Zeile 84 | Zeile 84 |
---|
}
// Load basic theme information that we could be needing.
|
}
// Load basic theme information that we could be needing.
|
| if($loadstyle != "def='1'") { $query = $db->simple_select('themes', 'name, tid, properties, allowedgroups', $loadstyle, array('limit' => 1)); $theme = $db->fetch_array($query);
if(isset($theme['tid']) && !is_member($theme['allowedgroups']) && $theme['allowedgroups'] != 'all') { if(isset($mybb->cookies['mybbtheme'])) { my_unsetcookie('mybbtheme'); }
$loadstyle = "def='1'"; } }
|
if($loadstyle == "def='1'") { if(!$cache->read('default_theme')) { $cache->update_default_theme(); }
|
if($loadstyle == "def='1'") { if(!$cache->read('default_theme')) { $cache->update_default_theme(); }
|
|
|
$theme = $cache->read('default_theme'); }
|
$theme = $cache->read('default_theme'); }
|
else { $query = $db->simple_select("themes", "name, tid, properties", $loadstyle); $theme = $db->fetch_array($query); }
|
|
// No theme was found - we attempt to load the master or any other theme if(!isset($theme['tid']) || isset($theme['tid']) && !$theme['tid']) { // Missing theme was from a user, run a query to set any users using the theme to the default
|
// No theme was found - we attempt to load the master or any other theme if(!isset($theme['tid']) || isset($theme['tid']) && !$theme['tid']) { // Missing theme was from a user, run a query to set any users using the theme to the default
|
$db->update_query('users', array('style' => 0), "style = '{$mybb->user['style']}'");
| $db->update_query('users', array('style' => 0), "style = '{$mybb->user['style']}'");
|
// Attempt to load the master or any other theme if the master is not available $query = $db->simple_select('themes', 'name, tid, properties, stylesheets', '', array('order_by' => 'tid', 'limit' => 1)); $theme = $db->fetch_array($query);
| // Attempt to load the master or any other theme if the master is not available $query = $db->simple_select('themes', 'name, tid, properties, stylesheets', '', array('order_by' => 'tid', 'limit' => 1)); $theme = $db->fetch_array($query);
|
Zeile 112 | Zeile 124 |
---|
// Set the appropriate image language directory for this theme. // Are we linking to a remote theme server?
|
// Set the appropriate image language directory for this theme. // Are we linking to a remote theme server?
|
if(my_substr($theme['imgdir'], 0, 7) == 'http://' || my_substr($theme['imgdir'], 0, 8) == 'https://') { // If a language directory for the current language exists within the theme - we use it
| if(my_validate_url($theme['imgdir'])) { // If a language directory for the current language exists within the theme - we use it
|
if(!empty($mybb->user['language']))
|
if(!empty($mybb->user['language']))
|
{
| {
|
$theme['imglangdir'] = $theme['imgdir'].'/'.$mybb->user['language']; } else { // Check if a custom language directory exists for this theme if(!empty($mybb->settings['bblanguage']))
|
$theme['imglangdir'] = $theme['imgdir'].'/'.$mybb->user['language']; } else { // Check if a custom language directory exists for this theme if(!empty($mybb->settings['bblanguage']))
|
{
| {
|
$theme['imglangdir'] = $theme['imgdir'].'/'.$mybb->settings['bblanguage']; } // Otherwise, the image language directory is the same as the language directory for the theme
| $theme['imglangdir'] = $theme['imgdir'].'/'.$mybb->settings['bblanguage']; } // Otherwise, the image language directory is the same as the language directory for the theme
