Vergleich inc/functions.php - 1.8.5 - 1.8.38

 * @param string The contents of the page.

 * @param string $contents The contents of the page.

 * @param mixed The name of the function.
 * @param mixed An array of arguments for the function

 * @param string|array $name The name of the function.
 * @param mixed $arguments Either an array of arguments for the function or one argument

			$db->query($query);

			$db->write_query($query);

 * @param int The number of messages to send (Defaults to 10)

 * @param int $count The number of messages to send (Defaults to 10)

	if($mailcache['queue_size'] > 0 && ($mailcache['locked'] == 0 || $mailcache['locked'] < TIME_NOW-300))

	if($mailcache !== false && $mailcache['queue_size'] > 0 && ($mailcache['locked'] == 0 || $mailcache['locked'] < TIME_NOW-300))

 * @param string The contents of the page.

 * @param string $contents The contents of the page.

 * @param string A date format according to PHP's date structure.
 * @param int The unix timestamp the date should be generated for.
 * @param int The offset in hours that should be applied to times. (timezones)
 * @param int Whether or not to use today/yesterday formatting.
 * @param boolean Whether or not to use the adodb time class for < 1970 or > 2038 times

 * @param string $format A date format (either relative, normal or PHP's date() structure).
 * @param int $stamp The unix timestamp the date should be generated for.
 * @param int|string $offset The offset in hours that should be applied to times. (timezones) Or an empty string to determine that automatically
 * @param int $ty Whether or not to use today/yesterday formatting.
 * @param boolean $adodb Whether or not to use the adodb time class for < 1970 or > 2038 times

function my_date($format, $stamp="", $offset="", $ty=1, $adodb=false)

function my_date($format, $stamp=0, $offset="", $ty=1, $adodb=false)

	global $mybb, $lang, $mybbadmin, $plugins;

	global $mybb, $lang, $plugins;

			$offset = $mybb->user['timezone'];

			$offset = (float)$mybb->user['timezone'];

			$offset = $mybb->settings['timezoneoffset'];

			$offset = (float)$mybb->settings['timezoneoffset'];

	if($ty && ($format == $mybb->settings['dateformat'] || $format == 'relative'))
	{

	if($ty && ($format == $mybb->settings['dateformat'] || $format == 'relative' || $format == 'normal'))
	{

		if($ty != 2 && abs(TIME_NOW - $stamp) < 3600)

		$real_date = $real_time = '';
		if($adodb == true)
		{
			$real_date = adodb_date($mybb->settings['dateformat'], $stamp + ($offset * 3600));
			$real_time = $mybb->settings['datetimesep'];
			$real_time .= adodb_date($mybb->settings['timeformat'], $stamp + ($offset * 3600));
		}
		else
		{
			$real_date = gmdate($mybb->settings['dateformat'], $stamp + ($offset * 3600));
			$real_time = $mybb->settings['datetimesep'];
			$real_time .= gmdate($mybb->settings['timeformat'], $stamp + ($offset * 3600));
		}

		if($ty != 2 && abs(TIME_NOW - $stamp) < 3600)

			}

			}

			$date = $lang->sprintf($lang->rel_time, $relative['prefix'], $relative['minute'], $relative['plural'], $relative['suffix']);

			$date = $lang->sprintf($lang->rel_time, $relative['prefix'], $relative['minute'], $relative['plural'], $relative['suffix'], $real_date, $real_time);

			}

			$relative['hour'] = floor($diff / 3600);

			}

			$relative['hour'] = floor($diff / 3600);

			}

			$date = $lang->sprintf($lang->rel_time, $relative['prefix'], $relative['hour'], $relative['plural'], $relative['suffix']);

			}

			$date = $lang->sprintf($lang->rel_time, $relative['prefix'], $relative['hour'], $relative['plural'], $relative['suffix'], $real_date, $real_time);

					$date = $lang->today;

					$date = $lang->sprintf($lang->today_rel, $real_date);

					$date = $lang->yesterday;

					$date = $lang->sprintf($lang->yesterday_rel, $real_date);

			}

			}

	}

	}

}

}

/**
 * Get a mail handler instance, a MyBB's built-in SMTP / PHP mail hander or one created by a plugin.
 * @param bool $use_buitlin Whether to use MyBB's built-in mail handler.
 *
 * @return object A MyBB built-in mail handler or one created by plugin(s).
 */
function &get_my_mailhandler($use_buitlin = false)
{
	global $mybb, $plugins;
	static $my_mailhandler;
	static $my_mailhandler_builtin;

	if($use_buitlin)
	{
		// If our built-in mail handler doesn't exist, create it.
		if(!is_object($my_mailhandler_builtin))
		{
			require_once MYBB_ROOT . "inc/class_mailhandler.php";

			// Using SMTP.
			if(isset($mybb->settings['mail_handler']) && $mybb->settings['mail_handler'] == 'smtp')
			{
				require_once MYBB_ROOT . "inc/mailhandlers/smtp.php";
				$my_mailhandler_builtin = new SmtpMail();
			}
			// Using PHP mail().
			else
			{
				require_once MYBB_ROOT . "inc/mailhandlers/php.php";
				$my_mailhandler_builtin = new PhpMail();
				if(!empty($mybb->config['mail_parameters']))
				{
					$my_mailhandler_builtin->additional_parameters = $mybb->config['mail_parameters'];
				}
			}
		}

		if(isset($plugins) && is_object($plugins))
		{
			$plugins->run_hooks('my_mailhandler_builtin_after_init', $my_mailhandler_builtin);
		}

		return $my_mailhandler_builtin;
	}

	// If our mail handler doesn't exist, create it.
	if(!is_object($my_mailhandler))
	{
		require_once MYBB_ROOT . "inc/class_mailhandler.php";

		if(isset($plugins) && is_object($plugins))
		{
			$plugins->run_hooks('my_mailhandler_init', $my_mailhandler);
		}

