)(.*?)(<\/pre>)/i e', "'\\1' . str_ireplace(\" \", \"\", str_replace('\\\"', '\"', '\\2')) . '\\3'", $cleancode);
}
$tc++;
}
return $cleancode;
}
$cleancode = cleantags();
// Edit comment
if (isset($_POST["cmtpass"]) && isset($_POST["cmtfile"]) && !isset($_POST["delsub"])) {
if(file_exists($dir . '/' . $_POST["cmtfile"])){
$getpass = explode("\n", file_get_contents($dir . '/' . sanitize($_POST["cmtfile"])));
$edit_name = preg_replace('/Name: /', '', $getpass[0], 1);
$edit_site = preg_replace('/Site: /', '', $getpass[1], 1);
$edit_date = preg_replace('/Date: /', '', $getpass[2], 1);
$edit_mail = preg_replace('/Mail: /', '', $getpass[3], 1);
$edit_pass = preg_replace('/Pass: /', '', $getpass[4], 1);
$edit_addr = preg_replace('/Addr: /', '', $getpass[5], 1);
// Check if password matches the one in the file
if (md5(encrypt(stripslashes($_POST["cmtpass"]), $key)) == $edit_pass) {
// Write edited comment to file
$edit_data = "Name: $edit_name\n";
$edit_data .= "Site: $edit_site\n";
$edit_data .= "Date: $edit_date\n";
$edit_data .= "Mail: $edit_mail\n";
$edit_data .= "Pass: $edit_pass\n";
$edit_data .= "Addr: $edit_addr\n\n";
$edit_data .= $cleancode;
file_put_contents($dir . '/' . $_POST["cmtfile"], $edit_data, LOCK_EX);
setcookie('password', str_replace($search, '', stripslashes($_POST["cmtpass"])), $expire);
}
}
// Kick visitor back to comment
$kickback = explode('/', $dir . '/' . $_POST["cmtfile"], 4);
header('Location: ' . $httpref . '#c' . str_replace(array('/', '.txt'), array('r', ''), $kickback[3]));
die();
}
// Write comment to file
$data = "Name: $name\n";
$data .= "Site: $website\n";
$data .= "Date: " . date('m/d/Y - g:ia') . "\n";
$data .= "Mail: " . str_replace('"', '"', encrypt(str_replace($search, '', stripslashes($_POST["email"])), $key)) . "\n";
if (isset($_POST["password"]) && !empty($_POST["password"])) {
$data .= 'Pass: ' . md5(encrypt(str_replace($search, '', stripslashes($_POST["password"])), $key)) . "\n";
} else {
$data .= "Pass: \n";
}
$data .= 'Addr: ' . $_SERVER["REMOTE_ADDR"] . "\n\n";
$data .= $cleancode;
$reply_to = '';
if (isset($_POST["reply_to"]) && !empty($_POST["reply_to"])) {
if (!preg_match('/[a-zA-Z]/i', $_POST["reply_to"]) && file_exists($dir . '/' . $_POST["reply_to"] . ".txt")) {
// Set reply directory information & "cookie" for successful reply
$dir .= '/' . sanitize(stripslashes($_POST["reply_to"]));
$reply_to = sanitize(stripslashes($_POST["reply_to"])) . '/';
$cmtcount = read_comments($dir,'no');
setcookie('replied', $_POST["reply_to"], $expire);
}
}
$reply_to .= $cmtcount;
file_put_contents($dir . '/' . $cmtcount . '.txt', $data, LOCK_EX);
chmod($dir . '/' . $cmtcount . '.txt', 0775);
// Send notification e-mails
$permaplode = explode('/', $dir . '/' . $cmtcount, 4);
$permalink = 'c' . str_replace(array('/', '.txt'), array('r', ''), $permaplode[3]);
$inline_reply = '';
if (isset($_POST["reply_to"]) && !empty($_POST["reply_to"])) {
if (!preg_match('/[a-zA-Z]/i', $_POST["reply_to"]) && file_exists($dir . '/' . $_POST["reply_to"] . ".txt")) {
$getcmt = explode("\n", file_get_contents($dir . '/' . sanitize($_POST["cmtfile"])));
$clean_name = preg_replace('/Name: /', '', $getcmt[0], 1);
$clean_date = preg_replace('/Date: /', '', $getcmt[2], 1);
$clean_mail = preg_replace('/Mail: /', '', $getcmt[3], 1);
$clean_comment = $getcmt[7];
$reverse_datasearch = array('"', '<', '>', ' \n', '\n', ' ', ' ');
$reverse_datareplace = array('"', '<', '>', "\n", "\n", "\r", ' ');
$to_commenter = "\nIn reply to:\n\n\t" . str_replace($reverse_datasearch, $reverse_datareplace, $clean_comment) . "\n\n";
