acl_get('a_attach')) ? "$filename$SID&mode=attach" : ''; $module['POST']['ATTACHMENTS'] = ($auth->acl_get('a_attach')) ? "$filename$SID&mode=ext_groups" : ''; return; } define('IN_PHPBB', 1); // Include files $phpbb_root_path = './../'; $phpEx = substr(strrchr(__FILE__, '.'), 1); require('pagestart.' . $phpEx); include($phpbb_root_path . 'includes/functions_posting.' . $phpEx); if (!$auth->acl_get('a_attach')) { trigger_error($user->lang['NO_ADMIN']); } $mode = request_var('mode', ''); $submit = (isset($_POST['submit'])) ? true : false; $error = $notify = array(); switch ($mode) { case 'attach': $l_title = 'ATTACHMENT_SETTINGS'; break; case 'extensions': $l_title = 'MANAGE_EXTENSIONS'; break; case 'ext_groups': $l_title = 'EXTENSION_GROUPS_TITLE'; break; case 'orphan': $l_title = 'ORPHAN_ATTACHMENTS'; break; default: trigger_error('NO_MODE'); } if ($mode == 'attach') { $config_sizes = array('max_filesize' => 'size', 'attachment_quota' => 'quota_size', 'max_filesize_pm' => 'pm_size'); foreach ($config_sizes as $cfg_key => $var) { $$var = request_var($var, ''); } // Pull all config data $sql = 'SELECT * FROM ' . CONFIG_TABLE; $result = $db->sql_query($sql); while ($row = $db->sql_fetchrow($result)) { $config_name = $row['config_name']; $config_value = $row['config_value']; $default_config[$config_name] = $config_value; $new[$config_name] = request_var($config_name, $default_config[$config_name]); foreach ($config_sizes as $cfg_key => $var) { if (empty($$var) && !$submit && $config_name == $cfg_key) { $$var = (intval($default_config[$config_name]) >= 1048576) ? 'mb' : ((intval($default_config[$config_name]) >= 1024) ? 'kb' : 'b'); } if (!$submit && $config_name == $cfg_key) { $new[$config_name] = ($new[$config_name] >= 1048576) ? round($new[$config_name] / 1048576 * 100) / 100 : (($new[$config_name] >= 1024) ? round($new[$config_name] / 1024 * 100) / 100 : $new[$config_name]); } if ($submit && $config_name == $cfg_key) { $old = $new[$config_name]; $new[$config_name] = ($$var == 'kb') ? round($new[$config_name] * 1024) : (($$var == 'mb') ? round($new[$config_name] * 1048576) : $new[$config_name]); } } if ($submit) { // Update Extension Group Filesizes if ($config_name == 'max_filesize') { $old_size = (int) $default_config[$config_name]; $new_size = (int) $new[$config_name]; if ($old_size != $new_size) { // check for similar value of old_size in Extension Groups. If so, update these values. $sql = 'UPDATE ' . EXTENSION_GROUPS_TABLE . " SET max_filesize = $new_size WHERE max_filesize = $old_size"; $db->sql_query($sql); } } set_config($config_name, $new[$config_name]); if (in_array($config_name, array('max_filesize', 'attachment_quota', 'max_filesize_pm'))) { $new[$config_name] = $old; } } } perform_site_list(); if ($submit) { add_log('admin', 'LOG_' . strtoupper($mode) . '_CONFIG'); // Check Settings test_upload($error, $new['upload_dir'], false); if (!sizeof($error)) { trigger_error($user->lang['CONFIG_UPDATED']); } } } adm_page_header($user->lang[$l_title]); if ($submit && $mode == 'extensions') { // Change Extensions ? $extension_change_list = (isset($_POST['extension_change_list'])) ? array_map('intval', $_POST['extension_change_list']) : array(); $group_select_list = (isset($_POST['group_select'])) ? array_map('intval', $_POST['group_select']) : array(); // Generate correct Change List $extensions = array(); for ($i = 0; $i < count($extension_change_list); $i++) { $extensions[$extension_change_list[$i]]['group_id'] = $group_select_list[$i]; } $sql = 'SELECT * FROM ' . EXTENSIONS_TABLE . ' ORDER BY extension_id'; $result = $db->sql_query($sql); while ($row = $db->sql_fetchrow($result)) { if ($row['group_id'] != $extensions[$row['extension_id']]['group_id']) { $sql = 'UPDATE ' . EXTENSIONS_TABLE . ' SET group_id = ' . (int) $extensions[$row['extension_id']]['group_id'] . ' WHERE extension_id = ' . $row['extension_id']; $db->sql_query($sql); add_log('admin', 'LOG_ATTACH_EXT_UPDATE', $row['extension']); } } $db->sql_freeresult($result); // Delete Extension ? $extension_id_list = (isset($_POST['extension_id_list'])) ? array_map('intval', $_POST['extension_id_list']) : array(); if (sizeof($extension_id_list)) { $sql = 'SELECT extension FROM ' . EXTENSIONS_TABLE . ' WHERE extension_id IN (' . implode(', ', $extension_id_list) . ')'; $result = $db->sql_query($sql); $extension_list = ''; while ($row = $db->sql_fetchrow($result)) { $extension_list .= ($extension_list == '') ? $row['extension'] : ', ' . $row['extension']; } $db->sql_freeresult($result); $sql = 'DELETE FROM ' . EXTENSIONS_TABLE . ' WHERE extension_id IN (' . implode(', ', $extension_id_list) . ')'; $db->sql_query($sql); add_log('admin', 'LOG_ATTACH_EXT_DEL', $extension_list); } // Add Extension ? $add_extension = strtolower(request_var('add_extension', '')); $add_extension_group = request_var('add_group_select', 0); $add = (isset($_POST['add_extension_check'])) ? true : false; if ($add_extension != '' && $add) { if (!sizeof($error)) { $sql = 'SELECT extension_id FROM ' . EXTENSIONS_TABLE . " WHERE extension = '" . $db->sql_escape($add_extension) . "'"; $result = $db->sql_query($sql); if ($row = $db->sql_fetchrow($result)) { $error[] = sprintf($user->lang['EXTENSION_EXIST'], $add_extension); } $db->sql_freeresult($result); if (!sizeof($error)) { $sql_ary = array( 'group_id' => $add_extension_group, 'extension' => $add_extension ); $db->sql_query('INSERT INTO ' . EXTENSIONS_TABLE . ' ' . $db->sql_build_array('INSERT', $sql_ary)); add_log('admin', 'LOG_ATTACH_EXT_ADD', $add_extension); } } } if (!sizeof($error)) { $notify[] = $user->lang['EXTENSIONS_UPDATED']; } } if ($submit && $mode == 'ext_groups') { // Change Extension Groups ? $group_change_list = (isset($_POST['group_change_list'])) ? array_map('intval', $_POST['group_change_list']) : array(); $extension_group_list = request_var('extension_group_list', ''); $group_allowed_list = (isset($_POST['allowed_list'])) ? array_flip(array_map('intval', $_POST['allowed_list'])) : array(); $download_mode_list = (isset($_POST['download_mode_list'])) ? array_map('intval', $_POST['download_mode_list']) : array(); $category_list = (isset($_POST['category_list'])) ? array_map('intval', $_POST['category_list']) : array(); $upload_icon_list = request_var('upload_icon_list', ''); $filesize_list = (isset($_POST['max_filesize_list'])) ? array_map('intval', $_POST['max_filesize_list']) : array(); $size_select_list = request_var('size_select_list', 'b'); foreach ($group_change_list as $group_id => $var) { $filesize_list[$group_id] = ($size_select_list[$group_id] == 'kb') ? round($filesize_list[$group_id] * 1024) : (($size_select_list[$group_id] == 'mb') ? round($filesize_list[$group_id] * 1048576) : $filesize_list[$group_id]); $group_sql = array( 'group_name' => $extension_group_list[$group_id], 'cat_id' => $category_list[$group_id], 'allow_group' => (isset($group_allowed_list[$group_id])) ? 1 : 0, 'download_mode' => $download_mode_list[$group_id], 'upload_icon' => ($upload_icon_list[$group_id] == 'no_image') ? '' : $upload_icon_list[$group_id], 'max_filesize' => $filesize_list[$group_id] ); $sql = 'UPDATE ' . EXTENSION_GROUPS_TABLE . ' SET ' . $db->sql_build_array('UPDATE', $group_sql) . " WHERE group_id = $group_id"; $db->sql_query($sql); } // Delete Extension Groups $group_delete_list = (isset($_POST['group_delete_list'])) ? array_keys(array_map('intval', $_POST['group_delete_list'])) : array(); if (sizeof($group_delete_list)) { $sql = 'SELECT group_name FROM ' . EXTENSION_GROUPS_TABLE . ' WHERE group_id IN (' . implode(', ', $group_delete_list) . ')'; $result = $db->sql_query($sql); $l_group_list = array(); while ($row = $db->sql_fetchrow($result)) { $l_group_list[] = $row['group_name']; } $db->sql_freeresult($result); $sql = 'DELETE FROM ' . EXTENSION_GROUPS_TABLE . ' WHERE group_id IN (' . implode(', ', $group_delete_list) . ')'; $db->sql_query($sql); // Set corresponding Extensions to a pending Group $sql ='"UPDATE ' . EXTENSIONS_TABLE . ' SET group_id = 0 WHERE group_id IN (' . implode(', ', $group_delete_list) . ')'; $db->sql_query($sql); add_log('admin', 'LOG_ATTACH_EXTGROUP_DEL', implode(', ', $l_group_list)); } // Add Extensions Group ? $extension_group = request_var('add_extension_group', ''); $download_mode = request_var('add_download_mode', INLINE_LINK); $cat_id = request_var('add_category', 0); $upload_icon = request_var('add_upload_icon', ''); $filesize = request_var('add_max_filesize', 0); $size_select = request_var('add_size_select', 'b'); $is_allowed = (isset($_POST['add_allowed'])) ? true : false; $add = (isset($_POST['add_extension_group_check'])) ? true : false; if ($extension_group != '' && $add) { // check Extension Group $sql = 'SELECT group_name FROM ' . EXTENSION_GROUPS_TABLE . " WHERE group_name = '" . $db->sql_escape($extension_group) . "'"; $result = $db->sql_query_limit($sql, 1); if ($row = $db->sql_fetchrow($result)) { if ($row['group_name'] == $extension_group) { $error[] = sprintf($user->lang['EXTENSION_GROUP_EXIST'], $extension_group); } } $db->sql_freeresult($result); if (!sizeof($error)) { $filesize = ($size_select == 'kb') ? round($filesize * 1024) : (($size_select == 'mb') ? round($filesize * 1048576) : $filesize); $group_sql = array( 'group_name' => $extension_group, 'cat_id' => $cat_id, 'allow_group' => $is_allowed, 'download_mode' => $download_mode, 'upload_icon' => ($upload_icon == 'no_image') ? '' : $upload_icon, 'max_filesize' => $filesize ); $sql = 'INSERT INTO ' . EXTENSION_GROUPS_TABLE . ' ' . $db->sql_build_array('INSERT', $group_sql); $db->sql_query($sql); add_log('admin', 'LOG_ATTACH_EXTGROUP_ADD', $extension_group); } } $sql = 'SELECT e.extension, g.* FROM ' . EXTENSIONS_TABLE . ' e, ' . EXTENSION_GROUPS_TABLE . ' g WHERE e.group_id = g.group_id AND g.allow_group = 1'; $result = $db->sql_query($sql); $extensions = array(); while ($row = $db->sql_fetchrow($result)) { $extension = $row['extension']; $extensions['_allowed_'][] = $extension; $extensions[$extension]['display_cat'] = (int) $row['cat_id']; $extensions[$extension]['download_mode']= (int) $row['download_mode']; $extensions[$extension]['upload_icon'] = (string) $row['upload_icon']; $extensions[$extension]['max_filesize'] = (int) $row['max_filesize']; } $db->sql_freeresult($result); $cache->destroy('extensions'); $cache->put('extensions', $extensions); if (!sizeof($error)) { $notify[] = $user->lang['EXTENSION_GROUPS_UPDATED']; } } ?>

