ipb.inc

<?php
class Ipb
{

    var $db;

    var $needed_files = Array(
                            '/conf_global.php',
                            '/ips_kernel/class_db_mysql.php',
                            '/ips_kernel/class_converge.php',
                        );

    var $info = NULL;
    var $version = '2_0_4';
    var $registry = NULL;
    var $command = 'fetch_row';
    var $command_free = 'free_result';


    function Ipb($path, $version)
    {
        if (!empty($path) && !empty($version)) {
            $this->version = $version;
            $this->setup($path);
        }

    }//end constructor


//--        SET UP        --//


    function setup($path)
    {
        $ipb_root_path = $path;
        $ipb_kernel_path = $ipb_root_path.'/ips_kernel';

        // Let's check to see if IPB can be found
        if (!is_dir($ipb_root_path) || !is_dir($ipb_kernel_path)) {
            return FALSE;
        }

        // Database details
        $INFO = Array();
        if (is_file($ipb_root_path.'/conf_global.php')) {
            include $ipb_root_path.'/conf_global.php';
        } else {
            return FALSE;
        }
        $this->info =& $INFO;

        // set URL
        switch ($this->version) {
            case '2_0_4' :
                if (isset($INFO['html_url'])) {
                    $this->ipb_url = $INFO['html_url'];
                } else if (isset($INFO['board_url'])) {
                    $this->ipb_url = $INFO['board_url'];
                }
            break;
            case '2_1_3' :
            case '2_2_1' :
            case '3_0_2' :
                $this->ipb_url = $INFO['board_url'];
            break;
        }//end switch

        $INFO['sql_driver'] = ! $INFO['sql_driver'] ? 'mysql' : strtolower($INFO['sql_driver']);

        if ($this->version != '3_0_2') {
            require_once $ipb_kernel_path.'/class_db_'.$INFO['sql_driver'].'.php';
        }//end if

        switch ($this->version) {
            case '2_0_4' :
                if (class_exists('db_driver')) {
                    $this->db = new db_driver;
                } else {
                    return FALSE;
                }
            break;
            case '2_1_3' :
            case '2_2_1' :
                $driver = 'db_driver_'.$INFO['sql_driver'];
                $this->db = new $driver;
            break;
            case '3_0_2' :
                require_once($ipb_root_path.'/initdata.php');
                require_once(IPS_ROOT_PATH.'/sources/base/ipsRegistry.php');
                $this->registry = ipsRegistry::instance();
                $this->registry->init();
                error_reporting(E_ALL);
                $this->db = $this->registry->DB();
                $this->command = 'fetch';
                $this->command_free = 'freeResult';
            break;
        }

        if (!defined('IN_IPB')) {
            define ('IN_IPB', TRUE);
        }//end if
        $this->db->obj['sql_database'] = $INFO['sql_database'];
        $this->db->obj['sql_user'] = $INFO['sql_user'];
        $this->db->obj['sql_pass'] = $INFO['sql_pass'];
        $this->db->obj['sql_host'] = $INFO['sql_host'];
        $this->db->obj['sql_tbl_prefix'] = $INFO['sql_tbl_prefix'];
        $this->db->obj['query_cache_file'] = $ipb_root_path.'/sources/sql/'.$INFO['sql_driver'].'_queries.php';
        if ($this->version == '3_0_2') {
            $this->db->obj['query_cache_file'] = '';
        }//end if
        $this->db->obj['use_shutdown'] = 1;

        if (is_array($this->db->connect_vars) && count($this->db->connect_vars)) {
            foreach ($this->db->connect_vars as $k => $v) {
                $this->db->connect_vars[$k] = (isset($INFO[$k]) ? $INFO[$k] : '');
            }
        }
        if ($this->db->connect()) return TRUE;

        return FALSE;

    }//end setup()


    function isConnected()
    {
        if (!is_null($this->db)) {
            return TRUE;
        } else {
            return FALSE;
        }

    }//end isConnected()


    function disconnect()
    {
        if (!is_null($this->db)) {
            $result = $this->db->close_db();
            $this->_assertValidResult($this->db, 'Could not close database');
            return TRUE;
        } else {
            return FALSE;
        }

    }//end disconnect()


//--        URL        --//


    function getIpbURL()
    {
        return $this->ipb_url;

    }//end getIpbURL()


