description' => t('When displaying a user should the link show the user profile or the user guestbook?'),
    '#options' => array('profile' => t('User profile'), 'guestbook' => t('User guestbook')),
    '#default_value' => variable_get('guestbook_user_link_to', 'profile'),
  );

  // Display options.
  $form['display_options'] = array(
    '#type' => 'fieldset',
    '#title' => t('Display options'),
  );
  $form['display_options']['guestbook_entries_per_page'] = array(
    '#type' => 'textfield',
    '#title' => t('Entries per page'),
    '#default_value' => variable_get('guestbook_entries_per_page', 20),
    '#size' => 3,
    '#maxlength' => 3,
    '#description' => t('The number of guestbook entries per page.'),
  );
  $form['display_options']['guestbook_display'] = array(
    '#type' => 'checkboxes',
    '#title' => t('Toggle display'),
    '#default_value' => variable_get('guestbook_display', array('date', 'email', 'website', 'comments')),
    '#options' => array(
      'date' => t('Submission date'),
      'email' => t('Anonymous poster e-mail'),
      'website' => t('Anonymous poster website'),
      'comments' => t('Comments'),
    ),
  );
  $form['display_options']['guestbook_pager_position'] = array(
    '#type' => 'radios',
    '#title' => t('Position of pager'),
    '#default_value' => variable_get('guestbook_pager_position', GUESTBOOK_PAGER_BELOW),
    '#options' => array(
      GUESTBOOK_PAGER_ABOVE => t('Above the entries'),
      GUESTBOOK_PAGER_BELOW => t('Below the entries'),
      GUESTBOOK_PAGER_ABOVE | GUESTBOOK_PAGER_BELOW => t('Above and below the entries'),
    ),
  );

  // Posting settings.
  $form['posting_settings'] = array(
    '#type' => 'fieldset',
    '#title' => t('Posting settings'),
  );
  $form['posting_settings']['guestbook_input_format'] = filter_form(variable_get('guestbook_input_format', 0), NULL, array('guestbook_input_format'));
  $form['posting_settings']['guestbook_input_format']['#type'] = 'item';
  $form['posting_settings']['guestbook_filter_tips'] = array(
    '#type' => 'checkbox',
    '#title' => t('Display filter tips'),
    '#default_value' => variable_get('guestbook_filter_tips', TRUE),
    '#description' => t('If enabled filter tips are displayed below the message textarea.'),
  );
  $form['posting_settings']['guestbook_anonymous_fields'] = array(
    '#type' => 'checkboxes',
    '#title' => t('Anonymous poster fields'),
    '#default_value' => variable_get('guestbook_anonymous_fields', array('email', 'website')),
    '#description' => t('Additional information that anonymous posters may supply.'),
    '#options' => array(
      'email' => 'E-mail',
      'website' => 'Website',
    ),
  );
  $form['posting_settings']['guestbook_form_location'] = array(
    '#type' => 'radios',
    '#title' => t('Location of entry submission form'),
    '#default_value' => variable_get('guestbook_form_location', 'above'),
    '#options' => array(
      'above' => t('Above entries'),
      'below' => t('Below entries'),
      'separate page' => t('Separate page'),
    ),
  );

  $form['array_filter'] = array('#type' => 'value', '#value' => TRUE);

  return system_settings_form($form);
}

/**
 * Output a guestbook page; menu callback.
 */
function guestbook_page($account, $op = NULL, $op_id = NULL, $page = TRUE) {
  global $user;

  // Prepare site guestbook.
  if ($account == 0) {
    $account = new stdClass;
    $account->uid = 0;
    drupal_set_title(variable_get('guestbook_site_title', t('Site guestbook')));
  }

  if (!_guestbook_exists($account->uid)) {
    if ($page) {
      drupal_not_found();
    }
    return;
  }

  // Set last visited time for own guestbook
  if ($account->uid > 0 && $account->uid == $user->uid) {
    user_save($user, array('guestbook_visited' => time()));
  }

