├── .gitignore
├── README.md
├── editor.js
├── forum.php
└── index.php


/.gitignore:
--------------------------------------------------------------------------------
1 | # This is just to prevent my editor (Aptana) to sending this files
2 | .project
3 | .settings/*
4 | 


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
 1 | # ForumFive v2
 2 | 
 3 | A lightweight PHP forum system in less than ~~5kB~~ 10kB. Features email login system, DNSBL checking, rate-limiting, IP logging, HTML support (including youtube/vimeo movies), moderator tools, user profiles, and a nice clean interface.
 4 | 
 5 | This system self-installs and uses an SQLite database making backups very simple.
 6 | 
 7 | Requires the system to be in the root directory `/` of the site. If you already have a website then place this system in a subdomain such as (`forum.example.com`).
 8 | 
 9 | Download the system, edit `forum.php`, and enjoy!
10 | 
11 | ![ScreenShot](http://i.imgur.com/jMxc8.png)
12 | 
13 | #### [Demo System](http://talk.davidpennington.me/) (without admin controls)
14 | 
15 | [David Pennington](http://davidpennington.me)
16 | [MIT License](http://david.mit-license.org/)
17 | 


--------------------------------------------------------------------------------
/editor.js:
--------------------------------------------------------------------------------
 1 | /*
 2 | // Returns a function, that, as long as it continues to be invoked, will not
 3 | // be triggered. The function will be called after it stops being called for
 4 | // N milliseconds. If `immediate` is passed, trigger the function on the
 5 | // leading edge, instead of the trailing.
 6 | function debounce(func, wait, immediate) {
 7 | 	var timeout;
 8 | 	return function() {
 9 | 		var context = this, args = arguments;
10 | 		var later = function() {
11 | 			timeout = null;
12 | 			if (!immediate) func.apply(context, args);
13 | 		};
14 | 		var callNow = immediate && !timeout;
15 | 		clearTimeout(timeout);
16 | 		timeout = setTimeout(later, wait);
17 | 		if (callNow) func.apply(context, args);
18 | 	};
19 | };
20 | 
21 | var updateTextarea = debounce(function(html) {
22 | 	$('textarea[name=body]').val(html);
23 | }, 250);
24 | */
25 | 
26 | // Use summernote for the HTML WYSIWYG editor
27 | $(document).ready(function() {
28 | 	
29 | 	// Progressive Enhancement
30 | 	$('textarea').hide();
31 | 
32 | 	$('form').on('submit', function() {
33 | 		$('textarea[name="body"]').html($('.summernote').code());
34 | 	});
35 | 
36 | 	$('.summernote').summernote({
37 | 		styleWithSpan: false,
38 | 		minHeight: 300, 
39 | 		/* Not working, switching to onSubmit event
40 | 		onkeyup: function(e) {
41 | 			updateTextarea($('.summernote').code());
42 | 		},
43 | 		onblur: function(e) {
44 | 			updateTextarea($('.summernote').code());
45 | 		},
46 | 		onChange: function(e) {
47 | 			updateTextarea($('.summernote').code());
48 | 		},*/
49 | 		// Fix Microsoft Word Pastes
50 | 		onpaste: function() {
51 | 			setTimeout(function() {
52 | 				var html = $(this).code();
53 | 				var newHtml = $('<div></div>').append(html)
54 | 					.find('*').removeAttr('style').removeAttr('lang').removeAttr('class').removeAttr('width').removeAttr('border').removeAttr('valign').end()
55 | 					.find('table').removeAttr('cellspacing').removeAttr('cellpadding').addClass('table').end()
56 | 					.html()
57 | 					.replace(/<o:p><\/o:p>/g, '')
58 | 					.replace(/<o:p>&nbsp;<\/o:p>/g, '');
59 | 				$(this).code('').code(newHtml);
60 | 			}, 10);
61 | 		},
62 | 		toolbar: [
63 | 			['style', ['style']],
64 | 			['font', ['bold', 'italic', 'underline', 'strikethrough', 'clear']],
65 | 			['insert', ['picture', 'link', 'video']],
66 | 			['para', ['ul', 'ol', 'paragraph', 'table']],
67 | 			['misc', ['undo', 'redo', 'fullscreen', 'codeview', 'help']],
68 | 		]
69 | 	});
70 | });


--------------------------------------------------------------------------------
/forum.php:
--------------------------------------------------------------------------------
  1 | <?php
  2 | 
  3 | // Error default reporting
  4 | //error_reporting(E_ALL ^ E_NOTICE);
  5 | 
  6 | // Enable the error display
  7 | //ini_set('display_errors', 'On');
  8 | 
  9 | // Disable PHP error logs
 10 | //ini_set('log_errors', 'Off');
 11 | 
 12 | // PHP 5 requires a default timezone to be set
 13 | date_default_timezone_set('GMT');
 14 | 
 15 | // Place the DB files outside of the public web directory so people don't download it!