//--        SEARCH        --//


    function search($assetid)
    {
        $tmp = explode('_', $assetid);
        $id = $tmp[1];
        $prefix = $tmp[0];

        if (empty($id) || empty($prefix)) {
            return FALSE;
        }
        if ( $prefix == 'u') {
            // ipb member
            $result = $this->getMemberGroupInfo('members', Array(), $id);
        } else if ( $prefix == 'g' ) {
            // ipb group
            $result = $this->getMemberGroupInfo('groups', Array(), $id);
        }

        if (empty($result)) return FALSE;

        return $result;

    }//end search()


//--        AUTHENTICATION        --//


    function authenticateUser(&$bridge, $username, $password, $is_email_login)
    {
        switch ($this->version) {
            case '3_0_2':
                // New style of authentication
                $member_key = '';
                if ($is_email_login) {
                    if (!IPSMember::checkByEmail($username)) return FALSE;
                    $member_key = $username;
                } else {
                    $sql = 'SELECT m.member_id FROM '.$this->db->obj['sql_tbl_prefix'].'members m
                        WHERE m.name=\''.str_replace('&#039', '&#39', htmlspecialchars($username, ENT_QUOTES)).'\';';
                    $member_info = $this->_getResult($sql, Array(), TRUE);
                    $member_id = array_get_index($member_info, 'member_id', 0);
                    if (empty($member_id)) return FALSE;
                    $member_key = $member_id;
                }//end if
                if (empty($member_key)) return FALSE;
                $md5_password = md5($password);
                $status = IPSMember::authenticateMember($member_key, $md5_password);
                return $status;
            break;
            default:
                // Old method of authentication
                require_once $bridge->attr('location').'/ips_kernel/class_converge.php';
                $converge = new class_converge($this->db);

                if ($is_email_login) {
                    if (!$converge->converge_check_for_member_by_email($username)) {
                        return FALSE;
                    }
                    $converge->converge_load_member_by_email($username);
                } else {
                    $sql = 'SELECT
                                id  
                            FROM
                                '.$this->db->obj['sql_tbl_prefix'].'members
                            WHERE
                                name=\''.str_replace('&#039', '&#39', htmlspecialchars($username, ENT_QUOTES)).'\';
                    ';
                    $db_result = $this->db->query($sql);
                    $this->_assertValidResult($this->db, 'Could not authenticate IPB user');

                    while ($row = $this->db->{$this->command}($db_result)) {
                        $test[] = $row;
                    }
                                                                                                                                                                $this->db->{$this->command_free}($db_result);
                    if (empty($test)) return FALSE;

                    @$converge->converge_load_member_by_id($test[0]['id']);
                }

                return $converge->converge_authenticate_member(md5($password));
        }//end switch

    }//end authenticateUser()


//--        GROUPS AND MEMBERS        --//


    function getAllInfo($cols=Array(), $id=0)
    {
        // add column names
        $columns            = Array();
        $custom_columns     = FALSE;
        $table_name         = 'members';
        $table_short_name   = 'm';
        $member_id_field = $this->_getMemberIdField();
        $member_group_id_field = $this->_getMemberGroupIdField();
        $m_cols = Array($member_id_field, 'name', $member_group_id_field, 'email', 'title', 'member_login_key');
        $g_cols = Array('g_id', 'g_title', 'g_mem_info', 'prefix', 'suffix');

        if (empty($cols)) {
            foreach ($m_cols as $c) {
                $columns[] = 'm.'.$c;
            }
            foreach ($g_cols as $c) {
                $columns[] = 'g.'.$c;
            }
        } else {
            $custom_columns = TRUE;
        }

        // build query
        $where = '';
        if ($id) {
            $where = 'WHERE '.$table_short_name.'.'.$member_id_field.'='.$id;
        }
        $join = 'LEFT JOIN '.$this->db->obj['sql_tbl_prefix'].'groups g ON (m.'.$member_group_id_field.'=g.g_id)';
        $sql = $this->_buildQuery($columns, $table_name, $table_short_name, $where, $join);

        // get the result
        $db_result = $this->db->query($sql);
        $this->_assertValidResult($this->db, 'Could not get IPB info');

        $result = Array();
        $cols = array_merge($m_cols, $g_cols);
        while ($row = $this->db->{$this->command}($db_result)) {
            if (!$custom_columns) {
                $key = $row[$cols[0]];
                $tmp_cols = array_slice($cols, 1);
                $data = Array();
                foreach ($tmp_cols as $c) {
                    $data[$c] = $row[$c];
                }
                $result[$key] = $data;
            } else {
                $tmp = Array();
                foreach ($cols as $c) {
                    $tmp[$c] = $row[$c];
                }
                $result[] = $tmp;
            }
        }
        $this->db->{$this->command_free}($db_result);

