Thoul
VIP
Joined: 30 Jul 2002
Posts: 17676
Location: USA
|
 Posted: May 9th 2005, 2:17 pm Post subject: |
 |
|
admin/admin_forums.php
FIND
| Code:
|
if( $mode == "addforum" )
{
list($cat_id) = each($HTTP_POST_VARS['addforum']);
|
AFTER, ADD
| Code:
|
|
$cat_id = intval($cat_id);
|
admin/admin_smilies.php
FIND
| Code:
|
|
$smile_emotion = ( isset($HTTP_POST_VARS['smile_emotion']) ) ? $HTTP_POST_VARS['smile_emotion'] : $HTTP_GET_VARS['smile_emotion'];
|
AFTER, ADD
| Code:
|
$smile_code = trim($smile_code);
$smile_url = trim($smile_url);
$smile_emotion = trim($smile_emotion);
|
admin/admin_ug_auth.php
FIND
| Code:
|
if( !($result = $db->sql_query($sql)) )
{
message_die(GENERAL_ERROR, "Couldn't update user level", "", __LINE__, __FILE__, $sql);
|
AFTER, ADD
| Code:
|
}
}
$sql = 'SELECT user_id FROM ' . USER_GROUP_TABLE . "
WHERE group_id = $group_id";
$result = $db->sql_query($sql);
$group_user = array();
while ($row = $db->sql_fetchrow($result))
{
$group_user[$row['user_id']] = $row['user_id'];
}
$db->sql_freeresult($result);
$sql = "SELECT ug.user_id, COUNT(auth_mod) AS is_auth_mod
FROM " . AUTH_ACCESS_TABLE . " aa, " . USER_GROUP_TABLE . " ug
WHERE ug.user_id IN (" . implode(', ', $group_user) . ")
AND aa.group_id = ug.group_id
AND aa.auth_mod = 1
GROUP BY ug.user_id";
if ( !($result = $db->sql_query($sql)) )
{
message_die(GENERAL_ERROR, 'Could not obtain moderator status', '', __LINE__, __FILE__, $sql);
}
while ($row = $db->sql_fetchrow($result))
{
if ($row['is_auth_mod'])
{
unset($group_user[$row['user_id']]);
}
}
$db->sql_freeresult($result);
if (sizeof($group_user))
{
$sql = "UPDATE " . USERS_TABLE . "
SET user_level = " . USER . "
WHERE user_id IN (" . implode(', ', $group_user) . ")";
if ( !($result = $db->sql_query($sql)) )
{
message_die(GENERAL_ERROR, 'Could not update user level', '', __LINE__, __FILE__, $sql);
|
admin/pagestart.php
FIND
| Code:
|
$url .= ((strpos($url, '?')) ? '&' : '?') . 'sid=' . $userdata['session_id'];
redirect("index.$phpEx?sid=" . $userdata['session_id']);
|
AFTER, ADD
| Code:
|
}
if (!$userdata['session_admin'])
{
redirect(append_sid("login.$phpEx?redirect=admin/&admin=1", true));
|
db/postgres7.php
FIND AND DELETE
| Code:
|
|
$query = preg_replace('#(.*WHERE.*)(username|user_email|ban_email) = \'(.*)\'#ise', "\"\\1LOWER(\\2) = '\" . strtolower('\\3') . \"'\"", $query);
|
groupcp.php
FIND
| Code:
|
|
if ( !($row = $db->sql_fetchrow($result)) )
|
REPLACE WITH
| Code:
|
|
if ( !($row = $db->sql_fetchrow($result)) || $row['is_auth_mod'] == 0 )
|
login.php
FIND
| Code:
|
|
if( ( isset($HTTP_POST_VARS['login']) || isset($HTTP_GET_VARS['login']) ) && !$userdata['session_logged_in'] )
|
REPLACE WITH
| Code:
|
|
if( ( isset($HTTP_POST_VARS['login']) || isset($HTTP_GET_VARS['login']) ) && (!$userdata['session_logged_in'] || isset($HTTP_POST_VARS['admin'])) )