		// If no plugin has ever created the mail handler, resort to use the built-in one.
		if(!is_object($my_mailhandler) || !($my_mailhandler instanceof MailHandler))
		{
			$my_mailhandler = &get_my_mailhandler(true);
		}
	}

	return $my_mailhandler;
}

 * @param string Address the email should be addressed to.
 * @param string The subject of the email being sent.
 * @param string The message being sent.
 * @param string The from address of the email, if blank, the board name will be used.
 * @param string The chracter set being used to send this email.
 * @param boolean Do we wish to keep the connection to the mail server alive to send more than one message (SMTP only)
 * @param string The format of the email to be sent (text or html). text is default
 * @param string The text message of the email if being sent in html format, for email clients that don't support html
 * @param string The email address to return to. Defaults to admin return email address.

 * @param string $to Address the email should be addressed to.
 * @param string $subject The subject of the email being sent.
 * @param string $message The message being sent.
 * @param string $from The from address of the email, if blank, the board name will be used.
 * @param string $charset The chracter set being used to send this email.
 * @param string $headers
 * @param boolean $keep_alive Do we wish to keep the connection to the mail server alive to send more than one message (SMTP only)
 * @param string $format The format of the email to be sent (text or html). text is default
 * @param string $message_text The text message of the email if being sent in html format, for email clients that don't support html
 * @param string $return_email The email address to return to. Defaults to admin return email address.
 * @return bool True if the mail is sent, false otherwise.

	global $mybb;
	static $mail;

	global $mybb, $plugins;

	// Get our mail handler.
	$mail = &get_my_mailhandler();

	// Does our object not exist? Create it
	if(!is_object($mail))

	// If MyBB's built-in SMTP mail handler is used, set the keep alive bit accordingly.
	if($keep_alive == true && isset($mail->keep_alive) && isset($mybb->settings['mail_handler']) && $mybb->settings['mail_handler'] == 'smtp')

		require_once MYBB_ROOT."inc/class_mailhandler.php";

		if($mybb->settings['mail_handler'] == 'smtp')
		{
			require_once MYBB_ROOT."inc/mailhandlers/smtp.php";
			$mail = new SmtpMail();
		}
		else
		{
			require_once MYBB_ROOT."inc/mailhandlers/php.php";
			$mail = new PhpMail();
		}
	}

	// Using SMTP based mail
	if($mybb->settings['mail_handler'] == 'smtp')
	{
		if($keep_alive == true)

		require_once MYBB_ROOT . "inc/class_mailhandler.php";
		require_once MYBB_ROOT . "inc/mailhandlers/smtp.php";
		if($mail instanceof MailHandler && $mail instanceof SmtpMail)

	// Using PHP based mail()
	else

	// Following variables will help sequential plugins to determine how to process plugin hooks.
	// Mark this variable true if the hooked plugin has sent the mail, otherwise don't modify it.
	$is_mail_sent = false;
	// Mark this variable false if the hooked plugin doesn't suggest sequential plugins to continue processing.
	$continue_process = true;

	$my_mail_parameters = array(
		'to' => &$to,
		'subject' => &$subject,
		'message' => &$message,
		'from' => &$from,
		'charset' => &$charset,
		'headers' => &$headers,
		'keep_alive' => &$keep_alive,
		'format' => &$format,
		'message_text' => &$message_text,
		'return_email' => &$return_email,
		'is_mail_sent' => &$is_mail_sent,
		'continue_process' => &$continue_process,
	);

	if(isset($plugins) && is_object($plugins))
	{
		$plugins->run_hooks('my_mail_pre_build_message', $my_mail_parameters);
	}

	// Build the mail message.
	$mail->build_message($to, $subject, $message, $from, $charset, $headers, $format, $message_text, $return_email);

	if(isset($plugins) && is_object($plugins))
	{
		$plugins->run_hooks('my_mail_pre_send', $my_mail_parameters);
	}

	// Check if the hooked plugins still suggest to send the mail.
	if($continue_process)
	{
		$is_mail_sent = $mail->send();
	}

	if(isset($plugins) && is_object($plugins))

		if($mybb->settings['mail_parameters'] != '')
		{
			$mail->additional_parameters = $mybb->settings['mail_parameters'];
		}

		$plugins->run_hooks('my_mail_post_send', $my_mail_parameters);

	// Build and send
	$mail->build_message($to, $subject, $message, $from, $charset, $headers, $format, $message_text, $return_email);
	return $mail->send();

	return $is_mail_sent;

 * Generates a unique code for POST requests to prevent XSS/CSRF attacks

 * Generates a code for POST requests to prevent XSS/CSRF attacks.
 * Unique for each user or guest session and rotated every 6 hours.

function generate_post_check()

function generate_post_check($rotation_shift=0)

	if($mybb->user['uid'])
	{
		return md5($mybb->user['loginkey'].$mybb->user['salt'].$mybb->user['regdate']);
	}
	// Guests get a special string
	else

	$rotation_interval = 6 * 3600;
	$rotation = floor(TIME_NOW / $rotation_interval) + $rotation_shift;

	$seed = $rotation;

	if($mybb->user['uid'])
	{
		$seed .= $mybb->user['loginkey'].$mybb->user['salt'].$mybb->user['regdate'];
	}
	else
	{
		$seed .= $session->sid;
	}

	if(defined('IN_ADMINCP'))

		return md5($session->useragent.$mybb->config['database']['username'].$mybb->settings['internal']['encryption_key']);

		$seed .= 'ADMINCP';

 * Verifies a POST check code is valid, if not shows an error (silently returns false on silent parameter)

 * Verifies a POST check code is valid (i.e. generated using a rotation number from the past 24 hours)

 * @param string The incoming POST check code
 * @param boolean Silent mode or not (silent mode will not show the error to the user but returns false)

 * @param string $code The incoming POST check code
 * @param boolean $silent Don't show an error to the user
 * @return bool|void Result boolean if $silent is true, otherwise shows an error to the user

	if(generate_post_check() != $code)

	if(
		generate_post_check() !== $code &&
		generate_post_check(-1) !== $code &&
		generate_post_check(-2) !== $code &&
		generate_post_check(-3) !== $code
	)

 * @param int The forum id to get the parent list for.

