1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174117511761177117811791180118111821183118411851186118711881189119011911192119311941195119611971198119912001201120212031204120512061207120812091210121112121213121412151216121712181219122012211222122312241225122612271228122912301231123212331234123512361237123812391240124112421243124412451246124712481249125012511252125312541255125612571258125912601261126212631264126512661267126812691270127112721273127412751276127712781279128012811282128312841285128612871288128912901291129212931294129512961297129812991300130113021303130413051306130713081309131013111312131313141315131613171318131913201321132213231324132513261327132813291330133113321333133413351336133713381339134013411342134313441345134613471348134913501351135213531354135513561357135813591360136113621363136413651366136713681369137013711372137313741375137613771378137913801381138213831384138513861387138813891390139113921393139413951396139713981399140014011402140314041405140614071408140914101411141214131414141514161417141814191420142114221423142414251426142714281429143014311432143314341435143614371438143914401441144214431444144514461447144814491450145114521453145414551456145714581459146014611462146314641465146614671468146914701471147214731474147514761477147814791480148114821483148414851486148714881489149014911492149314941495149614971498149915001501150215031504150515061507150815091510151115121513151415151516151715181519152015211522152315241525152615271528152915301531153215331534153515361537153815391540154115421543154415451546154715481549155015511552155315541555155615571558155915601561156215631564156515661567156815691570157115721573157415751576157715781579158015811582158315841585158615871588158915901591159215931594159515961597159815991600160116021603160416051606160716081609161016111612161316141615161616171618161916201621162216231624162516261627162816291630163116321633163416351636163716381639164016411642164316441645164616471648164916501651165216531654165516561657165816591660166116621663166416651666166716681669167016711672167316741675167616771678167916801681168216831684168516861687168816891690169116921693169416951696169716981699170017011702170317041705170617071708170917101711171217131714171517161717171817191720172117221723172417251726172717281729173017311732173317341735173617371738173917401741174217431744174517461747174817491750175117521753175417551756175717581759176017611762176317641765176617671768176917701771177217731774177517761777177817791780178117821783178417851786178717881789179017911792179317941795179617971798179918001801180218031804180518061807180818091810181118121813181418151816181718181819182018211822182318241825182618271828182918301831183218331834183518361837183818391840184118421843184418451846184718481849185018511852185318541855185618571858185918601861186218631864186518661867186818691870187118721873187418751876187718781879188018811882188318841885188618871888188918901891189218931894189518961897189818991900190119021903190419051906190719081909191019111912191319141915191619171918191919201921192219231924192519261927192819291930193119321933193419351936193719381939194019411942194319441945194619471948194919501951195219531954195519561957195819591960196119621963196419651966196719681969197019711972197319741975197619771978197919801981198219831984198519861987198819891990199119921993199419951996199719981999200020012002200320042005200620072008200920102011201220132014201520162017201820192020202120222023202420252026202720282029203020312032203320342035203620372038203920402041204220432044204520462047204820492050205120522053205420552056205720582059206020612062206320642065206620672068206920702071207220732074207520762077207820792080208120822083208420852086208720882089209020912092209320942095209620972098209921002101210221032104210521062107210821092110211121122113211421152116211721182119212021212122212321242125212621272128212921302131213221332134213521362137213821392140214121422143214421452146214721482149215021512152215321542155215621572158215921602161216221632164216521662167216821692170217121722173217421752176217721782179218021812182218321842185218621872188218921902191219221932194219521962197219821992200220122022203220422052206220722082209221022112212221322142215221622172218221922202221222222232224222522262227222822292230223122322233223422352236223722382239224022412242224322442245224622472248224922502251225222532254225522562257225822592260226122622263226422652266226722682269227022712272227322742275227622772278227922802281228222832284228522862287228822892290229122922293229422952296229722982299230023012302230323042305230623072308230923102311231223132314231523162317231823192320232123222323232423252326232723282329233023312332233323342335233623372338233923402341234223432344234523462347234823492350235123522353235423552356235723582359236023612362236323642365236623672368236923702371237223732374237523762377237823792380238123822383238423852386238723882389239023912392239323942395239623972398239924002401240224032404240524062407240824092410241124122413241424152416241724182419242024212422242324242425242624272428242924302431243224332434243524362437243824392440244124422443244424452446244724482449245024512452245324542455245624572458245924602461246224632464246524662467246824692470247124722473247424752476247724782479248024812482248324842485248624872488248924902491249224932494249524962497249824992500250125022503250425052506250725082509251025112512251325142515251625172518251925202521252225232524252525262527252825292530253125322533253425352536253725382539254025412542254325442545254625472548254925502551255225532554255525562557255825592560256125622563256425652566256725682569257025712572257325742575257625772578257925802581258225832584258525862587258825892590259125922593259425952596259725982599260026012602260326042605260626072608260926102611261226132614261526162617261826192620262126222623262426252626262726282629263026312632263326342635263626372638263926402641264226432644264526462647264826492650265126522653265426552656265726582659266026612662266326642665266626672668266926702671267226732674267526762677267826792680268126822683268426852686268726882689269026912692269326942695269626972698269927002701270227032704270527062707270827092710271127122713271427152716271727182719272027212722272327242725272627272728272927302731273227332734273527362737273827392740274127422743274427452746274727482749275027512752275327542755275627572758275927602761276227632764276527662767276827692770277127722773277427752776277727782779278027812782278327842785278627872788278927902791279227932794279527962797279827992800280128022803280428052806280728082809281028112812281328142815281628172818281928202821282228232824282528262827282828292830283128322833283428352836283728382839284028412842284328442845284628472848284928502851285228532854285528562857285828592860286128622863286428652866286728682869287028712872287328742875287628772878287928802881288228832884288528862887288828892890289128922893289428952896289728982899290029012902290329042905290629072908290929102911291229132914291529162917291829192920292129222923292429252926292729282929293029312932293329342935293629372938293929402941294229432944294529462947294829492950295129522953295429552956295729582959296029612962296329642965296629672968296929702971297229732974297529762977297829792980298129822983298429852986298729882989299029912992299329942995299629972998299930003001300230033004300530063007300830093010301130123013301430153016301730183019302030213022302330243025302630273028302930303031303230333034303530363037303830393040304130423043304430453046304730483049305030513052305330543055305630573058305930603061306230633064306530663067306830693070307130723073307430753076307730783079308030813082308330843085308630873088308930903091309230933094309530963097309830993100310131023103310431053106310731083109311031113112311331143115311631173118311931203121312231233124312531263127312831293130313131323133313431353136313731383139314031413142314331443145314631473148314931503151315231533154315531563157315831593160316131623163316431653166316731683169317031713172317331743175317631773178317931803181318231833184318531863187318831893190319131923193319431953196319731983199320032013202320332043205320632073208320932103211321232133214321532163217321832193220322132223223322432253226322732283229323032313232323332343235323632373238 |
- <?php
- /**
- * Simple Machines Forum (SMF)
- *
- * @package SMF
- * @author Simple Machines http://www.simplemachines.org
- * @copyright 2011 Simple Machines
- * @license http://www.simplemachines.org/about/smf/license.php BSD
- *
- * @version 2.0
- */
- if (!defined('SMF'))
- die('Hacking attempt...');
- /* This file contains those functions pertaining to posting, and other such
- operations, including sending emails, ims, blocking spam, preparsing posts,
- spell checking, and the post box. This is done with the following:
- void preparsecode(string &message, boolean previewing = false)
- - takes a message and parses it, returning nothing.
- - cleans up links (javascript, etc.) and code/quote sections.
- - won't convert \n's and a few other things if previewing is true.
- string un_preparsecode(string message)
- // !!!
- void fixTags(string &message)
- - used by preparsecode, fixes links in message and returns nothing.
- void fixTag(string &message, string myTag, string protocol,
- bool embeddedUrl = false, bool hasEqualSign = false,
- bool hasExtra = false)
- - used by fixTags, fixes a specific tag's links.
- - myTag is the tag, protocol is http of ftp, embeddedUrl is whether
- it *can* be set to something, hasEqualSign is whether it *is*
- set to something, and hasExtra is whether it can have extra
- cruft after the begin tag.
- bool sendmail(array to, string subject, string message,
- string message_id = auto, string from = webmaster,
- bool send_html = false, int priority = 3, bool hotmail_fix = null)
- - sends an email to the specified recipient.
- - uses the mail_type setting and the webmaster_email global.
- - to is he email(s), string or array, to send to.
- - subject and message are those of the email - expected to have
- slashes but not be parsed.
- - subject is expected to have entities, message is not.
- - from is a string which masks the address for use with replies.
- - if message_id is specified, uses that as the local-part of the
- Message-ID header.
- - send_html indicates whether or not the message is HTML vs. plain
- text, and does not add any HTML.
- - returns whether or not the email was sent properly.
- bool AddMailQueue(bool flush = true, array to_array = array(), string subject = '', string message = '',
- string headers = '', bool send_html = false, int priority = 3)
- //!!
- array sendpm(array recipients, string subject, string message,
- bool store_outbox = false, array from = current_member, int pm_head = 0)
- - sends an personal message from the specified person to the
- specified people. (from defaults to the user.)
- - recipients should be an array containing the arrays 'to' and 'bcc',
- both containing id_member's.
- - subject and message should have no slashes and no html entities.
- - pm_head is the ID of the chain being replied to - if any.
- - from is an array, with the id, name, and username of the member.
- - returns an array with log entries telling how many recipients were
- successful and which recipients it failed to send to.
- string mimespecialchars(string text, bool with_charset = true,
- hotmail_fix = false, string custom_charset = null)
- - prepare text strings for sending as email.
- - in case there are higher ASCII characters in the given string, this
- function will attempt the transport method 'quoted-printable'.
- Otherwise the transport method '7bit' is used.
- - with hotmail_fix set all higher ASCII characters are converted to
- HTML entities to assure proper display of the mail.
- - uses character set custom_charset if set.
- - returns an array containing the character set, the converted string
- and the transport method.
- bool smtp_mail(array mail_to_array, string subject, string message,
- string headers)
- - sends mail, like mail() but over SMTP. Used internally.
- - takes email addresses, a subject and message, and any headers.
- - expects no slashes or entities.
- - returns whether it sent or not.
- bool server_parse(string message, resource socket, string response)
- - sends the specified message to the server, and checks for the
- expected response. (used internally.)
- - takes the message to send, socket to send on, and the expected
- response code.
- - returns whether it responded as such.
- void SpellCheck()
- - spell checks the post for typos ;).
- - uses the pspell library, which MUST be installed.
- - has problems with internationalization.
- - is accessed via ?action=spellcheck.
- void sendNotifications(array topics, string type, array exclude = array(), array members_only = array())
- - sends a notification to members who have elected to receive emails
- when things happen to a topic, such as replies are posted.
- - uses the Post langauge file.
- - topics represents the topics the action is happening to.
- - the type can be any of reply, sticky, lock, unlock, remove, move,
- merge, and split. An appropriate message will be sent for each.
- - automatically finds the subject and its board, and checks permissions
- for each member who is "signed up" for notifications.
- - will not send 'reply' notifications more than once in a row.
- - members in the exclude array will not be processed for the topic with the same key.
- - members_only are the only ones that will be sent the notification if they have it on.
- bool createPost(&array msgOptions, &array topicOptions, &array posterOptions)
- // !!!
- bool createAttachment(&array attachmentOptions)
- // !!!
- bool modifyPost(&array msgOptions, &array topicOptions, &array posterOptions)
- // !!!
- bool approvePosts(array msgs, bool approve)
- // !!!
- array approveTopics(array topics, bool approve)
- // !!!
- void sendApprovalNotifications(array topicData)
- // !!!
- void updateLastMessages(array id_board's, int id_msg)
- - takes an array of board IDs and updates their last messages.
- - if the board has a parent, that parent board is also automatically
- updated.
- - columns updated are id_last_msg and lastUpdated.
- - note that id_last_msg should always be updated using this function,
- and is not automatically updated upon other changes.
- void adminNotify(string type, int memberID, string member_name = null)
- - sends all admins an email to let them know a new member has joined.
- - types supported are 'approval', 'activation', and 'standard'.
- - called by registerMember() function in Subs-Members.php.
- - email is sent to all groups that have the moderate_forum permission.
- - uses the Login language file.
- - the language set by each member is being used (if available).
- Sending emails from SMF:
- ---------------------------------------------------------------------------
- // !!!
- */
- // Parses some bbc before sending into the database...
- function preparsecode(&$message, $previewing = false)
- {
- global $user_info, $modSettings, $smcFunc, $context;
- // This line makes all languages *theoretically* work even with the wrong charset ;).
- $message = preg_replace('~&#(\d{4,5}|[2-9]\d{2,4}|1[2-9]\d);~', '&#$1;', $message);
- // Clean up after nobbc ;).
- $message = preg_replace('~\[nobbc\](.+?)\[/nobbc\]~ie', '\'[nobbc]\' . strtr(\'$1\', array(\'[\' => \'[\', \']\' => \']\', \':\' => \':\', \'@\' => \'@\')) . \'[/nobbc]\'', $message);
- // Remove \r's... they're evil!
- $message = strtr($message, array("\r" => ''));
- // You won't believe this - but too many periods upsets apache it seems!
- $message = preg_replace('~\.{100,}~', '...', $message);
- // Trim off trailing quotes - these often happen by accident.
- while (substr($message, -7) == '[quote]')
- $message = substr($message, 0, -7);
- while (substr($message, 0, 8) == '[/quote]')
- $message = substr($message, 8);
- // Find all code blocks, work out whether we'd be parsing them, then ensure they are all closed.
- $in_tag = false;
- $had_tag = false;
- $codeopen = 0;
- if (preg_match_all('~(\[(/)*code(?:=[^\]]+)?\])~is', $message, $matches))
- foreach ($matches[0] as $index => $dummy)
- {
- // Closing?
- if (!empty($matches[2][$index]))
- {
- // If it's closing and we're not in a tag we need to open it...
- if (!$in_tag)
- $codeopen = true;
- // Either way we ain't in one any more.
- $in_tag = false;
- }
- // Opening tag...
- else
- {
- $had_tag = true;
- // If we're in a tag don't do nought!
- if (!$in_tag)
- $in_tag = true;
- }
- }
- // If we have an open tag, close it.
- if ($in_tag)
- $message .= '[/code]';
- // Open any ones that need to be open, only if we've never had a tag.
- if ($codeopen && !$had_tag)
- $message = '[code]' . $message;
- // Now that we've fixed all the code tags, let's fix the img and url tags...
- $parts = preg_split('~(\[/code\]|\[code(?:=[^\]]+)?\])~i', $message, -1, PREG_SPLIT_DELIM_CAPTURE);
- // The regular expression non breaking space has many versions.
- $non_breaking_space = $context['utf8'] ? ($context['server']['complex_preg_chars'] ? '\x{A0}' : "\xC2\xA0") : '\xA0';
- // Only mess with stuff outside [code] tags.
- for ($i = 0, $n = count($parts); $i < $n; $i++)
- {
- // It goes 0 = outside, 1 = begin tag, 2 = inside, 3 = close tag, repeat.
- if ($i % 4 == 0)
- {
- fixTags($parts[$i]);
- // Replace /me.+?\n with [me=name]dsf[/me]\n.
- if (strpos($user_info['name'], '[') !== false || strpos($user_info['name'], ']') !== false || strpos($user_info['name'], '\'') !== false || strpos($user_info['name'], '"') !== false)
- $parts[$i] = preg_replace('~(\A|\n)/me(?: | )([^\n]*)(?:\z)?~i', '$1[me="' . $user_info['name'] . '"]$2[/me]', $parts[$i]);
- else
- $parts[$i] = preg_replace('~(\A|\n)/me(?: | )([^\n]*)(?:\z)?~i', '$1[me=' . $user_info['name'] . ']$2[/me]', $parts[$i]);
- if (!$previewing && strpos($parts[$i], '[html]') !== false)
- {
- if (allowedTo('admin_forum'))
- $parts[$i] = preg_replace('~\[html\](.+?)\[/html\]~ise', '\'[html]\' . strtr(un_htmlspecialchars(\'$1\'), array("\n" => \' \', \' \' => \'  \', \'[\' => \'[\', \']\' => \']\')) . \'[/html]\'', $parts[$i]);
- // We should edit them out, or else if an admin edits the message they will get shown...
- else
- {
- while (strpos($parts[$i], '[html]') !== false)
- $parts[$i] = preg_replace('~\[[/]?html\]~i', '', $parts[$i]);
- }
- }
- // Let's look at the time tags...
- $parts[$i] = preg_replace('~\[time(?:=(absolute))*\](.+?)\[/time\]~ie', '\'[time]\' . (is_numeric(\'$2\') || @strtotime(\'$2\') == 0 ? \'$2\' : strtotime(\'$2\') - (\'$1\' == \'absolute\' ? 0 : (($modSettings[\'time_offset\'] + $user_info[\'time_offset\']) * 3600))) . \'[/time]\'', $parts[$i]);
- // Change the color specific tags to [color=the color].
- $parts[$i] = preg_replace('~\[(black|blue|green|red|white)\]~', '[color=$1]', $parts[$i]); // First do the opening tags.
