+ white-space: nowrap;

+ window.open('{UA_FIND_USERNAME}', '_usersearch', 'height=570, resizable=yes, scrollbars=yes, width=760');

+ window.open('{UA_FIND_USERNAME}', '_usersearch', 'height=570, resizable=yes, scrollbars=yes, width=760');

+ 'session_forwarded_for' => array('VCHAR:255', ''),

+<?php

+$dec_octet = '(?:\d?\d|1\d\d|2[0-4]\d|25[0-5])';

+$h16 = '[\dA-F]{1,4}';

+$ipv4 = "(?:$dec_octet\.){3}$dec_octet";

+$ls32 = "(?:$h16:$h16|$ipv4)";

+

+$ipv6_construct = array(

+ array(false, '', '{6}', $ls32),

+ array(false, '::', '{5}', $ls32),

+ array('', ':', '{4}', $ls32),

+ array('{1,2}', ':', '{3}', $ls32),

+ array('{1,3}', ':', '{2}', $ls32),

+ array('{1,4}', ':', '', $ls32),

+ array('{1,5}', ':', false, $ls32),

+ array('{1,6}', ':', false, $h16),

+ array('{1,7}', ':', false, '')

+);

+

+$ipv6 = '(?:';

+foreach ($ipv6_construct as $ip_type)

+{

+ $ipv6 .= '(?:';

+ if ($ip_type[0] !== false)

+ {

+ $ipv6 .= "(?:$h16:)" . $ip_type[0];

+ }

+ $ipv6 .= $ip_type[1];

+ if ($ip_type[2] !== false)

+ {

+ $ipv6 .= "(?:$h16:)" . $ip_type[2];

+ }

+ $ipv6 .= $ip_type[3] . ')|';

+}

+$ipv6 = substr($ipv6, 0, -1) . ')';

+

+echo 'IPv4: ' . $ipv4 . "<br />\nIPv6: " . $ipv6;

+?> \ No newline at end of file

+ var $batch_size = 5000;

+ $sql = 'SELECT forum_id, enable_indexing

+ FROM ' . FORUMS_TABLE;

+ $result = $db->sql_query($sql, 3600);

+

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $forums[$row['forum_id']] = (bool) $row['enable_indexing'];

+ }

+ $db->sql_freeresult($result);

+

+ if ($forums[$row['forum_id']])

+ {

+ $this->search->index('post', $row['post_id'], $row['post_text'], $row['post_subject'], $row['poster_id'], $row['forum_id']);

+ }

+ strtoupper($var) => htmlspecialchars($value),

+ strtoupper($var) => htmlspecialchars($value))

+ $value = htmlspecialchars_decode(request_var($var, ''));

+ if ($config['ldap_user'] || $config['ldap_password'])

+ {

+ if (!@ldap_bind($ldap, ldap_escape(htmlspecialchars_decode($config['ldap_user'])), htmlspecialchars_decode($config['ldap_password'])))

+ {

+ return $user->lang['LDAP_INCORRECT_USER_PASSWORD'];

+ }

+ }

+

+ if ($config['ldap_user'] || $config['ldap_password'])

+ {

+ if (!@ldap_bind($ldap, $config['ldap_user'], htmlspecialchars_decode($config['ldap_password'])))

+ {

+ return $user->lang['LDAP_NO_SERVER_CONNECTION'];

+ }

+ }

+

+ <dt><label for="ldap_user">' . $user->lang['LDAP_USER'] . ':</label><br /><span>' . $user->lang['LDAP_USER_EXPLAIN'] . '</span></dt>

+ <dd><input type="text" id="ldap_user" size="40" name="config[ldap_user]" value="' . $new['ldap_user'] . '" /></dd>

+ </dl>

+ <dl>

+ <dt><label for="ldap_password">' . $user->lang['LDAP_PASSWORD'] . ':</label><br /><span>' . $user->lang['LDAP_PASSWORD_EXPLAIN'] . '</span></dt>

+ <dd><input type="password" id="ldap_password" size="40" name="config[ldap_password]" value="' . $new['ldap_password'] . '" /></dd>

+ </dl>

+ <dl>

+ 'config' => array('ldap_server', 'ldap_user', 'ldap_password', 'ldap_base_dn', 'ldap_uid', 'ldap_email')

