Просмотр файла attach_mod/posting_attachments.php

Конкурс дизайнеров на 15000 рублей
Скрипты | CMS | Боты
Размер файла: 48.45Kb 
  1. <?php
  2. /***************************************************************************
  3.  *                                mides.ru
  4.  *                            -------------------
  5.  ***************************************************************************/
  6. if ( !defined('IN_PHPBB') )
  7. {
  8. 	die('Hacking attempt');
  9. 	exit;
  10. }
  11.  
  12. $importurl = trim($HTTP_POST_VARS['httpurl']);
  13. if ($importurl == "http://") { $importurl = NULL; }
  14. if ($importurl<>NULL)
  15. {
  16. 	$path = preg_replace("~.*://[^/]*(/.*)~","\\1",$importurl,1);
  17. 	$HTTP_POST_FILES['fileupload']['name'] = basename($path);
  18. 	$HTTP_POST_FILES['fileupload']['tmp_name'] = $importurl;
  19. 	$HTTP_POST_FILES['fileupload']['type'] = '';
  20. }
  21.  
  22. class attach_parent
  23. {
  24. 	var $post_attach = false;
  25. 	var $attach_filename = '';
  26. 	var $filename = '';
  27. 	var $type = '';
  28. 	var $extension = '';
  29. 	var $file_comment = '';
  30. 	var $num_attachments = 0; 
  31. 	var $filesize = 0;
  32. 	var $filetime = 0;
  33. 	var $thumbnail = 0;
  34. 	var $page = 0; 
  35.  
  36. 	var $add_attachment_body = 0;
  37. 	var $posted_attachments_body = 0;
  38.  
  39. 	function attach_parent()
  40. 	{
  41. 		global $HTTP_POST_VARS, $HTTP_POST_FILES;
  42. 		
  43. 		$this->add_attachment_body = get_var('add_attachment_body', 0);
  44. 		$this->posted_attachments_body = get_var('posted_attachments_body', 0);
  45.  
  46. 		$this->file_comment					= get_var('filecomment', '');
  47. 		$this->attachment_id_list			= get_var('attach_id_list', array(0));
  48. 		$this->attachment_comment_list		= get_var('comment_list', array(''), true);
  49. 		$this->attachment_filesize_list		= get_var('filesize_list', array(0));
  50. 		$this->attachment_filetime_list		= get_var('filetime_list', array(0));
  51. 		$this->attachment_filename_list		= get_var('filename_list', array(''));
  52. 		$this->attachment_extension_list	= get_var('extension_list', array(''));
  53. 		$this->attachment_mimetype_list		= get_var('mimetype_list', array(''));
  54.  
  55. 		$this->filename = (isset($HTTP_POST_FILES['fileupload']) && isset($HTTP_POST_FILES['fileupload']['name']) && $HTTP_POST_FILES['fileupload']['name'] != 'none') ? trim(stripslashes($HTTP_POST_FILES['fileupload']['name'])) : '';
  56.  
  57. 		$this->attachment_list = get_var('attachment_list', array(''));
  58. 		$this->attachment_thumbnail_list = get_var('attach_thumbnail_list', array(0));
  59. 	}
  60.  
  61. 	function get_quota_limits($userdata_quota, $user_id = 0)
  62. 	{
  63. 		global $attach_config, $db;
  64.  
  65. 		$priority = 'user;group';
  66.  
  67. 		if ($userdata_quota['user_level'] == ADMIN)
  68. 		{
  69. 			$attach_config['pm_filesize_limit'] = 0;
  70. 			$attach_config['upload_filesize_limit'] = 0;
  71. 			return;
  72. 		}
  73.  
  74. 		if ($this->page == PAGE_PRIVMSGS)
  75. 		{
  76. 			$quota_type = QUOTA_PM_LIMIT;
  77. 			$limit_type = 'pm_filesize_limit';
  78. 			$default = 'max_filesize_pm';
  79. 		}
  80. 		else
  81. 		{
  82. 			$quota_type = QUOTA_UPLOAD_LIMIT;
  83. 			$limit_type = 'upload_filesize_limit';
  84. 			$default = 'attachment_quota';
  85. 		}
  86.  
  87. 		if (!$user_id)
  88. 		{
  89. 			$user_id = intval($userdata_quota['user_id']);
  90. 		}
  91. 		
  92. 		$priority = explode(';', $priority);
  93. 		$found = false;
  94.  
  95. 		for ($i = 0; $i < sizeof($priority); $i++)
  96. 		{
  97. 			if (($priority[$i] == 'group') && (!$found))
  98. 			{
  99. 				$sql = 'SELECT u.group_id 
  100. 					FROM ' . USER_GROUP_TABLE . ' u, ' . GROUPS_TABLE . ' g 
  101. 					WHERE g.group_single_user = 0 
  102. 						AND u.user_pending = 0
  103. 						AND u.group_id = g.group_id 
  104. 						AND u.user_id = ' . $user_id;
  105. 			
  106. 				if (!($result = $db->sql_query($sql)))
  107. 				{
  108. 					message_die(GENERAL_ERROR, 'Could not get User Group', '', __LINE__, __FILE__, $sql);
  109. 				}
  110.  
  111. 				$rows = $db->sql_fetchrowset($result);
  112. 				$num_rows = $db->sql_numrows($result);
  113. 				$db->sql_freeresult($result);
  114.  
  115. 				if ($num_rows > 0)
  116. 				{
  117. 					$group_id = array();
  118.  
  119. 					for ($j = 0; $j < $num_rows; $j++)
  120. 					{
  121. 						$group_id[] = (int) $rows[$j]['group_id'];
  122. 					}
  123.  
  124. 					$sql = 'SELECT l.quota_limit 
  125. 						FROM ' . QUOTA_TABLE . ' q, ' . QUOTA_LIMITS_TABLE . ' l
  126. 						WHERE q.group_id IN (' . implode(', ', $group_id) . ') 
  127. 							AND q.group_id <> 0
  128. 							AND q.quota_type = ' . $quota_type . ' 
  129. 							AND q.quota_limit_id = l.quota_limit_id
  130. 						ORDER BY l.quota_limit DESC 
  131. 						LIMIT 1';
  132.  
  133. 					if (!($result = $db->sql_query($sql)))
  134. 					{
  135. 						message_die(GENERAL_ERROR, 'Could not get Group Quota', '', __LINE__, __FILE__, $sql);
  136. 					}
  137.  
  138. 					if ($db->sql_numrows($result) > 0)
  139. 					{
  140. 						$row = $db->sql_fetchrow($result);
  141. 						$attach_config[$limit_type] = $row['quota_limit'];
  142. 						$found = TRUE;
  143. 					}
  144. 					$db->sql_freeresult($result);
  145. 				}
  146. 			}
  147.  
  148. 			if ($priority[$i] == 'user' && !$found)
  149. 			{
  150. 				$sql = 'SELECT l.quota_limit 
  151. 					FROM ' . QUOTA_TABLE . ' q, ' . QUOTA_LIMITS_TABLE . ' l
  152. 					WHERE q.user_id = ' . $user_id . '
  153. 						AND q.user_id <> 0
  154. 						AND q.quota_type = ' . $quota_type . ' 
  155. 						AND q.quota_limit_id = l.quota_limit_id
  156. 					LIMIT 1';
  157.  
  158. 				if (!($result = $db->sql_query($sql)))
  159. 				{
  160. 					message_die(GENERAL_ERROR, 'Could not get User Quota', '', __LINE__, __FILE__, $sql);
  161. 				}
  162.  
  163. 				if ($db->sql_numrows($result) > 0)
  164. 				{
  165. 					$row = $db->sql_fetchrow($result);
  166. 					$attach_config[$limit_type] = $row['quota_limit'];
  167. 					$found = TRUE;
  168. 				}
  169. 				$db->sql_freeresult($result);
  170. 			}
  171. 		}
  172.  
  173. 		if (!$found)
  174. 		{
  175. 			$quota_id = ($quota_type == QUOTA_UPLOAD_LIMIT) ? $attach_config['default_upload_quota'] : $attach_config['default_pm_quota'];
  176.  
  177. 			if ($quota_id == 0)
  178. 			{
  179. 				$attach_config[$limit_type] = $attach_config[$default];
  180. 			}
  181. 			else
  182. 			{
  183. 				$sql = 'SELECT quota_limit 
  184. 					FROM ' . QUOTA_LIMITS_TABLE . '
  185. 					WHERE quota_limit_id = ' . (int) $quota_id . ' 
  186. 					LIMIT 1';
  187.  
  188. 				if (!($result = $db->sql_query($sql)))
  189. 				{
  190. 					message_die(GENERAL_ERROR, 'Could not get Default Quota Limit', '', __LINE__, __FILE__, $sql);
  191. 				}
  192. 	
  193. 				if ($db->sql_numrows($result) > 0)
  194. 				{
  195. 					$row = $db->sql_fetchrow($result);
  196. 					$attach_config[$limit_type] = $row['quota_limit'];
  197. 				}
  198. 				else
  199. 				{
  200. 					$attach_config[$limit_type] = $attach_config[$default];
  201. 				}
  202. 				$db->sql_freeresult($result);
  203. 			}
  204. 		}
  205.  
  206. 		if ($quota_type == QUOTA_UPLOAD_LIMIT)
  207. 		{
  208. 			if ($attach_config[$limit_type] > $attach_config[$default])
  209. 			{
  210. 				$attach_config[$limit_type] = $attach_config[$default];
  211. 			}
  212. 		}
  213. 	}
  214.  
