| <? | |
| if(file_exists('/www/global/lockdown')) { | |
| if($_COOKIE['4chan_auser'] && $_COOKIE['4chan_apass'] && ($_POST['mode']=='usrdel'||$_GET['mode']=='latest')) { | |
| // ok | |
| } | |
| else { | |
| die('Posting temporarily disabled. Come back later!<br/>—Team 4chan (uptime? what\'s that?)'); | |
| } | |
| } | |
| include_once "./yotsuba_config.php"; | |
| include("./postfilter.php"); | |
| include("./ads.php"); | |
| define('SQLLOGBAN', 'banned_users'); //Table (NOT DATABASE) used for holding banned users | |
| define('SQLLOGMOD', 'mod_users'); //Table (NOT DATABASE) used for holding mod users | |
| define('SQLLOGDEL', 'del_log'); //Table (NOT DATABASE) used for holding deletion log | |
| if(BOARD_DIR == 'test') { | |
| ini_set('display_errors', 1); | |
| } | |
| extract($_POST); | |
| extract($_GET); | |
| extract($_COOKIE); | |
| $id = intval($id); | |
| if(array_key_exists('upfile',$_FILES)) { | |
| $upfile_name=$_FILES["upfile"]["name"]; | |
| $upfile=$_FILES["upfile"]["tmp_name"]; | |
| } | |
| else { | |
| $upfile_name=$upfile=''; | |
| } | |
| $path = realpath("./").'/'.IMG_DIR; | |
| ignore_user_abort(TRUE); | |
| if(WORD_FILT&&file_exists("wf.php")){include_once("wf.php");} | |
| if(JANITOR_BOARD == 1) | |
| include_once '/www/global/plugins/broomcloset.php'; | |
| //mysql_board_connect(); | |
| // truncate $str to $max_lines lines and return $str and $abbr | |
| // where $abbr = whether or not $str was actually truncated | |
| function abbreviate($str,$max_lines) { | |
| if(!defined('MAX_LINES_SHOWN')) { | |
| if(defined('BR_CHECK')) { | |
| define('MAX_LINES_SHOWN', BR_CHECK); | |
| } else { | |
| define('MAX_LINES_SHOWN', 20); | |
| } | |
| $max_lines = MAX_LINES_SHOWN; | |
| } | |
| $lines = explode("<br />", $str); | |
| if(count($lines) > $max_lines) { | |
| $abbr = 1; | |
| $lines = array_slice($lines, 0, $max_lines); | |
| $str = implode("<br />", $lines); | |
| } else { | |
| $abbr = 0; | |
| } | |
| //close spans after abbreviating | |
| //XXX will not work with more html - use abbreviate_html from shiichan | |
| $str .= str_repeat("</span>", substr_count($str, "<span") - substr_count($str, "</span")); | |
| return array($str, $abbr); | |
| } | |
| // print $contents to $filename by using a temporary file and renaming it | |
| // (makes *.html and *.gz if USE_GZIP is on) | |
| function print_page($filename,$contents,$force_nogzip=0) { | |
| $gzip = (USE_GZIP == 1 && !$force_nogzip); | |
| $tempfile = tempnam(realpath(RES_DIR), "tmp"); //note: THIS actually creates the file | |
| file_put_contents($tempfile, $contents, FILE_APPEND); | |
| rename($tempfile, $filename); | |
| chmod($filename, 0664); //it was created 0600 | |
| if($gzip) { | |
| $tempgz = tempnam(realpath(RES_DIR), "tmp"); //note: THIS actually creates the file | |
| $gzfp = gzopen($tempgz, "w"); | |
| gzwrite($gzfp, $contents); | |
| gzclose($gzfp); | |
| rename($tempgz, $filename . '.gz'); | |
| chmod($filename . '.gz', 0664); //it was created 0600 | |
| } | |
| } | |
| function file_get_contents_cached($filename) { | |
| static $cache = array(); | |
| if(isset($cache[$filename])) | |
| return $cache[$filename]; | |
| //$cache[$filename] = file_get_contents($filename); | |
| return $cache[$filename]; | |
| } | |
| function blotter_contents() { | |
| static $cache; | |
| if(isset($cache)) return $cache; | |
| $ret = ""; | |
| $topN = 4; //how many lines to print | |
| $bl_lines = file( BLOTTER_PATH ); | |
| $bl_top = array_slice($bl_lines, 0, $topN); | |
| $date = ""; | |
| foreach($bl_top as $line) { | |
| if(!$date) { | |
| $lineparts = explode(' - ', $line); | |
| if(strpos($lineparts[0],'<font')!==FALSE) { | |
| $dateparts = explode('>', $lineparts[0]); | |
| $date = $dateparts[1]; | |
| $date = "<li><font color=\"red\">Blotter updated: $date</font>"; | |
| } | |
| else { | |
| $date = $lineparts[0]; | |
| $date = "<li>Blotter updated: $date"; | |
| } | |
| } | |
| $line = trim($line); | |
| $line = str_replace("\\", "\\\\", $line); | |
| $line = str_replace("'", "\'", $line); | |
| $ret .= "'<li>$line'+\n"; | |
| } | |
| $ret .= "''"; | |
| $cache = array($date,$ret); | |
| return array($date,$ret); | |
| } | |
| // insert into the rapidsearch queue | |
| function rapidsearch_insert($board, $no, $body) { | |
| $board = mysql_real_escape_string($board); | |
| $no = (int)$no; | |
| $body = mysql_real_escape_string($body); | |
| mysql_global_do("INSERT INTO rs.rsqueue (`board`,`no`,`ts`,`com`) VALUES ('$board',$no,NOW(),'$body')"); | |
| } | |
| function find_match_and_prefix($regex, $str, $off, &$match) | |
| { | |
| if (!preg_match($regex, $str, $m, PREG_OFFSET_CAPTURE, $off)) return FALSE; | |
| $moff = $m[0][1]; | |
| $match = array(substr($str, $off, $moff-$off), $m[0][0]); | |
| return TRUE; | |
| } | |
| function spoiler_parse($com) { | |
| if (!find_match_and_prefix("/\[spoiler\]/", $com, 0, $m)) return $com; | |
| $bl = strlen("[spoiler]"); $el = $bl+1; | |
| $st = '<span class="spoiler" onmouseover="this.style.color=\'#FFF\';" onmouseout="this.style.color=this.style.backgroundColor=\'#000\'" style="color:#000;background:#000">'; | |
| $et = '</span>'; | |
| $ret = $m[0].$st; $lev = 1; | |
| $off = strlen($m[0]) + $bl; | |
| while (1) { | |
| if (!find_match_and_prefix("@\[/?spoiler\]@", $com, $off, $m)) break; | |
| list($txt, $tag) = $m; | |
| $ret .= $txt; | |
| $off += strlen($txt) + strlen($tag); | |
| if ($tag == "[spoiler]") { | |
| $ret .= $st; | |
| $lev++; | |
| } else if ($lev) { | |
| $ret .= $et; | |
| $lev--; | |
| } | |
| } | |
| $ret .= substr($com, $off, strlen($com)-$off); | |
| $ret .= str_repeat($et, $lev); | |
| return $ret; | |
| } | |
| //rebuild the bans in array $boards | |
| function rebuild_bans($boards) { | |
| $cmd = "nohup /usr/local/bin/suid_run_global bin/rebuildbans $boards >/dev/null 2>&1 &"; | |
| exec($cmd); | |
| } | |
| function append_ban($board, $ip) { | |
| $cmd = "nohup /usr/local/bin/suid_run_global bin/appendban $board $ip >/dev/null 2>&1 &"; | |
| exec($cmd); | |
| } | |
| // check whether the current user can perform $action (on $no, for some actions) | |
| // board-level access is cached in $valid_cache. | |
| function valid($action='moderator', $no=0){ | |
| static $valid_cache; // the access level of the user | |
| $access_level = array('none' => 0, 'janitor' => 1, 'janitor_this_board' => 2, 'moderator' => 5, 'manager' => 10, 'admin' => 20); | |
| if(!isset($valid_cache)) { | |
| $valid_cache = $access_level['none']; | |
| if(isset($_COOKIE['4chan_auser'])&&isset($_COOKIE['4chan_apass'])){ | |
| $user = mysql_real_escape_string($_COOKIE['4chan_auser']); | |
| $pass = mysql_real_escape_string($_COOKIE['4chan_apass']); | |
| } | |
| if($user&&$pass) { | |
| $result=mysql_global_call("SELECT allow,deny FROM ".SQLLOGMOD." WHERE username='$user' and password='$pass'"); | |
| list($allow,$deny) = mysql_fetch_row($result); | |
| mysql_free_result($result); | |
| if($allow) { | |
| $allows = explode(',', $allow); | |
| $seen_janitor_token = false; | |
| // each token can increase the access level, | |
| // except that we only know that they're a moderator or a janitor for another board | |
| // AFTER we read all the tokens | |
| foreach($allows as $token) { | |
| if($token == 'janitor') | |
| $seen_janitor_token = true; | |
| else if($token == 'manager' && $valid_cache < $access_level['manager']) | |
| $valid_cache = $access_level['manager']; | |
| else if($token == 'admin' && $valid_cache < $access_level['admin']) | |
| $valid_cache = $access_level['admin']; | |
| else if(($token == BOARD_DIR || $token == 'all') && $valid_cache < $access_level['janitor_this_board']) | |
| $valid_cache = $access_level['janitor_this_board']; // or could be moderator, will be increased in next step | |
| } | |
| // now we can set moderator or janitor status | |
| if(!$seen_janitor_token) { | |
| if($valid_cache < $access_level['moderator']) | |
| $valid_cache = $access_level['moderator']; | |
| } | |
| else { | |
| if($valid_cache < $access_level['janitor']) | |
| $valid_cache = $access_level['janitor']; | |
| } | |
| if($deny) { | |
| $denies = explode(',', $deny); | |
| if(in_array(BOARD_DIR,$denies)) { | |
| $valid_cache = $access_level['none']; | |
| } | |
| } | |
| } | |
| } | |
| } | |
| switch($action) { | |
| case 'moderator': | |
| return $valid_cache >= $access_level['moderator']; | |
| case 'textonly': | |
| return $valid_cache >= $access_level['moderator']; | |
| case 'janitor_board': | |
| return $valid_cache >= $access_level['janitor']; | |
| case 'delete': | |
| if($valid_cache >= $access_level['janitor_this_board']) { | |
| return true; | |
| } | |
| // if they're a janitor on another board, check for illegal post unlock | |
| else if($valid_cache >= $access_level['janitor']) { | |
| $query=mysql_global_do("SELECT COUNT(*) from reports WHERE board='".BOARD_DIR."' AND no=$no AND cat=2"); | |
| $illegal_count = mysql_result($query, 0, 0); | |
| mysql_free_result($query); | |
| return $illegal_count >= 3; | |
| } | |
| case 'reportflood': | |
| return $valid_cache >= $access_level['janitor']; | |
| case 'floodbypass': | |
| return $valid_cache >= $access_level['moderator']; | |
| default: // unsupported action | |
| return false; | |
| } | |
| } | |
| function sticky_post($no, $position) { | |
| global $log; log_cache(); | |
| $post_sticknum="202701010000".sprintf("%02d",$position); | |
| $log[$no]['root'] = $post_sticknum; | |
| $log[$no]['sticky'] = '1'; | |
| mysql_board_call('UPDATE '.SQLLOG." SET sticky='1'". | |
| ", root='".$post_sticknum."'". | |
| " WHERE no='".mysql_real_escape_string($no)."'"); | |
| } | |
| function permasage_post($no) { | |
| global $log; log_cache(); | |
| $log[$no]['permasage'] = '1'; | |
| mysql_board_call('UPDATE '.SQLLOG." SET permasage='1'". | |
| " WHERE no='".mysql_real_escape_string($no)."'"); | |
| } | |
| function rebuildqueue_create_table() { | |
| $sql = <<<EOSQL | |
| CREATE TABLE `rebuildqueue` ( | |
| `board` char(4) NOT NULL, | |
| `no` int(11) NOT NULL, | |
| `ownedby` int(11) NOT NULL default '0', | |
| `ts` timestamp NOT NULL default CURRENT_TIMESTAMP on update CURRENT_TIMESTAMP, | |
| PRIMARY KEY (`board`,`no`,`ownedby`) | |
| ) | |
| EOSQL; | |
| mysql_board_call($sql); | |
| } | |
| function rebuildqueue_add($no) { | |
| $board = BOARD_DIR; | |
| $no = (int)$no; | |
| for($i=0;$i<2;$i++) | |
| if(!mysql_board_call("INSERT IGNORE INTO rebuildqueue (board,no) VALUES ('$board','$no')")) | |
| rebuildqueue_create_table(); | |
| else | |
| break; | |
| } | |
| function rebuildqueue_remove($no) { | |
| $board = BOARD_DIR; | |
| $no = (int)$no; | |
| for($i=0;$i<2;$i++) | |
| if(!mysql_board_call("DELETE FROM rebuildqueue WHERE board='$board' AND no='$no'")) | |
| rebuildqueue_create_table(); | |
| else | |
| break; | |
| } | |
| function rebuildqueue_take_all() { | |
| $board = BOARD_DIR; | |
| $uid = mt_rand(1, mt_getrandmax()); | |
| for($i=0;$i<2;$i++) | |
| if(!mysql_board_call("UPDATE rebuildqueue SET ownedby=$uid,ts=ts WHERE board='$board' AND ownedby=0")) | |
| rebuildqueue_create_table(); | |
| else | |
| break; | |
| $q = mysql_board_call("SELECT no FROM rebuildqueue WHERE board='$board' AND ownedby=$uid"); | |
| $posts = array(); | |
| while($post=mysql_fetch_assoc($q)) | |
| $posts[] = $post['no']; | |
| return $posts; | |
| } | |
| function iplog_add($board, $no, $ip) { | |
| $board = mysql_real_escape_string($board); | |
| $no = (int)$no; | |
| $ip = mysql_real_escape_string($ip); | |
| mysql_board_call("INSERT INTO iplog (board,no,ip) VALUES ('$board',$no,'$ip')"); | |
| } | |
| // build a structure out of all the posts in the database. | |
| // this lets us replace a LOT of queries with a simple array access. | |
| // it only builds the first time it was called. | |
| // rather than calling log_cache(1) to rebuild everything, | |
| // you should just manipulate the structure directly. | |
| function log_cache($invalidate=0) { | |
| global $log, $ipcount, $mysql_unbuffered_reads, $lastno; | |
| $ips = array(); | |
| $threads = array(); // no's | |
| if($invalidate==0 && isset($log)) return; | |
| $log = array(); // no -> [ data ] | |
| //mysql_board_call("SET read_buffer_size=1048576"); | |
| $mysql_unbuffered_reads = 1; | |
| //$query = mysql_board_call("SELECT * FROM ".SQLLOG); | |
| $offset = 0; | |
| $lastno = 0; | |
| //while($row = mysql_fetch_assoc($query)) { | |
| if($row['no'] > $lastno) $lastno = $row['no']; | |
| $ips[$row['host']] = 1; | |
| // initialize log row if necessary | |
| if( !isset($log[$row['no']]) ) { | |
| $log[$row['no']] = $row; | |
| $log[$row['no']]['children'] = array(); | |
