str_replace('%s', '(\w{1,8})', preg_quote($config['board_path'], '/')),
'page' => str_replace('%d', '(\d+)', preg_quote($config['file_page'], '/')),
'img' => preg_quote($config['dir']['img'], '/'),
'thumb' => preg_quote($config['dir']['thumb'], '/'),
'res' => preg_quote($config['dir']['res'], '/'),
'index' => preg_quote($config['file_index'], '/')
);
if(preg_match('/^\/?$/', $query)) {
// Dashboard
$fieldset = Array(
'Boards' => '',
'Noticeboard' => '',
'Administration' => '',
'Themes' => '',
'Search' => '',
'Update' => '',
'Logout' => ''
);
// Boards
$fieldset['Boards'] .= ulBoards();
if(hasPermission($config['mod']['noticeboard'])) {
if(!$config['cache']['enabled'] || !($fieldset['Noticeboard'] = cache::get('noticeboard_preview'))) {
$query = prepare("SELECT `noticeboard`.*, `username` FROM `noticeboard` LEFT JOIN `mods` ON `mods`.`id` = `mod` ORDER BY `id` DESC LIMIT :limit");
$query->bindValue(':limit', $config['mod']['noticeboard_dashboard'], PDO::PARAM_INT);
$query->execute() or error(db_error($query));
$fieldset['Noticeboard'] .= '';
$_body = '';
while($notice = $query->fetch()) {
$_body .= ' ' .
($notice['subject'] ?
$notice['subject']
:
'' . _('no subject') . ' '
) .
' — by ' .
(isset($notice['username']) ?
utf8tohtml($notice['username'])
: '??? ') .
' at ' .
strftime($config['post_date'], $notice['time']) .
' ';
}
if($config['cache']['enabled'])
cache::set('noticeboard_preview', $fieldset['Noticeboard']);
}
$fieldset['Noticeboard'] .= '' . _('View all entries') . ' ';
$query = prepare("SELECT COUNT(*) AS `count` FROM `pms` WHERE `to` = :id AND `unread` = 1");
$query->bindValue(':id', $mod['id']);
$query->execute() or error(db_error($query));
$count = $query->fetch();
$count = $count['count'];
$fieldset['Noticeboard'] .= '' . _('PM Inbox') .
($count > 0
?
' (' . $count . ' unread) '
: '') .
' ' . _('News') . ' ' . _('Report queue') . ' ' . _('Ban list') . ' ' . _('Manage users') . ' ' . _('Change own password') . ' ' . _('Moderation log') . ' ' . _('Rebuild static files') . ' ' . _('Clear cache') . ' ' . _('Show configuration') . ' ' . _('Manage themes') . ' ' .
'' . _('(Search is case-insensitive, and based on keywords. To match exact phrases, use "quotes". Use an asterisk (*) for wildcard.)') . '
' .
' ';
}
if($mod['type'] >= ADMIN && $config['check_updates']) {
if(!$config['version'])
error('Could not find current version! (Check .installed)');
if(isset($_COOKIE['update'])) {
$latest = unserialize($_COOKIE['update']);
} else {
$ctx = stream_context_create(array(
'http' => array(
'timeout' => 3
)
)
);
if($code = @file_get_contents('http://tinyboard.org/version.txt', 0, $ctx)) {
eval($code);
if(preg_match('/v(\d+)\.(\d)\.(\d+)(-dev.+)?$/', $config['version'], $m)) {
$current = Array(
'massive' => (int)$m[1],
'major' => (int)$m[2],
'minor' => (int)$m[3]
);
if(isset($m[4])) {
// Development versions are always ahead in the versioning numbers
$current['minor'] --;
}
}
// Check if it's newer
if( $latest['massive'] > $current['massive'] ||
$latest['major'] > $current['major'] ||
($latest['massive'] == $current['massive'] &&
$latest['major'] == $current['major'] &&
$latest['minor'] > $current['minor']
)) {
$latest = $latest;
} else $latest = false;
} else {
// Couldn't get latest version
// TODO: Display some sort of warning message
$latest = false;
}
setcookie('update', serialize($latest), time() + $config['check_updates_time'], $config['cookies']['jail'] ? $config['cookies']['path'] : '/', null, false, true);
}
if($latest) {
$fieldset['Update'] .=
'A newer version of Tinyboard (v' .
$latest['massive'] . '.' .
$latest['major'] . '.' .
