Hello,
I'm sorry but I don't have undertand how I do.
This is my util.php file
******************************************************************************
<?php
/***************************************************************************
* Orca Interactive Forum Script
* -----------------
* begin : Fr Nov 10 2006
* copyright : (C) 2006 BoonEx Group
* website : http://www.boonex.com/
* This file is part of Orca - Interactive Forum Script
*
* Orca is free software. This work is licensed under a Creative Commons Attribution 3.0 License.
* http://creativecommons.org/licenses/by/3.0/
*
* Orca is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY;
* without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
* See the Creative Commons Attribution 3.0 License for more details.
* You should have received a copy of the Creative Commons Attribution 3.0 License along with Orca,
* see license.txt file; if not, write to marketing@boonex.com
***************************************************************************/
// util functions
/**
* Output XML or make XSL transformation and output ready HTML
* @param $code XML code
* @param $xsl file name
* @param $trans make xsl transformation or not
*/
function transCheck ($xml, $xsl, $trans, $browser_transform = 0)
{
global $gConf;
if ('server' == $gConf['xsl_mode'] && $trans)
{
$now = gmdate('D, d M Y H:i:s') . ' GMT';
header("Expires: $now");
header("Last-Modified: $now");
header("Cache-Control: no-cache, must-revalidate");
header("Pragma: no-cache");
$xslt = new BxXslTransform ($xml, $xsl, BXXSLTRANSFORM_SF);
$xslt->setHeader ('Content-Type: text/html; charset=UTF-8');
$s = $xslt->process ();
$s = '<'.'?xml version="1.0" encoding="UTF-8"?'.'>' . $s;
$i1 = strpos ($s, '<?xml');
if (FALSE !== $i1)
{
$i2 = strpos ($s, '?>') + 2;
echo substr ($s, 0, $i1);
echo substr ($s, $i2);
}
else
{
echo $s;
}
}
else
{
header ('Content-Type: application/xml; charset=UTF-8');
echo '<' . '?xml version="1.0" encoding="UTF-8"?' . '>';
if ('client' == $gConf['xsl_mode'] && $xsl)
{
echo '<' . '?xml-stylesheet type="text/xsl" href="'.str_replace($gConf['dir']['xsl'],$gConf['url']['xsl'],$xsl).'"?'.'>';
}
echo $xml;
}
}
/**
* Convert array to XML format
*
* @param $arr array with data
* @param $tag main tag <main tag>XML data</main tag>
* @return XML presentation of data
*/
function array2xml($arr, $tag = false)
{
$res = '';
foreach($arr as $k=>$v)
{
if(is_array($v))
{
if(!is_numeric($k) && trim($k))//
$res .= count($v) ? '<'.$k.'>'.array2xml($v).'</'.$k.'>' : '<'.$k.'/>';
elseif($tag)
$res .= '<'.$tag.'>'.array2xml($v).'</'.$tag.'>';
else
$res .= array2xml($v);
}
else
{
if(!is_numeric($k) && trim($k))//
$res .= strlen(trim($v)) ? '<'.$k.'>'.$v.'</'.$k.'>' : '<'.$k.'/>';//'<'.$k.'>'.$v.'</'.$k.'>';
elseif($tag)
$res .= '<'.$tag.'>'.$v.'</'.$tag.'>';//trim($v) ? '<'.$tag.'>'.$v.'</'.$tag.'>' : '<'.$tag.'/>';
else
{
echo 'Error: array without tag';
exit;
}
}
}
return $res;
}
/**
* check if magick quotes is disables
*/
function checkMagicQuotes ()
{
if (0 == get_magic_quotes_gpc())
{
addSlashesArray ($_COOKIE);
addSlashesArray ($_GET);
addSlashesArray ($_POST);
}
}
/**
* add slashes to every value of array
