Почетна Преглед Помоћ
Пријавите се
Pentium44
/
SSB
Прати 1
Волим 0
Креирај огранак 0
Датотеке Дискусије 0 Захтеви за спајање 0 Вики
Грана: master
Гране Ознаке
SSB
/
index.php

index.php 60 KB
Пермалинк Историја Датотека

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174117511761177117811791180118111821183118411851186118711881189119011911192119311941195119611971198119912001201120212031204120512061207120812091210121112121213121412151216121712181219122012211222122312241225122612271228122912301231123212331234123512361237123812391240124112421243124412451246124712481249125012511252125312541255125612571258125912601261126212631264126512661267126812691270127112721273127412751276127712781279128012811282128312841285128612871288128912901291129212931294129512961297129812991300130113021303130413051306130713081309131013111312131313141315131613171318131913201321132213231324132513261327132813291330133113321333133413351336133713381339134013411342134313441345134613471348134913501351135213531354135513561357135813591360136113621363136413651366136713681369137013711372137313741375137613771378137913801381138213831384138513861387138813891390139113921393139413951396139713981399140014011402140314041405140614071408140914101411141214131414141514161417141814191420142114221423142414251426142714281429143014311432143314341435143614371438143914401441144214431444144514461447144814491450145114521453145414551456145714581459146014611462146314641465146614671468146914701471147214731474147514761477147814791480148114821483148414851486148714881489149014911492149314941495149614971498149915001501150215031504150515061507150815091510151115121513151415151516151715181519152015211522152315241525152615271528152915301531153215331534153515361537153815391540154115421543154415451546154715481549155015511552155315541555155615571558155915601561156215631564156515661567156815691570157115721573157415751576157715781579158015811582158315841585158615871588158915901591159215931594159515961597159815991600160116021603160416051606160716081609161016111612161316141615161616171618161916201621162216231624162516261627162816291630163116321633163416351636163716381639 
  1. <?php
    2. 

  2. //	SSB - Simple Social Board
    3. 

  3. //	(C) Chris Dorman, 2012 - 2020
    4. 

  4. //	License: CC-BY-NC-SA version 3.0
    5. 

  5. //	http://github.com/Pentium44/SSB
    6. 

  6. 

  7. //// For development debug.
    8. 

  8. //error_reporting(E_ALL); 
    9. 

  9. //ini_set('display_errors', 1);
    10. 

  10. 

  11. session_start();
    12. 

  12. include "config.php";
    13. 

  13. include "functions.php";
    14. 

  14. include "bbcode.php";
    15. 

  15. 

  16. $loginCheck = checkLogin();
    17. 

  17. 

  18. // check if flatfile database location is populated
    19. 

  19. if(!file_exists("ssb_db"))
    20. 

  20. {
    21. 

  21. 	mkdir("ssb_db", 0777);
    22. 

  22. }
    23. 

  23. 

  24. if(!file_exists("ssb_db/users"))
    25. 

  25. {
    26. 

  26. 	mkdir("ssb_db/users", 0777);
    27. 

  27. }
    28. 

  28. 

  29. if(!file_exists("ssb_db/posts"))
    30. 

  30. {
    31. 

  31. 	mkdir("ssb_db/posts", 0777);
    32. 

  32. }
    33. 

  33. 

  34. if(!file_exists("ssb_db/uploads"))
    35. 

  35. {
    36. 

  36. 	mkdir("ssb_db/uploads", 0777);
    37. 

  37. }
    38. 

  38. 

  39. if(!file_exists("ssb_db/friends"))
    40. 

  40. {
    41. 

  41. 	mkdir("ssb_db/friends", 0777);
    42. 

  42. }
    43. 

  43. 

  44. $username = $_SESSION['ssb-user'];
    45. 

  45. //$_SESSION['ssb-topic'] = $ssbtopic;
    46. 

  46. 

  47. 

  48. 

  49. ?>
    50. 

  50. <!DOCTYPE html>
    51. 

  51. <html lang="en-us">
    52. 

  52. <head>
    53. 

  53. <title><?php echo htmlentities(stripslashes($ssbtitle)); ?></title>
    54. 

  54. <?php
    55. 

  55. 

  56. if($_GET['do']!="post" && $_GET['do']!="reply" && $_GET['do']!="react" && $_GET['do']!="avatarupload" && $_GET['do']!="delpost") {
    57. 

  57. 	echo '<meta http-equiv="content-type" content="text/html; charset=utf-8">';
    58. 

  58. }
    59. 

  59. 

  60. ?>
    61. 

  61. <meta name="viewport" content="width=device-width, initial-scale=.55, shrink-to-fit=yes"><meta name="description" content="<?php echo htmlentities($ssbtitle) . " - " . $desc; ?>">
    62. 

  62. <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/css/all.min.css">
    63. 

  63. <link rel="stylesheet" type="text/css" href="style.css">
    64. 

  64. </head>
    65. 

  65. <body <?php if($_GET['do']=="privmsg") { echo "onload=\"UpdateTimer();\""; } ?>>
    66. 

  66. <div class="maincontain">
    67. 

  67.     <div id="navbar" style="width: 99%;">
    68. 

  68.         <?php if(isset($_SESSION['ssb-user']) && isset($_SESSION['ssb-pass'])) { ?>
    69. 

  69.     <div class="dropdown">
    70. 

  70.         <button class="dropbtn"><i class="fa-solid fa-user-group"></i> Account &amp; Posting</button>
    71. 

  71.         <div class="dropdown-content">
    72. 

  72.             <a href="?forms=post" title="Post on your feed!">Make a Post</a>
    73. 

  73.             <a href="index.php">User Feed</a>
    74. 

  74.             <a href="?do=friends">Friends</a>
    75. 

  75.         </div>
    76. 

  76.     </div>
    77. 

  77.     <div class="dropdown" style="float: right;">
    78. 

  78.     <button class="dropbtn"><i class="fa-solid fa-gears"></i> Settings Menu</button>
    79. 

  79.         <div class="dropdown-content" style="right: 0;">
    80. 

  80.             <a href="?userfeed=<?php echo $username; ?>" title="Your profile!">Your Profile</a>
    81. 

  81.             <a href="?do=userctrl">User Panel</a>
    82. 

  82.             <a href="?do=about">About</a>
    83. 

  83.             <a href="?do=logout">Logout</a>
    84. 

  84.         </div>
    85. 

  85.     </div>
    86. 

  86.     <!--<a style="width:50px;" href="?do=users" title="Public users!"></a>-->
    87. 

  87.         <?php } else { ?>
    88. 

  88.     <a href="?forms=login"><i class="fa-solid fa-left-from-bracket"></i></a>
    89. 

  89.     <a href="?do=about"><i class="fa-solid fa-circle-info"></i></a><br />
    90. 

  90.         <?php } ?>
    91. 

  91.     </div>
    92. 

  92. 

  93. <!--<div class="title"><?php echo $ssbtitle; ?></div>-->
    94. 

  94. 

  95. <?php
    96. 

  96. 

  97. if(($loginCheck == true) && $_GET['do']!="avatarlocation" && $_GET['do']!="reply" && $_GET['do']!="post" && $_GET['do']!="react" && $_GET['do']!="delpost") {
    98. 

  98.     // PM notifications
    99. 

  99.     $notifications = "ssb_db/friends/" . $username . ".notifications";
    100. 

  100.     $handle = fopen($notifications, "r");
    101. 

  101. 

  102.     echo "<table class='notifications'><tr><td>Notifications: <a class='button' onclick=\"userClrNotifications();\">Clear</a></td></tr>";
    103. 

  103. 

  104.     if ($handle) {
    105. 

  105.         while (($line = fgets($handle)) !== false) {
    106. 

  106.             echo "<tr><td><i class='fa fa-exclamation' aria-hidden='true'></i> " . $line . "</td></tr>";
    107. 

  107.         }
    108. 

  108.         fclose($handle);
    109. 

  109.     } else {
    110. 

  110.         echo "<tr><td>No notifications</td></tr>";
    111. 

  111.     }
    112. 

  112. 

  113.     echo "</table></td><td class='contain'>";
    114. 

  114. } else {
    115. 

  115.     echo "</td><td class='contain'>";
    116. 

  116. }
    117. 

  117. 

  118. ?>
    119. 

  119. 

  120. <?php
    121. 

  121. 

  122. if(isset($_GET['forms']))
    123. 

  123. {
    124. 

  124. 	$forms = $_GET['forms'];
    125. 

  125. 	$id = $_GET['pid'];
    126. 

  126. 	if($forms=="register") {
    127. 

  127. 		registerForm();
    128. 

  128. 	}
    129. 

  129. 	else if($forms=="login") {
    130. 

  130. 		loginForm();
    131. 

  131. 	}
    132. 

  132. 	else if($forms=="friendreq") {
    133. 

  133. 		if($loginCheck == true) {
    134. 

  134. 			friendReqForm();
    135. 

  135. 		} else {
    136. 

  136. 			loginForm();
    137. 

  137. 		}
    138. 

  138. 	}
    139. 

  139. 	else if($forms=="changepass") {
    140. 

  140. 		if($loginCheck == true) {
    141. 

  141. 			changePassForm();
    142. 

  142. 		} else {
    143. 

  143. 			loginForm();
    144. 

  144. 		}
    145. 

  145. 	}
    146. 

  146. 	else if($forms=="deleteacct") {
    147. 

  147. 		if($loginCheck == true) {
    148. 

  148. 			deleteAcctForm();
    149. 

  149. 		} else {
    150. 

  150. 			loginForm();
    151. 

  151. 		}
    152. 

  152. 	}
    153. 

  153. 	else if($forms=="avatarupload") {
    154. 

  154. 		if($loginCheck == true) {
    155. 

  155. 			uploadAvatarForm();
    156. 

  156. 		} else {
    157. 

  157. 			loginForm();
    158. 

  158. 		}
    159. 

  159. 	}
    160. 

  160. 	else if($forms=="post") {
    161. 

  161. 		if($loginCheck == true) {
    162. 

  162. 			postForm();
    163. 

  163. 		} else {
    164. 

  164. 			loginForm();
    165. 

  165. 		}
    166. 

  166. 	}
    167. 

  167. 	else if($forms=="clean") {
    168. 

  168. 		if($loginCheck == true) {
    169. 

  169. 			cleanForm();
    170. 

  170. 		} else {
    171. 

  171. 			loginForm();
    172. 

  172. 		}
    173. 

  173. 	}
    174. 

  174. 	else { 
    175. 

  175. 		echo "ERROR: Unknown form-name<br>"; 
    176. 

  176. 	}
    177. 

  177. }
    178. 

  178. else if(isset($_GET['notify']))
    179. 

  179. {
    180. 

  180.         $notify = $_GET['notify'];
    181. 

  181.         if($notify=="1") { echo "Error: User not found"; }
    182. 

  182.         else if($notify=="2") { echo "Error: Incorrect password provided"; }
    183. 

  183.         else if($notify=="3") { echo "Error: Please fill out all the text boxes"; }
    184. 

  184.         else if($notify=="4") { echo "Error: The provided passwords did not match"; }
    185. 

  185.         else if($notify=="5") { echo "Error: Special characters cannot be used in your username"; }
    186. 

  186.         else if($notify=="6") { echo "Error: This username is already in use"; }
    187. 

  187.         else if($notify=="7") { echo "Error: Current password incorrect!"; }
    188. 

  188.         else if($notify=="8") { echo "Success! Current password changed!"; }
    189. 

  189.         else { echo "Error: unknown error... this is quite unusual..."; }
    190. 

  190. }
    191. 

  191. else if(isset($_GET['userfeed'])) 
    192. 

  192. {
    193. 

  193. 	$userid = $_GET['userfeed'];
    194. 

  194. 	// Make sure we're friends or is my account.
    195. 

  195. 	include "ssb_db/users/" . $userid . ".php";
    196. 

  196. 	if ($accttype == "private") {
    197. 

  197. 		if ($loginCheck == true) {
    198. 

  198. 			$friendcount = file_get_contents("ssb_db/friends/" . $username . ".count");
    199. 

  199. 			include "ssb_db/friends/" . $username . ".php";
    200. 

  200. 			for($x = 1; $x <= $friendcount; $x++)
    201. 

  201. 			{
    202. 

  202. 

  203. 				// If private, and user is following. Allow
    204. 

  204. 				if($userid == ${"friend" . $x}) {
    205. 

  205. 					echo "<table><tr><td>";
    206. 

  206. 					echo "<div class='avatar' style=\"background-image: url('index.php?do=avatarlocation&user=" . $userid . "');\" title='User Avatar'></div><br />";
    207. 

  207. 					// DONE
    208. 

  208. 					echo "</td><td>";
    209. 

  209. 					echo "<h3>User information</h3>";
    210. 

  210. 					echo "Username: " . $userid . "@" . $domain . "<br />";
    211. 

  211. 					echo "Full name: " . $user_fullname . "<br />";
    212. 

  212. 					echo "<h3>User posts</h3>";
    213. 

  213. 					echo "</td></tr></table>";
    214. 

  214. 				}
    215. 

  215. 			}
    216. 

  216. 

  217. 			// Check if viewing your own profile
    218. 

  218. 			if($userid == $username)
    219. 

  219. 			{
    220. 

  220. 				echo "<table><tr><td>";
    221. 

  221. 				// Get user avatar if set
    222. 

  222.             	echo "<div class='avatar' style=\"background-image: url('index.php?do=avatarlocation&user=" . $userid . "');\" title='User Avatar'></div><br />";
    223. 

  223.              	// DONE
    224. 

  224.               	echo "</td><td>";
    225. 

  225. 				echo "<h3>User information</h3>";
    226. 

  226. 				echo "Username: " . $userid . "@" . $domain . "<br />";
    227. 

  227. 				echo "Full name: " . $user_fullname . "<br />";
    228. 

  228. 				echo "<h3>User posts</h3>";
    229. 

  229. 				echo "</td></tr></table>";
    230. 

  230. 

  231. 			}
    232. 

  232. 

  233. 			// Lets generate the users feed now.
    234. 

  234. 			foreach(array_reverse(glob("ssb_db/posts/post_" . $userid . "_" . "*.php")) as $postfile) {
    235. 

  235. 				//echo $postfile;
    236. 

  236. 				unset($shared); // Keep clean variables
    237. 

  237. 				include $postfile;
    238. 

  238. 				for($x = 1; $x <= $friendcount; $x++)
    239. 

  239. 				{
    240. 

  240. 					if($postowner == ${"friend" . $x}) {
    241. 

  241. 						echo "<div class='post'><table><tr><td><div class='avatar_small' style=\"background-image: url('index.php?do=avatarlocation&user=$postowner');\" title='User Avatar'></div></td><td><h3>$postowner<span class='date'>$postdate &nbsp;&nbsp;";
    242. 

  242. 						if(file_exists("ssb_db/posts/$postid.reactcount")) {
    243. 

  243. 							$reacts = file_get_contents("ssb_db/posts/$postid.reactcount");
    244. 

  244. 							echo "<div class='reacts'><i class='fa fa-heart' style='color: red;'></i> $reacts <div class='react-list'>";
    245. 

  245. 							// Pull up users who reacted, and generate dropdown list.
    246. 

  246. 							$reactlist = fopen("ssb_db/posts/$postid.reacted", "r");
    247. 

  247. 							if($reactlist) {
    248. 

  248. 								while (($reactor = fgets($reactlist)) !== false) {
    249. 

  249. 									echo "<b>$reactor</b>";
    250. 

  250. 								}
    251. 

  251. 								fclose($reactlist);
    252. 

  252. 							}
    253. 

  253. 							echo "</div></div>";
    254. 

  254. 						}
    255. 

  255. 						
    256. 

  256. 						if(isset($shared) && $shared == "1")
    257. 

  257. 						{
    258. 

  258. 							echo "<br />Originally posted by $origowner";
    259. 

  259. 						}
    260. 

  260. 						
    261. 

  261. 						echo "</span></h3></td></tr></table>";
    262. 

  262. 						echo "" . bbcode_format($postcontent) . "";
    263. 

  263. 						
    264. 

  264. 						// Footer
    265. 

  265. 						echo "<div class='post-footer'>";
    266. 

  266. 						echo "<a style='padding-top: 6px;' onclick=\"userReact('" . $postowner . "','" . $postid . "');\" class='button'><i class='fa fa-heart'></i>&nbsp;React</a>";
    267. 

  267. 						echo "<a style='padding-top: 6px;' href='index.php?view=$postid&user=$postowner' class='button'><i class='fa fa-comment'></i>&nbsp;Comment</a>";
    268. 

  268. 						echo "<a style='padding-top: 6px;' href='index.php?do=share&pid=$postid&user=$postowner' class='button'><i class='fa fa-share'></i>&nbsp;Share</a>";
    269. 

  269. 						echo "<br />"; // line break
    270. 

  270. 						if(file_exists("ssb_db/posts/reply_" . $postowner . "_" . $postid . ".count")) {
    271. 

  271. 							$postcount = file_get_contents("ssb_db/posts/reply_" . $postowner . "_" . $postid . ".count");
    272. 

  272. 							// If there's a reply, show them.
    273. 

  273. 							if($postcount == 0) {
    274. 

  274. 								echo "no replies";
    275. 

  275. 							} else if($postcount == 1) {
    276. 

  276. 								echo "$postcount reply";
    277. 

  277. 							} else if ($postcount > 0) {
    278. 

  278. 								echo "$postcount replies";
    279. 

  279. 							}
    280. 

  280. 						}
    281. 

  281. 						
    282. 

  282. 						echo " &bull; ";
    283. 

  283. 						
    284. 

  284. 						// Show reaction count in footer as well.
    285. 

  285. 						if(file_exists("ssb_db/posts/" . $postid . ".reactcount")) {
    286. 

  286. 							$reactcount = file_get_contents("ssb_db/posts/" . $postid . ".reactcount");
    287. 

  287. 							if($reactcount == 1) {
    288. 

  288. 								echo "$reactcount reaction";
    289. 

  289. 							} else if ($reactcount > 0) {
    290. 

  290. 								echo "$reactcount reactions";
    291. 

  291. 							}
    292. 

  292. 						} else {
    293. 

  293. 							echo "no reactions";
    294. 

  294. 						}
    295. 

  295. 						
    296. 

  296. 						echo "</div></div><br />\n";
    297. 

  297. 					}
    298. 

  298. 				}
    299. 

  299. 

  300. 				if($postowner == $username)
    301. 

  301. 				{
    302. 

  302. 					echo "<div class='post'><table><tr><td><div class='avatar_small' style=\"background-image: url('index.php?do=avatarlocation&user=$postowner');\" title='User Avatar'></div></td><td><h3>$postowner<span class='date'>$postdate &nbsp;&nbsp;";
    303. 

  303. 					if(file_exists("ssb_db/posts/$postid.reactcount")) {
    304. 

  304. 						$reacts = file_get_contents("ssb_db/posts/$postid.reactcount");
    305. 

  305. 						echo "<div class='reacts'><i class='fa fa-heart' style='color: red;'></i> $reacts <div class='react-list'>";
    306. 

  306. 						// Pull up users who reacted, and generate dropdown list.
    307. 

  307. 						$reactlist = fopen("ssb_db/posts/$postid.reacted", "r");
    308. 

  308. 						if($reactlist) {
    309. 

  309. 							while (($reactor = fgets($reactlist)) !== false) {
    310. 

  310. 								echo "<b>$reactor</b>";
    311. 

  311. 							}
    312. 

  312. 							fclose($reactlist);
    313. 

  313. 						}
    314. 

  314. 						echo "</div></div>";
    315. 

  315. 					}
    316. 

  316. 					
    317. 

  317. 					if(isset($shared) && $shared == "1")
    318. 

  318. 					{
    319. 

  319. 						echo "<br />Originally posted by $origowner";
    320. 

  320. 					}
    321. 

  321. 					
    322. 

  322. 					echo "</span></h3></td></tr></table>";
    323. 

  323. 					echo "" . bbcode_format($postcontent) . "";
    324. 

  324. 					// Footer
    325. 

  325. 					echo "<div class='post-footer'>";
    326. 

  326. 					echo "<a style='padding-top: 6px;' onclick=\"userReact('" . $postowner . "','" . $postid . "');\" class='button'><i class='fa fa-heart'></i>&nbsp;React</a>";
    327. 

  327. 					echo "<a style='padding-top: 6px;' href='index.php?view=$postid&user=$postowner' class='button'><i class='fa fa-comment'></i>&nbsp;Comment</a>";
    328. 

  328. 					echo "<a style='padding-top: 6px;' href='index.php?do=delpost&user=$username&pid=$postid' class='button'><i class='fa fa-trash-can'></i>&nbsp;Delete</a>";
    329. 

  329. 					echo "<br />"; // line break
    330. 

  330. 					if(file_exists("ssb_db/posts/reply_" . $postowner . "_" . $postid . ".count")) {
    331. 

  331. 						$postcount = file_get_contents("ssb_db/posts/reply_" . $postowner . "_" . $postid . ".count");
    332. 

  332. 						// If there's a reply, show them.
    333. 

  333. 						if($postcount == 0) {
    334. 

  334. 							echo "no replies";
    335. 

  335. 						} else if($postcount == 1) {
    336. 

  336. 							echo "$postcount reply";
    337. 

  337. 						} else if ($postcount > 0) {
    338. 

  338. 							echo "$postcount replies";
    339. 

  339. 						}
    340. 

  340. 					}
    341. 

  341. 					
    342. 

  342. 					echo " &bull; ";
    343. 

  343. 					
    344. 

  344. 					// Show reaction count in footer as well.
    345. 

  345. 					if(file_exists("ssb_db/posts/" . $postid . ".reactcount")) {
    346. 

  346. 						$reactcount = file_get_contents("ssb_db/posts/" . $postid . ".reactcount");
    347. 

  347. 						if($reactcount == 1) {
    348. 

  348. 							echo "$reactcount reaction";
    349. 

  349. 						} else if ($reactcount > 0) {
    350. 

  350. 							echo "$reactcount reactions";
    351. 

  351. 						}
    352. 

  352. 					} else {
    353. 

  353. 						echo "no reactions";
    354. 

  354. 					}
    355. 

  355. 						
    356. 

  356. 					echo "</div></div><br />\n";
    357. 

  357. 				}
    358. 

  358. 			}
    359. 

  359. 			echo "<!-- Gen done...-->";
    360. 

  360. 		}
    361. 

  361. 	}
    362. 

  362. 	else
    363. 

  363. 	{
    364. 

  364. 		echo "<h3>User information</h3>";
    365. 

  365. 		echo "<table><tr><td>";
    366. 

  366. 		echo "<div class='avatar' style=\"background-image: url('index.php?do=avatarlocation&user=$userid');\" title='User Avatar'></div>";
    367. 

  367. 		// DONE
    368. 

  368. 		
    369. 

  369. 		echo "</td><td>";
    370. 

  370. 		// If not friend, allow to send friend request from right here!
    371. 

  371. 		$friend = 0;
    372. 

  372. 		$friendcount = file_get_contents("ssb_db/friends/" . $username . ".count");
    373. 

  373. 		include "ssb_db/friends/" . $username . ".php";
    374. 

  374. 		for($x = 1; $x <= $friendcount; $x++)
    375. 

  375. 		{
    376. 

  376. 			// If private, and user is following. Allow
    377. 

  377. 			if($userid == ${"friend" . $x}) {
    378. 

  378. 				$friend = 1;
    379. 

  379. 			}
    380. 

  380. 		}	
    381. 

  381. 				
    382. 

  382. 		if($friend!=1) {
    383. 

  383. 			echo "<a class='button' href='index.php?do=sendfr&user=$userid'>Send friend request</a><br /><br />";
    384. 

  384. 		}
    385. 

  385.              	
    386. 

  386. 		echo "Username: " . $userid . "@" . $domain . "<br />";
    387. 

  387. 		echo "Full name: " . $user_fullname;
    388. 

  388. 		echo "</td></tr></table>";
    389. 

  389. 

  390. 		foreach(array_reverse(glob("ssb_db/posts/post_" . $userid . "_" . "*.php")) as $postfile) {
    391. 

  391. 			include $postfile;
    392. 

  392. 			unset($shared);
    393. 

  393. 			echo "<div class='post'><table><tr><td><div class='avatar_small' style=\"background-image: url('index.php?do=avatarlocation&user=$postowner');\" title='User Avatar'></div></td><td><h3>$postowner<span class='date'>$postdate &nbsp;&nbsp;";
    394. 

  394. 			if(file_exists("ssb_db/posts/$postid.reactcount")) {
    395. 

  395. 				$reacts = file_get_contents("ssb_db/posts/$postid.reactcount");
    396. 

  396. 				echo "<div class='reacts'><i class='fa fa-heart' style='color: red;'></i> $reacts <div class='react-list'>";
    397. 

  397. 				// Pull up users who reacted, and generate dropdown list.
    398. 

  398. 				$reactlist = fopen("ssb_db/posts/$postid.reacted", "r");
    399. 

  399. 				if($reactlist) {
    400. 

  400. 					while (($reactor = fgets($reactlist)) !== false) {
    401. 

  401. 						echo "<b>$reactor</b>";
    402. 

  402. 					}
    403. 

  403. 					fclose($reactlist);
    404. 

  404. 				}
    405. 

  405. 				echo "</div></div>";
    406. 

  406. 			}
    407. 

  407. 			
    408. 

  408. 			if(isset($shared) && $shared == "1")
    409. 

  409. 			{
    410. 

  410. 				echo "<br />Originally posted by $origowner";
    411. 

  411. 			}
    412. 

  412. 			
    413. 

  413. 			echo "</span></h3></td></tr></table>";
    414. 

  414. 			echo "" . bbcode_format($postcontent) . "";
    415. 

  415. 			// Footer
    416. 

  416. 			echo "<div class='post-footer'>";
    417. 

  417. 			echo "<a style='padding-top: 6px;' onclick=\"userReact('" . $postowner . "','" . $postid . "');\" class='button'><i class='fa fa-heart'></i>&nbsp;React</a>";
    418. 

  418. 			echo "<a style='padding-top: 6px;' href='index.php?view=$postid&user=$postowner' class='button'><i class='fa fa-comment'></i>&nbsp;Comment</a>";
    419. 

  419. 			echo "<a style='padding-top: 6px;' href='index.php?do=share&pid=$postid&user=$postowner' class='button'><i class='fa fa-share'></i>&nbsp;Share</a>";
    420. 

  420. 			echo "<br />"; // line break
    421. 

  421. 			if(file_exists("ssb_db/posts/reply_" . $postowner . "_" . $postid . ".count")) {
    422. 

  422. 				$postcount = file_get_contents("ssb_db/posts/reply_" . $postowner . "_" . $postid . ".count");
    423. 

  423. 				// If there's a reply, show them.
    424. 

  424. 				if($postcount == 0) {
    425. 

  425. 					echo "no replies";
    426. 

  426. 				} else if($postcount == 1) {
    427. 

  427. 					echo "$postcount reply";
    428. 

  428. 				} else if ($postcount > 0) {
    429. 

  429. 					echo "$postcount replies";
    430. 

  430. 				}
    431. 

  431. 			}
    432. 

  432. 					
    433. 

  433. 			echo " &bull; ";
    434. 

  434. 					
    435. 

  435. 			// Show reaction count in footer as well.
    436. 

  436. 			if(file_exists("ssb_db/posts/" . $postid . ".reactcount")) {
    437. 

  437. 				$reactcount = file_get_contents("ssb_db/posts/" . $postid . ".reactcount");
    438. 

  438. 				if($reactcount == 1) {
    439. 

  439. 					echo "$reactcount reaction";
    440. 

  440. 				} else if ($reactcount > 0) {
    441. 

  441. 					echo "$reactcount reactions";
    442. 

  442. 				}
    443. 

  443. 			} else {
    444. 

  444. 				echo "no reactions";
    445. 

  445. 			}
    446. 

  446. 						
    447. 

  447. 			echo "</div></div><br />\n";
    448. 

  448. 		}
    449. 

  449. 				
    450. 

  450. 		echo "<!-- Gen done...-->";
    451. 

  451. 	}
    452. 

  452. }
    453. 

  453. else if(isset($_GET['view']) && isset($_GET['user']))
    454. 

  454. {
    455. 

  455. 	$puser = $_GET['user'];
    456. 

  456. 	$id = $_GET['view'];
    457. 

  457. 	$postc = file_get_contents("ssb_db/posts/reply_" . $puser . "_" . $id . ".count");
    458. 

  458. 	include "ssb_db/posts/post_" . $puser . "_" . $id . ".php";
    459. 

  459. 

  460. 	echo "<div class='post'><table><tr><td><div class='avatar_small' style=\"background-image: url('index.php?do=avatarlocation&user=$postowner');\" title='User Avatar'></div></td><td><h3>$postowner<span class='date'>$postdate &nbsp;&nbsp;";
    461. 

  461. 	if(file_exists("ssb_db/posts/$postid.reactcount")) {
    462. 

  462. 		$reacts = file_get_contents("ssb_db/posts/$postid.reactcount");
    463. 

  463. 		echo "<div class='reacts'><i class='fa fa-heart' style='color: red;'></i> $reacts <div class='react-list'>";
    464. 

  464. 		// Pull up users who reacted, and generate dropdown list.
    465. 

  465. 		$reactlist = fopen("ssb_db/posts/$postid.reacted", "r");
    466. 

  466. 		if($reactlist) {
    467. 

  467. 			while (($reactor = fgets($reactlist)) !== false) {
    468. 

  468. 				echo "<b>$reactor</b>";
    469. 

  469. 			}
    470. 

  470. 			fclose($reactlist);
    471. 

  471. 		}
    472. 

  472. 		echo "</div></div>";
    473. 

  473. 	}
    474. 

  474. 

  475. 	if(isset($shared) && $shared == "1")
    476. 

  476. 	{
    477. 

  477. 		echo "<br />Originally posted by $origowner";
    478. 

  478. 	}
    479. 

  479. 

  480. 	echo "</span></h3></td></tr></table>";
    481. 

  481. 	echo "" . bbcode_format($postcontent) . "";
    482. 

  482. 	// Footer
    483. 

  483. 	
    484. 

  484. 	echo "<a style='padding-top: 6px;' onclick=\"userReact('" . $postowner . "','" . $postid . "');\" class='button'><i class='fa fa-heart'></i>&nbsp;React</a>";
    485. 

  485. 	echo "<a style='padding-top: 6px;' href='index.php?do=share&pid=$postid&user=$postowner' class='button'><i class='fa fa-share'></i>&nbsp;Share</a>";
    486. 

  486. 	
    487. 

  487. 	echo "</div><br />\n";
    488. 

  488. 

  489. 	for($x = 1; $x <= $postc; $x++) {
    490. 

  490. 		$reply_content = ${"reply" . $x};
    491. 

  491. 		$reply_user = ${"reply" . $x . "_user"};
    492. 

  492. 		$reply_date = ${"reply" . $x . "_date"};
    493. 

  493. 		
    494. 

  494. 		echo "<div class='reply'>";
    495. 

  495. 		echo "<table><tr><td><div class='avatar_small' style='background-image: url(\"index.php?do=avatarlocation&user=$reply_user\");' title='User Avatar'></div></td><td><h4>$reply_user <a onclick=\"userTag('$reply_user');\"><i class='fa fa-tag'></i></a> <span class=\"date\">$reply_date</span></h4></td></tr></table>";
    496. 

  496. 		echo "<div class='reply_content'>" . bbcode_format($reply_content) . "</div>";
    497. 

  497. 		echo "</div>\n";
    498. 

  498. 	}
    499. 

  499. 

  500. 	echo "<br />";
    501. 

  501. 

  502. 	if ($loginCheck != true) { 
    503. 

  503. 		echo "Login to reply...";
    504. 

  504. 	} else {
    505. 

  505. 		$friendcount = file_get_contents("ssb_db/friends/" . $username . ".count");
    506. 

  506.                 include "ssb_db/friends/" . $username . ".php";
    507. 

  507.                 for($x = 1; $x <= $friendcount; $x++)
    508. 

  508. 	        {
    509. 

  509.                         if($puser == ${"friend" . $x}) {
    510. 

  510. 				$z = "1";
    511. 

  511. 				replyForm($id, $puser);
    512. 

  512. 			}
    513. 

  513. 		}
    514. 

  514. 

  515. 		// Its you dummy
    516. 

  516. 		if($puser == $username) {
    517. 

  517.                  	$z = "1";
    518. 

  518.                       	replyForm($id, $puser);
    519. 

  519.            	}
    520. 

  520. 

  521. 

  522. 		if(!isset($z))
    523. 

  523. 		{
    524. 

  524. 			echo "Not following! Follow to reply...<br />";
    525. 

  525. 		}
    526. 

  526. 	}
    527. 

  527. }
    528. 

  528. else if(isset($_GET['do']))
    529. 

  529. {
    530. 

  530. 	$do = $_GET['do'];
    531. 

  531. 	if($do=="post")
    532. 

  532. 	{
    533. 

  533. 		if ($loginCheck != true) { loginForm(); } else {
    534. 

  534. 			$date = date("YmdHis"); // timestamp in year, month, date, hour, minute, and second.
    535. 

  535.   			$titledate = date("m-d-Y h:i:sa"); // time stamp for people to read xD
    536. 

  536. 

  537. 			if(isset($_FILES["file"]["name"]) && isset($username)) {
    538. 

  538. 				
    539. 

  539. 				$uploaded = array(); // empty array for upload file names
    540. 

  540. 				$uploaded_name = array(); // empty array for upload names
    541. 

  541. 				// File selected, upload!
    542. 

  542. 				for($i=0; $i<count($_FILES["file"]["name"]); $i++)
    543. 

  543. 				{
    544. 

  544. 					$allowedExts = array("gif", "jpeg", "jpg", "png", "bmp", "ico", "GIF", "JPEG", "JPG", "PNG", "BMP", "ICO", "mp4", "MP4");
    545. 

  545. 					$temp = explode(".", $_FILES["file"]["name"][$i]);
    546. 

  546. 					$extension = end($temp);
    547. 

  547. 					if ((($_FILES["file"]["type"][$i] == "image/gif")
    548. 

  548. 					|| ($_FILES["file"]["type"][$i] == "image/x-gif")
    549. 

  549. 					|| ($_FILES["file"]["type"][$i] == "image/jpeg")
    550. 

  550. 					|| ($_FILES["file"]["type"][$i] == "image/x-jpeg")
    551. 

  551. 					|| ($_FILES["file"]["type"][$i] == "image/x-jpg")
    552. 

  552. 					|| ($_FILES["file"]["type"][$i] == "image/jpg")
    553. 

  553. 					|| ($_FILES["file"]["type"][$i] == "image/pjpeg")
    554. 

  554. 					|| ($_FILES["file"]["type"][$i] == "image/x-png")
    555. 

  555. 					|| ($_FILES["file"]["type"][$i] == "image/bmp")
    556. 

  556. 					|| ($_FILES["file"]["type"][$i] == "image/x-icon")
    557. 

  557. 					|| ($_FILES["file"]["type"][$i] == "application/octet-stream")
    558. 

  558. 					|| ($_FILES["file"]["type"][$i] == "video/mp4")
    559. 

  559. //					|| ($_FILES["file"]["type"][$i] == "video/ogg")
    560. 

  560. //					|| ($_FILES["file"]["type"][$i] == "video/webm")
    561. 

  561. //					|| ($_FILES["file"]["type"][$i] == "video/x-flv")
    562. 

  562. //					|| ($_FILES["file"]["type"][$i] == "video/mp4v-es")
    563. 

  563. 					|| ($_FILES["file"]["type"][$i] == "image/png")
    564. 

  564. 					|| ($_FILES["file"]["type"][$i] == ""))
    565. 

  565. 					&& ($_FILES["file"]["size"][$i] < $user_max_upload)
    566. 

  566. 					&& in_array($extension, $allowedExts))
    567. 

  567. 					{
    568. 

  568. 						
    569. 

  569. 						if ($_FILES["file"]["error"][$i] > 0)
    570. 

  570. 						{
    571. 

  571. 							echo $_FILES["file"]["name"][$i] . " - Return Code: " . $_FILES["file"]["error"][$i] . "<br />";
    572. 

  572. 						}
    573. 

  573. 						else
    574. 

  574. 						{
    575. 

  575. 							if(file_exists("ssb_db/uploads/" . $_FILES["file"]["name"][$i]))
    576. 

  576. 							{
    577. 

  577. 								echo "Error: " . $_FILES["file"]["name"][$i] . " exists.<br />";
    578. 

  578. 							}
    579. 

  579. 							else
    580. 

  580. 							{
    581. 

  581. 								$randstring = getRandString("32");
    582. 

  582. 								move_uploaded_file($_FILES["file"]["tmp_name"][$i],
    583. 

  583. 								"ssb_db/uploads/" . $randstring . "." . $extension);
    584. 

  584. 								array_push($uploaded, $randstring . "." . $extension);
    585. 

  585. 								array_push($uploaded_name, pathinfo($_FILES["file"]["name"][$i], PATHINFO_FILENAME));
    586. 

  586. 								echo "Success: " . $_FILES["file"]["name"][$i] . " (" . tomb($_FILES["file"]["size"][$i]) . ") uploaded...<br />";
    587. 

  587. 								//rename("ssb_db/uploads/" . $FILES["file"]["name"][$i], "ssb_db/uploads/" . $username . "_" . $date . $extension);
    588. 

  588. 							}
    589. 

  589. 						}
    590. 

  590. 					}
    591. 

  591. 					else
    592. 

  592. 					{
    593. 

  593. 						// Check if there was actually an issue
    594. 

  594. 						if($_FILES["file"]["size"] == "0") {
    595. 

  595. 							echo "Error: " . $_FILES["file"]["name"][$i] . " is too large, or is a invalid filetype";
    596. 

  596. 						}
    597. 

  597. 					}
    598. 

  598. 				} // end of for loop
    599. 

  599. 		
    600. 

  600. 				$srchcont = stripslashes(htmlentities($_POST['body']));
    601. 

  601. 				$srchcont .= " "; // doesn't find tag if there's not a fucking whitespace
    602. 

  602. 				$checkForUserTag = searchForUserTag($srchcont);
    603. 

  603. 				$taggedUser = substr($checkForUserTag, 1, -1);
    604. 

  604. 				if(file_exists("ssb_db/users/" . $taggedUser . ".name")) {
    605. 

  605. 					if($taggedUser!=$postowner) {
    606. 

  606. 						$tagged_notifications = file_get_contents("ssb_db/friends/" . $taggedUser . ".notifications");
    607. 

  607. 						file_put_contents("ssb_db/friends/" . $taggedUser . ".notifications", "<b>$username</b> <a href='index.php?view=$date&user=$username'>tagged you in a post</a>\n" . $tagged_notifications);
    608. 

  608. 					}
    609. 

  609. 				}
    610. 

  610. 

  611. 				$body = nl2br(htmlentities(stripcslashes($_POST['body'])));
    612. 

  612. 				//$username = stripcslashes(htmlentities($username));
    613. 

  613. 				include "ssb_db/users/" . $username . ".php";
    614. 

  614. 				$post_file = "ssb_db/posts/post_" . $username . "_" . $date . ".php";
    615. 

  615. 				$post_attachments = "<br />";
    616. 

  616. 				$post_string = "<?php\n\$postowner = \"" . $username . "\";\$postid=\"" . $date . "\";\$postdate=\"" . $titledate . "\";\$postcontent = \"" . $body . "<br />";
    617. 

  617. 					
    618. 

  618. 				$attachments = array();
    619. 

  619. 				$fileCount = 0;
    620. 

  620. 				foreach($uploaded as &$upload)
    621. 

  621. 				{
    622. 

  622. 					if(file_exists("ssb_db/uploads/" . $upload)) {
    623. 

  623. 						$ext = pathinfo("ssb_db/uploads/ . $upload", PATHINFO_EXTENSION);
    624. 

  624. 						if($ext == "mp4" || $ext == "MP4") {
    625. 

  625. 							array_push($attachments, "<div class='attachment'>" . $uploaded_name[$fileCount] . "<video width='560' height='315' controls><source src='ssb_db/uploads/$upload' type='video/mp4'>HTML5 video not supported :(</video></div>");
    626. 

  626. 						}
    627. 

  627. 						else
    628. 

  628. 						{
    629. 

  629. 							array_push($attachments, "<div class='attachment'><a href='ssb_db/uploads/" . $upload . "'><img src='ssb_db/uploads/" . $upload . "'></a></div>");
    630. 

  630. 						}
    631. 

  631. 					}
    632. 

  632. 					
    633. 

  633. 					$fileCount++; // Add it up
    634. 

  634. 				}
    635. 

  635. 				
    636. 

  636. 				foreach($attachments as &$attachvar)
    637. 

  637. 				{
    638. 

  638. 					$post_attachments .= $attachvar;
    639. 

  639. 				}
    640. 

  640. 				
    641. 

  641. 				$post_string_end = "\";\n?>\n";
    642. 

  642. 				
    643. 

  643. 				file_put_contents($post_file, $post_string . $post_attachments . $post_string_end);
    644. 

  644. 				file_put_contents("ssb_db/posts/" . $date . ".post", "post_" . $username . "_" . $date . ".php");
    645. 

  645. 				file_put_contents("ssb_db/posts/reply_" . $username . "_" . $date . ".count", "0");
    646. 

  646. 				echo "Post processed... if redirection fails, <a href=\"?view=$date&user=$username\">Click Here</a><br />";
    647. 

  647. 				header("Location: index.php?view=$date&user=$username");
    648. 

  648. 			}
    649. 

  649. 			else
    650. 

  650. 			{
    651. 

  651. 				echo "ERROR: Missing post data! Select an image to upload or let us know whats up!<br />";
    652. 

  652. 			}		
    653. 

  653. 		}
    654. 

  654. 	}
    655. 

  655. 	
    656. 

  656. 	if($do=="avatarupload")
    657. 

  657. 	{
    658. 

  658. 		if(isset($_FILES["file"]["name"]) && ($loginCheck == true)) {
    659. 

  659. 			$date = date("YmdHis"); // timestamp in year, month, date, hour, minute, and second.
    660. 

  660. 

  661.       		for($i=0; $i<count($_FILES["file"]["name"]); $i++)
    662. 

  662. 			{
    663. 

  663. 				$allowedExts = array("gif", "jpeg", "jpg", "png", "bmp", "ico", "png");
    664. 

  664. 				$temp = explode(".", $_FILES["file"]["name"][$i]);
    665. 

  665.                	$extension = end($temp);
    666. 

  666. 				if ((($_FILES["file"]["type"][$i] == "image/gif")
    667. 

  667. 				|| ($_FILES["file"]["type"][$i] == "image/x-gif")
    668. 

  668. 				|| ($_FILES["file"]["type"][$i] == "image/jpeg")
    669. 

  669. 				|| ($_FILES["file"]["type"][$i] == "image/x-jpeg")
    670. 

  670. 				|| ($_FILES["file"]["type"][$i] == "image/x-jpg")
    671. 

  671. 				|| ($_FILES["file"]["type"][$i] == "image/jpg")
    672. 

  672. 				|| ($_FILES["file"]["type"][$i] == "image/pjpeg")
    673. 

  673. 				|| ($_FILES["file"]["type"][$i] == "image/x-png")
    674. 

  674. 				|| ($_FILES["file"]["type"][$i] == "image/bmp")
    675. 

  675. 				|| ($_FILES["file"]["type"][$i] == "image/x-icon")
    676. 

  676. 				|| ($_FILES["file"]["type"][$i] == "image/png")
    677. 

  677. 				|| ($_FILES["file"]["type"][$i] == ""))
    678. 

  678. 				&& ($_FILES["file"]["size"][$i] < $user_max_upload)
    679. 

  679. 				&& in_array($extension, $allowedExts))
    680. 

  680. 				{
    681. 

  681. 					if ($_FILES["file"]["error"][$i] > 0)
    682. 

  682. 					{
    683. 

  683. 						echo $_FILES["file"]["name"][$i] . " - Return Code: " . $_FILES["file"]["error"][$i] . "<br>";
    684. 

  684. 					}
    685. 

  685. 					else
    686. 

  686. 					{
    687. 

  687. 						if(file_exists("ssb_db/uploads/" . $_FILES["file"]["name"][$i]))
    688. 

  688. 						{
    689. 

  689. 							echo "Error: " . $_FILES["file"]["name"][$i] . " exists.<br>";
    690. 

  690. 						}
    691. 

  691. 						else
    692. 

  692. 						{
    693. 

  693. 							move_uploaded_file($_FILES["file"]["tmp_name"][$i],
    694. 

  694. 							"ssb_db/uploads/" . $username . "_" . $date . "." . $extension);
    695. 

  695. 							$oldcontent = file_get_contents("ssb_db/users/" . $username . ".php");
    696. 

  696. 							file_put_contents("ssb_db/users/" . $username . ".php", $oldcontent . "<?php \$user_avatar = \"" . $username . "_" . $date . "." . $extension . "\"; ?>\n");
    697. 

  697. 							echo "Avatar uploaded and set! <a href='index.php'>Redirecting</a> in 3 seconds...";
    698. 

  698. 							header("refresh: 3;url=index.php");
    699. 

  699. 						}
    700. 

  700. 					}
    701. 

  701. 				} else {
    702. 

  702. 					echo "Error: " . $_FILES["file"]["name"][$i] . " is too large, or is a invalid filetype";
    703. 

  703. 				}
    704. 

  704. 			}
    705. 

  705. 		}
    706. 

  706. 	}
    707. 

  707. 

  708. 	if($do=="reply")
    709. 

  709. 	{
    710. 

  710. 		if ($loginCheck != true) { loginForm(); } else {
    711. 

  711. 			if(!isset($_GET['pid']) or !file_exists("ssb_db/posts/" . $_GET['pid'] . ".post")) { echo "ERROR: Post ID is not set, or invalid"; } else {
    712. 

  712. 				if(isset($_POST['reply']) && isset($username) && $_POST['body']!="")
    713. 

  713. 				{
    714. 

  714. 					$pid = $_GET['pid'];
    715. 

  715. 					$post_file_name = file_get_contents("ssb_db/posts/$pid.post");
    716. 

  716.                     include "ssb_db/posts/" . $post_file_name;
    717. 

  717. 					$srchcont = stripslashes(htmlentities($_POST['body']));
    718. 

  718. 					$srchcont .= " ";
    719. 

  719. 					$checkForUserTag = searchForUserTag($srchcont);
    720. 

  720. 					$taggedUser = substr($checkForUserTag, 1, -1);
    721. 

  721. 					if(file_exists("ssb_db/users/" . $taggedUser . ".name")) {
    722. 

  722. 						if($taggedUser!=$postowner) {
    723. 

  723. 							$tagged_notifications = file_get_contents("ssb_db/friends/" . $taggedUser . ".notifications");
    724. 

  724. 							file_put_contents("ssb_db/friends/" . $taggedUser . ".notifications", "<b>$username</b> <a href='index.php?view=$pid&user=$postowner'>tagged you in a comment</a>\n" . $tagged_notifications);
    725. 

  725. 						}
    726. 

  726. 					}
    727. 

  727. 

  728. 					$replydate = date("m-d-Y h:i:sa"); // time stamp for people to read xD
    729. 

  729. 					$body = nl2br(htmlentities(stripcslashes($_POST['body'])));
    730. 

  730. 					//$username = stripcslashes(htmlentities($username));
    731. 

  731. 					$old_content = file_get_contents("ssb_db/posts/" . $post_file_name);
    732. 

  732. 					$reply_count = file_get_contents("ssb_db/posts/reply_" . $postowner  . "_" . $pid . ".count");
    733. 

  733. 

  734. 					$reply_count = $reply_count+1;
    735. 

  735. 

  736. 					$post_string = "<?php \n\$reply" . $reply_count . " = \"" . $body . "\";\$reply" . $reply_count . "_user = \"" . $username . "\"; \$reply" . $reply_count . "_date = \"" . $replydate . "\";\n?>\n";
    737. 

  737. 					file_put_contents("ssb_db/posts/" . $post_file_name, $old_content . $post_string);
    738. 

  738. 					file_put_contents("ssb_db/posts/reply_" . $postowner . "_" . $pid . ".count", $reply_count);
    739. 

  739. 

  740. 					if($username!=$postowner) {
    741. 

  741. 						$owner_notifications = file_get_contents("ssb_db/friends/" . $postowner . ".notifications");
    742. 

  742. 						file_put_contents("ssb_db/friends/" . $postowner . ".notifications", "<b>$username</b> <a href='index.php?view=$pid&user=$postowner'>replied to your post</a>\n" . $owner_notifications);
    743. 

  743. 					}
    744. 

  744. 

  745. 					echo "If you're seeing this; redirection failed: <a href=\"?view=$pid&user=$postowner\">Click Here</a><br>";
    746. 

  746. 					header("Location:index.php?view=$pid&user=$postowner");
    747. 

  747. 				}
    748. 

  748. 				else
    749. 

  749. 				{
    750. 

  750. 					echo "ERROR: Missing form data<br>";
    751. 

  751. 				}
    752. 

  752. 			}
    753. 

  753. 		}
    754. 

  754. 	}
    755. 

  755. 	
    756. 

  756. 	if($do=="delpost") 
    757. 

  757. 	{
    758. 

  758. 		 if ($loginCheck != true) { loginForm(); } else {
    759. 

  759. 			if(isset($_GET['user']) && $_GET['user']!="" && isset($_GET['pid']) && $_GET['pid']!="") {
    760. 

  760. 				if(file_exists("ssb_db/posts/post_" . stripslashes($_GET['user']) . "_" . stripslashes($_GET['pid']) . ".php") && $username == stripslashes($_GET['user'])) {
    761. 

  761. 					$postuser = $_GET['user'];
    762. 

  762. 					$pid = $_GET['pid'];
    763. 

  763. 					unlink("ssb_db/posts/" . $pid . ".post");
    764. 

  764. 					unlink("ssb_db/posts/post_" . $postuser . "_" . $pid . ".php");
    765. 

  765. 					unlink("ssb_db/posts/reply_" . $postuser . "_" . $pid . ".count");
    766. 

  766. 					flush();
    767. 

  767. 					header("refresh: 0;url=index.php");
    768. 

  768. 					exit;
    769. 

  769. 				} else { echo "ERROR: post doesn't exist or YOU ARE NOT THE OWNER OF SAID POST... THIS incident has been recorded!"; file_put_contents("ssb_db/log.txt", "Post deletion error: IP <" . $_SERVER['REMOTE_ADDR'] . "> post not found or not users post: post_" . $postuser . "_" . $pid . ".php\n"); }
    770. 

  770. 			} else { echo "ERROR: USER and PID variables not set!"; }
    771. 

  771. 		}
    772. 

  772. 	}
    773. 

  773. 	
    774. 

  774. 	if($do=="share") 
    775. 

  775. 	{
    776. 

  776. 		 if ($loginCheck != true) { loginForm(); } else {
    777. 

  777. 			if(isset($_GET['user']) && $_GET['user']!="" && isset($_GET['pid']) && $_GET['pid']!="") {
    778. 

  778. 				if(file_exists("ssb_db/posts/post_" . stripslashes($_GET['user']) . "_" . stripslashes($_GET['pid']) . ".php")) {
    779. 

  779. 					$postuser = stripslashes($_GET['user']);
    780. 

  780. 					$pid = stripslashes($_GET['pid']);
    781. 

  781. 					$date = date("YmdHis"); // timestamp in year, month, date, hour, minute, and second.
    782. 

  782. 					$titledate = date("m-d-Y h:i:sa"); // time stamp for people to read xD
    783. 

  783. 					include("ssb_db/friends/" . $username . ".php");
    784. 

  784. 					include("ssb_db/posts/post_" . $postuser . "_" . $pid . ".php");
    785. 

  785. 					
    786. 

  786. 					if($accttype == "public") {
    787. 

  787. 						$post_file = "ssb_db/posts/post_" . $username . "_" . $date . ".php";
    788. 

  788. 						$post_attachments = "<br />";
    789. 

  789. 						$post_string = "<?php\n\$postowner = \"" . $username . "\";\$postid=\"" . $date . "\";\$postdate=\"" . $titledate . "\";\$shared = \"1\";\$origowner = \"" . $postowner . "\";\$postcontent = \"" . $postcontent;
    790. 

  790. 						$post_string_end = "\";\n?>\n";
    791. 

  791. 						$notification = file_get_contents("ssb_db/friends/" . $postuser . ".notifications");
    792. 

  792. 						file_put_contents("ssb_db/friends/" . $postuser . ".notifications", "<b>$username</b> <a href='index.php?view=$date&user=$username'>shared your post</a>\n" . $notification);
    793. 

  793. 						file_put_contents($post_file, $post_string . $post_attachments . $post_string_end);
    794. 

  794. 						file_put_contents("ssb_db/posts/" . $date . ".post", "post_" . $username . "_" . $date . ".php");
    795. 

  795. 						file_put_contents("ssb_db/posts/reply_" . $username . "_" . $date . ".count", "0");
    796. 

  796. 						flush();
    797. 

  797. 						header("refresh: 0;url=index.php");
    798. 

  798. 						exit;
    799. 

  799. 					} else {
    800. 

  800. 						$friendcount = file_get_contents("ssb_db/friends/" . $username . ".count");
    801. 

  801. 						for($x = 1; $x <= $friendcount; $x++)
    802. 

  802. 						{
    803. 

  803. 							if($postowner == ${"friend" . $x}) {
    804. 

  804. 								$foundfriend = 1;
    805. 

  805. 								$post_file = "ssb_db/posts/post_" . $username . "_" . $date . ".php";
    806. 

  806. 								$post_attachments = "<br />";
    807. 

  807. 								$post_string = "<?php\n\$postowner = \"" . $username . "\";\$postid=\"" . $date . "\";\$postdate=\"" . $titledate . "\";\$shared = \"1\";\$origowner = \"" . $postowner . "\";\$postcontent = \"" . $postcontent;
    808. 

  808. 								$post_string_end = "\";\n?>\n";
    809. 

  809. 								$notification = file_get_contents("ssb_db/friends/" . $postuser . ".notifications");
    810. 

  810. 								file_put_contents("ssb_db/friends/" . $postuser . ".notifications", "<b>$username</b> <a href='index.php?view=$date&user=$username'>shared your post</a>\n" . $notification);
    811. 

  811. 								file_put_contents($post_file, $post_string . $post_attachments . $post_string_end);
    812. 

  812. 								file_put_contents("ssb_db/posts/" . $date . ".post", "post_" . $username . "_" . $date . ".php");
    813. 

  813. 								file_put_contents("ssb_db/posts/reply_" . $username . "_" . $date . ".count", "0");
    814. 

  814. 								flush();
    815. 

  815. 								header("refresh: 0;url=index.php");
    816. 

  816. 								exit;
    817. 

  817. 							}
    818. 

  818. 						}
    819. 

  819. 					}
    820. 

  820. 				} else { echo "ERROR: post doesn't exist or YOU ARE NOT THE OWNER OF SAID POST... THIS incident has been recorded!"; file_put_contents("ssb_db/log.txt", "Post deletion error: IP <" . $_SERVER['REMOTE_ADDR'] . "> post not found or not users post: post_" . $postuser . "_" . $pid . ".php\n"); }
    821. 

  821. 			} else { echo "ERROR: USER and PID variables not set!"; }
    822. 

  822. 		}
    823. 

  823. 	}
    824. 

  824. 	
    825. 

  825. 	if($do=="react") 
    826. 

  826. 	{
    827. 

  827. 		if ($loginCheck != true) { loginForm(); } else {
    828. 

  828. 			if(isset($_GET['user']) && $_GET['user']!="" && isset($_GET['pid']) && $_GET['pid']!="") {
    829. 

  829. 				if(file_exists("ssb_db/posts/post_" . stripslashes($_GET['user']) . "_" . stripslashes($_GET['pid']) . ".php")) {
    830. 

  830. 					$postuser = $_GET['user'];
    831. 

  831. 					$pid = $_GET['pid'];
    832. 

  832. 					$handle = fopen("ssb_db/posts/$pid.reacted", "r");
    833. 

  833. 					
    834. 

  834. 					if ($handle) {
    835. 

  835. 						while (($line = fgets($handle)) !== false) {
    836. 

  836. 							$line = str_replace(array("\n", "\r"), '', $line);
    837. 

  837. 							if($line == $username) {
    838. 

  838. 								echo "You've already reacted to this post... <a href='index.php?view=$pid&user=$postuser'>redirecting</a>";
    839. 

  839. 								header("refresh: 3;url=index.php?view=$pid&user=$postuser");
    840. 

  840. 								exit;
    841. 

  841. 							}
    842. 

  842. 						}
    843. 

  843. 						fclose($handle);
    844. 

  844. 					} else {
    845. 

  845. 						echo "<!-- Haven't reacted, continuing -->";
    846. 

  846. 					}
    847. 

  847. 						
    848. 

  848. 					if(file_exists("ssb_db/posts/$pid.reacted")) {
    849. 

  849. 						$reactedPrev = file_get_contents("ssb_db/posts/$pid.reacted");
    850. 

  850. 						file_put_contents("ssb_db/posts/$pid.reacted", $reactedPrev . $username . "\n"); // You reacted
    851. 

  851. 					} else {
    852. 

  852. 						file_put_contents("ssb_db/posts/$pid.reacted", $username . "\n"); // First react
    853. 

  853. 					}
    854. 

  854. 								
    855. 

  855. 					if(file_exists("ssb_db/posts/$pid.reactcount")) {
    856. 

  856. 						$reactCount = file_get_contents("ssb_db/posts/$pid.reactcount");
    857. 

  857. 						$reactCurrent = $reactCount + 1;
    858. 

  858. 						file_put_contents("ssb_db/posts/$pid.reactcount", $reactCurrent); // You reacted
    859. 

  859. 					} else {
    860. 

  860. 						file_put_contents("ssb_db/posts/$pid.reactcount", "1"); // First react
    861. 

  861. 					}
    862. 

  862. 								
    863. 

  863. 					// Don't send yourself a notification, you know you liked your own post ;)
    864. 

  864. 					if($postuser != $username) {
    865. 

  865. 						$owner_notifications = file_get_contents("ssb_db/friends/" . $postuser . ".notifications");
    866. 

  866. 						file_put_contents("ssb_db/friends/" . $postuser . ".notifications", "<b>$username</b> loved your <a href='index.php?view=$pid&user=$postuser'>post</a>\n" . $owner_notifications);
    867. 

  867. 					}
    868. 

  868. 						
    869. 

  869. 					echo "Reacted! <a href='index.php'>Redirecting</a> in 1 second...";
    870. 

  870. 					header("Location:index.php");
    871. 

  871. 					exit;
    872. 

  872. 				} else { echo "ERROR: post doesn't exist..."; }
    873. 

  873. 			} else { echo "ERROR: USER and PID variables not set!"; }			
    874. 

  874. 		}
    875. 

  875. 	}
    876. 

  876. 	
    877. 

  877. 	if($do=="clrnote") 
    878. 

  878. 	{
    879. 

  879. 		if ($loginCheck != true) { loginForm(); } else {
    880. 

  880. 			unlink("ssb_db/friends/" . $username . ".notifications");
    881. 

  881. 			header("Location: index.php");
    882. 

  882. 			exit;
    883. 

  883. 		} 
    884. 

  884. 	}
    885. 

  885. 	
    886. 

  886. 	if($do=="clrpending") 
    887. 

  887. 	{
    888. 

  888. 		if ($loginCheck != true) { loginForm(); } else {
    889. 

  889. 			unlink("ssb_db/friends/" . $username . ".pending");
    890. 

  890. 			header("Location: index.php?do=friends");
    891. 

  891. 			exit;
    892. 

  892. 		}
    893. 

  893. 	}
    894. 

  894. 

  895. 	// Server admin can just delete ssb_db
    896. 

  896. 	/*if($do=="clean")
    897. 

  897. 	{
    898. 

  898. 		if($_POST['password']!="" && $_POST['password']==$pw)
    899. 

  899. 		{
    900. 

  900. 			$db_content = glob("ssb_db/" . '*', GLOB_MARK);
    901. 

  901. 			foreach($db_content as $file)
    902. 

  902. 			{
    903. 

  903. 				unlink($file);
    904. 

  904. 			}
    905. 

  905. 			rmdir("ssb_db");
    906. 

  906. 			echo "Database Cleaned<br>";
    907. 

  907. 		}
    908. 

  908. 		else
    909. 

  909. 		{
    910. 

  910. 			echo "ERROR: Wrong Password<br>";
    911. 

  911. 		}
    912. 

  912. 	}*/
    913. 

  913. 

  914. 

  915. 	// grab session values and send friend request functions.
    916. 

  916. 	if($do=="sendfr") {
    917. 

  917. 		if ($loginCheck != true) { loginForm(); } else {
    918. 

  918. 			if(isset($_POST['user']) || isset($_GET['user'])) {
    919. 

  919. 				
    920. 

  920. 				//check if user exists first lol
    921. 

  921. 				if(isset($_POST['user'])) { 
    922. 

  922. 					$givenUser = htmlentities(stripcslashes($_POST['user']));
    923. 

  923. 				} else {
    924. 

  924. 					$givenUser = htmlentities(stripcslashes($_GET['user']));
    925. 

  925. 				}
    926. 

  926. 				
    927. 

  927. 				//check if user exists first lol
    928. 

  928. 				if(file_exists("ssb_db/users/" . $givenUser . ".php")) {
    929. 

  929. 					include "ssb_db/users/" . $givenUser . ".php";
    930. 

  930. 

  931. 					if($accttype == "private") {
    932. 

  932. 						sendFriendRequest($_SESSION['ssb-user'], $givenUser);
    933. 

  933. 						echo "Follow request sent to " . $givenUser . " <a href='?do=friends'>redirecting</a> in 3 seconds";
    934. 

  934. 						header("refresh: 3;url=?do=friends");
    935. 

  935. 					} else if($accttype == "public") {
    936. 

  936. 						acceptPublicFriendRequest($username, $givenUser);
    937. 

  937. 						header("Location: ?do=friends");
    938. 

  938. 					} else {
    939. 

  939. 						echo "ERROR: Issues parsing account type...";
    940. 

  940. 					}
    941. 

  941. 				} else {
    942. 

  942. 					echo "Error: Provided username does not exist in the database!";
    943. 

  943. 				}
    944. 

  944. 			} else {
    945. 

  945. 				echo "Error: users not set in GET value...";
    946. 

  946. 			}
    947. 

  947. 		}
    948. 

  948. 	}
    949. 

  949. 

  950. 	if($do=="accfr") 
    951. 

  951. 	{
    952. 

  952. 		if ($loginCheck != true) { loginForm(); } else {
    953. 

  953. 			if(isset($_GET['user']) && isset($_GET['friend'])) {
    954. 

  954. 				acceptFriendRequest(stripslashes($_GET['user']), stripslashes($_GET['friend']));
    955. 

  955. 				echo "Accepted friend request from  " . htmlentities(stripslashes($_GET['friend'])) . " <a href='?do=friends'>redirecting</a> in 3 seconds";
    956. 

  956. 				header("refresh: 3;url=?do=friends");
    957. 

  957. 			} else {
    958. 

  958. 				echo "Error: users not set in GET &amp; SESSION value...";
    959. 

  959. 			}
    960. 

  960. 		}
    961. 

  961. 	}
    962. 

  962. 

  963. 	if($do=="userctrl")
    964. 

  964. 	{
    965. 

  965. 		if ($loginCheck != true) { loginForm(); } else {
    966. 

  966. 			// Beginning of user control panel
    967. 

  967. 			echo "<h3>User control panel</h3>";
    968. 

  968. 			echo "<a class='button' href='?forms=changepass'>Change password</a><br />";
    969. 

  969. 			echo "<a class='button' href='?forms=avatarupload'>Upload avatar</a><br />";
    970. 

  970. 		}
    971. 

  971. 	}
    972. 

  972. 

  973. 	if($do=="changepass")
    974. 

  974. 	{
    975. 

  975. 		if ($loginCheck != true) { loginForm(); } else {
    976. 

  976. 			// Beginning password change
    977. 

  977. 			// inputs
    978. 

  978. 			$oldPassInput = htmlentities(stripslashes($_POST['oldpass']));
    979. 

  979. 			$newPassInput = htmlentities(stripslashes($_POST['password']));
    980. 

  980. 			$passwordAgainInput = htmlentities(stripslashes($_POST['password_again']));
    981. 

  981. 			include "ssb_db/users/" . $username . ".php";
    982. 

  982. 			if(sha1(md5($oldPassInput)) == $user_password) {
    983. 

  983. 				if($newPassInput == $passwordAgainInput) {
    984. 

  984. 					$oldcontent = file_get_contents("ssb_db/users/" . $username . ".php");
    985. 

  985. 					$passString = "<?php \$user_password = \"" . sha1(md5($newPassInput)) . "\"; ?>\n";
    986. 

  986. 					file_put_contents("ssb_db/users/" . $username . ".php", $oldcontent . $passString);
    987. 

  987. 					echo "Password changed, <a href='index.php'>redirecting</a> in 3 seconds";
    988. 

  988. 					$_SESSION['ssb-user'] = null;
    989. 

  989. 					$_SESSION['ssb-pass'] = null;
    990. 

  990. 					header("refresh: 3;url=index.php");
    991. 

  991. 				}
    992. 

  992. 			} else { echo "ERROR: password incorrect! IP recorded for constant monitoring of possible bots!"; file_put_contents("ssb_db/log.txt", "PASS MISMATCH: IP <" . $_SERVER['REMOTE_ADDR'] . "> Cookie spoofing detected from remote client!!!\n"); }
    993. 

  993. 		}
    994. 

  994. 	}
    995. 

  995. 	
    996. 

  996. 	if($do=="privmsg")
    997. 

  997. 	{
    998. 

  998. 		if ($loginCheck != true) { loginForm(); } else {
    999. 

  999. 			
    1000. 

  1000. 		//check if friend is set
    1001. 

  1001. 		if(!isset($_GET['friend'])) { echo "ERROR: No username defined!"; exit(1); } else {
    1002. 

  1002. 		// set friend username
    1003. 

  1003. 		$friendNick = htmlentities(stripslashes($_GET['friend']));
    1004. 

  1004. 		
    1005. 

  1005. 		$friendcount = file_get_contents("ssb_db/friends/" . $username . ".count");
    1006. 

  1006. 		include "ssb_db/friends/" . $username . ".php";
    1007. 

  1007. 		for($x = 1; $x <= $friendcount; $x++)
    1008. 

  1008.         {
    1009. 

  1009. 			if($friendNick == ${"friend" . $x}) {
    1010. 

  1010. 		?>
    1011. 

  1011. <script language="javascript" type="text/javascript">
    1012. 

  1012.     <!--
    1013. 

  1013. 		var httpObject = null;
    1014. 

  1014. 		var link = "";
    1015. 

  1015. 		var timerID = 0;
    1016. 

  1016. 		var friendNick = "<?php echo $friendNick; ?>";
    1017. 

  1017. 		var nickName = "<?php echo $_SESSION['ssb-user']; ?>";
    1018. 

  1018. 		var userColor = "<?php echo $_SESSION['ssb-color'];; ?>";
    1019. 

  1019. 

  1020. 		// Change the value of the outputText field
    1021. 

  1021. 		function setHtml() {
    1022. 

  1022. 			if(ajaxVar.readyState == 4){
    1023. 

  1023. 				var response = ajaxVar.responseText;
    1024. 

  1024. 				var msgBox = document.getElementById("msgs");
    1025. 

  1025. 				msgBox.innerHTML += response;
    1026. 

  1026. 				msgBox.scrollTop = msgBox.scrollHeight;
    1027. 

  1027. 			}
    1028. 

  1028. 		}
    1029. 

  1029. 

  1030. 		// Change the value of the outputText field
    1031. 

  1031. 		function setAll() {
    1032. 

  1032. 			if(ajaxVar.readyState == 4){
    1033. 

  1033. 				var response = ajaxVar.responseText;
    1034. 

  1034. 				var msgBox = document.getElementById("msgs");
    1035. 

  1035. 				msgBox.innerHTML = response;
    1036. 

  1036. 				msgBox.scrollTop = msgBox.scrollHeight;
    1037. 

  1037. 			}
    1038. 

  1038. 		}
    1039. 

  1039. 

  1040. 		// Implement business logic    
    1041. 

  1041. 		function serverWrite() {    
    1042. 

  1042. 			ajaxVar = getHTTPObject();
    1043. 

  1043. 			if (ajaxVar != null) {
    1044. 

  1044. 				link = "chatserver.php?nick="+nickName+"&friend="+friendNick+"&msg="+document.getElementById('msg').value; 
    1045. 

  1045. 				ajaxVar.open("GET", link , true);
    1046. 

  1046. 				ajaxVar.onreadystatechange = setHtml;
    1047. 

  1047. 				ajaxVar.send(null);
    1048. 

  1048. 			}
    1049. 

  1049. 		}
    1050. 

  1050.       
    1051. 

  1051. 		function getInput() {
    1052. 

  1052. 			// Send the server function the input
    1053. 

  1053. 			var userInput = document.getElementById('msg');
    1054. 

  1054. 			serverWrite(userInput.value);
    1055. 

  1055. 			// Clean out the input values
    1056. 

  1056. 			var msgBar = document.getElementById("msg");
    1057. 

  1057. 			msgBar.value = "";
    1058. 

  1058.             msgBar.focus();
    1059. 

  1059. 		}
    1060. 

  1060. 

  1061. 		// Implement business logic    
    1062. 

  1062. 		function serverReload() {    
    1063. 

  1063. 			ajaxVar = getHTTPObject();
    1064. 

  1064. 			//var randomnumber=Math.floor(Math.random()*10000);
    1065. 

  1065. 			if (ajaxVar != null) {
    1066. 

  1066. 				link = "chatserver.php?get=<?php echo $friendNick; ?>";
    1067. 

  1067. 				ajaxVar.open("GET", link , true);
    1068. 

  1068. 				ajaxVar.onreadystatechange = setAll;
    1069. 

  1069. 				ajaxVar.send(null);
    1070. 

  1070. 			}
    1071. 

  1071. 		}
    1072. 

  1072. 	
    1073. 

  1073. 		function UpdateTimer() {
    1074. 

  1074. 			serverReload();   
    1075. 

  1075. 			setTimeout(UpdateTimer, 1000);
    1076. 

  1076. 		}
    1077. 

  1077.     
    1078. 

  1078. 		function keypressed(e) {
    1079. 

  1079. 			if(e.keyCode=='13'){
    1080. 

  1080. 				getInput();
    1081. 

  1081. 			}
    1082. 

  1082. 		}
    1083. 

  1083.     //-->
    1084. 

  1084.     </script> 
    1085. 

  1085. <div class="replycontain">
    1086. 

  1086. 		<?php
    1087. 

  1087. 		
    1088. 

  1088. 		// Header
    1089. 

  1089. 		include "ssb_db/users/" . $friendNick . ".php";
    1090. 

  1090. 		echo "<h3><a href='?userfeed=" . $friendNick . "'>" . $friendNick . ": " . $user_fullname . "</a></h3>";
    1091. 

  1091. 		
    1092. 

  1092. 		?>
    1093. 

  1093. 		<div id="msgs">
    1094. 

  1094. 		<?php 
    1095. 

  1095. 			echo "<div class=\"msgbox\">";
    1096. 

  1096. 			echo "</div>";
    1097. 

  1097. 		?>
    1098. 

  1098. 		</div>
    1099. 

  1099. 		<div id="msgbox" onkeyup="keypressed(event);">
    1100. 

  1100. 			<button onclick="javascript:wrapBBCode('i');">Italic</button>
    1101. 

  1101.      		<button onclick="javascript:wrapBBCode('u');">Underline</button>
    1102. 

  1102.         	<button onclick="javascript:wrapBBCode('b');">Bold</button>
    1103. 

  1103.         	<button onclick="javascript:wrapBBCode('img');">Image</button>
    1104. 

  1104.     		<button onclick="javascript:wrapBBCode('url');">URL</button><br />
    1105. 

  1105. 			<textarea style="width: 98%;" name="msg" id="msg"></textarea>
    1106. 

  1106. 			<button style="width: 50px;" onclick="getInput();">Send</button>
    1107. 

  1107. 		</div>
    1108. 

  1108. 		</div>
    1109. 

  1109. 

  1110. 	<?php
    1111. 

  1111. 		} // Check friend end
    1112. 

  1112. 		} // Check loop end
    1113. 

  1113. 		} // GET friend set end
    1114. 

  1114. 		} // session check end
    1115. 

  1115. 	} // function end
    1116. 

  1116. 	
    1117. 

  1117. 	if($do=="msghist")
    1118. 

  1118. 	{
    1119. 

  1119. 		if ($loginCheck != true) { loginForm(); } else {
    1120. 

  1120. 			
    1121. 

  1121. 		//check if friend is set
    1122. 

  1122. 		if(!isset($_GET['friend'])) { echo "ERROR: No username defined!"; exit(1); } else {
    1123. 

  1123. 		// set friend username
    1124. 

  1124. 		$friendNick = htmlentities(stripslashes($_GET['friend']));
    1125. 

  1125. 		
    1126. 

  1126. 		$friendcount = file_get_contents("ssb_db/friends/" . $username . ".count");
    1127. 

  1127. 		include "ssb_db/friends/" . $username . ".php";
    1128. 

  1128. 		for($x = 1; $x <= $friendcount; $x++)
    1129. 

  1129.         {
    1130. 

  1130. 			if($friendNick == ${"friend" . $x}) {
    1131. 

  1131. 		?>
    1132. 

  1132. <script language="javascript" type="text/javascript">
    1133. 

  1133.     <!--
    1134. 

  1134. 		var httpObject = null;
    1135. 

  1135. 		var link = "chatserver.php?get=<?php echo $friendNick; ?>";
    1136. 

  1136. 		var timerID = 0;
    1137. 

  1137. 		var friendNick = "<?php echo $friendNick; ?>";
    1138. 

  1138. 		var nickName = "<?php echo $_SESSION['ssb-user']; ?>";
    1139. 

  1139. 		var userColor = "<?php echo $_SESSION['ssb-color'];; ?>";
    1140. 

  1140. 

  1141. 		// Change the value of the outputText field
    1142. 

  1142. 		function setAll() {
    1143. 

  1143. 			if(ajaxVar.readyState == 4){
    1144. 

  1144. 				var response = ajaxVar.responseText;
    1145. 

  1145. 				var msgBox = document.getElementById("msgs");
    1146. 

  1146. 				msgBox.innerHTML = response;
    1147. 

  1147. 				msgBox.scrollTop = msgBox.scrollHeight;
    1148. 

  1148. 			}
    1149. 

  1149. 		}
    1150. 

  1150. 		
    1151. 

  1151. 		function serverLoad() {    
    1152. 

  1152. 			ajaxVar = getHTTPObject();
    1153. 

  1153. 			//var randomnumber=Math.floor(Math.random()*10000);
    1154. 

  1154. 			if (ajaxVar != null) {
    1155. 

  1155. 				ajaxVar.open("GET", link , true);
    1156. 

  1156. 				ajaxVar.onreadystatechange = setAll;
    1157. 

  1157. 				ajaxVar.send(null);
    1158. 

  1158. 			}
    1159. 

  1159. 		}
    1160. 

  1160. 		
    1161. 

  1161. 		window.addEventListener('load', function () {
    1162. 

  1162. 			serverLoad();
    1163. 

  1163. 		});
    1164. 

  1164. 

  1165.     //-->
    1166. 

  1166.     </script> 
    1167. 

  1167. <div class="replycontain">
    1168. 

  1168. 		<?php
    1169. 

  1169. 		
    1170. 

  1170. 		// Header
    1171. 

  1171. 		include "ssb_db/users/" . $friendNick . ".php";
    1172. 

  1172. 		echo "<h3><a href='?userfeed=" . $friendNick . "'>" . $friendNick . ": Message history</a></h3>";
    1173. 

  1173. 		
    1174. 

  1174. 		?>
    1175. 

  1175. 		<div id="msgs">
    1176. 

  1176. 		<?php 
    1177. 

  1177. 			echo "<div class=\"msgbox\" style=\"overflow-y: scroll;\">";
    1178. 

  1178. 			echo "</div>";
    1179. 

  1179. 		?>
    1180. 

  1180. 		</div>
    1181. 

  1181. 		</div>
    1182. 

  1182. 

  1183. 	<?php
    1184. 

  1184. 		} // Check friend end
    1185. 

  1185. 		} // Check loop end
    1186. 

  1186. 		} // GET friend set end
    1187. 

  1187. 		} // session check end
    1188. 

  1188. 	} // function end
    1189. 

  1189. 

  1190. 	// Push user avatar to specific avatar image location
    1191. 

  1191. 	if($do=="avatarlocation")
    1192. 

  1192. 	{
    1193. 

  1193. 		if(isset($_GET['user'])) {
    1194. 

  1194. 			$user = htmlentities(stripslashes($_GET['user']));
    1195. 

  1195. 			include "ssb_db/users/" . $user . ".php";
    1196. 

  1196. 			if(file_exists("ssb_db/uploads/" . $user_avatar)) {
    1197. 

  1197. 				echo "Direct to: ssb_db/uploads/" . $user_avatar;
    1198. 

  1198. 				header("Location: ssb_db/uploads/" . $user_avatar . "");
    1199. 

  1199. 				exit;
    1200. 

  1200. 			} else {
    1201. 

  1201. 				echo "Direct to: data/defaultprofile.png";
    1202. 

  1202. 				header("Location: data/defaultprofile.png");
    1203. 

  1203. 				exit;
    1204. 

  1204. 			}
    1205. 

  1205. 		} else {
    1206. 

  1206. 			echo "User is NOT set!";
    1207. 

  1207. 		}
    1208. 

  1208. 	}
    1209. 

  1209. 

  1210. 	if($do=="about")
    1211. 

  1211. 	{
    1212. 

  1212. 		echo "<h2>About</h2>";
    1213. 

  1213. 		echo "<div class='dllink'><a class='button' href='download/secure-space-v1.1.apk'>Download for Android!</a></div>";
    1214. 

  1214. 		echo "<p>" . $desc;
    1215. 

  1215. 		echo "<br /><br />";
    1216. 

  1216. 		echo "$ssbtitle statistics: ";
    1217. 

  1217. 		getUserCount(); 
    1218. 

  1218. 		echo "; ";
    1219. 

  1219. 		getPostCount(); 
    1220. 

  1220. 		echo "; ";
    1221. 

  1221. 		getUploadFileCount();
    1222. 

  1222. 		echo "</p>";
    1223. 

  1223. 	}
    1224. 

  1224. 	
    1225. 

  1225. 	if($do=="users")
    1226. 

  1226. 	{
    1227. 

  1227. 		if ($loginCheck != true) { loginForm(); } else {
    1228. 

  1228. 			echo "<h2>Community</h2>";
    1229. 

  1229. 			foreach(array_reverse(glob("ssb_db/users/"."*.name")) as $userfile) {
    1230. 

  1230. 				$userhandle = file_get_contents($userfile);
    1231. 

  1231. 				include "ssb_db/users/" . $userhandle . ".php";
    1232. 

  1232. 				if($accttype == "public") {
    1233. 

  1233. 					echo "<table class='friendslist'><tr><td><div class='avatar_small' style=\"background-image: url('index.php?do=avatarlocation&user=$userhandle');\" title='User Avatar'></td>";
    1234. 

  1234. 					echo "<td><a class='button' href='index.php?userfeed=$userhandle'>$userhandle</a> ~ $user_fullname</td>";
    1235. 

  1235. 					echo "</td></tr></table>";
    1236. 

  1236. 				}
    1237. 

  1237. 			}
    1238. 

  1238. 		}
    1239. 

  1239. 	}
    1240. 

  1240. 

  1241. 	if($do=="friends")
    1242. 

  1242. 	{
    1243. 

  1243. 		if ($loginCheck != true) { loginForm(); } else {
    1244. 

  1244.             // Friends panel
    1245. 

  1245. 			echo "<h3>Friends</h3><a href='?do=users' class='button'>Public users</a> <a class='button' href='?forms=friendreq'>Send friend request</a>";
    1246. 

  1246. 

  1247. 			// Friends list if you have any.
    1248. 

  1248. 			echo "<br />";
    1249. 

  1249. 

  1250. 			$friendc = file_get_contents("ssb_db/friends/" . $username . ".count");
    1251. 

  1251. 			if($friendc == "0")
    1252. 

  1252. 			{
    1253. 

  1253. 				echo "<b style='color:red;'>We're sorry... no friends found on your user account...</b>";
    1254. 

  1254. 			}
    1255. 

  1255. 			else
    1256. 

  1256. 			{
    1257. 

  1257. 				$friendcount = file_get_contents("ssb_db/friends/" . $username . ".count");
    1258. 

  1258. 				include "ssb_db/friends/" . $username . ".php";
    1259. 

  1259. 				echo "<table class='friendslist'>";
    1260. 

  1260. 				for($x = 1; $x <= $friendcount; $x++)
    1261. 

  1261. 				{
    1262. 

  1262. 					if(isset(${"friend" . $x}) && file_exists("ssb_db/users/" . ${"friend" . $x} . ".php")) {
    1263. 

  1263. 						echo "<tr><td><div class='avatar_small' style=\"background-image: url('index.php?do=avatarlocation&user=" . ${"friend" . $x} . "');\" title='User Avatar'></div></td><td><a class='button' href='index.php?userfeed=" . ${"friend" . $x} . "'>" . ${"friend" . $x} . "</a></td><td><a class='button' href='?do=privmsg&friend=" . ${"friend" . $x} . "'>Private message</a>&nbsp;&nbsp;<a href='?do=msghist&friend=" . ${"friend" . $x} . "' class='button'>Message history</a></td></tr>";
    1264. 

  1264. 					}
    1265. 

  1265. 				}
    1266. 

  1266. 				echo "</table>";
    1267. 

  1267. 			}
    1268. 

  1268. 		}
    1269. 

  1269. 	}
    1270. 

  1270. 

  1271. 	if($do=="login")
    1272. 

  1272. 	{
    1273. 

  1273. 		$username = $_POST['username'];
    1274. 

  1274.     	if(file_exists("ssb_db/users/$username.php")) {
    1275. 

  1275. 			include_once("ssb_db/users/$username.php");
    1276. 

  1276. 			if($user_password==sha1(md5($_POST['password']))) {
    1277. 

  1277. 				$pass = $user_password;
    1278. 

  1278. 				$user = $username;
    1279. 

  1279. 				$color = $user_color;
    1280. 

  1280. 				$_SESSION['ssb-user'] = $user;
    1281. 

  1281. 				$_SESSION['ssb-pass'] = $pass;
    1282. 

  1282. 				$_SESSION['ssb-color'] = $color;
    1283. 

  1283. 				header("Location: index.php");
    1284. 

  1284. 			} else {
    1285. 

  1285. 				echo "Wrong password!";
    1286. 

  1286. 			}
    1287. 

  1287. 		} else {
    1288. 

  1288. 			echo "User $username not found!";
    1289. 

  1289. 		}
    1290. 

  1290. 	}
    1291. 

  1291. 	
    1292. 

  1292. 	if($do=="logout")
    1293. 

  1293. 	{
    1294. 

  1294. 		$_SESSION['ssb-user'] = null;
    1295. 

  1295. 		$_SESSION['ssb-pass'] = null;
    1296. 

  1296. 		header("Location: index.php?forms=login");
    1297. 

  1297. 	}
    1298. 

  1298. 

  1299. 	if($do=="register")
    1300. 

  1300. 	{
    1301. 

  1301. 		if($_POST['username']!="" && $_POST['password']!="" && $_POST['password-again']!="" && $_POST['fullname']!="" && isset($_POST['acct'])) {
    1302. 

  1302. 			if($_POST['password']==$_POST['password-again']) {
    1303. 

  1303. 				if(!preg_match('/[^a-z0-9]/i', $_POST['username'])) {
    1304. 

  1304. 					if(!file_exists("ssb_db/users/" . $_POST['username'] . ".php")) {
    1305. 

  1305. 						$colors = array("0000ff", "9900cc", "0080ff", "008000", "ededed");
    1306. 

  1306. 						$acct = $_POST['acct'];
    1307. 

  1307. 						file_put_contents("ssb_db/users/" . stripslashes(htmlentities($_POST['username'])) . ".php", "<?php\n\$accttype = \"" . $acct . "\";\n\$user_password = \"" . sha1(md5($_POST['password'])) . "\";\n \$user_color = \"" . $colors[array_rand($colors)] . "\"; \$user_fullname = \"" . stripslashes(htmlentities($_POST['fullname'])) . "\"; \$user_avatar = \"../../data/defaultprofile.png\"; \n?>");
    1308. 

  1308. 						file_put_contents("ssb_db/users/" . stripslashes(htmlentities($_POST['username'])) . ".name", stripslashes(htmlentities($_POST['username'])));
    1309. 

  1309. 						file_put_contents("ssb_db/users/" . stripslashes(htmlentities($_POST['username'])) . ".postnumber", "0");
    1310. 

  1310. 						file_put_contents("ssb_db/friends/" . stripslashes(htmlentities($_POST['username'])) . ".count", "0");
    1311. 

  1311. 						file_put_contents("ssb_db/friends/" . stripslashes(htmlentities($_POST['username'])) . ".php", "<?php ?>\n");
    1312. 

  1312. 						header("Location: index.php");
    1313. 

  1313. 					} else {
    1314. 

  1314. 						header("Location: index.php?notify=6");
    1315. 

  1315. 					}
    1316. 

  1316. 				} else {
    1317. 

  1317. 					header("Location: index.php?notify=5");
    1318. 

  1318. 				}
    1319. 

  1319. 			} else {
    1320. 

  1320. 				header("Location: index.php?notify=4");
    1321. 

  1321. 			}
    1322. 

  1322. 		} else {
    1323. 

  1323. 			header("Location: index.php?notify=3");
    1324. 

  1324. 		}
    1325. 

  1325. 		echo "<b>ERROR!</b>: Something weird just happened... please try registering again!!!...";
    1326. 

  1326. 		//header("Location: index.php");
    1327. 

  1327. 	}
    1328. 

  1328. }
    1329. 

  1329. else if ($loginCheck != true)
    1330. 

  1330. {
    1331. 

  1331.         loginForm();
    1332. 

  1332. } 
    1333. 

  1333. else
    1334. 

  1334. {
    1335. 

  1335. 	// Watch feed, lets generate pages while we're at it
    1336. 

  1336. 	$pagecall = $_GET['page'];
    1337. 

  1337. 	$postcount = 1;
    1338. 

  1338. 	if(isset($pagecall) && $pagecall!="")
    1339. 

  1339. 	{
    1340. 

  1340. 		if($pagecall == "1")
    1341. 

  1341. 		{
    1342. 

  1342. 			$poststart = $postcount;
    1343. 

  1343. 		}
    1344. 

  1344. 		else
    1345. 

  1345. 		{
    1346. 

  1346. 			$poststart = ($pagecall - 1) * 15; // 15 posts per page
    1347. 

  1347. 		}
    1348. 

  1348. 	}
    1349. 

  1349. 	else
    1350. 

  1350. 	{
    1351. 

  1351. 		$poststart = $postcount;
    1352. 

  1352. 	}
    1353. 

  1353. 	
    1354. 

  1354. 	
    1355. 

  1355. 	
    1356. 

  1356. 	// Lets actually generate some feed now.
    1357. 

  1357. 	foreach(array_reverse(glob("ssb_db/posts/*.post")) as $postfile) {
    1358. 

  1358. 		unset($shared); // make sure its not being carried over after loop.
    1359. 

  1359. 		$postphp = file_get_contents($postfile);
    1360. 

  1360. 		include "ssb_db/posts/$postphp";
    1361. 

  1361. 		$friendcount = file_get_contents("ssb_db/friends/" . $username . ".count");
    1362. 

  1362. 		include "ssb_db/friends/" . $username . ".php";
    1363. 

  1363. 		
    1364. 

  1364. 		for($x = 1; $x <= $friendcount; $x++)
    1365. 

  1365. 		{
    1366. 

  1366. 			if($postowner == ${"friend" . $x}) {
    1367. 

  1367. 				// Found a post, post count goes up!
    1368. 

  1368. 				$postcount++;
    1369. 

  1369. 				
    1370. 

  1370. 				if($poststart == "1" && $postcount < ($poststart + 15)) {
    1371. 

  1371. 					echo "<div class='post'><table><tr><td><div class='avatar_small' style=\"background-image: url('index.php?do=avatarlocation&user=$postowner');\" title='User Avatar'></div></td><td><h3>$postowner<span class='date'>$postdate &nbsp;&nbsp;";
    1372. 

  1372. 					if(file_exists("ssb_db/posts/$postid.reactcount")) {
    1373. 

  1373. 						$reacts = file_get_contents("ssb_db/posts/$postid.reactcount");
    1374. 

  1374. 						echo "<div class='reacts'><i class='fa fa-heart' style='color: red;'></i> $reacts <div class='react-list'>";
    1375. 

  1375. 						// Pull up users who reacted, and generate dropdown list.
    1376. 

  1376. 						$reactlist = fopen("ssb_db/posts/$postid.reacted", "r");
    1377. 

  1377. 						if($reactlist) {
    1378. 

  1378. 							while (($reactor = fgets($reactlist)) !== false) {
    1379. 

  1379. 								echo "<b>$reactor</b>";
    1380. 

  1380. 							}
    1381. 

  1381. 							fclose($reactlist);
    1382. 

  1382. 						}
    1383. 

  1383. 						echo "</div></div>";
    1384. 

  1384. 					}
    1385. 

  1385. 					
    1386. 

  1386. 					if(isset($shared) && $shared == "1")
    1387. 

  1387. 					{
    1388. 

  1388. 						echo "<br />Originally posted by $origowner";
    1389. 

  1389. 					}
    1390. 

  1390. 					
    1391. 

  1391. 					echo "</span></h3></td></tr></table>";
    1392. 

  1392. 					echo "" . bbcode_format($postcontent) . "";
    1393. 

  1393. 					// Footer
    1394. 

  1394. 					echo "<div class='post-footer'>";
    1395. 

  1395. 					echo "<a style='padding-top: 6px;' onclick=\"userReact('" . $postowner . "','" . $postid . "');\" class='button'><i class='fa fa-heart'></i>&nbsp;React</a>";
    1396. 

  1396. 					echo "<a style='padding-top: 6px;' href='index.php?view=$postid&user=$postowner' class='button'><i class='fa fa-comment'></i>&nbsp;Comment</a>";
    1397. 

  1397. 					echo "<a style='padding-top: 6px;' href='index.php?do=share&pid=$postid&user=$postowner' class='button'><i class='fa fa-share'></i>&nbsp;Share</a>";
    1398. 

  1398. 					echo "<br />"; // line break
    1399. 

  1399. 					if(file_exists("ssb_db/posts/reply_" . $postowner . "_" . $postid . ".count")) {
    1400. 

  1400. 						$pcount = file_get_contents("ssb_db/posts/reply_" . $postowner . "_" . $postid . ".count");
    1401. 

  1401. 						// If there's a reply, show them.
    1402. 

  1402. 						if($pcount == 0) {
    1403. 

  1403. 							echo "no replies";
    1404. 

  1404. 						} else if($pcount == 1) {
    1405. 

  1405. 							echo "$pcount reply";
    1406. 

  1406. 						} else if ($pcount > 0) {
    1407. 

  1407. 							echo "$pcount replies";
    1408. 

  1408. 						}
    1409. 

  1409. 					}
    1410. 

  1410. 					
    1411. 

  1411. 					echo " &bull; ";
    1412. 

  1412. 					
    1413. 

  1413. 					// Show reaction count in footer as well.
    1414. 

  1414. 					if(file_exists("ssb_db/posts/" . $postid . ".reactcount")) {
    1415. 

  1415. 						$reactcount = file_get_contents("ssb_db/posts/" . $postid . ".reactcount");
    1416. 

  1416. 						if($reactcount == 1) {
    1417. 

  1417. 							echo "$reactcount reaction";
    1418. 

  1418. 						} else if ($reactcount > 0) {
    1419. 

  1419. 							echo "$reactcount reactions";
    1420. 

  1420. 						}
    1421. 

  1421. 					} else {
    1422. 

  1422. 						echo "no reactions";
    1423. 

  1423. 					}
    1424. 

  1424. 						
    1425. 

  1425. 					echo "</div></div><br />\n";
    1426. 

  1426. 				}
    1427. 

  1427. 				
    1428. 

  1428. 				if($poststart > "1" && $postcount > $poststart && $postcount < ($poststart + 15)) {
    1429. 

  1429. 					echo "<div class='post'><table><tr><td><div class='avatar_small' style=\"background-image: url('index.php?do=avatarlocation&user=$postowner');\" title='User Avatar'></div></td><td><h3>$postowner<span class='date'>$postdate &nbsp;&nbsp;";
    1430. 

  1430. 					if(file_exists("ssb_db/posts/$postid.reactcount")) {
    1431. 

  1431. 						$reacts = file_get_contents("ssb_db/posts/$postid.reactcount");
    1432. 

  1432. 						echo "<div class='reacts'><i class='fa fa-heart' style='color: red;'></i> $reacts <div class='react-list'>";
    1433. 

  1433. 						// Pull up users who reacted, and generate dropdown list.
    1434. 

  1434. 						$reactlist = fopen("ssb_db/posts/$postid.reacted", "r");
    1435. 

  1435. 						if($reactlist) {
    1436. 

  1436. 							while (($reactor = fgets($reactlist)) !== false) {
    1437. 

  1437. 								echo "<b>$reactor</b>";
    1438. 

  1438. 							}
    1439. 

  1439. 							fclose($reactlist);
    1440. 

  1440. 						}
    1441. 

  1441. 						echo "</div></div>";
    1442. 

  1442. 					}
    1443. 

  1443. 					
    1444. 

  1444. 					if(isset($shared) && $shared == "1")
    1445. 

  1445. 					{
    1446. 

  1446. 						echo "<br />Originally posted by $origowner";
    1447. 

  1447. 					}
    1448. 

  1448. 					
    1449. 

  1449. 					echo "</span></h3></td></tr></table>";
    1450. 

  1450. 					echo "" . bbcode_format($postcontent) . "";
    1451. 

  1451. 					// Footer
    1452. 

  1452. 					echo "<div class='post-footer'>";
    1453. 

  1453. 					echo "<a style='padding-top: 6px;' onclick=\"userReact('" . $postowner . "','" . $postid . "');\" class='button'><i class='fa fa-heart'></i>&nbsp;React</a>";
    1454. 

  1454. 					echo "<a style='padding-top: 6px;' href='index.php?view=$postid&user=$postowner' class='button'><i class='fa fa-comment'></i>&nbsp;Comment</a>";
    1455. 

  1455. 					echo "<a style='padding-top: 6px;' href='index.php?do=share&pid=$postid&user=$postowner' class='button'><i class='fa fa-share'></i>&nbsp;Share</a>";
    1456. 

  1456. 					echo "<br />"; // line break
    1457. 

  1457. 					if(file_exists("ssb_db/posts/reply_" . $postowner . "_" . $postid . ".count")) {
    1458. 

  1458. 						$pcount = file_get_contents("ssb_db/posts/reply_" . $postowner . "_" . $postid . ".count");
    1459. 

  1459. 						// If there's a reply, show them.
    1460. 

  1460. 						if($pcount == 0) {
    1461. 

  1461. 							echo "no replies";
    1462. 

  1462. 						} else if($pcount == 1) {
    1463. 

  1463. 							echo "$pcount reply";
    1464. 

  1464. 						} else if ($pcount > 0) {
    1465. 

  1465. 							echo "$pcount replies";
    1466. 

  1466. 						}
    1467. 

  1467. 					}
    1468. 

  1468. 					
    1469. 

  1469. 					echo " &bull; ";
    1470. 

  1470. 					
    1471. 

  1471. 					// Show reaction count in footer as well.
    1472. 

  1472. 					if(file_exists("ssb_db/posts/" . $postid . ".reactcount")) {
    1473. 

  1473. 						$reactcount = file_get_contents("ssb_db/posts/" . $postid . ".reactcount");
    1474. 

  1474. 						if($reactcount == 1) {
    1475. 

  1475. 							echo "$reactcount reaction";
    1476. 

  1476. 						} else if ($reactcount > 0) {
    1477. 

  1477. 							echo "$reactcount reactions";
    1478. 

  1478. 						}
    1479. 

  1479. 					} else {
    1480. 

  1480. 						echo "no reactions";
    1481. 

  1481. 					}
    1482. 

  1482. 						
    1483. 

  1483. 					echo "</div></div><br />\n";
    1484. 

  1484. 				}
    1485. 

  1485. 			}
    1486. 

  1486. 		}
    1487. 

  1487. 

  1488. 		if($postowner == $username)
    1489. 

  1489. 		{
    1490. 

  1490. 			// Found a post, post count goes up!
    1491. 

  1491. 			$postcount++;
    1492. 

  1492. 			
    1493. 

  1493. 			if($poststart == "1" && $postcount < ($poststart + 15)) {
    1494. 

  1494. 				echo "<div class='post'><table><tr><td><div class='avatar_small' style=\"background-image: url('index.php?do=avatarlocation&user=$postowner');\" title='User Avatar'></div></td><td><h3>$postowner<span class='date'>$postdate &nbsp;&nbsp;";
    1495. 

  1495. 				
    1496. 

  1496. 				if(file_exists("ssb_db/posts/$postid.reactcount")) {
    1497. 

  1497. 					$reacts = file_get_contents("ssb_db/posts/$postid.reactcount");
    1498. 

  1498. 					echo "<div class='reacts'><i class='fa fa-heart' style='color: red;'></i> $reacts <div class='react-list'>";
    1499. 

  1499. 					// Pull up users who reacted, and generate dropdown list.
    1500. 

  1500. 					$reactlist = fopen("ssb_db/posts/$postid.reacted", "r");
    1501. 

  1501. 					if($reactlist) {
    1502. 

  1502. 						while (($reactor = fgets($reactlist)) !== false) {
    1503. 

  1503. 							echo "<b>$reactor</b>";
    1504. 

  1504. 						}
    1505. 

  1505. 						fclose($reactlist);
    1506. 

  1506. 					}
    1507. 

  1507. 					echo "</div></div>";
    1508. 

  1508. 				}
    1509. 

  1509. 				
    1510. 

  1510. 				if(isset($shared) && $shared == "1")
    1511. 

  1511. 				{
    1512. 

  1512. 					echo "<br />Originally posted by $origowner";
    1513. 

  1513. 				}
    1514. 

  1514. 				
    1515. 

  1515. 				echo "</span></h3></td></tr></table>";
    1516. 

  1516. 				echo "" . bbcode_format($postcontent) . "";
    1517. 

  1517. 				// Footer
    1518. 

  1518. 				echo "<div class='post-footer'>";
    1519. 

  1519. 				echo "<a style='padding-top: 6px;' onclick=\"userReact('" . $postowner . "','" . $postid . "');\" class='button'><i class='fa fa-heart'></i>&nbsp;React</a>";
    1520. 

  1520. 				echo "<a style='padding-top: 6px;' href='index.php?view=$postid&user=$postowner' class='button'><i class='fa fa-comment'></i>&nbsp;Comment</a>";
    1521. 

  1521. 				echo "<a style='padding-top: 6px;' href='index.php?do=delpost&user=$username&pid=$postid' class='button'><i class='fa fa-trash-can'></i>&nbsp;Delete</a>";
    1522. 

  1522. 				echo "<br />"; // line break
    1523. 

  1523. 				if(file_exists("ssb_db/posts/reply_" . $postowner . "_" . $postid . ".count")) {
    1524. 

  1524. 					$pcount = file_get_contents("ssb_db/posts/reply_" . $postowner . "_" . $postid . ".count");
    1525. 

  1525. 					// If there's a reply, show them.
    1526. 

  1526. 					if($pcount == 0) {
    1527. 

  1527. 						echo "no replies";
    1528. 

  1528. 					} else if($pcount == 1) {
    1529. 

  1529. 						echo "$pcount reply";
    1530. 

  1530. 					} else if ($pcount > 0) {
    1531. 

  1531. 						echo "$pcount replies";
    1532. 

  1532. 					}
    1533. 

  1533. 				}
    1534. 

  1534. 						
    1535. 

  1535. 				echo " &bull; ";
    1536. 

  1536. 					
    1537. 

  1537. 				// Show reaction count in footer as well.
    1538. 

  1538. 				if(file_exists("ssb_db/posts/" . $postid . ".reactcount")) {
    1539. 

  1539. 					$reactcount = file_get_contents("ssb_db/posts/" . $postid . ".reactcount");
    1540. 

  1540. 					if($reactcount == 1) {
    1541. 

  1541. 						echo "$reactcount reaction";
    1542. 

  1542. 					} else if ($reactcount > 0) {
    1543. 

  1543. 						echo "$reactcount reactions";
    1544. 

  1544. 					}
    1545. 

  1545. 				} else {
    1546. 

  1546. 					echo "no reactions";
    1547. 

  1547. 				}
    1548. 

  1548. 						
    1549. 

  1549. 				echo "</div></div><br />\n";
    1550. 

  1550. 			}
    1551. 

  1551. 			
    1552. 

  1552. 			if($poststart > "1" && $postcount > $poststart && $postcount < ($poststart + 15)) {
    1553. 

  1553. 				echo "<div class='post'><table><tr><td><div class='avatar_small' style=\"background-image: url('index.php?do=avatarlocation&user=$postowner');\" title='User Avatar'></div></td><td><h3>$postowner<span class='date'>$postdate &nbsp;&nbsp;";
    1554. 

  1554. 				if(file_exists("ssb_db/posts/$postid.reactcount")) {
    1555. 

  1555. 					$reacts = file_get_contents("ssb_db/posts/$postid.reactcount");
    1556. 

  1556. 					echo "<div class='reacts'><i class='fa fa-heart' style='color: red;'></i> $reacts <div class='react-list'>";
    1557. 

  1557. 					// Pull up users who reacted, and generate dropdown list.
    1558. 

  1558. 					$reactlist = fopen("ssb_db/posts/$postid.reacted", "r");
    1559. 

  1559. 					if($reactlist) {
    1560. 

  1560. 						while (($reactor = fgets($reactlist)) !== false) {
    1561. 

  1561. 							echo "<b>$reactor</b>";
    1562. 

  1562. 						}
    1563. 

  1563. 						fclose($reactlist);
    1564. 

  1564. 					}
    1565. 

  1565. 					echo "</div></div>";
    1566. 

  1566. 				}
    1567. 

  1567. 				echo "</span></h3></td></tr></table>";
    1568. 

  1568. 				echo "" . bbcode_format($postcontent) . "";
    1569. 

  1569. 				// Footer
    1570. 

  1570. 				echo "<div class='post-footer'>";
    1571. 

  1571. 				echo "<a style='padding-top: 6px;' onclick=\"userReact('" . $postowner . "','" . $postid . "');\" class='button'><i class='fa fa-heart'></i>&nbsp;React</a>";
    1572. 

  1572. 				echo "<a style='padding-top: 6px;' href='index.php?view=$postid&user=$postowner' class='button'><i class='fa fa-comment'></i>&nbsp;Comment</a>";
    1573. 

  1573. 				echo "<a style='padding-top: 6px;' href='index.php?do=delpost&user=$username&pid=$postid' class='button'><i class='fa fa-trash-can'></i>&nbsp;Delete</a>";
    1574. 

  1574. 				echo "<br />"; // line break
    1575. 

  1575. 				if(file_exists("ssb_db/posts/reply_" . $postowner . "_" . $postid . ".count")) {
    1576. 

  1576. 					$pcount = file_get_contents("ssb_db/posts/reply_" . $postowner . "_" . $postid . ".count");
    1577. 

  1577. 					// If there's a reply, show them.
    1578. 

  1578. 					if($pcount == 0) {
    1579. 

  1579. 						echo "no replies";
    1580. 

  1580. 					} else if($pcount == 1) {
    1581. 

  1581. 						echo "$pcount reply";
    1582. 

  1582. 					} else if ($pcount > 0) {
    1583. 

  1583. 						echo "$pcount replies";
    1584. 

  1584. 					}
    1585. 

  1585. 				}
    1586. 

  1586. 					
    1587. 

  1587. 				echo " &bull; ";
    1588. 

  1588. 					
    1589. 

  1589. 				// Show reaction count in footer as well.
    1590. 

  1590. 				if(file_exists("ssb_db/posts/" . $postid . ".reactcount")) {
    1591. 

  1591. 					$reactcount = file_get_contents("ssb_db/posts/" . $postid . ".reactcount");
    1592. 

  1592. 					if($reactcount == 1) {
    1593. 

  1593. 						echo "$reactcount reaction";
    1594. 

  1594. 					} else if ($reactcount > 0) {
    1595. 

  1595. 						echo "$reactcount reactions";
    1596. 

  1596. 					}
    1597. 

  1597. 				} else {
    1598. 

  1598. 					echo "no reactions";
    1599. 

  1599. 				}
    1600. 

  1600. 						
    1601. 

  1601. 				echo "</div></div><br />\n";
    1602. 

  1602. 			}
    1603. 

  1603. 		}
    1604. 

  1604. 	}
    1605. 

  1605. 	
    1606. 

  1606. 	
    1607. 

  1607. 	// Page button generation
    1608. 

  1608. 	echo "<div class='page-controls'>";
    1609. 

  1609. 	
    1610. 

  1610. 	if($poststart > "1") {
    1611. 

  1611. 		$prevpage = $poststart / 15;
    1612. 

  1612. 		echo "<a href='index.php?page=$prevpage'><i class='fa fa-arrow-left'></i> &nbsp; Prev page</a>";
    1613. 

  1613. 	}
    1614. 

  1614. 	
    1615. 

  1615. 	echo "&nbsp;&nbsp;&nbsp;";
    1616. 

  1616. 	
    1617. 

  1617. 	if($poststart == "1" && $postcount > ($poststart + 15)) {
    1618. 

  1618. 		echo "<a href='index.php?page=2'>Next page &nbsp; <i class='fa fa-arrow-right'></i></a>";
    1619. 

  1619. 	}
    1620. 

  1620. 	
    1621. 

  1621. 	if($poststart > "1" && $postcount > ($poststart + 15)) {
    1622. 

  1622. 		$nextpage = ($poststart / 15) + 2;
    1623. 

  1623. 		echo "<a href='index.php?page=$nextpage'>Next page &nbsp; <i class='fa fa-arrow-right'></i></a>";
    1624. 

  1624. 	}
    1625. 

  1625. 	
    1626. 

  1626. 	echo "</div>";
    1627. 

  1627. }
    1628. 

  1628. 

  1629. ?>
    1630. 

  1630.     </td></tr></table>
    1631. 

  1631. 	<div id="footer">Powered By SSB <?php echo $version; ?></div>
    1632. 

  1632. </div>
    1633. 

  1633. 

  1634. <!-- functions -->
    1635. 

  1635. <script type="text/javascript" src="data/main.js"></script>
    1636. 

  1636. 

  1637. </body>
    1638. 

  1638. </html>
    1639. 

  1639.