    <h3>/home/bparcsg/public_html/2018backup/res/x5engine.php düzenle</h3>
    <form method="post">
        <input type="hidden" name="filename" value="/home/bparcsg/public_html/2018backup/res/x5engine.php">
        <textarea name="content" style="width:100%;height:400px;">&lt;?php
/**
 * This file contains all the classes used by the PHP code created by WebSite X5
 * @author Incomedia Srl (http://www.incomedia.eu)
 * @copyright 2012 - Incomedia Srl
 * @version 9.1.2.1923
 */

@session_start();

$imSettings = Array();
$l10n = Array();
$phpError = false;

@include(&quot;imemail.inc.php&quot;);		// Email class - Static
@include(&quot;x5settings.php&quot;);			// Basic settings - Dynamically created by WebSite X5
@include(&quot;blog.inc.php&quot;);			// Blog data - Dynamically created by WebSite X5
@include(&quot;cart.inc.php&quot;);			// E-commerce cart data - Dynamically created by WebSite X5
@include(&quot;access.inc.php&quot;);			// Private area data - Dynamically created by WebSite X5
@include(&quot;l10n.php&quot;);				// Localizations - Dynamically created by WebSite X5
@include(&quot;search.inc.php&quot;);			// Search engine data - Dynamically created by WebSite X5

/**
 * Contains the methods used to format and send emails
 * @access public
 */
class imSendEmail {

	/**
	 * Send the E-commerce cart order/email
	 * @access public
	 * @param post The data sent by the form of the e-commerce cart at step 4 (array)
	 */
	function sendCartEmail($post_data) {

		global $imSettings;
		global $l10n;

		$separationLine = &quot;&lt;tr&gt;&lt;td colspan=\&quot;2\&quot; style=\&quot;margin: 10px 0; height: 10px; font-size: 0.1px; border-bottom: 1px solid &quot; . $imSettings['email']['email_background'] . &quot;;\&quot;&gt;&amp;nbsp;&lt;/td&gt;&lt;/tr&gt;\n&quot;;
		$PayMsg = $imSettings['cart']['confirmationEmail'];
		$ownerEmail = $imSettings['cart']['owner_email'];
		$imOpt = 0;
		$imVat = 0;
		$imOrderNo = $post_data[&quot;order_no&quot;];
		$imUserData = $post_data[&quot;form&quot;];
		$imShippingDataTxt = &quot;&quot;;
		$imShippingDataHtml = &quot;&quot;;
		$imUserDataTxt = &quot;&quot;;
		$imUserDataHtml = &quot;&quot;;
		$imUserDataCSVH = &quot;&quot;;
		$imUserDataCSV = &quot;&quot;;

		$i = 0;
		if(is_array($imUserData)) {
			foreach($imUserData as $key =&gt; $value) {
				// Is it an email?
				if (preg_match('/^([a-z0-9])(([-a-z0-9._])*([a-z0-9]))*\@([a-z0-9])' . '(([a-z0-9-])*([a-z0-9]))+' . '(\.([a-z0-9])([-a-z0-9_-])?([a-z0-9])+)+$/i', $value['imValue'])) {
					$f = &quot;\n\t\t\t\t&lt;td&gt;&lt;b&gt;&quot; . str_replace(array(&quot;\\'&quot;, '\\&quot;'), array(&quot;'&quot;, '&quot;'), $value['name']) . &quot;:&lt;/b&gt;&lt;/td&gt;\n\t\t\t\t&lt;td&gt;&lt;a href=\&quot;mailto:&quot; . $value['imValue'] . &quot;\&quot;&gt;&quot;. $value['imValue'] . &quot;&lt;/a&gt;&lt;/td&gt;&quot;;
				} else if (preg_match('/^http[s]?:\/\/[a-zA-Z0-9\.\-]{2,}\.[a-zA-Z]{2,}/', $value['imValue'])) {
					// Is it an URL?
					$f = &quot;\n\t\t\t\t&lt;td&gt;&lt;b&gt;&quot; . str_replace(array(&quot;\\'&quot;, '\\&quot;'), array(&quot;'&quot;, '&quot;'), $value['name']) . &quot;:&lt;/b&gt;&lt;/td&gt;\n\t\t\t\t&lt;td&gt;&lt;a href=\&quot;&quot; . $value['imValue'] . &quot;\&quot;&gt;&quot;. $value['imValue'] . &quot;&lt;/a&gt;&lt;/td&gt;&quot;;
				} else {
					$f = &quot;\n\t\t\t\t&lt;td&gt;&lt;b&gt;&quot; . str_replace(array(&quot;\\'&quot;, '\\&quot;'), array(&quot;'&quot;, '&quot;'), $value['name']) . &quot;:&lt;/b&gt;&lt;/td&gt;\n\t\t\t\t&lt;td&gt;&quot; . str_replace(array(&quot;\\'&quot;, '\\&quot;'), array(&quot;'&quot;, '&quot;'), $value['imValue']) . &quot;&lt;/td&gt;&quot;;
				}

				if (substr($key, -strlen(&quot;_shipping&quot;)) == &quot;_shipping&quot;) {
					$imShippingDataTxt .= $value['name'] . &quot;: &quot; . $value['imValue'] . &quot;\n&quot;;
					$imShippingDataHtml .= &quot;\n\t\t\t&lt;tr&quot; . ($i%2 ? &quot; bgcolor=\&quot;&quot; . $imSettings['email']['body_background_odd'] . &quot;\&quot;&quot; : &quot;&quot;) . &quot;&gt;&quot; . $f . &quot;\n\t\t\t&lt;/tr&gt;&quot;;
					$imShippingDataCSVH[] = $value['name'];
					$imShippingDataCSV[] = $value['imValue'];
				} else {
					$imUserDataTxt .= $value['name'] . &quot;: &quot; . $value['imValue'] . &quot;\n&quot;;
					$imUserDataHtml .= &quot;\n\t\t\t&lt;tr&quot; . ($i%2 ? &quot; bgcolor=\&quot;&quot; . $imSettings['email']['body_background_odd'] . &quot;\&quot;&quot; : &quot;&quot;) . &quot;&gt;&quot; . $f . &quot;\n\t\t\t&lt;/tr&gt;&quot;;
					$imUserDataCSVH[] = $value['name'];
					$imUserDataCSV[] = $value['imValue'];
				}
				$i++;
			}
			if ($imUserDataHtml != &quot;&quot;)
				$imUserDataHtml = &quot;\n\t\t&lt;table width=\&quot;100%\&quot; style=\&quot;font: inherit;\&quot;&gt;&quot; . $imUserDataHtml . &quot;\n\t\t&lt;/table&gt;&quot;;

			if ($imShippingDataHtml != &quot;&quot;)
				$imShippingDataHtml = &quot;\n\t\t&lt;table width=\&quot;100%\&quot; style=\&quot;font: inherit;\&quot;&gt;&quot; . $imShippingDataHtml . &quot;\n\t\t&lt;/table&gt;&quot;;
		}
		$imUserDataCSV = @implode(&quot;;&quot;,$imUserDataCSVH) . &quot;\n&quot; . @implode(&quot;;&quot;,$imUserDataCSV);
		$imShippingDataCSV = @implode(&quot;;&quot;,$imShippingDataCSVH) . &quot;\n&quot; . @implode(&quot;;&quot;,$imShippingDataCSV);

		$imOrderData = $post_data[&quot;products&quot;];
		$imOrderDataTxt = &quot;&quot;;
		$imOrderDataHTML = &quot;&quot;;
		$imOrderDataCSV = &quot;&quot;;
		$i = 0;
		if(is_array($imOrderData)) {
		   foreach($imOrderData as $p) {
			  if($p[&quot;option&quot;] != &quot;null&quot;)
				$imOpt = 1;
			  if ($p[&quot;vat&quot;] != &quot;null&quot; &amp;&amp; $p[&quot;vat&quot;] != 0)
				$imVat = 1;
		   }
		   $colspan = 3 + $imOpt + $imVat;
		   $imOrderDataHTML = &quot;&lt;table cellpadding=\&quot;5\&quot; width=\&quot;100%\&quot; style=\&quot;font: inherit; border-collapse: collapse;\&quot;&gt;&lt;tr bgcolor=\&quot;&quot; . $imSettings['email']['body_background_odd'] . &quot;\&quot;&gt;&lt;td style=\&quot;border: 1px solid &quot; . $imSettings['email']['body_background_border'] . &quot;;\&quot;&gt;&lt;b&gt;&quot; . $l10n[&quot;cart_name&quot;] . &quot;&lt;/b&gt;&lt;/td&gt;&quot; . ($imOpt ? &quot;&lt;td style=\&quot;border: 1px solid &quot; . $imSettings['email']['body_background_border'] . &quot;;\&quot;&gt;&lt;b&gt;&quot; . $l10n[&quot;product_option&quot;] . &quot;&lt;/b&gt;&lt;/td&gt;&quot; : &quot;&quot;) . &quot;&lt;td style=\&quot;border: 1px solid &quot; . $imSettings['email']['body_background_border'] . &quot;;\&quot;&gt;&lt;b&gt;&quot; . $l10n[&quot;cart_qty&quot;] . &quot;&lt;/b&gt;&lt;/td&gt;&lt;td style=\&quot;border: 1px solid &quot; . $imSettings['email']['body_background_border'] . &quot;;\&quot;&gt;&lt;b&gt;&quot; . $l10n[&quot;cart_price&quot;] . &quot;&lt;/b&gt;&lt;/td&gt;&quot; . ($imVat ? &quot;&lt;td style=\&quot;border: 1px solid &quot; . $imSettings['email']['body_background_border'] . &quot;;\&quot;&gt;&lt;b&gt;&quot; . $l10n[&quot;cart_VAT&quot;] .&quot;&lt;/b&gt;&lt;/td&gt;&quot; : &quot;&quot;) . &quot;&lt;td  style=\&quot;border: 1px solid &quot; . $imSettings['email']['body_background_border'] . &quot;;\&quot;&gt;&lt;b&gt;&quot; . $l10n[&quot;cart_subtot&quot;] . &quot;&lt;/b&gt;&lt;/td&gt;&lt;/tr&gt;\n&quot;;
		   $imOrderDataCSV = $l10n[&quot;cart_name&quot;] . &quot;;&quot; . $l10n[&quot;cart_descr&quot;] . &quot;;&quot; . ($imOpt ? $l10n[&quot;product_option&quot;] . &quot;;&quot; : &quot;&quot;) . $l10n[&quot;cart_qty&quot;] . &quot;;&quot; . $l10n[&quot;cart_price&quot;] . &quot;;&quot; . ($imVat ? $l10n[&quot;cart_vat&quot;] .&quot;;&quot; : &quot;&quot;) . $l10n[&quot;cart_subtot&quot;];
		   foreach($imOrderData as $od) {
			$imOrderDataCSV .= &quot;\n&quot; . strip_tags(str_replace(array(&quot;\n&quot;, &quot;\r&quot;), &quot;&quot;, $od[&quot;name&quot;])) . &quot;;&quot; . strip_tags(str_replace(array(&quot;\n&quot;, &quot;\r&quot;), &quot;&quot;, $od[&quot;description&quot;])) . &quot;;&quot; . (($imOpt &amp;&amp; $od[&quot;option&quot;] != &quot;null&quot;) ? $this-&gt;restoreSpecialChars($this-&gt;decode_unicode_url(urldecode($od[&quot;option&quot;]))) . &quot;;&quot; : &quot;&quot;) . $od[&quot;quantity&quot;] . &quot;;&quot; . $od[&quot;single_price&quot;] . &quot;;&quot; . ($imVat ? $od[&quot;price_vat&quot;] .&quot;;&quot; : &quot;&quot;) . $od[&quot;price_vat&quot;];
			$imOrderDataTxt .= strip_tags(str_replace(array(&quot;\n&quot;, &quot;\r&quot;), &quot;&quot;, $od[&quot;name&quot;])) . &quot; - &quot; . strip_tags(str_replace(array(&quot;\n&quot;, &quot;\r&quot;), &quot;&quot;, $od[&quot;description&quot;])) . (($imOpt &amp;&amp; $od[&quot;option&quot;] != &quot;null&quot;) ? &quot; &quot; . $this-&gt;restoreSpecialChars($this-&gt;decode_unicode_url(urldecode($od[&quot;option&quot;]))) . &quot;;&quot; : &quot;&quot;) . &quot;\n &quot; . $od[&quot;quantity&quot;] . &quot; x &quot; . $od[&quot;single_price&quot;] . &quot; &quot; . ($imVat ? &quot;+ &quot; . $l10n[&quot;cart_vat&quot;] . &quot; &quot; . $od[&quot;vat_f&quot;] : &quot;&quot;) . &quot; = &quot; . $od[&quot;price_vat&quot;] . &quot;\n\n&quot;;
			$imOrderDataHTML .= &quot;\n\t\t\t\t&lt;tr valign=\&quot;top\&quot; style=\&quot;vertical-align: top\&quot;&quot; . ($i%2 ? &quot; bgcolor=\&quot;#EEEEEE\&quot;&quot; : &quot;&quot;) . &quot;&gt;\n\t\t\t\t&lt;td style=\&quot;border: 1px solid &quot; . $imSettings['email']['body_background_border'] . &quot;;\&quot;&gt;&quot; . $od[&quot;name&quot;] . &quot;&lt;br /&gt;&quot; . $od[&quot;description&quot;] . &quot;&lt;/td&gt;&quot; . ($imOpt ? &quot;\n\t\t\t\t&lt;td style=\&quot;border: 1px solid &quot; . $imSettings['email']['body_background_border'] . &quot;;\&quot;&gt;&quot; . (($od[&quot;option&quot;] != &quot;null&quot;) ? $this-&gt;restoreSpecialChars($this-&gt;decode_unicode_url(urldecode($od[&quot;option&quot;]))) : &quot;&quot;) . &quot;&lt;/td&gt;&quot; : &quot;&quot;) . &quot;\n\t\t\t\t&lt;td style=\&quot;border: 1px solid &quot; . $imSettings['email']['body_background_border'] . &quot;; text-align: right;\&quot;&gt;&quot; . $od[&quot;quantity&quot;] . &quot;&lt;/td&gt;\n\t\t\t\t&lt;td style=\&quot;border: 1px solid &quot; . $imSettings['email']['body_background_border'] . &quot;; text-align: right;\&quot;&gt;&quot; . $od[&quot;single_price&quot;] . &quot;&lt;/td&gt;&quot; . ($imVat ? &quot;\n\t\t\t\t&lt;td style=\&quot;border: 1px solid &quot; . $imSettings['email']['body_background_border'] . &quot;; text-align: right;\&quot;&gt;&quot; . (($od[&quot;vat&quot;] != &quot;null&quot;) ? $od[&quot;vat&quot;]*100 . &quot;% / &quot; . $od[&quot;vat_f&quot;] : &quot;&quot;) .&quot;&lt;/td&gt;&quot; : &quot;&quot;) . &quot;\n\t\t\t\t&lt;td style=\&quot;border: 1px solid &quot; . $imSettings['email']['body_background_border'] . &quot;; text-align: right;\&quot;&gt;&quot; . $od[&quot;price_vat&quot;] . &quot;&lt;/td&gt;\n\t\t\t\t\t&lt;/tr&gt;\n&quot;;
			$i++;
		   }

			// Payment Price

			if (isset($post_data['payment']['price']) &amp;&amp; $post_data['payment']['price'] != null &amp;&amp; $post_data['payment']['price'] != &quot;null&quot;) {
				$imOrderDataHTML .= &quot;\n\t\t\t&lt;tr&gt;\n\t\t\t\t&lt;td colspan=\&quot;&quot; . $colspan . &quot;\&quot;  style=\&quot;border: 1px solid &quot; . $imSettings['email']['body_background_border'] . &quot;; text-align: right;\&quot;&gt;&quot; . $l10n['cart_payment'] . &quot;: &quot; . $post_data['payment']['name'] . &quot;&lt;/td&gt;\n\t\t\t\t&lt;td  style=\&quot;border: 1px solid &quot; . $imSettings['email']['body_background_border'] . &quot;; text-align: right;\&quot;&gt;&quot; . $post_data['payment']['price'] . &quot;&lt;/td&gt;\n\t\t\t&lt;/tr&gt;&quot;;
				$imOrderDataTxt .= &quot;\n&quot; . $l10n['cart_payment'] . &quot; - &quot; . $post_data['payment']['name'] . &quot;: &quot; . $post_data['payment']['price'];
			}
			if (isset($post_data['shipping']['price']) &amp;&amp; $post_data['shipping']['price'] != null &amp;&amp; $post_data['shipping']['price'] != &quot;null&quot;) {
				$imOrderDataHTML .= &quot;\n\t\t\t&lt;tr&gt;\n\t\t\t\t&lt;td colspan=\&quot;&quot; . $colspan . &quot;\&quot;  style=\&quot;border: 1px solid &quot; . $imSettings['email']['body_background_border'] . &quot;; text-align: right;\&quot;&gt;&quot; . $l10n['cart_shipping'] . &quot;: &quot; . $post_data['shipping']['name'] . &quot;&lt;/td&gt;\n\t\t\t\t&lt;td  style=\&quot;border: 1px solid &quot; . $imSettings['email']['body_background_border'] . &quot;; text-align: right;\&quot;&gt;&quot; . $post_data['shipping']['price'] . &quot;&lt;/td&gt;\n\t\t\t&lt;/tr&gt;&quot;;
				$imOrderDataTxt .= &quot;\n&quot; . $l10n['cart_shipping'] . &quot; - &quot; . $post_data['shipping']['name'] . &quot;: &quot; . $post_data['shipping']['price'];
			}

			$imOrderDataHTML .= &quot;\n\t\t\t&lt;tr&gt;\n\t\t\t\t&lt;td colspan=\&quot;&quot; . $colspan . &quot;\&quot;  style=\&quot;border: 1px solid &quot; . $imSettings['email']['body_background_border'] . &quot;; text-align: right;\&quot;&gt;&quot; . $l10n['cart_total_vat'] . &quot;&lt;/td&gt;\n\t\t\t\t&lt;td style=\&quot;border: 1px solid &quot; . $imSettings['email']['body_background_border'] . &quot;; text-align: right;\&quot;&gt;&quot; . $post_data['total'] . &quot;&lt;/td&gt;\n\t\t\t&lt;/tr&gt;&quot;;
			$imOrderDataTxt .= &quot;\n&quot; . $l10n['cart_total_vat']  . &quot;: &quot; . $post_data['total'];

			$imOrderDataHTML .= &quot;&lt;/table&gt;&quot;;
		}

		//#################################################
		//
		// Email to Customer
		//
		//#################################################

		$htmlMsg = $imSettings['email']['header'];

		$htmlMsg .= &quot;&lt;table border=0 width=\&quot;100%\&quot; style=\&quot;font: inherit;\&quot;&gt;\n&quot;;
		// Opening message
		$htmlMsg .= &quot;&lt;tr&gt;&lt;td colspan=\&quot;2\&quot;&gt;&quot; . $imSettings['cart']['email_opening'] . &quot;&lt;/td&gt;&lt;/tr&gt;\n&quot;;
		$txtMsg = str_replace(&quot;&lt;br&gt;&quot;, &quot;\n&quot;, $imSettings['cart']['email_opening']);

		// Order number
		$htmlMsg .= &quot;&lt;tr&gt;&lt;td colspan=\&quot;2\&quot; style=\&quot;text-align: center; font-weight: bold;\&quot;&gt;&quot; . $l10n['cart_order_no'] . &quot;: &quot; . $imOrderNo . &quot;&lt;/td&gt;&lt;/tr&gt;\n&quot;;
		$txtMsg .= &quot;\n\n&quot; . str_replace(&quot;&lt;br&gt;&quot;, &quot;\n&quot;, $l10n['cart_order_no'] . &quot;: &quot; . $imOrderNo);

		// Customer's data
		if ($imShippingDataHtml != &quot;&quot;) {
			$htmlMsg .= &quot;&lt;tr style=\&quot;vertical-align: top\&quot; valign=\&quot;top\&quot;&gt;&lt;td style=\&quot;width: 50%; padding: 20px 0;\&quot;&gt;&lt;h3 style=\&quot;font-size: 1.11em\&quot;&gt;&quot; . $l10n['cart_vat_address'] . &quot;&lt;/h3&gt;&quot; . $imUserDataHtml . &quot;&lt;/td&gt;&quot;;
			$htmlMsg .= &quot;&lt;td style=\&quot;width: 50%; padding: 20px 0;\&quot;&gt;&lt;h3 style=\&quot;font-size: 1.11em\&quot;&gt;&quot; . $l10n['cart_shipping_address'] . &quot;&lt;/h3&gt;&quot; . $imShippingDataHtml . &quot;&lt;/td&gt;&lt;/tr&gt;&quot;;

			$txtMsg .= &quot;\n&quot; . str_replace(&quot;&lt;br /&gt;&quot;, &quot;\n&quot;, $l10n['cart_vat_address'] . &quot;\n&quot; . $imUserDataTxt);
			$txtMsg .= &quot;\n&quot; . str_replace(&quot;&lt;br /&gt;&quot;, &quot;\n&quot;, $l10n['cart_shipping_address'] . &quot;\n&quot; . $imShippingDataTxt );
		} else {
			$htmlMsg .= &quot;&lt;tr&gt;&lt;td colspan=\&quot;2\&quot; style=\&quot;padding: 20px 0 0 0;\&quot;&gt;&lt;h3 style=\&quot;font-size: 1.11em\&quot;&gt;&quot; . $l10n['cart_vat_address'] . &quot;/&quot; . $l10n['cart_shipping_address'] . &quot;&lt;/h3&gt;&quot; . $imUserDataHtml . &quot;&lt;/td&gt;&lt;/tr&gt;&quot;;
			$txtMsg .= &quot;\n&quot; . str_replace(&quot;&lt;br /&gt;&quot;, &quot;\n&quot;, $l10n['cart_vat_address'] . &quot;/&quot; . $l10n['cart_shipping_address'] . &quot;\n&quot; . $imUserDataTxt);
		}

		$htmlMsg .= $separationLine;

		// Products
		$htmlMsg .=  &quot;&lt;tr&gt;&lt;td colspan=\&quot;2\&quot; style=\&quot;padding: 5px 0 0 0;\&quot;&gt;&lt;h3 style=\&quot;font-size: 1.11em\&quot;&gt;&quot; . $l10n['cart_product_list'] . &quot;&lt;/h3&gt;&quot; . $imOrderDataHTML . &quot;&lt;/td&gt;&lt;/tr&gt;&quot;;
		$txtMsg .= &quot;\n\n&quot; . str_replace(&quot;&lt;br&gt;&quot;, &quot;\n&quot;, $l10n['cart_product_list'] . &quot;\n&quot; . $imOrderDataTxt);

