| 130 |
kaklik |
1 |
<?php |
|
|
2 |
/*************************************************************************** |
|
|
3 |
* functions_post.php |
|
|
4 |
* ------------------- |
|
|
5 |
* begin : Saturday, Feb 13, 2001 |
|
|
6 |
* copyright : (C) 2001 The phpBB Group |
|
|
7 |
* email : support@phpbb.com |
|
|
8 |
* |
|
|
9 |
* $Id: functions_post.php,v 1.9.2.52 2006/05/06 13:38:55 grahamje Exp $ |
|
|
10 |
* |
|
|
11 |
* |
|
|
12 |
***************************************************************************/ |
|
|
13 |
|
|
|
14 |
/*************************************************************************** |
|
|
15 |
* |
|
|
16 |
* This program is free software; you can redistribute it and/or modify |
|
|
17 |
* it under the terms of the GNU General Public License as published by |
|
|
18 |
* the Free Software Foundation; either version 2 of the License, or |
|
|
19 |
* (at your option) any later version. |
|
|
20 |
* |
|
|
21 |
***************************************************************************/ |
|
|
22 |
|
|
|
23 |
if (!defined('IN_PHPBB')) |
|
|
24 |
{ |
|
|
25 |
die('Hacking attempt'); |
|
|
26 |
} |
|
|
27 |
|
|
|
28 |
$html_entities_match = array('#&(?!(\#[0-9]+;))#', '#<#', '#>#', '#"#'); |
|
|
29 |
$html_entities_replace = array('&', '<', '>', '"'); |
|
|
30 |
|
|
|
31 |
$unhtml_specialchars_match = array('#>#', '#<#', '#"#', '#&#'); |
|
|
32 |
$unhtml_specialchars_replace = array('>', '<', '"', '&'); |
|
|
33 |
|
|
|
34 |
// |
|
|
35 |
// This function will prepare a posted message for |
|
|
36 |
// entry into the database. |
|
|
37 |
// |
|
|
38 |
function prepare_message($message, $html_on, $bbcode_on, $smile_on, $bbcode_uid = 0) |
|
|
39 |
{ |
|
|
40 |
global $board_config, $html_entities_match, $html_entities_replace; |
|
|
41 |
|
|
|
42 |
// |
|
|
43 |
// Clean up the message |
|
|
44 |
// |
|
|
45 |
$message = trim($message); |
|
|
46 |
|
|
|
47 |
if ($html_on) |
|
|
48 |
{ |
|
|
49 |
// If HTML is on, we try to make it safe |
|
|
50 |
// This approach is quite agressive and anything that does not look like a valid tag |
|
|
51 |
// is going to get converted to HTML entities |
|
|
52 |
$message = stripslashes($message); |
|
|
53 |
$html_match = '#<[^\w<]*(\w+)((?:"[^"]*"|\'[^\']*\'|[^<>\'"])+)?>#'; |
|
|
54 |
$matches = array(); |
|
|
55 |
|
|
|
56 |
$message_split = preg_split($html_match, $message); |
|
|
57 |
preg_match_all($html_match, $message, $matches); |
|
|
58 |
|
|
|
59 |
$message = ''; |
|
|
60 |
|
|
|
61 |
foreach ($message_split as $part) |
|
|
62 |
{ |
|
|
63 |
$tag = array(array_shift($matches[0]), array_shift($matches[1]), array_shift($matches[2])); |
|
|
64 |
$message .= preg_replace($html_entities_match, $html_entities_replace, $part) . clean_html($tag); |
|
|
65 |
} |
|
|
66 |
|
|
|
67 |
$message = addslashes($message); |
|
|
68 |
$message = str_replace('"', '\"', $message); |
|
|
69 |
} |
|
|
70 |
else |
|
|
71 |
{ |
|
|
72 |
$message = preg_replace($html_entities_match, $html_entities_replace, $message); |
|
|
73 |
} |
|
|
74 |
|
|
|
75 |
if($bbcode_on && $bbcode_uid != '') |
|
|
76 |
{ |
|
|
77 |
$message = bbencode_first_pass($message, $bbcode_uid); |
|
|
78 |
} |
|
|
79 |
|
|
|
80 |
return $message; |
|
|
81 |
} |
|
|
82 |
|
|
|
83 |
function unprepare_message($message) |
|
|
84 |
{ |
|
|
85 |
global $unhtml_specialchars_match, $unhtml_specialchars_replace; |
|
|
86 |
|
|
|
87 |
return preg_replace($unhtml_specialchars_match, $unhtml_specialchars_replace, $message); |
|
|
88 |
} |
|
|
89 |
|
|
|
90 |
// |
|
|
91 |
// Prepare a message for posting |
|
|
92 |
// |
|
|
93 |
function prepare_post(&$mode, &$post_data, &$bbcode_on, &$html_on, &$smilies_on, &$error_msg, &$username, &$bbcode_uid, &$subject, &$message, &$poll_title, &$poll_options, &$poll_length) |
|
|
94 |
{ |
|
|
95 |
global $board_config, $userdata, $lang, $phpEx, $phpbb_root_path; |
|
|
96 |
|
|
|
97 |
// Check username |
|
|
98 |
if (!empty($username)) |
|
|
99 |
{ |
|
|
100 |
$username = phpbb_clean_username($username); |
|
|
101 |
|
|
|
102 |
if (!$userdata['session_logged_in'] || ($userdata['session_logged_in'] && $username != $userdata['username'])) |
|
|
103 |
{ |
|
|
104 |
include($phpbb_root_path . 'includes/functions_validate.'.$phpEx); |
|
|
105 |
|
|
|
106 |
$result = validate_username($username); |
|
|
107 |
if ($result['error']) |
|
|
108 |
{ |
|
|
109 |
$error_msg .= (!empty($error_msg)) ? '<br />' . $result['error_msg'] : $result['error_msg']; |
|
|
110 |
} |
|
|
111 |
} |
|
|
112 |
else |
|
|
113 |
{ |
|
|
114 |
$username = ''; |
|
|
115 |
} |
|
|
