Subversion Repositories SvarDOS

Rev

Rev 1645 | Rev 1702 | Go to most recent revision | Only display areas with differences | Ignore whitespace | Details | Blame | Last modification | View Log | RSS feed

Rev 1645 Rev 1651
1
<?php
1
<?php
2
//
2
//
3
// mateuszbb - minimalist bulletin board forum. MIT license.
3
// mateuszbb - minimalist bulletin board forum. MIT license.
4
//
4
//
5
// VERSION 20240119
5
// VERSION 20240123
6
//
6
//
7
// Copyright (C) 2021-2024 Mateusz Viste
7
// Copyright (C) 2021-2024 Mateusz Viste
8
//
8
//
9
// Permission is hereby granted, free of charge, to any person obtaining a copy
9
// Permission is hereby granted, free of charge, to any person obtaining a copy
10
// of this software and associated documentation files (the “Software”), to
10
// of this software and associated documentation files (the “Software”), to
11
// deal in the Software without restriction, including without limitation the
11
// deal in the Software without restriction, including without limitation the
12
// rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
12
// rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
13
// sell copies of the Software, and to permit persons to whom the Software is
13
// sell copies of the Software, and to permit persons to whom the Software is
14
// furnished to do so, subject to the following conditions:
14
// furnished to do so, subject to the following conditions:
15
//
15
//
16
//The above copyright notice and this permission notice shall be included in
16
// The above copyright notice and this permission notice shall be included in
17
// all copies or substantial portions of the Software.
17
// all copies or substantial portions of the Software.
18
//
18
//
19
// THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
19
// THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
20
// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
20
// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
21
// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
21
// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
22
// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
22
// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
23
// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
23
// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
24
// FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
24
// FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
25
// IN THE SOFTWARE.
25
// IN THE SOFTWARE.
26
 
26
 
27
global $TRIP_SALT;
27
global $TRIP_SALT;
28
global $INITYEAR;
28
global $INITYEAR;
29
global $DATADIR;
29
global $DATADIR;
30
global $NICE_URLS;
30
global $NICE_URLS;
31
global $STR;
31
global $STR;
32
global $LANG;
32
global $LANG;
33
global $TZ;
33
global $TZ;
34
global $DATE_FORMAT;
34
global $DATE_FORMAT;
35
global $MAINPAGE_MAXTHREADS;
35
global $MAINPAGE_MAXTHREADS;
36
global $MAINPAGE_MAXINACT;
36
global $MAINPAGE_MAXINACT;
37
global $LOCK_DELAY;
37
global $LOCK_DELAY;
38
global $EDIT_ALLOWED_MINUTES;
38
global $EDIT_ALLOWED_MINUTES;
39
global $MAXDAILYPOSTS;
39
global $MAXDAILYPOSTS;
40
 
40
 
41
include 'mateuszbb-config.php';
41
include 'mateuszbb-config.php';
42
 
42
 
43
 
43
 
44
// *** TRANSLATION STRINGS *****************************************
44
// *** TRANSLATION STRINGS *****************************************
45
 
45
 
46
$STR = array();
46
$STR = array();
47
$STR['en']['opnewthread'] = 'open a new thread';
47
$STR['en']['opnewthread'] = 'open a new thread';
48
$STR['en']['newthread']   = 'New thread';
48
$STR['en']['newthread']   = 'New thread';
49
$STR['en']['latestentry'] = 'latest entry:';
49
$STR['en']['latestentry'] = 'latest entry:';
50
$STR['en']['searchterm']  = 'searched term:';
50
$STR['en']['searchterm']  = 'searched term:';
51
$STR['en']['noresults']   = 'No results';
51
$STR['en']['noresults']   = 'No results';
52
$STR['en']['reply']       = 'reply';
52
$STR['en']['reply']       = 'reply';
53
$STR['en']['jumptoend']   = 'jump to end';
53
$STR['en']['jumptoend']   = 'jump to end';
54
$STR['en']['listthreads'] = 'list of threads';
54
$STR['en']['listthreads'] = 'list of threads';
55
$STR['en']['author']      = 'author:';
55
$STR['en']['author']      = 'author:';
56
$STR['en']['address']     = 'address:';
56
$STR['en']['address']     = 'address:';
57
$STR['en']['date']        = 'date:';
57
$STR['en']['date']        = 'date:';
58
$STR['en']['nameornick']  = 'your name or nick';
58
$STR['en']['nameornick']  = 'your name or nick';
59
$STR['en']['threadsubj']  = 'subject';
59
$STR['en']['threadsubj']  = 'subject';
60
$STR['en']['yourmsg']     = 'Your message';
60
$STR['en']['yourmsg']     = 'Your message';
61
$STR['en']['cancel']      = 'cancel';
61
$STR['en']['cancel']      = 'cancel';
62
$STR['en']['send']        = 'send';
62
$STR['en']['send']        = 'send';
63
$STR['en']['archives']    = 'archives';
63
$STR['en']['archives']    = 'archives';
64
$STR['en']['backtocur']   = 'go back to current threads';
64
$STR['en']['backtocur']   = 'go back to current threads';
65
$STR['en']['search']      = 'search';
65
$STR['en']['search']      = 'search';
66
$STR['en']['password']    = 'password';
66
$STR['en']['password']    = 'password';
67
$STR['en']['optional']    = 'optional';
67
$STR['en']['optional']    = 'optional';
68
$STR['en']['passhelp']    = 'Providing a password here will generate a unique digital signature on your message.';
68
$STR['en']['passhelp']    = 'Providing a password here will generate a unique digital signature on your message.';
69
$STR['en']['locked']      = "Thread locked due to inactivity since over {$LOCK_DELAY} days.";
69
$STR['en']['locked']      = "Thread locked due to inactivity since over {$LOCK_DELAY} days.";
70
$STR['en']['captcha'][1]  = 'check the FIRST box';
70
$STR['en']['captcha'][1]  = 'check the FIRST box';
71
$STR['en']['captcha'][2]  = 'check the MIDDLE box';
71
$STR['en']['captcha'][2]  = 'check the MIDDLE box';
72
$STR['en']['captcha'][3]  = 'check the LAST box';
72
$STR['en']['captcha'][3]  = 'check the LAST box';
73
$STR['en']['captcha'][4]  = 'check the FIRST and LAST boxes';
73
$STR['en']['captcha'][4]  = 'check the FIRST and LAST boxes';
74
$STR['en']['captcha'][5]  = 'check the TWO LAST boxes';
74
$STR['en']['captcha'][5]  = 'check the TWO LAST boxes';
75
 
75
 
-
 
76
// DE translations by Robert Riebisch
-
 
77
$STR['de']['opnewthread'] = 'Neues Thema eröffnen';
-
 
78
$STR['de']['newthread']   = 'Neues Thema';
-
 
79
$STR['de']['latestentry'] = 'Neuester Eintrag:';
-
 
80
$STR['de']['searchterm']  = 'Gesuchter Begriff:';
-
 
81
$STR['de']['noresults']   = 'Keine Ergebnisse';
-
 
82
$STR['de']['reply']       = 'Antworten';
-
 
83
$STR['de']['jumptoend']   = 'Zum Ende springen';
-
 
84
$STR['de']['listthreads'] = 'Liste der Themen';
-
 
85
$STR['de']['author']      = 'Autor:';
-
 
86
$STR['de']['address']     = 'Adresse:';
-
 
87
$STR['de']['date']        = 'Zeitpunkt:';
-
 
88
$STR['de']['nameornick']  = 'Dein Name oder Spitzname';
-
 
89
$STR['de']['threadsubj']  = 'Thema';
-
 
90
$STR['de']['yourmsg']     = 'Deine Nachricht';
-
 
91
$STR['de']['cancel']      = 'Abbrechen';
-
 
92
$STR['de']['send']        = 'Senden';
-
 
93
$STR['de']['archives']    = 'Archiv';
-
 
94
$STR['de']['backtocur']   = 'Zurück zu den aktuellen Themen';
-
 
95
$STR['de']['search']      = 'Suchbegriff';
-
 
96
$STR['de']['password']    = 'Kennwort';
-
 
97
$STR['de']['optional']    = 'optional';
-
 
98
$STR['de']['passhelp']    = 'Wenn du hier ein Kennwort eingibst, wird deine Nachricht mit einer eindeutigen digitalen Signatur versehen.';
-
 
99
$STR['de']['locked']      = "Thema wegen Inaktivität seit über {$LOCK_DELAY} Tagen gesperrt.";
-
 
