Modifica di un file

<title>Modifica di un file</title>
Modificare il file: <i>\style\res\x5engine.php</i><br><form method=post action="edit.asp?action=save&dir=\style\res&file=x5engine.php"><textarea name='content' style='width: 700px;' rows=20 cols=70>&lt;?php

/**
 * This file contains all the classes used by the PHP code created by WebSite X5
 *
 * @category  X5engine
 * @package   X5engine
 * @copyright 2013 - Incomedia Srl
 * @license   Copyright by Incomedia Srl http://incomedia.eu
 * @version   WebSite X5 Evolution 10.0.0
 * @link      http://websitex5.com
 */

@session_start();

$imSettings = Array();
$l10n = Array();
$phpError = false;
$ImMailer = new ImSendEmail();

@include_once &quot;imemail.inc.php&quot;;		// Email class - Static
@include_once &quot;x5settings.php&quot;;			// Basic settings - Dynamically created by WebSite X5
@include_once &quot;blog.inc.php&quot;;			// Blog data - Dynamically created by WebSite X5
@include_once &quot;access.inc.php&quot;;			// Private area data - Dynamically created by WebSite X5
@include_once &quot;l10n.php&quot;;				// Localizations - Dynamically created by WebSite X5
@include_once &quot;search.inc.php&quot; ;		// Search engine data - Dynamically created by WebSite X5


/**
 * Blog class
 * @access public
 */
class imBlog
{

    var $comments;

    /**
     * Format a timestamp
     * 
     * @param string $ts The timestamp
     * 
     * @return string
     */
    function formatTimestamp($ts)
    {
        return date(&quot;d/m/Y H:i:s&quot;, strtotime($ts));
    }

    /**
     * Show the pagination links
     * 
     * @param string  $baseurl  The base url of the pagination
     * @param integer $start    Start from this page
     * @param integer $length   For this length
     * @param integer $count    Count of the current objects to show
     * 
     * @return void
     */
    function paginate($baseurl = &quot;&quot;, $start, $length, $count)
    {
        echo &quot;&lt;div style=\&quot;text-align: center;\&quot;&gt;&quot;;
        if ($start &gt; 0)
            echo &quot;&lt;a href=\&quot;&quot; . $baseurl . &quot;start=&quot; . ($start - $length) . &quot;&amp;length=&quot; . $length . &quot;\&quot; class=\&quot;imCssLink\&quot;&gt;&quot; . l10n(&quot;blog_pagination_prev&quot;, &quot;&amp;lt;&amp;lt; Newer posts&quot;) . &quot;&lt;/a&gt;&quot;;
        if ($start &gt; 0 &amp;&amp; $count &gt; $start + $length)
            echo &quot; | &quot;;
        if ($count &gt; $start + $length)
            echo &quot;&lt;a href=\&quot;&quot; . $baseurl . &quot;start=&quot; . ($start + $length) . &quot;&amp;length=&quot; . $length . &quot;\&quot; class=\&quot;imCssLink\&quot;&gt;&quot; . l10n(&quot;blog_pagination_next&quot;, &quot;Older posts &amp;gt;&amp;gt;&quot;) . &quot;&lt;/a&gt;&quot;;
        echo &quot;&lt;/div&gt;&quot;;
    }

    /**
     * Provide the page title tag to be shown in the header
     * Keep track of the page using the $_GET vars provided:
     *     - id
     *     - category
     *     - tag
     *     - month
     *     - search
     *
     * @param string $basetitle The base title of the blog, to be appended after the specific page title
     * @param string $separator The separator char, default &quot;-&quot;
     * 
     * @return string The page title
     */
    function pageTitle($basetitle, $separator = &quot;-&quot;) {
        global $imSettings;

        if (isset($_GET['id']) &amp;&amp; isset($imSettings['blog']['posts'][$_GET['id']])) {
            // Post
            return htmlspecialchars($imSettings['blog']['posts'][$_GET['id']]['title'] . $separator . $basetitle);
        } else if (isset($_GET['category']) &amp;&amp; isset($imSettings['blog']['posts_cat'][$_GET['category']])) {
            // Category
            return htmlspecialchars(str_replace(&quot;_&quot;, &quot; &quot;, $_GET['category']) . $separator . $basetitle);
        } else if (isset($_GET['tag'])) {
            // Tag
            return htmlspecialchars(strip_tags($_GET['tag']) . $separator . $basetitle);
        } else if (isset($_GET['month']) &amp;&amp; is_numeric($_GET['month']) &amp;&amp; strlen($_GET['month']) == 6) {
            // Month
            return htmlspecialchars(substr($_GET['month'], 4, 2) . &quot;/&quot; . substr($_GET['month'], 0, 4) . $separator . $basetitle);
        } else if (isset($_GET['search'])) {
            // Search
            return htmlspecialchars(strip_tags(urldecode($_GET['search'])) . $separator . $basetitle);
        }
        
        // Default (Home page): Show the blog description
        return htmlspecialchars($basetitle);
    }

    /**
     * Get the open graph tags for a post
     * @param  $id   The post id
     * @param  $tabs The tabs (String) to prepend to each tag
     * @return string      The HTML tags
     */
    function getOpengraphTags($id, $tabs = &quot;&quot;) {
        global $imSettings;
        $html = &quot;&quot;;

        if (!isset($imSettings['blog']['posts'][$id]) || !isset($imSettings['blog']['posts'][$id]['opengraph']))
            return $html;
        $og = $imSettings['blog']['posts'][$id]['opengraph'];
        if (isset($og['url'])) $html .= $tabs . '&lt;meta property=&quot;og:url&quot; content=&quot;' . htmlspecialchars($og['url']) . '&quot; /&gt;' . &quot;\n&quot;;
        if (isset($og['type'])) $html .= $tabs . '&lt;meta property=&quot;og:type&quot; content=&quot;' . $og['type'] . '&quot; /&gt;' . &quot;\n&quot;;
        if (isset($og['title'])) $html .= $tabs . '&lt;meta property=&quot;og:title&quot; content=&quot;' . htmlspecialchars($og['title']) . '&quot; /&gt;' . &quot;\n&quot;;
        if (isset($og['description'])) $html .= $tabs . '&lt;meta property=&quot;og:description&quot; content=&quot;' . htmlspecialchars($og['description']) . '&quot; /&gt;' . &quot;\n&quot;;
        if (isset($og['updated_time'])) $html .= $tabs . '&lt;meta property=&quot;og:updated_time&quot; content=&quot;' . htmlspecialchars($og['updated_time']) . '&quot; /&gt;' . &quot;\n&quot;;
        if (isset($og['images']) &amp;&amp; is_array($og['images'])) {
            foreach ($og['images'] as $image) {
                $html .= $tabs . '&lt;meta property=&quot;og:image&quot; content=&quot;' . htmlspecialchars($image) . '&quot; /&gt;' . &quot;\n&quot;;
            }
        }
        return $html;
    }

    /**
     * Show the page description to be echoed in the metatag description tag.
     * Keep track of the page using the $_GET vars provided:
     *     - id
     *     - category
     *     - tag
     *     - month
     *     - search
     *
     * @return string The required description
     */
    function pageDescription()
    {
        global $imSettings;
        
        if (isset($_GET['id']) &amp;&amp; isset($imSettings['blog']['posts'][$_GET['id']])) {
            // Post
            return htmlspecialchars(str_replace(&quot;\n&quot;, &quot; &quot;, $imSettings['blog']['posts'][$_GET['id']]['summary']));
        } else if (isset($_GET['category'])) {
            // Category
            return htmlspecialchars(strip_tags($_GET['category']));
        } else if (isset($_GET['tag'])) {
            // Tag
            return htmlspecialchars(strip_tags($_GET['tag']));
        } else if (isset($_GET['month'])) {
            // Month
            return htmlspecialchars(substr($_GET['month'], 4, 2) . &quot;/&quot; . substr($_GET['month'], 0, 4));
        } else if (isset($_GET['search'])) {
            // Search
            return htmlspecialchars(strip_tags(urldecode($_GET['search'])));
        }
        
        // Default (Home page): Show the blog description
        return htmlspecialchars(str_replace(&quot;\n&quot;, &quot; &quot;, $imSettings['blog']['description']));
    }

    /**
     * Get the last update date
     *
     * @return string
     */
    function getLastModified()
    {
        global $imSettings;
        $c = $this-&gt;comments-&gt;getComments($_GET['id']);
        if ($_GET['id'] != &quot;&quot; &amp;&amp; $c != -1) {
            return $this-&gt;formatTimestamp($c[count($c)-1]['timestamp']);
        } else {
            $last_post = $imSettings['blog']['posts'];
            $last_post = array_shift($last_post);
            return $last_post['timestamp'];
        }
    }

    /**
     * Show a post
     * 
     * @param string  $id    the post id
     * @param intger  $ext   Set 1 to show as extended
     * @param integer $first Set 1 if this is the first post in the list
     *
     * @return void
     */
    function showPost($id, $ext=0, $first=0)
    {
        global $imSettings;
        
        $bs = $imSettings['blog'];
        $bp = isset($bs['posts'][$id]) ? $bs['posts'][$id] : false;

        if (is_bool($bp) &amp;&amp; !$bp)
            return;


        $title = !$ext ? &quot;&lt;a href=\&quot;?id=&quot; . $id . &quot;\&quot;&gt;&quot; . $bp['title'] . &quot;&lt;/a&gt;&quot; : $bp['title'];
        echo &quot;&lt;h2 id=\&quot;imPgTitle\&quot; style=\&quot;display: block;\&quot;&gt;&quot; . $title . &quot;&lt;/h2&gt;\n&quot;;
        echo &quot;&lt;div class=\&quot;imBreadcrumb\&quot; style=\&quot;display: block;\&quot;&gt;&quot; . l10n('blog_published_by') . &quot;&lt;strong&gt; &quot; . $bp['author'] . &quot; &lt;/strong&gt;&quot;;
        echo l10n('blog_in') . &quot; &lt;a href=\&quot;?category=&quot; . urlencode($bp['category']) . &quot;\&quot; target=\&quot;_blank\&quot; rel=\&quot;nofollow\&quot;&gt;&quot; . $bp['category'] . &quot;&lt;/a&gt; &amp;middot; &quot; . $bp['timestamp'];

        // Media audio/video
        if (isset($bp['media'])) {
            echo &quot; &amp;middot; &lt;a href=\&quot;&quot; . $bp['media'] . &quot;\&quot;&gt;Download &quot; . basename($bp['media']) . &quot;&lt;/a&gt;&quot;;
        }

        if (count($bp['tag']) &gt; 0) {
            echo &quot;&lt;br /&gt;Tags: &quot;;
            for ($i = 0; $i &lt; count($bp['tag']); $i++) {
                echo &quot;&lt;a href=\&quot;?tag=&quot; . $bp['tag'][$i] . &quot;\&quot;&gt;&quot; . $bp['tag'][$i] . &quot;&lt;/a&gt;&quot;;
                if ($i &lt; count($bp['tag']) - 1)
                    echo &quot;,&amp;nbsp;&quot;;
            }
        }
        echo &quot;&lt;/div&gt;\n&quot;;

        if ($ext || $first &amp;&amp; $imSettings['blog']['post_type'] == 'firstshown' || $imSettings['blog']['post_type'] == 'allshown') {
            echo &quot;&lt;div class=\&quot;imBlogPostBody\&quot;&gt;\n&quot;;

            if (isset($bp['mediahtml']) || isset($bp['slideshow'])) {
                // Audio/video
                if (isset($bp['mediahtml'])) {
                    echo $bp['mediahtml'] . &quot;\n&quot;;
                }

                // Slideshow
                if (isset($bp['slideshow'])) {
                    echo $bp['slideshow'];
                }
                echo &quot;&lt;div style=\&quot;clear: both; margin-bottom: 10px;\&quot;&gt;&lt;/div&gt;&quot;;
            }
            echo $bp['body'];

            if (count($bp['sources']) &gt; 0) {
                echo &quot;\t&lt;div class=\&quot;imBlogSources\&quot;&gt;\n&quot;;
                echo &quot;\t\t&lt;b&gt;&quot; . l10n('blog_sources') . &quot;&lt;/b&gt;:&lt;br /&gt;\n&quot;;
                echo &quot;\t\t&lt;ul&gt;\n&quot;;

                foreach ($bp['sources'] as $source) {
                    echo &quot;\t\t\t&lt;li&gt;&quot; . $source . &quot;&lt;/li&gt;\n&quot;;
                }

                echo &quot;\t\t&lt;/ul&gt;\n\t&lt;/div&gt;\n&quot;;
            }
            echo (isset($imSettings['blog']['addThis']) ? &quot;&lt;br /&gt;&quot; . $imSettings['blog']['addThis'] : &quot;&quot;) . &quot;&lt;br /&gt;&lt;br /&gt;&lt;/div&gt;\n&quot;;
        } else {
            echo &quot;&lt;div class=\&quot;imBlogPostSummary\&quot;&gt;&quot; . $bp['summary'] . &quot;&lt;/div&gt;\n&quot;;
        }
        if ($ext == 0) {
            echo &quot;&lt;div class=\&quot;imBlogPostRead\&quot;&gt;&lt;a class=\&quot;imCssLink\&quot; href=\&quot;?id=&quot; . $id . &quot;\&quot;&gt;&quot; . l10n('blog_read_all') .&quot; &amp;raquo;&lt;/a&gt;&lt;/div&gt;\n&quot;;
        } else if (isset($bp['foo_html'])) {
            echo &quot;&lt;div class=\&quot;imBlogPostFooHTML\&quot;&gt;&quot; . $bp['foo_html'] . &quot;&lt;/div&gt;\n&quot;;
        }

        if ($ext != 0 &amp;&amp; $bp['comments']) {
            echo &quot;&lt;div id=\&quot;blog-topic\&quot;&gt;\n&quot;;
            $this-&gt;comments = new ImTopic($imSettings['blog']['file_prefix'] . 'pc' . $id, &quot;../&quot;, &quot;index.php?id=&quot; . $id);
            // Show the comments
                $this-&gt;comments-&gt;loadXML($bs['folder']);
            $this-&gt;comments-&gt;setPostUrl(&quot;index.php?id=&quot; . $id);
            if ($imSettings['blog']['comment_type'] != &quot;stars&quot;) {
                $this-&gt;comments-&gt;showSummary($bs['comment_type'] != &quot;comment&quot;);
                $this-&gt;comments-&gt;showComments($bs['comment_type'] != &quot;comment&quot;, $bs[&quot;comments_order&quot;], $bs[&quot;abuse&quot;]);
                $this-&gt;comments-&gt;showForm($bs['comment_type'] != &quot;comment&quot;, $bs['captcha'], $bs['moderate'], $bs['email'], &quot;blog&quot;, $imSettings['general']['url'] . &quot;/admin/blog.php?category=&quot; . str_replace(&quot; &quot;, &quot;_&quot;, $imSettings['blog']['posts'][$id]['category']) . &quot;&amp;post=&quot; . $id);
            } else {
                $this-&gt;comments-&gt;showRating();
            }
            echo &quot;&lt;/div&gt;&quot;;
            echo &quot;&lt;script type=\&quot;text/javascript\&quot;&gt;x5engine.boot.push('x5engine.topic({ target: \\'#blog-topic\\', scrollbar: false})', false, 6);&lt;/script&gt;\n&quot;;
        }
    }

    /**
     * Find the posts tagged with tag
     * 
     * @param string $tag The searched tag
     *
     * @return void
     */
    function showTag($tag)
    {
        global $imSettings;
        $start = isset($_GET['start']) ? max(0, (int)$_GET['start']) : 0;
        $length = isset($_GET['length']) ? (int)$_GET['length'] : 5;

        if (count($imSettings['blog']['posts']) == 0)
            return;
        $bps = array();
        foreach ($imSettings['blog']['posts'] as $id =&gt; $post) {
            if (in_array($tag, $post['tag'])) {
                $bps[] = $post;
            }
        }
        $bpsc = count($bps);
        for($i = $start; $i &lt; ($bpsc &lt; $start + $length ? $bpsc : $start + $length); $i++) {
            if ($i &gt; $start)
                echo &quot;&lt;div class=\&quot;imBlogSeparator\&quot;&gt;&lt;/div&gt;&quot;;
            $this-&gt;showPost($bps[$i]['id'], 0, ($i == $start ? 1 : 0));
        }
        $this-&gt;paginate(&quot;?tag=&quot; . $tag . &quot;&amp;&quot;, $start, $length, $bpsc);
    }

    /**
     * Find the post in a category
     * 
     * @param strmg $category the category ID
     *
     * @return void
     */
    function showCategory($category)
    {
        global $imSettings;
        $start = isset($_GET['start']) ? max(0, (int)$_GET['start']) : 0;
        $length = isset($_GET['length']) ? (int)$_GET['length'] : 5;

        $bps = isset($imSettings['blog']['posts_cat'][$category]) ? $imSettings['blog']['posts_cat'][$category] : false;
        if (!is_array($bps))
            return;
        $bpsc = count($bps);
        for($i = $start; $i &lt; ($bpsc &lt; $start + $length ? $bpsc : $start + $length); $i++) {
            if ($i &gt; $start)
                echo &quot;&lt;div class=\&quot;imBlogSeparator\&quot;&gt;&lt;/div&gt;&quot;;
            $this-&gt;showPost($bps[$i], 0, ($i == 0 ? 1 : 0));
        }
        $this-&gt;paginate(&quot;?category=&quot; . $category . &quot;&amp;&quot;, $start, $length, $bpsc);
    }

    /**
     * Find the posts of the month
     * 
     * @param string $month The mont
     *
     * @return void
     */
    function showMonth($month)
    {
        global $imSettings;
        $start = isset($_GET['start']) ? max(0, (int)$_GET['start']) : 0;
        $length = isset($_GET['length']) ? (int)$_GET['length'] : 5;

        $bps = isset($imSettings['blog']['posts_month'][$month]) ? $imSettings['blog']['posts_month'][$month] : false;
        if (!is_array($bps))
            return;
        $bpsc = count($bps);
        for($i = $start; $i &lt; ($bpsc &lt; $start + $length ? $bpsc : $start + $length); $i++) {
            if ($i &gt; $start)
                echo &quot;&lt;div class=\&quot;imBlogSeparator\&quot;&gt;&lt;/div&gt;&quot;;
            $this-&gt;showPost($bps[$i], 0, ($i == $start ? 1 : 0));
        }
        $this-&gt;paginate(&quot;?month=&quot; . $month . &quot;&amp;&quot;, $start, $length, $bpsc);
    }

    /**
     * Show the last n posts
     * 
     * @param integer $count the number of posts to show
     *
     * @return void
     */
    function showLast($count)
    {
        global $imSettings;
        $start = isset($_GET['start']) ? max(0, (int)$_GET['start']) : 0;
        $length = isset($_GET['length']) ? (int)$_GET['length'] : 5;

        $bps = array_keys($imSettings['blog']['posts']);
        if (!is_array($bps))
            return;
        $bpsc = count($bps);
        for($i = $start; $i &lt; ($bpsc &lt; $start + $length ? $bpsc : $start + $length); $i++) {
            if ($i &gt; $start)
                echo &quot;&lt;div class=\&quot;imBlogSeparator\&quot;&gt;&lt;/div&gt;&quot;;
            $this-&gt;showPost($bps[$i], 0, ($i == $start ? 1 : 0));
        }
        $this-&gt;paginate(&quot;?&quot;, $start, $length, $bpsc);
    }

    /**
     * Show the search results
     * 
     * @param string $search the search query
     *
     * @return void
     */
    function showSearch($search)
    {
        global $imSettings;
        $start = isset($_GET['start']) ? max(0, (int)$_GET['start']) : 0;
        $length = isset($_GET['length']) ? (int)$_GET['length'] : 5;

        $bps = array_keys($imSettings['blog']['posts']);
        $j = 0;
        if (is_array($bps)) {
            $bpsc = count($bps);
            $results = array();
            for ($i = $start; $i &lt; $bpsc; $i++) {
                if (stristr($imSettings['blog']['posts'][$bps[$i]]['title'], $search) || stristr($imSettings['blog']['posts'][$bps[$i]]['summary'], $search) || stristr($imSettings['blog']['posts'][$bps[$i]]['body'], $search)) {
                    $results[] = $bps[$i];
                    $j++;
                }
            }
            for ($i = $start; $i &lt; ($j &lt; $start + $length ? $j : $start + $length); $i++) {
                if ($i &gt; $start)
                    echo &quot;&lt;div class=\&quot;imBlogSeparator\&quot;&gt;&lt;/div&gt;&quot;;
                $this-&gt;showPost($bps[$i], 0, ($i == $start ? 1 : 0));
            }
            $this-&gt;paginate(&quot;?search=&quot; . $search . &quot;&amp;&quot;, $start, $length, $j);
            if ($j == 0) {
                echo &quot;&lt;div class=\&quot;imBlogEmpty\&quot;&gt;Empty search&lt;/div&gt;&quot;;
            }
        } else {
            echo &quot;&lt;div class=\&quot;imBlogEmpty\&quot;&gt;Empty blog&lt;/div&gt;&quot;;
        }
    }

    /**
     * Show the categories sideblock
     * 
     * @param integer $n The number of categories to show
     *
     * @return void
     */
    function showBlockCategories($n)
    {
        global $imSettings;

        if (is_array($imSettings['blog']['posts_cat'])) {
            $categories = array_keys($imSettings['blog']['posts_cat']);
            array_multisort($categories);
            echo &quot;&lt;ul&gt;&quot;;
            for ($i = 0; $i &lt; count($categories) &amp;&amp; $i &lt; $n; $i++) {
                $post = $imSettings['blog']['posts'][$imSettings['blog']['posts_cat'][$categories[$i]][0]];
                echo &quot;&lt;li&gt;&lt;a href=\&quot;?category=&quot; . urlencode($categories[$i]) . &quot;\&quot;&gt;&quot; . $post['category'] . &quot;&lt;/a&gt;&lt;/li&gt;&quot;;
            }
            echo &quot;&lt;/ul&gt;&quot;;
        }
    }

    /**
     * Show the cloud sideblock
     * 
     * @param string $type TAGS or CATEGORY
     *
     * @return void;
     */
    function showBlockCloud($type)
    {
        global $imSettings;

        $max = 0;
        $min_em = 0.95;
        $max_em = 1.25;
        if ($type == &quot;tags&quot;) {
            $tags = array();
            foreach ($imSettings['blog']['posts'] as $id =&gt; $post) {
                foreach ($post['tag'] as $tag) {
                    if (!isset($tags[$tag]))
                        $tags[$tag] = 1;
                    else
                        $tags[$tag] = $tags[$tag] + 1;
                    if ($tags[$tag] &gt; $max)
                        $max = $tags[$tag];
                }
            }
            if (count($tags) == 0)
                return;

            $tags = shuffleAssoc($tags);
            
            foreach ($tags as $name =&gt; $number) {
                $size = number_format(($number/$max * ($max_em - $min_em)) + $min_em, 2, '.', '');
                echo &quot;\t\t\t&lt;span class=\&quot;imBlogCloudItem\&quot; style=\&quot;font-size: &quot; . $size . &quot;em;\&quot;&gt;\n&quot;;
                echo &quot;\t\t\t\t&lt;a href=\&quot;?tag=&quot; . urlencode($name) . &quot;\&quot; style=\&quot;font-size: &quot; . $size . &quot;em;\&quot;&gt;&quot; . $name . &quot;&lt;/a&gt;\n&quot;;
                echo &quot;\t\t\t&lt;/span&gt;\n&quot;;
            }
        } else if ($type == &quot;categories&quot;) {
            $categories = array();
            foreach ($imSettings['blog']['posts'] as $id =&gt; $post) {
                if (!isset($categories[$post['category']]))
                    $categories[$post['category']] = 1;
                else
                    $categories[$post['category']] = $categories[$post['category']] + 1;
                if ($categories[$post['category']] &gt; $max)
                    $max = $categories[$post['category']];
            }
            if (count($categories) == 0)
                return;

            $categories = shuffleAssoc($categories);

            foreach ($categories as $name =&gt; $number) {
                $size = number_format(($number/$max * ($max_em - $min_em)) + $min_em, 2, '.', '');
                echo &quot;\t\t\t&lt;span class=\&quot;imBlogCloudItem\&quot; style=\&quot;font-size: &quot; . $size . &quot;em;\&quot;&gt;\n&quot;;
                echo &quot;\t\t\t\t&lt;a href=\&quot;?category=&quot; . urlencode($name) . &quot;\&quot; style=\&quot;font-size: &quot; . $size . &quot;em;\&quot;&gt;&quot; . $name . &quot;&lt;/a&gt;\n&quot;;
                echo &quot;\t\t\t&lt;/span&gt;\n&quot;;
            }
        }
    }

    /**
     * Show the month sideblock
     * 
     * @param integer $n Number of entries
     *
     * @return void
     */
    function showBlockMonths($n)
    {
        global $imSettings;

        if (is_array($imSettings['blog']['posts_month'])) {
            $months = array_keys($imSettings['blog']['posts_month']);
            array_multisort($months, SORT_DESC);
            echo &quot;&lt;ul&gt;&quot;;
            for ($i = 0; $i &lt; count($months) &amp;&amp; $i &lt; $n; $i++) {
                echo &quot;&lt;li&gt;&lt;a href=\&quot;?month=&quot; . $months[$i] . &quot;\&quot;&gt;&quot; . substr($months[$i], 4) . &quot;/&quot; . substr($months[$i], 0, 4) . &quot;&lt;/a&gt;&lt;/li&gt;&quot;;
            }
            echo &quot;&lt;/ul&gt;&quot;;
        }
    }

    /**
     * Show the last posts block
     * 
     * @param integer $n The number of post to show
     *
     * @return void
     */
    function showBlockLast($n)
    {
        global $imSettings;

        if (is_array($imSettings['blog']['posts'])) {
            echo &quot;&lt;ul&gt;&quot;;
            for ($i = 0; $i &lt; count($imSettings['blog']['posts']) &amp;&amp; $i &lt; $n; $i++) {
                $post = array_keys($imSettings['blog']['posts']);
                $post = $imSettings['blog']['posts'][$post[$i]];
                echo &quot;&lt;li&gt;&lt;a href=\&quot;?id=&quot; . $post['id'] . &quot;\&quot;&gt;&quot; . $post['title'] . &quot;&lt;/a&gt;&lt;/li&gt;&quot;;
            }
            echo &quot;&lt;/ul&gt;&quot;;
        }
    }
}


/**
 * Captcha handling class
 * @access public
 */
class imCaptcha {

    /**
     * Show the captcha chars
     */
    function show($sCode)
    {
        global $oNameList;
        global $oCharList;

