root/chat.php

<?php</span>
<span class="code-lang">$root_path = './';

/* trick */
$chat_last_msg = ( isset($_REQUEST['chat_last_msg']) ? (int) $_REQUEST['chat_last_msg'] : 0 );
$action = ( isset($_REQUEST['action']) ? $_REQUEST['action'] : '' );</span>
<span class="code-lang">
if ( $chat_last_msg && $action != 'add' ) {
    $chat_last_msg_stored = @file_get_contents($root_path . 'cache/chat_last_msg');
    if ( $chat_last_msg == $chat_last_msg_stored ) {
        exit('ok');
    }

}
/* */

require ($root_path . 'include/config.php');</span>
<span class="code-keyword">require ($root_path . 'include/bbcode/bbcode.lib.php');
require ($root_path . 'include/functions_post.php');

$userdata = session_pagestart($user_ip, true);
init_userprefs($userdata);
loggedinorreturn();
check_ban(BAN_CHAT);

$chat_last_msg = request_var('chat_last_msg', 0);
$action = request_var('action', '');
$data = array();
$user_is_mod = ( $userdata['class'] >= UC_MODERATOR );</span>
<span class="code-lang">
function parse_chat_comm ( &$msg_data ) {
    global $userdata, $theme, $db, $seo, $lang, $root_path, $cache;
    global $action;
    static $bb_code;

    if ( !isset($bb_code) ) {
        $bb_code = new bbcode();
    }

    $msg = $msg_data['message'];
    $msg_data['className'] = 'row1';

    if ( strpos($msg, '/') === 0 ) {
        $textParts = explode(' ', $msg);
        if ( !isset($textParts[0]) ) {
            return false;
        }
        //it's a command
        $is_owner = false;
        if ( $msg_data['uid'] == $userdata['uid'] ) {
            $is_owner = true;
        }

        switch( $textParts[0] ) {
            case '/private':
                $to_username = ( !empty($textParts[1]) ? $textParts[1] : '' );
                unset($textParts[0], $textParts[1]);

                if ( $is_owner || $action == 'view_logs' ) {
                    if ( !$to_username ) {
                        $msg = '[i]' . $lang['invalid_receiver_name'] . '[/i] ';
                    }
                    else {
                        $msg = '[i]' . $lang['private_message_for'] . ' ' . $to_username . ':[/i] ';
                    }
                }
                elseif ( $to_username == $userdata['name'] ) {
                    $msg = '[i]' . $lang['private_message_from'] . ' ' . $msg_data['username'] . ':[/i] ';
                }
                else {
                    return false;
                }
                $msg_data['message'] = implode(' ', $textParts);
                $msg .= $msg_data['message'];
                $bb_code->parse($msg);
                $msg_data['message'] = $bb_code->get_html();
                $msg_data['message'] = censor_text($msg_data['message']);
                $msg_data['className'] .= ' private';
                return;
            break;

            case '/delete':
                $msg_id = (int) ( !empty($textParts[1]) ? $textParts[1] : '' );
                if ( !$msg_id ) {
                    return false;
                }

                $msg_data['message'] = '/delete ' . $msg_id;
                return;
            break;

            case '/search':
                unset($textParts[0]);
                $search_str = implode(' ', $textParts);
                if ( !$search_str || utf_strlen($search_str) < 3 ) {
                    return false;
                }

                unset($textParts[0]);
                $search_str = implode(' ', $textParts);

                $sql = 'SELECT fid, name, category
                        FROM ' . TORRENTS_TABLE . '
                        WHERE banned = 0
                        AND hidden = 0
                        AND moderated = 1
                        AND name LIKE \'%' . $search_str . '%\'
                        ORDER BY ctime DESC';
                $result = $db->sql_query_limit($sql, 10);

                if ( $row = $db->sql_fetchrow($result) ) {
                    $found_str = '';

                    do {
                        // www.phpBB-SEO.com SEO TOOLKIT BEGIN
                        $seo->set_torrent_url($row['fid'], $row['name'], $row['category']);
                        // www.phpBB-SEO.com SEO TOOLKIT END

                        $found_str .= ( $found_str ? ', ' : '' ) . '<a href="'. append_sid($root_path . 'details.php?id=' . $row['fid']) . '" target="_blank">' . censor_text($row['name']) . '</a>';
                    }
                    while( $row = $db->sql_fetchrow($result) );