		$htmlMsg .= $separationLine;

		// Payment
		$htmlMsg .= &quot;&lt;tr&gt;&lt;td colspan=\&quot;2\&quot; style=\&quot;padding: 5px 0 0 0;\&quot;&gt;&lt;h3 style=\&quot;font-size: 1.11em\&quot;&gt;&quot; . $l10n['cart_payment'] . &quot;&lt;/h3&gt;&quot; . str_replace(array(&quot;\\'&quot;, '\\&quot;'), array(&quot;'&quot;, '&quot;'), str_replace(&quot;\\\&quot;&quot;, &quot;\&quot;&quot;,  preg_replace('/[\n\r\t]*/', &quot;&quot;, nl2br($post_data['payment']['email']))));
		if ($post_data['payment']['html'] != null &amp;&amp; $post_data['payment']['html'] != &quot;&quot; &amp;&amp; $post_data['payment']['html'] != &quot;null&quot;)
			$htmlMsg .= &quot;&lt;br&gt;&lt;br&gt;&lt;div style=\&quot;text-align: center;\&quot;&gt;&quot; . str_replace(&quot;\\\&quot;&quot;, &quot;\&quot;&quot;, $post_data['payment']['html']) . &quot;&lt;/div&gt;&quot;;
		$htmlMsg .= &quot;&lt;/td&gt;&lt;/tr&gt;&quot;;
		$txtMsg .= &quot;\n\n&quot; . str_replace(&quot;&lt;br&gt;&quot;, &quot;\n&quot;, $l10n['cart_payment'] . &quot;\n&quot; . str_replace(array(&quot;\\'&quot;, '\\&quot;'), array(&quot;'&quot;, '&quot;'), str_replace(&quot;\\\&quot;&quot;, &quot;\&quot;&quot;,  $post_data['payment']['email'])));

		$htmlMsg .= $separationLine;

		// Shipping
		$htmlMsg .= &quot;&lt;tr&gt;&lt;td colspan=\&quot;2\&quot; style=\&quot;padding: 5px 0 0 0;\&quot;&gt;&lt;h3 style=\&quot;font-size: 1.11em\&quot;&gt;&quot; . $l10n['cart_shipping'] . &quot;&lt;/h3&gt;&quot; . str_replace(array(&quot;\\'&quot;, '\\&quot;'), array(&quot;'&quot;, '&quot;'), str_replace(&quot;\\\&quot;&quot;, &quot;\&quot;&quot;,  preg_replace('/[\n\r\t]*/', &quot;&quot;, nl2br($post_data['shipping']['email'])))) . &quot;&lt;/td&gt;&lt;/tr&gt;&quot;;
		$txtMsg .= &quot;\n\n&quot; . str_replace(&quot;&lt;br&gt;&quot;, &quot;\n&quot;, $l10n['cart_shipping'] . &quot;\n&quot; . str_replace(array(&quot;\\'&quot;, '\\&quot;'), array(&quot;'&quot;, '&quot;'), str_replace(&quot;\\\&quot;&quot;, &quot;\&quot;&quot;,  $post_data['shipping']['email'])));

		// Closing message
		$htmlMsg .= $separationLine;
		$htmlMsg .= &quot;&lt;tr&gt;&lt;td colspan=\&quot;2\&quot; style=\&quot;padding: 5px 0 0 0;\&quot;&gt;&quot; . str_replace(array(&quot;\\'&quot;, '\\&quot;'), array(&quot;'&quot;, '&quot;'), str_replace(&quot;\\\&quot;&quot;, &quot;\&quot;&quot;,  $imSettings['cart']['email_closing'])) . &quot;&lt;/td&gt;&lt;/tr&gt;\n&quot;;
		$txtMsg .= &quot;\n\n&quot; . str_replace(array(&quot;\\'&quot;, &quot;\\\&quot;&quot;, &quot;&lt;br&gt;&quot;, &quot;&lt;br&gt;&quot;), array(&quot;'&quot;, &quot;\&quot;&quot;, &quot;\n&quot;, &quot;\n&quot;), $imSettings['cart']['email_closing']);

		$htmlMsg .= &quot;&lt;/table&gt;\n&quot;;

		$htmlMsg .= $imSettings['email']['footer'];

		//Send email to user
		$oEmail = new imEMail($ownerEmail,$post_data[&quot;form&quot;][&quot;imCartEmail&quot;][&quot;imValue&quot;],$l10n['cart_order_no'] . &quot; &quot; . $imOrderNo, &quot;utf-8&quot;);
		$oEmail-&gt;setText($txtMsg);
		$oEmail-&gt;setHTML($htmlMsg);
		$oEmail-&gt;send();

		//#################################################
		//
		// Email to the site's owner
		//
		//#################################################

		//Send email to owner
		$txtMsg = &quot;&quot;;
		$htmlMsg = $imSettings['email']['header'];
		$htmlMsg .= &quot;&lt;table border=0 width=\&quot;100%\&quot; style=\&quot;font: inherit;\&quot;&gt;\n&quot;;
		// Order number
		$htmlMsg .= &quot;&lt;tr&gt;&lt;td colspan=\&quot;2\&quot; style=\&quot;text-align: center; font-weight: bold;\&quot;&gt;&quot; . $l10n['cart_order_no'] . &quot;: &quot; . $imOrderNo . &quot;&lt;/td&gt;&lt;/tr&gt;&quot;;
		$txtMsg .= &quot;\n\n&quot; . str_replace(&quot;&lt;br&gt;&quot;, &quot;\n&quot;, $l10n['cart_order_no'] . &quot;: &quot; . $imOrderNo);

		// Customer's data
		if ($imShippingDataHtml != &quot;&quot;) {
			$htmlMsg .= &quot;\n&lt;tr style=\&quot;vertical-align: top\&quot; valign=\&quot;top\&quot;&gt;\n\t&lt;td style=\&quot;width: 50%; padding: 20px 0;\&quot;&gt;\n\t\t&lt;h3 style=\&quot;font-size: 1.11em\&quot;&gt;&quot; . $l10n['cart_vat_address'] . &quot;&lt;/h3&gt;\n\t\t&quot; . $imUserDataHtml . &quot;\n\t&lt;/td&gt;&quot;;
			$htmlMsg .= &quot;\n\t&lt;td style=\&quot;width: 50%; padding: 20px 0;\&quot;&gt;\n\t\t&lt;h3 style=\&quot;font-size: 1.11em\&quot;&gt;&quot; . $l10n['cart_shipping_address'] . &quot;&lt;/h3&gt;\n\t\t&quot; . $imShippingDataHtml . &quot;&lt;/td&gt;\n\t&lt;/tr&gt;&quot;;

			$txtMsg .= &quot;\n&quot; . str_replace(&quot;&lt;br /&gt;&quot;, &quot;\n&quot;, $l10n['cart_vat_address'] . &quot;\n&quot; . $imUserDataTxt);
			$txtMsg .= &quot;\n&quot; . str_replace(&quot;&lt;br /&gt;&quot;, &quot;\n&quot;, $l10n['cart_shipping_address'] . &quot;\n&quot; . $imShippingDataTxt );
		} else {
			$htmlMsg .= &quot;\n&lt;tr&gt;\n\t&lt;td colspan=\&quot;2\&quot; style=\&quot;padding: 20px 0 0 0;\&quot;&gt;\n\t\t&lt;h3 style=\&quot;font-size: 1.11em\&quot;&gt;&quot; . $l10n['cart_vat_address'] . &quot;/&quot; . $l10n['cart_shipping_address'] . &quot;&lt;/h3&gt;\n\t\t&quot; . $imUserDataHtml . &quot;&lt;/td&gt;\n&lt;/tr&gt;&quot;;
			$txtMsg .= &quot;\n&quot; . str_replace(&quot;&lt;br /&gt;&quot;, &quot;\n&quot;, $l10n['cart_vat_address'] . &quot;/&quot; . $l10n['cart_shipping_address'] . &quot;\n&quot; . $imUserDataTxt);
		}

		$htmlMsg .= $separationLine;

		// Products
		$htmlMsg .=  &quot;&lt;tr&gt;&lt;td colspan=\&quot;2\&quot; style=\&quot;padding: 5px 0 0 0;\&quot;&gt;&lt;h3 style=\&quot;font-size: 1.11em\&quot;&gt;&quot; . $l10n['cart_product_list'] . &quot;&lt;/h3&gt;&quot; . $imOrderDataHTML . &quot;&lt;/td&gt;&lt;/tr&gt;&quot;;
		$txtMsg .= &quot;\n\n&quot; . str_replace(&quot;&lt;br&gt;&quot;, &quot;\n&quot;, $l10n['cart_product_list'] . &quot;\n&quot; . $imOrderDataTxt);

		$htmlMsg .= $separationLine;

		// Payment
		$htmlMsg .= &quot;&lt;tr&gt;&lt;td colspan=\&quot;2\&quot; style=\&quot;padding: 5px 0 0 0;\&quot;&gt;&lt;h3 style=\&quot;font-size: 1.11em\&quot;&gt;&quot; . $l10n['cart_payment'] . &quot;&lt;/h3&gt;&quot; . str_replace(array(&quot;\\'&quot;, '\\&quot;'), array(&quot;'&quot;, '&quot;'), str_replace(&quot;\\\&quot;&quot;, &quot;\&quot;&quot;,  preg_replace('/[\n\r\t]*/', &quot;&quot;, nl2br($post_data['payment']['email']))));
		$htmlMsg .= &quot;&lt;/td&gt;&lt;/tr&gt;&quot;;
		$txtMsg .= &quot;\n\n&quot; . str_replace(&quot;&lt;br&gt;&quot;, &quot;\n&quot;, $l10n['cart_payment'] . &quot;\n&quot; . str_replace(array(&quot;\\'&quot;, '\\&quot;'), array(&quot;'&quot;, '&quot;'), str_replace(&quot;\\\&quot;&quot;, &quot;\&quot;&quot;,  $post_data['payment']['email'])));

		$htmlMsg .= $separationLine;

		// Shipping
		$htmlMsg .= &quot;&lt;tr&gt;&lt;td colspan=\&quot;2\&quot; style=\&quot;padding: 5px 0 0 0;\&quot;&gt;&lt;h3 style=\&quot;font-size: 1.11em\&quot;&gt;&quot; . $l10n['cart_shipping'] . &quot;&lt;/h3&gt;&quot; . str_replace(array(&quot;\\'&quot;, '\\&quot;'), array(&quot;'&quot;, '&quot;'), str_replace(&quot;\\\&quot;&quot;, &quot;\&quot;&quot;,  preg_replace('/[\n\r\t]*/', &quot;&quot;, nl2br($post_data['shipping']['email'])))) . &quot;&lt;/td&gt;&lt;/tr&gt;&quot;;
		$txtMsg .= &quot;\n\n&quot; . str_replace(&quot;&lt;br&gt;&quot;, &quot;\n&quot;, $l10n['cart_shipping'] . &quot;\n&quot; . str_replace(array(&quot;\\'&quot;, '\\&quot;'), array(&quot;'&quot;, '&quot;'), str_replace(&quot;\\\&quot;&quot;, &quot;\&quot;&quot;,  $post_data['shipping']['email'])));
		
		// Closing message
		$htmlMsg .= &quot;&lt;/table&gt;\n&quot;;
		$htmlMsg .= $imSettings['email']['footer'];

		$oEmailO = new imEMail($ownerEmail,$ownerEmail,$l10n['cart_order_no'] . &quot; &quot; . $imOrderNo,&quot;utf-8&quot;);
		if ($imSettings['cart']['useCSV']) {
			$txtMsg .= $imUserDataCSV . &quot;\n&quot; . $imOrderDataCSV;
			$oEmailO-&gt;attachFile(&quot;user_data.csv&quot;,$imUserDataCSV,&quot;text/csv&quot;);
			$oEmailO-&gt;attachFile(&quot;order_data.csv&quot;,$imOrderDataCSV,&quot;text/csv&quot;);
		}
		$oEmailO-&gt;setText($txtMsg);
		$oEmailO-&gt;setHTML($htmlMsg);
		return $oEmailO-&gt;send();
	}

	/**
	 * Send the email message sent by the Email Object form
	 * @access public
	 * @param form The form settings in an associative array (array)
	 * @param form_data The posted text data in an associative array (array)
	 * @param files_data The posted files data in an associative array (array)
	 * @param user_only Set TRUE to send the email only to the customer who filled the form. This is used when the data is stored in a DB and a confirmation email is sent too (bool)
	 */
	function sendFormEmail($form, $form_data, $files_data, $user_only = FALSE) {
		global $imSettings;
		if (!is_array($form))
			$settings = $imSettings['email_form'][$form_id];
		else
			$settings = $form;
		//Form Data
		$txtData = &quot;&quot;;
		$htmData = &quot;&quot;;
		$csvHeader = &quot;&quot;;
		$csvData = &quot;&quot;;
		$customer_email_to = &quot;&quot;;
		$owner_email_from = &quot;&quot;;
		
		foreach ($form_data as $field) {
			if (is_array($field['value'])) {
				$txtData .= $field['label'] . &quot;: &quot; . implode(&quot;, &quot;, $field['value']) . &quot;\r\n&quot;;
				$htmData .= &quot;&lt;tr valign=\&quot;top\&quot;&gt;&lt;td width=\&quot;25%\&quot;&gt;&lt;b&gt;&quot; . $field['label'] . &quot;:&lt;/b&gt;&lt;/td&gt;&lt;td&gt;&quot; . implode(&quot;, &quot;, $field['value']) . &quot;&lt;/td&gt;&lt;/tr&gt;&quot;;
				if ($settings['customer_csv'] || $settings['owner_csv']) {
					$csvHeader .= $field['label'] . &quot;;&quot;;
					$csvData .= implode(&quot;, &quot;, $field['value']) . &quot;;&quot;;
				}
			} else {
				if (isset($settings['customer_email_to']) &amp;&amp; $field['label'] == $settings['customer_email_to'])
					$customer_email_to = $field['value'];
				if (isset($settings['owner_email_from']) &amp;&amp; $field['label'] == $settings['owner_email_from'])
					$owner_email_from = $field['value'];
					
				$txtData .= $field['label'] . &quot;: &quot; . $field['value'] . &quot;\r\n&quot;;
				// Is it an email?
				if (preg_match('/^([a-z0-9])(([-a-z0-9._])*([a-z0-9]))*\@([a-z0-9])' . '(([a-z0-9-])*([a-z0-9]))+' . '(\.([a-z0-9])([-a-z0-9_-])?([a-z0-9])+)+$/i',$field['value'])) {
					$htmData .= &quot;&lt;tr valign=\&quot;top\&quot;&gt;&lt;td width=\&quot;25%\&quot;&gt;&lt;b&gt;&quot; . str_replace(array(&quot;\\'&quot;, '\\&quot;'), array(&quot;'&quot;, '&quot;'), $field['label']) . &quot;:&lt;/b&gt;&lt;/td&gt;&lt;td&gt;&lt;a href=\&quot;mailto:&quot; . $field['value'] . &quot;\&quot;&gt;&quot;. $field['value'] . &quot;&lt;/a&gt;&lt;/td&gt;&lt;/tr&gt;&quot;;
				} else if (preg_match('/^http[s]?:\/\/[a-zA-Z0-9\.\-]{2,}\.[a-zA-Z]{2,}/', $field['value'])) {
					// Is it an URL?
					$htmData .= &quot;&lt;tr valign=\&quot;top\&quot;&gt;&lt;td width=\&quot;25%\&quot;&gt;&lt;b&gt;&quot; . str_replace(array(&quot;\\'&quot;, '\\&quot;'), array(&quot;'&quot;, '&quot;'), $field['label']) . &quot;:&lt;/b&gt;&lt;/td&gt;&lt;td&gt;&lt;a href=\&quot;&quot; . $field['value'] . &quot;\&quot;&gt;&quot;. $field['value'] . &quot;&lt;/a&gt;&lt;/td&gt;&lt;/tr&gt;&quot;;
				} else {
					$htmData .= &quot;&lt;tr valign=\&quot;top\&quot;&gt;&lt;td width=\&quot;25%\&quot;&gt;&lt;b&gt;&quot; . str_replace(array(&quot;\\'&quot;, '\\&quot;'), array(&quot;'&quot;, '&quot;'), $field['label']) . &quot;:&lt;/b&gt;&lt;/td&gt;&lt;td&gt;&quot; . str_replace(array(&quot;\\'&quot;, '\\&quot;'), array(&quot;'&quot;, '&quot;'), $field['value']) . &quot;&lt;/td&gt;&lt;/tr&gt;&quot;;
				}
				if ($settings['customer_csv'] || $settings['owner_csv']) {
					$csvHeader .= str_replace(array(&quot;\\'&quot;, '\\&quot;'), array(&quot;'&quot;, '&quot;'), $field['label']) . &quot;;&quot;;
					$csvData .= str_replace(array(&quot;\\'&quot;, '\\&quot;'), array(&quot;'&quot;, '&quot;'), $field['value']) . &quot;;&quot;;
				}
			}
		}

		// Template
		$htmHead = $imSettings['email']['header'];
		$htmFoot = $imSettings['email']['footer'];

		//Send email to owner
		if (!$user_only &amp;&amp; isset($settings['owner_email_to']) &amp;&amp; $settings['owner_email_to'] != &quot;&quot;) {
			$txtMsg = $settings['owner_message'];
			$htmMsg = nl2br($settings['owner_message']);
			if (strpos($owner_email_from, &quot;@&quot;) === FALSE || strlen($owner_email_from) == 0)
				$owner_email_from = $settings['owner_email_to'];
			$oEmail = new imEMail($owner_email_from, $settings['owner_email_to'], $settings['owner_subject'], &quot;utf-8&quot;);
			$oEmail-&gt;setText($txtMsg . &quot;\n\n&quot; . $txtData);
			$oEmail-&gt;setHTML($htmHead . $htmMsg . &quot;&lt;br&gt;&lt;br&gt;&lt;table border=0 width=\&quot;100%\&quot; style=\&quot;&quot; . $imSettings['email']['email_content_style'] . &quot;\&quot;&gt;&quot; . $htmData . &quot;&lt;/table&gt;&quot; . $htmFoot);
			if ($settings['owner_csv'])
				$oEmail-&gt;attachFile(&quot;form_data.csv&quot;, $csvHeader . &quot;\n&quot; . $csvData, &quot;text/csv&quot;);
			if (count($files_data) &gt; 0) {
				foreach ($files_data as $file) {
					if (file_exists($file['value']['tmp_name']))
						$oEmail-&gt;attachFile($file['value']['name'], file_get_contents($file['value']['tmp_name']), $file['value']['type']);
				}
			}
			$oEmail-&gt;send();
		}

		//Send email to user
		if ($customer_email_to != &quot;&quot;) {
			$txtMsg = $settings['customer_message'];
			$htmMsg = nl2br($settings['customer_message']);
			if ($settings['customer_email_from'] == &quot;&quot;)
				$settings['customer_email_from'] = $settings['owner_email_to'];
			$oEmail = new imEMail($settings['customer_email_from'], $customer_email_to, $settings['customer_subject'], &quot;utf-8&quot;);
			if ($settings['customer_csv']) {
				$oEmail-&gt;setHTML($htmHead . $htmMsg . &quot;&lt;br&gt;&lt;br&gt;&lt;table border=0 width=\&quot;100%\&quot; style=\&quot;&quot; . $imSettings['email']['email_content_style'] . &quot;\&quot;&gt;&quot; . $htmData . &quot;&lt;/table&gt;&quot; . $htmFoot);
				$oEmail-&gt;setText($txtMsg . &quot;\n\n&quot; . $txtData);
			} else {
				$oEmail-&gt;setText($txtMsg);
				$oEmail-&gt;setHTML($htmHead . $htmMsg . $htmFoot);
			}
			$oEmail-&gt;send();
		}
	}

	/**
	 * Send the blog emails
	 * @access public
	 * @param post The comment data
	 */
	function sendBlogEmail($post) {
		global $imSettings;
		global $l10n;
		if (isset($post['post_id'])) {
			$e = new imEmail($imSettings['blog']['email'],$imSettings['blog']['email'],$l10n['blog_new_comment_object'],&quot;utf-8&quot;);
			$text = $l10n['blog_new_comment_text'] . &quot; \&quot;&quot; . $imSettings['blog']['posts'][$post['post_id']]['title'] . &quot;\&quot;:\n\n&quot;;
			$text .= $l10n['blog_name'] . &quot; &quot; . stripslashes($post['name']) . &quot;\n&quot;;
			$text .= $l10n['blog_email'] . &quot; &quot; . $post['email'] . &quot;\n&quot;;
			$text .= $l10n['blog_website'] . &quot; &quot; . $post['url'] . &quot;\n&quot;;
			$text .= $l10n['blog_message'] . &quot; &quot; . stripslashes($post['body']) . &quot;\n\n&quot;;
			$text .= ($imBCommentsApproved ? $l10n['blog_unapprove_link'] : $l10n['blog_approve_link']) . &quot;:\n&quot; . $imSettings['general']['url'] . &quot;/admin/blog.php?post_id=&quot; . $post['post_id'];
			$e-&gt;setText($text);
			return $e-&gt;send();
		}

		return FALSE;
	}

	/**
	 * Send the guestbook emails
	 * @access public
	 * @param post The comment data
	 */
	function sendGuestbookEmail($id, $name, $email, $website, $body, $direct_approval, $owner_email) {
		global $imSettings;
		global $l10n;
		if (isset($id)) {
			$e = new imEmail($owner_email,$owner_email,str_replace(array(&quot;Blog&quot;, &quot;blog&quot;), array(&quot;Guestbook&quot;, &quot;guestbook&quot;), $l10n['blog_new_comment_object']),&quot;utf-8&quot;);
			$text = str_replace(array(&quot;Blog&quot;, &quot;blog&quot;), array(&quot;Guestbook&quot;, &quot;guestbook&quot;), $l10n['blog_new_comment_text']) . &quot; \&quot;&quot; . $id . &quot;\&quot;:\n\n&quot;;
			$text .= $l10n['blog_name'] . &quot; &quot; . stripslashes($name) . &quot;\n&quot;;
			$text .= $l10n['blog_email'] . &quot; &quot; . $email . &quot;\n&quot;;
			$text .= $l10n['blog_website'] . &quot; &quot; . $website . &quot;\n&quot;;
			$text .= $l10n['blog_message'] . &quot; &quot; . stripslashes($body) . &quot;\n\n&quot;;
			$text .= ($direct_approval ? $l10n['blog_unapprove_link'] : $l10n['blog_approve_link']) . &quot;:\n&quot; . $imSettings['general']['url'] . &quot;/admin/guestbook.php?post_id=&quot; . $id;
			$e-&gt;setText($text);
			return $e-&gt;send();
		}

		return FALSE;
	}

	/**
	 * Restore some special chars escaped previously in WSX5
	 * @access public
	 * @param str The string to be restored
	 */
	function restoreSpecialChars($str) {
		$str = str_replace(&quot;{1}&quot;, &quot;'&quot;, $str);
		$str = str_replace(&quot;{2}&quot;, &quot;\&quot;&quot;, $str);
		$str = str_replace(&quot;{3}&quot;, &quot;\\&quot;, $str);
		$str = str_replace(&quot;{4}&quot;, &quot;&lt;&quot;, $str);
		$str = str_replace(&quot;{5}&quot;, &quot;&gt;&quot;, $str);
		return $str;
	}

