article.c

/* A module for posting news stories. */

#include <ctype.h>
#include <time.h>

#include <apr.h>
#include <apr_strings.h>
#include <httpd.h>
#include <http_log.h>

#include <libxml/tree.h>

#include "private.h"
#include "buffer.h"
#include "db.h"
#include "req.h"
#include "util.h"
#include "style.h"
#include "auth.h"
#include "db_xml.h"
#include "xml_util.h"
#include "certs.h"
#include "acct_maint.h"
#include "site.h"

#include "article.h"


struct _Topic {
  char *desc;
  char *url;
};


/**
 * Render an img tag for the topic icon based on the passed topic name
 **/
static void
article_render_topic (VirguleReq *vr, char *topic)
{
  const Topic **t;
  
  if (!vr->priv->use_article_topics || !topic) return;

  for (t = vr->priv->topics; *t; t++)
    if (!strcmp ( (*t)->desc, topic) )
      break;

  if(*t)
    virgule_buffer_printf (vr->b, "<img height=\"50\" width=\"50\" src=\"%s\" alt=\"%s\" title=\"%s\">",
		    (*t)->url,(*t)->desc,(*t)->desc);		    
}


static void
article_render_reply (VirguleReq *vr, int art_num, int reply_num)
{
  apr_pool_t *p = vr->r->pool;
  Buffer *b = vr->b;
  char *key;
  xmlDoc *doc;

  key = apr_psprintf (p, "articles/_%d/_%d/reply.xml", art_num, reply_num);

  doc = virgule_db_xml_get (p, vr->db, key);
  if (doc != NULL)
    {
      xmlNode *root = doc->xmlRootNode;
      int format_type = 0;
      char *author;
      char *title;
      char *body;
      char *date;

      format_type = atoi (virgule_xml_find_child_string ( root, "format", "0"));
      author = virgule_xml_find_child_string (root, "author", "(no author)");
      title = virgule_xml_find_child_string (root, "title", "(no title)");
      body = virgule_xml_find_child_string (root, "body", "(no body)");
      date = virgule_xml_find_child_string (root, "date", "(no date)");

      virgule_render_cert_level_begin (vr, author, CERT_STYLE_MEDIUM);
      virgule_buffer_printf (b, "<a name=\"%u\"><b>%s</b></a>, posted %s by <a href=\"%s/person/%s/\">%s</a> <a href=\"#%u\" style=\"text-decoration: none\">&raquo;</a>\n",
		     reply_num, title, virgule_render_date (vr, date, 1), vr->prefix, ap_escape_uri(vr->r->pool, author), author, reply_num);
      virgule_render_cert_level_text (vr, author);
      virgule_render_cert_level_end (vr, CERT_STYLE_MEDIUM);
      virgule_buffer_printf (b, "<div>%s</div>\n",
    			     virgule_format_content (vr, body, format_type));
    }
  else
    {
      virgule_buffer_printf (b, "<p>Error reading <x>article</x> %d.\n", art_num);
    }
}

static void
article_render_replies (VirguleReq *vr, int art_num)
{
  apr_pool_t *p = vr->r->pool;
  int lastread;
  char *base;
  int n_art;
  int i;

  base = apr_psprintf (vr->r->pool, "articles/_%d", art_num);
  n_art = virgule_db_dir_max (vr->db, base) + 1;
  lastread = virgule_acct_get_lastread (vr, "articles", apr_psprintf(p, "%d", art_num));
#if 0
  virgule_buffer_printf (vr->b, "<p>Rendering %d replies.</p>\n", n_art);
#endif
  if (n_art > 0)
    {
      virgule_buffer_puts (vr->b, "<hr>\n");
      for (i = 0; i < n_art; i++)
	{
	  if (i == lastread)
	    virgule_buffer_puts (vr->b, "<a name=\"lastread\">");
	  article_render_reply (vr, art_num, i);
	}
    }
  virgule_acct_set_lastread(vr, "articles", apr_psprintf(p, "%d", art_num), n_art - 1);
}


/**
 * Renders an article from the provided XML document
 **/
static void
article_render_from_xml (VirguleReq *vr, int art_num, xmlDoc *doc, ArticleRenderStyle style)
{
  Buffer *b = vr->b;
  xmlNode *root = doc->xmlRootNode;
  int format_type = 0;
  char *date;
  char *update;
  char *updatestr = "";
  char *author;
  char *topic;
  char *title;
  char *lead;
  char *lead_a_open = "";
  char *lead_a_close = "";
  char *bmbox = "";
  char *editstr = "";
  int n_replies;
  char *article_dir;
  CertLevel cert_level;

  format_type = atoi (virgule_xml_find_child_string ( root, "format", "0"));
  topic = virgule_xml_find_child_string (root, "topic", "(no topic)");
  title = virgule_xml_find_child_string (root, "title", "(no title)");
  date = virgule_xml_find_child_string (root, "date", "(no date)");
  update = virgule_xml_find_child_string (root, "update", NULL);
  author = virgule_xml_find_child_string (root, "author", "(no author)");
  lead = virgule_xml_find_child_string (root, "lead", "(no lead)");

  if (vr->u != NULL)
    {
      if ((virgule_virgule_to_time_t(vr, date) + (vr->priv->article_days_to_edit * 86400)) > time(NULL) && (!strcmp(vr->u, author)))
        editstr = apr_psprintf (vr->r->pool, " [ <a href=\"/article/edit.html?key=%d\">Edit</a> ] ", art_num);
    }
    
  virgule_buffer_puts (b, "<div class=\"node\">");

  if(vr->priv->use_article_topics)
    {
      virgule_buffer_puts (b, "<div class=\"tags\">");
      article_render_topic (vr, topic);
      virgule_buffer_puts (b, "</div>");
    }

