';
$serendipity['guestbook']['paginator'] .= "\n";
}
return is_array($entries) ? $entries : false;
} // function frontend paginator end
/**
* Generate entries checks
*
* @param array $entries given string
* @param string $is_guestbook_ url create url
* @param int $wordwrap linebreak
* @param bool $backend_escape
* @return array $entries for output
*/
function generate_EntriesArray($entries, $is_guestbook_url, $wordwrap, $backend_escape = false) {
global $serendipity;
// this assigns db entries output to guestbooks smarty entries.tpl
if (is_array($entries)) {
foreach($entries AS $i => $entry) {
// entry items
$entry['email'] = $this->strip_security($this->safeEmail($entry['email']), null, true);
$entry['name'] = $this->strip_security($entry['name'], null, true);
$entry['homepage'] = !empty($entry['homepage']) && strpos($entry['homepage'],'http://') !== 0 && strpos($entry['homepage'],'https://') !== 0
? 'http://' . $this->strip_security($entry['homepage'], null, true)
: $this->strip_security($entry['homepage'], null, true);
$entry['pluginpath'] = $serendipity['serendipityHTTPPath'] . $serendipity['guestbook']['pluginpath'];
$entry['timestamp'] = strftime($this->get_config('dateformat'), (int)$entry['timestamp']); // mysql would use SELECT *, FROM_UNIXTIME(timestamp) AS ts FROM `s9y_guestbook`
$entry['page'] = $is_guestbook_url . (($serendipity['rewrite'] == 'rewrite') ? '?' : '&') . 'noclean=true&serendipity[adminAction]=guestbookdelete&serendipity[page]=' . (int)$serendipity['GET']['page'] . '&serendipity[gbid]=' . $entry['id'];
// authenticated user admincomment is not escaped - do not wordwrap this part (since it could cause undetermined string errors, etc)
$placeholder_ac = '[[$ac]]';
$replace_ac = $this->cut_string($entry['body'], '[ac]', '[/ac]');
$stripped_body = $this->strip_security($entry['body'], null, true);
$search_ac = $this->cut_string($stripped_body, '[ac]', '[/ac]');
$entry['body'] = str_replace($search_ac, $placeholder_ac, $stripped_body);
if (serendipity_db_bool($this->get_config('markup'))) {
// parse $entry['text'] through hook events standard formatting and smilies
$markup = array('body' => $entry['body']);
serendipity_plugin_api::hook_event('frontend_display', $markup, 'body');
$entry['body'] = wordwrap($markup['body'], $wordwrap, "\n", 1);
} else {
$entry['bodywrap'] = wordwrap($entry['body'], $wordwrap, "\n", 1);
$entry['body'] = nl2br($entry['bodywrap']);
}
if ($backend_escape) {
$replace_ac = $this->html_specialchars($replace_ac); // do not allow in backend, eg unescaped scripts
}
$entry['body'] = str_replace($placeholder_ac, $replace_ac, $entry['body']);
$entry['body'] = $this->text_pattern_bbc($entry['body']);
$entries[$i] = $entry;
}
}
return is_array($entries) ? $entries : false;
}
/**
* Insert guestbook entry into database and send mail
*
* @param int $id
* @param string $ip
* @param string $name
* @param string $url
* @param string $email
* @param string $body
* @param int $app approved
* @param int $ts timestamp
* @param boolean $old Insert/Replace
* @return boolean
*/
function insertEntriesDB($id=false, $ip=false, $name, $url, $email, $body, $app=false, $ts=false, $old=false) {
global $serendipity;
// make php to current unix timestamp to insert into db
$ip = isset($ip) ? $ip : serendipity_db_escape_string($_SERVER['REMOTE_ADDR']);
$app = isset($app) ? (int)$app : (serendipity_db_bool($this->get_config('showapp')) ? 0 : 1);
$ts = isset($ts) ? $ts : time();
$name = serendipity_db_escape_string(substr($name, 0, 29));
$url = serendipity_db_escape_string(substr($url, 0, 99));
$email = serendipity_db_escape_string(substr($email, 0, 99));
$body = serendipity_db_escape_string($body);
if ($old === false) {
// normal setting
$sql = sprintf("INSERT
INTO %sguestbook ( ip, name, homepage, email, body, approved, timestamp )
VALUES ( '%s', '%s', '%s', '%s', '%s', %s, %s)",
$serendipity['dbPrefix'], $ip, $name, $url, $email, $body, $app, $ts
);
} else {
// replace settings
$sql = "REPLACE {$serendipity['dbPrefix']}guestbook SET id=$id, ip='$ip', name='$name', homepage='$url', email='$email', body='$body', approved='$app', timestamp='$ts'";
}
$dbdone = serendipity_db_query($sql, true, 'both', true);
if ($dbdone) {
// if set, send an Email to the Admin $serendipity['email']
if (!serendipity_db_bool($this->get_config('emailadmin'))) {
return false;
} elseif (!$this->get_config('targetmail') || $this->get_config('targetmail') != '') {
$headers[] = 'X-SentBy: Serendipity Guestbook';
$headers[] = 'X-Priority: 2'; // prevent sent emails
$headers[] = 'X-MSmail-Priority: high'; // treated as junk mails
$body = str_replace(array('\r\n','\n'), "\n", $body); // without search = single and replace = double quotes, this won't work!!!
