verifystring PHPのコード例

コード例 #1

0

ファイルを表示

ファイル: verify.php プロジェクト: ZenoX2012/CyBerFuN-CoDeX

            }
            // Check if the domain exists
            // RFC allows the lack of MX records so an extra function is done if FALSE on first one
            // Functions do not work on Windows platforms
            if (checkdnsrr($email['1'], 'MX') === FALSE) {
                if (checkdnsrr($email['1'] . '.', 'A') === FALSE) {
                    return 'No valid mail server records found for domain ' . $email['1'];
                }
            }
            break;
        default:
            return 'Type not specified';
            break;
    }
    // If the script sees no reason for error, return TRUE.
    return TRUE;
}
stdhead("Staff");
begin_main_frame();
loggedinorreturn();
begin_frame('Verify e-mail addresses');
$sql = mysql_query('SELECT email FROM users');
while ($row = mysql_fetch_assoc($sql)) {
    $verifystring = verifystring($row['email'], 'email');
    if ($verifystring !== TRUE) {
        echo $verifystring . '<br />';
    }
}
end_frame();
end_main_frame();
stdfoot();

コード例 #2

0

ファイルを表示

ファイル: takesignup.php プロジェクト: herrag33k/TomTorrent

if (!validusername($wantusername))
	bark("Ógilt notandanafn.");

// make sure user agrees to everything...
if ($HTTP_POST_VARS["rulesverify"] != "yes" || $HTTP_POST_VARS["faqverify"] != "yes" || $HTTP_POST_VARS["ageverify"] != "yes")
	stderr("Skráning mistókst", "Því miður þá verðuru að staðfesta að þú hafir lesið reglurnar, munir lesa SOS áður en þú spyrð spurninga og sért 13 ára eða eldri.");

// check if email addy is already in use
$a = (@mysql_fetch_row(@mysql_query("select count(*) from users where email='$email'"))) or die(mysql_error());
if ($a[0] != 0)
  bark("Netfangið $email er nú þegar skráð á listann hjá okkur.");

$invid = $_POST['invite'];
if(!$invid)
	bark("Nauðsynlegt að skrá inn boðslykilinn");
$verifystring = verifystring($invid,'md5');
if($verifystring !== TRUE)
        bark('Þú slóst inn ógildan boðslykil. Þú þarft að fá boðslykil frá einhverjum sem er nú þegar meðlimur á Istorrent.');
$query = mysql_query("SELECT * FROM invites WHERE secret_hash = '$invid'") or sqlerr();
$invite = mysql_fetch_array($query);
$invitari = $invite['inviter_id'];
$sql = 'SELECT * FROM users WHERE id='.$invitari;
$res = mysql_query($sql);
if(mysql_num_rows($res) < '1')
	bark("Ekki tókst að fletta upp á bjóðanda.");
$checkinv = mysql_fetch_array($res);
if($checkinv['enabled'] === 'no' || $checkinv['deleted'] == '1' || $checkinv['warned'] === 'yes')
	bark('Bjóðandi má ekki vera óvirkur, eyddur eða hafa viðvörun.');
if($invite['email'] != $email)
	bark('Þessi boðslykill er eingöngu nothæfur til að búa til aðgang fyrir netfangið '.$invite['email']);
if(mysql_num_rows($query) < 1)

コード例 #3

0

ファイルを表示

ファイル: userdetails.php プロジェクト: herrag33k/TomTorrent

    $ret .= '<tr><td style="padding: 0px"><img src="pic/'.$catimage.'" alt="'.$catname.'" width="42" height="42"></td>'."\n" .
		'<td><a href=details.php?id='.$arr[torrent].'&amp;hit=1><b>';
		if(!empty($arr2['name']))
			$ret .= htmlspecialchars($arr2[name]);
		else
			$ret .= '[Ekkert nafn]';
	$ret .=	'</b></a></td><td align="center">'.$ttl.'</td><td align="center">'.$size.'</td><td align="center">'.$uploaded.'</td>'."\n" .
		'<td align="center">'.$downloaded.'</td><td align="center">'.$ratio.'</td><td 
align="center">'.$ip.'</td></tr>'."\n";
  }
  $ret .= "</table>\n";
  return $ret;
}

