<?php
/**
 * AJAX 提交评论
 */
function Bing_ajax_comment(){
	if( !Bing_mpanel( 'ajax_comment' ) ) return;

	global $comment_post_ID, $post, $status, $status_obj, $comment_author, $comment_author_email, $comment_author_url, $comment_content, $user, $comment_type, $user_ID, $comment_parent, $commentdata, $comment_id, $comment;

	add_filter( 'wp_die_ajax_handler', 'Bing_add_ajax_comment_error', 16 );
	add_action( 'comment_flood_trigger', 'Bing_ajax_comment_flood_trigger', 16 );
	add_action( 'comment_duplicate_trigger', 'Bing_ajax_comment_duplicate_trigger', 16 );

	$comment_post_ID = isset( $_POST['comment_post_ID'] ) ? (int) $_POST['comment_post_ID'] : 0;

	$post = get_post( $comment_post_ID );

	$invalid_text = __( '检测为非法提交的评论', 'Bing' );

	if ( empty( $post->comment_status ) ) {
		do_action( 'comment_id_not_found', $comment_post_ID );
		wp_die( $invalid_text );
	}

	$status = get_post_status( $post );
	$status_obj = get_post_status_object( $status );

	if( !comments_open( $comment_post_ID ) ){
		do_action( 'comment_closed', $comment_post_ID );
		wp_die( __( '抱歉，该文章无法评论', 'Bing' ) );
	}elseif( 'trash' == $status ){
		do_action( 'comment_on_trash', $comment_post_ID );
		wp_die( $invalid_text );
	}elseif( !$status_obj->public && !$status_obj->private ){
		do_action( 'comment_on_draft', $comment_post_ID );
		wp_die( $invalid_text );
	}elseif( post_password_required( $comment_post_ID ) ) {
		do_action( 'comment_on_password_protected', $comment_post_ID );
		wp_die( __( '抱歉，输入密码之后才能评论', 'Bing' ) );
	}else do_action( 'pre_comment_on_post', $comment_post_ID );

	$comment_author       = ( isset( $_POST['author'] ) )  ? trim( strip_tags( $_POST['author'] ) ) : null;
	$comment_author_email = ( isset( $_POST['email'] ) )   ? trim( $_POST['email'] )                : null;
	$comment_author_url   = ( isset( $_POST['url'] ) )     ? trim( $_POST['url'] )                  : null;
	$comment_content      = ( isset( $_POST['comment'] ) ) ? trim( $_POST['comment'] )              : null;

	$user = wp_get_current_user();
	if( $user->exists() ){
		if( empty( $user->display_name ) ) $user->display_name = $user->user_login;
		$comment_author       = wp_slash( $user->display_name );
		$comment_author_email = wp_slash( $user->user_email );
		$comment_author_url   = wp_slash( $user->user_url );
		if( current_user_can( 'unfiltered_html' ) && !( isset( $_POST['_wp_unfiltered_html_comment'] ) && wp_verify_nonce( $_POST['_wp_unfiltered_html_comment'], 'unfiltered-html-comment_' . $comment_post_ID ) ) ){
			kses_remove_filters();
			kses_init_filters();
		}
	}elseif( get_option( 'comment_registration' ) || 'private' == $status ) wp_die( __( '抱歉，您必须登录才能评论' ) );

	$comment_type = '';

	if( get_option( 'require_name_email' ) && !$user->exists() ){
		if( 6 > strlen( $comment_author_email ) || '' == $comment_author ) wp_die( __( '请填写正确的昵称和邮箱' ) );
		elseif( ! is_email( $comment_author_email ) ) wp_die( __( '请使用一个有效的邮箱' ) );
	}

