public function bind($array, $ignore = '', $prefix = null)
 {
     global $_CB_framework;
     $bind = parent::bind($array, $ignore, $prefix);
     if ($bind) {
         $plugin = cbblogsClass::getPlugin();
         $myId = $_CB_framework->myId();
         $isModerator = Application::MyUser()->isGlobalModerator();
         $this->set('created_by', (int) Get::get($array, 'user', $this->get('created_by', $myId)), GetterInterface::INT);
         $this->set('title', Get::get($array, 'title', $this->get('title')), GetterInterface::STRING);
         $this->set('introtext', Get::get($array, 'blog_intro', $this->get('introtext'), GetterInterface::HTML));
         $this->set('fulltext', Get::get($array, 'blog_full', $this->get('fulltext'), GetterInterface::HTML));
         if ($plugin->params->get('blog_category_config', 1) || $isModerator) {
             $this->set('catid', (int) Get::get($array, 'category', $this->get('catid', $plugin->params->get('blog_k2_category_default', null)), GetterInterface::INT));
         } else {
             $this->set('catid', (int) $this->get('catid', $plugin->params->get('blog_k2_category_default', null)));
         }
         if (!$plugin->params->get('blog_approval', 0) && $plugin->params->get('blog_published_config', 1) || $isModerator) {
             $this->set('published', (int) Get::get($array, 'published', $this->get('published', $plugin->params->get('blog_published_default', 1)), GetterInterface::INT));
         } else {
             $this->set('published', (int) $this->get('published', $plugin->params->get('blog_approval', 0) ? 0 : $plugin->params->get('blog_published_default', 1)));
         }
         if ($plugin->params->get('blog_access_config', 1) || $isModerator) {
             $this->set('access', (int) Get::get($array, 'access', $this->get('access', $plugin->params->get('blog_access_default', 1)), GetterInterface::INT));
         } else {
             $this->set('access', (int) $this->get('access', $plugin->params->get('blog_access_default', 1)));
         }
         $this->set('ordering', (int) $this->get('ordering', 1));
         $this->map();
     }
     return $bind;
 }
Example #2
0
 /**
  * Gets an array of the authorised access levels for the user
  *
  * @return int[]
  */
 public function getAuthorisedViewLevels()
 {
     return array_unique(Get::arrayToIntegers($this->cmsOwnUser->getAuthorisedViewLevels()));
 }
	/**
	 * save notifications
	 *
	 * @param int       $id
	 * @param UserTable $user
	 */
	private function saveNotifications( $id, $user )
	{
		global $_CB_framework;

		$row				=	new NotificationTable();

		$isModerator		=	CBGroupJive::isModerator( $user->get( 'id' ) );

		$group				=	CBGroupJive::getGroup( $id );

		$row->load( array( 'user_id' => (int) $user->get( 'id' ), 'group' => (int) $group->get( 'id' ) ) );

		$returnUrl			=	$_CB_framework->pluginClassUrl( $this->element, false, array( 'action' => 'groups', 'func' => 'show', 'id' => (int) $group->get( 'id' ) ) );

		if ( ! CBGroupJive::canAccessGroup( $group, $user ) ) {
			cbRedirect( $returnUrl, CBTxt::T( 'Group does not exist.' ), 'error' );
		} elseif ( ! $this->params->get( 'notifications', 1 ) ) {
			cbRedirect( $returnUrl, CBTxt::T( 'You do not have access to notifications in this group.' ), 'error' );
		} elseif ( $row->get( 'id' ) && ( $user->get( 'id' ) != $row->get( 'user_id' ) ) ) {
			cbRedirect( $returnUrl, CBTxt::T( 'You do not have sufficient permissions to edit this users notifications.' ), 'error' );
		} elseif ( ! $isModerator ) {
			if ( ! CBGroupJive::canCreateGroupContent( $user, $group ) ) {
				cbRedirect( $returnUrl, CBTxt::T( 'You do not have sufficient permissions to notifications in this group.' ), 'error' );
			}
		}

		$row->set( 'user_id', $row->get( 'user_id', (int) $user->get( 'id' ) ) );
		$row->set( 'group', $row->get( 'group', (int) $group->get( 'id' ) ) );

		foreach ( $this->getInput()->subTree( 'params' ) as $k => $v ) {
			if ( is_array( $v ) || is_object( $v ) ) {
				continue;
			}

			$k				=	Get::clean( $k, GetterInterface::COMMAND );

			if ( $k ) {
				if ( is_numeric( $v ) ) {
					$v		=	(int) $this->input( 'post/params.' . $k, null, GetterInterface::INT );
				} else {
					$v		=	$this->input( 'post/params.' . $k, null, GetterInterface::STRING );
				}

				$row->params()->set( $k, $v );
			}
		}

		$row->set( 'params', $row->params()->asJson() );

		if ( $row->getError() || ( ! $row->check() ) ) {
			$_CB_framework->enqueueMessage( CBTxt::T( 'GROUP_NOTIFICATIONS_FAILED_TO_SAVE', 'Notifications failed to save! Error: [error]', array( '[error]' => $row->getError() ) ), 'error' );

			$this->showGroupNotifications( $id, $user );
			return;
		}

		if ( $row->getError() || ( ! $row->store() ) ) {
			$_CB_framework->enqueueMessage( CBTxt::T( 'GROUP_NOTIFICATIONS_FAILED_TO_SAVE', 'Notifications failed to save! Error: [error]', array( '[error]' => $row->getError() ) ), 'error' );

			$this->showGroupNotifications( $id, $user );
			return;
		}

		cbRedirect( $returnUrl, CBTxt::T( 'Notifications saved successfully!' ) );
	}
Example #4
0
	/**
	 * Returns the file name cleaned of the unique id
	 *
	 * @return string
	 */
	public function getFileName()
	{
		static $cache				=	array();

		$id							=	$this->get( 'value' );

		if ( ! isset( $cache[$id] ) ) {
			$domain					=	$this->getLinkDomain();

			if ( $domain ) {
				if ( in_array( $domain, array( 'youtube', 'youtu' ) ) ) {
					$name			=	preg_replace( '%^.*(?:v=|v/|/)([\w-]+).*%i', '$1', $id );
				} else {
					$name			=	pathinfo( $id, PATHINFO_FILENAME ) . '.' . $this->getExtension();
				}

				$cache[$id]			=	$name;
			} else {
				$extension			=	$this->getExtension();

				if ( $this->get( 'file' ) ) {
					$cache[$id]		=	Get::clean( pathinfo( $this->get( 'file' ), PATHINFO_FILENAME ), GetterInterface::STRING ) . '.' . $extension;
				} else {
					$cache[$id]		=	preg_replace( '/[^-a-zA-Z0-9_.]/', '', pathinfo( $id, PATHINFO_FILENAME ) ) . '.' . $extension;
				}
			}
		}

		return $cache[$id];
	}
Example #5
0
	public function bind( $array, $ignore = '', $prefix = null )
	{
		global $_CB_framework;

		$bind				=	parent::bind( $array, $ignore, $prefix );

		if ( $bind ) {
			$plugin			=	cbconsultationsClass::getPlugin();
			$myId			=	$_CB_framework->myId();
			$isModerator	=	Application::MyUser()->isGlobalModerator();

