mirror/php-e107
1
0
Fork 0
mirror of https://github.com/e107inc/e107.git synced 2025-08-11 00:54:49 +02:00
Code Issues Releases Wiki Activity

Bugfix: img bbcode wasn't checking for 'admin' privelages.

Browse Source
This commit is contained in:
CaMer0n
2007-11-13 07:41:32 +00:00
parent 851f8cc320
commit 61ecd13a8c
1 changed files with 27 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

41
e107_files/bbcode/img.bb
View File

@@ -7,20 +7,22 @@ $code_text = str_replace($search, $replace, $code_text);
unset($imgParms);
$imgParms['class']="bbcode";
$imgParms['alt']='';
$imgParms['style']="vertical-align:middle; border:0";
$code_text = $tp -> toAttribute($code_text);
if($parm) {
if($parm)
{
$parm = preg_replace('#onerror *=#i','',$parm);
$parm = str_replace("amp;", "&", $parm);
parse_str($parm,$tmp);
foreach($tmp as $p => $v) {
foreach($tmp as $p => $v)
{
$imgParms[$p]=$v;
}
}
$parmStr="";
foreach($imgParms as $k => $v) {
foreach($imgParms as $k => $v)
{
$parmStr .= $tp -> toAttribute($k)."='".$tp -> toAttribute($v)."' ";
}
@@ -30,20 +32,28 @@ if((strpos($code_text,'../') === FALSE) && file_exists(e_IMAGE."newspost_images/
$code_text = e_IMAGE."newspost_images/".$code_text;
}
if (!$postID) {
if (!$postID || $postID == 'admin')
{
return "<img src='".$code_text."' {$parmStr} />";
} else {
if(strstr($postID,'class:')) {
}
else
{
if(strstr($postID,'class:'))
{
$uc = substr($postID,6);
}
if ($pref['image_post']) {
if(!isset($uc) || ($uc == '')) {
if (!function_exists('e107_userGetuserclass')) {
if ($pref['image_post'])
{
if(!isset($uc) || ($uc == ''))
{
if (!function_exists('e107_userGetuserclass'))
{
require_once(e_HANDLER.'user_func.php');
}
$uc = e107_userGetuserclass($postID);
}
if (check_class($pref['image_post_class'],$uc)) {
if (check_class($pref['image_post_class'],$uc))
{
return "<img src='".$code_text."' {$parmStr} />";
}
else
@@ -53,10 +63,13 @@ if (!$postID) {
}
else
{
if ($pref['image_post_disabled_method']) {
if ($pref['image_post_disabled_method'])
{
return '[ image disabled ]';
} else {
}
else
{
return "Image: $code_text";
}
}
}
}