Désolé j'ai oublié deja de m'identifier et de donner le nom du fichier qui est nkSessions.php
Ci dessous un autre fichier qui est index.php des news.
Code : Tout sélectionner
<?php
// -------------------------------------------------------------------------//
// Nuked-KlaN - PHP Portal //
// http://www.nuked-klan.org //
// -------------------------------------------------------------------------//
// This program is free software. you can redistribute it and/or modify //
// it under the terms of the GNU General Public License as published by //
// the Free Software Foundation; either version 2 of the License. //
// -------------------------------------------------------------------------//
if (!defined("INDEX_CHECK"))
{
die ("<div style=\"text-align: center;\">You cannot open this page directly</div>");
}
global $nuked, $language, $user;
translate("modules/News/lang/" . $language . ".lang.php");
if (!$user)
{
$visiteur = 0;
}
else
{
$visiteur = $user[1];
}
$ModName = basename(dirname(__FILE__));
$level_access = nivo_mod($ModName);
if ($visiteur >= $level_access && $level_access > -1)
{
compteur("News");
function index()
{
global $op, $news_id, $cat_id, $nuked, $file, $language, $p;
$max_news = $nuked['max_news'];
$day = time();
if ($op == "categorie")
{
$where = "WHERE cat = '" . $cat_id . "' AND " . $day . " >= date";
}
else if ($op == "suite" || $op == "index_comment")
{
$where = "WHERE id = '" . $news_id . "' AND " . $day . " >= date";
}
else
{
$where = "WHERE " . $day . " >= date";
}
$sql_nbnews = mysql_query("SELECT id FROM " . NEWS_TABLE . " " . $where);
$nb_news = mysql_num_rows($sql_nbnews);
if (!$p) $p = 1;
$start = $p * $max_news - $max_news;
if ($op == "categorie")
{
$sql = mysql_query("SELECT id, auteur, auteur_id, date, titre, texte, suite, cat, bbcodeoff, smileyoff FROM " . NEWS_TABLE . " WHERE cat = '" . $cat_id . "' AND " . $day . " >= date ORDER BY date DESC LIMIT " . $start . ", " . $max_news);
}
else if ($op == "suite")
{
$sql = mysql_query("SELECT id, auteur, auteur_id, date, titre, texte, suite, cat, bbcodeoff, smileyoff FROM " . NEWS_TABLE . " WHERE id = '" . $news_id . "'");
}
else if ($op == "index_comment")
{
$sql = mysql_query("SELECT id, auteur, auteur_id, date, titre, texte, suite, cat, bbcodeoff, smileyoff FROM " . NEWS_TABLE . " WHERE id = '" . $news_id . "'");
}
else
{
$sql = mysql_query("SELECT id, auteur, auteur_id, date, titre, texte, suite, cat, bbcodeoff, smileyoff FROM " . NEWS_TABLE . " WHERE " . $day . " >= date ORDER BY date DESC LIMIT " . $start . ", " . $max_news);
}
while (list($nid, $autor, $autor_id, $date, $titre, $texte, $suite, $cid, $bbcodeoff, $smileyoff) = mysql_fetch_array($sql))
{
$titre = stripslashes($titre);
$texte = stripslashes($texte);
$suite = stripslashes($suite);
$autor = stripslashes($autor);
$titre = htmlentities($titre);
if ($bbcodeoff == 0)
{
$texte = htmlentities($texte);
$texte = BBcode($texte);
}
else
{
$texte = htmlentities($texte, ENT_NOQUOTES);
$texte = eregi_replace("<", "<", $texte);
$texte = eregi_replace(">", ">", $texte);
}
if ($smileyoff == 0)
{
$texte = icon($texte);