  215. 	function handle_attachments($mode)
  216. 	{
  217. 		global $is_auth, $attach_config, $refresh, $HTTP_POST_VARS, $post_id, $submit, $preview, $error, $error_msg, $lang, $template, $userdata, $db;
  218.  
  219. 		if ($this->page == PAGE_PRIVMSGS)
  220. 		{
  221. 			global $privmsg_id;
  222.  
  223. 			$post_id = $privmsg_id;
  224.  
  225. 			if ($mode == 'post')
  226. 			{
  227. 				$mode = 'newtopic';
  228. 			}
  229. 			else if ($mode == 'edit')
  230. 			{
  231. 				$mode = 'editpost';
  232. 			}
  233.  
  234. 			if ($userdata['user_level'] == ADMIN)
  235. 			{
  236. 				$is_auth['auth_attachments'] = 1;
  237. 				$max_attachments = ADMIN_MAX_ATTACHMENTS;
  238. 			}
  239. 			else
  240. 			{
  241. 				$is_auth['auth_attachments'] = intval($attach_config['allow_pm_attach']);
  242. 				$max_attachments = intval($attach_config['max_attachments_pm']);
  243. 			}
  244.  
  245. 			$sql_id = 'privmsgs_id';
  246. 		}
  247. 		else
  248. 		{
  249. 			if ($userdata['user_level'] == ADMIN)
  250. 			{
  251. 				$max_attachments = ADMIN_MAX_ATTACHMENTS;
  252. 			}
  253. 			else
  254. 			{
  255. 				$max_attachments = intval($attach_config['max_attachments']);
  256. 			}
  257.  
  258. 			$sql_id = 'post_id';
  259. 		}
  260.  
  261. 		if (intval($attach_config['disable_mod']) || !$is_auth['auth_attachments'])
  262. 		{
  263. 			return false;
  264. 		}
  265.  
  266. 		$allowed_attach_ids = array();
  267. 		if ($post_id)
  268. 		{
  269. 			$sql = 'SELECT attach_id
  270. 				FROM ' . ATTACHMENTS_TABLE . '
  271. 				WHERE ' . $sql_id . ' = ' . $post_id;
  272. 			$result = $db->sql_query($sql);
  273.  
  274. 			if (!$result)
  275. 			{
  276. 				message_die(GENERAL_ERROR, 'Unable to get attachment information.', '', __LINE__, __FILE__, $sql);
  277. 			}
  278.  
  279. 			while ($_row = $db->sql_fetchrow($result))
  280. 			{
  281. 				$allowed_attach_ids[] = $_row['attach_id'];
  282. 			}
  283. 			$db->sql_freeresult($result);
  284. 		}
  285.  
  286. 		$actual_id_list				= get_var('attach_id_list', array(0));
  287. 		$actual_list				= get_var('attachment_list', array(''));
  288.  
  289. 		for ($i = 0; $i < sizeof($actual_list); $i++)
  290. 		{
  291. 			if ($actual_id_list[$i] != 0)
  292. 			{
  293. 				if (!in_array($actual_id_list[$i], $allowed_attach_ids))
  294. 				{
  295. 					message_die(CRITICAL_ERROR, 'You tried to change an attachment you do not have access to', '');
  296. 				}
  297. 			}
  298. 			else
  299. 			{
  300. 				if (physical_filename_already_stored($actual_list[$i]))
  301. 				{
  302. 					message_die(CRITICAL_ERROR, 'You tried to change an attachment you do not have access to', '');
  303. 				}
  304. 			}
  305. 		}
  306.  
  307. 		$attachments = array();
  308.  
  309. 		if (!$refresh)
  310. 		{
  311. 			$add = (isset($HTTP_POST_VARS['add_attachment'])) ? TRUE : FALSE;
  312. 			$delete = (isset($HTTP_POST_VARS['del_attachment'])) ? TRUE : FALSE;
  313. 			$edit = (isset($HTTP_POST_VARS['edit_comment'])) ? TRUE : FALSE;
  314. 			$update_attachment = (isset($HTTP_POST_VARS['update_attachment'])) ? TRUE : FALSE;
  315. 			$del_thumbnail = (isset($HTTP_POST_VARS['del_thumbnail'])) ? TRUE : FALSE;
  316.  
  317. 			$add_attachment_box = (!empty($HTTP_POST_VARS['add_attachment_box'])) ? TRUE : FALSE;
  318. 			$posted_attachments_box = (!empty($HTTP_POST_VARS['posted_attachments_box'])) ? TRUE : FALSE;
  319.  
  320. 			$refresh = $add || $delete || $edit || $del_thumbnail || $update_attachment || $add_attachment_box || $posted_attachments_box;
  321. 		}
  322.  
  323. 		if ($this->page == PAGE_PRIVMSGS)
  324. 		{
  325. 			$attachments = get_attachments_from_pm($post_id);
  326. 		}
  327. 		else
  328. 		{
  329. 			$attachments = get_attachments_from_post($post_id);
  330. 		}
  331.  
  332. 		if ($this->page == PAGE_PRIVMSGS)
  333. 		{
  334. 			if ($userdata['user_level'] == ADMIN)
  335. 			{
  336. 				$auth = TRUE;
  337. 			}
  338. 			else
  339. 			{
  340. 				$auth = (intval($attach_config['allow_pm_attach'])) ? TRUE : FALSE;
  341. 			}
  342.  
  343. 			if (sizeof($attachments) == 1)
  344. 			{
  345. 				$template->assign_block_vars('switch_attachments',array());
  346.  
  347. 				$template->assign_vars(array(
  348. 					'L_DELETE_ATTACHMENTS'		=> $lang['Delete_attachment'])
  349. 				);
  350. 			}
  351. 			else if (sizeof($attachments) > 0)
  352. 			{
  353. 				$template->assign_block_vars('switch_attachments',array());
  354.  
  355. 				$template->assign_vars(array(
  356. 					'L_DELETE_ATTACHMENTS'		=> $lang['Delete_attachments'])
  357. 				);
  358. 			}
  359. 		}
  360. 		else
  361. 		{
  362. 			$auth = ($is_auth['auth_edit'] || $is_auth['auth_mod']) ? TRUE : FALSE;
  363. 		}
  364.  
  365. 		if (!$submit && $mode == 'editpost' && $auth)
  366. 		{
  367. 			if (!$refresh && !$preview && !$error && !isset($HTTP_POST_VARS['del_poll_option']))
  368. 			{
  369. 				for ($i = 0; $i < sizeof($attachments); $i++)
  370. 				{
  371. 					$this->attachment_list[] = $attachments[$i]['physical_filename'];
  372. 					$this->attachment_comment_list[] = $attachments[$i]['comment'];
  373. 					$this->attachment_filename_list[] = $attachments[$i]['real_filename'];
  374. 					$this->attachment_extension_list[] = $attachments[$i]['extension'];
  375. 					$this->attachment_mimetype_list[] = $attachments[$i]['mimetype'];
  376. 					$this->attachment_filesize_list[] = $attachments[$i]['filesize'];
  377. 					$this->attachment_filetime_list[] = $attachments[$i]['filetime'];
  378. 					$this->attachment_id_list[] = $attachments[$i]['attach_id'];
  379. 					$this->attachment_thumbnail_list[] = $attachments[$i]['thumbnail'];
  380. 				}
  381. 			}
  382. 		}
  383.  
  384. 		$this->num_attachments = sizeof($this->attachment_list);
  385. 		
  386. 		if ($submit && $mode != 'vote')
  387. 		{
  388. 			if ($mode == 'newtopic' || $mode == 'reply' || $mode == 'editpost')
  389. 			{
  390. 				if ($this->filename != '')
  391. 				{
  392. 					if ($this->num_attachments < intval($max_attachments))
  393. 					{
  394. 						$this->upload_attachment($this->page);
  395.  
  396. 						if (!$error && $this->post_attach)
  397. 						{
  398. 							array_unshift($this->attachment_list, $this->attach_filename);
  399. 							array_unshift($this->attachment_comment_list, $this->file_comment);
  400. 							array_unshift($this->attachment_filename_list, $this->filename);
  401. 							array_unshift($this->attachment_extension_list, $this->extension);
  402. 							array_unshift($this->attachment_mimetype_list, $this->type);
  403. 							array_unshift($this->attachment_filesize_list, $this->filesize);
  404. 							array_unshift($this->attachment_filetime_list, $this->filetime);
  405. 							array_unshift($this->attachment_id_list, '0');
  406. 							array_unshift($this->attachment_thumbnail_list, $this->thumbnail);
  407.  
  408. 							$this->file_comment = '';
  409.  
  410. 							$this->post_attach = FALSE;
  411. 						}
  412. 					}
  413. 					else
  414. 					{
  415. 						$error = TRUE;
  416. 						if (!empty($error_msg))
  417. 						{
  418. 							$error_msg .= '<br />';
  419. 						}
  420. 						$error_msg .= sprintf($lang['Too_many_attachments'], intval($max_attachments));
  421. 					}
  422. 				}
  423. 			}
  424. 		}
  425.  
  426. 		if ($preview || $refresh || $error)
  427. 		{
  428. 			$delete_attachment = (isset($HTTP_POST_VARS['del_attachment'])) ? TRUE : FALSE;
  429. 			$delete_thumbnail = (isset($HTTP_POST_VARS['del_thumbnail'])) ? TRUE : FALSE;
  430.  