$latest['minor'] .
' ) is available! See http://tinyboard.org/ for upgrade instructions. ';
}
}
$fieldset['Logout'] .= '' . _('Logout') . ' ' . _($title) . ' ' .
'Are you sure you want to do that? ' .
'You clicked ' .
'?/' . utf8tohtml($uri) . ' ' .
' but had Javascript disabled, so we weren\'t able to serve the confirmation dialog.' .
'
' .
'Confirm.
';
echo Element('page.html', Array(
'config'=>$config,
'title'=>'Confirm',
'body'=>$body,
'mod'=>true
)
);
} elseif(preg_match('/^\/log(\/(\d+))?$/', $query, $match)) {
if(!hasPermission($config['mod']['modlog'])) error($config['error']['noaccess']);
$page = isset($match[2]) ? $match[2] : 1;
$boards = Array();
$_boards = listBoards();
foreach($_boards as &$_b) {
$boards[$_b['id']] = $_b['uri'];
}
$query = prepare("SELECT `mods`.`id`,`username`,`ip`,`board`,`time`,`text` FROM `modlogs` LEFT JOIN `mods` ON `mod` = `mods`.`id` ORDER BY `time` DESC LIMIT :offset, :limit");
$query->bindValue(':limit', $config['mod']['modlog_page'], PDO::PARAM_INT);
$query->bindValue(':offset', ($page - 1) * $config['mod']['modlog_page'], PDO::PARAM_INT);
$query->execute() or error(db_error($query));
if(!$query->rowCount()) {
$body = '(Nothing to display.)
';
} else {
$body = '' .
'' .
'' . _('User') . ' ' .
'' . _('IP address') . ' ' .
'' . _('Ago') . ' ' .
'' . _('Board') . ' ' .
'' . _('Action') . ' ' .
' ';
while($log = $query->fetch()) {
$log_id = 'log_' . md5($log['text']);
if($config['cache']['enabled'] && $_log = cache::get($log_id))
$log['text'] = $_log;
else {
$log['text'] = utf8tohtml($log['text']);
$log['text'] = preg_replace('/(\d+\.\d+\.\d+\.\d+)/', '$1 ', $log['text']);
if(isset($boards[$log['board']])) {
if(preg_match('/post #(\d+)/', $log['text'], $match)) {
$post_query = prepare(sprintf("SELECT `thread` FROM `posts_%s` WHERE `id` = :id", $boards[$log['board']]));
$post_query->bindValue(':id', $match[1], PDO::PARAM_INT);
$post_query->execute() or error(db_error($query));
if($post = $post_query->fetch()) {
$log['text'] = preg_replace('/post (#(\d+))/',
'post $1 ', $log['text']);
}
if($config['cache']['enabled'])
cache::set($log_id, $log['text']);
}
}
}
$body .= '' .
'' .
($log['username'] ?
'' . $log['username'] . ' '
: 'deleted? ') .
' ' .
'' . $log['ip'] . ' ' . ago($log['time']) . ' ' .
'' .
($log['board'] ?
(isset($boards[$log['board']]) ?
'' . sprintf($config['board_abbreviation'], $boards[$log['board']]) . ' '
: 'deleted? ')
: '-') .
'' . $log['text'] . ' ' .
' ';
}
$body .= '
';
$query = prepare("SELECT COUNT(*) AS `count` FROM `modlogs`");
$query->execute() or error(db_error($query));
$count = $query->fetch();
$body .= '';
for($x = 0; $x < $count['count'] / $config['mod']['modlog_page']; $x ++) {
$body .= '[' . ($x + 1) . '] ';
}
$body .= '
';
}
echo Element('page.html', Array(
'config'=>$config,
'title'=>_('Moderation log'),
'body'=>$body,
'mod'=>true
)
);
} elseif(preg_match('/^\/themes\/none$/', $query, $match)) {
if(!hasPermission($config['mod']['themes'])) error($config['error']['noaccess']);
// Clearsettings
query("TRUNCATE TABLE `theme_settings`") or error(db_error());
echo Element('page.html', Array(
'config'=>$config,
'title'=>'No theme',
'body'=>'Successfully uninstalled all themes.
' .
'Go back to themes .