 * @param int $fid The forum id to get the parent list for.

	if($forumarraycache[$fid])

	if(!empty($forumarraycache[$fid]))

	elseif($forum_cache[$fid])

	elseif(!empty($forum_cache[$fid]))

 * @param int The forum ID
 * @param string The column name to add to the query
 * @param string The joiner for each forum for querying (OR | AND | etc)
 * @param string The parent list of the forum - if you have it

 * @param int $fid The forum ID
 * @param string $column The column name to add to the query
 * @param string $joiner The joiner for each forum for querying (OR | AND | etc)
 * @param string $parentlist The parent list of the forum - if you have it

 * @param boolean True to force a reload of the cache

 * @param boolean $force True to force a reload of the cache
 * @return array The forum cache

 * @param int The forum ID
 * @param return Array of descendants

 * @param int $fid The forum ID
 * @return Array of descendants

	if(!is_array($forums_by_parent[$fid]))

	if(isset($forums_by_parent[$fid]))

		return;
	}

		if(!is_array($forums_by_parent[$fid]))
		{
			return $forums;
		}

	foreach($forums_by_parent[$fid] as $forum)
	{
		$forums[] = $forum['fid'];
		$children = get_child_list($forum['fid']);
		if(is_array($children))

		foreach($forums_by_parent[$fid] as $forum)

			$forums = array_merge($forums, $children);

			$forums[] = (int)$forum['fid'];
			$children = get_child_list($forum['fid']);
			if(is_array($children))
			{
				$forums = array_merge($forums, $children);
			}

 * @param string The error message to be shown
 * @param string The title of the message shown in the title of the page and the error table

 * @param string $error The error message to be shown
 * @param string $title The title of the message shown in the title of the page and the error table

 * @param array Array of errors to be shown
 * @param string The title of the error message
 * @param string JSON data to be encoded (we may want to send more data; e.g. newreply.php uses this for CAPTCHA)

 * @param array $errors Array of errors to be shown
 * @param string $title The title of the error message
 * @param array $json_data JSON data to be encoded (we may want to send more data; e.g. newreply.php uses this for CAPTCHA)

		$errorlist .= "<li>".$error."</li>\n";

		eval("\$errorlist .= \"".$templates->get("error_inline_item")."\";");

		$lang->error_nopermission_user_username = $lang->sprintf($lang->error_nopermission_user_username, $mybb->user['username']);

		$lang->error_nopermission_user_username = $lang->sprintf($lang->error_nopermission_user_username, htmlspecialchars_uni($mybb->user['username']));

 * @param string The URL to redirect the user to
 * @param string The redirection message to be shown
 * @param string The title of the redirection page
 * @param boolean Force the redirect page regardless of settings

 * @param string $url The URL to redirect the user to
 * @param string $message The redirection message to be shown
 * @param string $title The title of the redirection page
 * @param boolean $force_redirect Force the redirect page regardless of settings

	if($force_redirect == true || ($mybb->settings['redirects'] == 1 && ($mybb->user['showredirect'] == 1 || !$mybb->user['uid'])))

	if($force_redirect == true || ($mybb->settings['redirects'] == 1 && (!$mybb->user['uid'] || $mybb->user['showredirect'] == 1)))

		if(my_substr($url, 0, 7) !== 'http://' && my_substr($url, 0, 8) !== 'https://' && my_substr($url, 0, 1) !== '/')

		if(!my_validate_url($url, true, true))

 * @param int The number of items
 * @param int The number of items to be shown per page
 * @param int The current page number
 * @param string The URL to have page numbers tacked on to (If {page} is specified, the value will be replaced with the page #)
 * @param boolean Whether or not the multipage is being shown in the navigation breadcrumb

 * @param int $count The number of items
 * @param int $perpage The number of items to be shown per page
 * @param int $page The current page number
 * @param string $url The URL to have page numbers tacked on to (If {page} is specified, the value will be replaced with the page #)
 * @param boolean $breadcrumb Whether or not the multipage is being shown in the navigation breadcrumb

	global $theme, $templates, $lang, $mybb;

	global $theme, $templates, $lang, $mybb, $plugins;

		return;

		return '';

	$lang->multipage_pages = $lang->sprintf($lang->multipage_pages, $pages);

	$multipage_pages = $lang->sprintf($lang->multipage_pages, $pages);

 * @param string The URL being passed
 * @param int The page number

 * @param string $url The URL being passed
 * @param int $page The page number
 * @return string

		{

		{

		}

		}

	}
	else

	}
	else

 * @param int The user ID

 * @param int $uid The user ID, if no user ID is provided then current user's ID will be considered.

function user_permissions($uid=0)

function user_permissions($uid=null)

	if($uid == 0)

	if($uid === null)

