Home Explore Help
Register Sign In
Pentium44
/
SSB
Watch 1
Star 0
Fork 0
Files Issues 0 Pull Requests 0 Wiki
Tree: 44fe2524e6
Branches Tags
SSB
/
index.php

index.php 60 KB
History Raw

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174117511761177117811791180118111821183118411851186118711881189119011911192119311941195119611971198119912001201120212031204120512061207120812091210121112121213121412151216121712181219122012211222122312241225122612271228122912301231123212331234123512361237123812391240124112421243124412451246124712481249125012511252125312541255125612571258125912601261126212631264126512661267126812691270127112721273127412751276127712781279128012811282128312841285128612871288128912901291129212931294129512961297129812991300130113021303130413051306130713081309131013111312131313141315131613171318131913201321132213231324132513261327132813291330133113321333133413351336133713381339134013411342134313441345134613471348134913501351135213531354135513561357135813591360136113621363136413651366136713681369137013711372137313741375137613771378137913801381138213831384138513861387138813891390139113921393139413951396139713981399140014011402140314041405140614071408140914101411141214131414141514161417141814191420142114221423142414251426142714281429143014311432143314341435143614371438143914401441144214431444144514461447144814491450145114521453145414551456145714581459146014611462146314641465146614671468146914701471147214731474147514761477147814791480148114821483148414851486148714881489149014911492149314941495149614971498149915001501150215031504150515061507150815091510151115121513151415151516151715181519152015211522152315241525152615271528152915301531153215331534153515361537153815391540154115421543154415451546154715481549155015511552155315541555155615571558155915601561156215631564156515661567156815691570157115721573157415751576157715781579158015811582158315841585158615871588158915901591159215931594159515961597159815991600160116021603160416051606160716081609161016111612161316141615161616171618161916201621162216231624162516261627162816291630 
  1. <?php
    2. 

  2. //	SSB - Simple Social Board
    3. 

  3. //	(C) Chris Dorman, 2012 - 2020
    4. 

  4. //	License: CC-BY-NC-SA version 3.0
    5. 

  5. //	http://github.com/Pentium44/SSB
    6. 

  6. 

  7. //// For development debug.
    8. 

  8. //error_reporting(E_ALL); 
    9. 

  9. //ini_set('display_errors', 1);
    10. 

  10. 

  11. session_start();
    12. 

  12. include "config.php";
    13. 

  13. include "functions.php";
    14. 

  14. include "bbcode.php";
    15. 

  15. 

  16. $loginCheck = checkLogin();
    17. 

  17. 

  18. // check if flatfile database location is populated
    19. 

  19. if(!file_exists("ssb_db"))
    20. 

  20. {
    21. 

  21. 	mkdir("ssb_db", 0777);
    22. 

  22. }
    23. 

  23. 

  24. if(!file_exists("ssb_db/users"))
    25. 

  25. {
    26. 

  26. 	mkdir("ssb_db/users", 0777);
    27. 

  27. }
    28. 

  28. 

  29. if(!file_exists("ssb_db/posts"))
    30. 

  30. {
    31. 

  31. 	mkdir("ssb_db/posts", 0777);
    32. 

  32. }
    33. 

  33. 

  34. if(!file_exists("ssb_db/uploads"))
    35. 

  35. {
    36. 

  36. 	mkdir("ssb_db/uploads", 0777);
    37. 

  37. }
    38. 

  38. 

  39. if(!file_exists("ssb_db/friends"))
    40. 

  40. {
    41. 

  41. 	mkdir("ssb_db/friends", 0777);
    42. 

  42. }
    43. 

  43. 

  44. $username = $_SESSION['ssb-user'];
    45. 

  45. //$_SESSION['ssb-topic'] = $ssbtopic;
    46. 

  46. 

  47. 

  48. 

  49. ?>
    50. 

  50. <!DOCTYPE html>
    51. 

  51. <html lang="en-us">
    52. 

  52. <head>
    53. 

  53. <title><?php echo htmlentities(stripslashes($ssbtitle)); ?></title>
    54. 

  54. <?php
    55. 

  55. 

  56. if($_GET['do']!="post" && $_GET['do']!="reply" && $_GET['do']!="react" && $_GET['do']!="avatarupload" && $_GET['do']!="delpost") {
    57. 

  57. 	echo '<meta http-equiv="content-type" content="text/html; charset=utf-8">';
    58. 

  58. }
    59. 

  59. 

  60. ?>
    61. 

  61. <meta name="viewport" content="width=device-width, initial-scale=.55, shrink-to-fit=yes"><meta name="description" content="<?php echo htmlentities($ssbtitle) . " - " . $desc; ?>">
    62. 

  62. <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css">
    63. 

  63. <link rel="stylesheet" type="text/css" href="style.css">
    64. 

  64. </head>
    65. 

  65. <body <?php if($_GET['do']=="privmsg") { echo "onload=\"UpdateTimer();\""; } ?>>
    66. 

  66. <div class="title"><?php echo $ssbtitle; ?></div>
    67. 

  67. <div class="maincontain">
    68. 

  68. <table id="containtable">
    69. 

  69.     <tr><td id="navcontainer">
    70. 

  70.         <div id="navbar">
    71. 

  71.         <?php if(isset($_SESSION['ssb-user']) && isset($_SESSION['ssb-pass'])) { ?>
    72. 

  72.     <a style="width:50px;" href="?forms=post" title="Post on your feed!">Make a post</a><br />
    73. 

  73.     <a style="width:50px;" href="?userfeed=<?php echo $username; ?>" title="Your profile!">Profile</a><br />
    74. 

  74.     <a href="index.php">Feed</a><br />
    75. 

  75.     <a href="?do=friends">Friends</a><br />
    76. 

  76.     <a href="?do=about">About</a><br />
    77. 

  77.     <a style="width:50px;" href="?do=users" title="Public users!">Public figures</a><br />
    78. 

  78.     <a style="width:50px;" href="?do=userctrl">Settings</a><br />
    79. 

  79.     <a style="width:50px;" href="?do=logout">Log out</a><br />
    80. 

  80.         <?php } else { ?>
    81. 

  81.     <a href="?forms=login">Login</a><br />
    82. 

  82.     <a href="?do=about">About</a><br />
    83. 

  83.         <?php } ?>
    84. 

  84.         </div>
    85. 

  85. 

  86. <?php
    87. 

  87. 

  88. if(($loginCheck == true) && $_GET['do']!="avatarlocation" && $_GET['do']!="reply" && $_GET['do']!="post" && $_GET['do']!="react" && $_GET['do']!="delpost") {
    89. 

  89.     // PM notifications
    90. 

  90.     $notifications = "ssb_db/friends/" . $username . ".notifications";
    91. 

  91.     $handle = fopen($notifications, "r");
    92. 

  92. 

  93.     echo "<table class='notifications'><tr><td>Notifications: <a class='button' onclick=\"userClrNotifications();\">Clear</a></td></tr>";
    94. 

  94. 

  95.     if ($handle) {
    96. 

  96.         while (($line = fgets($handle)) !== false) {
    97. 

  97.             echo "<tr><td><i class='fa fa-exclamation' aria-hidden='true'></i> " . $line . "</td></tr>";
    98. 

  98.         }
    99. 

  99.         fclose($handle);
    100. 

  100.     } else {
    101. 

  101.         echo "<tr><td>No notifications</td></tr>";
    102. 

  102.     }
    103. 

  103. 

  104.     echo "</table></td><td class='contain'>";
    105. 

  105. } else {
    106. 

  106.     echo "</td><td class='contain'>";
    107. 

  107. }
    108. 

  108. 

  109. ?>
    110. 

  110. 

  111. <?php
    112. 

  112. 

  113. if(isset($_GET['forms']))
    114. 

  114. {
    115. 

  115. 	$forms = $_GET['forms'];
    116. 

  116. 	$id = $_GET['pid'];
    117. 

  117. 	if($forms=="register") {
    118. 

  118. 		registerForm();
    119. 

  119. 	}
    120. 

  120. 	else if($forms=="login") {
    121. 

  121. 		loginForm();
    122. 

  122. 	}
    123. 

  123. 	else if($forms=="friendreq") {
    124. 

  124. 		if($loginCheck == true) {
    125. 

  125. 			friendReqForm();
    126. 

  126. 		} else {
    127. 

  127. 			loginForm();
    128. 

  128. 		}
    129. 

  129. 	}
    130. 

  130. 	else if($forms=="changepass") {
    131. 

  131. 		if($loginCheck == true) {
    132. 

  132. 			changePassForm();
    133. 

  133. 		} else {
    134. 

  134. 			loginForm();
    135. 

  135. 		}
    136. 

  136. 	}
    137. 

  137. 	else if($forms=="deleteacct") {
    138. 

  138. 		if($loginCheck == true) {
    139. 

  139. 			deleteAcctForm();
    140. 

  140. 		} else {
    141. 

  141. 			loginForm();
    142. 

  142. 		}
    143. 

  143. 	}
    144. 

  144. 	else if($forms=="avatarupload") {
    145. 

  145. 		if($loginCheck == true) {
    146. 

  146. 			uploadAvatarForm();
    147. 

  147. 		} else {
    148. 

  148. 			loginForm();
    149. 

  149. 		}
    150. 

  150. 	}
    151. 

  151. 	else if($forms=="post") {
    152. 

  152. 		if($loginCheck == true) {
    153. 

  153. 			postForm();
    154. 

  154. 		} else {
    155. 

  155. 			loginForm();
    156. 

  156. 		}
    157. 

  157. 	}
    158. 

  158. 	else if($forms=="clean") {
    159. 

  159. 		if($loginCheck == true) {
    160. 

  160. 			cleanForm();
    161. 

  161. 		} else {
    162. 

  162. 			loginForm();
    163. 

  163. 		}
    164. 

  164. 	}
    165. 

  165. 	else { 
    166. 

  166. 		echo "ERROR: Unknown form-name<br>"; 
    167. 

  167. 	}
    168. 

  168. }
    169. 

  169. else if(isset($_GET['notify']))
    170. 

  170. {
    171. 

  171.         $notify = $_GET['notify'];
    172. 

  172.         if($notify=="1") { echo "Error: User not found"; }
    173. 

  173.         else if($notify=="2") { echo "Error: Incorrect password provided"; }
    174. 

  174.         else if($notify=="3") { echo "Error: Please fill out all the text boxes"; }
    175. 

  175.         else if($notify=="4") { echo "Error: The provided passwords did not match"; }
    176. 

  176.         else if($notify=="5") { echo "Error: Special characters cannot be used in your username"; }
    177. 

  177.         else if($notify=="6") { echo "Error: This username is already in use"; }
    178. 

  178.         else if($notify=="7") { echo "Error: Current password incorrect!"; }
    179. 

  179.         else if($notify=="8") { echo "Success! Current password changed!"; }
    180. 

  180.         else { echo "Error: unknown error... this is quite unusual..."; }
    181. 

  181. }
    182. 

  182. else if(isset($_GET['userfeed'])) 
    183. 

  183. {
    184. 

  184. 	$userid = $_GET['userfeed'];
    185. 

  185. 	// Make sure we're friends or is my account.
    186. 

  186. 	include "ssb_db/users/" . $userid . ".php";
    187. 

  187. 	if ($accttype == "private") {
    188. 

  188. 		if ($loginCheck == true) {
    189. 

  189. 			$friendcount = file_get_contents("ssb_db/friends/" . $username . ".count");
    190. 

  190. 			include "ssb_db/friends/" . $username . ".php";
    191. 

  191. 			for($x = 1; $x <= $friendcount; $x++)
    192. 

  192. 			{
    193. 

  193. 

  194. 				// If private, and user is following. Allow
    195. 

  195. 				if($userid == ${"friend" . $x}) {
    196. 

  196. 					echo "<table><tr><td>";
    197. 

  197. 					echo "<div class='avatar' style=\"background-image: url('index.php?do=avatarlocation&user=" . $userid . "');\" title='User Avatar'></div><br />";
    198. 

  198. 					// DONE
    199. 

  199. 					echo "</td><td>";
    200. 

  200. 					echo "<h3>User information</h3>";
    201. 

  201. 					echo "Username: " . $userid . "@" . $domain . "<br />";
    202. 

  202. 					echo "Full name: " . $user_fullname . "<br />";
    203. 

  203. 					echo "<h3>User posts</h3>";
    204. 

  204. 					echo "</td></tr></table>";
    205. 

  205. 				}
    206. 

  206. 			}
    207. 

  207. 

  208. 			// Check if viewing your own profile
    209. 

  209. 			if($userid == $username)
    210. 

  210. 			{
    211. 

  211. 				echo "<table><tr><td>";
    212. 

  212. 				// Get user avatar if set
    213. 

  213.             	echo "<div class='avatar' style=\"background-image: url('index.php?do=avatarlocation&user=" . $userid . "');\" title='User Avatar'></div><br />";
    214. 

  214.              	// DONE
    215. 

  215.               	echo "</td><td>";
    216. 

  216. 				echo "<h3>User information</h3>";
    217. 

  217. 				echo "Username: " . $userid . "@" . $domain . "<br />";
    218. 

  218. 				echo "Full name: " . $user_fullname . "<br />";
    219. 

  219. 				echo "<h3>User posts</h3>";
    220. 

  220. 				echo "</td></tr></table>";
    221. 

  221. 

  222. 			}
    223. 

  223. 

  224. 			// Lets generate the users feed now.
    225. 

  225. 			foreach(array_reverse(glob("ssb_db/posts/post_" . $userid . "_" . "*.php")) as $postfile) {
    226. 

