Added version 0.6.3 to the repository

This commit is contained in:
Josh Sherman 2010-02-14 11:40:14 -05:00
commit 80b07ae41e
42 changed files with 7550 additions and 0 deletions

431
include/include.php Normal file
View file

@ -0,0 +1,431 @@
<?
/******************************************************************************\
* Copyright (C) 2002 B Squared (b^2) by Josh Sherman <josh@cleancode.org> *
* *
* This script contains commonly used functions and variables for the site. *
* *
* Last modified : Septemeber 25th, 2002 (JJS) *
\******************************************************************************/
/* B Squared Version Number */
define("VERSION", "0.6.2");
/* B Squared Path */
$b2_path = "./";
/*
* return a trimmed value based on the given value
* and length
*
* @author Dean Jones <dean@geekoid.org>
* @param string $var
* the variable we want to trim
*
* @param int $size
* the length we want to trim the
* varible to
*
* @return string the variable trimmed to the
* length specified in $size
*/
function
CheckVars($var, $size)
{
/* Determine the length of $var */
$length = strlen($var);
/* If the length is fine, then exit */
if ($length <= $size)
return;
/* else, get your loop on! */
for ( ; $length >= $size; $length--)
$var[$length] = "";
}
/*
*
*/
function
GetVars($varname, $defval=NULL)
{
if (array_key_exists($varname, $_SERVER))
$retval = $_SERVER[$varname];
elseif (array_key_exists($varname, $_COOKIE))
$retval = $_COOKIE[$varname];
elseif (array_key_exists($varname, $_POST))
$retval = $_POST[$varname];
elseif (array_key_exists($varname, $_GET))
$retval = $_GET[$varname];
elseif (array_key_exists($varname, $_ENV))
$retval = $_ENV[$varname];
else
$retval = $defval;
return $retval;
}
/*
*
*/
function
ExeSQL($SQL)
{
$results = @mysql_db_query(DB_NAME, $SQL, CONNECTION);
if (!$results)
{
if (ADMIN_ERRORS != "yes")
{
NotifyAdmin("mysql_query");
exit(ERROR);
}
else
exit("There was an error.<BR><BR><B>MySQL Error:</B> <I>" . mysql_error() . "</I>\n");
}
return($results);
}
/*
*
*/
function
AttemptLogin( $pid, $logged_in, $login, $username, $password, $is_moderator, $is_admin )
{
/* Attempt to log the user in if they request it */
if ( $_SERVER['REQUEST_METHOD'] == "POST" && $pid == "login" && $username != "" && $password != "" )
{
/* Check to see if the provided username exists in the database */
$SQL = "SELECT COUNT(*) AS user_exists FROM " . TABLE_PREFIX . "users WHERE user_name='$username';";
$results = ExeSQL($SQL);
/* Grab the data, and analyze it */
while ($row = mysql_fetch_array($results))
$user_exists = $row["user_exists"];
/* User provided correct username */
if ($user_exists == 1)
{
/* Check to see if the provided username exists in the database */
$SQL = "SELECT user_pass FROM " . TABLE_PREFIX . "users WHERE user_name='$username';";
$results = ExeSQL($SQL);
/* Grab the data, and analyze it */
while ($row = mysql_fetch_array($results))
$existing_pass = $row["user_pass"];
$password = crypt($password, $existing_pass);
$the_host = GetVars("HTTP_HOST");
if ($password == $existing_pass)
{
/* Set the cookies */
SetCookie("user_name", $username, time() + 86400, ''); //, $the_host);
SetCookie("user_pass", $password, time() + 86400, ''); //, $the_host);
$pid = "view_forums";
$logged_in = 1;
}
else
{
/* Clear the cookies */
SetCookie("user_name", "", time() - 3600, ''); //, $the_host);
SetCookie("user_pass", "", time() - 3600, ''); //, $the_host);
$pid = "login";
$login = "failed";
$logged_in = 0;
}
if ($logged_in == 1)
{
/* Pull the user ID for the user */
$SQL = "SELECT user_id FROM " . TABLE_PREFIX . "users WHERE user_name='$username';";
$results = ExeSQL($SQL);
/* Grab the data */
while ($row = mysql_fetch_array($results))
