~azzar1/unity/add-show-desktop-key

« back to all changes in this revision

Viewing changes to www/php/phpBB3/includes/acp/acp_attachments.php

  • Committer: dcoles
  • Date: 2008-02-13 04:10:55 UTC
  • Revision ID: svn-v3-trunk0:2b9c9e99-6f39-0410-b283-7f802c844ae2:trunk:443
Added Forum application along with unmodifed version of phpBB3 "Olympus" 3.0.0

Show diffs side-by-side

added added

removed removed

Lines of Context:
 
1
<?php
 
2
/**
 
3
*
 
4
* @package acp
 
5
* @version $Id: acp_attachments.php,v 1.55 2007/10/05 14:36:32 acydburn Exp $
 
6
* @copyright (c) 2005 phpBB Group
 
7
* @license http://opensource.org/licenses/gpl-license.php GNU Public License
 
8
*
 
9
*/
 
10
 
 
11
/**
 
12
* @ignore
 
13
*/
 
14
if (!defined('IN_PHPBB'))
 
15
{
 
16
        exit;
 
17
}
 
18
 
 
19
/**
 
20
* @package acp
 
21
*/
 
22
class acp_attachments
 
23
{
 
24
        var $u_action;
 
25
        var $new_config;
 
26
        
 
27
        function main($id, $mode)
 
28
        {
 
29
                global $db, $user, $auth, $template, $cache;
 
30
                global $config, $phpbb_admin_path, $phpbb_root_path, $phpEx;
 
31
 
 
32
                $user->add_lang(array('posting', 'viewtopic', 'acp/attachments'));
 
33
 
 
34
                $error = $notify = array();
 
35
                $submit = (isset($_POST['submit'])) ? true : false;
 
36
                $action = request_var('action', '');
 
37
 
 
38
                $form_key = 'acp_attach';
 
39
                add_form_key($form_key);
 
40
 
 
41
                if ($submit && !check_form_key($form_key))
 
42
                {
 
43
                        trigger_error($user->lang['FORM_INVALID'] . adm_back_link($this->u_action), E_USER_WARNING);
 
44
                }
 
45
 
 
46
                switch ($mode)
 
47
                {
 
48
                        case 'attach':
 
49
                                $l_title = 'ACP_ATTACHMENT_SETTINGS';
 
50
                        break;
 
51
 
 
52
                        case 'extensions':
 
53
                                $l_title = 'ACP_MANAGE_EXTENSIONS';
 
54
                        break;
 
55
 
 
56
                        case 'ext_groups':
 
57
                                $l_title = 'ACP_EXTENSION_GROUPS';
 
58
                        break;
 
59
        
 
60
                        case 'orphan':
 
61
                                $l_title = 'ACP_ORPHAN_ATTACHMENTS';
 
62
                        break;
 
63
 
 
64
                        default:
 
65
                                trigger_error('NO_MODE', E_USER_ERROR);
 
66
                        break;
 
67
                }
 
68
 
 
69
                $this->tpl_name = 'acp_attachments';
 
70
                $this->page_title = $l_title;
 
71
 
 
72
                $template->assign_vars(array(
 
73
                        'L_TITLE'                       => $user->lang[$l_title],
 
74
                        'L_TITLE_EXPLAIN'       => $user->lang[$l_title . '_EXPLAIN'],
 
75
                        'U_ACTION'                      => $this->u_action)
 
76
                );
 
77
 
 
78
                switch ($mode)
 
79
                {
 
80
                        case 'attach':
 
81
 
 
82
                                include_once($phpbb_root_path . 'includes/functions_posting.' . $phpEx);
 
83
 
 
84
                                $sql = 'SELECT group_name, cat_id
 
85
                                        FROM ' . EXTENSION_GROUPS_TABLE . '
 
86
                                        WHERE cat_id > 0
 
87
                                        ORDER BY cat_id';
 
88
                                $result = $db->sql_query($sql);
 
89
 
 
90
                                $s_assigned_groups = array();
 
91
                                while ($row = $db->sql_fetchrow($result))
 
92
                                {
 
93
                                        $s_assigned_groups[$row['cat_id']][] = $row['group_name'];
 
94
                                }
 
95
                                $db->sql_freeresult($result);
 
96
 
 
97
                                $l_legend_cat_images = $user->lang['SETTINGS_CAT_IMAGES'] . ' [' . $user->lang['ASSIGNED_GROUP'] . ': ' . ((!empty($s_assigned_groups[ATTACHMENT_CATEGORY_IMAGE])) ? implode(', ', $s_assigned_groups[ATTACHMENT_CATEGORY_IMAGE]) : $user->lang['NO_EXT_GROUP']) . ']';
 
98
 
 
99
                                $display_vars = array(
 
100
                                        'title' => 'ACP_ATTACHMENT_SETTINGS',
 
101
                                        'vars'  => array(
 
102
                                                'img_max_width' => false, 'img_max_height' => false, 'img_link_width' => false, 'img_link_height' => false,
 
103
 
 
104
                                                'legend1'                               => 'ACP_ATTACHMENT_SETTINGS',
 
105
                                                'allow_attachments'             => array('lang' => 'ALLOW_ATTACHMENTS',         'validate' => 'bool',   'type' => 'radio:yes_no', 'explain' => false),
 
106
                                                'allow_pm_attach'               => array('lang' => 'ALLOW_PM_ATTACHMENTS',      'validate' => 'bool',   'type' => 'radio:yes_no', 'explain' => false),
 
107
                                                'upload_path'                   => array('lang' => 'UPLOAD_DIR',                        'validate' => 'wpath',  'type' => 'text:25:100', 'explain' => true),
 
108
                                                'display_order'                 => array('lang' => 'DISPLAY_ORDER',                     'validate' => 'bool',   'type' => 'custom', 'method' => 'display_order', 'explain' => true),
 
109
                                                'attachment_quota'              => array('lang' => 'ATTACH_QUOTA',                      'validate' => 'string', 'type' => 'custom', 'method' => 'max_filesize', 'explain' => true),
 
110
                                                'max_filesize'                  => array('lang' => 'ATTACH_MAX_FILESIZE',       'validate' => 'string', 'type' => 'custom', 'method' => 'max_filesize', 'explain' => true),
 
111
                                                'max_filesize_pm'               => array('lang' => 'ATTACH_MAX_PM_FILESIZE','validate' => 'string',     'type' => 'custom', 'method' => 'max_filesize', 'explain' => true),
 
112
                                                'max_attachments'               => array('lang' => 'MAX_ATTACHMENTS',           'validate' => 'int',    'type' => 'text:3:3', 'explain' => false),
 
113
                                                'max_attachments_pm'    => array('lang' => 'MAX_ATTACHMENTS_PM',        'validate' => 'int',    'type' => 'text:3:3', 'explain' => false),
 
114
                                                'secure_downloads'              => array('lang' => 'SECURE_DOWNLOADS',          'validate' => 'bool',   'type' => 'radio:yes_no', 'explain' => true),
 
115
                                                'secure_allow_deny'             => array('lang' => 'SECURE_ALLOW_DENY',         'validate' => 'int',    'type' => 'custom', 'method' => 'select_allow_deny', 'explain' => true),
 
116
                                                'secure_allow_empty_referer' => array('lang' => 'SECURE_EMPTY_REFERRER', 'validate' => 'bool',  'type' => 'radio:yes_no', 'explain' => true),
 
117
 
 
118
                                                'legend2'                                       => $l_legend_cat_images,
 
119
                                                'img_display_inlined'           => array('lang' => 'DISPLAY_INLINED',           'validate' => 'bool',   'type' => 'radio:yes_no', 'explain' => true),
 
120
                                                'img_create_thumbnail'          => array('lang' => 'CREATE_THUMBNAIL',          'validate' => 'bool',   'type' => 'radio:yes_no', 'explain' => true),
 
121
                                                'img_max_thumb_width'           => array('lang' => 'MAX_THUMB_WIDTH',           'validate' => 'int',    'type' => 'text:7:15', 'explain' => true, 'append' => ' px'),
 
122
                                                'img_min_thumb_filesize'        => array('lang' => 'MIN_THUMB_FILESIZE',        'validate' => 'int',    'type' => 'text:7:15', 'explain' => true, 'append' => ' ' . $user->lang['BYTES']),
 
123
                                                'img_imagick'                           => array('lang' => 'IMAGICK_PATH',                      'validate' => 'string', 'type' => 'text:20:200', 'explain' => true, 'append' => '&nbsp;&nbsp;<span>[ <a href="' . $this->u_action . '&amp;action=imgmagick">' . $user->lang['SEARCH_IMAGICK'] . '</a> ]</span>'),
 
124
                                                'img_max'                                       => array('lang' => 'MAX_IMAGE_SIZE',            'validate' => 'int',    'type' => 'dimension:3:4', 'explain' => true, 'append' => ' px'),
 
125
                                                'img_link'                                      => array('lang' => 'IMAGE_LINK_SIZE',           'validate' => 'int',    'type' => 'dimension:3:4', 'explain' => true, 'append' => ' px'),
 
126
                                        )
 
127
                                );
 
128
 
 
129
                                $this->new_config = $config;
 
130
                                $cfg_array = (isset($_REQUEST['config'])) ? request_var('config', array('' => '')) : $this->new_config;
 
131
                                $error = array();
 
132
 
 
133
                                // We validate the complete config if whished
 
134
                                validate_config_vars($display_vars['vars'], $cfg_array, $error);
 
135
 
 
136
                                // Do not write values if there is an error
 
137
                                if (sizeof($error))
 
138
                                {
 
139
                                        $submit = false;
 
140
                                }
 
141
 
 
142
                                // We go through the display_vars to make sure no one is trying to set variables he/she is not allowed to...
 