- $parts[$i] = preg_replace('~\[/(black|blue|green|red|white)\]~', '[/color]', $parts[$i]); // And now do the closing tags
- // Make sure all tags are lowercase.
- $parts[$i] = preg_replace('~\[([/]?)(list|li|table|tr|td)((\s[^\]]+)*)\]~ie', '\'[$1\' . strtolower(\'$2\') . \'$3]\'', $parts[$i]);
- $list_open = substr_count($parts[$i], '[list]') + substr_count($parts[$i], '[list ');
- $list_close = substr_count($parts[$i], '[/list]');
- if ($list_close - $list_open > 0)
- $parts[$i] = str_repeat('[list]', $list_close - $list_open) . $parts[$i];
- if ($list_open - $list_close > 0)
- $parts[$i] = $parts[$i] . str_repeat('[/list]', $list_open - $list_close);
- $mistake_fixes = array(
- // Find [table]s not followed by [tr].
- '~\[table\](?![\s' . $non_breaking_space . ']*\[tr\])~s' . ($context['utf8'] ? 'u' : '') => '[table][tr]',
- // Find [tr]s not followed by [td].
- '~\[tr\](?![\s' . $non_breaking_space . ']*\[td\])~s' . ($context['utf8'] ? 'u' : '') => '[tr][td]',
- // Find [/td]s not followed by something valid.
- '~\[/td\](?![\s' . $non_breaking_space . ']*(?:\[td\]|\[/tr\]|\[/table\]))~s' . ($context['utf8'] ? 'u' : '') => '[/td][/tr]',
- // Find [/tr]s not followed by something valid.
- '~\[/tr\](?![\s' . $non_breaking_space . ']*(?:\[tr\]|\[/table\]))~s' . ($context['utf8'] ? 'u' : '') => '[/tr][/table]',
- // Find [/td]s incorrectly followed by [/table].
- '~\[/td\][\s' . $non_breaking_space . ']*\[/table\]~s' . ($context['utf8'] ? 'u' : '') => '[/td][/tr][/table]',
- // Find [table]s, [tr]s, and [/td]s (possibly correctly) followed by [td].
- '~\[(table|tr|/td)\]([\s' . $non_breaking_space . ']*)\[td\]~s' . ($context['utf8'] ? 'u' : '') => '[$1]$2[_td_]',
- // Now, any [td]s left should have a [tr] before them.
- '~\[td\]~s' => '[tr][td]',
- // Look for [tr]s which are correctly placed.
- '~\[(table|/tr)\]([\s' . $non_breaking_space . ']*)\[tr\]~s' . ($context['utf8'] ? 'u' : '') => '[$1]$2[_tr_]',
- // Any remaining [tr]s should have a [table] before them.
- '~\[tr\]~s' => '[table][tr]',
- // Look for [/td]s followed by [/tr].
- '~\[/td\]([\s' . $non_breaking_space . ']*)\[/tr\]~s' . ($context['utf8'] ? 'u' : '') => '[/td]$1[_/tr_]',
- // Any remaining [/tr]s should have a [/td].
- '~\[/tr\]~s' => '[/td][/tr]',
- // Look for properly opened [li]s which aren't closed.
- '~\[li\]([^\[\]]+?)\[li\]~s' => '[li]$1[_/li_][_li_]',
- '~\[li\]([^\[\]]+?)\[/list\]~s' => '[_li_]$1[_/li_][/list]',
- '~\[li\]([^\[\]]+?)$~s' => '[li]$1[/li]',
- // Lists - find correctly closed items/lists.
- '~\[/li\]([\s' . $non_breaking_space . ']*)\[/list\]~s' . ($context['utf8'] ? 'u' : '') => '[_/li_]$1[/list]',
- // Find list items closed and then opened.
- '~\[/li\]([\s' . $non_breaking_space . ']*)\[li\]~s' . ($context['utf8'] ? 'u' : '') => '[_/li_]$1[_li_]',
- // Now, find any [list]s or [/li]s followed by [li].
- '~\[(list(?: [^\]]*?)?|/li)\]([\s' . $non_breaking_space . ']*)\[li\]~s' . ($context['utf8'] ? 'u' : '') => '[$1]$2[_li_]',
- // Allow for sub lists.
- '~\[/li\]([\s' . $non_breaking_space . ']*)\[list\]~' . ($context['utf8'] ? 'u' : '') => '[_/li_]$1[list]',
- '~\[/list\]([\s' . $non_breaking_space . ']*)\[li\]~' . ($context['utf8'] ? 'u' : '') => '[/list]$1[_li_]',
- // Any remaining [li]s weren't inside a [list].
- '~\[li\]~' => '[list][li]',
- // Any remaining [/li]s weren't before a [/list].
- '~\[/li\]~' => '[/li][/list]',
- // Put the correct ones back how we found them.
- '~\[_(li|/li|td|tr|/tr)_\]~' => '[$1]',
- // Images with no real url.
- '~\[img\]https?://.{0,7}\[/img\]~' => '',
- );
- // Fix up some use of tables without [tr]s, etc. (it has to be done more than once to catch it all.)
- for ($j = 0; $j < 3; $j++)
- $parts[$i] = preg_replace(array_keys($mistake_fixes), $mistake_fixes, $parts[$i]);
- // Now we're going to do full scale table checking...
- $table_check = $parts[$i];
- $table_offset = 0;
- $table_array = array();
- $table_order = array(
- 'table' => 'td',
- 'tr' => 'table',
- 'td' => 'tr',
- );
- while (preg_match('~\[(/)*(table|tr|td)\]~', $table_check, $matches) != false)
- {
- // Keep track of where this is.
- $offset = strpos($table_check, $matches[0]);
- $remove_tag = false;
- // Is it opening?
- if ($matches[1] != '/')
- {
- // If the previous table tag isn't correct simply remove it.
- if ((!empty($table_array) && $table_array[0] != $table_order[$matches[2]]) || (empty($table_array) && $matches[2] != 'table'))
- $remove_tag = true;
- // Record this was the last tag.
- else
- array_unshift($table_array, $matches[2]);
- }
- // Otherwise is closed!
- else
- {
- // Only keep the tag if it's closing the right thing.
- if (empty($table_array) || ($table_array[0] != $matches[2]))
- $remove_tag = true;
- else
- array_shift($table_array);
- }
- // Removing?
- if ($remove_tag)
- {
- $parts[$i] = substr($parts[$i], 0, $table_offset + $offset) . substr($parts[$i], $table_offset + strlen($matches[0]) + $offset);
- // We've lost some data.
- $table_offset -= strlen($matches[0]);
- }
- // Remove everything up to here.
- $table_offset += $offset + strlen($matches[0]);
- $table_check = substr($table_check, $offset + strlen($matches[0]));
- }
- // Close any remaining table tags.
- foreach ($table_array as $tag)
- $parts[$i] .= '[/' . $tag . ']';
- }
- }
- // Put it back together!
- if (!$previewing)
- $message = strtr(implode('', $parts), array(' ' => ' ', "\n" => '<br />', $context['utf8'] ? "\xC2\xA0" : "\xA0" => ' '));
- else
- $message = strtr(implode('', $parts), array(' ' => ' ', $context['utf8'] ? "\xC2\xA0" : "\xA0" => ' '));
- // Now let's quickly clean up things that will slow our parser (which are common in posted code.)
- $message = strtr($message, array('[]' => '[]', '['' => '[''));
- }
- // This is very simple, and just removes things done by preparsecode.
- function un_preparsecode($message)
- {
- global $smcFunc;
- $parts = preg_split('~(\[/code\]|\[code(?:=[^\]]+)?\])~i', $message, -1, PREG_SPLIT_DELIM_CAPTURE);
- // We're going to unparse only the stuff outside [code]...
- for ($i = 0, $n = count($parts); $i < $n; $i++)
- {
- // If $i is a multiple of four (0, 4, 8, ...) then it's not a code section...
- if ($i % 4 == 0)
- {
- $parts[$i] = preg_replace('~\[html\](.+?)\[/html\]~ie', '\'[html]\' . strtr(htmlspecialchars(\'$1\', ENT_QUOTES), array(\'\\"\' => \'"\', \'&#13;\' => \'<br />\', \'&#32;\' => \' \', \'&#91;\' => \'[\', \'&#93;\' => \']\')) . \'[/html]\'', $parts[$i]);
- // $parts[$i] = preg_replace('~\[html\](.+?)\[/html\]~ie', '\'[html]\' . strtr(htmlspecialchars(\'$1\', ENT_QUOTES), array(\'\\"\' => \'"\', \'&#13;\' => \'<br />\', \'&#32;\' => \' \', \'&#38;\' => \'&\', \'&#91;\' => \'[\', \'&#93;\' => \']\')) . \'[/html]\'', $parts[$i]);
- // Attempt to un-parse the time to something less awful.
- $parts[$i] = preg_replace('~\[time\](\d{0,10})\[/time\]~ie', '\'[time]\' . timeformat(\'$1\', false) . \'[/time]\'', $parts[$i]);
- }
- }
- // Change breaks back to \n's and &nsbp; back to spaces.
- return preg_replace('~<br( /)?' . '>~', "\n", str_replace(' ', ' ', implode('', $parts)));
- }
- // Fix any URLs posted - ie. remove 'javascript:'.
- function fixTags(&$message)
- {
- global $modSettings;
- // WARNING: Editing the below can cause large security holes in your forum.
- // Edit only if you are sure you know what you are doing.
- $fixArray = array(
- // [img]http://...[/img] or [img width=1]http://...[/img]
- array(
- 'tag' => 'img',
- 'protocols' => array('http', 'https'),
- 'embeddedUrl' => false,
- 'hasEqualSign' => false,
- 'hasExtra' => true,
- ),
- // [url]http://...[/url]
- array(
- 'tag' => 'url',
- 'protocols' => array('http', 'https'),
- 'embeddedUrl' => true,
- 'hasEqualSign' => false,
- ),
- // [url=http://...]name[/url]
- array(
- 'tag' => 'url',
- 'protocols' => array('http', 'https'),
- 'embeddedUrl' => true,
- 'hasEqualSign' => true,
- ),
- // [iurl]http://...[/iurl]
- array(
- 'tag' => 'iurl',
- 'protocols' => array('http', 'https'),
- 'embeddedUrl' => true,
- 'hasEqualSign' => false,
- ),
- // [iurl=http://...]name[/iurl]
- array(
- 'tag' => 'iurl',
- 'protocols' => array('http', 'https'),
- 'embeddedUrl' => true,
- 'hasEqualSign' => true,
- ),
- // [ftp]ftp://...[/ftp]
- array(
- 'tag' => 'ftp',
- 'protocols' => array('ftp', 'ftps'),
- 'embeddedUrl' => true,
- 'hasEqualSign' => false,
- ),
- // [ftp=ftp://...]name[/ftp]
- array(
- 'tag' => 'ftp',
- 'protocols' => array('ftp', 'ftps'),
- 'embeddedUrl' => true,
- 'hasEqualSign' => true,
- ),
- // [flash]http://...[/flash]
- array(
- 'tag' => 'flash',
- 'protocols' => array('http', 'https'),
- 'embeddedUrl' => false,
- 'hasEqualSign' => false,
- 'hasExtra' => true,
- ),
- );
- // Fix each type of tag.
- foreach ($fixArray as $param)
- fixTag($message, $param['tag'], $param['protocols'], $param['embeddedUrl'], $param['hasEqualSign'], !empty($param['hasExtra']));
- // Now fix possible security problems with images loading links automatically...
- $message = preg_replace('~(\[img.*?\])(.+?)\[/img\]~eis', '\'$1\' . preg_replace(\'~action(=|%3d)(?!dlattach)~i\', \'action-\', \'$2\') . \'[/img]\'', $message);
- // Limit the size of images posted?
- if (!empty($modSettings['max_image_width']) || !empty($modSettings['max_image_height']))
- {
- // Find all the img tags - with or without width and height.
- preg_match_all('~\[img(\s+width=\d+)?(\s+height=\d+)?(\s+width=\d+)?\](.+?)\[/img\]~is', $message, $matches, PREG_PATTERN_ORDER);
- $replaces = array();
- foreach ($matches[0] as $match => $dummy)
- {
- // If the width was after the height, handle it.
- $matches[1][$match] = !empty($matches[3][$match]) ? $matches[3][$match] : $matches[1][$match];
- // Now figure out if they had a desired height or width...
- $desired_width = !empty($matches[1][$match]) ? (int) substr(trim($matches[1][$match]), 6) : 0;
- $desired_height = !empty($matches[2][$match]) ? (int) substr(trim($matches[2][$match]), 7) : 0;
- // One was omitted, or both. We'll have to find its real size...
- if (empty($desired_width) || empty($desired_height))
- {
- list ($width, $height) = url_image_size(un_htmlspecialchars($matches[4][$match]));
- // They don't have any desired width or height!
- if (empty($desired_width) && empty($desired_height))
- {
- $desired_width = $width;
- $desired_height = $height;
- }
- // Scale it to the width...
- elseif (empty($desired_width) && !empty($height))
- $desired_width = (int) (($desired_height * $width) / $height);
- // Scale if to the height.
- elseif (!empty($width))
- $desired_height = (int) (($desired_width * $height) / $width);
- }
- // If the width and height are fine, just continue along...
- if ($desired_width <= $modSettings['max_image_width'] && $desired_height <= $modSettings['max_image_height'])
- continue;
- // Too bad, it's too wide. Make it as wide as the maximum.
- if ($desired_width > $modSettings['max_image_width'] && !empty($modSettings['max_image_width']))
- {
- $desired_height = (int) (($modSettings['max_image_width'] * $desired_height) / $desired_width);
- $desired_width = $modSettings['max_image_width'];
- }
- // Now check the height, as well. Might have to scale twice, even...
- if ($desired_height > $modSettings['max_image_height'] && !empty($modSettings['max_image_height']))
- {
- $desired_width = (int) (($modSettings['max_image_height'] * $desired_width) / $desired_height);
- $desired_height = $modSettings['max_image_height'];
- }
- $replaces[$matches[0][$match]] = '[img' . (!empty($desired_width) ? ' width=' . $desired_width : '') . (!empty($desired_height) ? ' height=' . $desired_height : '') . ']' . $matches[4][$match] . '[/img]';
- }
- // If any img tags were actually changed...
- if (!empty($replaces))
- $message = strtr($message, $replaces);
- }
- }
- // Fix a specific class of tag - ie. url with =.
- function fixTag(&$message, $myTag, $protocols, $embeddedUrl = false, $hasEqualSign = false, $hasExtra = false)
- {
- global $boardurl, $scripturl;
- if (preg_match('~^([^:]+://[^/]+)~', $boardurl, $match) != 0)
- $domain_url = $match[1];
- else
- $domain_url = $boardurl . '/';
- $replaces = array();
- if ($hasEqualSign)
- preg_match_all('~\[(' . $myTag . ')=([^\]]*?)\](?:(.+?)\[/(' . $myTag . ')\])?~is', $message, $matches);
- else
- preg_match_all('~\[(' . $myTag . ($hasExtra ? '(?:[^\]]*?)' : '') . ')\](.+?)\[/(' . $myTag . ')\]~is', $message, $matches);
- foreach ($matches[0] as $k => $dummy)
- {
- // Remove all leading and trailing whitespace.
- $replace = trim($matches[2][$k]);
- $this_tag = $matches[1][$k];
- $this_close = $hasEqualSign ? (empty($matches[4][$k]) ? '' : $matches[4][$k]) : $matches[3][$k];
- $found = false;
- foreach ($protocols as $protocol)
- {
- $found = strncasecmp($replace, $protocol . '://', strlen($protocol) + 3) === 0;
- if ($found)
- break;
- }
- if (!$found && $protocols[0] == 'http')
- {
- if (substr($replace, 0, 1) == '/')
- $replace = $domain_url . $replace;
- elseif (substr($replace, 0, 1) == '?')
- $replace = $scripturl . $replace;
- elseif (substr($replace, 0, 1) == '#' && $embeddedUrl)
- {
- $replace = '#' . preg_replace('~[^A-Za-z0-9_\-#]~', '', substr($replace, 1));
- $this_tag = 'iurl';
- $this_close = 'iurl';
- }
- else
- $replace = $protocols[0] . '://' . $replace;
- }
- elseif (!$found && $protocols[0] == 'ftp')
- $replace = $protocols[0] . '://' . preg_replace('~^(?!ftps?)[^:]+://~', '', $replace);
- elseif (!$found)
- $replace = $protocols[0] . '://' . $replace;
- if ($hasEqualSign && $embeddedUrl)
- $replaces[$matches[0][$k]] = '[' . $this_tag . '=' . $replace . ']' . (empty($matches[4][$k]) ? '' : $matches[3][$k] . '[/' . $this_close . ']');
- elseif ($hasEqualSign)
- $replaces['[' . $matches[1][$k] . '=' . $matches[2][$k] . ']'] = '[' . $this_tag . '=' . $replace . ']';
- elseif ($embeddedUrl)
- $replaces['[' . $matches[1][$k] . ']' . $matches[2][$k] . '[/' . $matches[3][$k] . ']'] = '[' . $this_tag . '=' . $replace . ']' . $matches[2][$k] . '[/' . $this_close . ']';
- else
- $replaces['[' . $matches[1][$k] . ']' . $matches[2][$k] . '[/' . $matches[3][$k] . ']'] = '[' . $this_tag . ']' . $replace . '[/' . $this_close . ']';
- }
- foreach ($replaces as $k => $v)
- {
- if ($k == $v)
- unset($replaces[$k]);
- }
- if (!empty($replaces))
- $message = strtr($message, $replaces);
- }
- // Send off an email.
