array( 'whosonline_resolveip' ) ); // ######################### REQUIRE BACK-END ############################ require_once('./global.php'); require_once(DIR . '/includes/functions_online.php'); // ####################################################################### // ######################## START MAIN SCRIPT ############################ // ####################################################################### if (!$vbulletin->options['WOLenable']) { eval(standard_error(fetch_error('whosonlinedisabled'))); } if (!($permissions['wolpermissions'] & $vbulletin->bf_ugp_wolpermissions['canwhosonline'])) { print_no_permission(); } // ####################################################################### // resolve an IP in Who's Online (this uses the WOL permissions) if ($_REQUEST['do'] == 'resolveip') { $vbulletin->input->clean_array_gpc('r', array( 'ipaddress' => TYPE_NOHTML, 'ajax' => TYPE_BOOL )); // can we actually resolve this? if (!($permissions['wolpermissions'] & $vbulletin->bf_ugp_wolpermissions['canwhosonlineip'])) { print_no_permission(); } $resolved_host = htmlspecialchars_uni(@gethostbyaddr($vbulletin->GPC['ipaddress'])); $ipaddress =& $vbulletin->GPC['ipaddress']; // no html'd already if ($vbulletin->GPC['ajax']) { if (empty($resolved_host)) { $resolved_host = $ipaddress; } require_once(DIR . '/includes/class_xml.php'); $xml = new vB_AJAX_XML_Builder($vbulletin, 'text/xml'); $xml->add_tag('ipaddress', $resolved_host, array('original' => $ipaddress)); $xml->print_xml(); } else { $navbits = construct_navbits(array( 'online.php' . $vbulletin->session->vars['sessionurl_q'] => $vbphrase['whos_online'], '' => $vbphrase['resolve_ip_address'] )); $navbar = render_navbar_template($navbits); $templater = vB_Template::create('whosonline_resolveip'); $templater->register_page_templates(); $templater->register('forumjump', $forumjump); $templater->register('ipaddress', $ipaddress); $templater->register('metarefresh', $metarefresh); $templater->register('navbar', $navbar); $templater->register('resolved_host', $resolved_host); print_output($templater->render()); } exit; } // ####################################################################### // default action $datecut = TIMENOW - $vbulletin->options['cookietimeout']; $wol_event = array(); $wol_pm = array(); $wol_calendar = array(); $wol_user = array(); $wol_forum = array(); $wol_link = array(); $wol_thread = array(); $wol_post = array(); // Variables reused in templates $perpage = $vbulletin->input->clean_gpc('r', 'perpage', TYPE_UINT); $pagenumber = $vbulletin->input->clean_gpc('r', 'pagenumber', TYPE_UINT); $sortfield = $vbulletin->input->clean_gpc('r', 'sortfield', TYPE_NOHTML); $sortorder = $vbulletin->input->clean_gpc('r', 'sortorder', TYPE_NOHTML); $vbulletin->input->clean_array_gpc('r', array( 'who' => TYPE_STR, 'ua' => TYPE_BOOL, )); ($hook = vBulletinHook::fetch_hook('online_start')) ? eval($hook) : false; // set defaults $perpage = sanitize_perpage($perpage, 200, $vbulletin->options['maxthreads']); if (!$pagenumber) { $pagenumber = 1; } $limitlower = ($pagenumber - 1) * $perpage; switch ($sortfield) { case 'location': $sqlsort = 'session.location'; break; case 'username': $sqlsort = 'user.username'; break; case 'host': $sqlsort = 'session.host'; break; case 'time': $sqlsort = 'session.lastactivity'; break; default: $sortfield = 'username'; $sqlsort = 'user.username'; } switch ($sortorder) { case 'asc': $oppositesort = 'desc'; break; case 'desc': $oppositesort = 'asc'; break; default: switch ($sortfield) { case 'host': case 'location': case 'username': $sortorder = 'asc'; $oppositesort = 'desc'; break; case 'time': $sortorder = 'desc'; $oppositesort = 'asc'; break; } } $allonly = $vbphrase['all']; $membersonly = $vbphrase['members']; $spidersonly = $vbphrase['search_bots']; $guestsonly = $vbphrase['guests']; $whoselected = array(); $uaselected = array(); switch ($vbulletin->GPC['who']) { case 'members': $showguests = false; $showmembers = true; $showspiders = false; $whoselected[1] = 'selected="selected"'; break; case 'guests': $showguests = true; $showmembers = false; $showspiders = false; $whoselected[2] = 'selected="selected"'; break; case 'spiders': $showguests = true; $showmembers = false; $showspiders = true; $whoselected[3] = 'selected="selected"'; break; default: $showguests = true; $showmembers = true; $showspiders = true; $vbulletin->GPC['who'] = ''; $whoselected[0] = 'selected="selected"'; } // No Guest display allowed. if (!