assign('includeheader', $tpl_includeheader);
}
/* Show the footer of the manage page */
function Footer() {
global $dwoo_data, $dwoo, $tpl_page;
$dwoo_data->assign('page', $tpl_page);
$board_class = new Board('');
$dwoo->output(KU_TEMPLATEDIR . '/manage.tpl', $dwoo_data);
}
// Creates a salt to be used for passwords
function CreateSalt() {
$chars = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789';
$salt = '';
for ($i = 0; $i < 3; ++$i) {
$salt .= $chars[mt_rand(0, strlen($chars) - 1)];
}
return $salt;
}
/* Validate the current session */
function ValidateSession($is_menu = false) {
global $tc_db, $tpl_page;
if (isset($_SESSION['manageusername']) && isset($_SESSION['managepassword'])) {
$results = $tc_db->GetAll("SELECT HIGH_PRIORITY `username` FROM `" . KU_DBPREFIX . "staff` WHERE `username` = " . $tc_db->qstr($_SESSION['manageusername']) . " AND `password` = " . $tc_db->qstr($_SESSION['managepassword']) . " LIMIT 1");
if (count($results) == 0) {
session_destroy();
exitWithErrorPage(_gettext('Invalid session.'), ''. _gettext('Log in again.') . ' ');
}
$tc_db->Execute("UPDATE `" . KU_DBPREFIX . "staff` SET `lastactive` = " . time() . " WHERE `username` = " . $tc_db->qstr($_SESSION['manageusername']));
return true;
} else {
if (!$is_menu) {
$this->LoginForm();
die($tpl_page);
} else {
return false;
}
}
}
/* Show the login form and halt execution */
function LoginForm() {
global $tc_db, $tpl_page;
if (file_exists(KU_ROOTDIR . 'inc/pages/manage_login.html')) {
$tpl_page .= file_get_contents(KU_ROOTDIR . 'inc/pages/manage_login.html');
}
}
/* Check login names and create session if user/pass is correct */
function CheckLogin() {
global $tc_db, $action;
$tc_db->Execute("DELETE FROM `" . KU_DBPREFIX . "loginattempts` WHERE `timestamp` < '" . (time() - 1200) . "'");
$results = $tc_db->GetAll("SELECT HIGH_PRIORITY `ip` FROM `" . KU_DBPREFIX . "loginattempts` WHERE `ip` = '" . $_SERVER['REMOTE_ADDR'] . "' LIMIT 6");
if (count($results) > 5) {
exitWithErrorPage(_gettext('System lockout'), _gettext('Sorry, because of your numerous failed logins, you have been locked out from logging in for 20 minutes. Please wait and then try again.'));
} else {
$results = $tc_db->GetAll("SELECT HIGH_PRIORITY `username`, `password`, `salt` FROM `" . KU_DBPREFIX . "staff` WHERE `username` = " . $tc_db->qstr($_POST['username']) . " AND `type` != 3 LIMIT 1");
if (count($results) > 0) {
if (empty($results[0]['salt'])) {
if (md5($_POST['password']) == $results[0]['password']) {
$salt = $this->CreateSalt();
$tc_db->Execute("UPDATE `" .KU_DBPREFIX. "staff` SET salt = '" .$salt. "' WHERE username = " .$tc_db->qstr($_POST['username']));
$newpass = md5($_POST['password'] . $salt);
$tc_db->Execute("UPDATE `" .KU_DBPREFIX. "staff` SET password = '" .$newpass. "' WHERE username = " .$tc_db->qstr($_POST['username']));
$_SESSION['manageusername'] = $_POST['username'];
$_SESSION['managepassword'] = $newpass;
$_SESSION['token'] = md5($_SESSION['manageusername'] . $_SESSION['managepassword'] . rand(0,100));
$this->SetModerationCookies();
$tc_db->Execute("DELETE FROM `" . KU_DBPREFIX . "loginattempts` WHERE `ip` < '" . $_SERVER['REMOTE_ADDR'] . "'");
$action = 'posting_rates';
management_addlogentry(_gettext('Logged in'), 1);
die('');
} else {
$tc_db->Execute("INSERT HIGH_PRIORITY INTO `" . KU_DBPREFIX . "loginattempts` ( `username` , `ip` , `timestamp` ) VALUES ( " . $tc_db->qstr($_POST['username']) . " , '" . $_SERVER['REMOTE_ADDR'] . "' , '" . time() . "' )");
exitWithErrorPage(_gettext('Incorrect username/password.'));
}
} else {
if (md5($_POST['password'] . $results[0]['salt']) == $results[0]['password']) {
$_SESSION['manageusername'] = $_POST['username'];
$_SESSION['managepassword'] = md5($_POST['password'] . $results[0]['salt']);
$_SESSION['token'] = md5($_SESSION['manageusername'] . $_SESSION['managepassword'] . rand(0,100));
$this->SetModerationCookies();
$action = 'posting_rates';
management_addlogentry(_gettext('Logged in'), 1);
die('');
} else {
$tc_db->Execute("INSERT HIGH_PRIORITY INTO `" . KU_DBPREFIX . "loginattempts` ( `username` , `ip` , `timestamp` ) VALUES ( " . $tc_db->qstr($_POST['username']) . " , '" . $_SERVER['REMOTE_ADDR'] . "' , '" . time() . "' )");
exitWithErrorPage(_gettext('Incorrect username/password.'));
}
}
} else {
$tc_db->Execute("INSERT HIGH_PRIORITY INTO `" . KU_DBPREFIX . "loginattempts` ( `username` , `ip` , `timestamp` ) VALUES ( " . $tc_db->qstr($_POST['username']) . " , '" . $_SERVER['REMOTE_ADDR'] . "' , '" . time() . "' )");
exitWithErrorPage(_gettext('Incorrect username/password.'));
}
}
}
/* Set mod cookies for boards */
function SetModerationCookies() {