	$user = wp_get_current_user();
	if( $user->exists() ){
		if( empty( $user->display_name ) ) $user->display_name = $user->user_login;
		$comment_author = esc_sql( $user->display_name );
		$comment_author_email = esc_sql( $user->user_email );
		$comment_author_url = esc_sql( $user->user_url );
		$user_ID = esc_sql( $user->ID );
		if( current_user_can( 'unfiltered_html' ) ){
			if( wp_create_nonce( 'unfiltered-html-comment_' . $comment_post_ID ) != $_POST['_wp_unfiltered_html_comment'] ){
				kses_remove_filters();
				kses_init_filters();
			}
		}
	}elseif( get_option( 'comment_registration' ) || $status == 'private' ) wp_die( __( '您必须登录才能发表评论', 'Bing' ) );

	if( get_option( 'require_name_email' ) && !$user->exists() ){
		if( strlen( $comment_author_email ) < 6 || !$comment_author ) wp_die( __( '请填写正确的昵称和邮箱', 'Bing' ) );
        elseif( !is_email( $comment_author_email ) ) wp_die( __( '请使用一个有效的邮箱', 'Bing' ) );
	}

	if( empty( $comment_content ) ) wp_die( __( '评论不能为空', 'Bing' ) );

	$comment_parent = isset( $_POST['comment_parent'] ) ? absint( $_POST['comment_parent'] ) : 0;

	$commentdata = compact('comment_post_ID', 'comment_author', 'comment_author_email', 'comment_author_url', 'comment_content', 'comment_type', 'comment_parent', 'user_ID');

	if( !$comment_id = wp_new_comment( $commentdata ) ) wp_die( __( '无法保存评论，请稍后再试', 'Bing' ) );

	$comment = get_comment( $comment_id );

	do_action( 'set_comment_cookies', $comment, $user );

	Bing_comments_list_loop( $comment );
	Bing_comments_list_loop_end();

	remove_filter( 'wp_die_ajax_handler', 'Bing_add_ajax_comment_error', 16 );
	remove_action( 'comment_flood_trigger', 'Bing_ajax_comment_flood_trigger', 16 );
	remove_action( 'comment_duplicate_trigger', 'Bing_ajax_comment_duplicate_trigger', 16 );

	wp_die();
}
add_action( 'wp_ajax_submit_comment', 'Bing_ajax_comment' );
add_action( 'wp_ajax_nopriv_submit_comment', 'Bing_ajax_comment' );

/**
 * AJAX 添加评论报错改造
 */
function Bing_add_ajax_comment_error(){
	return 'Bing_ajax_comment_error';
}

/**
 * AJAX 评论报错改造
 */
function Bing_ajax_comment_error( $message ){
	header( 'HTTP/1.0 500 Internal Server Error' );
	header( 'Content-Type: text/plain;charset=UTF-8' );
	die( $message );
}

/**
 * AJAX 评论报错频率过快改造
 */
function Bing_ajax_comment_flood_trigger(){
	wp_die( __( '您评论的速度太快了，休息一下吧', 'Bing' ) );
}

/**
 * AJAX 评论报错内容重复改造
 */
function Bing_ajax_comment_duplicate_trigger(){
	wp_die( __( '您好像已经发表过这篇评论了', 'Bing' ) );
}

/**
 * 把评论中的代码转换成实体字符
 */
function Bing_comment_code_htmlspecialchars( $comment ){
	$comment['comment_content'] = preg_replace_callback( '|<pre.*>(.*)</pre|isU', 'Bing_comment_code_htmlspecialchars_callback', $comment['comment_content'] );
	$comment['comment_content'] = preg_replace_callback( '|<code.*>(.*)</code|isU', 'Bing_comment_code_htmlspecialchars_callback', $comment['comment_content'] );
	return $comment;
}
add_filter( 'preprocess_comment', 'Bing_comment_code_htmlspecialchars', 4 );

/**
 * 把评论中的代码转换成实体字符（回调函数）
 */
function Bing_comment_code_htmlspecialchars_callback( $matches ){
	return str_replace( $matches[1], htmlspecialchars( $matches[1] ), $matches[0] );
}