100
$STR['de']['captcha'][1]  = 'Kreuze das ERSTE Kästchen an';
-
 
101
$STR['de']['captcha'][2]  = 'Kreuze das MITTLERE Kästchen an';
-
 
102
$STR['de']['captcha'][3]  = 'Kreuze das LETZTE Kästchen an';
-
 
103
$STR['de']['captcha'][4]  = 'Kreuze das ERSTE und LETZTE Kästchen an';
-
 
104
$STR['de']['captcha'][5]  = 'Kreuze die beiden LETZTEN Kästchen an';
-
 
105
 
76
// PL translations by Mateusz Viste
106
// PL translations by Mateusz Viste
77
$STR['pl']['opnewthread'] = 'stwórz nowy wątek';
107
$STR['pl']['opnewthread'] = 'stwórz nowy wątek';
78
$STR['pl']['newthread']   = 'Nowy wątek';
108
$STR['pl']['newthread']   = 'Nowy wątek';
79
$STR['pl']['latestentry'] = 'ostatni wpis:';
109
$STR['pl']['latestentry'] = 'ostatni wpis:';
80
$STR['pl']['searchterm']  = 'szukane wyrażenie:';
110
$STR['pl']['searchterm']  = 'szukane wyrażenie:';
81
$STR['pl']['noresults']   = 'Brak wyników';
111
$STR['pl']['noresults']   = 'Brak wyników';
82
$STR['pl']['reply']       = 'odpowiedz';
112
$STR['pl']['reply']       = 'odpowiedz';
83
$STR['pl']['jumptoend']   = 'skocz do końca';
113
$STR['pl']['jumptoend']   = 'skocz do końca';
84
$STR['pl']['listthreads'] = 'lista wątków';
114
$STR['pl']['listthreads'] = 'lista wątków';
85
$STR['pl']['author']      = 'autor:';
115
$STR['pl']['author']      = 'autor:';
86
$STR['pl']['address']     = 'adres:';
116
$STR['pl']['address']     = 'adres:';
87
$STR['pl']['date']        = 'data:';
117
$STR['pl']['date']        = 'data:';
88
$STR['pl']['nameornick']  = 'imię, nazwisko lub pseudonim';
118
$STR['pl']['nameornick']  = 'imię, nazwisko lub pseudonim';
89
$STR['pl']['threadsubj']  = 'tytuł wątku';
119
$STR['pl']['threadsubj']  = 'tytuł wątku';
90
$STR['pl']['yourmsg']     = 'Twoja wiadomość';
120
$STR['pl']['yourmsg']     = 'Twoja wiadomość';
91
$STR['pl']['cancel']      = 'anuluj';
121
$STR['pl']['cancel']      = 'anuluj';
92
$STR['pl']['send']        = 'wyślij';
122
$STR['pl']['send']        = 'wyślij';
93
$STR['pl']['archives']    = 'archiwum';
123
$STR['pl']['archives']    = 'archiwum';
94
$STR['pl']['backtocur']   = 'powrót do bieżących wątków';
124
$STR['pl']['backtocur']   = 'powrót do bieżących wątków';
95
$STR['pl']['search']      = 'szukaj';
125
$STR['pl']['search']      = 'szukaj';
96
$STR['pl']['password']    = 'hasło';
126
$STR['pl']['password']    = 'hasło';
97
$STR['pl']['optional']    = 'opcjonalne';
127
$STR['pl']['optional']    = 'opcjonalne';
98
$STR['pl']['passhelp']    = 'Podanie hasła pozwoli wygenerować unikalny podpis elektroniczny przy twojej wiadomości.';
128
$STR['pl']['passhelp']    = 'Podanie hasła pozwoli wygenerować unikalny podpis elektroniczny przy twojej wiadomości.';
99
$STR['pl']['locked']      = "Wątek zamknięty z powodu braku aktywności od ponad {$LOCK_DELAY} dni.";
129
$STR['pl']['locked']      = "Wątek zamknięty z powodu braku aktywności od ponad {$LOCK_DELAY} dni.";
100
$STR['pl']['captcha'][1]  = 'zaznacz PIERWSZE pole';
130
$STR['pl']['captcha'][1]  = 'zaznacz PIERWSZE pole';
101
$STR['pl']['captcha'][2]  = 'zaznacz ŚRODKOWE pole';
131
$STR['pl']['captcha'][2]  = 'zaznacz ŚRODKOWE pole';
102
$STR['pl']['captcha'][3]  = 'zaznacz OSTATNIE pole';
132
$STR['pl']['captcha'][3]  = 'zaznacz OSTATNIE pole';
103
$STR['pl']['captcha'][4]  = 'zaznacz PIERWSZE i OSTATNIE pole';
133
$STR['pl']['captcha'][4]  = 'zaznacz PIERWSZE i OSTATNIE pole';
104
$STR['pl']['captcha'][5]  = 'zaznacz DWA OSTATNIE pola';
134
$STR['pl']['captcha'][5]  = 'zaznacz DWA OSTATNIE pola';
105
 
135
 
106
// pt-BR translations courtesty of Luzemário Dantas
136
// pt-BR translations courtesty of Luzemário Dantas
107
$STR['pt']['opnewthread'] = 'abrir novo tópico';
137
$STR['pt']['opnewthread'] = 'abrir novo tópico';
108
$STR['pt']['newthread']   = 'Novo tópico';
138
$STR['pt']['newthread']   = 'Novo tópico';
109
$STR['pt']['latestentry'] = 'entrada mais recente:';
139
$STR['pt']['latestentry'] = 'entrada mais recente:';
110
$STR['pt']['searchterm']  = 'termo pesquisado:';
140
$STR['pt']['searchterm']  = 'termo pesquisado:';
111
$STR['pt']['noresults']   = 'Sem resultados';
141
$STR['pt']['noresults']   = 'Sem resultados';
112
$STR['pt']['reply']       = 'responder';
142
$STR['pt']['reply']       = 'responder';
113
$STR['pt']['jumptoend']   = 'ir para o final';
143
$STR['pt']['jumptoend']   = 'ir para o final';
114
$STR['pt']['listthreads'] = 'lista de tópicos';
144
$STR['pt']['listthreads'] = 'lista de tópicos';
115
$STR['pt']['author']      = 'autor:';
145
$STR['pt']['author']      = 'autor:';
116
$STR['pt']['address']     = 'endereço:';
146
$STR['pt']['address']     = 'endereço:';
117
$STR['pt']['date']        = 'data:';
147
$STR['pt']['date']        = 'data:';
118
$STR['pt']['nameornick']  = 'seu nome ou apelido';
148
$STR['pt']['nameornick']  = 'seu nome ou apelido';
119
$STR['pt']['threadsubj']  = 'assunto';
149
$STR['pt']['threadsubj']  = 'assunto';
120
$STR['pt']['yourmsg']     = 'Sua mensagem';
150
$STR['pt']['yourmsg']     = 'Sua mensagem';
121
$STR['pt']['cancel']      = 'cancelar';
151
$STR['pt']['cancel']      = 'cancelar';
122
$STR['pt']['send']        = 'enviar';
152
$STR['pt']['send']        = 'enviar';
123
$STR['pt']['archives']    = 'arquivos';
153
$STR['pt']['archives']    = 'arquivos';
124
$STR['pt']['backtocur']   = 'voltar ao tópico atuai';
154
$STR['pt']['backtocur']   = 'voltar ao tópico atuai';
125
$STR['pt']['search']      = 'pesquisar';
155
$STR['pt']['search']      = 'pesquisar';
126
$STR['pt']['password']    = 'senha';
156
$STR['pt']['password']    = 'senha';
127
$STR['pt']['optional']    = 'opcional';
157
$STR['pt']['optional']    = 'opcional';
128
$STR['pt']['passhelp']    = 'Fornecer uma senha aqui vai gerar uma assinatura digital única na sua mensagem.';
158
$STR['pt']['passhelp']    = 'Fornecer uma senha aqui vai gerar uma assinatura digital única na sua mensagem.';
129
$STR['pt']['locked']      = "Este tópico está bloqueado porque está inativo há mais de {$LOCK_DELAY} dias."; // translated by google translate, wording might be poor
159
$STR['pt']['locked']      = "Este tópico está bloqueado porque está inativo há mais de {$LOCK_DELAY} dias."; // translated by google translate, wording might be poor
130
$STR['pt']['captcha'][1]  = 'marque a PRIMEIRA caixa';
160
$STR['pt']['captcha'][1]  = 'marque a PRIMEIRA caixa';
131
$STR['pt']['captcha'][2]  = 'marque a caixa do MEIO';
161
$STR['pt']['captcha'][2]  = 'marque a caixa do MEIO';
132
$STR['pt']['captcha'][3]  = 'marque a ÚLTIMA caixa';
162
$STR['pt']['captcha'][3]  = 'marque a ÚLTIMA caixa';
133
$STR['pt']['captcha'][4]  = 'marque a PRIMEIRA e ÚLTIMA caixas';
163
$STR['pt']['captcha'][4]  = 'marque a PRIMEIRA e ÚLTIMA caixas';
134
$STR['pt']['captcha'][5]  = 'marque as DUAS ÚLTIMAS caixas';
164
$STR['pt']['captcha'][5]  = 'marque as DUAS ÚLTIMAS caixas';
135
 
165
 
136
// *****************************************************************
166
// *****************************************************************
137
 
167
 
138
 
168
 
139
function data_dluga($timestamp) {
169
function data_dluga($timestamp) {
140
  global $DATE_FORMAT;
170
  global $DATE_FORMAT;
141
  return(date($DATE_FORMAT, $timestamp));
171
  return(date($DATE_FORMAT, $timestamp));
142
}
172
}
143
 
173
 
144
 
174
 
145
function selfurl($params = '') {
175
function selfurl($params = '') {
146
  global $SELFURL;
176
  global $SELFURL;
147
  $r = $SELFURL;
177
  $r = $SELFURL;
148
  if (!empty($params)) {
178
  if (!empty($params)) {
149
    if (strrchr($SELFURL, '?')) {
179
    if (strrchr($SELFURL, '?')) {
150
      $r .= '&';
180
      $r .= '&';
151
    } else {
181
    } else {
152
      $r .= '?';
182
      $r .= '?';
153
    }
183
    }
154
    $r .= $params;
184
    $r .= $params;
155
  }
185
  }
156
  return($r);
186
  return($r);
157
}
187
}
158
 
188
 
159
 
189
 
160
// returns an array with the list of languages requested by the browser, in
190
// returns an array with the list of languages requested by the browser, in
161
// the order of preference
191
// the order of preference
162
function getpreflang() {
192
function getpreflang() {
163
  $res = array();
193
  $res = array();
164
  if (! isset($_SERVER['HTTP_ACCEPT_LANGUAGE'])) return($res);
194
  if (! isset($_SERVER['HTTP_ACCEPT_LANGUAGE'])) return($res);
165
  $langlist = explode(',', $_SERVER['HTTP_ACCEPT_LANGUAGE']);
195
  $langlist = explode(',', $_SERVER['HTTP_ACCEPT_LANGUAGE']);
166
  foreach ($langlist as $lang) {
196
  foreach ($langlist as $lang) {
167
    $res[] = strtolower(substr($lang, 0, 2));
197
    $res[] = strtolower(substr($lang, 0, 2));
168
  }
198
  }
169
  return(array_unique($res));
199
  return(array_unique($res));
170
}
200
}
171
 
201
 
172
 
202
 
173
function mateuszbb_rss() {
203
function mateuszbb_rss() {
174
  global $DATADIR;
204
  global $DATADIR;
175
  global $RSS_TITLE;
205
  global $RSS_TITLE;
176
  global $NICE_URLS;
206
  global $NICE_URLS;
177
 
