Vergleich xmlhttp.php - 1.6.2 - 1.6.17

Keine Änderungen Hinzugefügt Modifiziert Entfernt
Zeile 6	Zeile 6
* Website: http://mybb.com * License: http://mybb.com/about/license *	* Website: http://mybb.com * License: http://mybb.com/about/license *
* $Id: xmlhttp.php 5125 2010-07-27 07:28:03Z RyanGordon $	* $Id$
/ /*	/ /*
Zeile 18	Zeile 18
* This is done to make response times when using XML HTTP Requests faster and * less intense on the server. */	* This is done to make response times when using XML HTTP Requests faster and * less intense on the server. */
define("IN_MYBB", 1);	define("IN_MYBB", 1);
// We don't want visits here showing up on the Who's Online define("NO_ONLINE", 1);	// We don't want visits here showing up on the Who's Online define("NO_ONLINE", 1);

define('THIS_SCRIPT', 'xmlhttp.php'); // Load MyBB core files require_once dirname(__FILE__)."/inc/init.php";	define('THIS_SCRIPT', 'xmlhttp.php'); // Load MyBB core files require_once dirname(__FILE__)."/inc/init.php";
$shutdown_queries = array();	$shutdown_queries = array();
// Load some of the stock caches we'll be using. $groupscache = $cache->read("usergroups");	// Load some of the stock caches we'll be using. $groupscache = $cache->read("usergroups");
Zeile 38	Zeile 38
{ $cache->update_usergroups(); $groupscache = $cache->read("usergroups");	{ $cache->update_usergroups(); $groupscache = $cache->read("usergroups");
}	}
// Send no cache headers header("Expires: Sat, 1 Jan 2000 01:00:00 GMT");	// Send no cache headers header("Expires: Sat, 1 Jan 2000 01:00:00 GMT");
Zeile 98	Zeile 98
$theme['imglangdir'] = $theme['imgdir']; } }	$theme['imglangdir'] = $theme['imgdir']; } }
	$templatelist = "postbit_editedby,xmlhttp_inline_post_editor,xmlhttp_buddyselect_online,xmlhttp_buddyselect_offline,xmlhttp_buddyselect"; $templates->cache($db->escape_string($templatelist));
if($lang->settings['charset']) {	if($lang->settings['charset']) {
Zeile 122	Zeile 125
{ exit; }	{ exit; }

// Send our headers. header("Content-type: text/plain; charset={$charset}");	// Send our headers. header("Content-type: text/plain; charset={$charset}");
// Sanitize the input. $mybb->input['query'] = str_replace(array("%", "_"), array("\\%", "\\_"), $mybb->input['query']);
// Query for any matching users. $query_options = array( "order_by" => "username",	// Query for any matching users. $query_options = array( "order_by" => "username",
"order_dir" => "asc",	"order_dir" => "asc",
"limit_start" => 0, "limit" => 15 );	"limit_start" => 0, "limit" => 15 );
$query = $db->simple_select("users", "uid, username", "username LIKE '".$db->escape_string($mybb->input['query'])."%'", $query_options);	$query = $db->simple_select("users", "uid, username", "username LIKE '".$db->escape_string_like($mybb->input['query'])."%'", $query_options);
while($user = $db->fetch_array($query)) { $user['username'] = htmlspecialchars_uni($user['username']);	while($user = $db->fetch_array($query)) { $user['username'] = htmlspecialchars_uni($user['username']);
Zeile 154	Zeile 154
{ exit; }	{ exit; }

// Send our headers. header("Content-type: text/plain; charset={$charset}");	// Send our headers. header("Content-type: text/plain; charset={$charset}");

// Sanitize the input. $mybb->input['query'] = str_replace(array("%", "_"), array("\\%", "\\_"), $mybb->input['query']);	// Sanitize the input. $mybb->input['query'] = str_replace(array("%", "_"), array("\\%", "\\_"), $mybb->input['query']);

// Query for any matching usergroups. $query_options = array( "order_by" => "title",	// Query for any matching usergroups. $query_options = array( "order_by" => "title",
Zeile 168	Zeile 168
"limit_start" => 0, "limit" => 15 );	"limit_start" => 0, "limit" => 15 );