  431. 			$add_attachment = (isset($HTTP_POST_VARS['add_attachment'])) ? TRUE : FALSE;
  432. 			$edit_attachment = (isset($HTTP_POST_VARS['edit_comment'])) ? TRUE : FALSE;
  433. 			$update_attachment = (isset($HTTP_POST_VARS['update_attachment']) ) ? TRUE : FALSE;
  434.  
  435. 			if ($delete_attachment || $delete_thumbnail)
  436. 			{
  437. 				$actual_id_list				= get_var('attach_id_list', array(0));
  438. 				$actual_comment_list		= get_var('comment_list', array(''), true);
  439. 				$actual_filename_list		= get_var('filename_list', array(''));
  440. 				$actual_extension_list		= get_var('extension_list', array(''));
  441. 				$actual_mimetype_list		= get_var('mimetype_list', array(''));
  442. 				$actual_filesize_list		= get_var('filesize_list', array(0));
  443. 				$actual_filetime_list		= get_var('filetime_list', array(0));
  444. 				
  445. 				$actual_list				= get_var('attachment_list', array(''));
  446. 				$actual_thumbnail_list		= get_var('attach_thumbnail_list', array(0));
  447.  
  448. 				$this->attachment_list = array();
  449. 				$this->attachment_comment_list = array();
  450. 				$this->attachment_filename_list = array();
  451. 				$this->attachment_extension_list = array();
  452. 				$this->attachment_mimetype_list = array();
  453. 				$this->attachment_filesize_list = array();
  454. 				$this->attachment_filetime_list = array();
  455. 				$this->attachment_id_list = array();
  456. 				$this->attachment_thumbnail_list = array();
  457.  
  458. 				if (isset($HTTP_POST_VARS['attachment_list']))
  459. 				{
  460. 					for ($i = 0; $i < sizeof($actual_list); $i++)
  461. 					{
  462. 						$restore = FALSE;
  463. 						$del_thumb = FALSE;
  464.  
  465. 						if ($delete_thumbnail)
  466. 						{
  467. 							if (!isset($HTTP_POST_VARS['del_thumbnail'][$actual_list[$i]]))
  468. 							{
  469. 								$restore = TRUE;
  470. 							}
  471. 							else
  472. 							{
  473. 								$del_thumb = TRUE;
  474. 							}
  475. 						}
  476.  
  477. 						if ($delete_attachment)
  478. 						{
  479. 							if (!isset($HTTP_POST_VARS['del_attachment'][$actual_list[$i]]))
  480. 							{
  481. 								$restore = TRUE;
  482. 							}
  483. 						}
  484.  
  485. 						if ($restore)
  486. 						{
  487. 							$this->attachment_list[] = $actual_list[$i];
  488. 							$this->attachment_comment_list[] = $actual_comment_list[$i];
  489. 							$this->attachment_filename_list[] = $actual_filename_list[$i];
  490. 							$this->attachment_extension_list[] = $actual_extension_list[$i];
  491. 							$this->attachment_mimetype_list[] = $actual_mimetype_list[$i];
  492. 							$this->attachment_filesize_list[] = $actual_filesize_list[$i];
  493. 							$this->attachment_filetime_list[] = $actual_filetime_list[$i];
  494. 							$this->attachment_id_list[] = $actual_id_list[$i];
  495. 							$this->attachment_thumbnail_list[] = $actual_thumbnail_list[$i];
  496. 						}
  497. 						else if (!$del_thumb)
  498. 						{
  499. 							if ($actual_id_list[$i] == '0' )
  500. 							{
  501. 								unlink_attach($actual_list[$i]);
  502. 								
  503. 								if ($actual_thumbnail_list[$i] == 1)
  504. 								{
  505. 									unlink_attach($actual_list[$i], MODE_THUMBNAIL);
  506. 								}
  507. 							}
  508. 							else
  509. 							{
  510. 								delete_attachment($post_id, $actual_id_list[$i], $this->page);
  511. 							}
  512. 						}
  513. 						else if ($del_thumb)
  514. 						{
  515. 							$this->attachment_list[] = $actual_list[$i];
  516. 							$this->attachment_comment_list[] = $actual_comment_list[$i];
  517. 							$this->attachment_filename_list[] = $actual_filename_list[$i];
  518. 							$this->attachment_extension_list[] = $actual_extension_list[$i];
  519. 							$this->attachment_mimetype_list[] = $actual_mimetype_list[$i];
  520. 							$this->attachment_filesize_list[] = $actual_filesize_list[$i];
  521. 							$this->attachment_filetime_list[] = $actual_filetime_list[$i];
  522. 							$this->attachment_id_list[] = $actual_id_list[$i];
  523. 							$this->attachment_thumbnail_list[] = 0;
  524.  
  525. 							if ($actual_id_list[$i] == 0)
  526. 							{
  527. 								unlink_attach($actual_list[$i], MODE_THUMBNAIL);
  528. 							}
  529. 							else
  530. 							{
  531. 								$sql = 'UPDATE ' . ATTACHMENTS_DESC_TABLE . '
  532. 									SET thumbnail = 0
  533. 									WHERE attach_id = ' . (int) $actual_id_list[$i];
  534.  
  535. 								if (!($db->sql_query($sql)))
  536. 								{
  537. 									message_die(GENERAL_ERROR, 'Unable to update ' . ATTACHMENTS_DESC_TABLE . ' Table.', '', __LINE__, __FILE__, $sql);
  538. 								}
  539. 							}
  540. 						}
  541. 					}
  542. 				}
  543. 			}
  544. 			else if ($edit_attachment || $update_attachment || $add_attachment || $preview)
  545. 			{
  546. 				if ($edit_attachment)
  547. 				{
  548. 					$actual_comment_list = get_var('comment_list', array(''), true);
  549. 				
  550. 					$this->attachment_comment_list = array();
  551.  
  552. 					for ($i = 0; $i < sizeof($this->attachment_list); $i++)
  553. 					{
  554. 						$this->attachment_comment_list[$i] = $actual_comment_list[$i];
  555. 					}
  556. 				}
  557. 		
  558. 				if ($update_attachment)
  559. 				{
  560. 					if ($this->filename == '')
  561. 					{
  562. 						$error = TRUE;
  563. 						if(!empty($error_msg))
  564. 						{
  565. 							$error_msg .= '<br />';
  566. 						}
  567. 						$error_msg .= $lang['Error_empty_add_attachbox']; 
  568. 					}
  569.  
  570. 					$this->upload_attachment($this->page);
  571.  
  572. 					if (!$error)
  573. 					{
  574. 						$actual_list = get_var('attachment_list', array(''));
  575. 						$actual_id_list = get_var('attach_id_list', array(0));
  576. 				
  577. 						$attachment_id = 0;
  578. 						$actual_element = 0;
  579.  
  580. 						for ($i = 0; $i < sizeof($actual_id_list); $i++)
  581. 						{
  582. 							if (isset($HTTP_POST_VARS['update_attachment'][$actual_id_list[$i]]))
  583. 							{
  584. 								$attachment_id = intval($actual_id_list[$i]);
  585. 								$actual_element = $i;
  586. 							}
  587. 						}
  588.  
  589. 						$sql = 'SELECT physical_filename, comment, thumbnail 
  590. 							FROM ' . ATTACHMENTS_DESC_TABLE . '
  591. 							WHERE attach_id = ' . (int) $attachment_id;
  592.  
  593. 						if (!($result = $db->sql_query($sql)))
  594. 						{
  595. 							message_die(GENERAL_ERROR, 'Unable to select old Attachment Entry.', '', __LINE__, __FILE__, $sql);
  596. 						}
  597.  
  598. 						if ($db->sql_numrows($result) != 1)
  599. 						{
  600. 							$error = TRUE;
  601. 							if(!empty($error_msg))
  602. 							{
  603. 								$error_msg .= '<br />';
  604. 							}
  605. 							$error_msg .= $lang['Error_missing_old_entry'];
  606. 						}
  607.  
  608. 						$row = $db->sql_fetchrow($result);
  609. 						$db->sql_freeresult($result);
  610.  
  611. 						$comment = (trim($this->file_comment) == '') ? trim($row['comment']) : trim($this->file_comment);
  612.  
  613. 						$sql_ary = array(
  614. 							'physical_filename'		=> (string) basename($this->attach_filename),
  615. 							'real_filename'			=> (string) basename($this->filename),
  616. 							'comment'				=> (string) $comment,
  617. 							'extension'				=> (string) strtolower($this->extension),
  618. 							'mimetype'				=> (string) strtolower($this->type),
  619. 							'filesize'				=> (int) $this->filesize,
  620. 							'filetime'				=> (int) $this->filetime,
  621. 							'thumbnail'				=> (int) $this->thumbnail
  622. 						);
  623. 						
  624. 						$sql = 'UPDATE ' . ATTACHMENTS_DESC_TABLE . ' SET ' . attach_mod_sql_build_array('UPDATE', $sql_ary) . '
  625. 							WHERE attach_id = ' . (int) $attachment_id;
  626. 						
  627. 						if (!($db->sql_query($sql)))
  628. 						{
  629. 							message_die(GENERAL_ERROR, 'Unable to update the Attachment.', '', __LINE__, __FILE__, $sql);
  630. 						}
  631.  
  632. 						unlink_attach($row['physical_filename']);
  633.  
  634. 						if (intval($row['thumbnail']) == 1)
  635. 						{
  636. 							unlink_attach($row['physical_filename'], MODE_THUMBNAIL);
  637. 						}
  638.  
