chore: Removed deploy pipeline (#2047)

* fix: handle Nette DateTime objects in birthday validation

* Update register.php

* Update User.php

.cliffignore

@@ -0,0 +1,7 @@
+9766c534bddad8e82e6d19f9bad5cf70b9887f9a
+92ce77ec0ec703c08a659419087a373f76e711f7
+2d53efc945c7747be1755d0b66557a86bdc12cbd
+602137b65129b817811b80975a369ebde3270c6d
+4eb26ae37e1f4c82a45961517ffeb54c20200408
+e59adce848a9e10ee5775254045cbbd915236b8b
+9e0a64108d62236ab07b3f8d10e8c78269b8e1d1

.editorconfig

@@ -0,0 +1,19 @@
+# EditorConfig helps developers define and maintain consistent
+# coding styles between different editors and IDEs
+# editorconfig.org
+
+root = true
+
+[*]
+end_of_line = lf
+charset = utf-8
+trim_trailing_whitespace = true
+insert_final_newline = true
+indent_style = space
+indent_size = 2
+
+[*.{diff,md}]
+trim_trailing_whitespace = false
+
+[*.{php,tpl}]
+indent_size = 4

.env.example

@@ -0,0 +1,13 @@
+# Common params
+TP_HOST=example.com
+TP_PORT=80
+APP_ENV=production
+APP_CRON_ENABLED=true
+APP_DEMO_MODE=false
+
+# Database credentials
+DB_HOST=localhost
+DB_PORT=3306
+DB_DATABASE=torrentpier
+DB_USERNAME=root
+DB_PASSWORD=secret

.github/FUNDING.yml

@@ -0,0 +1,4 @@
+# These are supported funding model platforms
+
+github: torrentpier
+open_collective: torrentpier

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,62 @@
+name: Bug Report
+description: File a bug report
+title: "[Bug]"
+labels: [Bug]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for taking the time to fill out this bug report!
+        The more detailed this bug report is, the faster it can be reviewed and fixed.
+  - type: input
+    id: version-torrentpier
+    attributes:
+      label: TorrentPier Version
+      description: TorrentPier version your using?
+      placeholder: 2.4.0
+    validations:
+      required: true
+  - type: input
+    id: version-php-os
+    attributes:
+      label: PHP & Platform
+      description: Exact PHP and Platform (OS) versions your using.
+      placeholder: 8.2.2 - Ubuntu 22.04 x64
+    validations:
+      required: true
+  - type: checkboxes
+    id: requirements
+    attributes:
+      label: Have you done this?
+      options:
+        - label: I am willing to share my stack trace and logs
+          required: true
+        - label: I can suggest a fix as a Pull Request
+          required: false
+  - type: textarea
+    id: expectation
+    attributes:
+      label: Expectation
+      description: Write what you expect to (correctly) happen.
+      placeholder: When I do this, I expect to this to happen.
+    validations:
+      required: true
+  - type: textarea
+    id: description
+    attributes:
+      label: Description
+      description: Write what (incorrectly) happens instead.
+      placeholder: Instead, when I do this, I receive that.
+    validations:
+      required: true
+  - type: textarea
+    id: logs
+    attributes:
+      label: Stack trace & logs
+      description: |
+          If you have a stack trace, you can copy it here. You may hide sensitive information.
+          Including a stack trace when reporting an error 500 is required.
+      placeholder: This is automatically formatted into code, no need for backticks.
+      render: shell
+    validations:
+      required: false

.github/ISSUE_TEMPLATE/feature---enhancement-request.md

@@ -0,0 +1,7 @@
+---
+name: Feature / Enhancement request
+about: Suggest an idea for TorrentPier
+title: "[Feature]"
+labels: [Feature, Enhancement]
+assignees: ''
+---

.github/dependabot.yml

@@ -0,0 +1,16 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+
+version: 2
+
+updates:
+  - package-ecosystem: "composer"
+    directory: "/"
+    versioning-strategy: increase-if-necessary
+    commit-message:
+      prefix: "Composer"
+      include: "scope"
+    schedule:
+      interval: "daily"

.github/workflows/cd.yml

@@ -0,0 +1,80 @@
+name: Continuous Deployment
+
+on:
+  push:
+    tags:
+      - "v*.*.*"
+
+jobs:
+  generate-changelog:
+    name: Generate changelog
+    runs-on: ubuntu-22.04
+    outputs:
+      release_body: ${{ steps.git-cliff.outputs.content }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Generate a changelog
+        uses: orhun/git-cliff-action@v4
+        id: git-cliff
+        with:
+          config: cliff.toml
+          args: -vv --latest --no-exec --github-repo ${{ github.repository }}
+
+      - name: Print the changelog
+        run: cat "${{ steps.git-cliff.outputs.changelog }}"
+
+  release:
+    name: Create release
+    needs: [ generate-changelog ]
+    runs-on: ubuntu-22.04
+
+    steps:
+      - uses: actions/checkout@v4
+      - name: Set the release version
+        shell: bash
+        run: echo "RELEASE_VERSION=${GITHUB_REF:11}" >> $GITHUB_ENV
+
+      - name: Setup PHP
+        uses: shivammathur/setup-php@v2
+        with:
+          php-version: '8.2'
+
+      - name: Install Composer dependencies
+        run: composer install --no-dev --no-progress --prefer-dist --optimize-autoloader
+
+      - name: Cleanup
+        run: php _cleanup.php && rm _cleanup.php
+
+      - name: Create archive
+        id: create-zip
+        run: |
+          ZIP_NAME="torrentpier-v${{ env.RELEASE_VERSION }}.zip"
+          zip -r "$ZIP_NAME" . -x ".git/*"
+          echo "ZIP_NAME=$ZIP_NAME" >> $GITHUB_OUTPUT
+
+      - name: Publish to GitHub
+        if: ${{ !contains(github.ref, '-') }}
+        uses: svenstaro/upload-release-action@v2
+        with:
+          repo_token: ${{ secrets.GITHUB_TOKEN }}
+          file: ${{ steps.create-zip.outputs.ZIP_NAME }}
+          overwrite: true
+          tag: ${{ github.ref }}
+          release_name: "v${{ env.RELEASE_VERSION }}"
+          body: "${{ needs.generate-changelog.outputs.release_body }}"
+
+      - name: Publish to GitHub (pre-release)
+        if: ${{ contains(github.ref, '-') }}
+        uses: svenstaro/upload-release-action@v2
+        with:
+          repo_token: ${{ secrets.GITHUB_TOKEN }}
+          file: ${{ steps.create-zip.outputs.ZIP_NAME }}
+          overwrite: true
+          tag: ${{ github.ref }}
+          release_name: "v${{ env.RELEASE_VERSION }}"
+          body: "${{ needs.generate-changelog.outputs.release_body }}"
+          prerelease: true

.github/workflows/ci.yml

@@ -0,0 +1,45 @@
+name: Continuous Integration
+
+on:
+  push:
+    branches:
+      - master
+
+jobs:
+  nightly:
+    name: Nightly builds 📦
+    runs-on: ubuntu-22.04
+
+    steps:
+      - name: Checkout code 🗳
+        uses: actions/checkout@v4
+
+      - name: Setup PHP 🔩
+        uses: shivammathur/setup-php@v2
+        with:
+          php-version: '8.2'
+
+      - name: Install Composer dependencies 🪚
+        run: composer install --no-dev --no-progress --prefer-dist --optimize-autoloader
+
+      - name: Get commit hash 🔗
+        id: get-commit-hash
+        run: |
+          COMMIT_HASH=$(git rev-parse --short HEAD)
+          echo "COMMIT_HASH=$COMMIT_HASH" >> $GITHUB_OUTPUT
+
+      - name: Cleanup
+        run: php _cleanup.php && rm _cleanup.php
+
+      - name: Create archive 🗞
+        id: create-zip
+        run: |
+          ZIP_NAME="torrentpier-${{ steps.get-commit-hash.outputs.COMMIT_HASH }}.zip"
+          zip -r "$ZIP_NAME" . -x ".git/*"
+          echo "ZIP_NAME=$ZIP_NAME" >> $GITHUB_OUTPUT
+
+      - name: Upload Archive 📤
+        uses: actions/upload-artifact@v4
+        with:
+          name: TorrentPier-master
+          path: ${{ steps.create-zip.outputs.ZIP_NAME }}

.github/workflows/phpmd.yml

@@ -0,0 +1,57 @@
+# This workflow uses actions that are not certified by GitHub.
+# They are provided by a third-party and are governed by
+# separate terms of service, privacy policy, and support
+# documentation.
+# PHPMD is a spin-off project of PHP Depend and
+# aims to be a PHP equivalent of the well known Java tool PMD.
+# What PHPMD does is: It takes a given PHP source code base
+# and look for several potential problems within that source.
+# These problems can be things like:
+#   Possible bugs
+#   Suboptimal code
+#   Overcomplicated expressions
+#   Unused parameters, methods, properties
+# More details at https://phpmd.org/
+
+name: PHPMD
+
+on:
+  push:
+    branches: [ "master" ]
+  pull_request:
+    # The branches below must be a subset of the branches above
+    branches: [ "master" ]
+  schedule:
+    - cron: '40 0 * * 3'
+
+permissions:
+  contents: read
+
+jobs:
+  PHPMD:
+    name: Run PHPMD scanning
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read # for checkout to fetch code
+      security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
+      actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v3
+
+      - name: Setup PHP
+        uses: shivammathur/setup-php@aa1fe473f9c687b6fb896056d771232c0bc41161
+        with:
+          coverage: none
+          tools: phpmd
+
+      - name: Run PHPMD
+        run: phpmd . sarif codesize --reportfile phpmd-results.sarif
+        continue-on-error: true
+
+      - name: Upload analysis results to GitHub
+        uses: github/codeql-action/upload-sarif@v2
+        with:
+          sarif_file: phpmd-results.sarif
+          wait-for-processing: true

.github/workflows/schedule.yml

@@ -0,0 +1,41 @@
+name: Changelog generation
+
+on:
+  schedule:
+    - cron: '0 0 * * *'
+  workflow_dispatch:
+
+jobs:
+  changelog:
+    name: Changelog generation
+    runs-on: ubuntu-22.04
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          ref: master
+          token: ${{ secrets.REPO_TOKEN }}
+
+      - name: Generate a changelog
+        uses: orhun/git-cliff-action@v4
+        id: git-cliff
+        with:
+          config: cliff.toml
+          args: v2.4.6-alpha.4.. --verbose
+        env:
+          OUTPUT: CHANGELOG.md
+          GITHUB_REPO: ${{ github.repository }}
+
+      - name: Print the changelog
+        run: cat "${{ steps.git-cliff.outputs.changelog }}"
+
+      - name: Commit changelog
+        run: |
+          git checkout master
+          git config --local user.name 'belomaxorka'
+          git config --local user.email 'roman25052006.kelesh@gmail.com'
+          set +e
+          git add CHANGELOG.md
+          git commit -m "changelog: Update CHANGELOG.md 📖"
+          git push https://${{ secrets.GITHUB_TOKEN }}@github.com/${{ github.repository }}.git master

.gitignore

@@ -0,0 +1,47 @@
+### IDE ###
+.idea
+.vscode
+
+### TorrentPier ###
+*.log
+install.php_*
+composer-setup.php
+.env
+.php_cs.cache
+data/avatars
+data/uploads
+internal_data/atom
+internal_data/cache
+internal_data/log
+internal_data/updater.json
+sitemap
+internal_data/triggers
+library/config.local.php
+vendor
+
+### Archives ###
+*.phar
+*.rar
+*.tar
+*.gz
+*.zip
+*.7z
+*.torrent
+*.pak
+
+### Windows ###
+Thumbs.db
+Desktop.ini
+$RECYCLE.BIN/
+*.lnk
+*.bat
+
+### OSX ###
+.DS_Store
+.AppleDouble
+.LSOverride
+._*
+.Spotlight-V100
+.Trashes
+*.orig
+*.rej

.htaccess

@@ -0,0 +1,18 @@
+## set default server charset
+AddDefaultCharset UTF-8
+
+## folder listing access control
+Options All -Indexes
+
+## sitemap and atom rewrite
+RewriteEngine On
+RewriteRule ^sitemap.xml$ sitemap/sitemap.xml [L]
+RewriteRule ^/internal_data/atom/(.*) /atom$1 [L]
+
+## deny access to git folder
+RedirectMatch 404 /\\.git(/|$)
+
+## deny access to system files
+<FilesMatch "\.(.*sql|tpl|db|inc|log|md|env)|(config|common).php$">
+Require all denied
+</FilesMatch>

.styleci.yml

@@ -0,0 +1,10 @@
+preset: psr2
+
+finder:
+  name:
+    - "*.php"
+  not-name:
+    - "*Stub.php"
+  path:
+    - "src"
+    - "tests"