}
$sql2 = mysql_query("SELECT im_id FROM " . COMMENT_TABLE . " WHERE im_id = '" . $nid . "' AND module = 'news'");
$nb_comment = mysql_num_rows($sql2);
$sql3 = mysql_query("SELECT titre, image FROM " . NEWS_CAT_TABLE . " WHERE nid = '" . $cid . "'");
list($categorie, $image) = mysql_fetch_array($sql3);
$categorie = stripslashes($categorie);
if ($autor_id != "")
{
$sql4 = mysql_query("SELECT pseudo FROM " . USER_TABLE . " WHERE id = '" . $autor_id . "'");
$test = mysql_num_rows($sql4);
}
if ($autor_id != "" && $test > 0)
{
list($auteur) = mysql_fetch_array($sql4);
$auteur = stripslashes($auteur);
}
else
{
$auteur = $autor;
}
if ($language == "french")
{
$data['date'] = strftime("%A %d %B %Y", $date);
}
else
{
$data['date'] = strftime("%A %B %d %Y", $date);
}
$data['id'] = $nid;
$data['titre'] = $titre;
$data['auteur'] = $auteur;
$data['heure'] = strftime("%H:%M", $date);
$data['nb_comment'] = $nb_comment;
$data['printpage'] = "<a href=\"index.php?file=News&nuked_nude=index&op=pdf&news_id=" . $nid . "\" onclick=\"window.open(this.href); return false;\"><img style=\"border: 0;\" src=\"images/pdf.gif\" alt=\"\" title=\"" . _PDF . "\" /></a>";
$data['friend'] = "<a href=\"index.php?file=News&op=sendfriend&news_id=" . $nid . "\"><img style=\"border: 0;\" src=\"images/friend.gif\" alt=\"\" title=\"" . _FSEND . "\" /></a>";
if ($image != "")
{
$data['image'] = "<a href=\"index.php?file=News&op=categorie&cat_id=" . $cid . "\"><img style=\"float: right;border: 0;\" src=\"" . $image . "\" alt=\"\" title=\"" . $categorie . "\" /></a>";
}
else
{
$data['image'] = "";
}
if ($op == "suite" || $op == "index_comment" && $suite != "")
{
if ($bbcodeoff == 0)
{
$suite = htmlentities($suite);
$suite = BBcode($suite);
}
else
{
$suite = htmlentities($suite, ENT_NOQUOTES);
$suite = eregi_replace("<", "<", $suite);
$suite = eregi_replace(">", ">", $suite);
}
if ($smileyoff == 0)
{
$suite = icon($suite);
}
$data['texte'] = $texte . "<br /><br />" . $suite;
}
else if ($suite != "")
{
$data['texte'] = $texte . "<div style=\"text-align: right;\"><a href=\"index.php?file=News&op=suite&news_id=" . $nid . "\">" . _READMORE . "</a></div>";
}
else
{
$data['texte'] = $texte;
}
news($data);
}
if ($op == "categorie")
{
$url = "index.php?file=News&op=categorie&cat_id=" . $cat_id;
}
else
{
$url = "index.php?file=News";
}
if ($nb_news > $max_news)
{
echo " ";
number($nb_news, $max_news, $url);
echo "<br /><br />";
}
}
function index_comment($news_id)
{
global $user, $visiteur;
if ($visiteur >= admin_mod("News"))
{
echo"<script type=\"text/javascript\">\n"
."<!--\n"
."\n"
. "function delnews(id)\n"
. "{\n"
. "if (confirm('" . _DELTHISNEWS . " ?'))\n"
. "{document.location.href = 'index.php?file=News&page=admin&op=do_del&news_id='+id;}\n"
. "}\n"
. "\n"
. "// -->\n"
. "</script>\n";
echo "<div style=\"text-align: right;\"><a href=\"index.php?file=News&page=admin&op=edit&news_id=" . $news_id . "\"><img style=\"border: 0;\" src=\"images/edition.gif\" alt=\"\" title=\"" . _EDIT . "\" /></a>"
. " <a href=\"javascript:delnews('" . $news_id . "');\"><img style=\"border: 0;\" src=\"images/delete.gif\" alt=\"\" title=\"" . _DEL . "\" /></a></div>\n";