| } else { // otherwise merge it with $row | |
| foreach($row as $key=>$val) | |
| $log[$row['no']][$key] = $val; | |
| } | |
| // if this is a reply | |
| if($row['resto']) { | |
| // initialize whatever we need to | |
| if( !isset($log[$row['resto']]) ) | |
| // $log[$row['resto']] = array(); | |
| if( !isset($log[$row['resto']]['children']) ) | |
| $log[$row['resto']]['children'] = array(); | |
| // add this post to list of children | |
| $log[$row['resto']]['children'][$row['no']] = 1; | |
| if($row['fsize']) { | |
| if(!isset($log[$row['resto']]['imgreplycount'])) | |
| $log[$row['resto']]['imgreplycount'] = 0; | |
| else | |
| $log[$row['resto']]['imgreplycount']++; | |
| } | |
| } /*else { | |
| $threads[] = $row['no']; | |
| }*/ | |
| } | |
| //$query = mysql_board_call("SELECT no FROM ".SQLLOG." WHERE root>0 order by root desc"); | |
| while($row = mysql_fetch_assoc($query)) { | |
| if(isset($log[$row['no']]) && $log[$row['no']]['resto']==0) | |
| $threads[] = $row['no']; | |
| } | |
| $log['THREADS'] = $threads; | |
| $mysql_unbuffered_reads = 0; | |
| // calculate old-status for PAGE_MAX mode | |
| if(EXPIRE_NEGLECTED != 1) { | |
| rsort($threads, SORT_NUMERIC); | |
| $threadcount = count($threads); | |
| if(PAGE_MAX > 0) // the lowest 5% of maximum threads get marked old | |
| for($i = floor(0.95*PAGE_MAX*PAGE_DEF); $i < $threadcount; $i++) { | |
| if(!$log[$threads[$i]]['sticky'] && EXPIRE_NEGLECTED != 1) | |
| $log[$threads[$i]]['old'] = 1; | |
| } | |
| else { // threads w/numbers below 5% of LOG_MAX get marked old | |
| foreach($threads as $thread) { | |
| if($lastno-LOG_MAX*0.95>$thread) | |
| if(!$log[$thread]['sticky']) | |
| $log[$thread]['old'] = 1; | |
| } | |
| } | |
| } | |
| $ipcount = count($ips); | |
| //} | |
| // deletes a post from the database | |
| // imgonly: whether to just delete the file or to delete from the database as well | |
| // automatic: always delete regardless of password/admin (for self-pruning) | |
| // children: whether to delete just the parent post of a thread or also delete the children | |
| // die: whether to die on error | |
| // careful, setting children to 0 could leave orphaned posts. | |
| function delete_post($resno, $pwd, $imgonly=0, $automatic=0, $children=1, $die=1) { | |
| global $log, $path; | |
| log_cache(); | |
| $resno = intval($resno); | |
| // get post info | |
| if(!isset($log[$resno])){if ($die) error("Can't find the post $resno.");} | |
| $row=$log[$resno]; | |
| // check password- if not ok, check admin status (and set $admindel if allowed) | |
| $delete_ok = ( $automatic || (substr(md5($pwd),2,8) == $row['pwd']) || ($row['host'] == $_SERVER['REMOTE_ADDR']) ); | |
| if( ($pwd==ADMIN_PASS || $pwd==ADMIN_PASS2) ) { $delete_ok = $admindel = valid('delete', $resno); } | |
| if(!$delete_ok) error(S_BADDELPASS); | |
| // check ghost bumping | |
| if(!isset($admindel) || !$admindel) { | |
| if(BOARD_DIR == 'a' && (int)$row['time'] > (time() - 25) && $row['email'] != 'sage') { | |
| $ghostdump = var_export(array( | |
| 'server'=>$_SERVER, | |
| 'post'=>$_POST, | |
| 'cookie'=>$_COOKIE, | |
| 'row'=>$row),true); | |
| //file_put_contents('ghostbump.'.time(),$ghostdump); | |
| } | |
| } | |
| if(isset($admindel) && $admindel) { // extra actions for admin user | |
| $auser = mysql_escape_string($_COOKIE['4chan_auser']); | |
| $adfsize=($row['fsize']>0)?1:0; | |
| $adname=str_replace('</span> <span class="postertrip">!','#',$row['name']); | |
| if($imgonly) { $imgonly=1; } else { $imgonly=0; } | |
| $row['sub'] = mysql_escape_string($row['sub']); | |
| $row['com'] = mysql_escape_string($row['com']); | |
| $row['filename'] = mysql_escape_string($row['filename']); | |
| mysql_global_do("INSERT INTO ".SQLLOGDEL." (imgonly,postno,board,name,sub,com,img,filename,admin) values('$imgonly','$resno','".SQLLOG."','$adname','{$row['sub']}','{$row['com']}','$adfsize','{$row['filename']}','$auser')"); | |
| } | |
| if($row['resto']==0 && $children && !$imgonly) // select thread and children | |
| $result=mysql_board_call("select no,resto,tim,ext from ".SQLLOG." where no=$resno or resto=$resno"); | |
| else // just select the post | |
| $result=mysql_board_call("select no,resto,tim,ext from ".SQLLOG." where no=$resno"); | |
| while($delrow=mysql_fetch_array($result)) { | |
| // delete | |
| $delfile = $path.$delrow['tim'].$delrow['ext']; //path to delete | |
| $delthumb = THUMB_DIR.$delrow['tim'].'s.jpg'; | |
| if(is_file($delfile)) unlink($delfile); // delete image | |
| if(is_file($delthumb)) unlink($delthumb); // delete thumb | |
| if(OEKAKI_BOARD == 1 && is_file($path.$delrow['tim'].'.pch')) | |
| unlink($path.$delrow['tim'].'.pch'); // delete oe animation | |
| if(!$imgonly){ // delete thread page & log_cache row | |
| if($delrow['resto']) | |
| unset( $log[$delrow['resto']]['children'][$delrow['no']] ); | |
| unset( $log[$delrow['no']] ); | |
| $log['THREADS'] = array_diff($log['THREADS'], array($delrow['no'])); // remove from THREADS | |
| mysql_global_do("DELETE FROM reports WHERE no=".$delrow['no']); // clear reports | |
| if(USE_GZIP == 1) { | |
| @unlink(RES_DIR.$delrow['no'].PHP_EXT); | |
| @unlink(RES_DIR.$delrow['no'].PHP_EXT.'.gz'); | |
| } | |
| else { | |
| @unlink(RES_DIR.$delrow['no'].PHP_EXT); | |
| } | |
| } | |
| } | |
| //delete from DB | |
| if($row['resto']==0 && $children && !$imgonly) // delete thread and children | |
| $result=mysql_board_call("delete from ".SQLLOG." where no=$resno or resto=$resno"); | |
| elseif(!$imgonly) // just delete the post | |
| $result=mysql_board_call("delete from ".SQLLOG." where no=$resno"); | |
| return $row['resto']; // so the caller can know what pages need to be rebuilt | |
| } | |
| // purge old posts | |
| // should be called whenever a new post is added. | |
| function trim_db() { | |
| if(JANITOR_BOARD == 1) return; | |
| log_cache(); | |
| $maxposts = LOG_MAX; | |
| // max threads = max pages times threads-per-page | |
| $maxthreads = (PAGE_MAX > 0)?(PAGE_MAX * PAGE_DEF):0; | |
| // New max-page method | |
| if($maxthreads) { | |
| $exp_order = 'no'; | |
| if(EXPIRE_NEGLECTED == 1) $exp_order = 'root'; | |
| logtime('trim_db before select threads'); | |
| $result = mysql_board_call("SELECT no FROM ".SQLLOG." WHERE sticky=0 AND resto=0 ORDER BY $exp_order ASC"); | |
| logtime('trim_db after select threads'); | |
| $threadcount = mysql_num_rows($result); | |
| while($row=mysql_fetch_array($result) and $threadcount >= $maxthreads) { | |
| delete_post($row['no'], 'trim', 0, 1); // imgonly=0, automatic=1, children=1 | |
| $threadcount--; | |
| } | |
| mysql_free_result($result); | |
| // Original max-posts method (note: cleans orphaned posts later than parent posts) | |
| } else { | |
| // make list of stickies | |
| $stickies = array(); // keys are stickied thread numbers | |
| $result = mysql_board_call("SELECT no from ".SQLLOG." where sticky=1 and resto=0"); | |
| while($row=mysql_fetch_array($result)) { | |
| $stickies[ $row['no'] ] = 1; | |
| } | |
| $result = mysql_board_call("SELECT no,resto,sticky FROM ".SQLLOG." ORDER BY no ASC"); | |
| $postcount = mysql_num_rows($result); | |
| while($row=mysql_fetch_array($result) and $postcount >= $maxposts) { | |
| // don't delete if this is a sticky thread | |
| if($row['sticky'] == 1) continue; | |
| // don't delete if this is a REPLY to a sticky | |
| if($row['resto'] != 0 && $stickies[ $row['resto'] ] == 1) continue; | |
| delete_post($row['no'], 'trim', 0, 1, 0); // imgonly=0, automatic=1, children=0 | |
| $postcount--; | |
| } | |
| mysql_free_result($result); | |
| } | |
| } | |
| //resno - thread page to update (no of thread OP) | |
| //rebuild - don't rebuild page indexes | |
| function updatelog($resno=0,$rebuild=0){ | |
| global $log,$path; | |
| set_time_limit(60); | |
| if($_SERVER['REQUEST_METHOD']=='GET' && !valid()) die(''); // anti ddos | |
| log_cache(); | |
| $imgdir = ((USE_SRC_CGI==1)?str_replace('src','src.cgi',IMG_DIR2):IMG_DIR2); | |
| if(defined('INTERSTITIAL_LINK')) $imgdir .= INTERSTITIAL_LINK; | |
| $thumbdir = THUMB_DIR2; | |
| $imgurl = DATA_SERVER; | |
| $resno=(int)$resno; | |
| if($resno){ | |
| if(!isset($log[$resno])) { | |
| updatelog(0,$rebuild); // the post didn't exist, just rebuild the indexes | |
| return; | |
| } | |
| else if($log[$resno]['resto']) { | |
| updatelog($log[$resno]['resto'],$rebuild); // $resno is a reply, try rebuilding the parent | |
| return; | |
| } | |
| } | |
| if($resno){ | |
| $treeline = array($resno); logtime("Formatting thread page"); | |
| //if(!$treeline=mysql_board_call("select * from ".SQLLOG." where root>0 and no=".$resno." order by root desc")){echo S_SQLFAIL;} | |
| }else{ | |
| $treeline = $log['THREADS']; logtime("Formatting index page"); | |
| //if(!$treeline=mysql_board_call("select * from ".SQLLOG." where root>0 order by root desc")){echo S_SQLFAIL;} | |
| } | |
| $counttree=count($treeline); | |
| //$counttree=mysql_num_rows($treeline); | |
| if(!$counttree){ | |
| $logfilename=PHP_SELF2; | |
| $dat=''; | |
| head($dat,$resno); | |
| form($dat,$resno); | |
| print_page($logfilename, $dat); | |
| } | |
| if(UPDATE_THROTTLING >= 1) { | |
| $update_start = time(); | |
| touch("updatelog.stamp", $update_start); | |
| $low_priority = false; | |
| clearstatcache(); | |
| if(@filemtime(PHP_SELF) > $update_start-UPDATE_THROTTLING) { | |
| $low_priority = true; | |
| //touch($update_start . ".lowprio"); | |
| } | |
| else { | |
| touch(PHP_SELF,$update_start); | |
| } | |
| // $mt = @filemtime(PHP_SELF); | |
| // touch($update_start . ".$mt.highprio"); | |
| } | |
| // if we're using CACHE_TTL method | |
| if(CACHE_TTL >= 1) { | |
| if($resno) { | |
| $logfilename = RES_DIR.$resno.PHP_EXT; | |
| } | |
| else { | |
| $logfilename = PHP_SELF2; | |
| } | |
| //if(USE_GZIP == 1) $logfilename .= '.html'; | |
| // if the file has been made and it's younger than CACHE_TTL seconds ago | |
| clearstatcache(); | |
| if(file_exists($logfilename) && filemtime($logfilename) > (time() - CACHE_TTL)) { | |
| // save the post to be rebuilt later | |
| rebuildqueue_add($resno); | |
| // if it's a thread, try again on the indexes | |
| if($resno && !$rebuild) updatelog(); | |
| // and we don't do any more rebuilding on this request | |
| return true; | |
| } | |
| else { | |
| // we're gonna update it now, so take it out of the queue | |
| rebuildqueue_remove($resno); | |
| // and make sure nobody else starts trying to update it because it's too old | |
| touch($logfilename); | |
| } | |
| } | |
| for($page=0;$page<$counttree;$page+=PAGE_DEF){ | |
| $dat=''; | |
| head($dat,$resno); | |
| form($dat,$resno); | |
| if(!$resno){ | |
| $st = $page; | |
| } | |
| $dat.='<form name="delform" action="'; | |
| $dat.=PHP_SELF_ABS.'" method=POST>'; | |
| for($i = $st; $i < $st+PAGE_DEF; $i++){ | |
| if(UPDATE_THROTTLING >= 1) { | |
| clearstatcache(); | |
| if($low_priority && @filemtime("updatelog.stamp") > $update_start) { | |
| //touch($update_start . ".throttled"); | |
| return; | |
| } | |
| if(rand(0,15)==0) return; | |
| } | |
| list($_unused,$no) = each($treeline); | |
| //list($no,$sticky,$permasage,$closed,$now,$name,$email,$sub,$com,$host,$pwd,$filename,$ext,$w,$h,$tn_w,$tn_h,$tim,$time,$md5,$fsize,$root,$resto)=mysql_fetch_row($treeline); | |
| if(!$no){break;} | |
| extract($log[$no]); | |
| //if(!$resno&&!file_exists(RES_DIR.$no.PHP_EXT)) { updatelog($no); break; } // uhh | |
| //POST FILTERING | |
| if(JANITOR_BOARD == 1) { | |
| $name = broomcloset_capcode($name); | |
| } | |
| if($email) $name = "<a href=\"mailto:$email\" class=\"linkmail\">$name</a>"; | |
| if(strpos($sub,"SPOILER<>")===0) { | |
| $sub = substr($sub,strlen("SPOILER<>")); //trim out SPOILER<> | |
| $spoiler = 1; | |
| } else $spoiler = 0; | |
| $com = auto_link($com,$resno); | |
| if(!$resno) list($com,$abbreviated) = abbreviate($com, MAX_LINES_SHOWN); | |
| if(isset($abbreviated) && $abbreviated) $com .= "<br /><span class=\"abbr\">Comment too long. Click <a href=\"".RES_DIR.($resto?$resto:$no).PHP_EXT."#$no\">here</a> to view the full text.</span>"; | |
| // Picture file name | |
| $img = $path.$tim.$ext; | |
| $displaysrc = $imgdir.$tim.$ext; | |
| $linksrc = ((USE_SRC_CGI==1)?(str_replace(".cgi","",$imgdir).$tim.$ext):$displaysrc); | |
| if(defined('INTERSTITIAL_LINK')) $linksrc = str_replace(INTERSTITIAL_LINK,"",$linksrc); | |
| $src = IMG_DIR.$tim.$ext; | |
| $longname = $filename.$ext; | |
| if (strlen($filename)>40) { | |
| $shortname = substr($filename, 0, 40)."(...)".$ext; | |
| } else { | |
| $shortname = $longname; | |
| } | |
| // img tag creation | |
| $imgsrc = ""; | |
| if($ext){ | |