        $result = $this->_maintainDataFormat($result);

        return $result;

    }//end getAllInfo()


    function getMemberGroupInfo($table_name='members', $cols=Array(), $id=0)
    {
        // add column names
        $columns        = Array();
        $custom_columns = FALSE;
        $member_id_field = $this->_getMemberIdField();
        $member_group_id_field = $this->_getMemberGroupIdField();

        if ($table_name == 'members') {
            $table_short_name='u';
        } else if ($table_name == 'groups') {
            $table_short_name='g';
        }

        switch($this->version) {
            case '3_0_2':
                if (empty($cols)) {
                    if ($table_name == 'members') {
                        $cols = 'u.'.$member_id_field.', u.name, u.'.$member_group_id_field.', u.email, u.title, u.member_login_key, u.bday_day, u.bday_month, u.bday_year, \'\' as vdir, me.field_3 as aim_name, me.field_4 as msnname, me.field_5 as website, me.field_6 as icq_number, me.field_8 as location, me.field_9 as interests, me.field_10 as yahoo, ue.avatar_type as photo_type, ue.avatar_location as photo_location, ue.avatar_size as photo_dimensions, ue.notes, ue.links, ue.bio, ue.ta_size, ue.signature, ue.avatar_location, ue.avatar_size, ue.avatar_type '; 
                    } else if ($table_name == 'groups') {
                        $cols = 'g.g_id, g.g_title, g.g_mem_info, g.prefix, g.suffix ';
                    }//end if
                } else {
                    $custom_columns = TRUE;
                }//end if
                
                $from = $this->db->obj['sql_tbl_prefix'].$table_name.' '.$table_short_name;
                $join = '';
                if ($table_name == 'members') {
                    $join  = ' LEFT JOIN '.$this->db->obj['sql_tbl_prefix'].'profile_portal ue ON u.'.$member_id_field.'=ue.pp_member_id';
                    $join .= ' LEFT JOIN '.$this->db->obj['sql_tbl_prefix'].'pfields_content me ON me.member_id=u.'.$member_id_field;
                }
                // build query
                $where = '';
                if ($id) {
                    if ($table_name == 'members') {
                        $where = ' WHERE '.$table_short_name.'.'.$member_id_field.'='.$id;
                    } else if ($table_name == 'groups') {
                        $where = ' WHERE '.$table_short_name.'.g_id='.$id;
                    }
                }
                $sql = 'SELECT '.$cols.$from.$join.$where;
            break;
            default:
                if (empty($cols)) {
                    if ($table_name == 'members') {
                        $cols = Array(
                                    'u.'.$member_id_field,
                                    'u.name',
                                    'u.'.$member_group_id_field,
                                    'u.email',
                                    'u.title',
                                    'u.member_login_key',
                                    'u.bday_day',
                                    'u.bday_month',
                                    'u.bday_year',
                                    'ue.photo_type',
                                    'ue.photo_location',
                                    'ue.aim_name',
                                    'ue.icq_number',
                                    'ue.website',
                                    'ue.yahoo',
                                    'ue.interests',
                                    'ue.msnname',
                                    'ue.vdirs',
                                    'ue.location',
                                    'ue.signature',
                                    'ue.avatar_location',
                                    'ue.avatar_size',
                                    'ue.avatar_type',
                                );
                    } else if ($table_name == 'groups') {
                        $cols = Array('g.g_id', 'g.g_title', 'g.g_mem_info', 'g.prefix', 'g.suffix');
                    }
                } else {
                    $custom_columns = TRUE;
                }

                $columns = $cols;

                $join = '';
                if ($table_name == 'members') {
                    $join = ' LEFT JOIN '.$this->db->obj['sql_tbl_prefix'].'member_extra ue ON u.'.$member_id_field.'=ue.id';
                }
                // build query
                $where = '';
                if ($id) {
                    if ($table_name == 'members') {
                        $where = ' WHERE '.$table_short_name.'.'.$member_id_field.'='.$id;
                    } else if ($table_name == 'groups') {
                        $where = ' WHERE '.$table_short_name.'.g_id='.$id;
                    }
                }
                $sql = $this->_buildQuery($columns, $table_name, $table_short_name, $where, $join);
        }//end switch

        // get the result
        $db_result = $this->db->query($sql);
        $this->_assertValidResult($this->db, 'Could not get IPB member group info');