lang[$l_title]; ?>

lang[$l_title . '_EXPLAIN']; ?>

lang['LOG_ATTACH_ORPHAN_DEL'], implode(', ', $delete_files))); $notify[] = sprintf($user->lang['LOG_ATTACH_ORPHAN_DEL'], implode(', ', $delete_files)); } $upload_list = array(); foreach ($add_files as $file) { if (!in_array($file, $delete_files) && $post_ids[$file]) { $upload_list[$post_ids[$file]] = $file; } } unset($add_files); if (sizeof($upload_list)) { ?>

lang['UPLOADING_FILES']; ?>

sql_query($sql); $forum_names = array(); while ($row = $db->sql_fetchrow($result)) { $forum_names[$row['forum_id']] = $row['forum_name']; } $db->sql_freeresult($result); $sql = 'SELECT forum_id, topic_id, post_id FROM ' . POSTS_TABLE . ' WHERE post_id IN (' . implode(', ', array_keys($upload_list)) . ')'; $result = $db->sql_query($sql); while ($row = $db->sql_fetchrow($result)) { echo sprintf($user->lang['UPLOADING_FILE_TO'], $upload_list[$row['post_id']], $row['post_id']) . '
'; if (!$auth->acl_gets('f_attach', 'u_attach', $row['forum_id'])) { echo '' . sprintf($user->lang['UPLOAD_DENIED_FORUM'], $forum_names[$row['forum_id']]) . '