  // Delete or comment an entry
  $comment_entry = $sql_where = '';
  if (_guestbook_access('moderate', $account->uid) && is_numeric($op_id)) {
    switch ($op) {
      case 'edit':
        return drupal_get_form('guestbook_form_entry_form', $account->uid, 'page', $op_id);

      case 'delete':
        return guestbook_delete_entry_confirm_page($account->uid, $op_id);

      case 'comment':
        $comment_entry = $op_id;
        $sql_where = ' AND g.id = %d';
        break;
    }
  }

  // Fetch guestbook entries
  $limit = variable_get('guestbook_entries_per_page', 20);
  $sql = "SELECT g.*, u1.uid, u1.name, u1.data, u1.picture, u2.name as commentby 
    FROM {guestbook} g 
    LEFT JOIN {users} u1 ON g.author = u1.uid 
    LEFT JOIN {users} u2 ON g.commentauthor = u2.uid 
    WHERE g.recipient = %d $sql_where
    ORDER BY g.created DESC";
  if (!empty($comment_entry)) {
    // Fetch only guestbook entry for administrative comment.
    $result = db_query($sql, $uid, $comment_entry);
  }
  else {
    $result = pager_query($sql, $limit, 0, "SELECT COUNT(*) FROM {guestbook} WHERE recipient = %d", $account->uid);
  }
  $entries = array();
  while ($entry = db_fetch_array($result)) {
    $entries[] = $entry;
  }

  return theme('guestbook', $account->uid, $entries, $comment_entry, $limit);
}

/**
 * Display the guestbook form on a separate page; menu callback.
 */
function guestbook_page_form($account) {
  if (!_guestbook_exists($account->uid)) {
    drupal_not_found();
    return;
  }
  return guestbook_form_entry($account->uid, 'page');
}

/**
 * Output a list of all guestbooks; menu callback.
 */
function guestbook_list() {
  $limit          = 40;
  $guestbooks     = array();
  $guestbook_mode = variable_get('guestbook_mode', GUESTBOOK_SITE_GUESTBOOK | GUESTBOOK_USER_GUESTBOOKS);

  $header = array(
    array('data' => t('user'), 'field' => 'u.name'),
    array('data' => t('entries'), 'field' => 'num'),
    array('data' => t('last update'), 'field' => 'created', 'sort' => 'desc'),
  );
  $result = pager_query(
    "SELECT u.uid, u.name, u.data, MAX(g.created) as created, COUNT(g.recipient) as num 
    FROM {users} u 
    LEFT OUTER JOIN {guestbook} g ON u.uid = g.recipient 
    GROUP BY u.uid, u.name, u.data, g.recipient". tablesort_sql($header),
    $limit, 0, "SELECT COUNT(*) FROM {users}"
  );

  while ($guestbook = db_fetch_array($result)) {
    if ($guestbook['uid'] == 0 && user_access('access site guestbook') && $guestbook_mode & GUESTBOOK_SITE_GUESTBOOK) {
      // Site guestbook.
      $guestbooks[0] = $guestbook;
    }
    else if ($guestbook['uid'] > 0 && user_access('access user guestbooks')) {
      // User guestbooks.
      $data = unserialize($guestbook['data']);
      if (empty($data['guestbook_status'])) {
        $guestbooks[$guestbook['uid']] = $guestbook;
      }
    }
  }
  return theme('guestbook_list', $guestbooks, $header, $limit);
}

/**
 * Retrieve a guestbook post form.
 */
function guestbook_form_entry($uid, $display = '') {
  return drupal_get_form('guestbook_form_entry_form', $uid, $display);
}

/**
 * Form builder function for guestbook post form.
 */
function guestbook_form_entry_form($form_state, $uid, $display = '', $entry_id = NULL) {
  global $user;

  $entry = array();
  if (isset($entry_id) && _guestbook_access('moderate', $uid) && user_access('moderate own guestbook')) {
    $entry = db_fetch_array(db_query("SELECT * FROM {guestbook} WHERE id = %d", $entry_id));
  }

