+ 'secure_allow_empty_referer' => array('lang' => 'SECURE_EMPTY_REFERRER', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+ 'check_attachment_content' => array('lang' => 'CHECK_CONTENT', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+

+ $this->new_config[$config_name] = $config_value = ($size_var == 'kb') ? round($config_value * 1024) : (($size_var == 'mb') ? round($config_value * 1048576) : $config_value);

+

+ $content = build_cfg_template($type, $config_key, $this->new_config, $config_key, $vars);

+ if (empty($content))

+ {

+ continue;

+ }

+ 'CONTENT' => $content,

+ $max_filesize = ($size_select == 'kb') ? round($max_filesize * 1024) : (($size_select == 'mb') ? round($max_filesize * 1048576) : $max_filesize);

+ 'edit_time' => array('lang' => 'EDIT_TIME', 'validate' => 'int:0', 'type' => 'text:5:5', 'explain' => true, 'append' => ' ' . $user->lang['MINUTES']),

+ 'display_last_edited' => array('lang' => 'DISPLAY_LAST_EDITED', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

+ 'flood_interval' => array('lang' => 'FLOOD_INTERVAL', 'validate' => 'int:0', 'type' => 'text:3:10', 'explain' => true, 'append' => ' ' . $user->lang['SECONDS']),

+ 'bump_interval' => array('lang' => 'BUMP_INTERVAL', 'validate' => 'int:0', 'type' => 'custom', 'method' => 'bump_interval', 'explain' => true),

+ 'topics_per_page' => array('lang' => 'TOPICS_PER_PAGE', 'validate' => 'int:1', 'type' => 'text:3:4', 'explain' => false),

+ 'posts_per_page' => array('lang' => 'POSTS_PER_PAGE', 'validate' => 'int:1', 'type' => 'text:3:4', 'explain' => false),

+ 'hot_threshold' => array('lang' => 'HOT_THRESHOLD', 'validate' => 'int:0', 'type' => 'text:3:4', 'explain' => true),

+ 'max_poll_options' => array('lang' => 'MAX_POLL_OPTIONS', 'validate' => 'int:2:127', 'type' => 'text:4:4', 'explain' => false),

+ 'max_post_chars' => array('lang' => 'CHAR_LIMIT', 'validate' => 'int:0', 'type' => 'text:4:6', 'explain' => true),

+ 'max_post_smilies' => array('lang' => 'SMILIES_LIMIT', 'validate' => 'int:0', 'type' => 'text:4:4', 'explain' => true),

+ 'max_post_urls' => array('lang' => 'MAX_POST_URLS', 'validate' => 'int:0', 'type' => 'text:5:4', 'explain' => true),

+ 'max_post_font_size' => array('lang' => 'MAX_POST_FONT_SIZE', 'validate' => 'int:0', 'type' => 'text:5:4', 'explain' => true, 'append' => ' %'),

+ 'max_quote_depth' => array('lang' => 'QUOTE_DEPTH_LIMIT', 'validate' => 'int:0', 'type' => 'text:4:4', 'explain' => true),

+ 'max_post_img_width' => array('lang' => 'MAX_POST_IMG_WIDTH', 'validate' => 'int:0', 'type' => 'text:5:4', 'explain' => true, 'append' => ' ' . $user->lang['PIXEL']),

+ 'max_post_img_height' => array('lang' => 'MAX_POST_IMG_HEIGHT', 'validate' => 'int:0', 'type' => 'text:5:4', 'explain' => true, 'append' => ' ' . $user->lang['PIXEL']),

+ 'referer_validation' => array('lang' => 'REFERER_VALID', 'validate' => 'int:0:3','type' => 'custom', 'method' => 'select_ref_check', 'explain' => true),

+ 'CONTENT' => $content,

+

+ /**

+ * Select referer validation

+ */

+ function select_ref_check($value, $key = '')

+ {

+ $radio_ary = array(REFERER_VALIDATE_PATH => 'REF_PATH', REFERER_VALIDATE_HOST => 'REF_HOST', REFERER_VALIDATE_NONE => 'NO_REF_VALIDATION');

