text($text); } // Get bbcodes public static function getBBcodes() { return Database::fetch('bbcodes'); } // Parse bbcodes public static function bbParse($text) { // Get bbcode regex from the database $bbcodes = Database::fetch('bbcodes'); // Split the regex $regex = array_map(function($arr) { return $arr['regex']; }, $bbcodes); // Split the replacement $replace = array_map(function($arr) { return $arr['replace']; }, $bbcodes); // Do the replacement $text = preg_replace($regex, $replace, $text); // Return the parsed text return $text; } // Get emoticons public static function getEmotes() { return Database::fetch('emoticons'); } // Parsing emoticons public static function parseEmotes($text) { // Get emoticons from the database $emotes = Database::fetch('emoticons'); // Do the replacements foreach($emotes as $emote) { $text = str_replace($emote['emote_string'], '

', $text); } // Return the parsed text return $text; } // Verify ReCAPTCHA public static function verifyCaptcha($response) { // Attempt to get the response $resp = @file_get_contents('https://www.google.com/recaptcha/api/siteverify?secret='. Configuration::getConfig('recaptcha_private') .'&response='. $response); // In the highly unlikely case that it failed to get anything forge a false if(!$resp) { return false; } // Decode the response JSON from the servers $resp = json_decode($resp, true); // Return shit return $resp; } // Error Handler public static function errorHandler($errno, $errstr, $errfile, $errline) { // Remove ROOT path from the error string and file location $errstr = str_replace(ROOT, '', $errstr); $errfile = str_replace(ROOT, '', $errfile); // Attempt to log the error to the database if(Database::$_DATABASE !== null) { // Encode backtrace data $backtrace = base64_encode(json_encode(debug_backtrace())); // Check if this error has already been logged in the past if($past = Database::fetch('error_log', false, ['backtrace' => [$backtrace, '=', true], 'error_string' => [$errstr, '=']])) { // If so assign the errid $errid = $past['id']; } else { // Create an error ID $errid = substr(md5(microtime()), rand(0, 22), 10); // Log the error Database::insert('error_log', [ 'id' => $errid, 'timestamp' => date("r"), 'revision' => SAKURA_VERSION, 'error_type' => $errno, 'error_line' => $errline, 'error_string' => $errstr, 'error_file' => $errfile, 'backtrace' => $backtrace ]); } } switch ($errno) { case E_ERROR: case E_USER_ERROR: $error = 'FATAL ERROR: ' . $errstr . ' on line ' . $errline . ' in ' . $errfile; break; case E_WARNING: case E_USER_WARNING: $error = 'WARNING: ' . $errstr . ' on line ' . $errline . ' in ' . $errfile; break; case E_NOTICE: case E_USER_NOTICE: $error = 'NOTICE: ' . $errstr . ' on line ' . $errline . ' in ' . $errfile; break; default: $error = 'Unknown error type [' . $errno . ']: ' . $errstr . ' on line ' . $errline . ' in ' . $errfile; } // Truncate all previous outputs ob_clean(); ob_end_clean(); // Build page $errorPage = ' Sakura Internal Error

An error occurred while executing the script.

To prevent potential security risks or data loss Sakura has stopped execution of the script.

'; if(isset($errid)) { $errorPage .= '

The error and surrounding data has been logged.

'. (SAKURA_STABLE ? 'Report the following text to a staff member' : 'Logged as') .'

'. $errid .'

'; } else { $errorPage .= '

Sakura was not able to log this error which could mean that there was an error with the database connection. If you\'re the system administrator check the database credentials and make sure the server is running and if you\'re not please let the system administrator know about this error if it occurs again.

'; } if(!SAKURA_STABLE) { $errorPage .= '

Summary

'. $error .'

Backtraces

'; foreach(debug_backtrace(DEBUG_BACKTRACE_IGNORE_ARGS) as $num => $trace) { $errorPage .= '

#'. $num .'