143
                                foreach ($display_vars['vars'] as $config_name => $null)
 
144
                                {
 
145
                                        if (!isset($cfg_array[$config_name]) || strpos($config_name, 'legend') !== false)
 
146
                                        {
 
147
                                                continue;
 
148
                                        }
 
149
 
 
150
                                        $this->new_config[$config_name] = $config_value = $cfg_array[$config_name];
 
151
 
 
152
                                        if (in_array($config_name, array('attachment_quota', 'max_filesize', 'max_filesize_pm')))
 
153
                                        {
 
154
                                                $size_var = request_var($config_name, '');
 
155
                                                $this->new_config[$config_name] = $config_value = ($size_var == 'kb') ? round($config_value * 1024) : (($size_var == 'mb') ? round($config_value * 1048576) : $config_value);
 
156
                                        }
 
157
 
 
158
                                        if ($submit)
 
159
                                        {
 
160
                                                set_config($config_name, $config_value);
 
161
                                        }
 
162
                                }
 
163
 
 
164
                                $this->perform_site_list();
 
165
 
 
166
                                if ($submit)
 
167
                                {
 
168
                                        add_log('admin', 'LOG_CONFIG_ATTACH');
 
169
 
 
170
                                        // Check Settings
 
171
                                        $this->test_upload($error, $this->new_config['upload_path'], false);
 
172
 
 
173
                                        if (!sizeof($error))
 
174
                                        {
 
175
                                                trigger_error($user->lang['CONFIG_UPDATED'] . adm_back_link($this->u_action));
 
176
                                        }
 
177
                                }
 
178
 
 
179
                                $template->assign_var('S_ATTACHMENT_SETTINGS', true);
 
180
 
 
181
                                if ($action == 'imgmagick')
 
182
                                {
 
183
                                        $this->new_config['img_imagick'] = $this->search_imagemagick();
 
184
                                }
 
185
 
 
186
                                // We strip eventually manual added convert program, we only want the patch
 
187
                                $this->new_config['img_imagick'] = str_replace(array('convert', '.exe'), array('', ''), $this->new_config['img_imagick']);
 
188
 
 
189
                                $supported_types = get_supported_image_types();
 
190
 
 
191
                                // Check Thumbnail Support
 
192
                                if (!$this->new_config['img_imagick'] && (!isset($supported_types['format']) || !sizeof($supported_types['format'])))
 
193
                                {
 
194
                                        $this->new_config['img_create_thumbnail'] = 0;
 
195
                                }
 
196
 
 
197
                                $template->assign_vars(array(
 
198
                                        'U_SEARCH_IMAGICK'              => $this->u_action . '&amp;action=imgmagick',
 
199
                                        'S_THUMBNAIL_SUPPORT'   => (!$this->new_config['img_imagick'] && (!isset($supported_types['format']) || !sizeof($supported_types['format']))) ? false : true)
 
200
                                );
 
201
 
 
202
                                // Secure Download Options - Same procedure as with banning
 
203
                                $allow_deny = ($this->new_config['secure_allow_deny']) ? 'ALLOWED' : 'DISALLOWED';
 
204
                
 
205
                                $sql = 'SELECT *
 
206
                                        FROM ' . SITELIST_TABLE;
 
207
                                $result = $db->sql_query($sql);
 
208
 
 
209
                                $defined_ips = '';
 
210
                                $ips = array();
 
211
 
 
212
                                while ($row = $db->sql_fetchrow($result))
 
213
                                {
 
214
                                        $value = ($row['site_ip']) ? $row['site_ip'] : $row['site_hostname'];
 
215
                                        if ($value)
 
216
                                        {
 
217
                                                $defined_ips .= '<option' . (($row['ip_exclude']) ? ' class="sep"' : '') . ' value="' . $row['site_id'] . '">' . $value . '</option>';
 
218
                                                $ips[$row['site_id']] = $value;
 
219
                                        }
 
220
                                }
 
221
                                $db->sql_freeresult($result);
 
222
 
 
223
                                $template->assign_vars(array(
 
224
                                        'S_SECURE_DOWNLOADS'    => $this->new_config['secure_downloads'],
 
225
                                        'S_DEFINED_IPS'                 => ($defined_ips != '') ? true : false,
 
226
                                        'S_WARNING'                             => (sizeof($error)) ? true : false,
 
227
 
 
228
                                        'WARNING_MSG'                   => implode('<br />', $error),
 
229
                                        'DEFINED_IPS'                   => $defined_ips,
 
230
 
 
231
                                        'L_SECURE_TITLE'                => $user->lang['DEFINE_' . $allow_deny . '_IPS'],
 
232
                                        'L_IP_EXCLUDE'                  => $user->lang['EXCLUDE_FROM_' . $allow_deny . '_IP'],
 
233
                                        'L_REMOVE_IPS'                  => $user->lang['REMOVE_' . $allow_deny . '_IPS'])
 
234
                                );
 
235
 
 
236
                                // Output relevant options
 
237
                                foreach ($display_vars['vars'] as $config_key => $vars)
 
238
                                {
 
239
                                        if (!is_array($vars) && strpos($config_key, 'legend') === false)
 
240
                                        {
 
241
                                                continue;
 
242
                                        }
 
243
 
 
244
                                        if (strpos($config_key, 'legend') !== false)
 
245
                                        {
 
246
                                                $template->assign_block_vars('options', array(
 
247
                                                        'S_LEGEND'              => true,
 
248
                                                        'LEGEND'                => (isset($user->lang[$vars])) ? $user->lang[$vars] : $vars)
 
249
                                                );
 
250
 
 
251
                                                continue;
 
252
                                        }
 
253
 
 
254
                                        $type = explode(':', $vars['type']);
 
255
 
 
256
                                        $l_explain = '';
 
257
                                        if ($vars['explain'] && isset($vars['lang_explain']))
 
258
                                        {
 
259
                                                $l_explain = (isset($user->lang[$vars['lang_explain']])) ? $user->lang[$vars['lang_explain']] : $vars['lang_explain'];
 
260
                                        }
 
261
                                        else if ($vars['explain'])
 
262
                                        {
 
263
                                                $l_explain = (isset($user->lang[$vars['lang'] . '_EXPLAIN'])) ? $user->lang[$vars['lang'] . '_EXPLAIN'] : '';
 
264
                                        }
 
265
 
 
266
                                        $template->assign_block_vars('options', array(
 
267
                                                'KEY'                   => $config_key,
 
268
                                                'TITLE'                 => $user->lang[$vars['lang']],
 
269
                                                'S_EXPLAIN'             => $vars['explain'],
 
270
                                                'TITLE_EXPLAIN' => $l_explain,
 
271
                                                'CONTENT'               => build_cfg_template($type, $config_key, $this->new_config, $config_key, $vars),
 
272
                                                )
 
273
                                        );
 
274
                
 
275
                                        unset($display_vars['vars'][$config_key]);
 
276
                                }
 
277
 
 
278
                        break;
 
279
 
 
280
                        case 'extensions':
 
281
 
 
282
                                if ($submit || isset($_POST['add_extension_check']))
 
283
                                {
 
284
                                        if ($submit)
 
285
                                        {
 
286
                                                // Change Extensions ?
 
287
                                                $extension_change_list  = request_var('extension_change_list', array(0));
 
288
                                                $group_select_list              = request_var('group_select', array(0));
 
289
 
 
290
                                                // Generate correct Change List
 
291
                                                $extensions = array();
 
292
 
 
293
                                                for ($i = 0, $size = sizeof($extension_change_list); $i < $size; $i++)
 
294
                                                {
 
295
                                                        $extensions[$extension_change_list[$i]]['group_id'] = $group_select_list[$i];
 
296
                                                }
 
297
 
 
298
                                                $sql = 'SELECT *
 
299
                                                        FROM ' . EXTENSIONS_TABLE . '
 
300
                                                        ORDER BY extension_id';
 
301
                                                $result = $db->sql_query($sql);
 
302
 
 
303
                                                while ($row = $db->sql_fetchrow($result))
 
304
                                                {
 
305
                                                        if ($row['group_id'] != $extensions[$row['extension_id']]['group_id'])
 
306
                                                        {
 
307
                                                                $sql = 'UPDATE ' . EXTENSIONS_TABLE . '
 
308
                                                                        SET group_id = ' . (int) $extensions[$row['extension_id']]['group_id'] . '
 
309
                                                                        WHERE extension_id = ' . $row['extension_id'];
 
310
                                                                $db->sql_query($sql);
 
311
 
 
312
                                                                add_log('admin', 'LOG_ATTACH_EXT_UPDATE', $row['extension']);
 
313
                                                        }
 
314
                                                }
 
315
                                                $db->sql_freeresult($result);
 
316
 
 
317
                                                // Delete Extension?
 
