+ var $batch_size = 5000;

+ $sql = 'SELECT forum_id, enable_indexing

+ FROM ' . FORUMS_TABLE;

+ $result = $db->sql_query($sql, 3600);

+

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $forums[$row['forum_id']] = (bool) $row['enable_indexing'];

+ }

+ $db->sql_freeresult($result);

+

+ if ($forums[$row['forum_id']])

+ {

+ $this->search->index('post', $row['post_id'], $row['post_text'], $row['post_subject'], $row['poster_id'], $row['forum_id']);

+ }

+ strtoupper($var) => htmlspecialchars($value),

+ strtoupper($var) => htmlspecialchars($value))

+ $value = htmlspecialchars_decode(request_var($var, ''));

+ if ($config['ldap_user'] || $config['ldap_password'])

+ {

+ if (!@ldap_bind($ldap, ldap_escape(htmlspecialchars_decode($config['ldap_user'])), htmlspecialchars_decode($config['ldap_password'])))

+ {

+ return $user->lang['LDAP_INCORRECT_USER_PASSWORD'];

+ }

+ }

+

+ if ($config['ldap_user'] || $config['ldap_password'])

+ {

+ if (!@ldap_bind($ldap, $config['ldap_user'], htmlspecialchars_decode($config['ldap_password'])))

+ {

+ return $user->lang['LDAP_NO_SERVER_CONNECTION'];

+ }

+ }

+

+ <dt><label for="ldap_user">' . $user->lang['LDAP_USER'] . ':</label><br /><span>' . $user->lang['LDAP_USER_EXPLAIN'] . '</span></dt>

+ <dd><input type="text" id="ldap_user" size="40" name="config[ldap_user]" value="' . $new['ldap_user'] . '" /></dd>

+ </dl>

+ <dl>

+ <dt><label for="ldap_password">' . $user->lang['LDAP_PASSWORD'] . ':</label><br /><span>' . $user->lang['LDAP_PASSWORD_EXPLAIN'] . '</span></dt>

+ <dd><input type="password" id="ldap_password" size="40" name="config[ldap_password]" value="' . $new['ldap_password'] . '" /></dd>

+ </dl>

+ <dl>

+ 'config' => array('ldap_server', 'ldap_user', 'ldap_password', 'ldap_base_dn', 'ldap_uid', 'ldap_email')

+ 'U_POST_DETAILS' => append_sid("{$phpbb_root_path}mcp.$phpEx", 'i=queue&amp;mode=approve_details&amp;f=' . $row['forum_id'] . '&amp;p=' . $row['post_id']),

+ 'POST_ID' => $row['post_id'],

+ $template->assign_vars(array(

+ 'S_MCP_QUEUE_ACTION' => append_sid("{$phpbb_root_path}mcp.$phpEx", "i=queue"),

+ ));

+

+ if ($db->sql_layer != 'mysql4' && $db->sql_layer != 'mysqli')

+ var $forwarded_for = '';

+ var $ips = array();

+ $this->forwarded_for = (!empty($_SERVER['HTTP_X_FORWARDED_FOR'])) ? (string) $_SERVER['HTTP_X_FORWARDED_FOR'] : '';

+ // if the forwarded for header shall be checked we have to validate its contents

+ if ($config['forwarded_for_check'])

+ {

+ $this->forwarded_for = preg_replace('#, +#', ', ', $this->forwarded_for);

+

+ // Whoa these look impressive!

+ // The code to generate the following two regular expressions which match valid IPv4/IPv6 addresses

+ // can be found in the develop directory

+ $ipv4 = '#^(?:(?:\d?\d|1\d\d|2[0-4]\d|25[0-5])\.){3}(?:\d?\d|1\d\d|2[0-4]\d|25[0-5])$#';

+ $ipv6 = '#^(?:(?:(?:[\dA-F]{1,4}:){6}(?:[\dA-F]{1,4}:[\dA-F]{1,4}|(?:(?:\d?\d|1\d\d|2[0-4]\d|25[0-5])\.){3}(?:\d?\d|1\d\d|2[0-4]\d|25[0-5])))|(?:::(?:[\dA-F]{1,4}:){5}(?:[\dA-F]{1,4}:[\dA-F]{1,4}|(?:(?:\d?\d|1\d\d|2[0-4]\d|25[0-5])\.){3}(?:\d?\d|1\d\d|2[0-4]\d|25[0-5])))|(?:(?:[\dA-F]{1,4}:):(?:[\dA-F]{1,4}:){4}(?:[\dA-F]{1,4}:[\dA-F]{1,4}|(?:(?:\d?\d|1\d\d|2[0-4]\d|25[0-5])\.){3}(?:\d?\d|1\d\d|2[0-4]\d|25[0-5])))|(?:(?:[\dA-F]{1,4}:){1,2}:(?:[\dA-F]{1,4}:){3}(?:[\dA-F]{1,4}:[\dA-F]{1,4}|(?:(?:\d?\d|1\d\d|2[0-4]\d|25[0-5])\.){3}(?:\d?\d|1\d\d|2[0-4]\d|25[0-5])))|(?:(?:[\dA-F]{1,4}:){1,3}:(?:[\dA-F]{1,4}:){2}(?:[\dA-F]{1,4}:[\dA-F]{1,4}|(?:(?:\d?\d|1\d\d|2[0-4]\d|25[0-5])\.){3}(?:\d?\d|1\d\d|2[0-4]\d|25[0-5])))|(?:(?:[\dA-F]{1,4}:){1,4}:(?:[\dA-F]{1,4}:)(?:[\dA-F]{1,4}:[\dA-F]{1,4}|(?:(?:\d?\d|1\d\d|2[0-4]\d|25[0-5])\.){3}(?:\d?\d|1\d\d|2[0-4]\d|25[0-5])))|(?:(?:[\dA-F]{1,4}:){1,5}:(?:[\dA-F]{1,4}:[\dA-F]{1,4}|(?:(?:\d?\d|1\d\d|2[0-4]\d|25[0-5])\.){3}(?:\d?\d|1\d\d|2[0-4]\d|25[0-5])))|(?:(?:[\dA-F]{1,4}:){1,6}:[\dA-F]{1,4})|(?:(?:[\dA-F]{1,4}:){1,7}:))$#';

