_functions.php

<?php
/*
##########################################################################
#                                                                        #
#           Version 4       /                        /   /               #
#          -----------__---/__---__------__----__---/---/-               #
#           | /| /  /___) /   ) (_ `   /   ) /___) /   /                 #
#          _|/_|/__(___ _(___/_(__)___/___/_(___ _/___/___               #
#                       Free Content / Management System                 #
#                                   /                                    #
#                                                                        #
#                                                                        #
#   Copyright 2005-2015 by webspell.org                                  #
#                                                                        #
#   visit webSPELL.org, webspell.info to get webSPELL for free           #
#   - Script runs under the GNU GENERAL PUBLIC LICENSE                   #
#   - It's NOT allowed to remove this copyright-tag                      #
#   -- http://www.fsf.org/licensing/licenses/gpl.html                    #
#                                                                        #
#   Code based on WebSPELL Clanpackage (Michael Gruber - webspell.at),   #
#   Far Development by Development Team - webspell.org                   #
#                                                                        #
#   visit webspell.org                                                   #
#                                                                        #
##########################################################################
*/

// -- LOGIN SESSION -- //

systeminc('session');
systeminc('ip');

// -- GLOBAL WEBSPELL FUNCTIONS -- //

function makepagelink($link, $page, $pages, $sub = '')
{
    $page_link = '<nav>
  <ul class="pagination pagination-sm">';

    if ($page != 1) {
        $page_link .=
        '<li><a href="' . $link . '&amp;' . $sub . 'page=1">&laquo;</a></li> <li><a href="' . $link . '&amp;' . $sub .
        'page=' . ($page - 1) . '">&lsaquo;</a></li>';
    }
    if ($page >= 6) {
        $page_link .= '<li><a href="' . $link . '&amp;' . $sub . 'page=' . ($page - 5) . '">...</a></li>';
    }
    if ($page + 4 >= $pages) {
        $pagex = $pages;
    } else {
        $pagex = $page + 4;
    }
    for ($i = $page - 4; $i <= $pagex; $i++) {
        if ($i <= 0) {
            $i = 1;
        }
        if ($i == $page) {
            $page_link .= '<li class="active"><a href="#" aria-label="Previous"><span aria-hidden="true">' . $i . '</span></a></li>';
        } else {
            $page_link .= '<li><a href="' . $link . '&amp;' . $sub . 'page=' . $i . '">' . $i . '</a></li>';
        }
    }
    if (($pages - $page) >= 5) {
        $page_link .= '<li><a href="' . $link . '&amp;' . $sub . 'page=' . ($page + 5) . '">...</a></li>';
    }
    if ($page != $pages) {
        $page_link .=
        '<li><a href="' . $link . '&amp;' . $sub . 'page=' . ($page + 1) . '">&rsaquo;</a>&nbsp;<a href="' .
        $link . '&amp;' . $sub . 'page=' . $pages . '">&raquo;</a></li>';
    }
    $page_link .= '</ul></nav>';

    return $page_link;
}

function str_break($str, $maxlen)
{
    $nobr = 0;
    $str_br = '';
    $len = mb_strlen($str);
    for ($i = 0; $i < $len; $i++) {
        $char = mb_substr($str, $i, 1);
        if (($char != ' ') && ($char != '-') && ($char != "\n")) {
            $nobr++;
        } else {
            $nobr = 0;
            if ($maxlen + $i > $len) {
                $str_br .= mb_substr($str, $i);
                break;
            }
        }
        if ($nobr > $maxlen) {
            $str_br .= '- ' . $char;
            $nobr = 1;
        } else {
            $str_br .= $char;
        }
    }
    return $str_br;
}

function substri_count_array($haystack, $needle)
{
    $return = 0;
    foreach ($haystack as $value) {
        if (is_array($value)) {
            $return += substri_count_array($value, $needle);
        } else {
            $return += substr_count(strtolower($value), strtolower($needle));
        }
    }
    return $return;
}

function js_replace($string)
{
    $output = preg_replace("/(\\\)/si", '\\\\\1', $string);
    $output = str_replace(
        array("\r\n", "\n", "'", "<script>", "</script>", "<noscript>", "</noscript>"),
        array("\\n", "\\n", "\'", "\\x3Cscript\\x3E", "\\x3C/script\\x3E", "\\x3Cnoscript\\x3E", "\\x3C/noscript\\x3E"),
        $output
    );
    return $output;
}