207
 
178
  $db = new SQLite3($DATADIR . 'mateuszbb.sqlite3', SQLITE3_OPEN_READONLY);
208
  $db = new SQLite3($DATADIR . 'mateuszbb.sqlite3', SQLITE3_OPEN_READONLY);
179
  if (! $db) {
209
  if (! $db) {
180
    echo "SQL ERROR: ACCESS DENIED\n";
210
    echo "SQL ERROR: ACCESS DENIED\n";
181
    return false;
211
    return false;
182
  }
212
  }
183
  $sqlres = $db->query('SELECT thread, msgid, author FROM rss ORDER BY msgid DESC, thread DESC LIMIT 100;');
213
  $sqlres = $db->query('SELECT thread, msgid, author FROM rss ORDER BY msgid DESC, thread DESC LIMIT 100;');
184
  if (! $sqlres) {
214
  if (! $sqlres) {
185
    echo "SQL ERROR: QUERY FAILED\n";
215
    echo "SQL ERROR: QUERY FAILED\n";
186
    return false;
216
    return false;
187
  }
217
  }
188
 
218
 
189
  header('content-type: application/rss+xml');
219
  header('content-type: application/rss+xml');
190
 
220
 
191
  echo '<?xml version="1.0" encoding="utf-8" ?>' . "\n";
221
  echo '<?xml version="1.0" encoding="utf-8" ?>' . "\n";
192
  echo '<rss version="2.0">' . "\n";
222
  echo '<rss version="2.0">' . "\n";
193
  echo "<channel>\n";
223
  echo "<channel>\n";
194
  echo "<title>" . htmlspecialchars($RSS_TITLE, ENT_XML1) . "</title>\n";
224
  echo "<title>" . htmlspecialchars($RSS_TITLE, ENT_XML1) . "</title>\n";
195
  echo "<link>" . selfurl(). "</link>\n";
225
  echo "<link>" . selfurl(). "</link>\n";
196
  echo "<description>" . htmlspecialchars($RSS_TITLE, ENT_XML1) . "</description>\n";
226
  echo "<description>" . htmlspecialchars($RSS_TITLE, ENT_XML1) . "</description>\n";
197
 
227
 
198
  while ($row = $sqlres->fetchArray()) {
228
  while ($row = $sqlres->fetchArray()) {
199
    $rawtitle = file_get_contents($DATADIR . 'threads/' . $row['thread'] . '/title.txt');
229
    $rawtitle = file_get_contents($DATADIR . 'threads/' . $row['thread'] . '/title.txt');
200
    if (empty($rawtitle)) continue;
230
    if (empty($rawtitle)) continue;
201
    $title = htmlspecialchars($rawtitle, ENT_XML1, 'UTF-8');
231
    $title = htmlspecialchars($rawtitle, ENT_XML1, 'UTF-8');
202
    $author = htmlspecialchars($row['author'], ENT_XML1, 'UTF-8');
232
    $author = htmlspecialchars($row['author'], ENT_XML1, 'UTF-8');
203
    if ($NICE_URLS) {
233
    if ($NICE_URLS) {
204
      $link = selfurl();
234
      $link = selfurl();
205
      if (substr($link, -1) !== '/') $link .= '/';
235
      if (substr($link, -1) !== '/') $link .= '/';
206
      $link .= "{$row['thread']}";
236
      $link .= "{$row['thread']}";
207
    } else {
237
    } else {
208
      $link = selfurl('thread=' . $row['thread']);
238
      $link = selfurl('thread=' . $row['thread']);
209
    }
239
    }
210
    $link .= '#' . $row['msgid'];
240
    $link .= '#' . $row['msgid'];
211
    echo "<item>\n";
241
    echo "<item>\n";
212
    echo "<title>{$author} @ '{$title}'</title>\n";
242
    echo "<title>{$author} @ '{$title}'</title>\n";
213
    echo "<link>" . htmlspecialchars($link, ENT_XML1) . "</link>\n";
243
    echo "<link>" . htmlspecialchars($link, ENT_XML1) . "</link>\n";
214
    echo "<description>{$author} @ '{$title}'</description>\n";
244
    echo "<description>{$author} @ '{$title}'</description>\n";
215
    echo "<pubDate>" . date('r', $row['msgid']) . "</pubDate>\n";
245
    echo "<pubDate>" . date('r', $row['msgid']) . "</pubDate>\n";
216
    echo "<guid>" . htmlspecialchars($link, ENT_XML1) . "</guid>\n";
246
    echo "<guid>" . htmlspecialchars($link, ENT_XML1) . "</guid>\n";
217
    echo "</item>\n";
247
    echo "</item>\n";
218
  }
248
  }
219
  $db->close();
249
  $db->close();
220
 
250
 
221
  echo "</channel>\n";
251
  echo "</channel>\n";
222
  echo "</rss>\n";
252
  echo "</rss>\n";
223
  return true;
253
  return true;
224
}
254
}
225
 
255
 
226
 
256
 
227
function formularz($thread = 0, $postid = 0, $msg = '') {
257
function formularz($thread = 0, $postid = 0, $msg = '') {
228
  global $STR;
258
  global $STR;
229
  global $LANG;
259
  global $LANG;
230
  global $NICE_URLS;
260
  global $NICE_URLS;
231
 
261
 
232
  if ($thread == 0) {
262
  if ($thread == 0) {
233
    echo '<form class="minibb" method="POST" action="' . selfurl() . '#title" id="formularz">' . "\n";
263
    echo '<form class="minibb" method="POST" action="' . selfurl() . '#title" id="formularz">' . "\n";
234
    echo '<input type="hidden" name="action" value="createthread">' . "\n";
264
    echo '<input type="hidden" name="action" value="createthread">' . "\n";
235
  } else {
265
  } else {
236
    echo '<form class="minibb" method="POST" action="' . selfurl() . '" id="formularz">' . "\n";
266
    echo '<form class="minibb" method="POST" action="' . selfurl() . '" id="formularz">' . "\n";
237
    echo '<input type="hidden" name="thread" value="' . $thread . '">' . "\n";
267
    echo '<input type="hidden" name="thread" value="' . $thread . '">' . "\n";
238
    if ($postid > 0) {
268
    if ($postid > 0) {
239
      echo '<input type="hidden" name="action" value="editpost">' . "\n";
269
      echo '<input type="hidden" name="action" value="editpost">' . "\n";
240
      echo '<input type="hidden" name="postid" value="' . $postid . '">' . "\n";
270
      echo '<input type="hidden" name="postid" value="' . $postid . '">' . "\n";
241
    } else {
271
    } else {
242
      echo '<input type="hidden" name="action" value="newpost">' . "\n";
272
      echo '<input type="hidden" name="action" value="newpost">' . "\n";
243
    }
273
    }
244
  }
274
  }
245
 
275
 
246
  echo '<div class="minibb-formfields">' . "\n";
276
  echo '<div class="minibb-formfields">' . "\n";
247
  echo '<div class="minibb-formlabelgroup"><p>' . $STR[$LANG]['nameornick'] . '</p><input type="text" name="username" pattern=".*[^\s].*" minlength="1" maxlength="40" autofill="username" title="' . $STR[$LANG]['nameornick'];
277
  echo '<div class="minibb-formlabelgroup"><p>' . $STR[$LANG]['nameornick'] . '</p><input type="text" name="username" pattern=".*[^\s].*" minlength="1" maxlength="40" autofill="username" title="' . $STR[$LANG]['nameornick'];
248
  if (!empty($msg)) echo '" value="' . htmlspecialchars($msg['author']) . '"';
278
  if (!empty($msg)) echo '" value="' . htmlspecialchars($msg['author']) . '"';
249
  echo '" required></div><div class="minibb-formlabelgroup"><p>' . $STR[$LANG]['password'] . ' (<span title="' . $STR[$LANG]['passhelp'] . '" style="text-decoration-line: underline; text-decoration-style: dotted;">' . $STR[$LANG]['optional'] . '</span>)</p><input type="password" name="password" maxlength="40" autofill="current-password"></div>' . "\n";
279
  echo '" required></div><div class="minibb-formlabelgroup"><p>' . $STR[$LANG]['password'] . ' (<span title="' . $STR[$LANG]['passhelp'] . '" style="text-decoration-line: underline; text-decoration-style: dotted;">' . $STR[$LANG]['optional'] . '</span>)</p><input type="password" name="password" maxlength="40" autofill="current-password"></div>' . "\n";
250
  if ($thread == 0) {
280
  if ($thread == 0) {
251
    echo '<div class="minibb-formlabelgroup" style="width: 100%;">' . "\n";
281
    echo '<div class="minibb-formlabelgroup" style="width: 100%;">' . "\n";
252
    echo "<p>" . $STR[$LANG]['threadsubj'] . "</p>\n";
282
    echo "<p>" . $STR[$LANG]['threadsubj'] . "</p>\n";
253
    echo '<input type="text" name="title" title="' . $STR[$LANG]['threadsubj'] . '" maxlength="64" pattern=".*[^\s].*" required>' . "\n";
283
    echo '<input type="text" name="title" title="' . $STR[$LANG]['threadsubj'] . '" maxlength="64" pattern=".*[^\s].*" required>' . "\n";
254
    echo "</div>\n";
284
    echo "</div>\n";
255
  }
285
  }
256
  echo '<textarea name="msg" placeholder="' . $STR[$LANG]['yourmsg'] . '">' . "\n";
286
  echo '<textarea name="msg" placeholder="' . $STR[$LANG]['yourmsg'] . '">' . "\n";
257
  if (!empty($msg)) echo htmlspecialchars($msg['msg']);
287
  if (!empty($msg)) echo htmlspecialchars($msg['msg']);
258
  echo "</textarea><br>\n";
288
  echo "</textarea><br>\n";
259
  echo "</div>\n";
289
  echo "</div>\n";
260
  // --- CAPTCHA ---
290
  // --- CAPTCHA ---
261
  $capid = rand(1, 5);
291
  $capid = rand(1, 5);
262
  echo '<div class="minibb-formcaptcha">' . $STR[$LANG]['captcha'][$capid] . ': <span class="minibb-cboxgroup"><input type="checkbox" name=c1><input type="checkbox" name=c2><input type="checkbox" name=c3></span>' . "\n";
292
  echo '<div class="minibb-formcaptcha">' . $STR[$LANG]['captcha'][$capid] . ': <span class="minibb-cboxgroup"><input type="checkbox" name=c1><input type="checkbox" name=c2><input type="checkbox" name=c3></span>' . "\n";
263
  echo '<input type="hidden" name="capid" value="' . $capid . '">';
293
  echo '<input type="hidden" name="capid" value="' . $capid . '">';
264
  // ---------------
294
  // ---------------
265
  echo '<div class="minibb-formbtns">' . "\n";
295
  echo '<div class="minibb-formbtns">' . "\n";
266
  $link = selfurl();
296
  $link = selfurl();
267
  if ($postid > 0) {
297
  if ($postid > 0) {
268
    $link = selfurl("thread=" . $thread);
298
    $link = selfurl("thread=" . $thread);
269
    if ($NICE_URLS) $link = $thread;
299
    if ($NICE_URLS) $link = $thread;
270
    $link .= '#' . $postid;
300
    $link .= '#' . $postid;
271
  }
301
  }
272
  echo '<a href="' . $link . '">' . $STR[$LANG]['cancel'] . '</a> <input type="submit" value="' . $STR[$LANG]['send'] . '">' . "\n";
302
  echo '<a href="' . $link . '">' . $STR[$LANG]['cancel'] . '</a> <input type="submit" value="' . $STR[$LANG]['send'] . '">' . "\n";
273
  echo "</div>\n";
303
  echo "</div>\n";
274
  echo "</div>\n";
304
  echo "</div>\n";
275
  echo '</form>';
305
  echo '</form>';
276
}
306
}
277
 
