—四葉の芽チーム'); } } /* 更新記錄檔檔案／輸出討論串 */ /* ログの全体更新 */ function updatelog($resno=0,$page_num=-1,$single_page=false){ global $config, $PIO, $FileIO, $PTE, $PMS, $language, $LIMIT_SENSOR, $style_bar; $adminMode = adminAuthenticate('check') && $page_num != -1 && !$single_page; // 前端管理模式 $adminFunc = ''; // 前端管理選擇 if($adminMode){ $adminFunc = ''; } $resno = intval($resno); // 編號數字化 $page_start = $page_end = 0; // 靜態頁面編號 $inner_for_count = 1; // 內部迴圈執行次數 $RES_start = $RES_amount = $hiddenReply = $tree_count = $hiddenImage = $hiddenImagP = 0; $hiddenImagRP = 1; // o++ $kill_sensor = $old_sensor = false; // 預測系統啟動旗標 $arr_kill = $arr_old = array(); // 過舊編號陣列 $pte_vals = array('{$THREADFRONT}'=>'','{$THREADREAR}'=>'','{$SELF}'=>PHP_SELF, '{$DEL_HEAD_TEXT}' => ''._T('del_head'), '{$DEL_IMG_ONLY_FIELD}' => '', '{$DEL_IMG_ONLY_TEXT}' => _T('del_img_only'), '{$DEL_PASS_TEXT}' => ($adminMode ? $adminFunc : '')._T('del_pass'), '{$DEL_PASS_FIELD}' => '', '{$DEL_SUBMIT_BTN}' => ''); if(is_file(DATA_DIR.CSV_SS)) $pte_vals += array('{$STYLE_BAR}' => '
Style '.$style_bar); if($resno) $pte_vals['{$RESTO}'] = $resno; if(!$resno){ if($page_num==-1){ // remake模式 (PHP動態輸出多頁份) $threads = $PIO->fetchThreadList(); // 取得全討論串列表 $PMS->useModuleMethods('ThreadOrder', array($resno,$page_num,$single_page,&$threads)); // "ThreadOrder" Hook Point $threads_count = count($threads); $inner_for_count = $threads_count > PAGE_DEF ? PAGE_DEF : $threads_count; $page_end = ceil($threads_count / PAGE_DEF) - 1; // 頁面編號最後值 }else{ // 討論串分頁模式 (PHP動態輸出一頁份) $threads_count = $PIO->threadCount(); // 討論串個數 //---- if($page_num < 0 || ($page_num * PAGE_DEF) >= $threads_count) error(_T('page_not_found')); // $page_num超過範圍 //++++---- Page 0 bug fix if($page_num!=0) if($page_num < 0 || ($page_num * PAGE_DEF) >= $threads_count) error(_T('page_not_found')); // $page_num超過範圍 //++++---- $page_start = $page_end = $page_num; // 設定靜態頁面編號 $threads = $PIO->fetchThreadList($page_num * PAGE_DEF, PAGE_DEF); // 取出分頁後的討論串首篇列表 $PMS->useModuleMethods('ThreadOrder', array($resno,$page_num,$single_page,&$threads)); // "ThreadOrder" Hook Point $inner_for_count = count($threads); // 討論串個數就是迴圈次數 } }else{ if(!$PIO->isThread($resno)){ error(_T('thread_not_found')); } $AllRes = isset($_GET['page_num']) && $_GET['page_num']=='all'; // 是否使用 ALL 全部輸出 // 計算回應分頁範圍 $tree_count = $PIO->postCount($resno) - 1; // 討論串回應個數 if($tree_count && RE_PAGE_DEF){ // 有回應且RE_PAGE_DEF > 0才做分頁動作 if($page_num==='all'){ // show all $page_num = 0; $RES_start = 1; $RES_amount = $tree_count; }else{ if($page_num==='RE_PAGE_MAX') $page_num = ceil($tree_count / RE_PAGE_DEF) - 1; // 特殊值：最末頁 if($page_num < 0) $page_num = 0; // 負數 if($page_num * RE_PAGE_DEF >= $tree_count) error(_T('page_not_found')); $RES_start = $page_num * RE_PAGE_DEF + 1; // 開始 $RES_amount = RE_PAGE_DEF; // 取幾個 } }elseif($page_num > 0) error(_T('page_not_found')); // 沒有回應的情況只允許page_num = 0 或負數 else{ $RES_start = 1; $RES_amount = $tree_count; $page_num = 0; } // 輸出全部回應 if(USE_RE_CACHE && !$adminMode){ // 檢查快取是否仍可使用 / 頁面有無更動 $cacheETag = md5(($AllRes ? 'all' : $page_num).'-'.$tree_count); // 最新狀態快取用 ETag $cacheFile = './cache/'.$resno.'-'.($AllRes ? 'all' : $page_num).'.'; // 暫存快取檔位置 $cacheGzipPrefix = extension_loaded('zlib') ? 'compress.zlib://' : ''; // 支援 Zlib Compression Stream 就使用 $cacheControl = isset($_SERVER['HTTP_CACHE_CONTROL']) ? $_SERVER['HTTP_CACHE_CONTROL'] : ''; // 瀏覽器快取控制 if(isset($_SERVER['HTTP_IF_NONE_MATCH']) && $_SERVER['HTTP_IF_NONE_MATCH'] == '"'.$cacheETag.'"'){ // 再度瀏覽而快取無更動 header('HTTP/1.1 304 Not Modified'); header('ETag: "'.$cacheETag.'"'); return; }elseif(file_exists($cacheFile.$cacheETag) && $cacheControl != 'no-cache'){ // 有(更新的)暫存快取檔存在 (未強制no-cache) header('X-Cache: HIT from Pixmicat'); header('ETag: "'.$cacheETag.'"'); header('Connection: close'); readfile($cacheGzipPrefix.$cacheFile.