| Zeile 18 | Zeile 18 |
|---|
global $db, $lang, $theme, $templates, $plugins, $mybb;
global $debug, $templatecache, $templatelist, $maintimer, $globaltime, $parsetime;
|
global $db, $lang, $theme, $templates, $plugins, $mybb;
global $debug, $templatecache, $templatelist, $maintimer, $globaltime, $parsetime;
|
| | $contents = $plugins->run_hooks("pre_parse_page", $contents);
|
$contents = parse_page($contents);
$totaltime = format_time_duration($maintimer->stop());
$contents = $plugins->run_hooks("pre_output_page", $contents);
| $contents = parse_page($contents);
$totaltime = format_time_duration($maintimer->stop());
$contents = $plugins->run_hooks("pre_output_page", $contents);
|
| Zeile 868 | Zeile 869 |
|---|
foreach($errors as $error)
{
|
foreach($errors as $error)
{
|
$errorlist .= "<li>".$error."</li>\n";
| eval("\$errorlist .= \"".$templates->get("error_inline_item")."\";");
|
}
eval("\$errors = \"".$templates->get("error_inline")."\";");
| }
eval("\$errors = \"".$templates->get("error_inline")."\";");
|
| Zeile 1036 | Zeile 1037 |
|---|
{
return '';
}
|
{
return '';
}
|
| |
$page = (int)$page;
|
$url = str_replace("&", "&", $url);
$url = htmlspecialchars_uni($url);
|
$url = str_replace("&", "&", $url);
$url = htmlspecialchars_uni($url);
|
| Zeile 1141 | Zeile 1144 |
|---|
eval("\$jumptopage = \"".$templates->get("multipage_jump_page")."\";");
}
|
eval("\$jumptopage = \"".$templates->get("multipage_jump_page")."\";");
}
|
$lang->multipage_pages = $lang->sprintf($lang->multipage_pages, $pages);
| $multipage_pages = $lang->sprintf($lang->multipage_pages, $pages);
|
if($breadcrumb == true)
{
|
if($breadcrumb == true)
{
|
| Zeile 1201 | Zeile 1204 |
|---|
/**
* Fetch the permissions for a specific user
*
|
/**
* Fetch the permissions for a specific user
*
|
* @param int $uid The user ID
| * @param int $uid The user ID, if no user ID is provided then current user's ID will be considered.
|
* @return array Array of user permissions for the specified user
*/
|
* @return array Array of user permissions for the specified user
*/
|
function user_permissions($uid=0)
| function user_permissions($uid=null)
|
{
global $mybb, $cache, $groupscache, $user_cache;
// If no user id is specified, assume it is the current user
|
{
global $mybb, $cache, $groupscache, $user_cache;
// If no user id is specified, assume it is the current user
|
| | if($uid === null)
{
$uid = $mybb->user['uid'];
}
// Its a guest. Return the group permissions directly from cache
|
if($uid == 0)
{
|
if($uid == 0)
{
|
$uid = $mybb->user['uid'];
| return $groupscache[1];
|
}
// User id does not match current user, fetch permissions
| }
// User id does not match current user, fetch permissions
|
| Zeile 1520 | Zeile 1529 |
|---|
{
$forum_cache = cache_forums();
if(!$forum_cache)
|
{
$forum_cache = cache_forums();
if(!$forum_cache)
|
{
| {
|
return false;
}
}
| return false;
}
}
|
| Zeile 1536 | Zeile 1545 |
|---|
foreach($parents as $parent_id)
{
if($parent_id == $fid || $parent_id == $pid)
|
foreach($parents as $parent_id)
{
if($parent_id == $fid || $parent_id == $pid)
|
{
| {
|
continue;
|
continue;
|
}
| }
|
if($forum_cache[$parent_id]['password'] != "")
{
|
if($forum_cache[$parent_id]['password'] != "")
{
|
| Zeile 1551 | Zeile 1560 |
|---|
{
$password = $forum_cache[$fid]['password'];
if(isset($mybb->input['pwverify']) && $pid == 0)
|
{
$password = $forum_cache[$fid]['password'];
if(isset($mybb->input['pwverify']) && $pid == 0)
|
{
| {
|
if($password === $mybb->get_input('pwverify'))
|
if($password === $mybb->get_input('pwverify'))
|
{
| {
|
my_setcookie("forumpass[$fid]", md5($mybb->user['uid'].$mybb->get_input('pwverify')), null, true);
$showform = false;
}
| my_setcookie("forumpass[$fid]", md5($mybb->user['uid'].$mybb->get_input('pwverify')), null, true);
$showform = false;
}
|
| Zeile 1566 | Zeile 1575 |
|---|
else
{
if(!$mybb->cookies['forumpass'][$fid] || ($mybb->cookies['forumpass'][$fid] && md5($mybb->user['uid'].$password) !== $mybb->cookies['forumpass'][$fid]))
|
else
{
if(!$mybb->cookies['forumpass'][$fid] || ($mybb->cookies['forumpass'][$fid] && md5($mybb->user['uid'].$password) !== $mybb->cookies['forumpass'][$fid]))
|
{
| {
|
$showform = true;
|
$showform = true;
|
}
| }
|
else
{
$showform = false;
}
}
|
else
{
$showform = false;
}
}
|
}
| }
|
else
{
$showform = false;
}
if($return)
|
else
{
$showform = false;
}
if($return)