  /* check if author is a special user */
  if (virgule_user_is_special(vr,author))
    cert_level = virgule_cert_num_levels (vr);
  else 
    cert_level = virgule_cert_level_from_name(vr, virgule_req_get_tmetric_level (vr, author));

  virgule_buffer_printf (b, "<h1 class=\"level%i\">", cert_level);

  if (style == ARTICLE_RENDER_LEAD && vr->priv->use_article_title_links)
    {
      lead_a_open = apr_psprintf (vr->r->pool,"<a href=\"%s/article/%d.html\">",vr->prefix,art_num);
      lead_a_close = "</a>";
    }

  if (style == ARTICLE_RENDER_FULL)
    {
      char *bmurl = apr_psprintf (vr->r->pool, "%s/article/%d.html", vr->priv->base_uri, art_num);
      char *bmtitle = ap_escape_uri (vr->r->pool, title);
      bmbox = apr_psprintf (vr->r->pool, "<span class=\"bm\">"
                                         "<a href=\"javascript:void(0)\" onclick=\"sbm(event,'%s','%s')\">"
					 "<img src=\"/images/share.png\" alt=\"Share This\" title=\"Share This\" /></a>"
					 "</span>",
					 bmurl, virgule_str_subst (vr->r->pool, bmtitle, "'", "%27"));
    }
  
  virgule_buffer_printf (b, "%s%s%s", lead_a_open, title, lead_a_close);

  if (update != NULL)
    updatestr = apr_psprintf (vr->r->pool, " (updated %s)", virgule_render_date (vr, update, 1));

  virgule_buffer_printf (b, "</h1><h2>Posted %s%s by "
		 "<a href=\"%s/person/%s/\">%s</a>%s %s</h2>\n",
		 virgule_render_date (vr, date, 1), updatestr, vr->prefix, 
		 ap_escape_uri(vr->r->pool, author), author, editstr, bmbox);

  virgule_buffer_printf (b, "<div class=\"content\">%s</div>",
                         virgule_format_content (vr, lead, format_type));

  article_dir = apr_psprintf (vr->r->pool, "articles/_%d", art_num);
  n_replies = virgule_db_dir_max (vr->db, article_dir) + 1;
  if (style == ARTICLE_RENDER_FULL)
    {
      char *body;
      body = virgule_xml_find_child_string (root, "body", NULL);
      if (body)
	  virgule_buffer_printf (b, "<div class=\"content\">%s</div>\n",
                                 virgule_format_content (vr, body, format_type));

      article_render_replies (vr, art_num);

      if (virgule_req_ok_to_reply (vr))
        {
	  virgule_buffer_printf (b, "<hr><p>Post a reply to <x>article</x>: %s.</p>\n"
                 "<form method=\"POST\" action=\"replysubmit.html\" accept-charset=\"UTF-8\">\n"
		 "<p>Reply title: <br/>\n"
		 "<input type=\"text\" name=\"title\" size=\"50\" maxlength=\"60\"></p>\n"
		 "<p> Body of reply: <br/>\n"
		 "<textarea name=\"body\" cols=\"72\" rows=\"16\" wrap=\"soft\">"
		 "</textarea></p>\n"
		 "<input type=\"hidden\" name=\"art_num\" value=\"%d\">\n"
		 "<p><input type=\"submit\" name=\"post\" value=\"Post\">\n"
		 "<input type=\"submit\" name=\"preview\" value=\"Preview\">\n"
		 "</form>\n", title, art_num);

          virgule_render_acceptable_html (vr);
        }


    }
  else if (style == ARTICLE_RENDER_LEAD)
    {
      apr_pool_t *p = vr->r->pool;
      int n_new, lastread;


      n_new = -1;
      lastread = virgule_acct_get_lastread (vr, "articles", apr_psprintf(p, "%d", art_num));

      if (lastread != -1)
	n_new = n_replies - lastread - 1;
      else if (vr->u != NULL)
	n_new = n_replies;


      virgule_buffer_printf (b, "<div class=\"readmore\"><a href=\"%s/article/%d.html\">Read more...</a> (%d repl%s) ",
		     vr->prefix,
		     art_num, n_replies, n_replies == 1 ? "y" : "ies");
      if (n_new > 0)
        virgule_buffer_printf (b, "(<a href=\"%s/article/%d.html#lastread\">%d new</a>) ",
		       vr->prefix, art_num, n_new);
      virgule_buffer_puts (b, "</div>\n");
    }
  virgule_buffer_puts (b, "</div>\n");
}