	}

	}

	// Its a guest. Return the group permissions directly from cache
	if($uid == 0)
	{
		return $groupscache[1];
	}

		if($user_cache[$uid]['permissions'])

		if(!empty($user_cache[$uid]['permissions']))

		if(!$user_cache[$uid])

		if(empty($user_cache[$uid]))

	}
}

/**

	}
}

/**

 * @param mixed A list of groups (Can be a single integer, or a list of groups separated by a comma)
 * @return array Array of permissions generated for the groups

 * @param int|string $gid A list of groups (Can be a single integer, or a list of groups separated by a comma)
 * @return array Array of permissions generated for the groups, containing also a list of comma-separated checked groups under 'all_usergroups' index

	global $cache, $groupscache, $grouppermignore, $groupzerogreater;

	global $cache, $groupscache, $grouppermignore, $groupzerogreater, $groupzerolesser, $groupxgreater, $grouppermbyswitch;

	{

	{
		$groupscache[$gid]['all_usergroups'] = $gid;

	}
	

	}

		if(trim($gid) == "" || !$groupscache[$gid])

		if(trim($gid) == "" || empty($groupscache[$gid]))

				// 0 represents unlimited for numerical group permissions (i.e. private message limit) so take that into account.
				if(in_array($perm, $groupzerogreater) && ($access == 0 || $permbit === 0))
				{
					$usergroup[$perm] = 0;
					continue;

				// permission type: 0 not a numerical permission, otherwise a numerical permission.
				// Positive value is for `greater is more` permission, negative for `lesser is more`.
				$perm_is_numerical = 0;
				$perm_numerical_lowerbound = 0;

				// 0 represents unlimited for most numerical group permissions (i.e. private message limit) so take that into account.
				if(in_array($perm, $groupzerogreater))
				{
					// 1 means a `0 or greater` permission. Value 0 means unlimited.
					$perm_is_numerical = 1;
				}
				// Less is more for some numerical group permissions (i.e. post count required for using signature) so take that into account, too.
				else if(in_array($perm, $groupzerolesser))
				{
					// -1 means a `0 or lesser` permission. Value 0 means unlimited.
					$perm_is_numerical = -1;
				}
				// Greater is more, but with a lower bound.
				else if(array_key_exists($perm, $groupxgreater))
				{
					// 2 means a general `greater` permission. Value 0 just means 0.
					$perm_is_numerical = 2;
					$perm_numerical_lowerbound = $groupxgreater[$perm];
				}

				if($perm_is_numerical != 0)
				{
					$update_current_perm = true;

					// Ensure it's an integer.
					$access = (int)$access;
					// Check if this permission should be activatived by another switch permission in current group.
					if(array_key_exists($perm, $grouppermbyswitch))
					{
						if(!is_array($grouppermbyswitch[$perm]))
						{
							$grouppermbyswitch[$perm] = array($grouppermbyswitch[$perm]);
						}

						$update_current_perm = $group_current_perm_enabled = $group_perm_enabled = false;
						foreach($grouppermbyswitch[$perm] as $permswitch)
						{
							if(!isset($groupscache[$gid][$permswitch]))
							{
								continue;
							}
							$permswitches_current = $groupscache[$gid][$permswitch];

							// Determin if the permission is enabled by switches from current group.
							if($permswitches_current == 1 || $permswitches_current == "yes") // Keep yes/no for compatibility?
							{
								$group_current_perm_enabled = true;
							}
							// Determin if the permission is enabled by switches from previously handled groups.
							if($permswitches_usergroup[$permswitch] == 1 || $permswitches_usergroup[$permswitch] == "yes") // Keep yes/no for compatibility?
							{
								$group_perm_enabled = true;
							}
						}

						// Set this permission if not set yet.
						if(!isset($usergroup[$perm]))
						{
							$usergroup[$perm] = $access;
						}

						// If current group's setting enables the permission, we may need to update the user's permission.
						if($group_current_perm_enabled)
						{
							// Only update this permission if both its switch and current group switch are on.
							if($group_perm_enabled)
							{
								$update_current_perm = true;
							}
							// Override old useless value with value from current group.
							else
							{
								$usergroup[$perm] = $access;
							}
						}
					}

					// No switch controls this permission, or permission needs an update.
					if($update_current_perm)
					{
						switch($perm_is_numerical)
						{
							case 1:
							case -1:
								if($access == 0 || $permbit === 0)
								{
									$usergroup[$perm] = 0;
									break;
								}
							default:
								if($perm_is_numerical > 0 && $access > $permbit || $perm_is_numerical < 0 && $access < $permbit)
								{
									$usergroup[$perm] = $access;
								}
								break;
						}
					}

					// Maybe oversubtle, database uses Unsigned on them, but enables usage of permission value with a lower bound.
					if($usergroup[$perm] < $perm_numerical_lowerbound)
					{
						$usergroup[$perm] = $perm_numerical_lowerbound;
					}

					// Work is done for numerical permissions.
					continue;

 *
 * @param int The group ID to fetch the display properties for

 *
 * @param int $gid The group ID to fetch the display properties for

 * @param int The forum ID to build permissions for (0 builds for all forums)
 * @param int The user to build the permissions for (0 will select the uid automatically)
 * @param int The group of the user to build permissions for (0 will fetch it)

 * @param int $fid The forum ID to build permissions for (0 builds for all forums)
 * @param int $uid The user to build the permissions for (0 will select the uid automatically)
 * @param int $gid The group of the user to build permissions for (0 will fetch it)

		}

		}

 * @param int The forum ID
 * @param string A comma separated list of usergroups
 * @param array Group permissions

 * @param int $fid The forum ID
 * @param string $gid A comma separated list of usergroups
 * @param array $groupperms Group permissions

