PageRenderTime 49ms CodeModel.GetById 19ms RepoModel.GetById 0ms app.codeStats 1ms

/source/module/forum/forum_ajax.php

https://github.com/jinbo51/DiscuzX
PHP | 695 lines | 657 code | 32 blank | 6 comment | 139 complexity | 5a33277ee034e211275e4421636a43dc MD5 | raw file
Possible License(s): BSD-3-Clause 
    

  1. <?php
    2. 

  2. 

  3. /**
    4. 

  4.  *      [Discuz!] (C)2001-2099 Comsenz Inc.
    5. 

  5.  *      This is NOT a freeware, use is subject to license terms
    6. 

  6.  *
    7. 

  7.  *      $Id: forum_ajax.php 33457 2013-06-19 04:15:44Z jeffjzhang $
    8. 

  8.  */
    9. 

  9. 

  10. if(!defined('IN_DISCUZ')) {
    11. 

  11. 	exit('Access Denied');
    12. 

  12. }
    13. 

  13. define('NOROBOT', TRUE);
    14. 

  14. 

  15. if($_GET['action'] == 'checkusername') {
    16. 

  16. 

  17. 

  18. 	$username = trim($_GET['username']);
    19. 

  19. 	$usernamelen = dstrlen($username);
    20. 

  20. 	if($usernamelen < 3) {
    21. 

  21. 		showmessage('profile_username_tooshort', '', array(), array('handle' => false));
    22. 

  22. 	} elseif($usernamelen > 15) {
    23. 

  23. 		showmessage('profile_username_toolong', '', array(), array('handle' => false));
    24. 

  24. 	}
    25. 

  25. 

  26. 	loaducenter();
    27. 

  27. 	$ucresult = uc_user_checkname($username);
    28. 

  28. 

  29. 	if($ucresult == -1) {
    30. 

  30. 		showmessage('profile_username_illegal', '', array(), array('handle' => false));
    31. 

  31. 	} elseif($ucresult == -2) {
    32. 

  32. 		showmessage('profile_username_protect', '', array(), array('handle' => false));
    33. 

  33. 	} elseif($ucresult == -3) {
    34. 

  34. 		if(C::t('common_member')->fetch_by_username($username) || C::t('common_member_archive')->fetch_by_username($username)) {
    35. 

  35. 			showmessage('register_check_found', '', array(), array('handle' => false));
    36. 

  36. 		} else {
    37. 

  37. 			showmessage('register_activation', '', array(), array('handle' => false));
    38. 

  38. 		}
    39. 

  39. 	}
    40. 

  40. 

  41. 	$censorexp = '/^('.str_replace(array('\\*', "\r\n", ' '), array('.*', '|', ''), preg_quote(($_G['setting']['censoruser'] = trim($_G['setting']['censoruser'])), '/')).')$/i';
    42. 

  42. 	if($_G['setting']['censoruser'] && @preg_match($censorexp, $username)) {
    43. 

  43. 		showmessage('profile_username_protect', '', array(), array('handle' => false));
    44. 

  44. 	}
    45. 

  45. 

  46. } elseif($_GET['action'] == 'checkemail') {
    47. 

  47. 

  48. 	require_once libfile('function/member');
    49. 

  49. 	checkemail($_GET['email']);
    50. 

  50. 

  51. } elseif($_GET['action'] == 'checkinvitecode') {
    52. 

  52. 

  53. 	$invitecode = trim($_GET['invitecode']);
    54. 

  54. 	if(!$invitecode) {
    55. 

  55. 		showmessage('no_invitation_code', '', array(), array('handle' => false));
    56. 

  56. 	}
    57. 

  57. 	$result = array();
    58. 

  58. 	if($invite = C::t('common_invite')->fetch_by_code($invitecode)) {
    59. 

  59. 		if(empty($invite['fuid']) && (empty($invite['endtime']) || $_G['timestamp'] < $invite['endtime'])) {
    60. 

  60. 			$result['uid'] = $invite['uid'];
    61. 

  61. 			$result['id'] = $invite['id'];
    62. 

  62. 			$result['appid'] = $invite['appid'];
    63. 

  63. 		}
    64. 

  64. 	}
    65. 

  65. 	if(empty($result)) {
    66. 

  66. 		showmessage('wrong_invitation_code', '', array(), array('handle' => false));
    67. 

  67. 	}
    68. 

  68. 

  69. } elseif($_GET['action'] == 'checkuserexists') {
    70. 

  70. 

  71. 	if(C::t('common_member')->fetch_by_username(trim($_GET['username'])) || C::t('common_member_archive')->fetch_by_username(trim($_GET['username']))) {
    72. 

  72. 		showmessage('<img src="'.$_G['style']['imgdir'].'/check_right.gif" width="13" height="13">', '', array(), array('msgtype' => 3));
    73. 

  73. 	} else {
    74. 

  74. 		showmessage('username_nonexistence', '', array(), array('msgtype' => 3));
    75. 

  75. 	}
    76. 

  76. 

  77. } elseif($_GET['action'] == 'attachlist') {
    78. 

  78. 

  79. 	require_once libfile('function/post');
    80. 

  80. 	loadcache('groupreadaccess');
    81. 

  81. 	$attachlist = getattach($_GET['pid'], intval($_GET['posttime']), $_GET['aids']);
    82. 

  82. 	$attachlist = $attachlist['attachs']['unused'];
    83. 

  83. 	$_G['group']['maxprice'] = isset($_G['setting']['extcredits'][$_G['setting']['creditstrans']]) ? $_G['group']['maxprice'] : 0;
    84. 

  84. 

  85. 	include template('common/header_ajax');
    86. 

  86. 	include template('forum/ajax_attachlist');
    87. 

  87. 	include template('common/footer_ajax');
    88. 

  88. 	dexit();
    89. 

  89. } elseif($_GET['action'] == 'imagelist') {
    90. 

  90. 

  91. 	require_once libfile('function/post');
    92. 

  92. 	$attachlist = getattach($_GET['pid'], intval($_GET['posttime']), $_GET['aids']);
    93. 

  93. 	$imagelist = $attachlist['imgattachs']['unused'];
    94. 

  94. 

  95. 	include template('common/header_ajax');
    96. 

  96. 	include template('forum/ajax_imagelist');
    97. 