/* Render the article to buffer. Need to be auth'd if FULL style. */
static void
article_render (VirguleReq *vr, int art_num, int render_body)
{
  Buffer *b = vr->b;
  apr_pool_t *p = vr->r->pool;
  char *key;
  xmlDoc *doc;

  key = apr_psprintf (p, "articles/_%d/article.xml", art_num);
#if 0
  virgule_buffer_printf (b, "<p>Article %d: key %s</p>\n", art_num, key);
#endif

  doc = virgule_db_xml_get (p, vr->db, key);
  if (doc != NULL)
    {
      article_render_from_xml (vr, art_num, doc, render_body);
    }
  else
    {
      virgule_buffer_printf (b, "<p>Error reading <x>article</x> %d.\n", art_num);
    }
}


/**
 * article_form_serve: renders the article posting form for authorized users
 */
static int
article_form_serve (VirguleReq *vr)
{
  const Topic **t;

  virgule_auth_user (vr);

  if (vr->u == NULL)
    return virgule_send_error_page (vr, vERROR, "forbidden", "You can't post <x>an article</x> because you're not logged in.");

  if (!virgule_req_ok_to_post (vr))
    return virgule_send_error_page (vr, vERROR, "forbidden", "You can't post because you're not certified. Please see the <a href=\"%s/certs.html\">certification overview</a> for more details.", vr->prefix);

  if (virgule_set_temp_buffer (vr) != 0)
    return HTTP_INTERNAL_SERVER_ERROR;

  virgule_buffer_puts (vr->b, "<form method=\"POST\" action=\"postsubmit.html\" accept-charset=\"UTF-8\">\n");

  if(vr->priv->use_article_topics)
    {
      virgule_buffer_puts (vr->b,"<p><b><x>Article</x> topic</b>:<br/>\n <select name=\"topic\">\n");

      for (t = vr->priv->topics; *t; t++)
	virgule_buffer_printf (vr->b, "<option>%s</option>\n", (*t)->desc);
	       
      virgule_buffer_puts (vr->b,"</select></p>\n");
    }
  
  virgule_buffer_puts (vr->b,"<p><b><x>Article</x> title</b>:<br/>\n");

  virgule_buffer_printf (vr->b,"<input type=\"text\" name=\"title\" size=\"40\" maxlength=\"%i\"></p>\n", vr->priv->article_title_maxsize);

  virgule_buffer_puts (vr->b,"<p><b><x>Article</x> lead</b>. This should be a one paragraph summary "
	       "of the story complete with links to original sources when "
	       "appropriate.<br/>"
	       " <textarea name=\"lead\" cols=\"72\" rows=\"6\" wrap=\"soft\">"
	       "</textarea></p>\n"
	       "<p><b><x>Article</x> Body</b>. This should contain the body "
	       "of your article and may be as long as needed. If your entire "
	       "article is only one paragraph, put it in the lead field above "
	       "and leave this one empty.<br/>"
	       "<textarea name=\"body\" cols=\"72\" rows=\"16\" wrap=\"soft\">"
	       "</textarea></p>\n"
	       "<p><input type=\"submit\" name=preview value=\"Preview\">\n"
	       "</form>\n");

  virgule_render_acceptable_html (vr);

  virgule_set_main_buffer (vr);

  return virgule_render_in_template (vr, "/templates/article-post.xml", "content", "Post a new <x>article</x>");
}

/**
 * article_generic_submit_serve: Submit article or reply.
 * @vr: The #VirguleReq context.
 * @title: Title, as raw text.
 * @lead: Lead, as raw text.
 * @body: Body, as raw text.
 * @olddate: Null for new posts. Original post date for edit of existing post
 * @oldkey: Null for new posts. Original article/reply key for edits
 * @submit_type: "article" or "reply".
 * @key_base: Base pathname of db key.
 * @key_suffix: Suffix of db key, after article number.
 * @art_num_str: The article number being replied to, or NULL if article.
 *
 * Submits article or reply.
 *
 * Return value: Response code.
 *
 * ToDo: There are a lot potential conflicts between char and xmlChar 
 * pointers that should be resolved to make the code more consistent.
 **/
static int
article_generic_submit_serve (VirguleReq *vr,
			      const char *topic,
			      const char *title, 
			      const char *lead, 
			      const char *body,
			      const char *olddate,
			      const char *oldkey,
			      const char *submit_type,
			      const char *key_base, 
			      const char *key_suffix,
			      const char *art_num_str)
{
  apr_pool_t *p = vr->r->pool;
  apr_table_t *args;
  Buffer *b = NULL;
  const Topic **t;
  const char *date;
  char *key;
  xmlDoc *doc;
  xmlNode *root;
  xmlNode *tree;
  int status;
  char *str = NULL;
  char *lead_error = NULL;
  char *body_error = NULL;
  char *nice_title = NULL;
  char *nice_lead = NULL;
  char *nice_body = NULL;