	$groups = explode(",", $gid);

	if(empty($fpermcache[$fid])) // This forum has no custom or inherited permissions so lets just return the group permissions
	{
		return $groupperms;
	}

    if(isset($gid))
    {
        $groups = explode(",", $gid);
    }
    else
    {
        $groups = array();
    }

	foreach($groups as $gid)

	if(empty($fpermcache[$fid])) // This forum has no custom or inherited permissions so lets just return the group permissions
	{
		$current_permissions = $groupperms;
	}
	else

		if(!empty($groupscache[$gid]))

		foreach($groups as $gid)

			$level_permissions = $fpermcache[$fid][$gid];

			// If our permissions arn't inherited we need to figure them out
			if(empty($fpermcache[$fid][$gid]))
			{
				$parents = explode(',', $forum_cache[$fid]['parentlist']);
				rsort($parents);
				if(!empty($parents))
				{
					foreach($parents as $parent_id)
					{
						if(!empty($fpermcache[$parent_id][$gid]))
						{
							$level_permissions = $fpermcache[$parent_id][$gid];
							break;
						}
					}
				}
			}

			// If we STILL don't have forum permissions we use the usergroup itself
			if(empty($level_permissions))
			{
				$level_permissions = $groupscache[$gid];

			// If this forum has custom or inherited permissions for the currently looped group.
			if(!empty($fpermcache[$fid][$gid]))
			{
				$level_permissions = $fpermcache[$fid][$gid];
			}
			// Or, use the group permission instead, if available. Some forum permissions not existing here will be added back later.
			else if(!empty($groupscache[$gid]))
			{
				$level_permissions = $groupscache[$gid];
			}
			// No permission is available for the currently looped group, probably we have bad data here.
			else
			{
				continue;

			}

			}

			}

			}

	if($only_view_own_threads == 0)

	if($only_view_own_threads == 0 || !isset($current_permissions["canonlyviewownthreads"]))

	if($only_reply_own_threads == 0)

	if($only_reply_own_threads == 0 || !isset($current_permissions["canonlyreplyownthreads"]))

}

}

/**
 * Check whether password for given forum was validated for the current user
 *
 * @param array $forum The forum data
 * @param bool $ignore_empty Whether to treat forum password configured as an empty string as validated
 * @param bool $check_parents Whether to check parent forums using `parentlist`
 * @return bool
 */
function forum_password_validated($forum, $ignore_empty=false, $check_parents=false)
{
	global $mybb, $forum_cache;

	if($check_parents && isset($forum['parentlist']))
	{
		if(!is_array($forum_cache))
		{
			$forum_cache = cache_forums();
			if(!$forum_cache)
			{
				return false;
			}
		}

		$parents = explode(',', $forum['parentlist']);
		rsort($parents);

		foreach($parents as $parent_id)
		{
			if($parent_id != $forum['fid'] && !forum_password_validated($forum_cache[$parent_id], true))
			{
				return false;
			}
		}
	}

	return ($ignore_empty && $forum['password'] === '') || (
		isset($mybb->cookies['forumpass'][$forum['fid']]) &&
		my_hash_equals(
			md5($mybb->user['uid'].$forum['password']),
			$mybb->cookies['forumpass'][$forum['fid']]
		)
	);
}

 * @param int The forum ID
 * @param boolean The Parent ID

 * @param int $fid The forum ID
 * @param int $pid The Parent ID
 * @param bool $return
 * @return bool

function check_forum_password($fid, $pid=0)

function check_forum_password($fid, $pid=0, $return=false)

		}

		}

			}

			if($forum_cache[$parent_id]['password'] != "")

			}

			if($forum_cache[$parent_id]['password'] !== "")

	if(!empty($forum_cache[$fid]['password']))

	if($forum_cache[$fid]['password'] !== '')

			if($password === $mybb->get_input('pwverify'))

			if(my_hash_equals($forum_cache[$fid]['password'], $mybb->get_input('pwverify')))

				$showform = true;

				$showform = true;

			if(!$mybb->cookies['forumpass'][$fid] || ($mybb->cookies['forumpass'][$fid] && md5($mybb->user['uid'].$password) !== $mybb->cookies['forumpass'][$fid]))

			if(!forum_password_validated($forum_cache[$fid]))

 * @param fid The forum ID
 * @param uid The user ID to fetch permissions for (0 assumes current logged in user)
 * @param string The parent list for the forum (if blank, will be fetched)

 * @param int $fid The forum ID
 * @param int $uid The user ID to fetch permissions for (0 assumes current logged in user)
 * @param string $parentslist The parent list for the forum (if blank, will be fetched)

function get_moderator_permissions($fid, $uid="0", $parentslist="")

function get_moderator_permissions($fid, $uid=0, $parentslist="")

		if(!is_array($forum) || !in_array($forumid, $parentslist))

		if(empty($forum) || !is_array($forum) || !in_array($forumid, $parentslist))

		if(is_array($forum['users'][$uid]))

		if(!empty($forum['users'][$uid]))

				if($value == 0)
				{

				else if($value == 0)
				{

				}
				else
				{

				}
				else
				{

			if(!is_array($forum['usergroups'][$group]))

			if(empty($forum['usergroups'][$group]) || !is_array($forum['usergroups'][$group]))

				$perms[$action] = max($perm[$action], $perms[$action]);

				if(!isset($perms[$action]))
				{
					$perms[$action] = $value;
				}
				else
				{
					$perms[$action] = max($perm[$action], $perms[$action]);
				}

 * @param int The forum ID (0 assumes global)
 * @param string The action tyring to be performed. (blank assumes any action at all)
 * @param int The user ID (0 assumes current user)