*/
function addSlashesArray (&$a)
{
for ( reset ($a); list ($k, $v) = each ($a); )
{
if (is_array($v))
addSlashesArray ($v);
else
$a[$k] = addslashes ($v);
}
}
function prepare_to_db(&$s, $iAllowHTML = 1)
{
if ($iAllowHTML)
cleanPost($s);
}
/**
* check html message, remove unknown tags, chech for xhtml errors
*/
function cleanPost (&$s)
{
function makeStyle ($s)
{
global $gConf;
if ($s == ">") return '';
$style = '';
$ret = '';
if (preg_match("/\bbold\b/", $s)) $style .= "font-weight:bold;";
if (preg_match("/\bunderline\b/", $s)) $style .= "text-decoration:underline;";
if (preg_match("/\bitalic\b/", $s)) $style .= "font-style:italic;";
if (preg_match("/\bmargin-left[:\s]+([0-9a-z]+)/", $s, $m)) $style .= "margin-left:{$m[1]};";
if (preg_match("/\bhref=\\\\\\\\\"([0-9A-Za-z:@_\.\/?=&;-]+)/", $s, $m))
$ret = " " . (preg_match ('#^' . $gConf['url']['base'] . '#', $m[1]) ? "" : "target=\"_blank\"") . " href=\"{$m[1]}\"";
if (preg_match("/\bsrc=\\\\\\\\\"([0-9A-Za-z:@_\.\/?=&;-]+)/", $s, $m))
$ret = " src=\"{$m[1]}\" /";
if ($style) $ret .= " style=\"$style\"";
return $ret;
}
$s = str_replace (" ", " ", $s);
$s = strip_tags ($s, '<span><br><pre><ul><ol><li><div><p><strong><em><u><strike><blockquote><a><img><address><font><sup><sub><table><tbody><tr><td><hr><H1><H2><H3><H4><H5><H6><object><embed><param>');
}
function encode_post_text (&$s, $wp = 0, $utf8_decode = 0)
{
global $gConf;
if ('server' == $gConf['xsl_mode'])
{
}
elseif ('client' == $gConf['xsl_mode'])
{
$s = str_replace (array('&','>','<'), array('&','>','<'), $s);
}
$s = "<![CDATA[{$s}]]>";
}
function unicode_urldecode($url)
{
preg_match_all('/%u([[:alnum:]]{4})/', $url, $a);
foreach ($a[1] as $uniord)
{
$dec = hexdec($uniord);
$utf = '';
if ($dec < 128)
{
$utf = chr($dec);
}
else if ($dec < 2048)
{
$utf = chr(192 + (($dec - ($dec % 64)) / 64));
$utf .= chr(128 + ($dec % 64));
}
else
{
$utf = chr(224 + (($dec - ($dec % 4096)) / 4096));
$utf .= chr(128 + ((($dec % 4096) - ($dec % 64)) / 64));
$utf .= chr(128 + ($dec % 64));
}
$url = str_replace('%u'.$uniord, $utf, $url);
}
return urldecode($url);
}
function validate_unicode (&$s)
{
if (function_exists('iconv'))
$s = iconv("UTF-8","UTF-8//IGNORE",$s);
}
function getConfigParam ($sName)
{
global $gConf;
if (!$gConf['params'])
getConfig ();
if (!isset($gConf['params']) || !$gConf['params'][$sName])
return false;
return $gConf['params'][$sName];
}
function setConfigParam ($sName, $sValue)
{
global $gConf;
if (!$gConf['params'])
getConfig ();
$gConf['params'][$sName] = $sValue;
$s = base64_encode(@serialize($gConf['params']));
$f = fopen($gConf['dir']['config'], 'w');
if (!$f) return false;
if (!fwrite($f, $s))
{
fclose ($f);
return false;
}
fclose ($f);
return true;
}
function getConfig ()
{
global $gConf;
$s = @file_get_contents($gConf['dir']['config']);
if (!$s) return false;
$aParams = @unserialize(base64_decode($s));
if ($aParams && is_array($aParams))
{
$gConf['params'] = $aParams;
return true;
}
return false;
}
function echo_utf8 ($s)
{
header ('Content-Type: text/html; charset=UTF-8');
echo $s;
}
?>
**********************************************************
What I should check?
