<?php

/*======================================================================*\

|| #################################################################### ||

|| # vBulletin 4.2.2 Alpha 1 - Licence Number VBFSA2W3VC

|| # ---------------------------------------------------------------- # ||

|| # Copyright ©2000-2013 vBulletin Solutions Inc. All Rights Reserved. ||

|| # This file may not be redistributed in whole or significant part. # ||

|| # ---------------- VBULLETIN IS NOT FREE SOFTWARE ---------------- # ||

|| # http://www.vbulletin.com | http://www.vbulletin.com/license.html # ||

|| #################################################################### ||

\*======================================================================*/

// ####################### SET PHP ENVIRONMENT ###########################

error_reporting(E_ALL & ~E_NOTICE);

// #################### DEFINE IMPORTANT CONSTANTS #######################

define('THIS_SCRIPT', 'online');

define('CSRF_PROTECTION', true);

// ################### PRE-CACHE TEMPLATES AND DATA ######################

// get special phrase groups

$phrasegroups = array('wol');

// get special data templates from the datastore

$specialtemplates = array(

'maxloggedin',

'wol_spiders',

);

// pre-cache templates used by all actions

$globaltemplates = array(

'forumdisplay_sortarrow',

'im_aim',

'im_icq',

'im_msn',

'im_yahoo',

'im_skype',

'WHOSONLINE',

'whosonlinebit'

);

// pre-cache templates used by specific actions

$actiontemplates = array(

'resolveip' => array(

'whosonline_resolveip'

)

);

// ######################### REQUIRE BACK-END ############################

require_once('./global.php');

require_once(DIR . '/includes/functions_online.php');

// #######################################################################

// ######################## START MAIN SCRIPT ############################

// #######################################################################

if (!$vbulletin->options['WOLenable'])

{

eval(standard_error(fetch_error('whosonlinedisabled')));

}

if (!($permissions['wolpermissions'] & $vbulletin->bf_ugp_wolpermissions['canwhosonline']))

{

print_no_permission();

}

// #######################################################################

// resolve an IP in Who's Online (this uses the WOL permissions)

if ($_REQUEST['do'] == 'resolveip')

{

$vbulletin->input->clean_array_gpc('r', array(

'ipaddress' => TYPE_NOHTML,

'ajax' => TYPE_BOOL

));

// can we actually resolve this?

if (!($permissions['wolpermissions'] & $vbulletin->bf_ugp_wolpermissions['canwhosonlineip']))

{

print_no_permission();

}

$resolved_host = htmlspecialchars_uni(@gethostbyaddr($vbulletin->GPC['ipaddress']));

$ipaddress =& $vbulletin->GPC['ipaddress']; // no html'd already

if ($vbulletin->GPC['ajax'])

{

if (empty($resolved_host))

{

$resolved_host = $ipaddress;

}

require_once(DIR . '/includes/class_xml.php');

$xml = new vB_AJAX_XML_Builder($vbulletin, 'text/xml');

$xml->add_tag('ipaddress', $resolved_host, array('original' => $ipaddress));

$xml->print_xml();

}

else

{

$navbits = construct_navbits(array(

'online.php' . $vbulletin->session->vars['sessionurl_q'] => $vbphrase['whos_online'],

'' => $vbphrase['resolve_ip_address']

));

$navbar = render_navbar_template($navbits);

$templater = vB_Template::create('whosonline_resolveip');

$templater->register_page_templates();

$templater->register('forumjump', $forumjump);

$templater->register('ipaddress', $ipaddress);

$templater->register('metarefresh', $metarefresh);

$templater->register('navbar', $navbar);

$templater->register('resolved_host', $resolved_host);

print_output($templater->render());

}

exit;

}

// #######################################################################

// default action

$datecut = TIMENOW - $vbulletin->options['cookietimeout'];

$wol_event = array();

$wol_pm = array();

$wol_calendar = array();

$wol_user = array();

$wol_forum = array();

$wol_link = array();

$wol_thread = array();

$wol_post = array();

// Variables reused in templates

$perpage = $vbulletin->input->clean_gpc('r', 'perpage', TYPE_UINT);