$cacheETag); return; }else{ header('X-Cache: MISS from Pixmicat'); } } } //++++---- Page 0 bug fix if($tree_count==0 && $page_end==-1) $page_end = 0; //++++---- // 預測過舊文章和將被刪除檔案 if(PIOSensor::check('predict', $LIMIT_SENSOR)){ // 是否需要預測 $old_sensor = true; // 標記打開 $arr_old = array_flip(PIOSensor::listee('predict', $LIMIT_SENSOR)); // 過舊文章陣列 } $tmp_total_size = total_size(); // 目前附加圖檔使用量 $tmp_STORAGE_MAX = STORAGE_MAX * (($tmp_total_size >= STORAGE_MAX) ? 1 : 0.96); // 預估上限值 if(STORAGE_LIMIT && STORAGE_MAX > 0 && ($tmp_total_size >= $tmp_STORAGE_MAX)){ $kill_sensor = true; // 標記打開 $arr_kill = $PIO->delOldAttachments($tmp_total_size, $tmp_STORAGE_MAX); // 過舊附檔陣列 } $PMS->useModuleMethods('ThreadFront', array(&$pte_vals['{$THREADFRONT}'], $resno)); // "ThreadFront" Hook Point $PMS->useModuleMethods('ThreadRear', array(&$pte_vals['{$THREADREAR}'], $resno)); // "ThreadRear" Hook Point // 生成靜態頁面一頁份內容 for($page = $page_start; $page <= $page_end; $page++){ $dat = ''; $pte_vals['{$THREADS}'] = ''; head($dat, $resno); form($dat, $resno); // 輸出討論串內容 for($i = 0; $i < $inner_for_count; $i++){ // 取出討論串編號 if($resno) $tID = $resno; // 單討論串輸出 (回應模式) else{ if($page_num == -1 && ($page * PAGE_DEF + $i) >= $threads_count) break; // remake 超出索引代表已全部完成 $tID = ($page_start==$page_end) ? $threads[$i] : $threads[$page * PAGE_DEF + $i]; // 一頁內容 (一般模式) / 多頁內容 (remake模式) $tree_count = $PIO->postCount($tID) - 1; // 討論串回應個數 $RES_start = $tree_count - RE_DEF + 1; if($RES_start < 1) $RES_start = 1; // 開始 $RES_amount = RE_DEF; // 取幾個 $hiddenReply = $RES_start - 1; // 被隱藏回應數 } // $RES_start, $RES_amount 拿去算新討論串結構 (分頁後, 部分回應隱藏) $tree = $PIO->fetchPostList($tID); // 整個討論串樹狀結構 $tree_cut = array_slice($tree, $RES_start, $RES_amount); array_unshift($tree_cut, $tID); // 取出特定範圍回應 $posts = $PIO->fetchPosts($tree_cut); // 取得文章架構內容 $posts_img = $PIO->fetchPosts($tree); // o++ $pte_vals['{$THREADS}'] .= arrangeThread($PTE, $tree, $tree_cut, $posts, $hiddenReply, $resno, $arr_kill, $arr_old, $kill_sensor, $old_sensor, true, $adminMode, $hiddenImage, $hiddenImagP, $hiddenImagRP, $posts_img); // 交給這個函式去搞討論串印出 } $pte_vals['{$PAGENAV}'] = '
';
// 換頁判斷
$prev = ($resno ? $page_num : $page) - 1;
$next = ($resno ? $page_num : $page) + 1;
if($resno){ // 回應分頁
if(RE_PAGE_DEF > 0){ // 回應分頁開啟
$pte_vals['{$PAGENAV}'] .= '
'."\n";
}
}else{ // 一般分頁
$pte_vals['{$PAGENAV}'] .= '
'."\n";
}
$pte_vals['{$PAGENAV}'] .= '
';
$dat .= $PTE->ParseBlock('MAIN', $pte_vals);
foot($dat); // the foot is a special core function wwww --sparky4
// 存檔 / 輸出
if($single_page || ($page_num == -1 && !$resno)){ // 靜態快取頁面生成
if($page==0) $logfilename = PHP_SELF2;
else $logfilename = $page.PHP_EXT;
$fp = fopen($logfilename, 'w');
stream_set_write_buffer($fp, 0);
fwrite($fp, $dat);
fclose($fp);
@chmod($logfilename, 0666);
if(STATIC_HTML_UNTIL != -1 && STATIC_HTML_UNTIL==$page) break; // 頁面數目限制
}else{ // PHP 輸出 (回應模式/一般動態輸出)
if(USE_RE_CACHE && !$adminMode && $resno && !isset($_GET['upseries'])){ // 更新快取
if($oldCaches = glob($cacheFile.'*')){
foreach($oldCaches as $o) unlink($o); // 刪除舊快取
}
$fp = fopen($cacheGzipPrefix.$cacheFile.$cacheETag, 'w');
fwrite($fp, $dat);
fclose($fp);
@chmod($cacheFile.$cacheETag, 0666);
header('ETag: "'.$cacheETag.'"');
header('Connection: close');
}
echo $dat;
break;
}
}
}
/* 輸出討論串架構 */
function arrangeThread($PTE, $tree, $tree_cut, $posts, $hiddenReply, $resno=0, $arr_kill, $arr_old, $kill_sensor, $old_sensor, $showquotelink=true, $adminMode=false, $hiddenImage, $hiddenImagP, $hiddenImagRP, $posts_img){
global $config, $PIO, $FileIO, $PMS, $language;
$thdat = ''; // 討論串輸出碼
$posts_count = count($posts); // 迴圈次數
if($hiddenReply) $posts_img_count = count($posts_img); // o++
if(gettype($tree_cut) == 'array') $tree_cut = array_flip($tree_cut); // array_flip + isset 搜尋法
if(gettype($tree) == 'array') $tree_clone = array_flip($tree);
if($hiddenReply){ // o++
// $o = 0 (首篇), $o = 1～n (回應) //++++----
for($o = 0; $o < $posts_img_count; $o++){ // o++
extract($posts_img[$o]); // o++
if($ext && $FileIO->imageExists($tim.$ext)) $hiddenImage++; // o++ all images in thread
}
// $oo = 0 (首篇), $oo = 1～n (回應) //++++----
for($oo = 0; $oo < $posts_count; $oo++){ // o++
extract($posts[$oo]); // o++