|
{
| {
|
return $showform;
}
| return $showform;
}
|
| Zeile 1641 | Zeile 1650 |
|---|
$groups = array($user['usergroup']);
if(!empty($user['additionalgroups']))
|
$groups = array($user['usergroup']);
if(!empty($user['additionalgroups']))
|
{
| {
|
$extra_groups = explode(",", $user['additionalgroups']);
|
$extra_groups = explode(",", $user['additionalgroups']);
|
|
|
foreach($extra_groups as $extra_group)
|
foreach($extra_groups as $extra_group)
|
{
| {
|
$groups[] = $extra_group;
}
}
| $groups[] = $extra_group;
}
}
|
| Zeile 1655 | Zeile 1664 |
|---|
foreach($mod_cache as $forumid => $forum)
{
if(!is_array($forum) || !in_array($forumid, $parentslist))
|
foreach($mod_cache as $forumid => $forum)
{
if(!is_array($forum) || !in_array($forumid, $parentslist))
|
{
| {
|
// No perms or we're not after this forum
continue;
}
|
// No perms or we're not after this forum
continue;
}
|
|
|
// User settings override usergroup settings
if(is_array($forum['users'][$uid]))
{
$perm = $forum['users'][$uid];
|
// User settings override usergroup settings
if(is_array($forum['users'][$uid]))
{
$perm = $forum['users'][$uid];
|
foreach($perm as $action => $value)
{
if(strpos($action, "can") === false)
{
continue;
}
| foreach($perm as $action => $value)
{
if(strpos($action, "can") === false)
{
continue;
}
|
// Figure out the user permissions
if($value == 0)
{
| // Figure out the user permissions
if($value == 0)
{
|
| Zeile 1699 | Zeile 1708 |
|---|
{
continue;
}
|
{
continue;
}
|
|
|
$perms[$action] = max($perm[$action], $perms[$action]);
}
}
| $perms[$action] = max($perm[$action], $perms[$action]);
}
}
|
| Zeile 1728 | Zeile 1737 |
|---|
}
if($uid == 0)
|
}
if($uid == 0)
|
{
| {
|
return false;
}
| return false;
}
|
| Zeile 1758 | Zeile 1767 |
|---|
if(isset($modusers['users'][$uid]) && $modusers['users'][$uid]['mid'] && (!$action || !empty($modusers['users'][$uid][$action])))
{
return true;
|
if(isset($modusers['users'][$uid]) && $modusers['users'][$uid]['mid'] && (!$action || !empty($modusers['users'][$uid][$action])))
{
return true;
|
}
$groups = explode(',', $user_perms['all_usergroups']);
| }
$groups = explode(',', $user_perms['all_usergroups']);
|
foreach($groups as $group)
{
if(trim($group) != '' && isset($modusers['usergroups'][$group]) && (!$action || !empty($modusers['usergroups'][$group][$action])))
| foreach($groups as $group)
{
if(trim($group) != '' && isset($modusers['usergroups'][$group]) && (!$action || !empty($modusers['usergroups'][$group][$action])))
|
| Zeile 1813 | Zeile 1822 |
|---|
$iconlist = '';
$no_icons_checked = " checked=\"checked\"";
// read post icons from cache, and sort them accordingly
|
$iconlist = '';
$no_icons_checked = " checked=\"checked\"";
// read post icons from cache, and sort them accordingly
|
$posticons_cache = $cache->read("posticons");
| $posticons_cache = (array)$cache->read("posticons");
|
$posticons = array();
foreach($posticons_cache as $posticon)
{
| $posticons = array();
foreach($posticons_cache as $posticon)
{
|
| Zeile 1859 | Zeile 1868 |
|---|
* @param string $value The cookie value.
* @param int|string $expires The timestamp of the expiry date.
* @param boolean $httponly True if setting a HttpOnly cookie (supported by the majority of web browsers)
|
* @param string $value The cookie value.
* @param int|string $expires The timestamp of the expiry date.
* @param boolean $httponly True if setting a HttpOnly cookie (supported by the majority of web browsers)
|
| | * @param string $samesite The samesite attribute to prevent CSRF.
|
*/
|
*/
|
function my_setcookie($name, $value="", $expires="", $httponly=false)
| function my_setcookie($name, $value="", $expires="", $httponly=false, $samesite="")
|
{
global $mybb;
| {
global $mybb;
|
| Zeile 1907 | Zeile 1917 |
|---|
if($httponly == true)
{
$cookie .= "; HttpOnly";
|
if($httponly == true)
{
$cookie .= "; HttpOnly";
|
| | }
if($samesite != "" && $mybb->settings['cookiesamesiteflag'])
{
$samesite = strtolower($samesite);
if($samesite == "lax" || $samesite == "strict")
{
$cookie .= "; SameSite=".$samesite;
}
|
}
if($mybb->settings['cookiesecureflag'])
| }
if($mybb->settings['cookiesecureflag'])
|
| Zeile 1932 | Zeile 1952 |
|---|
my_setcookie($name, "", $expires);
unset($mybb->cookies[$name]);
|
my_setcookie($name, "", $expires);
unset($mybb->cookies[$name]);
|
}
| }
|
/**
* Get the contents from a serialised cookie array.
