Thank you to anyone who has already donated - your generous donations helped make three months of treatment possible.

My brother Nate continues to fight stage IV Hodgkin's lymphoma. He's just 31, with a wife and baby girl. They have no active income (since he's been unable to return to work), no insurance, and cannot afford the treatment he needs. Nate and his family need your help. Please consider a donation, every dollar helps. Thanks.

Read Nate's story Support Nate by buying an official Pastie t-shirt Hide this message

Document@2x
|
Chain_link@2x
|
Arrow_down@2x
|
Spiral_paper@2x
A A A

Ruby       Report abuse 

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333

diff -r -w pixelpost_v1.7.2/ReadMe.txt pixelpost_v1.7.3/ReadMe.txt
1c1
< Pixelpost version 1.7.2
---
> Pixelpost version 1.7.3
diff -r -w pixelpost_v1.7.2/addons/copy_folder.php pixelpost_v1.7.3/addons/copy_folder.php
77,78c77
< 
<   for ($k=0;$k<count($files);$k++)
---
>   foreach($files as $k => $file)
80,81d78
<       $file = $files[$k];
< 
83a81
>       $file = $files[$k];
165c163
< Enter the absolute path to folder:<br /><br />
---
> Enter the relative path to the folder:<br /><br />
diff -r -w pixelpost_v1.7.2/addons/paged_archive.php pixelpost_v1.7.3/addons/paged_archive.php
319,321c319,322
<   { // archive date is available
<       $archivedate_start = $_GET['archivedate'] ."-01 00:00:00";
<       $archivedate_end = $_GET['archivedate'] ."-31 23:59:59";
---
>   { // archive date is available.
>       $archivedate = preg_replace('/[^0-9\-]/', '', $_GET['archivedate']);
>       $archivedate_start = $archivedate ."-01 00:00:00";
>       $archivedate_end = $archivedate ."-31 23:59:59";
395,396c396,398
<       $archivedate_start = mysql_real_escape_string($_GET['archivedate']) ."-01 00:00:00";
<       $archivedate_end = mysql_real_escape_string($_GET['archivedate']) ."-31 23:59:59";
---
>       $archivedate = preg_replace('/[^0-9\-]/', '', $_GET['archivedate']);
>       $archivedate_start = mysql_real_escape_string($archivedate) ."-01 00:00:00";
>       $archivedate_end = mysql_real_escape_string($archivedate) ."-31 23:59:59";
439c441
<           $archivedate=$_GET['archivedate'];
---
>           $archivedate = preg_replace('/[^0-9\-]/', '', $_GET['archivedate']);
diff -r -w pixelpost_v1.7.2/admin/images_edit.php pixelpost_v1.7.3/admin/images_edit.php
184c184
<                       $values[1] = '('.(int)$idz[$i].', "'.$tags_arr[$y].'", "")';
---
>                       $values[1] = '('.(int)$idz[$x].', "'.$tags_arr[$y].'", "")';
195c195
<                       $values[1] = '('.(int)$idz[$i].', "", "'.$tags_arr[$y].'")';
---
>                       $values[1] = '('.(int)$idz[$x].', "", "'.$tags_arr[$y].'")';
378c378
<       if ($_SESSION['numimg_pp'] == 0)    $_SESSION['numimg_pp'] = 10;
---
>       if (isset($_SESSION['numimg_pp']) AND $_SESSION['numimg_pp'] == 0 OR !isset($_SESSION['numimg_pp']))  $_SESSION['numimg_pp'] = 10;
544c544,545
<               $image_page_Links .= "<a href='index.php?view=images&amp;page=$pagecounter$getfstring'>".($_GET['page']==$pagecounter?'<b>'.$pcntr.'</b>':$pcntr)."</a> ";
---
>               $page_num = ($page == $pagecounter) ? "<strong>$pcntr</strong>" : $pcntr;
>               $image_page_Links .= "<a href='index.php?view=images&amp;page=$pagecounter$getfstring'>$page_num</a> ";
644,645c645
<     $category = $imagerow['category'];
<     $category = explode(",",$category);
---
>      // fetch the categories
646a647,653
>      $category = array();
> 
