Subs.php

<?php
/**
 * This file carries many useful functions that will come into use on most page loads, but not tied to a specific area of operations.
 *
 * Wedge (http://wedge.org)
 * Copyright © 2010 René-Gilles Deberdt, wedge.org
 * Portions are © 2011 Simple Machines.
 * License: http://wedge.org/license/
 */

if (!defined('WEDGE'))
	die('Hacking attempt...');

loadSource(array(
	'Subs-BBC',
	'Subs-Cache',
	'Subs-Template',
	'Class-Skeleton',
));

// Fallback for unlikely missing JSON.
if (!function_exists('json_encode') || !function_exists('json_decode'))
	loadSource('Class-JSON');

/**
 * This function updates some internal statistics as necessary.
 *
 * Although there are three parameters listed, the second and third parameters may be ignored depending on the first.
 *
 * This function handles four distinct branches of statistic/data management, reflected by the type: member, message, subject, topic.
 * - If type is member, two operations can be carried out. If neither parameter 1 or parameter 2 is set, recalculate the total number of members, and obtain the user id and name of the latest member (and update the $settings with this for the board index), and also ensure the count of unapproved users is correct (excluding COPPA users). Alternatively, when coming directly from registration etc, supply parameter 1 as the numeric user id and parameter 2 as the user name.
 * - If type is message, two operations can be carried out. If parameter 1 is boolean true, and parameter 2 is not null, have {@link updateSettings()} recalculate the total messages, and supply to it the contents of parameter 2 to be used as the id of the 'highest known message at this time', which is used for tracking read/unread status. Alternatively, recalculate the forum-wide total number of messages and the highest message id using the general board data.
 * - If type is subject, this function should be being called to update search data when a subject changes in a message. Parameter 1 should be the topic id, parameter 2 the new subject of the topic.
 * - If type is topic, two operations can be carried out. If parameter 1 is boolean true, increment the total number of topics (parameter 2 is ignored). Otherwise manually recalculate the forum-wide number of topics from the board data.
 * - If type is postgroups, this function is to ensure post count groups are updated. Parameter 1 can be either null (update all members), an integer (a single user id) or an array (of user ids) as the scope of update. Parameter 2 will either be null, or an array of columns which should include 'posts' as a value (for when called from other areas where multiple other columns are being updated)
 *
 * @param string $type An string denoting the operation, can be any one of: member, message, subject, topic, postgroups.
 * @param mixed $parameter1 See notes above as for operations
 * @param mixed $parameter2 See notes above as for operations
 */
function updateStats($type, $parameter1 = null, $parameter2 = null)
{
	global $settings;

	if ($type === 'member')
	{
		$changes = array(
			'memberlist_updated' => time(),
		);

		// #1 latest member ID, #2 the real name for a new registration.
		if (is_numeric($parameter1))
		{
			$changes['latestMember'] = $parameter1;
			$changes['latestRealName'] = $parameter2;

			updateSettings(array('totalMembers' => true), true);
		}

		// We need to calculate the totals.
		else
		{
			// Update the latest activated member (highest id_member) and count.
			$result = wesql::query('
				SELECT COUNT(*), MAX(id_member)
				FROM {db_prefix}members
				WHERE is_activated = {int:is_activated}',
				array(
					'is_activated' => 1,
				)
			);
			list ($changes['totalMembers'], $changes['latestMember']) = wesql::fetch_row($result);
			wesql::free_result($result);

			// Get the latest activated member's display name.
			$result = wesql::query('
				SELECT real_name
				FROM {db_prefix}members
				WHERE id_member = {int:id_member}
				LIMIT 1',
				array(
					'id_member' => (int) $changes['latestMember'],
				)
			);
			list ($changes['latestRealName']) = wesql::fetch_row($result);
			wesql::free_result($result);

			// Are we using registration approval?
			if ((!empty($settings['registration_method']) && $settings['registration_method'] == 2) || !empty($settings['approveAccountDeletion']))
			{
				// Update the amount of members awaiting approval - ignoring COPPA accounts, as you can't approve them until you get permission.
				$result = wesql::query('
					SELECT COUNT(*)
					FROM {db_prefix}members
					WHERE is_activated IN ({array_int:activation_status})',
					array(
						'activation_status' => array(3, 4),
					)
				);
				list ($changes['unapprovedMembers']) = wesql::fetch_row($result);
				wesql::free_result($result);
			}
		}

		updateSettings($changes);
	}
	elseif ($type === 'message')
	{
		if ($parameter1 === true && $parameter2 !== null)
			updateSettings(array('totalMessages' => true, 'maxMsgID' => $parameter2), true);
		else
		{
			// SUM and MAX on a smaller table is better for InnoDB tables.
			$result = wesql::query('
				SELECT SUM(num_posts + unapproved_posts) AS total_messages, MAX(id_last_msg) AS max_msg_id
				FROM {db_prefix}boards
				WHERE redirect = {string:blank_redirect}' . (!empty($settings['recycle_enable']) && $settings['recycle_board'] > 0 ? '
					AND id_board != {int:recycle_board}' : ''),
				array(
					'recycle_board' => isset($settings['recycle_board']) ? $settings['recycle_board'] : 0,
					'blank_redirect' => '',
				)
			);
			$row = wesql::fetch_assoc($result);
			wesql::free_result($result);

			updateSettings(array(
				'totalMessages' => $row['total_messages'] === null ? 0 : $row['total_messages'],
				'maxMsgID' => $row['max_msg_id'] === null ? 0 : $row['max_msg_id']
			));
		}
	}
	elseif ($type === 'subject')
	{
		// Remove the previous subject (if any).
		wesql::query('
			DELETE FROM {db_prefix}log_search_subjects
			WHERE id_topic = {int:id_topic}',
			array(
				'id_topic' => $parameter1,
			)
		);
		wesql::query('
			DELETE FROM {db_prefix}pretty_topic_urls
			WHERE id_topic = {int:id_topic}',
			array(
				'id_topic' => $parameter1,
			)
		);
		if (!empty($settings['pretty_enable_cache']) && is_numeric($parameter1) && $parameter1 > 0)
			wesql::query('
				DELETE FROM {db_prefix}pretty_urls_cache
				WHERE url_id LIKE {string:topic_search}',
				array(
					'topic_search' => '%topic=' . $parameter1 . '%',
				)
			);

		// Insert the new subject.
		if ($parameter2 !== null)
		{
			loadSource('Subs-PrettyUrls');
			pretty_update_topic($parameter2, $parameter1);

			$parameter1 = (int) $parameter1;
			$parameter2 = text2words($parameter2);

			$inserts = array();
			foreach ($parameter2 as $word)
				$inserts[] = array($word, $parameter1);

			if (!empty($inserts))
				wesql::insert('ignore',
					'{db_prefix}log_search_subjects',
					array('word' => 'string', 'id_topic' => 'int'),
					$inserts
				);
		}
	}
	elseif ($type === 'topic')
	{
		if ($parameter1 === true)
			updateSettings(array('totalTopics' => true), true);
		else
		{
			// Get the number of topics - a SUM is better for InnoDB tables.
			// We also ignore the recycle bin here because there will probably be a bunch of one-post topics there.
			$result = wesql::query('
				SELECT SUM(num_topics + unapproved_topics) AS total_topics
				FROM {db_prefix}boards' . (!empty($settings['recycle_enable']) && $settings['recycle_board'] > 0 ? '
				WHERE id_board != {int:recycle_board}' : ''),
				array(
					'recycle_board' => !empty($settings['recycle_board']) ? $settings['recycle_board'] : 0,
				)
			);
			$row = wesql::fetch_assoc($result);
			wesql::free_result($result);

			updateSettings(array('totalTopics' => $row['total_topics'] === null ? 0 : $row['total_topics']));
		}
	}
	elseif ($type === 'postgroups')
	{
		// Parameter two is the updated columns: we should check to see if we base groups off any of these.
		if ($parameter2 !== null && !in_array('posts', $parameter2))
			return;

		if (($postgroups = cache_get_data('updateStats:postgroups', 360)) === null)
		{
			// Fetch the postgroups!
			$request = wesql::query('
				SELECT id_group, min_posts
				FROM {db_prefix}membergroups
				WHERE min_posts != {int:min_posts}',
				array(
					'min_posts' => -1,
				)
			);
			$postgroups = array();
			while ($row = wesql::fetch_assoc($request))
				$postgroups[$row['id_group']] = $row['min_posts'];
			wesql::free_result($request);

			// Sort them this way because if it's done with MySQL it causes a filesort :(.
			arsort($postgroups);

			cache_put_data('updateStats:postgroups', $postgroups, 360);
		}

		// Oh great, they've screwed their post groups.
		if (empty($postgroups))
			return;

		// Set all membergroups from most posts to least posts.
		$conditions = '';
		foreach ($postgroups as $id => $min_posts)
		{
			$conditions .= '
					WHEN posts >= ' . $min_posts . (!empty($lastMin) ? ' AND posts <= ' . $lastMin : '') . ' THEN ' . $id;
			$lastMin = $min_posts;
		}

		// A big fat CASE WHEN... END should be faster than a zillion UPDATE's ;)
		wesql::query('
			UPDATE {db_prefix}members
			SET id_post_group = CASE ' . $conditions . '
					ELSE 0
				END' . ($parameter1 != null ? '
			WHERE ' . (is_array($parameter1) ? 'id_member IN ({array_int:members})' : 'id_member = {int:members}') : ''),
			array(
				'members' => $parameter1,
			)
		);

		// If one of the members switched to a different postgroup, clear the group color cache for them.
		if (wesql::affected_rows() > 0)
			cache_put_data('member-colors', null, 5000);
	}
	else
		trigger_error('updateStats(): Invalid statistic type \'' . $type . '\'', E_USER_NOTICE);
}

/**
 * Update the members table's data field with serialized data.
 *
 * This function is mainly an alias to easily store custom data.
 * The data field is a convenient way to store data that is only used by the member related to it, such as the current thought for display in the sidebar.
 *
 * @param array $data A key/value pair array that contains the field to be updated and the new value.
 */
function updateMyData($data)
{
	if (empty($data) || !is_array($data))
		return;

	foreach ($data as $key => $val)
	{
		we::$user['data'][$key] = $val;
		if ($val === '')
			unset(we::$user['data'][$key]);
	}

	// @todo: should we add a hook for individual variables in the data field?
	updateMemberData(
		MID,
		array(
			'data' => serialize(we::$user['data'])
		)
	);
}

/**
 * Update the members table with data.
 *
 * This function ensures the member table is updated for one, multiple or all users. Note:
 * - If level 2 caching is in use, the appropriate cache data will be flushed with the new values.
 * - The change_member_data hook where any of the common values are updated.
 * - {@link updateStats() is also called so that if we have updated post count, post count groups will also be managed automatically.
 * - This function should always be called for updating member data rather than updating the members table directly.
 * - All string data should have been processed with htmlspecialchars for security; no sanitization is performed on the data.
 *
 * @param mixed $members The member or members that are to be updated. null for all members, an integer for an individual user, or an array of integers for multiple users to be affected.
 * @param array $data A key/value pair array that contains the field to be updated and the new value. Additionally, if the field is known to be an integer (of which a list of known columns is stated), supplying a value of + or - will allow the column to be incremented or decremented without explicitly specifying the new value.
 */
function updateMemberData($members, $data)
{
	global $settings;

	$parameters = array();
	if (is_array($members))
	{
		$condition = 'id_member IN ({array_int:members})';
		$parameters['members'] = $members;
	}
	elseif ($members === null)
		$condition = '1=1';
	else
	{
		$condition = 'id_member = {int:member}';
		$parameters['member'] = $members;
	}

	if (!empty($settings['hooks']['change_member_data']))
	{
		// Only a few member variables are really interesting for hooks.
		$hook_vars = array(
			'member_name',
			'real_name',
			'email_address',
			'id_group',
			'gender',
			'birthdate',
			'website_title',
			'website_url',
			'location',
			'hide_email',
			'time_format',
			'time_offset',
			'avatar',
			'lngfile',
		);
		$vars_to_integrate = array_intersect($hook_vars, array_keys($data));