|
FIND
| Code:
|
|
$session_id = session_begin($row['user_id'], $user_ip, PAGE_INDEX, FALSE, $autologin);
|
REPLACE WITH
| Code:
|
$admin = (isset($HTTP_POST_VARS['admin'])) ? 1 : 0;
$session_id = session_begin($row['user_id'], $user_ip, PAGE_INDEX, FALSE, $autologin, $admin);
|
FIND
| Code:
|
// Do a full login page dohickey if
// user not already logged in
//
if( !$userdata['session_logged_in'] )
|
REPLACE WITH
| Code:
|
// Do a full login page dohickey if
// user not already logged in
//
if( !$userdata['session_logged_in'] || (isset($HTTP_GET_VARS['admin']) && $userdata['session_logged_in'] && $userdata['user_level'] == ADMIN))
|
FIND
| Code:
|
|
$s_hidden_fields = '<input type="hidden" name="redirect" value="' . $forward_page . '" />';
|
AFTER, ADD
| Code:
|
|
$s_hidden_fields .= (isset($HTTP_GET_VARS['admin'])) ? '<input type="hidden" name="admin" value="1" />' : '';
|
FIND
| Code:
|
|
'L_ENTER_PASSWORD' => $lang['Enter_password'],
|
REPLACE WITH
| Code:
|
|
'L_ENTER_PASSWORD' => (isset($HTTP_GET_VARS['admin'])) ? $lang['Admin_reauthenticate'] : $lang['Enter_password'],
|
viewtopic.php
FIND
| Code:
|
|
$message = str_replace('\"', '"', substr(@preg_replace('#(\>(((?>([^><]+|(?R)))*)\<))#se', "@preg_replace('#\b(" . $highlight_match . ")\b#i', '<span style=\"color:#" . $theme['fontcolor3'] . "\"><b>\\\\1</b></span>', '\\0')", '>' . $message . '<'), 1, -1));
|
REPLACE WITH
| Code:
|
|
$message = str_replace('\"', '"', substr(@preg_replace('#(\>(((?>([^><]+|(?R)))*)\<))#se', "@preg_replace('#\b(" . str_replace('\\', '\\\\', $highlight_match) . ")\b#i', '<span style=\"color:#" . $theme['fontcolor3'] . "\"><b>\\\\1</b></span>', '\\0')", '>' . $message . '<'), 1, -1));
|
includes/bbcode.php
FIND
| Code:
|
// pad it with a space so we can distinguish between FALSE and matching the 1st char (index 0).
// This is important; bbencode_quote(), bbencode_list(), and bbencode_code() all depend on it.
|
BEFORE, ADD
| Code:
|
$text = preg_replace('#(script|about|applet|activex|chrome):#is', "\\1:", $text);
|
FIND
| Code:
|
|
$patterns[] = "#\[img:$uid\](.*?)\[/img:$uid\]#si";
|
REPLACE WITH
| Code:
|
|
$patterns[] = "#\[img:$uid\]([^?].*?)\[/img:$uid\]#i";
|
FIND
| Code:
|
// [url=xxxx://www.phpbb.com]phpBB[/url] code..
$patterns[] = "#\[url=([\w]+?://[^ \"\n\r\t<]*?)\](.*?)\[/url\]#is";
$replacements[] = $bbcode_tpl['url3'];
// [url=www.phpbb.com]phpBB[/url] code.. (no xxxx:// prefix).
$patterns[] = "#\[url=((www|ftp)\.[^ \"\n\r\t<]*?)\](.*?)\[/url\]#is";
$replacements[] = $bbcode_tpl['url4'];
|
REPLACE WITH
| Code:
|
// [url=xxxx://www.phpbb.com]phpBB[/url] code..
$patterns[] = "#\[url=([\w]+?://[^ \"\n\r\t<]*?)\]([^?].*?)\[/url\]#i";
$replacements[] = $bbcode_tpl['url3'];
// [url=www.phpbb.com]phpBB[/url] code.. (no xxxx:// prefix).