318
                                                $extension_id_list = request_var('extension_id_list', array(0));
 
319
 
 
320
                                                if (sizeof($extension_id_list))
 
321
                                                {
 
322
                                                        $sql = 'SELECT extension
 
323
                                                                FROM ' . EXTENSIONS_TABLE . '
 
324
                                                                WHERE ' . $db->sql_in_set('extension_id', $extension_id_list);
 
325
                                                        $result = $db->sql_query($sql);
 
326
                                                        
 
327
                                                        $extension_list = '';
 
328
                                                        while ($row = $db->sql_fetchrow($result))
 
329
                                                        {
 
330
                                                                $extension_list .= ($extension_list == '') ? $row['extension'] : ', ' . $row['extension'];
 
331
                                                        }
 
332
                                                        $db->sql_freeresult($result);
 
333
 
 
334
                                                        $sql = 'DELETE
 
335
                                                                FROM ' . EXTENSIONS_TABLE . '
 
336
                                                                WHERE ' . $db->sql_in_set('extension_id', $extension_id_list);
 
337
                                                        $db->sql_query($sql);
 
338
 
 
339
                                                        add_log('admin', 'LOG_ATTACH_EXT_DEL', $extension_list);
 
340
                                                }
 
341
                                        }
 
342
 
 
343
                                        // Add Extension?
 
344
                                        $add_extension                  = strtolower(request_var('add_extension', ''));
 
345
                                        $add_extension_group    = request_var('add_group_select', 0);
 
346
                                        $add                                    = (isset($_POST['add_extension_check'])) ? true : false;
 
347
 
 
348
                                        if ($add_extension && $add)
 
349
                                        {
 
350
                                                if (!sizeof($error))
 
351
                                                {
 
352
                                                        $sql = 'SELECT extension_id
 
353
                                                                FROM ' . EXTENSIONS_TABLE . "
 
354
                                                                WHERE extension = '" . $db->sql_escape($add_extension) . "'";
 
355
                                                        $result = $db->sql_query($sql);
 
356
                                                        
 
357
                                                        if ($row = $db->sql_fetchrow($result))
 
358
                                                        {
 
359
                                                                $error[] = sprintf($user->lang['EXTENSION_EXIST'], $add_extension);
 
360
                                                        }
 
361
                                                        $db->sql_freeresult($result);
 
362
 
 
363
                                                        if (!sizeof($error))
 
364
                                                        {
 
365
                                                                $sql_ary = array(
 
366
                                                                        'group_id'      =>      $add_extension_group,
 
367
                                                                        'extension'     =>      $add_extension
 
368
                                                                );
 
369
 
 
370
                                                                $db->sql_query('INSERT INTO ' . EXTENSIONS_TABLE . ' ' . $db->sql_build_array('INSERT', $sql_ary));
 
371
                                                                add_log('admin', 'LOG_ATTACH_EXT_ADD', $add_extension);
 
372
                                                        }
 
373
                                                }
 
374
                                        }
 
375
 
 
376
                                        if (!sizeof($error))
 
377
                                        {
 
378
                                                $notify[] = $user->lang['EXTENSIONS_UPDATED'];
 
379
                                        }
 
380
 
 
381
                                        $cache->destroy('_extensions');
 
382
                                }
 
383
 
 
384
                                $template->assign_vars(array(
 
385
                                        'S_EXTENSIONS'                  => true,
 
386
                                        'ADD_EXTENSION'                 => (isset($add_extension)) ? $add_extension : '',
 
387
                                        'GROUP_SELECT_OPTIONS'  => (isset($_POST['add_extension_check'])) ? $this->group_select('add_group_select', $add_extension_group, 'extension_group') : $this->group_select('add_group_select', false, 'extension_group'))
 
388
                                );
 
389
 
 
390
                                $sql = 'SELECT *
 
391
                                        FROM ' . EXTENSIONS_TABLE . '
 
392
                                        ORDER BY group_id, extension';
 
393
                                $result = $db->sql_query($sql);
 
394
 
 
395
                                if ($row = $db->sql_fetchrow($result))
 
396
                                {
 
397
                                        $old_group_id = $row['group_id'];
 
398
                                        do
 
399
                                        {
 
400
                                                $s_spacer = false;
 
401
 
 
402
                                                $current_group_id = $row['group_id'];
 
403
                                                if ($old_group_id != $current_group_id)
 
404
                                                {
 
405
                                                        $s_spacer = true;
 
406
                                                        $old_group_id = $current_group_id;
 
407
                                                }
 
408
 
 
409
                                                $template->assign_block_vars('extensions', array(
 
410
                                                        'S_SPACER'              => $s_spacer,
 
411
                                                        'EXTENSION_ID'  => $row['extension_id'],
 
412
                                                        'EXTENSION'             => $row['extension'],
 
413
                                                        'GROUP_OPTIONS' => $this->group_select('group_select[]', $row['group_id']))
 
414
                                                );
 
415
                                        }
 
416
                                        while ($row = $db->sql_fetchrow($result));
 
417
                                }
 
418
                                $db->sql_freeresult($result);
 
419
 
 
420
                        break;
 
421
 
 
422
                        case 'ext_groups':
 
423
 
 
424
                                $template->assign_var('S_EXTENSION_GROUPS', true);
 
425
 
 
426
                                if ($submit)
 
427
                                {
 
428
                                        $action = request_var('action', '');
 
429
                                        $group_id = request_var('g', 0);
 
430
 
 
431
                                        if ($action != 'add' && $action != 'edit')
 
432
                                        {
 
433
                                                trigger_error('NO_MODE', E_USER_ERROR);
 
434
                                        }
 
435
 
 
436
                                        if (!$group_id && $action == 'edit')
 
437
                                        {
 
438
                                                trigger_error($user->lang['NO_EXT_GROUP_SPECIFIED'] . adm_back_link($this->u_action), E_USER_WARNING);
 
439
                                        }
 
440
 
 
441
                                        if ($group_id)
 
442
                                        {
 
443
                                                $sql = 'SELECT *
 
444
                                                        FROM ' . EXTENSION_GROUPS_TABLE . "
 
445
                                                        WHERE group_id = $group_id";
 
446
                                                $result = $db->sql_query($sql);
 
447
                                                $ext_row = $db->sql_fetchrow($result);
 
448
                                                $db->sql_freeresult($result);
 
449
 
 
450
                                                if (!$ext_row)
 
451
                                                {
 
452
                                                        trigger_error($user->lang['NO_EXT_GROUP_SPECIFIED'] . adm_back_link($this->u_action), E_USER_WARNING);
 
453
                                                }
 
454
                                        }
 
455
                                        else
 
456
                                        {
 
457
                                                $ext_row = array();
 
458
                                        }
 
459
 
 
460
                                        $group_name = utf8_normalize_nfc(request_var('group_name', '', true));
 
461
                                        $new_group_name = ($action == 'add') ? $group_name : (($ext_row['group_name'] != $group_name) ? $group_name : '');
 
462
 
 
463
                                        if (!$group_name)
 
464
                                        {
 
465
                                                $error[] = $user->lang['NO_EXT_GROUP_NAME'];
 
466
                                        }
 
467
 
 
468
                                        // Check New Group Name
 
469
                                        if ($new_group_name)
 
470
                                        {
 
471
                                                $sql = 'SELECT group_id
 
472
                                                        FROM ' . EXTENSION_GROUPS_TABLE . "
 
473
                                                        WHERE LOWER(group_name) = '" . $db->sql_escape(utf8_strtolower($new_group_name)) . "'";
 
474
                                                $result = $db->sql_query($sql);
 
475
 
 
476
                                                if ($db->sql_fetchrow($result))
 
477
                                                {
 
478
                                                        $error[] = sprintf($user->lang['EXTENSION_GROUP_EXIST'], $new_group_name);
 
479
                                                }
 
480
                                                $db->sql_freeresult($result);
 
481
                                        }
 
482
 
 
483
                                        if (!sizeof($error))
 
484
                                        {
 
485
                                                // Ok, build the update/insert array
 
486
                                                $upload_icon    = request_var('upload_icon', 'no_image');
 
487
                                                $size_select    = request_var('size_select', 'b');
 
488
                                                $forum_select   = request_var('forum_select', false);
 
489
                                                $allowed_forums = request_var('allowed_forums', array(0));
 
490
                                                $allow_in_pm    = (isset($_POST['allow_in_pm'])) ? true : false;
 
491
                                                $max_filesize   = request_var('max_filesize', 0);
 
492
                                                $max_filesize   = ($size_select == 'kb') ? round($max_filesize * 1024) : (($size_select == 'mb') ? round($max_filesize * 1048576) : $max_filesize);
 
493
                                                $allow_group    = (isset($_POST['allow_group'])) ? true : false;
 
494
 
 
495
                                                if ($max_filesize == $config['max_filesize'])
 
496
                                                {
 
497
                                                        $max_filesize = 0;
 
498
                                                }
 
499
 
 
500
                                                if (!sizeof($allowed_forums))
 
501
                                                {
 
502
                                                        $forum_select = false;
 
503
                                                }
 
504
 
 
505
                                                $group_ary = array(
 
506
                                                        'group_name'    => $group_name,
 
507
                                                        'cat_id'                => request_var('special_category', ATTACHMENT_CATEGORY_NONE),
 
508
                                                        'allow_group'   => ($allow_group) ? 1 : 0,
 
509
                                                        'upload_icon'   => ($upload_icon == 'no_image') ? '' : $upload_icon,
 
510
                                                        'max_filesize'  => $max_filesize,
 
511
                                                        'allowed_forums'=> ($forum_select) ? serialize($allowed_forums) : '',
 