',
'mod'=>true
)
);
} elseif(preg_match('/^\/themes\/([\w\-]+)\/rebuild$/', $query, $match)) {
if(!hasPermission($config['mod']['themes'])) error($config['error']['noaccess']);
rebuildTheme($match[1], 'all');
echo Element('page.html', Array(
'config'=>$config,
'title'=>'Rebuilt',
'body'=>'Successfully rebuilt the ' . $match[1] . ' theme.
' .
'Go back to themes .
',
'mod'=>true
)
);
} elseif(preg_match('/^\/themes\/(\w+)\/uninstall$/', $query, $match)) {
if(!hasPermission($config['mod']['themes'])) error($config['error']['noaccess']);
$query = prepare("DELETE FROM `theme_settings` WHERE `theme` = :theme");
$query->bindValue(':theme', $match[1]);
$query->execute() or error(db_error($query));
echo Element('page.html', Array(
'config'=>$config,
'title'=>'Uninstalled',
'body'=>'Successfully uninstalled the ' . $match[1] . ' theme.
' .
'Go back to themes .
',
'mod'=>true
)
);
} elseif(preg_match('/^\/themes(\/([\w\-]+))?$/', $query, $match)) {
if(!hasPermission($config['mod']['themes'])) error($config['error']['noaccess']);
if(!is_dir($config['dir']['themes']))
error('Themes directory doesn\'t exist!');
if(!$dir = opendir($config['dir']['themes']))
error('Cannot open themes directory; check permissions.');
if(isset($match[2])) {
$_theme = &$match[2];
if(!$theme = loadThemeConfig($_theme)) {
error($config['error']['invalidtheme']);
}
if(isset($_POST['install'])) {
// Check if everything is submitted
foreach($theme['config'] as &$c) {
if(!isset($_POST[$c['name']]) && $c['type'] != 'checkbox')
error(sprintf($config['error']['required'], $c['title']));
}
// Clear previous settings
$query = prepare("DELETE FROM `theme_settings` WHERE `theme` = :theme");
$query->bindValue(':theme', $_theme);
$query->execute() or error(db_error($query));
foreach($theme['config'] as &$c) {
$query = prepare("INSERT INTO `theme_settings` VALUES(:theme, :name, :value)");
$query->bindValue(':theme', $_theme);
$query->bindValue(':name', $c['name']);
$query->bindValue(':value', $_POST[$c['name']]);
$query->execute() or error(db_error($query));
}
$query = prepare("INSERT INTO `theme_settings` VALUES(:theme, NULL, NULL)");
$query->bindValue(':theme', $_theme);
$query->execute() or error(db_error($query));
$result = true;
$body = '';
if(isset($theme['install_callback'])) {
$ret = $theme['install_callback'](themeSettings($_theme));
if($ret && !empty($ret)) {
if(is_array($ret) && count($ret) == 2) {
$result = $ret[0];
$ret = $ret[1];
}
$body .= '' . $ret . '
';
}
}
if($result) {
$body .= 'Successfully installed and built theme.
';
} else {
// install failed
$query = prepare("DELETE FROM `theme_settings` WHERE `theme` = :theme");
$query->bindValue(':theme', $_theme);
$query->execute() or error(db_error($query));
}
$body .= 'Go back to themes .
';
// Build themes
rebuildThemes('all');
echo Element('page.html', Array(
'config'=>$config,
'title'=>($result ? 'Installed "' . utf8tohtml($theme['name']) . '"' : 'Installation failed!'),
'body'=>$body,
'mod'=>true
)
);
} else {
$body = '';
echo Element('page.html', Array(
'config'=>$config,
'title'=>'Installing "' . utf8tohtml($theme['name']) . '"',
'body'=>$body,
'mod'=>true
)
);
}
} else {
$themes_in_use = Array();
$query = query("SELECT `theme` FROM `theme_settings` WHERE `name` IS NULL AND `value` IS NULL") or error(db_error());
while($theme = $query->fetch()) {
$themes_in_use[$theme['theme']] = true;
}
// Scan directory for themes
$themes = Array();
while($file = readdir($dir)) {
if($file[0] != '.' && is_dir($config['dir']['themes'] . '/' . $file)) {
$themes[] = $file;
}
}
closedir($dir);
$body = '';
if(empty($themes)) {
$body = '(No themes installed.)
';
} else {
$body .= '';
foreach($themes as &$_theme) {
$theme = loadThemeConfig($_theme);
markup($theme['description']);
$body .= '' .
'' . _('Name') . ' ' .
'' . utf8tohtml($theme['name']) . ' ' .