  639. 						$this->attachment_list[$actual_element] = $this->attach_filename;
  640. 						$this->attachment_comment_list[$actual_element] = $comment;
  641. 						$this->attachment_filename_list[$actual_element] = $this->filename;
  642. 						$this->attachment_extension_list[$actual_element] = $this->extension;
  643. 						$this->attachment_mimetype_list[$actual_element] = $this->type;
  644. 						$this->attachment_filesize_list[$actual_element] = $this->filesize;
  645. 						$this->attachment_filetime_list[$actual_element] = $this->filetime;
  646. 						$this->attachment_id_list[$actual_element] = $actual_id_list[$actual_element];
  647. 						$this->attachment_thumbnail_list[$actual_element] = $this->thumbnail;
  648. 						$this->file_comment = '';
  649. 					}
  650. 				}
  651. 				
  652. 				if (($add_attachment || $preview) && $this->filename != '')
  653. 				{
  654. 					if ($this->num_attachments < intval($max_attachments))
  655. 					{
  656. 						$this->upload_attachment($this->page);
  657.  
  658. 						if (!$error)
  659. 						{
  660. 							array_unshift($this->attachment_list, $this->attach_filename);
  661. 							array_unshift($this->attachment_comment_list, $this->file_comment);
  662. 							array_unshift($this->attachment_filename_list, $this->filename);
  663. 							array_unshift($this->attachment_extension_list, $this->extension);
  664. 							array_unshift($this->attachment_mimetype_list, $this->type);
  665. 							array_unshift($this->attachment_filesize_list, $this->filesize);
  666. 							array_unshift($this->attachment_filetime_list, $this->filetime);
  667. 							array_unshift($this->attachment_id_list, '0');
  668. 							array_unshift($this->attachment_thumbnail_list, $this->thumbnail);
  669.  
  670. 							$this->file_comment = '';
  671. 						}
  672. 					}
  673. 					else
  674. 					{
  675. 						$error = TRUE;
  676. 						if(!empty($error_msg))
  677. 						{
  678. 							$error_msg .= '<br />';
  679. 						}
  680. 						$error_msg .= sprintf($lang['Too_many_attachments'], intval($max_attachments)); 
  681. 					}
  682. 				}
  683. 			}
  684. 		}
  685.  
  686. 		return TRUE;
  687. 	}
  688.  
  689. 	function do_insert_attachment($mode, $message_type, $message_id)
  690. 	{
  691. 		global $db, $upload_dir;
  692.  
  693. 		if (intval($message_id) < 0)
  694. 		{
  695. 			return FALSE;
  696. 		}
  697.  
  698. 		if ($message_type == 'pm')
  699. 		{
  700. 			global $userdata, $to_userdata;
  701.  
  702. 			$post_id = 0;
  703. 			$privmsgs_id = (int) $message_id;
  704. 			$user_id_1 = (int) $userdata['user_id'];
  705. 			$user_id_2 = (int) $to_userdata['user_id'];
  706. 			$sql_id = 'privmsgs_id';
  707. 		}
  708. 		else if ($message_type = 'post')
  709. 		{
  710. 			global $post_info, $userdata;
  711.  
  712. 			$post_id = (int) $message_id;
  713. 			$privmsgs_id = 0;
  714. 			$user_id_1 = (isset($post_info['poster_id'])) ? (int) $post_info['poster_id'] : 0;
  715. 			$user_id_2 = 0;
  716. 			$sql_id = 'post_id';
  717.  
  718. 			if (!$user_id_1)
  719. 			{
  720. 				$user_id_1 = (int) $userdata['user_id'];
  721. 			}
  722. 		}
  723.  
  724. 		if ($mode == 'attach_list')
  725. 		{
  726. 			for ($i = 0; $i < sizeof($this->attachment_list); $i++)
  727. 			{
  728. 				if ($this->attachment_id_list[$i])
  729. 				{
  730. 					$sql = 'SELECT attach_id
  731. 						FROM ' . ATTACHMENTS_TABLE . '
  732. 						WHERE ' . $sql_id . ' = ' . $$sql_id . '
  733. 							AND attach_id = ' . $this->attachment_id_list[$i];
  734. 					$result = $db->sql_query($sql);
  735.  
  736. 					if (!$result)
  737. 					{
  738. 						message_die(GENERAL_ERROR, 'Unable to get attachment information.', '', __LINE__, __FILE__, $sql);
  739. 					}
  740.  
  741. 					$row = $db->sql_fetchrow($result);
  742. 					$db->sql_freeresult($result);
  743.  
  744. 					if (!$row)
  745. 					{
  746. 						message_die(GENERAL_ERROR, 'Tried to update an attachment you are not allowed to access', '');
  747. 					}
  748.  
  749. 					$sql = 'UPDATE ' . ATTACHMENTS_DESC_TABLE . " 
  750. 						SET comment = '" . attach_mod_sql_escape($this->attachment_comment_list[$i]) . "'
  751. 						WHERE attach_id = " . $this->attachment_id_list[$i];
  752.  
  753. 					if (!($db->sql_query($sql)))
  754. 					{
  755. 						message_die(GENERAL_ERROR, 'Unable to update the File Comment.', '', __LINE__, __FILE__, $sql);
  756. 					}
  757. 				}
  758. 				else
  759. 				{
  760. 					$sql_ary = array(
  761. 						'physical_filename'		=> (string) basename($this->attachment_list[$i]),
  762. 						'real_filename'			=> (string) basename($this->attachment_filename_list[$i]),
  763. 						'comment'				=> (string) $this->attachment_comment_list[$i],
  764. 						'extension'				=> (string) strtolower($this->attachment_extension_list[$i]),
  765. 						'mimetype'				=> (string) strtolower($this->attachment_mimetype_list[$i]),
  766. 						'filesize'				=> (int) $this->attachment_filesize_list[$i],
  767. 						'filetime'				=> (int) $this->attachment_filetime_list[$i],
  768. 						'thumbnail'				=> (int) $this->attachment_thumbnail_list[$i]
  769. 					);
  770. 					
  771. 					$sql = 'INSERT INTO ' . ATTACHMENTS_DESC_TABLE . ' ' . attach_mod_sql_build_array('INSERT', $sql_ary);
  772.  
  773. 					if (!($db->sql_query($sql)))
  774. 					{
  775. 						message_die(GENERAL_ERROR, 'Couldn\'t store Attachment.<br />Your ' . $message_type . ' has been stored.', '', __LINE__, __FILE__, $sql);
  776. 					}
  777.  
  778. 					$attach_id = $db->sql_nextid();
  779. 					
  780. 					$sql_ary = array(
  781. 						'attach_id'		=> (int) $attach_id,
  782. 						'post_id'		=> (int) $post_id,
  783. 						'privmsgs_id'	=> (int) $privmsgs_id,
  784. 						'user_id_1'		=> (int) $user_id_1,
  785. 						'user_id_2'		=> (int) $user_id_2
  786. 					);
  787.  
  788. 					$sql = 'INSERT INTO ' . ATTACHMENTS_TABLE . ' ' . attach_mod_sql_build_array('INSERT', $sql_ary);
  789. 					
  790. 					if (!($db->sql_query($sql)))
  791. 					{
  792. 						message_die(GENERAL_ERROR, 'Couldn\'t store Attachment.<br />Your ' . $message_type . ' has been stored.', '', __LINE__, __FILE__, $sql);
  793. 					}
  794. 				}
  795. 			}
  796. 	
  797. 			return TRUE;
  798. 		}
  799. 	
  800. 		if ($mode == 'last_attachment')
  801. 		{
  802. 			if ($this->post_attach && !isset($HTTP_POST_VARS['update_attachment']))
  803. 			{
  804. 				$sql_ary = array(
  805. 					'physical_filename'		=> (string) basename($this->attach_filename),
  806. 					'real_filename'			=> (string) basename($this->filename),
  807. 					'comment'				=> (string) $this->file_comment,
  808. 					'extension'				=> (string) strtolower($this->extension),
  809. 					'mimetype'				=> (string) strtolower($this->type),
  810. 					'filesize'				=> (int) $this->filesize,
  811. 					'filetime'				=> (int) $this->filetime,
  812. 					'thumbnail'				=> (int) $this->thumbnail
  813. 				);
  814. 					
  815. 				$sql = 'INSERT INTO ' . ATTACHMENTS_DESC_TABLE . ' ' . attach_mod_sql_build_array('INSERT', $sql_ary);
  816.  
  817. 				if (!($db->sql_query($sql)))
  818. 				{
  819. 					message_die(GENERAL_ERROR, 'Couldn\'t store Attachment.<br />Your ' . $message_type . ' has been stored.', '', __LINE__, __FILE__, $sql);
  820. 				}
  821.  
  822. 				$attach_id = $db->sql_nextid();
  823.  
  824. 				$sql_ary = array(
  825. 					'attach_id'		=> (int) $attach_id,
  826. 					'post_id'		=> (int) $post_id,
  827. 					'privmsgs_id'	=> (int) $privmsgs_id,
  828. 					'user_id_1'		=> (int) $user_id_1,
  829. 					'user_id_2'		=> (int) $user_id_2
  830. 				);
  831.  
  832. 				$sql = 'INSERT INTO ' . ATTACHMENTS_TABLE . ' ' . attach_mod_sql_build_array('INSERT', $sql_ary);
  833.  
  834. 				if (!($db->sql_query($sql)))
  835. 				{
  836. 					message_die(GENERAL_ERROR, 'Couldn\'t store Attachment.<br />Your ' . $message_type . ' has been stored.', '', __LINE__, __FILE__, $sql);
  837. 				}
  838. 			}
  839. 		}
  840. 	}
  841.  
