+ <exec dir="build" escape="false"

+ command="diff -crNEBwd old_versions/release-${prevversion}/language new_version/phpBB3/language >

+ save/save_${prevversion}_to_${newversion}/language/phpbb-${prevversion}_to_${newversion}_language.patch" />

+ <exec dir="build" escape="false"

+ command="diff -crNEBwd old_versions/release-${prevversion}/styles/prosilver new_version/phpBB3/styles/prosilver >

+ save/save_${prevversion}_to_${newversion}/prosilver/phpbb-${prevversion}_to_${newversion}_prosilver.patch" />

+ <exec dir="build" escape="false"

+ command="diff -crNEBwd old_versions/release-${prevversion}/styles/subsilver2 new_version/phpBB3/styles/subsilver2 >

+ save/save_${prevversion}_to_${newversion}/subsilver2/phpbb-${prevversion}_to_${newversion}_subsilver2.patch" />

+ margin: 2px 0;

+ font-size: 1em;

+ margin: 2px 0;

+ <p>Please also be as detailed as you can in your report, if possible list the steps required to duplicate the problem. If you have a patch that fixes the issue, please attach it to the ticket or submit a pull request <a href="https://github.com/phpbb/phpbb3">on GitHub</a>.</p>

+<a name="disclaimer"></a><h2>8. Copyright and disclaimer</h2>

+if (!empty($user->data['is_bot']))

+{

+ // Let reverse proxies know we detected a bot.

+ header('X-PHPBB-IS-BOT: yes');

+}

+

+ global $user;

+ return $user->get_passworded_forums();

+ if ($forum_data['forum_name'] == '')

+ // Drop tables?

+ if (!empty($schema_changes['drop_tables']))

+ {

+ foreach ($schema_changes['drop_tables'] as $table)

+ {

+ // only drop table if it exists

+ if ($this->sql_table_exists($table))

+ {

+ $result = $this->sql_table_drop($table);

+ if ($this->return_statements)

+ {

+ $statements = array_merge($statements, $result);

+ }

+ }

+ }

+ }

+

+ $statements[] = 'ALTER TABLE ' . $table_name . ' DROP COLUMN ' . $column_name;

+ break;

+ return (!empty($this->query_result)) ? @sqlsrv_rows_affected($this->query_result) : false;

+ if ($query_id !== false)

+ {

+ $result = @mysqli_fetch_assoc($query_id);

+ return $result !== null ? $result : false;

+ }

+

+ return false;

+

+

+ // Prevent leakage of local path to phpBB install

+ $errfile = phpbb_filter_root_path($errfile);

+

+ $text .= "Errno $errno: $msg_text at $errfile line $errline";

+

+ $page_string .= ($start_cnt > 1) ? '<span class="page-dots"> ... </span>' : $seperator;

+ $page_string .= ($end_cnt < $total_pages) ? '<span class="page-dots"> ... </span>' : $seperator;

+ if ($params === '' || (is_array($params) && empty($params)))

+ {

+ // Do not append the ? if the param-list is empty anyway.

+ $params = false;

+ }

+

+* Return a nicely formatted backtrace.

+*

+* Turns the array returned by debug_backtrace() into HTML markup.

+* Also filters out absolute paths to phpBB root.

+*

+* @return string HTML markup

+ // We skip the first one, because it only shows this file/function

+ unset($backtrace[0]);

+ foreach ($backtrace as $trace)

+ {

+ $trace['file'] = (empty($trace['file'])) ? '(not given by php)' : htmlspecialchars(phpbb_filter_root_path($trace['file']));

+ $trace['line'] = (empty($trace['line'])) ? '(not given by php)' : $trace['line'];

+ // Only show function arguments for include etc.

+ // Other parameters may contain sensible information

+ $argument = '';

+ if (!empty($trace['args'][0]) && in_array($trace['function'], array('include', 'require', 'include_once', 'require_once')))

+ $argument = htmlspecialchars(phpbb_filter_root_path($trace['args'][0]));

+ $output .= '<b>FILE:</b> ' . $trace['file'] . '<br />';

+ $output .= '<b>CALL:</b> ' . htmlspecialchars($trace['class'] . $trace['type'] . $trace['function']);

+ $output .= '(' . (($argument !== '') ? "'$argument'" : '') . ')<br />';

+ $errfile = phpbb_filter_root_path($errfile);

+ $msg_text = phpbb_filter_root_path($msg_text);

+* Removes absolute path to phpBB root directory from error messages

+* and converts backslashes to forward slashes.