  97. 	include template('common/footer_ajax');
    98. 

  98. 	dexit();
    99. 

  99. 

  100. } elseif($_GET['action'] == 'get_rushreply_membernum') {
    101. 

  101. 	$tid = intval($_GET['tid']);
    102. 

  102. 	if($tid) {
    103. 

  103. 		$membernum = C::t('forum_post')->count_author_by_tid($tid);
    104. 

  104. 		showmessage('thread_reshreply_membernum', '', array('membernum' => intval($membernum - 1)), array('alert' => 'info'));
    105. 

  105. 	}
    106. 

  106. 	dexit();
    107. 

  107. } elseif($_GET['action'] == 'deleteattach') {
    108. 

  108. 

  109. 	$count = 0;
    110. 

  110. 	if($_GET['aids']) {
    111. 

  111. 		foreach($_GET['aids'] as $aid) {
    112. 

  112. 			$attach = C::t('forum_attachment_n')->fetch('aid:'.$aid, $aid);
    113. 

  113. 			if($attach && ($attach['pid'] && $attach['pid'] == $_GET['pid'] && $_G['uid'] == $attach['uid'])) {
    114. 

  114. 				updatecreditbyaction('postattach', $attach['uid'], array(), '', -1, 1, $_G['fid']);
    115. 

  115. 			}
    116. 

  116. 			if($attach && ($attach['pid'] && $attach['pid'] == $_GET['pid'] && $_G['uid'] == $attach['uid'] || $_G['forum']['ismoderator'] || !$attach['pid'] && $_G['uid'] == $attach['uid'])) {
    117. 

  117. 				C::t('forum_attachment_n')->delete('aid:'.$aid, $aid);
    118. 

  118. 				C::t('forum_attachment')->delete($aid);
    119. 

  119. 				dunlink($attach);
    120. 

  120. 				$count++;
    121. 

  121. 			}
    122. 

  122. 		}
    123. 

  123. 	}
    124. 

  124. 	include template('common/header_ajax');
    125. 

  125. 	echo $count;
    126. 

  126. 	include template('common/footer_ajax');
    127. 

  127. 	dexit();
    128. 

  128. 

  129. } elseif($_GET['action'] == 'secondgroup') {
    130. 

  130. 

  131. 	require_once libfile('function/group');
    132. 

  132. 	$groupselect = get_groupselect($_GET['fupid'], $_GET['groupid']);
    133. 

  133. 	include template('common/header_ajax');
    134. 

  134. 	include template('forum/ajax_secondgroup');
    135. 

  135. 	include template('common/footer_ajax');
    136. 

  136. 	dexit();
    137. 

  137. 

  138. } elseif($_GET['action'] == 'displaysearch_adv') {
    139. 

  139. 	$display = $_GET['display'] == 1 ? 1 : '';
    140. 

  140. 	dsetcookie('displaysearch_adv', $display);
    141. 

  141. } elseif($_GET['action'] == 'checkgroupname') {
    142. 

  142. 	$groupname = trim($_GET['groupname']);
    143. 

  143. 	if(empty($groupname)) {
    144. 

  144. 		showmessage('group_name_empty', '', array(), array('msgtype' => 3));
    145. 

  145. 	}
    146. 

  146. 	$tmpname = cutstr($groupname, 20, '');
    147. 

  147. 	if($tmpname != $groupname) {
    148. 

  148. 		showmessage('group_name_oversize', '', array(), array('msgtype' => 3));
    149. 

  149. 	}
    150. 

  150. 	if(C::t('forum_forum')->fetch_fid_by_name($groupname)) {
    151. 

  151. 		showmessage('group_name_exist', '', array(), array('msgtype' => 3));
    152. 

  152. 	}
    153. 

  153. 	showmessage('', '', array(), array('msgtype' => 3));
    154. 

  154. 	include template('common/header_ajax');
    155. 

  155. 	include template('common/footer_ajax');
    156. 

  156. 	dexit();
    157. 

  157. } elseif($_GET['action'] == 'getthreadtypes') {
    158. 

  158. 	include template('common/header_ajax');
    159. 

  159. 	if(empty($_GET['selectname'])) $_GET['selectname'] = 'threadtypeid';
    160. 

  160. 	echo '<select name="'.$_GET['selectname'].'">';
    161. 

  161. 	if(!empty($_G['forum']['threadtypes']['types'])) {
    162. 

  162. 		if(!$_G['forum']['threadtypes']['required']) {
    163. 

  163. 			echo '<option value="0"></option>';
    164. 

  164. 		}
    165. 

  165. 		foreach($_G['forum']['threadtypes']['types'] as $typeid => $typename) {
    166. 

  166. 			if($_G['forum']['threadtypes']['moderators'][$typeid] && $_G['forum'] && !$_G['forum']['ismoderator']) {
    167. 

  167. 				continue;
    168. 

  168. 			}
    169. 

  169. 			echo '<option value="'.$typeid.'">'.$typename.'</option>';
    170. 

  170. 		}
    171. 

  171. 	} else {
    172. 

  172. 		echo '<option value="0" /></option>';
    173. 

  173. 	}
    174. 

  174. 	echo '</select>';
    175. 

  175. 	include template('common/footer_ajax');
    176. 

  176. } elseif($_GET['action'] == 'getimage') {
    177. 

  177. 	$_GET['aid'] = intval($_GET['aid']);
    178. 

  178. 	$image = C::t('forum_attachment_n')->fetch('aid:'.$_GET['aid'], $_GET['aid'], 1);
    179. 

  179. 	include template('common/header_ajax');
    180. 

  180. 	if($image['aid']) {
    181. 

  181. 		echo '<img src="'.getforumimg($image['aid'], 1, 300, 300, 'fixnone').'" id="image_'.$image['aid'].'" onclick="insertAttachimgTag(\''.$image['aid'].'\')" width="'.($image['width'] < 110 ? $image['width'] : 110).'" cwidth="'.($image['width'] < 300 ? $image['width'] : 300).'" />';
    182. 

  182. 	}
    183. 

  183. 	include template('common/footer_ajax');
    184. 

  184. 	dexit();
    185. 

  185. } elseif($_GET['action'] == 'setthreadcover') {
    186. 

  186. 	$aid = intval($_GET['aid']);
    187. 