  842. 	function display_attachment_bodies()
  843. 	{
  844. 		global $attach_config, $db, $is_auth, $lang, $mode, $phpEx, $template, $upload_dir, $userdata, $HTTP_POST_VARS, $forum_id, $browser_agent;
  845. 		global $phpbb_root_path;
  846.  
  847. 		$value_add = $value_posted = 0;
  848.  
  849. 		if (intval($attach_config['show_apcp']))
  850. 		{
  851. 			if (!empty($HTTP_POST_VARS['add_attachment_box']))
  852. 			{
  853. 				$value_add = ($this->add_attachment_body == 0) ? 1 : 0;
  854. 				$this->add_attachment_body = $value_add;
  855. 			}
  856. 			else
  857. 			{
  858. 				$value_add = ($this->add_attachment_body == 0) ? 0 : 1;
  859. 			}
  860. 		
  861. 			if (!empty($HTTP_POST_VARS['posted_attachments_box']))
  862. 			{
  863. 				$value_posted = ($this->posted_attachments_body == 0) ? 1 : 0;
  864. 				$this->posted_attachments_body = $value_posted;
  865. 			}
  866. 			else
  867. 			{
  868. 				$value_posted = ($this->posted_attachments_body == 0) ? 0 : 1;
  869. 			}
  870. 			$template->assign_block_vars('show_apcp', array());
  871. 		}
  872. 		else
  873. 		{
  874. 			$this->add_attachment_body = 1;
  875. 			$this->posted_attachments_body = 1;
  876. 		}
  877.  
  878. 		$template->set_filenames(array(
  879. 			'attachbody' => 'posting_attach_body.tpl')
  880. 		);
  881.  
  882. 		display_compile_cache_clear($template->files['attachbody'], 'attachbody');
  883.  
  884. 		$s_hidden = '<input type="hidden" name="add_attachment_body" value="' . $value_add . '" />';
  885. 		$s_hidden .= '<input type="hidden" name="posted_attachments_body" value="' . $value_posted . '" />';
  886.  
  887. 		if ($this->page == PAGE_PRIVMSGS)
  888. 		{
  889. 			$u_rules_id = 0;
  890. 		}
  891. 		else
  892. 		{
  893. 			$u_rules_id = $forum_id;
  894. 		}
  895.  
  896. 		$template->assign_vars(array(
  897. 			'L_ATTACH_POSTING_CP'			=> $lang['Attach_posting_cp'],
  898. 			'L_ATTACH_POSTING_CP_EXPLAIN'	=> $lang['Attach_posting_cp_explain'],
  899. 			'L_OPTIONS'						=> $lang['Options'],
  900. 			'L_ADD_ATTACHMENT_TITLE'		=> $lang['Add_attachment_title'],
  901. 			'L_POSTED_ATTACHMENTS'			=> $lang['Posted_attachments'],
  902. 			'L_FILE_NAME'					=> $lang['File_name'],
  903. 			'L_FILE_COMMENT'				=> $lang['File_comment'],
  904. 			'RULES'							=> '<a href="' . append_sid($phpbb_root_path . "rules.$phpEx?mode=attach&amp;f=$u_rules_id") . '">' . $lang['Allowed_extensions_and_sizes'] . '</a>',
  905.  
  906. 			'S_HIDDEN' => $s_hidden)
  907. 		);
  908.  
  909. 		$attachments = array();
  910.  
  911. 		if (sizeof($this->attachment_list) > 0)
  912. 		{
  913. 			if (intval($attach_config['show_apcp']))
  914. 			{
  915. 				$template->assign_block_vars('switch_posted_attachments', array());
  916. 			}
  917.  
  918. 			for ($i = 0; $i < sizeof($this->attachment_list); $i++)
  919. 			{
  920. 				$hidden =  '<input type="hidden" name="attachment_list[]" value="' . $this->attachment_list[$i] . '" />';
  921. 				$hidden .= '<input type="hidden" name="filename_list[]" value="' . $this->attachment_filename_list[$i] . '" />';
  922. 				$hidden .= '<input type="hidden" name="extension_list[]" value="' . $this->attachment_extension_list[$i] . '" />';
  923. 				$hidden .= '<input type="hidden" name="mimetype_list[]" value="' . $this->attachment_mimetype_list[$i] . '" />';
  924. 				$hidden .= '<input type="hidden" name="filesize_list[]" value="' . $this->attachment_filesize_list[$i] . '" />';
  925. 				$hidden .= '<input type="hidden" name="filetime_list[]" value="' . $this->attachment_filetime_list[$i] . '" />';
  926. 				$hidden .= '<input type="hidden" name="attach_id_list[]" value="' . $this->attachment_id_list[$i] . '" />';
  927. 				$hidden .= '<input type="hidden" name="attach_thumbnail_list[]" value="' . $this->attachment_thumbnail_list[$i] . '" />';
  928.  
  929. 				if (!$this->posted_attachments_body || sizeof($this->attachment_list) == 0)
  930. 				{
  931. 					$hidden .= '<input type="hidden" name="comment_list[]" value="' . $this->attachment_comment_list[$i] . '" />';
  932. 				}
  933. 				
  934. 				$template->assign_block_vars('hidden_row', array(
  935. 					'S_HIDDEN' => $hidden)
  936. 				);
  937. 			}
  938. 		}
  939.  
  940. 		if ($this->add_attachment_body)
  941. 		{
  942. 			init_display_template('attachbody', '{ADD_ATTACHMENT_BODY}', 'add_attachment_body.tpl');
  943.  
  944. 		if ($userdata['user_attach_mod'] || $browser_agent !== 'other')
  945. 		{
  946. 			$form_enctype = 'enctype="multipart/form-data"';
  947. 		} else {
  948. 			$form_enctype = '';
  949. 		}
  950.  
  951. 			$template->assign_vars(array(
  952. 				'L_ADD_ATTACH_TITLE'	=> $lang['Add_attachment_title'],
  953. 				'L_ADD_ATTACH_EXPLAIN'	=> $lang['Add_attachment_explain'],
  954. 				'L_ADD_ATTACHMENT'		=> $lang['Add_attachment'],
  955.  
  956. 				'FILE_COMMENT'			=> $this->file_comment,
  957. 				'FILESIZE'				=> $attach_config['max_filesize'],
  958. 				'FILENAME'				=> $this->filename,
  959.  
  960. 				'S_FORM_ENCTYPE'		=> $form_enctype)	
  961. 			);
  962. 		if ($userdata['user_attach_mod'] || $browser_agent !== 'other')
  963. 		{
  964. 		$template->assign_block_vars('attach_on', array() );
  965. 		}
  966. 		}
  967.  
  968. 		if ($this->posted_attachments_body && sizeof($this->attachment_list) > 0)
  969. 		{
  970. 			init_display_template('attachbody', '{POSTED_ATTACHMENTS_BODY}', 'posted_attachments_body.tpl');
  971.  
  972. 			$template->assign_vars(array(
  973. 				'L_POSTED_ATTACHMENTS'	=> $lang['Posted_attachments'],
  974. 				'L_UPDATE_COMMENT'		=> $lang['Update_comment'],
  975. 				'L_UPLOAD_NEW_VERSION'	=> $lang['Upload_new_version'],
  976. 				'L_DELETE_ATTACHMENT'	=> $lang['Delete_attachment'],
  977. 				'L_DELETE_THUMBNAIL'	=> $lang['Delete_thumbnail'],
  978. 				'L_OPTIONS'				=> $lang['Options'])
  979. 			);
  980.  
  981. 			for ($i = 0; $i < sizeof($this->attachment_list); $i++)
  982. 			{
  983. 				if ($this->attachment_id_list[$i] == 0)
  984. 				{
  985. 					$download_link = $upload_dir . '/' . basename($this->attachment_list[$i]);
  986. 				}
  987. 				else
  988. 				{
  989. 					$download_link = append_sid($phpbb_root_path . 'download.' . $phpEx . '?id=' . $this->attachment_id_list[$i]);
  990. 				}
  991.  
  992. 				$template->assign_block_vars('attach_row', array(
  993. 					'FILE_NAME'			=> $this->attachment_filename_list[$i],
  994. 					'ATTACH_FILENAME'	=> $this->attachment_list[$i],
  995. 					'FILE_COMMENT'		=> $this->attachment_comment_list[$i],
  996. 					'ATTACH_ID'			=> $this->attachment_id_list[$i],
  997.  
  998. 					'U_VIEW_ATTACHMENT'	=> $download_link)
  999. 				);
  1000.  
  1001. 				if (intval($this->attachment_thumbnail_list[$i]) == 1 && ((isset($is_auth['auth_mod']) && $is_auth['auth_mod']) || $userdata['user_level'] == ADMIN))
  1002. 				{
  1003. 					$template->assign_block_vars('attach_row.switch_thumbnail', array());
  1004. 				}
  1005.  
  1006. 				if ($this->attachment_id_list[$i])
  1007. 				{
  1008. 					$template->assign_block_vars('attach_row.switch_update_attachment', array());
  1009. 				}
  1010. 			}
  1011. 		}
  1012.  
  1013. 		$template->assign_var_from_handle('ATTACHBOX', 'attachbody');
  1014. 	}
  1015.  
  1016. 	function upload_attachment()
  1017. 	{
  1018. 		global $HTTP_POST_FILES, $db, $HTTP_POST_VARS, $error, $error_msg, $lang, $attach_config, $userdata, $upload_dir, $forum_id, $importurl;
  1019. 		