' ' .
'' .
'' . _('Version') . ' ' .
'' . utf8tohtml($theme['version']) . ' ' .
' ' .
'' .
'' . _('Description') . ' ' .
'' . $theme['description'] . ' ' .
' ' .
'' .
'' . _('Thumbnail') . ' ' .
' ' .
'' .
'' . _('Actions') . ' ' .
' ' .
'
';
}
if(!empty($themes_in_use))
$body .= '' . _('Uninstall all themes.') . '
';
echo Element('page.html', Array(
'config'=>$config,
'title'=>_('Manage themes'),
'body'=>$body,
'mod'=>true
)
);
}
} elseif(preg_match('/^\/noticeboard\/delete\/(\d+)$/', $query, $match)) {
if(!hasPermission($config['mod']['noticeboard_delete'])) error($config['error']['noaccess']);
$query = prepare("DELETE FROM `noticeboard` WHERE `id` = :id");
$query->bindValue(':id', $match[1], PDO::PARAM_INT);
$query->execute() or error(db_error($query));
if($config['cache']['enabled'])
cache::delete('noticeboard_preview');
header('Location: ?/noticeboard', true, $config['redirect_http']);
} elseif(preg_match('/^\/noticeboard$/', $query)) {
if(!hasPermission($config['mod']['noticeboard'])) error($config['error']['noaccess']);
$body = '';
if(hasPermission($config['mod']['noticeboard_post']) && isset($_POST['subject']) && isset($_POST['body']) && !empty($_POST['body'])) {
$query = prepare("INSERT INTO `noticeboard` VALUES (NULL, :mod, :time, :subject, :body)");
$query->bindValue(':mod', $mod['id'], PDO::PARAM_INT);
$query->bindvalue(':time', time(), PDO::PARAM_INT);
$query->bindValue(':subject', utf8tohtml($_POST['subject']));
markup($_POST['body']);
$query->bindValue(':body', $_POST['body']);
$query->execute() or error(db_error($query));
if($config['cache']['enabled'])
cache::delete('noticeboard_preview');
header('Location: ?/noticeboard#' . $pdo->lastInsertId(), true, $config['redirect_http']);
} else {
if(hasPermission($config['mod']['noticeboard_post'])) {
$body .= 'New post ' .
(hasPermission($config['mod']['noticeboard_delete']) ?
'
[delete] '
: '') .
'
' .
($notice['subject'] ?
$notice['subject']
:
'' . _('no subject') . ' '
) .
' — by ' .
(isset($notice['username']) ?
utf8tohtml($notice['username'])
:
'??? '
) .
' at ' .
strftime($config['post_date'], $notice['time']) .
' ' . $notice['body'] . '
New post ' .
(hasPermission($config['mod']['news_delete']) ?
'
[delete] '
: '') .
'
' .
($news['subject'] ?
$news['subject']
:
'' . _('no subject') . ' '
) .
' — by ' .
$news['name'] .
' at ' .
strftime($config['post_date'], $news['time']) .
' ' . $news['body'] . '
(' . _('No private messages for you.') . ')
';
} else {
$unread_pms = 0;
$body = '';
if($unread_pms) {
$body = '(Mark all as read )
' . $body;
}
}
echo Element('page.html', Array(
'config'=>$config,
'title'=>_('PM Inbox') . ' (' . ($query->rowCount() == 0 ? _('empty') : $unread_pms . ' ' . _('unread')) . ')',
'body'=>$body,
'mod'=>true
)
);
} elseif(preg_match('/^\/PM\/(\d+)$/', $query, $match)) {
$id = &$match[1];
if(hasPermission($config['mod']['master_pm'])) {
$query = prepare("SELECT `pms`.`id`, `time`, `sender`, `unread`, `to`, `message`, `username` FROM `pms` LEFT JOIN `mods` ON `mods`.`id` = `sender` WHERE `pms`.`id` = :id");
} else {
$query = prepare("SELECT `pms`.`id`, `time`, `sender`, `unread`, `to`, `message`, `username` FROM `pms` LEFT JOIN `mods` ON `mods`.`id` = `sender` WHERE `pms`.`id` = :id AND `to` = :mod");
$query->bindValue(':mod', $mod['id'], PDO::PARAM_INT);
}
$query->bindValue(':id', $id, PDO::PARAM_INT);
$query->execute() or error(db_error($query));
if(!$pm = $query->fetch()) {
// Mod doesn't exist
error($config['error']['404']);
}
if(isset($_POST['delete'])) {
$query = prepare("DELETE FROM `pms` WHERE `id` = :id");
$query->bindValue(':id', $id, PDO::PARAM_INT);
$query->execute() or error(db_error($query));
modLog('Deleted a PM');
header('Location: ?/inbox', true, $config['redirect_http']);
} else {
if($pm['unread']) {
$query = prepare("UPDATE `pms` SET `unread` = 0 WHERE `id` = :id");
$query->bindValue(':id', $id, PDO::PARAM_INT);
$query->execute() or error(db_error($query));
modLog('Read a PM');
}
if($pm['to'] != $mod['id']) {
$query = prepare("SELECT `username` FROM `mods` WHERE `id` = :id");
$query->bindValue(':id', $pm['to'], PDO::PARAM_INT);
$query->execute() or error(db_error($query));
if($_mod = $query->fetch()) {
$__to = &$_mod['username'];
} else {
$__to = false;
}
}
$body = '' .