}
index();
include ("modules/Comment/index.php");
com_index("news", $news_id);
}
function suite($news_id)
{
global $user, $visiteur;
if ($visiteur >= admin_mod("News"))
{
echo"<script type=\"text/javascript\">\n"
."<!--\n"
."\n"
. "function delnews(id)\n"
. "{\n"
. "if (confirm('" . _DELTHISNEWS . " ?'))\n"
. "{document.location.href = 'index.php?file=News&page=admin&op=do_del&news_id='+id;}\n"
. "}\n"
. "\n"
. "// -->\n"
. "</script>\n";
echo "<div style=\"text-align: right;\"><a href=\"index.php?file=News&page=admin&op=edit&news_id=" . $news_id . "\"><img style=\"border: 0;\" src=\"images/edition.gif\" alt=\"\" title=\"" . _EDIT . "\" /></a>"
. " <a href=\"javascript:delnews('" . $news_id . "');\"><img style=\"border: 0;\" src=\"images/delete.gif\" alt=\"\" title=\"" . _DEL . "\" /></a></div>\n";
}
index();
include ("modules/Comment/index.php");
com_index("news", $news_id);
}
function categorie($cat_id)
{
index();
}
function sujet()
{
global $nuked;
opentable();
echo "<br /><div style=\"text-align: center;\"><big><b>" . _SUBJECTNEWS . "</b></big></div><br /><br />\n"
. "<table cellspacing=\"0\" cellpadding=\"3\" border=\"0\">\n";
$sql = mysql_query("SELECT nid, titre, description, image FROM " . NEWS_CAT_TABLE . " ORDER BY titre");
while (list($id, $titre, $description, $image) = mysql_fetch_array($sql))
{
$titre = stripslashes($titre);
$titre = htmlentities($titre);
$description = stripslashes($description);
$description = htmlentities($description);
$description = BBcode($description);
echo "<tr>";
if ($image != "")
{
echo "<td><a href=\"index.php?file=News&op=categorie&cat_id=" . $id . "\">"
. "<img style=\"border: 0;\" src=\"" . $image . "\" align=\"left\" alt=\"\" title=\"" . _SEENEWS . " " . $titre . "\" /></a></td>\n";
}
echo "<td><b>" . $titre . " :</b><br />" . $description . "</td></tr><tr><td colspan=\"2\"> </td></tr>\n";
}
echo "</table><br /><br /><div style=\"text-align: center;\"><small><i>( " . _CLICSCREEN . " )</i></small></div><br />\n";
closetable();
}
function pdf($news_id)
{
global $nuked, $language;
if ($language == "french" && ereg("WIN", PHP_OS)) setlocale (LC_TIME, "french");
else if ($language == "french" && ereg("BSD", PHP_OS)) setlocale (LC_TIME, "fr_FR.ISO8859-1");
else if ($language == "french") setlocale (LC_TIME, "fr_FR");
else setlocale (LC_TIME, $language);
$sql = mysql_query("SELECT auteur, auteur_id, date, titre, texte, suite, bbcodeoff, smileyoff FROM " . NEWS_TABLE . " WHERE id = '" . $news_id . "'");
list($autor, $autor_id, $date, $title, $content, $suite, $bbcodeoff, $smileyoff) = mysql_fetch_row($sql);
$title = stripslashes($title);
$content = stripslashes($content);
$suite = stripslashes($suite);
$autor = stripslashes($autor);
$heure = strftime("%H:%M", $date);
$text = $content . "<br><br>" . $suite;
if ($autor_id != "")
{
$sql2 = mysql_query("SELECT pseudo FROM " . USER_TABLE . " WHERE id = '" . $autor_id . "'");
$test = mysql_num_rows($sql2);
}
if ($autor_id != "" && $test > 0)
{
list($auteur) = mysql_fetch_array($sql2);