| // turn the 32-byte ascii md5 into a 24-byte base64 md5 | |
| $shortmd5 = base64_encode(pack("H*", $md5)); | |
| if ($fsize >= 1048576) { $size = round(($fsize/1048576),2)." M"; | |
| } else if ($fsize >= 1024) { $size = round($fsize/1024)." K"; | |
| } else { $size = $fsize." "; } | |
| if(!$tn_w && !$tn_h && $ext==".gif"){ | |
| $tn_w=$w; | |
| $tn_h=$h; | |
| } | |
| if($spoiler) { | |
| $size= "Spoiler Image, $size"; | |
| $imgsrc = "<br><a href=\"".$displaysrc."\" target=_blank><img src=\"".SPOILER_THUMB."\" border=0 align=left hspace=20 alt=\"".$size."B\" md5=\"$shortmd5\"></a>"; | |
| } elseif($tn_w && $tn_h){//when there is size... | |
| if(@is_file(THUMB_DIR.$tim.'s.jpg')){ | |
| $imgsrc = "<br><a href=\"".$displaysrc."\" target=_blank><img src=".$thumbdir.$tim.'s.jpg'." border=0 align=left width=$tn_w height=$tn_h hspace=20 alt=\"".$size."B\" md5=\"$shortmd5\"></a>"; | |
| }else{ | |
| $imgsrc = "<a href=\"".$displaysrc."\" target=_blank><span class=\"tn_thread\" title=\"".$size."B\">Thumbnail unavailable</span></a>"; | |
| } | |
| }else{ | |
| if(@is_file(THUMB_DIR.$tim.'s.jpg')){ | |
| $imgsrc = "<br><a href=\"".$displaysrc."\" target=_blank><img src=".$thumbdir.$tim.'s.jpg'." border=0 align=left hspace=20 alt=\"".$size."B\" md5=\"$shortmd5\"></a>"; | |
| }else{ | |
| $imgsrc = "<a href=\"".$displaysrc."\" target=_blank><span class=\"tn_thread\" title=\"".$size."B\">Thumbnail unavailable</span></a>"; | |
| } | |
| } | |
| if (!is_file($src)) { | |
| $dat.='<img src="'.$imgurl.'filedeleted.gif" alt="File deleted.">'; | |
| } else { | |
| $dimensions=($ext=='.pdf')?'PDF':"{$w}x{$h}"; | |
| if ($resno) { | |
| $dat.="<span class=\"filesize\">".S_PICNAME."<a href=\"$linksrc\" target=\"_blank\">$time$ext</a>-(".$size."B, ".$dimensions.", <span title=\"".$longname."\">".$shortname."</span>)</span>".$imgsrc; | |
| } else { | |
| $dat.="<span class=\"filesize\">".S_PICNAME."<a href=\"$linksrc\" target=\"_blank\">$time$ext</a>-(".$size."B, ".$dimensions.")</span>".$imgsrc; | |
| } | |
| } | |
| } | |
| // Main creation | |
| $dat.="<a name=\"$resno\"></a>\n<input type=checkbox name=\"$no\" value=delete><span class=\"filetitle\">$sub</span> \n"; | |
| $dat.="<span class=\"postername\">$name</span> $now <span id=\"nothread$no\">"; | |
| if($sticky==1) { | |
| $stickyicon=' <img src="'.$imgurl.'sticky.gif" alt="sticky"> '; | |
| } else { $stickyicon=""; } | |
| if($closed==1) { | |
| $stickyicon .= ' <img src="'.$imgurl.'closed.gif" alt="closed"> '; | |
| } | |
| if(PARTY==1) { | |
| $dat .= "<img src='http://img.4chan.org/xmashat.gif' style='position:absolute;margin-top:-100px;left:0px;'>"; | |
| } | |
| if($resno) { | |
| $dat.="<a href=\"#$no\" class=\"quotejs\">No.</a><a href=\"javascript:quote('$no')\" class=\"quotejs\">$no</a> $stickyicon "; | |
| } else { | |
| $dat.="<a href=\"".RES_DIR.$no.PHP_EXT."#".$no."\" class=\"quotejs\">No.</a><a href=\"".RES_DIR.$no.PHP_EXT."#q".$no."\" class=\"quotejs\">$no</a> $stickyicon [<a href=\"".RES_DIR.$no.PHP_EXT."\">".S_REPLY."</a>]"; | |
| } | |
| $dat.="</span>\n<blockquote>$com</blockquote>"; | |
| // Deletion pending | |
| if(isset($log[$no]['old'])) $dat.="<span class=\"oldpost\">".S_OLD."</span><br>\n"; | |
| $resline = $log[$no]['children']; | |
| ksort($resline); | |
| $countres=count($log[$no]['children']); | |
| $t=0; | |
| if($sticky==1) { | |
| $disam=1; | |
| } elseif(defined('REPLIES_SHOWN')) { | |
| $disam=REPLIES_SHOWN; | |
| } else { | |
| $disam=5; | |
| } | |
| $s=$countres - $disam; | |
| $cur=1; | |
| while ($s >= $cur) { | |
| list($row) = each($resline); | |
| if($log[$row]["fsize"]!=0) { $t++; } | |
| $cur++; | |
| } | |
| if ($countres!=0) reset($resline); | |
| if(!$resno){ | |
| if ($s<2) { $posts=" post"; } else { $posts=" posts"; } | |
| if ($t<2) { $replies="reply"; } else { $replies="replies"; } | |
| if(($s>0)&&($t==0)){ | |
| $dat.="<span class=\"omittedposts\">".$s.$posts." omitted. Click Reply to view.</span>\n"; | |
| } elseif (($s>0)&&($t>0)) { | |
| $dat.="<span class=\"omittedposts\">".$s.$posts." and ".$t." image ".$replies." omitted. Click Reply to view.</span>\n"; | |
| } | |
| }else{$s=0;} | |
| while(list($resrow)=each($resline)){ | |
| if($s>0){$s--;continue;} | |
| //list($no,$sticky,$permasage,$closed,$now,$name,$email,$sub,$com,$host,$pwd,$filename,$ext,$w,$h,$tn_w,$tn_h,$tim,$time,$md5,$fsize,$root,$resto)=$resrow; | |
| extract($log[$resrow]); | |
| if(!$no){break;} | |
| //POST FILTERING | |
| if(JANITOR_BOARD == 1) { | |
| $name = broomcloset_capcode($name); | |
| } | |
| if($email) $name = "<a href=\"mailto:$email\" class=\"linkmail\">$name</a>"; | |
| if(strpos($sub,"SPOILER<>")===0) { | |
| $sub = substr($sub,strlen("SPOILER<>")); //trim out SPOILER<> | |
| $spoiler = 1; | |
| } else $spoiler = 0; | |
| $com = auto_link($com,$resno); | |
| if(!$resno) list($com,$abbreviated) = abbreviate($com, MAX_LINES_SHOWN); | |
| if(isset($abbreviated)&&$abbreviated) $com .= "<br /><span class=\"abbr\">Comment too long. Click <a href=\"".RES_DIR.($resto?$resto:$no).PHP_EXT."#$no\">here</a> to view the full text.</span>"; | |
| // Picture file name | |
| $r_img = $path.$tim.$ext; | |
| $r_displaysrc = $imgdir.$tim.$ext; | |
| $r_linksrc = ((USE_SRC_CGI==1)?(str_replace(".cgi","",$imgdir).$tim.$ext):$r_displaysrc); | |
| if(defined('INTERSTITIAL_LINK')) $r_linksrc = str_replace(INTERSTITIAL_LINK,"",$r_linksrc); | |
| $r_src = IMG_DIR.$tim.$ext; | |
| $longname = $filename.$ext; | |
| if (strlen($filename)>30) { | |
| $shortname = substr($filename, 0, 30)."(...)".$ext; | |
| } else { | |
| $shortname = $longname; | |
| } | |
| // img tag creation | |
| $r_imgsrc = ""; | |
| if($ext){ | |
| // turn the 32-byte ascii md5 into a 24-byte base64 md5 | |
| $shortmd5 = base64_encode(pack("H*", $md5)); | |
| if ($fsize >= 1048576) { $size = round(($fsize/1048576),2)." M"; | |
| } else if ($fsize >= 1024) { $size = round($fsize/1024)." K"; | |
| } else { $size = $fsize." "; } | |
| if(!$tn_w && !$tn_h && $ext==".gif"){ | |
| $tn_w=$w; | |
| $tn_h=$h; | |
| } | |
| if($spoiler) { | |
| $size= "Spoiler Image, $size"; | |
| $r_imgsrc = "<br><a href=\"".$r_displaysrc."\" target=_blank><img src=\"".SPOILER_THUMB."\" border=0 align=left hspace=20 alt=\"".$size."B\" md5=\"$shortmd5\"></a>"; | |
| } | |
| elseif($tn_w && $tn_h){//when there is size... | |
| if(@is_file(THUMB_DIR.$tim.'s.jpg')){ | |
| $r_imgsrc = "<br><a href=\"".$r_displaysrc."\" target=_blank><img src=".$thumbdir.$tim.'s.jpg'." border=0 align=left width=$tn_w height=$tn_h hspace=20 alt=\"".$size."B\" md5=\"$shortmd5\"></a>"; | |
| }else{ | |
| $r_imgsrc = "<a href=\"".$r_displaysrc."\" target=_blank><span class=\"tn_reply\" title=\"".$size."B\">Thumbnail unavailable</span></a>"; | |
| } | |
| }else{ | |
| if(@is_file(THUMB_DIR.$tim.'s.jpg')){ | |
| $r_imgsrc = "<br><a href=\"".$r_displaysrc."\" target=_blank><img src=".$thumbdir.$tim.'s.jpg'." border=0 align=left hspace=20 alt=\"".$size."B\" md5=\"$shortmd5\"></a>"; | |
| }else{ | |
| $r_imgsrc = "<a href=\"".$r_displaysrc."\" target=_blank><span class=\"tn_reply\" title=\"".$size."B\">Thumbnail unavailable</span></a>"; | |
| } | |
| } | |
| if (!is_file($r_src)) { | |
| $r_imgreply='<br><img src="'.$imgurl.'filedeleted-res.gif" alt="File deleted.">'; | |
| } else { | |
| $dimensions=($ext=='.pdf')?'PDF':"{$w}x{$h}"; | |
| if ($resno) { | |
| $r_imgreply="<br> <span class=\"filesize\">".S_PICNAME."<a href=\"$r_linksrc\" target=\"_blank\">$time$ext</a>-(".$size."B, ".$dimensions.", <span title=\"".$longname."\">".$shortname."</span>)</span>".$r_imgsrc; | |
| } else { | |
| $r_imgreply="<br> <span class=\"filesize\">".S_PICNAME."<a href=\"$r_linksrc\" target=\"_blank\">$time$ext</a>-(".$size."B, ".$dimensions.")</span>".$r_imgsrc; | |
| } | |
| } | |
| } | |
| // Main Reply creation | |
| $dat.="<a name=\"$no\"></a>\n"; | |
| $dat.="<table><tr><td nowrap class=\"doubledash\">>></td><td id=\"$no\" class=\"reply\">\n"; | |
| // if (($t>3)&&($fsize!=0)) { | |
| // $dat.=" <b>Image hidden</b> $now No.$no \n"; | |
| // } else { | |
| $dat.="<input type=checkbox name=\"$no\" value=delete><span class=\"replytitle\">$sub</span> \n"; | |
| $dat.="<span class=\"commentpostername\">$name</span> $now <span id=\"norep$no\">"; | |
| if($resno) { | |
| $dat.="<a href=\"#$no\" class=\"quotejs\">No.</a><a href=\"javascript:quote('$no')\" class=\"quotejs\">$no</a></span>"; | |
| } else { | |
| $dat.="<a href=\"".RES_DIR.$resto.PHP_EXT."#$no\" class=\"quotejs\">No.</a><a href=\"".RES_DIR.$resto.PHP_EXT."#q$no\" class=\"quotejs\">$no</a></span>"; | |
| } | |
| if(isset($r_imgreply)) $dat.=$r_imgreply; | |
| $dat.="<blockquote>$com</blockquote>"; | |
| // } | |
| $dat.="</td></tr></table>\n"; | |
| unset($r_imgreply); | |
| } | |
| $dat.="<br clear=left><hr>\n"; | |
| clearstatcache();//clear stat cache of a file | |
| //mysql_free_result($resline); | |
| $p++; | |
| if($resno){break;} //only one tree line at time of res | |
| } | |
| // bottom of a page | |
| if(BOTTOM_AD == 1) { | |
| $bottomad = ""; | |
| if (defined("BOTTOM_TXT") && BOTTOM_TXT) { | |
| $bottomad .= ad_text_for(BOTTOM_TXT); | |
| } | |
| if (defined("BOTTOM_TABLE") && BOTTOM_TABLE) { | |
| list($bottomimg,$bottomlink) = rid(BOTTOM_TABLE,1); | |
| $bottomad .= "<center><a href=\"$bottomlink\" target=\"_blank\"><img style=\"border:1px solid black;\" src=\"$bottomimg\" width=728 height=90 border=0 /></a></center>"; | |
| } | |
| if($bottomad) | |
| $dat .= "$bottomad<hr>"; | |
| } | |
| $dat.='<table align=right><tr><td nowrap align=center class=deletebuttons> | |
| <input type=hidden name=mode value=usrdel>'.S_REPDEL.' [<input class=checkbox type=checkbox name=onlyimgdel value=on>'.S_DELPICONLY.']<br> | |
| '.S_DELKEY.' <input class=inputtext type=password name="pwd" size=8 maxlength=8 value=""> | |
| <input type=submit value="'.S_DELETE.'"><input type="button" value="Report" onclick="var o=document.getElementsByTagName(\'INPUT\');for(var i=0;i<o.length;i++)if(o[i].type==\'checkbox\' && o[i].checked && o[i].value==\'delete\') return reppop(\''.PHP_SELF_ABS.'?mode=report&no=\'+o[i].name+\'\');"></form><script>document.delform.pwd.value=get_pass("4chan_pass");</script></td></tr>'; | |
| if (strpos($_SERVER['SERVER_NAME'],".4chan.org")) { | |
| $dat.='<tr><td align="right">Style ['; | |
| $dat.='<a href="#" onclick="setActiveStyleSheet(\'Yotsuba\'); return false;">Yotsuba</a> | '; | |
| $dat.='<a href="#" onclick="setActiveStyleSheet(\'Yotsuba B\'); return false;">Yotsuba B</a> | '; | |
| $dat.='<a href="#" onclick="setActiveStyleSheet(\'Futaba\'); return false;">Futaba</a> | '; | |
| $dat.='<a href="#" onclick="setActiveStyleSheet(\'Burichan\'); return false;">Burichan</a>]</td></tr>'; | |
| } | |
| $dat.='</table>'; | |
| if(!$resno){ // if not in res display mode | |
| $prev = $st - PAGE_DEF; | |
| $next = $st + PAGE_DEF; | |
| // Page navigation | |
| $dat.="<table class=pages align=left border=1><tr>"; | |
| if($prev >= 0){ //ok to make prev button | |
| if($prev==0){ | |
| $dat.="<form action=\"".PHP_SELF2."\" onsubmit='location=this.action;return false;' method=get><td>"; | |
| }else{ | |
| $dat.="<form action=\"".$prev/PAGE_DEF.PHP_EXT."\" onsubmit='location=this.action;return false;' method=get><td>"; | |
| } | |
| $dat.="<input type=submit value=\"".S_PREV."\" accesskey=\"z\">"; | |
| $dat.="</td></form>"; | |
| }else{$dat.="<td>".S_FIRSTPG."</td>";} | |
| // page listing | |
| $dat.="<td>"; | |
| for($i = 0; $i < $counttree ; $i+=PAGE_DEF){ | |
| if( !(PAGE_MAX > 0) ) | |
| if($i&&!($i%(PAGE_DEF*10))){$dat.="<br>";} // linebreak every 10 pages | |
| if($st==$i){$dat.="[<b>".($i/PAGE_DEF)."</b>] ";} // don't link current page | |
| else{ | |
| if($i==0){$dat.="[<a href=\"".PHP_SELF2."\">0</a>] ";} | |
| else{$dat.="[<a href=\"".($i/PAGE_DEF).PHP_EXT."\">".($i/PAGE_DEF)."</a>] ";} | |
| } | |
| } | |
| // continue printing up to PAGE_MAX if we're using that mode... this should rarely happen | |
| for(; (PAGE_MAX > 0) && $i < PAGE_MAX*PAGE_DEF; $i+=PAGE_DEF) { | |
| $dat.="[".($i/PAGE_DEF)."] "; | |
| } | |
| $dat.="</td>"; | |
| if($p >= PAGE_DEF && $counttree > $next){ // ok to make next button | |
| $dat.="<form action=\"".$next/PAGE_DEF.PHP_EXT."\" onsubmit='location=this.action;return false' method=get><td>"; | |
| $dat.="<input type=submit value=\"".S_NEXT."\" accesskey=\"x\">"; | |
| $dat.="</td></form>"; | |
| }else{$dat.="<td>".S_LASTPG."</td>";} | |
| $dat.="</tr></table><br clear=all>\n"; | |
| } | |
| foot($dat); | |
| //if($resno){echo $dat;break;} | |
| if($resno) { | |
| logtime("Printing thread $resno page"); | |
| $logfilename=RES_DIR.$resno.PHP_EXT; | |