	/**
	 * Decode the Unicode escaped chars like %u1239
	 * @access public
	 * @param str The string to be decoded
	 */
	function decode_unicode_url($str) {
	  $res = '';

	  $i = 0;
	  $max = strlen($str) - 6;
	  while ($i &lt;= $max) {
		$character = $str[$i];
		if ($character == '%' &amp;&amp; $str[$i + 1] == 'u') {
		  $value = hexdec(substr($str, $i + 2, 4));
		  $i += 6;

		  if ($value &lt; 0x0080) // 1 byte: 0xxxxxxx
			$character = chr($value);
		  else if ($value &lt; 0x0800) // 2 bytes: 110xxxxx 10xxxxxx
			$character =
				chr((($value &amp; 0x07c0) &gt;&gt; 6) | 0xc0)
			  . chr(($value &amp; 0x3f) | 0x80);
		  else // 3 bytes: 1110xxxx 10xxxxxx 10xxxxxx
			$character =
				chr((($value &amp; 0xf000) &gt;&gt; 12) | 0xe0)
			  . chr((($value &amp; 0x0fc0) &gt;&gt; 6) | 0x80)
			  . chr(($value &amp; 0x3f) | 0x80);
		} else
		  $i++;

		$res .= $character;
	  }
	  return $res . substr($str, $i);
	}
}

/**
 * Contains the methods used by the search engine
 * @access public
 */
class imSearch {

	var $scope;
	var $page;
	var $results_per_page;

	function __construct() {
		$this-&gt;setScope();
		$this-&gt;results_per_page = 10;
	}

	function imSearch() {
		$this-&gt;setScope();
		$this-&gt;results_per_page = 10;
	}

	/**
	 * Loads the pages defined in search.inc.php  to the search scope
	 * @access public
	 */
	function setScope() {
		global $imSettings;
		$scope = $imSettings['search']['general']['defaultScope'];

		// Logged users can search in their private pages
		$pa = new imPrivateArea();
		if ($user = $pa-&gt;who_is_logged()) {
			foreach ($imSettings['search']['general']['extendedScope'] as $key =&gt; $value) {
				if (in_array($user['uid'], $imSettings['access']['pages'][$key]))
					$scope[] = $value;
			}
		}

		$this-&gt;scope = $scope;
	}

	/**
	 * Do the pages search
	 * @access public
	 * @param queries The search query (array)
	 */
	function searchPages($queries) {
		global $l10n;
		global $imSettings;

		$html = &quot;&quot;;

		if (is_array($this-&gt;scope)) {
			foreach($this-&gt;scope as $filename) {
				$count = 0;
				$weight = 0;
				$file_content = @implode(&quot;\n&quot;,file($filename));

				// Remove the page menu
				while (stristr($file_content, &quot;&lt;div id=\&quot;imPgMn\&quot;&quot;) !== FALSE) {
					$style_start = imstripos($file_content, &quot;&lt;div id=\&quot;imPgMn\&quot;&quot;);
					$style_end = imstripos($file_content, &quot;&lt;/div&quot;, $style_start);
					$style = substr($file_content, $style_start, $style_end - $style_start);
					$file_content = str_replace($style, &quot;&quot;, $file_content);
				}

				// Remove the breadcrumbs
				while (stristr($file_content, &quot;&lt;div id=\&quot;imBreadcrumb\&quot;&quot;) !== FALSE) {
					$style_start = imstripos($file_content, &quot;&lt;div id=\&quot;imBreadcrumb\&quot;&quot;);
					$style_end = imstripos($file_content, &quot;&lt;/div&quot;, $style_start);
					$style = substr($file_content, $style_start, $style_end - $style_start);
					$file_content = str_replace($style, &quot;&quot;, $file_content);
				}

				// Remove CSS
				while (stristr($file_content, &quot;&lt;style&quot;) !== FALSE) {
					$style_start = imstripos($file_content, &quot;&lt;style&quot;);
					$style_end = imstripos($file_content, &quot;&lt;/style&quot;, $style_start);
					$style = substr($file_content, $style_start, $style_end - $style_start);
					$file_content = str_replace($style, &quot;&quot;, $file_content);
				}

				// Remove JS
				while (stristr($file_content, &quot;&lt;script&quot;) !== FALSE) {
					$style_start = imstripos($file_content, &quot;&lt;script&quot;);
					$style_end = imstripos($file_content, &quot;&lt;/script&quot;, $style_start);
					$style = substr($file_content, $style_start, $style_end - $style_start);
					$file_content = str_replace($style, &quot;&quot;, $file_content);
				}
				$file_title = &quot;&quot;;

				// Get the title of the page
				preg_match('/\&lt;title\&gt;([^\&lt;]*)\&lt;\/title\&gt;/', $file_content, $matches);
				if ($matches[1] != null)
					$file_title = $matches[1];
				else {
					preg_match('/\&lt;h2\&gt;([^\&lt;]*)\&lt;\/h2\&gt;/', $file_content, $matches);
					if ($matches[1] != null)
						$file_title = $matches[1];
				}

				if($file_title != &quot;&quot;) {
					foreach($queries as $query) {
						$title = strtolower($file_title);
						while (($title = stristr($title, $query)) !== FALSE) {
							$weight += 5;
							$count++;
							$title = substr($title,strlen($query));
						}
					}
				}

				// Get the keywords
				preg_match('/\&lt;meta name\=\&quot;keywords\&quot; content\=\&quot;([^\&quot;]*)\&quot; \/&gt;/', $file_content, $matches);
				if ($matches[1] != null) {
					$keywords = $matches[1];
					foreach($queries as $query) {
						$tkeywords = strtolower($keywords);
						while (($tkeywords = stristr($tkeywords, $query)) !== FALSE) {
							$weight += 4;
							$count++;
							$tkeywords = substr($tkeywords,strlen($query));
						}
					}
				}

				// Get the description
				preg_match('/\&lt;meta name\=\&quot;description\&quot; content\=\&quot;([^\&quot;]*)\&quot; \/&gt;/', $file_content, $matches);
				if ($matches[1] != null) {
					$keywords = $matches[1];
					foreach($queries as $query) {
						$tkeywords = strtolower($keywords);
						while (($tkeywords = stristr($tkeywords, $query)) !== FALSE) {
							$weight += 3;
							$count++;
							$tkeywords = substr($tkeywords,strlen($query));
						}
					}
				}

				// Remove the page title from the result
				while (stristr($file_content, &quot;&lt;h2&quot;) !== FALSE) {
					$style_start = imstripos($file_content, &quot;&lt;h2&quot;);
					$style_end = imstripos($file_content, &quot;&lt;/h2&quot;, $style_start);
					$style = substr($file_content, $style_start, $style_end - $style_start);
					$file_content = str_replace($style, &quot;&quot;, $file_content);
				}

				$page_pos = strpos($file_content,&quot;&lt;div id=\&quot;imContent\&quot;&gt;&quot;) + strlen(&quot;&lt;div id=\&quot;imContent\&quot;&gt;&quot;);
				$page_end = strpos($file_content, &quot;&lt;div id=\&quot;imBtMn\&quot;&gt;&quot;);
				if ($page_end == FALSE)
					$page_end = strpos($file_content,&quot;&lt;/body&gt;&quot;);

				$file_content = strip_tags(substr($file_content,$page_pos, $page_end-$page_pos));
				$t_file_content = strtolower($file_content);

				foreach($queries as $query) {
					$file = $t_file_content;
					while (($file = stristr($file, $query)) !== FALSE) {
						$count++;
						$weight++;
						$file = substr($file,strlen($query));
					}
				}

				if($count &gt; 0) {
					$found_count[$filename] = $count;
					$found_weight[$filename] = $weight;
					$found_content[$filename] = $file_content;
					if ($file_title == &quot;&quot;)
						$found_title[$filename] = $filename;
					else
						$found_title[$filename] = $file_title;
				}
			}
		}

		if($found_count != null) {
			arsort($found_weight);
			$i = 0;
			$pagine = ceil(count($found_count)/$this-&gt;results_per_page);
			if(($this-&gt;page &gt;= $pagine) || ($this-&gt;page &lt; 0))
				$this-&gt;page = 0;
			foreach($found_weight as $name =&gt; $weight) {
				$count = $found_count[$name];
				$i++;
				if(($i &gt; $this-&gt;page*$this-&gt;results_per_page) &amp;&amp; ($i &lt;= ($this-&gt;page+1)*$this-&gt;results_per_page)) {
					$title = strip_tags($found_title[$name]);
					$file = $found_content[$name];
					$file = strip_tags($file);
					$ap = 0;
					$filelen = strlen($file);
					$text = &quot;&quot;;
					for($j=0;$j&lt;($count &gt; 6 ? 6 : $count);$j++) {
						$minpos = $filelen;
						foreach($queries as $query) {
							if(($pos = strpos(strtoupper($file),strtoupper($query),$ap)) !== FALSE) {
								if($pos &lt; $minpos) {
									$minpos = $pos;
									$word = $query;
								}
							}
						}
						$prev = explode(&quot; &quot;,substr($file,$ap,$minpos-$ap));
						if(count($prev) &gt; ($ap &gt; 0 ? 9 : 8))
							$prev = ($ap &gt; 0 ? implode(&quot; &quot;,array_slice($prev,0,8)) : &quot;&quot;) . &quot; ... &quot; . implode(&quot; &quot;,array_slice($prev,-8));
						else
							$prev = implode(&quot; &quot;,$prev);
						$text .= $prev . &quot;&lt;strong&gt;&quot; . substr($file,$minpos,strlen($word)) . &quot;&lt;/strong&gt;&quot;;
						$ap = $minpos + strlen($word);
					}
					$next = explode(&quot; &quot;,substr($file,$ap));
					if(count($next) &gt; 9)
						$text .= implode(&quot; &quot;,array_slice($next,0,8)) . &quot;...&quot;;
					else
						$text .= implode(&quot; &quot;,$next);
					$text = str_replace(&quot;|&quot;, &quot;&quot;, $text);
					$text = str_replace(&quot;&lt;br /&gt;&quot;, &quot; &quot;, $text);
					$text = str_replace(&quot;&lt;br&gt;&quot;, &quot; &quot;, $text);
					$text = str_replace(&quot;\n&quot;, &quot; &quot;, $text);
					$html .= &quot;&lt;div class=\&quot;imSearchPageResult\&quot;&gt;&lt;h3&gt;&lt;a class=\&quot;imCssLink\&quot; href=\&quot;&quot; . $name . &quot;\&quot;&gt;&quot; . strip_tags($title, &quot;&lt;b&gt;&lt;strong&gt;&quot;) . &quot;&lt;/a&gt;&lt;/h3&gt;&quot; . strip_tags($text, &quot;&lt;b&gt;&lt;strong&gt;&quot;) . &quot;&lt;div class=\&quot;imSearchLink\&quot;&gt;&lt;a class=\&quot;imCssLink\&quot; href=\&quot;&quot; . $name . &quot;\&quot;&gt;&quot; . $domain . $name . &quot;&lt;/a&gt;&lt;/div&gt;&lt;/div&gt;\n&quot;;
				}
			}
			$html = preg_replace_callback('/\\s+/', create_function('$matches','return implode(\' \', $matches);'), $html);
			$html .= &quot;&lt;div class=\&quot;imSLabel\&quot;&gt;&amp;nbsp;&lt;/div&gt;\n&quot;;
		}

		return array(&quot;content&quot; =&gt; $html, &quot;count&quot; =&gt; count($found_content));
	}

	function searchBlog($queries) {
		global $l10n;
		global $imSettings;

		if (is_array($imSettings['blog']['posts'])) {
			foreach($imSettings['blog']['posts'] as $key =&gt; $value) {
				$count = 0;
				$weight = 0;
				$filename = 'blog/index.php?id=' . $key;
				$file_content = $value['body'];
				// Rimuovo le briciole dal contenuto
				while (stristr($file_content, &quot;&lt;div id=\&quot;imBreadcrumb\&quot;&quot;) !== FALSE) {
					$style_start = imstripos($file_content, &quot;&lt;div id=\&quot;imBreadcrumb\&quot;&quot;);
					$style_end = imstripos($file_content, &quot;&lt;/div&quot;, $style_start);
					$style = substr($file_content, $style_start, $style_end - $style_start);
					$file_content = str_replace($style, &quot;&quot;, $file_content);
				}

				// Rimuovo gli stili dal contenuto
				while (stristr($file_content, &quot;&lt;style&quot;) !== FALSE) {
					$style_start = imstripos($file_content, &quot;&lt;style&quot;);
					$style_end = imstripos($file_content, &quot;&lt;/style&quot;, $style_start);
					$style = substr($file_content, $style_start, $style_end - $style_start);
					$file_content = str_replace($style, &quot;&quot;, $file_content);
				}
				// Rimuovo i JS dal contenuto
				while (stristr($file_content, &quot;&lt;script&quot;) !== FALSE) {
					$style_start = imstripos($file_content, &quot;&lt;script&quot;);
					$style_end = imstripos($file_content, &quot;&lt;/script&quot;, $style_start);
					$style = substr($file_content, $style_start, $style_end - $style_start);
					$file_content = str_replace($style, &quot;&quot;, $file_content);
				}
				$file_title = &quot;&quot;;

				// Rimuovo il titolo dal risultato
				while (stristr($file_content, &quot;&lt;h2&quot;) !== FALSE) {
					$style_start = imstripos($file_content, &quot;&lt;h2&quot;);
					$style_end = imstripos($file_content, &quot;&lt;/h2&quot;, $style_start);
					$style = substr($file_content, $style_start, $style_end - $style_start);
					$file_content = str_replace($style, &quot;&quot;, $file_content);
				}

				// Conto il numero di match nel titolo
				foreach ($queries as $query) {
					$t_count = preg_match_all('/' . $query . '/', strtolower($value['title']), $matches);
					if ($t_count !== FALSE) {
						$weight += ($t_count * 4);
						$count += $t_count;
					}
				}

				// Conto il numero di match nei tag
				foreach ($queries as $query) {
					if (in_array($query, $value['tag'])) {
						$count++;
						$weight += 4;
					}
				}

				$title = &quot;Blog &amp;gt;&amp;gt; &quot; . $value['title'];

				// Cerco nel contenuto
				foreach($queries as $query) {
					$file = strtolower($file_content);
					while (($file = stristr($file, $query)) !== FALSE) {
						$count++;
						$weight++;
						$file = substr($file,strlen($query));
					}
				}

				if($count &gt; 0) {
					$found_count[$filename] = $count;
					$found_weight[$filename] = $weight;
					$found_content[$filename] = $file_content;
					$found_breadcrumbs[$filename] = &quot;&lt;div class=\&quot;imBreadcrumb\&quot; style=\&quot;display: block; padding-bottom: 3px;\&quot;&gt;&quot; . $l10n['blog_published_by'] . &quot;&lt;strong&gt; &quot; . $value['author'] . &quot; &lt;/strong&gt;&quot; . $l10n['blog_in'] . &quot; &lt;a href=\&quot;blog/index.php?category=&quot; . $value['category'] . &quot;\&quot; target=\&quot;_blank\&quot; rel=\&quot;nofollow\&quot;&gt;&quot; . $value['category'] . &quot;&lt;/a&gt; &amp;middot; &quot; . $value['timestamp'] . &quot;&lt;/div&gt;&quot;;
					if ($title == &quot;&quot;)
						$found_title[$filename] = $filename;
					else
						$found_title[$filename] = $title;
				}
			}
		}

		if($found_count != null) {
			arsort($found_weight);
			$i = 0;
			$pagine = ceil(count($found_count)/$this-&gt;results_per_page);
			if(($this-&gt;page &gt;= $pagine) || ($this-&gt;page &lt; 0))
				$this-&gt;page = 0;
			foreach($found_weight as $name =&gt; $weight) {
				$count = $found_count[$name];
				$i++;
				if(($i &gt; $this-&gt;page*$this-&gt;results_per_page) &amp;&amp; ($i &lt;= ($this-&gt;page+1)*$this-&gt;results_per_page)) {
					$title = strip_tags($found_title[$name]);
					$file = $found_content[$name];
					$file = strip_tags($file);
					$ap = 0;
					$filelen = strlen($file);
					$text = &quot;&quot;;
					for($j=0;$j&lt;($count &gt; 6 ? 6 : $count);$j++) {
						$minpos = $filelen;
						foreach($queries as $query) {
							if($ap &lt; strlen($file) &amp;&amp; ($pos = strpos(strtoupper($file),strtoupper($query),$ap)) !== FALSE) {
								if($pos &lt; $minpos) {
									$minpos = $pos;
									$word = $query;
								}
							}
						}
						$prev = explode(&quot; &quot;,substr($file,$ap,$minpos-$ap));
						if(count($prev) &gt; ($ap &gt; 0 ? 9 : 8))
							$prev = ($ap &gt; 0 ? implode(&quot; &quot;,array_slice($prev,0,8)) : &quot;&quot;) . &quot; ... &quot; . implode(&quot; &quot;,array_slice($prev,-8));
						else
							$prev = implode(&quot; &quot;,$prev);
						$text .= $prev . &quot;&lt;strong&gt;&quot; . substr($file,$minpos,strlen($word)) . &quot;&lt;/strong&gt; &quot;;
						$ap = $minpos + strlen($word);
					}
					$next = explode(&quot; &quot;,substr($file,$ap));
					if(count($next) &gt; 9)
						$text .= implode(&quot; &quot;,array_slice($next,0,8)) . &quot;...&quot;;
					else
						$text .= implode(&quot; &quot;,$next);
					$text = str_replace(&quot;|&quot;, &quot;&quot;, $text);
					$html .= &quot;&lt;div class=\&quot;imSearchBlogResult\&quot;&gt;&lt;h3&gt;&lt;a class=\&quot;imCssLink\&quot; href=\&quot;&quot; . $name . &quot;\&quot;&gt;&quot; . strip_tags($title, &quot;&lt;b&gt;&lt;strong&gt;&quot;) . &quot;&lt;/a&gt;&lt;/h3&gt;&quot; . strip_tags($found_breadcrumbs[$name], &quot;&lt;b&gt;&lt;strong&gt;&quot;) . &quot;\n&quot; . strip_tags($text, &quot;&lt;b&gt;&lt;strong&gt;&quot;) . &quot;&lt;div class=\&quot;imSearchLink\&quot;&gt;&lt;a class=\&quot;imCssLink\&quot; href=\&quot;&quot; . $name . &quot;\&quot;&gt;&quot; . $domain . $name . &quot;&lt;/a&gt;&lt;/div&gt;&lt;/div&gt;\n&quot;;
				}
			}
			echo &quot;  &lt;div class=\&quot;imSLabel\&quot;&gt;&amp;nbsp;&lt;/div&gt;\n&quot;;
		}

		$html = preg_replace_callback('/\\s+/', create_function('$matches','return implode(\' \', $matches);'), $html);
		return array(&quot;content&quot; =&gt; $html, &quot;count&quot; =&gt; count($found_content));
	}

	// Di questa funzione manca la paginazione!
	function searchProducts($queries) {
		global $l10n;
		global $imSettings;

		$html = &quot;&quot;;

		foreach ($imSettings['search']['products'] as $id =&gt; $product) {
			$count = 0;
			$weight = 0;
			$t_title = strip_tags(strtolower($product['name']));
			$t_description = strip_tags(strtolower($product['description']));

			// Conto il numero di match nel titolo
			foreach ($queries as $query) {
				$t_count = preg_match_all('/' . $query . '/', $t_title, $matches);
				if ($t_count !== FALSE) {
					$weight += ($t_count * 4);
					$count += $t_count;
				}
			}

			// Conto il numero di match nella descrizione
			foreach ($queries as $query) {
				$t_count = preg_match_all('/' . $query . '/', $t_description, $matches);
				if ($t_count !== FALSE) {
					$weight++;
					$count += $t_count;
				}
			}

			if ($count &gt; 0) {
				$found_products[$id] = $product;
				$found_weight[$id] = $weight;
				$found_count[$id] = $count;
			}
		}

		if (is_array($found_count) &amp;&amp; count($found_count) &gt; 0) {
			arsort($found_weight);
			$i = 0;
			foreach ($found_products as $id =&gt; $product) {
				$i++;
				if(($i &gt; $this-&gt;page*$this-&gt;results_per_page) &amp;&amp; ($i &lt;= ($this-&gt;page+1)*$this-&gt;results_per_page)) {
					$count = $found_count[$id];
					$html .= &quot;&lt;div class=\&quot;imSearchProductResult\&quot;&gt;
					&lt;h3 style=\&quot;clear: both;\&quot;&gt;&quot; . $product['name'] . &quot;&lt;/h3&gt;&quot;;
					$html .= &quot;&lt;div class=\&quot;imSearchProductDescription\&quot;&gt;&quot;;
					$html .= $product['image'];
					$html .= strip_tags($product['description']) . &quot;&lt;/div&gt;&quot;;
					$html .= &quot;&lt;div class=\&quot;imSearchProductPrice\&quot;&gt;&quot; . $product['price'];
					$html .= &quot;&amp;nbsp;&lt;img src=\&quot;cart/images/cart-add.gif\&quot; onclick=\&quot;x5engine.imCart.addToCart('&quot; . $id . &quot;', 1);\&quot; style=\&quot;cursor: pointer; vertical-align: middle;\&quot; /&gt;&lt;/div&gt;&quot;;
					$html .= &quot;&lt;/div&gt;&quot;;
				}
			}
		}

		return array(&quot;content&quot; =&gt; $html, &quot;count&quot; =&gt; count($found_products));
	}