$auteur = stripslashes($auteur);
$auteur = @html_entity_decode($auteur);
}
else
{
$auteur = $autor;
}
if ($language == "french")
{
$date = strftime("%A %d %B %Y", $date);
}
else
{
$date = strftime("%A %B %d %Y", $date);
}
$posted = "<font size=\"1\">" . _NEWSPOSTBY . " <a href=\"" . $nuked['url'] . "/index.php?file=Members&op=detail&autor=" . $auteur . "\">" . $auteur . "</a> " . _THE . " " . $date . " " . _AT . " " . $heure . "</font><br><br>";
$text = str_replace("[code]", "<code><b>Code :</b><br>", $text);
$text = str_replace("", "</code>", $text);
$text = str_replace("[/quote]", "</quote>", $text);
$text = str_replace("[quote]", "<quote><b>Citation : </b><br />", $text);
$text = preg_replace("/\[quote=(.*?)\]/i", "<quote><b>\\1 " . _HASWROTE . " :</b><br />", $text);
if ($bbcodeoff == 0)
{
$text = preg_replace("/\[color=(.*?)\](.*?)\[\/color\]/i", "<font color=\"\\1\">\\2</font>", $text);
$text = preg_replace("/\[size=(.*?)\](.*?)\[\/size\]/i", "<font size=\"\\1\">\\2</font>", $text);
$text = preg_replace("/\[font=(.*?)\](.*?)\[\/font\]/i", "<font face=\"\\1\">\\2</font>", $text);
$text = preg_replace("/\[align=(.*?)\](.*?)\[\/align\]/i", "<p align=\"\\1\">\\2</p>", $text);
$text = str_replace("
", "<b>", $text);
$text = str_replace("", "</b>", $text);
$text = str_replace("
", "<i>", $text);
$text = str_replace("", "</i>", $text);
$text = str_replace("
", "<u>", $text);
$text = str_replace("", "</u>", $text);
$text = str_replace("[li]", "<li>", $text);
$text = str_replace("[/li]", "</li>", $text);
$text = str_replace("[center]", "<center>", $text);
$text = str_replace("[/center]", "</center>", $text);
$text = str_replace("[strike]", "<strike>", $text);
$text = str_replace("[/strike]", "</strike>", $text);
$text = str_replace("[blink]", "", $text);
$text = str_replace("[/blink]", "", $text);
$text = str_replace("[flip]", "", $text);
$text = str_replace("[/flip]", "", $text);
$text = str_replace("[blur]", "", $text);
$text = str_replace("[/blur]", "", $text);
$text = preg_replace("/\[glow\](.*?)\[\/glow\]/i", "", $text);
$text = preg_replace("/\[glow=(.*?)\](.*?)\[\/glow\]/i", "", $text);
$text = preg_replace("/\[shadow\](.*?)\[\/shadow\]/i", "", $text);
$text = preg_replace("/\[shadow=(.*?)\](.*?)\[\/shadow\]/i", "", $text);
$text = preg_replace("/\[email\](.*?)\[\/email\]/i", "<a href=\"mailto:\\1\">\\1</a>", $text);
$text = preg_replace("/\[email=(.*?)\](.*?)\[\/email\]/i", "<a href=\"mailto:\\1\">\\2</a>", $text);
$text = preg_replace("/\[img\](.*?)\[\/img\]/i", "<img src=\"\\1\" border=\"0\">", $text);
$text = preg_replace("/\[img=(.*?)x(.*?)\](.*?)\[\/img\]/i", "<img width=\"\\1\" height=\"\\2\" src=\"\\3\" border=\"0\">", $text);
$text = preg_replace("/\[flash\](.*?)\[\/flash\]/i", "", $text);
$text = preg_replace("/\[flash=(.*?)x(.*?)\](.*?)\[\/flash\]/i","", $text);
$text = preg_replace("/\[url\]www.(.*?)\[\/url\]/i", "<a href=\"http://www.\\1\" target=\"_blank\">\\1</a>", $text);
$text = preg_replace("/\[url\](.*?)\[\/url\]/i", "<a href=\"\\1\" target=\"_blank\">\\1</a>", $text);
$text = preg_replace("/\[url=(.*?)\](.*?)\[\/url\]/i", "<a href=\"\\1\" target=\"_blank\">\\2</a>", $text);