- function sendmail($to, $subject, $message, $from = null, $message_id = null, $send_html = false, $priority = 3, $hotmail_fix = null, $is_private = false)
- {
- global $webmaster_email, $context, $modSettings, $txt, $scripturl;
- global $smcFunc;
- // Use sendmail if it's set or if no SMTP server is set.
- $use_sendmail = empty($modSettings['mail_type']) || $modSettings['smtp_host'] == '';
- // Line breaks need to be \r\n only in windows or for SMTP.
- $line_break = $context['server']['is_windows'] || !$use_sendmail ? "\r\n" : "\n";
- // So far so good.
- $mail_result = true;
- // If the recipient list isn't an array, make it one.
- $to_array = is_array($to) ? $to : array($to);
- // Once upon a time, Hotmail could not interpret non-ASCII mails.
- // In honour of those days, it's still called the 'hotmail fix'.
- if ($hotmail_fix === null)
- {
- $hotmail_to = array();
- foreach ($to_array as $i => $to_address)
- {
- if (preg_match('~@(att|comcast|bellsouth)\.[a-zA-Z\.]{2,6}$~i', $to_address) === 1)
- {
- $hotmail_to[] = $to_address;
- $to_array = array_diff($to_array, array($to_address));
- }
- }
- // Call this function recursively for the hotmail addresses.
- if (!empty($hotmail_to))
- $mail_result = sendmail($hotmail_to, $subject, $message, $from, $message_id, $send_html, $priority, true);
- // The remaining addresses no longer need the fix.
- $hotmail_fix = false;
- // No other addresses left? Return instantly.
- if (empty($to_array))
- return $mail_result;
- }
- // Get rid of entities.
- $subject = un_htmlspecialchars($subject);
- // Make the message use the proper line breaks.
- $message = str_replace(array("\r", "\n"), array('', $line_break), $message);
- // Make sure hotmail mails are sent as HTML so that HTML entities work.
- if ($hotmail_fix && !$send_html)
- {
- $send_html = true;
- $message = strtr($message, array($line_break => '<br />' . $line_break));
- $message = preg_replace('~(' . preg_quote($scripturl, '~') . '(?:[?/][\w\-_%\.,\?&;=#]+)?)~', '<a href="$1">$1</a>', $message);
- }
- list (, $from_name) = mimespecialchars(addcslashes($from !== null ? $from : $context['forum_name'], '<>()\'\\"'), true, $hotmail_fix, $line_break);
- list (, $subject) = mimespecialchars($subject, true, $hotmail_fix, $line_break);
- // Construct the mail headers...
- $headers = 'From: "' . $from_name . '" <' . (empty($modSettings['mail_from']) ? $webmaster_email : $modSettings['mail_from']) . '>' . $line_break;
- $headers .= $from !== null ? 'Reply-To: <' . $from . '>' . $line_break : '';
- $headers .= 'Return-Path: ' . (empty($modSettings['mail_from']) ? $webmaster_email : $modSettings['mail_from']) . $line_break;
- $headers .= 'Date: ' . gmdate('D, d M Y H:i:s') . ' -0000' . $line_break;
- if ($message_id !== null && empty($modSettings['mail_no_message_id']))
- $headers .= 'Message-ID: <' . md5($scripturl . microtime()) . '-' . $message_id . strstr(empty($modSettings['mail_from']) ? $webmaster_email : $modSettings['mail_from'], '@') . '>' . $line_break;
- $headers .= 'X-Mailer: SMF' . $line_break;
- // Pass this to the integration before we start modifying the output -- it'll make it easier later.
- if (in_array(false, call_integration_hook('integrate_outgoing_email', array(&$subject, &$message, &$headers)), true))
- return false;
- // Save the original message...
- $orig_message = $message;
- // The mime boundary separates the different alternative versions.
- $mime_boundary = 'SMF-' . md5($message . time());
- // Using mime, as it allows to send a plain unencoded alternative.
- $headers .= 'Mime-Version: 1.0' . $line_break;
- $headers .= 'Content-Type: multipart/alternative; boundary="' . $mime_boundary . '"' . $line_break;
- $headers .= 'Content-Transfer-Encoding: 7bit' . $line_break;
- // Sending HTML? Let's plop in some basic stuff, then.
- if ($send_html)
- {
- $no_html_message = un_htmlspecialchars(strip_tags(strtr($orig_message, array('</title>' => $line_break))));
- // But, then, dump it and use a plain one for dinosaur clients.
- list(, $plain_message) = mimespecialchars($no_html_message, false, true, $line_break);
- $message = $plain_message . $line_break . '--' . $mime_boundary . $line_break;
- // This is the plain text version. Even if no one sees it, we need it for spam checkers.
- list($charset, $plain_charset_message, $encoding) = mimespecialchars($no_html_message, false, false, $line_break);
- $message .= 'Content-Type: text/plain; charset=' . $charset . $line_break;
- $message .= 'Content-Transfer-Encoding: ' . $encoding . $line_break . $line_break;
- $message .= $plain_charset_message . $line_break . '--' . $mime_boundary . $line_break;
- // This is the actual HTML message, prim and proper. If we wanted images, they could be inlined here (with multipart/related, etc.)
- list($charset, $html_message, $encoding) = mimespecialchars($orig_message, false, $hotmail_fix, $line_break);
- $message .= 'Content-Type: text/html; charset=' . $charset . $line_break;
- $message .= 'Content-Transfer-Encoding: ' . ($encoding == '' ? '7bit' : $encoding) . $line_break . $line_break;
- $message .= $html_message . $line_break . '--' . $mime_boundary . '--';
- }
- // Text is good too.
- else
- {
- // Send a plain message first, for the older web clients.
- list(, $plain_message) = mimespecialchars($orig_message, false, true, $line_break);
- $message = $plain_message . $line_break . '--' . $mime_boundary . $line_break;
- // Now add an encoded message using the forum's character set.
- list ($charset, $encoded_message, $encoding) = mimespecialchars($orig_message, false, false, $line_break);
- $message .= 'Content-Type: text/plain; charset=' . $charset . $line_break;
- $message .= 'Content-Transfer-Encoding: ' . $encoding . $line_break . $line_break;
- $message .= $encoded_message . $line_break . '--' . $mime_boundary . '--';
- }
- // Are we using the mail queue, if so this is where we butt in...
- if (!empty($modSettings['mail_queue']) && $priority != 0)
- return AddMailQueue(false, $to_array, $subject, $message, $headers, $send_html, $priority, $is_private);
- // If it's a priority mail, send it now - note though that this should NOT be used for sending many at once.
- elseif (!empty($modSettings['mail_queue']) && !empty($modSettings['mail_limit']))
- {
- list ($last_mail_time, $mails_this_minute) = @explode('|', $modSettings['mail_recent']);
- if (empty($mails_this_minute) || time() > $last_mail_time + 60)
- $new_queue_stat = time() . '|' . 1;
- else
- $new_queue_stat = $last_mail_time . '|' . ((int) $mails_this_minute + 1);
- updateSettings(array('mail_recent' => $new_queue_stat));
- }
- // SMTP or sendmail?
- if ($use_sendmail)
- {
- $subject = strtr($subject, array("\r" => '', "\n" => ''));
- if (!empty($modSettings['mail_strip_carriage']))
- {
- $message = strtr($message, array("\r" => ''));
- $headers = strtr($headers, array("\r" => ''));
- }
- foreach ($to_array as $to)
- {
- if (!mail(strtr($to, array("\r" => '', "\n" => '')), $subject, $message, $headers))
- {
- log_error(sprintf($txt['mail_send_unable'], $to));
- $mail_result = false;
- }
- // Wait, wait, I'm still sending here!
- @set_time_limit(300);
- if (function_exists('apache_reset_timeout'))
- @apache_reset_timeout();
- }
- }
- else
- $mail_result = $mail_result && smtp_mail($to_array, $subject, $message, $headers);
- // Everything go smoothly?
- return $mail_result;
- }
- // Add an email to the mail queue.
- function AddMailQueue($flush = false, $to_array = array(), $subject = '', $message = '', $headers = '', $send_html = false, $priority = 3, $is_private = false)
- {
- global $context, $modSettings, $smcFunc;
- static $cur_insert = array();
- static $cur_insert_len = 0;
- if ($cur_insert_len == 0)
- $cur_insert = array();
- // If we're flushing, make the final inserts - also if we're near the MySQL length limit!
- if (($flush || $cur_insert_len > 800000) && !empty($cur_insert))
- {
- // Only do these once.
- $cur_insert_len = 0;
- // Dump the data...
- $smcFunc['db_insert']('',
- '{db_prefix}mail_queue',
- array(
- 'time_sent' => 'int', 'recipient' => 'string-255', 'body' => 'string-65534', 'subject' => 'string-255',
- 'headers' => 'string-65534', 'send_html' => 'int', 'priority' => 'int', 'private' => 'int',
- ),
- $cur_insert,
- array('id_mail')
- );
- $cur_insert = array();
- $context['flush_mail'] = false;
- }
- // If we're flushing we're done.
- if ($flush)
- {
- $nextSendTime = time() + 10;
- $smcFunc['db_query']('', '
- UPDATE {db_prefix}settings
- SET value = {string:nextSendTime}
- WHERE variable = {string:mail_next_send}
- AND value = {string:no_outstanding}',
- array(
- 'nextSendTime' => $nextSendTime,
- 'mail_next_send' => 'mail_next_send',
- 'no_outstanding' => '0',
- )
- );
- return true;
- }
- // Ensure we tell obExit to flush.
- $context['flush_mail'] = true;
- foreach ($to_array as $to)
- {
- // Will this insert go over MySQL's limit?
- $this_insert_len = strlen($to) + strlen($message) + strlen($headers) + 700;
- // Insert limit of 1M (just under the safety) is reached?
- if ($this_insert_len + $cur_insert_len > 1000000)
- {
- // Flush out what we have so far.
- $smcFunc['db_insert']('',
- '{db_prefix}mail_queue',
- array(
- 'time_sent' => 'int', 'recipient' => 'string-255', 'body' => 'string-65534', 'subject' => 'string-255',
- 'headers' => 'string-65534', 'send_html' => 'int', 'priority' => 'int', 'private' => 'int',
- ),
- $cur_insert,
- array('id_mail')
- );
- // Clear this out.
- $cur_insert = array();
- $cur_insert_len = 0;
- }
- // Now add the current insert to the array...
- $cur_insert[] = array(time(), (string) $to, (string) $message, (string) $subject, (string) $headers, ($send_html ? 1 : 0), $priority, (int) $is_private);
- $cur_insert_len += $this_insert_len;
- }
- // If they are using SSI there is a good chance obExit will never be called. So lets be nice and flush it for them.
- if (SMF === 'SSI')
- return AddMailQueue(true);
- return true;
- }
- // Send off a personal message.
- function sendpm($recipients, $subject, $message, $store_outbox = false, $from = null, $pm_head = 0)
- {
- global $scripturl, $txt, $user_info, $language;
- global $modSettings, $smcFunc;
- // Make sure the PM language file is loaded, we might need something out of it.
- loadLanguage('PersonalMessage');
- $onBehalf = $from !== null;
- // Initialize log array.
- $log = array(
- 'failed' => array(),
- 'sent' => array()
- );
- if ($from === null)
- $from = array(
- 'id' => $user_info['id'],
- 'name' => $user_info['name'],
- 'username' => $user_info['username']
- );
- // Probably not needed. /me something should be of the typer.
- else
- $user_info['name'] = $from['name'];
- // This is the one that will go in their inbox.
- $htmlmessage = $smcFunc['htmlspecialchars']($message, ENT_QUOTES);
- $htmlsubject = $smcFunc['htmlspecialchars']($subject);
- preparsecode($htmlmessage);
- // Integrated PMs
- call_integration_hook('integrate_personal_message', array($recipients, $from['username'], $subject, $message));
- // Get a list of usernames and convert them to IDs.
- $usernames = array();
- foreach ($recipients as $rec_type => $rec)
- {
- foreach ($rec as $id => $member)
- {
- if (!is_numeric($recipients[$rec_type][$id]))
- {
- $recipients[$rec_type][$id] = $smcFunc['strtolower'](trim(preg_replace('/[<>&"\'=\\\]/', '', $recipients[$rec_type][$id])));
- $usernames[$recipients[$rec_type][$id]] = 0;
- }
- }
- }
- if (!empty($usernames))
- {
- $request = $smcFunc['db_query']('pm_find_username', '
- SELECT id_member, member_name
- FROM {db_prefix}members
- WHERE ' . ($smcFunc['db_case_sensitive'] ? 'LOWER(member_name)' : 'member_name') . ' IN ({array_string:usernames})',
- array(
- 'usernames' => array_keys($usernames),
- )
- );
- while ($row = $smcFunc['db_fetch_assoc']($request))
- if (isset($usernames[$smcFunc['strtolower']($row['member_name'])]))
- $usernames[$smcFunc['strtolower']($row['member_name'])] = $row['id_member'];
- $smcFunc['db_free_result']($request);
- // Replace the usernames with IDs. Drop usernames that couldn't be found.
- foreach ($recipients as $rec_type => $rec)
- foreach ($rec as $id => $member)
- {
- if (is_numeric($recipients[$rec_type][$id]))
- continue;
- if (!empty($usernames[$member]))
- $recipients[$rec_type][$id] = $usernames[$member];
- else
- {
- $log['failed'][$id] = sprintf($txt['pm_error_user_not_found'], $recipients[$rec_type][$id]);
- unset($recipients[$rec_type][$id]);
- }
- }
- }
- // Make sure there are no duplicate 'to' members.
- $recipients['to'] = array_unique($recipients['to']);
- // Only 'bcc' members that aren't already in 'to'.
- $recipients['bcc'] = array_diff(array_unique($recipients['bcc']), $recipients['to']);
- // Combine 'to' and 'bcc' recipients.
- $all_to = array_merge($recipients['to'], $recipients['bcc']);
- // Check no-one will want it deleted right away!
- $request = $smcFunc['db_query']('', '
- SELECT
- id_member, criteria, is_or
- FROM {db_prefix}pm_rules
- WHERE id_member IN ({array_int:to_members})
- AND delete_pm = {int:delete_pm}',
- array(
- 'to_members' => $all_to,
- 'delete_pm' => 1,
- )
- );
- $deletes = array();
- // Check whether we have to apply anything...
- while ($row = $smcFunc['db_fetch_assoc']($request))
- {
- $criteria = unserialize($row['criteria']);
- // Note we don't check the buddy status, cause deletion from buddy = madness!
- $delete = false;
- foreach ($criteria as $criterium)
- {
- $match = false;
- if (($criterium['t'] == 'mid' && $criterium['v'] == $from['id']) || ($criterium['t'] == 'gid' && in_array($criterium['v'], $user_info['groups'])) || ($criterium['t'] == 'sub' && strpos($subject, $criterium['v']) !== false) || ($criterium['t'] == 'msg' && strpos($message, $criterium['v']) !== false))
- $delete = true;
- // If we're adding and one criteria don't match then we stop!
- elseif (!$row['is_or'])
- {
- $delete = false;
- break;
- }
- }
- if ($delete)
- $deletes[$row['id_member']] = 1;
- }
- $smcFunc['db_free_result']($request);
- // Load the membergrounp message limits.
- //!!! Consider caching this?
- static $message_limit_cache = array();
- if (!allowedTo('moderate_forum') && empty($message_limit_cache))
- {
- $request = $smcFunc['db_query']('', '
- SELECT id_group, max_messages
- FROM {db_prefix}membergroups',
- array(
- )
- );
- while ($row = $smcFunc['db_fetch_assoc']($request))
- $message_limit_cache[$row['id_group']] = $row['max_messages'];
- $smcFunc['db_free_result']($request);
- }
- // Load the groups that are allowed to read PMs.