/**
 * 回复的评论加 @
 */
function Bing_comment_add_at( $comment_text, $comment = null ){
	return Bing_mpanel( 'comment_add_at' ) && isset( $comment->comment_parent ) && $comment->comment_parent > 0 ? '<a class="comment_at" href="' . esc_url( get_comment_link( $comment->comment_parent ) ) . '">@' . get_comment_author( $comment->comment_parent ) . '</a> ' . $comment_text : $comment_text;
}
add_filter( 'comment_text' , 'Bing_comment_add_at', 18, 2 );

/**
 * WordPress 禁止不包含中文的评论
 *
 * @see http://www.endskin.com/spam-cinese-comment/
 */
function Bing_spam_chinese_comment( $comment ){
	if( Bing_mpanel( 'comment_anti_chinese' ) && !preg_match( '/[一-龥]/u', $comment['comment_content'] ) ) wp_die( __( '请在评论里包含中文' , 'Bing' ) );
	return $comment;
}
add_filter( 'preprocess_comment', 'Bing_spam_chinese_comment' );

/**
 * 禁止没有头像的用户评论
 *
 * @link http://www.endskin.co/validate-gravatar-comment/
 */
function Bing_validate_gravatar_comment( $comment ){
	if( !Bing_mpanel( 'validate_gravatar_comment' ) ) return $comment;
	$headers = @get_headers( 'http://cn.gravatar.com/avatar/' . md5( strtolower( trim( $comment['comment_author_email'] ) ) ) . '?d=404' );
	if( strpos( $headers[0], '200' ) === false ) wp_die( __( '请使用有 Gravatar 头像的邮箱评论', 'Bing' ) );
	return $comment;
}
add_filter( 'preprocess_comment', 'Bing_validate_gravatar_comment' );