*
| /**
* Get the contents from a serialised cookie array.
*
|
| Zeile 1942 | Zeile 1962 |
|---|
* @return array|boolean The cookie id's content array or false when non-existent.
*/
function my_get_array_cookie($name, $id)
|
* @return array|boolean The cookie id's content array or false when non-existent.
*/
function my_get_array_cookie($name, $id)
|
{
global $mybb;
| {
global $mybb;
|
if(!isset($mybb->cookies['mybb'][$name]))
|
if(!isset($mybb->cookies['mybb'][$name]))
|
{
| {
|
return false;
|
return false;
|
}
$cookie = my_unserialize($mybb->cookies['mybb'][$name]);
if(is_array($cookie) && isset($cookie[$id]))
{
return $cookie[$id];
}
else
| }
$cookie = my_unserialize($mybb->cookies['mybb'][$name]);
if(is_array($cookie) && isset($cookie[$id]))
{
return $cookie[$id];
}
else
|
{
return 0;
}
| {
return 0;
}
|
| Zeile 2004 | Zeile 2024 |
|---|
* Safe unserialize() replacement
* - accepts a strict subset of PHP's native my_serialized representation
* - does not unserialize objects
|
* Safe unserialize() replacement
* - accepts a strict subset of PHP's native my_serialized representation
* - does not unserialize objects
|
*
| *
|
* @param string $str
* @return mixed
* @throw Exception if $str is malformed or contains unsupported types (e.g., resources, objects)
| * @param string $str
* @return mixed
* @throw Exception if $str is malformed or contains unsupported types (e.g., resources, objects)
|
| Zeile 2022 | Zeile 2042 |
|---|
return false;
}
|
return false;
}
|
$stack = array();
$expected = array();
| $stack = $list = $expected = array();
|
/*
* states:
|
/*
* states:
|
| Zeile 2368 | Zeile 2387 |
|---|
return memory_get_usage(true);
}
return false;
|
return memory_get_usage(true);
}
return false;
|
}
| }
|
/**
* Updates the forum statistics with specific values (or addition/subtraction of the previous value)
|
/**
* Updates the forum statistics with specific values (or addition/subtraction of the previous value)
|
| Zeile 2728 | Zeile 2747 |
|---|
/**
* Update the first post and lastpost data for a specific thread
|
/**
* Update the first post and lastpost data for a specific thread
|
*
* @param int $tid The thread ID
| *
* @param int $tid The thread ID
|
*/
function update_thread_data($tid)
{
| */
function update_thread_data($tid)
{
|
| Zeile 2970 | Zeile 2989 |
|---|
if($showextras == 0)
{
$template = "special";
|
if($showextras == 0)
{
$template = "special";
|
}
| }
|
else
{
$template = "advanced";
| else
{
$template = "advanced";
|
| Zeile 2978 | Zeile 2997 |
|---|
if(strpos(FORUM_URL, '.html') !== false)
{
$forum_link = "'".str_replace('{fid}', "'+option+'", FORUM_URL)."'";
|
if(strpos(FORUM_URL, '.html') !== false)
{
$forum_link = "'".str_replace('{fid}', "'+option+'", FORUM_URL)."'";
|
}
| }
|
else
{
$forum_link = "'".str_replace('{fid}', "'+option", FORUM_URL);
| else
{
$forum_link = "'".str_replace('{fid}', "'+option", FORUM_URL);
|
| Zeile 3013 | Zeile 3032 |
|---|
{
$set = array_merge(range(0, 9), range('A', 'Z'), range('a', 'z'));
$str = array();
|
{
$set = array_merge(range(0, 9), range('A', 'Z'), range('a', 'z'));
$str = array();
|
|
|
// Complex strings have always at least 3 characters, even if $length < 3
if($complex == true)
{
| // Complex strings have always at least 3 characters, even if $length < 3
if($complex == true)
{
|
| Zeile 3027 | Zeile 3046 |
|---|
$str[] = $set[my_rand(36, 61)];
$length -= 3;
|
$str[] = $set[my_rand(36, 61)];
$length -= 3;
|
}
| }
|
for($i = 0; $i < $length; ++$i)
{
|
for($i = 0; $i < $length; ++$i)
{
|
| Zeile 3062 | Zeile 3081 |
|---|
}
if($displaygroup != 0)
|
}
if($displaygroup != 0)
|
{
| {
|
$usergroup = $displaygroup;
}
| $usergroup = $displaygroup;
}
|
| Zeile 3083 | Zeile 3102 |
|---|
$parameters = compact('username', 'usergroup', 'displaygroup', 'format');
$parameters = $plugins->run_hooks('format_name', $parameters);
|
$parameters = compact('username', 'usergroup', 'displaygroup', 'format');
$parameters = $plugins->run_hooks('format_name', $parameters);
|
|
|
$format = $parameters['format'];
$formattednames[$username] = str_replace("{username}", $username, $format);
| $format = $parameters['format'];