$pagenumber = $vbulletin->input->clean_gpc('r', 'pagenumber', TYPE_UINT);

$sortfield = $vbulletin->input->clean_gpc('r', 'sortfield', TYPE_NOHTML);

$sortorder = $vbulletin->input->clean_gpc('r', 'sortorder', TYPE_NOHTML);

$vbulletin->input->clean_array_gpc('r', array(

'who' => TYPE_STR,

'ua' => TYPE_BOOL,

));

($hook = vBulletinHook::fetch_hook('online_start')) ? eval($hook) : false;

// set defaults

$perpage = sanitize_perpage($perpage, 200, $vbulletin->options['maxthreads']);

if (!$pagenumber)

{

$pagenumber = 1;

}

$limitlower = ($pagenumber - 1) * $perpage;

switch ($sortfield)

{

case 'location':

$sqlsort = 'session.location';

break;

case 'username':

$sqlsort = 'user.username';

break;

case 'host':

$sqlsort = 'session.host';

break;

case 'time':

$sqlsort = 'session.lastactivity';

break;

default:

$sortfield = 'username';

$sqlsort = 'user.username';

}

switch ($sortorder)

{

case 'asc':

$oppositesort = 'desc';

break;

case 'desc':

$oppositesort = 'asc';

break;

default:

switch ($sortfield)

{

case 'host':

case 'location':

case 'username':

$sortorder = 'asc';

$oppositesort = 'desc';

break;

case 'time':

$sortorder = 'desc';

$oppositesort = 'asc';

break;

}

}

$allonly = $vbphrase['all'];

$membersonly = $vbphrase['members'];

$spidersonly = $vbphrase['search_bots'];

$guestsonly = $vbphrase['guests'];

$whoselected = array();

$uaselected = array();

switch ($vbulletin->GPC['who'])

{

case 'members':

$showguests = false;

$showmembers = true;

$showspiders = false;

$whoselected[1] = 'selected="selected"';

break;

case 'guests':

$showguests = true;

$showmembers = false;

$showspiders = false;

$whoselected[2] = 'selected="selected"';

break;

case 'spiders':

$showguests = true;

$showmembers = false;

$showspiders = true;

$whoselected[3] = 'selected="selected"';

break;

default:

$showguests = true;

$showmembers = true;

$showspiders = true;

$vbulletin->GPC['who'] = '';

$whoselected[0] = 'selected="selected"';

}

// No Guest display allowed.

if (!$vbulletin->options['WOLguests'])

{

$showguests = false;

$showmembers = true;

$showspiders = false;

}

if ($vbulletin->GPC['ua'])

{

$uaselected[1] = 'selected="selected"';

}

else

{

$uaselected[0] = 'selected="selected"';

}

$sorturl = 'online.php?' . $vbulletin->session->vars['sessionurl'] .

($vbulletin->GPC['who'] != '' ? 'who=' . $vbulletin->GPC['who'] . '&amp;' : '') . ($vbulletin->GPC['ua'] ? 'ua=1&amp;' : '');

$sorturl = preg_replace('#&amp;$#s', '', $sorturl);

$show['sorturlnoargs'] = ($sorturl == 'online.php?' . $vbulletin->session->vars['sessionurl']);

$templater = vB_Template::create('forumdisplay_sortarrow');

$templater->register('oppositesort', $oppositesort);

$sortarrow[$sortfield] = $templater->render();

$sortarrow['oppositesort'] = $oppositesort;

$seehidden = $vbulletin->userinfo['permissions']['genericpermissions'] & $vbulletin->bf_ugp_genericpermissions['canseehidden'];

$hook_query_fields = $hook_query_joins = $hook_query_where = '';

($hook = vBulletinHook::fetch_hook('online_query')) ? eval($hook) : false;

$sql = "

SELECT user.username, session.useragent, session.location, session.lastactivity,

user.userid, user.options, session.host, session.badlocation, session.incalendar,

session.inthread, user.aim, user.icq, user.msn, user.yahoo, user.skype

$hook_query_fields

";

if ($showmembers AND $showguests)

{

$order = 'isguest,';

$sql .= ",IF(ISNULL(user.username), 1, 0) as isguest

";

}

else

{

$order = '';