| print_page($logfilename, $dat); | |
| $dat=''; | |
| if(!$rebuild) $deferred = updatelog(0); | |
| break; | |
| } | |
| logtime("Printing index page"); | |
| if($page==0){$logfilename=PHP_SELF2;} | |
| else{$logfilename=$page/PAGE_DEF.PHP_EXT;} | |
| print_page($logfilename, $dat); | |
| if(!$resno && $page==0 && USE_RSS==1) { | |
| include_once '/www/global/rss.php'; | |
| rss_dump(); | |
| } | |
| if(UPDATE_THROTTLING >= 1) { | |
| clearstatcache(); | |
| if(@filemtime("updatelog.stamp") == $update_start) | |
| unlink("updatelog.stamp"); | |
| } | |
| //chmod($logfilename,0666); | |
| } | |
| //mysql_free_result($treeline); | |
| if(isset($deferred)) return $deferred; | |
| return false; | |
| } | |
| /* head */ | |
| function head(&$dat,$res,$error=0){ | |
| $titlepart = ''; | |
| if(JANITOR_BOARD == 1) { | |
| $dat .= broomcloset_head($dat); | |
| } | |
| if (SHOWTITLEIMG == 1) { | |
| //$titleimg = rid('title_banners'); | |
| $titleimg = rid_in_directory("/dontblockthis/title/"); | |
| $titlepart.= '<img width=300 height=100 src="'.$titleimg.'">'; | |
| } else if (SHOWTITLEIMG == 2) { | |
| $titlepart.= '<img width=300 height=100 src="'.TITLEIMG.'" onclick="this.src=this.src;">'; | |
| } | |
| $include1=file_get_contents_cached(NAV_TXT); | |
| $cookiejs="function get_cookie(name){with(document.cookie){var index=indexOf(name+\"=\");if(index==-1) return '';index=indexOf(\"=\",index)+1;var endstr=indexOf(\";\",index);if(endstr==-1) endstr=length;return decodeURIComponent(substring(index,endstr));}};\nfunction get_pass(name){var pass=get_cookie(name);if(pass) return pass;var chars=\"abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789\";var pass='';for(var i=0;i<8;i++){var rnd=Math.floor(Math.random()*chars.length);pass+=chars.substring(rnd,rnd+1);}return(pass);}\n"; | |
| $cookiejs .= 'function toggle(name){var a=document.getElementById(name); a.style.display = ((a.style.display!="block")?"block":"none");}'; | |
| $scriptjs = ''; | |
| // set styleswitcher script configuration variables | |
| if(DEFAULT_BURICHAN==1) { | |
| $scriptjs .= '<script type="text/javascript">var style_group="ws_style";</script>'; | |
| } else { | |
| $scriptjs .= '<script type="text/javascript">var style_group="nws_style";</script>'; | |
| } | |
| $scriptjs .='<script type="text/javascript" src="'.DATA_SERVER.'script.js"></script>'; | |
| $dat.='<html><head> | |
| <META HTTP-EQUIV="content-type" CONTENT="text/html; charset=UTF-8"> | |
| <meta name="robots" content="'.META_ROBOTS.'"/> | |
| <meta name="description" content="'.META_DESCRIPTION.'"/> | |
| <meta name="keywords" content="'.META_KEYWORDS.'"/>'; | |
| if (RTA==1) { | |
| $dat .= "\n<meta name=\"RATING\" content=\"RTA-5042-1996-1400-1577-RTA\" />"; | |
| } | |
| $styles = array( | |
| 'Yotsuba' => 'yotsuba.8.css', | |
| 'Yotsuba B' => 'yotsublue.8.css', | |
| 'Futaba' => 'futaba.8.css', | |
| 'Burichan' => 'burichan.8.css', | |
| ); | |
| if (DEFAULT_BURICHAN==1) { | |
| foreach($styles as $style=>$stylecss) { | |
| $rel = ( ($style == 'Yotsuba B') ? 'stylesheet' : 'alternate stylesheet' ); | |
| $dat .= "<link rel=\"$rel\" type=\"text/css\" href=\"".DATA_SERVER."$stylecss\" title=\"$style\">"; | |
| } | |
| } else { | |
| if(defined('CSS_FORCE')) { | |
| foreach($styles as $style=>$stylecss) { | |
| $rel = ( ($style == 'Yotsuba') ? 'stylesheet' : 'alternate stylesheet' ); | |
| $dat .= "<link rel=\"$rel\" type=\"text/css\" href=\"".CSS_FORCE."\" title=\"$style\">"; | |
| } | |
| } | |
| else { | |
| foreach($styles as $style=>$stylecss) { | |
| $rel = ( ($style == 'Yotsuba') ? 'stylesheet' : 'alternate stylesheet' ); | |
| $dat .= "<link rel=\"$rel\" type=\"text/css\" href=\"".DATA_SERVER."$stylecss\" title=\"$style\">"; | |
| } | |
| } | |
| } | |
| if(USE_RSS==1) | |
| $dat .= '<link rel="alternate" title="RSS feed" href="/'.BOARD_DIR.'/index.rss" type="application/rss+xml" />'; | |
| $dat.='<title>'.strip_tags(TITLE).'</title> | |
| <script type="text/javascript"><!-- | |
| '.$cookiejs.' | |
| //--></script> | |
| '.$scriptjs; | |
| if (FIXED_TEXT_AD == 1 && file_exists(FIXED_TEXT_PATH)) { | |
| $dat.="<style>.postarea { padding-left:400px; }</style>"; | |
| } | |
| $dat .= '</head> | |
| <body bgcolor="#FFFFEE" text="#800000" link="#0000EE" vlink="#0000EE">'.$include1; | |
| $dat.='<div class="logo"> | |
| '.$titlepart.'<br> | |
| <font size=5> | |
| <b><SPAN>'.TITLE.'</SPAN></b></font>'; | |
| if(defined('SUBTITLE')) | |
| $dat .= '<br><font size=1>'.SUBTITLE.'</font>'; | |
| $dat.='</div> | |
| <hr width="90%" size=1> | |
| '; | |
| if(LEADERBOARD_AD == 1) { | |
| if(defined('LEADERBOARD_TXT') && LEADERBOARD_TXT) { | |
| $dat.='<div style="text-align: center">' . | |
| ad_text_for(LEADERBOARD_TXT) . | |
| '</div><hr>'; | |
| } | |
| else if(defined('LEADERBOARD_TABLE')) { | |
| list($ldimg,$ldhref) = rid(LEADERBOARD_TABLE,1); | |
| $dat.='<div style="text-align: center"><a href="'.$ldhref.'" target="_blank"><img src="'.$ldimg.'" border="0"></a></div><hr>'; | |
| } | |
| else | |
| $dat.='<div style="text-align: center"><a href="'.LEADERBOARD_LINK.'" target="_blank"><img src="http://content.4chan.org/dontblockthis/'.LEADERBOARD_IMG.'" border="0"></a></div><hr>'; | |
| } | |
| } | |
| /* Contribution form */ | |
| function form(&$dat,$resno,$admin=""){ | |
| global $log; log_cache(); | |
| $maxbyte = MAX_KB * 1024; | |
| $no=$resno; | |
| $closed=0; | |
| $msg=''; | |
| $hidden=''; | |
| if($resno){ | |
| $closed = $log[$resno]['closed']; | |
| $msg.="[<a href=\"../".PHP_SELF2."\" accesskey=\"a\">".S_RETURN."</a>]\n"; | |
| $msg.="<table width='100%'><tr><th bgcolor=#e04000>\n"; | |
| $msg.="<font color=#FFFFFF>".S_POSTING."</font>\n"; | |
| $msg.="</th></tr></table>\n"; | |
| } | |
| if($admin){ | |
| $hidden = "<input type=hidden name=admin value=\"".ADMIN_PASS."\">"; | |
| $msg = "<h4>".S_NOTAGS."</h4>"; | |
| } | |
| if($closed!=1) { | |
| $dat.=$msg; | |
| //form_ads($dat); | |
| if(OEKAKI_BOARD == 1) { | |
| require_once 'oekaki.php'; | |
| if($_GET['mode'] != 'oe_finish') | |
| oe_form($dat,$resno); | |
| else | |
| oe_preview($dat); | |
| } | |
| $dat.='<div align="center" class="postarea"><form name="post" action="'; | |
| $dat.=PHP_SELF_ABS.'" method="POST" enctype="multipart/form-data"> | |
| '.$hidden.'<input type=hidden name="MAX_FILE_SIZE" value="'.$maxbyte.'"> | |
| '; | |
| if($no){$dat.='<input type=hidden name=resto value="'.$no.'"> | |
| ';} | |
| if((FIXED_TEXT_AD == 1) && $fixedad = ad_text_for(FIXED_TEXT_PATH)) { | |
| $dat.='<div id="ad">'.$fixedad.'</div>'; | |
| } | |
| if(FORCED_ANON == 1) { | |
| $dat.='<table cellpadding=1 cellspacing=1><tr colspan=2><td><input type=hidden name=name><input type=hidden name=sub> </td></tr>' | |
| .'<tr><td></td><td class="postblock" align="left"><b>'.S_EMAIL.'</b></td><td><input class=inputtext type=text name=email size="28"><span id="tdname"></span><span id="tdemail"></span>'; | |
| } else { | |
| $dat.='<table cellpadding=1 cellspacing=1> | |
| <tr><td></td><td class="postblock" align="left"><b>'.S_NAME.'</b></td><td><input class=inputtext type=text name=name size="28"><span id="tdname"></span></td></tr> | |
| <tr><td></td><td class="postblock" align="left"><b>'.S_EMAIL.'</b></td><td><input class=inputtext type=text name=email size="28"><span id="tdemail"></span></td></tr> | |
| <tr><td></td><td class="postblock" align="left"><b>'.S_SUBJECT.'</b></td><td><input class=inputtext type=text name=sub size="35">'; | |
| } | |
| if($admin){ | |
| $dat.='<tr><td></td><td class="postblock" align="left"><b>Reply ID</b></td><td><input class=inputtext type=text name=resto size="10"> [<label><input type=checkbox name=age value=1>Age</label>] '; | |
| } | |
| $dat.='<input type=submit value="'.S_SUBMIT.'" accesskey="s">'; | |
| if (SPOILERS==1) { | |
| $dat.=' [<label><input type=checkbox name=spoiler value=on>'.S_SPOILERS.'</label>]'; | |
| }; | |
| $dat.='</td></tr> | |
| <tr><td valign=bottom></td><td class="postblock" align="left"><b>'.S_COMMENT.'</b></td><td><textarea class=inputtext name=com cols="48" rows="4" wrap=soft></textarea></td></tr> | |
| '; | |
| if(OEKAKI_BOARD == 1 && $_GET['mode'] == 'oe_finish') { require_once 'oekaki.php'; oe_finish_form($dat); } | |
| elseif (MAX_IMGRES!=0) { | |
| $dat.='<tr><td></td><td class="postblock" align="left"><b>'.S_UPLOADFILE.'</b></td> | |
| <td><input type=file name=upfile size="35">'; | |
| if (!$resno&&NO_TEXTONLY!=1) { | |
| $dat.='[<label><input type=checkbox name=textonly value=on>'.S_NOFILE.'</label>]'; | |
| } | |
| $dat.='</td></tr>'; | |
| } | |
| $dat.='<tr><td></td><td class="postblock" align="left"><b>'.S_DELPASS.'</b></td><td><input class=inputtext type=password name="pwd" size=8 maxlength=8 value=""><small>'.S_DELEXPL.'</small><input type=hidden name=mode value="regist"></td></tr> | |
| <tr><td></td><td colspan=2> | |
| <table border=0 cellpadding=0 cellspacing=0 width="100%"><tr><td class="rules">'.S_RULES; | |
| if(!$resno && SHOW_UNIQUES == 1) { | |
| $dat.='<LI>Currently <b>'.$GLOBALS['ipcount'].'</b> unique user posts.'; | |
| } | |
| $dat.='</td><td align="right" valign="center">'.DONATE.'</td></tr>'; | |
| if(FORCED_ANON==1) { // extra spacer to make up for the 2 missing table rows | |
| $dat .='<tr><td> </td></tr>'; | |
| } | |
| if(SHOW_BLOTTER == 1) { | |
| list($blotdate,$blotcontents) = blotter_contents(); | |
| $dat.='<tr><td class="rules"> | |
| <script type="text/javascript"><!-- | |
| function updateBlotterVisible() { | |
| if(get_cookie("blotter_hide") == "show") { | |
| document.getElementById("blotter").style.display = \'inline\'; | |
| } else { | |
| document.getElementById("blotter").style.display = \'none\'; | |
| } | |
| } | |
| function toggleBlotter() { | |
| if(get_cookie("blotter_hide") == "show") { | |
| document.cookie = "blotter_hide=hide; expires=Thu, 4 Feb 2044 04:04:04 UTC; domain=4chan.org; path=/"; | |
| } else { | |
| document.cookie = "blotter_hide=show; expires=Thu, 4 Feb 2044 04:04:04 UTC; domain=4chan.org; path=/"; | |
| } | |
| updateBlotterVisible(); | |
| } | |
| document.write(\'<div style="position:relative;"><div style="top:0px;left:0px;position:absolute;" class="rules">'.$blotdate.'</div><div style="top:0px;right:0px;position:absolute;"><a href="javascript:void(0)" onclick="toggleBlotter()">Show/Hide</a> <a href="'.BLOTTER_URL.'?all">Show All</a></div><div id="blotter" style="display:none" class="rules"><br/>\'); | |
| document.write(' . $blotcontents . '); | |
| document.write(\'</div></div>\'); | |
| updateBlotterVisible(); | |
| --> | |
| </script> | |
| </td></tr>'; | |
| } | |
| $dat.='</table></td></tr></table></form></div><hr> | |
| <script>with(document.post) {name.value=get_cookie("4chan_name"); email.value=get_cookie("4chan_email"); pwd.value=get_pass("4chan_pass"); }</script> | |
| '; | |
| } else { // closed thread | |
| $dat.="[<a href=\"../".PHP_SELF2."\" accesskey=\"a\">".S_RETURN."</a>]<hr>\n"; | |
| form_ads($dat); | |
| $dat.='<table style="text-align:center;width:100%;height:300px;"><tr valign="middle"><td align="center"><font color=red size=5 style=""><b>Thread closed.<br/>You may not reply at this time.</b></font></tr></td></table>'; | |
| } | |
| if (BANROT_AD==1) { | |
| /*if(!$banadquery=mysql_global_call("select url,img from ".BANROTLOG." order by rand() limit 1")){echo S_SQLFAIL;} | |
| $banadrow=mysql_fetch_row($banadquery); | |
| list($ba_url,$ba_img)=$banadrow;*/ | |
| $dat.='<center>'; | |
| if(defined('TOPAD_TABLE')) { | |
| list($topad, $toplink) = rid(TOPAD_TABLE, 1); | |
| $dat .= "<a href=\"$toplink\" target=\"_blank\"><img style=\"border:1px solid black;\" src=\"$topad\" width=468 height=60 border=0 /></a>"; | |
| } | |
| else { | |
| $dat .= rotating_ad_banner(); | |
| } | |
| /* | |
| $dat.='<a href="http://webhosting.cologuys.com" target="_blank"><img src="http://content.4chan.org/dontblockthis/CG_100x60_2.gif" border="0"></a>'; | |
| if ($ba_url != "") { | |
| $dat.='<a href="'.BANROT_PHP.'?url='.$ba_url.'" target="_blank"><img src="'.$ba_img.'" border="0"></a>'; | |
| } else { | |
| $dat.='<img src="'.$ba_img.'" border="0">'; | |
| }*/ | |
| } | |
| if(BANROT2_AD==1) { | |
| /* $dat .= @file_get_contents('/www/global/topad.txt'); | |
| $dat.='<a href="http://webhosting.cologuys.com" target="_blank"><img src="http://content.4chan.org/dontblockthis/CG_100x60_2.gif" border="0"></a>'; | |
| $dat.="</center><hr>\n";*/ | |
| } | |
| elseif (BANROT_B==1) { | |
| /*if(!$banadquery=mysql_global_call("select url,img from ".BANROT_B_LOG." where DATE_SUB(CURDATE(),INTERVAL 30 DAY) <= installed) ORDER BY RAND() limit 1")){echo S_SQLFAIL;} | |
| $banadrow=mysql_fetch_row($banadquery); | |