			$this->set( 'user', (int) Get::get( $array, 'user', $this->get( 'user', $myId ), GetterInterface::INT ) );
			$this->set( 'title', Get::get( $array, 'title', $this->get( 'title' ), GetterInterface::STRING ) );
			$this->set( 'consultation_intro', Get::get( $array, 'consultation_intro', $this->get( 'consultation_intro' ), GetterInterface::HTML ) );
			$this->set( 'consultation_full', Get::get( $array, 'consultation_full', $this->get( 'consultation_full' ), GetterInterface::HTML ) );
			$this->set( 'category', ( ( $plugin->params->get( 'consultation_category_config', 1 ) || $isModerator ) ? Get::get( $array, 'category', $this->get( 'category' ), GetterInterface::STRING ) : $this->get( 'category', $plugin->params->get( 'consultation_int_category_default', 'General' ) ) ) );
			$this->set( 'published', (int) ( ( ( ! $plugin->params->get( 'consultation_approval', 0 ) ) || $isModerator ) ? Get::get( $array, 'published', $this->get( 'published' ), GetterInterface::INT ) : $this->get( 'published', $plugin->params->get( 'consultation_approval', 0 ) ) ) );
			$this->set( 'access', (int) ( ( $plugin->params->get( 'consultation_access_config', 1 ) || $isModerator ) ? Get::get( $array, 'access', $this->get( 'access' ), GetterInterface::INT ) : $this->get( 'access', $plugin->params->get( 'consultation_access_default', 1 ) ) ) );
			$this->set( 'ordering', (int) $this->get( 'ordering', 1 ) );
		}

		return $bind;
	}
Example #6
0
	/**
	 * Returns the file name cleaned of the unique id
	 *
	 * @return string
	 */
	public function name()
	{
		static $cache			=	array();

		$id						=	$this->path();

		if ( ! isset( $cache[$id] ) ) {
			$name				=	$this->params()->get( 'name' );

			if ( ! $name ) {
				$extension		=	$this->extension();

				if ( $this->get( 'filename' ) ) {
					$name		=	Get::clean( pathinfo( $this->get( 'filename' ), PATHINFO_FILENAME ), GetterInterface::STRING ) . '.' . $extension;
				} else {
					$name		=	preg_replace( '/[^-a-zA-Z0-9_.]/', '', pathinfo( $id, PATHINFO_FILENAME ) ) . '.' . $extension;
				}
			}

			$cache[$id]			=	$name;
		}

		return $cache[$id];
	}
Example #7
0
 /**
  * Prepares field data for saving to database (safe transfer from $postdata to $user)
  * Override
  *
  * @param  FieldTable  $field
  * @param  UserTable   $user      RETURNED populated: touch only variables related to saving this field (also when not validating for showing re-edit)
  * @param  array       $postdata  Typically $_POST (but not necessarily), filtering required.
  * @param  string      $reason    'edit' for save profile edit, 'register' for registration, 'search' for searches
  */
 public function prepareFieldDataSave(&$field, &$user, &$postdata, $reason)
 {
     $this->_prepareFieldMetaSave($field, $user, $postdata, $reason);
     foreach ($field->getTableColumns() as $col) {
         $value = stripslashes(cbGetParam($postdata, $col, '', _CB_ALLOWRAW));
         if ($value !== null) {
             $value = Get::clean($value, GetterInterface::HTML);
         }
         $validated = $this->validate($field, $user, $col, $value, $postdata, $reason);
         if ($value !== null) {
             if ($validated && isset($user->{$col}) && (string) $user->{$col} !== (string) $value) {
                 $this->_logFieldUpdate($field, $user, $reason, $user->{$col}, $value);
             }
             $user->{$col} = $value;
         }
     }
 }
Example #8
0
	/**
	 * Replaces @MENTION with profile urls
	 *
	 * @return string
	 */
	public function profiles()
	{
		global $_CB_database, $_CB_framework;

		/** @var UserTable[] $users */
		static $users						=	array();

		foreach ( $this->words as $k => $word ) {
			if ( preg_match( $this->regexp['profile'], $word, $match ) ) {
				$cleanWord					=	Get::clean( $match[1], GetterInterface::STRING );

				if ( ! isset( $users[$cleanWord] ) ) {
					$user					=	new UserTable();

					if ( is_numeric( $match[1] ) ) {
						$user->load( (int) $match[1] );
					}

					if ( ! $user->get( 'id' ) ) {
						$wordNext2			=	( isset( $this->words[$k+1] ) && ( ! preg_match( $this->regexp['profile'], $this->words[$k+1] ) ) ? $cleanWord . ' ' . Get::clean( $this->words[$k+1], GetterInterface::STRING ) : null );
						$wordNext3			=	( $wordNext2 && isset( $this->words[$k+2] ) && ( ! preg_match( $this->regexp['profile'], $this->words[$k+2] ) ) ? $wordNext2 . ' ' . Get::clean( $this->words[$k+2], GetterInterface::STRING ) : null );
						$wordNext4			=	( $wordNext3 && isset( $this->words[$k+3] ) && ( ! preg_match( $this->regexp['profile'], $this->words[$k+3] ) ) ? $wordNext3 . ' ' . Get::clean( $this->words[$k+3], GetterInterface::STRING ) : null );
						$wordNext5			=	( $wordNext4 && isset( $this->words[$k+4] ) && ( ! preg_match( $this->regexp['profile'], $this->words[$k+4] ) ) ? $wordNext4 . ' ' . Get::clean( $this->words[$k+4], GetterInterface::STRING ) : null );
						$wordNext6			=	( $wordNext5 && isset( $this->words[$k+5] ) && ( ! preg_match( $this->regexp['profile'], $this->words[$k+5] ) ) ? $wordNext5 . ' ' . Get::clean( $this->words[$k+5], GetterInterface::STRING ) : null );

						$query				=	'SELECT c.*, u.*'
											.	"\n FROM " . $_CB_database->NameQuote( '#__users' ) . " AS u"
											.	"\n LEFT JOIN " . $_CB_database->NameQuote( '#__comprofiler' ) . " AS c"
											.	' ON c.' . $_CB_database->NameQuote( 'id' ) . ' = u.' . $_CB_database->NameQuote( 'id' )
											.	"\n WHERE ( u." . $_CB_database->NameQuote( 'username' ) . ' = ' . $_CB_database->Quote( $cleanWord )		// Match username exactly
											.	' OR u.' . $_CB_database->NameQuote( 'name' ) . ' = ' . $_CB_database->Quote( $cleanWord );					// Match name exactly

						if ( $wordNext2 ) { // 2 Words
							$query			.=	' OR u.' . $_CB_database->NameQuote( 'username' ) . ' = ' . $_CB_database->Quote( $wordNext2 )				// Match username +1 word exactly
											.	' OR u.' . $_CB_database->NameQuote( 'name' ) . ' = ' . $_CB_database->Quote( $wordNext2 );					// Match name +1 word exactly
						}

						if ( $wordNext3 ) { // 3 Words
							$query			.=	' OR u.' . $_CB_database->NameQuote( 'username' ) . ' = ' . $_CB_database->Quote( $wordNext3 )				// Match username +2 words exactly
											.	' OR u.' . $_CB_database->NameQuote( 'name' ) . ' = ' . $_CB_database->Quote( $wordNext3 );					// Match name +2 words exactly
						}