512
                                                        'allow_in_pm'   => ($allow_in_pm) ? 1 : 0,
 
513
                                                );
 
514
 
 
515
                                                if ($action == 'add')
 
516
                                                {
 
517
                                                        $group_ary['download_mode'] = INLINE_LINK;
 
518
                                                }
 
519
 
 
520
                                                $sql = ($action == 'add') ? 'INSERT INTO ' . EXTENSION_GROUPS_TABLE . ' ' : 'UPDATE ' . EXTENSION_GROUPS_TABLE . ' SET ';
 
521
                                                $sql .= $db->sql_build_array((($action == 'add') ? 'INSERT' : 'UPDATE'), $group_ary);
 
522
                                                $sql .= ($action == 'edit') ? " WHERE group_id = $group_id" : '';
 
523
 
 
524
                                                $db->sql_query($sql);
 
525
 
 
526
                                                if ($action == 'add')
 
527
                                                {
 
528
                                                        $group_id = $db->sql_nextid();
 
529
                                                }
 
530
 
 
531
                                                add_log('admin', 'LOG_ATTACH_EXTGROUP_' . strtoupper($action), $group_name);
 
532
                                        }
 
533
 
 
534
                                        $extension_list = request_var('extensions', array(0));
 
535
 
 
536
                                        if ($action == 'edit' && sizeof($extension_list))
 
537
                                        {
 
538
                                                $sql = 'UPDATE ' . EXTENSIONS_TABLE . "
 
539
                                                        SET group_id = 0
 
540
                                                        WHERE group_id = $group_id";
 
541
                                                $db->sql_query($sql);
 
542
                                        }
 
543
 
 
544
                                        if (sizeof($extension_list))
 
545
                                        {
 
546
                                                $sql = 'UPDATE ' . EXTENSIONS_TABLE . "
 
547
                                                        SET group_id = $group_id
 
548
                                                        WHERE " . $db->sql_in_set('extension_id', $extension_list);
 
549
                                                $db->sql_query($sql);
 
550
                                        }
 
551
 
 
552
                                        $cache->destroy('_extensions');
 
553
 
 
554
                                        if (!sizeof($error))
 
555
                                        {
 
556
                                                $notify[] = $user->lang['SUCCESS_EXTENSION_GROUP_' . strtoupper($action)];
 
557
                                        }
 
558
                                }
 
559
 
 
560
                                $cat_lang = array(
 
561
                                        ATTACHMENT_CATEGORY_NONE                => $user->lang['NO_FILE_CAT'],
 
562
                                        ATTACHMENT_CATEGORY_IMAGE               => $user->lang['CAT_IMAGES'],
 
563
                                        ATTACHMENT_CATEGORY_WM                  => $user->lang['CAT_WM_FILES'],
 
564
                                        ATTACHMENT_CATEGORY_RM                  => $user->lang['CAT_RM_FILES'],
 
565
                                        ATTACHMENT_CATEGORY_FLASH               => $user->lang['CAT_FLASH_FILES'],
 
566
                                        ATTACHMENT_CATEGORY_QUICKTIME   => $user->lang['CAT_QUICKTIME_FILES'],
 
567
                                );
 
568
 
 
569
                                $group_id = request_var('g', 0);
 
570
                                $action = (isset($_POST['add'])) ? 'add' : $action;
 
571
 
 
572
                                switch ($action)
 
573
                                {
 
574
                                        case 'delete':
 
575
 
 
576
                                                if (confirm_box(true))
 
577
                                                {
 
578
                                                        $sql = 'SELECT group_name
 
579
                                                                FROM ' . EXTENSION_GROUPS_TABLE . "
 
580
                                                                WHERE group_id = $group_id";
 
581
                                                        $result = $db->sql_query($sql);
 
582
                                                        $group_name = (string) $db->sql_fetchfield('group_name');
 
583
                                                        $db->sql_freeresult($result);
 
584
 
 
585
                                                        $sql = 'DELETE
 
586
                                                                FROM ' . EXTENSION_GROUPS_TABLE . "
 
587
                                                                WHERE group_id = $group_id";
 
588
                                                        $db->sql_query($sql);
 
589
 
 
590
                                                        // Set corresponding Extensions to a pending Group
 
591
                                                        $sql = 'UPDATE ' . EXTENSIONS_TABLE . "
 
592
                                                                SET group_id = 0
 
593
                                                                WHERE group_id = $group_id";
 
594
                                                        $db->sql_query($sql);
 
595
                                        
 
596
                                                        add_log('admin', 'LOG_ATTACH_EXTGROUP_DEL', $group_name);
 
597
 
 
598
                                                        $cache->destroy('_extensions');
 
599
 
 
600
                                                        trigger_error($user->lang['EXTENSION_GROUP_DELETED'] . adm_back_link($this->u_action));
 
601
                                                }
 
602
                                                else
 
603
                                                {
 
604
                                                        confirm_box(false, $user->lang['CONFIRM_OPERATION'], build_hidden_fields(array(
 
605
                                                                'i'                     => $id,
 
606
                                                                'mode'          => $mode,
 
607
                                                                'group_id'      => $group_id,
 
608
                                                                'action'        => 'delete',
 
609
                                                        )));
 
610
                                                }
 
611
 
 
612
                                        break;
 
613
 
 
614
                                        case 'edit':
 
615
 
 
616
                                                if (!$group_id)
 
617
                                                {
 
618
                                                        trigger_error($user->lang['NO_EXT_GROUP_SPECIFIED'] . adm_back_link($this->u_action), E_USER_WARNING);
 
619
                                                }
 
620
 
 
621
                                                $sql = 'SELECT *
 
622
                                                        FROM ' . EXTENSION_GROUPS_TABLE . "
 
623
                                                        WHERE group_id = $group_id";
 
624
                                                $result = $db->sql_query($sql);
 
625
                                                $ext_group_row = $db->sql_fetchrow($result);
 
626
                                                $db->sql_freeresult($result);
 
627
 
 
628
                                                $forum_ids = (!$ext_group_row['allowed_forums']) ? array() : unserialize(trim($ext_group_row['allowed_forums']));
 
629
 
 
630
                                        // no break;
 
631
 
 
632
                                        case 'add':
 
633
 
 
634
                                                if ($action == 'add')
 
635
                                                {
 
636
                                                        $ext_group_row = array(
 
637
                                                                'group_name'    => utf8_normalize_nfc(request_var('group_name', '', true)),
 
638
                                                                'cat_id'                => 0,
 
639
                                                                'allow_group'   => 1,
 
640
                                                                'allow_in_pm'   => 1,
 
641
                                                                'upload_icon'   => '',
 
642
                                                                'max_filesize'  => 0,
 
643
                                                        );
 
644
 
 
645
                                                        $forum_ids = array();
 
646
                                                }
 
647
 
 
648
                                                $extensions = array();
 
649
 
 
650
                                                $sql = 'SELECT *
 
651
                                                        FROM ' . EXTENSIONS_TABLE . "
 
652
                                                        WHERE group_id = $group_id
 
653
                                                                OR group_id = 0
 
654
                                                        ORDER BY extension";
 
655
                                                $result = $db->sql_query($sql);
 
656
                                                $extensions = $db->sql_fetchrowset($result);
 
657
                                                $db->sql_freeresult($result);
 
658
 
 
659
                                                if ($ext_group_row['max_filesize'] == 0)
 
660
                                                {
 
661
                                                        $ext_group_row['max_filesize'] = (int) $config['max_filesize'];
 
662
                                                }
 
663
 
 
664
                                                $size_format = ($ext_group_row['max_filesize'] >= 1048576) ? 'mb' : (($ext_group_row['max_filesize'] >= 1024) ? 'kb' : 'b');
 
665
 
 
666
                                                $ext_group_row['max_filesize'] = ($ext_group_row['max_filesize'] >= 1048576) ? round($ext_group_row['max_filesize'] / 1048576 * 100) / 100 : (($ext_group_row['max_filesize'] >= 1024) ? round($ext_group_row['max_filesize'] / 1024 * 100) / 100 : $ext_group_row['max_filesize']);
 
667
 
 
668
                                                $img_path = $config['upload_icons_path'];
 
669
 
 
670
                                                $filename_list = '';
 
671
                                                $no_image_select = false;
 
672
 
 
673
                                                $imglist = filelist($phpbb_root_path . $img_path);
 
674
 
 
675
                                                if (sizeof($imglist))
 
676
                                                {
 
677
                                                        $imglist = array_values($imglist);
 
678
                                                        $imglist = $imglist[0];
 
679
 
 
680
                                                        foreach ($imglist as $key => $img)
 
681
                                                        {
 
682
                                                                if (!$ext_group_row['upload_icon'])
 
683
                                                                {
 
684
                                                                        $no_image_select = true;
 
685
                                                                        $selected = '';
 
686
                                                                }
 
687
                                                                else
 
688
                                                                {
 
689
                                                                        $selected = ($ext_group_row['upload_icon'] == $img) ? ' selected="selected"' : '';
 
690
                                                                }
 
691
 
 
692
                                                                if (strlen($img) > 255)
 
693
                                                                {
 
694
                                                                        continue;
 
695
                                                                }
 
696
 
 
697
                                                                $filename_list .= '<option value="' . htmlspecialchars($img) . '"' . $selected . '>' . htmlspecialchars($img) . '</option>';
 
