+<?php

+/**

+*

+* @package acp

+* @version $Id$

+* @copyright (c) 2005 phpBB Group

+* @license http://opensource.org/licenses/gpl-license.php GNU Public License

+*

+*/

+

+/**

+* @ignore

+*/

+if (!defined('IN_PHPBB'))

+{

+ exit;

+}

+

+/**

+* @package acp

+*/

+class acp_attachments

+{

+ var $u_action;

+ var $new_config;

+

+ function main($id, $mode)

+ {

+ global $db, $user, $auth, $template, $cache, $config;

+

+ $user->add_lang(array('posting', 'viewtopic', 'acp/attachments'));

+

+ $error = $notify = array();

+ $submit = request::is_set_post('submit');

+ $action = request_var('action', '');

+

+ $form_key = 'acp_attach';

+ add_form_key($form_key);

+

+ if ($submit && !check_form_key($form_key))

+ {

+ trigger_error($user->lang['FORM_INVALID'] . adm_back_link($this->u_action), E_USER_WARNING);

+ }

+

+ switch ($mode)

+ {

+ case 'attach':

+ $l_title = 'ACP_ATTACHMENT_SETTINGS';

+ break;

+

+ case 'extensions':

+ $l_title = 'ACP_MANAGE_EXTENSIONS';

+ break;

+

+ case 'ext_groups':

+ $l_title = 'ACP_EXTENSION_GROUPS';

+ break;

+

+ case 'orphan':

+ $l_title = 'ACP_ORPHAN_ATTACHMENTS';

+ break;

+

+ default:

+ trigger_error('NO_MODE', E_USER_ERROR);

+ break;

+ }

+

+ $this->tpl_name = 'acp_attachments';

+ $this->page_title = $l_title;

+

+ $template->assign_vars(array(

+ 'L_TITLE' => $user->lang[$l_title],

+ 'L_TITLE_EXPLAIN' => $user->lang[$l_title . '_EXPLAIN'],

+ 'U_ACTION' => $this->u_action)

+ );

+

+ switch ($mode)

+ {

+ case 'attach':

+

+ include_once(PHPBB_ROOT_PATH . 'includes/functions_posting.' . PHP_EXT);

+

+ $sql = 'SELECT group_name, cat_id

+ FROM ' . EXTENSION_GROUPS_TABLE . '

+ WHERE cat_id > 0

+ ORDER BY cat_id';

+ $result = $db->sql_query($sql);

+

+ $s_assigned_groups = array();

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $s_assigned_groups[$row['cat_id']][] = $row['group_name'];

+ }

+ $db->sql_freeresult($result);

+

+ $l_legend_cat_images = $user->lang['SETTINGS_CAT_IMAGES'] . ' [' . $user->lang['ASSIGNED_GROUP'] . ': ' . ((!empty($s_assigned_groups[ATTACHMENT_CATEGORY_IMAGE])) ? implode(', ', $s_assigned_groups[ATTACHMENT_CATEGORY_IMAGE]) : $user->lang['NO_EXT_GROUP']) . ']';

+

+ $display_vars = array(

+ 'title' => 'ACP_ATTACHMENT_SETTINGS',

+ 'vars' => array(

+ 'img_max_width' => false, 'img_max_height' => false, 'img_link_width' => false, 'img_link_height' => false,

+

+ 'legend1' => 'ACP_ATTACHMENT_SETTINGS',

+ 'allow_attachments' => array('lang' => 'ALLOW_ATTACHMENTS', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => false),

+ 'allow_pm_attach' => array('lang' => 'ALLOW_PM_ATTACHMENTS', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => false),

+ 'upload_path' => array('lang' => 'UPLOAD_DIR', 'validate' => 'wpath', 'type' => 'text:25:100', 'explain' => true),

+ 'display_order' => array('lang' => 'DISPLAY_ORDER', 'validate' => 'bool', 'type' => 'custom', 'method' => 'display_order', 'explain' => true),

+ 'attachment_quota' => array('lang' => 'ATTACH_QUOTA', 'validate' => 'string', 'type' => 'custom', 'method' => 'max_filesize', 'explain' => true),

+ 'max_filesize' => array('lang' => 'ATTACH_MAX_FILESIZE', 'validate' => 'string', 'type' => 'custom', 'method' => 'max_filesize', 'explain' => true),

+ 'max_filesize_pm' => array('lang' => 'ATTACH_MAX_PM_FILESIZE','validate' => 'string', 'type' => 'custom', 'method' => 'max_filesize', 'explain' => true),

+ 'max_attachments' => array('lang' => 'MAX_ATTACHMENTS', 'validate' => 'int', 'type' => 'text:3:3', 'explain' => false),

+ 'max_attachments_pm' => array('lang' => 'MAX_ATTACHMENTS_PM', 'validate' => 'int', 'type' => 'text:3:3', 'explain' => false),

+ 'secure_downloads' => array('lang' => 'SECURE_DOWNLOADS', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+ 'secure_allow_deny' => array('lang' => 'SECURE_ALLOW_DENY', 'validate' => 'int', 'type' => 'custom', 'method' => 'select_allow_deny', 'explain' => true),

+ 'secure_allow_empty_referer' => array('lang' => 'SECURE_EMPTY_REFERRER', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+ 'check_attachment_content' => array('lang' => 'CHECK_CONTENT', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+

+

+ 'legend2' => $l_legend_cat_images,

+ 'img_display_inlined' => array('lang' => 'DISPLAY_INLINED', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+ 'img_create_thumbnail' => array('lang' => 'CREATE_THUMBNAIL', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+ 'img_max_thumb_width' => array('lang' => 'MAX_THUMB_WIDTH', 'validate' => 'int', 'type' => 'text:7:15', 'explain' => true, 'append' => ' px'),

+ 'img_min_thumb_filesize' => array('lang' => 'MIN_THUMB_FILESIZE', 'validate' => 'int', 'type' => 'text:7:15', 'explain' => true, 'append' => ' ' . $user->lang['BYTES']),

+ 'img_imagick' => array('lang' => 'IMAGICK_PATH', 'validate' => 'string', 'type' => 'text:20:200', 'explain' => true, 'append' => '&nbsp;&nbsp;<span>[ <a href="' . $this->u_action . '&amp;action=imgmagick">' . $user->lang['SEARCH_IMAGICK'] . '</a> ]</span>'),

+ 'img_max' => array('lang' => 'MAX_IMAGE_SIZE', 'validate' => 'int', 'type' => 'dimension:3:4', 'explain' => true, 'append' => ' px'),

+ 'img_link' => array('lang' => 'IMAGE_LINK_SIZE', 'validate' => 'int', 'type' => 'dimension:3:4', 'explain' => true, 'append' => ' px'),

+ )

+ );

+

+ $this->new_config = $config;

+ $cfg_array = (request::is_set('config')) ? request_var('config', array('' => '')) : $this->new_config;

+ $error = array();

+

+ // We validate the complete config if whished

+ validate_config_vars($display_vars['vars'], $cfg_array, $error);

+

+ // Do not write values if there is an error

+ if (sizeof($error))

+ {

+ $submit = false;

+ }

+

+ // We go through the display_vars to make sure no one is trying to set variables he/she is not allowed to...

+ foreach ($display_vars['vars'] as $config_name => $null)

+ {

+ if (!isset($cfg_array[$config_name]) || strpos($config_name, 'legend') !== false)

+ {

+ continue;

+ }

+

+ $this->new_config[$config_name] = $config_value = $cfg_array[$config_name];

+

+ if (in_array($config_name, array('attachment_quota', 'max_filesize', 'max_filesize_pm')))

+ {

+ $size_var = request_var($config_name, '');

+ $this->new_config[$config_name] = $config_value = ($size_var == 'kb') ? round($config_value * 1024) : (($size_var == 'mb') ? round($config_value * 1048576) : $config_value);

+ }

+

+ if ($submit)

+ {

+ set_config($config_name, $config_value);

+ }

+ }

+

+ $this->perform_site_list();

+

+ if ($submit)

+ {

+ add_log('admin', 'LOG_CONFIG_ATTACH');

+

+ // Check Settings

+ $this->test_upload($error, $this->new_config['upload_path'], false);

+

+ if (!sizeof($error))

+ {

+ trigger_error($user->lang['CONFIG_UPDATED'] . adm_back_link($this->u_action));

+ }

+ }

+

+ $template->assign_var('S_ATTACHMENT_SETTINGS', true);

+

+ if ($action == 'imgmagick')

+ {

+ $this->new_config['img_imagick'] = $this->search_imagemagick();

+ }

+

+ // We strip eventually manual added convert program, we only want the patch

+ if ($this->new_config['img_imagick'])

+ {

+ // Change path separator

+ $this->new_config['img_imagick'] = str_replace('\\', '/', $this->new_config['img_imagick']);

+ $this->new_config['img_imagick'] = str_replace(array('convert', '.exe'), array('', ''), $this->new_config['img_imagick']);

+

+ // Check for trailing slash

+ if (substr($this->new_config['img_imagick'], -1) !== '/')

+ {

+ $this->new_config['img_imagick'] .= '/';

+ }

+ }

+

+ $supported_types = get_supported_image_types();

+

+ // Check Thumbnail Support

+ if (!$this->new_config['img_imagick'] && (!isset($supported_types['format']) || !sizeof($supported_types['format'])))

+ {

+ $this->new_config['img_create_thumbnail'] = 0;

+ }

+

+ $template->assign_vars(array(

+ 'U_SEARCH_IMAGICK' => $this->u_action . '&amp;action=imgmagick',

+ 'S_THUMBNAIL_SUPPORT' => (!$this->new_config['img_imagick'] && (!isset($supported_types['format']) || !sizeof($supported_types['format']))) ? false : true)

+ );

+

+ // Secure Download Options - Same procedure as with banning

+ $allow_deny = ($this->new_config['secure_allow_deny']) ? 'ALLOWED' : 'DISALLOWED';

+

+ $sql = 'SELECT *

+ FROM ' . SITELIST_TABLE;

+ $result = $db->sql_query($sql);

+

+ $defined_ips = '';

+ $ips = array();

+

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $value = ($row['site_ip']) ? $row['site_ip'] : $row['site_hostname'];

+ if ($value)

+ {

+ $defined_ips .= '<option' . (($row['ip_exclude']) ? ' class="sep"' : '') . ' value="' . $row['site_id'] . '">' . $value . '</option>';

+ $ips[$row['site_id']] = $value;

+ }

+ }

+ $db->sql_freeresult($result);

+

+ $template->assign_vars(array(

+ 'S_SECURE_DOWNLOADS' => $this->new_config['secure_downloads'],

+ 'S_DEFINED_IPS' => ($defined_ips != '') ? true : false,

+ 'S_WARNING' => (sizeof($error)) ? true : false,

+

+ 'WARNING_MSG' => implode('<br />', $error),

+ 'DEFINED_IPS' => $defined_ips,

+

+ 'L_SECURE_TITLE' => $user->lang['DEFINE_' . $allow_deny . '_IPS'],

+ 'L_IP_EXCLUDE' => $user->lang['EXCLUDE_FROM_' . $allow_deny . '_IP'],

+ 'L_REMOVE_IPS' => $user->lang['REMOVE_' . $allow_deny . '_IPS'])

+ );

+

+ // Output relevant options

+ foreach ($display_vars['vars'] as $config_key => $vars)

+ {

+ if (!is_array($vars) && strpos($config_key, 'legend') === false)

+ {

+ continue;

+ }

+

+ if (strpos($config_key, 'legend') !== false)

+ {

+ $template->assign_block_vars('options', array(

+ 'S_LEGEND' => true,

+ 'LEGEND' => (isset($user->lang[$vars])) ? $user->lang[$vars] : $vars)

+ );

+

+ continue;

+ }

+

+ $type = explode(':', $vars['type']);

+

+ $l_explain = '';

+ if ($vars['explain'] && isset($vars['lang_explain']))

+ {

+ $l_explain = (isset($user->lang[$vars['lang_explain']])) ? $user->lang[$vars['lang_explain']] : $vars['lang_explain'];

+ }

+ else if ($vars['explain'])

+ {

+ $l_explain = (isset($user->lang[$vars['lang'] . '_EXPLAIN'])) ? $user->lang[$vars['lang'] . '_EXPLAIN'] : '';

+ }

+

+ $content = build_cfg_template($type, $config_key, $this->new_config, $config_key, $vars);

+ if (empty($content))

+ {

+ continue;

+ }

+

+ $template->assign_block_vars('options', array(

+ 'KEY' => $config_key,

+ 'TITLE' => $user->lang[$vars['lang']],

+ 'S_EXPLAIN' => $vars['explain'],

+ 'TITLE_EXPLAIN' => $l_explain,

+ 'CONTENT' => $content,

+ )

+ );

+

+ unset($display_vars['vars'][$config_key]);

+ }

+

+ break;

+

+ case 'extensions':

+

+ if ($submit || request::is_set_post('add_extension_check'))

+ {

+ if ($submit)

+ {

+ // Change Extensions ?

+ $extension_change_list = request_var('extension_change_list', array(0));

+ $group_select_list = request_var('group_select', array(0));

+

+ // Generate correct Change List

+ $extensions = array();

+

+ for ($i = 0, $size = sizeof($extension_change_list); $i < $size; $i++)

+ {

+ $extensions[$extension_change_list[$i]]['group_id'] = $group_select_list[$i];

+ }

+

+ $sql = 'SELECT *

+ FROM ' . EXTENSIONS_TABLE . '

+ ORDER BY extension_id';

+ $result = $db->sql_query($sql);

+

+ while ($row = $db->sql_fetchrow($result))

+ {

+ if ($row['group_id'] != $extensions[$row['extension_id']]['group_id'])

+ {

+ $sql = 'UPDATE ' . EXTENSIONS_TABLE . '

+ SET group_id = ' . (int) $extensions[$row['extension_id']]['group_id'] . '

+ WHERE extension_id = ' . $row['extension_id'];

+ $db->sql_query($sql);

+

+ add_log('admin', 'LOG_ATTACH_EXT_UPDATE', $row['extension']);

+ }

+ }

+ $db->sql_freeresult($result);

+

+ // Delete Extension?

+ $extension_id_list = request_var('extension_id_list', array(0));

+

+ if (sizeof($extension_id_list))

+ {

+ $sql = 'SELECT extension

+ FROM ' . EXTENSIONS_TABLE . '

+ WHERE ' . $db->sql_in_set('extension_id', $extension_id_list);

+ $result = $db->sql_query($sql);

+

+ $extension_list = '';

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $extension_list .= ($extension_list == '') ? $row['extension'] : ', ' . $row['extension'];

+ }

+ $db->sql_freeresult($result);

+

+ $sql = 'DELETE

+ FROM ' . EXTENSIONS_TABLE . '

+ WHERE ' . $db->sql_in_set('extension_id', $extension_id_list);

+ $db->sql_query($sql);

+

+ add_log('admin', 'LOG_ATTACH_EXT_DEL', $extension_list);

+ }

+ }

+

+ // Add Extension?

+ $add_extension = strtolower(request_var('add_extension', ''));

+ $add_extension_group = request_var('add_group_select', 0);

+ $add = request::is_set_post('add_extension_check');

+

+ if ($add_extension && $add)

+ {

+ if (!sizeof($error))

+ {

+ $sql = 'SELECT extension_id

+ FROM ' . EXTENSIONS_TABLE . "

+ WHERE extension = '" . $db->sql_escape($add_extension) . "'";

+ $result = $db->sql_query($sql);

+

+ if ($row = $db->sql_fetchrow($result))

+ {

+ $error[] = sprintf($user->lang['EXTENSION_EXIST'], $add_extension);

+ }

+ $db->sql_freeresult($result);

+

+ if (!sizeof($error))

+ {

+ $sql_ary = array(

+ 'group_id' => $add_extension_group,

+ 'extension' => $add_extension

+ );

+

+ $db->sql_query('INSERT INTO ' . EXTENSIONS_TABLE . ' ' . $db->sql_build_array('INSERT', $sql_ary));

+ add_log('admin', 'LOG_ATTACH_EXT_ADD', $add_extension);

+ }

+ }

+ }

+

+ if (!sizeof($error))

+ {

+ $notify[] = $user->lang['EXTENSIONS_UPDATED'];

+ }

+

+ $cache->destroy('_extensions');

+ }

+

+ $template->assign_vars(array(

+ 'S_EXTENSIONS' => true,

+ 'ADD_EXTENSION' => (isset($add_extension)) ? $add_extension : '',

+ 'GROUP_SELECT_OPTIONS' => (request::is_set_post('add_extension_check')) ? $this->group_select('add_group_select', $add_extension_group, 'extension_group') : $this->group_select('add_group_select', false, 'extension_group'))

+ );

+

+ $sql = 'SELECT *

+ FROM ' . EXTENSIONS_TABLE . '

+ ORDER BY group_id, extension';

+ $result = $db->sql_query($sql);

+

+ if ($row = $db->sql_fetchrow($result))

+ {

+ $old_group_id = $row['group_id'];

+ do

+ {

+ $s_spacer = false;

+

+ $current_group_id = $row['group_id'];

+ if ($old_group_id != $current_group_id)

+ {

+ $s_spacer = true;

+ $old_group_id = $current_group_id;

+ }

+

+ $template->assign_block_vars('extensions', array(

+ 'S_SPACER' => $s_spacer,

+ 'EXTENSION_ID' => $row['extension_id'],

+ 'EXTENSION' => $row['extension'],

+ 'GROUP_OPTIONS' => $this->group_select('group_select[]', $row['group_id']))

+ );

+ }

+ while ($row = $db->sql_fetchrow($result));

+ }

+ $db->sql_freeresult($result);

+

+ break;

+

+ case 'ext_groups':

+

+ $template->assign_var('S_EXTENSION_GROUPS', true);

+

+ if ($submit)

+ {

+ $action = request_var('action', '');

+ $group_id = request_var('g', 0);

+

+ if ($action != 'add' && $action != 'edit')

+ {

+ trigger_error('NO_MODE', E_USER_ERROR);

+ }

+

+ if (!$group_id && $action == 'edit')

+ {

+ trigger_error($user->lang['NO_EXT_GROUP_SPECIFIED'] . adm_back_link($this->u_action), E_USER_WARNING);

+ }

+

+ if ($group_id)

+ {

+ $sql = 'SELECT *

+ FROM ' . EXTENSION_GROUPS_TABLE . "

+ WHERE group_id = $group_id";

+ $result = $db->sql_query($sql);

+ $ext_row = $db->sql_fetchrow($result);

+ $db->sql_freeresult($result);

+

+ if (!$ext_row)

+ {

+ trigger_error($user->lang['NO_EXT_GROUP_SPECIFIED'] . adm_back_link($this->u_action), E_USER_WARNING);

+ }

+ }

+ else

+ {

+ $ext_row = array();

+ }

+

+ $group_name = utf8_normalize_nfc(request_var('group_name', '', true));

+ $new_group_name = ($action == 'add') ? $group_name : (($ext_row['group_name'] != $group_name) ? $group_name : '');

+

+ if (!$group_name)

+ {

+ $error[] = $user->lang['NO_EXT_GROUP_NAME'];

+ }

+

+ // Check New Group Name

+ if ($new_group_name)

+ {

+ $sql = 'SELECT group_name

+ FROM ' . EXTENSION_GROUPS_TABLE;

+ $result = $db->sql_query($sql);

+ $ext_row = $db->sql_fetchrow($result);

+ $db->sql_freeresult($result);

+

+ $clean_group_name = utf8_clean_string($new_group_name);

+

+ while ($row = $db->sql_fetchrow($result))

+ {

+ if (utf8_clean_string($row['group_name']) === $clean_group_name)

+ {

+ $error[] = sprintf($user->lang['EXTENSION_GROUP_EXIST'], $new_group_name);

+ break;

+ }

+ }

+ $db->sql_freeresult($result);

+ }

+

+ if (!sizeof($error))

+ {

+ // Ok, build the update/insert array

+ $upload_icon = request_var('upload_icon', 'no_image');

+ $size_select = request_var('size_select', 'b');

+ $forum_select = request_var('forum_select', false);

+ $allowed_forums = request_var('allowed_forums', array(0));

+ $allow_in_pm = request::is_set_post('allow_in_pm');

+ $max_filesize = request_var('max_filesize', 0);

+ $max_filesize = ($size_select == 'kb') ? round($max_filesize * 1024) : (($size_select == 'mb') ? round($max_filesize * 1048576) : $max_filesize);

+ $allow_group = request::is_set_post('allow_group');

+

+ if ($max_filesize == $config['max_filesize'])

+ {

+ $max_filesize = 0;

+ }

+

+ if (!sizeof($allowed_forums))

+ {

+ $forum_select = false;

+ }

+

+ $group_ary = array(

+ 'group_name' => $group_name,

+ 'cat_id' => request_var('special_category', ATTACHMENT_CATEGORY_NONE),

+ 'allow_group' => ($allow_group) ? 1 : 0,

+ 'upload_icon' => ($upload_icon == 'no_image') ? '' : $upload_icon,

+ 'max_filesize' => $max_filesize,

+ 'allowed_forums'=> ($forum_select) ? serialize($allowed_forums) : '',

+ 'allow_in_pm' => ($allow_in_pm) ? 1 : 0,

+ );

+

+ if ($action == 'add')

+ {

+ $group_ary['download_mode'] = INLINE_LINK;

+ }

+

+ // @TODO: rewrite with the new param db functions

+ $sql = ($action == 'add') ? 'INSERT INTO ' . EXTENSION_GROUPS_TABLE . ' ' : 'UPDATE ' . EXTENSION_GROUPS_TABLE . ' SET ';

+ $sql .= $db->sql_build_array((($action == 'add') ? 'INSERT' : 'UPDATE'), $group_ary);

+ $sql .= ($action == 'edit') ? " WHERE group_id = $group_id" : '';

+

+ $db->sql_query($sql);

+

+ if ($action == 'add')

+ {

+ $group_id = $db->sql_nextid();

+ }

+

+ add_log('admin', 'LOG_ATTACH_EXTGROUP_' . strtoupper($action), $group_name);

+ }

+

+ $extension_list = request_var('extensions', array(0));

+

+ if ($action == 'edit' && sizeof($extension_list))

+ {

+ $sql = 'UPDATE ' . EXTENSIONS_TABLE . "

+ SET group_id = 0

+ WHERE group_id = $group_id";

+ $db->sql_query($sql);

+ }

+

+ if (sizeof($extension_list))

+ {

+ $sql = 'UPDATE ' . EXTENSIONS_TABLE . "

+ SET group_id = $group_id

+ WHERE " . $db->sql_in_set('extension_id', $extension_list);

+ $db->sql_query($sql);

+ }

+

+ $cache->destroy('_extensions');

+

+ if (!sizeof($error))

+ {

+ $notify[] = $user->lang['SUCCESS_EXTENSION_GROUP_' . strtoupper($action)];

+ }

+ }

+

+ $cat_lang = array(

+ ATTACHMENT_CATEGORY_NONE => $user->lang['NO_FILE_CAT'],

+ ATTACHMENT_CATEGORY_IMAGE => $user->lang['CAT_IMAGES'],

+ ATTACHMENT_CATEGORY_WM => $user->lang['CAT_WM_FILES'],

+ ATTACHMENT_CATEGORY_RM => $user->lang['CAT_RM_FILES'],

+ ATTACHMENT_CATEGORY_FLASH => $user->lang['CAT_FLASH_FILES'],

+ ATTACHMENT_CATEGORY_QUICKTIME => $user->lang['CAT_QUICKTIME_FILES'],

+ );

+

+ $group_id = request_var('g', 0);

+ $action = request::is_set_post('add');

+

+ switch ($action)

+ {

+ case 'delete':

+

+ if (confirm_box(true))

+ {

+ $sql = 'SELECT group_name

+ FROM ' . EXTENSION_GROUPS_TABLE . "

+ WHERE group_id = $group_id";

+ $result = $db->sql_query($sql);

+ $group_name = (string) $db->sql_fetchfield('group_name');

+ $db->sql_freeresult($result);

+

+ $sql = 'DELETE

+ FROM ' . EXTENSION_GROUPS_TABLE . "

+ WHERE group_id = $group_id";

+ $db->sql_query($sql);

+

+ // Set corresponding Extensions to a pending Group

+ $sql = 'UPDATE ' . EXTENSIONS_TABLE . "

+ SET group_id = 0

+ WHERE group_id = $group_id";

+ $db->sql_query($sql);

+

+ add_log('admin', 'LOG_ATTACH_EXTGROUP_DEL', $group_name);

+

+ $cache->destroy('_extensions');

+

+ trigger_error($user->lang['EXTENSION_GROUP_DELETED'] . adm_back_link($this->u_action));

+ }

+ else

+ {

+ confirm_box(false, $user->lang['CONFIRM_OPERATION'], build_hidden_fields(array(

+ 'i' => $id,

+ 'mode' => $mode,

+ 'group_id' => $group_id,

+ 'action' => 'delete',

+ )));

+ }

+

+ break;

+

+ case 'edit':

+

+ if (!$group_id)

+ {

+ trigger_error($user->lang['NO_EXT_GROUP_SPECIFIED'] . adm_back_link($this->u_action), E_USER_WARNING);

+ }

+

+ $sql = 'SELECT *

+ FROM ' . EXTENSION_GROUPS_TABLE . "

+ WHERE group_id = $group_id";

+ $result = $db->sql_query($sql);

+ $ext_group_row = $db->sql_fetchrow($result);

+ $db->sql_freeresult($result);

+

+ $forum_ids = (!$ext_group_row['allowed_forums']) ? array() : unserialize(trim($ext_group_row['allowed_forums']));

+

+ // no break;

+

+ case 'add':

+

+ if ($action == 'add')

+ {

+ $ext_group_row = array(

+ 'group_name' => utf8_normalize_nfc(request_var('group_name', '', true)),

+ 'cat_id' => 0,

+ 'allow_group' => 1,

+ 'allow_in_pm' => 1,

+ 'upload_icon' => '',

+ 'max_filesize' => 0,

+ );

+

+ $forum_ids = array();

+ }

+

+ $extensions = array();

+

+ $sql = 'SELECT *

+ FROM ' . EXTENSIONS_TABLE . "

+ WHERE group_id = $group_id

+ OR group_id = 0

+ ORDER BY extension";

+ $result = $db->sql_query($sql);

+ $extensions = $db->sql_fetchrowset($result);

+ $db->sql_freeresult($result);

+

+ if ($ext_group_row['max_filesize'] == 0)

+ {

+ $ext_group_row['max_filesize'] = (int) $config['max_filesize'];

+ }

+

+ $size_format = ($ext_group_row['max_filesize'] >= 1048576) ? 'mb' : (($ext_group_row['max_filesize'] >= 1024) ? 'kb' : 'b');

+ $ext_group_row['max_filesize'] = get_formatted_filesize($ext_group_row['max_filesize'], false);

+

+ $img_path = $config['upload_icons_path'];

+

+ $filename_list = '';

+ $no_image_select = false;

+

+ $imglist = filelist(PHPBB_ROOT_PATH . $img_path);

+

+ if (sizeof($imglist))

+ {

+ $imglist = array_values($imglist);

+ $imglist = $imglist[0];

+

+ foreach ($imglist as $key => $img)

+ {

+ if (!$ext_group_row['upload_icon'])

+ {

+ $no_image_select = true;

+ $selected = '';

+ }

+ else

+ {

+ $selected = ($ext_group_row['upload_icon'] == $img) ? ' selected="selected"' : '';

+ }

+

+ if (strlen($img) > 255)

+ {

+ continue;

+ }

+

+ $filename_list .= '<option value="' . htmlspecialchars($img) . '"' . $selected . '>' . htmlspecialchars($img) . '</option>';

+ }

+ }

+

+ $i = 0;

+ $assigned_extensions = '';

+ foreach ($extensions as $num => $row)

+ {

+ if ($row['group_id'] == $group_id && $group_id)

+ {

+ $assigned_extensions .= ($i) ? ', ' . $row['extension'] : $row['extension'];

+ $i++;

+ }

+ }

+

+ $s_extension_options = '';

+ foreach ($extensions as $row)

+ {

+ $s_extension_options .= '<option' . ((!$row['group_id']) ? ' class="disabled"' : '') . ' value="' . $row['extension_id'] . '"' . (($row['group_id'] == $group_id && $group_id) ? ' selected="selected"' : '') . '>' . $row['extension'] . '</option>';

+ }

+

+ $template->assign_vars(array(

+ 'PHPBB_ROOT_PATH' => PHPBB_ROOT_PATH,

+ 'IMG_PATH' => $img_path,

+ 'ACTION' => $action,

+ 'GROUP_ID' => $group_id,

+ 'GROUP_NAME' => $ext_group_row['group_name'],

+ 'ALLOW_GROUP' => $ext_group_row['allow_group'],

+ 'ALLOW_IN_PM' => $ext_group_row['allow_in_pm'],

+ 'UPLOAD_ICON_SRC' => PHPBB_ROOT_PATH . $img_path . '/' . $ext_group_row['upload_icon'],

+ 'EXTGROUP_FILESIZE' => $ext_group_row['max_filesize'],

+ 'ASSIGNED_EXTENSIONS' => $assigned_extensions,

+

+ 'S_CATEGORY_SELECT' => $this->category_select('special_category', $group_id, 'category'),

+ 'S_EXT_GROUP_SIZE_OPTIONS' => size_select_options($size_format),

+ 'S_EXTENSION_OPTIONS' => $s_extension_options,

+ 'S_FILENAME_LIST' => $filename_list,

+ 'S_EDIT_GROUP' => true,

+ 'S_NO_IMAGE' => $no_image_select,

+ 'S_FORUM_IDS' => (sizeof($forum_ids)) ? true : false,

+

+ 'U_EXTENSIONS' => append_sid(PHPBB_ADMIN_PATH . 'index.' . PHP_EXT, "i=$id&amp;mode=extensions"),

+ 'U_BACK' => $this->u_action,

+

+ 'L_LEGEND' => $user->lang[strtoupper($action) . '_EXTENSION_GROUP'])

+ );

+

+ $s_forum_id_options = '';

+

+ /** @todo use in-built function **/

+

+ $sql = 'SELECT forum_id, forum_name, parent_id, forum_type, left_id, right_id

+ FROM ' . FORUMS_TABLE . '

+ ORDER BY left_id ASC';

+ $result = $db->sql_query($sql, 600);

+

+ $right = $cat_right = $padding_inc = 0;

+ $padding = $forum_list = $holding = '';

+ $padding_store = array('0' => '');

+

+ while ($row = $db->sql_fetchrow($result))

+ {

+ if ($row['forum_type'] == FORUM_CAT && ($row['left_id'] + 1 == $row['right_id']))

+ {

+ // Non-postable forum with no subforums, don't display

+ continue;

+ }

+

+ if (!$auth->acl_get('f_list', $row['forum_id']))