function percent($sub, $total, $dec)
{
    if ($sub) {
        $perc = $sub / $total * 100;
        $perc = round($perc, $dec);
        return $perc;
    } else {
        return 0;
    }
}

function showlock($reason)
{
    $gettitle = mysqli_fetch_array(safe_query("SELECT title FROM `" . PREFIX . "styles`"));
    $pagetitle = $gettitle['title'];
    $data_array = array();
    $data_array['$pagetitle'] = $pagetitle;
    if (isset($GLOBALS['_modRewrite']) && $GLOBALS['_modRewrite']->enabled()) {
        $data_array['$rewriteBase'] = $GLOBALS['_modRewrite']->getRewriteBase();
    } else {
        $data_array['$rewriteBase'] = '';
    }
    $data_array['$reason'] = $reason;
    $lock = $GLOBALS["_template"]->replaceTemplate("lock", $data_array);

    die($lock);
}

function checkenv($systemvar, $checkfor)
{
    return stristr(ini_get($systemvar), $checkfor);
}

function mail_protect($mailaddress)
{
    $protected_mail = "";
    $arr = unpack("C*", $mailaddress);
    foreach ($arr as $entry) {
        $protected_mail .= sprintf("%%%X", $entry);
    }
    return $protected_mail;
}

function validate_url($url)
{
    return preg_match(
        // @codingStandardsIgnoreStart
        "/^(ht|f)tps?:\/\/([^:@]+:[^:@]+@)?(?!\.)(\.?(?!-)[0-9\p{L}-]+(?<!-))+(:[0-9]{2,5})?(\/[^#\?]*(\?[^#\?]*)?(#.*)?)?$/sui",
        // @codingStandardsIgnoreEnd
        $url
    );
}

function validate_email($email)
{
    return preg_match(
        // @codingStandardsIgnoreStart
        "/^(?!\.)(\.?[\p{L}0-9!#\$%&'\*\+\/=\?^_`\{\|}~-]+)+@(?!\.)(\.?(?!-)[0-9\p{L}-]+(?<!-))+\.[\p{L}0-9]{2,}$/sui",
        // @codingStandardsIgnoreEnd
        $email
    );
}

if (!function_exists('array_combine')) {
    function array_combine($keyarray, $valuearray)
    {
        $keys = array();
        $values = array();
        $result = array();
        foreach ($keyarray as $key) {
            $keys[] = $key;
        }
        foreach ($valuearray as $value) {
            $values[] = $value;
        }
        foreach ($keys as $access => $resultkey) {
            $result[$resultkey] = $values[$access];
        }
        return $result;
    }
}

if (!function_exists("hash_equals")) {
    function hash_equals($known_str, $user_str)
    {
        $result = 0;

        if (!is_string($known_str)) {
            return false;
        }

        if (!is_string($user_str)) {
            return false;
        }

        if (strlen($known_str) != strlen($user_str)) {
            return false;
        }

        for ($j = 0; $j < strlen($known_str); $j++) {
            $result |= ord($known_str[$j]) ^ ord($user_str[$j]);
        }
        return $result === 0;
    }
}

/* counts empty variables in an array */

function countempty($checkarray)
{

    $ret = 0;

    foreach ($checkarray as $value) {
        if (is_array($value)) {
            $ret += countempty($value);
        } elseif (trim($value) == "") {
            $ret++;
        }
    }

    return $ret;
}

/* checks, if given request-variables are empty */

function checkforempty($valuearray)
{

    $check = array();
    foreach ($valuearray as $value) {
        $check[] = $_REQUEST[$value];
    }

    if (countempty($check) > 0) {
        return false;
    }
    return true;
}

// -- FILESYSTEM -- //

systeminc('func/filesystem');

// -- DATE-TIME INFORMATION -- //

systeminc('func/datetime');

// -- USER INFORMATION -- //

systeminc('func/user');

// -- ACCESS INFORMATION -- //

systeminc('func/useraccess');

// -- MESSENGER INFORMATION -- //

systeminc('func/messenger');

// -- NEWS INFORMATION -- //

systeminc('func/news');

// -- FILES INFORMATION -- //
systeminc('func/files');