698
                                                        }
 
699
                                                }
 
700
 
 
701
                                                $i = 0;
 
702
                                                $assigned_extensions = '';
 
703
                                                foreach ($extensions as $num => $row)
 
704
                                                {
 
705
                                                        if ($row['group_id'] == $group_id && $group_id)
 
706
                                                        {
 
707
                                                                $assigned_extensions .= ($i) ? ', ' . $row['extension'] : $row['extension'];
 
708
                                                                $i++;
 
709
                                                        }
 
710
                                                }
 
711
 
 
712
                                                $s_extension_options = '';
 
713
                                                foreach ($extensions as $row)
 
714
                                                {
 
715
                                                        $s_extension_options .= '<option' . ((!$row['group_id']) ? ' class="disabled"' : '') . ' value="' . $row['extension_id'] . '"' . (($row['group_id'] == $group_id && $group_id) ? ' selected="selected"' : '') . '>' . $row['extension'] . '</option>';
 
716
                                                }
 
717
 
 
718
                                                $template->assign_vars(array(
 
719
                                                        'PHPBB_ROOT_PATH'               => $phpbb_root_path,
 
720
                                                        'IMG_PATH'                              => $img_path,
 
721
                                                        'ACTION'                                => $action,
 
722
                                                        'GROUP_ID'                              => $group_id,
 
723
                                                        'GROUP_NAME'                    => $ext_group_row['group_name'],
 
724
                                                        'ALLOW_GROUP'                   => $ext_group_row['allow_group'],
 
725
                                                        'ALLOW_IN_PM'                   => $ext_group_row['allow_in_pm'],
 
726
                                                        'UPLOAD_ICON_SRC'               => $phpbb_root_path . $img_path . '/' . $ext_group_row['upload_icon'],
 
727
                                                        'EXTGROUP_FILESIZE'             => $ext_group_row['max_filesize'],
 
728
                                                        'ASSIGNED_EXTENSIONS'   => $assigned_extensions,
 
729
 
 
730
                                                        'S_CATEGORY_SELECT'                     => $this->category_select('special_category', $group_id, 'category'),
 
731
                                                        'S_EXT_GROUP_SIZE_OPTIONS'      => size_select_options($size_format),
 
732
                                                        'S_EXTENSION_OPTIONS'           => $s_extension_options,
 
733
                                                        'S_FILENAME_LIST'                       => $filename_list,
 
734
                                                        'S_EDIT_GROUP'                          => true,
 
735
                                                        'S_NO_IMAGE'                            => $no_image_select,
 
736
                                                        'S_FORUM_IDS'                           => (sizeof($forum_ids)) ? true : false,
 
737
 
 
738
                                                        'U_EXTENSIONS'          => append_sid("{$phpbb_admin_path}index.$phpEx", "i=$id&amp;mode=extensions"),
 
739
                                                        'U_BACK'                        => $this->u_action,
 
740
 
 
741
                                                        'L_LEGEND'                      => $user->lang[strtoupper($action) . '_EXTENSION_GROUP'])
 
742
                                                );
 
743
 
 
744
                                                $s_forum_id_options = '';
 
745
 
 
746
                                                $sql = 'SELECT forum_id, forum_name, parent_id, forum_type, left_id, right_id
 
747
                                                        FROM ' . FORUMS_TABLE . '
 
748
                                                        ORDER BY left_id ASC';
 
749
                                                $result = $db->sql_query($sql, 600);
 
750
 
 
751
                                                $right = $cat_right = $padding_inc = 0;
 
752
                                                $padding = $forum_list = $holding = '';
 
753
                                                $padding_store = array('0' => '');
 
754
 
 
755
                                                while ($row = $db->sql_fetchrow($result))
 
756
                                                {
 
757
                                                        if ($row['forum_type'] == FORUM_CAT && ($row['left_id'] + 1 == $row['right_id']))
 
758
                                                        {
 
759
                                                                // Non-postable forum with no subforums, don't display
 
760
                                                                continue;
 
761
                                                        }
 
762
 
 
763
                                                        if (!$auth->acl_get('f_list', $row['forum_id']))
 
764
                                                        {
 
765
                                                                // if the user does not have permissions to list this forum skip
 
766
                                                                continue;
 
767
                                                        }
 
768
 
 
769
                                                        if ($row['left_id'] < $right)
 
770
                                                        {
 
771
                                                                $padding .= '&nbsp; &nbsp;';
 
772
                                                                $padding_store[$row['parent_id']] = $padding;
 
773
                                                        }
 
774
                                                        else if ($row['left_id'] > $right + 1)
 
775
                                                        {
 
776
                                                                $padding = $padding_store[$row['parent_id']];
 
777
                                                        }
 
778
 
 
779
                                                        $right = $row['right_id'];
 
780
 
 
781
                                                        $selected = (in_array($row['forum_id'], $forum_ids)) ? ' selected="selected"' : '';
 
782
 
 
783
                                                        if ($row['left_id'] > $cat_right)
 
784
                                                        {
 
785
                                                                // make sure we don't forget anything
 
786
                                                                $s_forum_id_options .= $holding;
 
787
                                                                $holding = '';
 
788
                                                        }
 
789
 
 
790
                                                        if ($row['right_id'] - $row['left_id'] > 1)
 
791
                                                        {
 
792
                                                                $cat_right = max($cat_right, $row['right_id']);
 
793
 
 
794
                                                                $holding .= '<option value="' . $row['forum_id'] . '"' . (($row['forum_type'] == FORUM_POST) ? ' class="sep"' : '') . $selected . '>' . $padding . $row['forum_name'] . '</option>';
 
795
                                                        }
 
796
                                                        else
 
797
                                                        {
 
798
                                                                $s_forum_id_options .= $holding . '<option value="' . $row['forum_id'] . '"' . (($row['forum_type'] == FORUM_POST) ? ' class="sep"' : '') . $selected . '>' . $padding . $row['forum_name'] . '</option>';
 
799
                                                                $holding = '';
 
800
                                                        }
 
801
                                                }
 
802
 
 
803
                                                if ($holding)
 
804
                                                {
 
805
                                                        $s_forum_id_options .= $holding;
 
806
                                                }
 
807
 
 
808
                                                $db->sql_freeresult($result);
 
809
                                                unset($padding_store);
 
810
 
 
811
                                                $template->assign_vars(array(
 
812
                                                        'S_FORUM_ID_OPTIONS'    => $s_forum_id_options)
 
813
                                                );
 
814
 
 
815
                                        break;
 
816
                                }
 
817
 
 
818
                                $sql = 'SELECT *
 
819
                                        FROM ' . EXTENSION_GROUPS_TABLE . '
 
820
                                        ORDER BY allow_group DESC, allow_in_pm DESC, group_name';
 
821
                                $result = $db->sql_query($sql);
 
822
 
 
823
                                $old_allow_group = $old_allow_pm = 1;
 
824
                                while ($row = $db->sql_fetchrow($result))
 
825
                                {
 
826
                                        $s_add_spacer = ($old_allow_group != $row['allow_group'] || $old_allow_pm != $row['allow_in_pm']) ? true : false;
 
827
 
 
828
                                        $template->assign_block_vars('groups', array(
 
829
                                                'S_ADD_SPACER'          => $s_add_spacer,
 
830
                                                'S_ALLOWED_IN_PM'       => ($row['allow_in_pm']) ? true : false,
 
831
                                                'S_GROUP_ALLOWED'       => ($row['allow_group']) ? true : false,
 
832
 
 
833
                                                'U_EDIT'                => $this->u_action . "&amp;action=edit&amp;g={$row['group_id']}",
 
834
                                                'U_DELETE'              => $this->u_action . "&amp;action=delete&amp;g={$row['group_id']}",
 
835
 
 
836
                                                'GROUP_NAME'    => $row['group_name'],
 
837
                                                'CATEGORY'              => $cat_lang[$row['cat_id']],
 
838
                                                )
 
839
                                        );
 
840
 
 
841
                                        $old_allow_group = $row['allow_group'];
 
842
                                        $old_allow_pm = $row['allow_in_pm'];
 
843
                                }
 
844
                                $db->sql_freeresult($result);
 
845
 
 
846
                        break;
 
847
 
 
848
                        case 'orphan':
 
849
 
 
850
                                if ($submit)
 
851
                                {
 
852
                                        $delete_files = (isset($_POST['delete'])) ? array_keys(request_var('delete', array('' => 0))) : array();
 
853
                                        $add_files = (isset($_POST['add'])) ? array_keys(request_var('add', array('' => 0))) : array();
 
854
                                        $post_ids = request_var('post_id', array('' => 0));
 
855
 
 
856
                                        if (sizeof($delete_files))
 
857
                                        {
 
858
                                                $sql = 'SELECT *
 
859
                                                        FROM ' . ATTACHMENTS_TABLE . '
 
860
                                                        WHERE ' . $db->sql_in_set('attach_id', $delete_files) . '
 
861
                                                                AND is_orphan = 1';
 
862
                                                $result = $db->sql_query($sql);
 
863
 
 
864
                                                $delete_files = array();
 
865
                                                while ($row = $db->sql_fetchrow($result))
 
866
                                                {
 
867
                                                        phpbb_unlink($row['physical_filename'], 'file');
 
868
 
 
869
                                                        if ($row['thumbnail'])
 
870
                                                        {
 
871
                                                                phpbb_unlink($row['physical_filename'], 'thumbnail');
 