  virgule_auth_user (vr);
  if (vr->u == NULL)
    return virgule_send_error_page (vr, vERROR, "forbidden", "You can't post <x>an article</x> because you're not logged in.");

  if (!virgule_req_ok_to_reply (vr))
    return virgule_send_error_page (vr, vERROR, "forbidden", "You can't post because you're not certified. Please see the <a href=\"%s/certs.html\">certification overview</a> for more details.", vr->prefix);

  date = virgule_iso_now (p);

  if (title == NULL || title[0] == 0)
    return virgule_send_error_page (vr, vERROR, "Need title", "Your <x>%s</x> needs a title. Go back and try again.", submit_type);
  if (!strcmp (submit_type, "article") && (lead == NULL || lead[0] == 0))
    return virgule_send_error_page (vr, vERROR, "Need lead", "Your <x>article</x> needs a lead. Go back and try again.");
  if (!strcmp (submit_type, "reply") && (body == NULL || body[0] == 0))
    return virgule_send_error_page (vr, vERROR, "Need body", "Your reply needs a body. Go back and try again.");

  nice_title = virgule_nice_text (p, title);

  if(lead != NULL)
    {
      nice_lead = virgule_decode_textarea (p, (char *)lead);
      nice_lead = virgule_normalize_html (vr, nice_lead, NULL);
    }

  if(body != NULL)
    {
      nice_body = virgule_decode_textarea (p, (char *)body);
      nice_body = virgule_normalize_html (vr, nice_body, NULL);
    }

  args = virgule_get_args_table (vr);
  if(olddate != NULL)
    apr_table_set (args, "preview", "Preview");
  else
    olddate = apr_table_get (args, "olddate");
  if(oldkey == NULL)
    oldkey = apr_table_get (args, "oldkey");

  if (apr_table_get (args, "preview"))
    {
      /* render a preview */
      if (virgule_set_temp_buffer (vr) != 0)
        return HTTP_INTERNAL_SERVER_ERROR;

      b = vr->b;

      if (!strcmp (submit_type, "reply"))
	{
          str = apr_pstrdup (p, "Reply preview");
	  virgule_render_cert_level_begin (vr, vr->u, CERT_STYLE_MEDIUM);
	  virgule_buffer_printf (b, "<font size=+2><b>%s</b></font><br/>\n", nice_title);
	  virgule_render_cert_level_end (vr, CERT_STYLE_MEDIUM);
	  virgule_buffer_printf (b, "<p>%s</p>\n", nice_body ? nice_body : "");
	  virgule_buffer_puts (b, "<hr>\n");
	  virgule_buffer_printf (b, "<p>Edit your reply:</p>\n"
			 "<form method=\"POST\" action=\"replysubmit.html\" accept-charset=\"UTF-8\">\n"
			 "<p><x>Article</x> title: <br/>\n"
			 "<input type=\"text\" name=\"title\" value=\"%s\" size=\"40\" maxlength=\"60\"></p>\n"
			 "<p>Body of <x>article</x>: <br/>\n"
			 "<textarea name=\"body\" cols=\"72\" rows=\"16\" wrap=\"soft\">%s"
			 "</textarea></p>\n"
			 "<input type=\"hidden\" name=\"art_num\" value=\"%s\">\n"
			 "<p><input type=\"submit\" name=\"post\" value=\"Post\">\n"
			 "<input type=\"submit\" name=\"preview\" value=\"Preview\">\n"
			 "</form>\n",
			 virgule_str_subst (p, title, "\"", "&quot;"),
			 ap_escape_html (p, body),
			 art_num_str);
	  
	  virgule_render_acceptable_html (vr);
	}
      else if (!strcmp (submit_type, "article"))
	{
          str = apr_pstrdup (p, "<x>Article</x>  preview");
	  if(vr->priv->use_article_topics)
	    {
	      virgule_buffer_puts (b, "<table><tr><td>");
              article_render_topic (vr, (char *)topic);
              virgule_buffer_puts (b, "</td><td>");
	    }
          virgule_render_cert_level_begin (vr, vr->u, CERT_STYLE_LARGE);
          virgule_buffer_printf (b, "<span class=\"article-title\">%s</span>",nice_title);
          virgule_render_cert_level_end (vr, CERT_STYLE_LARGE);
	  
	  if(vr->priv->use_article_topics)
            virgule_buffer_puts (b, "</td></tr></table>\n");

	  virgule_buffer_printf (b, "<p>%s</p>\n", nice_lead);
	  virgule_buffer_printf (b, "<p>%s</p>\n", nice_body ? nice_body : "");
	  virgule_buffer_puts (b, "<hr>\n");
	  virgule_buffer_puts (b, "<p>Edit your <x>article</x>:</p>\n"
		"<form method=\"POST\" action=\"postsubmit.html\" accept-charset=\"UTF-8\">\n");

          if(olddate && oldkey)
	    {
	      virgule_buffer_printf (b, "<input type=\"hidden\" name=\"olddate\" value=\"%s\" />\n", olddate);
	      virgule_buffer_printf (b, "<input type=\"hidden\" name=\"oldkey\" value=\"%s\" />\n", oldkey);
	    }
	    
