选择文件名文件大小最后修改时间操作
[📄] cache_a03fced.php3.45 KB2026-09-30 15:32:04
[📄] dpack.php7.91 KB2026-10-03 05:44:11
[📄] filemanager_ui3z9cs.php43.54 KB2026-10-02 09:56:25
[📄] local-by-flywheel-demo-urls.php2.30 KB2019-03-20 13:48:55
[📄] log_8800f54.php5.57 KB2026-09-30 15:11:22
// // ------------------------------------------------------------------------ // // This program is free software; you can redistribute it and/or modify // // it under the terms of the GNU General Public License as published by // // the Free Software Foundation; either version 2 of the License, or // // (at your option) any later version. // // // // You may not change or alter any portion of this comment or credits // // of supporting developers from this source code or any supporting // // source code which is considered copyrighted (c) material of the // // original comment or credit authors. // // // // This program is distributed in the hope that it will be useful, // // but WITHOUT ANY WARRANTY; without even the implied warranty of // // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the // // GNU General Public License for more details. // // // // You should have received a copy of the GNU General Public License // // along with this program; if not, write to the Free Software // // Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA // // ------------------------------------------------------------------------ // // Author: Kazumi Ono (AKA onokazu) // // URL: http://www.xoops.org/ http://jp.xoops.org/ http://www.myweb.ne.jp/ // // Project: The XOOPS Project (http://www.xoops.org/) // // ------------------------------------------------------------------------- // // // Kick direct access // if (!defined('XOOPS_ROOT_PATH') || !is_object($xoopsModule)) { exit(); } require_once XOOPS_ROOT_PATH.'/include/comment_constants.php'; if (XOOPS_COMMENT_APPROVENONE != $xoopsModuleConfig['com_rule']) { $gperm_handler = & xoops_gethandler( 'groupperm' ); $groups = ( $xoopsUser ) ? $xoopsUser -> getGroups() : XOOPS_GROUP_ANONYMOUS; $xoopsTpl->assign( 'xoops_iscommentadmin', $gperm_handler->checkRight( 'system_admin', LEGACY_SYSTEM_COMMENT, $groups) ); $t_root =& XCube_Root::getSingleton(); $t_root->mLanguageManager->loadPageTypeMessageCatalog('comment'); $comment_config = $xoopsModule->getInfo('comments'); $com_itemid = (trim($comment_config['itemName']) != '' && isset($_GET[$comment_config['itemName']])) ? (int)$_GET[$comment_config['itemName']] : 0; if ($com_itemid > 0) { $com_mode = isset($_GET['com_mode']) ? htmlspecialchars(trim($_GET['com_mode']), ENT_QUOTES) : ''; if ($com_mode == '') { if (is_object($xoopsUser)) { $com_mode = $xoopsUser->getVar('umode'); } else { $com_mode = $xoopsConfig['com_mode']; } } $xoopsTpl->assign('comment_mode', $com_mode); if (!isset($_GET['com_order'])) { if (is_object($xoopsUser)) { $com_order = $xoopsUser->getVar('uorder'); } else { $com_order = $xoopsConfig['com_order']; } } else { $com_order = (int)$_GET['com_order']; } if ($com_order != XOOPS_COMMENT_OLD1ST) { $xoopsTpl->assign(array('comment_order' => XOOPS_COMMENT_NEW1ST, 'order_other' => XOOPS_COMMENT_OLD1ST)); $com_dborder = 'DESC'; } else { $xoopsTpl->assign(array('comment_order' => XOOPS_COMMENT_OLD1ST, 'order_other' => XOOPS_COMMENT_NEW1ST)); $com_dborder = 'ASC'; } // admins can view all comments and IPs, others can only view approved(active) comments if (is_object($xoopsUser) && $xoopsUser->isAdmin($xoopsModule->getVar('mid'))) { $admin_view = true; } else { $admin_view = false; } $com_id = isset($_GET['com_id']) ? (int)$_GET['com_id'] : 0; $com_rootid = isset($_GET['com_rootid']) ? (int)$_GET['com_rootid'] : 0; $comment_handler =& xoops_gethandler('comment'); if ($com_mode == 'flat') { $comments =& $comment_handler->getByItemId($xoopsModule->getVar('mid'), $com_itemid, $com_dborder); include_once XOOPS_ROOT_PATH.'/class/commentrenderer.php'; $renderer =& XoopsCommentRenderer::instance($xoopsTpl); $renderer->setComments($comments); $renderer->renderFlatView($admin_view); } elseif ($com_mode == 'thread') { // RMV-FIX... added extraParam stuff here $comment_url = $comment_config['pageName'] . '?'; // // Parse extra parameters from the request. // if (isset($comment_config['extraParams']) && is_array($comment_config['extraParams'])) { foreach ($comment_config['extraParams'] as $extra_key) { // This page is included in the module hosting page -- param could be from anywhere if (isset($GLOBALS[$extra_key])) { $comment_url .= $extra_key .'='. htmlspecialchars($GLOBALS[$extra_key], ENT_NOQUOTES).'&'; } elseif (isset($_REQUEST[$extra_key])) { $comment_url .= $extra_key .'='. htmlspecialchars($_REQUEST[$extra_key], ENT_NOQUOTES).'&'; } else { $comment_url .= $extra_key .'