872
                                                        }
 
873
 
 
874
                                                        $delete_files[$row['attach_id']] = $row['real_filename'];
 
875
                                                }
 
876
                                                $db->sql_freeresult($result);
 
877
                                        }
 
878
 
 
879
                                        if (sizeof($delete_files))
 
880
                                        {
 
881
                                                $sql = 'DELETE FROM ' . ATTACHMENTS_TABLE . '
 
882
                                                        WHERE ' . $db->sql_in_set('attach_id', array_keys($delete_files));
 
883
                                                $db->sql_query($sql);
 
884
 
 
885
                                                add_log('admin', 'LOG_ATTACH_ORPHAN_DEL', implode(', ', $delete_files));
 
886
                                                $notify[] = sprintf($user->lang['LOG_ATTACH_ORPHAN_DEL'], implode(', ', $delete_files));
 
887
                                        }
 
888
 
 
889
                                        $upload_list = array();
 
890
                                        foreach ($add_files as $attach_id)
 
891
                                        {
 
892
                                                if (!in_array($attach_id, array_keys($delete_files)) && !empty($post_ids[$attach_id]))
 
893
                                                {
 
894
                                                        $upload_list[$attach_id] = $post_ids[$attach_id];
 
895
                                                }
 
896
                                        }
 
897
                                        unset($add_files);
 
898
 
 
899
                                        if (sizeof($upload_list))
 
900
                                        {
 
901
                                                $template->assign_var('S_UPLOADING_FILES', true);
 
902
 
 
903
                                                $sql = 'SELECT forum_id, forum_name
 
904
                                                        FROM ' . FORUMS_TABLE;
 
905
                                                $result = $db->sql_query($sql);
 
906
 
 
907
                                                $forum_names = array();
 
908
                                                while ($row = $db->sql_fetchrow($result))
 
909
                                                {
 
910
                                                        $forum_names[$row['forum_id']] = $row['forum_name'];
 
911
                                                }
 
912
                                                $db->sql_freeresult($result);
 
913
 
 
914
                                                $sql = 'SELECT forum_id, topic_id, post_id, poster_id
 
915
                                                        FROM ' . POSTS_TABLE . '
 
916
                                                        WHERE ' . $db->sql_in_set('post_id', $upload_list);
 
917
                                                $result = $db->sql_query($sql);
 
918
 
 
919
                                                $post_info = array();
 
920
                                                while ($row = $db->sql_fetchrow($result))
 
921
                                                {
 
922
                                                        $post_info[$row['post_id']] = $row;
 
923
                                                }
 
924
                                                $db->sql_freeresult($result);
 
925
 
 
926
                                                // Select those attachments we want to change...
 
927
                                                $sql = 'SELECT *
 
928
                                                        FROM ' . ATTACHMENTS_TABLE . '
 
929
                                                        WHERE ' . $db->sql_in_set('attach_id', array_keys($upload_list)) . '
 
930
                                                                AND is_orphan = 1';
 
931
                                                $result = $db->sql_query($sql);
 
932
 
 
933
                                                while ($row = $db->sql_fetchrow($result))
 
934
                                                {
 
935
                                                        $post_row = $post_info[$upload_list[$row['attach_id']]];
 
936
 
 
937
                                                        $template->assign_block_vars('upload', array(
 
938
                                                                'FILE_INFO'             => sprintf($user->lang['UPLOADING_FILE_TO'], $row['real_filename'], $post_row['post_id']),
 
939
                                                                'S_DENIED'              => (!$auth->acl_get('f_attach', $post_row['forum_id'])) ? true : false,
 
940
                                                                'L_DENIED'              => (!$auth->acl_get('f_attach', $post_row['forum_id'])) ? sprintf($user->lang['UPLOAD_DENIED_FORUM'], $forum_names[$row['forum_id']]) : '')
 
941
                                                        );
 
942
 
 
943
                                                        if (!$auth->acl_get('f_attach', $post_row['forum_id']))
 
944
                                                        {
 
945
                                                                continue;
 
946
                                                        }
 
947
 
 
948
                                                        // Adjust attachment entry
 
949
                                                        $sql_ary = array(
 
950
                                                                'in_message'    => 0,
 
951
                                                                'is_orphan'             => 0,
 
952
                                                                'poster_id'             => $post_row['poster_id'],
 
953
                                                                'post_msg_id'   => $post_row['post_id'],
 
954
                                                                'topic_id'              => $post_row['topic_id'],
 
955
                                                        );
 
956
 
 
957
                                                        $sql = 'UPDATE ' . ATTACHMENTS_TABLE . '
 
958
                                                                SET ' . $db->sql_build_array('UPDATE', $sql_ary) . '
 
959
                                                                WHERE attach_id = ' . $row['attach_id'];
 
960
                                                        $db->sql_query($sql);
 
961
 
 
962
                                                        $sql = 'UPDATE ' . POSTS_TABLE . '
 
963
                                                                SET post_attachment = 1
 
964
                                                                WHERE post_id = ' . $post_row['post_id'];
 
965
                                                        $db->sql_query($sql);
 
966
 
 
967
                                                        $sql = 'UPDATE ' . TOPICS_TABLE . '
 
968
                                                                SET topic_attachment = 1
 
969
                                                                WHERE topic_id = ' . $post_row['topic_id'];
 
970
                                                        $db->sql_query($sql);
 
971
 
 
972
                                                        add_log('admin', 'LOG_ATTACH_FILEUPLOAD', $post_row['post_id'], $row['real_filename']);
 
973
                                                }
 
974
                                                $db->sql_freeresult($result);
 
975
                                        }
 
976
                                }
 
977
 
 
978
                                $template->assign_vars(array(
 
979
                                        'S_ORPHAN'              => true)
 
980
                                );
 
981
 
 
982
                                // Just get the files with is_orphan set and older than 3 hours
 
983
                                $sql = 'SELECT *
 
984
                                        FROM ' . ATTACHMENTS_TABLE . '
 
985
                                        WHERE is_orphan = 1
 
986
                                                AND filetime < ' . (time() - 3*60*60) . '
 
987
                                        ORDER BY filetime DESC';
 
988
                                $result = $db->sql_query($sql);
 
989
 
 
990
                                while ($row = $db->sql_fetchrow($result))
 
991
                                {
 
992
                                        $size_lang = ($row['filesize'] >= 1048576) ? $user->lang['MB'] : (($row['filesize'] >= 1024) ? $user->lang['KB'] : $user->lang['BYTES']);
 
993
                                        $row['filesize'] = ($row['filesize'] >= 1048576) ? round((round($row['filesize'] / 1048576 * 100) / 100), 2) : (($row['filesize'] >= 1024) ? round((round($row['filesize'] / 1024 * 100) / 100), 2) : $row['filesize']);
 
994
 
 
995
                                        $template->assign_block_vars('orphan', array(
 
996
                                                'FILESIZE'                      => $row['filesize'] . ' ' . $size_lang,
 
997
                                                'FILETIME'                      => $user->format_date($row['filetime']),
 
998
                                                'REAL_FILENAME'         => basename($row['real_filename']),
 
999
                                                'PHYSICAL_FILENAME'     => basename($row['physical_filename']),
 
1000
                                                'ATTACH_ID'                     => $row['attach_id'],
 
1001
                                                'POST_IDS'                      => (!empty($post_ids[$row['attach_id']])) ? $post_ids[$row['attach_id']] : '',
 
1002
                                                'U_FILE'                        => append_sid($phpbb_root_path . 'download/file.' . $phpEx, 'mode=view&amp;id=' . $row['attach_id']))
 
1003
                                        );
 
1004
                                }
 
1005
                                $db->sql_freeresult($result);
 
1006
 
 
1007
                        break;
 
1008
                }
 
1009
 
 
1010
                if (sizeof($error))
 
1011
                {
 
1012
                        $template->assign_vars(array(
 
1013
                                'S_WARNING'             => true,
 
1014
                                'WARNING_MSG'   => implode('<br />', $error))
 
1015
                        );
 
1016
                }
 
1017
 
 
1018
                if (sizeof($notify))
 
1019
                {
 
1020
                        $template->assign_vars(array(
 
1021
                                'S_NOTIFY'              => true,
 
1022
                                'NOTIFY_MSG'    => implode('<br />', $notify))
 
1023
                        );
 
1024
                }
 
1025
        }
 
1026
 
 
1027
        /**
 
1028
        * Build Select for category items
 
1029
        */
 
1030
        function category_select($select_name, $group_id = false, $key = '')
 
1031
        {
 
1032
                global $db, $user;
 
1033
 
 
1034
                $types = array(
 
1035
                        ATTACHMENT_CATEGORY_NONE                => $user->lang['NO_FILE_CAT'],
 
1036
                        ATTACHMENT_CATEGORY_IMAGE               => $user->lang['CAT_IMAGES'],
 
1037
                        ATTACHMENT_CATEGORY_WM                  => $user->lang['CAT_WM_FILES'],
 
1038
                        ATTACHMENT_CATEGORY_RM                  => $user->lang['CAT_RM_FILES'],
 
1039
                        ATTACHMENT_CATEGORY_FLASH               => $user->lang['CAT_FLASH_FILES'],
 
1040
                        ATTACHMENT_CATEGORY_QUICKTIME   => $user->lang['CAT_QUICKTIME_FILES'],
 
1041
                );
 