|
Zeile 162 | Zeile 174 |
---|
// Otherwise, the image language directory is the same as the language directory for the theme else {
|
// Otherwise, the image language directory is the same as the language directory for the theme else {
|
$theme['imglangdir'] = $theme['imgdir'];
| $theme['imglangdir'] = $theme['imgdir'];
|
} }
| } }
|
Zeile 185 | Zeile 197 |
---|
$lang->load("global"); $lang->load("xmlhttp");
|
$lang->load("global"); $lang->load("xmlhttp");
|
| $closed_bypass = array("refresh_captcha", "validate_captcha");
$mybb->input['action'] = $mybb->get_input('action');
|
$plugins->run_hooks("xmlhttp");
|
$plugins->run_hooks("xmlhttp");
|
$mybb->input['action'] = $mybb->get_input('action');
| // If the board is closed, the user is not an administrator and they're not trying to login, show the board closed message if($mybb->settings['boardclosed'] == 1 && $mybb->usergroup['canviewboardclosed'] != 1 && !in_array($mybb->input['action'], $closed_bypass)) { // Show error if(!$mybb->settings['boardclosed_reason']) { $mybb->settings['boardclosed_reason'] = $lang->boardclosed_reason; }
$lang->error_boardclosed .= "<br /><em>{$mybb->settings['boardclosed_reason']}</em>";
xmlhttp_error($lang->error_boardclosed); }
|
// Fetch a list of usernames beginning with a certain string (used for auto completion) if($mybb->input['action'] == "get_users") { $mybb->input['query'] = ltrim($mybb->get_input('query'));
|
// Fetch a list of usernames beginning with a certain string (used for auto completion) if($mybb->input['action'] == "get_users") { $mybb->input['query'] = ltrim($mybb->get_input('query'));
|
// If the string is less than 3 characters, quit. if(my_strlen($mybb->input['query']) < 3) {
| // If the string is less than 2 characters, quit. if(my_strlen($mybb->input['query']) < 2) {
|
exit;
|
exit;
|
}
| }
|
if($mybb->get_input('getone', MyBB::INPUT_INT) == 1)
|
if($mybb->get_input('getone', MyBB::INPUT_INT) == 1)
|
{
| {
|
$limit = 1;
|
$limit = 1;
|
} else {
| } else {
|
$limit = 15; }
| $limit = 15; }
|
Zeile 227 | Zeile 255 |
---|
if($limit == 1) { $user = $db->fetch_array($query);
|
if($limit == 1) { $user = $db->fetch_array($query);
|
$user['username'] = htmlspecialchars_uni($user['username']);
| |
$data = array('id' => $user['username'], 'text' => $user['username']); } else
| $data = array('id' => $user['username'], 'text' => $user['username']); } else
|
Zeile 235 | Zeile 262 |
---|
$data = array(); while($user = $db->fetch_array($query)) {
|
$data = array(); while($user = $db->fetch_array($query)) {
|
$user['username'] = htmlspecialchars_uni($user['username']);
| |
$data[] = array('id' => $user['username'], 'text' => $user['username']); } }
| $data[] = array('id' => $user['username'], 'text' => $user['username']); } }
|
Zeile 262 | Zeile 288 |
---|
if(!$thread) { xmlhttp_error($lang->thread_doesnt_exist);
|
if(!$thread) { xmlhttp_error($lang->thread_doesnt_exist);
|
}
| }
|
// Fetch some of the information from the first post of this thread. $query_options = array( "order_by" => "dateline",
| // Fetch some of the information from the first post of this thread. $query_options = array( "order_by" => "dateline",
|
Zeile 278 | Zeile 304 |
---|
}
// Fetch the specific forum this thread/post is in.
|
}
// Fetch the specific forum this thread/post is in.
