MyBB Hacks

define('IN_MYBB', 1);
define('THIS_SCRIPT', 'lctq.php');
require "./global.php";
require_once MYBB_ROOT."inc/functions_post.php";
require_once MYBB_ROOT."inc/functions_forumlist.php";
require_once MYBB_ROOT."inc/class_parser.php";
$parser = new postParser;

if ($_GET['view'] == 'phs')
{
	/* --- Initialisation. --- */
	add_breadcrumb($lang->thuquan_phs_name, "lctq.php?view=phs");
	$plugins->run_hooks("forumdisplay_start");
	$tvisibleonly = "AND t.visible='1'";
	
	/* --- Setup pagingation. --- */
	$perpage = 12;
	if(isset($mybb->input['page']) && intval($mybb->input['page']) > 0)
	{
		$page = intval($mybb->input['page']);
		$start = ($page-1) * $perpage;
		$pages = $threadcount / $perpage;
		$pages = ceil($pages);
		if($page > $pages || $page <= 0)
		{
			$start = 0;
			$page = 1;
		}
	}
	else
	{
		$start = 0;
		$page = 1;
	}

	$end = $start + $perpage;
	$lower = $start + 1;
	$upper = $end;

	if($upper > $threadcount)
	{
		$upper = $threadcount;
	}
	
	$query = $db->query("
		SELECT t.*, t.username AS threadusername, u.username
		FROM ".TABLE_PREFIX."threads t
		LEFT JOIN ".TABLE_PREFIX."users u ON (u.uid = t.uid)
		WHERE t.fid='5' $tvisibleonly
		ORDER BY t.sticky DESC
		LIMIT $start, $perpage
	");
	
	/* --- Getting threads. --- */
	while($thread = $db->fetch_array($query))
	{		
		$threadcache[$thread['tid']] = $thread;
	}

	if(!empty($threadcache))
	{
		$count = 0;
		foreach($threadcache as $thread)
		{
			$plugins->run_hooks("forumdisplay_thread");
			$count++;

			$thread['author'] = $thread['uid'];
			if(!$thread['username'])
			{
				$thread['username'] = $thread['threadusername'];
				$thread['profilelink'] = $thread['threadusername'];
			}
			else
			{
				$thread['profilelink'] = build_profile_link($thread['username'], $thread['uid']);
			}

			$thread['subject'] = $parser->parse_badwords($thread['subject']);
			$thread['subject'] = htmlspecialchars_uni($thread['subject']);

			$prefix = '';

			$thread['threadlink'] = get_thread_link($thread['tid']);
			$thread['lastpostlink'] = get_thread_link($thread['tid'], 0, "lastpost");

			$createdate = my_date($mybb->settings['dateformat'], $thread['dateline']);
			$createtime = my_date($mybb->settings['timeformat'], $thread['dateline']);
			$lastpostdate = my_date($mybb->settings['dateformat'], $thread['lastpost']);
			$lastposttime = my_date($mybb->settings['timeformat'], $thread['lastpost']);
			$lastposter = $thread['lastposter'];
			$lastposteruid = $thread['lastposteruid'];

			// Don't link to guest's profiles (they have no profile).
			if($lastposteruid == 0)
			{
				$lastposterlink = $lastposter;
			}
			else
			{
				$lastposterlink = build_profile_link($lastposter, $lastposteruid);
			}

			$thread['replies'] = my_number_format($thread['replies']);
			$thread['views'] = my_number_format($thread['views']);
			
			if ($count == 4) {
				$count = 0;
			}
			eval("\$lcthreads .= \"".$templates->get("lctg_thuquan_phs_thread")."\";");
		}
	}
	
	eval("\$lclist = \"".$templates->get("lctg_thuquan_phs_list")."\";");
	
	/* --- Output --- */
	$plugins->run_hooks("forumdisplay_end");
	eval("\$lctq_phs = \"".$templates->get("lctg_thuquan_phs")."\";"); 
	output_page($lctq_phs);
}

http://example.com/xt_attach.php/2_1374420223_20e962ae/4d7e787a85a225087b594bdc27358cb5/filename.jpg