 * @param int $fid The forum ID (0 assumes global)
 * @param string $action The action tyring to be performed. (blank assumes any action at all)
 * @param int $uid The user ID (0 assumes current user)

function is_moderator($fid="0", $action="", $uid="0")

function is_moderator($fid=0, $action="", $uid=0)

	global $mybb, $cache;

	global $mybb, $cache, $plugins;

	}

	}

	{

	{

	$user_perms = user_permissions($uid);
	if($user_perms['issupermod'] == 1)

	$user_perms = user_permissions($uid);

	$hook_args = array(
		'fid' => $fid,
		'action' => $action,
		'uid' => $uid,
	);

	$plugins->run_hooks("is_moderator", $hook_args);
	
	if(isset($hook_args['is_moderator']))
	{
		return (boolean) $hook_args['is_moderator'];
	}

	if(!empty($user_perms['issupermod']) && $user_perms['issupermod'] == 1)

			if($forumpermissions['canview'] && $forumpermissions['canviewthreads'] && !$forumpermissions['canonlyviewownthreads'])

			if(!empty($forumpermissions['canview']) && !empty($forumpermissions['canviewthreads']) && empty($forumpermissions['canonlyviewownthreads']))

					if(isset($modusers['users'][$uid]) && $modusers['users'][$uid]['mid'])

					if(isset($modusers['users'][$uid]) && $modusers['users'][$uid]['mid'] && (!$action || !empty($modusers['users'][$uid][$action])))

					elseif(isset($user_perms['gid']) && isset($modusers['usergroups'][$user_perms['gid']]))

					$groups = explode(',', $user_perms['all_usergroups']);

					foreach($groups as $group)

						// Moderating usergroup
						return true;

						if(trim($group) != '' && isset($modusers['usergroups'][$group]) && (!$action || !empty($modusers['usergroups'][$group][$action])))
						{
							return true;
						}

}

}

/**
 * Get an array of fids that the forum moderator has access to.
 * Do not use for administraotrs or global moderators as they moderate any forum and the function will return false.
 *
 * @param int $uid The user ID (0 assumes current user)
 * @return array|bool an array of the fids the user has moderator access to or bool if called incorrectly.
 */
function get_moderated_fids($uid=0)
{
	global $mybb, $cache;

	if($uid == 0)
	{
		$uid = $mybb->user['uid'];
	}

	if($uid == 0)
	{
		return array();
	}

	$user_perms = user_permissions($uid);

	if($user_perms['issupermod'] == 1)
	{
		return false;
	}

	$fids = array();

	$modcache = $cache->read('moderators');
	if(!empty($modcache))
	{
		$groups = explode(',', $user_perms['all_usergroups']);

		foreach($modcache as $fid => $forum)
		{
			if(isset($forum['users'][$uid]) && $forum['users'][$uid]['mid'])
			{
				$fids[] = $fid;
				continue;
			}

			foreach($groups as $group)
			{
				if(trim($group) != '' && isset($forum['usergroups'][$group]))
				{
					$fids[] = $fid;
				}
			}
		}
	}

	return $fids;
}

	{

	{

	$posticons_cache = $cache->read("posticons");

	$posticons_cache = (array)$cache->read("posticons");

	eval("\$posticons = \"".$templates->get("posticons")."\";");

	if(!empty($iconlist))
	{
		eval("\$posticons = \"".$templates->get("posticons")."\";");
	}
	else
	{
		$posticons = '';
	}

 * @param string The cookie identifier.
 * @param string The cookie value.
 * @param int The timestamp of the expiry date.
 * @param boolean True if setting a HttpOnly cookie (supported by IE, Opera 9, Konqueror)

 * @param string $name The cookie identifier.
 * @param string $value The cookie value.
 * @param int|string $expires The timestamp of the expiry date.
 * @param boolean $httponly True if setting a HttpOnly cookie (supported by the majority of web browsers)
 * @param string $samesite The samesite attribute to prevent CSRF.

function my_setcookie($name, $value="", $expires="", $httponly=false)

function my_setcookie($name, $value="", $expires="", $httponly=false, $samesite="")

	{

	{

	}

	}

	{

	{

	}

	}

 *
 * @param string The cookie identifier.

 *
 * @param string $name The cookie identifier.

 *
 * @param string The cookie identifier.
 * @param int The cookie content id.

 *
 * @param string $name The cookie identifier.
 * @param int $id The cookie content id.

	{
		return false;
	}

	$cookie = my_unserialize($mybb->cookies['mybb'][$name]);

	if(is_array($cookie) && isset($cookie[$id]))
	{
		return $cookie[$id];

	{
		return false;
	}

	$cookie = my_unserialize($mybb->cookies['mybb'][$name], false);

	if(is_array($cookie) && isset($cookie[$id]))
	{
		return $cookie[$id];

 * @param string The cookie identifier.
 * @param int The cookie content id.
 * @param string The value to set the cookie to.
 * @param int The timestamp of the expiry date.

 * @param string $name The cookie identifier.
 * @param int $id The cookie content id.
 * @param string $value The value to set the cookie to.
 * @param int|string $expires The timestamp of the expiry date.