'; } else { upload_file($row['post_id'], $row['topic_id'], $row['forum_id'], $config['upload_dir'], $upload_list[$row['post_id']]); } } } } if (sizeof($error)) { ?>

lang['WARNING']; ?>

', $error); ?>

lang['NOTIFY']; ?>

', $notify); ?>

'; foreach ($modes as $_mode) { $s_select_mode .= ''; } $s_select_mode .= ''; ?>
">
 
0 ORDER BY cat_id'; $result = $db->sql_query($sql); $s_assigned_groups = array(); while ($row = $db->sql_fetchrow($result)) { $s_assigned_groups[$row['cat_id']][] = $row['group_name']; } $db->sql_freeresult($result); $display_inlined_yes = ($new['img_display_inlined']) ? 'checked="checked"' : ''; $display_inlined_no = (!$new['img_display_inlined']) ? 'checked="checked"' : ''; $create_thumbnail_yes = ($new['img_create_thumbnail']) ? 'checked="checked"' : ''; $create_thumbnail_no = (!$new['img_create_thumbnail']) ? 'checked="checked"' : ''; $secure_downloads_yes = ($new['secure_downloads']) ? 'checked="checked"' : ''; $secure_downloads_no = (!$new['secure_downloads']) ? 'checked="checked"' : ''; $secure_allow_deny_yes = ($new['secure_allow_deny']) ? 'checked="checked"' : ''; $secure_allow_deny_no = (!$new['secure_allow_deny']) ? 'checked="checked"' : ''; $secure_allow_empty_referer_yes = ($new['secure_allow_empty_referer']) ? 'checked="checked"' : ''; $secure_allow_empty_referer_no = (!$new['secure_allow_empty_referer']) ? 'checked="checked"' : ''; ?>
lang[$l_title]; ?>
lang['UPLOAD_DIR']; ?>:
lang['UPLOAD_DIR_EXPLAIN']; ?>
lang['DISPLAY_ORDER']; ?>:
lang['DISPLAY_ORDER_EXPLAIN']; ?>
/> lang['DESCENDING']; ?>   /> lang['ASCENDING']; ?>
lang['ATTACH_QUOTA']; ?>:
lang['ATTACH_QUOTA_EXPLAIN']; ?>
lang['ATTACH_MAX_FILESIZE']; ?>:
lang['ATTACH_MAX_FILESIZE_EXPLAIN']; ?>
lang['ATTACH_MAX_PM_FILESIZE']; ?>:
lang['ATTACH_MAX_PM_FILESIZE_EXPLAIN']; ?>
lang['MAX_ATTACHMENTS'] ?>:
lang['MAX_ATTACHMENTS_PM'] ?>:
lang['SECURE_DOWNLOADS']; ?>:
lang['SECURE_DOWNLOADS_EXPLAIN']; ?>
/> lang['YES']; ?>   /> lang['NO']; ?>
lang['SECURE_ALLOW_DENY']; ?>:
lang['SECURE_ALLOW_DENY_EXPLAIN']; ?>
/> lang['ORDER_ALLOW_DENY']; ?>   /> lang['ORDER_DENY_ALLOW']; ?>
lang['SECURE_EMPTY_REFERER']; ?>:
lang['SECURE_EMPTY_REFERER_EXPLAIN']; ?>
/> lang['YES']; ?>   /> lang['NO']; ?>
lang['SETTINGS_CAT_IMAGES']; ?>
lang['ASSIGNED_GROUP']; ?>: lang['NONE']); ?>
lang['DISPLAY_INLINED']; ?>:
lang['DISPLAY_INLINED_EXPLAIN']; ?>
/> lang['YES']; ?>   /> lang['NO']; ?>
lang['CREATE_THUMBNAIL']; ?>:
lang['CREATE_THUMBNAIL_EXPLAIN']; ?>
/> lang['YES']; ?>   /> lang['NO']; ?>
lang['MIN_THUMB_FILESIZE']; ?>:
lang['MIN_THUMB_FILESIZE_EXPLAIN']; ?>
lang['BYTES']; ?>
lang['IMAGICK_PATH']; ?>:
lang['IMAGICK_PATH_EXPLAIN']; ?>
  [ ">lang['SEARCH_IMAGICK']; ?> ]
lang['MAX_IMAGE_SIZE']; ?>:
lang['MAX_IMAGE_SIZE_EXPLAIN']; ?>
px X px
lang['IMAGE_LINK_SIZE']; ?>:
lang['IMAGE_LINK_SIZE_EXPLAIN']; ?>
px X px
  