 16 | define('DB', dirname(dirname(__FILE__)) . '/database.sq3');
 17 | 
 18 | // Number of seconds a user must wait to post more than two topics or comments
 19 | define('WAIT', 180);
 20 | 
 21 | // Number of seconds a trusted user must wait
 22 | define('TRUSTED_WAIT', 30);
 23 | 
 24 | // After a user has posted this many topics/comments we trust them
 25 | define('TRUST_COUNT', 50);
 26 | 
 27 | // Enable IP checking to stop bots (slows site)
 28 | define('IP_CHECK', false);
 29 | 
 30 | // Allow new users to register (existing users can still login)
 31 | define('ALLOW_REGISTER', true);
 32 | 
 33 | // List of emails for admin users
 34 | define('ADMIN', ' david@xeoncross.com yourfriend@example.com');
 35 | 
 36 | // HTTP or local file for email domain blacklist (false to disable checks)
 37 | define('EMAIL_BLACKLIST', 'https://raw.githubusercontent.com/martenson/disposable-email-domains/master/disposable_email_blacklist.conf');
 38 | 
 39 | function db($args = array(PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION))
 40 | {
 41 | 	static $db;
 42 | 	$db = $db ?: (new PDO('sqlite:' . DB, 0, 0, $args));
 43 | 	return $db;
 44 | }
 45 | 
 46 | function query($sql, $params = NULL)
 47 | {
 48 | 	$s = db()->prepare($sql);
 49 | 	$s->execute(array_values((array) $params));
 50 | 	return $s;
 51 | }
 52 | 
 53 | function insert($table, $data)
 54 | {
 55 | 	query("INSERT INTO $table(" . join(',', array_keys($data)) . ')VALUES('
 56 | 		. str_repeat('?,', count($data)-1). '?)', $data);
 57 | 	return db()->lastInsertId();
 58 | }
 59 | 
 60 | function update($table, $data, $value)
 61 | {
 62 | 	return query("UPDATE $table SET ". join('`=?,`', array_keys($data))
 63 | 		. "=?WHERE id=?", $data + array($value))->rowCount();
 64 | }
 65 | 
 66 | function delete($table, $field, $value)
 67 | {
 68 | 	return query("DELETE FROM $table WHERE $field = ?", $value)->rowCount();
 69 | }
 70 | 
 71 | function filter($string)
 72 | {
 73 | 	return nl2br(htmlspecialchars(trim(@iconv('UTF-8', 'UTF-8//TRANSLIT//IGNORE', $string))));
 74 | }
 75 | 
 76 | session_start();
 77 | $_SESSION += array('email' => '', 'admin' => '', 'trusted' => 0, 'check' => '', 'posts' => 0);
 78 | $ip = getenv('REMOTE_ADDR');
 79 | 
 80 | if(IP_CHECK AND ! $_SESSION['check'])
 81 | {
 82 | 	checkdnsrr(join('.',array_reverse(explode('.',$ip))).".opm.tornevall.org","A") && die('Bot IP');
 83 | 	$_SESSION['check'] = 1;
 84 | }
 85 | 
 86 | // Append to the array: Topic ID, Topic Headline, Topic/Comment Body, Comment ID, Delete request
 87 | extract($_REQUEST + array(
 88 | 	'email' => '', 'topicID' => 0, 'commentID' => 0, 'title' => 0, 'body' => 0, 'delete' => 0
 89 | ));
 90 | 
 91 | if( ! is_file(DB))
 92 | {
 93 | 	//unlink(DB);
 94 | 
 95 | 	/*
 96 | 	 * (u)pdated timestamp and (c)reated timestamp
 97 | 	 */
 98 | 	query('CREATE TABLE topic (
 99 | 		id INTEGER PRIMARY KEY,
100 | 		u INTEGER,
101 | 		c INTEGER,
102 | 		ip TEXT,
103 | 		email TEXT,
104 | 		title TEXT,
105 | 		body TEXT
106 | 	)');
107 | 
108 | 	query('CREATE TABLE comment (
109 | 		id INTEGER PRIMARY KEY,
110 | 		topic_id INTEGER,
111 | 		c INTEGER,
112 | 		ip TEXT,
113 | 		email TEXT,
114 | 		body TEXT
115 | 	)');
116 | 
117 | 	query('CREATE TABLE user (
118 | 		id INTEGER PRIMARY KEY,
119 | 		email TEXT UNIQUE not null,
120 | 		logins INTEGER DEFAULT 0,
121 | 		banned INTEGER DEFAULT 0,
122 | 		posts INTEGER DEFAULT 0,
123 | 		c INTEGER
124 | 	)');
125 | 
126 | 	insert('user', array('c' => time(), 'email' => 'user@example.com'));
127 | 
128 | 	for ($i=0; $i < 3; $i++)
129 | 	{
130 | 		$id = insert('topic', array(
131 | 			'u' => time() + $i,
132 | 			'c' => time() + WAIT + $i,
133 | 			'ip' => $ip,
134 | 			'email' => 'user@example.com',
135 | 			'title' => "This is a topic about $i stuff",
136 | 			'body' => "<p>This is topic $i</p>"));
137 | 
138 | 		for ($x=0; $x < 5; $x++)
139 | 		{
140 | 			insert('comment', array(
141 | 				'topic_id' => $id,
142 | 				'c' => time() + WAIT + $x,
143 | 				'ip' => $ip,
144 | 				'email' => 'user@example.com',
145 | 				'body' => "<p>This is comment $x</p>"));
146 | 		}
147 | 
148 | 		unset($id);
149 | 	}
150 | }
151 | 
152 | // Login with BrowserID
153 | if(isset($_POST['a']))
154 | {
155 | 	sleep(1); // rate-limit
156 | 