  1020. 		$this->post_attach = ($this->filename != '') ? TRUE : FALSE;
  1021.  
  1022. 		if ($this->post_attach) 
  1023. 		{
  1024. 			$r_file = trim(basename(htmlspecialchars($this->filename)));
  1025. 			$file = $HTTP_POST_FILES['fileupload']['tmp_name'];
  1026. 			$this->type = $HTTP_POST_FILES['fileupload']['type'];
  1027.  
  1028. 			if ($importurl == NULL && isset($HTTP_POST_FILES['fileupload']['size']) && $HTTP_POST_FILES['fileupload']['size'] == 0)
  1029. 			{
  1030. 				message_die(GENERAL_ERROR, 'Tried to upload empty file');
  1031. 			}
  1032.  
  1033. 			$this->type = (strstr($this->type, '; name')) ? str_replace(strstr($this->type, '; name'), '', $this->type) : $this->type;
  1034. 			$this->type = strtolower($this->type);
  1035. 			$this->extension = strtolower(get_extension($this->filename));
  1036.  
  1037. 			$this->filesize = @filesize($file);
  1038. 			$this->filesize = intval($this->filesize);
  1039.  
  1040. 			$sql = 'SELECT g.allow_group, g.max_filesize, g.cat_id, g.forum_permissions
  1041. 				FROM ' . EXTENSION_GROUPS_TABLE . ' g, ' . EXTENSIONS_TABLE . " e
  1042. 				WHERE g.group_id = e.group_id
  1043. 					AND e.extension = '" . attach_mod_sql_escape($this->extension) . "'
  1044. 				LIMIT 1";
  1045.  
  1046. 			if (!($result = $db->sql_query($sql)))
  1047. 			{
  1048. 				message_die(GENERAL_ERROR, 'Could not query Extensions.', '', __LINE__, __FILE__, $sql);
  1049. 			}
  1050.  
  1051. 			$row = $db->sql_fetchrow($result);
  1052. 			$db->sql_freeresult($result);
  1053.  
  1054. 			$allowed_filesize = ($row['max_filesize']) ? $row['max_filesize'] : $attach_config['max_filesize'];
  1055. 			$cat_id = intval($row['cat_id']);
  1056. 			$auth_cache = trim($row['forum_permissions']);
  1057.  
  1058. 			if (preg_match("#[\\/:*?\"<>|]#i", $this->filename))
  1059. 			{ 
  1060. 				$error = TRUE;
  1061. 				if(!empty($error_msg))
  1062. 				{
  1063. 					$error_msg .= '<br />';
  1064. 				}
  1065. 				$error_msg .= sprintf($lang['Invalid_filename'], htmlspecialchars($this->filename));
  1066. 			}
  1067.  
  1068. 			if (!$error && $file == 'none') 
  1069. 			{
  1070. 				$error = TRUE;
  1071. 				if(!empty($error_msg))
  1072. 				{
  1073. 					$error_msg .= '<br />';
  1074. 				}
  1075. 				$ini_val = ( phpversion() >= '4.0.0' ) ? 'ini_get' : 'get_cfg_var';
  1076. 		
  1077. 				$max_size = @$ini_val('upload_max_filesize');
  1078.  
  1079. 				if ($max_size == '')
  1080. 				{
  1081. 					$error_msg .= $lang['Attachment_php_size_na']; 
  1082. 				}
  1083. 				else
  1084. 				{
  1085. 					$error_msg .= sprintf($lang['Attachment_php_size_overrun'], $max_size); 
  1086. 				}
  1087. 			}
  1088.  
  1089. 			if (!$error && intval($row['allow_group']) == 0)
  1090. 			{
  1091. 				$error = TRUE;
  1092. 				if(!empty($error_msg))
  1093. 				{
  1094. 					$error_msg .= '<br />';
  1095. 				}
  1096. 				$error_msg .= sprintf($lang['Disallowed_extension'], htmlspecialchars($this->extension));
  1097. 			} 
  1098.  
  1099. 			if (!$error && $this->page != PAGE_PRIVMSGS && $userdata['user_level'] != ADMIN && !is_forum_authed($auth_cache, $forum_id) && trim($auth_cache) != '')
  1100. 			{
  1101. 				$error = TRUE;
  1102. 				if(!empty($error_msg))
  1103. 				{
  1104. 					$error_msg .= '<br />';
  1105. 				}
  1106. 				$error_msg .= sprintf($lang['Disallowed_extension_within_forum'], htmlspecialchars($this->extension));
  1107. 			} 
  1108.  
  1109. 			$this->thumbnail = 0;
  1110. 				
  1111. 			if (!$error) 
  1112. 			{
  1113. 				$this->filetime = time(); 
  1114. 				$this->filename = $r_file;
  1115. 				$this->attach_filename = strtolower($this->filename);
  1116.  
  1117. 				$cryptic = false;
  1118.  
  1119. 				if (!$cryptic)
  1120. 				{
  1121. 					$this->attach_filename = html_entity_decode(trim(stripslashes($this->attach_filename)));
  1122. 					$this->attach_filename = delete_extension($this->attach_filename);
  1123. 					$this->attach_filename = str_replace(array(' ','-'), array('_','_'), $this->attach_filename);
  1124. 					$this->attach_filename = str_replace('__', '_', $this->attach_filename);
  1125. 					$this->attach_filename = str_replace(array(',', '.', '!', '?', 'ь', 'Ь', 'ц', 'Ц', 'д', 'Д', ';', ':', '@', "'", '"', '&'), array('', '', '', '', 'ue', 'ue', 'oe', 'oe', 'ae', 'ae', '', '', '', '', '', 'and'), $this->attach_filename);
  1126. 					$this->attach_filename = str_replace(array('$', 'Я', '>','<','§','%','=','/','(',')','#','*','+',"\\",'{','}','[',']'), array('dollar', 'ss','greater','lower','paragraph','percent','equal','','','','','','','','','','',''), $this->attach_filename);
  1127. 					$this->attach_filename = preg_replace("/([\xC2\xC3])([\x80-\xBF])/e", "chr(ord('\\1')<<6&0xC0|ord('\\2')&0x3F)", $this->attach_filename);
  1128. 					$this->attach_filename = rawurlencode($this->attach_filename);
  1129. 					$this->attach_filename = preg_replace("/(%[0-9A-F]{1,2})/i", '', $this->attach_filename);
  1130. 					$this->attach_filename = trim($this->attach_filename);
  1131.  
  1132. 					$new_filename = $this->attach_filename;
  1133.  
  1134. 					if (!$new_filename)
  1135. 					{
  1136. 						$u_id = (intval($userdata['user_id']) == ANONYMOUS) ? 0 : intval($userdata['user_id']);
  1137. 						$new_filename = $u_id . '_' . $this->filetime . '.' . $this->extension;
  1138. 					}
  1139.  
  1140. 					do
  1141. 					{
  1142. 						$this->attach_filename = $new_filename . '_' . substr(rand(), 0, 3) . '.' . $this->extension;
  1143. 					}
  1144. 					while (physical_filename_already_stored($this->attach_filename));
  1145.  
  1146. 					unset($new_filename);
  1147. 				}
  1148. 				else
  1149. 				{
  1150. 					$u_id = (intval($userdata['user_id']) == ANONYMOUS) ? 0 : intval($userdata['user_id']);
  1151. 					$this->attach_filename = $u_id . '_' . $this->filetime . '.' . $this->extension;
  1152. 				}
  1153.  
  1154. 				if ($cat_id == IMAGE_CAT && intval($attach_config['img_create_thumbnail']))
  1155. 				{
  1156. 					$this->thumbnail = 1;
  1157. 				}
  1158. 			}
  1159.  
  1160. 			if ($error) 
  1161. 			{
  1162. 				$this->post_attach = FALSE;
  1163. 				return;
  1164. 			}
  1165.  
  1166. 			if (!$error) 
  1167. 			{
  1168. 				if (!(intval($attach_config['allow_ftp_upload'])))
  1169. 				{
  1170. 					$ini_val = ( phpversion() >= '4.0.0' ) ? 'ini_get' : 'get_cfg_var';
  1171. 		
  1172. 					$safe_mode = @$ini_val('safe_mode');
  1173.  
  1174. 					if (@$ini_val('open_basedir'))
  1175. 					{
  1176. 						if (@phpversion() < '4.0.3')
  1177. 						{
  1178. 							$upload_mode = 'copy';
  1179. 						}
  1180. 						else
  1181. 						{
  1182. 							$upload_mode = 'move';
  1183. 						}
  1184. 					}
  1185. 					else if (@$ini_val('safe_mode'))
  1186. 					{
  1187. 						$upload_mode = 'move';
  1188. 					}
  1189. 					else
  1190. 					{
  1191. 						$upload_mode = 'copy';
  1192. 					}
  1193. 				}
  1194. 				else
  1195. 				{
  1196. 					$upload_mode = 'ftp';
  1197. 				}
  1198.  
  1199. 				if (!$error)
  1200. 				{
  1201. 					$this->move_uploaded_attachment($upload_mode, $file);
  1202. 				}
  1203. 			}
  1204.  
  1205. 			if (!$error)
  1206. 			{
  1207. 				if ($upload_mode != 'ftp' && !$this->filesize)
  1208. 				{
  1209. 					$this->filesize = intval(@filesize($upload_dir . '/' . $this->attach_filename));
  1210. 				}
  1211. 			}
  1212.  