$patterns[] = "#\[url=((www|ftp)\.[^ \"\n\r\t<]*?)\]([^?].*?)\[/url\]#i";
$replacements[] = $bbcode_tpl['url4'];
|
FIND
| Code:
|
function make_clickable($text)
{
|
AFTER, ADD
| Code:
|
|
$text = preg_replace('#(script|about|applet|activex|chrome):#is', "\\1:", $text);
|
includes/sessions.php
FIND
| Code:
|
|
function session_begin($user_id, $user_ip, $page_id, $auto_create = 0, $enable_autologin = 0)
|
REPLACE WITH
| Code:
|
|
function session_begin($user_id, $user_ip, $page_id, $auto_create = 0, $enable_autologin = 0, $admin = 0)
|
FIND
| Code:
|
|
SET session_user_id = $user_id, session_start = $current_time, session_time = $current_time, session_page = $page_id, session_logged_in = $login
|
REPLACE WITH
| Code:
|
|
SET session_user_id = $user_id, session_start = $current_time, session_time = $current_time, session_page = $page_id, session_logged_in = $login, session_admin = $admin
|
FIND
| Code:
|
|
$session_id = md5(uniqid($user_ip));
|
REPLACE WITH
| Code:
|
list($sec, $usec) = explode(' ', microtime());
mt_srand((float) $sec + ((float) $usec * 100000));
$session_id = md5(uniqid(mt_rand(), true));
|
FIND
| Code:
|
$sql = "INSERT INTO " . SESSIONS_TABLE . "
(session_id, session_user_id, session_start, session_time, session_ip, session_page, session_logged_in)
VALUES ('$session_id', $user_id, $current_time, $current_time, '$user_ip', $page_id, $login)";
|
REPLACE WITH
| Code:
|
$sql = "INSERT INTO " . SESSIONS_TABLE . "
(session_id, session_user_id, session_start, session_time, session_ip, session_page, session_logged_in, session_admin)
VALUES ('$session_id', $user_id, $current_time, $current_time, '$user_ip', $page_id, $login, $admin)";
|
FIND
| Code:
|
$sql = "UPDATE " . USERS_TABLE . "
SET user_session_time = $current_time, user_session_page = $page_id, user_lastvisit = $last_visit
WHERE user_id = $user_id";
if ( !$db->sql_query($sql) )
{
message_die(CRITICAL_ERROR, 'Error updating last visit time', '', __LINE__, __FILE__, $sql);
|
REPLACE WITH
| Code:
|
if (!$admin)
{
$sql = "UPDATE " . USERS_TABLE . "
SET user_session_time = $current_time, user_session_page = $page_id, user_lastvisit = $last_visit
WHERE user_id = $user_id";
if ( !$db->sql_query($sql) )
{
message_die(CRITICAL_ERROR, 'Error updating last visit time', '', __LINE__, __FILE__, $sql);
}
|
FIND
| Code:
|
|
$sessiondata['autologinid'] = ( $enable_autologin && $sessionmethod == SESSION_METHOD_COOKIE ) ? $auto_login_key : '';
|
REPLACE WITH
| Code:
|
|
$sessiondata['autologinid'] = (!$admin) ? (( $enable_autologin && $sessionmethod == SESSION_METHOD_COOKIE ) ? $auto_login_key : '') : $sessiondata['autologinid'];
|
FIND
| Code:
|
|
$userdata['session_time'] = $current_time;
|
AFTER, ADD
| Code:
|
|
$userdata['session_admin'] = $admin;
|
FIND
| Code:
|
$sql = "UPDATE " . SESSIONS_TABLE . "
SET session_time = $current_time, session_page = $thispage_id
|
REPLACE WITH
| Code:
|
// A little trick to reset session_admin on session re-usage
$update_admin = (!defined('IN_ADMIN') && $current_time - $userdata['session_time'] > ($board_config['session_length']+60)) ? ', session_admin = 0' : '';
$sql = "UPDATE " . SESSIONS_TABLE . "
SET session_time = $current_time, session_page = $thispage_id$update_admin
|
FIND
| Code:
|
$sql = "UPDATE " . USERS_TABLE . "
SET user_session_time = $current_time, user_session_page = $thispage_id
|
REPLACE WITH
| Code:
|
$sql = "UPDATE " . USERS_TABLE . "
SET user_session_time = $current_time, user_session_page = $thispage_id
|
FIND
| Code:
|
$expiry_time = $current_time - $board_config['session_length'];
$sql = "DELETE FROM " . SESSIONS_TABLE . "
|
REPLACE WITH
| Code:
|
$expiry_time = $current_time - $board_config['session_length'];
$sql = "DELETE FROM " . SESSIONS_TABLE . "
|
includes/smtp.php
FIND
| Code:
|
|
if( !$socket = fsockopen($board_config['smtp_host'], 25, $errno, $errstr, 20) )
|
REPLACE WITH
| Code:
|
|
if( !$socket = @fsockopen($board_config['smtp_host'], 25, $errno, $errstr, 20) )
|
includes/usercp_register.php
FIND
| Code:
|
else if ( $username != $userdata['username'] || $mode == 'register' )
{
if (strtolower($username) != strtolower($userdata['username']))
|
REPLACE WITH
| Code:
|
else if ( $username != $userdata['username'] || $mode == 'register')
{
if (strtolower($username) != strtolower($userdata['username']) || $mode == 'register')
|
includes/usercp_viewprofile.php
FIND
| Code:
|
|
$profiledata = get_userdata($HTTP_GET_VARS[POST_USERS_URL]);
|
AFTER, ADD
| Code:
|
if (!$profiledata)
{
message_die(GENERAL_MESSAGE, $lang['No_user_id_specified']);
}
|
language/lang_english/lang_main.php
FIND
| Code:
|
|
$lang['A_critical_error'] = 'A Critical Error Occurred';
|
AFTER, ADD
| Code:
|
$lang['Admin_reauthenticate'] = 'To administer the board you must re-authenticate yourself.';
|
|
|
Forums
Home
Register
Profile
Log in to check your private messages
Log in
FAQ
Search
Contact
Us 