                    $msg_data['message'] = sprintf($lang['search_results'], $search_str) . ': ' . $found_str;
                }
                else {
                    $msg_data['message'] = sprintf($lang['search_results'], $search_str) . ': ' . $lang['nothing_found'];
                }

                return;

            break;

            case '/wakeup':
                $to_username = ( !empty($textParts[1]) ? $textParts[1] : '' );
                if ( !$to_username ) {
                    return false;
                }

                if ( $to_username == $userdata['name'] ) {
                    $msg_data['message'] = 'WAKEUP!!! <script type="text/javascript">window.focus();alert(\'WAKEUP!!!\');</script>';
                }
                else {
                    $msg_data['message'] = 'WAKEUP ' . $to_username . '!!!';
                }

                return;
            break;

            case '/kick':
                $to_username = ( !empty($textParts[1]) ? $textParts[1] : '' );
                if ( !$to_username ) {
                    return false;
                }

                if ( $to_username == $userdata['name'] ) {
                    $msg_data['message'] = '<span style="color:red">' . $lang['you_have_been_kicked'] . '</span>';
                    $msg_data['message'] .= '<script type="text/javascript">$(location).attr(\'href\',\'' . append_sid($root_path . 'index.php') . '\');</script>';

                    $sql = 'DELETE FROM ' . CHAT_MESSAGES_TABLE . ' WHERE chat_msg_id = ' . $msg_data['chat_msg_id'];
                    $db->sql_query($sql);

                    session_end($userdata['session_id'], $userdata['uid']);

                }
                else {
                    $msg_data['message'] = '<span style="color:red">' . sprintf($lang['user_kicked'], $to_username) . '</span>';
                }

                return;
            break;

            case '/ban':
                $to_username = ( !empty($textParts[1]) ? $textParts[1] : '' );
                $ban_time = ( !empty($textParts[2]) ? (int) $textParts[2] : 0 );

                $sql = 'SELECT uid, user_bans FROM ' . USERS_TABLE  . ' WHERE name = \'' . $db->sql_escape($to_username) . '\'';
                $result = $db->sql_query($sql);
                if ( $row = $db->sql_fetchrow($result) ) {
                    set_ban(BAN_CHAT, $ban_time, false, $row['uid'], $row['user_bans']);
                }

                if ( $to_username == $userdata['name'] ) {
                    $msg_data['message'] = '<span style="color:red">' . $lang['you_have_been_kicked'] . '</span>';
                    $msg_data['message'] .= '<script type="text/javascript">$(location).attr(\'href\',\'' . append_sid($root_path . 'index.php') . '\');</script>';

                    session_end($userdata['session_id'], $userdata['uid']);
                }
                else {
                    $msg = ( $ban_time ? sprintf($lang['user_banned_until'], $to_username, create_date(time() + $ban_time * 60, 'Y-m-d H:i:s')) : sprintf($lang['user_banned'], $to_username) );
                    $msg_data['message'] = '<span style="color:red">' . $msg . '</span>';
                }

                $sql = 'DELETE FROM ' . CHAT_MESSAGES_TABLE . ' WHERE chat_msg_id = ' . $msg_data['chat_msg_id'];
                $db->sql_query($sql);

                return;
            break;

            case '/banlist':
                if ( $msg_data['uid'] == $userdata['uid'] ) {
                    $banlist = '';

                    $sql = 'SELECT u.uid, u.name, u.class
                            FROM ' . BANLIST_TABLE . ' b, ' . USERS_TABLE . ' u
                            WHERE b.ban_type = ' . BAN_CHAT . '
                            AND u.uid = b.ban_userid';
                    $result = $db->sql_query($sql);

                    while ( $row = $db->sql_fetchrow($result) ) {
                        // www.phpBB-SEO.com SEO TOOLKIT START
                        $seo->set_user_url($row['name'], $row['uid']);
                        // www.phpBB-SEO.com SEO TOOLKIT END