+*

+* @param string $errfile Absolute file path

+* (e.g. /var/www/phpbb3/phpBB/includes/functions.php)

+* Please note that if $errfile is outside of the phpBB root,

+* the root path will not be found and can not be filtered.

+* @return string Relative file path

+* (e.g. /includes/functions.php)

+*/

+function phpbb_filter_root_path($errfile)

+{

+ static $root_path;

+

+ if (empty($root_path))

+ {

+ $root_path = phpbb_realpath(dirname(__FILE__) . '/../');

+ }

+

+ return str_replace(array($root_path, '\\'), array('[ROOT]', '/'), $errfile);

+}

+

+/**

+ if (!empty($user->data['is_bot']))

+ {

+ // Let reverse proxies know we detected a bot.

+ header('X-PHPBB-IS-BOT: yes');

+ }

+

+ // Handle marking everything read

+ if ($mark_read == 'all')

+ {

+ $redirect = build_url(array('mark', 'hash'));

+ meta_refresh(3, $redirect);

+

+ if (check_link_hash(request_var('hash', ''), 'global'))

+ {

+ markread('all');

+

+ trigger_error(

+ $user->lang['FORUMS_MARKED'] . '<br /><br />' .

+ sprintf($user->lang['RETURN_INDEX'], '<a href="' . $redirect . '">', '</a>')

+ );

+ }

+ else

+ {

+ trigger_error(sprintf($user->lang['RETURN_PAGE'], '<a href="' . $redirect . '">', '</a>'));

+ }

+ }

+

+ if ($mark_read == 'forums')

+

+ continue;

+ if ($mark_read == 'forums')

+ // Add 0 to forums array to mark global announcements correctly

+ $forum_ids[] = 0;

+ markread('topics', $forum_ids);

+ $message = sprintf($user->lang['RETURN_FORUM'], '<a href="' . $redirect . '">', '</a>');

+ $pagination .= '<span class="page-dots"> ... </span>';

+ // We need to exclude passworded forums here so we do not leak the topic title

+ $forum_ary_topic = array_unique(array_merge($forum_ary, $user->get_passworded_forums()));

+ $forum_sql_topic = (!empty($forum_ary_topic)) ? 'AND ' . $db->sql_in_set('forum_id', $forum_ary_topic, true) : '';

+

+ $forum_sql_topic

+ if (!class_exists('phpbb_error_collector'))

+ {

+ global $phpbb_root_path, $phpEx;

+ include($phpbb_root_path . 'includes/error_collector.' . $phpEx);

+ }

+ $collector = new phpbb_error_collector;

+ $collector->install();

+ $collector->uninstall();

+ $error_contents = $collector->format_errors();

+ global $config, $phpbb_root_path, $phpEx;

+ if (!class_exists('phpbb_error_collector'))

+ {

+ include($phpbb_root_path . 'includes/error_collector.' . $phpEx);

+ }

+

+ $collector = new phpbb_error_collector;

+ $collector->install();

+

+

+ $collector->uninstall();

+ $err_msg = $collector->format_errors();

+

+ /**

+ * Returns all password protected forum ids the user is currently NOT authenticated for.

+ *

+ * @return array Array of forum ids

+ * @access public

+ */

+ function get_passworded_forums()

+ {

+ global $db;

+

+ $sql = 'SELECT f.forum_id, fa.user_id

+ FROM ' . FORUMS_TABLE . ' f

+ LEFT JOIN ' . FORUMS_ACCESS_TABLE . " fa

+ ON (fa.forum_id = f.forum_id

+ AND fa.session_id = '" . $db->sql_escape($this->session_id) . "')

+ WHERE f.forum_password <> ''";

+ $result = $db->sql_query($sql);

+

+ $forum_ids = array();

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $forum_id = (int) $row['forum_id'];

+

+ if ($row['user_id'] != $this->data['user_id'])

+ {

+ $forum_ids[$forum_id] = $forum_id;

+ }

+ }

+ $db->sql_freeresult($result);

