wpvb.lib.php | searchcode

/wpvb.lib.php

https://github.com/ambikuk/wordpress-vbulletin
PHP | 536 lines | 274 code | 56 blank | 206 comment | 45 complexity | 85ce31c271e4c7f2b4b12999b4baa59b MD5 | raw file

<?php
// $Id: wpvb.inc.php,v 1.34 2009/03/09 04:46:21 sun Exp $

/**
 * @file
 * Drupal vB CRUD functions.
 */

/**
 * Set the necessary cookies for the user to be logged into the forum.
 *
 * Frontend cookie names:
 * - lastvisit, lastactivity, sessionhash
 * Backend cookie names:
 * - cpsession, userid, password
 *
 * However, in all cases the cookiedomain is NOT prefixed with a dot unless
 * cookie domain has not been manually altered to either a suggested value or
 * custom value in vB's settings.
 */
function wpvb_set_login_cookies($userid) {
  // Load required vB user data.
	global $wpdb;
	$vbdb = wpvb_db();
  $vbuser = $vbdb->get_row($vbdb->prepare("SELECT userid, password, salt FROM user WHERE userid = %d", $userid));
  if (!$vbuser) {
    return FALSE;
  }
	
//	var_dump($vbuser);exit;
  
  $vb_config = wpvb_get('config');
  $vb_options = wpvb_get('options');

  $cookie_prefix = (isset($vb_config['Misc']['cookieprefix']) ? $vb_config['Misc']['cookieprefix'] : 'bb');
  $cookie_path = $vb_options['cookiepath'];
  $now = time();
  $expire = $now + (@ini_get('session.cookie_lifetime') ? ini_get('session.cookie_lifetime') : 60 * 60 * 24 * 365);

  $vb_cookie_domain = (!empty($vb_options['cookiedomain']) ? $vb_options['cookiedomain'] : $GLOBALS['cookie_domain']);
  // Per RFC 2109, cookie domains must contain at least one dot other than the
  // first. For hosts such as 'localhost' or IP Addresses we don't set a cookie domain.
  // @see conf_init()
  if (!(count(explode('.', $vb_cookie_domain)) > 2 && !is_numeric(str_replace('.', '', $vb_cookie_domain)))) {
    $vb_cookie_domain = '';
  }

  // Clear out old session (if available).
  if (!empty($_COOKIE[$cookie_prefix .'sessionhash'])) {
   $vpdb->query($vpdb->prepare("DELETE FROM session WHERE sessionhash = '%s'", $_COOKIE[$cookie_prefix .'sessionhash']));
  }

  // Setup user session.
  $ip = implode('.', array_slice(explode('.', wpvb_get_ip()), 0, 4 - $vb_options['ipcheck']));
  $idhash = md5($_SERVER['HTTP_USER_AGENT'] . $ip);
  $sessionhash = md5($now . request_uri() . $idhash . $_SERVER['REMOTE_ADDR'] . user_password(6));
//	var_dump($now);exit;
//  $vpdb->query($vpdb->prepare("REPLACE INTO session (sessionhash, userid, host, idhash, lastactivity, location, useragent, loggedin) VALUES ('%s', %d, '%s', '%s', %d, '%s', '%s', %d)", $sessionhash, $vbuser->userid, substr($_SERVER['REMOTE_ADDR'], 0, 15), $idhash, $now, '/forum/', $_SERVER['HTTP_USER_AGENT'], 2));
	$wpdb->insert( 
		'session', 
		array( 
			'sessionhash'=>$sessionhash,
			'userid'=>$vbuser->userid,
			'host'=>substr($_SERVER['REMOTE_ADDR'], 0, 15),
			'idhash'=>$idhash,
			'lastactivity'=>$now,
			'location'=>'/forum/',
			'useragent'=> $_SERVER['HTTP_USER_AGENT'],
			'loggedin'=>2
		), 
		array( 
			'%s', '%d', '%s', '%s', '%d', '%s', '%s', '%d'
		) 
	);
  // Setup cookies.
  setcookie($cookie_prefix .'_sessionhash', $sessionhash, $expire, $cookie_path, $vb_cookie_domain);
  setcookie($cookie_prefix .'_lastvisit', $now, $expire, $cookie_path, $vb_cookie_domain);
  setcookie($cookie_prefix .'_lastactivity', $now, $expire, $cookie_path, $vb_cookie_domain);
  setcookie($cookie_prefix .'_userid', $vbuser->userid, $expire, $cookie_path, $vb_cookie_domain);
  setcookie($cookie_prefix .'_password', md5($vbuser->password . get_option('wpvb_license', '')), $expire, $cookie_path, $vb_cookie_domain);
  return TRUE;
}