$user_id = $row["user_id"];
/* Check to see if the user is a moderator */
$SQL = "SELECT COUNT(*) AS is_moderator FROM " . TABLE_PREFIX . "moderators WHERE user_id='$user_id';";
$results = ExeSQL($SQL);
/* Grab the data */
while ($row = mysql_fetch_array($results))
$is_moderator = $row["is_moderator"];
/* Check to see if the user is an administrator */
$SQL = "SELECT COUNT(*) AS is_admin FROM " . TABLE_PREFIX . "administrators WHERE user_id='$user_id';";
$results = ExeSQL($SQL);
/* Grab the data */
while ($row = mysql_fetch_array($results))
$is_admin = $row["is_admin"];
/* If user is admin, grant them moderator privileges */
if ($is_admin != 0)
$is_moderator = $is_admin;
}
}
/* User provided incorrect username */
else
{
/* Clear the cookies */
SetCookie("user_name", "", time() - 3600, ''); //, $the_host);
SetCookie("user_pass", "", time() - 3600, ''); //, $the_host);
$pid = "login";
$login = "failed";
$logged_in = 0;
}
}
}
/*
*
*/
function
VerifyLogin( $logged_in, $user_id, $is_moderator, $is_admin )
{
$user_name = GetVars("user_name");
$user_pass = GetVars("user_pass");
/* Verify the user's integrity */
if ( $user_name != "" && $user_pass != "" )
{
/* Check to see if the provided username exists in the database */
$SQL = "SELECT COUNT(*) AS user_verification FROM " . TABLE_PREFIX . "users WHERE user_name='" . $_COOKIE["user_name"] . "';";
$results = ExeSQL($SQL);
/* Grab the data, and analyze it */
while ($row = mysql_fetch_array($results))
$user_verification = $row["user_verification"];
if ($user_verification == 1)
{
/* Pull the password for the username we just determine existed */
$SQL = "SELECT user_name, user_pass FROM " . TABLE_PREFIX . "users WHERE user_name='" . $_COOKIE["user_name"] . "';";
$results = ExeSQL($SQL);
/* Grab the data, and analyze it */
while ($row = mysql_fetch_array($results))
{
$existing_user = $row["user_name"];
$existing_pass = $row["user_pass"];
}
$cookie_pass = urldecode($_COOKIE['user_pass']);
if ($existing_pass == $cookie_pass)
{
/* Set the cookies */
SetCookie("user_name", $existing_user, time() + 86400, '', $_SERVER['HTTP_HOST']);
SetCookie("user_pass", $existing_pass, time() + 86400, '', $_SERVER['HTTP_HOST']);
$pid = "view_forums";
$logged_in = 1;
}
else
{
/* Clear the cookies */
SetCookie("user_name", "", time() - 3600, '', $_SERVER['HTTP_HOST']);
SetCookie("user_pass", "", time() - 3600, '', $_SERVER['HTTP_HOST']);
$pid = "login";
$login = "failed";
$logged_in = 0;
}
}
else
{
SetCookie("user_name", "", time() - 3600, '', $_SERVER['HTTP_HOST']);
SetCookie("user_pass", "", time() - 3600, '', $_SERVER['HTTP_HOST']);
$logged_in = 0;
}
$is_moderator = $logged_in;
$is_admin = $logged_in;
if ($logged_in == 1)
{
/* Pull the user ID for the user */
$SQL = "SELECT user_id FROM " . TABLE_PREFIX . "users WHERE user_name='" . $_COOKIE["user_name"] . "';";
$results = ExeSQL($SQL);
/* Grab the data */
while ($row = mysql_fetch_array($results))
$user_id = $row["user_id"];
/* Check to see if the user is a moderator */
$SQL = "SELECT COUNT(*) AS is_moderator FROM " . TABLE_PREFIX . "moderators WHERE user_id='$user_id';";
$results = ExeSQL($SQL);
/* Grab the data */
while ($row = mysql_fetch_array($results))
$is_moderator = $row["is_moderator"];
/* Check to see if the user is an administrator */
$SQL = "SELECT COUNT(*) AS is_admin FROM " . TABLE_PREFIX . "administrators WHERE user_id='$user_id';";
$results = ExeSQL($SQL);
/* Grab the data */
while ($row = mysql_fetch_array($results))
$is_admin = $row["is_admin"];
/* If user is admin, grant them moderator privileges */
if ($is_admin != 0)
$is_moderator = $is_admin;
}
else
{
$is_moderator = 0;
$is_admin = 0;
}
}
}
/*
*
*/
function