  $form = array();
  if (!empty($entry)) {
    $form['entry_id'] = array('#type' => 'value', '#value' => $entry['id']);
    $form['author'] = array('#type' => 'value', '#value' => $entry['author']);
    // Re-route form submission to guestbook entry edit form submit handler.
    $form['#submit'] = array('guestbook_form_entry_form_edit_submit');
  }
  if ($user->uid == 0 || (isset($entry['author']) && $entry['author'] == 0)) {
    // fields for anonymous poster
    $form['anonname'] = array(
      '#type' => 'textfield', '#title' => t('Name'),
      '#size' => 32, '#maxlength' => 64, '#required' => TRUE,
      '#default_value' => !empty($entry['anonname']) ? $entry['anonname'] : '',
    );
    $anonymous_fields = (array) variable_get('guestbook_anonymous_fields', array('email', 'website'));
    if (in_array('email', $anonymous_fields)) {
      $form['anonemail'] = array(
        '#type' => 'textfield', '#title' => t('E-mail'),
        '#size' => 32, '#maxlength' => 128,
        '#default_value' => !empty($entry['anonemail']) ? $entry['anonemail'] : '',
      );
    }
    if (in_array('website', $anonymous_fields)) {
      $form['anonwebsite'] = array(
        '#type' => 'textfield', '#title' => t('Homepage'),
        '#size' => 32, '#maxlength' => 128,
        '#default_value' => !empty($entry['anonwebsite']) ? $entry['anonwebsite'] : '',
      );
    }
  }
  $filter_tips = variable_get('guestbook_filter_tips', TRUE) ? _guestbook_form_filter_tips() : NULL;
  $form['message'] = array(
    '#type' => 'textarea', '#title' => t('Message'),
    '#cols' => 32, '#rows' => GUESTBOOK_TEXTAREA_ROWS, '#description' => $filter_tips, '#required' => TRUE,
    '#default_value' => !empty($entry['message']) ? $entry['message'] : '',
  );
  $form['submit'] = array(
    '#type' => 'submit', '#value' => t('Send'),
  );
  $form['uid'] = array(
    '#type' => 'value', '#value' => $uid,
  );
  if (!empty($entry)) {
    // Need to explicitly check for moderate when editing an existing post,
    // because FAPI will output a WSOD (NULL) otherwise.
    $form['#access'] = (_guestbook_access('moderate', $uid) ? TRUE : FALSE);
  }
  else {
    $form['#access'] = (_guestbook_access('post', $uid) == 'allowed' ? TRUE : FALSE);
  }
  if (variable_get('guestbook_form_location', 'above') == 'separate page') {
    $form['#redirect'] = !empty($_GET['destination']) ? $_GET['destination'] : guestbook_path($uid);
  }
  $form['display'] = array(
    '#type' => 'value', '#value' => $display,
  );
  return $form;
}

function guestbook_form_entry_form_submit($form, &$form_state) {
  global $user;

  $uid = $form_state['values']['uid'];
  $message = $form_state['values']['message'];

  // Make sure this isn't a dupe.
  $result = db_query("SELECT message FROM {guestbook} WHERE recipient = %d ORDER BY id DESC LIMIT 1", $uid);
  $entry = db_fetch_array($result);
  if ($entry['message'] == $message) {
    return;
  }
  // No empty entries.
  if ($message == '') {
    return;
  }

  if (module_exists('spam')) {
    // Is this spam?
    $spamcheck = $form_state['values']['anonname'] .' '. $form_state['values']['anonemail'] .' '. $form_state['values']['anonwebsite'];
    if (spam_content_filter('guestbook', 1, $spamcheck, $message, '_guestbook_spam')) {
      return;
    }
  }