CHANGELOG.md

@@ -0,0 +1,113 @@
+[![TorrentPier](https://raw.githubusercontent.com/torrentpier/.github/refs/heads/main/versions/Cattle.png)](https://github.com/torrentpier)
+
+# 📖 Change Log
+
+## [v2.8.3](https://github.com/torrentpier/torrentpier/compare/v2.8.2..v2.8.3) (2025-07-03)
+
+### 🚀 Features
+
+- *(lang)* Added `RTL` languages support ([#2031](https://github.com/torrentpier/torrentpier/pull/2031)) - ([fd46d3d](https://github.com/torrentpier/torrentpier/commit/fd46d3d04ad3ab1453256b2ab620508e2ba33586))
+- *(updater)* Added exceptions logging ([#2026](https://github.com/torrentpier/torrentpier/pull/2026)) - ([51f2c70](https://github.com/torrentpier/torrentpier/commit/51f2c70d81b910012cdecd111b5b92c1dfd0d6f6))
+
+### 🚜 Refactor
+
+- *(TorrentFileList)* Reduce duplication in root directory unset logic ([#2027](https://github.com/torrentpier/torrentpier/pull/2027)) - ([d4d8210](https://github.com/torrentpier/torrentpier/commit/d4d82101dd67c9f4cd86e0f6f909495696974354))
+
+
+## [v2.8.2](https://github.com/torrentpier/torrentpier/compare/v2.8.1..v2.8.2) (2025-06-30)
+
+### 🐛 Bug Fixes
+
+- *(TorrentFileList)* Avoid `array_merge` reindexing for numeric folder names ([#2014](https://github.com/torrentpier/torrentpier/pull/2014)) - ([915e1d8](https://github.com/torrentpier/torrentpier/commit/915e1d817c61d2a4f0691b24ec1bc6577a9cd44b))
+
+### 🚜 Refactor
+
+- Use `DEFAULT_CHARSET` constant instead of hardcoded string ([#2011](https://github.com/torrentpier/torrentpier/pull/2011)) - ([7ac3359](https://github.com/torrentpier/torrentpier/commit/7ac335974baa44a8575bebb71ae2fbc0902d10e7))
+
+
+## [v2.8.1](https://github.com/torrentpier/torrentpier/compare/v2.8.0..v2.8.1) (2025-06-24)
+
+### 🐛 Bug Fixes
+
+- *(filelist)* `Undefined property: FileTree::$length` when v2 torrent only ([#2004](https://github.com/torrentpier/torrentpier/pull/2004)) - ([7f4cc9d](https://github.com/torrentpier/torrentpier/commit/7f4cc9d3b9a5b87100f710cc60f636d6e7d5a34e))
+- *(ip-api)* Add error handling and logging for freeipapi.com requests ([#2006](https://github.com/torrentpier/torrentpier/pull/2006)) - ([f1d6e74](https://github.com/torrentpier/torrentpier/commit/f1d6e74e5d4c74b6e12e9e742f60f62e71783d11))
+
+
+## [v2.8.0](https://github.com/torrentpier/torrentpier/compare/v2.7.0..v2.8.0) (2025-06-21)
+
+### 🐛 Bug Fixes
+
+- *(template)* Handle L_ variables in template vars when not found in lang vars ([#1998](https://github.com/torrentpier/torrentpier/pull/1998)) - ([c6076c2](https://github.com/torrentpier/torrentpier/commit/c6076c2c278e9a423f3862670236b75bddeadd87))
+
+
+## [v2.7.0](https://github.com/torrentpier/torrentpier/compare/v2.6.0..v2.7.0) (2025-06-21)
+
+### 🚀 Features
+
+- *(database)* Add visual markers for Nette Explorer queries in debug panel ([#1965](https://github.com/torrentpier/torrentpier/pull/1965)) - ([2fd3067](https://github.com/torrentpier/torrentpier/commit/2fd306704f21febee7d53f4b4531601ce0cb81ce))
+- *(language)* Add new language variable for migration file and enhance template fallback logic ([#1984](https://github.com/torrentpier/torrentpier/pull/1984)) - ([a33574c](https://github.com/torrentpier/torrentpier/commit/a33574c28f2eb6267a74fa6c9d97fea86527157a))
+- *(migrations)* Implement Phinx database migration system ([#1976](https://github.com/torrentpier/torrentpier/pull/1976)) - ([fbde8cd](https://github.com/torrentpier/torrentpier/commit/fbde8cd421c9048afe70ddb41d0a9ed26d3fbef5))
+- *(test)* [**breaking**] Add comprehensive testing infrastructure with Pest PHP  ([#1979](https://github.com/torrentpier/torrentpier/pull/1979)) - ([cc9d412](https://github.com/torrentpier/torrentpier/commit/cc9d412522938a023bd2b8eb880c4d2dd307c82a))
+- [**breaking**] Implement Language singleton with shorthand functions ([#1966](https://github.com/torrentpier/torrentpier/pull/1966)) - ([49717d3](https://github.com/torrentpier/torrentpier/commit/49717d3a687b95885fe9773f2597354aed4b2b60))
+
+### 🐛 Bug Fixes
+
+- *(database)* Update affected rows tracking in Database class ([#1980](https://github.com/torrentpier/torrentpier/pull/1980)) - ([4f9cc9f](https://github.com/torrentpier/torrentpier/commit/4f9cc9fe0f7f4a85c90001a3f5514efdf04836da))
+
+### 🚜 Refactor
+
+- *(database)* Enhance error logging and various fixes ([#1978](https://github.com/torrentpier/torrentpier/pull/1978)) - ([7aed6bc](https://github.com/torrentpier/torrentpier/commit/7aed6bc7d89f4ed31e7ed6c6eeecc6e08d348c24))
+- *(database)* Rename DB to Database and extract debug functionality ([#1964](https://github.com/torrentpier/torrentpier/pull/1964)) - ([6c0219d](https://github.com/torrentpier/torrentpier/commit/6c0219d53c7544b7d8a6374c0d0848945d32ae17))
+- *(stats)* Improve database row fetching in tr_stats.php ([#1985](https://github.com/torrentpier/torrentpier/pull/1985)) - ([728116d](https://github.com/torrentpier/torrentpier/commit/728116d6dc9cf4476cce572ced5e8a7ef529ead8))
+
+### ⚙️ Miscellaneous
+
+- Update minimum `PHP` requirement to `8.2` ([#1987](https://github.com/torrentpier/torrentpier/pull/1987)) - ([9b322c7](https://github.com/torrentpier/torrentpier/commit/9b322c7093a634669e9f17a32ac42500f44f2496))
+- Removed useless `composer update` from workflows & installer ([#1986](https://github.com/torrentpier/torrentpier/pull/1986)) - ([423424e](https://github.com/torrentpier/torrentpier/commit/423424e9478e0772957014fb30f5e84158067af7))
+- Added --no-dev composer flag for some workflows ([#1982](https://github.com/torrentpier/torrentpier/pull/1982)) - ([e9a9e09](https://github.com/torrentpier/torrentpier/commit/e9a9e095768ba68aa5d5058a3e152ffaec916117))
+- Added `--no-dev` composer flag for some workflows ([#1981](https://github.com/torrentpier/torrentpier/pull/1981)) - ([e8cba5d](https://github.com/torrentpier/torrentpier/commit/e8cba5dd3fc83b616f83c24991f79dc7258c5df3))
+
+
+## [v2.6.0](https://github.com/torrentpier/torrentpier/compare/v2.5.0..v2.6.0) (2025-06-18)
+
+### 🚀 Features
+
+- [**breaking**] Implement unified cache system with Nette Caching ([#1963](https://github.com/torrentpier/torrentpier/pull/1963)) - ([07a06a3](https://github.com/torrentpier/torrentpier/commit/07a06a33cd97b37f68b533a87cdb5f7578f2c86f))
+- Replace legacy database layer with Nette Database implementation ([#1961](https://github.com/torrentpier/torrentpier/pull/1961)) - ([f50b914](https://github.com/torrentpier/torrentpier/commit/f50b914cc18f777d92002baf2c812a635d5eed4b))
+
+### 🐛 Bug Fixes
+
+- *(User)* Add null and array checks before session data operations ([#1962](https://github.com/torrentpier/torrentpier/pull/1962)) - ([e458109](https://github.com/torrentpier/torrentpier/commit/e458109eefc54d86a78a1ddb3954581524852516))
+
+
+## [v2.5.0](https://github.com/torrentpier/torrentpier/compare/v2.4.6-alpha.4..v2.5.0) (2025-06-18)
+
+### 🚀 Features
+
+- [**breaking**] Implement centralized Config class to replace global $bb_cfg array ([#1953](https://github.com/torrentpier/torrentpier/pull/1953)) - ([bf9100f](https://github.com/torrentpier/torrentpier/commit/bf9100fbfa74768edb01c62636198a44739d9923))
+
+### 🐛 Bug Fixes
+
+- *(installer)* Strip protocol from TP_HOST to keep only hostname ([#1952](https://github.com/torrentpier/torrentpier/pull/1952)) - ([81bf67c](https://github.com/torrentpier/torrentpier/commit/81bf67c2be85d49e988b7802ca7e9738ff580031))
+- *(sql)* Resolve only_full_group_by compatibility issues in tracker cleanup ([#1951](https://github.com/torrentpier/torrentpier/pull/1951)) - ([37a0675](https://github.com/torrentpier/torrentpier/commit/37a0675adfb02014e7068f4aa82301e29f39eab6))
+
+### 📦 Dependencies
+
+- *(deps)* Bump filp/whoops from 2.18.2 to 2.18.3 ([#1948](https://github.com/torrentpier/torrentpier/pull/1948)) - ([b477680](https://github.com/torrentpier/torrentpier/commit/b4776804a408217229caa327c79849cf13ce2aa5))
+
+### 🚜 Refactor
+
+- *(censor)* [**breaking**] Migrate Censor class to singleton pattern ([#1954](https://github.com/torrentpier/torrentpier/pull/1954)) - ([74a564d](https://github.com/torrentpier/torrentpier/commit/74a564d7954c6f8745ebcffdcd9c8997e371d47a))
+- *(config)* [**breaking**] Encapsulate global $bb_cfg array in Config class ([#1950](https://github.com/torrentpier/torrentpier/pull/1950)) - ([5842994](https://github.com/torrentpier/torrentpier/commit/5842994782dfa62788f8427c55045abdbfb5b8e9))
+
+### 📚 Documentation
+
+- Add Select class migration guide ([#1960](https://github.com/torrentpier/torrentpier/pull/1960)) - ([86abafb](https://github.com/torrentpier/torrentpier/commit/86abafb11469d14a746d12725b15cf6b7015ec44))
+
+### ⚙️ Miscellaneous
+
+- *(_release.php)* Finally! Removed some useless params ([#1947](https://github.com/torrentpier/torrentpier/pull/1947)) - ([9c7d270](https://github.com/torrentpier/torrentpier/commit/9c7d270598c0153fb82f4b7ad96f5b59399b2159))
+- *(cliff)* Add conventional commit prefix to changelog message ([#1957](https://github.com/torrentpier/torrentpier/pull/1957)) - ([b1b2618](https://github.com/torrentpier/torrentpier/commit/b1b26187579f6981165d85c316a3c5b7199ce2ee))
+
+
+

CLAUDE.md

@@ -0,0 +1,144 @@
+# CLAUDE.md
+
+This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
+
+## Project Overview
+
+TorrentPier is a BitTorrent tracker engine written in PHP, designed for hosting BitTorrent communities with forum functionality. The project is in active modernization, transitioning from legacy code to modern PHP practices while maintaining backward compatibility.
+
+## Technology Stack & Architecture
+
+- **PHP 8.2+** with modern features
+- **MySQL/MariaDB/Percona** database
+- **Nette Database** with backward-compatible wrapper
+- **Composer** for dependency management
+- **Custom BitTorrent tracker** implementation
+
+## Key Directory Structure
+
+- `/src/` - Modern PHP classes (PSR-4 autoloaded as `TorrentPier\`)
+- `/library/` - Core application logic and legacy code
+- `/admin/` - Administrative interface
+- `/bt/` - BitTorrent tracker functionality (announce.php, scrape.php)
+- `/styles/` - Templates, CSS, JS, images
+- `/internal_data/` - Cache, logs, compiled templates
+- `/install/` - Installation scripts and configuration examples
+- `/migrations/` - Database migration files (Phinx)
+
+## Entry Points & Key Files
+
+- `index.php` - Main forum homepage
+- `tracker.php` - Torrent search/browse interface
+- `bt/announce.php` - BitTorrent announce endpoint
+- `bt/scrape.php` - BitTorrent scrape endpoint
+- `admin/index.php` - Administrative panel
+- `cron.php` - Background task runner (CLI only)
+- `install.php` - Installation script (CLI only)
+
+## Development Commands
+
+### Installation & Setup
+```bash
+# Automated installation (CLI)
+php install.php
+
+# Install dependencies
+composer install
+
+# Update dependencies
+composer update
+```
+
+### Maintenance & Operations
+```bash
+# Run background maintenance tasks
+php cron.php
+```
+
+### Code Quality
+The project uses **StyleCI** with PSR-2 preset for code style enforcement. StyleCI configuration is in `.styleci.yml` targeting `src/` directory.
+
+## Modern Architecture Components
+
+### Database Layer (`/src/Database/`)
+- **Nette Database** with full old SqlDb backward compatibility
+- Singleton pattern accessible via `DB()` function
+- Support for multiple database connections and debug functionality
+- Migration path to ORM-style Explorer queries
+
+### Cache System (`/src/Cache/`)
+- **Unified caching** using Nette Caching internally
+- 100% backward compatibility with existing `CACHE()` and $datastore calls
+- Supports file, SQLite, memory, and Memcached storage
+- Advanced features: memoization, cache dependencies
+
+### Configuration Management
+- Environment-based config with `.env` files
+- Singleton `Config` class accessible via `config()` function
+- Local overrides supported via `library/config.local.php`
+
+## Configuration Files
+- `.env` - Environment variables (copy from `.env.example`)
+- `library/config.php` - Main application configuration
+- `library/config.local.php` - Local configuration overrides
+- `composer.json` - Dependencies and PSR-4 autoloading
+
+## Development Workflow
+
+### CI/CD Pipeline
+- **GitHub Actions** for automated testing and deployment
+- **StyleCI** for code style enforcement
+- **Dependabot** for dependency updates
+- **FTP deployment** to demo environment
+
+### Installation Methods
+1. **Automated**: `php install.php` (recommended)
+2. **Composer**: `composer create-project torrentpier/torrentpier`
+3. **Manual**: Git clone + `composer install` + database setup
+
+## Database & Schema
+
+- **Database migrations** managed via Phinx in `/migrations/` directory
+- Initial schema: `20250619000001_initial_schema.php`
+- Initial seed data: `20250619000002_seed_initial_data.php`
+- UTF-8 (utf8mb4) character set required
+- Multiple database alias support for different components
+
+### Migration Commands
+```bash
+# Run all pending migrations
+php vendor/bin/phinx migrate --configuration=phinx.php
+
+# Check migration status
+php vendor/bin/phinx status --configuration=phinx.php
+
+# Mark migrations as applied (for existing installations)
+php vendor/bin/phinx migrate --fake --configuration=phinx.php
+```
+
+## Legacy Compatibility Strategy
+
+The codebase maintains 100% backward compatibility while introducing modern alternatives:
+
+- **Database layer**: Existing old SqlDb calls work while new code can use Nette Database
+- **Cache system**: All existing `CACHE()` and $datastore calls preserved while adding modern features
+- **Configuration**: Legacy config access maintained alongside new singleton pattern
+
+This approach allows gradual modernization without breaking existing functionality - critical for a mature application with existing deployments.
+
+## Security & Performance
+
+- **Environment-based secrets** management via `.env`
+- **CDN/proxy support** (Cloudflare, Fastly)
+- **Input sanitization** and CSRF protection
+- **Advanced caching** with multiple storage backends
+- **Rate limiting** and IP-based restrictions
+
+## BitTorrent Tracker Features
+
+- **BitTorrent v1 & v2** support
+- **TorrServer integration** capability
+- **Client ban system** for problematic torrent clients
+- **Scrape support** for tracker statistics
+
+When working with this codebase, prioritize understanding the legacy compatibility approach and modern architecture patterns. Always test both legacy and modern code paths when making changes to core systems.

