FeedLite/new.php

<?php
/**
 * 发布新问题
 */
require __DIR__ . '/lib/bootstrap.php';

$pdo      = fb_db();
$cats     = fb_categories();
$err      = '';
$atts     = [];           // 校验失败时保留已上传的附件
$catKeys  = array_keys($cats);
$form     = [
    'category' => $catKeys ? (string)$catKeys[0] : 'other',
    'title'    => '',
    'body'     => '',
    'name'     => '',
    'email'    => '',
    'phone'    => '',
];

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    foreach (['category', 'title', 'body', 'name', 'email', 'phone'] as $k) {
        $form[$k] = trim(isset($_POST[$k]) ? (string)$_POST[$k] : '');
    }
    $capInput = isset($_POST['captcha']) ? (string)$_POST['captcha'] : '';
    $hp       = trim(isset($_POST['website']) ? (string)$_POST['website'] : '');
    $t0       = isset($_POST['t0']) ? (int)$_POST['t0'] : 0;

    list($attOk, $attList, $attErr) = fb_attach_parse(isset($_POST['attachments']) ? $_POST['attachments'] : '');

    if (!isset($cats[$form['category']])) { $form['category'] = 'other'; }

    if (!fb_csrf_ok(isset($_POST['csrf']) ? $_POST['csrf'] : '')) {
        $err = '会话已过期，请重新提交。';
    } elseif ($hp !== '') {
        $err = '提交未通过校验，请重试。';
    } elseif ($t0 > 0 && (time() - $t0) < max(0, (int)fb_cfg('post_min_seconds', 3))) {
        $err = '提交过于频繁，请稍候再试。';
    } elseif (fb_len($form['title']) < 4 || fb_len($form['title']) > 80) {
        $err = '标题请填写 4~80 个字符。';
    } elseif (!fb_valid_body($form['body'])) {
        $err = '问题描述请填写 2~5000 个字符。';
    } elseif (!fb_valid_name($form['name'])) {
        $err = '请填写昵称（1~24 个字符）。';
    } elseif (!filter_var($form['email'], FILTER_VALIDATE_EMAIL)) {
        $err = '请填写有效的邮箱地址（用于接收回复通知）。';
    } elseif ($form['phone'] !== '' && !preg_match('/^[0-9+\-\s()]{5,30}$/', $form['phone'])) {
        $err = '手机号格式不正确（可留空）。';
    } elseif (!$attOk) {
        $err = $attErr;
    } elseif (!fb_rate_check('thread', (int)fb_cfg('rate_limit.thread_per_hour', 5))) {
        $err = '发帖过于频繁，请稍后再试。';
    } else {
        // 附件回源复核 + 全站总量检查（放在人机验证之前，避免验证码被无效消耗）
        list($vOk, $vList, $vErr) = fb_attach_verify($attList);
        if (!$vOk) {
            $err  = $vErr;
            $atts = $attList;
        } elseif (!fb_attach_cap_ok($pdo, $vList)) {
            $err  = '附件存储空间已满，请减少附件后重试。';
            $atts = $vList;
        } elseif (!fb_captcha_check($capInput)) {
            $err  = '人机验证未通过，请重新作答。';
            $atts = $vList;
        } else {
            $now = time();
            // 审核：开启后新提交默认不公开（visible=0），管理员通过后才会出现在列表
            $visible = fb_moderation_on() ? 0 : 1;
            $ins = $pdo->prepare('INSERT INTO threads(title, body, category, author_name, author_email, author_phone, status, visible, reply_count, created_at, updated_at, ip_hash) VALUES(?,?,?,?,?,?,?,?,0,?,?,?)');
            $ins->execute([
                $form['title'], $form['body'], $form['category'],
                $form['name'], $form['email'],
                $form['phone'] !== '' ? $form['phone'] : null,
                'open', $visible, $now, $now, fb_ip_hash(),
            ]);
            $newId = (int)$pdo->lastInsertId();
            fb_attach_save($pdo, $newId, null, $vList);
            fb_rate_hit('thread');
            fb_redirect('thread.php?id=' . $newId . '&submitted=1');
        }
    }
}

fb_layout_head('我要反馈', ['robots' => 'noindex,follow']);
?>

<div class="crumbs"><a href="index.php">← 返回问题列表</a></div>

<section class="narrow">
  <h1>我要反馈</h1>
  <p class="muted">请描述你遇到的问题或想要的功能。提交后会先进入审核，确认为有效问题后才会公开显示；<b>若经确认不是应用的问题，我们会把结论与说明通过邮件发送给你</b>（请填写常用邮箱）。</p>

  <?php fb_flash_box($err, 'error'); ?>

  <form method="post" action="new.php" class="card-form">
    <input type="hidden" name="csrf" value="<?php echo e(fb_csrf_token()); ?>">
    <input type="hidden" name="t0"  value="<?php echo time(); ?>">
    <div class="hp-field" aria-hidden="true">
      <label>请勿填写此栏<input type="text" name="website" tabindex="-1" autocomplete="off"></label>
    </div>

    <label class="field">
      <span>问题分类 <b class="req">*</b></span>
      <select name="category">
        <?php foreach ($cats as $k => $v): ?>
          <option value="<?php echo e($k); ?>" <?php echo $form['category'] === $k ? 'selected' : ''; ?>><?php echo e($v); ?></option>
        <?php endforeach; ?>
      </select>
    </label>

    <label class="field">
      <span>标题 <b class="req">*</b></span>
      <input type="text" name="title" maxlength="80" value="<?php echo e($form['title']); ?>" placeholder="一句话概括你的问题" required>
    </label>

    <label class="field">
      <span>详细描述 <b class="req">*</b></span>
      <textarea name="body" rows="9" maxlength="5000" placeholder="请尽量说明：你做了什么、期望的结果、实际的结果；如是同步问题，可说明使用的邮箱 / 服务器类型。" required><?php echo e($form['body']); ?></textarea>
    </label>

    <div class="row2">
      <label class="field">
        <span>昵称 <b class="req">*</b></span>
        <input type="text" name="name" maxlength="24" value="<?php echo e($form['name']); ?>" placeholder="怎么称呼你" required>
      </label>
      <label class="field">
        <span>邮箱 <b class="req">*</b><i class="hint">仅用于接收回复通知，不会公开</i></span>
        <input type="email" name="email" maxlength="120" value="<?php echo e($form['email']); ?>" placeholder="you@example.com" required>
      </label>
    </div>

    <label class="field">
      <span>手机号 <i class="hint">选填；仅用于必要时联系，不会公开</i></span>
      <input type="tel" name="phone" maxlength="30" value="<?php echo e($form['phone']); ?>" placeholder="选填">
    </label>

    <?php fb_uploaders($atts); ?>

    <div class="captcha">
      <label class="field">
        <span>人机验证 <b class="req">*</b> <i class="hint">防机器人，随手答一下</i></span>
        <div class="captcha-line">
          <span class="c-q"><?php echo e(fb_captcha_question()); ?></span>
          <input type="text" name="captcha" value="" placeholder="答案" autocomplete="off" required>
          <a class="reload" href="captcha.php" data-captcha-refresh>换一题</a>
        </div>
      </label>
    </div>

    <div class="form-actions">
      <button class="btn primary" type="submit">提交反馈</button>
    </div>
  </form>

  <p class="muted small">提示：本页面不会公开展示你的邮箱与手机号。请勿在内容中填写密码等敏感信息。可上传截图或录屏帮助说明问题；文件会直接传到对象存储，不占用本站服务器空间。</p>
</section>

<?php
fb_layout_foot();