';

        foreach($trace as $key => $val) {

            $errorPage .= str_pad('['. $key .']', 12) .'=> '. (is_array($val) || is_object($val) ? json_encode($val) : $val) ."\r\n";

        }

        $errorPage .= '

'; } } $errorPage .= '

'; // Die and display error message die($errorPage); } // Send emails public static function sendMail($to, $subject, $body) { // Initialise PHPMailer $mail = new PHPMailer(); // Set to SMTP $mail->IsSMTP(); // Set the SMTP server host $mail->Host = Configuration::getConfig('smtp_server'); // Do we require authentication? $mail->SMTPAuth = Configuration::getConfig('smtp_auth'); // Do we encrypt as well? $mail->SMTPSecure = Configuration::getConfig('smtp_secure'); // Set the port to the SMTP server $mail->Port = Configuration::getConfig('smtp_port'); // If authentication is required log in as well if(Configuration::getConfig('smtp_auth')) { $mail->Username = Configuration::getConfig('smtp_username'); $mail->Password = base64_decode(Configuration::getConfig('smtp_password')); } // Add a reply-to header $mail->AddReplyTo(Configuration::getConfig('smtp_replyto_mail'), Configuration::getConfig('smtp_replyto_name')); // Set a from address as well $mail->SetFrom(Configuration::getConfig('smtp_from_email'), Configuration::getConfig('smtp_from_name')); // Set the addressee foreach($to as $email => $name) { $mail->AddBCC($email, $name); } // Subject line $mail->Subject = $subject; // Set the mail type to HTML $mail->isHTML(true); // Set email contents $htmlMail = file_get_contents(ROOT .'_sakura/templates/htmlEmail.tpl'); // Replace template tags $htmlMail = str_replace('{{ sitename }}', Configuration::getConfig('sitename'), $htmlMail); $htmlMail = str_replace('{{ siteurl }}', '//'. Configuration::getConfig('url_main'), $htmlMail); $htmlMail = str_replace('{{ contents }}', self::mdParse($body), $htmlMail); // Set HTML body $mail->Body = $htmlMail; // Set fallback body $mail->AltBody = $body; // Send the message $send = $mail->Send(); // Clear the addressee list $mail->ClearAddresses(); // If we got an error return the error if(!$send) { return $mail->ErrorInfo; } // Else just return whatever return $send; } // Cleaning strings public static function cleanString($string, $lower = false, $nospecial = false) { // Run common sanitisation function over string $string = htmlentities($string, ENT_NOQUOTES | ENT_HTML401, Configuration::getConfig('charset')); $string = stripslashes($string); $string = strip_tags($string); // If set also make the string lowercase if($lower){ $string = strtolower($string); } // If set remove all characters that aren't a-z or 0-9 if($nospecial) { $string = preg_replace('/[^a-z0-9]/', '', $string); } // Return clean string return $string; } // Getting news posts public static function getNewsPosts($limit = null, $pid = false) { // Get news posts $newsPosts = Database::fetch('news', true, ($pid ? ['id' => [$limit, '=']] : null), ['id', true], ($limit && !$pid ? [$limit] : null)); // Get user data foreach($newsPosts as $newsId => $newsPost) { $newsPosts[$newsId]['parsed'] = self::mdParse($newsPost['content']); $newsPosts[$newsId]['udata'] = Users::getUser($newsPost['uid']); $newsPosts[$newsId]['rdata'] = Users::getRank($newsPosts[$newsId]['udata']['rank_main']); // Check if a custom name colour is set and if so overwrite the rank colour if($newsPosts[$newsId]['udata']['name_colour'] != null){ $newsPosts[$newsId]['rdata']['colour'] = $newsPosts[$newsId]['udata']['name_colour']; } } // Return posts return $newsPosts; } // Loading info pages public static function loadInfoPage($id) { // Get contents from the database $infopage = Database::fetch('infopages', false, ['shorthand' => [$id, '=']]); // Return the data if there is any else just return false return count($infopage) ? $infopage : false; } // Validate MX records public static function checkMXRecord($email) { // Get the domain from the e-mail address $domain = substr(strstr($email, '@'), 1); // Check the MX record $record = checkdnsrr($domain, 'MX'); // Return the record data return $record; } // Check IP version public static function ipVersion($ip) { // Check if var is IP if(filter_var($ip, FILTER_VALIDATE_IP)) { // IPv4 if(filter_var($ip, FILTER_VALIDATE_IP, FILTER_FLAG_IPV4)) { return 4; } // IPv6 if(filter_var($ip, FILTER_VALIDATE_IP, FILTER_FLAG_IPV6)) { return 6; } } // Not an IP or unknown type return 0; } // Convert inet_pton to string with bits public static function inetToBits($inet) { // Unpack string $unpacked = unpack('A16', $inet); // Split the string $unpacked = str_split($unpacked[1]); // Define variable $binaryIP = null; // "Build" binary IP foreach($unpacked as $char) { $binaryIP .