CODE_OF_CONDUCT.md

@@ -0,0 +1,46 @@
+# Contributor Covenant Code of Conduct
+
+## Our Pledge
+
+In the interest of fostering an open and welcoming environment, we as contributors and maintainers pledge to making participation in our project and our community a harassment-free experience for everyone, regardless of age, body size, disability, ethnicity, gender identity and expression, level of experience, nationality, personal appearance, race, religion, or sexual identity and orientation.
+
+## Our Standards
+
+Examples of behavior that contributes to creating a positive environment include:
+
+* Using welcoming and inclusive language
+* Being respectful of differing viewpoints and experiences
+* Gracefully accepting constructive criticism
+* Focusing on what is best for the community
+* Showing empathy towards other community members
+
+Examples of unacceptable behavior by participants include:
+
+* The use of sexualized language or imagery and unwelcome sexual attention or advances
+* Trolling, insulting/derogatory comments, and personal or political attacks
+* Public or private harassment
+* Publishing others' private information, such as a physical or electronic address, without explicit permission
+* Other conduct which could reasonably be considered inappropriate in a professional setting
+
+## Our Responsibilities
+
+Project maintainers are responsible for clarifying the standards of acceptable behavior and are expected to take appropriate and fair corrective action in response to any instances of unacceptable behavior.
+
+Project maintainers have the right and responsibility to remove, edit, or reject comments, commits, code, wiki edits, issues, and other contributions that are not aligned to this Code of Conduct, or to ban temporarily or permanently any contributor for other behaviors that they deem inappropriate, threatening, offensive, or harmful.
+
+## Scope
+
+This Code of Conduct applies both within project spaces and in public spaces when an individual is representing the project or its community. Examples of representing a project or community include using an official project e-mail address, posting via an official social media account, or acting as an appointed representative at an online or offline event. Representation of a project may be further defined and clarified by project maintainers.
+
+## Enforcement
+
+Instances of abusive, harassing, or otherwise unacceptable behavior may be reported by contacting the project team at admin@torrentpier.com. The project team will review and investigate all complaints, and will respond in a way that it deems appropriate to the circumstances. The project team is obligated to maintain confidentiality with regard to the reporter of an incident. Further details of specific enforcement policies may be posted separately.
+
+Project maintainers who do not follow or enforce the Code of Conduct in good faith may face temporary or permanent repercussions as determined by other members of the project's leadership.
+
+## Attribution
+
+This Code of Conduct is adapted from the [Contributor Covenant][homepage], version 1.4, available at [http://contributor-covenant.org/version/1/4][version]
+
+[homepage]: http://contributor-covenant.org
+[version]: http://contributor-covenant.org/version/1/4/

CONTRIBUTING.md

@@ -0,0 +1,93 @@
+# Contributing
+
+When contributing to this repository, please first discuss the change you wish to make via issue,
+email, or any other method with the owners of this repository before making a change.
+
+Please note we have a code of conduct, please follow it in all your interactions with the project.
+
+## Pull Request Process
+
+1. Ensure any install or build dependencies are removed before the end of the layer when doing a
+   build.
+2. Update the README.md with details of changes to the interface, this includes new environment
+   variables, exposed ports, useful file locations and container parameters.
+3. Increase the version numbers in any examples files and the README.md to the new version that this
+   Pull Request would represent. The versioning scheme we use is [SemVer](http://semver.org/).
+4. You may merge the Pull Request in once you have the sign-off of two other developers, or if you
+   do not have permission to do that, you may request the second reviewer to merge it for you.
+
+## Code of Conduct
+
+### Our Pledge
+
+In the interest of fostering an open and welcoming environment, we as
+contributors and maintainers pledge to making participation in our project and
+our community a harassment-free experience for everyone, regardless of age, body
+size, disability, ethnicity, gender identity and expression, level of experience,
+nationality, personal appearance, race, religion, or sexual identity and
+orientation.
+
+### Our Standards
+
+Examples of behavior that contributes to creating a positive environment
+include:
+
+* Using welcoming and inclusive language
+* Being respectful of differing viewpoints and experiences
+* Gracefully accepting constructive criticism
+* Focusing on what is best for the community
+* Showing empathy towards other community members
+
+Examples of unacceptable behavior by participants include:
+
+* The use of sexualized language or imagery and unwelcome sexual attention or
+  advances
+* Trolling, insulting/derogatory comments, and personal or political attacks
+* Public or private harassment
+* Publishing others' private information, such as a physical or electronic
+  address, without explicit permission
+* Other conduct which could reasonably be considered inappropriate in a
+  professional setting
+
+### Our Responsibilities
+
+Project maintainers are responsible for clarifying the standards of acceptable
+behavior and are expected to take appropriate and fair corrective action in
+response to any instances of unacceptable behavior.
+
+Project maintainers have the right and responsibility to remove, edit, or
+reject comments, commits, code, wiki edits, issues, and other contributions
+that are not aligned to this Code of Conduct, or to ban temporarily or
+permanently any contributor for other behaviors that they deem inappropriate,
+threatening, offensive, or harmful.
+
+### Scope
+
+This Code of Conduct applies both within project spaces and in public spaces
+when an individual is representing the project or its community. Examples of
+representing a project or community include using an official project e-mail
+address, posting via an official social media account, or acting as an appointed
+representative at an online or offline event. Representation of a project may be
+further defined and clarified by project maintainers.
+
+### Enforcement
+
+Instances of abusive, harassing, or otherwise unacceptable behavior may be
+reported by contacting the project team at admin@torrentpier.com. All
+complaints will be reviewed and investigated and will result in a response that
+is deemed necessary and appropriate to the circumstances. The project team is
+obligated to maintain confidentiality with regard to the reporter of an incident.
+Further details of specific enforcement policies may be posted separately.
+
+Project maintainers who do not follow or enforce the Code of Conduct in good
+faith may face temporary or permanent repercussions as determined by other
+members of the project's leadership.
+
+### Attribution
+
+This Code of Conduct is adapted from the [Contributor Covenant][homepage], version 1.4,
+available at [http://contributor-covenant.org/version/1/4][version]
+
+[homepage]: http://contributor-covenant.org
+
+[version]: http://contributor-covenant.org/version/1/4/

LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2005-2025 TorrentPier
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

README.md

@@ -1,59 +1,191 @@
-TorrentPier II
-======================
+<p align="center"><a href="https://torrentpier.com"><img src="https://torrentpier.com/styles/default/xenforo/bull-logo.svg" width="400px" alt="TorrentPier" /></a></p>
 
-TorrentPier II - движок торрент-трекера, написанный на php. Высокая скорость работы, простота модификации, устойчивость к высоким нагрузкам, в том числе и поддержка альтернативных анонсеров (например, Ocelot). Помимо этого, крайне развитый официальный форум поддержки, где помимо прочего можно испытать движок в работе на демо-версии, не устанавливая его а также получить любую другую интересующую вас информацию и скачать моды.
+<p align="center">
+  Bull-powered BitTorrent tracker engine
+  <br/>
+</p>
 
-## Установка
+<p align="center">
+  <a href="https://github.com/torrentpier/torrentpier/blob/master/LICENSE"><img src="https://img.shields.io/github/license/torrentpier/torrentpier" alt="License"></a>
+  <a href="https://packagist.org/packages/torrentpier/torrentpier"><img src="https://img.shields.io/packagist/stars/torrentpier/torrentpier" alt="Stars Packagist"></a>
+  <a href="https://crowdin.com/project/torrentpier"><img src="https://badges.crowdin.net/torrentpier/localized.svg" alt="Crowdin"></a>
+  <a href="https://nightly.link/torrentpier/torrentpier/workflows/ci/master/TorrentPier-master"><img src="https://img.shields.io/badge/Nightly%20release-gray?logo=hackthebox&logoColor=fff" alt="TorrentPier nightly"></a>
+  <a href="https://packagist.org/packages/torrentpier/torrentpier"><img src="https://img.shields.io/packagist/dt/torrentpier/torrentpier" alt="Downloads"></a>
+  <a href="https://packagist.org/packages/torrentpier/torrentpier"><img src="https://img.shields.io/packagist/v/torrentpier/torrentpier" alt="Version"></a>
+  <a href="https://github.com/torrentpier/torrentpier/releases"><img src="https://img.shields.io/github/release-date/torrentpier/torrentpier" alt="Last release"></a>
+  <img src="https://img.shields.io/github/repo-size/torrentpier/torrentpier" alt="Size">
+  <a href="https://github.com/SamKirkland/FTP-Deploy-Action"><img src="https://img.shields.io/badge/Deployed to TorrentPier Demo with-FTP DEPLOY ACTION-%3CCOLOR%3E?color=2b9348" alt="Deployed to TorrentPier Demo with FTP Deploy Action"></a>
+</p>
 
-Для установки вам необходимо выполнить несколько простых шагов:
+## 🐂 About TorrentPier
 
-1. Распаковываем на сервер содержимое папки **upload**
+TorrentPier — bull-powered BitTorrent Public/Private tracker engine, written in PHP. High speed, simple modifications, load-balanced
+architecture. In addition, we have a very helpful
+[official support forum](https://torrentpier.com), where it's possible to get support and download modifications for the engine.
 
-2. Создаем базу данных, в которую при помощи phpmyadmin (или любого другого удобного инструмента) импортируем дамп, расположенный в папке **install/sql/mysql.sql**
-3. Правим файл конфигурации **config.php**, загруженный на сервер:
-> $bb_cfg['db']['db1'] = array('localhost', 'dbase', 'user', 'pass', $charset, $pconnect);    
-> В данной строке изменяем данные входа в базу данных, остальные правки в файле вносятся по усмотрению, исходя из необходимости из внесения (ориентируйтесь на описания, указанные у полей).
+## 🌈 Current status
 
-4. Редактируем указанные файлы:
- + **favicon.ico** (меняем на свою иконку, если есть)  
- + **robots.txt** (меняем адреса в строках **Host** и **Sitemap** на свои)
+TorrentPier is currently in active development. The goal is to remove all legacy code and rewrite the existing code to
+modern specifications. If you want to delve deep into the code, check our [issues](https://github.com/torrentpier/torrentpier/issues)
+and go from there. The documentation will be translated to English in the near future, currently Russian is the main language.
 
-## Права доступа на папки и файлы
+## ✨ Features
+* Rich forum with browsing/moderation tools
+* High-load capable, heavily configurable announcer
+* Scrape support
+* FreeLeech
+* [TorrServer integration](https://github.com/YouROK/TorrServer) support
+* BitTorrent v2 support
+* Event-based invite system
+* Bonus points
+* Polling system
+* PM/DM system
+* Multilingual support (Russian and English are currently fully supported, with others in the future)
+* Atom/RSS feeds
+* ... and so MUCH MORE!
 
-Исходя из настроек вашего сервера, устанавливаем рекомендуемые права доступа (chmod) на указанные папки **777**, а на файлы внутри этих папок (кроме файлов **.htaccess** и **.keep**) **666**:
-- ajax/html
-- cache
-- cache/filecache
-- files
-- files/thumbs
-- images
-- images/avatars
-- images/captcha
-- images/ranks
-- images/smiles
-- log
-- sitemap
-- triggers
+## 🖥️ Demo
 
-## Необходимые настройки php
+* URL: https://torrentpier.duckdns.org
+* Username: `admin`
+* Password: `admin`
 
-    mbstring.internal_encoding = UTF-8
-    magic_quotes_gpc = Off
-Внести данные настройки необходимо в файл **php.ini**. Их вам может установить ваш хостер по запросу, если у вас возникают какие-либо проблемы с их самостоятельной установкой. Впрочем, эти настройки могут быть установлены на сервере по-умолчанию, поэтому их внесение требуется исключительно по необходимости.
+> [!NOTE]
+> Demo resets every 24 hours!
 
-## Необходимые модули php
+## 🔧 Requirements
 
-    php5-tidy
+* Apache / nginx ([example config](install/nginx.conf)) / caddy ([example config](install/Caddyfile))
+* MySQL 5.5.3 or above (including MySQL 8.0+) / MariaDB 10.0 or above / Percona
+* PHP: 8.2 / 8.3 / 8.4
+* PHP Extensions: mbstring, gd, bcmath, intl, tidy (optional), xml, xmlwriter
+* Crontab (Recommended)
 
-Начиная с версии 2.0.9 (ревизия 592 в старой нумерации) данный модуль не является обязательным, но его установка крайне рекомендуется для повышения качества обработки html-кода тем и сообщений пользователей. 
+## 💾 Installation
 
-## Рекомендуемый способ запуска cron.php
+For the installation, select one of the installation variants below:
 
-Для значительного ускорения работы трекера может потребоваться отвязка встроенного форумного крона. С более подробной информацией об отвязке крона, вы можете ознакомиться в данной теме http://torrentpier.me/threads/52/ на нашем форуме поддержки.
+### Quick (Clean install) 🚀
 
-## Полезные ссылки
+Check out our [autoinstall](https://github.com/torrentpier/autoinstall) repository with detailed instructions.
 
-+ Наш форум http://torrentpier.me/
-+ Центр загрузки http://get.torrentpier.me/
-+ Часто задаваемые вопросы http://faq.torrentpier.me/
-+ Где задать вопрос http://torrentpier.me/forums/10/
+> [!NOTE]
+> Thanks to [Sergei Solovev](https://github.com/SeAnSolovev) for this installation script ❤️
+
+### Quick (For web-panels) ☕️
+
+1. Select the folder where you want TorrentPier installed
+   ```shell
+   cd /path/to/public_html
+   ```
+2. Download the latest version of TorrentPier
+   ```shell
+   sudo git clone https://github.com/torrentpier/torrentpier.git .
+   ```
+3. After completing, execute the command below and follow the instructions
+   ```shell
+   php install.php
+   ```
+4. Voila! ✨
+
+### Manual 🔩
+
+1. Install [Composer](https://getcomposer.org/)
+2. Run the following command to create the TorrentPier project
+   ```shell
+   composer create-project torrentpier/torrentpier
+   ```
+3. [Check our system requirements](#-requirements)
+4. After, run this command in the project directory to install Composer dependencies
+   ```shell
+   composer install
+   ```
+5. Edit database configuration settings in the environment (`.env.example`), after, rename to `.env`
+6. Create a database and run migrations to set up the schema
+   ```shell
+   php vendor/bin/phinx migrate --configuration=phinx.php
+   ```
+7. Provide write permissions to the specified folders:
+   * `data/avatars`, `data/uploads`, `data/uploads/thumbs`
+   * `internal_data/atom`, `internal_data/cache`, `internal_data/log`, `internal_data/triggers`
+   * `sitemap`
+8. Voila! ✨
+
+> [!TIP]
+> You can automate steps 4-7 by running `php install.php` instead, which will guide you through the setup process interactively.
+
+> [!IMPORTANT]
+> The specific settings depend on the server you are using, but in general we recommend chmod **0755** for folders, and chmod **0644** for the files in them.
+
+### Additional steps 👣
+
+1. Edit these files:
+   * `favicon.png` (change to your own)
+   * `robots.txt` (change the addresses in lines `Host` and `Sitemap` to your own)
+2. Log in to the forum using the **admin/admin** login/password, and finish setting up via admin panel. Don't forget to change your password!
+
+## 🔐 Security vulnerabilities
+
+If you discover a security vulnerability within TorrentPier, please follow our [security policy](https://github.com/torrentpier/torrentpier/security/policy), so we can address it promptly.
+
+## 🧪 Testing
+
+TorrentPier includes a comprehensive testing suite built with **Pest PHP**. Run tests to ensure code quality and system reliability:
+
+```shell
+# Run all tests
+./vendor/bin/pest
+
+# Run with coverage
+./vendor/bin/pest --coverage
+```
+
+For detailed testing documentation, see [tests/README.md](tests/README.md).
+
+## 📌 Our recommendations
+
+* *It's recommended to run `cron.php`.* - For significant tracker speed increase it may be required to replace the built-in cron.php with an operating system daemon.
+* *Local configuration copy.* - You can override the settings using the local configuration file `library/config.local.php`.
+
+## 💚 Contributing / Contributors
+
+Please read our [contributing policy](CONTRIBUTING.md) and [code of conduct](CODE_OF_CONDUCT.md) for details, and the process for
+submitting pull requests to us. But we are always ready to review your pull-request for compliance with
+these requirements. Just send it!
+
+<a href="https://github.com/torrentpier/torrentpier/graphs/contributors">
+  <img src="https://contrib.rocks/image?repo=torrentpier/torrentpier" alt="Contributors"/>
+</a>
+
+Made with [contrib.rocks](https://contrib.rocks).
+
+## 💞 Sponsoring
+
+Support this project by becoming a sponsor or a backer.
+
+[![OpenCollective sponsors](https://opencollective.com/torrentpier/sponsors/badge.svg)](https://opencollective.com/torrentpier)
+[![OpenCollective backers](https://opencollective.com/torrentpier/backers/badge.svg)](https://opencollective.com/torrentpier)
+
+<details>
+  <summary>Monero</summary>
+
+```
+42zJE3FDvN8foP9QYgDrBjgtd7h2FipGCGmAcmG5VFQuRkJBGMbCvoLSmivepmAMEgik2E8MPWUzKaoYsGCtmhvL7ZN73jh
+```
+</details>
+
+<details>
+  <summary>YooMoney</summary>
+
+```
+4100118022415720
+```
+</details>
+
+## 📦 Versioning
+
+We use [SemVer](http://semver.org/) for versioning. For the versions available, see the [tags on this repository](https://github.com/torrentpier/torrentpier/tags).
+
+## 📖 License
+
+This project is licensed under the MIT License - see the [LICENSE](https://github.com/torrentpier/torrentpier/blob/master/LICENSE) file for details.