116 |
} |
|
|
117 |
|
|
|
118 |
// Check subject |
|
|
119 |
if (!empty($subject)) |
|
|
120 |
{ |
|
|
121 |
$subject = htmlspecialchars(trim($subject)); |
|
|
122 |
} |
|
|
123 |
else if ($mode == 'newtopic' || ($mode == 'editpost' && $post_data['first_post'])) |
|
|
124 |
{ |
|
|
125 |
$error_msg .= (!empty($error_msg)) ? '<br />' . $lang['Empty_subject'] : $lang['Empty_subject']; |
|
|
126 |
} |
|
|
127 |
|
|
|
128 |
// Check message |
|
|
129 |
if (!empty($message)) |
|
|
130 |
{ |
|
|
131 |
$bbcode_uid = ($bbcode_on) ? make_bbcode_uid() : ''; |
|
|
132 |
$message = prepare_message(trim($message), $html_on, $bbcode_on, $smilies_on, $bbcode_uid); |
|
|
133 |
} |
|
|
134 |
else if ($mode != 'delete' && $mode != 'poll_delete') |
|
|
135 |
{ |
|
|
136 |
$error_msg .= (!empty($error_msg)) ? '<br />' . $lang['Empty_message'] : $lang['Empty_message']; |
|
|
137 |
} |
|
|
138 |
|
|
|
139 |
// |
|
|
140 |
// Handle poll stuff |
|
|
141 |
// |
|
|
142 |
if ($mode == 'newtopic' || ($mode == 'editpost' && $post_data['first_post'])) |
|
|
143 |
{ |
|
|
144 |
$poll_length = (isset($poll_length)) ? max(0, intval($poll_length)) : 0; |
|
|
145 |
|
|
|
146 |
if (!empty($poll_title)) |
|
|
147 |
{ |
|
|
148 |
$poll_title = htmlspecialchars(trim($poll_title)); |
|
|
149 |
} |
|
|
150 |
|
|
|
151 |
if(!empty($poll_options)) |
|
|
152 |
{ |
|
|
153 |
$temp_option_text = array(); |
|
|
154 |
while(list($option_id, $option_text) = @each($poll_options)) |
|
|
155 |
{ |
|
|
156 |
$option_text = trim($option_text); |
|
|
157 |
if (!empty($option_text)) |
|
|
158 |
{ |
|
|
159 |
$temp_option_text[intval($option_id)] = htmlspecialchars($option_text); |
|
|
160 |
} |
|
|
161 |
} |
|
|
162 |
$option_text = $temp_option_text; |
|
|
163 |
|
|
|
164 |
if (count($poll_options) < 2) |
|
|
165 |
{ |
|
|
166 |
$error_msg .= (!empty($error_msg)) ? '<br />' . $lang['To_few_poll_options'] : $lang['To_few_poll_options']; |
|
|
167 |
} |
|
|
168 |
else if (count($poll_options) > $board_config['max_poll_options']) |
|
|
169 |
{ |
|
|
170 |
$error_msg .= (!empty($error_msg)) ? '<br />' . $lang['To_many_poll_options'] : $lang['To_many_poll_options']; |
|
|
171 |
} |
|
|
172 |
else if ($poll_title == '') |
|
|
173 |
{ |
|
|
174 |
$error_msg .= (!empty($error_msg)) ? '<br />' . $lang['Empty_poll_title'] : $lang['Empty_poll_title']; |
|
|
175 |
} |
|
|
176 |
} |
|
|
177 |
} |
|
|
178 |
|
|
|
179 |
return; |
|
|
180 |
} |
|
|
181 |
|
|
|
182 |
// |
|
|
183 |
// Post a new topic/reply/poll or edit existing post/poll |
|
|
184 |
// |
|
|
185 |
function submit_post($mode, &$post_data, &$message, &$meta, &$forum_id, &$topic_id, &$post_id, &$poll_id, &$topic_type, &$bbcode_on, &$html_on, &$smilies_on, &$attach_sig, &$bbcode_uid, $post_username, $post_subject, $post_message, $poll_title, &$poll_options, &$poll_length) |
|
|
186 |
{ |
|
|
187 |
global $board_config, $lang, $db, $phpbb_root_path, $phpEx; |
|
|
188 |
global $userdata, $user_ip; |
|
|
189 |
|
|
|
190 |
include($phpbb_root_path . 'includes/functions_search.'.$phpEx); |
|
|
191 |
|
|
|
192 |
$current_time = time(); |
|
|
193 |
|
|
|
194 |
if ($mode == 'newtopic' || $mode == 'reply' || $mode == 'editpost') |
|
|
195 |
{ |
|
|
196 |
// |
|
|
197 |
// Flood control |
|
|
198 |
// |
|
|
199 |
$where_sql = ($userdata['user_id'] == ANONYMOUS) ? "poster_ip = '$user_ip'" : 'poster_id = ' . $userdata['user_id']; |
|
|
200 |
$sql = "SELECT MAX(post_time) AS last_post_time |
|
|
201 |
FROM " . POSTS_TABLE . " |
|
|
202 |
WHERE $where_sql"; |
|
|
203 |
if ($result = $db->sql_query($sql)) |
|
|
204 |
{ |
|
|
205 |
if ($row = $db->sql_fetchrow($result)) |
|
|
206 |
{ |
|
|
207 |
if (intval($row['last_post_time']) > 0 && ($current_time - intval($row['last_post_time'])) < intval($board_config['flood_interval'])) |
|
|
208 |
{ |
|
|
209 |
message_die(GENERAL_MESSAGE, $lang['Flood_Error']); |
|
|
210 |
} |
|
|
211 |
} |
|
|
212 |
} |
|
|
213 |
} |
|
|
214 |
|
|
|
215 |
if ($mode == 'editpost') |
|
|
216 |
{ |
|
|
217 |
remove_search_post($post_id); |
|
|
218 |
} |
|
|
219 |
|
|
|
220 |
if ($mode == 'newtopic' || ($mode == 'editpost' && $post_data['first_post'])) |
|
|
221 |
{ |
|
|
222 |
$topic_vote = (!empty($poll_title) && count($poll_options) >= 2) ? 1 : 0; |
|
|
223 |
|
|
|
224 |
$sql = ($mode != "editpost") ? "INSERT INTO " . TOPICS_TABLE . " (topic_title, topic_poster, topic_time, forum_id, topic_status, topic_type, topic_vote) VALUES ('$post_subject', " . $userdata['user_id'] . ", $current_time, $forum_id, " . TOPIC_UNLOCKED . ", $topic_type, $topic_vote)" : "UPDATE " . TOPICS_TABLE . " SET topic_title = '$post_subject', topic_type = $topic_type " . (($post_data['edit_vote'] || !empty($poll_title)) ? ", topic_vote = " . $topic_vote : "") . " WHERE topic_id = $topic_id"; |