  226. 				//echo $postfile;
    227. 

  227. 				unset($shared); // Keep clean variables
    228. 

  228. 				include $postfile;
    229. 

  229. 				for($x = 1; $x <= $friendcount; $x++)
    230. 

  230. 				{
    231. 

  231. 					if($postowner == ${"friend" . $x}) {
    232. 

  232. 						echo "<div class='post'><table><tr><td><div class='avatar_small' style=\"background-image: url('index.php?do=avatarlocation&user=$postowner');\" title='User Avatar'></div></td><td><h3>$postowner<span class='date'>$postdate &nbsp;&nbsp;";
    233. 

  233. 						if(file_exists("ssb_db/posts/$postid.reactcount")) {
    234. 

  234. 							$reacts = file_get_contents("ssb_db/posts/$postid.reactcount");
    235. 

  235. 							echo "<div class='reacts'><i class='fa fa-heart' style='color: red;'></i> $reacts <div class='react-list'>";
    236. 

  236. 							// Pull up users who reacted, and generate dropdown list.
    237. 

  237. 							$reactlist = fopen("ssb_db/posts/$postid.reacted", "r");
    238. 

  238. 							if($reactlist) {
    239. 

  239. 								while (($reactor = fgets($reactlist)) !== false) {
    240. 

  240. 									echo "<b>$reactor</b>";
    241. 

  241. 								}
    242. 

  242. 								fclose($reactlist);
    243. 

  243. 							}
    244. 

  244. 							echo "</div></div>";
    245. 

  245. 						}
    246. 

  246. 						
    247. 

  247. 						if(isset($shared) && $shared == "1")
    248. 

  248. 						{
    249. 

  249. 							echo "<br />Originally posted by $origowner";
    250. 

  250. 						}
    251. 

  251. 						
    252. 

  252. 						echo "</span></h3></td></tr></table>";
    253. 

  253. 						echo "" . bbcode_format($postcontent) . "";
    254. 

  254. 						
    255. 

  255. 						// Footer
    256. 

  256. 						echo "<div class='post-footer'>";
    257. 

  257. 						echo "<a style='padding-top: 6px;' onclick=\"userReact('" . $postowner . "','" . $postid . "');\" class='button'><i class='fa fa-heart'></i>&nbsp;React</a>";
    258. 

  258. 						echo "<a style='padding-top: 6px;' href='index.php?view=$postid&user=$postowner' class='button'><i class='fa fa-comment'></i>&nbsp;Comment</a>";
    259. 

  259. 						echo "<a style='padding-top: 6px;' href='index.php?do=share&pid=$postid&user=$postowner' class='button'><i class='fa fa-share'></i>&nbsp;Share</a>";
    260. 

  260. 						echo "<br />"; // line break
    261. 

  261. 						if(file_exists("ssb_db/posts/reply_" . $postowner . "_" . $postid . ".count")) {
    262. 

  262. 							$postcount = file_get_contents("ssb_db/posts/reply_" . $postowner . "_" . $postid . ".count");
    263. 

  263. 							// If there's a reply, show them.
    264. 

  264. 							if($postcount == 0) {
    265. 

  265. 								echo "no replies";
    266. 

  266. 							} else if($postcount == 1) {
    267. 

  267. 								echo "$postcount reply";
    268. 

  268. 							} else if ($postcount > 0) {
    269. 

  269. 								echo "$postcount replies";
    270. 

  270. 							}
    271. 

  271. 						}
    272. 

  272. 						
    273. 

  273. 						echo " &bull; ";
    274. 

  274. 						
    275. 

  275. 						// Show reaction count in footer as well.
    276. 

  276. 						if(file_exists("ssb_db/posts/" . $postid . ".reactcount")) {
    277. 

  277. 							$reactcount = file_get_contents("ssb_db/posts/" . $postid . ".reactcount");
    278. 

  278. 							if($reactcount == 1) {
    279. 

  279. 								echo "$reactcount reaction";
    280. 

  280. 							} else if ($reactcount > 0) {
    281. 

  281. 								echo "$reactcount reactions";
    282. 

  282. 							}
    283. 

  283. 						} else {
    284. 

  284. 							echo "no reactions";
    285. 

  285. 						}
    286. 

  286. 						
    287. 

  287. 						echo "</div></div><br />\n";
    288. 

  288. 					}
    289. 

  289. 				}
    290. 

  290. 

  291. 				if($postowner == $username)
    292. 

  292. 				{
    293. 

  293. 					echo "<div class='post'><table><tr><td><div class='avatar_small' style=\"background-image: url('index.php?do=avatarlocation&user=$postowner');\" title='User Avatar'></div></td><td><h3>$postowner<span class='date'>$postdate &nbsp;&nbsp;";
    294. 

  294. 					if(file_exists("ssb_db/posts/$postid.reactcount")) {
    295. 

  295. 						$reacts = file_get_contents("ssb_db/posts/$postid.reactcount");
    296. 

  296. 						echo "<div class='reacts'><i class='fa fa-heart' style='color: red;'></i> $reacts <div class='react-list'>";
    297. 

  297. 						// Pull up users who reacted, and generate dropdown list.
    298. 

  298. 						$reactlist = fopen("ssb_db/posts/$postid.reacted", "r");
    299. 

  299. 						if($reactlist) {
    300. 

  300. 							while (($reactor = fgets($reactlist)) !== false) {
    301. 

  301. 								echo "<b>$reactor</b>";
    302. 

  302. 							}
    303. 

  303. 							fclose($reactlist);
    304. 

  304. 						}
    305. 

  305. 						echo "</div></div>";
    306. 

  306. 					}
    307. 

  307. 					
    308. 

  308. 					if(isset($shared) && $shared == "1")
    309. 

  309. 					{
    310. 

  310. 						echo "<br />Originally posted by $origowner";
    311. 

  311. 					}
    312. 

  312. 					
    313. 

  313. 					echo "</span></h3></td></tr></table>";
    314. 

  314. 					echo "" . bbcode_format($postcontent) . "";
    315. 

  315. 					// Footer
    316. 

  316. 					echo "<div class='post-footer'>";
    317. 

  317. 					echo "<a style='padding-top: 6px;' onclick=\"userReact('" . $postowner . "','" . $postid . "');\" class='button'><i class='fa fa-heart'></i>&nbsp;React</a>";
    318. 

  318. 					echo "<a style='padding-top: 6px;' href='index.php?view=$postid&user=$postowner' class='button'><i class='fa fa-comment'></i>&nbsp;Comment</a>";
    319. 

  319. 					echo "<a style='padding-top: 6px;' href='index.php?do=delpost&user=$username&pid=$postid' class='button'><i class='fa fa-trash-o'></i>&nbsp;Delete</a>";
    320. 

  320. 					echo "<br />"; // line break
    321. 

  321. 					if(file_exists("ssb_db/posts/reply_" . $postowner . "_" . $postid . ".count")) {
    322. 

  322. 						$postcount = file_get_contents("ssb_db/posts/reply_" . $postowner . "_" . $postid . ".count");
    323. 

  323. 						// If there's a reply, show them.
    324. 

  324. 						if($postcount == 0) {
    325. 

  325. 							echo "no replies";
    326. 

  326. 						} else if($postcount == 1) {
    327. 

  327. 							echo "$postcount reply";
    328. 

  328. 						} else if ($postcount > 0) {
    329. 

  329. 							echo "$postcount replies";
    330. 

  330. 						}
    331. 

  331. 					}
    332. 

  332. 					
    333. 

  333. 					echo " &bull; ";
    334. 

  334. 					
    335. 

  335. 					// Show reaction count in footer as well.
    336. 

  336. 					if(file_exists("ssb_db/posts/" . $postid . ".reactcount")) {
    337. 

  337. 						$reactcount = file_get_contents("ssb_db/posts/" . $postid . ".reactcount");
    338. 

  338. 						if($reactcount == 1) {
    339. 

  339. 							echo "$reactcount reaction";
    340. 

  340. 						} else if ($reactcount > 0) {
    341. 

  341. 							echo "$reactcount reactions";
    342. 

  342. 						}
    343. 

  343. 					} else {
    344. 

  344. 						echo "no reactions";
    345. 

  345. 					}
    346. 

  346. 						
    347. 

  347. 					echo "</div></div><br />\n";
    348. 

  348. 				}
    349. 

  349. 			}
    350. 

  350. 			echo "<!-- Gen done...-->";
    351. 

  351. 		}
    352. 

  352. 	}
    353. 

  353. 	else
    354. 

  354. 	{
    355. 

  355. 		echo "<h3>User information</h3>";
    356. 

  356. 		echo "<table><tr><td>";
    357. 

  357. 		echo "<div class='avatar' style=\"background-image: url('index.php?do=avatarlocation&user=$userid');\" title='User Avatar'></div>";
    358. 

  358. 		// DONE
    359. 

  359. 		
    360. 

  360. 		echo "</td><td>";
    361. 

  361. 		// If not friend, allow to send friend request from right here!
    362. 

  362. 		$friend = 0;
    363. 

  363. 		$friendcount = file_get_contents("ssb_db/friends/" . $username . ".count");
    364. 

  364. 		include "ssb_db/friends/" . $username . ".php";
    365. 

  365. 		for($x = 1; $x <= $friendcount; $x++)
    366. 

  366. 		{
    367. 

  367. 			// If private, and user is following. Allow
    368. 

  368. 			if($userid == ${"friend" . $x}) {
    369. 

  369. 				$friend = 1;
    370. 

  370. 			}
    371. 

  371. 		}	
    372. 

  372. 				
    373. 

  373. 		if($friend!=1) {
    374. 

  374. 			echo "<a class='button' href='index.php?do=sendfr&user=$userid'>Send friend request</a><br /><br />";
    375. 

  375. 		}
    376. 

  376.              	
    377. 

  377. 		echo "Username: " . $userid . "@" . $domain . "<br />";
    378. 

  378. 		echo "Full name: " . $user_fullname;
    379. 

  379. 		echo "</td></tr></table>";
    380. 

  380. 

  381. 		foreach(array_reverse(glob("ssb_db/posts/post_" . $userid . "_" . "*.php")) as $postfile) {
    382. 

  382. 			include $postfile;
    383. 

  383. 			unset($shared);
    384. 

  384. 			echo "<div class='post'><table><tr><td><div class='avatar_small' style=\"background-image: url('index.php?do=avatarlocation&user=$postowner');\" title='User Avatar'></div></td><td><h3>$postowner<span class='date'>$postdate &nbsp;&nbsp;";
    385. 

  385. 			if(file_exists("ssb_db/posts/$postid.reactcount")) {
    386. 

  386. 				$reacts = file_get_contents("ssb_db/posts/$postid.reactcount");
    387. 

  387. 				echo "<div class='reacts'><i class='fa fa-heart' style='color: red;'></i> $reacts <div class='react-list'>";
    388. 

  388. 				// Pull up users who reacted, and generate dropdown list.
    389. 

  389. 				$reactlist = fopen("ssb_db/posts/$postid.reacted", "r");
    390. 

  390. 				if($reactlist) {
    391. 

  391. 					while (($reactor = fgets($reactlist)) !== false) {
    392. 

  392. 						echo "<b>$reactor</b>";
    393. 

  393. 					}
    394. 

  394. 					fclose($reactlist);
    395. 

  395. 				}
    396. 

  396. 				echo "</div></div>";
    397. 

  397. 			}
    398. 

  398. 			
    399. 

  399. 			if(isset($shared) && $shared == "1")
    400. 

  400. 			{
    401. 

  401. 				echo "<br />Originally posted by $origowner";
    402. 

  402. 			}
    403. 

  403. 			
    404. 

  404. 			echo "</span></h3></td></tr></table>";
    405. 

  405. 			echo "" . bbcode_format($postcontent) . "";
    406. 

  406. 			// Footer
    407. 

  407. 			echo "<div class='post-footer'>";
    408. 

  408. 			echo "<a style='padding-top: 6px;' onclick=\"userReact('" . $postowner . "','" . $postid . "');\" class='button'><i class='fa fa-heart'></i>&nbsp;React</a>";
    409. 

  409. 			echo "<a style='padding-top: 6px;' href='index.php?view=$postid&user=$postowner' class='button'><i class='fa fa-comment'></i>&nbsp;Comment</a>";
    410. 

  410. 			echo "<a style='padding-top: 6px;' href='index.php?do=share&pid=$postid&user=$postowner' class='button'><i class='fa fa-share'></i>&nbsp;Share</a>";
    411. 

  411. 			echo "<br />"; // line break
    412. 

  412. 			if(file_exists("ssb_db/posts/reply_" . $postowner . "_" . $postid . ".count")) {
    413. 

  413. 				$postcount = file_get_contents("ssb_db/posts/reply_" . $postowner . "_" . $postid . ".count");
    414. 

  414. 				// If there's a reply, show them.
    415. 

  415. 				if($postcount == 0) {
    416. 

  416. 					echo "no replies";
    417. 

  417. 				} else if($postcount == 1) {
    418. 

  418. 					echo "$postcount reply";
    419. 

  419. 				} else if ($postcount > 0) {
    420. 

  420. 					echo "$postcount replies";
    421. 

  421. 				}
    422. 

  422. 			}
    423. 

  423. 					
    424. 

  424. 			echo " &bull; ";
    425. 

  425. 					
    426. 

  426. 			// Show reaction count in footer as well.
    427. 

  427. 			if(file_exists("ssb_db/posts/" . $postid . ".reactcount")) {
    428. 

