<?php

define('BLARG', 1);

$ajaxPage = true;

include(__DIR__."/lib/common.php");

header("Cache-Control: no-cache");

getBirthdaysText(false);

$action = $_GET['a'];

//Check if things are defined before using them, damnit!

if (isset($_GET['id']))

$id = (int)$_GET['id'];

else

$id = 0;

$hideTricks = " <a href=\"javascript:void(0)\" onclick=\"hideTricks(".$id.")\">".__("Back")."</a>";

if($action == "q") //Quote

{

$qQuote = " select

p.id, p.deleted, pt.text,

u.name poster

from {posts} p

left join {posts_text} pt on pt.pid = p.id and pt.revision = p.currentrevision

left join {threads} t on t.id=p.thread

left join {users} u on u.id=p.user

where p.id={0} AND t.forum IN ({1c})";

$rQuote = Query($qQuote, $id, ForumsWithPermission('forum.viewforum'));

if(!NumRows($rQuote))

die(__("Unknown post ID."));

$quote = Fetch($rQuote);

if ($quote['deleted'])

$quote['text'] = __("Post is deleted");

$reply = "[quote=\"".$quote['poster']."\" id=\"".$quote['id']."\"]".$quote['text']."[/quote]";

$reply = str_replace("/me", "[b]* ".htmlspecialchars($quote['poster'])."[/b]", $reply);

die($reply);

}

else if ($action == 'rp') // retrieve post

{

$rPost = Query("

SELECT

p.id, p.date, p.num, p.deleted, p.deletedby, p.reason, p.options, p.mood, p.ip,

pt.text, pt.revision, pt.user AS revuser, pt.date AS revdate,

u.(_userfields), u.(rankset,title,picture,posts,postheader,signature,signsep,lastposttime,lastactivity,regdate,globalblock,fulllayout),

ru.(_userfields),

du.(_userfields),

t.forum fid

FROM

{posts} p

LEFT JOIN {posts_text} pt ON pt.pid = p.id AND pt.revision = p.currentrevision

LEFT JOIN {users} u ON u.id = p.user

LEFT JOIN {users} ru ON ru.id=pt.user

LEFT JOIN {users} du ON du.id=p.deletedby

LEFT JOIN {threads} t ON t.id=p.thread

WHERE p.id={0} AND t.forum IN ({1c})", $id, ForumsWithPermission('forum.viewforum'));

if (!NumRows($rPost))

die(__("Unknown post ID."));

$post = Fetch($rPost);

if (!HasPermission('mod.deleteposts', $post['fid']))

die(__("No."));

die(MakePost($post, isset($_GET['o']) ? POST_DELETED_SNOOP : POST_NORMAL, array('tid'=>$post['thread'], 'fid'=>$post['fid'])));

}

else if($action == "ou") //Online Users

{

die(OnlineUsers((int)$_GET['f'], false));

}

else if($action == "tf") //Theme File

{

$theme = $_GET['t'];

$themeFile = "themes/$theme/style.css";

if(!file_exists($themeFile))

$themeFile = "themes/$theme/style.php";

function checkForImage(&$image, $external, $file)

}

/*checkForImage($layout_logopic, true, "logos/logo_$theme.png");

checkForImage($layout_logopic, true, "logos/logo_$theme.jpg");

checkForImage($layout_logopic, true, "logos/logo_$theme.gif");

checkForImage($layout_logopic, true, "logos/logo.png");

checkForImage($layout_logopic, true, "logos/logo.jpg");

checkForImage($layout_logopic, true, "logos/logo.gif");

checkForImage($layout_logopic, false, "themes/$theme/logo.png");

checkForImage($layout_logopic, false, "themes/$theme/logo.jpg");

checkForImage($layout_logopic, false, "themes/$theme/logo.gif");

checkForImage($layout_logopic, false, "themes/$theme/logo.png");

checkForImage($layout_logopic, false, "img/logo.png");*/

$layout_logopic = 'img/logo.png';

die(resourceLink($themeFile)."|".$layout_logopic);

}

elseif($action == "srl") //Show Revision List

{

$qPost = "select currentrevision, thread from {posts} where id={0}";

$rPost = Query($qPost, $id);

if(NumRows($rPost))

$post = Fetch($rPost);

else

die(format(__("Unknown post ID #{0}."), $id)." ".$hideTricks);

$qThread = "select forum from {threads} where id={0}";

$rThread = Query($qThread, $post['thread']);

$thread = Fetch($rThread);

if (!HasPermission('forum.viewforum', $thread['forum'])) die('No.');

if (!HasPermission('mod.editposts', $thread['forum'])) die('No.');

$qRevs = "SELECT

revision, date AS revdate,

ru.(_userfields)

FROM

{posts_text}

LEFT JOIN {users} ru ON ru.id = user

WHERE pid={0}

ORDER BY revision ASC";

$revs = Query($qRevs, $id);

$reply = __("Show revision:")."<br />";

while($revision = Fetch($revs))

{

$reply .= " <a href=\"javascript:void(0)\" onclick=\"showRevision(".$id.",".$revision["revision"].")\">".format(__("rev. {0}"), $revision["revision"])."</a>";

if ($revision['ru_id'])

{

$ru_link = UserLink(getDataPrefix($revision, "ru_"));

$revdetail = " ".format(__("by {0} on {1}"), $ru_link, formatdate($revision['revdate']));

}

else

$revdetail = '';

$reply .= $revdetail;

$reply .= "<br />";

}

$hideTricks = " <a href=\"javascript:void(0)\" onclick=\"showRevision(".$id.",".$post["currentrevision"]."); hideTricks(".$id.")\">".__("Back")."</a>";

$reply .= $hideTricks;

die($reply);

}

elseif($action == "sr") //Show Revision

{

$rPost = Query("

SELECT

p.*,

pt.text, pt.revision, pt.user AS revuser, pt.date AS revdate,

u.(_userfields), u.(rankset,title,picture,posts,postheader,signature,signsep,lastposttime,lastactivity,regdate,globalblock),

ru.(_userfields),

du.(_userfields),

t.forum fid

FROM

{posts} p

LEFT JOIN {posts_text} pt ON pt.pid = p.id AND pt.revision = {1}

LEFT JOIN {threads} t ON t.id=p.thread

LEFT JOIN {users} u ON u.id = p.user

LEFT JOIN {users} ru ON ru.id=pt.user

LEFT JOIN {users} du ON du.id=p.deletedby

WHERE p.id={0} AND t.forum IN ({2c})", $id, (int)$_GET['rev'], ForumsWithPermission('forum.viewforum'));

if(NumRows($rPost))

$post = Fetch($rPost);

else

die(format(__("Unknown post ID #{0} or revision missing."), $id));

if (!HasPermission('mod.editposts', $post['fid']))

die('No.');

die(makePostText($post, getDataPrefix($post, 'u_')));

}

elseif($action == "em") //Email

{

$privacy = HasPermission('admin.editusers') ? '' : ' and showemail=1';

$blah = FetchResult("select email from {users} where id={0}{$privacy}", $id);

die(htmlspecialchars($blah));

}

elseif($action == "vc") //View Counter

{

$blah = FetchResult("select views from {misc}");

die(number_format($blah));

}

else if ($action == 'no') // notification list

{

$notif = getNotifications();

die(json_encode($notif));

}

die(__("Unknown action."));

?>