SECURITY.md

@@ -0,0 +1,13 @@
+# Security Policy
+
+## Versions
+
+Due to the nature of our project - being open source - we have decided to patch only the latest major release (currently v2.4.x) for security vulnerabilities.
+
+## How to disclose
+
+Please disclose security issues by mailing [admin@torrentpier.com](mailto:admin@torrentpier.com).
+
+## What we do
+
+Any submitted security issue will be checked thoroughly by our development team. A fix for the issue and a transparent information on GitHub about the issue existing will be released. You can view any previously identified issues on our [GitHub Security Page](https://github.com/torrentpier/torrentpier/security/advisories). New major versions of TorrentPier will also receive a security audit to verify our efforts on providing a secure application.

_cleanup.php

@@ -0,0 +1,57 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+if (!defined('BB_ROOT')) {
+    define('BB_ROOT', __DIR__ . DIRECTORY_SEPARATOR);
+    define('BB_PATH', BB_ROOT);
+}
+
+// Check CLI mode
+if (PHP_SAPI != 'cli') {
+    exit;
+}
+
+if (!function_exists('removeFile')) {
+    // Get all constants
+    require_once BB_ROOT . 'library/defines.php';
+
+    // Include CLI functions
+    require INC_DIR . '/functions_cli.php';
+}
+
+$items = [
+    '.github',
+    '.cliffignore',
+    '.editorconfig',
+    '.gitignore',
+    '.styleci.yml',
+    '_release.php',
+    'CHANGELOG.md',
+    'CLAUDE.md',
+    'cliff.toml',
+    'CODE_OF_CONDUCT.md',
+    'CONTRIBUTING.md',
+    'crowdin.yml',
+    'HISTORY.md',
+    'phpunit.xml',
+    'README.md',
+    'SECURITY.md',
+    'tests',
+    'UPGRADE_GUIDE.md'
+];
+
+foreach ($items as $item) {
+    $path = BB_ROOT . $item;
+
+    if (is_file($path)) {
+        removeFile($path);
+    } elseif (is_dir($path)) {
+        removeDir($path);
+    }
+}

_release.php

@@ -0,0 +1,130 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+define('BB_ROOT', __DIR__ . DIRECTORY_SEPARATOR);
+define('BB_PATH', BB_ROOT);
+
+// Check CLI mode
+if (PHP_SAPI != 'cli') {
+    die('Please run <code style="background:#222;color:#00e01f;padding:2px 6px;border-radius:3px;">php ' . basename(__FILE__) . '</code> in CLI mode');
+}
+
+// Get all constants
+require_once BB_ROOT . 'library/defines.php';
+
+// Include CLI functions
+require INC_DIR . '/functions_cli.php';
+
+// Welcoming message
+out("--- Release creation tool ---\n", 'info');
+
+$configFile = BB_PATH . '/library/config.php';
+
+if (!is_file($configFile)) {
+    out('- Config file ' . basename($configFile) . ' not found', 'error');
+    exit;
+}
+if (!is_readable($configFile)) {
+    out('- Config file ' . basename($configFile) . ' is not readable', 'error');
+    exit;
+}
+if (!is_writable($configFile)) {
+    out('- Config file ' . basename($configFile) . ' is not writable', 'error');
+    exit;
+}
+
+// Ask for version
+fwrite(STDOUT, 'Enter version number (e.g, v2.4.0): ');
+$version = trim(fgets(STDIN));
+
+if (empty($version)) {
+    out("- Version cannot be empty. Please enter a valid version number", 'error');
+    exit;
+} else {
+    // Add 'v' prefix if missing
+    if (!str_starts_with($version, 'v')) {
+        $version = 'v' . $version;
+    }
+
+    out("- Using version: $version", 'info');
+}
+
+// Ask for version emoji
+fwrite(STDOUT, 'Enter version emoji: ');
+$versionEmoji = trim(fgets(STDIN));
+
+if (!empty($versionEmoji)) {
+    out("- Using version emoji: $versionEmoji", 'info');
+}
+
+// Ask for release date or use today's date
+fwrite(STDOUT, "Enter release date (e.g. 25-05-2025), leave empty to use today's date: ");
+$date = trim(fgets(STDIN));
+
+if (empty($date)) {
+    $date = date('d-m-Y');
+    out("- Using current date: $date", 'info');
+} else {
+    // Validate date format (dd-mm-yyyy)
+    $dateObj = DateTime::createFromFormat('d-m-Y', $date);
+    if (!$dateObj || $dateObj->format('d-m-Y') !== $date) {
+        out("- Invalid date format. Expected format: DD-MM-YYYY", 'error');
+        exit;
+    }
+
+    out("- Using date: $date", 'info');
+}
+
+// Read config file content
+$content = file_get_contents($configFile);
+
+// Update version
+$content = preg_replace(
+    "/\\\$bb_cfg\['tp_version'\]\s*=\s*'[^']*';/",
+    "\$bb_cfg['tp_version'] = '$version';",
+    $content
+);
+
+// Update release date
+$content = preg_replace(
+    "/\\\$bb_cfg\['tp_release_date'\]\s*=\s*'[^']*';/",
+    "\$bb_cfg['tp_release_date'] = '$date';",
+    $content
+);
+
+// Save updated config
+$bytesWritten = file_put_contents($configFile, $content);
+
+if ($bytesWritten === false) {
+    out("- Failed to write to config file", 'error');
+    exit;
+}
+
+if ($bytesWritten === 0) {
+    out("- Config file was not updated (0 bytes written)", 'error');
+    exit;
+}
+
+out("\n- Config file has been updated!", 'success');
+
+// Update CHANGELOG.md
+runProcess('npx git-cliff v2.4.6-alpha.4.. --config cliff.toml --tag "' . $version . '" > CHANGELOG.md');
+
+// Git add & commit
+runProcess('git add -A && git commit -m "release: ' . escapeshellarg($version) . (!empty($versionEmoji) ? (' ' . $versionEmoji) : '') . '"');
+
+// Git tag
+runProcess("git tag -a \"$version\" -m \"Release $version\"");
+runProcess("git tag -v \"$version\"");
+
+// Git push
+runProcess("git push origin master");
+runProcess("git push origin $version");
+
+out("\n- Release $version has been successfully prepared, committed and pushed!", 'success');