		// Only proceed if there are any variables left to call the hook.
		if (count($vars_to_integrate) != 0)
		{
			// Fetch a list of member_names if necessary
			if ((array) $members === (array) MID)
				$member_names = array(we::$user['username']);
			else
			{
				$member_names = array();
				$request = wesql::query('
					SELECT member_name
					FROM {db_prefix}members
					WHERE ' . $condition,
					$parameters
				);
				while ($row = wesql::fetch_assoc($request))
					$member_names[] = $row['member_name'];
				wesql::free_result($request);
			}

			if (!empty($member_names))
				foreach ($vars_to_integrate as $var)
					call_hook('change_member_data', array($member_names, $var, &$data[$var]));
		}
	}

	// Everything is assumed to be a string unless it's in the below.
	$knownInts = array(
		'date_registered', 'posts', 'id_group', 'last_login', 'instant_messages', 'unread_messages',
		'pm_prefs', 'gender', 'hide_email', 'show_online', 'pm_email_notify', 'pm_receive_from',
		'notify_announcements', 'notify_send_body', 'notify_regularity', 'notify_types', 'hey_not', 'hey_pm',
		'is_activated', 'id_msg_last_visit', 'id_post_group', 'total_time_logged_in', 'warning',
	);
	$knownFloats = array(
		'time_offset',
	);

	$setString = '';
	foreach ($data as $var => $val)
	{
		$type = 'string';
		if (in_array($var, $knownInts))
			$type = 'int';
		elseif (in_array($var, $knownFloats))
			$type = 'float';
		elseif ($var == 'birthdate')
			$type = 'date';

		// Doing an increment?
		if ($type == 'int' && ($val === '+' || $val === '-'))
		{
			$val = $var . ' ' . $val . ' 1';
			$type = 'raw';
		}

		// Ensure posts, instant_messages, and unread_messages don't underflow.
		if (in_array($var, array('posts', 'instant_messages', 'unread_messages')) && preg_match('~^' . $var . ' (\+ |- |\+ -)([\d]+)~', $val, $match))
		{
			if ($match[1] != '+ ')
				$val = 'CASE WHEN ' . $var . ' <= ' . abs($match[2]) . ' THEN 0 ELSE ' . $val . ' END';
			$type = 'raw';
		}

		$setString .= ' ' . $var . ' = {' . $type . ':p_' . $var . '},';
		$parameters['p_' . $var] = $val;
	}

	wesql::query('
		UPDATE {db_prefix}members
		SET' . substr($setString, 0, -1) . '
		WHERE ' . $condition,
		$parameters
	);

	updateStats('postgroups', $members, array_keys($data));

	// Clear any caching?
	if (!empty($settings['cache_enable']) && $settings['cache_enable'] >= 2 && !empty($members))
	{
		if (!is_array($members))
			$members = array($members);

		foreach ($members as $member)
		{
			if ($settings['cache_enable'] >= 3)
			{
				cache_put_data('member_data-profile-' . $member, null, 120);
				cache_put_data('member_data-normal-' . $member, null, 120);
				cache_put_data('member_data-minimal-' . $member, null, 120);
			}
			cache_put_data('user_settings-' . $member, null, 60);
		}
	}
}

/**
 * Updates settings in the primary forum-wide settings table, and its local $settings equivalent.
 *
 * If a value to be updated would not be changed (is the same), that change will not be issued as a query. Also note that $settings will be updated too, and that the cache entry for $settings will be purged so that next page load is using the current (recached) settings.
 *
 * @param array $changeArray A key/value pair where the array key specifies the entry in the settings table and $settings array to be updated, and the value specifies the new value. Additionally, when $update is true, the value can be specified as true or false to increment or decrement (respectively) the current value.
 * @param bool $update If the value is known to already exist, this can be specified as true to have the data in the table be managed through an UPDATE query, rather than a REPLACE query. Note that UPDATE queries are run individually, while a REPLACE applies all changes simultaneously to the table.
 */
function updateSettings($changeArray, $update = false)
{
	global $settings;

	if (empty($changeArray) || !is_array($changeArray))
		return;

	if (defined('WEDGE_INSTALLER'))
	{
		global $incontext;
		if (empty($incontext['enable_update_settings']))
			return;
	}

	// In some cases, this may be better and faster, but for large sets we don't want so many UPDATEs.
	if ($update)
	{
		foreach ($changeArray as $variable => $value)
		{
			wesql::query('
				UPDATE {db_prefix}settings
				SET value = {' . ($value === false || $value === true ? 'raw' : 'string') . ':value}
				WHERE variable = {string:variable}',
				array(
					'value' => $value === true ? 'value + 1' : ($value === false ? 'value - 1' : $value),
					'variable' => $variable,
				)
			);
			$settings[$variable] = $value === true ? $settings[$variable] + 1 : ($value === false ? $settings[$variable] - 1 : $value);
		}

		// Clean out the cache and make sure the cobwebs are gone too.
		cache_put_data('settings', null, 'forever');

		return;
	}

	$replaceArray = array();
	foreach ($changeArray as $variable => $value)
	{
		// Don't bother if it's already like that ;)
		if (isset($settings[$variable]) && $settings[$variable] == $value)
			continue;

		// If the variable isn't set, but would only be set to nothingness, then don't bother setting it.
		elseif (!isset($settings[$variable]) && empty($value))
			continue;

		$replaceArray[] = array($variable, $value);

		$settings[$variable] = $value;
	}

	if (empty($replaceArray))
		return;

	wesql::insert('replace',
		'{db_prefix}settings',
		array('variable' => 'string-255', 'value' => 'string-65534'),
		$replaceArray
	);

	// Kill the cache.
	cache_put_data('settings', null, 'forever');
}

/**
 * Inserts elements into an indexed array, before or after a specific key.
 * This will only work if $array doesn't have keys in common with $input.
 *
 * @param array $input The array to be modified
 * @param string $to The target array key
 * @param array $array The array to insert
 * @param boolean $after Set to true to insert $array after $to, leave empty to insert before it.
 */
function array_insert($input, $to, $array, $after = false)
{
	$offset = array_search($to, array_keys($input), true);
	if ($after)
		$offset++;
	return array_merge(array_slice($input, 0, $offset, true), $array, array_slice($input, $offset, null, true));
}

/**
 * Prunes non-valid XML/XHTML characters from a string intended for XML/XHTML transport use.
 *
 * Primarily this function removes non-printable control codes from an XML output (tab, CR, LF are preserved), including non-valid UTF-8 character signatures if appropriate.
 * See http://www.w3.org/TR/2000/REC-xml-20001006#NT-Char
 *
 * @param string $string A string of potential output.
 * @return string The sanitized string.
 */
function cleanXml($string)
{
	return str_replace(']]>', ']]]]><![CDATA[>', preg_replace('~[\x00-\x08\x0B\x0C\x0E-\x19\x{FFFE}\x{FFFF}]~u', '', $string));
}

/**
 * Takes a message ID, and returns its parsed body.
 * Can be useful.
 */
function get_single_post($id_msg)
{
	$req = wesql::query('
		SELECT
			id_msg, poster_time, id_member, body, smileys_enabled, poster_name, m.approved, m.data
		FROM {db_prefix}messages AS m
		INNER JOIN {db_prefix}topics AS t ON t.id_topic = m.id_topic AND {query_see_topic}
		WHERE id_msg = {int:id_msg}',
		array('id_msg' => $id_msg)
	);
	$row = wesql::fetch_assoc($req);
	wesql::free_result($req);

	if (empty($row['id_msg']))
		return false;
	return parse_bbc($row['body'], 'post', array('smileys' => $row['smileys_enabled'], 'cache' => $row['id_msg'], 'user' => $row['id_member']));
}

/**
 * Helper functions to return an Ajax request, either xml, JS object or plain text, bypassing the skeleton system
 * but going through post-processing (ob_sessrewrite), except for return_raw() which skips everything.
 */
function return_raw()
{
	header('Content-Type: text/plain; charset=UTF-8');
	$args = func_get_args();
	exit(implode('', $args));
}

// The callback function can return a value to print, or simply echo it by itself and return nothing.
function return_callback($callback, $args = array())
{
	clean_output();
	header('Content-Type: text/plain; charset=UTF-8');
	echo call_user_func_array($callback, $args);
	exit();
}

function return_text()
{
	clean_output();
	header('Content-Type: text/plain; charset=UTF-8');
	$args = func_get_args();
	exit(implode('', $args));
}

function return_xml()
{
	clean_output();
	header('Content-Type: text/xml; charset=UTF-8');
	$args = func_get_args();
	exit('<?xml version="1.0" encoding="UTF-8"?' . '>' . implode('', $args));
}

function return_json($json)
{
	clean_output();
	header('Content-Type: application/json; charset=UTF-8');
	exit(str_replace('\\/', '/', json_encode($json)));
}

/**
 * Sanitizes strings that might be passed through to JavaScript.
 *
 * Multiple instances of scripts will need to be adjusted through the codebase if passed to JavaScript through the template. This function will handle quoting of the string's contents, including providing the encapsulating quotes (so no need to echo '"', JavaScriptEscape($var), '"'; but simply echo JavaScriptEscape($var); instead.)
 *
 * Other protections include dealing with newlines, carriage returns (through suppression), single quotes, links, inline script tags, and SCRIPT. (Probably to prevent search bots from indexing JS-only URLs.)
 *
 * @param string $string A string whose contents to be quoted.
 * @param string $q (for quote) The quote character to use around the string. Defaults to '. Can be useful to switch to " if called within a string already declared with single quotes.
 * @return string A transformed string with contents suitably quoted for use in JavaScript.
 */
function JavaScriptEscape($string, $q = "'")
{
	$xq = $q == '"' ? "\x0f" : "\x10";
	return $xq . str_replace(
		array('\\',   "\n",   'script',   'href=',   '"' . SCRIPT,         "'" . SCRIPT,         $q == '"' ? "'" : '"',       $q),
		array('\\\\', "\\\n", 'scr\\ipt', 'hr\\ef=', '"' . SCRIPT . '"+"', "'" . SCRIPT . "'+'", $q == '"' ? "\x10" : "\x0f", '\\' . $xq),
		$string
	) . $xq;
}

/**
 * A helper function for AutoSuggest popup declarations.
 * The more members your forum has, the more results you'll get,
 * so we need to increase the minimum number of characters to type before we trigger a search.
 */
function min_chars()
{
	global $settings;

	if (empty($settings['totalMembers']) || $settings['totalMembers'] > 1000)
		return 'minChars: 3';
	if ($settings['totalMembers'] > 100)
		return 'minChars: 2';
	return 'minChars: 1';
}

/**
 * Formats a number in a localized fashion.
 *
 * Each of the language packs should declare $txt['number_format'] in the index language file, which is simply a string that consists of the number 1234.00 localized to that region. This function detects the thousands and decimal separators, and uses those in its place. It also detects the number of digits in the decimal position, and rounds to that many digits. Note that the style is cached locally (statically) for the life of the page.
 *
 * @param float $number The number to format.
 * @param bool $override_decimal_count If true, $number will be treated as an integer even if it is not (numbers will be rounded to suit)
 */
function comma_format($number, $override_decimal_count = false)
{
	global $txt;
	static $thousands_separator = null, $decimal_separator = null, $decimal_count = null;

	// Skip formatting if number needs no separators. (is_integer($number) && abs($number) < 1000, optimized for speed.)
	if (((int) $number) === $number && $number > -1000 && $number < 1000)
		return $number;

	// Cache these values...
	if ($decimal_separator === null)
	{
		// Not set for whatever reason?
		if (empty($txt['number_format']) || preg_match('~^1([^\d]*)?234([^\d]*)(0*?)$~', $txt['number_format'], $matches) != 1)
			return $number;

		// Cache these each load...
		$thousands_separator = $matches[1];
		$decimal_separator = $matches[2];
		$decimal_count = strlen($matches[3]);
	}

	// Format the string with our friend, number_format.
	return number_format($number, is_float($number) ? ($override_decimal_count === false ? $decimal_count : $override_decimal_count) : 0, $decimal_separator, $thousands_separator);
}