$text = str_replace("\r", "", $text);
$text = str_replace("\n", "<br />", $text);
$text = ltrim($text);
}
if ($smileyoff == 0)
{
$text = icon($text);
}
$text = str_replace("<font color=\"red;\">", "<font color=\"#FF0000\">", $text);
$text = str_replace("<font color=\"darkred\">", "<font color=\"#8B0000\">", $text);
$text = str_replace("<font color=\"blue\">", "<font color=\"#0000FF\">", $text);
$text = str_replace("<font color=\"darkblue\">", "<font color=\"#00008B\">", $text);
$text = str_replace("<font color=\"orange\">", "<font color=\"#FFA500\">", $text);
$text = str_replace("<font color=\"orange\">", "<font color=\"#FFA500\">", $text);
$text = str_replace("<font color=\"brown\">", "<font color=\"#A52A2A\">", $text);
$text = str_replace("<font color=\"yellow\">", "<font color=\"#FFFF00\">", $text);
$text = str_replace("<font color=\"green\">", "<font color=\"#008000\">", $text);
$text = str_replace("<font color=\"violet\">", "<font color=\"#EE82EE\">", $text);
$text = str_replace("<font color=\"olive\">", "<font color=\"#808000\">", $text);
$text = str_replace("<font color=\"cyan\">", "<font color=\"#00FFFF\">", $text);
$text = str_replace("<font color=\"indigo\">", "<font color=\"#4B0082\">", $text);
$text = str_replace("<font color=\"white\">", "<font color=\"#FFFFFF\">", $text);
$text = str_replace("<font color=\"black\">", "<font color=\"#000000\">", $text);
$text = str_replace(""", "\"", $text);
$text = str_replace("'", "\'", $text);
$text = str_replace("à", "à", $text);
$text = str_replace("â", "â", $text);
$text = str_replace("é", "é", $text);
$text = str_replace("è", "è", $text);
$text = str_replace("ê", "ê", $text);
$text = str_replace("û", "û", $text);
$texte = $posted . $text;
$articleurl = $nuked['url'] . "/index.php?file=News&op=index_comment&news_id=" . $news_id;
include ('Includes/html2pdf.php');
$sitename = $nuked['name'] . " - " . $nuked['slogan'];
$sitename = @html_entity_decode($sitename);
$pdf = new PDF('P', 'mm', 'A4', $title, $articleurl, $sitename, false);
$pdf->WriteHTML($texte);
$file = 'upload/PDF/tem' . time() . '.pdf';
$pdf->Output($file);
redirect($file, 0);
}
function sendfriend($news_id)
{
global $nuked, $user;
opentable();
echo "<script type=\"text/javascript\">\n"
."<!--\n"
."\n"
. "function verifchamps()\n"
. "{\n"
. "\n"
. "if (document.getElementById('sf_pseudo').value.length == 0)\n"
. "{\n"
. "alert('" . _NONICK . "');\n"
. "return false;\n"
. "}\n"
. "\n"
. "if (document.getElementById('sf_mail').value.indexOf('@') == -1)\n"
. "{\n"
. "alert('" . _BADMAIL . "');\n"
. "return false;\n"
. "}\n"
. "\n"
. "return true;\n"
. "}\n"
."\n"
. "// -->\n"
. "</script>\n";
$sql = mysql_query("SELECT titre FROM " . NEWS_TABLE . " WHERE id = '" . $news_id . "'");
list($title) = mysql_fetch_array($sql);
$title = stripslashes($title);
$title = stripslashes($title);
echo "<form method=\"post\" action=\"index.php?file=News\" onsubmit=\"return verifchamps()\">\n"
. "<table style=\"margin-left: auto;margin-right: auto;text-align: left;\" width=\"60%\" cellspacing=\"1\" cellpadding=\"1\" border=\"0\">\n"