admin/admin_attach_cp.php

@@ -0,0 +1,477 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+if (!empty($setmodules)) {
+    $module['ATTACHMENTS']['CONTROL_PANEL'] = basename(__FILE__);
+    return;
+}
+
+require __DIR__ . '/pagestart.php';
+
+if (($attach_config['upload_dir'][0] == '/') || (($attach_config['upload_dir'][0] != '/') && ($attach_config['upload_dir'][1] == ':'))) {
+    $upload_dir = $attach_config['upload_dir'];
+} else {
+    $upload_dir = '../' . $attach_config['upload_dir'];
+}
+
+include ATTACH_DIR . '/includes/functions_selects.php';
+
+// Init Variables
+$start = get_var('start', 0);
+$sort_order = get_var('order', 'ASC');
+$sort_order = ($sort_order == 'ASC') ? 'ASC' : 'DESC';
+$mode = get_var('mode', '');
+$view = get_var('view', '');
+$uid = isset($_POST['u_id']) ? get_var('u_id', 0) : get_var('uid', 0);
+
+$view = (isset($_POST['search']) && $_POST['search']) ? 'attachments' : $view;
+
+// process modes based on view
+if ($view === 'username') {
+    $mode_types_text = [$lang['SORT_USERNAME'], $lang['SORT_ATTACHMENTS'], $lang['SORT_SIZE']];
+    $mode_types = ['username', 'attachments', 'filesize'];
+
+    if (!$mode) {
+        $mode = 'attachments';
+        $sort_order = 'DESC';
+    }
+} elseif ($view === 'attachments') {
+    $mode_types_text = [$lang['SORT_FILENAME'], $lang['SORT_COMMENT'], $lang['SORT_EXTENSION'], $lang['SORT_SIZE'], $lang['SORT_DOWNLOADS'], $lang['SORT_POSTTIME']];
+    $mode_types = ['real_filename', 'comment', 'extension', 'filesize', 'downloads', 'post_time'];
+
+    if (!$mode) {
+        $mode = 'real_filename';
+        $sort_order = 'ASC';
+    }
+} elseif ($view === 'search') {
+    $mode_types_text = [$lang['SORT_FILENAME'], $lang['SORT_COMMENT'], $lang['SORT_EXTENSION'], $lang['SORT_SIZE'], $lang['SORT_DOWNLOADS'], $lang['SORT_POSTTIME']];
+    $mode_types = ['real_filename', 'comment', 'extension', 'filesize', 'downloads', 'post_time'];
+
+    $sort_order = 'DESC';
+} else {
+    $view = 'stats';
+    $mode_types_text = [];
+    $sort_order = 'ASC';
+}
+
+// Pagination ?
+$do_pagination = ($view !== 'stats' && $view !== 'search');
+
+// Set Order
+$order_by = '';
+
+if ($view === 'username') {
+    switch ($mode) {
+        case 'username':
+            $order_by = 'ORDER BY u.username ' . $sort_order . ' LIMIT ' . $start . ', ' . config()->get('topics_per_page');
+            break;
+        case 'attachments':
+            $order_by = 'ORDER BY total_attachments ' . $sort_order . ' LIMIT ' . $start . ', ' . config()->get('topics_per_page');
+            break;
+        case 'filesize':
+            $order_by = 'ORDER BY total_size ' . $sort_order . ' LIMIT ' . $start . ', ' . config()->get('topics_per_page');
+            break;
+        default:
+            $mode = 'attachments';
+            $sort_order = 'DESC';
+            $order_by = 'ORDER BY total_attachments ' . $sort_order . ' LIMIT ' . $start . ', ' . config()->get('topics_per_page');
+            break;
+    }
+} elseif ($view === 'attachments') {
+    switch ($mode) {
+        case 'real_filename':
+            $order_by = 'ORDER BY a.real_filename ' . $sort_order . ' LIMIT ' . $start . ', ' . config()->get('topics_per_page');
+            break;
+        case 'comment':
+            $order_by = 'ORDER BY a.comment ' . $sort_order . ' LIMIT ' . $start . ', ' . config()->get('topics_per_page');
+            break;
+        case 'extension':
+            $order_by = 'ORDER BY a.extension ' . $sort_order . ' LIMIT ' . $start . ', ' . config()->get('topics_per_page');
+            break;
+        case 'filesize':
+            $order_by = 'ORDER BY a.filesize ' . $sort_order . ' LIMIT ' . $start . ', ' . config()->get('topics_per_page');
+            break;
+        case 'downloads':
+            $order_by = 'ORDER BY a.download_count ' . $sort_order . ' LIMIT ' . $start . ', ' . config()->get('topics_per_page');
+            break;
+        case 'post_time':
+            $order_by = 'ORDER BY a.filetime ' . $sort_order . ' LIMIT ' . $start . ', ' . config()->get('topics_per_page');
+            break;
+        default:
+            $mode = 'a.real_filename';
+            $sort_order = 'ASC';
+            $order_by = 'ORDER BY a.real_filename ' . $sort_order . ' LIMIT ' . $start . ', ' . config()->get('topics_per_page');
+            break;
+    }
+}
+
+// Set select fields
+$view_types_text = [$lang['VIEW_STATISTIC'], $lang['VIEW_SEARCH']];
+$view_types = ['stats', 'search'];
+$select_view = '';
+
+if (in_array($view, $view_types)) {
+    $select_view = '<select name="view">';
+    for ($i = 0, $iMax = count($view_types_text); $i < $iMax; $i++) {
+        $selected = ($view === $view_types[$i]) ? ' selected' : '';
+        $select_view .= '<option value="' . $view_types[$i] . '"' . $selected . '>' . $view_types_text[$i] . '</option>';
+    }
+    $select_view .= '</select>';
+}
+
+if (count($mode_types_text) > 0 && !empty($mode_types)) {
+    $select_sort_mode = '<select name="mode">';
+    for ($i = 0, $iMax = count($mode_types_text); $i < $iMax; $i++) {
+        $selected = ($mode === $mode_types[$i]) ? ' selected' : '';
+        $select_sort_mode .= '<option value="' . $mode_types[$i] . '"' . $selected . '>' . $mode_types_text[$i] . '</option>';
+    }
+    $select_sort_mode .= '</select>';
+}
+
+$select_sort_order = '<select name="order">';
+if ($sort_order === 'ASC') {
+    $select_sort_order .= '<option value="ASC" selected>' . $lang['ASC'] . '</option><option value="DESC">' . $lang['DESC'] . '</option>';
+} else {
+    $select_sort_order .= '<option value="ASC">' . $lang['ASC'] . '</option><option value="DESC" selected>' . $lang['DESC'] . '</option>';
+}
+$select_sort_order .= '</select>';
+
+$submit_change = isset($_POST['submit_change']);
+$delete = isset($_POST['delete']);
+$delete_id_list = get_var('delete_id_list', [0]);
+
+$confirm = isset($_POST['confirm']);
+
+if ($confirm && count($delete_id_list) > 0) {
+    $attachments = [];
+
+    delete_attachment(0, $delete_id_list);
+} elseif ($delete && count($delete_id_list) > 0) {
+    // Not confirmed, show confirmation message
+    $hidden_fields = '<input type="hidden" name="view" value="' . $view . '" />';
+    $hidden_fields .= '<input type="hidden" name="mode" value="' . $mode . '" />';
+    $hidden_fields .= '<input type="hidden" name="order" value="' . $sort_order . '" />';
+    $hidden_fields .= '<input type="hidden" name="u_id" value="' . $uid . '" />';
+    $hidden_fields .= '<input type="hidden" name="start" value="' . $start . '" />';
+
+    foreach ($delete_id_list as $iValue) {
+        $hidden_fields .= '<input type="hidden" name="delete_id_list[]" value="' . $iValue . '" />';
+    }
+
+    print_confirmation([
+        'FORM_ACTION' => 'admin_attach_cp.php',
+        'HIDDEN_FIELDS' => $hidden_fields,
+    ]);
+}
+
+// Assign Default Template Vars
+$template->assign_vars([
+    'S_VIEW_SELECT' => $select_view,
+    'S_MODE_ACTION' => 'admin_attach_cp.php?view=' . $view . '&amp;mode=' . $mode . '&amp;order=' . $sort_order . '&amp;uid=' . $uid
+]);
+
+if ($submit_change && $view === 'attachments') {
+    $attach_change_list = get_var('attach_id_list', [0]);
+    $attach_comment_list = get_var('attach_comment_list', ['']);
+    $attach_download_count_list = get_var('attach_count_list', [0]);
+
+    // Generate correct Change List
+    $attachments = [];
+
+    for ($i = 0, $iMax = count($attach_change_list); $i < $iMax; $i++) {
+        $attachments['_' . $attach_change_list[$i]]['comment'] = $attach_comment_list[$i];
+        $attachments['_' . $attach_change_list[$i]]['download_count'] = $attach_download_count_list[$i];
+    }
+
+    $sql = 'SELECT *
+		FROM ' . BB_ATTACHMENTS_DESC . '
+		ORDER BY attach_id';
+
+    if (!($result = DB()->sql_query($sql))) {
+        bb_die('Could not get attachment informations');
+    }
+
+    while ($attachrow = DB()->sql_fetchrow($result)) {
+        if (isset($attachments['_' . $attachrow['attach_id']])) {
+            if ($attachrow['comment'] != $attachments['_' . $attachrow['attach_id']]['comment'] || $attachrow['download_count'] != $attachments['_' . $attachrow['attach_id']]['download_count']) {
+                $sql = 'UPDATE ' . BB_ATTACHMENTS_DESC . "
+					SET comment = '" . DB()->escape($attachments['_' . $attachrow['attach_id']]['comment']) . "', download_count = " . (int)$attachments['_' . $attachrow['attach_id']]['download_count'] . '
+					WHERE attach_id = ' . (int)$attachrow['attach_id'];
+
+                if (!DB()->sql_query($sql)) {
+                    bb_die('Could not update attachments informations');
+                }
+            }
+        }
+    }
+    DB()->sql_freeresult($result);
+}
+
+// Statistics
+if ($view == 'stats') {
+    $upload_dir_size = get_formatted_dirsize();
+
+    $attachment_quota = humn_size($attach_config['attachment_quota']);
+
+    // number_of_attachments
+    $row = DB()->fetch_row('SELECT COUNT(*) AS total FROM ' . BB_ATTACHMENTS_DESC);
+    $number_of_attachments = $number_of_posts = $row['total'];
+
+    $number_of_pms = 0;
+
+    // number_of_topics
+    $row = DB()->fetch_row('SELECT COUNT(*) AS topics FROM ' . BB_TOPICS . ' WHERE topic_attachment = 1');
+    $number_of_topics = $row['topics'];
+
+    // number_of_users
+    $row = DB()->fetch_row('SELECT COUNT(DISTINCT user_id_1) AS users FROM ' . BB_ATTACHMENTS . ' WHERE post_id != 0');
+    $number_of_users = $row['users'];
+
+    $template->assign_vars([
+        'TPL_ATTACH_STATISTICS' => true,
+        'TOTAL_FILESIZE' => $upload_dir_size,
+        'ATTACH_QUOTA' => $attachment_quota,
+        'NUMBER_OF_ATTACHMENTS' => $number_of_attachments,
+        'NUMBER_OF_POSTS' => $number_of_posts,
+        'NUMBER_OF_PMS' => $number_of_pms,
+        'NUMBER_OF_TOPICS' => $number_of_topics,
+        'NUMBER_OF_USERS' => $number_of_users,
+    ]);
+}
+
+// Search
+if ($view === 'search') {
+    // Get Forums and Categories
+    //sf - add [, f.forum_parent]
+    $sql = 'SELECT c.cat_title, c.cat_id, f.forum_name, f.forum_id, f.forum_parent
+	FROM ' . BB_CATEGORIES . ' c, ' . BB_FORUMS . ' f
+	WHERE f.cat_id = c.cat_id
+	ORDER BY c.cat_id, f.forum_order';
+
+    if (!($result = DB()->sql_query($sql))) {
+        bb_die('Could not obtain forum_name / forum_id');
+    }
+
+    $s_forums = '';
+    $list_cat = [];
+    while ($row = DB()->sql_fetchrow($result)) { //sf
+        $s_forums .= '<option value="' . $row['forum_id'] . '">' . ($row['forum_parent'] ? HTML_SF_SPACER : '') . htmlCHR($row['forum_name']) . '</option>';
+
+        if (empty($list_cat[$row['cat_id']])) {
+            $list_cat[$row['cat_id']] = $row['cat_title'];
+        }
+    }
+
+    $s_categories = '';
+    if ($s_forums) {
+        $s_forums = '<option value="0">' . $lang['ALL_AVAILABLE'] . '</option>' . $s_forums;
+
+        // Category to search
+        $s_categories = '<option value="0">' . $lang['ALL_AVAILABLE'] . '</option>';
+
+        foreach ($list_cat as $cat_id => $cat_title) {
+            $s_categories .= '<option value="' . $cat_id . '">' . htmlCHR($cat_title) . '</option>';
+        }
+    } else {
+        bb_die($lang['NO_SEARCHABLE_FORUMS']);
+    }
+
+    $template->assign_vars([
+        'TPL_ATTACH_SEARCH' => true,
+        'S_FORUM_OPTIONS' => $s_forums,
+        'S_CATEGORY_OPTIONS' => $s_categories,
+        'S_SORT_OPTIONS' => $select_sort_mode,
+        'S_SORT_ORDER' => $select_sort_order,
+    ]);
+}
+
+// Username
+if ($view === 'username') {
+    $template->assign_vars([
+        'TPL_ATTACH_USER' => true,
+        'S_MODE_SELECT' => $select_sort_mode,
+        'S_ORDER_SELECT' => $select_sort_order,
+    ]);
+    $total_rows = 0;
+    bb_die('removed');
+}
+
+// Attachments
+if ($view === 'attachments') {
+    $user_based = (bool)$uid;
+    $search_based = (isset($_POST['search']) && $_POST['search']);
+
+    $hidden_fields = '';
+
+    $template->assign_vars([
+        'TPL_ATTACH_ATTACHMENTS' => true,
+        'S_MODE_SELECT' => $select_sort_mode,
+        'S_ORDER_SELECT' => $select_sort_order,
+    ]);
+
+    $total_rows = 0;
+
+    // Are we called from Username ?
+    if ($user_based) {
+        $sql = 'SELECT username FROM ' . BB_USERS . ' WHERE user_id = ' . (int)$uid;
+
+        if (!($result = DB()->sql_query($sql))) {
+            bb_die('Error getting username');
+        }
+
+        $row = DB()->sql_fetchrow($result);
+        DB()->sql_freeresult($result);
+        $username = $row['username'];
+
+        $s_hidden = '<input type="hidden" name="u_id" value="' . (int)$uid . '" />';
+
+        $template->assign_block_vars('switch_user_based', []);
+
+        $template->assign_vars([
+            'S_USER_HIDDEN' => $s_hidden,
+            'L_STATISTICS_FOR_USER' => sprintf($lang['STATISTICS_FOR_USER'], $username),
+        ]);
+
+        $sql = 'SELECT attach_id
+		FROM ' . BB_ATTACHMENTS . '
+		WHERE user_id_1 = ' . (int)$uid . '
+		GROUP BY attach_id';
+
+        if (!($result = DB()->sql_query($sql))) {
+            bb_die('Could not query attachments #1');
+        }
+
+        $attach_ids = DB()->sql_fetchrowset($result);
+        $num_attach_ids = DB()->num_rows($result);
+        DB()->sql_freeresult($result);
+
+        if ($num_attach_ids == 0) {
+            bb_die('For some reason no attachments are assigned to the user ' . $username);
+        }
+
+        $total_rows = $num_attach_ids;
+
+        $attach_id = [];
+
+        for ($j = 0; $j < $num_attach_ids; $j++) {
+            $attach_id[] = (int)$attach_ids[$j]['attach_id'];
+        }
+
+        $sql = 'SELECT a.*
+		FROM ' . BB_ATTACHMENTS_DESC . ' a
+		WHERE a.attach_id IN (' . implode(', ', $attach_id) . ') ' .
+            $order_by;
+
+        if (!($result = DB()->sql_query($sql))) {
+            bb_die('Could not query attachments #2');
+        }
+
+        $attachments = DB()->sql_fetchrowset($result);
+        $num_attach = DB()->num_rows($result);
+        DB()->sql_freeresult($result);
+    } else {
+        // we are called from search
+        $attachments = search_attachments($order_by, $total_rows);
+    }
+
+    if (count($attachments) > 0) {
+        for ($i = 0, $iMax = count($attachments); $i < $iMax; $i++) {
+            $delete_box = '<input type="checkbox" name="delete_id_list[]" value="' . (int)$attachments[$i]['attach_id'] . '" />';
+
+            foreach ($delete_id_list as $jValue) {
+                if ($jValue == $attachments[$i]['attach_id']) {
+                    $delete_box = '<input type="checkbox" name="delete_id_list[]" value="' . (int)$attachments[$i]['attach_id'] . '" checked />';
+                    break;
+                }
+            }
+
+            $row_class = !($i % 2) ? 'row1' : 'row2';
+
+            // Is the Attachment assigned to more than one post ?
+            // If it's not assigned to any post, it's an private message thingy. ;)
+            $post_titles = [];
+
+            $sql = 'SELECT *
+			FROM ' . BB_ATTACHMENTS . '
+			WHERE attach_id = ' . (int)$attachments[$i]['attach_id'];
+
+            if (!($result = DB()->sql_query($sql))) {
+                bb_die('Could not query attachments #3');
+            }
+
+            $ids = DB()->sql_fetchrowset($result);
+            $num_ids = DB()->num_rows($result);
+            DB()->sql_freeresult($result);
+
+            for ($j = 0; $j < $num_ids; $j++) {
+                if ($ids[$j]['post_id'] != 0) {
+                    $sql = 'SELECT t.topic_title
+					FROM ' . BB_TOPICS . ' t, ' . BB_POSTS . ' p
+					WHERE p.post_id = ' . (int)$ids[$j]['post_id'] . ' AND p.topic_id = t.topic_id
+					GROUP BY t.topic_id, t.topic_title';
+
+                    if (!($result = DB()->sql_query($sql))) {
+                        bb_die('Could not query topic');
+                    }
+
+                    $row = DB()->sql_fetchrow($result);
+                    DB()->sql_freeresult($result);
+                    $post_title = str_short($row['topic_title'], 30);
+
+                    $view_topic = BB_ROOT . POST_URL . $ids[$j]['post_id'] . '#' . $ids[$j]['post_id'];
+
+                    $post_titles[] = '<a href="' . $view_topic . '" class="gen" target="_blank">' . $post_title . '</a>';
+                } else {
+                    $post_titles[] = $lang['PRIVATE_MESSAGE'];
+                }
+            }
+
+            $post_titles = implode('<br />', $post_titles);
+
+            $hidden_field = '<input type="hidden" name="attach_id_list[]" value="' . (int)$attachments[$i]['attach_id'] . '" />';
+
+            $template->assign_block_vars('attachrow', [
+                'ROW_NUMBER' => $i + (@$_GET['start'] + 1),
+                'ROW_CLASS' => $row_class,
+
+                'FILENAME' => htmlspecialchars($attachments[$i]['real_filename']),
+                'COMMENT' => htmlspecialchars($attachments[$i]['comment']),
+                'EXTENSION' => $attachments[$i]['extension'],
+                'SIZE' => humn_size($attachments[$i]['filesize'], 2),
+                'DOWNLOAD_COUNT' => $attachments[$i]['download_count'],
+                'POST_TIME' => bb_date($attachments[$i]['filetime']),
+                'POST_TITLE' => $post_titles,
+
+                'S_DELETE_BOX' => $delete_box,
+                'S_HIDDEN' => $hidden_field,
+                'U_VIEW_ATTACHMENT' => BB_ROOT . DL_URL . $attachments[$i]['attach_id'],
+            ]);
+        }
+    }
+
+    if (!$search_based && !$user_based) {
+        if (!$attachments) {
+            $sql = 'SELECT attach_id FROM ' . BB_ATTACHMENTS_DESC;
+
+            if (!($result = DB()->sql_query($sql))) {
+                bb_die('Could not query attachment description table');
+            }
+
+            $total_rows = DB()->num_rows($result);
+            DB()->sql_freeresult($result);
+        }
+    }
+}
+
+// Generate Pagination
+if ($do_pagination && $total_rows > config()->get('topics_per_page')) {
+    generate_pagination('admin_attach_cp.php?view=' . $view . '&amp;mode=' . $mode . '&amp;order=' . $sort_order . '&amp;uid=' . $uid, $total_rows, config()->get('topics_per_page'), $start);
+}
+
+print_page('admin_attach_cp.tpl', 'admin');