+ return h_radio('config[referer_validation]', $radio_ary, $value, $key);

+ }

+

+

+ exit;

+

+

+ global $cache, $db, $user, $auth, $template, $table_prefix;

+ add_log('admin', 'LOG_DB_BACKUP');

+

+ asort($tables);

+

+ if (substr($query, 0, 13) == 'CREATE DOMAIN')

+ {

+ list(, , $domain) = explode(' ', $query);

+ $sql = "SELECT domain_name

+ FROM information_schema.domains

+ WHERE domain_name = '$domain';";

+ $result = $db->sql_query($sql);

+ if (!$db->sql_fetchrow($result))

+ {

+ $db->sql_query($query);

+ }

+ $db->sql_freeresult($result);

+ }

+ else

+ {

+ $db->sql_query($query);

+ }

+

+ // Purge the cache due to updated data

+ $cache->purge();

+

+ $sql_data .= "DROP TABLE $table_name;\n";

+ if (isset($row['rowdefault']))

+ exit;

+

+

+

+

+

+

+

+

+ $result = $db->sql_query($sql);

+

+ $error = group_user_attributes($action, $group_id, $mark_ary, false, $group_name);

+

+ if (!$error)

+ switch ($action)

+ {

+ case 'demote':

+ $message = 'GROUP_MODS_DEMOTED';

+ break;

+ case 'promote':

+ $message = 'GROUP_MODS_PROMOTED';

+ break;

+ case 'approve':

+ $message = 'USERS_APPROVED';

+ break;

+ }

+ trigger_error($user->lang[$message] . adm_back_link($this->u_action . '&action=list&g=' . $group_id));

+ }

+ else

+ {

+ trigger_error($user->lang[$error] . adm_back_link($this->u_action . '&action=list&g=' . $group_id), E_USER_WARNING);

+ }

+

+ $errormsgs = '';

+ trigger_error($user->lang[$suc_lang . '_ADDED'] . $errormsgs . adm_back_link($this->u_action), $level);

+ if ($action === 'admlogout')

+ {

+ $user->unset_admin();

+ $redirect_url = append_sid("{$phpbb_root_path}index.$phpEx");

+ meta_refresh(3, $redirect_url);

+ trigger_error($user->lang['ADM_LOGGED_OUT'] . '<br /><br />' . sprintf($user->lang['RETURN_INDEX'], '<a href="' . $redirect_url . '">', '</a>'));

+ }

+

+

+ $sql = 'SELECT DISTINCT u.user_id, u.username, u.username_clean, u.user_regdate

+

+ if ($save_changes && !check_form_key('acp_styles'))

+ {

+ trigger_error($user->lang['FORM_INVALID'] . adm_back_link($this->u_action), E_USER_WARNING);

+ }

+ else if (!$save_changes)

+ {

+ add_form_key('acp_styles');

+ }

+ else if (!empty($this->role_cache[$row['auth_role_id']]))

+ set_var($php_auth_user, $php_auth_user, 'string', true);

+ set_var($php_auth_pw, $php_auth_pw, 'string', true);

+ set_var($php_auth_user, $_SERVER['PHP_AUTH_USER'], 'string', true);

+// referer validation

+define('REFERER_VALIDATE_NONE', 0);

+define('REFERER_VALIDATE_HOST', 1);

+define('REFERER_VALIDATE_PATH', 2);

+

+* @version Version 0.1 / slightly modified for phpBB 3.0.x (using $H$ as hash type identifier)

+ // HTTP HOST can carry a port number (we fetch $user->host, but for old versions this may be true)

+* This function is intended for urls within the board. It's not meant to redirect to cross-domains.