$to_webmaster = "\nIn reply to $clean_name:\n\n\t" . str_replace($reverse_datasearch, $reverse_datareplace, $clean_comment) . "\n\n";
$decryto = encrypt($clean_mail, $key);
if (!empty($clean_mail) && $decryto != $enotify && $decryto != $_POST["email"]) {
mail($decryto, 'TildeHash: New Reply', "From $name:\n\n\t" . stripslashes($_POST["comment"]) . "\n\n$to_commenter----\nPermalink: $httpref" . '#' . $permalink . "\nPage: $httpref", $header);
}
}
}
if (isset($_POST["email"])) {
if ($_POST["email"] != $enotify) {
mail("$enotify", 'New Comment', "From $name:\n\n\t" . stripslashes($_POST["comment"]) . "\n\n$to_webmaster----\nPermalink: $httpref" . '#' . $permalink . "\nPage: $httpref", $header);
}
}
// Set blank cookie for successful comment, kick visitor back to comment
setcookie('replied', '', $expire);
header('Location: ' . $httpref . '#' . $permalink);
die();
} else if (isset($_POST["go"])) {
// Set failed comment cookie, kick visitor back to comment form
if (isset($_POST["reply_to"]) && !empty($_POST["reply_to"])) {
setcookie('replied', $_POST["reply_to"], $expire);
}
setcookie('success', 'no', $expire);
header('Location: ' . $httpref . '#comments');
die();
}
}
// "Delete" comment
if (isset($_POST["cmtpass"]) && isset($_POST["delsub"]) && !isset($_POST["editsub"])) {
if(file_exists($dir . '/' . $_POST["cmtfile"])){
$getpass = explode("\n", file_get_contents($dir . '/' . sanitize($_POST["cmtfile"])));
$cleanpass = preg_replace('/Pass: /', '', $getpass[4], 1);
// Check if password matches the one in the file
if (md5(encrypt(stripslashes($_POST["cmtpass"]), $key)) == $cleanpass) {
// "Delete" the comment
file_put_contents($dir . '/' . sanitize($_POST["cmtfile"]), 'deleted', LOCK_EX);
chmod($dir . '/' . sanitize($_POST["cmtfile"]), 0644);
setcookie('password', str_replace($search, '', stripslashes($_POST["cmtpass"])), $expire);
}
}
// Kick visitor back to comment
$kickback = explode('/', $dir . '/' . $_POST["cmtfile"], 4);
header('Location: ' . $httpref . '#c' . str_replace(array('/', '.txt'), array('r', ''), $kickback[3]));
die();
}
// JavaScript output and comment form
?>
// Copyright (C) 2012 Jacob Barkdull, Jeremiah Stoddard
//
// This program is free software: you can redistribute it and/or modify
// it under the terms of the GNU Affero General Public License as
// published by the Free Software Foundation, either version 3 of the
// License, or (at your option) any later version.
//
// This program is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
// GNU Affero General Public License for more details.
//
// You should have received a copy of the GNU Affero General Public License
// along with this program. If not, see .
//
//--------------------
//
// Source Code and Installation Instructions:
// http://
//
// Default form settings
if (power == undefined) { var power = 'yes'; }
if (commentform == undefined) { var commentform = 'top'; }
if (boxheight == undefined) { var boxheight = '8'; }
if (name_on == undefined) { var name_on = 'yes'; }
if (email_on == undefined) { var email_on = 'yes'; }
if (sites_on == undefined) { var sites_on = 'yes'; }
if (passwd_on == undefined) { var passwd_on = 'yes'; }
// Displays comment form, count, and comments
if (power == 'yes') {
// Function to display comments and comment form
function showcomments() {
if (document.title != '') {
var pagetitle = ' on \"'+document.title+'\"';
} else {
var pagetitle = '';
}
document.write("
\n");
document.write("Post a Comment\n");' . "\n";
// Check if either a comment or reply failed to post
if (isset($_COOKIE["success"]) && $_COOKIE["success"] == "no") {
if (!isset($_COOKIE["replied"]) && empty($_COOKIE["replied"])) {
echo "\t\t" . 'document.write("A Comment Is Required!
