phpBB

<?php

/**

*

* @package phpBB3

* @version $Id$

* @copyright (c) 2005 phpBB Group

* @license http://opensource.org/licenses/gpl-license.php GNU Public License

*

*/

/**

* @ignore

*/

if (!defined('IN_PHPBB'))

{

	exit;

}

/**

* Fill smiley templates (or just the variables) with smilies, either in a window or inline

*/

function generate_smilies($mode, $forum_id)

{

	global $auth, $db, $user, $template;

	if ($mode == 'window')

	{

		if ($forum_id)

		{

			$sql = 'SELECT forum_style

				FROM ' . FORUMS_TABLE . "

				WHERE forum_id = $forum_id";

			$result = $db->sql_query_limit($sql, 1);

			$row = $db->sql_fetchrow($result);

			$db->sql_freeresult($result);

			$user->setup('posting', (int) $row['forum_style']);

		}

		else

		{

			$user->setup('posting');

		}

		page_header($user->lang['SMILIES']);

		$template->set_filenames(array(

			'body' => 'posting_smilies.html')

		);

	}

	$display_link = false;

	if ($mode == 'inline')

	{

		$sql = 'SELECT smiley_id

			FROM ' . SMILIES_TABLE . '

			WHERE display_on_posting = 0';

		$result = $db->sql_query_limit($sql, 1, 0, 3600);

		if ($row = $db->sql_fetchrow($result))

		{

			$display_link = true;

		}

		$db->sql_freeresult($result);

	}

	$last_url = '';

	$sql = 'SELECT *

		FROM ' . SMILIES_TABLE .

		(($mode == 'inline') ? ' WHERE display_on_posting = 1 ' : '') . '

		ORDER BY smiley_order';

	$result = $db->sql_query($sql, 3600);

	$smilies = array();

	while ($row = $db->sql_fetchrow($result))

	{

		if (empty($smilies[$row['smiley_url']]))

		{

			$smilies[$row['smiley_url']] = $row;

		}

	}

	$db->sql_freeresult($result);

	if (sizeof($smilies))

	{

		foreach ($smilies as $row)

		{

			$template->assign_block_vars('smiley', array(

				'SMILEY_CODE'	=> $row['code'],

				'A_SMILEY_CODE'	=> addslashes($row['code']),

				'SMILEY_IMG'	=> PHPBB_ROOT_PATH . phpbb::$config['smilies_path'] . '/' . $row['smiley_url'],

				'SMILEY_WIDTH'	=> $row['smiley_width'],

				'SMILEY_HEIGHT'	=> $row['smiley_height'],

				'SMILEY_DESC'	=> $row['emotion'])

			);

		}

	}

	if ($mode == 'inline' && $display_link)

	{

		$template->assign_vars(array(

			'S_SHOW_SMILEY_LINK' 	=> true,

			'U_MORE_SMILIES' 		=> append_sid('posting', 'mode=smilies&f=' . $forum_id))

		);

	}

	if ($mode == 'window')

	{

		page_footer();

	}

}

/**

* Update last post information

* Should be used instead of sync() if only the last post information are out of sync... faster

*

* @param	string	$type				Can be forum|topic

* @param	mixed	$ids				topic/forum ids

* @param	bool	$return_update_sql	true: SQL query shall be returned, false: execute SQL

*/

function update_post_information($type, $ids, $return_update_sql = false)

{

	global $db;

	if (empty($ids))

	{

		return;

	}

	if (!is_array($ids))

	{

		$ids = array($ids);

	}

	$update_sql = $empty_forums = $not_empty_forums = array();

	if ($type != 'topic')

	{

		$topic_join = ', ' . TOPICS_TABLE . ' t';

		$topic_condition = 'AND t.topic_id = p.topic_id AND t.topic_approved = 1';

	}

	else

	{

		$topic_join = '';

		$topic_condition = '';

	}

	if (sizeof($ids) == 1)

	{

		$sql = 'SELECT MAX(p.post_id) as last_post_id

			FROM ' . POSTS_TABLE . " p $topic_join

			WHERE " . $db->sql_in_set('p.' . $type . '_id', $ids) . "

				$topic_condition

				AND p.post_approved = 1";

	}

	else

	{

		$sql = 'SELECT p.' . $type . '_id, MAX(p.post_id) as last_post_id

			FROM ' . POSTS_TABLE . " p $topic_join

			WHERE " . $db->sql_in_set('p.' . $type . '_id', $ids) . "

				$topic_condition

				AND p.post_approved = 1

			GROUP BY p.{$type}_id";

	}

	$result = $db->sql_query($sql);

	$last_post_ids = array();

	while ($row = $db->sql_fetchrow($result))

	{

		if (sizeof($ids) == 1)

		{

			$row[$type . '_id'] = $ids[0];

		}

		if ($type == 'forum')