. "<tr><td align=\"center\"><br /><big><b>" . _FSEND . "</b></big><br /><br />" . _YOUSUBMIT . " :<br /><br />\n"
. "<b>" . $title . "</b><br /><br /></td></tr><tr><td align=\"left\">\n"
. "<b>" . _YNICK . " : </b> <input type=\"text\" id=\"sf_pseudo\" name=\"pseudo\" value=\"" . $user[2] . "\" size=\"20\" /></td></tr>\n"
. "<tr><td><b>" . _FMAIL . " : </b> <input type=\"text\" id=\"sf_mail\" name=\"mail\" value=\"\" size=\"25\" /></td></tr>\n"
. "<tr><td><b>" . _YCOMMENT . " : </b><br /><textarea name=\"comment\" cols=\"60\" rows=\"10\"></textarea></td></tr>\n"
. "<tr><td align=\"center\"><input type=\"hidden\" name=\"op\" value=\"sendnews\" />\n"
. "<input type=\"hidden\" name=\"news_id\" value=\"" . $news_id . "\" />\n"
." <input type=\"hidden\" name=\"title\" value=\"" . $title . "\" /><br />\n"
." <input type=\"submit\" value=\"" . _SEND . "\" /></td></tr></table></form><br />\n";
closetable();
}
function sendnews($title, $news_id, $comment, $mail, $pseudo)
{
global $nuked, $user_ip;
opentable();
$date2 = time();
$date2 = strftime("%x %H:%M", $date2);
$title = stripslashes($title);
$comment = stripslashes($comment);
$mail = trim($mail);
$pseudo = trim($pseudo);
$subject = $nuked['name'] . ", " . $date2;
$corps = $pseudo . " (IP : " . $user_ip . ") " . _READNEWS . " " . $title . ", " . _NEWSURL . "\r\n" . $nuked['url'] . "/index.php?file=News&op=index_comment&news_id=" . $news_id . "\r\n\r\n" . _YCOMMENT . " : " . $comment . "\r\n\r\n\r\n" . $nuked['name'] . " - " . $nuked['slogan'];
$from = "From: " . $nuked['name'] . " <" . $nuked['mail'] . ">\r\nReply-To: " . $nuked['mail'];
$subject = @html_entity_decode($subject);
$corps = @html_entity_decode($corps);
$from = @html_entity_decode($from);
mail($mail, $subject, $corps, $from);
echo "<div style=\"text-align: center;\"><br />" . _SENDFMAIL . "<br /><br /></div>";
redirect("index.php?file=News", 2);
closetable();
}
switch ($op)
{
case"index":
index();
break;
case"index_comment":
index_comment($news_id);
break;
case"suite":
suite($news_id);
break;
case"categorie":
categorie($cat_id);
break;
case"sujet":
sujet();
break;
case"pdf":
pdf($news_id);
break;
case"sendfriend":
sendfriend($news_id);
break;
case"sendnews":
sendnews($title, $news_id, $comment, $mail, $pseudo);
break;
default:
index();
break;
}
}
else if ($level_access == -1)
{
opentable();
echo "<br /><br /><div style=\"text-align: center;\">" . _MODULEOFF . "<br /><br /><a href=\"javascript:history.back()\"><b>" . _BACK . "</b></a><br /><br /></div>";
closetable();
}
else if ($level_access == 1 && $visiteur == 0)
{
opentable();
echo "<br /><br /><div style=\"text-align: center;\">" . _USERENTRANCE . "<br /><br /><b><a href=\"index.php?file=User&op=login_screen\">" . _LOGINUSER . "</a> | <a href=\"index.php?file=User&op=reg_screen\">" . _REGISTERUSER . "</a></b><br /><br /></div>";
closetable();
}
else
{
opentable();
echo "<br /><br /><div style=\"text-align: center;\">" . _NOENTRANCE . "<br /><br /><a href=\"javascript:history.back()\"><b>" . _BACK . "</b></a><br /><br /></div>";
closetable();
}
?>
[/code]