| <?PHP | <?PHP |
| error_reporting (E_ALL ^ E_NOTICE); | error_reporting (E_ALL ^ E_NOTICE); |
| $cutepath = __FILE__; | $cutepath = __FILE__; |
| $cutepath = preg_replace( "'\\\show_news\.php'", "", $cutepath); | $cutepath = preg_replace( "'\\\show_news\.php'", "", $cutepath); |
| $cutepath = preg_replace( "'/show_news\.php'", "", $cutepath); | $cutepath = preg_replace( "'/show_news\.php'", "", $cutepath); |
| require_once("$cutepath/inc/functions.inc.php"); | require_once("$cutepath/inc/functions.inc.php"); |
| require_once("$cutepath/data/config.php"); | require_once("$cutepath/data/config.php"); |
| // If we are showing RSS, include some need variables. | // If we are showing RSS, include some need variables. |
| if($template == 'rss'){ | if($template == 'rss'){ |
| include("$cutepath/data/rss_config.php"); | include("$cutepath/data/rss_config.php"); |
| } | } |
| //---------------------------------- | //---------------------------------- |
| // Check if we are included by PATH | // Check if we are included by PATH |
| //---------------------------------- | //---------------------------------- |
| if($_SERVER["HTTP_ACCEPT"] or $_SERVER["HTTP_ACCEPT_CHARSET"] or $_SERVER["HTTP_ACCEPT_ENCODING"] or $_SERVER["HTTP_CONNECTION"]){ /* do nothing */ } | if($_SERVER["HTTP_ACCEPT"] or $_SERVER["HTTP_ACCEPT_CHARSET"] or $_SERVER["HTTP_ACCEPT_ENCODING"] or $_SERVER["HTTP_CONNECTION"]){ /* do nothing */ } |
| elseif(eregi("show_news.php", $PHP_SELF)){ | elseif(eregi("show_news.php", $PHP_SELF)){ |
| die("<h4>CuteNews has detected that you are including show_news.php using the URL to this file.<br> | die("<h4>CuteNews has detected that you are including show_news.php using the URL to this file.<br> |
| This is incorrect and you must include it using the PATH to show_news.php</h4><br>Example:<br> | This is incorrect and you must include it using the PATH to show_news.php</h4><br>Example:<br> |
| this is <font color=red>WRONG</font> : <?PHP include(\"http://yoursite.com/cutenews/show_news.php\"); ?><br> | this is <font color=red>WRONG</font> : <?PHP include(\"http://yoursite.com/cutenews/show_news.php\"); ?><br> |
| this is <font color=green>CORRECT</font>: <?PHP include(\"cutenews/show_news.php\"); ?><br> | this is <font color=green>CORRECT</font>: <?PHP include(\"cutenews/show_news.php\"); ?><br> |
| <br><BR>// <font size=2>if you think this message shouldn't be shown, open show_news.php and delete it from there</font>"); | <br><BR>// <font size=2>if you think this message shouldn't be shown, open show_news.php and delete it from there</font>"); |
| } | } |
| //---------------------------------- | //---------------------------------- |
| // End of the check | // End of the check |
| //---------------------------------- | //---------------------------------- |
| if(!isset($subaction) or $subaction == ""){ $subaction = $POST["subaction"]; } | if(!isset($subaction) or $subaction == ""){ $subaction = $POST["subaction"]; } |
| if(!isset($template) or $template == "" or strtolower($template) == "default"){ require_once("$cutepath/data/Default.tpl"); } | if(!isset($template) or $template == "" or strtolower($template) == "default"){ require_once("$cutepath/data/Default.tpl"); } |
| else{ | else{ |
| if(file_exists("$cutepath/data/${template}.tpl")){ require("$cutepath/data/${template}.tpl"); } | if(file_exists("$cutepath/data/${template}.tpl")){ require("$cutepath/data/${template}.tpl"); } |
| else{ die("Error!<br>the template <b>".htmlspecialchars($template)."</b> does not exists, note that templates are case sensetive and you must write the name exactly as it is"); } | else{ die("Error!<br>the template <b>".htmlspecialchars($template)."</b> does not exists, note that templates are case sensetive and you must write the name exactly as it is"); } |
| } | } |
| // Prepare requested categories | // Prepare requested categories |
| if(eregi("[a-z]", $category)){ | if(eregi("[a-z]", $category)){ |