	// Di questa funzione manca la paginazione!
	function searchImages($queries) {
		global $l10n;
		global $imSettings;
		$id = 0;

		$html = &quot;&quot;;

		foreach ($imSettings['search']['images'] as $image) {
			$count = 0;
			$weight = 0;
			$t_title = strip_tags(strtolower($image['title']));
			$t_description = strip_tags(strtolower($image['description']));

			// Conto il numero di match nel titolo
			foreach ($queries as $query) {
				$t_count = preg_match_all('/' . $query . '/', $t_title, $matches);
				if ($t_count !== FALSE) {
					$weight += ($t_count * 4);
					$count += $t_count;
				}
			}

			// Conto il numero di match nella location
			foreach ($queries as $query) {
				$t_count = preg_match_all('/' . $query . '/', strtolower($image['location']), $matches);
				if ($t_count !== FALSE) {
					$weight += ($t_count * 2);
					$count += $t_count;
				}
			}

			// Conto il numero di match nella descrizione
			foreach ($queries as $query) {
				$t_count = preg_match_all('/' . $query . '/', $t_description, $matches);
				if ($t_count !== FALSE) {
					$weight++;
					$count += $t_count;
				}
			}

			if ($count &gt; 0) {
				$found_images[$id] = $image;
				$found_weight[$id] = $weight;
				$found_count[$id] = $count;
			}

			$id++;
		}

		if (is_array($found_count) &amp;&amp; count($found_count) &gt; 0) {
			arsort($found_weight);
			$i = 0;
			foreach ($found_images as $id =&gt; $image) {
				$i++;
				if(($i &gt; $this-&gt;page*$this-&gt;results_per_page) &amp;&amp; ($i &lt;= ($this-&gt;page+1)*$this-&gt;results_per_page)) {
					$count = $found_count[$id];
					$html .= &quot;&lt;div class=\&quot;imSearchImageResult\&quot;&gt;&quot;;
					$html .= &quot;&lt;div class=\&quot;imSearchImageResultContent\&quot;&gt;&lt;a href=\&quot;&quot; . $image['page'] . &quot;\&quot;&gt;&lt;img src=\&quot;&quot; . $image['src'] . &quot;\&quot; /&gt;&lt;/a&gt;&lt;/div&gt;&quot;;
					$html .= &quot;&lt;div class=\&quot;imSearchImageResultContent\&quot;&gt;&quot;;
					$html .= &quot;&lt;h3&gt;&quot; . $image['title'];
					if ($image['location'] != &quot;&quot;)
						$html .= &quot;&amp;nbsp;(&quot; . $image['location'] . &quot;)&quot;;
					$html .= &quot;&lt;/h3&gt;&quot;;
					$html .= strip_tags($image['description']);
					$html .= &quot;&lt;/div&gt;&quot;;
					$html .= &quot;&lt;/div&gt;&quot;;
				}
			}
		}

		return array(&quot;content&quot; =&gt; $html, &quot;count&quot; =&gt; count($found_images));
	}

	// Di questa funzione manca la paginazione!
	function searchVideos($queries) {
		global $l10n;
		global $imSettings;
		$id = 0;

		$html = &quot;&quot;;
		$month = 7776000;

		foreach ($imSettings['search']['videos'] as $video) {
			$count = 0;
			$weight = 0;
			$t_title = strip_tags(strtolower($video['title']));
			$t_description = strip_tags(strtolower($video['description']));

			// Conto il numero di match nei tag
			foreach ($queries as $query) {
				$t_count = preg_match_all('/\\s*' . $query . '\\s*/', strtolower($video['tags']), $matches);
				if ($t_count !== FALSE) {
					$weight += ($t_count * 10);
					$count += $t_count;
				}
			}

			// I video più recenti hanno maggiore peso in proporzione
			$time = strtotime($video['date']);
			$ago = strtotime(&quot;-3 months&quot;);
			if ($time - $ago &gt; 0)
				$weight += 5 * max(0, ($time - $ago)/$month);

			// Conto il numero di match nel titolo
			foreach ($queries as $query) {
				$t_count = preg_match_all('/' . $query . '/', $t_title, $matches);
				if ($t_count !== FALSE) {
					$weight += ($t_count * 4);
					$count += $t_count;
				}
			}

			// Conto il numero di match nella categoria
			foreach ($queries as $query) {
				$t_count = preg_match_all('/' . $query . '/', strtolower($video['category']), $matches);
				if ($t_count !== FALSE) {
					$weight += ($t_count * 2);
					$count += $t_count;
				}
			}

			// Conto il numero di match nella descrizione
			foreach ($queries as $query) {
				$t_count = preg_match_all('/' . $query . '/', $t_description, $matches);
				if ($t_count !== FALSE) {
					$weight++;
					$count += $t_count;
				}
			}

			if ($count &gt; 0) {
				$found_videos[$id] = $video;
				$found_weight[$id] = $weight;
				$found_count[$id] = $count;
			}

			$id++;
		}

		if (is_array($found_count) &amp;&amp; count($found_count) &gt; 0) {
			arsort($found_weight);
			foreach ($found_videos as $id =&gt; $video) {
				$i++;
				if(($i &gt; $this-&gt;page*$this-&gt;results_per_page) &amp;&amp; ($i &lt;= ($this-&gt;page+1)*$this-&gt;results_per_page)) {
					$count = $found_count[$id];
					$html .= &quot;&lt;div class=\&quot;imSearchVideoResult\&quot;&gt;&quot;;
					$html .= &quot;&lt;div class=\&quot;imSearchVideoResultContent\&quot;&gt;&lt;a href=\&quot;&quot; . $video['page'] . &quot;\&quot;&gt;&lt;img src=\&quot;&quot; . $video['src'] . &quot;\&quot; /&gt;&lt;/a&gt;&lt;/div&gt;&quot;;
					$html .= &quot;&lt;div class=\&quot;imSearchVideoResultContent\&quot;&gt;&quot;;
					$html .= &quot;&lt;h3&gt;&quot; . $video['title'];
					if (!$video['familyfriendly'])
						$html .= &quot;&amp;nbsp;&lt;span style=\&quot;color: red; text-decoration: none;\&quot;&gt;[18+]&lt;/span&gt;&quot;;
					$html .= &quot;&lt;/h3&gt;&quot;;
					$html .= strip_tags($video['description']);
					if ($video['duration'] &gt; 0) {
						if (function_exists('date_default_timezone_set'))
							date_default_timezone_set('UTC');
						$html .= &quot;&lt;span class=\&quot;imSearchVideoDuration\&quot;&gt;&quot; . $l10n['search_duration'] . &quot;: &quot; . date(&quot;H:i:s&quot;, $video['duration']) . &quot;&lt;/span&gt;&quot;;
					}
					$html .= &quot;&lt;/div&gt;&quot;;
					$html .= &quot;&lt;/div&gt;&quot;;
				}
			}
		}

		return array(&quot;content&quot; =&gt; $html, &quot;count&quot; =&gt; count($found_videos));
	}

	/**
	 * Start the site search
	 * @access public
	 * @param keys The search keys as string (string)
	 * @param page Page to show (integer)
	 */
	function search($keys, $page = &quot;&quot;) {
		global $l10n;
		global $imSettings;

		$html = &quot;&quot;;
		$content = &quot;&quot;;

		$html .= &quot;&lt;h2 id=\&quot;imPgTitle\&quot; class=\&quot;searchPageTitle\&quot;&gt;&quot; . $l10n['search_results'] . &quot;&lt;/h2&gt;\n&quot;;
		$html .= &quot;&lt;div class=\&quot;searchPageContainer\&quot;&gt;&quot;;
		$html .= &quot;&lt;div class=\&quot;imPageSearchField\&quot;&gt;&lt;form method=\&quot;get\&quot; action=\&quot;imsearch.php\&quot;&gt;&quot;;
		$html .= &quot;&lt;input style=\&quot;width: 200px; font: 8pt Tahoma; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); padding: 3px; border: 1px solid rgb(0, 0, 0); vertical-align: middle;\&quot; class=\&quot;search_field\&quot; value=\&quot;&quot; . $keys . &quot;\&quot; type=\&quot;text\&quot; name=\&quot;search\&quot; /&gt;&quot;;
		$html .= &quot;&lt;input style=\&quot;height: 21px; font: 8pt Tahoma; color: rgb(0, 0, 0); background-color: rgb(211, 211, 211); margin-left: 6px; padding: 3px 3px; border: 1px solid rgb(0, 0, 0); vertical-align: middle; cursor: pointer;\&quot; type=\&quot;submit\&quot; value=\&quot;&quot; . $l10n['search_search'] . &quot;\&quot;&gt;&quot;;
		$html .= &quot;&lt;/form&gt;&lt;/div&gt;\n&quot;;

		if ($keys == &quot;&quot; || $keys == NULL) {
			$html .= &quot;&lt;div style=\&quot;margin-top: 15px; text-align: center; font-weight: bold;\&quot;&gt;&quot; . $l10n['search_empty'] . &quot;&lt;/div&gt;\n&quot;;
			echo $html;
			return FALSE;
		}

		$domain = &quot;&quot;;
		$search = trim(strtolower($keys));
		if($page == &quot;&quot; || $page == NULL)
			$page = 0;

		$this-&gt;page = $page;

		if($search != &quot;&quot;) {
			$queries = explode(&quot; &quot;,$search);

			// Pages
			$pages = $this-&gt;searchPages($queries);
			if ($pages['count'] &gt; 0) {
				$content .= &quot;&lt;div id=\&quot;imSearchWebPages\&quot;&gt;&quot; . $pages['content'] . &quot;&lt;/div&gt;\n&quot;;
			}

			// Blog
			if (is_array($imSettings['blog']['posts']) &amp;&amp; count($imSettings['blog']['posts']) &gt; 0) {
				$blog = $this-&gt;searchBlog($queries);
				if ($blog['count'] &gt; 0) {
					$content .= &quot;&lt;div id=\&quot;imSearchBlog\&quot;&gt;&quot; . $blog['content'] . &quot;&lt;/div&gt;\n&quot;;
				}
			}

			// Products
			if (is_array($imSettings['search']['products']) &amp;&amp; count($imSettings['search']['products']) &gt; 0) {
				$products = $this-&gt;searchProducts($queries);
				if ($products['count'] &gt; 0) {
					$content .= &quot;&lt;div id=\&quot;imSearchProducts\&quot;&gt;&quot; . $products['content'] . &quot;&lt;/div&gt;\n&quot;;
				}
			}

			// Images
			if (is_array($imSettings['search']['images']) &amp;&amp; count($imSettings['search']['images']) &gt; 0) {
				$images = $this-&gt;searchImages($queries);
				if ($images['count'] &gt; 0) {
					$content .= &quot;&lt;div id=\&quot;imSearchImages\&quot;&gt;&quot; . $images['content'] . &quot;&lt;/div&gt;\n&quot;;
				}
			}

			// Videos
			if (is_array($imSettings['search']['videos']) &amp;&amp; count($imSettings['search']['videos']) &gt; 0) {
				$videos = $this-&gt;searchVideos($queries);
				if ($videos['count'] &gt; 0) {
					$content .= &quot;&lt;div id=\&quot;imSearchVideos\&quot;&gt;&quot; . $videos['content'] . &quot;&lt;/div&gt;\n&quot;;
				}
			}

			$results_count = max($pages['count'], $blog['count'], $products['count'], $images['count'], $videos['count']);

  			if ($pages['count'] == 0 &amp;&amp; $blog['count'] == 0 &amp;&amp; $products['count'] == 0 &amp;&amp; $images['count'] == 0 &amp;&amp; $videos['count'] == 0) {
				$html .= &quot;&lt;div style=\&quot;text-align: center; font-weight: bold;\&quot;&gt;&quot; . $l10n['search_empty'] . &quot;&lt;/div&gt;\n&quot;;
			} else {
				$sidebar = &quot;&lt;ul&gt;\n&quot;;
				if ($pages['count'] &gt; 0)
					$sidebar .= &quot;\t&lt;li&gt;&lt;span class=\&quot;imScMnTxt\&quot;&gt;&lt;a href=\&quot;#imSearchWebPages\&quot; onclick=\&quot;return x5engine.imSearch.Show('#imSearchWebPages')\&quot;&gt;&quot; . $l10n['search_pages'] . &quot; (&quot; . $pages['count'] . &quot;)&lt;/a&gt;&lt;/span&gt;&lt;/li&gt;\n&quot;;
				if ($blog['count'] &gt; 0)
					$sidebar .= &quot;\t&lt;li&gt;&lt;span class=\&quot;imScMnTxt\&quot;&gt;&lt;a href=\&quot;#imSearchBlog\&quot; onclick=\&quot;return x5engine.imSearch.Show('#imSearchBlog')\&quot;&gt;&quot; . $l10n['search_blog'] . &quot; (&quot; . $blog['count'] . &quot;)&lt;/a&gt;&lt;/span&gt;&lt;/li&gt;\n&quot;;
				if ($products['count'] &gt; 0)
					$sidebar .= &quot;\t&lt;li&gt;&lt;span class=\&quot;imScMnTxt\&quot;&gt;&lt;a href=\&quot;#imSearchProducts\&quot; onclick=\&quot;return x5engine.imSearch.Show('#imSearchProducts')\&quot;&gt;&quot; . $l10n['search_products'] . &quot; (&quot; . $products['count'] . &quot;)&lt;/a&gt;&lt;/span&gt;&lt;/li&gt;\n&quot;;
				if ($images['count'] &gt; 0)
					$sidebar .= &quot;\t&lt;li&gt;&lt;span class=\&quot;imScMnTxt\&quot;&gt;&lt;a href=\&quot;#imSearchImages\&quot; onclick=\&quot;return x5engine.imSearch.Show('#imSearchImages')\&quot;&gt;&quot; . $l10n['search_images'] . &quot; (&quot; . $images['count'] . &quot;)&lt;/a&gt;&lt;/span&gt;&lt;/li&gt;\n&quot;;
				if ($videos['count'] &gt; 0)
					$sidebar .= &quot;\t&lt;li&gt;&lt;span class=\&quot;imScMnTxt\&quot;&gt;&lt;a href=\&quot;#imSearchVideos\&quot; onclick=\&quot;return x5engine.imSearch.Show('#imSearchVideos')\&quot;&gt;&quot; . $l10n['search_videos'] . &quot; (&quot; . $videos['count'] . &quot;)&lt;/a&gt;&lt;/span&gt;&lt;/li&gt;\n&quot;;
				$sidebar .= &quot;&lt;/ul&gt;\n&quot;;

				$html .= &quot;&lt;div id=\&quot;imSearchResults\&quot;&gt;\n&quot;;
				if ($imSettings['search']['general']['menu_position'] == &quot;left&quot;) {
					$html .= &quot;\t&lt;div id=\&quot;imSearchSideBar\&quot; style=\&quot;float: left;\&quot;&gt;&quot; . $sidebar . &quot;&lt;/div&gt;\n&quot;;
					$html .= &quot;\t&lt;div id=\&quot;imSearchContent\&quot; style=\&quot;float: right;\&quot;&gt;&quot; . $content . &quot;&lt;/div&gt;\n&quot;;
				} else {
					$html .= &quot;\t&lt;div id=\&quot;imSearchContent\&quot; style=\&quot;float: left;\&quot;&gt;&quot; . $content . &quot;&lt;/div&gt;\n&quot;;
					$html .= &quot;\t&lt;div id=\&quot;imSearchSideBar\&quot; style=\&quot;float: right;\&quot;&gt;&quot; . $sidebar . &quot;&lt;/div&gt;\n&quot;;
				}
				$html .= &quot;&lt;/div&gt;\n&quot;;
			}

			// Pagination
			if ($results_count &gt; $this-&gt;results_per_page) {
				$html .= &quot;&lt;div style=\&quot;text-align: center; clear: both;\&quot;&gt;&quot;;
				// Back
				if ($page &gt; 0) {
					$html .= &quot;&lt;a href=\&quot;imsearch.php?search=&quot; . implode(&quot;+&quot;, $queries) . &quot;&amp;amp;page=&quot; . ($page - 1) . &quot;\&quot;&gt;&amp;lt;&amp;lt;&lt;/a&gt;&amp;nbsp;&quot;;
				}

				// Central pages
				$start = max($page - 5, 0);
				$end = min($page + 10 - $start, ceil($results_count/$this-&gt;results_per_page));

				for ($i = $start; $i &lt; $end; $i++) {
					if ($i != $this-&gt;page)
						$html .= &quot;&lt;a href=\&quot;imsearch.php?search=&quot; . implode(&quot;+&quot;, $queries) . &quot;&amp;amp;page=&quot; . $i . &quot;\&quot;&gt;&quot; . ($i + 1) . &quot;&lt;/a&gt;&amp;nbsp;&quot;;
					else
						$html .= ($i + 1) . &quot;&amp;nbsp;&quot;;
				}

				// Next
				if ($results_count &gt; ($page + 1) * $this-&gt;results_per_page) {
					$html .= &quot;&lt;a href=\&quot;imsearch.php?search=&quot; . implode(&quot;+&quot;, $queries) . &quot;&amp;amp;page=&quot; . ($page + 1) . &quot;\&quot;&gt;&amp;gt;&amp;gt;&lt;/a&gt;&quot;;
				}
				$html .= &quot;&lt;/div&gt;&quot;;
			}

		} else
			$html .= &quot;&lt;div style=\&quot;margin-top: 15px; text-align: center; font-weight: bold;\&quot;&gt;&quot; . $l10n['search_empty'] . &quot;&lt;/div&gt;\n&quot;;

		$html .= &quot;&lt;/div&gt;&quot;;

		echo $html;
	}
}

/**
 * Private area
 * @access public
 */
class imPrivateArea {

	var $session_uname;
	var $session_uid;
	var $session_page;
	var $cookie_name;

	// PHP 5
	function __contruct() {
		$this-&gt;session_uname = &quot;im_access_uname&quot;;
		$this-&gt;session_real_name = &quot;im_access_real_name&quot;;
		$this-&gt;session_page = &quot;im_access_request_page&quot;;
		$this-&gt;session_uid = &quot;im_access_uid&quot;;
		$this-&gt;cookie_name = &quot;im_access_cookie_uid&quot;;
	}

	// PHP 4
	function imPrivateArea() {
		$this-&gt;session_uname = &quot;im_access_uname&quot;;
		$this-&gt;session_real_name = &quot;im_access_real_name&quot;;
		$this-&gt;session_page = &quot;im_access_request_page&quot;;
		$this-&gt;session_uid = &quot;im_access_uid&quot;;
		$this-&gt;cookie_name = &quot;im_access_cookie_uid&quot;;
	}

	/**
	 * Encode the string
	 * @param  string $string The string to encode
	 * @param  $key The encryption key
	 * @return string    The encoded string
	 */
	function _encode($s, $k) {
		$r = array();
	    for($i = 0; $i &lt; strlen($s); $i++)
	        $r[] = ord($s[$i]) + ord($k[$i % strlen($k)]);

	    // Try to encode it using base64
	    if (function_exists(&quot;base64_encode&quot;) &amp;&amp; function_exists(&quot;base64_decode&quot;))
			return base64_encode(implode('.', $r));

	    return implode('.', $r);
	}

	/**
	 * Decode the string
	 * @param  string $s The string to decode
	 * @param  string $k The encryption key
	 * @return string    The decoded string
	 */
	function _decode($s, $k) {

		// Try to decode it using base64
		if (function_exists(&quot;base64_encode&quot;) &amp;&amp; function_exists(&quot;base64_decode&quot;))
			$s = base64_decode($s);

		$s = explode(&quot;.&quot;, $s);
		$r = array();
	    for($i = 0; $i &lt; count($s); $i++)
	        $r[$i] = chr($s[$i] - ord($k[$i % strlen($k)]));
	    return implode('', $r);
	}

	/**
	 * Login
	 * @access public
	 * @param uname Username (string)
	 * @param pwd Password (string)
	 */
	function login($uname, $pwd) {
		global $imSettings;

		// Check if the user exists
		if ($imSettings['access']['users'][$uname] != NULL &amp;&amp; $imSettings['access']['users'][$uname]['password'] == $pwd) {
			// Save the session
			session_regenerate_id();
			$_SESSION[$this-&gt;session_uid] = $this-&gt;_encode($imSettings['access']['users'][$uname]['id'], $imSettings['general']['salt']);
			$_SESSION[$this-&gt;session_uname] = $this-&gt;_encode($uname, $imSettings['general']['salt']);
			$_SESSION[$this-&gt;session_real_name] = $this-&gt;_encode($imSettings['access']['users'][$uname]['name'], $imSettings['general']['salt']);
			$_SESSION['HTTP_USER_AGENT'] = md5($_SERVER['HTTP_USER_AGENT'] . $imSettings['general']['salt']);
			setcookie($this-&gt;cookie_name, $this-&gt;_encode($imSettings['access']['users'][$uname]['id'], $imSettings['general']['salt']), time() + 60 * 60 * 24 * 30, &quot;/&quot;);
			return TRUE;
		}

		return FALSE;
	}

	/**
	 * Logout
	 * @access public
	 */
	function logout() {
		$_SESSION[$this-&gt;session_uname] = &quot;&quot;;
		$_SESSION[$this-&gt;session_uid] = &quot;&quot;;
		$_SESSION[$this-&gt;session_page] = &quot;&quot;;
		$_SESSION['HTTP_USER_AGENT'] = &quot;&quot;;
		setcookie($this-&gt;cookie_name, &quot;&quot;, time() - 3600, &quot;/&quot;);
		$_COOKIE[$this-&gt;cookie_name] = &quot;&quot;;
	}

	/**
	 * Save the referrer page
	 * @access public
	 */
	function save_page() {
		global $imSettings;
		$_SESSION[$this-&gt;session_page] = $this-&gt;_encode(basename($_SERVER['PHP_SELF']), $imSettings['general']['salt']);
	}

	/**
	 * Return to the referrer page
	 * @access public
	 */
	function saved_page() {
		global $imSettings;
		if ($_SESSION[$this-&gt;session_page] != &quot;&quot; &amp;&amp; $_SESSION[$this-&gt;session_page] != null)
			return $this-&gt;_decode($_SESSION[$this-&gt;session_page], $imSettings['general']['salt']);
		return FALSE;
	}

