'smilie image'
$smiliesConfig = array(':)' => 'happy.png',
':D' => 'grin.png',
'=D' => 'lol.png',
':O' => 'surprise.png',
':p' => 'razz.png',
':(' => 'sad.png',
':}' => 'kitty.png',
';)' => 'wink.png',
':|' => 'neutral.png',
'(blush)' => 'blush.png',
':{' => 'confuse.png',
'B)' => 'cool.png',
':,(' => 'cry.png',
'8|' => 'eek.png',
'(evil)' => 'evil.png',
'(fat)' => 'fat.png',
'(green)' => 'green.png',
':*' => 'kiss.png',
'(angry)' => 'mad.png',
'(rolleyes)' => 'roll.png',
'(zzz)' => 'sleep.png',
'(yell)' => 'yell.png',
'(zipper)' => 'zipper.png',
'<3' => 'heart.png',
'</3' => 'broken-heart.png');
## BADWORD FILTER CONFIG ##
// Badwords to strip from shouts
$badwords = array('fuck','fucker','shit','piss','cunt','pussy','dick','asshole','bitch','bitches','whore','nigga','nigger');
## ADMIN CONFIG ##
$admin_username = 'Admin'; // Name of the user who has Admin Access
$admin_password = 'demo'; // Password for admin access. (Make it a difficult one!)
## TIME FORMAT CONFIG ##
$timeFormat = 'g:i:sa'; // Time format for shouts based on PHP's date function
############################################################################
#### END CONFIGURATION #####################################################
############################################################################
########################################################################
#### DO NOT EDIT ANYTHING BELOW UNLESS YOU KNOW WHAT YOU ARE DOING! ####
########################################################################
# Check variable(s) to figure out what we are doing
if(!headers_sent()) { session_start(); }
$shoutcloud_com = strip_tags($_POST['sc_com']); $shoutcloud_display = strip_tags($_POST['display']); require_once('shoutcloud/shoutcloud-lang.php');
$shoutcloud = new ShoutCloud($shoutFile,$banlistFile,$ShoutCloud_Lang,$smiliesFolder,$smiliesConfig,$badwords,$timeFormat,$admin_username,$admin_password);
if($shoutcloud_display=='banlist') {
if((empty($_SESSION['ShoutCloud_Admin_Name'])) && (empty($_SESSION['ShoutCloud_Admin_Loggedin']))) { die($this->jsonEncode(array('error'=>$ShoutCloud_Lang['Admin-Error-BanList']))); }
$out = ''.$ShoutCloud_Lang['BanList-Title'].'
';
$bans = fopen($shoutcloud->bansFile, 'a+'); if(!is_writable($shoutcloud->bansFile)) { chmod($shoutcloud->bansFile, 0666); }
if(filesize($shoutcloud->bansFile)>0) { $allBans = unserialize(fread($bans, filesize($shoutcloud->bansFile))); fclose($bans);
if(empty($allBans)) { $out .= $ShoutCloud_Lang['Admin-Error-NoBans']; } else { $out .= '
';
foreach($allBans as $ip => $user) { $expires = ($user['expire'] > 0) ? $shoutcloud->formatTime($user['expire']) : 'never';
if($expires===false) { $shoutcloud->unbanUser($ip,'internal'); } else { $expires = ($expires=='never') ? $ShoutCloud_Lang['BanList-Expires-Never'] : $ShoutCloud_Lang['BanList-Expires-In'].' '.$expires;
$out .= '
'.$ShoutCloud_Lang['BanList-Remove-Ban'].'
'.$user['name'].'
-
'.$ShoutCloud_Lang['BanList-Expires-Text'].' '.$expires.''.$ip.'';
}
} $out .= '
';
}
} else { $out .= $ShoutCloud_Lang['Admin-Error-NoBans']; } die($shoutcloud->jsonEncode(array('content'=>$out.'
'.$ShoutCloud_Lang['Clear-Title'].'
'.$ShoutCloud_Lang['Admin-Clear-Description'].'
'.$ShoutCloud_Lang['Clear-All-Msgs'].'