$vbulletin->options['WOLguests']) { $showguests = false; $showmembers = true; $showspiders = false; } if ($vbulletin->GPC['ua']) { $uaselected[1] = 'selected="selected"'; } else { $uaselected[0] = 'selected="selected"'; } $sorturl = 'online.php?' . $vbulletin->session->vars['sessionurl'] . ($vbulletin->GPC['who'] != '' ? 'who=' . $vbulletin->GPC['who'] . '&' : '') . ($vbulletin->GPC['ua'] ? 'ua=1&' : ''); $sorturl = preg_replace('#&$#s', '', $sorturl); $show['sorturlnoargs'] = ($sorturl == 'online.php?' . $vbulletin->session->vars['sessionurl']); $templater = vB_Template::create('forumdisplay_sortarrow'); $templater->register('oppositesort', $oppositesort); $sortarrow[$sortfield] = $templater->render(); $sortarrow['oppositesort'] = $oppositesort; $seehidden = $vbulletin->userinfo['permissions']['genericpermissions'] & $vbulletin->bf_ugp_genericpermissions['canseehidden']; $hook_query_fields = $hook_query_joins = $hook_query_where = ''; ($hook = vBulletinHook::fetch_hook('online_query')) ? eval($hook) : false; $sql = " SELECT user.username, session.useragent, session.location, session.lastactivity, user.userid, user.options, session.host, session.badlocation, session.incalendar, session.inthread, user.aim, user.icq, user.msn, user.yahoo, user.skype $hook_query_fields "; if ($showmembers AND $showguests) { $order = 'isguest,'; $sql .= ",IF(ISNULL(user.username), 1, 0) as isguest "; } else { $order = ''; } if ($showmembers) { $sql .= ",IF(user.displaygroupid = 0, user.usergroupid, user.displaygroupid) AS displaygroupid, user.infractiongroupid, user.usergroupid "; } $join = $showguests ? 'LEFT' : 'INNER'; $sql .= "FROM " . TABLE_PREFIX . "session As session $join JOIN " . TABLE_PREFIX . "user AS user USING (userid) $hook_query_joins "; $temp = array(); if ($showguests) { $temp[] = " ( session.userid = 0 ) "; } if ($showmembers) { $temp[] = " ( session.userid > 0 AND session.sessionhash = ( SELECT sessionhash FROM " . TABLE_PREFIX . "session AS latest WHERE latest.userid = session.userid ORDER BY latest.lastactivity DESC LIMIT 1 ) ) "; } if ($temp) { $sqlwhere = implode(' OR ', $temp); } else { $sqlwhere = '1=1'; // In case someone does something really dumb. } $where = $wherevisible = ''; $uid = $vbulletin->userinfo['userid'] ? $vbulletin->userinfo['userid'] : -1 ; if (!$showguests) { $where = "AND session.userid > 0 "; } else { if (!$showmembers) { if ($showspiders) { $where = "AND session.isbot = 1 "; } else { $where = "AND session.isbot = 0 AND session.userid = 0 "; } } } if ($showmembers AND !$seehidden) { // Include only visible users, but still include self (if not a guest). $wherevisible = "AND (NOT IF(session.userid > 0, (user.options & " . $vbulletin->bf_misc_useroptions['invisible'] . "), 0) OR session.userid = $uid) "; } $sql .= " WHERE session.lastactivity > $datecut AND ( $sqlwhere ) $where $wherevisible $hook_query_where ORDER BY $order $sqlsort $sortorder LIMIT $limitlower, $perpage "; // Get the online data $allusers = $db->query_read_slave($sql); $countjoin = $countinvisible = ''; if ($showmembers AND !