global $tc_db, $tpl_page;
if (isset($_SESSION['manageusername'])) {
$results = $tc_db->GetAll("SELECT HIGH_PRIORITY `boards` FROM `" . KU_DBPREFIX . "staff` WHERE `username` = " . $tc_db->qstr($_SESSION['manageusername']) . " LIMIT 1");
if ($this->CurrentUserIsAdministrator() || $results[0][0] == 'allboards') {
setcookie("kumod", "allboards", time() + 3600, KU_BOARDSFOLDER, KU_DOMAIN);
} else {
if ($results[0][0] != '') {
setcookie("kumod", $results[0][0], time() + 3600, KU_BOARDSFOLDER, KU_DOMAIN);
}
}
}
}
function CheckToken($posttoken) {
if ($posttoken != $_SESSION['token']) {
// Something is strange
session_destroy();
exitWithErrorPage(_gettext('Invalid Token'));
}
}
/* Log current user out */
function Logout() {
global $tc_db, $tpl_page;
setcookie('kumod', '', time() - 3600, KU_BOARDSFOLDER, KU_DOMAIN);
session_destroy();
unset($_SESSION['manageusername']);
unset($_SESSION['managepassword']);
unset($_SESSION['token']);
die('');
}
/* If the user logged in isn't an admin, kill the script */
function AdministratorsOnly() {
global $tc_db, $tpl_page;
if (!$this->CurrentUserIsAdministrator()) {
exitWithErrorPage('That page is for admins only.');
}
}
/* If the user logged in isn't an moderator or higher, kill the script */
function ModeratorsOnly() {
global $tc_db, $tpl_page;
if ($this->CurrentUserIsAdministrator()) {
return true;
} else {
$results = $tc_db->GetAll("SELECT HIGH_PRIORITY `type` FROM `" . KU_DBPREFIX . "staff` WHERE `username` = '" . $_SESSION['manageusername'] . "' AND `password` = '" . $_SESSION['managepassword'] . "' LIMIT 1");
foreach ($results as $line) {
if ($line['type'] != 2) {
exitWithErrorPage(_gettext('That page is for moderators and administrators only.'));
}
}
}
}
/* See if the user logged in is an admin */
function CurrentUserIsAdministrator() {
global $tc_db, $tpl_page;
if ($_SESSION['manageusername'] == '' || $_SESSION['managepassword'] == '' || $_SESSION['token'] == '') {
$_SESSION['manageusername'] = '';
$_SESSION['managepassword'] = '';
$_SESSION['token'] = '';
return false;
}
$results = $tc_db->GetAll("SELECT HIGH_PRIORITY `type` FROM `" . KU_DBPREFIX . "staff` WHERE `username` = '" . $_SESSION['manageusername'] . "' AND `password` = '" . $_SESSION['managepassword'] . "' LIMIT 1");
foreach ($results as $line) {
if ($line['type'] == 1) {
return true;
} else {
return false;
}
}
/* If the function reaches this point, something is fishy. Kill their session */
session_destroy();
exitWithErrorPage(_gettext('Invalid session, please log in again.'));
}
/* See if the user logged in is a moderator */
function CurrentUserIsModerator() {
global $tc_db, $tpl_page;
if ($_SESSION['manageusername'] == '' || $_SESSION['managepassword'] == '' || $_SESSION['token'] == '') {
$_SESSION['manageusername'] = '';
$_SESSION['managepassword'] = '';
$_SESSION['token'] = '';
return false;
}
$results = $tc_db->GetAll("SELECT HIGH_PRIORITY `type` FROM `" . KU_DBPREFIX . "staff` WHERE `username` = '" . $_SESSION['manageusername'] . "' AND `password` = '" . $_SESSION['managepassword'] . "' LIMIT 1");
foreach ($results as $line) {
if ($line['type'] == 2) {
return true;
} else {
return false;
}
}
/* If the function reaches this point, something is fishy. Kill their session */
session_destroy();
exitWithErrorPage(_gettext('Invalid session, please log in again.'));
}
/* See if the user logged in is a moderator of a specified board */
function CurrentUserIsModeratorOfBoard($board, $username) {
global $tc_db, $tpl_page;
$results = $tc_db->GetAll("SELECT HIGH_PRIORITY `type`, `boards` FROM `" . KU_DBPREFIX . "staff` WHERE `username` = '" . $username . "' LIMIT 1");
if (count($results) > 0) {
foreach ($results as $line) {
if ($line['boards'] == 'allboards') {
return true;
} else {
if ($line['type'] == '1') {
return true;
} else {
$array_boards = explode('|', $line['boards']);
if (in_array($board, $array_boards)) {
return true;
} else {
return false;
}
}
}
}
} else {
return false;
}
}
/*
* +------------------------------------------------------------------------------+
* Manage pages
* +------------------------------------------------------------------------------+
*/
/*
* +------------------------------------------------------------------------------+
* Home Pages
* +------------------------------------------------------------------------------+
*/
/* View Announcements */
function announcements() {
global $tc_db, $tpl_page;
$this->ModeratorsOnly();
$tpl_page .= ''. _gettext('Announcements') .' '.stripslashes($line['subject']).' '. _gettext('by') .' ';
$tpl_page .= stripslashes($line['postedby']);
$tpl_page .= ' - '.date("n/j/y @ g:iA T", $line['postedat']);
$tpl_page .= ' ' .