+ // Attention: only able to redirect within the same domain (yourdomain.com -> www.yourdomain.com will not work)

+ if ($url_parts['host'] !== $user->host)

+ {

+ $url = generate_board_url();

+ }

+ $url = str_replace('&', '&amp;', $url);

+ 'META' => '<meta http-equiv="refresh" content="' . $time . ';url=' . $url . '" />')

+

+ return $url;

+ $redirect = meta_refresh(3, $redirect);

+ return '(?:[a-z0-9\'\.\-_\+\|]++|&amp;)+@[a-z0-9\-]+\.(?:[a-z0-9\-]+\.)*[a-z]+';

+ if ((int) @ini_get('output_buffering') === 1 || strtolower(@ini_get('output_buffering')) === 'on')

+ {

+ @ob_flush();

+ }

+

+ // Another quick fix for those having gzip compression enabled, but do not flush if the coder wants to catch "something". ;)

+ if (@extension_loaded('zlib') && !headers_sent() && !ob_get_level())

+

+ }

+ $time = (time() - (intval($config['load_online_time']) * 60));

+

+

+ $time = (time() - (intval($config['load_online_time']) * 60));

+ $result = $db->sql_query($sql);

+

+ global $phpbb_hook, $config;

+ (!$config['gzip_compress']) ? @flush() : @ob_flush();

+ AND t.topic_approved = 1

+ AND t.topic_status <> ' . ITEM_MOVED;

+ AND t.topic_status <> ' . ITEM_MOVED . '

+ {

+ $folder = trim($folder);

+ if (!$folder)

+ {

+ continue;

+ }

+

+ // Some archivers are punks, they don't include folders in their archives!

+ $folder = trim($folder);

+ if (!$folder)

+ {

+ continue;

+ }

+

+

+

+

+

+ $target_filename = "$dst$filename";

+

+ if (!is_dir($target_filename))

+ $folders = explode('/', $target_filename);

+ $folder = trim($folder);

+ if (!$folder)

+ {

+ continue;

+ }

+

+ else if ($filesize >= 0 && ($filetype == 0 || $filetype == "\0"))

+ // Some archivers are punks, they don't properly order the folders in their archives!

+ $str = '';

+ $folders = explode('/', pathinfo($target_filename, PATHINFO_DIRNAME));

+

+ // Create and folders and subfolders if they do not exist

+ foreach ($folders as $folder)

+ {

+ $folder = trim($folder);

+ if (!$folder)

+ {

+ continue;

+ }

+

+ $str = (!empty($str)) ? $str . '/' . $folder : $folder;

+ if (!is_dir($str))

+ {

+ if (!@mkdir($str, 0777))

+ {

+ trigger_error("Could not create directory $folder");

+ }

+ @chmod($str, 0777);

+ }

+ }

+

+ if (!($fp = fopen($target_filename, 'wb')))

+ @chmod($target_filename, 0777);

+ fwrite($fp, ($filesize) ? $fzread($this->fp, ($filesize + 511) &~ 511) : '', $filesize);

+ $flags = (($allow_bbcode) ? OPTION_FLAG_BBCODE : 0) + (($allow_smilies) ? OPTION_FLAG_SMILIES : 0) + (($allow_urls) ? OPTION_FLAG_LINKS : 0);

+

+ return $whitespace . $orig_url . '/'; // slash is taken away by relative url pattern

+ if (strspn($table_prefix, '-./\\') !== 0)

+ /** Currently commented out due to problems with some jabber server - reason unknown

+ }*/

+ if ($config['check_attachment_content'])

+ {

+ $upload->set_disallowed_content(explode('|', $config['mime_triggers']));

+ }

+

+ // Type is one of the IMAGETYPE constants - it is fetched from getimagesize()

+ // We do not use the constants here, because some were not available in PHP 4.3.x

+ // WBMP

+ 'topic_last_post_subject' => (string) $subject,

+ if ($folder_id !== false && !isset($folder[$folder_id]))

+ {

+ trigger_error('UNKNOWN_FOLDER');

+ }

+

+/**

+* Set correct users max messages in PM folder.

+* If several group memberships define different amount of messages, the highest will be chosen.

