Version 2.3.6

upload/sources/action_public/findpost.php

@@ -2,28 +2,18 @@
 
 /*
 +--------------------------------------------------------------------------
-|   Invision Power Board 2.2.2
+|   Invision Power Board
 |   =============================================
 |   by Matthew Mecham
 |   (c) 2001 - 2006 Invision Power Services, Inc.
 |   http://www.invisionpower.com
 |   =============================================
 |   Web: http://www.invisionboard.com
-|        http://www.ibresource.ru/products/invisionpowerboard/
-|   Time: Monday 05th of March 2007 10:10:54 PM
-|   Release: e3790216629e5a2aaf37070b32237f06
 |   Licence Info: http://www.invisionboard.com/?license
-|                 http://www.ibresource.ru/license
 +---------------------------------------------------------------------------
-|   INVISION POWER BOARD IS NOT FREE / OPEN SOURCE!
-+---------------------------------------------------------------------------
-|   INVISION POWER BOARD ÍÅ ßÂËßÅÒÑß ÁÅÑÏËÀÒÍÛÌ ÏÐÎÃÐÀÌÌÍÛÌ ÎÁÅÑÏÅ×ÅÍÈÅÌ!
-|   Ïðàâà íà ÏÎ ïðèíàäëåæàò Invision Power Services
-|   Ïðàâà íà ïåðåâîä IBResource (http://www.ibresource.ru)
-+---------------------------------------------------------------------------
-|   > $Date: 2006-09-26 06:17:53 -0500 (Tue, 26 Sep 2006) $
-|   > $Revision: 574 $
-|   > $Author: matt $
+|   > $Date: 2008-03-28 18:08:02 -0400 (Fri, 28 Mar 2008) $
+|   > $Revision: 1232 $
+|   > $Author: bfarber $
 +---------------------------------------------------------------------------
 |
 |   > Find-a-post module (a.k.a: The smallest IPB class ever)
@@ -43,7 +33,7 @@
 
 if ( ! defined( 'IN_IPB' ) )
 {
-	print "<h1>Íåêîððåêòíûé àäðåñ</h1>Âû íå èìååòå äîñòóïà ê ýòîìó ôàéëó íàïðÿìóþ. Åñëè âû íåäàâíî îáíîâëÿëè ôîðóì, âû äîëæíû îáíîâèòü âñå ñîîòâåòñòâóþùèå ôàéëû.";
+	print "<h1>Incorrect access</h1>You cannot access this file directly. If you have recently upgraded, make sure you upgraded all the relevant files.";
 	exit();
 }
 
@@ -81,9 +71,29 @@ class findpost
 			$this->ipsclass->Error( array( LEVEL => 1, MSG => 'missing_files') );
 		}
 		
+		$topic = $this->ipsclass->DB->build_and_exec_query( array( 'select' => 'forum_id', 'from' => 'topics', 'where' => 'tid=' . $post['topic_id'] ) );
+		
+		if ( ! $topic['forum_id'] )
+		{
+			$this->ipsclass->Error( array( LEVEL => 1, MSG => 'missing_files') );
+		}
+		
+		$mod = 0;
+		
+	    if ( $this->ipsclass->member['g_is_supmod'] )
+	    {
+	    	$mod = 1;
+    	}
+    	else if( isset($this->ipsclass->member['_moderator'][ $topic['forum_id'] ]) AND is_array( $this->ipsclass->member['_moderator'][ $topic['forum_id'] ] ) )
+    	{
+    		$mod = 1;
+    	}
+    	
+    	$query_extra = $mod ? '' : ' AND queued=0';
+		
 		$this->ipsclass->DB->simple_construct( array( 'select' => 'COUNT(*) as posts',
 									 				  'from'   => 'posts',
-													  'where'  => "topic_id=".$post['topic_id']." AND pid <= ".$pid,
+													  'where'  => "topic_id=".$post['topic_id']." AND pid <= ".$pid . $query_extra,
 											)      );
 							
 		$this->ipsclass->DB->simple_exec();