+

+ return $forum_ids;

+ }

+ 'U_ICQ' => ($user_info['user_icq']) ? 'http://www.icq.com/people/' . urlencode($user_info['user_icq']) . '/' : '',

+if ($config['load_birthdays'] && $config['allow_birthdays'] && $auth->acl_gets('u_viewprofile', 'a_user', 'a_useradd', 'a_userdel'))

+ 'FORUM_ADMIN_EXPLAIN' => 'In phpBB3 everything is forum based. A category is just a special type of forum. Each forum can have an unlimited number of sub-forums and you can determine whether each may be posted to or not (i.e. whether it acts like an old category). Here you can add, edit, delete, lock, unlock individual forums as well as set certain additional controls. If your posts and topics have got out of sync you can also resynchronise a forum. <strong>You need to copy or set appropriate permissions for newly created forums to have them displayed.</strong>',

+ 1 => 'It is possible an administrator has deactivated or deleted your account for some reason. Also, many boards periodically remove users who have not posted for a long time to reduce the size of the database. If this has happened, try registering again and being more involved in discussions.'

+

+ // Since IE9, IE also has textarea.selectionStart, but it still needs to be treated the old way.

+ // Therefore we simply add a !is_ie here until IE fixes the text-selection completely.

+ if (!isNaN(textarea.selectionStart) && !is_ie)

+ // IE9 must use the document.selection method but has the *.getSelection so we just force no IE

+ if (window.getSelection && !is_ie)

+ else if (document.getSelection && !is_ie)

+ // Not IE and IE9+

+ <!-- IF S_CLEAR_ALLOWED --><td style="width: 5%; text-align: center;"><input type="checkbox" name="marknote[]" id="note-{usernotes.ID}" value="{usernotes.ID}" /></td><!-- ENDIF -->

+ <dt>{L_ACTIVE_IN_FORUM}:</dt> <dd><!-- IF ACTIVE_FORUM != '' --><strong><a href="{U_ACTIVE_FORUM}">{ACTIVE_FORUM}</a></strong><br />({ACTIVE_FORUM_POSTS} / {ACTIVE_FORUM_PCT})<!-- ELSE --> - <!-- ENDIF --></dd>

+ <dt>{L_ACTIVE_IN_TOPIC}:</dt> <dd><!-- IF ACTIVE_TOPIC != '' --><strong><a href="{U_ACTIVE_TOPIC}">{ACTIVE_TOPIC}</a></strong><br />({ACTIVE_TOPIC_POSTS} / {ACTIVE_TOPIC_PCT})<!-- ELSE --> - <!-- ENDIF --></dd>

+ <dt><a href="{U_SORT_FILENAME}">{L_FILENAME}</a></dt>

+ <dt><a href="{attachrow.U_VIEW_ATTACHMENT}" class="topictitle">{attachrow.FILENAME}</a> ({attachrow.SIZE})<br />

+ width: 90px;

+

+ // Since IE9, IE also has textarea.selectionStart, but it still needs to be treated the old way.

+ // Therefore we simply add a !is_ie here until IE fixes the text-selection completely.

+ if (!isNaN(textarea.selectionStart) && !is_ie)

+ // IE9 must use the document.selection method but has the *.getSelection so we just force no IE

+ if (window.getSelection && !is_ie)

+ else if (document.getSelection && !is_ie)

+ <td><!-- IF ACTIVE_FORUM != '' --><b><a class="gen" href="{U_ACTIVE_FORUM}">{ACTIVE_FORUM}</a></b><br /><span class="genmed">[ {ACTIVE_FORUM_POSTS} / {ACTIVE_FORUM_PCT} ]</span><!-- ELSE --><span class="gen">-</span><!-- ENDIF --></td>

+ <td><!-- IF ACTIVE_TOPIC != '' --><b><a class="gen" href="{U_ACTIVE_TOPIC}">{ACTIVE_TOPIC}</a></b><br /><span class="genmed">[ {ACTIVE_TOPIC_POSTS} / {ACTIVE_TOPIC_PCT} ]</span><!-- ELSE --><span class="gen">-</span><!-- ENDIF --></td>

+ $this->assertTrue($this->tools->sql_table_exists('prefix_test_table'));