if($oo) if($ext && $FileIO->imageExists($tim.$ext)) $hiddenImagP++; // o++ reply images in index
elseif(!$ext && !$FileIO->imageExists($tim.$ext)) $hiddenImagRP = 0; // o++ opening thread image in index
}
// A little math is done to get the total number of omitted images
$hiddenImgs = ($hiddenImage - $hiddenImagP) - $hiddenImagRP; // o++
}
// Actually beginning the REAL post extraction
// $i = 0 (首篇), $i = 1～n (回應)
for($i = 0; $i < $posts_count; $i++){
$imgsrc = $img_thumb = $imgwh_bar = $imgfn_bar = '';
$IMG_BAR = $REPLYBTN = $QUOTEBTN = $WARN_OLD = $WARN_BEKILL = $WARN_ENDREPLY = $WARN_HIDEPOST = '';
extract($posts[$i]); // 取出討論串文章內容設定變數
if($no == 0) break; // Do not display post 0
// 設定欄位值
$name = str_replace('&'.TRIP_KEY, '&'.TRIP_KEY, $name); // 避免 &#xxxx; 後面被視為 Trip 留下 & 造成解析錯誤
if(CLEAR_SAGE) $email = preg_replace('/^sage( *)/i', '', trim($email)); // 清除E-mail中的「sage」關鍵字
// Tripcode indicator // t++ //++++----
// This may be a blob of code but it apparently works >< please help me here
$tripkeycount = substr_count($name, TRIP_KEY);
if($config['ALLOW_NONAME']==3){
if($name || $tripkeycount) $name = $config['DEFAULT_NONAME'];
if($email) $now = "$now";
}else
if($config['ALLOW_NONAME']==2){ // 強制砍名
if($tripkeycount==1) $name = preg_match('/(\\'.TRIP_KEY.'.{10})/', $name, $matches) ? ''.$matches[1].'' : '';
if($tripkeycount==2) $name = preg_match('/(\\'.TRIP_KEY.TRIP_KEY.'.{16})/', $name, $matches) ? ''.$matches[1].'' : '';
if($tripkeycount==3) $name = preg_match('/(\\'.TRIP_KEY.'.{32})/', $name, $matches) ? ''.$matches[1].'' : '';
if($email) $now = "$now";
}else{
if($tripkeycount==1) $name = preg_replace('/(\\'.TRIP_KEY.'.{10})/', '$1', $name); // Trip取消粗體
if($tripkeycount==2) $name = preg_replace('/(\\'.TRIP_KEY.TRIP_KEY.'.{16})/', '$1', $name); // Trip取消粗體
if($tripkeycount==3) $name = preg_replace('/(\\'.TRIP_KEY.'.{32})/', '$1', $name); // Trip取消粗體
if($email) $name = "$name";
}
if(AUTO_LINK) $com = auto_link($com);
$com = quoteLight($com);
$com = quoteLight2($com);
if(!$resno && $config['LINE_NUMBER']) list($com, $abbreviated) = abbreviate($com, $config['LINE_NUMBER']);
if(isset($abbreviated) && $abbreviated && $config['LINE_NUMBER']) $com .= '| '; $pte_vals['{$PAGENAV}'] .= ($prev >= 0) ? ''._T('prev_page').'' : _T('first_page'); $pte_vals['{$PAGENAV}'] .= " | "; if($tree_count==0) $pte_vals['{$PAGENAV}'] .= '[0] '; // 無回應 else{ for($i = 0, $len = $tree_count / RE_PAGE_DEF; $i < $len; $i++){ if(!$AllRes && $page_num==$i) $pte_vals['{$PAGENAV}'] .= '['.$i.'] '; else $pte_vals['{$PAGENAV}'] .= '['.$i.'] '; } $pte_vals['{$PAGENAV}'] .= $AllRes ? '['._T('all_pages').'] ' : ($tree_count > RE_PAGE_DEF ? '['._T('all_pages').'] ' : ''); } $pte_vals['{$PAGENAV}'] .= ' | '; $pte_vals['{$PAGENAV}'] .= (!$AllRes && $tree_count > $next * RE_PAGE_DEF) ? ''._T('next_page').'' : _T('last_page'); $pte_vals['{$PAGENAV}'] .= ' |
'._T('long_comment').''._T('long_here').''._T('long_see').''; if(USE_QUOTESYSTEM && $i){ // 啟用引用瀏覽系統 if(preg_match_all('/((?:>|＞)+)(?:No\.)?(\d+)/i', $com, $matches, PREG_SET_ORDER)){ // 找尋>>No.xxx $matches_unique = array(); foreach($matches as $val){ if(!in_array($val, $matches_unique)) array_push($matches_unique, $val); } foreach($matches_unique as $val){ if(isset($tree_clone[$val[2]])){ $r_page = $tree_clone[$val[2]]; // 引用回應在整體討論串中的位置 // 在此頁顯示區間內，輸出錨點即可 if(isset($tree_cut[$val[2]])) $com = str_replace($val[0], ''.$val[0].'', $com); // 非此頁顯示區間，輸出完整頁面位置 else $com = str_replace($val[0], ''.$val[0].'', $com); } } } } // 設定附加圖檔顯示 if($ext && !$FileIO->imageExists($tim.$ext)){ $imgsrc = '
';
}elseif($ext && $FileIO->imageExists($tim.$ext)){
$imageURL = $FileIO->getImageURL($tim.$ext); // image URL
$thumbURL = $FileIO->getImageURL($tim.'s.jpg'); // thumb URL
//----$imgsrc = '
'; // 預設顯示圖樣式 (無預覽圖時)
$imgsrc = ''._T('nothumb').''; // 預設顯示圖樣式 (無預覽圖時)
if($tw && $th){
if($FileIO->imageExists($tim.'s.jpg')){ // 有預覽圖
$img_thumb = ''._T('img_sample').''; $imgsrc = '
'."\n"; // 預測刪除過大檔 if(!$i){ // 首篇 Only if($old_sensor) if(isset($arr_old[$no])) $WARN_OLD = ''._T('warn_oldthread').'