        $result = Array();
        while ($row = $this->db->{$this->command}($db_result)) {
            if (!$custom_columns) {
                $tmp_col_name = explode('.', $cols[0]);
                $key = $row[$tmp_col_name[1]];
                $tmp_cols = array_slice($cols, 1);
                $data = Array();
                foreach ($tmp_cols as $c) {
                    $tmp_col_name = explode('.', $c);
                    $data[$tmp_col_name[1]] = $row[$tmp_col_name[1]];
                }
                $data['type'] = $table_name;
                $result[$table_short_name.'_'.$key] = $data;
            } else {
                $tmp = Array('type' => $table_name);
                foreach ($cols as $c) {
                    if ($c == $member_id_field || $c == 'g_id') {
                        $tmp[$c] = $table_short_name.'_'.$row[$c];
                    } else {
                        $tmp[$c] = $row[$c];
                    }
                }
                $result[] = $tmp;
            }
        }
        $this->db->{$this->command_free}($db_result);

        $result = $this->_maintainDataFormat($result);

        return $result;

    }//end getMemberGroupInfo()


    function getMembers($member_id=0, $group_id=0, $cols=Array())
    {
        // add column names
        $columns        = Array();
        $custom_columns = FALSE;
        $table_name = 'members';
        $table_short_name='m';
        $member_id_field = $this->_getMemberIdField();
        $member_group_id_field = $this->_getMemberGroupIdField();
        if (empty($cols)) {
            $cols = Array($member_id_field, 'name', $member_group_id_field, 'email', 'title', 'member_login_key');
        } else {
            $custom_columns = TRUE;
        }

        // add prefix
        foreach ($cols as $c) {
            $columns[] = $table_short_name.'.'.$c;
        }

        // build query
        $where = '';
        if ($member_id || $group_id) {
            $where = ' WHERE ';
            if ($member_id) {
                $where .= $table_short_name.'.'.$member_id_field.'='.$member_id.(($group_id) ? ' and ' : '');
            }
            if ($group_id) {
                $where .= $table_short_name.'.'.$member_group_id_field.'='.$group_id;
            }
        }

        $sql = $this->_buildQuery($columns, $table_name, $table_short_name, $where);

        // get the result
        $db_result = $this->db->query($sql);
        $this->_assertValidResult($this->db, 'Could not get IPB member(s)');

        $result = Array();
        while ($row = $this->db->{$this->command}($db_result)) {
            if (!$custom_columns) {
                $key = $row[$cols[0]];
                $tmp_cols = array_slice($cols, 1);
                $data = Array();
                foreach ($tmp_cols as $c) {
                    if ($c == $member_group_id_field) {
                        $data[$c] = 'g_'.$row[$c];
                    } else {
                        $data[$c] = $row[$c];
                    }
                }
                $data['type'] = $table_name;
                $result['u_'.$key] = $data;
            } else {
                $tmp = Array('type' => $table_name);
                foreach ($cols as $c) {
                    if ($c == $member_id_field) {
                        $tmp[$c] = 'u_'.$row[$c];
                    } else {
                        $tmp[$c] = $row[$c];
                    }
                }
                $result[] = $tmp;
            }
        }
        $this->db->{$this->command_free}($db_result);

        $result = $this->_maintainDataFormat($result);

        return $result;

    }//end getMembers()


    function getCustomFields()
    {
        $sql = $this->_buildQuery('*', 'pfields_data', 'pfd');

        return $this->_getResult($sql, Array(), FALSE);

    }//end getCustomFields()


    function getMemberCustomFieldData($member_id)
    {
        $tmp = explode(':', $member_id);
        if (!isset($tmp[1])) return Array();
        $tmp = explode('_', $tmp[1]);
        $id = $tmp[1];

        $sql = $this->_buildQuery('*', 'pfields_content', 'pfc', ' WHERE pfc.member_id='.$id);

        return $this->_getResult($sql, Array(), FALSE);

    }//end getMemberCustomFieldData()


//--        GROUPS        --//


    function getGroupInfo($group_id)
    {
        $tmp = explode(':', $group_id);
        if (!isset($tmp[1])) return Array();
        $tmp = explode('_', $tmp[1]);
        $id = $tmp[1];

        $sql = $this->_buildQuery('*', 'groups', 'g', ' WHERE g.g_id='.$id);
        return $this->_getResult($sql, Array(), TRUE);

    }//end getGroupInfo()


    function getListOfGroups()
    {
        $fields = Array(
                    'g.g_id',
                    'g.g_title',
                  );

        $sql = $this->_buildQuery($fields, 'groups', 'g');

        return $this->_getResult($sql, Array('g_id' => 'id'), FALSE);

    }//end getListOfGroups()