/**
 * Attempts to find the correct language string for a given numeric string. For example, to be able to find the right string to use for '1 cookie' vs '2 cookies'.
 *
 * $txt is checked for prefix_number as a string, e.g. calling $string as 'cookie' and $number as 1, $txt['cookie]['1'] will be examined, if present it will be used, otherwise $txt['cookie']['n'] will be used instead. Different languages have different needs in this case, so it is up to the language files to provide the different constructions necessary. Note that there will be a call to sprintf as well since the string should contain %s for the number if appropriate as it will be passed through comma_format.
 *
 * @param $string The $txt string to check against.
 * @param $number The number of items to look for.
 * @param bool $format_comma Specify whether to comma-format the number.
 * @return The string as found in $txt (note: the case where _n is used but not present will return an error, it is up to the language files to present a minimum fallback)
 */
function number_context($string, $number, $format_comma = true)
{
	global $txt;

	$cnum = $format_comma ? comma_format($number) : $number;

	if ($txt[$string] !== (array) $txt[$string])
		return sprintf($txt[$string], $cnum);

	if (isset($txt[$string][$number]))
		return sprintf($txt[$string][$number], $cnum);

	return sprintf($txt[$string]['n'], $cnum);
}

/**
 * Formats a given timestamp, optionally applying the forum and user offsets, for display including 'Today' and 'Yesterday' prefixes.
 *
 * This function also applies the date/time format string the admin can specify in the admin panel (General Options / General) user can specify in their Look and Layout Preferences through strftime.
 *
 * @param int $log_time Timestamp to use. No default is given, will often be derived from stored content.
 * @param mixed $show_today When calling from outside this function, it is whether to use 'Today' format at all, or override the forum settings and not use it (use it is default). This function also makes use of this function to call itself for formatting the time part of 'Today' dates, and uses this to pass the time-only format back.
 * @param mixed $offset_type The offset type to use when considering the timestamp; Boolean false (default) means to apply forum and user offsets to the given timestamp, 'forum' to apply only the forum's time offset, any other value to bypass any offsets being applied.
 *
 * @return string The formatted time and date, will include localized strings with HTML formatting the case of 'Today' and 'Yesterday' strings.
 */
function timeformat($log_time, $show_today = true, $offset_type = false)
{
	global $context, $txt, $settings;
	static $non_twelve_hour, $year_shortcut, $nowtime, $now;

	// Offset the time.
	if (!$offset_type)
		$time = $log_time + (we::$user['time_offset'] + $settings['time_offset']) * 3600;
	// Just the forum offset?
	else
		$time = $log_time + ($offset_type == 'forum' ? $settings['time_offset'] * 3600 : 0);

	// We can't have a negative date (on Windows, at least.)
	if ($log_time < 0)
		$log_time = 0;

	$format =& we::$user['time_format'];

	// Today and Yesterday?
	if ($show_today === true && $settings['todayMod'] >= 1)
	{
		// Get the current time.
		if (!isset($nowtime))
		{
			$nowtime = forum_time();
			$now = @getdate($nowtime);
		}
		$then = @getdate($time);

		// Try to make something of a time format string...
		$s = strpos($format, '%S') === false ? '' : ':%S';
		if (!strhas($format, array('%H', '%T')))
		{
			$h = strpos($format, '%l') === false ? '%I' : '%l';
			$today_fmt = $h . ':%M' . $s . ' %p';
		}
		else
			$today_fmt = '%H:%M' . $s;

		// Same day of the year, same year.... Today!
		if ($then['yday'] == $now['yday'] && $then['year'] == $now['year'])
			return $txt['today'] . timeformat($log_time, $today_fmt, $offset_type);

		// Day-of-year is one less and same year, or it's the first of the year and that's the last of the year...
		if ($settings['todayMod'] == '2' && (($then['yday'] == $now['yday'] - 1 && $then['year'] == $now['year']) || ($now['yday'] == 0 && $then['year'] == $now['year'] - 1) && $then['mon'] == 12 && $then['mday'] == 31))
			return $txt['yesterday'] . timeformat($log_time, $today_fmt, $offset_type);

		// Is this the current year? Then why bother printing out the year?
		if ($then['year'] == $now['year'])
		{
			if ($format === $txt['time_format'])
				$show_today = $txt['time_format_this_year'];
			else
			{
				// Determine what to delete from the string. This should take care of all common permutations,
				// but we'll give up on more complex formats like Japanese or Chinese (i.e. <year ideogram><year>)
				if (!isset($year_shortcut))
				{
					if (strpos($format, ', %Y') !== false)
						$y = ', %Y';
					elseif (strpos($format, ' %Y') !== false)
						$y = ' %Y';
					elseif (preg_match('~[./-]%Y|%Y[./-]~', $format, $match))
						$y = $match[0];
					$year_shortcut = isset($y) ? $y : false;
				}
				if (!empty($year_shortcut))
					$show_today = str_replace($year_shortcut, '', $format);
			}
		}
	}

	$str = !is_bool($show_today) ? $show_today : $format;

	if (!isset($non_twelve_hour))
		$non_twelve_hour = trim(strftime('%p')) === '';
	if ($non_twelve_hour && strpos($str, '%p') !== false)
		$str = str_replace('%p', strftime('%H', $time) < 12 ? 'am' : 'pm', $str);

	// Do-it-yourself time localization. Fun.
	if (empty(we::$user['setlocale']))
		foreach (array('%a' => 'days_short', '%A' => 'days', '%b' => 'months_short', '%B' => 'months') as $token => $text_label)
			if (strpos($str, $token) !== false)
				$str = str_replace($token, $txt[$text_label][(int) strftime($token === '%a' || $token === '%A' ? '%w' : '%m', $time)], $str);

	// Windows doesn't support %e; on some versions, strftime fails altogether if used, so let's prevent that.
	if ($context['server']['is_windows'] && strpos($str, '%e') !== false)
		$str = str_replace('%e', '%#d', $str);

	if (strpos($str, '%@') !== false)
		$str = str_replace('%@', number_context('day_suffix', (int) strftime('%d', $time), false), $str);

	// Format any other characters..
	return strftime($str, $time);
}

/**
 * Formats a time, and adds "on" if not "today" or "yesterday"
 *
 * @param int $log_time See timeformat()
 * @param mixed $show_today See timeformat()
 * @param mixed $offset_type See timeformat()
 *
 * @return string Same as timeformat(), except that "on" will be shown before numeric dates.
 */
function on_timeformat($log_time, $show_today = true, $offset_type = false)
{
	global $txt;

	$ret = timeformat($log_time, $show_today, $offset_type);
	if (strpos($ret, '<strong>') === false)
		return sprintf($txt['on_date'], $ret);

	return $ret;
}

/**
 * Returns 'On March 21' or 'Today', depending on the date. Not actually used in Wedge, though.
 *
 * @param int $time Human-readable date
 * @param bool $upper Set to true if this starts a sentence or a block
 *
 * @return string Human-readable date in a "on" context.
 */
function on_date($time, $upper = false)
{
	global $txt;

	if (strpos($time, '<strong>') === false)
		return $upper ? ucfirst(sprintf($txt['on_date'], $time)) : sprintf($txt['on_date'], $time);

	return $time;
}

/**
 * Returns the current timestamp (seconds since midnight 1/1/1970) with forum offset and optionally user's preference for time offset.
 *
 * @param bool $use_user_offset Specifies that the time returned should include the user's time offset set in their Look and Layout Preferences.
 * @param mixed $timestamp Specifies a timestamp to be used for calculation; this will return the timestamp modified by the forum/user options. If unspecified or null, return the current time modified by these options.
 *
 * @return int Timestamp since Unix epoch in seconds
 */
function forum_time($use_user_offset = true, $timestamp = null)
{
	global $settings;

	if ($timestamp === null)
		$timestamp = time();

	if ($use_user_offset)
		return $timestamp + ($settings['time_offset'] + we::$user['time_offset']) * 3600;

	return $timestamp + $settings['time_offset'] * 3600;
}

/**
 * A quick helper function to avoid typing these tags everywhere.
 *
 * @param int $timestamp Unix timestamp to transform.
 * @param string $on_time Date formatted through on_timeformat(), if any.
 *
 * @return string A valid <time> tag. Cheers.
 */
function time_tag($timestamp, $on_time = '')
{
	if (!$on_time)
		$on_time = on_timeformat($timestamp);

	return '<time datetime="' . date(DATE_W3C, forum_time(true, $timestamp)) . '">' . $on_time . '</time>';
}

/**
 * Reconverts a number of the translations performed by {@link preparsecode()} with respect to HTML entity characters (e.g. angle brackets, quotes, apostrophes)
 *
 * This function effectively performs htmlspecialchars_decode(ENT_QUOTES) for the important characters, adding to it the apostrophe and non-breaking spaces.
 *
 * @param string $string A string that has been converted through {@link preparsecode()} previously; this ensures the common HTML entities, non breaking spaces and apostrophes are not subject to double conversion or being over-escaped when submitted back to the editor component.
 * @return string The string, with the characters converted back.
 */
function un_htmlspecialchars($string)
{
	return strtr(htmlspecialchars_decode($string, ENT_QUOTES), array('&#039;' => '\'', '&nbsp;' => ' '));
}

/**
 * Returns whether $string contains any $items (can be either a string, or an array of strings.)
 * For the record, this is way faster than preg_match('~elem1|elem2~', $str).
 */
function strhas($string, $items)
{
	foreach ((array) $items as $item)
		if (strpos($string, $item) !== false)
			return $item;

	return false;
}

/**
 * Shortens a string, typically a thread subject, in a way that is intended to avoid breaking in internationalization ways.
 *
 * Specifically, if a string is longer than the specified length, shorten it and add an ellipsis. Internationlized characters and entities are respected as 'one' character for length calculations, and also trailing entities are avoided too.
 *
 * @param string $subject The string of the full subject.
 * @param int $length The maximum length in characters of the shortened string.
 *
 * @return string The shortened string
 */
function shorten_subject($subject, $len)
{
	// It was already short enough!
	if (westr::strlen($subject) <= $len)
		return $subject;

	// Shorten it by the length it was too long, and strip off junk from the end.
	return westr::substr($subject, 0, $len) . '...';
}

/**
 * Just a quick function to convert generic contact list names to be human readable.
 */
function generic_contacts($str)
{
	global $txt;

	if (strpos($str, '{') === false || strpos($str, '}') === false)
		return $str;

	$type = substr($str, 1, -1);
	return isset($txt['contacts_' . $type]) ? $txt['contacts_' . $type] : '<em>' . $type . '</em>';
}

/**
 * Log the current user (even as a guest), as being online and optionally including their current location.
 *
 * - If the theme settings are set to display users in a board or topic, ensure the user is listed as being in those places (adjusting $force as necessary)
 * - If the user is possibly a robot, carry on with spider logging.
 * - If the last time the user was logged online is less than 8 seconds ago, and force is off; exit.
 * - If "Who's Online" is enabled, grab everything from $_GET, plus the user agent, prepare to store it.
 * - Ensure we have their user id, check to see if older things need to be purged and if so, do so.
 * - Log them online, store it in the session, and update how long the user has been online.
 *
 * @param bool $force Whether to force there to be an update of the table or not.
 */
function writeLog($force = false)
{
	global $user_settings, $context, $settings, $topic, $board;

	// If we are showing who is viewing a topic, let's see if we are, and force an update if so - to make it accurate.
	if (!empty($settings['display_who_viewing']) && ($topic || $board))
	{
		// Take the opposite approach!
		$force = true;
		// Don't update for every page - this isn't wholly accurate but who cares.
		if ($topic)
		{
			if (isset($_SESSION['last_topic_id']) && $_SESSION['last_topic_id'] == $topic)
				$force = false;
			$_SESSION['last_topic_id'] = $topic;
		}
	}

	// Are they a spider we should be tracking? Mode = 1 gets tracked on its spider check...
	if (!empty(we::$user['possibly_robot']) && !empty($settings['spider_mode']) && $settings['spider_mode'] > 1)
	{
		loadSource('ManageSearchEngines');
		logSpider();
	}

	// Don't mark them as online more than every so often.
	if (!empty($_SESSION['log_time']) && $_SESSION['log_time'] >= (time() - 8) && !$force)
		return;

	if (!empty($settings['who_enabled']))
	{
		$serialized = $_GET + array('USER_AGENT' => $_SERVER['HTTP_USER_AGENT']);