  428. 				$reactcount = file_get_contents("ssb_db/posts/" . $postid . ".reactcount");
    429. 

  429. 				if($reactcount == 1) {
    430. 

  430. 					echo "$reactcount reaction";
    431. 

  431. 				} else if ($reactcount > 0) {
    432. 

  432. 					echo "$reactcount reactions";
    433. 

  433. 				}
    434. 

  434. 			} else {
    435. 

  435. 				echo "no reactions";
    436. 

  436. 			}
    437. 

  437. 						
    438. 

  438. 			echo "</div></div><br />\n";
    439. 

  439. 		}
    440. 

  440. 				
    441. 

  441. 		echo "<!-- Gen done...-->";
    442. 

  442. 	}
    443. 

  443. }
    444. 

  444. else if(isset($_GET['view']) && isset($_GET['user']))
    445. 

  445. {
    446. 

  446. 	$puser = $_GET['user'];
    447. 

  447. 	$id = $_GET['view'];
    448. 

  448. 	$postc = file_get_contents("ssb_db/posts/reply_" . $puser . "_" . $id . ".count");
    449. 

  449. 	include "ssb_db/posts/post_" . $puser . "_" . $id . ".php";
    450. 

  450. 

  451. 	echo "<div class='post'><table><tr><td><div class='avatar_small' style=\"background-image: url('index.php?do=avatarlocation&user=$postowner');\" title='User Avatar'></div></td><td><h3>$postowner<span class='date'>$postdate &nbsp;&nbsp;";
    452. 

  452. 	if(file_exists("ssb_db/posts/$postid.reactcount")) {
    453. 

  453. 		$reacts = file_get_contents("ssb_db/posts/$postid.reactcount");
    454. 

  454. 		echo "<div class='reacts'><i class='fa fa-heart' style='color: red;'></i> $reacts <div class='react-list'>";
    455. 

  455. 		// Pull up users who reacted, and generate dropdown list.
    456. 

  456. 		$reactlist = fopen("ssb_db/posts/$postid.reacted", "r");
    457. 

  457. 		if($reactlist) {
    458. 

  458. 			while (($reactor = fgets($reactlist)) !== false) {
    459. 

  459. 				echo "<b>$reactor</b>";
    460. 

  460. 			}
    461. 

  461. 			fclose($reactlist);
    462. 

  462. 		}
    463. 

  463. 		echo "</div></div>";
    464. 

  464. 	}
    465. 

  465. 

  466. 	if(isset($shared) && $shared == "1")
    467. 

  467. 	{
    468. 

  468. 		echo "<br />Originally posted by $origowner";
    469. 

  469. 	}
    470. 

  470. 

  471. 	echo "</span></h3></td></tr></table>";
    472. 

  472. 	echo "" . bbcode_format($postcontent) . "";
    473. 

  473. 	// Footer
    474. 

  474. 	
    475. 

  475. 	echo "<a style='padding-top: 6px;' onclick=\"userReact('" . $postowner . "','" . $postid . "');\" class='button'><i class='fa fa-heart'></i>&nbsp;React</a>";
    476. 

  476. 	echo "<a style='padding-top: 6px;' href='index.php?do=share&pid=$postid&user=$postowner' class='button'><i class='fa fa-share'></i>&nbsp;Share</a>";
    477. 

  477. 	
    478. 

  478. 	echo "</div><br />\n";
    479. 

  479. 

  480. 	for($x = 1; $x <= $postc; $x++) {
    481. 

  481. 		$reply_content = ${"reply" . $x};
    482. 

  482. 		$reply_user = ${"reply" . $x . "_user"};
    483. 

  483. 		$reply_date = ${"reply" . $x . "_date"};
    484. 

  484. 		
    485. 

  485. 		echo "<div class='reply'>";
    486. 

  486. 		echo "<table><tr><td><div class='avatar_small' style='background-image: url(\"index.php?do=avatarlocation&user=$reply_user\");' title='User Avatar'></div></td><td><h4>$reply_user <a onclick=\"userTag('$reply_user');\"><i class='fa fa-tag'></i></a> <span style='font-size: 8px; padding-left: 6px; color: #808080;'>$reply_date</span></h4></td></tr></table>";
    487. 

  487. 		echo "<div class='reply_content'>" . bbcode_format($reply_content) . "</div>";
    488. 

  488. 		echo "</div>\n";
    489. 

  489. 	}
    490. 

  490. 

  491. 	echo "<br />";
    492. 

  492. 

  493. 	if ($loginCheck != true) { 
    494. 

  494. 		echo "Login to reply...";
    495. 

  495. 	} else {
    496. 

  496. 		$friendcount = file_get_contents("ssb_db/friends/" . $username . ".count");
    497. 

  497.                 include "ssb_db/friends/" . $username . ".php";
    498. 

  498.                 for($x = 1; $x <= $friendcount; $x++)
    499. 

  499. 	        {
    500. 

  500.                         if($puser == ${"friend" . $x}) {
    501. 

  501. 				$z = "1";
    502. 

  502. 				replyForm($id, $puser);
    503. 

  503. 			}
    504. 

  504. 		}
    505. 

  505. 

  506. 		// Its you dummy
    507. 

  507. 		if($puser == $username) {
    508. 

  508.                  	$z = "1";
    509. 

  509.                       	replyForm($id, $puser);
    510. 

  510.            	}
    511. 

  511. 

  512. 

  513. 		if(!isset($z))
    514. 

  514. 		{
    515. 

  515. 			echo "Not following! Follow to reply...<br />";
    516. 

  516. 		}
    517. 

  517. 	}
    518. 

  518. }
    519. 

  519. else if(isset($_GET['do']))
    520. 

  520. {
    521. 

  521. 	$do = $_GET['do'];
    522. 

  522. 	if($do=="post")
    523. 

  523. 	{
    524. 

  524. 		if ($loginCheck != true) { loginForm(); } else {
    525. 

  525. 			$date = date("YmdHis"); // timestamp in year, month, date, hour, minute, and second.
    526. 

  526.   			$titledate = date("m-d-Y h:i:sa"); // time stamp for people to read xD
    527. 

  527. 

  528. 			if(isset($_FILES["file"]["name"]) && isset($username)) {
    529. 

  529. 				
    530. 

  530. 				$uploaded = array(); // empty array for upload file names
    531. 

  531. 				$uploaded_name = array(); // empty array for upload names
    532. 

  532. 				// File selected, upload!
    533. 

  533. 				for($i=0; $i<count($_FILES["file"]["name"]); $i++)
    534. 

  534. 				{
    535. 

  535. 					$allowedExts = array("gif", "jpeg", "jpg", "png", "bmp", "ico", "GIF", "JPEG", "JPG", "PNG", "BMP", "ICO", "mp4", "MP4");
    536. 

  536. 					$temp = explode(".", $_FILES["file"]["name"][$i]);
    537. 

  537. 					$extension = end($temp);
    538. 

  538. 					if ((($_FILES["file"]["type"][$i] == "image/gif")
    539. 

  539. 					|| ($_FILES["file"]["type"][$i] == "image/x-gif")
    540. 

  540. 					|| ($_FILES["file"]["type"][$i] == "image/jpeg")
    541. 

  541. 					|| ($_FILES["file"]["type"][$i] == "image/x-jpeg")
    542. 

  542. 					|| ($_FILES["file"]["type"][$i] == "image/x-jpg")
    543. 

  543. 					|| ($_FILES["file"]["type"][$i] == "image/jpg")
    544. 

  544. 					|| ($_FILES["file"]["type"][$i] == "image/pjpeg")
    545. 

  545. 					|| ($_FILES["file"]["type"][$i] == "image/x-png")
    546. 

  546. 					|| ($_FILES["file"]["type"][$i] == "image/bmp")
    547. 

  547. 					|| ($_FILES["file"]["type"][$i] == "image/x-icon")
    548. 

  548. 					|| ($_FILES["file"]["type"][$i] == "application/octet-stream")
    549. 

  549. 					|| ($_FILES["file"]["type"][$i] == "video/mp4")
    550. 

  550. //					|| ($_FILES["file"]["type"][$i] == "video/ogg")
    551. 

  551. //					|| ($_FILES["file"]["type"][$i] == "video/webm")
    552. 

  552. //					|| ($_FILES["file"]["type"][$i] == "video/x-flv")
    553. 

  553. //					|| ($_FILES["file"]["type"][$i] == "video/mp4v-es")
    554. 

  554. 					|| ($_FILES["file"]["type"][$i] == "image/png")
    555. 

  555. 					|| ($_FILES["file"]["type"][$i] == ""))
    556. 

  556. 					&& ($_FILES["file"]["size"][$i] < $user_max_upload)
    557. 

  557. 					&& in_array($extension, $allowedExts))
    558. 

  558. 					{
    559. 

  559. 						
    560. 

  560. 						if ($_FILES["file"]["error"][$i] > 0)
    561. 

  561. 						{
    562. 

  562. 							echo $_FILES["file"]["name"][$i] . " - Return Code: " . $_FILES["file"]["error"][$i] . "<br />";
    563. 

  563. 						}
    564. 

  564. 						else
    565. 

  565. 						{
    566. 

  566. 							if(file_exists("ssb_db/uploads/" . $_FILES["file"]["name"][$i]))
    567. 

  567. 							{
    568. 

  568. 								echo "Error: " . $_FILES["file"]["name"][$i] . " exists.<br />";
    569. 

  569. 							}
    570. 

  570. 							else
    571. 

  571. 							{
    572. 

  572. 								$randstring = getRandString("32");
    573. 

  573. 								move_uploaded_file($_FILES["file"]["tmp_name"][$i],
    574. 

  574. 								"ssb_db/uploads/" . $randstring . "." . $extension);
    575. 

  575. 								array_push($uploaded, $randstring . "." . $extension);
    576. 

  576. 								array_push($uploaded_name, pathinfo($_FILES["file"]["name"][$i], PATHINFO_FILENAME));
    577. 

  577. 								echo "Success: " . $_FILES["file"]["name"][$i] . " (" . tomb($_FILES["file"]["size"][$i]) . ") uploaded...<br />";
    578. 

  578. 								//rename("ssb_db/uploads/" . $FILES["file"]["name"][$i], "ssb_db/uploads/" . $username . "_" . $date . $extension);
    579. 

  579. 							}
    580. 

  580. 						}
    581. 

  581. 					}
    582. 

  582. 					else
    583. 

  583. 					{
    584. 

  584. 						// Check if there was actually an issue
    585. 

  585. 						if($_FILES["file"]["size"] == "0") {
    586. 

  586. 							echo "Error: " . $_FILES["file"]["name"][$i] . " is too large, or is a invalid filetype";
    587. 

  587. 						}
    588. 

  588. 					}
    589. 

  589. 				} // end of for loop
    590. 

  590. 		
    591. 

  591. 				$srchcont = stripslashes(htmlentities($_POST['body']));
    592. 

  592. 				$srchcont .= " "; // doesn't find tag if there's not a fucking whitespace
    593. 

  593. 				$checkForUserTag = searchForUserTag($srchcont);
    594. 

  594. 				$taggedUser = substr($checkForUserTag, 1, -1);
    595. 

  595. 				if(file_exists("ssb_db/users/" . $taggedUser . ".name")) {
    596. 

  596. 					if($taggedUser!=$postowner) {
    597. 

  597. 						$tagged_notifications = file_get_contents("ssb_db/friends/" . $taggedUser . ".notifications");
    598. 

  598. 						file_put_contents("ssb_db/friends/" . $taggedUser . ".notifications", "<b>$username</b> <a href='index.php?view=$date&user=$username'>tagged you in a post</a>\n" . $tagged_notifications);
    599. 

  599. 					}
    600. 

  600. 				}
    601. 

  601. 

  602. 				$body = nl2br(htmlentities(stripcslashes($_POST['body'])));
    603. 

  603. 				//$username = stripcslashes(htmlentities($username));
    604. 

  604. 				include "ssb_db/users/" . $username . ".php";
    605. 

  605. 				$post_file = "ssb_db/posts/post_" . $username . "_" . $date . ".php";
    606. 

  606. 				$post_attachments = "<br />";
    607. 

  607. 				$post_string = "<?php\n\$postowner = \"" . $username . "\";\$postid=\"" . $date . "\";\$postdate=\"" . $titledate . "\";\$postcontent = \"" . $body . "<br />";
    608. 

  608. 					
    609. 

  609. 				$attachments = array();
    610. 

  610. 				$fileCount = 0;
    611. 

  611. 				foreach($uploaded as &$upload)
    612. 

  612. 				{
    613. 

  613. 					if(file_exists("ssb_db/uploads/" . $upload)) {
    614. 

  614. 						$ext = pathinfo("ssb_db/uploads/ . $upload", PATHINFO_EXTENSION);
    615. 

  615. 						if($ext == "mp4" || $ext == "MP4") {
    616. 

  616. 							array_push($attachments, "<div class='attachment'>" . $uploaded_name[$fileCount] . "<video width='560' height='315' controls><source src='ssb_db/uploads/$upload' type='video/mp4'>HTML5 video not supported :(</video></div>");
    617. 

  617. 						}
    618. 

  618. 						else
    619. 

  619. 						{
    620. 

  620. 							array_push($attachments, "<div class='attachment'><a href='ssb_db/uploads/" . $upload . "'><img src='ssb_db/uploads/" . $upload . "'></a></div>");
    621. 

  621. 						}
    622. 

  622. 					}
    623. 

  623. 					
    624. 

  624. 					$fileCount++; // Add it up
    625. 

  625. 				}
    626. 

  626. 				
    627. 