  187. 	$imgurl = $_GET['imgurl'];
    188. 

  188. 	require_once libfile('function/post');
    189. 

  189. 	if($_G['forum'] && ($aid || $imgurl)) {
    190. 

  190. 		if($imgurl) {
    191. 

  191. 			$tid = intval($_GET['tid']);
    192. 

  192. 			$pid = intval($_GET['pid']);
    193. 

  193. 		} else {
    194. 

  194. 			$threadimage = C::t('forum_attachment_n')->fetch('aid:'.$aid, $aid);
    195. 

  195. 			$tid = $threadimage['tid'];
    196. 

  196. 			$pid = $threadimage['pid'];
    197. 

  197. 		}
    198. 

  198. 

  199. 		if($tid && $pid) {
    200. 

  200. 			$thread =get_thread_by_tid($tid);
    201. 

  201. 		} else {
    202. 

  202. 			$thread = array();
    203. 

  203. 		}
    204. 

  204. 		if(empty($thread) || (!$_G['forum']['ismoderator'] && $_G['uid'] != $thread['authorid'])) {
    205. 

  205. 			if($_GET['newthread']) {
    206. 

  206. 				showmessage('set_cover_faild', '', array(), array('msgtype' => 3));
    207. 

  207. 			} else {
    208. 

  208. 				showmessage('set_cover_faild', '', array(), array('closetime' => 3));
    209. 

  209. 			}
    210. 

  210. 		}
    211. 

  211. 		if(setthreadcover($pid, $tid, $aid, 0, $imgurl)) {
    212. 

  212. 			if(empty($imgurl)) {
    213. 

  213. 				C::t('forum_threadimage')->delete_by_tid($threadimage['tid']);
    214. 

  214. 				C::t('forum_threadimage')->insert(array(
    215. 

  215. 					'tid' => $threadimage['tid'],
    216. 

  216. 					'attachment' => $threadimage['attachment'],
    217. 

  217. 					'remote' => $threadimage['remote'],
    218. 

  218. 				));
    219. 

  219. 			}
    220. 

  220. 			if($_GET['newthread']) {
    221. 

  221. 				showmessage('set_cover_succeed', '', array(), array('msgtype' => 3));
    222. 

  222. 			} else {
    223. 

  223. 				showmessage('set_cover_succeed', '', array(), array('alert' => 'right', 'closetime' => 1));
    224. 

  224. 			}
    225. 

  225. 		}
    226. 

  226. 	}
    227. 

  227. 	if($_GET['newthread']) {
    228. 

  228. 		showmessage('set_cover_faild', '', array(), array('msgtype' => 3));
    229. 

  229. 	} else {
    230. 

  230. 		showmessage('set_cover_faild', '', array(), array('closetime' => 3));
    231. 

  231. 	}
    232. 

  232. 

  233. } elseif($_GET['action'] == 'updateattachlimit') {
    234. 

  234. 

  235. 	$_G['forum']['allowpostattach'] = isset($_G['forum']['allowpostattach']) ? $_G['forum']['allowpostattach'] : '';
    236. 

  236. 	$_G['group']['allowpostattach'] = $_G['forum']['allowpostattach'] != -1 && ($_G['forum']['allowpostattach'] == 1 || (!$_G['forum']['postattachperm'] && $_G['group']['allowpostattach']) || ($_G['forum']['postattachperm'] && forumperm($_G['forum']['postattachperm'])));
    237. 

  237. 	$_G['forum']['allowpostimage'] = isset($_G['forum']['allowpostimage']) ? $_G['forum']['allowpostimage'] : '';
    238. 

  238. 	$_G['group']['allowpostimage'] = $_G['forum']['allowpostimage'] != -1 && ($_G['forum']['allowpostimage'] == 1 || (!$_G['forum']['postimageperm'] && $_G['group']['allowpostimage']) || ($_G['forum']['postimageperm'] && forumperm($_G['forum']['postimageperm'])));
    239. 

  239. 

  240. 	$allowuploadnum = $allowuploadtoday = TRUE;
    241. 

  241. 	if($_G['group']['allowpostattach'] || $_G['group']['allowpostimage']) {
    242. 

  242. 		if($_G['group']['maxattachnum']) {
    243. 

  243. 			$allowuploadnum = $_G['group']['maxattachnum'] - getuserprofile('todayattachs');
    244. 

  244. 			$allowuploadnum = $allowuploadnum < 0 ? 0 : $allowuploadnum;
    245. 

  245. 			if(!$allowuploadnum) {
    246. 

  246. 				$allowuploadtoday = false;
    247. 

  247. 			}
    248. 

  248. 		}
    249. 

  249. 		if($_G['group']['maxsizeperday']) {
    250. 

  250. 			$allowuploadsize = $_G['group']['maxsizeperday'] - getuserprofile('todayattachsize');
    251. 

  251. 			$allowuploadsize = $allowuploadsize < 0 ? 0 : $allowuploadsize;
    252. 

  252. 			if(!$allowuploadsize) {
    253. 

  253. 				$allowuploadtoday = false;
    254. 

  254. 			}
    255. 

  255. 			$allowuploadsize = $allowuploadsize / 1048576 >= 1 ? round(($allowuploadsize / 1048576), 1).'MB' : round(($allowuploadsize / 1024)).'KB';
    256. 

  256. 		}
    257. 

  257. 	}
    258. 

  258. 	include template('common/header_ajax');
    259. 

  259. 	include template('forum/post_attachlimit');
    260. 

  260. 	include template('common/footer_ajax');
    261. 

  261. 	exit;
    262. 

  262. 

  263. } elseif($_GET['action'] == 'forumchecknew' && !empty($_GET['fid']) && !empty($_GET['time'])) {
    264. 

  264. 	$fid = intval($_GET['fid']);
    265. 

  265. 	$time = intval($_GET['time']);
    266. 

  266. 

  267. 	if(!$_GET['uncheck']) {
    268. 

  268. 		$foruminfo = C::t('forum_forum')->fetch($fid);
    269. 

  269. 		$lastpost_str = $foruminfo['lastpost'];
    270. 

  270. 		if($lastpost_str) {
    271. 

  271. 			$lastpost = explode("\t", $lastpost_str);
    272. 