+ 'U_POST_DETAILS' => append_sid("{$phpbb_root_path}mcp.$phpEx", 'i=queue&amp;mode=approve_details&amp;f=' . $row['forum_id'] . '&amp;p=' . $row['post_id']),

+ 'POST_ID' => $row['post_id'],

+ $template->assign_vars(array(

+ 'S_MCP_QUEUE_ACTION' => append_sid("{$phpbb_root_path}mcp.$phpEx", "i=queue"),

+ ));

+

+ if ($db->sql_layer != 'mysql4' && $db->sql_layer != 'mysqli')

+ var $forwarded_for = '';

+ var $ips = array();

+ $this->forwarded_for = (!empty($_SERVER['HTTP_X_FORWARDED_FOR'])) ? (string) $_SERVER['HTTP_X_FORWARDED_FOR'] : '';

+ // if the forwarded for header shall be checked we have to validate its contents

+ if ($config['forwarded_for_check'])

+ {

+ $this->forwarded_for = preg_replace('#, +#', ', ', $this->forwarded_for);

+

+ // Whoa these look impressive!

+ // The code to generate the following two regular expressions which match valid IPv4/IPv6 addresses

+ // can be found in the develop directory

+ $ipv4 = '#^(?:(?:\d?\d|1\d\d|2[0-4]\d|25[0-5])\.){3}(?:\d?\d|1\d\d|2[0-4]\d|25[0-5])$#';

+ $ipv6 = '#^(?:(?:(?:[\dA-F]{1,4}:){6}(?:[\dA-F]{1,4}:[\dA-F]{1,4}|(?:(?:\d?\d|1\d\d|2[0-4]\d|25[0-5])\.){3}(?:\d?\d|1\d\d|2[0-4]\d|25[0-5])))|(?:::(?:[\dA-F]{1,4}:){5}(?:[\dA-F]{1,4}:[\dA-F]{1,4}|(?:(?:\d?\d|1\d\d|2[0-4]\d|25[0-5])\.){3}(?:\d?\d|1\d\d|2[0-4]\d|25[0-5])))|(?:(?:[\dA-F]{1,4}:):(?:[\dA-F]{1,4}:){4}(?:[\dA-F]{1,4}:[\dA-F]{1,4}|(?:(?:\d?\d|1\d\d|2[0-4]\d|25[0-5])\.){3}(?:\d?\d|1\d\d|2[0-4]\d|25[0-5])))|(?:(?:[\dA-F]{1,4}:){1,2}:(?:[\dA-F]{1,4}:){3}(?:[\dA-F]{1,4}:[\dA-F]{1,4}|(?:(?:\d?\d|1\d\d|2[0-4]\d|25[0-5])\.){3}(?:\d?\d|1\d\d|2[0-4]\d|25[0-5])))|(?:(?:[\dA-F]{1,4}:){1,3}:(?:[\dA-F]{1,4}:){2}(?:[\dA-F]{1,4}:[\dA-F]{1,4}|(?:(?:\d?\d|1\d\d|2[0-4]\d|25[0-5])\.){3}(?:\d?\d|1\d\d|2[0-4]\d|25[0-5])))|(?:(?:[\dA-F]{1,4}:){1,4}:(?:[\dA-F]{1,4}:)(?:[\dA-F]{1,4}:[\dA-F]{1,4}|(?:(?:\d?\d|1\d\d|2[0-4]\d|25[0-5])\.){3}(?:\d?\d|1\d\d|2[0-4]\d|25[0-5])))|(?:(?:[\dA-F]{1,4}:){1,5}:(?:[\dA-F]{1,4}:[\dA-F]{1,4}|(?:(?:\d?\d|1\d\d|2[0-4]\d|25[0-5])\.){3}(?:\d?\d|1\d\d|2[0-4]\d|25[0-5])))|(?:(?:[\dA-F]{1,4}:){1,6}:[\dA-F]{1,4})|(?:(?:[\dA-F]{1,4}:){1,7}:))$#';

+

+ // split the list of IPs

+ $ips = explode(', ', $this->forwarded_for);

+ foreach ($ips as $ip)

+ {

+ // check IPv4 first, the IPv6 is hopefully only going to be used very seldomly

+ if (!preg_match("#^$ipv4$#", $this->forwarded_for) && !preg_match("#^$ipv6$#", $this->forwarded_for))

+ {

+ if (!defined('DEBUG_EXTRA'))