+

+ // split the list of IPs

+ $ips = explode(', ', $this->forwarded_for);

+ foreach ($ips as $ip)

+ {

+ // check IPv4 first, the IPv6 is hopefully only going to be used very seldomly

+ if (!preg_match("#^$ipv4$#", $this->forwarded_for) && !preg_match("#^$ipv6$#", $this->forwarded_for))

+ {

+ if (!defined('DEBUG_EXTRA'))

+ {

+ trigger_error('Hacking attempt!');

+ }

+ else

+ {

+ trigger_error('Invalid HTTP_X_FORWARDED_FOR header detected: ' . htmlspecialchars($this->forwarded_for));

+ }

+ }

+ }

+ }

+

+ $s_forwarded_for = ($config['forwarded_for_check']) ? substr($this->data['forwarded_for'], 0, 254) : '';

+ $u_forwarded_for = ($config['forwarded_for_check']) ? substr($this->forwarded_for, 0, 254) : '';

+

+ if ($u_ip === $s_ip && $s_browser === $u_browser && $s_forwarded_for === $u_forwarded_for)

+ add_log('critical', 'LOG_IP_BROWSER_FORWARDED_CHECK', $u_ip, $s_ip, $u_browser, $s_browser, $u_forwarded, $s_forwarded);

+ if (!$config['forwarded_for_check'])

+ {

+ $this->check_ban($this->data['user_id'], $this->ip);

+ }

+ else

+ {

+ $ips = explode(', ', $this->forwarded_for);

+ $ips[] = $this->ip;

+ $this->check_ban($this->data['user_id'], $ips);

+ }

+ // Only assign the current session if the ip, browser and forwarded_for match...

+ $s_forwarded_for = ($config['forwarded_for_check']) ? substr($this->data['session_forwarded_for'], 0, 254) : '';

+ $u_forwarded_for = ($config['forwarded_for_check']) ? substr($this->forwarded_for, 0, 254) : '';

+

+ if ($u_ip === $s_ip && $s_browser === $u_browser && $s_forwarded_for === $u_forwarded_for)

+ 'session_forwarded_for' => (string) $this->forwarded_for,

+ $this->data['session_time'] = $this->data['session_last_visit'] = $this->time_now;

+

+ // Update the last visit time

+ $sql = 'UPDATE ' . USERS_TABLE . '

+ SET user_lastvisit = ' . (int) $this->data['session_time'] . '

+ WHERE user_id = ' . (int) $this->data['user_id'];

+ $db->sql_query($sql);

+

+ *

+ * @param string|array $user_ips Can contain a string with one IP or an array of multiple IPs

+ function check_ban($user_id = false, $user_ips = false, $user_email = false, $return = false)

+ if ($user_ips === false)

+ $sql .= " AND (ban_ip = '' OR ban_exclude = 1)";

+ $sql .= ' AND (ban_userid = 0 OR ban_exclude = 1)';

+ if ($user_ips !== false)

+ (!empty($row['ban_ip']) && preg_match('#^' . str_replace('*', '.*?', $row['ban_ip']) . '$#i', $user_ips)) ||

+ else if (!empty($row['ban_ip']) && preg_match('#^' . str_replace('*', '.*?', $row['ban_ip']) . '$#i', $user_ips))

+ if ($this->load > floatval($config['limit_load']) && !defined('IN_LOGIN') && !$auth->acl_gets('a_', 'm_') && !$auth->acl_getf_global('m_'))

+ $user_row['email'] = ($config['board_email_form'] && $config['email_enable']) ? append_sid("{$phpbb_root_path}memberlist.$phpEx", "mode=email&amp;u=$user_id") : ((($config['board_hide_emails'] && !$auth->acl_get('a_email')) || empty($user_row['user_email'])) ? '' : 'mailto:' . $user_row['user_email']);