  272. 			unset($lastpost_str);
    273. 

  273. 		}
    274. 

  274. 		include template('common/header_ajax');
    275. 

  275. 		echo $lastpost['2'] > $time ? 1 : 0 ;
    276. 

  276. 		include template('common/footer_ajax');
    277. 

  277. 		exit;
    278. 

  278. 	} else {
    279. 

  279. 		$_G['forum_colorarray'] = array('', '#EE1B2E', '#EE5023', '#996600', '#3C9D40', '#2897C5', '#2B65B7', '#8F2A90', '#EC1282');
    280. 

  280. 		$query = C::t('forum_forumfield')->fetch($fid);
    281. 

  281. 		$forum_field['threadtypes'] = dunserialize($query['threadtypes']);
    282. 

  282. 		$forum_field['threadsorts'] = dunserialize($query['threadsorts']);
    283. 

  283. 		unset($query);
    284. 

  284. 		$forum_field = daddslashes($forum_field);
    285. 

  285. 		$todaytime = strtotime(dgmdate(TIMESTAMP, 'Ymd'));
    286. 

  286. 		foreach(C::t('forum_thread')->fetch_all_by_fid_lastpost($fid, $time, TIMESTAMP) as $thread) {
    287. 

  287. 			$thread['icontid'] = $thread['forumstick'] || !$thread['moved'] && $thread['isgroup'] != 1 ? $thread['tid'] : $thread['closed'];
    288. 

  288. 			if(!$thread['forumstick'] && ($thread['isgroup'] == 1 || $thread['fid'] != $_G['fid'])) {
    289. 

  289. 				$thread['icontid'] = $thread['closed'] > 1 ? $thread['closed'] : $thread['tid'];
    290. 

  290. 			}
    291. 

  291. 			list($thread['subject'], $thread['author'], $thread['lastposter']) = daddslashes(array($thread['subject'], $thread['author'], $thread['lastposter']));
    292. 

  292. 			$thread['dateline'] = $thread['dateline'] > $todaytime ? "<span class=\"xi1\">".dgmdate($thread['dateline'], 'd')."</span>" : "<span>".dgmdate($thread['dateline'], 'd')."</span>";
    293. 

  293. 			$thread['lastpost'] = dgmdate($thread['lastpost']);
    294. 

  294. 			if($forum_field['threadtypes']['prefix']) {
    295. 

  295. 				if($forum_field['threadtypes']['prefix'] == 1) {
    296. 

  296. 					$thread['threadtype'] = $forum_field['threadtypes']['types'][$thread['typeid']] ? '<em>[<a href="forum.php?mod=forumdisplay&fid='.$fid.'&filter=typeid&typeid='.$thread['typeid'].'">'.$forum_field['threadtypes']['types'][$thread['typeid']].'</a>]</em> ' : '' ;
    297. 

  297. 				} elseif($forum_field['threadtypes']['prefix'] == 2) {
    298. 

  298. 					$thread['threadtype'] = $forum_field['threadtypes']['icons'][$thread['typeid']] ? '<em><a href="forum.php?mod=forumdisplay&fid='.$fid.'&filter=typeid&typeid='.$thread['typeid'].'"><img src="'.$forum_field['threadtypes']['icons'][$thread['typeid']].'"/></a></em> ' : '' ;
    299. 

  299. 				}
    300. 

  300. 			}
    301. 

  301. 			if($forum_field['threadsorts']['prefix']) {
    302. 

  302. 				$thread['threadsort'] = $forum_field['threadsorts']['types'][$thread['sortid']] ? '<em>[<a href="forum.php?mod=forumdisplay&fid='.$fid.'&filter=sortid&typeid='.$thread['sortid'].'">'.$forum_field['threadsorts']['types'][$thread['sortid']].'</a>]</em>' : '' ;
    303. 

  303. 			}
    304. 

  304. 			if($thread['highlight']) {
    305. 

  305. 				$string = sprintf('%02d', $thread['highlight']);
    306. 

  306. 				$stylestr = sprintf('%03b', $string[0]);
    307. 

  307. 

  308. 				$thread['highlight'] = ' style="';
    309. 

  309. 				$thread['highlight'] .= $stylestr[0] ? 'font-weight: bold;' : '';
    310. 

  310. 				$thread['highlight'] .= $stylestr[1] ? 'font-style: italic;' : '';
    311. 

  311. 				$thread['highlight'] .= $stylestr[2] ? 'text-decoration: underline;' : '';
    312. 

  312. 				$thread['highlight'] .= $string[1] ? 'color: '.$_G['forum_colorarray'][$string[1]].';' : '';
    313. 

  313. 				if($thread['bgcolor']) {
    314. 

  314. 					$thread['highlight'] .= "background-color: $thread[bgcolor];";
    315. 

  315. 				}
    316. 

  316. 				$thread['highlight'] .= '"';
    317. 

  317. 			} else {
    318. 

  318. 				$thread['highlight'] = '';
    319. 

  319. 			}
    320. 

  320. 			$target = $thread['isgroup'] == 1 || $thread['forumstick'] ? ' target="_blank"' : ' onclick="atarget(this)"';
    321. 

  321. 			if(in_array('forum_viewthread', $_G['setting']['rewritestatus'])) {
    322. 

  322. 				$thread['threadurl'] = '<a href="'.rewriteoutput('forum_viewthread', 1, '', $thread['tid'], 1, '', '').'"'.$thread['highlight'].$target.'class="s xst">'.$thread['subject'].'</a>';
    323. 

  323. 			} else {
    324. 

  324. 				$thread['threadurl'] = '<a href="forum.php?mod=viewthread&amp;tid='.$thread['tid'].'"'.$thread['highlight'].$target.'class="s xst">'.$thread['subject'].'</a>';
    325. 

  325. 			}
    326. 

  326. 			if(in_array($thread['displayorder'], array(1, 2, 3, 4))) {
    327. 

  327. 				$thread['id'] = 'stickthread_'.$thread['tid'];
    328. 

  328. 			} else {
    329. 

  329. 				$thread['id'] = 'normalthread_'.$thread['tid'];
    330. 

  330. 			}
    331. 

  331. 			$thread['threadurl'] = $thread['threadtype'].$thread['threadsort'].$thread['threadurl'];
    332. 