| list($ba_url,$ba_img)=$banadrow; | |
| $dat.='<br/>'; | |
| if ($ba_url != "") { | |
| $dat.='<a href="'.$ba_url.'" target="_blank"><img src="'.$ba_img.'" border="0"></a>'; | |
| } else { | |
| $dat.='<img src="'.$ba_img.'" border="0">'; | |
| } | |
| $dat.="<br><a href=\"http://www.4chan.org/advertise/\" target=\"_blank\"><small>Buy a banner for this board!</small></a></center><hr>\n";*/ | |
| } | |
| elseif(NOT4CHAN!=1 && BANROT_AD==1 || BANROT2_AD==1) { | |
| //$dat.="<br><a href=\"http://www.4chan.org/advertise/\" target=\"_blank\"><small>Advertise with 4chan!</small></a></center><hr>\n"; | |
| $dat.="</center><hr>\n"; | |
| } | |
| if (defined('GLOBAL_MSG') && GLOBAL_MSG!='') { | |
| $dat.=GLOBAL_MSG."\n<hr>\n"; | |
| } | |
| if(JANITOR_BOARD == 1) { | |
| $dat = broomcloset_form($dat); | |
| } | |
| } | |
| function delete_uploaded_files() | |
| { | |
| global $upfile_name,$path,$upfile,$dest; | |
| if($dest||$upfile) { | |
| @unlink($dest); | |
| @unlink($upfile); | |
| if(OEKAKI_BOARD == 1) { @unlink("$dest.pch"); } | |
| } | |
| } | |
| /* Footer */ | |
| function foot(&$dat){ | |
| global $update_avg_secs; | |
| $include2=file_get_contents_cached(NAV2_TXT); | |
| /* $dat.='<div class="footer">'.S_FOOT.'</div> | |
| '.$include2.' | |
| </body></html>';*/ | |
| $dat .="$include2"; | |
| if ($update_avg_secs) $dat .= "<!-- $update_avg_secs s -->"; | |
| $dat .= "</body></html>"; | |
| } | |
| function error($mes,$unused=''){ | |
| delete_uploaded_files(); | |
| head($dat,0,1); | |
| form_ads($dat); | |
| //echo "<br><br><hr size=1><br><br>\n<center><font color=red size=5><b>$mes<br><br><a href="; | |
| $dat .= '<table style="text-align:center;width:100%;height:300px;"><tr valign="middle"><td align="center"><font color=red size=5 style=""><b>' . $mes . '<br><br><a href='; | |
| if(strpos($_SERVER['REQUEST_URI'],RES_DIR)) $dat .= "../"; | |
| //echo PHP_SELF2.">".S_RELOAD."</a></b></font></center><br><br><hr size=1>"; | |
| $dat .= PHP_SELF2.">".S_RELOAD."</a></b></font></tr></td></table><br><br><hr size=1>"; | |
| if(BANROT_AD == 1 && !defined('TOPAD_TABLE')) { | |
| $dat.='<center>'; | |
| $dat .= rotating_ad_banner(); | |
| if(BOTTOM_AD == 1) { | |
| $dat .= "<hr size=1>"; | |
| } | |
| } | |
| if(BOTTOM_AD == 1) { | |
| $bottomad = ad_text_for(BOTTOMAD); | |
| if($bottomad) | |
| $dat .= "$bottomad<hr>"; | |
| } | |
| $dat .= "</center>"; | |
| foot($dat); | |
| die($dat); | |
| } | |
| /* Auto Linker */ | |
| function normalize_link_cb($m) { | |
| $subdomain = $m[1]; | |
| $original = $m[0]; | |
| $board = strtolower($m[2]); | |
| $m[0] = $m[1] = $m[2] = ''; | |
| for($i=count($m)-1;$i>2;$i--) { | |
| if($m[$i]) { $no = $m[$i]; break; } | |
| } | |
| if($subdomain == 'www' || $subdomain == 'static' || $subdomain == 'content') | |
| return $original; | |
| if($board == BOARD_DIR) | |
| return ">>$no"; | |
| else | |
| return ">>>/$board/$no"; | |
| } | |
| function normalize_links($proto) { | |
| // change http://xxx.4chan.org/board/res/no links into plaintext >># or >>>/board/# | |
| if(strpos($proto,"4chan.org")===FALSE) return $proto; | |
| $proto = preg_replace_callback('@http://([A-za-z]*)[.]4chan[.]org/(\w+)/(?:res/(\d+)[.]html(?:#q?(\d+))?|\w+.php[?]res=(\d+)(?:#(\d+))?|)(?=[\s.<!?,]|$)@i','normalize_link_cb',$proto); | |
| // rs.4chan.org to >>>rs/query+string | |
| $proto = preg_replace('@http://rs[.]4chan[.]org/\?s=([a-zA-Z0-9$_.+-]+)@i','>>>/rs/$1',$proto); | |
| return $proto; | |
| } | |
| function intraboard_link_cb($m) { | |
| global $intraboard_cb_resno, $log; | |
| $no = $m[1]; | |
| $resno = $intraboard_cb_resno; | |
| if(isset($log[$no])) { | |
| $resto = $log[$no]['resto']; | |
| $resdir = ($resno ? '' : RES_DIR); | |
| $ext = PHP_EXT; | |
| if($resno && $resno==$resto) // linking to a reply in the same thread | |
| return "<a href=\"#$no\" class=\"quotelink\" onClick=\"replyhl('$no');\">>>$no</a>"; | |
| elseif($resto==0) // linking to a thread | |
| return "<a href=\"$resdir$no$ext#$no\" class=\"quotelink\">>>$no</a>"; | |
| else // linking to a reply in another thread | |
| return "<a href=\"$resdir$resto$ext#$no\" class=\"quotelink\">>>$no</a>"; | |
| } | |
| return $m[0]; | |
| } | |
| function intraboard_links($proto, $resno) { | |
| global $intraboard_cb_resno; | |
| $intraboard_cb_resno = $resno; | |
| $proto = preg_replace_callback('/>>([0-9]+)/', 'intraboard_link_cb', $proto); | |
| return $proto; | |
| } | |
| function interboard_link_cb($m) { | |
| // on one hand, we can link to imgboard.php, using any old subdomain, | |
| // and let apache & imgboard.php handle it when they click on the link | |
| // on the other hand, we can use the database to fetch the proper subdomain | |
| // and even the resto to construct a proper link to the html file (and whether it exists or not) | |
| // for now, we'll assume there's more interboard links posted than interboard links visited. | |
| $url = DATA_SERVER . $m[1] . '/' . PHP_SELF . ($m[2] ? ('?res=' . $m[2]) : ""); | |
| return "<a href=\"$url\" class=\"quotelink\">{$m[0]}</a>"; | |
| } | |
| function interboard_rs_link_cb($m) { | |
| // $m[1] might be a url-encoded query string, or might be manual-typed text | |
| // so we'll normalize it to raw text first and then re-encode it | |
| $lsearchquery = urlencode( urldecode($m[1]) ); | |
| return "<a href=\"http://rs.4chan.org/?s=$lsearchquery\" class=\"quotelink\">{$m[0]}</a>"; | |
| } | |
| function interboard_dis_link_cb($m) { | |
| $durl = $m[1]; //i don't think this is useful but just in case | |
| return "<a href=\"http://dis.4chan.org/read/$durl\" class=\"quotelink\">{$m[0]}</a>"; | |
| } | |
| function dis_matching_re() { | |
| global $dis_matching_re; | |
| if (!$dis_matching_re) { | |
| $boards = file('/www/global/disboards.txt'); | |
| foreach ($boards as $board) { | |
| list($bn,) = explode("<>", $board); | |
| $dis_matching_re .= $bn; | |
| $dis_matching_re .= '|'; | |
| } | |
| $dis_matching_re = substr($dis_matching_re, 0, -1); //lose last | | |
| } | |
| return $dis_matching_re; | |
| } | |
| function interboard_links($proto) { | |
| $boards = "an?|cm?|fa|fit|gif|h[cr]?|[bdefgkmnoprstuvxy]|wg?|ic?|y|cgl|c[ko]|mu|po|t[gv]|toy|trv|jp|r9k|sp"; | |
| $disboards = dis_matching_re(); | |
| $proto = preg_replace_callback('@>>>/('.$boards.')/([0-9]*)@i', 'interboard_link_cb', $proto); | |
| $proto = preg_replace_callback('@>>>/rs/([^\s<>]+)@', 'interboard_rs_link_cb', $proto); | |
| $proto = preg_replace_callback('@>>>/(('.$disboards.')/[^\s<>]*)@i', 'interboard_dis_link_cb', $proto); | |
| return $proto; | |
| } | |
| function auto_link($proto,$resno){ | |
| $proto = normalize_links($proto); | |
| // auto-link remaining 4chan.org URLs if they're not part of HTML | |
| if(strpos($proto,"4chan.org")!==FALSE) { | |
| $proto = preg_replace('/(http:\/\/(?:[A-Za-z]*\.)?)(4chan)(\.org)(\/)([\w\-\.,@?^=%&:\/~\+#]*[\w\-\@?^=%&\/~\+#])?/i',"<a href=\"\\0\" target=\"_blank\">\\0</a>",$proto); | |
| $proto = preg_replace('/([<][^>]*?)<a href="((http:\/\/(?:[A-Za-z]*\.)?)(4chan)(\.org)(\/)([\w\-\.,@?^=%&:\/~\+#]*[\w\-\@?^=%&\/~\+#])?)" target="_blank">\\2<\/a>([^<]*?[>])/i', '\\1\\3\\4\\5\\6\\7\\8', $proto); | |
| } | |
| $proto = intraboard_links($proto,$resno); | |
| $proto = interboard_links($proto); | |
| return $proto; | |
| } | |
| function auto_ban_poster($nametrip, $banlength, $global, $reason, $pubreason='') { | |
| if(!$nametrip) $nametrip = S_ANONAME; | |
| if(strpos($nametrip, '</span> <span class="postertrip">!') !== FALSE) { | |
| $nameparts=explode('</span> <span class="postertrip">!',$name); | |
| $nametrip = "{$nameparts[0]} #{$nameparts[1]}"; | |
| } | |
| $host = $_SERVER['REMOTE_ADDR']; | |
| $reverse = mysql_real_escape_string(gethostbyaddr($host)); | |
| $xff = mysql_real_escape_string(getenv("HTTP_X_FORWARDED_FOR")); | |
| $nametrip = mysql_real_escape_string($nametrip); | |
| $global = ($global?1:0); | |
| $board = BOARD_DIR; | |
| $reason = mysql_real_escape_string($reason); | |
| $pubreason = mysql_real_escape_string($pubreason); | |
| if($pubreason) { | |
| $pubreason .= "<>"; | |
| } | |
| //if they're already banned on this board, don't insert again | |
| //since this is just a spam post | |
| //i don't think it matters if the active ban is global=0 and this one is global=1 | |
| { | |
| $existingq = mysql_global_do("select count(*)>0 from ".SQLLOGBAN." where host='$host' and active=1 and (board='$board' or global=1)"); | |
| $existingban = mysql_result($existingq, 0, 0); | |
| if ($existingban > 0) { | |
| delete_uploaded_files(); | |
| die(); | |
| } | |
| } | |
| if($banlength == 0) { // warning | |
| // check for recent warnings to punish spammers | |
| $autowarnq=mysql_global_call("SELECT COUNT(*) FROM ".SQLLOGBAN." WHERE host='$host' AND admin='Auto-ban' AND now > DATE_SUB(NOW(),INTERVAL 3 DAY) AND reason like '%$reason'"); | |
| $autowarncount=mysql_result($autowarnq,0,0); | |
| if($autowarncount > 3) { | |
| $banlength = 14; | |
| } | |
| } | |
| if($banlength == -1) // permanent | |
| $length = '0000' . '00' .'00'; // YYYY/MM/DD | |
| else { | |
| $banlength = (int)$banlength; | |
| if($banlength < 0) $banlength = 0; | |
| $length = date("Ymd",time()+$banlength*(24*60*60)); | |
| } | |
| $length .= "00"."00"."00"; // H:M:S | |
| if(!$result=mysql_global_do("INSERT INTO ".SQLLOGBAN." (board,global,name,host,reason,length,admin,reverse,xff) VALUES('$board','$global','$nametrip','$host','$pubreason<b>Auto-ban</b>: $reason','$length','Auto-ban','$reverse','$xff')")){echo S_SQLFAIL;} | |
| @mysql_free_result($result); | |
| append_ban($global ? "global" : $global, $host); | |
| } | |
| function check_blacklist($post, $dest) { | |
| $board = BOARD_DIR; | |
| $querystr = "SELECT SQL_NO_CACHE * FROM blacklist WHERE active=1 AND (boardrestrict='' or boardrestrict='$board') AND (0 "; | |
| foreach($post as $field=>$contents) { | |
| if($contents) { | |
| $contents = mysql_real_escape_string(html_entity_decode($contents)); | |
| $querystr .= "OR (field='$field' AND contents='$contents') "; | |
| } | |
| } | |
| $querystr .= ") LIMIT 1"; | |
| $query = mysql_global_call($querystr); | |
| if(mysql_num_rows($query) == 0) return false; | |
| $row = mysql_fetch_assoc($query); | |
| if($row['ban']) { | |
| $prvreason = "Blacklisted ${row['field']} - " . htmlspecialchars($row['contents']); | |
| auto_ban_poster($post['trip']?$post['nametrip']:$post['name'], $row['banlength'], 1, $prvreason, $row['banreason']); | |
| } | |
| error(S_UPFAIL, $dest); | |
| } | |
| // word-wrap without touching things inside of tags | |
| function wordwrap2($str,$cols,$cut) { | |
| // if there's no runs of $cols non-space characters, wordwrap is a no-op | |
| if(strlen($str)<$cols || !preg_match('/[^ <>]{'.$cols.'}/', $str)) { | |
| return $str; | |
| } | |
| $sections = preg_split('/[<>]/', $str); | |
| $str=''; | |
| for($i=0;$i<count($sections);$i++) { | |
| if($i%2) { // inside a tag | |
| $str .= '<' . $sections[$i] . '>'; | |
| } | |
| else { // outside a tag | |
| $words = explode(' ',$sections[$i]); | |
| foreach($words as &$word) { | |
| $word = wordwrap($word, $cols, $cut, 1); | |
| // fix utf-8 sequences (XXX: is this slower than mbstring?) | |
| $lines = explode($cut, $word); | |
| for($j=1;$j<count($lines);$j++) { // all lines except the first | |
| while(1) { | |
| $chr = substr($lines[$j], 0, 1); | |
| if((ord($chr) & 0xC0) == 0x80) { // if chr is a UTF-8 continuation... | |
| $lines[$j-1] .= $chr; // put it on the end of the previous line | |
| $lines[$j] = substr($lines[$j], 1); // take it off the current line | |
| continue; | |
| } | |
| break; // chr was a beginning utf-8 character | |
| } | |
| } | |
| $word = implode($cut, $lines); | |
| } | |
| $str .= implode(' ', $words); | |
| } | |
| } | |
| return $str; | |
| } | |
| function cidrtest ($longip, $CIDR) { | |
| list ($net, $mask) = split ("/", $CIDR); | |
| $ip_net = ip2long ($net); | |
| $ip_mask = ~((1 << (32 - $mask)) - 1); | |
| $ip_ip = $longip; | |
| $ip_ip_net = $ip_ip & $ip_mask; | |
| return ($ip_ip_net == $ip_net); | |
| } | |
| function proxy_connect($port) { | |
| $fp = @fsockopen ($_SERVER["REMOTE_ADDR"], $port,$a,$b,2); | |
| if(!$fp){return 0;}else{return 1;} | |
| } | |
| function processlist_cleanup($id) { | |
| logtime('Done'); | |
| //mysql_board_call("DELETE FROM proclist WHERE id='$id'"); | |
| } | |
| function logtime($desc) { | |
| static $run = -1; | |
| if(!defined('PROFILING') && !defined('PROCESSLIST')) return; | |
| if($run==-1) { | |
| $run = getmypid(); // rand(0,16777215); | |
| if(PROCESSLIST == 1) { | |
| register_shutdown_function('processlist_cleanup', $run); | |