						if ( $wordNext4 ) { // 4 Words
							$query			.=	' OR u.' . $_CB_database->NameQuote( 'username' ) . ' = ' . $_CB_database->Quote( $wordNext4 )				// Match username +3 words exactly
											.	' OR u.' . $_CB_database->NameQuote( 'name' ) . ' = ' . $_CB_database->Quote( $wordNext4 );					// Match name +3 words exactly
						}

						if ( $wordNext5 ) { // 5 Words
							$query			.=	' OR u.' . $_CB_database->NameQuote( 'username' ) . ' = ' . $_CB_database->Quote( $wordNext5 )				// Match username +4 words exactly
											.	' OR u.' . $_CB_database->NameQuote( 'name' ) . ' = ' . $_CB_database->Quote( $wordNext5 );					// Match name +4 words exactly
						}

						if ( $wordNext6 ) { // 6 Words
							$query			.=	' OR u.' . $_CB_database->NameQuote( 'username' ) . ' = ' . $_CB_database->Quote( $wordNext6 )				// Match username +5 words exactly
											.	' OR u.' . $_CB_database->NameQuote( 'name' ) . ' = ' . $_CB_database->Quote( $wordNext6 );					// Match name +5 words exactly
						}

						$query				.=	' )'
											.	"\n ORDER BY u." . $_CB_database->NameQuote( 'username' ) . ", u." . $_CB_database->NameQuote( 'name' );
						$_CB_database->setQuery( $query );
						$_CB_database->loadObject( $user );
					}

					$users[$cleanWord]		=	$user;
				}

				$user						=	$users[$cleanWord];

				if ( $user->get( 'id' ) ) {
					$this->parsed			=	preg_replace( '/@' . (int) $user->get( 'id' ) . '\b|@' . preg_quote( $user->get( 'name' ), '/' ) . '\b|@' . preg_quote( $user->get( 'username' ), '/' ) . '\b|' . preg_quote( $word, '/' ) . '\b/i', '<a href="' . $_CB_framework->userProfileUrl( (int) $user->get( 'id' ) ) . '" rel="nofollow">@' . htmlspecialchars( getNameFormat( $user->get( 'name' ), $user->get( 'username' ), Application::Config()->get( 'name_format' ) ) ) . '</a>', $this->parsed );
				}
			}
		}

		return $this->parsed;
	}
 /**
  * Check if a parameters path exists without checking parents.
  *
  * @param   string  $key  The name of the param or sub-param, e.g. a.b.c
  * @return  boolean
  */
 public function hasInThis($key)
 {
     return Get::has($this->params, $key);
 }
Example #10
0
	/**
	 * Parses a string for PHP functions
	 *
	 * @param string $input
	 * @param array  $vars
	 * @return string
	 */
	static public function formatCondition( $input, $vars = array() )
	{
																// \[cb:parse(?: +function="([^"/\[\] ]+)")( +(?: ?[a-zA-Z-_]+="(?:[^"]|\\")+")+)?(?:(?:\s*/])|(?:]((?:[^\[]|\[(?!/?cb:parse[^\]]*])|(?R))+)?\[/cb:parse]))
		$regex												=	'%\[cb:parse(?: +function="([^"/\[\] ]+)")( +(?: ?[a-zA-Z-_]+="(?:[^"]|\\\\")+")+)?(?:(?:\s*/])|(?:]((?:[^\[]|\[(?!/?cb:parse[^\]]*])|(?R))+)?\[/cb:parse]))%i';

		if ( preg_match_all( $regex, $input, $results, PREG_SET_ORDER ) ) {
			foreach( $results as $matches ) {
				$function									=	( isset( $matches[1] ) ? $matches[1] : null );

				if ( $function ) {
					$value									=	( isset( $matches[3] ) ? self::formatCondition( $matches[3], $vars ) : null );
					$options								=	new Registry();

					if ( isset( $matches[2] ) ) {
						if ( preg_match_all( '/(?:([a-zA-Z-_]+)="((?:[^"]|\\\\\\\\")+)")+/i', $matches[2], $optionResults, PREG_SET_ORDER ) ) {
							foreach( $optionResults as $option ) {
								$k							=	( isset( $option[1] ) ? $option[1] : null );
								$v							=	( isset( $option[2] ) ? $option[2] : null );

								if ( $k ) {
									$options->set( $k, $v );
								}
							}
						}
					}

					$method									=	$options->get( 'method' );

					$options->unsetEntry( 'method' );

