| .. | |||||
| admin | |||||
| assets | |||||
| auth | |||||
| cache | |||||
| config | |||||
| lib | |||||
| staff | |||||
| style | |||||
| uploads | |||||
| widget | |||||
| index.php | |||||
| qr_show.php | |||||
| social.php |
| Server IP : 122.155.15.77 / Your IP : 216.73.216.114 Web Server : Microsoft-IIS/10.0 System : Windows NT IDC-PLESK-01 10.0 build 17763 (Windows Server 2016) AMD64 User : IWPD_391(usr0000329) ( 0) PHP Version : 7.4.33 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : C:/Inetpub/vhosts/watpa.ac.th/events.watpa.ac.th/Epass/ |
Upload File : |
<?php
require_once __DIR__ . '/lib/session.php';
requireLogin(['user']);
require "config/db.php";
require_once __DIR__ . '/lib/optimize_image.php';
// ==== AJAX Load More Posts (must be before any output) ====
if (isset($_GET['load_more']) && isset($_GET['offset'])) {
header('Content-Type: application/json');
$offset = intval($_GET['offset']);
$limit = 10;
$posts = [];
// Fixed: Use prepared statements to prevent SQL injection
$stmt = $pdo->prepare("
SELECT p.*, u.student_name AS username, u.student_class,
(SELECT COUNT(*) FROM social_likes WHERE post_id=p.id) AS like_count,
(SELECT COUNT(*) FROM social_likes WHERE post_id=p.id AND user_id=?) AS has_liked
FROM social_posts p
JOIN students u ON p.user_id=u.id
ORDER BY CASE WHEN p.user_id = ? THEN 0 ELSE 1 END,
CASE WHEN p.user_id = ? THEN UNIX_TIMESTAMP(p.created_at) ELSE (SELECT COUNT(*) FROM social_likes WHERE post_id=p.id) * 1000000 END DESC
LIMIT ? OFFSET ?
");
$stmt->execute([$userId, $userId, $userId, $limit, $offset]);
$posts = $stmt->fetchAll();
$html = '';
foreach($posts as $post) {
// Sanitize all outputs to prevent XSS
$postId = intval($post['id']);
$username = htmlspecialchars($post['username'], ENT_QUOTES, 'UTF-8');
$studentClass = htmlspecialchars($post['student_class'] ?? '', ENT_QUOTES, 'UTF-8');
$imageUrl = htmlspecialchars($post['image_url'], ENT_QUOTES, 'UTF-8');
$text = htmlspecialchars($post['text'], ENT_QUOTES, 'UTF-8');
$likeCount = intval($post['like_count']);
$hasLiked = $post['has_liked'] ? 1 : 0;
$postUserId = intval($post['user_id']);
$likeColor = $hasLiked ? '#e03' : '#777';
$likeAction = $hasLiked ? 'unlike' : 'like';
$html .= '<div class="feed-card" data-post-id="' . $postId . '">';
$html .= '<div class="feed-header">';
$html .= '<div class="feed-user-info">';
$html .= '<span class="feed-username">' . $username . '</span>';
if (!empty($studentClass)) {
$html .= '<span class="feed-class">' . $studentClass . '</span>';
}
$html .= '</div>';
$html .= '<span class="feed-time">' . htmlspecialchars(date('d/m/Y H:i', strtotime($post['created_at'])), ENT_QUOTES, 'UTF-8') . '</span>';
$html .= '</div>';
$html .= '<img src="' . $imageUrl . '" class="feed-img" alt="Post image">';
$html .= '<div class="feed-body">';
$html .= '<div class="feed-caption">' . $text . '</div>';
$html .= '<div class="feed-footer">';
$html .= '<form method="POST" style="display:inline">';
$html .= '<input type="hidden" name="like_post_id" value="' . $postId . '">';
$html .= '<input type="hidden" name="like_action" value="' . htmlspecialchars($likeAction) . '">';
$html .= '<button class="like-btn" style="color:' . $likeColor . '">❤ ' . $likeCount . '</button>';
$html .= '</form>';
if ($postUserId === $userId) {
$html .= '<form method="POST" onsubmit="return confirm(\'ลบโพสต์นี้?\');" style="display:inline">';
$html .= '<input type="hidden" name="delete_post_id" value="' . $postId . '">';
$html .= '<button class="delete-btn">ลบ</button>';
$html .= '</form>';
}
$html .= '</div></div></div>';
}
echo json_encode(['html' => $html, 'count' => count($posts)]);