  332. 			if(in_array('home_space', $_G['setting']['rewritestatus'])) {
    333. 

  333. 				$thread['authorurl'] = '<a href="'.rewriteoutput('home_space', 1, '', $thread['authorid'], '', '').'">'.$thread['author'].'</a>';
    334. 

  334. 				$thread['lastposterurl'] = '<a href="'.rewriteoutput('home_space', 1, '', '', rawurlencode($thread['lastposter']), '').'">'.$thread['lastposter'].'</a>';
    335. 

  335. 			} else {
    336. 

  336. 				$thread['authorurl'] = '<a href="home.php?mod=space&uid='.$thread['authorid'].'">'.$thread['author'].'</a>';
    337. 

  337. 				$thread['lastposterurl'] = '<a href="home.php?mod=space&username='.rawurlencode($thread['lastposter']).'">'.$thread['lastposter'].'</a>';
    338. 

  338. 			}
    339. 

  339. 			$threadlist[] = $thread;
    340. 

  340. 		}
    341. 

  341. 		if($threadlist) {
    342. 

  342. 			krsort($threadlist);
    343. 

  343. 		}
    344. 

  344. 		include template('forum/ajax_threadlist');
    345. 

  345. 

  346. 	}
    347. 

  347. } elseif($_GET['action'] == 'downremoteimg') {
    348. 

  348. 	$_GET['message'] = str_replace(array("\r", "\n"), array($_GET['wysiwyg'] ? '<br />' : '', "\\n"), $_GET['message']);
    349. 

  349. 	preg_match_all("/\[img\]\s*([^\[\<\r\n]+?)\s*\[\/img\]|\[img=\d{1,4}[x|\,]\d{1,4}\]\s*([^\[\<\r\n]+?)\s*\[\/img\]/is", $_GET['message'], $image1, PREG_SET_ORDER);
    350. 

  350. 	preg_match_all("/\<img.+src=('|\"|)?(.*)(\\1)([\s].*)?\>/ismUe", $_GET['message'], $image2, PREG_SET_ORDER);
    351. 

  351. 	$temp = $aids = $existentimg = array();
    352. 

  352. 	if(is_array($image1) && !empty($image1)) {
    353. 

  353. 		foreach($image1 as $value) {
    354. 

  354. 			$temp[] = array(
    355. 

  355. 				'0' => $value[0],
    356. 

  356. 				'1' => trim(!empty($value[1]) ? $value[1] : $value[2])
    357. 

  357. 			);
    358. 

  358. 		}
    359. 

  359. 	}
    360. 

  360. 	if(is_array($image2) && !empty($image2)) {
    361. 

  361. 		foreach($image2 as $value) {
    362. 

  362. 			$temp[] = array(
    363. 

  363. 				'0' => $value[0],
    364. 

  364. 				'1' => trim($value[2])
    365. 

  365. 			);
    366. 

  366. 		}
    367. 

  367. 	}
    368. 

  368. 	require_once libfile('class/image');
    369. 

  369. 	if(is_array($temp) && !empty($temp)) {
    370. 

  370. 		$upload = new discuz_upload();
    371. 

  371. 		$attachaids = array();
    372. 

  372. 

  373. 		foreach($temp as $value) {
    374. 

  374. 			$imageurl = $value[1];
    375. 

  375. 			$hash = md5($imageurl);
    376. 

  376. 			if(strlen($imageurl)) {
    377. 

  377. 				$imagereplace['oldimageurl'][] = $value[0];
    378. 

  378. 				if(!isset($existentimg[$hash])) {
    379. 

  379. 					$existentimg[$hash] = $imageurl;
    380. 

  380. 					$attach['ext'] = $upload->fileext($imageurl);
    381. 

  381. 					if(!$upload->is_image_ext($attach['ext'])) {
    382. 

  382. 						continue;
    383. 

  383. 					}
    384. 

  384. 					$content = '';
    385. 

  385. 					if(preg_match('/^(http:\/\/|\.)/i', $imageurl)) {
    386. 

  386. 						$content = dfsockopen($imageurl);
    387. 

  387. 					} elseif(preg_match('/^('.preg_quote(getglobal('setting/attachurl'), '/').')/i', $imageurl)) {
    388. 

  388. 						$imagereplace['newimageurl'][] = $value[0];
    389. 

  389. 					}
    390. 

  390. 					if(empty($content)) continue;
    391. 

  391. 					$patharr = explode('/', $imageurl);
    392. 

  392. 					$attach['name'] =  trim($patharr[count($patharr)-1]);
    393. 

  393. 					$attach['thumb'] = '';
    394. 

  394. 

  395. 					$attach['isimage'] = $upload -> is_image_ext($attach['ext']);
    396. 

  396. 					$attach['extension'] = $upload -> get_target_extension($attach['ext']);
    397. 

  397. 					$attach['attachdir'] = $upload -> get_target_dir('forum');
    398. 

  398. 					$attach['attachment'] = $attach['attachdir'] . $upload->get_target_filename('forum').'.'.$attach['extension'];
    399. 

  399. 					$attach['target'] = getglobal('setting/attachdir').'./forum/'.$attach['attachment'];
    400. 

  400. 

  401. 					if(!@$fp = fopen($attach['target'], 'wb')) {
    402. 

  402. 						continue;
    403. 

  403. 					} else {
    404. 

  404. 						flock($fp, 2);
    405. 

  405. 						fwrite($fp, $content);
    406. 

  406. 						fclose($fp);
    407. 

  407. 					}
    408. 

  408. 					if(!$upload->get_image_info($attach['target'])) {
    409. 

  409. 						@unlink($attach['target']);
    410. 

  410. 						continue;
    411. 

  411. 					}
    412. 

  412. 					$attach['size'] = filesize($attach['target']);
    413. 

  413. 					$upload->attach = $attach;
    414. 

  414. 					$thumb = $width = 0;
    415. 

  415. 					if($upload->attach['isimage']) {
    416. 

  416. 						if($_G['setting']['thumbsource'] && $_G['setting']['sourcewidth'] && $_G['setting']['sourceheight']) {
    417. 

  417. 							$image = new image();
    418. 

  418. 							$thumb = $image->Thumb($upload->attach['target'], '', $_G['setting']['sourcewidth'], $_G['setting']['sourceheight'], 1, 1) ? 1 : 0;
    419. 