'Reply with quote
';
echo Element('page.html', Array(
'config'=>$config,
'title'=>'Private message',
'body'=>$body,
'mod'=>true
)
);
}
} elseif(preg_match('/^\/new_PM\/(\d+)(\/(\d+))?$/', $query, $match)) {
if(!hasPermission($config['mod']['create_pm'])) error($config['error']['noaccess']);
$to = &$match[1];
$query = prepare("SELECT `username`,`id` FROM `mods` WHERE `id` = :id");
$query->bindValue(':id', $to, PDO::PARAM_INT);
$query->execute() or error(db_error($query));
if(!$to = $query->fetch()) {
// Mod doesn't exist
error($config['error']['404']);
}
if(isset($_POST['message'])) {
// Post message
$message = &$_POST['message'];
if(empty($message))
error($config['error']['tooshort_body']);
markup($message);
$query = prepare("INSERT INTO `pms` VALUES (NULL, :sender, :to, :message, :time, 1)");
$query->bindValue(':sender', $mod['id'], PDO::PARAM_INT);
$query->bindValue(':to', $to['id'], PDO::PARAM_INT);
$query->bindValue(':message', $message);
$query->bindValue(':time', time(), PDO::PARAM_INT);
$query->execute() or error(db_error($query));
modLog('Sent a PM to ' . $to['username']);
echo Element('page.html', Array(
'config'=>$config,
'title'=>'PM sent',
'body'=>'Message sent successfully to ' . utf8tohtml($to['username']) . '.
',
'mod'=>true
)
);
} else {
$value = '';
if(isset($match[3])) {
$reply = &$match[3];
$query = prepare("SELECT `message` FROM `pms` WHERE `sender` = :sender AND `to` = :mod AND `id` = :id");
$query->bindValue(':sender', $to['id'], PDO::PARAM_INT);
$query->bindValue(':mod', $mod['id'], PDO::PARAM_INT);
$query->bindValue(':id', $reply, PDO::PARAM_INT);
$query->execute() or error(db_error($query));
if($pm = $query->fetch()) {
$value = quote($pm['message']);
}
}
$body = '';
echo Element('page.html', Array(
'config'=>$config,
'title'=>'New PM for ' . utf8tohtml($to['username']),
'body'=>$body,
'mod'=>true
)
);
}
} elseif(preg_match('/^\/search$/', $query)) {
if(!hasPermission($config['mod']['search'])) error($config['error']['noaccess']);
$body = 'Search ' .
'
(Search is case-insensitive, and based on keywords. To match exact phrases, use "quotes". Use an asterisk (*) for wildcard.)
' .
'
' . $query->rowCount() . ' result' . ($query->rowCount() != 1 ? 's' : '') . ' on ' .
sprintf($config['board_abbreviation'], $board['uri']) . ' - ' . $board['title'] .
' ' . $temp . '(No results.)