  // E-mail notification.
  $iSendEmail = '';
  $guestbook_mode = variable_get('guestbook_mode', GUESTBOOK_SITE_GUESTBOOK | GUESTBOOK_USER_GUESTBOOKS);
  if ($uid == 0 && ($guestbook_mode & GUESTBOOK_SITE_GUESTBOOK)) {
    $iSendEmail = variable_get('guestbook_send_email', '');
  }
  else if ($guestbook_mode & GUESTBOOK_USER_GUESTBOOKS) {
    $guestbook_user = ($uid != $user->uid) ? user_load(array('uid' => $uid, 'status' => 1)) : $user;
    if ($guestbook_user->uid && empty($guestbook_user->guestbook_status) && !empty($guestbook_user->guestbook_send_email)) {
      $iSendEmail = $guestbook_user->mail;
    }
  }

  if ($iSendEmail) {
    $params = array();
    $params['body'] = $message;
    $params['account'] = user_load(array('uid' => $uid));
    drupal_mail('guestbook', 'notification',  $iSendEmail, user_preferred_language($params['account']), $params);
  }

  // Insert new message
  if ($user->uid == 0) {
    // Anonymous user.
    db_query("INSERT INTO {guestbook} (anonname, anonemail, anonwebsite, author, recipient, message, created)
      VALUES('%s', '%s', '%s', %d, %d, '%s', %d)", $form_state['values']['anonname'], $form_state['values']['anonemail'], $form_state['values']['anonwebsite'], 0, $uid, $message, time());
  }
  else {
    // Authenticated user.
    db_query("INSERT INTO {guestbook} (author, recipient, message, created)
      VALUES(%d, %d, '%s', %d)", $user->uid, $uid, $message, time());
  }

  // Notify other modules of the new guestbook entry.
  $entryid = db_last_insert_id('guestbook', 'id');
  $entry = db_fetch_array(db_query("SELECT * FROM {guestbook} WHERE id = %d", $entryid));
  module_invoke_all('guestbook', 'insert', $entry);

  drupal_set_message(t('Your message has been added.'));
}

/**
 * Submit handler for editing guestbook entries.
 */
function guestbook_form_entry_form_edit_submit($form, &$form_state) {
  if (_guestbook_access('moderate', $form_state['values']['uid']) && $form_state['values']['submit'] == t('Send') && user_access('moderate own guestbook')) {
    if ($form_state['values']['author'] == 0) {
      // Post's author is an anonymous user.
      db_query("UPDATE {guestbook} SET anonname = '%s', anonemail = '%s', anonwebsite = '%s', message = '%s' WHERE id = %d", $form_state['values']['anonname'], $form_state['values']['anonemail'], $form_state['values']['anonwebsite'], $form_state['values']['message'], $form_state['values']['entry_id']);
    }
    else if ($form_state['values']['author'] > 0) {
      // Post's author is a registered user.
      db_query("UPDATE {guestbook} SET message = '%s' WHERE id = %d", $form_state['values']['message'], $form_state['values']['entry_id']); 
    }
  }

  // Notify other modules of the new guestbook entry.
  $entry = db_fetch_array(db_query("SELECT * FROM {guestbook} WHERE id = %d", $form_state['values']['entry_id']));
  module_invoke_all('guestbook', 'update', $entry);

  $form_state['redirect'] = guestbook_path($form_state['values']['uid']);
}

/**
 * Implementation of hook_mail().
 */
function guestbook_mail($key, &$message, $params) {
  $language = $message['language'];
  $variables = user_mail_tokens($params['account'], $language);
  switch($key) {
    case 'notification':
      $message['subject'] = t('New guestbook entry at !site', $variables, $language->language);
      $message['body'] = drupal_html_to_text($params['body']);
      break;
  }
}

/**
 * Implementation of hook_theme()
 */
function guestbook_theme() {
  return array(
    'guestbook_form_entry_form' => array(
      'arguments' => array('form'),
    ),
    'guestbook_form_comment_form' => array(
      'arguments' => array('form'),
    ),
    'guestbook' => array(
      'arguments' => array('uid', 'entries', 'comment_entry', 'limit'),
    ),
    'guestbook_entry' => array(
      'arguments' => array('uid', 'entry', 'comment_entry', 'zebra', 'confirm_delete'),
    ),
    'guestbook_user_picture' => array(
      'arguments' => array('form'),
    ),
    'guestbook_entry_comment' => array(
      'arguments' => array('uid', 'entry', 'comment_entry'),
    ),
    'guestbook_list' => array(
      'arguments' => array('guestbooks', 'header', 'limit'),
    ),
  );
}