		{

			$not_empty_forums[] = $row['forum_id'];

			if (empty($row['last_post_id']))

			{

				$empty_forums[] = $row['forum_id'];

			}

		}

		$last_post_ids[] = $row['last_post_id'];

	}

	$db->sql_freeresult($result);

	if ($type == 'forum')

	{

		$empty_forums = array_merge($empty_forums, array_diff($ids, $not_empty_forums));

		foreach ($empty_forums as $void => $forum_id)

		{

			$update_sql[$forum_id][] = 'forum_last_post_id = 0';

			$update_sql[$forum_id][] = "forum_last_post_subject = ''";

			$update_sql[$forum_id][] = 'forum_last_post_time = 0';

			$update_sql[$forum_id][] = 'forum_last_poster_id = 0';

			$update_sql[$forum_id][] = "forum_last_poster_name = ''";

			$update_sql[$forum_id][] = "forum_last_poster_colour = ''";

		}

	}

	if (sizeof($last_post_ids))

	{

		$sql = 'SELECT p.' . $type . '_id, p.post_id, p.post_subject, p.post_time, p.poster_id, p.post_username, u.user_id, u.username, u.user_colour

			FROM ' . POSTS_TABLE . ' p, ' . USERS_TABLE . ' u

			WHERE p.poster_id = u.user_id

				AND ' . $db->sql_in_set('p.post_id', $last_post_ids);

		$result = $db->sql_query($sql);

		while ($row = $db->sql_fetchrow($result))

		{

			$update_sql[$row["{$type}_id"]][] = $type . '_last_post_id = ' . (int) $row['post_id'];

			$update_sql[$row["{$type}_id"]][] = "{$type}_last_post_subject = '" . $db->sql_escape($row['post_subject']) . "'";

			$update_sql[$row["{$type}_id"]][] = $type . '_last_post_time = ' . (int) $row['post_time'];

			$update_sql[$row["{$type}_id"]][] = $type . '_last_poster_id = ' . (int) $row['poster_id'];

			$update_sql[$row["{$type}_id"]][] = "{$type}_last_poster_colour = '" . $db->sql_escape($row['user_colour']) . "'";

			$update_sql[$row["{$type}_id"]][] = "{$type}_last_poster_name = '" . (($row['poster_id'] == ANONYMOUS) ? $db->sql_escape($row['post_username']) : $db->sql_escape($row['username'])) . "'";

		}

		$db->sql_freeresult($result);

	}

	unset($empty_forums, $ids, $last_post_ids);

	if ($return_update_sql || !sizeof($update_sql))

	{

		return $update_sql;

	}

	$table = ($type == 'forum') ? FORUMS_TABLE : TOPICS_TABLE;

	foreach ($update_sql as $update_id => $update_sql_ary)

	{

		$sql = "UPDATE $table

			SET " . implode(', ', $update_sql_ary) . "

			WHERE {$type}_id = $update_id";

		$db->sql_query($sql);

	}

	return;

}

/**

* Generate Topic Icons for display

*/

function posting_gen_topic_icons($mode, $icon_id)

{

	global $template;

	// Grab icons

	$icons = phpbb_cache::obtain_icons();

	if (!$icon_id)

	{

		$template->assign_var('S_NO_ICON_CHECKED', ' checked="checked"');

	}

	if (sizeof($icons))

	{

		foreach ($icons as $id => $data)

		{

			if ($data['display'])

			{

				$template->assign_block_vars('topic_icon', array(

					'ICON_ID'		=> $id,

					'ICON_IMG'		=> PHPBB_ROOT_PATH . phpbb::$config['icons_path'] . '/' . $data['img'],

					'ICON_WIDTH'	=> $data['width'],

					'ICON_HEIGHT'	=> $data['height'],

					'S_CHECKED'			=> ($id == $icon_id) ? true : false,

					'S_ICON_CHECKED'	=> ($id == $icon_id) ? ' checked="checked"' : '')

				);

			}

		}

		return true;

	}

	return false;

}

/**

* Build topic types able to be selected

*/

function posting_gen_topic_types($forum_id, $cur_topic_type = POST_NORMAL)

{

	global $auth, $user, $template, $topic_type;

	$toggle = false;

	$topic_types = array(

		'sticky'	=> array('const' => POST_STICKY, 'lang' => 'POST_STICKY'),

		'announce'	=> array('const' => POST_ANNOUNCE, 'lang' => 'POST_ANNOUNCEMENT'),

		'global'	=> array('const' => POST_GLOBAL, 'lang' => 'POST_GLOBAL')

	);

	$topic_type_array = array();

	foreach ($topic_types as $auth_key => $topic_value)

	{

		// We do not have a special post global announcement permission

		$auth_key = ($auth_key == 'global') ? 'announce' : $auth_key;

		if ($auth->acl_get('f_' . $auth_key, $forum_id))

		{

			$toggle = true;