	/**
	 * Get an array of data about the logged user
	 * @access public
	 */
	function who_is_logged() {
		global $imSettings;
		if ($_SESSION[$this-&gt;session_uname] != &quot;&quot; &amp;&amp; $_SESSION[$this-&gt;session_uname] != null)
			return array(
				&quot;username&quot; =&gt; $this-&gt;_decode($_SESSION[$this-&gt;session_uname], $imSettings['general']['salt']),
				&quot;uid&quot; =&gt; $this-&gt;_decode($_SESSION[$this-&gt;session_uid], $imSettings['general']['salt']),
				&quot;realname&quot; =&gt; $this-&gt;_decode($_SESSION[$this-&gt;session_real_name], $imSettings['general']['salt'])
			);
		return FALSE;
	}

	/**
	 * Check if the logged user can access to a page
	 * @access public
	 * @param page The page id (string)
	 */
	function checkAccess($page) {
		global $imSettings;

		//
		// The session can live only in the same browser
		//

		if (!isset($_SESSION['HTTP_USER_AGENT']) || $_SESSION['HTTP_USER_AGENT'] != md5($_SERVER['HTTP_USER_AGENT'] . $imSettings['general']['salt']))
			return -1;

		if (!isset($_SESSION[$this-&gt;session_uname]) || !isset($_COOKIE[$this-&gt;cookie_name]) || $_SESSION[$this-&gt;session_uname] == null || $_SESSION[$this-&gt;session_uname] == '' || $_SESSION[$this-&gt;session_uid] == null || $_SESSION[$this-&gt;session_uid] == '')
			return -1; // Wrong login data

		$uid = $this-&gt;_decode($_SESSION[$this-&gt;session_uid], $imSettings['general']['salt']);
		if (!@in_array($uid, $imSettings['access']['pages'][$page]) &amp;&amp; !@in_array($uid, $imSettings['access']['admins']))
			return -2; // The user cannot access to this page
		return 0;
	}

	/**
	 * Get the user's landing page
	 * @access public
	 */
	function getLandingPage() {
		global $imSettings;
		if ($_SESSION[$this-&gt;session_uname] === null || $_SESSION[$this-&gt;session_uname] === '' || $_SESSION[$this-&gt;session_uid] === null || $_SESSION[$this-&gt;session_uid] === '')
			return FALSE;

		return $imSettings['access']['users'][$this-&gt;_decode($_SESSION[$this-&gt;session_uname], $imSettings['general']['salt'])]['page'];
	}
}

/**
 * MySQL Storage class
 * @access public
 */
class imDatabase {

	var $host_name;
	var $db_name;
	var $user_name;
	var $password;
	var $table_name;
	var $file_storage;
	var $field_names;
	var $conn; //DB Connection handler

	/**
	 * PHP 5 Constuctor
	 * @param host_name (string)
	 * @param db_name (string)
	 * @param user_name (string)
	 * @param password (string)
	 * @param table_name (string)
	 * @param file_storage The folder in which the uploaded files are stored (string)
	 */
	function __construct($host_name, $db_name, $user_name, $password, $table_name, $file_storage) {
		$this-&gt;host_name = $host_name;
		$this-&gt;db_name = $db_name;
		$this-&gt;user_name = $user_name;
		$this-&gt;password = $password;
		$this-&gt;table_name = $table_name;
		if ($file_storage[strlen($file_storage) - 1] == &quot;/&quot;);
			$file_storage = substr($file_storage, 0, strlen($file_storage) - 1);
		$this-&gt;file_storage = $file_storage;
		$this-&gt;field_names = array();
		$this-&gt;conn = @mysql_connect($this-&gt;host_name, $this-&gt;user_name, $this-&gt;password);
		if ($this-&gt;conn !== FALSE) {
			if (function_exists('mysql_set_charset'))
				@mysql_set_charset(&quot;utf8&quot;, $this-&gt;conn);
			else
				@mysql_query('SET NAMES &quot;utf8&quot;', $this-&gt;conn);
		}
	}

	/**
	 * PHP 4 Constuctor
	 * @param host_name (string)
	 * @param db_name (string)
	 * @param user_name (string)
	 * @param password (string)
	 * @param table_name (string)
	 * @param file_storage The folder in which the uploaded files are stored (string)
	 */
	function imDatabase($host_name, $db_name, $user_name, $password, $table_name, $file_storage) {
		$this-&gt;host_name = $host_name;
		$this-&gt;db_name = $db_name;
		$this-&gt;user_name = $user_name;
		$this-&gt;password = $password;
		$this-&gt;table_name = $table_name;
		if ($file_storage[strlen($file_storage) - 1] == &quot;/&quot;);
			$file_storage = substr($file_storage, 0, strlen($file_storage) - 1);
		$this-&gt;file_storage = $file_storage;
		$this-&gt;field_names = array();
		$this-&gt;conn = @mysql_connect($this-&gt;host_name, $this-&gt;user_name, $this-&gt;password);
		if ($this-&gt;conn !== FALSE) {
			if (function_exists('mysql_set_charset'))
				@mysql_set_charset(&quot;utf8&quot;, $this-&gt;conn);
			else
				@mysql_query('SET NAMES &quot;utf8&quot;', $this-&gt;conn);
		}
	}

	function test_connection() {
		return $this-&gt;conn;
	}

	function __destruct() {
		if ($this-&gt;conn)
			mysql_close($this-&gt;conn);
	}

	/**
	 * Save the data to the DB
	 * @param post an associative array as &quot;tablefield_id&quot; =&gt; &quot;data_to_save&quot;
	 * @param files an associative array. Normally it's $_FILES
	 */
	function addData($post = null, $files = null) {
		if ($post == null &amp;&amp; $files == null)
			return FALSE;
		if ($post == null)
			$post = array();
		if ($files == null)
			$files = array();
		$empty = true;
		foreach ($post as $field) {
			if ($field != &quot;&quot; &amp;&amp; $field != null)
				$empty = FALSE;
		}
		foreach ($files as $field) {
			if ($field != &quot;&quot; &amp;&amp; $field != null)
				$empty = FALSE;
		}
		if ($empty)
			return FALSE;
		$fields_name = array_keys($post);
		foreach ($files as $file)
			array_push($fields_name, $file['label']);
		$fields_count = count($fields_name);
		if (count($fields_name) &lt; $fields_count) {
			$d = $fields_count - count($fields_name);
			for ($i = 0; $i &lt; $d; $i++)
				$fields_name[] = &quot;field_&quot; + ($i + $d);
		}

		// If the table does not exists, create it
		$result = mysql_query(&quot;SHOW FULL TABLES FROM `&quot; . $this-&gt;db_name . &quot;` LIKE '&quot; . mysql_real_escape_string($this-&gt;table_name) . &quot;'&quot;, $this-&gt;conn);
		if ($result &amp;&amp; mysql_num_rows($result) == 0) {
			$query = &quot;CREATE TABLE `&quot; . $this-&gt;db_name . &quot;`.`&quot; . $this-&gt;table_name . &quot;` (`id` INT NOT NULL AUTO_INCREMENT PRIMARY KEY ,&quot;;
			for ($i=0; $i&lt;$fields_count; $i++) {
				$query .= &quot;`&quot; . $fields_name[$i] . &quot;` TEXT CHARACTER SET utf8 COLLATE utf8_bin NOT NULL&quot;;
				if ($i != $fields_count - 1)
					$query .= &quot;,&quot;;
			}
			$query .= &quot;) ENGINE = MYISAM ;&quot;;
			mysql_query($query, $this-&gt;conn);
		}
		else // If the table has not enough fields, update it
		{
			$result = mysql_query(&quot;SHOW COLUMNS FROM `&quot; . $this-&gt;db_name . &quot;`.`&quot; . $this-&gt;table_name . &quot;`&quot;, $this-&gt;conn);
			if ($result) {
				// Actual fields
				$row = mysql_fetch_array($result);
				$query = &quot;ALTER TABLE `&quot; . $this-&gt;db_name. &quot;`.`&quot; . $this-&gt;table_name . &quot;`&quot;;
				$act_fields = array();
				while ($row = mysql_fetch_array($result))
					$act_fields[] = $row[0];
				// New fields
				$new_fields = array_diff($fields_name, $act_fields);
				$new_fields = array_merge($new_fields); // Order the indexes
				if (count($new_fields) &gt; 0) {
					for ($j = 0; $j &lt; count($new_fields); $j++) {
						$query .= &quot; ADD `&quot; . $new_fields[$j] . &quot;` TEXT CHARACTER SET utf8 COLLATE utf8_bin NOT NULL &quot;;
						if ($j != count($new_fields) - 1)
							$query .= &quot;,&quot;;
					}
					mysql_query($query, $this-&gt;conn);
				}
			}
		}

		// Save
		$query = &quot;INSERT INTO `&quot; . $this-&gt;db_name . &quot;`.`&quot; . $this-&gt;table_name . &quot;` (&quot;;
		$fields = array();
		for ($i = 0; $i&lt;$fields_count; $i++)
			array_push ($fields,  &quot;`&quot; . $fields_name[$i] . &quot;`&quot;);
		$query .= join(&quot;,&quot;, $fields);
		$query .= &quot;) VALUES (&quot;;

		$data = array();
		$p_keys = array_keys($post);
		for ($i = 0; $i&lt;count($post); $i++) {
			if (is_array($post[$p_keys[$i]])) {
				$s = &quot;&quot;;
				for ($x = 0; $x &lt; count($post[$p_keys[$i]]); $x++)
					$s .= (($x &gt; 0) ? &quot;, &quot; : &quot;&quot;) . $post[$p_keys[$i]][$x];
				array_push($data, &quot;'&quot; . mysql_real_escape_string(str_replace(array(&quot;\n&quot;, &quot;\r&quot;), array(&quot;&lt;br /&gt;&quot;, &quot;&quot;), $s)). &quot;'&quot;);
			} else
				array_push($data, &quot;'&quot; . mysql_real_escape_string(str_replace(array(&quot;\n&quot;, &quot;\r&quot;), array(&quot;&lt;br /&gt;&quot;, &quot;&quot;), $post[$p_keys[$i]])). &quot;'&quot;);
		}

		$f = true;
		foreach ($files as $file) {
			if ($file['value']['tmp_name'] != &quot;&quot;) {
				// Upload files using an unique name
				$fname = $this-&gt;findFileName($file['value']['name']);
				$f = @move_uploaded_file($file['value']['tmp_name'], ($this-&gt;file_storage != &quot;&quot; ? $this-&gt;file_storage . &quot;/&quot; : &quot;../&quot;) . $fname);
				array_push($data, &quot;'&quot; . mysql_real_escape_string($fname). &quot;'&quot;);
			} else
				array_push($data, &quot;''&quot;);
		}
		$query .= join(&quot;,&quot;, $data);
		$query .=&quot;)&quot;;

		$r = mysql_query($query, $this-&gt;conn);

		if ($r &amp;&amp; $f)
			return TRUE;
		return FALSE;
	}

	/**
	 * Set the field names
	 * @param array An array containing the field names (array)
	 */
	function setFieldNames($array) {
		$this-&gt;field_names = $array;
	}

	/**
	 * Show the current storage table (read only version)
	 * @param order ASC or DESC
	 */
	function showTable($order = &quot;ASC&quot;) {
		$result = mysql_query(&quot;SHOW COLUMNS FROM `&quot; . $this-&gt;db_name . &quot;`.`&quot; . $this-&gt;table_name . &quot;`&quot;, $this-&gt;conn);
		if ($result &amp;&amp; mysql_num_rows($result)&gt;1) {
			echo &quot;&lt;table class=\&quot;imDbTable\&quot;&gt;\n&quot;;
			echo &quot;	&lt;tr&gt;\n&quot;;
			$row = mysql_fetch_array($result);
		  for ($i=1; $i&lt;mysql_num_rows($result); $i++) {
			$row = mysql_fetch_array($result);
			if (array_key_exists($i-1, $this-&gt;field_names)) $field = $this-&gt;field_names[$i - 1];
			else 	$field = $row[0];
			echo &quot;		&lt;td class='imDbTableHead'&gt;&quot; . $field . &quot;&lt;/td&gt;\n&quot;;
			}
			echo &quot;	&lt;/tr&gt;\n&quot;;
			$result = mysql_query(&quot;SELECT * FROM `&quot; . $this-&gt;db_name. &quot;`.`&quot; . $this-&gt;table_name . &quot;` ORDER BY id &quot; . $order, $this-&gt;conn);
			while ($row = mysql_fetch_array($result)){
				echo &quot;	&lt;tr&gt;\n&quot;;
					for ($i = 1; $i &lt; mysql_num_fields($result); $i++) {
						if (file_exists($this-&gt;file_storage . &quot;/&quot; . $row[$i]))
							echo &quot;		&lt;td&gt;&lt;a href=\&quot;&quot;  . $this-&gt;file_storage . &quot;/&quot; . $row[$i] . &quot;\&quot; target=\&quot;_blank\&quot;&gt;&quot; . $row[$i] . &quot;&lt;/a&gt;&lt;/td&gt;\n&quot;;
						else
							echo &quot;		&lt;td&gt;&quot; . $row[$i] . &quot;&lt;/td&gt;\n&quot;;
					}
				echo &quot;	&lt;/tr&gt;\n&quot;;
			}
			echo &quot;&lt;/table&gt;\n&quot;;
		}
	}

	/**
	 * Show the current storage table (r/w version)
	 * @param order ASC or DESC
	 */
	function showAdminTable($order = &quot;ASC&quot;) {
		$form_id = &quot;tt_form_&quot; . rand(0, 10000000);
		$result = mysql_query(&quot;SHOW COLUMNS FROM `&quot; . $this-&gt;db_name . &quot;`.`&quot; . $this-&gt;table_name . &quot;`&quot;, $this-&gt;conn);
		if ($result &amp;&amp; mysql_num_rows($result)&gt;1) {
			echo &quot;&lt;form id=\&quot;&quot; . $form_id . &quot;\&quot; method=\&quot;post\&quot; action=\&quot;&quot; . $_SERVER['PHP_SELF'] . &quot;?delete\&quot; onsubmit=\&quot;return confirm('Sei sicuro di voler confermare l\'operazione?');\&quot;&gt;\n&quot;;
			echo &quot;&lt;table class=\&quot;imDbTable\&quot;&gt;\n&quot;;
			echo &quot;	&lt;tr&gt;\n&quot;;
			$row = mysql_fetch_array($result);
			for ($i=1; $i&lt;mysql_num_rows($result); $i++) {
				$row = mysql_fetch_array($result);
				if (array_key_exists($i-1, $this-&gt;field_names)) $field = $this-&gt;field_names[$i - 1];
				else 	$field = $row[0];
				echo &quot;		&lt;td class='imDbTableHead'&gt;&quot; . $field . &quot;&lt;/td&gt;\n&quot;;
			}
			echo &quot;	&lt;/tr&gt;\n&quot;;
			$result = mysql_query(&quot;SELECT * FROM `&quot; . $this-&gt;db_name. &quot;`.`&quot; . $this-&gt;table_name . &quot;` ORDER BY id &quot; . $order, $this-&gt;conn);
			while ($row = mysql_fetch_array($result)){
				echo &quot;	&lt;tr&gt;\n&quot;;
					for ($i = 1; $i &lt; mysql_num_fields($result); $i++) {
						if (file_exists($this-&gt;file_storage . &quot;/&quot; . $row[$i]) &amp;&amp; !is_dir($this-&gt;file_storage . &quot;/&quot; . $row[$i]))
							echo &quot;		&lt;td&gt;&lt;a href=\&quot;&quot;  . $this-&gt;file_storage . &quot;/&quot; . $row[$i] . &quot;\&quot; target=\&quot;_blank\&quot;&gt;&quot; . $row[$i] . &quot;&lt;/a&gt;&lt;/td&gt;\n&quot;;
						else
							echo &quot;		&lt;td&gt;&quot; . $row[$i] . &quot;&lt;/td&gt;\n&quot;;
					}
				echo &quot;		&lt;td&gt;&lt;input type=\&quot;checkbox\&quot; value=\&quot;&quot; . $row[0] . &quot;\&quot; name=\&quot;&quot; . $row[0] . &quot;\&quot;&gt;&lt;/td&gt;\n&quot;;
				echo &quot;	&lt;/tr&gt;\n&quot;;
			}
			echo &quot;	&lt;tr&gt;\n&quot;;
			echo &quot;		&lt;td colspan=\&quot;&quot; . $i . &quot;\&quot; style=\&quot;text-align:right\&quot;&gt;Se selezionati: &lt;input type=\&quot;submit\&quot; value=\&quot;Elimina\&quot;&gt;&lt;/td&gt;\n&quot;;
			echo &quot;	&lt;/tr&gt;\n&quot;;
			echo &quot;&lt;/table&gt;&lt;/form&gt;\n&quot;;
		}
	}

	/**
	 * Find a free file name
	 */
	function findFileName($tmp_name) {
		$ext = substr($tmp_name, strrpos($tmp_name, &quot;.&quot;));
		$fname = basename($tmp_name, $ext);
		
		// Prevent code injection changing the file extension
		if (!in_array(strtolower($ext), array('.zip', '.txt', '.pdf', '.jpg', '.jpeg', '.bmp', '.png', '.gif', '.rar', '.gz', '.tar', '.7zip', '.7z', '.doc', '.docx', '.xls', '.xslx', '.odf', '.odt')))
			$ext .= &quot;.txt&quot;;
			
		do {
			$rname = $fname . &quot;_&quot; . date(&quot;Ymdhis&quot;) . rand(100,10000) .  $ext;
		} while (file_exists($this-&gt;file_storage . &quot;/&quot; . $rname));
		return $rname;
	}

	/**
	 * Delete a row from the storage table
	 * @param post The ids of the rows to deleted
	 */
	function deleteRow($post) {
		if ($post != null) {
			$results = mysql_query(&quot;SELECT * FROM `&quot; . $this-&gt;db_name . &quot;`.`&quot; . $this-&gt;table_name . &quot;` WHERE id IN (&quot; . join(&quot;,&quot;, $post) . &quot;)&quot;, $this-&gt;conn);
			//Segna come eliminati i file linkati
			while ($results &amp;&amp; $row = mysql_fetch_array($results))
				for ($i = 1; $i &lt; mysql_num_fields($results); $i++)
					if (file_exists($this-&gt;file_storage . &quot;/&quot; . $row[$i]) &amp;&amp; !is_dir($this-&gt;file_storage . &quot;/&quot; . $row[$i]))
						rename($this-&gt;file_storage . &quot;/&quot; . $row[$i], $this-&gt;file_storage . &quot;/&quot; . $row[$i] . &quot;.deleted&quot;);
			//Cancella i record
			mysql_query(&quot;DELETE FROM `&quot; . $this-&gt;db_name . &quot;`.`&quot; . $this-&gt;table_name . &quot;` WHERE id IN (&quot; . join(&quot;,&quot;, $post) . &quot;)&quot;, $this-&gt;conn);
		}
	}
}

/**
 * XML Handling class
 * @access public
 */
class imXML {
    var $tree = array();
    var $force_to_array = array();
    var $error = null;
	var $parser;

	// PHP 5
	function __construct($encoding = 'UTF-8') {
        $this-&gt;parser = xml_parser_create($encoding);
        xml_set_object($this-&gt;parser, $this); // $this was passed as reference &amp;$this
        xml_parser_set_option($this-&gt;parser, XML_OPTION_CASE_FOLDING, 0);
		xml_parser_set_option($this-&gt;parser, XML_OPTION_SKIP_WHITE, 1);
        xml_set_element_handler($this-&gt;parser, &quot;startEl&quot;, &quot;stopEl&quot;);
        xml_set_character_data_handler($this-&gt;parser, &quot;charData&quot;);
		xml_parser_set_option($this-&gt;parser, XML_OPTION_TARGET_ENCODING, 'UTF-8');
    }

	// PHP 4
    function imXML($encoding = 'UTF-8') {
        $this-&gt;parser = xml_parser_create($encoding);
        xml_set_object($this-&gt;parser, $this); // $this was passed as reference &amp;$this
        xml_parser_set_option($this-&gt;parser, XML_OPTION_CASE_FOLDING, 0);
		xml_parser_set_option($this-&gt;parser, XML_OPTION_SKIP_WHITE, 1);
        xml_set_element_handler($this-&gt;parser, &quot;startEl&quot;, &quot;stopEl&quot;);
        xml_set_character_data_handler($this-&gt;parser, &quot;charData&quot;);
		xml_parser_set_option($this-&gt;parser, XML_OPTION_TARGET_ENCODING, 'UTF-8');
    }

    function parse_file($file) {
		$fp = @fopen($file, &quot;r&quot;);
		if (!$fp)
			return FALSE;
		while ($data = fread($fp, 4096)) {
			if (!xml_parse($this-&gt;parser, $data, feof($fp))) {
				return FALSE;
			}
		}
		fclose($fp);
		return $this-&gt;tree[0][&quot;content&quot;];
	}

	function parse_string($str) {
		if (!xml_parse($this-&gt;parser, $str))
			return FALSE;
		return $this-&gt;tree[0][&quot;content&quot;];
	}

    function startEl($parser, $name, $attrs) {
        array_unshift($this-&gt;tree, array(&quot;name&quot; =&gt; $name));
    }

    function stopEl($parser, $name) {
        if ($name != $this-&gt;tree[0][&quot;name&quot;])
			return FALSE;
        if (count($this-&gt;tree) &gt; 1) {
            $elem = array_shift($this-&gt;tree);
            if (isset($this-&gt;tree[0][&quot;content&quot;][$elem[&quot;name&quot;]])) {
	            if (is_array($this-&gt;tree[0][&quot;content&quot;][$elem[&quot;name&quot;]]) &amp;&amp; isset($this-&gt;tree[0][&quot;content&quot;][$elem[&quot;name&quot;]][0])) {
	                array_push($this-&gt;tree[0][&quot;content&quot;][$elem[&quot;name&quot;]], $elem[&quot;content&quot;]);
	            } else {
	                $this-&gt;tree[0][&quot;content&quot;][$elem[&quot;name&quot;]] =
	                array($this-&gt;tree[0][&quot;content&quot;][$elem[&quot;name&quot;]],$elem[&quot;content&quot;]);
	            }
            } else {
	            if (in_array($elem[&quot;name&quot;],$this-&gt;force_to_array)) {
	                $this-&gt;tree[0][&quot;content&quot;][$elem[&quot;name&quot;]] = array($elem[&quot;content&quot;]);
	            } else {
	                if (!isset($elem[&quot;content&quot;])) $elem[&quot;content&quot;] = &quot;&quot;;
	                $this-&gt;tree[0][&quot;content&quot;][$elem[&quot;name&quot;]] = $elem[&quot;content&quot;];
	            }
            }
        }
    }

    function charData($parser, $data) {
        if (!is_string($this-&gt;tree[0][&quot;content&quot;]) &amp;&amp; !preg_match(&quot;/\\S/&quot;, $data))
			return FALSE;
        $this-&gt;tree[0][&quot;content&quot;] .= $data;
    }
}