  627. 				foreach($attachments as &$attachvar)
    628. 

  628. 				{
    629. 

  629. 					$post_attachments .= $attachvar;
    630. 

  630. 				}
    631. 

  631. 				
    632. 

  632. 				$post_string_end = "\";\n?>\n";
    633. 

  633. 				
    634. 

  634. 				file_put_contents($post_file, $post_string . $post_attachments . $post_string_end);
    635. 

  635. 				file_put_contents("ssb_db/posts/" . $date . ".post", "post_" . $username . "_" . $date . ".php");
    636. 

  636. 				file_put_contents("ssb_db/posts/reply_" . $username . "_" . $date . ".count", "0");
    637. 

  637. 				echo "Post processed... if redirection fails, <a href=\"?view=$date&user=$username\">Click Here</a><br />";
    638. 

  638. 				header("Location: index.php?view=$date&user=$username");
    639. 

  639. 			}
    640. 

  640. 			else
    641. 

  641. 			{
    642. 

  642. 				echo "ERROR: Missing post data! Select an image to upload or let us know whats up!<br />";
    643. 

  643. 			}		
    644. 

  644. 		}
    645. 

  645. 	}
    646. 

  646. 	
    647. 

  647. 	if($do=="avatarupload")
    648. 

  648. 	{
    649. 

  649. 		if(isset($_FILES["file"]["name"]) && ($loginCheck == true)) {
    650. 

  650. 			$date = date("YmdHis"); // timestamp in year, month, date, hour, minute, and second.
    651. 

  651. 

  652.       		for($i=0; $i<count($_FILES["file"]["name"]); $i++)
    653. 

  653. 			{
    654. 

  654. 				$allowedExts = array("gif", "jpeg", "jpg", "png", "bmp", "ico", "png");
    655. 

  655. 				$temp = explode(".", $_FILES["file"]["name"][$i]);
    656. 

  656.                	$extension = end($temp);
    657. 

  657. 				if ((($_FILES["file"]["type"][$i] == "image/gif")
    658. 

  658. 				|| ($_FILES["file"]["type"][$i] == "image/x-gif")
    659. 

  659. 				|| ($_FILES["file"]["type"][$i] == "image/jpeg")
    660. 

  660. 				|| ($_FILES["file"]["type"][$i] == "image/x-jpeg")
    661. 

  661. 				|| ($_FILES["file"]["type"][$i] == "image/x-jpg")
    662. 

  662. 				|| ($_FILES["file"]["type"][$i] == "image/jpg")
    663. 

  663. 				|| ($_FILES["file"]["type"][$i] == "image/pjpeg")
    664. 

  664. 				|| ($_FILES["file"]["type"][$i] == "image/x-png")
    665. 

  665. 				|| ($_FILES["file"]["type"][$i] == "image/bmp")
    666. 

  666. 				|| ($_FILES["file"]["type"][$i] == "image/x-icon")
    667. 

  667. 				|| ($_FILES["file"]["type"][$i] == "image/png")
    668. 

  668. 				|| ($_FILES["file"]["type"][$i] == ""))
    669. 

  669. 				&& ($_FILES["file"]["size"][$i] < $user_max_upload)
    670. 

  670. 				&& in_array($extension, $allowedExts))
    671. 

  671. 				{
    672. 

  672. 					if ($_FILES["file"]["error"][$i] > 0)
    673. 

  673. 					{
    674. 

  674. 						echo $_FILES["file"]["name"][$i] . " - Return Code: " . $_FILES["file"]["error"][$i] . "<br>";
    675. 

  675. 					}
    676. 

  676. 					else
    677. 

  677. 					{
    678. 

  678. 						if(file_exists("ssb_db/uploads/" . $_FILES["file"]["name"][$i]))
    679. 

  679. 						{
    680. 

  680. 							echo "Error: " . $_FILES["file"]["name"][$i] . " exists.<br>";
    681. 

  681. 						}
    682. 

  682. 						else
    683. 

  683. 						{
    684. 

  684. 							move_uploaded_file($_FILES["file"]["tmp_name"][$i],
    685. 

  685. 							"ssb_db/uploads/" . $username . "_" . $date . "." . $extension);
    686. 

  686. 							$oldcontent = file_get_contents("ssb_db/users/" . $username . ".php");
    687. 

  687. 							file_put_contents("ssb_db/users/" . $username . ".php", $oldcontent . "<?php \$user_avatar = \"" . $username . "_" . $date . "." . $extension . "\"; ?>\n");
    688. 

  688. 							echo "Avatar uploaded and set! <a href='index.php'>Redirecting</a> in 3 seconds...";
    689. 

  689. 							header("refresh: 3;url=index.php");
    690. 

  690. 						}
    691. 

  691. 					}
    692. 

  692. 				} else {
    693. 

  693. 					echo "Error: " . $_FILES["file"]["name"][$i] . " is too large, or is a invalid filetype";
    694. 

  694. 				}
    695. 

  695. 			}
    696. 

  696. 		}
    697. 

  697. 	}
    698. 

  698. 

  699. 	if($do=="reply")
    700. 

  700. 	{
    701. 

  701. 		if ($loginCheck != true) { loginForm(); } else {
    702. 

  702. 			if(!isset($_GET['pid']) or !file_exists("ssb_db/posts/" . $_GET['pid'] . ".post")) { echo "ERROR: Post ID is not set, or invalid"; } else {
    703. 

  703. 				if(isset($_POST['reply']) && isset($username) && $_POST['body']!="")
    704. 

  704. 				{
    705. 

  705. 					$pid = $_GET['pid'];
    706. 

  706. 					$post_file_name = file_get_contents("ssb_db/posts/$pid.post");
    707. 

  707.                     include "ssb_db/posts/" . $post_file_name;
    708. 

  708. 					$srchcont = stripslashes(htmlentities($_POST['body']));
    709. 

  709. 					$srchcont .= " ";
    710. 

  710. 					$checkForUserTag = searchForUserTag($srchcont);
    711. 

  711. 					$taggedUser = substr($checkForUserTag, 1, -1);
    712. 

  712. 					if(file_exists("ssb_db/users/" . $taggedUser . ".name")) {
    713. 

  713. 						if($taggedUser!=$postowner) {
    714. 

  714. 							$tagged_notifications = file_get_contents("ssb_db/friends/" . $taggedUser . ".notifications");
    715. 

  715. 							file_put_contents("ssb_db/friends/" . $taggedUser . ".notifications", "<b>$username</b> <a href='index.php?view=$pid&user=$postowner'>tagged you in a comment</a>\n" . $tagged_notifications);
    716. 

  716. 						}
    717. 

  717. 					}
    718. 

  718. 

  719. 					$replydate = date("m-d-Y h:i:sa"); // time stamp for people to read xD
    720. 

  720. 					$body = nl2br(htmlentities(stripcslashes($_POST['body'])));
    721. 

  721. 					//$username = stripcslashes(htmlentities($username));
    722. 

  722. 					$old_content = file_get_contents("ssb_db/posts/" . $post_file_name);
    723. 

  723. 					$reply_count = file_get_contents("ssb_db/posts/reply_" . $postowner  . "_" . $pid . ".count");
    724. 

  724. 

  725. 					$reply_count = $reply_count+1;
    726. 

  726. 

  727. 					$post_string = "<?php \n\$reply" . $reply_count . " = \"" . $body . "\";\$reply" . $reply_count . "_user = \"" . $username . "\"; \$reply" . $reply_count . "_date = \"" . $replydate . "\";\n?>\n";
    728. 

  728. 					file_put_contents("ssb_db/posts/" . $post_file_name, $old_content . $post_string);
    729. 

  729. 					file_put_contents("ssb_db/posts/reply_" . $postowner . "_" . $pid . ".count", $reply_count);
    730. 

  730. 

  731. 					if($username!=$postowner) {
    732. 

  732. 						$owner_notifications = file_get_contents("ssb_db/friends/" . $postowner . ".notifications");
    733. 

  733. 						file_put_contents("ssb_db/friends/" . $postowner . ".notifications", "<b>$username</b> <a href='index.php?view=$pid&user=$postowner'>replied to your post</a>\n" . $owner_notifications);
    734. 

  734. 					}
    735. 

  735. 

  736. 					echo "If you're seeing this; redirection failed: <a href=\"?view=$pid&user=$postowner\">Click Here</a><br>";
    737. 

  737. 					header("Location:index.php?view=$pid&user=$postowner");
    738. 

  738. 				}
    739. 

  739. 				else
    740. 

  740. 				{
    741. 

  741. 					echo "ERROR: Missing form data<br>";
    742. 

  742. 				}
    743. 

  743. 			}
    744. 

  744. 		}
    745. 

  745. 	}
    746. 

  746. 	
    747. 

  747. 	if($do=="delpost") 
    748. 

  748. 	{
    749. 

  749. 		 if ($loginCheck != true) { loginForm(); } else {
    750. 

  750. 			if(isset($_GET['user']) && $_GET['user']!="" && isset($_GET['pid']) && $_GET['pid']!="") {
    751. 

  751. 				if(file_exists("ssb_db/posts/post_" . stripslashes($_GET['user']) . "_" . stripslashes($_GET['pid']) . ".php") && $username == stripslashes($_GET['user'])) {
    752. 

  752. 					$postuser = $_GET['user'];
    753. 

  753. 					$pid = $_GET['pid'];
    754. 

  754. 					unlink("ssb_db/posts/" . $pid . ".post");
    755. 

  755. 					unlink("ssb_db/posts/post_" . $postuser . "_" . $pid . ".php");
    756. 

  756. 					unlink("ssb_db/posts/reply_" . $postuser . "_" . $pid . ".count");
    757. 

  757. 					flush();
    758. 

  758. 					header("refresh: 0;url=index.php");
    759. 

  759. 					exit;
    760. 

  760. 				} else { echo "ERROR: post doesn't exist or YOU ARE NOT THE OWNER OF SAID POST... THIS incident has been recorded!"; file_put_contents("ssb_db/log.txt", "Post deletion error: IP <" . $_SERVER['REMOTE_ADDR'] . "> post not found or not users post: post_" . $postuser . "_" . $pid . ".php\n"); }
    761. 

  761. 			} else { echo "ERROR: USER and PID variables not set!"; }
    762. 

  762. 		}
    763. 

  763. 	}
    764. 

  764. 	
    765. 

  765. 	if($do=="share") 
    766. 

  766. 	{
    767. 

  767. 		 if ($loginCheck != true) { loginForm(); } else {
    768. 

  768. 			if(isset($_GET['user']) && $_GET['user']!="" && isset($_GET['pid']) && $_GET['pid']!="") {
    769. 

  769. 				if(file_exists("ssb_db/posts/post_" . stripslashes($_GET['user']) . "_" . stripslashes($_GET['pid']) . ".php")) {
    770. 

  770. 					$postuser = stripslashes($_GET['user']);
    771. 

  771. 					$pid = stripslashes($_GET['pid']);
    772. 

  772. 					$date = date("YmdHis"); // timestamp in year, month, date, hour, minute, and second.
    773. 

  773. 					$titledate = date("m-d-Y h:i:sa"); // time stamp for people to read xD
    774. 

  774. 					include("ssb_db/friends/" . $username . ".php");
    775. 

  775. 					include("ssb_db/posts/post_" . $postuser . "_" . $pid . ".php");
    776. 

  776. 					
    777. 

  777. 					if($accttype == "public") {
    778. 

  778. 						$post_file = "ssb_db/posts/post_" . $username . "_" . $date . ".php";
    779. 

  779. 						$post_attachments = "<br />";
    780. 

  780. 						$post_string = "<?php\n\$postowner = \"" . $username . "\";\$postid=\"" . $date . "\";\$postdate=\"" . $titledate . "\";\$shared = \"1\";\$origowner = \"" . $postowner . "\";\$postcontent = \"" . $postcontent;
    781. 

  781. 						$post_string_end = "\";\n?>\n";
    782. 

  782. 						$notification = file_get_contents("ssb_db/friends/" . $postuser . ".notifications");
    783. 

  783. 						file_put_contents("ssb_db/friends/" . $postuser . ".notifications", "<b>$username</b> <a href='index.php?view=$date&user=$username'>shared your post</a>\n" . $notification);
    784. 

  784. 						file_put_contents($post_file, $post_string . $post_attachments . $post_string_end);
    785. 

  785. 						file_put_contents("ssb_db/posts/" . $date . ".post", "post_" . $username . "_" . $date . ".php");
    786. 

  786. 						file_put_contents("ssb_db/posts/reply_" . $username . "_" . $date . ".count", "0");
    787. 

  787. 						flush();
    788. 

  788. 						header("refresh: 0;url=index.php");
    789. 

  789. 						exit;
    790. 

  790. 					} else {
    791. 

  791. 						$friendcount = file_get_contents("ssb_db/friends/" . $username . ".count");
    792. 

  792. 						for($x = 1; $x <= $friendcount; $x++)
    793. 

  793. 						{
    794. 

  794. 							if($postowner == ${"friend" . $x}) {
    795. 

  795. 								$foundfriend = 1;
    796. 

  796. 								$post_file = "ssb_db/posts/post_" . $username . "_" . $date . ".php";
    797. 

  797. 								$post_attachments = "<br />";
    798. 

  798. 								$post_string = "<?php\n\$postowner = \"" . $username . "\";\$postid=\"" . $date . "\";\$postdate=\"" . $titledate . "\";\$shared = \"1\";\$origowner = \"" . $postowner . "\";\$postcontent = \"" . $postcontent;
    799. 

