| Zeile 12 | Zeile 12 |
|---|
define("IGNORE_CLEAN_VARS", "sid");
define('THIS_SCRIPT', 'misc.php');
|
define("IGNORE_CLEAN_VARS", "sid");
define('THIS_SCRIPT', 'misc.php');
|
$templatelist = "misc_rules_forum,misc_help_helpdoc,misc_whoposted_poster,misc_whoposted,misc_smilies_popup_smilie,misc_smilies_popup,misc_smilies_popup_empty,misc_syndication_feedurl,misc_syndication";
$templatelist .= ",misc_buddypopup,misc_buddypopup_user,misc_buddypopup_user_none,misc_buddypopup_user_online,misc_buddypopup_user_offline,misc_buddypopup_user_sendpm,misc_help_search,misc_syndication_forumlist";
$templatelist .= ",misc_smilies,misc_smilies_smilie,misc_help_section_bit,misc_help_section,misc_help,forumdisplay_password_wrongpass,forumdisplay_password,misc_helpresults,misc_helpresults_bit,misc_helpresults_noresults,multipage,multipage_end,multipage_jump_page,multipage_nextpage,multipage_page,multipage_page_current,multipage_page_link_current,multipage_prevpage,multipage_start";
| $templatelist = "misc_rules_forum,misc_help_helpdoc,misc_whoposted_poster,misc_whoposted,misc_smilies_popup_smilie,misc_smilies_popup,misc_smilies_popup_empty,misc_smilies_popup_row,multipage_start";
$templatelist .= ",misc_buddypopup,misc_buddypopup_user,misc_buddypopup_user_none,misc_buddypopup_user_online,misc_buddypopup_user_offline,misc_buddypopup_user_sendpm,misc_syndication_forumlist";
$templatelist .= ",misc_smilies,misc_smilies_smilie,misc_help_section_bit,misc_help_section,misc_help,forumdisplay_password_wrongpass,forumdisplay_password,misc_helpresults,misc_helpresults_bit";
$templatelist .= ",multipage,multipage_end,multipage_jump_page,multipage_nextpage,multipage_page,multipage_page_current,multipage_page_link_current,multipage_prevpage,misc_imcenter_error";
$templatelist .= ",misc_smilies_popup_no_smilies,misc_smilies_no_smilies,misc_syndication,misc_help_search,misc_helpresults_noresults,misc_syndication_forumlist_forum,misc_syndication_feedurl";
|
require_once "./global.php";
require_once MYBB_ROOT."inc/functions_post.php";
|
require_once "./global.php";
require_once MYBB_ROOT."inc/functions_post.php";
|
| Zeile 331 | Zeile 333 |
|---|
'allow_imgcode' => 0,
'filter_badwords' => 1
);
|
'allow_imgcode' => 0,
'filter_badwords' => 1
);
|
$helpdoc['helpdoc'] = strip_tags($parser->parse_message($helpdoc['document'], $parser_options));
| $helpdoc['helpdoc'] = my_strip_tags($parser->parse_message($helpdoc['document'], $parser_options));
|
if(my_strlen($helpdoc['helpdoc']) > 350)
{
|
if(my_strlen($helpdoc['helpdoc']) > 350)
{
|
| Zeile 550 | Zeile 552 |
|---|
while($buddy = $db->fetch_array($query))
{
|
while($buddy = $db->fetch_array($query))
{
|
| | $buddy['username'] = htmlspecialchars_uni($buddy['username']);
|
$buddy_name = format_name($buddy['username'], $buddy['usergroup'], $buddy['displaygroup']);
$profile_link = build_profile_link($buddy_name, $buddy['uid'], '_blank', 'if(window.opener) { window.opener.location = this.href; return false; }');
| $buddy_name = format_name($buddy['username'], $buddy['usergroup'], $buddy['displaygroup']);
$profile_link = build_profile_link($buddy_name, $buddy['uid'], '_blank', 'if(window.opener) { window.opener.location = this.href; return false; }');
|
| Zeile 623 | Zeile 626 |
|---|
if(!$thread)
{
error($lang->error_invalidthread);
|
if(!$thread)
{
error($lang->error_invalidthread);
|
}
if(is_moderator($thread['fid'], "canviewunapprove"))
{
$ismod = true;
$show_posts = "(p.visible = '1' OR p.visible = '0')";
}
else
{
$ismod = false;
$show_posts = "p.visible = '1'";
| |
}
// Make sure we are looking at a real thread here.
|
}
// Make sure we are looking at a real thread here.