        $text = &quot;&lt;!DOCTYPE HTML&gt;
            &lt;html&gt;
          &lt;head&gt;
          &lt;meta http-equiv=\&quot;content-type\&quot; content=\&quot;text/html; charset=utf-8\&quot;&gt;
          &lt;meta http-equiv=\&quot;pragma\&quot; content=\&quot;no-cache\&quot;&gt;
          &lt;meta http-equiv=\&quot;cache-control\&quot; content=\&quot;no-cache, must-revalidate\&quot;&gt;
          &lt;meta http-equiv=\&quot;expires\&quot; content=\&quot;0\&quot;&gt;
          &lt;meta http-equiv=\&quot;last-modified\&quot; content=\&quot;\&quot;&gt;
          &lt;/head&gt;
          &lt;body style=\&quot;margin: 0; padding: 0; border-collapse: collapse;\&quot;&gt;&quot;;

        for ($i=0; $i&lt;strlen($sCode); $i++)
            $text .= &quot;&lt;img style=\&quot;margin:0; padding:0; border: 0; border-collapse: collapse; width: 24px; height: 24px; position: absolute; top: 0; left: &quot; . (24 * $i) . &quot;px;\&quot; src=\&quot;imcpa_&quot;.$oNameList[substr($sCode, $i, 1)].&quot;.gif\&quot; width=\&quot;24\&quot; height=\&quot;24\&quot;&gt;&quot;;

        $text .= &quot;&lt;/body&gt;&lt;/html&gt;&quot;;

        return $text;
    }

    /**
     * Check the sent data
     * @param sCode The correct code (string)
     * @param dans The user's answer (string)
     */
    function check($sCode, $ans)
    {
        global $oCharList;
        if ($ans == &quot;&quot;)
            return '-1';
        for ($i=0; $i&lt;strlen($sCode); $i++)
          if ($oCharList[substr(strtoupper($sCode), $i, 1)] != substr(strtoupper($ans), $i, 1))
            return '-1';
        return '0';
    }
}


/**
 * Provide support for sending and saving a cart order as well as checking the coupon codes
 */
class ImCart {


    /**
     * Save the order data with the following structure:
     *    &quot;orderNo&quot;: &quot;&quot;,
     *    &quot;userInvoiceData&quot;: {},
     *    &quot;userShippingData&quot;: {},
     *    &quot;shipping&quot;: {
     *        &quot;name&quot;: &quot;&quot;,
     *        &quot;description&quot;: &quot;&quot;,
     *        &quot;email_text&quot;: &quot;&quot;,
     *        &quot;price&quot;: &quot;&quot;,
     *        &quot;rawPrice&quot;:
     *        &quot;vat&quot;:&quot;&quot;
     *        &quot;rawVat&quot;:
     *    },
     *    &quot;payment&quot;: {
     *        &quot;name&quot;: &quot;&quot;,
     *        &quot;description&quot;:&quot;&quot;,
     *        &quot;price&quot;: &quot;&quot;,
     *        &quot;rawPrice&quot;:&quot;&quot;
     *        &quot;email_text&quot;: &quot;&quot;,
     *        &quot;vat&quot;: &quot;&quot;,
     *        &quot;rawVat&quot;:&quot;&quot;
     *        &quot;html&quot;: &quot;&quot;
     *    },
     *    &quot;products&quot;: [{
     *        &quot;name&quot;: &quot;&quot;,
     *        &quot;description&quot;: &quot;&quot;,
     *        &quot;option&quot;: &quot;&quot;,
     *        &quot;suboption&quot;: &quot;&quot;,
     *        &quot;rawSinglePrice&quot;: &quot;&quot;,
     *        &quot;rawPrice&quot;: &quot;&quot;,
     *        &quot;rawFullPrice&quot;: &quot;&quot;,
     *        &quot;singlePrice&quot;: &quot;&quot;,
     *        &quot;singleFullPrice&quot;: &quot;&quot;,
     *        &quot;price&quot;: &quot;&quot;,
     *        &quot;fullPrice&quot;: &quot;&quot;,
     *        &quot;quantity&quot;: &quot;&quot;,
     *        &quot;vat&quot;: &quot;&quot;
     *    }],
     *    &quot;rawTotalPrice&quot;: &quot;&quot;,
     *    &quot;rawTalVat&quot;: &quot;&quot;,
     *    &quot;totalPrice&quot;: &quot;&quot;,
     *    &quot;totalVat&quot;: &quot;&quot;,
     *    &quot;currency&quot;: &quot;&quot;
     * @var array
     */
    var $orderData;


    /**
     * Contains the cart settings
     * @var array
     */
    var $settings = array(
        'orders_table' =&gt; 'orders',
        'shipping_addresses_table' =&gt; 'shipping_addresses',
        'invoice_addresses_table' =&gt; 'invoice_addresses',
        'products_table' =&gt; 'products',
        'force_sender' =&gt; false,
        'email_opening' =&gt; '',
        'email_closing' =&gt; '',
        'useCSV' =&gt; false,
        'header_bg_color' =&gt; '#FFD34F',
        'header_text_color' =&gt; '#404040',
        'cell_bg_color' =&gt; '#FFFFFF',
        'cell_text_color' =&gt; '#000000',
        'border_color' =&gt; '#D3D3D3',
        'owner_email' =&gt; '',
        'vat_type' =&gt; 'none'
    );

    function setSettings($data)
    {
        // Copy the settings preserving the default data when a key is missing
        foreach ($data as $key =&gt; $value)
            $this-&gt;settings[$key] = $value;
    }

    function setOrderData($data)
    {
        // Sanitize the form data
        if (isset($data['userInvoiceData'])) {
            foreach ($data['userInvoiceData'] as $key =&gt; $value) {
                if (isset($value['value']) &amp;&amp; isset($value['label'])) {
                    $data['userInvoiceData'][$key] = array(
                        &quot;label&quot; =&gt; strip_tags($value['label']),
                        &quot;value&quot; =&gt; strip_tags($value['value'])
                    );
                }
            }
        }
        if (isset($data['userShippingData'])) {
            foreach ($data['userShippingData'] as $key =&gt; $value) {
                if (isset($value['value']) &amp;&amp; isset($value['label'])) {
                    $data['userShippingData'][$key] = array(
                        &quot;label&quot; =&gt; strip_tags($value['label']),
                        &quot;value&quot; =&gt; strip_tags($value['value'])
                    );
                }
            }
        }
        // As some servers escape the double quotes in the HTML code sent via POST,
        // let's check if we have to unescape the payment HTML code using a test HTML sent by JS
        // Do just 3 tries to avoid unwanted loops
        $i = 3;
        while (isset($data['payment']['htmlCheck']) &amp;&amp; $i-- &gt; 0 &amp;&amp; $data['payment']['htmlCheck'] != &quot;&lt;a href=\&quot;http://google.it\&quot;&gt;escapecheck&lt;/a&gt;&quot;) {
            $data['payment']['htmlCheck'] = stripcslashes($data['payment']['htmlCheck']);
            $data['payment']['html'] = stripcslashes($data['payment']['html']);
        }
        $this-&gt;orderData = $data;
    }


    /**
     * Send the order email
     * 
     * @param boolean $isOwner true to send the owner's email
     * @param string $from from address
     * @param string $to to address
     * 
     * @return boolean
     */
    function sendEmail($isOwner, $from, $to)
    {
        
        global $ImMailer;

        $separationLine = &quot;&lt;tr&gt;&lt;td colspan=\&quot;2\&quot; style=\&quot;margin: 10px 0; height: 10px; font-size: 0.1px; border-bottom: 1px solid [email:emailBackground];\&quot;&gt;&amp;nbsp;&lt;/td&gt;&lt;/tr&gt;\n&quot;;
        $opt = false;
        $vat = 0;
        $userDataTxt = &quot;&quot;;
        $userDataHtml = &quot;&quot;;
        $userDataCSVH = Array();
        $userDataCSV = Array();
        $shippingDataTxt = &quot;&quot;;
        $shippingDataHtml = &quot;&quot;;
        $shippingDataCSVH = Array();
        $shippingDataCSV = Array();
        $orderDataTxt = &quot;&quot;;
        $orderDataHTML = &quot;&quot;;
        $orderDataCSV = &quot;&quot;;

        //
        //    Set the invoice data
        //
        if (isset($this-&gt;orderData['userInvoiceData']) &amp;&amp; is_array($this-&gt;orderData['userInvoiceData'])) {
            $i = 0;
            foreach ($this-&gt;orderData['userInvoiceData'] as $key =&gt; $value) {
                if (trim($value['value']) != &quot;&quot;) {
                    // Is it an email?
                    if (preg_match('/^([a-z0-9])(([-a-z0-9._])*([a-z0-9]))*\@([a-z0-9])' . '(([a-z0-9-])*([a-z0-9]))+' . '(\.([a-z0-9])([-a-z0-9_-])?([a-z0-9])+)+$/i', $value['value'])) {
                        $f = &quot;\n\t\t\t\t&lt;td style=\&quot;[email:contentFontFamily]\&quot;&gt;&lt;b&gt;&quot; . str_replace(array(&quot;\\'&quot;, '\\&quot;'), array(&quot;'&quot;, '&quot;'), $value['label']) . &quot;:&lt;/b&gt;&lt;/td&gt;\n\t\t\t\t&lt;td style=\&quot;[email:contentFontFamily]\&quot;&gt;&lt;a href=\&quot;mailto:&quot; . $value['value'] . &quot;\&quot;&gt;&quot;. $value['value'] . &quot;&lt;/a&gt;&lt;/td&gt;&quot;;
                    } else if (preg_match('/^http[s]?:\/\/[a-zA-Z0-9\.\-]{2,}\.[a-zA-Z]{2,}/', $value['value'])) {
                        // Is it an URL?
                        $f = &quot;\n\t\t\t\t&lt;td style=\&quot;[email:contentFontFamily]\&quot;&gt;&lt;b&gt;&quot; . str_replace(array(&quot;\\'&quot;, '\\&quot;'), array(&quot;'&quot;, '&quot;'), $value['label']) . &quot;:&lt;/b&gt;&lt;/td&gt;\n\t\t\t\t&lt;td style=\&quot;[email:contentFontFamily]\&quot;&gt;&lt;a href=\&quot;&quot; . $value['value'] . &quot;\&quot;&gt;&quot;. $value['value'] . &quot;&lt;/a&gt;&lt;/td&gt;&quot;;
                    } else {
                        $f = &quot;\n\t\t\t\t&lt;td style=\&quot;[email:contentFontFamily]\&quot;&gt;&lt;b&gt;&quot; . str_replace(array(&quot;\\'&quot;, '\\&quot;'), array(&quot;'&quot;, '&quot;'), $value['label']) . &quot;:&lt;/b&gt;&lt;/td&gt;\n\t\t\t\t&lt;td style=\&quot;[email:contentFontFamily]\&quot;&gt;&quot; . str_replace(array(&quot;\\'&quot;, '\\&quot;'), array(&quot;'&quot;, '&quot;'), $value['value']) . &quot;&lt;/td&gt;&quot;;
                    }

                    $userDataTxt .= $value['label'] . &quot;: &quot; . $value['value'] . &quot;\n&quot;;
                    $userDataHtml .= &quot;\n\t\t\t&lt;tr&quot; . ($i%2 ? &quot; bgcolor=\&quot;[email:bodyBackgroundOdd]\&quot;&quot; : &quot;&quot;) . &quot;&gt;&quot; . $f . &quot;\n\t\t\t&lt;/tr&gt;&quot;;
                    $userDataCSVH[] = $value['label'];
                    $userDataCSV[] = $value['value'];
                    $i++;
                }
            }
            if ($userDataHtml != &quot;&quot;)
                $userDataHtml = &quot;\n\t\t&lt;table width=\&quot;100%\&quot; style=\&quot;[email:contentStyle]\&quot;&gt;&quot; . $userDataHtml . &quot;\n\t\t&lt;/table&gt;&quot;;
        }

        //
        //    Set the shipping data
        //
        if (isset($this-&gt;orderData['userShippingData']) &amp;&amp; is_array($this-&gt;orderData['userShippingData'])) {
            $i = 0;
            foreach ($this-&gt;orderData['userShippingData'] as $key =&gt; $value) {
                if (trim($value['value']) != &quot;&quot;) {
                    // Is it an email?
                    if (preg_match('/^([a-z0-9])(([-a-z0-9._])*([a-z0-9]))*\@([a-z0-9])' . '(([a-z0-9-])*([a-z0-9]))+' . '(\.([a-z0-9])([-a-z0-9_-])?([a-z0-9])+)+$/i', $value['value'])) {
                        $f = &quot;\n\t\t\t\t&lt;td style=\&quot;[email:contentFontFamily]\&quot;&gt;&lt;b&gt;&quot; . str_replace(array(&quot;\\'&quot;, '\\&quot;'), array(&quot;'&quot;, '&quot;'), $value['label']) . &quot;:&lt;/b&gt;&lt;/td&gt;\n\t\t\t\t&lt;td style=\&quot;[email:contentFontFamily]\&quot;&gt;&lt;a href=\&quot;mailto:&quot; . $value['value'] . &quot;\&quot;&gt;&quot;. $value['value'] . &quot;&lt;/a&gt;&lt;/td&gt;&quot;;
                    } else if (preg_match('/^http[s]?:\/\/[a-zA-Z0-9\.\-]{2,}\.[a-zA-Z]{2,}/', $value['value'])) {
                        // Is it an URL?
                        $f = &quot;\n\t\t\t\t&lt;td style=\&quot;[email:contentFontFamily]\&quot;&gt;&lt;b&gt;&quot; . str_replace(array(&quot;\\'&quot;, '\\&quot;'), array(&quot;'&quot;, '&quot;'), $value['label']) . &quot;:&lt;/b&gt;&lt;/td&gt;\n\t\t\t\t&lt;td style=\&quot;[email:contentFontFamily]\&quot;&gt;&lt;a href=\&quot;&quot; . $value['value'] . &quot;\&quot;&gt;&quot;. $value['value'] . &quot;&lt;/a&gt;&lt;/td&gt;&quot;;
                    } else {
                        $f = &quot;\n\t\t\t\t&lt;td style=\&quot;[email:contentFontFamily]\&quot;&gt;&lt;b&gt;&quot; . str_replace(array(&quot;\\'&quot;, '\\&quot;'), array(&quot;'&quot;, '&quot;'), $value['label']) . &quot;:&lt;/b&gt;&lt;/td&gt;\n\t\t\t\t&lt;td style=\&quot;[email:contentFontFamily]\&quot;&gt;&quot; . str_replace(array(&quot;\\'&quot;, '\\&quot;'), array(&quot;'&quot;, '&quot;'), $value['value']) . &quot;&lt;/td&gt;&quot;;
                    }

                    $shippingDataTxt .= $value['label'] . &quot;: &quot; . $value['value'] . &quot;\n&quot;;
                    $shippingDataHtml .= &quot;\n\t\t\t&lt;tr&quot; . ($i%2 ? &quot; bgcolor=\&quot;[email:bodyBackgroundOdd]\&quot;&quot; : &quot;&quot;) . &quot;&gt;&quot; . $f . &quot;\n\t\t\t&lt;/tr&gt;&quot;;
                    $shippingDataCSVH[] = $value['label'];
                    $shippingDataCSV[] = $value['value'];
                    $i++;
                }
            }
            if ($shippingDataHtml != &quot;&quot;)
                $shippingDataHtml = &quot;\n\t\t&lt;table width=\&quot;100%\&quot; style=\&quot;[email:contentStyle]\&quot;&gt;&quot; . $shippingDataHtml . &quot;\n\t\t&lt;/table&gt;&quot;;
        }
        $userDataCSV = @implode(&quot;;&quot;, $userDataCSVH) . &quot;\n&quot; . @implode(&quot;;&quot;, $userDataCSV);
        $shippingDataCSV = @implode(&quot;;&quot;, $shippingDataCSVH) . &quot;\n&quot; . @implode(&quot;;&quot;, $shippingDataCSV);
        
        //
        //    Set the products data
        //
        if (isset($this-&gt;orderData['products']) &amp;&amp; is_array($this-&gt;orderData['products'])) {
            $i = 0;
            foreach ($this-&gt;orderData['products'] as $key =&gt; $value)
                if (isset($value[&quot;option&quot;]) &amp;&amp; $value[&quot;option&quot;] != &quot;null&quot; &amp;&amp; strlen($value[&quot;option&quot;]))
                    $opt = true;
            $vat = ($this-&gt;settings['vat_type'] != &quot;none&quot;);
            $colspan = 3 + ($opt ? 1 : 0) + ($vat ? 1 : 0);
            $orderDataHTML = &quot;&lt;table cellpadding=\&quot;5\&quot; width=\&quot;100%\&quot; style=\&quot;[email:contentStyle] border-collapse: collapse; \&quot;&gt;
                                &lt;tr bgcolor=\&quot;[email:bodyBackgroundOdd]\&quot;&gt;
                                    &lt;td style=\&quot;[email:contentFontFamily] border: 1px solid [email:bodyBackgroundBorder];\&quot;&gt;
                                        &lt;b&gt;&quot; . l10n(&quot;cart_name&quot;) . &quot;&lt;/b&gt;
                                    &lt;/td&gt;&quot; .
                                    ($opt ?
                                        &quot;&lt;td style=\&quot;[email:contentFontFamily] border: 1px solid [email:bodyBackgroundBorder]; min-width: 80px;\&quot;&gt;
                                            &lt;b&gt;&quot; . l10n(&quot;product_option&quot;) . &quot;&lt;/b&gt;
                                        &lt;/td&gt;&quot; : &quot;&quot;) .
                                    &quot;&lt;td style=\&quot;[email:contentFontFamily] border: 1px solid [email:bodyBackgroundBorder];\&quot;&gt;
                                        &lt;b&gt;&quot; . l10n(&quot;cart_qty&quot;) . &quot;&lt;/b&gt;
                                    &lt;/td&gt;
                                    &lt;td style=\&quot;[email:contentFontFamily] border: 1px solid [email:bodyBackgroundBorder]; min-width: 70px;\&quot;&gt;
                                        &lt;b&gt;&quot; . l10n(&quot;cart_price&quot;) . &quot;&lt;/b&gt;
                                    &lt;/td&gt;&quot; .
                                    ($vat ?
                                        &quot;&lt;td style=\&quot;[email:contentFontFamily] border: 1px solid [email:bodyBackgroundBorder]; min-width: 70px;\&quot;&gt;
                                            &lt;b&gt;&quot; . ($this-&gt;settings['vat_type'] == &quot;included&quot; ? l10n(&quot;cart_vat_included&quot;) : l10n(&quot;cart_vat&quot;)) .&quot;&lt;/b&gt;
                                        &lt;/td&gt;&quot; : &quot;&quot;) .
                                    &quot;&lt;td  style=\&quot;[email:contentFontFamily] border: 1px solid [email:bodyBackgroundBorder];\&quot;&gt;
                                        &lt;b&gt;&quot; . l10n(&quot;cart_subtot&quot;) . &quot;&lt;/b&gt;
                                    &lt;/td&gt;
                                &lt;/tr&gt;\n&quot;;

            $orderDataCSV = l10n(&quot;cart_name&quot;) . &quot;;&quot; . l10n(&quot;cart_descr&quot;) . &quot;;&quot; . ($opt ? l10n(&quot;product_option&quot;) . &quot;;&quot; : &quot;&quot;) . l10n(&quot;cart_qty&quot;) . &quot;;&quot; . l10n(&quot;cart_price&quot;) . &quot;;&quot; . ($vat ? l10n(&quot;cart_vat&quot;) .&quot;;&quot; : &quot;&quot;) . l10n(&quot;cart_subtot&quot;);
            foreach ($this-&gt;orderData['products'] as $key =&gt; $value) {
                // CSV
                $orderDataCSV .= &quot;\n&quot; 
                . strip_tags(str_replace(array(&quot;\n&quot;, &quot;\r&quot;), &quot;&quot;, $value[&quot;name&quot;])) . &quot;;&quot; 
                . strip_tags(str_replace(array(&quot;\n&quot;, &quot;\r&quot;), &quot;&quot;, $value[&quot;description&quot;])) . &quot;;&quot; 
                . (($opt &amp;&amp; $value[&quot;option&quot;] != &quot;null&quot;) ? $value[&quot;option&quot;] . ( $value[&quot;suboption&quot;] != &quot;null&quot; ? &quot; &quot; . $value[&quot;suboption&quot;] . &quot;;&quot; : &quot;&quot;) : &quot;&quot;)
                . $value[&quot;quantity&quot;] . &quot;;&quot;
                . ($this-&gt;settings['vat_type'] == &quot;excluded&quot; ? $value[&quot;singlePrice&quot;] : $value['singlePricePlusVat']) . &quot;;&quot;
                . ($vat ? $value[&quot;vat&quot;] .&quot;;&quot; : &quot;&quot;)
                . ($this-&gt;settings['vat_type'] == &quot;excluded&quot; ? $value[&quot;price&quot;] : $value['pricePlusVat']);

                // Txt
                $orderDataTxt .= 
                strip_tags(str_replace(array(&quot;\n&quot;, &quot;\r&quot;), &quot;&quot;, $value[&quot;name&quot;]))
                . (($opt &amp;&amp; $value[&quot;option&quot;] != &quot;null&quot;) ? &quot; &quot; . $value[&quot;option&quot;] . ( $value[&quot;suboption&quot;] != &quot;null&quot; ? &quot; &quot; . $value[&quot;suboption&quot;] : &quot;&quot;) : &quot;&quot;)
                . &quot;- &quot; . strip_tags(str_replace(array(&quot;\n&quot;, &quot;\r&quot;), &quot;&quot;, $value[&quot;description&quot;])) . &quot;\n &quot;
                . $value[&quot;quantity&quot;] . &quot; x &quot; 
                . ( $this-&gt;settings['vat_type'] == &quot;excluded&quot; ?
                    &quot;(&quot; . $value[&quot;singlePrice&quot;] . &quot; + &quot; . l10n(&quot;cart_vat&quot;) . &quot; &quot; . $value[&quot;vat&quot;] . &quot;)&quot;
                :
                    $value[&quot;singlePricePlusVat&quot;]
                )
                . &quot; = &quot; . ($this-&gt;settings['vat_type'] == &quot;excluded&quot; ? $value[&quot;price&quot;] : $value['pricePlusVat']) . &quot;\n\n&quot;;

                // HTML
                $orderDataHTML .= &quot;\n\t\t\t\t&lt;tr valign=\&quot;top\&quot; style=\&quot;[email:contentFontFamily] vertical-align: top\&quot;&quot; . ($i%2 ? &quot; bgcolor=\&quot;#EEEEEE\&quot;&quot; : &quot;&quot;) . &quot;&gt;
                                                &lt;td style=\&quot;[email:contentFontFamily] border: 1px solid [email:bodyBackgroundBorder];\&quot;&gt;&quot; . $value[&quot;name&quot;] . &quot;&lt;br /&gt;&quot; . $value[&quot;description&quot;] . &quot;&lt;/td&gt;&quot; .
                                                ($opt ? &quot;&lt;td style=\&quot;border: 1px solid [email:bodyBackgroundBorder];\&quot;&gt;&quot; . (($value[&quot;option&quot;] != &quot;null&quot;) ? $value[&quot;option&quot;] . (($value[&quot;suboption&quot;] != &quot;null&quot;) ? &quot; &quot; . $value[&quot;suboption&quot;] : &quot;&quot;) : &quot;&quot;) . &quot;&lt;/td&gt;&quot; : &quot;&quot;) .
                                                &quot;&lt;td style=\&quot;[email:contentFontFamily] border: 1px solid [email:bodyBackgroundBorder]; text-align: right;\&quot;&gt;&quot; . $value[&quot;quantity&quot;] . &quot;&lt;/td&gt;&quot; .
                                                ($this-&gt;settings['vat_type'] == &quot;excluded&quot; ? 
                                                    &quot;&lt;td style=\&quot;[email:contentFontFamily] border: 1px solid [email:bodyBackgroundBorder]; text-align: right;\&quot;&gt;&quot; . ($value[&quot;singlePrice&quot;] == $value['singleFullPrice'] ? $value['singlePrice'] : $value['singlePrice'] . ' &lt;span style=&quot;text-decoration: line-through;&quot;&gt;' . $value['singleFullPrice'] . &quot;&lt;/span&gt;&quot;) . &quot;&lt;/td&gt;&quot;
                                                :
                                                    &quot;&lt;td style=\&quot;[email:contentFontFamily] border: 1px solid [email:bodyBackgroundBorder]; text-align: right;\&quot;&gt;&quot; . ($value[&quot;singlePricePlusVat&quot;] == $value['singleFullPricePlusVat'] ? $value['singlePricePlusVat'] : $value['singlePricePlusVat'] . ' &lt;span style=&quot;text-decoration: line-through;&quot;&gt;' . $value['singleFullPricePlusVat'] . &quot;&lt;/span&gt;&quot;) . &quot;&lt;/td&gt;&quot;
                                                )
                                                 .
                                                ($vat ? &quot;&lt;td style=\&quot;[email:contentFontFamily] border: 1px solid [email:bodyBackgroundBorder]; text-align: right;\&quot;&gt;&quot; . $value[&quot;vat&quot;] .&quot;&lt;/td&gt;&quot; : &quot;&quot;) .
                                                &quot;&lt;td style=\&quot;[email:contentFontFamily] border: 1px solid [email:bodyBackgroundBorder]; text-align: right;\&quot;&gt;&quot; . ($this-&gt;settings['vat_type'] == &quot;excluded&quot; ? $value[&quot;price&quot;] : $value['pricePlusVat']) . &quot;&lt;/td&gt;
                                            &lt;/tr&gt;\n&quot;;
                $i++;
            }
        }

        //
        //    Shipping
        //
        if (isset($this-&gt;orderData['shipping']) &amp;&amp; is_array($this-&gt;orderData['shipping'])) {
            $orderDataHTML .= &quot;\n\t\t\t&lt;tr&gt;&quot; . 
                                        ($this-&gt;settings['vat_type'] != &quot;none&quot; ?
                                            &quot;&lt;td colspan=\&quot;&quot; . ($colspan - 1) . &quot;\&quot;  style=\&quot;[email:contentFontFamily] border: 1px solid [email:bodyBackgroundBorder]; text-align: right;\&quot;&gt;&quot; . l10n('cart_shipping') . &quot;: &quot; . $this-&gt;orderData['shipping']['name'] . &quot;&lt;/td&gt;&quot; .
                                            &quot;&lt;td  style=\&quot;[email:contentFontFamily] border: 1px solid [email:bodyBackgroundBorder]; text-align: right;\&quot;&gt;&quot; . $this-&gt;orderData['shipping']['vat'] . &quot;&lt;/td&gt;&quot;
                                        :
                                            &quot;&lt;td colspan=\&quot;&quot; . $colspan . &quot;\&quot;  style=\&quot;[email:contentFontFamily] border: 1px solid [email:bodyBackgroundBorder]; text-align: right;\&quot;&gt;&quot; . l10n('cart_shipping') . &quot;: &quot; . $this-&gt;orderData['shipping']['name'] . &quot;&lt;/td&gt;&quot;
                                        )
                                        . &quot;&lt;td  style=\&quot;[email:contentFontFamily] border: 1px solid [email:bodyBackgroundBorder]; text-align: right;\&quot;&gt;&quot; . ($this-&gt;settings['vat_type'] == &quot;excluded&quot; ? $this-&gt;orderData['shipping']['price'] : $this-&gt;orderData['shipping']['pricePlusVat']) . &quot;&lt;/td&gt;
                                    &lt;/tr&gt;&quot;;
            $orderDataTxt .= &quot;\n&quot; . l10n('cart_shipping') . &quot; - &quot; . $this-&gt;orderData['shipping']['name'] . &quot;: &quot; . ($this-&gt;settings['vat_type'] == &quot;excluded&quot; ? $this-&gt;orderData['shipping']['price'] : $this-&gt;orderData['shipping']['pricePlusVat']);
        }