					switch ( $function ) {
						case 'clean':
							switch( $method ) {
								case 'cmd':
									$input					=	str_replace( $matches[0], Get::clean( $value, GetterInterface::COMMAND ), $input );
									break;
								case 'numeric':
									$input					=	str_replace( $matches[0], Get::clean( $value, GetterInterface::NUMERIC ), $input );
									break;
								case 'unit':
									$input					=	str_replace( $matches[0], Get::clean( $value, GetterInterface::UINT ), $input );
									break;
								case 'int':
								case 'integer':
									$input					=	str_replace( $matches[0], Get::clean( $value, GetterInterface::INT ), $input );
									break;
								case 'bool':
								case 'boolean':
									$input					=	str_replace( $matches[0], Get::clean( $value, GetterInterface::BOOLEAN ), $input );
									break;
								case 'str':
								case 'string':
									$input					=	str_replace( $matches[0], Get::clean( $value, GetterInterface::STRING ), $input );
									break;
								case 'html':
									$input					=	str_replace( $matches[0], Get::clean( $value, GetterInterface::HTML ), $input );
									break;
								case 'float':
									$input					=	str_replace( $matches[0], Get::clean( $value, GetterInterface::FLOAT ), $input );
									break;
								case 'base64':
									$input					=	str_replace( $matches[0], Get::clean( $value, GetterInterface::BASE64 ), $input );
									break;
								case 'tags':
									$input					=	str_replace( $matches[0], strip_tags( $value ), $input );
									break;
							}
							break;
						case 'convert':
							switch( $method ) {
								case 'uppercase':
									$input					=	str_replace( $matches[0], strtoupper( $value ), $input );
									break;
								case 'uppercasewords':
									$input					=	str_replace( $matches[0], ucwords( $value ), $input );
									break;
								case 'uppercasefirst':
									$input					=	str_replace( $matches[0], ucfirst( $value ), $input );
									break;
								case 'lowercase':
									$input					=	str_replace( $matches[0], strtolower( $value ), $input );
									break;
								case 'lowercasefirst':
									$input					=	str_replace( $matches[0], lcfirst( $value ), $input );
									break;
							}
							break;
						case 'math':
							$input							=	str_replace( $matches[0], self::formatMath( $value ), $input );
							break;
						case 'time':
							$input							=	str_replace( $matches[0], ( $options->has( 'time' ) ? strtotime( $options->get( 'time', null, GetterInterface::STRING ), ( is_numeric( $value ) ? (int) $value : strtotime( $value ) ) ) : strtotime( $value ) ), $input );
							break;
						case 'date':
							$offset							=	$options->get( 'offset' );
							$input							=	str_replace( $matches[0], cbFormatDate( ( is_numeric( $value ) ? (int) $value : strtotime( $value ) ), ( $offset ? true : false ), true, $options->get( 'date-format' ), $options->get( 'time-format' ), ( $offset != 'true' ? $offset : null ) ), $input );
							break;
						case 'length':
							$input							=	str_replace( $matches[0], strlen( $value ), $input );
							break;
						case 'replace':
							$input							=	str_replace( $matches[0], ( $options->has( 'count' ) ? str_replace( $options->get( 'search' ), $options->get( 'replace' ), $value, $options->get( 'count', 0, GetterInterface::INT ) ) : str_replace( $options->get( 'search' ), $options->get( 'replace' ), $value ) ), $input );
							break;
						case 'position':
							switch( $options->get( 'occurrence' ) ) {
								case 'last':
									$input					=	str_replace( $matches[0], strrpos( $value, $options->get( 'search' ) ), $input );
									break;
								case 'first':
								default:
									$input					=	str_replace( $matches[0], strpos( $value, $options->get( 'search' ) ), $input );
									break;
							}
							break;
						case 'occurrence':
							$input							=	str_replace( $matches[0], strstr( $value, $options->get( 'search' ) ), $input );
							break;
						case 'repeat':
							$input							=	str_replace( $matches[0], str_repeat( $value, $options->get( 'count', 0, GetterInterface::INT ) ), $input );
							break;
						case 'extract':
							$input							=	str_replace( $matches[0], ( $options->has( 'length' ) ? substr( $value, $options->get( 'start', 0, GetterInterface::INT ), $options->get( 'length', 0, GetterInterface::INT ) ) : substr( $value, $options->get( 'start', 0, GetterInterface::INT ) ) ), $input );
							break;
						case 'trim':
							switch( $options->get( 'direction' ) ) {
								case 'left':
									$input					=	str_replace( $matches[0], ( $options->has( 'characters' ) ? ltrim( $value, $options->get( 'characters', null, GetterInterface::STRING ) ) : ltrim( $value ) ), $input );
									break;
								case 'right':
									$input					=	str_replace( $matches[0], ( $options->has( 'characters' ) ? rtrim( $value, $options->get( 'characters', null, GetterInterface::STRING ) ) : rtrim( $value ) ), $input );
									break;
								default:
									$input					=	str_replace( $matches[0], ( $options->has( 'characters' ) ? trim( $value, $options->get( 'characters', null, GetterInterface::STRING ) ) : trim( $value ) ), $input );
									break;
							}
							break;
						case 'encode':
							switch( $method ) {
								case 'cslashes':
									$input					=	str_replace( $matches[0], addcslashes( $value, $options->get( 'characters', null, GetterInterface::STRING ) ), $input );
									break;
								case 'slashes':
									$input					=	str_replace( $matches[0], addslashes( $value ), $input );
									break;
								case 'entity':
									$input					=	str_replace( $matches[0], htmlentities( $value ), $input );
									break;
								case 'html':
									$input					=	str_replace( $matches[0], htmlspecialchars( $value ), $input );
									break;
								case 'url':
									$input					=	str_replace( $matches[0], urlencode( $value ), $input );
									break;
								case 'base64':
									$input					=	str_replace( $matches[0], base64_encode( $value ), $input );
									break;
								case 'md5':
									$input					=	str_replace( $matches[0], md5( $value ), $input );
									break;
								case 'sha1':
									$input					=	str_replace( $matches[0], sha1( $value ), $input );
									break;
								case 'password':
									$user					=	new UserTable();

									$input					=	str_replace( $matches[0], $user->hashAndSaltPassword( $value ), $input );
									break;
							}
							break;
						case 'decode':
							switch( $method ) {
								case 'cslashes':
									$input					=	str_replace( $matches[0], stripcslashes( $value ), $input );
									break;
								case 'slashes':
									$input					=	str_replace( $matches[0], stripslashes( $value ), $input );
									break;
								case 'entity':
									$input					=	str_replace( $matches[0], html_entity_decode( $value ), $input );
									break;
								case 'html':
									$input					=	str_replace( $matches[0], htmlspecialchars_decode( $value ), $input );
									break;
								case 'url':
									$input					=	str_replace( $matches[0], urldecode( $value ), $input );
									break;
								case 'base64':
									$input					=	str_replace( $matches[0], base64_encode( $value ), $input );
									break;
							}
							break;
						default:
							if ( ! $function ) {
								continue;
							}

							$class							=	$options->get( 'class', null, GetterInterface::STRING );
							$subFunction					=	null;
							$static							=	false;
							$result							=	null;

							if ( strpos( $function, '::' ) !== false ) {
								list( $class, $function )	=	explode( '::', $function, 2 );

								$static						=	true;
							} elseif ( strpos( $class, '::' ) !== false ) {
								$subFunction				=	$function;

								list( $class, $function )	=	explode( '::', $class, 2 );

								$static						=	true;
							}

							if ( $class ) {
								$object						=	null;

								$options->unsetEntry( 'class' );

								if ( isset( $vars[$class] ) && is_object( $vars[$class] ) ) {
									$object					=	$vars[$class];
									$class					=	get_class( $object );
								}

								if ( $static ) {
									if ( $subFunction ) {
										if ( is_callable( array( $class, $function ) ) ) {
											$object			=	call_user_func_array( array( $class, $function ), array() );

											if ( method_exists( $object, $subFunction ) ) {
												$result		=	call_user_func_array( array( $object, $subFunction ), $options->asArray() );
											}
										}
									} else {
										if ( is_callable( array( $class, $function ) ) ) {
											$result			=	call_user_func_array( array( $class, $function ), $options->asArray() );
										}
									}
								} else {
									if ( $object || class_exists( $class ) ) {
										if ( ! $object ) {
											$object			=	new $class();

											if ( $value && method_exists( $object, 'load' ) ) {
												$object->load( $value );
											}
										}

										if ( method_exists( $object, $function ) ) {
											$result			=	call_user_func_array( array( $object, $function ), $options->asArray() );
										}
									}
								}
							} else {
								if ( function_exists( $function ) ) {
									$result					=	call_user_func_array( $function, $options->asArray() );
								}
							}

							if ( $method && is_object( $result ) && method_exists( $result, $method ) ) {
								$result						=	call_user_func_array( array( $result, $method ), $options->asArray() );
							}

							if ( ( ! is_array( $result ) ) && ( ! is_object( $result ) ) ) {
								$input						=	str_replace( $matches[0], $result, $input );
							}
							break;
					}

					// If no replacement is done above then the string still exists; lets just replace the substitution with the found value:
					$input									=	str_replace( $matches[0], $value, $input );
				}
			}