307
 
278
function wyswietl_watek_w_liscie($threadid, $tytul, $lastauthor, $lastupdate) {
308
function wyswietl_watek_w_liscie($threadid, $tytul, $lastauthor, $lastupdate) {
279
  global $NICE_URLS;
309
  global $NICE_URLS;
280
  global $STR;
310
  global $STR;
281
  global $LANG;
311
  global $LANG;
282
 
312
 
283
  echo '<a href="';
313
  echo '<a href="';
284
  if (!$NICE_URLS) {
314
  if (!$NICE_URLS) {
285
    echo selfurl("thread=$threadid");
315
    echo selfurl("thread=$threadid");
286
  } else {
316
  } else {
287
    echo $threadid;
317
    echo $threadid;
288
  }
318
  }
289
  echo '" class="minibb-threaditem">' . "\n";
319
  echo '" class="minibb-threaditem">' . "\n";
290
  echo '<h2>' . htmlspecialchars($tytul) . "</h2>\n";
320
  echo '<h2>' . htmlspecialchars($tytul) . "</h2>\n";
291
  echo '<p>' . $STR[$LANG]['latestentry'] . ' ' . htmlspecialchars($lastauthor) . ', ' . htmlspecialchars(data_dluga($lastupdate)) . "</p>\n";
321
  echo '<p>' . $STR[$LANG]['latestentry'] . ' ' . htmlspecialchars($lastauthor) . ', ' . htmlspecialchars(data_dluga($lastupdate)) . "</p>\n";
292
  echo "</a>\n";
322
  echo "</a>\n";
293
}
323
}
294
 
324
 
295
function sprawdz_captcha($CAPARR) {
325
function sprawdz_captcha($CAPARR) {
296
  //echo "<!-- capid={$CAPARR['capid']} c1={$CAPARR['c1']} c2={$CAPARR['c2']} c3={$CAPARR['c3']}-->\n";
326
  //echo "<!-- capid={$CAPARR['capid']} c1={$CAPARR['c1']} c2={$CAPARR['c2']} c3={$CAPARR['c3']}-->\n";
297
  switch ($CAPARR['capid']) {
327
  switch ($CAPARR['capid']) {
298
    case 1:
328
    case 1:
299
      if (($CAPARR['c1']) && (!$CAPARR['c2']) && (!$CAPARR['c3'])) return(true);
329
      if (($CAPARR['c1']) && (!$CAPARR['c2']) && (!$CAPARR['c3'])) return(true);
300
      break;
330
      break;
301
    case 2:
331
    case 2:
302
      if ((!$CAPARR['c1']) && ($CAPARR['c2']) && (!$CAPARR['c3'])) return(true);
332
      if ((!$CAPARR['c1']) && ($CAPARR['c2']) && (!$CAPARR['c3'])) return(true);
303
      break;
333
      break;
304
    case 3:
334
    case 3:
305
      if ((!$CAPARR['c1']) && (!$CAPARR['c2']) && ($CAPARR['c3'])) return(true);
335
      if ((!$CAPARR['c1']) && (!$CAPARR['c2']) && ($CAPARR['c3'])) return(true);
306
      break;
336
      break;
307
    case 4:
337
    case 4:
308
      if (($CAPARR['c1']) && (!$CAPARR['c2']) && ($CAPARR['c3'])) return(true);
338
      if (($CAPARR['c1']) && (!$CAPARR['c2']) && ($CAPARR['c3'])) return(true);
309
      break;
339
      break;
310
    case 5:
340
    case 5:
311
      if ((!$CAPARR['c1']) && ($CAPARR['c2']) && ($CAPARR['c3'])) return(true);
341
      if ((!$CAPARR['c1']) && ($CAPARR['c2']) && ($CAPARR['c3'])) return(true);
312
      break;
342
      break;
313
  }
343
  }
314
  return(false);
344
  return(false);
315
}
345
}
316
 
346
 
317
 
347
 
318
// zwraca akcję na podstawie globalnych POST lub GET
348
// zwraca akcję na podstawie globalnych POST lub GET
319
function getvar_action() {
349
function getvar_action() {
320
  if (!empty($_POST['action'])) return $_POST['action'];
350
  if (!empty($_POST['action'])) return $_POST['action'];
321
  if (!empty($_GET['action'])) return $_GET['action'];
351
  if (!empty($_GET['action'])) return $_GET['action'];
322
  return('');
352
  return('');
323
}
353
}
324
 
354
 
325
function getvar_thread() {
355
function getvar_thread() {
326
  if (!empty($_POST['thread'])) return intval($_POST['thread']);
356
  if (!empty($_POST['thread'])) return intval($_POST['thread']);
327
  if (!empty($_GET['thread'])) return intval($_GET['thread']);
357
  if (!empty($_GET['thread'])) return intval($_GET['thread']);
328
  return(-1);
358
  return(-1);
329
}
359
}
330
 
360
 
331
function getvar_archiveyear() {
361
function getvar_archiveyear() {
332
  if (!empty($_POST['arch'])) return intval($_POST['arch']);
362
  if (!empty($_POST['arch'])) return intval($_POST['arch']);
333
  if (!empty($_GET['arch'])) return intval($_GET['arch']);
363
  if (!empty($_GET['arch'])) return intval($_GET['arch']);
334
  return(-1);
364
  return(-1);
335
}
365
}
336
 
366
 
337
 
367
 
338
// funkcja która zapisuje nowe wiadomości
368
// funkcja która zapisuje nowe wiadomości
339
function mateuszbb_preprocess() {
369
function mateuszbb_preprocess() {
340
global $TRIP_SALT;
370
global $TRIP_SALT;
341
global $DATADIR;
371
global $DATADIR;
342
global $NICE_URLS;
372
global $NICE_URLS;
343
global $ERRSTR; // zmienna zawierająca komunikat błędu (jeśli jakiś wystąpił)
373
global $ERRSTR; // zmienna zawierająca komunikat błędu (jeśli jakiś wystąpił)
344
global $STR;
374
global $STR;
345
global $LANG;
375
global $LANG;
346
global $MAXDAILYPOSTS;
376
global $MAXDAILYPOSTS;
347
global $EDIT_ALLOWED_MINUTES;
377
global $EDIT_ALLOWED_MINUTES;
348
 
378
 
349
$action = getvar_action();
379
$action = getvar_action();
350
$thread = getvar_thread();
380
$thread = getvar_thread();
351
$archiveyear = getvar_archiveyear();
381
$archiveyear = getvar_archiveyear();
352
 
382
 
353
// negotiate language, unless forced by configuration
383
// negotiate language, unless forced by configuration
354
if (empty($LANG)) {
384
if (empty($LANG)) {
355
  $LANG = 'en'; // preselect english as default language
385
  $LANG = 'en'; // preselect english as default language
356
  foreach (getpreflang() as $l) {
386
  foreach (getpreflang() as $l) {
357
    if (!empty($STR[$l])) {
387
    if (!empty($STR[$l])) {
358
      $LANG = $l;
388
      $LANG = $l;
359
      break;
389
      break;
360
    }
390
    }
361
  }
391
  }
362
} else { // if language forced by configuration then make sure it is supported
392
} else { // if language forced by configuration then make sure it is supported
363
  if (empty($STR[$LANG])) $LANG = 'en'; // fall back to 'en' on error
393
  if (empty($STR[$LANG])) $LANG = 'en'; // fall back to 'en' on error
364
}
394
}
365
 
395
 
366
// write access: check how many messages the user posted during last 24h
396
// write access: check how many messages the user posted during last 24h
367
if (($action === 'createthread') || ($action === 'newpost')) {
397
if (($action === 'createthread') || ($action === 'newpost')) {
368
  $db = new SQLite3($DATADIR . 'mateuszbb.sqlite3');
398
  $db = new SQLite3($DATADIR . 'mateuszbb.sqlite3');
369
  if ($db) {
399
  if ($db) {
370
    $db->exec('DELETE FROM ip_msg_counters24h WHERE msgid < strftime(\'%s\', \'now\') - 24*3600;');
400
    $db->exec('DELETE FROM ip_msg_counters24h WHERE msgid < strftime(\'%s\', \'now\') - 24*3600;');
371
    $count24h = intval($db->querySingle("SELECT count(*) FROM ip_msg_counters24h WHERE ipaddr = '{$_SERVER['REMOTE_ADDR']}'"));
401
    $count24h = intval($db->querySingle("SELECT count(*) FROM ip_msg_counters24h WHERE ipaddr = '{$_SERVER['REMOTE_ADDR']}'"));
372
    $db->close();
402
    $db->close();
373
    if ($count24h >= $MAXDAILYPOSTS) {
403
    if ($count24h >= $MAXDAILYPOSTS) {
374
      $ERRSTR = "BŁĄD: Z TWOJEGO ADRESU NAPISANO JUŻ {$count24h} WIADOMOŚCI W PRZECIĄGU OSTATNICH 24H. SPRÓBUJ PONOWNIE ZA JAKIŚ CZAS.";
404
      $ERRSTR = "BŁĄD: Z TWOJEGO ADRESU NAPISANO JUŻ {$count24h} WIADOMOŚCI W PRZECIĄGU OSTATNICH 24H. SPRÓBUJ PONOWNIE ZA JAKIŚ CZAS.";
375
      $action = '';
405
      $action = '';
376
    }
406
    }
377
  }
407
  }
378
}
408
}
379
 