ModAction ( $is_moderator, $mod_action, $forum_id, $thread_id, $reply_id, $user_id, $hack_attempt, $mod_feedback, $show_thread, $show_forum )
{
if ( $is_moderator == 0 && $mod_action != "" )
{
$hack_attempt = "outside";
return;
}
if ($mod_action != "")
{
/* Pull the list of forums this user is a moderator for */
$SQL = "SELECT * FROM " . TABLE_PREFIX . "moderators WHERE user_id='$user_id';";
$results = ExeSQL($SQL);
/* Grab the data and load it in an array */
while ($row = mysql_fetch_array($results))
$moderated_forums[] = $row["forum_id"];
if (!in_array($forum_id, $moderated_forums))
{
$hack_attempt = "inside";
return;
}
}
switch ($mod_action)
{
case "Delete Reply":
/* Delete the specified reply */
$SQL = "DELETE FROM " . TABLE_PREFIX . "replies WHERE reply_id='$reply_id';";
$results = ExeSQL($SQL);
$mod_feedback = "The reply has been removed from the board.";
$show_thread = $thread_id;
break;
case "Delete Entire Thread":
/* Delete the specified thread */
$SQL = "DELETE FROM " . TABLE_PREFIX . "threads WHERE thread_id='$thread_id';";
$results = ExeSQL($SQL);
/* Delete the replies to the specified thread */
$SQL = "DELETE FROM " . TABLE_PREFIX . "replies WHERE thread_id='$thread_id';";
$results = ExeSQL($SQL);
$mod_feedback = "The thread has been removed from the board.";
$show_forum = $forum_id;
break;
default:
break;
}
}
/*
*
*/
function
AdminAction ( $is_admin, $admin_action, $forum_id, $thread_id, $reply_id, $user_id, $hack_attempt, $admin_feedback, $show_thread, $show_forum )
{
if ( $is_admin == 0 && $admin_action != "" )
{
$hack_attempt = "outside";
return;
}
switch ($admin_action)
{
case "Delete Reply":
/* Delete the specified reply */
$SQL = "DELETE FROM " . TABLE_PREFIX . "replies WHERE reply_id='$reply_id';";
$results = ExeSQL($SQL);
$mod_feedback = "The reply has been removed from the board.";
$show_thread = $thread_id;
break;
case "Delete Entire Thread":
/* Delete the specified thread */
$SQL = "DELETE FROM " . TABLE_PREFIX . "threads WHERE thread_id='$thread_id';";
$results = ExeSQL($SQL);
/* Delete the replies to the specified thread */
$SQL = "DELETE FROM " . TABLE_PREFIX . "replies WHERE thread_id='$thread_id';";
$results = ExeSQL($SQL);
$mod_feedback = "The thread has been removed from the board.";
$show_forum = $forum_id;
break;
default:
break;
}
}
/*
*
*/
function
NotifyAdmin($what_error)
{
/* If the admin notification is on, then run this */
if (NOTIFY_ADMIN == "yes")
{
switch ($what_error)
{
/* MySQL Query errors */
case "mysql_connect":
$subject = "[b^2] MySQL Error";
$body = "There was an error connecting to MySQL, the error is as follows:\n\n" . mysql_error() . "";
break;
/* MySQL Query errors */
case "mysql_query":
$subject = "[b^2] MySQL Error";
$body = "There was an error executing a MySQL Query, the error is as follows:\n\n" . mysql_error() . "";
break;
/* Default case, this should never be the case */
default:
$subject = "[b^2] Unknown Error";
$body = "Something fucked up, you should never get this email!!";
break;
}
/* Send the email to the admin */
mail(ADMIN_EMAIL, $subject, $body);
}
}
?>

1
include/index.php Normal file
View file

@ -0,0 +1 @@
<? header("Location: ../index.php"); ?>

13
include/javascript.js Normal file
View file

@ -0,0 +1,13 @@
function
PopUp(url, height, width)
{
open(url, "pop-up", "height=" + height + ",width=" + width + ",scrollbars=yes");
}
function
Confirm(question)
{
temp = window.confirm(question);
window.status=(temp)?'confirm: true':'confirm: false';
return(temp);
}

25
include/stylesheet.css Normal file
View file

@ -0,0 +1,25 @@
A
{
color: #000000;
}
A:hover
{
text-decoration: none;
}
INPUT
{
font-family: Verdana;
font-size: 9pt;
}
.table_header
{
color: #FFFFFF;
}
.table_header:hover
{
text-decoration: none;
}