if ( is_array( $ibforums->cache['bbcode'] ) and count( $ibforums->cache['bbcode'] ) )
  {

    # XSS Clean
      $t = preg_replace( "#javascript\:#is", "java script:", $t );
      $t = str_replace(  "`"               , "& #96;"       , $t );

$this->forum_read[$id] = $stamp;

$this->forum_read[ intval($id) ] = intval($stamp);

/*-------------------------------------------------------------------------*/
    // Makes incoming info "safe"              
    /*-------------------------------------------------------------------------*/

/*-------------------------------------------------------------------------*/
    // Makes topics read or forum read cookie safe         
    /*-------------------------------------------------------------------------*/
    /**
    * Makes int based arrays safe
    * XSS Fix: Ticket: 243603
    * Problem with cookies allowing SQL code in keys
    *
    * @param    array    Array
    * @return    array    Array (Cleaned)
    * @since    2.1.4(A)
    */
    function clean_int_array( $array=array() )
    {
        $return = array();
        
        if ( is_array( $array ) and count( $array ) )
        {
            foreach( $array as $k => $v )
            {
                $return[ intval($k) ] = intval($v);
            }
        }
        
        return $return;
    }
        
    /*-------------------------------------------------------------------------*/
    // Makes incoming info "safe"              
    /*-------------------------------------------------------------------------*/

$this->read_array = unserialize(stripslashes($read));

$this->read_array = $this->ipsclass->clean_int_array( unserialize(stripslashes($read)) );

$this->read_array = unserialize(stripslashes($read));

$this->read_array = $this->ipsclass->clean_int_array( unserialize(stripslashes($read)) );

$this->read_array = unserialize(stripslashes($read));

$this->read_array = $this->ipsclass->clean_int_array( unserialize(stripslashes($read)) );

$topic_array = array_slice( array_keys( $topics ), 0, 5 );

$topic_array = $this->ipsclass->clean_int_array( $topic_array );

$txt = preg_replace( "#javascript\:#is", "java script:", $txt );
        $txt = str_replace(  "`"               , "`"       , $txt );

$txt = preg_replace( "#javascript\:#is", "java script:", $txt );
$txt = preg_replace( "#vb script:", $txt );
$txt = str_replace(  "`"               , "`"       , $txt );
$txt = preg_replace( "#moz\-binding:#is", "moz binding:", $txt );

  else if ( ! $img_attributes[2] )
                {
                    // Unlink the file first
                    @unlink( $this->saved_upload_name );
                    $this->error_no = 5;
                    return;
                }

else if ( ! $img_attributes[2] )
                      {
                    // Unlink the file first
                    @unlink( $this->saved_upload_name );
                    $this->error_no = 5;
                    return;
                }
                else if ( $img_attributes[2] == 1 AND ( $this->file_extension == 'jpg' OR $this->file_extension == 'jpeg' ) )
                {
                    // Potential XSS attack with a fake GIF header in a JPEG
                    @unlink( $this->saved_upload_name );
                    $this->error_no = 5;
                    return;
                }

   $this->output = preg_replace( "#(value=[\"']{$this->ipsclass->input['lastdate']}[\"'])#i", "\\1 selected='selected'", $this->output );

$this->output = preg_replace( "#(value=[\"']".intval($this->ipsclass->input['lastdate'])."[\"'])#i", "\\1 selected='selected'", $this->output );

$this->msglib->to_by_id = $this->ipsclass->input['from_contact'];

$this->msglib->to_by_id = intval( $this->ipsclass->input['from_contact'] );

   $this->cron_key = substr( trim(stripslashes($_REQUEST['ck'])), 0, 32 );

  $this->cron_key = addslashes( substr( trim(stripslashes($this->ipsclass->txt_alphanumerical_clean($_REQUEST['ck']))), 0, 32 ) );

 var $acpversion   = '21012.60504.u';

var $acpversion   = '21012.060516.s';