- $allowed_groups = array();
- $disallowed_groups = array();
- $request = $smcFunc['db_query']('', '
- SELECT id_group, add_deny
- FROM {db_prefix}permissions
- WHERE permission = {string:read_permission}',
- array(
- 'read_permission' => 'pm_read',
- )
- );
- while ($row = $smcFunc['db_fetch_assoc']($request))
- {
- if (empty($row['add_deny']))
- $disallowed_groups[] = $row['id_group'];
- else
- $allowed_groups[] = $row['id_group'];
- }
- $smcFunc['db_free_result']($request);
- if (empty($modSettings['permission_enable_deny']))
- $disallowed_groups = array();
- $request = $smcFunc['db_query']('', '
- SELECT
- member_name, real_name, id_member, email_address, lngfile,
- pm_email_notify, instant_messages,' . (allowedTo('moderate_forum') ? ' 0' : '
- (pm_receive_from = {int:admins_only}' . (empty($modSettings['enable_buddylist']) ? '' : ' OR
- (pm_receive_from = {int:buddies_only} AND FIND_IN_SET({string:from_id}, buddy_list) = 0) OR
- (pm_receive_from = {int:not_on_ignore_list} AND FIND_IN_SET({string:from_id}, pm_ignore_list) != 0)') . ')') . ' AS ignored,
- FIND_IN_SET({string:from_id}, buddy_list) != 0 AS is_buddy, is_activated,
- additional_groups, id_group, id_post_group
- FROM {db_prefix}members
- WHERE id_member IN ({array_int:recipients})
- ORDER BY lngfile
- LIMIT {int:count_recipients}',
- array(
- 'not_on_ignore_list' => 1,
- 'buddies_only' => 2,
- 'admins_only' => 3,
- 'recipients' => $all_to,
- 'count_recipients' => count($all_to),
- 'from_id' => $from['id'],
- )
- );
- $notifications = array();
- while ($row = $smcFunc['db_fetch_assoc']($request))
- {
- // Don't do anything for members to be deleted!
- if (isset($deletes[$row['id_member']]))
- continue;
- // We need to know this members groups.
- $groups = explode(',', $row['additional_groups']);
- $groups[] = $row['id_group'];
- $groups[] = $row['id_post_group'];
- $message_limit = -1;
- // For each group see whether they've gone over their limit - assuming they're not an admin.
- if (!in_array(1, $groups))
- {
- foreach ($groups as $id)
- {
- if (isset($message_limit_cache[$id]) && $message_limit != 0 && $message_limit < $message_limit_cache[$id])
- $message_limit = $message_limit_cache[$id];
- }
- if ($message_limit > 0 && $message_limit <= $row['instant_messages'])
- {
- $log['failed'][$row['id_member']] = sprintf($txt['pm_error_data_limit_reached'], $row['real_name']);
- unset($all_to[array_search($row['id_member'], $all_to)]);
- continue;
- }
- // Do they have any of the allowed groups?
- if (count(array_intersect($allowed_groups, $groups)) == 0 || count(array_intersect($disallowed_groups, $groups)) != 0)
- {
- $log['failed'][$row['id_member']] = sprintf($txt['pm_error_user_cannot_read'], $row['real_name']);
- unset($all_to[array_search($row['id_member'], $all_to)]);
- continue;
- }
- }
- // Note that PostgreSQL can return a lowercase t/f for FIND_IN_SET
- if (!empty($row['ignored']) && $row['ignored'] != 'f' && $row['id_member'] != $from['id'])
- {
- $log['failed'][$row['id_member']] = sprintf($txt['pm_error_ignored_by_user'], $row['real_name']);
- unset($all_to[array_search($row['id_member'], $all_to)]);
- continue;
- }
- // If the receiving account is banned (>=10) or pending deletion (4), refuse to send the PM.
- if ($row['is_activated'] >= 10 || ($row['is_activated'] == 4 && !$user_info['is_admin']))
- {
- $log['failed'][$row['id_member']] = sprintf($txt['pm_error_user_cannot_read'], $row['real_name']);
- unset($all_to[array_search($row['id_member'], $all_to)]);
- continue;
- }
- // Send a notification, if enabled - taking the buddy list into account.
- if (!empty($row['email_address']) && ($row['pm_email_notify'] == 1 || ($row['pm_email_notify'] > 1 && (!empty($modSettings['enable_buddylist']) && $row['is_buddy']))) && $row['is_activated'] == 1)
- $notifications[empty($row['lngfile']) || empty($modSettings['userLanguage']) ? $language : $row['lngfile']][] = $row['email_address'];
- $log['sent'][$row['id_member']] = sprintf(isset($txt['pm_successfully_sent']) ? $txt['pm_successfully_sent'] : '', $row['real_name']);
- }
- $smcFunc['db_free_result']($request);
- // Only 'send' the message if there are any recipients left.
- if (empty($all_to))
- return $log;
- // Insert the message itself and then grab the last insert id.
- $smcFunc['db_insert']('',
- '{db_prefix}personal_messages',
- array(
- 'id_pm_head' => 'int', 'id_member_from' => 'int', 'deleted_by_sender' => 'int',
- 'from_name' => 'string-255', 'msgtime' => 'int', 'subject' => 'string-255', 'body' => 'string-65534',
- ),
- array(
- $pm_head, $from['id'], ($store_outbox ? 0 : 1),
- $from['username'], time(), $htmlsubject, $htmlmessage,
- ),
- array('id_pm')
- );
- $id_pm = $smcFunc['db_insert_id']('{db_prefix}personal_messages', 'id_pm');
- // Add the recipients.
- if (!empty($id_pm))
- {
- // If this is new we need to set it part of it's own conversation.
- if (empty($pm_head))
- $smcFunc['db_query']('', '
- UPDATE {db_prefix}personal_messages
- SET id_pm_head = {int:id_pm_head}
- WHERE id_pm = {int:id_pm_head}',
- array(
- 'id_pm_head' => $id_pm,
- )
- );
- // Some people think manually deleting personal_messages is fun... it's not. We protect against it though :)
- $smcFunc['db_query']('', '
- DELETE FROM {db_prefix}pm_recipients
- WHERE id_pm = {int:id_pm}',
- array(
- 'id_pm' => $id_pm,
- )
- );
- $insertRows = array();
- foreach ($all_to as $to)
- {
- $insertRows[] = array($id_pm, $to, in_array($to, $recipients['bcc']) ? 1 : 0, isset($deletes[$to]) ? 1 : 0, 1);
- }
- $smcFunc['db_insert']('insert',
- '{db_prefix}pm_recipients',
- array(
- 'id_pm' => 'int', 'id_member' => 'int', 'bcc' => 'int', 'deleted' => 'int', 'is_new' => 'int'
- ),
- $insertRows,
- array('id_pm', 'id_member')
- );
- }
- censorText($message);
- censorText($subject);
- $message = trim(un_htmlspecialchars(strip_tags(strtr(parse_bbc(htmlspecialchars($message), false), array('<br />' => "\n", '</div>' => "\n", '</li>' => "\n", '[' => '[', ']' => ']')))));
- foreach ($notifications as $lang => $notification_list)
- {
- // Make sure to use the right language.
- loadLanguage('index+PersonalMessage', $lang, false);
- // Replace the right things in the message strings.
- $mailsubject = str_replace(array('SUBJECT', 'SENDER'), array($subject, un_htmlspecialchars($from['name'])), $txt['new_pm_subject']);
- $mailmessage = str_replace(array('SUBJECT', 'MESSAGE', 'SENDER'), array($subject, $message, un_htmlspecialchars($from['name'])), $txt['pm_email']);
- $mailmessage .= "\n\n" . $txt['instant_reply'] . ' ' . $scripturl . '?action=pm;sa=send;f=inbox;pmsg=' . $id_pm . ';quote;u=' . $from['id'];
- // Off the notification email goes!
- sendmail($notification_list, $mailsubject, $mailmessage, null, 'p' . $id_pm, false, 2, null, true);
- }
- // Back to what we were on before!
- loadLanguage('index+PersonalMessage');
- // Add one to their unread and read message counts.
- foreach ($all_to as $k => $id)
- if (isset($deletes[$id]))
- unset($all_to[$k]);
- if (!empty($all_to))
- updateMemberData($all_to, array('instant_messages' => '+', 'unread_messages' => '+', 'new_pm' => 1));
- return $log;
- }
- // Prepare text strings for sending as email body or header.
- function mimespecialchars($string, $with_charset = true, $hotmail_fix = false, $line_break = "\r\n", $custom_charset = null)
- {
- global $context;
- $charset = $custom_charset !== null ? $custom_charset : $context['character_set'];
- // This is the fun part....
- if (preg_match_all('~&#(\d{3,8});~', $string, $matches) !== 0 && !$hotmail_fix)
- {
- // Let's, for now, assume there are only 'ish characters.
- $simple = true;
- foreach ($matches[1] as $entity)
- if ($entity > 128)
- $simple = false;
- unset($matches);
- if ($simple)
- $string = preg_replace('~&#(\d{3,8});~e', 'chr(\'$1\')', $string);
- else
- {
- // Try to convert the string to UTF-8.
- if (!$context['utf8'] && function_exists('iconv'))
- {
- $newstring = @iconv($context['character_set'], 'UTF-8', $string);
- if ($newstring)
- $string = $newstring;
- }
- $fixchar = create_function('$n', '
- if ($n < 128)
- return chr($n);
- elseif ($n < 2048)
- return chr(192 | $n >> 6) . chr(128 | $n & 63);
- elseif ($n < 65536)
- return chr(224 | $n >> 12) . chr(128 | $n >> 6 & 63) . chr(128 | $n & 63);
- else
- return chr(240 | $n >> 18) . chr(128 | $n >> 12 & 63) . chr(128 | $n >> 6 & 63) . chr(128 | $n & 63);');
- $string = preg_replace('~&#(\d{3,8});~e', '$fixchar(\'$1\')', $string);
- // Unicode, baby.
- $charset = 'UTF-8';
- }
- }
- // Convert all special characters to HTML entities...just for Hotmail :-\
- if ($hotmail_fix && ($context['utf8'] || function_exists('iconv') || $context['character_set'] === 'ISO-8859-1'))
- {
- if (!$context['utf8'] && function_exists('iconv'))
- {
- $newstring = @iconv($context['character_set'], 'UTF-8', $string);
- if ($newstring)
- $string = $newstring;
- }
- $entityConvert = create_function('$c', '
- if (strlen($c) === 1 && ord($c[0]) <= 0x7F)
- return $c;
- elseif (strlen($c) === 2 && ord($c[0]) >= 0xC0 && ord($c[0]) <= 0xDF)
- return "&#" . (((ord($c[0]) ^ 0xC0) << 6) + (ord($c[1]) ^ 0x80)) . ";";
- elseif (strlen($c) === 3 && ord($c[0]) >= 0xE0 && ord($c[0]) <= 0xEF)
- return "&#" . (((ord($c[0]) ^ 0xE0) << 12) + ((ord($c[1]) ^ 0x80) << 6) + (ord($c[2]) ^ 0x80)) . ";";
- elseif (strlen($c) === 4 && ord($c[0]) >= 0xF0 && ord($c[0]) <= 0xF7)
- return "&#" . (((ord($c[0]) ^ 0xF0) << 18) + ((ord($c[1]) ^ 0x80) << 12) + ((ord($c[2]) ^ 0x80) << 6) + (ord($c[3]) ^ 0x80)) . ";";
- else
- return "";');
- // Convert all 'special' characters to HTML entities.
- return array($charset, preg_replace('~([\x80-' . ($context['server']['complex_preg_chars'] ? '\x{10FFFF}' : "\xF7\xBF\xBF\xBF") . '])~eu', '$entityConvert(\'\1\')', $string), '7bit');
- }
- // We don't need to mess with the subject line if no special characters were in it..
- elseif (!$hotmail_fix && preg_match('~([^\x09\x0A\x0D\x20-\x7F])~', $string) === 1)
- {
- // Base64 encode.
- $string = base64_encode($string);
- // Show the characterset and the transfer-encoding for header strings.
- if ($with_charset)
- $string = '=?' . $charset . '?B?' . $string . '?=';
- // Break it up in lines (mail body).
- else
- $string = chunk_split($string, 76, $line_break);
- return array($charset, $string, 'base64');
- }
- else
- return array($charset, $string, '7bit');
- }
- // Send an email via SMTP.
- function smtp_mail($mail_to_array, $subject, $message, $headers)
- {
- global $modSettings, $webmaster_email, $txt;
- $modSettings['smtp_host'] = trim($modSettings['smtp_host']);
- // Try POP3 before SMTP?
- // !!! There's no interface for this yet.
- if ($modSettings['mail_type'] == 2 && $modSettings['smtp_username'] != '' && $modSettings['smtp_password'] != '')
- {
- $socket = fsockopen($modSettings['smtp_host'], 110, $errno, $errstr, 2);
- if (!$socket && (substr($modSettings['smtp_host'], 0, 5) == 'smtp.' || substr($modSettings['smtp_host'], 0, 11) == 'ssl://smtp.'))
- $socket = fsockopen(strtr($modSettings['smtp_host'], array('smtp.' => 'pop.')), 110, $errno, $errstr, 2);
- if ($socket)
- {
- fgets($socket, 256);
- fputs($socket, 'USER ' . $modSettings['smtp_username'] . "\r\n");
- fgets($socket, 256);
- fputs($socket, 'PASS ' . base64_decode($modSettings['smtp_password']) . "\r\n");
- fgets($socket, 256);
- fputs($socket, 'QUIT' . "\r\n");
- fclose($socket);
- }
- }
- // Try to connect to the SMTP server... if it doesn't exist, only wait three seconds.
- if (!$socket = fsockopen($modSettings['smtp_host'], empty($modSettings['smtp_port']) ? 25 : $modSettings['smtp_port'], $errno, $errstr, 3))
- {
- // Maybe we can still save this? The port might be wrong.
- if (substr($modSettings['smtp_host'], 0, 4) == 'ssl:' && (empty($modSettings['smtp_port']) || $modSettings['smtp_port'] == 25))
- {
- if ($socket = fsockopen($modSettings['smtp_host'], 465, $errno, $errstr, 3))
- log_error($txt['smtp_port_ssl']);
- }
- // Unable to connect! Don't show any error message, but just log one and try to continue anyway.
- if (!$socket)
- {
- log_error($txt['smtp_no_connect'] . ': ' . $errno . ' : ' . $errstr);
- return false;
- }
- }
- // Wait for a response of 220, without "-" continuer.
- if (!server_parse(null, $socket, '220'))
- return false;
- if ($modSettings['mail_type'] == 1 && $modSettings['smtp_username'] != '' && $modSettings['smtp_password'] != '')
- {
- // !!! These should send the CURRENT server's name, not the mail server's!
- // EHLO could be understood to mean encrypted hello...
- if (server_parse('EHLO ' . $modSettings['smtp_host'], $socket, null) == '250')
- {
- if (!server_parse('AUTH LOGIN', $socket, '334'))
- return false;
- // Send the username and password, encoded.
- if (!server_parse(base64_encode($modSettings['smtp_username']), $socket, '334'))
- return false;
- // The password is already encoded ;)
- if (!server_parse($modSettings['smtp_password'], $socket, '235'))
- return false;
- }
- elseif (!server_parse('HELO ' . $modSettings['smtp_host'], $socket, '250'))
- return false;
- }
- else
- {
- // Just say "helo".
- if (!server_parse('HELO ' . $modSettings['smtp_host'], $socket, '250'))
- return false;
- }
- // Fix the message for any lines beginning with a period! (the first is ignored, you see.)
- $message = strtr($message, array("\r\n" . '.' => "\r\n" . '..'));
- // !! Theoretically, we should be able to just loop the RCPT TO.
- $mail_to_array = array_values($mail_to_array);
- foreach ($mail_to_array as $i => $mail_to)
- {
- // Reset the connection to send another email.
- if ($i != 0)
- {
- if (!server_parse('RSET', $socket, '250'))
- return false;
- }
- // From, to, and then start the data...
- if (!server_parse('MAIL FROM: <' . (empty($modSettings['mail_from']) ? $webmaster_email : $modSettings['mail_from']) . '>', $socket, '250'))
- return false;
- if (!server_parse('RCPT TO: <' . $mail_to . '>', $socket, '250'))
- return false;
- if (!server_parse('DATA', $socket, '354'))
- return false;
- fputs($socket, 'Subject: ' . $subject . "\r\n");
- if (strlen($mail_to) > 0)
- fputs($socket, 'To: <' . $mail_to . '>' . "\r\n");
- fputs($socket, $headers . "\r\n\r\n");
- fputs($socket, $message . "\r\n");
- // Send a ., or in other words "end of data".
- if (!server_parse('.', $socket, '250'))
- return false;
- // Almost done, almost done... don't stop me just yet!
- @set_time_limit(300);
- if (function_exists('apache_reset_timeout'))
- @apache_reset_timeout();
- }
- fputs($socket, 'QUIT' . "\r\n");
- fclose($socket);
- return true;
- }
- // Parse a message to the SMTP server.
- function server_parse($message, $socket, $response)
- {
- global $txt;
- if ($message !== null)
- fputs($socket, $message . "\r\n");
- // No response yet.
- $server_response = '';
- while (substr($server_response, 3, 1) != ' ')
- if (!($server_response = fgets($socket, 256)))
- {
- // !!! Change this message to reflect that it may mean bad user/password/server issues/etc.
- log_error($txt['smtp_bad_response']);
- return false;
- }
- if ($response === null)
- return substr($server_response, 0, 3);
- if (substr($server_response, 0, 3) != $response)
- {
- log_error($txt['smtp_error'] . $server_response);
- return false;
- }
- return true;
- }
- function SpellCheck()
- {
- global $txt, $context, $smcFunc;
- // A list of "words" we know about but pspell doesn't.