  419. 							$width = $image->imginfo['width'];
    420. 

  420. 							$upload->attach['size'] = $image->imginfo['size'];
    421. 

  421. 						}
    422. 

  422. 						if($_G['setting']['thumbstatus']) {
    423. 

  423. 							$image = new image();
    424. 

  424. 							$thumb = $image->Thumb($upload->attach['target'], '', $_G['setting']['thumbwidth'], $_G['setting']['thumbheight'], $_G['setting']['thumbstatus'], 0) ? 1 : 0;
    425. 

  425. 							$width = $image->imginfo['width'];
    426. 

  426. 						}
    427. 

  427. 						if($_G['setting']['thumbsource'] || !$_G['setting']['thumbstatus']) {
    428. 

  428. 							list($width) = @getimagesize($upload->attach['target']);
    429. 

  429. 						}
    430. 

  430. 						if($_G['setting']['watermarkstatus'] && empty($_G['forum']['disablewatermark'])) {
    431. 

  431. 							$image = new image();
    432. 

  432. 							$image->Watermark($attach['target'], '', 'forum');
    433. 

  433. 							$upload->attach['size'] = $image->imginfo['size'];
    434. 

  434. 						}
    435. 

  435. 					}
    436. 

  436. 					$aids[] = $aid = getattachnewaid();
    437. 

  437. 					$setarr = array(
    438. 

  438. 						'aid' => $aid,
    439. 

  439. 						'dateline' => $_G['timestamp'],
    440. 

  440. 						'filename' => $upload->attach['name'],
    441. 

  441. 						'filesize' => $upload->attach['size'],
    442. 

  442. 						'attachment' => $upload->attach['attachment'],
    443. 

  443. 						'isimage' => $upload->attach['isimage'],
    444. 

  444. 						'uid' => $_G['uid'],
    445. 

  445. 						'thumb' => $thumb,
    446. 

  446. 						'remote' => '0',
    447. 

  447. 						'width' => $width
    448. 

  448. 					);
    449. 

  449. 					C::t("forum_attachment_unused")->insert($setarr);
    450. 

  450. 					$attachaids[$hash] = $imagereplace['newimageurl'][] = '[attachimg]'.$aid.'[/attachimg]';
    451. 

  451. 

  452. 				} else {
    453. 

  453. 					$imagereplace['newimageurl'][] = $attachaids[$hash];
    454. 

  454. 				}
    455. 

  455. 			}
    456. 

  456. 		}
    457. 

  457. 		if(!empty($aids)) {
    458. 

  458. 			require_once libfile('function/post');
    459. 

  459. 		}
    460. 

  460. 		$_GET['message'] = str_replace($imagereplace['oldimageurl'], $imagereplace['newimageurl'], $_GET['message']);
    461. 

  461. 	}
    462. 

  462. 	$_GET['message'] = addcslashes($_GET['message'], '/"\'');
    463. 

  463. 	print <<<EOF
    464. 

  464. 		<script type="text/javascript">
    465. 

  465. 			parent.ATTACHORIMAGE = 1;
    466. 

  466. 			parent.updateDownImageList('$_GET[message]');
    467. 

  467. 		</script>
    468. 

  468. EOF;
    469. 

  469. 	dexit();
    470. 

  470. } elseif($_GET['action'] == 'exif') {
    471. 

  471. 	$exif = C::t('forum_attachment_exif')->fetch($_GET['aid']);
    472. 

  472. 	$s = $exif['exif'];
    473. 

  473. 	if(!$s) {
    474. 

  474. 		require_once libfile('function/attachment');
    475. 

  475. 		$s = getattachexif($_GET['aid']);
    476. 

  476. 		C::t('forum_attachment_exif')->insert($_GET['aid'], $s);
    477. 

  477. 	}
    478. 

  478. 	include template('common/header_ajax');
    479. 

  479. 	echo $s;
    480. 

  480. 	include template('common/footer_ajax');
    481. 

  481. 	exit;
    482. 

  482. } elseif($_GET['action'] == 'getthreadclass') {
    483. 

  483. 	$fid = intval($_GET['fid']);
    484. 

  484. 	$threadclass = '';
    485. 

  485. 	if($fid) {
    486. 

  486. 		$option = array();
    487. 

  487. 		$forumfield = C::t('forum_forumfield')->fetch($fid);
    488. 

  488. 		if(!empty($forumfield['threadtypes'])) {
    489. 

  489. 			foreach(C::t('forum_threadclass')->fetch_all_by_fid($fid) as $tc) {
    490. 

  490. 				$option[] = '<option value="'.$tc['typeid'].'">'.$tc['name'].'</option>';
    491. 

  491. 			}
    492. 

  492. 			if(!empty($option)) {
    493. 

  493. 				$threadclass .= '<option value="">'.lang('forum/template', 'modcp_select_threadclass').'</option>';
    494. 

  494. 				$threadclass .= implode('', $option);
    495. 

  495. 			}
    496. 

  496. 		}
    497. 

  497. 	}
    498. 

  498. 

  499. 	if(!empty($threadclass)) {
    500. 

  500. 		$threadclass = '<select name="typeid" id="typeid" width="168" class="ps">'.$threadclass.'</select>';
    501. 

  501. 	}
    502. 

  502. 	include template('common/header_ajax');
    503. 

  503. 	echo $threadclass;
    504. 

  504. 	include template('common/footer_ajax');
    505. 

  505. 	exit;
    506. 

  506. 

  507. } elseif($_GET['action'] == 'forumjump') {
    508. 

  508. 	require_once libfile('function/forumlist');
    509. 

  509. 	$favforums = C::t('home_favorite')->fetch_all_by_uid_idtype($_G['uid'], 'fid');
    510. 

  510. 	$visitedforums = array();
    511. 

  511. 	if($_G['cookie']['visitedfid']) {
    512. 

  512. 		loadcache('forums');
    513. 

  513. 		foreach(explode('D', $_G['cookie']['visitedfid']) as $fid) {
    514. 

  514. 			$visitedforums[$fid] = $_G['cache']['forums'][$fid]['name'];
    515. 

  515. 		}
    516. 

  516. 	}
    517. 

  517. 	$forumlist = forumselect(FALSE, 1);
    518. 