+*/

+function set_user_message_limit()

+{

+ global $user, $db, $config;

+

+ // Get maximum about from user memberships - if it is 0, there is no limit set and we use the maximum value within the config.

+ $sql = 'SELECT MAX(g.group_message_limit) as max_message_limit

+ FROM ' . GROUPS_TABLE . ' g, ' . USER_GROUP_TABLE . ' ug

+ WHERE ug.user_id = ' . $user->data['user_id'] . '

+ AND ug.user_pending = 0

+ AND ug.group_id = g.group_id';

+ $result = $db->sql_query($sql);

+ $message_limit = (int) $db->sql_fetchfield('max_message_limit');

+ $db->sql_freeresult($result);

+

+ $user->data['message_limit'] = (!$message_limit) ? $config['pm_max_msgs'] : $message_limit;

+}

+

+

+

+ /**

+ * Check the first 256 bytes for forbidden content

+ */

+ function check_content($disallowed_content)

+ {

+ if (empty($disallowed_content))

+ {

+ return true;

+ }

+

+ $fp = @fopen($this->filename, 'rb');

+

+ if ($fp !== false)

+ {

+ $ie_mime_relevant = fread($fp, 256);

+ fclose($fp);

+ foreach ($disallowed_content as $forbidden)

+ {

+ if (stripos($ie_mime_relevant, '<' . $forbidden) !== false)

+ {

+ return false;

+ }

+ }

+ }

+ return true;

+ }

+ $upload_mode = (@ini_get('open_basedir') || @ini_get('safe_mode') || strtolower(@ini_get('safe_mode')) == 'on') ? 'move' : 'copy';

+ var $disallowed_content = array();

+ function fileupload($error_prefix = '', $allowed_extensions = false, $max_filesize = false, $min_width = false, $min_height = false, $max_width = false, $max_height = false, $disallowed_content = false)

+ $this->set_disallowed_content($disallowed_content);

+ $this->disallowed_content = array();

+

+ /**

+ * Set disallowed strings

+ */

+ function set_disallowed_content($disallowed_content)

+ {

+ if ($disallowed_content !== false && is_array($disallowed_content))

+ {

+ $this->disallowed_content = $disallowed_content;

+ }

+ }

+ $tmp_path = (!@ini_get('safe_mode') || strtolower(@ini_get('safe_mode')) == 'off') ? false : $phpbb_root_path . 'cache';

+

+ // MIME Sniffing

+ if (!$this->valid_content($file))

+ {

+ $file->error[] = sprintf($user->lang[$this->error_prefix . 'DISALLOWED_CONTENT']);

+ }

+

+ /**

+ * Check for allowed extension

+ */

+ function valid_content(&$file)

+ {

+ return ($file->check_content($this->disallowed_content));

+ }

+

+ $table_ary = array(USERS_TABLE, USER_GROUP_TABLE, TOPICS_WATCH_TABLE, FORUMS_WATCH_TABLE, ACL_USERS_TABLE, TOPICS_TRACK_TABLE, TOPICS_POSTED_TABLE, FORUMS_TRACK_TABLE, PROFILE_FIELDS_DATA_TABLE, MODERATOR_CACHE_TABLE, DRAFTS_TABLE, BOOKMARKS_TABLE);

+ global $user;

+

+ // Since errors are checked later for their language file existence, we need to make sure custom errors are not adjusted.

+ $error[] = (empty($user->lang[$result . '_' . strtoupper($var)])) ? $result : $result . '_' . strtoupper($var);

+ if (($ban_reason = $user->check_ban(false, false, $email, true)) !== false)

+ return ($ban_reason === true) ? 'EMAIL_BANNED' : $ban_reason;

+ $upload = new fileupload('AVATAR_', array('jpg', 'jpeg', 'gif', 'png'), $config['avatar_filesize'], $config['avatar_min_width'], $config['avatar_min_height'], $config['avatar_max_width'], $config['avatar_max_height'], explode('|', $config['mime_triggers']));

+ return 'NO_USERS';