			$topic_type_array[] = array(

				'VALUE'			=> $topic_value['const'],

				'S_CHECKED'		=> ($cur_topic_type == $topic_value['const'] || ($forum_id == 0 && $topic_value['const'] == POST_GLOBAL)) ? ' checked="checked"' : '',

				'L_TOPIC_TYPE'	=> $user->lang[$topic_value['lang']]

			);

		}

	}

	if ($toggle)

	{

		$topic_type_array = array_merge(array(0 => array(

			'VALUE'			=> POST_NORMAL,

			'S_CHECKED'		=> ($topic_type == POST_NORMAL) ? ' checked="checked"' : '',

			'L_TOPIC_TYPE'	=> $user->lang['POST_NORMAL'])),

			$topic_type_array

		);

		foreach ($topic_type_array as $array)

		{

			$template->assign_block_vars('topic_type', $array);

		}

		$template->assign_vars(array(

			'S_TOPIC_TYPE_STICKY'	=> ($auth->acl_get('f_sticky', $forum_id)),

			'S_TOPIC_TYPE_ANNOUNCE'	=> ($auth->acl_get('f_announce', $forum_id)))

		);

	}

	return $toggle;

}

//

// Attachment related functions

//

/**

* Upload Attachment - filedata is generated here

* Uses upload class

*/

function upload_attachment($form_name, $forum_id, $local = false, $local_storage = '', $is_message = false, $local_filedata = false)

{

	global $auth, $user, $db;

	$filedata = array(

		'error'	=> array()

	);

	include_once(PHPBB_ROOT_PATH . 'includes/functions_upload.' . PHP_EXT);

	$upload = new fileupload();

	if (phpbb::$config['check_attachment_content'])

	{

		$upload->set_disallowed_content(explode('|', phpbb::$config['mime_triggers']));

	}

	if (!$local)

	{

		$filedata['post_attach'] = ($upload->is_valid($form_name)) ? true : false;

	}

	else

	{

		$filedata['post_attach'] = true;

	}

	if (!$filedata['post_attach'])

	{

		$filedata['error'][] = $user->lang['NO_UPLOAD_FORM_FOUND'];

		return $filedata;

	}

	$extensions = ($is_message) ? phpbb_cache::obtain_extensions_pm() : phpbb_cache::obtain_extensions_forum($forum_id);

	$upload->set_allowed_extensions(array_keys($extensions['_allowed_']));

	$file = ($local) ? $upload->local_upload($local_storage, $local_filedata) : $upload->form_upload($form_name);

	if ($file->init_error)

	{

		$filedata['post_attach'] = false;

		return $filedata;

	}

	$cat_id = (isset($extensions[$file->get('extension')]['display_cat'])) ? $extensions[$file->get('extension')]['display_cat'] : ATTACHMENT_CATEGORY_NONE;

	// Make sure the image category only holds valid images...

	if ($cat_id == ATTACHMENT_CATEGORY_IMAGE && !$file->is_image())

	{

		$file->remove();

		// If this error occurs a user tried to exploit an IE Bug by renaming extensions

		// Since the image category is displaying content inline we need to catch this.

		trigger_error($user->lang['ATTACHED_IMAGE_NOT_IMAGE']);

	}

	// Do we have to create a thumbnail?

	$filedata['thumbnail'] = ($cat_id == ATTACHMENT_CATEGORY_IMAGE && phpbb::$config['img_create_thumbnail']) ? 1 : 0;

	// Check Image Size, if it is an image

	if (!$auth->acl_get('a_') && !$auth->acl_get('m_', $forum_id) && $cat_id == ATTACHMENT_CATEGORY_IMAGE)

	{

		$file->upload->set_allowed_dimensions(0, 0, phpbb::$config['img_max_width'], phpbb::$config['img_max_height']);

	}

	// Admins and mods are allowed to exceed the allowed filesize

	if (!$auth->acl_get('a_') && !$auth->acl_get('m_', $forum_id))

	{

		if (!empty($extensions[$file->get('extension')]['max_filesize']))

		{

			$allowed_filesize = $extensions[$file->get('extension')]['max_filesize'];

		}

		else

		{

			$allowed_filesize = ($is_message) ? phpbb::$config['max_filesize_pm'] : phpbb::$config['max_filesize'];

		}

		$file->upload->set_max_filesize($allowed_filesize);

	}

	$file->clean_filename('unique', $user->data['user_id'] . '_');

	// Are we uploading an image *and* this image being within the image category? Only then perform additional image checks.

	$no_image = ($cat_id == ATTACHMENT_CATEGORY_IMAGE) ? false : true;

	$file->move_file(phpbb::$config['upload_path'], false, $no_image);

	if (sizeof($file->error))

	{

		$file->remove();

		$filedata['error'] = array_merge($filedata['error'], $file->error);

		$filedata['post_attach'] = false;

		return $filedata;

	}

	$filedata[