157 | 	curl_setopt_array($h = curl_init('https://verifier.login.persona.org/verify'),array(
158 | 		CURLOPT_RETURNTRANSFER=>1,
159 | 		CURLOPT_POST=>1,
160 | 		CURLOPT_POSTFIELDS=>"assertion=" .$_POST['a'] . "&audience=http://".getenv('HTTP_HOST')
161 | 	));
162 | 
163 | 	if(($d = json_decode(curl_exec($h))) && $d->status == 'okay')
164 | 	{
165 | 		$emails = file(EMAIL_BLACKLIST, FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES);
166 | 
167 | 		if(in_array($d->email, $emails)) {
168 | 			return new Exception("EMAIL");
169 | 		}
170 | 
171 | 		// Changing emails by logging in while logged in
172 | 		if($_SESSION['email'] AND $_SESSION['email'] !== $d->email) {
173 | 			query('UPDATE user SET email = ? WHERE email = ?', array($d->email, $_SESSION['email']));
174 | 		}
175 | 
176 | 		$user = query('SELECT * FROM user WHERE email = ?', array($d->email))->fetch();
177 | 
178 | 		if($user) {
179 | 
180 | 			if($user->banned) {
181 | 				return new Exception("BANNED");
182 | 			}
183 | 
184 | 			// We stop doing flood-limiting as much for trusted members
185 | 			$_SESSION['posts'] = $user->posts;
186 | 
187 | 			// We show emails for trusted members
188 | 			if($_SESSION['posts'] >= TRUST_COUNT) {
189 | 				$_SESSION['trusted'] = 1;
190 | 			}
191 | 
192 | 			query('UPDATE "user" SET logins = (logins + 1) WHERE email = ?', array($d->email));
193 | 
194 | 		} else {
195 | 
196 | 			if( ! ALLOW_REGISTER) {
197 | 				return new Exception("REGISTER");
198 | 			}
199 | 
200 | 			insert('user', array(
201 | 				'email' => $d->email,
202 | 				'c' => time()
203 | 			));
204 | 
205 | 		}
206 | 
207 | 		if(strpos(ADMIN, ($_SESSION['email'] = $d->email)))
208 | 		{
209 | 			$_SESSION['admin'] = true;
210 | 		}
211 | 	}
212 | 
213 | 	ob_end_clean();
214 | 	die('{status:true}');
215 | }
216 | 
217 | 
218 | // We don't want to waste resources on every page re-loading the user record
219 | // Only check for banning for the account when they try to modify the site
220 | if($_SESSION['email'] AND ($body OR $delete)) {
221 | 
222 | 	$banned = query('SELECT banned FROM user WHERE email = ?', array($_SESSION['email']))->fetchColumn();
223 | 
224 | 	if($banned) {
225 | 		$_SESSION['email'] = $_SESSION['admin'] = null;
226 | 		return new Exception("BANNED");
227 | 	}
228 | }
229 | 
230 | // Trying to delete a topic/comment?
231 | if($delete && $_SESSION['admin'])
232 | {
233 | 	// Also delete the comments that belong to this topic
234 | 	if($delete == 'topic') {
235 | 
236 | 		delete('comment', 'topic_id', $topicID);
237 | 		delete('topic', 'id', $topicID);
238 | 
239 | 		return new Exception("REMOVED");
240 | 	
241 | 	} elseif($delete == 'user') { // We don't actually delete users...
242 | 		
243 | 		query('UPDATE user SET banned = 1 WHERE email = ?', array($email));
244 | 
245 | 	} elseif($delete == 'unban') { // We don't actually delete users...
246 | 		
247 | 		query('UPDATE user SET banned = 0 WHERE email = ?', array($email));
248 | 
249 | 	} else if($commentID) {
250 | 
251 | 		delete('comment', 'id', $commentID);
252 | 	}
253 | }
254 | 
255 | // Fetch the topic if we are loading it
256 | if($topicID && !($topic = query('SELECT * FROM topic WHERE id = ?', $topicID)->fetch()))
257 | {
258 | 	return new Exception("MISSING");
259 | }
260 | 
261 | // Fetch the user if we are loading them
262 | if($email) {
263 | 	
264 | 	// Only admin's and the user themselves can see this page
265 | 	if( ! $_SESSION['admin'] AND $email !== $_SESSION['email']) {
266 | 		return new Exception('MISSING');
267 | 	}
268 | 
269 | 	if(!($user = query('SELECT * FROM user WHERE email = ?', $email)->fetch())) {
270 | 		return new Exception("MISSING");
271 | 	}
272 | }
273 | 
274 | // We are inserting a new topic or comment
275 | if($body && $_SESSION['email'])
276 | {
277 | 	if(mb_strlen($body) > ($topicID ? 2000 : 7000)) {
278 | 		return new Exception('LENGTH');
279 | 	}
280 | 
281 | 	$wait = WAIT;
282 | 	// Admin's and trusted users can post more often
283 | 	if($_SESSION['admin'] OR $_SESSION['posts'] >= TRUST_COUNT) {
284 | 		$_SESSION['trusted'] = true;
285 | 		$wait = TRUSTED_WAIT;
286 | 	}
287 | 
288 | 	// Make sure they haven't posted more than twice every 3 minutes
289 | 	$sql = 'SELECT COUNT(*) FROM '. ($topicID ? 'comment' : 'topic').' WHERE ip = ? AND c > ?';