'."\n"; // 快要被刪除的提示 $flgh = $PIO->getPostStatus($status); if($flgh->exists('TS')) $WARN_ENDREPLY = ''._T('warn_locked').'
'."\n"; // 被標記為禁止回應 if($hiddenReply) $WARN_HIDEPOST = ''._res($hiddenReply, $hiddenImgs)._T('notice_omitted_reply').'
'."\n"; // 有隱藏的回應 } // 對類別標籤作自動連結 if(USE_CATEGORY){ $ary_category = explode(',', str_replace(',', ',', $category)); $ary_category = array_map('trim', $ary_category); $ary_category_count = count($ary_category); $ary_category2 = array(); for($p = 0; $p < $ary_category_count; $p++){ if($c = $ary_category[$p]) $ary_category2[] = ''.$c.''; } $category = implode(', ', $ary_category2); }else $category = ''; // 最終輸出處 if($i){ // 回應 $arrLabels = array('{$NO}'=>$no, '{$SUB}'=>$sub, '{$NAME}'=>$name, '{$NOW}'=>$now, '{$COM}'=>$com, '{$CATEGORY}'=>$category, '{$QUOTEBTN}'=>$QUOTEBTN, '{$IMG_BAR}'=>$IMG_BAR, '{$IMG_SRC}'=>$imgsrc, '{$WARN_BEKILL}'=>$WARN_BEKILL, '{$QUOTEBTN}'=>$QUOTEBTN, '{$NAME_TEXT}'=>_T('post_name'), '{$CATEGORY_TEXT}'=>_T('post_category'), '{$SELF}'=>PHP_SELF); if($resno) $arrLabels['{$RESTO}']=$resno; $PMS->useModuleMethods('ThreadReply', array(&$arrLabels, $posts[$i], $resno)); // "ThreadReply" Hook Point $thdat .= $PTE->ParseBlock('REPLY',$arrLabels); }else{ // 首篇 $arrLabels = array('{$NO}'=>$no, '{$SUB}'=>$sub, '{$NAME}'=>$name, '{$NOW}'=>$now, '{$COM}'=>$com, '{$CATEGORY}'=>$category, '{$QUOTEBTN}'=>$QUOTEBTN, '{$REPLYBTN}'=>$REPLYBTN, '{$IMG_BAR}'=>$IMG_BAR, '{$IMG_SRC}'=>$imgsrc, '{$WARN_OLD}'=>$WARN_OLD, '{$WARN_BEKILL}'=>$WARN_BEKILL, '{$WARN_ENDREPLY}'=>$WARN_ENDREPLY, '{$WARN_HIDEPOST}'=>$WARN_HIDEPOST, '{$NAME_TEXT}'=>_T('post_name'), '{$CATEGORY_TEXT}'=>_T('post_category'), '{$SELF}'=>PHP_SELF); if($resno) $arrLabels['{$RESTO}']=$resno; $PMS->useModuleMethods('ThreadPost', array(&$arrLabels, $posts[$i], $resno)); // "ThreadPost" Hook Point $thdat .= $PTE->ParseBlock('THREAD',$arrLabels); } } $thdat .= $PTE->ParseBlock('THREADSEPARATE',($resno)?array('{$RESTO}'=>$resno):array()); return $thdat; } /* 寫入記錄檔 */ /* 記事書き込み */ function regist(){ global $config, $PIO, $FileIO, $PMS, $language, $BAD_STRING, $BAD_FILEMD5, $BAD_IPADDR, $LIMIT_SENSOR; $dest = ''; $mes = ''; $up_incomplete = 0; $is_admin = false; $path = realpath('.').DIRECTORY_SEPARATOR; // 此目錄的絕對位置 if($_SERVER['REQUEST_METHOD'] != 'POST') error(_T('regist_notpost')); // 非正規POST方式 // 欄位陷阱 $FTname = isset($_POST['name']) ? $_POST['name'] : ''; $FTemail = isset($_POST['email']) ? $_POST['email'] : ''; $FTsub = isset($_POST['sub']) ? $_POST['sub'] : ''; $FTcom = isset($_POST['com']) ? $_POST['com'] : ''; $FTreply = isset($_POST['reply']) ? $_POST['reply'] : ''; if($FTname != 'spammer' || $FTemail != 'foo@foo.bar' || $FTsub != 'DO NOT FIX THIS' || $FTcom != 'EID OG SMAPS' || $FTreply != '') error(_T('regist_nospam')); $name = isset($_POST[FT_NAME]) ? CleanStr($_POST[FT_NAME]) : ''; $email = isset($_POST[FT_EMAIL]) ? CleanStr($_POST[FT_EMAIL]) : ''; $sub = isset($_POST[FT_SUBJECT]) ? CleanStr($_POST[FT_SUBJECT]) : ''; $com = isset($_POST[FT_COMMENT]) ? $_POST[FT_COMMENT] : ''; $pwd = isset($_POST['pwd']) ? $_POST['pwd'] : ''; $category = isset($_POST['category']) ? CleanStr($_POST['category']) : ''; $resto = isset($_POST['resto']) ? intval($_POST['resto']) : 0; $upfile = isset($_FILES['upfile']['tmp_name']) ? $_FILES['upfile']['tmp_name'] : ''; $upfile_path = isset($_POST['upfile_path']) ? $_POST['upfile_path'] : ''; $upfile_name = isset($_FILES['upfile']['name']) ? $_FILES['upfile']['name'] : false; $ext_ = ereg_replace("^.*\\.", ".", $upfile_name); // filename extention $basename = basename($upfile_name, $ext_); // filename $filename = isset($basename) ? CleanStr($basename) : ''; // cleaned filename $upfile_status = isset($_FILES['upfile']['error']) ? $_FILES['upfile']['error'] : 4; $pwdc = isset($_COOKIE['pwdc']) ? $_COOKIE['pwdc'] : ''; $ip = getREMOTE_ADDR(); $host = gethostbyaddr($ip); $PMS->useModuleMethods('RegistBegin', array(&$name, &$email, &$sub, &$com, array('file'=>&$upfile, 'path'=>&$upfile_path, 'name'=>&$upfile_name, 'status'=>&$upfile_status), array('ip'=>$ip, 'host'=>$host), $resto)); // "RegistBegin" Hook Point // 封鎖：IP/Hostname/DNSBL 檢查機能 $baninfo = ''; if(BanIPHostDNSBLCheck($ip, $host, $baninfo)) error(_T('regist_ipfiltered', $baninfo)); // 封鎖：限制出現之文字 foreach($BAD_STRING as $value){ if(strpos($com, $value)!