1
0
mirror of https://github.com/vichan-devel/vichan.git synced 2024-12-13 00:01:16 +01:00
vichan/create.php

108 lines
3.4 KiB
PHP
Raw Normal View History

2014-05-17 22:01:14 +02:00
<?php
include "inc/functions.php";
2014-09-26 00:53:56 +02:00
2014-05-17 22:01:14 +02:00
checkBan('*');
if (!isset($_POST['uri'], $_POST['title'], $_POST['subtitle'], $_POST['username'], $_POST['password'])) {
2015-03-19 03:27:47 +01:00
include '8chan-captcha/functions.php';
2014-09-26 00:53:56 +02:00
2014-05-17 22:01:14 +02:00
$password = base64_encode(openssl_random_pseudo_bytes(9));
2015-03-19 03:27:47 +01:00
$captcha = generate_captcha($config['captcha']['extra']);
$body = Element("8chan/create.html", array("config" => $config, "password" => $password, "captcha" => $captcha));
2014-09-27 01:52:02 +02:00
echo Element("page.html", array("config" => $config, "body" => $body, "title" => _("Create your board"), "subtitle" => _("before someone else does")));
2014-05-17 22:01:14 +02:00
}
else {
$uri = $_POST['uri'];
$title = $_POST['title'];
$subtitle = $_POST['subtitle'];
$username = $_POST['username'];
$password = $_POST['password'];
2015-03-19 03:27:47 +01:00
$resp = file_get_contents($config['captcha']['provider_check'] . "?" . http_build_query([
'mode' => 'check',
'text' => $_POST['captcha_text'],
'extra' => $config['captcha']['extra'],
'cookie' => $_POST['captcha_cookie']
]));
2014-09-26 00:53:56 +02:00
2014-11-10 07:18:06 +01:00
if (!preg_match('/^[a-z0-9]{1,30}$/', $uri))
2014-09-27 01:52:02 +02:00
error(_('Invalid URI'));
2014-05-17 22:01:14 +02:00
if (!(strlen($title) < 40))
2014-09-27 01:52:02 +02:00
error(_('Invalid title'));
2014-05-17 22:01:14 +02:00
if (!(strlen($subtitle) < 200))
2014-09-27 01:52:02 +02:00
error(_('Invalid subtitle'));
2014-05-17 22:01:14 +02:00
if (!preg_match('/^[a-zA-Z0-9._]{1,30}$/', $username))
2014-09-27 01:52:02 +02:00
error(_('Invalid username'));
2015-03-19 03:27:47 +01:00
if ($resp !== '1')
error($config['error']['captcha']);
2014-09-26 00:53:56 +02:00
2014-05-17 22:01:14 +02:00
foreach (listBoards() as $i => $board) {
if ($board['uri'] == $uri)
2014-09-27 01:52:02 +02:00
error(_('Board already exists!'));
2014-05-17 22:01:14 +02:00
}
foreach ($config['banned_boards'] as $i => $w) {
2014-05-17 22:01:14 +02:00
if ($w[0] !== '/') {
if (strpos($uri,$w) !== false)
2014-09-27 01:52:02 +02:00
error(_("Cannot create board with banned word $w"));
2014-05-17 22:01:14 +02:00
} else {
if (preg_match($w,$uri))
2014-09-27 01:52:02 +02:00
error(_("Cannot create board matching banned pattern $w"));
2014-05-17 22:01:14 +02:00
}
}
2014-09-26 00:53:56 +02:00
$query = prepare('SELECT ``username`` FROM ``mods`` WHERE ``username`` = :username');
$query->bindValue(':username', $username);
2014-05-17 22:01:14 +02:00
$query->execute() or error(db_error($query));
$users = $query->fetchAll(PDO::FETCH_ASSOC);
2014-09-26 00:53:56 +02:00
if (sizeof($users) > 0){
2014-09-27 01:52:02 +02:00
error(_('The username you\'ve tried to enter already exists!'));
2014-05-17 22:01:14 +02:00
}
$salt = generate_salt();
$password = hash('sha256', $salt . sha1($password));
$query = prepare('INSERT INTO ``mods`` VALUES (NULL, :username, :password, :salt, :type, :boards)');
$query->bindValue(':username', $username);
$query->bindValue(':password', $password);
$query->bindValue(':salt', $salt);
$query->bindValue(':type', 20);
$query->bindValue(':boards', $uri);
$query->execute() or error(db_error($query));
$query = prepare('INSERT INTO ``boards`` (`uri`, `title`, `subtitle`) VALUES (:uri, :title, :subtitle)');
2014-05-17 22:01:14 +02:00
$query->bindValue(':uri', $_POST['uri']);
$query->bindValue(':title', $_POST['title']);
$query->bindValue(':subtitle', $_POST['subtitle']);
$query->execute() or error(db_error($query));
$query = Element('posts.sql', array('board' => $uri));
query($query) or error(db_error());
if (!openBoard($_POST['uri']))
error(_("Couldn't open board after creation."));
if ($config['cache']['enabled'])
cache::delete('all_boards');
// Build the board
buildIndex();
rebuildThemes('boards');
2014-09-27 01:52:02 +02:00
$query = prepare("INSERT INTO ``board_create``(uri) VALUES(:uri)");
$query->bindValue(':uri', $uri);
$query->execute() or error(db_error());
2014-05-17 22:01:14 +02:00
2014-06-18 00:58:53 +02:00
_syslog(LOG_NOTICE, "New board: $uri");
2014-09-27 01:52:02 +02:00
$body = Element("8chan/create_success.html", array("config" => $config, "password" => $_POST['password'], "uri" => $uri));
2014-05-17 22:01:14 +02:00
2014-09-27 01:52:02 +02:00
echo Element("page.html", array("config" => $config, "body" => $body, "title" => _("Success"), "subtitle" => _("This was a triumph")));
2014-05-17 22:01:14 +02:00
}
2014-09-26 00:53:56 +02:00
?>