290 | 	if(query($sql, array($ip, time()-$wait))->fetchColumn() > 2) {
291 | 		sleep(1); // Flood control
292 | 		return new Exception("OFTEN");
293 | 	}
294 | 
295 | 	$body = DOMCleaner::purify($body);
296 | 
297 | 	// Assume we are inserting a topic
298 | 	$data = array(
299 | 		'c' => time(),
300 | 		'ip' => $ip,
301 | 		'email' => $_SESSION['email'],
302 | 		'body' => $body
303 | 	);
304 | 
305 | 	// If this is a comment, add a reference to the topic, then update the topic modified time
306 | 	if($topicID) {
307 | 	
308 | 		$data['topic_id'] = $topicID;
309 | 		update('topic', array('u' => time()), $topicID);
310 | 	
311 | 	} else {
312 | 	
313 | 		$data['title'] = filter($title);
314 | 		$data['u'] = time();
315 | 		if( ! $data['title'] OR mb_strlen($data['title']) > 80) {
316 | 			return new Exception('HEADER');
317 | 		}
318 | 
319 | 	}
320 | 
321 | 	insert($topicID ? 'comment' : 'topic', $data);
322 | 	query('UPDATE user SET posts = (posts + 1) WHERE email = ?', $_SESSION['email']);
323 | 	$_SESSION['posts']++;
324 | }
325 | 
326 | // Close the file now so AJAX an use it
327 | session_write_close();
328 | 
329 | // We are showing a topic
330 | if($email) {
331 | 	$rows = query('SELECT * FROM comment WHERE email = ? ORDER BY id DESC LIMIT 30', array($email));
332 | } elseif($topicID) {
333 | 	$rows = query('SELECT * FROM comment WHERE topic_id = ? ORDER BY id ASC LIMIT 100', array($topicID));
334 | } else {
335 | 	$rows = query('SELECT * FROM topic ORDER BY id DESC LIMIT 100');
336 | }
337 | 
338 | 
339 | /***************************END****************************/
340 | 
341 | 
342 | /**
343 |  * DOMCleaner
344 |  *
345 |  * Requires LIBXML / PHP DOM which is now standard in PHP
346 |  * @author David Pennington
347 |  * @url http://github.com/xeoncross
348 |  */
349 | class DOMCleaner {
350 | 
351 | 	public static $whitelist = array(
352 | 		'a' => array('href'),
353 | 		'b', 'em', 'i', 'u', 'strike', 'sup', 'sub',
354 | 		'h1', 'h2', 'h3', 'h4', 'h5', 'h6',
355 | 		'p', 'blockquote','pre', 'code','ul','ol','li',
356 | 		'img' => array('src', 'alt', 'title'),
357 | 		'table', 'thead', 'tbody', 'tfoot', 'tr', 'th', 'td',
358 | 		'br', '#text', 'html', 'body',
359 | 
360 | 		// Youtube, vimeo, etc...
361 | 		'iframe' => array('src', 'class', 'allowtransparency', 'allowfullscreen', 'width', 'height', 'frameborder')
362 | 	);
363 | 
364 | 
365 | 	public static $video_sites = array(
366 | 		//'www.dailymotion.com',
367 | 		'www.youtube.com',
368 | 		'player.vimeo.com'
369 | 	);
370 | 
371 | 	public static function decode($string)
372 | 	{
373 | 		while (strcmp($string, ($temp = html_entity_decode($string, ENT_QUOTES, 'UTF-8'))) !== 0) {
374 | 			$string = $temp;
375 | 		}
376 | 
377 | 		return $string;
378 | 	}
379 | 
380 | 	public static function purify($html, array $whitelist = null, $protocols = 'http|https|ftp')
381 | 	{
382 | 		libxml_use_internal_errors(true) AND libxml_clear_errors();
383 | 
384 | 		if (is_object($html)) {
385 | 
386 | 			if ( ! in_array($html->nodeName, array_keys($whitelist))) {
387 | 				$html->parentNode->removeChild($html);
388 | 				return;
389 | 			}
390 | 
391 | 			if ($html->hasChildNodes() === true) {
392 | 
393 | 				// Purify/Delete child elements in reverse order so we don't messup DOM tree
394 | 				foreach (range($html->childNodes->length - 1, 0) as $i) {
395 | 					static::purify($html->childNodes->item($i), $whitelist, $protocols);
396 | 				}
397 | 			}
398 | 
399 | 			if ($html->hasAttributes() === true) {
400 | 
401 | 				foreach (range($html->attributes->length - 1, 0) as $i) {
402 | 					$attribute = $html->attributes->item($i);
403 | 
404 | 					if( ! $attribute->value OR ! in_array($attribute->name, $whitelist[$html->nodeName])) {
405 | 						$html->removeAttributeNode($attribute);
406 | 						continue;
407 | 					}
408 | 
409 | 					$value = static::decode($attribute->value);
410 | 					
411 | 					if($attribute->name == 'src') {
412 | 						$domain = parse_url($value, PHP_URL_HOST);
413 | 
414 | 						// Only EVER allow embeds from Youtube / Vimeo
415 | 						if( ! $domain OR ! in_array($domain, static::$video_sites)) {
416 | 							$html->removeAttributeNode($attribute);
417 | 						}
418 | 
419 | 						continue;
420 | 					}
421 | 
422 | 					if(strpos($value, ':') !== false) {