';
}
echo Element('page.html', Array(
'config'=>$config,
'title'=>'Search',
'body'=>$body,
'mod'=>true
)
);
} elseif(preg_match('/^\/users$/', $query)) {
if(!hasPermission($config['mod']['manageusers'])) error($config['error']['noaccess']);
$body = '';
echo Element('page.html', Array(
'config'=>$config,
'title'=>_('Manage users'),
'body'=>$body
,'mod'=>true
)
);
} elseif(preg_match('/^\/users\/new$/', $query)) {
if(!hasPermission($config['mod']['createusers'])) error($config['error']['noaccess']);
if(isset($_POST['username']) && isset($_POST['password'])) {
if(!isset($_POST['type'])) {
error(sprintf($config['error']['required'], 'type'));
}
if($_POST['type'] != ADMIN && $_POST['type'] != MOD && $_POST['type'] != JANITOR) {
error(sprintf($config['error']['invalidfield'], 'type'));
}
// Check if already exists
$query = prepare("SELECT `id` FROM `mods` WHERE `username` = :username");
$query->bindValue(':username', $_POST['username']);
$query->execute() or error(db_error($query));
if($_mod = $query->fetch()) {
error(sprintf($config['error']['modexists'], $_mod['id']));
}
$boards = Array();
foreach($_POST as $name => $null) {
if(preg_match('/^board_(.+)$/', $name, $m))
$boards[] = $m[1];
}
$boards = implode(',', $boards);
$query = prepare("INSERT INTO `mods` VALUES (NULL, :username, :password, :type, :boards)");
$query->bindValue(':username', $_POST['username']);
$query->bindValue(':password', sha1($_POST['password']));
$query->bindValue(':type', $_POST['type'], PDO::PARAM_INT);
$query->bindValue(':boards', $boards);
$query->execute() or error(db_error($query));
modLog('Create a new user: "' . $_POST['username'] . '"');
header('Location: ?/users', true, $config['redirect_http']);
} else {
$__boards = '';
$boards = array_merge(
Array(Array('uri' => '*', 'title' => 'All')
), listBoards());
foreach($boards as &$_board) {
$__boards .= '' .
' ' .
($_board['uri'] == '*' ?
'"*" '
:
sprintf($config['board_abbreviation'], $_board['uri'])
) .
' - ' . $_board['title'] .
' ' .
' ';
}
$body = 'New user ' .
// Begin form
'Edit user ' .
// Begin form
' ' .
// Delete button
(hasPermission($config['mod']['deleteusers']) ?
'Delete user
'
:'') .
'Showing ' .
($reports == $count['count'] ? 'all ' . $reports . ' reports' : $reports . ' of ' . $count['count'] . ' reports') . '.
';
echo Element('page.html', Array(
'config'=>$config,
'title'=>_('Report queue') . ' (' . $count['count'] . ')',
'body'=>$body,
'mod'=>true
));
} elseif(preg_match('/^\/reports\/(\d+)\/dismiss(\/all)?$/', $query, $matches)) {
if(isset($matches[2]) && $matches[2] == '/all') {
if(!hasPermission($config['mod']['report_dismiss_ip'])) error($config['error']['noaccess']);
$query = prepare("SELECT `ip` FROM `reports` WHERE `id` = :id");
$query->bindValue(':id', $matches[1], PDO::PARAM_INT);
$query->execute() or error(db_error($query));
if($report = $query->fetch()) {
$query = prepare("DELETE FROM `reports` WHERE `ip` = :ip");
$query->bindValue(':ip', $report['ip'], PDO::PARAM_INT);
$query->execute() or error(db_error($query));
modLog('Dismissed all reports by ' . $report['ip']);
}
} else {
if(!hasPermission($config['mod']['report_dismiss'])) error($config['error']['noaccess']);
$query = prepare("SELECT `post`, `board` FROM `reports` WHERE `id` = :id");
$query->bindValue(':id', $matches[1], PDO::PARAM_INT);
$query->execute() or error(db_error($query));
if($report = $query->fetch()) {
modLog('Dismissed a report for post #' . $report['post'], $report['board']);
$query = prepare("DELETE FROM `reports` WHERE `post` = :post");
$query->bindValue(':post', $report['post'], PDO::PARAM_INT);
$query->execute() or error(db_error($query));
}
}
// Redirect
header('Location: ?/reports', true, $config['redirect_http']);
} elseif(preg_match('/^\/board\/(\w+)(\/delete)?$/', $query, $matches)) {