'; }
$username = (!empty($_SESSION['ShoutCloud-User'])) ? $_SESSION['ShoutCloud-User'] :
(((!empty($_SESSION['ShoutCloud_Admin_Name'])) && (!empty($_SESSION['ShoutCloud_Admin_Loggedin']))) ? $_SESSION['ShoutCloud_Admin_Name'] : '');
$loadtype = (!empty($_SESSION['ShoutCloud_Admin_Name'])) && (!empty($_SESSION['ShoutCloud_Admin_Loggedin'])) ? 'adminhtml' : 'html';
$swatches = ''; $tagColors = array('Pink', 'Purple', 'Blue', 'LightBlue', 'Teal', 'Green', 'DarkGreen', 'Lime', 'Yellow', 'Orange', 'Red', 'Default');
if(!empty($_SESSION['ShoutCloud_Tag_Color'])) { $tagColor = $_SESSION['ShoutCloud_Tag_Color']; } else { $tagColor = 'Default'; }
foreach($tagColors as $k=>$color) { $swatches.=''; }
echo '
'.$this->loadMessages($loadtype).'
'.(((!empty($_SESSION['ShoutCloud_Admin_Name'])) && (!empty($_SESSION['ShoutCloud_Admin_Loggedin']))) ?
'
'.$this->lang['Admin-Btn-Shout'].''.$this->lang['Admin-Btn-Bans'].''.$this->lang['Admin-Btn-ClearAll'].''.$this->lang['Admin-Btn-Logout'].'
' : '').'
';
}
# loadMessages function
# Loads the messages based on the specified output
# Options: [output (html, json, admin)]
function loadMessages($output,$lastpost=-1) {
$msgs = fopen($this->msgsFile, 'a+'); if(!is_writable($this->msgsFile)) { chmod($this->msgsFile, 0666); }
if(filesize($this->msgsFile)==0) { fwrite($msgs, serialize((array(0=>array('time' => 0, 'user' => $this->lang['System-Default-Name'], 'msg' => $this->lang['System-Default-Msg']))))); }
fclose($msgs); $contents = unserialize(file_get_contents($this->msgsFile)); $dataout=array();
if(($output=='admin')||($output=='adminhtml')) {
foreach($contents as $pos => $data) {
if($pos > $lastpost) {
if($data['status']!=='deleted') {
$adminControls = '
'.$data['ip'].'
'.$this->lang['BanUser-Title'].''.$this->lang['BanUser-1min'].'
'.$this->lang['BanUser-10mins'].'
'.$this->lang['BanUser-1hour'].'
'.$this->lang['BanUser-1day'].''.$this->lang['BanUser-Forever'].'
'.$this->lang['Shout-Delete-Btn'].''.$this->lang['Shout-Reply-Btn'].'
';
$dataout['msgs'] .= ''.
((utf8_decode($data['user'])==$this->adminUser) ? '' : $adminControls).'' : ' shout-admin-user" title="'.$this->lang['Admin-Open-User-Msg'].'">')
.utf8_decode($data['user']).''.(($data['time']==0) ? '' : ''.date('g:i:sa',$data['time'])).''.$this->formatMessage($data['msg']).'
';
}
}
}
} else {
foreach($contents as $pos => $data) {
if($pos > $lastpost) {
if($data['status']!=='deleted') {
$dataout['msgs'] .= '
lang['Reply-To-Msg'].' '.utf8_decode($data['user']).'" class="ShoutCloud-Reply')
.((!empty($data['color'])) ? ' ShoutCloud-Swatch-'.$data['color'] : '').((utf8_decode($data['user'])==$this->adminUser) ? ' shout-admin">' : '">')
.utf8_decode($data['user']).''.(($data['time']==0) ? '' : ''.date('g:i:sa',$data['time'])).''.$this->formatMessage($data['msg']).'