|
$forum = get_forum($thread['fid']);
| $forum = get_forum($thread['fid']);
|
// Missing thread, invalid forum? Error. if(!$forum || $forum['type'] != "f")
| // Missing thread, invalid forum? Error. if(!$forum || $forum['type'] != "f")
|
Zeile 311 | Zeile 337 |
---|
xmlhttp_error($lang->edit_time_limit); } $ismod = false;
|
xmlhttp_error($lang->edit_time_limit); } $ismod = false;
|
} else
| } else
|
{ $ismod = true; }
| { $ismod = true; }
|
Zeile 330 | Zeile 356 |
---|
else if(my_strtolower($charset) == "iso-8859-1") { $subject = utf8_decode($subject);
|
else if(my_strtolower($charset) == "iso-8859-1") { $subject = utf8_decode($subject);
|
} }
// Set up posthandler. require_once MYBB_ROOT."inc/datahandlers/post.php"; $posthandler = new PostDataHandler("update"); $posthandler->action = "post";
// Set the post data that came from the input to the $post array. $updatepost = array( "pid" => $post['pid'], "tid" => $thread['tid'], "subject" => $subject, "edit_uid" => $mybb->user['uid'] ); $posthandler->set_data($updatepost);
// Now let the post handler do all the hard work. if(!$posthandler->validate_post()) { $post_errors = $posthandler->get_friendly_errors(); xmlhttp_error($post_errors); } // No errors were found, we can call the update method. else { $posthandler->update_post(); if($ismod == true) { $modlogdata = array( "tid" => $thread['tid'], "fid" => $forum['fid'] ); log_moderator_action($modlogdata, $lang->edited_post); } }
require_once MYBB_ROOT."inc/class_parser.php"; $parser = new postParser;
// Send our headers. header("Content-type: application/json; charset={$charset}");
| } }
// Only edit subject if subject has actually been changed if($thread['subject'] != $subject) { // Set up posthandler. require_once MYBB_ROOT."inc/datahandlers/post.php"; $posthandler = new PostDataHandler("update"); $posthandler->action = "post";
// Set the post data that came from the input to the $post array. $updatepost = array( "pid" => $post['pid'], "tid" => $thread['tid'], "prefix" => $thread['prefix'], "subject" => $subject, "edit_uid" => $mybb->user['uid'] ); $posthandler->set_data($updatepost);
// Now let the post handler do all the hard work. if(!$posthandler->validate_post()) { $post_errors = $posthandler->get_friendly_errors(); xmlhttp_error($post_errors); } // No errors were found, we can call the update method. else { $posthandler->update_post(); if($ismod == true) { $modlogdata = array( "tid" => $thread['tid'], "fid" => $forum['fid'] ); log_moderator_action($modlogdata, $lang->edited_post); } } }
require_once MYBB_ROOT."inc/class_parser.php"; $parser = new postParser;
// Send our headers. header("Content-type: application/json; charset={$charset}");
|
$plugins->run_hooks("xmlhttp_edit_subject_end");
$mybb->input['value'] = $parser->parse_badwords($mybb->get_input('value'));
| $plugins->run_hooks("xmlhttp_edit_subject_end");
$mybb->input['value'] = $parser->parse_badwords($mybb->get_input('value'));
|
Zeile 393 | Zeile 424 |
---|
if(!$post) { xmlhttp_error($lang->post_doesnt_exist);
|
if(!$post) { xmlhttp_error($lang->post_doesnt_exist);
|
}
| }
|
// Fetch the thread associated with this post. $thread = get_thread($post['tid']);
|
// Fetch the thread associated with this post. $thread = get_thread($post['tid']);
|
|
|
// Fetch the specific forum this thread/post is in. $forum = get_forum($thread['fid']);
| // Fetch the specific forum this thread/post is in. $forum = get_forum($thread['fid']);
|
Zeile 405 | Zeile 436 |
---|
if(!$thread || !$forum || $forum['type'] != "f") { xmlhttp_error($lang->thread_doesnt_exist);
|
if(!$thread || !$forum || $forum['type'] != "f") { xmlhttp_error($lang->thread_doesnt_exist);
|
}
| }
// Check if this forum is password protected and we have a valid password if(check_forum_password($forum['fid'], 0, true)) { xmlhttp_error($lang->wrong_forum_password); }
|
// Fetch forum permissions. $forumpermissions = forum_permissions($forum['fid']);
| // Fetch forum permissions. $forumpermissions = forum_permissions($forum['fid']);
|
Zeile 435 | Zeile 472 |
---|
if($post['visible'] == 0) { xmlhttp_error($lang->post_moderation);
|
if($post['visible'] == 0) { xmlhttp_error($lang->post_moderation);
|
}
// Forum is closed - no editing allowed if($forum['open'] == 0) { xmlhttp_error($lang->no_permission_edit_post);
| |
} }
|
} }
|
|
|
$plugins->run_hooks("xmlhttp_edit_post_end");
|
$plugins->run_hooks("xmlhttp_edit_post_end");
|
|
|
if($mybb->get_input('do') == "get_post") { // Send our headers.
|
if($mybb->get_input('do') == "get_post") { // Send our headers.
|
//header("Content-type: text/xml; charset={$charset}"); header("Content-type: text/html; charset={$charset}");
//$post['message'] = htmlspecialchars_uni($post['message']);
| header("Content-type: application/json; charset={$charset}");
|
// Send the contents of the post.
|
// Send the contents of the post.