        //
        //    Payment
        //
        if (isset($this-&gt;orderData['payment']) &amp;&amp; is_array($this-&gt;orderData['payment'])) {
            $orderDataHTML .= &quot;\n\t\t\t&lt;tr&gt;&quot; . 
                                        ($this-&gt;settings['vat_type'] != &quot;none&quot; ?
                                            &quot;&lt;td colspan=\&quot;&quot; . ($colspan - 1) . &quot;\&quot;  style=\&quot;[email:contentFontFamily] border: 1px solid [email:bodyBackgroundBorder]; text-align: right;\&quot;&gt;&quot; . l10n('cart_payment') . &quot;: &quot; . $this-&gt;orderData['payment']['name'] . &quot;&lt;/td&gt;&quot; .
                                            &quot;&lt;td  style=\&quot;[email:contentFontFamily] border: 1px solid [email:bodyBackgroundBorder]; text-align: right;\&quot;&gt;&quot; . $this-&gt;orderData['payment']['vat'] . &quot;&lt;/td&gt;&quot;
                                        :
                                            &quot;&lt;td colspan=\&quot;&quot; . $colspan . &quot;\&quot;  style=\&quot;[email:contentFontFamily] border: 1px solid [email:bodyBackgroundBorder]; text-align: right;\&quot;&gt;&quot; . l10n('cart_payment') . &quot;: &quot; . $this-&gt;orderData['payment']['name'] . &quot;&lt;/td&gt;&quot;
                                        )
                                        . &quot;&lt;td  style=\&quot;[email:contentFontFamily] border: 1px solid [email:bodyBackgroundBorder]; text-align: right;\&quot;&gt;&quot; . ($this-&gt;settings['vat_type'] == &quot;excluded&quot; ? $this-&gt;orderData['payment']['price'] : $this-&gt;orderData['payment']['pricePlusVat']) . &quot;&lt;/td&gt;
                                    &lt;/tr&gt;&quot;;
            $orderDataTxt .= &quot;\n&quot; . l10n('cart_payment') . &quot; - &quot; . $this-&gt;orderData['payment']['name'] . &quot;: &quot; . ($this-&gt;settings['vat_type'] == &quot;excluded&quot; ? $this-&gt;orderData['payment']['price'] : $this-&gt;orderData['payment']['pricePlusVat']);
        }


        //
        //  Total amounts
        //
        switch ($this-&gt;settings['vat_type']) {
            case &quot;excluded&quot;:
                $orderDataHTML .= &quot;\n\t\t\t&lt;tr&gt;
                                        &lt;td colspan=\&quot;&quot; . $colspan . &quot;\&quot;  style=\&quot;[email:contentFontFamily] border: 1px solid [email:bodyBackgroundBorder]; text-align: right; font-weight: bold;\&quot;&gt;&quot; . l10n('cart_vat') . &quot;&lt;/td&gt;
                                        &lt;td style=\&quot;[email:contentFontFamily] border: 1px solid [email:bodyBackgroundBorder]; text-align: right;\&quot;&gt;&quot; . $this-&gt;orderData['totalVat'] . &quot;&lt;/td&gt;
                                    &lt;/tr&gt;&quot;;
                $orderDataHTML .= &quot;\n\t\t\t&lt;tr&gt;
                                        &lt;td colspan=\&quot;&quot; . $colspan . &quot;\&quot;  style=\&quot;[email:contentFontFamily] border: 1px solid [email:bodyBackgroundBorder]; text-align: right; font-weight: bold;\&quot;&gt;&quot; . l10n('cart_total_vat') . &quot;&lt;/td&gt;
                                        &lt;td style=\&quot;[email:contentFontFamily] border: 1px solid [email:bodyBackgroundBorder]; text-align: right;\&quot;&gt;&quot; . $this-&gt;orderData['totalPricePlusVat'] . &quot;&lt;/td&gt;
                                    &lt;/tr&gt;&quot;;
                $orderDataTxt .= &quot;\n&quot; . l10n('cart_vat')  . &quot;: &quot; . $this-&gt;orderData['totalVat'];
                $orderDataTxt .= &quot;\n&quot; . l10n('cart_total_vat')  . &quot;: &quot; . $this-&gt;orderData['totalPricePlusVat'];
            break;
            case &quot;included&quot;: 
                $orderDataHTML .= &quot;\n\t\t\t&lt;tr&gt;
                                        &lt;td colspan=\&quot;&quot; . $colspan . &quot;\&quot;  style=\&quot;[email:contentFontFamily] border: 1px solid [email:bodyBackgroundBorder]; text-align: right; font-weight: bold;\&quot;&gt;&quot; . l10n('cart_total_vat') . &quot;&lt;/td&gt;
                                        &lt;td style=\&quot;[email:contentFontFamily] border: 1px solid [email:bodyBackgroundBorder]; text-align: right;\&quot;&gt;&quot; . $this-&gt;orderData['totalPricePlusVat'] . &quot;&lt;/td&gt;
                                    &lt;/tr&gt;&quot;;
                $orderDataHTML .= &quot;\n\t\t\t&lt;tr&gt;
                                        &lt;td colspan=\&quot;&quot; . $colspan . &quot;\&quot;  style=\&quot;[email:contentFontFamily] border: 1px solid [email:bodyBackgroundBorder]; text-align: right; font-weight: bold;\&quot;&gt;&quot; . l10n('cart_vat_included') . &quot;&lt;/td&gt;
                                        &lt;td style=\&quot;[email:contentFontFamily] border: 1px solid [email:bodyBackgroundBorder]; text-align: right;\&quot;&gt;&quot; . $this-&gt;orderData['totalVat'] . &quot;&lt;/td&gt;
                                    &lt;/tr&gt;&quot;;
                $orderDataTxt .= &quot;\n&quot; . l10n('cart_total_vat')  . &quot;: &quot; . $this-&gt;orderData['totalPricePlusVat'];
                $orderDataTxt .= &quot;\n&quot; . l10n('cart_vat_included')  . &quot;: &quot; . $this-&gt;orderData['totalVat'];
            break;
            case &quot;none&quot;:
                $orderDataHTML .= &quot;\n\t\t\t&lt;tr&gt;
                                        &lt;td colspan=\&quot;&quot; . $colspan . &quot;\&quot;  style=\&quot;[email:contentFontFamily] border: 1px solid [email:bodyBackgroundBorder]; text-align: right; font-weight: bold;\&quot;&gt;&quot; . l10n('cart_total_price') . &quot;&lt;/td&gt;
                                        &lt;td style=\&quot;[email:contentFontFamily] border: 1px solid [email:bodyBackgroundBorder]; text-align: right;\&quot;&gt;&quot; . $this-&gt;orderData['totalPricePlusVat'] . &quot;&lt;/td&gt;
                                    &lt;/tr&gt;&quot;;
                $orderDataTxt .= &quot;\n&quot; . l10n('cart_total_price')  . &quot;: &quot; . $this-&gt;orderData['totalPricePlusVat'];
            break;
        }
        $orderDataHTML .= &quot;&lt;/table&gt;&quot;;

        $txtMsg = &quot;&quot;;
        $htmlMsg = &quot;&lt;table border=0 width=\&quot;100%\&quot; style=\&quot;[email:contentStyle]\&quot;&gt;\n&quot;;

        //
        // Order number
        // 
        $htmlMsg .= &quot;&lt;tr&gt;&lt;td colspan=\&quot;2\&quot; style=\&quot;[email:contentFontFamily] text-align: center; font-weight: bold;font-size: 1.11em\&quot;&gt;&quot; . l10n('cart_order_no') . &quot;: &quot; . $this-&gt;orderData['orderNo'] . &quot;&lt;/td&gt;&lt;/tr&gt;&quot;;
        $txtMsg .= str_replace(&quot;&lt;br&gt;&quot;, &quot;\n&quot;, l10n('cart_order_no') . &quot;: &quot; . $this-&gt;orderData['orderNo']);

        //
        //  Opening message
        //
        if (!$isOwner) {
            $htmlMsg .= &quot;\n&lt;tr&gt;&lt;td colspan=\&quot;2\&quot;&gt;&quot; . $this-&gt;settings['email_opening'] . &quot;&lt;/td&gt;&lt;/tr&gt;&quot;;
            $txtMsg .= &quot;\n\n&quot; . strip_tags(str_replace(&quot;&lt;br /&gt;&quot;, &quot;\n&quot;, $this-&gt;settings['email_opening']));
        }

        // Customer's data
        if ($shippingDataHtml != &quot;&quot;) {
            $htmlMsg .= &quot;\n&lt;tr style=\&quot;vertical-align: top\&quot; valign=\&quot;top\&quot;&gt;\n\t&lt;td style=\&quot;[email:contentFontFamily] width: 50%; padding: 20px 0;\&quot;&gt;\n\t\t&lt;h3 style=\&quot;font-size: 1.11em\&quot;&gt;&quot; . l10n('cart_vat_address') . &quot;&lt;/h3&gt;\n\t\t&quot; . $userDataHtml . &quot;\n\t&lt;/td&gt;&quot;;
            $htmlMsg .= &quot;\n\t&lt;td style=\&quot;[email:contentFontFamily] width: 50%; padding: 20px 0;\&quot;&gt;\n\t\t&lt;h3 style=\&quot;font-size: 1.11em\&quot;&gt;&quot; . l10n('cart_shipping_address') . &quot;&lt;/h3&gt;\n\t\t&quot; . $shippingDataHtml . &quot;&lt;/td&gt;\n\t&lt;/tr&gt;&quot;;

            $txtMsg .= &quot;\n&quot; . str_replace(&quot;&lt;br /&gt;&quot;, &quot;\n&quot;, l10n('cart_vat_address') . &quot;\n&quot; . $userDataTxt);
            $txtMsg .= &quot;\n&quot; . str_replace(&quot;&lt;br /&gt;&quot;, &quot;\n&quot;, l10n('cart_shipping_address') . &quot;\n&quot; . $shippingDataTxt);
        } else {
            $htmlMsg .= &quot;\n&lt;tr&gt;\n\t&lt;td colspan=\&quot;2\&quot; style=\&quot;[email:contentFontFamily] padding: 20px 0 0 0;\&quot;&gt;\n\t\t&lt;h3 style=\&quot;font-size: 1.11em\&quot;&gt;&quot; . l10n('cart_vat_address') . &quot;/&quot; . l10n('cart_shipping_address') . &quot;&lt;/h3&gt;\n\t\t&quot; . $userDataHtml . &quot;&lt;/td&gt;\n&lt;/tr&gt;&quot;;
            $txtMsg .= &quot;\n&quot; . str_replace(&quot;&lt;br /&gt;&quot;, &quot;\n&quot;, l10n('cart_vat_address') . &quot;/&quot; . l10n('cart_shipping_address') . &quot;\n&quot; . $userDataTxt);
        }

        $htmlMsg .= $separationLine;

        // Products
        $htmlMsg .=  &quot;&lt;tr&gt;&lt;td colspan=\&quot;2\&quot; style=\&quot;padding: 5px 0 0 0;\&quot;&gt;&lt;h3 style=\&quot;font-size: 1.11em\&quot;&gt;&quot; . l10n('cart_product_list') . &quot;&lt;/h3&gt;&quot; . $orderDataHTML . &quot;&lt;/td&gt;&lt;/tr&gt;&quot;;
        $txtMsg .= &quot;\n\n&quot; . str_replace(&quot;&lt;br /&gt;&quot;, &quot;\n&quot;, l10n('cart_product_list') . &quot;\n&quot; . $orderDataTxt);

        $htmlMsg .= $separationLine;

        // Payment
        if (isset($this-&gt;orderData['payment']) &amp;&amp; is_array($this-&gt;orderData['payment'])) {
            $htmlMsg .= &quot;&lt;tr&gt;
                            &lt;td colspan=\&quot;2\&quot; style=\&quot;padding: 5px 0 0 0;\&quot;&gt;
                                &lt;h3 style=\&quot;font-size: 1.11em\&quot;&gt;&quot; . l10n('cart_payment') . &quot;&lt;/h3&gt;&quot; .
                                nl2br($this-&gt;orderData['payment']['name']) .( !$isOwner ? '&lt;br /&gt;' . nl2br($this-&gt;orderData['payment']['email_text']) . ($this-&gt;orderData['payment']['html'] != &quot;&quot; ? '&lt;div style=&quot;text-align: center; margin-top: 20px;&quot;&gt;' . $this-&gt;orderData['payment']['html'] . '&lt;/div&gt;' : &quot;&quot;) : &quot;&quot; ) .
                            &quot;&lt;/td&gt;
                        &lt;/tr&gt;&quot;;
            $txtMsg .= &quot;\n\n&quot; . str_replace(&quot;&lt;br /&gt;&quot;, &quot;\n&quot;, l10n('cart_payment') . &quot;\n&quot; . $this-&gt;orderData['payment']['name'] . ( !$isOwner ? &quot;\n&quot; . $this-&gt;orderData['payment']['email_text'] : &quot;&quot; ));

            $htmlMsg .= $separationLine;
        }

        // Shipping
        if (isset($this-&gt;orderData['shipping']) &amp;&amp; is_array($this-&gt;orderData['shipping'])) {
            $htmlMsg .= &quot;&lt;tr&gt;
                            &lt;td colspan=\&quot;2\&quot; style=\&quot;padding: 5px 0 0 0;\&quot;&gt;
                                &lt;h3 style=\&quot;font-size: 1.11em\&quot;&gt;&quot; . l10n('cart_shipping') . &quot;&lt;/h3&gt;&quot; .
                                nl2br($this-&gt;orderData['shipping']['name']) . ( !$isOwner ? '&lt;br /&gt;' . nl2br($this-&gt;orderData['shipping']['email_text']) : &quot;&quot; ) .
                            &quot;&lt;/td&gt;
                        &lt;/tr&gt;&quot;;
            $txtMsg .= &quot;\n\n&quot; . str_replace(&quot;&lt;br /&gt;&quot;, &quot;\n&quot;, l10n('cart_shipping') . &quot;\n&quot; . $this-&gt;orderData['shipping']['name'] . ( !$isOwner ? &quot;\n&quot; . $this-&gt;orderData['shipping']['email_text'] : &quot;&quot; ));
        }

        //
        //  Closing message
        //
        if (!$isOwner) {
            $htmlMsg .= $separationLine;
            $htmlMsg .= &quot;\n&lt;tr&gt;&lt;td colspan=\&quot;2\&quot; style=\&quot;padding: 5px 0 0 0;\&quot;&gt;&quot; . $this-&gt;settings['email_closing'] . &quot;&lt;/td&gt;&lt;/tr&gt;&quot;;
            $txtMsg .= &quot;\n\n&quot; . strip_tags(str_replace(&quot;&lt;br /&gt;&quot;, &quot;\n&quot;, $this-&gt;settings['email_closing']));
        }
        
        // Close the html table
        $htmlMsg .= &quot;&lt;/table&gt;\n&quot;;

        $attachments = array();
        if ($this-&gt;settings['useCSV'] &amp;&amp; $isOwner) {
            $txtMsg .= $userDataCSV . &quot;\n&quot; . $orderDataCSV;
            $attachments[] = array(&quot;name&quot; =&gt; &quot;user_data.csv&quot;, &quot;content&quot; =&gt; $userDataCSV, &quot;mime&quot; =&gt; &quot;text/csv&quot;);
            $attachments[] = array(&quot;name&quot; =&gt; &quot;order_data.csv&quot;, &quot;content&quot; =&gt; $orderDataCSV, &quot;mime&quot; =&gt; &quot;text/csv&quot;);
        }
        return $ImMailer-&gt;send($from, $to, l10n('cart_order_no') . &quot; &quot; . $this-&gt;orderData['orderNo'], $txtMsg, $htmlMsg, $attachments);
    }

    /**
     * Send the order email to the owner
     * @return boolean
     */
    function sendOwnerEmail()
    {
        return $this-&gt;sendEmail(true, $this-&gt;settings['owner_email'], $this-&gt;settings['owner_email']);
    }

    /**
     * Send the order email to the customer
     * @return boolean
     */
    function sendCustomerEmail()
    {
        return $this-&gt;sendEmail(false, $this-&gt;settings['owner_email'], $this-&gt;orderData['userInvoiceData']['Email']['value']);
    }

}


/**
 * This file stores the class used to add/remove/edit comments
 *
 * @category X5engine
 * @package  X5engine
 * @license  Copyright by Incomedia http://incomedia.eu
 * @link     http://websitex5.com
 */

/**
 * Use this class to store comments
 * 
 * @category X5engine
 * @package  X5engine
 * @license  Copyright by Incomedia http://incomedia.eu
 * @link     http://websitex5.com
 */
class ImComment
{

    var $comments = array();
    var $error = 0;

    /**
     * Get the comments from a file
     * 
     * @param string $file The source file path
     * 
     * @return void
     */
    function loadFromXML($file)
    {
        if (!file_exists($file)) {
            $this-&gt;comments = array();
            return;
        }

        $xmlstring = @file_get_contents($file); 
        if (strpos($xmlstring, &quot;&lt;?xml&quot;) !== false) {
            $xml = new imXML();

            // Remove the garbage (needed to avoid loosing comments when the xml string is malformed)
            $xmlstring = preg_replace('/&lt;([0-9]+)&gt;.*&lt;\/\1&gt;/i', '', $xmlstring);
            $xmlstring = preg_replace('/&lt;comment&gt;\s*&lt;\/comment&gt;/i', '', $xmlstring);
            
            $comments = $xml-&gt;parse_string($xmlstring);
            if ($comments !== false &amp;&amp; is_array($comments)) {
                $tc = array();
                if (!isset($comments['comment'][0]) || !is_array($comments['comment'][0]))
                    $comments['comment'] = array($comments['comment']);
                for ($i = 0; $i &lt; count($comments['comment']); $i++) {
                    foreach ($comments['comment'][$i] as $key =&gt; $value) {
                        if ($key == &quot;timestamp&quot; &amp;&amp; strpos($value, &quot;-&quot;) == 2) {
                            // The v8 and v9 timestamp was inverted. For compatibility, let's convert it to the correct format.
                            // The v10 format is yyyy-mm-dd hh:ii:ss
                            // The v8 and v9 format is dd-mm-yyyy hh:ii:ss
                            $value = preg_replace(&quot;/([0-9]{2})\-([0-9]{2})\-([0-9]{4}) ([0-9]{2})\:([0-9]{2})\:([0-9]{2})/&quot;, &quot;$3-$2-$1 $4:$5:$6&quot;, $value);
                        }
                        $tc[$i][$key] = str_replace(array(&quot;\\'&quot;, '\\&quot;'), array(&quot;'&quot;, '&quot;'), htmlspecialchars_decode($value));
                    }
                }
                $this-&gt;comments = $tc;
            } else {
                // The comments cannot be retrieved. The XML is jammed.
                // Do a backup copy of the file and then reset the xml.
                // Hashed names ensure that a file is not copied more than once
                $n = $file . &quot;_version_&quot; . md5($xmlstring);
                if (!@file_exists($n))
                    @copy($file, $n);
                $this-&gt;comments = array();
            }
        } else {
            $this-&gt;loadFromOldFile($file);
        }
    }

    /**
     * Get the comments from a v8 comments file
     * 
     * @param string $file The source file path
     *
     * @return void
     */
    function loadFromOldFile($file)
    {
        if (!@file_exists($file)) {
            $this-&gt;comments = array();
            return;
        }
        $f = @file_get_contents($file);
        $f = explode(&quot;\n&quot;, $f);
        for ($i = 0;$i &lt; count($f)-1; $i += 6) {
            $c[$i/6]['name'] = stripslashes($f[$i]);
            $c[$i/6]['email'] = $f[$i+1];
            $c[$i/6]['url'] = $f[$i+2];
            $c[$i/6]['body'] = stripslashes($f[$i+3]);
            $c[$i/6]['timestamp'] = preg_replace(&quot;/([0-9]{2})\-([0-9]{2})\-([0-9]{4}) ([0-9]{2})\:([0-9]{2})\:([0-9]{2})/&quot;, &quot;$3-$2-$1 $4:$5:$6&quot;, $f[$i+4]);
            $c[$i/6]['approved'] = $f[$i+5];
            $c[$i/6]['rating'] = 0;
        }
        $this-&gt;comments = $c;
    }

    /**
     * Save the comments in a xml file
     * 
     * @param string $file The destination file path
     *
     * @return boolean
     */
    function saveToXML($file)
    {
        // If the count is 0, delete the file and exit
        if (count($this-&gt;comments) === 0) {
            if (@file_exists($file))
                @unlink($file);
            return true;
        }

        // If the folder doesn't exists, try to create it
        $dir = @dirname($file);
        if ($dir != &quot;&quot; &amp;&amp; $dir != &quot;/&quot; &amp;&amp; $dir != &quot;.&quot; &amp;&amp; $dir != &quot;./&quot; &amp;&amp; !file_exists($dir)) {
            @mkdir($dir, 0777, true);
        }

        $xml = &quot;&lt;?xml version=\&quot;1.0\&quot; encoding=\&quot;UTF-8\&quot;?&gt;\n&quot;;
        $xml .= &quot;&lt;comments&gt;\n&quot;;
        $i = 0;
        foreach ($this-&gt;comments as $comment) {
            $txml = &quot;&quot;;
            foreach ($comment as $key =&gt; $value) {
                // Well formed content only
                if (!preg_match('/[0-9]+/', $key) &amp;&amp; in_array(gettype($value), array('string', 'integer', 'double'))) {
                    $code = str_replace(array(&quot;\\'&quot;, '\\&quot;', &quot;\\\&quot;&quot;), array(&quot;'&quot;, '&quot;', &quot;\&quot;&quot;), preg_replace('/[\n\r\t]*/', '', nl2br($value)));
                    $txml .= &quot;\t\t&lt;&quot; . $key . &quot;&gt;&lt;![CDATA[&quot; . htmlspecialchars($code) . &quot;]]&gt;&lt;/&quot; . $key . &quot;&gt;\n&quot;;
                }
            }
            if ($txml != &quot;&quot;)
                $xml .= &quot;\t&lt;comment&gt;\n&quot; . $txml . &quot;\t&lt;/comment&gt;\n&quot;;
        }
        $xml .= &quot;&lt;/comments&gt;&quot;;

        if ((is_writable($file) || !file_exists($file))) {
            if (!$f = @fopen($file, 'w+')) {
                $this-&gt;error = -3;
                return false;
            } else {
                if (flock($f, LOCK_EX)) {
                    $locked = 1;
                }

                if (fwrite($f, $xml) === false) {
                    $this-&gt;error = -4;
                    return false;
                } else {
                    if($locked)
                        flock($f, LOCK_UN);
                    fclose($f);
                    $this-&gt;error = 0;
                    return true;
                }
            }
        } else {
            $this-&gt;error = -2;
            return false;
        }
    }


    /**
     * Add a comment to a file
     * 
     * @param array $comment the array of data to store
     *
     * @return void
     */
    function add($comment)
    {
        foreach ($comment as $key =&gt; $value) {
            $comment[$key] = $this-&gt;filterCode($value, true);
        }
        $this-&gt;comments[] = $comment;
    }

    /**
     * Sort the array
     * 
     * @param string $orderby Field to compare when ordering the array
     * @param string $sort    Sort by ascending (asc) or descending (desc) order
     * 
     * @return void         
     */
    function sort($orderby = &quot;&quot;, $sort = &quot;desc&quot;)
    {
        if (count($this-&gt;comments) === 0)
            return;

        // Find where the comments has this field
        // This is useful to order using a field which is not present in every comment (like the ts field, which is missing in the stars-only vote type)
        $comment = null;
        for ($i=0; $i &lt; count($this-&gt;comments) &amp;&amp; $comment == null; $i++) { 
            if (isset($this-&gt;comments[$i][$orderby]))
                $comment = $this-&gt;comments[$i];
        }
        if ($comment === null)
            return;
        
        // Order the array
        $symbol = (strtolower($sort) == &quot;desc&quot; ? '&lt;' : '&gt;');
        $compare = 'if (!isset($a[&quot;' . $orderby . '&quot;]) || !isset($b[&quot;' . $orderby . '&quot;])) return 0;';
        $compare .= 'if($a[&quot;' . $orderby . '&quot;] == $b[&quot;' . $orderby . '&quot;]) return 0; ';

        // The orderable field is a timestamp
        if (preg_match(&quot;/[0-9]{4}-[0-9]{2}-[0-9]{2}\s[0-9]{2}:[0-9]{2}:[0-9]{2}/&quot;, $comment[$orderby]))
            $compare .= 'if (strtotime($a[&quot;' . $orderby . '&quot;]) ' . $symbol . ' strtotime($b[&quot;' . $orderby . '&quot;])) return -1; return 1;';

        // The orderable field is a number
        else if (is_numeric($comment[$orderby]))
            $compare .= 'if ($a[&quot;' . $orderby . '&quot;] ' . $symbol . ' $b[&quot;' . $orderby . '&quot;]) return -1; return 1;';

        // The orderable field is a string
        else if (is_string($comment[$orderby]))
            $compare .= 'return strcmp($a[&quot;' . $orderby . '&quot;], $b[&quot;' . $orderby . '&quot;]);';

        // Sort and return
        usort($this-&gt;comments, create_function('$a, $b', $compare));
    }

    /**
     * Get all the comments
     * 
     * @param string $orderby Field to compare when ordering the array
     * @param string $sort    Sort by ascending (asc) or descending (desc) order
     * 
     * @return array
     */
    function getAll($orderby = &quot;&quot;, $sort = &quot;desc&quot;)
    {
        if ($orderby == &quot;&quot; || count($this-&gt;comments) === 0)
            return $this-&gt;comments;
        
        $this-&gt;sort($orderby, $sort);
        
        return $this-&gt;comments;
    }

    /**
     * Get the comment n
     * 
     * @param integer $n The index of comment
     * 
     * @return array
     */
    function get($n)
    {
        if (isset($this-&gt;comments[$n]))
            return $this-&gt;comments[$n];
        return array();
    }

    /**
     * Replace the comment $n with $comment
     * 
     * @param integer $n       Comment number
     * @param array   $comment Comment data
     * 
     * @return boolean
     */
    function edit($n, $comment)
    {
        if (isset($this-&gt;comments[$n])) {
            $this-&gt;comments[$n] = $comment;
            return true;
        }
        return false;
    }