exit;
}
include 'widget/bottom_nav.php';
$fullname = $_SESSION['user']['name'] ?? 'ผู้ใช้';
// LOGOUT
if (isset($_POST['logout'])) {
session_start();
session_unset();
session_destroy();
header("Location: auth/login.php");
exit;
}
// ==== Upload Handler ====
$postError = '';
if (isset($_POST['submit_post']) && isset($userId)) {
if(!empty($_FILES['image']['name'])) {
$uploadDir = 'uploads/';
if (!is_dir($uploadDir)) mkdir($uploadDir, 0777, true);
$file = $_FILES['image'];
$ext = strtolower(pathinfo($file['name'], PATHINFO_EXTENSION));
$allowed = ['jpg', 'jpeg', 'png', 'heic', 'heif'];
if(in_array($ext, $allowed) && $file['error'] == 0) {
$fname = time() . '_' . rand(100000,999999) . '.' . $ext;
$target = $uploadDir . $fname;
// Upload original first
if (move_uploaded_file($file['tmp_name'], $target)) {
// Optimize: Reduce resolution to 800x800 max, 75% quality (save 60-70% storage)
optimize_image($target, $target, 75, 800, 800);
$stmt = $pdo->prepare("INSERT INTO social_posts(user_id, image_url, text) VALUES (?, ?, ?)");
$stmt->execute([$userId, $target, $_POST['text']]);
header('Location: social.php');
exit;
} else {
$postError = 'Upload failed.';
}
} else {
$postError = 'Invalid image.';
}
} else {
$postError = 'No image.';
}
}
// ==== Like/Unlike Handler ====
if (isset($_POST['like_post_id']) && isset($userId)) {
$pid = intval($_POST['like_post_id']);
$action = $_POST['like_action'] ?? '';
try {
if ($action == 'unlike') {
$pdo->prepare("DELETE FROM social_likes WHERE post_id = ? AND user_id = ?")->execute([$pid, $userId]);
} else {
$pdo->prepare("INSERT IGNORE INTO social_likes(post_id, user_id) VALUES (?, ?)")->execute([$pid, $userId]);
}
} catch (Exception $e) {}
header('Location: social.php');
exit;
}
// ==== Delete Post Handler ====
if (isset($_POST['delete_post_id']) && isset($userId)) {
$pid = intval($_POST['delete_post_id']);
// only allow delete own post
$stmt = $pdo->prepare("SELECT image_url FROM social_posts WHERE id=? AND user_id=?");
if ($stmt && $stmt->execute([$pid, $userId])) {
$post = $stmt->fetch();
if ($post && isset($post['image_url']) && !empty($post['image_url'])) {
// Get the image path and try multiple possible locations
$imagePath = $post['image_url'];
// Try relative path first (as stored in DB)
if (file_exists($imagePath)) {
@unlink($imagePath);
} else {
// Try with __DIR__ prefix (absolute path from script location)
$absolutePath = __DIR__ . '/' . ltrim($imagePath, '/');
if (file_exists($absolutePath)) {
@unlink($absolutePath);
} else {
// Try just the filename in uploads directory
$filename = basename($imagePath);
$uploadsPath = __DIR__ . '/uploads/' . $filename;
if (file_exists($uploadsPath)) {
@unlink($uploadsPath);
}
}
}
// delete post and likes
$pdo->prepare("DELETE FROM social_likes WHERE post_id = ?")->execute([$pid]);
$pdo->prepare("DELETE FROM social_posts WHERE id = ?")->execute([$pid]);
}
}
header('Location: social.php');
exit;
}
// ==== Feed Query - Top Liked First (Initial Load) ====
$posts = [];
$limit = 10;
$offset = 0;
$stmt = $pdo->prepare("
SELECT
p.id,
p.user_id,
p.text,
p.image_url,
p.created_at,
u.student_name AS username,
u.student_class,
COUNT(l.id) AS like_count,
MAX(CASE WHEN l.user_id = ? THEN 1 ELSE 0 END) AS has_liked
FROM social_posts p
JOIN students u ON p.user_id = u.id
LEFT JOIN social_likes l ON p.id = l.post_id
GROUP BY p.id
ORDER BY
(p.user_id = ?) DESC, -- 1️⃣ โพสต์ตัวเองขึ้นก่อน
(
COUNT(l.id) * 0.5 + -- 2️⃣ สูตรหลัก
UNIX_TIMESTAMP(p.created_at) / 100000
) DESC,
COUNT(l.id) DESC, -- 3️⃣ ไลก์เยอะก่อน
p.created_at DESC -- 4️⃣ ใหม่ก่อน
LIMIT ?