|
echo $post['message'];
| echo json_encode($post['message']);
|
exit; } else if($mybb->get_input('do') == "update_post")
| exit; } else if($mybb->get_input('do') == "update_post")
|
Zeile 464 | Zeile 492 |
---|
if(!verify_post_check($mybb->get_input('my_post_key'), true)) { xmlhttp_error($lang->invalid_post_code);
|
if(!verify_post_check($mybb->get_input('my_post_key'), true)) { xmlhttp_error($lang->invalid_post_code);
|
}
| }
|
$message = $mybb->get_input('value'); $editreason = $mybb->get_input('editreason');
| $message = $mybb->get_input('value'); $editreason = $mybb->get_input('editreason');
|
Zeile 484 | Zeile 512 |
---|
{ $message = utf8_decode($message); $editreason = utf8_decode($editreason);
|
{ $message = utf8_decode($message); $editreason = utf8_decode($editreason);
|
} }
| } }
|
// Set up posthandler. require_once MYBB_ROOT."inc/datahandlers/post.php"; $posthandler = new PostDataHandler("update");
| // Set up posthandler. require_once MYBB_ROOT."inc/datahandlers/post.php"; $posthandler = new PostDataHandler("update");
|
Zeile 499 | Zeile 527 |
---|
"editreason" => $editreason, "edit_uid" => $mybb->user['uid'] );
|
"editreason" => $editreason, "edit_uid" => $mybb->user['uid'] );
|
| // If this is the first post set the prefix. If a forum requires a prefix the quick edit would throw an error otherwise if($post['pid'] == $thread['firstpost']) { $updatepost['prefix'] = $thread['prefix']; }
|
$posthandler->set_data($updatepost);
// Now let the post handler do all the hard work.
| $posthandler->set_data($updatepost);
// Now let the post handler do all the hard work.
|
Zeile 518 | Zeile 553 |
---|
if($thread['firstpost'] == $post['pid']) { echo json_encode(array("moderation_thread" => $lang->thread_moderation, 'url' => $mybb->settings['bburl'].'/'.get_forum_link($thread['fid']), "message" => $post['message']));
|
if($thread['firstpost'] == $post['pid']) { echo json_encode(array("moderation_thread" => $lang->thread_moderation, 'url' => $mybb->settings['bburl'].'/'.get_forum_link($thread['fid']), "message" => $post['message']));
|
exit;
| exit;
|
} else {
| } else {
|
Zeile 540 | Zeile 575 |
---|
"me_username" => $post['username'], "filter_badwords" => 1 );
|
"me_username" => $post['username'], "filter_badwords" => 1 );
|
| $post['username'] = htmlspecialchars_uni($post['username']);
|
if($post['smilieoff'] == 1)
|
if($post['smilieoff'] == 1)
|
{
| {
|
$parser_options['allow_smilies'] = 0; }
if($mybb->user['showimages'] != 1 && $mybb->user['uid'] != 0 || $mybb->settings['guestimages'] != 1 && $mybb->user['uid'] == 0) { $parser_options['allow_imgcode'] = 0;
|
$parser_options['allow_smilies'] = 0; }
if($mybb->user['showimages'] != 1 && $mybb->user['uid'] != 0 || $mybb->settings['guestimages'] != 1 && $mybb->user['uid'] == 0) { $parser_options['allow_imgcode'] = 0;
|
}
| }
|
if($mybb->user['showvideos'] != 1 && $mybb->user['uid'] != 0 || $mybb->settings['guestvideos'] != 1 && $mybb->user['uid'] == 0) { $parser_options['allow_videocode'] = 0;
| if($mybb->user['showvideos'] != 1 && $mybb->user['uid'] != 0 || $mybb->settings['guestvideos'] != 1 && $mybb->user['uid'] == 0) { $parser_options['allow_videocode'] = 0;
|
Zeile 578 | Zeile 615 |
---|
{ $post['editdate'] = my_date('relative', TIME_NOW); $post['editnote'] = $lang->sprintf($lang->postbit_edited, $post['editdate']);
|
{ $post['editdate'] = my_date('relative', TIME_NOW); $post['editnote'] = $lang->sprintf($lang->postbit_edited, $post['editdate']);
|
| $mybb->user['username'] = htmlspecialchars_uni($mybb->user['username']);
|