// does $serendipity['csuccess'] ever return to be moderate?
if (serendipity_db_bool($this->get_config('showapp')) === false && ($app == 0 || $serendipity['csuccess'] == 'moderate')) { $body = $body . sprintf(TEXT_EMAILMODERATE, $serendipity['moderate_reason']); }
return @serendipity_sendMail($this->get_config('targetmail'), TEXT_EMAILSUBJECT, sprintf(TEXT_EMAILTEXT,$name, $body, TEXT_EMAILFOOTER), $email, $headers, $name);
}
return true;
}
}
/**
* Guestbook entries count db
*
* @param int $ap approved
* @return mixed boolean/int
*/
function countEntriesDB($ap) {
global $serendipity;
$whe = (serendipity_db_bool($this->get_config('showapp')) || serendipity_db_bool($this->get_config('automoderate'))) ? "WHERE approved=$ap" : '';
// count guestbook entries to make entries paging
$sql = "SELECT count(*) AS counter FROM {$serendipity['dbPrefix']}guestbook $whe";
$maxres = serendipity_db_query($sql, true);
return is_array($maxres) ? $maxres : false;
}
/**
* Guestbook Select entries
*
* @param int $cp limit from
* @param int $rp limit to
* @param int $ap approved
* @return mixed boolean/array $entries
*/
function getEntriesDB($cp, $rp, $ap) {
global $serendipity;
$whe = (serendipity_db_bool($this->get_config('showapp')) || serendipity_db_bool($this->get_config('automoderate'))) ? "WHERE approved=$ap" : '';
// generate guestbook entries and send them to entries template
$sql = "SELECT * FROM {$serendipity['dbPrefix']}guestbook $whe ORDER BY timestamp DESC ";
$entries = serendipity_db_query($sql . serendipity_db_limit_sql(
serendipity_db_limit(
$cp * $rp, $rp
)
), false, 'assoc'
);
return is_array($entries) ? $entries : false;
}
/**
* Guestbook form submit POST checks, validate & insert into db
*
* @return boolean on error
*/
function checkSubmit() {
global $serendipity;
global $messages;
if (!is_array($messages)) {
$messages = array();
}
$valid['captcha'] = FALSE;
$valid['data_length'] = FALSE;
$valid['data_email'] = FALSE;
$valid['message'] = FALSE;
$serendipity['guestbook_message_header'] = FALSE;
$authenticated_user = serendipity_userLoggedIn() ? true : false;
$gb_automoderate = serendipity_db_bool($this->get_config('automoderate'), false);
if (empty($serendipity['POST']['guestbookform'])) {
return false;
}
if (!isset($serendipity['POST']['email']) || empty($serendipity['POST']['email'])) {
$serendipity['POST']['email'] = 'nospam@example.com';
}
if (empty($serendipity['POST']['name']) && empty($serendipity['POST']['email']) && empty($serendipity['POST']['comment'])) {
array_push($messages, PLUGIN_GUESTBOOK_MESSAGE . ': ' . PLUGIN_GUESTBOOK_ERROR_DATA . ' - ' . ERROR_NOINPUT);
return false;
}
if (!$serendipity['POST']['email'] || !$serendipity['POST']['name'] || !$serendipity['POST']['comment']) {
array_push($messages, ERROR_NOINPUT);
return false;
}
// do not allow non logged-in manual BBCode in comments
if (!$authenticated_user) {
$serendipity['POST']['comment'] = $this->bbc_reverse($serendipity['POST']['comment']);
}
// find Spamblock global set force auto moderation
if ($hit = preg_grep("|/forcemoderation_treat|i", array_keys($serendipity))) {
$forcemoderate = array_values($hit);
}
// if force moderate is set to moderate, advice security to not support 'stripped' or 'stripped-by-key' POST mark
// this does only happen true, if not automoderate is set in both plugins and strip tags really removed some tags.
if (isset($serendipity[$forcemoderate[0]]) == 'moderate' && $gb_automoderate === true) {
$serendipity['POST'] = $this->strip_security($serendipity['POST'], array('name', 'email', 'comment', 'admincomment', 'url'), false, false);
} else {
$serendipity['POST'] = $this->strip_security($serendipity['POST'], array('name', 'email', 'comment', 'admincomment', 'url'));
}
if ($serendipity['POST']['stripped'] === true) {
array_push($messages, ERROR_OCCURRED . '