global $SID, $db, $config;

$current_time = time();

{

$sessiondata = ( isset($_COOKIE[$config['cookie_name'] . '_data']) ) ? unserialize(stripslashes($_COOKIE[$config['cookie_name'] . '_data'])) : '';

$this->session_id = ( isset($_COOKIE[$config['cookie_name'] . '_sid']) ) ? $_COOKIE[$config['cookie_name'] . '_sid'] : '';

}

// Obtain users IP

if (!empty($_SERVER['HTTP_X_FORWARDED_FOR']))

{

{

$private_ip = array('/^0\./', '/^127\.0\.0\.1/', '/^192\.168\..*/', '/^172\.16\..*/', '/^10\..*/', '/^224\..*/', '/^240\..*/');

$this->ip = preg_replace($private_ip, $this->ip, $ip_list[1]);

}

// Load limit check (if applicable)

{

{

list($this->load) = explode(' ', $load[0]);

{

trigger_error('Board_unavailable');

}

}

// session_id exists so go ahead and attempt to grab all data in preparation

{

$sql = "SELECT u.*, s.*

FROM " . SESSIONS_TABLE . " s, " . USERS_TABLE . " u

$db->sql_freeresult($result);

// Did the session exist in the DB?

{

// Validate IP length according to admin ... has no effect on IPv6

$s_ip = implode('.', array_slice(explode('.', $this->data['session_ip']), 0, $config['ip_check']));

$u_ip = implode('.', array_slice(explode('.', $this->ip), 0, $config['ip_check']));

{

// Only update session DB a minute or so after last update or if page changes

{

$sql = "UPDATE " . SESSIONS_TABLE . "

SET session_time = $current_time, session_page = '$this->page'

// If we reach here then no (valid) session exists. So we'll create a new one,

// using the cookie user_id if available to pull basic user prefs.

return $this->create($user_id, $autologin);

}

$sessiondata = array();

$current_time = time();

{

// Limit sessions in 1 minute period

$sql = "SELECT COUNT(*) AS sessions

FROM " . SESSIONS_TABLE . "

$result = $db->sql_query($sql);

$row = $db->sql_fetchrow($result);

$db->sql_freeresult($result);

{

trigger_error('Board_unavailable');

}

}

// Garbage collection ... remove old sessions updating user information

{

$this->gc($current_time);

}

$db->sql_freeresult($result);

// Check autologin request, is it valid?

{

$autologin = '';

$this->data['user_id'] = $user_id = ANONYMOUS;

OR ban_end = 0";

$result = $db->sql_query($sql);

{

{

trigger_error('You_been_banned');

}

$db->sql_freeresult($result);

// Is there an existing session? If so, grab last visit time from that

// Create or update the session

$db->sql_return_on_error(true);

$sql = "UPDATE " . SESSIONS_TABLE . "

SET session_user_id = $user_id, session_last_visit = " . $this->data['session_last_visit'] . ", session_start = $current_time, session_time = $current_time, session_browser = '$this->browser', session_page = '$this->page'

WHERE session_id = '" . $this->session_id . "'";

{

$db->sql_return_on_error(false);

$this->session_id = md5(uniqid($user_ip));

$this->data['session_id'] = $this->session_id;

$sessiondata['userid'] = $user_id;

$this->set_cookie('data', serialize($sessiondata), $current_time + 31536000);

$this->set_cookie('sid', $this->session_id, 0);

$SID = '?sid=' . $this->session_id;

{

// Events ... ?

// do_events('days');

$del_user_id = '';

$del_sessions = 0;

{

{

$sql = "UPDATE " . USERS_TABLE . "

SET user_lastvisit = " . $row['recent_time'] . "

$db->sql_query($sql);

}

$del_sessions++;

}

{

// Delete expired sessions

$sql = "DELETE FROM " . SESSIONS_TABLE . "

$db->sql_query($sql);

}

{

// Less than 5 sessions, update gc timer ... else we want gc

// called again to delete other sessions

{

global $db, $template, $config, $phpEx, $phpbb_root_path;

{

$this->lang_path = $phpbb_root_path . 'language/' . $this->lang_name . '/';

$this->date_format = $this->data['user_dateformat'];

$this->timezone = $config['board_timezone'] * 3600;

$this->dst = 0;