		// In the case of a dlattach action, session_var may not be set.
		if (!isset($context['session_var']))
		{
			$context['session_var'] = $_SESSION['session_var'];
			$context['session_query'] = $context['session_var'] . '=' . $_SESSION['session_value'];
		}

		unset($serialized[$context['session_var']]);
		$serialized = serialize($serialized);
	}
	else
		$serialized = '';

	// Guests use 0, members use their session ID.
	$session_id = we::$is_guest ? 'ip' . we::$user['ip'] : session_id();

	// Grab the last all-of-Wedge-specific log_online deletion time.
	$do_delete = cache_get_data('log_online-update', 30) < time() - 30;

	// If the last click wasn't a long time ago, and there was a last click...
	if (!empty($_SESSION['log_time']) && $_SESSION['log_time'] >= time() - $settings['lastActive'] * 20)
	{
		if ($do_delete)
		{
			wesql::query('
				DELETE FROM {db_prefix}log_online
				WHERE log_time < {int:log_time}
					AND session != {string:session}',
				array(
					'log_time' => time() - $settings['lastActive'] * 60,
					'session' => $session_id,
				)
			);

			// Cache when we did it last.
			cache_put_data('log_online-update', time(), 30);
		}

		wesql::query('
			UPDATE {db_prefix}log_online
			SET log_time = {int:log_time}, ip = {int:ip}, url = {string:url}
			WHERE session = {string:session}',
			array(
				'log_time' => time(),
				'ip' => get_ip_identifier(we::$user['ip']),
				'url' => $serialized,
				'session' => $session_id,
			)
		);

		// Guess it got deleted.
		if (wesql::affected_rows() == 0)
			$_SESSION['log_time'] = 0;
	}
	else
		$_SESSION['log_time'] = 0;

	// Otherwise, we have to delete and insert.
	if (empty($_SESSION['log_time']))
	{
		if ($do_delete || !empty(we::$id))
			wesql::query('
				DELETE FROM {db_prefix}log_online
				WHERE ' . ($do_delete ? 'log_time < {int:log_time}' : '') . ($do_delete && !empty(we::$id) ? ' OR ' : '') . (empty(we::$id) ? '' : 'id_member = {int:current_member}'),
				array(
					'current_member' => we::$id,
					'log_time' => time() - $settings['lastActive'] * 60,
				)
			);

		wesql::insert($do_delete ? 'ignore' : 'replace',
			'{db_prefix}log_online',
			array('session' => 'string', 'id_member' => 'int', 'id_spider' => 'int', 'log_time' => 'int', 'ip' => 'int', 'url' => 'string'),
			array($session_id, we::$id, empty($_SESSION['id_robot']) ? 0 : $_SESSION['id_robot'], time(), get_ip_identifier(we::$user['ip']), $serialized)
		);
	}

	// Mark your session as being logged.
	$_SESSION['log_time'] = time();

	// Well, they are online now.
	if (empty($_SESSION['timeOnlineUpdated']))
		$_SESSION['timeOnlineUpdated'] = time();

	// Set their login time, if not already done within the last minute.
	if (WEDGE != 'SSI' && !empty(we::$user['last_login']) && we::$user['last_login'] < time() - 60)
	{
		// Don't count longer than 15 minutes.
		if (time() - $_SESSION['timeOnlineUpdated'] > 60 * 15)
			$_SESSION['timeOnlineUpdated'] = time();

		$user_settings['total_time_logged_in'] += time() - $_SESSION['timeOnlineUpdated'];
		updateMemberData(we::$id, array('last_login' => time(), 'member_ip' => we::$user['ip'], 'member_ip2' => $_SERVER['BAN_CHECK_IP'], 'total_time_logged_in' => $user_settings['total_time_logged_in']));

		if (!empty($settings['cache_enable']) && $settings['cache_enable'] >= 2)
			cache_put_data('user_settings-' . we::$id, $user_settings, 60);

		we::$user['total_time_logged_in'] += time() - $_SESSION['timeOnlineUpdated'];
		$_SESSION['timeOnlineUpdated'] = time();
	}
}

/**
 * Ensures the browser is redirected to another location. Should be used after anything is posted to ensure the browser cannot repost the form data.
 *
 * This often marks the end of general processing, since ultimately it diverts execution to {@link obExit()} which means a closedown of processing, buffers and final output. Things to note:
 * - A call is made before continuing to ensure that the mail queue is processed.
 * - Session IDs (where applicable, e.g. for those without cookies) are added in if needed.
 * - The redirect hook is called, just before the actual redirect, in case the hook wishes to alter where redirection occurs.
 * - The source of redirection is noted in the session when in debug mode.
 *
 * @param string $setLocation The string representing the URL. If an internal (into the forum) link, this should be in the form of action=whatever (i.e. without the full domain and path to index.php, or the ?). Note this can be an external URL too.
 * @param bool $refresh Whether to use a Refresh HTTP header or whether to use Location (default).
 */
function redirectexit($setLocation = '', $refresh = false, $permanent = false)
{
	global $context, $db_show_debug, $db_cache;

	// In case we have mail to send, better do that - as obExit doesn't always quite make it...
	if (!empty($context['flush_mail']))
		AddMailQueue(true);

	$setLocation = str_replace('<URL>', SCRIPT, $setLocation);

	if ($is_internal = !preg_match('~^(?:http|ftp)s?://~', $setLocation))
		$setLocation = SCRIPT . ($setLocation != '' ? '?' . $setLocation : '');

	// Put the session ID in.
	if (defined('SID') && SID != '')
		$setLocation = preg_replace('/^' . preg_quote(SCRIPT, '/') . '(?!\?' . preg_quote(SID, '/') . ')\\??/', SCRIPT . '?' . SID . ';', $setLocation);
	// Keep that debug in their for template debugging!
	elseif (isset($_GET['debug']))
		$setLocation = preg_replace('/^' . preg_quote(SCRIPT, '/') . '\\??/', SCRIPT . '?debug;', $setLocation);

	// Redirections should be prettified too
	if ($is_internal)
		$setLocation = prettify_urls($setLocation);

	// Maybe hooks want to change where we are heading?
	call_hook('redirect', array(&$setLocation, &$refresh));

	if ($permanent)
		header('HTTP/1.1 301 Moved Permanently');

	// We send a Refresh header only in special cases because Location looks better. And is quicker...
	if ($refresh)
		header('Refresh: 0; URL=' . strtr($setLocation, array(' ' => '%20')));
	else
		header('Location: ' . str_replace(' ', '%20', $setLocation));

	// Debugging.
	if (!empty($db_show_debug))
		$_SESSION['debug_redirect'] = $db_cache;

	obExit(false);
}

/**
 * Takes random URLs, and turns them into pretty URLs if enabled.
 *
 * @param string $inputs The string representing the URL, or an array of them. If the pretty URLs feature is disabled, the entry will be returned untouched.
 * @return string The prettified URL(s).
 */
function prettify_urls($inputs)
{
	global $settings;

	if (empty($settings['pretty_enable_filters']))
		return $inputs;

	loadSource('PrettyUrls-Filters');
	$is_single = !is_array($inputs);
	$inputs = (array) $inputs;
	foreach ($inputs as &$input)
	{
		$url = array(0 => array('url' => str_replace(SCRIPT, '', $input)));
		foreach ($settings['pretty_filters'] as $id => $enabled)
		{
			$func = 'pretty_filter_' . $id;
			if ($enabled)
				$func($url);
			if (isset($url[0]['replacement']))
				break;
		}
		if (isset($url[0]['replacement']))
			$input = $url[0]['replacement'];
		$input = strtr($input, "\x12", '\'');
		$input = preg_replace(array('~;+|=;~', '~\?;~', '~[?;=]#|&amp;#~', '~[?;=#]$|&amp;$~'), array(';', '?', '#', ''), $input);
	}
	return $is_single ? $inputs[0] : $inputs;
}

/**
 * Log changes in the state of the forum, such as moderation events or administrative changes.
 *
 * @param string $action A code for the report; a list of such strings can be found in Modlog.{language}.php (modlog_ac_ strings)
 * @param array $extra An associated array of parameters for the item being logged. Typically this will include 'topic' for the topic's id.
 * @param string $log_type A string reflecting the type of log, moderate for moderation actions (e.g. thread changes), admin for administrative actions.
 */
function logAction($action, $extra = array(), $log_type = 'moderate')
{
	global $settings;

	$log_types = array(
		'moderate' => 1,
		'user' => 2,
		'admin' => 3,
	);

	// No point in doing anything else, if the relevant log isn't even enabled.
	if (!isset($log_types[$log_type]) || empty($settings['log_enabled_' . $log_type]))
		return false;

	if (!is_array($extra))
		trigger_error('logAction(): data is not an array with action \'' . $action . '\'', E_USER_NOTICE);

	// Pull out the parts we want to store separately, but also make sure that the data is proper
	if (isset($extra['topic']))
	{
		if (!is_numeric($extra['topic']))
			trigger_error('logAction(): data\'s topic is not a number', E_USER_NOTICE);
		$topic_id = empty($extra['topic']) ? '0' : (int)$extra['topic'];
		unset($extra['topic']);
	}
	else
		$topic_id = '0';

	if (isset($extra['message']))
	{
		if (!is_numeric($extra['message']))
			trigger_error('logAction(): data\'s message is not a number', E_USER_NOTICE);
		$msg_id = empty($extra['message']) ? '0' : (int)$extra['message'];
		unset($extra['message']);
	}
	else
		$msg_id = '0';

	// Is there an associated report on this?
	if (in_array($action, array('move', 'remove', 'split', 'merge')))
	{
		$request = wesql::query('
			SELECT id_report
			FROM {db_prefix}log_reported
			WHERE {raw:column_name} = {int:reported}
			LIMIT 1',
			array(
				'column_name' => !empty($msg_id) ? 'id_msg' : 'id_topic',
				'reported' => !empty($msg_id) ? $msg_id : $topic_id,
		));

		// Alright, if we get any result back, update open reports.
		if (wesql::num_rows($request) > 0)
		{
			loadSource('ModerationCenter');
			updateSettings(array('last_mod_report_action' => time()));
			recountOpenReports();
		}
		wesql::free_result($request);
	}

	if (isset($extra['member']) && !is_numeric($extra['member']))
		trigger_error('logAction(): data\'s member is not a number', E_USER_NOTICE);

	if (isset($extra['board']))
	{
		if (!is_numeric($extra['board']))
			trigger_error('logAction(): data\'s board is not a number', E_USER_NOTICE);
		$board_id = empty($extra['board']) ? '0' : (int)$extra['board'];
		unset($extra['board']);
	}
	else
		$board_id = '0';

	if (isset($extra['board_to']))
	{
		if (!is_numeric($extra['board_to']))
			trigger_error('logAction(): data\'s board_to is not a number', E_USER_NOTICE);
		if (empty($board_id))
		{
			$board_id = empty($extra['board_to']) ? '0' : (int)$extra['board_to'];
			unset($extra['board_to']);
		}
	}

	wesql::insert('',
		'{db_prefix}log_actions',
		array(
			'log_time' => 'int', 'id_log' => 'int', 'id_member' => 'int', 'ip' => 'int', 'action' => 'string',
			'id_board' => 'int', 'id_topic' => 'int', 'id_msg' => 'int', 'extra' => 'string-65534',
		),
		array(
			time(), $log_types[$log_type], MID, get_ip_identifier(we::$user['ip']), $action,
			$board_id, $topic_id, $msg_id, serialize($extra),
		)
	);

	return wesql::insert_id();
}

/**
 * Track changes in statistics of the forum, through the life of the page, and commit them at the end of page generation.
 *
 * The stats array passed to this function is a key/value pair, the value may well be a '+' to indicate an increment of a field, otherwise it will be treated as the real value.
 *
 * @param mixed $stats Nominally a key/value pair array, listing one or more changes to master stats, in the log_activity table. Submit boolean false to flush changes to the table.
 * @return bool As to whether the changes are logged and flushed, or whether they are not being processed.
 */
function trackStats($stats = array())
{
	global $settings;
	static $cache_stats = array();

	if (empty($settings['trackStats']))
		return false;
	if (!empty($stats))
		return $cache_stats = array_merge($cache_stats, $stats);
	elseif (empty($cache_stats))
		return false;