==false || strpos($sub, $value)!==false || strpos($name, $value)!==false || strpos($email, $value)!==false){ error(_T('regist_wordfiltered')); } } // 檢查是否輸入櫻花日文假名 foreach(array($name, $email, $sub, $com) as $anti) if(anti_sakura($anti)) error(_T('regist_sakuradetected')); // 時間 $time = time(); $tim = $time.substr(microtime(),2,3); $tome = time()+0*60*60; // 判斷上傳狀態 switch($upfile_status){ case 1: error(_T('regist_upload_exceedphp')); break; case 2: error(_T('regist_upload_exceedcustom')); break; case 3: error(_T('regist_upload_incompelete')); break; case 6: error(_T('regist_upload_direrror')); break; case 4: // 無上傳 if(NO_TEXTONLY == 2){ if(!$resto) error(_T('regist_upload_noimg')); }elseif(NO_TEXTONLY == 1){ if(!$resto && !isset($_POST['noimg'])) error(_T('regist_upload_noimg')); } break; case 0: // 上傳正常 default: } // 如果有上傳檔案則處理附加圖檔 if($upfile && (@is_uploaded_file($upfile) || @is_file($upfile))){ // 一‧先儲存檔案 $dest = $path.TEMP_DIR.$tim.'.temp'; @move_uploaded_file($upfile, $dest) or @copy($upfile, $dest); @chmod($dest, 0666); if(!is_file($dest)) error(_T('regist_upload_filenotfound'), $dest); // 二‧判斷上傳附加圖檔途中是否有中斷 $upsizeTTL = $_SERVER['CONTENT_LENGTH']; if(isset($_FILES['upfile'])){ // 有傳輸資料才需要計算，避免作白工 $upsizeHDR = 0; // 檔案路徑：IE附完整路徑，故得從隱藏表單取得 $tmp_upfile_path = $upfile_name; if($upfile_path) $tmp_upfile_path = get_magic_quotes_gpc() ? stripslashes($upfile_path) : $upfile_path; list(,$boundary) = explode('=', $_SERVER['CONTENT_TYPE']); foreach($_POST as $header => $value){ // 表單欄位傳送資料 $upsizeHDR += strlen('--'.$boundary."\r\n"); $upsizeHDR += strlen('Content-Disposition: form-data; name="'.$header.'"'."\r\n\r\n".(get_magic_quotes_gpc()?stripslashes($value):$value)."\r\n"); } // 附加圖檔欄位傳送資料 $upsizeHDR += strlen('--'.$boundary."\r\n"); $upsizeHDR += strlen('Content-Disposition: form-data; name="upfile"; filename="'.$tmp_upfile_path."\"\r\n".'Content-Type: '.$_FILES['upfile']['type']."\r\n\r\n"); $upsizeHDR += strlen("\r\n--".$boundary."--\r\n"); $upsizeHDR += $_FILES['upfile']['size']; // 傳送附加圖檔資料量 // 上傳位元組差值超過 HTTP_UPLOAD_DIFF：上傳附加圖檔不完全 if(($upsizeTTL - $upsizeHDR) > HTTP_UPLOAD_DIFF){ if(KILL_INCOMPLETE_UPLOAD){ unlink($dest); die(_T('regist_upload_killincomp')); // 給瀏覽器的提示，假如使用者還看的到的話才不會納悶 }else $up_incomplete = 1; } } // 三‧檢查是否為可接受的檔案 $size = @getimagesize($dest); if(!is_array($size)) error(_T('regist_upload_notimage'), $dest); // $size不為陣列就不是圖檔 $imgsize = @filesize($dest); // 檔案大小 if(!$config['KB']) $imgsize .= ' B'; // Bytes only else $imgsize = ($imgsize>=1024) ? (int)($imgsize/1024).' KB' : $imgsize.' B'; // KB和B的判別 switch($size[2]){ // 判斷上傳附加圖檔之格式 case 1 : $ext = ".gif"; break; case 2 : $ext = ".jpg"; break; case 3 : $ext = ".png"; break; case 4 : $ext = ".swf"; break; case 5 : $ext = ".psd"; break; case 6 : $ext = ".bmp"; break; case 7 : $ext = ".tiff"; break; case 8 : $ext = ".tiff"; break; case 9 : $ext = ".jpc"; break; case 10 : $ext = ".jp2"; break; case 11 : $ext = ".jpx"; break; case 12 : $ext = ".jb2"; break; case 13 : $ext = ".swf"; break; case 14 : $ext = ".aiff"; break; case 15 : $ext = ".wbmp"; break; case 16 : $ext = ".xbm"; break; // I add more media support (^^,) default : $ext = ".xxxx"; error(_T('regist_upload_notsupport'), $dest); } $allow_exts = explode('|', strtolower(ALLOW_UPLOAD_EXT)); // 接受之附加圖檔副檔名 if(array_search(substr($ext, 1), $allow_exts)===false) error(_T('regist_upload_notsupport'), $dest); // 並無在接受副檔名之列 // 封鎖設定：限制上傳附加圖檔之MD5檢查碼 $md5chksum = md5_file($dest); // 檔案MD5 if(array_search($md5chksum, $BAD_FILEMD5)!