''. stripslashes($line['message']) . '
';
}
}
function posting_rates() {
global $tc_db, $tpl_page;
$tpl_page .= ''. _gettext('Posting rates (past hour)') . ' '. _gettext('Board') . ' '. _gettext('Threads') . ' '. _gettext('Replies') . ' '. _gettext('Posts') . ' '. $line['name'] . ' '. $threads_perminute . ' '. $replies_perminute . ' '. $posts_perminute . '
';
} else {
$tpl_page .= _gettext('No boards');
}
}
function statistics() {
global $tc_db, $tpl_page;
$tpl_page .= ''. _gettext('Statistics') .' '. _gettext('Change account password') . ' '. _gettext('Announcement edited') .' '. _gettext('Announcement successfully deleted') .' '. _gettext('Announcement successfully added.') . ' ';
management_addlogentry(_gettext('Added an announcement'), 9);
$tpl_page .= ''. $title . ' '. _gettext('Edit/Delete announcement') .' ';
$results = $tc_db->GetAll("SELECT HIGH_PRIORITY * FROM `" . KU_DBPREFIX . "announcements` ORDER BY `id` DESC");
if (count($results) > 0) {
$tpl_page .= ''. _gettext('Date Added') .' '. _gettext('Subject') .' '. _gettext('Message') .' '. _gettext('Edit/Delete') .' '. date('F j, Y, g:i a', $line['postedat']) . ' '. $line['subject'] . ' '. $line['message'] . ' ['. _gettext('Edit') .' ] ['. _gettext('Delete') .' ]
';
} else {
$tpl_page .= _gettext('No announcements yet.');
}
}
}
/* Edit Dwoo templates */
function templates() {
global $tc_db, $tpl_page;
$this->AdministratorsOnly();
$files = array();
$tpl_page .= ''. _gettext('Template editor') .' '. _gettext('Template edited') .' '. _gettext('News post edited') .' '. _gettext('News post deleted') .' '. _gettext('News entry successfully added.') . ' ';
management_addlogentry(_gettext('Added a news entry'), 9);
$tpl_page .= ''. $title . ' '. _gettext('Edit/Delete News') .' ';
$results = $tc_db->GetAll("SELECT HIGH_PRIORITY * FROM `" . KU_DBPREFIX . "front` WHERE `page` = 0 ORDER BY `timestamp` DESC");
if (count($results) > 0) {
$tpl_page .= ''. _gettext('Date Added') .' '. _gettext('Subject') .' '. _gettext('Message') .' '. _gettext('Edit/Delete') .' '. date('F j, Y, g:i a', $line['timestamp']) . ' '. $line['subject'] . ' '. $line['message'] . ' ['. _gettext('Edit') .' ] ['. _gettext('Delete') .' ]
';
} else {
$tpl_page .= _gettext('No news posts yet.');
}
}
}
/* Add, edit, or delete FAQ entries */
function faq() {
global $tc_db, $tpl_page;
$this->AdministratorsOnly();
$disptable = true; $formval = 'add'; $title = _gettext('FAQ Management');
if(isset($_GET['act'])) {
if ($_GET['act'] == 'edit') {
if (isset($_POST['faq'])) {
$this->CheckToken($_POST['token']);
$tc_db->Execute("UPDATE `" . KU_DBPREFIX . "front` SET `subject` = " . $tc_db->qstr($_POST['heading']) . ", `message` = " . $tc_db->qstr($_POST['faq']) . ", `order` = " . intval($_POST['order']) . " WHERE `id` = " . $tc_db->qstr($_GET['id']) . "");
$tpl_page .= ''. _gettext('FAQ entry edited') .' '. _gettext('FAQ entry deleted') .' '. _gettext('FAQ entry successfully added.') . ' ';
management_addlogentry(_gettext('Added a FAQ entry'), 9);
$tpl_page .= ''. $title . ' '. _gettext('Edit/Delete FAQ Entries') .' ';
$results = $tc_db->GetAll("SELECT HIGH_PRIORITY * FROM `" . KU_DBPREFIX . "front` WHERE `page` = 1 ORDER BY `order` ASC");
if (count($results) > 0) {
$tpl_page .= ''. _gettext('Order') .' '. _gettext('Heading') .' '. _gettext('Message') .' '. _gettext('Edit/Delete') .' '. $line['order'] . ' '. $line['subject'] . ' '. $line['message'] . ' ['. _gettext('Edit') .' ] ['. _gettext('Delete') .' ]
';
} else {
$tpl_page .= _gettext('No FAQ entries yet.');
}
}
}
/* Add, edit, or delete Rules Entries */
function rules() {
global $tc_db, $tpl_page;
$this->AdministratorsOnly();
$disptable = true; $formval = 'add'; $title = _gettext('Rules Management');
if(isset($_GET['act'])) {
if ($_GET['act'] == 'edit') {
if (isset($_POST['rules'])) {
$this->CheckToken($_POST['token']);
$tc_db->Execute("UPDATE `" . KU_DBPREFIX . "front` SET `subject` = " . $tc_db->qstr($_POST['heading']) . ", `message` = " . $tc_db->qstr($_POST['rules']) . ", `order` = " . intval($_POST['order']) . " WHERE `id` = " . $tc_db->qstr($_GET['id']) . "");
$tpl_page .= ''. _gettext('Rules entry edited') .' '. _gettext('Rule entry deleted') .' '. _gettext('Rules entry successfully added.') . ' ';
management_addlogentry(_gettext('Added a Rule entry'), 9);
$tpl_page .= ''. $title . ' '. _gettext('Edit/Delete Rule Entries') .' ';
$results = $tc_db->GetAll("SELECT HIGH_PRIORITY * FROM `" . KU_DBPREFIX . "front` WHERE `page` = 2 ORDER BY `order` ASC");
if (count($results) > 0) {
$tpl_page .= ''. _gettext('Order') .' '. _gettext('Heading') .' '. _gettext('Message') .' '. _gettext('Edit/Delete') .' '. $line['order'] . ' '. $line['subject'] . ' '. $line['message'] . ' ['. _gettext('Edit') .' ] ['. _gettext('Delete') .' ]
';
} else {
$tpl_page .= _gettext('No Rule entries yet.');
}
}
}
function blotter() {
global $tc_db, $tpl_page;
$this->AdministratorsOnly();
if (!KU_BLOTTER) exitWithErrorPage(_gettext('Blotter is disabled'));
$tpl_page .= '' ._gettext('Blotter'). ' '. _gettext('Blotter entry added.') . ' ';
clearBlotterCache();
}
break;
case 'del':
if (is_numeric($_GET['id'])) {
$tc_db->Execute("DELETE FROM `" . KU_DBPREFIX . "blotter` WHERE `id` = " . $tc_db->qstr($_GET['id']) . "");
$tpl_page .= ''. _gettext('Blotter entry deleted.') . ' '. _gettext('Blotter entry updated.') . ' ';
clearBlotterCache();
}
$results = $tc_db->GetAll("SELECT HIGH_PRIORITY * FROM `" . KU_DBPREFIX . "blotter` WHERE `id` = " . $tc_db->qstr($_GET['id']) . " LIMIT 1");