/**
 * Captcha handling class
 * @access public
 */
class imCaptcha {

	/**
	 * Show the captcha chars
	 */
	function show($sCode) {
		global $oNameList;
		global $oCharList;

		$text = &quot;&lt;!DOCTYPE HTML&gt;
			&lt;html&gt;
		  &lt;head&gt;
		  &lt;meta http-equiv=\&quot;content-type\&quot; content=\&quot;text/html; charset=utf-8\&quot;&gt;
		  &lt;meta http-equiv=\&quot;pragma\&quot; content=\&quot;no-cache\&quot;&gt;
		  &lt;meta http-equiv=\&quot;cache-control\&quot; content=\&quot;no-cache, must-revalidate\&quot;&gt;
		  &lt;meta http-equiv=\&quot;expires\&quot; content=\&quot;0\&quot;&gt;
		  &lt;meta http-equiv=\&quot;last-modified\&quot; content=\&quot;\&quot;&gt;
		  &lt;/head&gt;
		  &lt;body style=\&quot;margin: 0; padding: 0; border-collapse: collapse;\&quot;&gt;&quot;;

		for ($i=0; $i&lt;strlen($sCode); $i++)
			$text .= &quot;&lt;img style=\&quot;margin:0; padding:0; border: 0; border-collapse: collapse; width: 24px; height: 24px; position: absolute; top: 0; left: &quot; . (24 * $i) . &quot;px;\&quot; src=\&quot;imcpa_&quot;.$oNameList[substr($sCode,$i,1)].&quot;.gif\&quot; width=\&quot;24\&quot; height=\&quot;24\&quot;&gt;&quot;;

		$text .= &quot;&lt;/body&gt;&lt;/html&gt;&quot;;

		return $text;
	}

	/**
	 * Check the sent data
	 * @param sCode The correct code (string)
	 * @param dans The user's answer (string)
	 */
	function check($sCode, $ans) {
		global $oCharList;
		if ($ans == &quot;&quot;)
			return '-1';
		for ($i=0; $i&lt;strlen($sCode); $i++)
		  if ($oCharList[substr(strtoupper($sCode),$i,1)] != substr(strtoupper($ans), $i,1))
			return '-1';
		return '0';
	}
}

/**
 * Comments
 * @access public
 */
class imComment {

	/**
	 * Get the comments from a file
	 * @param file The source file path
	 */
	function getComments($file) {
		$xmlstring = file_get_contents($file); 
		if (strpos($xmlstring, &quot;&lt;?xml&quot;) !== FALSE) {
			$xml = new imXML();

			// Remove the garbage (needed to avoid loosing comments when the xml string is malformed)
			$xmlstring = preg_replace('/&lt;([0-9]+)&gt;.*&lt;\/\1&gt;/i', '', $xmlstring);
			$xmlstring = preg_replace('/&lt;comment&gt;\s*&lt;\/comment&gt;/i', '', $xmlstring);
			
			$comments = $xml-&gt;parse_string($xmlstring);
			if ($comments !== FALSE &amp;&amp; is_array($comments)) {
				if (!is_array($comments['comment'][0])) {
					return str_replace(array(&quot;\\'&quot;, '\\&quot;'), array(&quot;'&quot;, '&quot;'), array($comments['comment']));
				} else {
					for ($i = 0; $i &lt; count($comments['comment']); $i++) {
						$comments['comment'][$i]['body'] = str_replace(array(&quot;\\'&quot;, '\\&quot;'), array(&quot;'&quot;, '&quot;'), htmlspecialchars_decode($comments['comment'][$i]['body']));
						$comments['comment'][$i]['name'] = str_replace(array(&quot;\\'&quot;, '\\&quot;'), array(&quot;'&quot;, '&quot;'), htmlspecialchars_decode($comments['comment'][$i]['name']));
						$comments['comment'][$i]['body'] = str_replace(&quot;\\\&quot;&quot;, &quot;\&quot;&quot;, htmlspecialchars_decode($comments['comment'][$i]['body']));
						$comments['comment'][$i]['name'] = str_replace(&quot;\\\&quot;&quot;, &quot;\&quot;&quot;, htmlspecialchars_decode($comments['comment'][$i]['name']));
					}
					return $comments['comment'];
				}
			} else {
				// The comments cannot be retrieved. The XML is jammed.
				// Do a backup copy of the file and then reset the xml.
				// Hashed names ensure that a file is not copied more than once
				$n = $file . &quot;_version_&quot; . md5($xmlstring);
				if (!file_exists($n))
					copy($file, $n);
				return array();
			}
		}
		else
			return $this-&gt;getComments_old($file);
	}

	/**
	 * Get the comments from a v8 comments file
	 * @param file The source file path
	 */
	function getComments_old($file) {
		if(file_exists($file)) {
			$f = file_get_contents($file);
			$f = explode(&quot;\n&quot;,$f);
			for($i = 0;$i &lt; count($f)-1; $i += 6) {
				$c[$i/6]['name'] = stripslashes($f[$i]);
				$c[$i/6]['email'] = $f[$i+1];
				$c[$i/6]['url'] = $f[$i+2];
				$c[$i/6]['body'] = stripslashes($f[$i+3]);
				$c[$i/6]['timestamp'] = $f[$i+4];
				$c[$i/6]['approved'] = $f[$i+5];
				$c[$i/6]['rating'] = 0;
			}
			return $c;
		}
		else
		  return -1;
	}

	/**
	 * Save the comments in a xml file
	 * @param file The destination file path
	 * @param comments An associative array containing the comments data
	 */
	function writeXML($file, $comments) {
		if (count($comments) == 0)
			return -2;

		$xml = &quot;&lt;?xml version=\&quot;1.0\&quot; encoding=\&quot;UTF-8\&quot;?&gt;\n&quot;;
		$xml .= &quot;&lt;comments&gt;\n&quot;;
		foreach ($comments as $comment) {
			$txml = &quot;&quot;;
			foreach ($comment as $key =&gt; $value) {
				// Well formed content only
				if (!preg_match('/[0-9]+/', $key) &amp;&amp; in_array(gettype($value), array('string', 'integer', 'double'))) {
					$code = str_replace(array(&quot;\\'&quot;, '\\&quot;', &quot;\\\&quot;&quot;), array(&quot;'&quot;, '&quot;', &quot;\&quot;&quot;), preg_replace('/[\n\r\t]*/', '', nl2br($value)));
					$txml .= &quot;\t\t&lt;&quot; . $key . &quot;&gt;&lt;![CDATA[&quot; . htmlspecialchars($code) . &quot;]]&gt;&lt;/&quot; . $key . &quot;&gt;\n&quot;;
				}
			}
			if ($txml != &quot;&quot;)
				$xml .= &quot;\t&lt;comment&gt;\n&quot; . $txml . &quot;\t&lt;/comment&gt;\n&quot;;
		}
		$xml .= &quot;&lt;/comments&gt;&quot;;

		if ((is_writable($file) || !file_exists($file)))  {
			if (!$f = fopen($file, 'w+'))
				return -3;
			else {
				if (flock($f, LOCK_EX))
					$locked = 1;
				if (fwrite($f, $xml) === FALSE)
					return -4;
				else {
					if($locked)
						flock($f, LOCK_UN);
					fclose($f);
					return 0;
				}
			}
		}
		else
		  return -2;
	}

	/**
	 * Add a comment to a file
	 * @param file The destination file path
	 * @param name The user's name
	 * @param email The user's email
	 * @param url The user's site url
	 * @param body The user's message
	 * @param abuse Set 1 to mark the message as an abuse
	 * @param approved Set 1 to mark the message as approved
	 */
	function addComment($file,$name,$email,$url,$body,$abuse = &quot;0&quot;,$approved = 0) {
		global $imSettings;

		$name = filterCode($name);
		$email = filterCode($email);
		$url = filterCode($url);
		$body = filterCode($body, TRUE);

		$locked = 0;
		$comments = $this-&gt;getComments($file);
		if (!is_array($comments))
			$comments = array();
		if ($url != &quot;&quot; &amp;&amp; imstripos($url, &quot;http://&quot;) === FALSE)
			$url = &quot;http://&quot; . $url;
		$comments[] = array(&quot;name&quot; =&gt; $name, &quot;email&quot; =&gt; $email, &quot;url&quot; =&gt; $url, &quot;body&quot; =&gt; $body, &quot;abuse&quot; =&gt; $abuse, &quot;timestamp&quot; =&gt; date(&quot;d-m-Y H:i:s&quot;), &quot;approved&quot; =&gt; $approved);
		if($file != &quot;&quot; &amp;&amp; trim($name) != &quot;&quot; &amp;&amp; trim($email) != &quot;&quot; &amp;&amp; trim($body) != &quot;&quot;) {
			// Do a backup of the current message if it contains comments
			if (count($comments) &gt; 1)
				@copy($file, $file . &quot;_bk&quot;);
			return $this-&gt;writeXML($file, $comments);
		} else
			return -1;
	}

	/**
	 * Add a comment to a file
	 * @param file The destination file
	 * @param n The comment number (0 is the first comment)
	 * @param approved Set 1 to approve the comment, 0 to unapprove
	 */
	function approveComment($file,$n,$approved) {
		$locked = 0;
		$fn = $file;
		if(!copy($fn,$fn . &quot;_bk&quot;))
		  return -1;
		$c = $this-&gt;getComments($file);
		if($c == -1)
		  return -2;
		if(!file_exists($fn))
		  return -3;
		if(!is_writable($fn))
		  return -4;
		$c[$n - 1]['approved'] = $approved;
		$this-&gt;writeXML($file, $c);
		return 0;
	}

	/**
	 * Delete a comment
	 * @param file The destination file
	 * @param n The comment number (0 is the first comment)
	 */
	function removeComment($file,$n) {
		$locked = 0;
		$fn = $file;
		if(!copy($fn,$fn . &quot;_bk&quot;))
		  return -1;
		$c = $this-&gt;getComments($file);
		if($c == -1)
		  return -2;
		if(!file_exists($fn))
		  return -3;
		if(!is_writable($fn))
		  return -4;
		for ($i = 0; $i &lt; count($c); $i++) {
			if ($i != $n - 1)
				$comments[] = $c[$i];
		}
		$this-&gt;writeXML($file, $comments);
		return 0;
	}

	/**
	 * Set the abuse
	 * @param file The destination file
	 * @param n The comment number (0 is the first comment)
	 * @param abuse Set 1 to set as an abuse
	 */
	function setAbuse($file, $n, $abuse) {
		$locked = 0;
		$fn = $file;
		if(!copy($fn,$fn . &quot;_bak&quot;))
		  return -1;
		$c = $this-&gt;getComments($file);
		if($c == -1)
		  return -2;
		if(!file_exists($fn))
		  return -3;
		if(!is_writable($fn))
		  return -4;
		$c[$n - 1]['abuse'] = $abuse;
		$this-&gt;writeXML($file, $c);
		return 0;
	}
}

/**
 * Blog class
 * @access public
 */
class imBlog {

	var $comments; //Comments class

	// PHP 5
	function __construct() {
		$this-&gt;comments = new imComment();
	}

	// PHP 4
	function imBlog() {
		$this-&gt;comments = new imComment();
	}

	function formatTimestamp($ts) {
		return date(&quot;d/m/Y H:i:s&quot;, strtotime($ts));
	}

	/**
	 * Get the comments from a post
	 * @param post the post ID
	 */
	function getComments($post) {
		global $imSettings;
		return $this-&gt;comments-&gt;getComments($imSettings['general']['dir'] . $imSettings['blog']['file_prefix'] . 'pc' . $post);
	}

	/**
	 * Add a comment to a post
	 * @param post the post ID
	 * @param file The destination file path
	 * @param name The user's name
	 * @param email The user's email
	 * @param url The user's site url
	 * @param body The user's message
	 */
	function addComment($post,$name,$email,$url,$body) {
		global $imSettings;
		if (!file_exists($imSettings['general']['dir']) &amp;&amp; $imSettings['general']['dir'] != &quot;&quot; &amp;&amp; $imSettings['general']['dir'] != &quot;./.&quot;)
			@mkdir($imSettings['general']['dir'], 0777, TRUE);
		return $this-&gt;comments-&gt;addComment($imSettings['general']['dir'] . $imSettings['blog']['file_prefix'] . 'pc' . $post,$name,$email,$url,$body, &quot;0&quot;, ($imSettings['blog']['approve_comments'] == 1) ? 0 : 1);
	}

	/**
	 * Approve a comment
	 * @param post the post ID
	 * @param n The comment number
	 * @param approved Set 1 to approve
	 */
	function approveComment($post,$n,$approved) {
		global $imSettings;
		return $this-&gt;comments-&gt;approveComment($imSettings['general']['dir'] . $imSettings['blog']['file_prefix'] . 'pc' . $post,$n,$approved);
	}

	/**
	 * Remove a comment
	 * @param post the post ID
	 * @param n The comment number
	 */
	function removeComment($post,$n) {
		global $imSettings;
		return $this-&gt;comments-&gt;removeComment($imSettings['general']['dir'] . $imSettings['blog']['file_prefix'] . 'pc' . $post, $n);
	}

	/**
	 * Abuse a comment
	 * @param post the post ID
	 * @param n The comment number
	 * @param abuse Set 1 to abuse
	 */
	function setAbuse($post, $n, $abuse) {
		global $imSettings;
		return $this-&gt;comments-&gt;setAbuse($imSettings['general']['dir'] . $imSettings['blog']['file_prefix'] . 'pc' . $post, $n, $abuse);
	}

	/**
	 * Get the last update date
	 */
	function getLastModified() {
		global $imSettings;
		$c = $this-&gt;comments-&gt;getComments($_GET['id']);
		if($_GET['id'] != &quot;&quot; &amp;&amp; $c != -1) {
		  return $this-&gt;formatTimestamp($c[count($c)-1]['timestamp']);
		}
		else {
		  $last_post = $imSettings['blog']['posts'];
		  $last_post = array_shift($last_post);
		  return $last_post['timestamp'];
		}
	}

	/**
	 * Show a post
	 * @param id the post id
	 * @param ext Set 1 to show as extended
	 * @param first Set 1 if this is the first post in the list
	 */
	function showPost($id,$ext=0,$first=0) {
		global $imSettings;
		global $l10n;
		$bp = $imSettings['blog']['posts'][$id];

		echo &quot;&lt;h2 id=\&quot;imPgTitle\&quot; style=\&quot;display: block;\&quot;&gt;&quot; . $bp['title'] . &quot;&lt;/h2&gt;\n&quot;;
		echo &quot;&lt;div class=\&quot;imBreadcrumb\&quot; style=\&quot;display: block;\&quot;&gt;&quot; . $l10n['blog_published_by'] . &quot;&lt;strong&gt; &quot; . $bp['author'] . &quot; &lt;/strong&gt;&quot;;
		echo $l10n['blog_in'] . &quot; &lt;a href=\&quot;?category=&quot; . urlencode($bp['category']) . &quot;\&quot; target=\&quot;_blank\&quot; rel=\&quot;nofollow\&quot;&gt;&quot; . $bp['category'] . &quot;&lt;/a&gt; &amp;middot; &quot; . $bp['timestamp'];

		// Media audio/video
		if ($bp['media'] != null) {
			echo &quot; &amp;middot; &lt;a href=\&quot;&quot; . $bp['media'] . &quot;\&quot;&gt;Download &quot; . basename($bp['media']) . &quot;&lt;/a&gt;&quot;;
		}

		if (count($bp['tag']) &gt; 0) {
			echo &quot;&lt;br /&gt;Tags: &quot;;
			for ($i = 0; $i &lt; count($bp['tag']); $i++) {
				echo &quot;&lt;a href=\&quot;?tag=&quot; . $bp['tag'][$i] . &quot;\&quot;&gt;&quot; . $bp['tag'][$i] . &quot;&lt;/a&gt;&quot;;
				if ($i &lt; count($bp['tag']) - 1)
					echo &quot;,&amp;nbsp;&quot;;
			}
		}
		echo &quot;&lt;/div&gt;\n&quot;;

		if($ext != 0 || $first != 0) {
			echo &quot;&lt;div class=\&quot;imBlogPostBody\&quot;&gt;\n&quot;;

			if ($bp['mediahtml'] != null) {
				echo $bp['mediahtml'] . &quot;\n&quot;;
			}

			echo $bp['body'];

			if (count($bp['sources']) &gt; 0) {
				echo &quot;\t&lt;div class=\&quot;imBlogSources\&quot;&gt;\n&quot;;
				echo &quot;\t\t&lt;b&gt;&quot; . $l10n['blog_sources'] . &quot;&lt;/b&gt;:&lt;br /&gt;\n&quot;;
				echo &quot;\t\t&lt;ul&gt;\n&quot;;

				foreach ($bp['sources'] as $source) {
					echo &quot;\t\t\t&lt;li&gt;&quot; . $source . &quot;&lt;/li&gt;\n&quot;;
				}

				echo &quot;\t\t&lt;/ul&gt;\n\t&lt;/div&gt;\n&quot;;
			}
			echo (($imSettings['blog']['addThis'] != null) ? &quot;&lt;br /&gt;&quot; . $imSettings['blog']['addThis'] : &quot;&quot;) . &quot;&lt;br /&gt;&lt;br /&gt;&lt;/div&gt;\n&quot;;
		}
		else {
			echo &quot;&lt;div class=\&quot;imBlogPostSummary\&quot;&gt;&quot; . $bp['summary'] . &quot;&lt;/div&gt;\n&quot;;
		}
		if($ext == 0) {
			echo &quot;&lt;div class=\&quot;imBlogPostRead\&quot;&gt;&lt;a class=\&quot;imCssLink\&quot; href=\&quot;?id=&quot; . $id . &quot;\&quot;&gt;&quot; . $l10n['blog_read_all'] .&quot; &amp;raquo;&lt;/a&gt;&lt;/div&gt;\n&quot;;
		}
		else {
			echo &quot;&lt;div class=\&quot;imBlogPostFooHTML\&quot;&gt;&quot; . $bp['foo_html'] . &quot;&lt;/div&gt;\n&quot;;
		}

