UTF-8 CuteNews: Potential hacking attack detected! Halting script. (Set $http_stop to FALSE in /inc/functions.inc.php to disable.)');
}
if($stop_for_array && count($_GET) > 0){
foreach($_GET as $itemm){
if(is_array($itemm)){
die('UTF-8 CuteNews: ?GET may not contain arrays. (Set $stop_for_array to FALSE in /inc/functions.inc.php to disable.)');
}
}
}
if(isset($_GET['cutepath']) && $stop_for_cutepath){
die('UTF-8 CuteNews: Potential hacking attack detected! Halting script. (Set $stop_for_cutepath to FALSE in /inc/functions.inc.php to disable.)');
}
//-------------------
// Sanitize Variables
//-------------------
if(isset($template) and $template != '' and !preg_match('/^[_a-zA-Z0-9-]{1,}$/', $template)){
die('invalid template characters');
}
if(isset($archive) and $archive != '' and !preg_match('/^[_a-zA-Z0-9-]{1,}$/', $archive)){
die('invalid archive characters');
}
if($PHP_SELF == ''){
$PHP_SELF = $_SERVER['PHP_SELF'];
}
$phpversion = @phpversion();
$a7f89abdcf9324b3 = '';
$comm_start_from = htmlspecialchars($comm_start_from);
$start_from = htmlspecialchars($start_from);
$archive = htmlspecialchars($archive);
$subaction = htmlspecialchars($subaction);
$id = htmlspecialchars($id);
$ucat = htmlspecialchars($ucat);
if(is_array($category)){
foreach($category as $ckey => $cvalue){
$category[$ckey] = htmlspecialchars($category[$ckey]);
}
}
else{
$category = htmlspecialchars($category);
}
$number = htmlspecialchars($number);
$template = htmlspecialchars($template);
$show = htmlspecialchars($show);
$config_version_name = 'CuteNews v1.4.6';
$config_version_id = 186;
$config_utf8_id = '8b';
## manage language files
if(isset($lang)){
if(!preg_match('/^[a-z]{1,}$/', $lang) || !file_exists($cutepath.'/data/'.$lang.'.clf')){
echo 'Warning: Invalid language value.';
$lang = 'english';
}
require_once($cutepath.'/data/'.$lang.'.clf');
}
else{
ob_start();
require_once($cutepath.'/data/english.clf');
ob_end_clean();
}
///////////////////////////////////////////////
// Function: Utf8_*, UniOrd
// Description: UTF-8 CN specific functions
function Utf8_HtmlEntities($string){
####
# Text to UTF-8 or HTML Entities tool Copyright (c) 2006 - Brian Huisman (GreyWyvern)
# This script is licenced under the BSD licence: http://www.greywyvern.com/code/bsd
# Modification to a PHP function and bug fixing: 2008, 2009 - http://korn19.ch
####
global $utf8_error;
$string = trim($string);
$char = ''; $string_copy = $string;
while(strlen($string) > 0){
preg_match('/^(.)(.*)$/us', $string, $match);
$test = utf8_decode($match[1]);
if(strlen($match[1]) > 1 || ($test == '?' && uniord($match[1]) != '63')){
$char .= '&#'.uniord($match[1]).';';
}
else{
if(strlen($match[1]) != strlen(htmlentities($match[1]))){
$char .= '&#'.uniord($match[1]).';';
}
else{
$char .= $match[1];
}
}
$string = $match[2];
}
// UTF-8 check
if(strlen($char) < strlen($string_copy)){
$utf8_error = true;
return '';
}
return $char;
}
function UniOrd($c){
$ud = 0;
if (ord($c{0}) >= 0 && ord($c{0}) <= 127) $ud = ord($c{0});
if (ord($c{0}) >= 192 && ord($c{0}) <= 223) $ud = (ord($c{0})-192)*64 + (ord($c{1})-128);
if (ord($c{0}) >= 224 && ord($c{0}) <= 239) $ud = (ord($c{0})-224)*4096 + (ord($c{1})-128)*64 + (ord($c{2})-128);
if (ord($c{0}) >= 240 && ord($c{0}) <= 247) $ud = (ord($c{0})-240)*262144 + (ord($c{1})-128)*4096 + (ord($c{2})-128)*64 + (ord($c{3})-128);
if (ord($c{0}) >= 248 && ord($c{0}) <= 251) $ud = (ord($c{0})-248)*16777216 + (ord($c{1})-128)*262144 + (ord($c{2})-128)*4096 + (ord($c{3})-128)*64 + (ord($c{4})-128);
if (ord($c{0}) >= 252 && ord($c{0}) <= 253) $ud = (ord($c{0})-252)*1073741824 + (ord($c{1})-128)*16777216 + (ord($c{2})-128)*262144 + (ord($c{3})-128)*4096 + (ord($c{4})-128)*64 + (ord($c{5})-128);
if (ord($c{0}) >= 254 && ord($c{0}) <= 255) $ud = false; // error
return $ud;
}
function UnUtf8_htmlentities($string){
// prepare data 4