- $known_words = array('smf', 'php', 'mysql', 'www', 'gif', 'jpeg', 'png', 'http', 'smfisawesome', 'grandia', 'terranigma', 'rpgs');
- loadLanguage('Post');
- loadTemplate('Post');
- // Okay, this looks funny, but it actually fixes a weird bug.
- ob_start();
- $old = error_reporting(0);
- // See, first, some windows machines don't load pspell properly on the first try. Dumb, but this is a workaround.
- pspell_new('en');
- // Next, the dictionary in question may not exist. So, we try it... but...
- $pspell_link = pspell_new($txt['lang_dictionary'], $txt['lang_spelling'], '', strtr($context['character_set'], array('iso-' => 'iso', 'ISO-' => 'iso')), PSPELL_FAST | PSPELL_RUN_TOGETHER);
- // Most people don't have anything but English installed... So we use English as a last resort.
- if (!$pspell_link)
- $pspell_link = pspell_new('en', '', '', '', PSPELL_FAST | PSPELL_RUN_TOGETHER);
- error_reporting($old);
- ob_end_clean();
- if (!isset($_POST['spellstring']) || !$pspell_link)
- die;
- // Construct a bit of Javascript code.
- $context['spell_js'] = '
- var txt = {"done": "' . $txt['spellcheck_done'] . '"};
- var mispstr = window.opener.document.forms[spell_formname][spell_fieldname].value;
- var misps = Array(';
- // Get all the words (Javascript already separated them).
- $alphas = explode("\n", strtr($_POST['spellstring'], array("\r" => '')));
- $found_words = false;
- for ($i = 0, $n = count($alphas); $i < $n; $i++)
- {
- // Words are sent like 'word|offset_begin|offset_end'.
- $check_word = explode('|', $alphas[$i]);
- // If the word is a known word, or spelled right...
- if (in_array($smcFunc['strtolower']($check_word[0]), $known_words) || pspell_check($pspell_link, $check_word[0]) || !isset($check_word[2]))
- continue;
- // Find the word, and move up the "last occurance" to here.
- $found_words = true;
- // Add on the javascript for this misspelling.
- $context['spell_js'] .= '
- new misp("' . strtr($check_word[0], array('\\' => '\\\\', '"' => '\\"', '<' => '', '>' => '')) . '", ' . (int) $check_word[1] . ', ' . (int) $check_word[2] . ', [';
- // If there are suggestions, add them in...
- $suggestions = pspell_suggest($pspell_link, $check_word[0]);
- if (!empty($suggestions))
- {
- // But first check they aren't going to be censored - no naughty words!
- foreach ($suggestions as $k => $word)
- if ($suggestions[$k] != censorText($word))
- unset($suggestions[$k]);
- if (!empty($suggestions))
- $context['spell_js'] .= '"' . implode('", "', $suggestions) . '"';
- }
- $context['spell_js'] .= ']),';
- }
- // If words were found, take off the last comma.
- if ($found_words)
- $context['spell_js'] = substr($context['spell_js'], 0, -1);
- $context['spell_js'] .= '
- );';
- // And instruct the template system to just show the spellcheck sub template.
- $context['template_layers'] = array();
- $context['sub_template'] = 'spellcheck';
- }
- // Notify members that something has happened to a topic they marked!
- function sendNotifications($topics, $type, $exclude = array(), $members_only = array())
- {
- global $txt, $scripturl, $language, $user_info;
- global $modSettings, $sourcedir, $context, $smcFunc;
- // Can't do it if there's no topics.
- if (empty($topics))
- return;
- // It must be an array - it must!
- if (!is_array($topics))
- $topics = array($topics);
- // Get the subject and body...
- $result = $smcFunc['db_query']('', '
- SELECT mf.subject, ml.body, ml.id_member, t.id_last_msg, t.id_topic,
- IFNULL(mem.real_name, ml.poster_name) AS poster_name
- FROM {db_prefix}topics AS t
- INNER JOIN {db_prefix}messages AS mf ON (mf.id_msg = t.id_first_msg)
- INNER JOIN {db_prefix}messages AS ml ON (ml.id_msg = t.id_last_msg)
- LEFT JOIN {db_prefix}members AS mem ON (mem.id_member = ml.id_member)
- WHERE t.id_topic IN ({array_int:topic_list})
- LIMIT 1',
- array(
- 'topic_list' => $topics,
- )
- );
- $topicData = array();
- while ($row = $smcFunc['db_fetch_assoc']($result))
- {
- // Clean it up.
- censorText($row['subject']);
- censorText($row['body']);
- $row['subject'] = un_htmlspecialchars($row['subject']);
- $row['body'] = trim(un_htmlspecialchars(strip_tags(strtr(parse_bbc($row['body'], false, $row['id_last_msg']), array('<br />' => "\n", '</div>' => "\n", '</li>' => "\n", '[' => '[', ']' => ']')))));
- $topicData[$row['id_topic']] = array(
- 'subject' => $row['subject'],
- 'body' => $row['body'],
- 'last_id' => $row['id_last_msg'],
- 'topic' => $row['id_topic'],
- 'name' => $user_info['name'],
- 'exclude' => '',
- );
- }
- $smcFunc['db_free_result']($result);
- // Work out any exclusions...
- foreach ($topics as $key => $id)
- if (isset($topicData[$id]) && !empty($exclude[$key]))
- $topicData[$id]['exclude'] = (int) $exclude[$key];
- // Nada?
- if (empty($topicData))
- trigger_error('sendNotifications(): topics not found', E_USER_NOTICE);
- $topics = array_keys($topicData);
- // Just in case they've gone walkies.
- if (empty($topics))
- return;
- // Insert all of these items into the digest log for those who want notifications later.
- $digest_insert = array();
- foreach ($topicData as $id => $data)
- $digest_insert[] = array($data['topic'], $data['last_id'], $type, (int) $data['exclude']);
- $smcFunc['db_insert']('',
- '{db_prefix}log_digest',
- array(
- 'id_topic' => 'int', 'id_msg' => 'int', 'note_type' => 'string', 'exclude' => 'int',
- ),
- $digest_insert,
- array()
- );
- // Find the members with notification on for this topic.
- $members = $smcFunc['db_query']('', '
- SELECT
- mem.id_member, mem.email_address, mem.notify_regularity, mem.notify_types, mem.notify_send_body, mem.lngfile,
- ln.sent, mem.id_group, mem.additional_groups, b.member_groups, mem.id_post_group, t.id_member_started,
- ln.id_topic
- FROM {db_prefix}log_notify AS ln
- INNER JOIN {db_prefix}members AS mem ON (mem.id_member = ln.id_member)
- INNER JOIN {db_prefix}topics AS t ON (t.id_topic = ln.id_topic)
- INNER JOIN {db_prefix}boards AS b ON (b.id_board = t.id_board)
- WHERE ln.id_topic IN ({array_int:topic_list})
- AND mem.notify_types < {int:notify_types}
- AND mem.notify_regularity < {int:notify_regularity}
- AND mem.is_activated = {int:is_activated}
- AND ln.id_member != {int:current_member}' .
- (empty($members_only) ? '' : ' AND ln.id_member IN ({array_int:members_only})') . '
- ORDER BY mem.lngfile',
- array(
- 'current_member' => $user_info['id'],
- 'topic_list' => $topics,
- 'notify_types' => $type == 'reply' ? '4' : '3',
- 'notify_regularity' => 2,
- 'is_activated' => 1,
- 'members_only' => is_array($members_only) ? $members_only : array($members_only),
- )
- );
- $sent = 0;
- while ($row = $smcFunc['db_fetch_assoc']($members))
- {
- // Don't do the excluded...
- if ($topicData[$row['id_topic']]['exclude'] == $row['id_member'])
- continue;
- // Easier to check this here... if they aren't the topic poster do they really want to know?
- if ($type != 'reply' && $row['notify_types'] == 2 && $row['id_member'] != $row['id_member_started'])
- continue;
- if ($row['id_group'] != 1)
- {
- $allowed = explode(',', $row['member_groups']);
- $row['additional_groups'] = explode(',', $row['additional_groups']);
- $row['additional_groups'][] = $row['id_group'];
- $row['additional_groups'][] = $row['id_post_group'];
- if (count(array_intersect($allowed, $row['additional_groups'])) == 0)
- continue;
- }
- $needed_language = empty($row['lngfile']) || empty($modSettings['userLanguage']) ? $language : $row['lngfile'];
- if (empty($current_language) || $current_language != $needed_language)
- $current_language = loadLanguage('Post', $needed_language, false);
- $message_type = 'notification_' . $type;
- $replacements = array(
- 'TOPICSUBJECT' => $topicData[$row['id_topic']]['subject'],
- 'POSTERNAME' => un_htmlspecialchars($topicData[$row['id_topic']]['name']),
- 'TOPICLINK' => $scripturl . '?topic=' . $row['id_topic'] . '.new;topicseen#new',
- 'UNSUBSCRIBELINK' => $scripturl . '?action=notify;topic=' . $row['id_topic'] . '.0',
- );
- if ($type == 'remove')
- unset($replacements['TOPICLINK'], $replacements['UNSUBSCRIBELINK']);
- // Do they want the body of the message sent too?
- if (!empty($row['notify_send_body']) && $type == 'reply' && empty($modSettings['disallow_sendBody']))
- {
- $message_type .= '_body';
- $replacements['MESSAGE'] = $topicData[$row['id_topic']]['body'];
- }
- if (!empty($row['notify_regularity']) && $type == 'reply')
- $message_type .= '_once';
- // Send only if once is off or it's on and it hasn't been sent.
- if ($type != 'reply' || empty($row['notify_regularity']) || empty($row['sent']))
- {
- $emaildata = loadEmailTemplate($message_type, $replacements, $needed_language);
- sendmail($row['email_address'], $emaildata['subject'], $emaildata['body'], null, 'm' . $topicData[$row['id_topic']]['last_id']);
- $sent++;
- }
- }
- $smcFunc['db_free_result']($members);
- if (isset($current_language) && $current_language != $user_info['language'])
- loadLanguage('Post');
- // Sent!
- if ($type == 'reply' && !empty($sent))
- $smcFunc['db_query']('', '
- UPDATE {db_prefix}log_notify
- SET sent = {int:is_sent}
- WHERE id_topic IN ({array_int:topic_list})
- AND id_member != {int:current_member}',
- array(
- 'current_member' => $user_info['id'],
- 'topic_list' => $topics,
- 'is_sent' => 1,
- )
- );
- // For approvals we need to unsend the exclusions (This *is* the quickest way!)
- if (!empty($sent) && !empty($exclude))
- {
- foreach ($topicData as $id => $data)
- if ($data['exclude'])
- $smcFunc['db_query']('', '
- UPDATE {db_prefix}log_notify
- SET sent = {int:not_sent}
- WHERE id_topic = {int:id_topic}
- AND id_member = {int:id_member}',
- array(
- 'not_sent' => 0,
- 'id_topic' => $id,
- 'id_member' => $data['exclude'],
- )
- );
- }
- }
- // Create a post, either as new topic (id_topic = 0) or in an existing one.
- // The input parameters of this function assume:
- // - Strings have been escaped.
- // - Integers have been cast to integer.
- // - Mandatory parameters are set.
- function createPost(&$msgOptions, &$topicOptions, &$posterOptions)
- {
- global $user_info, $txt, $modSettings, $smcFunc, $context;
- // Set optional parameters to the default value.
- $msgOptions['icon'] = empty($msgOptions['icon']) ? 'xx' : $msgOptions['icon'];
- $msgOptions['smileys_enabled'] = !empty($msgOptions['smileys_enabled']);
- $msgOptions['attachments'] = empty($msgOptions['attachments']) ? array() : $msgOptions['attachments'];
- $msgOptions['approved'] = isset($msgOptions['approved']) ? (int) $msgOptions['approved'] : 1;
- $topicOptions['id'] = empty($topicOptions['id']) ? 0 : (int) $topicOptions['id'];
- $topicOptions['poll'] = isset($topicOptions['poll']) ? (int) $topicOptions['poll'] : null;
- $topicOptions['lock_mode'] = isset($topicOptions['lock_mode']) ? $topicOptions['lock_mode'] : null;
- $topicOptions['sticky_mode'] = isset($topicOptions['sticky_mode']) ? $topicOptions['sticky_mode'] : null;
- $posterOptions['id'] = empty($posterOptions['id']) ? 0 : (int) $posterOptions['id'];
- $posterOptions['ip'] = empty($posterOptions['ip']) ? $user_info['ip'] : $posterOptions['ip'];
- // We need to know if the topic is approved. If we're told that's great - if not find out.
- if (!$modSettings['postmod_active'])
- $topicOptions['is_approved'] = true;
- elseif (!empty($topicOptions['id']) && !isset($topicOptions['is_approved']))
- {
- $request = $smcFunc['db_query']('', '
- SELECT approved
- FROM {db_prefix}topics
- WHERE id_topic = {int:id_topic}
- LIMIT 1',
- array(
- 'id_topic' => $topicOptions['id'],
- )
- );
- list ($topicOptions['is_approved']) = $smcFunc['db_fetch_row']($request);
- $smcFunc['db_free_result']($request);
- }
- // If nothing was filled in as name/e-mail address, try the member table.
- if (!isset($posterOptions['name']) || $posterOptions['name'] == '' || (empty($posterOptions['email']) && !empty($posterOptions['id'])))
- {
- if (empty($posterOptions['id']))
- {
- $posterOptions['id'] = 0;
- $posterOptions['name'] = $txt['guest_title'];
- $posterOptions['email'] = '';
- }
- elseif ($posterOptions['id'] != $user_info['id'])
- {
- $request = $smcFunc['db_query']('', '
- SELECT member_name, email_address
- FROM {db_prefix}members
- WHERE id_member = {int:id_member}
- LIMIT 1',
- array(
- 'id_member' => $posterOptions['id'],
- )
- );
- // Couldn't find the current poster?
- if ($smcFunc['db_num_rows']($request) == 0)
- {
- trigger_error('createPost(): Invalid member id ' . $posterOptions['id'], E_USER_NOTICE);
- $posterOptions['id'] = 0;
- $posterOptions['name'] = $txt['guest_title'];
- $posterOptions['email'] = '';
- }
- else
- list ($posterOptions['name'], $posterOptions['email']) = $smcFunc['db_fetch_row']($request);
- $smcFunc['db_free_result']($request);
- }
- else
- {
- $posterOptions['name'] = $user_info['name'];
- $posterOptions['email'] = $user_info['email'];
- }
- }
- // It's do or die time: forget any user aborts!
- $previous_ignore_user_abort = ignore_user_abort(true);
- $new_topic = empty($topicOptions['id']);
- // Insert the post.
- $smcFunc['db_insert']('',
- '{db_prefix}messages',
- array(
- 'id_board' => 'int', 'id_topic' => 'int', 'id_member' => 'int', 'subject' => 'string-255', 'body' => (!empty($modSettings['max_messageLength']) && $modSettings['max_messageLength'] > 65534 ? 'string-' . $modSettings['max_messageLength'] : 'string-65534'),
- 'poster_name' => 'string-255', 'poster_email' => 'string-255', 'poster_time' => 'int', 'poster_ip' => 'string-255',
- 'smileys_enabled' => 'int', 'modified_name' => 'string', 'icon' => 'string-16', 'approved' => 'int',
- ),
- array(
- $topicOptions['board'], $topicOptions['id'], $posterOptions['id'], $msgOptions['subject'], $msgOptions['body'],
- $posterOptions['name'], $posterOptions['email'], time(), $posterOptions['ip'],
- $msgOptions['smileys_enabled'] ? 1 : 0, '', $msgOptions['icon'], $msgOptions['approved'],
- ),
- array('id_msg')
- );
- $msgOptions['id'] = $smcFunc['db_insert_id']('{db_prefix}messages', 'id_msg');
- // Something went wrong creating the message...
- if (empty($msgOptions['id']))
- return false;
- // Fix the attachments.
- if (!empty($msgOptions['attachments']))
- $smcFunc['db_query']('', '
- UPDATE {db_prefix}attachments
- SET id_msg = {int:id_msg}
- WHERE id_attach IN ({array_int:attachment_list})',
- array(
- 'attachment_list' => $msgOptions['attachments'],
- 'id_msg' => $msgOptions['id'],
- )
- );
- // Insert a new topic (if the topicID was left empty.)
- if ($new_topic)
- {
- $smcFunc['db_insert']('',
- '{db_prefix}topics',
- array(
- 'id_board' => 'int', 'id_member_started' => 'int', 'id_member_updated' => 'int', 'id_first_msg' => 'int',
- 'id_last_msg' => 'int', 'locked' => 'int', 'is_sticky' => 'int', 'num_views' => 'int',
- 'id_poll' => 'int', 'unapproved_posts' => 'int', 'approved' => 'int',
- ),
- array(
- $topicOptions['board'], $posterOptions['id'], $posterOptions['id'], $msgOptions['id'],
- $msgOptions['id'], $topicOptions['lock_mode'] === null ? 0 : $topicOptions['lock_mode'], $topicOptions['sticky_mode'] === null ? 0 : $topicOptions['sticky_mode'], 0,
- $topicOptions['poll'] === null ? 0 : $topicOptions['poll'], $msgOptions['approved'] ? 0 : 1, $msgOptions['approved'],
- ),
- array('id_topic')
- );
- $topicOptions['id'] = $smcFunc['db_insert_id']('{db_prefix}topics', 'id_topic');
- // The topic couldn't be created for some reason.