}

if ($showmembers)

{

$sql .= ",IF(user.displaygroupid = 0, user.usergroupid, user.displaygroupid) AS displaygroupid, user.infractiongroupid, user.usergroupid

";

}

$join = $showguests ? 'LEFT' : 'INNER';

$sql .= "FROM " . TABLE_PREFIX . "session As session

$join JOIN " . TABLE_PREFIX . "user AS user USING (userid)

$hook_query_joins

";

$temp = array();

if ($showguests)

{

$temp[] = "

(

session.userid = 0

)

";

}

if ($showmembers)

{

$temp[] = "

(

session.userid > 0

AND session.sessionhash =

(

SELECT sessionhash

FROM " . TABLE_PREFIX . "session AS latest

WHERE latest.userid = session.userid

ORDER BY latest.lastactivity DESC

LIMIT 1

)

)

";

}

if ($temp)

{

$sqlwhere = implode(' OR ', $temp);

}

else

{

$sqlwhere = '1=1'; // In case someone does something really dumb.

}

$where = $wherevisible = '';

$uid = $vbulletin->userinfo['userid'] ? $vbulletin->userinfo['userid'] : -1 ;

if (!$showguests)

{

$where = "AND session.userid > 0

";

}

else

{

if (!$showmembers)

{

if ($showspiders)

{

$where = "AND session.isbot = 1

";

}

else

{

$where = "AND session.isbot = 0 AND session.userid = 0

";

}

}

}

if ($showmembers AND !$seehidden)

{

// Include only visible users, but still include self (if not a guest).

$wherevisible = "AND (NOT IF(session.userid > 0, (user.options & " . $vbulletin->bf_misc_useroptions['invisible'] . "), 0) OR session.userid = $uid)

";

}

$sql .= "

WHERE session.lastactivity > $datecut

AND

(

$sqlwhere

)

$where

$wherevisible

$hook_query_where

ORDER BY $order $sqlsort $sortorder

LIMIT $limitlower, $perpage

";

// Get the online data

$allusers = $db->query_read_slave($sql);

$countjoin = $countinvisible = '';

if ($showmembers AND !$seehidden)

{

$countjoin = "$join JOIN " . TABLE_PREFIX . "user AS user USING (userid)

";

$countinvisible = ", IF(user.options & " . $vbulletin->bf_misc_useroptions['invisible'] . ", 1, 0) AS invisible

";

}

$hook_query_fields = $hook_query_joins = $hook_query_where = '';

($hook = vBulletinHook::fetch_hook('online_user_count')) ? eval($hook) : false;

/* VBIV-12365

Get the count of members and guests online.

Exclude self as we will add that later (we may not be in the session table yet) */

$userscount = $db->query_read_slave("

SELECT session.userid

$countinvisible

$hook_query_fields

FROM " . TABLE_PREFIX . "session AS session

$countjoin

$hook_query_joins

WHERE session.lastactivity > $datecut

$hook_query_where

$where

");

$count = array();

$numberinvisible = 0;

while ($user = $db->fetch_array($userscount))

{

if (!$user['userid'])

{

$count['guests'][] = true;

}

else

{

$count['members'][$user['userid']] = true;

if ($user['invisible'] AND $user['userid'] != $uid)

{

$numberinvisible++;

}

}

}

// Count self as a member if necessary.

if ($vbulletin->userinfo['userid'] AND $showmembers)

{

$count['members'][$vbulletin->userinfo['userid']] = true;

}

$numberguests = sizeof($count['guests']);

$numbermembers = sizeof($count['members']);

// Add self as guest if necessary.

if (!$vbulletin->userinfo['userid'] AND !$numberguests

AND (($showguests AND !$showspiders) OR ($showguests AND $showmembers)))

{

$numberguests++;

}

$moderators = $db->query_read_slave("

SELECT DISTINCT userid

FROM " . TABLE_PREFIX . "moderator

WHERE forumid <> -1

");

while ($mods = $db->fetch_array($moderators))

{

$mod["{$mods[userid]}"] = 1;

}

$count = 0;

$userinfo = array();

$guests = array();

// get buddylist

$buddy = array();

if (trim($vbulletin->userinfo['buddylist']))