$values = $results[0];
} else {
exitWithErrorPage(_gettext('Invalid ID'));
}
break;
default:
exitWithErrorPage(_gettext('Invalid value for \'act\''));
break;
}
}
$tpl_page .= ''. _gettext('At') . ' '. _gettext('Message') . ' '. _gettext('Important') . ' '. date('m/d/y', $line['at']) . ' '. $line['message'] . ' ';
$tpl_page .= ($line['important'] == 1) ? _gettext('Yes') : _gettext('No');
$tpl_page .= ' ['. _gettext('Edit') .' ] ['. _gettext('Delete') .' ]
';
} else {
$tpl_page .= _gettext('No blotter entries');
}
}
/* Display disk space used per board, and finally total in a large table */
function spaceused() {
global $tc_db, $tpl_page;
$this->AdministratorsOnly();
$tpl_page .= ''. _gettext('Disk space used') . ' '. _gettext('Board') .' '. _gettext('Area') .' '. _gettext('Files') .' '. _gettext('Space Used') .' /'.$line['name'].'/ res/ '. number_format($files_board_res) . ' '. ConvertBytes($spaceused_board_res) . ' src/ '. number_format($files_board_src) . ' '. ConvertBytes($spaceused_board_src) . ' thumb/ '. number_format($files_board_thumb) . ' '. ConvertBytes($spaceused_board_thumb) . ' '. _gettext('Total') .' '. number_format($files_board_total) . ' '. ConvertBytes($spaceused_board_total) . ' '. _gettext('All boards') .' res/ '. number_format($files_res) . ' '. ConvertBytes($spaceused_res) . ' src/ '. number_format($files_src) . ' '. ConvertBytes($spaceused_src) . ' thumb/ '. number_format($files_thumb) . ' '. ConvertBytes($spaceused_thumb) . ' '. _gettext('Total') .' '. number_format($files_total) . ' '. ConvertBytes($spaceused_total) . '
';
management_addlogentry(_gettext('Viewed disk space used'), 0);
}
function staff() { //183 lines
global $tc_db, $tpl_page;
$this->AdministratorsOnly();
$tpl_page .= '' ._gettext('Staff'). ' '. _gettext('Username') . ' '. _gettext('Added on') . ' '. _gettext('Last active') . ' '. _gettext('Moderating boards') . ' '. _gettext($stafftype) . ' ' .$line['username']. ' ' .date("y/m/d(D)H:i", $line['addedon']). ' ';
if ($line['lastactive'] == 0) {
$tpl_page .= _gettext('Never');
} elseif ((time() - $line['lastactive']) > 300) {
$tpl_page .= timeDiff($line['lastactive'], false);
} else {
$tpl_page .= _gettext('Online now');
}
$tpl_page .= ' ';
if ($line['boards'] != '' || $line['type'] == 1) {
if ($line['boards'] == 'allboards' || $line['type'] == 1) {
$tpl_page .= _gettext('All boards') ;
} else {
$tpl_page .= '/'. implode('/ , /', explode('|', $line['boards'])) . '/ ';
}
} else {
$tpl_page .= _gettext('No boards');
}
$tpl_page .= ' ['. _gettext('Edit') . ' ] ['. _gettext('Delete') .' ] '. _gettext('None') . '
';
}
/* Display moderators and administrators actions which were logged */
function modlog() {
global $tc_db, $tpl_page;
$this->AdministratorsOnly();
$tc_db->Execute("DELETE FROM `" . KU_DBPREFIX . "modlog` WHERE `timestamp` < '" . (time() - KU_MODLOGDAYS * 86400) . "'");
$tpl_page .= ''. ('ModLog') . ' '. _gettext('Time') .' '. _gettext('User') .' '. _gettext('Action') .' " . date("y/m/d(D)H:i", $line['timestamp']) . " " . $line['user'] . " " . $line['entry'] . "
';
}
function proxyban() {
global $tpl_page;
$this->AdministratorsOnly();
$tpl_page .= ''. _gettext('Ban proxy list') . ' '. _gettext('Cleanup') . ' '. _gettext('Add board') . ' '. _gettext('Delete board') .' '. _gettext('Add Results') .' /'. $dir . '/ !'. _gettext('Delete Results') .' '. _gettext('Wordfilter') . ' '. _gettext('Word') . ' '. _gettext('Replacement') . ' '. _gettext('Boards') . ' '. $line['word'] . ' '. $line['replacedby'] . ' ';
if (explode('|', $line['boards']) != '') {
$tpl_page .= '/'. implode('/ , /', explode('|', $line['boards'])) . '/ ';
} else {
$tpl_page .= _gettext('No boards');
}
$tpl_page .= ' ['. _gettext('Edit') . ' ] ['. _gettext('Delete') .' ]
';
}
}
/* Ad Management */
function ads() {
global $tc_db, $tpl_page;
$this->AdministratorsOnly();
$tpl_page .= ''. _gettext('Ad Management') .' '. _gettext('Anything can go here, such as banners, links, etc. It doesn\'t have to be just ads.') .' '. "\n";
if (isset($_GET['edit']) && ($_GET['edit'] == 1 || $_GET['edit'] == 2)) {
if (isset($_POST['code']) and !empty($_POST['code'])) {
$this->CheckToken($_POST['token']);
$tc_db->Execute("UPDATE `" . KU_DBPREFIX . "ads` SET `disp` = " . $tc_db->qstr($_POST['disp']) . ", `code` = " . $tc_db->qstr($_POST['code']) . " WHERE `id` = " . $tc_db->qstr($_GET['edit']) . "");
$tpl_page .= ''. _gettext('Ad Edited.') .' '.sprintf(_gettext('Click %shere%s to return to Ad Management.'),'',' ') .'
'. _gettext('Edit/Delete Embeds') .' ';
$results = $tc_db->GetAll("SELECT HIGH_PRIORITY * FROM `" . KU_DBPREFIX . "embeds` ORDER BY `id` ASC");
if (count($results) > 0) {
$find = array('<', '>');
$replace = array ('<', '>');
$tpl_page .= ''. _gettext('Site Name') .' '. _gettext('Filetype') .' '. _gettext('Video URL Start') .' '. _gettext('Width') .' '. _gettext('Height') .' '. _gettext('Code') .' '. $line['name'] . ' '. $line['filetype'] . ' '. $line['videourl'] . ' '. $line['width'] . ' '. $line['height'] . ' '. str_replace($find, $replace, $line['code']) . ' ['. _gettext('Edit') .' ] ['. _gettext('Delete') .' ]
';
} else {
$tpl_page .= _gettext('No Embeds yet.');
}
}
}
function movethread() {
global $tc_db, $tpl_page;
$this->AdministratorsOnly();
$tpl_page .= ''. _gettext('Move thread') . ' '. $matches[0] . ' ';
}
function search_results_display($a, $b, $numrows) {
return ''. _gettext('Results') . ' '. $b . ' to '. $a . ' of '. $numrows . '
'. "\n" .