|
|
225 |
if (!$db->sql_query($sql)) |
|
|
226 |
{ |
|
|
227 |
message_die(GENERAL_ERROR, 'Error in posting', '', __LINE__, __FILE__, $sql); |
|
|
228 |
} |
|
|
229 |
|
|
|
230 |
if ($mode == 'newtopic') |
|
|
231 |
{ |
|
|
232 |
$topic_id = $db->sql_nextid(); |
|
|
233 |
} |
|
|
234 |
} |
|
|
235 |
|
|
|
236 |
$edited_sql = ($mode == 'editpost' && !$post_data['last_post'] && $post_data['poster_post']) ? ", post_edit_time = $current_time, post_edit_count = post_edit_count + 1 " : ""; |
|
|
237 |
$sql = ($mode != "editpost") ? "INSERT INTO " . POSTS_TABLE . " (topic_id, forum_id, poster_id, post_username, post_time, poster_ip, enable_bbcode, enable_html, enable_smilies, enable_sig) VALUES ($topic_id, $forum_id, " . $userdata['user_id'] . ", '$post_username', $current_time, '$user_ip', $bbcode_on, $html_on, $smilies_on, $attach_sig)" : "UPDATE " . POSTS_TABLE . " SET post_username = '$post_username', enable_bbcode = $bbcode_on, enable_html = $html_on, enable_smilies = $smilies_on, enable_sig = $attach_sig" . $edited_sql . " WHERE post_id = $post_id"; |
|
|
238 |
if (!$db->sql_query($sql, BEGIN_TRANSACTION)) |
|
|
239 |
{ |
|
|
240 |
message_die(GENERAL_ERROR, 'Error in posting', '', __LINE__, __FILE__, $sql); |
|
|
241 |
} |
|
|
242 |
|
|
|
243 |
if ($mode != 'editpost') |
|
|
244 |
{ |
|
|
245 |
$post_id = $db->sql_nextid(); |
|
|
246 |
} |
|
|
247 |
|
|
|
248 |
$sql = ($mode != 'editpost') ? "INSERT INTO " . POSTS_TEXT_TABLE . " (post_id, post_subject, bbcode_uid, post_text) VALUES ($post_id, '$post_subject', '$bbcode_uid', '$post_message')" : "UPDATE " . POSTS_TEXT_TABLE . " SET post_text = '$post_message', bbcode_uid = '$bbcode_uid', post_subject = '$post_subject' WHERE post_id = $post_id"; |
|
|
249 |
if (!$db->sql_query($sql)) |
|
|
250 |
{ |
|
|
251 |
message_die(GENERAL_ERROR, 'Error in posting', '', __LINE__, __FILE__, $sql); |
|
|
252 |
} |
|
|
253 |
|
|
|
254 |
add_search_words('single', $post_id, stripslashes($post_message), stripslashes($post_subject)); |
|
|
255 |
|
|
|
256 |
// |
|
|
257 |
// Add poll |
|
|
258 |
// |
|
|
259 |
if (($mode == 'newtopic' || ($mode == 'editpost' && $post_data['edit_poll'])) && !empty($poll_title) && count($poll_options) >= 2) |
|
|
260 |
{ |
|
|
261 |
$sql = (!$post_data['has_poll']) ? "INSERT INTO " . VOTE_DESC_TABLE . " (topic_id, vote_text, vote_start, vote_length) VALUES ($topic_id, '$poll_title', $current_time, " . ($poll_length * 86400) . ")" : "UPDATE " . VOTE_DESC_TABLE . " SET vote_text = '$poll_title', vote_length = " . ($poll_length * 86400) . " WHERE topic_id = $topic_id"; |
|
|
262 |
if (!$db->sql_query($sql)) |
|
|
263 |
{ |
|
|
264 |
message_die(GENERAL_ERROR, 'Error in posting', '', __LINE__, __FILE__, $sql); |
|
|
265 |
} |
|
|
266 |
|
|
|
267 |
$delete_option_sql = ''; |
|
|
268 |
$old_poll_result = array(); |
|
|
269 |
if ($mode == 'editpost' && $post_data['has_poll']) |
|
|
270 |
{ |
|
|
271 |
$sql = "SELECT vote_option_id, vote_result |
|
|
272 |
FROM " . VOTE_RESULTS_TABLE . " |
|
|
273 |
WHERE vote_id = $poll_id |
|
|
274 |
ORDER BY vote_option_id ASC"; |
|
|
275 |
if (!($result = $db->sql_query($sql))) |
|
|
276 |
{ |
|
|
277 |
message_die(GENERAL_ERROR, 'Could not obtain vote data results for this topic', '', __LINE__, __FILE__, $sql); |
|
|
278 |
} |
|
|
279 |
|
|
|
280 |
while ($row = $db->sql_fetchrow($result)) |
|
|
281 |
{ |
|
|
282 |
$old_poll_result[$row['vote_option_id']] = $row['vote_result']; |
|
|
283 |
|
|
|
284 |
if (!isset($poll_options[$row['vote_option_id']])) |
|
|
285 |
{ |
|
|
286 |
$delete_option_sql .= ($delete_option_sql != '') ? ', ' . $row['vote_option_id'] : $row['vote_option_id']; |
|
|
287 |
} |
|
|
288 |
} |
|
|
289 |
} |
|
|
290 |
else |
|
|
291 |
{ |
|
|
292 |
$poll_id = $db->sql_nextid(); |
|
|
293 |
} |
|
|
294 |
|
|
|
295 |
@reset($poll_options); |
|
|
296 |
|
|
|
297 |
$poll_option_id = 1; |
|
|
298 |
while (list($option_id, $option_text) = each($poll_options)) |
|
|
299 |
{ |
|
|
300 |
if (!empty($option_text)) |
|
|
301 |
{ |
|
|
302 |
$option_text = str_replace("\'", "''", htmlspecialchars($option_text)); |
|
|
303 |
$poll_result = ($mode == "editpost" && isset($old_poll_result[$option_id])) ? $old_poll_result[$option_id] : 0; |
|
|
304 |
|
|
|
305 |