+

+

+ $this->assertFalse($this->tools->sql_table_exists('prefix_test_table'));

+ }

+

+ public function test_peform_schema_changes_drop_tables()

+ {

+ $db_tools = $this->getMock('phpbb_db_tools', array(

+ 'sql_table_exists',

+ 'sql_table_drop',

+ ), array(&$this->db));

+

+ // pretend all tables exist

+ $db_tools->expects($this->any())->method('sql_table_exists')

+ ->will($this->returnValue(true));

+

+ // drop tables

+ $db_tools->expects($this->exactly(2))->method('sql_table_drop');

+ $db_tools->expects($this->at(1))->method('sql_table_drop')

+ ->with($this->equalTo('dropped_table_1'));

+ $db_tools->expects($this->at(3))->method('sql_table_drop')

+ ->with($this->equalTo('dropped_table_2'));

+

+ $db_tools->perform_schema_changes(array(

+ 'drop_tables' => array(

+ 'dropped_table_1',

+ 'dropped_table_2',

+ ),

+ ));

+ }

+

+ public function test_peform_schema_changes_drop_columns()

+ {

+ $db_tools = $this->getMock('phpbb_db_tools', array(

+ 'sql_column_exists',

+ 'sql_column_remove',

+ ), array(&$this->db));

+

+ // pretend all columns exist

+ $db_tools->expects($this->any())->method('sql_column_exists')

+ ->will($this->returnValue(true));

+ $db_tools->expects($this->any())->method('sql_column_exists')

+ ->will($this->returnValue(true));

+

+ // drop columns

+ $db_tools->expects($this->exactly(2))->method('sql_column_remove');

+ $db_tools->expects($this->at(1))->method('sql_column_remove')

+ ->with($this->equalTo('existing_table'), $this->equalTo('dropped_column_1'));

+ $db_tools->expects($this->at(3))->method('sql_column_remove')

+ ->with($this->equalTo('existing_table'), $this->equalTo('dropped_column_2'));

+

+ $db_tools->perform_schema_changes(array(

+ 'drop_columns' => array(

+ 'existing_table' => array(

+ 'dropped_column_1',

+ 'dropped_column_2',

+ ),

+ ),

+ ));

+ public function test_nested_transactions()

+

+ /**

+ * fix for PHPBB3-10307

+ */

+ public function test_sql_fetchrow_returns_false_when_empty()

+ {

+ $db = $this->new_dbal();

+

+ $sql = 'SELECT * FROM (SELECT 1) AS TBL WHERE 1 = 0';

+ $result = $db->sql_query($sql);

+

+ $row = $db->sql_fetchrow($result);

+ $db->sql_freeresult($result);

+

+ $this->assertSame(false, $row);

+ }

+<?php

+/**

+*

+* @package testing

+* @copyright (c) 2011 phpBB Group

+* @license http://opensource.org/licenses/gpl-license.php GNU Public License

+*

+*/

+

+require_once dirname(__FILE__) . '/../phpBB/includes/functions.php';

+require_once dirname(__FILE__) . '/../phpBB/includes/error_collector.php';

+

+class phpbb_error_collector_test extends phpbb_test_case

+{

+ public function test_collection()

+ {

+ $collector = new phpbb_error_collector;

+ $collector->install();

+

+ // Cause a warning

+ 1/0; $line = __LINE__;

+

+ $collector->uninstall();

+

+ list($errno, $msg_text, $errfile, $errline) = $collector->errors[0];

+ $error_contents = $collector->format_errors();

+

+ $this->assertEquals($errno, 2);

+

+ // Unfortunately $error_contents will contain the full path here,

+ // because the tests directory is outside of phpbb root path.

+ $this->assertStringStartsWith('Errno 2: Division by zero at ', $error_contents);

+ $this->assertStringEndsWith(" line $line", $error_contents);

+ }

+}

+

+ /**

+ * Obtain list of word censors. We don't need to parse them here,

+ * that is tested elsewhere.