sql_query($sql); $defined_ips = ''; $ips = array(); while ($row = $db->sql_fetchrow($result)) { $value = ($row['site_ip']) ? $row['site_ip'] : $row['site_hostname']; if ($value) { $defined_ips .= '' . $value . ''; $ips[$row['site_id']] = $value; } } $db->sql_freeresult($result); ?>
lang['DEFINE_' . $allow_deny . '_IPS']; ?>
lang['DOWNLOAD_ADD_IPS_EXPLAIN']; ?>
lang['IP_HOSTNAME']; ?>:
lang['EXCLUDE_FROM_' . $allow_deny . '_IP']; ?>:
lang['EXCLUDE_ENTERED_IP']; ?>
lang['YES']; ?>   lang['NO']; ?>
   
lang['REMOVE_' . $allow_deny . '_IPS']; ?>
lang['DOWNLOAD_REMOVE_IPS_EXPLAIN']; ?>
lang['IP_HOSTNAME']; ?>:
 
lang['NO_IPS_DEFINED']; ?>
$img) { $filename_list .= ''; } $size = request_var('size', 0); if (!$size && !$submit) { $max_add_filesize = intval($config['max_filesize']); $size = ($max_add_filesize >= 1048576) ? 'mb' : (($max_add_filesize >= 1024) ? 'kb' : 'b'); } $max_add_filesize = ($max_add_filesize >= 1048576) ? round($max_add_filesize / 1048576 * 100) / 100 : (($max_add_filesize >= 1024) ? round($max_add_filesize / 1024 * 100) / 100 : $max_add_filesize); $viewgroup = request_var('g', 0); ?> sql_query($sql); while ($row = $db->sql_fetchrow($result)) { // Format the filesize if ($row['max_filesize'] == 0) { $row['max_filesize'] = (int) $config['max_filesize']; } $size_format = ($row['max_filesize'] >= 1048576) ? 'mb' : (($row['max_filesize'] >= 1024) ? 'kb' : 'b'); $row['max_filesize'] = ($row['max_filesize'] >= 1048576) ? round($row['max_filesize'] / 1048576 * 100) / 100 : (($row['max_filesize'] >= 1024) ? round($row['max_filesize'] / 1024 * 100) / 100 : $row['max_filesize']); $s_allowed = ($row['allow_group'] == 1) ? 'checked="checked"' : ''; $edit_img = ($row['upload_icon'] != '') ? $row['upload_icon'] : ''; $filename_list = ''; $no_image_select = false; foreach ($imglist as $key => $img) { if ($edit_img == '') { $no_image_select = true; $selected = ''; } else { $selected = ($edit_img == $img) ? ' selected="selected"' : ''; } $filename_list .= ''; } ?> sql_query($sql); $assigned_extensions = array(); while ($e_row = $db->sql_fetchrow($e_result)) { $assigned_extensions[] = strtoupper($e_row['extension']); } $db->sql_freeresult($e_result); ?>
 lang['EXTENSION_GROUP']; ?>   lang['SPECIAL_CATEGORY']; ?>   lang['ALLOWED']; ?>   lang['DOWNLOAD_MODE']; ?>   lang['UPLOAD_ICON']; ?>   lang['MAX_EXTGROUP_FILESIZE']; ?>   lang['ADD']; ?> 
 
  
 lang['EXTENSION_GROUP']; ?>   lang['SPECIAL_CATEGORY']; ?>   lang['ALLOWED']; ?>   lang['DOWNLOAD_MODE']; ?>   lang['UPLOAD_ICON']; ?>   lang['MAX_EXTGROUP_FILESIZE']; ?>   lang['DELETE']; ?> 
" class="gen">
/>
  
 lang['ASSIGNED_EXTENSIONS'] . ' » ' . ((sizeof($assigned_extensions)) ? implode(', ', $assigned_extensions) : $user->lang['NONE']); ?>
  
