Hey there, I did install mingleforum and everything works fine so far, but I can not create a new topic. When I submit the topic the following message is shown:
setup_linksdk($_POST['add_topic_plink']); $options = get_option("mingleforum_options"); //Checking if current categories have been disabled to admin posting only $the_forum_id = false; if(isset($_POST['add_topic_forumid']) && !empty($_POST['add_topic_forumid'])) $the_forum_id = $mingleforum->check_parms($_POST['add_topic_forumid']); if(isset($_POST['add_post_forumid']) && !empty($_POST['add_post_forumid'])) { $the_thread_id = $mingleforum->check_parms($_POST['add_post_forumid']); $the_forum_id = $wpdb->get_var("SELECT `parent_id` FROM {$mingleforum->t_threads} WHERE `id` = {$the_thread_id}"); } if(is_numeric($the_forum_id)) { $the_cat_id = $wpdb->get_var("SELECT `parent_id` FROM {$mingleforum->t_forums} WHERE `id` = {$the_forum_id}"); if(in_array($the_cat_id, $options['forum_disabled_cats']) && !current_user_can('administrator') && !is_super_admin($user_ID)) wp_die(__("Oops only Administrators can post in this Forum!", "mingleforum")); } //End Check function mf_u_key() { $pref = ""; for ($i = 0; $i < 5; $i++) { $d = rand(0,1); $pref .= $d ? chr(rand(97, 122)) : chr(rand(48, 57)); } return $pref."-"; } function MFAttachImage($temp, $name) { //GET USERS UPLOAD PATH $upload_dir = wp_upload_dir(); $path = $upload_dir['path']."/"; $url = $upload_dir['url']."/"; $u = mf_u_key(); $name = sanitize_file_name($name); if(!empty($name)) move_uploaded_file($temp, $path.$u.$name); return "\n
"; } function MFGetExt($str) { //GETS THE FILE EXTENSION BELONGING TO THE UPLOADED FILE $i = strrpos($str,"."); if (!$i) { return ""; } $l = strlen($str) - $i; $ext = substr($str,$i+1,$l); return $ext; } function mf_check_uploaded_images() { $valid = array('im1' => true, 'im2' => true, 'im3' => true); if($_FILES["mfimage1"]["error"] > 0 && !empty($_FILES["mfimage1"]["name"])) $valid['im1'] = false; if($_FILES["mfimage2"]["error"] > 0 && !empty($_FILES["mfimage2"]["name"])) $valid['im2'] = false; if($_FILES["mfimage3"]["error"] > 0 && !empty($_FILES["mfimage3"]["name"])) $valid['im3'] = false; if(!empty($_FILES["mfimage1"]["name"])) { $ext = strtolower(MFGetExt(stripslashes($_FILES["mfimage1"]["name"]))); if($ext != "jpg" && $ext != "jpeg" && $ext != "bmp" && $ext != "png" && $ext != "gif") $valid['im1'] = false; } else $valid['im1'] = false; if(!empty($_FILES["mfimage2"]["name"])) { $ext = strtolower(MFGetExt(stripslashes($_FILES["mfimage2"]["name"]))); if($ext != "jpg" && $ext != "jpeg" && $ext != "bmp" && $ext != "png" && $ext != "gif") $valid['im2'] = false; } else $valid['im2'] = false; if(!empty($_FILES["mfimage3"]["name"])) { $ext = strtolower(MFGetExt(stripslashes($_FILES["mfimage3"]["name"]))); if($ext != "jpg" && $ext != "jpeg" && $ext != "bmp" && $ext != "png" && $ext != "gif") $valid['im2'] = false; } else $valid['im3'] = false; return $valid; } //--weaver-- check if guest filled in form if (!isset($_POST['edit_post_submit'])) { $errormsg = apply_filters('wpwf_check_guestinfo',""); if ($errormsg != "") { $error = true; wp_die($errormsg); //plugin failed } } //--weaver-- end guest form check if($options['forum_captcha'] == true && !$user_ID){ include_once(WPFPATH."captcha/shared.php"); $wpf_code = wpf_str_decrypt($_POST['wpf_security_check']); if(($wpf_code == $_POST['wpf_security_code']) && (!empty($wpf_code))) { //It passed } else { $error = true; $msg = __("Security code does not match", "mingleforum"); wp_die($msg); } } $cur_user_ID = apply_filters('wpwf_change_userid', $user_ID); // --weaver-- use real id or generated guest ID //ADDING A NEW TOPIC? if(isset($_POST['add_topic_submit'])){ $myReplaceSub = array("'", "\\"); $subject = str_replace($myReplaceSub, "", $mingleforum->input_filter($_POST['add_topic_subject'])); $content = $mingleforum->input_filter($_POST['message']); $forum_id = $mingleforum->check_parms($_POST['add_topic_forumid']); if($subject == ""){ $msg .= "
".__("An error occured", "mingleforum")."