''. _gettext('View Threads (including deleted)') .' ';
$board = isset($_GET['board']) ? $_GET['board'] : '';
$thread = isset($_GET['thread']) ? $_GET['thread'] : '';
if (!$thread ) {
$thread = "0";
}
if (!$board) {
$results = $tc_db->GetAll("SELECT HIGH_PRIORITY `name`, `id` FROM `". KU_DBPREFIX . "boards` ORDER BY `name` ASC");
$tpl_page .= "
";
$tpl_page .= '';
}
}
/* View a thread marked as deleted */
function viewdeletedthread() {
global $tc_db, $tpl_page;
$this->AdministratorsOnly();
$tpl_page .= ''. _gettext('View deleted thread') . ' '. "\n";
$tpl_page .= $name . $line['tripcode'] . formatDate($line['postedat']) . ' | '. _gettext('No.') .' '. $line['id'] . ' | '. _gettext('IP') .': '. md5_decrypt($line['ip'], KU_RANDOMSEED) . '
'. "\n";
if (isset($line['filename'])) {
$tpl_page .= '
'. $line['filename'] . '.'. $line['filetype'] . ' '. "\n" .
'
'. "\n";
}
$tpl_page .= $line['message'];
$tpl_page .= '
'. "\n";
$tpl_page .= $name . $line['tripcode'] . formatDate($line['postedat']) . ' | No. '. $line['id'] . ' | IP: '. md5_decrypt($line['ip'], KU_RANDOMSEED) . '
'. "\n";
if ($line['filename'] != '') {
$tpl_page .= '
'. $line['filename'] . '.'. $line['filetype'] . ' '. "\n" .
'
'. "\n";
}
$tpl_page .= $line['message'];
$tpl_page .= '
'. _gettext('Edit filetypes') . ' '. _gettext('Add filetype') .' '. _gettext('ID') .' '. _gettext('Filetype') .' '. _gettext('Image') .' '. _gettext('Edit/Delete') .' '. $line['id'] . ' '. $line['filetype'] . ' '. $line['image'] . ' ['. _gettext('Edit') .' ] ['. _gettext('Delete') .' ]
';
} else {
$tpl_page .= _gettext('There are currently no filetypes.');
}
}
/* Add, view, and delete sections */
function editsections() {
global $tc_db, $tpl_page;
$this->AdministratorsOnly();
$tpl_page .= ''. _gettext('Edit sections') . ' '. _gettext('Add section') .' '.('ID') .' '.('Order') .' '. _gettext('Abbreviation') .' '. _gettext('Name') .' '. _gettext('Edit/Delete') .' '. $line['id'] . ' '. $line['order'] . ' '. $line['abbreviation'] . ' '. $line['name'] . ' ['. _gettext('Edit') .' ] ['. _gettext('Delete') .' ]
';
} else {
$tpl_page .= _gettext('There are currently no sections.');
}
}
/* Rebuild all boards */
function rebuildall() {
global $tc_db, $tpl_page;
$this->AdministratorsOnly();
$tpl_page .= ''. _gettext('Rebuild all HTML files') . ' %d seconds.'), time() - $time_start);
management_addlogentry(_gettext('Rebuilt all boards and threads'), 2);
unset($board_class);
}
/*
* +------------------------------------------------------------------------------+
* Boards Pages
* +------------------------------------------------------------------------------+
*/
function boardopts() {
global $tc_db, $tpl_page;
$this->AdministratorsOnly();
$tpl_page .= ''. _gettext('Board options') . ' '. $_GET['updateboard'] . ' .';
}
} elseif (isset($_POST['board'])) {
if (!$this->CurrentUserIsModeratorOfBoard($_POST['board'], $_SESSION['manageusername'])) {
exitWithErrorPage(_gettext('You are not a moderator of this board.'));
}
$resultsboard = $tc_db->GetAll("SELECT HIGH_PRIORITY * FROM `" . KU_DBPREFIX . "boards` WHERE `name` = " . $tc_db->qstr($_POST['board']) . "");
if (count($resultsboard) > 0) {
foreach ($resultsboard as $lineboard) {
$tpl_page .= ''. _gettext('Enable captcha') .':
'. _gettext('Enable archiving') .':
'. _gettext('Enable catalog') .':
'. _gettext('Enable \'no file\' posting') .':
'. _gettext('Redirect to thread') .':
'. _gettext('Forced anonymous') .':
'. _gettext('Trial') .':
'. _gettext('Popular') .':
'. _gettext('Default style') .':
';
$styles = explode(':', KU_STYLES);
foreach ($styles as $stylesheet) {
$tpl_page .= ' ';
}
$stylestxt = explode(':', KU_TXTSTYLES);
foreach ($stylestxt as $stylesheet) {
$tpl_page .= ' ';
}
$tpl_page .= '
'. _gettext('The style which will be set when the user first visits the board.') .' '. _gettext('Default') .': '. _gettext('Use Default') .'