sql_query($sql); if ($row = $db->sql_fetchrow($result)) { $old_group_id = $row['group_id']; do { $current_group_id = $row['group_id']; if ($old_group_id != $current_group_id) { ?> sql_fetchrow($result)); } ?>
 lang['EXTENSION']; ?>   lang['EXTENSION_GROUP']; ?>   lang['ADD_EXTENSION']; ?> 
 lang['EXTENSION']; ?>   lang['EXTENSION_GROUP']; ?>   lang['DELETE']; ?> 
  
sql_query($sql); while ($row = $db->sql_fetchrow($result)) { unset($attach_filelist[$row['physical_filename']]); } $db->sql_freeresult($result); ?> = 1048576) ? $user->lang['MB'] : ( ($filesize >= 1024) ? $user->lang['KB'] : $user->lang['BYTES'] ); $filesize = ($filesize >= 1048576) ? round((round($filesize / 1048576 * 100) / 100), 2) : (($filesize >= 1024) ? round((round($filesize / 1024 * 100) / 100), 2) : $filesize); ?>
 lang['FILENAME']; ?>   lang['FILESIZE']; ?>   lang['ATTACH_POST_ID']; ?>   lang['ATTACH_TO_POST']; ?>   lang['DELETE']; ?> 
ID:
   lang['MARK_ALL']; ?> :: lang['UNMARK_ALL']; ?> lang['MARK_ALL']; ?> :: lang['UNMARK_ALL']; ?>

$user->lang['NONE'], IMAGE_CAT => $user->lang['CAT_IMAGES'], WM_CAT => $user->lang['CAT_WM_FILES'], RM_CAT => $user->lang['CAT_RM_FILES'] ); if ($group_id) { $sql = 'SELECT cat_id FROM ' . EXTENSION_GROUPS_TABLE . ' WHERE group_id = ' . intval($group_id); $result = $db->sql_query($sql); $cat_type = (!($row = $db->sql_fetchrow($result))) ? NONE_CAT : $row['cat_id']; $db->sql_freeresult($result); } else { $cat_type = NONE_CAT; } $group_select = ''; return($group_select); } // Extension group select function group_select($select_name, $default_group = '-1') { global $db, $user; $group_select = ''; return $group_select; } // Build select for download modes function download_select($select_name, $group_id = FALSE) { global $db, $user; $types = array( INLINE_LINK => $user->lang['MODE_INLINE'], PHYSICAL_LINK => $user->lang['MODE_PHYSICAL'] ); if ($group_id) { $sql = "SELECT download_mode FROM " . EXTENSION_GROUPS_TABLE . " WHERE group_id = " . intval($group_id); $result = $db->sql_query($sql); $download_mode = (!($row = $db->sql_fetchrow($result))) ? INLINE_LINK : $row['download_mode']; $db->sql_freeresult($result); } else { $download_mode = INLINE_LINK; } $group_select = ''; return($group_select); } // Upload already uploaded file... huh? are you kidding? function upload_file($post_id, $topic_id, $forum_id, $upload_dir, $filename) { global $message_parser, $db, $user; $message_parser->attachment_data = array(); $message_parser->filename_data['filecomment'] = ''; $message_parser->filename_data['filename'] = $upload_dir . '/' . $filename; $filedata = upload_attachment($filename, true, $upload_dir . '/' . $filename); if ($filedata['post_attach'] && !sizeof($filedata['error'])) { $message_parser->attachment_data = array( 'post_id' => $post_id, 'poster_id' => $user->data['user_id'], 'topic_id' => $topic_id, 'physical_filename' => $filedata['destination_filename'], 'real_filename' => $filedata['filename'], 'comment' => $message_parser->filename_data['filecomment'], 'extension' => $filedata['extension'], 'mimetype' => $filedata['mimetype'], 'filesize' => $filedata['filesize'], 'filetime' => $filedata['filetime'], 'thumbnail' => $filedata['thumbnail'] ); $message_parser->filename_data['filecomment'] = ''; $filedata['post_attach'] = FALSE; // Submit Attachment $attach_sql = $message_parser->attachment_data; $db->sql_transaction(); $sql = 'INSERT INTO ' . ATTACHMENTS_TABLE . ' ' . $db->sql_build_array('INSERT', $attach_sql); $db->sql_query($sql); $sql = 'UPDATE ' . POSTS_TABLE . " SET post_attachment = 1 WHERE post_id = $post_id"; $db->sql_query($sql); $sql = 'UPDATE ' . TOPICS_TABLE . " SET topic_attachment = 1 WHERE topic_id = $topic_id"; $db->sql_query($sql); $db->sql_transaction('commit'); add_log('admin', sprintf($user->lang['LOG_ATTACH_FILEUPLOAD'], $post_id, $filename)); echo '' . $user->lang['SUCCESSFULLY_UPLOADED'] . '