  1213. 			if ($cat_id == IMAGE_CAT || strpos($this->type, 'image/') === 0)
  1214. 			{
  1215. 				$img_info = @getimagesize($upload_dir . '/' . $this->attach_filename);
  1216.  
  1217. 				if ($img_info === false)
  1218. 				{
  1219. 					$error = TRUE;
  1220. 					if(!empty($error_msg))
  1221. 					{
  1222. 						$error_msg .= '<br />';
  1223. 					}
  1224. 					$error_msg .= sprintf($lang['General_upload_error'], './' . $upload_dir . '/' . $this->attach_filename);
  1225. 				}
  1226. 				else
  1227. 				{
  1228. 					$types = array(
  1229. 						1 => array('gif'),
  1230. 						2 => array('jpg', 'jpeg'),
  1231. 						3 => array('png'),
  1232. 						4 => array('swf'),
  1233. 						5 => array('psd'),
  1234. 						6 => array('bmp'),
  1235. 						7 => array('tif', 'tiff'),
  1236. 						8 => array('tif', 'tiff'),
  1237. 						9 => array('jpg', 'jpeg'),
  1238. 						10 => array('jpg', 'jpeg'),
  1239. 						11 => array('jpg', 'jpeg'),
  1240. 						12 => array('jpg', 'jpeg'),
  1241. 						13 => array('swc'),
  1242. 						14 => array('iff'),
  1243. 						15 => array('wbmp'),
  1244. 						16 => array('xbm'),
  1245. 					);
  1246.  
  1247. 					if (!isset($types[$img_info[2]]))
  1248. 					{
  1249. 						$error = TRUE;
  1250. 						if(!empty($error_msg))
  1251. 						{
  1252. 							$error_msg .= '<br />';
  1253. 						}
  1254. 						$error_msg .= sprintf($lang['General_upload_error'], './' . $upload_dir . '/' . $this->attach_filename);
  1255. 					}
  1256. 					else if (!in_array($this->extension, $types[$img_info[2]]))
  1257. 					{
  1258. 						$error = TRUE;
  1259. 						if(!empty($error_msg))
  1260. 						{
  1261. 							$error_msg .= '<br />';
  1262. 						}
  1263. 						$error_msg .= sprintf($lang['General_upload_error'], './' . $upload_dir . '/' . $this->attach_filename);
  1264. 						$error_msg .= "<br />Filetype mismatch: expected {$types[$img_info[2]][0]} but {$this->extension} given.";
  1265. 					}
  1266. 				}
  1267. 			}
  1268.  
  1269. 			if (!$error && $userdata['user_level'] != ADMIN && $cat_id == IMAGE_CAT)
  1270. 			{
  1271. 				list($width, $height) = image_getdimension($upload_dir . '/' . $this->attach_filename);
  1272.  
  1273. 				if ($width != 0 && $height != 0 && intval($attach_config['img_max_width']) != 0 && intval($attach_config['img_max_height']) != 0)
  1274. 				{
  1275. 					if ($width > intval($attach_config['img_max_width']) || $height > intval($attach_config['img_max_height']))
  1276. 					{
  1277. 						$error = TRUE;
  1278. 						if(!empty($error_msg))
  1279. 						{
  1280. 							$error_msg .= '<br />';
  1281. 						}
  1282. 						$error_msg .= sprintf($lang['Error_imagesize'], intval($attach_config['img_max_width']), intval($attach_config['img_max_height']));
  1283. 					}
  1284. 				}
  1285. 			}
  1286.  
  1287. 			if (!$error && $allowed_filesize != 0 && $this->filesize > $allowed_filesize && $userdata['user_level'] != ADMIN)
  1288. 			{
  1289. 				$size_lang = ($allowed_filesize >= 1048576) ? $lang['MB'] : ( ($allowed_filesize >= 1024) ? $lang['KB'] : $lang['Bytes'] );
  1290.  
  1291. 				if ($allowed_filesize >= 1048576)
  1292. 				{
  1293. 					$allowed_filesize = round($allowed_filesize / 1048576 * 100) / 100;
  1294. 				}
  1295. 				else if ($allowed_filesize >= 1024)
  1296. 				{
  1297. 					$allowed_filesize = round($allowed_filesize / 1024 * 100) / 100;
  1298. 				}
  1299. 			
  1300. 				$error = TRUE;
  1301. 				if(!empty($error_msg))
  1302. 				{
  1303. 					$error_msg .= '<br />';
  1304. 				}
  1305. 				$error_msg .= sprintf($lang['Attachment_too_big'], $allowed_filesize, $size_lang); 
  1306. 			}
  1307.  
  1308. 			if ($attach_config['attachment_quota'])
  1309. 			{
  1310. 				$sql = 'SELECT sum(filesize) as total FROM ' . ATTACHMENTS_DESC_TABLE;
  1311.  
  1312. 				if (!($result = $db->sql_query($sql)))
  1313. 				{
  1314. 					message_die(GENERAL_ERROR, 'Could not query total filesize', '', __LINE__, __FILE__, $sql);
  1315. 				}
  1316.  
  1317. 				$row = $db->sql_fetchrow($result);
  1318. 				$db->sql_freeresult($result);
  1319.  
  1320. 				$total_filesize = $row['total'];
  1321.  
  1322. 				if (($total_filesize + $this->filesize) > $attach_config['attachment_quota'])
  1323. 				{
  1324. 					$error = TRUE;
  1325. 					if(!empty($error_msg))
  1326. 					{
  1327. 						$error_msg .= '<br />';
  1328. 					}
  1329. 					$error_msg .= $lang['Attach_quota_reached'];
  1330. 				}
  1331.  
  1332. 			}
  1333.  
  1334. 			$this->get_quota_limits($userdata);
  1335.  
  1336. 			if ($this->page != PAGE_PRIVMSGS)
  1337. 			{
  1338. 				if ($attach_config['upload_filesize_limit'])
  1339. 				{
  1340. 					$sql = 'SELECT attach_id 
  1341. 						FROM ' . ATTACHMENTS_TABLE . '
  1342. 						WHERE user_id_1 = ' . (int) $userdata['user_id'] . '
  1343. 							AND privmsgs_id = 0
  1344. 						GROUP BY attach_id';
  1345. 		
  1346. 					if (!($result = $db->sql_query($sql)))
  1347. 					{
  1348. 						message_die(GENERAL_ERROR, 'Couldn\'t query attachments', '', __LINE__, __FILE__, $sql);
  1349. 					}
  1350. 		
  1351. 					$attach_ids = $db->sql_fetchrowset($result);
  1352. 					$num_attach_ids = $db->sql_numrows($result);
  1353. 					$db->sql_freeresult($result);
  1354.  
  1355. 					$attach_id = array();
  1356.  
  1357. 					for ($i = 0; $i < $num_attach_ids; $i++)
  1358. 					{
  1359. 						$attach_id[] = intval($attach_ids[$i]['attach_id']);
  1360. 					}
  1361. 			
  1362. 					if ($num_attach_ids > 0)
  1363. 					{
  1364. 						$sql = 'SELECT sum(filesize) as total
  1365. 							FROM ' . ATTACHMENTS_DESC_TABLE . '
  1366. 							WHERE attach_id IN (' . implode(', ', $attach_id) . ')';
  1367.  
  1368. 						if (!($result = $db->sql_query($sql)))
  1369. 						{
  1370. 							message_die(GENERAL_ERROR, 'Could not query total filesize', '', __LINE__, __FILE__, $sql);
  1371. 						}
  1372.  
  1373. 						$row = $db->sql_fetchrow($result);
  1374. 						$db->sql_freeresult($result);
  1375. 						$total_filesize = $row['total'];
  1376. 					}
  1377. 					else
  1378. 					{
  1379. 						$total_filesize = 0;
  1380. 					}
  1381.  
  1382. 					if (($total_filesize + $this->filesize) > $attach_config['upload_filesize_limit'])
  1383. 					{
  1384. 						$upload_filesize_limit = $attach_config['upload_filesize_limit'];
  1385. 						$size_lang = ($upload_filesize_limit >= 1048576) ? $lang['MB'] : ( ($upload_filesize_limit >= 1024) ? $lang['KB'] : $lang['Bytes'] );
  1386.  
  1387. 						if ($upload_filesize_limit >= 1048576)
  1388. 						{
  1389. 							$upload_filesize_limit = round($upload_filesize_limit / 1048576 * 100) / 100;
  1390. 						}
  1391. 						else if ($upload_filesize_limit >= 1024)
  1392. 						{
  1393. 							$upload_filesize_limit = round($upload_filesize_limit / 1024 * 100) / 100;
  1394. 						}
  1395. 			
  1396. 						$error = TRUE;
  1397. 						if(!empty($error_msg))
  1398. 						{
  1399. 							$error_msg .= '<br />';
  1400. 						}
  1401. 						$error_msg .= sprintf($lang['User_upload_quota_reached'], $upload_filesize_limit, $size_lang);
  1402. 					}
  1403. 				}
  1404. 			}
  1405.  
  1406. 			if ($this->page == PAGE_PRIVMSGS)
  1407. 			{
  1408. 				if ($attach_config['pm_filesize_limit'])
  1409. 				{
  1410. 					$total_filesize = get_total_attach_pm_filesize('from_user', $userdata['user_id']);
  1411.  
  1412. 					if (($total_filesize + $this->filesize) > $attach_config['pm_filesize_limit']) 
  1413. 					{
  1414. 						$error = TRUE;
  1415. 						if(!empty($error_msg))
  1416. 						{
  1417. 							$error_msg .= '<br />';
  1418. 						}
  1419. 						$error_msg .= $lang['Attach_quota_sender_pm_reached'];
  1420. 					}
  1421. 				}
  1422.  
