query( "SELECT * FROM " . USERPREFIX . "_usergroups ORDER BY id ASC" ); while ( $row = $db->get_row() ) { $user_group[$row['id']] = array (); foreach ( $row as $key => $value ) { $user_group[$row['id']][$key] = $value; } } set_vars( "usergroup", $user_group ); $db->free(); } if( ! $user_group[$member_id['user_group']]['allow_admin'] ) die( "error" ); $txt = trim( convert_unicode( $_POST['txt'], $config['charset'] ) ); if( function_exists( "get_magic_quotes_gpc" ) && get_magic_quotes_gpc() ) $txt = stripslashes( $txt ); require_once(ENGINE_DIR . '/editor/jscripts/tiny_mce/plugins/typograf/typographus.php'); if ($config['charset'] == "windows-1251") $typo = new typographus(); else $typo = new typographus( $config['charset'] ); $txt = $typo->process($txt); $find = array ('/data:/i', '/about:/i', '/vbscript:/i', '/onclick/i', '/onload/i', '/onunload/i', '/onabort/i', '/onerror/i', '/onblur/i', '/onchange/i', '/onfocus/i', '/onreset/i', '/onsubmit/i', '/ondblclick/i', '/onkeydown/i', '/onkeypress/i', '/onkeyup/i', '/onmousedown/i', '/onmouseup/i', '/onmouseover/i', '/onmouseout/i', '/onselect/i', '/javascript/i', '/javascript/i' ); $replace = array ("data:", "about:", "vbscript:", "onclick", "onload", "onunload", "onabort", "onerror", "onblur", "onchange", "onfocus", "onreset", "onsubmit", "ondblclick", "onkeydown", "onkeypress", "onkeyup", "onmousedown", "onmouseup", "onmouseover", "onmouseout", "onselect", "javascript" ); $txt = preg_replace( $find, $replace, $txt ); $txt = preg_replace( "#", "?>", $txt ); @header( "Content-type: text/css; charset=" . $config['charset'] ); echo $txt; ?>