");
$stmt->execute([
$userId,
$userId,
$limit
]);
$posts = $stmt->fetchAll(PDO::FETCH_ASSOC);
?>
<!DOCTYPE html>
<html lang="th">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<link href="https://fonts.googleapis.com/css2?family=Prompt:wght@300;400;500&display=swap" rel="stylesheet">
<link rel="stylesheet" href="style/logout.css">
<style>
*{box-sizing:border-box;font-family:'Prompt',sans-serif;}
body{margin:0;background:#f2f2f2;padding-bottom:80px;}
/* ===== FEED ===== */
.feed-list{
max-width:480px;
margin:0 auto;
padding:12px;
}
.feed-card{
background:#fff;
border-radius:14px;
margin-bottom:18px;
box-shadow:0 2px 6px rgba(0,0,0,.08);
overflow:hidden;
}
.feed-header{
padding:10px 14px;
display:flex;
justify-content:space-between;
align-items:center;
}
.feed-user-info{
display:flex;
flex-direction:column;
gap:2px;
}
.feed-username{
font-weight:600;
font-size:.95rem;
}
.feed-class{
font-size:.75rem;
color:#666;
background:#f0f0f0;
padding:2px 8px;
border-radius:10px;
display:inline-block;
width:fit-content;
}
.feed-time{font-size:.8rem;color:#888;}
.feed-img{
width:100%;
max-height:420px;
object-fit:cover;
background:#ddd;
}
.feed-body{padding:12px 14px;}
.feed-caption{font-size:.95rem;margin-bottom:10px;}
.feed-footer{
display:flex;
align-items:center;
gap:12px;
}
.like-btn{
border:none;
background:none;
font-size:1.1em;
cursor:pointer;
}
.delete-btn{
border:none;
background:#ef5350;
color:#fff;
border-radius:6px;
padding:4px 12px;
cursor:pointer;
}
.post-form-area { background: #f6f6ff; padding: 16px 14px 10px 14px; border-radius: 18px; margin: 18px auto 10px auto; max-width: 410px; border:1px solid #ddd; }
.post-form-area input[type="text"]{ width: 100%; padding:8px; font-size:1em; border-radius:8px; border:1px solid #ccc; }
.post-form-area input[type="file"] { margin-top:10px;}
.post-form-area button{margin-top:12px; padding:8px 20px; border:none; border-radius:10px; background:#8FBF72; color:white; font-weight:bold; cursor:pointer; }
.error-msg {color: #e33; font-weight:bold;}
/* Loading & Refresh */
.loading-indicator, .refresh-indicator {
text-align:center; padding:20px; color:#888; font-size:.9rem;
}
.refresh-indicator {
position:sticky; top:0; background:#f2f2f2; z-index:5;
transform:translateY(-100%); transition:transform 0.3s;
}
.refresh-indicator.active {
transform:translateY(0);
}
.credit {
position: fixed;
bottom: 70px;
left: 12px;
font-size: 8.5px;
color: rgba(0,0,0,1);
background: rgba(0,0,0,0.15);
padding: 4px 8px;
border-radius: 6px;
z-index: 99999;
pointer-events: none;
font-family: 'Prompt', sans-serif;
}
</style>
<title>Social</title>
</head>
<body>
<header>
<form method="POST">
<button class="logout-btn" name="logout" title="ออกจากระบบ">
<span aria-hidden="true">×</span>
</button>
</form>
</header>
<!-- Floating add (+) button -->
<button id="open-modal-btn" style="position:fixed;bottom:80px;right:30px;background:#6E9F56;color:white;border:none;border-radius:50%;width:60px;height:60px;box-shadow:0 3px 12px rgba(0,0,0,0.22);font-size:2.8em;z-index:97;display:flex;align-items:center;justify-content:center;cursor:pointer;">+</button>
<!-- Modal popup -->
