Vergleich newthread.php - 1.8.26 - 1.8.27

  Keine Änderungen   Hinzugefügt   Modifiziert   Entfernt
Zeile 23Zeile 23
require_once "./global.php";
require_once MYBB_ROOT."inc/functions_post.php";
require_once MYBB_ROOT."inc/functions_user.php";

require_once "./global.php";
require_once MYBB_ROOT."inc/functions_post.php";
require_once MYBB_ROOT."inc/functions_user.php";

 
require_once MYBB_ROOT."inc/functions_upload.php";


// Load global language phrases
$lang->load("newthread");


// Load global language phrases
$lang->load("newthread");

Zeile 35Zeile 36
{
$thread = get_thread($mybb->input['tid']);


{
$thread = get_thread($mybb->input['tid']);


	$query = $db->simple_select("posts", "*", "tid='".$mybb->get_input('tid', MyBB::INPUT_INT)."' AND visible='-2'", array('order_by' => 'dateline', 'limit' => 1));

	$query = $db->simple_select("posts", "*", "tid='".$mybb->get_input('tid', MyBB::INPUT_INT)."' AND visible='-2'", array('order_by' => 'dateline, pid', 'limit' => 1));

	$post = $db->fetch_array($query);

if(!$thread['tid'] || !$post['pid'] || $thread['visible'] != -2 || $thread['uid'] != $mybb->user['uid'])

	$post = $db->fetch_array($query);

if(!$thread['tid'] || !$post['pid'] || $thread['visible'] != -2 || $thread['uid'] != $mybb->user['uid'])

Zeile 170Zeile 171
	{
$attachwhere = "posthash='".$db->escape_string($mybb->get_input('posthash'))."'";
}

	{
$attachwhere = "posthash='".$db->escape_string($mybb->get_input('posthash'))."'";
}


require_once MYBB_ROOT."inc/functions_upload.php";

 

$ret = add_attachments($pid, $forumpermissions, $attachwhere, "newthread");


$ret = add_attachments($pid, $forumpermissions, $attachwhere, "newthread");

 

if($mybb->get_input('ajax', MyBB::INPUT_INT) == 1)
{
if(isset($ret['success']))
{
$attachment = array('aid'=>'{1}', 'icon'=>'{2}', 'filename'=>'{3}', 'size'=>'{4}');
if($mybb->settings['bbcodeinserter'] != 0 && $forum['allowmycode'] != 0 && $mybb->user['showcodebuttons'] != 0)
{
eval("\$postinsert = \"".$templates->get("post_attachments_attachment_postinsert")."\";");
}
eval("\$attach_rem_options = \"".$templates->get("post_attachments_attachment_remove")."\";");
eval("\$attemplate = \"".$templates->get("post_attachments_attachment")."\";");
$ret['template'] = $attemplate;

$query = $db->simple_select("attachments", "SUM(filesize) AS ausage", "uid='".$mybb->user['uid']."'");
$usage = $db->fetch_array($query);
$ret['usage'] = get_friendly_size($usage['ausage']);
}

header("Content-type: application/json; charset={$lang->settings['charset']}");
echo json_encode($ret);
exit();
}


if(!empty($ret['errors']))
{
$errors = $ret['errors'];


if(!empty($ret['errors']))
{
$errors = $ret['errors'];

	}


	}


	// If we were dealing with an attachment but didn't click 'Post Thread' or 'Save as Draft', force the new thread page again.
if(!$mybb->get_input('submit') && !$mybb->get_input('savedraft'))

	// If we were dealing with an attachment but didn't click 'Post Thread' or 'Save as Draft', force the new thread page again.
if(!$mybb->get_input('submit') && !$mybb->get_input('savedraft'))

	{
$mybb->input['action'] = "newthread";

	{
$mybb->input['action'] = "newthread";

	}
}


	}
}


detect_attachmentact();


detect_attachmentact();


// Are we removing an attachment from the thread?
if($mybb->settings['enableattachments'] == 1 && $mybb->get_input('attachmentaid', MyBB::INPUT_INT) && $mybb->get_input('attachmentact') == "remove")
{
// Verify incoming POST request
verify_post_check($mybb->get_input('my_post_key'));


// Are we removing an attachment from the thread?
if($mybb->settings['enableattachments'] == 1 && $mybb->get_input('attachmentaid', MyBB::INPUT_INT) && $mybb->get_input('attachmentact') == "remove")
{
// Verify incoming POST request
verify_post_check($mybb->get_input('my_post_key'));


	require_once MYBB_ROOT."inc/functions_upload.php";

 
	remove_attachment($pid, $mybb->get_input('posthash'), $mybb->get_input('attachmentaid', MyBB::INPUT_INT));

	remove_attachment($pid, $mybb->get_input('posthash'), $mybb->get_input('attachmentaid', MyBB::INPUT_INT));

 


	if(!$mybb->get_input('submit'))
{
$mybb->input['action'] = "newthread";

	if(!$mybb->get_input('submit'))
{
$mybb->input['action'] = "newthread";