423 | 						if(preg_match('~([^:]{0,10}):~', $value, $match)) {
424 | 							if ( ! in_array(strtolower(trim($match[1])), $protocols)) {
425 | 								$html->removeAttributeNode($attribute);
426 | 							}
427 | 						}
428 | 					}
429 | 				}
430 | 			}
431 | 
432 | 			return;
433 | 		}
434 | 
435 | 		if( ! trim($html)) {
436 | 			return;
437 | 		}
438 | 
439 | 		$dom = new DomDocument();
440 | 		if(! $dom->loadHTML($html)) {
441 | 			return;
442 | 		}
443 | 		
444 | 		if( ! $whitelist) {
445 | 			$whitelist = static::$whitelist;
446 | 		}
447 | 
448 | 		// Allow tags to be given without the "tag => array()" syntax
449 | 		foreach ($whitelist as $tag => $attributes) {
450 | 			if (is_int($tag)) {
451 | 				unset($whitelist[$tag]);
452 | 				$whitelist[$attributes] = array();
453 | 			}
454 | 		}
455 | 
456 | 		$protocols = explode('|', strtolower($protocols));
457 | 		static::purify($dom->documentElement, $whitelist, $protocols);
458 | 
459 | 		return preg_replace('~<(?:!DOCTYPE|/?(?:html|body))[^>]*>\s*~i', '', $dom->saveHTML());
460 | 	}
461 | 
462 | }
463 | 
464 | 


--------------------------------------------------------------------------------
/index.php:
--------------------------------------------------------------------------------
  1 | <?php $exception = require('forum.php'); ?>
  2 | <!DOCTYPE html>
  3 | <html lang="en">
  4 | <head>
  5 | 	<meta charset="utf-8">
  6 | 	<!-- for Persona on IE -->
  7 | 	<meta http-equiv="X-UA-Compatible" content="IE=edge">
  8 | 	<meta name="viewport" content="width=device-width, initial-scale=1">
  9 | 	<meta name="description" content="Small, simple and lightweight forum system write in PHP" />
 10 | 	<meta name="generator" content="Forum Five" />
 11 | 	<meta name="author" content="">
 12 | 
 13 | 	<title><?php if(!empty($topic)) print $topic['title'] . ' - '; ?>Forum Five</title>
 14 | 
 15 | 	<!-- Bootstrap core CSS -->
 16 | 	<link rel="stylesheet" href="//netdna.bootstrapcdn.com/bootstrap/3.3.0/css/bootstrap.min.css" />
 17 | 
 18 | 	<!-- Custom styles for this template -->
 19 | 	<style type="text/css">
 20 | 	/* Space out content a bit */
 21 | 	body {
 22 | 		padding-top: 20px;
 23 | 		padding-bottom: 20px;
 24 | 	}
 25 | 
 26 | 	img {
 27 | 		max-width: 700px;
 28 | 		max-height: 700px;
 29 | 	}
 30 | 
 31 | 	/* Everything but the jumbotron gets side spacing for mobile first views */
 32 | 	.header,
 33 | 	.marketing,
 34 | 	.footer {
 35 | 		padding-right: 15px;
 36 | 		padding-left: 15px;
 37 | 	}
 38 | 
 39 | 	/* Custom page header */
 40 | 	.header {
 41 | 		border-bottom: 1px solid #e5e5e5;
 42 | 	}
 43 | 	/* Make the masthead heading the same height as the navigation */
 44 | 	.header h3 {
 45 | 		padding-bottom: 19px;
 46 | 		margin-top: 0;
 47 | 		margin-bottom: 0;
 48 | 		line-height: 40px;
 49 | 	}
 50 | 
 51 | 	/* Custom page footer */
 52 | 	.footer {
 53 | 		padding-top: 19px;
 54 | 		color: #777;
 55 | 		border-top: 1px solid #e5e5e5;
 56 | 	}
 57 | 
 58 | 	/* Customize container */
 59 | 	@media (min-width: 768px) {
 60 | 		.container {
 61 | 			max-width: 730px;
 62 | 		}
 63 | 	}
 64 | 	.container-narrow > hr {
 65 | 		margin: 30px 0;
 66 | 	}
 67 | 
 68 | 	/* Main marketing message and sign up button */
 69 | 	.jumbotron {
 70 | 		text-align: center;
 71 | 		border-bottom: 1px solid #e5e5e5;
 72 | 	}
 73 | 
 74 | 	/* Supporting marketing content */
 75 | 	.marketing {
 76 | 		margin: 40px 0;
 77 | 	}
 78 | 	.marketing p + h4 {
 79 | 		margin-top: 28px;
 80 | 	}
 81 | 
 82 | 	/* Responsive: Portrait tablets and up */
 83 | 	@media screen and (min-width: 768px) {
 84 | 		/* Remove the padding we set earlier */
 85 | 		.header,
 86 | 		.marketing,
 87 | 		.footer {
 88 | 			padding-right: 0;
 89 | 			padding-left: 0;
 90 | 		}
 91 | 		/* Space out the masthead */
 92 | 		.header {
 93 | 			margin-bottom: 30px;
 94 | 		}
 95 | 		/* Remove the bottom border on the jumbotron for visual effect */
 96 | 		.jumbotron {
 97 | 			border-bottom: 0;
 98 | 		}
 99 | 	}
100 | 	</style>
101 | 
102 | 	<?php if($_SESSION['email']) { ?>
103 | 		<link rel="stylesheet" href="//netdna.bootstrapcdn.com/font-awesome/4.0.3/css/font-awesome.min.css" />
104 | 		<link rel="stylesheet" href="//cdnjs.cloudflare.com/ajax/libs/summernote/0.6.0/summernote.css">
105 | 	<?php } ?>
106 | 