// -- GAME INFORMATION -- //

systeminc('func/game');

// -- BOARD INFORMATION -- //

systeminc('func/board');

// -- Page INFORMATION -- //

systeminc('func/page');

// -- CAPTCHA -- //

systeminc('func/captcha');

// -- Cup -- //

systeminc('func/cup');
systeminc('func/cup_match');
systeminc('func/cup_constants');
systeminc('func/convert');
systeminc('func/validation');
systeminc('func/images');
systeminc('func/challonge');

// -- Streams -- //

systeminc('func/streams');

// -- LANGUAGE SYSTEM -- //

systeminc('func/language');
$_language = new \webspell\Language;
$_language->setLanguage($default_language);

// -- TEMPLATE SYSTEM -- //

systeminc('func/template');
if (!stristr($_SERVER['SCRIPT_NAME'], '/admin/')) {
    $_template = new \webspell\Template();
} else {
    $_template = new \webspell\Template('../templates/');
}

$_template_cup = new \webspell\Template(__DIR__ . '/cup/html/');

// -- GALLERY -- //

systeminc('func/gallery');

// -- PASSWORD_HASH -- //
if (version_compare(PHP_VERSION, '5.3.7', '>') && version_compare(PHP_VERSION, '5.5.0', '<')) {
	systeminc('func/password');
}

// -- SPAM -- //

systeminc('func/spam');

// -- BB CODE -- //

systeminc('func/bbcode');

// -- Tags -- //

systeminc('func/tags');

// -- Upload -- //

systeminc('func/upload');
systeminc('func/httpupload');
systeminc('func/urlupload');

// -- Mod Rewrite -- //

systeminc('modrewrite');
$GLOBALS['_modRewrite'] = new \webspell\ModRewrite();
if (!stristr($_SERVER['SCRIPT_NAME'], '/admin/') && $modRewrite) {
    $GLOBALS['_modRewrite']->enable();
}

function cleartext($text, $bbcode = true, $calledfrom = 'root')
{
    $text = htmlspecialchars($text);
    $text = strip_tags($text);
    $text = smileys($text, 1, $calledfrom);
    $text = insertlinks($text, $calledfrom);
    $text = flags($text, $calledfrom);
    $text = replacement($text, $bbcode);
    $text = htmlnl($text);
    $text = nl2br($text);

    return $text;
}

function htmloutput($text)
{
    $text = smileys($text);
    $text = insertlinks($text);
    $text = flags($text);
    $text = replacement($text);
    $text = htmlnl($text);
    $text = nl2br($text);

    return $text;
}

function clearfromtags($text)
{
    $text = getinput($text);
    $text = strip_tags($text);
    $text = htmlnl($text);
    $text = nl2br($text);

    return $text;
}

function getinput($text)
{
    $text = htmlspecialchars($text);

    return $text;
}

function getforminput($text)
{
    $text = str_replace(array('\r', '\n'), array("\r", "\n"), $text);
    $text = stripslashes($text);
    $text = htmlspecialchars($text);

    return $text;
}

// -- LOGIN -- //

systeminc('login');

if (isset($_COOKIE['language'])) {
    $_language->setLanguage($_COOKIE['language']);
} else if (isset($_SESSION['language'])) {
    $_language->setLanguage($_SESSION['language']);
} else if ($autoDetectLanguage) {
    $lang = detectUserLanguage();
    if (!empty($lang)) {
        $_language->setLanguage($lang);
        $_SESSION['language'] = $lang;
    }
}

// -- SITE VARIABLE -- //

if (isset($_GET['site'])) {
    $site = $_GET['site'];
} else {
    $site = '';
}
if ($closed && !isanyadmin($userID)) {
    $dl = mysqli_fetch_array(safe_query("SELECT * FROM `" . PREFIX . "lock` LIMIT 0,1"));
    $reason = $dl['reason'];
    showlock($reason);
}
if (!isset($_SERVER['HTTP_REFERER'])) {
    $_SERVER['HTTP_REFERER'] = "";
}

if (!isset($_SERVER['REQUEST_URI'])) {
    $_SERVER['REQUEST_URI'] = $_SERVER['PHP_SELF'];
    if (isset($_SERVER['QUERY_STRING'])) {
        $_SERVER['REQUEST_URI'] .= '?' . $_SERVER['QUERY_STRING'];
    }
}