1042
                
 
1043
                if ($group_id)
 
1044
                {
 
1045
                        $sql = 'SELECT cat_id
 
1046
                                FROM ' . EXTENSION_GROUPS_TABLE . '
 
1047
                                WHERE group_id = ' . (int) $group_id;
 
1048
                        $result = $db->sql_query($sql);
 
1049
 
 
1050
                        $cat_type = (!($row = $db->sql_fetchrow($result))) ? ATTACHMENT_CATEGORY_NONE : $row['cat_id'];
 
1051
 
 
1052
                        $db->sql_freeresult($result);
 
1053
                }
 
1054
                else
 
1055
                {
 
1056
                        $cat_type = ATTACHMENT_CATEGORY_NONE;
 
1057
                }
 
1058
                
 
1059
                $group_select = '<select name="' . $select_name . '"' . (($key) ? ' id="' . $key . '"' : '') . '>';
 
1060
 
 
1061
                foreach ($types as $type => $mode)
 
1062
                {
 
1063
                        $selected = ($type == $cat_type) ? ' selected="selected"' : '';
 
1064
                        $group_select .= '<option value="' . $type . '"' . $selected . '>' . $mode . '</option>';
 
1065
                }
 
1066
 
 
1067
                $group_select .= '</select>';
 
1068
 
 
1069
                return $group_select;
 
1070
        }
 
1071
 
 
1072
        /**
 
1073
        * Extension group select
 
1074
        */
 
1075
        function group_select($select_name, $default_group = false, $key = '')
 
1076
        {
 
1077
                global $db, $user;
 
1078
                        
 
1079
                $group_select = '<select name="' . $select_name . '"' . (($key) ? ' id="' . $key . '"' : '') . '>';
 
1080
 
 
1081
                $sql = 'SELECT group_id, group_name
 
1082
                        FROM ' . EXTENSION_GROUPS_TABLE . '
 
1083
                        ORDER BY group_name';
 
1084
                $result = $db->sql_query($sql);
 
1085
 
 
1086
                $group_name = array();
 
1087
                while ($row = $db->sql_fetchrow($result))
 
1088
                {
 
1089
                        $group_name[] = $row;
 
1090
                }
 
1091
                $db->sql_freeresult($result);
 
1092
 
 
1093
                $row['group_id'] = 0;
 
1094
                $row['group_name'] = $user->lang['NOT_ASSIGNED'];
 
1095
                $group_name[] = $row;
 
1096
                
 
1097
                for ($i = 0; $i < sizeof($group_name); $i++)
 
1098
                {
 
1099
                        if ($default_group === false)
 
1100
                        {
 
1101
                                $selected = ($i == 0) ? ' selected="selected"' : '';
 
1102
                        }
 
1103
                        else
 
1104
                        {
 
1105
                                $selected = ($group_name[$i]['group_id'] == $default_group) ? ' selected="selected"' : '';
 
1106
                        }
 
1107
 
 
1108
                        $group_select .= '<option value="' . $group_name[$i]['group_id'] . '"' . $selected . '>' . $group_name[$i]['group_name'] . '</option>';
 
1109
                }
 
1110
 
 
1111
                $group_select .= '</select>';
 
1112
 
 
1113
                return $group_select;
 
1114
        }
 
1115
 
 
1116
        /**
 
1117
        * Search Imagick
 
1118
        */
 
1119
        function search_imagemagick()
 
1120
        {
 
1121
                $imagick = '';
 
1122
 
 
1123
                $exe = ((defined('PHP_OS')) && (preg_match('#^win#i', PHP_OS))) ? '.exe' : '';
 
1124
 
 
1125
                $magic_home = getenv('MAGICK_HOME');
 
1126
 
 
1127
                if (empty($magic_home))
 
1128
                {
 
1129
                        $locations = array('C:/WINDOWS/', 'C:/WINNT/', 'C:/WINDOWS/SYSTEM/', 'C:/WINNT/SYSTEM/', 'C:/WINDOWS/SYSTEM32/', 'C:/WINNT/SYSTEM32/', '/usr/bin/', '/usr/sbin/', '/usr/local/bin/', '/usr/local/sbin/', '/opt/', '/usr/imagemagick/', '/usr/bin/imagemagick/');
 
1130
                        $path_locations = str_replace('\\', '/', (explode(($exe) ? ';' : ':', getenv('PATH'))));        
 
1131
 
 
1132
                        $locations = array_merge($path_locations, $locations);
 
1133
 
 
1134
                        foreach ($locations as $location)
 
1135
                        {
 
1136
                                // The path might not end properly, fudge it
 
1137
                                if (substr($location, -1, 1) !== '/')
 
1138
                                {
 
1139
                                        $location .= '/';
 
1140
                                }
 
1141
 
 
1142
                                if (@is_readable($location . 'mogrify' . $exe) && @filesize($location . 'mogrify' . $exe) > 3000)
 
1143
                                {
 
1144
                                        $imagick = str_replace('\\', '/', $location);
 
1145
                                        continue;
 
1146
                                }
 
1147
                        }
 
1148
                }
 
1149
                else
 
1150
                {
 
1151
                        $imagick = str_replace('\\', '/', $magic_home);
 
1152
                }
 
1153
 
 
1154
                return $imagick;
 
1155
        }
 
1156
 
 
1157
        /**
 
1158
        * Test Settings
 
1159
        */
 
1160
        function test_upload(&$error, $upload_dir, $create_directory = false)
 
1161
        {
 
1162
                global $user, $phpbb_root_path;
 
1163
 
 
1164
                // Does the target directory exist, is it a directory and writable.
 
1165
                if ($create_directory)
 
1166
                {
 
1167
                        if (!file_exists($phpbb_root_path . $upload_dir))
 
1168
                        {
 
1169
                                @mkdir($phpbb_root_path . $upload_dir, 0777);
 
1170
                                @chmod($phpbb_root_path . $upload_dir, 0777);
 
1171
                        }
 
1172
                }
 
1173
 
 
1174
                if (!file_exists($phpbb_root_path . $upload_dir))
 
1175
                {
 
1176
                        $error[] = sprintf($user->lang['NO_UPLOAD_DIR'], $upload_dir);
 
1177
                        return;
 
1178
                }
 
1179
 
 
1180
                if (!is_dir($phpbb_root_path . $upload_dir))
 
1181
                {
 
1182
                        $error[] = sprintf($user->lang['UPLOAD_NOT_DIR'], $upload_dir);
 
1183
                        return;
 
1184
                }
 
1185
 
 
1186
                if (!is_writable($phpbb_root_path . $upload_dir))
 
1187
                {
 
1188
                        $error[] = sprintf($user->lang['NO_WRITE_UPLOAD'], $upload_dir);
 
1189
                        return;
 
1190
                }
 
1191
        }
 
1192
 
 
1193
        /**
 
1194
        * Perform operations on sites for external linking
 
1195
        */
 
1196
        function perform_site_list()
 
1197
        {
 
1198
                global $db, $user;
 
1199
 
 
1200
                if (isset($_REQUEST['securesubmit']))
 
1201
                {
 
1202
                        // Grab the list of entries
 
1203
                        $ips = request_var('ips', '');
 
1204
                        $ip_list = array_unique(explode("\n", $ips));
 
1205
                        $ip_list_log = implode(', ', $ip_list);
 
1206
 
 
1207
                        $ip_exclude = (!empty($_POST['ipexclude'])) ? 1 : 0;
 
1208
 
 
1209
                        $iplist = array();
 
1210
                        $hostlist = array();
 
1211
 
 
1212
                        foreach ($ip_list as $item)
 
1213
                        {
 
1214
                                if (preg_match('#^([0-9]{1,3})\.([0-9]{1,3})\.([0-9]{1,3})\.([0-9]{1,3})[ ]*\-[ ]*([0-9]{1,3})\.([0-9]{1,3})\.([0-9]{1,3})\.([0-9]{1,3})$#', trim($item), $ip_range_explode))
 
1215
                                {
 
1216
                                        // Don't ask about all this, just don't ask ... !
 