                        $user_link = '<a href="' . append_sid($root_path . 'userdetails.php?id=' . $row['uid']) . '" target="_blank">' . get_user_class_color($row['class'], $row['name']) . '</a>';
                        $user_link .= ' <a href="javascript:;" onclick="unban(' . $row['uid'] . ');$(this).prev(\'a\').remove();$(this).remove();">[' . $lang['torrent_action_unban'] . ']</a>';

                        $banlist .= ' ' . $user_link;
                    }

                    $msg_data['message'] = '<span style="color:red">' . $lang['banned_users_in_chat'] . ': </span>';
                    $msg_data['message'] .= ( $banlist ? $banlist : $lang['no'] );
                }
                else {
                    return false;
                }

                return;
            break;

            default:
                $bb_code->parse($msg);
                $msg = $bb_code->get_html();
                $msg = censor_text($msg);
                $msg_data['message'] = $msg;

                return;
            break;

        }

        return false;
    }
    else {
        if ( stripos(substr($msg, 0, 20 + utf_strlen($userdata['name'])), $userdata['name'] ) !== false ) {
            $msg_data['className'] = 'row3';
        }
        else {
            $msg_data['className'] = 'row1';
        }

        $bb_code->parse($msg);
        $msg = $bb_code->get_html();
        $msg = censor_text($msg);
        $msg_data['message'] = $msg;
        return;
    }
}

if ( $user_is_mod ) {
    $sql = 'DELETE FROM ' . CHAT_MESSAGES_TABLE . ' WHERE chat_msg_added < ' . ( time() - 30 * 24 * 60 * 60 );
    $db->sql_query($sql);
}

if ( $action ) {
    switch($action) {
        case 'delete_msg':
            $msg_id = request_var('msg_id', 0);

            if ( $user_is_mod ) {
                $time = time();

                $sql = 'DELETE FROM ' . CHAT_MESSAGES_TABLE . ' WHERE chat_msg_id = ' . $msg_id;
                $db->sql_query($sql);

                $sql = 'INSERT INTO ' . CHAT_MESSAGES_TABLE . ' ' . $db->sql_build_array('INSERT', array(
                    'chat_uid' => $userdata['uid'],
                    'chat_msg' => '/delete ' . $msg_id,
                    'chat_msg_added' => $time,
                ));
                $db->sql_query($sql);
                $chat_last_msg = $db->sql_nextid();

                set_config('chat_last_msg', $chat_last_msg, true);
                @file_put_contents($root_path . 'cache/chat_last_msg', $chat_last_msg);

                $data = 'ok';
            }
            else {
                $data = 'denied';
            }

        break;

        case 'unban':
            if ( !$user_is_mod ) {
                $data = 'denied';
            }
            else {
                $uid = request_var('uid', 0);

                $sql = 'SELECT user_bans FROM ' . USERS_TABLE . ' WHERE uid = ' . $uid;
                $result = $db->sql_query($sql);
                $row = $db->sql_fetchrow($result);

                set_ban(BAN_CHAT, 0, true, $uid, $row['user_bans']);

                $data = 'ok';
            }
        break;

        case 'view_logs':
            $time = request_var('time', '');

            if ( !$user_is_mod ) {
                $data = 'denied';
            }
            else {
                if (  ( $date = strtotime($time) ) !== false ) {
                    $day = date('d', $date);
                    $month = date('m', $date);
                    $year = date('Y', $date);
                    $hours = date('H', $date);
                    $minutes = date('i', $date);

                    $time = mktime($hours, $minutes, 0, $month, $day, $year);
                }
                elseif ( $time ) {
                    $time = (int) $time;
                }
                else {
                    $time = time() - 24 * 60 * 60;
                }

                $sql = 'SELECT name AS username, chat_msg AS message, chat_msg_added AS added, u.uid, chat_msg_id, u.class, u.donor, u.name_append, u.enabled, u.warneduntil, u.parked
                        FROM ' . CHAT_MESSAGES_TABLE . ' c, ' . USERS_TABLE . ' u
                        WHERE c.chat_uid = u.uid AND c.chat_msg_added > ' . $time . ' AND chat_msg NOT LIKE \'/delete%\'
                        ORDER BY chat_msg_added';
                $result = $db->sql_query_limit($sql, 10);
                $i = 0;

                if ( $row = $db->sql_fetchrow($result) ) {
                    do {

                        $row['unixtime'] = $row['added'];
                        $row['added'] = create_date($row['added'], '|Y-m-d H:i:s|');