//--        MEMBERS        --//


    function canViewBoard($username)
    {
        $member_group_id_field = $this->_getMemberGroupIdField();
        $sql = 'SELECT
                    m.name, g.g_view_board
                FROM
                    '.$this->db->obj['sql_tbl_prefix'].'members m,
                    '.$this->db->obj['sql_tbl_prefix'].'groups g
                WHERE
                    m.'.$member_group_id_field.'=g.g_id and
                    m.name=\''.str_replace('&#039', '&#39', htmlspecialchars($username, ENT_QUOTES)).'\'
                ;';
        return $this->_getResult($sql, Array(), TRUE);

    }//end canViewBoard()


    function getMemberInfo($member_id)
    {
        $tmp = explode(':', $member_id);
        if (!isset($tmp[1])) return Array();
        $tmp = explode('_', $tmp[1]);
        $id = $tmp[1];
        switch ($this->version) {
            case '3_0_2':
                $sql = 'SELECT m.*, \'\' as vdir, me.field_3 as aim_name, me.field_4 as msnname, me.field_5 as website, me.field_6 as icq_number, me.field_8 as location, me.field_9 as interests, me.field_10 as yahoo, ue.avatar_type as photo_type, ue.avatar_location as photo_location, ue.avatar_size as photo_dimensions, ue.notes, ue.links, ue.bio, ue.ta_size, ue.signature, ue.avatar_location, ue.avatar_size, ue.avatar_type FROM '.$this->db->obj['sql_tbl_prefix'].'members m LEFT JOIN '.$this->db->obj['sql_tbl_prefix'].'profile_portal ue ON ue.pp_member_id=m.member_id LEFT JOIN '.$this->db->obj['sql_tbl_prefix'].'pfields_content me ON me.member_id=m.member_id WHERE m.member_id='.$id;
            break;
            default:
                $sql = $this->_buildQuery('*', 'members', 'm', ' WHERE m.id='.$id, ' LEFT JOIN '.$this->db->obj['sql_tbl_prefix'].'member_extra me ON me.id=m.id');
        }//end switch

        $data = $this->_getResult($sql, Array(), TRUE, TRUE);

        return $data;

    }//end getMemberInfo()


    function getMemberInfoByName($member_name)
    {
        switch ($this->version) {
            case '3_0_2':
                $member_id_field = $this->_getMemberIdField(); 
                $sql = 'SELECT m.*, \'\' as vdir, me.field_3 as aim_name, me.field_4 as msnname, me.field_5 as website, me.field_6 as icq_number, me.field_8 as location, me.field_9 as interests, me.field_10 as yahoo, ue.avatar_type as photo_type, ue.avatar_location as photo_location, ue.avatar_size as photo_dimensions, ue.notes, ue.links, ue.bio, ue.ta_size, ue.signature, ue.avatar_location, ue.avatar_size, ue.avatar_type FROM '.$this->db->obj['sql_tbl_prefix'].'members m LEFT JOIN '.$this->db->obj['sql_tbl_prefix'].'profile_portal ue ON ue.pp_member_id=m.member_id LEFT JOIN '.$this->db->obj['sql_tbl_prefix'].'pfields_content me ON me.member_id=m.member_id WHERE m.name=\''.str_replace('&#039', '&#39', htmlspecialchars($member_name, ENT_QUOTES)).'\'';
            break;
            default:
                $sql = $this->_buildQuery('*', 'members', 'm', ' WHERE m.name=\''.str_replace('&#039', '&#39', htmlspecialchars($member_name, ENT_QUOTES)).'\'', ' LEFT JOIN '.$this->db->obj['sql_tbl_prefix'].'member_extra me ON me.id=m.id');
        }//end switch

        $data = $this->_getResult($sql, Array(), TRUE, TRUE);

        return $data;

    }//end getMemberInfoByName()


    function getMemberParent($member_id)
    {
        $member_id_field = $this->_getMemberIdField();
        $member_group_id_field = $this->_getMemberGroupIdField();
        switch ($this->version) {
            case '3_0_2':
                $member_id_field = 'member_id';
                $member_group_id_field = 'member_group_id';
            break;
            default:
                $member_id_field = 'id';
                $member_group_id_field = 'mgroup';
        }//end switch
        $tmp = explode(':', $member_id);
        if (!isset($tmp[1])) return Array();
        $tmp = explode('_', $tmp[1]);
        $id = $tmp[1];

        $sql = $this->_buildQuery(Array($member_group_id_field), 'members', 'm', ' WHERE m.'.$member_id_field.'='.$id);