{

{

	$cookie = $mybb->cookies['mybb'];
	if(isset($cookie[$name]))
	{
		$newcookie = my_unserialize($cookie[$name]);
	}
	else

	if(isset($mybb->cookies['mybb'][$name]))
	{
		$newcookie = my_unserialize($mybb->cookies['mybb'][$name], false);
	}
	else

function _safe_unserialize($str)

function _safe_unserialize($str, $unlimited = true)

	if(strlen($str) > MAX_SERIALIZED_INPUT_LENGTH)

	if(!$unlimited && strlen($str) > MAX_SERIALIZED_INPUT_LENGTH)

	{

	{

	$stack = array();
	$expected = array();

	$stack = $list = $expected = array();

		{

		{

		else if($type == 'a' && preg_match('/^a:([0-9]+):{(.*)/s', $str, $matches) && $matches[1] < MAX_SERIALIZED_ARRAY_LENGTH)

		else if(
			$type == 'a' &&
			preg_match('/^a:([0-9]+):{(.*)/s', $str, $matches) &&
			($unlimited || $matches[1] < MAX_SERIALIZED_ARRAY_LENGTH)
		)

					if(count($stack) >= MAX_SERIALIZED_ARRAY_DEPTH)

					if(!$unlimited && count($stack) >= MAX_SERIALIZED_ARRAY_DEPTH)

					$state = 2;

					$state = 2;

					if(count($list) >= MAX_SERIALIZED_ARRAY_LENGTH)

					if(!$unlimited && count($list) >= MAX_SERIALIZED_ARRAY_LENGTH)

						return false;

						return false;

					if(count($stack) >= MAX_SERIALIZED_ARRAY_DEPTH)

					if(!$unlimited && count($stack) >= MAX_SERIALIZED_ARRAY_DEPTH)

function my_unserialize($str)

function my_unserialize($str, $unlimited = true)

	$out = _safe_unserialize($str);

	$out = _safe_unserialize($str, $unlimited);

	}
	

	}

	{

	{

	}
	

	}

	{

	{

 * @param array Array of items being updated (numthreads,numposts,numusers,numunapprovedthreads,numunapprovedposts,numdeletedposts,numdeletedthreads)
 * @param boolean Force stats update?

 * @param array $changes Array of items being updated (numthreads,numposts,numusers,numunapprovedthreads,numunapprovedposts,numdeletedposts,numdeletedthreads)
 * @param boolean $force Force stats update?

		$new_stats['lastusername'] = $lastmember['username'];

		$new_stats['lastusername'] = $lastmember['username'] = htmlspecialchars_uni($lastmember['username']);

		"numusers" => $stats['numusers'],
		"numthreads" => $stats['numthreads'],
		"numposts" => $stats['numposts']

		"numusers" => (int)$stats['numusers'],
		"numthreads" => (int)$stats['numthreads'],
		"numposts" => (int)$stats['numposts']

 * @param int The forum ID
 * @param array Array of items being updated (threads, posts, unapprovedthreads, unapprovedposts, deletedposts, deletedthreads) and their value (ex, 1, +1, -1)

 * @param int $fid The forum ID
 * @param array $changes Array of items being updated (threads, posts, unapprovedthreads, unapprovedposts, deletedposts, deletedthreads) and their value (ex, 1, +1, -1)

{
	global $db;

	$update_query = array();

{
	global $db;

	$update_query = array();

 * @param int The forum ID

 * @param int $fid The forum ID

	$lastpost = $db->fetch_array($query);

	$updated_forum = array(
		"lastpost" => (int)$lastpost['lastpost'],
		"lastposter" => $db->escape_string($lastpost['lastposter']),
		"lastposteruid" => (int)$lastpost['lastposteruid'],
		"lastposttid" => (int)$lastpost['tid'],
		"lastpostsubject" => $db->escape_string($lastpost['subject'])
	);

	if($db->num_rows($query) > 0)
	{
		$lastpost = $db->fetch_array($query);

		$updated_forum = array(
			"lastpost" => (int)$lastpost['lastpost'],
			"lastposter" => $db->escape_string($lastpost['lastposter']),
			"lastposteruid" => (int)$lastpost['lastposteruid'],
			"lastposttid" => (int)$lastpost['tid'],
			"lastpostsubject" => $db->escape_string($lastpost['subject']),
		);
	}
	else {
		$updated_forum = array(
			"lastpost" => 0,
			"lastposter" => '',
			"lastposteruid" => 0,
			"lastposttid" => 0,
			"lastpostsubject" => '',
		);
	}

 *
 * @param int The thread ID
 * @param array Array of items being updated (replies, unapprovedposts, deletedposts, attachmentcount) and their value (ex, 1, +1, -1)
 */

 *
 * @param int $tid The thread ID
 * @param array $changes Array of items being updated (replies, unapprovedposts, deletedposts, attachmentcount) and their value (ex, 1, +1, -1)
 */

			}

			}

	}

	$db->free_result($query);

	}

	$db->free_result($query);

 * @param int The thread ID

 * @param int $tid The thread ID

		return false;

		return;

		ORDER BY p.dateline DESC

		ORDER BY p.dateline DESC, p.pid DESC

	);

	);

		ORDER BY p.dateline ASC

		ORDER BY p.dateline ASC, p.pid ASC

	}

	}

 * @param int The user ID
 * @param array Array of items being updated (postnum, threadnum) and their value (ex, 1, +1, -1)

 * @param int $uid The user ID
 * @param array $changes Array of items being updated (postnum, threadnum) and their value (ex, 1, +1, -1)

	foreach($counters as $counter)

	
	if($user)

		if(array_key_exists($counter, $changes))

		foreach($counters as $counter)

			if(substr($changes[$counter], 0, 2) == "+-")
			{
				$changes[$counter] = substr($changes[$counter], 1);
			}
			// Adding or subtracting from previous value?
			if(substr($changes[$counter], 0, 1) == "+" || substr($changes[$counter], 0, 1) == "-")

			if(array_key_exists($counter, $changes))

				if((int)$changes[$counter] != 0)

				if(substr($changes[$counter], 0, 2) == "+-")