  799. 								$post_string_end = "\";\n?>\n";
    800. 

  800. 								$notification = file_get_contents("ssb_db/friends/" . $postuser . ".notifications");
    801. 

  801. 								file_put_contents("ssb_db/friends/" . $postuser . ".notifications", "<b>$username</b> <a href='index.php?view=$date&user=$username'>shared your post</a>\n" . $notification);
    802. 

  802. 								file_put_contents($post_file, $post_string . $post_attachments . $post_string_end);
    803. 

  803. 								file_put_contents("ssb_db/posts/" . $date . ".post", "post_" . $username . "_" . $date . ".php");
    804. 

  804. 								file_put_contents("ssb_db/posts/reply_" . $username . "_" . $date . ".count", "0");
    805. 

  805. 								flush();
    806. 

  806. 								header("refresh: 0;url=index.php");
    807. 

  807. 								exit;
    808. 

  808. 							}
    809. 

  809. 						}
    810. 

  810. 					}
    811. 

  811. 				} else { echo "ERROR: post doesn't exist or YOU ARE NOT THE OWNER OF SAID POST... THIS incident has been recorded!"; file_put_contents("ssb_db/log.txt", "Post deletion error: IP <" . $_SERVER['REMOTE_ADDR'] . "> post not found or not users post: post_" . $postuser . "_" . $pid . ".php\n"); }
    812. 

  812. 			} else { echo "ERROR: USER and PID variables not set!"; }
    813. 

  813. 		}
    814. 

  814. 	}
    815. 

  815. 	
    816. 

  816. 	if($do=="react") 
    817. 

  817. 	{
    818. 

  818. 		if ($loginCheck != true) { loginForm(); } else {
    819. 

  819. 			if(isset($_GET['user']) && $_GET['user']!="" && isset($_GET['pid']) && $_GET['pid']!="") {
    820. 

  820. 				if(file_exists("ssb_db/posts/post_" . stripslashes($_GET['user']) . "_" . stripslashes($_GET['pid']) . ".php")) {
    821. 

  821. 					$postuser = $_GET['user'];
    822. 

  822. 					$pid = $_GET['pid'];
    823. 

  823. 					$handle = fopen("ssb_db/posts/$pid.reacted", "r");
    824. 

  824. 					
    825. 

  825. 					if ($handle) {
    826. 

  826. 						while (($line = fgets($handle)) !== false) {
    827. 

  827. 							$line = str_replace(array("\n", "\r"), '', $line);
    828. 

  828. 							if($line == $username) {
    829. 

  829. 								echo "You've already reacted to this post... <a href='index.php?view=$pid&user=$postuser'>redirecting</a>";
    830. 

  830. 								header("refresh: 3;url=index.php?view=$pid&user=$postuser");
    831. 

  831. 								exit;
    832. 

  832. 							}
    833. 

  833. 						}
    834. 

  834. 						fclose($handle);
    835. 

  835. 					} else {
    836. 

  836. 						echo "<!-- Haven't reacted, continuing -->";
    837. 

  837. 					}
    838. 

  838. 						
    839. 

  839. 					if(file_exists("ssb_db/posts/$pid.reacted")) {
    840. 

  840. 						$reactedPrev = file_get_contents("ssb_db/posts/$pid.reacted");
    841. 

  841. 						file_put_contents("ssb_db/posts/$pid.reacted", $reactedPrev . $username . "\n"); // You reacted
    842. 

  842. 					} else {
    843. 

  843. 						file_put_contents("ssb_db/posts/$pid.reacted", $username . "\n"); // First react
    844. 

  844. 					}
    845. 

  845. 								
    846. 

  846. 					if(file_exists("ssb_db/posts/$pid.reactcount")) {
    847. 

  847. 						$reactCount = file_get_contents("ssb_db/posts/$pid.reactcount");
    848. 

  848. 						$reactCurrent = $reactCount + 1;
    849. 

  849. 						file_put_contents("ssb_db/posts/$pid.reactcount", $reactCurrent); // You reacted
    850. 

  850. 					} else {
    851. 

  851. 						file_put_contents("ssb_db/posts/$pid.reactcount", "1"); // First react
    852. 

  852. 					}
    853. 

  853. 								
    854. 

  854. 					// Don't send yourself a notification, you know you liked your own post ;)
    855. 

  855. 					if($postuser != $username) {
    856. 

  856. 						$owner_notifications = file_get_contents("ssb_db/friends/" . $postuser . ".notifications");
    857. 

  857. 						file_put_contents("ssb_db/friends/" . $postuser . ".notifications", "<b>$username</b> loved your <a href='index.php?view=$pid&user=$postuser'>post</a>\n" . $owner_notifications);
    858. 

  858. 					}
    859. 

  859. 						
    860. 

  860. 					echo "Reacted! <a href='index.php'>Redirecting</a> in 1 second...";
    861. 

  861. 					header("Location:index.php");
    862. 

  862. 					exit;
    863. 

  863. 				} else { echo "ERROR: post doesn't exist..."; }
    864. 

  864. 			} else { echo "ERROR: USER and PID variables not set!"; }			
    865. 

  865. 		}
    866. 

  866. 	}
    867. 

  867. 	
    868. 

  868. 	if($do=="clrnote") 
    869. 

  869. 	{
    870. 

  870. 		if ($loginCheck != true) { loginForm(); } else {
    871. 

  871. 			unlink("ssb_db/friends/" . $username . ".notifications");
    872. 

  872. 			header("Location: index.php");
    873. 

  873. 			exit;
    874. 

  874. 		} 
    875. 

  875. 	}
    876. 

  876. 	
    877. 

  877. 	if($do=="clrpending") 
    878. 

  878. 	{
    879. 

  879. 		if ($loginCheck != true) { loginForm(); } else {
    880. 

  880. 			unlink("ssb_db/friends/" . $username . ".pending");
    881. 

  881. 			header("Location: index.php?do=friends");
    882. 

  882. 			exit;
    883. 

  883. 		}
    884. 

  884. 	}
    885. 

  885. 

  886. 	// Server admin can just delete ssb_db
    887. 

  887. 	/*if($do=="clean")
    888. 

  888. 	{
    889. 

  889. 		if($_POST['password']!="" && $_POST['password']==$pw)
    890. 

  890. 		{
    891. 

  891. 			$db_content = glob("ssb_db/" . '*', GLOB_MARK);
    892. 

  892. 			foreach($db_content as $file)
    893. 

  893. 			{
    894. 

  894. 				unlink($file);
    895. 

  895. 			}
    896. 

  896. 			rmdir("ssb_db");
    897. 

  897. 			echo "Database Cleaned<br>";
    898. 

  898. 		}
    899. 

  899. 		else
    900. 

  900. 		{
    901. 

  901. 			echo "ERROR: Wrong Password<br>";
    902. 

  902. 		}
    903. 

  903. 	}*/
    904. 

  904. 

  905. 

  906. 	// grab session values and send friend request functions.
    907. 

  907. 	if($do=="sendfr") {
    908. 

  908. 		if ($loginCheck != true) { loginForm(); } else {
    909. 

  909. 			if(isset($_POST['user']) || isset($_GET['user'])) {
    910. 

  910. 				
    911. 

  911. 				//check if user exists first lol
    912. 

  912. 				if(isset($_POST['user'])) { 
    913. 

  913. 					$givenUser = htmlentities(stripcslashes($_POST['user']));
    914. 

  914. 				} else {
    915. 

  915. 					$givenUser = htmlentities(stripcslashes($_GET['user']));
    916. 

  916. 				}
    917. 

  917. 				
    918. 

  918. 				//check if user exists first lol
    919. 

  919. 				if(file_exists("ssb_db/users/" . $givenUser . ".php")) {
    920. 

  920. 					include "ssb_db/users/" . $givenUser . ".php";
    921. 

  921. 

  922. 					if($accttype == "private") {
    923. 

  923. 						sendFriendRequest($_SESSION['ssb-user'], $givenUser);
    924. 

  924. 						echo "Follow request sent to " . $givenUser . " <a href='?do=friends'>redirecting</a> in 3 seconds";
    925. 

  925. 						header("refresh: 3;url=?do=friends");
    926. 

  926. 					} else if($accttype == "public") {
    927. 

  927. 						acceptPublicFriendRequest($username, $givenUser);
    928. 

  928. 						header("Location: ?do=friends");
    929. 

  929. 					} else {
    930. 

  930. 						echo "ERROR: Issues parsing account type...";
    931. 

  931. 					}
    932. 

  932. 				} else {
    933. 

  933. 					echo "Error: Provided username does not exist in the database!";
    934. 

  934. 				}
    935. 

  935. 			} else {
    936. 

  936. 				echo "Error: users not set in GET value...";
    937. 

  937. 			}
    938. 

  938. 		}
    939. 

  939. 	}
    940. 

  940. 

  941. 	if($do=="accfr") 
    942. 

  942. 	{
    943. 

  943. 		if ($loginCheck != true) { loginForm(); } else {
    944. 

  944. 			if(isset($_GET['user']) && isset($_GET['friend'])) {
    945. 

  945. 				acceptFriendRequest(stripslashes($_GET['user']), stripslashes($_GET['friend']));
    946. 

  946. 				echo "Accepted friend request from  " . htmlentities(stripslashes($_GET['friend'])) . " <a href='?do=friends'>redirecting</a> in 3 seconds";
    947. 

  947. 				header("refresh: 3;url=?do=friends");
    948. 

  948. 			} else {
    949. 

  949. 				echo "Error: users not set in GET &amp; SESSION value...";
    950. 

  950. 			}
    951. 

  951. 		}
    952. 

  952. 	}
    953. 

  953. 

  954. 	if($do=="userctrl")
    955. 

  955. 	{
    956. 

  956. 		if ($loginCheck != true) { loginForm(); } else {
    957. 

  957. 			// Beginning of user control panel
    958. 

  958. 			echo "<h3>User control panel</h3>";
    959. 

  959. 			echo "<a class='button' href='?forms=changepass'>Change password</a><br />";
    960. 

  960. 			echo "<a class='button' href='?forms=avatarupload'>Upload avatar</a><br />";
    961. 

  961. 		}
    962. 

  962. 	}
    963. 

  963. 

  964. 	if($do=="changepass")
    965. 

  965. 	{
    966. 

  966. 		if ($loginCheck != true) { loginForm(); } else {
    967. 

  967. 			// Beginning password change
    968. 

  968. 			// inputs
    969. 

  969. 			$oldPassInput = htmlentities(stripslashes($_POST['oldpass']));
    970. 

  970. 			$newPassInput = htmlentities(stripslashes($_POST['password']));
    971. 

  971. 			$passwordAgainInput = htmlentities(stripslashes($_POST['password_again']));
    972. 

  972. 			include "ssb_db/users/" . $username . ".php";
    973. 

  973. 			if(sha1(md5($oldPassInput)) == $user_password) {
    974. 

  974. 				if($newPassInput == $passwordAgainInput) {
    975. 

  975. 					$oldcontent = file_get_contents("ssb_db/users/" . $username . ".php");
    976. 

  976. 					$passString = "<?php \$user_password = \"" . sha1(md5($newPassInput)) . "\"; ?>\n";
    977. 

  977. 					file_put_contents("ssb_db/users/" . $username . ".php", $oldcontent . $passString);
    978. 

  978. 					echo "Password changed, <a href='index.php'>redirecting</a> in 3 seconds";
    979. 

  979. 					$_SESSION['ssb-user'] = null;
    980. 

  980. 					$_SESSION['ssb-pass'] = null;
    981. 

  981. 					header("refresh: 3;url=index.php");
    982. 

  982. 				}
    983. 

  983. 			} else { echo "ERROR: password incorrect! IP recorded for constant monitoring of possible bots!"; file_put_contents("ssb_db/log.txt", "PASS MISMATCH: IP <" . $_SERVER['REMOTE_ADDR'] . "> Cookie spoofing detected from remote client!!!\n"); }
    984. 

  984. 		}
    985. 

  985. 	}
    986. 

  986. 	
    987. 

  987. 	if($do=="privmsg")
    988. 

  988. 	{
    989. 

  989. 		if ($loginCheck != true) { loginForm(); } else {
    990. 

  990. 			
    991. 

  991. 		//check if friend is set
    992. 

  992. 		if(!isset($_GET['friend'])) { echo "ERROR: No username defined!"; exit(1); } else {
    993. 

  993. 		// set friend username
    994. 

  994. 		$friendNick = htmlentities(stripslashes($_GET['friend']));
    995. 

  995. 		
    996. 

  996. 		$friendcount = file_get_contents("ssb_db/friends/" . $username . ".count");
    997. 

  997. 		include "ssb_db/friends/" . $username . ".php";
    998. 

  998. 		for($x = 1; $x <= $friendcount; $x++)
    999. 

  999.         {
    1000. 

  1000. 			if($friendNick == ${"friend" . $x}) {
    1001. 

  1001. 		?>
    1002. 

  1002. <script language="javascript" type="text/javascript">
    1003. 

  1003.     <!--
    1004. 

  1004. 		var httpObject = null;
    1005. 

  1005. 		var link = "";
    1006. 

  1006. 		var timerID = 0;
    1007. 

  1007. 		var friendNick = "<?php echo $friendNick; ?>";
    1008. 

  1008. 		var nickName = "<?php echo $_SESSION['ssb-user']; ?>";
    1009. 

  1009. 		var userColor = "<?php echo $_SESSION['ssb-color'];; ?>";
    1010. 

  1010. 

  1011. 		// Change the value of the outputText field
    1012. 