$formattednames[$username] = str_replace("{username}", $username, $format);
|
| Zeile 3154 | Zeile 3173 |
|---|
if($dimensions)
{
|
if($dimensions)
{
|
$dimensions = explode("|", $dimensions);
| $dimensions = preg_split('/[|x]/', $dimensions);
|
if($dimensions[0] && $dimensions[1])
{
|
if($dimensions[0] && $dimensions[1])
{
|
list($max_width, $max_height) = explode('x', $max_dimensions);
| list($max_width, $max_height) = preg_split('/[|x]/', $max_dimensions);
|
if(!empty($max_dimensions) && ($dimensions[0] > $max_width || $dimensions[1] > $max_height))
{
|
if(!empty($max_dimensions) && ($dimensions[0] > $max_width || $dimensions[1] > $max_height))
{
|
| Zeile 3255 | Zeile 3274 |
|---|
"editor_invalidyoutube" => "Invalid YouTube video",
"editor_dailymotion" => "Dailymotion",
"editor_metacafe" => "MetaCafe",
|
"editor_invalidyoutube" => "Invalid YouTube video",
"editor_dailymotion" => "Dailymotion",
"editor_metacafe" => "MetaCafe",
|
"editor_veoh" => "Veoh",
| "editor_mixer" => "Mixer",
|
"editor_vimeo" => "Vimeo",
"editor_youtube" => "Youtube",
"editor_facebook" => "Facebook",
| "editor_vimeo" => "Vimeo",
"editor_youtube" => "Youtube",
"editor_facebook" => "Facebook",
|
| Zeile 3368 | Zeile 3387 |
|---|
{
$basic1 = "bold,italic,underline,strike|";
$basic2 = "horizontalrule,";
|
{
$basic1 = "bold,italic,underline,strike|";
$basic2 = "horizontalrule,";
|
}
| }
|
if($mybb->settings['allowalignmycode'] == 1)
{
|
if($mybb->settings['allowalignmycode'] == 1)
{
|
| Zeile 3388 | Zeile 3407 |
|---|
if($mybb->settings['allowcolormycode'] == 1)
{
$color = "color,";
|
if($mybb->settings['allowcolormycode'] == 1)
{
$color = "color,";
|
}
| }
|
if($mybb->settings['allowfontmycode'] == 1 || $mybb->settings['allowsizemycode'] == 1 || $mybb->settings['allowcolormycode'] == 1)
{
$removeformat = "removeformat|";
}
if($mybb->settings['allowemailmycode'] == 1)
|
if($mybb->settings['allowfontmycode'] == 1 || $mybb->settings['allowsizemycode'] == 1 || $mybb->settings['allowcolormycode'] == 1)
{
$removeformat = "removeformat|";
}
if($mybb->settings['allowemailmycode'] == 1)
|
{
| {
|
$email = "email,";
}
if($mybb->settings['allowlinkmycode'] == 1)
{
$link = "link,unlink";
|
$email = "email,";
}
if($mybb->settings['allowlinkmycode'] == 1)
{
$link = "link,unlink";
|
}
| }
|
if($mybb->settings['allowlistmycode'] == 1)
{
|
if($mybb->settings['allowlistmycode'] == 1)
{
|
| Zeile 3425 | Zeile 3444 |
|---|
}
return $codeinsert;
|
}
return $codeinsert;
|
| | }
/**
* @param int $tid
* @param array $postoptions The options carried with form submit
*
* @return string Predefined / updated subscription method of the thread for the user
*/
function get_subscription_method($tid = 0, $postoptions = array())
{
global $mybb;
$subscription_methods = array('', 'none', 'email', 'pm'); // Define methods
$subscription_method = (int)$mybb->user['subscriptionmethod']; // Set user default
// If no user default method available then reset method
if(!$subscription_method)
{
$subscription_method = 0;
}
// Return user default if no thread id available, in case
if(!(int)$tid || (int)$tid <= 0)
{
return $subscription_methods[$subscription_method];
}
// If method not predefined set using data from database
if(isset($postoptions['subscriptionmethod']))
{
$method = trim($postoptions['subscriptionmethod']);
return (in_array($method, $subscription_methods)) ? $method : $subscription_methods[0];
}
else
{
global $db;
$query = $db->simple_select("threadsubscriptions", "tid, notification", "tid='".(int)$tid."' AND uid='".$mybb->user['uid']."'", array('limit' => 1));
$subscription = $db->fetch_array($query);
if($subscription['tid'])
{
$subscription_method = (int)$subscription['notification'] + 1;
}
}
return $subscription_methods[$subscription_method];
|
}
/**
| }
/**
|
| Zeile 4318 | Zeile 4384 |
|---|
eval("\$nav .= \"".$templates->get("nav_bit")."\";");
}
}
|
eval("\$nav .= \"".$templates->get("nav_bit")."\";");
}
}
|
| | $navsize = count($navbits);
$navbit = $navbits[$navsize-1];
|
}
|
}
|
$activesep = '';
$navsize = count($navbits);
$navbit = $navbits[$navsize-1];
| |
if($nav)
{
|
if($nav)
{
|