409
 
380
// edit post becomes newpost, it was different just to avoid 24h counters
410
// edit post becomes newpost, it was different just to avoid 24h counters
381
if ($action === 'editpost') $action = 'newpost';
411
if ($action === 'editpost') $action = 'newpost';
382
 
412
 
383
// new thread creation (+switch to read thread)
413
// new thread creation (+switch to read thread)
384
if ($action === 'createthread') {
414
if ($action === 'createthread') {
385
  // captcha check
415
  // captcha check
386
  if (!sprawdz_captcha($_POST)) {
416
  if (!sprawdz_captcha($_POST)) {
387
    echo "<p>BŁĄD: NIEPRAWIDŁOWE CAPTCHA</p>\n";
417
    echo "<p>BŁĄD: NIEPRAWIDŁOWE CAPTCHA</p>\n";
388
    goto DONE;
418
    goto DONE;
389
  }
419
  }
390
  //
420
  //
391
  $thread = time();
421
  $thread = time();
392
  if (empty($_POST['username']) || (empty($_POST['msg'])) || (empty($_POST['title']))) {
422
  if (empty($_POST['username']) || (empty($_POST['msg'])) || (empty($_POST['title']))) {
393
    echo '<p>BŁĄD: pusty nick, wiadomość lub tytuł</p>' . "\n";
423
    echo '<p>BŁĄD: pusty nick, wiadomość lub tytuł</p>' . "\n";
394
    goto DONE;
424
    goto DONE;
395
  }
425
  }
396
  if (!mkdir($DATADIR . 'threads/' . $thread, 0755, true)) {
426
  if (!mkdir($DATADIR . 'threads/' . $thread, 0755, true)) {
397
    echo '<p>BŁĄD: nie zdołano utworzyć wątku nr ' . $thread . "</p>\n";
427
    echo '<p>BŁĄD: nie zdołano utworzyć wątku nr ' . $thread . "</p>\n";
398
    goto DONE;
428
    goto DONE;
399
  }
429
  }
400
  // zapisz tytuł
430
  // zapisz tytuł
401
  file_put_contents($DATADIR . 'threads/' . $thread . '/title.txt', trim($_POST['title']));
431
  file_put_contents($DATADIR . 'threads/' . $thread . '/title.txt', trim($_POST['title']));
402
  // ustaw co trzeba żeby zapisać wiadomość
432
  // ustaw co trzeba żeby zapisać wiadomość
403
  $action = 'newpost';
433
  $action = 'newpost';
404
}
434
}
405
 
435
 
406
// nowy post do istniejącego wątku
436
// nowy post do istniejącego wątku
407
if (($action === 'newpost') && ($thread >= 0) && (!empty($_POST['msg'])) && (!empty($_POST['username']))) {
437
if (($action === 'newpost') && ($thread >= 0) && (!empty($_POST['msg'])) && (!empty($_POST['username']))) {
408
  // is it really about a NEW post or about EDITING an existing one?
438
  // is it really about a NEW post or about EDITING an existing one?
409
  if (empty($_POST['postid'])) {
439
  if (empty($_POST['postid'])) {
410
    $postid = time();
440
    $postid = time();
411
  } else { // editing an existing post
441
  } else { // editing an existing post
412
    $msg = loadmsg($_POST['thread'], $_POST['postid']);
442
    $msg = loadmsg($_POST['thread'], $_POST['postid']);
413
    if (!is_art_edition_allowed($_POST['postid'], $msg)) {
443
    if (!is_art_edition_allowed($_POST['postid'], $msg)) {
414
      $action = '';
444
      $action = '';
415
      $ERRSTR = "NOT ALLOWED";
445
      $ERRSTR = "NOT ALLOWED";
416
      goto DONE;
446
      goto DONE;
417
    }
447
    }
418
    $postid = $_POST['postid'];
448
    $postid = $_POST['postid'];
419
  }
449
  }
420
 
450
 
421
  if (!sprawdz_captcha($_POST)) {
451
  if (!sprawdz_captcha($_POST)) {
422
    $ERRSTR = "BŁĄD: NIEPRAWIDŁOWE CAPTCHA";
452
    $ERRSTR = "BŁĄD: NIEPRAWIDŁOWE CAPTCHA";
423
    goto DONE;
453
    goto DONE;
424
  }
454
  }
425
  // nadpisz lastauthor i lastupdate
455
  // nadpisz lastauthor i lastupdate
426
  $lastupdate = array('lastupdate' => $postid, 'lastauthor' => trim($_POST['username']));
456
  $lastupdate = array('lastupdate' => $postid, 'lastauthor' => trim($_POST['username']));
427
  file_put_contents($DATADIR . 'threads/' . $thread . '/lastupdate', serialize($lastupdate));
457
  file_put_contents($DATADIR . 'threads/' . $thread . '/lastupdate', serialize($lastupdate));
428
  // oblicz tripkod, jeśli hasło zostało ustawione
458
  // oblicz tripkod, jeśli hasło zostało ustawione
429
  $tripsig = '';
459
  $tripsig = '';
430
  if (!empty(trim($_POST['password']))) {
460
  if (!empty(trim($_POST['password']))) {
431
    $tripsig = hash('whirlpool', trim($_POST['username']) . '#' . trim($_POST['password']) . $TRIP_SALT);
461
    $tripsig = hash('whirlpool', trim($_POST['username']) . '#' . trim($_POST['password']) . $TRIP_SALT);
432
  }
462
  }
433
  // wygeneruj klucz do edycji postu i prześlij go przeglądarce przez ciasteczko (chyba że przeglądarka już ma klucz)
463
  // wygeneruj klucz do edycji postu i prześlij go przeglądarce przez ciasteczko (chyba że przeglądarka już ma klucz)
434
  if (!empty($EDIT_ALLOWED_MINUTES)) {
464
  if (!empty($EDIT_ALLOWED_MINUTES)) {
435
    if (!empty($_COOKIE['mateuszbbkey'])) {
465
    if (!empty($_COOKIE['mateuszbbkey'])) {
436
      $artkey = $_COOKIE['mateuszbbkey'];
466
      $artkey = $_COOKIE['mateuszbbkey'];
437
    } else {
467
    } else {
438
      $artkey = bin2hex(random_bytes(128));
468
      $artkey = bin2hex(random_bytes(128));
439
      setcookie('mateuszbbkey', $artkey, array('secure' => true, 'httponly' => true, 'samesite' => 'Lax'));
469
      setcookie('mateuszbbkey', $artkey, array('secure' => true, 'httponly' => true, 'samesite' => 'Lax'));
440
    }
470
    }
441
  }
471
  }
442
  // zapisz wiadomość
472
  // zapisz wiadomość
443
  $msg = array('author' => trim($_POST['username']), 'ip' => $_SERVER['REMOTE_ADDR'], 'trip' => $tripsig, 'msg' => trim($_POST['msg']), 'key' => password_hash($artkey, PASSWORD_DEFAULT));
473
  $msg = array('author' => trim($_POST['username']), 'ip' => $_SERVER['REMOTE_ADDR'], 'trip' => $tripsig, 'msg' => trim($_POST['msg']), 'key' => password_hash($artkey, PASSWORD_DEFAULT));
444
  file_put_contents($DATADIR . 'threads/' . $thread . '/' . $postid, serialize($msg));
474
  file_put_contents($DATADIR . 'threads/' . $thread . '/' . $postid, serialize($msg));
445
  // zaktualizuj metadane dot. ostatniego wpisu, ostatniego autora i ilości wpisów dla tego IP w ciągu ostatniej godziny, ale tylko dla nowych wpisów (nie dla edycji)
475
  // zaktualizuj metadane dot. ostatniego wpisu, ostatniego autora i ilości wpisów dla tego IP w ciągu ostatniej godziny, ale tylko dla nowych wpisów (nie dla edycji)
446
  if (empty($_POST['postid'])) {
476
  if (empty($_POST['postid'])) {
447
    $db = new SQLite3($DATADIR . 'mateuszbb.sqlite3');
477
    $db = new SQLite3($DATADIR . 'mateuszbb.sqlite3');
448
    if ($db) {
478
    if ($db) {
449
      $db->exec('CREATE TABLE IF NOT EXISTS newest (thread INTEGER PRIMARY KEY, lastupdate INTEGER NOT NULL, lastauthor TEXT NOT NULL);');
479
      $db->exec('CREATE TABLE IF NOT EXISTS newest (thread INTEGER PRIMARY KEY, lastupdate INTEGER NOT NULL, lastauthor TEXT NOT NULL);');
450
      $db->exec('CREATE INDEX IF NOT EXISTS lastupdated ON newest (lastupdate);');
480
      $db->exec('CREATE INDEX IF NOT EXISTS lastupdated ON newest (lastupdate);');
451
      $db->exec('CREATE TABLE IF NOT EXISTS ip_msg_counters24h (threadid INTEGER NOT NULL, msgid INTEGER NOT NULL, ipaddr TEXT NOT NULL);');
481
      $db->exec('CREATE TABLE IF NOT EXISTS ip_msg_counters24h (threadid INTEGER NOT NULL, msgid INTEGER NOT NULL, ipaddr TEXT NOT NULL);');
452
      $db->exec('CREATE TABLE IF NOT EXISTS rss (thread INTEGER NOT NULL, msgid INTEGER NOT NULL, author TEXT NOT NULL);');
482
      $db->exec('CREATE TABLE IF NOT EXISTS rss (thread INTEGER NOT NULL, msgid INTEGER NOT NULL, author TEXT NOT NULL);');
453
      $db->exec('CREATE INDEX IF NOT EXISTS rss_msgid ON rss (msgid);');
483
      $db->exec('CREATE INDEX IF NOT EXISTS rss_msgid ON rss (msgid);');
454
      $login_escaped = $db->escapeString(trim($_POST['username']));
484
      $login_escaped = $db->escapeString(trim($_POST['username']));
455
      $db->exec("INSERT OR REPLACE INTO newest (thread, lastupdate, lastauthor) VALUES ({$thread}, {$postid}, '{$login_escaped}');");
485
      $db->exec("INSERT OR REPLACE INTO newest (thread, lastupdate, lastauthor) VALUES ({$thread}, {$postid}, '{$login_escaped}');");
456
      $db->exec("INSERT INTO rss (thread, msgid, author) VALUES ({$thread}, {$postid}, '{$login_escaped}');");
486
      $db->exec("INSERT INTO rss (thread, msgid, author) VALUES ({$thread}, {$postid}, '{$login_escaped}');");
457
      $db->exec("INSERT INTO ip_msg_counters24h (threadid, msgid, ipaddr) VALUES ({$thread}, {$postid}, '{$_SERVER['REMOTE_ADDR']}');");
487
      $db->exec("INSERT INTO ip_msg_counters24h (threadid, msgid, ipaddr) VALUES ({$thread}, {$postid}, '{$_SERVER['REMOTE_ADDR']}');");
458
      $db->close();
488
      $db->close();
459
    } else {
489
    } else {
460
      echo "SQL ERROR WHILE WRITING STATS\n";
490
      echo "SQL ERROR WHILE WRITING STATS\n";
461
    }
491
    }
462
  }
492
  }
463
  // przekieruj
493
  // przekieruj
464
  if ($NICE_URLS) {
494
  if ($NICE_URLS) {
465
    $newurl = "{$thread}#{$postid}";
495
    $newurl = "{$thread}#{$postid}";
466
  } else {
496
  } else {
467
    $newurl = selfurl("thread={$thread}") . "#{$postid}";
497
    $newurl = selfurl("thread={$thread}") . "#{$postid}";
468
  }
498
  }
469
  header("Location: {$newurl}");
499
  header("Location: {$newurl}");
470
  echo "<html><head></head><body><a href=\"{$newurl}\">KLIKNIJ TUTAJ</a></body></html>\n";
500
  echo "<html><head></head><body><a href=\"{$newurl}\">KLIKNIJ TUTAJ</a></body></html>\n";
471
  exit();
501
  exit();
472
}
502
}
473
 