	$setStringUpdate = '';
	$insert_keys = array();
	$date = strftime('%Y-%m-%d', forum_time(false));
	$update_parameters = array(
		'current_date' => $date,
	);
	foreach ($cache_stats as $field => $change)
	{
		$setStringUpdate .= '
			' . $field . ' = ' . ($change === '+' ? $field . ' + 1' : '{int:' . $field . '}') . ',';

		if ($change === '+')
			$cache_stats[$field] = 1;
		else
			$update_parameters[$field] = $change;
		$insert_keys[$field] = 'int';
	}

	wesql::query('
		UPDATE {db_prefix}log_activity
		SET' . substr($setStringUpdate, 0, -1) . '
		WHERE date = {date:current_date}',
		$update_parameters
	);
	if (wesql::affected_rows() == 0)
	{
		wesql::insert('ignore',
			'{db_prefix}log_activity',
			array_merge($insert_keys, array('date' => 'date')),
			array_merge($cache_stats, array($date))
		);
	}

	// Don't do this again.
	$cache_stats = array();

	return true;
}

/**
 * Retrieves an associative array with topic IDs and their corresponding number of unread posts.
 *
 * @param string $posts An array of topics, as returned by ssi_recentTopics() for instance.
 * @param boolean $straight_list Set to true if you want to provide a direct array of topic IDs.
 */
function get_unread_numbers($posts, $straight_list = false)
{
	$has_unread = $nb_new = array();
	if (we::$is_member)
	{
		if ($straight_list)
			$has_unread = $posts;
		else
			foreach ($posts as $post)
				if (!empty($post['is_new']))
					$has_unread[] = $post['topic'];
	}

	if (empty($has_unread))
		return array();

	$request = wesql::query('
		SELECT COUNT(DISTINCT m.id_msg) AS co, m.id_topic
		FROM {db_prefix}messages AS m
			LEFT JOIN {db_prefix}log_topics AS lt ON (lt.id_topic = m.id_topic AND lt.id_member = {int:id_member})
			LEFT JOIN {db_prefix}log_mark_read AS lmr ON (lmr.id_board = m.id_board AND lmr.id_member = {int:id_member})
		WHERE m.id_topic IN ({array_int:has_unread})
			AND (m.id_msg > IFNULL(lt.id_msg, IFNULL(lmr.id_msg, 0)))
		GROUP BY m.id_topic',
		array(
			'id_member' => MID,
			'has_unread' => $has_unread
		)
	);
	while ($row = wesql::fetch_assoc($request))
		$nb_new[$row['id_topic']] = $row['co'];
	wesql::free_result($request);

	return $nb_new;
}

/**
 * Attempt to check whether a given user has been carrying out specific actions repeatedly, faster than a given frequency.
 *
 * Different actions take different periods of time. Each action also has a fatal message when triggered (and suspends execution), and the messages are based on the action, suffixed with 'WaitTime_broken' and which are specified in Errors.{language}.php.
 *
 * @param string $error_type The action whose frequency is being checked.
 */
function spamProtection($error_type)
{
	global $settings;

	// Certain types take less/more time.
	$timeOverrides = array(
		'login' => 2,
		'register' => 2,
		'sendtopc' => $settings['spamWaitTime'] * 4,
		'sendmail' => $settings['spamWaitTime'] * 5,
		'report' => $settings['spamWaitTime'] * 4,
		'search' => !empty($settings['search_floodcontrol_time']) ? $settings['search_floodcontrol_time'] : 1,
	);

	// Moderators are free...
	if (!allowedTo('moderate_board'))
		$timeLimit = isset($timeOverrides[$error_type]) ? $timeOverrides[$error_type] : $settings['spamWaitTime'];
	else
		$timeLimit = 2;

	// Delete old entries...
	wesql::query('
		DELETE FROM {db_prefix}log_floodcontrol
		WHERE log_time < {int:log_time}
			AND log_type = {string:log_type}',
		array(
			'log_time' => time() - $timeLimit,
			'log_type' => $error_type,
		)
	);

	// Add a new entry, deleting the old if necessary.
	wesql::insert('replace',
		'{db_prefix}log_floodcontrol',
		array('ip' => 'int', 'log_time' => 'int', 'log_type' => 'string'),
		array(get_ip_identifier(we::$user['ip']), time(), $error_type)
	);

	// If affected is 0 or 2, it was there already.
	if (wesql::affected_rows() != 1)
	{
		// Spammer! You only have to wait a *few* seconds!
		fatal_lang_error($error_type . 'WaitTime_broken', false, array($timeLimit));
		return true;
	}

	// They haven't posted within the limit.
	return false;
}

/**
 * Mozilla sometimes does prefetching. This is hard on the server, so prevent it in time-critical functions.
 * The $always parameter allows us to pass alternative conditions to send a 403 error.
 */
function preventPrefetch($always = false)
{
	global $settings;

	if ($always || (empty($settings['allow_prefetching']) && isset($_SERVER['HTTP_X_MOZ']) && $_SERVER['HTTP_X_MOZ'] == 'prefetch'))
	{
		while (@ob_end_clean());
		header('HTTP/1.1 403' . ($always ? '' : ' Prefetch') . ' Forbidden');
		exit;
	}
}

/**
 * Get a response prefix (like 'Re:') in the default forum language.
 */
function getRePrefix()
{
	global $context, $settings, $txt;

	if (!isset($context['response_prefix']) && ($context['response_prefix'] = cache_get_data('response_prefix', 600)) === null)
	{
		if ($settings['language'] === we::$user['language'])
			$context['response_prefix'] = $txt['response_prefix'];
		else
		{
			$realtxt = $txt;
			loadLanguage('index', $settings['language'], false);
			$context['response_prefix'] = $txt['response_prefix'];
			$txt = $realtxt;
		}
		cache_put_data('response_prefix', $context['response_prefix'], 600);
	}
}

/**
 * Determines whether an email address is malformed or not.
 */
function is_valid_email($email)
{
	return filter_var($email, FILTER_VALIDATE_EMAIL);
}

/**
 * Gets the size of an image specified by a URL.
 *
 * Notes:
 * - Used for remote avatars that aren't downloaded, regular images (to check they're not oversized), signature images and so on.
 * - Attempts to use getimagesize with the provided URL bare if no match to a conventional URL fails (i.e. no protocol listed)
 * - If a protocol is listed, attempt to connect to the server normally (half second timeout), and send an HTTP HEAD request to establish the file exists. If so, do a second request to actually get the data and pipe it into imagecreatefromstring() to be able to assess it.
 * - If this took more than 0.8 seconds in total, cache the result.
 *
 * @param string $url A URL presumably containing an image, whose dimensions are requested.
 * @return mixed Returns false if not able to obtain the image (either unknown format, or file not found), or an indexed array of (x,y) dimensions.
 */
function url_image_size($url)
{
	// Make sure it is a proper URL.
	$url = str_replace(' ', '%20', $url);

	// Can we pull this from the cache... please please?
	if (($temp = cache_get_data('url_image_size-' . md5($url), 240)) !== null)
		return $temp;
	$t = microtime(true);

	// Get the host to pester...
	preg_match('~^\w+://(.+?)/(.*)$~', $url, $match);

	// OK, so whatever happens, we will need to get the image. We could use built-in methods here but there's no point downloading a huge file
	// when invariably we only want the header and, generally, we can do the job ourselves anyway.

	if ($url == '' || $url === 'http://' || $url === 'https://')
		return false;

	loadSource('Class-WebGet');
	try
	{
		$weget = new weget($url);
		$weget->addRange(0, 16383); // While 1KB would be enough for most image types, it might not be for some JPEG variants, for which 16KB is much more likely to work.
		$weget->addHeader('Accept', 'image/png,image/gif,image/jpeg;q=0.9,*/*;q=0.8');
		$data = $weget->get();
	}
	catch (Exception $e)
	{
		// We really do not care about the exception in these cases, so silently failing with a negative response is acceptable.
		return false;
	}

	if ($data !== false)
	{
		// OK, so we have the file header. Now let's do something useful with it. GIF max sizes are 16 bit each way.
		if (strpos($data, 'GIF8') === 0)
		{
			// It's a GIF. Doesn't really matter which subformat though. Note that things are little endian.
			$width = (ord(substr($data, 7, 1)) << 8) + (ord(substr($data, 6, 1)));
			$height = (ord(substr($data, 9, 1)) << 8) + (ord(substr($data, 8, 1)));

			if (!empty($width))
				$size = array($width, $height);
		}
		elseif (strpos($data, "\89PNG") === 0)
		{
			// Seems to be a PNG. Let's look for the signature of the header chunk, minimum 12 bytes in. PNG max sizes are (signed) 32 bits each way.
			$pos = strpos($data, 'IHDR');
			if ($pos >= 12)
			{
				$width = (ord(substr($data, $pos + 4, 1)) << 24) + (ord(substr($data, $pos + 5, 1)) << 16) + (ord(substr($data, $pos + 6, 1)) << 8) + (ord(substr($data, $pos + 7, 1)));
				$height = (ord(substr($data, $pos + 8, 1)) << 24) + (ord(substr($data, $pos + 9, 1)) << 16) + (ord(substr($data, $pos + 10, 1)) << 8) + (ord(substr($data, $pos + 11, 1)));
				if ($width > 0 && $height > 0)
					$size = array($width, $height);
			}
		}
		elseif (strpos($data, "\xFF\xD8") === 0)
		{
			// JPEG? Hmm, JPEG is tricky. Well, we found the SOI marker as expected and an APP0 marker, so good chance it is JPEG compliant.
			// Need to step through the file looking for JFIF blocks.
			$pos = 2;
			$filelen = strlen($data);
			while ($pos < $filelen)
			{
				$length = (ord(substr($data, $pos + 2, 1)) << 8) + (ord(substr($data, $pos + 3, 1)));
				$block = substr($data, $pos, 2);
				if ($block == "\xFF\xC0" || $block == "\xFF\xC2")
					break;

				$pos += $length + 2;
			}

			if ($pos > 2)
			{
				// Big endian. SOF block is marker (2 bytes), block size (2 bytes), bits/pixel density (1 byte), image height (2 bytes), image width (2 bytes)
				$width = (ord(substr($data, $pos + 7, 1)) << 8) + (ord(substr($data, $pos + 8, 1)));
				$height = (ord(substr($data, $pos + 5, 1)) << 8) + (ord(substr($data, $pos + 6, 1)));
				if ($width > 0 && $height > 0)
					$size = array($width, $height);
			}
		}
	}

	// If we didn't get it, we failed.
	if (!isset($size))
		$size = false;

	// If this took a long time, we may never have to do it again, but then again we might...
	if (microtime(true) - $t > 0.8)
		cache_put_data('url_image_size-' . md5($url), $size, 240);

	// Didn't work.
	return $size;
}

/**
 * Begin to prepare $context for the theme.
 *
 * Several operations are performed:
 * - Prevent multiple runs of the function unless necessary.
 * - Check whether in maintenance.
 * - Prepare the current time, current action and whether to show quick login to guests (for the theme to optionally display).
 * - Prepare the news items (load, split from the one entry in the admin option, randomize the other).
 * - Get various user details (or defaults for guests) such as number of PMs, avatar.
 * - Call {@link setupMenuContext()} to load the main menu.
 * - Load the JavaScript if we need that to resize the user information area's instance of the avatar.
 * - Load a few details about the latest member and current forum-wide stats.
 * - Set the page title and meta keywords.
 */
function setupThemeContext($forceload = false)
{
	global $settings, $context, $options, $txt, $maintenance;
	static $loaded = false;

	// Under SSI this function can be called more then once. That can cause some problems.
	// So only run the function once unless we are forced to run it again.
	if ($loaded && !$forceload)
		return;

	$loaded = true;

	$context['in_maintenance'] = !empty($maintenance);
	$context['current_time'] = timeformat(time(), false);