/**
 * Clear all vB cookies for the current user.
 *
 * @see wpvb_logout(), wpvb_user_logout()
 */
function wpvb_clear_cookies($userid = NULL) {
	$wpdb = wpvb_db();
  $vb_config = wpvb_get('config');
  $vb_options = wpvb_get('options');

  $cookie_prefix = (isset($vb_config['Misc']['cookieprefix']) ? $vb_config['Misc']['cookieprefix'] : 'bb');
  $cookie_path = $vb_options['cookiepath'];
  $expire = time() - 86400;

  $vb_cookie_domain = (!empty($vb_options['cookiedomain']) ? $vb_options['cookiedomain'] : $GLOBALS['cookie_domain']);
  // Per RFC 2109, cookie domains must contain at least one dot other than the
  // first. For hosts such as 'localhost' or IP Addresses we don't set a cookie domain.
  // @see conf_init()
  if (!(count(explode('.', $vb_cookie_domain)) > 2 && !is_numeric(str_replace('.', '', $vb_cookie_domain)))) {
    $vb_cookie_domain = '';
  }

  if (!empty($userid)) {
    $wpdb->query("DELETE FROM session WHERE userid = %d", $userid);
    $wpdb->query("UPDATE user SET lastvisit = %d WHERE userid = %d", time(), $userid);
  }
//	var_dump($expire);
//	var_dump($cookie_path);
//	var_dump($vb_cookie_domain);
//	var_dump($cookie_prefix);exit;
  setcookie($cookie_prefix .'_sessionhash', '', $expire, $cookie_path, $vb_cookie_domain);
  setcookie($cookie_prefix .'_lastvisit', '', $expire, $cookie_path, $vb_cookie_domain);
  setcookie($cookie_prefix .'_lastactivity', '', $expire, $cookie_path, $vb_cookie_domain);
  setcookie($cookie_prefix .'_userid', '', $expire, $cookie_path, $vb_cookie_domain);
  setcookie($cookie_prefix .'_password', '', $expire, $cookie_path, $vb_cookie_domain);
}

/**
 * Determines the IP address of current user.
 */
function wpvb_get_ip() {
  $ip = $_SERVER['REMOTE_ADDR'];

  if (isset($_SERVER['HTTP_CLIENT_IP'])) {
    $ip = $_SERVER['HTTP_CLIENT_IP'];
  }
  else if (isset($_SERVER['HTTP_X_FORWARDED_FOR']) && preg_match_all('#\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}#s', $_SERVER['HTTP_X_FORWARDED_FOR'], $matches)) {
    // Make sure we don't pick up an internal IP defined by RFC1918.
    foreach ($matches[0] as $match) {
      if (!preg_match("#^(10|172\.16|192\.168)\.#", $match)) {
        $ip = $match;
        break;
      }
    }
  }
  else if (isset($_SERVER['HTTP_FROM'])) {
    $ip = $_SERVER['HTTP_FROM'];
  }
  return $ip;
}