= str_pad(decbin(ord($char)), 8, '0', STR_PAD_LEFT); } // Return IP return $binaryIP; } // Match IP subnets public static function matchSubnet($ip, $range) { // Use the proper IP type switch(self::ipVersion($ip)) { case 4: // Break the range up in parts list($subnet, $bits) = explode('/', $range); // Convert IP and Subnet to long $ip = ip2long($ip); $subnet = ip2long($subnet); $mask = -1 << (32 - $bits); // In case the supplied subnet wasn't correctly aligned $subnet &= $mask; // Return true if IP is in subnet return ($ip & $mask) == $subnet; case 6: // Break the range up in parts list($subnet, $bits) = explode('/', $range); // Convert subnet to packed address and convert it to binary $subnet = inet_pton($subnet); $binarySubnet = self::inetToBits($subnet); // Convert IPv6 to packed address and convert it to binary as well $ip = inet_pton($ip); $binaryIP = self::inetToBits($ip); // Return bits of the strings according to the bits $ipBits = substr($binaryIP, 0, $bits); $subnetBits = substr($binarySubnet, 0, $bits); return ($ipBits === $subnetBits); default: return 0; } } // Check if IP is a CloudFlare IP public static function checkCFIP($ip) { // Get CloudFlare Subnet list $cfhosts = file_get_contents(ROOT .'_sakura/'. Configuration::getLocalConfig('data', 'cfipv'. (self::ipVersion($ip)))); // Replace \r\n with \n $cfhosts = str_replace("\r\n", "\n", $cfhosts); // Explode the file into an array $cfhosts = explode("\n", $cfhosts); // Check if IP is in a CloudFlare subnet foreach($cfhosts as $subnet) { // Check if the subnet isn't empty (git newline prevention) if(strlen($subnet) < 1) { continue; } // Return true if found if(self::matchSubnet($ip, $subnet)) { return true; } } // Return false if fails return false; } // Gets IP of current visitor public static function getRemoteIP() { // Assign REMOTE_ADDR to a variables $ip = $_SERVER['REMOTE_ADDR']; // Check if the IP is a CloudFlare IP if(self::checkCFIP($ip)) { // If it is check if the CloudFlare IP header is set and if it is assign it to the ip variable if(isset($_SERVER['HTTP_CF_CONNECTING_IP'])) { $ip = $_SERVER['HTTP_CF_CONNECTING_IP']; } } // Return the correct IP return $ip; } // Get country code from CloudFlare header (which just returns XX if not found) public static function getCountryCode() { // Check if the required header is set and return it if(isset($_SERVER['HTTP_CF_IPCOUNTRY'])) { return $_SERVER['HTTP_CF_IPCOUNTRY']; } // Return XX as a fallback return 'XX'; } // Create a new action code public static function newActionCode($action, $userid, $instruct) { // Make sure the user we're working with exists if(Users::getUser($userid)['id'] == 0) { return false; } // Convert the instruction array to a JSON $instruct = json_encode($instruct); // Generate a key $key = sha1(date("r") . time() . $userid . $action . rand(0, 9999)); // Insert the key into the database Database::insert('actioncodes', [ 'action' => $action, 'userid' => $userid, 'actkey' => $key, 'instruction' => $instruct ]); // Return the key return $key; } // Use an action code public static function useActionCode($action, $key, $uid = 0) { // Retrieve the row from the database $keyRow = Database::fetch('actioncodes', false, [ 'actkey' => [$key, '='], 'action' => [$action, '='] ]); // Check if the code exists if(count($keyRow) <= 1) { return [0, 'INVALID_CODE']; } // Check if the code was intended for the user that's using this code if($keyRow['userid'] != 0) { if($keyRow['userid'] != $uid) { return [0, 'INVALID_USER']; } } // Remove the key from the database Database::delete('actioncodes', [ 'id' => [$keyRow['id'], '='] ]); // Return success return [1, 'SUCCESS', $keyRow['instruction']]; } // Calculate password entropy public static function pwdEntropy($pw) { // Decode utf-8 chars $pw = utf8_decode($pw); // Count the amount of unique characters in the password string and calculate the entropy return count(count_chars($pw, 1)) * log(256, 2); } // Get country name from ISO 3166 code public static function getCountryName($code) { // Parse JSON file $iso3166 = json_decode(utf8_encode(file_get_contents(ROOT .'