';
}
}
}
}
if(($output=='html')||($output=='adminhtml')) { $htmlout=''; foreach($dataout as $k => $v) { $htmlout .= $v; } return $htmlout;
} else { if(!empty($dataout)) { return $this->jsonEncode($dataout); } else { return $this->jsonEncode(array('msgs' => '')); }
}
}
# formatMessage function
# Removes bad words and adds smilies
# Options: [message]
function formatMessage($msg) {
$msg = str_ireplace($this->badwords, '****', $msg); foreach($this->smilies as $acii => $img) { $msg = str_ireplace($acii, '', $msg); }
$patterns = array('/([^\w\/])(www\.[a-z0-9\-]+\.[a-z0-9\-]+)/i','/([\w]+:\/\/[\w-?&;#~=\.\/\@]+[\w\/])/i','/([\w-?&;#~=\.\/]+\@(\[?)[a-zA-Z0-9\-\.]+\.([a-zA-Z]{2,3}|[0-9]{1,3})(\]?))/i',
'~\[@([^\]]*)\]~','~\[([^\]]*)\]~','~{([^}]*)}~','~_([^_]*)_~','/\s{2}/');
$replacements = array('$1http://$2','$1','$1','@\\1','\\1','\\1','\\1','
');
$msg = preg_replace($patterns, $replacements, $msg); return stripslashes(stripslashes(utf8_decode($msg)));
}
# checkUsername function
# Removes badwords and cleans up a user's name
# Options: [user's name]
function checkUsername($name) {
$bad_usernames = array('admin','Administrator','administrator','ADMIN'); if((empty($_SESSION['ShoutCloud_Admin_Name'])) && (empty($_SESSION['ShoutCloud_Admin_Loggedin']))) { $bad_usernames[] = $this->adminUser; }
$name = utf8_encode(strip_tags($name)); foreach($bad_usernames as $k=>$n) { if($name==$n) { return false; } } return str_ireplace($this->badwords,'',$name);
}
# addMessage function
# Cleans and applies new submitted shout
# Options: [user], [message], [tag color]
function addMessage($user, $msg, $color) {
$user = $this->checkUsername($user); if($user===false) { return $this->jsonEncode(array('error'=>$this->lang['Error-Invalid-Name'])); }
if(strlen(utf8_decode($user)) > 25) { return $this->jsonEncode(array('error'=>$this->lang['Error-Name-Length'])); } $msg = utf8_encode(addslashes(strip_tags($msg)));
if(strlen($msg) > 500) { return $this->jsonEncode(array('error'=>$this->lang['Error-Msg-Length'])); }
if((empty($user)) || ($user=='Your Name')) { return $this->jsonEncode(array('error'=>$this->lang['Error-Empty-Name'])); }
if((empty($msg)) || ($user=='Message')) { return $this->jsonEncode(array('error'=>$this->lang['Error-Empty-Msg'])); }
if($this->isBanned($_SERVER['REMOTE_ADDR'])===true) { return $this->jsonEncode(array('error'=>$this->lang['Error-Banned'])); }
if((empty($_SESSION['ShoutCloud-User'])) || (!isset($_SESSION['ShoutCloud-User'])) || ($_SESSION['ShoutCloud-User']!==$user)) { $_SESSION['ShoutCloud-User'] = $user; }
if((empty($_SESSION['ShoutCloud_Tag_Color'])) || ($_SESSION['ShoutCloud_Tag_Color']!==$color)) { $_SESSION['ShoutCloud_Tag_Color'] = $color; }
$allMsgs = unserialize(file_get_contents($this->msgsFile)); if(empty($_SESSION['ShoutCloud-User-Flood'])) { $_SESSION['ShoutCloud-User-Flood'] = 0; }
if($_SESSION['ShoutCloud-User-Flood'] > time()) { return $this->jsonEncode(array('error'=>$this->lang['Error-Msg-Flood'])); } $_SESSION['ShoutCloud-User-Flood'] = time() + 5;
$allMsgs[] = array('time' => time(), 'user' => $user, 'msg' => $msg, 'color' => $color, 'ip' => $_SERVER['REMOTE_ADDR']); $totalMsgs = count($allMsgs);
if($totalMsgs > 30) { $difference = ($totalMsgs - 30); $i=1; $allMsgs = array_reverse($allMsgs, true); while($i <= $difference) { $remove = array_pop($allMsgs); $i++; } $allMsgs = array_reverse($allMsgs, true);
} else { $difference = 0; } $msgFile = fopen($this->msgsFile, 'w');
if(fwrite($msgFile, serialize($allMsgs))) { fclose($msgFile); return $this->jsonEncode(array('status' => 'posted')); } else { fclose($msgFile);
return $this->jsonEncode(array('error'=>$this->lang['Error-Cannot-Post'])); }
}
# adminLogin function
# Handles the checking of admin password
# Options: [user], [password]
function adminLogin($user, $pass) {
$pass = htmlentities(strip_tags($pass)); $user = htmlentities(strip_tags($user));
if(($pass == $this->adminPass) && ($user == $this->adminUser)) { $_SESSION['ShoutCloud_Admin_Name'] = $user; $_SESSION['ShoutCloud_Admin_Loggedin'] = 'true'; return $this->jsonEncode(array('status'=>'loggedin'));