                        // www.phpBB-SEO.com SEO TOOLKIT START
                        $seo->set_user_url($row['username'], $row['uid']);
                        // www.phpBB-SEO.com SEO TOOLKIT END
                        $user_link = parse_username($row);

                        $row['user_link'] = $user_link;

                        if ( $user_is_mod ) {
                            $row['mod_opts'] = '<a href="javascript:;" onclick="delete_message('. $row['chat_msg_id'] . ');"><img src="'. $root_path .'pic/delete.png" /></a>';
                        }
                        else {
                            $row['mod_opts'] = '';
                        }

                        unset($row['class'], $row['parked'], $row['warneduntil'], $row['enabled'], $row['donor']);

                        $data[$i] = $row;

                        if ( parse_chat_comm($data[$i]) === false ) {
                            unset($data[$i]);
                        }

                        ++$i;
                    }
                    while ( $row = $db->sql_fetchrow($result) );

                    $data = array_merge($data);
                }
                else {
                    $data[0]['unixtime'] = 0;
                    $data[0]['added'] = create_date(time(), 'H:i:s');
                    $data[0]['chat_msg_id'] = 0;

                    $_userdata = $userdata;
                    unset($_userdata['user_reputation_level']);

                    // www.phpBB-SEO.com SEO TOOLKIT START
                    $seo->set_user_url($userdata['name'], $userdata['uid']);
                    // www.phpBB-SEO.com SEO TOOLKIT END
                    $user_link = parse_username($_userdata, false);

                    $data[0]['user_link'] = $user_link;
                    $data[0]['username'] = $userdata['name'];
                    $data[0]['uid'] = $userdata['uid'];
                    $data[0]['mod_opts'] = '';

                    $data[0]['message'] = '<a href="javascript:;" onclick="$(\'#daddy-shoutbox-list\').attr(\'innerHTML\', \'\');lastMsgId = 0;refresh();">' . $lang['return_to_chat'] . '</a>';
                }

                sleep(1);
            }
        break;

        case 'add':
            $message = request_var('message', '');
            $time = time();
            if ( utf_strlen($message) < 3 ) {
                break;
            }

            $textParts = explode(' ', $message);
            $mod_commands = array('/kick', '/ban', '/banlist', '/delete');
            if ( !empty($textParts[0]) && in_array($textParts[0], $mod_commands) && !$user_is_mod ) {
                $data = 'denied';
                break;
            }

            $sql = 'INSERT INTO ' . CHAT_MESSAGES_TABLE . ' ' . $db->sql_build_array('INSERT', array(
                'chat_uid' => $userdata['uid'],
                'chat_msg' => $message,
                'chat_msg_added' => $time,
            ));
            $db->sql_query($sql);
            $chat_msg_id = $db->sql_nextid();

            $chat_last_msg += 1;

            set_config('chat_last_msg', $chat_msg_id, true);
            @file_put_contents($root_path . 'cache/chat_last_msg', $chat_msg_id);

        //break;

        case 'view':

            if ( $chat_last_msg && $chat_last_msg == $config['chat_last_msg'] ) {
                break;
            }

            $sql = 'SELECT name AS username, chat_msg AS message, chat_msg_added AS added, u.uid, chat_msg_id, u.class, u.donor, u.name_append, u.enabled, u.warneduntil, u.parked
                    FROM ' . CHAT_MESSAGES_TABLE . ' c, ' . USERS_TABLE . ' u
                    WHERE c.chat_uid = u.uid ' . ( $chat_last_msg ? 'AND c.chat_msg_id > ' . $chat_last_msg : ' ORDER BY chat_msg_added DESC LIMIT 10');
            $result = $db->sql_query($sql);
            $i = 0;

            while ( $row = $db->sql_fetchrow($result) ) {

                $row['unixtime'] = $row['added'];
                $row['added'] = create_date($row['added'], 'H:i:s');

                $user_link = parse_username($row);

                $row['user_link'] = $user_link;

                if ( $user_is_mod ) {
                    $row['mod_opts'] = '<a href="javascript:;" onclick="delete_message('. $row['chat_msg_id'] . ');"><img src="'. $root_path .'pic/delete.png" /></a>';
                }
                else {
                    $row['mod_opts'] = '';
                }

                unset($row['class'], $row['parked'], $row['warneduntil'], $row['enabled'], $row['donor'], $row['unixtime']);