'. $_POST['board'] . ' .';
}
} else {
$tpl_page .= '';
}
}
function unstickypost() {
global $tc_db, $tpl_page, $board_class;
$this->ModeratorsOnly();
$tpl_page .= ''. _gettext('Manage stickies') . ' '. _gettext('Manage stickies') . '
'. _gettext('Sticky') . ' '. _gettext('Unsticky') . ' ';
$results_boards = $tc_db->GetAll("SELECT HIGH_PRIORITY `name`, `id` FROM `" . KU_DBPREFIX . "boards` ORDER BY `name` ASC");
foreach ($results_boards as $line_board) {
$output .= '/'. $line_board['name'] . '/ ';
$results = $tc_db->GetAll("SELECT HIGH_PRIORITY `id` FROM `" . KU_DBPREFIX . "posts` WHERE `boardid` = " . $line_board['id'] . " AND `IS_DELETED` = '0' AND `parentid` = '0' AND `stickied` = '1'");
if (count($results) > 0) {
foreach ($results as $line) {
$output .= '#'. $line['id'] . '
';
return $output;
}
function lockpost() {
global $tc_db, $tpl_page, $board_class;
$this->ModeratorsOnly();
$tpl_page .= ''. _gettext('Manage locked threads') . ' '. _gettext('Manage locked threads') . '
'. _gettext('Lock') . ' '. _gettext('Unlock') . ' ';
$results_boards = $tc_db->GetAll("SELECT HIGH_PRIORITY `id`, `name` FROM `" . KU_DBPREFIX . "boards` ORDER BY `name` ASC");
foreach ($results_boards as $line_board) {
$output .= '/'. $line_board['name'] . '/ ';
$results = $tc_db->GetAll("SELECT HIGH_PRIORITY `id` FROM `" . KU_DBPREFIX . "posts` WHERE `boardid` = " . $line_board['id'] . " AND `IS_DELETED` = '0' AND `parentid` = '0' AND `locked` = '1'");
if (count($results) > 0) {
foreach ($results as $line) {
$output .= '#'. $line['id'] . '
';
return $output;
}
/* Delete a post, or multiple posts */
function delposts($multidel=false) {
global $tc_db, $tpl_page, $board_class;
$isquickdel = false;
if (isset($_POST['boarddir']) || isset($_GET['boarddir'])) {
if (!isset($_GET['boarddir']) && isset($_POST['boarddir'])) {
$this->CheckToken($_POST['token']);
}
if (isset($_GET['boarddir'])) {
$isquickdel = true;
$_POST['boarddir'] = $_GET['boarddir'];
if (isset($_GET['delthreadid'])) {
$_POST['delthreadid'] = $_GET['delthreadid'];
}
if (isset($_GET['delpostid'])) {
$_POST['delpostid'] = $_GET['delpostid'];
}
}
$results = $tc_db->GetAll("SELECT HIGH_PRIORITY * FROM `" . KU_DBPREFIX . "boards` WHERE `name` = " . $tc_db->qstr($_POST['boarddir']) . "");
if (count($results) > 0) {
if (!$this->CurrentUserIsModeratorOfBoard($_POST['boarddir'], $_SESSION['manageusername'])) {
exitWithErrorPage(_gettext('You are not a moderator of this board.'));
}
foreach ($results as $line) {
$board_id = $line['id'];
$board_dir = $line['name'];
}
if (isset($_GET['cp'])) {
$cp = '&cp=y&instant=y';
}
if (isset($_POST['delthreadid'])) {
if ($_POST['delthreadid'] > 0) {
$results = $tc_db->GetAll("SELECT HIGH_PRIORITY * FROM `" . KU_DBPREFIX . "posts` WHERE `boardid` = " . $board_id . " AND `IS_DELETED` = '0' AND `id` = " . $tc_db->qstr($_POST['delthreadid']) . " AND `parentid` = '0'");
if (count($results) > 0) {
if (isset($_POST['fileonly'])) {
foreach ($results as $line) {
if (!empty($line['file'])) {
$del = unlink(KU_ROOTDIR . $_POST['boarddir'] . '/src/'. $line['file'] . '.'. $line['file_type']);
if ($del) {
@unlink(KU_ROOTDIR . $_POST['boarddir'] . '/thumb/'. $line['file'] . 's.'. $line['file_type']);
@unlink(KU_ROOTDIR . $_POST['boarddir'] . '/thumb/'. $line['file'] . 'c.'. $line['file_type']);
$tc_db->Execute("UPDATE `".KU_DBPREFIX."posts` SET `file` = 'removed', `file_md5` = '' WHERE `boardid` = " . $board_id . " AND `id` = ".$_POST['delthreadid']." LIMIT 1");
$tpl_page .= ''. $delthread_id . ' ('. $numposts_deleted . ' replies) - /'. $board_dir . '/', 7);
if (!empty($_GET['postid'])) {
$tpl_page .= ''. _gettext('Redirecting') . ' to ban page...';
} elseif ($isquickdel) {
$tpl_page .= ''. _gettext('Redirecting') . ' back to board...';
}
}
} else {
$tpl_page .= _gettext('Invalid thread ID '.$delpost_id.'. This may have been caused by the thread recently being deleted.');
}
}
} elseif (isset($_POST['delpostid'])) {
if ($_POST['delpostid'] > 0) {
$results = $tc_db->GetAll("SELECT HIGH_PRIORITY * FROM `" . KU_DBPREFIX . "posts` WHERE `boardid` = " . $board_id . " AND `IS_DELETED` = '0' AND `id` = " . $tc_db->qstr($_POST['delpostid']) . "");
if (count($results) > 0) {
if (isset($_POST['fileonly'])) {
foreach ($results as $line) {
if (!empty($line['file'])) {
$del = @unlink(KU_ROOTDIR . $_POST['boarddir'] . '/src/'. $line['file'] . '.'. $line['file_type']);
if ($del) {
@unlink(KU_ROOTDIR . $_POST['boarddir'] . '/thumb/'. $line['file'] . 's.'. $line['file_type']);
@unlink(KU_ROOTDIR . $_POST['boarddir'] . '/thumb/'. $line['file'] . 'c.'. $line['file_type']);
$tc_db->Execute("UPDATE `".KU_DBPREFIX."posts` SET `file` = 'removed', `file_md5` = '' WHERE `boardid` = " . $board_id . " AND `id` = ".$_POST['delpostid']." LIMIT 1");
$tpl_page .= ''. $delpost_id . ' - /'. $board_dir . '/', 7);
if ($_GET['postid'] != '') {
$tpl_page .= ''. _gettext('Redirecting') . ' to ban page...';
} elseif ($isquickdel) {
$tpl_page .= ''. _gettext('Redirecting') . ' back to thread...';
}
}
} else {
$tpl_page .= _gettext('Invalid thread ID '.$delpost_id.'. This may have been caused by the thread recently being deleted.');
}
}
}
} else {
$tpl_page .= _gettext('Invalid board directory.');
}
}
$tpl_page .= ''. _gettext('Delete thread/post') . ' '. _gettext('Reports') . ' Board Post File Message Reason Reporter IP Action /'. $linereport['board'] . '/ '. $line['id'] . ' ';