Zeile 204Zeile 226

if($mybb->get_input('ajax', MyBB::INPUT_INT) == 1)
{


if($mybb->get_input('ajax', MyBB::INPUT_INT) == 1)
{

 
		$query = $db->simple_select("attachments", "SUM(filesize) AS ausage", "uid='".$mybb->user['uid']."'");
$usage = $db->fetch_array($query);


		header("Content-type: application/json; charset={$lang->settings['charset']}");

		header("Content-type: application/json; charset={$lang->settings['charset']}");

		echo json_encode(array("success" => true));

		echo json_encode(array("success" => true, "usage" => get_friendly_size($usage['ausage'])));

		exit();
}
}

		exit();
}
}

Zeile 300Zeile 325
	if(!$mybb->get_input('savedraft') && !$pid)
{
$query = $db->simple_select("posts p", "p.pid", "$user_check AND p.fid='{$forum['fid']}' AND p.subject='".$db->escape_string($mybb->get_input('subject'))."' AND p.message='".$db->escape_string($mybb->get_input('message'))."' AND p.dateline>".(TIME_NOW-600));

	if(!$mybb->get_input('savedraft') && !$pid)
{
$query = $db->simple_select("posts p", "p.pid", "$user_check AND p.fid='{$forum['fid']}' AND p.subject='".$db->escape_string($mybb->get_input('subject'))."' AND p.message='".$db->escape_string($mybb->get_input('message'))."' AND p.dateline>".(TIME_NOW-600));

		$duplicate_check = $db->fetch_field($query, "pid");
if($duplicate_check)

		if($db->num_rows($query) > 0)


		{
error($lang->error_post_already_submitted);
}

		{
error($lang->error_post_already_submitted);
}

Zeile 567Zeile 591
					LEFT JOIN ".TABLE_PREFIX."threads t ON (t.tid=p.tid)
LEFT JOIN ".TABLE_PREFIX."users u ON (u.uid=p.uid)
WHERE p.pid IN ({$quoted_posts}) {$unviewable_forums} {$inactiveforums} {$onlyusforums} {$visible_where}

					LEFT JOIN ".TABLE_PREFIX."threads t ON (t.tid=p.tid)
LEFT JOIN ".TABLE_PREFIX."users u ON (u.uid=p.uid)
WHERE p.pid IN ({$quoted_posts}) {$unviewable_forums} {$inactiveforums} {$onlyusforums} {$visible_where}

					ORDER BY p.dateline

					ORDER BY p.dateline, p.pid

				");
while($quoted_post = $db->fetch_array($query))
{

				");
while($quoted_post = $db->fetch_array($query))
{

Zeile 882Zeile 906
		}

$closeoption = '';

		}

$closeoption = '';

		if(is_moderator($thread['fid'], "canopenclosethreads"))

		if(is_moderator($fid, "canopenclosethreads"))

		{
eval("\$closeoption = \"".$templates->get("newreply_modoptions_close")."\";");

		{
eval("\$closeoption = \"".$templates->get("newreply_modoptions_close")."\";");

		}

		}


$stickoption = '';


$stickoption = '';

		if(is_moderator($thread['fid'], "canstickunstickthreads"))
{

		if(is_moderator($fid, "canstickunstickthreads"))
{

			eval("\$stickoption = \"".$templates->get("newreply_modoptions_stick")."\";");
}


			eval("\$stickoption = \"".$templates->get("newreply_modoptions_stick")."\";");
}


Zeile 898Zeile 922
			eval("\$modoptions = \"".$templates->get("newreply_modoptions")."\";");
$bgcolor = "trow1";
$bgcolor2 = "trow2";

			eval("\$modoptions = \"".$templates->get("newreply_modoptions")."\";");
$bgcolor = "trow1";
$bgcolor2 = "trow2";

		}

		}

		else
{
$bgcolor = "trow2";

		else
{
$bgcolor = "trow2";

Zeile 920Zeile 944
		if($mybb->input['action'] == "editdraft" || ($mybb->input['tid'] && $mybb->input['pid']))
{
$attachwhere = "pid='$pid'";

		if($mybb->input['action'] == "editdraft" || ($mybb->input['tid'] && $mybb->input['pid']))
{
$attachwhere = "pid='$pid'";

		}
else

		}
else

		{
$attachwhere = "posthash='".$db->escape_string($posthash)."'";
}

		{
$attachwhere = "posthash='".$db->escape_string($posthash)."'";
}

Zeile 932Zeile 956
			$attachment['size'] = get_friendly_size($attachment['filesize']);
$attachment['icon'] = get_attachment_icon(get_extension($attachment['filename']));
$attachment['filename'] = htmlspecialchars_uni($attachment['filename']);

			$attachment['size'] = get_friendly_size($attachment['filesize']);
$attachment['icon'] = get_attachment_icon(get_extension($attachment['filename']));
$attachment['filename'] = htmlspecialchars_uni($attachment['filename']);





			if($mybb->settings['bbcodeinserter'] != 0 && $forum['allowmycode'] != 0 && (!$mybb->user['uid'] || $mybb->user['showcodebuttons'] != 0))
{
eval("\$postinsert = \"".$templates->get("post_attachments_attachment_postinsert")."\";");

			if($mybb->settings['bbcodeinserter'] != 0 && $forum['allowmycode'] != 0 && (!$mybb->user['uid'] || $mybb->user['showcodebuttons'] != 0))
{
eval("\$postinsert = \"".$templates->get("post_attachments_attachment_postinsert")."\";");