|
if(($thread['visible'] != 1 && $ismod == false) || ($thread['visible'] > 1 && $ismod == true))
| if(($thread['visible'] == -1 && !is_moderator($thread['fid'], "canviewdeleted")) || ($thread['visible'] == 0 && !is_moderator($thread['fid'], "canviewunapprove")) || $thread['visible'] > 1)
|
{
error($lang->error_invalidthread);
|
{
error($lang->error_invalidthread);
|
}
| }
if(is_moderator($thread['fid'], "canviewdeleted") || is_moderator($thread['fid'], "canviewunapprove"))
{
if(is_moderator($thread['fid'], "canviewunapprove") && !is_moderator($thread['fid'], "canviewdeleted"))
{
$show_posts = "p.visible IN (0,1)";
}
elseif(is_moderator($thread['fid'], "canviewdeleted") && !is_moderator($thread['fid'], "canviewunapprove"))
{
$show_posts = "p.visible IN (-1,1)";
}
else
{
$show_posts = "p.visible IN (-1,0,1)";
}
}
else
{
$show_posts = "p.visible = 1";
}
|
// Does the thread belong to a valid forum?
$forum = get_forum($thread['fid']);
if(!$forum || $forum['type'] != "f")
| // Does the thread belong to a valid forum?
$forum = get_forum($thread['fid']);
if(!$forum || $forum['type'] != "f")
|
| Zeile 654 | Zeile 667 |
|---|
if($forumpermissions['canview'] == 0 || $forumpermissions['canviewthreads'] == 0 || (isset($forumpermissions['canonlyviewownthreads']) && $forumpermissions['canonlyviewownthreads'] != 0 && $thread['uid'] != $mybb->user['uid']))
{
error_no_permission();
|
if($forumpermissions['canview'] == 0 || $forumpermissions['canviewthreads'] == 0 || (isset($forumpermissions['canonlyviewownthreads']) && $forumpermissions['canonlyviewownthreads'] != 0 && $thread['uid'] != $mybb->user['uid']))
{
error_no_permission();
|
}
| }
|
// Check if this forum is password protected and we have a valid password
check_forum_password($forum['fid']);
| // Check if this forum is password protected and we have a valid password
check_forum_password($forum['fid']);
|
| Zeile 682 | Zeile 695 |
|---|
{
$poster['username'] = $poster['postusername'];
}
|
{
$poster['username'] = $poster['postusername'];
}
|
| | $poster['username'] = htmlspecialchars_uni($poster['username']);
$poster['postusername'] = htmlspecialchars_uni($poster['postusername']);
|
$poster_name = format_name($poster['username'], $poster['usergroup'], $poster['displaygroup']);
if($poster['uid'])
{
| $poster_name = format_name($poster['username'], $poster['usergroup'], $poster['displaygroup']);
if($poster['uid'])
{
|
| Zeile 705 | Zeile 720 |
|---|
{ // make small popup list of smilies
$editor = preg_replace('#([^a-zA-Z0-9_-]+)#', '', $mybb->get_input('editor'));
$e = 1;
|
{ // make small popup list of smilies
$editor = preg_replace('#([^a-zA-Z0-9_-]+)#', '', $mybb->get_input('editor'));
$e = 1;
|
$class = "trow1";
$smilies = "<tr>";
| $smile_icons = '';
$class = alt_trow(1);
|
$smilies_cache = $cache->read("smilies");
|
$smilies_cache = $cache->read("smilies");
|
| |
|
if(is_array($smilies_cache))
{
$extra_class = ' smilie_pointer';
| if(is_array($smilies_cache))
{
$extra_class = ' smilie_pointer';
|
| Zeile 726 | Zeile 742 |
|---|
$onclick = " onclick=\"MyBBEditor.insertText(' $smilie_insert ');\"";
eval('$smilie_image = "'.$templates->get('smilie', 1, 0).'";');
|
$onclick = " onclick=\"MyBBEditor.insertText(' $smilie_insert ');\"";
eval('$smilie_image = "'.$templates->get('smilie', 1, 0).'";');
|
eval("\$smilies .= \"".$templates->get("misc_smilies_popup_smilie")."\";");
| eval("\$smile_icons .= \"".$templates->get("misc_smilies_popup_smilie")."\";");
|
if($e == 2)
{
|
if($e == 2)
{
|
$smilies .= "</tr><tr>";
| eval("\$smilies .= \"".$templates->get("misc_smilies_popup_row")."\";");
$smile_icons = '';
|
$e = 1;
$class = alt_trow();