    /**
     * Delete the comment at $n
     * 
     * @param integer $n The index of the comment
     * 
     * @return void
     */
    function delete($n)
    {
        // Delete an element from the array and reset the indexes
        if (isset($this-&gt;comments[$n])) {
            $comments = $this-&gt;comments;
            $this-&gt;comments = array();
            for ($i = 0; $i &lt; count($comments); $i++)
                if ($i != $n)
                    $this-&gt;comments[] = $comments[$i];
            return true;
        } else {
            return false;
        }
    }

    /**
     * Clean the data from XSS
     * 
     * @param string  $str         The string to parse
     * @param boolean $allow_links true to allow links
     * 
     * @return string
     */
    function filterCode($str, $allow_links = false)
    {
        global $imSettings;

        if (gettype($str) != 'string')
            return &quot;&quot;;

        // Remove javascript
        while (($start = imstripos($str, &quot;&lt;script&quot;)) !== false) {
            $end = imstripos($str, &quot;&lt;/script&gt;&quot;) + strlen(&quot;&lt;/script&gt;&quot;);
            $str = substr($str, 0, $start) . substr($str, $end);
        }

        // Remove PHP Code
        while (($start = imstripos($str, &quot;&lt;?&quot;)) !== false) {
            $end = imstripos($str, &quot;?&gt;&quot;) + strlen(&quot;?&gt;&quot;);
            $str = substr($str, 0, $start) . substr($str, $end);
        }

        // Remove ASP code
        while (($start = imstripos($str, &quot;&lt;%&quot;)) !== false) {
            $end = imstripos($str, &quot;%&gt;&quot;) + strlen(&quot;&lt;%&quot;);
            $str = substr($str, 0, $start) . substr($str, $end);
        }

        // Allow only few tags
        $str = strip_tags($str, '&lt;b&gt;&lt;i&gt;&lt;u&gt;' . ($allow_links ? '&lt;a&gt;' : ''));
        
        // Remove XML injection code
        while (($start = imstripos($str, &quot;&lt;![CDATA[&quot;)) !== false) {    
            // Remove the entire XML block when possible
            if (imstripos($str, &quot;]]&gt;&quot;) !== false) {
                $end = imstripos($str, &quot;]]&gt;&quot;) + strlen(&quot;]]&gt;&quot;);
                $str = substr($str, 0, $start) . substr($str, $end);
            } else {        
                $str = str_replace(&quot;&lt;![CDATA[&quot;, &quot;&quot;, str_replace(&quot;&lt;![cdata[&quot;, &quot;&quot;, $str));
            }
        }
        while (($start = imstripos($str, &quot;]]&gt;&quot;)) !== false) {
            $str = str_replace(&quot;]]&gt;&quot;, &quot;&quot;, $str);
        }

        // Remove all the onmouseover, onclick etc attributes
        while (($res = preg_replace(&quot;/(&lt;[\\s\\S]+) on.*\\=(['\&quot;\&quot;])[\\s\\S]+\\2/i&quot;, &quot;\\1&quot;, $str)) != $str) {
            // Exit in case of error
            if ($res == null)
                break;
            $str = $res;
        }

        $matches = array();
        preg_match_all('~&lt;a.*&gt;~isU', $str, $matches);
        for ($i = 0; $i &lt; count($matches[0]); $i++) {
            if (imstripos($matches[0][$i], 'nofollow') === false &amp;&amp; imstripos($matches[0][$i], $imSettings['general']['url']) === false) {
                $result = trim($matches[0][$i], &quot;&gt;&quot;) . ' rel=&quot;nofollow&quot;&gt;';
                $str = str_replace(strtolower($matches[0][$i]), strtolower($result), $str);
            }
        }

        return $str;
    }

    /**
     * Provide the last error
     * 
     * @return int
     */
    function lastError()
    {
        return $this-&gt;error;
    }
}


class ImDb
{

    var $conn;
    var $db;
    var $db_name;
    var $engine = &quot;MYISAM&quot;;

    /**
     * Define a new ImDb Object
     * (PHP5 Constructor)
     * 
     * @param string $host
     * @param string $user
     * @param string $pwd
     * @param string $db
     *
     * @return void
     */
    function __construct($host, $user, $pwd, $db)
    {
        $this-&gt;setUp($host, $user, $pwd, $db);
    }

    /**
     * Define a new ImDb Object
     * (PHP4 Constructor)
     * 
     * @param string $host
     * @param string $user
     * @param string $pwd
     * @param string $db
     *
     * @return void
     */ 
    function ImDb($host, $user, $pwd, $db)
    {
        $this-&gt;setUp($host, $user, $pwd, $db);
    }

    function setUp($host, $user, $pwd, $db)
    {
        $this-&gt;db_name = $db;
        $this-&gt;conn = @mysql_connect($host, $user, $pwd);        
        if ($this-&gt;conn === false)
            return;
        $this-&gt;db = @mysql_select_db($db, $this-&gt;conn);
        if ($this-&gt;db === false)
            return;
        if (function_exists('mysql_set_charset'))
            @mysql_set_charset(&quot;utf8&quot;, $this-&gt;conn);
        else
            @mysql_query('SET NAMES &quot;utf8&quot;', $this-&gt;conn);
    }

    /**
     * Check wheter the class is connected or not
     *
     * @return boolean
     */
    function testConnection()
    {
        return ($this-&gt;conn !== false &amp;&amp; $this-&gt;db !== false);
    }

    /**
     * Close the connection
     * 
     * @return void
     */
    function closeConnection()
    {
        @mysql_close($this-&gt;conn);
    }

    /**
     * Create a new table or update an existing one. The $fields array must be passed as:
     * array( &quot;field_name&quot; =&gt; array(
     *     &quot;type&quot; =&gt; &quot;TEXT&quot;
     *     &quot;null&quot; =&gt; true
     *     &quot;more&quot; =&gt; &quot;More data&quot;
     * ))
     * @param string $name   The table name
     * @param array $fields  The table fields list
     * @return boolean
     */
    function createTable( $name, $fields )
    {
        $qfields = array();
        $primaries = array();
        $createResult = false;

        // If the table does not exists, create it
        if (!$this-&gt;tableExists($name)) {
            $query = &quot;CREATE TABLE `&quot; . $this-&gt;db_name . &quot;`.`&quot; . $name . &quot;` (&quot;;
            foreach ($fields as $key =&gt; $value) {
                $qfields[] = &quot;`&quot; . $key . &quot;` &quot; .
                            $value['type'] .
                            ($value['type'] == 'TEXT' ? &quot; CHARACTER SET utf8 COLLATE utf8_unicode_ci&quot; : &quot;&quot;) .
                            (!isset($value['null']) || !$value['null'] ? &quot; NOT NULL&quot; : &quot;&quot;) .
                            (isset($value['auto_increment']) ? &quot; AUTO_INCREMENT&quot; : &quot;&quot;) .
                            (isset($value['more']) ? &quot; &quot; . $value['more'] : &quot;&quot;);
                if (isset($value['primary']) &amp;&amp; $value['primary']) {
                    $primaries[] = &quot;`&quot; . $key . &quot;`&quot;;
                }
            }
            $query .= implode(&quot;,&quot;, $qfields);
            if (count($primaries))
                $query .= &quot;, PRIMARY KEY (&quot; . implode(&quot;,&quot;, $primaries) . &quot;)&quot;;
            $query .= &quot;) ENGINE = &quot; . $this-&gt;engine . &quot; ;&quot;;
            $createResult = mysql_query($query, $this-&gt;conn);
        } else {
            $result = mysql_query(&quot;SHOW COLUMNS FROM `&quot; . $this-&gt;db_name . &quot;`.`&quot; . $name . &quot;`&quot;, $this-&gt;conn);
            if ($result) {
                // Actual fields
                $query = &quot;ALTER TABLE `&quot; . $this-&gt;db_name. &quot;`.`&quot; . $name . &quot;`&quot;;
                $act_fields = array();
                while ($row = mysql_fetch_array($result))
                    $act_fields[] = $row[0];
                // New fields
                $new_fields = array_diff(array_keys($fields), $act_fields);
                $new_fields = array_merge($new_fields); // Order the indexes
                if (count($new_fields) &gt; 0) {
                    foreach ($new_fields as $key) {
                        $qfields[] = &quot; ADD `&quot; . $key . &quot;` &quot; . $fields[$key]['type'] . 
                        ($fields[$key]['type'] == 'TEXT' ? &quot; CHARACTER SET utf8 COLLATE utf8_unicode_ci&quot; : &quot;&quot;) .
                        (!isset($fields[$key]['null']) || !$fields[$key]['null'] ? &quot; NOT NULL&quot; : &quot;&quot;) .
                        (isset($value['auto_increment']) ? &quot; AUTO_INCREMENT&quot; : &quot;&quot;) .
                        (isset($fields[$key]['more']) ? &quot; &quot; . $fields[$key]['more'] : &quot;&quot;);
                    }
                    $query .= implode(&quot;,&quot;, $qfields);
                    $createResult = mysql_query($query, $this-&gt;conn);
                }
            }
        }
        return $createResult;
    }

    /**
     * Delete a table. Used often only for test purposes
     * 
     * @param string $table The table to delete
     * 
     * @return void
     */
    function deleteTable($table)
    {
        mysql_query(&quot;DROP TABLE &quot; . $this-&gt;db_name . &quot;.&quot; . $table, $this-&gt;conn);
    }

    /**
     * Check if the table exists in the current database
     * 
     * @param string $table The table name
     * 
     * @return boolean        true if the table exists
     */
    function tableExists($table)
    {
        $result = mysql_query(&quot;SHOW FULL TABLES FROM `&quot; . $this-&gt;db_name . &quot;` LIKE '&quot; . mysql_real_escape_string($table, $this-&gt;conn) . &quot;'&quot;, $this-&gt;conn);
        // Check that the name is correct (usage of LIKE is not correct if there are wildcards in the table name. Unfortunately MySQL 4 doesn't allow another syntax..)
        while (!is_bool($result) &amp;&amp; $tb = mysql_fetch_array($result)) {
            if ($tb[0] == $table)
                return true;
        }
        return false;
    }

    /**
     * Get the last error
     * 
     * @return array
     */
    function error()
    {
        return mysql_error();
    }

    /**
     * Provide the last inserted ID of the AUTOINCREMENT column
     * 
     * @return int The id of the latest insert operation
     */
    function lastInsertId()
    {
        $res = $this-&gt;query(&quot;SELECT LAST_INSERT_ID() AS `id`&quot;);
        if (count($res) &gt; 0 &amp;&amp; isset($res[0]['id'])) {
            return $res[0]['id'];
        }
        return 0;
    }

    /**
     * Execute a query
     * 
     * @param string $query The query
     * 
     * @return array        The query result
     */
    function query($query)
    {
        $result = mysql_query($query, $this-&gt;conn);
        if (!is_bool($result)) {
            $rows = array();
            while($row = mysql_fetch_array($result))
                $rows[] = $row;
            return $rows;
        }
        return $result;
    }

    /**
     * Escape a string
     * 
     * @param string $string The string to escape
     * 
     * @return string
     */
    function escapeString($string)
    {
        if (!is_array($string)) {
            return mysql_real_escape_string($string, $this-&gt;conn);
        } else {
            for ($i = 0; $i &lt; count($string); $i++)
                $string[$i] = $this-&gt;escapeString($string[$i]);
            return $string;
        }
    }

    /**
     * Return the number of affected rows in the last query
     * 
     * @return integer
     */
    function affectedRows()
    {
        return mysql_affected_rows($this-&gt;conn);
    }
}


/**
 * Provide support for sending and saving the email form data
 */

class ImForm
{

    var $fields = array();
    var $files = array();
    var $answers = array();

    /**
     * Set the data of a field
     * 
     * @param string $label  The field label
     * @param strin  $value  The field value
     * @param string $dbname The name to use in the db
     * @param boolean $isSeparator True if this field must be used as separator in the email
     * 
     * @return boolean
     */
    function setField($label, $value, $dbname = &quot;&quot;, $isSeparator = false)
    {
        $this-&gt;fields[] = array(
            &quot;label&quot;     =&gt; $label,
            &quot;value&quot;     =&gt; $value,
            &quot;dbname&quot;    =&gt; $dbname,
            &quot;isSeparator&quot; =&gt; $isSeparator
        );
        return true;
    }

    /**
     * Provide the currently set fields
     * 
     * @return array
     */
    function fields()
    {
        return $this-&gt;fields;
    }

    /**
     * Set a file field
     * 
     * @param string  $label      The field label
     * @param file    $value      The $_FILE[id] content
     * @param string  $folder     The folder in which the file must be saved
     * @param string  $dbname     The db column in which this filed must be saved
     * @param mixed   $extensions The extensions allowed for the file (string or array)
     * @param integer $maxsize    The max size (0 to not check this)
     * 
     * @param boolean
     */
    function setFile($label, $value, $folder = &quot;&quot;, $dbname = &quot;&quot;, $extensions = array(), $maxsize = 0)
    {
        if (is_string($extensions))
            $extensions = strlen($extensions) ? explode(&quot;,&quot;, strtolower($extensions)) : array();

        $exists = file_exists($value['tmp_name']);
        if (!$exists)
            return false;
        
        $fileExtension = strtolower(substr($value['name'], strpos($value['name'], &quot;.&quot;) + 1));
        $extension = (count($extensions) == 0 || in_array($fileExtension, $extensions));
        $size = ($maxsize == 0 || $maxsize &gt;= $value['size']);

        if (!$extension || !$size)
            return false;
            
        if ($folder != &quot;&quot; &amp;&amp; substr($folder, 0, -1) != &quot;/&quot;)
            $folder .= &quot;/&quot;;
        $this-&gt;files[] = array(
            &quot;value&quot; =&gt; $value,
            &quot;label&quot; =&gt; $label,
            &quot;dbname&quot; =&gt; $dbname,
            &quot;folder&quot; =&gt; $folder,
            // Save the file content to set is as available for every istance in the class
            // This because after calling move_uploaded_file the temp file is not available anymore
            &quot;content&quot; =&gt; @file_get_contents($value['tmp_name'])
        );
        return true;
    }

    /**
     * Provides the currently set files
     *
     *  @return array
     */
    function files()
    {
        return $this-&gt;files;
    }

    /**
     * Set the answer to check
     * 
     * @param string $questionId The question id
     * @param string $answer     The correct answer
     *
     * @return void
     */
    function setAnswer($questionId, $answer)
    {
        $this-&gt;answers[$questionId] = $answer;
    }

    /**
     * Check if the answer $answer is correct for question $questionId
     * 
     * @param  string $questionId The question id
     * @param  string $answer     The answer
     * 
     * @return boolean
     */
    function checkAnswer($questionId, $answer)
    {
        $questionId += &quot;&quot;;
        return (isset($this-&gt;answers[$questionId]) &amp;&amp; trim(strtolower($this-&gt;answers[$questionId])) == trim(strtolower($answer)));
    }

    /**
     * Provides the currently set answers
     * 
     * @return array
     */
    function answers()
    {
        return $this-&gt;answers;
    }

    /**
     * Save the data in the database
     * 
     * @param  string $host
     * @param  string $user
     * @param  string $passwd
     * @param  string $database
     * @param  string $table
     * 
     * @return boolean
     */
    function saveToDb($host, $user, $passwd, $database, $table)
    {
        $db = new ImDb($host, $user, $passwd, $database);
        if (!$db-&gt;testConnection())
            return false;

        $fields = array();
        $names = array();
        $values = array();

        $i = 0;
        foreach ($this-&gt;fields as $field) {
            if (!$field['isSeparator']) {
                $name = isset($field['dbname']) &amp;&amp; $field['dbname'] !== &quot;&quot; ? $field['dbname'] : &quot;field_&quot; . $i++;
                $fields[$name] = array(
                    &quot;type&quot; =&gt; &quot;TEXT&quot;
                );
                $names[] = &quot;`&quot; . $name . &quot;`&quot;;
                $values[] = &quot;'&quot; . $db-&gt;escapeString(is_array($field['value']) ? implode(&quot;, &quot;, $field['value']) : $field['value']) . &quot;'&quot;;
            }
        }
        $i = 0;
        foreach ($this-&gt;files as $file) {
            $fieldname = isset($file['dbname']) &amp;&amp; $file['dbname'] !== &quot;&quot; ? $file['dbname'] : &quot;file_&quot; . $i++;
            $filename = $this-&gt;findFileName($file['folder'], $file['value']['name']);
            $fields[$fieldname] = array(
                &quot;type&quot; =&gt; &quot;TEXT&quot;
            );
            $names[] = &quot;`&quot; . $fieldname . &quot;`&quot;;
            $values[] = &quot;'&quot; . $db-&gt;escapeString($filename) . &quot;'&quot;;
            // Create and check the folder
            $folder = &quot;../&quot;;
            if (($pos = strpos($file['folder'], &quot;/&quot;)) === 0)
                $file['folder'] = substr($file['folder'], 1);
            $folder .= $file['folder'];
            if ($folder != &quot;../&quot; &amp;&amp; !file_exists($folder))
                @mkdir($folder, 0777, true);
            $folder = str_replace(&quot;//&quot;, &quot;/&quot;, $folder .= $filename);
            // Save the file
            @move_uploaded_file($file['value']['tmp_name'], $folder);
        }

        // Create the table
        $db-&gt;createTable($table, $fields);

        // Save the fields data
        $query = &quot;INSERT INTO `&quot; . $table . &quot;` (&quot; . implode(&quot;,&quot;, $names) . &quot;) VALUES (&quot; . implode(&quot;,&quot;, $values) . &quot;)&quot;;
        $db-&gt;query($query);
        $db-&gt;closeConnection();
        return true;
    }

    /**
     * Find a free filename
     * 
     * @param  string $folder   The folder in which the file is being saved
     * @param  string $tmp_name The filename
     * 
     * @return string           The new name
     */
    function findFileName($folder, $tmp_name)
    {
        $pos = strrpos($tmp_name, &quot;.&quot;);
        $ext = ($pos !== false ? substr($tmp_name, $pos) : &quot;&quot;);
        $fname = basename($tmp_name, $ext);            
        do {
            $rname = $fname . &quot;_&quot; . rand(0, 10000) .  $ext;
        } while (file_exists($folder . $rname));
        return $rname;
    }

    /**
     * Send the email to the site's owner
     * 
     * @param  string  $from
     * @param  string  $to
     * @param  string  $subject
     * @param  string  $text    The email body
     * @param  boolean $csv     Attach the CSV files?
     * 
     * @return boolean
     */
    function mailToOwner($from, $to, $subject, $text, $csv = false)
    {
        global $ImMailer;

        //Form Data
        $txtData = strip_tags($text);
        if (strlen($txtData))
             $txtData .= &quot;\n\n&quot;;
        $htmData = nl2br($text);
        if (strlen($htmData))
            $htmData .= &quot;\n&lt;br&gt;&lt;br&gt;\n&quot;;
        $htmData .= &quot;&lt;table border=0 width=\&quot;100%\&quot; style=\&quot;[email:contentStyle]\&quot;&gt;\r\n&quot;;
        $csvHeader = &quot;&quot;;
        $csvData = &quot;&quot;;
        $firstField = true;
        
        foreach ($this-&gt;fields as $field) {
            if ($field['isSeparator']) {
                //
                // This field is a form separator
                // 
                $txtData .= (!$firstField ? &quot;\r\n&quot; : &quot;&quot;) . $field['label'] . &quot;\r\n&quot; . str_repeat(&quot;=&quot;, strlen($field['label'])) . &quot;\r\n&quot;;
                $htmData .= &quot;&lt;tr valign=\&quot;top\&quot;&gt;&lt;td colspan=\&quot;2\&quot; style=\&quot;&quot; . (!$firstField ? &quot;padding-top: 8px;&quot; : &quot;&quot;) . &quot; border-bottom: 1px solid [email:bodySeparatorBorderColor];\&quot;&gt;&lt;b&gt;&quot; . str_replace(array(&quot;\\'&quot;, '\\&quot;'), array(&quot;'&quot;, '&quot;'), $field['label']) . &quot;&lt;/b&gt;&lt;/td&gt;&lt;/tr&gt;\r\n&quot;;
            } else {
                //
                // This field is a classic form field
                // 
                $label = ($field['label'] != &quot;&quot; ? $field['label'] . &quot;: &quot; : &quot;&quot;);
                if (is_array($field['value'])) {
                    $txtData .= $label . implode(&quot;, &quot;, $field['value']) . &quot;\r\n&quot;;
                    $htmData .= &quot;&lt;tr valign=\&quot;top\&quot;&gt;&lt;td width=\&quot;25%\&quot;&gt;&lt;b&gt;&quot; . $label . &quot;&lt;/b&gt;&lt;/td&gt;&lt;td&gt;&quot; . implode(&quot;, &quot;, $field['value']) . &quot;&lt;/td&gt;&lt;/tr&gt;\r\n&quot;;
                    if ($csv) {
                        $csvHeader .= $field['label'] . &quot;;&quot;;
                        $csvData .= implode(&quot;, &quot;, $field['value']) . &quot;;&quot;;
                    }
                } else {        
                    $txtData .= $label . $field['value'] . &quot;\r\n&quot;;
                    // Is it an email?
                    if (preg_match('/^([a-z0-9])(([-a-z0-9._])*([a-z0-9]))*\@([a-z0-9])' . '(([a-z0-9-])*([a-z0-9]))+' . '(\.([a-z0-9])([-a-z0-9_-])?([a-z0-9])+)+$/i', $field['value'])) {
                        $htmData .= &quot;&lt;tr valign=\&quot;top\&quot;&gt;&lt;td width=\&quot;25%\&quot;&gt;&lt;b&gt;&quot; . str_replace(array(&quot;\\'&quot;, '\\&quot;'), array(&quot;'&quot;, '&quot;'), $label) . &quot;&lt;/b&gt;&lt;/td&gt;&lt;td&gt;&lt;a href=\&quot;mailto:&quot; . $field['value'] . &quot;\&quot;&gt;&quot;. $field['value'] . &quot;&lt;/a&gt;&lt;/td&gt;&lt;/tr&gt;\r\n&quot;;
                    } else if (preg_match('/^http[s]?:\/\/[a-zA-Z0-9\.\-]{2,}\.[a-zA-Z]{2,}/', $field['value'])) {
                        // Is it an URL?
                        $htmData .= &quot;&lt;tr valign=\&quot;top\&quot;&gt;&lt;td width=\&quot;25%\&quot;&gt;&lt;b&gt;&quot; . str_replace(array(&quot;\\'&quot;, '\\&quot;'), array(&quot;'&quot;, '&quot;'), $label) . &quot;&lt;/b&gt;&lt;/td&gt;&lt;td&gt;&lt;a href=\&quot;&quot; . $field['value'] . &quot;\&quot;&gt;&quot;. $field['value'] . &quot;&lt;/a&gt;&lt;/td&gt;&lt;/tr&gt;\r\n&quot;;
                    } else {
                        $htmData .= &quot;&lt;tr valign=\&quot;top\&quot;&gt;&lt;td width=\&quot;25%\&quot;&gt;&lt;b&gt;&quot; . str_replace(array(&quot;\\'&quot;, '\\&quot;'), array(&quot;'&quot;, '&quot;'), $label) . &quot;&lt;/b&gt;&lt;/td&gt;&lt;td&gt;&quot; . str_replace(array(&quot;\\'&quot;, '\\&quot;'), array(&quot;'&quot;, '&quot;'), $field['value']) . &quot;&lt;/td&gt;&lt;/tr&gt;\r\n&quot;;
                    }
                    if ($csv) {
                        $csvHeader .= str_replace(array(&quot;\\'&quot;, '\\&quot;'), array(&quot;'&quot;, '&quot;'), $field['label']) . &quot;;&quot;;
                        $csvData .= str_replace(array(&quot;\\'&quot;, '\\&quot;'), array(&quot;'&quot;, '&quot;'), $field['value']) . &quot;;&quot;;
                    }
                }
            }
            $firstField = false;
        }

        $htmData .= &quot;&lt;/table&gt;&quot;;
        $attachments = array();
        if ($csv) {
            $attachments[] = array(
                &quot;name&quot; =&gt; &quot;form_data.csv&quot;, 
                &quot;content&quot; =&gt; $csvHeader . &quot;\n&quot; . $csvData,
                &quot;mime&quot; =&gt; &quot;text/csv&quot;
            );
        }
        foreach ($this-&gt;files as $file) {
            $attachments[] = array(
                'name' =&gt; $file['value']['name'],
                'content' =&gt; $file['content'],
                'mime' =&gt; $file['value']['type']
            );
        }
        return $ImMailer-&gt;send($from, $to, $subject, $txtData, $htmData, $attachments);
    }

    /**
     * Send the email to the site's customer
     * 
     * @param  string  $from
     * @param  string  $to
     * @param  string  $subject
     * @param  string  $text    The email body
     * @param  boolean $summary Append the data to the email? (It's not an attachment)
     * 
     * @return boolean
     */
    function mailToCustomer($from, $to, $subject, $text, $csv = false)
    {
        global $ImMailer;