>     $query = mysql_query("SELECT `cat_id` FROM " . $pixelpost_db_prefix . "catassoc where image_id='$getid'");
>     while(list($cat_id) = mysql_fetch_row($query))
>     {
>       $category[] = $cat_id;
>     }
704c711
<           category_list_as_table(array(), $cfgrow);
---
>           category_list_as_table($category, $cfgrow);
diff -r -w pixelpost_v1.7.2/admin/index.php pixelpost_v1.7.3/admin/index.php
45a46,47
> define('PIXELPOST',true);
> 
69c71
< $version = "MS43LjIgKFF1aWNraWUpIC0gSnVseSAyMDA5";
---
> $version = "MS43LjMgKFF1aWNraWUgRml4KSAtIFNlcHRlbWJlciAyMDA5";
77c79
< if( $installed_version < 1.72 )
---
> if( $installed_version < 1.73 )
diff -r -w pixelpost_v1.7.2/admin/install/install_functions.php pixelpost_v1.7.3/admin/install/install_functions.php
33c33,36
<                  'japanese'=>array('JP','Japanese')
---
>                  'japanese'=>array('JP','Japanese'),
>                    'romanian'=>array('RO','Romana'),
>                    'russian'=>array('RU','Russian'),
>                    'czech'=>array('CS','Česky')
247c250
<   $var = htmlentities(stripslashes(strip_tags($var)));
---
>   $var = stripslashes(strip_tags($var));
1010c1013
<       $admin_user     = stripslashes($data['admin_username']);
---
>       $admin_username = stripslashes($data['admin_username']);
diff -r -w pixelpost_v1.7.2/admin/install/install_schema.php pixelpost_v1.7.3/admin/install/install_schema.php
61,68d60
<        //$ins_data[] = UpgradeTo165($prefix,'1.65');
<        
<   //case 1.65:
<        //$ins_data[] = UpgradeTo1651($prefix,'1.651');
<   
<   //case 1.651:
<        //$ins_data[] = UpgradeTo1652($prefix,'1.652');
<        
73a66,67
>   case 1.72:
>       $ins_data[] = UpgradeTo171($prefix,'1.73');
diff -r -w pixelpost_v1.7.2/admin/install.php pixelpost_v1.7.3/admin/install.php
13c13
< define('PP_VERSION', '1.72');
---
> define('PP_VERSION', '1.73');
diff -r -w pixelpost_v1.7.2/admin/new_image.php pixelpost_v1.7.3/admin/new_image.php
81c81,82
<           $userfile = strtolower($_FILES['userfile']['name']);
---
>           $userfile = strtolower(str_replace(" ", "_", $_FILES['userfile']['name']));
>           $userfile = preg_replace('/[^0-9a-z\-_\.]/', '', $userfile);
diff -r -w pixelpost_v1.7.2/admin/pass_recovery.php pixelpost_v1.7.3/admin/pass_recovery.php
2a3,4
> if(!defined('PIXELPOST')){die("Try another day!!");}
> 
diff -r -w pixelpost_v1.7.2/admin/view_info.php pixelpost_v1.7.3/admin/view_info.php
135a136,172
> echo "
>   <div class='jcaption'>Comment ERROR codes explanation</div>
>   <div class='content'>
>   <table border=\"0\" cellspacing=\"5\">
>     <tbody><tr>
>     <td><b>Errorcode</b></td>
>     <td><b>Description</b></td>
>   </tr>
>   <tr>
>     <td>ERR: 01</td>
>     <td>The comment was blocked because the token didn't match with the controltoken.</td>
>   </tr>
>   <tr>
>     <td>ERR: 02</td>
>     <td>The ID of the image didn't correspond with the image ID in the form.</td>
>   </tr>
>   <tr>
>     <td>ERR: 03</td>
>     <td>The comment was blocked on an intrusion ID.</td>
>   </tr>
>   <tr>
>     <td>ERR: 04</td>
>     <td>The comment contained more than the allowed maximum of URLS.</td>
>   </tr>
>   <tr>
>     <td>ERR: 05</td>
>     <td>The comment contains blacklisted words or IPaddress.</td>
>   </tr>
>   <tr>
>     <td>ERR: 06</td>
>     <td>The comment doesn't allow comments (disabled by the administrator).</td>
>   </tr>
>   <tr>
>     <td>ERR: 07</td>
>     <td>The comment was blocked because the e-mailaddress failed the check. People are required to fill in either a real e-mailaddress or leave it blank.</td>