$post['editedprofilelink'] = build_profile_link($mybb->user['username'], $mybb->user['uid']); $post['editreason'] = trim($editreason); $editreason = "";
| $post['editedprofilelink'] = build_profile_link($mybb->user['username'], $mybb->user['uid']); $post['editreason'] = trim($editreason); $editreason = "";
|
Zeile 747 | Zeile 785 |
---|
else if($mybb->input['action'] == "refresh_question" && $mybb->settings['securityquestion']) { header("Content-type: application/json; charset={$charset}");
|
else if($mybb->input['action'] == "refresh_question" && $mybb->settings['securityquestion']) { header("Content-type: application/json; charset={$charset}");
|
|
|
$sid = $db->escape_string($mybb->get_input('question_id')); $query = $db->query(" SELECT q.qid, s.sid
|
$sid = $db->escape_string($mybb->get_input('question_id')); $query = $db->query(" SELECT q.qid, s.sid
|
FROM ".TABLE_PREFIX."questionsessions s LEFT JOIN ".TABLE_PREFIX."questions q ON (q.qid=s.qid) WHERE q.active='1' AND s.sid='{$sid}' "); if($db->num_rows($query) == 0)
| FROM ".TABLE_PREFIX."questionsessions s LEFT JOIN ".TABLE_PREFIX."questions q ON (q.qid=s.qid) WHERE q.active='1' AND s.sid='{$sid}' ");
if($db->num_rows($query) == 0)
|
{ xmlhttp_error($lang->answer_valid_not_exists); }
|
{ xmlhttp_error($lang->answer_valid_not_exists); }
|
|
|
$qsession = $db->fetch_array($query);
|
$qsession = $db->fetch_array($query);
|
|
|
// Delete previous question session $db->delete_query("questionsessions", "sid='$sid'");
|
// Delete previous question session $db->delete_query("questionsessions", "sid='$sid'");
|
|
|
require_once MYBB_ROOT."inc/functions_user.php";
|
require_once MYBB_ROOT."inc/functions_user.php";
|
|
|
$sid = generate_question($qsession['qid']); $query = $db->query(" SELECT q.question, s.sid
| $sid = generate_question($qsession['qid']); $query = $db->query(" SELECT q.question, s.sid
|
Zeile 775 | Zeile 813 |
---|
LEFT JOIN ".TABLE_PREFIX."questions q ON (q.qid=s.qid) WHERE q.active='1' AND s.sid='{$sid}' AND q.qid!='{$qsession['qid']}' ");
|
LEFT JOIN ".TABLE_PREFIX."questions q ON (q.qid=s.qid) WHERE q.active='1' AND s.sid='{$sid}' AND q.qid!='{$qsession['qid']}' ");
|
|
|
$plugins->run_hooks("xmlhttp_refresh_question");
|
$plugins->run_hooks("xmlhttp_refresh_question");
|
|
|
if($db->num_rows($query) > 0) { $question = $db->fetch_array($query);
|
if($db->num_rows($query) > 0) { $question = $db->fetch_array($query);
|
|
|
echo json_encode(array("question" => htmlspecialchars_uni($question['question']), 'sid' => htmlspecialchars_uni($question['sid'])));
|
echo json_encode(array("question" => htmlspecialchars_uni($question['question']), 'sid' => htmlspecialchars_uni($question['sid'])));
|
exit; } else { xmlhttp_error($lang->answer_valid_not_exists);
| exit; } else { xmlhttp_error($lang->answer_valid_not_exists);
|
} } elseif($mybb->input['action'] == "validate_question" && $mybb->settings['securityquestion'])
| } } elseif($mybb->input['action'] == "validate_question" && $mybb->settings['securityquestion'])
|
Zeile 795 | Zeile 833 |
---|
header("Content-type: application/json; charset={$charset}"); $sid = $db->escape_string($mybb->get_input('question')); $answer = $db->escape_string($mybb->get_input('answer'));
|
header("Content-type: application/json; charset={$charset}"); $sid = $db->escape_string($mybb->get_input('question')); $answer = $db->escape_string($mybb->get_input('answer'));
|
|
|
$query = $db->query(" SELECT q.*, s.sid FROM ".TABLE_PREFIX."questionsessions s LEFT JOIN ".TABLE_PREFIX."questions q ON (q.qid=s.qid) WHERE q.active='1' AND s.sid='{$sid}' ");
|
$query = $db->query(" SELECT q.*, s.sid FROM ".TABLE_PREFIX."questionsessions s LEFT JOIN ".TABLE_PREFIX."questions q ON (q.qid=s.qid) WHERE q.active='1' AND s.sid='{$sid}' ");