{

$buddylist = preg_split('/( )+/', trim($vbulletin->userinfo['buddylist']), -1, PREG_SPLIT_NO_EMPTY);

foreach ($buddylist AS $buddyuserid)

{

$buddy["$buddyuserid"] = 1;

}

}

// Refresh cache if the XML has changed

if ($vbulletin->options['enablespiders'] AND $lastupdate = @filemtime(DIR . '/includes/xml/spiders_vbulletin.xml') AND $lastupdate != $vbulletin->wol_spiders['lu'])

{

require_once(DIR . '/includes/class_xml.php');

$xmlobj = new vB_XML_Parser(false, DIR . '/includes/xml/spiders_vbulletin.xml');

$spiderdata = $xmlobj->parse();

$spiders = array();

if (is_array($spiderdata['spider']))

{

foreach ($spiderdata['spider'] AS $spiderling)

{

$addresses = array();

$identlower = strtolower($spiderling['ident']);

$spiders['agents']["$identlower"]['name'] = $spiderling['name'];

$spiders['agents']["$identlower"]['type'] = $spiderling['type'];

if (is_array($spiderling['addresses']['address']) AND !empty($spiderling['addresses']['address']))

{

if (empty($spiderling['addresses']['address'][0]))

{

$addresses[0] = $spiderling['addresses']['address'];

}

else

{

$addresses = $spiderling['addresses']['address'];

}

foreach ($addresses AS $key => $address)

{

if (in_array($address['type'], array('range', 'single', 'CIDR')))

{

$address['type'] = strtolower($address['type']);

switch($address['type'])

{

case 'single':

$ip2long = ip2long($address['value']);

if ($ip2long != -1 AND $ip2long !== false)

{

$spiders['agents']["$identlower"]['lookup'][] = array(

'startip' => $ip2long,

);

}

break;

case 'range':

$ips = explode('-', $address['value']);

$startip = ip2long(trim($ips[0]));

$endip = ip2long(trim($ips[1]));

if ($startip != -1 AND $startip !== false AND $endip != -1 AND $endip !== false AND $startip <= $endip)

{

$spiders['agents']["$identlower"]['lookup'][] = array(

'startip' => $startip,

'endip' => $endip,

);

}

break;

case 'cidr':

$ipsplit = explode('/', $address['value']);

$startip = ip2long($ipsplit[0]);

$mask = $ipsplit[1];

if ($startip != -1 AND $startip !== false AND $mask <= 31 AND $mask >= 0)

{

$hostbits = 32 - $mask;

$hosts = pow(2, $hostbits) - 1; // Number of specified IPs

$endip = $startip + $hosts;

$spiders['agents']["$identlower"]['lookup'][] = array(

'startip' => $startip,

'endip' => $endip,

);

}

break;

}

}

}

}

$spiders['spiderstring'] .= ($spiders['spiderstring'] ? '|' : '') . preg_quote($spiderling['ident'], '#');

}

$spiders['lu'] = $lastupdate;

// Write out spider cache

require_once(DIR . '/includes/functions_misc.php');

build_datastore('wol_spiders', serialize($spiders), 1);

$vbulletin->wol_spiders =& $spiders;

}

unset($spiderdata, $xmlobj);

}

if ($threadinfo['threadid'])

{

$foundviewer = true;

}

require_once(DIR . '/includes/class_postbit.php');

while ($users = $db->fetch_array($allusers))

{

if ($users['userid'])

{ // Reg'd Member

if (!$showmembers)

{

continue;

}

if ($threadinfo['threadid'] AND (($users['userid'] == $vbulletin->userinfo['userid']) OR ($users['inthread'] != $threadinfo['threadid'])))

{

continue;

}

$users = array_merge($users, convert_bits_to_array($users['options'] , $vbulletin->bf_misc_useroptions));

$key = $users['userid'];

if (empty($userinfo["$key"]['lastactivity']) OR ($userinfo["$key"]['lastactivity'] < $users['lastactivity']))

{

unset($userinfo["$key"]); // need this to sort by lastactivity

$userinfo["$key"] = $users;

fetch_musername($users);