| die("<b>Error</b>!<br>CuteNews has detected that you use \$category = \"".htmlspecialchars($category)."\"; but you can call the categories only with their <b>ID</b> numbers and not with names<br> | die("<b>Error</b>!<br>CuteNews has detected that you use \$category = \"".htmlspecialchars($category)."\"; but you can call the categories only with their <b>ID</b> numbers and not with names<br> |
| example:<br><blockquote><?PHP<br>\$category = \"1\";<br>include(\"path/to/show_news.php\");<br>?></blockquote>"); | example:<br><blockquote><?PHP<br>\$category = \"1\";<br>include(\"path/to/show_news.php\");<br>?></blockquote>"); |
| } | } |
| $category = preg_replace("/ /", "", $category); | $category = preg_replace("/ /", "", $category); |
| $tmp_cats_arr = explode(",", $category); | $tmp_cats_arr = explode(",", $category); |
| foreach($tmp_cats_arr as $key=>$value){ | foreach($tmp_cats_arr as $key=>$value){ |
| if($value != ""){ $requested_cats[$value] = TRUE; } | if($value != ""){ $requested_cats[$value] = TRUE; } |
| } | } |
| if($archive == ""){ | if($archive == ""){ |
| $news_file = "$cutepath/data/news.txt"; | $news_file = "$cutepath/data/news.txt"; |
| $comm_file = "$cutepath/data/comments.txt"; | $comm_file = "$cutepath/data/comments.txt"; |
| }else{ | }else{ |
| $news_file = "$cutepath/data/archives/$archive.news.arch"; | $news_file = "$cutepath/data/archives/$archive.news.arch"; |
| $comm_file = "$cutepath/data/archives/$archive.comments.arch"; | $comm_file = "$cutepath/data/archives/$archive.comments.arch"; |
| } | } |
| $allow_add_comment = FALSE; | $allow_add_comment = FALSE; |
| $allow_full_story = FALSE; | $allow_full_story = FALSE; |
| $allow_active_news = FALSE; | $allow_active_news = FALSE; |
| $allow_comments = FALSE; | $allow_comments = FALSE; |
| //<<<------------ Detarime what user want to do | //<<<------------ Detarime what user want to do |
| if( $CN_HALT != TRUE and $static != TRUE and ($subaction == "showcomments" or $subaction == "showfull" or $subaction == "addcomment") and ((!isset($category) or $category == "") or ($requested_cats[$ucat] == TRUE ) ) ){ | if( $CN_HALT != TRUE and $static != TRUE and ($subaction == "showcomments" or $subaction == "showfull" or $subaction == "addcomment") and ((!isset($category) or $category == "") or ($requested_cats[$ucat] == TRUE ) ) ){ |
| if($subaction == "addcomment"){ $allow_add_comment = TRUE; $allow_comments = TRUE; } | if($subaction == "addcomment"){ $allow_add_comment = TRUE; $allow_comments = TRUE; } |
| if($subaction == "showcomments"){ $allow_comments = TRUE; } | if($subaction == "showcomments"){ $allow_comments = TRUE; } |
| if(($subaction == "showcomments" or $allow_comments == TRUE) and $config_show_full_with_comments == "yes"){$allow_full_story = TRUE; } | if(($subaction == "showcomments" or $allow_comments == TRUE) and $config_show_full_with_comments == "yes"){$allow_full_story = TRUE; } |
| if($subaction == "showfull") $allow_full_story = TRUE; | if($subaction == "showfull") $allow_full_story = TRUE; |
| if($subaction == "showfull" and $config_show_comments_with_full == "yes") $allow_comments = TRUE; | if($subaction == "showfull" and $config_show_comments_with_full == "yes") $allow_comments = TRUE; |
| } | } |
| else{ | else{ |
| if($config_reverse_active == "yes"){ $reverse = TRUE; } | if($config_reverse_active == "yes"){ $reverse = TRUE; } |
| $allow_active_news = TRUE; | $allow_active_news = TRUE; |
| } | } |
| //----------->>> Detarime what user want to do | //----------->>> Detarime what user want to do |
| require("$cutepath/inc/shows.inc.php"); | require("$cutepath/inc/shows.inc.php"); |
| if($_GET['archive'] and $_GET['archive'] != ''){ $archive = $_GET['archive']; } // stupid fix ? | if($_GET['archive'] and $_GET['archive'] != ''){ $archive = $_GET['archive']; } // stupid fix ? |
| unset($static, $template, $requested_cats, $category, $catid, $cat,$reverse, $in_use, $archives_arr, $number, $no_prev, $no_next, $i, $showed, $prev, $used_archives); | unset($static, $template, $requested_cats, $category, $catid, $cat,$reverse, $in_use, $archives_arr, $number, $no_prev, $no_next, $i, $showed, $prev, $used_archives); |
| ?> | ?> |
| <!-- News Powered by CuteNews: http://cutephp.com/ --> | <!-- News Powered by CuteNews: http://cutephp.com/ --> |