$id = $_GET["id"];
$verifystring = verifystring("$id",'num');
if($verifystring !== TRUE)
        die($verifystring);
#if (!is_valid_id($id))
#  bark("Slæmt auðkenni $id.");

$r = @mysql_query("SELECT * FROM users WHERE id=$id") or sqlerr();
$user = mysql_fetch_array($r) or bark("No user with ID $id.");
if ($user["status"] == "pending" && get_user_class() < UC_MODERATOR)
die("Óvirkur notandi, aðeins stjórnendur geta skoðað upplýsingar.");
$r = mysql_query("SELECT id, name, seeders, leechers, category FROM torrents WHERE owner=$id ORDER BY name") or sqlerr();
if (mysql_num_rows($r) > 0)
{
  $torrents = "<table class=main border=1 cellspacing=0 cellpadding=5>\n" .
    "<tr><td class=colhead>Tegund</td><td class=colhead>Nafn</td><td class=colhead>Deilendur</td><td class=colhead>Skráarsugur</td></tr>\n";
  while ($a = mysql_fetch_assoc($r))

コード例 #4

0

ファイルを表示

ファイル: hjalp.php プロジェクト: herrag33k/TomTorrent

require_once("include/bittorrent.php");
dbconn();
$file = basename($_SERVER['PHP_SELF']);
function problink($cat,$id,$title) {
	global $file;
	return '<a href="/'.$file.'?cat='.$cat.'&amp;ansid='.$id.'">'.$title.'</a><br />';
}
stdhead("Hjálparkerfi");
begin_main_frame();
loggedinorreturn();

$verifystring = verifystring($_GET['cat'],'num');
if($verifystring === TRUE)
        $cat = $_GET['cat'];

$verifystring = verifystring($_GET['ansid'],'num');
if($verifystring === TRUE)
        $ansid = $_GET['ansid'];

if(!$CURUSER) {
	begin_frame('Notkun kerfisins');
	echo 'Kerfið er eingöngu hannað til að anna hjálparspurnum notenda sem eru innskráðir. Getir þú það ekki skal leita í <a href="/faq.php">SOS</a> eða senda tölvupóst á <a href="mailto:torrent@torrent.is">torrent@torrent.is</a>.';
	end_frame();
} else {
	if(!$cat) {
		begin_frame('Velja flokk');
		echo 'Þetta hjálparkerfi mun sérsniða svörin þín byggt á upplýsingum sem Istorrent hefur um þig. Notendur geta því fengið mismunandi svör við hverri spurningu.<br />';
		echo 'ATH: Kerfið er eingöngu hannað fyrir vandamál og fyrirspurnir sem tengjast Istorrent beint. Öll vandræði sem ekki er hægt að rekja til Istorrent er hægt að forvitnast um <a href="/forums.php">á spjallborðinu</a>.<br /><br />';
		echo 'Til hvaða flokks á vandamálið mest við?<br />
		<a href="/'.$file.'?cat=1">Deiling</a><br />
		<a href="/'.$file.'?cat=2">Niðurhal</a><br />

コード例 #5

0

ファイルを表示

ファイル: bittorrent.php プロジェクト: herrag33k/TomTorrent

function torrenttable($res, $variant = "index") {
	global $pic_base_url, $CURUSER, $BASEURL;

	if ($CURUSER['class'] <= UC_POWER_USER && $CURUSER['donor'] === 'no') {
		$gigs = $CURUSER['uploaded'] / (1024*1024*1024);
		$ratio = (($CURUSER['downloaded'] > '2147483648') ? ($CURUSER['uploaded'] / $CURUSER['downloaded']) : '1');
		$space = date('YmdHis');
		if($space < '20060804180000' || $space > '20060807235959') {
			if ($ratio < '0.75' && $ratio >= '0.5')
				$wait = '12';
			elseif ($ratio < '0.5')
				$wait = '24';
			else
				$wait = '0';
		} else
			$wait = '0';
		$t1 = str_replace(array(' ',':','-','\''),'',sqlesc(get_date_time(gmtime() - 1209600)));
		$t2 = str_replace(array(' ',':','-'),'',$CURUSER['added']);
		if($CURUSER['donor'] === 'yes' || $t2 >= $t1)
			$wait = '0';
		if($CURUSER['warned'] == 'yes')
			$wait = '24';
	}
	if(isset($_GET['sort'])) {
		$order = $_GET['d'];
		if($order == 'ASC')
			$sort = '&d=DESC';
		elseif($order == 'DESC')
			$sort = '&d=ASC';
	} else
		$sort = '&d=DESC';

	if($_GET['search'])
		$search = '&search='.$_GET['search'];
	else
		$search = '';