// -- BANNED USERS -- //
if (date("dh", $lastBanCheck) != date("dh")) {
    $get = safe_query("SELECT userID, banned FROM `" . PREFIX . "user` WHERE banned IS NOT NULL");
    $removeBan = array();
    while ($ds = mysqli_fetch_assoc($get)) {
        if ($ds['banned'] != "perm") {
            if ($ds['banned'] <= time()) {
                $removeBan[] = 'userID="' . $ds['userID'] . '"';
            }
        }
    }
    if (!empty($removeBan)) {
        $where = implode(" OR ", $removeBan);
        safe_query("UPDATE " . PREFIX . "user SET banned=NULL WHERE " . $where);
    }
    safe_query("UPDATE " . PREFIX . "settings SET bancheck='" . time() . "'");
}

$banned =
    safe_query(
        "SELECT userID, banned, ban_reason FROM `" . PREFIX . "user`
        WHERE (userID='" . $userID . "' OR ip='" . $GLOBALS[ 'ip' ] . "') AND banned IS NOT NULL"
    );
while ($bq = mysqli_fetch_array($banned)) {
    if ($bq['ban_reason']) {
        $reason = "<br>Reason: <mark>" . $bq['ban_reason'] . '</mark>';
    } else {
        $reason = '';
    }
    if ($bq['banned']) {
        $_SESSION = array();

        // remove session cookie
        if (isset($_COOKIE[ session_name() ])) {
            setcookie(session_name(), '', time() - 42000, '/');
        }

        session_destroy();

        // remove login cookie
        webspell\LoginCookie::clear('ws_auth');
        system_error('<strong>You have been banned.</strong>' . $reason, 0);
    }
}

// -- BANNED IPs -- //

safe_query("DELETE FROM `" . PREFIX . "banned_ips` WHERE deltime < '" . time() . "'");

// -- WHO IS - WAS ONLINE -- //

$timeout = 5; // 1 second
$deltime = time() - ($timeout * 60); // IS 1m
$wasdeltime = time() - (60 * 60 * 24); // WAS 24h

safe_query("DELETE FROM `" . PREFIX . "whoisonline` WHERE time < '" . $deltime . "'");  // IS online
safe_query("DELETE FROM `" . PREFIX . "whowasonline` WHERE time < '" . $wasdeltime . "'");  // WAS online

// -- HELP MODE -- //

systeminc('help');

// -- WHOISONLINE -- //

if (mb_strlen($site)) {
    if ($userID) {
        // IS online
        if (mysqli_num_rows(safe_query("SELECT userID FROM " . PREFIX . "whoisonline WHERE userID='$userID'"))) {
            safe_query(
                "UPDATE " . PREFIX . "whoisonline SET time='" . time() .
                "', site='$site' WHERE userID='$userID'"
            );
            safe_query("UPDATE " . PREFIX . "user SET lastlogin='" . time() . "' WHERE userID='$userID'");
        } else {
            safe_query(
                "INSERT INTO " . PREFIX . "whoisonline (time, userID, site) VALUES ('" . time() .
                "', '$userID', '$site')"
            );
        }

        // WAS online
        if (mysqli_num_rows(safe_query("SELECT userID FROM " . PREFIX . "whowasonline WHERE userID='$userID'"))) {
            safe_query(
                "UPDATE " . PREFIX . "whowasonline SET time='" . time() .
                "', site='$site' WHERE userID='$userID'"
            );
        } else {
            safe_query(
                "INSERT INTO " . PREFIX . "whowasonline (time, userID, site) VALUES ('" . time() .
                "', '$userID', '$site')"
            );
        }
    } else {
        $anz =
            mysqli_num_rows(
                safe_query(
                    "SELECT ip FROM `" . PREFIX . "whoisonline` WHERE ip='" . $GLOBALS[ 'ip' ] . "'"
                )
            );
        if ($anz) {
            safe_query(
                "UPDATE " . PREFIX . "whoisonline SET time='" . time() . "', site='$site' WHERE ip='" .
                $GLOBALS[ 'ip' ] . "'"
            );
        } else {
            safe_query(
                "INSERT INTO " . PREFIX . "whoisonline (time, ip, site) VALUES ('" . time() . "','" .
                $GLOBALS[ 'ip' ] . "', '$site')"
            );
        }
    }
}