                $data[$i] = $row;

                if ( parse_chat_comm($data[$i]) === false ) {
                    unset($data[$i]);
                }

                ++$i;
            }

            $data = array_merge($data);

            if ( !$chat_last_msg ) {
                $data = array_reverse($data);
            }
        break;

        case 'get_online_users':
            $_userdata = $userdata;
            unset($_userdata['user_reputation_level']);

            $row['clean_username'] = str_replace("'", "\'", $_userdata['name']);
            $row['username'] = parse_username($_userdata, false);
            $row['u_userdetails'] = append_sid($root_path . 'userdetails.php?id=' . $_userdata['uid']);

            $data[$_userdata['uid']] = $row;


            $sql = 'SELECT u.name, u.uid, u.class, u.donor, u.name_append, u.enabled, u.warneduntil, u.parked
                    FROM ' . USERS_TABLE . ' u, ' . SESSIONS_TABLE . ' s
                    WHERE u.uid = s.session_user_id
                    AND s.session_page LIKE \'%chat.php%\'
                    AND s.session_time > ' . ( time() - 2 * 60 ) . '
                    AND s.session_logged_in = 1
                    ORDER BY u.class DESC, u.name';
            $result = $db->sql_query($sql);

            while ( $row = $db->sql_fetchrow($result) ) {
                $row['clean_username'] = str_replace("'", "\'", $row['name']);
                $row['username'] = parse_username($row, false);
                $row['u_userdetails'] = append_sid($root_path . 'userdetails.php?id=' . $row['uid']);

                $data[$row['uid']] = $row;
            }
        break;

        case 'show_user_menu':
            $username = request_var('username', '');
            $uid = request_var('uid', 0);

            // www.phpBB-SEO.com SEO TOOLKIT START
            $seo->set_user_url($username, $uid);
            // www.phpBB-SEO.com SEO TOOLKIT END

            $data['menu'] = '<ul class="user_menu">';

            $user_link = append_sid($root_path . 'userdetails.php?id=' . $uid);

            $data['menu'] .= '<li><a href="' . $user_link . '" target="_blank">' . $lang['show_profile'] . '</a></li>';

            if ( $username <> $userdata['name'] ) {
                $data['menu'] .= '<li><a href="javascript:;" onclick="$(\'#message\').attr(\'value\', \'/private ' . $username . ' \');$(\'#message\').focus();">' . $lang['send_pm'] . '</a></li>';
            }

            if ( $user_is_mod ) {

                if ( $username <> $userdata['name'] ) {
                    $data['menu'] .= '<li><a href="javascript:;" onclick="$(\'#message\').attr(\'value\', \'/kick ' . $username . '\');$(\'#message\').focus();">' . $lang['kick_user'] . '</a></li>';
                    $data['menu'] .= '<li><a href="javascript:;" onclick="$(\'#message\').attr(\'value\', \'/ban ' . $username . '\');$(\'#message\').focus();">' . $lang['ban_user'] . '</a></li>';
                }

                if ( $username == $userdata['name'] ) {
                    $data['menu'] .= '<li><a href="javascript:;" onclick="$(\'#message\').attr(\'value\', \'/banlist\');$(\'#message\').focus();">' . $lang['ban_list'] . '</a></li>';
                    $data['menu'] .= '<li><a href="javascript:;" onclick="view_logs(0);">' . $lang['view_logs'] . '</a></li>';
                }
            }

            if ( $username == $userdata['name'] ) {
                $data['menu'] .= '<li><a href="javascript:;" onclick="$(\'#message\').attr(\'value\', \'/search \');$(\'#message\').focus();">' . $lang['search_torrents'] . '</a></li>';
            }

            $data['menu'] .= '</ul>';
            $data['clean_username'] = str_replace("'", "\'", $username);


        break;


    }

    echo ( !empty($data) ? json_encode($data) : 'ok' );

    gc();

}
else {
    generate_smilies('inline');

    stdhead($lang['chat']);
    $template->set_filenames(array(
            'body' => 'chat_body.html'
    ));
    stdfoot();
}
?>