function theme_guestbook_form_entry_form($form_state) {
  $output  = '';
  // @todo Since #access is set on the overall form now, this function along
  // with the switch below is no longer executed.
  $access  = $form_state['access']['#value'];
  $display = $form_state['display']['#value'];
  $uid     = $form_state['uid']['#value'];

  switch ($access) {
    case 'allowed':
      if ($display == 'link') {
        // Output only a link to a page with the form.
        $output .= '<p>&raquo; '. l(t('Add guestbook entry'), guestbook_path($uid) .'/sign') .'</p>';
      }
      else {
        $output .= $display == 'page' ? '' : '<h3>'. t('Add guestbook entry') .'</h3>';
        $output .= drupal_render($form_state);
      }
      break;

    case 'own guestbook':
      if (isset($form_state['entry_id'])) {
        drupal_set_title(t('Edit guestbook entry'));
        $output .= drupal_render($form_state);
      }
      else {
        $output .= ' ';
      }
      break;

    case 'not logged in':
      $output .= '<p class="links">&raquo; '. t('You must be logged in to post a comment.') .'</p>';
      break;

    case 'not allowed':
      $output .= '<p class="links">&raquo; '. t('You are not allowed to post in this guestbook.') .'</p>';
      break;
  }
  return $output;
}

function guestbook_form_comment($uid, $entry) {
  return drupal_get_form('guestbook_form_comment_form', $uid, $entry);
}

function guestbook_form_comment_form($form_state, $uid, $entry) {
  $form = array();
  $form['comment'] = array(
    '#type' => 'textarea',
    '#default_value' => $entry['comment'],
    '#description' => variable_get('guestbook_filter_tips', TRUE) ? _guestbook_form_filter_tips() : NULL,
  );
  $form['submit'] = array(
    '#type' => 'submit',
    '#value' => t('Reply'),
  );
  $form['entry_id'] = array('#type' => 'value', '#value' => $entry['id']);
  $form['uid'] = array('#type' => 'value', '#value' => $uid);
  $form['#redirect'] = !empty($_GET['destination']) ? $_GET['destination'] : guestbook_path($uid);
  return $form;
}

function guestbook_form_comment_form_submit($form, &$form_state) {
  global $user;
  if (_guestbook_access('moderate', $form_state['values']['uid'])) {
    db_query("UPDATE {guestbook} SET comment = '%s', commentauthor = %d WHERE id = %d", $form_state['values']['comment'], $user->uid, $form_state['values']['entry_id']);
  }
}

function guestbook_delete_entry_confirm_page($uid, $entry_id) {
  return drupal_get_form('guestbook_delete_entry_confirm', $uid, $entry_id);
}

function guestbook_delete_entry_confirm($form_state, $uid, $entry_id) {
  $entry = db_fetch_array(db_query(
      "SELECT g.*, u1.name, u1.data, u1.picture, u2.name as commentby 
    FROM {guestbook} g 
    LEFT JOIN {users} u1 ON g.author = u1.uid 
    LEFT JOIN {users} u2 ON g.commentauthor = u2.uid 
    WHERE g.id = %d", $entry_id));

  $form             = array();
  $form['entry_id'] = array('#type' => 'value', '#value' => $entry_id);
  $form['uid']      = array('#type' => 'value', '#value' => $uid);
  $form['#redirect'] = !empty($_GET['destination']) ? $_GET['destination'] : guestbook_path($uid);
  return confirm_form(
    $form,
    t('Are you sure you want to delete this guestbook entry?'),
    !empty($_GET['destination']) ? $_GET['destination'] : referer_uri(),
    theme('guestbook_entry', $uid, $entry, NULL, NULL, TRUE),
    t('Delete'), t('Cancel')
  );
}

function guestbook_delete_entry_confirm_submit($form, &$form_state) {
  if (_guestbook_access('moderate', $form_state['values']['uid']) && $form_state['values']['confirm']) {
    db_query("DELETE FROM {guestbook} WHERE id = %d", $form_state['values']['entry_id']);
  }
}