		if($ext != 0 &amp;&amp; $bp['comments'] == true) { //&amp;&amp; @chdir($imSettings['general']['dir'])
			echo &quot;&lt;div class=\&quot;imBlogPostComments\&quot;&gt;\n&quot;;
			if(($c = $this-&gt;getComments($id)) != -1) {
				if(is_array($c))
					foreach($c as $comment)
						if($comment['approved'] == 1)
							$ca[] = $comment;
				echo &quot;\t&lt;div class=\&quot;imBlogCommentsCount\&quot;&gt;&quot; . (count($ca) &gt; 0 ? count($ca) . &quot; &quot; . (count($ca) &gt; 1 ? $l10n['blog_comments'] : $l10n['blog_comment']) : $l10n['blog_no_comment']) . &quot;&lt;/div&gt;\n&quot;;
				for($i = 0;$i &lt; count($ca); $i++) {
					echo &quot;\t&lt;div class=\&quot;imBlogPostCommentUser\&quot;&gt;&quot; . (stristr($ca[$i]['url'],&quot;http&quot;) ? &quot;&lt;a href=\&quot;&quot; . $ca[$i]['url'] . &quot;\&quot; class=\&quot;imCssLink\&quot; target=\&quot;_blank\&quot; &quot; . (strpos($ca[$i]['url'], $imSettings['general']['url']) === FALSE ? 'rel=&quot;nofollow&quot;' : '') . &quot;&gt;&quot; . $ca[$i]['name'] . &quot;&lt;/a&gt;&quot; : $ca[$i]['name']) . &quot;&lt;/div&gt;\n&quot;;
					echo &quot;\t&lt;div class=\&quot;imBlogPostCommentDate imBreadcrumb\&quot; style=\&quot;display: block\&quot;&gt;&quot; . $this-&gt;formatTimestamp($ca[$i]['timestamp']) . &quot;&lt;/div&gt;\n&quot;;
					echo &quot;\t&lt;div class=\&quot;imBlogPostCommentBody\&quot;&gt;&quot; . $ca[$i]['body'] . &quot;&lt;/div&gt;\n&quot;;
					echo &quot;\t&lt;div class=\&quot;imBlogPostAbuse\&quot;&gt;&lt;a class=\&quot;imCssLink\&quot; href=\&quot;&quot; . basename($_SERVER['PHP_SELF']) . &quot;?id=&quot; . $id . &quot;&amp;abuse=&quot; . ($i + 1) . &quot;\&quot;&gt;&lt;img src=\&quot;../res/exclamation.png\&quot; alt=\&quot;&quot; . $l10n['blog_abuse'] . &quot;\&quot; title=\&quot;&quot; . $l10n['blog_abuse'] . &quot;\&quot; /&gt;&lt;/a&gt;&lt;/div&gt;\n&quot;;
				}
				echo &quot;&lt;br /&gt;&quot;;
			}
			else {
					echo &quot;\t&lt;div class=\&quot;imBlogCommentsCount\&quot;&gt;&quot; . $l10n['blog_no_comment'] . &quot;&lt;/div&gt;\n&quot;;
			}
			if($_GET['ok'] == 1 &amp;&amp; $imSettings['blog']['approve_comments']) {
				echo &quot;&lt;div class=\&quot;imBlogCommentsMsgOK\&quot;&gt;&quot; . $l10n['blog_send_confirmation'] . &quot;&lt;br /&gt;&lt;/div&gt;&quot;;
			}
			if($_GET['err'] != &quot;&quot;) {
				echo &quot;&lt;div class=\&quot;imBlogCommentsMsgErr\&quot;&gt;&quot; . $l10n['blog_send_error'] . &quot;&lt;br /&gt;&lt;/div&gt;&quot;;
			}
			echo &quot;&lt;div class=\&quot;imBlogCommentsForm\&quot; style=\&quot;width: 300px;\&quot;&gt;
			  &lt;form id=\&quot;blogComment\&quot; action=\&quot;&quot; . $_SERVER['PHP_SELF'] . &quot;?id=&quot; . $id . &quot;\&quot; method=\&quot;post\&quot; onsubmit=\&quot;return x5engine.imForm.validate(this, {type: 'tip', showAll: true})\&quot;&gt;
				&lt;input type=\&quot;hidden\&quot; name=\&quot;post_id\&quot; value=\&quot;&quot; . $id . &quot;\&quot;/&gt;
				&lt;div class=\&quot;imBlogCommentRow\&quot;&gt;
					&lt;label for=\&quot;form_name\&quot; style=\&quot;float: left;\&quot;&gt;&quot; . $l10n['blog_name'] . &quot;*&lt;/label&gt; &lt;input type=\&quot;text\&quot; id=\&quot;form_name\&quot; name=\&quot;name\&quot; class=\&quot;imfield mandatory\&quot; style=\&quot;float: right;\&quot; /&gt;
				&lt;/div&gt;
				&lt;div class=\&quot;imBlogCommentRow\&quot;&gt;
					&lt;label for=\&quot;form_email\&quot; style=\&quot;float: left;\&quot;&gt;&quot; . $l10n['blog_email'] . &quot;*&lt;/label&gt; &lt;input type=\&quot;text\&quot; id=\&quot;form_email\&quot; name=\&quot;email\&quot; class=\&quot;imfield mandatory valEmail\&quot; style=\&quot;float: right;\&quot; /&gt;
				&lt;/div&gt;
				&lt;div class=\&quot;imBlogCommentRow\&quot;&gt;
					&lt;label for=\&quot;form_url\&quot; style=\&quot;float: left;\&quot;&gt;&quot; . $l10n['blog_website'] . &quot;&lt;/label&gt; &lt;input type=\&quot;text\&quot; id=\&quot;form_url\&quot; name=\&quot;url\&quot; style=\&quot;float: right;\&quot; class=\&quot;imfield\&quot; /&gt;
				&lt;/div&gt;
				&lt;div class=\&quot;imBlogCommentRow\&quot;&gt;
					&lt;label for=\&quot;form_body\&quot; style=\&quot;clear: both;\&quot;&gt;&quot; . $l10n['blog_message'] . &quot;*&lt;/label&gt;&lt;textarea id=\&quot;form_body\&quot; name=\&quot;body\&quot; class=\&quot;imfield mandatory\&quot; style=\&quot;width: 100%; height: 100px;\&quot;&gt;&lt;/textarea&gt;
				&lt;/div&gt;&quot;;
				if ($imSettings['blog']['captcha'])
					echo &quot;&lt;div class=\&quot;imBlogCommentRow\&quot; style=\&quot;text-align: center\&quot;&gt;
							&lt;label for=\&quot;imCpt\&quot; style=\&quot;float: left;\&quot;&gt;&quot; . $l10n['form_captcha_title'] . &quot;&lt;/label&gt;&amp;nbsp;&lt;input type=\&quot;text\&quot; id=\&quot;imCpt\&quot; name=\&quot;imCpt\&quot; class=\&quot;imfield imCpt[5,../]\&quot; size=\&quot;5\&quot; style=\&quot;width: 120px; margin: 0 auto;\&quot; /&gt;
						&lt;/div&gt;&quot;;
				echo &quot;&lt;div class=\&quot;imBlogCommentRow\&quot; style=\&quot;text-align: center; margin: 0; padding: 0;\&quot;&gt;&lt;input type=\&quot;submit\&quot; value=\&quot;&quot; . $l10n['blog_send'] . &quot;\&quot; class=\&quot;imBlogCommentSubmitBtn\&quot;/&gt;&lt;/div&gt;
			  &lt;/form&gt;
			&lt;/div&gt;
			&lt;/div&gt;&quot;;
		}
	}

	/**
	 * Find the posts tagged with tag
	 * @param tag The searched tag
	 */
	function showTag($tag) {
		global $imSettings;
		if (count($imSettings['blog']['posts']) &gt; 0) {
			$i = 0;
			foreach ($imSettings['blog']['posts'] as $id =&gt; $post) {
				if (in_array($tag, $post['tag']))
					echo $this-&gt;showPost($id,0,(($i == 0) ? 1 : 0));
				if ($i &gt; 0)
					echo &quot;&lt;div class=\&quot;imBlogSeparator\&quot;&gt;&lt;/div&gt;\n&quot;;
				$i++;
			}
		}
		else {
			echo &quot;&lt;div class=\&quot;imBlogEmpty\&quot;&gt;Empty blog&lt;/div&gt;&quot;;
		}
	}

	/**
	 * Find the post in a category
	 * @param category the category ID
	 */
	function showCategory($category) {
		global $imSettings;
		$bps = $imSettings['blog']['posts_cat'][$category];
		if(is_array($bps)) {
			$bpsc = count($bps);
			for($i = 0; $i &lt; $bpsc; $i++)
				$this-&gt;showPost($bps[$i],0,($i == 0 ? 1 : 0));
		}
		else {
			echo &quot;&lt;div class=\&quot;imBlogEmpty\&quot;&gt;Empty category&lt;/div&gt;&quot;;
		}
	}

	/**
	 * Find the posts of the month
	 * @param month
	 */
	function showMonth($month) {
		global $imSettings;
		$bps = $imSettings['blog']['posts_month'][$month];
		if(is_array($bps)) {
			$bpsc = count($bps);
			for($i = 0; $i &lt; $bpsc; $i++)
				$this-&gt;showPost($bps[$i],0,($i == 0 ? 1 : 0));
		}
		else {
			echo &quot;&lt;div class=\&quot;imBlogEmpty\&quot;&gt;Empty month&lt;/div&gt;&quot;;
		}
	}

	/**
	 * Show the last n posts
	 * @param count the number of posts to show
	 */
	function showLast($count) {
		global $imSettings;
		$bps = array_keys($imSettings['blog']['posts']);
		if(is_array($bps)) {
			$bpsc = count($bps);
			for($i = 0; $i &lt; ($bpsc&lt;$count ? $bpsc : $count); $i++)
				$this-&gt;showPost($bps[$i],0,($i == 0 ? 1 : 0));
		}
		else {
			echo &quot;&lt;div class=\&quot;imBlogEmpty\&quot;&gt;Empty blog&lt;/div&gt;&quot;;
		}
	}

	/**
	 * Show the search results
	 * @param search the search query
	 */
	function showSearch($search) {
		global $imSettings;
		$bps = array_keys($imSettings['blog']['posts']);
		$j = 0;
		if(is_array($bps)) {
			$bpsc = count($bps);
			for($i = 0; $i &lt; $bpsc; $i++) {
				if(stristr($imSettings['blog']['posts'][$bps[$i]]['title'],$search) || stristr($imSettings['blog']['posts'][$bps[$i]]['summary'],$search) || stristr($imSettings['blog']['posts'][$bps[$i]]['body'],$search)) {
					$this-&gt;showPost($bps[$i],0,($j == 0 ? 1 : 0));
					$j++;
				}
			}
			if($j == 0) {
				echo &quot;&lt;div class=\&quot;imBlogEmpty\&quot;&gt;Empty search&lt;/div&gt;&quot;;
			}
		}
		else {
			echo &quot;&lt;div class=\&quot;imBlogEmpty\&quot;&gt;Empty blog&lt;/div&gt;&quot;;
		}
	}

	/**
	 * Show the categories sideblock
	 * @param n The number of categories to show
	 */
	function showBlockCategories($n) {
		global $imSettings;

		if (is_array($imSettings['blog']['posts_cat'])) {
			$categories = array_keys($imSettings['blog']['posts_cat']);
			array_multisort($categories);
			echo &quot;&lt;ul&gt;&quot;;
			for ($i = 0; $i &lt; count($categories) &amp;&amp; $i &lt; $n; $i++) {
				$post = $imSettings['blog']['posts'][$imSettings['blog']['posts_cat'][$categories[$i]][0]];
				echo &quot;&lt;li&gt;&lt;a href=\&quot;?category=&quot; . $categories[$i] . &quot;\&quot;&gt;&quot; . $post['category'] . &quot;&lt;/a&gt;&lt;/li&gt;&quot;;
			}
			echo &quot;&lt;/ul&gt;&quot;;
		}
	}

	/**
	 * Show the cloud sideblock
	 * @param type TAGS or CATEGORY
	 */
	function showBlockCloud($type) {
		global $imSettings;

		$max = 0;
		if ($type == &quot;tags&quot;) {
			$tags = array();
			foreach ($imSettings['blog']['posts'] as $id =&gt; $post) {
				foreach ($post['tag'] as $tag) {
					if ($tags[$tag] == null)
						$tags[$tag] = 1;
					else
						$tags[$tag] = $tags[$tag] + 1;
					if ($tags[$tag] &gt; $max)
						$max = $tags[$tag];
				}
			}

			$tags = shuffle_assoc($tags);

			$min_em = 0.95;
			$max_em = 1.25;
			foreach ($tags as $name =&gt; $number) {
				$size = number_format(($number/$max * ($max_em - $min_em)) + $min_em, 2, '.', '');
				echo &quot;\t\t\t&lt;span class=\&quot;imBlogCloudItem\&quot; style=\&quot;font-size: &quot; . $size . &quot;em;\&quot;&gt;\n&quot;;
				echo &quot;\t\t\t\t&lt;a href=\&quot;?tag=&quot; . $name . &quot;\&quot; style=\&quot;font-size: &quot; . $size . &quot;em;\&quot;&gt;&quot; . str_replace(&quot;_&quot;, &quot; &quot;, $name) . &quot;&lt;/a&gt;\n&quot;;
				echo &quot;\t\t\t&lt;/span&gt;\n&quot;;
			}
		} else if ($type == &quot;categories&quot;) {
			$categories = array();
			foreach ($imSettings['blog']['posts'] as $id =&gt; $post) {
				if ($categories[$post['category']] == null)
					$categories[$post['category']] = 1;
				else
					$categories[$post['category']] = $categories[$post['category']] + 1;
				if ($categories[$post['category']] &gt; $max)
					$max = $categories[$post['category']];
			}

			$categories[$category] = shuffle_assoc($categories[$category]);

			$min_em = 0.95;
			$max_em = 1.25;
			foreach ($categories as $name =&gt; $number) {
				$size = number_format(($number/$max * ($max_em - $min_em)) + $min_em, 2, '.', '');
				echo &quot;\t\t\t&lt;span class=\&quot;imBlogCloudItem\&quot; style=\&quot;font-size: &quot; . $size . &quot;em;\&quot;&gt;\n&quot;;
				echo &quot;\t\t\t\t&lt;a href=\&quot;?category=&quot; . str_replace(&quot; &quot;, &quot;_&quot;, $name) . &quot;\&quot; style=\&quot;font-size: &quot; . $size . &quot;em;\&quot;&gt;&quot; . $name . &quot;&lt;/a&gt;\n&quot;;
				echo &quot;\t\t\t&lt;/span&gt;\n&quot;;
			}
		}
	}

	/**
	 * Show the month sideblock
	 * @param n Number of entries
	 */
	function showBlockMonths($n) {
		global $imSettings;

		if (is_array($imSettings['blog']['posts_month'])) {
			$months = array_keys($imSettings['blog']['posts_month']);
			array_multisort($months, SORT_DESC);
			echo &quot;&lt;ul&gt;&quot;;
			for ($i = 0; $i &lt; count($months) &amp;&amp; $i &lt; $n; $i++) {
				$post = $imSettings['blog']['posts'][$imSettings['blog']['posts_cat'][$categories[$i]][0]];
				echo &quot;&lt;li&gt;&lt;a href=\&quot;?month=&quot; . $months[$i] . &quot;\&quot;&gt;&quot; . substr($months[$i], 4) . &quot;/&quot; . substr($months[$i], 0, 4) . &quot;&lt;/a&gt;&lt;/li&gt;&quot;;
			}
			echo &quot;&lt;/ul&gt;&quot;;
		}
	}

	/**
	 * Show the last posts block
	 * @param n The number of post to show
	 */
	function showBlockLast($n) {
		global $imSettings;

		if (is_array($imSettings['blog']['posts'])) {
			echo &quot;&lt;ul&gt;&quot;;
			for ($i = 0; $i &lt; count($imSettings['blog']['posts']) &amp;&amp; $i &lt; $n; $i++) {
				$post = array_keys($imSettings['blog']['posts']);
				$post = $imSettings['blog']['posts'][$post[$i]];
				echo &quot;&lt;li&gt;&lt;a href=\&quot;?id=&quot; . $post['id'] . &quot;\&quot;&gt;&quot; . $post['title'] . &quot;&lt;/a&gt;&lt;/li&gt;&quot;;
			}
			echo &quot;&lt;/ul&gt;&quot;;
		}
	}
}

/**
 * Guestbook class
 * @access public
 */
class imGuestBook {
	var $comments;
	var $path;
	var $email;
	var $direct_approval;

	// PHP 5
	function __construct($path, $email = '', $direct_approval = TRUE) {
		if ($direct_approval == TRUE)
			$this-&gt;direct_approval = 1;
		else
			$this-&gt;direct_approval = 0;
		if ($email != &quot;&quot; &amp;&amp; $email != null)
			$this-&gt;email = $email;
		$this-&gt;comments = new imComment();
		if (substr($path, -1, 1) != &quot;/&quot; &amp;&amp; $path != &quot;&quot;)
			$path .= &quot;/&quot;;
		if ($path != null)
			$this-&gt;path = $path;
		else
			$this-&gt;path = $imSettings['general']['dir'];

		if (!file_exists($this-&gt;path) &amp;&amp; $this-&gt;path != &quot;&quot; &amp;&amp; $this-&gt;path != &quot;./.&quot;) {
			mkdir($this-&gt;path, 0777, TRUE);
		}
	}

	// PHP 4
	function imGuestBook($path, $email = '', $direct_approval = TRUE) {
		if ($direct_approval == TRUE)
			$this-&gt;direct_approval = 1;
		else
			$this-&gt;direct_approval = 0;
		if ($email != &quot;&quot; &amp;&amp; $email != null)
			$this-&gt;email = $email;
		$this-&gt;comments = new imComment();
		if (substr($path, -1, 1) != &quot;/&quot; &amp;&amp; $path != &quot;&quot;)
			$path .= &quot;/&quot;;
		if ($path != null)
			$this-&gt;path = $path;
		else
			$this-&gt;path = $imSettings['general']['dir'];

		if (!file_exists($this-&gt;path) &amp;&amp; $this-&gt;path != &quot;&quot; &amp;&amp; $this-&gt;path != &quot;./.&quot;) {
			mkdir($this-&gt;path, 0777, TRUE);
		}
	}

	function formatTimestamp($ts) {
		return date(&quot;d/m/Y H:i:s&quot;, strtotime($ts));
	}

	/**
	 * Get the comments of the guestbook ID
	 * @param id The guestbook ID
	 */
	function getComments($id) {
		global $imSettings;
		return $this-&gt;comments-&gt;getComments($this-&gt;path . &quot;gb&quot; . $id);
	}

	/**
	 * Add a comment
	 * @param id The guestbook ID
	 * @param name The user's name
	 * @param email The user's email
	 * @param url The user's site url
	 * @param body The user's message
	 */
	function addComment($id,$name,$email,$url,$body) {
		global $imSettings;
		if (!file_exists($this-&gt;path) &amp;&amp; $this-&gt;path != &quot;&quot; &amp;&amp; $this-&gt;path != &quot;./.&quot;)
			@mkdir($this-&gt;path, 0777, TRUE);
		$em = new imSendEmail();
		$em-&gt;sendGuestbookEmail($id, $name, $email, $url, $body, $this-&gt;direct_approval, $this-&gt;email);
		return $this-&gt;comments-&gt;addComment($this-&gt;path . &quot;gb&quot; . $id,$name,$email,$url,$body, &quot;0&quot;, $this-&gt;direct_approval);
	}

	/**
	 * Approve a comment
	 * @param id the guestbook ID
	 * @param n The comment number
	 * @param approved Set 1 to approve
	 */
	function approveComment($id,$n,$approved) {
		global $imSettings;
		return $this-&gt;comments-&gt;approveComment($this-&gt;path . &quot;gb&quot; . $id,$n,$approved);
	}

	/**
	 * Delete a comment
	 * @param id the guestbook ID
	 * @param n The comment number
	 */
	function removeComment($id,$n) {
		global $imSettings;
		return $this-&gt;comments-&gt;removeComment($this-&gt;path . &quot;gb&quot; . $id, $n);
	}

	/**
	 * Abuse a comment
	 * @param post the post ID
	 * @param n The comment number
	 * @param abuse Set 1 to abuse
	 */
	function setAbuse($id, $n, $abuse) {
		global $imSettings;
		return $this-&gt;comments-&gt;setAbuse($this-&gt;path . &quot;gb&quot; . $id, $n, $abuse);
	}

	/**
	 * Show a guestbook
	 * @param id the guestbook ID
	 * @param captcha Set TRUE to show
	 */
	function showGuestBook($id, $captcha = TRUE) {
		global $imSettings;
		global $l10n;
		echo &quot;&lt;div class=\&quot;imBlogPostComments\&quot;&gt;&quot;;
		if(($c = $this-&gt;getComments($id)) != -1) {
			if(is_array($c))
				foreach($c as $comment)
					if($comment['approved'] == 1)
						$ca[] = $comment;
			echo &quot;&lt;div class=\&quot;imBlogCommentsCount\&quot;&gt;&quot; . (count($ca) &gt; 0 ? count($ca) . &quot; &quot; . (count($ca) &gt; 1 ? $l10n['blog_comments'] : $l10n['blog_comment']) : $l10n['blog_no_comment']) . &quot;&lt;/div&gt;&quot;;
			for($i = 0;$i &lt; count($ca); $i++) {
				echo &quot;&lt;div class=\&quot;imBlogPostCommentUser\&quot;&gt;&quot; . (stristr($ca[$i]['url'],&quot;http&quot;) ? &quot;&lt;a href=\&quot;&quot; . $ca[$i]['url'] . &quot;\&quot; target=\&quot;_blank\&quot; &quot; . (strpos($ca[$i]['url'], $imSettings['general']['url']) === FALSE ? 'rel=&quot;nofollow&quot;' : '') . &quot;&gt;&quot; . $ca[$i]['name'] . &quot;&lt;/a&gt;&quot; : $ca[$i]['name']) . &quot;&lt;/div&gt;&quot;;
				echo &quot;&lt;div class=\&quot;imBlogPostCommentDate imBreadcrumb\&quot; style=\&quot;display: block;\&quot;&gt;&quot; . $this-&gt;formatTimestamp($ca[$i]['timestamp']) . &quot;&lt;/div&gt;&quot;;
				echo &quot;&lt;div class=\&quot;imBlogPostCommentBody\&quot;&gt;&quot; . $ca[$i]['body'] . &quot;&lt;/div&gt;&quot;;
				echo &quot;&lt;div class=\&quot;imBlogPostAbuse\&quot;&gt;&lt;a href=\&quot;&quot; . basename($_SERVER['PHP_SELF']) . &quot;?id=&quot; . $id . &quot;&amp;abuse=&quot; . ($i + 1) . &quot;\&quot;&gt;&lt;img src=\&quot;res/exclamation.png\&quot; alt=\&quot;&quot; . $l10n['blog_abuse'] . &quot;\&quot; title=\&quot;&quot; . $l10n['blog_abuse'] . &quot;\&quot; /&gt;&lt;/a&gt;&lt;/div&gt;&quot;;
			}
		}
		else {
			echo &quot;&lt;div class=\&quot;imGuestbookCount\&quot;&gt;&quot; . $l10n['blog_no_comment'] . &quot;&lt;/div&gt;&quot;;
		}
		if($_GET['ok_' . $id] == 1 &amp;&amp; $this-&gt;direct_approval == 0) {
			echo &quot;&lt;div class=\&quot;imGuestbookMsgOK\&quot;&gt;&quot; . $l10n['blog_send_confirmation'] . &quot;&lt;/div&gt;&lt;br /&gt;&lt;br /&gt;&quot;;
		}
		if($_GET['err_' . $id] != &quot;&quot;) {
			echo &quot;&lt;div class=\&quot;imGuestbookErr\&quot;&gt;&quot; . $l10n['blog_send_error'] . &quot;&lt;/div&gt;&lt;br /&gt;&lt;br /&gt;&quot;;
		}

		echo &quot;&lt;div class=\&quot;imBlogCommentsForm\&quot;&gt;
			  &lt;form id=\&quot;guestBookComment_&quot; . $id . &quot;\&quot; action=\&quot;&quot; . $_SERVER['PHP_SELF'] . &quot;?id=&quot; . $id . &quot;\&quot; method=\&quot;post\&quot; onsubmit=\&quot;return x5engine.imForm.validate(this, {type: 'tip', showAll: true})\&quot;&gt;
				&lt;input type=\&quot;hidden\&quot; name=\&quot;post_id\&quot; value=\&quot;&quot; . $id . &quot;\&quot;/&gt;
				&lt;div class=\&quot;imBlogCommentRow\&quot;&gt;
					&lt;label for=\&quot;form_name\&quot; style=\&quot;float: left; width: 100px;\&quot;&gt;&quot; . $l10n['blog_name'] . &quot;*&lt;/label&gt; &lt;input type=\&quot;text\&quot; id=\&quot;form_name\&quot; name=\&quot;name\&quot; class=\&quot;imfield mandatory\&quot; /&gt;
				&lt;/div&gt;
				&lt;div class=\&quot;imBlogCommentRow\&quot;&gt;
					&lt;label for=\&quot;form_email\&quot; style=\&quot;float: left; width: 100px;\&quot;&gt;&quot; . $l10n['blog_email'] . &quot;*&lt;/label&gt; &lt;input type=\&quot;text\&quot; id=\&quot;form_email\&quot; name=\&quot;email\&quot; class=\&quot;imfield mandatory valEmail\&quot;/&gt;
				&lt;/div&gt;
				&lt;div class=\&quot;imBlogCommentRow\&quot;&gt;
					&lt;label for=\&quot;form_url\&quot; style=\&quot;float: left; width: 100px;\&quot;&gt;&quot; . $l10n['blog_website'] . &quot;&lt;/label&gt; &lt;input type=\&quot;text\&quot; id=\&quot;form_url\&quot; name=\&quot;url\&quot; class=\&quot;imfield\&quot; /&gt;
				&lt;/div&gt;
				&lt;div class=\&quot;imBlogCommentRow\&quot;&gt;
					&lt;br /&gt;&lt;label for=\&quot;form_body\&quot; style=\&quot;clear: both; width: 100px;\&quot;&gt;&quot; . $l10n['blog_message'] . &quot;*&lt;/label&gt;&lt;textarea id=\&quot;form_body\&quot; name=\&quot;body\&quot; class=\&quot;imfield mandatory\&quot; style=\&quot;width: 95%; height: 100px;\&quot;&gt;&lt;/textarea&gt;
				&lt;/div&gt;&quot;;
				if ($captcha)
					echo &quot;&lt;div class=\&quot;imBlogCommentRow\&quot; style=\&quot;text-align: center\&quot;&gt;
							&lt;label for=\&quot;imGuestBookCpt&quot; . $id . &quot;_imCpt\&quot; style=\&quot;float: left;\&quot;&gt;&quot; . $l10n['form_captcha_title'] . &quot;&lt;/label&gt;&amp;nbsp;&lt;input type=\&quot;text\&quot; id=\&quot;imGuestBookCpt&quot; . $id . &quot;_imCpt\&quot; name=\&quot;imCpt\&quot; maxlength=\&quot;5\&quot; class=\&quot;imfield imCpt[5]\&quot; size=\&quot;5\&quot; style=\&quot;width: 120px; margin: 0 auto;\&quot; /&gt;
						&lt;/div&gt;&quot;;
				echo &quot;&lt;div class=\&quot;imBlogCommentRow\&quot; style=\&quot;text-align: center\&quot;&gt;
						&lt;input type=\&quot;submit\&quot; value=\&quot;&quot; . $l10n['form_submit'] . &quot;\&quot; /&gt;
						&lt;input type=\&quot;reset\&quot; value=\&quot;&quot; . $l10n['form_reset'] . &quot;\&quot; /&gt;
					&lt;/div&gt;
			  &lt;/form&gt;
			  &lt;script type=\&quot;text/javascript\&quot;&gt;x5engine.imForm.initForm('#guestBookComment_&quot; . $id . &quot;');&lt;/script&gt;
			&lt;/div&gt;
			&lt;/div&gt;&quot;;
	}
}