	$verifystring = verifystring($_GET['cat'],'num');
	if($verifystring === TRUE)
	        $catsort = '&amp;cat='.$_GET['cat'];

	$s_catz = $_REQUEST['s_catz'];

	$verifystring = verifystring($_GET['incldead'],'num');
	if($verifystring === TRUE)
	        $incldead = '&amp;incldead='.$_GET['incldead'];

	$extrapar = $catsort.$search.$sort.$s_catz.$incldead;

	if($_POST['new_renew'] === '1') {
		$lasttorrent = mysql_result(mysql_query('SELECT id FROM torrents ORDER BY id DESC LIMIT 1'),0);
		mysql_query('UPDATE users SET lasttorrent='.$lasttorrent.' WHERE id='.$CURUSER['id']);
		$_SESSION['lasttorrent'] = $lasttorrent;
		$header = 'Refresh: url='.$BASEURL.$_SERVER['REQUEST_URI'];
		header($header);
	}
	if($CURUSER['birta_nytt'] === '1') {
		echo '
		<form action="'.$_SERVER['SCRIPT_NAME'].'?'.$_SERVER['QUERY_STRING'].'" method="post">
		<input type="hidden" name="new_renew" value="1">
		<input type="submit" value="Endursetja \'ný torrent\' merkinguna">
		</form><br />';
	}
?>

<table border="1" cellspacing="0" cellpadding="5">
<tr>
<td class="colhead" align="center"><a style="text-decoration:none;color:white;" href="browse.php?sort=type<?php 
echo $extrapar;
?>
">#</a></td>

<td class="colhead" align="left"><a style="text-decoration:none;color:white;" href="browse.php?sort=name<?php 
echo $extrapar;
?>
">Nafn</a></td>

<?

if ($wait > '0')
	echo '<td class="colhead" align="center">Bið</td>'."\n";
if ($variant == 'mytorrents') {
	echo '<td class="colhead" align="center">Breyta</td>'."\n";
	echo '<td class="colhead" align="center">Sýnilegt</td>'."\n";
}
?>

<td class="colhead" align="right"><a style="text-decoration:none;color:white;" href="browse.php?sort=numfiles<?php 
echo $extrapar;
?>
">Skrár</a></td>
<td class="colhead" align="right"><a style="text-decoration:none;color:white;" href="browse.php?sort=comments<?php 
echo $extrapar;
?>
">Umsagnir</a></td>
<td class="colhead" align="center"><a style="text-decoration:none;color:white;" href="browse.php?sort=ratingsum<?php 
echo $extrapar;
?>
">Einkunn</a></td>
<td class="colhead" align="center"><a style="text-decoration:none;color:white;" href="browse.php?sort=added<?php 
echo $extrapar;
?>
">Bætt inn</a></td>
<td class="colhead" align="center"><a style="text-decoration:none;color:white;" href="browse.php?sort=added<?php 
echo $extrapar;
?>
">TTL</a></td>
<td class="colhead" align="center">Samtals hraði</td>
<td class="colhead" align="center"><a style="text-decoration:none;color:white;" href="browse.php?sort=size<?php 
echo $extrapar;
?>
">Stærð</a></td>
<td class="colhead" align="center"><a style="text-decoration: none; color: white;" href="browse.php?sort=times_completed<?php 
echo $extrapar;
?>
">Sótt</a></td>
<td class="colhead" align="right"><a style="text-decoration:none;color:white;" href="browse.php?sort=seeders<?php 
echo $extrapar;
?>
">Að deila</a></td>
<td class="colhead" align="right"><a style="text-decoration:none;color:white;" href="browse.php?sort=leechers<?php 
echo $extrapar;
?>
">Að sækja</a></td>
<?