  1012. 		function setHtml() {
    1013. 

  1013. 			if(ajaxVar.readyState == 4){
    1014. 

  1014. 				var response = ajaxVar.responseText;
    1015. 

  1015. 				var msgBox = document.getElementById("msgs");
    1016. 

  1016. 				msgBox.innerHTML += response;
    1017. 

  1017. 				msgBox.scrollTop = msgBox.scrollHeight;
    1018. 

  1018. 			}
    1019. 

  1019. 		}
    1020. 

  1020. 

  1021. 		// Change the value of the outputText field
    1022. 

  1022. 		function setAll() {
    1023. 

  1023. 			if(ajaxVar.readyState == 4){
    1024. 

  1024. 				var response = ajaxVar.responseText;
    1025. 

  1025. 				var msgBox = document.getElementById("msgs");
    1026. 

  1026. 				msgBox.innerHTML = response;
    1027. 

  1027. 				msgBox.scrollTop = msgBox.scrollHeight;
    1028. 

  1028. 			}
    1029. 

  1029. 		}
    1030. 

  1030. 

  1031. 		// Implement business logic    
    1032. 

  1032. 		function serverWrite() {    
    1033. 

  1033. 			ajaxVar = getHTTPObject();
    1034. 

  1034. 			if (ajaxVar != null) {
    1035. 

  1035. 				link = "chatserver.php?nick="+nickName+"&friend="+friendNick+"&msg="+document.getElementById('msg').value; 
    1036. 

  1036. 				ajaxVar.open("GET", link , true);
    1037. 

  1037. 				ajaxVar.onreadystatechange = setHtml;
    1038. 

  1038. 				ajaxVar.send(null);
    1039. 

  1039. 			}
    1040. 

  1040. 		}
    1041. 

  1041.       
    1042. 

  1042. 		function getInput() {
    1043. 

  1043. 			// Send the server function the input
    1044. 

  1044. 			var userInput = document.getElementById('msg');
    1045. 

  1045. 			serverWrite(userInput.value);
    1046. 

  1046. 			// Clean out the input values
    1047. 

  1047. 			var msgBar = document.getElementById("msg");
    1048. 

  1048. 			msgBar.value = "";
    1049. 

  1049.             msgBar.focus();
    1050. 

  1050. 		}
    1051. 

  1051. 

  1052. 		// Implement business logic    
    1053. 

  1053. 		function serverReload() {    
    1054. 

  1054. 			ajaxVar = getHTTPObject();
    1055. 

  1055. 			//var randomnumber=Math.floor(Math.random()*10000);
    1056. 

  1056. 			if (ajaxVar != null) {
    1057. 

  1057. 				link = "chatserver.php?get=<?php echo $friendNick; ?>";
    1058. 

  1058. 				ajaxVar.open("GET", link , true);
    1059. 

  1059. 				ajaxVar.onreadystatechange = setAll;
    1060. 

  1060. 				ajaxVar.send(null);
    1061. 

  1061. 			}
    1062. 

  1062. 		}
    1063. 

  1063. 	
    1064. 

  1064. 		function UpdateTimer() {
    1065. 

  1065. 			serverReload();   
    1066. 

  1066. 			setTimeout(UpdateTimer, 1000);
    1067. 

  1067. 		}
    1068. 

  1068.     
    1069. 

  1069. 		function keypressed(e) {
    1070. 

  1070. 			if(e.keyCode=='13'){
    1071. 

  1071. 				getInput();
    1072. 

  1072. 			}
    1073. 

  1073. 		}
    1074. 

  1074.     //-->
    1075. 

  1075.     </script> 
    1076. 

  1076. <div class="replycontain">
    1077. 

  1077. 		<?php
    1078. 

  1078. 		
    1079. 

  1079. 		// Header
    1080. 

  1080. 		include "ssb_db/users/" . $friendNick . ".php";
    1081. 

  1081. 		echo "<h3><a href='?userfeed=" . $friendNick . "'>" . $friendNick . ": " . $user_fullname . "</a></h3>";
    1082. 

  1082. 		
    1083. 

  1083. 		?>
    1084. 

  1084. 		<div id="msgs">
    1085. 

  1085. 		<?php 
    1086. 

  1086. 			echo "<div class=\"msgbox\">";
    1087. 

  1087. 			echo "</div>";
    1088. 

  1088. 		?>
    1089. 

  1089. 		</div>
    1090. 

  1090. 		<div id="msgbox" onkeyup="keypressed(event);">
    1091. 

  1091. 			<button onclick="javascript:wrapBBCode('i');">Italic</button>
    1092. 

  1092.      		<button onclick="javascript:wrapBBCode('u');">Underline</button>
    1093. 

  1093.         	<button onclick="javascript:wrapBBCode('b');">Bold</button>
    1094. 

  1094.         	<button onclick="javascript:wrapBBCode('img');">Image</button>
    1095. 

  1095.     		<button onclick="javascript:wrapBBCode('url');">URL</button><br />
    1096. 

  1096. 			<textarea style="width: 98%;" name="msg" id="msg"></textarea>
    1097. 

  1097. 			<button style="width: 50px;" onclick="getInput();">Send</button>
    1098. 

  1098. 		</div>
    1099. 

  1099. 		</div>
    1100. 

  1100. 

  1101. 	<?php
    1102. 

  1102. 		} // Check friend end
    1103. 

  1103. 		} // Check loop end
    1104. 

  1104. 		} // GET friend set end
    1105. 

  1105. 		} // session check end
    1106. 

  1106. 	} // function end
    1107. 

  1107. 	
    1108. 

  1108. 	if($do=="msghist")
    1109. 

  1109. 	{
    1110. 

  1110. 		if ($loginCheck != true) { loginForm(); } else {
    1111. 

  1111. 			
    1112. 

  1112. 		//check if friend is set
    1113. 

  1113. 		if(!isset($_GET['friend'])) { echo "ERROR: No username defined!"; exit(1); } else {
    1114. 

  1114. 		// set friend username
    1115. 

  1115. 		$friendNick = htmlentities(stripslashes($_GET['friend']));
    1116. 

  1116. 		
    1117. 

  1117. 		$friendcount = file_get_contents("ssb_db/friends/" . $username . ".count");
    1118. 

  1118. 		include "ssb_db/friends/" . $username . ".php";
    1119. 

  1119. 		for($x = 1; $x <= $friendcount; $x++)
    1120. 

  1120.         {
    1121. 

  1121. 			if($friendNick == ${"friend" . $x}) {
    1122. 

  1122. 		?>
    1123. 

  1123. <script language="javascript" type="text/javascript">
    1124. 

  1124.     <!--
    1125. 

  1125. 		var httpObject = null;
    1126. 

  1126. 		var link = "chatserver.php?get=<?php echo $friendNick; ?>";
    1127. 

  1127. 		var timerID = 0;
    1128. 

  1128. 		var friendNick = "<?php echo $friendNick; ?>";
    1129. 

  1129. 		var nickName = "<?php echo $_SESSION['ssb-user']; ?>";
    1130. 

  1130. 		var userColor = "<?php echo $_SESSION['ssb-color'];; ?>";
    1131. 

  1131. 

  1132. 		// Change the value of the outputText field
    1133. 

  1133. 		function setAll() {
    1134. 

  1134. 			if(ajaxVar.readyState == 4){
    1135. 

  1135. 				var response = ajaxVar.responseText;
    1136. 

  1136. 				var msgBox = document.getElementById("msgs");
    1137. 

  1137. 				msgBox.innerHTML = response;
    1138. 

  1138. 				msgBox.scrollTop = msgBox.scrollHeight;
    1139. 

  1139. 			}
    1140. 

  1140. 		}
    1141. 

  1141. 		
    1142. 

  1142. 		function serverLoad() {    
    1143. 

  1143. 			ajaxVar = getHTTPObject();
    1144. 

  1144. 			//var randomnumber=Math.floor(Math.random()*10000);
    1145. 

  1145. 			if (ajaxVar != null) {
    1146. 

  1146. 				ajaxVar.open("GET", link , true);
    1147. 

  1147. 				ajaxVar.onreadystatechange = setAll;
    1148. 

  1148. 				ajaxVar.send(null);
    1149. 

  1149. 			}
    1150. 

  1150. 		}
    1151. 

  1151. 		
    1152. 

  1152. 		window.addEventListener('load', function () {
    1153. 

  1153. 			serverLoad();
    1154. 

  1154. 		});
    1155. 

  1155. 

  1156.     //-->
    1157. 

  1157.     </script> 
    1158. 

  1158. <div class="replycontain">
    1159. 

  1159. 		<?php
    1160. 

  1160. 		
    1161. 

  1161. 		// Header
    1162. 

  1162. 		include "ssb_db/users/" . $friendNick . ".php";
    1163. 

  1163. 		echo "<h3><a href='?userfeed=" . $friendNick . "'>" . $friendNick . ": Message history</a></h3>";
    1164. 

  1164. 		
    1165. 

  1165. 		?>
    1166. 

  1166. 		<div id="msgs">
    1167. 

  1167. 		<?php 
    1168. 

  1168. 			echo "<div class=\"msgbox\" style=\"overflow-y: scroll;\">";
    1169. 

  1169. 			echo "</div>";
    1170. 

  1170. 		?>
    1171. 

  1171. 		</div>
    1172. 

  1172. 		</div>
    1173. 

  1173. 

  1174. 	<?php
    1175. 

  1175. 		} // Check friend end
    1176. 

  1176. 		} // Check loop end
    1177. 

  1177. 		} // GET friend set end
    1178. 

  1178. 		} // session check end
    1179. 

  1179. 	} // function end
    1180. 

  1180. 

  1181. 	// Push user avatar to specific avatar image location
    1182. 

  1182. 	if($do=="avatarlocation")
    1183. 

  1183. 	{
    1184. 

  1184. 		if(isset($_GET['user'])) {
    1185. 

  1185. 			$user = htmlentities(stripslashes($_GET['user']));
    1186. 

  1186. 			include "ssb_db/users/" . $user . ".php";
    1187. 

  1187. 			if(file_exists("ssb_db/uploads/" . $user_avatar)) {
    1188. 

  1188. 				echo "Direct to: ssb_db/uploads/" . $user_avatar;
    1189. 

  1189. 				header("Location: ssb_db/uploads/" . $user_avatar . "");
    1190. 

  1190. 				exit;
    1191. 

  1191. 			} else {
    1192. 

  1192. 				echo "Direct to: data/defaultprofile.png";
    1193. 

  1193. 				header("Location: data/defaultprofile.png");
    1194. 

  1194. 				exit;
    1195. 

  1195. 			}
    1196. 

  1196. 		} else {
    1197. 

  1197. 			echo "User is NOT set!";
    1198. 

  1198. 		}
    1199. 

  1199. 	}
    1200. 

  1200. 

  1201. 	if($do=="about")
    1202. 

  1202. 	{
    1203. 

  1203. 		echo "<h2>About</h2>";
    1204. 

  1204. 		echo "<div class='dllink'><a class='button' href='download/secure-space-v1.0.0.apk'>Download for Android!</a></div>";
    1205. 

  1205. 		echo "<p>" . $desc;
    1206. 

  1206. 		echo "<br /><br />";
    1207. 

  1207. 		echo "$ssbtitle statistics: ";
    1208. 

  1208. 		getUserCount(); 
    1209. 

  1209. 		echo "; ";
    1210. 

  1210. 		getPostCount(); 
    1211. 

  1211. 		echo "; ";
    1212. 

  1212. 		getUploadFileCount();
    1213. 

  1213. 		echo "</p>";
    1214. 

  1214. 	}
    1215. 

  1215. 	
    1216. 

  1216. 	if($do=="users")
    1217. 

  1217. 	{
    1218. 

  1218. 		if ($loginCheck != true) { loginForm(); } else {
    1219. 

  1219. 			echo "<h2>Community</h2>";
    1220. 

  1220. 			foreach(array_reverse(glob("ssb_db/users/"."*.name")) as $userfile) {
    1221. 

  1221. 				$userhandle = file_get_contents($userfile);
    1222. 

  1222. 				include "ssb_db/users/" . $userhandle . ".php";
    1223. 

  1223. 				if($accttype == "public") {
    1224. 

  1224. 					echo "<table class='friendslist'><tr><td><div class='avatar_small' style=\"background-image: url('index.php?do=avatarlocation&user=$userhandle');\" title='User Avatar'></td>";
    1225. 

  1225. 					echo "<td><a class='button' href='index.php?userfeed=$userhandle'>$userhandle</a> ~ $user_fullname</td>";
    1226. 

  1226. 					echo "</td></tr></table>";
    1227. 

  1227. 				}
    1228. 

  1228. 			}
    1229. 

  1229. 		}
    1230. 

  1230. 	}
    1231. 

  1231. 

  1232. 	if($do=="friends")
    1233. 

  1233. 	{
    1234. 

  1234. 		if ($loginCheck != true) { loginForm(); } else {
    1235. 

  1235.             // Friends panel
    1236. 

  1236. 			echo "<h3>Friends</h3><a href='?do=users' class='button'>Public users</a> <a class='button' href='?forms=friendreq'>Send friend request</a>";
    1237. 

  1237. 

  1238. 			// Friends list if you have any.
    1239. 

  1239. 			echo "<br />";
    1240. 

  1240. 

  1241. 			$friendc = file_get_contents("ssb_db/friends/" . $username . ".count");
    1242. 

  1242. 			if($friendc == "0")
    1243. 

  1243. 			{
    1244. 

  1244. 				echo "<b style='color:red;'>We're sorry... no friends found on your user account...</b>";
    1245. 