| Zeile 4684 | Zeile 4748 |
|---|
$arguments = array('id' => $id, 'type' => $type);
$plugins->run_hooks("mark_reports", $arguments);
$cache->update_reportedcontent();
|
$arguments = array('id' => $id, 'type' => $type);
$plugins->run_hooks("mark_reports", $arguments);
$cache->update_reportedcontent();
|
}
| }
|
/**
* Fetch a friendly x days, y months etc date stamp from a timestamp
|
/**
* Fetch a friendly x days, y months etc date stamp from a timestamp
|
| Zeile 4755 | Zeile 4819 |
|---|
// Prevent gross over accuracy ($options parameter will override these)
if($years > 0)
|
// Prevent gross over accuracy ($options parameter will override these)
if($years > 0)
|
{
$options = array_merge(array(
| {
$options = array_merge(array(
|
'days' => false,
'hours' => false,
'minutes' => false,
| 'days' => false,
'hours' => false,
'minutes' => false,
|
| Zeile 4764 | Zeile 4828 |
|---|
), $options);
}
elseif($months > 0)
|
), $options);
}
elseif($months > 0)
|
{
$options = array_merge(array(
| {
$options = array_merge(array(
|
'hours' => false,
'minutes' => false,
'seconds' => false
| 'hours' => false,
'minutes' => false,
'seconds' => false
|
| Zeile 4783 | Zeile 4847 |
|---|
$options = array_merge(array(
'seconds' => false
), $options);
|
$options = array_merge(array(
'seconds' => false
), $options);
|
}
| }
|
if(!isset($options['years']) || $options['years'] !== false)
{
if($years == 1)
|
if(!isset($options['years']) || $options['years'] !== false)
{
if($years == 1)
|
{
| {
|
$nicetime['years'] = "1".$lang_year;
}
else if($years > 1)
|
$nicetime['years'] = "1".$lang_year;
}
else if($years > 1)
|
{
| {
|
$nicetime['years'] = $years.$lang_years;
}
}
| $nicetime['years'] = $years.$lang_years;
}
}
|
| Zeile 4810 | Zeile 4874 |
|---|
}
if(!isset($options['weeks']) || $options['weeks'] !== false)
|
}
if(!isset($options['weeks']) || $options['weeks'] !== false)
|
{
| {
|
if($weeks == 1)
{
$nicetime['weeks'] = "1".$lang_week;
| if($weeks == 1)
{
$nicetime['weeks'] = "1".$lang_week;
|
| Zeile 4828 | Zeile 4892 |
|---|
$nicetime['days'] = "1".$lang_day;
}
else if($days > 1)
|
$nicetime['days'] = "1".$lang_day;
}
else if($days > 1)
|
{
| {
|
$nicetime['days'] = $days.$lang_days;
}
}
| $nicetime['days'] = $days.$lang_days;
}
}
|
| Zeile 4846 | Zeile 4910 |
|---|
}
if(!isset($options['minutes']) || $options['minutes'] !== false)
|
}
if(!isset($options['minutes']) || $options['minutes'] !== false)
|
{
| {
|
if($minutes == 1)
|
if($minutes == 1)
|
{
| {
|
$nicetime['minutes'] = "1".$lang_minute;
|
$nicetime['minutes'] = "1".$lang_minute;
|
}
| }
|
else if($minutes > 1)
{
$nicetime['minutes'] = $minutes.$lang_minutes;
|
else if($minutes > 1)
{
$nicetime['minutes'] = $minutes.$lang_minutes;
|
}
}
| }
}
|
if(!isset($options['seconds']) || $options['seconds'] !== false)
{
|
if(!isset($options['seconds']) || $options['seconds'] !== false)
{
|
| Zeile 4872 | Zeile 4936 |
|---|
if(is_array($nicetime))
{
return implode(", ", $nicetime);
|
if(is_array($nicetime))
{
return implode(", ", $nicetime);
|
}
}
| }
}
|
/**
* Select an alternating row colour based on the previous call to this function
|
/**
* Select an alternating row colour based on the previous call to this function
|
| Zeile 4901 | Zeile 4965 |
|---|
/**
* Add a user to a specific additional user group.
|
/**
* Add a user to a specific additional user group.
|
*
| *
|
* @param int $uid The user ID
* @param int $joingroup The user group ID to join
* @return bool
| * @param int $uid The user ID
* @param int $joingroup The user group ID to join
* @return bool
|
| Zeile 5184 | Zeile 5248 |
|---|
}
return $themeselect;
|
}
return $themeselect;
|
}
| }
|
else
{
return false;
| else
{
return false;
|
| Zeile 5466 | Zeile 5530 |
|---|
$lang->month_11,
$lang->month_12
);
|
$lang->month_11,
$lang->month_12
);
|
| |
// This needs to be in this specific order
$find = array(
|
// This needs to be in this specific order
$find = array(
|
| Zeile 6347 | Zeile 6410 |
|---|
* @param bool $fatal (Optional) Stop execution if it finds an error with the login. Default is True
* @return bool|int Number of logins when success, false if failed.