$html = preg_replace( "/name=[\"']iconid[\"']\s*value=[\"']$post_icon\s?[\"']/", "name='iconid' value='$post_icon' checked", $html );

$html = preg_replace( "/name=[\"']iconid[\"']\s*value=[\"']".intval($post_icon)."\s?[\"']/", "name='iconid' value='$post_icon' checked", $html );

$html_forums = preg_replace( "/<option value=\"".$this->ipsclass->input['df']."\"/", "<option value=\"".$this->ipsclass->input['df']."\" selected", $html_forums );

$html_forums = preg_replace( "/<option value=\"".intval($this->ipsclass->input['df'])."\"/", "<option value=\"".$this->ipsclass->input['df']."\" selected", $html_forums );

  $this->orig_post = $this->ipsclass->DB->fetch_row();
        
        if (! $this->orig_post['pid'])
        {
            $this->ipsclass->Error( array( LEVEL => 1, MSG => 'missing_files') );
        }

$this->orig_post = $this->ipsclass->DB->fetch_row();
        
        if (! $this->orig_post['pid'])
        {
            $this->ipsclass->Error( array( LEVEL => 1, MSG => 'missing_files') );
        }
        
        //-----------------------------------------
        // Same topic?
        //-----------------------------------------
        
        if ( $this->orig_post['topic_id'] != $this->topic['tid'] )
        {
            $this->ipsclass->Error( array( LEVEL => 1, MSG => 'missing_files') );

# XSS Clean
            if( $this->strip_hex_entity )
            {
                        while( preg_match( "/[&|&amp\;]#x(\w+?);/i", $txt ) )
                        {
                                    $txt = preg_replace( "/[&|&amp\;]#x(\w+?);/ies" , "\$this->regex_bash_hex( '\\1' )" , $txt );
                        }
                        $txt = preg_replace( "#&amp(?!\;)#", "", $txt );
            }

# XSS Clean
            /*if( $this->strip_hex_entity )
            {
                        while( preg_match( "/[&|&amp\;]#x(\w+?);/i", $txt ) )
                        {
                                    $txt = preg_replace( "/[&|&amp\;]#x(\w+?);/ies" , "\$this->regex_bash_hex( '\\1' )" , $txt );
                        }
                        $txt = preg_replace( "#&amp(?!\;)#", "", $txt );
            }*/

for ($i=0; $i < count($match[0]); $i++)
            {
                        $tmp = $row['bbcode_replace'];
                        $tmp = str_replace( '{content}', $match[2][$i], $tmp );
                        $t = str_replace( $match[0][$i], $tmp, $t );
            }

 for ($i=0; $i < count($match[0]); $i++)
            {
                        # XSS Check: Bug ID: 980
                        if ( $row['bbcode_tag'] == 'post' OR $row['bbcode_tag'] == 'topic' )
                        {
                                    $match[2][$i] = intval( $match[2][$i] );
                        }

                        $tmp = $row['bbcode_replace'];
                        $tmp = str_replace( '{content}', $match[2][$i], $tmp );
                        $t = str_replace( $match[0][$i], $tmp, $t );

            }

 $url['html'] = str_replace( "&" , "&" , $url['html'] );

  $url['html'] = str_replace( "&" , "&" , $url['html'] );

$url['show'] = preg_replace( "/&/" , "&" , $url['show'] );

$url['show'] = str_replace( "&" , "&" , $url['show'] );

 /*-------------------------------------------------------------------------*/
            // Convert string between char-sets
            /*-------------------------------------------------------------------------*/

/*-------------------------------------------------------------------------*/
            // XSS Clean: URLs
            /*-------------------------------------------------------------------------*/

            /**
            * Check URL validity
            *
            * @param string Input String
            * @return boolean
            * @since 2.1.0
            */

            function xss_check_url( $url )
            {
                        $url = trim( urldecode( $url ) );

                        if ( ! preg_match( "#^https?://(?:[^<>*\"]+|[a-z0-9/\._\- !]+)$#iU", $url ) )
                        {
                                    return FALSE;
                        }