  1245. 			}
    1246. 

  1246. 			else
    1247. 

  1247. 			{
    1248. 

  1248. 				$friendcount = file_get_contents("ssb_db/friends/" . $username . ".count");
    1249. 

  1249. 				include "ssb_db/friends/" . $username . ".php";
    1250. 

  1250. 				echo "<table class='friendslist'>";
    1251. 

  1251. 				for($x = 1; $x <= $friendcount; $x++)
    1252. 

  1252. 				{
    1253. 

  1253. 					if(isset(${"friend" . $x}) && file_exists("ssb_db/users/" . ${"friend" . $x} . ".php")) {
    1254. 

  1254. 						echo "<tr><td><div class='avatar_small' style=\"background-image: url('index.php?do=avatarlocation&user=" . ${"friend" . $x} . "');\" title='User Avatar'></div></td><td><a class='button' href='index.php?userfeed=" . ${"friend" . $x} . "'>" . ${"friend" . $x} . "</a></td><td><a class='button' href='?do=privmsg&friend=" . ${"friend" . $x} . "'>Private message</a>&nbsp;&nbsp;<a href='?do=msghist&friend=" . ${"friend" . $x} . "' class='button'>Message history</a></td></tr>";
    1255. 

  1255. 					}
    1256. 

  1256. 				}
    1257. 

  1257. 				echo "</table>";
    1258. 

  1258. 			}
    1259. 

  1259. 		}
    1260. 

  1260. 	}
    1261. 

  1261. 

  1262. 	if($do=="login")
    1263. 

  1263. 	{
    1264. 

  1264. 		$username = $_POST['username'];
    1265. 

  1265.     	if(file_exists("ssb_db/users/$username.php")) {
    1266. 

  1266. 			include_once("ssb_db/users/$username.php");
    1267. 

  1267. 			if($user_password==sha1(md5($_POST['password']))) {
    1268. 

  1268. 				$pass = $user_password;
    1269. 

  1269. 				$user = $username;
    1270. 

  1270. 				$color = $user_color;
    1271. 

  1271. 				$_SESSION['ssb-user'] = $user;
    1272. 

  1272. 				$_SESSION['ssb-pass'] = $pass;
    1273. 

  1273. 				$_SESSION['ssb-color'] = $color;
    1274. 

  1274. 				header("Location: index.php");
    1275. 

  1275. 			} else {
    1276. 

  1276. 				echo "Wrong password!";
    1277. 

  1277. 			}
    1278. 

  1278. 		} else {
    1279. 

  1279. 			echo "User $username not found!";
    1280. 

  1280. 		}
    1281. 

  1281. 	}
    1282. 

  1282. 	
    1283. 

  1283. 	if($do=="logout")
    1284. 

  1284. 	{
    1285. 

  1285. 		$_SESSION['ssb-user'] = null;
    1286. 

  1286. 		$_SESSION['ssb-pass'] = null;
    1287. 

  1287. 		header("Location: index.php?forms=login");
    1288. 

  1288. 	}
    1289. 

  1289. 

  1290. 	if($do=="register")
    1291. 

  1291. 	{
    1292. 

  1292. 		if($_POST['username']!="" && $_POST['password']!="" && $_POST['password-again']!="" && $_POST['fullname']!="" && isset($_POST['acct'])) {
    1293. 

  1293. 			if($_POST['password']==$_POST['password-again']) {
    1294. 

  1294. 				if(!preg_match('/[^a-z0-9]/i', $_POST['username'])) {
    1295. 

  1295. 					if(!file_exists("ssb_db/users/" . $_POST['username'] . ".php")) {
    1296. 

  1296. 						$colors = array("0000ff", "9900cc", "0080ff", "008000", "ededed");
    1297. 

  1297. 						$acct = $_POST['acct'];
    1298. 

  1298. 						file_put_contents("ssb_db/users/" . stripslashes(htmlentities($_POST['username'])) . ".php", "<?php\n\$accttype = \"" . $acct . "\";\n\$user_password = \"" . sha1(md5($_POST['password'])) . "\";\n \$user_color = \"" . $colors[array_rand($colors)] . "\"; \$user_fullname = \"" . stripslashes(htmlentities($_POST['fullname'])) . "\"; \$user_avatar = \"../../data/defaultprofile.png\"; \n?>");
    1299. 

  1299. 						file_put_contents("ssb_db/users/" . stripslashes(htmlentities($_POST['username'])) . ".name", stripslashes(htmlentities($_POST['username'])));
    1300. 

  1300. 						file_put_contents("ssb_db/users/" . stripslashes(htmlentities($_POST['username'])) . ".postnumber", "0");
    1301. 

  1301. 						file_put_contents("ssb_db/friends/" . stripslashes(htmlentities($_POST['username'])) . ".count", "0");
    1302. 

  1302. 						file_put_contents("ssb_db/friends/" . stripslashes(htmlentities($_POST['username'])) . ".php", "<?php ?>\n");
    1303. 

  1303. 						header("Location: index.php");
    1304. 

  1304. 					} else {
    1305. 

  1305. 						header("Location: index.php?notify=6");
    1306. 

  1306. 					}
    1307. 

  1307. 				} else {
    1308. 

  1308. 					header("Location: index.php?notify=5");
    1309. 

  1309. 				}
    1310. 

  1310. 			} else {
    1311. 

  1311. 				header("Location: index.php?notify=4");
    1312. 

  1312. 			}
    1313. 

  1313. 		} else {
    1314. 

  1314. 			header("Location: index.php?notify=3");
    1315. 

  1315. 		}
    1316. 

  1316. 		echo "<b>ERROR!</b>: Something weird just happened... please try registering again!!!...";
    1317. 

  1317. 		//header("Location: index.php");
    1318. 

  1318. 	}
    1319. 

  1319. }
    1320. 

  1320. else if ($loginCheck != true)
    1321. 

  1321. {
    1322. 

  1322.         loginForm();
    1323. 

  1323. } 
    1324. 

  1324. else
    1325. 

  1325. {
    1326. 

  1326. 	// Watch feed, lets generate pages while we're at it
    1327. 

  1327. 	$pagecall = $_GET['page'];
    1328. 

  1328. 	$postcount = 1;
    1329. 

  1329. 	if(isset($pagecall) && $pagecall!="")
    1330. 

  1330. 	{
    1331. 

  1331. 		if($pagecall == "1")
    1332. 

  1332. 		{
    1333. 

  1333. 			$poststart = $postcount;
    1334. 

  1334. 		}
    1335. 

  1335. 		else
    1336. 

  1336. 		{
    1337. 

  1337. 			$poststart = ($pagecall - 1) * 15; // 15 posts per page
    1338. 

  1338. 		}
    1339. 

  1339. 	}
    1340. 

  1340. 	else
    1341. 

  1341. 	{
    1342. 

  1342. 		$poststart = $postcount;
    1343. 

  1343. 	}
    1344. 

  1344. 	
    1345. 

  1345. 	
    1346. 

  1346. 	
    1347. 

  1347. 	// Lets actually generate some feed now.
    1348. 

  1348. 	foreach(array_reverse(glob("ssb_db/posts/*.post")) as $postfile) {
    1349. 

  1349. 		unset($shared); // make sure its not being carried over after loop.
    1350. 

  1350. 		$postphp = file_get_contents($postfile);
    1351. 

  1351. 		include "ssb_db/posts/$postphp";
    1352. 

  1352. 		$friendcount = file_get_contents("ssb_db/friends/" . $username . ".count");
    1353. 

  1353. 		include "ssb_db/friends/" . $username . ".php";
    1354. 

  1354. 		
    1355. 

  1355. 		for($x = 1; $x <= $friendcount; $x++)
    1356. 

  1356. 		{
    1357. 

  1357. 			if($postowner == ${"friend" . $x}) {
    1358. 

  1358. 				// Found a post, post count goes up!
    1359. 

  1359. 				$postcount++;
    1360. 

  1360. 				
    1361. 

  1361. 				if($poststart == "1" && $postcount < ($poststart + 15)) {
    1362. 

  1362. 					echo "<div class='post'><table><tr><td><div class='avatar_small' style=\"background-image: url('index.php?do=avatarlocation&user=$postowner');\" title='User Avatar'></div></td><td><h3>$postowner<span class='date'>$postdate &nbsp;&nbsp;";
    1363. 

  1363. 					if(file_exists("ssb_db/posts/$postid.reactcount")) {
    1364. 

  1364. 						$reacts = file_get_contents("ssb_db/posts/$postid.reactcount");
    1365. 

  1365. 						echo "<div class='reacts'><i class='fa fa-heart' style='color: red;'></i> $reacts <div class='react-list'>";
    1366. 

  1366. 						// Pull up users who reacted, and generate dropdown list.
    1367. 

  1367. 						$reactlist = fopen("ssb_db/posts/$postid.reacted", "r");
    1368. 

  1368. 						if($reactlist) {
    1369. 

  1369. 							while (($reactor = fgets($reactlist)) !== false) {
    1370. 

  1370. 								echo "<b>$reactor</b>";
    1371. 

  1371. 							}
    1372. 

  1372. 							fclose($reactlist);
    1373. 

  1373. 						}
    1374. 

  1374. 						echo "</div></div>";
    1375. 

  1375. 					}
    1376. 

  1376. 					
    1377. 

  1377. 					if(isset($shared) && $shared == "1")
    1378. 

  1378. 					{
    1379. 

  1379. 						echo "<br />Originally posted by $origowner";
    1380. 

  1380. 					}
    1381. 

  1381. 					
    1382. 

  1382. 					echo "</span></h3></td></tr></table>";
    1383. 

  1383. 					echo "" . bbcode_format($postcontent) . "";
    1384. 

  1384. 					// Footer
    1385. 

  1385. 					echo "<div class='post-footer'>";
    1386. 

  1386. 					echo "<a style='padding-top: 6px;' onclick=\"userReact('" . $postowner . "','" . $postid . "');\" class='button'><i class='fa fa-heart'></i>&nbsp;React</a>";
    1387. 

  1387. 					echo "<a style='padding-top: 6px;' href='index.php?view=$postid&user=$postowner' class='button'><i class='fa fa-comment'></i>&nbsp;Comment</a>";
    1388. 

  1388. 					echo "<a style='padding-top: 6px;' href='index.php?do=share&pid=$postid&user=$postowner' class='button'><i class='fa fa-share'></i>&nbsp;Share</a>";
    1389. 

  1389. 					echo "<br />"; // line break
    1390. 

  1390. 					if(file_exists("ssb_db/posts/reply_" . $postowner . "_" . $postid . ".count")) {
    1391. 

  1391. 						$pcount = file_get_contents("ssb_db/posts/reply_" . $postowner . "_" . $postid . ".count");
    1392. 

  1392. 						// If there's a reply, show them.
    1393. 

  1393. 						if($pcount == 0) {
    1394. 

  1394. 							echo "no replies";
    1395. 

  1395. 						} else if($pcount == 1) {
    1396. 

  1396. 							echo "$pcount reply";
    1397. 

  1397. 						} else if ($pcount > 0) {
    1398. 

  1398. 							echo "$pcount replies";
    1399. 

  1399. 						}
    1400. 

  1400. 					}
    1401. 

  1401. 					
    1402. 

  1402. 					echo " &bull; ";
    1403. 

  1403. 					
    1404. 

  1404. 					// Show reaction count in footer as well.
    1405. 

  1405. 					if(file_exists("ssb_db/posts/" . $postid . ".reactcount")) {
    1406. 

  1406. 						$reactcount = file_get_contents("ssb_db/posts/" . $postid . ".reactcount");
    1407. 

  1407. 						if($reactcount == 1) {
    1408. 

  1408. 							echo "$reactcount reaction";
    1409. 

  1409. 						} else if ($reactcount > 0) {
    1410. 

  1410. 							echo "$reactcount reactions";
    1411. 

  1411. 						}
    1412. 

  1412. 					} else {
    1413. 

  1413. 						echo "no reactions";
    1414. 

  1414. 					}
    1415. 

  1415. 						
    1416. 

  1416. 					echo "</div></div><br />\n";
    1417. 

  1417. 				}
    1418. 

  1418. 				
    1419. 

  1419. 				if($poststart > "1" && $postcount > $poststart && $postcount < ($poststart + 15)) {
    1420. 

  1420. 					echo "<div class='post'><table><tr><td><div class='avatar_small' style=\"background-image: url('index.php?do=avatarlocation&user=$postowner');\" title='User Avatar'></div></td><td><h3>$postowner<span class='date'>$postdate &nbsp;&nbsp;";
    1421. 

  1421. 					if(file_exists("ssb_db/posts/$postid.reactcount")) {
    1422. 

  1422. 						$reacts = file_get_contents("ssb_db/posts/$postid.reactcount");
    1423. 

  1423. 						echo "<div class='reacts'><i class='fa fa-heart' style='color: red;'></i> $reacts <div class='react-list'>";
    1424. 

  1424. 						// Pull up users who reacted, and generate dropdown list.
    1425. 

  1425. 						$reactlist = fopen("ssb_db/posts/$postid.reacted", "r");
    1426. 

  1426. 						if($reactlist) {
    1427. 

  1427. 							while (($reactor = fgets($reactlist)) !== false) {
    1428. 

  1428. 								echo "<b>$reactor</b>";
    1429. 

  1429. 							}
    1430. 

  1430. 							fclose($reactlist);
    1431. 

  1431. 						}
    1432. 

  1432. 						echo "</div></div>";
    1433. 

  1433. 					}
    1434. 

  1434. 					
    1435. 

  1435. 					if(isset($shared) && $shared == "1")
    1436. 

  1436. 					{
    1437. 

  1437. 						echo "<br />Originally posted by $origowner";
    1438. 

  1438. 					}
    1439. 

  1439. 					
    1440. 

  1440. 					echo "</span></h3></td></tr></table>";
    1441. 

  1441. 					echo "" . bbcode_format($postcontent) . "";
    1442. 

  1442. 					// Footer
    1443. 

  1443. 					echo "<div class='post-footer'>";
    1444. 

  1444. 					echo "<a style='padding-top: 6px;' onclick=\"userReact('" . $postowner . "','" . $postid . "');\" class='button'><i class='fa fa-heart'></i>&nbsp;React</a>";
    1445. 

  1445. 					echo "<a style='padding-top: 6px;' href='index.php?view=$postid&user=$postowner' class='button'><i class='fa fa-comment'></i>&nbsp;Comment</a>";
    1446. 

  1446. 					echo "<a style='padding-top: 6px;' href='index.php?do=share&pid=$postid&user=$postowner' class='button'><i class='fa fa-share'></i>&nbsp;Share</a>";
    1447. 

  1447. 					echo "<br />"; // line break
    1448. 

  1448. 					if(file_exists("ssb_db/posts/reply_" . $postowner . "_" . $postid . ".count")) {
    1449. 

  1449. 						$pcount = file_get_contents("ssb_db/posts/reply_" . $postowner . "_" . $postid . ".count");
    1450. 

  1450. 						// If there's a reply, show them.
    1451. 

  1451. 						if($pcount == 0) {
    1452. 

  1452. 							echo "no replies";
    1453. 

  1453. 						} else if($pcount == 1) {
    1454. 

  1454. 							echo "$pcount reply";
    1455. 

  1455. 						} else if ($pcount > 0) {
    1456. 

  1456. 							echo "$pcount replies";
    1457. 

  1457. 						}
    1458. 

  1458. 					}
    1459. 

  1459. 					
    1460. 

  1460. 					echo " &bull; ";
    1461. 

  1461. 					
    1462. 

  1462. 					// Show reaction count in footer as well.
    1463. 

  1463. 					if(file_exists("ssb_db/posts/" . $postid . ".reactcount")) {
    1464. 

  1464. 						$reactcount = file_get_contents("ssb_db/posts/" . $postid . ".reactcount");
    1465. 

  1465. 						if($reactcount == 1) {
    1466. 

  1466. 							echo "$reactcount reaction";
    1467. 

  1467. 						} else if ($reactcount > 0) {
    1468. 

  1468. 							echo "$reactcount reactions";
    1469. 

  1469. 						}
    1470. 

  1470. 					} else {
    1471. 

  1471. 						echo "no reactions";
    1472. 

  1472. 					}
    1473. 

  1473. 						
    1474. 

  1474. 					echo "</div></div><br />\n";
    1475. 

  1475. 				}
    1476. 

  1476. 			}
    1477. 

  1477. 		}
    1478. 

  1478. 

  1479. 		if($postowner == $username)
    1480. 

  1480. 		{
    1481. 

  1481. 			// Found a post, post count goes up!
    1482. 

  1482. 			$postcount++;
    1483. 

  1483. 			
    1484. 

  1484. 			if($poststart == "1" && $postcount < ($poststart + 15)) {
    1485. 

  1485. 				echo "<div class='post'><table><tr><td><div class='avatar_small' style=\"background-image: url('index.php?do=avatarlocation&user=$postowner');\" title='User Avatar'></div></td><td><h3>$postowner<span class='date'>$postdate &nbsp;&nbsp;";
    1486. 

  1486. 				
    1487. 

  1487. 				if(file_exists("ssb_db/posts/$postid.reactcount")) {
    1488. 

  1488. 					$reacts = file_get_contents("ssb_db/posts/$postid.reactcount");
    1489. 

  1489. 					echo "<div class='reacts'><i class='fa fa-heart' style='color: red;'></i> $reacts <div class='react-list'>";
    1490. 

  1490. 					// Pull up users who reacted, and generate dropdown list.
    1491. 

  1491. 					$reactlist = fopen("ssb_db/posts/$postid.reacted", "r");
    1492. 

  1492. 					if($reactlist) {
    1493. 

  1493. 						while (($reactor = fgets($reactlist)) !== false) {
    1494. 

  1494. 							echo "<b>$reactor</b>";
    1495. 

  1495. 						}
    1496. 

  1496. 						fclose($reactlist);
    1497. 

  1497. 					}
    1498. 

  1498. 					echo "</div></div>";
    1499. 

  1499. 				}
    1500. 

  1500. 				
    1501. 

  1501. 				if(isset($shared) && $shared == "1")
    1502. 

  1502. 				{
    1503. 

  1503. 					echo "<br />Originally posted by $origowner";
    1504. 

  1504. 				}
    1505. 

  1505. 				
    1506. 

  1506. 				echo "</span></h3></td></tr></table>";
    1507. 

  1507. 				echo "" . bbcode_format($postcontent) . "";
    1508. 

  1508. 				// Footer
    1509. 

  1509. 				echo "<div class='post-footer'>";
    1510. 

  1510. 				echo "<a style='padding-top: 6px;' onclick=\"userReact('" . $postowner . "','" . $postid . "');\" class='button'><i class='fa fa-heart'></i>&nbsp;React</a>";
    1511. 

  1511. 				echo "<a style='padding-top: 6px;' href='index.php?view=$postid&user=$postowner' class='button'><i class='fa fa-comment'></i>&nbsp;Comment</a>";
    1512. 

  1512. 				echo "<a style='padding-top: 6px;' href='index.php?do=delpost&user=$username&pid=$postid' class='button'><i class='fa fa-trash-o'></i>&nbsp;Delete</a>";
    1513. 

  1513. 				echo "<br />"; // line break
    1514. 

  1514. 				if(file_exists("ssb_db/posts/reply_" . $postowner . "_" . $postid . ".count")) {
    1515. 

  1515. 					$pcount = file_get_contents("ssb_db/posts/reply_" . $postowner . "_" . $postid . ".count");
    1516. 

  1516. 					// If there's a reply, show them.
    1517. 

  1517. 					if($pcount == 0) {
    1518. 

  1518. 						echo "no replies";
    1519. 

  1519. 					} else if($pcount == 1) {
    1520. 

  1520. 						echo "$pcount reply";
    1521. 

  1521. 					} else if ($pcount > 0) {
    1522. 

  1522. 						echo "$pcount replies";
    1523. 

  1523. 					}
    1524. 

  1524. 				}
    1525. 

  1525. 						
    1526. 

  1526. 				echo " &bull; ";
    1527. 

  1527. 					
    1528. 

  1528. 				// Show reaction count in footer as well.
    1529. 

  1529. 				if(file_exists("ssb_db/posts/" . $postid . ".reactcount")) {
    1530. 

  1530. 					$reactcount = file_get_contents("ssb_db/posts/" . $postid . ".reactcount");
    1531. 

  1531. 					if($reactcount == 1) {
    1532. 

  1532. 						echo "$reactcount reaction";
    1533. 

  1533. 					} else if ($reactcount > 0) {
    1534. 

  1534. 						echo "$reactcount reactions";
    1535. 

  1535. 					}
    1536. 

  1536. 				} else {
    1537. 

  1537. 					echo "no reactions";
    1538. 

  1538. 				}
    1539. 

  1539. 						
    1540. 

  1540. 				echo "</div></div><br />\n";
    1541. 

  1541. 			}
    1542. 

  1542. 			
    1543. 

  1543. 			if($poststart > "1" && $postcount > $poststart && $postcount < ($poststart + 15)) {
    1544. 

  1544. 				echo "<div class='post'><table><tr><td><div class='avatar_small' style=\"background-image: url('index.php?do=avatarlocation&user=$postowner');\" title='User Avatar'></div></td><td><h3>$postowner<span class='date'>$postdate &nbsp;&nbsp;";
    1545. 

  1545. 				if(file_exists("ssb_db/posts/$postid.reactcount")) {
    1546. 

  1546. 					$reacts = file_get_contents("ssb_db/posts/$postid.reactcount");
    1547. 

  1547. 					echo "<div class='reacts'><i class='fa fa-heart' style='color: red;'></i> $reacts <div class='react-list'>";
    1548. 

  1548. 					// Pull up users who reacted, and generate dropdown list.
    1549. 

  1549. 					$reactlist = fopen("ssb_db/posts/$postid.reacted", "r");
    1550. 

  1550. 					if($reactlist) {
    1551. 

  1551. 						while (($reactor = fgets($reactlist)) !== false) {
    1552. 

  1552. 							echo "<b>$reactor</b>";
    1553. 

  1553. 						}
    1554. 

  1554. 						fclose($reactlist);
    1555. 

  1555. 					}
    1556. 

  1556. 					echo "</div></div>";
    1557. 

  1557. 				}
    1558. 

  1558. 				echo "</span></h3></td></tr></table>";
    1559. 

  1559. 				echo "" . bbcode_format($postcontent) . "";
    1560. 

  1560. 				// Footer
    1561. 

  1561. 				echo "<div class='post-footer'>";
    1562. 

  1562. 				echo "<a style='padding-top: 6px;' onclick=\"userReact('" . $postowner . "','" . $postid . "');\" class='button'><i class='fa fa-heart'></i>&nbsp;React</a>";
    1563. 

  1563. 				echo "<a style='padding-top: 6px;' href='index.php?view=$postid&user=$postowner' class='button'><i class='fa fa-comment'></i>&nbsp;Comment</a>";
    1564. 

  1564. 				echo "<a style='padding-top: 6px;' href='index.php?do=delpost&user=$username&pid=$postid' class='button'><i class='fa fa-trash-o'></i>&nbsp;Delete</a>";
    1565. 

  1565. 				echo "<br />"; // line break
    1566. 

  1566. 				if(file_exists("ssb_db/posts/reply_" . $postowner . "_" . $postid . ".count")) {
    1567. 

  1567. 					$pcount = file_get_contents("ssb_db/posts/reply_" . $postowner . "_" . $postid . ".count");
    1568. 

  1568. 					// If there's a reply, show them.
    1569. 

  1569. 					if($pcount == 0) {
    1570. 

  1570. 						echo "no replies";
    1571. 

  1571. 					} else if($pcount == 1) {
    1572. 

  1572. 						echo "$pcount reply";
    1573. 

  1573. 					} else if ($pcount > 0) {
    1574. 

  1574. 						echo "$pcount replies";
    1575. 

  1575. 					}
    1576. 

  1576. 				}
    1577. 

  1577. 					
    1578. 

  1578. 				echo " &bull; ";
    1579. 

  1579. 					
    1580. 

  1580. 				// Show reaction count in footer as well.
    1581. 

  1581. 				if(file_exists("ssb_db/posts/" . $postid . ".reactcount")) {
    1582. 

  1582. 					$reactcount = file_get_contents("ssb_db/posts/" . $postid . ".reactcount");
    1583. 

  1583. 					if($reactcount == 1) {
    1584. 

  1584. 						echo "$reactcount reaction";
    1585. 

  1585. 					} else if ($reactcount > 0) {
    1586. 

  1586. 						echo "$reactcount reactions";
    1587. 

  1587. 					}
    1588. 

  1588. 				} else {
    1589. 

  1589. 					echo "no reactions";
    1590. 

  1590. 				}
    1591. 

  1591. 						
    1592. 

  1592. 				echo "</div></div><br />\n";
    1593. 

  1593. 			}
    1594. 

  1594. 		}
    1595. 

  1595. 	}
    1596. 

  1596. 	
    1597. 

  1597. 	
    1598. 

  1598. 	// Page button generation
    1599. 

  1599. 	echo "<div class='page-controls'>";
    1600. 

  1600. 	
    1601. 

  1601. 	if($poststart > "1") {
    1602. 

  1602. 		$prevpage = $poststart / 15;
    1603. 

  1603. 		echo "<a href='index.php?page=$prevpage'><i class='fa fa-arrow-left'></i> &nbsp; Prev page</a>";
    1604. 

  1604. 	}
    1605. 

  1605. 	
    1606. 

  1606. 	echo "&nbsp;&nbsp;&nbsp;";
    1607. 

  1607. 	
    1608. 

  1608. 	if($poststart == "1" && $postcount > ($poststart + 15)) {
    1609. 

  1609. 		echo "<a href='index.php?page=2'>Next page &nbsp; <i class='fa fa-arrow-right'></i></a>";
    1610. 

  1610. 	}
    1611. 

  1611. 	
    1612. 

  1612. 	if($poststart > "1" && $postcount > ($poststart + 15)) {
    1613. 

  1613. 		$nextpage = ($poststart / 15) + 2;
    1614. 

  1614. 		echo "<a href='index.php?page=$nextpage'>Next page &nbsp; <i class='fa fa-arrow-right'></i></a>";
    1615. 

  1615. 	}
    1616. 

  1616. 	
    1617. 

  1617. 	echo "</div>";
    1618. 

  1618. }
    1619. 

  1619. 

  1620. ?>
    1621. 

  1621.     </td></tr></table>
    1622. 

  1622. 	<div id="footer">Powered By SSB <?php echo $version; ?></div>
    1623. 

  1623. </div>
    1624. 

  1624. 

  1625. <!-- functions -->
    1626. 

  1626. <script type="text/javascript" src="data/main.js"></script>
    1627. 

  1627. 

  1628. </body>
    1629. 

  1629. </html>
    1630. 

  1630.