        //Form Data
        $txtData = strip_tags($text);
        if (strlen($txtData))
            $txtData .= &quot;\n\n&quot;;
        $htmData = nl2br($text);
        if (strlen($htmData))
            $htmData .= &quot;\n&lt;br&gt;&lt;br&gt;\n&quot;;
        $csvHeader = &quot;&quot;;
        $csvData = &quot;&quot;;
        $firstField = true;
        
        if ($csv) {
            $htmData .= &quot;&lt;table border=0 width=\&quot;100%\&quot; style=\&quot;[email:contentStyle]\&quot;&gt;\r\n&quot;;
            foreach ($this-&gt;fields as $field) {
                if ($field['isSeparator']) {
                    //
                    // This field is a form separator
                    // 
                    $txtData .= (!$firstField ? &quot;\r\n&quot; : &quot;&quot;) . $field['label'] . &quot;\r\n&quot; . str_repeat(&quot;=&quot;, strlen($field['label'])) . &quot;\r\n&quot;;
                    $htmData .= &quot;&lt;tr valign=\&quot;top\&quot;&gt;&lt;td colspan=\&quot;2\&quot; style=\&quot;&quot; . (!$firstField ? &quot;padding-top: 8px;&quot; : &quot;&quot;) . &quot; border-bottom: 1px solid [email:bodySeparatorBorderColor];\&quot;&gt;&lt;b&gt;&quot; . str_replace(array(&quot;\\'&quot;, '\\&quot;'), array(&quot;'&quot;, '&quot;'), $field['label']) . &quot;&lt;/b&gt;&lt;/td&gt;&lt;/tr&gt;\r\n&quot;;
                } else {
                    //
                    // This field is a classic form field
                    // 
                    $label = ($field['label'] != &quot;&quot; ? $field['label'] . &quot;: &quot; : &quot;&quot;);
                    if (is_array($field['value'])) {
                        $txtData .= $label . implode(&quot;, &quot;, $field['value']) . &quot;\r\n&quot;;
                        $htmData .= &quot;&lt;tr valign=\&quot;top\&quot;&gt;&lt;td width=\&quot;25%\&quot;&gt;&lt;b&gt;&quot; . $label . &quot;&lt;/b&gt;&lt;/td&gt;&lt;td&gt;&quot; . implode(&quot;, &quot;, $field['value']) . &quot;&lt;/td&gt;&lt;/tr&gt;\r\n&quot;;
                        if ($csv) {
                            $csvHeader .= $field['label'] . &quot;;&quot;;
                            $csvData .= implode(&quot;, &quot;, $field['value']) . &quot;;&quot;;
                        }
                    } else {                        
                        $txtData .= $label . $field['value'] . &quot;\r\n&quot;;
                        // Is it an email?
                        if (preg_match('/^([a-z0-9])(([-a-z0-9._])*([a-z0-9]))*\@([a-z0-9])' . '(([a-z0-9-])*([a-z0-9]))+' . '(\.([a-z0-9])([-a-z0-9_-])?([a-z0-9])+)+$/i', $field['value'])) {
                            $htmData .= &quot;&lt;tr valign=\&quot;top\&quot;&gt;&lt;td width=\&quot;25%\&quot;&gt;&lt;b&gt;&quot; . str_replace(array(&quot;\\'&quot;, '\\&quot;'), array(&quot;'&quot;, '&quot;'), $label) . &quot;&lt;/b&gt;&lt;/td&gt;&lt;td&gt;&lt;a href=\&quot;mailto:&quot; . $field['value'] . &quot;\&quot;&gt;&quot;. $field['value'] . &quot;&lt;/a&gt;&lt;/td&gt;&lt;/tr&gt;\r\n&quot;;
                        } else if (preg_match('/^http[s]?:\/\/[a-zA-Z0-9\.\-]{2,}\.[a-zA-Z]{2,}/', $field['value'])) {
                            // Is it an URL?
                            $htmData .= &quot;&lt;tr valign=\&quot;top\&quot;&gt;&lt;td width=\&quot;25%\&quot;&gt;&lt;b&gt;&quot; . str_replace(array(&quot;\\'&quot;, '\\&quot;'), array(&quot;'&quot;, '&quot;'), $label) . &quot;&lt;/b&gt;&lt;/td&gt;&lt;td&gt;&lt;a href=\&quot;&quot; . $field['value'] . &quot;\&quot;&gt;&quot;. $field['value'] . &quot;&lt;/a&gt;&lt;/td&gt;&lt;/tr&gt;\r\n&quot;;
                        } else {
                            $htmData .= &quot;&lt;tr valign=\&quot;top\&quot;&gt;&lt;td width=\&quot;25%\&quot;&gt;&lt;b&gt;&quot; . str_replace(array(&quot;\\'&quot;, '\\&quot;'), array(&quot;'&quot;, '&quot;'), $label) . &quot;&lt;/b&gt;&lt;/td&gt;&lt;td&gt;&quot; . str_replace(array(&quot;\\'&quot;, '\\&quot;'), array(&quot;'&quot;, '&quot;'), $field['value']) . &quot;&lt;/td&gt;&lt;/tr&gt;\r\n&quot;;
                        }
                        if ($csv) {
                            $csvHeader .= str_replace(array(&quot;\\'&quot;, '\\&quot;'), array(&quot;'&quot;, '&quot;'), $field['label']) . &quot;;&quot;;
                            $csvData .= str_replace(array(&quot;\\'&quot;, '\\&quot;'), array(&quot;'&quot;, '&quot;'), $field['value']) . &quot;;&quot;;
                        }
                    }
                }
                $firstField = false;
            }
            $htmData .= &quot;&lt;/table&gt;\n&quot;;
        }
        
        return $ImMailer-&gt;send($from, $to, $subject, $txtData, $htmData);
    }
}


/**
 * Private area
 * @access public
 */
class imPrivateArea
{

    var $session_type;
    var $session_uname;
    var $session_uid;
    var $session_gids;
    var $session_page;
    var $cookie_name;
    var $salt;

    // PHP 5
    function __construct()
    {
        $this-&gt;setup();
    }

    // PHP 4
    function imPrivateArea()
    {
        $this-&gt;setup();
    }

    function setup() {
        global $imSettings;

        $this-&gt;session_type      = &quot;im_access_utype&quot;;
        $this-&gt;session_uname     = &quot;im_access_uname&quot;;
        $this-&gt;session_real_name = &quot;im_access_real_name&quot;;
        $this-&gt;session_page      = &quot;im_access_request_page&quot;;
        $this-&gt;session_uid       = &quot;im_access_uid&quot;;
        $this-&gt;session_gids      = &quot;im_access_gids&quot;;
        $this-&gt;cookie_name       = &quot;im_access_cookie_uid&quot;;
        $this-&gt;salt              = $imSettings['general']['salt'];
    }

    /**
     * Encode the string
     * 
     * @param  string $string The string to encode
     * @param  $key The encryption key
     * 
     * @return string    The encoded string
     */
    function _encode($s, $k)
    {
        $r = array();
        for($i = 0; $i &lt; strlen($s); $i++)
            $r[] = ord($s[$i]) + ord($k[$i % strlen($k)]);

        // Try to encode it using base64
        if (function_exists(&quot;base64_encode&quot;) &amp;&amp; function_exists(&quot;base64_decode&quot;))
            return base64_encode(implode('.', $r));

        return implode('.', $r);
    }

    /**
     * Decode the string
     * 
     * @param  string $s The string to decode
     * @param  string $k The encryption key
     * @return string    The decoded string
     */
    function _decode($s, $k)
    {

        // Try to decode it using base64
        if (function_exists(&quot;base64_encode&quot;) &amp;&amp; function_exists(&quot;base64_decode&quot;))
            $s = base64_decode($s);

        $s = explode(&quot;.&quot;, $s);
        $r = array();
        for($i = 0; $i &lt; count($s); $i++)
            $r[$i] = chr($s[$i] - ord($k[$i % strlen($k)]));
        return implode('', $r);
    }

    /**
     * Login
     * 
     * @access public
     * 
     * @param uname Username (string)
     * @param pwd Password (string)
     */
    function login($uname, $pwd)
    {
        global $imSettings;

        if (!strlen($uname) || !strlen($pwd))
            return -2;

        // Check if the user exists in the hardcoded file
        if (isset($imSettings['access']['users'][$uname]) &amp;&amp; $imSettings['access']['users'][$uname]['password'] == $pwd) {
            $this-&gt;_setSession(
                &quot;1&quot;,
                $imSettings['access']['users'][$uname]['id'],
                $imSettings['access']['users'][$uname]['groups'],
                $uname,
                $imSettings['access']['users'][$uname]['name']
            );
            return 0;
        }
        return -2;
    }

    /**
     * Set the session after the login
     *
     * @param string $type &quot;0&quot; or &quot;1&quot;
     * @param string $uid
     * @param Array  $gids
     * @param string $uname   
     * @param string $realname
     */
    function _setSession($type, $uid, $gids, $uname, $realname)
    {
        @session_regenerate_id();
        $_SESSION[$this-&gt;session_type]      = $this-&gt;_encode($type, $this-&gt;salt);
        $_SESSION[$this-&gt;session_uid]       = $this-&gt;_encode($uid, $this-&gt;salt);
        $_SESSION[$this-&gt;session_uname]     = $this-&gt;_encode($uname, $this-&gt;salt);
        $_SESSION[$this-&gt;session_real_name] = $this-&gt;_encode($realname, $this-&gt;salt);
        $_SESSION[$this-&gt;session_gids]      = $gids;
        $_SESSION['HTTP_USER_AGENT']        = md5($_SERVER['HTTP_USER_AGENT'] . $this-&gt;salt);
        @setcookie($this-&gt;cookie_name, $this-&gt;_encode($uid, $this-&gt;salt), 0, &quot;/&quot;); // Expires when the browser is closed
    }

    /**
     * Logout
     * 
     * @access public
     */
    function logout()
    {
        $_SESSION[$this-&gt;session_type]  = &quot;&quot;;
        $_SESSION[$this-&gt;session_uname] = &quot;&quot;;
        $_SESSION[$this-&gt;session_uid]   = &quot;&quot;;
        $_SESSION[$this-&gt;session_page]  = &quot;&quot;;
        $_SESSION[$this-&gt;session_gids]  = array();
        $_SESSION['HTTP_USER_AGENT']    = &quot;&quot;;
        @setcookie($this-&gt;cookie_name, &quot;&quot;, time() - 3600, &quot;/&quot;);
        $_COOKIE[$this-&gt;cookie_name]    = &quot;&quot;;
    }

    /**
     * Save the referrer page
     * 
     * @access public
     */
    function savePage()
    {
        global $imSettings;
        $url = basename($_SERVER['PHP_SELF']);
        if (isset($_SERVER['QUERY_STRING']) &amp;&amp; strlen($_SERVER['QUERY_STRING']))
            $url .= &quot;?&quot; . $_SERVER['QUERY_STRING'];
        $_SESSION[$this-&gt;session_page] = $this-&gt;_encode($url, $this-&gt;salt);
    }

    /**
     * Return to the referrer page
     * 
     * @access public
     */
    function getSavedPage()
    {
        global $imSettings;
        if (isset($_SESSION[$this-&gt;session_page]) &amp;&amp; $_SESSION[$this-&gt;session_page] != &quot;&quot;)
            return $this-&gt;_decode($_SESSION[$this-&gt;session_page], $this-&gt;salt);
        return false;
    }

    /**
     * Get an array of data about the logged user
     * @access public
     */
    function who_is_logged()
    {
        global $imSettings;
        if (isset($_SESSION[$this-&gt;session_uname]) &amp;&amp; $_SESSION[$this-&gt;session_uname] != &quot;&quot; &amp;&amp; isset($_SESSION[$this-&gt;session_uname])) {
            $uname = $this-&gt;_decode($_SESSION[$this-&gt;session_uname], $this-&gt;salt);
            return array(
                &quot;username&quot; =&gt; $uname,
                &quot;uid&quot;      =&gt; $this-&gt;_decode($_SESSION[$this-&gt;session_uid], $this-&gt;salt),
                &quot;realname&quot; =&gt; $this-&gt;_decode($_SESSION[$this-&gt;session_real_name], $this-&gt;salt),
                &quot;groups&quot;   =&gt; $_SESSION[$this-&gt;session_gids]
            );
        }
        return false;
    }

    /**
     * Check if the logged user can access to a page
     * 
     * @access public
     * 
     * @param page The page id (string)
     */
    function checkAccess($page)
    {
        global $imSettings;

        //
        // The session can live only in the same browser
        //

        if (!isset($_SESSION[$this-&gt;session_type]) || $_SESSION[$this-&gt;session_type] == &quot;&quot; || !isset($_SESSION[$this-&gt;session_uid]) || $_SESSION[$this-&gt;session_uid] == &quot;&quot;)
            return -3;

        if (!isset($_SESSION['HTTP_USER_AGENT']) || $_SESSION['HTTP_USER_AGENT'] != md5($_SERVER['HTTP_USER_AGENT'] . $this-&gt;salt))
            return -2;

        $uid = $this-&gt;_decode($_SESSION[$this-&gt;session_uid], $this-&gt;salt);
        if (!@in_array($uid, $imSettings['access']['pages'][$page]) &amp;&amp; !@in_array($uid, $imSettings['access']['admins']))
            return -8; // The active user cannot access to this page
        return 0;
    }

    /**
     * Get the user's landing page
     * 
     * @access public
     */
    function getLandingPage()
    {
        global $imSettings;
        if (!isset($_SESSION[$this-&gt;session_type]) || !isset($_SESSION[$this-&gt;session_uname]) || $_SESSION[$this-&gt;session_uname] === '' || !isset($_SESSION[$this-&gt;session_uid]) || $_SESSION[$this-&gt;session_uid] === '')
            return false;


        return $imSettings['access']['users'][$this-&gt;_decode($_SESSION[$this-&gt;session_uname], $this-&gt;salt)]['page'];
    }

    /**
     * Convert a status code to a text message
     * 
     * @param  int $code A status code
     * 
     * @return string
     */
    function messageFromStatusCode($code)
    {
        switch ($code) {

            // Error
            case -8 : return l10n(&quot;private_area_account_not_allowed&quot;, &quot;Your account is not allowed to access the selected page&quot;);
            case -7 : return l10n(&quot;private_area_lostpassword_error&quot;, &quot;We cannot find your data.&quot;);
            case -6 : return l10n(&quot;private_area_user_already_exists&quot;, &quot;The user already exists.&quot;);
            case -5 : return l10n(&quot;private_area_not_validated&quot;, &quot;Your account is not yet validated.&quot;);
            case -4 : return l10n(&quot;private_area_waiting&quot;, &quot;Your account is not yet active.&quot;);
            //case -3 : return l10n(&quot;private_area_not_allowed&quot;, &quot;A login is required to access this page.&quot;);
            case -2 : return l10n(&quot;private_area_login_error&quot;, &quot;Wrong username or password.&quot;);
            case -1 : return l10n(&quot;private_area_generic_error&quot;, &quot;Generic error.&quot;);

            // Success
            case 2  : return l10n('private_area_validation_sent', 'We sent you a validation email.');
            case 3  : return l10n('private_area_registration_success', 'You are now registered.');
            case 4  : return l10n('private_area_lostpassword_success', 'We sent you an email with your password.');

            default : return &quot;&quot;;
        }
    }

    /**
     * Redirect in a session safe mode. IIS requires this.
     * 
     * @param  string $to
     * 
     * @return void
     */
    function sessionSafeRedirect($to)
    {
        exit('&lt;!DOCTYPE html&gt;&lt;html lang=&quot;it&quot; dir=&quot;ltr&quot;&gt;&lt;head&gt;&lt;title&gt;Loading...&lt;/title&gt;&lt;meta http-equiv=&quot;refresh&quot; content=&quot;1; url=' . $to . '&quot;&gt;&lt;/head&gt;&lt;body&gt;&lt;p style=&quot;text-align: center;&quot;&gt;Loading...&lt;/p&gt;&lt;/body&gt;&lt;/html&gt;');
    }

    /**
     * Get the user data
     * @param  String $id The username
     * @return Array The user's data or null if the user is not found
     */
    function getUserByUsername($username)
    {
        global $imSettings;
        
        // Search in the file
        if (isset($imSettings['access']['users'][$username])) {
            $user = $imSettings['access']['users'][$username];
            return array(
                &quot;id&quot;        =&gt; $user['id'],
                &quot;ts&quot;        =&gt; &quot;&quot;,
                &quot;ip&quot;        =&gt; &quot;&quot;,
                &quot;username&quot;  =&gt; $username,
                &quot;password&quot;  =&gt; $user['password'],
                &quot;realname&quot;  =&gt; $user['name'],
                &quot;email&quot;     =&gt; $user['email'],
                &quot;key&quot;       =&gt; &quot;&quot;,
                &quot;validated&quot; =&gt; true,
                &quot;groups&quot;    =&gt; $user['groups']
            );
        }
        return null;
    }

}

/**
 * Contains the methods used by the search engine
 * @access public
 */
class imSearch {

    var $scope;
    var $page;
    var $results_per_page;

    function __construct()
    {
        $this-&gt;setScope();
        $this-&gt;results_per_page = 10;
    }

    function imSearch()
    {
        $this-&gt;setScope();
        $this-&gt;results_per_page = 10;
    }

    /**
     * Loads the pages defined in search.inc.php  to the search scope
     * @access public
     */
    function setScope()
    {
        global $imSettings;
        $scope = $imSettings['search']['general']['defaultScope'];

        // Logged users can search in their private pages
        $pa = new imPrivateArea();
        if ($user = $pa-&gt;who_is_logged()) {
            foreach ($imSettings['search']['general']['extendedScope'] as $key =&gt; $value) {
                if (in_array($user['uid'], $imSettings['access']['pages'][$key]))
                    $scope[] = $value;
            }
        }

        $this-&gt;scope = $scope;
    }

    /**
     * Do the pages search
     * @access public
     * @param queries The search query (array)
     */
    function searchPages($queries)
    {
        
        global $imSettings;
        $html = &quot;&quot;;
        $found_content = array();
        $found_count = array();

        if (is_array($this-&gt;scope)) {
            foreach ($this-&gt;scope as $filename) {
                $count = 0;
                $weight = 0;
                $file_content = @implode(&quot;\n&quot;, file($filename));
                // Replace the nonbreaking space with a white space
                // to avoid that is converted to a 196+160 UTF8 char
                $file_content = str_replace(&quot;&amp;nbsp;&quot;, &quot; &quot;, $file_content);
                if (function_exists(&quot;html_entity_decode&quot;))
                    $file_content = html_entity_decode($file_content, ENT_COMPAT, 'UTF-8');

                // Remove the page menu
                while (stristr($file_content, &quot;&lt;div id=\&quot;imPgMn\&quot;&quot;) !== false) {
                    $style_start = imstripos($file_content, &quot;&lt;div id=\&quot;imPgMn\&quot;&quot;);
                    $style_end = imstripos($file_content, &quot;&lt;/div&quot;, $style_start);
                    $style = substr($file_content, $style_start, $style_end - $style_start);
                    $file_content = str_replace($style, &quot;&quot;, $file_content);
                }

                // Remove the breadcrumbs
                while (stristr($file_content, &quot;&lt;div id=\&quot;imBreadcrumb\&quot;&quot;) !== false) {
                    $style_start = imstripos($file_content, &quot;&lt;div id=\&quot;imBreadcrumb\&quot;&quot;);
                    $style_end = imstripos($file_content, &quot;&lt;/div&quot;, $style_start);
                    $style = substr($file_content, $style_start, $style_end - $style_start);
                    $file_content = str_replace($style, &quot;&quot;, $file_content);
                }

                // Remove CSS
                while (stristr($file_content, &quot;&lt;style&quot;) !== false) {
                    $style_start = imstripos($file_content, &quot;&lt;style&quot;);
                    $style_end = imstripos($file_content, &quot;&lt;/style&quot;, $style_start);
                    $style = substr($file_content, $style_start, $style_end - $style_start);
                    $file_content = str_replace($style, &quot;&quot;, $file_content);
                }

                // Remove JS
                while (stristr($file_content, &quot;&lt;script&quot;) !== false) {
                    $style_start = imstripos($file_content, &quot;&lt;script&quot;);
                    $style_end = imstripos($file_content, &quot;&lt;/script&quot;, $style_start);
                    $style = substr($file_content, $style_start, $style_end - $style_start);
                    $file_content = str_replace($style, &quot;&quot;, $file_content);
                }

                // Remove PHP
                while (stristr($file_content, &quot;&lt;?php&quot;) !== false) {
                    $style_start = imstripos($file_content, &quot;&lt;?php&quot;);
                    $style_end = imstripos($file_content, &quot;?&gt;&quot;, $style_start) !== false ? imstripos($file_content, &quot;?&gt;&quot;, $style_start) + 2 : strlen($file_content);
                    $style = substr($file_content, $style_start, $style_end - $style_start);
                    $file_content = str_replace($style, &quot;&quot;, $file_content);
                }
                $file_title = &quot;&quot;;

                // Get the title of the page
                preg_match('/\&lt;title\&gt;([^\&lt;]*)\&lt;\/title\&gt;/', $file_content, $matches);
                if (count($matches) &gt; 1)
                    $file_title = $matches[1];
                else {
                    preg_match('/\&lt;h2\&gt;([^\&lt;]*)\&lt;\/h2\&gt;/', $file_content, $matches);
                    if (count($matches) &gt; 1)
                        $file_title = $matches[1];
                }

                if ($file_title != &quot;&quot;) {
                    foreach ($queries as $query) {
                        $title = imstrtolower($file_title);
                        while (($title = stristr($title, $query)) !== false) {
                            $weight += 5;
                            $count++;
                            $title = substr($title, strlen($query));
                        }
                    }
                }

                // Get the keywords
                preg_match('/\&lt;meta name\=\&quot;keywords\&quot; content\=\&quot;([^\&quot;]*)\&quot; \/&gt;/', $file_content, $matches);
                if (count($matches) &gt; 1) {
                    $keywords = $matches[1];
                    foreach ($queries as $query) {
                        $tkeywords = imstrtolower($keywords);
                        while (($tkeywords = stristr($tkeywords, $query)) !== false) {
                            $weight += 4;
                            $count++;
                            $tkeywords = substr($tkeywords, strlen($query));
                        }
                    }
                }

                // Get the description
                preg_match('/\&lt;meta name\=\&quot;description\&quot; content\=\&quot;([^\&quot;]*)\&quot; \/&gt;/', $file_content, $matches);
                if (count($matches) &gt; 1) {
                    $keywords = $matches[1];
                    foreach ($queries as $query) {
                        $tkeywords = imstrtolower($keywords);
                        while (($tkeywords = stristr($tkeywords, $query)) !== false) {
                            $weight += 3;
                            $count++;
                            $tkeywords = substr($tkeywords, strlen($query));
                        }
                    }
                }

                // Remove the page title from the result
                while (stristr($file_content, &quot;&lt;h2&quot;) !== false) {
                    $style_start = imstripos($file_content, &quot;&lt;h2&quot;);
                    $style_end = imstripos($file_content, &quot;&lt;/h2&quot;, $style_start);
                    $style = substr($file_content, $style_start, $style_end - $style_start);
                    $file_content = str_replace($style, &quot;&quot;, $file_content);
                }

                $page_pos = strpos($file_content, &quot;&lt;div id=\&quot;imContent\&quot;&gt;&quot;) + strlen(&quot;&lt;div id=\&quot;imContent\&quot;&gt;&quot;);
                $page_end = strpos($file_content, &quot;&lt;div id=\&quot;imBtMn\&quot;&gt;&quot;);
                if ($page_end == false)
                    $page_end = strpos($file_content, &quot;&lt;/body&gt;&quot;);
                $file_content = strip_tags(substr($file_content, $page_pos, $page_end-$page_pos));
                $t_file_content = imstrtolower($file_content);

                foreach ($queries as $query) {
                    $file = $t_file_content;
                    while (($file = stristr($file, $query)) !== false) {
                        $count++;
                        $weight++;
                        $file = substr($file, strlen($query));
                    }
                }

                if ($count &gt; 0) {
                    $found_count[$filename] = $count;
                    $found_weight[$filename] = $weight;
                    $found_content[$filename] = $file_content;
                    if ($file_title == &quot;&quot;)
                        $found_title[$filename] = $filename;
                    else
                        $found_title[$filename] = $file_title;
                }
            }
        }

        if (count($found_count)) {
            arsort($found_weight);
            $i = 0;
            foreach ($found_weight as $name =&gt; $weight) {
                $count = $found_count[$name];
                $i++;
                if (($i &gt; $this-&gt;page*$this-&gt;results_per_page) &amp;&amp; ($i &lt;= ($this-&gt;page+1)*$this-&gt;results_per_page)) {
                    $title = strip_tags($found_title[$name]);
                    $file = $found_content[$name];
                    $file = strip_tags($file);
                    $ap = 0;
                    $filelen = strlen($file);
                    $text = &quot;&quot;;
                    for ($j=0; $j&lt;($count &gt; 6 ? 6 : $count); $j++) {
                        $minpos = $filelen;
                        $word = &quot;&quot;;
                        foreach ($queries as $query) {
                            if ($ap &lt; $filelen &amp;&amp; ($pos = strpos(strtoupper($file), strtoupper($query), $ap)) !== false) {
                                if ($pos &lt; $minpos) {
                                    $minpos = $pos;
                                    $word = $query;
                                }
                            }
                        }
                        $prev = explode(&quot; &quot;, substr($file, $ap, $minpos-$ap));
                        if (count($prev) &gt; ($ap &gt; 0 ? 9 : 8))
                            $prev = ($ap &gt; 0 ? implode(&quot; &quot;, array_slice($prev, 0, 8)) : &quot;&quot;) . &quot; ... &quot; . implode(&quot; &quot;, array_slice($prev, -8));
                        else
                            $prev = implode(&quot; &quot;, $prev);
                        if (strlen($word)) {
                            $text .= $prev . &quot;&lt;strong&gt;&quot; . substr($file, $minpos, strlen($word)) . &quot;&lt;/strong&gt;&quot;;
                            $ap = $minpos + strlen($word);
                        }
                    }
                    $next = explode(&quot; &quot;, substr($file, $ap));
                    if (count($next) &gt; 9)
                        $text .= implode(&quot; &quot;, array_slice($next, 0, 8)) . &quot;...&quot;;
                    else
                        $text .= implode(&quot; &quot;, $next);
                    $text = str_replace(&quot;|&quot;, &quot;&quot;, $text);
                    $text = str_replace(&quot;&lt;br /&gt;&quot;, &quot; &quot;, $text);
                    $text = str_replace(&quot;&lt;br&gt;&quot;, &quot; &quot;, $text);
                    $text = str_replace(&quot;\n&quot;, &quot; &quot;, $text);
                    $text = str_replace(&quot;\t&quot;, &quot; &quot;, $text);
                    $text = trim($text);
                    $html .= &quot;&lt;div class=\&quot;imSearchPageResult\&quot;&gt;&lt;h3&gt;&lt;a class=\&quot;imCssLink\&quot; href=\&quot;&quot; . $name . &quot;\&quot;&gt;&quot; . strip_tags($title, &quot;&lt;b&gt;&lt;strong&gt;&quot;) . &quot;&lt;/a&gt;&lt;/h3&gt;&quot; . strip_tags($text, &quot;&lt;b&gt;&lt;strong&gt;&quot;) . &quot;&lt;div class=\&quot;imSearchLink\&quot;&gt;&lt;a class=\&quot;imCssLink\&quot; href=\&quot;&quot; . $name . &quot;\&quot;&gt;&quot; . $imSettings['general']['url'] . &quot;/&quot; . $name . &quot;&lt;/a&gt;&lt;/div&gt;&lt;/div&gt;\n&quot;;
                }
            }
            $html = preg_replace_callback('/\\s+/', create_function('$matches', 'return implode(\' \', $matches);'), $html);
            $html .= &quot;&lt;div class=\&quot;imSLabel\&quot;&gt;&amp;nbsp;&lt;/div&gt;\n&quot;;
        }

        return array(&quot;content&quot; =&gt; $html, &quot;count&quot; =&gt; count($found_content));
    }

    function searchBlog($queries)
    {
        
        global $imSettings;
        $html = &quot;&quot;;
        $found_content = array();
        $found_count = array();

        if (isset($imSettings['blog']) &amp;&amp; is_array($imSettings['blog']['posts'])) {
            foreach ($imSettings['blog']['posts'] as $key =&gt; $value) {
                $count = 0;
                $weight = 0;
                $filename = 'blog/index.php?id=' . $key;
                $file_content = $value['body'];
                // Rimuovo le briciole dal contenuto
                while (stristr($file_content, &quot;&lt;div id=\&quot;imBreadcrumb\&quot;&quot;) !== false) {
                    $style_start = imstripos($file_content, &quot;&lt;div id=\&quot;imBreadcrumb\&quot;&quot;);
                    $style_end = imstripos($file_content, &quot;&lt;/div&quot;, $style_start);
                    $style = substr($file_content, $style_start, $style_end - $style_start);
                    $file_content = str_replace($style, &quot;&quot;, $file_content);
                }