{

$accept_lang_ary = explode(',', $_SERVER['HTTP_ACCEPT_LANGUAGE']);

{

// Set correct format ... guess full xx_YY form

$accept_lang = substr($accept_lang, 0, 2) . '_' . strtoupper(substr($accept_lang, 3, 2));

{

$this->lang_name = $accept_lang;

$this->lang_path = $phpbb_root_path . 'language/' . $accept_lang . '/';

{

// No match on xx_YY so try xx

$accept_lang = substr($accept_lang, 0, 2);

{

$this->lang_name = $accept_lang;

$this->lang_path = $phpbb_root_path . 'language/' . $accept_lang . '/';

}

include($this->lang_path . 'lang_main.' . $phpEx);

{

include($this->lang_path . 'lang_admin.' . $phpEx);

}

}

*/

// Set up style

$sql = "SELECT t.template_path, t.poll_length, t.pm_box_length, c.css_data, c.css_external, i.*

FROM " . STYLES_TABLE . " s, " . STYLES_TPL_TABLE . " t, " . STYLES_CSS_TABLE . " c, " . STYLES_IMAGE_TABLE . " i

AND i.imageset_id = s.imageset_id";

$result = $db->sql_query($sql);

{

message_die(ERROR, 'Could not get style data');

}

$template->set_template($this->theme['template_path']);

return;

}

{

static $lang_dates;

{

{

$lang_dates[$match] = $replace;

}

}

return strtr(@gmdate($format, $gmepoch + $this->timezone + $this->dst), $lang_dates);

}

if (empty($imgs[$img]) || $no_cache)

{

$imgs[$img] = '<img src=' . str_replace('{LANG}', $this->img_lang, $this->theme[$img]) . '" ' . $width . 'alt="' . $this->lang[$alt] . '" title="' . $this->lang[$alt] . '" />';

}

return $imgs[$img];

}

}

var $acl = array();

var $acl_options = array();

{

global $db, $acl_options;

if (!$this->founder = $userdata['user_founder'])

{

{

$this->acl_cache($userdata);

}

$global_chars = ceil(sizeof($this->acl_options['global']) / 8);

$local_chars = ceil(sizeof($this->acl_options['local']) / 8) + 2;

$globals = substr($userdata['user_permissions'], 0, $global_chars);

$forums = explode("\r\n", chunk_split($locals, $local_chars));

array_pop($forums);

{

$forum_id = bindec(decbin(ord(substr($forum, 0, 1))) . str_pad(decbin(ord(substr($forum, 1, 1))), 8, 0, STR_PAD_LEFT));

unset($forums);

}

return;

}

{

static $acl_cache;

{

{

$acl_cache[$forum_id][$option] = substr($this->acl['global'], $this->acl_options['global'][$option], 1);

}

{

$acl_cache[$forum_id][$option] |= substr($this->acl['local'][$forum_id], $this->acl_options['local'][$option], 1);

}

}

}

// Cache data

AND ao.auth_option_id = a.auth_option_id";

$result = $db->sql_query($sql);

{

$acl_db[] = $row;

}

AND ao.auth_option_id = a.auth_option_id";

$result = $db->sql_query($sql);

{

$acl_db[] = $row;

}

$db->sql_freeresult($result);

{

sort($acl_db);

{

{

$this->acl[$row['forum_id']][$row['auth_value']] = intval($row['auth_allow_deny']);

}

$local_hold = '';

$global_hold = '';

{

$holding = array();

$option_set = array();

{

$fill = $global_bits;

$ary_key = 'global';

$holding[$i] = 0;

}

{

{

$holding[$this->acl_options[$ary_key][$option]] = 1;

$option_key = substr($option, 0, strpos($option, '_') + 1);

{

$holding[$this->acl_options[$ary_key][$option_key]] = 1;

}

}

}

$bitstring = explode("\r\n", chunk_split($forum_id . implode('', $holding), 8));

array_pop($bitstring);

{

$$hold_str .= chr(bindec($byte));

}

}

unset($holding);

{

for($i = 0; $i < $global_bits; $i++)

{

$method = trim($config['auth_method']);

{

include_once('includes/auth/auth_' . $method . '.' . $phpEx);

$method = 'login_' . $method;

{

{

return false;

}

}

}