<div id="add-modal-overlay" style="display:none;position:fixed;top:0;left:0;right:0;bottom:0;background:rgba(0,0,0,0.38);z-index:98;align-items:center;justify-content:center;">
<div style="background:white;padding:24px 16px 12px 16px; border-radius:18px;max-width:370px;margin:auto;position:relative;box-shadow:0 6px 30px rgba(0,0,0,0.16);">
<form class="post-form-area" method="POST" enctype="multipart/form-data">
<div style="font-weight:600; margin-bottom:6px">แชร์กิจกรรม/ประสบการณ์ : </div>
<input type="file" name="image" accept="image/*" required>
<input type="text" name="text" placeholder="แคปชั่น หรือเล่าเรื่องราว" maxlength="200">
<button name="submit_post" type="submit">โพสต์</button>
<?php if($postError): ?><div class="error-msg"><?=$postError?></div><?php endif; ?>
</form>
<button onclick="document.getElementById('add-modal-overlay').style.display='none'" style="position:absolute;top:12px;right:15px;border:none;background:none;font-size:1.8em;color:#aaa;cursor:pointer;">×</button>
</div>
</div>
<div class="refresh-indicator" id="refresh-indicator">⬇ดึงลงเพื่อรีเฟรช</div>
<div class="feed-list" id="feed-list">
<?php foreach($posts as $post): ?>
<div class="feed-card">
<div class="feed-header">
<div class="feed-user-info">
<span class="feed-username"><?=htmlspecialchars($post['username'])?> <span class="feed-class"><?=htmlspecialchars($post['student_class'])?></span></span>
</div>
<span class="feed-time">
<?=date('d/m/Y H:i',strtotime($post['created_at']))?>
</span>
</div>
<img src="<?=$post['image_url']?>" class="feed-img">
<div class="feed-body">
<div class="feed-caption">
<?=htmlspecialchars($post['text'])?>
</div>
<div class="feed-footer">
<form method="POST" style="display:inline">
<input type="hidden" name="like_post_id" value="<?=$post['id']?>">
<?php if ($post['has_liked']): ?>
<input type="hidden" name="like_action" value="unlike">
<button class="like-btn" style="color:#e03">❤ <?=$post['like_count']?></button>
<?php else: ?>
<input type="hidden" name="like_action" value="like">
<button class="like-btn" style="color:#777">❤ <?=$post['like_count']?></button>
<?php endif; ?>
</form>
<?php if ($post['user_id']==$userId): ?>
<form method="POST" onsubmit="return confirm('ลบโพสต์นี้?');" style="display:inline">
<input type="hidden" name="delete_post_id" value="<?=$post['id']?>">
<button class="delete-btn">ลบ</button>
</form>
<?php endif; ?>
</div>
</div>
</div>
<?php endforeach; ?>
<div class="loading-indicator" id="loading-indicator" style="display:none;">กำลังโหลด...</div>
</div>
<?php include 'widget/bottom_nav.php'; ?>
<script>
// Modal popup logic
const addBtn = document.getElementById('open-modal-btn');
const modal = document.getElementById('add-modal-overlay');
addBtn?.addEventListener('click', () => { modal.style.display = 'flex'; });
document.addEventListener('keydown', (e) => { if (e.key==='Escape') modal.style.display = 'none'; });
modal?.addEventListener('click', (e) => { if(e.target===modal) modal.style.display='none'; });
// Infinite Scroll & Pull-to-Refresh
let currentOffset = <?=count($posts)?>;
let isLoading = false;
let isRefreshing = false;
let touchStartY = 0;
let touchCurrentY = 0;