107 | 	<!-- HTML5 shim and Respond.js for IE8 support of HTML5 elements and media queries -->
108 | 	<!--[if lt IE 9]>
109 | 		<script src="https://oss.maxcdn.com/html5shiv/3.7.2/html5shiv.min.js"></script>
110 | 		<script src="https://oss.maxcdn.com/respond/1.4.2/respond.min.js"></script>
111 | 	<![endif]-->
112 | </head>
113 | 
114 | <body>
115 | 
116 | 	<div class="container">
117 | 		<div class="header">
118 | 			<nav>
119 | 				<ul class="nav nav-pills pull-right">
120 | 
121 | 					<li><a href="/">Home</a></li>
122 | 					<li><a href="/?t=1">FAQ</a></li>
123 | 
124 | 					<?php if($_SESSION['email']) { ?>
125 | 						<li><a href="#" id="login_button">Change Email</a></li>
126 | 						<li><a href="#" id="logout_button">Logout</a></li>
127 | 
128 | 					<?php } else { ?>
129 | 						<li><a href="#" id="login_button">Login/Register</a></li>
130 | 					<?php } ?>
131 | 				</ul>
132 | 			</nav>
133 | 			<h3 class="text-muted"><a href="/">Forum Five</a></h3>
134 | 		</div>
135 | 
136 | 		<div class="marketing">
137 | 
138 | 		<?php if(! $exception instanceof Exception) { ?>
139 | 
140 | 			<?php if($email) { ?>
141 | 
142 | 				<div class="jumbotron">
143 | 
144 | 					<a href="http://www.gravatar.com/<?= md5($user['email']); ?>">
145 | 						<img src="http://www.gravatar.com/avatar/<?= md5($user['email']); ?>?s=80&r=g&d=mm" title="Gravatar.com Image">
146 | 					</a>
147 | 
148 | 					<h2><?= $user['email']; ?></h2>
149 | 					<p class="lead">Joined <?= date('D, M jS Y H:i:s', $user['c']); ?></p>
150 | 					<p>User has <?= $user['posts']; ?> posts and has logged in <?= $user['logins']; ?> times</p>
151 | 
152 | 					<?php if($_SESSION['admin']) { ?>
153 | 						<?php if($user['banned']) { ?>
154 | 							<a class="btn btn-success" href="?delete=unban&email=<?= $user['email']; ?>">Un-Ban User</a>
155 | 						<?php } else { ?>
156 | 							<a class="btn btn-danger" href="?delete=user&email=<?= $user['email']; ?>">Ban User</a>
157 | 						<?php } ?>
158 | 					<?php } ?>
159 | 
160 | 				</div>
161 | 
162 | 				<table class="table table-hover">
163 | 
164 | 					<thead>
165 | 						<tr>
166 | 							<th>IP</th>
167 | 							<th>Comment</th>
168 | 							<th>Date</th>
169 | 						</tr>
170 | 					</thead>
171 | 					<tbody>
172 | 
173 | 					<?php foreach($rows->fetchAll() as $row) { ?>
174 | 						<tr class="comments">
175 | 							<td>
176 | 								<a href="http://whatismyipaddress.com/ip/<?= $row['ip']; ?>" target="_blank"><?= $row['ip']; ?></a>
177 | 							</td>
178 | 							<td>
179 | 								<a href="/?topicID=<?= $row['topic_id']; ?>">view topic</a>							
180 | 							</td>
181 | 							<td>
182 | 								<?= date('D, M jS Y ga', $row['c']); ?><br>
183 | 								<a href="/?delete=comment&commentID=<?= $row['id']; ?>&email=<?= $user['email']; ?>&topicID=<?= $row['topic_id']; ?>">delete comment</a>
184 | 							</td>
185 | 							<td>
186 | 								<?= substr(strip_tags($row['body']), 0, 100); ?>
187 | 							</td>
188 | 						</tr>
189 | 					<?php } ?>
190 | 
191 | 					</tbody>
192 | 				</table>
193 | 
194 | 
195 | 
196 | 			<?php } elseif($topicID) { ?>
197 | 
198 | 				<div class="media">
199 | 					<?php if($_SESSION['admin']) { ?>
200 | 						<a class="media-left" href="?email=<?= $topic['email'];?>">
201 | 							<img src="http://www.gravatar.com/avatar/<?= md5($topic['email']); ?>?s=40&r=g&d=mm" title="Gravatar.com Image">
202 | 						</a>
203 | 					<?php } else { ?>
204 | 						<a class="media-left" href="#">
205 | 							<img src="http://www.gravatar.com/avatar/<?= md5($topic['email']); ?>?s=40&r=g&d=mm" title="Gravatar.com Image">
206 | 						</a>
207 | 					<?php } ?>
208 | 					
209 | 					<div class="media-body">
210 | 
211 | 						<h3 class="media-heading"><?= $topic['title']; ?></h4>
212 | 
213 | 						<?php if($_SESSION['admin']) {?>
214 | 							<h5 class="media-heading"><?= $topic['email']; ?> -
215 | 							<a href="/?delete=topic&topicID=<?= $topic['id']; ?>">delete</a></h5>
216 | 						<?php } ?>
217 | 
218 | 						<?= $topic['body']; ?>
219 | 						
220 | 					</div>
221 | 				</div>
222 | 
223 | 				<hr>
224 | 
225 | 				<div id="comments">
226 | 					<?php foreach($rows->fetchAll() as $row) { ?>
227 | 
228 | 						<div class="media">
229 | 
230 | 							<?php if($_SESSION['admin']) { ?>