+ {

+ // if the user does not have permissions to list this forum skip

+ continue;

+ }

+

+ if ($row['left_id'] < $right)

+ {

+ $padding .= '&nbsp; &nbsp;';

+ $padding_store[$row['parent_id']] = $padding;

+ }

+ else if ($row['left_id'] > $right + 1)

+ {

+ $padding = empty($padding_store[$row['parent_id']]) ? '' : $padding_store[$row['parent_id']];

+ }

+

+ $right = $row['right_id'];

+

+ $selected = (in_array($row['forum_id'], $forum_ids)) ? ' selected="selected"' : '';

+

+ if ($row['left_id'] > $cat_right)

+ {

+ // make sure we don't forget anything

+ $s_forum_id_options .= $holding;

+ $holding = '';

+ }

+

+ if ($row['right_id'] - $row['left_id'] > 1)

+ {

+ $cat_right = max($cat_right, $row['right_id']);

+

+ $holding .= '<option value="' . $row['forum_id'] . '"' . (($row['forum_type'] == FORUM_POST) ? ' class="sep"' : '') . $selected . '>' . $padding . $row['forum_name'] . '</option>';

+ }

+ else

+ {

+ $s_forum_id_options .= $holding . '<option value="' . $row['forum_id'] . '"' . (($row['forum_type'] == FORUM_POST) ? ' class="sep"' : '') . $selected . '>' . $padding . $row['forum_name'] . '</option>';

+ $holding = '';

+ }

+ }

+

+ if ($holding)

+ {

+ $s_forum_id_options .= $holding;

+ }

+

+ $db->sql_freeresult($result);

+ unset($padding_store);

+

+ $template->assign_vars(array(

+ 'S_FORUM_ID_OPTIONS' => $s_forum_id_options)

+ );

+

+ break;

+ }

+

+ $sql = 'SELECT *

+ FROM ' . EXTENSION_GROUPS_TABLE . '

+ ORDER BY allow_group DESC, allow_in_pm DESC, group_name';

+ $result = $db->sql_query($sql);

+

+ $old_allow_group = $old_allow_pm = 1;

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $s_add_spacer = ($old_allow_group != $row['allow_group'] || $old_allow_pm != $row['allow_in_pm']) ? true : false;

+

+ $template->assign_block_vars('groups', array(

+ 'S_ADD_SPACER' => $s_add_spacer,

+ 'S_ALLOWED_IN_PM' => ($row['allow_in_pm']) ? true : false,

+ 'S_GROUP_ALLOWED' => ($row['allow_group']) ? true : false,

+

+ 'U_EDIT' => $this->u_action . "&amp;action=edit&amp;g={$row['group_id']}",

+ 'U_DELETE' => $this->u_action . "&amp;action=delete&amp;g={$row['group_id']}",

+

+ 'GROUP_NAME' => $row['group_name'],

+ 'CATEGORY' => $cat_lang[$row['cat_id']],

+ )

+ );

+

+ $old_allow_group = $row['allow_group'];

+ $old_allow_pm = $row['allow_in_pm'];

+ }

+ $db->sql_freeresult($result);

+

+ break;

+

+ case 'orphan':

+

+ if ($submit)

+ {

+ $delete_files = array_keys(request::variable('delete', array('' => 0), false, request::POST));

+ $add_files = array_keys(request::variable('add', array('' => 0), false, request::POST));

+ $post_ids = request_var('post_id', array('' => 0));

+

+ if (sizeof($delete_files))

+ {

+ $sql = 'SELECT *

+ FROM ' . ATTACHMENTS_TABLE . '

+ WHERE ' . $db->sql_in_set('attach_id', $delete_files) . '

+ AND is_orphan = 1';

+ $result = $db->sql_query($sql);

+

+ $delete_files = array();

+ while ($row = $db->sql_fetchrow($result))

+ {

+ phpbb_unlink($row['physical_filename'], 'file');

+

+ if ($row['thumbnail'])

+ {

+ phpbb_unlink($row['physical_filename'], 'thumbnail');

+ }

+

+ $delete_files[$row['attach_id']] = $row['real_filename'];

+ }

+ $db->sql_freeresult($result);

+ }

+

+ if (sizeof($delete_files))

+ {

+ $sql = 'DELETE FROM ' . ATTACHMENTS_TABLE . '

+ WHERE ' . $db->sql_in_set('attach_id', array_keys($delete_files));

+ $db->sql_query($sql);

+

+ add_log('admin', 'LOG_ATTACH_ORPHAN_DEL', implode(', ', $delete_files));

+ $notify[] = sprintf($user->lang['LOG_ATTACH_ORPHAN_DEL'], implode(', ', $delete_files));

+ }

+

+ $upload_list = array();

+ foreach ($add_files as $attach_id)

+ {

+ if (!isset($delete_files[$attach_id]) && !empty($post_ids[$attach_id]))

+ {

+ $upload_list[$attach_id] = $post_ids[$attach_id];

+ }

+ }

+ unset($add_files);

+

+ if (sizeof($upload_list))

+ {

+ $template->assign_var('S_UPLOADING_FILES', true);

+

+ $sql = 'SELECT forum_id, forum_name

+ FROM ' . FORUMS_TABLE;

+ $result = $db->sql_query($sql);

+

+ $forum_names = array();

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $forum_names[$row['forum_id']] = $row['forum_name'];

+ }

+ $db->sql_freeresult($result);

+

+ $sql = 'SELECT forum_id, topic_id, post_id, poster_id

+ FROM ' . POSTS_TABLE . '

+ WHERE ' . $db->sql_in_set('post_id', $upload_list);

+ $result = $db->sql_query($sql);

+

+ $post_info = array();

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $post_info[$row['post_id']] = $row;

+ }

+ $db->sql_freeresult($result);

+

+ // Select those attachments we want to change...

+ $sql = 'SELECT *

+ FROM ' . ATTACHMENTS_TABLE . '

+ WHERE ' . $db->sql_in_set('attach_id', array_keys($upload_list)) . '

+ AND is_orphan = 1';

+ $result = $db->sql_query($sql);

+

+ $files_added = $space_taken = 0;

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $post_row = $post_info[$upload_list[$row['attach_id']]];

+

+ $template->assign_block_vars('upload', array(

+ 'FILE_INFO' => sprintf($user->lang['UPLOADING_FILE_TO'], $row['real_filename'], $post_row['post_id']),

+ 'S_DENIED' => (!$auth->acl_get('f_attach', $post_row['forum_id'])) ? true : false,

+ 'L_DENIED' => (!$auth->acl_get('f_attach', $post_row['forum_id'])) ? sprintf($user->lang['UPLOAD_DENIED_FORUM'], $forum_names[$row['forum_id']]) : '')

+ );

+

+ if (!$auth->acl_get('f_attach', $post_row['forum_id']))

+ {

+ continue;

+ }

+

+ // Adjust attachment entry

+ $sql_ary = array(

+ 'in_message' => 0,

+ 'is_orphan' => 0,

+ 'poster_id' => $post_row['poster_id'],

+ 'post_msg_id' => $post_row['post_id'],

+ 'topic_id' => $post_row['topic_id'],

+ );

+

+ $sql = 'UPDATE ' . ATTACHMENTS_TABLE . '

+ SET ' . $db->sql_build_array('UPDATE', $sql_ary) . '

+ WHERE attach_id = ' . $row['attach_id'];

+ $db->sql_query($sql);

+

+ $sql = 'UPDATE ' . POSTS_TABLE . '

+ SET post_attachment = 1

+ WHERE post_id = ' . $post_row['post_id'];

+ $db->sql_query($sql);

+

+ $sql = 'UPDATE ' . TOPICS_TABLE . '

+ SET topic_attachment = 1

+ WHERE topic_id = ' . $post_row['topic_id'];

+ $db->sql_query($sql);

+

+ $space_taken += $row['filesize'];

+ $files_added++;

+

+ add_log('admin', 'LOG_ATTACH_FILEUPLOAD', $post_row['post_id'], $row['real_filename']);

+ }

+ $db->sql_freeresult($result);

+

+ if ($files_added)

+ {

+ set_config('upload_dir_size', $config['upload_dir_size'] + $space_taken, true);

+ set_config('num_files', $config['num_files'] + $files_added, true);

+ }

+ }

+ }

+

+ $template->assign_vars(array(

+ 'S_ORPHAN' => true)

+ );

+

+ // Just get the files with is_orphan set and older than 3 hours

+ $sql = 'SELECT *

+ FROM ' . ATTACHMENTS_TABLE . '

+ WHERE is_orphan = 1

+ AND filetime < ' . (time() - 3*60*60) . '

+ ORDER BY filetime DESC';

+ $result = $db->sql_query($sql);

+

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $template->assign_block_vars('orphan', array(

+ 'FILESIZE' => get_formatted_filesize($row['filesize']),

+ 'FILETIME' => $user->format_date($row['filetime']),

+ 'REAL_FILENAME' => basename($row['real_filename']),

+ 'PHYSICAL_FILENAME' => basename($row['physical_filename']),

+ 'ATTACH_ID' => $row['attach_id'],

+ 'POST_IDS' => (!empty($post_ids[$row['attach_id']])) ? $post_ids[$row['attach_id']] : '',

+ 'U_FILE' => append_sid('download/file', 'mode=view&amp;id=' . $row['attach_id']))

+ );

+ }

+ $db->sql_freeresult($result);

+

+ break;

+ }

+

+ if (sizeof($error))

+ {

+ $template->assign_vars(array(

+ 'S_WARNING' => true,

+ 'WARNING_MSG' => implode('<br />', $error))

+ );

+ }

+

+ if (sizeof($notify))

+ {

+ $template->assign_vars(array(

+ 'S_NOTIFY' => true,

+ 'NOTIFY_MSG' => implode('<br />', $notify))

+ );

+ }

+ }

+

+ /**

+ * Build Select for category items

+ */

+ function category_select($select_name, $group_id = false, $key = '')

+ {

+ global $db, $user;

+

+ $types = array(

+ ATTACHMENT_CATEGORY_NONE => $user->lang['NO_FILE_CAT'],

+ ATTACHMENT_CATEGORY_IMAGE => $user->lang['CAT_IMAGES'],

+ ATTACHMENT_CATEGORY_WM => $user->lang['CAT_WM_FILES'],

+ ATTACHMENT_CATEGORY_RM => $user->lang['CAT_RM_FILES'],

+ ATTACHMENT_CATEGORY_FLASH => $user->lang['CAT_FLASH_FILES'],

+ ATTACHMENT_CATEGORY_QUICKTIME => $user->lang['CAT_QUICKTIME_FILES'],

+ );

+

+ if ($group_id)

+ {

+ $sql = 'SELECT cat_id

+ FROM ' . EXTENSION_GROUPS_TABLE . '

+ WHERE group_id = ' . (int) $group_id;

+ $result = $db->sql_query($sql);

+

+ $cat_type = (!($row = $db->sql_fetchrow($result))) ? ATTACHMENT_CATEGORY_NONE : $row['cat_id'];

+

+ $db->sql_freeresult($result);

+ }

+ else

+ {

+ $cat_type = ATTACHMENT_CATEGORY_NONE;

+ }

+

+ $group_select = '<select name="' . $select_name . '"' . (($key) ? ' id="' . $key . '"' : '') . '>';

+

+ foreach ($types as $type => $mode)

+ {

+ $selected = ($type == $cat_type) ? ' selected="selected"' : '';

+ $group_select .= '<option value="' . $type . '"' . $selected . '>' . $mode . '</option>';

+ }

+

+ $group_select .= '</select>';

+

+ return $group_select;

+ }

+

+ /**

+ * Extension group select

+ */

+ function group_select($select_name, $default_group = false, $key = '')

+ {

+ global $db, $user;

+

+ $group_select = '<select name="' . $select_name . '"' . (($key) ? ' id="' . $key . '"' : '') . '>';

+

+ $sql = 'SELECT group_id, group_name

+ FROM ' . EXTENSION_GROUPS_TABLE . '

+ ORDER BY group_name';

+ $result = $db->sql_query($sql);

+

+ $group_name = array();

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $group_name[] = $row;

+ }

+ $db->sql_freeresult($result);

+

+ $row['group_id'] = 0;

+ $row['group_name'] = $user->lang['NOT_ASSIGNED'];

+ $group_name[] = $row;

+

+ for ($i = 0; $i < sizeof($group_name); $i++)

+ {

+ if ($default_group === false)

+ {

+ $selected = ($i == 0) ? ' selected="selected"' : '';

+ }

+ else

+ {

+ $selected = ($group_name[$i]['group_id'] == $default_group) ? ' selected="selected"' : '';

+ }

+

+ $group_select .= '<option value="' . $group_name[$i]['group_id'] . '"' . $selected . '>' . $group_name[$i]['group_name'] . '</option>';

+ }

+

+ $group_select .= '</select>';

+

+ return $group_select;

+ }

+

+ /**

+ * Search Imagick

+ */

+ function search_imagemagick()

+ {

+ $imagick = '';

+

+ $exe = ((defined('PHP_OS')) && (preg_match('#^win#i', PHP_OS))) ? '.exe' : '';

+

+ $magic_home = getenv('MAGICK_HOME');

+

+ if (empty($magic_home))

+ {

+ $locations = array('C:/WINDOWS/', 'C:/WINNT/', 'C:/WINDOWS/SYSTEM/', 'C:/WINNT/SYSTEM/', 'C:/WINDOWS/SYSTEM32/', 'C:/WINNT/SYSTEM32/', '/usr/bin/', '/usr/sbin/', '/usr/local/bin/', '/usr/local/sbin/', '/opt/', '/usr/imagemagick/', '/usr/bin/imagemagick/');

+ $path_locations = str_replace('\\', '/', (explode(($exe) ? ';' : ':', getenv('PATH'))));

+

+ $locations = array_merge($path_locations, $locations);

+

+ foreach ($locations as $location)

+ {

+ // The path might not end properly, fudge it

+ if (substr($location, -1) !== '/')

+ {

+ $location .= '/';

+ }

+

+ if (@file_exists($location) && @is_readable($location . 'mogrify' . $exe) && @filesize($location . 'mogrify' . $exe) > 3000)

+ {

+ $imagick = str_replace('\\', '/', $location);

+ continue;

+ }

+ }

+ }

+ else

+ {

+ $imagick = str_replace('\\', '/', $magic_home);

+ }

+

+ return $imagick;

+ }

+

+ /**

+ * Test Settings

+ */

+ function test_upload(&$error, $upload_dir, $create_directory = false)

+ {

+ global $user;

+

+ // Does the target directory exist, is it a directory and writable.

+ if ($create_directory)

+ {

+ if (!file_exists(PHPBB_ROOT_PATH . $upload_dir))

+ {

+ @mkdir(PHPBB_ROOT_PATH . $upload_dir, 0777);

+ phpbb_chmod(PHPBB_ROOT_PATH . $upload_dir, CHMOD_READ | CHMOD_WRITE);

+ }

+ }

+

+ if (!file_exists(PHPBB_ROOT_PATH . $upload_dir))

+ {

+ $error[] = sprintf($user->lang['NO_UPLOAD_DIR'], $upload_dir);

+ return;

+ }

+

+ if (!is_dir(PHPBB_ROOT_PATH . $upload_dir))

+ {

+ $error[] = sprintf($user->lang['UPLOAD_NOT_DIR'], $upload_dir);

+ return;

+ }

+

+ if (!is_writable(PHPBB_ROOT_PATH . $upload_dir))

+ {

+ $error[] = sprintf($user->lang['NO_WRITE_UPLOAD'], $upload_dir);

+ return;

+ }

+ }

+

+ /**

+ * Perform operations on sites for external linking

+ */

+ function perform_site_list()

+ {

+ global $db, $user;

+

+ if (request::is_set('securesubmit'))

+ {

+ // Grab the list of entries

+ $ips = request_var('ips', '');

+ $ip_list = array_unique(explode("\n", $ips));

+ $ip_list_log = implode(', ', $ip_list);

+

+ $ip_exclude = (int) request::variable('ipexclude', false, false, request::POST);

+

+ $iplist = array();

+ $hostlist = array();

+

+ foreach ($ip_list as $item)

+ {

+ if (preg_match('#^([0-9]{1,3})\.([0-9]{1,3})\.([0-9]{1,3})\.([0-9]{1,3})[ ]*\-[ ]*([0-9]{1,3})\.([0-9]{1,3})\.([0-9]{1,3})\.([0-9]{1,3})$#', trim($item), $ip_range_explode))

+ {

+ // Don't ask about all this, just don't ask ... !

+ $ip_1_counter = $ip_range_explode[1];

+ $ip_1_end = $ip_range_explode[5];

+

+ while ($ip_1_counter <= $ip_1_end)

+ {

+ $ip_2_counter = ($ip_1_counter == $ip_range_explode[1]) ? $ip_range_explode[2] : 0;

+ $ip_2_end = ($ip_1_counter < $ip_1_end) ? 254 : $ip_range_explode[6];

+

+ if ($ip_2_counter == 0 && $ip_2_end == 254)

+ {

+ $ip_2_counter = 256;

+ $ip_2_fragment = 256;

+

+ $iplist[] = "'$ip_1_counter.*'";

+ }

+

+ while ($ip_2_counter <= $ip_2_end)

+ {

+ $ip_3_counter = ($ip_2_counter == $ip_range_explode[2] && $ip_1_counter == $ip_range_explode[1]) ? $ip_range_explode[3] : 0;

+ $ip_3_end = ($ip_2_counter < $ip_2_end || $ip_1_counter < $ip_1_end) ? 254 : $ip_range_explode[7];

+

+ if ($ip_3_counter == 0 && $ip_3_end == 254)

+ {

+ $ip_3_counter = 256;

+ $ip_3_fragment = 256;

+

+ $iplist[] = "'$ip_1_counter.$ip_2_counter.*'";

+ }

+

+ while ($ip_3_counter <= $ip_3_end)

+ {

+ $ip_4_counter = ($ip_3_counter == $ip_range_explode[3] && $ip_2_counter == $ip_range_explode[2] && $ip_1_counter == $ip_range_explode[1]) ? $ip_range_explode[4] : 0;

+ $ip_4_end = ($ip_3_counter < $ip_3_end || $ip_2_counter < $ip_2_end) ? 254 : $ip_range_explode[8];

+

+ if ($ip_4_counter == 0 && $ip_4_end == 254)

+ {

+ $ip_4_counter = 256;

+ $ip_4_fragment = 256;

+

+ $iplist[] = "'$ip_1_counter.$ip_2_counter.$ip_3_counter.*'";

+ }

+

+ while ($ip_4_counter <= $ip_4_end)

+ {

+ $iplist[] = "'$ip_1_counter.$ip_2_counter.$ip_3_counter.$ip_4_counter'";

+ $ip_4_counter++;

+ }

+ $ip_3_counter++;

+ }

+ $ip_2_counter++;

+ }

+ $ip_1_counter++;

+ }

+ }

+ else if (preg_match('#^([0-9]{1,3})\.([0-9\*]{1,3})\.([0-9\*]{1,3})\.([0-9\*]{1,3})$#', trim($item)) || preg_match('#^[a-f0-9:]+\*?$#i', trim($item)))

+ {

+ $iplist[] = "'" . trim($item) . "'";

+ }

+ else if (preg_match('#^([\w\-_]\.?){2,}$#is', trim($item)))

+ {

+ $hostlist[] = "'" . trim($item) . "'";

+ }

+ else if (preg_match("#^([a-z0-9\-\*\._/]+?)$#is", trim($item)))

+ {

+ $hostlist[] = "'" . trim($item) . "'";

+ }

+ }

+

+ $sql = 'SELECT site_ip, site_hostname

+ FROM ' . SITELIST_TABLE . "

+ WHERE ip_exclude = $ip_exclude";

+ $result = $db->sql_query($sql);

+

+ if ($row = $db->sql_fetchrow($result))

+ {

+ $iplist_tmp = array();

+ $hostlist_tmp = array();

+ do

+ {

+ if ($row['site_ip'])

+ {

+ if (strlen($row['site_ip']) > 40)

+ {

+ continue;

+ }

+

+ $iplist_tmp[] = "'" . $row['site_ip'] . "'";

+ }

+ else if ($row['site_hostname'])

+ {

+ if (strlen($row['site_hostname']) > 255)

+ {

+ continue;

+ }

+

+ $hostlist_tmp[] = "'" . $row['site_hostname'] . "'";

+ }

+ // break;

+ }

+ while ($row = $db->sql_fetchrow($result));

+

+ $iplist = array_unique(array_diff($iplist, $iplist_tmp));

+ $hostlist = array_unique(array_diff($hostlist, $hostlist_tmp));

+ unset($iplist_tmp);

+ unset($hostlist_tmp);

+ }

+ $db->sql_freeresult($result);

+

+ if (sizeof($iplist))

+ {

+ foreach ($iplist as $ip_entry)

+ {

+ $sql = 'INSERT INTO ' . SITELIST_TABLE . " (site_ip, ip_exclude)

+ VALUES ($ip_entry, $ip_exclude)";

+ $db->sql_query($sql);

+ }

+ }

+

+ if (sizeof($hostlist))

+ {

+ foreach ($hostlist as $host_entry)

+ {

+ $sql = 'INSERT INTO ' . SITELIST_TABLE . " (site_hostname, ip_exclude)

+ VALUES ($host_entry, $ip_exclude)";

+ $db->sql_query($sql);

+ }

+ }

+

+ if (!empty($ip_list_log))

+ {

+ // Update log

+ $log_entry = ($ip_exclude) ? 'LOG_DOWNLOAD_EXCLUDE_IP' : 'LOG_DOWNLOAD_IP';

+ add_log('admin', $log_entry, $ip_list_log);

+ }

+

+ trigger_error($user->lang['SECURE_DOWNLOAD_UPDATE_SUCCESS'] . adm_back_link($this->u_action));

+ }

+ else if (request::is_set_post('unsecuresubmit'))

+ {

+ $unip_sql = request_var('unip', array(0));

+

+ if (sizeof($unip_sql))

+ {

+ $l_unip_list = '';

+

+ // Grab details of ips for logging information later

+ $sql = 'SELECT site_ip, site_hostname

+ FROM ' . SITELIST_TABLE . '

+ WHERE ' . $db->sql_in_set('site_id', $unip_sql);

+ $result = $db->sql_query($sql);

+

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $l_unip_list .= (($l_unip_list != '') ? ', ' : '') . (($row['site_ip']) ? $row['site_ip'] : $row['site_hostname']);

+ }

+ $db->sql_freeresult($result);

+

+ $sql = 'DELETE FROM ' . SITELIST_TABLE . '

+ WHERE ' . $db->sql_in_set('site_id', $unip_sql);

+ $db->sql_query($sql);

+

+ add_log('admin', 'LOG_DOWNLOAD_REMOVE_IP', $l_unip_list);

+ }

+

+ trigger_error($user->lang['SECURE_DOWNLOAD_UPDATE_SUCCESS'] . adm_back_link($this->u_action));

+ }

+ }

+

+ /**

+ * Write display_order config field

+ */

+ function display_order($value, $key = '')

+ {

+ $radio_ary = array(0 => 'DESCENDING', 1 => 'ASCENDING');

+

+ return h_radio('config[display_order]', $radio_ary, $value, $key);

+ }

+

+ /**

+ * Adjust all three max_filesize config vars for display

+ */

+ function max_filesize($value, $key = '')

+ {

+ // Determine size var and adjust the value accordingly

+ $size_var = ($value >= 1048576) ? 'mb' : (($value >= 1024) ? 'kb' : 'b');

+ $value = get_formatted_filesize($value, false);

+

+ return '<input type="text" id="' . $key . '" size="8" maxlength="15" name="config[' . $key . ']" value="' . $value . '" /> <select name="' . $key . '">' . size_select_options($size_var) . '</select>';

+ }

+

+ /**

+ * Write secure_allow_deny config field

+ */

+ function select_allow_deny($value, $key = '')

+ {

+ $radio_ary = array(1 => 'ORDER_ALLOW_DENY', 0 => 'ORDER_DENY_ALLOW');

+

+ return h_radio('config[' . $key . ']', $radio_ary, $value, $key);

+ }

+

+}

+

+?> \ No newline at end of file

+<?php

+/**

+*

+* @package acp

+* @version $Id$

+* @copyright (c) 2005 phpBB Group

+* @license http://opensource.org/licenses/gpl-license.php GNU Public License

+*

+*/

+

+/**

+* @ignore

+*/

+if (!defined('IN_PHPBB'))

+{

+ exit;

+}

+

+/**

+* @package acp

+*/

+class acp_ban

+{

+ var $u_action;

+

+ function main($id, $mode)

+ {

+ global $config, $db, $user, $auth, $template, $cache;

+

+ include(PHPBB_ROOT_PATH . 'includes/functions_user.' . PHP_EXT);

+

+ $bansubmit = request::is_set_post('bansubmit');

+ $unbansubmit = request::is_set_post('unbansubmit');

+ $current_time = time();

+

+ $user->add_lang(array('acp/ban', 'acp/users'));

+ $this->tpl_name = 'acp_ban';

+ $form_key = 'acp_ban';

+ add_form_key($form_key);

+

+ if (($bansubmit || $unbansubmit) && !check_form_key($form_key))

+ {

+ trigger_error($user->lang['FORM_INVALID'] . adm_back_link($this->u_action), E_USER_WARNING);

+ }

+

+ // Ban submitted?

+ if ($bansubmit)

+ {

+ // Grab the list of entries

+ $ban = utf8_normalize_nfc(request_var('ban', '', true));

+ $ban_len = request_var('banlength', 0);

+ $ban_len_other = request_var('banlengthother', '');

+ $ban_exclude = request_var('banexclude', 0);

+ $ban_reason = utf8_normalize_nfc(request_var('banreason', '', true));

+ $ban_give_reason = utf8_normalize_nfc(request_var('bangivereason', '', true));

+

+ if ($ban)

+ {

+ user_ban($mode, $ban, $ban_len, $ban_len_other, $ban_exclude, $ban_reason, $ban_give_reason);

+

+ trigger_error($user->lang['BAN_UPDATE_SUCCESSFUL'] . adm_back_link($this->u_action));

+ }

+ }

+ else if ($unbansubmit)

+ {

+ $ban = request_var('unban', array(''));

+

+ if ($ban)

+ {

+ user_unban($mode, $ban);

+

+ trigger_error($user->lang['BAN_UPDATE_SUCCESSFUL'] . adm_back_link($this->u_action));

+ }

+ }

+

+ // Define language vars

+ $this->page_title = $user->lang[strtoupper($mode) . '_BAN'];

+

+ $l_ban_explain = $user->lang[strtoupper($mode) . '_BAN_EXPLAIN'];

+ $l_ban_exclude_explain = $user->lang[strtoupper($mode) . '_BAN_EXCLUDE_EXPLAIN'];

+ $l_unban_title = $user->lang[strtoupper($mode) . '_UNBAN'];

+ $l_unban_explain = $user->lang[strtoupper($mode) . '_UNBAN_EXPLAIN'];

+ $l_no_ban_cell = $user->lang[strtoupper($mode) . '_NO_BANNED'];

+

+ switch ($mode)

+ {

+ case 'user':

+ $l_ban_cell = $user->lang['USERNAME'];

+ break;

+

+ case 'ip':

+ $l_ban_cell = $user->lang['IP_HOSTNAME'];

+ break;

+

+ case 'email':

+ $l_ban_cell = $user->lang['EMAIL_ADDRESS'];

+ break;

+ }

+

+ self::display_ban_options($mode);

+

+ $template->assign_vars(array(

+ 'L_TITLE' => $this->page_title,

+ 'L_EXPLAIN' => $l_ban_explain,

+ 'L_UNBAN_TITLE' => $l_unban_title,

+ 'L_UNBAN_EXPLAIN' => $l_unban_explain,

+ 'L_BAN_CELL' => $l_ban_cell,

+ 'L_BAN_EXCLUDE_EXPLAIN' => $l_ban_exclude_explain,

+ 'L_NO_BAN_CELL' => $l_no_ban_cell,

+

+ 'S_USERNAME_BAN' => ($mode == 'user') ? true : false,

+

+ 'U_ACTION' => $this->u_action,

+ 'U_FIND_USERNAME' => append_sid('memberlist', 'mode=searchuser&amp;form=acp_ban&amp;field=ban'),

+ ));

+ }

+

+ /**

+ * Display ban options

+ */

+ static function display_ban_options($mode)

+ {

+ global $user, $db, $template;

+

+ // Ban length options

+ $ban_end_text = array(0 => $user->lang['PERMANENT'], 30 => $user->lang['30_MINS'], 60 => $user->lang['1_HOUR'], 360 => $user->lang['6_HOURS'], 1440 => $user->lang['1_DAY'], 10080 => $user->lang['7_DAYS'], 20160 => $user->lang['2_WEEKS'], 40320 => $user->lang['1_MONTH'], -1 => $user->lang['UNTIL'] . ' -&gt; ');

+

+ $ban_end_options = '';

+ foreach ($ban_end_text as $length => $text)

+ {

+ $ban_end_options .= '<option value="' . $length . '">' . $text . '</option>';

+ }

+

+ switch ($mode)

+ {

+ case 'user':

+

+ $field = 'username';

+ $l_ban_cell = $user->lang['USERNAME'];

+

+ $sql = 'SELECT b.*, u.user_id, u.username, u.username_clean

+ FROM ' . BANLIST_TABLE . ' b, ' . USERS_TABLE . ' u

+ WHERE (b.ban_end >= ' . time() . '

+ OR b.ban_end = 0)

+ AND u.user_id = b.ban_userid

+ ORDER BY u.username_clean ASC';

+ break;

+

+ case 'ip':

+

+ $field = 'ban_ip';

+ $l_ban_cell = $user->lang['IP_HOSTNAME'];

+

+ $sql = 'SELECT *

+ FROM ' . BANLIST_TABLE . '

+ WHERE (ban_end >= ' . time() . "

+ OR ban_end = 0)

+ AND ban_ip <> ''";

+ break;

+

+ case 'email':

+

+ $field = 'ban_email';

+ $l_ban_cell = $user->lang['EMAIL_ADDRESS'];

+

+ $sql = 'SELECT *

+ FROM ' . BANLIST_TABLE . '

+ WHERE (ban_end >= ' . time() . "

+ OR ban_end = 0)

+ AND ban_email <> ''";

+ break;

+ }

+ $result = $db->sql_query($sql);

+

+ $banned_options = '';

+ $ban_length = $ban_reasons = $ban_give_reasons = array();

+

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $banned_options .= '<option' . (($row['ban_exclude']) ? ' class="sep"' : '') . ' value="' . $row['ban_id'] . '">' . $row[$field] . '</option>';

+

+ $time_length = ($row['ban_end']) ? ($row['ban_end'] - $row['ban_start']) / 60 : 0;