} else { return $this->jsonEncode(array('error'=>$this->lang['Admin-Error-InvalidUser'])); }
}
# adminLogout function
# Handles logging out of an admin account
# Options: none
function adminLogout() { unset($_SESSION['ShoutCloud_Admin_Name']); unset($_SESSION['ShoutCloud_Admin_Loggedin']); return $this->jsonEncode(array('status'=>'loggedout')); }
# isAdmin function
# Checks if user is an admin
# Options: none
function isAdmin() { if((!empty($_SESSION['ShoutCloud_Admin_Name']))&&(!empty($_SESSION['ShoutCloud_Admin_Loggedin']))) { return true; } else { $this->jsonEncode(array('error'=>$this->lang['Admin-Error-Admin'])); } }
# banUser function
# Handles user bans by admins
# Options: [user's name], [ip address], [expire time]
function banUser($name, $ip, $expire) {
$allBans = file_get_contents($this->bansFile); $bans = fopen($this->bansFile, 'w+'); if(!is_writable($this->bansFile)) { chmod($this->bansFile, 0666); }
$allBans = (filesize($this->bansFile)==0) ? array() : unserialize($allBans); $expire = ((empty($expire)) || ($expire==0)) ? 0 : strtotime($expire); $allBans[$ip] = array('name' => $name, 'expire' => $expire);
fwrite($bans, serialize($allBans)); fclose($bans); return $this->jsonEncode(array('status'=>'banned'));
}
# unbanUser function
# Handles unbanning users
# Options: [ip address], [type]
function unbanUser($ip,$type='box') {
$allBans = file_get_contents($this->bansFile); $bans = fopen($this->bansFile, 'w+'); if(!is_writable($this->bansFile)) { chmod($this->bansFile, 0666); }
$allBans = (filesize($this->bansFile)==0) ? array() : unserialize($allBans); if(array_key_exists($ip, $allBans)) { unset($allBans[$ip]); }
fwrite($bans, serialize($allBans)); fclose($bans); if($type == 'box') { return $this->jsonEncode(array('status'=>'removed')); }
}
# isBanned function
# Checks if user's IP is banned by an admin
# Options: [ip address]
function isBanned($ip) {
$bans = fopen($this->bansFile, 'a+'); if(!is_writable($this->bansFile)) { chmod($this->bansFile, 0666); }
if(filesize($this->bansFile)>0) { $allBans = unserialize(fread($bans, filesize($this->bansFile))); fclose($bans);
if(array_key_exists($ip, $allBans)) { if(($allBans[$ip]['expire'] !== 0) && ($allBans[$ip]['expire'] < time())) { $this->unbanUser($ip,'internal'); return false; } return true; } else { return false; }
}
}
# deleteMessage function
# Deletes specific message from the shout box
# Options: [shout id]
function deleteMessage($id) {
$allMsgs = unserialize(file_get_contents($this->msgsFile)); $id = str_ireplace('shoutid-','',$id);
$allMsgs[$id] = array('time' => time(), 'user' => $user, 'msg' => $msg, 'color' => $color, 'ip' => $_SERVER['REMOTE_ADDR'], 'status' => 'deleted'); $msgFile = fopen($this->msgsFile, 'w');
if(fwrite($msgFile, serialize($allMsgs))) { fclose($msgFile); return $this->jsonEncode(array('status'=>'deleted')); } else {
fclose($msgFile); return $this->jsonEncode(array('error'=>$this->lang['Admin-Error-Cannot-Delete']));
}
}
# clearShoutbox function
# Clears all the messages from the shoutbox
# Options: none
function clearShoutbox() {
$msgFile = fopen($this->msgsFile, 'w+'); fwrite($msgFile, serialize((array(0=>array('time' => 0, 'user' => $this->lang['System-Default-Name'], 'msg' => $this->lang['System-Default-Msg'])))));
fclose($msgFile); return $this->jsonEncode(array('status'=>'cleared'));
}
# formatTime function
# Formats time for the Ban List
# Options: [timestamp]
function formatTime($ts) {
$current = time(); $seconds = $ts-$current; if($seconds < 1) { return false; }
switch($seconds) {
case($seconds < 60): $unit=$var=$seconds; $var.=" second"; break;
case($seconds < 3600): $unit=$var=round($seconds/60); $var.=" minute"; break;
case($seconds < 86400): $unit=$var=round($seconds/3600); $var.=" hour"; break;
case($seconds < 2629744): $unit=$var=round($seconds/86400); $var.=" day"; break;
case($seconds < 31556926): $unit=$var=round($seconds/2629744); $var.=" month"; break;
default: $unit=$var=round($seconds/31556926); $var.=" year";
}
if($unit > 1) { $var.="s"; } return $var;
}
function jsonEncode($var) { return json_encode($var); }
}
?>