$userinfo["$key"]['musername'] = $users['musername'];

$userinfo["$key"]['useragent'] = htmlspecialchars_uni($users['useragent']);

construct_im_icons($userinfo["$key"]);

if ($users['invisible'])

{

if (($permissions['genericpermissions'] & $vbulletin->bf_ugp_genericpermissions['canseehidden']) OR $key == $vbulletin->userinfo['userid'])

{

$userinfo["$key"]['hidden'] = '*';

$userinfo["$key"]['invisible'] = 0;

}

}

if ($vbulletin->options['WOLresolve'] AND ($permissions['wolpermissions'] & $vbulletin->bf_ugp_wolpermissions['canwhosonlineip']))

{

$userinfo["$key"]['host'] = @gethostbyaddr($users['host']);

}

$userinfo["$key"]['buddy'] = $buddy["$key"];

}

}

else

{ // Guest or Spider..

$spider = '';

if ($threadinfo['threadid'] AND ($users['inthread'] != $threadinfo['threadid']))

{

continue;

}

if ($vbulletin->options['enablespiders'] AND !empty($vbulletin->wol_spiders))

{

if (preg_match('#(' . $vbulletin->wol_spiders['spiderstring'] . ')#si', $users['useragent'], $agent))

{

$agent = strtolower($agent[1]);

// Check ip address

if (!empty($vbulletin->wol_spiders['agents']["$agent"]['lookup']))

{

$ourip = ip2long($users['host']);

foreach ($vbulletin->wol_spiders['agents']["$agent"]['lookup'] AS $key => $ip)

{

if ($ip['startip'] AND $ip['endip']) // Range or CIDR

{

if ($ourip >= $ip['startip'] AND $ourip <= $ip['endip'])

{

$spider = $vbulletin->wol_spiders['agents']["$agent"];

break;

}

}

else if ($ip['startip'] == $ourip) // Single IP

{

$spider = $vbulletin->wol_spiders['agents']["$agent"];

break;

}

}

}

else

{

$spider = $vbulletin->wol_spiders['agents']["$agent"];

}

}

}

if ($spider)

{

if (!$showspiders)

{

continue;

}

$guests["$count"] = $users;

$guests["$count"]['spider'] = $spider['name'];

$guests["$count"]['spidertype'] = $spider['type'];

}

else

{

if (!$showguests)

{

continue;

}

$guests["$count"] = $users;

}

$guests["$count"]['username'] = $vbphrase['guest'];

$guests["$count"]['invisible'] = 0;

$guests["$count"]['displaygroupid'] = 1;

fetch_musername($guests["$count"]);

if ($vbulletin->options['WOLresolve'] AND ($permissions['wolpermissions'] & $vbulletin->bf_ugp_wolpermissions['canwhosonlineip']))

{

$guests["$count"]['host'] = @gethostbyaddr($users['host']);

}

$guests["$count"]['count'] = $count + 1;

$guests["$count"]['useragent'] = htmlspecialchars_uni($users['useragent']);

$count++;

($hook = vBulletinHook::fetch_hook('online_user')) ? eval($hook) : false;

}

}

$show['ip'] = iif($permissions['wolpermissions'] & $vbulletin->bf_ugp_wolpermissions['canwhosonlineip'], true, false);

$show['ajax_resolve'] = ($show['ip'] AND !$vbulletin->options['WOLresolve']);

$show['useragent'] = iif($vbulletin->GPC['ua'], true, false);

$show['hidden'] = iif($permissions['genericpermissions'] & $vbulletin->bf_ugp_genericpermissions['canseehidden'], true, false);

$show['badlocation'] = iif($permissions['wolpermissions'] & $vbulletin->bf_ugp_wolpermissions['canwhosonlinebad'], true, false);

if (is_array($userinfo))

{

foreach ($userinfo AS $key => $val)

{

if (!$val['invisible'])

{

$userinfo["$key"] = process_online_location($val, 1);

}

}

}

if (is_array($guests))

{

foreach ($guests AS $key => $val)

{

$guests["$key"] = process_online_location($val, 1);

}

}

convert_ids_to_titles();

if (is_array($userinfo))

{

foreach ($userinfo AS $key => $val)