*/
|
* @param bool $fatal (Optional) Stop execution if it finds an error with the login. Default is True
* @return bool|int Number of logins when success, false if failed.
*/
|
function login_attempt_check($fatal = true)
| function login_attempt_check($uid = 0, $fatal = true)
|
{
|
{
|
global $mybb, $lang, $session, $db;
| global $mybb, $lang, $db;
|
|
|
if($mybb->settings['failedlogincount'] == 0)
{
return 1;
}
// Note: Number of logins is defaulted to 1, because using 0 seems to clear cookie data. Not really a problem as long as we account for 1 being default.
// Use cookie if possible, otherwise use session
// Find better solution to prevent clearing cookies
$loginattempts = 0;
$failedlogin = 0;
if(!empty($mybb->cookies['loginattempts']))
{
$loginattempts = $mybb->cookies['loginattempts'];
}
if(!empty($mybb->cookies['failedlogin']))
| $attempts = array();
$uid = (int)$uid;
$now = TIME_NOW;
// Get this user's login attempts and eventual lockout, if a uid is provided
if($uid > 0)
|
{
|
{
|
$failedlogin = $mybb->cookies['failedlogin'];
}
// Work out if the user has had more than the allowed number of login attempts
if($loginattempts > $mybb->settings['failedlogincount'])
| $query = $db->simple_select("users", "loginattempts, loginlockoutexpiry", "uid='{$uid}'", 1);
$attempts = $db->fetch_array($query);
if($attempts['loginattempts'] <= 0)
{
return 0;
}
}
// This user has a cookie lockout, show waiting time
elseif($mybb->cookies['lockoutexpiry'] && $mybb->cookies['lockoutexpiry'] > $now)
{
if($fatal)
{
$secsleft = (int)($mybb->cookies['lockoutexpiry'] - $now);
$hoursleft = floor($secsleft / 3600);
$minsleft = floor(($secsleft / 60) % 60);
$secsleft = floor($secsleft % 60);
error($lang->sprintf($lang->failed_login_wait, $hoursleft, $minsleft, $secsleft));
}
return false;
}
if($mybb->settings['failedlogincount'] > 0 && $attempts['loginattempts'] >= $mybb->settings['failedlogincount'])
|
{
|
{
|
// If so, then we need to work out if they can try to login again
// Some maths to work out how long they have left and display it to them
$now = TIME_NOW;
| // Set the expiry dateline if not set yet
if($attempts['loginlockoutexpiry'] == 0)
{
$attempts['loginlockoutexpiry'] = $now + ((int)$mybb->settings['failedlogintime'] * 60);
// Add a cookie lockout. This is used to prevent access to the login page immediately.
// A deep lockout is issued if he tries to login into a locked out account
my_setcookie('lockoutexpiry', $attempts['loginlockoutexpiry']);
$db->update_query("users", array(
"loginlockoutexpiry" => $attempts['loginlockoutexpiry']
), "uid='{$uid}'");
}
|
|
|
if(empty($mybb->cookies['failedlogin']))
| if(empty($mybb->cookies['lockoutexpiry']))
|
{
|
{
|
$failedtime = $now;
| $failedtime = $attempts['loginlockoutexpiry'];
|
}
else
{
|
}
else
{
|
$failedtime = $mybb->cookies['failedlogin'];
}
$secondsleft = $mybb->settings['failedlogintime'] * 60 + $failedtime - $now;
$hoursleft = floor($secondsleft / 3600);
$minsleft = floor(($secondsleft / 60) % 60);
$secsleft = floor($secondsleft % 60);
// This value will be empty the first time the user doesn't login in, set it
if(empty($failedlogin))
{
my_setcookie('failedlogin', $now);
| $failedtime = $mybb->cookies['lockoutexpiry'];
}
// Are we still locked out?