admin/admin_attachments.php

@@ -0,0 +1,552 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+if (!empty($setmodules)) {
+    $filename = basename(__FILE__);
+    $module['ATTACHMENTS']['MANAGE'] = $filename . '?mode=manage';
+    $module['ATTACHMENTS']['SPECIAL_CATEGORIES'] = $filename . '?mode=cats';
+    $module['ATTACHMENTS']['QUOTA_LIMITS'] = $filename . '?mode=quota';
+    return;
+}
+
+require __DIR__ . '/pagestart.php';
+
+$error = false;
+
+if (($attach_config['upload_dir'][0] == '/') || (($attach_config['upload_dir'][0] != '/') && ($attach_config['upload_dir'][1] == ':'))) {
+    $upload_dir = $attach_config['upload_dir'];
+} else {
+    $upload_dir = '../' . $attach_config['upload_dir'];
+}
+
+include ATTACH_DIR . '/includes/functions_selects.php';
+
+// Init Vars
+$mode = request_var('mode', '');
+$e_mode = request_var('e_mode', '');
+$size = request_var('size', '');
+$quota_size = request_var('quota_size', '');
+$pm_size = request_var('pm_size', '');
+
+$submit = isset($_POST['submit']);
+$check_upload = isset($_POST['settings']);
+$check_image_cat = isset($_POST['cat_settings']);
+
+// Re-evaluate the Attachment Configuration
+$sql = 'SELECT * FROM ' . BB_ATTACH_CONFIG;
+
+if (!$result = DB()->sql_query($sql)) {
+    bb_die('Could not find attachment config table #1');
+}
+
+while ($row = DB()->sql_fetchrow($result)) {
+    $config_name = $row['config_name'];
+    $config_value = $row['config_value'];
+
+    $new_attach[$config_name] = get_var($config_name, trim($attach_config[$config_name]));
+
+    if (!$size && !$submit && $config_name == 'max_filesize') {
+        $size = ($attach_config[$config_name] >= 1048576) ? 'mb' : (($attach_config[$config_name] >= 1024) ? 'kb' : 'b');
+    }
+
+    if (!$quota_size && !$submit && $config_name == 'attachment_quota') {
+        $quota_size = ($attach_config[$config_name] >= 1048576) ? 'mb' : (($attach_config[$config_name] >= 1024) ? 'kb' : 'b');
+    }
+
+    if (!$pm_size && !$submit && $config_name == 'max_filesize_pm') {
+        $pm_size = ($attach_config[$config_name] >= 1048576) ? 'mb' : (($attach_config[$config_name] >= 1024) ? 'kb' : 'b');
+    }
+
+    if (!$submit && ($config_name == 'max_filesize' || $config_name == 'attachment_quota' || $config_name == 'max_filesize_pm')) {
+        if ($new_attach[$config_name] >= 1048576) {
+            $new_attach[$config_name] = round($new_attach[$config_name] / 1048576 * 100) / 100;
+        } elseif ($new_attach[$config_name] >= 1024) {
+            $new_attach[$config_name] = round($new_attach[$config_name] / 1024 * 100) / 100;
+        }
+    }
+
+    if ($submit && ($mode == 'manage' || $mode == 'cats')) {
+        if ($config_name == 'max_filesize') {
+            $old = $new_attach[$config_name];
+            $new_attach[$config_name] = ($size == 'kb') ? round($new_attach[$config_name] * 1024) : (($size == 'mb') ? round($new_attach[$config_name] * 1048576) : $new_attach[$config_name]);
+        }
+
+        if ($config_name == 'attachment_quota') {
+            $old = $new_attach[$config_name];
+            $new_attach[$config_name] = ($quota_size == 'kb') ? round($new_attach[$config_name] * 1024) : (($quota_size == 'mb') ? round($new_attach[$config_name] * 1048576) : $new_attach[$config_name]);
+        }
+
+        if ($config_name == 'max_filesize_pm') {
+            $old = $new_attach[$config_name];
+            $new_attach[$config_name] = ($pm_size == 'kb') ? round($new_attach[$config_name] * 1024) : (($pm_size == 'mb') ? round($new_attach[$config_name] * 1048576) : $new_attach[$config_name]);
+        }
+
+        if ($config_name == 'max_filesize') {
+            $old_size = $attach_config[$config_name];
+            $new_size = $new_attach[$config_name];
+
+            if ($old_size != $new_size) {
+                // See, if we have a similar value of old_size in Mime Groups. If so, update these values.
+                $sql = 'UPDATE ' . BB_EXTENSION_GROUPS . '
+					SET max_filesize = ' . (int)$new_size . '
+					WHERE max_filesize = ' . (int)$old_size;
+
+                if (!($result_2 = DB()->sql_query($sql))) {
+                    bb_die('Could not update extension group information');
+                }
+            }
+
+            $sql = 'UPDATE ' . BB_ATTACH_CONFIG . "
+				SET	config_value = '" . DB()->escape($new_attach[$config_name]) . "'
+				WHERE config_name = '" . DB()->escape($config_name) . "'";
+        } else {
+            $sql = 'UPDATE ' . BB_ATTACH_CONFIG . "
+				SET	config_value = '" . DB()->escape($new_attach[$config_name]) . "'
+				WHERE config_name = '" . DB()->escape($config_name) . "'";
+        }
+
+        if (!DB()->sql_query($sql)) {
+            bb_die('Failed to update attachment configuration for ' . $config_name);
+        }
+
+        if ($config_name == 'max_filesize' || $config_name == 'attachment_quota' || $config_name == 'max_filesize_pm') {
+            $new_attach[$config_name] = $old;
+        }
+    }
+}
+DB()->sql_freeresult($result);
+
+// Clear cached config
+CACHE('bb_cache')->rm('attach_config');
+
+$select_size_mode = size_select('size', $size);
+$select_quota_size_mode = size_select('quota_size', $quota_size);
+$select_pm_size_mode = size_select('pm_size', $pm_size);
+
+// Check Settings
+if ($check_upload) {
+    // Some tests...
+    $attach_config = [];
+
+    $sql = 'SELECT * FROM ' . BB_ATTACH_CONFIG;
+
+    if (!($result = DB()->sql_query($sql))) {
+        bb_die('Could not find attachment config table #2');
+    }
+
+    $row = DB()->sql_fetchrowset($result);
+    $num_rows = DB()->num_rows($result);
+    DB()->sql_freeresult($result);
+
+    for ($i = 0; $i < $num_rows; $i++) {
+        $attach_config[$row[$i]['config_name']] = trim($row[$i]['config_value']);
+    }
+
+    if ($attach_config['upload_dir'][0] == '/' || ($attach_config['upload_dir'][0] != '/' && $attach_config['upload_dir'][1] == ':')) {
+        $upload_dir = $attach_config['upload_dir'];
+    } else {
+        $upload_dir = BB_ROOT . $attach_config['upload_dir'];
+    }
+
+    $error = false;
+
+    // Does the target directory exist, is it a directory and writeable
+    if (!@file_exists(realpath($upload_dir))) {
+        $error = true;
+        $error_msg = sprintf($lang['DIRECTORY_DOES_NOT_EXIST'], $attach_config['upload_dir']) . '<br />';
+    }
+
+    if (!$error && !is_dir($upload_dir)) {
+        $error = true;
+        $error_msg = sprintf($lang['DIRECTORY_IS_NOT_A_DIR'], $attach_config['upload_dir']) . '<br />';
+    }
+
+    if (!$error) {
+        if (!($fp = @fopen($upload_dir . '/0_000000.000', 'wb+'))) {
+            $error = true;
+            $error_msg = sprintf($lang['DIRECTORY_NOT_WRITEABLE'], $attach_config['upload_dir']) . '<br />';
+        } else {
+            @fclose($fp);
+            unlink_attach($upload_dir . '/0_000000.000');
+        }
+    }
+
+    if (!$error) {
+        bb_die($lang['TEST_SETTINGS_SUCCESSFUL'] . '<br /><br />' . sprintf($lang['CLICK_RETURN_ATTACH_CONFIG'], '<a href="admin_attachments.php?mode=manage">', '</a>') . '<br /><br />' . sprintf($lang['CLICK_RETURN_ADMIN_INDEX'], '<a href="index.php?pane=right">', '</a>'));
+    }
+}
+
+// Management
+if ($submit && $mode == 'manage') {
+    if (!$error) {
+        bb_die($lang['ATTACH_CONFIG_UPDATED'] . '<br /><br />' . sprintf($lang['CLICK_RETURN_ATTACH_CONFIG'], '<a href="admin_attachments.php?mode=manage">', '</a>') . '<br /><br />' . sprintf($lang['CLICK_RETURN_ADMIN_INDEX'], '<a href="index.php?pane=right">', '</a>'));
+    }
+}
+
+if ($mode == 'manage') {
+    $template->assign_vars(array(
+        'TPL_ATTACH_MANAGE' => true,
+        'S_ATTACH_ACTION' => 'admin_attachments.php?mode=manage',
+        'S_FILESIZE' => $select_size_mode,
+        'S_FILESIZE_QUOTA' => $select_quota_size_mode,
+        'S_FILESIZE_PM' => $select_pm_size_mode,
+        'S_DEFAULT_UPLOAD_LIMIT' => default_quota_limit_select('default_upload_quota', (int)trim($new_attach['default_upload_quota'])),
+        'S_DEFAULT_PM_LIMIT' => default_quota_limit_select('default_pm_quota', (int)trim($new_attach['default_pm_quota'])),
+
+        'UPLOAD_DIR' => $new_attach['upload_dir'],
+        'ATTACHMENT_IMG_PATH' => $new_attach['upload_img'],
+        'TOPIC_ICON' => $new_attach['topic_icon'],
+        'MAX_FILESIZE' => $new_attach['max_filesize'],
+        'ATTACHMENT_QUOTA' => $new_attach['attachment_quota'],
+        'MAX_FILESIZE_PM' => $new_attach['max_filesize_pm'],
+        'MAX_ATTACHMENTS' => $new_attach['max_attachments'],
+        'MAX_ATTACHMENTS_PM' => $new_attach['max_attachments_pm'],
+        'DISABLE_MOD_YES' => $new_attach['disable_mod'] !== '0' ? 'checked' : '',
+        'DISABLE_MOD_NO' => $new_attach['disable_mod'] === '0' ? 'checked' : '',
+        'PM_ATTACH_YES' => $new_attach['allow_pm_attach'] !== '0' ? 'checked' : '',
+        'PM_ATTACH_NO' => $new_attach['allow_pm_attach'] === '0' ? 'checked' : '',
+        'DISPLAY_ORDER_ASC' => $new_attach['display_order'] !== '0' ? 'checked' : '',
+        'DISPLAY_ORDER_DESC' => $new_attach['display_order'] === '0' ? 'checked' : '',
+    ));
+}
+
+if ($submit && $mode == 'cats') {
+    if (!$error) {
+        bb_die($lang['ATTACH_CONFIG_UPDATED'] . '<br /><br />' . sprintf($lang['CLICK_RETURN_ATTACH_CONFIG'], '<a href="admin_attachments.php?mode=cats">', '</a>') . '<br /><br />' . sprintf($lang['CLICK_RETURN_ADMIN_INDEX'], '<a href="index.php?pane=right">', '</a>'));
+    }
+}
+
+if ($mode == 'cats') {
+    $s_assigned_group_images = $lang['NONE'];
+
+    $sql = 'SELECT group_name, cat_id FROM ' . BB_EXTENSION_GROUPS . ' WHERE cat_id > 0 ORDER BY cat_id';
+
+    $s_assigned_group_images = [];
+
+    if (!($result = DB()->sql_query($sql))) {
+        bb_die('Could not get group names from ' . BB_EXTENSION_GROUPS);
+    }
+
+    $row = DB()->sql_fetchrowset($result);
+    DB()->sql_freeresult($result);
+
+    for ($i = 0, $iMax = count($row); $i < $iMax; $i++) {
+        if ($row[$i]['cat_id'] == IMAGE_CAT) {
+            $s_assigned_group_images[] = $row[$i]['group_name'];
+        }
+    }
+
+    $display_inlined_yes = ($new_attach['img_display_inlined'] != '0') ? 'checked' : '';
+    $display_inlined_no = ($new_attach['img_display_inlined'] == '0') ? 'checked' : '';
+
+    $create_thumbnail_yes = ($new_attach['img_create_thumbnail'] != '0') ? 'checked' : '';
+    $create_thumbnail_no = ($new_attach['img_create_thumbnail'] == '0') ? 'checked' : '';
+
+    // Check Thumbnail Support
+    if (!extension_loaded('gd')) {
+        $new_attach['img_create_thumbnail'] = '0';
+    } else {
+        $template->assign_block_vars('switch_thumbnail_support', []);
+    }
+
+    $template->assign_vars(array(
+        'TPL_ATTACH_SPECIAL_CATEGORIES' => true,
+        'IMAGE_MAX_HEIGHT' => $new_attach['img_max_height'],
+        'IMAGE_MAX_WIDTH' => $new_attach['img_max_width'],
+        'IMAGE_LINK_HEIGHT' => $new_attach['img_link_height'],
+        'IMAGE_LINK_WIDTH' => $new_attach['img_link_width'],
+        'IMAGE_MIN_THUMB_FILESIZE' => $new_attach['img_min_thumb_filesize'],
+        'DISPLAY_INLINED_YES' => $display_inlined_yes,
+        'DISPLAY_INLINED_NO' => $display_inlined_no,
+        'CREATE_THUMBNAIL_YES' => $create_thumbnail_yes,
+        'CREATE_THUMBNAIL_NO' => $create_thumbnail_no,
+        'S_ASSIGNED_GROUP_IMAGES' => implode(', ', $s_assigned_group_images),
+        'S_ATTACH_ACTION' => 'admin_attachments.php?mode=cats',
+    ));
+}
+
+// Check Cat Settings
+if ($check_image_cat) {
+    // Some tests...
+    $attach_config = [];
+
+    $sql = 'SELECT * FROM ' . BB_ATTACH_CONFIG;
+
+    if (!($result = DB()->sql_query($sql))) {
+        bb_die('Could not find attachment config table #3');
+    }
+
+    $row = DB()->sql_fetchrowset($result);
+    $num_rows = DB()->num_rows($result);
+    DB()->sql_freeresult($result);
+
+    for ($i = 0; $i < $num_rows; $i++) {
+        $attach_config[$row[$i]['config_name']] = trim($row[$i]['config_value']);
+    }
+
+    if ($attach_config['upload_dir'][0] == '/' || ($attach_config['upload_dir'][0] != '/' && $attach_config['upload_dir'][1] == ':')) {
+        $upload_dir = $attach_config['upload_dir'];
+    } else {
+        $upload_dir = BB_ROOT . $attach_config['upload_dir'];
+    }
+
+    $upload_dir = $upload_dir . '/' . THUMB_DIR;
+
+    $error = false;
+
+    // Does the target directory exist, is it a directory and writeable
+    if (!@file_exists(realpath($upload_dir))) {
+        if (!bb_mkdir($upload_dir) && !is_dir($upload_dir)) {
+            throw new \RuntimeException(sprintf('Directory "%s" was not created', $upload_dir));
+        }
+
+        if (!@file_exists(realpath($upload_dir))) {
+            $error = true;
+            $error_msg = sprintf($lang['DIRECTORY_DOES_NOT_EXIST'], $upload_dir) . '<br />';
+        }
+    }
+
+    if (!$error && !is_dir($upload_dir)) {
+        $error = true;
+        $error_msg = sprintf($lang['DIRECTORY_IS_NOT_A_DIR'], $upload_dir) . '<br />';
+    }
+
+    if (!$error) {
+        if (!($fp = @fopen($upload_dir . '/0_000000.000', 'wb+'))) {
+            $error = true;
+            $error_msg = sprintf($lang['DIRECTORY_NOT_WRITEABLE'], $upload_dir) . '<br />';
+        } else {
+            @fclose($fp);
+            @unlink($upload_dir . '/0_000000.000');
+        }
+    }
+
+    if (!$error) {
+        bb_die($lang['TEST_SETTINGS_SUCCESSFUL'] . '<br /><br />' . sprintf($lang['CLICK_RETURN_ATTACH_CONFIG'], '<a href="admin_attachments.php?mode=cats">', '</a>') . '<br /><br />' . sprintf($lang['CLICK_RETURN_ADMIN_INDEX'], '<a href="index.php?pane=right">', '</a>'));
+    }
+}
+
+// Quota Limit Settings
+if ($submit && $mode == 'quota') {
+    // Change Quota Limit
+    $quota_change_list = get_var('quota_change_list', array(0));
+    $quota_desc_list = get_var('quota_desc_list', array(''));
+    $filesize_list = get_var('max_filesize_list', array(0));
+    $size_select_list = get_var('size_select_list', array(''));
+
+    $allowed_list = [];
+
+    for ($i = 0, $iMax = count($quota_change_list); $i < $iMax; $i++) {
+        $filesize_list[$i] = ($size_select_list[$i] == 'kb') ? round($filesize_list[$i] * 1024) : (($size_select_list[$i] == 'mb') ? round($filesize_list[$i] * 1048576) : $filesize_list[$i]);
+
+        $sql = 'UPDATE ' . BB_QUOTA_LIMITS . "
+			SET quota_desc = '" . DB()->escape($quota_desc_list[$i]) . "', quota_limit = " . (int)$filesize_list[$i] . '
+			WHERE quota_limit_id = ' . (int)$quota_change_list[$i];
+
+        if (!DB()->sql_query($sql)) {
+            bb_die('Could not update quota limits');
+        }
+    }
+
+    // Delete Quota Limits
+    $quota_id_list = get_var('quota_id_list', array(0));
+
+    $quota_id_sql = implode(', ', $quota_id_list);
+
+    if ($quota_id_sql != '') {
+        $sql = 'DELETE FROM ' . BB_QUOTA_LIMITS . ' WHERE quota_limit_id IN (' . $quota_id_sql . ')';
+
+        if (!($result = DB()->sql_query($sql))) {
+            bb_die('Could not delete quota limits');
+        }
+
+        // Delete Quotas linked to this setting
+        $sql = 'DELETE FROM ' . BB_QUOTA . ' WHERE quota_limit_id IN (' . $quota_id_sql . ')';
+
+        if (!($result = DB()->sql_query($sql))) {
+            bb_die('Could not delete quotas');
+        }
+    }
+
+    // Add Quota Limit ?
+    $quota_desc = get_var('quota_description', '');
+    $filesize = get_var('add_max_filesize', 0);
+    $size_select = get_var('add_size_select', '');
+    $add = isset($_POST['add_quota_check']);
+
+    if ($quota_desc != '' && $add) {
+        // check Quota Description
+        $sql = 'SELECT quota_desc FROM ' . BB_QUOTA_LIMITS;
+
+        if (!($result = DB()->sql_query($sql))) {
+            bb_die('Could not query quota limits table');
+        }
+
+        $row = DB()->sql_fetchrowset($result);
+        $num_rows = DB()->num_rows($result);
+        DB()->sql_freeresult($result);
+
+        if ($num_rows > 0) {
+            for ($i = 0; $i < $num_rows; $i++) {
+                if ($row[$i]['quota_desc'] == $quota_desc) {
+                    $error = true;
+                    if (isset($error_msg)) {
+                        $error_msg .= '<br />';
+                    }
+                    $error_msg .= sprintf($lang['QUOTA_LIMIT_EXIST'], $extension_group);
+                }
+            }
+        }
+
+        if (!$error) {
+            $filesize = ($size_select == 'kb') ? round($filesize * 1024) : (($size_select == 'mb') ? round($filesize * 1048576) : $filesize);
+
+            $sql = 'INSERT INTO ' . BB_QUOTA_LIMITS . " (quota_desc, quota_limit)
+			VALUES ('" . DB()->escape($quota_desc) . "', " . (int)$filesize . ')';
+
+            if (!DB()->sql_query($sql)) {
+                bb_die('Could not add quota limit');
+            }
+        }
+    }
+
+    if (!$error) {
+        bb_die($lang['ATTACH_CONFIG_UPDATED'] . '<br /><br />' . sprintf($lang['CLICK_RETURN_ATTACH_CONFIG'], '<a href="admin_attachments.php?mode=quota">', '</a>') . '<br /><br />' . sprintf($lang['CLICK_RETURN_ADMIN_INDEX'], '<a href="index.php?pane=right">', '</a>'));
+    }
+}
+
+if ($mode == 'quota') {
+    $max_add_filesize = $attach_config['max_filesize'];
+    $size = ($max_add_filesize >= 1048576) ? 'mb' : (($max_add_filesize >= 1024) ? 'kb' : 'b');
+
+    if ($max_add_filesize >= 1048576) {
+        $max_add_filesize = round($max_add_filesize / 1048576 * 100) / 100;
+    } elseif ($max_add_filesize >= 1024) {
+        $max_add_filesize = round($max_add_filesize / 1024 * 100) / 100;
+    }
+
+    $template->assign_vars(array(
+        'TPL_ATTACH_QUOTA' => true,
+        'MAX_FILESIZE' => $max_add_filesize,
+        'S_FILESIZE' => size_select('add_size_select', $size),
+        'S_ATTACH_ACTION' => 'admin_attachments.php?mode=quota',
+    ));
+
+    $sql = 'SELECT * FROM ' . BB_QUOTA_LIMITS . ' ORDER BY quota_limit DESC';
+
+    if (!($result = DB()->sql_query($sql))) {
+        bb_die('Could not get quota limits #1');
+    }
+
+    $rows = DB()->sql_fetchrowset($result);
+    DB()->sql_freeresult($result);
+
+    for ($i = 0, $iMax = count($rows); $i < $iMax; $i++) {
+        $size_format = ($rows[$i]['quota_limit'] >= 1048576) ? 'mb' : (($rows[$i]['quota_limit'] >= 1024) ? 'kb' : 'b');
+
+        if ($rows[$i]['quota_limit'] >= 1048576) {
+            $rows[$i]['quota_limit'] = round($rows[$i]['quota_limit'] / 1048576 * 100) / 100;
+        } elseif ($rows[$i]['quota_limit'] >= 1024) {
+            $rows[$i]['quota_limit'] = round($rows[$i]['quota_limit'] / 1024 * 100) / 100;
+        }
+
+        $template->assign_block_vars('limit_row', array(
+            'QUOTA_NAME' => $rows[$i]['quota_desc'],
+            'QUOTA_ID' => $rows[$i]['quota_limit_id'],
+            'S_FILESIZE' => size_select('size_select_list[]', $size_format),
+            'U_VIEW' => "admin_attachments.php?mode=$mode&amp;e_mode=view_quota&amp;quota_id=" . $rows[$i]['quota_limit_id'],
+            'MAX_FILESIZE' => $rows[$i]['quota_limit'],
+        ));
+    }
+}
+
+if ($mode == 'quota' && $e_mode == 'view_quota') {
+    $quota_id = get_var('quota_id', 0);
+
+    if (!$quota_id) {
+        bb_die('Invalid call');
+    }
+
+    $template->assign_block_vars('switch_quota_limit_desc', []);
+
+    $sql = 'SELECT * FROM ' . BB_QUOTA_LIMITS . ' WHERE quota_limit_id = ' . (int)$quota_id . ' LIMIT 1';
+
+    if (!($result = DB()->sql_query($sql))) {
+        bb_die('Could not get quota limits #2');
+    }
+
+    $row = DB()->sql_fetchrow($result);
+    DB()->sql_freeresult($result);
+
+    $template->assign_vars(array(
+        'L_QUOTA_LIMIT_DESC' => $row['quota_desc'],
+    ));
+
+    $sql = 'SELECT q.user_id, u.username, q.quota_type
+		FROM ' . BB_QUOTA . ' q, ' . BB_USERS . ' u
+		WHERE q.quota_limit_id = ' . (int)$quota_id . '
+			AND q.user_id <> 0
+			AND q.user_id = u.user_id';
+
+    if (!($result = DB()->sql_query($sql))) {
+        bb_die('Could not get quota limits #3');
+    }
+
+    $rows = DB()->sql_fetchrowset($result);
+    $num_rows = DB()->num_rows($result);
+    DB()->sql_freeresult($result);
+
+    for ($i = 0; $i < $num_rows; $i++) {
+        if ($rows[$i]['quota_type'] == QUOTA_UPLOAD_LIMIT) {
+            $template->assign_block_vars('users_upload_row', array(
+                'USER_ID' => $rows[$i]['user_id'],
+                'USERNAME' => $rows[$i]['username'],
+            ));
+        } elseif ($rows[$i]['quota_type'] == QUOTA_PM_LIMIT) {
+            $template->assign_block_vars('users_pm_row', array(
+                'USER_ID' => $rows[$i]['user_id'],
+                'USERNAME' => $rows[$i]['username'],
+            ));
+        }
+    }
+
+    $sql = 'SELECT q.group_id, g.group_name, q.quota_type
+		FROM ' . BB_QUOTA . ' q, ' . BB_GROUPS . ' g
+		WHERE q.quota_limit_id = ' . (int)$quota_id . '
+			AND q.group_id <> 0
+			AND q.group_id = g.group_id';
+
+    if (!($result = DB()->sql_query($sql))) {
+        bb_die('Could not get quota limits #4');
+    }
+
+    $rows = DB()->sql_fetchrowset($result);
+    $num_rows = DB()->num_rows($result);
+    DB()->sql_freeresult($result);
+
+    for ($i = 0; $i < $num_rows; $i++) {
+        if ($rows[$i]['quota_type'] == QUOTA_UPLOAD_LIMIT) {
+            $template->assign_block_vars('groups_upload_row', array(
+                'GROUP_ID' => $rows[$i]['group_id'],
+                'GROUPNAME' => $rows[$i]['group_name'],
+            ));
+        } elseif ($rows[$i]['quota_type'] == QUOTA_PM_LIMIT) {
+            $template->assign_block_vars('groups_pm_row', array(
+                'GROUP_ID' => $rows[$i]['group_id'],
+                'GROUPNAME' => $rows[$i]['group_name'],
+            ));
+        }
+    }
+}
+
+if ($error) {
+    $template->assign_vars(array('ERROR_MESSAGE' => $error_msg));
+}
+
+print_page('admin_attachments.tpl', 'admin');