+ $ban_length[$row['ban_id']] = (isset($ban_end_text[$time_length])) ? $ban_end_text[$time_length] : $user->lang['UNTIL'] . ' -> ' . $user->format_date($row['ban_end']);

+

+ $ban_reasons[$row['ban_id']] = $row['ban_reason'];

+ $ban_give_reasons[$row['ban_id']] = $row['ban_give_reason'];

+ }

+ $db->sql_freeresult($result);

+

+ if (sizeof($ban_length))

+ {

+ foreach ($ban_length as $ban_id => $length)

+ {

+ $template->assign_block_vars('ban_length', array(

+ 'BAN_ID' => (int) $ban_id,

+ 'LENGTH' => $length,

+ 'A_LENGTH' => addslashes($length),

+ ));

+ }

+ }

+

+ if (sizeof($ban_reasons))

+ {

+ foreach ($ban_reasons as $ban_id => $reason)

+ {

+ $template->assign_block_vars('ban_reason', array(

+ 'BAN_ID' => $ban_id,

+ 'REASON' => $reason,

+ 'A_REASON' => addslashes(htmlspecialchars_decode($reason)),

+ ));

+ }

+ }

+

+ if (sizeof($ban_give_reasons))

+ {

+ foreach ($ban_give_reasons as $ban_id => $reason)

+ {

+ $template->assign_block_vars('ban_give_reason', array(

+ 'BAN_ID' => $ban_id,

+ 'REASON' => $reason,

+ 'A_REASON' => addslashes(htmlspecialchars_decode($reason)),

+ ));

+ }

+ }

+

+ $template->assign_vars(array(

+ 'S_BAN_END_OPTIONS' => $ban_end_options,

+ 'S_BANNED_OPTIONS' => ($banned_options) ? true : false,

+ 'BANNED_OPTIONS' => $banned_options)

+ );

+ }

+}

+

+?> \ No newline at end of file

+<?php

+/**

+*

+* @package acp

+* @version $Id$

+* @copyright (c) 2005 phpBB Group

+* @license http://opensource.org/licenses/gpl-license.php GNU Public License

+*

+*/

+

+/**

+* @ignore

+*/

+if (!defined('IN_PHPBB'))

+{

+ exit;

+}

+

+/**

+* @package acp

+*/

+class acp_bbcodes

+{

+ var $u_action;

+

+ function main($id, $mode)

+ {

+ global $db, $user, $auth, $template, $cache, $config;

+

+ $user->add_lang('acp/posting');

+

+ // Set up general vars

+ $action = request_var('action', '');

+ $bbcode_id = request_var('bbcode', 0);

+

+ $this->tpl_name = 'acp_bbcodes';

+ $this->page_title = 'ACP_BBCODES';

+ $form_key = 'acp_bbcodes';

+

+ add_form_key($form_key);

+

+ // Set up mode-specific vars

+ switch ($action)

+ {

+ case 'add':

+ $bbcode_match = $bbcode_tpl = $bbcode_helpline = '';

+ $display_on_posting = 0;

+ break;

+

+ case 'edit':

+ $sql = 'SELECT bbcode_match, bbcode_tpl, display_on_posting, bbcode_helpline

+ FROM ' . BBCODES_TABLE . '

+ WHERE bbcode_id = ' . $bbcode_id;

+ $result = $db->sql_query($sql);

+ $row = $db->sql_fetchrow($result);

+ $db->sql_freeresult($result);

+

+ if (!$row)

+ {

+ trigger_error($user->lang['BBCODE_NOT_EXIST'] . adm_back_link($this->u_action), E_USER_WARNING);

+ }

+

+ $bbcode_match = $row['bbcode_match'];

+ $bbcode_tpl = htmlspecialchars($row['bbcode_tpl']);

+ $display_on_posting = $row['display_on_posting'];

+ $bbcode_helpline = $row['bbcode_helpline'];

+ break;

+

+ case 'modify':

+ $sql = 'SELECT bbcode_id, bbcode_tag

+ FROM ' . BBCODES_TABLE . '

+ WHERE bbcode_id = ' . $bbcode_id;

+ $result = $db->sql_query($sql);

+ $row = $db->sql_fetchrow($result);

+ $db->sql_freeresult($result);

+

+ if (!$row)

+ {

+ trigger_error($user->lang['BBCODE_NOT_EXIST'] . adm_back_link($this->u_action), E_USER_WARNING);

+ }

+

+ // No break here

+

+ case 'create':

+ $display_on_posting = request_var('display_on_posting', 0);

+

+ $bbcode_match = request_var('bbcode_match', '');

+ $bbcode_tpl = htmlspecialchars_decode(utf8_normalize_nfc(request_var('bbcode_tpl', '', true)));

+ $bbcode_helpline = utf8_normalize_nfc(request_var('bbcode_helpline', '', true));

+ break;

+ }

+

+ // Do major work

+ switch ($action)

+ {

+ case 'edit':

+ case 'add':

+

+ $template->assign_vars(array(

+ 'S_EDIT_BBCODE' => true,

+ 'U_BACK' => $this->u_action,

+ 'U_ACTION' => $this->u_action . '&amp;action=' . (($action == 'add') ? 'create' : 'modify') . (($bbcode_id) ? "&amp;bbcode=$bbcode_id" : ''),

+

+ 'L_BBCODE_USAGE_EXPLAIN'=> sprintf($user->lang['BBCODE_USAGE_EXPLAIN'], '<a href="#down">', '</a>'),

+ 'BBCODE_MATCH' => $bbcode_match,

+ 'BBCODE_TPL' => $bbcode_tpl,

+ 'BBCODE_HELPLINE' => $bbcode_helpline,

+ 'DISPLAY_ON_POSTING' => $display_on_posting)

+ );

+

+ foreach ($user->lang['tokens'] as $token => $token_explain)

+ {

+ $template->assign_block_vars('token', array(

+ 'TOKEN' => '{' . $token . '}',

+ 'EXPLAIN' => $token_explain)

+ );

+ }

+

+ return;

+

+ break;

+

+ case 'modify':

+ case 'create':

+

+ $data = $this->build_regexp($bbcode_match, $bbcode_tpl);

+

+ // Make sure the user didn't pick a "bad" name for the BBCode tag.

+ $hard_coded = array('code', 'quote', 'quote=', 'attachment', 'attachment=', 'b', 'i', 'url', 'url=', 'img', 'size', 'size=', 'color', 'color=', 'u', 'list', 'list=', 'email', 'email=', 'flash', 'flash=');

+

+ if (($action == 'modify' && strtolower($data['bbcode_tag']) !== strtolower($row['bbcode_tag'])) || ($action == 'create'))

+ {

+ $sql = 'SELECT 1 as test

+ FROM ' . BBCODES_TABLE . "

+ WHERE LOWER(bbcode_tag) = '" . $db->sql_escape(strtolower($data['bbcode_tag'])) . "'";

+ $result = $db->sql_query($sql);

+ $info = $db->sql_fetchrow($result);

+ $db->sql_freeresult($result);

+

+ // Grab the end, interrogate the last closing tag

+ if ($info['test'] === '1' || in_array(strtolower($data['bbcode_tag']), $hard_coded) || (preg_match('#\[/([^[]*)]$#', $bbcode_match, $regs) && in_array(strtolower($regs[1]), $hard_coded)))

+ {

+ trigger_error($user->lang['BBCODE_INVALID_TAG_NAME'] . adm_back_link($this->u_action), E_USER_WARNING);

+ }

+ }

+

+ if (substr($data['bbcode_tag'], -1) === '=')

+ {

+ $test = substr($data['bbcode_tag'], 0, -1);

+ }

+ else

+ {

+ $test = $data['bbcode_tag'];

+ }

+

+ if (!preg_match('%\\[' . $test . '[^]]*].*?\\[/' . $test . ']%s', $bbcode_match))

+ {

+ trigger_error($user->lang['BBCODE_OPEN_ENDED_TAG'] . adm_back_link($this->u_action), E_USER_WARNING);

+ }

+

+ if (strlen($data['bbcode_tag']) > 16)

+ {

+ trigger_error($user->lang['BBCODE_TAG_TOO_LONG'] . adm_back_link($this->u_action), E_USER_WARNING);

+ }

+

+ if (strlen($bbcode_match) > 4000)

+ {

+ trigger_error($user->lang['BBCODE_TAG_DEF_TOO_LONG'] . adm_back_link($this->u_action), E_USER_WARNING);

+ }

+

+

+ if (strlen($bbcode_helpline) > 255)

+ {

+ trigger_error($user->lang['BBCODE_HELPLINE_TOO_LONG'] . adm_back_link($this->u_action), E_USER_WARNING);

+ }

+

+ $sql_ary = array(

+ 'bbcode_tag' => $data['bbcode_tag'],

+ 'bbcode_match' => $bbcode_match,

+ 'bbcode_tpl' => $bbcode_tpl,

+ 'display_on_posting' => $display_on_posting,

+ 'bbcode_helpline' => $bbcode_helpline,

+ 'first_pass_match' => $data['first_pass_match'],

+ 'first_pass_replace' => $data['first_pass_replace'],

+ 'second_pass_match' => $data['second_pass_match'],

+ 'second_pass_replace' => $data['second_pass_replace']

+ );

+

+ if ($action == 'create')

+ {

+ $sql = 'SELECT MAX(bbcode_id) as max_bbcode_id

+ FROM ' . BBCODES_TABLE;

+ $result = $db->sql_query($sql);

+ $row = $db->sql_fetchrow($result);

+ $db->sql_freeresult($result);

+

+ if ($row)

+ {

+ $bbcode_id = $row['max_bbcode_id'] + 1;

+

+ // Make sure it is greater than the core bbcode ids...

+ if ($bbcode_id <= NUM_CORE_BBCODES)

+ {

+ $bbcode_id = NUM_CORE_BBCODES + 1;

+ }

+ }

+ else

+ {

+ $bbcode_id = NUM_CORE_BBCODES + 1;

+ }

+

+ if ($bbcode_id > 1511)

+ {

+ trigger_error($user->lang['TOO_MANY_BBCODES'] . adm_back_link($this->u_action), E_USER_WARNING);

+ }

+

+ $sql_ary['bbcode_id'] = (int) $bbcode_id;

+

+ $db->sql_query('INSERT INTO ' . BBCODES_TABLE . $db->sql_build_array('INSERT', $sql_ary));

+ $cache->destroy('sql', BBCODES_TABLE);

+

+ $lang = 'BBCODE_ADDED';

+ $log_action = 'LOG_BBCODE_ADD';

+ }

+ else

+ {

+ $sql = 'UPDATE ' . BBCODES_TABLE . '

+ SET ' . $db->sql_build_array('UPDATE', $sql_ary) . '

+ WHERE bbcode_id = ' . $bbcode_id;

+ $db->sql_query($sql);

+ $cache->destroy('sql', BBCODES_TABLE);

+

+ $lang = 'BBCODE_EDITED';

+ $log_action = 'LOG_BBCODE_EDIT';

+ }

+

+ add_log('admin', $log_action, $data['bbcode_tag']);

+

+ trigger_error($user->lang[$lang] . adm_back_link($this->u_action));

+

+ break;

+

+ case 'delete':

+

+ $sql = 'SELECT bbcode_tag

+ FROM ' . BBCODES_TABLE . "

+ WHERE bbcode_id = $bbcode_id";

+ $result = $db->sql_query($sql);

+ $row = $db->sql_fetchrow($result);

+ $db->sql_freeresult($result);

+

+ if ($row)

+ {

+ if (confirm_box(true))

+ {

+ $db->sql_query('DELETE FROM ' . BBCODES_TABLE . " WHERE bbcode_id = $bbcode_id");

+ $cache->destroy('sql', BBCODES_TABLE);

+ add_log('admin', 'LOG_BBCODE_DELETE', $row['bbcode_tag']);

+ }

+ else

+ {

+ confirm_box(false, $user->lang['CONFIRM_OPERATION'], build_hidden_fields(array(

+ 'bbcode' => $bbcode_id,

+ 'i' => $id,

+ 'mode' => $mode,

+ 'action' => $action))

+ );

+ }

+ }

+

+ break;

+ }

+

+ $template->assign_vars(array(

+ 'U_ACTION' => $this->u_action . '&amp;action=add')

+ );

+

+ $sql = 'SELECT *

+ FROM ' . BBCODES_TABLE . '

+ ORDER BY bbcode_tag';

+ $result = $db->sql_query($sql);

+

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $template->assign_block_vars('bbcodes', array(

+ 'BBCODE_TAG' => $row['bbcode_tag'],

+ 'U_EDIT' => $this->u_action . '&amp;action=edit&amp;bbcode=' . $row['bbcode_id'],

+ 'U_DELETE' => $this->u_action . '&amp;action=delete&amp;bbcode=' . $row['bbcode_id'])

+ );

+ }

+ $db->sql_freeresult($result);

+ }

+

+ /*

+ * Build regular expression for custom bbcode

+ */

+ function build_regexp(&$bbcode_match, &$bbcode_tpl)

+ {

+ $bbcode_match = trim($bbcode_match);

+ $bbcode_tpl = trim($bbcode_tpl);

+

+ $fp_match = preg_quote($bbcode_match, '!');

+ $fp_replace = preg_replace('#^\[(.*?)\]#', '[$1:$uid]', $bbcode_match);

+ $fp_replace = preg_replace('#\[/(.*?)\]$#', '[/$1:$uid]', $fp_replace);

+

+ $sp_match = preg_quote($bbcode_match, '!');

+ $sp_match = preg_replace('#^\\\\\[(.*?)\\\\\]#', '\[$1:$uid\]', $sp_match);

+ $sp_match = preg_replace('#\\\\\[/(.*?)\\\\\]$#', '\[/$1:$uid\]', $sp_match);

+ $sp_replace = $bbcode_tpl;

+

+ // @todo Make sure to change this too if something changed in message parsing

+ $tokens = array(

+ 'URL' => array(

+ '!(?:(' . str_replace(array('!', '\#'), array('\!', '#'), get_preg_expression('url')) . ')|(' . str_replace(array('!', '\#'), array('\!', '#'), get_preg_expression('www_url')) . '))!ie' => "\$this->bbcode_specialchars(('\$1') ? '\$1' : 'http://\$2')"

+ ),

+ 'LOCAL_URL' => array(

+ '!(' . str_replace(array('!', '\#'), array('\!', '#'), get_preg_expression('relative_url')) . ')!e' => "\$this->bbcode_specialchars('$1')"

+ ),

+ 'EMAIL' => array(

+ '!(' . get_preg_expression('email') . ')!ie' => "\$this->bbcode_specialchars('$1')"

+ ),

+ 'TEXT' => array(

+ '!(.*?)!es' => "str_replace(array(\"\\r\\n\", '\\\"', '\\'', '(', ')'), array(\"\\n\", '\"', '&#39;', '&#40;', '&#41;'), trim('\$1'))"

+ ),

+ 'SIMPLETEXT' => array(

+ '!([a-zA-Z0-9-+.,_ ]+)!' => "$1"

+ ),

+ 'IDENTIFIER' => array(

+ '!([a-zA-Z0-9-_]+)!' => "$1"

+ ),

+ 'COLOR' => array(

+ '!([a-z]+|#[0-9abcdef]+)!i' => '$1'

+ ),

+ 'NUMBER' => array(

+ '!([0-9]+)!' => '$1'

+ )

+ );

+

+ $sp_tokens = array(

+ 'URL' => '(?i)((?:' . str_replace(array('!', '\#'), array('\!', '#'), get_preg_expression('url')) . ')|(?:' . str_replace(array('!', '\#'), array('\!', '#'), get_preg_expression('www_url')) . '))(?-i)',

+ 'LOCAL_URL' => '(?i)(' . str_replace(array('!', '\#'), array('\!', '#'), get_preg_expression('relative_url')) . ')(?-i)',

+ 'EMAIL' => '(' . get_preg_expression('email') . ')',

+ 'TEXT' => '(.*?)',

+ 'SIMPLETEXT' => '([a-zA-Z0-9-+.,_ ]+)',

+ 'IDENTIFIER' => '([a-zA-Z0-9-_]+)',

+ 'COLOR' => '([a-zA-Z]+|#[0-9abcdefABCDEF]+)',

+ 'NUMBER' => '([0-9]+)',

+ );

+

+ $pad = 0;

+ $modifiers = 'i';

+

+ if (preg_match_all('/\{(' . implode('|', array_keys($tokens)) . ')[0-9]*\}/i', $bbcode_match, $m))

+ {

+ foreach ($m[0] as $n => $token)

+ {

+ $token_type = $m[1][$n];

+

+ reset($tokens[strtoupper($token_type)]);

+ list($match, $replace) = each($tokens[strtoupper($token_type)]);

+

+ // Pad backreference numbers from tokens

+ if (preg_match_all('/(?<!\\\\)\$([0-9]+)/', $replace, $repad))

+ {

+ $repad = $pad + sizeof(array_unique($repad[0]));

+ $replace = preg_replace('/(?<!\\\\)\$([0-9]+)/e', "'\${' . (\$1 + \$pad) . '}'", $replace);

+ $pad = $repad;

+ }

+

+ // Obtain pattern modifiers to use and alter the regex accordingly

+ $regex = preg_replace('/!(.*)!([a-z]*)/', '$1', $match);

+ $regex_modifiers = preg_replace('/!(.*)!([a-z]*)/', '$2', $match);

+

+ for ($i = 0, $size = strlen($regex_modifiers); $i < $size; ++$i)

+ {

+ if (strpos($modifiers, $regex_modifiers[$i]) === false)

+ {

+ $modifiers .= $regex_modifiers[$i];

+

+ if ($regex_modifiers[$i] == 'e')

+ {

+ $fp_replace = "'" . str_replace("'", "\\'", $fp_replace) . "'";

+ }

+ }

+

+ if ($regex_modifiers[$i] == 'e')

+ {

+ $replace = "'.$replace.'";

+ }

+ }

+

+ $fp_match = str_replace(preg_quote($token, '!'), $regex, $fp_match);

+ $fp_replace = str_replace($token, $replace, $fp_replace);

+

+ $sp_match = str_replace(preg_quote($token, '!'), $sp_tokens[$token_type], $sp_match);

+ $sp_replace = str_replace($token, '${' . ($n + 1) . '}', $sp_replace);

+ }

+

+ $fp_match = '!' . $fp_match . '!' . $modifiers;

+ $sp_match = '!' . $sp_match . '!s';

+

+ if (strpos($fp_match, 'e') !== false)

+ {

+ $fp_replace = str_replace("'.'", '', $fp_replace);

+ $fp_replace = str_replace(".''.", '.', $fp_replace);

+ }

+ }

+ else

+ {

+ // No replacement is present, no need for a second-pass pattern replacement

+ // A simple str_replace will suffice

+ $fp_match = '!' . $fp_match . '!' . $modifiers;

+ $sp_match = $fp_replace;

+ $sp_replace = '';

+ }

+

+ // Lowercase tags

+ $bbcode_tag = preg_replace('/.*?\[([a-z0-9_-]+=?).*/i', '$1', $bbcode_match);

+ $bbcode_search = preg_replace('/.*?\[([a-z0-9_-]+)=?.*/i', '$1', $bbcode_match);

+

+ if (!preg_match('/^[a-zA-Z0-9_-]+=?$/', $bbcode_tag))

+ {

+ global $user;

+ trigger_error($user->lang['BBCODE_INVALID'] . adm_back_link($this->u_action), E_USER_WARNING);

+ }

+

+ $fp_match = preg_replace('#\[/?' . $bbcode_search . '#ie', "strtolower('\$0')", $fp_match);

+ $fp_replace = preg_replace('#\[/?' . $bbcode_search . '#ie', "strtolower('\$0')", $fp_replace);

+ $sp_match = preg_replace('#\[/?' . $bbcode_search . '#ie', "strtolower('\$0')", $sp_match);

+ $sp_replace = preg_replace('#\[/?' . $bbcode_search . '#ie', "strtolower('\$0')", $sp_replace);

+

+ return array(

+ 'bbcode_tag' => $bbcode_tag,

+ 'first_pass_match' => $fp_match,

+ 'first_pass_replace' => $fp_replace,

+ 'second_pass_match' => $sp_match,

+ 'second_pass_replace' => $sp_replace

+ );

+ }

+}

+

+?> \ No newline at end of file

+<?php

+/**

+*

+* @package acp

+* @version $Id$

+* @copyright (c) 2005 phpBB Group

+* @license http://opensource.org/licenses/gpl-license.php GNU Public License

+*

+* @todo add cron intervals to server settings? (database_gc, queue_interval, session_gc, search_gc, cache_gc, warnings_gc)

+*/

+

+/**

+* @ignore

+*/

+if (!defined('IN_PHPBB'))

+{

+ exit;

+}

+

+/**

+* @package acp

+*/

+class acp_board

+{

+ var $u_action;

+ var $new_config = array();

+

+ function main($id, $mode)

+ {

+ global $db, $user, $auth, $template, $config;

+

+ $user->add_lang('acp/board');

+

+ $action = request_var('action', '');

+ $submit = request::is_set_post('submit');

+

+ $form_key = 'acp_board';

+ add_form_key($form_key);

+

+ /**

+ * Validation types are:

+ * string, int, bool,

+ * script_path (absolute path in url - beginning with / and no trailing slash),

+ * rpath (relative), rwpath (realtive, writable), path (relative path, but able to escape the root), wpath (writable)

+ */

+ switch ($mode)

+ {

+ case 'settings':

+ $display_vars = array(

+ 'title' => 'ACP_BOARD_SETTINGS',

+ 'vars' => array(

+ 'legend1' => 'ACP_BOARD_SETTINGS',

+ 'sitename' => array('lang' => 'SITE_NAME', 'validate' => 'string', 'type' => 'text:40:255', 'explain' => false),

+ 'site_desc' => array('lang' => 'SITE_DESC', 'validate' => 'string', 'type' => 'text:40:255', 'explain' => false),

+ 'board_disable' => array('lang' => 'DISABLE_BOARD', 'validate' => 'bool', 'type' => 'custom', 'method' => 'board_disable', 'explain' => true),

+ 'board_disable_msg' => false,

+ 'default_lang' => array('lang' => 'DEFAULT_LANGUAGE', 'validate' => 'lang', 'type' => 'select', 'function' => 'language_select', 'params' => array('{CONFIG_VALUE}'), 'explain' => false),

+ 'default_dateformat' => array('lang' => 'DEFAULT_DATE_FORMAT', 'validate' => 'string', 'type' => 'custom', 'method' => 'dateformat_select', 'explain' => true),

+ 'board_timezone' => array('lang' => 'SYSTEM_TIMEZONE', 'validate' => 'string', 'type' => 'select', 'function' => 'tz_select', 'params' => array('{CONFIG_VALUE}', 1), 'explain' => false),

+ 'board_dst' => array('lang' => 'SYSTEM_DST', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => false),

+ 'default_style' => array('lang' => 'DEFAULT_STYLE', 'validate' => 'int', 'type' => 'select', 'function' => 'style_select', 'params' => array('{CONFIG_VALUE}', false), 'explain' => false),

+ 'override_user_style' => array('lang' => 'OVERRIDE_STYLE', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+

+ 'legend2' => 'WARNINGS',

+ 'warnings_expire_days' => array('lang' => 'WARNINGS_EXPIRE', 'validate' => 'int', 'type' => 'text:3:4', 'explain' => true, 'append' => ' ' . $user->lang['DAYS']),

+ )

+ );

+ break;

+

+ case 'features':

+ $display_vars = array(

+ 'title' => 'ACP_BOARD_FEATURES',

+ 'vars' => array(

+ 'legend1' => 'ACP_BOARD_FEATURES',

+ 'allow_privmsg' => array('lang' => 'BOARD_PM', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+ 'allow_topic_notify' => array('lang' => 'ALLOW_TOPIC_NOTIFY', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => false),

+ 'allow_forum_notify' => array('lang' => 'ALLOW_FORUM_NOTIFY', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => false),

+ 'allow_namechange' => array('lang' => 'ALLOW_NAME_CHANGE', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => false),

+ 'allow_attachments' => array('lang' => 'ALLOW_ATTACHMENTS', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => false),

+ 'allow_pm_attach' => array('lang' => 'ALLOW_PM_ATTACHMENTS', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => false),

+ 'allow_bbcode' => array('lang' => 'ALLOW_BBCODE', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => false),

+ 'allow_smilies' => array('lang' => 'ALLOW_SMILIES', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => false),

+ 'allow_sig' => array('lang' => 'ALLOW_SIG', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => false),

+ 'allow_nocensors' => array('lang' => 'ALLOW_NO_CENSORS', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+ 'allow_bookmarks' => array('lang' => 'ALLOW_BOOKMARKS', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+ 'allow_birthdays' => array('lang' => 'ALLOW_BIRTHDAYS', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+

+ 'legend2' => 'ACP_LOAD_SETTINGS',

+ 'load_birthdays' => array('lang' => 'YES_BIRTHDAYS', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+ 'load_moderators' => array('lang' => 'YES_MODERATORS', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => false),

+ 'load_jumpbox' => array('lang' => 'YES_JUMPBOX', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => false),

+ 'load_cpf_memberlist' => array('lang' => 'LOAD_CPF_MEMBERLIST', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => false),

+ 'load_cpf_viewprofile' => array('lang' => 'LOAD_CPF_VIEWPROFILE', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => false),

+ 'load_cpf_viewtopic' => array('lang' => 'LOAD_CPF_VIEWTOPIC', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => false),

+ )

+ );

+ break;

+

+ case 'avatar':

+ $display_vars = array(

+ 'title' => 'ACP_AVATAR_SETTINGS',

+ 'vars' => array(

+ 'legend1' => 'ACP_AVATAR_SETTINGS',

+ 'avatar_min_height' => false, 'avatar_min_width' => false, 'avatar_max_height' => false, 'avatar_max_width' => false,

+

+ 'allow_avatar_local' => array('lang' => 'ALLOW_LOCAL', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => false),

+ 'allow_avatar_remote' => array('lang' => 'ALLOW_REMOTE', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+ 'allow_avatar_upload' => array('lang' => 'ALLOW_UPLOAD', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => false),

+ 'avatar_filesize' => array('lang' => 'MAX_FILESIZE', 'validate' => 'int:0', 'type' => 'text:4:10', 'explain' => true, 'append' => ' ' . $user->lang['BYTES']),

+ 'avatar_min' => array('lang' => 'MIN_AVATAR_SIZE', 'validate' => 'int:0', 'type' => 'dimension:3:4', 'explain' => true, 'append' => ' ' . $user->lang['PIXEL']),

+ 'avatar_max' => array('lang' => 'MAX_AVATAR_SIZE', 'validate' => 'int:0', 'type' => 'dimension:3:4', 'explain' => true, 'append' => ' ' . $user->lang['PIXEL']),

+ 'avatar_path' => array('lang' => 'AVATAR_STORAGE_PATH', 'validate' => 'rwpath', 'type' => 'text:20:255', 'explain' => true),

+ 'avatar_gallery_path' => array('lang' => 'AVATAR_GALLERY_PATH', 'validate' => 'rpath', 'type' => 'text:20:255', 'explain' => true)

+ )

+ );

+ break;

+

+ case 'message':

+ $display_vars = array(

+ 'title' => 'ACP_MESSAGE_SETTINGS',

+ 'lang' => 'ucp',

+ 'vars' => array(

+ 'legend1' => 'GENERAL_SETTINGS',

+ 'allow_privmsg' => array('lang' => 'BOARD_PM', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+ 'pm_max_boxes' => array('lang' => 'BOXES_MAX', 'validate' => 'int:0', 'type' => 'text:4:4', 'explain' => true),

+ 'pm_max_msgs' => array('lang' => 'BOXES_LIMIT', 'validate' => 'int:0', 'type' => 'text:4:4', 'explain' => true),

+ 'full_folder_action' => array('lang' => 'FULL_FOLDER_ACTION', 'validate' => 'int', 'type' => 'select', 'method' => 'full_folder_select', 'explain' => true),

+ 'pm_edit_time' => array('lang' => 'PM_EDIT_TIME', 'validate' => 'int:0', 'type' => 'text:5:5', 'explain' => true, 'append' => ' ' . $user->lang['MINUTES']),

+ 'pm_max_recipients' => array('lang' => 'PM_MAX_RECIPIENTS', 'validate' => 'int:0', 'type' => 'text:5:5', 'explain' => true),

+

+ 'legend2' => 'GENERAL_OPTIONS',

+ 'allow_mass_pm' => array('lang' => 'ALLOW_MASS_PM', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => false),

+ 'auth_bbcode_pm' => array('lang' => 'ALLOW_BBCODE_PM', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => false),

+ 'auth_smilies_pm' => array('lang' => 'ALLOW_SMILIES_PM', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => false),

+ 'allow_pm_attach' => array('lang' => 'ALLOW_PM_ATTACHMENTS', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => false),

+ 'allow_sig_pm' => array('lang' => 'ALLOW_SIG_PM', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => false),

+ 'print_pm' => array('lang' => 'ALLOW_PRINT_PM', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => false),

+ 'forward_pm' => array('lang' => 'ALLOW_FORWARD_PM', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => false),

+ 'auth_img_pm' => array('lang' => 'ALLOW_IMG_PM', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => false),

+ 'auth_flash_pm' => array('lang' => 'ALLOW_FLASH_PM', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+ 'enable_pm_icons' => array('lang' => 'ENABLE_PM_ICONS', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => false)

+ )

+ );

+ break;

+

+ case 'post':

+ $display_vars = array(

+ 'title' => 'ACP_POST_SETTINGS',

+ 'vars' => array(

+ 'legend1' => 'GENERAL_OPTIONS',

+ 'allow_topic_notify' => array('lang' => 'ALLOW_TOPIC_NOTIFY', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => false),

+ 'allow_forum_notify' => array('lang' => 'ALLOW_FORUM_NOTIFY', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => false),

+ 'allow_bbcode' => array('lang' => 'ALLOW_BBCODE', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => false),

+ 'allow_post_flash' => array('lang' => 'ALLOW_POST_FLASH', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+ 'allow_smilies' => array('lang' => 'ALLOW_SMILIES', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => false),

+ 'allow_post_links' => array('lang' => 'ALLOW_POST_LINKS', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+ 'allow_nocensors' => array('lang' => 'ALLOW_NO_CENSORS', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+ 'allow_bookmarks' => array('lang' => 'ALLOW_BOOKMARKS', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+ 'enable_post_confirm' => array('lang' => 'VISUAL_CONFIRM_POST', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+

+ 'legend2' => 'POSTING',

+ 'enable_queue_trigger' => array('lang' => 'ENABLE_QUEUE_TRIGGER', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+ 'queue_trigger_posts' => array('lang' => 'QUEUE_TRIGGER_POSTS', 'validate' => 'int:0:250', 'type' => 'text:4:4', 'explain' => true),