+ */

+ public function obtain_word_list()

+ {

+ return array(

+ 'match' => array(

+ '#(?<![\\p{Nd}\\p{L}_-])([\\p{Nd}\\p{L}_-]*?badword1[\\p{Nd}\\p{L}_-]*?)(?![\\p{Nd}\\p{L}_-])#iu',

+ '#(?<![\\p{Nd}\\p{L}_-])([\\p{Nd}\\p{L}_-]*?badword2)(?![\\p{Nd}\\p{L}_-])#iu',

+ '#(?<![\\p{Nd}\\p{L}_-])(badword3[\\p{Nd}\\p{L}_-]*?)(?![\\p{Nd}\\p{L}_-])#iu',

+ '#(?<![\\p{Nd}\\p{L}_-])(badword4)(?![\\p{Nd}\\p{L}_-])#iu',

+ ),

+ 'replace' => array(

+ 'replacement1',

+ 'replacement2',

+ 'replacement3',

+ 'replacement4',

+ ),

+ );

+ }

+

+ private $options = array();

+ public function optionget($item)

+ {

+ if (!isset($this->options[$item]))

+ {

+ throw new Exception(sprintf("You didn't set the option '%s' on the mock user using optionset.", $item));

+ }

+

+ return $this->options[$item];

+ }

+

+ public function optionset($item, $value)

+ {

+ $this->options[$item] = $value;

+ }

+ $result = $cp->validate_profile_field(FIELD_DROPDOWN, $field_value, $field_data);

+<?php

+/**

+*

+* @package testing

+* @copyright (c) 2011 phpBB Group

+* @license http://opensource.org/licenses/gpl-license.php GNU Public License

+*

+*/

+

+require_once dirname(__FILE__) . '/../../phpBB/includes/functions.php';

+

+class phpbb_session_append_sid_test extends phpbb_test_case

+{

+

+ public function append_sid_data()

+ {

+ return array(

+ array('viewtopic.php?t=1&amp;f=2', false, true, false, 'viewtopic.php?t=1&amp;f=2', 'parameters in url-argument'),

+ array('viewtopic.php', 't=1&amp;f=2', true, false, 'viewtopic.php?t=1&amp;f=2', 'parameters in params-argument using amp'),

+ array('viewtopic.php', 't=1&f=2', false, false, 'viewtopic.php?t=1&f=2', 'parameters in params-argument using &'),

+ array('viewtopic.php', array('t' => 1, 'f' => 2), true, false, 'viewtopic.php?t=1&amp;f=2', 'parameters in params-argument as array'),

+

+ // Custom sid parameter

+ array('viewtopic.php', 't=1&amp;f=2', true, 'custom-sid', 'viewtopic.php?t=1&amp;f=2&amp;sid=custom-sid', 'using session_id'),

+

+ // Testing anchors

+ array('viewtopic.php?t=1&amp;f=2#anchor', false, true, false, 'viewtopic.php?t=1&amp;f=2#anchor', 'anchor in url-argument'),

+ array('viewtopic.php', 't=1&amp;f=2#anchor', true, false, 'viewtopic.php?t=1&amp;f=2#anchor', 'anchor in params-argument'),

+ array('viewtopic.php', array('t' => 1, 'f' => 2, '#' => 'anchor'), true, false, 'viewtopic.php?t=1&amp;f=2#anchor', 'anchor in params-argument (array)'),

+

+ // Anchors and custom sid

+ array('viewtopic.php?t=1&amp;f=2#anchor', false, true, 'custom-sid', 'viewtopic.php?t=1&amp;f=2&amp;sid=custom-sid#anchor', 'anchor in url-argument using session_id'),

+ array('viewtopic.php', 't=1&amp;f=2#anchor', true, 'custom-sid', 'viewtopic.php?t=1&amp;f=2&amp;sid=custom-sid#anchor', 'anchor in params-argument using session_id'),

+ array('viewtopic.php', array('t' => 1, 'f' => 2, '#' => 'anchor'), true, 'custom-sid', 'viewtopic.php?t=1&amp;f=2&amp;sid=custom-sid#anchor', 'anchor in params-argument (array) using session_id'),

+

+ // Empty parameters should not append the ?