        $data = $this->_getResult($sql, Array(), TRUE, TRUE);

        return $data;

    }//end getMemberParent()


    function getListOfMembers($group_id=0)
    {
        $member_id_field = $this->_getMemberIdField();
        $member_group_id_field = $this->_getMemberGroupIdField();
        $fields = Array(
                    'u.'.$member_id_field,
                    'u.name',
                    'u.'.$member_group_id_field,
                  );

        if ($group_id== 0) {
            $sql = $this->_buildQuery($fields, 'members', 'u');
        } else {
            $tmp = explode(':', $group_id);
            if (!isset($tmp[1])) return Array();
            $tmp = explode('_', $group_id);
            $id = $tmp[1];
            $sql = $this->_buildQuery($fields, 'members', 'u', ' WHERE u.'.$member_group_id_field.'='.$id);
        }

        $results = $this->_getResult($sql, Array(), FALSE);

        // Different format, so extra cleaning is involved
        foreach ($results as $index => $result) {
            $results[$index] = $this->_maintainDataFormat($result);
        }//end foreach

        return $results;

    }//end getListOfMembers()


//--        ROOT FORUMS        --//


    function getRootForumInfo($forum_id)
    {
        $tmp = explode(':', $forum_id);
        if (!isset($tmp[1])) return Array();
        $tmp = explode('_', $tmp[1]);
        $id = $tmp[1];

        $fields = Array(
                    'f.id',
                    'f.name',
                    'f.description',
                  );
        $sql = $this->_buildQuery($fields, 'forums', 'f', ' WHERE f.id='.$id);

        return $this->_getResult($sql, Array(), TRUE);

    }//end getRootForumInfo()


    function getListOfRootForums()
    {
        $fields = Array(
                    'f.id',
                    'f.name',
                  );
        $sql = $this->_buildQuery($fields, 'forums', 'f', ' WHERE f.parent_id=-1');

        return $this->_getResult($sql, Array(), FALSE);

    }//end getListOfRootForums()


//--        FORUMS        --//


    function getForumInfo($forum_id)
    {
        $tmp = explode(':', $forum_id);
        if (!isset($tmp[1])) return Array();
        $tmp = explode('_', $tmp[1]);
        $id = $tmp[1];

        $fields = Array(
                    'f.id',
                    'f.name',
                    'f.description',
                    'f.topics',
                    'f.parent_id',
                    'f.last_post',
                    'f.last_poster_name',
                  );
        $sql = $this->_buildQuery($fields, 'forums', 'f', ' WHERE f.id='.$id);

        return $this->_getResult($sql, Array(), TRUE);

    }//end getForumInfo()


    function getForumParent($forum_id)
    {
        $tmp = explode(':', $forum_id);
        if (!isset($tmp[1])) return Array();
        $tmp = explode('_', $tmp[1]);
        $id = $tmp[1];

        $sql = $this->_buildQuery(Array('parent_id'), 'forums', 'f', ' WHERE f.id='.$id);

        return $this->_getResult($sql, Array(), TRUE);

    }//end getForumParent()


    function getListOfForums($root_forum_id)
    {
        $tmp = explode('_', $root_forum_id);
        $id = $tmp[1];

        $fields = Array(
                    'f.id',
                    'f.name',
                    'f.description',
                  );
        $sql = $this->_buildQuery($fields, 'forums', 'f', ' WHERE f.parent_id='.$id);

        return $this->_getResult($sql, Array(), FALSE);

    }//end getListOfForums()


//--        TOPICS        --//


    function getTopicInfo($topic_id)
    {
        $tmp = explode(':', $topic_id);
        if (!isset($tmp[1])) return Array();
        $tmp = explode('_', $tmp[1]);
        $id = $tmp[1];

        $fields = Array(
                    't.tid',
                    't.title',
                    't.forum_id',
                    't.description',
                    't.posts',
                    't.starter_name',
                    't.start_date',
                    't.last_poster_name',
                    't.last_post',
                    't.poll_state',
                  );
        $sql = $this->_buildQuery($fields, 'topics', 't', ' WHERE t.tid='.$id);

        return $this->_getResult($sql, Array('title' => 'name'), TRUE);

    }//end getTopicInfo()


    function getTopicParent($topic_id)
    {
        $tmp = explode(':', $topic_id);
        if (!isset($tmp[1])) return Array();
        $tmp = explode('_', $tmp[1]);
        $id = $tmp[1];