>   </tr>
> </table>";
137a175
>   </div>
diff -r -w pixelpost_v1.7.2/includes/create_tables.php pixelpost_v1.7.3/includes/create_tables.php
461,463d460
<   deactivateAddons($prefix);
<   activatePxlpstAddons($prefix);
<   
528c525,527
< function UpgradeTo171($prefix, $newversion) {
---
> function UpgradeTo171($prefix, $newversion) 
> {
>   
529a529,532
> 
>   deactivateAddons($prefix);
>   activatePxlpstAddons($prefix);
> 
diff -r -w pixelpost_v1.7.2/includes/functions.php pixelpost_v1.7.3/includes/functions.php
623,630c623,624
<   global $pixelpost_db_pixelpost;
<   //start_mysql();
<   // Check to see if the ban table exists, if not, create it
<   //$query = "show tables from ".$pixelpost_db_pixelpost." like '".$pixelpost_db_prefix."addons'";
<   $query = "SHOW TABLES FROM `".$pixelpost_db_pixelpost."` LIKE '".$pixelpost_db_prefix."addons'";
<   $query = mysql_query( $query);
<   $query = mysql_fetch_array($query);
<   if ($query !='')
---
>   $query = mysql_query("SELECT * FROM `".$pixelpost_db_prefix."addons` LIMIT 1");
>   if($query)  
716,723c710,711
<   global $pixelpost_db_pixelpost;
<   //start_mysql();
<   // Check to see if the ban table exists, if not, create it
<   //$query = "show tables from `".$pixelpost_db_pixelpost."` like '".$pixelpost_db_prefix."addons'";
<   $query = "SHOW TABLES FROM `".$pixelpost_db_pixelpost."` LIKE '".$pixelpost_db_prefix."addons'";
<   $query = mysql_query( $query);
<   $query = mysql_fetch_array($query);
<   if ($query !='')
---
>   $query = mysql_query("SELECT * FROM `".$pixelpost_db_prefix."addons` LIMIT 1");
>   if($query)  
833c821
<               echo "<a href='".$_SERVER['PHP_SELF']."?view=".strtolower($funcs['menu_name'])."'>".$funcs['menu_name']."</a>";
---
>               echo "<a href='".$_SERVER['PHP_SELF']."?view=".rawurlencode(strtolower($funcs['menu_name']))."'>".$funcs['menu_name']."</a>";
840c828
<               if ($funcs['workspace']=='admin_main_menu_contents' & $_GET['view']!=strtolower($funcs['menu_name']))   continue;
---
>               if ($funcs['workspace']=='admin_main_menu_contents' & $_GET['view']!=rawurlencode(strtolower($funcs['menu_name']))) continue;
928c916
<               $toecho ="|<a class='".$selecteclass."' href='?view=".strtolower($menu_name) ."&amp;".$menuitem ."=".$submenuitem.$additional."' id='".$menu_name.$submenu_name."'>" .strtoupper($submenu_name) ."</a>";
---
>               $toecho ="|<a class='".$selecteclass."' href='?view=".rawurlencode(strtolower($menu_name)) ."&amp;".$menuitem ."=".$submenuitem.$additional."' id='".$menu_name.$submenu_name."'>" .strtoupper($submenu_name) ."</a>";
1311c1299
<   global $pixelpost_db_prefix;
---
>   global $pixelpost_db_prefix, $admin_lang_spam_err_6, $admin_lang_spam_com_upd;
1345,1346c1333,1334
<       if (mysql_error())  $additional_msg = "$admin_lang_spam_err_6 ".mysql_error()."<br/>";
<       else    $additional_msg = "$admin_lang_spam_com_upd"."<br/>";
---
>       if (mysql_error())  $additional_msg = $admin_lang_spam_err_6.'&nbsp;'.mysql_error().'<br />';
>       else    $additional_msg = $admin_lang_spam_com_upd.'<br />';
1359c1347
<   global $pixelpost_db_prefix;
---
>   global $pixelpost_db_prefix, $admin_lang_spam_com_del, $admin_lang_spam_err_7;
1392,1393c1380,1381
<       if (mysql_error())  $additional_msg = "$admin_lang_spam_err_7 ".mysql_error()."<br/>";
<       else    $additional_msg = "$admin_lang_spam_com_del"."<br/>";
---
>       if (mysql_error())  $additional_msg = $admin_lang_spam_err_7.'&nbsp;'.mysql_error().'<br />';