+ {

+ trigger_error('Hacking attempt!');

+ }

+ else

+ {

+ trigger_error('Invalid HTTP_X_FORWARDED_FOR header detected: ' . htmlspecialchars($this->forwarded_for));

+ }

+ }

+ }

+ }

+

+ $s_forwarded_for = ($config['forwarded_for_check']) ? substr($this->data['forwarded_for'], 0, 254) : '';

+ $u_forwarded_for = ($config['forwarded_for_check']) ? substr($this->forwarded_for, 0, 254) : '';

+

+ if ($u_ip === $s_ip && $s_browser === $u_browser && $s_forwarded_for === $u_forwarded_for)

+ add_log('critical', 'LOG_IP_BROWSER_FORWARDED_CHECK', $u_ip, $s_ip, $u_browser, $s_browser, $u_forwarded, $s_forwarded);

+ if (!$config['forwarded_for_check'])

+ {

+ $this->check_ban($this->data['user_id'], $this->ip);

+ }

+ else

+ {

+ $ips = explode(', ', $this->forwarded_for);

+ $ips[] = $this->ip;

+ $this->check_ban($this->data['user_id'], $ips);

+ }

+ // Only assign the current session if the ip, browser and forwarded_for match...

+ $s_forwarded_for = ($config['forwarded_for_check']) ? substr($this->data['session_forwarded_for'], 0, 254) : '';

+ $u_forwarded_for = ($config['forwarded_for_check']) ? substr($this->forwarded_for, 0, 254) : '';

+

+ if ($u_ip === $s_ip && $s_browser === $u_browser && $s_forwarded_for === $u_forwarded_for)

+ 'session_forwarded_for' => (string) $this->forwarded_for,

+ $this->data['session_time'] = $this->data['session_last_visit'] = $this->time_now;

+

+ // Update the last visit time

+ $sql = 'UPDATE ' . USERS_TABLE . '

+ SET user_lastvisit = ' . (int) $this->data['session_time'] . '

+ WHERE user_id = ' . (int) $this->data['user_id'];

+ $db->sql_query($sql);

+

+ *

+ * @param string|array $user_ips Can contain a string with one IP or an array of multiple IPs

+ function check_ban($user_id = false, $user_ips = false, $user_email = false, $return = false)

+ if ($user_ips === false)

+ $sql .= " AND (ban_ip = '' OR ban_exclude = 1)";

+ $sql .= ' AND (ban_userid = 0 OR ban_exclude = 1)';

+ if ($user_ips !== false)

+ (!empty($row['ban_ip']) && preg_match('#^' . str_replace('*', '.*?', $row['ban_ip']) . '$#i', $user_ips)) ||

+ else if (!empty($row['ban_ip']) && preg_match('#^' . str_replace('*', '.*?', $row['ban_ip']) . '$#i', $user_ips))

+ if ($this->load > floatval($config['limit_load']) && !defined('IN_LOGIN') && !$auth->acl_gets('a_', 'm_') && !$auth->acl_getf_global('m_'))

+ $user_row['email'] = ($config['board_email_form'] && $config['email_enable']) ? append_sid("{$phpbb_root_path}memberlist.$phpEx", "mode=email&amp;u=$user_id") : ((($config['board_hide_emails'] && !$auth->acl_get('a_email')) || empty($user_row['user_email'])) ? '' : 'mailto:' . $user_row['user_email']);

+ $now = getdate(time() + $user->timezone + $user->dst - date('Z'));

+ 'seed' => array('UINT:10', 0),

+ ),

+ SESSIONS_TABLE => array(

+ 'session_forwarded_for' => array('VCHAR:255', 0),

+ session_forwarded_for VARCHAR(255) CHARACTER SET NONE DEFAULT '' NOT NULL,

+ [session_forwarded_for] [varchar] (255) DEFAULT ('') NOT NULL ,

+ session_forwarded_for varchar(255) DEFAULT '' NOT NULL,

+ session_forwarded_for varchar(255) DEFAULT '' NOT NULL,

+ session_forwarded_for varchar2(255) DEFAULT '' ,

+ session_forwarded_for varchar(255) DEFAULT '' NOT NULL,

+INSERT INTO phpbb_config (config_name, config_value) VALUES ('forwarded_for_check', '0');

+INSERT INTO phpbb_config (config_name, config_value) VALUES ('ldap_password', '');