/**
 * Render a guestbook.
 */
function theme_guestbook($uid, $entries, $comment_entry, $limit = 20) {
  global $user;
  $form_location = variable_get('guestbook_form_location', 'above');
  $pager_position = variable_get('guestbook_pager_position', GUESTBOOK_PAGER_BELOW);

  // Intro text.
  $intro = _guestbook_info($uid, 'intro');
  $output = $intro ? check_markup($intro) : '';
  if ($_GET['q'] != 'user/'. $uid) {
    $output .= _guestbook_user_profile_link($uid);
  }

  // Form on separate page.
  $output .= ($form_location == 'separate page' ? guestbook_form_entry($uid, 'link') : '');
  // Form and pager above entries.
  $output .= ($form_location == 'above' ? guestbook_form_entry($uid) : '');
  $output .= ($pager_position & GUESTBOOK_PAGER_ABOVE ? theme('pager', NULL, $limit, 0) : '');

  $i = 0;
  foreach ($entries as $entry) {
    $zebra = ($i % 2) ? 'odd' : 'even';
    $output .= theme('guestbook_entry', $uid, $entry, $comment_entry, $zebra);
    $i++;
  }

  // Form and pager below entries.
  $output .= $pager_position & GUESTBOOK_PAGER_BELOW ? theme('pager', NULL, $limit, 0) : '';
  $output .= $form_location == 'below' ? guestbook_form_entry($uid) : '';

  if ($output == '') {
    $output = '<div class="guestbook-empty">'. t('Nobody has signed this guestbook yet.') .'</div>';
  }

  return '<div class="guestbook">'. $output ."</div>\n";
}

function theme_guestbook_entry($uid, $entry, $comment_entry = NULL, $zebra, $confirm_delete = false) {
  global $user;
  $output = '';
  $display = (array) variable_get('guestbook_display', array('date', 'email', 'website', 'comments'));

  $output .= "\n<div class=\"guestbook-entry clear-block $zebra\">\n";
  if ($comment_entry == $entry['id']) {
    $output .= '<a name="comment-entry"></a>';
  }

  // Author.
  if ($entry['author'] == 0) {
    $output .= "<b>". check_plain($entry['anonname']) ."</b>";
  }
  else {
    $output .= theme('username', (object)$entry, 'guestbook');
  }

  // Date, email, website.
  $output .= '<div class="submitted">';
  if (in_array('date', $display)) {
    $output .= format_date($entry['created'], 'medium');
  }
  if (in_array('email', $display) && !empty($entry['anonemail'])) {
    $output .= '&nbsp;|&nbsp;<a href="mailto:'. check_url($entry['anonemail']) .'">'. t('E-mail') .'</a>';
  }
  if (in_array('website', $display) && !empty($entry['anonwebsite'])) {
    // Auto-prepend HTTP protocol if website contains no protocol.
    if (strpos($entry['anonwebsite'], '://') === FALSE) {
      $entry['anonwebsite'] = 'http://'. $entry['anonwebsite'];
    }
    $output .= '&nbsp;|&nbsp;<a href="'. check_url($entry['anonwebsite']) .'">'. t('Website') .'</a>&nbsp;';
  }
  $output .= '</div>';

  // Message.
  $output .= '<div class="guestbook-message">'. check_markup($entry['message'], variable_get('guestbook_input_format', 1), FALSE) .'</div>';

  // Guestbook owner comment.
  $output .= theme('guestbook_entry_comment', $uid, $entry, $comment_entry);