1217
                                        $ip_1_counter = $ip_range_explode[1];
 
1218
                                        $ip_1_end = $ip_range_explode[5];
 
1219
 
 
1220
                                        while ($ip_1_counter <= $ip_1_end)
 
1221
                                        {
 
1222
                                                $ip_2_counter = ($ip_1_counter == $ip_range_explode[1]) ? $ip_range_explode[2] : 0;
 
1223
                                                $ip_2_end = ($ip_1_counter < $ip_1_end) ? 254 : $ip_range_explode[6];
 
1224
 
 
1225
                                                if ($ip_2_counter == 0 && $ip_2_end == 254)
 
1226
                                                {
 
1227
                                                        $ip_2_counter = 256;
 
1228
                                                        $ip_2_fragment = 256;
 
1229
 
 
1230
                                                        $iplist[] = "'$ip_1_counter.*'";
 
1231
                                                }
 
1232
 
 
1233
                                                while ($ip_2_counter <= $ip_2_end)
 
1234
                                                {
 
1235
                                                        $ip_3_counter = ($ip_2_counter == $ip_range_explode[2] && $ip_1_counter == $ip_range_explode[1]) ? $ip_range_explode[3] : 0;
 
1236
                                                        $ip_3_end = ($ip_2_counter < $ip_2_end || $ip_1_counter < $ip_1_end) ? 254 : $ip_range_explode[7];
 
1237
 
 
1238
                                                        if ($ip_3_counter == 0 && $ip_3_end == 254)
 
1239
                                                        {
 
1240
                                                                $ip_3_counter = 256;
 
1241
                                                                $ip_3_fragment = 256;
 
1242
 
 
1243
                                                                $iplist[] = "'$ip_1_counter.$ip_2_counter.*'";
 
1244
                                                        }
 
1245
 
 
1246
                                                        while ($ip_3_counter <= $ip_3_end)
 
1247
                                                        {
 
1248
                                                                $ip_4_counter = ($ip_3_counter == $ip_range_explode[3] && $ip_2_counter == $ip_range_explode[2] && $ip_1_counter == $ip_range_explode[1]) ? $ip_range_explode[4] : 0;
 
1249
                                                                $ip_4_end = ($ip_3_counter < $ip_3_end || $ip_2_counter < $ip_2_end) ? 254 : $ip_range_explode[8];
 
1250
 
 
1251
                                                                if ($ip_4_counter == 0 && $ip_4_end == 254)
 
1252
                                                                {
 
1253
                                                                        $ip_4_counter = 256;
 
1254
                                                                        $ip_4_fragment = 256;
 
1255
 
 
1256
                                                                        $iplist[] = "'$ip_1_counter.$ip_2_counter.$ip_3_counter.*'";
 
1257
                                                                }
 
1258
 
 
1259
                                                                while ($ip_4_counter <= $ip_4_end)
 
1260
                                                                {
 
1261
                                                                        $iplist[] = "'$ip_1_counter.$ip_2_counter.$ip_3_counter.$ip_4_counter'";
 
1262
                                                                        $ip_4_counter++;
 
1263
                                                                }
 
1264
                                                                $ip_3_counter++;
 
1265
                                                        }
 
1266
                                                        $ip_2_counter++;
 
1267
                                                }
 
1268
                                                $ip_1_counter++;
 
1269
                                        }
 
1270
                                }
 
1271
                                else if (preg_match('#^([0-9]{1,3})\.([0-9\*]{1,3})\.([0-9\*]{1,3})\.([0-9\*]{1,3})$#', trim($item)) || preg_match('#^[a-f0-9:]+\*?$#i', trim($item)))
 
1272
                                {
 
1273
                                        $iplist[] = "'" . trim($item) . "'";
 
1274
                                }
 
1275
                                else if (preg_match('#^([\w\-_]\.?){2,}$#is', trim($item)))
 
1276
                                {
 
1277
                                        $hostlist[] = "'" . trim($item) . "'";
 
1278
                                }
 
1279
                                else if (preg_match("#^([a-z0-9\-\*\._/]+?)$#is", trim($item)))
 
1280
                                {
 
1281
                                        $hostlist[] = "'" . trim($item) . "'";
 
1282
                                }
 
1283
                        }
 
1284
 
 
1285
                        $sql = 'SELECT site_ip, site_hostname
 
1286
                                FROM ' . SITELIST_TABLE . "
 
1287
                                WHERE ip_exclude = $ip_exclude";
 
1288
                        $result = $db->sql_query($sql);
 
1289
 
 
1290
                        if ($row = $db->sql_fetchrow($result))
 
1291
                        {
 
1292
                                $iplist_tmp = array();
 
1293
                                $hostlist_tmp = array();
 
1294
                                do
 
1295
                                {
 
1296
                                        if ($row['site_ip'])
 
1297
                                        {
 
1298
                                                if (strlen($row['site_ip']) > 40)
 
1299
                                                {
 
1300
                                                        continue;
 
1301
                                                }
 
1302
 
 
1303
                                                $iplist_tmp[] = "'" . $row['site_ip'] . "'";
 
1304
                                        }
 
1305
                                        else if ($row['site_hostname'])
 
1306
                                        {
 
1307
                                                if (strlen($row['site_hostname']) > 255)
 
1308
                                                {
 
1309
                                                        continue;
 
1310
                                                }
 
1311
 
 
1312
                                                $hostlist_tmp[] = "'" . $row['site_hostname'] . "'";
 
1313
                                        }
 
1314
                                        // break;
 
1315
                                }
 
1316
                                while ($row = $db->sql_fetchrow($result));
 
1317
 
 
1318
                                $iplist = array_unique(array_diff($iplist, $iplist_tmp));
 
1319
                                $hostlist = array_unique(array_diff($hostlist, $hostlist_tmp));
 
1320
                                unset($iplist_tmp);
 
1321
                                unset($hostlist_tmp);
 
1322
                        }
 
1323
                        $db->sql_freeresult($result);
 
1324
 
 
1325
                        if (sizeof($iplist))
 
1326
                        {
 
1327
                                foreach ($iplist as $ip_entry)
 
1328
                                {
 
1329
                                        $sql = 'INSERT INTO ' . SITELIST_TABLE . " (site_ip, ip_exclude)
 
1330
                                                VALUES ($ip_entry, $ip_exclude)";
 
1331
                                        $db->sql_query($sql);
 
1332
                                }
 
1333
                        }
 
1334
 
 
1335
                        if (sizeof($hostlist))
 
1336
                        {
 
1337
                                foreach ($hostlist as $host_entry)
 
1338
                                {
 
1339
                                        $sql = 'INSERT INTO ' . SITELIST_TABLE . " (site_hostname, ip_exclude)
 
1340
                                                VALUES ($host_entry, $ip_exclude)";
 
1341
                                        $db->sql_query($sql);
 
1342
                                }
 
1343
                        }
 
1344
                        
 
1345
                        if (!empty($ip_list_log))
 
1346
                        {
 
1347
                                // Update log
 
1348
                                $log_entry = ($ip_exclude) ? 'LOG_DOWNLOAD_EXCLUDE_IP' : 'LOG_DOWNLOAD_IP';
 
1349
                                add_log('admin', $log_entry, $ip_list_log);
 
1350
                        }
 
1351
 
 
1352
                        trigger_error($user->lang['SECURE_DOWNLOAD_UPDATE_SUCCESS'] . adm_back_link($this->u_action));
 
1353
                }
 
1354
                else if (isset($_POST['unsecuresubmit']))
 
1355
                {
 
1356
                        $unip_sql = request_var('unip', array(0));
 
1357
 
 
1358
                        if (sizeof($unip_sql))
 
1359
                        {
 
1360
                                $l_unip_list = '';
 
1361
 
 
1362
                                // Grab details of ips for logging information later
 
1363
                                $sql = 'SELECT site_ip, site_hostname
 
1364
                                        FROM ' . SITELIST_TABLE . '
 
1365
                                        WHERE ' . $db->sql_in_set('site_id', $unip_sql);
 
1366
                                $result = $db->sql_query($sql);
 
1367
 
 
1368
                                while ($row = $db->sql_fetchrow($result))
 
1369
                                {
 
1370
                                        $l_unip_list .= (($l_unip_list != '') ? ', ' : '') . (($row['site_ip']) ? $row['site_ip'] : $row['site_hostname']);
 
1371
                                }
 
1372
                                $db->sql_freeresult($result);
 
1373
 
 
1374
                                $sql = 'DELETE FROM ' . SITELIST_TABLE . '
 
1375
                                        WHERE ' . $db->sql_in_set('site_id', $unip_sql);
 
1376
                                $db->sql_query($sql);
 
1377
 
 
1378
                                add_log('admin', 'LOG_DOWNLOAD_REMOVE_IP', $l_unip_list);
 
1379
                        }
 
1380
 
 
1381
                        trigger_error($user->lang['SECURE_DOWNLOAD_UPDATE_SUCCESS'] . adm_back_link($this->u_action));
 
1382
                }
 
1383
        }
 
1384
 
 
1385
        /**
 
1386
        * Write display_order config field
 
1387
        */
 
1388
        function display_order($value, $key = '')
 
1389
        {
 
1390
                $radio_ary = array(0 => 'DESCENDING', 1 => 'ASCENDING');
 
1391
 
 
1392
                return h_radio('config[display_order]', $radio_ary, $value, $key);
 
1393
        }
 
1394
 
 
1395
        /**
 
1396
        * Adjust all three max_filesize config vars for display
 
1397
        */
 
1398
        function max_filesize($value, $key = '')
 
1399
        {
 
1400
                // Determine size var and adjust the value accordingly
 
1401
                $size_var = ($value >= 1048576) ? 'mb' : (($value >= 1024) ? 'kb' : 'b');
 
1402
                $value = ($value >= 1048576) ? round($value / 1048576 * 100) / 100 : (($value >= 1024) ? round($value / 1024 * 100) / 100 : $value);
 
1403
 
 
1404
                return '<input type="text" id="' . $key . '" size="8" maxlength="15" name="config[' . $key . ']" value="' . $value . '" /> <select name="' . $key . '">' . size_select_options($size_var) . '</select>';
 
1405
        }
 
1406
 
 
1407
        /**
 
1408
        * Write secure_allow_deny config field
 
1409
        */
 
1410
        function select_allow_deny($value, $key = '')
 
1411
        {
 
1412
                $radio_ary = array(1 => 'ORDER_ALLOW_DENY', 0 => 'ORDER_DENY_ALLOW');
 
1413
 
 
1414
                return h_radio('config[' . $key . ']', $radio_ary, $value, $key);
 
1415
        }
 
1416
 
 
1417
}
 
1418
 
 
1419
?>
 
 
b'\\ No newline at end of file'