        $sql = 'SELECT
                    t.forum_id,
                    f.parent_id
                FROM
                    '.$this->db->obj['sql_tbl_prefix'].'topics t,
                    '.$this->db->obj['sql_tbl_prefix'].'forums f
                WHERE
                    t.forum_id=f.id
                    and t.tid='.$id.';
                ';

        return $this->_getResult($sql, Array(), TRUE);

    }//end getTopicParent()


    function getListOfTopics($forum_id)
    {
        $tmp = explode('_', $forum_id);
        $id = $tmp[1];

        $fields = Array(
                    't.tid',
                    't.title',
                    't.description',
                  );
        $where = ' WHERE t.forum_id='.$id.' AND o.pid IS NULL';
        $join =  ' LEFT JOIN '.$this->db->obj['sql_tbl_prefix'].'polls o ON t.tid=o.tid';
        $sql = $this->_buildQuery($fields, 'topics', 't', $where, $join);

        return $this->_getResult($sql, Array('tid' => 'id'));

    }//end getListOfTopics()


//--        POSTS        --//


    function getPostInfo($post_id)
    {
        $tmp = explode(':', $post_id);
        if (!isset($tmp[1])) return Array();
        $tmp = explode('_', $tmp[1]);
        $id = $tmp[1];

        $sql = 'select
                    p.pid,
                    p.author_name,
                    p.post_date,
                    p.post_title,
                    p.post_parent,
                    p.post,
                    t.tid,
                    t.title as topic_name,
                    f.name as forum_name
                from
                    '.$this->db->obj['sql_tbl_prefix'].'posts p,
                    '.$this->db->obj['sql_tbl_prefix'].'topics t,
                    '.$this->db->obj['sql_tbl_prefix'].'forums f
                where
                    p.pid='.$id.'
                    and p.topic_id = t.tid
                    and t.forum_id = f.id
                order by
                    post_date desc;';

        return $this->_getResult($sql, Array(), TRUE);

    }//end getPostInfo()


    function getPostParent($post_id)
    {
        $tmp = explode(':', $post_id);
        if (!isset($tmp[1])) return Array();
        $tmp = explode('_', $tmp[1]);
        $id = $tmp[1];

        $sql = 'SELECT
                    t.tid AS topic_id,
                    t.forum_id,
                    f.parent_id
                FROM
                    '.$this->db->obj['sql_tbl_prefix'].'posts p,
                    '.$this->db->obj['sql_tbl_prefix'].'topics t,
                    '.$this->db->obj['sql_tbl_prefix'].'forums f
                WHERE
                    t.forum_id=f.id
                    and p.topic_id=t.tid
                    and p.pid='.$id.';
                ';

        return $this->_getResult($sql, Array(), TRUE);

    }//end getPostParent()


    function getListOfPosts($topic_id, $forum_id=NULL, $limit=0)
    {
        if (is_null($forum_id)) {
            $tmp = explode('_', $topic_id);
            $id = $tmp[1];
            $fields = Array(
                        'p.pid',
                      );
            if ($limit != 0) {
                $sql = $this->_buildQuery($fields, 'posts', 'p', ' WHERE p.topic_id='.$id, ' LIMIT '.$limit);
            } else {
                $sql = $this->_buildQuery($fields, 'posts', 'p', ' WHERE p.topic_id='.$id);
            }
        } else {
            $sql = 'SELECT
                        p.pid, t.tid, p.author_id, p.post_date
                    FROM
                        '.$this->db->obj['sql_tbl_prefix'].'posts p,
                        '.$this->db->obj['sql_tbl_prefix'].'topics t
                    WHERE
                        p.topic_id=t.tid AND
                        t.forum_id='.$forum_id.'
                    ORDER BY
                        p.post_date DESC
            ';
            if ($limit != 0) $sql .= ' LIMIT '.$limit;
            $sql .= ';';
        }

        return $this->_getResult($sql, Array('pid' => 'id'));

    }//end getListOfPosts()


//--        POLLS        --//


    function getPollInfo($poll_id)
    {
        $tmp = explode(':', $poll_id);
        if (!isset($tmp[1])) return Array();
        $tmp = explode('_', $tmp[1]);
        $id = $tmp[1];

        $fields = Array(
                    'o.pid',
                    'o.tid',
                    'o.start_date',
                    'o.choices',
                    'o.starter_id',
                    'o.votes',
                    'o.forum_id',
                    'o.poll_question',
                    't.poll_state as poll_state',
                  );
        $join =  ' LEFT JOIN '.$this->db->obj['sql_tbl_prefix'].'topics t ON t.tid=o.tid';
        $sql = $this->_buildQuery($fields, 'polls', 'o', ' WHERE o.pid='.$id, $join);

        return $this->_getResult($sql, Array(), TRUE);