if($attempts['loginlockoutexpiry'] > $now)
{
|
if($fatal)
{
|
if($fatal)
{
|
error($lang->sprintf($lang->failed_login_wait, $hoursleft, $minsleft, $secsleft));
}
| $secsleft = (int)($attempts['loginlockoutexpiry'] - $now);
$hoursleft = floor($secsleft / 3600);
$minsleft = floor(($secsleft / 60) % 60);
$secsleft = floor($secsleft % 60);
error($lang->sprintf($lang->failed_login_wait, $hoursleft, $minsleft, $secsleft));
}
|
return false;
}
|
return false;
}
|
| | // Unlock if enough time has passed
else {
|
|
|
// Work out if the user has waited long enough before letting them login again
if($mybb->cookies['failedlogin'] < ($now - $mybb->settings['failedlogintime'] * 60))
{
my_setcookie('loginattempts', 1);
my_unsetcookie('failedlogin');
if($mybb->user['uid'] != 0)
| if($uid > 0)
|
{
|
{
|
$update_array = array(
'loginattempts' => 1
);
$db->update_query("users", $update_array, "uid = '{$mybb->user['uid']}'");
}
return 1;
}
// Not waited long enough
else if($mybb->cookies['failedlogin'] > ($now - $mybb->settings['failedlogintime'] * 60))
{
if($fatal)
{
error($lang->sprintf($lang->failed_login_wait, $hoursleft, $minsleft, $secsleft));
| $db->update_query("users", array(
"loginattempts" => 0,
"loginlockoutexpiry" => 0
), "uid='{$uid}'");
|
}
|
}
|
return false;
| // Wipe the cookie, no matter if a guest or a member
my_unsetcookie('lockoutexpiry');
return 0;
|
}
}
// User can attempt another login
|
}
}
// User can attempt another login
|
return $loginattempts;
| return $attempts['loginattempts'];
|
}
/**
| }
/**
|
| Zeile 7572 | Zeile 7644 |
|---|
* @param array $array The array of forums
* @return integer The number of sub forums
*/
|
* @param array $array The array of forums
* @return integer The number of sub forums
*/
|
function subforums_count($array)
| function subforums_count($array=array())
|
{
$count = 0;
foreach($array as $array2)
| {
$count = 0;
foreach($array as $array2)
|
| Zeile 7853 | Zeile 7925 |
|---|
static $time_start;
$time = microtime(true);
|
static $time_start;
$time = microtime(true);
|
| |
// Just starting timer, init and return
if(!$time_start)
|
// Just starting timer, init and return
if(!$time_start)
|
| Zeile 8088 | Zeile 8159 |
|---|
{
$unique_state = md5(microtime().$unique_state);
$output .= md5($unique_state);
|
{
$unique_state = md5(microtime().$unique_state);
$output .= md5($unique_state);
|
}
| }
|
$output = substr($output, 0, ($bytes * 2));
$output = pack('H*', $output);
| $output = substr($output, 0, ($bytes * 2));
$output = pack('H*', $output);
|
| Zeile 8561 | Zeile 8632 |
|---|
$fromid = (int)$mybb->user['uid'];
}
elseif((int)$fromid < 0)
|
$fromid = (int)$mybb->user['uid'];
}
elseif((int)$fromid < 0)
|
{
| {
|
$fromid = 0;
}
|
$fromid = 0;
}
|
|
|
// Build our final PM array
$pm = array(
"subject" => $subject,
| // Build our final PM array
$pm = array(
"subject" => $subject,
|
| Zeile 8575 | Zeile 8646 |
|---|
"bccid" => $recipients_bcc,
"do" => '',
"pmid" => ''
|
"bccid" => $recipients_bcc,
"do" => '',
"pmid" => ''
|
);
| );
|
if(isset($session))
{
$pm['ipaddress'] = $session->packedip;
}
$pm['options'] = array(
|
if(isset($session))
{
$pm['ipaddress'] = $session->packedip;
}
$pm['options'] = array(
|
"signature" => 0,
| |
"disablesmilies" => 0,
"savecopy" => 0,
"readreceipt" => 0
| "disablesmilies" => 0,
"savecopy" => 0,
"readreceipt" => 0
|
| Zeile 8607 | Zeile 8677 |
|---|
/**
* Log a user spam block from StopForumSpam (or other spam service providers...)
|
/**
* Log a user spam block from StopForumSpam (or other spam service providers...)
|
*
| *
|
* @param string $username The username that the user was using.
* @param string $email The email address the user was using.
* @param string $ip_address The IP addres of the user.
| * @param string $username The username that the user was using.
* @param string $email The email address the user was using.
* @param string $ip_address The IP addres of the user.
|
| Zeile 8621 | Zeile 8691 |
|---|
if(!is_array($data))
{
$data = array($data);
|
if(!is_array($data))
{
$data = array($data);
|
}
| }
|
if(!$ip_address)
{
|
if(!$ip_address)
{
|
| Zeile 8680 | Zeile 8750 |
|---|
$cdn_upload_path = $cdn_path . DIRECTORY_SEPARATOR . $file_dir_path;
if(!($dir_exists = is_dir($cdn_upload_path)))
|
$cdn_upload_path = $cdn_path . DIRECTORY_SEPARATOR . $file_dir_path;
if(!($dir_exists = is_dir($cdn_upload_path)))
|
{
| {
|
$dir_exists = @mkdir($cdn_upload_path, 0777, true);
}
| $dir_exists = @mkdir($cdn_upload_path, 0777, true);
}
|
| Zeile 8695 | Zeile 8765 |
|---|
$uploaded_path = $cdn_upload_path;
}
}
|
$uploaded_path = $cdn_upload_path;
}
}
|
}
}
| }
}
|
if(is_object($plugins))
{
|
if(is_object($plugins))
{
|
| Zeile 8709 | Zeile 8779 |
|---|
);
$plugins->run_hooks('copy_file_to_cdn_end', $hook_args);
|
);
$plugins->run_hooks('copy_file_to_cdn_end', $hook_args);
|
}
}
| }
}
|
return $success;
}
|
return $success;
}
|
| Zeile 8725 | Zeile 8795 |
|---|
* @return bool Whether this is a valid url.