- if (empty($topicOptions['id']))
- {
- // We should delete the post that did work, though...
- $smcFunc['db_query']('', '
- DELETE FROM {db_prefix}messages
- WHERE id_msg = {int:id_msg}',
- array(
- 'id_msg' => $msgOptions['id'],
- )
- );
- return false;
- }
- // Fix the message with the topic.
- $smcFunc['db_query']('', '
- UPDATE {db_prefix}messages
- SET id_topic = {int:id_topic}
- WHERE id_msg = {int:id_msg}',
- array(
- 'id_topic' => $topicOptions['id'],
- 'id_msg' => $msgOptions['id'],
- )
- );
- // There's been a new topic AND a new post today.
- trackStats(array('topics' => '+', 'posts' => '+'));
- updateStats('topic', true);
- updateStats('subject', $topicOptions['id'], $msgOptions['subject']);
- // What if we want to export new topics out to a CMS?
- call_integration_hook('integrate_create_topic', array($msgOptions, $topicOptions, $posterOptions));
- }
- // The topic already exists, it only needs a little updating.
- else
- {
- $countChange = $msgOptions['approved'] ? 'num_replies = num_replies + 1' : 'unapproved_posts = unapproved_posts + 1';
- // Update the number of replies and the lock/sticky status.
- $smcFunc['db_query']('', '
- UPDATE {db_prefix}topics
- SET
- ' . ($msgOptions['approved'] ? 'id_member_updated = {int:poster_id}, id_last_msg = {int:id_msg},' : '') . '
- ' . $countChange . ($topicOptions['lock_mode'] === null ? '' : ',
- locked = {int:locked}') . ($topicOptions['sticky_mode'] === null ? '' : ',
- is_sticky = {int:is_sticky}') . '
- WHERE id_topic = {int:id_topic}',
- array(
- 'poster_id' => $posterOptions['id'],
- 'id_msg' => $msgOptions['id'],
- 'locked' => $topicOptions['lock_mode'],
- 'is_sticky' => $topicOptions['sticky_mode'],
- 'id_topic' => $topicOptions['id'],
- )
- );
- // One new post has been added today.
- trackStats(array('posts' => '+'));
- }
- // Creating is modifying...in a way.
- //!!! Why not set id_msg_modified on the insert?
- $smcFunc['db_query']('', '
- UPDATE {db_prefix}messages
- SET id_msg_modified = {int:id_msg}
- WHERE id_msg = {int:id_msg}',
- array(
- 'id_msg' => $msgOptions['id'],
- )
- );
- // Increase the number of posts and topics on the board.
- if ($msgOptions['approved'])
- $smcFunc['db_query']('', '
- UPDATE {db_prefix}boards
- SET num_posts = num_posts + 1' . ($new_topic ? ', num_topics = num_topics + 1' : '') . '
- WHERE id_board = {int:id_board}',
- array(
- 'id_board' => $topicOptions['board'],
- )
- );
- else
- {
- $smcFunc['db_query']('', '
- UPDATE {db_prefix}boards
- SET unapproved_posts = unapproved_posts + 1' . ($new_topic ? ', unapproved_topics = unapproved_topics + 1' : '') . '
- WHERE id_board = {int:id_board}',
- array(
- 'id_board' => $topicOptions['board'],
- )
- );
- // Add to the approval queue too.
- $smcFunc['db_insert']('',
- '{db_prefix}approval_queue',
- array(
- 'id_msg' => 'int',
- ),
- array(
- $msgOptions['id'],
- ),
- array()
- );
- }
- // Mark inserted topic as read (only for the user calling this function).
- if (!empty($topicOptions['mark_as_read']) && !$user_info['is_guest'])
- {
- // Since it's likely they *read* it before replying, let's try an UPDATE first.
- if (!$new_topic)
- {
- $smcFunc['db_query']('', '
- UPDATE {db_prefix}log_topics
- SET id_msg = {int:id_msg}
- WHERE id_member = {int:current_member}
- AND id_topic = {int:id_topic}',
- array(
- 'current_member' => $posterOptions['id'],
- 'id_msg' => $msgOptions['id'],
- 'id_topic' => $topicOptions['id'],
- )
- );
- $flag = $smcFunc['db_affected_rows']() != 0;
- }
- if (empty($flag))
- {
- $smcFunc['db_insert']('ignore',
- '{db_prefix}log_topics',
- array('id_topic' => 'int', 'id_member' => 'int', 'id_msg' => 'int'),
- array($topicOptions['id'], $posterOptions['id'], $msgOptions['id']),
- array('id_topic', 'id_member')
- );
- }
- }
- // If there's a custom search index, it needs updating...
- if (!empty($modSettings['search_custom_index_config']))
- {
- $customIndexSettings = unserialize($modSettings['search_custom_index_config']);
- $inserts = array();
- foreach (text2words($msgOptions['body'], $customIndexSettings['bytes_per_word'], true) as $word)
- $inserts[] = array($word, $msgOptions['id']);
- if (!empty($inserts))
- $smcFunc['db_insert']('ignore',
- '{db_prefix}log_search_words',
- array('id_word' => 'int', 'id_msg' => 'int'),
- $inserts,
- array('id_word', 'id_msg')
- );
- }
- // Increase the post counter for the user that created the post.
- if (!empty($posterOptions['update_post_count']) && !empty($posterOptions['id']) && $msgOptions['approved'])
- {
- // Are you the one that happened to create this post?
- if ($user_info['id'] == $posterOptions['id'])
- $user_info['posts']++;
- updateMemberData($posterOptions['id'], array('posts' => '+'));
- }
- // They've posted, so they can make the view count go up one if they really want. (this is to keep views >= replies...)
- $_SESSION['last_read_topic'] = 0;
- // Better safe than sorry.
- if (isset($_SESSION['topicseen_cache'][$topicOptions['board']]))
- $_SESSION['topicseen_cache'][$topicOptions['board']]--;
- // Update all the stats so everyone knows about this new topic and message.
- updateStats('message', true, $msgOptions['id']);
- // Update the last message on the board assuming it's approved AND the topic is.
- if ($msgOptions['approved'])
- updateLastMessages($topicOptions['board'], $new_topic || !empty($topicOptions['is_approved']) ? $msgOptions['id'] : 0);
- // Alright, done now... we can abort now, I guess... at least this much is done.
- ignore_user_abort($previous_ignore_user_abort);
- // Success.
- return true;
- }
- // !!!
- function createAttachment(&$attachmentOptions)
- {
- global $modSettings, $sourcedir, $smcFunc, $context;
- require_once($sourcedir . '/Subs-Graphics.php');
- // We need to know where this thing is going.
- if (!empty($modSettings['currentAttachmentUploadDir']))
- {
- if (!is_array($modSettings['attachmentUploadDir']))
- $modSettings['attachmentUploadDir'] = unserialize($modSettings['attachmentUploadDir']);
- // Just use the current path for temp files.
- $attach_dir = $modSettings['attachmentUploadDir'][$modSettings['currentAttachmentUploadDir']];
- $id_folder = $modSettings['currentAttachmentUploadDir'];
- }
- else
- {
- $attach_dir = $modSettings['attachmentUploadDir'];
- $id_folder = 1;
- }
- $attachmentOptions['errors'] = array();
- if (!isset($attachmentOptions['post']))
- $attachmentOptions['post'] = 0;
- if (!isset($attachmentOptions['approved']))
- $attachmentOptions['approved'] = 1;
- $already_uploaded = preg_match('~^post_tmp_' . $attachmentOptions['poster'] . '_\d+$~', $attachmentOptions['tmp_name']) != 0;
- $file_restricted = @ini_get('open_basedir') != '' && !$already_uploaded;
- if ($already_uploaded)
- $attachmentOptions['tmp_name'] = $attach_dir . '/' . $attachmentOptions['tmp_name'];
- // Make sure the file actually exists... sometimes it doesn't.
- if ((!$file_restricted && !file_exists($attachmentOptions['tmp_name'])) || (!$already_uploaded && !is_uploaded_file($attachmentOptions['tmp_name'])))
- {
- $attachmentOptions['errors'] = array('could_not_upload');
- return false;
- }
- // These are the only valid image types for SMF.
- $validImageTypes = array(
- 1 => 'gif',
- 2 => 'jpeg',
- 3 => 'png',
- 5 => 'psd',
- 6 => 'bmp',
- 7 => 'tiff',
- 8 => 'tiff',
- 9 => 'jpeg',
- 14 => 'iff'
- );
- if (!$file_restricted || $already_uploaded)
- {
- $size = @getimagesize($attachmentOptions['tmp_name']);
- list ($attachmentOptions['width'], $attachmentOptions['height']) = $size;
- // If it's an image get the mime type right.
- if (empty($attachmentOptions['mime_type']) && $attachmentOptions['width'])
- {
- // Got a proper mime type?
- if (!empty($size['mime']))
- $attachmentOptions['mime_type'] = $size['mime'];
- // Otherwise a valid one?
- elseif (isset($validImageTypes[$size[2]]))
- $attachmentOptions['mime_type'] = 'image/' . $validImageTypes[$size[2]];
- }
- }
- // Get the hash if no hash has been given yet.
- if (empty($attachmentOptions['file_hash']))
- $attachmentOptions['file_hash'] = getAttachmentFilename($attachmentOptions['name'], false, null, true);
- // Is the file too big?
- if (!empty($modSettings['attachmentSizeLimit']) && $attachmentOptions['size'] > $modSettings['attachmentSizeLimit'] * 1024)
- $attachmentOptions['errors'][] = 'too_large';
- if (!empty($modSettings['attachmentCheckExtensions']))
- {
- $allowed = explode(',', strtolower($modSettings['attachmentExtensions']));
- foreach ($allowed as $k => $dummy)
- $allowed[$k] = trim($dummy);
- if (!in_array(strtolower(substr(strrchr($attachmentOptions['name'], '.'), 1)), $allowed))
- $attachmentOptions['errors'][] = 'bad_extension';
- }
- if (!empty($modSettings['attachmentDirSizeLimit']))
- {
- // Make sure the directory isn't full.
- $dirSize = 0;
- $dir = @opendir($attach_dir) or fatal_lang_error('cant_access_upload_path', 'critical');
- while ($file = readdir($dir))
- {
- if ($file == '.' || $file == '..')
- continue;
- if (preg_match('~^post_tmp_\d+_\d+$~', $file) != 0)
- {
- // Temp file is more than 5 hours old!
- if (filemtime($attach_dir . '/' . $file) < time() - 18000)
- @unlink($attach_dir . '/' . $file);
- continue;
- }
- $dirSize += filesize($attach_dir . '/' . $file);
- }
- closedir($dir);
- // Too big! Maybe you could zip it or something...
- if ($attachmentOptions['size'] + $dirSize > $modSettings['attachmentDirSizeLimit'] * 1024)
- $attachmentOptions['errors'][] = 'directory_full';
- // Soon to be too big - warn the admins...
- elseif (!isset($modSettings['attachment_full_notified']) && $modSettings['attachmentDirSizeLimit'] > 4000 && $attachmentOptions['size'] + $dirSize > ($modSettings['attachmentDirSizeLimit'] - 2000) * 1024)
- {
- require_once($sourcedir . '/Subs-Admin.php');
- emailAdmins('admin_attachments_full');
- updateSettings(array('attachment_full_notified' => 1));
- }
- }
- // Check if the file already exists.... (for those who do not encrypt their filenames...)
- if (empty($modSettings['attachmentEncryptFilenames']))
- {
- // Make sure they aren't trying to upload a nasty file.
- $disabledFiles = array('con', 'com1', 'com2', 'com3', 'com4', 'prn', 'aux', 'lpt1', '.htaccess', 'index.php');
- if (in_array(strtolower(basename($attachmentOptions['name'])), $disabledFiles))
- $attachmentOptions['errors'][] = 'bad_filename';
- // Check if there's another file with that name...
- $request = $smcFunc['db_query']('', '
- SELECT id_attach
- FROM {db_prefix}attachments
- WHERE filename = {string:filename}
- LIMIT 1',
- array(
- 'filename' => strtolower($attachmentOptions['name']),
- )
- );
- if ($smcFunc['db_num_rows']($request) > 0)
- $attachmentOptions['errors'][] = 'taken_filename';
- $smcFunc['db_free_result']($request);
- }
- if (!empty($attachmentOptions['errors']))
- return false;
- if (!is_writable($attach_dir))
- fatal_lang_error('attachments_no_write', 'critical');
- // Assuming no-one set the extension let's take a look at it.
- if (empty($attachmentOptions['fileext']))
- {
- $attachmentOptions['fileext'] = strtolower(strrpos($attachmentOptions['name'], '.') !== false ? substr($attachmentOptions['name'], strrpos($attachmentOptions['name'], '.') + 1) : '');
- if (strlen($attachmentOptions['fileext']) > 8 || '.' . $attachmentOptions['fileext'] == $attachmentOptions['name'])
- $attachmentOptions['fileext'] = '';
- }
- $smcFunc['db_insert']('',
- '{db_prefix}attachments',
- array(
- 'id_folder' => 'int', 'id_msg' => 'int', 'filename' => 'string-255', 'file_hash' => 'string-40', 'fileext' => 'string-8',
- 'size' => 'int', 'width' => 'int', 'height' => 'int',
- 'mime_type' => 'string-20', 'approved' => 'int',
- ),
- array(
- $id_folder, (int) $attachmentOptions['post'], $attachmentOptions['name'], $attachmentOptions['file_hash'], $attachmentOptions['fileext'],
- (int) $attachmentOptions['size'], (empty($attachmentOptions['width']) ? 0 : (int) $attachmentOptions['width']), (empty($attachmentOptions['height']) ? '0' : (int) $attachmentOptions['height']),
- (!empty($attachmentOptions['mime_type']) ? $attachmentOptions['mime_type'] : ''), (int) $attachmentOptions['approved'],
- ),
- array('id_attach')
- );
- $attachmentOptions['id'] = $smcFunc['db_insert_id']('{db_prefix}attachments', 'id_attach');
- if (empty($attachmentOptions['id']))
- return false;
- // If it's not approved add to the approval queue.
- if (!$attachmentOptions['approved'])
- $smcFunc['db_insert']('',
- '{db_prefix}approval_queue',
- array(
- 'id_attach' => 'int', 'id_msg' => 'int',
- ),
- array(
- $attachmentOptions['id'], (int) $attachmentOptions['post'],
- ),
- array()
- );
- $attachmentOptions['destination'] = getAttachmentFilename(basename($attachmentOptions['name']), $attachmentOptions['id'], $id_folder, false, $attachmentOptions['file_hash']);
- if ($already_uploaded)
- rename($attachmentOptions['tmp_name'], $attachmentOptions['destination']);
- elseif (!move_uploaded_file($attachmentOptions['tmp_name'], $attachmentOptions['destination']))
- fatal_lang_error('attach_timeout', 'critical');
- // Attempt to chmod it.
- @chmod($attachmentOptions['destination'], 0644);
- $size = @getimagesize($attachmentOptions['destination']);
- list ($attachmentOptions['width'], $attachmentOptions['height']) = empty($size) ? array(null, null, null) : $size;
- // We couldn't access the file before...
- if ($file_restricted)
- {
- // Have a go at getting the right mime type.
- if (empty($attachmentOptions['mime_type']) && $attachmentOptions['width'])
- {
- if (!empty($size['mime']))
- $attachmentOptions['mime_type'] = $size['mime'];
- elseif (isset($validImageTypes[$size[2]]))
- $attachmentOptions['mime_type'] = 'image/' . $validImageTypes[$size[2]];
- }
- if (!empty($attachmentOptions['width']) && !empty($attachmentOptions['height']))
- $smcFunc['db_query']('', '
- UPDATE {db_prefix}attachments
- SET
- width = {int:width},
- height = {int:height},
- mime_type = {string:mime_type}
- WHERE id_attach = {int:id_attach}',
- array(
- 'width' => (int) $attachmentOptions['width'],
- 'height' => (int) $attachmentOptions['height'],
- 'id_attach' => $attachmentOptions['id'],
- 'mime_type' => empty($attachmentOptions['mime_type']) ? '' : $attachmentOptions['mime_type'],
- )
- );
- }
- // Security checks for images
- // Do we have an image? If yes, we need to check it out!
- if (isset($validImageTypes[$size[2]]))
- {
- if (!checkImageContents($attachmentOptions['destination'], !empty($modSettings['attachment_image_paranoid'])))
- {
- // It's bad. Last chance, maybe we can re-encode it?
- if (empty($modSettings['attachment_image_reencode']) || (!reencodeImage($attachmentOptions['destination'], $size[2])))
- {
- // Nothing to do: not allowed or not successful re-encoding it.