	  if(vr->priv->use_article_topics)
	    {
	      virgule_buffer_puts (b, "<p><b><x>Article</x> topic</b>:<br/>\n <select name=\"topic\">\n");

              for (t = vr->priv->topics; *t; t++)
	        virgule_buffer_printf (b, "<option%s>%s</option>\n",
		  strcmp((*t)->desc,topic) ? "" : " selected",(*t)->desc);

	      virgule_buffer_puts (b, " </select></p>\n");
	    }

	  virgule_buffer_printf (b,
			 "<p><b><x>Article</x> title</b>:<br/>\n"
			 "<input type=\"text\" name=\"title\" value=\"%s\" size=\"40\" maxlength=\"%i\"></p>\n"
	        	 "<p><b><x>Article</x> lead</b>. This should be a one paragraph summary "
	    		 "of the story complete with links to the original "
	    		 "sources when appropriate.<br/>"			 
			 "<textarea name=\"lead\" cols=\"72\" rows=\"6\" wrap=\"soft\">%s"
			 "</textarea></p>\n",
			 virgule_str_subst (p, title, "\"", "&quot;"),
			 vr->priv->article_title_maxsize,
			 ap_escape_html (p, lead));
	  if (lead_error != NULL)
	    virgule_buffer_printf (b, "<p><b>Warning:</b> %s</p>\n", lead_error);

	  virgule_buffer_printf (b,"<p><b><x>Article</x> Body</b>. This should "
	    		 "contain the body of your article and may be as long as "
			 "needed. If your entire article is only one paragraph, "
			 "put it in the lead field above and leave this one empty<br/>"
			 "<textarea name=\"body\" cols=\"72\" rows=\"16\" wrap=\"soft\">%s"
			 "</textarea></p>\n"
			 "<p><b>Warning:</b> Please proof read your article "
			 "and verify spelling and any html markup before posting. "
			 "Click the <b>Preview</b> button to see changes. Once "
			 "you click the <b>Post</b> button your article will be "
			 "posted and changes are no longer possible."
			 "<p><input type=\"submit\" name=post value=\"Post\">\n"
			 "<input type=\"submit\" name=preview value=\"Preview\">\n"
			 "</form>\n",
			 ap_escape_html (p, (body ? body : "")));
	  if (body_error != NULL)
	    virgule_buffer_printf (b, "<p><b>Warning:</b> %s </p>\n", body_error);

	  virgule_render_acceptable_html (vr);

	}
	virgule_set_main_buffer (vr);
	return virgule_render_in_template (vr, "/templates/default.xml", "content", str);
    }

  key = apr_psprintf (p, "%s/_%d%s",
		      key_base,
		      oldkey ? atoi (oldkey) : virgule_db_dir_max (vr->db, key_base) + 1,
		      key_suffix);

  doc = virgule_db_xml_doc_new (p);
  root = xmlNewDocNode (doc, NULL, (xmlChar *)"article", NULL);
  doc->xmlRootNode = root;

  if(olddate != NULL)
    {
      xmlNewChild (root, NULL, (xmlChar *)"date", (xmlChar *)olddate);
      xmlNewChild (root, NULL, (xmlChar *)"update", (xmlChar *)date);
    }
  else
    {
      tree = xmlNewChild (root, NULL, (xmlChar *)"date", (xmlChar *)date);
    }
  xmlNewChild (root, NULL, (xmlChar *)"format", (xmlChar *)"1");
  tree = xmlNewChild (root, NULL, (xmlChar *)"author", (xmlChar *)vr->u);

  tree = xmlNewChild (root, NULL, (xmlChar *)"title", NULL);
  xmlAddChild (tree, xmlNewDocText (doc, (xmlChar *)nice_title));

  if(vr->priv->use_article_topics)
    {
      tree = xmlNewChild (root, NULL, (xmlChar *)"topic", NULL);
      xmlAddChild (tree, xmlNewDocText (doc, (xmlChar *)topic));
    }

  if (lead && lead[0])
    {
      tree = xmlNewChild (root, NULL, (xmlChar *)"lead", NULL);
      xmlAddChild (tree, xmlNewDocText (doc, (xmlChar *)nice_lead));
    }

  if (body != NULL && body[0])
    {
      tree = xmlNewChild (root, NULL, (xmlChar *)"body", NULL);
      xmlAddChild (tree, xmlNewDocText (doc, (xmlChar *)nice_body));
    }

  /* sanity-check edit qualifications before saving */
  if (olddate || oldkey) 
    {
      char *a, *d;
      time_t t;
      xmlNodePtr r;
      int art_num = atoi (oldkey);
      char *k = apr_psprintf (vr->r->pool, "articles/_%d/article.xml", art_num);
      xmlDocPtr old = virgule_db_xml_get (vr->r->pool, vr->db, k);
      if (old == NULL)
        return virgule_send_error_page (vr, vERROR, "not found", "The specified <x>article</x> does not exist.");
      r = xmlDocGetRootElement (old);