{

if (!$val['invisible'])

{

$onlinebits[] = construct_online_bit($val, 1);

}

}

}

if (is_array($guests))

{

foreach ($guests AS $key => $val)

{

if ($val['activity'] == 'logout' AND $val['badlocation'] == 0)

{

continue;

}

$onlinebits[] = construct_online_bit($val, 1);

}

}

$totalonline = $numbermembers + $numberguests;

$numbervisible = $numbermembers - $numberinvisible;

$displaytotal = $numberguests + $numbervisible;

// ### MAX LOGGEDIN USERS ################################

if (intval($vbulletin->maxloggedin['maxonline']) <= $totalonline)

{

$vbulletin->maxloggedin['maxonline'] = $totalonline;

$vbulletin->maxloggedin['maxonlinedate'] = TIMENOW;

build_datastore('maxloggedin', serialize($vbulletin->maxloggedin), 1);

}

$recordusers = $vbulletin->maxloggedin['maxonline'];

$recorddate = vbdate($vbulletin->options['dateformat'], $vbulletin->maxloggedin['maxonlinedate'], true);

$recordtime = vbdate($vbulletin->options['timeformat'], $vbulletin->maxloggedin['maxonlinedate']);

$currenttime = vbdate($vbulletin->options['timeformat']);

$metarefresh = '';

$show['refresh'] = false;

if ($vbulletin->options['WOLrefresh'])

{

$show['refresh'] = true;

$refreshargs = ($vbulletin->GPC['who'] ? '&amp;who=' . $vbulletin->GPC['who'] : '') . ($vbulletin->GPC['ua'] ? '&amp;ua=1' : '');

$refreshargs_js = ($vbulletin->GPC['who'] ? '&who=' . $vbulletin->GPC['who'] : '') . ($vbulletin->GPC['ua'] ? '&ua=1' : '');

$refreshtime = $vbulletin->options['WOLrefresh'] * 10;

}

$navpopup = array(

'id' => 'wol_navpopup',

'title' => $vbphrase['whos_online'],

'link' => 'online.php' . $vbulletin->session->vars['sessionurl_q'],

);

construct_quick_nav($navpopup);

$pagenav = construct_page_nav($pagenumber, $perpage, $displaytotal, 'online.php?' . $vbulletin->session->vars['sessionurl'] . "sort=$sortfield&amp;order=$sortorder&amp;pp=$perpage" . iif($vbulletin->GPC['who'], '&amp;who=' . $vbulletin->GPC['who']) . iif($vbulletin->GPC['ua'], '&amp;ua=1'));

($hook = vBulletinHook::fetch_hook('online_complete')) ? eval($hook) : false;

$navbits = construct_navbits(array('' => $vbphrase['whos_online']));

$navbar = render_navbar_template($navbits);

$templater = vB_Template::create('WHOSONLINE');

$templater->register_page_templates();

$templater->register('forumjump', $forumjump);

$templater->register('navbar', $navbar);

$templater->register('numberguests', $numberguests);

$templater->register('numbermembers', $numbermembers);

$templater->register('onlinebits', $onlinebits);

$templater->register('pagenav', $pagenav);

$templater->register('pagenumber', $pagenumber);

$templater->register('perpage', $perpage);

$templater->register('recorddate', $recorddate);

$templater->register('recordtime', $recordtime);

$templater->register('recordusers', $recordusers);

$templater->register('refreshargs', $refreshargs);

$templater->register('refreshargs_js', $refreshargs_js);

$templater->register('refreshtime', $refreshtime);

$templater->register('sortarrow', $sortarrow);

$templater->register('sortfield', $sortfield);

$templater->register('sortorder', $sortorder);

$templater->register('sorturl', $sorturl);

$templater->register('uaselected', $uaselected);

$templater->register('whoselected', $whoselected);

if ($threadinfo['threadid'])

{

$templater->register('threadinfo', $threadinfo);

}

print_output($templater->render());

/*======================================================================*\

|| ####################################################################

|| # Downloaded: 03:13, Sat Sep 7th 2013

|| # CVS: $RCSfile$ - $Revision: 61394 $

|| ####################################################################

\*======================================================================*/

?>