$seehidden) { $countjoin = "$join JOIN " . TABLE_PREFIX . "user AS user USING (userid) "; $countinvisible = ", IF(user.options & " . $vbulletin->bf_misc_useroptions['invisible'] . ", 1, 0) AS invisible "; } $hook_query_fields = $hook_query_joins = $hook_query_where = ''; ($hook = vBulletinHook::fetch_hook('online_user_count')) ? eval($hook) : false; /* VBIV-12365 Get the count of members and guests online. Exclude self as we will add that later (we may not be in the session table yet) */ $userscount = $db->query_read_slave(" SELECT session.userid $countinvisible $hook_query_fields FROM " . TABLE_PREFIX . "session AS session $countjoin $hook_query_joins WHERE session.lastactivity > $datecut $hook_query_where $where "); $count = array(); $numberinvisible = 0; while ($user = $db->fetch_array($userscount)) { if (!$user['userid']) { $count['guests'][] = true; } else { $count['members'][$user['userid']] = true; if ($user['invisible'] AND $user['userid'] != $uid) { $numberinvisible++; } } } // Count self as a member if necessary. if ($vbulletin->userinfo['userid'] AND $showmembers) { $count['members'][$vbulletin->userinfo['userid']] = true; } $numberguests = sizeof($count['guests']); $numbermembers = sizeof($count['members']); // Add self as guest if necessary. if (!$vbulletin->userinfo['userid'] AND !$numberguests AND (($showguests AND !$showspiders) OR ($showguests AND $showmembers))) { $numberguests++; } $moderators = $db->query_read_slave(" SELECT DISTINCT userid FROM " . TABLE_PREFIX . "moderator WHERE forumid <> -1 "); while ($mods = $db->fetch_array($moderators)) { $mod["{$mods[userid]}"] = 1; } $count = 0; $userinfo = array(); $guests = array(); // get buddylist $buddy = array(); if (trim($vbulletin->userinfo['buddylist'])) { $buddylist = preg_split('/( )+/', trim($vbulletin->userinfo['buddylist']), -1, PREG_SPLIT_NO_EMPTY); foreach ($buddylist AS $buddyuserid) { $buddy["$buddyuserid"] = 1; } } // Refresh cache if the XML has changed if ($vbulletin->options['enablespiders'] AND $lastupdate = @filemtime(DIR . '/includes/xml/spiders_vbulletin.xml') AND $lastupdate != $vbulletin->wol_spiders['lu']) { require_once(DIR . '/includes/class_xml.php'); $xmlobj = new vB_XML_Parser(false, DIR . '/includes/xml/spiders_vbulletin.xml'); $spiderdata = $xmlobj->parse(); $spiders = array(); if (is_array($spiderdata['spider'])) { foreach ($spiderdata['spider'] AS $spiderling) { $addresses = array(); $identlower = strtolower($spiderling['ident']); $spiders['agents']["$identlower"]['name'] = $spiderling['name']; $spiders['agents']["$identlower"]['type'] = $spiderling['type']; if (is_array($spiderling['addresses']['address']) AND !empty($spiderling['addresses']['address'])) { if (empty($spiderling['addresses']['address'][0])) { $addresses[0] = $spiderling['addresses']['address']; } else { $addresses = $spiderling['addresses']['address']; } foreach ($addresses AS $key => $address) { if (in_array($address['type'], array('range', 'single', 'CIDR'))) { $address['type'] = strtolower($address['type']); switch($address['type']) { case 'single': $iplong = vb_ip2long($address['value']); if ($iplong != -1 AND $iplong !== false) { $spiders['agents']["$identlower"]['lookup'][] = array( 'startip' => $iplong, ); } break; case 'range': $ips = explode('-', $address['value']); $startip = vb_ip2long(trim($ips[0])); $endip = vb_ip2long(trim($ips[1])); if ($startip != -1 AND $startip !== false AND $endip != -1 AND $endip !== false AND $startip <= $endip) { $spiders['agents']["$identlower"]['lookup'][] = array( 'startip' => $startip, 'endip' => $endip, ); } break; case 'cidr': $ipsplit = explode('/', $address['value']); $startip = vb_ip2long($ipsplit[0]); $mask = $ipsplit[1]; if ($startip != -1 AND $startip !== false AND $mask <= 31 AND $mask >= 0) { $hostbits = 32 - $mask; $hosts = (2**$hostbits) - 1; // Number of specified IPs $endip = $startip + $hosts; $spiders['agents']["$identlower"]['lookup'][] = array( 'startip' => $startip, 'endip' => $endip, ); } break; } } } } $spiders['spiderstring'] .