/**
 * 评论邮件通知
 */
function Bing_comment_mail_notify( $comment_ID ){
	$comment = get_comment( $comment_ID );
	if( !Bing_mpanel( 'comment_email_notify' ) || empty( $comment->comment_parent ) || $comment->comment_approved == 'spam' || get_comment_author_email( $comment ) == get_comment_author_email( $comment->comment_parent ) ) return;
	$subject = sprintf( __( '你在%s的评论有回复啦！', 'Bing' ), sprintf( __( '《%s》', 'Bing' ), get_the_title( $comment->comment_post_ID ) ) );
	$message_code = '
	<div>
		<div style="color: #555; font:12px/1.5 Hiragino Sans GB, Microsoft Yahei, SimSun, Helvetica, Arial, Sans-serif; width: 600px; margin: 50px auto; border: 1px solid #E9E9E9; border-top: none;">
			<table border="0" cellspacing="0" cellpadding="0">
				<tbody>
					<tr valign="top" height="2">
						<td width="190" bgcolor="#0B9938"></td>
						<td width="120" bgcolor="#9FCE67"></td>
						<td width="85" bgcolor="#EDB113"></td>
						<td width="85" bgcolor="#FFCC02"></td>
						<td width="130" bgcolor="#5B1301" valign="top"></td>
					</tr>
				</tbody>
			</table>
			<div style="padding: 0 15px 8px;">
				<h2 style="border-bottom: 1px solid #E9E9E9; font-size: 14px; font-weight: normal; padding: 10px 0 10px;">
					<span style="color: #12ADDB;">&gt;</span>
					%s
				</h2>
				<div style="font-size: 12px; color: #777; padding: 0 10px; margin-top: 18px;">
					<p>%s</p>
					<p style="background: #F5F5F5; padding: 10px 15px; margin: 18px 0;">%s</p>
					<p>%s</p>
					<p style="background: #F5F5F5; padding: 10px 15px; margin: 18px 0;">%s</p>
					<p>%s</p>
				</div>
			</div>
			<div style="color: #888; padding: 10px; border-top: 1px solid #E9E9E9; background: #F5F5F5;">
				<p style="margin: 0; padding: 0;">%s</p>
			</div>
		</div>
	</div>';
	$message = sprintf(
		$message_code,
		sprintf( __( '您在%s的评论有回复啦！', 'Bing' ), '<a style="text-decoration: none; color: #12ADDB;" href="' . esc_attr( home_url() ) . '" title="' . esc_attr( get_bloginfo( 'name', 'display' ) ) . '" target="_blank">' . get_bloginfo( 'name', 'display' ) . '</a>' ),
		sprintf( __( '%s，您曾在%s中发表评论：', 'Bing' ), get_comment_author( $comment->comment_parent ), '<a style="text-decoration: none; color: #12ADDB;" href="' . esc_url( get_permalink( $comment->comment_post_ID ) ) . '" title="' . the_title_attribute( array( 'echo' => false, 'post' => $comment->comment_post_ID ) ) . '">' . sprintf( __( '《%s》', 'Bing' ), get_the_title( $comment->comment_post_ID ) ) . '</a>' ),
		nl2br( htmlspecialchars( get_comment_text( $comment->comment_parent ) ) ),
		sprintf( __( '“%s”给您的回复如下：', 'Bing' ), get_comment_author( $comment ) ),
		nl2br( htmlspecialchars( get_comment_text( $comment ) ) ),
		sprintf( _x( '您可以%s，欢迎再次光临%s！', '第一个“%s”为“点击查看完整的回复内容”的链接', 'Bing' ), '<a style="text-decoration: none; color: #12ADDB;" href="' . esc_url( get_comment_link( $comment->comment_parent ) ) . '" title="' . esc_attr__( '点击查看完整的回复内容', 'Bing' ) . '" target="_blank">' . __( '点击查看完整的回复内容', 'Bing' ) . '</a>', '<a style="text-decoration: none; color: #12ADDB;" href="' . esc_url( home_url() ) . '" title="' . esc_attr( get_bloginfo( 'name', 'display' ) ) . '" target="_blank">' . get_bloginfo( 'name', 'display' ) . '</a>' ),
		sprintf( __( '%s - 邮件自动生成，请勿直接回复！', 'Bing' ), '© ' . current_time( 'Y' ) . ' <a style="text-decoration: none; color: #12ADDB;" href="' . esc_url( home_url() ) . '" title="' . esc_attr( get_bloginfo( 'name', 'display' ) ) . '" target="_blank">' . get_bloginfo( 'name', 'display' ) . '</a>' )
	);
	wp_mail( get_comment_author_email( $comment->comment_parent ), $subject, $message, 'Content-Type: text/html' );
}
add_action( 'comment_post', 'Bing_comment_mail_notify' );

/**
 * 评论作者链接新窗口打开
 *
 * @see http://www.endskin.co/comment-author-link-newtab/
 */
function Bing_comment_author_link( $link ){
	return Bing_mpanel( 'comment_author_link_blank' ) ? str_replace( "href=", 'target="_blank" href=', $link ) : $link;
}
add_filter( 'get_comment_author_link', 'Bing_comment_author_link', 2 );

/**
 * 移除评论 HTML 使用权限判断验证随机数
 */
function Bing_remove_comment_form_unfiltered_html_nonce(){
	remove_action( 'comment_form', 'wp_comment_form_unfiltered_html_nonce' );
}
add_action( 'after_setup_theme', 'Bing_remove_comment_form_unfiltered_html_nonce', 14 );

/**
 * 获取插入表情按钮
 */
function Bing_insert_smiley(){
	global $wpsmiliestrans;
	if( empty( $wpsmiliestrans ) || !is_array( $wpsmiliestrans ) ) return;
	$code = '';
	foreach( array_unique( $wpsmiliestrans ) as $key => $smiley ) $code .= '<a href="javascript:;" data-smiley="' . esc_attr( $key ) . '">' . translate_smiley( array( $key ) ) . '</a>';
	return $code;
}

//End of page.