if ($variant == "index")
	echo '<td class="colhead" align="center">Sent inn af</td>'."\n";

echo '</tr>'."\n";

while ($row = mysql_fetch_assoc($res)) {
	$id = $row['id'];
	if($row['reviewed'] > '0' && $CURUSER['class'] >= UC_MODERATOR)
		echo '<tr style="background-color:DarkGray">'."\n";
	else
		echo '<tr>'."\n";

	echo '<td align="center" style="padding:0px">';
	if (isset($row['cat_name'])) {
		echo '<a href="browse.php?c'.$row['category'].'=1">';
		if (!empty($row['cat_pic']))
			echo '<img border="0" src="'.$pic_base_url.$row['cat_pic'].'" alt="'. $row['cat_name'].'" />';
		else
			echo $row['cat_name'];
		echo '</a>';
	} else
		echo '-';
	echo '</td>'."\n";

	$dispname = htmlspecialchars($row['name']);
	echo '<td align="left"><a href="details.php?';
	if ($variant == 'mytorrents')
		echo 'returnto='. urlencode($_SERVER['REQUEST_URI']).'&amp;';
	echo 'id='.$id;
	if ($variant == 'index')
		echo '&amp;hit=1';
	if(strlen($dispname) > '65')
		$dispname = substr($dispname, '0','60') . '...';
	echo '"><b>'.$dispname.'</b></a>'."\n";
	if($id > $_SESSION['lasttorrent'] && $CURUSER['birta_nytt'] === '1')
		echo '<img src="/pic/new.png" /> ';
	if($row['nuked'] == 'yes')
		echo '<b>[SPRENGT:</b>'.$row['nukedr'].'<b>]</b> <img src="ismod/nuked.gif" border="0" valign="bottom" alt="'.$row['nukedr'].'">'."\n";
	if($row['scene'] == 'y')
		echo '<b>[Scene útgáfa]:</b>'."\n";
	if ($variant == "index" && $wait == 0)
		echo '<a href="download.php/'.$id.'/'.rawurlencode($row['filename']).'"><img src="ismod/nidur.gif" border="0" alt="Sækja"><img src="ismod/nidur.gif" border="0" alt="Sækja"></a>'."\n";
	if ($wait > '0') {
		$elapsed = floor((gmtime() - strtotime($row["added"])) / 3600);
		if ($elapsed < $wait) {
			$color = dechex(floor(127*($wait - $elapsed)/48 + 128)*65536);
			echo '<td align="center"><nobr><a href="/faq.php#dl8"><font color="'.$color.'">'.number_format($wait - $elapsed).' klst</font></a></nobr></td>'."\n";
		} else {
			if ($variant == 'index')
				echo '<a href="download.php/'.$id.'/'.rawurlencode($row['filename']). '"><img src="ismod/nidur.gif" border="0" alt="Sækja"><img src="ismod/nidur.gif" border="0" alt="Sækja" /></a>'."\n";
			echo '<td align="center"><nobr>Engin</nobr></td>'."\n";
		}
        }

	if ($variant == 'mytorrents')
		echo '<td align="center"><a href="edit.php?returnto='.urlencode($_SERVER['REQUEST_URI']).'&amp;id='.$row['id'].'">Breyta</a>'."\n";
	echo '</td>'."\n";
	if ($variant == 'mytorrents') {
		echo '<td align="right">';
		if ($row['visible'] == 'no')
			echo '<b>Nei</b>';
		else
			echo 'Já';
		echo '</td>'."\n";
	}

	if ($row['type'] == 'single')
		echo '<td align="right">'.$row['numfiles'].'</td>'."\n";
	else {
		if ($variant == 'index')
			echo '<td align="right"><b><a href="details.php?id='.$id.'&amp;hit=1&amp;filelist=1">'.$row['numfiles'].'</a></b></td>'."\n";
		else
			echo '<td align="right"><b><a href="details.php?id='.$id.'&amp;filelist=1#filelist">'.$row['numfiles'].'</a></b></td>'."\n";
	}

	if ($row['comments'] === '0')
		echo '<td align="right">'.$row['comments'].'</td>'."\n";
	else {
		if ($variant == 'index')
			echo '<td align="right"><b><a href="details.php?id='.$id.'&amp;hit=1&amp;tocomm=1">'.$row['comments'].'</a></b></td>'."\n";
		else
			echo '<td align="right"><b><a href="details.php?id='.$id.'&amp;page=0#startcomments">'.$row['comments'].'</a></b></td>'."\n";
	}