			$input											=	self::formatCondition( $input, $vars );
		}

		return $input;
	}
 /**
  * Utility function to return a value from a named array or a specified default.
  * TO CONTRARY OF MAMBO AND JOOMLA mos Get Param:
  * 1) DOES NOT MODIFY ORIGINAL ARRAY
  * 2) Does sanitize ints
  * 3) Does return default array() for a default value array(0) which indicates sanitizing an array of ints.
  *
  * @param  array   $arr   A named array
  * @param  string  $name  The key to search for
  * @param  mixed   $def   The default value to give if no key found
  * @param  int     $mask  An options mask: _MOS_NOTRIM prevents trim, _MOS_ALLOWHTML allows safe html, _MOS_ALLOWRAW allows raw input
  * @return string|array
  */
 function cbGetParam(&$arr, $name, $def = null, $mask = 0)
 {
     if (isset($arr[$name])) {
         if (is_array($arr[$name])) {
             $ret = array();
             foreach (array_keys($arr[$name]) as $k) {
                 $ret[$k] = cbGetParam($arr[$name], $k, $def, $mask);
                 if ($def === array(0)) {
                     $ret[$k] = (int) $ret[$k];
                 }
             }
         } else {
             $ret = $arr[$name];
             if (is_string($ret)) {
                 if (!($mask & _CB_NOTRIM)) {
                     $ret = trim($ret);
                 }
                 if (!($mask & _CB_ALLOWRAW)) {
                     $ret = Get::clean($ret, GetterInterface::STRING);
                 }
                 if (is_int($def)) {
                     $ret = (int) $ret;
                 } elseif (is_float($def)) {
                     $ret = (double) $ret;
                 } elseif (!get_magic_quotes_gpc()) {
                     $ret = addslashes($ret);
                 }
             }
         }
         return $ret;
     } elseif (false !== ($firstSeparator = strpos($name, '['))) {
         // html-input-name-encoded array selection, e.g. a[b][c]
         $indexes = null;
         $mainArrName = substr($name, 0, $firstSeparator);
         $count = preg_match_all('/\\[([^\\[\\]]+)\\]/', substr($name, $firstSeparator), $indexes);
         if (isset($arr[$mainArrName]) && $count > 0) {
             $a = $arr[$mainArrName];
             for ($i = 0; $i < $count - 1; $i++) {
                 if (!isset($a[$indexes[1][$i]])) {
                     $a = null;
                     break;
                 }
                 $a = $a[$indexes[1][$i]];
             }
         } else {
             $a = null;
             $i = null;
         }
         if ($a !== null) {
             return cbGetParam($a, $indexes[1][$i], $def, $mask);
         }
     }
     if ($def === array(0)) {
         return array();
     }
     return $def;
 }
Example #12
0
 /**
  * Gets the value of the class variable
  *
  * @param  string        $var      The name of the class variable
  * @param  mixed         $default  The value to return if no value is found
  * @param  string|array  $type     [optional] Default: null: GetterInterface::COMMAND. Or const int GetterInterface::COMMAND|GetterInterface::INT|... or array( const ) or array( $key => const )
  * @return mixed                   The value of the class var (or null if no var of that name exists)
  */
 public function get($var, $default = null, $type = null)
 {
     if (!isset($this->{$var})) {
         return $default;
     }
     if ($type === null) {
         return $this->{$var};
     }
     return Get::clean($this->{$var}, $type);
 }
	/**
	 * Saves activity
	 *
	 * @param int       $id
	 * @param Activity  $stream
	 * @param UserTable $user
	 * @param UserTable $viewer
	 */
	private function saveActivity( $id, $stream, $user, $viewer )
	{
		global $_CB_framework, $_PLUGINS;

		$cbModerator					=	CBActivity::isModerator( (int) $viewer->get( 'id' ) );

		CBActivity::getTemplate( 'activity', false, false );

		$row							=	new ActivityTable();

		$row->load( (int) $id );

		$canAccess						=	false;

		if ( ! $row->get( 'id' ) ) {
			if ( CBActivity::canCreate( $user, $viewer, $stream ) ) {
				$canAccess				=	true;
			}
		} elseif ( ( ( $row->get( 'type' ) == 'status' ) || ( $row->get( 'subtype' ) == 'status' ) ) && ( $cbModerator || ( $viewer->get( 'id' ) == $row->get( 'user_id' ) ) ) ) {
			$canAccess					=	true;
		}

		if ( ! $canAccess ) {
			header( 'HTTP/1.0 404 Not Found' );
			exit();
		}

		$messageLimit					=	( $cbModerator ? 0 : (int) $stream->get( 'message_limit', 400 ) );
		$showActions					=	(int) $stream->get( 'actions', 1 );
		$actionLimit					=	( $cbModerator ? 0 : (int) $stream->get( 'actions_message_limit', 100 ) );
		$showLocations					=	(int) $stream->get( 'locations', 1 );
		$locationLimit					=	( $cbModerator ? 0 : (int) $stream->get( 'locations_address_limit', 200 ) );
		$showLinks						=	(int) $stream->get( 'links', 1 );
		$linkLimit						=	( $cbModerator ? 0 : (int) $stream->get( 'links_link_limit', 5 ) );
		$showTags						=	(int) $stream->get( 'tags', 1 );

		$message						=	trim( $this->input( 'message', $row->get( 'message', null, GetterInterface::HTML ), GetterInterface::HTML ) );

		// Remove duplicate spaces:
		$message						=	preg_replace( '/ {2,}/i', ' ', $message );
		// Remove duplicate tabs:
		$message						=	preg_replace( '/\t{2,}/i', "\t", $message );
		// Remove duplicate linebreaks:
		$message						=	preg_replace( '/(\r\n|\r|\n){2,}/i', '$1', $message );

		$row->set( 'user_id', $row->get( 'user_id', $viewer->get( 'id' ) ) );

		if ( $stream->get( 'type' ) && ( $stream->get( 'type' ) != 'status' ) ) {
			$row->set( 'type', $row->get( 'type', $stream->get( 'type' ) ) );
			$row->set( 'subtype', $row->get( 'subtype', 'status' ) );

			$parentDefault				=	null;
		} else {
			$row->set( 'type', $row->get( 'type', 'status' ) );

			$parentDefault				=	( $viewer->get( 'id' ) != $user->get( 'user_id' ) ? $user->get( 'user_id' ) : null );
		}

		$row->set( 'item', $row->get( 'item', $stream->get( 'item' ) ) );
		$row->set( 'parent', $row->get( 'parent', $stream->get( 'parent', $parentDefault ) ) );

		if ( $messageLimit && ( cbutf8_strlen( $message ) > $messageLimit ) ) {
			$message					=	cbutf8_substr( $message, 0, $messageLimit );
		}

		$row->set( 'message', $message );

		if ( $showActions ) {
			$action						=	$this->getInput()->subTree( 'actions' );
			$actionId					=	(int) $action->get( 'id', 0, GetterInterface::INT );
			$actionMessage				=	( $actionId ? trim( $action->get( 'message', '', GetterInterface::STRING ) ) : '' );

			// Remove linebreaks:
			$actionMessage				=	str_replace( array( "\n", "\r\n" ), ' ', $actionMessage );
			// Remove duplicate spaces:
			$actionMessage				=	preg_replace( '/ {2,}/i', ' ', $actionMessage );
			// Remove duplicate tabs:
			$actionMessage				=	preg_replace( '/\t{2,}/i', "\t", $actionMessage );

			if ( $actionLimit && ( cbutf8_strlen( $actionMessage ) > $actionLimit ) ) {
				$actionMessage			=	cbutf8_substr( $actionMessage, 0, $actionLimit );
			}

			$actionId					=	( $actionMessage ? $actionId : 0 );

			$newAction					=	array(	'id'		=>	$actionId,
													'message'	=>	( $actionId ? $actionMessage : '' ),
													'emote'		=>	( $actionId ? (int) $action->get( 'emote', 0, GetterInterface::INT ) : 0 )
												);

