X-Git-Url: http://git.shiar.net/minimedit.git/blobdiff_plain/a875a31121144d25bd59bb72aa2afd8a5565c853..ead5bed24e07383fbcf783c3b5c70a755dbc1982:/widget/reply.php

diff --git a/widget/reply.php b/widget/reply.php
index fd01a94..7e0ec1e 100644
--- a/widget/reply.php
+++ b/widget/reply.php
@@ -9,9 +9,20 @@ $journalcol = [
 if ($_POST) {
 	require_once 'upload.inc.php';
 	try {
+		$html = messagehtml($_POST['reply']);
+		if ($_FILES and !empty($_FILES['image'])) {
+			$target = 'data/upload';
+			if (!file_exists($target)) {
+				throw new Exception("er is geen uploadmap aanwezig op $target");
+			}
+			$target .= '/' . $User->login;
+			if ($result = userupload($_FILES['image'], $target)) {
+				$html .= sprintf('<p><img src="/thumb/640x/%s" /></p>', $result);
+			}
+		}
 		$query = $Db->set('comments', [
 			'page'    => $Page,
-			'message' => messagehtml($_POST['reply']),
+			'message' => $html,
 			'author'  => $User->login,
 		]);
 		if (!$query->rowCount()) {
@@ -67,7 +78,7 @@ while ($row = $query->fetch()) {
 	printf('<strong>%s</strong> <small class=date>%s</small>',
 		$rowuser->html, showdate(preg_split('/\D/', $row->created))
 	);
-	printf("<blockquote>%s</blockquote>\n", $row->message);
+	printf("<blockquote>\n%s</blockquote>\n", $row->message);
 	if ($changes = json_decode($row->journal)) {
 		print '<ul>';
 		foreach ($changes as $change) {
@@ -94,7 +105,7 @@ while ($row = $query->fetch()) {
 
 if ($User) {
 	print '<li>';
-	print '<form method="post" action="">';
+	print '<form method="post" action="" enctype="multipart/form-data">';
 	if (isset($Issue) and $User->admin("edit $Page")) {
 		print '<p>';
 		printf(
@@ -115,6 +126,13 @@ if ($User) {
 		);
 		print "</p>\n";
 	}
+	if (isset($Issue)) {
+		printf(
+			'<p><label for="%s">%s:</label> '
+			. '<input id="%1$s" name="%1$s" value=""%s /></p>'."\n",
+			'image', 'Beeldmateriaal', ' type="file" accept="image/*"'
+		);
+	}
 	printf('<textarea id="%s" name="%1$s" cols=60 rows=3 placeholder="%s">%s</textarea>'."\n",
 		'reply',
 		"Bericht van {$User->login}",