/**
 * Create a user in vBulletin.
 *
 * @param object $account
 *   A Drupal user account.
 * @param array $edit
 *   Form values provided by hook_user().
 */
//function wpvb_create_user($account, $edit) {
//	$wpdb = wpvb_db();
//  // Ensure we are not duplicating a user.
//  if ($wpdb->query($wpdb->prepare("SELECT COUNT(ID) FROM $wpdb->users WHERE LOWER(username) = LOWER('%s')", wpvb_htmlspecialchars($edit['username']))) > 0) {
//    return FALSE;
//  }
//
//  $salt = '';
//  for ($i = 0; $i < 3; $i++) {
//    $salt .= chr(rand(32, 126));
//  }
//  // Note: Password is already hashed during user export.
//  if (isset($edit['md5pass'])) {
//    $passhash = md5($edit['md5pass'] . $salt);
//  }
//  else {
//    $passhash = md5(md5($edit['pass']) . $salt);
//  }
//
////  $passdate = date('Y-m-d', $account->created);
////  $joindate = $account->created;
//  $passdate = date('Y-m-d', time());
//  $joindate = $account->time();
//
//  // Attempt to grab the user title from the database.
////  $result = $wpdb->query("SELECT title FROM usertitle WHERE minposts = 0");
////  if ($resarray = db_fetch_array($result)) {
////    $usertitle = $resarray['title'];
////  }
////  else {
////    $usertitle = 'Junior Member';
////  }
//
//  // Divide timezone by 3600, since vBulletin stores hours.
//  $timezone = get_option('timezone_string', 0);
//  $timezone = ($timezone != 0 ? $timezone / 3600 : 0);
//
//  // Default new user options: I got these by setting up a new user how I
//  // wanted and looking in the database to see what options were set for him.
////  $options = get_option('wpvb_default_options', '3415');
//	$options = '3415';
//
//  // Default usergroup id.
////  $usergroupid = get_option('wpvb_default_usergroup', '2');
//	$usergroupid = '2';
//  // Set up the insertion query.
//	
//	$result = $wpdb->insert('user', array(
//		'username' => htmlspecialchars($edit['name']),
//		'usergroupid' => $usergroupid, 
//		'password' => $passhash, 
//		'passworddate' => $passdate, 
//		'usertitle' => $usertitle, 
//		'email' => $edit['mail'], 
//		'salt' => $salt, 
//		'languageid' => wpvb_get('languageid'), 
//		'timezoneoffset' =>  $timezone,  
//		'joindate' => $joindate, 
//		'lastvisit' => time(), 
//		'lastactivity' => time(), 
//		'options' => $options
//	), array(
//		'%s', '%s', '%s', '%s', '%s', '%s', '%s', '1', '%d', '%s', '0', '%s', '%s', '%s', '%s'
//	));
//
//  $userid = $wpdb->insert_id;
//
//  $wpdb->query("INSERT INTO userfield (userid) VALUES (%d)", $userid);
//  $wpdb->query("INSERT INTO usertextfield (userid) VALUES (%d)", $userid);
//
//  // Insert new user into mapping table.
//  wpvb_set_mapping($account->uid, $userid);
//
//  // Return userid of newly created account.
//  return $userid;
//}
function wpvb_create_user($edit) {
	$wpdb = wpvb_db();
  // Ensure we are not duplicating a user.
  if ($wpdb->query($wpdb->prepare("SELECT COUNT(ID) FROM $wpdb->users WHERE LOWER(username) = LOWER('%s')", wpvb_htmlspecialchars($edit['username']))) > 0) {

    return FALSE;
  }

  $salt = '';
  for ($i = 0; $i < 3; $i++) {
    $salt .= chr(rand(32, 126));
  }
  // Note: Password is already hashed during user export.
//  if (isset($edit['pass1'])) {
//    $passhash = md5($edit['pass1'] . $salt);
//  }
//  else {
//    $passhash = md5(md5($edit['pass1']) . $salt);
//  }

//  $passdate = date('Y-m-d', $account->created);
//  $joindate = $account->created;
  $passdate = date('Y-m-d', time());
  $joindate = date('Y-m-d', time());

  // Attempt to grab the user title from the database.
//  $result = $wpdb->query("SELECT title FROM usertitle WHERE minposts = 0");
//  if ($resarray = db_fetch_array($result)) {
//    $usertitle = $resarray['title'];
//  }
//  else {
//    $usertitle = 'Junior Member';
//  }

  // Divide timezone by 3600, since vBulletin stores hours.
  $timezone = get_option('timezone_string', 0);
  $timezone = ($timezone != 0 ? $timezone / 3600 : 0);

  // Default new user options: I got these by setting up a new user how I
  // wanted and looking in the database to see what options were set for him.
//  $options = get_option('wpvb_default_options', '3415');
	$options = '3415';

  // Default usergroup id.
//  $usergroupid = get_option('wpvb_default_usergroup', '2');
	$usergroupid = '2';
  // Set up the insertion query.
	