// -- COUNTER -- //

$time = time();
$date = date("d.m.Y", $time);
$deltime = $time - (3600 * 24);
safe_query("DELETE FROM `" . PREFIX . "counter_iplist` WHERE del<" . $deltime);

if (!mysqli_num_rows(safe_query("SELECT ip FROM `" . PREFIX . "counter_iplist` WHERE ip='" . $GLOBALS[ 'ip' ] . "'"))) {
    if ($userID) {
        safe_query("UPDATE `" . PREFIX . "user` SET ip='" . $GLOBALS[ 'ip' ] . "' WHERE userID='" . $userID . "'");
    }
    safe_query("UPDATE `" . PREFIX . "counter` SET hits=hits+1");
    safe_query(
        "INSERT INTO `" . PREFIX . "counter_iplist` (dates, del, ip) VALUES ('" . $date . "', '" . $time . "', '" .
        $GLOBALS[ 'ip' ] . "')"
    );
    if (!mysqli_num_rows(safe_query("SELECT dates FROM `" . PREFIX . "counter_stats` WHERE dates='" . $date . "'"))) {
        safe_query("INSERT INTO `" . PREFIX . "counter_stats` (`dates`, `count`) VALUES ('" . $date . "', '1')");
    } else {
        safe_query("UPDATE " . PREFIX . "counter_stats SET count=count+1 WHERE dates='" . $date . "'");
    }
}

/* update maxonline if necessary */
$res = mysqli_fetch_assoc(safe_query("SELECT count(*) as maxuser FROM `" . PREFIX . "whoisonline`"));
safe_query(
    "UPDATE `" . PREFIX . "counter`
    SET maxonline = '" . $res[ 'maxuser' ] . "'
    WHERE maxonline < '" . $res[ 'maxuser' ] . "'"
);

// -- SEARCH ENGINE OPTIMIZATION (SEO) -- //
if (stristr($_SERVER[ 'PHP_SELF' ], "/admin/") === false) {
    systeminc('seo');
    define('PAGETITLE', getPageTitle());
} else {
    define('PAGETITLE', $GLOBALS['hp_title']);
}

// -- RSS FEEDS -- //

systeminc('func/feeds');

// -- Email -- //

systeminc('func/email');

function recursiveRemoveDirectory($directory)
{
    foreach (glob("{$directory}/*") as $file) {
        if (is_dir($file)) {
            recursiveRemoveDirectory($file);
        } else {
            unlink($file);
        }
    }
    rmdir($directory);
}

// -- CUSTOM -- //

function showError($text, $showInfo = FALSE) {
    if($showInfo) {
        $text = '<span class="fa fa-info-circle"></span> ' . $text;
    }
    return '<div class="alert alert-danger">' . getoutput($text) . '</div>';
}

function showWarning($text, $showInfo = FALSE) {
    if($showInfo) {
        $text = '<span class="fa fa-info-circle"></span> ' . $text;
    }
    return '<div class="alert alert-warning">' . getoutput($text) . '</div>';
}

function showInfo($text, $showInfo = TRUE) {
    if($showInfo) {
        $text = '<span class="fa fa-info-circle"></span> ' . $text;
    }
    return '<div class="alert alert-info"> ' . getoutput($text) . '</div>';
}

function showMessage($text, $showInfo = FALSE) {
    if($showInfo) {
        $text = '<span class="fa fa-info-circle"></span> ' . $text;
    }
    return '<div class="alert alert-success">' . getoutput($text) . '</div>';
}

function getoutput($text) {
    $text = htmlnl($text);
    $text = nl2br($text);
    $text = htmlspecialchars_decode($text, ENT_QUOTES);
    $text = str_replace(
        array('&lt;', '&gt;'),
        array('<', '>'),
        $text
    );
    return $text;
}

function selectOptionByValue($options, $selected_value, $checkIfValueIsInteger = TRUE) {

    if ($checkIfValueIsInteger && !validate_int($selected_value, true)) {
        return $options;
    }

    $options = str_replace(
        'value="' . $selected_value . '"',
        'value="' . $selected_value . '" selected="selected"',
        $options
    );

    return $options;

}