= ($spiders['spiderstring'] ? '|' : '') . preg_quote($spiderling['ident'], '#'); } $spiders['lu'] = $lastupdate; // Write out spider cache require_once(DIR . '/includes/functions_misc.php'); build_datastore('wol_spiders', serialize($spiders), 1); $vbulletin->wol_spiders =& $spiders; } unset($spiderdata, $xmlobj); } if ($threadinfo['threadid']) { $foundviewer = true; } require_once(DIR . '/includes/class_postbit.php'); while ($users = $db->fetch_array($allusers)) { if ($users['userid']) { // Reg'd Member if (!$showmembers) { continue; } if ($threadinfo['threadid'] AND (($users['userid'] == $vbulletin->userinfo['userid']) OR ($users['inthread'] != $threadinfo['threadid']))) { continue; } $users = array_merge($users, convert_bits_to_array($users['options'] , $vbulletin->bf_misc_useroptions)); $key = $users['userid']; if (empty($userinfo["$key"]['lastactivity']) OR ($userinfo["$key"]['lastactivity'] < $users['lastactivity'])) { unset($userinfo["$key"]); // need this to sort by lastactivity $userinfo["$key"] = $users; fetch_musername($users); $userinfo["$key"]['musername'] = $users['musername']; $userinfo["$key"]['useragent'] = htmlspecialchars_uni($users['useragent']); construct_im_icons($userinfo["$key"]); if ($users['invisible']) { if (($permissions['genericpermissions'] & $vbulletin->bf_ugp_genericpermissions['canseehidden']) OR $key == $vbulletin->userinfo['userid']) { $userinfo["$key"]['hidden'] = '*'; $userinfo["$key"]['invisible'] = 0; } } if ($vbulletin->options['WOLresolve'] AND ($permissions['wolpermissions'] & $vbulletin->bf_ugp_wolpermissions['canwhosonlineip'])) { $userinfo["$key"]['host'] = @gethostbyaddr($users['host']); } $userinfo["$key"]['buddy'] = $buddy["$key"]; } } else { // Guest or Spider.. $spider = ''; if ($threadinfo['threadid'] AND ($users['inthread'] != $threadinfo['threadid'])) { continue; } if ($vbulletin->options['enablespiders'] AND !empty($vbulletin->wol_spiders)) { if (preg_match('#(' . $vbulletin->wol_spiders['spiderstring'] . ')#si', $users['useragent'], $agent)) { $agent = strtolower($agent[1]); // Check ip address if (!empty($vbulletin->wol_spiders['agents']["$agent"]['lookup'])) { $ourip = vb_ip2long($users['host']); foreach ($vbulletin->wol_spiders['agents']["$agent"]['lookup'] AS $key => $ip) { if ($ip['startip'] AND $ip['endip']) // Range or CIDR { if ($ourip >= $ip['startip'] AND $ourip <= $ip['endip']) { $spider = $vbulletin->wol_spiders['agents']["$agent"]; break; } } else if ($ip['startip'] == $ourip) // Single IP { $spider = $vbulletin->wol_spiders['agents']["$agent"]; break; } } } else { $spider = $vbulletin->wol_spiders['agents']["$agent"]; } } } if ($spider) { if (!$showspiders) { continue; } $guests["$count"] = $users; $guests["$count"]['spider'] = $spider['name']; $guests["$count"]['spidertype'] = $spider['type']; } else { if (!$showguests) { continue; } $guests["$count"] = $users; } $guests["$count"]['username'] = $vbphrase['guest']; $guests["$count"]['invisible'] = 0; $guests["$count"]['displaygroupid'] = 1; fetch_musername($guests["$count"]); if ($vbulletin->options['WOLresolve'] AND ($permissions['wolpermissions'] & $vbulletin->bf_ugp_wolpermissions['canwhosonlineip'])) { $guests["$count"]['host'] = @gethostbyaddr($users['host']); } $guests["$count"]['count'] = $count + 1; $guests["$count"]['useragent'] = htmlspecialchars_uni($users['useragent']); $count++; ($hook = vBulletinHook::fetch_hook('online_user')) ? eval($hook) : false; } } $show['ip'] = iif($permissions['wolpermissions'] & $vbulletin->bf_ugp_wolpermissions['canwhosonlineip'], true, false); $show['ajax_resolve'] = ($show['ip'] AND !$vbulletin->options['WOLresolve']); $show['useragent'] = iif($vbulletin->GPC['ua'], true, false); $show['hidden'] = iif($permissions['genericpermissions'] & $vbulletin->bf_ugp_genericpermissions['canseehidden'], true, false); $show['badlocation'] = iif($permissions['wolpermissions'] & $vbulletin->bf_ugp_wolpermissions['canwhosonlinebad'], true, false); if (is_array($userinfo)) { foreach ($userinfo AS $key => $val) { if (!