//	wpvb_get('languageid'); 
	$langId = 0;
	
	$result = $wpdb->insert('user', array(
		'userid' => $edit[0],
		'username' => htmlspecialchars($edit['user_login']),
		'usergroupid' => $usergroupid, 
		'password' => $passhash, 
		'passworddate' => $passdate, 
		'usertitle' => $usertitle, 
		'email' => $edit['email'], 
		'salt' => $salt, 
		'languageid' => $langId, 
		'timezoneoffset' =>  $timezone,  
		'joindate' => $joindate, 
		'lastvisit' => time(), 
		'lastactivity' => time(), 
		'options' => $options,
		'usertitle' => $edit['role']
	), array(
		'%d','%s', '%s', '%s', '%s', '%s', '%s', '%s', '1', '%d', '%s', '0', '%s', '%s', '%s', '%s'
	));

//  $userid = $wpdb->insert_id;
//
//  $wpdb->query("INSERT INTO userfield (userid) VALUES (%d)", $userid);
//  $wpdb->query("INSERT INTO usertextfield (userid) VALUES (%d)", $userid);

  // Insert new user into mapping table.
//  wpvb_set_mapping($account->uid, $userid);

  // Return userid of newly created account.
  return true;
}

/**
 * Update a user in vBulletin.
 */
function wpvb_update_user($account, $edit) {
	$wpdb = wpvb_db();
  $fields = $values = array();

  foreach ($edit as $field => $value) {
    if (empty($value)) {
      continue;
    }
    switch ($field) {
      case 'name':
        $fields[] = "username = '%s'";
        $values[] = wpvb_htmlspecialchars($value);
        break;

      case 'pass':
        $fields[] = "password = '%s'";
        // Note: Password is already hashed during user export.
        if (isset($edit['md5pass'])) {
          $values[] = md5($edit['md5pass'] . $edit['salt']);
        }
        else {
          $values[] = md5(md5($value) . $edit['salt']);
        }
        $fields[] = "salt = '%s'";
        $values[] = $edit['salt'];
        $fields[] = "passworddate = '%s'";
        $values[] = date('Y-m-d', time());
        break;

      case 'mail':
        $fields[] = "email = '%s'";
        $values[] = $value;
        break;

      case 'language':
        $fields[] = "languageid = %d";
        $values[] = wpvb_get('languageid', $value);
        break;
    }
  }
  $fields[] = 'lastactivity = %d';
  $values[] = time();

  // Use previous case insensitive username to update conflicting names.
  $values[] = wpvb_htmlspecialchars($account->name);
  $wpdb->query("UPDATE user SET ". implode(', ', $fields) ." WHERE LOWER(username) = LOWER('%s')", $values);

  // Ensure this user exists in the mapping table.
  // When integrating an existing installation, the mapping may not yet exist.
	$user = $wpdb->get_row("SELECT userid FROM user WHERE username = '%s'", wpvb_htmlspecialchars($account->name));
  wpvb_set_mapping($account->uid, $user->userid);
}

/**
 * Ensure that a mapping between two existing user accounts exists.
 *
 * @param $uid
 *   A Drupal user id.
 * @param $userid
 *   A vBulletin user id.
 */
function wpvb_set_mapping($uid, $userid) {
	$wpdb = wpvb_db();
  $wpdb->query("INSERT IGNORE INTO wpvb_users (uid, userid) VALUES (%d, %d)", $uid, $userid);
}

/**
 * Export all drupal users to vBulletin.
 */
function wpvb_export_drupal_users() {
	$wpdb = wpvb_db();
  module_load_include('inc', 'wpvb');

  $result = db_query("SELECT * FROM users ORDER BY uid");
  while ($user = db_fetch_object($result)) {
    if ($user->uid == 0) {
      continue;
    }
    // Let create/update functions know that passwords are hashed already.
    $user->md5pass = $user->pass;
    if (!wpvb_create_user($user, (array)$user)) {
      // Username already exists, update email and password only.
      // Case insensitive username is required to detect collisions.
      $vbuser = db_fetch_array($wpdb->query("SELECT salt FROM user WHERE LOWER(username) = LOWER('%s')", wpvb_htmlspecialchars($user->name)));
      wpvb_update_user($user, array_merge((array)$user, $vbuser));
    }
  }
}