| $dump = mysql_real_escape_string(serialize(array('GET'=>$_GET,'POST'=>$_POST,'SERVER'=>$_SERVER))); | |
| mysql_board_call("INSERT INTO proclist VALUES ('$run','$dump','')"); | |
| } | |
| } | |
| if(PROCESSLIST == 1) { | |
| mysql_board_call("UPDATE proclist SET descr='$desc' WHERE id='$run'"); | |
| } | |
| else { | |
| $board = BOARD_DIR; | |
| $time = microtime(true); | |
| mysql_global_call("INSERT INTO prof_times VALUES ('$board',$run,$time,'$desc')"); | |
| } | |
| } | |
| function make_american($com) { | |
| if (stripos($com, "america")!==FALSE) return $com; //already american | |
| $com = rtrim($com); | |
| $end = '!'; | |
| if ($com == "") return $com; | |
| if (preg_match("/([.!?])$/", $com, $matches)) {$end = $matches[1]; $com = substr($com, 0, -1);} | |
| $com .= " IN AMERICA".$end; | |
| return $com; | |
| } | |
| /* Regist */ | |
| function regist($name,$email,$sub,$com,$url,$pwd,$upfile,$upfile_name,$resto,$age){ | |
| global $path,$pwdc,$textonly,$admin,$spoiler,$dest; | |
| if ($pwd==ADMIN_PASS) $admin=$pwd; | |
| if ($admin!=ADMIN_PASS || !valid() ) $admin=''; | |
| $mes=""; | |
| if(!$upfile && !$resto) { // allow textonly threads for moderators! | |
| if(valid('textonly')) | |
| $textonly = 1; | |
| } | |
| elseif(JANITOR_BOARD == 1) { // only allow mods/janitors to post, and textonly is always ok | |
| $textonly = 1; | |
| if(!valid('janitor_board')) | |
| die(); | |
| } | |
| // time | |
| $time = time(); | |
| $tim = $time.substr(microtime(),2,3); | |
| /* logtime("locking tables: ".($resto?'reply':'thread').", ".($upfile?'image':'text')); | |
| if(PROCESSLIST == 1 && BOARD_DIR != 'b' && 0) { | |
| if(!mysql_board_call("LOCK TABLES ".SQLLOG." WRITE,proclist WRITE")) | |
| die(S_SQLCONF.'<!--lk:'.mysql_errno().'-->'); | |
| } | |
| else if(BOARD_DIR != 'b' && 0) { | |
| if(!mysql_board_call("LOCK TABLES ".SQLLOG." WRITE")) | |
| die(S_SQLCONF.'<!--lk:'.mysql_errno().'-->'); | |
| } | |
| logtime("got lock");*/ | |
| $locked_time = time(); | |
| mysql_board_call("set session query_cache_type=0"); | |
| // check closed | |
| $resto=(int)$resto; | |
| if ($resto) { | |
| if(!$cchk=mysql_board_call("select closed from ".SQLLOG." where no=".$resto)){echo S_SQLFAIL;} | |
| list($closed)=mysql_fetch_row($cchk); | |
| if ($closed==1&&!$admin) error("You can't reply to this thread anymore.",$upfile); | |
| mysql_free_result($cchk); | |
| } | |
| if(OEKAKI_BOARD == 1 && $_POST['oe_chk']) { | |
| require_once 'oekaki.php'; | |
| oe_regist_check(); | |
| $upfile = realpath('tmp/' . $_POST['oe_ip'] . '.png'); | |
| $upfile_name = 'Oekaki'; | |
| $pchfile = realpath('tmp/' . $_POST['oe_ip'] . '.pch'); | |
| if(!file_exists($pchfile)) $pchfile = ''; | |
| } | |
| $has_image = $upfile&&file_exists($upfile); | |
| if($has_image){ | |
| // check image limit | |
| if ($resto) { | |
| if(!$result=mysql_board_call("select COUNT(*) from ".SQLLOG." where resto=$resto and fsize!=0")){echo S_SQLFAIL;} | |
| $countimgres=mysql_result($result,0,0); | |
| if ($countimgres>MAX_IMGRES) error("Max limit of ".MAX_IMGRES." image replies has been reached.",$upfile); | |
| mysql_free_result($result); | |
| } | |
| //upload processing | |
| $dest = tempnam(substr($path,0,-1), "img"); | |
| //$dest = $path.$tim.'.tmp'; | |
| if(OEKAKI_BOARD == 1 && $_POST['oe_chk']) { | |
| rename($upfile, $dest); | |
| chmod($dest, 0644); | |
| if($pchfile) | |
| rename($pchfile, "$dest.pch"); | |
| } | |
| else | |
| move_uploaded_file($upfile, $dest); | |
| clearstatcache(); // otherwise $dest looks like 0 bytes! | |
| logtime("Moved uploaded file"); | |
| $upfile_name = CleanStr($upfile_name); | |
| $fsize=filesize($dest); | |
| if(!is_file($dest)) error(S_UPFAIL,$dest); | |
| if(!$fsize || $fsize>MAX_KB * 1024) error(S_TOOBIG,$dest); | |
| // PDF processing | |
| if(ENABLE_PDF==1 && strcasecmp('.pdf',substr($upfile_name,-4))==0) { | |
| $ext='.pdf'; | |
| $W=$H=1; | |
| $md5 = md5_of_file($dest); | |
| // run through ghostscript to check for validity | |
| if(pclose(popen("/usr/local/bin/gs -q -dSAFER -dNOPAUSE -dBATCH -sDEVICE=nullpage $dest",'w'))) { error(S_UPFAIL,$dest); } | |
| } else { | |
| $size = getimagesize($dest); | |
| if(!is_array($size)) error(S_NOREC,$dest); | |
| $md5 = md5_of_file($dest); | |
| //chmod($dest,0666); | |
| $W = $size[0]; | |
| $H = $size[1]; | |
| switch ($size[2]) { | |
| case 1 : $ext=".gif";break; | |
| case 2 : $ext=".jpg";break; | |
| case 3 : $ext=".png";break; | |
| case 4 : $ext=".swf";error(S_UPFAIL,$dest);break; | |
| case 5 : $ext=".psd";error(S_UPFAIL,$dest);break; | |
| case 6 : $ext=".bmp";error(S_UPFAIL,$dest);break; | |
| case 7 : $ext=".tiff";error(S_UPFAIL,$dest);break; | |
| case 8 : $ext=".tiff";error(S_UPFAIL,$dest);break; | |
| case 9 : $ext=".jpc";error(S_UPFAIL,$dest);break; | |
| case 10 : $ext=".jp2";error(S_UPFAIL,$dest);break; | |
| case 11 : $ext=".jpx";error(S_UPFAIL,$dest);break; | |
| case 13 : $ext=".swf";error(S_UPFAIL,$dest);break; | |
| default : $ext=".xxx";error(S_UPFAIL,$dest);break; | |
| } | |
| if(GIF_ONLY == 1 && $size[2] != 1) error(S_UPFAIL,$dest); | |
| } // end PDF processing -else | |
| $insfile=substr($upfile_name, 0, -strlen($ext)); | |
| spam_filter_post_image($name, $dest, $md5, $upfile_name, $ext); | |
| // Picture reduction | |
| if (!$resto) { | |
| $maxw = MAX_W; | |
| $maxh = MAX_H; | |
| } else { | |
| $maxw = MAXR_W; | |
| $maxh = MAXR_H; | |
| } | |
| if (defined('MIN_W') && MIN_W > $W) error(S_UPFAIL,$dest); | |
| if (defined('MIN_H') && MIN_H > $H) error(S_UPFAIL,$dest); | |
| if(defined('MAX_DIMENSION')) | |
| $maxdimension = MAX_DIMENSION; | |
| else | |
| $maxdimension = 5000; | |
| if ($W > $maxdimension || $H > $maxdimension) { | |
| error(S_TOOBIGRES,$dest); | |
| } elseif($W > $maxw || $H > $maxh){ | |
| $W2 = $maxw / $W; | |
| $H2 = $maxh / $H; | |
| ($W2 < $H2) ? $key = $W2 : $key = $H2; | |
| $TN_W = ceil($W * $key); | |
| $TN_H = ceil($H * $key); | |
| } | |
| $mes = $upfile_name . ' ' . S_UPGOOD; | |
| } | |
| if(OEKAKI_BOARD == 1 && $_POST['oe_chk']) { | |
| } | |
| else { | |
| if($_FILES["upfile"]["error"]>0){ | |
| if($_FILES["upfile"]["error"]==UPLOAD_ERR_INI_SIZE) | |
| error(S_TOOBIG,$dest); | |
| if($_FILES["upfile"]["error"]==UPLOAD_ERR_FORM_SIZE) | |
| error(S_TOOBIG,$dest); | |
| if($_FILES["upfile"]["error"]==UPLOAD_ERR_PARTIAL) | |
| error(S_UPFAIL,$dest); | |
| if($_FILES["upfile"]["error"]==UPLOAD_ERR_CANT_WRITE) | |
| error(S_UPFAIL,$dest); | |
| } | |
| if($upfile_name&&$_FILES["upfile"]["size"]==0){ | |
| error(S_TOOBIGORNONE,$dest); | |
| } | |
| } | |
| if(ENABLE_EXIF==1) { | |
| $exif = htmlspecialchars(shell_exec("/usr/local/bin/exiftags $dest")); | |
| } | |
| //The last result number | |
| $lastno = mysql_result(mysql_board_call("select max(no) from ".SQLLOG),0,0); | |
| $resto=(int)$resto; | |
| if($resto){ | |
| if (!mysql_result(mysql_board_call("select count(no) from ".SQLLOG." where root>0 and no=$resto"),0,0)) | |
| error(S_NOTHREADERR,$dest); | |
| } | |
| if($_SERVER["REQUEST_METHOD"] != "POST") error(S_UNJUST,$dest); | |
| // Form content check | |
| if(!$name||ereg("^[ |　|]*$",$name)) $name=""; | |
| if(!$com||ereg("^[ |　|\t]*$",$com)) $com=""; | |
| if(!$sub||ereg("^[ |　|]*$",$sub)) $sub=""; | |
| if(NO_TEXTONLY==1 && !$admin) { | |
| if(!$resto&&!$has_image) error(S_NOPIC,$dest); | |
| } else { | |
| if(!$resto&&!$textonly&&!$has_image) error(S_NOPIC,$dest); | |
| } | |
| if(!trim($com) && !$has_image) error(S_NOTEXT,$dest); | |
| $name=ereg_replace(S_MANAGEMENT,"\"".S_MANAGEMENT."\"",$name); | |
| $name=ereg_replace(S_DELETION,"\"".S_DELETION."\"",$name); | |
| if(!$admin && strlen($com) > 2000) error(S_TOOLONG,$dest); | |
| if(strlen($name) > 100) error(S_TOOLONG,$dest); | |
| if(strlen($email) > 100) error(S_TOOLONG,$dest); | |
| if(strlen($sub) > 100) error(S_TOOLONG,$dest); | |
| if(strlen($resto) > 10) error(S_UNUSUAL,$dest); | |
| if(strlen($url) > 10) error(S_UNUSUAL,$dest); | |
| logtime("starting autoban checks"); | |
| spam_filter_post_content($com, $sub, $name, $fsize, $resto, $W, $H, $dest, $upfile_name, $email); | |
| //host check | |
| //$host = gethostbyaddr($_SERVER["REMOTE_ADDR"]); | |
| $host = $_SERVER["REMOTE_ADDR"]; | |
| //lol /b/ | |
| $xff = getenv("HTTP_X_FORWARDED_FOR"); | |
| spam_filter_post_ip($dest); | |
| logtime("inserting xff"); | |
| if (SAVE_XFF==1&&getenv("HTTP_X_FORWARDED_FOR")) { | |
| mysql_global_do(sprintf("INSERT INTO xff (tim,board,host) VALUES ('%s','%s','%s')", $tim,BOARD_DIR,mysql_escape_string(getenv("HTTP_X_FORWARDED_FOR"))) ); | |
| } | |
| // No, path, time, and url format | |
| if($pwd==""){ | |
| if($pwdc==""){ | |
| $pwd=rand();$pwd=substr($pwd,0,8); | |
| }else{ | |
| $pwd=$pwdc; | |
| } | |
| } | |
| $c_pass = $pwd; | |
| $pass = ($pwd) ? substr(md5($pwd),2,8) : "*"; | |
| $youbi = array(S_SUN, S_MON, S_TUE, S_WED, S_THU, S_FRI, S_SAT); | |
| $yd = $youbi[date("w", $time)] ; | |
| if(SHOW_SECONDS == 1) { | |
| $now = date("m/d/y",$time)."(".(string)$yd.")".date("H:i:s",$time); | |
| } else { | |
| $now = date("m/d/y",$time)."(".(string)$yd.")".date("H:i",$time); | |
| } | |
| if(DISP_ID){ | |
| if($email&&DISP_ID==1){ | |
| $now .= " ID:???"; | |
| }else{ | |
| $now.=" ID:".substr(crypt(md5($_SERVER["REMOTE_ADDR"].'id'.date("Ymd", $time)),'id'),+3); | |
| } | |
| } | |
| $c_name = $name; | |
| $c_email = $email; | |
| if(JANITOR_BOARD == 1) { // now that the cookie_name and _email are separated, we can modify the real ones | |
| $name = $_COOKIE['4chan_auser']; | |
| $email = ''; | |
| } | |
| //Text plastic surgery (rorororor) | |
| $email= CleanStr($email); $email=ereg_replace("[\r\n]","",$email); | |
| $sub = CleanStr($sub); $sub =ereg_replace("[\r\n]","",$sub); | |
| $url = CleanStr($url); $url =ereg_replace("[\r\n]","",$url); | |
| $resto= CleanStr($resto); $resto=ereg_replace("[\r\n]","",$resto); | |
| $com = CleanStr($com,1); | |
| if(SPOILERS==1&&$spoiler) { | |
| $sub = "SPOILER<>$sub"; | |
| } | |
| // Standardize new character lines | |
| $com = str_replace( "\r\n", "\n", $com); | |
| $com = str_replace( "\r", "\n", $com); | |
| //$com = preg_replace("/\A([0-9A-Za-z]{10})+\Z/", "!s8AAL8z!", $com); | |
| // Continuous lines | |
| $com = ereg_replace("\n((　| )*\n){3,}","\n",$com); | |
| if(!$admin && substr_count($com,"\n")>MAX_LINES) error("Error: Too many lines.",$dest); | |
| $com = nl2br($com); //br is substituted before newline char | |
| $com = str_replace("\n", "", $com); //\n is erased | |
| if(ROBOT9000==1) { | |
| include '/www/global/plugins/robot9000.php'; | |
| $r9k = robot9000($r9kname,$email,$sub,$com,$md5,ip2long($host),valid('floodbypass')); | |
| if($r9k != "ok") error($r9k, $dest); | |
| } | |
| if(ENABLE_EXIF==1 && $exif) { | |
| //turn exif into a table | |
| $exiflines = explode("\n",$exif); | |
| $exif = "<table class=\"exif\" id=\"exif$tim\" style=\"display:none;\">"; | |
| foreach($exiflines as $exifline) { | |
| list($exiftag,$exifvalue) = explode(': ',$exifline); | |
| if($exifvalue != '') | |
| $exif .= "<tr><td>$exiftag</td><td>$exifvalue</td></tr>"; | |
| else | |
| $exif .= "<tr><td><b>$exiftag</b></td></tr>"; | |
| } | |
| $exif .= '</table>'; | |
| $com .= "<br/><span class=\"abbr\">EXIF data available. Click <a href=\"javascript:void(0)\" onclick=\"toggle('exif$tim')\">here</a> to show/hide.</span><br/>"; | |
| $com .= "$exif"; | |
| } | |
| if(OEKAKI_BOARD==1 && $_POST['oe_chk']) { | |
| $com .= oe_info($dest,$tim); | |
| } | |
| //$name=ereg_replace("◆","◇",$name); //replace filled diamond with hollow diamond (sjis) | |
| $name=ereg_replace("[\r\n]","",$name); | |
| $names=iconv("UTF-8", "CP932//IGNORE", $name); // convert to Windows Japanese #ｋａｍｉ | |
| //start new tripcode crap | |
| list ($name) = explode("#", $name); | |
| $name = CleanStr($name); | |
| if(preg_match("/\#+$/", $names)){ | |
| $names = preg_replace("/\#+$/", "", $names); | |
| } | |
| if (preg_match("/\#/", $names)) { | |
| $names = str_replace("&#","&&",htmlspecialchars($names)); # otherwise HTML numeric entities screw up explode()! | |
| list ($nametemp,$trip,$sectrip) = str_replace("&&", "&#", explode("#",$names,3)); | |
| $names = $nametemp; | |
| $name .= "</span>"; | |
| if ($trip != "") { | |
| if (FORTUNE_TRIP == 1 && $trip == "fortune") { | |
| $fortunes = array("Bad Luck","Average Luck","Good Luck","Excellent Luck","Reply hazy, try again","Godly Luck","Very Bad Luck","Outlook good","Better not tell you now","You will meet a dark handsome stranger","ｷﾀ━━━━━━(ﾟ∀ﾟ)━━━━━━ !!!!","（　´_ゝ`）ﾌｰﾝ ","Good news will come to you by mail"); | |
| $fortunenum = rand(0,sizeof($fortunes)-1); | |