			$row->params()->set( 'action', $newAction );
		}

		if ( $showLocations ) {
			$location					=	$this->getInput()->subTree( 'location' );
			$locationId					=	(int) $location->get( 'id', 0, GetterInterface::INT );
			$locationPlace				=	( $locationId ? trim( $location->get( 'place', '', GetterInterface::STRING ) ) : '' );
			$locationAddress			=	( $locationId ? trim( $location->get( 'address', '', GetterInterface::STRING ) ) : '' );

			if ( $locationLimit && ( cbutf8_strlen( $locationPlace ) > $locationLimit ) ) {
				$locationPlace			=	cbutf8_substr( $locationPlace, 0, $locationLimit );
			}

			if ( $locationLimit && ( cbutf8_strlen( $locationAddress ) > $locationLimit ) ) {
				$locationAddress		=	cbutf8_substr( $locationAddress, 0, $locationLimit );
			}

			$locationId					=	( $locationPlace ? $locationId : 0 );

			$newLocation				=	array(	'id'		=>	$locationId,
													'place'		=>	( $locationId ? $locationPlace : '' ),
													'address'	=>	( $locationId ? $locationAddress : '' )
												);

			$row->params()->set( 'location', $newLocation );
		}

		if ( $showLinks ) {
			$links						=	$this->getInput()->subTree( 'links' );
			$newLinks					=	array();

			/** @var ParamsInterface[] $links */
			foreach ( $links as $i => $link ) {
				if ( $linkLimit && ( ( $i + 1 ) > $linkLimit ) ) {
					break;
				}

				$linkUrl				=	trim( $link->get( 'url', '', GetterInterface::STRING ) );

				if ( $linkUrl ) {
					$attachment			=	$stream->parser()->attachment( $linkUrl );

					if ( ! $attachment ) {
						continue;
					}

					$linkType			=	$attachment->get( 'type', '', GetterInterface::STRING );

					switch ( $linkType ) {
						case 'video':
							$linkMedia	=	$attachment->subTree( 'media' )->subTree( 'video' )->subTree( 0 );
							break;
						case 'audio':
							$linkMedia	=	$attachment->subTree( 'media' )->subTree( 'audio' )->subTree( 0 );
							break;
						case 'image':
						case 'url':
						default:
							$linkMedia	=	$attachment->subTree( 'media' )->subTree( 'image' )->subTree( 0 );
							break;
					}

					$newLinks[]			=	array(	'url'			=>	$linkUrl,
													'text'			=>	null,
													'title'			=>	trim( $link->get( 'title', $attachment->subTree( 'title' )->get( 0, '', GetterInterface::STRING ), GetterInterface::STRING ) ),
													'description'	=>	trim( $link->get( 'description', $attachment->subTree( 'description' )->get( 0, '', GetterInterface::STRING ), GetterInterface::STRING ) ),
													'media'			=>	array(	'url' => $linkMedia->get( 'url', '', GetterInterface::STRING ),
																				'mimetype' => $linkMedia->get( 'mimetype', '', GetterInterface::STRING ),
																				'extension' => $linkMedia->get( 'extension', '', GetterInterface::STRING ),
																				'custom' => ''
																			),
													'type'			=>	$linkType,
													'thumbnail'		=>	$link->get( 'thumbnail', 1, GetterInterface::INT ),
													'internal'		=>	0,
												);
				}
			}

			$row->params()->set( 'links', $newLinks );
		}

		if ( $row->get( 'id' ) ) {
			$row->params()->set( 'modified', $_CB_framework->getUTCDate() );
		}

		$row->set( 'params', $row->params()->asJson() );

		if ( $row->getError() || ( ! $row->check() ) ) {
			header( 'HTTP/1.0 500 Internal Server Error' );
			exit();
		}

		if ( $row->getError() || ( ! $row->store() ) ) {
			header( 'HTTP/1.0 500 Internal Server Error' );
			exit();
		}

		if ( $showTags ) {
			$tagsStream					=	$row->tags( $stream->source() );

			if ( $tagsStream ) {
				$tags					=	$this->input( 'tags', array(), GetterInterface::RAW );

				foreach ( $tagsStream->data() as $tag ) {
					/** @var TagTable $tag */
					if ( ! in_array( $tag->get( 'user' ), $tags ) ) {
						$tag->delete();

						$tagsStream->resetData();
					} else {
						$key			=	array_search( $tag->get( 'user' ), $tags );

						if ( $key !== false ) {
							unset( $tags[$key] );
						}
					}
				}

				foreach ( $tags as $tagUser ) {
					if ( is_numeric( $tagUser ) ) {
						$tagUser		=	(int) $tagUser;
					} else {
						$tagUser		=	Get::clean( $tagUser, GetterInterface::STRING );
					}

					$tag				=	new TagTable();

					$tag->set( 'user_id', (int) $tagsStream->user()->get( 'id' ) );
					$tag->set( 'type', $tagsStream->get( 'type', null, GetterInterface::STRING ) );
					$tag->set( 'subtype', $tagsStream->get( 'subtype', null, GetterInterface::STRING ) );
					$tag->set( 'item', $tagsStream->get( 'item', null, GetterInterface::STRING ) );
					$tag->set( 'parent', $tagsStream->get( 'parent', null, GetterInterface::STRING ) );
					$tag->set( 'user', $tagUser );

					$tag->store();

					$tagsStream->resetData();
				}
			}
		}

		$rows							=	array( &$row );

		if ( $stream->get( 'comments', 1 ) ) {
			CBActivity::preFetchComments( $rows, 'activity' );
		}

		if ( $stream->get( 'tags', 1 ) ) {
			CBActivity::preFetchTags( $rows, 'activity' );
		}

		CBActivity::preFetchUsers( $rows );

		$_PLUGINS->trigger( 'activity_onPushActivity', array( $stream, $row ) );

		echo HTML_cbactivityActivity::showActivity( $rows, $stream, 4, $user, $viewer, $this );

		header( 'HTTP/1.0 200 OK' );
		exit();
	}
Example #14
0
	/**
	 * Valiadtes a captcha code
	 *
	 * @param null|string $code
	 * @param bool        $reset
	 * @return bool
	 */
	public function validateCaptcha( $code = null, $reset = true )
	{
		global $_CB_framework, $_CB_database;

		if ( ! $code ) {
			$code									=	$this->getCaptchaInputValue();
		}

		$valid										=	false;
		$ipAddresses								=	cbGetIParray();
		$ipAddress									=	trim( array_shift( $ipAddresses ) );

		if ( $code ) switch( $this->mode ) {
			case 'recaptcha':
				$client								=	new GuzzleHttp\Client();

				try {
					$body							=	array(	'secret' => $this->params->get( 'captcha_recaptcha_secret_key', null ),
																'remoteip' => $ipAddress,
																'response' => $code
															);

					$result							=	$client->get( 'https://www.google.com/recaptcha/api/siteverify', array( 'query' => $body ) );

					if ( $result->getStatusCode() == 200 ) {
						$response					=	$result->json();

						if ( isset( $response['success'] ) && ( $response['success'] == true ) ) {
							$valid					=	true;
						}
					}
				} catch ( Exception $e ) {}
				break;
			case 'question':
				$captchaQuestions					=	"What is 2 plus 2?=4\n"
													.	"What is 1 times 6?=6\n"
													.	"What is 9 divide 3?=3\n"
													.	"Are you a Human?=Yes\n"
													.	"Are you a Bot?=No\n"
													.	"How many words is this?=5\n"
													.	"How many fingers on a hand?=5\n"
													.	"How many toes on a foot?=5\n"
													.	"What is 10 add 10?=20\n"
													.	"What is 0 multiply 100?=0\n"
													.	"What is 5 minus 1?=4\n"
													.	"What is 2 add 2?=4\n"
													.	"4th letter of Test is?=t\n"
													.	"20, 81, 3; which is smallest?=3\n"
													.	"12, 31, 9; which is greatest?=31\n"
													.	"Purple, car, dog; which is a color?=Purple\n"
													.	"Cat, plane, rock; which is an animal?=Cat\n"
													.	"If tomorrow is Monday; what day is today?=Sunday\n"
													.	"Tim, cat, dog; which is human?=Tim";