  518. 	include template('forum/ajax_forumlist');
    519. 

  519. } elseif($_GET['action'] == 'quickreply') {
    520. 

  520. 	$tid = intval($_GET['tid']);
    521. 

  521. 	$fid = intval($_GET['fid']);
    522. 

  522. 	if($tid) {
    523. 

  523. 		$thread = C::t('forum_thread')->fetch($tid);
    524. 

  524. 		if($thread && !getstatus($thread['status'], 2)) {
    525. 

  525. 			$list = C::t('forum_post')->fetch_all_by_tid('tid:'.$tid, $tid, true, 'DESC', 0, 10, null, 0);
    526. 

  526. 			loadcache('smilies');
    527. 

  527. 			foreach($list as $pid => $post) {
    528. 

  528. 				if($post['first']) {
    529. 

  529. 					unset($list[$pid]);
    530. 

  530. 				} else {
    531. 

  531. 					$post['message'] = preg_replace($_G['cache']['smilies']['searcharray'], '', $post['message']);
    532. 

  532. 					$post['message'] = preg_replace("/\{\:soso_((e\d+)|(_\d+_\d))\:\}/e", '', $post['message']);
    533. 

  533. 					$list[$pid]['message'] = cutstr(preg_replace("/\[.+?\]/ies", '', dhtmlspecialchars($post['message'])), 300) ;
    534. 

  534. 				}
    535. 

  535. 			}
    536. 

  536. 			krsort($list);
    537. 

  537. 		}
    538. 

  538. 	}
    539. 

  539. 	$seccodecheck = ($_G['setting']['seccodestatus'] & 4) && (!$_G['setting']['seccodedata']['minposts'] || getuserprofile('posts') < $_G['setting']['seccodedata']['minposts']);
    540. 

  540. 	$secqaacheck = $_G['setting']['secqaa']['status'] & 2 && (!$_G['setting']['secqaa']['minposts'] || getuserprofile('posts') < $_G['setting']['secqaa']['minposts']);
    541. 

  541. 	include template('forum/ajax_quickreply');
    542. 

  542. } elseif($_GET['action'] == 'getpost') {
    543. 

  543. 	$tid = intval($_GET['tid']);
    544. 

  544. 	$fid = intval($_GET['fid']);
    545. 

  545. 	$pid = intval($_GET['pid']);
    546. 

  546. 	$thread = C::t('forum_thread')->fetch($tid);
    547. 

  547. 	$post = C::t('forum_post')->fetch($thread['posttableid'], $pid);
    548. 

  548. 	include template('forum/ajax_followpost');
    549. 

  549. } elseif($_GET['action'] == 'quickclear') {
    550. 

  550. 	$uid = intval($_GET['uid']);
    551. 

  551. 	if($_G['adminid'] != 1) {
    552. 

  552. 		showmessage('quickclear_noperm');
    553. 

  553. 	}
    554. 

  554. 	include_once libfile('function/misc');
    555. 

  555. 	include_once libfile('function/member');
    556. 

  556. 

  557. 	if(!submitcheck('qclearsubmit')) {
    558. 

  558. 		$crimenum_avatar = crime('getcount', $uid, 'crime_avatar');
    559. 

  559. 		$crimenum_sightml = crime('getcount', $uid, 'crime_sightml');
    560. 

  560. 		$crimenum_customstatus = crime('getcount', $uid, 'crime_customstatus');
    561. 

  561. 		$crimeauthor = getuserbyuid($uid);
    562. 

  562. 		$crimeauthor = $crimeauthor['username'];
    563. 

  563. 

  564. 		include template('forum/ajax');
    565. 

  565. 	} else {
    566. 

  566. 		if(empty($_GET['operations'])) {
    567. 

  567. 			showmessage('quickclear_need_operation');
    568. 

  568. 		}
    569. 

  569. 		$reason = checkreasonpm();
    570. 

  570. 		$allowop = array('avatar', 'sightml', 'customstatus');
    571. 

  571. 		$cleartype = array();
    572. 

  572. 		if(in_array('avatar', $_GET['operations'])) {
    573. 

  573. 			C::t('common_member')->update($uid, array('avatarstatus'=>0));
    574. 

  574. 			loaducenter();
    575. 

  575. 			uc_user_deleteavatar($uid);
    576. 

  576. 			$cleartype[] = lang('forum/misc', 'avatar');
    577. 

  577. 			crime('recordaction', $uid, 'crime_avatar', lang('forum/misc', 'crime_reason', array('reason' => $reason)));
    578. 

  578. 		}
    579. 

  579. 		if(in_array('sightml', $_GET['operations'])) {
    580. 

  580. 			C::t('common_member_field_forum')->update($uid, array('sightml' => ''), 'UNBUFFERED');
    581. 

  581. 			$cleartype[] = lang('forum/misc', 'signature');
    582. 

  582. 			crime('recordaction', $uid, 'crime_sightml', lang('forum/misc', 'crime_reason', array('reason' => $reason)));
    583. 

  583. 		}
    584. 

  584. 		if(in_array('customstatus', $_GET['operations'])) {
    585. 

  585. 			C::t('common_member_field_forum')->update($uid, array('customstatus' => ''), 'UNBUFFERED');
    586. 

  586. 			$cleartype[] = lang('forum/misc', 'custom_title');
    587. 

  587. 			crime('recordaction', $uid, 'crime_customstatus', lang('forum/misc', 'crime_reason', array('reason' => $reason)));
    588. 

  588. 		}
    589. 

  589. 		if(($_G['group']['reasonpm'] == 2 || $_G['group']['reasonpm'] == 3) || !empty($_GET['sendreasonpm'])) {
    590. 

  590. 			sendreasonpm(array('authorid' => $uid), 'reason_quickclear', array(
    591. 

  591. 				'cleartype' => implode(',', $cleartype),
    592. 

  592. 				'reason' => $reason,
    593. 

  593. 				'from_id' => 0,
    594. 

  594. 				'from_idtype' => 'quickclear'
    595. 

  595. 			));
    596. 

  596. 		}
    597. 

  597. 		showmessage('quickclear_success', $_POST['redirect'], array(), array('showdialog'=>1, 'closetime' => true, 'msgtype' => 2, 'locationtime' => 1));
    598. 