_sakura/'. Configuration::getLocalConfig('data', 'iso3166'))), true); // Check if key exists if(array_key_exists($code, $iso3166)) { return $iso3166[$code]; // If entry found return the full name } else { return 'Unknown'; // Else return unknown } } // Get FAQ data public static function getFaqData() { // Do database call $faq = Database::fetch('faq', true, null, ['id']); // Return FAQ data return $faq; } // Get log type string public static function getLogStringFromType($type) { // Query the database $return = Database::fetch('logtypes', false, ['id' => [$type, '=']]); // Check if type exists and else return a unformattable string if(count($return) < 2) { return 'Unknown action.'; } // Return the string return $return['string']; } // Get formatted logs public static function getUserLogs($uid = 0) { // Check if a user is specified $conditions = ($uid ? ['uid' => [$uid, '=']] : null); // Get data from database $logsDB = Database::fetch('logs', true, $conditions, ['id', true]); // Storage array $logs = array(); // Iterate over entries foreach($logsDB as $log) { // Store usable data $logs[$log['id']] = [ 'user' => $_USER = Users::getUser($log['uid']), 'rank' => Users::getRank($_USER['rank_main']), 'string' => vsprintf(self::getLogStringFromType($log['action']), json_decode($log['attribs'], true)) ]; } // Return new logs return $logs; } // Indent JSON public static function jsonPretty($json) { // Defines $tab = ' '; $out = ''; $lvl = 0; $str = false; $obj = json_decode($json); // Validate the object if($obj === false) return false; // Re-encode the json and get the length $json = json_encode($obj); $len = strlen($json); // Go over the entries for($c = 0; $c < $len; $c++) { // Get the current character $char = $json[$c]; switch($char) { case '[': case '{': if($str) { $out .= $char; } else { $out .= $char ."\r\n". str_repeat($tab, $lvl + 1); $lvl++; } break; case ']': case '}': if($str) { $out .= $char; } else { $lvl--; $out .= "\r\n". str_repeat($tab, $lvl) . $char; } break; case ',': if($str) { $out .= $char; } else { $out .= ",\r\n". str_repeat($tab, $lvl); } break; case ':': if($str) { $out .= $char; } else { $out .= ": "; } break; default: $out .= $char; break; } } // Return the indented JSON return $out; } // Time elapsed public static function timeElapsed($timestamp, $append = ' ago', $none = 'Just now') { // Subtract the entered timestamp from the current timestamp $time = time() - $timestamp; // If the new timestamp is below 1 return a standard string if($time < 1) { return $none; } // Array containing time "types" $times = [ 365 * 24 * 60 * 60 => 'year', 30 * 24 * 60 * 60 => 'month', 24 * 60 * 60 => 'day', 60 * 60 => 'hour', 60 => 'minute', 1 => 'second' ]; foreach($times as $secs => $str) { // Do a devision to check if the given timestamp fits in the current "type" $calc = $time / $secs; if($calc >= 1) { // Round the number $round = round($calc); // Return the string return $round .' '. $times[$secs] . ($round == 1 ? '' : 's') . $append; } } } // Get the byte symbol from a value public static function getByteSymbol($bytes) { // Return nothing if the input was 0 if(!$bytes) return; // Array with byte symbols $symbols = ['B', 'KiB', 'MiB', 'GiB', 'TiB', 'PiB', 'EiB', 'ZiB', 'YiB']; // Calculate byte entity $exp = floor(log($bytes) / log(1024)); // Format the things $bytes = sprintf("%.2f ". $symbols[$exp], ($bytes / pow(1024, floor($exp)))); // Return the formatted string return $bytes; } // Get Premium tracker data public static function getPremiumTrackerData() { // Create data array $data = []; // Get database stuff $table = Database::fetch('premium_log', true, null, ['id', true]); // Add raw table data to data array $data['table'] = $table; // Create balance entry $data['balance'] = 0.0; // Create users entry $data['users'] = []; // Calculate the thing foreach($table as $row) { // Calculate balance $data['balance'] = $data['balance'] + $row['amount']; // Add userdata to table if(!array_key_exists($row['uid'], $data['users'])) { $data['users'][$row['uid']] = new User($row['uid']); } } // Return the data return $data; } // Update donation tracker public static function updatePremiumTracker($id, $amount, $comment) { Database::insert('premium_log', [ 'uid' => $id, 'amount' => $amount, 'date' => time(), 'comment' => $comment ]); } }