$sql = ($mode != "editpost" || !isset($old_poll_result[$option_id])) ? "INSERT INTO " . VOTE_RESULTS_TABLE . " (vote_id, vote_option_id, vote_option_text, vote_result) VALUES ($poll_id, $poll_option_id, '$option_text', $poll_result)" : "UPDATE " . VOTE_RESULTS_TABLE . " SET vote_option_text = '$option_text', vote_result = $poll_result WHERE vote_option_id = $option_id AND vote_id = $poll_id"; |
|
|
306 |
if (!$db->sql_query($sql)) |
|
|
307 |
{ |
|
|
308 |
message_die(GENERAL_ERROR, 'Error in posting', '', __LINE__, __FILE__, $sql); |
|
|
309 |
} |
|
|
310 |
$poll_option_id++; |
|
|
311 |
} |
|
|
312 |
} |
|
|
313 |
|
|
|
314 |
if ($delete_option_sql != '') |
|
|
315 |
{ |
|
|
316 |
$sql = "DELETE FROM " . VOTE_RESULTS_TABLE . " |
|
|
317 |
WHERE vote_option_id IN ($delete_option_sql) |
|
|
318 |
AND vote_id = $poll_id"; |
|
|
319 |
if (!$db->sql_query($sql)) |
|
|
320 |
{ |
|
|
321 |
message_die(GENERAL_ERROR, 'Error deleting pruned poll options', '', __LINE__, __FILE__, $sql); |
|
|
322 |
} |
|
|
323 |
} |
|
|
324 |
} |
|
|
325 |
|
|
|
326 |
$meta = '<meta http-equiv="refresh" content="3;url=' . append_sid("viewtopic.$phpEx?" . POST_POST_URL . "=" . $post_id) . '#' . $post_id . '">'; |
|
|
327 |
$message = $lang['Stored'] . '<br /><br />' . sprintf($lang['Click_view_message'], '<a href="' . append_sid("viewtopic.$phpEx?" . POST_POST_URL . "=" . $post_id) . '#' . $post_id . '">', '</a>') . '<br /><br />' . sprintf($lang['Click_return_forum'], '<a href="' . append_sid("viewforum.$phpEx?" . POST_FORUM_URL . "=$forum_id") . '">', '</a>'); |
|
|
328 |
|
|
|
329 |
return false; |
|
|
330 |
} |
|
|
331 |
|
|
|
332 |
// |
|
|
333 |
// Update post stats and details |
|
|
334 |
// |
|
|
335 |
function update_post_stats(&$mode, &$post_data, &$forum_id, &$topic_id, &$post_id, &$user_id) |
|
|
336 |
{ |
|
|
337 |
global $db; |
|
|
338 |
|
|
|
339 |
$sign = ($mode == 'delete') ? '- 1' : '+ 1'; |
|
|
340 |
$forum_update_sql = "forum_posts = forum_posts $sign"; |
|
|
341 |
$topic_update_sql = ''; |
|
|
342 |
|
|
|
343 |
if ($mode == 'delete') |
|
|
344 |
{ |
|
|
345 |
if ($post_data['last_post']) |
|
|
346 |
{ |
|
|
347 |
if ($post_data['first_post']) |
|
|
348 |
{ |
|
|
349 |
$forum_update_sql .= ', forum_topics = forum_topics - 1'; |
|
|
350 |
} |
|
|
351 |
else |
|
|
352 |
{ |
|
|
353 |
|
|
|
354 |
$topic_update_sql .= 'topic_replies = topic_replies - 1'; |
|
|
355 |
|
|
|
356 |
$sql = "SELECT MAX(post_id) AS last_post_id |
|
|
357 |
FROM " . POSTS_TABLE . " |
|
|
358 |
WHERE topic_id = $topic_id"; |
|
|
359 |
if (!($result = $db->sql_query($sql))) |
|
|
360 |
{ |
|
|
361 |
message_die(GENERAL_ERROR, 'Error in deleting post', '', __LINE__, __FILE__, $sql); |
|
|
362 |
} |
|
|
363 |
|
|
|
364 |
if ($row = $db->sql_fetchrow($result)) |
|
|
365 |
{ |
|
|
366 |
$topic_update_sql .= ', topic_last_post_id = ' . $row['last_post_id']; |
|
|
367 |
} |
|
|
368 |
} |
|
|
369 |
|
|
|
370 |
if ($post_data['last_topic']) |
|
|
371 |
{ |
|
|
372 |
$sql = "SELECT MAX(post_id) AS last_post_id |
|
|
373 |
FROM " . POSTS_TABLE . " |
|
|
374 |
WHERE forum_id = $forum_id"; |
|
|
375 |
if (!($result = $db->sql_query($sql))) |
|
|
376 |
{ |
|
|
377 |
message_die(GENERAL_ERROR, 'Error in deleting post', '', __LINE__, __FILE__, $sql); |
|
|
378 |
} |
|
|
379 |
|
|
|
380 |
if ($row = $db->sql_fetchrow($result)) |
|
|
381 |
{ |
|
|
382 |
$forum_update_sql .= ($row['last_post_id']) ? ', forum_last_post_id = ' . $row['last_post_id'] : ', forum_last_post_id = 0'; |
|
|
383 |
} |
|
|
384 |
} |
|
|
385 |
} |
|
|
386 |
else if ($post_data['first_post']) |
|
|
387 |
{ |
|
|
388 |
$sql = "SELECT MIN(post_id) AS first_post_id |
|
|
389 |
FROM " . POSTS_TABLE . " |
|
|
390 |
WHERE topic_id = $topic_id"; |
|
|
391 |
if (!($result = $db->sql_query($sql))) |
|
|
392 |
{ |
|
|
393 |
message_die(GENERAL_ERROR, 'Error in deleting post', '', __LINE__, __FILE__, $sql); |
|
|
394 |
} |
|
|
395 |
|
|
|
396 |
if ($row = $db->sql_fetchrow($result)) |
|
|
397 |
{ |
|
|
398 |
$topic_update_sql .= 'topic_replies = topic_replies - 1, topic_first_post_id = ' . $row['first_post_id']; |
|
|
399 |
} |
|
|
400 |
} |
|
|
401 |
else |
|
|
402 |
{ |
|
|
403 |
$topic_update_sql .= 'topic_replies = topic_replies - 1'; |
|
|
404 |
} |
|
|
405 |
} |
|
|
406 |
else if ($mode != 'poll_delete') |
|
|
407 |
{ |
|
|
408 |
$forum_update_sql .= ", forum_last_post_id = $post_id" . (($mode == 'newtopic') ? ", forum_topics = forum_topics $sign" : ""); |
|
|
409 |
$topic_update_sql = "topic_last_post_id = $post_id" . (($mode == 'reply') ? ", topic_replies = topic_replies $sign" : ", topic_first_post_id = $post_id"); |
|
|
410 |
} |
|
|
411 |
else |
|
|
412 |
{ |
|
|
413 |