+INSERT INTO phpbb_config (config_name, config_value) VALUES ('ldap_user', '');

+ session_forwarded_for varchar(255) NOT NULL DEFAULT '',

+ 'LDAP_DN' => 'LDAP base <var>dn</var>',

+ 'LDAP_DN_EXPLAIN' => 'This is the Distinguished Name, locating the user information, e.g. <samp>o=My Company,c=US</samp>',

+ 'LDAP_EMAIL' => 'LDAP email attribute',

+ 'LDAP_EMAIL_EXPLAIN' => 'Set this to the name of your user entry email attribute (if one exists) in order to automatically set the email address for new users. Leaving this empty results in empty email address for users who log in for the first time.',

+ 'LDAP_INCORRECT_USER_PASSWORD' => 'Binding to LDAP server failed with specified user/password.',

+ 'LDAP_NO_EMAIL' => 'The specified email attribute does not exist.',

+ 'LDAP_NO_IDENTITY' => 'Could not find a login identity for %s',

+ 'LDAP_PASSWORD' => 'LDAP password',

+ 'LDAP_PASSWORD_EXPLAIN' => 'Leave blank to use anonymous access. Else fill in the password for the above user. <strong>WARNING:</strong> This password will be stored as plain text in the database visible to everybody who can access your database.',

+ 'LDAP_SERVER' => 'LDAP server name',

+ 'LDAP_SERVER_EXPLAIN' => 'If using LDAP this is the name or IP address of the server.',

+ 'LDAP_UID' => 'LDAP <var>uid</var>',

+ 'LDAP_UID_EXPLAIN' => 'This is the key under which to search for a given login identity, e.g. <var>uid</var>, <var>sn</var>, etc.',

+ 'LDAP_USER' => 'LDAP user',

+ 'LDAP_USER_EXPLAIN' => 'Leave blank to use anonymous access. If filled in phpBB will connect to the LDAP server as the specified user.',

+ 'LOG_IP_BROWSER_FORWARDED_CHECK' => '<strong>Session IP/browser/X_FORWARDED_FOR check failed</strong><br />»User IP "<em>%1$s</em>" checked against session IP "<em>%2$s</em>", user browser string "<em>%3$s</em>" checked against session browser string "<em>%4$s</em>" and user X_FORWARDED_FOR string "<em>%5$s</em>" checked against session X_FORWARDED_FOR string "<em>%6$s</em>".',

+ 'LANGUAGE_PACK_USED_BY' => 'Used by (including robots)',

+ 'STYLE_USED_BY' => 'Used by (including robots)',

+ $now = getdate(time() + $user->timezone + $user->dst - date('Z'));

+

+if ($holding)

+{

+ $s_forums .= $holding;

+}

+

+ <form name="mcp_queue" method="post" action="{S_MCP_QUEUE_ACTION}">

+

+ <td class="row3" colspan="6" align="center"><b class="gen">{L_LATEST_UNAPPROVED}</b></td>

+ <th width="5%">&nbsp;{L_SELECT}&nbsp;</th>

+ <td class="row2" align="center"><input type="checkbox" class="radio" name="post_id_list[]" value="{unapproved.POST_ID}" /></td>

+ <td class="row1" colspan="6" align="center"><span class="gen">{L_UNAPPROVED_POSTS_ZERO_TOTAL}</span></td>

+ <td class="row3" colspan="6"><span class="gensmall">{L_UNAPPROVED_TOTAL}</span></td>

+ <tr>

+ <td class="cat" colspan="6" align="center"><input class="btnmain" type="submit" name="action[approve]" value="{L_APPROVE}" />&nbsp;&nbsp;<input class="btnlite" type="submit" name="action[disapprove]" value="{L_DISAPPROVE}" /></td>

+ </tr>

+ </table>

+

+ </form>

+

+ <table width="100%" cellspacing="2" cellpadding="2" border="0" align="center">

+ <tr>

+ <td align="right" valign="top" nowrap="nowrap"><b class="gensmall"><a href="#" onclick="marklist('mcp_queue', '', true); return false;">{L_MARK_ALL}</a> :: <a href="#" onclick="marklist('mcp_queue', '', false); return false;">{L_UNMARK_ALL}</a></b></td>

+ </tr>

+$now = getdate(time() + $user->timezone + $user->dst - date('Z'));