if(!hasPermission($config['mod']['manageboards'])) error($config['error']['noaccess']);
if(!openBoard($matches[1]))
error($config['error']['noboard']);
if(isset($matches[2]) && $matches[2] == '/delete') {
if(!hasPermission($config['mod']['deleteboard'])) error($config['error']['noaccess']);
// Delete board
modLog('Deleted board ' . sprintf($config['board_abbreviation'], $board['uri']));
// Delete entire board directory
rrmdir($board['uri'] . '/');
// Delete posting table
$query = query(sprintf("DROP TABLE IF EXISTS `posts_%s`", $board['uri'])) or error(db_error());
// Clear reports
$query = prepare("DELETE FROM `reports` WHERE `board` = :id");
$query->bindValue(':id', $board['id'], PDO::PARAM_INT);
$query->execute() or error(db_error($query));
// Delete from table
$query = prepare("DELETE FROM `boards` WHERE `id` = :id");
$query->bindValue(':id', $board['id'], PDO::PARAM_INT);
$query->execute() or error(db_error($query));
if($config['cache']['enabled']) {
cache::delete('board_' . $board['uri']);
cache::delete('all_boards');
}
$query = prepare("SELECT `board`, `post` FROM `cites` WHERE `target_board` = :board");
$query->bindValue(':board', $board['uri']);
$query->execute() or error(db_error($query));
while($cite = $query->fetch()) {
if($board['uri'] != $cite['board']) {
if(!isset($tmp_board))
$tmp_board = $board;
openBoard($cite['board']);
rebuildPost($cite['post']);
}
}
if(isset($tmp_board))
$board = $tmp_board;
$query = prepare("DELETE FROM `cites` WHERE `board` = :board OR `target_board` = :board");
$query->bindValue(':board', $board['uri']);
$query->execute() or error(db_error($query));
rebuildThemes('boards');
header('Location: ?/', true, $config['redirect_http']);
} else {
if(isset($_POST['title']) && isset($_POST['subtitle'])) {
$query = prepare("UPDATE `boards` SET `title` = :title, `subtitle` = :subtitle WHERE `id` = :id");
$query->bindValue(':title', utf8tohtml($_POST['title'], true));
if(!empty($_POST['subtitle']))
$query->bindValue(':subtitle', utf8tohtml($_POST['subtitle'], true));
else
$query->bindValue(':subtitle', null, PDO::PARAM_NULL);
$query->bindValue(':id', $board['id'], PDO::PARAM_INT);
$query->execute() or error(db_error($query));
if($config['cache']['enabled']) {
cache::delete('board_' . $board['uri']);
cache::delete('all_boards');
}
rebuildThemes('boards');
openBoard($board['uri']);
}
$body =
'' .
sprintf($config['board_abbreviation'], $board['uri']) . ' ' .
' - ' . $board['name'] . 'Delete board
'
:'') .
'(There are no active bans.)
';
} else {
$body = ' ';
}
echo Element('page.html', Array(
'config'=>$config,
'title'=>_('Ban list'),
'body'=>$body,
'mod'=>true
)
);
} elseif(preg_match('/^\/flush$/', $query)) {
if(!hasPermission($config['mod']['rebuild'])) error($config['error']['noaccess']);
if(!$config['cache']['enabled']) error('Cache is not enabled.');
if(cache::flush()) {
$body = 'Successfully invalidated all items in cache.';
modLog('Cleared cache');
} else {
$body = 'An error occured while trying to flush cache.';
}
echo Element('page.html', Array(
'config'=>$config,
'title'=>'Flushed',
'body'=>'' . $body . '
',
'mod'=>true
));
} elseif(preg_match('/^\/rebuild$/', $query)) {
if(!hasPermission($config['mod']['rebuild'])) error($config['error']['noaccess']);
set_time_limit($config['mod']['rebuild_timelimit']);
$body = 'Rebuilding… ';
$body .= 'Clearing template cache…Opening board /{$board['uri']}/
hidden ';
} elseif(gettype($value) == 'boolean') {
$value = $value ? 'On ' : 'Off ';
} elseif(gettype($value) == 'string') {
if(empty($value))
$value = 'empty ';
else
$value = '' . utf8tohtml(substr($value, 0, 110) . (mb_strlen($value) > 110 ? '…' : '')) . ' ';
} elseif(gettype($value) == 'integer') {
$value = '' . $value . ' ';
}
$data .=
'' .
$prefix . (gettype($name) == 'integer' ? '[]' : $name) .
' ' .
$value .
' ' . _('Configuration') . ' Move thread ' .