                        return TRUE;
             }

 if ( preg_match( "/^http:\/\/$/i", $this->ipsclass->input['url_photo'] ) )
            {
                        $this->ipsclass->input['url_photo'] = "";
            }

if ( $this->ipsclass->xss_check_url( $this->ipsclass->input['url_photo'] ) !== TRUE )
            {
                        $this->ipsclass->input['url_photo'] = '';
            }

if ( preg_match( "/^http:\/\/$/i", $this->ipsclass->input['url_avatar'] ) )
            {
                        $this->ipsclass->input['url_avatar'] = "";
            }

 if ( $this->ipsclass->xss_check_url( $this->ipsclass->input['url_avatar'] ) !== TRUE )
            {
                        $this->ipsclass->input['url_avatar'] = '';
            }

 if ( preg_match( "/java(\s+?)?script(\:|\s)/is", $url ) )

 if ( preg_match( "/javascript\:/is", preg_replace( "#/\s{1,}#s", "", $url ) ) )

//-----------------------------------------
            // Is the img extension allowed to be posted?
            //-----------------------------------------

            if ( $this->ipsclass->vars['img_ext'] )
            {

//-----------------------------------------
            // Check...
            //-----------------------------------------

            if ( $this->ipsclass->xss_check_url( $url ) !== TRUE )
            {
                        return '';
            }

 $this->topic = $this->ipsclass->DB->fetch_row();

            if (empty($this->topic['tid']))
            {
                        $this->ipsclass->Error( array( 'LEVEL' => 1, 'MSG' => 'missing_files') );
            }

 if ( $this->ipsclass->input['f'] AND ( $this->topic['forum_id'] != $this->ipsclass->input['f'] ) )
            {
                        $this->ipsclass->Error( array( 'LEVEL' => 1, 'MSG' => 'missing_files') );
            }

//-----------------------------------------
        // Are we viewing Posts?
        //-----------------------------------------
        
        $post_id = intval($this->ipsclass->input['pid']);

//-----------------------------------------
        // Are we viewing Posts?
        //-----------------------------------------
        
        $post_id = intval($this->ipsclass->input['pid']);
        
        if($post_id && !in_array($post_id, $this->pids))
        {
            $this->ipsclass->Error( array( LEVEL => 1, MSG => 'missing_files') );
        }

//-----------------------------------------
            // Avatar?
            //-----------------------------------------

            if ( $r['avatar_location'] and $r['avatar_type'] )
            {
                $avatar = $this->ipsclass->get_avatar( $r['avatar_location'], 1, '25x25', $r['avatar_type'] );

                if ( ! strstr( $avatar, 'width=' ) )
                {
                    $avatar = str_replace( '<img', "<img width='25' height='25'", $avatar );
                }
            }
            else
            {
                $avatar = "<img src='{$this->ipsclass->skin_url}/images/memsearch_head.gif' border='0' />";
            }

//-----------------------------------------
            // Avatar?
            //-----------------------------------------

            //-----------------------------------------
            // SECURITY UPDATE: Removing  user avatar
            //-----------------------------------------

            $avatar = "<img src='{$this->ipsclass->skin_url}/images/memsearch_head.gif' border='0' />";

$default = "[img]".$url."[/img]";

$default = "[img]".str_replace( '[', '&# 091;', $url )."[/img]";

if ( preg_match( "/[?&;]/", $url) )

if ( preg_match( "/[?&;\<\[]/", $url) )

preg_match_all( "#(\[$preg_tag\])((?!\[/$preg_tag\]).+?)?(\[/$preg_tag\])#si", $t, $match );

preg_match_all( "#(\[$preg_tag\])((?!\[/$preg_tag\]).+?)?(\[/$preg_tag\])#si", $t, $match );

if ( $row['bbcode_tag'] == 'snapback' )
{
    $match[2][$i] = intval( $match[2][$i] );
}