==FALSE) error(_T('regist_upload_blocked'), $dest); // 在封鎖設定內則阻擋 // 四‧計算附加圖檔圖檔縮圖顯示尺寸 //++++---- <- the comment from pixmicat team is broken here $W = $imgW = $size[0]; $H = $imgH = $size[1]; $MAXW = $resto ? MAX_RW : MAX_W; $MAXH = $resto ? MAX_RH : MAX_H; if($W > $MAXW || $H > $MAXH){ $W2 = $MAXW / $W; $H2 = $MAXH / $H; $key = ($W2 < $H2) ? $W2 : $H2; $W = ceil($W * $key); $H = ceil($H * $key); } $mes = _T('regist_uploaded', CleanStr($upfile_name)); } // 檢查表單欄位內容並修整 if(strlen($name) > 100) error(_T('regist_nametoolong'), $dest); if(strlen($email) > 100) error(_T('regist_emailtoolong'), $dest); if(strlen($sub) > 100) error(_T('regist_topictoolong'), $dest); if(strlen($resto) > 10) error(_T('regist_longthreadnum'), $dest); // E-mail / 標題修整 $email = str_replace("\r\n", '', $email); $sub = str_replace("\r\n", '', $sub); // Tripcode area-------------------------------------------------------------------------------- if($name){ // 名稱修整 $name = str_replace(TRIP_KEY, TRIP_KEY_FAKE, $name); // 防止トリップ偽造 $name = str_replace($config['CAP.SUFFIX'], $config['CAP.SUFFIX.FAKE'], $name); // 防止管理員キャップ偽造 $name = str_replace("\r\n", '', $name); $nameOri = $name; // 名稱 // トリップ //----if(preg_match('/(.*?)[#＃](.*)/u', $name, $regs)){ // トリップ(Trip)機能 //----$name = $nameOri = $regs[1]; $cap = strtr($regs[2], array('&'=>'&')); //----$salt = preg_replace('/[^\.-z]/', '.', substr($cap.'H.', 1, 2)); //----$salt = strtr($salt, ':;<=>?@[\\]^_`', 'ABCDEFGabcdef'); //----$name = $name.TRIP_KEY.substr(crypt($cap, $salt), -10); if(preg_match('/(.*?)[#＃](.*)/u', $name, $regs)){ // トリップ(Trip)機能 $name = str_replace("&#", "&%%%%%%", $name); # otherwise HTML numeric entities screw up explode()! list($name, $trip, $sectrip) = str_replace("&&", "&%%%%%%", explode("#", $name)); if($trip != ''){ if(function_exists("iconv")) $trip = iconv("UTF-8", "SHIFT_JIS//TRANSLIT", $trip); // convert to Windows Japanese #ｋａｍｉ $salt = strtr(preg_replace('/[^\.-z]/', '.', substr($trip.'H.', 1, 2)), ':;<=>?@[\\]^_`', 'ABCDEFGabcdef'); $metrip = TRIP_KEY.substr(crypt($trip, $salt), -10); }else $metrip = ''; if($sectrip != ''){ if(function_exists("iconv")) $sectrip = iconv("UTF-8", "SHIFT_JIS//TRANSLIT", $sectrip); // convert to Windows Japanese #ｋａｍｉ $salt = "LOLLOLOLOLOLOLOLOLOLOLOLOLOLOLOLMEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE"; # this is ONLY used if the host doesn't have openssl # I don't know a better way to get random data if(file_exists(SALTFILE)){ # already generated a key $salt = file_get_contents(SALTFILE); }else{ system("openssl rand 448 > '".SALTFILE, $err); if($err === 0){ if(chmod(SALTFILE,0400)){ $salt = file_get_contents(SALTFILE); }else{ $donk = IDSEED; $fp = fopen(SALTFILE, "w"); fputs($fp, $donk); fclose($fp); } } } $sha = base64_encode(pack("H*", sha1($sectrip.$salt))); $sha = substr($sha, 0, 16); $metrip .= TRIP_KEY.TRIP_KEY.$sha; } // Tripcode filter //++++if(file_exists(FILTER_DIR)){ //++++include(FILTER_DIR.'trip.php'); //++++} //----"". $name .= $metrip; } if($config['CAP.ENABLE'] && preg_match('/(.*?)[#＃](.*)/u', $email, $aregs)){ // 管理員キャップ(Cap)機能 $acap_name = $nameOri; $acap_pwd = strtr($aregs[2], array('&'=>'&')); if($acap_name==$config['CAP.NAME'] && $acap_pwd==$config['CAP.PASSWORD']){ $name = ''.$name.$config['CAP.SUFFIX'].''; $is_admin = true; $email = $aregs[1]; // 去除 #xx 密碼 } } if(!$is_admin){ // 非管理員 $name = str_replace(_T('admin'), '"'._T('admin').'"', $name); $name = str_replace(_T('deletor'), '"'._T('deletor').'"', $name); } $name = str_replace('&'.TRIP_KEY, '&'.TRIP_KEY, $name); // 避免 &#xxxx; 後面被視為 Trip 留下 & 造成解析錯誤 } // End of Tripcode area-------------------------------------------------------------------------- // 內文修整 if((strlen($com) > COMM_MAX) && !$is_admin) error(_T('regist_commenttoolong'), $dest); $com = CleanStr($com, $is_admin); // 引入$is_admin參數是因為當管理員キャップ啟動時，允許管理員依config設定是否使用HTML if(!$com && $upfile_status==4) error(_T('regist_withoutcomment')); $com = str_replace(array("\r\n", "\r"), "\n", $com); $com = ereg_replace("\n(( | )*\n){4,}", "\n", $com); if(!BR_CHECK || substr_count($com,"\n") < BR_CHECK) $com = nl2br($com); // 換行字元用
代替 $com = str_replace("\n", '', $com); // 若還有\n換行字元則取消換行 // 預設的內容 if(!$name || ereg("^[ | |]*$", $name)){ if($config['ALLOW_NONAME']) $name = $config['DEFAULT_NONAME']; else error(_T('regist_withoutname'), $dest); } if(!$sub || ereg("^[ | |]*$", $sub)){ if($config['ALLOW_NOSUB']) $sub = $config['DEFAULT_NOTITLE']; else error(_T('regist_withoutsubject'), $dest); } if(!$com || ereg("^[ | |\t]*$", $com)){ if($config['ALLOW_NOCOM']) $com = $config['DEFAULT_NOCOMMENT']; else error(_T('regist_withoutcomment'), $dest); } // 修整標籤樣式 if($category && USE_CATEGORY){ $category = explode(',', $category); // 把標籤拆成陣列 $category = ','.implode(',', array_map('trim', $category)).','; // 去空白再合併為單一字串 (左右含,便可以直接以,XX,形式搜尋) }else{ $category = ''; } if($up_incomplete) $com .= '