+ 'bump_type' => false,

+ 'edit_time' => array('lang' => 'EDIT_TIME', 'validate' => 'int:0', 'type' => 'text:5:5', 'explain' => true, 'append' => ' ' . $user->lang['MINUTES']),

+ 'display_last_edited' => array('lang' => 'DISPLAY_LAST_EDITED', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+ 'flood_interval' => array('lang' => 'FLOOD_INTERVAL', 'validate' => 'int:0', 'type' => 'text:3:10', 'explain' => true, 'append' => ' ' . $user->lang['SECONDS']),

+ 'bump_interval' => array('lang' => 'BUMP_INTERVAL', 'validate' => 'int:0', 'type' => 'custom', 'method' => 'bump_interval', 'explain' => true),

+ 'topics_per_page' => array('lang' => 'TOPICS_PER_PAGE', 'validate' => 'int:1', 'type' => 'text:3:4', 'explain' => false),

+ 'posts_per_page' => array('lang' => 'POSTS_PER_PAGE', 'validate' => 'int:1', 'type' => 'text:3:4', 'explain' => false),

+ 'hot_threshold' => array('lang' => 'HOT_THRESHOLD', 'validate' => 'int:0', 'type' => 'text:3:4', 'explain' => true),

+ 'max_poll_options' => array('lang' => 'MAX_POLL_OPTIONS', 'validate' => 'int:2:127', 'type' => 'text:4:4', 'explain' => false),

+ 'max_post_chars' => array('lang' => 'CHAR_LIMIT', 'validate' => 'int:0', 'type' => 'text:4:6', 'explain' => true),

+ 'max_post_smilies' => array('lang' => 'SMILIES_LIMIT', 'validate' => 'int:0', 'type' => 'text:4:4', 'explain' => true),

+ 'max_post_urls' => array('lang' => 'MAX_POST_URLS', 'validate' => 'int:0', 'type' => 'text:5:4', 'explain' => true),

+ 'max_post_font_size' => array('lang' => 'MAX_POST_FONT_SIZE', 'validate' => 'int:0', 'type' => 'text:5:4', 'explain' => true, 'append' => ' %'),

+ 'max_quote_depth' => array('lang' => 'QUOTE_DEPTH_LIMIT', 'validate' => 'int:0', 'type' => 'text:4:4', 'explain' => true),

+ 'max_post_img_width' => array('lang' => 'MAX_POST_IMG_WIDTH', 'validate' => 'int:0', 'type' => 'text:5:4', 'explain' => true, 'append' => ' ' . $user->lang['PIXEL']),

+ 'max_post_img_height' => array('lang' => 'MAX_POST_IMG_HEIGHT', 'validate' => 'int:0', 'type' => 'text:5:4', 'explain' => true, 'append' => ' ' . $user->lang['PIXEL']),

+ )

+ );

+ break;

+

+ case 'signature':

+ $display_vars = array(

+ 'title' => 'ACP_SIGNATURE_SETTINGS',

+ 'vars' => array(

+ 'legend1' => 'GENERAL_OPTIONS',

+ 'allow_sig' => array('lang' => 'ALLOW_SIG', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => false),

+ 'allow_sig_bbcode' => array('lang' => 'ALLOW_SIG_BBCODE', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => false),

+ 'allow_sig_img' => array('lang' => 'ALLOW_SIG_IMG', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => false),

+ 'allow_sig_flash' => array('lang' => 'ALLOW_SIG_FLASH', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => false),

+ 'allow_sig_smilies' => array('lang' => 'ALLOW_SIG_SMILIES', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => false),

+ 'allow_sig_links' => array('lang' => 'ALLOW_SIG_LINKS', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+

+ 'legend2' => 'GENERAL_SETTINGS',

+ 'max_sig_chars' => array('lang' => 'MAX_SIG_LENGTH', 'validate' => 'int:0', 'type' => 'text:5:4', 'explain' => true),

+ 'max_sig_urls' => array('lang' => 'MAX_SIG_URLS', 'validate' => 'int:0', 'type' => 'text:5:4', 'explain' => true),

+ 'max_sig_font_size' => array('lang' => 'MAX_SIG_FONT_SIZE', 'validate' => 'int:0', 'type' => 'text:5:4', 'explain' => true, 'append' => ' %'),

+ 'max_sig_smilies' => array('lang' => 'MAX_SIG_SMILIES', 'validate' => 'int:0', 'type' => 'text:5:4', 'explain' => true),

+ 'max_sig_img_width' => array('lang' => 'MAX_SIG_IMG_WIDTH', 'validate' => 'int:0', 'type' => 'text:5:4', 'explain' => true, 'append' => ' ' . $user->lang['PIXEL']),

+ 'max_sig_img_height' => array('lang' => 'MAX_SIG_IMG_HEIGHT', 'validate' => 'int:0', 'type' => 'text:5:4', 'explain' => true, 'append' => ' ' . $user->lang['PIXEL']),

+ )

+ );

+ break;

+

+ case 'registration':

+ $display_vars = array(

+ 'title' => 'ACP_REGISTER_SETTINGS',

+ 'vars' => array(

+ 'legend1' => 'GENERAL_SETTINGS',

+ 'max_name_chars' => array('lang' => 'USERNAME_LENGTH', 'validate' => 'int:8:180', 'type' => false, 'method' => false, 'explain' => false,),

+ 'max_pass_chars' => array('lang' => 'PASSWORD_LENGTH', 'validate' => 'int:8:255', 'type' => false, 'method' => false, 'explain' => false,),

+

+ 'require_activation' => array('lang' => 'ACC_ACTIVATION', 'validate' => 'int', 'type' => 'custom', 'method' => 'select_acc_activation', 'explain' => true),

+ 'min_name_chars' => array('lang' => 'USERNAME_LENGTH', 'validate' => 'int:1', 'type' => 'custom:5:180', 'method' => 'username_length', 'explain' => true),

+ 'min_pass_chars' => array('lang' => 'PASSWORD_LENGTH', 'validate' => 'int:1', 'type' => 'custom', 'method' => 'password_length', 'explain' => true),

+ 'allow_name_chars' => array('lang' => 'USERNAME_CHARS', 'validate' => 'string', 'type' => 'select', 'method' => 'select_username_chars', 'explain' => true),

+ 'pass_complex' => array('lang' => 'PASSWORD_TYPE', 'validate' => 'string', 'type' => 'select', 'method' => 'select_password_chars', 'explain' => true),

+ 'chg_passforce' => array('lang' => 'FORCE_PASS_CHANGE', 'validate' => 'int:0', 'type' => 'text:3:3', 'explain' => true, 'append' => ' ' . $user->lang['DAYS']),

+

+ 'legend2' => 'GENERAL_OPTIONS',

+ 'allow_namechange' => array('lang' => 'ALLOW_NAME_CHANGE', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => false),

+ 'allow_emailreuse' => array('lang' => 'ALLOW_EMAIL_REUSE', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+ 'enable_confirm' => array('lang' => 'VISUAL_CONFIRM_REG', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+ 'max_login_attempts' => array('lang' => 'MAX_LOGIN_ATTEMPTS', 'validate' => 'int:0', 'type' => 'text:3:3', 'explain' => true),

+ 'max_reg_attempts' => array('lang' => 'REG_LIMIT', 'validate' => 'int:0', 'type' => 'text:4:4', 'explain' => true),

+

+ 'legend3' => 'COPPA',

+ 'coppa_enable' => array('lang' => 'ENABLE_COPPA', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+ 'coppa_mail' => array('lang' => 'COPPA_MAIL', 'validate' => 'string', 'type' => 'textarea:5:40', 'explain' => true),

+ 'coppa_fax' => array('lang' => 'COPPA_FAX', 'validate' => 'string', 'type' => 'text:25:100', 'explain' => false),

+ )

+ );

+ break;

+

+ case 'cookie':

+ $display_vars = array(

+ 'title' => 'ACP_COOKIE_SETTINGS',

+ 'vars' => array(

+ 'legend1' => 'ACP_COOKIE_SETTINGS',

+ 'cookie_domain' => array('lang' => 'COOKIE_DOMAIN', 'validate' => 'string', 'type' => 'text::255', 'explain' => false),

+ 'cookie_name' => array('lang' => 'COOKIE_NAME', 'validate' => 'string', 'type' => 'text::16', 'explain' => false),

+ 'cookie_path' => array('lang' => 'COOKIE_PATH', 'validate' => 'string', 'type' => 'text::255', 'explain' => false),

+ 'cookie_secure' => array('lang' => 'COOKIE_SECURE', 'validate' => 'bool', 'type' => 'radio:disabled_enabled', 'explain' => true)

+ )

+ );

+ break;

+

+ case 'load':

+ $display_vars = array(

+ 'title' => 'ACP_LOAD_SETTINGS',

+ 'vars' => array(

+ 'legend1' => 'GENERAL_SETTINGS',

+ 'limit_load' => array('lang' => 'LIMIT_LOAD', 'validate' => 'string', 'type' => 'text:4:4', 'explain' => true),

+ 'session_length' => array('lang' => 'SESSION_LENGTH', 'validate' => 'int:60', 'type' => 'text:5:10', 'explain' => true, 'append' => ' ' . $user->lang['SECONDS']),

+ 'active_sessions' => array('lang' => 'LIMIT_SESSIONS', 'validate' => 'int:0', 'type' => 'text:4:4', 'explain' => true),

+ 'load_online_time' => array('lang' => 'ONLINE_LENGTH', 'validate' => 'int:0', 'type' => 'text:4:3', 'explain' => true, 'append' => ' ' . $user->lang['MINUTES']),

+

+ 'legend2' => 'GENERAL_OPTIONS',

+ 'load_db_track' => array('lang' => 'YES_POST_MARKING', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+ 'load_db_lastread' => array('lang' => 'YES_READ_MARKING', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+ 'load_anon_lastread' => array('lang' => 'YES_ANON_READ_MARKING', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+ 'load_online' => array('lang' => 'YES_ONLINE', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+ 'load_online_guests' => array('lang' => 'YES_ONLINE_GUESTS', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+ 'load_onlinetrack' => array('lang' => 'YES_ONLINE_TRACK', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+ 'load_birthdays' => array('lang' => 'YES_BIRTHDAYS', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+ 'load_moderators' => array('lang' => 'YES_MODERATORS', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => false),

+ 'load_jumpbox' => array('lang' => 'YES_JUMPBOX', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => false),

+ 'load_user_activity' => array('lang' => 'LOAD_USER_ACTIVITY', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+ 'load_tplcompile' => array('lang' => 'RECOMPILE_STYLES', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+

+ 'legend3' => 'CUSTOM_PROFILE_FIELDS',

+ 'load_cpf_memberlist' => array('lang' => 'LOAD_CPF_MEMBERLIST', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => false),

+ 'load_cpf_viewprofile' => array('lang' => 'LOAD_CPF_VIEWPROFILE', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => false),

+ 'load_cpf_viewtopic' => array('lang' => 'LOAD_CPF_VIEWTOPIC', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => false),

+ )

+ );

+ break;

+

+ case 'auth':

+ $display_vars = array(

+ 'title' => 'ACP_AUTH_SETTINGS',

+ 'vars' => array(

+ 'legend1' => 'ACP_AUTH_SETTINGS',

+ 'auth_method' => array('lang' => 'AUTH_METHOD', 'validate' => 'string', 'type' => 'select', 'method' => 'select_auth_method', 'explain' => false)

+ )

+ );

+ break;

+

+ case 'server':

+ $display_vars = array(

+ 'title' => 'ACP_SERVER_SETTINGS',

+ 'vars' => array(

+ 'legend1' => 'ACP_SERVER_SETTINGS',

+ 'gzip_compress' => array('lang' => 'ENABLE_GZIP', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+

+ 'legend2' => 'PATH_SETTINGS',

+ 'smilies_path' => array('lang' => 'SMILIES_PATH', 'validate' => 'rpath', 'type' => 'text:20:255', 'explain' => true),

+ 'icons_path' => array('lang' => 'ICONS_PATH', 'validate' => 'rpath', 'type' => 'text:20:255', 'explain' => true),

+ 'upload_icons_path' => array('lang' => 'UPLOAD_ICONS_PATH', 'validate' => 'rpath', 'type' => 'text:20:255', 'explain' => true),

+ 'ranks_path' => array('lang' => 'RANKS_PATH', 'validate' => 'rpath', 'type' => 'text:20:255', 'explain' => true),

+

+ 'legend3' => 'SERVER_URL_SETTINGS',

+ 'force_server_vars' => array('lang' => 'FORCE_SERVER_VARS', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+ 'server_protocol' => array('lang' => 'SERVER_PROTOCOL', 'validate' => 'string', 'type' => 'text:10:10', 'explain' => true),

+ 'server_name' => array('lang' => 'SERVER_NAME', 'validate' => 'string', 'type' => 'text:40:255', 'explain' => true),

+ 'server_port' => array('lang' => 'SERVER_PORT', 'validate' => 'int:0', 'type' => 'text:5:5', 'explain' => true),

+ 'script_path' => array('lang' => 'SCRIPT_PATH', 'validate' => 'script_path', 'type' => 'text::255', 'explain' => true),

+ )

+ );

+ break;

+

+ case 'security':

+ $display_vars = array(

+ 'title' => 'ACP_SECURITY_SETTINGS',

+ 'vars' => array(

+ 'legend1' => 'ACP_SECURITY_SETTINGS',

+ 'allow_autologin' => array('lang' => 'ALLOW_AUTOLOGIN', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+ 'max_autologin_time' => array('lang' => 'AUTOLOGIN_LENGTH', 'validate' => 'int:0', 'type' => 'text:5:5', 'explain' => true, 'append' => ' ' . $user->lang['DAYS']),

+ 'ip_check' => array('lang' => 'IP_VALID', 'validate' => 'int', 'type' => 'custom', 'method' => 'select_ip_check', 'explain' => true),

+ 'browser_check' => array('lang' => 'BROWSER_VALID', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+ 'forwarded_for_check' => array('lang' => 'FORWARDED_FOR_VALID', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+ 'referer_validation' => array('lang' => 'REFERER_VALID', 'validate' => 'int:0:3','type' => 'custom', 'method' => 'select_ref_check', 'explain' => true),

+ 'check_dnsbl' => array('lang' => 'CHECK_DNSBL', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+ 'email_check_mx' => array('lang' => 'EMAIL_CHECK_MX', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+ 'pass_complex' => array('lang' => 'PASSWORD_TYPE', 'validate' => 'string', 'type' => 'select', 'method' => 'select_password_chars', 'explain' => true),

+ 'chg_passforce' => array('lang' => 'FORCE_PASS_CHANGE', 'validate' => 'int:0', 'type' => 'text:3:3', 'explain' => true, 'append' => ' ' . $user->lang['DAYS']),

+ 'max_login_attempts' => array('lang' => 'MAX_LOGIN_ATTEMPTS', 'validate' => 'int:0', 'type' => 'text:3:3', 'explain' => true),

+ 'tpl_allow_php' => array('lang' => 'TPL_ALLOW_PHP', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+ 'form_token_lifetime' => array('lang' => 'FORM_TIME_MAX', 'validate' => 'int:-1', 'type' => 'text:5:5', 'explain' => true, 'append' => ' ' . $user->lang['SECONDS']),

+ 'form_token_sid_guests' => array('lang' => 'FORM_SID_GUESTS', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+

+ )

+ );

+ break;

+

+ case 'email':

+ $display_vars = array(

+ 'title' => 'ACP_EMAIL_SETTINGS',

+ 'vars' => array(

+ 'legend1' => 'GENERAL_SETTINGS',

+ 'email_enable' => array('lang' => 'ENABLE_EMAIL', 'validate' => 'bool', 'type' => 'radio:enabled_disabled', 'explain' => true),

+ 'board_email_form' => array('lang' => 'BOARD_EMAIL_FORM', 'validate' => 'bool', 'type' => 'radio:enabled_disabled', 'explain' => true),

+ 'email_function_name' => array('lang' => 'EMAIL_FUNCTION_NAME', 'validate' => 'string', 'type' => 'text:20:50', 'explain' => true),

+ 'email_package_size' => array('lang' => 'EMAIL_PACKAGE_SIZE', 'validate' => 'int:0', 'type' => 'text:5:5', 'explain' => true),

+ 'board_contact' => array('lang' => 'CONTACT_EMAIL', 'validate' => 'string', 'type' => 'text:25:100', 'explain' => true),

+ 'board_email' => array('lang' => 'ADMIN_EMAIL', 'validate' => 'string', 'type' => 'text:25:100', 'explain' => true),

+ 'board_email_sig' => array('lang' => 'EMAIL_SIG', 'validate' => 'string', 'type' => 'textarea:5:30', 'explain' => true),

+ 'board_hide_emails' => array('lang' => 'BOARD_HIDE_EMAILS', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+

+ 'legend2' => 'SMTP_SETTINGS',

+ 'smtp_delivery' => array('lang' => 'USE_SMTP', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+ 'smtp_host' => array('lang' => 'SMTP_SERVER', 'validate' => 'string', 'type' => 'text:25:50', 'explain' => false),

+ 'smtp_port' => array('lang' => 'SMTP_PORT', 'validate' => 'int:0', 'type' => 'text:4:5', 'explain' => true),

+ 'smtp_auth_method' => array('lang' => 'SMTP_AUTH_METHOD', 'validate' => 'string', 'type' => 'select', 'method' => 'mail_auth_select', 'explain' => true),

+ 'smtp_username' => array('lang' => 'SMTP_USERNAME', 'validate' => 'string', 'type' => 'text:25:255', 'explain' => true),

+ 'smtp_password' => array('lang' => 'SMTP_PASSWORD', 'validate' => 'string', 'type' => 'password:25:255', 'explain' => true)

+ )

+ );

+ break;

+

+ default:

+ trigger_error('NO_MODE', E_USER_ERROR);

+ break;

+ }

+

+ if (isset($display_vars['lang']))

+ {

+ $user->add_lang($display_vars['lang']);

+ }

+

+ $this->new_config = $config;

+ $cfg_array = (request::is_set('config')) ? utf8_normalize_nfc(request_var('config', array('' => ''), true)) : $this->new_config;

+ $error = array();

+

+ // We validate the complete config if whished

+ validate_config_vars($display_vars['vars'], $cfg_array, $error);

+

+ if ($submit && !check_form_key($form_key))

+ {

+ $error[] = $user->lang['FORM_INVALID'];

+ }

+ // Do not write values if there is an error

+ if (sizeof($error))

+ {

+ $submit = false;

+ }

+

+ // We go through the display_vars to make sure no one is trying to set variables he/she is not allowed to...

+ foreach ($display_vars['vars'] as $config_name => $null)

+ {

+ if (!isset($cfg_array[$config_name]) || strpos($config_name, 'legend') !== false)

+ {

+ continue;

+ }

+

+ if ($config_name == 'auth_method')

+ {

+ continue;

+ }

+

+ $this->new_config[$config_name] = $config_value = $cfg_array[$config_name];

+

+ if ($config_name == 'email_function_name')

+ {

+ $this->new_config['email_function_name'] = trim(str_replace(array('(', ')'), array('', ''), $this->new_config['email_function_name']));

+ $this->new_config['email_function_name'] = (empty($this->new_config['email_function_name']) || !function_exists($this->new_config['email_function_name'])) ? 'mail' : $this->new_config['email_function_name'];

+ $config_value = $this->new_config['email_function_name'];

+ }

+

+ if ($submit)

+ {

+ set_config($config_name, $config_value);

+ }

+ }

+

+ if ($mode == 'auth')

+ {

+ // Retrieve a list of auth plugins and check their config values

+ $auth_plugins = array();

+

+ $dp = @opendir(PHPBB_ROOT_PATH . 'includes/auth');

+

+ if ($dp)

+ {

+ while (($file = readdir($dp)) !== false)

+ {

+ if (preg_match('#^auth_(.*?)\.' . PHP_EXT . '$#', $file))

+ {

+ $auth_plugins[] = basename(preg_replace('#^auth_(.*?)\.' . PHP_EXT . '$#', '\1', $file));

+ }

+ }

+ closedir($dp);

+

+ sort($auth_plugins);

+ }

+

+ $updated_auth_settings = false;

+ $old_auth_config = array();

+ foreach ($auth_plugins as $method)

+ {

+ if ($method && file_exists(PHPBB_ROOT_PATH . 'includes/auth/auth_' . $method . '.' . PHP_EXT))

+ {

+ include_once(PHPBB_ROOT_PATH . 'includes/auth/auth_' . $method . '.' . PHP_EXT);

+

+ $method = 'acp_' . $method;

+ if (function_exists($method))

+ {

+ if ($fields = $method($this->new_config))

+ {

+ // Check if we need to create config fields for this plugin and save config when submit was pressed

+ foreach ($fields['config'] as $field)

+ {

+ if (!isset($config[$field]))

+ {

+ set_config($field, '');

+ }

+

+ if (!isset($cfg_array[$field]) || strpos($field, 'legend') !== false)

+ {

+ continue;

+ }

+

+ $old_auth_config[$field] = $this->new_config[$field];

+ $config_value = $cfg_array[$field];

+ $this->new_config[$field] = $config_value;

+

+ if ($submit)

+ {

+ $updated_auth_settings = true;

+ set_config($field, $config_value);

+ }

+ }

+ }

+ unset($fields);

+ }

+ }

+ }

+

+ if ($submit && (($cfg_array['auth_method'] != $this->new_config['auth_method']) || $updated_auth_settings))

+ {

+ $method = basename($cfg_array['auth_method']);

+ if ($method && in_array($method, $auth_plugins))

+ {

+ include_once(PHPBB_ROOT_PATH . 'includes/auth/auth_' . $method . '.' . PHP_EXT);

+

+ $method = 'init_' . $method;

+ if (function_exists($method))

+ {

+ if ($error = $method())

+ {

+ foreach ($old_auth_config as $config_name => $config_value)

+ {

+ set_config($config_name, $config_value);

+ }

+ trigger_error($error . adm_back_link($this->u_action), E_USER_WARNING);

+ }

+ }

+ set_config('auth_method', basename($cfg_array['auth_method']));

+ }

+ else

+ {

+ trigger_error('NO_AUTH_PLUGIN', E_USER_ERROR);

+ }

+ }

+ }

+

+ if ($submit)

+ {

+ add_log('admin', 'LOG_CONFIG_' . strtoupper($mode));

+

+ trigger_error($user->lang['CONFIG_UPDATED'] . adm_back_link($this->u_action));

+ }

+

+ $this->tpl_name = 'acp_board';

+ $this->page_title = $display_vars['title'];

+

+ $template->assign_vars(array(

+ 'L_TITLE' => $user->lang[$display_vars['title']],

+ 'L_TITLE_EXPLAIN' => $user->lang[$display_vars['title'] . '_EXPLAIN'],

+

+ 'S_ERROR' => (sizeof($error)) ? true : false,

+ 'ERROR_MSG' => implode('<br />', $error),

+

+ 'U_ACTION' => $this->u_action)

+ );

+

+ // Output relevant page

+ foreach ($display_vars['vars'] as $config_key => $vars)

+ {

+ if (!is_array($vars) && strpos($config_key, 'legend') === false)

+ {

+ continue;

+ }

+

+ if (strpos($config_key, 'legend') !== false)

+ {

+ $template->assign_block_vars('options', array(

+ 'S_LEGEND' => true,

+ 'LEGEND' => (isset($user->lang[$vars])) ? $user->lang[$vars] : $vars)

+ );

+

+ continue;

+ }

+

+ $type = explode(':', $vars['type']);

+

+ $l_explain = '';

+ if ($vars['explain'] && isset($vars['lang_explain']))

+ {

+ $l_explain = (isset($user->lang[$vars['lang_explain']])) ? $user->lang[$vars['lang_explain']] : $vars['lang_explain'];

+ }

+ else if ($vars['explain'])

+ {

+ $l_explain = (isset($user->lang[$vars['lang'] . '_EXPLAIN'])) ? $user->lang[$vars['lang'] . '_EXPLAIN'] : '';

+ }

+

+ $content = build_cfg_template($type, $config_key, $this->new_config, $config_key, $vars);

+

+ if (empty($content))

+ {

+ continue;

+ }

+

+ $template->assign_block_vars('options', array(

+ 'KEY' => $config_key,

+ 'TITLE' => (isset($user->lang[$vars['lang']])) ? $user->lang[$vars['lang']] : $vars['lang'],

+ 'S_EXPLAIN' => $vars['explain'],

+ 'TITLE_EXPLAIN' => $l_explain,

+ 'CONTENT' => $content,

+ )

+ );

+

+ unset($display_vars['vars'][$config_key]);

+ }

+

+ if ($mode == 'auth')

+ {

+ $template->assign_var('S_AUTH', true);

+

+ foreach ($auth_plugins as $method)

+ {

+ if ($method && file_exists(PHPBB_ROOT_PATH . 'includes/auth/auth_' . $method . '.' . PHP_EXT))

+ {

+ $method = 'acp_' . $method;

+ if (function_exists($method))

+ {

+ $fields = $method($this->new_config);

+

+ if ($fields['tpl'])

+ {

+ $template->assign_block_vars('auth_tpl', array(

+ 'TPL' => $fields['tpl'])

+ );

+ }

+ unset($fields);

+ }

+ }

+ }

+ }

+ }

+

+ /**

+ * Select auth method

+ */

+ function select_auth_method($selected_method, $key = '')

+ {

+ $auth_plugins = array();

+

+ $dp = @opendir(PHPBB_ROOT_PATH . 'includes/auth');

+

+ if (!$dp)

+ {

+ return '';

+ }

+

+ while (($file = readdir($dp)) !== false)

+ {

+ if (preg_match('#^auth_(.*?)\.' . PHP_EXT . '$#', $file))

+ {

+ $auth_plugins[] = preg_replace('#^auth_(.*?)\.' . PHP_EXT . '$#', '\1', $file);

+ }

+ }

+ closedir($dp);

+

+ sort($auth_plugins);

+

+ $auth_select = '';

+ foreach ($auth_plugins as $method)

+ {

+ $selected = ($selected_method == $method) ? ' selected="selected"' : '';

+ $auth_select .= '<option value="' . $method . '"' . $selected . '>' . ucfirst($method) . '</option>';

+ }

+

+ return $auth_select;

+ }

+

+ /**

+ * Select mail authentication method

+ */

+ function mail_auth_select($selected_method, $key = '')

+ {

+ global $user;

+

+ $auth_methods = array('PLAIN', 'LOGIN', 'CRAM-MD5', 'DIGEST-MD5', 'POP-BEFORE-SMTP');

+ $s_smtp_auth_options = '';

+

+ foreach ($auth_methods as $method)

+ {

+ $s_smtp_auth_options .= '<option value="' . $method . '"' . (($selected_method == $method) ? ' selected="selected"' : '') . '>' . $user->lang['SMTP_' . str_replace('-', '_', $method)] . '</option>';

+ }

+

+ return $s_smtp_auth_options;

+ }

+

+ /**

+ * Select full folder action

+ */

+ function full_folder_select($value, $key = '')

+ {

+ global $user;

+

+ return '<option value="1"' . (($value == 1) ? ' selected="selected"' : '') . '>' . $user->lang['DELETE_OLDEST_MESSAGES'] . '</option><option value="2"' . (($value == 2) ? ' selected="selected"' : '') . '>' . $user->lang['HOLD_NEW_MESSAGES_SHORT'] . '</option>';

+ }

+

+ /**

+ * Select ip validation

+ */

+ function select_ip_check($value, $key = '')

+ {

+ $radio_ary = array(4 => 'ALL', 3 => 'CLASS_C', 2 => 'CLASS_B', 0 => 'NO_IP_VALIDATION');

+

+ return h_radio('config[ip_check]', $radio_ary, $value, $key);

+ }

+

+ /**

+ * Select referer validation

+ */

+ function select_ref_check($value, $key = '')

+ {

+ $radio_ary = array(REFERER_VALIDATE_PATH => 'REF_PATH', REFERER_VALIDATE_HOST => 'REF_HOST', REFERER_VALIDATE_NONE => 'NO_REF_VALIDATION');

+

+ return h_radio('config[referer_validation]', $radio_ary, $value, $key);

+ }

+

+ /**

+ * Select account activation method

+ */

+ function select_acc_activation($value, $key = '')

+ {

+ global $user, $config;

+

+ $radio_ary = array(USER_ACTIVATION_DISABLE => 'ACC_DISABLE', USER_ACTIVATION_NONE => 'ACC_NONE');

+ if ($config['email_enable'])

+ {

+ $radio_ary += array(USER_ACTIVATION_SELF => 'ACC_USER', USER_ACTIVATION_ADMIN => 'ACC_ADMIN');

+ }

+

+ return h_radio('config[require_activation]', $radio_ary, $value, $key);

+ }

+

+ /**

+ * Maximum/Minimum username length

+ */

+ function username_length($value, $key = '')

+ {

+ global $user;

+

+ return '<input id="' . $key . '" type="text" size="3" maxlength="3" name="config[min_name_chars]" value="' . $value . '" /> ' . $user->lang['MIN_CHARS'] . '&nbsp;&nbsp;<input type="text" size="3" maxlength="3" name="config[max_name_chars]" value="' . $this->new_config['max_name_chars'] . '" /> ' . $user->lang['MAX_CHARS'];

+ }

+

+ /**

+ * Allowed chars in usernames

+ */

+ function select_username_chars($selected_value, $key)

+ {

+ global $user;

+

+ $user_char_ary = array('USERNAME_CHARS_ANY', 'USERNAME_ALPHA_ONLY', 'USERNAME_ALPHA_SPACERS', 'USERNAME_LETTER_NUM', 'USERNAME_LETTER_NUM_SPACERS', 'USERNAME_ASCII');

+ $user_char_options = '';

+ foreach ($user_char_ary as $user_type)

+ {

+ $selected = ($selected_value == $user_type) ? ' selected="selected"' : '';

+ $user_char_options .= '<option value="' . $user_type . '"' . $selected . '>' . $user->lang[$user_type] . '</option>';

+ }

+

+ return $user_char_options;

+ }

+

+ /**

+ * Maximum/Minimum password length

+ */

+ function password_length($value, $key)

+ {

+ global $user;

+

+ return '<input id="' . $key . '" type="text" size="3" maxlength="3" name="config[min_pass_chars]" value="' . $value . '" /> ' . $user->lang['MIN_CHARS'] . '&nbsp;&nbsp;<input type="text" size="3" maxlength="3" name="config[max_pass_chars]" value="' . $this->new_config['max_pass_chars'] . '" /> ' . $user->lang['MAX_CHARS'];

+ }

+

+ /**

+ * Required chars in passwords

+ */

+ function select_password_chars($selected_value, $key)

+ {

+ global $user;