    }//end getPollInfo()


    function getListOfPolls()
    {
        $sql = $this->_buildQuery('*', 'polls', 'o');

        return $this->_getResult($sql, Array('pid' => 'id'));

    }//end getListOfPolls()


//--        QUERIES        --//


    function _buildQuery($columns, $table_name, $table_short_name, $where='', $join='', $order_by='', $limit='')
    {
        if ($columns == '*') {
            $sql = 'SELECT * ';
        } else {
            $sql = 'SELECT '.implode(', ', $columns);
        }

        $sql .= ' FROM '.$this->db->obj['sql_tbl_prefix'].$table_name.' '.$table_short_name;

        // JOIN clause
        if (!empty($join)) $sql .= $join;

        // WHERE clause
        if (!empty($where)) $sql .= $where;

        // ORDER BY clause
        if (!empty($order_by)) $sql .= $order_by;

        // LIMIT clause
        if (!empty($limit)) $sql .= $limit;

        $sql .= ';';

        return $sql;

    }//end _buildQuery()


    function _getResult($sql, $key_change=Array(), $one_element=FALSE, $backward=FALSE)
    {
        $db_result = $this->db->query($sql);
        $this->_assertValidResult($this->db, 'Could not get result from IPB');

        $result = Array();
        while ($row = $this->db->{$this->command}($db_result)) {
            if (!empty($key_change)) {
                foreach ($key_change as $old_key => $new_key) {
                    $row[$new_key] = $row[$old_key];
                }
            }
            $result[] = $row;
        }
        $this->db->{$this->command_free}($db_result);
        if (empty($result)) return Array();
        if ($one_element) $result = array_pop($result);

        if ($backward) {
            $result = $this->_maintainDataFormat($result);
        }//end if

        return $this->_htmlDecode($result);

    }//end _getResult()


//--        HTML DECODE        --//


    function _htmlDecode($result)
    {

        // list from post_parser.php
        $html_code_table = Array(
                            '&#39;'                 => '\'',
                            '&#039;'                => '\'',
                            '&#33;'                 => '!',
                            '&#036;'                => '$',
                            '&#124;'                => '|',
                            '&amp;'                 => '&',
                            '&gt;'                  => '>',
                            '&lt;'                  => '<',
                            '&quot;'                => '"',
                            '&#153;'                => '(tm)',
                            '&#58;'                 => ':',
                            '&#91;'                 => '[',
                            '&#93;'                 => ']',
                            '&#41;'                 => ')',
                            '&#40;'                 => '(',
                            '&#60;'                 => '<',
                            '&#62;'                 => '>',
                            '&#043;'                => '+',
                            '&#045;'                => '-',
                            'j&#097;v&#097;script'  => 'javascript',
                            '&#097;lert'            => 'alert',
                            '&#097;lert'            => 'about:',
                            '&#111;nmouseover'      => 'onmouseover',
                            '&#111;nclick'          => 'onclick',
                            '&#111;nload'           => 'onload',
                            '&#111;nsubmit'         => 'onsubmit',
                           );

        foreach ($result as $key => $value) {
            if (is_string($value)) {
                foreach ($html_code_table as $html_code => $char) {
                    $new_result[$key] = str_replace($html_code, $char, $value);
                    $value = $new_result[$key];
                }
            } else {
                $new_result[$key] = $value;
            }
        }

        return $new_result;

    }//end _htmlDecode()


    protected function _assertValidResult($db, $message)
    {
        if (!empty($db->error)) {
            trigger_error($message.': '.$db->error, E_USER_ERROR);
        }

    }//end _assertValidResult()


    protected function _getMemberIdField()
    {
        switch ($this->version) {
            case '3_0_2':
                return 'member_id';
            default:
                return 'id';
        }//end switch
    
    }//end _getMemberIdField()


    protected function _getMemberGroupIdField()
    {
        switch ($this->version) {
            case '3_0_2':
                return 'member_group_id';
            default:
                return 'mgroup';
        }//end switch
    
    }//end _getMemberIdField()


    protected function _maintainDataFormat($data=Array())
    {
        switch ($this->version) {
            case '3_0_2':
                if (isset($data['member_id'])) {
                    $data['id'] = $data['member_id'];
                }//end if
                if (isset($data['member_group_id'])) {
                    $data['mgroup'] = $data['member_group_id'];
                }//end if
            break;
        }//end switch

        return $data;
    
    }//end _maintainDataFormat()


}//end class

?>