| $fortcol = "#" . sprintf("%02x%02x%02x", | |
| 127+127*sin(2*M_PI * $fortunenum / sizeof($fortunes)), | |
| 127+127*sin(2*M_PI * $fortunenum / sizeof($fortunes)+ 2/3 * M_PI), | |
| 127+127*sin(2*M_PI * $fortunenum / sizeof($fortunes) + 4/3 * M_PI)); | |
| $com = "<font color=$fortcol><b>Your fortune: ".$fortunes[$fortunenum]."</b></font><br /><br />".$com; | |
| $trip = ""; | |
| if($sectrip == "") { | |
| if($name == "</span>" && $sectrip == "") | |
| $name = S_ANONAME; | |
| else | |
| $name = str_replace("</span>","",$name); | |
| } | |
| } else if($trip=="fortune") { | |
| //remove fortune even if FORTUNE_TRIP is off | |
| $trip=""; | |
| if($sectrip == "") { | |
| if($name == "</span>" && $sectrip == "") | |
| $name = S_ANONAME; | |
| else | |
| $name = str_replace("</span>","",$name); | |
| } | |
| } else { | |
| $salt = strtr(preg_replace("/[^\.-z]/",".",substr($trip."H.",1,2)),":;<=>?@[\\]^_`","ABCDEFGabcdef"); | |
| $trip = substr(crypt($trip, $salt),-10); | |
| $name.=" <span class=\"postertrip\">!".$trip; | |
| } | |
| } | |
| if ($sectrip != "") { | |
| $salt = "LOLLOLOLOLOLOLOLOLOLOLOLOLOLOLOL"; #this is ONLY used if the host doesn't have openssl | |
| #I don't know a better way to get random data | |
| if (file_exists(SALTFILE)) { #already generated a key | |
| $salt = file_get_contents(SALTFILE); | |
| } else { | |
| system("openssl rand 448 > '".SALTFILE."'",$err); | |
| if ($err === 0) { | |
| chmod(SALTFILE,0400); | |
| $salt = file_get_contents(SALTFILE); | |
| } | |
| } | |
| $sha = base64_encode(pack("H*",sha1($sectrip.$salt))); | |
| $sha = substr($sha,0,11); | |
| if($trip=="") $name.=" <span class=\"postertrip\">"; | |
| $name.="!!".$sha; | |
| } | |
| } //end new tripcode crap | |
| if(!$name) $name=S_ANONAME; | |
| if(!$com) $com=S_ANOTEXT; | |
| if(!$sub) $sub=S_ANOTITLE; | |
| if(DICE_ROLL==1) { | |
| if ($email) { | |
| if (preg_match("/dice[ +](\\d+)[ d+](\\d+)(([ +-]+?)(-?\\d+))?/", $email, $match)) { | |
| $dicetxt = "rolled "; | |
| $dicenum = min(25, $match[1]); | |
| $diceside = $match[2]; | |
| $diceaddexpr = $match[3]; | |
| $dicesign = $match[4]; | |
| $diceadd = intval($match[5]); | |
| for ($i = 0; $i < $dicenum; $i++) { | |
| $dicerand = mt_rand(1, $diceside); | |
| if ($i) $dicetxt .= ", "; | |
| $dicetxt .= $dicerand; | |
| $dicesum += $dicerand; | |
| } | |
| if ($diceaddexpr) { | |
| if (strpos($dicesign, "-") > 0) $diceadd *= -1; | |
| $dicetxt .= ($diceadd >= 0 ? " + " : " - ").abs($diceadd); | |
| $dicesum += $diceadd; | |
| } | |
| $dicetxt .= " = $dicesum<br /><br />"; | |
| $com = "<b>$dicetxt</b>".$com; | |
| } | |
| } | |
| } | |
| $emails=$email; | |
| if(ereg("(#|＃)(.*)",$emails,$regs)){ | |
| if ($regs[2]=="pubies") { | |
| list($email)=explode("#",$email,2); | |
| if(valid()) { | |
| $color1="#800080"; | |
| $color2="#900090"; | |
| $ma="Mod"; | |
| if(stristr($name,"moot")||stristr($name,"coda")) { | |
| $color1="#F00000"; | |
| $color2="#FF0000"; | |
| $ma="Admin"; | |
| } | |
| $name="<span title='$email' style=\"color:$color1\">".$name; | |
| $name=str_replace(" <span class=\"postertrip\">","</span> <span class=\"postertrip\"><span title='$email' style=\"color:$color2;font-weight:normal\">",$name); | |
| $name.="</span></span> <span class=\"commentpostername\"><span title='$email' style=\"color:$color1\">## $ma</span>"; | |
| } | |
| $email = ''; | |
| /* } elseif ($regs[2]=="munroexkcd") { | |
| $name="<span style=\"color:#0000F0\">".$name; | |
| $name=str_replace(" <span class=\"postertrip\">","</span> <span class=\"postertrip\"><span style=\"color:#0000FF;font-weight:normal\">",$name); | |
| $name.="</span></span> <span class=\"commentpostername\"><span style=\"color:#0000F0\">## BlOgGeR</span>"; | |
| list($email)=explode("#",$email,2); | |
| } elseif ($regs[2]=="netkingdongs") { | |
| $name='</span> <span class="postertrip">!!NETKING...'; | |
| list($email)=explode("#",$email,2); | |
| } elseif ($regs[2]=="redhammer") { | |
| if(!valid()) auto_ban("<b>autobanmenow</b>",$name,"redhammer capcode"); | |
| list($email)=explode("#",$email,2); */ | |
| } | |
| } | |
| $nameparts=explode('</span> <span class="postertrip">!',$name); | |
| check_blacklist(array( | |
| 'name' => $nameparts[0], | |
| 'trip' => $trip, | |
| 'nametrip' => "{$nameparts[0]} #{$trip}", | |
| 'md5' => $md5, | |
| 'email' => $email, | |
| 'sub' => $sub, | |
| 'com' => $com, | |
| 'pwd' => $pass, | |
| 'xff' => $xff, | |
| 'filename' => $insfile, | |
| ), $dest); | |
| spam_filter_post_trip($name, $trip, $dest); | |
| if(SPOILERS==1) { | |
| $com = spoiler_parse($com); | |
| } | |
| if(SAGE_FILTER==1&&(stripos($sub,"sage")!==FALSE||stripos($com,"sage")!==FALSE)&&stripos($email,"sage")!==FALSE) $email=""; //lol /b/ | |
| if(WORD_FILT&&file_exists("wf.php")){ | |
| $com = word_filter($com,"com"); | |
| if($sub) | |
| $sub = word_filter($sub,"sub"); | |
| $com = str_replace(":getprophet:",$no,$com); | |
| $namearr=explode('</span> <span class="postertrip">',$name); | |
| if (strstr($name,'</span> <span class="postertrip">')) { $nametrip='</span> <span class="postertrip">'.$namearr[1]; } else { $nametrip=""; } | |
| if($namearr[0] != S_ANONAME) | |
| $name = word_filter($namearr[0],"name").$nametrip; | |
| } | |
| if(FORCED_ANON==1) {$name = "</span>$now<span>"; $sub = ''; $now = '';} | |
| $com = wordwrap2($com, 100, "<br />"); | |
| $com = preg_replace("!(^|>)(>[^<]*)!", "\\1<font class=\"unkfunc\">\\2</font>", $com); | |
| $is_sage = stripos($email, "sage") !== FALSE; | |
| //post is now completely created(?) | |
| logtime("Before flood check"); | |
| $may_flood = valid('floodbypass'); | |
| if (!$may_flood) { | |
| if ($com) { | |
| // Check for duplicate comments | |
| $query="select count(no)>0 from ".SQLLOG." where com='".mysql_escape_string($com)."' ". | |
| "and host='".mysql_escape_string($host)."' ". | |
| "and time>".($time-RENZOKU_DUPE); | |
| $result=mysql_board_call($query); | |
| if(mysql_result($result,0,0))error(S_RENZOKU,$dest); | |
| mysql_free_result($result); | |
| } | |
| if (!$has_image) { | |
| // Check for flood limit on replies | |
| $query="select count(no)>0 from ".SQLLOG." where time>".($time - RENZOKU)." ". | |
| "and host='".mysql_escape_string($host)."' and resto>0"; | |
| $result=mysql_board_call($query); | |
| if(mysql_result($result,0,0))error(S_RENZOKU, $dest); | |
| mysql_free_result($result); | |
| } | |
| if ($is_sage) { | |
| // Check flood limit on sage posts | |
| $query="select count(no)>0 from ".SQLLOG." where time>".($time - RENZOKU_SAGE)." ". | |
| "and host='".mysql_escape_string($host)."' and resto>0 and permasage=1"; | |
| $result=mysql_board_call($query); | |
| if(mysql_result($result,0,0))error(S_RENZOKU, $dest); | |
| mysql_free_result($result); | |
| } | |
| if (!$resto) { | |
| // Check flood limit on new threads | |
| $query="select count(no)>0 from ".SQLLOG." where time>".($time - RENZOKU3)." ". | |
| "and host='".mysql_escape_string($host)."' and root>0"; //root>0 == non-sticky | |
| $result=mysql_board_call($query); | |
| if(mysql_result($result,0,0))error(S_RENZOKU3, $dest); | |
| mysql_free_result($result); | |
| } | |
| } | |
| // Upload processing | |
| if($has_image) { | |
| if(!$may_flood) { | |
| $query="select count(no)>0 from ".SQLLOG." where time>".($time - RENZOKU2)." ". | |
| "and host='".mysql_escape_string($host)."' and resto>0"; | |
| $result=mysql_board_call($query); | |
| if(mysql_result($result,0,0))error(S_RENZOKU2,$dest); | |
| mysql_free_result($result); | |
| } | |
| //Duplicate image check | |
| $result = mysql_board_call("select no,resto from ".SQLLOG." where md5='$md5'"); | |
| if(mysql_num_rows($result)){ | |
| list($dupeno,$duperesto) = mysql_fetch_row($result); | |
| if(!$duperesto) $duperesto = $dupeno; | |
| error('<a href="'.DATA_SERVER . BOARD_DIR . "/res/" . $duperesto . PHP_EXT . '#' . $dupeno . '">'.S_DUPE.'</a>',$dest); | |
| } | |
| mysql_free_result($result); | |
| } | |
| $rootqu = $resto ? "0" : "now()"; | |
| // thumbnail | |
| if($has_image){ | |
| rename($dest,$path.$tim.$ext); | |
| if(USE_THUMB){ | |
| $tn_name = thumb($path,$tim,$ext,$resto); | |
| if (!$tn_name && $ext != ".pdf") { | |
| error(S_UNUSUAL); | |
| } | |
| } | |
| if(OEKAKI_BOARD == 1 && $_POST['oe_chk']) { | |
| rename("$dest.pch",$path.$tim.'.pch'); | |
| unlink($upfile); // get rid of the tmp/ entries | |
| unlink($pchfile); | |
| } | |
| } | |
| logtime("Thumbnail created"); | |
| logtime("Before insertion"); | |
| // noko (stay) actions | |
| if($email == 'noko') { | |
| $email = ''; $noko = 1; | |
| } | |
| else if($email == 'noko2') { | |
| $email = ''; $noko = 2; | |
| } | |
| //find sticky & autosage | |
| // auto-sticky | |
| $sticky = false; | |
| $autosage = spam_filter_should_autosage($com, $sub, $name, $fsize, $resto, $W, $H, $dest, $insertid); | |
| if(defined('AUTOSTICKY') && AUTOSTICKY) { | |
| $autosticky = preg_split("/,\s*/", AUTOSTICKY); | |
| if($resto == 0) { | |
| if($insertid % 1000000 == 0 || in_array($insertid,$autosticky)) | |
| $sticky = true; | |
| } | |
| } | |
| $flag_cols = ""; | |
| $flag_vals = ""; | |
| if ($sticky) { | |
| $flag_cols = ",sticky"; | |
| $flag_vals = ",1"; | |
| } | |
| //permasage just means "is sage" for replies | |
| if ($resto ? $is_sage : $autosage) { | |
| $flag_cols .= ",permasage"; | |
| $flag_vals .= ",1"; | |
| } | |
| $query="insert into ".SQLLOG." (now,name,email,sub,com,host,pwd,filename,ext,w,h,tn_w,tn_h,tim,time,md5,fsize,root,resto$flag_cols) values (". | |
| "'".$now."',". | |
| "'".mysql_escape_string($name)."',". | |
| "'".mysql_escape_string($email)."',". | |
| "'".mysql_escape_string($sub)."',". | |
| "'".mysql_escape_string($com)."',". | |
| "'".mysql_escape_string($host)."',". | |
| "'".mysql_escape_string($pass)."',". | |
| "'".mysql_escape_string($insfile)."',". | |
| "'".$ext."',". | |
| (int)$W.",". | |
| (int)$H.",". | |
| (int)$TN_W.",". | |
| (int)$TN_H.",". | |
| "'".$tim."',". | |
| (int)$time.",". | |
| "'".$md5."',". | |
| (int)$fsize.",". | |
| $rootqu.",". | |
| (int)$resto. | |
| $flag_vals.")"; | |
| if(!$result=mysql_board_call($query)){echo S_SQLFAIL;} //post registration | |
| $cookie_domain = (NOT4CHAN==1)?'.not4chan.org':'.4chan.org'; | |
| //Cookies | |
| setrawcookie("4chan_name", rawurlencode($c_name), time()+($c_name?(7*24*3600):-3600),'/',$cookie_domain); | |
| //header("Set-Cookie: 4chan_name=$c_name; expires=".date("D, d-M-Y H:i:s",time()+7*24*3600)." GMT",false); | |
| if (($c_email!="sage")&&($c_email!="age")){ | |
| setcookie ("4chan_email", $c_email,time()+($c_email?(7*24*3600):-3600),'/',$cookie_domain); // 1 week cookie expiration | |
| } | |
| setcookie("4chan_pass", $c_pass,time()+7*24*3600,'/',$cookie_domain); // 1 week cookie expiration | |
| $insertid = mysql_board_insert_id(); | |
| if($resto){ //sage or age action | |
| $resline=mysql_board_call("select count(no) from ".SQLLOG." where resto=".$resto); | |
| $countres=mysql_result($resline,0,0); | |
| mysql_free_result($resline); | |
| $resline=mysql_board_call("select sticky,permasage from ".SQLLOG." where no=".$resto); | |
| list($stuck,$psage)=mysql_fetch_row($resline); | |
| mysql_free_result($resline); | |
| if((stripos($email,'sage')===FALSE && $countres < MAX_RES && $stuck != "1" && $psage != "1") || ($admin&&$age&&$stuck != "1")){ | |
| $query="update ".SQLLOG." set root=now() where no=$resto"; //age | |
| mysql_board_call($query); | |
| } | |
| } | |
| $static_rebuild = defined("STATIC_REBUILD") && (STATIC_REBUILD==1); | |
| logtime("Before trim_db"); | |
| // trim database | |
| if(!$resto && !$static_rebuild) | |
| trim_db(); | |
| logtime("After trim_db"); | |
| if(PROCESSLIST == 1 && (time() > ($locked_time+7))) { | |
| $dump = mysql_real_escape_string(serialize(array('GET'=>$_GET,'POST'=>$_POST,'SERVER'=>$_SERVER))); | |
| mysql_board_call("INSERT INTO proclist VALUES (connection_id(),'$dump','slow post')"); | |
| } | |
| /*mysql_board_unlock(); | |
| logtime("Tables unlocked"); */ | |
| if(BOARD_DIR == 'b') | |
| iplog_add(BOARD_DIR, $insertid, $host); | |
| logtime("Ip logged"); | |
| if(RAPIDSEARCH_LOGGING == 1) { | |
| rapidsearch_check(BOARD_DIR, $insertid, $com); | |
| } | |
| logtime("rapidsearch check finished"); | |
| $deferred = false; | |
| // update html | |
| if($resto) { | |
| $deferred = updatelog($resto, $static_rebuild); | |
| } else { | |
| $deferred = updatelog($insertid, $static_rebuild); | |
| } | |
| logtime("Pages rebuilt"); | |
| // determine url to redirect to | |
| if($noko && !$resto) { | |
| $redirect = DATA_SERVER . BOARD_DIR . "/res/" . $insertid . PHP_EXT; | |
| } | |
| else if($noko==1) { | |