+

+ $sql = 'SELECT user_id FROM ' . USER_GROUP_TABLE . "

+ WHERE group_id = $group_id

+ AND user_pending = 1

+ AND " . $db->sql_in_set('user_id', $user_id_ary);

+ $result = $db->sql_query_limit($sql, 1);

+ $not_empty = ($db->sql_fetchrow($result));

+ $db->sql_freeresult($result);

+ if ($not_empty)

+ {

+ return 'NO_VALID_USERS';

+ }

+

+ AND user_pending = 0

+ return false;

+ if ($mode === 'email' && !$auth->acl_get('a_user'))

+ $username = $pre_fill = false;

+ $sql = 'SELECT username, user_email, user_ip

+ switch ($mode)

+ {

+ case 'user':

+ $pre_fill = (string) $db->sql_fetchfield('username');

+ break;

+

+ case 'ip':

+ $pre_fill = (string) $db->sql_fetchfield('user_ip');

+ break;

+

+ case 'email':

+ $pre_fill = (string) $db->sql_fetchfield('user_email');

+ break;

+ }

+ switch ($mode)

+ {

+ case 'user':

+ $pre_fill = $post_info[$post_id]['username'];

+ break;

+

+ case 'ip':

+ $pre_fill = $post_info[$post_id]['poster_ip'];

+ break;

+

+ case 'email':

+ $pre_fill = $post_info[$post_id]['user_email'];

+ break;

+ }

+

+ if ($pre_fill)

+ // left for legacy template compatibility

+ $template->assign_var('USERNAMES', $pre_fill);

+ $template->assign_var('BAN_QUANTIFIER', $pre_fill);

+ $redirect = request_var('redirect', build_url(array('action', 'quickmod')));

+ $redirect = request_var('redirect', build_url(array('action', 'quickmod')));

+ $redirect = request_var('redirect', build_url(array('action', 'quickmod')));

+ $forum_data = get_forum_data($to_forum_id, 'f_post');

+ $redirect = request_var('redirect', build_url(array('action', 'quickmod')));

+ $redirect = request_var('redirect', build_url(array('action', 'quickmod')));

+ $redirect = request_var('redirect', build_url(array('action', 'quickmod')));

+ $forum_data = get_forum_data($to_forum_id, 'f_post');

+ $topic_data = get_topic_data($topic_ids, 'f_post');

+ $user->add_lang(array('posting', 'viewtopic'));

+ $redirect = request_var('redirect', build_url(array('quickmod')));

+ $redirect = request_var('redirect', build_url(array('t', 'mode', 'quickmod')) . "&amp;mode=$mode");

+ $redirect = request_var('redirect', build_url(array('mode', 'r', 'quickmod')) . '&amp;mode=reports');

+ $redirect = request_var('redirect', build_url(array('mode', 'p', 'quickmod')) . '&amp;mode=reports');

+ $redirect = request_var('redirect', build_url(array('quickmod')));

+ $redirect = request_var('redirect', build_url(array('quickmod')));

+ $redirect = request_var('redirect', build_url(array('quickmod')));

+

+ trigger_error($msg . '<br /><br />' . sprintf($user->lang['RETURN_PAGE'], '<a href="' . $redirect . '">', '</a>'));

+

+ // Do not allow 0-sizes generally being entered

+ if ($width <= 0 || $height <= 0)

+ {

+ return '[flash=' . $width . ',' . $height . ']' . $in . '[/flash]';

+ }

+

+ $sql_sort_table = ($type == 'posts' && !$firstpost_only) ? TOPICS_TABLE . ' t, ' : '';

+ $sql_sort_join = ($type == 'posts' && !$firstpost_only) ? ' AND t.topic_id = p.topic_id ' : '';

+ $sql_sort_table = ($type == 'posts' && !$firstpost_only) ? TOPICS_TABLE . ' t, ' : '';

+ $sql_sort_join = ($type == 'posts' && !$firstpost_only) ? ' AND t.topic_id = p.topic_id ' : '';

+ FROM " . $sql_sort_table . POSTS_TABLE . ' p' . (($firstpost_only) ? ', ' . TOPICS_TABLE . ' t' : '') . "

+ if (strpos($argument, 'sid=') === 0)

+ $this->referer = (!empty($_SERVER['HTTP_REFERER'])) ? htmlspecialchars((string) $_SERVER['HTTP_REFERER']) : '';

+

+ // Since HTTP_HOST may carry a port definition, we need to remove it here...