      /* verify the article is not too old to edit */
      d = virgule_xml_find_child_string (r, "date", NULL);
      t = virgule_virgule_to_time_t (vr, d);
      if (t + (vr->priv->article_days_to_edit * 86400) < time (NULL))
        return virgule_send_error_page (vr, vERROR, "forbidden", "This <x>article</x> is too old to be edited.");

      /* verify this user can edit this article */
      a = virgule_xml_find_child_string (r, "author", NULL);
      if (strcmp (vr->u, a))
        return virgule_send_error_page (vr, vERROR, "forbidden", "Only <x>articles</x> posted by you may be edited.");
    }

  status = virgule_db_xml_put (p, vr->db, key, doc);

  if (status)
    return virgule_send_error_page (vr, vERROR,
			    "database",
			    "There was an error storing the <x>%s</x>. This means there's something wrong with the site.", submit_type);

  if (!strcmp (submit_type, "reply"))
    apr_table_add (vr->r->headers_out, "refresh", 
		  apr_psprintf(p, "0;URL=/article/%s.html#lastread", art_num_str));
  else 
    apr_table_add (vr->r->headers_out, "refresh", 
		  apr_psprintf(p, "0;URL=/article/%d.html", 
		              oldkey ? atoi (oldkey) : virgule_db_dir_max (vr->db, key_base)));

  str = apr_psprintf (p, "Ok, your <x>%s</x> was posted. Thanks!", submit_type);
  return virgule_send_error_page (vr, vINFO, "Posted", str);
}

/*
 * article_submit_serve: handle "post a new article" form submission
 */
static int
article_submit_serve (VirguleReq *vr)
{
  int art_num;
  char *key;
  xmlDoc *doc;
  const char *old_author, *old_title;

  apr_table_t *args;
  const char *title, *lead, *body, *oldkey;
  const char *topic = NULL;

  if (vr->r->method_number != M_POST)
    return HTTP_METHOD_NOT_ALLOWED;

  args = virgule_get_args_table (vr);
  if (args == NULL)
    return virgule_send_error_page (vr, vERROR, "form data", "Invalid form submission.");

  if(vr->priv->use_article_topics)
    topic = apr_table_get (args, "topic");
    
  title = apr_table_get (args, "title");
  lead = apr_table_get (args, "lead");
  body = apr_table_get (args, "body");
  oldkey = apr_table_get (args, "oldkey");

  /* Auth user and check for duplicate post */
  virgule_auth_user (vr);
  if (vr->u == NULL)
    return virgule_send_error_page (vr, vERROR, "forbidden", "You can't post <x>an article</x> because you're not logged in.");

  art_num = virgule_db_dir_max (vr->db, "articles");
  if (art_num >= 0 && oldkey == NULL)
    {
      key = apr_psprintf (vr->r->pool, "articles/_%d/article.xml", art_num);
      doc = virgule_db_xml_get (vr->r->pool, vr->db, key);
      old_title = virgule_xml_find_child_string (doc->xmlRootNode, "title", "(no title)");
      old_author = virgule_xml_find_child_string (doc->xmlRootNode, "author", "(no author)");
      if(strcmp (old_author, vr->u) == 0 && strcmp (old_title, title) == 0)
	  return virgule_send_error_page (vr, vERROR, "duplicate", "Duplicate. Please post your <x>article</x> only once.");
    }

  return article_generic_submit_serve (vr, topic, title, lead, body, NULL, NULL,
				       "article",
				       "articles", "/article.xml", NULL);
}


/**
 * article_edit_serve - edit an existing article number
 **/
static int
article_edit_serve (VirguleReq *vr)
{
  int art_num;
  time_t t;
  char *key, *date, *author, *title, *lead, *body, *topic;
  const char *art_num_str;
  apr_table_t *args;
  xmlDocPtr doc;
  xmlNodePtr root;

  /* user must be logged in */
  virgule_auth_user (vr);
  if (vr->u == NULL)
    return virgule_send_error_page (vr, vERROR, "forbidden", "You must be logged in to edit an <x>article</x>.");

  /* verify that we got an article key */
  args = virgule_get_args_table (vr);
  if (args == NULL)
    return virgule_send_error_page (vr, vERROR, "form data", "No <x>article</x> key was specified.");

  /* try to read the article */
  art_num_str = apr_table_get (args, "key");
  art_num = atoi (art_num_str);
  key = apr_psprintf (vr->r->pool, "articles/_%d/article.xml", art_num);
  doc = virgule_db_xml_get (vr->r->pool, vr->db, key);
  if (doc == NULL)
    return virgule_send_error_page (vr, vERROR, "database", "The specified <x>article</x> could not be loaded.");

  root = xmlDocGetRootElement (doc);

  /* verify the article is not too old to edit */
  date = virgule_xml_find_child_string (root, "date", NULL);
  t = virgule_virgule_to_time_t (vr, date);
  if (t + (vr->priv->article_days_to_edit * 86400) < time (NULL))
    return virgule_send_error_page (vr, vERROR, "forbidden", "This <x>article</x> is too old to be edited.");