+

+ $pass_type_ary = array('PASS_TYPE_ANY', 'PASS_TYPE_CASE', 'PASS_TYPE_ALPHA', 'PASS_TYPE_SYMBOL');

+ $pass_char_options = '';

+ foreach ($pass_type_ary as $pass_type)

+ {

+ $selected = ($selected_value == $pass_type) ? ' selected="selected"' : '';

+ $pass_char_options .= '<option value="' . $pass_type . '"' . $selected . '>' . $user->lang[$pass_type] . '</option>';

+ }

+

+ return $pass_char_options;

+ }

+

+ /**

+ * Select bump interval

+ */

+ function bump_interval($value, $key)

+ {

+ global $user;

+

+ $s_bump_type = '';

+ $types = array('m' => 'MINUTES', 'h' => 'HOURS', 'd' => 'DAYS');

+ foreach ($types as $type => $lang)

+ {

+ $selected = ($this->new_config['bump_type'] == $type) ? ' selected="selected"' : '';

+ $s_bump_type .= '<option value="' . $type . '"' . $selected . '>' . $user->lang[$lang] . '</option>';

+ }

+

+ return '<input id="' . $key . '" type="text" size="3" maxlength="4" name="config[bump_interval]" value="' . $value . '" />&nbsp;<select name="config[bump_type]">' . $s_bump_type . '</select>';

+ }

+

+ /**

+ * Board disable option and message

+ */

+ function board_disable($value, $key)

+ {

+ global $user;

+

+ $radio_ary = array(1 => 'YES', 0 => 'NO');

+

+ return h_radio('config[board_disable]', $radio_ary, $value) . '<br /><input id="' . $key . '" type="text" name="config[board_disable_msg]" maxlength="255" size="40" value="' . $this->new_config['board_disable_msg'] . '" />';

+ }

+

+ /**

+ * Select default dateformat

+ */

+ function dateformat_select($value, $key)

+ {

+ global $user, $config;

+

+ // Let the format_date function operate with the acp values

+ $old_tz = $user->timezone;

+ $old_dst = $user->dst;

+

+ $user->timezone = $config['board_timezone'];

+ $user->dst = $config['board_dst'];

+

+ $dateformat_options = '';

+

+ foreach ($user->lang['dateformats'] as $format => $null)

+ {

+ $dateformat_options .= '<option value="' . $format . '"' . (($format == $value) ? ' selected="selected"' : '') . '>';

+ $dateformat_options .= $user->format_date(time(), $format, false) . ((strpos($format, '|') !== false) ? $user->lang['VARIANT_DATE_SEPARATOR'] . $user->format_date(time(), $format, true) : '');

+ $dateformat_options .= '</option>';

+ }

+

+ $dateformat_options .= '<option value="custom"';

+ if (!isset($user->lang['dateformats'][$value]))

+ {

+ $dateformat_options .= ' selected="selected"';

+ }

+ $dateformat_options .= '>' . $user->lang['CUSTOM_DATEFORMAT'] . '</option>';

+

+ // Reset users date options

+ $user->timezone = $old_tz;

+ $user->dst = $old_dst;

+

+ return "<select name=\"dateoptions\" id=\"dateoptions\" onchange=\"if (this.value == 'custom') { document.getElementById('" . addslashes($key) . "').value = '" . addslashes($value) . "'; } else { document.getElementById('" . addslashes($key) . "').value = this.value; }\">$dateformat_options</select>

+ <input type=\"text\" name=\"config[$key]\" id=\"$key\" value=\"$value\" maxlength=\"30\" />";

+ }

+}

+

+?> \ No newline at end of file

+<?php

+/**

+*

+* @package acp

+* @version $Id$

+* @copyright (c) 2005 phpBB Group

+* @license http://opensource.org/licenses/gpl-license.php GNU Public License

+*

+*/

+

+/**

+* @ignore

+*/

+if (!defined('IN_PHPBB'))

+{

+ exit;

+}

+

+/**

+* @package acp

+*/

+class acp_bots

+{

+ var $u_action;

+

+ function main($id, $mode)

+ {

+ global $config, $db, $user, $auth, $template, $cache;

+

+ $action = request_var('action', '');

+ $submit = request::is_set_post('submit');

+ $mark = request_var('mark', array(0));

+ $bot_id = request_var('id', 0);

+

+ if (request::is_set_post('add'))

+ {

+ $action = 'add';

+ }

+

+ $error = array();

+

+ $user->add_lang('acp/bots');

+ $this->tpl_name = 'acp_bots';

+ $this->page_title = 'ACP_BOTS';

+ $form_key = 'acp_bots';

+ add_form_key($form_key);

+

+ if ($submit && !check_form_key($form_key))

+ {

+ $error[] = $user->lang['FORM_INVALID'];

+ }

+

+ // User wants to do something, how inconsiderate of them!

+ switch ($action)

+ {

+ case 'activate':

+ if ($bot_id || sizeof($mark))

+ {

+ $sql_id = ($bot_id) ? " = $bot_id" : ' IN (' . implode(', ', $mark) . ')';

+

+ $sql = 'UPDATE ' . BOTS_TABLE . "

+ SET bot_active = 1

+ WHERE bot_id $sql_id";

+ $db->sql_query($sql);

+ }

+

+ $cache->destroy('_bots');

+ break;

+

+ case 'deactivate':

+ if ($bot_id || sizeof($mark))

+ {

+ $sql_id = ($bot_id) ? " = $bot_id" : ' IN (' . implode(', ', $mark) . ')';

+

+ $sql = 'UPDATE ' . BOTS_TABLE . "

+ SET bot_active = 0

+ WHERE bot_id $sql_id";

+ $db->sql_query($sql);

+ }

+

+ $cache->destroy('_bots');

+ break;

+

+ case 'delete':

+ if ($bot_id || sizeof($mark))

+ {

+ if (confirm_box(true))

+ {

+ // We need to delete the relevant user, usergroup and bot entries ...

+ $sql_id = ($bot_id) ? " = $bot_id" : ' IN (' . implode(', ', $mark) . ')';

+

+ $sql = 'SELECT bot_name, user_id

+ FROM ' . BOTS_TABLE . "

+ WHERE bot_id $sql_id";

+ $result = $db->sql_query($sql);

+

+ $user_id_ary = $bot_name_ary = array();

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $user_id_ary[] = (int) $row['user_id'];

+ $bot_name_ary[] = $row['bot_name'];

+ }

+ $db->sql_freeresult($result);

+

+ $db->sql_transaction('begin');

+

+ $sql = 'DELETE FROM ' . BOTS_TABLE . "

+ WHERE bot_id $sql_id";

+ $db->sql_query($sql);

+

+ if (sizeof($user_id_ary))

+ {

+ $_tables = array(USERS_TABLE, USER_GROUP_TABLE);

+ foreach ($_tables as $table)

+ {

+ $sql = "DELETE FROM $table

+ WHERE " . $db->sql_in_set('user_id', $user_id_ary);

+ $db->sql_query($sql);

+ }

+ }

+

+ $db->sql_transaction('commit');

+

+ $cache->destroy('_bots');

+

+ add_log('admin', 'LOG_BOT_DELETE', implode(', ', $bot_name_ary));

+ trigger_error($user->lang['BOT_DELETED'] . adm_back_link($this->u_action));

+ }

+ else

+ {

+ confirm_box(false, $user->lang['CONFIRM_OPERATION'], build_hidden_fields(array(

+ 'mark' => $mark,

+ 'id' => $bot_id,

+ 'mode' => $mode,

+ 'action' => $action))

+ );

+ }

+ }

+ break;

+

+ case 'edit':

+ case 'add':

+ include_once(PHPBB_ROOT_PATH . 'includes/functions_user.' . PHP_EXT);

+

+ $bot_row = array(

+ 'bot_name' => utf8_normalize_nfc(request_var('bot_name', '', true)),

+ 'bot_agent' => request_var('bot_agent', ''),

+ 'bot_ip' => request_var('bot_ip', ''),

+ 'bot_active' => request_var('bot_active', true),

+ 'bot_lang' => request_var('bot_lang', $config['default_lang']),

+ 'bot_style' => request_var('bot_style' , $config['default_style']),

+ );

+

+ if ($submit)

+ {

+ if (!$bot_row['bot_agent'] && !$bot_row['bot_ip'])

+ {

+ $error[] = $user->lang['ERR_BOT_NO_MATCHES'];

+ }

+

+ if ($bot_row['bot_ip'] && !preg_match('#^[\d\.,:]+$#', $bot_row['bot_ip']))

+ {

+ if (!$ip_list = gethostbynamel($bot_row['bot_ip']))

+ {

+ $error[] = $user->lang['ERR_BOT_NO_IP'];

+ }

+ else

+ {

+ $bot_row['bot_ip'] = implode(',', $ip_list);

+ }

+ }

+ $bot_row['bot_ip'] = str_replace(' ', '', $bot_row['bot_ip']);

+

+ // Make sure the admin is not adding a bot with an user agent similar to his one

+ if ($bot_row['bot_agent'] && substr($user->data['session_browser'], 0, 149) === substr($bot_row['bot_agent'], 0, 149))

+ {

+ $error[] = $user->lang['ERR_BOT_AGENT_MATCHES_UA'];

+ }

+

+ $bot_name = false;

+ if ($bot_id)

+ {

+ $sql = 'SELECT u.username_clean

+ FROM ' . BOTS_TABLE . ' b, ' . USERS_TABLE . " u

+ WHERE b.bot_id = $bot_id

+ AND u.user_id = b.user_id";

+ $result = $db->sql_query($sql);

+ $row = $db->sql_fetchrow($result);

+ $db->sql_freeresult($result);

+

+ if (!$bot_row)

+ {

+ $error[] = $user->lang['NO_BOT'];

+ }

+ else

+ {

+ $bot_name = $row['username_clean'];

+ }

+ }

+ if (!$this->validate_botname($bot_row['bot_name'], $bot_name))

+ {

+ $error[] = $user->lang['BOT_NAME_TAKEN'];

+ }

+

+ if (!sizeof($error))

+ {

+ // New bot? Create a new user and group entry

+ if ($action == 'add')

+ {

+ $sql = 'SELECT group_id, group_colour

+ FROM ' . GROUPS_TABLE . "

+ WHERE group_name_clean = 'bots'

+ AND group_type = " . GROUP_SPECIAL;

+ $result = $db->sql_query($sql);

+ $group_row = $db->sql_fetchrow($result);

+ $db->sql_freeresult($result);

+

+ if (!$group_row)

+ {

+ trigger_error($user->lang['NO_BOT_GROUP'] . adm_back_link($this->u_action . "&amp;id=$bot_id&amp;action=$action"), E_USER_WARNING);

+ }

+

+

+ $user_id = user_add(array(

+ 'user_type' => (int) USER_IGNORE,

+ 'group_id' => (int) $group_row['group_id'],

+ 'username' => (string) $bot_row['bot_name'],

+ 'user_regdate' => time(),

+ 'user_password' => '',

+ 'user_colour' => (string) $group_row['group_colour'],

+ 'user_email' => '',

+ 'user_lang' => (string) $bot_row['bot_lang'],

+ 'user_style' => (int) $bot_row['bot_style'],

+ 'user_allow_massemail' => 0,

+ ));

+

+ $sql = 'INSERT INTO ' . BOTS_TABLE . ' ' . $db->sql_build_array('INSERT', array(

+ 'user_id' => (int) $user_id,

+ 'bot_name' => (string) $bot_row['bot_name'],

+ 'bot_active' => (int) $bot_row['bot_active'],

+ 'bot_agent' => (string) $bot_row['bot_agent'],

+ 'bot_ip' => (string) $bot_row['bot_ip'])

+ );

+ $db->sql_query($sql);

+

+ $log = 'ADDED';

+ }

+ else if ($bot_id)

+ {

+ $sql = 'SELECT user_id, bot_name

+ FROM ' . BOTS_TABLE . "

+ WHERE bot_id = $bot_id";

+ $result = $db->sql_query($sql);

+ $row = $db->sql_fetchrow($result);

+ $db->sql_freeresult($result);

+

+ if (!$row)

+ {

+ trigger_error($user->lang['NO_BOT'] . adm_back_link($this->u_action . "&amp;id=$bot_id&amp;action=$action"), E_USER_WARNING);

+ }

+

+ $sql_ary = array(

+ 'user_style' => (int) $bot_row['bot_style'],

+ 'user_lang' => (string) $bot_row['bot_lang'],

+ );

+

+ if ($bot_row['bot_name'] !== $row['bot_name'])

+ {

+ $sql_ary['username'] = (string) $bot_row['bot_name'];

+ $sql_ary['username_clean'] = (string) utf8_clean_string($bot_row['bot_name']);

+ }

+

+ $sql = 'UPDATE ' . USERS_TABLE . ' SET ' . $db->sql_build_array('UPDATE', $sql_ary) . " WHERE user_id = {$row['user_id']}";

+ $db->sql_query($sql);

+

+ $sql = 'UPDATE ' . BOTS_TABLE . ' SET ' . $db->sql_build_array('UPDATE', array(

+ 'bot_name' => (string) $bot_row['bot_name'],

+ 'bot_active' => (int) $bot_row['bot_active'],

+ 'bot_agent' => (string) $bot_row['bot_agent'],

+ 'bot_ip' => (string) $bot_row['bot_ip'])

+ ) . " WHERE bot_id = $bot_id";

+ $db->sql_query($sql);

+

+ // Updated username?

+ if ($bot_row['bot_name'] !== $row['bot_name'])

+ {

+ user_update_name($row['bot_name'], $bot_row['bot_name']);

+ }

+

+ $log = 'UPDATED';

+ }

+

+ $cache->destroy('_bots');

+

+ add_log('admin', 'LOG_BOT_' . $log, $bot_row['bot_name']);

+ trigger_error($user->lang['BOT_' . $log] . adm_back_link($this->u_action));

+

+ }

+ }

+ else if ($bot_id)

+ {

+ $sql = 'SELECT b.*, u.user_lang, u.user_style

+ FROM ' . BOTS_TABLE . ' b, ' . USERS_TABLE . " u

+ WHERE b.bot_id = $bot_id

+ AND u.user_id = b.user_id";

+ $result = $db->sql_query($sql);

+ $bot_row = $db->sql_fetchrow($result);

+ $db->sql_freeresult($result);

+

+ if (!$bot_row)

+ {

+ trigger_error($user->lang['NO_BOT'] . adm_back_link($this->u_action . "&amp;id=$bot_id&amp;action=$action"), E_USER_WARNING);

+ }

+

+ $bot_row['bot_lang'] = $bot_row['user_lang'];

+ $bot_row['bot_style'] = $bot_row['user_style'];

+ unset($bot_row['user_lang'], $bot_row['user_style']);

+ }

+

+ $s_active_options = '';

+ $_options = array('0' => 'NO', '1' => 'YES');

+ foreach ($_options as $value => $lang)

+ {

+ $selected = ($bot_row['bot_active'] == $value) ? ' selected="selected"' : '';

+ $s_active_options .= '<option value="' . $value . '"' . $selected . '>' . $user->lang[$lang] . '</option>';

+ }

+

+ $style_select = style_select($bot_row['bot_style'], true);

+ $lang_select = language_select($bot_row['bot_lang']);

+

+ $l_title = ($action == 'edit') ? 'EDIT' : 'ADD';

+

+ $template->assign_vars(array(

+ 'L_TITLE' => $user->lang['BOT_' . $l_title],

+ 'U_ACTION' => $this->u_action . "&amp;id=$bot_id&amp;action=$action",

+ 'U_BACK' => $this->u_action,

+ 'ERROR_MSG' => (sizeof($error)) ? implode('<br />', $error) : '',

+

+ 'BOT_NAME' => $bot_row['bot_name'],

+ 'BOT_IP' => $bot_row['bot_ip'],

+ 'BOT_AGENT' => $bot_row['bot_agent'],

+

+ 'S_EDIT_BOT' => true,

+ 'S_ACTIVE_OPTIONS' => $s_active_options,

+ 'S_STYLE_OPTIONS' => $style_select,

+ 'S_LANG_OPTIONS' => $lang_select,

+ 'S_ERROR' => (sizeof($error)) ? true : false,

+ )

+ );

+

+ return;

+

+ break;

+ }

+

+ $s_options = '';

+ $_options = array('activate' => 'BOT_ACTIVATE', 'deactivate' => 'BOT_DEACTIVATE', 'delete' => 'DELETE');

+ foreach ($_options as $value => $lang)

+ {

+ $s_options .= '<option value="' . $value . '">' . $user->lang[$lang] . '</option>';

+ }

+

+ $template->assign_vars(array(

+ 'U_ACTION' => $this->u_action,

+ 'S_BOT_OPTIONS' => $s_options)

+ );

+

+ $sql = 'SELECT b.bot_id, b.bot_name, b.bot_active, u.user_lastvisit

+ FROM ' . BOTS_TABLE . ' b, ' . USERS_TABLE . ' u

+ WHERE u.user_id = b.user_id

+ ORDER BY u.user_lastvisit DESC, b.bot_name ASC';

+ $result = $db->sql_query($sql);

+

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $active_lang = (!$row['bot_active']) ? 'BOT_ACTIVATE' : 'BOT_DEACTIVATE';

+ $active_value = (!$row['bot_active']) ? 'activate' : 'deactivate';

+

+ $template->assign_block_vars('bots', array(

+ 'BOT_NAME' => $row['bot_name'],

+ 'BOT_ID' => $row['bot_id'],

+ 'LAST_VISIT' => ($row['user_lastvisit']) ? $user->format_date($row['user_lastvisit']) : $user->lang['BOT_NEVER'],

+

+ 'U_ACTIVATE_DEACTIVATE' => $this->u_action . "&amp;id={$row['bot_id']}&amp;action=$active_value",

+ 'L_ACTIVATE_DEACTIVATE' => $user->lang[$active_lang],

+ 'U_EDIT' => $this->u_action . "&amp;id={$row['bot_id']}&amp;action=edit",

+ 'U_DELETE' => $this->u_action . "&amp;id={$row['bot_id']}&amp;action=delete")

+ );

+ }

+ $db->sql_freeresult($result);

+ }

+

+ /**

+ * Validate bot name against username table

+ */

+ function validate_botname($newname, $oldname = false)

+ {

+ global $db;

+

+ if ($oldname && utf8_clean_string($newname) === $oldname)

+ {

+ return true;

+ }

+

+ // Admins might want to use names otherwise forbidden, thus we only check for duplicates.

+ $sql = 'SELECT username

+ FROM ' . USERS_TABLE . "

+ WHERE username_clean = '" . $db->sql_escape(utf8_clean_string($newname)) . "'";

+ $result = $db->sql_query($sql);

+ $row = $db->sql_fetchrow($result);

+ $db->sql_freeresult($result);

+

+ return ($row) ? false : true;

+ }

+}

+

+?> \ No newline at end of file

+<?php

+/**

+*

+* @package acp

+* @version $Id$

+* @copyright (c) 2005 phpBB Group

+* @license http://opensource.org/licenses/gpl-license.php GNU Public License

+*/

+

+/**

+* @ignore

+*/

+

+

+if (!defined('IN_PHPBB'))

+{

+ exit;

+}

+

+/**

+* @package acp

+*/

+class acp_captcha

+{

+ var $u_action;

+

+ function main($id, $mode)

+ {

+ global $db, $user, $auth, $template, $config;

+

+ $user->add_lang('acp/board');

+

+ include(PHPBB_ROOT_PATH . 'includes/captcha/captcha_factory.' . PHP_EXT);

+

+ $selected = request_var('select_captcha', $config['captcha_plugin']);

+ $configure = request_var('configure', false);

+

+ // Oh, they are just here for the view

+ if (request::is_set('captcha_demo', request::GET))

+ {

+ $this->deliver_demo($selected);

+ }

+

+ // Delegate

+ if ($configure)

+ {

+ $config_captcha = phpbb_captcha_factory::get_instance($selected);

+ $config_captcha->acp_page($id, $this);

+ }

+ else

+ {

+ $captchas = phpbb_captcha_factory::get_captcha_types();

+

+ $config_vars = array(

+ 'enable_confirm' => 'REG_ENABLE',

+ 'enable_post_confirm' => 'POST_ENABLE',

+ );

+

+ $this->tpl_name = 'acp_captcha';

+ $this->page_title = 'ACP_VC_SETTINGS';

+ $form_key = 'acp_captcha';

+ add_form_key($form_key);

+

+ $submit = request_var('main_submit', false);

+

+ if ($submit && check_form_key($form_key))

+ {

+ $config_vars = array_keys($config_vars);

+ foreach ($config_vars as $config_var)

+ {

+ set_config($config_var, request_var($config_var, false));

+ }

+ if ($selected !== $config['captcha_plugin'])

+ {

+ // sanity check

+ if (isset($captchas['available'][$selected]))

+ {

+ $old_captcha = phpbb_captcha_factory::get_instance($config['captcha_plugin']);

+ $old_captcha->uninstall();

+ set_config('captcha_plugin', $selected);

+ $new_captcha = phpbb_captcha_factory::get_instance($config['captcha_plugin']);

+ $new_captcha->install();

+ }

+ else

+ {

+ trigger_error($user->lang['CAPTCHA_UNAVAILABLE'] . adm_back_link($this->u_action));

+ }

+ }

+ trigger_error($user->lang['CONFIG_UPDATED'] . adm_back_link($this->u_action));

+ }

+ else if ($submit)

+ {

+ trigger_error($user->lang['FORM_INVALID'] . adm_back_link());

+ }

+ else

+ {

+ $captcha_select = '';

+ foreach ($captchas['available'] as $value => $title)

+ {

+ $current = ($selected !== false && $value == $selected) ? ' selected="selected"' : '';

+ $captcha_select .= '<option value="' . $value . '"' . $current . '>' . $user->lang[$title] . '</option>';

+ }

+ foreach ($captchas['unavailable'] as $value => $title)

+ {

+ $captcha_select .= '<option value="' . $value . '"' . $current . ' class="disabled-option" >' . $user->lang[$title] . '</option>';

+ }

+

+ $demo_captcha = phpbb_captcha_factory::get_instance($selected);

+

+ foreach ($config_vars as $config_var => $template_var)

+ {

+ $template->assign_var($template_var, request_var($config_var, $config[$config_var])) ;

+ }

+

+ $template->assign_vars(array(

+ 'CAPTCHA_PREVIEW' => $demo_captcha->get_demo_template($id),

+ 'CAPTCHA_SELECT' => $captcha_select,

+ ));

+ }

+

+ }

+ }

+

+

+ /**

+ * Entry point for delivering image CAPTCHAs in the ACP.

+ */

+ function deliver_demo($selected)

+ {

+ global $db, $user, $config;

+

+ $captcha = phpbb_captcha_factory::get_instance($selected);

+ $captcha->init(CONFIRM_REG);

+ $captcha->execute_demo();

+ garbage_collection();

+ exit_handler();

+ }

+

+

+

+

+}

+

+?> \ No newline at end of file

+<?php

+/**

+*

+* @package acp

+* @version $Id$

+* @copyright (c) 2005 phpBB Group

+* @license http://opensource.org/licenses/gpl-license.php GNU Public License

+*

+*/

+

+/**

+* @ignore

+*/

+if (!defined('IN_PHPBB'))

+{

+ exit;

+}

+

+/**

+* @package acp

+*/

+class acp_database

+{

+ var $u_action;

+

+ function main($id, $mode)

+ {

+ global $cache, $db, $user, $auth, $template, $table_prefix, $config;

+

+ $user->add_lang('acp/database');

+

+ $this->tpl_name = 'acp_database';

+ $this->page_title = 'ACP_DATABASE';

+

+ $action = request_var('action', '');

+ $submit = request::is_set_post('submit');

+

+ $template->assign_vars(array(

+ 'MODE' => $mode

+ ));

+

+ switch ($mode)

+ {

+ case 'backup':

+

+ $this->page_title = 'ACP_BACKUP';

+

+ switch ($action)

+ {

+ case 'download':

+ $type = request_var('type', '');

+ $table = request_var('table', array(''));

+ $format = request_var('method', '');

+ $where = request_var('where', '');

+

+ if (!sizeof($table))

+ {

+ trigger_error($user->lang['TABLE_SELECT_ERROR'] . adm_back_link($this->u_action), E_USER_WARNING);

+ }

+

+ $store = $download = $structure = $schema_data = false;

+

+ if ($where == 'store_and_download' || $where == 'store')

+ {

+ $store = true;

+ }

+

+ if ($where == 'store_and_download' || $where == 'download')

+ {

+ $download = true;

+ }

+

+ if ($type == 'full' || $type == 'structure')

+ {

+ $structure = true;

+ }

+

+ if ($type == 'full' || $type == 'data')

+ {

+ $schema_data = true;

+ }

+

+ @set_time_limit(1200);

+

+ $time = time();

+

+ $filename = 'backup_' . $time . '_' . unique_id();

+ switch ($db->dbms_type)

+ {

+ case 'mysql':

+ $extractor = new mysql_extractor($download, $store, $format, $filename, $time);

+ break;

+

+ case 'sqlite':

+ $extractor = new sqlite_extractor($download, $store, $format, $filename, $time);

+ break;

+

+ case 'postgres':

+ $extractor = new postgres_extractor($download, $store, $format, $filename, $time);

+ break;

+

+ case 'oracle':

+ $extractor = new oracle_extractor($download, $store, $format, $filename, $time);

+ break;

+

+ case 'mssql':

+ $extractor = new mssql_extractor($download, $store, $format, $filename, $time);

+ break;

+

+ case 'firebird':

+ $extractor = new firebird_extractor($download, $store, $format, $filename, $time);

+ break;

+

+ case 'db2':

+ $extractor = new db2_extractor($download, $store, $format, $filename, $time);

+ break;

+ }

+

+ $extractor->write_start($table_prefix);

+

+ foreach ($table as $table_name)

+ {

+ // Get the table structure

+ if ($structure)

+ {

+ $extractor->write_table($table_name);

+ }

+ else

+ {

+ // We might wanna empty out all that junk :D

+ switch ($db->dbms_type)

+ {

+ case 'sqlite':

+ case 'firebird':

+ case 'db2':

+ $extractor->flush('DELETE FROM ' . $table_name . ";\n");

+ break;

+

+ case 'mssql':

+ $extractor->flush('TRUNCATE TABLE ' . $table_name . "GO\n");

+ break;

+

+ case 'oracle':

+ $extractor->flush('TRUNCATE TABLE ' . $table_name . "\\\n");

+ break;

+

+ default:

+ $extractor->flush('TRUNCATE TABLE ' . $table_name . ";\n");

+ break;

+ }

+ }

+

+ // Data

+ if ($schema_data)

+ {

+ $extractor->write_data($table_name);

+ }

+ }

+

+ $extractor->write_end();

+

+ add_log('admin', 'LOG_DB_BACKUP');

+

+ if ($download == true)

+ {

+ exit;

+ }

+

+ trigger_error($user->lang['BACKUP_SUCCESS'] . adm_back_link($this->u_action));

+ break;

+

+ default:

+ include(PHPBB_ROOT_PATH . 'includes/functions_install.' . PHP_EXT);

+ $tables = get_tables($db);

+ asort($tables);

+ foreach ($tables as $table_name)

+ {

+ if (strlen($table_prefix) === 0 || stripos($table_name, $table_prefix) === 0)

+ {

+ $template->assign_block_vars('tables', array(

+ 'TABLE' => $table_name

+ ));

+ }

+ }

+ unset($tables);

+

+ $template->assign_vars(array(

+ 'U_ACTION' => $this->u_action . '&amp;action=download'

+ ));

+

+ $available_methods = array('gzip' => 'zlib', 'bzip2' => 'bz2');

+

+ foreach ($available_methods as $type => $module)

+ {

+ if (!@extension_loaded($module))

+ {

+ continue;

+ }

+

+ $template->assign_block_vars('methods', array(

+ 'TYPE' => $type

+ ));

+ }

+

+ $template->assign_block_vars('methods', array(

+ 'TYPE' => 'text'

+ ));

+ break;

+ }

+ break;

+

+ case 'restore':

+

+ $this->page_title = 'ACP_RESTORE';

+

+ switch ($action)

+ {

+ case 'submit':

+ $delete = request_var('delete', '');

+ $file = request_var('file', '');

+

+ if (!preg_match('#^backup_\d{10,}_[a-z\d]{16}\.(sql(?:\.(?:gz|bz2))?)$#', $file, $matches))

+ {

+ trigger_error($user->lang['BACKUP_INVALID'] . adm_back_link($this->u_action), E_USER_WARNING);

+ }

+

+ $file_name = PHPBB_ROOT_PATH . 'store/' . $matches[0];

+

+ if (!file_exists($file_name) || !is_readable($file_name))

+ {

+ trigger_error($user->lang['BACKUP_INVALID'] . adm_back_link($this->u_action), E_USER_WARNING);

+ }

+

+ if ($delete)

+ {

+ if (confirm_box(true))

+ {

+ unlink($file_name);

+ add_log('admin', 'LOG_DB_DELETE');

+ trigger_error($user->lang['BACKUP_DELETE'] . adm_back_link($this->u_action));

+ }

+ else

+ {

+ confirm_box(false, $user->lang['DELETE_SELECTED_BACKUP'], build_hidden_fields(array('delete' => $delete, 'file' => $file)));

+ }

+ }

+ else

+ {

+ $download = request_var('download', '');

+

+ if ($download)

+ {

+ $name = $matches[0];

+

+ switch ($matches[1])

+ {

+ case 'sql':

+ $mimetype = 'text/x-sql';

+ break;

+ case 'sql.bz2':

+ $mimetype = 'application/x-bzip2';

+ break;

+ case 'sql.gz':

+ $mimetype = 'application/x-gzip';

+ break;

+ }

+

+ header('Pragma: no-cache');

+ header("Content-Type: $mimetype; name=\"$name\"");

+ header("Content-disposition: attachment; filename=$name");

+

+ @set_time_limit(0);

+

+ $fp = @fopen($file_name, 'rb');

+

+ if ($fp !== false)

+ {

+ while (!feof($fp))

+ {

+ echo fread($fp, 8192);

+ }

+ fclose($fp);

+ }

+

+ flush();

+ exit;

+ }

+

+ switch ($matches[1])

+ {

+ case 'sql':

+ $fp = fopen($file_name, 'rb');

+ $read = 'fread';

+ $seek = 'fseek';

+ $eof = 'feof';

+ $close = 'fclose';

+ $fgetd = 'fgetd';

+ break;

+

+ case 'sql.bz2':

+ $fp = bzopen($file_name, 'r');

+ $read = 'bzread';

+ $seek = '';

+ $eof = 'feof';

+ $close = 'bzclose';

+ $fgetd = 'fgetd_seekless';

+ break;

+

+ case 'sql.gz':

+ $fp = gzopen($file_name, 'rb');

+ $read = 'gzread';

+ $seek = 'gzseek';

+ $eof = 'gzeof';

+ $close = 'gzclose';

+ $fgetd = 'fgetd';

+ break;

+ }

+

+ switch ($db->dbms_type)

+ {

+ case 'mysql':

+ case 'sqlite':

+ case 'db2':

+ while (($sql = $fgetd($fp, ";\n", $read, $seek, $eof)) !== false)

+ {

+ $db->sql_query($sql);

+ }

+ break;

+

+ case 'firebird':

+ $delim = ";\n";

+ while (($sql = $fgetd($fp, $delim, $read, $seek, $eof)) !== false)

+ {

+ $query = trim($sql);

+ if (substr($query, 0, 8) === 'SET TERM')

+ {

+ $delim = $query[9] . "\n";

+ continue;

+ }

+ $db->sql_query($query);

+ }

+ break;

+

+ case 'postgres':

+ $delim = ";\n";

+ while (($sql = $fgetd($fp, $delim, $read, $seek, $eof)) !== false)

+ {

+ $query = trim($sql);

+

+ if (substr($query, 0, 13) == 'CREATE DOMAIN')

+ {

+ list(, , $domain) = explode(' ', $query);

+ $sql = "SELECT domain_name

+ FROM information_schema.domains

+ WHERE domain_name = '$domain';";

+ $result = $db->sql_query($sql);

+ if (!$db->sql_fetchrow($result))

+ {

+ $db->sql_query($query);

+ }

+ $db->sql_freeresult($result);

+ }

+ else

+ {

+ $db->sql_query($query);

+ }

+

+ if (substr($query, 0, 4) == 'COPY')

+ {

+ while (($sub = $fgetd($fp, "\n", $read, $seek, $eof)) !== '\.')