231 | 								<a class="media-left" href="?email=<?= $topic['email'];?>">
232 | 									<img src="http://www.gravatar.com/avatar/<?= md5($row['email']); ?>?s=40&r=g&d=mm" title="Gravatar.com Image">
233 | 								</a>
234 | 							<?php } else { ?>
235 | 								<a class="media-left" href="#">
236 | 									<img src="http://www.gravatar.com/avatar/<?= md5($row['email']); ?>?s=40&r=g&d=mm" title="Gravatar.com Image">
237 | 								</a>
238 | 							<?php } ?>
239 | 							
240 | 							<div class="media-body">
241 | 
242 | 								<?php if($_SESSION['admin']) {?>
243 | 									<h4 class="media-heading"><?= $row['email']; ?> - <a href="/?delete=comment&commentID=<?= $row['id']; ?>&topicID=<?= $topic['id']; ?>">delete</a></h4>
244 | 								<?php } ?>
245 | 
246 | 								<?= $row['body']; ?>
247 | 								
248 | 							</div>
249 | 						</div>
250 | 
251 | 						<hr>
252 | 
253 | 					<?php } ?>
254 | 				</div>
255 | 
256 | 				<?php if($_SESSION['email']) { ?>
257 | 
258 | 					<form role="form" method="post">
259 | 						<legend>Leave a Reply</legend>
260 | 						<div class="form-group">
261 | 							<div class="summernote"></div>
262 | 							<textarea class="form-control" rows="7" name="body"></textarea>
263 | 						</div>
264 | 						<button type="submit" class="btn btn-default">Submit</button>
265 | 					</form>
266 | 
267 | 				<?php } ?>
268 | 
269 | 			<?php } else { ?>
270 | 
271 | 				<div class="jumbotron">
272 | 					<h1>It's all just talk</h1>
273 | 					<p class="lead">This is a demonstration install of the <a href="https://github.com/Xeoncross/forumfive">ForumFive</a> PHP forum system. Please be respectful.</p>
274 | 				</div>
275 | 
276 | 				<table class="table table-hover">
277 | 
278 | 					<!--<caption>List of recent forum posts</caption>-->
279 | 
280 | 					<thead>
281 | 						<tr>
282 | 							<th>User</th>
283 | 							<th>Topic</th>
284 | 							<th>Last Activity</th>
285 | 						</tr>
286 | 					</thead>
287 | 					<tbody>
288 | 
289 | 					<?php foreach($rows->fetchAll() as $row) { ?>
290 | 						<tr class="topics">
291 | 							<td>
292 | 								<?php if($_SESSION['admin'] OR $_SESSION['email'] === $row['email']) { ?>
293 | 									<a href="?email=<?= $row['email'];?>">
294 | 										<img src="http://www.gravatar.com/avatar/<?php echo md5($row['email']); ?>?s=30&r=g&d=mm" class="img-polaroid" />
295 | 									</a>
296 | 								<?php } else { ?>
297 | 									<img src="http://www.gravatar.com/avatar/<?php echo md5($row['email']); ?>?s=30&r=g&d=mm" class="img-polaroid" />
298 | 								<?php } ?>
299 | 							</td>
300 | 							<td>
301 | 								<a href="?topicID=<?= $row['id']; ?>"><?= $row['title']; ?></a><br>
302 | 
303 | 
304 | 								<?php if($_SESSION['admin']) {?>
305 | 									<?= $row['email']; ?> - <a href="/?delete=topic&topicID=<?= $row['id']; ?>">delete</a>
306 | 								<?php } ?>
307 | 							</td>
308 | 							<td>
309 | 								<?= date('D, M jS Y ga', $row['u']); ?>
310 | 							</td>
311 | 						</tr>
312 | 					<?php } ?>
313 | 
314 | 					</tbody>
315 | 				</table>
316 | 
317 | 				<?php if($_SESSION['email']) { ?>
318 | 
319 | 					<form role="form" method="post">
320 | 						<legend>Create new Topic</legend>
321 | 						<div class="form-group">
322 | 							<label for="title">Title</label>
323 | 							<input type="text" class="form-control" name="title">
324 | 						</div>
325 | 						<div class="form-group">
326 | 							<label for="body">Body</label>
327 | 							<div class="summernote"></div>
328 | 							<textarea class="form-control" rows="10" name="body"></textarea>
329 | 						</div>
330 | 						<button type="submit" class="btn btn-default">Submit</button>
331 | 					</form>
332 | 
333 | 				<?php } ?>
334 | 
335 | 			<?php } ?>
336 | 
337 | 		<?php } elseif($exception instanceof Exception) { //var_dump($exception); //$e = $exception; //catch(Exception $e) { ?>
338 | 
339 | 			<div id="exception">
340 | 				<?php if($exception->getMessage() == 'MISSING') { ?>
341 | 					Sorry, we could not find the topic
342 | 				<?php } elseif($exception->getMessage() == 'OFTEN') { ?>
343 | 					Sorry, you can only post twice every <?= ($_SESSION['trusted'] ? TRUSTED_WAIT : WAIT) / 60; ?> minutes. Please wait a few moments and then refresh the page to re-send your post.