/**
 * Get vBulletin configuration options.
 */
function wpvb_get_options() {
	$wpdb = wpvb_db();
  static $options = array();

  if (empty($options)) {
    $result = $wpdb->get_results("SELECT varname, value FROM setting");
    foreach ($result as $var) {
      $options[$var->varname] = $var->value;
    }
  }
//	var_dump($options);exit;
  return $options;
}

/**
 * Get vBulletin configuration.
 */
function wpvb_get_config() {
  static $config = array();

  // @todo Find & include vB's config automatically?
  // $files = file_scan_directory('.', '^config.php$', $nomask = array('.', '..', 'CVS', '.svn'));
  $config_file = ABSPATH .'forum/includes/config.php';
  if (empty($config) && file_exists($config_file)) {
    require_once $config_file;
  }
//	var_dump($config);exit;
  return $config;
	
}

/**
 * Get vB user roles.
 */
function wpvb_get_roles() {
	$wpdb = wpvb_db();
  $result = $wpdb->query("SELECT usergroupid, title FROM usergroup");

  $roles = array();
  while ($data = db_fetch_object($result)) {
    $roles[$data->usergroupid] = $data->title;
  }
  if (!$roles) {
    $roles[] = t('No user roles could be found.');
  }
  return $roles;
}

/**
 * Get vB language id by given ISO language code.
 */
function wpvb_get_languageid($language = NULL) {
	$wpdb = wpvb_db();
  static $vblanguages;

  if (!isset($vblanguages)) {
    $vblanguages = array();
    $result = $wpdb->query("SELECT languageid, title, languagecode FROM language");
    while ($lang = db_fetch_array($result)) {
      $vblanguages[$lang['languagecode']] = $lang['languageid'];
    }
  }
  $options = wpvb_get('options');
  return (!empty($language) && isset($vblanguages[$language]) ? $vblanguages[$language] : $vblanguages[$options['languageid']]);
}

/**
 * Get counts of guests and members currently online.
 */
function wpvb_get_users_online() {
	$wpdb = wpvb_db();
  $vb_options = wpvb_get('options');

  $datecut          = time() - $vb_options['cookietimeout'];
  $numbervisible    = 0;
  $numberregistered = 0;
  $numberguest      = 0;

  $result = $wpdb->query("SELECT user.username, user.usergroupid, session.userid, session.lastactivity FROM session AS session LEFT JOIN user AS user ON (user.userid = session.userid) WHERE session.lastactivity > %d", $datecut);

  $userinfos = array();

  while ($loggedin = db_fetch_array($result)) {
    $userid = $loggedin['userid'];
    if (!$userid) {
      $numberguest++;
    }
    else if (empty($userinfos[$userid]) || ($userinfos[$userid]['lastactivity'] < $loggedin['lastactivity'])) {
      $userinfos[$userid] = $loggedin;
    }
  }
  foreach ($userinfos as $userid => $loggedin) {
    $numberregistered++;
  }
  return array('guests' => $numberguest, 'members' => $numberregistered);
}

/**
 * Get counts of new or recent posts for the current user.
 */
function wpvb_get_recent_posts($scope = 'last') {
	$wpdb = wpvb_db();
  global $user;

  // Queries the vB user database to find a matching set of user data.
  $result = $wpdb->query("SELECT userid, username, lastvisit FROM user WHERE username = '%s'", wpvb_htmlspecialchars($user->name));

  // Make sure a user is logged in to get their last visit and appropriate post
  // count.
  if ($vb_user = db_fetch_array($result)) {
		$wpdb = wpvb_db();
    if ($scope == 'last') {
      $datecut = $vb_user['lastvisit'];
    }
    else if ($scope == 'daily') {
      $datecut = time() - 86400;
    }
    $posts = $wpdb->get_results("SELECT COUNT(postid) FROM post WHERE dateline > %d", $datecut);
  }
  else {
    $posts = 0;
  }
  return $posts;
}

function wpvb_htmlspecialchars($text) {
  $text = preg_replace('/&(?!#[0-9]+|shy;)/si', '&amp;', $text);
  return str_replace(array('<', '>', '"'), array('&lt;', '&gt;', '&quot;'), $text);
}