if ($line['file'] == 'removed') {
$tpl_page .= 'removed';
} elseif ($line['file'] == '') {
$tpl_page .= 'none';
} elseif ($line['file_type'] == 'jpg' || $line['file_type'] == 'gif' || $line['file_type'] == 'png') {
$tpl_page .= 'File ';
}
$tpl_page .= ' ';
if ($line['message'] != '') {
$tpl_page .= stripslashes($line['message']);
} else {
$tpl_page .= ' ';
}
$tpl_page .= ' ';
if ($linereport['reason'] != '') {
$tpl_page .= htmlspecialchars(stripslashes($linereport['reason']));
} else {
$tpl_page .= ' ';
}
$tpl_page .= ' '. md5_decrypt($linereport['ip'], KU_RANDOMSEED) . ' Clear [D & B ]
';
} else {
$tpl_page .= 'No reports to show.';
}
}
/* Addition, modification, deletion, and viewing of bans */
function bans() {
global $tc_db, $tpl_page, $bans_class;
$this->ModeratorsOnly();
$reason = KU_BANREASON;
$ban_ip = ''; $ban_hash = ''; $ban_parentid = 0; $multiban = Array();
if (isset($_POST['modban']) && is_array($_POST['post']) && $_POST['board']) {
$ban_board_id = $tc_db->GetOne("SELECT HIGH_PRIORITY `id` FROM `" . KU_DBPREFIX . "boards` WHERE `name` = " . $tc_db->qstr($_POST['board']) . "");
if (!empty($ban_board_id)) {
foreach ( $_POST['post'] as $post ) {
$results = $tc_db->GetAll("SELECT HIGH_PRIORITY * FROM `" . KU_DBPREFIX . "posts` WHERE `boardid` = '" . $ban_board_id . "' AND `id` = " . intval($post) . "");
if (count($results) > 0) {
$multiban[] = md5_decrypt($results[0]['ip'], KU_RANDOMSEED);
$multiban_hash[] = $results[0]['file_md5'];
$multiban_parentid[] = $results[0]['parentid'];
}
}
}
}
if (isset($_GET['banboard']) && isset($_GET['banpost'])) {
$ban_board_id = $tc_db->GetOne("SELECT HIGH_PRIORITY `id` FROM `" . KU_DBPREFIX . "boards` WHERE `name` = " . $tc_db->qstr($_GET['banboard']) . "");
$ban_board = $_GET['banboard'];
$ban_post_id = $_GET['banpost'];
if (!empty($ban_board_id)) {
$results = $tc_db->GetAll("SELECT HIGH_PRIORITY * FROM `" . KU_DBPREFIX . "posts` WHERE `boardid` = '" . $ban_board_id . "' AND `id` = " . $tc_db->qstr($_GET['banpost']) . "");
if (count($results) > 0) {
$ban_ip = md5_decrypt($results[0]['ip'], KU_RANDOMSEED);
$ban_hash = $results[0]['file_md5'];
$ban_parentid = $results[0]['parentid'];
} else {
$tpl_page.= _gettext('A post with that ID does not exist.') . ''. _gettext('Bans') . ' '. _gettext('Redirecting') . ' ...';
}
} else {
$tpl_page .= _gettext('Please enter a positive amount of seconds, or zero for a permanent ban.');
}
$tpl_page .= ''. _gettext('Whitelisted IPs') . ': '. _gettext('IP Range Bans') . ': '. _gettext('Previous bans on this IP') . ': '. _gettext('Single IP Bans') . ': ';
$tpl_page .= ($i == 1) ? _gettext('IP Range') : _gettext('IP Address');
$tpl_page .= ' '. _gettext('Boards') . ' '. _gettext('Reason') . ' '. _gettext('Staff Note') . ' '. _gettext('Date added') . ' '. _gettext('Expires/Expired') . ' '. _gettext('Added By') . ' '. md5_decrypt($line['ip'], KU_RANDOMSEED) . ' ';
if ($line['globalban'] == 1) {
$tpl_page .= ''. _gettext('All boards') . ' ';
} elseif (!empty($line['boards'])) {
$tpl_page .= '/'. implode('/ , /', explode('|', $line['boards'])) . '/ ';
}
$tpl_page .= ' ';
$tpl_page .= (!empty($line['reason'])) ? htmlentities(stripslashes($line['reason'])) : ' ';
$tpl_page .= ' ';
$tpl_page .= (!empty($line['staffnote'])) ? htmlentities(stripslashes($line['staffnote'])) : ' ';
$tpl_page .= ' '. date("F j, Y, g:i a", $line['at']) . ' ';
$tpl_page .= ($line['until'] == 0) ? ''. _gettext('Does not expire') . ' ' : date("F j, Y, g:i a", $line['until']);
$tpl_page .= ' '. $line['by'] . ' ['. _gettext('Delete') .' ]
';
if ($hiddenbans > 0) {
$tpl_page .= sprintf(_gettext('%s bans not shown.'), $hiddenbans) .
' '. _gettext('View all bans') . ' '.' View last 100 bans ';
}
} else {
$tpl_page .= _gettext('There are currently no bans');
}
}
$tpl_page .= ''. _gettext('File hash bans') . ': '. _gettext('Hash') . ' '. _gettext('Description') . ' '. _gettext('Ban time') . ' '. _gettext('None') . ' '. $line['md5'] . ' '. $line['description'] . ' ';
$tpl_page .= ($line['bantime'] == 0) ? ''. _gettext('Does not expire') . ' ' : $line['bantime'] . ' seconds';
$tpl_page .= ' [x ]
';
}
function appeals() {
global $tc_db, $tpl_page, $bans_class;
$this->ModeratorsOnly();
$tpl_page .= ''. _gettext('Appeals') . ' '. _gettext('IP Range bans') . ': '. _gettext('Single IP Bans') . ': ';
if ($i == 1) {
$tpl_page .= 'IP Range';
} else {
$tpl_page .= 'IP Address';
}
$tpl_page .= ' Boards Reason Staff Note Date Added Expires Added By Appeal Message Deny Accept ';
$tpl_page .= ''. md5_decrypt($line['ip'], KU_RANDOMSEED) . ' ';
if ($line['globalban'] == '1') {
$tpl_page .= ''. _gettext('All boards') . ' ';
} else {
if ($line['boards'] != '') {
$tpl_page .= '/'. implode('/ , /', explode('|', $line['boards'])) . '/ ';
}
}
$tpl_page .= ' ';
if ($line['reason'] != '') {
$tpl_page .= htmlentities(stripslashes($line['reason']));
} else {
$tpl_page .= ' ';
}
$tpl_page .= ' ';
if ($line['staffnote'] != '') {
$tpl_page .= htmlentities(stripslashes($line['staffnote']));
} else {
$tpl_page .= ' ';
}
$tpl_page .= ' '. date("F j, Y, g:i a", $line['at']) . ' ';
if ($line['until'] == '0') {
$tpl_page .= ''. _gettext('Does not expire') . ' ';
} else {
$tpl_page .= date("F j, Y, g:i a", $line['until']);
}
$tpl_page .= ' '. $line['by'] . '
'.$line['appeal'].'
:( :) ';
}
$tpl_page .= '
';
if ($hiddenbans>0) {
$tpl_page .= sprintf(_gettext('%s bans not shown.'), $hiddenbans) .