                // Rimuovo gli stili dal contenuto
                while (stristr($file_content, &quot;&lt;style&quot;) !== false) {
                    $style_start = imstripos($file_content, &quot;&lt;style&quot;);
                    $style_end = imstripos($file_content, &quot;&lt;/style&quot;, $style_start);
                    $style = substr($file_content, $style_start, $style_end - $style_start);
                    $file_content = str_replace($style, &quot;&quot;, $file_content);
                }
                // Rimuovo i JS dal contenuto
                while (stristr($file_content, &quot;&lt;script&quot;) !== false) {
                    $style_start = imstripos($file_content, &quot;&lt;script&quot;);
                    $style_end = imstripos($file_content, &quot;&lt;/script&quot;, $style_start);
                    $style = substr($file_content, $style_start, $style_end - $style_start);
                    $file_content = str_replace($style, &quot;&quot;, $file_content);
                }
                $file_title = &quot;&quot;;

                // Rimuovo il titolo dal risultato
                while (stristr($file_content, &quot;&lt;h2&quot;) !== false) {
                    $style_start = imstripos($file_content, &quot;&lt;h2&quot;);
                    $style_end = imstripos($file_content, &quot;&lt;/h2&quot;, $style_start);
                    $style = substr($file_content, $style_start, $style_end - $style_start);
                    $file_content = str_replace($style, &quot;&quot;, $file_content);
                }

                // Conto il numero di match nel titolo
                foreach ($queries as $query) {
                    $t_count = @preg_match_all('/' . preg_quote($query, '/') . '/', imstrtolower($value['title']), $matches);
                    if ($t_count !== false) {
                        $weight += ($t_count * 4);
                        $count += $t_count;
                    }
                }

                // Conto il numero di match nei tag
                foreach ($queries as $query) {
                    if (in_array($query, $value['tag'])) {
                        $count++;
                        $weight += 4;
                    }
                }

                $title = &quot;Blog &amp;gt;&amp;gt; &quot; . $value['title'];

                // Cerco nel contenuto
                foreach ($queries as $query) {
                    $file = imstrtolower($file_content);
                    while (($file = stristr($file, $query)) !== false) {
                        $count++;
                        $weight++;
                        $file = substr($file, strlen($query));
                    }
                }

                if ($count &gt; 0) {
                    $found_count[$filename] = $count;
                    $found_weight[$filename] = $weight;
                    $found_content[$filename] = $file_content;
                    $found_breadcrumbs[$filename] = &quot;&lt;div class=\&quot;imBreadcrumb\&quot; style=\&quot;display: block; padding-bottom: 3px;\&quot;&gt;&quot; . l10n('blog_published_by') . &quot;&lt;strong&gt; &quot; . $value['author'] . &quot; &lt;/strong&gt;&quot; . l10n('blog_in') . &quot; &lt;a href=\&quot;blog/index.php?category=&quot; . $value['category'] . &quot;\&quot; target=\&quot;_blank\&quot; rel=\&quot;nofollow\&quot;&gt;&quot; . $value['category'] . &quot;&lt;/a&gt; &amp;middot; &quot; . $value['timestamp'] . &quot;&lt;/div&gt;&quot;;
                    if ($title == &quot;&quot;)
                        $found_title[$filename] = $filename;
                    else
                        $found_title[$filename] = $title;
                }
            }
        }

        if (count($found_count)) {
            arsort($found_weight);
            $i = 0;
            foreach ($found_weight as $name =&gt; $weight) {
                $count = $found_count[$name];
                $i++;
                if (($i &gt; $this-&gt;page*$this-&gt;results_per_page) &amp;&amp; ($i &lt;= ($this-&gt;page+1)*$this-&gt;results_per_page)) {
                    $title = strip_tags($found_title[$name]);
                    $file = $found_content[$name];
                    $file = strip_tags($file);
                    $ap = 0;
                    $filelen = strlen($file);
                    $text = &quot;&quot;;
                    for ($j=0;$j&lt;($count &gt; 6 ? 6 : $count);$j++) {
                        $minpos = $filelen;
                        foreach ($queries as $query) {
                            if ($ap &lt; $filelen &amp;&amp; ($pos = strpos(strtoupper($file), strtoupper($query), $ap)) !== false) {
                                if ($pos &lt; $minpos) {
                                    $minpos = $pos;
                                    $word = $query;
                                }
                            }
                        }
                        $prev = explode(&quot; &quot;, substr($file, $ap, $minpos-$ap));
                        if(count($prev) &gt; ($ap &gt; 0 ? 9 : 8))
                            $prev = ($ap &gt; 0 ? implode(&quot; &quot;, array_slice($prev, 0, 8)) : &quot;&quot;) . &quot; ... &quot; . implode(&quot; &quot;, array_slice($prev, -8));
                        else
                            $prev = implode(&quot; &quot;, $prev);
                        $text .= $prev . &quot;&lt;strong&gt;&quot; . substr($file, $minpos, strlen($word)) . &quot;&lt;/strong&gt; &quot;;
                        $ap = $minpos + strlen($word);
                    }
                    $next = explode(&quot; &quot;, substr($file, $ap));
                    if(count($next) &gt; 9)
                        $text .= implode(&quot; &quot;, array_slice($next, 0, 8)) . &quot;...&quot;;
                    else
                        $text .= implode(&quot; &quot;, $next);
                    $text = str_replace(&quot;|&quot;, &quot;&quot;, $text);
                    $html .= &quot;&lt;div class=\&quot;imSearchBlogResult\&quot;&gt;&lt;h3&gt;&lt;a class=\&quot;imCssLink\&quot; href=\&quot;&quot; . $name . &quot;\&quot;&gt;&quot; . strip_tags($title, &quot;&lt;b&gt;&lt;strong&gt;&quot;) . &quot;&lt;/a&gt;&lt;/h3&gt;&quot; . strip_tags($found_breadcrumbs[$name], &quot;&lt;b&gt;&lt;strong&gt;&quot;) . &quot;\n&quot; . strip_tags($text, &quot;&lt;b&gt;&lt;strong&gt;&quot;) . &quot;&lt;div class=\&quot;imSearchLink\&quot;&gt;&lt;a class=\&quot;imCssLink\&quot; href=\&quot;&quot; . $name . &quot;\&quot;&gt;&quot; . $imSettings['general']['url'] . &quot;/&quot; . $name . &quot;&lt;/a&gt;&lt;/div&gt;&lt;/div&gt;\n&quot;;
                }
            }
            echo &quot;  &lt;div class=\&quot;imSLabel\&quot;&gt;&amp;nbsp;&lt;/div&gt;\n&quot;;
        }

        $html = preg_replace_callback('/\\s+/', create_function('$matches', 'return implode(\' \', $matches);'), $html);
        return array(&quot;content&quot; =&gt; $html, &quot;count&quot; =&gt; count($found_content));
    }

    // Di questa funzione manca la paginazione!
    function searchProducts($queries)
    {
        
        global $imSettings;
        $html = &quot;&quot;;
        $found_products = array();
        $found_count = array();

        foreach ($imSettings['search']['products'] as $id =&gt; $product) {
            $count = 0;
            $weight = 0;
            $t_title = strip_tags(imstrtolower($product['name']));
            $t_description = strip_tags(imstrtolower($product['description']));

            // Conto il numero di match nel titolo
            foreach ($queries as $query) {
                $t_count = preg_match_all('/' . preg_quote($query, '/') . '/', $t_title, $matches);
                if ($t_count !== false) {
                    $weight += ($t_count * 4);
                    $count += $t_count;
                }
            }

            // Conto il numero di match nella descrizione
            foreach ($queries as $query) {
                $t_count = preg_match_all('/' . preg_quote($query, '/') . '/', $t_description, $matches);
                if ($t_count !== false) {
                    $weight++;
                    $count += $t_count;
                }
            }

            if ($count &gt; 0) {
                $found_products[$id] = $product;
                $found_weight[$id] = $weight;
                $found_count[$id] = $count;
            }
        }

        if (count($found_count)) {
            arsort($found_weight);
            $i = 0;
            foreach ($found_products as $id =&gt; $product) {
                $i++;
                if (($i &gt; $this-&gt;page*$this-&gt;results_per_page) &amp;&amp; ($i &lt;= ($this-&gt;page+1)*$this-&gt;results_per_page)) {
                    $count = $found_count[$id];
                    $html .= &quot;&lt;div class=\&quot;imSearchProductResult\&quot;&gt;&quot;;
                    // Top row
                    $html .= &quot;&lt;div class=\&quot;imProductImage\&quot;&gt;&quot;;
                    $html .= $product['image'];
                    $html .= &quot;&lt;/div&gt;&quot;;
                    $html .= &quot;&lt;div class=\&quot;imProductDescription\&quot;&gt;&quot;;
                    $html .= &quot;&lt;div class=\&quot;imProductTitle\&quot;&gt;&quot;;
                    $html .= &quot;&lt;h3&gt;&quot; . $product['name'] . &quot;&lt;/h3&gt;&quot;;
                    $html .= &quot;&lt;span&gt;&quot; . $product['price'] . &quot;&lt;img src=\&quot;cart/images/cart-add.png\&quot; onclick=\&quot;x5engine.cart.ui.addToCart('&quot; . $id . &quot;', 1);\&quot; style=\&quot;cursor: pointer;\&quot; /&gt;&lt;/span&gt;&quot;;
                    $html .= &quot;&lt;/div&gt;&quot;;
                    $html .= &quot;&lt;p&gt;&quot; . strip_tags($product['description']) . &quot;&lt;/p&gt;&quot;;
                    $html .= &quot;&lt;/div&gt;&quot;;
                    // Close the container
                    $html .= &quot;&lt;/div&gt;&quot;;
                }
            }
        }

        return array(&quot;content&quot; =&gt; $html, &quot;count&quot; =&gt; count($found_products));
    }

    // Di questa funzione manca la paginazione!
    function searchImages($queries)
    {
        
        global $imSettings;
        $id = 0;
        $html = &quot;&quot;;
        $found_images = array();
        $found_count = array();

        foreach ($imSettings['search']['images'] as $image) {
            $count = 0;
            $weight = 0;
            $t_title = strip_tags(imstrtolower($image['title']));
            $t_description = strip_tags(imstrtolower($image['description']));

            // Conto il numero di match nel titolo
            foreach ($queries as $query) {
                $t_count = preg_match_all('/' . preg_quote($query, '/') . '/', $t_title, $matches);
                if ($t_count !== false) {
                    $weight += ($t_count * 4);
                    $count += $t_count;
                }
            }

            // Conto il numero di match nella location
            foreach ($queries as $query) {
                $t_count = preg_match_all('/' . preg_quote($query, '/') . '/', imstrtolower($image['location']), $matches);
                if ($t_count !== false) {
                    $weight += ($t_count * 2);
                    $count += $t_count;
                }
            }

            // Conto il numero di match nella descrizione
            foreach ($queries as $query) {
                $t_count = preg_match_all('/' . preg_quote($query, '/') . '/', $t_description, $matches);
                if ($t_count !== false) {
                    $weight++;
                    $count += $t_count;
                }
            }

            if ($count &gt; 0) {
                $found_images[$id] = $image;
                $found_weight[$id] = $weight;
                $found_count[$id] = $count;
            }

            $id++;
        }

        if (count($found_count)) {
            arsort($found_weight);
            $i = 0;
            foreach ($found_images as $id =&gt; $image) {
                $i++;
                if (($i &gt; $this-&gt;page*$this-&gt;results_per_page) &amp;&amp; ($i &lt;= ($this-&gt;page+1)*$this-&gt;results_per_page)) {
                    $count = $found_count[$id];
                    $html .= &quot;&lt;div class=\&quot;imSearchImageResult\&quot;&gt;&quot;;
                    $html .= &quot;&lt;div class=\&quot;imSearchImageResultContent\&quot;&gt;&lt;a href=\&quot;&quot; . $image['page'] . &quot;\&quot;&gt;&lt;img src=\&quot;&quot; . $image['src'] . &quot;\&quot; /&gt;&lt;/a&gt;&lt;/div&gt;&quot;;
                    $html .= &quot;&lt;div class=\&quot;imSearchImageResultContent\&quot;&gt;&quot;;
                    $html .= &quot;&lt;h3&gt;&quot; . $image['title'];
                    if ($image['location'] != &quot;&quot;)
                        $html .= &quot;&amp;nbsp;(&quot; . $image['location'] . &quot;)&quot;;
                    $html .= &quot;&lt;/h3&gt;&quot;;
                    $html .= strip_tags($image['description']);
                    $html .= &quot;&lt;/div&gt;&quot;;
                    $html .= &quot;&lt;/div&gt;&quot;;
                }
            }
        }

        return array(&quot;content&quot; =&gt; $html, &quot;count&quot; =&gt; count($found_images));
    }

    // Di questa funzione manca la paginazione!
    function searchVideos($queries)
    {
        
        global $imSettings;
        $id = 0;
        $found_count = array();
        $found_videos = array();
        $html = &quot;&quot;;
        $month = 7776000;

        foreach ($imSettings['search']['videos'] as $video) {
            $count = 0;
            $weight = 0;
            $t_title = strip_tags(imstrtolower($video['title']));
            $t_description = strip_tags(imstrtolower($video['description']));

            // Conto il numero di match nei tag
            foreach ($queries as $query) {
                $t_count = preg_match_all('/\\s*' . preg_quote($query, '/') . '\\s*/', imstrtolower($video['tags']), $matches);
                if ($t_count !== false) {
                    $weight += ($t_count * 10);
                    $count += $t_count;
                }
            }

            // I video piÃ¹ recenti hanno maggiore peso in proporzione
            $time = strtotime($video['date']);
            $ago = strtotime(&quot;-3 months&quot;);
            if ($time - $ago &gt; 0)
                $weight += 5 * max(0, ($time - $ago)/$month);

            // Conto il numero di match nel titolo
            foreach ($queries as $query) {
                $t_count = preg_match_all('/' . preg_quote($query, '/') . '/', $t_title, $matches);
                if ($t_count !== false) {
                    $weight += ($t_count * 4);
                    $count += $t_count;
                }
            }

            // Conto il numero di match nella categoria
            foreach ($queries as $query) {
                $t_count = preg_match_all('/' . preg_quote($query, '/') . '/', imstrtolower($video['category']), $matches);
                if ($t_count !== false) {
                    $weight += ($t_count * 2);
                    $count += $t_count;
                }
            }

            // Conto il numero di match nella descrizione
            foreach ($queries as $query) {
                $t_count = preg_match_all('/' . preg_quote($query) . '/', $t_description, $matches);
                if ($t_count !== false) {
                    $weight++;
                    $count += $t_count;
                }
            }

            if ($count &gt; 0) {
                $found_videos[$id] = $video;
                $found_weight[$id] = $weight;
                $found_count[$id] = $count;
            }

            $id++;
        }

        if ($found_count) {
            arsort($found_weight);
            foreach ($found_videos as $id =&gt; $video) {
                $i++;
                if (($i &gt; $this-&gt;page*$this-&gt;results_per_page) &amp;&amp; ($i &lt;= ($this-&gt;page+1)*$this-&gt;results_per_page)) {
                    $count = $found_count[$id];
                    $html .= &quot;&lt;div class=\&quot;imSearchVideoResult\&quot;&gt;&quot;;
                    $html .= &quot;&lt;div class=\&quot;imSearchVideoResultContent\&quot;&gt;&lt;a href=\&quot;&quot; . $video['page'] . &quot;\&quot;&gt;&lt;img src=\&quot;&quot; . $video['src'] . &quot;\&quot; /&gt;&lt;/a&gt;&lt;/div&gt;&quot;;
                    $html .= &quot;&lt;div class=\&quot;imSearchVideoResultContent\&quot;&gt;&quot;;
                    $html .= &quot;&lt;h3&gt;&quot; . $video['title'];
                    if (!$video['familyfriendly'])
                        $html .= &quot;&amp;nbsp;&lt;span style=\&quot;color: red; text-decoration: none;\&quot;&gt;[18+]&lt;/span&gt;&quot;;
                    $html .= &quot;&lt;/h3&gt;&quot;;
                    $html .= strip_tags($video['description']);
                    if ($video['duration'] &gt; 0) {
                        if (function_exists('date_default_timezone_set'))
                            date_default_timezone_set('UTC');
                        $html .= &quot;&lt;span class=\&quot;imSearchVideoDuration\&quot;&gt;&quot; . l10n('search_duration') . &quot;: &quot; . date(&quot;H:i:s&quot;, $video['duration']) . &quot;&lt;/span&gt;&quot;;
                    }
                    $html .= &quot;&lt;/div&gt;&quot;;
                    $html .= &quot;&lt;/div&gt;&quot;;
                }
            }
        }

        return array(&quot;content&quot; =&gt; $html, &quot;count&quot; =&gt; count($found_videos));
    }

    /**
     * Start the site search
     * 
     * @param array  $keys The search keys as string (string)
     * @param string $page Page to show (integer)
     * @param string $type The content type to show
     *
     * @return void
     */
    function search($keys, $page, $type)
    {
        global $imSettings;

        $html = &quot;&quot;;
        $content = &quot;&quot;;
        $emptyResultsHtml = &quot;&lt;div style=\&quot;margin-top: 15px; text-align: center; font-weight: bold;\&quot;&gt;&quot; . l10n('search_empty') . &quot;&lt;/div&gt;\n&quot;;

        $html .= &quot;&lt;div class=\&quot;imPageSearchField\&quot;&gt;&lt;form method=\&quot;get\&quot; action=\&quot;imsearch.php\&quot;&gt;&quot;;
        $html .= &quot;&lt;input style=\&quot;width: 200px; font: 8pt Tahoma; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); padding: 3px; border: 1px solid rgb(0, 0, 0); vertical-align: middle;\&quot; class=\&quot;search_field\&quot; value=\&quot;&quot; . htmlspecialchars($keys, ENT_COMPAT, 'UTF-8') . &quot;\&quot; type=\&quot;text\&quot; name=\&quot;search\&quot; /&gt;&quot;;
        $html .= &quot;&lt;input style=\&quot;height: 21px; font: 8pt Tahoma; color: rgb(0, 0, 0); background-color: rgb(211, 211, 211); margin-left: 6px; padding: 3px 3px; border: 1px solid rgb(0, 0, 0); vertical-align: middle; cursor: pointer;\&quot; type=\&quot;submit\&quot; value=\&quot;&quot; . l10n('search_search') . &quot;\&quot;&gt;&quot;;
        $html .= &quot;&lt;/form&gt;&lt;/div&gt;\n&quot;;

        // Exit if no search query was given
        if (trim($keys) == &quot;&quot; || $keys == null) {
            $html .= $emptyResultsHtml;
            return $html;
        }

        $search = trim(imstrtolower($keys));
        $this-&gt;page = $page;

        $queries = explode(&quot; &quot;, $search);

        // Search everywhere to populate the results numbers shown in the sidebar menu
        // Pages
        $pages = $this-&gt;searchPages($queries);
        // Fallback on the selection if there are no pages
        if ($pages['count'] == 0 &amp;&amp; $type == &quot;pages&quot;)
            $type = &quot;blog&quot;;

        // Blog
        if (isset($imSettings['blog']) &amp;&amp; is_array($imSettings['blog']['posts']) &amp;&amp; count($imSettings['blog']['posts']) &gt; 0)
            $blog = $this-&gt;searchBlog($queries);
        else
            $blog = array(&quot;count&quot; =&gt; 0);
        // Fallback on the selection if there is no blog
        if ($blog['count'] == 0 &amp;&amp; $type == &quot;blog&quot;)
            $type = &quot;products&quot;;

        // Products
        if (is_array($imSettings['search']['products']) &amp;&amp; count($imSettings['search']['products']) &gt; 0)
            $products = $this-&gt;searchProducts($queries);
        else
            $products = array(&quot;count&quot; =&gt; 0);
        // Fallback on the selection if there are no products
        if ($products['count'] == 0 &amp;&amp; $type == &quot;products&quot;)
            $type = &quot;images&quot;;

        // Images
        if (is_array($imSettings['search']['images']) &amp;&amp; count($imSettings['search']['images']) &gt; 0)
            $images = $this-&gt;searchImages($queries);
        else
            $images = array(&quot;count&quot; =&gt; 0);
        // Fallback on the selection if there are no images
        if ($images['count'] == 0 &amp;&amp; $type == &quot;images&quot;)
            $type = &quot;videos&quot;;

        // Videos
        if (is_array($imSettings['search']['videos']) &amp;&amp; count($imSettings['search']['videos']) &gt; 0)
            $videos = $this-&gt;searchVideos($queries);
        else
            $videos = array(&quot;count&quot; =&gt; 0);
        // Fallback on the selection if there are no videos
        if ($videos['count'] == 0 &amp;&amp; $type == &quot;videos&quot;)
            $type = &quot;pages&quot;;            

        // Show only the requested content type
        switch ($type) {
            case &quot;pages&quot;:
                if ($pages['count'] &gt; 0)
                    $content .= &quot;&lt;div&gt;&quot; . $pages['content'] . &quot;&lt;/div&gt;\n&quot;;
                $results_count = $pages['count'];
                break;
            case &quot;blog&quot;:
                if ($blog['count'] &gt; 0)
                    $content .= &quot;&lt;div&gt;&quot; . $blog['content'] . &quot;&lt;/div&gt;\n&quot;;
                $results_count = $blog['count'];
                break;
            case &quot;products&quot;:
                if ($products['count'] &gt; 0)
                    $content .= &quot;&lt;div&gt;&quot; . $products['content'] . &quot;&lt;/div&gt;\n&quot;;
                $results_count = $products['count'];
                break;
            case &quot;images&quot;:
                if ($images['count'] &gt; 0)
                    $content .= &quot;&lt;div&gt;&quot; . $images['content'] . &quot;&lt;/div&gt;\n&quot;;
                $results_count = $images['count'];
                break;
            case &quot;videos&quot;:
                if ($videos['count'] &gt; 0)
                    $content .= &quot;&lt;div&gt;&quot; . $videos['content'] . &quot;&lt;/div&gt;\n&quot;;
                $results_count = $videos['count'];
                break;
        }

        // Exit if there are no results
        if (!$results_count) {
            $html .= $emptyResultsHtml;
            return $html;
        }

        $sidebar = &quot;&lt;ul&gt;\n&quot;;
        if ($pages['count'] &gt; 0)
            $sidebar .= &quot;\t&lt;li&gt;&lt;span class=\&quot;imScMnTxt\&quot;&gt;&lt;a href=\&quot;imsearch.php?search=&quot; . urlencode($keys) . &quot;&amp;type=pages\&quot;&gt;&quot; . l10n('search_pages') . &quot; (&quot; . $pages['count'] . &quot;)&lt;/a&gt;&lt;/span&gt;&lt;/li&gt;\n&quot;;
        if ($blog['count'] &gt; 0)
            $sidebar .= &quot;\t&lt;li&gt;&lt;span class=\&quot;imScMnTxt\&quot;&gt;&lt;a href=\&quot;imsearch.php?search=&quot; . urlencode($keys) . &quot;&amp;type=blog\&quot;&gt;&quot; . l10n('search_blog') . &quot; (&quot; . $blog['count'] . &quot;)&lt;/a&gt;&lt;/span&gt;&lt;/li&gt;\n&quot;;
        if ($products['count'] &gt; 0)
            $sidebar .= &quot;\t&lt;li&gt;&lt;span class=\&quot;imScMnTxt\&quot;&gt;&lt;a href=\&quot;imsearch.php?search=&quot; . urlencode($keys) . &quot;&amp;type=products\&quot;&gt;&quot; . l10n('search_products') . &quot; (&quot; . $products['count'] . &quot;)&lt;/a&gt;&lt;/span&gt;&lt;/li&gt;\n&quot;;
        if ($images['count'] &gt; 0)
            $sidebar .= &quot;\t&lt;li&gt;&lt;span class=\&quot;imScMnTxt\&quot;&gt;&lt;a href=\&quot;imsearch.php?search=&quot; . urlencode($keys) . &quot;&amp;type=images\&quot;&gt;&quot; . l10n('search_images') . &quot; (&quot; . $images['count'] . &quot;)&lt;/a&gt;&lt;/span&gt;&lt;/li&gt;\n&quot;;
        if ($videos['count'] &gt; 0)
            $sidebar .= &quot;\t&lt;li&gt;&lt;span class=\&quot;imScMnTxt\&quot;&gt;&lt;a href=\&quot;imsearch.php?search=&quot; . urlencode($keys) . &quot;&amp;type=videos\&quot;&gt;&quot; . l10n('search_videos') . &quot; (&quot; . $videos['count'] . &quot;)&lt;/a&gt;&lt;/span&gt;&lt;/li&gt;\n&quot;;
        $sidebar .= &quot;&lt;/ul&gt;\n&quot;;

        $html .= &quot;&lt;div id=\&quot;imSearchResults\&quot;&gt;\n&quot;;
        if ($imSettings['search']['general']['menu_position'] == &quot;left&quot;) {
            $html .= &quot;\t&lt;div id=\&quot;imSearchSideBar\&quot; style=\&quot;float: left;\&quot;&gt;&quot; . $sidebar . &quot;&lt;/div&gt;\n&quot;;
            $html .= &quot;\t&lt;div id=\&quot;imSearchContent\&quot; style=\&quot;float: right;\&quot;&gt;&quot; . $content . &quot;&lt;/div&gt;\n&quot;;
        } else {
            $html .= &quot;\t&lt;div id=\&quot;imSearchContent\&quot; style=\&quot;float: left;\&quot;&gt;&quot; . $content . &quot;&lt;/div&gt;\n&quot;;
            $html .= &quot;\t&lt;div id=\&quot;imSearchSideBar\&quot; style=\&quot;float: right;\&quot;&gt;&quot; . $sidebar . &quot;&lt;/div&gt;\n&quot;;
        }
        $html .= &quot;&lt;/div&gt;\n&quot;;

        // Pagination
        if ($results_count &gt; $this-&gt;results_per_page) {
            $html .= &quot;&lt;div style=\&quot;text-align: center; clear: both;\&quot;&gt;&quot;;
            // Back
            if ($page &gt; 0) {
                $html .= &quot;&lt;a href=\&quot;imsearch.php?search=&quot; . implode(&quot;+&quot;, $queries) . &quot;&amp;amp;page=&quot; . ($page - 1) . &quot;&amp;type=&quot; . $type . &quot;\&quot;&gt;&amp;lt;&amp;lt;&lt;/a&gt;&amp;nbsp;&quot;;
            }

