Zeile 205 | Zeile 205 |
---|
reset($pforumcache); reset($pforumcache[$fid]);
|
reset($pforumcache); reset($pforumcache[$fid]);
|
| $navigation = '';
|
foreach($pforumcache[$fid] as $key => $forum) { if($fid == $forum['fid']) {
|
foreach($pforumcache[$fid] as $key => $forum) { if($fid == $forum['fid']) {
|
if($pforumcache[$forum['pid']])
| if(!empty($pforumcache[$forum['pid']]))
|
{ $navigation = make_parent_list($forum['pid'], $navsep).$navigation; }
if($navigation)
|
{ $navigation = make_parent_list($forum['pid'], $navsep).$navigation; }
if($navigation)
|
{
| {
|
$navigation .= $navsep; } $navigation .= $forum['fid'];
| $navigation .= $navsep; } $navigation .= $forum['fid'];
|
Zeile 264 | Zeile 266 |
---|
$db->delete_query("forumpermissions", "fid='{$fid}' AND gid='{$usergroup['gid']}'");
// Only insert the new ones if we're using custom permissions
|
$db->delete_query("forumpermissions", "fid='{$fid}' AND gid='{$usergroup['gid']}'");
// Only insert the new ones if we're using custom permissions
|
if($inherit[$usergroup['gid']] != 1)
| if(empty($inherit[$usergroup['gid']]))
|
{
|
{
|
if($canview[$usergroup['gid']] == 1)
| if(!empty($canview[$usergroup['gid']]))
|
{ $pview = 1; }
| { $pview = 1; }
|
Zeile 275 | Zeile 277 |
---|
$pview = 0; }
|
$pview = 0; }
|
if($canpostthreads[$usergroup['gid']] == 1)
| if(!empty($canpostthreads[$usergroup['gid']]))
|
{ $pthreads = 1; } else { $pthreads = 0;
|
{ $pthreads = 1; } else { $pthreads = 0;
|
}
| }
|
|
|
if($canpostreplies[$usergroup['gid']] == 1)
| if(!empty($canpostreplies[$usergroup['gid']]))
|
{ $preplies = 1; }
| { $preplies = 1; }
|
Zeile 293 | Zeile 295 |
---|
$preplies = 0; }
|
$preplies = 0; }
|
if($canpostpolls[$usergroup['gid']] == 1)
| if(!empty($canpostpolls[$usergroup['gid']]))
|
{ $ppolls = 1; }
| { $ppolls = 1; }
|
Zeile 327 | Zeile 329 |
---|
continue; }
|
continue; }
|
$insertquery[$db->escape_string($field)] = (int)$existing_permissions[$field];
| $insertquery[$db->escape_string($field)] = isset($existing_permissions[$field]) ? (int)$existing_permissions[$field] : 0;
|
}
$db->insert_query("forumpermissions", $insertquery);
| }
$db->insert_query("forumpermissions", $insertquery);
|
Zeile 357 | Zeile 359 |
---|
{ $func = $action['module']."_admin_permissions"; $permissions = $func();
|
{ $func = $action['module']."_admin_permissions"; $permissions = $func();
|
if($permissions['permissions'][$action['action']] && $mybb->admin['permissions'][$action['module']][$action['action']] != 1)
| if( !empty($permissions['permissions'][$action['action']]) && empty($mybb->admin['permissions'][$action['module']][$action['action']]) )
|
{ if($error) {
| { if($error) {
|
Zeile 502 | Zeile 507 |
---|
{ return $final_group_perms; }
|
{ return $final_group_perms; }
|
else
| elseif(isset($perms_def))
|
{ return $perms_def; }
|
{ return $perms_def; }
|
| return array();
|
} }
| } }
|
Zeile 605 | Zeile 612 |
---|
{ $query = $db->simple_select("adminoptions", "loginattempts, loginlockoutexpiry", "uid='".(int)$uid."'", 1); $attempts = $db->fetch_array($query);
|
{ $query = $db->simple_select("adminoptions", "loginattempts, loginlockoutexpiry", "uid='".(int)$uid."'", 1); $attempts = $db->fetch_array($query);
|
| if(!$attempts) { return false; }
|
}
if($attempts['loginattempts'] <= 0)
| }
if($attempts['loginattempts'] <= 0)
|
Zeile 655 | Zeile 667 |
---|
function check_template($template) { // Check to see if our database password is in the template
|