+ {

+ if ($sub === false)

+ {

+ trigger_error($user->lang['RESTORE_FAILURE'] . adm_back_link($this->u_action), E_USER_WARNING);

+ }

+ pg_put_line($db->db_connect_id, $sub . "\n");

+ }

+ pg_put_line($db->db_connect_id, "\\.\n");

+ pg_end_copy($db->db_connect_id);

+ }

+ }

+ break;

+

+ case 'oracle':

+ while (($sql = $fgetd($fp, "/\n", $read, $seek, $eof)) !== false)

+ {

+ $db->sql_query($sql);

+ }

+ break;

+

+ case 'mssql':

+ while (($sql = $fgetd($fp, "GO\n", $read, $seek, $eof)) !== false)

+ {

+ $db->sql_query($sql);

+ }

+ break;

+ }

+

+ $close($fp);

+

+ // Purge the cache due to updated data

+ $cache->purge();

+

+ add_log('admin', 'LOG_DB_RESTORE');

+ trigger_error($user->lang['RESTORE_SUCCESS'] . adm_back_link($this->u_action));

+ break;

+ }

+

+ default:

+ $methods = array('sql');

+ $available_methods = array('sql.gz' => 'zlib', 'sql.bz2' => 'bz2');

+

+ foreach ($available_methods as $type => $module)

+ {

+ if (!@extension_loaded($module))

+ {

+ continue;

+ }

+ $methods[] = $type;

+ }

+

+ $dir = PHPBB_ROOT_PATH . 'store/';

+ $dh = @opendir($dir);

+

+ if ($dh)

+ {

+ while (($file = readdir($dh)) !== false)

+ {

+ if (preg_match('#^backup_(\d{10,})_[a-z\d]{16}\.(sql(?:\.(?:gz|bz2))?)$#', $file, $matches))

+ {

+ $supported = in_array($matches[2], $methods);

+

+ if ($supported == 'true')

+ {

+ $template->assign_block_vars('files', array(

+ 'FILE' => $file,

+ 'NAME' => gmdate("d-m-Y H:i:s", $matches[1]),

+ 'SUPPORTED' => $supported

+ ));

+ }

+ }

+ }

+ closedir($dh);

+ }

+

+ $template->assign_vars(array(

+ 'U_ACTION' => $this->u_action . '&amp;action=submit'

+ ));

+ break;

+ }

+ break;

+ }

+ }

+}

+

+/**

+* @package acp

+*/

+class base_extractor

+{

+ var $fh;

+ var $fp;

+ var $write;

+ var $close;

+ var $store;

+ var $download;

+ var $time;

+ var $format;

+ var $run_comp = false;

+

+ function __construct($download = false, $store = false, $format, $filename, $time)

+ {

+ $this->download = $download;

+ $this->store = $store;

+ $this->time = $time;

+ $this->format = $format;

+

+ switch ($format)

+ {

+ case 'text':

+ $ext = '.sql';

+ $open = 'fopen';

+ $this->write = 'fwrite';

+ $this->close = 'fclose';

+ $mimetype = 'text/x-sql';

+ break;

+ case 'bzip2':

+ $ext = '.sql.bz2';

+ $open = 'bzopen';

+ $this->write = 'bzwrite';

+ $this->close = 'bzclose';

+ $mimetype = 'application/x-bzip2';

+ break;

+ case 'gzip':

+ $ext = '.sql.gz';

+ $open = 'gzopen';

+ $this->write = 'gzwrite';

+ $this->close = 'gzclose';

+ $mimetype = 'application/x-gzip';

+ break;

+ }

+

+ if ($download == true)

+ {

+ $name = $filename . $ext;

+ header('Pragma: no-cache');

+ header("Content-Type: $mimetype; name=\"$name\"");

+ header("Content-disposition: attachment; filename=$name");

+

+ switch ($format)

+ {

+ case 'bzip2':

+ ob_start();

+ break;

+

+ case 'gzip':

+ if ((isset($_SERVER['HTTP_ACCEPT_ENCODING']) && strpos($_SERVER['HTTP_ACCEPT_ENCODING'], 'gzip') !== false) && strpos(strtolower($_SERVER['HTTP_USER_AGENT']), 'msie') === false)

+ {

+ ob_start('ob_gzhandler');

+ }

+ else

+ {

+ $this->run_comp = true;

+ }

+ break;

+ }

+ }

+

+ if ($store == true)

+ {

+ $file = PHPBB_ROOT_PATH . 'store/' . $filename . $ext;

+

+ $this->fp = $open($file, 'w');

+

+ if (!$this->fp)

+ {

+ trigger_error('Unable to write temporary file to storage folder', E_USER_ERROR);

+ }

+ }

+ }

+

+ function write_end()

+ {

+ static $close;

+ if ($this->store)

+ {

+ if ($close === null)

+ {

+ $close = $this->close;

+ }

+ $close($this->fp);

+ }

+

+ // bzip2 must be written all the way at the end

+ if ($this->download && $this->format === 'bzip2')

+ {

+ $c = ob_get_clean();

+ echo bzcompress($c);

+ }

+ }

+

+ function flush($data)

+ {

+ static $write;

+ if ($this->store === true)

+ {

+ if ($write === null)

+ {

+ $write = $this->write;

+ }

+ $write($this->fp, $data);

+ }

+

+ if ($this->download === true)

+ {

+ if ($this->format === 'bzip2' || $this->format === 'text' || ($this->format === 'gzip' && !$this->run_comp))

+ {

+ echo $data;

+ }

+

+ // we can write the gzip data as soon as we get it

+ if ($this->format === 'gzip')

+ {

+ if ($this->run_comp)

+ {

+ echo gzencode($data);

+ }

+ else

+ {

+ ob_flush();

+ flush();

+ }

+ }

+ }

+ }

+}

+

+/**

+* @package acp

+*/

+class mysql_extractor extends base_extractor

+{

+ function write_start($table_prefix)

+ {

+ $sql_data = "#\n";

+ $sql_data .= "# phpBB Backup Script\n";

+ $sql_data .= "# Dump of tables for $table_prefix\n";

+ $sql_data .= "# DATE : " . gmdate("d-m-Y H:i:s", $this->time) . " GMT\n";

+ $sql_data .= "#\n";

+ $this->flush($sql_data);

+ }

+

+ function write_table($table_name)

+ {

+ global $db;

+

+ $sql = 'SHOW CREATE TABLE ' . $table_name;

+ $result = $db->sql_query($sql);

+ $row = $db->sql_fetchrow($result);

+

+ $sql_data = '# Table: ' . $table_name . "\n";

+ $sql_data .= "DROP TABLE IF EXISTS $table_name;\n";

+ $this->flush($sql_data . $row['Create Table'] . ";\n\n");

+

+ $db->sql_freeresult($result);

+ }

+

+ function write_data($table_name)

+ {

+ global $db;

+ if ($db->sql_layer === 'mysqli')

+ {

+ $this->write_data_mysqli($table_name);

+ }

+ else

+ {

+ $this->write_data_mysql($table_name);

+ }

+ }

+

+ function write_data_mysqli($table_name)

+ {

+ global $db;

+ $sql = "SELECT *

+ FROM $table_name";

+ $result = mysqli_query($db->db_connect_id, $sql, MYSQLI_USE_RESULT);

+ if ($result != false)

+ {

+ $fields_cnt = mysqli_num_fields($result);

+

+ // Get field information

+ $field = mysqli_fetch_fields($result);

+ $field_set = array();

+

+ for ($j = 0; $j < $fields_cnt; $j++)

+ {

+ $field_set[] = $field[$j]->name;

+ }

+

+ $search = array("\\", "'", "\x00", "\x0a", "\x0d", "\x1a", '"');

+ $replace = array("\\\\", "\\'", '\0', '\n', '\r', '\Z', '\\"');

+ $fields = implode(', ', $field_set);

+ $sql_data = 'INSERT INTO ' . $table_name . ' (' . $fields . ') VALUES ';

+ $first_set = true;

+ $query_len = 0;

+ $max_len = get_usable_memory();

+

+ while ($row = mysqli_fetch_row($result))

+ {

+ $values = array();

+ if ($first_set)

+ {

+ $query = $sql_data . '(';

+ }

+ else

+ {

+ $query .= ',(';

+ }

+

+ for ($j = 0; $j < $fields_cnt; $j++)

+ {

+ if (!isset($row[$j]) || is_null($row[$j]))

+ {

+ $values[$j] = 'NULL';

+ }

+ else if (($field[$j]->flags & 32768) && !($field[$j]->flags & 1024))

+ {

+ $values[$j] = $row[$j];

+ }

+ else

+ {

+ $values[$j] = "'" . str_replace($search, $replace, $row[$j]) . "'";

+ }

+ }

+ $query .= implode(', ', $values) . ')';

+

+ $query_len += strlen($query);

+ if ($query_len > $max_len)

+ {

+ $this->flush($query . ";\n\n");

+ $query = '';

+ $query_len = 0;

+ $first_set = true;

+ }

+ else

+ {

+ $first_set = false;

+ }

+ }

+ mysqli_free_result($result);

+

+ // check to make sure we have nothing left to flush

+ if (!$first_set && $query)

+ {

+ $this->flush($query . ";\n\n");

+ }

+ }

+ }

+

+ function write_data_mysql($table_name)

+ {

+ global $db;

+ $sql = "SELECT *

+ FROM $table_name";

+ $result = mysql_unbuffered_query($sql, $db->db_connect_id);

+

+ if ($result != false)

+ {

+ $fields_cnt = mysql_num_fields($result);

+

+ // Get field information

+ $field = array();

+ for ($i = 0; $i < $fields_cnt; $i++)

+ {

+ $field[] = mysql_fetch_field($result, $i);

+ }

+ $field_set = array();

+

+ for ($j = 0; $j < $fields_cnt; $j++)

+ {

+ $field_set[] = $field[$j]->name;

+ }

+

+ $search = array("\\", "'", "\x00", "\x0a", "\x0d", "\x1a", '"');

+ $replace = array("\\\\", "\\'", '\0', '\n', '\r', '\Z', '\\"');

+ $fields = implode(', ', $field_set);

+ $sql_data = 'INSERT INTO ' . $table_name . ' (' . $fields . ') VALUES ';

+ $first_set = true;

+ $query_len = 0;

+ $max_len = get_usable_memory();

+

+ while ($row = mysql_fetch_row($result))

+ {

+ $values = array();

+ if ($first_set)

+ {

+ $query = $sql_data . '(';

+ }

+ else

+ {

+ $query .= ',(';

+ }

+

+ for ($j = 0; $j < $fields_cnt; $j++)

+ {

+ if (!isset($row[$j]) || is_null($row[$j]))

+ {

+ $values[$j] = 'NULL';

+ }

+ else if ($field[$j]->numeric && ($field[$j]->type !== 'timestamp'))

+ {

+ $values[$j] = $row[$j];

+ }

+ else

+ {

+ $values[$j] = "'" . str_replace($search, $replace, $row[$j]) . "'";

+ }

+ }

+ $query .= implode(', ', $values) . ')';

+

+ $query_len += strlen($query);

+ if ($query_len > $max_len)

+ {

+ $this->flush($query . ";\n\n");

+ $query = '';

+ $query_len = 0;

+ $first_set = true;

+ }

+ else

+ {

+ $first_set = false;

+ }

+ }

+ mysql_free_result($result);

+

+ // check to make sure we have nothing left to flush

+ if (!$first_set && $query)

+ {

+ $this->flush($query . ";\n\n");

+ }

+ }

+ }

+}

+

+/**

+* @package acp

+*/

+class sqlite_extractor extends base_extractor

+{

+ function write_start($prefix)

+ {

+ $sql_data = "--\n";

+ $sql_data .= "-- phpBB Backup Script\n";

+ $sql_data .= "-- Dump of tables for $prefix\n";

+ $sql_data .= "-- DATE : " . gmdate("d-m-Y H:i:s", $this->time) . " GMT\n";

+ $sql_data .= "--\n";

+ $sql_data .= "BEGIN TRANSACTION;\n";

+ $this->flush($sql_data);

+ }

+

+ function write_table($table_name)

+ {

+ global $db;

+ $sql_data = '-- Table: ' . $table_name . "\n";

+ $sql_data .= "DROP TABLE $table_name;\n";

+

+ $sql = "SELECT sql

+ FROM sqlite_master

+ WHERE type = 'table'

+ AND name = '" . $db->sql_escape($table_name) . "'

+ ORDER BY type DESC, name;";

+ $result = $db->sql_query($sql);

+ $row = $db->sql_fetchrow($result);

+ $db->sql_freeresult($result);

+

+ // Create Table

+ $sql_data .= $row['sql'] . ";\n";

+

+ $result = $db->sql_query("PRAGMA index_list('" . $db->sql_escape($table_name) . "');");

+

+ $ar = array();

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $ar[] = $row;

+ }

+ $db->sql_freeresult($result);

+

+ foreach ($ar as $value)

+ {

+ if (strpos($value['name'], 'autoindex') !== false)

+ {

+ continue;

+ }

+

+ $result = $db->sql_query("PRAGMA index_info('" . $db->sql_escape($value['name']) . "');");

+

+ $fields = array();

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $fields[] = $row['name'];

+ }

+ $db->sql_freeresult($result);

+

+ $sql_data .= 'CREATE ' . ($value['unique'] ? 'UNIQUE ' : '') . 'INDEX ' . $value['name'] . ' on ' . $table_name . ' (' . implode(', ', $fields) . ");\n";

+ }

+

+ $this->flush($sql_data . "\n");

+ }

+

+ function write_data($table_name)

+ {

+ global $db;

+ static $proper;

+

+ if (is_null($proper))

+ {

+ $proper = version_compare(PHP_VERSION, '5.1.3', '>=');

+ }

+

+ if ($proper)

+ {

+ $col_types = sqlite_fetch_column_types($db->db_connect_id, $table_name);

+ }

+ else

+ {

+ $sql = "SELECT sql

+ FROM sqlite_master

+ WHERE type = 'table'

+ AND name = '" . $table_name . "'";

+ $table_data = sqlite_single_query($db->db_connect_id, $sql);

+ $table_data = preg_replace('#CREATE\s+TABLE\s+"?' . $table_name . '"?#i', '', $table_data);

+ $table_data = trim($table_data);

+

+ preg_match('#\((.*)\)#s', $table_data, $matches);

+

+ $table_cols = explode(',', trim($matches[1]));

+ foreach ($table_cols as $declaration)

+ {

+ $entities = preg_split('#\s+#', trim($declaration));

+ $column_name = preg_replace('/"?([^"]+)"?/', '\1', $entities[0]);

+

+ // Hit a primary key, those are not what we need :D

+ if (empty($entities[1]) || (strtolower($entities[0]) === 'primary' && strtolower($entities[1]) === 'key'))

+ {

+ continue;

+ }

+ $col_types[$column_name] = $entities[1];

+ }

+ }

+

+ $sql = "SELECT *

+ FROM $table_name";

+ $result = sqlite_unbuffered_query($db->db_connect_id, $sql);

+ $rows = sqlite_fetch_all($result, SQLITE_ASSOC);

+ $sql_insert = 'INSERT INTO ' . $table_name . ' (' . implode(', ', array_keys($col_types)) . ') VALUES (';

+ foreach ($rows as $row)

+ {

+ foreach ($row as $column_name => $column_data)

+ {

+ if (is_null($column_data))

+ {

+ $row[$column_name] = 'NULL';

+ }

+ else if ($column_data == '')

+ {

+ $row[$column_name] = "''";

+ }

+ else if (strpos($col_types[$column_name], 'text') !== false || strpos($col_types[$column_name], 'char') !== false || strpos($col_types[$column_name], 'blob') !== false)

+ {

+ $row[$column_name] = sanitize_data_generic(str_replace("'", "''", $column_data));

+ }

+ }

+ $this->flush($sql_insert . implode(', ', $row) . ");\n");

+ }

+ }

+

+ function write_end()

+ {

+ $this->flush("COMMIT;\n");

+ parent::write_end();

+ }

+}

+

+/**

+* @package acp

+*/

+class postgres_extractor extends base_extractor

+{

+ function write_start($prefix)

+ {

+ $sql_data = "--\n";

+ $sql_data .= "-- phpBB Backup Script\n";

+ $sql_data .= "-- Dump of tables for $prefix\n";

+ $sql_data .= "-- DATE : " . gmdate("d-m-Y H:i:s", $this->time) . " GMT\n";

+ $sql_data .= "--\n";

+ $sql_data .= "BEGIN TRANSACTION;\n";

+ $this->flush($sql_data);

+ }

+

+ function write_table($table_name)

+ {

+ global $db;

+ static $domains_created = array();

+

+ $sql = "SELECT a.domain_name, a.data_type, a.character_maximum_length, a.domain_default

+ FROM INFORMATION_SCHEMA.domains a, INFORMATION_SCHEMA.column_domain_usage b

+ WHERE a.domain_name = b.domain_name

+ AND b.table_name = '{$table_name}'";

+ $result = $db->sql_query($sql);

+ while ($row = $db->sql_fetchrow($result))

+ {

+ if (empty($domains_created[$row['domain_name']]))

+ {

+ $domains_created[$row['domain_name']] = true;

+ //$sql_data = "DROP DOMAIN {$row['domain_name']};\n";

+ $sql_data = "CREATE DOMAIN {$row['domain_name']} as {$row['data_type']}";

+ if (!empty($row['character_maximum_length']))

+ {

+ $sql_data .= '(' . $row['character_maximum_length'] . ')';

+ }

+ $sql_data .= ' NOT NULL';

+ if (!empty($row['domain_default']))

+ {

+ $sql_data .= ' DEFAULT ' . $row['domain_default'];

+ }

+ $this->flush($sql_data . ";\n");

+ }

+ }

+

+ $sql_data = '-- Table: ' . $table_name . "\n";

+ $sql_data .= "DROP TABLE $table_name;\n";

+ // PGSQL does not "tightly" bind sequences and tables, we must guess...

+ $sql = "SELECT relname

+ FROM pg_class

+ WHERE relkind = 'S'

+ AND relname = '{$table_name}_seq'";

+ $result = $db->sql_query($sql);

+ // We don't even care about storing the results. We already know the answer if we get rows back.

+ if ($db->sql_fetchrow($result))

+ {

+ $sql_data .= "DROP SEQUENCE {$table_name}_seq;\n";

+ $sql_data .= "CREATE SEQUENCE {$table_name}_seq;\n";

+ }

+ $db->sql_freeresult($result);

+

+ $field_query = "SELECT a.attnum, a.attname as field, t.typname as type, a.attlen as length, a.atttypmod as lengthvar, a.attnotnull as notnull

+ FROM pg_class c, pg_attribute a, pg_type t

+ WHERE c.relname = '" . $db->sql_escape($table_name) . "'

+ AND a.attnum > 0

+ AND a.attrelid = c.oid

+ AND a.atttypid = t.oid

+ ORDER BY a.attnum";

+ $result = $db->sql_query($field_query);

+

+ $sql_data .= "CREATE TABLE $table_name(\n";

+ $lines = array();

+ while ($row = $db->sql_fetchrow($result))

+ {

+ // Get the data from the table

+ $sql_get_default = "SELECT pg_get_expr(d.adbin, d.adrelid) as rowdefault

+ FROM pg_attrdef d, pg_class c

+ WHERE (c.relname = '" . $db->sql_escape($table_name) . "')

+ AND (c.oid = d.adrelid)

+ AND d.adnum = " . $row['attnum'];

+ $def_res = $db->sql_query($sql_get_default);

+

+ if (!$def_res)

+ {

+ unset($row['rowdefault']);

+ }

+ else

+ {

+ $row['rowdefault'] = $db->sql_fetchfield('rowdefault', $def_res);

+ }

+ $db->sql_freeresult($def_res);

+

+ if ($row['type'] == 'bpchar')

+ {

+ // Internally stored as bpchar, but isn't accepted in a CREATE TABLE statement.

+ $row['type'] = 'char';

+ }

+

+ $line = ' ' . $row['field'] . ' ' . $row['type'];

+

+ if (strpos($row['type'], 'char') !== false)

+ {

+ if ($row['lengthvar'] > 0)

+ {

+ $line .= '(' . ($row['lengthvar'] - 4) . ')';

+ }

+ }

+

+ if (strpos($row['type'], 'numeric') !== false)

+ {

+ $line .= '(';

+ $line .= sprintf("%s,%s", (($row['lengthvar'] >> 16) & 0xffff), (($row['lengthvar'] - 4) & 0xffff));

+ $line .= ')';

+ }

+

+ if (isset($row['rowdefault']))

+ {

+ $line .= ' DEFAULT ' . $row['rowdefault'];

+ }

+

+ if ($row['notnull'] == 't')

+ {

+ $line .= ' NOT NULL';

+ }

+

+ $lines[] = $line;

+ }

+ $db->sql_freeresult($result);

+

+

+ // Get the listing of primary keys.

+ $sql_pri_keys = "SELECT ic.relname as index_name, bc.relname as tab_name, ta.attname as column_name, i.indisunique as unique_key, i.indisprimary as primary_key

+ FROM pg_class bc, pg_class ic, pg_index i, pg_attribute ta, pg_attribute ia

+ WHERE (bc.oid = i.indrelid)

+ AND (ic.oid = i.indexrelid)

+ AND (ia.attrelid = i.indexrelid)

+ AND (ta.attrelid = bc.oid)

+ AND (bc.relname = '" . $db->sql_escape($table_name) . "')

+ AND (ta.attrelid = i.indrelid)

+ AND (ta.attnum = i.indkey[ia.attnum-1])

+ ORDER BY index_name, tab_name, column_name";

+

+ $result = $db->sql_query($sql_pri_keys);

+

+ $index_create = $index_rows = $primary_key = array();

+

+ // We do this in two steps. It makes placing the comma easier

+ while ($row = $db->sql_fetchrow($result))

+ {

+ if ($row['primary_key'] == 't')

+ {

+ $primary_key[] = $row['column_name'];

+ $primary_key_name = $row['index_name'];

+ }

+ else

+ {

+ // We have to store this all this info because it is possible to have a multi-column key...

+ // we can loop through it again and build the statement

+ $index_rows[$row['index_name']]['table'] = $table_name;

+ $index_rows[$row['index_name']]['unique'] = ($row['unique_key'] == 't') ? true : false;

+ $index_rows[$row['index_name']]['column_names'][] = $row['column_name'];

+ }

+ }

+ $db->sql_freeresult($result);

+

+ if (!empty($index_rows))

+ {

+ foreach ($index_rows as $idx_name => $props)

+ {

+ $index_create[] = 'CREATE ' . ($props['unique'] ? 'UNIQUE ' : '') . "INDEX $idx_name ON $table_name (" . implode(', ', $props['column_names']) . ");";

+ }

+ }

+

+ if (!empty($primary_key))

+ {

+ $lines[] = " CONSTRAINT $primary_key_name PRIMARY KEY (" . implode(', ', $primary_key) . ")";

+ }

+

+ // Generate constraint clauses for CHECK constraints

+ $sql_checks = "SELECT conname as index_name, consrc

+ FROM pg_constraint, pg_class bc

+ WHERE conrelid = bc.oid

+ AND bc.relname = '" . $db->sql_escape($table_name) . "'

+ AND NOT EXISTS (

+ SELECT *

+ FROM pg_constraint as c, pg_inherits as i

+ WHERE i.inhrelid = pg_constraint.conrelid

+ AND c.conname = pg_constraint.conname

+ AND c.consrc = pg_constraint.consrc

+ AND c.conrelid = i.inhparent

+ )";

+ $result = $db->sql_query($sql_checks);

+

+ // Add the constraints to the sql file.

+ while ($row = $db->sql_fetchrow($result))

+ {

+ if (!is_null($row['consrc']))

+ {

+ $lines[] = ' CONSTRAINT ' . $row['index_name'] . ' CHECK ' . $row['consrc'];

+ }

+ }

+ $db->sql_freeresult($result);

+

+ $sql_data .= implode(", \n", $lines);

+ $sql_data .= "\n);\n";

+

+ if (!empty($index_create))

+ {

+ $sql_data .= implode("\n", $index_create) . "\n\n";

+ }

+ $this->flush($sql_data);

+ }

+

+ function write_data($table_name)

+ {

+ global $db;

+ // Grab all of the data from current table.

+ $sql = "SELECT *

+ FROM $table_name";

+ $result = $db->sql_query($sql);

+

+ $i_num_fields = pg_num_fields($result);

+ $seq = '';

+

+ for ($i = 0; $i < $i_num_fields; $i++)

+ {

+ $ary_type[] = pg_field_type($result, $i);

+ $ary_name[] = pg_field_name($result, $i);

+

+

+ $sql = "SELECT pg_get_expr(d.adbin, d.adrelid) as rowdefault

+ FROM pg_attrdef d, pg_class c

+ WHERE (c.relname = '{$table_name}')

+ AND (c.oid = d.adrelid)

+ AND d.adnum = " . strval($i + 1);

+ $result2 = $db->sql_query($sql);

+ if ($row = $db->sql_fetchrow($result2))

+ {

+ // Determine if we must reset the sequences

+ if (strpos($row['rowdefault'], "nextval('") === 0)

+ {

+ $seq .= "SELECT SETVAL('{$table_name}_seq',(select case when max({$ary_name[$i]})>0 then max({$ary_name[$i]})+1 else 1 end FROM {$table_name}));\n";

+ }

+ }

+ }

+

+ $this->flush("COPY $table_name (" . implode(', ', $ary_name) . ') FROM stdin;' . "\n");

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $schema_vals = array();

+

+ // Build the SQL statement to recreate the data.

+ for ($i = 0; $i < $i_num_fields; $i++)

+ {

+ $str_val = $row[$ary_name[$i]];

+

+ if (preg_match('#char|text|bool|bytea#i', $ary_type[$i]))

+ {

+ $str_val = str_replace(array("\n", "\t", "\r", "\b", "\f", "\v"), array('\n', '\t', '\r', '\b', '\f', '\v'), addslashes($str_val));

+ $str_empty = '';

+ }

+ else

+ {

+ $str_empty = '\N';

+ }

+

+ if (empty($str_val) && $str_val !== '0')

+ {

+ $str_val = $str_empty;

+ }

+

+ $schema_vals[] = $str_val;

+ }

+

+ // Take the ordered fields and their associated data and build it

+ // into a valid sql statement to recreate that field in the data.