'\d+)$/', $query, $matches)) {
if(!hasPermission($config['mod']['remove_notes'])) error($config['error']['noaccess']);
$ip = $matches[1];
$id = $matches['id'];
$query = prepare("DELETE FROM `ip_notes` WHERE `ip` = :ip AND `id` = :id");
$query->bindValue(':ip', $ip);
$query->bindValue(':id', $id);
$query->execute() or error(db_error($query));
header('Location: ?/IP/' . $ip, true, $config['redirect_http']);
} elseif(preg_match('/^\/IP\/(\d+\.\d+\.\d+\.\d+|' . $config['ipv6_regex'] . ')$/', $query, $matches)) {
// View information on an IP address
$ip = $matches[1];
$host = $config['mod']['dns_lookup'] ? rDNS($ip) : false;
if(hasPermission($config['mod']['unban']) && isset($_POST['unban']) && isset($_POST['ban_id'])) {
removeBan($_POST['ban_id']);
header('Location: ?/IP/' . $ip, true, $config['redirect_http']);
} elseif(hasPermission($config['mod']['create_notes']) && isset($_POST['note'])) {
$query = prepare("INSERT INTO `ip_notes` VALUES(NULL, :ip, :mod, :time, :body)");
$query->bindValue(':ip', $ip);
$query->bindValue(':mod', $mod['id'], PDO::PARAM_INT);
$query->bindValue(':time', time(), PDO::PARAM_INT);
markup($_POST['note']);
$query->bindValue(':body', $_POST['note']);
$query->execute() or error(db_error($query));
header('Location: ?/IP/' . $ip, true, $config['redirect_http']);
} else {
$body = '';
$boards = listBoards();
foreach($boards as &$_board) {
openBoard($_board['uri']);
$temp = '';
$query = prepare(sprintf("SELECT * FROM `posts_%s` WHERE `ip` = :ip ORDER BY `sticky` DESC, `time` DESC LIMIT :limit", $_board['uri']));
$query->bindValue(':ip', $ip);
$query->bindValue(':limit', $config['mod']['ip_recentposts'], PDO::PARAM_INT);
$query->execute() or error(db_error($query));
while($post = $query->fetch()) {
if(!$post['thread']) {
$po = new Thread($post['id'], $post['subject'], $post['email'], $post['name'], $post['trip'], $post['capcode'], $post['body'], $post['time'], $post['thumb'], $post['thumbwidth'], $post['thumbheight'], $post['file'], $post['filewidth'], $post['fileheight'], $post['filesize'], $post['filename'], $post['ip'], $post['sticky'], $post['locked'], $post['sage'], $post['embed'], '?/', $mod, false);
} else {
$po = new Post($post['id'], $post['thread'], $post['subject'], $post['email'], $post['name'], $post['trip'], $post['capcode'], $post['body'], $post['time'], $post['thumb'], $post['thumbwidth'], $post['thumbheight'], $post['file'], $post['filewidth'], $post['fileheight'], $post['filesize'], $post['filename'], $post['ip'], $post['embed'], '?/', $mod);
}
$temp .= $po->build(true) . 'Last ' . $query->rowCount() . ' posts on ' .
sprintf($config['board_abbreviation'], $_board['uri']) . ' - ' . $_board['title'] .
' ' . $temp . '' .
$query->rowCount() . ' note' . ($query->rowCount() == 1 ?'' : 's') . ' on record' .
' ';
if($query->rowCount() > 0) {
$body .= '' .
'Staff Note Date ' .
(hasPermission($config['mod']['remove_notes']) ? 'Actions ' : '') .
'';
while($note = $query->fetch()) {
if($note['mod']) {
$_query = prepare("SELECT `username` FROM `mods` WHERE `id` = :id");
$_query->bindValue(':id', $note['mod']);
$_query->execute() or error(db_error($_query));
if($_mod = $_query->fetch()) {
$staff = '' . utf8tohtml($_mod['username']) . ' ';
} else {
$staff = '??? ';
}
} else {
$staff = 'system ';
}
$body .= '' .
'' .
$staff .
' ' .
$note['body'] .
' ' .
strftime($config['post_date'], $note['time']) .
' ' .
(hasPermission($config['mod']['remove_notes']) ?
'[delete] ';
}
$body .= '
';
}
if(hasPermission($config['mod']['create_notes'])) {
$body .= '';
}
$body .= 'Ban' . ($query->rowCount() == 1 ? '' : 's') . ' on record ';
while($ban = $query->fetch()) {
$body .= '';
}
$body .= ' 