function check_template($template) { // Check to see if our database password is in the template
|
if(preg_match('#\$config\[(([\'|"]database[\'|"])|([^\'"].*?))\]\[(([\'|"](database|hostname|password|table_prefix|username)[\'|"])|([^\'"].*?))\]#i', $template))
| if(preg_match('#\$config\[(([\'|"]database[\'|"])|([^\'"].*?))\]\[(([\'|"](database|hostname|password|table_prefix|username)[\'|"])|([^\'"].*?))\]#i', $template) !== 0)
|
{ return true; }
// System calls via backtick
|
{ return true; }
// System calls via backtick
|
if(preg_match('#\$\s*\{#', $template))
| if(preg_match('#\$\s*\{#', $template) !== 0)
|
{ return true; }
// Any other malicious acts? // Courtesy of ZiNgA BuRgA
|
{ return true; }
// Any other malicious acts? // Courtesy of ZiNgA BuRgA
|
if(preg_match("~\\{\\$.+?\\}~s", preg_replace('~\\{\\$+[a-zA-Z_][a-zA-Z_0-9]*((?:-\\>|\\:\\:)\\$*[a-zA-Z_][a-zA-Z_0-9]*|\\[\s*\\$*([\'"]?)[a-zA-Z_ 0-9 ]+\\2\\]\s*)*\\}~', '', $template)))
| $allowed = preg_replace('~\\{\\$+[a-zA-Z_][a-zA-Z_0-9]*((?:-\\>|\\:\\:)\\$*[a-zA-Z_][a-zA-Z_0-9]*|\\[\s*\\$*([\'"]?)[a-zA-Z_ 0-9 ]+\\2\\]\s*)*\\}~', '', $template); if($allowed === null || preg_match("~\\{\\$.+?\\}~s", $allowed) !== 0)
|
{ return true; }
| { return true; }
|
Zeile 724 | Zeile 737 |
---|
{ while($post = $db->fetch_array($query)) {
|
{ while($post = $db->fetch_array($query)) {
|
if($post['usepostcounts'] != 0 && $post['visible'] != 0)
| if($post['usepostcounts'] != 0 && $post['visible'] == 1)
|
{ ++$post_count;
|
{ ++$post_count;
|
}
| }
|
if($post['pid'] == $post['firstpost']) {
| if($post['pid'] == $post['firstpost']) {
|
Zeile 772 | Zeile 785 |
---|
if($already_printed) { return;
|
if($already_printed) { return;
|
}
| }
|
$already_printed = true;
| $already_printed = true;
|
Zeile 790 | Zeile 803 |
---|
});
$('.'+id+'_forums_groups').each(function(e)
|
});
$('.'+id+'_forums_groups').each(function(e)
|
{
| {
|
$(this).hide();
|
$(this).hide();
|
});
| });
|
if($('#'+id+'_forums_groups_'+checked))
|
if($('#'+id+'_forums_groups_'+checked))
|
{
| {
|
$('#'+id+'_forums_groups_'+checked).show(); } }
|
$('#'+id+'_forums_groups_'+checked).show(); } }
|
</script>";
| </script>"; }
if(!function_exists('array_column')) { function array_column($input, $column_key) { $values = array();
if(!is_array($input)) { $input = array($input); }
foreach($input as $val) { if(is_array($val) && isset($val[$column_key])) { $values[] = $val[$column_key]; } elseif(is_object($val) && isset($val->$column_key)) { $values[] = $val->$column_key; } }
return $values; } }
/** * Output the auto redirect block. * * @param \Form $form An existing form instance to wrap the redirect within. * @param string $prompt The prompt to show. */ function output_auto_redirect($form, $prompt) { global $lang;
echo <<<HTML <div class="confirm_action"> <p>{$prompt}</p> <br /> <script type="text/javascript"> $(function() { var button = $("#proceed_button"); if (button.length > 0) { // create a temporary div element to render the text within, un-escaping HTML entities var textElement = $('<div/>').html('{$lang->automatically_redirecting}'); button.val(textElement.text()); button.attr("disabled", true); button.css("color", "#aaa"); button.css("borderColor", "#aaa"); var parent_form = button.closest('form');
if (parent_form.length > 0) { parent_form.submit(); } } }); </script> <p class="buttons"> {$form->generate_submit_button($lang->proceed, array('class' => 'button_yes', 'id' => 'proceed_button'))} </p> </div> HTML;
|
}
| }
|