- require_once($sourcedir . '/ManageAttachments.php');
- removeAttachments(array(
- 'id_attach' => $attachmentOptions['id']
- ));
- $attachmentOptions['id'] = null;
- $attachmentOptions['errors'][] = 'bad_attachment';
- return false;
- }
- // Success! However, successes usually come for a price:
- // we might get a new format for our image...
- $old_format = $size[2];
- $size = @getimagesize($attachmentOptions['destination']);
- if (!(empty($size)) && ($size[2] != $old_format))
- {
- // Let's update the image information
- // !!! This is becoming a mess: we keep coming back and update the database,
- // instead of getting it right the first time.
- if (isset($validImageTypes[$size[2]]))
- {
- $attachmentOptions['mime_type'] = 'image/' . $validImageTypes[$size[2]];
- $smcFunc['db_query']('', '
- UPDATE {db_prefix}attachments
- SET
- mime_type = {string:mime_type}
- WHERE id_attach = {int:id_attach}',
- array(
- 'id_attach' => $attachmentOptions['id'],
- 'mime_type' => $attachmentOptions['mime_type'],
- )
- );
- }
- }
- }
- }
- if (!empty($attachmentOptions['skip_thumbnail']) || (empty($attachmentOptions['width']) && empty($attachmentOptions['height'])))
- return true;
- // Like thumbnails, do we?
- if (!empty($modSettings['attachmentThumbnails']) && !empty($modSettings['attachmentThumbWidth']) && !empty($modSettings['attachmentThumbHeight']) && ($attachmentOptions['width'] > $modSettings['attachmentThumbWidth'] || $attachmentOptions['height'] > $modSettings['attachmentThumbHeight']))
- {
- if (createThumbnail($attachmentOptions['destination'], $modSettings['attachmentThumbWidth'], $modSettings['attachmentThumbHeight']))
- {
- // Figure out how big we actually made it.
- $size = @getimagesize($attachmentOptions['destination'] . '_thumb');
- list ($thumb_width, $thumb_height) = $size;
- if (!empty($size['mime']))
- $thumb_mime = $size['mime'];
- elseif (isset($validImageTypes[$size[2]]))
- $thumb_mime = 'image/' . $validImageTypes[$size[2]];
- // Lord only knows how this happened...
- else
- $thumb_mime = '';
- $thumb_filename = $attachmentOptions['name'] . '_thumb';
- $thumb_size = filesize($attachmentOptions['destination'] . '_thumb');
- $thumb_file_hash = getAttachmentFilename($thumb_filename, false, null, true);
- // To the database we go!
- $smcFunc['db_insert']('',
- '{db_prefix}attachments',
- array(
- 'id_folder' => 'int', 'id_msg' => 'int', 'attachment_type' => 'int', 'filename' => 'string-255', 'file_hash' => 'string-40', 'fileext' => 'string-8',
- 'size' => 'int', 'width' => 'int', 'height' => 'int', 'mime_type' => 'string-20', 'approved' => 'int',
- ),
- array(
- $id_folder, (int) $attachmentOptions['post'], 3, $thumb_filename, $thumb_file_hash, $attachmentOptions['fileext'],
- $thumb_size, $thumb_width, $thumb_height, $thumb_mime, (int) $attachmentOptions['approved'],
- ),
- array('id_attach')
- );
- $attachmentOptions['thumb'] = $smcFunc['db_insert_id']('{db_prefix}attachments', 'id_attach');
- if (!empty($attachmentOptions['thumb']))
- {
- $smcFunc['db_query']('', '
- UPDATE {db_prefix}attachments
- SET id_thumb = {int:id_thumb}
- WHERE id_attach = {int:id_attach}',
- array(
- 'id_thumb' => $attachmentOptions['thumb'],
- 'id_attach' => $attachmentOptions['id'],
- )
- );
- rename($attachmentOptions['destination'] . '_thumb', getAttachmentFilename($thumb_filename, $attachmentOptions['thumb'], $id_folder, false, $thumb_file_hash));
- }
- }
- }
- return true;
- }
- // !!!
- function modifyPost(&$msgOptions, &$topicOptions, &$posterOptions)
- {
- global $user_info, $modSettings, $smcFunc, $context;
- $topicOptions['poll'] = isset($topicOptions['poll']) ? (int) $topicOptions['poll'] : null;
- $topicOptions['lock_mode'] = isset($topicOptions['lock_mode']) ? $topicOptions['lock_mode'] : null;
- $topicOptions['sticky_mode'] = isset($topicOptions['sticky_mode']) ? $topicOptions['sticky_mode'] : null;
- // This is longer than it has to be, but makes it so we only set/change what we have to.
- $messages_columns = array();
- if (isset($posterOptions['name']))
- $messages_columns['poster_name'] = $posterOptions['name'];
- if (isset($posterOptions['email']))
- $messages_columns['poster_email'] = $posterOptions['email'];
- if (isset($msgOptions['icon']))
- $messages_columns['icon'] = $msgOptions['icon'];
- if (isset($msgOptions['subject']))
- $messages_columns['subject'] = $msgOptions['subject'];
- if (isset($msgOptions['body']))
- {
- $messages_columns['body'] = $msgOptions['body'];
- if (!empty($modSettings['search_custom_index_config']))
- {
- $request = $smcFunc['db_query']('', '
- SELECT body
- FROM {db_prefix}messages
- WHERE id_msg = {int:id_msg}',
- array(
- 'id_msg' => $msgOptions['id'],
- )
- );
- list ($old_body) = $smcFunc['db_fetch_row']($request);
- $smcFunc['db_free_result']($request);
- }
- }
- if (!empty($msgOptions['modify_time']))
- {
- $messages_columns['modified_time'] = $msgOptions['modify_time'];
- $messages_columns['modified_name'] = $msgOptions['modify_name'];
- $messages_columns['id_msg_modified'] = $modSettings['maxMsgID'];
- }
- if (isset($msgOptions['smileys_enabled']))
- $messages_columns['smileys_enabled'] = empty($msgOptions['smileys_enabled']) ? 0 : 1;
- // Which columns need to be ints?
- $messageInts = array('modified_time', 'id_msg_modified', 'smileys_enabled');
- $update_parameters = array(
- 'id_msg' => $msgOptions['id'],
- );
- foreach ($messages_columns as $var => $val)
- {
- $messages_columns[$var] = $var . ' = {' . (in_array($var, $messageInts) ? 'int' : 'string') . ':var_' . $var . '}';
- $update_parameters['var_' . $var] = $val;
- }
- // Nothing to do?
- if (empty($messages_columns))
- return true;
- // Change the post.
- $smcFunc['db_query']('', '
- UPDATE {db_prefix}messages
- SET ' . implode(', ', $messages_columns) . '
- WHERE id_msg = {int:id_msg}',
- $update_parameters
- );
- // Lock and or sticky the post.
- if ($topicOptions['sticky_mode'] !== null || $topicOptions['lock_mode'] !== null || $topicOptions['poll'] !== null)
- {
- $smcFunc['db_query']('', '
- UPDATE {db_prefix}topics
- SET
- is_sticky = {raw:is_sticky},
- locked = {raw:locked},
- id_poll = {raw:id_poll}
- WHERE id_topic = {int:id_topic}',
- array(
- 'is_sticky' => $topicOptions['sticky_mode'] === null ? 'is_sticky' : (int) $topicOptions['sticky_mode'],
- 'locked' => $topicOptions['lock_mode'] === null ? 'locked' : (int) $topicOptions['lock_mode'],
- 'id_poll' => $topicOptions['poll'] === null ? 'id_poll' : (int) $topicOptions['poll'],
- 'id_topic' => $topicOptions['id'],
- )
- );
- }
- // Mark the edited post as read.
- if (!empty($topicOptions['mark_as_read']) && !$user_info['is_guest'])
- {
- // Since it's likely they *read* it before editing, let's try an UPDATE first.
- $smcFunc['db_query']('', '
- UPDATE {db_prefix}log_topics
- SET id_msg = {int:id_msg}
- WHERE id_member = {int:current_member}
- AND id_topic = {int:id_topic}',
- array(
- 'current_member' => $user_info['id'],
- 'id_msg' => $modSettings['maxMsgID'],
- 'id_topic' => $topicOptions['id'],
- )
- );
- $flag = $smcFunc['db_affected_rows']() != 0;
- if (empty($flag))
- {
- $smcFunc['db_insert']('ignore',
- '{db_prefix}log_topics',
- array('id_topic' => 'int', 'id_member' => 'int', 'id_msg' => 'int'),
- array($topicOptions['id'], $user_info['id'], $modSettings['maxMsgID']),
- array('id_topic', 'id_member')
- );
- }
- }
- // If there's a custom search index, it needs to be modified...
- if (isset($msgOptions['body']) && !empty($modSettings['search_custom_index_config']))
- {
- $customIndexSettings = unserialize($modSettings['search_custom_index_config']);
- $stopwords = empty($modSettings['search_stopwords']) ? array() : explode(',', $modSettings['search_stopwords']);
- $old_index = text2words($old_body, $customIndexSettings['bytes_per_word'], true);
- $new_index = text2words($msgOptions['body'], $customIndexSettings['bytes_per_word'], true);
- // Calculate the words to be added and removed from the index.
- $removed_words = array_diff(array_diff($old_index, $new_index), $stopwords);
- $inserted_words = array_diff(array_diff($new_index, $old_index), $stopwords);
- // Delete the removed words AND the added ones to avoid key constraints.
- if (!empty($removed_words))
- {
- $removed_words = array_merge($removed_words, $inserted_words);
- $smcFunc['db_query']('', '
- DELETE FROM {db_prefix}log_search_words
- WHERE id_msg = {int:id_msg}
- AND id_word IN ({array_int:removed_words})',
- array(
- 'removed_words' => $removed_words,
- 'id_msg' => $msgOptions['id'],
- )
- );
- }
- // Add the new words to be indexed.
- if (!empty($inserted_words))
- {
- $inserts = array();
- foreach ($inserted_words as $word)
- $inserts[] = array($word, $msgOptions['id']);
- $smcFunc['db_insert']('insert',
- '{db_prefix}log_search_words',
- array('id_word' => 'string', 'id_msg' => 'int'),
- $inserts,
- array('id_word', 'id_msg')
- );
- }
- }
- if (isset($msgOptions['subject']))
- {
- // Only update the subject if this was the first message in the topic.
- $request = $smcFunc['db_query']('', '
- SELECT id_topic
- FROM {db_prefix}topics
- WHERE id_first_msg = {int:id_first_msg}
- LIMIT 1',
- array(
- 'id_first_msg' => $msgOptions['id'],
- )
- );
- if ($smcFunc['db_num_rows']($request) == 1)
- updateStats('subject', $topicOptions['id'], $msgOptions['subject']);
- $smcFunc['db_free_result']($request);
- }
- // Finally, if we are setting the approved state we need to do much more work :(
- if ($modSettings['postmod_active'] && isset($msgOptions['approved']))
- approvePosts($msgOptions['id'], $msgOptions['approved']);
- return true;
- }
- // Approve (or not) some posts... without permission checks...
- function approvePosts($msgs, $approve = true)
- {
- global $sourcedir, $smcFunc;
- if (!is_array($msgs))
- $msgs = array($msgs);
- if (empty($msgs))
- return false;
- // May as well start at the beginning, working out *what* we need to change.
- $request = $smcFunc['db_query']('', '
- SELECT m.id_msg, m.approved, m.id_topic, m.id_board, t.id_first_msg, t.id_last_msg,
- m.body, m.subject, IFNULL(mem.real_name, m.poster_name) AS poster_name, m.id_member,
- t.approved AS topic_approved, b.count_posts
- FROM {db_prefix}messages AS m
- INNER JOIN {db_prefix}topics AS t ON (t.id_topic = m.id_topic)
- INNER JOIN {db_prefix}boards AS b ON (b.id_board = m.id_board)
- LEFT JOIN {db_prefix}members AS mem ON (mem.id_member = m.id_member)
- WHERE m.id_msg IN ({array_int:message_list})
- AND m.approved = {int:approved_state}',
- array(
- 'message_list' => $msgs,
- 'approved_state' => $approve ? 0 : 1,
- )
- );
- $msgs = array();
- $topics = array();
- $topic_changes = array();
- $board_changes = array();
- $notification_topics = array();
- $notification_posts = array();
- $member_post_changes = array();
- while ($row = $smcFunc['db_fetch_assoc']($request))
- {
- // Easy...
- $msgs[] = $row['id_msg'];
- $topics[] = $row['id_topic'];
- // Ensure our change array exists already.
- if (!isset($topic_changes[$row['id_topic']]))
- $topic_changes[$row['id_topic']] = array(
- 'id_last_msg' => $row['id_last_msg'],
- 'approved' => $row['topic_approved'],
- 'replies' => 0,
- 'unapproved_posts' => 0,
- );
- if (!isset($board_changes[$row['id_board']]))
- $board_changes[$row['id_board']] = array(
- 'posts' => 0,
- 'topics' => 0,
- 'unapproved_posts' => 0,
- 'unapproved_topics' => 0,
- );
- // If it's the first message then the topic state changes!
- if ($row['id_msg'] == $row['id_first_msg'])
- {
- $topic_changes[$row['id_topic']]['approved'] = $approve ? 1 : 0;
- $board_changes[$row['id_board']]['unapproved_topics'] += $approve ? -1 : 1;
- $board_changes[$row['id_board']]['topics'] += $approve ? 1 : -1;
- // Note we need to ensure we announce this topic!
- $notification_topics[] = array(
- 'body' => $row['body'],
- 'subject' => $row['subject'],
- 'name' => $row['poster_name'],
- 'board' => $row['id_board'],
- 'topic' => $row['id_topic'],
- 'msg' => $row['id_first_msg'],
- 'poster' => $row['id_member'],
- );
- }
- else
- {
- $topic_changes[$row['id_topic']]['replies'] += $approve ? 1 : -1;
- // This will be a post... but don't notify unless it's not followed by approved ones.
- if ($row['id_msg'] > $row['id_last_msg'])
- $notification_posts[$row['id_topic']][] = array(
- 'id' => $row['id_msg'],
- 'body' => $row['body'],
- 'subject' => $row['subject'],
- 'name' => $row['poster_name'],
- 'topic' => $row['id_topic'],
- );
- }
- // If this is being approved and id_msg is higher than the current id_last_msg then it changes.
- if ($approve && $row['id_msg'] > $topic_changes[$row['id_topic']]['id_last_msg'])
- $topic_changes[$row['id_topic']]['id_last_msg'] = $row['id_msg'];
- // If this is being unapproved, and it's equal to the id_last_msg we need to find a new one!
- elseif (!$approve)
- // Default to the first message and then we'll override in a bit ;)
- $topic_changes[$row['id_topic']]['id_last_msg'] = $row['id_first_msg'];
- $topic_changes[$row['id_topic']]['unapproved_posts'] += $approve ? -1 : 1;
- $board_changes[$row['id_board']]['unapproved_posts'] += $approve ? -1 : 1;
- $board_changes[$row['id_board']]['posts'] += $approve ? 1 : -1;
- // Post count for the user?
- if ($row['id_member'] && empty($row['count_posts']))
- $member_post_changes[$row['id_member']] = isset($member_post_changes[$row['id_member']]) ? $member_post_changes[$row['id_member']] + 1 : 1;
- }
- $smcFunc['db_free_result']($request);
- if (empty($msgs))
- return;
- // Now we have the differences make the changes, first the easy one.
- $smcFunc['db_query']('', '
- UPDATE {db_prefix}messages
- SET approved = {int:approved_state}
- WHERE id_msg IN ({array_int:message_list})',
- array(
- 'message_list' => $msgs,
- 'approved_state' => $approve ? 1 : 0,
- )
- );
- // If we were unapproving find the last msg in the topics...
- if (!$approve)
- {
- $request = $smcFunc['db_query']('', '
- SELECT id_topic, MAX(id_msg) AS id_last_msg
- FROM {db_prefix}messages
- WHERE id_topic IN ({array_int:topic_list})
- AND approved = {int:approved}
- GROUP BY id_topic',
- array(
- 'topic_list' => $topics,
- 'approved' => 1,
- )
- );
- while ($row = $smcFunc['db_fetch_assoc']($request))
- $topic_changes[$row['id_topic']]['id_last_msg'] = $row['id_last_msg'];
- $smcFunc['db_free_result']($request);
- }
- // ... next the topics...
- foreach ($topic_changes as $id => $changes)
- $smcFunc['db_query']('', '
- UPDATE {db_prefix}topics
- SET approved = {int:approved}, unapproved_posts = unapproved_posts + {int:unapproved_posts},
- num_replies = num_replies + {int:num_replies}, id_last_msg = {int:id_last_msg}
- WHERE id_topic = {int:id_topic}',
- array(
- 'approved' => $changes['approved'],
- 'unapproved_posts' => $changes['unapproved_posts'],
- 'num_replies' => $changes['replies'],
- 'id_last_msg' => $changes['id_last_msg'],
- 'id_topic' => $id,
- )
- );
- // ... finally the boards...