	echo '<td align="center">';
	if (!isset($row['rating']))
		echo '---';
	else {
		$rating = round($row['rating'] * 2) / 2;
		$rating = ratingpic($row['rating']);
		if (!isset($rating))
			echo '---';
		else
			echo $rating;
	}
        echo '</td>'."\n";
        echo '<td align="center"><nobr>'.str_replace(' ', '<br />', $row['added']).'</nobr></td>'."\n";
	$ttl = (28*24) - floor((gmtime() - sql_timestamp_to_unix_timestamp($row["added"])) / 3600);
	if ($ttl == '1')
		$ttl .= '<br />klst';
	else
		$ttl .= '<br />klst';
	echo '<td align="center">'.$ttl.'</td>'."\n";
	// Totalspeed mod
	$resSpeed = mysql_query('SELECT seeders,leechers FROM torrents WHERE id='.$id.' AND visible=\'yes\' ORDER BY added DESC LIMIT 15') or sqlerr(__FILE__, __LINE__);
	if ($rowTmp = mysql_fetch_row($resSpeed))
		list($seedersTmp,$leechersTmp) = $rowTmp; 
	if ($seedersTmp >= '1' && $leechersTmp >= '1'){
		$speedQ = mysql_query('SELECT (t.size * t.times_completed + SUM(p.downloaded)) / (UNIX_TIMESTAMP(NOW()) - UNIX_TIMESTAMP(added)) AS totalspeed FROM torrents AS t LEFT JOIN peers AS p ON t.id = p.torrent WHERE p.seeder = \'no\' AND p.torrent = \''.$id.'\' GROUP BY t.id ORDER BY added ASC LIMIT 15') or sqlerr(__FILE__, __LINE__);
		$a = mysql_fetch_assoc($speedQ);
		$totalspeed = mksize($a['totalspeed']) . '/s';
	}
	echo '<td align="center">'.$totalspeed.'</td>'."\n";
	echo '<td align="center">'.str_replace(' ', '<br />', mksize($row['size'])).'</td>'."\n";
	$_s = '';
	if ($row['times_completed'] != '1')
		$_s = 's';
	echo '<td align="center"><a href="viewsnatches.php?id='.$row[id].'">'.number_format($row['times_completed']).'<br />time'.$_s.'</a></td>'."\n";

	if ($row["seeders"]) {
		if ($variant == "index") {
			if ($row["leechers"]) $ratio = $row["seeders"] / $row["leechers"]; else $ratio = 1;
				print("<td align=right><b><a href=details.php?id=$id&amp;hit=1&amp;toseeders=1><font color=" .
			get_slr_color($ratio) . ">" . $row["seeders"] . "</font></a></b></td>\n");
		} else
			echo '<td align="right"><b><a class="'.linkcolor($row['seeders']).'" href="details.php?id='.$id.'&amp;dllist=1#seeders\">'.$row['seeders'].'</a></b></td>'."\n";
	} else
		echo '<td align="right"><span class="'.linkcolor($row['seeders']).'">'.$row['seeders'].'</span></td>'."\n";

	if ($row["leechers"]) {
		if ($variant == "index")
			echo '<td align="right"><b><a href="details.php?id='.$id.'&amp;hit=1&amp;todlers=1">'.number_format($row['leechers']).($peerlink ? '</a>' : '').'</b></td>'."\n";
		else
			echo '<td align="right"><b><a class="'.linkcolor($row['leechers']).'" href="details.php?id='.$id.'&amp;dllist=1#leechers">'.$row['leechers'].'</a></b></td>'."\n";
	} else
		echo '<td align="right">0</td>'."\n";

	if ($variant == 'index') {
		echo '<td align="center">';
		if($row['anonymous'] === '1')
			echo '<i>(Nafnleynd)</i>';
		else
			echo '<a href=userdetails.php?id='.$row['owner'].'><b>'.htmlspecialchars($row['username']).'</b></a>'; 
		echo '</td>'."\n";
	}
        echo '</tr>'."\n";
}
	echo '</table>'."\n";
	return $rows;
}