$topic_update_sql .= 'topic_vote = 0'; |
|
|
414 |
} |
|
|
415 |
|
|
|
416 |
if ($mode != 'poll_delete') |
|
|
417 |
{ |
|
|
418 |
$sql = "UPDATE " . FORUMS_TABLE . " SET |
|
|
419 |
$forum_update_sql |
|
|
420 |
WHERE forum_id = $forum_id"; |
|
|
421 |
if (!$db->sql_query($sql)) |
|
|
422 |
{ |
|
|
423 |
message_die(GENERAL_ERROR, 'Error in posting', '', __LINE__, __FILE__, $sql); |
|
|
424 |
} |
|
|
425 |
} |
|
|
426 |
|
|
|
427 |
if ($topic_update_sql != '') |
|
|
428 |
{ |
|
|
429 |
$sql = "UPDATE " . TOPICS_TABLE . " SET |
|
|
430 |
$topic_update_sql |
|
|
431 |
WHERE topic_id = $topic_id"; |
|
|
432 |
if (!$db->sql_query($sql)) |
|
|
433 |
{ |
|
|
434 |
message_die(GENERAL_ERROR, 'Error in posting', '', __LINE__, __FILE__, $sql); |
|
|
435 |
} |
|
|
436 |
} |
|
|
437 |
|
|
|
438 |
if ($mode != 'poll_delete') |
|
|
439 |
{ |
|
|
440 |
$sql = "UPDATE " . USERS_TABLE . " |
|
|
441 |
SET user_posts = user_posts $sign |
|
|
442 |
WHERE user_id = $user_id"; |
|
|
443 |
if (!$db->sql_query($sql, END_TRANSACTION)) |
|
|
444 |
{ |
|
|
445 |
message_die(GENERAL_ERROR, 'Error in posting', '', __LINE__, __FILE__, $sql); |
|
|
446 |
} |
|
|
447 |
} |
|
|
448 |
|
|
|
449 |
return; |
|
|
450 |
} |
|
|
451 |
|
|
|
452 |
// |
|
|
453 |
// Delete a post/poll |
|
|
454 |
// |
|
|
455 |
function delete_post($mode, &$post_data, &$message, &$meta, &$forum_id, &$topic_id, &$post_id, &$poll_id) |
|
|
456 |
{ |
|
|
457 |
global $board_config, $lang, $db, $phpbb_root_path, $phpEx; |
|
|
458 |
global $userdata, $user_ip; |
|
|
459 |
|
|
|
460 |
if ($mode != 'poll_delete') |
|
|
461 |
{ |
|
|
462 |
include($phpbb_root_path . 'includes/functions_search.'.$phpEx); |
|
|
463 |
|
|
|
464 |
$sql = "DELETE FROM " . POSTS_TABLE . " |
|
|
465 |
WHERE post_id = $post_id"; |
|
|
466 |
if (!$db->sql_query($sql)) |
|
|
467 |
{ |
|
|
468 |
message_die(GENERAL_ERROR, 'Error in deleting post', '', __LINE__, __FILE__, $sql); |
|
|
469 |
} |
|
|
470 |
|
|
|
471 |
$sql = "DELETE FROM " . POSTS_TEXT_TABLE . " |
|
|
472 |
WHERE post_id = $post_id"; |
|
|
473 |
if (!$db->sql_query($sql)) |
|
|
474 |
{ |
|
|
475 |
message_die(GENERAL_ERROR, 'Error in deleting post', '', __LINE__, __FILE__, $sql); |
|
|
476 |
} |
|
|
477 |
|
|
|
478 |
if ($post_data['last_post']) |
|
|
479 |
{ |
|
|
480 |
if ($post_data['first_post']) |
|
|
481 |
{ |
|
|
482 |
$forum_update_sql .= ', forum_topics = forum_topics - 1'; |
|
|
483 |
$sql = "DELETE FROM " . TOPICS_TABLE . " |
|
|
484 |
WHERE topic_id = $topic_id |
|
|
485 |
OR topic_moved_id = $topic_id"; |
|
|
486 |
if (!$db->sql_query($sql)) |
|
|
487 |
{ |
|
|
488 |
message_die(GENERAL_ERROR, 'Error in deleting post', '', __LINE__, __FILE__, $sql); |
|
|
489 |
} |
|
|
490 |
|
|
|
491 |
$sql = "DELETE FROM " . TOPICS_WATCH_TABLE . " |
|
|
492 |
WHERE topic_id = $topic_id"; |
|
|
493 |
if (!$db->sql_query($sql)) |
|
|
494 |
{ |
|
|
495 |
message_die(GENERAL_ERROR, 'Error in deleting post', '', __LINE__, __FILE__, $sql); |
|
|
496 |
} |
|
|
497 |
} |
|
|
498 |
} |
|
|
499 |
|
|
|
500 |
remove_search_post($post_id); |
|
|
501 |
} |
|
|
502 |
|
|
|
503 |
if ($mode == 'poll_delete' || ($mode == 'delete' && $post_data['first_post'] && $post_data['last_post']) && $post_data['has_poll'] && $post_data['edit_poll']) |
|
|
504 |
{ |
|
|
505 |
$sql = "DELETE FROM " . VOTE_DESC_TABLE . " |
|
|
506 |
WHERE topic_id = $topic_id"; |
|
|
507 |
if (!$db->sql_query($sql)) |
|
|
508 |
{ |
|
|
509 |
message_die(GENERAL_ERROR, 'Error in deleting poll', '', __LINE__, __FILE__, $sql); |
|
|
510 |
} |
|
|
511 |
|
|
|
512 |
$sql = "DELETE FROM " . VOTE_RESULTS_TABLE . " |
|
|
513 |
WHERE vote_id = $poll_id"; |
|
|
514 |
if (!$db->sql_query($sql)) |
|
|
515 |
{ |
|
|
516 |
message_die(GENERAL_ERROR, 'Error in deleting poll', '', __LINE__, __FILE__, $sql); |
|
|
517 |
} |
|
|
518 |
|
|
|
519 |
$sql = "DELETE FROM " . VOTE_USERS_TABLE . " |
|
|
520 |
WHERE vote_id = $poll_id"; |
|
|
521 |
if (!$db->sql_query($sql)) |
|
|
522 |
{ |
|
|
523 |
message_die(GENERAL_ERROR, 'Error in deleting poll', '', __LINE__, __FILE__, $sql); |
|
|
524 |
} |
|
|
525 |
} |
|
|
526 |
|
|
|
527 |
if ($mode == 'delete' && $post_data['first_post'] && $post_data['last_post']) |
|
|
528 |
{ |
|
|
529 |
$meta = '<meta http-equiv="refresh" content="3;url=' . append_sid("viewforum.$phpEx?" . POST_FORUM_URL . '=' . $forum_id) . '">'; |
|
|
530 |
$message = $lang['Deleted']; |
|
|
531 |
} |
|
|
532 |
else |
|
|
533 |
{ |
|
|
534 |
$meta = '<meta http-equiv="refresh" content="3;url=' . append_sid("viewtopic.$phpEx?" . POST_TOPIC_URL . '=' . $topic_id) . '">'; |