- foreach ($board_changes as $id => $changes)
- $smcFunc['db_query']('', '
- UPDATE {db_prefix}boards
- SET num_posts = num_posts + {int:num_posts}, unapproved_posts = unapproved_posts + {int:unapproved_posts},
- num_topics = num_topics + {int:num_topics}, unapproved_topics = unapproved_topics + {int:unapproved_topics}
- WHERE id_board = {int:id_board}',
- array(
- 'num_posts' => $changes['posts'],
- 'unapproved_posts' => $changes['unapproved_posts'],
- 'num_topics' => $changes['topics'],
- 'unapproved_topics' => $changes['unapproved_topics'],
- 'id_board' => $id,
- )
- );
- // Finally, least importantly, notifications!
- if ($approve)
- {
- if (!empty($notification_topics))
- {
- require_once($sourcedir . '/Post.php');
- notifyMembersBoard($notification_topics);
- }
- if (!empty($notification_posts))
- sendApprovalNotifications($notification_posts);
- $smcFunc['db_query']('', '
- DELETE FROM {db_prefix}approval_queue
- WHERE id_msg IN ({array_int:message_list})
- AND id_attach = {int:id_attach}',
- array(
- 'message_list' => $msgs,
- 'id_attach' => 0,
- )
- );
- }
- // If unapproving add to the approval queue!
- else
- {
- $msgInserts = array();
- foreach ($msgs as $msg)
- $msgInserts[] = array($msg);
- $smcFunc['db_insert']('ignore',
- '{db_prefix}approval_queue',
- array('id_msg' => 'int'),
- $msgInserts,
- array('id_msg')
- );
- }
- // Update the last messages on the boards...
- updateLastMessages(array_keys($board_changes));
- // Post count for the members?
- if (!empty($member_post_changes))
- foreach ($member_post_changes as $id_member => $count_change)
- updateMemberData($id_member, array('posts' => 'posts ' . ($approve ? '+' : '-') . ' ' . $count_change));
- return true;
- }
- // Approve topics?
- function approveTopics($topics, $approve = true)
- {
- global $smcFunc;
- if (!is_array($topics))
- $topics = array($topics);
- if (empty($topics))
- return false;
- $approve_type = $approve ? 0 : 1;
- // Just get the messages to be approved and pass through...
- $request = $smcFunc['db_query']('', '
- SELECT id_msg
- FROM {db_prefix}messages
- WHERE id_topic IN ({array_int:topic_list})
- AND approved = {int:approve_type}',
- array(
- 'topic_list' => $topics,
- 'approve_type' => $approve_type,
- )
- );
- $msgs = array();
- while ($row = $smcFunc['db_fetch_assoc']($request))
- $msgs[] = $row['id_msg'];
- $smcFunc['db_free_result']($request);
- return approvePosts($msgs, $approve);
- }
- // A special function for handling the hell which is sending approval notifications.
- function sendApprovalNotifications(&$topicData)
- {
- global $txt, $scripturl, $language, $user_info;
- global $modSettings, $sourcedir, $context, $smcFunc;
- // Clean up the data...
- if (!is_array($topicData) || empty($topicData))
- return;
- $topics = array();
- $digest_insert = array();
- foreach ($topicData as $topic => $msgs)
- foreach ($msgs as $msgKey => $msg)
- {
- censorText($topicData[$topic][$msgKey]['subject']);
- censorText($topicData[$topic][$msgKey]['body']);
- $topicData[$topic][$msgKey]['subject'] = un_htmlspecialchars($topicData[$topic][$msgKey]['subject']);
- $topicData[$topic][$msgKey]['body'] = trim(un_htmlspecialchars(strip_tags(strtr(parse_bbc($topicData[$topic][$msgKey]['body'], false), array('<br />' => "\n", '</div>' => "\n", '</li>' => "\n", '[' => '[', ']' => ']')))));
- $topics[] = $msg['id'];
- $digest_insert[] = array($msg['topic'], $msg['id'], 'reply', $user_info['id']);
- }
- // These need to go into the digest too...
- $smcFunc['db_insert']('',
- '{db_prefix}log_digest',
- array(
- 'id_topic' => 'int', 'id_msg' => 'int', 'note_type' => 'string', 'exclude' => 'int',
- ),
- $digest_insert,
- array()
- );
- // Find everyone who needs to know about this.
- $members = $smcFunc['db_query']('', '
- SELECT
- mem.id_member, mem.email_address, mem.notify_regularity, mem.notify_types, mem.notify_send_body, mem.lngfile,
- ln.sent, mem.id_group, mem.additional_groups, b.member_groups, mem.id_post_group, t.id_member_started,
- ln.id_topic
- FROM {db_prefix}log_notify AS ln
- INNER JOIN {db_prefix}members AS mem ON (mem.id_member = ln.id_member)
- INNER JOIN {db_prefix}topics AS t ON (t.id_topic = ln.id_topic)
- INNER JOIN {db_prefix}boards AS b ON (b.id_board = t.id_board)
- WHERE ln.id_topic IN ({array_int:topic_list})
- AND mem.is_activated = {int:is_activated}
- AND mem.notify_types < {int:notify_types}
- AND mem.notify_regularity < {int:notify_regularity}
- GROUP BY mem.id_member, ln.id_topic, mem.email_address, mem.notify_regularity, mem.notify_types, mem.notify_send_body, mem.lngfile, ln.sent, mem.id_group, mem.additional_groups, b.member_groups, mem.id_post_group, t.id_member_started
- ORDER BY mem.lngfile',
- array(
- 'topic_list' => $topics,
- 'is_activated' => 1,
- 'notify_types' => 4,
- 'notify_regularity' => 2,
- )
- );
- $sent = 0;
- while ($row = $smcFunc['db_fetch_assoc']($members))
- {
- if ($row['id_group'] != 1)
- {
- $allowed = explode(',', $row['member_groups']);
- $row['additional_groups'] = explode(',', $row['additional_groups']);
- $row['additional_groups'][] = $row['id_group'];
- $row['additional_groups'][] = $row['id_post_group'];
- if (count(array_intersect($allowed, $row['additional_groups'])) == 0)
- continue;
- }
- $needed_language = empty($row['lngfile']) || empty($modSettings['userLanguage']) ? $language : $row['lngfile'];
- if (empty($current_language) || $current_language != $needed_language)
- $current_language = loadLanguage('Post', $needed_language, false);
- $sent_this_time = false;
- // Now loop through all the messages to send.
- foreach ($topicData[$row['id_topic']] as $msg)
- {
- $replacements = array(
- 'TOPICSUBJECT' => $topicData[$row['id_topic']]['subject'],
- 'POSTERNAME' => un_htmlspecialchars($topicData[$row['id_topic']]['name']),
- 'TOPICLINK' => $scripturl . '?topic=' . $row['id_topic'] . '.new;topicseen#new',
- 'UNSUBSCRIBELINK' => $scripturl . '?action=notify;topic=' . $row['id_topic'] . '.0',
- );
- $message_type = 'notification_reply';
- // Do they want the body of the message sent too?
- if (!empty($row['notify_send_body']) && empty($modSettings['disallow_sendBody']))
- {
- $message_type .= '_body';
- $replacements['BODY'] = $topicData[$row['id_topic']]['body'];
- }
- if (!empty($row['notify_regularity']))
- $message_type .= '_once';
- // Send only if once is off or it's on and it hasn't been sent.
- if (empty($row['notify_regularity']) || (empty($row['sent']) && !$sent_this_time))
- {
- $emaildata = loadEmailTemplate($message_type, $replacements, $needed_language);
- sendmail($row['email_address'], $emaildata['subject'], $emaildata['body'], null, 'm' . $topicData[$row['id_topic']]['last_id']);
- $sent++;
- }
- $sent_this_time = true;
- }
- }
- $smcFunc['db_free_result']($members);
- if (isset($current_language) && $current_language != $user_info['language'])
- loadLanguage('Post');
- // Sent!
- if (!empty($sent))
- $smcFunc['db_query']('', '
- UPDATE {db_prefix}log_notify
- SET sent = {int:is_sent}
- WHERE id_topic IN ({array_int:topic_list})
- AND id_member != {int:current_member}',
- array(
- 'current_member' => $user_info['id'],
- 'topic_list' => $topics,
- 'is_sent' => 1,
- )
- );
- }
- // Update the last message in a board, and its parents.
- function updateLastMessages($setboards, $id_msg = 0)
- {
- global $board_info, $board, $modSettings, $smcFunc;
- // Please - let's be sane.
- if (empty($setboards))
- return false;
- if (!is_array($setboards))
- $setboards = array($setboards);
- // If we don't know the id_msg we need to find it.
- if (!$id_msg)
- {
- // Find the latest message on this board (highest id_msg.)
- $request = $smcFunc['db_query']('', '
- SELECT id_board, MAX(id_last_msg) AS id_msg
- FROM {db_prefix}topics
- WHERE id_board IN ({array_int:board_list})
- AND approved = {int:approved}
- GROUP BY id_board',
- array(
- 'board_list' => $setboards,
- 'approved' => 1,
- )
- );
- $lastMsg = array();
- while ($row = $smcFunc['db_fetch_assoc']($request))
- $lastMsg[$row['id_board']] = $row['id_msg'];
- $smcFunc['db_free_result']($request);
- }
- else
- {
- // Just to note - there should only be one board passed if we are doing this.
- foreach ($setboards as $id_board)
- $lastMsg[$id_board] = $id_msg;
- }
- $parent_boards = array();
- // Keep track of last modified dates.
- $lastModified = $lastMsg;
- // Get all the child boards for the parents, if they have some...
- foreach ($setboards as $id_board)
- {
- if (!isset($lastMsg[$id_board]))
- {
- $lastMsg[$id_board] = 0;
- $lastModified[$id_board] = 0;
- }
- if (!empty($board) && $id_board == $board)
- $parents = $board_info['parent_boards'];
- else
- $parents = getBoardParents($id_board);
- // Ignore any parents on the top child level.
- //!!! Why?
- foreach ($parents as $id => $parent)
- {
- if ($parent['level'] != 0)
- {
- // If we're already doing this one as a board, is this a higher last modified?
- if (isset($lastModified[$id]) && $lastModified[$id_board] > $lastModified[$id])
- $lastModified[$id] = $lastModified[$id_board];
- elseif (!isset($lastModified[$id]) && (!isset($parent_boards[$id]) || $parent_boards[$id] < $lastModified[$id_board]))
- $parent_boards[$id] = $lastModified[$id_board];
- }
- }
- }
- // Note to help understand what is happening here. For parents we update the timestamp of the last message for determining
- // whether there are child boards which have not been read. For the boards themselves we update both this and id_last_msg.
- $board_updates = array();
- $parent_updates = array();
- // Finally, to save on queries make the changes...
- foreach ($parent_boards as $id => $msg)
- {
- if (!isset($parent_updates[$msg]))
- $parent_updates[$msg] = array($id);
- else
- $parent_updates[$msg][] = $id;
- }
- foreach ($lastMsg as $id => $msg)
- {
- if (!isset($board_updates[$msg . '-' . $lastModified[$id]]))
- $board_updates[$msg . '-' . $lastModified[$id]] = array(
- 'id' => $msg,
- 'updated' => $lastModified[$id],
- 'boards' => array($id)
- );
- else
- $board_updates[$msg . '-' . $lastModified[$id]]['boards'][] = $id;
- }
- // Now commit the changes!
- foreach ($parent_updates as $id_msg => $boards)
- {
- $smcFunc['db_query']('', '
- UPDATE {db_prefix}boards
- SET id_msg_updated = {int:id_msg_updated}
- WHERE id_board IN ({array_int:board_list})
- AND id_msg_updated < {int:id_msg_updated}',
- array(
- 'board_list' => $boards,
- 'id_msg_updated' => $id_msg,
- )
- );
- }
- foreach ($board_updates as $board_data)
- {
- $smcFunc['db_query']('', '
- UPDATE {db_prefix}boards
- SET id_last_msg = {int:id_last_msg}, id_msg_updated = {int:id_msg_updated}
- WHERE id_board IN ({array_int:board_list})',
- array(
- 'board_list' => $board_data['boards'],
- 'id_last_msg' => $board_data['id'],
- 'id_msg_updated' => $board_data['updated'],
- )
- );
- }
- }
- // This simple function gets a list of all administrators and sends them an email to let them know a new member has joined.
- function adminNotify($type, $memberID, $member_name = null)
- {
- global $txt, $modSettings, $language, $scripturl, $user_info, $context, $smcFunc;
- // If the setting isn't enabled then just exit.
- if (empty($modSettings['notify_new_registration']))
- return;
- if ($member_name == null)
- {
- // Get the new user's name....
- $request = $smcFunc['db_query']('', '
- SELECT real_name
- FROM {db_prefix}members
- WHERE id_member = {int:id_member}
- LIMIT 1',
- array(
- 'id_member' => $memberID,
- )
- );
- list ($member_name) = $smcFunc['db_fetch_row']($request);
- $smcFunc['db_free_result']($request);
- }
- $toNotify = array();
- $groups = array();
- // All membergroups who can approve members.
- $request = $smcFunc['db_query']('', '
- SELECT id_group
- FROM {db_prefix}permissions
- WHERE permission = {string:moderate_forum}
- AND add_deny = {int:add_deny}
- AND id_group != {int:id_group}',
- array(
- 'add_deny' => 1,
- 'id_group' => 0,
- 'moderate_forum' => 'moderate_forum',
- )
- );
- while ($row = $smcFunc['db_fetch_assoc']($request))
- $groups[] = $row['id_group'];
- $smcFunc['db_free_result']($request);
- // Add administrators too...
- $groups[] = 1;
- $groups = array_unique($groups);
- // Get a list of all members who have ability to approve accounts - these are the people who we inform.
- $request = $smcFunc['db_query']('', '
- SELECT id_member, lngfile, email_address
- FROM {db_prefix}members
- WHERE (id_group IN ({array_int:group_list}) OR FIND_IN_SET({raw:group_array_implode}, additional_groups) != 0)
- AND notify_types != {int:notify_types}
- ORDER BY lngfile',
- array(
- 'group_list' => $groups,
- 'notify_types' => 4,
- 'group_array_implode' => implode(', additional_groups) != 0 OR FIND_IN_SET(', $groups),
- )
- );
- while ($row = $smcFunc['db_fetch_assoc']($request))
- {
- $replacements = array(
- 'USERNAME' => $member_name,
- 'PROFILELINK' => $scripturl . '?action=profile;u=' . $memberID
- );
- $emailtype = 'admin_notify';
- // If they need to be approved add more info...
- if ($type == 'approval')
- {
- $replacements['APPROVALLINK'] = $scripturl . '?action=admin;area=viewmembers;sa=browse;type=approve';
- $emailtype .= '_approval';
- }
- $emaildata = loadEmailTemplate($emailtype, $replacements, empty($row['lngfile']) || empty($modSettings['userLanguage']) ? $language : $row['lngfile']);
- // And do the actual sending...
- sendmail($row['email_address'], $emaildata['subject'], $emaildata['body'], null, null, false, 0);
- }
- $smcFunc['db_free_result']($request);
- if (isset($current_language) && $current_language != $user_info['language'])
- loadLanguage('Login');
- }
- function loadEmailTemplate($template, $replacements = array(), $lang = '', $loadLang = true)
- {
- global $txt, $mbname, $scripturl, $settings, $user_info;
- // First things first, load up the email templates language file, if we need to.
- if ($loadLang)
- loadLanguage('EmailTemplates', $lang);
- if (!isset($txt['emails'][$template]))
- fatal_lang_error('email_no_template', 'template', array($template));
- $ret = array(
- 'subject' => $txt['emails'][$template]['subject'],
- 'body' => $txt['emails'][$template]['body'],
- );
- // Add in the default replacements.
- $replacements += array(
- 'FORUMNAME' => $mbname,
- 'SCRIPTURL' => $scripturl,
- 'THEMEURL' => $settings['theme_url'],
- 'IMAGESURL' => $settings['images_url'],
- 'DEFAULT_THEMEURL' => $settings['default_theme_url'],
- 'REGARDS' => $txt['regards_team'],
- );
- // Split the replacements up into two arrays, for use with str_replace
- $find = array();
- $replace = array();
- foreach ($replacements as $f => $r)
- {
- $find[] = '{' . $f . '}';
- $replace[] = $r;
- }
- // Do the variable replacements.
- $ret['subject'] = str_replace($find, $replace, $ret['subject']);
- $ret['body'] = str_replace($find, $replace, $ret['body']);
- // Now deal with the {USER.variable} items.
- $ret['subject'] = preg_replace_callback('~{USER.([^}]+)}~', 'user_info_callback', $ret['subject']);
- $ret['body'] = preg_replace_callback('~{USER.([^}]+)}~', 'user_info_callback', $ret['body']);
- // Finally return the email to the caller so they can send it out.
- return $ret;
- }
- function user_info_callback($matches)
- {
- global $user_info;
- if (empty($matches[1]))
- return '';
- $use_ref = true;
- $ref = &$user_info;
- foreach (explode('.', $matches[1]) as $index)
- {
- if ($use_ref && isset($ref[$index]))
- $ref = &$ref[$index];
- else
- {
- $use_ref = false;
- break;
- }
- }
- return $use_ref ? $ref : $matches[0];
- }
- ?>
|