  // Links.
  if (_guestbook_access('moderate', $uid) && !$confirm_delete) {
    if ($comment_entry != $entry['id']) {
      $links = array();
      $pager = !empty($_GET['page']) ? '&page='. $_GET['page'] : '';
      if (user_access('moderate own guestbook') || user_access('moderate all guestbooks')) {
        $links['delete'] = array(
          'title' => t('Delete entry'),
          'href' => guestbook_path($uid) .'/delete/'. $entry['id'],
          'query' => 'destination='. url($_GET['q']) . $pager,
        );
        $links['edit'] = array(
          'title' => t('Edit entry'),
          'href' => guestbook_path($uid) .'/edit/'. $entry['id'],
          'query' => 'destination='. url($_GET['q']) . $pager,
        );
      }
      $links['comment'] = array(
        'title' => $entry['comment'] == '' ? t('Add comment') : t('Edit comment'),
        'href' => guestbook_path($uid) .'/comment/'. $entry['id'],
        'query' => 'destination='. url($_GET['q']) . $pager,
        'fragment' => 'comment-entry',
      );
      $output .= theme('links', $links, array('class' => 'guestbook-links'));
    }
  }

  $output .= "\n</div>";
  return $output;
}

function theme_guestbook_entry_comment($uid, $entry, $comment_entry) {
  $display = (array) variable_get('guestbook_display', array('date', 'email', 'website', 'comments'));
  $output = '';
  if ($comment_entry == $entry['id']) {
    // Display owner comment edit form.
    $output .= guestbook_form_comment($uid, $entry);
  }
  else if (in_array('comments', $display) && $entry['comment'] != '') {
    // Display owner comment.
    $author = user_access('access user profiles') ? l($entry['commentby'], "user/{$entry['commentauthor']}") : $entry['commentby'];
    $output .= '<div class="guestbook-comment-submitted">';
    $output .= t('Comment by') .' '. $author;
    $output .= '</div>';
    $output .= '<div class="guestbook-comment-content">';
    $output .= check_markup($entry['comment'], variable_get('guestbook_input_format', 1), FALSE);
    $output .= '</div>';
  }
  return (!empty($output) ? '<div class="guestbook-comment">'. $output .'</div>' : '');
}

function theme_guestbook_list($guestbooks, $header, $limit = 40) {
  $output = '';
  // Site guestbook.
  if (isset($guestbooks[0])) {
    $output .= '<p>'. l(variable_get('guestbook_site_title', t('Site guestbook')), 'guestbook');
    $output .= ' ('. format_plural($guestbooks[0]['num'], '1 entry', '@count entries') .', '. t('last update') .': '. _guestbook_timeinterval($guestbooks[0]['created']) .')</p>';
    unset($guestbooks[0]);
  }
  // User guestbooks.
  if (count($guestbooks)) {
    $output .= '<h4>'. t('User guestbooks') .'</h4>';
    $rows = array();
    foreach ($guestbooks as $guestbook) {
      $rows[] = array(
        l($guestbook['name'], guestbook_path($guestbook['uid'])),
        format_plural($guestbook['num'], '1 entry', '@count entries'),
        array('data' => _guestbook_timeinterval($guestbook['created']), 'align' => 'right'),
      );
    }
    $output .= theme('table', $header, $rows);
  }
  $output .= theme('pager', NULL, $limit, 0);
  return $output;
}

/**
 * Returns the title or the intro text of the guestbook specified by $uid.
 */
function _guestbook_info($uid, $data) {
  global $user;
  static $info;
  $guestbook_mode = variable_get('guestbook_mode', GUESTBOOK_SITE_GUESTBOOK | GUESTBOOK_USER_GUESTBOOKS);