admin/admin_board.php

@@ -0,0 +1,154 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+if (!empty($setmodules)) {
+    $module['GENERAL']['CONFIGURATION'] = basename(__FILE__) . '?mode=config';
+    $module['MODS']['CONFIGURATION'] = basename(__FILE__) . '?mode=config_mods';
+    return;
+}
+
+require __DIR__ . '/pagestart.php';
+
+$mode = $_GET['mode'] ?? '';
+
+$return_links = [
+    'index' => '<br /><br />' . sprintf($lang['CLICK_RETURN_ADMIN_INDEX'], '<a href="index.php?pane=right">', '</a>'),
+    'config' => '<br /><br />' . sprintf($lang['CLICK_RETURN_CONFIG'], '<a href="admin_board.php?mode=config">', '</a>'),
+    'config_mods' => '<br /><br />' . sprintf($lang['CLICK_RETURN_CONFIG_MODS'], '<a href="admin_board.php?mode=config_mods">', '</a>')
+];
+
+/**
+ * Pull all config data
+ */
+$sql = 'SELECT * FROM ' . BB_CONFIG;
+if (!$result = DB()->sql_query($sql)) {
+    bb_die('Could not query config information in admin_board');
+} else {
+    while ($row = DB()->sql_fetchrow($result)) {
+        $config_name = $row['config_name'];
+        $config_value = $row['config_value'];
+        $default_config[$config_name] = $config_value;
+
+        $new[$config_name] = $_POST[$config_name] ?? $default_config[$config_name];
+
+        if (isset($_POST['submit']) && $row['config_value'] != $new[$config_name]) {
+            if ($config_name == 'seed_bonus_points' ||
+                $config_name == 'seed_bonus_release' ||
+                $config_name == 'bonus_upload' ||
+                $config_name == 'bonus_upload_price'
+            ) {
+                $new[$config_name] = serialize(str_replace(',', '.', $new[$config_name]));
+            }
+            bb_update_config([$config_name => $new[$config_name]]);
+        }
+    }
+
+    if (isset($_POST['submit'])) {
+        bb_die($lang['CONFIG_UPDATED'] . $return_links[$mode] . $return_links['index']);
+    }
+}
+
+switch ($mode) {
+    case 'config_mods':
+        $template->assign_vars([
+            'S_CONFIG_ACTION' => 'admin_board.php?mode=config_mods',
+            'CONFIG_MODS' => true,
+
+            'MAGNET_LINKS_ENABLED' => $new['magnet_links_enabled'],
+            'MAGNET_LINKS_FOR_GUESTS' => $new['magnet_links_for_guests'],
+            'GENDER' => $new['gender'],
+            'CALLSEED' => $new['callseed'],
+            'TOR_STATS' => $new['tor_stats'],
+            'SHOW_LATEST_NEWS' => $new['show_latest_news'],
+            'MAX_NEWS_TITLE' => $new['max_news_title'],
+            'LATEST_NEWS_COUNT' => $new['latest_news_count'],
+            'LATEST_NEWS_FORUM_ID' => $new['latest_news_forum_id'],
+            'SHOW_NETWORK_NEWS' => $new['show_network_news'],
+            'MAX_NET_TITLE' => $new['max_net_title'],
+            'NETWORK_NEWS_COUNT' => $new['network_news_count'],
+            'NETWORK_NEWS_FORUM_ID' => $new['network_news_forum_id'],
+            'WHOIS_INFO' => $new['whois_info'],
+            'SHOW_MOD_INDEX' => $new['show_mod_index'],
+            'SHOW_BOARD_START_INDEX' => $new['show_board_start_index'],
+            'BIRTHDAY_ENABLED' => $new['birthday_enabled'],
+            'BIRTHDAY_MAX_AGE' => $new['birthday_max_age'],
+            'BIRTHDAY_MIN_AGE' => $new['birthday_min_age'],
+            'BIRTHDAY_CHECK_DAY' => $new['birthday_check_day'],
+            'PREMOD' => $new['premod'],
+            'TOR_COMMENT' => $new['tor_comment'],
+            'SEED_BONUS_ENABLED' => $new['seed_bonus_enabled'],
+            'SEED_BONUS_TOR_SIZE' => $new['seed_bonus_tor_size'],
+            'SEED_BONUS_USER_REGDATE' => $new['seed_bonus_user_regdate']
+        ]);
+
+        if ($new['seed_bonus_points'] && $new['seed_bonus_release']) {
+            $seed_bonus = unserialize($new['seed_bonus_points']);
+            $seed_release = unserialize($new['seed_bonus_release']);
+
+            foreach ($seed_bonus as $i => $row) {
+                if (!$row || !$seed_release[$i]) {
+                    continue;
+                }
+
+                $template->assign_block_vars('seed_bonus', [
+                    'RELEASE' => $seed_release[$i],
+                    'POINTS' => $row
+                ]);
+            }
+        }
+
+        if ($new['bonus_upload'] && $new['bonus_upload_price']) {
+            $upload_row = unserialize($new['bonus_upload']);
+            $price_row = unserialize($new['bonus_upload_price']);
+
+            foreach ($upload_row as $i => $row) {
+                if (!$row || !$price_row[$i]) {
+                    continue;
+                }
+
+                $template->assign_block_vars('bonus_upload', [
+                    'UP' => $row,
+                    'PRICE' => $price_row[$i]
+                ]);
+            }
+        }
+        break;
+
+    default:
+        $template->assign_vars([
+            'S_CONFIG_ACTION' => 'admin_board.php?mode=config',
+            'CONFIG' => true,
+
+            'SITENAME' => htmlCHR($new['sitename']),
+            'CONFIG_SITE_DESCRIPTION' => htmlCHR($new['site_desc']),
+            'DISABLE_BOARD' => (bool)$new['board_disable'],
+            'ALLOW_AUTOLOGIN' => (bool)$new['allow_autologin'],
+            'AUTOLOGIN_TIME' => (int)$new['max_autologin_time'],
+            'MAX_POLL_OPTIONS' => $new['max_poll_options'],
+            'FLOOD_INTERVAL' => $new['flood_interval'],
+            'TOPICS_PER_PAGE' => $new['topics_per_page'],
+            'POSTS_PER_PAGE' => $new['posts_per_page'],
+            'HOT_TOPIC' => $new['hot_threshold'],
+            'DEFAULT_DATEFORMAT' => $new['default_dateformat'],
+            'LANG_SELECT' => \TorrentPier\Legacy\Common\Select::language($new['default_lang'], 'default_lang'),
+            'TIMEZONE_SELECT' => \TorrentPier\Legacy\Common\Select::timezone($new['board_timezone'], 'board_timezone'),
+            'MAX_LOGIN_ATTEMPTS' => $new['max_login_attempts'],
+            'LOGIN_RESET_TIME' => $new['login_reset_time'],
+            'PRUNE_ENABLE' => (bool)$new['prune_enable'],
+            'ALLOW_BBCODE' => (bool)$new['allow_bbcode'],
+            'ALLOW_SMILIES' => (bool)$new['allow_smilies'],
+            'ALLOW_SIG' => (bool)$new['allow_sig'],
+            'SIG_SIZE' => $new['max_sig_chars'],
+            'ALLOW_NAMECHANGE' => (bool)$new['allow_namechange'],
+            'SMILIES_PATH' => $new['smilies_path']
+        ]);
+        break;
+}
+
+print_page('admin_board.tpl', 'admin');