| $redirect = DATA_SERVER . BOARD_DIR . "/res/" . $resto . PHP_EXT . '#' . $insertid; | |
| } | |
| else { | |
| $redirect = PHP_SELF2_ABS; | |
| } | |
| if($deferred) { | |
| echo "<html><head><META HTTP-EQUIV=\"refresh\" content=\"2;URL=$redirect\"></head>"; | |
| echo "<body>$mes ".S_SCRCHANGE."<br>Your post may not appear immediately.<!-- thread:$resto,no:$insertid --></body></html>"; | |
| } | |
| else { | |
| echo "<html><head><META HTTP-EQUIV=\"refresh\" content=\"1;URL=$redirect\"></head>"; | |
| echo "<body>$mes ".S_SCRCHANGE."<!-- thread:$resto,no:$insertid --></body></html>"; | |
| } | |
| } | |
| function resredir($res) { | |
| $res = (int)$res; | |
| mysql_board_lock(); | |
| if(!$redir=mysql_board_call("select no,resto from ".SQLLOG." where no=".$res)){echo S_SQLFAIL;} | |
| list($no,$resto)=mysql_fetch_row($redir); | |
| if(!$no) { | |
| $maxq = mysql_board_call("select max(no) from ".SQLLOG.""); | |
| list($max)=mysql_fetch_row($maxq); | |
| if(!$max || ($res > $max)) | |
| header("HTTP/1.0 404 Not Found"); | |
| else // res < max, so it must be deleted! | |
| header("HTTP/1.0 410 Gone"); | |
| error(S_NOTHREADERR,$dest); | |
| } | |
| if($resto=="0") // thread | |
| $redirect = DATA_SERVER . BOARD_DIR . "/res/" . $no . PHP_EXT . '#' . $no; | |
| else | |
| $redirect = DATA_SERVER . BOARD_DIR . "/res/" . $resto . PHP_EXT . '#' . $no; | |
| echo "<META HTTP-EQUIV=\"refresh\" content=\"0;URL=$redirect\">"; | |
| if($resto=="0") | |
| log_cache(); | |
| mysql_board_unlock(); | |
| if($resto=="0") { // thread | |
| updatelog($res); | |
| } | |
| } | |
| //thumbnails | |
| function thumb($path,$tim,$ext,$resto){ | |
| if(!function_exists("ImageCreate")||!function_exists("ImageCreateFromJPEG"))return; | |
| $fname=$path.$tim.$ext; | |
| $thumb_dir = THUMB_DIR; //thumbnail directory | |
| $outpath = $thumb_dir.$tim.'s.jpg'; | |
| if (!$resto) { | |
| $width = MAX_W; //output width | |
| $height = MAX_H; //output height | |
| } else { | |
| $width = MAXR_W; //output width (imgreply) | |
| $height = MAXR_H; //output height (imgreply) | |
| } | |
| // width, height, and type are aquired | |
| if(ENABLE_PDF==1 && $ext=='.pdf') { | |
| // create jpeg for the thumbnailer | |
| $pdfjpeg = $path.$tim.'.pdf.tmp'; | |
| @exec("/usr/local/bin/gs -q -dSAFER -dNOPAUSE -dBATCH -sDEVICE=jpeg -sOutputFile=$pdfjpeg $fname"); | |
| if(!file_exists($pdfjpeg)) unlink($fname); | |
| $fname = $pdfjpeg; | |
| } | |
| $size = GetImageSize($fname); | |
| $memory_limit_increased = false; | |
| if($size[0]*$size[1] > 3000000) { | |
| $memory_limit_increased = true; | |
| ini_set('memory_limit', memory_get_usage() + $size[0]*$size[1]*10); // for huge images | |
| } | |
| switch ($size[2]) { | |
| case 1 : | |
| if(function_exists("ImageCreateFromGIF")){ | |
| $im_in = ImageCreateFromGIF($fname); | |
| if($im_in){break;} | |
| } | |
| if(!is_executable(realpath("/www/global/gif2png"))||!function_exists("ImageCreateFromPNG"))return; | |
| @exec(realpath("/www/global/gif2png")." $fname",$a); | |
| if(!file_exists($path.$tim.'.png'))return; | |
| $im_in = ImageCreateFromPNG($path.$tim.'.png'); | |
| unlink($path.$tim.'.png'); | |
| if(!$im_in)return; | |
| break; | |
| case 2 : $im_in = ImageCreateFromJPEG($fname); | |
| if(!$im_in){return;} | |
| break; | |
| case 3 : | |
| if(!function_exists("ImageCreateFromPNG"))return; | |
| $im_in = ImageCreateFromPNG($fname); | |
| if(!$im_in){return;} | |
| break; | |
| default : return; | |
| } | |
| // Resizing | |
| if ($size[0] > $width || $size[1] > $height || $size[2]==1) { | |
| $key_w = $width / $size[0]; | |
| $key_h = $height / $size[1]; | |
| ($key_w < $key_h) ? $keys = $key_w : $keys = $key_h; | |
| $out_w = ceil($size[0] * $keys) +1; | |
| $out_h = ceil($size[1] * $keys) +1; | |
| /*if ($size[2]==1) { | |
| $out_w = $size[0]; | |
| $out_h = $size[1]; | |
| } //what was this for again? */ | |
| } else { | |
| $out_w = $size[0]; | |
| $out_h = $size[1]; | |
| } | |
| // the thumbnail is created | |
| if(function_exists("ImageCreateTrueColor")&&get_gd_ver()=="2"){ | |
| $im_out = ImageCreateTrueColor($out_w, $out_h); | |
| }else{$im_out = ImageCreate($out_w, $out_h);} | |
| // copy resized original | |
| ImageCopyResampled($im_out, $im_in, 0, 0, 0, 0, $out_w, $out_h, $size[0], $size[1]); | |
| // thumbnail saved | |
| ImageJPEG($im_out, $outpath ,60); | |
| //chmod($thumb_dir.$tim.'s.jpg',0666); | |
| // created image is destroyed | |
| ImageDestroy($im_in); | |
| ImageDestroy($im_out); | |
| if(isset($pdfjpeg)) { unlink($pdfjpeg); } // if PDF was thumbnailed delete the orig jpeg | |
| if($memory_limit_increased) | |
| ini_restore('memory_limit'); | |
| return $outpath; | |
| } | |
| //check version of gd | |
| function get_gd_ver(){ | |
| if(function_exists("gd_info")){ | |
| $gdver=gd_info(); | |
| $phpinfo=$gdver["GD Version"]; | |
| }else{ //earlier than php4.3.0 | |
| ob_start(); | |
| phpinfo(8); | |
| $phpinfo=ob_get_contents(); | |
| ob_end_clean(); | |
| $phpinfo=strip_tags($phpinfo); | |
| $phpinfo=stristr($phpinfo,"gd version"); | |
| $phpinfo=stristr($phpinfo,"version"); | |
| } | |
| $end=strpos($phpinfo,"."); | |
| $phpinfo=substr($phpinfo,0,$end); | |
| $length = strlen($phpinfo)-1; | |
| $phpinfo=substr($phpinfo,$length); | |
| return $phpinfo; | |
| } | |
| //md5 calculation for earlier than php4.2.0 | |
| function md5_of_file($inFile) { | |
| if (file_exists($inFile)){ | |
| if(function_exists('md5_file')){ | |
| return md5_file($inFile); | |
| }else{ | |
| $fd = fopen($inFile, 'r'); | |
| $fileContents = fread($fd, filesize($inFile)); | |
| fclose ($fd); | |
| return md5($fileContents); | |
| } | |
| }else{ | |
| return false; | |
| }} | |
| /* text plastic surgery */ | |
| // you can call with skip_bidi=1 if cleaning a paragraph element (like $com) | |
| function CleanStr($str,$skip_bidi=0){ | |
| global $admin,$html; | |
| $str = trim($str);//blankspace removal | |
| if (get_magic_quotes_gpc()) {//magic quotes is deleted (?) | |
| $str = stripslashes($str); | |
| } | |
| if($admin!=ADMIN_PASS){ | |
| $str = htmlspecialchars($str); | |
| } elseif(( $admin==ADMIN_PASS)&&$html!=1) { | |
| $str = htmlspecialchars($str); | |
| } | |
| if($skip_bidi == 0) { | |
| // fix malformed bidirectional overrides - insert as many PDFs as RLOs | |
| //RLO | |
| $str .= str_repeat("\xE2\x80\xAC", substr_count($str, "\xE2\x80\xAE"/* U+202E */)); | |
| $str .= str_repeat("‬", substr_count($str, "‮")); | |
| $str .= str_repeat("‬", substr_count($str, "‮")); | |
| //RLE | |
| $str .= str_repeat("\xE2\x80\xAC", substr_count($str, "\xE2\x80\xAB"/* U+202B */)); | |
| $str .= str_repeat("‬", substr_count($str, "‫")); | |
| $str .= str_repeat("‬", substr_count($str, "‫")); | |
| } | |
| return str_replace(",", ",", $str);//remove commas | |
| } | |
| //check for table existance | |
| function table_exist($table){ | |
| $result = mysql_board_call("show tables like '$table'"); | |
| if(!$result){return 0;} | |
| $a = mysql_fetch_row($result); | |
| mysql_free_result($result); | |
| return $a; | |
| } | |
| function report() { | |
| require '/www/global/forms/report.php'; | |
| require '/www/global/modes/report.php'; | |
| if($_SERVER['REQUEST_METHOD'] == 'GET') { | |
| if(!report_post_exists($_GET['no'])) | |
| fancydie('That post doesn\'t exist anymore.'); | |
| if(report_post_sticky($_GET['no'])) | |
| fancydie('Stop trying to report a sticky.'); | |
| report_check_ip(BOARD_DIR, $_GET['no']); | |
| form_report(BOARD_DIR, $_GET['no']); | |
| } | |
| else { | |
| report_check_ip(BOARD_DIR, $_POST['no']); | |
| report_submit(BOARD_DIR, $_POST['no'], $_POST['cat']); | |
| } | |
| die('</body></html>'); | |
| } | |
| /* user image deletion */ | |
| function usrdel($no,$pwd){ | |
| global $path,$pwdc,$onlyimgdel; | |
| $host = $_SERVER["REMOTE_ADDR"]; | |
| $delno = array(); | |
| $delflag = FALSE; | |
| $rebuildindex = !(defined("STATIC_REBUILD") && STATIC_REBUILD); | |
| reset($_POST); | |
| while ($item = each($_POST)){ | |
| if($item[1]=='delete'){array_push($delno,$item[0]);$delflag=TRUE;} | |
| } | |
| if(($pwd=="")&&($pwdc!="")) $pwd=$pwdc; | |
| $countdel=count($delno); | |
| $flag = FALSE; | |
| //mysql_board_call("LOCK TABLES ".SQLLOG." WRITE"); | |
| $rebuild = array(); // keys are pages that need to be rebuilt (0 is index, of course) | |
| for($i = 0; $i<$countdel; $i++){ | |
| $resto = delete_post($delno[$i], $pwd, $onlyimgdel, 0, 1, $countdel == 1); // only show error for user deletion, not multi | |
| if($resto) | |
| $rebuild[$resto] = 1; | |
| } | |
| log_cache(); | |
| //mysql_board_call("UNLOCK TABLES"); | |
| foreach($rebuild as $key=>$val) { | |
| updatelog($key, 1); // leaving the second parameter as 0 rebuilds the index each time! | |
| } | |
| if ($rebuildindex) updatelog(); // update the index page last | |
| } | |
| /*password validation */ | |
| function oldvalid($pass){ | |
| error(S_WRONGPASS); | |
| /*if($pass && ($pass != ADMIN_PASS) ) { | |
| auto_ban_poster($name, 2, 1, 'failed the password check on imgboard manager mode', 'Trying to exploit administrative pages.'); | |
| error(S_WRONGPASS); | |
| }*/ | |
| head($dat,0); | |
| echo $dat; | |
| echo "[<a href=\"".PHP_SELF2."\">".S_RETURNS."</a>]\n"; | |
| echo "[<a href=\"".PHP_SELF."\">".S_LOGUPD."</a>]\n"; | |
| echo "<table width='100%'><tr><th bgcolor=#E08000>\n"; | |
| echo "<font color=#FFFFFF>".S_MANAMODE."</font>\n"; | |
| echo "</th></tr></table>\n"; | |
| echo "<p><form action=\"".PHP_SELF."\" method=POST>\n"; | |
| // Mana login form | |
| if(!$pass){ | |
| echo "<center><input type=hidden name=admin value=post><input type=hidden name=mode value=admin>\n"; | |
| echo "<input class=inputtext type=password name=pass size=8>"; | |
| echo "<input type=submit value=\"".S_MANASUB."\"></form></center>\n"; | |
| die("</body></html>"); | |
| } | |
| } | |
| function rebuild($all=0) { | |
| header("Pragma: no-cache"); | |
| echo "Rebuilding "; | |
| if($all) { echo "all"; } else { echo "missing"; } | |
| echo " replies and pages... <a href=\"".PHP_SELF2_ABS."\">Go back</a><br><br>\n"; | |
| ob_end_flush(); | |
| mysql_board_lock(); | |
| $starttime = microtime(true); | |
| if(!$treeline=mysql_board_call("select no,resto from ".SQLLOG." where root>0 order by root desc")){echo S_SQLFAIL;} | |
| log_cache(); | |
| mysql_board_unlock(); | |
| echo "Writing...\n"; | |
| if($all || !defined('CACHE_TTL')) { | |
| while(list($no,$resto)=mysql_fetch_row($treeline)) { | |
| if(!$resto) { | |
| updatelog($no,1); | |
| echo "No.$no created.<br>\n"; | |
| } | |
| } | |
| updatelog(); | |
| echo "Index pages created.<br>\n"; | |
| } | |
| else { | |
| $posts = rebuildqueue_take_all(); | |
| foreach($posts as $no) { | |
| $deferred = ( updatelog($no,1) ? ' (deferred)' : '' ); | |
| if($no) | |
| echo "No.$no created.$deferred<br>\n"; | |
| else | |
| echo "Index pages created.$deferred<br>\n"; | |
| } | |
| } | |
| $totaltime = microtime(true) - $starttime; | |
| echo "<br>Time elapsed (lock excluded): $totaltime seconds","<br>Pages created.<br><br>\nRedirecting back to board.\n<META HTTP-EQUIV=\"refresh\" content=\"10;URL=".PHP_SELF2."\">"; | |
| } | |
| /*-----------Main-------------*/ | |
| switch($mode){ | |
| case 'regist': | |
| regist($name,$email,$sub,$com,'',$pwd,$upfile,$upfile_name,$resto,$age); | |
| break; | |
| case 'report': | |
| report(); | |
| break; | |
| case 'admin': | |
| oldvalid($pass); | |
| if($admin=="post"){ | |
| echo "</form>"; | |
| form($post,$res,1); | |
| echo $post; | |
| die("</body></html>"); | |
| } | |
| break; | |
| case 'rebuild': | |
| rebuild(); | |
| break; | |
| case 'rebuildall': | |
| rebuild(1); | |
| break; | |
| case 'admindel': | |
| usrdel($no,$pwd); | |
| echo "<META HTTP-EQUIV=\"refresh\" content=\"0;URL=admin.php\">"; | |
| break; | |
| case 'nothing': | |
| break; | |
| case 'usrdel': | |
| usrdel($no,$pwd); | |
| default: | |
| if(JANITOR_BOARD == 1 && $mode == 'latest') { | |
| broomcloset_latest(); | |
| } | |
| if(OEKAKI_BOARD == 1 && $mode == 'oe_finish') { | |
| require_once 'oekaki.php'; | |
| oe_finish(); | |
| } | |
| elseif(OEKAKI_BOARD == 1 && $mode == 'oe_paint') { | |
| require_once 'oekaki.php'; | |
| oe_paint(); | |
| } | |
| if($res){ | |
| resredir($res); | |
| echo "<META HTTP-EQUIV=\"refresh\" content=\"10;URL=".PHP_SELF2_ABS."\">"; | |
| }else{ | |
| //mysql_board_call("LOCK TABLES ".SQLLOG." READ"); | |
| echo "Updating index...\n"; | |
| updatelog(); | |
| //mysql_board_call("UNLOCK TABLES"); | |
| echo "<META HTTP-EQUIV=\"refresh\" content=\"0;URL=".PHP_SELF2_ABS."\">"; | |
| } | |
| } | |
| ?> |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment