<?
function local_user()
{
global $HTTP_SERVER_VARS;
return $HTTP_SERVER_VARS["SERVER_ADDR"] == $HTTP_SERVER_VARS["REMOTE_ADDR"];
}
$FUNDS = "$0.00";
$SITE_ONLINE = true;
//$SITE_ONLINE = local_user();
//$SITE_ONLINE = false;
$max_torrent_size = 1000000;
$announce_interval = 60 * 30;
$signup_timeout = 86400 * 3; # used for both sign up and invites
$minvotes = 1;
$max_dead_torrent_time = 6 * 3600;
// Max users on site
$maxusers = 0;
$invites = 3000;
$torrent_dir = "/var/tb/torrents"; # must be writable for httpd user, chmod 777 but deny access with .htaccess
# the first one will be displayed on the pages
$announce_urls = array();
$announce_urls[] = "http://yourdomain/announce.php";
$announce_urls[] = "http://yourdomain/announce.php";
$announce_urls[] = "http://yourdomain/announce.php";
if ($HTTP_SERVER_VARS["HTTP_HOST"] == "")
$HTTP_SERVER_VARS["HTTP_HOST"] = $HTTP_SERVER_VARS["SERVER_NAME"];
$BASEURL = "http://" . $HTTP_SERVER_VARS["HTTP_HOST"];
// Set this to your site URL... No ending slash!
$DEFAULTBASEURL = "http://yourdomain";
//Directory for dox
$DOXPATH = "/var/tb/dox"; # local path to dox, chmod 777 but deny access with .htaccess
//Directory for cache
$CACHE = "/var/tb/cache"; # local path to cache, chmod 777 but deny access with .htaccess
//set this to true to make this a tracker that only registered users may use
$MEMBERSONLY = true;
//maximum number of peers (seeders+leechers) allowed before torrents starts to be deleted to make room...
//set this to something high if you don't require this feature
$PEERLIMIT = 4;
// Email for sender/return path.
$SITEEMAIL = "hide@address.com";
$SITENAME = "SITE'S NAME";
$autoclean_interval = 1200;
$pic_base_url = "/pic/";
$table_cat = "categories";
require_once("secrets.php");
require_once("cleanup.php");
/**** validip/getip courtesy of manolete <hide@address.com> ****/
// IP Validation
function validip($ip)
{
if (!empty($ip) && ip2long($ip)!=-1)
{
// reserved IANA IPv4 addresses
// http://www.iana.org/assignments/ipv4-address-space
$reserved_ips = array (
array('0.0.0.0','2.255.255.255'),
array('10.0.0.0','10.255.255.255'),
array('127.0.0.0','127.255.255.255'),
array('169.254.0.0','169.254.255.255'),
array('172.16.0.0','172.31.255.255'),
array('192.0.2.0','192.0.2.255'),
array('192.168.0.0','192.168.255.255'),
array('255.255.255.0','255.255.255.255')
);
foreach ($reserved_ips as $r)
{
$min = ip2long($r[0]);
$max = ip2long($r[1]);
if ((ip2long($ip) >= $min) && (ip2long($ip) <= $max)) return false;
}
return true;
}
else return false;
}
// Patched function to detect REAL IP address if it's valid
function getip()
{
global $HTTP_SERVER_VARS;
if (validip($HTTP_SERVER_VARS['HTTP_CLIENT_IP'])) return $HTTP_SERVER_VARS['HTTP_CLIENT_IP'];
elseif ($HTTP_SERVER_VARS['HTTP_X_FORWARDED_FOR']!="")
{
$forwarded=str_replace(",","",$HTTP_SERVER_VARS['HTTP_X_FORWARDED_FOR']);
$forwarded_array=split(" ",$forwarded);
foreach($forwarded_array as $value) if (validip($value)) return $value;
}
return $HTTP_SERVER_VARS['REMOTE_ADDR'];
}
function dbconn($autoclean = true)
{
global $mysql_host, $mysql_user, $mysql_pass, $mysql_db, $HTTP_SERVER_VARS;
if (!@mysql_connect($mysql_host, $mysql_user, $mysql_pass))
{
switch (mysql_errno())
{
case 1040:
case 2002:
if ($HTTP_SERVER_VARS[REQUEST_METHOD] == "GET")
die("<html><head><meta http-equiv=refresh content=\"5 $HTTP_SERVER_VARS[REQUEST_URI]\"></head><body><table border=0 width=100% height=100%><tr><td><h3 align=center>The server load is very high at the moment. Retrying, please wait...</h3></td></tr></table></body></html>");
else
die("Too many users. Please press the Refresh button in your browser to retry.");
default:
die("[" . mysql_errno() . "] dbconn: mysql_connect: " . mysql_error());
}
}
mysql_select_db($mysql_db)
or die('dbconn: mysql_select_db: ' + mysql_error());
userlogin();
if ($autoclean)
register_shutdown_function("autoclean");
}
function userlogin() {
global $HTTP_SERVER_VARS, $SITE_ONLINE;
unset($GLOBALS["CURUSER"]);
$ip = getip();
$nip = ip2long($ip);
$res = mysql_query("SELECT * FROM bans WHERE ($nip >= first AND $nip <= last) OR hostname LIKE'"hide@address.com($ip)."'") or sqlerr(__FILE__, __LINE__);
if (mysql_num_rows($res) > 0)
{
header("HTTP/1.0 403 Forbidden");
print("<html><body><h1>403 Forbidden</h1>Unauthorized.</body></html>\n");
die;
}
if (!$SITE_ONLINE || empty($_COOKIE["uid"]) || empty($_COOKIE["pass"]))
return;
$id = 0 + $_COOKIE["uid"];
if (!$id || strlen($_COOKIE["pass"]) != 32)
return;
$res = mysql_query("SELECT * FROM users WHERE id = $id AND enabled='yes' AND status = 'confirmed'");// or die(mysql_error());
$row = mysql_fetch_array($res);
if (!$row)
return;
$sec = hash_pad($row["secret"]);
if ($_COOKIE["pass"] !== $row["passhash"])
if ((md5($ip.$_COOKIE['pass']) !== $row['loginhash'] && !$row['logintype'] == "secure") || $_COOKIE['pass'] !== $row['passhash'])
return;
mysql_query("UPDATE users SET last_access='" . get_date_time() . "', ip='$ip' WHERE id=" . $row["id"]);// or die(mysql_error());
$row['ip'] = $ip;
$GLOBALS["CURUSER"] = $row;
}
function autoclean() {
global $autoclean_interval;
$now = time();
$docleanup = 0;
$res = mysql_query("SELECT value_u FROM avps WHERE arg = 'lastcleantime'");
$row = mysql_fetch_array($res);
if (!$row) {
mysql_query("INSERT INTO avps (arg, value_u) VALUES ('lastcleantime',$now)");
return;
}
$ts = $row[0];
if ($ts + $autoclean_interval > $now)
return;
mysql_query("UPDATE avps SET value_u=$now WHERE arg='lastcleantime' AND value_u = $ts");
if (!mysql_affected_rows())
return;
docleanup();
}
function unesc($x) {
if (get_magic_quotes_gpc())
return stripslashes($x);
return $x;
}
function mksize($bytes)
{
if ($bytes < 1000 * 1024)
return number_format($bytes / 1024, 2) . " kB";
elseif ($bytes < 1000 * 1048576)
return number_format($bytes / 1048576, 2) . " MB";
elseif ($bytes < 1000 * 1073741824)
return number_format($bytes / 1073741824, 2) . " GB";
else
return number_format($bytes / 1099511627776, 2) . " TB";
}
function mksizeint($bytes)
{
$bytes = max(0, $bytes);
if ($bytes < 1000)
return floor($bytes) . " B";
elseif ($bytes < 1000 * 1024)
return floor($bytes / 1024) . " kB";
elseif ($bytes < 1000 * 1048576)
return floor($bytes / 1048576) . " MB";
elseif ($bytes < 1000 * 1073741824)
return floor($bytes / 1073741824) . " GB";
else
return floor($bytes / 1099511627776) . " TB";
}
function deadtime() {
global $announce_interval;
return time() - floor($announce_interval * 1.3);
}
function mkprettytime($s) {
if ($s < 0)
$s = 0;
$t = array();
foreach (array("60:sec","60:min","24:hour","0:day") as $x) {
$y = explode(":", $x);
if ($y[0] > 1) {
$v = $s % $y[0];
$s = floor($s / $y[0]);
}
else
$v = $s;
$t[$y[1]] = $v;
}
if ($t["day"])
return $t["day"] . "d " . sprintf("%02d:%02d:%02d", $t["hour"], $t["min"], $t["sec"]);
if ($t["hour"])
return sprintf("%d:%02d:%02d", $t["hour"], $t["min"], $t["sec"]);
// if ($t["min"])
return sprintf("%d:%02d", $t["min"], $t["sec"]);
// return $t["sec"] . " secs";
}
function mkglobal($vars) {
if (!is_array($vars))
$vars = explode(":", $vars);
foreach ($vars as $v) {
if (isset($_GET[$v]))
$GLOBALS[$v] = unesc($_GET[$v]);
elseif (isset($_POST[$v]))
$GLOBALS[$v] = unesc($_POST[$v]);
else
return 0;
}
return 1;
}
function tr($x,$y,$noesc=0) {
if ($noesc)
$a = $y;
else {
$a = htmlspecialchars($y);
$a = str_replace("\n", "<br />\n", $a);
}
print("<tr><td class=\"heading\" valign=\"top\" align=\"right\">$x</td><td valign=\"top\" align=left>$a</td></tr>\n");
}
function validfilename($name) {
return preg_match('/^[^\0-\x1f:\\\\\/?*\xff#<>|]+$/si', $name);
}
function validemail($email) {
if (eregi("^[a-z0-9\._-]+@+[a-z0-9\._-]+\.+[a-z]{2,3}$" , $email))
return true;
else
return false;
}
function is_valid_type($type)
{
if($type == cat_name || $type == name || $type == numfiles || $type == comments || $type == rating || $type == added || $type == size || $type == times_completed || $type == seeders || $type == leechers || $type == username)
return true;
else
return false;
}
function is_valid_sort($sort)
{
if($sort == ASC || $sort == DESC)
return true;
else
return false;
}
function sqlesc($x) {
return "'".mysql_real_escape_string($x)."'";
}
function sqlwildcardesc($x) {
return str_replace(array("%","_"), array("\\%","\\_"), mysql_real_escape_string($x));
}
function urlparse($m) {
$t = $m[0];
if (preg_match(',^\w+://,', $t))
return "<a href=\"$t\">$t</a>";
return "<a href=\"http://$t\">$t</a>";
}
function parsedescr($d, $html) {
if (!$html)
{
$d = htmlspecialchars($d);
$d = str_replace("\n", "\n<br>", $d);
}
return $d;
}
function stdhead($title = "", $msgalert = true) {
global $CURUSER, $HTTP_SERVER_VARS, $PHP_SELF, $SITE_ONLINE, $FUNDS, $SITENAME;
if (!$SITE_ONLINE)
die("Site is down for maintenance, please check back again later... thanks<br>");
header("Content-Type: text/html; charset=iso-8859-1");
//header("Pragma: No-cache");
if ($title == "")
$title = $SITENAME;
else
$title = "$SITENAME :: " . htmlspecialchars($title);
if ($CURUSER)
{
$ss_a = @mysql_fetch_array(@mysql_query("select uri from stylesheets where id=" . $CURUSER["stylesheet"]));
if ($ss_a) $ss_uri = $ss_a["uri"];
}
if (!$ss_uri)
{
($r = mysql_query("SELECT uri FROM stylesheets WHERE id=1")) or die(mysql_error());
($a = mysql_fetch_array($r)) or die(mysql_error());
$ss_uri = $a["uri"];
}
if ($msgalert && $CURUSER)
{
$res = mysql_query("SELECT COUNT(*) FROM messages WHERE receiver=" . $CURUSER["id"] . " && unread='yes'") or die("OopppsY!");
$arr = mysql_fetch_row($res);
$unread = $arr[0];
}
///////////////////for spacer/////////////////////////
if (!$CURUSER || $CURUSER['toolbar'] == "yes")
$size = "900px";
elseif ($CURUSER['toolbar'] == "no")
$size = "700px";
?>
<html><head>
<title><?= $title ?></title>
<link rel="stylesheet" href="/<?=$ss_uri?>" type="text/css">
<br>
<br>
<br>
<table cellpadding="0" align="center" class="menu" cellspacing="0" style="width:100%">
<!--/////////////spacer///////////////-->
<tr><td class="embedded"><table width="<?=$size?>" align="center"></table></td></tr>
<tr><td class="embedded"><table width="100%" class="main" style="margin-bottom: 5px"><tr><td class="embedded" align="left" ><img class="logo" src="/pic/blank.gif" align="left" cellpadding="0" ></td>
<td class="embedded" align="center">
<? if (!$CURUSER)
{ ?>
<table cellpadding="3" class="main" border="0" style="width:300px;padding-top: 2px" align="center"><tr><td class="embedded" align="center">
<h3>Site news</h3>
<table width="100%" border="1" align="center"><tr><td style="padding:5;">Add whatever you want here!
</td></tr></table>
</td></tr></table>
<?}
else
{
$sr = $CURUSER['donated'];
if ($sr >= 50)
$s = "w00t";
else if ($sr >= 20)
$s = "grin";
else if ($sr >= 10)
$s = "smile1";
else
$s = "noexpression";
?>
<table cellpadding="3" class="main" border="0" style="width:98%;padding-top: 2px" align="center"><tr><td class="embedded" align="center"><td class="embedded" align="center">
<a href=donate.php><img src=/pic/paypal2.gif border="0" alt="Make a donation" style='margin-top: 5px'></a>
<font color=black><img src=/pic/star20.gif> <b>Funds: <?=$FUNDS?></b></font>
<font color=black><img src=/pic/smilies/<?=$s?>.gif> <b>Donated: $<?=$CURUSER['donated']?></b></font>
</td></tr></table>
<?}
?>
<? if ($CURUSER['toolbar'] == "yes")
{
$date=gmdate("D, M d Y H:i", time() + $CURUSER['tzoffset'] * 60);
$uped = mksize($CURUSER['uploaded']);
$downed = mksize($CURUSER['downloaded']);
if ($CURUSER["downloaded"] > 0)
{
$ratio = $CURUSER['uploaded'] / $CURUSER['downloaded'];
$ratio = number_format($ratio, 3);
$color = get_ratio_color($ratio);
if ($color)
$ratio = "<font color=$color>$ratio</font>";
}
else
if ($CURUSER["uploaded"] > 0)
$ratio = "Inf.";
else
$ratio = "---";
if ($CURUSER['donor'] == "yes")
$medaldon = "<img src=pic/star.gif alt=donor title=donor>";
if ($CURUSER['warned'] == "yes")
$warn = "<img src=pic/warned.gif alt=warned title=warned>";
//// check for messages //////////////////
$res1 = mysql_query("SELECT COUNT(*) FROM messages WHERE receiver=" . $CURUSER["id"] . " AND location IN ('in', 'both')") or print(mysql_error());
$arr1 = mysql_fetch_row($res1);
$messages = $arr1[0];
$res1 = mysql_query("SELECT COUNT(*) FROM messages WHERE receiver=" . $CURUSER["id"] . " AND location IN ('in', 'both') AND unread='yes'") or print(mysql_error());
$arr1 = mysql_fetch_row($res1);
$unread = $arr1[0];
$res1 = mysql_query("SELECT COUNT(*) FROM messages WHERE sender=" . $CURUSER["id"] . " AND location IN ('out', 'both')") or print(mysql_error());
$arr1 = mysql_fetch_row($res1);
$outmessages = $arr1[0];
$res1 = mysql_query("SELECT COUNT(*) FROM messages WHERE receiver=" . $CURUSER["id"] . " && unread='yes'") or die("OopppsY!");
$arr1 = mysql_fetch_row($res1);
$unread = $arr1[0];
if ($unread)
$inboxpic = "<img height=14px style=border:none alt=inbox title='inbox (new messages)' src=/pic/pn_inboxnew.gif>";
else
$inboxpic = "<img height=14px style=border:none alt=inbox title='inbox (no new messages)' src=/pic/pn_inbox.gif>";
//// check active torrents ///////////////////////
$res2 = mysql_query("SELECT COUNT(*) FROM peers WHERE userid=" . $CURUSER["id"] . " AND seeder='yes'") or print(mysql_error());
$row = mysql_fetch_row($res2);
$activeseed = $row[0];
$res2 = mysql_query("SELECT COUNT(*) FROM peers WHERE userid=" . $CURUSER["id"] . " AND seeder='no'") or print(mysql_error());
$row = mysql_fetch_row($res2);
$activeleech = $row[0];
//// end
?>
<table cellpadding="6" class="statusbar" border="0" style="width:95%;margin-top: 5px" align="left"><tr><p>
<td class="bottom" align="left"><span class="smallfont">Welcome back, <b><a href="userdetails.php?id=<?=$CURUSER['id']?>"><?=$CURUSER['username']?></a></b><?=$medaldon?><?=$warn?> [<a href="logout.php">logout</a>]<br/>
<font color=1900D1>Ratio:</font> <?=$ratio?> <font color=green>UL:</font> <font color=black><?=$uped?></font> <font color=darkred>DL:</font><font color=black><?=$downed?></font> <font color=1900D1>Act: </font></span><img alt="TS" title="Torrents seeding" src="/pic/arrowup.gif"> <font color=black><span class="smallfont"><?=$activeseed?></span></font> <img alt="TL" title="Torrents leeching" src="/pic/arrowdown.gif"> <font color=black><span class="smallfont"><?=$activeleech?></span></font></td>
<td class="bottom" align="right"><span class="smallfont"><?echo "$date";?><br/>
<?
if ($messages){
print("<span class=smallfont><a href=/inbox.php>$inboxpic</a> $messages ($unread New)</span>");
if ($outmessages)
print("<span class=smallfont> <a href=/inbox.php?out=1><img height=14px style=border:none alt=sentbox title=sentbox src=/pic/pn_sentbox.gif></a> $outmessages</span>");
else
print("<span class=smallfont> <a href=/inbox.php?out=1><img height=14px style=border:none alt=sentbox title=sentbox src=/pic/pn_sentbox.gif></a> 0</span>");
}
else
{
print("<span class=smallfont><a href=/inbox.php><img height=14px style=border:none alt=inbox title=inbox src=/pic/pn_inbox.gif></a> 0</span>");
if ($outmessages)
print("<span class=smallfont> <a href=/inbox.php?out=1><img height=14px style=border:none alt=sentbox title=sentbox src=/pic/pn_sentbox.gif></a> $outmessages</span>");
else
print("<span class=smallfont> <a href=/inbox.php?out=1><img height=14px style=border:none alt=sentbox title=sentbox src=/pic/pn_sentbox.gif></a> 0</span>");
}
print(" <a href=/friends.php><img style=border:none alt=Buddylist title=Buddylist src=/pic/buddylist.gif></a>");
print(" <a href=/mytorrents.php><img style=border:none alt=MyTorrents title=MyTorrents src=/pic/torrents.gif></a>");
?>
</span></td></tr></table>
<?}
?>
</td></tr></table></td></tr>
<!-- /////////// here we go, with the menu //////////// -->
<?php
$w = "width=100%";
//if ($HTTP_SERVER_VARS["REMOTE_ADDR"] == $HTTP_SERVER_VARS["SERVER_ADDR"]) $w = "width=984";
$fn = substr($PHP_SELF, strrpos($PHP_SELF, "/") + 1);
if ($CURUSER['menubar'] == "yes") { ?>
<tr><td><table align="center" class="menubarbackground" width="100%" cellspacing="0" cellpadding="0">
<tr><td align="center" class="embedded" style="padding-right: 60px; padding-left: 60px; ">
<table class="menubartextbackground" width="100%" cellspacing="0" cellpadding="0">
<tr>
<td align="center" class="menunavigation"><a class=normal href=/>Home</a></td>
<td align="center" class="menunavigation"><a class=normal href=/browse.php>Browse</a></td>
<td align="center" class="menunavigation"><a class=normal href=/requests.php>Requests</a></td>
<td align="center" class="menunavigation"><a class=normal href=/upload.php>Upload</a></td>
<td align="center" class="menunavigation"><a class=normal href=/my.php>Profile</a></td>
<td align="center" class="menunavigation"><a class=normal href=/chat.php>Chat</a></td>
<td align="center" class="menunavigation"><a class=normal href=/forums.php>Forums</a></td>
<?
if (get_user_class() >= UC_POWER_USER) { ?>
<td align="center" class="menunavigation"><a class=normal href=/topten.php>Top 10</a></td>
<td align="center" class="menunavigation"><a class=normal href=/log.php>Log</a></td>
<? }
?>
<td align="center" class="menunavigation"><a class=normal href=/rules.php>Rules</a></td>
<td align="center" class="menunavigation"><a class=normal href=/faq.php>FAQ</a></td>
<td align="center" class="menunavigation"><a class=normal href=/links.php>Links</a></td>
<td align="center" class="menunavigation"><a class=normal href=/staff.php>Staff</a></td>
</tr></table></td></tr>
</table></td></tr>
<? }
?>
<tr><td align="left" style="padding-top: 10px; padding-bottom: 10px;">
<table width="100%" class="main" style="align: center"><tr>
<?
if ($CURUSER['sidebar'] == "yes") {?>
<td align="left" valign="top" width="150px" style="padding-left: 10px; padding-top: 12px;" class="bottom">
<left> Hello! <a href=userdetails.php?id=<?=$CURUSER['id']?>><b><?=$CURUSER['username']?></b></a><br>[<a href=logout.php>Logout</a>]</left>
<table class="main" width="150px"><tr><td class="embedded">
<h2> General</h2>
<table width="100%"><tr><td>
- <a href=index.php>Home</a><br>
- <a href=chat.php>Chat</a><br>
- <a href=forums.php>Forums</a><br>
- <a href=rules.php>Rules</a><br>
- <a href=faq.php>FAQ</a><br>
- <a href=links.php>Links</a><br>
- <a href=staff.php>Staff</a><br>
- <a href=users.php>Member List</a><br><br>
</td></tr></table>
<h2> Torrents</h2>
<table width="100%"><tr><td>
- <a href=browse.php>Browse</a><br>
- <a href=requests.php>Request</a><br>
- <a href=viewrequests.php>View Requests</a><br>
- <a href=ulguide.php>Upload Guide</a><br>
- <a href=upload.php>Upload</a> <br><br>
</td></tr></table>
<h2> Personal</h2>
<table width="100%"><tr><td>
- <a href=my.php>Profile</a> <br>
- <a href=userdetails.php?id=<?=$CURUSER['id']?>>Details</a> <Br>
- <a href=friends.php>Friends</a><br>
- <a href=mytorrents.php>My Torrents</a> <br><br>
</td></tr></table>
<h2> Search</h2>
<table width="100%"><tr><td style="padding: 3px;">
<table width="100%">
<tr><td class="embedded">
Torrents
<form method="get" action=browse.php>
<input type="text" name="search" size="20" value="<?= htmlspecialchars($searchstr) ?>" /></td></tr>
<tr><td class="embedded" style="padding-top: 3px;">
<input type="submit" value="Search!" /></td></tr>
</form>
</table>
<table width="100%">
<tr><td class="embedded">
Requests
<form method="get" action=viewrequests.php>
<input type="text" name="search" size="20" value="<?= htmlspecialchars($searchstr) ?>" /></td></tr>
<tr><td class="embedded" style="padding-top: 3px;">
<input type="submit" value="Search!" /></td></tr>
</form>
</table>
<table width="100%">
<tr><td class="embedded">
Forum
<form method="get" action="forums.php?">
<input type=hidden name=action value=search>
<input type="text" name="keywords" size="20" value="<?= htmlspecialchars($searchstr) ?>" /></td></tr>
<tr><td class="embedded" style="padding-top: 3px;">
<input type="submit" value="Search!" /></td></tr>
</form>
</table>
</td></tr></table>
</td></tr></table></td>
<? }
?>
<td align="center" class="bottom" style="padding-right:10px; padding-left:10px">
<?
if ($unread)
{
print("<p><table border=0 cellspacing=0 cellpadding=10 bgcolor=red><tr><td style='padding: 10px; background: red'>\n");
print("<b><a href=$BASEURL/inbox.php><font color=white>You have $unread new message" . ($unread > 1 ? "s" : "") . "!</font></a></b>");
print("</td></tr></table></p>\n");
}
} // stdhead
function stdfoot() {
print("</td></tr></table></td></tr></table>\n");
print("<p align=center>Powered by TB Source</p><table class=bottom width=100% border=0 cellspacing=0 cellpadding=0><tr valign=top><td class=embedded><br><br><br>\n");
print("</td></tr></table>\n");
print("</body></head></html>\n");
}
function genbark($x,$y) {
stdhead($y);
print("<h3>" . htmlspecialchars($y) . "</h3>\n");
print("<p>" . htmlspecialchars($x) . "</p>\n");
stdfoot();
exit();
}
function mksecret($len = 20) {
$ret = "";
for ($i = 0; $i < $len; $i++)
$ret .= chr(mt_rand(0, 255));
return $ret;
}
function httperr($code = 404) {
header("HTTP/1.0 404 Not found");
print("<h1>Not Found</h1>\n");
print("<p>Sorry pal :(</p>\n");
exit();
}
function gmtime()
{
return strtotime(get_date_time());
}
/*
function logincookie($id, $password, $secret, $updatedb = 1, $expires = 0x7fffffff) {
$md5 = md5($secret . $password . $secret);
setcookie("uid", $id, $expires, "/");
setcookie("pass", $md5, $expires, "/");
if ($updatedb)
mysql_query("UPDATE users SET last_login = NOW() WHERE id = $id");
}
*/
function logincookie($id, $passhash, $updatedb = 1, $expires = 0x7fffffff)
{
setcookie("uid", $id, $expires, "/");
setcookie("pass", $passhash, $expires, "/");
if ($updatedb)
mysql_query("UPDATE users SET last_login = NOW() WHERE id = $id");
}
function logoutcookie() {
setcookie("uid", "", 0x7fffffff, "/");
setcookie("pass", "", 0x7fffffff, "/");
}
function loggedinorreturn() {
global $CURUSER;
if (!$CURUSER) {
header("Location: $BASEURL/login.php?returnto=" . urlencode($_SERVER["REQUEST_URI"]));
exit();
}
}
function deletetorrent($id) {
global $torrent_dir;
mysql_query("DELETE FROM completed WHERE torrent = $id");
mysql_query("DELETE FROM torrents WHERE id = $id");
foreach(explode(".","peers.files.comments.ratings") as $x)
mysql_query("DELETE FROM $x WHERE torrent = $id");
unlink("$torrent_dir/$id.torrent");
}
function pager($rpp, $count, $href, $opts = array()) {
$pages = ceil($count / $rpp);
if (!$opts["lastpagedefault"])
$pagedefault = 0;
else {
$pagedefault = floor(($count - 1) / $rpp);
if ($pagedefault < 0)
$pagedefault = 0;
}
if (isset($_GET["page"])) {
$page = 0 + $_GET["page"];
if ($page < 0)
$page = $pagedefault;
}
else
$page = $pagedefault;
$pager = "";
if(isset($_GET["sort"]))
{
$file=$_GET["sort"];
$type=$_GET['d'];
$loc=$_GET['h'];
$sort="&sort=$file&h=$loc&d=$type";
}
else
$sort="";
$mp = $pages - 1;
$as = "<b><< Prev</b>";
if ($page >= 1) {
$pager .= "<a href=\"{$href}page=" . ($page - 1) . "" . $sort . "\">";
$pager .= $as;
$pager .= "</a>";
}
else
$pager .= $as;
$pager .= " ";
$as = "<b>Next >></b>";
if ($page < $mp && $mp >= 0) {
$pager .= "<a href=\"{$href}page=" . ($page + 1) . "" . $sort . "\">";
$pager .= $as;
$pager .= "</a>";
}
else
$pager .= $as;
if ($count) {
$pagerarr = array();
$dotted = 0;
$dotspace = 3;
$dotend = $pages - $dotspace;
$curdotend = $page - $dotspace;
$curdotstart = $page + $dotspace;
for ($i = 0; $i < $pages; $i++) {
if (($i >= $dotspace && $i <= $curdotend) || ($i >= $curdotstart && $i < $dotend)) {
if (!$dotted)
$pagerarr[] = "...";
$dotted = 1;
continue;
}
$dotted = 0;
$start = $i * $rpp + 1;
$end = $start + $rpp - 1;
if ($end > $count)
$end = $count;
$text = "$start - $end";
if ($i != $page)
$pagerarr[] = "<a href=\"{$href}page=$i" . $sort . "\"><b>$text</b></a>";
else
$pagerarr[] = "<b>$text</b>";
}
$pagerstr = join(" | ", $pagerarr);
$pagertop = "<p align=\"center\">$pager<br />$pagerstr</p>\n";
$pagerbottom = "<p align=\"center\">$pagerstr<br />$pager</p>\n";
}
else {
$pagertop = "<p align=\"center\">$pager</p>\n";
$pagerbottom = $pagertop;
}
$start = $page * $rpp;
return array($pagertop, $pagerbottom, "LIMIT $start,$rpp");
}
function downloaderdata($res) {
$rows = array();
$ids = array();
$peerdata = array();
while ($row = mysql_fetch_assoc($res)) {
$rows[] = $row;
$id = $row["id"];
$ids[] = $id;
$peerdata[$id] = array(downloaders => 0, seeders => 0, comments => 0);
}
if (count($ids)) {
$allids = implode(",", $ids);
$res = mysql_query("SELECT COUNT(*) AS c, torrent, seeder FROM peers WHERE torrent IN ($allids) GROUP BY torrent, seeder");
while ($row = mysql_fetch_assoc($res)) {
if ($row["seeder"] == "yes")
$key = "seeders";
else
$key = "downloaders";
$peerdata[$row["torrent"]][$key] = $row["c"];
}
$res = mysql_query("SELECT COUNT(*) AS c, torrent FROM comments WHERE torrent IN ($allids) GROUP BY torrent");
while ($row = mysql_fetch_assoc($res)) {
$peerdata[$row["torrent"]]["comments"] = $row["c"];
}
}
return array($rows, $peerdata);
}
function commenttable($rows)
{
global $CURUSER, $HTTP_SERVER_VARS;
begin_main_frame();
begin_frame();
$count = 0;
foreach ($rows as $row)
{
print("<p class=sub>#" . $row["id"] . " by ");
if (isset($row["username"]))
{
$title = $row["title"];
if ($title == "")
$title = get_user_class_name($row["class"]);
else
$title = htmlspecialchars($title);
print("<a name=comm". $row["id"] .
" href=userdetails.php?id=" . $row["user"] . "><b>" .
htmlspecialchars($row["username"]) . "</b></a>" . ($row["donor"] == "yes" ? "<img src=pic/star.gif alt='Donor'>" : "") . ($row["warned"] == "yes" ? "<img src=".
"/pic/warned.gif alt=\"Warned\">" : "") . " ($title)\n");
}
else
print("<a name=\"comm" . $row["id"] . "\"><i>(orphaned)</i></a>\n");
$timezone = display_date_time($row["utadded"] , $CURUSER[tzoffset] );
print(" at " . $timezone . " " .
($row["user"] == $CURUSER["id"] || get_user_class() >= UC_MODERATOR ? "- [<a href=comment.php?action=edit&cid=$row[id]>Edit</a>]" : "") .
(get_user_class() >= UC_MODERATOR ? "- [<a href=comment.php?action=delete&cid=$row[id]>Delete</a>]" : "") .
($row["editedby"] && get_user_class() >= UC_MODERATOR ? "- [<a href=comment.php?action=vieworiginal&cid=$row[id]>View original</a>]" : "") . "</p>\n");
$avatar = ($CURUSER["avatars"] == "yes" ? htmlspecialchars($row["avatar"]) : "");
if (!$avatar)
$avatar = "/pic/default_avatar.gif";
$text = format_comment($row["text"]);
$timezone = display_date_time($row["uteditedat"] , $CURUSER[tzoffset] );
if ($row["editedby"])
$text .= "<p><font size=1 class=small>Last edited by <a href=userdetails.php?id=$row[editedby]><b>$row[username]</b></a> at $timezone GMT</font></p>\n";
begin_table(true);
print("<tr valign=top>\n");
print("<td align=center width=150 style='padding: 0px'><img width=150 src=$avatar></td>\n");
print("<td class=text>$text</td>\n");
print("</tr>\n");
end_table();
}
end_frame();
end_main_frame();
}
function searchfield($s) {
return preg_replace(array('/[^a-z0-9]/si', '/^\s*/s', '/\s*$/s', '/\s+/s'), array(" ", "", "", " "), $s);
}
function genrelist() {
$ret = array();
$res = mysql_query("SELECT id, name FROM categories ORDER BY name");
while ($row = mysql_fetch_array($res))
$ret[] = $row;
return $ret;
}
function linkcolor($num) {
if (!$num)
return "red";
// if ($num == 1)
// return "yellow";
return "green";
}
function ratingpic($num) {
global $pic_base_url;
$r = round($num * 2) / 2;
if ($r < 1 || $r > 5)
return;
return "<img src=\"$pic_base_url$r.gif\" border=\"0\" alt=\"rating: $num / 5\" />";
}
function torrenttable($records, $href, $variant = "index") {
global $pic_base_url, $CURUSER;
/*if ($CURUSER["class"] < UC_VIP)
{
$gigs = $CURUSER["uploaded"] / (1024*1024*1024);
$ratio = (($CURUSER["downloaded"] > 0) ? ($CURUSER["uploaded"] / $CURUSER["downloaded"]) : 0);
if ($ratio < 0.5 || $gigs < 5) $wait = 0;
elseif ($ratio < 0.65 || $gigs < 6.5) $wait = 0;
elseif ($ratio < 0.8 || $gigs < 8) $wait = 0;
elseif ($ratio < 0.95 || $gigs < 9.5) $wait = 0;
else $wait = 0;
}*/
$sort[1] = '&d=ASC';
$sort[2] = '&d=ASC';
$sort[3] = '&d=DESC';
$sort[4] = '&d=DESC';
$sort[5] = '&d=DESC';
$sort[6] = '&d=DESC';
$sort[7] = '&d=DESC';
$sort[8] = '&d=DESC';
$sort[9] = '&d=DESC';
$sort[10] = '&d=DESC';
$sort[11] = '&d=DESC';
$sort[12] = '&d=ASC';
if(isset($_GET["sort"]))
{
$h = $_GET['h'];
$order = $_GET['d'];
$type= $_GET['sort'];
if($order == 'ASC')
$sort[$h]='&d=DESC';
else
$sort[$h]='&d=ASC';
}
?>
<table border="1" cellspacing="0" cellpadding="5">
<tr>
<td class="colhead" align="center"><a href="<?=$href ?>sort=cat_name&h=1<?print $sort[1]?>">Type</a></td>
<td class="colhead" align=left><a href="<?=$href ?>sort=name&h=2<?print $sort[2]?>">Name</a></td>
<!--<td class="heading" align=left>DL</td>-->
<?
if ($wait)
{
print("<td class=\"colhead\" align=\"center\">Wait</td>\n");
}
if ($variant == "mytorrents")
{
print("<td class=\"colhead\" align=\"center\">Edit</td>\n");
print("<td class=\"colhead\" align=\"center\">Visible</td>\n");
}
?>
<td class="colhead" align=right><a href="<?=$href ?>sort=numfiles&h=3<?print $sort[3]?>">Files</a></td>
<td class="colhead" align=right><a href="<?=$href ?>sort=comments&h=4<?print $sort[4]?>">Comm.</a></td>
<!--
<td class="colhead" align="center"><a href="<?=$href ?>sort=rating&h=5<?print $sort[5]?>">Rating</a></td>
-->
<td class="colhead" align="center"><a href="<?=$href ?>sort=added&h=6<?print $sort[6]?>">Added</a></td>
<td class="colhead" align="center"><a href="<?=$href ?>sort=added&h=7<?print $sort[7]?>">Time Alive</a></td>
<td class="colhead" align="center"><a href="<?=$href ?>sort=size&h=8<?print $sort[8]?>">Size</a></td>
<!--
<td class="colhead" align=right>Views</td>
<td class="colhead" align=right>Hits</td>
-->
<td class="colhead" align="center"><a href="<?=$href ?>sort=times_completed&h=9<?print $sort[9]?>">Snatched</a></td>
<td class="colhead" align=right><a href="<?=$href ?>sort=seeders&h=10<?print $sort[10]?>">Seeders</a></td>
<td class="colhead" align=right><a href="<?=$href ?>sort=leechers&h=11<?print $sort[11]?>">Leechers</a></td>
<?
if ($variant == "index" && get_user_class() >= UC_POWER_USER)
print("<td class=\"colhead\" align=center><a href=".$href."sort=username&h=12$sort[12]$search>Upped by</a></td>\n");
print("</tr>\n");
foreach ($records as $row) {
$id = $row["id"];
print("<tr>\n");
print("<td align=center style='padding: 0px'>");
if (isset($row["cat_name"])) {
print("<a href=\"browse.php?cat=" . $row["category"] . "\">");
if (isset($row["cat_pic"]) && $row["cat_pic"] != "")
print("<img class=\"" . $row["cat_stylesheet"] . "\" border=\"0\" src=/pic/blank2.gif alt=\"" . $row["cat_name"] . "\" />");
else
print($row["cat_name"]);
print("</a>");
}
else
print("-");
print("</td>\n");
$dispname = htmlspecialchars($row["name"]);
print("<td align=left><a href=\"details.php?");
if ($variant == "mytorrents")
print("returnto=" . urlencode($_SERVER["REQUEST_URI"]) . "&");
print("id=$id");
if ($variant == "index")
print("&hit=1");
$browse_res = mysql_query("SELECT last_browse FROM users WHERE id='".$CURUSER['id']."'");
$browse_arr = mysql_fetch_row($browse_res);
$last_browse = $browse_arr[0];
$download = "<img style=border:none alt=download src=pic/download.gif align=right>";
$time_now = gmtime();
if ($last_browse > $time_now) {
$last_browse=$time_now;
}
if (sql_timestamp_to_unix_timestamp($row["added"]) >= $last_browse)
print("\"><b>$dispname</b></a> <b>(<font color=red>NEW</font>)</b><a class=\"index\" href=\"download.php/$id/" . rawurlencode($row["filename"]) . "\">$download</a>");
else
print("\"><b>$dispname</b></a><a class=\"index\" href=\"download.php/$id/" . rawurlencode($row["filename"]) . "\">$download</a>");
if ($wait)
{
$elapsed = floor((gmtime() - strtotime($row["added"])) / 3600);
if ($elapsed < $wait)
{
$color = dechex(floor(127*($wait - $elapsed)/48 + 128)*65536);
print("<td align=center><nobr><a href=\"/faq.php#dl8\"><font color=\"$color\">" . number_format($wait - $elapsed) . " h</font></a></nobr></td>\n");
}
else
print("<td align=center><nobr>None</nobr></td>\n");
}
/*
if ($row["nfoav"] && get_user_class() >= UC_POWER_USER)
print("<a href=viewnfo.php?id=$row[id]><img src=pic/viewnfo.gif border=0 alt='View NFO'></a>\n");
if ($variant == "index")
print("<a href=\"download.php/$id/" . rawurlencode($row["filename"]) . "\"><img src=pic/download.gif border=0 alt=Download></a>\n");
else */ if ($variant == "mytorrents")
print("<td align=\"center\"><a href=\"edit.php?returnto=" . urlencode($_SERVER["REQUEST_URI"]) . "&id=" . $row["id"] . "\">edit</a>\n");
print("</td>\n");
if ($variant == "mytorrents") {
print("<td align=\"right\">");
if ($row["visible"] == "no")
print("<b>no</b>");
else
print("yes");
print("</td>\n");
}
if ($row["type"] == "single")
print("<td align=\"right\">" . $row["numfiles"] . "</td>\n");
else {
if ($variant == "index")
print("<td align=\"right\"><b><a href=\"details.php?id=$id&hit=1&filelist=1\">" . $row["numfiles"] . "</a></b></td>\n");
else
print("<td align=\"right\"><b><a href=\"details.php?id=$id&filelist=1#filelist\">" . $row["numfiles"] . "</a></b></td>\n");
}
if (!$row["comments"])
print("<td align=\"right\">" . $row["comments"] . "</td>\n");
else {
if ($variant == "index")
print("<td align=\"right\"><b><a href=\"details.php?id=$id&hit=1&tocomm=1\">" . $row["comments"] . "</a></b></td>\n");
else
print("<td align=\"right\"><b><a href=\"details.php?id=$id&page=0#startcomments\">" . $row["comments"] . "</a></b></td>\n");
}
/*print("<td align=\"center\">");
if (!isset($row["rating"]))
print("---");
else {
$rating = round($row["rating"] * 2) / 2;
$rating = ratingpic($row["rating"]);
if (!isset($rating))
print("---");
else
print($rating);
}
print("</td>\n");*/
$timezone = display_date_time($row["utadded"] , $CURUSER[tzoffset] );
print("<td align=center><nobr>" . str_replace(" ", "<br />", $timezone) . "</nobr></td>\n");
$ttl = floor((gmtime() - sql_timestamp_to_unix_timestamp($row["added"])) / 3600);
if ($ttl == 1) $ttl .= "<br>hour"; else $ttl .= "<br>hours";
print("<td align=center>$ttl</td>\n");
print("<td align=center>" . str_replace(" ", "<br>", mksize($row["size"])) . "</td>\n");
// print("<td align=\"right\">" . $row["views"] . "</td>\n");
// print("<td align=\"right\">" . $row["hits"] . "</td>\n");
$_s = "";
if ($row["times_completed"] != 1)
$_s = "s";
print("<td align=center>" . number_format($row["times_completed"]) . "<br>time$_s</td>\n");
if ($row["seeders"]) {
if ($variant == "index")
{
if (get_user_class() >= UC_POWER_USER)
{
if ($row["leechers"]) $ratio = $row["seeders"] / $row["leechers"]; else $ratio = 1;
print("<td align=right><b><a href=details.php?id=$id&hit=1&toseeders=1><font color=" . get_slr_color($ratio) . ">" . $row["seeders"] . "</font></a></b></td>\n");
}
else
print("<td align=\"right\"><span class=\"" . linkcolor($row["seeders"]) . "\">" . $row["seeders"] . "</span></td>\n");
}
else
{
if (get_user_class() >= UC_POWER_USER)
print("<td align=\"right\"><b><a class=\"" . linkcolor($row["seeders"]) . "\" href=\"details.php?id=$id&dllist=1#seeders\">" . $row["seeders"] . "</a></b></td>\n");
else
print("<td align=\"right\"><span class=\"" . linkcolor($row["seeders"]) . "\">" . $row["seeders"] . "</span></td>\n");
}
}
else
print("<td align=\"right\"><span class=\"" . linkcolor($row["seeders"]) . "\">" . $row["seeders"] . "</span></td>\n");
if ($row["leechers"]) {
if ($variant == "index")
{
if (get_user_class() >= UC_POWER_USER)
{
print("<td align=right><b><a href=details.php?id=$id&hit=1&todlers=1>" .
number_format($row["leechers"]) . ($peerlink ? "</a>" : "") .
"</b></td>\n");
}
else
print("<td align=right>" . number_format($row["leechers"]) . ($peerlink ? "" : "") . "</td>\n");
}
else
{
if (get_user_class() >= UC_POWER_USER)
{
print("<td align=\"right\"><b><a class=\"" . linkcolor($row["leechers"]) . "\" href=\"details.php?id=$id&dllist=1#leechers\">" .
$row["leechers"] . "</a></b></td>\n");
}
else
print("<td align=\"right\">" . $row["leechers"] . "</td>\n");
}
}
else
print("<td align=\"right\">0</td>\n");
if ($variant == "index" && get_user_class() >= UC_POWER_USER)
print("<td align=center>" . (isset($row["username"]) ? ("<a href=userdetails.php?id=" . $row["owner"] . "><b>" . htmlspecialchars($row["username"]) . "</b></a>") : "<i>(unknown)</i>") . "</td>\n");
print("</tr>\n");
}
print("</table>\n");
return $rows;
}
function hit_start() {
return;
global $RUNTIME_START, $RUNTIME_TIMES;
$RUNTIME_TIMES = posix_times();
$RUNTIME_START = gettimeofday();
}
function hit_count() {
return;
global $RUNTIME_CLAUSE;
if (preg_match(',([^/]+)$,', $_SERVER["SCRIPT_NAME"], $matches))
$path = $matches[1];
else
$path= "(unknown)";
$period = date("Y-m-d H") . ":00:00";
$RUNTIME_CLAUSE = "page = " . sqlesc($path) . " AND period = '$period'";
$update = "UPDATE hits SET count = count + 1 WHERE $RUNTIME_CLAUSE";
mysql_query($update);
if (mysql_affected_rows())
return;
$ret = mysql_query("INSERT INTO hits (page, period, count) VALUES (" . sqlesc($path) . ", '$period', 1)");
if (!$ret)
mysql_query($update);
}
function hit_end() {
return;
global $RUNTIME_START, $RUNTIME_CLAUSE, $RUNTIME_TIMES;
if (empty($RUNTIME_CLAUSE))
return;
$now = gettimeofday();
$runtime = ($now["sec"] - $RUNTIME_START["sec"]) + ($now["usec"] - $RUNTIME_START["usec"]) / 1000000;
$ts = posix_times();
$sys = ($ts["stime"] - $RUNTIME_TIMES["stime"]) / 100;
$user = ($ts["utime"] - $RUNTIME_TIMES["utime"]) / 100;
mysql_query("UPDATE hits SET runs = runs + 1, runtime = runtime + $runtime, user_cpu = user_cpu + $user, sys_cpu = sys_cpu + $sys WHERE $RUNTIME_CLAUSE");
}
function hash_pad($hash) {
return str_pad($hash, 20);
}
function hash_where($name, $hash) {
$shhash = preg_replace('/ *$/s', "", $hash);
return "($name = " . sqlesc($hash) . " OR $name = " . sqlesc($shhash) . ")";
}
function get_user_icons($arr, $big = false)
{
if ($big)
{
$donorpic = "starbig.gif";
$warnedpic = "warnedbig.gif";
$disabledpic = "disabledbig.gif";
$style = "style='margin-left: 4pt'";
}
else
{
$donorpic = "star.gif";
$warnedpic = "warned.gif";
$disabledpic = "disabled.gif";
$style = "style=\"margin-left: 2pt\"";
}
$pics = $arr["donor"] == "yes" ? "<img src=pic/$donorpic alt='Donor' border=0 $style>" : "";
if ($arr["enabled"] == "yes")
$pics .= $arr["warned"] == "yes" ? "<img src=pic/$warnedpic alt=\"Warned\" border=0 $style>" : "";
else
$pics .= "<img src=pic/$disabledpic alt=\"Disabled\" border=0 $style>\n";
return $pics;
}
function parked()
{
global $CURUSER;
if ($CURUSER["parked"] == "yes")
stderr("Error", "your account is parked.");
}
require "global.php";
?>