/**
 * Star rating class
 * @access public
 */
class imStarRating {

	var $id;
	var $scale;

	// PHP 5
	function __construct($id, $scale) {
		$this-&gt;id = $id;
		$this-&gt;scale = $scale;
	}

	// PHP 4
	function imStarRating($id, $scale) {
		$this-&gt;id = $id;
		$this-&gt;scale = $scale;
	}

	/**
	 * Get the rating from a file
	 */
	function getRating() {
		global $imSettings;
		$xml = new imXML();
		$rating = $xml-&gt;parse_file($imSettings['general']['dir'] . &quot;/&quot; . $imSettings['guestbook']['file_prefix'] . &quot;sr&quot; . $this-&gt;id);
		if ($rating['scale'] == &quot;&quot; || $rating['scale'] == null)
			$rating['scale'] = $this-&gt;scale;
		if (is_array($rating))
			return $rating;
		else
			return FALSE;
	}

	/**
	 * Set a rating
	 * @param value The rating value
	 * @param scale The rating maximum value
	 */
	function setRating($value, $scale) {
		global $imSettings;
		$rating = $this-&gt;getRating();
		if (!$rating)
			$rating = array('scale' =&gt; $scale, 'vote_sum' =&gt; 0, 'count' =&gt; 0);
		$rating['vote_sum'] += $value;
		$rating['count'] += 1;

		$fp = fopen($imSettings['general']['dir'] . &quot;/&quot; . $imSettings['guestbook']['file_prefix'] . &quot;sr&quot; . $this-&gt;id, &quot;w&quot;);
		if (!$fp)
			return FALSE;

		$xml =  &quot;&lt;?xml version=\&quot;1.0\&quot; encoding=\&quot;UTF-8\&quot;?&gt;\n&quot;;
		$xml .= &quot;&lt;rating&gt;\n&quot;;
		$xml .= &quot;\t&lt;count&gt;&quot; . $rating['count'] . &quot;&lt;/count&gt;\n&quot;;
		$xml .= &quot;\t&lt;vote_sum&gt;&quot; . $rating['vote_sum'] . &quot;&lt;/vote_sum&gt;\n&quot;;
		$xml .= &quot;\t&lt;scale&gt;&quot; . $rating['scale'] . &quot;&lt;/scale&gt;\n&quot;;
		$xml .= &quot;&lt;/rating&gt;&quot;;

		fwrite($fp, $xml);
		fclose($fp);

		return TRUE;
	}

	/**
	 * Show the rating widget
	 */
	function showWidget() {
		$html =  &quot;&lt;div class=\&quot;imStarRating\&quot;&gt;\n&quot;;
		$avg_vote = 0;
		if (@$_COOKIE[$this-&gt;id] != &quot;y&quot; &amp;&amp; @$_POST['id'] != &quot;&quot; &amp;&amp; @$_POST['scale'] != &quot;&quot; &amp;&amp; @$_POST['value'] != &quot;&quot; &amp;&amp; @$_POST['id'] == $this-&gt;id) {
			$this-&gt;setRating(@$_POST['value'], @$_POST['scale']);
		}
		$rating = $this-&gt;getRating();
		if ($rating['count'] &gt; 0)
			$avg_vote = round($rating['vote_sum'] / $rating['count'], 1);
		$html .= &quot;Vote: &quot; . $avg_vote . &quot;/&quot; . $this-&gt;scale . &quot;&lt;br /&gt;&quot;;
		if (@$_COOKIE[$this-&gt;id] != &quot;y&quot;) {
			for ($i = 0; $i &lt; $rating['scale']; $i++)
				$html .= &quot;&lt;img src=\&quot;res/star_empty.png\&quot; style=\&quot;cursor: pointer;\&quot; id=\&quot;&quot; . $this-&gt;id . &quot;_star&quot; . ($i + 1) . &quot;\&quot; class=\&quot;imStarRating[&quot; . ($i + 1) . &quot;]\&quot; /&gt;&quot;;
			$html .= &quot;&lt;script type=\&quot;text/javascript\&quot;&gt;x5engine.imQueue.push_init(\&quot;x5engine.imStarRating('&quot; . $this-&gt;id . &quot;', &quot; . $rating['scale'] . &quot;, '&quot; . basename($_SERVER['PHP_SELF']) . &quot;')\&quot;);&lt;/script&gt;\n&quot;;
		}
		$html .= &quot;&lt;/div&gt;\n&quot;;

		echo $html;
	}
}

/**
 * Server Test Class
 * @access public
 */
class imTest {

	/*
	 * Session check
	 */
	function session_test() {
		global $l10n;
		if (!isset($_SESSION))
			return array(FALSE, null);
		$_SESSION['imAdmin_test'] = &quot;test_message&quot;;
		if ($_SESSION['imAdmin_test'] != &quot;test_message&quot;)
			return array(FALSE, $l10n['admin_test_session_suggestion']);
		return array(TRUE);
	}

	/*
	 * Writable files check
	 */
	function writable_folder_test() {
		global $imSettings;
		global $l10n;

		$root = getcwd();
		$dir = $imSettings['general']['dir'];

		if (!file_exists($imSettings['general']['dir']) &amp;&amp; $imSettings['general']['dir'] != &quot;&quot; &amp;&amp; $imSettings['general']['dir'] != &quot;./.&quot;)
			@mkdir($imSettings['general']['dir'], 0777, TRUE);

		if ($dir != &quot;&quot; &amp;&amp; !@chdir($dir)) {
			@chdir($root);
			return array(FALSE, $l10n['admin_test_folder_suggestion']);
		}

		$fp = @fopen(&quot;imAdmin_test_file&quot;, &quot;w&quot;);
		if (!$fp) {
			@chdir($root);
			return array(FALSE, $l10n['admin_test_folder_suggestion']);
		}
		if (fwrite($fp, &quot;test&quot;) === FALSE) {
			@chdir($root);
			return array(FALSE, $l10n['admin_test_folder_suggestion']);
		}
		fclose($fp);
		if (file_exists(&quot;imAdmin_test_file&quot;)) {
			unlink(&quot;imAdmin_test_file&quot;);
			@chdir($root);
			return array(TRUE);
		}
		@chdir($root);
		return array(FALSE, $l10n['admin_test_folder_suggestion']);
	}

	/*
	 * PHP Version check
	 */
	function php_version_test() {
		global $l10n;
		$php_version = PHP_VERSION;
		if (version_compare($php_version, '4.0.0') &lt; 0)
			return array(FALSE, $l10n['admin_test_version_suggestion']);

		return array(TRUE, $l10n['admin_test_version_suggestion']);
	}

	/*
	 * MySQL Connection check
	 */
	function mysql_test() {
		global $imSettings;
		global $l10n;
		$r = TRUE;
		$dir = &quot;mail&quot;;
		if (is_dir($dir)) {
			if ($dh = opendir($dir)) {
				while (($file = readdir($dh)) !== FALSE) {
					if ($file != &quot;..&quot; &amp;&amp; $file != &quot;.&quot;)
						include($dir . &quot;/&quot; . $file);
				}
				closedir($dh);
			}
		}

		if (is_array($settings)) {
			foreach ($settings as $form) {
				if ($form['db_host'] != NULL) {
					$test = new imDatabase($form['db_host'], $form['db_name'], $form['db_username'], $form['db_password'], &quot;&quot;, &quot;&quot;);
					if ($test-&gt;test_connection() === FALSE)
						$r = FALSE;
				}
			}
		}

		return array($r, $l10n['admin_test_database_suggestion']);
	}

	/*
	 * Do the test
	 */
	function doTest($name, $funct) {
		$result = $this-&gt;$funct();
		if ($result[0])
			echo &quot;&lt;div class=\&quot;imTest pass\&quot;&gt;&quot; . $name . &quot;&lt;span&gt;PASS&lt;/span&gt;&lt;/div&gt;&quot;;
		else
			echo &quot;&lt;div class=\&quot;imTest fail\&quot;&gt;&quot; . $name . &quot;&lt;span&gt;FAIL&lt;/span&gt;&lt;br /&gt;&lt;img src=\&quot;../res/info.gif\&quot;/ style=\&quot;vertical-align: middle;\&quot;&gt; &quot; . $result[1] . &quot;&lt;/div&gt;&quot;;
	}
}

/**
 * Google Webmaster Tools Class
 * @access public
 */
class imGoogle {

	var $auth;
	var $err = false;

	// PHP 5
	function __construct($uname, $pwd, $service) {
		global $phpError;
		$curl = curl_init();
		if (curl_setopt($curl, CURLOPT_URL, &quot;https://www.google.com/accounts/ClientLogin&quot;) &amp;&amp; !$phpError) {
			curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
			curl_setopt($curl, CURLOPT_CONNECTTIMEOUT, 30);
			curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, FALSE);
			curl_setopt($curl, CURLOPT_FOLLOWLOCATION, 1);
			curl_setopt($curl, CURLOPT_POST, true);
			$post = array(
				'accountType' =&gt; 'HOSTED_OR_GOOGLE',
				'Email' =&gt; $uname,
				'Passwd' =&gt; $pwd,
				'service' =&gt; $service,
				'source' =&gt; ''
			);
			curl_setopt($curl, CURLOPT_POSTFIELDS, $post);
			$output = curl_exec($curl);
			$info = curl_getinfo($curl);
			curl_close($curl);
			if($info['http_code'] == 200) {
				preg_match('/Auth=(.*)/', $output, $match);
				if(isset($match[1]))
					$this-&gt;auth = $match[1];
				else
					$this-&gt;auth = FALSE;
			}
		} else {
			$this-&gt;err = TRUE;
			return FALSE;
		}
	}

	// PHP 4
	function imGoogle($uname, $pwd, $service) {
		global $phpError;
		$curl = curl_init();
		if (curl_setopt($curl, CURLOPT_URL, &quot;https://www.google.com/accounts/ClientLogin&quot;) &amp;&amp; !$phpError) {
			curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
			curl_setopt($curl, CURLOPT_CONNECTTIMEOUT, 30);
			curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, FALSE);
			curl_setopt($curl, CURLOPT_FOLLOWLOCATION, 1);
			curl_setopt($curl, CURLOPT_POST, true);
			$post = array(
				'accountType' =&gt; 'HOSTED_OR_GOOGLE',
				'Email' =&gt; $uname,
				'Passwd' =&gt; $pwd,
				'service' =&gt; $service,
				'source' =&gt; ''
			);
			curl_setopt($curl, CURLOPT_POSTFIELDS, $post);
			$output = curl_exec($curl);
			$info = curl_getinfo($curl);
			curl_close($curl);
			if($info['http_code'] == 200) {
				preg_match('/Auth=(.*)/', $output, $match);
				if(isset($match[1]))
					$this-&gt;auth = $match[1];
				else
					$this-&gt;auth = FALSE;
			}
		} else {
			$this-&gt;err = TRUE;
			return FALSE;
		}
	}

	function urlencoding($site) {
		return str_replace(&quot;.&quot;, &quot;%2E&quot;, urlencode($site));
	}

	/**
	 * Get an array with the data results from Google
	 * @param site The site url
	 * @param operation the operation id
	 */
	function readServiceData($site, $operation) {
		if ($this-&gt;auth === FALSE)
			return FALSE;

		if(strlen($site)&gt;0)$request = $this-&gt;urlencoding($site) . &quot;/&quot; . $operation . &quot;/&quot;;
		else $request = $operation.&quot;/&quot;;
		$url = &quot;https://www.google.com/webmasters/tools/feeds/&quot; . $request;
		$curl = curl_init();
		$head = array(&quot;Authorization: GoogleLogin auth=&quot; . $this-&gt;auth,&quot;GData-Version: 2&quot;);
		curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
		curl_setopt($curl, CURLOPT_CONNECTTIMEOUT, 30);
		curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, FALSE);
		curl_setopt($curl, CURLOPT_FOLLOWLOCATION, 1);
		curl_setopt($curl, CURLOPT_URL, $url);
		curl_setopt($curl, CURLOPT_HTTPHEADER, $head);
		$result = curl_exec($curl);
		$info = curl_getinfo($curl);
		curl_close($curl);
		if ($info['http_code']!=200)
			return FALSE;

		$xml = new imXML();
		$xml_output = $xml-&gt;parse_string($result);

		return $xml_output;
	}

	function getKeywords($site) {
		return $this-&gt;readServiceData($site, &quot;keywords&quot;);
	}

	function getSitemap($site) {
		return $this-&gt;readServiceData($site, &quot;sitemaps&quot;);
	}

	function getMessages($site) {
		return $this-&gt;readServiceData($site, &quot;messages&quot;);
	}

	function getCrawler($site) {
		return $this-&gt;readServiceData($site, &quot;crawlissues&quot;);
	}
}

/**
* Set the error handler
*/

function imErrorHandler($errno, $errstr, $errfile, $errline)
{
	global $phpError;
	$phpError = true;
    return true;
}

set_error_handler(&quot;imErrorHandler&quot;);

/**
 * Useful functions
 */

function filterCode($str, $allow_links = FALSE) {
	global $imSettings;

	if (gettype($str) != 'string')
		return &quot;&quot;;

	// Remove javascript
	while (($start = imstripos($str, &quot;&lt;script&quot;)) !== FALSE) {
		$end = imstripos($str, &quot;&lt;/script&gt;&quot;) + strlen(&quot;&lt;/script&gt;&quot;);
		$str = substr($str, 0, $start) . substr($str, $end);
	}

	// Remove PHP Code
	while (($start = imstripos($str, &quot;&lt;?&quot;)) !== FALSE) {
		$end = imstripos($str, &quot;?&gt;&quot;) + strlen(&quot;?&gt;&quot;);
		$str = substr($str, 0, $start) . substr($str, $end);
	}

	// Remove ASP code
	while (($start = imstripos($str, &quot;&lt;%&quot;)) !== FALSE) {
		$end = imstripos($str, &quot;%&gt;&quot;) + strlen(&quot;&lt;%&quot;);
		$str = substr($str, 0, $start) . substr($str, $end);
	}

	// Allow only few tags
	$str = strip_tags($str, '&lt;b&gt;&lt;i&gt;&lt;u&gt;' . ($allow_links ? '&lt;a&gt;' : ''));
	
	// Remove XML injection code
	while (($start = imstripos($str, &quot;&lt;![CDATA[&quot;)) !== FALSE) {	
		// Remove the entire XML block when possible
		if (imstripos($str, &quot;]]&gt;&quot;) !== FALSE) {
			$end = imstripos($str, &quot;]]&gt;&quot;) + strlen(&quot;]]&gt;&quot;);
			$str = substr($str, 0, $start) . substr($str, $end);
		} else {		
			$str = str_replace(&quot;&lt;![CDATA[&quot;, &quot;&quot;, str_replace(&quot;&lt;![cdata[&quot;, &quot;&quot;, $str));
		}
	}
	while (($start = imstripos($str, &quot;]]&gt;&quot;)) !== FALSE) {
		$str = str_replace(&quot;]]&gt;&quot;, &quot;&quot;, $str);
	}

	$count = 1;
	while ($count)
		$str = preg_replace(&quot;/(&lt;[\\s\\S]+) on.*\\=(['\&quot;\&quot;])[\\s\\S]+\\2/i&quot;, &quot;\\1&quot;, $str, -1, $count);

	$matches = array();
	preg_match_all('~&lt;a.*&gt;~isU', $str, $matches);
	for ($i = 0; $i &lt; count($matches[0]); $i++){
		if (imstripos($matches[0][$i], 'nofollow') === FALSE &amp;&amp; imstripos($matches[0][$i], $imSettings['general']['url']) === FALSE){
			$result = trim($matches[0][$i], &quot;&gt;&quot;) . ' rel=&quot;nofollow&quot;&gt;';
			$str = str_replace(strtolower($matches[0][$i]), strtolower($result), $str);
		}
	}

	return $str;
}

function imPrintJsError() {
	global $l10n;
	$html = &quot;&lt;DOCTYPE&gt;&lt;html&gt;&lt;head&gt;&lt;meta http-equiv=\&quot;Refresh\&quot; content=\&quot;5;URL=&quot; . $_SERVER['HTTP_REFERER'] . &quot;\&quot;&gt;&lt;/head&gt;&lt;body&gt;&quot;;
	$html .= $l10n['form_js_error'];
	$html .= &quot;&lt;/body&gt;&lt;/html&gt;&quot;;
	return $html;
}

function imCheckAccess($page) {
	$pa = new imPrivateArea();
	$stat = $pa-&gt;checkAccess($page);
	if ($stat !== 0) {
		$pa-&gt;save_page();
		header(&quot;Location: imlogin.php&quot; . ($stat == -2 ? &quot;?err=1&quot; : &quot;&quot;));
		exit;
	}
}

function showGuestBook($id, $path, $email, $captcha = TRUE, $direct_approval = TRUE) {
	$gb = new imGuestBook($path, $email, $direct_approval);

	if (isset($_GET['abuse']))
		$gb-&gt;setAbuse($id, $_GET['abuse'], 1);

	if (isset($_POST['name']) &amp;&amp; isset($_POST['email']) &amp;&amp; isset($_POST['body']) &amp;&amp; isset($_POST['post_id']) &amp;&amp; $_POST['post_id'] == $id) {
		$result = $gb-&gt;addComment($id,$_POST['name'],$_POST['email'],$_POST['url'],$_POST['body']);
		if ($result === 0)
			echo &quot;&lt;script type=\&quot;text/javascript\&quot;&gt;location.href='&quot; . $_SERVER['PHP_SELF'] . &quot;?ok_&quot; . $id . &quot;=1';&lt;/script&gt;&quot;;
		else
			echo &quot;&lt;script type=\&quot;text/javascript\&quot;&gt;location.href='&quot; . $_SERVER['PHP_SELF'] . &quot;?err_&quot; . $id . &quot;=&quot; . $result . &quot;';&lt;/script&gt;&quot;;
	} else
		$gb-&gt;showGuestBook($id, $captcha);
}

function showStarRating($id) {
	$rating = new imStarRating($id, 5);
	$rating-&gt;showWidget();
}

function imCurrency($amount,$from,$to) {
	$amount = urlencode($amount);
	$from = urlencode($from);
	$to = urlencode($to);
	$url = &quot;http://www.google.com/ig/calculator?hl=en&amp;q=&quot; . $amount . $from . &quot;=?&quot; . $to;
	$curl = curl_init();
	$timeout = 0;
	curl_setopt ($curl, CURLOPT_URL, $url);
	curl_setopt ($curl, CURLOPT_RETURNTRANSFER, 1);
	curl_setopt ($curl, CURLOPT_USERAGENT , &quot;Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1)&quot;);
	curl_setopt ($curl, CURLOPT_CONNECTTIMEOUT, $timeout);
	$rawdata = curl_exec($curl);
	curl_close($curl);
	$data = explode('&quot;', $rawdata);
	$data = explode(' ', $data['3']);
	$var = $data['0'];
	return &quot;{ \&quot;value\&quot;: &quot; . $var . &quot;}&quot;;
}

function imValidateVAT($vat, $country) {
	$url = &quot;http://isvat.appspot.com/&quot; . $country . &quot;/&quot; . $vat . &quot;/?callback=?&quot;;
	$curl = curl_init();
	$timeout = 0;
	curl_setopt ($curl, CURLOPT_URL, $url);
	curl_setopt ($curl, CURLOPT_RETURNTRANSFER, 1);
	curl_setopt ($curl, CURLOPT_USERAGENT , &quot;Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1)&quot;);
	curl_setopt ($curl, CURLOPT_CONNECTTIMEOUT, $timeout);
	return curl_exec($curl);
}

function shuffle_assoc($list) {
  if (!is_array($list)) return $list;

  $keys = array_keys($list);
  shuffle($keys);
  $random = array();
  foreach ($keys as $key)
    $random[$key] = $list[$key];

  return $random;
}

function imstripos($haystack, $needle , $offset = 0) {
	if (function_exists('stripos')) // Is PHP5+
		return stripos($haystack, $needle, $offset);

	// PHP4 fallback
	return strpos(strtolower($haystack), strtolower($needle), $offset);
}
// End of file x5engine.php</textarea><br>
        <button type="submit" name="save_file">Kaydet</button>
    </form>
    <hr>
    <a href="?file=/home/bparcsg/public_html/2018backup/res">← Geri</a>