				$questions							=	$this->params->get( 'captcha_internal_questions', $captchaQuestions );

				if ( ! $questions ) {
					$questions						=	$captchaQuestions;
				}

				$questions							=	explode( "\n", $questions );
				$codes								=	array();

				foreach ( $questions as $question ) {
					$question						=	explode( '=', $question );
					$key							=	( isset( $question[0] ) ? trim( CBTxt::T( $question[0] ) ) : null );
					$value							=	( isset( $question[1] ) ? trim( CBTxt::T( $question[1] ) ) : null );

					if ( $key && $value ) {
						$codes[$key]				=	$value;
					}
				}

				$captchaCode						=	$this->getCaptchaCode();

				if ( $captchaCode && isset( $codes[$captchaCode] ) && ( strtolower( $codes[$captchaCode] ) == strtolower( $code ) ) ) {
					$valid							=	true;
				}
				break;
			case 'internal':
			default:
				$captchaCode						=	$this->getCaptchaCode();

				if ( $captchaCode && ( $captchaCode == $code ) ) {
					$valid							=	true;
				}
				break;
		}

		if ( $valid && $reset ) {
			$this->setSession( null );
		}

		if ( $this->params->get( 'captcha_honeypot', 1 ) ) {
			$honeyPot								=	$this->params->get( 'captcha_honeypot_name', 'full_address' );

			if ( ! $honeyPot ) {
				$honeyPot							=	'full_address';
			}

			if ( Get::get( $_REQUEST, $honeyPot, null, GetterInterface::STRING ) ) {
				$valid								=	false;
			}
		}

		if ( $reset ) {
			$blocked								=	cbantispamClass::getUserBlock( null, $ipAddress );
			$message								=	$this->params->get( 'captcha_autoblock_msg', 'Your captcha attempt has been blocked. Reason: [reason]' );

			if ( $blocked ) {
				if ( $message ) {
					$extras							=	array(	'[duration]' => ucwords( strtolower( str_replace( array( '+', '-' ), '', $blocked->get( 'duration' ) ) ) ),
																'[date]' => $blocked->get( 'date' ) . ' UTC',
																'[expire]' => $blocked->getExpire() . ( $blocked->get( 'duration' ) ? ' UTC' : null )
															);

					$extras							=	array_merge( $extras, array( '[reason]' => CBTxt::T( 'CAPTCHA_BLOCK_REASON', ( $blocked->get( 'reason' ) ? $blocked->get( 'reason' ) : 'Spam.' ), $extras ) ) );

					$this->error					=	CBTxt::T( 'CAPTCHA_BLOCK_MESSAGE', $message, $extras );
				}

				$valid								=	false;
			} elseif ( $this->params->get( 'general_attempts', 1 ) ) {
				if ( ! $valid ) {
					$timeframe						=	$this->params->get( 'captcha_autoblock_timeframe', '-1 DAY' );

					$query							=	'SELECT *'
													.	"\n FROM " . $_CB_database->NameQuote( '#__comprofiler_plugin_antispam_attempts' )
													.	"\n WHERE " . $_CB_database->NameQuote( 'ip_address' ) . " = " . $_CB_database->Quote( $ipAddress )
													.	"\n AND " . $_CB_database->NameQuote( 'type' ) . " = " . $_CB_database->Quote( 'captcha' )
													.	"\n ORDER BY " . $_CB_database->NameQuote( 'date' ) . " DESC";
					$_CB_database->setQuery( $query, 0, 1 );
					$attempt						=	new cbantispamAttemptsTable();
					$_CB_database->loadObject( $attempt );

					if ( ! $attempt->get( 'id' ) ) {
						$attempt->set( 'ip_address', $ipAddress );
						$attempt->set( 'type', 'captcha' );
						$attempt->set( 'count', 1 );
					} elseif ( ( ! $timeframe ) || ( $_CB_framework->getUTCTimestamp( $attempt->get( 'date' ) ) >= $_CB_framework->getUTCTimestamp( strtolower( $timeframe ) ) ) ) {
						$attempt->set( 'count', ( (int) $attempt->get( 'count' ) + 1 ) );
					}

					$attempt->set( 'date', $_CB_framework->getUTCDate() );

					$attempt->store();

					if ( $this->params->get( 'captcha_autoblock', 1 ) && cbantispamClass::isUserBlockable( null, $ipAddress ) ) {
						$count						=	(int) $this->params->get( 'captcha_autoblock_count', 20 );

						if ( ! $count ) {
							$count					=	20;
						}

						if ( (int) $attempt->get( 'count' ) >= $count ) {
							$reason					=	$this->params->get( 'captcha_autoblock_reason', 'Too many failed captcha attempts.' );

							if ( $this->params->get( 'captcha_autoblock_method', 0 ) ) {
								$row				=	new cbantispamBlockTable();

								$row->set( 'type', 'ip' );
								$row->set( 'value', $ipAddress );
								$row->set( 'date', $_CB_framework->getUTCDate() );
								$row->set( 'duration', $this->params->get( 'captcha_autoblock_dur', '+1 HOUR' ) );
								$row->set( 'reason', $reason );

								$row->store();

								if ( $message ) {
									$extras			=	array(	'[duration]' => ucwords( strtolower( str_replace( array( '+', '-' ), '', $row->get( 'duration' ) ) ) ),
																'[date]' => $row->get( 'date' ) . ' UTC',
																'[expire]' => $row->getExpire() . ( $row->get( 'duration' ) ? ' UTC' : null )
															);

									$extras			=	array_merge( $extras, array( '[reason]' => CBTxt::T( 'CAPTCHA_BLOCK_REASON', ( $row->get( 'reason' ) ? $row->get( 'reason' ) : 'Spam.' ), $extras ) ) );

									$this->error	=	CBTxt::T( 'CAPTCHA_BLOCK_MESSAGE', $message, $extras );
								}
							} elseif ( $message ) {
								$extras				=	array(	'[duration]' => null,
																'[date]' => null,
																'[expire]' => null
															);

								$extras				=	array_merge( $extras, array( '[reason]' => CBTxt::T( 'CAPTCHA_BLOCK_REASON', ( $reason ? $reason : 'Spam.' ), $extras ) ) );

								$this->error		=	CBTxt::T( 'CAPTCHA_BLOCK_MESSAGE', $message, $extras );
							}
						}
					}
				} else {
					$query							=	'SELECT *'
													.	"\n FROM " . $_CB_database->NameQuote( '#__comprofiler_plugin_antispam_attempts' )
													.	"\n WHERE " . $_CB_database->NameQuote( 'ip_address' ) . " = " . $_CB_database->Quote( $ipAddress )
													.	"\n AND " . $_CB_database->NameQuote( 'type' ) . " = " . $_CB_database->Quote( 'captcha' )
													.	"\n ORDER BY " . $_CB_database->NameQuote( 'date' ) . " DESC";
					$_CB_database->setQuery( $query );
					$attempts						=	$_CB_database->loadObjectList( null, 'cbantispamAttemptsTable', array( $_CB_database ) );