コード例 #6

0

ファイルを表示

ファイル: inbox.php プロジェクト: herrag33k/TomTorrent

			echo '</td></tr></table></p>'."\n".'<p>';
			echo '<table width="100%" border="0"><tr><td class="embedded">'."\n";
			echo '<a href="deletemessage.php?id='.$arr['id'].'&type=out"><b>Eyða</b></a></td>'."\n";
			echo '</tr></table></tr></table></p>'."\n";
		}
} else {		// Inbox
	stdhead("Inbox", false);
	echo '<table class="main" width="750px" border="0" cellspacing="0" cellpadding="10"><tr><td class="embedded">'."\n";
	echo '<h1 align="center">Inbox</h1>'."\n";
	echo '<div align="center">(<a href="'.$_SERVER['PHP_SELF'].'?out=1">Sentbox</a>)</div>'."\n";
	$res = mysql_query('SELECT messages.*,users.username AS username FROM messages LEFT JOIN users ON messages.sender=users.id WHERE receiver='.$CURUSER['id'].' AND location IN (\'in\',\'both\') ORDER BY added DESC') or die('gubb!');
	if (mysql_num_rows($res) === '0')
		stdmsg('Upplýsingar','Skilaboðaskjóðan þín er tóm!');
	else
		while ($arr = mysql_fetch_assoc($res)) {
			if (verifystring($arr['sender'],'num') === TRUE && $arr['sender'] !== '0') {
				$sender = '<a href="userdetails.php?id='.$arr['sender'].'">'. ($arr['username'] ? $arr['username'] : '******').'</a>';
			} else
				$sender = 'Istorrent kerfið';
			$elapsed = get_elapsed_time(sql_timestamp_to_unix_timestamp($arr["added"]));
			echo '<p><table width="100%" border="1" cellspacing="0" cellpadding="10"><tr><td class="text">'."\n";
			echo 'Frá <b>'.$sender.'</b> þann '."\n".$arr['added'].' ('.$elapsed.' síðan) GMT'."\n";
			if ($arr['unread'] === 'yes') {
				echo '<b>(<font color="red">Nýtt!</font>)</b>';
				mysql_query('UPDATE messages SET unread=\'false\' WHERE id='.$arr['id']) or die('arghh');
			}
			echo '<p><table class="main" width="100%" border="1" cellspacing="0" cellpadding="10"><tr><td class="text">'."\n";
			echo format_comment($arr['msg']);
			echo '</td></tr></table></p>'."\n".'<p>';
			echo '<table width="100%" border="0"><tr><td class="embedded">'."\n";
			echo ($arr['sender'] ? '<a href="sendmessage.php?receiver='.$arr['sender'].'&replyto='.$arr['id'] .'"><b>Svara</b></a>' : '<font class="gray"><b>Svara</b></font>').' | <a href="deletemessage.php?id='.$arr['id'].'&type=in"><b>Eyða</b></a></td>'."\n";

コード例 #7

0

ファイルを表示

ファイル: takeprofedit.php プロジェクト: herrag33k/TomTorrent

if($kt_rett==true)
	$updateset[] = "kennitala = $kennitala";
$menuhide1 = $_POST['menuhide1'];
$menuhide2 = $_POST['menuhide2'];

if($menuhide1 == '1' && $menuhide2 == '2')
	$menuhide = '3';
elseif($menuhide1 == '1' && !is_string($menuhide2))
	$menuhide = '1';
elseif(!is_string($menuhide1) && $menuhide2 == '2')
	$menuhide = '2';
else
	$menuhide = '0';

$verifystring = verifystring("$menuhide",'num');
if($verifystring !== TRUE)
         die($verifystring);

$updateset[] = "menuhide = $menuhide";

if($undirskrift == '1')
$updateset[] = "undirskrift = '1'";
else
$updateset[] = "undirskrift = '0'";

if($hideadult == 'yes')
$updateset[] = "hideadult = 'yes'";
else
$updateset[] = "hideadult = 'no'";

コード例 #8

0

ファイルを表示

ファイル: announce.php プロジェクト: herrag33k/TomTorrent

function forumlog ($userid,$now,$before,$type) {
	$username = mysql_result(mysql_query('SELECT username FROM users WHERE id='.$userid),0);
	$type = 'Svindl grunur';
	$subject = 'Notandi: '.$username."\n".'Tilkynnti 2GB eða meira í deilingarmagn - grunur um svindl'."\n\n".'Deilingarmagn: '.$now."\n".'Niðurhalsmagn: '.$before;