"; $msg .= ("
".__("You must enter a subject", "mingleforum")."
"); $error = true; } elseif($content == ""){ $msg .= "
".__("An error occured", "mingleforum")."
"; $msg .= ("
".__("You must enter a message", "mingleforum")."
"); $error = true; } else{ $date = $mingleforum->wpf_current_time_fixed('mysql', 0); $sql_thread = "INSERT INTO $mingleforum->t_threads (last_post, subject, parent_id, `date`, status, starter) VALUES(%s, %s, %d, %s, 'open', %d)"; $wpdb->query($wpdb->prepare($sql_thread, $date, $subject, $forum_id, $date, $cur_user_ID)); $id = $wpdb->insert_id; //Add to mingle board $myMingID = -1; if(!function_exists('is_plugin_active')) require_once( ABSPATH . 'wp-admin/includes/plugin.php' ); if(is_plugin_active('mingle/mingle.php') and is_user_logged_in()) { $board_post =& MnglBoardPost::get_stored_object(); $myMingID = $board_post->create( $cur_user_ID, $cur_user_ID, "".__("created the forum topic:", "mingleforum")." " . $mingleforum->output_filter($subject) . "" ); } //End add to mingle board //MAYBE ATTACH IMAGES $images = mf_check_uploaded_images(); if($images['im1'] || $images['im2'] || $images['im3']) { if($images['im1']) $content .= MFAttachImage($_FILES["mfimage1"]["tmp_name"], stripslashes($_FILES["mfimage1"]["name"])); if($images['im2']) $content .= MFAttachImage($_FILES["mfimage2"]["tmp_name"], stripslashes($_FILES["mfimage2"]["name"])); if($images['im3']) $content .= MFAttachImage($_FILES["mfimage3"]["tmp_name"], stripslashes($_FILES["mfimage3"]["name"])); } $sql_post = "INSERT INTO $mingleforum->t_posts (text, parent_id, `date`, author_id, subject) VALUES(%s, %d, %s, %d, %s)"; $wpdb->query($wpdb->prepare($sql_post, $content, $id, $date, $cur_user_ID, $subject)); $new_post_id = $wpdb->insert_id; //UPDATE PROPER Mngl ID $sql_thread = "UPDATE $mingleforum->t_threads SET mngl_id = %d WHERE id = %d"; $wpdb->query($wpdb->prepare($sql_thread, $myMingID, $id)); //END UPDATE PROPER Mngl ID } if(!$error){ $mingleforum->notify_forum_subscribers($id, $subject, $content, $date, $forum_id); $mingleforum->notify_admins($id, $subject, $content, $date); $unused = apply_filters('wpwf_add_guest_sub', $id); //--weaver-- Maybe add a subscription header("Location: ".html_entity_decode($mingleforum->get_threadlink($id)."#postid-".$new_post_id)); exit; } else wp_die($msg); } //ADDING A POST REPLY? if(isset($_POST['add_post_submit'])){ $myReplaceSub = array("'", "\\"); $subject = str_replace($myReplaceSub, "", $mingleforum->input_filter($_POST['add_post_subject'])); $content = $mingleforum->input_filter($_POST['message']); $thread = $mingleforum->check_parms($_POST['add_post_forumid']); //GET PROPER Mngl ID $MngBID = $wpdb->get_var($wpdb->prepare("SELECT mngl_id FROM $mingleforum->t_threads WHERE id = %d", $thread)); //END GET PROPER Mngl ID if($subject == ""){ $msg .= "
".__("An error occured", "mingleforum")."