344 | 				<?php } elseif($exception->getMessage() == 'REMOVED') { ?>
345 | 					The topic/comment has been removed.
346 | 				<?php } elseif($exception->getMessage() == 'EMAIL') { ?>
347 | 					Sorry, your email provider is banned because of spam accounts.
348 | 				<?php } elseif($exception->getMessage() == 'BANNED') { ?>
349 | 					Sorry, your account is banned. Remember the golden rule, "So whatever you wish that others would do to you, do also to them" - Matthew 7:12
350 | 				<?php } elseif($exception->getMessage() == 'LENGTH') { ?>
351 | 					Sorry, your topic or comment is to long.
352 | 				<?php } elseif($exception->getMessage() == 'REGISTER') { ?>
353 | 					Sorry, registration is currently disabled.
354 | 				<?php } elseif($exception->getMessage() == 'HEADER') { ?>
355 | 					You must have a topic header.
356 | 				<?php } ?>
357 | 			</div>
358 | 
359 | 		<?php } ?>
360 | 
361 | 		<?php //print '<pre>' . print_r($_SESSION, TRUE) . '</pre>'; ?>
362 | 
363 | 		<br>
364 | 
365 | 		<footer class="footer">
366 | 			
367 | 			<?php if($_SESSION['email']): ?>
368 | 				
369 | 				<p>Welcome <?= $_SESSION['email']; ?>, you have posted <?= $_SESSION['posts']; ?> messages.
370 | 				<?php if(TRUST_COUNT > $_SESSION['posts']) {
371 | 					print 'You will be a moderator after ' . (TRUST_COUNT - $_SESSION['posts']); ?> more posts.</p>
372 | 				<?php } ?>
373 | 
374 | 			<?php elseif ( ! ALLOW_REGISTER): ?>
375 | 				<p>Registration is currently disabled. Existing users can still login.</p>
376 | 
377 | 			<?php else: ?>
378 | 				<p>&copy; <?= date('Y'); ?> <?= htmlspecialchars(getenv('HTTP_HOST')); ?> - Powered by <a href="https://github.com/Xeoncross/forumfive">forumfive</a></p>
379 | 			<?php endif; ?>
380 | 
381 | 
382 | 		</footer>
383 | 
384 | 	</div> <!-- /container -->
385 | 
386 | 
387 | 	<script src="https://login.persona.org/include.js"></script>
388 | 
389 | 	<!-- include libraries(jQuery, bootstrap, fontawesome) -->
390 | 	<script type="text/javascript" src="//code.jquery.com/jquery-1.9.1.min.js"></script> 
391 | 	
392 | 	<?php if($_SESSION['email']) { ?>
393 | 		<!-- Summernote editor -->
394 | 		<script type="text/javascript" src="//netdna.bootstrapcdn.com/bootstrap/3.3.0/js/bootstrap.min.js"></script>
395 | 		<script src="//cdnjs.cloudflare.com/ajax/libs/summernote/0.5.2/summernote.min.js"></script>
396 | 		<script src="/editor.js"></script>
397 | 	<?php } ?>
398 | 
399 | 	<script>
400 | 	$(function()
401 | 	{
402 | 		var currentUser = <?= $_SESSION['email'] ? "'". $_SESSION['email'] . "'" : 'null'; ?>;
403 | 
404 | 		navigator.id.watch({
405 | 			loggedInUser: currentUser,
406 | 			onlogin: function(assertion)
407 | 			{
408 | 				$.ajax({
409 | 					type: 'POST',
410 | 					data: { a: assertion },
411 | 					success: function(res, status, xhr)
412 | 					{
413 | 						window.location.href = window.location.href;
414 | 					},
415 | 					error: function(xhr, status, err)
416 | 					{
417 | 						alert("Login failure: " + err);
418 | 					}
419 | 				});
420 | 			},
421 | 			onlogout: function()
422 | 			{
423 | 				// Delete the session cookie
424 | 				var date = new Date();
425 | 				document.cookie = "<?= session_name(); ?>=; expires="+date.toGMTString()+"; path=/";
426 | 				window.location.href = window.location.href;
427 | 			}
428 | 		});
429 | 
430 | 		$('#login_button').click(function(e)
431 | 		{
432 | 			e.preventDefault();
433 | 			navigator.id.request();
434 | 			return false;
435 | 		});
436 | 
437 | 		$('#logout_button').click(function(e)
438 | 		{
439 | 			e.preventDefault();
440 | 			navigator.id.logout();
441 | 			return false;
442 | 		});
443 | 
444 | 	});
445 | 
446 | 	if (!('contains' in Array.prototype)) {
447 | 		Array.prototype.contains = function(arr, startIndex) {
448 | 			return ''.indexOf.call(this, arr, startIndex) !== -1;
449 | 		};
450 | 	}
451 | 	</script>
452 | 
453 | </body>
454 | </html>
455 | 


--------------------------------------------------------------------------------