503
 
474
DONE:
504
DONE:
475
 
505
 
476
}
506
}
477
 
507
 
478
 
508
 
479
function mateuszbb_tytulwatku($id) {
509
function mateuszbb_tytulwatku($id) {
480
  global $DATADIR;
510
  global $DATADIR;
481
  return file_get_contents($DATADIR . 'threads/' . $id . '/title.txt');
511
  return file_get_contents($DATADIR . 'threads/' . $id . '/title.txt');
482
}
512
}
483
 
513
 
484
 
514
 
485
// returns an array of last n threads with most recent activity that had activity
515
// returns an array of last n threads with most recent activity that had activity
486
// in last maxinact days. returns false on error or empty set.
516
// in last maxinact days. returns false on error or empty set.
487
// the returned result, when not false, is an array of arrays, where each
517
// the returned result, when not false, is an array of arrays, where each
488
// leaf array represents one thread
518
// leaf array represents one thread
489
function mateuszbb_getactivethreads($n, $maxinact = -1) {
519
function mateuszbb_getactivethreads($n, $maxinact = -1) {
490
  global $DATADIR;
520
  global $DATADIR;
491
  $result = array();
521
  $result = array();
492
 
522
 
493
  $db = new SQLite3($DATADIR . 'mateuszbb.sqlite3', SQLITE3_OPEN_READONLY);
523
  $db = new SQLite3($DATADIR . 'mateuszbb.sqlite3', SQLITE3_OPEN_READONLY);
494
  if (! $db) return(false);
524
  if (! $db) return(false);
495
 
525
 
496
  $minupdatedate = 0;
526
  $minupdatedate = 0;
497
  if ($maxinact >= 0) $minupdatedate = time() - (intval($maxinact) * 86400);
527
  if ($maxinact >= 0) $minupdatedate = time() - (intval($maxinact) * 86400);
498
 
528
 
499
  $sqlquery = 'SELECT thread, lastupdate, lastauthor FROM newest WHERE lastupdate > ' . $minupdatedate . ' ORDER BY lastupdate DESC LIMIT ' . intval($n) . ';';
529
  $sqlquery = 'SELECT thread, lastupdate, lastauthor FROM newest WHERE lastupdate > ' . $minupdatedate . ' ORDER BY lastupdate DESC LIMIT ' . intval($n) . ';';
500
 
530
 
501
  $sqlres = $db->query($sqlquery);
531
  $sqlres = $db->query($sqlquery);
502
  if (! $sqlres) {
532
  if (! $sqlres) {
503
    $db->close();
533
    $db->close();
504
    return(false);
534
    return(false);
505
  }
535
  }
506
 
536
 
507
  // kopiuj wpisy do nowej tablicy
537
  // kopiuj wpisy do nowej tablicy
508
  while ($row = $sqlres->fetchArray()) {
538
  while ($row = $sqlres->fetchArray()) {
509
    $result[] = $row;
539
    $result[] = $row;
510
  }
540
  }
511
 
541
 
512
  $db->close();
542
  $db->close();
513
  return($result);
543
  return($result);
514
}
544
}
515
 
545
 
516
 
546
 
517
// returns true if post can be edited by current user
547
// returns true if post can be edited by current user
518
function is_art_edition_allowed($timestamp, $msg) {
548
function is_art_edition_allowed($timestamp, $msg) {
519
  global $EDIT_ALLOWED_MINUTES;
549
  global $EDIT_ALLOWED_MINUTES;
520
  if ($EDIT_ALLOWED_MINUTES >= 0) {
550
  if ($EDIT_ALLOWED_MINUTES >= 0) {
521
    if (((time() - $timestamp) / 60) >= $EDIT_ALLOWED_MINUTES) return(false); // only posts from last x minutes can be edited
551
    if (((time() - $timestamp) / 60) >= $EDIT_ALLOWED_MINUTES) return(false); // only posts from last x minutes can be edited
522
  }
552
  }
523
  if (empty($_COOKIE['mateuszbbkey'])) return(false);
553
  if (empty($_COOKIE['mateuszbbkey'])) return(false);
524
  if (empty($msg['key'])) return(false);
554
  if (empty($msg['key'])) return(false);
525
  return(password_verify($_COOKIE['mateuszbbkey'], $msg['key']));
555
  return(password_verify($_COOKIE['mateuszbbkey'], $msg['key']));
526
}
556
}
527
 
557
 
528
 
558
 
529
function loadmsg($threadid, $postid) {
559
function loadmsg($threadid, $postid) {
530
  global $DATADIR;
560
  global $DATADIR;
531
  $fname = $DATADIR . 'threads/' . $threadid . '/' . $postid;
561
  $fname = $DATADIR . 'threads/' . $threadid . '/' . $postid;
532
  if (!file_exists($fname)) return(false);
562
  if (!file_exists($fname)) return(false);
533
  return(unserialize(file_get_contents($fname)));
563
  return(unserialize(file_get_contents($fname)));
534
}
564
}
535
 
565
 
536
 
566
 
537
// wyświetlanie UI itd
567
// wyświetlanie UI itd
538
function mateuszbb_start() {
568
function mateuszbb_start() {
539
global $TRIP_SALT;
569
global $TRIP_SALT;
540
global $ERRSTR;
570
global $ERRSTR;
541
global $DATADIR;
571
global $DATADIR;
542
global $INITYEAR;
572
global $INITYEAR;
543
global $LANG;
573
global $LANG;
544
global $STR;
574
global $STR;
545
global $NICE_URLS;
575
global $NICE_URLS;
546
global $SEARCH_API_URL;
576
global $SEARCH_API_URL;
547
global $TZ;
577
global $TZ;
548
global $LOCK_DELAY;
578
global $LOCK_DELAY;
549
global $MAINPAGE_MAXTHREADS;
579
global $MAINPAGE_MAXTHREADS;
550
global $MAINPAGE_MAXINACT;
580
global $MAINPAGE_MAXINACT;
551
 
581
 
552
// read global variables
582
// read global variables
553
$action = getvar_action();
583
$action = getvar_action();
554
$thread = getvar_thread();
584
$thread = getvar_thread();
555
$archiveyear = getvar_archiveyear();
585
$archiveyear = getvar_archiveyear();
556
 
586
 
557
// ustaw strefę czasową, jeśli jakaś jest skonfigurowana
587
// ustaw strefę czasową, jeśli jakaś jest skonfigurowana
558
if (!empty($TZ)) date_default_timezone_set($TZ);
588
if (!empty($TZ)) date_default_timezone_set($TZ);
559
 
589
 
560
// wyświetl błąd, jeśli jakiś wystąpił w mateuszbb_preprocess()
590
// wyświetl błąd, jeśli jakiś wystąpił w mateuszbb_preprocess()
561
if (!empty($ERRSTR)) {
591
if (!empty($ERRSTR)) {
562
  echo "<p class=\"minibb-errstr\">{$ERRSTR}</p>\n";
592
  echo "<p class=\"minibb-errstr\">{$ERRSTR}</p>\n";
563
  $action = '';
593
  $action = '';
564
  echo '<p><a href="./">Wróć do głównej strony</a></p>' . "\n";
594
  echo '<p><a href="./">Wróć do głównej strony</a></p>' . "\n";
565
  goto DONE;
595
  goto DONE;
566
}
596
}
567
 