  if (is_object($uid)) {
    $uid = $uid->uid;
  }
  if (!isset($info[$uid])) {
    if ($uid == 0 && ($guestbook_mode & GUESTBOOK_SITE_GUESTBOOK)) {
      $info[$uid]['title'] = variable_get('guestbook_site_title', t('Site guestbook'));
      $info[$uid]['intro'] = variable_get('guestbook_site_intro', '');
    }
    else if ($guestbook_mode & GUESTBOOK_USER_GUESTBOOKS) {
      $guestbook_user = ($uid != $user->uid ? user_load(array('uid' => $uid)) : $user);
      if ($guestbook_user->uid && ($guestbook_user->status || user_access('administer users')) && empty($guestbook_user->guestbook_status)) {
        if ($uid != $user->uid) {
          // Guestbook of other users.
          $info[$uid]['title'] = t("@username's guestbook", array('@username' => $guestbook_user->name));
          $info[$uid]['intro'] = !empty($guestbook_user->guestbook_intro) ? $guestbook_user->guestbook_intro : '';
        }
        else {
          // Own guestbook.
          $unread = _guestbook_newentries();
          $info[$uid]['title'] = t('My guestbook') . ($unread ? ' ('. $unread .')' : '');
          $info[$uid]['intro'] = !empty($guestbook_user->guestbook_intro) ? $guestbook_user->guestbook_intro : '';
        }
      }
    }
  }
  return $info[$uid][$data];
}

/**
 * Return a link to $uid's profile if context allows it.
 */
function _guestbook_user_profile_link($uid) {
  global $user;

  $guestbook_mode = variable_get('guestbook_mode', GUESTBOOK_SITE_GUESTBOOK | GUESTBOOK_USER_GUESTBOOKS);
  $output = '';
  if ($guestbook_mode & GUESTBOOK_USER_GUESTBOOKS && user_access('access user profiles') && $uid != $user->uid) {
    $guestbook_user = user_load(array('uid' => $uid, 'status' => 1));
    if ($guestbook_user->uid && empty($guestbook_user->guestbook_status)) {
      $namelink = l($guestbook_user->name, "user/$uid", array('attributes' => array('title' => t('View user profile.'))));
      $output .= '<div class="submitted">'. t("Visit !username's profile", array('!username' => $namelink)) .'</div>';
    }
  }
  return $output;
}

/**
 * Helper function to return the guestbook path for a given uid.
 */
function guestbook_path($uid = 0) {
  $uid = (int)$uid;
  if ($uid > 0) {
    return 'user/'. $uid .'/guestbook';
  }
  else {
    return 'guestbook';
  }
}

/**
 * Returns if the guestbook specified by $uid exists.
 */
function _guestbook_exists($uid) {
  $title = _guestbook_info($uid, 'title');
  return !empty($title);
}

/**
 * Returns if current user is allowed to perform $action in guestbook $uid.
 */
function _guestbook_access($action, $uid) {
  global $user;

  switch ($action) {
    case 'post':
      // Check whether user has sufficient permissions to post in this guestbook.
      if (($uid == 0 ? user_access('post in site guestbook') : user_access('post in user guestbooks'))) {
        // Check whether an authenticated user tries to post in own guestbook,
        // allowing to post to others only.
        if (!($user->uid == $uid && $user->uid > 0)) {
          return 'allowed';
        }
        // User is either anonymous and tries to post in site guestbook,
        // or an authenticated user tries to post in own guestbook.
        else {
          return 'own guestbook';
        }
      }
      else if ($user->uid == 0) {
        return 'not logged in';
      }
      else if ($user->uid != $uid) {
        return 'not allowed';
      }
      break;

    case 'moderate':
      return user_access('moderate all guestbooks') || ($uid == $user->uid && $user->uid > 0);
  }
}

/**
 * Returns a string representation of a time interval.
 */
function _guestbook_timeinterval($time) {
  if ($time == 0) {
    return t('never');
  }
  else {
    return format_interval(time() - $time, 1);
  }
}

/**
 * Fetches number of new entries for current user.
 */
function _guestbook_newentries() {
  global $user;

  $count = db_result(db_query("SELECT COUNT(created) FROM {guestbook} WHERE recipient = %d AND created > %d", $user->uid, isset($user->guestbook_visited) ? $user->guestbook_visited : time()));
  return $count;
}

function _guestbook_form_filter_tips() {
  $format = variable_get('guestbook_input_format', 1);
  $tips = theme('filter_tips', _filter_tips($format));
  return $tips;
}

function _guestbook_spam($source, $id, $header, $body, $probability, $old, $action) {
  if ($probability > 98) {