					/** @var cbantispamAttemptsTable[] $attempts */
					foreach ( $attempts as $attempt ) {
						$attempt->delete();
					}
				}
			}
		}

		return $valid;
	}
Example #15
0
	public function bind( $array, $ignore = '', $prefix = null )
	{
		global $_CB_framework;

		$bind				=	parent::bind( $array, $ignore, $prefix );

		if ( $bind ) {
			$plugin			=	cbhangoutClass::getPlugin();
			$myId			=	$_CB_framework->myId();
			$isModerator	=	Application::MyUser()->isGlobalModerator();

			$this->set( 'created_by', (int) Get::get( $array, 'user', $this->get( 'created_by', $myId ) ), GetterInterface::INT );
			$this->set( 'title', Get::get( $array, 'title', $this->get( 'title' ), GetterInterface::STRING ) );
			$this->set( 'introtext', Get::get( $array, 'hangout_intro', $this->get( 'introtext' ), GetterInterface::HTML ) );
			$this->set( 'fulltext', Get::get( $array, 'hangout_full', $this->get( 'fulltext' ), GetterInterface::HTML ) );
			$this->set( 'catid', (int) ( ( $plugin->params->get( 'hangout_category_config', 1 ) || $isModerator ) ? Get::get( $array, 'category', $this->get( 'catid' ), GetterInterface::INT ) : $this->get( 'catid', $plugin->params->get( 'hangout_j_category_default', null ) ) ) );
			$this->set( 'state', (int) ( ( ( ! $plugin->params->get( 'hangout_approval', 0 ) ) || $isModerator ) ? Get::get( $array, 'published', $this->get( 'state' ), GetterInterface::INT ) : $this->get( 'state', ( $isModerator || ( ! $plugin->params->get( 'hangout_approval', 0 ) ) ? 1 : 0 ) ) ) );
			$this->set( 'access', (int) ( ( $plugin->params->get( 'hangout_access_config', 1 ) || $isModerator ) ? Get::get( $array, 'access', $this->get( 'access' ), GetterInterface::INT ) : $this->get( 'access', $plugin->params->get( 'hangout_access_default', 1 ) ) ) );
			$this->set( 'ordering', (int) $this->get( 'ordering', 1 ) );

			$this->map();
		}

		return $bind;
	}
Example #16
0
	/**
	 * @param cbinvitesInviteTable $row
	 * @return bool
	 */
	static public function sendInvite( &$row )
	{
		global $_CB_framework, $_PLUGINS;

		$plugin						=	$_PLUGINS->getLoadedPlugin( 'user', 'cbinvites' );

		if ( ! $plugin ) {
			return false;
		}

		$params						=	$_PLUGINS->getPluginParams( $plugin );

		$invitePrefix				=	CBTxt::T( $params->get( 'invite_prefix', '[sitename] - ' ) );
		$inviteHeader				=	CBTxt::T( $params->get( 'invite_header', '<p>You have been invited by [username] to join [sitename]!</p><br>' ) );
		$inviteFooter				=	CBTxt::T( $params->get( 'invite_footer', '<br><p>Invite Code - [code]<br>[sitename] - [site]<br>Registration - [register]<br>[username] - [profile]</p>' ) );

		$cbUser						=	CBuser::getInstance( (int) $row->get( 'user_id' ), false );
		$user						=	$cbUser->getUserData();

		$extra						=	array(	'sitename' => $_CB_framework->getCfg( 'sitename' ),
												'site' => $_CB_framework->getCfg( 'live_site' ),
												'register' => $_CB_framework->viewUrl( 'registers', false, ( $row->get( 'code' ) ? array( 'invite_code' => $row->get( 'code' ) ) : array() ) ),
												'profile' => $_CB_framework->viewUrl( 'userprofile', false, array( 'user' => (int) $row->get( 'user_id' ) ) ),
												'code' => $row->get( 'code' ),
												'to' => $row->get( 'to' )
											);

		$mailFromName				=	Get::clean( $cbUser->replaceUserVars( $params->get( 'invite_from_name', null ), true, false, $extra ), GetterInterface::STRING );
		$mailFromAddr				=	Get::clean( $cbUser->replaceUserVars( $params->get( 'invite_from_address', null ), true, false, $extra ), GetterInterface::STRING );
		$mailTo						=	Get::clean( $cbUser->replaceUserVars( $row->get( 'to' ), true, false, $extra ), GetterInterface::STRING );
		$mailCC						=	Get::clean( $cbUser->replaceUserVars( $params->get( 'invite_cc', null ), true, false, $extra ), GetterInterface::STRING );
		$mailBCC					=	Get::clean( $cbUser->replaceUserVars( $params->get( 'invite_bcc', null ), true, false, $extra ), GetterInterface::STRING );
		$mailSubject				=	Get::clean( $cbUser->replaceUserVars( ( $invitePrefix . ( $row->get( 'subject' ) ? $row->get( 'subject' ) : CBTxt::T( 'Join Me!' ) ) ), true, false, $extra ), GetterInterface::STRING );
		$mailBody					=	Get::clean( $cbUser->replaceUserVars( ( $inviteHeader . $row->get( 'body' ) . $inviteFooter ), false, false, $extra ), GetterInterface::HTML );
		$mailAttachments			=	Get::clean( $cbUser->replaceUserVars( $params->get( 'invite_attachments', null ), true, false, $extra ), GetterInterface::STRING );

		if ( $mailTo ) {
			$mailTo					=	preg_split( ' *, *', $mailTo );
		}

		if ( $mailCC ) {
			$mailCC					=	preg_split( ' *, *', $mailCC );
		}

		if ( $mailBCC ) {
			$mailBCC				=	preg_split( ' *, *', $mailBCC );
		}

		if ( $mailAttachments ) {
			$mailAttachments		=	preg_split( ' *, *', $mailAttachments );
		}

		if ( $mailTo && $mailSubject && $mailBody ) {
			if ( ! $mailFromName ) {
				$mailFromName		=	$user->name;
				$replyToName		=	null;
			} else {
				$replyToName		=	$user->name;
			}

			if ( ! $mailFromAddr ) {
				$mailFromAddr		=	$user->email;
				$replyToAddr		=	null;
			} else {
				$replyToAddr		=	$user->email;
			}

			$error					=	null;
			$sent					=	comprofilerMail( $mailFromAddr, $mailFromName, $mailTo, $mailSubject, $mailBody, ( (int) $params->get( 'invite_editor', 2 ) >= 2 ? true : false ), $mailCC, $mailBCC, $mailAttachments, $replyToAddr, $replyToName, $error );

			if ( $sent ) {
				return true;
			} else {
				$row->setError( ( $error ? $error : CBTxt::T( 'Mailer failed to send.' ) ) );
			}
		} else {
			if ( ! $mailTo ) {
				$row->setError( CBTxt::T( 'To address missing.' ) );
			} elseif ( ! $mailSubject ) {
				$row->setError( CBTxt::T( 'Subject missing.' ) );
			} elseif ( ! $mailBody ) {
				$row->setError( CBTxt::T( 'Body missing.' ) );
			}
		}

		return false;
	}