|
|
535 |
$message = (($mode == 'poll_delete') ? $lang['Poll_delete'] : $lang['Deleted']) . '<br /><br />' . sprintf($lang['Click_return_topic'], '<a href="' . append_sid("viewtopic.$phpEx?" . POST_TOPIC_URL . "=$topic_id") . '">', '</a>'); |
|
|
536 |
} |
|
|
537 |
|
|
|
538 |
$message .= '<br /><br />' . sprintf($lang['Click_return_forum'], '<a href="' . append_sid("viewforum.$phpEx?" . POST_FORUM_URL . "=$forum_id") . '">', '</a>'); |
|
|
539 |
|
|
|
540 |
return; |
|
|
541 |
} |
|
|
542 |
|
|
|
543 |
// |
|
|
544 |
// Handle user notification on new post |
|
|
545 |
// |
|
|
546 |
function user_notification($mode, &$post_data, &$topic_title, &$forum_id, &$topic_id, &$post_id, &$notify_user) |
|
|
547 |
{ |
|
|
548 |
global $board_config, $lang, $db, $phpbb_root_path, $phpEx; |
|
|
549 |
global $userdata, $user_ip; |
|
|
550 |
|
|
|
551 |
$current_time = time(); |
|
|
552 |
|
|
|
553 |
if ($mode != 'delete') |
|
|
554 |
{ |
|
|
555 |
if ($mode == 'reply') |
|
|
556 |
{ |
|
|
557 |
$sql = "SELECT ban_userid |
|
|
558 |
FROM " . BANLIST_TABLE; |
|
|
559 |
if (!($result = $db->sql_query($sql))) |
|
|
560 |
{ |
|
|
561 |
message_die(GENERAL_ERROR, 'Could not obtain banlist', '', __LINE__, __FILE__, $sql); |
|
|
562 |
} |
|
|
563 |
|
|
|
564 |
$user_id_sql = ''; |
|
|
565 |
while ($row = $db->sql_fetchrow($result)) |
|
|
566 |
{ |
|
|
567 |
if (isset($row['ban_userid']) && !empty($row['ban_userid'])) |
|
|
568 |
{ |
|
|
569 |
$user_id_sql .= ', ' . $row['ban_userid']; |
|
|
570 |
} |
|
|
571 |
} |
|
|
572 |
|
|
|
573 |
$sql = "SELECT u.user_id, u.user_email, u.user_lang |
|
|
574 |
FROM " . TOPICS_WATCH_TABLE . " tw, " . USERS_TABLE . " u |
|
|
575 |
WHERE tw.topic_id = $topic_id |
|
|
576 |
AND tw.user_id NOT IN (" . $userdata['user_id'] . ", " . ANONYMOUS . $user_id_sql . ") |
|
|
577 |
AND tw.notify_status = " . TOPIC_WATCH_UN_NOTIFIED . " |
|
|
578 |
AND u.user_id = tw.user_id"; |
|
|
579 |
if (!($result = $db->sql_query($sql))) |
|
|
580 |
{ |
|
|
581 |
message_die(GENERAL_ERROR, 'Could not obtain list of topic watchers', '', __LINE__, __FILE__, $sql); |
|
|
582 |
} |
|
|
583 |
|
|
|
584 |
$update_watched_sql = ''; |
|
|
585 |
$bcc_list_ary = array(); |
|
|
586 |
|
|
|
587 |
if ($row = $db->sql_fetchrow($result)) |
|
|
588 |
{ |
|
|
589 |
// Sixty second limit |
|
|
590 |
@set_time_limit(60); |
|
|
591 |
|
|
|
592 |
do |
|
|
593 |
{ |
|
|
594 |
if ($row['user_email'] != '') |
|
|
595 |
{ |
|
|
596 |
$bcc_list_ary[$row['user_lang']][] = $row['user_email']; |
|
|
597 |
} |
|
|
598 |
$update_watched_sql .= ($update_watched_sql != '') ? ', ' . $row['user_id'] : $row['user_id']; |
|
|
599 |
} |
|
|
600 |
while ($row = $db->sql_fetchrow($result)); |
|
|
601 |
|
|
|
602 |
// |
|
|
603 |
// Let's do some checking to make sure that mass mail functions |
|
|
604 |
// are working in win32 versions of php. |
|
|
605 |
// |
|
|
606 |
if (preg_match('/[c-z]:\\\.*/i', getenv('PATH')) && !$board_config['smtp_delivery']) |
|
|
607 |
{ |
|
|
608 |
$ini_val = (@phpversion() >= '4.0.0') ? 'ini_get' : 'get_cfg_var'; |
|
|
609 |
|
|
|
610 |
// We are running on windows, force delivery to use our smtp functions |
|
|
611 |
// since php's are broken by default |
|
|
612 |
$board_config['smtp_delivery'] = 1; |
|
|
613 |
$board_config['smtp_host'] = @$ini_val('SMTP'); |
|
|
614 |
} |
|
|
615 |
|
|
|
616 |
if (sizeof($bcc_list_ary)) |
|
|
617 |
{ |
|
|
618 |
include($phpbb_root_path . 'includes/emailer.'.$phpEx); |
|
|
619 |
$emailer = new emailer($board_config['smtp_delivery']); |
|
|
620 |
|
|
|
621 |
$script_name = preg_replace('/^\/?(.*?)\/?$/', '\1', trim($board_config['script_path'])); |
|
|
622 |
$script_name = ($script_name != '') ? $script_name . '/viewtopic.'.$phpEx : 'viewtopic.'.$phpEx; |
|
|
623 |
$server_name = trim($board_config['server_name']); |
|
|
624 |
$server_protocol = ($board_config['cookie_secure']) ? 'https://' : 'http://'; |
|
|
625 |
$server_port = ($board_config['server_port'] <> 80) ? ':' . trim($board_config['server_port']) . '/' : '/'; |
|
|
626 |
|
|
|
627 |
$orig_word = array(); |
|
|
628 |
$replacement_word = array(); |
|
|
629 |
obtain_word_list($orig_word, $replacement_word); |
|
|
630 |
|
|
|
631 |
$emailer->from($board_config['board_email']); |
|
|
632 |
$emailer->replyto($board_config['board_email']); |
|
|
633 |
|
|
|
634 |
$topic_title = (count($orig_word)) ? preg_replace($orig_word, $replacement_word, unprepare_message($topic_title)) : unprepare_message($topic_title); |
|
|
635 |
|
|
|
636 |
@reset($bcc_list_ary); |
|
|
637 |
while (list($user_lang, $bcc_list) = each($bcc_list_ary)) |