					$update_query[$counter] = $user[$counter] + $changes[$counter];

					$changes[$counter] = substr($changes[$counter], 1);
				}
				// Adding or subtracting from previous value?
				if(substr($changes[$counter], 0, 1) == "+" || substr($changes[$counter], 0, 1) == "-")
				{
					if((int)$changes[$counter] != 0)
					{
						$update_query[$counter] = $user[$counter] + $changes[$counter];
					}
				}
				else
				{
					$update_query[$counter] = $changes[$counter];
				}

				// Less than 0? That's bad
				if(isset($update_query[$counter]) && $update_query[$counter] < 0)
				{
					$update_query[$counter] = 0;

	}

	$db->free_result($query);

	}

	$db->free_result($query);

	{

	{

	}

	}

 * @param int The thread ID

 * @param int $tid The thread ID
 * @return bool

{
	global $moderation;

	if(!is_object($moderation))
	{
		require_once MYBB_ROOT."inc/class_moderation.php";
		$moderation = new Moderation;
	}

{
	global $moderation;

	if(!is_object($moderation))
	{
		require_once MYBB_ROOT."inc/class_moderation.php";
		$moderation = new Moderation;
	}

 * @param int The thread ID

 * @param int $pid The thread ID
 * @return bool

 * @param int The parent forum to start with
 * @param int The selected item ID
 * @param int If we need to add select boxes to this cal or not
 * @param int The current depth of forums we're at
 * @param int Whether or not to show extra items such as User CP, Forum home
 * @param boolean Ignore the showinjump setting and show all forums (for moderation pages)
 * @param unknown_type deprecated
 * @param string The name of the forum jump

 * @param int $pid The parent forum to start with
 * @param int $selitem The selected item ID
 * @param int $addselect If we need to add select boxes to this cal or not
 * @param string $depth The current depth of forums we're at
 * @param int $showextras Whether or not to show extra items such as User CP, Forum home
 * @param boolean $showall Ignore the showinjump setting and show all forums (for moderation pages)
 * @param mixed $permissions deprecated
 * @param string $name The name of the forum jump

function build_forum_jump($pid="0", $selitem="", $addselect="1", $depth="", $showextras="1", $showall=false, $permissions="", $name="fid")

function build_forum_jump($pid=0, $selitem=0, $addselect=1, $depth="", $showextras=1, $showall=false, $permissions="", $name="fid")

 * @param string The filename.

 * @param string $file The filename.

 * @param int The length of the string to generate.

 * @param int $length The length of the string to generate.
 * @param bool $complex Whether to return complex string. Defaults to false

function random_str($length="8")

function random_str($length=8, $complex=false)

	$set = array("a","A","b","B","c","C","d","D","e","E","f","F","g","G","h","H","i","I","j","J","k","K","l","L","m","M","n","N","o","O","p","P","q","Q","r","R","s","S","t","T","u","U","v","V","w","W","x","X","y","Y","z","Z","1","2","3","4","5","6","7","8","9");
	$str = '';

	$set = array_merge(range(0, 9), range('A', 'Z'), range('a', 'z'));
	$str = array();

	for($i = 1; $i <= $length; ++$i)

	// Complex strings have always at least 3 characters, even if $length < 3
	if($complex == true)

		$ch = my_rand(0, count($set)-1);
		$str .= $set[$ch];

		// At least one number
		$str[] = $set[my_rand(0, 9)];

		// At least one big letter
		$str[] = $set[my_rand(10, 35)];

		// At least one small letter
		$str[] = $set[my_rand(36, 61)];

		$length -= 3;
	}

	for($i = 0; $i < $length; ++$i)
	{
		$str[] = $set[my_rand(0, 61)];

	return $str;

	// Make sure they're in random order and convert them to a string
	shuffle($str);

	return implode($str);

 * @param string The username
 * @param int The usergroup for the user (if not specified, will be fetched)
 * @param int The display group for the user (if not specified, will be fetched)

 * @param string $username The username
 * @param int $usergroup The usergroup for the user
 * @param int $displaygroup The display group for the user

 */
function format_name($username, $usergroup, $displaygroup="")
{
	global $groupscache, $cache;

	if(!is_array($groupscache))
	{
		$groupscache = $cache->read("usergroups");
	}

	if($displaygroup != 0)
	{
		$usergroup = $displaygroup;
	}

	$ugroup = $groupscache[$usergroup];
	$format = $ugroup['namestyle'];
	$userin = substr_count($format, "{username}");

	if($userin == 0)

 */
function format_name($username, $usergroup, $displaygroup=0)
{
	global $groupscache, $cache, $plugins;

	static $formattednames = array();

	if(!isset($formattednames[$username]))

	$format = stripslashes($format);

		if(isset($groupscache[$usergroup]))
		{
			$ugroup = $groupscache[$usergroup];

			if(strpos($ugroup['namestyle'], "{username}") !== false)
			{
				$format = $ugroup['namestyle'];
			}
		}

		$format = stripslashes($format);

		$parameters = compact('username', 'usergroup', 'displaygroup', 'format');

		$parameters = $plugins->run_hooks('format_name', $parameters);

		$format = $parameters['format'];

		$formattednames[$username] = str_replace("{username}", $username, $format);
	}

	return str_replace("{username}", $username, $format);

	return $formattednames[$username];

 * @param string The avatar file name
 * @param string Dimensions of the avatar, width x height (e.g. 44|44)
 * @param string The maximum dimensions of the formatted avatar

 * @param string $avatar The avatar file name
 * @param string $dimensions Dimensions of the avatar, width x height (e.g. 44|44)
 * @param string $max_dimensions The maximum dimensions of the formatted avatar