let pullDistance = 0;
const feedList = document.getElementById('feed-list');
const loadingIndicator = document.getElementById('loading-indicator');
const refreshIndicator = document.getElementById('refresh-indicator');
// Pull-to-refresh touch events
document.addEventListener('touchstart', (e) => {
if (window.pageYOffset === 0) {
touchStartY = e.touches[0].clientY;
}
});
document.addEventListener('touchmove', (e) => {
if (window.pageYOffset === 0 && touchStartY > 0) {
touchCurrentY = e.touches[0].clientY;
pullDistance = touchCurrentY - touchStartY;
if (pullDistance > 0) {
if (pullDistance > 80) {
refreshIndicator.classList.add('active');
refreshIndicator.textContent = '⬆ปล่อยเพื่อรีเฟรช';
} else {
refreshIndicator.classList.add('active');
refreshIndicator.textContent = '⬇ดึงลงเพื่อรีเฟรช';
}
}
}
});
document.addEventListener('touchend', () => {
if (pullDistance > 80 && !isRefreshing) {
refreshFeed();
} else {
refreshIndicator.classList.remove('active');
}
touchStartY = 0;
touchCurrentY = 0;
pullDistance = 0;
});
// Infinite Scroll - Load more when near bottom
let scrollTimeout;
window.addEventListener('scroll', () => {
clearTimeout(scrollTimeout);
scrollTimeout = setTimeout(() => {
if (isLoading || isRefreshing) return;
if (!feedList || !loadingIndicator) return;
const scrollTop = window.pageYOffset || document.documentElement.scrollTop || document.body.scrollTop;
const windowHeight = window.innerHeight || document.documentElement.clientHeight;
const docHeight = Math.max(
document.body.scrollHeight,
document.body.offsetHeight,
document.documentElement.clientHeight,
document.documentElement.scrollHeight,
document.documentElement.offsetHeight
);
// Load more when 300px from bottom
if (scrollTop + windowHeight >= docHeight - 300) {
loadMorePosts();
}
}, 100);
});
function loadMorePosts() {
if (isLoading) return;
if (!feedList || !loadingIndicator) return;
isLoading = true;
loadingIndicator.style.display = 'block';
fetch(`social.php?load_more=1&offset=${currentOffset}`)
.then(r => {
if (!r.ok) throw new Error('Network response was not ok');
return r.text();
})
.then(text => {
try {
const data = JSON.parse(text);
if (data.count > 0) {
feedList.insertAdjacentHTML('beforeend', data.html);
currentOffset += data.count;
} else {
loadingIndicator.textContent = 'ไม่มีโพสต์เพิ่มเติม';
setTimeout(() => {
loadingIndicator.style.display = 'none';
loadingIndicator.textContent = 'กำลังโหลด...';
}, 2000);
}
isLoading = false;
loadingIndicator.style.display = 'none';
} catch (e) {
console.error('JSON parse error:', e, 'Response:', text);
isLoading = false;
loadingIndicator.style.display = 'none';
}
})
.catch(err => {
console.error('Fetch error:', err);
isLoading = false;
loadingIndicator.style.display = 'none';
});
}
function refreshFeed() {
if (isRefreshing) return;
isRefreshing = true;
refreshIndicator.textContent = 'กำลังรีเฟรช...';
location.reload();
}
</script>
</body>| .. | |||||
| admin | |||||
| assets | |||||
| auth | |||||
| cache | |||||
| config | |||||
| lib | |||||
| staff | |||||
| style | |||||
| uploads | |||||
| widget | |||||
| index.php | |||||
| qr_show.php | |||||
| social.php |