Zeile 966Zeile 990
			$friendlyquota = get_friendly_size($mybb->usergroup['attachquota']*1024);
}
$lang->attach_quota = $lang->sprintf($lang->attach_quota, $friendlyquota);

			$friendlyquota = get_friendly_size($mybb->usergroup['attachquota']*1024);
}
$lang->attach_quota = $lang->sprintf($lang->attach_quota, $friendlyquota);

		



$link_viewattachments = '';

		if($usage['ausage'] !== NULL)

		if($usage['ausage'] !== NULL)

		{

		{

			$friendlyusage = get_friendly_size($usage['ausage']);
$lang->attach_usage = $lang->sprintf($lang->attach_usage, $friendlyusage);
eval("\$link_viewattachments = \"".$templates->get("post_attachments_viewlink")."\";");

			$friendlyusage = get_friendly_size($usage['ausage']);
$lang->attach_usage = $lang->sprintf($lang->attach_usage, $friendlyusage);
eval("\$link_viewattachments = \"".$templates->get("post_attachments_viewlink")."\";");

		}

		}

		else
{
$lang->attach_usage = "";
}

		else
{
$lang->attach_usage = "";
}

		



$attach_add_options = '';

		if($mybb->settings['maxattachments'] == 0 || ($mybb->settings['maxattachments'] != 0 && $attachcount < $mybb->settings['maxattachments']) && !isset($noshowattach))
{
eval("\$attach_add_options = \"".$templates->get("post_attachments_add")."\";");
}


		if($mybb->settings['maxattachments'] == 0 || ($mybb->settings['maxattachments'] != 0 && $attachcount < $mybb->settings['maxattachments']) && !isset($noshowattach))
{
eval("\$attach_add_options = \"".$templates->get("post_attachments_add")."\";");
}


 
		$attach_update_options = '';

		if(($mybb->usergroup['caneditattachments'] || $forumpermissions['caneditattachments']) && $attachcount > 0)
{
eval("\$attach_update_options = \"".$templates->get("post_attachments_update")."\";");

		if(($mybb->usergroup['caneditattachments'] || $forumpermissions['caneditattachments']) && $attachcount > 0)
{
eval("\$attach_update_options = \"".$templates->get("post_attachments_update")."\";");

Zeile 1026Zeile 1053

if(!$correct)
{


if(!$correct)
{

 			if($post_captcha->type == 1)

 			if($post_captcha->type == captcha::DEFAULT_CAPTCHA)

			{
$post_captcha->build_captcha();
}

			{
$post_captcha->build_captcha();
}

			elseif(in_array($post_captcha->type, array(4, 5, 8)))

			elseif(in_array($post_captcha->type, array(captcha::NOCAPTCHA_RECAPTCHA, captcha::RECAPTCHA_INVISIBLE, captcha::RECAPTCHA_V3)))

			{
$post_captcha->build_recaptcha();
}

			{
$post_captcha->build_recaptcha();
}

			elseif(in_array($post_captcha->type, array(6, 7)))

			elseif(in_array($post_captcha->type, array(captcha::HCAPTCHA, captcha::HCAPTCHA_INVISIBLE)))

			{
$post_captcha->build_hcaptcha();
}
}

			{
$post_captcha->build_hcaptcha();
}
}

		else if($correct && (in_array($post_captcha->type, array(4, 5, 8))))

		else if($correct && (in_array($post_captcha->type, array(captcha::NOCAPTCHA_RECAPTCHA, captcha::RECAPTCHA_INVISIBLE, captcha::RECAPTCHA_V3))))

		{
$post_captcha->build_recaptcha();
}

		{
$post_captcha->build_recaptcha();
}

		else if($correct && (in_array($post_captcha->type, array(6, 7))))

		else if($correct && (in_array($post_captcha->type, array(captcha::HCAPTCHA, captcha::HCAPTCHA_INVISIBLE))))

		{
$post_captcha->build_hcaptcha();
}

		{
$post_captcha->build_hcaptcha();
}

Zeile 1123Zeile 1150
		}
}


		}
}


	$php_max_upload_filesize = return_bytes(ini_get('max_upload_filesize'));
$php_post_max_size = return_bytes(ini_get('post_max_size'));

if ($php_max_upload_filesize != 0 && $php_post_max_size != 0)
{
$php_max_upload_size = min($php_max_upload_filesize, $php_post_max_size);
}
else
{
$php_max_upload_size = max($php_max_upload_filesize, $php_post_max_size);
}


	$php_max_upload_size = get_php_upload_limit();












	$php_max_file_uploads = (int)ini_get('max_file_uploads');
eval("\$post_javascript = \"".$templates->get("post_javascript")."\";");


	$php_max_file_uploads = (int)ini_get('max_file_uploads');
eval("\$post_javascript = \"".$templates->get("post_javascript")."\";");