}
| $e = 1;
$class = alt_trow();
}
|
| Zeile 739 | Zeile 756 |
|---|
}
}
}
|
}
}
}
|
| |
|
if($e == 2)
|
if($e == 2)
|
{
| {
|
eval("\$smilies .= \"".$templates->get("misc_smilies_popup_empty")."\";");
}
|
eval("\$smilies .= \"".$templates->get("misc_smilies_popup_empty")."\";");
}
|
| |
if(!$smilies)
{
eval("\$smilies = \"".$templates->get("misc_smilies_popup_no_smilies")."\";");
}
|
eval("\$smiliespage = \"".$templates->get("misc_smilies_popup", 1, 0)."\";");
output_page($smiliespage);
}
| eval("\$smiliespage = \"".$templates->get("misc_smilies_popup", 1, 0)."\";");
output_page($smiliespage);
}
|
| Zeile 751 | Zeile 775 |
|---|
add_breadcrumb($lang->nav_smilies);
$class = "trow1";
$smilies_cache = $cache->read("smilies");
|
add_breadcrumb($lang->nav_smilies);
$class = "trow1";
$smilies_cache = $cache->read("smilies");
|
| |
|
if(is_array($smilies_cache))
{
$extra_class = $onclick = '';
| if(is_array($smilies_cache))
{
$extra_class = $onclick = '';
|
| Zeile 766 | Zeile 791 |
|---|
$class = alt_trow();
}
}
|
$class = alt_trow();
}
}
|
| |
if(!$smilies)
{
eval("\$smilies = \"".$templates->get("misc_smilies_no_smilies")."\";");
}
|
eval("\$smiliespage = \"".$templates->get("misc_smilies")."\";");
output_page($smiliespage);
}
| eval("\$smiliespage = \"".$templates->get("misc_smilies")."\";");
output_page($smiliespage);
}
|
| Zeile 775 | Zeile 806 |
|---|
$mybb->input['imtype'] = $mybb->get_input('imtype');
if($mybb->input['imtype'] != "aim" && $mybb->input['imtype'] != "skype" && $mybb->input['imtype'] != "yahoo")
{
|
$mybb->input['imtype'] = $mybb->get_input('imtype');
if($mybb->input['imtype'] != "aim" && $mybb->input['imtype'] != "skype" && $mybb->input['imtype'] != "yahoo")
{
|
error($lang->error_invalidimtype);
| $message = $lang->error_invalidimtype;
eval("\$error = \"".$templates->get("misc_imcenter_error", 1, 0)."\";");
echo $error;
exit;
|
}
|
}
|
| |
|
$uid = $mybb->get_input('uid', MyBB::INPUT_INT);
$user = get_user($uid);
if(!$user)
{
|
$uid = $mybb->get_input('uid', MyBB::INPUT_INT);
$user = get_user($uid);
if(!$user)
{
|
error($lang->error_invaliduser);
| $message = $lang->error_invaliduser;
eval("\$error = \"".$templates->get("misc_imcenter_error", 1, 0)."\";");
echo $error;
exit;
|
}
if(empty($user[$mybb->input['imtype']]))
{
|
}
if(empty($user[$mybb->input['imtype']]))
{
|
error($lang->error_invalidimtype);
| $message = $lang->error_invalidimtype;
eval("\$error = \"".$templates->get("misc_imcenter_error", 1, 0)."\";");
echo $error;
exit;
|
}
$settingkey = 'allow'.$mybb->input['imtype'].'field';
if(!is_member($mybb->settings[$settingkey], $user))
{
|
}
$settingkey = 'allow'.$mybb->input['imtype'].'field';
if(!is_member($mybb->settings[$settingkey], $user))
{
|
error_no_permission();
| $message = $lang->error_nopermission_user_ajax;
eval("\$error = \"".$templates->get("misc_imcenter_error", 1, 0)."\";");
echo $error;
exit;
|
}
// Build IM navigation bar
$navigationbar = $navsep = $imtype = $imtype_lang = '';
|
}
// Build IM navigation bar
$navigationbar = $navsep = $imtype = $imtype_lang = '';
|
if($user['aim'])
| if(!empty($user['aim']) && is_member($mybb->settings['allowaimfield'], array('usergroup' => $user['usergroup'], 'additionalgroups' => $user['additionalgroups'])))
|
{
$imtype = "aim";
$imtype_lang = $lang->aol_im;
eval("\$navigationbar .= \"".$templates->get("misc_imcenter_nav")."\";");
$navsep = ' - ';
}
|
{
$imtype = "aim";
$imtype_lang = $lang->aol_im;
eval("\$navigationbar .= \"".$templates->get("misc_imcenter_nav")."\";");
$navsep = ' - ';
}
|
if($user['skype'])