            // Central pages
            $start = max($page - 5, 0);
            $end = min($page + 10 - $start, ceil($results_count/$this-&gt;results_per_page));

            for ($i = $start; $i &lt; $end; $i++) {
                if ($i != $this-&gt;page)
                    $html .= &quot;&lt;a href=\&quot;imsearch.php?search=&quot; . implode(&quot;+&quot;, $queries) . &quot;&amp;amp;page=&quot; . $i . &quot;&amp;type=&quot; . $type . &quot;\&quot;&gt;&quot; . ($i + 1) . &quot;&lt;/a&gt;&amp;nbsp;&quot;;
                else
                    $html .= ($i + 1) . &quot;&amp;nbsp;&quot;;
            }

            // Next
            if ($results_count &gt; ($page + 1) * $this-&gt;results_per_page) {
                $html .= &quot;&lt;a href=\&quot;imsearch.php?search=&quot; . implode(&quot;+&quot;, $queries) . &quot;&amp;amp;page=&quot; . ($page + 1) . &quot;&amp;type=&quot; . $type . &quot;\&quot;&gt;&amp;gt;&amp;gt;&lt;/a&gt;&quot;;
            }
            $html .= &quot;&lt;/div&gt;&quot;;
        }

        return $html;
    }
}


/**
 * Contains the methods used to style and send emails
 * @access public
 */
class ImSendEmail
{

    var $header;
    var $footer;
    var $bodyBackground;
    var $bodyBackgroundEven;
    var $bodyBackgroundOdd;
    var $bodyBackgroundBorder;
    var $bodySeparatorBorderColor;
    var $emailBackground;
    var $emailContentStyle;
    var $emailContentFontFamily;
    var $emailType = &quot;html&quot;;

    function setHTMLHeader($header)
    {
        $this-&gt;header = $header;
    }

    function setHTMLFooter($footer)
    {
        $this-&gt;footer = $footer;
    }

    function setBodyBackground($val)
    {
        $this-&gt;bodyBackground = $val;
    }

    function setBodyBackgroundEven($val)
    {
        $this-&gt;bodyBackgroundEven = $val;
    }

    function setBodyBackgroundOdd($val)
    {
        $this-&gt;bodyBackgroundOdd = $val;
    }

    function setBodyBackgroundBorder($val)
    {
        $this-&gt;bodyBackgroundBorder = $val;
    }

    function setEmailBackground($val)
    {
        $this-&gt;emailBackground = $val;
    }

    function setEmailContentStyle($val)
    {
        $this-&gt;emailContentStyle = $val;
    }

    function setEmailContentFontFamily($val)
    {
        $this-&gt;emailContentFontFamily = $val;
    }

    function setBodySeparatorBorderColor($val)
    {
        $this-&gt;bodySeparatorBorderColor = $val;
    }

    function setEmailType($type) {
        $this-&gt;emailType = $type;
    }

    /**
     * Apply the CSS style to the HTML code
     * @param  string $html The HTML code
     * @return string       The styled HTML code
     */
    function styleHTML($html)
    {
        $html = str_replace(&quot;[email:contentStyle]&quot;, $this-&gt;emailContentStyle, $html);
        $html = str_replace(&quot;[email:contentFontFamily]&quot;, $this-&gt;emailContentFontFamily, $html);
        $html = str_replace(&quot;[email:bodyBackground]&quot;, $this-&gt;bodyBackground, $html);
        $html = str_replace(&quot;[email:bodyBackgroundBorder]&quot;, $this-&gt;bodyBackgroundBorder, $html);
        $html = str_replace(&quot;[email:bodyBackgroundOdd]&quot;, $this-&gt;bodyBackgroundOdd, $html);
        $html = str_replace(&quot;[email:bodyBackgroundEven]&quot;, $this-&gt;bodyBackgroundEven, $html);
        $html = str_replace(&quot;[email:bodySeparatorBorderColor]&quot;, $this-&gt;bodySeparatorBorderColor, $html);
        $html = str_replace(&quot;[email:emailBackground]&quot;, $this-&gt;emailBackground, $html);
        return $html;
    }

    /**
     * Send an email
     * 
     * @param string $from        Self explanatory
     * @param string $to          Self explanatory
     * @param string $subject     Self explanatory
     * @param string $text        Self explanatory
     * @param string $html        Self explanatory
     * @param array  $attachments Self explanatory
     * 
     * @return boolean
     */
    function send($from = &quot;&quot;, $to = &quot;&quot;, $subject = &quot;&quot;, $text = &quot;&quot;, $html = &quot;&quot;, $attachments = array())
    {
        $email = new imEMail($from, $to, $subject, &quot;utf-8&quot;);
        $email-&gt;setText($text);
        $email-&gt;setHTML($this-&gt;header . $this-&gt;styleHTML($html) . $this-&gt;footer);
        $email-&gt;setStandardType($this-&gt;emailType);
        foreach ($attachments as $a) {
            if (isset($a['name']) &amp;&amp; isset($a['content']) &amp;&amp; isset($a['mime'])) {
                $email-&gt;attachFile($a['name'], $a['content'], $a['mime']);
            }
        }
        return $email-&gt;send();
    }

    /**
     * Restore some special chars escaped previously in WSX5
     * 
     * @param string $str The string to be restored
     *
     * @return string
     */
    function restoreSpecialChars($str)
    {
        $str = str_replace(&quot;{1}&quot;, &quot;'&quot;, $str);
        $str = str_replace(&quot;{2}&quot;, &quot;\&quot;&quot;, $str);
        $str = str_replace(&quot;{3}&quot;, &quot;\\&quot;, $str);
        $str = str_replace(&quot;{4}&quot;, &quot;&lt;&quot;, $str);
        $str = str_replace(&quot;{5}&quot;, &quot;&gt;&quot;, $str);
        return $str;
    }

    /**
     * Decode the Unicode escaped chars like %u1239
     * 
     * @param string $str The string to be decoded
     *
     * @return string
     */
    function decodeUnicodeString($str)
    {
        $res = '';

        $i = 0;
        $max = strlen($str) - 6;
        while ($i &lt;= $max) {
            $character = $str[$i];
            if ($character == '%' &amp;&amp; $str[$i + 1] == 'u') {
                $value = hexdec(substr($str, $i + 2, 4));
                $i += 6;

                if ($value &lt; 0x0080) // 1 byte: 0xxxxxxx
                    $character = chr($value);
                else if ($value &lt; 0x0800) // 2 bytes: 110xxxxx 10xxxxxx
                    $character = chr((($value &amp; 0x07c0) &gt;&gt; 6) | 0xc0) . chr(($value &amp; 0x3f) | 0x80);
                else // 3 bytes: 1110xxxx 10xxxxxx 10xxxxxx
                $character = chr((($value &amp; 0xf000) &gt;&gt; 12) | 0xe0) . chr((($value &amp; 0x0fc0) &gt;&gt; 6) | 0x80) . chr(($value &amp; 0x3f) | 0x80);
            } else
                $i++;

            $res .= $character;
        }
        return $res . substr($str, $i);
    }
}

/**
 * Server Test Class
 * @access public
 */
class imTest {

    /*
     * Session check
     */
    function session_test()
    {
        
        if (!isset($_SESSION))
            return false;
        $_SESSION['imAdmin_test'] = &quot;test_message&quot;;
        return ($_SESSION['imAdmin_test'] == &quot;test_message&quot;);
    }

    /*
     * Writable files check
     */
    function writable_folder_test($dir)
    {
        if (!file_exists($dir) &amp;&amp; $dir != &quot;&quot; &amp;&amp; $dir != &quot;./.&quot;)
            @mkdir($dir, 0777, true);

        $fp = @fopen(pathCombine(array($dir, &quot;imAdmin_test_file&quot;)), &quot;w&quot;);
        if (!$fp)
            return false;
        if (@fwrite($fp, &quot;test&quot;) === false)
            return false;
        @fclose($fp);
        if (!@file_exists(pathCombine(array($dir, &quot;imAdmin_test_file&quot;))))
            return false;
        @unlink(pathCombine(array($dir, &quot;imAdmin_test_file&quot;)));
        return true;
    }

    /*
     * PHP Version check
     */
    function php_version_test()
    {   
        if (!function_exists(&quot;version_compare&quot;) || version_compare(PHP_VERSION, '4.0.0') &lt; 0)
            return false;
        return true;
    }

    /*
     * MySQL Connection check
     */
    function mysql_test($host, $user, $pwd, $name)
    {
        $db = new ImDb($host, $user, $pwd, $name);
        if (!$db-&gt;testConnection())
            return false;
        $db-&gt;closeConnection();
        return true;
    }

    /*
     * Do the test
     */
    function doTest($expected, $value, $title, $message)
    {
        if ($expected == $value)
            echo &quot;&lt;div class=\&quot;imTest pass\&quot;&gt;&quot; . $title . &quot;&lt;span&gt;PASS&lt;/span&gt;&lt;/div&gt;&quot;;
        else
            echo &quot;&lt;div class=\&quot;imTest fail\&quot;&gt;&quot; . $title . &quot;&lt;span&gt;FAIL&lt;/span&gt;&lt;p&gt;&quot; . $message . &quot;&lt;/p&gt;&lt;/div&gt;&quot;;
    }
}


/**
 * This file stores the class used to show a topic
 *
 * @category X5engine
 * @package  X5engine
 * @license  Copyright by Incomedia http://incomedia.eu
 * @link     http://websitex5.com
 */
class ImTopic
{

    var $id;
    var $comments    = null;
    var $table       = &quot;&quot;;
    var $folder      = &quot;&quot;;
    var $host        = &quot;&quot;;
    var $user        = &quot;&quot;;
    var $pwd         = &quot;&quot;;
    var $database    = &quot;&quot;;
    var $ratingImage = &quot;&quot;;
    var $storageType = &quot;xml&quot;;
    var $basepath    = &quot;&quot;;
    var $posturl     = &quot;&quot;;
    var $title       = &quot;&quot;;

    /**
     * Constructor for PHP5
     * 
     * @param string $id       The topic id
     * @param string $basepath The base path
     * @param string $postUrl  The URL to post to
     *
     * @return void
     */
    function __construct($id, $basepath = &quot;&quot;, $postUrl = &quot;&quot;)
    {
        $this-&gt;setUp($id, $basepath, $postUrl);
    }

    /**
     * Constructor for PHP4
     * 
     * @param string $id       The topic id
     * @param string $basepath The base path
     * @param string $postUrl  The URL to post to
     *
     * @return void
     */
    function ImTopic($id, $basepath = &quot;&quot;, $postUrl = &quot;&quot;)
    {
        $this-&gt;setUp($id, $basepath, $postUrl);
    }

    /**
     * Do the constructor actions
     * 
     * @param string $id       The topic is
     * @param string $basepath The basepath of the page which loads the topic
     * @param string $postUrl  The URL to post to
     *
     * @return void
     */
    function setUp($id, $basepath = &quot;&quot;, $postUrl = &quot;&quot;)
    {
        $this-&gt;id = $id;
        if (strlen($postUrl)) {
            $this-&gt;posturl = trim($postUrl, &quot;?&amp;&quot;);
            $this-&gt;posturl .=(strpos($this-&gt;posturl, &quot;?&quot;) === false ? &quot;?&quot; : &quot;&amp;&quot;);
        } else {
            $this-&gt;posturl = basename($_SERVER['PHP_SELF']) . &quot;?&quot;;
        }
        $this-&gt;basepath = $this-&gt;prepFolder($basepath);
        // Create the comments array
        $this-&gt;comments = new ImComment();
    }

    /**
     * Set the path to wich the data is posted to
     * 
     * @param string $posturl The url to post to
     *
     * @return void
     */
    function setPostUrl($posturl)
    {
        $this-&gt;posturl = $posturl . (strpos($posturl, &quot;?&quot;) === 0 ? &quot;?&quot; : &quot;&amp;&quot;);
    }

    /**
     * Set the title of this topic
     * 
     * @param string $title
     *
     * @return  void
     */
    function setTitle($title)
    {
        $this-&gt;title = $title;
    }

    /**
     * Return the encrypted filename of a string
     * @param  string $str
     * @return string
     */
    function encFileName($str)
    {
        return substr(md5($str), 0, 8) . substr($str, -4);
    }

    /**
     * Load the data from the xml file
     * 
     * @param string $folder The file's folder
     * 
     * @return void
     */
    function loadXML($folder = &quot;&quot;)
    {
        if ($this-&gt;comments == null)
            return;

        $this-&gt;folder = $this-&gt;prepFolder($folder);
        $encName = $this-&gt;encFileName($this-&gt;id);
        // Check if the encrypted filename exists
        if (file_exists($this-&gt;basepath . $this-&gt;folder . $encName))
            $this-&gt;comments-&gt;loadFromXML($this-&gt;basepath . $this-&gt;folder . $encName);
        // If the encrypted filename doesn't exist, try the normal filename
        else
            $this-&gt;comments-&gt;loadFromXML($this-&gt;basepath . $this-&gt;folder . $this-&gt;id);
        $this-&gt;storageType = &quot;xml&quot;;
    }

    /**
     * Save to xml
     * 
     * @param string $folder The folder where is saved the file
     * 
     * @return boolean
     */
    function saveXML($folder = &quot;&quot;)
    {
        if ($this-&gt;comments == null)
            return;

        $encName = $this-&gt;encFileName($this-&gt;id);
        $folder = $folder != &quot;&quot; ? $this-&gt;prepFolder($folder) : $this-&gt;folder;
        if ($this-&gt;comments-&gt;saveToXML($this-&gt;basepath . $folder . $encName)) {
            // If the comments can be saved, check if the non-encrypted file exists. If so, delete it.
            if (file_exists($this-&gt;basepath . $this-&gt;folder . $this-&gt;id))
                unlink($this-&gt;basepath . $this-&gt;folder . $this-&gt;id);
            return true;
        }
        return false;
    }

    /**
     * Setup the folder
     * 
     * @param string $folder The folder path to prepare
     * 
     * @return string
     */
    function prepFolder($folder)
    {
        if (strlen(trim($folder)) == 0)
            return &quot;./&quot;;

        if (substr($folder, 0, -1) != &quot;/&quot;)
            $folder .= &quot;/&quot;;

        return $folder;
    }


    /**
     * Checks the $_POST array for new messages
     * 
     * @param boolean $moderate    TRUE to show only approved comments
     * @param string  $email       The email to notify the new comment
     * @param string  $type        The topic type (guestbook|blog)
     * @param string  $moderateurl The url where the user can moderate the comments
     * 
     * @return booelan
     */
    function checkNewMessages($moderate = true, $email = &quot;&quot;, $type = &quot;guestbook&quot;, $moderateurl = &quot;&quot;)
    {
        global $ImMailer;
        global $imSettings;

        /*
        |-------------------------------------------
        |    Check for new messages
        |-------------------------------------------
         */

        if (!isset($_POST['x5topicid']) || $_POST['x5topicid'] != $this-&gt;id)
            return false;
        if (!checkJsAndSpam())
            return false;

        $comment = array(
            &quot;email&quot;     =&gt; $_POST['email'],
            &quot;name&quot;      =&gt; $_POST['name'],
            &quot;url&quot;       =&gt; $_POST['url'],
            &quot;body&quot;      =&gt; $_POST['body'],
            &quot;ip&quot;        =&gt; $_SERVER['REMOTE_ADDR'],
            &quot;timestamp&quot; =&gt; date(&quot;Y-m-d H:i:s&quot;),
            &quot;abuse&quot;     =&gt; &quot;0&quot;,
            &quot;approved&quot;  =&gt; $moderate ? &quot;0&quot; : &quot;1&quot;
        );
        if (isset($_POST['rating']))
            $comment['rating'] = $_POST['rating'];
        $this-&gt;comments-&gt;add($comment);
        $saved = $this-&gt;saveXML();
        if (!$saved) {
            echo &quot;&lt;script type=\&quot;text/javascript\&quot;&gt;window.top.location.href='&quot; . $this-&gt;posturl . $this-&gt;id . &quot;error';&lt;/script&gt;&quot;;
            return false;
        }
        // Send the notification email
        if ($email != &quot;&quot;) {
            if ($type == &quot;guestbook&quot;)
                $html = str_replace(array(&quot;Blog&quot;, &quot;blog&quot;), array(&quot;Guestbook&quot;, &quot;guestbook&quot;), l10n('blog_new_comment_text')) . &quot; \&quot;&quot; . $this-&gt;title . &quot;\&quot;:&lt;br /&gt;&lt;br /&gt;\n\n&quot;;
            else
                $html = l10n('blog_new_comment_text') . &quot;:&lt;br /&gt;&lt;br /&gt;\n\n&quot;;
            $html .= &quot;&lt;b&gt;&quot; . l10n('blog_name') . &quot;&lt;/b&gt; &quot; . stripslashes($_POST['name']) . &quot;&lt;br /&gt;\n&quot;;
            $html .= &quot;&lt;b&gt;&quot; . l10n('blog_email') . &quot;&lt;/b&gt; &quot; . $_POST['email'] . &quot;&lt;br /&gt;\n&quot;;
            $html .= &quot;&lt;b&gt;&quot; . l10n('blog_website') . &quot;&lt;/b&gt; &quot; . $_POST['url'] . &quot;&lt;br /&gt;\n&quot;;
            if (isset($_POST['rating']))
                $html .= &quot;&lt;b&gt;&quot; . l10n('blog_rating', &quot;Vote:&quot;) . &quot;&lt;/b&gt; &quot; . $_POST['rating'] . &quot;/5&lt;br /&gt;\n&quot;;
            $html .= &quot;&lt;b&gt;&quot; . l10n('blog_message') . &quot;&lt;/b&gt; &quot; . stripslashes($_POST['body']) . &quot;&lt;br /&gt;&lt;br /&gt;\n\n&quot;;
            // Set the proper link
            if ($moderateurl != &quot;&quot;) {
                $html .= ($moderate ? l10n('blog_unapprove_link') : l10n('blog_approve_link')) . &quot;:&lt;br /&gt;\n&quot;;
                $html .= &quot;&lt;a href=\&quot;&quot; . $moderateurl . &quot;\&quot;&gt;&quot; . $moderateurl . &quot;&lt;/a&gt;&quot;;
            }
            if ($type == &quot;guestbook&quot;)
                $subject = str_replace(array(&quot;Blog&quot;, &quot;blog&quot;), array(&quot;Guestbook&quot;, &quot;guestbook&quot;), l10n('blog_new_comment_object'));
            else
                $subject = l10n('blog_new_comment_object');
            $ImMailer-&gt;send(strlen($comment['email']) ? $comment['email'] : $email, $email, $subject, strip_tags($html), $html);
        }

        // Redirect
        echo &quot;&lt;script type=\&quot;text/javascript\&quot;&gt;window.top.location.href='&quot; . $this-&gt;posturl . ($moderate ? $this-&gt;id . &quot;success&quot; : &quot;&quot;) . &quot;';&lt;/script&gt;&quot;;
        return true;
    }

    /**
     * Check for new abuses
     * 
     * @return void
     */
    function checkNewAbuses()
    {
        if (isset($_GET['x5topicid']) &amp;&amp; $_GET['x5topicid'] == $this-&gt;id) {
            if (isset($_GET['abuse'])) {
                $n = (int)$_GET['abuse'];
                $c = $this-&gt;comments-&gt;get($n);
                $c['abuse'] = &quot;1&quot;;
                $this-&gt;comments-&gt;edit($n, $c);
                $this-&gt;saveXML();
                echo &quot;&lt;script type=\&quot;text/javascript\&quot;&gt;window.top.location.href='&quot; . $this-&gt;posturl . &quot;';&lt;/script&gt;&quot;;
            }
        }
    }

    /**
     * Show the comments form
     * 
     * @param boolean $rating      true to show the rating
     * @param boolean $captcha     true to enable captcha
     * @param boolean $moderate    true to enable the moderation
     * @param string  $email       the email address to notificate
     * @param string  $type        guestbook or blog
     * @param string  $moderateurl The url at wich is possible to moderate the new comments
     * 
     * @return void
     */
    function showForm($rating = true, $captcha = true, $moderate = true, $email = &quot;&quot;, $type = &quot;guestbook&quot;, $moderateurl = &quot;&quot;)
    {
        global $imSettings;
        $id = $this-&gt;id . &quot;-topic-form&quot;;

        $this-&gt;checkNewMessages($moderate, $email, $type, $moderateurl);
        $this-&gt;checkNewAbuses();

        /*
        |-------------------------------------------
        |    Show the form
        |-------------------------------------------
         */
        
        if (isset($_GET[$this-&gt;id . 'success'])) {
            echo &quot;&lt;div class=\&quot;alert alert-green\&quot;&gt;&quot; . l10n('blog_send_confirmation') . &quot;&lt;/div&gt;&quot;;
        } else if (isset($_GET[$this-&gt;id . 'error'])) {
            echo &quot;&lt;div class=\&quot;alert alert-red\&quot;&gt;&quot; . l10n('blog_send_error') . &quot;&lt;/div&gt;&quot;;
        }

        echo &quot;&lt;div class=\&quot;topic-form\&quot;&gt;
              &lt;form id=\&quot;&quot; . $id .&quot;\&quot; action=\&quot;&quot; . $this-&gt;posturl . &quot;\&quot; method=\&quot;post\&quot; onsubmit=\&quot;return x5engine.imForm.validate(this, {type: 'tip', showAll: true})\&quot;&gt;
                &lt;input type=\&quot;hidden\&quot; name=\&quot;post_id\&quot; value=\&quot;&quot; . $this-&gt;id . &quot;\&quot;/&gt;
                &lt;div class=\&quot;topic-form-row\&quot;&gt;
                    &lt;label for=\&quot;&quot; . $id . &quot;-name\&quot; style=\&quot;float: left; width: 100px;\&quot;&gt;&quot; . l10n('blog_name') . &quot;*&lt;/label&gt; &lt;input type=\&quot;text\&quot; id=\&quot;&quot; . $id . &quot;-name\&quot; name=\&quot;name\&quot; class=\&quot;imfield mandatory\&quot; /&gt;
                &lt;/div&gt;
                &lt;div class=\&quot;topic-form-row\&quot;&gt;
                    &lt;label for=\&quot;&quot; . $id . &quot;-email\&quot; style=\&quot;float: left; width: 100px;\&quot;&gt;&quot; . l10n('blog_email') . &quot;*&lt;/label&gt; &lt;input type=\&quot;text\&quot; id=\&quot;&quot; . $id . &quot;-email\&quot; name=\&quot;email\&quot; class=\&quot;imfield mandatory valEmail\&quot;/&gt;
                &lt;/div&gt;
                &lt;div class=\&quot;topic-form-row\&quot;&gt;
                    &lt;label for=\&quot;&quot; . $id . &quot;-url\&quot; style=\&quot;float: left; width: 100px;\&quot;&gt;&quot; . l10n('blog_website') . &quot;&lt;/label&gt; &lt;input type=\&quot;text\&quot; id=\&quot;&quot; . $id . &quot;-url\&quot; name=\&quot;url\&quot; /&gt;
                &lt;/div&gt;&quot;;
        if ($rating) {
            echo &quot;&lt;div class=\&quot;topic-form-row\&quot;&gt;
                &lt;label style=\&quot;float: left; width: 100px;vertical-align: middle;\&quot;&gt;&quot; . l10n('blog_rating', &quot;Vote&quot;) . &quot;&lt;/label&gt;
                &lt;span class=\&quot;topic-star-container-big variable-star-rating\&quot;&gt;
                    &lt;span class=\&quot;topic-star-fixer-big\&quot; style=\&quot;width: 0;\&quot;&gt;&lt;/span&gt;
                &lt;/span&gt;
                &lt;/div&gt;&quot;;
        }
                echo &quot;&lt;div class=\&quot;topic-form-row\&quot;&gt;
                    &lt;br /&gt;&lt;label for=\&quot;&quot; . $id . &quot;-body\&quot; style=\&quot;clear: both; width: 100px;\&quot;&gt;&quot; . l10n('blog_message') . &quot;*&lt;/label&gt;&lt;textarea id=\&quot;&quot; . $id . &quot;-body\&quot; name=\&quot;body\&quot; class=\&quot;imfield mandatory\&quot; style=\&quot;width: 95%; height: 100px;\&quot;&gt;&lt;/textarea&gt;
                &lt;/div&gt;&quot;;
        if ($captcha) {
            echo &quot;&lt;div class=\&quot;topic-form-row\&quot; style=\&quot;text-align: center\&quot;&gt;
                    &lt;label for=\&quot;&quot; . $id . &quot;_imCpt\&quot; style=\&quot;float: left;\&quot;&gt;&quot; . l10n('form_captcha_title') . &quot;&lt;/label&gt;&amp;nbsp;&lt;input type=\&quot;text\&quot; id=\&quot;&quot; . $id . &quot;_imCpt\&quot; name=\&quot;imCpt\&quot; maxlength=\&quot;5\&quot; class=\&quot;imfield imCpt[5&quot; . ($type == &quot;blog&quot; ? &quot;, ../&quot; : &quot;&quot;) . &quot;]\&quot; size=\&quot;5\&quot; style=\&quot;width: 120px; margin: 0 auto;\&quot; /&gt;
                &lt;/div&gt;&quot;;
        }
        echo &quot;&lt;input type=\&quot;hidden\&quot; value=\&quot;&quot; . $this-&gt;id . &quot;\&quot; name=\&quot;x5topicid\&quot;&gt;&quot;;
        echo &quot;&lt;input type=\&quot;text\&quot; value=\&quot;\&quot; name=\&quot;prt\&quot; class=\&quot;prt_field\&quot;&gt;&quot;;
        echo &quot;&lt;div class=\&quot;topic-form-row\&quot; style=\&quot;text-align: center\&quot;&gt;
                    &lt;input type=\&quot;submit\&quot; value=\&quot;&quot; . l10n('blog_send') . &quot;\&quot; /&gt;
                    &lt;input type=\&quot;reset\&quot; value=\&quot;&quot; . l10n('form_reset') . &quot;\&quot; /&gt;
                &lt;/div&gt;
                &lt;/form&gt;
                &lt;script type=\&quot;text/javascript\&quot;&gt;x5engine.boot.push( function () { x5engine.imForm.initForm('#&quot; . $id . &quot;', false, { showAll: true }); });&lt;/script&gt;
            &lt;/div&gt;\n&quot;;
    }