+ if (strpos($this->host, ':') !== false)

+ {

+ $this->host = substr($this->host, 0, strpos($this->host, ':'));

+ }

+

+ if ((function_exists('sys_getloadavg') && $load = sys_getloadavg()) || ($load = explode(' ', @file_get_contents('/proc/loadavg'))))

+ $this->load = array_slice($load, 0, 1);

+ // referer checks

+ // The @ before $config['referer_validation'] suppresses notices present while running the updater

+ $check_referer_path = (@$config['referer_validation'] == REFERER_VALIDATE_PATH);

+ $referer_valid = true;

+

+ // we assume HEAD and TRACE to be foul play and thus only whitelist GET

+ if (@$config['referer_validation'] && isset($_SERVER['REQUEST_METHOD']) && strtolower($_SERVER['REQUEST_METHOD']) !== 'get')

+ {

+ $referer_valid = $this->validate_referer($check_referer_path);

+ }

+

+ if ($u_ip === $s_ip && $s_browser === $u_browser && $s_forwarded_for === $u_forwarded_for && $referer_valid)

+ if ($referer_valid)

+ {

+ add_log('critical', 'LOG_IP_BROWSER_FORWARDED_CHECK', $u_ip, $s_ip, $u_browser, $s_browser, htmlspecialchars($u_forwarded_for), htmlspecialchars($s_forwarded_for));

+ }

+ else

+ {

+ add_log('critical', 'LOG_REFERER_INVALID', $this->referer);

+ }

+ return ($banned && $ban_row['ban_give_reason']) ? $ban_row['ban_give_reason'] : $banned;

+

+

+ /**

+ * Check if the request originated from the same page.

+ * @param bool $check_script_path If true, the path will be checked as well

+ */

+ function validate_referer($check_script_path = false)

+ {

+ // no referer - nothing to validate, user's fault for turning it off (we only check on POST; so meta can't be the reason)

+ if (empty($this->referer) || empty($this->host) )

+ {

+ return true;

+ }

+

+ $host = htmlspecialchars($this->host);

+ $ref = substr($this->referer, strpos($this->referer, '://') + 3);

+

+ if (!(stripos($ref , $host) === 0))

+ {

+ return false;

+ }

+ else if ($check_script_path && rtrim($this->page['root_script_path'], '/') !== '')

+ {

+ $ref = substr($ref, strlen($host));

+ $server_port = (!empty($_SERVER['SERVER_PORT'])) ? (int) $_SERVER['SERVER_PORT'] : (int) getenv('SERVER_PORT');

+

+ if ($server_port !== 80 && $server_port !== 443 && stripos($ref, ":$server_port") === 0)

+ {

+ $ref = substr($ref, strlen(":$server_port"));

+ }

+

+ if (!(stripos(rtrim($ref, '/'), rtrim($this->page['root_script_path'], '/')) === 0))

+ {

+ return false;

+ }

+ }

+

+ return true;

+ }

+

+

+ function unset_admin()

+ {

+ global $db;

+ $sql = 'UPDATE ' . SESSIONS_TABLE . '

+ SET session_admin = 0

+ WHERE session_id = \'' . $db->sql_escape($this->session_id) . '\'';

+ $db->sql_query($sql);

+ }

+

+ garbage_collection();

+ exit_handler();

+ set_user_message_limit();

+ set_user_message_limit();

+

+

+/**

+ $pm_count = (!empty($folder[$folder_id]['num_messages'])) ? $folder[$folder_id]['num_messages'] : 0;

+function utf8_htmlspecialchars($value)