+ $this->flush(implode("\t", $schema_vals) . "\n");

+ }

+ $db->sql_freeresult($result);

+ $this->flush("\\.\n");

+

+ // Write out the sequence statements

+ $this->flush($seq);

+ }

+

+ function write_end()

+ {

+ $this->flush("COMMIT;\n");

+ parent::write_end();

+ }

+}

+

+/**

+* @package acp

+*/

+class mssql_extractor extends base_extractor

+{

+ function write_end()

+ {

+ $this->flush("COMMIT\nGO\n");

+ parent::write_end();

+ }

+

+ function write_start($prefix)

+ {

+ $sql_data = "--\n";

+ $sql_data .= "-- phpBB Backup Script\n";

+ $sql_data .= "-- Dump of tables for $prefix\n";

+ $sql_data .= "-- DATE : " . gmdate("d-m-Y H:i:s", $this->time) . " GMT\n";

+ $sql_data .= "--\n";

+ $sql_data .= "BEGIN TRANSACTION\n";

+ $sql_data .= "GO\n";

+ $this->flush($sql_data);

+ }

+

+ function write_table($table_name)

+ {

+ global $db;

+ $sql_data = '-- Table: ' . $table_name . "\n";

+ $sql_data .= "IF OBJECT_ID(N'$table_name', N'U') IS NOT NULL\n";

+ $sql_data .= "DROP TABLE $table_name;\n";

+ $sql_data .= "GO\n";

+ $sql_data .= "\nCREATE TABLE [$table_name] (\n";

+ $rows = array();

+

+ $text_flag = false;

+

+ $sql = "SELECT COLUMN_NAME, COLUMN_DEFAULT, IS_NULLABLE, DATA_TYPE, CHARACTER_MAXIMUM_LENGTH, COLUMNPROPERTY(object_id(TABLE_NAME), COLUMN_NAME, 'IsIdentity') as IS_IDENTITY

+ FROM INFORMATION_SCHEMA.COLUMNS

+ WHERE TABLE_NAME = '$table_name'";

+ $result = $db->sql_query($sql);

+

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $line = "\t[{$row['COLUMN_NAME']}] [{$row['DATA_TYPE']}]";

+

+ if ($row['DATA_TYPE'] == 'text')

+ {

+ $text_flag = true;

+ }

+

+ if ($row['IS_IDENTITY'])

+ {

+ $line .= ' IDENTITY (1 , 1)';

+ }

+

+ if ($row['CHARACTER_MAXIMUM_LENGTH'] && $row['DATA_TYPE'] !== 'text')

+ {

+ $line .= ' (' . $row['CHARACTER_MAXIMUM_LENGTH'] . ')';

+ }

+

+ if ($row['IS_NULLABLE'] == 'YES')

+ {

+ $line .= ' NULL';

+ }

+ else

+ {

+ $line .= ' NOT NULL';

+ }

+

+ if ($row['COLUMN_DEFAULT'])

+ {

+ $line .= ' DEFAULT ' . $row['COLUMN_DEFAULT'];

+ }

+

+ $rows[] = $line;

+ }

+ $db->sql_freeresult($result);

+

+ $sql_data .= implode(",\n", $rows);

+ $sql_data .= "\n) ON [PRIMARY]";

+

+ if ($text_flag)

+ {

+ $sql_data .= " TEXTIMAGE_ON [PRIMARY]";

+ }

+

+ $sql_data .= "\nGO\n\n";

+ $rows = array();

+

+ $sql = "SELECT CONSTRAINT_NAME, COLUMN_NAME

+ FROM INFORMATION_SCHEMA.KEY_COLUMN_USAGE

+ WHERE TABLE_NAME = '$table_name'";

+ $result = $db->sql_query($sql);

+ while ($row = $db->sql_fetchrow($result))

+ {

+ if (!sizeof($rows))

+ {

+ $sql_data .= "ALTER TABLE [$table_name] WITH NOCHECK ADD\n";

+ $sql_data .= "\tCONSTRAINT [{$row['CONSTRAINT_NAME']}] PRIMARY KEY CLUSTERED \n\t(\n";

+ }

+ $rows[] = "\t\t[{$row['COLUMN_NAME']}]";

+ }

+ if (sizeof($rows))

+ {

+ $sql_data .= implode(",\n", $rows);

+ $sql_data .= "\n\t) ON [PRIMARY] \nGO\n";

+ }

+ $db->sql_freeresult($result);

+

+ $index = array();

+ $sql = "EXEC sp_statistics '$table_name'";

+ $result = $db->sql_query($sql);

+ while ($row = $db->sql_fetchrow($result))

+ {

+ if ($row['TYPE'] == 3)

+ {

+ $index[$row['INDEX_NAME']][] = '[' . $row['COLUMN_NAME'] . ']';

+ }

+ }

+ $db->sql_freeresult($result);

+

+ foreach ($index as $index_name => $column_name)

+ {

+ $index[$index_name] = implode(', ', $column_name);

+ }

+

+ foreach ($index as $index_name => $columns)

+ {

+ $sql_data .= "\nCREATE INDEX [$index_name] ON [$table_name]($columns) ON [PRIMARY]\nGO\n";

+ }

+ $this->flush($sql_data);

+ }

+

+ function write_data($table_name)

+ {

+ global $db;

+

+ if ($db->sql_layer === 'mssql')

+ {

+ $this->write_data_mssql($table_name);

+ }

+ else if ($db->sql_layer === 'mssql_odbc')

+ {

+ $this->write_data_odbc($table_name);

+ }

+ else

+ {

+ // @todo: write code for MS SQL 2005 DBAL

+ trigger_error('KungFuDeathGrip');

+ }

+ }

+

+ function write_data_mssql($table_name)

+ {

+ global $db;

+ $ary_type = $ary_name = array();

+ $ident_set = false;

+ $sql_data = '';

+

+ // Grab all of the data from current table.

+ $sql = "SELECT *

+ FROM $table_name";

+ $result = $db->sql_query($sql);

+

+ $retrieved_data = mssql_num_rows($result);

+

+ $i_num_fields = mssql_num_fields($result);

+

+ for ($i = 0; $i < $i_num_fields; $i++)

+ {

+ $ary_type[$i] = mssql_field_type($result, $i);

+ $ary_name[$i] = mssql_field_name($result, $i);

+ }

+

+ if ($retrieved_data)

+ {

+ $sql = "SELECT 1 as has_identity

+ FROM INFORMATION_SCHEMA.COLUMNS

+ WHERE COLUMNPROPERTY(object_id('$table_name'), COLUMN_NAME, 'IsIdentity') = 1";

+ $result2 = $db->sql_query($sql);

+ $row2 = $db->sql_fetchrow($result2);

+ if (!empty($row2['has_identity']))

+ {

+ $sql_data .= "\nSET IDENTITY_INSERT $table_name ON\nGO\n";

+ $ident_set = true;

+ }

+ $db->sql_freeresult($result2);

+ }

+

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $schema_vals = $schema_fields = array();

+

+ // Build the SQL statement to recreate the data.

+ for ($i = 0; $i < $i_num_fields; $i++)

+ {

+ $str_val = $row[$ary_name[$i]];

+

+ if (preg_match('#char|text|bool|varbinary#i', $ary_type[$i]))

+ {

+ $str_quote = '';

+ $str_empty = "''";

+ $str_val = sanitize_data_mssql(str_replace("'", "''", $str_val));

+ }

+ else if (preg_match('#date|timestamp#i', $ary_type[$i]))

+ {

+ if (empty($str_val))

+ {

+ $str_quote = '';

+ }

+ else

+ {

+ $str_quote = "'";

+ }

+ }

+ else

+ {

+ $str_quote = '';

+ $str_empty = 'NULL';

+ }

+

+ if (empty($str_val) && $str_val !== '0' && !(is_int($str_val) || is_float($str_val)))

+ {

+ $str_val = $str_empty;

+ }

+

+ $schema_vals[$i] = $str_quote . $str_val . $str_quote;

+ $schema_fields[$i] = $ary_name[$i];

+ }

+

+ // Take the ordered fields and their associated data and build it

+ // into a valid sql statement to recreate that field in the data.

+ $sql_data .= "INSERT INTO $table_name (" . implode(', ', $schema_fields) . ') VALUES (' . implode(', ', $schema_vals) . ");\nGO\n";

+

+ $this->flush($sql_data);

+ $sql_data = '';

+ }

+ $db->sql_freeresult($result);

+

+ if ($retrieved_data && $ident_set)

+ {

+ $sql_data .= "\nSET IDENTITY_INSERT $table_name OFF\nGO\n";

+ }

+ $this->flush($sql_data);

+ }

+

+ function write_data_odbc($table_name)

+ {

+ global $db;

+ $ary_type = $ary_name = array();

+ $ident_set = false;

+ $sql_data = '';

+

+ // Grab all of the data from current table.

+ $sql = "SELECT *

+ FROM $table_name";

+ $result = $db->sql_query($sql);

+

+ $retrieved_data = odbc_num_rows($result);

+

+ if ($retrieved_data)

+ {

+ $sql = "SELECT 1 as has_identity

+ FROM INFORMATION_SCHEMA.COLUMNS

+ WHERE COLUMNPROPERTY(object_id('$table_name'), COLUMN_NAME, 'IsIdentity') = 1";

+ $result2 = $db->sql_query($sql);

+ $row2 = $db->sql_fetchrow($result2);

+ if (!empty($row2['has_identity']))

+ {

+ $sql_data .= "\nSET IDENTITY_INSERT $table_name ON\nGO\n";

+ $ident_set = true;

+ }

+ $db->sql_freeresult($result2);

+ }

+

+ $i_num_fields = odbc_num_fields($result);

+

+ for ($i = 0; $i < $i_num_fields; $i++)

+ {

+ $ary_type[$i] = odbc_field_type($result, $i + 1);

+ $ary_name[$i] = odbc_field_name($result, $i + 1);

+ }

+

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $schema_vals = $schema_fields = array();

+

+ // Build the SQL statement to recreate the data.

+ for ($i = 0; $i < $i_num_fields; $i++)

+ {

+ $str_val = $row[$ary_name[$i]];

+

+ if (preg_match('#char|text|bool|varbinary#i', $ary_type[$i]))

+ {

+ $str_quote = '';

+ $str_empty = "''";

+ $str_val = sanitize_data_mssql(str_replace("'", "''", $str_val));

+ }

+ else if (preg_match('#date|timestamp#i', $ary_type[$i]))

+ {

+ if (empty($str_val))

+ {

+ $str_quote = '';

+ }

+ else

+ {

+ $str_quote = "'";

+ }

+ }

+ else

+ {

+ $str_quote = '';

+ $str_empty = 'NULL';

+ }

+

+ if (empty($str_val) && $str_val !== '0' && !(is_int($str_val) || is_float($str_val)))

+ {

+ $str_val = $str_empty;

+ }

+

+ $schema_vals[$i] = $str_quote . $str_val . $str_quote;

+ $schema_fields[$i] = $ary_name[$i];

+ }

+

+ // Take the ordered fields and their associated data and build it

+ // into a valid sql statement to recreate that field in the data.

+ $sql_data .= "INSERT INTO $table_name (" . implode(', ', $schema_fields) . ') VALUES (' . implode(', ', $schema_vals) . ");\nGO\n";

+

+ $this->flush($sql_data);

+

+ $sql_data = '';

+

+ }

+ $db->sql_freeresult($result);

+

+ if ($retrieved_data && $ident_set)

+ {

+ $sql_data .= "\nSET IDENTITY_INSERT $table_name OFF\nGO\n";

+ }

+ $this->flush($sql_data);

+ }

+

+}

+

+/**

+* @package acp

+*/

+class db2_extractor extends base_extractor

+{

+ function write_start($prefix)

+ {

+ $sql_data = "--\n";

+ $sql_data .= "-- phpBB Backup Script\n";

+ $sql_data .= "-- Dump of tables for $prefix\n";

+ $sql_data .= "-- DATE : " . gmdate("d-m-Y H:i:s", $this->time) . " GMT\n";

+ $sql_data .= "--\n";

+ $this->flush($sql_data);

+ }

+

+ function write_table($table_name)

+ {

+ global $db;

+ $sql_data = '-- Table: ' . $table_name . "\n";

+ $sql_data .= "\nCREATE TABLE $table_name (\n";

+ $rows = array();

+

+ // switch to db2_columns()?

+ $sql = "SELECT colname, typename, length, default, identity, nulls

+ FROM syscat.columns

+ WHERE tabname = '$table_name'";

+ $result = $db->sql_query($sql);

+

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $line = "\t{$row['colname']} {$row['typename']}";

+

+ if ($row['identity'] == 'Y')

+ {

+ $line .= ' GENERATED BY DEFAULT AS IDENTITY (START WITH 1, INCREMENT BY 1)';

+ }

+

+ if ($row['typename'] == 'VARCHAR' || $row['typename'] == 'CHARACTER' || $row['typename'] == 'CLOB')

+ {

+ $line .= ' (' . $row['length'] . ')';

+ }

+

+ if ($row['nulls'] == 'N')

+ {

+ $line .= ' NOT NULL';

+ }

+ else

+ {

+ $line .= ' NULL';

+ }

+

+ if ($row['default'] !== null)

+ {

+ $line .= ' DEFAULT ' . $row['default'];

+ }

+

+ $rows[] = $line;

+ }

+ $db->sql_freeresult($result);

+

+ // switch to db2_columns()?

+ $sql = "SELECT colname

+ FROM SYSCAT.KEYCOLUSE

+ WHERE tabname = '$table_name'";

+ $result = $db->sql_query($sql);

+ $prim_cols = array();

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $prim_cols[] = $row['colname'];

+ }

+ $db->sql_freeresult($result);

+ if (sizeof($prim_cols))

+ {

+ $rows[] = "\tPRIMARY KEY (" . implode($prim_cols) . ')';

+ }

+

+ $sql_data .= implode(",\n", $rows);

+ $sql_data .= "\n);\n\n";

+ $rows = array();

+

+ $sql = "SELECT colnames, indname

+ FROM SYSCAT.INDEXES

+ WHERE TABNAME = '$table_name'

+ AND UNIQUERULE <> 'P'";

+ $result = $db->sql_query($sql);

+ $index = array();

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $inds = explode('+', $row['colnames']);

+ unset($inds[0]);

+ $sql_data .= 'CREATE INDEX ' . $row['indname'] . ' ON ' . $table_name . ' (' . implode(', ', $inds) . ") PCTFREE 10 MINPCTUSED 10 ALLOW REVERSE SCANS PAGE SPLIT SYMMETRIC COLLECT SAMPLED DETAILED STATISTICS;\n";

+ }

+ $db->sql_freeresult($result);

+

+ $this->flush($sql_data);

+ }

+

+ function write_data($table_name)

+ {

+ global $db;

+ $ary_type = $ary_name = array();

+ $result = db2_columns($db->db_connect_id, '', '%', $table_name);

+ $i = 0;

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $ary_type[$i] = $row['type_name'];

+ $ary_name[$i++] = strtolower($row['column_name']);

+ }

+ $db->sql_freeresult($result);

+

+ // Grab all of the data from current table.

+ $sql = "SELECT *

+ FROM $table_name";

+ $result = $db->sql_query($sql);

+

+ $sql_data = '';

+ $i_num_fields = $i;

+

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $schema_vals = $schema_fields = array();

+

+ // Build the SQL statement to recreate the data.

+ for ($i = 0; $i < $i_num_fields; $i++)

+ {

+ $str_val = $row[$ary_name[$i]];

+

+ if (preg_match('#char|clob#i', $ary_type[$i]))

+ {

+ $str_quote = "'";

+ $str_empty = '';

+ $str_val = sanitize_data_generic(str_replace("'", "''", $str_val));

+ }

+ else if (preg_match('#date|timestamp#i', $ary_type[$i]))

+ {

+ if (empty($str_val))

+ {

+ $str_quote = '';

+ }

+ else

+ {

+ $str_quote = "'";

+ }

+ }

+ else

+ {

+ $str_quote = '';

+ $str_empty = 'NULL';

+ }

+

+ if (empty($str_val) && $str_val !== '0')

+ {

+ $str_val = $str_empty;

+ }

+

+ $schema_vals[$i] = $str_quote . $str_val . $str_quote;

+ $schema_fields[$i] = '"' . $ary_name[$i] . "'";

+ }

+

+ // Take the ordered fields and their associated data and build it

+ // into a valid sql statement to recreate that field in the data.

+ $sql_data = "INSERT INTO $table_name (" . implode(', ', $schema_fields) . ') VALUES (' . implode(', ', $schema_vals) . ");\n";

+

+ $this->flush($sql_data);

+ }

+ $db->sql_freeresult($result);

+ }

+}

+

+/**

+* @package acp

+*/

+class oracle_extractor extends base_extractor

+{

+ function write_table($table_name)

+ {

+ global $db;

+ $sql_data = '-- Table: ' . $table_name . "\n";

+ $sql_data .= "DROP TABLE $table_name;\n";

+ $sql_data .= '\\' . "\n";

+ $sql_data .= "\nCREATE TABLE $table_name (\n";

+

+ $sql = "SELECT COLUMN_NAME, DATA_TYPE, DATA_PRECISION, DATA_LENGTH, NULLABLE, DATA_DEFAULT

+ FROM ALL_TAB_COLS

+ WHERE table_name = '{$table_name}'";

+ $result = $db->sql_query($sql);

+

+ $rows = array();

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $line = ' "' . $row['column_name'] . '" ' . $row['data_type'];

+

+ if ($row['data_type'] !== 'CLOB')

+ {

+ if ($row['data_type'] !== 'VARCHAR2')

+ {

+ $line .= '(' . $row['data_precision'] . ')';

+ }

+ else

+ {

+ $line .= '(' . $row['data_length'] . ')';

+ }

+ }

+

+ if (!empty($row['data_default']))

+ {

+ $line .= ' DEFAULT ' . $row['data_default'];

+ }

+

+ if ($row['nullable'] == 'N')

+ {

+ $line .= ' NOT NULL';

+ }

+ $rows[] = $line;

+ }

+ $db->sql_freeresult($result);

+

+ $sql = "SELECT A.CONSTRAINT_NAME, A.COLUMN_NAME

+ FROM USER_CONS_COLUMNS A, USER_CONSTRAINTS B

+ WHERE A.CONSTRAINT_NAME = B.CONSTRAINT_NAME

+ AND B.CONSTRAINT_TYPE = 'P'

+ AND A.TABLE_NAME = '{$table_name}'";

+ $result = $db->sql_query($sql);

+

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $rows[] = " CONSTRAINT {$row['constraint_name']} PRIMARY KEY ({$row['column_name']})";

+ }

+ $db->sql_freeresult($result);

+

+ $sql = "SELECT A.CONSTRAINT_NAME, A.COLUMN_NAME

+ FROM USER_CONS_COLUMNS A, USER_CONSTRAINTS B

+ WHERE A.CONSTRAINT_NAME = B.CONSTRAINT_NAME

+ AND B.CONSTRAINT_TYPE = 'U'

+ AND A.TABLE_NAME = '{$table_name}'";

+ $result = $db->sql_query($sql);

+

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $rows[] = " CONSTRAINT {$row['constraint_name']} UNIQUE ({$row['column_name']})";

+ }

+ $db->sql_freeresult($result);

+

+ $sql_data .= implode(",\n", $rows);

+ $sql_data .= "\n)\n\\";

+

+ $sql = "SELECT A.REFERENCED_NAME

+ FROM USER_DEPENDENCIES A, USER_TRIGGERS B

+ WHERE A.REFERENCED_TYPE = 'SEQUENCE'

+ AND A.NAME = B.TRIGGER_NAME

+ AND B.TABLE_NAME = '{$table_name}'";

+ $result = $db->sql_query($sql);

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $sql_data .= "\nCREATE SEQUENCE {$row['referenced_name']}\\\n";

+ }

+ $db->sql_freeresult($result);

+

+ $sql = "SELECT DESCRIPTION, WHEN_CLAUSE, TRIGGER_BODY

+ FROM USER_TRIGGERS

+ WHERE TABLE_NAME = '{$table_name}'";

+ $result = $db->sql_query($sql);

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $sql_data .= "\nCREATE OR REPLACE TRIGGER {$row['description']}WHEN ({$row['when_clause']})\n{$row['trigger_body']}\\";

+ }

+ $db->sql_freeresult($result);

+

+ $sql = "SELECT A.INDEX_NAME, B.COLUMN_NAME

+ FROM USER_INDEXES A, USER_IND_COLUMNS B

+ WHERE A.UNIQUENESS = 'NONUNIQUE'

+ AND A.INDEX_NAME = B.INDEX_NAME

+ AND B.TABLE_NAME = '{$table_name}'";

+ $result = $db->sql_query($sql);

+

+ $index = array();

+

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $index[$row['index_name']][] = $row['column_name'];

+ }

+

+ foreach ($index as $index_name => $column_names)

+ {

+ $sql_data .= "\nCREATE INDEX $index_name ON $table_name(" . implode(', ', $column_names) . ")\n\\";

+ }

+ $db->sql_freeresult($result);

+ $this->flush($sql_data);

+ }

+

+ function write_data($table_name)

+ {

+ global $db;

+ $ary_type = $ary_name = array();

+

+ // Grab all of the data from current table.

+ $sql = "SELECT *

+ FROM $table_name";

+ $result = $db->sql_query($sql);

+

+ $i_num_fields = ocinumcols($result);

+

+ for ($i = 0; $i < $i_num_fields; $i++)

+ {

+ $ary_type[$i] = ocicolumntype($result, $i + 1);

+ $ary_name[$i] = ocicolumnname($result, $i + 1);

+ }

+

+ $sql_data = '';

+

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $schema_vals = $schema_fields = array();

+

+ // Build the SQL statement to recreate the data.

+ for ($i = 0; $i < $i_num_fields; $i++)

+ {

+ $str_val = $row[$ary_name[$i]];

+

+ if (preg_match('#char|text|bool|raw#i', $ary_type[$i]))

+ {

+ $str_quote = '';

+ $str_empty = "''";

+ $str_val = sanitize_data_oracle($str_val);

+ }

+ else if (preg_match('#date|timestamp#i', $ary_type[$i]))

+ {

+ if (empty($str_val))

+ {

+ $str_quote = '';

+ }

+ else

+ {

+ $str_quote = "'";

+ }

+ }

+ else

+ {

+ $str_quote = '';

+ $str_empty = 'NULL';

+ }

+

+ if (empty($str_val) && $str_val !== '0')

+ {

+ $str_val = $str_empty;

+ }

+

+ $schema_vals[$i] = $str_quote . $str_val . $str_quote;

+ $schema_fields[$i] = '"' . $ary_name[$i] . "'";

+ }

+

+ // Take the ordered fields and their associated data and build it

+ // into a valid sql statement to recreate that field in the data.

+ $sql_data = "INSERT INTO $table_name (" . implode(', ', $schema_fields) . ') VALUES (' . implode(', ', $schema_vals) . ");\n";

+

+ $this->flush($sql_data);

+ }

+ $db->sql_freeresult($result);

+ }

+

+ function write_start($prefix)

+ {

+ $sql_data = "--\n";

+ $sql_data .= "-- phpBB Backup Script\n";

+ $sql_data .= "-- Dump of tables for $prefix\n";

+ $sql_data .= "-- DATE : " . gmdate("d-m-Y H:i:s", $this->time) . " GMT\n";

+ $sql_data .= "--\n";

+ $this->flush($sql_data);

+ }

+}

+

+/**

+* @package acp

+*/

+class firebird_extractor extends base_extractor

+{

+ function write_start($prefix)

+ {

+ $sql_data = "--\n";

+ $sql_data .= "-- phpBB Backup Script\n";

+ $sql_data .= "-- Dump of tables for $prefix\n";

+ $sql_data .= "-- DATE : " . gmdate("d-m-Y H:i:s", $this->time) . " GMT\n";

+ $sql_data .= "--\n";

+ $this->flush($sql_data);

+ }

+

+ function write_data($table_name)

+ {

+ global $db;

+ $ary_type = $ary_name = array();

+

+ // Grab all of the data from current table.

+ $sql = "SELECT *

+ FROM $table_name";

+ $result = $db->sql_query($sql);

+

+ $i_num_fields = ibase_num_fields($result);

+

+ for ($i = 0; $i < $i_num_fields; $i++)

+ {

+ $info = ibase_field_info($result, $i);

+ $ary_type[$i] = $info['type'];

+ $ary_name[$i] = $info['name'];

+ }

+

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $schema_vals = $schema_fields = array();

+

+ // Build the SQL statement to recreate the data.

+ for ($i = 0; $i < $i_num_fields; $i++)

+ {

+ $str_val = $row[strtolower($ary_name[$i])];

+

+ if (preg_match('#char|text|bool|varbinary|blob#i', $ary_type[$i]))

+ {

+ $str_quote = '';

+ $str_empty = "''";

+ $str_val = sanitize_data_generic(str_replace("'", "''", $str_val));

+ }

+ else if (preg_match('#date|timestamp#i', $ary_type[$i]))

+ {

+ if (empty($str_val))

+ {

+ $str_quote = '';

+ }

+ else

+ {

+ $str_quote = "'";

+ }

+ }

+ else

+ {

+ $str_quote = '';

+ $str_empty = 'NULL';

+ }

+

+ if (empty($str_val) && $str_val !== '0')

+ {

+ $str_val = $str_empty;

+ }

+

+ $schema_vals[$i] = $str_quote . $str_val . $str_quote;

+ $schema_fields[$i] = '"' . $ary_name[$i] . '"';

+ }

+

+ // Take the ordered fields and their associated data and build it

+ // into a valid sql statement to recreate that field in the data.

+ $sql_data = "INSERT INTO $table_name (" . implode(', ', $schema_fields) . ') VALUES (' . implode(', ', $schema_vals) . ");\n";

+

+ $this->flush($sql_data);

+ }

+ $db->sql_freeresult($result);

+ }

+

+ function write_table($table_name)

+ {

+ global $db;

+

+ $sql_data = '-- Table: ' . $table_name . "\n";

+ $sql_data .= "DROP TABLE $table_name;\n";

+

+ $data_types = array(7 => 'SMALLINT', 8 => 'INTEGER', 10 => 'FLOAT', 12 => 'DATE', 13 => 'TIME', 14 => 'CHARACTER', 27 => 'DOUBLE PRECISION', 35 => 'TIMESTAMP', 37 => 'VARCHAR', 40 => 'CSTRING', 261 => 'BLOB', 701 => 'DECIMAL', 702 => 'NUMERIC');

+

+ $sql_data .= "\nCREATE TABLE $table_name (\n";

+

+ $sql = 'SELECT DISTINCT R.RDB$FIELD_NAME as FNAME, R.RDB$NULL_FLAG as NFLAG, R.RDB$DEFAULT_SOURCE as DSOURCE, F.RDB$FIELD_TYPE as FTYPE, F.RDB$FIELD_SUB_TYPE as STYPE, F.RDB$FIELD_LENGTH as FLEN

+ FROM RDB$RELATION_FIELDS R

+ JOIN RDB$FIELDS F ON R.RDB$FIELD_SOURCE=F.RDB$FIELD_NAME

+ LEFT JOIN RDB$FIELD_DIMENSIONS D ON R.RDB$FIELD_SOURCE = D.RDB$FIELD_NAME

+ WHERE F.RDB$SYSTEM_FLAG = 0

+ AND R.RDB$RELATION_NAME = \''. $table_name . '\'

+ ORDER BY R.RDB$FIELD_POSITION';

+ $result = $db->sql_query($sql);

+

+ $rows = array();

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $line = "\t" . '"' . $row['fname'] . '" ' . $data_types[$row['ftype']];

+

+ if ($row['ftype'] == 261 && $row['stype'] == 1)

+ {

+ $line .= ' SUB_TYPE TEXT';

+ }

+

+ if ($row['ftype'] == 37 || $row['ftype'] == 14)

+ {

+ $line .= ' (' . $row['flen'] . ')';

+ }

+

+ if (!empty($row['dsource']))

+ {

+ $line .= ' ' . $row['dsource'];

+ }

+

+ if (!empty($row['nflag']))

+ {

+ $line .= ' NOT NULL';

+ }

+ $rows[] = $line;

+ }

+ $db->sql_freeresult($result);

+

+ $sql_data .= implode(",\n", $rows);

+ $sql_data .= "\n);\n";

+ $keys = array();

+

+ $sql = 'SELECT I.RDB$FIELD_NAME as NAME

+ FROM RDB$RELATION_CONSTRAINTS RC, RDB$INDEX_SEGMENTS I, RDB$INDICES IDX

+ WHERE (I.RDB$INDEX_NAME = RC.RDB$INDEX_NAME)

+ AND (IDX.RDB$INDEX_NAME = RC.RDB$INDEX_NAME)

+ AND (RC.RDB$RELATION_NAME = \''. $table_name . '\')

+ ORDER BY I.RDB$FIELD_POSITION';

+ $result = $db->sql_query($sql);

+

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $keys[] = $row['name'];

+ }

+

+ if (sizeof($keys))

+ {

+ $sql_data .= "\nALTER TABLE $table_name ADD PRIMARY KEY (" . implode(', ', $keys) . ');';

+ }

+

+ $db->sql_freeresult($result);

+

+ $sql = 'SELECT I.RDB$INDEX_NAME as INAME, I.RDB$UNIQUE_FLAG as UFLAG, S.RDB$FIELD_NAME as FNAME

+ FROM RDB$INDICES I JOIN RDB$INDEX_SEGMENTS S ON S.RDB$INDEX_NAME=I.RDB$INDEX_NAME

+ WHERE (I.RDB$SYSTEM_FLAG IS NULL OR I.RDB$SYSTEM_FLAG=0)

+ AND I.RDB$FOREIGN_KEY IS NULL

+ AND I.RDB$RELATION_NAME = \''. $table_name . '\'

+ AND I.RDB$INDEX_NAME NOT STARTING WITH \'RDB$\'

+ ORDER BY S.RDB$FIELD_POSITION';

+ $result = $db->sql_query($sql);

+

+ $index = array();

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $index[$row['iname']]['unique'] = !empty($row['uflag']);

+ $index[$row['iname']]['values'][] = $row['fname'];

+ }

+

+ foreach ($index as $index_name => $data)

+ {

+ $sql_data .= "\nCREATE ";

+ if ($data['unique'])

+ {

+ $sql_data .= 'UNIQUE ';

+ }

+ $sql_data .= "INDEX $index_name ON $table_name(" . implode(', ', $data['values']) . ");";

+ }

+ $sql_data .= "\n";

+

+ $db->sql_freeresult($result);

+

+ $sql = 'SELECT D1.RDB$DEPENDENT_NAME as DNAME, D1.RDB$FIELD_NAME as FNAME, D1.RDB$DEPENDENT_TYPE, R1.RDB$RELATION_NAME

+ FROM RDB$DEPENDENCIES D1

+ LEFT JOIN RDB$RELATIONS R1 ON ((D1.RDB$DEPENDENT_NAME = R1.RDB$RELATION_NAME) AND (NOT (R1.RDB$VIEW_BLR IS NULL)))

+ WHERE (D1.RDB$DEPENDED_ON_TYPE = 0)

+ AND (D1.RDB$DEPENDENT_TYPE <> 3)

+ AND (D1.RDB$DEPENDED_ON_NAME = \'' . $table_name . '\')

+ UNION SELECT DISTINCT F2.RDB$RELATION_NAME, D2.RDB$FIELD_NAME, D2.RDB$DEPENDENT_TYPE, R2.RDB$RELATION_NAME FROM RDB$DEPENDENCIES D2, RDB$RELATION_FIELDS F2

+ LEFT JOIN RDB$RELATIONS R2 ON ((F2.RDB$RELATION_NAME = R2.RDB$RELATION_NAME) AND (NOT (R2.RDB$VIEW_BLR IS NULL)))

+ WHERE (D2.RDB$DEPENDENT_TYPE = 3)

+ AND (D2.RDB$DEPENDENT_NAME = F2.RDB$FIELD_SOURCE)

+ AND (D2.RDB$DEPENDED_ON_NAME = \'' . $table_name . '\')

+ ORDER BY 1, 2';

+ $result = $db->sql_query($sql);

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $sql = 'SELECT T1.RDB$DEPENDED_ON_NAME as GEN, T1.RDB$FIELD_NAME, T1.RDB$DEPENDED_ON_TYPE

+ FROM RDB$DEPENDENCIES T1

+ WHERE (T1.RDB$DEPENDENT_NAME = \'' . $row['dname'] . '\')

+ AND (T1.RDB$DEPENDENT_TYPE = 2 AND T1.RDB$DEPENDED_ON_TYPE = 14)

+ UNION ALL SELECT DISTINCT D.RDB$DEPENDED_ON_NAME, D.RDB$FIELD_NAME, D.RDB$DEPENDED_ON_TYPE

+ FROM RDB$DEPENDENCIES D, RDB$RELATION_FIELDS F

+ WHERE (D.RDB$DEPENDENT_TYPE = 3)

+ AND (D.RDB$DEPENDENT_NAME = F.RDB$FIELD_SOURCE)

+ AND (F.RDB$RELATION_NAME = \'' . $row['dname'] . '\')

+ ORDER BY 1,2';

+ $result2 = $db->sql_query($sql);

+ $row2 = $db->sql_fetchrow($result2);

+ $db->sql_freeresult($result2);

+ $gen_name = $row2['gen'];

+

+ $sql_data .= "\nDROP GENERATOR " . $gen_name . ";";

+ $sql_data .= "\nSET TERM ^ ;";