'; } else if (sizeof($filedata['error'])) { echo '' . sprintf($user->lang['ADMIN_UPLOAD_ERROR'], implode("
\t", $filedata['error'])) . '


'; } } // Search Imagick function search_imagemagick() { $imagick = ''; $exe = ((defined('PHP_OS')) && (preg_match('#win#i', PHP_OS))) ? '.exe' : ''; if (empty($_ENV['MAGICK_HOME'])) { $locations = array('C:/WINDOWS/', 'C:/WINNT/', 'C:/WINDOWS/SYSTEM/', 'C:/WINNT/SYSTEM/', 'C:/WINDOWS/SYSTEM32/', 'C:/WINNT/SYSTEM32/', '/usr/bin/', '/usr/sbin/', '/usr/local/bin/', '/usr/local/sbin/', '/opt/', '/usr/imagemagick/', '/usr/bin/imagemagick/'); foreach ($locations as $location) { if (file_exists($location . 'convert' . $exe) && @is_readable($location . 'convert' . $exe) && @filesize($location . 'convert' . $exe) > 80000) { $imagick = str_replace('\\', '/', $location); continue; } } } else { $imagick = str_replace('\\', '/', $_ENV['MAGICK_HOME']); } return $imagick; } // Test Settings function test_upload(&$error, $upload_dir, $create_directory = false) { global $user, $phpbb_root_path; // Adjust the Upload Directory. Relative or absolute, this is the question here. $real_upload_dir = $upload_dir; $upload_dir = ($upload_dir{0} == '/' || ($upload_dir{0} != '/' && $upload_dir{1} == ':')) ? $upload_dir : $phpbb_root_path . $upload_dir; // Does the target directory exist, is it a directory and writeable. if ($create_directory) { if (!file_exists($upload_dir)) { @mkdir($upload_dir, 0777); @chmod($upload_dir, 0777); } } if (!file_exists($upload_dir)) { $error[] = sprintf($user->lang['NO_UPLOAD_DIR'], $real_upload_dir); return; } if (!is_dir($upload_dir)) { $error[] = sprintf($user->lang['UPLOAD_NOT_DIR'], $real_upload_dir); return; } if (!is_writable($upload_dir)) { $error[] = sprintf($user->lang['NO_WRITE_UPLOAD'], $real_upload_dir); return; } } function perform_site_list() { global $db, $user; if (isset($_REQUEST['securesubmit'])) { // Grab the list of entries $ips = request_var('ips', ''); $ip_list = array_unique(explode("\n", $ips)); $ip_list_log = implode(', ', $ip_list); $ip_exclude = (!empty($_POST['ipexclude'])) ? 1 : 0; $iplist = array(); $hostlist = array(); foreach ($ip_list as $item) { if (preg_match('#^([0-9]{1,3})\.([0-9]{1,3})\.([0-9]{1,3})\.([0-9]{1,3})[ ]*\-[ ]*([0-9]{1,3})\.([0-9]{1,3})\.([0-9]{1,3})\.([0-9]{1,3})$#', trim($item), $ip_range_explode)) { // Don't ask about all this, just don't ask ... ! $ip_1_counter = $ip_range_explode[1]; $ip_1_end = $ip_range_explode[5]; while ($ip_1_counter <= $ip_1_end) { $ip_2_counter = ($ip_1_counter == $ip_range_explode[1]) ? $ip_range_explode[2] : 0; $ip_2_end = ($ip_1_counter < $ip_1_end) ? 254 : $ip_range_explode[6]; if($ip_2_counter == 0 && $ip_2_end == 254) { $ip_2_counter = 256; $ip_2_fragment = 256; $iplist[] = "'$ip_1_counter.*'"; } while ($ip_2_counter <= $ip_2_end) { $ip_3_counter = ($ip_2_counter == $ip_range_explode[2] && $ip_1_counter == $ip_range_explode[1]) ? $ip_range_explode[3] : 0; $ip_3_end = ($ip_2_counter < $ip_2_end || $ip_1_counter < $ip_1_end) ? 