*/
function my_validate_url($url, $relative_path=false, $allow_local=false)
|
* @return bool Whether this is a valid url.
*/
function my_validate_url($url, $relative_path=false, $allow_local=false)
|
{
| {
|
if($allow_local)
{
$regex = '_^(?:(?:https?|ftp)://)(?:\S+(?::\S*)?@)?(?:(?:[1-9]\d?|1\d\d|2[01]\d|22[0-3])(?:\.(?:1?\d{1,2}|2[0-4]\d|25[0-5])){2}(?:\.(?:[1-9]\d?|1\d\d|2[0-4]\d|25[0-4]))|(?:localhost|(?:(?:[a-z\x{00a1}-\x{ffff}0-9]-*)*[a-z\x{00a1}-\x{ffff}0-9]+)(?:\.(?:[a-z\x{00a1}-\x{ffff}0-9]-*)*[a-z\x{00a1}-\x{ffff}0-9]+)*(?:\.(?:[a-z\x{00a1}-\x{ffff}]{2,}))\.?))(?::\d{2,5})?(?:[/?#]\S*)?$_iuS';
| if($allow_local)
{
$regex = '_^(?:(?:https?|ftp)://)(?:\S+(?::\S*)?@)?(?:(?:[1-9]\d?|1\d\d|2[01]\d|22[0-3])(?:\.(?:1?\d{1,2}|2[0-4]\d|25[0-5])){2}(?:\.(?:[1-9]\d?|1\d\d|2[0-4]\d|25[0-4]))|(?:localhost|(?:(?:[a-z\x{00a1}-\x{ffff}0-9]-*)*[a-z\x{00a1}-\x{ffff}0-9]+)(?:\.(?:[a-z\x{00a1}-\x{ffff}0-9]-*)*[a-z\x{00a1}-\x{ffff}0-9]+)*(?:\.(?:[a-z\x{00a1}-\x{ffff}]{2,}))\.?))(?::\d{2,5})?(?:[/?#]\S*)?$_iuS';
|
| Zeile 8745 | Zeile 8815 |
|---|
/**
* Strip html tags from string, also removes <script> and <style> contents.
*
|
/**
* Strip html tags from string, also removes <script> and <style> contents.
*
|
| | * @deprecated
|
* @param string $string String to stripe
* @param string $allowable_tags Allowed html tags
*
| * @param string $string String to stripe
* @param string $allowable_tags Allowed html tags
*
|
| Zeile 8769 | Zeile 8840 |
|---|
* @param string $string The string to be escaped
* @param boolean $escape_active_content Whether or not to escape active content trigger characters
* @return string The escaped string
|
* @param string $string The string to be escaped
* @param boolean $escape_active_content Whether or not to escape active content trigger characters
* @return string The escaped string
|
*/
| */
|
function my_escape_csv($string, $escape_active_content=true)
{
if($escape_active_content)
| function my_escape_csv($string, $escape_active_content=true)
{
if($escape_active_content)
|
| Zeile 8799 | Zeile 8870 |
|---|
$string = str_replace('"', '""', $string);
return $string;
|
$string = str_replace('"', '""', $string);
return $string;
|
| | }
// Fallback function for 'array_column', PHP < 5.5.0 compatibility
if(!function_exists('array_column'))
{
function array_column($input, $column_key)
{
$values = array();
if(!is_array($input))
{
$input = array($input);
}
foreach($input as $val)
{
if(is_array($val) && isset($val[$column_key]))
{
$values[] = $val[$column_key];
}
elseif(is_object($val) && isset($val->$column_key))
{
$values[] = $val->$column_key;
}
}
return $values;
}
}
/**
* Performs a timing attack safe string comparison.
*
* @param string $known_string The first string to be compared.
* @param string $user_string The second, user-supplied string to be compared.
* @return bool Result of the comparison.
*/
function my_hash_equals($known_string, $user_string)
{
if(version_compare(PHP_VERSION, '5.6.0', '>='))
{
return hash_equals($known_string, $user_string);
}
else
{
$known_string_length = my_strlen($known_string);
$user_string_length = my_strlen($user_string);
if($user_string_length != $known_string_length)
{
return false;
}
$result = 0;
for($i = 0; $i < $known_string_length; $i++)
{
$result |= ord($known_string[$i]) ^ ord($user_string[$i]);
}
return $result === 0;
}
|
}
| }
|