(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program; if not, write to the Free Software
Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
*/
if (defined('VISCACHA_CORE') == false) {
die('Error: Hacking Attempt');
}
include 'classes/class.gpc.php';
$gpc = new GPC();
// Thanks to phpBB for this code
if (ini_isActive(@ini_get('register_globals'))) {
unset($not_used, $input);
$not_unset = array('_GET', '_POST', '_COOKIE', '_SERVER', '_SESSION', '_ENV', '_FILES', 'config', 'gpc', 'imagetype_extension', 'var');
$input = array_merge($_GET, $_POST, $_COOKIE, $_ENV, $_FILES);
if (isset($_SERVER)) {
$input = array_merge($input, $_SERVER);
}
if (isset($_SESSION) && is_array($_SESSION)) {
$input = array_merge($input, $_SESSION);
}
unset($input['input'], $input['not_unset']);
while (list($var, ) = @each($input)) {
if (!in_array($var, $not_unset)) {
unset(${$var});
}
@ini_set('default_charset', '');
header('Content-type: text/html; charset: iso-8859-1');
$htmlhead = '';
// Arrays for Dates
$months = array('January', 'February', 'March', 'April', 'May', 'June', 'July', 'August', 'September', 'October', 'November', 'December');
$days = array('Sunday', 'Monday', 'Tuesday', 'Wednesday', 'Thursday', 'Friday', 'Saturday');
// Arrays for Permissions
$gls = array('admin' => 'Is Administrator', 'gmod' => 'Is Global Moderator', 'guest' => 'Is Guest', 'members' => 'Can view Memberlist', 'profile' => 'Can view Profiles', 'pdf' => 'Can view PDF-Files', 'pm' => 'Can use PM', 'wwo' => 'Can view Who is Online', 'search' => 'Can use Search', 'team' => 'Can view Teamlist', 'usepic' => 'Can use (own) Avatar', 'useabout' => 'Create (own) Personal Page', 'usesignature' => 'Can use (own) Signature', 'downloadfiles' => 'Can download Attachements', 'forum' => 'Can view Forums', 'posttopics' => 'Can start a new Thread', 'postreplies' => 'Can write a reply', 'addvotes' => 'Can start a Poll', 'attachments' => 'Can add Attachements', 'edit' => 'Can edit own Posts', 'voting' => 'Can vote', 'docs' => 'Can view Documents/Pages');
$glk = array_keys($gls);
$glk_forums = array('downloadfiles', 'forum', 'posttopics', 'postreplies', 'addvotes', 'attachments', 'edit', 'voting');
$gll = array('admin' => 'The user ist he highest ranked Administrator in the forum. He may use this admincenter and has full control of the forum!', 'gmod' => 'The user will automatically be moderator in all forums and can use all options and actions on topics.', 'guest' => 'The users in this usergroup are (not registered) guests.', 'members' => 'May view the memberlist and use eventually observably data.', 'profile' => 'The user may view the profiles of the members and use eventually observably data.', 'pdf' => 'The user may download particular topics as PDF-file.', 'pm' => 'The user may use the Private Messaging (PM) System. He can send, receive, administer and archive private messages.', 'wwo' => 'May view the where-is-who-online-list with the users residence.', 'search' => 'May use the Search and view the results.', 'team' => 'May view the teamlist with administrators, global moderators and moderators.', 'usepic' => 'May upload his own picture for his profile (frequently named avatar) or indicate an URL to a picture.', 'useabout' => 'May create a personal site in his user profile.', 'usesignature' => 'The user may create his own signature.', 'downloadfiles' => 'The user may view and download attached files.', 'forum' => 'The user may generally view the forums and read them.', 'posttopics' => 'New topics may be started.', 'postreplies' => 'Answers to topics may be written.', 'addvotes' => 'Polls may be created within topics.', 'attachments' => 'The user may attach files to his post.', 'edit' => 'The user may edit and delete his own posts.', 'voting' => 'The user may participate in polls in topics.', 'docs' => 'May view all documents & pages.');
$guest_limitation = array('admin', 'gmod', 'pm', 'usepic', 'useabout', 'usesignature', 'voting', 'edit');
// Variables
require_once "classes/class.gpc.php";
$gpc = new GPC();
$action = $gpc->get('action', none);
if (empty($_REQUEST['page'])) {
$_REQUEST['page'] = 1;
}
// Permission and Logging Class
require_once "classes/class.permissions.php";
// A class for Templates
include_once "classes/class.template.php";
// A class for Languages
include_once "classes/class.language.php";
// Global functions
require_once "classes/function.global.php";
function isInvisibleHook($hook)
{
switch ($hook) {
You should have received a copy of the GNU General Public License
along with this program; if not, write to the Free Software
Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
*/
if (isset($_SERVER['PHP_SELF']) && basename($_SERVER['PHP_SELF']) == "function.gpc.php") {
die('Error: Hacking Attempt');
}
/* Handling of _GET, _POST, _REQUEST, _COOKIE, _SERVER, _ENV
_ENV, _SERVER: Won't be checked
_COOKIE: You can check them in the script, won't be checked
_REQUEST: Won't be checked - array has the original values (with magic_quotes if enabled)
_POST, _GET: Are checked and save (after this file)
*/
include 'classes/class.gpc.php';
$gpc = new GPC();
$http_vars = array('action' => str, 'job' => str, 'search' => str, 'reply' => str, 'name' => str, 'email' => str, 'topic' => str, 'comment' => str, 'error' => str, 'pw' => str, 'pwx' => str, 'order' => str, 'sort' => str, 'letter' => str, 'fullname' => str, 'about' => str, 'location' => str, 'signature' => str, 'hp' => str, 'icq' => str, 'pic' => str, 'question' => str, 'type' => str, 'gender' => str, 'aol' => str, 'msn' => str, 'yahoo' => str, 'jabber' => str, 'fid' => str, 'file' => str, 'groups' => str, 'board' => int, 'topic_id' => int, 'id' => int, 'page' => int, 'temp' => int, 'temp2' => int, 'dosmileys' => int, 'dowords' => int, 'birthday' => int, 'birthmonth' => int, 'birthyear' => int, 'opt_0' => int, 'opt_1' => int, 'opt_2' => int, 'opt_3' => int, 'opt_4' => int, 'opt_5' => int, 'opt_6' => int, 'opt_7' => int, 'notice' => arr_str, 'boards' => arr_int, 'delete' => arr_int);
$http_all = array_merge(array_keys($http_vars), array_keys($_POST), array_keys($_GET));
$http_all = array_unique($http_all);
$http_std = array(int => 0, arr_int => array(), arr_str => array(), str => '', none => null);
foreach ($http_all as $key) {
if (isset($http_vars[$key])) {
$type = $http_vars[$key];
} else {
$type = str;
}
if (isset($_POST[$key])) {
if ($type == int || $type == arr_int) {
$_POST[$key] = $gpc->save_int($_POST[$key]);
} else {
$_POST[$key] = $gpc->save_str($_POST[$key]);
function updateconfig($key, $type = str, $val = null)
{
if (is_array($key)) {
$key = array_map('trim', $key);
$group = $key[0];
$key = $key[1];
} else {
$key = trim($key);
}
if ($val == null) {
global $gpc;
if (!isset($gpc) || !is_object($gpc)) {
$gpc = new GPC();
}
if ($type == str) {
$type2 = none;
} else {
$type2 = $type;
}
$val = $gpc->get($key, $type2);
}
if (isset($group)) {
$this->opt[$group][$key] = $type;
$this->data[$group][$key] = $val;
} else {
$this->opt[$key] = $type;
$this->data[$key] = $val;
}
}