	// Get some news...
	$context['news_lines'] = cache_quick_get('news_lines', 'ManageNews', 'cache_getNews', array());
	// Apply permissions to that little lot. We can't do that at cache time because we need to expressly fetch everything.
	foreach ($context['news_lines'] as $id => &$item)
	{
		// The letter is allowed to be e, m, s or a for everyone, signed-in members, staff or admins only
		switch ($item[0])
		{
			case 'a':
				if (!we::$is_admin && !allowedTo('admin_forum'))
				{
					unset($context['news_lines'][$id]);
					continue;
				}
				break;
			case 's':
				if (!we::$is_admin && !allowedTo(array('moderate_forum', 'moderate_board')))
				{
					unset($context['news_lines'][$id]);
					continue;
				}
				break;
			case 'm':
				if (we::$is_guest)
				{
					unset($context['news_lines'][$id]);
					continue;
				}
				break;
		}

		$item = substr($item, 1);
	}
	$context['fader_news_lines'] = array();
	// Gotta be special for the javascript.
	foreach ($context['news_lines'] as $i => $item)
		$context['fader_news_lines'][$i] = strtr(addslashes($item), array('/' => '\/', '<a href=' => '<a hre" + "f='));

	$context['random_news_line'] = !empty($context['news_lines']) ? $context['news_lines'][array_rand($context['news_lines'])] : '';

	if (we::$is_member)
	{
		// Personal message popup...
		we::$user['popup_messages'] = we::$user['unread_messages'] > (isset($_SESSION['unread_messages']) ? $_SESSION['unread_messages'] : 0);
		$_SESSION['unread_messages'] = we::$user['unread_messages'];

		if (allowedTo('moderate_forum'))
			$context['unapproved_members'] = (!empty($settings['registration_method']) && $settings['registration_method'] == 2) || !empty($settings['approveAccountDeletion']) ? $settings['unapprovedMembers'] : 0;

		$avatar =& we::$user['avatar'];

		// Figure out the avatar... uploaded?
		if ($avatar['url'] == '' && !empty($avatar['id_attach']))
			$avatar['href'] = $avatar['custom_dir'] ? $settings['custom_avatar_url'] . '/' . $avatar['filename'] : '<URL>?action=dlattach;attach=' . $avatar['id_attach'] . ';type=avatar';
		// Full URL?
		elseif (strpos($avatar['url'], 'http://') === 0)
		{
			$avatar['href'] = $avatar['url'];

			if ($settings['avatar_action_too_large'] == 'option_html_resize' || $settings['avatar_action_too_large'] == 'option_js_resize')
			{
				if (!empty($settings['avatar_max_width_external']))
					$avatar['width'] = $settings['avatar_max_width_external'];
				if (!empty($settings['avatar_max_height_external']))
					$avatar['height'] = $settings['avatar_max_height_external'];
			}
		}
		// Gravatar?
		elseif (strpos($avatar['url'], 'gravatar://') === 0)
		{
			if ($avatar['url'] === 'gravatar://' || empty($settings['gravatarAllowExtraEmail']))
				$avatar['href'] = get_gravatar_url(we::$user['email']);
			else
				$avatar['href'] = get_gravatar_url(substr($avatar['url'], 11));

			if (!empty($settings['avatar_max_width_external']))
				$avatar['width'] = $settings['avatar_max_width_external'];
			if (!empty($settings['avatar_max_height_external']))
				$avatar['height'] = $settings['avatar_max_height_external'];
		}
		// Otherwise we assume it's server-stored?
		elseif ($avatar['url'] != '')
			$avatar['href'] = AVATARS . '/' . htmlspecialchars($avatar['url']);

		$opaque = !empty($avatar['id_attach']) && $avatar['transparent'] ? '' : 'opaque ';

		if (!empty($avatar['href']))
			$avatar['image'] = '<img class="' . $opaque . 'avatar" src="' . $avatar['href'] . '"' . (isset($avatar['width']) ? ' width="' . $avatar['width'] . '"' : '') . (isset($avatar['height']) ? ' height="' . $avatar['height'] . '"' : '') . '>';

		// Figure out how long they've been logged in.
		we::$user['total_time_logged_in'] = array(
			'days' => floor(we::$user['total_time_logged_in'] / 86400),
			'hours' => floor((we::$user['total_time_logged_in'] % 86400) / 3600),
			'minutes' => floor((we::$user['total_time_logged_in'] % 3600) / 60)
		);
	}
	else
	{
		we::$user['total_time_logged_in'] = array('days' => 0, 'hours' => 0, 'minutes' => 0);
		we::$user['popup_messages'] = false;

		if (!empty($settings['registration_method']) && $settings['registration_method'] == 1)
			$txt['welcome_guest'] .= $txt['welcome_guest_activate'];

		// If we've upgraded recently, go easy on the passwords.
		if (!empty($settings['disableHashTime']) && ($settings['disableHashTime'] == 1 || time() < $settings['disableHashTime']))
			$context['disable_login_hashing'] = true;
	}

	// Setup the main menu items.
	setupMenuContext();

	// This is done to allow theme authors to customize it as they want.
	$context['show_pm_popup'] = we::$user['popup_messages'] && !empty($options['popup_messages']) && $context['action'] !== 'pm';

	// Resize avatars the fancy, but non-GD requiring way.
	if ($settings['avatar_action_too_large'] == 'option_js_resize' && (!empty($settings['avatar_max_width_external']) || !empty($settings['avatar_max_height_external'])))
	{
		// Add avasize.js to the list of files to load, and hide its filename.
		// Usually we'd want to show it but since it's a site-wide feature, it's okay to hide it.
		// !! It would be a good idea to delete the script cache when the setting is changed, though.
		if (!empty($context['main_js_files']))
			$context['main_js_files']['avasize.js'] = false;

		add_js('
	var we_avatarMaxSize = [' . (int) $settings['avatar_max_width_external'] . ', ' . (int) $settings['avatar_max_height_external'] . '];
	$(window).load(we_avatarResize);');
	}

	// This looks weird, but it's because Boards.php references the variable.
	$context['common_stats']['latest_member'] = array(
		'id' => $settings['latestMember'],
		'name' => $settings['latestRealName'],
		'href' => '<URL>?action=profile;u=' . $settings['latestMember'],
		'link' => '<a href="<URL>?action=profile;u=' . $settings['latestMember'] . '">' . $settings['latestRealName'] . '</a>',
	);
	$context['common_stats'] = array(
		'total_posts' => comma_format($settings['totalMessages']),
		'total_topics' => comma_format($settings['totalTopics']),
		'total_members' => comma_format($settings['totalMembers']),
		'latest_member' => $context['common_stats']['latest_member'],
	);

	if (!isset($context['page_title']))
		$context['page_title'] = '';
}

/**
 * Establish the full encrypted filename where the details are specified in the database (for serving attachments). This should be used in preference to the legacy system; the filenames used by this system are more secure than the legacy function by ensuring there is a non-trivially-guessable component in the filename.
 *
 * @param string $filename The original unedited filename of the file to be served.
 * @param int $attachment_id The numeric attachment id, which forms part of the attachment filename.
 * @param mixed $dir If using multiple attachment folders, this should be set to the folder id.
 * @param bool $new If true (this is a new file being attached), generate and return the hash that should subsequently be used.
 * @param string $file_hash The file hash previously generated, which forms part of the attachment filename.
 * @return string The full path to the file that contains the stated attachment.
 */
function getAttachmentFilename($filename, $attachment_id, $dir = null, $new = false, $file_hash = '')
{
	global $settings;

	// Just make up a nice hash...
	if ($new)
		return sha1(md5($filename . time()) . mt_rand());

	// Grab the file hash if it wasn't added.
	if ($file_hash === '')
	{
		$request = wesql::query('
			SELECT file_hash
			FROM {db_prefix}attachments
			WHERE id_attach = {int:id_attach}',
			array(
				'id_attach' => $attachment_id,
		));

		if (wesql::num_rows($request) === 0)
			return false;

		list ($file_hash) = wesql::fetch_row($request);
		wesql::free_result($request);
	}

	// In case of files from the old system, do a legacy call.
	if (empty($file_hash))
	{
		loadSource('ManageAttachments');
		return getLegacyAttachmentFilename($filename, $attachment_id, $dir, $new);
	}

	// Are we using multiple directories?
	if (!empty($settings['currentAttachmentUploadDir']))
	{
		if (!is_array($settings['attachmentUploadDir']))
			$settings['attachmentUploadDir'] = unserialize($settings['attachmentUploadDir']);
		$path = $settings['attachmentUploadDir'][$dir];
	}
	else
		$path = $settings['attachmentUploadDir'];

	return $path . '/' . $attachment_id . '_' . $file_hash . '.ext';
}

/**
 * Converts a single IP string in Wedge terms into an array showing ranges, which is suitable for database use.
 *
 * @param string $fullip A string in Wedge format representing a single IP address, a range or wildcard (e.g. 127.0.0.1, 127.0.0.10-20 or 127.0.0.*) - if 'unknown' is passed, the effective IP address will be 255.255.255.255.
 * @return array An array of 4 elements, representing each dotted number. Each element consists of a subarray, with 'low' and 'high' elements showing the limits of the range. For a single IP dot component, these will be the same (1 in the 127.0.0.1 example); for a range it will be the lower and upper bounds (10 and 20 respectively for 127.0.0.10-20); for a wildcard it will use 0-255 instead of the *.
 */
function ip2range($fullip)
{
	// Pretend that 'unknown' is 255.255.255.255. (since that can't be an IP anyway.)
	if ($fullip == 'unknown')
		$fullip = '255.255.255.255';

	$ip_parts = explode('.', $fullip);
	$ip_array = array();

	if (count($ip_parts) != 4)
		return array();

	for ($i = 0; $i < 4; $i++)
	{
		if ($ip_parts[$i] == '*')
			$ip_array[$i] = array('low' => '0', 'high' => '255');
		elseif (preg_match('/^(\d{1,3})\-(\d{1,3})$/', $ip_parts[$i], $range) == 1)
			$ip_array[$i] = array('low' => $range[1], 'high' => $range[2]);
		elseif (is_numeric($ip_parts[$i]))
			$ip_array[$i] = array('low' => $ip_parts[$i], 'high' => $ip_parts[$i]);
	}

	return $ip_array;
}

/**
 * Matches IPv4 addresses against an IP range specified in CIDR format.
 *
 * Bots invariably occupy IP ranges; this allows us to specify netblocks to exclude that are more in line with the sorts of behavior we will be checking for.
 *
 * @param string $ip A regular IP address in Wedge internal format (32 hex characters)
 * @param mixed $cidr_block A single IP in netblock format as a string, or an array of similar (e.g. 10.0.0.0/8)
 * @return bool Whether the individual CIDR netblock matched or not (can be recursive)
 */
function match_cidr($ip, $cidr_block)
{
	if (is_array($cidr_block))
	{
		foreach ($cidr_block as $cidr)
			if (match_cidr($ip, $cidr))
				return true;
	}
	else
	{
		// If no subnet is specified, there's no need to do anything but a straight comparison.
		if (strpos($cidr_block, '/') === false)
		{
			$cidr_block = expand_ip($cidr_block);
			return $cidr_block == $ip;
		}

		list ($cidr_ip, $mask) = explode('/', $cidr_block);
		$cidr_ip = expand_ip($cidr_ip);

		$mask = (strpos($cidr_block, ':') !== false ? 128 : 32) - $mask;

		// OK, can we do a simple case, where the mask hits a digit boundary?
		if ($mask % 4 == 0)
		{
			$len = 32 - $mask / 4;
			return (substr($cidr_ip, 0, $len) === substr($ip, 0, $len));
		}
		else
		{
			// Bah, guess not. Time to get complicated.
			$whole_digits = 32 - ceil($mask / 4);
			if (substr($cidr_ip, 0, $whole_digits) != substr($ip, 0, $whole_digits))
				return false;

			// OK, so we need to figure out what's going on with these last digits.
			$cidr_ip = substr($cidr_ip, $whole_digits, 1);
			$ip = substr($ip, $whole_digits, 1);

			$mask = 16 - (2 ^ ($mask % 4));
			return ($cidr_ip & $mask) == ($ip & $mask);
		}
	}
	return false;
}