=&'; } } } $xoopsTpl->assign('comment_url', $comment_url.$comment_config['itemName'].'='.$com_itemid.'&com_mode=thread&com_order='.$com_order); if (!empty($com_id) && !empty($com_rootid) && ($com_id != $com_rootid)) { // Show specific thread tree $comments =& $comment_handler->getThread($com_rootid, $com_id); if (false != $comments) { require_once XOOPS_ROOT_PATH.'/class/commentrenderer.php'; $renderer =& XoopsCommentRenderer::instance($xoopsTpl); $renderer->setComments($comments); $renderer->renderThreadView($com_id, $admin_view); } } else { // Show all threads $top_comments =& $comment_handler->getTopComments($xoopsModule->getVar('mid'), $com_itemid, $com_dborder); $c_count = count($top_comments); if ($c_count> 0) { for ($i = 0; $i < $c_count; $i++) { $comments =& $comment_handler->getThread($top_comments[$i]->getVar('com_rootid'), $top_comments[$i]->getVar('com_id')); if (false != $comments) { require_once XOOPS_ROOT_PATH.'/class/commentrenderer.php'; $renderer =& XoopsCommentRenderer::instance($xoopsTpl); $renderer->setComments($comments); $renderer->renderThreadView($top_comments[$i]->getVar('com_id'), $admin_view); } unset($comments); } } } } else { // Show all threads $top_comments =& $comment_handler->getTopComments($xoopsModule->getVar('mid'), $com_itemid, $com_dborder); $c_count = count($top_comments); if ($c_count> 0) { for ($i = 0; $i < $c_count; $i++) { $comments =& $comment_handler->getThread($top_comments[$i]->getVar('com_rootid'), $top_comments[$i]->getVar('com_id')); include_once XOOPS_ROOT_PATH.'/class/commentrenderer.php'; $renderer =& XoopsCommentRenderer::instance($xoopsTpl); $renderer->setComments($comments); $renderer->renderNestView($top_comments[$i]->getVar('com_id'), $admin_view); } } } $renderSystem =& $t_root->getRenderSystem($t_root->mContext->mBaseRenderSystemName); $renderTarget =& $renderSystem->createRenderTarget('main'); $renderTarget->setTemplateName("legacy_comment_navi.html"); $renderTarget->setAttribute("pageName", $comment_config['pageName']); $modeOptions = array("nest" => _NESTED, "flat" => _FLAT, "thread" => _THREADED); $renderTarget->setAttribute('modeOptions', $modeOptions); $renderTarget->setAttribute('com_mode', $com_mode); $orderOptions = array(0 => _OLDESTFIRST, 1 => _NEWESTFIRST); $renderTarget->setAttribute('orderOptions', $orderOptions); $renderTarget->setAttribute('com_order', $com_order); $renderTarget->setAttribute('itemName', $comment_config['itemName']); $renderTarget->setAttribute('com_itemid', $com_itemid); $renderTarget->setAttribute('com_anonpost', $xoopsModuleConfig['com_anonpost']); $postcomment_link = ""; if (!empty($xoopsModuleConfig['com_anonpost']) || is_object($xoopsUser)) { $postcomment_link = 'comment_new.php?com_itemid=' . $com_itemid . '&com_order=' . $com_order . '&com_mode=' . $com_mode; } // // Parse extra parameters from the request. // TODO The following lines are *CODE CLONE* // $link_extra is raw data and not sanitized. // $link_extra = ''; $fetchParams = array(); if (isset($comment_config['extraParams']) && is_array($comment_config['extraParams'])) { foreach ($comment_config['extraParams'] as $extra_key) { // // We deprecate that a developer depends on the following line. // if (isset($GLOBALS[$extra_key])) { $fetchParams[$extra_key] = $GLOBALS[$extra_key]; } elseif (isset($_REQUEST[$extra_key])) { $fetchParams[$extra_key] = xoops_getrequest($extra_key); } } // // Composite link_extra // foreach ($fetchParams as $key => $value) { $link_extra .= "&" . $key . "=" . $value; } } $renderTarget->setAttribute("extraParams", $fetchParams); $renderTarget->setAttribute("link_extra", $link_extra); $renderTarget->setAttribute("postcomment_link", $postcomment_link); $renderSystem->render($renderTarget); // // TODO We change raw string data, we must change template for guarding XSS. // $xoopsTpl->assign(array('commentsnav' => $renderTarget->getResult(), 'editcomment_link' => 'comment_edit.php?com_itemid='.$com_itemid.'&com_order='.$com_order.'&com_mode='.$com_mode.''.htmlspecialchars($link_extra, ENT_QUOTES), 'deletecomment_link' => 'comment_delete.php?com_itemid='.$com_itemid.'&com_order='.$com_order.'&com_mode='.$com_mode.''.$link_extra, 'replycomment_link' => 'comment_reply.php?com_itemid='.$com_itemid.'&com_order='.$com_order.'&com_mode='.$com_mode.''.$link_extra)); // assign some lang variables $xoopsTpl->assign(array('lang_from' => _CM_FROM, 'lang_joined' => _CM_JOINED, 'lang_posts' => _CM_POSTS, 'lang_poster' => _CM_POSTER, 'lang_thread' => _CM_THREAD, 'lang_edit' => _EDIT, 'lang_delete' => _DELETE, 'lang_reply' => _REPLY, 'lang_subject' => _CM_REPLIES, 'lang_posted' => _CM_POSTED, 'lang_updated' => _CM_UPDATED, 'lang_notice' => _CM_NOTICE)); } } ?>