| if(!empty($user['skype']) && is_member($mybb->settings['allowskypefield'], array('usergroup' => $user['usergroup'], 'additionalgroups' => $user['additionalgroups'])))
|
{
$imtype = "skype";
$imtype_lang = $lang->skype;
eval("\$navigationbar .= \"".$templates->get("misc_imcenter_nav")."\";");
$navsep = ' - ';
}
|
{
$imtype = "skype";
$imtype_lang = $lang->skype;
eval("\$navigationbar .= \"".$templates->get("misc_imcenter_nav")."\";");
$navsep = ' - ';
}
|
if($user['yahoo'])
| if(!empty($user['yahoo']) && is_member($mybb->settings['allowyahoofield'], array('usergroup' => $user['usergroup'], 'additionalgroups' => $user['additionalgroups'])))
|
{
$imtype = "yahoo";
$imtype_lang = $lang->yahoo_im;
| {
$imtype = "yahoo";
$imtype_lang = $lang->yahoo_im;
|
| Zeile 822 | Zeile 866 |
|---|
$user['skype'] = htmlspecialchars_uni($user['skype']);
$user['yahoo'] = htmlspecialchars_uni($user['yahoo']);
$user['aim'] = htmlspecialchars_uni($user['aim']);
|
$user['skype'] = htmlspecialchars_uni($user['skype']);
$user['yahoo'] = htmlspecialchars_uni($user['yahoo']);
$user['aim'] = htmlspecialchars_uni($user['aim']);
|
| |
$user['username'] = htmlspecialchars_uni($user['username']);
|
$lang->chat_on_skype = $lang->sprintf($lang->chat_on_skype, $user['username']);
$lang->call_on_skype = $lang->sprintf($lang->call_on_skype, $user['username']);
|
$lang->chat_on_skype = $lang->sprintf($lang->chat_on_skype, $user['username']);
$lang->call_on_skype = $lang->sprintf($lang->call_on_skype, $user['username']);
|
$lang->send_y_message = $lang->sprintf($lang->send_y_message, $user['username']);
$lang->view_y_profile = $lang->sprintf($lang->view_y_profile, $user['username']);
| |
$imtemplate = "misc_imcenter_".$mybb->input['imtype'];
eval("\$imcenter = \"".$templates->get($imtemplate, 1, 0)."\";");
|
$imtemplate = "misc_imcenter_".$mybb->input['imtype'];
eval("\$imcenter = \"".$templates->get($imtemplate, 1, 0)."\";");
|
| Zeile 839 | Zeile 883 |
|---|
$fid = $mybb->get_input('fid', MyBB::INPUT_INT);
$version = $mybb->get_input('version');
|
$fid = $mybb->get_input('fid', MyBB::INPUT_INT);
$version = $mybb->get_input('version');
|
$limit = $mybb->get_input('limit', MyBB::INPUT_INT);
| $new_limit = $mybb->get_input('limit', MyBB::INPUT_INT);
|
$forums = $mybb->get_input('forums', MyBB::INPUT_ARRAY);
$limit = 15;
|
$forums = $mybb->get_input('forums', MyBB::INPUT_ARRAY);
$limit = 15;
|
| | if(!empty($new_limit) && $new_limit != $limit)
{
$limit = $new_limit;
}
|
$feedurl = '';
$add = false;
| $feedurl = '';
$add = false;
|
| Zeile 869 | Zeile 917 |
|---|
$all = true;
break;
}
|
$all = true;
break;
}
|
elseif(is_numeric($fid))
| elseif(ctype_digit($fid))
|
{
if(!isset($unview[$fid]))
{
| {
if(!isset($unview[$fid]))
{
|
| Zeile 902 | Zeile 950 |
|---|
}
if((int)$limit > 0)
{
|
}
if((int)$limit > 0)
{
|
if($limit > 100)
| if($limit > 50)
|
{
|
{
|
$limit = 100;
| $limit = 50;
|
}
if(!$add)
{
| }
if(!$add)
{
|
| Zeile 1006 | Zeile 1054 |
|---|
if($forum['password'] == '' && !in_array($forum['fid'], $unexp) || $forum['password'] && isset($mybb->cookies['forumpass'][$forum['fid']]) && $mybb->cookies['forumpass'][$forum['fid']] === md5($mybb->user['uid'].$forum['password']))
{
|
if($forum['password'] == '' && !in_array($forum['fid'], $unexp) || $forum['password'] && isset($mybb->cookies['forumpass'][$forum['fid']]) && $mybb->cookies['forumpass'][$forum['fid']] === md5($mybb->user['uid'].$forum['password']))
{
|
$forumlistbits .= "<option value=\"{$forum['fid']}\" $optionselected>$depth {$forum['name']}</option>\n";
| eval("\$forumlistbits .= \"".$templates->get("misc_syndication_forumlist_forum")."\";");
|
}
if(!empty($forumcache[$forum['fid']]))
| }
if(!empty($forumcache[$forum['fid']]))
|