"; $msg .= ("
".__("You must enter a subject", "mingleforum")."
"); $error = true; } elseif($content == ""){ $msg .= "
".__("An error occured", "mingleforum")."
"; $msg .= ("
".__("You must enter a message", "mingleforum")."
"); $error = true; } else{ $date = $mingleforum->wpf_current_time_fixed('mysql', 0); //Add to mingle board if(!function_exists('is_plugin_active')) require_once( ABSPATH . 'wp-admin/includes/plugin.php' ); if(is_plugin_active('mingle/mingle.php') and is_user_logged_in() and $MngBID > 0) { $board_post =& MnglBoardPost::get_stored_object(); $mngl_board_comment->create( $MngBID, $cur_user_ID, "".__("replied to the forum topic:", "mingleforum")." " . $mingleforum->output_filter($subject) . "" ); } //End add to mingle board //MAYBE ATTACH IMAGES $images = mf_check_uploaded_images(); if($images['im1'] || $images['im2'] || $images['im3']) { if($images['im1']) $content .= MFAttachImage($_FILES["mfimage1"]["tmp_name"], stripslashes($_FILES["mfimage1"]["name"])); if($images['im2']) $content .= MFAttachImage($_FILES["mfimage2"]["tmp_name"], stripslashes($_FILES["mfimage2"]["name"])); if($images['im3']) $content .= MFAttachImage($_FILES["mfimage3"]["tmp_name"], stripslashes($_FILES["mfimage3"]["name"])); } $sql_post = "INSERT INTO $mingleforum->t_posts (text, parent_id, `date`, author_id, subject) VALUES(%s, %d, %s, %d, %s)"; $wpdb->query($wpdb->prepare($sql_post, $content, $thread, $date, $cur_user_ID, $subject)); $new_id = $wpdb->insert_id; $wpdb->query($wpdb->prepare("UPDATE $mingleforum->t_threads SET last_post = %s WHERE id = %d", $date, $thread)); } if(!$error){ $mingleforum->notify_thread_subscribers($thread, $subject, $content, $date); $mingleforum->notify_admins($thread, $subject, $content, $date); $unused = apply_filters('wpwf_add_guest_sub', $thread); //--weaver-- Maybe add a subscription header("Location: ".html_entity_decode($mingleforum->get_paged_threadlink($thread)."#postid-".$new_id)); exit; } else wp_die($msg); } //EDITING A POST? if(isset($_POST['edit_post_submit'])) { $myReplaceSub = array("'", "\\"); $subject = str_replace($myReplaceSub, "", $mingleforum->input_filter($_POST['edit_post_subject'])); $content = $mingleforum->input_filter($_POST['message']); $thread = $mingleforum->check_parms($_POST['thread_id']); $edit_post_id = $_POST['edit_post_id']; if($subject == "") { $msg .= "
".__("An error occured", "mingleforum")."
"; $msg .= ("
".__("You must enter a subject", "mingleforum")."
"); $error = true; } if($content == "") { $msg .= "
".__("An error occured", "mingleforum")."
"; $msg .= ("
".__("You must enter a message", "mingleforum")."
"); $error = true; } //Major security check here, prevents hackers from editing the entire forums posts if(!current_user_can('administrator') && !is_super_admin($user_ID) && $user_ID != $mingleforum->get_post_owner($edit_post_id)) { $msg .= "
".__("An error occured", "mingleforum")."
"; $msg .= ("
".__("You do not have permission to edit this post!", "mingleforum")."
"); $error = true; } if ($error) wp_die($msg); $sql = ("UPDATE $mingleforum->t_posts SET text = %s, subject = %s WHERE id = %d"); $wpdb->query($wpdb->prepare($sql, $content, $subject, $edit_post_id)); $ret = $wpdb->get_results("select id from $mingleforum->t_posts where parent_id = $thread order by date asc limit 1"); if ($ret[0]->id == $edit_post_id) { $sql = ("UPDATE $mingleforum->t_threads set subject = %s where id = %d"); $wpdb->query($wpdb->prepare($sql, $subject, $thread)); } header("Location: ".html_entity_decode($mingleforum->get_paged_threadlink($thread)."#postid-".$edit_post_id)); exit; } ?>