597
 
568
// szukanie
598
// szukanie
569
if (isset($_POST['szukaj']) && (!empty(trim($_POST['szukaj'])))) {
599
if (isset($_POST['szukaj']) && (!empty(trim($_POST['szukaj'])))) {
570
  $q = trim($_POST['szukaj']);
600
  $q = trim($_POST['szukaj']);
571
  $query = $SEARCH_API_URL . urlencode($q);
601
  $query = $SEARCH_API_URL . urlencode($q);
572
  echo '<p>' . $STR[$LANG]['searchterm'] . ' ' . htmlentities($q) . '</p>';
602
  echo '<p>' . $STR[$LANG]['searchterm'] . ' ' . htmlentities($q) . '</p>';
573
  $results = file_get_contents($query);
603
  $results = file_get_contents($query);
574
  $resarr = json_decode($results, true)['items'];
604
  $resarr = json_decode($results, true)['items'];
575
 
605
 
576
  $licznik = 0;
606
  $licznik = 0;
577
  foreach ($resarr as $r) {
607
  foreach ($resarr as $r) {
578
    if (mb_substr($r['link'], -1) === '/') continue;
608
    if (mb_substr($r['link'], -1) === '/') continue;
579
    echo '<a href=' . $r['link'] . ' class="minibb-searchresult">';
609
    echo '<a href=' . $r['link'] . ' class="minibb-searchresult">';
580
    echo "<div><h1>{$r['title']}</h1><p>{$r['htmlSnippet']}</p></div></a>\n";
610
    echo "<div><h1>{$r['title']}</h1><p>{$r['htmlSnippet']}</p></div></a>\n";
581
    $licznik++;
611
    $licznik++;
582
  }
612
  }
583
 
613
 
584
  if ($licznik == 0) echo "<p>" . $STR[$LANG]['noresults'] . "</p>\n";
614
  if ($licznik == 0) echo "<p>" . $STR[$LANG]['noresults'] . "</p>\n";
585
 
615
 
586
  goto DONE;
616
  goto DONE;
587
}
617
}
588
 
618
 
589
// edit post
619
// edit post
590
if ($action === 'editpostform') {
620
if ($action === 'editpostform') {
591
  $msg = loadmsg($_POST['thread'], $_POST['post']);
621
  $msg = loadmsg($_POST['thread'], $_POST['post']);
592
  if (is_art_edition_allowed($_POST['post'], $msg)) {
622
  if (is_art_edition_allowed($_POST['post'], $msg)) {
593
    formularz(intval($_POST['thread']), intval($_POST['post']), $msg);
623
    formularz(intval($_POST['thread']), intval($_POST['post']), $msg);
594
  } else {
624
  } else {
595
    echo "<p>Link expired</p>\n";
625
    echo "<p>Link expired</p>\n";
596
  }
626
  }
597
  GOTO DONE;
627
  GOTO DONE;
598
}
628
}
599
 
629
 
600
// new thread form
630
// new thread form
601
if ($action === 'newthread') {
631
if ($action === 'newthread') {
602
  echo '<h2 class="minibb-threadtitle">' . $STR[$LANG]['newthread'] . '</h2>' . "\n";
632
  echo '<h2 class="minibb-threadtitle">' . $STR[$LANG]['newthread'] . '</h2>' . "\n";
603
  formularz();
633
  formularz();
604
  goto DONE;
634
  goto DONE;
605
}
635
}
606
 
636
 
607
// zobacz listę wątków (main page)
637
// zobacz listę wątków (main page)
608
if ((empty($action)) && ($thread < 0) && ($archiveyear <= 0)) {
638
if ((empty($action)) && ($thread < 0) && ($archiveyear <= 0)) {
609
  // display the main page header if any is defined
639
  // display the main page header if any is defined
610
  if (file_exists($DATADIR . 'mateuszbb-main-head.html')) {
640
  if (file_exists($DATADIR . 'mateuszbb-main-head.html')) {
611
    readfile($DATADIR . 'mateuszbb-main-head.html');
641
    readfile($DATADIR . 'mateuszbb-main-head.html');
612
  }
642
  }
613
  // list wątków
643
  // list wątków
614
  echo '<div class="minibb-toolbar" style="justify-content: space-between;">';
644
  echo '<div class="minibb-toolbar" style="justify-content: space-between;">';
615
  echo '<form action="' . selfurl() . '" method="POST"><input type="text" name="szukaj" placeholder="' . $STR[$LANG]['search'] . '"></form>';
645
  echo '<form action="' . selfurl() . '" method="POST"><input type="text" name="szukaj" placeholder="' . $STR[$LANG]['search'] . '"></form>';
616
  echo '<a href="' . selfurl('action=newthread') . '#formularz">' . $STR[$LANG]['opnewthread'] . '</a>';
646
  echo '<a href="' . selfurl('action=newthread') . '#formularz">' . $STR[$LANG]['opnewthread'] . '</a>';
617
  echo "</div>\n";
647
  echo "</div>\n";
618
 
648
 
619
  $lista_watkow = mateuszbb_getactivethreads($MAINPAGE_MAXTHREADS, $MAINPAGE_MAXINACT);
649
  $lista_watkow = mateuszbb_getactivethreads($MAINPAGE_MAXTHREADS, $MAINPAGE_MAXINACT);
620
  if ($lista_watkow === false) {
650
  if ($lista_watkow === false) {
621
    echo "<p>NO ENTRIES FOUND</p>";
651
    echo "<p>NO ENTRIES FOUND</p>";
622
  } else {
652
  } else {
623
    foreach ($lista_watkow as $row) {
653
    foreach ($lista_watkow as $row) {
624
      $title = mateuszbb_tytulwatku($row['thread']);
654
      $title = mateuszbb_tytulwatku($row['thread']);
625
      if (empty($title)) {
655
      if (empty($title)) {
626
        echo "<!-- BŁĄD: nie zdołano załadować wątku nr {$row['thread']} -->\n";
656
        echo "<!-- BŁĄD: nie zdołano załadować wątku nr {$row['thread']} -->\n";
627
        continue;
657
        continue;
628
      }
658
      }
629
      wyswietl_watek_w_liscie($row['thread'], $title, $row['lastauthor'], $row['lastupdate']);
659
      wyswietl_watek_w_liscie($row['thread'], $title, $row['lastauthor'], $row['lastupdate']);
630
    }
660
    }
631
  }
661
  }
632
 
662
 
633
  echo '<div style="display: flex; justify-content: space-between; font-size: 0.9em; opacity: 0.8; margin: 0.6em 0.5em 0 0.5em;">' . "\n";
663
  echo '<div style="display: flex; justify-content: space-between; font-size: 0.9em; opacity: 0.8; margin: 0.6em 0.5em 0 0.5em;">' . "\n";
634
  echo '<div>' . $STR[$LANG]['archives'] . ':';
664
  echo '<div>' . $STR[$LANG]['archives'] . ':';
635
  for ($y = $INITYEAR; $y <= intval(gmdate('Y')); $y++) {
665
  for ($y = $INITYEAR; $y <= intval(gmdate('Y')); $y++) {
636
    if ($NICE_URLS) {
666
    if ($NICE_URLS) {
637
      echo " <a href=\"{$y}\">{$y}</a>";
667
      echo " <a href=\"{$y}\">{$y}</a>";
638
    } else {
668
    } else {
639
      echo ' <a href="' . selfurl("arch={$y}") . '">' . $y . '</a>';
669
      echo ' <a href="' . selfurl("arch={$y}") . '">' . $y . '</a>';
640
    }
670
    }
641
  }
671
  }
642
  echo "</div>\n";
672
  echo "</div>\n";
643
  echo '<a href="rss.php"><img style="height: 1em;" src="mateuszbb_rss.svg" alt="RSS"></a>' . "\n";
673
  echo '<a href="rss.php"><img style="height: 1em;" src="mateuszbb_rss.svg" alt="RSS"></a>' . "\n";
644
  echo "</div>\n";
674
  echo "</div>\n";
645
 
675
 
646
  // display the main page footer if any is defined
676
  // display the main page footer if any is defined
647
  if (file_exists($DATADIR . 'mateuszbb-main-foot.html')) {
677
  if (file_exists($DATADIR . 'mateuszbb-main-foot.html')) {
648
    readfile($DATADIR . 'mateuszbb-main-foot.html');
678
    readfile($DATADIR . 'mateuszbb-main-foot.html');
649
  }
679
  }
650
 
680
 
651
  goto DONE;
681
  goto DONE;
652
}
682
}
653
 
683
 
654
// wyświetl archiwum
684
// wyświetl archiwum
655
if ($archiveyear > 0) {
685
if ($archiveyear > 0) {
656
  echo '<div class="minibb-toolbar" id="title"><a href="' . selfurl() . '">' . $STR[$LANG]['backtocur'] . '</a></div>' . "\n";
686
  echo '<div class="minibb-toolbar" id="title"><a href="' . selfurl() . '">' . $STR[$LANG]['backtocur'] . '</a></div>' . "\n";
657
  echo '<h2 class="minibb-threadtitle">' . $STR[$LANG]['archives'] . " {$archiveyear}</h2>\n";
687
  echo '<h2 class="minibb-threadtitle">' . $STR[$LANG]['archives'] . " {$archiveyear}</h2>\n";
658
  $threads = scandir($DATADIR . 'threads/', SCANDIR_SORT_ASCENDING);
688
  $threads = scandir($DATADIR . 'threads/', SCANDIR_SORT_ASCENDING);
659
  foreach ($threads as $t) {
689
  foreach ($threads as $t) {
660
    if (!preg_match('/^[0-9][0-9]*$/', $t)) continue; // skip anything that is not a thread id
690
    if (!preg_match('/^[0-9][0-9]*$/', $t)) continue; // skip anything that is not a thread id
661
    if (intval(gmdate('Y', $t)) != $archiveyear) continue; // skip threads out of the targeted year
691
    if (intval(gmdate('Y', $t)) != $archiveyear) continue; // skip threads out of the targeted year
662
    $title = file_get_contents($DATADIR . 'threads/' . $t . '/title.txt');
692
    $title = file_get_contents($DATADIR . 'threads/' . $t . '/title.txt');
663
    $link = $t;
693
    $link = $t;
664
    if (! $NICE_URLS) $link = selfurl("thread={$t}");
694
    if (! $NICE_URLS) $link = selfurl("thread={$t}");
665
    echo '<span style="font-family: monospace;">[' . gmdate("Y-m-d", $t) . "]</span> <a href=\"{$link}\">{$title}</a><br>\n";
695
    echo '<span style="font-family: monospace;">[' . gmdate("Y-m-d", $t) . "]</span> <a href=\"{$link}\">{$title}</a><br>\n";
666
  }
696
  }
667
  goto DONE;
697
  goto DONE;
668
}
698
}
669
 