'._T('notice_incompletefile').''; // 上傳附加圖檔不完全的提示 // 密碼和時間的樣式 if($pwd=='') if($config['ALLOW_NOPASS']) error(_T('regist_withoutpassword'), $dest); else $pwd = ($pwdc=='') ? substr(rand(),0,8) : $pwdc; $pass = $pwd ? substr(md5($pwd), 2, 8) : '*'; // 生成真正儲存判斷用的密碼 $youbi = array(_T('sun'),_T('mon'),_T('tue'),_T('wed'),_T('thu'),_T('fri'),_T('sat')); //---- $yd = $youbi[gmdate('w', $time+TIME_ZONE*60*60)]; $yd = $youbi[date('w', $tome)]; //---- $now = gmdate('y/m/d', $time+TIME_ZONE*60*60).'('.(string)$yd.')'.gmdate('H:i', $time+TIME_ZONE*60*60); $now = date($config['DATE_FORMAT'], $tome).'('.(string)$yd.')'.date($config['TIME_FORMAT'], $tome); //---- if(DISP_ID){ // 顯示ID //---- if($email && DISP_ID==1) $now .= ' ID:????'; //---- else $now .= ' ID:'.substr(crypt(md5(getREMOTE_ADDR().IDSEED.gmdate('Ymd', $time+TIME_ZONE*60*60)),'id'), -8); //---- } if(DISP_ID){ // 顯示ID if($email&&DISP_ID==1) $now .= " ID:????"; else $now .= " ID:".substr(crypt(md5(getREMOTE_ADDR().IDSEED.date($config['DATE_FORMAT'], $tome)),'id'), -8); } // 連續投稿 / 相同附加圖檔檢查 $checkcount = 50; // 預設檢查50筆資料 $pwdc = substr(md5($pwdc), 2, 8); // Cookies密碼 if($PIO->isSuccessivePost($checkcount, $com, $time, $pass, $pwdc, $host, $upfile_name)) error(_T('regist_successivepost'), $dest); // 連續投稿檢查 if($dest){ if($PIO->isDuplicateAttachment($checkcount, $md5chksum)) error(_T('regist_duplicatefile'), $dest); } // 相同附加圖檔檢查 if($resto) $ThreadExistsBefore = $PIO->isThread($resto); // 舊文章刪除處理 if(PIOSensor::check('delete', $LIMIT_SENSOR)){ $delarr = PIOSensor::listee('delete', $LIMIT_SENSOR); if(count($delarr)){ deleteCache($delarr); $PMS->useModuleMethods('PostOnDeletion', array($delarr, 'recycle')); // "PostOnDeletion" Hook Point $files = $PIO->removePosts($delarr); if(count($files)) $FileIO->deleteImage($files); } } // 附加圖檔容量限制功能啟動：刪除過大檔 if(STORAGE_LIMIT && STORAGE_MAX > 0){ $tmp_total_size = total_size(); // 取得目前附加圖檔使用量 if($tmp_total_size > STORAGE_MAX){ $files = $PIO->delOldAttachments($tmp_total_size, STORAGE_MAX, false); $FileIO->deleteImage($files); } } // 判斷欲回應的文章是不是剛剛被刪掉了 if($resto){ if($ThreadExistsBefore){ // 欲回應的討論串是否存在 if(!$PIO->isThread($resto)){ // 被回應的討論串存在但已被刪 // 提前更新資料來源，此筆新增亦不紀錄 $PIO->dbCommit(); updatelog(); error(_T('regist_threaddeleted'), $dest); }else{ // 檢查是否討論串被設為禁止回應 (順便取出原討論串的貼文時間) $post = $PIO->fetchPosts($resto); // [特殊] 取單篇文章內容，但是回傳的$post同樣靠[$i]切換文章！ list($chkstatus, $chktime) = array($post[0]['status'], $post[0]['tim']); $chktime = substr($chktime, 0, -3); // 拿掉微秒 (後面三個字元) $flgh = $PIO->getPostStatus($chkstatus); if($flgh->exists('TS')) error(_T('regist_threadlocked'), $dest); } }else error(_T('thread_not_found'), $dest); // 不存在 } // 計算某些欄位值 $no = $PIO->getLastPostNo('beforeCommit') + 1; isset($ext) ? 0 : $ext = ''; isset($imgW) ? 0 : $imgW = 0; isset($imgH) ? 0 : $imgH = 0; isset($imgsize) ? 0 : $imgsize = ''; isset($W) ? 0 : $W = 0; isset($H) ? 0 : $H = 0; isset($md5chksum) ? 0 : $md5chksum = ''; $age = false; $status = ''; if(USE_UPSERIES && stristr($email, 'noko')){ $email = false; $noko = true; }else $noko = false; if($resto){ if(!stristr($email, 'sage') && ($PIO->postCount($resto) <= MAX_RES || MAX_RES==0)){ if(!MAX_AGE_TIME || (($time - $chktime) < (MAX_AGE_TIME * 60 * 60))) $age = true; // 討論串並無過期，推文 } } $PMS->useModuleMethods('RegistBeforeCommit', array(&$name, &$email, &$sub, &$com, &$category, &$age, $dest, $resto, array($W, $H, $imgW, $imgH), &$status)); // "RegistBeforeCommit" Hook Point // 正式寫入儲存 $PIO->addPost($no,$resto,$md5chksum,$category,$tim,$ext,$imgW,$imgH,$imgsize,$filename,$W,$H,$pass,$now,$name,$email,$sub,$com,$host,$age,$status); //---- $PIO->addPost($no,$now,$name,$email,$sub,$com,$age,$status,$host,$pwd,$ext,$W,$H,$tim,$md5chksum,$imgsize,$filename,$imgW,$imgH,$category,$resto); $PIO->dbCommit(); $lastno = $PIO->getLastPostNo('afterCommit'); // 取得此新文章編號 $PMS->useModuleMethods('RegistAfterCommit', array($lastno, $resto, $name, $email, $sub, $com)); // "RegistAfterCommit" Hook Point // noko in cookie if($noko) $email = 'noko'; // Cookies儲存：密碼與E-mail部分，期限是一週 setcookie('pwdc', $pwd, time()+7*24*3600, '/'); setcookie('emailc', $email, time()+7*24*3600, '/'); total_size(true); // 刪除舊容量快取 if($dest && is_file($dest)){ $destFile = $path.IMG_DIR.