' '. _gettext('View all bans') . ' '.' View last 100 bans ';
}
} else {
$tpl_page .= _gettext('There are currently no bans.');
}
}
}
/* Search for all posts by a selected IP address and delete them */
function deletepostsbyip($from_ban = false) {
global $tc_db, $tpl_page, $board_class;
$this->ModeratorsOnly();
if (!$from_ban) {
$tpl_page .= ''. _gettext('Delete all posts by IP') . ' '. $i . ' posts were removed.'. _gettext('Recently uploaded images') . ' 25 , 50 , 75 , 100 '._gettext('(note that this is a rough limit, more may be shown)').''. "\n";
foreach ($results as $line) {
$reviewsql .= '(`boardid` = '.$line['boardid'] .' AND `id` = '. $line['id'] . ') OR ';
$real_parentid = ($line['parentid'] == 0) ? $line['id'] : $line['parentid'];
$tpl_page .= '/'. $line['boardname'] . '/'. $line['id'] . '
';
$reviewsql = substr($reviewsql, 0, -3);
$reviewsql_array[] = $reviewsql;
$imagesshown += count($results);
}
}
if ($imagesshown > 0) {
$tpl_page .= ''. _gettext('Recent posts') . ' 25 , 50 , 75 , 100 '._gettext('(note that this is a rough limit, more may be shown)').''. "\n";
$tpl_page .= ''._gettext('Post Number').' '._gettext('Post Message').' '._gettext('Poster IP').' /'. $line['boardname'] . '/'. $line['id'] . ' '. stripslashes($line['message']) . ' '. md5_decrypt($line['ip'], KU_RANDOMSEED) . '
';
$reviewsql = substr($reviewsql, 0, -3) . ' LIMIT '. count($results);
$reviewsql_array[] = $reviewsql;
$postsshown += count($results);
}
}
if ($postsshown > 0) {
$tpl_page .= 'APC '. _gettext('System (File cache)') .' ';
$tpl_page .= 'Start time: '. date("y/m/d(D)H:i", $apc_info_system['start_time']) . ' ';
$tpl_page .= 'Hits: '. $apc_info_system['num_hits'] . ' ';
$tpl_page .= 'Misses: '. $apc_info_system['num_misses'] . ' ';
$tpl_page .= 'Entries: '. $apc_info_system['num_entries'] . ' ';
$tpl_page .= ' User (kusaba) ';
$tpl_page .= 'Start time: '. date("y/m/d(D)H:i", $apc_info_user['start_time']) . ' ';
$tpl_page .= 'Hits: '. $apc_info_user['num_hits'] . ' ';
$tpl_page .= 'Misses: '. $apc_info_user['num_misses'] . ' ';
$tpl_page .= 'Entries: '. $apc_info_user['num_entries'] . ' ';
$tpl_page .= ' Clear APC cache ';
} else {
$tpl_page .= 'APC isn\'t enabled!';
}
}
/* Clear the APC cache */
function clearcache() {
global $tpl_page;
if (KU_APC) {
apc_clear_cache();
apc_clear_cache('user');
$tpl_page .= 'APC cache cleared.';
management_addlogentry(_gettext('Cleared APC cache'), 0);
} else {
$tpl_page .= 'APC isn\'t enabled!';
}
}
/* Generate a list of boards a moderator controls */
function BoardList($username) {
global $tc_db, $tpl_page;
$staff_boardsmoderated = array();
$results = $tc_db->GetAll("SELECT HIGH_PRIORITY `boards` FROM `" . KU_DBPREFIX . "staff` WHERE `username` = '" . $username . "' LIMIT 1");
if ($this->CurrentUserIsAdministrator() || $results[0][0] == 'allboards') {
$resultsboard = $tc_db->GetAll("SELECT HIGH_PRIORITY `id`, `name` FROM `" . KU_DBPREFIX . "boards` ORDER BY `name` ASC");
foreach ($resultsboard as $lineboard) {
$staff_boardsmoderated = array_merge($staff_boardsmoderated, array(array( 'name' => $lineboard['name'], 'id' => $lineboard['id'])));
}
} else {
if ($results[0][0] != '') {
foreach ($results as $line) {
$array_boards = explode('|', $line['boards']);
}
foreach ($array_boards as $this_board_name) {
$this_board_id = $tc_db->GetOne("SELECT HIGH_PRIORITY `id` FROM `" . KU_DBPREFIX . "boards` WHERE `name` = " . $tc_db->qstr($this_board_name) . "");
$staff_boardsmoderated = array_merge($staff_boardsmoderated, array(array('name' => $this_board_name, 'id' => $this_board_id)));
}
}
}
return $staff_boardsmoderated;
}
/* Generate a list of boards in query format */
function sqlboardlist() {
global $tc_db, $tpl_page;
$results = $tc_db->GetAll("SELECT HIGH_PRIORITY `id` FROM `" . KU_DBPREFIX . "boards` ORDER BY `name` ASC");
$sqlboards = '';
foreach ($results as $line) {
$sqlboards .= 'posts_'. $line['name'] . ', ';
}
return substr($sqlboards, 0, -2);
}
/* Generate a dropdown box from a supplied array of boards */
function MakeBoardListDropdown($name, $boards, $all = false) {
$output = ''. _gettext('Select a Board') .' ';
if (!empty($boards)) {
if ($all) {
$output .= ''. _gettext('All Boards') .' ';
}
foreach ($boards as $board) {
$output .= '/'. $board['name'] . '/ ';
}
}
$output .= ''. $board['name'] . ' '. _gettext('Select a Section') .' '. "\n";
$results = $tc_db->GetAll("SELECT `id`, `name` FROM `" . KU_DBPREFIX . "sections` ORDER BY `order` ASC");
if(count($results) > 0) {
foreach ($results as $section) {
if ($section['id'] == $selected) {
$select = ' selected="selected"';
} else {
$select = '';
}
$output .= ''. $section['name'] . ' '. "\n";
}
}
$output .= ''. _gettext('Looking for unused images in') .' /'. $lineboard['name'] . '/ '. _gettext('Looking for orphans in') .' /'. $lineboard['name'] . '/ '. _gettext('Spam.txt Management') .' !['. $line['filename'] . '.'. $line['filetype'] . ']('. KU_WEBPATH . '/'. $_GET['board'] . '/thumb/'. $line['filename'] . 's.'. $line['filetype'] . ')
'. "\n";
}
$tpl_page .= $line['message'];
$tpl_page .= '
';
} else {
$tpl_page .= 'File';
}
$tpl_page .= '