699
 
670
// zobacz wątek
700
// zobacz wątek
671
if ((empty($action)) && ($thread >= 0)) {
701
if ((empty($action)) && ($thread >= 0)) {
672
  // załaduj listę postów (i zapamiętaj ostatnią pozycję)
702
  // załaduj listę postów (i zapamiętaj ostatnią pozycję)
673
  $listapostow = scandir($DATADIR . 'threads/' . $thread . '/');
703
  $listapostow = scandir($DATADIR . 'threads/' . $thread . '/');
674
  // usuń pozycje które nie są żadnym msgid (np. title.txt) i zapamiętaj ostatni msgid
704
  // usuń pozycje które nie są żadnym msgid (np. title.txt) i zapamiętaj ostatni msgid
675
  $posty = array();
705
  $posty = array();
676
  foreach ($listapostow as $p) {
706
  foreach ($listapostow as $p) {
677
    if (!preg_match('/^[0-9][0-9]*$/', $p)) continue; // skip anything that is not a messageid
707
    if (!preg_match('/^[0-9][0-9]*$/', $p)) continue; // skip anything that is not a messageid
678
    $posty[] = $p;
708
    $posty[] = $p;
679
    $ostatnipost = $p;
709
    $ostatnipost = $p;
680
  }
710
  }
681
  // is this thread locked?
711
  // is this thread locked?
682
  $islocked = false;
712
  $islocked = false;
683
  if (($LOCK_DELAY >= 0) && ((time() - intval($ostatnipost)) / 86400 >= $LOCK_DELAY)) $islocked = true;
713
  if (($LOCK_DELAY >= 0) && ((time() - intval($ostatnipost)) / 86400 >= $LOCK_DELAY)) $islocked = true;
684
  // toolbar (ostatni wątek / odpowiedz / powrót do forum)
714
  // toolbar (ostatni wątek / odpowiedz / powrót do forum)
685
  echo '<div class="minibb-toolbar" id="title">';
715
  echo '<div class="minibb-toolbar" id="title">';
686
  echo '<a href="#' . $ostatnipost . '">' . $STR[$LANG]['jumptoend'] . '</a>';
716
  echo '<a href="#' . $ostatnipost . '">' . $STR[$LANG]['jumptoend'] . '</a>';
687
  if (! $islocked) echo ' <a href="#formularz">' . $STR[$LANG]['reply'] . '</a>';
717
  if (! $islocked) echo ' <a href="#formularz">' . $STR[$LANG]['reply'] . '</a>';
688
  echo ' <a href="' . selfurl() . '">' . $STR[$LANG]['listthreads'] . '</a></div>' . "\n";
718
  echo ' <a href="' . selfurl() . '">' . $STR[$LANG]['listthreads'] . '</a></div>' . "\n";
689
  // wyświetl tytuł wątku
719
  // wyświetl tytuł wątku
690
  echo '<h2 class="minibb-threadtitle">' . htmlspecialchars(file_get_contents($DATADIR . 'threads/' . $thread . '/title.txt')) . "</h2>\n";
720
  echo '<h2 class="minibb-threadtitle">' . htmlspecialchars(file_get_contents($DATADIR . 'threads/' . $thread . '/title.txt')) . "</h2>\n";
691
  // "thread is locked"
721
  // "thread is locked"
692
  if ($islocked) echo '<p class="minibb-islockedmsg">' . $STR[$LANG]['locked'] . "</p>\n";
722
  if ($islocked) echo '<p class="minibb-islockedmsg">' . $STR[$LANG]['locked'] . "</p>\n";
693
  // wyświetl listę postów
723
  // wyświetl listę postów
694
  foreach ($posty as $p) {
724
  foreach ($posty as $p) {
695
    $msg = loadmsg($thread, $p);
725
    $msg = loadmsg($thread, $p);
696
    echo '<div class="minibb-post" id="' . $p . '">' . "\n";
726
    echo '<div class="minibb-post" id="' . $p . '">' . "\n";
697
    echo '<div class="minibb-postheader"><a href="#' . $p . '" style="text-decoration: inherit; color: inherit;"><div class="minibb-postauthor">' . "\n";
727
    echo '<div class="minibb-postheader"><a href="#' . $p . '" style="text-decoration: inherit; color: inherit;"><div class="minibb-postauthor">' . "\n";
698
    echo $STR[$LANG]['author'] . ' ' . htmlspecialchars($msg['author']) . "<br>\n";
728
    echo $STR[$LANG]['author'] . ' ' . htmlspecialchars($msg['author']) . "<br>\n";
699
    echo $STR[$LANG]['address'] . ' ' . htmlspecialchars($msg['ip']) . "<br>\n";
729
    echo $STR[$LANG]['address'] . ' ' . htmlspecialchars($msg['ip']) . "<br>\n";
700
    echo $STR[$LANG]['date'] . ' ' . htmlspecialchars(data_dluga($p)) . "</div></a>\n";
730
    echo $STR[$LANG]['date'] . ' ' . htmlspecialchars(data_dluga($p)) . "</div></a>\n";
701
    if (!empty($msg['trip'])) {
731
    if (!empty($msg['trip'])) {
702
      echo '<div class="minibb-trip">';
732
      echo '<div class="minibb-trip">';
703
      echo chunk_split($msg['trip'], 16, "\n");
733
      echo chunk_split($msg['trip'], 16, "\n");
704
      echo "</div>\n";
734
      echo "</div>\n";
705
    }
735
    }
706
    echo "</div>\n";
736
    echo "</div>\n";
707
 
737
 
708
    // symbole html
738
    // symbole html
709
    $bodyprocessed = htmlspecialchars($msg['msg']);
739
    $bodyprocessed = htmlspecialchars($msg['msg']);
710
 
740
 
711
    // ludzie czasem dodają znaczniki [img] do obrazków, usuń je (ale tylko jeśli są na początku linii)
741
    // ludzie czasem dodają znaczniki [img] do obrazków, usuń je (ale tylko jeśli są na początku linii)
712
    $bodyprocessed = preg_replace('~^(\[img\])(.*)(\[/img\])~m', '$2', $bodyprocessed);
742
    $bodyprocessed = preg_replace('~^(\[img\])(.*)(\[/img\])~m', '$2', $bodyprocessed);
713
 
743
 
714
    // dodaj podgląd pod linki do obrazków, ale tylko jeśli link jest sam w linijce
744
    // dodaj podgląd pod linki do obrazków, ale tylko jeśli link jest sam w linijce
715
    $bodyprocessed = preg_replace('~^(http[s]?://[^<>[:space:]]+[[:alnum:]/]\.(jpg|png))($|[\r\n]{1,2})~m', "$1\n<img src=\"$1\">\n", $bodyprocessed);
745
    $bodyprocessed = preg_replace('~^(http[s]?://[^<>[:space:]]+[[:alnum:]/]\.(jpg|png))($|[\r\n]{1,2})~m', "$1\n<img src=\"$1\">\n", $bodyprocessed);
716
 
746
 
717
    // olinkuj linki
747
    // olinkuj linki
718
    $bodyprocessed = preg_replace("~([^\"]|^)(http[s]?://[^<>[:space:]]+[[:alnum:]/=])~", "$1<a href=\"$2\">$2</a>", $bodyprocessed);
748
    $bodyprocessed = preg_replace("~([^\"]|^)(http[s]?://[^<>[:space:]]+[[:alnum:]/=])~", "$1<a href=\"$2\">$2</a>", $bodyprocessed);
719
 
749
 
720
    // oflaguj cytaty (linijki zaczynające się od ">")
750
    // oflaguj cytaty (linijki zaczynające się od ">")
721
    $bodyprocessed = preg_replace('/^(&gt;.*)[\r]?\n/m', '<blockquote>$1</blockquote>', $bodyprocessed);
751
    $bodyprocessed = preg_replace('/^(&gt;.*)[\r]?\n/m', '<blockquote>$1</blockquote>', $bodyprocessed);
722
 
752
 
723
    echo '<div class="minibb-postbody">';
753
    echo '<div class="minibb-postbody">';
724
    // czy mogę edytować?
754
    // czy mogę edytować?
725
    if (is_art_edition_allowed($p, $msg)) {
755
    if (is_art_edition_allowed($p, $msg)) {
726
      echo '<form class="editbtn" method="POST" action="' . selfurl() . '"><input type="hidden" name="action" value="editpostform"><input type="hidden" name="post" value="' . $p . '"><input type="hidden" name="thread" value="' . $thread . '"><input type="submit" value="EDIT"></form>';
756
      echo '<form class="editbtn" method="POST" action="' . selfurl() . '"><input type="hidden" name="action" value="editpostform"><input type="hidden" name="post" value="' . $p . '"><input type="hidden" name="thread" value="' . $thread . '"><input type="submit" value="EDIT"></form>';
727
    }
757
    }
728
    echo $bodyprocessed . "</div>\n";
758
    echo $bodyprocessed . "</div>\n";
729
    echo "</div>\n";
759
    echo "</div>\n";
730
  }
760
  }
731
  // formularz odpowiedzi albo komunikat o zamknięciu
761
  // formularz odpowiedzi albo komunikat o zamknięciu
732
  if ($islocked) {
762
  if ($islocked) {
733
    echo '<p class="minibb-islockedmsg">' . $STR[$LANG]['locked'] . "</p>\n";
763
    echo '<p class="minibb-islockedmsg">' . $STR[$LANG]['locked'] . "</p>\n";
734
  } else {
764
  } else {
735
    formularz($thread);
765
    formularz($thread);
736
  }
766
  }
737
  goto DONE;
767
  goto DONE;
738
}
768
}
739
 
769
 
740
DONE:
770
DONE:
741
}
771
}
742
?>
772
?>
743
 
773