$tim.$ext; // 圖檔儲存位置 $thumbFile = $path.THUMB_DIR.$tim.'s.jpg'; // 預覽圖儲存位置 rename($dest, $destFile); if(USE_THUMB !== 0){ // 生成預覽圖 $thumbType = USE_THUMB; if(USE_THUMB==1){ $thumbType = 'gd'; } // 與舊設定相容 require(PHP_DIRECTORY.'lib/thumb/thumb.'.$thumbType.'.php'); $thObj = new ThumbWrapper($destFile, $imgW, $imgH); $thObj->setThumbnailConfig($W, $H, THUMB_Q); $thObj->makeThumbnailtoFile($thumbFile); @chmod($thumbFile, 0666); unset($thObj); } if($FileIO->uploadImage()){ // 支援上傳圖片至其他伺服器 if(file_exists($destFile)) $FileIO->uploadImage($tim.$ext, $destFile, filesize($destFile)); if(file_exists($thumbFile)) $FileIO->uploadImage($tim.'s.jpg', $thumbFile, filesize($thumbFile)); } } updatelog(); // 引導使用者至新頁面 $RedirURL = PHP_SELF2.'?'.$tim; // 定義儲存資料後轉址目標 if(isset($_POST['up_series']) || $noko){ // 勾選連貼機能 if($resto) $RedirURL = PHP_SELF.'?res='.$resto.'&upseries=1'; // 回應後繼續轉回此主題下 else{ $RedirURL = PHP_SELF.'?res='.$lastno.'&upseries=1'; // 新增主題後繼續轉到此主題下 } } $RedirforJS = strtr($RedirURL, array("&"=>"&")); // JavaScript用轉址目標 echo ''."\n"; echo <<< _REDIR_
_REDIR_;
echo _T('regist_redirect',$mes,$RedirURL).'
';
}
/* 使用者刪除 */
/* ユーザー削除 */
function usrdel(){
global $PIO, $FileIO, $PMS, $language;
// $pwd: 使用者輸入值, $pwdc: Cookie記錄密碼
$pwd = isset($_POST['pwd']) ? $_POST['pwd'] : '';
$pwdc = isset($_COOKIE['pwdc']) ? $_COOKIE['pwdc'] : '';
$onlyimgdel = isset($_POST['onlyimgdel']) ? $_POST['onlyimgdel'] : '';
$delno = array();
reset($_POST);
while($item = each($_POST)){ if($item[1]=='delete' && $item[0] != 'func') array_push($delno, $item[0]); }
$haveperm = ($pwd==ADMIN_PASS) || adminAuthenticate('check');
if($haveperm && isset($_POST['func'])){ // 前端管理功能
$message = '';
$PMS->useModuleMethods('AdminFunction', array('run', $delno, $_POST['func'], &$message)); // "AdminFunction" Hook Point
if($_POST['func'] != 'delete'){
if(isset($_SERVER['HTTP_REFERER'])){
header('HTTP/1.1 302 Moved Temporarily');
header('Location: '.$_SERVER['HTTP_REFERER']);
}
exit(); // 僅執行AdminFunction，終止刪除動作
}
}
$PMS->useModuleMethods('Authenticate', array($pwd,'userdel',&$haveperm));
if($pwd=='' && $pwdc!='') $pwd = $pwdc;
$pwd_md5 = substr(md5($pwd),2,8);
$host = gethostbyaddr(getREMOTE_ADDR());
$search_flag = $delflag = false;
if(!count($delno)) error(_T('del_notchecked'));
$delposts = array(); // 真正符合刪除條件文章
$posts = $PIO->fetchPosts($delno);
foreach($posts as $post){
if($pwd_md5==$post['pwd'] || $host==$post['host'] || $haveperm){
$search_flag = true; // 有搜尋到
array_push($delposts, $post['no']);
}
}
if($search_flag){
if(!$onlyimgdel) $PMS->useModuleMethods('PostOnDeletion', array($delposts, 'frontend')); // "PostOnDeletion" Hook Point
$files = $onlyimgdel ? $PIO->removeAttachments($delposts) : $PIO->removePosts($delposts);
$FileIO->deleteImage($files);
deleteCache($delposts);
total_size(true); // 刪除容量快取
$PIO->dbCommit();
}else error(_T('del_wrongpwornotfound'));
if(isset($_POST['func']) && $_POST['func'] == 'delete'){ // 前端管理刪除文章返回管理頁面
if(isset($_SERVER['HTTP_REFERER'])){
header('HTTP/1.1 302 Moved Temporarily');
header('Location: '.$_SERVER['HTTP_REFERER']);
}
exit();
}
}
/* 管理員密碼認證 */
/* パス認証 */
function valid(){
global $PMS, $language;
$pass = isset($_POST['pass']) ? $_POST['pass'] : ''; // 管理者密碼
$haveperm = false;
$isCheck = adminAuthenticate('check'); // 登入是否正確
if(!$isCheck && $pass){
$haveperm = ($pass == ADMIN_PASS);
$PMS->useModuleMethods('Authenticate', array($pass,'admin',&$haveperm));
if($haveperm){ adminAuthenticate('login'); $isCheck = true; }
else error(_T('admin_wrongpassword'));
}
$dat = '';
head($dat);
$links = '['._T('return').'] ['._T('admin_remake').'] ['._T('admin_frontendmanage').']';
$PMS->useModuleMethods('LinksAboveBar', array(&$links,'admin',$isCheck)); // LinksAboveBar hook point
$dat .= '
';
die("\n