254 : $ip_range_explode[7]; if ($ip_3_counter == 0 && $ip_3_end == 254) { $ip_3_counter = 256; $ip_3_fragment = 256; $iplist[] = "'$ip_1_counter.$ip_2_counter.*'"; } while ($ip_3_counter <= $ip_3_end) { $ip_4_counter = ($ip_3_counter == $ip_range_explode[3] && $ip_2_counter == $ip_range_explode[2] && $ip_1_counter == $ip_range_explode[1]) ? $ip_range_explode[4] : 0; $ip_4_end = ($ip_3_counter < $ip_3_end || $ip_2_counter < $ip_2_end) ? 254 : $ip_range_explode[8]; if ($ip_4_counter == 0 && $ip_4_end == 254) { $ip_4_counter = 256; $ip_4_fragment = 256; $iplist[] = "'$ip_1_counter.$ip_2_counter.$ip_3_counter.*'"; } while ($ip_4_counter <= $ip_4_end) { $iplist[] = "'$ip_1_counter.$ip_2_counter.$ip_3_counter.$ip_4_counter'"; $ip_4_counter++; } $ip_3_counter++; } $ip_2_counter++; } $ip_1_counter++; } } else if (preg_match('#^([0-9]{1,3})\.([0-9\*]{1,3})\.([0-9\*]{1,3})\.([0-9\*]{1,3})$#', trim($item)) || preg_match('#^[a-f0-9:]+\*?$#i', trim($item))) { $iplist[] = "'" . trim($item) . "'"; } else if (preg_match('#^([\w\-_]\.?){2,}$#is', trim($item))) { $hostlist[] = "'" . trim($item) . "'"; } else if (preg_match("#^([a-z0-9\-\*\._/]+?)$#is", trim($item))) { $hostlist[] = "'" . trim($item) . "'"; } } $sql = 'SELECT site_ip, site_hostname FROM ' . SITELIST_TABLE . " WHERE ip_exclude = $ip_exclude"; $result = $db->sql_query($sql); if ($row = $db->sql_fetchrow($result)) { $iplist_tmp = array(); $hostlist_tmp = array(); do { if ($row['site_ip']) { $iplist_tmp[] = "'" . $row['site_ip'] . "'"; } else if ($row['site_hostname']) { $hostlist_tmp[] = "'" . $row['site_hostname'] . "'"; } break; } while ($row = $db->sql_fetchrow($result)); $iplist = array_unique(array_diff($iplist, $iplist_tmp)); $hostlist = array_unique(array_diff($hostlist, $hostlist_tmp)); unset($iplist_tmp); unset($hostlist_tmp); } if (sizeof($iplist)) { foreach ($iplist as $ip_entry) { $sql = 'INSERT INTO ' . SITELIST_TABLE . " (site_ip, ip_exclude) VALUES ($ip_entry, $ip_exclude)"; $db->sql_query($sql); } } if (sizeof($hostlist)) { foreach ($hostlist as $host_entry) { $sql = 'INSERT INTO ' . SITELIST_TABLE . " (site_hostname, ip_exclude) VALUES ($host_entry, $ip_exclude)"; $db->sql_query($sql); } } if (!empty($ip_list_log)) { // Update log $log_entry = ($ip_exclude) ? 'LOG_DOWNLOAD_EXCLUDE_IP' : 'LOG_DOWNLOAD_IP'; add_log('admin', $log_entry, $ip_list_log); } trigger_error($user->lang['SECURE_DOWNLOAD_UPDATE_SUCESSFUL']); } else if (isset($_POST['unsecuresubmit'])) { $unip_sql = implode(', ', array_map('intval', $_POST['unip'])); if ($unip_sql != '') { $l_unip_list = ''; // Grab details of ips for logging information later $sql = 'SELECT site_ip, site_hostname FROM ' . SITELIST_TABLE . " WHERE site_id IN ($unip_sql)"; $result = $db->sql_query($sql); while ($row = $db->sql_fetchrow($result)) { $l_unip_list .= (($l_unip_list != '') ? ', ' : '') . (($row['site_ip']) ? $row['site_ip'] : $row['site_hostname']); } $sql = 'DELETE FROM ' . SITELIST_TABLE . " WHERE site_id IN ($unip_sql)"; $db->sql_query($sql); add_log('admin', 'LOG_DOWNLOAD_REMOVE_IP', $l_unip_list); } trigger_error($user->lang['SECURE_DOWNLOAD_UPDATE_SUCESSFUL']); } } ?>