  1423. 				$to_user = (isset($HTTP_POST_VARS['username']) ) ? $HTTP_POST_VARS['username'] : '';
  1424.  
  1425. 				if (!empty($to_user) && $userdata['user_level'] != ADMIN)
  1426. 				{
  1427. 					$u_data = get_userdata($to_user, true);
  1428.  
  1429. 					$user_id = (int) $u_data['user_id'];
  1430. 					$this->get_quota_limits($u_data, $user_id);
  1431. 					
  1432. 					if ($attach_config['pm_filesize_limit'])
  1433. 					{
  1434. 						$total_filesize = get_total_attach_pm_filesize('to_user', $user_id);
  1435. 						
  1436. 						if (($total_filesize + $this->filesize) > $attach_config['pm_filesize_limit']) 
  1437. 						{
  1438. 							$error = TRUE;
  1439. 							if(!empty($error_msg))
  1440. 							{
  1441. 								$error_msg .= '<br />';
  1442. 							}
  1443. 							$error_msg .= sprintf($lang['Attach_quota_receiver_pm_reached'], $to_user);
  1444. 						}
  1445. 					}
  1446. 				}
  1447. 			}
  1448.  
  1449. 			if ($error) 
  1450. 			{
  1451. 				unlink_attach($this->attach_filename);
  1452. 				unlink_attach($this->attach_filename, MODE_THUMBNAIL);
  1453. 				$this->post_attach = FALSE;
  1454. 			}
  1455. 		}
  1456. 	}
  1457.  
  1458. 	function move_uploaded_attachment($upload_mode, $file)
  1459. 	{
  1460. 		global $error, $error_msg, $lang, $upload_dir, $importurl;
  1461.  
  1462. 		if (!is_uploaded_file($file) && !$importurl)
  1463. 		{
  1464. 			message_die(GENERAL_ERROR, 'Unable to upload file. The given source has not been uploaded.', __LINE__, __FILE__);
  1465. 		}
  1466.  
  1467. 		switch ($upload_mode)
  1468. 		{
  1469. 			case 'copy':
  1470. 				
  1471. 				if (!@copy($file, $upload_dir . '/' . basename($this->attach_filename)))
  1472. 				{
  1473. 					if (!@move_uploaded_file($file, $upload_dir . '/' . basename($this->attach_filename))) 
  1474. 					{
  1475. 						$error = TRUE;
  1476. 						if(!empty($error_msg))
  1477. 						{
  1478. 							$error_msg .= '<br />';
  1479. 						}
  1480. 						$error_msg .= sprintf($lang['General_upload_error'], './' . $upload_dir . '/' . $this->attach_filename);
  1481. 						return;
  1482. 					}
  1483. 				} 
  1484. 				@chmod($upload_dir . '/' . basename($this->attach_filename), 0666);
  1485.  
  1486. 			break;
  1487.  
  1488. 			case 'move':
  1489.  
  1490. 				if (!@move_uploaded_file($file, $upload_dir . '/' . basename($this->attach_filename)))
  1491. 				{ 
  1492. 					if (!@copy($file, $upload_dir . '/' . basename($this->attach_filename)))
  1493. 					{
  1494. 						$error = TRUE;
  1495. 						if(!empty($error_msg))
  1496. 						{
  1497. 							$error_msg .= '<br />';
  1498. 						}
  1499. 						$error_msg .= sprintf($lang['General_upload_error'], './' . $upload_dir . '/' . $this->attach_filename);
  1500. 						return;
  1501. 					}
  1502. 				} 
  1503. 				@chmod($upload_dir . '/' . $this->attach_filename, 0666);
  1504.  
  1505. 			break;
  1506.  
  1507. 			case 'ftp':
  1508. 				ftp_file($file, basename($this->attach_filename), $this->type);
  1509. 			break;
  1510. 		}
  1511.  
  1512. 		if (!$error && $this->thumbnail == 1)
  1513. 		{
  1514. 			if ($upload_mode == 'ftp')
  1515. 			{
  1516. 				$source = $file;
  1517. 				$dest_file = THUMB_DIR . '/t_' . basename($this->attach_filename);
  1518. 			}
  1519. 			else
  1520. 			{
  1521. 				$source = $upload_dir . '/' . basename($this->attach_filename);
  1522. 				$dest_file = amod_realpath($upload_dir);
  1523. 				$dest_file .= '/' . THUMB_DIR . '/t_' . basename($this->attach_filename);
  1524. 			}
  1525.  
  1526. 			if (!create_thumbnail($source, $dest_file, $this->type))
  1527. 			{
  1528. 				if (!$file || !create_thumbnail($file, $dest_file, $this->type))
  1529. 				{
  1530. 					$this->thumbnail = 0;
  1531. 				}
  1532. 			}
  1533. 		}
  1534. 	}
  1535. }
  1536.  
  1537. class attach_posting extends attach_parent
  1538. {
  1539. 	function attach_posting()
  1540. 	{
  1541. 		$this->attach_parent();
  1542. 		$this->page = 0;
  1543. 	}
  1544. 	function preview_attachments()
  1545. 	{
  1546. 		global $attach_config, $is_auth, $userdata;
  1547.  
  1548. 		if (intval($attach_config['disable_mod']) || !$is_auth['auth_attachments'])
  1549. 		{
  1550. 			return FALSE;
  1551. 		}
  1552. 	
  1553. 		display_attachments_preview($this->attachment_list, $this->attachment_filesize_list, $this->attachment_filename_list, $this->attachment_comment_list, $this->attachment_extension_list, $this->attachment_thumbnail_list);
  1554. 	}
  1555. 	function insert_attachment($post_id)
  1556. 	{
  1557. 		global $db, $is_auth, $mode, $userdata, $error, $error_msg;
  1558.  
  1559. 		if (!empty($post_id) && ($mode == 'newtopic' || $mode == 'reply' || $mode == 'editpost') && $is_auth['auth_attachments'])
  1560. 		{
  1561. 			$this->do_insert_attachment('attach_list', 'post', $post_id);
  1562. 			$this->do_insert_attachment('last_attachment', 'post', $post_id);
  1563.  
  1564. 			if ((sizeof($this->attachment_list) > 0 || $this->post_attach) && !isset($HTTP_POST_VARS['update_attachment']))
  1565. 			{
  1566. 				$sql = 'UPDATE ' . POSTS_TABLE . '
  1567. 					SET post_attachment = 1
  1568. 					WHERE post_id = ' . (int) $post_id;
  1569.  
  1570. 				if (!($db->sql_query($sql)))
  1571. 				{
  1572. 					message_die(GENERAL_ERROR, 'Unable to update Posts Table.', '', __LINE__, __FILE__, $sql);
  1573. 				}
  1574.  
  1575. 				$sql = 'SELECT topic_id 
  1576. 					FROM ' . POSTS_TABLE . '
  1577. 					WHERE post_id = ' . (int) $post_id;
  1578. 				
  1579. 				if (!($result = $db->sql_query($sql)))
  1580. 				{
  1581. 					message_die(GENERAL_ERROR, 'Unable to select Posts Table.', '', __LINE__, __FILE__, $sql);
  1582. 				}
  1583.  
  1584. 				$row = $db->sql_fetchrow($result);
  1585. 				$db->sql_freeresult($result);
  1586.  
  1587. 				$sql = 'UPDATE ' . TOPICS_TABLE . '
  1588. 					SET topic_attachment = 1
  1589. 					WHERE topic_id = ' . (int) $row['topic_id'];
  1590.  
  1591. 				if (!($db->sql_query($sql)))
  1592. 				{
  1593. 					message_die(GENERAL_ERROR, 'Unable to update Topics Table.', '', __LINE__, __FILE__, $sql);
  1594. 				}
  1595. 			}
  1596. 		}
  1597. 	}
  1598.  
  1599. 	function posting_attachment_mod()
  1600. 	{
  1601. 		global $mode, $confirm, $is_auth, $post_id, $delete, $refresh, $HTTP_POST_VARS;
  1602.  
  1603. 		if (!$refresh)
  1604. 		{
  1605. 			$add_attachment_box = (!empty($HTTP_POST_VARS['add_attachment_box'])) ? TRUE : FALSE;
  1606. 			$posted_attachments_box = (!empty($HTTP_POST_VARS['posted_attachments_box'])) ? TRUE : FALSE;
  1607.  
  1608. 			$refresh = $add_attachment_box || $posted_attachments_box;
  1609. 		}
  1610.  
  1611. 		$result = $this->handle_attachments($mode);
  1612.  
  1613. 		if ($result === false)
  1614. 		{
  1615. 			return;
  1616. 		}
  1617.  
  1618. 		if ($confirm && ($delete || $mode == 'delete' || $mode == 'editpost') && ($is_auth['auth_delete'] || $is_auth['auth_mod']))
  1619. 		{
  1620. 			if ($post_id)
  1621. 			{
  1622. 				delete_attachment($post_id);
  1623. 			}
  1624. 		}
  1625.  
  1626. 		$this->display_attachment_bodies();
  1627. 	}
  1628.  
  1629. }
  1630.  
  1631. function execute_posting_attachment_handling()
  1632. {
  1633. 	global $attachment_mod;
  1634.  
  1635. 	$attachment_mod['posting'] = new attach_posting();
  1636. 	$attachment_mod['posting']->posting_attachment_mod();
  1637. }
  1638.  
  1639. ?>