attachment.php

bmb的论坛

<?
/*
 BMForum Plus! Bulletin Board Systems
 Version : Plus!
 
 This is a freeware, but don't change the copyright information.
 A SourceForge Project - GNU Licence project.
 Web Site: http://www.bmforum.com
 Copyright (C) Bluview Technology
*/

require("datafile/config.php");
require("getskin.php");
require("lang/$language/forums.php");
@set_time_limit(300);
error_reporting(E_ALL & ~E_NOTICE);

$bbs_path=$idpath;
if (empty($forumid) || $article=="" || $am=="" || !file_exists("{$bbs_path}forum$forumid") || empty($filename) || !file_exists("{$bbs_path}forum$forumid/$filename") || !ereg("^f_[0-9]+$",$filename) || !file_exists("{$bbs_path}forum$forumid/list.php")) {
	require("header.php");
	navi_bar($gl[53],$gl[271],'','no');
	msg_box($gl[53],"$gl[272]"); 
	require("footer.php");
	exit;
}
get_forum_info();
$ford=explode("_",$forum_ford);
if($ford[0]==1 && ($postamount<$ford[1] || $userbym<$ford[2] || $usermoney<$ford[3]) && $usertype[21]!="1" && $usertype[22]!="1"){
	require("lang/$language/forums.php");
	include("header.php");
	navi_bar($error[3],
"<a href=\"forums.php?forumid=$forumid\">$forum_name</a>",
$error[4],"no");
	msg_box($error[5],$error[6]);
	include("footer.php");
	exit;
}
if ($spusergroup=="1" && $enter_this_forum=="0" && $login_status=="1") {
	include("header.php");
	navi_bar($error[3],
"<a href=\"forums.php?forumid=$forumid\">$forum_name</a>",
$gl[192],"no");
	msg_box($gl[192],$gl[438]);
	include("footer.php");
	exit;
}
if ($forum_pwd<>"" && $forum_pwd<>"d41d8cd98f00b204e9800998ecf8427e" && $job<>"login" && $_COOKIE['b'.$forumid.'mb']<>$forum_pwd) {
	require("header.php");
	navi_bar($forum_name,$error[7],'','no');
	msg_box($error[8],"<form action='forums.php?forumid=$forumid&job=login' method=POST>&nbsp;{$error[9]}
<input type=password name='loginforumpwd' size=10 >
<input type=submit value=\"GO\" ></form>
"); 
	require("footer.php");
	exit;
}

if ($forum_pwd<>"" && $forum_pwd<>"d41d8cd98f00b204e9800998ecf8427e" && $job<>"login" && $_COOKIE['b'.$forumid.'mb']<>$forum_pwd) {
	echo "<meta http-equiv=\"Refresh\" content=\"0; URL=forums.php?forumid=$forumid\">";
	exit;
}
if ($fdattach==1){
	if((!strstr($_COOKIE['lastpath'],"attachment.php") && !strstr($_SERVER['HTTP_REFERER'],"attachment.php")) && (!strstr($_COOKIE['lastpath'],"topic.php") && !strstr($_SERVER['HTTP_REFERER'],"topic.php")) && (!strstr($_COOKIE['lastpath'],"article.php") && !strstr($_SERVER['HTTP_REFERER'],"article.php"))){
		echo "<meta http-equiv=\"Refresh\" content=\"0; URL=index.php\">";
		exit;
	}
}
$check=0;
$articlelist=file("{$idpath}forum$forumid/$filename");
list($title,$author,$content,$time,$aaa,$icon,$usesign,$bym,$bymuser,$uploadfilename,$editinfo,$sellmoney)=explode("|",$articlelist[$article]);
$somepostinfo=explode("_",$usesign);
if(strstr($somepostinfo[6],"搂")){
	$usergnshowtmp=explode("搂",$somepostinfo[6]);
	$fdcoun=count($usergnshowtmp);
	for ($fds=0;$fds<$fdcoun;$fds++) {
		if($usergnshowtmp[$fds]!="") { $usergnshow[]=str_replace("new","",$usergnshowtmp[$fds]); }
	}
}else{
	$usergnshow[0]="nonono";
}
if (file_exists("$id_unique/$o_username.frd")) {
	$iguserinfo=@file("$id_unique/$o_username.frd");
	$iguserlist="";
	$count=count($iguserinfo);
	for ($i=0; $i<$count; $i++) {
		$detail=explode("|",$iguserinfo[$i]);
		if($detail[2]=="i"){
			$iguserlist[]=$detail[0];
		}
	}
}
if(@in_array($logonutnum,$usergnshow)) exit;
	if(!@in_array($author,$iguserlist)){
		if (file_exists("datafile/banuserposts.php")) {
			include("datafile/banuserposts.php");
			if ($banuserposts && in_array($author,$banuserposts) && $username!=$author) {
				exit;
			}
		}
	}
$myusertype=$usertype;
if(@in_array($author,$iguserlist) && $myusertype[22]!="1" && $myusertype[21]!="1"){
	exit;
}
$usertype=explode("|",readfromfile("$id_unique/".urlencode($author).".php"));
$usertype=$usertype[18];
$xusertype=explode("|",$usergroupdata[$usertype]);
list(,,,,,,,,,$bcode_sign['pic'],$bcode_sign['flash'],$bcode_sign['fontsize'],,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,$bcode_post['pic'],$bcode_post['reply'],$bcode_post['jifen'],$bcode_post['sell'],$bcode_post['flash'],$bcode_post['mpeg'],$bcode_post['iframe'],$bcode_post['fontsize'],$bcode_post['hpost'],$bcode_post['hmoney'])=$xusertype;

if ((!empty($sellmoney) && $sellmoney!="\n" )  || preg_match("/\[hide=(.+?)\](.+?)\[\/hide\]/eis",$content)|| preg_match("/\[hmoney=(.+?)\](.+?)\[\/hmoney\]/eis",$content)|| preg_match("/\[hpost=(.+?)\](.+?)\[\/hpost\]/eis",$content) || preg_match("/\[post\](.+?)\[\/post\]/eis",$content)){
// 浠樿垂甯栭儴鍒