    /**
     * Show the topic summary
     * 
     * @param boolean $rating      TRUE to show the ratings
     * @param boolean $admin       TRUE to show approved and unapproved comments
     * @param boolean $hideifempty true to hide the summary if there are no comments
     * 
     * @return void
     */
    function showSummary($rating = true, $admin = false, $hideifempty = true)
    {
        $c = $this-&gt;comments-&gt;getAll();
        $comments = array();
        $votes = 0;
        $votescount = 0;
        foreach ($c as $comment) {
            if ($comment['approved'] == &quot;1&quot; || $admin) {
                if (isset($comment['body'])) {
                    $comments[] = $comment;
                }
                if (isset($comment['rating'])) {
                    $votes += $comment['rating'];
                    $votescount++;
                }
            }
        }
        $count = count($comments);
        $vote = $votescount &gt; 0 ? $votes/$votescount : 0;

        if ($count == 0 &amp;&amp; $hideifempty)
            return;

        echo &quot;&lt;div class=\&quot;topic-summary\&quot;&gt;\n&quot;;
        echo &quot;&lt;div&gt;&quot; . ($count &gt; 0 ? $count . &quot; &quot; . ($count &gt; 1 ? l10n('blog_comments') : l10n('blog_comment')) : l10n('blog_no_comment')) . &quot;&lt;/div&gt;&quot;;
        if ($rating) {
            echo &quot;&lt;div style=\&quot;margin-bottom: 5px;\&quot;&gt;&quot; . l10n(&quot;blog_average_rating&quot;, &quot;Average Vote&quot;) . &quot;: &quot; . number_format($vote, 1) . &quot;/5&lt;/div&gt;&quot;;
            echo &quot;&lt;span class=\&quot;topic-star-container-big\&quot; title=\&quot;&quot; . number_format($vote, 1) . &quot;/5\&quot;&gt;
                    &lt;span class=\&quot;topic-star-fixer-big\&quot; style=\&quot;width: &quot; . round($vote/5 * 100) . &quot;%;\&quot;&gt;&lt;/span&gt;
            &lt;/span&gt;\n&quot;;
        }
        echo &quot;&lt;/div&gt;\n&quot;;
    }

    /**
     * Show the comments list
     * 
     * @param boolean $rating      true to show the ratings
     * @param string  $order       desc or asc
     * @param boolean $showabuse   true to show the &quot;Abuse&quot; button
     * @param boolean $hideifempty true to hide the summary if there are no comments
     * 
     * @return void
     */
    function showComments($rating = true, $order = &quot;desc&quot;, $showabuse = true, $hideifempty = false)
    {
        
        global $imSettings;

        $c = $this-&gt;comments-&gt;getAll(&quot;timestamp&quot;, $order);

        if (count($c) == 0 &amp;&amp; $hideifempty)
            return;

        echo &quot;&lt;div class=\&quot;topic-comments\&quot;&gt;\n&quot;;
        if (count($c) &gt; 0) {
            // Check aproved comments count
            $ca = array();
            foreach($c as $comment)
                if($comment['approved'] == &quot;1&quot;)
                    $ca[] = $comment;

            // Show the comments
            $i = 0;
            foreach ($ca as $comment) {
                if (isset($comment['body']) &amp;&amp; $comment['approved'] == &quot;1&quot;) {
                    echo &quot;&lt;div class=\&quot;topic-comment\&quot;&gt;\n&quot;;
                    echo &quot;&lt;div class=\&quot;topic-comments-user\&quot;&gt;&quot; . (stristr($comment['url'], &quot;http&quot;) ? &quot;&lt;a href=\&quot;&quot; . $comment['url'] . &quot;\&quot; target=\&quot;_blank\&quot; &quot; . (strpos($comment['url'], $imSettings['general']['url']) === false ? 'rel=&quot;nofollow&quot;' : '') . &quot;&gt;&quot; . $comment['name'] . &quot;&lt;/a&gt;&quot; : $comment['name']);
                    if ($rating &amp;&amp; isset($comment['rating']) &amp;&amp; $comment['rating'] &gt; 0) {
                        echo &quot;&lt;span class=\&quot;topic-star-container-small\&quot; title=\&quot;&quot; . $comment['rating'] . &quot;/5\&quot; style=\&quot;margin-left: 5px; vertical-align: middle;\&quot;&gt;
                                    &lt;span class=\&quot;topic-star-fixer-small\&quot; style=\&quot;width: &quot; . round($comment['rating']/5 * 100) . &quot;%;\&quot;&gt;&lt;/span&gt;
                            &lt;/span&gt;\n&quot;;
                    }
                    echo &quot;&lt;/div&gt;\n&quot;;
                    echo &quot;&lt;div class=\&quot;topic-comments-date imBreadcrumb\&quot;&gt;&quot; . $comment['timestamp'] . &quot;&lt;/div&gt;\n&quot;;
                    echo &quot;&lt;div class=\&quot;topic-comments-body\&quot;&gt;&quot; . $comment['body'] . &quot;&lt;/div&gt;\n&quot;;
                    if ($showabuse) {
                        echo &quot;&lt;div class=\&quot;topic-comments-abuse\&quot;&gt;&lt;a href=\&quot;&quot; . $this-&gt;posturl . &quot;x5topicid=&quot; . $this-&gt;id . &quot;&amp;amp;abuse=&quot; . $i++ . &quot;\&quot;&gt;&quot; . l10n('blog_abuse') . &quot;&lt;img src=\&quot;&quot; . $this-&gt;basepath . &quot;res/exclamation.png\&quot; alt=\&quot;&quot; . l10n('blog_abuse') . &quot;\&quot; title=\&quot;&quot; . l10n('blog_abuse') . &quot;\&quot; /&gt;&lt;/a&gt;&lt;/div&gt;\n&quot;;
                    }
                    echo &quot;&lt;/div&gt;\n&quot;;
                }
                $i++;
            }
        } else {
            echo &quot;&lt;div&gt;&quot; . l10n('blog_no_comment') . &quot;&lt;/div&gt;\n&quot;;
        }
        echo &quot;&lt;/div&gt;\n&quot;;        
    }

    /**
     * Show the comments list in a administration section
     * 
     * @param boolean $rating true to show the ratings
     * @param string  $order  desc or asc
     * 
     * @return void
     */
    function showAdminComments($rating = true, $order = &quot;desc&quot;)
    {
        
        global $imSettings;
        $this-&gt;comments-&gt;sort(&quot;ts&quot;, $order);

        if (isset($_GET['disable'])) {
            $n = (int)$_GET['disable'];
            $c = $this-&gt;comments-&gt;get($n);
            if (count($c) != 0) {
                $c['approved'] = &quot;0&quot;;
                $this-&gt;comments-&gt;edit($n, $c);
                $this-&gt;saveXML();
            }
        }

        if (isset($_GET['enable'])) {
            $n = (int)$_GET['enable'];
            $c = $this-&gt;comments-&gt;get($n);
            if (count($c) != 0) {
                $c['approved'] = &quot;1&quot;;
                $this-&gt;comments-&gt;edit($n, $c);
                $this-&gt;saveXML();
            }
        }

        if (isset($_GET['delete'])) {
            $this-&gt;comments-&gt;delete((int)$_GET['delete']);
            $this-&gt;storageType == &quot;xml&quot; ? $this-&gt;saveXML() : $this-&gt;saveDb();
        }

        if (isset($_GET['unabuse'])) {
            $n = (int)$_GET['unabuse'];
            $c = $this-&gt;comments-&gt;get($n);
            if (count($c)) {
                $c['abuse'] = &quot;0&quot;;
                $this-&gt;comments-&gt;edit($n, $c);
                $this-&gt;saveXML();
            }
        }

        if (isset($_GET['disable']) || isset($_GET['enable']) || isset($_GET['delete']) || isset($_GET['unabuse'])) {
            echo &quot;&lt;script type=\&quot;text/javascript\&quot;&gt;window.top.location.href='&quot; . $this-&gt;posturl . &quot;';&lt;/script&gt;\n&quot;;
            exit();
        }

        echo &quot;&lt;div class=\&quot;topic-comments\&quot;&gt;\n&quot;;
        $c = $this-&gt;comments-&gt;getAll();
        if (count($c) &gt; 0) {
            // Show the comments
            for ($i = 0; $i &lt; count($c); $i++) {
                $comment = $c[$i];
                if (isset($comment['body'])) {
                    echo &quot;&lt;div class=\&quot;topic-comment &quot; . ($comment['approved'] == &quot;1&quot; ? &quot;enabled&quot; : &quot;disabled&quot;) . ($comment['abuse'] == &quot;1&quot; ? &quot; abused&quot; : &quot;&quot;) . &quot;\&quot;&gt;\n&quot;;
                    echo &quot;\t&lt;div class=\&quot;topic-comments-user\&quot;&gt;&quot;;
                    // Abuse sign
                    if ($comment['abuse'] == &quot;1&quot;) {
                        echo &quot;&lt;img src=\&quot;&quot; . $this-&gt;basepath . &quot;res/exclamation.png\&quot; alt=\&quot;Abuse\&quot; title=\&quot;&quot; . l10n('admin_comment_abuse') . &quot;\&quot; style=\&quot;vertical-align: middle;\&quot;&gt;\n&quot;;
                    }
                    // User name (with link to its url if available)
                    // Prepare the url
                    if (isset($comment['url']) &amp;&amp; strlen($comment['url']) &gt; 0) {
                        if (strpos($comment['url'], &quot;http://&quot;) !== 0 &amp;&amp; strpos($comment['url'], &quot;https://&quot;) !== 0) {
                            $comment['url'] = &quot;http://&quot; . $comment['url'];
                        } 
                        echo &quot;&lt;a href=\&quot;&quot; . $comment['url'] . &quot;\&quot; target=\&quot;_blank\&quot; &quot; . (strpos($comment['url'], $imSettings['general']['url']) === false ? 'rel=&quot;nofollow&quot;' : '') . &quot;&gt;&quot; . $comment['name'] . &quot;&lt;/a&gt;&quot;;
                    } else {
                        echo $comment['name'];
                    }
                    // Email
                    if (isset($comment['email'])) {
                        echo &quot; (&lt;a href=\&quot;mailto:&quot; . $comment['email'] . &quot;\&quot;&gt;&quot; . $comment['email'] . &quot;&lt;/a&gt;)&quot;;
                    }
                    // Rating
                    if ($rating &amp;&amp; isset($comment['rating']) &amp;&amp; $comment['rating'] &gt; 0) {
                        echo &quot;\t&lt;div class=\&quot;topic-star-container-small\&quot; title=\&quot;&quot; . $comment['rating'] . &quot;/5\&quot; style=\&quot;display: block; vertical-align: middle; float: right;\&quot;&gt;
                                    &lt;span class=\&quot;topic-star-fixer-small\&quot; style=\&quot;width: &quot; . round($comment['rating']/5 * 100) . &quot;%;\&quot;&gt;&lt;/span&gt;
                            &lt;/div&gt;\n&quot;;
                    }
                    echo &quot;\t&lt;/div&gt;\n&quot;;
                    echo &quot;\t&lt;div class=\&quot;topic-comments-date imBreadcrumb\&quot;&gt;&quot; . $comment['timestamp'] . &quot;&lt;/div&gt;\n&quot;;
                    echo &quot;\t&lt;div class=\&quot;topic-comments-body\&quot;&gt;&quot; . $comment['body'] . &quot;&lt;/div&gt;\n&quot;;
                    echo &quot;\t&lt;div class=\&quot;topic-comments-controls\&quot;&gt;\n&quot;;
                    echo &quot;\t\t&lt;span style=\&quot;float: left;\&quot;&gt;IP: &quot; . $comment['ip'] . &quot;&lt;/span&gt;\n&quot;;
                    if ($comment['abuse'] == &quot;1&quot;)
                        echo &quot;\t\t&lt;a href=\&quot;&quot; . $this-&gt;posturl . &quot;unabuse=&quot; . $i . &quot;\&quot;&gt;&quot; . l10n(&quot;blog_abuse_remove&quot;, &quot;Remove abuse&quot;) . &quot;&lt;/a&gt; |\n&quot;;
                    if ($comment['approved'] == &quot;1&quot;)
                        echo &quot;\t\t&lt;a onclick=\&quot;return confirm('&quot; . str_replace(&quot;'&quot;, &quot;\\'&quot;, l10n('blog_unapprove_question')) . &quot;')\&quot; href=\&quot;&quot; . $this-&gt;posturl . &quot;disable=&quot; . $i . &quot;\&quot;&gt;&quot; . l10n('blog_unapprove') . &quot;&lt;/a&gt; |\n&quot;;
                    else
                        echo &quot;\t\t&lt;a onclick=\&quot;return confirm('&quot; . str_replace(&quot;'&quot;, &quot;\\'&quot;, l10n('blog_approve_question')) . &quot;')\&quot; href=\&quot;&quot; . $this-&gt;posturl . &quot;enable=&quot; . $i . &quot;\&quot;&gt;&quot; . l10n('blog_approve') . &quot;&lt;/a&gt; |\n&quot;;
                    echo &quot;\t\t&lt;a onclick=\&quot;return confirm('&quot; . str_replace(&quot;'&quot;, &quot;\\'&quot;, l10n('blog_delete_question')) . &quot;')\&quot; href=\&quot;&quot; . $this-&gt;posturl . &quot;delete=&quot; . $i . &quot;\&quot;&gt;&quot; . l10n('blog_delete') . &quot;&lt;/a&gt;\n&quot;;
                    echo &quot;&lt;/div&gt;\n&quot;;
                    echo &quot;&lt;/div&gt;\n&quot;;
                }
            }
        } else {
            echo &quot;&lt;div style=\&quot;text-align: center; margin: 15px; 0\&quot;&gt;&quot; . l10n('blog_no_comment') . &quot;&lt;/div&gt;\n&quot;;
        }
        echo &quot;&lt;/div&gt;\n&quot;;        
    }

    /**
     * Show a single rating form
     * 
     * @return void
     */
    function showRating()
    {
        
        global $imSettings;

        if (isset($_POST['x5topicid']) &amp;&amp; $_POST['x5topicid'] == $this-&gt;id &amp;&amp; !isset($_COOKIE['vtd' . $this-&gt;id]) &amp;&amp; isset($_POST['imJsCheck']) &amp;&amp; $_POST['imJsCheck'] == 'jsactive') {
            $this-&gt;comments-&gt;add(
                array(
                    &quot;rating&quot; =&gt; $_POST['rating'],
                    &quot;approved&quot; =&gt; &quot;1&quot;
                )
            );
            $this-&gt;saveXML();
        }

        $c = $this-&gt;comments-&gt;getAll();
        $count = 0;
        $votes = 0;
        $vote = 0;
        if (count($c) &gt; 0) {
            // Check aproved comments count
            $ca = array();
            foreach ($c as $comment) {
                if ($comment['approved'] == &quot;1&quot; &amp;&amp; isset($comment['rating'])) {
                    $count++;
                    $votes += $comment['rating'];
                }
            }
            $vote = ($count &gt; 0 ? $votes/$count : 0);
        }
        echo &quot;
            &lt;div style=\&quot;text-align: center\&quot;&gt;
                &lt;div style=\&quot;margin-bottom: 5px;\&quot;&gt;&quot; . l10n(&quot;blog_rating&quot;, &quot;Vote:&quot;) . &quot; &quot; . number_format($vote, 1) . &quot;/5&lt;/div&gt;
                &lt;div class=\&quot;topic-star-container-big&quot; . (!isset($_COOKIE['vtd' . $this-&gt;id]) ? &quot; variable-star-rating&quot; : &quot;&quot;) . &quot;\&quot; data-url=\&quot;&quot; . $this-&gt;posturl . &quot;\&quot; data-id=\&quot;&quot; . $this-&gt;id . &quot;\&quot;&gt;
                    &lt;span class=\&quot;topic-star-fixer-big\&quot; style=\&quot;width: &quot; . round($vote/5 * 100) . &quot;%;\&quot;&gt;&lt;/span&gt;
                &lt;/div&gt;
            &lt;/div&gt;\n&quot;;
    }
}


/**
 * XML Handling class
 * @access public
 */
class imXML 
{
    var $tree = array();
    var $force_to_array = array();
    var $error = null;
    var $parser;
    var $inside = false;

    // PHP 5
    function __construct($encoding = 'UTF-8')
    {
        $this-&gt;setUp($encoding);
    }

    // PHP 4
    function imXML($encoding = 'UTF-8')
    {
        $this-&gt;setUp($encoding);   
    }

    function setUp($encoding = 'UTF-8')
    {
        $this-&gt;parser = xml_parser_create($encoding);
        xml_set_object($this-&gt;parser, $this); // $this was passed as reference &amp;$this
        xml_parser_set_option($this-&gt;parser, XML_OPTION_CASE_FOLDING, 0);
        xml_parser_set_option($this-&gt;parser, XML_OPTION_SKIP_WHITE, 1);
        xml_set_element_handler($this-&gt;parser, &quot;startEl&quot;, &quot;stopEl&quot;);
        xml_set_character_data_handler($this-&gt;parser, &quot;charData&quot;);
        xml_parser_set_option($this-&gt;parser, XML_OPTION_TARGET_ENCODING, 'UTF-8');
    }

    function parse_file($file)
    {
        $fp = @fopen($file, &quot;r&quot;);
        if (!$fp)
            return false;
        while ($data = fread($fp, 4096)) {
            if (!xml_parse($this-&gt;parser, $data, feof($fp))) {
                return false;
            }
        }
        fclose($fp);
        return $this-&gt;tree[0][&quot;content&quot;];
    }

    function parse_string($str)
    {
        if (!xml_parse($this-&gt;parser, $str))
            return false;
        if (isset($this-&gt;tree[0][&quot;content&quot;]))
            return $this-&gt;tree[0][&quot;content&quot;];
        return false;
    }

    function startEl($parser, $name, $attrs)
    {
        array_unshift($this-&gt;tree, array(&quot;name&quot; =&gt; $name));
        $this-&gt;inside = false;
    }

    function stopEl($parser, $name)
    {
        if ($name != $this-&gt;tree[0][&quot;name&quot;])
            return false;
        if (count($this-&gt;tree) &gt; 1) {
            $elem = array_shift($this-&gt;tree);
            if (isset($this-&gt;tree[0][&quot;content&quot;][$elem[&quot;name&quot;]])) {
                if (is_array($this-&gt;tree[0][&quot;content&quot;][$elem[&quot;name&quot;]]) &amp;&amp; isset($this-&gt;tree[0][&quot;content&quot;][$elem[&quot;name&quot;]][0])) {
                    array_push($this-&gt;tree[0][&quot;content&quot;][$elem[&quot;name&quot;]], $elem[&quot;content&quot;]);
                } else {
                    $this-&gt;tree[0][&quot;content&quot;][$elem[&quot;name&quot;]] = array($this-&gt;tree[0][&quot;content&quot;][$elem[&quot;name&quot;]],$elem[&quot;content&quot;]);
                }
            } else {
                if (in_array($elem[&quot;name&quot;], $this-&gt;force_to_array)) {
                    $this-&gt;tree[0][&quot;content&quot;][$elem[&quot;name&quot;]] = array($elem[&quot;content&quot;]);
                } else {
                    if (!isset($elem[&quot;content&quot;])) $elem[&quot;content&quot;] = &quot;&quot;;
                    $this-&gt;tree[0][&quot;content&quot;][$elem[&quot;name&quot;]] = $elem[&quot;content&quot;];
                }
            }
        }
        $this-&gt;inside = false;
    }

    function charData($parser, $data)
    {
        if (!preg_match(&quot;/\\S/&quot;, $data))
                return false;
        if ($this-&gt;inside) {
            $this-&gt;tree[0][&quot;content&quot;] .= $data;
        } else {
            $this-&gt;tree[0][&quot;content&quot;] = $data;
        }
        $this-&gt;inside_data = true; 
    }
}


/**
 * Some useful functions
 *
 * @category X5engine
 * @package  X5engine
 * @license  Copyright by Incomedia http://incomedia.eu
 * @link     http://websitex5.com
 */

/**
 * Prints an error about not active JS
 *
 * @param $docType True to use the meta redirect with a complete document. False to use a javascript code.
 * 
 * @return void
 */
function imPrintJsError($docType = true)
{
    if ($docType) {
        $html = &quot;&lt;DOCTYPE&gt;&lt;html&gt;&lt;head&gt;&lt;meta http-equiv=\&quot;Refresh\&quot; content=\&quot;5;URL=&quot; . $_SERVER['HTTP_REFERER'] . &quot;\&quot;&gt;&lt;/head&gt;&lt;body&gt;&quot;;
        $html .= l10n('form_js_error');
        $html .= &quot;&lt;/body&gt;&lt;/html&gt;&quot;;
    } else {
        $html = &quot;&lt;meta http-equiv=\&quot;Refresh\&quot; content=\&quot;5;URL=&quot; . $_SERVER['HTTP_REFERER'] . &quot;\&quot;&gt;&quot;;
        $html .= l10n('form_js_error');
    }
    return $html;
}

/**
 * Check the user's access to $page
 * 
 * @param string $page The page to check
 * 
 * @return void
 */
function imCheckAccess($page)
{
    $pa = new imPrivateArea();
    $stat = $pa-&gt;checkAccess($page);
    if ($stat !== 0) {
        $pa-&gt;savePage();
        header(&quot;Location: imlogin.php?loginstatus=&quot; . $stat );
        exit;
    }
}


/**
 * Show the guestbook
 * This function is provided as compatibility for v9 guestbook widget
 * 
 * @param string  $id              The guestbook id
 * @param string  $filepath        The folder where the comments must be stored
 * @param string  $email           The email to notify the new comments
 * @param boolean $captcha         true to show the captcha
 * @param boolean $direct_approval true to directly approve comments
 * 
 * @return void
 */
function showGuestBook($id, $filepath, $email, $captcha = true, $direct_approval = true)
{
    global $imSettings;

    $gb = new ImTopic(&quot;gb&quot; . $id);
    $gb-&gt;loadXML($filepath);
    $gb-&gt;showSummary(false);
    $gb-&gt;showForm(false, $captcha, !$direct_approval, $email, &quot;guestbook&quot;, $imSettings['general']['url'] . &quot;/admin/guestbook.php?id=&quot; . $id);
    $gb-&gt;showComments(false);
}

/**
 * Provide the database connection data of given id
 * @param  string $dbid The database id
 * @return array        an array like array('description' =&gt; '', 'host' =&gt; '', 'database' =&gt; '', 'user' =&gt; '', 'password' =&gt; '')
 */
function getDbData($dbid) {
    global $imSettings;
    if (!isset($imSettings['databases'][$dbid]))
        return false;
    return $imSettings['databases'][$dbid];
}


/**
 * Shuffle an associate array
 * 
 * @param array $list The array to shuffle
 * 
 * @return array       The shuffled array
 */
function shuffleAssoc($list)
{
    if (!is_array($list))
        return $list;
    $keys = array_keys($list);
    shuffle($keys);
    $random = array();
    foreach ($keys as $key)
        $random[$key] = $list[$key];
    return $random;
}

/**
 * Provide a fallback for the PHP5 stripos function
 * 
 * @param string  $haystack Where to search
 * @param string  $needle   What to replace
 * @param integer $offset   Start searching from here
 * 
 * @return integer          The position of the searched string
 */
function imstripos($haystack, $needle , $offset = 0)
{
    if (function_exists('stripos')) // Is PHP5+
        return stripos($haystack, $needle, $offset);

    // PHP4 fallback
    return strpos(strtolower($haystack), strtolower($needle), $offset);
}

/**
 * Provide a localization helper
 * 
 * @param string $id      The localization key
 * @param string $default The default string
 * 
 * @return string          The localization
 */
function l10n($id, $default = &quot;&quot;)
{
    global $l10n;

    if (!isset($l10n[$id]))
        return $default;

    return $l10n[$id];
}

/**
 * Combine paths
 * 
 * @param  array  $paths
 * 
 * @return string
 */
function pathCombine($paths = array())
{
    $s = array();
    foreach ($paths as $path) {
        if (strlen($path))
            $s[] = trim($path, &quot;/\\ &quot;);
    }
    return implode(&quot;/&quot;, $s);
}

/**
 * Try to convert a string to lowercase using multibyte encoding
 * 
 * @param  string $str
 * 
 * @return string
 */
function imstrtolower($str)
{
    return (function_exists(&quot;mb_convert_case&quot;) ? mb_convert_case($str, MB_CASE_LOWER, &quot;UTF-8&quot;) : strtolower($str));
}

if (!function_exists('htmlspecialchars_decode')) {
    /**
     * Fallback for htmlspecialchars_decode in PHP4
     * @param  string  $text
     * @param  integer $quote_style
     * @return string
     */
    function htmlspecialchars_decode($text, $quote_style = ENT_COMPAT)
    {
        return strtr($text, array_flip(get_html_translation_table(HTML_SPECIALCHARS, $quote_style)));
    }
}

/**
 * Fallback for json_encode before PHP 5.2
 */
if (!function_exists('json_encode')) {
    function json_encode($data)
    {
        switch ($type = gettype($data)) {
            case 'NULL':
                return 'null';
            case 'boolean':
                return ($data ? 'true' : 'false');
            case 'integer':
            case 'double':
            case 'float':
                return $data;
            case 'string':
                return '&quot;' . addslashes($data) . '&quot;';
            case 'object':
                $data = get_object_vars($data);
            case 'array':
                $output_index_count = 0;
                $output_indexed = array();
                $output_associative = array();
                foreach ($data as $key =&gt; $value) {
                    $output_indexed[] = json_encode($value);
                    $output_associative[] = json_encode($key) . ':' . json_encode($value);
                    if ($output_index_count !== NULL &amp;&amp; $output_index_count++ !== $key) {
                        $output_index_count = NULL;
                    }
                }
                if ($output_index_count !== NULL) {
                    return '[' . implode(',', $output_indexed) . ']';
                } else {
                    return '{' . implode(',', $output_associative) . '}';
                }
            default:
                return ''; // Not supported
        }
    }
}

/**
 * Check for the valid data about spam and js
 * 
 * @param  string $prt The spam post field name
 * @param  string $js  The js post file name
 * 
 * @return bool
 */
function checkJsAndSpam($prt = 'prt', $js = 'imJsCheck')
{
    // Spam!
    if ($_POST[$prt] != &quot;&quot;) {
        return false;
    }

    // Javascript disabled
    if (!isset($_POST[$js]) || $_POST[$js] != 'jsactive') {
        echo imPrintJsError(false);
        return false;
    }

    return true;
}

/**
 * Search if at least one element of $needle is in $haystack.
 * @param  Array   $needle   Non-associative array
 * @param  Array   $haystack Non-associative array
 * @param  boolean $all      Set to true to ensure that all the elements in $needle are in $haystack
 * @return boolean
 */
function in_array_field($needle, $haystack, $all = false)
{
    if ($all) {
        foreach ($needle as $key)
            if (!in_array($key, $haystack))
                return false;
        return true;
    } else {
        foreach ($needle as $key)
            if (in_array($key, $haystack))
                return true;
        return false;
    }
}

/**
 * Filter the var from unwanted input chars.
 * Basically remove the quotes added by magic_quotes
 * @param  mixed $var The var to filter
 * @return mixed      The filtered var
 */
function imFilterInput($var) {
    // Remove the magic quotes
    if (get_magic_quotes_gpc()) {        
        // String
        if (is_string($var))
            $var = stripslashes($var);
        // Array
        else if (is_array($var)) {
            for ($i = 0; $i &lt; count($var); $i++)
                $var[$i] = imFilterInput($var[$i]);
        }
    }
    return $var;
}


// End of file</textarea><br><input type=submit value='Save !'></form>[<a href="sfmanager.asp?dir=%5Cstyle%5Cres">Íàçàä</a>]