  598. 	}
    599. 

  599. } elseif($_GET['action'] == 'getpostfeed') {
    600. 

  600. 	$tid = intval($_GET['tid']);
    601. 

  601. 	$pid = intval($_GET['pid']);
    602. 

  602. 	$flag = intval($_GET['flag']);
    603. 

  603. 	$feed = $thread = array();
    604. 

  604. 	if($tid) {
    605. 

  605. 		$thread = C::t('forum_thread')->fetch($tid);
    606. 

  606. 		if($flag) {
    607. 

  607. 			$post = C::t('forum_post')->fetch($thread['posttableid'], $pid);
    608. 

  608. 			require_once libfile('function/discuzcode');
    609. 

  609. 			require_once libfile('function/followcode');
    610. 

  610. 			$post['message'] = followcode($post['message'], $tid, $pid);
    611. 

  611. 		} else {
    612. 

  612. 			if(!isset($_G['cache']['forums'])) {
    613. 

  613. 				loadcache('forums');
    614. 

  614. 			}
    615. 

  615. 			$feedid = intval($_GET['feedid']);
    616. 

  616. 			$feed = C::t('forum_threadpreview')->fetch($tid);
    617. 

  617. 			if($feedid) {
    618. 

  618. 				$feed = array_merge($feed, C::t('home_follow_feed')->fetch_by_feedid($feedid));
    619. 

  619. 			}
    620. 

  620. 			$post['message'] = $feed['content'];
    621. 

  621. 		}
    622. 

  622. 	}
    623. 

  623. 	include template('forum/ajax_followpost');
    624. 

  624. 

  625. } elseif($_GET['action'] == 'setnav') {
    626. 

  626. 	if($_G['adminid'] != 1) {
    627. 

  627. 		showmessage('quickclear_noperm');
    628. 

  628. 	}
    629. 

  629. 	$allowfuntype = array('portal', 'group', 'follow', 'collection', 'guide', 'feed', 'blog', 'doing', 'album', 'share', 'wall', 'homepage', 'ranklist');
    630. 

  630. 	$type = in_array($_GET['type'], $allowfuntype) ? trim($_GET['type']) : '';
    631. 

  631. 	$do = in_array($_GET['do'], array('open', 'close')) ? $_GET['do'] : 'close';
    632. 

  632. 	if(!submitcheck('funcsubmit')) {
    633. 

  633. 		$navtitle = lang('spacecp', $do == 'open' ? 'select_the_navigation_position' : 'close_module', array('type' => lang('spacecp', $type)));
    634. 

  634. 		$closeprompt = lang('spacecp', 'close_module', array('type' => lang('spacecp', $type)));
    635. 

  635. 		include template('forum/ajax');
    636. 

  636. 	} else {
    637. 

  637. 		if(!empty($type)) {
    638. 

  638. 			$funkey = $type.'status';
    639. 

  639. 			$funstatus = $do == 'open' ? 1 : 0;
    640. 

  640. 			if($type != 'homepage') {
    641. 

  641. 				$identifier = array('portal' => 1, 'group' => 3, 'feed' => 4, 'ranklist' => 8, 'follow' => 9, 'guide' => 10, 'collection' => 11, 'blog' => 12, 'album' => 13, 'share' => 14, 'doing' => 15);
    642. 

  642. 				$navdata = array('available' => -1);
    643. 

  643. 				$navtype = $do == 'open' ? array() : array(0, 3);
    644. 

  644. 				if(in_array($type, array('blog', 'album', 'share', 'doing', 'follow'))) {
    645. 

  645. 					$navtype[] = 2;
    646. 

  646. 				}
    647. 

  647. 				if($do == 'open') {
    648. 

  648. 					if($_GET['location']['header']) {
    649. 

  649. 						$navtype[] = 0;
    650. 

  650. 						$navdata['available'] = 1;
    651. 

  651. 					}
    652. 

  652. 					if($_GET['location']['quick']) {
    653. 

  653. 						$navtype[] = 3;
    654. 

  654. 						$navdata['available'] = 1;
    655. 

  655. 					}
    656. 

  656. 					$navdata['available'] = $navdata['available'] == 1 ? 1 : 0;
    657. 

  657. 					if(empty($_GET['location']['header']) || empty($_GET['location']['quick'])) {
    658. 

  658. 						C::t('common_nav')->update_by_navtype_type_identifier(array(0, 2, 3), 0, array("$type", "$identifier[$type]"), array('available' => 0));
    659. 

  659. 					}
    660. 

  660. 				}
    661. 

  661. 				if($navtype) {
    662. 

  662. 					C::t('common_nav')->update_by_navtype_type_identifier($navtype, 0, array("$type", "$identifier[$type]"), $navdata);
    663. 

  663. 					if(in_array($type, array('blog', 'album', 'share', 'doing', 'follow')) && !$navdata['available']) {
    664. 

  664. 						C::t('common_nav')->update_by_navtype_type_identifier(array(2), 0, array("$type"), array('available' => 1));
    665. 

  665. 					}
    666. 

  666. 				}
    667. 

  667. 			}
    668. 

  668. 			C::t('common_setting')->update($funkey, $funstatus);
    669. 

  669. 

  670. 			$setting[$funkey] = $funstatus;
    671. 

  671. 			include libfile('function/cache');
    672. 

  672. 			updatecache('setting');
    673. 

  673. 		}
    674. 

  674. 		showmessage('do_success', dreferer(), array(), array('header'=>true));
    675. 

  675. 	}
    676. 

  676. 	exit;
    677. 

  677. }
    678. 

  678. 

  679. function tmpiconv($s, $d, $str) {
    680. 

  680. 	if(is_array($str)) {
    681. 

  681. 		foreach($str as $k => $v) {
    682. 

  682. 			$str[$k] = tmpiconv($s, $d, $v);
    683. 

  683. 		}
    684. 

  684. 	} else {
    685. 

  685. 		$str = iconv($s, $d, $str);
    686. 

  686. 	}
    687. 

  687. 	return $str;
    688. 

  688. }
    689. 

  689. function modifynav($type, $flag) {
    690. 

  690. 

  691. }
    692. 

  692. 

  693. showmessage('succeed', '', array(), array('handle' => false));
    694. 

  694. 

  695. ?>
    696.