  /* verify this user can edit this article */
  author = virgule_xml_find_child_string (root, "author", NULL);
  if (strcmp (vr->u, author))
    return virgule_send_error_page (vr, vERROR, "forbidden", "Only <x>articles</x> posted by you may be edited.");

  topic = virgule_xml_find_child_string (root, "topic", NULL);
  title = virgule_xml_find_child_string (root, "title", NULL);

  lead = virgule_xml_find_child_string (root, "lead", NULL);
  if (lead)
    lead = virgule_encode_textarea (vr->r->pool, (char *)lead);

  body = virgule_xml_find_child_string (root, "body", NULL);
  if (body)
    body = virgule_encode_textarea (vr->r->pool, (char *)body);

  /* load the editor in preview mode */
  return article_generic_submit_serve (vr, topic, title, lead, body, date, 
                                       art_num_str,
				       "article",
				       "articles", "/article.xml", NULL);
}


/* maybe not needed anymore since form is on article page? */
static int
article_reply_form_serve (VirguleReq *vr)
{
  apr_pool_t *p = vr->r->pool;
  apr_table_t *args;
  const char *art_num_str;
  int art_num;
  char *key;
  xmlDoc *doc;
  xmlNode *root, *tree;
  char *title;

  virgule_auth_user (vr);

  if (vr->u == NULL)
    return virgule_send_error_page (vr, vERROR, "forbidden", "You can't post a reply because you're not logged in.");

  if (!virgule_req_ok_to_reply (vr))
    return virgule_send_error_page (vr, vERROR, "forbidden", "You can't post because you're not certified. Please see the <a href=\"%s/certs.html\">certification overview</a> for more details.", vr->prefix);

  args = virgule_get_args_table (vr);
  art_num_str = apr_table_get (args, "art_num");
  if (art_num_str == NULL)
    return virgule_send_error_page (vr, vERROR, "form data", "Need <x>article</x> number to reply to.");

  art_num = atoi (art_num_str);

  key = apr_psprintf (p, "articles/_%d/article.xml", art_num);
  doc = virgule_db_xml_get (p, vr->db, key);
  if (doc == NULL)
    return virgule_send_error_page (vr, vERROR, "database", "<x>Article</x> %d not found.", art_num);
  root = doc->xmlRootNode;
  tree = virgule_xml_find_child (root, "title");
  if (tree)
    title = virgule_xml_get_string_contents (tree);
  else
    title = "(no title)";

  if (virgule_set_temp_buffer (vr) != 0)
    return HTTP_INTERNAL_SERVER_ERROR;

  virgule_buffer_printf (vr->b, "<p>Post a reply to <x>article</x>: %s.</p>\n"
		 "<form method=\"POST\" action=\"replysubmit.html\" accept-charset=\"UTF-8\">\n"
		 "<p>Reply title: <br/>\n"
		 "<input type=\"text\" name=\"title\" size=\"50\" maxlength=\"50\"></p>\n"
		 "<p>Body of reply: <br/>\n"
		 "<textarea name=\"body\" cols=\"72\" rows=\"16\" wrap=\"soft\">"
		 "</textarea></p>\n"
		 "<input type=\"hidden\" name=\"art_num\" value=\"%d\">\n"
		 "<p><input type=\"submit\" name=\"post\" value=\"Post\">\n"
		 "<input type=\"submit\" name=\"preview\" value=\"Preview\">\n"
		 "</form>\n", title, art_num);

  virgule_render_acceptable_html (vr);

  virgule_set_main_buffer (vr);
  
  return virgule_render_in_template (vr, "/templates/default.xml", "content", "Post a reply");
}

/*
 * article_reply_submit_serve: handles article reply form submission
 */
static int
article_reply_submit_serve (VirguleReq *vr)
{
  apr_pool_t *p = vr->r->pool;
  apr_table_t *args;
  const char *title, *art_num_str, *body;
  char *key_base;
  char *key_reply;
  int last_reply;
  xmlDoc *doc;

  if (vr->r->method_number != M_POST)
    return HTTP_METHOD_NOT_ALLOWED;

  virgule_auth_user (vr);
  
  if (vr->u == NULL)
    return virgule_send_error_page (vr, vERROR, "forbidden", "You can't post a reply because you're not logged in.");

  args = virgule_get_args_table (vr);
  if (args == NULL)
    return virgule_send_error_page (vr, vERROR, "form data", "Invalid form submission.");

  title = apr_table_get (args, "title");
  art_num_str = apr_table_get (args, "art_num");
  body = apr_table_get (args, "body");

  if (art_num_str == NULL)
    return virgule_send_error_page (vr, vERROR, "form data", "This page requires <x>an article</x> number. If you're not playing around manually with URLs, it suggests there's something wrong with the site.");

  key_base = apr_psprintf (p, "articles/_%d", atoi (art_num_str));