+ array('viewtopic.php', false, true, false, 'viewtopic.php', 'no params using bool false'),

+ array('viewtopic.php', '', true, false, 'viewtopic.php', 'no params using empty string'),

+ array('viewtopic.php', array(), true, false, 'viewtopic.php', 'no params using empty array'),

+ );

+ }

+

+ /**

+ * @dataProvider append_sid_data

+ */

+ public function test_append_sid($url, $params, $is_amp, $session_id, $expected, $description)

+ {

+ $this->assertEquals($expected, append_sid($url, $params, $is_amp, $session_id));

+ }

+}

+

+ $template_cache_dir = dirname($this->template->cachepath);

+ if (!is_writable($template_cache_dir))

+ $this->markTestSkipped("Template cache directory ({$template_cache_dir}) is not writable.");

+<?php

+/**

+*

+* @package testing

+* @copyright (c) 2011 phpBB Group

+* @license http://opensource.org/licenses/gpl-license.php GNU Public License

+*

+*/

+

+require_once dirname(__FILE__) . '/../../phpBB/includes/functions.php';

+require_once dirname(__FILE__) . '/../../phpBB/includes/functions_content.php';

+require_once dirname(__FILE__) . '/../mock_user.php';

+require_once dirname(__FILE__) . '/../mock/cache.php';

+

+class phpbb_text_processing_censor_text_test extends phpbb_test_case

+{

+ public function censor_text_data()

+ {

+ global $cache, $user;

+ $cache = new phpbb_mock_cache;

+ $user = new phpbb_mock_user;

+

+ $user->optionset('viewcensors', false);

+

+ return array(

+ array('', ''),

+

+ array('badword1', 'replacement1'),

+ array(' badword1', ' replacement1'),

+ array('badword1 ', 'replacement1 '),

+ array(' badword1 ', ' replacement1 '),

+ array('abadword1', 'replacement1'),

+ array('badword1w', 'replacement1'),

+ array('abadword1w', 'replacement1'),

+ array('anotherbadword1test', 'replacement1'),

+ array('this badword1', 'this replacement1'),

+ array('this badword1 word', 'this replacement1 word'),

+

+ array('badword2', 'replacement2'),

+ array('bbadword2', 'replacement2'),

+ array('bbbadword2', 'replacement2'),

+ array('badword2d', 'badword2d'),

+ array('bbadword2d', 'bbadword2d'),

+ array('test badword2', 'test replacement2'),

+ array('test badword2 word', 'test replacement2 word'),

+

+ array('badword3', 'replacement3'),

+ array('bbadword3', 'bbadword3'),

+ array('badword3d', 'replacement3'),

+ array('badword3ddd', 'replacement3'),

+ array('bbadword3d', 'bbadword3d'),

+ array(' badword3 ', ' replacement3 '),

+ array(' badword3', ' replacement3'),

+

+ array('badword4', 'replacement4'),

+ array('this badword4 word', 'this replacement4 word'),

+ array('abadword4', 'abadword4'),

+ array('badword4d', 'badword4d'),

+ array('abadword4d', 'abadword4d'),

+

+ array('badword1 badword2 badword3 badword4', 'replacement1 replacement2 replacement3 replacement4'),

+ array('badword1 badword2 badword3 badword4d', 'replacement1 replacement2 replacement3 badword4d'),

+ array('abadword1 badword2 badword3 badword4', 'replacement1 replacement2 replacement3 replacement4'),

+

+ array("new\nline\ntest", "new\nline\ntest"),

+ array("tab\ttest\t", "tab\ttest\t"),

+ array('öäü', 'öäü'),

+ array('badw' . chr(1) . 'ord1', 'badw' . chr(1) . 'ord1'),

+ array('badw' . chr(2) . 'ord1', 'badw' . chr(2) . 'ord1'),

+ array('badw' . chr(3) . 'ord1', 'badw' . chr(3) . 'ord1'),

+ array('badw' . chr(4) . 'ord1', 'badw' . chr(4) . 'ord1'),

+ array('badw' . chr(5) . 'ord1', 'badw' . chr(5) . 'ord1'),

+ array('badw' . chr(6) . 'ord1', 'badw' . chr(6) . 'ord1'),

+ );

+ }

+

+ /**

+ * @dataProvider censor_text_data

+ */

+ public function test_censor_text($input, $expected)

+ {

+ $label = 'Testing word censor: ' . $input;

+ $this->assertEquals($expected, censor_text($input), $label);

+ }

+}

+ call_user_func_array(array('utf_normalizer', $form), array(&$utf_result));

+ call_user_func_array(array('utf_normalizer', $form), array(&$utf_result));