|
|
638 |
{ |
|
|
639 |
$emailer->use_template('topic_notify', $user_lang); |
|
|
640 |
|
|
|
641 |
for ($i = 0; $i < count($bcc_list); $i++) |
|
|
642 |
{ |
|
|
643 |
$emailer->bcc($bcc_list[$i]); |
|
|
644 |
} |
|
|
645 |
|
|
|
646 |
// The Topic_reply_notification lang string below will be used |
|
|
647 |
// if for some reason the mail template subject cannot be read |
|
|
648 |
// ... note it will not necessarily be in the posters own language! |
|
|
649 |
$emailer->set_subject($lang['Topic_reply_notification']); |
|
|
650 |
|
|
|
651 |
// This is a nasty kludge to remove the username var ... till (if?) |
|
|
652 |
// translators update their templates |
|
|
653 |
$emailer->msg = preg_replace('#[ ]?{USERNAME}#', '', $emailer->msg); |
|
|
654 |
|
|
|
655 |
$emailer->assign_vars(array( |
|
|
656 |
'EMAIL_SIG' => (!empty($board_config['board_email_sig'])) ? str_replace('<br />', "\n", "-- \n" . $board_config['board_email_sig']) : '', |
|
|
657 |
'SITENAME' => $board_config['sitename'], |
|
|
658 |
'TOPIC_TITLE' => $topic_title, |
|
|
659 |
|
|
|
660 |
'U_TOPIC' => $server_protocol . $server_name . $server_port . $script_name . '?' . POST_POST_URL . "=$post_id#$post_id", |
|
|
661 |
'U_STOP_WATCHING_TOPIC' => $server_protocol . $server_name . $server_port . $script_name . '?' . POST_TOPIC_URL . "=$topic_id&unwatch=topic") |
|
|
662 |
); |
|
|
663 |
|
|
|
664 |
$emailer->send(); |
|
|
665 |
$emailer->reset(); |
|
|
666 |
} |
|
|
667 |
} |
|
|
668 |
} |
|
|
669 |
$db->sql_freeresult($result); |
|
|
670 |
|
|
|
671 |
if ($update_watched_sql != '') |
|
|
672 |
{ |
|
|
673 |
$sql = "UPDATE " . TOPICS_WATCH_TABLE . " |
|
|
674 |
SET notify_status = " . TOPIC_WATCH_NOTIFIED . " |
|
|
675 |
WHERE topic_id = $topic_id |
|
|
676 |
AND user_id IN ($update_watched_sql)"; |
|
|
677 |
$db->sql_query($sql); |
|
|
678 |
} |
|
|
679 |
} |
|
|
680 |
|
|
|
681 |
$sql = "SELECT topic_id |
|
|
682 |
FROM " . TOPICS_WATCH_TABLE . " |
|
|
683 |
WHERE topic_id = $topic_id |
|
|
684 |
AND user_id = " . $userdata['user_id']; |
|
|
685 |
if (!($result = $db->sql_query($sql))) |
|
|
686 |
{ |
|
|
687 |
message_die(GENERAL_ERROR, 'Could not obtain topic watch information', '', __LINE__, __FILE__, $sql); |
|
|
688 |
} |
|
|
689 |
|
|
|
690 |
$row = $db->sql_fetchrow($result); |
|
|
691 |
|
|
|
692 |
if (!$notify_user && !empty($row['topic_id'])) |
|
|
693 |
{ |
|
|
694 |
$sql = "DELETE FROM " . TOPICS_WATCH_TABLE . " |
|
|
695 |
WHERE topic_id = $topic_id |
|
|
696 |
AND user_id = " . $userdata['user_id']; |
|
|
697 |
if (!$db->sql_query($sql)) |
|
|
698 |
{ |
|
|
699 |
message_die(GENERAL_ERROR, 'Could not delete topic watch information', '', __LINE__, __FILE__, $sql); |
|
|
700 |
} |
|
|
701 |
} |
|
|
702 |
else if ($notify_user && empty($row['topic_id'])) |
|
|
703 |
{ |
|
|
704 |
$sql = "INSERT INTO " . TOPICS_WATCH_TABLE . " (user_id, topic_id, notify_status) |
|
|
705 |
VALUES (" . $userdata['user_id'] . ", $topic_id, 0)"; |
|
|
706 |
if (!$db->sql_query($sql)) |
|
|
707 |
{ |
|
|
708 |
message_die(GENERAL_ERROR, 'Could not insert topic watch information', '', __LINE__, __FILE__, $sql); |
|
|
709 |
} |
|
|
710 |
} |
|
|
711 |
} |
|
|
712 |
} |
|
|
713 |
|
|
|
714 |
// |
|
|
715 |
// Fill smiley templates (or just the variables) with smileys |
|
|
716 |
// Either in a window or inline |
|
|
717 |
// |
|
|
718 |
function generate_smilies($mode, $page_id) |
|
|
719 |
{ |
|
|
720 |
global $db, $board_config, $template, $lang, $images, $theme, $phpEx, $phpbb_root_path; |
|
|
721 |
global $user_ip, $session_length, $starttime; |
|
|
722 |
global $userdata; |
|
|
723 |
|
|
|
724 |
$inline_columns = 4; |
|
|
725 |
$inline_rows = 5; |
|
|
726 |
$window_columns = 8; |
|
|
727 |
|
|
|
728 |
if ($mode == 'window') |
|
|
729 |
{ |
|
|
730 |
$userdata = session_pagestart($user_ip, $page_id); |
|
|
731 |
init_userprefs($userdata); |
|
|
732 |
|
|
|
733 |
$gen_simple_header = TRUE; |
|
|
734 |
|
|
|
735 |
$page_title = $lang['Emoticons']; |
|
|
736 |
include($phpbb_root_path . 'includes/page_header.'.$phpEx); |
|
|
737 |
|
|
|
738 |
$template->set_filenames(array( |
|
|
739 |
'smiliesbody' => 'posting_smilies.tpl') |
|
|
740 |
); |
|
|
741 |
} |
|
|
742 |
|
|
|
743 |
$sql = "SELECT emoticon, code, smile_url |
|
|
744 |
FROM " . SMILIES_TABLE . " |
|
|
745 |
ORDER BY smilies_id"; |
|
|
746 |
if ($result = $db->sql_query($sql)) |
|
|
747 |
{ |
|
|
748 |
$num_smilies = 0; |
|
|
749 |
$rowset = array(); |
|
|
750 |
while ($row = $db->sql_fetchrow($result)) |
|
|
751 |
{ |
|
|
752 |