>       else    $additional_msg = $admin_lang_spam_com_del.'<br />';
1405c1393
<   global $pixelpost_db_prefix;
---
>   global $pixelpost_db_prefix, $admin_lang_spam_err_8, $admin_lang_spam_visit_del;
1438c1426
<           $additional_msg = "$admin_lang_spam_err_8".mysql_error()."<br/>";
---
>           $additional_msg = $admin_lang_spam_err_8.'&nbsp;'.mysql_error().'<br />';
1440c1428
<           $additional_msg = "$admin_lang_spam_visit_del"."<br/>";
---
>           $additional_msg = $admin_lang_spam_visit_del.'<br />';
diff -r -w pixelpost_v1.7.2/includes/functions_browse.php pixelpost_v1.7.3/includes/functions_browse.php
33c33,34
<       $where = "AND (DATE_FORMAT(datetime, '%Y-%m')='".$_GET['archivedate']."')"; //DATE_FORMAT(foo, '%Y-%m-%d')
---
>       $archivedate = preg_replace('/[^0-9\-]/', '', $_GET['archivedate']);
>       $where = "AND (DATE_FORMAT(datetime, '%Y-%m')='$archivedate')"; //DATE_FORMAT(foo, '%Y-%m-%d')
diff -r -w pixelpost_v1.7.2/includes/functions_comments.php pixelpost_v1.7.3/includes/functions_comments.php
107c107
<       echo "<!DOCTYPE HTML PUBLIC \"-//IETF//DTD HTML 2.0//EN\"><HTML><HEAD>\n<TITLE>404 Not Found</TITLE>\n</HEAD><BODY>\n<H1>Not Found</H1>\nThe comment could not be accepted because it got flagged as SPAM by our anti-SPAM measures. (ERR: 06).<P>\n<P>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.\n<br /><a href='javascript:history.back()'> Click here to go BACK</a></BODY></HTML>";
---
>       echo "<!DOCTYPE HTML PUBLIC \"-//IETF//DTD HTML 2.0//EN\"><HTML><HEAD>\n<TITLE>404 Not Found</TITLE>\n</HEAD><BODY>\n<H1>Not Found</H1>\nThe administrator of this blog has disabled comments for this picture. (ERR: 06)<P>\n<P>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.\n<br /><a href='javascript:history.back()'> Click here to go BACK</a></BODY></HTML>";
diff -r -w pixelpost_v1.7.2/includes/functions_exif.php pixelpost_v1.7.3/includes/functions_exif.php
86a87,88
>           $aperture = round(trim($aperture,' f'),1);
>           $aperture = "f/$aperture";
102c104
<           $flash = $empty_exif;
---
>           $flash = null;
129c131
<     if(isset($exposure)&&$exposure != "")
---
>     if(isset($exposure)&&$exposure != "0")
221,222d222
<     if(isset($flash)&&$flash != "")
<     {
226,231d225
<     else
<     {
<       $flash = "$empty_exif";
<       $tpl = ereg_replace("<EXIF_FLASH>",$flash,$tpl);
<     }
<   }
diff -r -w pixelpost_v1.7.2/index.php pixelpost_v1.7.3/index.php
45a46
> ini_set('arg_separator.output', '&amp;');
49a51
> define('PIXELPOST',true);
55a58,68
> /**
>  * Load the $cfgrow configuration variable and set the upload directory
>  */
> // get config
> if($cfgrow = sql_array("SELECT * FROM ".$pixelpost_db_prefix."config"))
> {
>   $upload_dir = $cfgrow['imagepath'];
> }else{
>   $extra_message= "Coming Soon. Not Installed Yet. Cause #1";
>   show_splash($extra_message,"templates");
> }
63a77,78
> session_start();
> 
90,93d104
< ini_set('arg_separator.output', '&amp;');
< 
< session_start();
< 
105,114d115
< // get config
< if($cfgrow = sql_array("SELECT * FROM ".$pixelpost_db_prefix."config"))
< {
<   $upload_dir = $cfgrow['imagepath'];
< }else{
<   $extra_message= "Coming Soon. Not Installed Yet. Cause #1";
<   show_splash($extra_message,"templates");
< 
< }
< 
248a250
>       setcookie ('lang', "", time() - 3600, '/', false, 0);
256a259
>           setcookie ('lang', "", time() - 3600, '/', false, 0);
261a265
>   setcookie ('lang', "", time() - 3600, '/', false, 0);