	$sql = 'INSERT INTO topics (userid, forumid, subject) VALUES('.$userid.', 12, \''.$username.' - '.$type.'\')';
        mysql_query($sql) or sqlerr(__FILE__, __LINE__);

        $topicid = mysql_insert_id() or sqlerr(__FILE__, __LINE__);
        $added = "'".get_date_time()."'";
        $sql = 'INSERT INTO posts (topicid, userid, added, body) VALUES ('.$topicid.','.$userid.','.$added.','.sqlesc($subject).')';
        mysql_query($sql) or sqlerr (__FILE__, __LINE__);
        $postid = mysql_insert_id();
        update_topic_last_post($topicid);
        if(verifystring(mysql_insert_id()))
                return TRUE;
        else
                return FALSE;
}

コード例 #9

0

ファイルを表示

ファイル: invites.php プロジェクト: herrag33k/TomTorrent

@$ratio = $CURUSER['uploaded'] / $CURUSER['downloaded'];
$t_medlimur = str_replace(array(' ',':','-','\''),'',sqlesc(get_date_time(gmtime() - 86400*14)));
$t_medlimur2 = str_replace(array(' ',':','-'),'',$CURUSER['added']);
if(!empty($_POST['email']))
	$email = $_POST['email'];
if(inviteleft($CURUSER['id'],$CURUSER['uploaded'],$CURUSER['downloaded'],$CURUSER['warned'],$CURUSER['added']) > '0') 
{
	echo 'Þú tekur ábyrgðina á því að kenna þeim sem þú býður á kerfið og svara auðveldustu spurningum sem þeir kunna að hafa.<br />'."\n".'<br />';
	echo 'Ef þú býður inn notanda aftur til þess að hjálpa honum við að fara framhjá banni eða óvirkingu, munt þú verða bannaður ef það varst þú sem bauðst honum áður.<br />';
	echo '<form method="post" action="/invites.php">';
	echo 'Netfang: <input type="text" name="email"><br />';
	if(!empty($email)) {
		$sql = 'SELECT COUNT(*) FROM users WHERE email=\''.mysql_real_escape_string(trim($email))."'";
		$sqla = 'SELECT COUNT(*) FROM invites WHERE inviter_id='.$CURUSER['id'].' AND email='.sqlesc(trim($email));
		$email_split = explode('@', $email);
		if(verifystring($email,'email') !== TRUE)
			echo '<b>Þú þarft að slá inn gilt netfang.</b>';
		elseif(mysql_result(mysql_query($sql),0) > 0)
			echo '<b>Þetta netfang er þegar á skrá á Istorrent.</b><br />';
		elseif(mysql_result(mysql_query($sqla),0) > 0)
			echo '<b>Þetta netfang er nú þegar á boðslistanum þínum (sjá neðar á síðunni).</b><br />';
		elseif ($email_split[1] == 'solidshadow.net')
			echo '<b>Eigandi lénsins er að reyna að komast framhjá banni. Ekki bjóða þessum einstaklingi inn, jafnvel undir öðru netfangi.</b><br />';
		elseif ($email_split[1] == 'hotmail.com' || $email_split[1] == 'msn.com' || $email_split[1] == 'verslo.is')
			echo '<b>Vinsamlegast ekki skrá netföng hjá hotmail.com, msn.com eða verslo.is vegna erfiðleika við tölvupóstsendingar á þessi lén.</b><br />';
		elseif ($email_split[1] == 'smais.is' || $email_split[1] == 'skifan.is' || $email_split[1] == 'stef.is' || $email_split[1] == 'police.is' || $email_split[1] == 'logreglan.is')
			echo '<b>Bannað er að bjóða inn aðilum með netfang á þessu léni.</b><br />';
		else {
			$invitesalt = rand(1000000,99999999);
			$secret_hash = md5($invitesalt.trim($email));
			$sql = 'INSERT INTO invites (timestamp,inviter_id,secret_hash,email,used) VALUES ('.date('YmdHis').','.$CURUSER['id'].',\''.$secret_hash.'\',\''.mysql_real_escape_string(trim($email)).'\',0)';

PHP verifystringの例