if (empty($rowset[$row['smile_url']])) |
|
|
753 |
{ |
|
|
754 |
$rowset[$row['smile_url']]['code'] = str_replace("'", "\\'", str_replace('\\', '\\\\', $row['code'])); |
|
|
755 |
$rowset[$row['smile_url']]['emoticon'] = $row['emoticon']; |
|
|
756 |
$num_smilies++; |
|
|
757 |
} |
|
|
758 |
} |
|
|
759 |
|
|
|
760 |
if ($num_smilies) |
|
|
761 |
{ |
|
|
762 |
$smilies_count = ($mode == 'inline') ? min(19, $num_smilies) : $num_smilies; |
|
|
763 |
$smilies_split_row = ($mode == 'inline') ? $inline_columns - 1 : $window_columns - 1; |
|
|
764 |
|
|
|
765 |
$s_colspan = 0; |
|
|
766 |
$row = 0; |
|
|
767 |
$col = 0; |
|
|
768 |
|
|
|
769 |
while (list($smile_url, $data) = @each($rowset)) |
|
|
770 |
{ |
|
|
771 |
if (!$col) |
|
|
772 |
{ |
|
|
773 |
$template->assign_block_vars('smilies_row', array()); |
|
|
774 |
} |
|
|
775 |
|
|
|
776 |
$template->assign_block_vars('smilies_row.smilies_col', array( |
|
|
777 |
'SMILEY_CODE' => $data['code'], |
|
|
778 |
'SMILEY_IMG' => $board_config['smilies_path'] . '/' . $smile_url, |
|
|
779 |
'SMILEY_DESC' => $data['emoticon']) |
|
|
780 |
); |
|
|
781 |
|
|
|
782 |
$s_colspan = max($s_colspan, $col + 1); |
|
|
783 |
|
|
|
784 |
if ($col == $smilies_split_row) |
|
|
785 |
{ |
|
|
786 |
if ($mode == 'inline' && $row == $inline_rows - 1) |
|
|
787 |
{ |
|
|
788 |
break; |
|
|
789 |
} |
|
|
790 |
$col = 0; |
|
|
791 |
$row++; |
|
|
792 |
} |
|
|
793 |
else |
|
|
794 |
{ |
|
|
795 |
$col++; |
|
|
796 |
} |
|
|
797 |
} |
|
|
798 |
|
|
|
799 |
if ($mode == 'inline' && $num_smilies > $inline_rows * $inline_columns) |
|
|
800 |
{ |
|
|
801 |
$template->assign_block_vars('switch_smilies_extra', array()); |
|
|
802 |
|
|
|
803 |
$template->assign_vars(array( |
|
|
804 |
'L_MORE_SMILIES' => $lang['More_emoticons'], |
|
|
805 |
'U_MORE_SMILIES' => append_sid("posting.$phpEx?mode=smilies")) |
|
|
806 |
); |
|
|
807 |
} |
|
|
808 |
|
|
|
809 |
$template->assign_vars(array( |
|
|
810 |
'L_EMOTICONS' => $lang['Emoticons'], |
|
|
811 |
'L_CLOSE_WINDOW' => $lang['Close_window'], |
|
|
812 |
'S_SMILIES_COLSPAN' => $s_colspan) |
|
|
813 |
); |
|
|
814 |
} |
|
|
815 |
} |
|
|
816 |
|
|
|
817 |
if ($mode == 'window') |
|
|
818 |
{ |
|
|
819 |
$template->pparse('smiliesbody'); |
|
|
820 |
|
|
|
821 |
include($phpbb_root_path . 'includes/page_tail.'.$phpEx); |
|
|
822 |
} |
|
|
823 |
} |
|
|
824 |
|
|
|
825 |
/** |
|
|
826 |
* Called from within prepare_message to clean included HTML tags if HTML is |
|
|
827 |
* turned on for that post |
|
|
828 |
* @param array $tag Matching text from the message to parse |
|
|
829 |
*/ |
|
|
830 |
function clean_html($tag) |
|
|
831 |
{ |
|
|
832 |
global $board_config; |
|
|
833 |
|
|
|
834 |
if (empty($tag[0])) |
|
|
835 |
{ |
|
|
836 |
return ''; |
|
|
837 |
} |
|
|
838 |
|
|
|
839 |
$allowed_html_tags = preg_split('/, */', strtolower($board_config['allow_html_tags'])); |
|
|
840 |
$disallowed_attributes = '/^(?:style|on)/i'; |
|
|
841 |
|
|
|
842 |
// Check if this is an end tag |
|
|
843 |
preg_match('/<[^\w\/]*\/[\W]*(\w+)/', $tag[0], $matches); |
|
|
844 |
if (sizeof($matches)) |
|
|
845 |
{ |
|
|
846 |
if (in_array(strtolower($matches[1]), $allowed_html_tags)) |
|
|
847 |
{ |
|
|
848 |
return '</' . $matches[1] . '>'; |
|
|
849 |
} |
|
|
850 |
else |
|
|
851 |
{ |
|
|
852 |
return htmlspecialchars('</' . $matches[1] . '>'); |
|
|
853 |
} |
|
|
854 |
} |
|
|
855 |
|
|
|
856 |
// Check if this is an allowed tag |
|
|
857 |
if (in_array(strtolower($tag[1]), $allowed_html_tags)) |
|
|
858 |
{ |
|
|
859 |
$attributes = ''; |
|
|
860 |
if (!empty($tag[2])) |
|
|
861 |
{ |
|
|
862 |
preg_match_all('/[\W]*?(\w+)[\W]*?=[\W]*?(["\'])((?:(?!\2).)*)\2/', $tag[2], $test); |
|
|
863 |
for ($i = 0; $i < sizeof($test[0]); $i++) |
|
|
864 |
{ |
|
|
865 |
if (preg_match($disallowed_attributes, $test[1][$i])) |
|
|
866 |
{ |
|
|
867 |
continue; |
|
|
868 |
} |
|
|
869 |
$attributes .= ' ' . $test[1][$i] . '=' . $test[2][$i] . str_replace(array('[', ']'), array('[', ']'), htmlspecialchars($test[3][$i])) . $test[2][$i]; |
|
|
870 |
} |
|
|
871 |
} |
|
|
872 |
if (in_array(strtolower($tag[1]), $allowed_html_tags)) |
|
|
873 |
{ |
|
|
874 |
return '<' . $tag[1] . $attributes . '>'; |
|
|
875 |
} |
|
|
876 |
else |
|
|
877 |
{ |
|
|
878 |
return htmlspecialchars('<' . $tag[1] . $attributes . '>'); |
|
|
879 |
} |
|
|
880 |
} |
|
|
881 |
// Finally, this is not an allowed tag so strip all the attibutes and escape it |
|
|
882 |
else |
|
|
883 |
{ |
|
|
884 |
return htmlspecialchars('<' . $tag[1] . '>'); |
|
|
885 |
} |
|
|
886 |
} |
|
|
887 |
?> |