/**
 * Attempts to look up the hostname from a given IP address.
 *
 * Multiple steps are taken in the pursuit of a hostname.
 * - Load from cache if the IP address has been looked up in the last 5 minutes, and was previously slow
 * - On Linux, attempt to call the 'host' command with shell_exec
 * - On Windows and specific Unix configurations, attempt to call 'nslookup' with shell_exec
 * - Failing those, call {@link gethostbyaddr()}
 * - If slow, cache the result
 *
 * @param string $ip A single IP address, normally formatted.
 * @return string If possible, the hostname associated with that IP address, or empty string if that was not possible.
 */
function host_from_ip($ip)
{
	global $settings;

	if (($host = cache_get_data('hostlookup-' . $ip, 600)) !== null)
		return $host;
	$t = microtime(true);

	if (is_callable('dns_get_record') && !isset($host))
	{
		$arpa = '';
		// IPv4 style first, x.y.z.a becomes a.z.y.x
		if (preg_match('~\d{2,3}(\.\d{1,3}){3}~', $ip))
			$arpa = implode('.', array_reverse(explode('.', $ip))) . '.in-addr.arpa';
		else
		{
			// IPv6, abcd:efgh:ijkl:mnop:qrst:uvwx:yz12:3456 becomes 6.5.4.3.2.1.z.y.x.w.v.u.t.s.r.q.p.o.n.m.l.k.j.i.h.g.f.e.d.c.b.a
			// Yes, really.
			$ipv6 = expand_ip($ip);
			if ($ipv6 != INVALID_IP)
				$arpa = implode('.', str_split(strrev($ipv6))) . '.ip6.arpa';
		}

		if (!empty($arpa))
		{
			$details = @dns_get_record($arpa, DNS_ALL);
			if (is_array($details))
				foreach ($details as $contents)
					if ($contents['type'] == 'PTR' && !empty($contents['target']))
					{
						$host = $contents['target'];
						break;
					}
		}
	}

	// Try the Linux host command, perhaps?
	if (!isset($host) && (strpos(strtolower(PHP_OS), 'win') === false || strpos(strtolower(PHP_OS), 'darwin') !== false) && mt_rand(0, 1) == 1)
	{
		if (!isset($settings['host_to_dis']))
			$test = @shell_exec('host -W 1 ' . @escapeshellarg($ip));
		else
			$test = @shell_exec('host ' . @escapeshellarg($ip));

		// Did host say it didn't find anything?
		if (strpos($test, 'not found') !== false)
			$host = '';
		// Invalid server option?
		elseif ((strpos($test, 'invalid option') || strpos($test, 'Invalid query name 1')) && !isset($settings['host_to_dis']))
			updateSettings(array('host_to_dis' => 1));
		// Maybe it found something, after all?
		elseif (preg_match('~\s([^\s]+?)\.\s~', $test, $match) == 1)
			$host = $match[1];
	}

	// This is nslookup; usually only Windows, but possibly some Unix?
	if (!isset($host) && strpos(strtolower(PHP_OS), 'win') !== false && strpos(strtolower(PHP_OS), 'darwin') === false && mt_rand(0, 1) == 1)
	{
		$test = @shell_exec('nslookup -timeout=1 ' . @escapeshellarg($ip));
		if (strpos($test, 'Non-existent domain') !== false)
			$host = '';
		elseif (preg_match('~Name:\s+([^\s]+)~', $test, $match) == 1)
			$host = $match[1];
	}

	// This is the last try :/.
	if (!isset($host) || $host === false)
		$host = @gethostbyaddr($ip);

	// It took a long time, so let's cache it!
	if (microtime(true) - $t > 0.5)
		cache_put_data('hostlookup-' . $ip, $host, 600);

	return $host;
}

/**
 * Breaks a string up into word-units, primarily for the purposes of searching and related code.
 *
 * This function is used surprisingly often, not only for the actual business of searching, but also maintaining custom indexes on the text too.
 *
 * @param string $text The original text that is to be processed. Assumed to be from a post or other case where entities will be present.
 * @param mixed $max_chars When $encrypt is true, this is the maximum number of bytes to use in the integer hashes for each word (typically 2-4); when $encrypt is false, the maximum number of letters in each 'word', null for no limit.
 * @param bool $encrypt Whether to hash the words into integer hashes or not. This is off by default; it is only used for custom indexes, other search methods do not normally require this to be provided to them.
 * @return array Returns an array of strings (if $encrypt is false) or an array of integers (if $encrypt is true) representing the unique words found in the source $text.
 */
function text2words($text, $max_chars = 20, $encrypt = false)
{
	// Step 1: Remove entities/things we don't consider words:
	$words = preg_replace('~(?:[\x0B\0\x{A0}\t\r\s\n(){}\\[\\]<>!@$%^*.,:+=`\~?/\\\\]+|&(?:amp|lt|gt|quot);)+~u', ' ', strtr($text, array('<br>' => ' ')));

	// Step 2: Entities we left to letters, where applicable, lowercase.
	$words = un_htmlspecialchars(westr::strtolower($words));

	// Step 3: Ready to split apart and index!
	$words = explode(' ', $words);

	if ($encrypt)
	{
		$possible_chars = array_flip(array_merge(range(46, 57), range(65, 90), range(97, 122)));
		$returned_ints = array();
		foreach ($words as $word)
		{
			if (($word = trim($word, '-_\'')) !== '')
			{
				$encrypted = substr(crypt($word, 'uk'), 2, $max_chars);
				$total = 0;
				for ($i = 0; $i < $max_chars; $i++)
					$total += $possible_chars[ord($encrypted{$i})] * pow(63, $i);
				$returned_ints[] = $max_chars == 4 ? min($total, 16777215) : $total;
			}
		}
		return array_unique($returned_ints);
	}
	else
	{
		// Trim characters before and after and add slashes for database insertion.
		$returned_words = array();
		foreach ($words as $word)
			if (($word = trim($word, '-_\'')) !== '')
				$returned_words[] = $max_chars === null ? $word : substr($word, 0, $max_chars);

		// Filter out all words that occur more than once.
		return array_unique($returned_words);
	}
}

/**
 * This function handles the processing of the main application menu presented to the user.
 *
 * Notes:
 * - It defines every master item in the menu, as well as any sub-items it may have.
 * - It also matches the current action against the list of items to ensure the appropriate top level item is highlighted.
 * - The principle menu data is also cached, based on the user groups and language.
 * - The entire menu, as it will be displayed (i.e. disabled items/where show is set to false; these are removed) is pushed into $context['menu_items'].
 */
function setupMenuContext()
{
	global $context, $settings, $board_info, $txt;

	// Set up the menu privileges.
	$context['allow_search'] = allowedTo('search_posts');
	$context['allow_admin'] = allowedTo(array('admin_forum', 'manage_boards', 'manage_permissions', 'moderate_forum', 'manage_membergroups', 'manage_bans', 'send_mail', 'edit_news', 'manage_attachments', 'manage_smileys'));
	$context['allow_edit_profile'] = we::$is_member && allowedTo(array('profile_view_own', 'profile_view_any', 'profile_identity_own', 'profile_identity_any', 'profile_extra_own', 'profile_extra_any', 'profile_remove_own', 'profile_remove_any', 'moderate_forum', 'manage_membergroups', 'profile_title_own', 'profile_title_any'));
	$context['allow_memberlist'] = allowedTo('view_mlist');
	$context['allow_moderation_center'] = allowedTo('access_mod_center');
	$context['allow_pm'] = !empty($settings['pm_enabled']) && allowedTo('pm_read');
	$context['unapproved_members'] = !empty($context['unapproved_members']) ? $context['unapproved_members'] : 0;

	// Recalculate the number of unseen media items
	if (!empty(we::$user['media_unseen']) && we::$user['media_unseen'] == -1)
	{
		loadSource('media/Subs-Media');
		loadMediaSettings();
	}

	$error_count = allowedTo('admin_forum') ? (!empty($settings['app_error_count']) ? $settings['app_error_count'] : '') : '';
	$can_view_unseen = allowedTo('media_access_unseen') && isset(we::$user['media_unseen']) && we::$user['media_unseen'] > 0;
	$can_admin = allowedTo('admin_forum');
	$is_b = !empty($board_info['id']);

	$items = array(
		'site_home' => array(
			'title' => $txt['home'],
			'href' => !empty($settings['home_url']) ? $settings['home_url'] : '',
			'show' => !empty($settings['home_url']),
		),
		'home' => array(
			'title' => !empty($settings['home_url']) ? $txt['community'] : $txt['home'],
			'href' => '<URL>',
			'show' => true,
			'sub_items' => array(
				'root' => array(
					'title' => $context['forum_name'],
					'href' => '<URL>',
					'show' => $is_b,
				),
				'board' => array(
					'title' => $is_b ? $board_info['name'] : '',
					'href' => $is_b ? '<URL>?board=' . $board_info['id'] . '.0' : '',
					'show' => $is_b,
				),
			),
		),
		'admin' => array(
			'title' => $txt['admin'],
			'href' => '<URL>?action=' . ($context['allow_admin'] ? 'admin' : 'moderate'),
			'show' => $context['allow_admin'] || $context['allow_moderation_center'],
			'sub_items' => array(
				'featuresettings' => array(
					'title' => $txt['settings_title'],
					'href' => '<URL>?action=admin;area=featuresettings',
					'show' => $can_admin,
				),
				'errorlog' => array(
					'title' => $txt['errlog'],
					'notice' => $error_count,
					'href' => '<URL>?action=admin;area=logs;sa=errorlog',
					'show' => $can_admin && !empty($settings['enableErrorLogging']),
				),
				'permissions' => array(
					'title' => $txt['edit_permissions'],
					'href' => '<URL>?action=admin;area=permissions',
					'show' => allowedTo('manage_permissions'),
				),
				'plugins' => array(
					'title' => $txt['plugin_manager'],
					'href' => '<URL>?action=admin;area=plugins',
					'show' => $can_admin,
				),
				'',
				'modcenter' => array(
					'title' => $txt['moderate'],
					'href' => '<URL>?action=moderate',
					'show' => $context['allow_admin'],
				),
				'modlog' => array(
					'title' => $txt['modlog_view'],
					'href' => '<URL>?action=moderate;area=modlog',
					'show' => !empty($settings['log_enabled_moderate']) && !empty(we::$user['mod_cache']) && we::$user['mod_cache']['bq'] != '0=1',
				),
				'reports' => array(
					'title' => $txt['mc_reported_posts'],
					'href' => '<URL>?action=moderate;area=reports',
					'show' => !empty(we::$user['mod_cache']) && we::$user['mod_cache']['bq'] != '0=1',
					'notice' => $context['open_mod_reports'],
				),
				'poststopics' => array(
					'title' => $txt['mc_unapproved_poststopics'],
					'href' => '<URL>?action=moderate;area=postmod;sa=posts',
					'show' => $settings['postmod_active'] && !empty(we::$user['mod_cache']['ap']),
				),
				'unappmembers' => array(
					'title' => $txt['unapproved_members'],
					'href' => '<URL>?action=admin;area=viewmembers;sa=browse;type=approve',
					'show' => $context['unapproved_members'],
					'notice' => $context['unapproved_members'],
				),
				'',
				'uncache' => array(
					'title' => $txt['admin_uncache'],
					'href' => '<URL>?action=uncache',
					'show' => $can_admin,
				),
			),
		),
		'profile' => array(
			'title' => $txt['profile'],
			'href' => '<URL>?action=profile',
			'show' => $context['allow_edit_profile'],
			'sub_items' => array(
				'summary' => array(
					'title' => $txt['summary'],
					'href' => '<URL>?action=profile',
					'show' => true,
				),
				'showdrafts' => array(
					'title' => $txt['draft_posts'],
					'href' => '<URL>?action=profile;area=showdrafts',
					'show' => allowedTo('save_post_draft') && !empty($settings['masterSavePostDrafts']),
				),
				'account' => array(
					'title' => $txt['account'],
					'href' => '<URL>?action=profile;area=account',
					'show' => allowedTo(array('profile_identity_any', 'profile_identity_own', 'manage_membergroups')),
				),
				'profile' => array(
					'title' => $txt['forumprofile'],
					'href' => '<URL>?action=profile;area=forumprofile',
					'show' => allowedTo(array('profile_extra_any', 'profile_extra_own')),
				),
				'',
				'skin' => array(
					'title' => $txt['change_skin'],
					'href' => '<URL>?action=skin',
					'show' => allowedTo(array('profile_extra_any', 'profile_extra_own')),
				),
			),
		),
		'media' => array(
			'title' => isset($txt['media_gallery']) ? $txt['media_gallery'] : 'Media',
			'notice' => $can_view_unseen ? we::$user['media_unseen'] : '',
			'href' => '<URL>?action=media',
			'show' => !empty($settings['media_enabled']) && allowedTo('media_access'),
			'sub_items' => array(
				'home' => array(
					'title' => $txt['media_home'],
					'href' => '<URL>?action=media',
					'show' => $can_view_unseen,
				),
				'unseen' => array(
					'title' => $txt['media_unseen'],
					'notice' => $can_view_unseen ? we::$user['media_unseen'] : '',
					'href' => '<URL>?action=media;sa=unseen',
					'show' => $can_view_unseen,
				),
			),
		),
		'mlist' => array(
			'title' => $txt['members_title'],
			'href' => '<URL>?action=mlist',
			'show' => $context['allow_memberlist'],
			'sub_items' => array(
				'mlist_view' => array(
					'title' => $txt['mlist_menu_view'],
					'href' => '<URL>?action=mlist',
					'show' => true,
				),
				'mlist_search' => array(
					'title' => $txt['mlist_search'],
					'href' => '<URL>?action=mlist;sa=search',
					'show' => true,
				),
			),
		),
		'login' => array(
			'title' => $txt['login'],
			'href' => '<URL>?action=login',
			'show' => we::$is_guest,
			'nofollow' => !empty(we::$user['possibly_robot']),
		),
		'register' => array(
			'title' => $txt['register'],
			'href' => '<URL>?action=register',
			'show' => we::$is_guest && (empty($settings['registration_method']) || $settings['registration_method'] != 3),
			'nofollow' => !empty(we::$user['possibly_robot']),
		),
		'logout' => array(
			'title' => $txt['logout'],
			'href' => '<URL>?action=logout;' . $context['session_query'],
			'show' => we::$is_member,
		),
	);