+ $sql_data .= "\nCREATE GENERATOR " . $gen_name . "^";

+ $sql_data .= "\nSET GENERATOR " . $gen_name . " TO 0^\n";

+ $sql_data .= "\nCREATE TRIGGER {$row['dname']} FOR $table_name";

+ $sql_data .= "\nBEFORE INSERT\nAS\nBEGIN";

+ $sql_data .= "\n NEW.{$row['fname']} = GEN_ID(" . $gen_name . ", 1);";

+ $sql_data .= "\nEND^\n";

+ $sql_data .= "\nSET TERM ; ^\n";

+ }

+

+ $this->flush($sql_data);

+

+ $db->sql_freeresult($result);

+ }

+}

+

+// get how much space we allow for a chunk of data, very similar to phpMyAdmin's way of doing things ;-) (hey, we only do this for MySQL anyway :P)

+function get_usable_memory()

+{

+ $val = trim(@ini_get('memory_limit'));

+

+ if (preg_match('/(\\d+)([mkg]?)/i', $val, $regs))

+ {

+ $memory_limit = (int) $regs[1];

+ switch ($regs[2])

+ {

+

+ case 'k':

+ case 'K':

+ $memory_limit *= 1024;

+ break;

+

+ case 'm':

+ case 'M':

+ $memory_limit *= 1048576;

+ break;

+

+ case 'g':

+ case 'G':

+ $memory_limit *= 1073741824;

+ break;

+ }

+

+ // how much memory PHP requires at the start of export (it is really a little less)

+ if ($memory_limit > 6100000)

+ {

+ $memory_limit -= 6100000;

+ }

+

+ // allow us to consume half of the total memory available

+ $memory_limit /= 2;

+ }

+ else

+ {

+ // set the buffer to 1M if we have no clue how much memory PHP will give us :P

+ $memory_limit = 1048576;

+ }

+

+ return $memory_limit;

+}

+

+function sanitize_data_mssql($text)

+{

+ $data = preg_split('/[\n\t\r\b\f]/', $text);

+ preg_match_all('/[\n\t\r\b\f]/', $text, $matches);

+

+ $val = array();

+

+ foreach ($data as $value)

+ {

+ if (strlen($value))

+ {

+ $val[] = "'" . $value . "'";

+ }

+ if (sizeof($matches[0]))

+ {

+ $val[] = 'char(' . ord(array_shift($matches[0])) . ')';

+ }

+ }

+

+ return implode('+', $val);

+}

+

+function sanitize_data_oracle($text)

+{

+ $data = preg_split('/[\0\n\t\r\b\f\'"\\\]/', $text);

+ preg_match_all('/[\0\n\t\r\b\f\'"\\\]/', $text, $matches);

+

+ $val = array();

+

+ foreach ($data as $value)

+ {

+ if (strlen($value))

+ {

+ $val[] = "'" . $value . "'";

+ }

+ if (sizeof($matches[0]))

+ {

+ $val[] = 'chr(' . ord(array_shift($matches[0])) . ')';

+ }

+ }

+

+ return implode('||', $val);

+}

+

+function sanitize_data_generic($text)

+{

+ $data = preg_split('/[\n\t\r\b\f]/', $text);

+ preg_match_all('/[\n\t\r\b\f]/', $text, $matches);

+

+ $val = array();

+

+ foreach ($data as $value)

+ {

+ if (strlen($value))

+ {

+ $val[] = "'" . $value . "'";

+ }

+ if (sizeof($matches[0]))

+ {

+ $val[] = "'" . array_shift($matches[0]) . "'";

+ }

+ }

+

+ return implode('||', $val);

+}

+

+// modified from PHP.net

+function fgetd(&$fp, $delim, $read, $seek, $eof, $buffer = 8192)

+{

+ $record = '';

+ $delim_len = strlen($delim);

+

+ while (!$eof($fp))

+ {

+ $pos = strpos($record, $delim);

+ if ($pos === false)

+ {

+ $record .= $read($fp, $buffer);

+ if ($eof($fp) && ($pos = strpos($record, $delim)) !== false)

+ {

+ $seek($fp, $pos + $delim_len - strlen($record), SEEK_CUR);

+ return substr($record, 0, $pos);

+ }

+ }

+ else

+ {

+ $seek($fp, $pos + $delim_len - strlen($record), SEEK_CUR);

+ return substr($record, 0, $pos);

+ }

+ }

+

+ return false;

+}

+

+function fgetd_seekless(&$fp, $delim, $read, $seek, $eof, $buffer = 8192)

+{

+ static $array = array();

+ static $record = '';

+

+ if (!sizeof($array))

+ {

+ while (!$eof($fp))

+ {

+ if (strpos($record, $delim) !== false)

+ {

+ $array = explode($delim, $record);

+ $record = array_pop($array);

+ break;

+ }

+ else

+ {

+ $record .= $read($fp, $buffer);

+ }

+ }

+ if ($eof($fp) && strpos($record, $delim) !== false)

+ {

+ $array = explode($delim, $record);

+ $record = array_pop($array);

+ }

+ }

+

+ if (sizeof($array))

+ {

+ return array_shift($array);

+ }

+

+ return false;

+}

+

+?> \ No newline at end of file

+<?php

+/**

+*

+* @package acp

+* @version $Id$

+* @copyright (c) 2005 phpBB Group

+* @license http://opensource.org/licenses/gpl-license.php GNU Public License

+*

+*/

+

+/**

+* @ignore

+*/

+if (!defined('IN_PHPBB'))

+{

+ exit;

+}

+

+/**

+* @package acp

+*/

+class acp_disallow

+{

+ var $u_action;

+

+ function main($id, $mode)

+ {

+ global $db, $user, $auth, $template, $cache, $config;

+

+ include(PHPBB_ROOT_PATH . 'includes/functions_user.' . PHP_EXT);

+

+ $user->add_lang('acp/posting');

+

+ // Set up general vars

+ $this->tpl_name = 'acp_disallow';

+ $this->page_title = 'ACP_DISALLOW_USERNAMES';

+

+ $form_key = 'acp_disallow';

+ add_form_key($form_key);

+

+ $disallow = request::is_set_post('disallow');

+ $allow = request::is_set_post('allow');

+

+ if (($allow || $disallow) && !check_form_key($form_key))

+ {

+ trigger_error($user->lang['FORM_INVALID'] . adm_back_link($this->u_action), E_USER_WARNING);

+ }

+

+ if ($disallow)

+ {

+ $disallowed_user = str_replace('*', '%', utf8_normalize_nfc(request_var('disallowed_user', '', true)));

+

+ if (!$disallowed_user)

+ {

+ trigger_error($user->lang['NO_USERNAME_SPECIFIED'] . adm_back_link($this->u_action), E_USER_WARNING);

+ }

+

+ $sql = 'INSERT INTO ' . DISALLOW_TABLE . ' ' . $db->sql_build_array('INSERT', array('disallow_username' => $disallowed_user));

+ $db->sql_query($sql);

+

+ $cache->destroy('_disallowed_usernames');

+

+ $message = $user->lang['DISALLOW_SUCCESSFUL'];

+ add_log('admin', 'LOG_DISALLOW_ADD', str_replace('%', '*', $disallowed_user));

+

+ trigger_error($message . adm_back_link($this->u_action));

+ }

+ else if ($allow)

+ {

+ $disallowed_id = request_var('disallowed_id', 0);

+

+ if (!$disallowed_id)

+ {

+ trigger_error($user->lang['NO_USERNAME_SPECIFIED'] . adm_back_link($this->u_action), E_USER_WARNING);

+ }

+

+ $sql = 'DELETE FROM ' . DISALLOW_TABLE . '

+ WHERE disallow_id = ' . $disallowed_id;

+ $db->sql_query($sql);

+

+ $cache->destroy('_disallowed_usernames');

+

+ add_log('admin', 'LOG_DISALLOW_DELETE');

+

+ trigger_error($user->lang['DISALLOWED_DELETED'] . adm_back_link($this->u_action));

+ }

+

+ // Grab the current list of disallowed usernames...

+ $sql = 'SELECT *

+ FROM ' . DISALLOW_TABLE;

+ $result = $db->sql_query($sql);

+

+ $disallow_select = '';

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $disallow_select .= '<option value="' . $row['disallow_id'] . '">' . str_replace('%', '*', $row['disallow_username']) . '</option>';

+ }

+ $db->sql_freeresult($result);

+

+ $template->assign_vars(array(

+ 'U_ACTION' => $this->u_action,

+ 'S_DISALLOWED_NAMES' => $disallow_select)

+ );

+ }

+}

+

+?> \ No newline at end of file

+<?php

+/**

+*

+* @package acp

+* @version $Id$

+* @copyright (c) 2005 phpBB Group

+* @license http://opensource.org/licenses/gpl-license.php GNU Public License

+*

+*/

+

+/**

+* @ignore

+*/

+if (!defined('IN_PHPBB'))

+{

+ exit;

+}

+

+/**

+* @package acp

+*/

+class acp_email

+{

+ var $u_action;

+

+ function main($id, $mode)

+ {

+ global $config, $db, $user, $auth, $template, $cache;

+

+ $user->add_lang('acp/email');

+ $this->tpl_name = 'acp_email';

+ $this->page_title = 'ACP_MASS_EMAIL';

+

+ $form_key = 'acp_email';

+ add_form_key($form_key);

+

+ // Set some vars

+ $submit = request::is_set_post('submit');

+ $error = array();

+

+ $usernames = request_var('usernames', '', true);

+ $group_id = request_var('g', 0);

+ $subject = utf8_normalize_nfc(request_var('subject', '', true));

+ $message = utf8_normalize_nfc(request_var('message', '', true));

+

+ // Do the job ...

+ if ($submit)

+ {

+ // Error checking needs to go here ... if no subject and/or no message then skip

+ // over the send and return to the form

+ $use_queue = request::is_set_post('send_immediately');

+ $priority = request_var('mail_priority_flag', MAIL_NORMAL_PRIORITY);

+

+ if (!check_form_key($form_key))

+ {

+ $error[] = $user->lang['FORM_INVALID'];

+ }

+

+ if (!$subject)

+ {

+ $error[] = $user->lang['NO_EMAIL_SUBJECT'];

+ }

+

+ if (!$message)

+ {

+ $error[] = $user->lang['NO_EMAIL_MESSAGE'];

+ }

+

+ if (!sizeof($error))

+ {

+ if ($usernames)

+ {

+ // If giving usernames the admin is able to email inactive users too...

+ $sql = 'SELECT username, user_email, user_jabber, user_notify_type, user_lang

+ FROM ' . USERS_TABLE . '

+ WHERE ' . $db->sql_in_set('username_clean', array_map('utf8_clean_string', explode("\n", $usernames))) . '

+ AND user_allow_massemail = 1

+ ORDER BY user_lang, user_notify_type'; // , SUBSTRING(user_email FROM INSTR(user_email, '@'))

+ }

+ else

+ {

+ if ($group_id)

+ {

+ $sql = 'SELECT u.user_email, u.username, u.username_clean, u.user_lang, u.user_jabber, u.user_notify_type

+ FROM ' . USERS_TABLE . ' u, ' . USER_GROUP_TABLE . ' ug

+ WHERE ug.group_id = ' . $group_id . '

+ AND ug.user_pending = 0

+ AND u.user_id = ug.user_id

+ AND u.user_allow_massemail = 1

+ AND u.user_type IN (' . USER_NORMAL . ', ' . USER_FOUNDER . ')

+ ORDER BY u.user_lang, u.user_notify_type';

+ }

+ else

+ {

+ $sql = 'SELECT username, username_clean, user_email, user_jabber, user_notify_type, user_lang

+ FROM ' . USERS_TABLE . '

+ WHERE user_allow_massemail = 1

+ AND user_type IN (' . USER_NORMAL . ', ' . USER_FOUNDER . ')

+ ORDER BY user_lang, user_notify_type';

+ }

+ }

+ $result = $db->sql_query($sql);

+ $row = $db->sql_fetchrow($result);

+

+ if (!$row)

+ {

+ $db->sql_freeresult($result);

+ trigger_error($user->lang['NO_USER'] . adm_back_link($this->u_action), E_USER_WARNING);

+ }

+

+ $i = $j = 0;

+

+ // Send with BCC, no more than 50 recipients for one mail (to not exceed the limit)

+ $max_chunk_size = 50;

+ $email_list = array();

+ $old_lang = $row['user_lang'];

+ $old_notify_type = $row['user_notify_type'];

+

+ do

+ {

+ if (($row['user_notify_type'] == NOTIFY_EMAIL && $row['user_email']) ||

+ ($row['user_notify_type'] == NOTIFY_IM && $row['user_jabber']) ||

+ ($row['user_notify_type'] == NOTIFY_BOTH && $row['user_email'] && $row['user_jabber']))

+ {

+ if ($i == $max_chunk_size || $row['user_lang'] != $old_lang || $row['user_notify_type'] != $old_notify_type)

+ {

+ $i = 0;

+

+ if (sizeof($email_list))

+ {

+ $j++;

+ }

+

+ $old_lang = $row['user_lang'];

+ $old_notify_type = $row['user_notify_type'];

+ }

+

+ $email_list[$j][$i]['lang'] = $row['user_lang'];

+ $email_list[$j][$i]['method'] = $row['user_notify_type'];

+ $email_list[$j][$i]['email'] = $row['user_email'];

+ $email_list[$j][$i]['name'] = $row['username'];

+ $email_list[$j][$i]['jabber'] = $row['user_jabber'];

+ $i++;

+ }

+ }

+ while ($row = $db->sql_fetchrow($result));

+ $db->sql_freeresult($result);

+

+ // Send the messages

+ include_once(PHPBB_ROOT_PATH . 'includes/functions_messenger.' . PHP_EXT);

+ include_once(PHPBB_ROOT_PATH . 'includes/functions_user.' . PHP_EXT);

+ $messenger = new messenger($use_queue);

+

+ $errored = false;

+

+ for ($i = 0, $size = sizeof($email_list); $i < $size; $i++)

+ {

+ $used_lang = $email_list[$i][0]['lang'];

+ $used_method = $email_list[$i][0]['method'];

+

+ for ($j = 0, $list_size = sizeof($email_list[$i]); $j < $list_size; $j++)

+ {

+ $email_row = $email_list[$i][$j];

+

+ $messenger->{((sizeof($email_list[$i]) == 1) ? 'to' : 'bcc')}($email_row['email'], $email_row['name']);

+ $messenger->im($email_row['jabber'], $email_row['name']);

+ }

+

+ $messenger->template('admin_send_email', $used_lang);

+

+ $messenger->headers('X-AntiAbuse: Board servername - ' . $config['server_name']);

+ $messenger->headers('X-AntiAbuse: User_id - ' . $user->data['user_id']);

+ $messenger->headers('X-AntiAbuse: Username - ' . $user->data['username']);

+ $messenger->headers('X-AntiAbuse: User IP - ' . $user->ip);

+

+ $messenger->subject(htmlspecialchars_decode($subject));

+ $messenger->set_mail_priority($priority);

+

+ $messenger->assign_vars(array(

+ 'CONTACT_EMAIL' => $config['board_contact'],

+ 'MESSAGE' => htmlspecialchars_decode($message))

+ );

+

+ if (!($messenger->send($used_method)))

+ {

+ $errored = true;

+ }

+ }

+ unset($email_list);

+

+ $messenger->save_queue();

+

+ if ($usernames)

+ {

+ $usernames = explode("\n", $usernames);

+ add_log('admin', 'LOG_MASS_EMAIL', implode(', ', utf8_normalize_nfc($usernames)));

+ }

+ else

+ {

+ if ($group_id)

+ {

+ $group_name = get_group_name($group_id);

+ }

+ else

+ {

+ // Not great but the logging routine doesn't cope well with localising on the fly

+ $group_name = $user->lang['ALL_USERS'];

+ }

+

+ add_log('admin', 'LOG_MASS_EMAIL', $group_name);

+ }

+

+ if (!$errored)

+ {

+ $message = ($use_queue) ? $user->lang['EMAIL_SENT_QUEUE'] : $user->lang['EMAIL_SENT'];

+ trigger_error($message . adm_back_link($this->u_action));

+ }

+ else

+ {

+ $message = sprintf($user->lang['EMAIL_SEND_ERROR'], '<a href="' . append_sid(PHPBB_ADMIN_PATH . 'index.' . PHP_EXT, 'i=logs&amp;mode=critical') . '">', '</a>');

+ trigger_error($message . adm_back_link($this->u_action), E_USER_WARNING);

+ }

+ }

+ }

+

+ // Exclude bots and guests...

+ $sql = 'SELECT group_id

+ FROM ' . GROUPS_TABLE . "

+ WHERE group_name_clean IN ('bots', 'guests')";

+ $result = $db->sql_query($sql);

+

+ $exclude = array();

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $exclude[] = $row['group_id'];

+ }

+ $db->sql_freeresult($result);

+

+ $select_list = '<option value="0"' . ((!$group_id) ? ' selected="selected"' : '') . '>' . $user->lang['ALL_USERS'] . '</option>';

+ $select_list .= group_select_options($group_id, $exclude);

+

+ $s_priority_options = '<option value="' . MAIL_LOW_PRIORITY . '">' . $user->lang['MAIL_LOW_PRIORITY'] . '</option>';

+ $s_priority_options .= '<option value="' . MAIL_NORMAL_PRIORITY . '" selected="selected">' . $user->lang['MAIL_NORMAL_PRIORITY'] . '</option>';

+ $s_priority_options .= '<option value="' . MAIL_HIGH_PRIORITY . '">' . $user->lang['MAIL_HIGH_PRIORITY'] . '</option>';

+

+ $template->assign_vars(array(

+ 'S_WARNING' => (sizeof($error)) ? true : false,

+ 'WARNING_MSG' => (sizeof($error)) ? implode('<br />', $error) : '',

+ 'U_ACTION' => $this->u_action,

+ 'S_GROUP_OPTIONS' => $select_list,

+ 'USERNAMES' => $usernames,

+ 'U_FIND_USERNAME' => append_sid('memberlist', 'mode=searchuser&amp;form=acp_email&amp;field=usernames'),

+ 'SUBJECT' => $subject,

+ 'MESSAGE' => $message,

+ 'S_PRIORITY_OPTIONS' => $s_priority_options,

+ ));

+ }

+}

+

+?> \ No newline at end of file

+<?php

+/**

+*

+* @package acp

+* @version $Id$

+* @copyright (c) 2005 phpBB Group

+* @license http://opensource.org/licenses/gpl-license.php GNU Public License

+*

+*/

+

+/**

+* @ignore

+*/

+if (!defined('IN_PHPBB'))

+{

+ exit;

+}

+

+/**

+* @package acp

+*/

+class acp_forums

+{

+ var $u_action;

+ var $parent_id = 0;

+

+ function main($id, $mode)

+ {

+ global $db, $user, $auth, $template, $cache, $config;

+

+ $user->add_lang('acp/forums');

+ $this->tpl_name = 'acp_forums';

+ $this->page_title = 'ACP_MANAGE_FORUMS';

+

+ $form_key = 'acp_forums';

+ add_form_key($form_key);

+

+ $action = request_var('action', '');

+ $update = request::is_set_post('update');

+ $forum_id = request_var('f', 0);

+

+ $this->parent_id = request_var('parent_id', 0);

+ $forum_data = $errors = array();

+ if ($update && !check_form_key($form_key))

+ {

+ $update = false;

+ $errors[] = $user->lang['FORM_INVALID'];

+ }

+

+ // Check additional permissions

+ switch ($action)

+ {

+ case 'progress_bar':

+ $start = request_var('start', 0);

+ $total = request_var('total', 0);

+

+ $this->display_progress_bar($start, $total);

+ exit;

+ break;

+

+ case 'delete':

+

+ if (!$auth->acl_get('a_forumdel'))

+ {

+ trigger_error($user->lang['NO_PERMISSION_FORUM_DELETE'] . adm_back_link($this->u_action . '&amp;parent_id=' . $this->parent_id), E_USER_WARNING);

+ }

+

+ break;

+

+ case 'add':

+

+ if (!$auth->acl_get('a_forumadd'))

+ {

+ trigger_error($user->lang['NO_PERMISSION_FORUM_ADD'] . adm_back_link($this->u_action . '&amp;parent_id=' . $this->parent_id), E_USER_WARNING);

+ }

+

+ break;

+ }

+

+ // Major routines

+ if ($update)

+ {

+ switch ($action)

+ {

+ case 'delete':

+ $action_subforums = request_var('action_subforums', '');

+ $subforums_to_id = request_var('subforums_to_id', 0);

+ $action_posts = request_var('action_posts', '');

+ $posts_to_id = request_var('posts_to_id', 0);

+

+ $errors = $this->delete_forum($forum_id, $action_posts, $action_subforums, $posts_to_id, $subforums_to_id);

+

+ if (sizeof($errors))

+ {

+ break;

+ }

+

+ $auth->acl_clear_prefetch();

+ $cache->destroy('sql', FORUMS_TABLE);

+

+ trigger_error($user->lang['FORUM_DELETED'] . adm_back_link($this->u_action . '&amp;parent_id=' . $this->parent_id));

+

+ break;

+

+ case 'edit':

+ $forum_data = array(

+ 'forum_id' => $forum_id

+ );

+

+ // No break here

+

+ case 'add':

+

+ $forum_data += array(

+ 'parent_id' => request_var('forum_parent_id', $this->parent_id),

+ 'forum_type' => request_var('forum_type', FORUM_POST),

+ 'type_action' => request_var('type_action', ''),

+ 'forum_status' => request_var('forum_status', ITEM_UNLOCKED),

+ 'forum_parents' => '',

+ 'forum_name' => utf8_normalize_nfc(request_var('forum_name', '', true)),

+ 'forum_link' => request_var('forum_link', ''),

+ 'forum_link_track' => request_var('forum_link_track', false),

+ 'forum_desc' => utf8_normalize_nfc(request_var('forum_desc', '', true)),

+ 'forum_desc_uid' => '',

+ 'forum_desc_options' => 7,

+ 'forum_desc_bitfield' => '',

+ 'forum_rules' => utf8_normalize_nfc(request_var('forum_rules', '', true)),

+ 'forum_rules_uid' => '',

+ 'forum_rules_options' => 7,

+ 'forum_rules_bitfield' => '',

+ 'forum_rules_link' => request_var('forum_rules_link', ''),

+ 'forum_image' => request_var('forum_image', ''),

+ 'forum_style' => request_var('forum_style', 0),

+ 'display_subforum_list' => request_var('display_subforum_list', false),

+ 'display_on_index' => request_var('display_on_index', false),

+ 'forum_topics_per_page' => request_var('topics_per_page', 0),

+ 'enable_indexing' => request_var('enable_indexing', true),

+ 'enable_icons' => request_var('enable_icons', false),

+ 'enable_prune' => request_var('enable_prune', false),

+ 'enable_post_review' => request_var('enable_post_review', true),

+ 'prune_days' => request_var('prune_days', 7),

+ 'prune_viewed' => request_var('prune_viewed', 7),

+ 'prune_freq' => request_var('prune_freq', 1),

+ 'prune_old_polls' => request_var('prune_old_polls', false),

+ 'prune_announce' => request_var('prune_announce', false),

+ 'prune_sticky' => request_var('prune_sticky', false),

+ 'forum_password' => request_var('forum_password', '', true),

+ 'forum_password_confirm'=> request_var('forum_password_confirm', '', true),

+ 'forum_password_unset' => request_var('forum_password_unset', false),

+ );

+

+ // Use link_display_on_index setting if forum type is link

+ if ($forum_data['forum_type'] == FORUM_LINK)

+ {

+ $forum_data['display_on_index'] = request_var('link_display_on_index', false);

+ }

+

+ // Linked forums and categories are not able to be locked...

+ if ($forum_data['forum_type'] == FORUM_LINK || $forum_data['forum_type'] == FORUM_CAT)

+ {

+ $forum_data['forum_status'] = ITEM_UNLOCKED;

+ }

+

+ $forum_data['show_active'] = ($forum_data['forum_type'] == FORUM_POST) ? request_var('display_recent', false) : request_var('display_active', false);

+

+ // Get data for forum rules if specified...

+ if ($forum_data['forum_rules'])

+ {

+ generate_text_for_storage($forum_data['forum_rules'], $forum_data['forum_rules_uid'], $forum_data['forum_rules_bitfield'], $forum_data['forum_rules_options'], request_var('rules_parse_bbcode', false), request_var('rules_parse_urls', false), request_var('rules_parse_smilies', false));

+ }

+

+ // Get data for forum description if specified

+ if ($forum_data['forum_desc'])

+ {

+ generate_text_for_storage($forum_data['forum_desc'], $forum_data['forum_desc_uid'], $forum_data['forum_desc_bitfield'], $forum_data['forum_desc_options'], request_var('desc_parse_bbcode', false), request_var('desc_parse_urls', false), request_var('desc_parse_smilies', false));

+ }

+

+ $errors = $this->update_forum_data($forum_data);

+

+ if (!sizeof($errors))

+ {

+ $forum_perm_from = request_var('forum_perm_from', 0);

+

+ // Copy permissions?

+ if ($forum_perm_from && !empty($forum_perm_from) && $forum_perm_from != $forum_data['forum_id'] &&

+ (($action != 'edit') || empty($forum_id) || ($auth->acl_get('a_fauth') && $auth->acl_get('a_authusers') && $auth->acl_get('a_authgroups') && $auth->acl_get('a_mauth'))))

+ {

+ // if we edit a forum delete current permissions first

+ if ($action == 'edit')

+ {

+ $sql = 'DELETE FROM ' . ACL_USERS_TABLE . '

+ WHERE forum_id = ' . (int) $forum_data['forum_id'];

+ $db->sql_query($sql);

+

+ $sql = 'DELETE FROM ' . ACL_GROUPS_TABLE . '

+ WHERE forum_id = ' . (int) $forum_data['forum_id'];

+ $db->sql_query($sql);

+ }

+

+ // From the mysql documentation:

+ // Prior to MySQL 4.0.14, the target table of the INSERT statement cannot appear in the FROM clause of the SELECT part of the query. This limitation is lifted in 4.0.14.

+ // Due to this we stay on the safe side if we do the insertion "the manual way"

+

+ // Copy permisisons from/to the acl users table (only forum_id gets changed)

+ $sql = 'SELECT user_id, auth_option_id, auth_role_id, auth_setting

+ FROM ' . ACL_USERS_TABLE . '

+ WHERE forum_id = ' . $forum_perm_from;

+ $result = $db->sql_query($sql);

+

+ $users_sql_ary = array();

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $users_sql_ary[] = array(

+ 'user_id' => (int) $row['user_id'],

+ 'forum_id' => (int) $forum_data['forum_id'],

+ 'auth_option_id' => (int) $row['auth_option_id'],

+ 'auth_role_id' => (int) $row['auth_role_id'],

+ 'auth_setting' => (int) $row['auth_setting']

+ );

+ }

+ $db->sql_freeresult($result);

+

+ // Copy permisisons from/to the acl groups table (only forum_id gets changed)

+ $sql = 'SELECT group_id, auth_option_id, auth_role_id, auth_setting

+ FROM ' . ACL_GROUPS_TABLE . '

+ WHERE forum_id = ' . $forum_perm_from;

+ $result = $db->sql_query($sql);

+

+ $groups_sql_ary = array();

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $groups_sql_ary[] = array(

+ 'group_id' => (int) $row['group_id'],

+ 'forum_id' => (int) $forum_data['forum_id'],

+ 'auth_option_id' => (int) $row['auth_option_id'],

+ 'auth_role_id' => (int) $row['auth_role_id'],

+ 'auth_setting' => (int) $row['auth_setting']

+ );

+ }

+ $db->sql_freeresult($result);

+

+ // Now insert the data

+ $db->sql_multi_insert(ACL_USERS_TABLE, $users_sql_ary);

+ $db->sql_multi_insert(ACL_GROUPS_TABLE, $groups_sql_ary);

+ cache_moderators();

+ }

+

+ $auth->acl_clear_prefetch();

+ $cache->destroy('sql', FORUMS_TABLE);

+

+ $acl_url = '&amp;mode=setting_forum_local&amp;forum_id[]=' . $forum_data['forum_id'];

+

+ $message = ($action == 'add') ? $user->lang['FORUM_CREATED'] : $user->lang['FORUM_UPDATED'];

+

+ // Redirect to permissions

+ if ($auth->acl_get('a_fauth'))

+ {

+ $message .= '<br /><br />' . sprintf($user->lang['REDIRECT_ACL'], '<a href="' . append_sid(PHPBB_ADMIN_PATH . 'index.' . PHP_EXT, 'i=permissions' . $acl_url) . '">', '</a>');

+ }

+

+ // redirect directly to permission settings screen if authed

+ if ($action == 'add' && !$forum_perm_from && $auth->acl_get('a_fauth'))

+ {

+ meta_refresh(4, append_sid(PHPBB_ADMIN_PATH . 'index.' . PHP_EXT, 'i=permissions' . $acl_url));

+ }

+

+ trigger_error($message . adm_back_link($this->u_action . '&amp;parent_id=' . $this->parent_id));

+ }

+

+ break;

+ }

+ }

+

+ switch ($action)

+ {

+ case 'move_up':

+ case 'move_down':

+

+ if (!$forum_id)

+ {

+ trigger_error($user->lang['NO_FORUM'] . adm_back_link($this->u_action . '&amp;parent_id=' . $this->parent_id), E_USER_WARNING);

+ }

+

+ $sql = 'SELECT *

+ FROM ' . FORUMS_TABLE . "

+ WHERE forum_id = $forum_id";

+ $result = $db->sql_query($sql);

+ $row = $db->sql_fetchrow($result);

+ $db->sql_freeresult($result);

+

+ if (!$row)

+ {

+ trigger_error($user->lang['NO_FORUM'] . adm_back_link($this->u_action . '&amp;parent_id=' . $this->parent_id), E_USER_WARNING);

+ }

+

+ $move_forum_name = $this->move_forum_by($row, $action, 1);

+

+ if ($move_forum_name !== false)

+ {

+ add_log('admin', 'LOG_FORUM_' . strtoupper($action), $row['forum_name'], $move_forum_name);

+ $cache->destroy('sql', FORUMS_TABLE);

+ }

+

+ break;

+

+ case 'sync':

+ if (!$forum_id)

+ {

+ trigger_error($user->lang['NO_FORUM'] . adm_back_link($this->u_action . '&amp;parent_id=' . $this->parent_id), E_USER_WARNING);

+ }

+

+ @set_time_limit(0);

+

+ $sql = 'SELECT forum_name, forum_topics_real

+ FROM ' . FORUMS_TABLE . "

+ WHERE forum_id = $forum_id";

+ $result = $db->sql_query($sql);

+ $row = $db->sql_fetchrow($result);

+ $db->sql_freeresult($result);

+

+ if (!$row)

+ {