$val['invisible']) { $userinfo["$key"] = process_online_location($val, 1); } } } if (is_array($guests)) { foreach ($guests AS $key => $val) { $guests["$key"] = process_online_location($val, 1); } } convert_ids_to_titles(); if (is_array($userinfo)) { foreach ($userinfo AS $key => $val) { if (!$val['invisible']) { $onlinebits[] = construct_online_bit($val, 1); } } } if (is_array($guests)) { foreach ($guests AS $key => $val) { if ($val['activity'] == 'logout' AND $val['badlocation'] == 0) { continue; } $onlinebits[] = construct_online_bit($val, 1); } } $totalonline = $numbermembers + $numberguests; $numbervisible = $numbermembers - $numberinvisible; $displaytotal = $numberguests + $numbervisible; // ### MAX LOGGEDIN USERS ################################ if (intval($vbulletin->maxloggedin['maxonline']) <= $totalonline) { $vbulletin->maxloggedin['maxonline'] = $totalonline; $vbulletin->maxloggedin['maxonlinedate'] = TIMENOW; build_datastore('maxloggedin', serialize($vbulletin->maxloggedin), 1); } $recordusers = $vbulletin->maxloggedin['maxonline']; $recorddate = vbdate($vbulletin->options['dateformat'], $vbulletin->maxloggedin['maxonlinedate'], true); $recordtime = vbdate($vbulletin->options['timeformat'], $vbulletin->maxloggedin['maxonlinedate']); $currenttime = vbdate($vbulletin->options['timeformat']); $metarefresh = ''; $show['refresh'] = false; if ($vbulletin->options['WOLrefresh']) { $show['refresh'] = true; $refreshargs = ($vbulletin->GPC['who'] ? '&who=' . $vbulletin->GPC['who'] : '') . ($vbulletin->GPC['ua'] ? '&ua=1' : ''); $refreshargs_js = ($vbulletin->GPC['who'] ? '&who=' . $vbulletin->GPC['who'] : '') . ($vbulletin->GPC['ua'] ? '&ua=1' : ''); $refreshtime = $vbulletin->options['WOLrefresh'] * 10; } $navpopup = array( 'id' => 'wol_navpopup', 'title' => $vbphrase['whos_online'], 'link' => 'online.php' . $vbulletin->session->vars['sessionurl_q'], ); construct_quick_nav($navpopup); $pagenav = construct_page_nav($pagenumber, $perpage, $displaytotal, 'online.php?' . $vbulletin->session->vars['sessionurl'] . "sort=$sortfield&order=$sortorder&pp=$perpage" . iif($vbulletin->GPC['who'], '&who=' . $vbulletin->GPC['who']) . iif($vbulletin->GPC['ua'], '&ua=1')); ($hook = vBulletinHook::fetch_hook('online_complete')) ? eval($hook) : false; $navbits = construct_navbits(array('' => $vbphrase['whos_online'])); $navbar = render_navbar_template($navbits); $templater = vB_Template::create('WHOSONLINE'); $templater->register_page_templates(); $templater->register('forumjump', $forumjump); $templater->register('navbar', $navbar); $templater->register('numberguests', $numberguests); $templater->register('numbermembers', $numbermembers); $templater->register('onlinebits', $onlinebits); $templater->register('pagenav', $pagenav); $templater->register('pagenumber', $pagenumber); $templater->register('perpage', $perpage); $templater->register('recorddate', $recorddate); $templater->register('recordtime', $recordtime); $templater->register('recordusers', $recordusers); $templater->register('refreshargs', $refreshargs); $templater->register('refreshargs_js', $refreshargs_js); $templater->register('refreshtime', $refreshtime); $templater->register('sortarrow', $sortarrow); $templater->register('sortfield', $sortfield); $templater->register('sortorder', $sortorder); $templater->register('sorturl', $sorturl); $templater->register('uaselected', $uaselected); $templater->register('whoselected', $whoselected); if ($threadinfo['threadid']) { $templater->register('threadinfo', $threadinfo); } print_output($templater->render()); /*======================================================================*\ || #################################################################### || # Downloaded: 13:05, Sun Oct 21st 2018 : $Revision: 92381 $ || # $Date: 2017-01-12 07:25:53 -0800 (Thu, 12 Jan 2017) $ || #################################################################### \*======================================================================*/ ?>