\n";
} else {
var reply_passwd = '';
}
if (email_on == 'yes') {
var reply_email = "
E-mail Address: \" style=\"width: 97%;\">
\n";
} else {
var reply_email = '';
}
if (sites_on == 'yes') {
var reply_sites = "
Website: \" style=\"width: 97%;\">
\n";
} else {
var reply_sites = '';
}
var reply_form_close = "
\n\
\n
\n\
\n\
\n\
\n\
\n\
\n
\n";
document.getElementById("reply"+r).innerHTML = ""+reply_form_open+""+reply_name+""+reply_passwd+""+reply_email+""+reply_sites+""+reply_form_close+"";
if (document.getElementById("editcmt"+r) != null) {
document.getElementById("editcmt"+r).innerHTML = '';
}
if (document.getElementById("options"+r).style.display != 'none') {
document.getElementById("optslink"+r).style.display = 'none';
}
return false;
}
// Function to cancel reply
function cancelreply(r) {
if (document.getElementById("editcmt"+r) != null) {
document.getElementById("editcmt"+r).innerHTML = "";
}
document.getElementById("reply"+r).innerHTML = "";
return false;
}
// Displays edit form
function editcmt(e) {
var cmtdata = document.getElementById("cmtdata"+e).innerHTML.replace(/ /gi, '').replace(/<\/?a(\s+.*?>|>)/gi, '');
document.getElementById("editcmt"+e).innerHTML = '\n
\n\
\n\
\n\
\n\
\n\
Edit Comment \n\
\n\
· Password: \">\n\
\n\
\n\
\n\
\n\
\n
';
document.getElementById("reply"+e).innerHTML = '';
return false
}
// Function to cancel comment edit
function canceledit(e) {
document.getElementById("editcmt"+e).innerHTML = "";
document.getElementById("reply"+e).innerHTML = "";
return false;
}
// Displays options table
function options(r) {
if (name_on == 'yes' || email_on == 'yes' || passwd_on == 'yes' || sites_on == 'yes') {
document.getElementById("options"+r).style.display = '';
document.getElementById("optslink"+r).style.display = 'none';
} else {
document.getElementById("options"+r).style.display = '';
document.getElementById("optslink"+r).innerHTML = 'All Options Are Disabled ·';
}
return false;
}
// Displays a "blank email address" warning
function noemail() {
if (document.comment_form.email.value == '' && email_on == "yes") {
var answer = confirm('You will not receive notification of replies to your comment without supplying an e-mail.');
if (answer == false) {
document.comment_form.email.focus();
return false;
}
}
}
// Displays a "blank email address" warning when replying
function noemailreply(f) {
if (document.getElementById("reply_form"+f).email.value == '' && email_on == "yes") {
var answer = confirm('You will not receive notification of replies to your comment without supplying an e-mail.');
if (answer == false) {
document.getElementById("options"+f).style.display = '';
document.getElementById("optslink"+f).style.display = 'none';
document.getElementById("reply_form"+f).email.focus();
return false;
}
}
}
// Displays confirmation dialog for deletion
function delwarn() {
var answer = confirm('Are you sure you want to delete this comment?');
if (answer == false) {
return false;
}
}
// Displays notice that a commenter will receive notifications of replies
function chkmk(n) {
alert(n+' has supplied an e-mail address and will be notified of replies.');
}
// Displays information about passwords
function passwordinfo(c) {
alert('Enter a password if you want to be able to edit or delete your '+c+' later.');
}
![\"@notices\"](\"')
';
}
$showcmt .= '\n");' . "\n";
if ($short_dates == 'yes') {
$get_cmtdate = explode(" - ", $readcmt_date);
$make_cmtdate = new DateTime($get_cmtdate[0]);
$curdate = new DateTime(date('m/d/Y'));
$interval = $make_cmtdate->diff($curdate);
if ($interval->y != '') {
$readcmt_date = $interval->y . ' year';
$readcmt_date .= ($interval->y != 1) ? 's ago' : ' ago';
} else if ($interval->m != '') {
$readcmt_date = $interval->m . ' month';
$readcmt_date .= ($interval->m != 1) ? 's ago' : ' ago';
} else if ($interval->d != '') {
$readcmt_date = $interval->d . ' day';
$readcmt_date .= ($interval->d != 1) ? 's ago' : ' ago';
} else {
$readcmt_date = $get_cmtdate[1] . ' today';
}
}
$showcmt .= "\t" . 'document.write("