|
|
|
if($db->num_rows($query) == 0) { echo json_encode($lang->answer_valid_not_exists);
| if($db->num_rows($query) == 0) { echo json_encode($lang->answer_valid_not_exists);
|
Zeile 813 | Zeile 851 |
---|
$question = $db->fetch_array($query); $valid_answers = preg_split("/\r\n|\n|\r/", $question['answer']); $validated = 0;
|
$question = $db->fetch_array($query); $valid_answers = preg_split("/\r\n|\n|\r/", $question['answer']); $validated = 0;
|
|
|
foreach($valid_answers as $answers) { if(my_strtolower($answers) == my_strtolower($answer))
| foreach($valid_answers as $answers) { if(my_strtolower($answers) == my_strtolower($answer))
|
Zeile 821 | Zeile 859 |
---|
$validated = 1; } }
|
$validated = 1; } }
|
|
|
$plugins->run_hooks("xmlhttp_validate_question");
if($validated != 1)
| $plugins->run_hooks("xmlhttp_validate_question");
if($validated != 1)
|
Zeile 870 | Zeile 908 |
---|
$username = $mybb->get_input('username');
// Fix bad characters
|
$username = $mybb->get_input('username');
// Fix bad characters
|
$username = trim($username);
| $username = trim_blank_chrs($username);
|
$username = str_replace(array(unichr(160), unichr(173), unichr(0xCA), dec_to_utf8(8238), dec_to_utf8(8237), dec_to_utf8(8203)), array(" ", "-", "", "", "", ""), $username);
// Remove multiple spaces from the username
| $username = str_replace(array(unichr(160), unichr(173), unichr(0xCA), dec_to_utf8(8238), dec_to_utf8(8237), dec_to_utf8(8203)), array(" ", "-", "", "", "", ""), $username);
// Remove multiple spaces from the username
|
Zeile 893 | Zeile 931 |
---|
}
// Check for certain characters in username (<, >, &, and slashes)
|
}
// Check for certain characters in username (<, >, &, and slashes)
|
if(strpos($username, "<") !== false || strpos($username, ">") !== false || strpos($username, "&") !== false || my_strpos($username, "\\") !== false || strpos($username, ";") !== false || !validate_utf8_string($username, false, false))
| if(strpos($username, "<") !== false || strpos($username, ">") !== false || strpos($username, "&") !== false || my_strpos($username, "\\") !== false || strpos($username, ";") !== false || strpos($username, ",") !== false || !validate_utf8_string($username, false, false))
|
{ echo json_encode($lang->banned_characters_username); exit;
| { echo json_encode($lang->banned_characters_username); exit;
|
Zeile 973 | Zeile 1011 |
---|
$offline = array(); while($buddy = $db->fetch_array($query)) {
|
$offline = array(); while($buddy = $db->fetch_array($query)) {
|
| $buddy['username'] = htmlspecialchars_uni($buddy['username']);
|
$buddy_name = format_name($buddy['username'], $buddy['usergroup'], $buddy['displaygroup']); $profile_link = build_profile_link($buddy_name, $buddy['uid'], '_blank'); if($buddy['lastactive'] > $timecut && ($buddy['invisible'] == 0 || $mybb->user['usergroup'] == 4) && $buddy['lastvisit'] != $buddy['lastactive'])
| $buddy_name = format_name($buddy['username'], $buddy['usergroup'], $buddy['displaygroup']); $profile_link = build_profile_link($buddy_name, $buddy['uid'], '_blank'); if($buddy['lastactive'] > $timecut && ($buddy['invisible'] == 0 || $mybb->user['usergroup'] == 4) && $buddy['lastvisit'] != $buddy['lastactive'])
|
Zeile 1001 | Zeile 1040 |
---|
/** * Spits an XML Http based error message back to the browser *
|
/** * Spits an XML Http based error message back to the browser *
|
* @param string The message to send back.
| * @param string $message The message to send back.
|
*/ function xmlhttp_error($message) {
| */ function xmlhttp_error($message) {
|