	// Amalgamate the items in the admin menu.
	if (!empty($error_count) || !empty($items['admin']['sub_items']['reports']['notice']) || !empty($context['unapproved_members']))
		$items['admin']['notice'] = $error_count + (int) $items['admin']['sub_items']['reports']['notice'] + (int) $context['unapproved_members'];

	// Allow editing menu items easily.
	// Use PHP's array_splice to add entries at a specific position.
	call_hook('menu_items', array(&$items));

	// Now we put the items in the context so the theme can use them.
	$menu_items = array();
	foreach ($items as $act => $item)
	{
		if (!empty($item['show']))
		{
			$item['active_item'] = false;

			// Go through the sub items if there are any.
			if (!empty($item['sub_items']))
			{
				foreach ($item['sub_items'] as $key => $subitem)
				{
					if (empty($subitem['show']) && !empty($subitem))
						unset($item['sub_items'][$key]);

					// 2nd level sub items next...
					if (!empty($subitem['sub_items']))
						foreach ($subitem['sub_items'] as $key2 => $subitem2)
							if (empty($subitem2['show']) && !empty($subitem2))
								unset($item['sub_items'][$key]['sub_items'][$key2]);
				}
			}

			$menu_items[$act] = $item;
		}
	}

	$context['menu_items'] =& $menu_items;

	// Figure out which action we are doing so we can set the active tab.
	if (isset($menu_items[$context['action']]))
		$current_action = $context['action'];
	elseif ($context['action'] == 'theme')
		$current_action = isset($_REQUEST['u']) && $_REQUEST['u'] > 0 ? 'profile' : 'admin';
	elseif ($context['action'] == 'register2')
		$current_action = 'register';
	elseif ($context['action'] == 'login2' || (we::$is_guest && $context['action'] == 'reminder'))
		$current_action = 'login';
	elseif ($context['action'] == 'groups' && $context['allow_moderation_center'])
		$current_action = 'admin';
	elseif ($context['action'] == 'moderate' && $context['allow_moderation_center'])
		$current_action = 'admin';

	// Default to home.
	if (empty($current_action) || empty($menu_items[$current_action]))
		$current_action = 'home';

	$menu_items[$current_action]['active_item'] = true;
}

/**
 * Calls a given hook at the related point in the code.
 *
 * Each of the hooks is an array of functions within $settings['hooks'], to be called at relevant points in the code, such as $settings['hooks']['login'] which is run during login (to facilitate login into an integrated application.)
 *
 * The contents of the $settings['hooks'] value is a comma separated list of function names to be called at the relevant point. These are either procedural functions or static class methods (classname::method).
 *
 * @param string $hook The name of the hook as given in $settings, e.g. login, buffer, reset_pass
 * @param array $parameters Parameters to be passed to the hooked functions. The list of parameters each method is exposed to is dependent on the calling code (e.g. the hook for 'new topic is posted' passes different parameters to the 'final buffer' hook), and parameters passed by reference will be passed to hook functions as such.
 * @param string $plugin_id If specified, only call hooks matching that plugin id.
 * @return array An array of results, one element per hooked function. This will be solely dependent on the hooked function.
 */
function call_hook($hook, $parameters = array(), $plugin_id = '')
{
	global $settings;

	if (empty($settings['hooks'][$hook]))
		return array();

	$results = array();

	// Loop through each function.
	foreach ($settings['hooks'][$hook] as $function)
	{
		$fun = explode('|', trim($function));
		$call = strpos($fun[0], '::') !== false ? explode('::', $fun[0]) : $fun[0];

		// Skip if this isn't a call matching the plugin the user wants to reference.
		if (!empty($plugin_id) && !empty($fun[2]) && $plugin_id != $fun[2])
			continue;

		// Load any required file.
		if (!empty($fun[1]))
		{
			// We might be loading plugin files, we might not. This can't be set by add_hook, but by the hook manager.
			if (!empty($fun[2]))
				loadPluginSource($fun[2], $fun[1]);
			else
				loadSource($fun[1]);
		}

		// If it isn't valid, remove it from our list.
		if (is_callable($call))
			$results[$fun[0]] = call_user_func_array($call, $parameters);
		else
			remove_hook($hook, $call, !empty($fun[1]) ? $fun[1] : '');
	}

	return $results;
}

function call_lang_hook($hook, $plugin_id = '')
{
	global $settings;

	if (empty($settings['hooks'][$hook]))
		return false;

	static $lang = null;
	if ($lang === null)
		$lang = isset(we::$user['language']) ? we::$user['language'] : $settings['language'];

	foreach ($settings['hooks'][$hook] as $function)
	{
		$fun = explode('|', trim($function));
		// This should be an actual language hook. There should be no function to call.

		// Skip if this isn't a call matching the plugin the user wants to reference.
		if (!empty($plugin_id) && !empty($fun[2]) && $plugin_id != $fun[2])
			continue;

		if (empty($fun[0]))
		{
			// We might be loading plugin files, we might not. This can't be set by add_hook, but by the hook manager.
			if (!empty($fun[2]))
				loadPluginLanguage($fun[2], $fun[1]);
			else
				loadLanguage($fun[1]);
		}
	}
}

/**
 * Add a function to one of the hook stacks.
 * Gotta love hooks. What? I said hooks, not hookers.
 *
 * This function adds a function to be called. It also prevents duplicates on the same hook.
 *
 * @param string $hook The name of the hook that has zero or more functions attached, that the function will be added to.
 * @param string $function The name of the function whose name should be added to the named hook.
 * @param string $file The file where Wedge can find that function, in loadSource() format. To include /core/app/MyFile.php, simply use 'MyFile'. Use '../../MyFile' if it's in the root folder, etc. Leave blank if you know it'll be loaded at any time.
 * @param bool $register Whether the named function will be added to the hook registry permanently (default), or simply for the current page load only.
 */
function add_hook($hook, $function, $file = '', $register = true)
{
	global $settings;

	if (!empty($file) && (strpos($file, '|') !== false || !file_exists(APP_DIR . '/' . ($file = trim($file)) . '.php')))
		$file = '';

	$function .= '|' . $file;

	if ($register && !isset($settings['registered_hooks'][$hook]))
		$settings['registered_hooks'][$hook] = array();
	elseif (!$register && !isset($settings['hooks'][$hook]))
		$settings['hooks'][$hook] = array();

	// Do nothing if it's already there, except if we're asking for registration and it isn't registered yet.
	if ((!$register || in_array($function, $settings['registered_hooks'][$hook])) && ($in_hook = in_array($function, $settings['hooks'][$hook])))
		return;

	// Add it!
	if (empty($in_hook))
		$settings['hooks'][$hook][] = $function;
	if (!$register)
		return;

	// Add to the permanent registered list.
	$hooks = $settings['registered_hooks'];
	$hooks[$hook][] = $function;
	updateSettings(array('registered_hooks' => serialize($hooks)));
	$settings['registered_hooks'] = $hooks;
}

/**
 * Remove a function from one of the hook stacks.
 *
 * This function not only removes the hook from the local registry, but also from the master registry. Note that this function does not check whether the named function is callable, simply that it is part of the stack - it can be used on the file-include hook as well. If the function is not attached to the named hook, the function will simply return.
 *
 * @param string $hook The name of the hook that has one or more functions attached.
 * @param string $function The name of the function whose name should be removed from the named hook.
 * @param string $file The file where Wedge can find that function, in loadSource() format. To include /core/app/MyFile.php, simply use 'MyFile'. Use '../../MyFile' if it's in the root folder, etc. Leave blank if you know it'll be loaded at any time.
 * @todo Modify the function to return true on success and false on fail.
 */
function remove_hook($hook, $function, $file = '')
{
	global $settings;

	if (!empty($file) && !file_exists(APP_DIR . '/' . ($file = trim($file)) . '.php'))
		$file = '';

	$function .= '|' . $file;

	// You can only remove it if it's available.
	if (empty($settings['hooks'][$hook]) || !in_array($function, $settings['hooks'][$hook]))
		return;

	$settings['hooks'][$hook] = array_diff($settings['hooks'][$hook], (array) $function);

	if (empty($settings['registered_hooks'][$hook]) || !in_array($function, $settings['registered_hooks'][$hook]))
		return;

	// Also remove it from the registered hooks.
	$hooks = $settings['registered_hooks'];
	$hooks[$hook] = array_diff($hooks[$hook], (array) $function);
	if (empty($hooks[$hook]))
		unset($hooks[$hook]);
	updateSettings(array('registered_hooks' => serialize($hooks)));
	$settings['registered_hooks'] = $hooks;
}

/**
 * Add a link (URL and title) to the linktree. Self-explained.
 */
function add_linktree($name, $url = null, $before = null, $after = null, $first = false)
{
	global $context;

	$item = array(
		'name' => $name,
	);
	if ($url !== null)
		$item['url'] = $url;
	if ($before !== null)
		$item['extra_before'] = $before;
	if ($after !== null)
		$item['extra_after'] = $after;

	if ($first)
		array_unshift($context['linktree'], $item);
	else
		$context['linktree'][] = $item;
}

/**
 * Return a Gravatar URL based on the supplied email address, the global maximum rating, and maximum sizes as set in the admin panel.
 *
 * @todo Add the default URL support once we have one.
 */
function get_gravatar_url($email_address)
{
	global $settings;
	static $size_string = null;

	if ($size_string === null)
	{
		if (!empty($settings['avatar_max_width_external']))
			$size_string = (int) $settings['avatar_max_width_external'];
		if (!empty($settings['avatar_max_height_external']) && !empty($size_string))
			if ((int) $settings['avatar_max_height_external'] < $size_string)
				$size_string = $settings['avatar_max_height_external'];

		if (!empty($size_string))
			$size_string = '&amp;s=' . $size_string;
		else
			$size_string = '';
	}

	return 'http://www.gravatar.com/avatar.php?gravatar_id=' . md5(strtolower($email_address)) . (!empty($settings['gravatarMaxRating']) ? '&amp;rating=' . $settings['gravatarMaxRating']: '') . $size_string;
}

/**
 * Get the current device's default skin (desktop or mobile).
 */
function get_default_skin()
{
	global $settings;
	return $settings[we::is('mobile') ? 'theme_skin_guests_mobile' : 'theme_skin_guests'];
}

/**
 * Fix filenames to use valid characters.
 */
function valid_filename($str)
{
	return preg_replace('~([\\\\/:*?"<>|]+)~', '-', $str);
}