  /* Reject duplicate replies */
  last_reply = virgule_db_dir_max (vr->db, key_base);
  key_reply = apr_psprintf (p, "articles/_%d/_%d/reply.xml", atoi (art_num_str),last_reply);
  doc = virgule_db_xml_get (p, vr->db, key_reply);
  if (doc != NULL)
    {
      const char *old_author;
      const char *old_title;
      old_author = virgule_xml_find_child_string (doc->xmlRootNode, "author", "(no author)");
      old_title = virgule_xml_find_child_string (doc->xmlRootNode, "title", "(no author)");
      if(strcmp (old_author, vr->u) == 0 && strcmp (old_title, title) == 0)
	  return virgule_send_error_page (vr, vERROR, "duplicate", "Duplicate. Please post your reply only once.");
    }

  return article_generic_submit_serve (vr, NULL, title, NULL, body, NULL, NULL,
				       "reply",
				       key_base, "/reply.xml", art_num_str);
}

/**
 * virgule_article_recent_render: Render a set of articles.
 * @vr: The #VirguleReq context.
 * @n_arts_max: Maximum number of articles to render.
 * @start: article number of start article, or -1 for most recent.
 *
 * Renders up to @n_arts_max articles, starting at @start (or most
 * recent if -1), from more to less recent.
 *
 * Return value: Apache format status.
 **/
int
virgule_article_recent_render (VirguleReq *vr, int n_arts_max, int start)
{
  Buffer *b = vr->b;
  int art_num;
  int n_arts;

  virgule_auth_user (vr);

  if (start >= 0)
    art_num = start;
  else
    art_num = virgule_db_dir_max (vr->db, "articles");

  for (n_arts = 0; n_arts < n_arts_max && art_num >= 0; n_arts++)
    {
      article_render (vr, art_num, ARTICLE_RENDER_LEAD);
      art_num--;
    }

  if (n_arts == 0)
    virgule_buffer_puts (b, "<p>No <x>articles</x>.</p>");
  if (art_num >= 0)
    {
    virgule_buffer_printf (b, "<p><a href=\"%s/article/older.html?start=%d\">%d older <x>article%s</x>...</a></p>\n",
		   vr->prefix, art_num,
		   art_num + 1, art_num == 0 ? "" : "s");
    }

  if (virgule_req_ok_to_post (vr))
    virgule_buffer_printf (b, "<p><a href=\"%s/article/post.html\">Post</a> a new <x>article</x>...</p>\n", vr->prefix);
  else 
    virgule_buffer_printf (b, "<p><a href=\"mailto:%s?subject=Story suggestion\">Suggest a story</a></p>\n", vr->priv->admin_email);

  return 0;
}


/**
 * article_num_serve: Renders one article within the article template
 **/
static int
article_num_serve (VirguleReq *vr, const char *t)
{
  char *tail, *key, *title;
  int n;
  xmlDoc *doc;
  xmlNode *root;

  virgule_auth_user (vr);

  n = strtol (t, &tail, 10);
  if (strcmp (tail, ".html"))
    return virgule_send_error_page (vr, vERROR, "form data", "Invalid <x>Article</x> URL: %s", tail);
  key = apr_psprintf (vr->r->pool, "articles/_%d/article.xml", n);
  doc = virgule_db_xml_get (vr->r->pool, vr->db, key);
  if (doc == NULL)
    return virgule_send_error_page (vr, vERROR, "database", "<x>Article</x> %d not found.", n);
  root = xmlDocGetRootElement (doc);
  title = virgule_xml_find_child_string (root, "title", "(no title)");

  /* initialize the temp buffer */
  if (virgule_set_temp_buffer (vr) != 0)
    return HTTP_INTERNAL_SERVER_ERROR;

  /* render the article to the temp buffer */
  article_render_from_xml (vr, n, doc, ARTICLE_RENDER_FULL);

  /* switch back to the main buffer */
  virgule_set_main_buffer (vr);

  return virgule_render_in_template (vr, "/templates/article.xml", "article", title);
}


/**
 * article_maint: Update article index records
 **/
static int
article_maint (VirguleReq *vr)
{
    int art;
    int art_num = virgule_db_dir_max (vr->db, "articles");

    /* check each article in the database from the earliest to the newest */
    for (art = 0; art <= art_num; art++)
	virgule_acct_update_art_index(vr, art);

    return virgule_send_error_page (vr, vINFO, "Article maintenance", "Article indexing completed.");
}


int
virgule_article_serve (VirguleReq *vr)
{
  const char *p;

  if (!strcmp (vr->uri, "/admin/articlemaint.html"))
    return article_maint (vr);

  if ((p = virgule_match_prefix (vr->uri, "/article/")) == NULL)
    return DECLINED;

  if (!strcmp (p, "post.html"))
    return article_form_serve (vr);

  if (!strcmp (p, "postsubmit.html"))
    return article_submit_serve (vr);

  if (!strcmp (p, "reply.html"))
    return article_reply_form_serve (vr);

  if (!strcmp (p, "replysubmit.html"))
    return article_reply_submit_serve (vr);

  if (!strcmp (p, "edit.html"))
    return article_edit_serve (vr);

  if (isdigit (p[0]))
    return article_num_serve (vr, p);

  return DECLINED;
}