admin/admin_bt_forum_cfg.php

@@ -0,0 +1,154 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+if (!empty($setmodules)) {
+    $module[APP_NAME]['FORUM_CONFIG'] = basename(__FILE__);
+    return;
+}
+
+require __DIR__ . '/pagestart.php';
+
+$max_forum_name_len = 30;
+$max_forum_rows = 25;
+
+$submit = isset($_POST['submit']);
+$confirm = isset($_POST['confirm']);
+
+$cfg = [];
+
+/**
+ * All config names with default values
+ */
+$default_cfg_str = array(
+    'bt_announce_url' => 'https://torrentpier.duckdns.org/bt/',
+);
+
+$default_cfg_bool = array(
+    'bt_disable_dht' => 1,
+    'bt_show_peers' => 1,
+    'bt_add_auth_key' => 1,
+    'bt_show_dl_list' => 0,
+    'bt_dl_list_only_1st_page' => 1,
+    'bt_dl_list_only_count' => 1,
+    'bt_replace_ann_url' => 1,
+    'bt_show_ip_only_moder' => 1,
+    'bt_show_port_only_moder' => 1,
+    'bt_check_announce_url' => 0,
+    'bt_show_dl_list_buttons' => 1,
+    'bt_show_dl_but_will' => 1,
+    'bt_show_dl_but_down' => 0,
+    'bt_show_dl_but_compl' => 1,
+    'bt_show_dl_but_cancel' => 1,
+    'bt_show_dl_stat_on_index' => 1,
+    'bt_newtopic_auto_reg' => 1,
+    'bt_tor_browse_only_reg' => 1,
+    'bt_search_bool_mode' => 1,
+    'bt_allow_spmode_change' => 1,
+    'bt_del_addit_ann_urls' => 1,
+    'bt_set_dltype_on_tor_reg' => 1,
+    'bt_unset_dltype_on_tor_unreg' => 1,
+);
+
+$default_cfg_num = array(
+    'bt_show_peers_mode' => SHOW_PEERS_COUNT,
+);
+
+$default_cfg = array_merge($default_cfg_str, $default_cfg_bool, $default_cfg_num);
+
+$db_fields_bool = array(
+    'allow_reg_tracker' => 0,  // Allowed forums for registering torrents on tracker
+    'allow_porno_topic' => 0,  // Allowed forums for porno topics
+    'self_moderated' => 0,  // Users can move theirs topic to another forum
+);
+
+/**
+ * Get config
+ */
+$cfg = bb_get_config(BB_CONFIG, true, false);
+
+/**
+ * Submit new config
+ */
+if ($submit && $confirm) {
+    foreach ($db_fields_bool as $field_name => $field_def_val) {
+        \TorrentPier\Legacy\Admin\Torrent::update_table_bool(BB_FORUMS, 'forum_id', $field_name, $field_def_val);
+    }
+
+    \TorrentPier\Legacy\Admin\Torrent::update_config_table(BB_CONFIG, $default_cfg_str, $cfg, 'str');
+    \TorrentPier\Legacy\Admin\Torrent::update_config_table(BB_CONFIG, $default_cfg_bool, $cfg, 'bool');
+    \TorrentPier\Legacy\Admin\Torrent::update_config_table(BB_CONFIG, $default_cfg_num, $cfg, 'num');
+
+    $datastore->update('cat_forums');
+
+    bb_die($lang['CONFIG_UPD'] . '<br /><br />' . sprintf($lang['RETURN_CONFIG'], '<a href="admin_bt_forum_cfg.php">', '</a>') . '<br /><br />' . sprintf($lang['CLICK_RETURN_ADMIN_INDEX'], '<a href="index.php?pane=right">', '</a>'));
+}
+
+// Set template vars
+\TorrentPier\Legacy\Admin\Torrent::set_tpl_vars($default_cfg_str, $cfg);
+\TorrentPier\Legacy\Admin\Torrent::set_tpl_vars_lang($default_cfg_str);
+
+\TorrentPier\Legacy\Admin\Torrent::set_tpl_vars_bool($default_cfg_bool, $cfg);
+\TorrentPier\Legacy\Admin\Torrent::set_tpl_vars_lang($default_cfg_bool);
+
+\TorrentPier\Legacy\Admin\Torrent::set_tpl_vars($default_cfg_num, $cfg);
+\TorrentPier\Legacy\Admin\Torrent::set_tpl_vars_lang($default_cfg_num);
+
+\TorrentPier\Legacy\Admin\Torrent::set_tpl_vars_lang($db_fields_bool);
+
+// Get Forums list
+$sql = 'SELECT f.*
+	FROM ' . BB_CATEGORIES . ' c, ' . BB_FORUMS . ' f
+	WHERE f.cat_id = c.cat_id
+	ORDER BY c.cat_order, f.forum_order';
+
+if (!$result = DB()->sql_query($sql)) {
+    bb_die('Could not obtain forum names');
+}
+
+$rowset = DB()->sql_fetchrowset($result);
+$forum_rows = min($max_forum_rows, count($rowset));
+
+foreach ($db_fields_bool as $field_name => $field_def_val) {
+    $$field_name = '';
+}
+
+foreach ($rowset as $rid => $forum) {
+    foreach ($db_fields_bool as $field_name => $field_def_val) {
+        $forum_name = $forum['forum_name'];
+        $selected = $forum[$field_name] ? ' selected' : '';
+
+        $forum_name = str_short($forum_name, $max_forum_name_len);
+
+        $$field_name .= '<option value="' . $forum['forum_id'] . '" ' . $selected . '>&nbsp;' . ($forum['forum_parent'] ? HTML_SF_SPACER : '') . htmlCHR($forum_name) . "</option>\n";
+    }
+}
+
+foreach ($db_fields_bool as $field_name => $field_def_val) {
+    $$field_name = '<select name="' . $field_name . "[]\" multiple size=\"$forum_rows\">" . $$field_name . '</select>';
+    $template->assign_vars(array('S_' . strtoupper($field_name) => $$field_name));
+}
+
+$template->assign_vars(array(
+    'L_BT_SHOW_PEERS_MODE_COUNT' => ($cfg['bt_show_peers_mode'] == SHOW_PEERS_COUNT) ? '<u>' . $lang['BT_SHOW_PEERS_MODE_COUNT'] . '</u>' : $lang['BT_SHOW_PEERS_MODE_COUNT'],
+    'L_BT_SHOW_PEERS_MODE_NAMES' => ($cfg['bt_show_peers_mode'] == SHOW_PEERS_NAMES) ? '<u>' . $lang['BT_SHOW_PEERS_MODE_NAMES'] . '</u>' : $lang['BT_SHOW_PEERS_MODE_NAMES'],
+    'L_BT_SHOW_PEERS_MODE_FULL' => ($cfg['bt_show_peers_mode'] == SHOW_PEERS_FULL) ? '<u>' . $lang['BT_SHOW_PEERS_MODE_FULL'] . '</u>' : $lang['BT_SHOW_PEERS_MODE_FULL'],
+
+    'BT_SHOW_PEERS_MODE_COUNT_VAL' => SHOW_PEERS_COUNT,
+    'BT_SHOW_PEERS_MODE_NAMES_VAL' => SHOW_PEERS_NAMES,
+    'BT_SHOW_PEERS_MODE_FULL_VAL' => SHOW_PEERS_FULL,
+
+    'BT_SHOW_PEERS_MODE_COUNT_SEL' => ($cfg['bt_show_peers_mode'] == SHOW_PEERS_COUNT) ? HTML_CHECKED : '',
+    'BT_SHOW_PEERS_MODE_NAMES_SEL' => ($cfg['bt_show_peers_mode'] == SHOW_PEERS_NAMES) ? HTML_CHECKED : '',
+    'BT_SHOW_PEERS_MODE_FULL_SEL' => ($cfg['bt_show_peers_mode'] == SHOW_PEERS_FULL) ? HTML_CHECKED : '',
+
+    'S_HIDDEN_FIELDS' => '',
+    'S_CONFIG_ACTION' => 'admin_bt_forum_cfg.php',
+));
+
+print_page('admin_bt_forum_cfg.tpl', 'admin');

admin/admin_cron.php

@@ -0,0 +1,216 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+if (!empty($setmodules)) {
+    if (IS_SUPER_ADMIN) {
+        $module[APP_NAME]['CRON'] = basename(__FILE__) . '?mode=list';
+    }
+    return;
+}
+
+$mode = $_GET['mode'] ?? '';
+$job_id = isset($_GET['id']) ? (int)$_GET['id'] : '';
+$submit = isset($_POST['submit']);
+$jobs = isset($_POST['select']) ? implode(',', $_POST['select']) : '';
+$cron_action = $_POST['cron_action'] ?? '';
+
+if ($mode == 'run' && !$job_id) {
+    define('BB_ROOT', './../');
+    require BB_ROOT . 'common.php';
+    $user->session_start();
+    redirect('admin/' . basename(__FILE__) . '?mode=list');
+} else {
+    require __DIR__ . '/pagestart.php';
+}
+
+// Check for demo mode
+if (IN_DEMO_MODE && ($submit || !in_array($mode, ['add', 'list']))) {
+    bb_die($lang['CANT_EDIT_IN_DEMO_MODE']);
+}
+
+if (!IS_SUPER_ADMIN) {
+    bb_die($lang['ONLY_FOR_SUPER_ADMIN']);
+}
+
+$sql = DB()->fetch_rowset('SELECT * FROM ' . BB_CONFIG . " WHERE config_name = 'cron_check_interval'");
+
+foreach ($sql as $row) {
+    $config_name = $row['config_name'];
+    $config_value = $row['config_value'];
+    $default_config[$config_name] = $config_value;
+
+    $new[$config_name] = $_POST[$config_name] ?? $default_config[$config_name];
+
+    if (isset($_POST['submit']) && $row['config_value'] != $new[$config_name]) {
+        bb_update_config(array($config_name => $new[$config_name]));
+    }
+}
+
+$template->assign_vars(array(
+    'CRON_ENABLED' => TorrentPier\Helpers\CronHelper::isEnabled(),
+    'CRON_CHECK_INTERVAL' => $new['cron_check_interval'],
+));
+
+switch ($mode) {
+    case 'list':
+        $sql = DB()->fetch_rowset('SELECT * FROM ' . BB_CRON . ' ORDER BY cron_id');
+
+        foreach ($sql as $i => $row) {
+            $template->assign_block_vars('list', array(
+                'ROW_CLASS' => !($i % 2) ? 'row2' : 'row1',
+                'JOB_ID' => $i + 1,
+                'CRON_ID' => $row['cron_id'],
+                'CRON_ACTIVE' => $row['cron_active'] ? '<img src="../styles/images/icon_run.gif" alt="' . $lang['YES'] . '" />' : '<img src="../styles/images/icon_delete.gif" alt="' . $lang['NO'] . '" />',
+                'CRON_TITLE' => $row['cron_title'],
+                'CRON_SCRIPT' => $row['cron_script'],
+                'SCHEDULE' => $row['schedule'] ? $lang['SCHEDULE'][$row['schedule']] : '<b class="leech">' . $lang['NOSELECT'] . '</b>',
+                'RUN_DAY' => $row['run_day'],
+                'LAST_RUN' => $row['last_run'],
+                'NEXT_RUN' => $row['next_run'],
+                'RUN_COUNT' => $row['run_counter'],
+            ));
+        }
+
+        $template->assign_vars(array(
+            'TPL_CRON_LIST' => true,
+            'S_CRON_ACTION' => 'admin_cron.php',
+            'S_MODE' => 'list',
+        ));
+
+        //detect cron status
+        if (is_file(CRON_RUNNING)) {
+            $template->assign_vars(array(
+                'CRON_RUNNING' => true,
+            ));
+        }
+        break;
+
+    case 'repair':
+        if (is_file(CRON_RUNNING)) {
+            rename(CRON_RUNNING, CRON_ALLOWED);
+        }
+        redirect('admin/' . basename(__FILE__) . '?mode=list');
+        break;
+
+    case 'run':
+        \TorrentPier\Legacy\Admin\Cron::run_jobs($job_id);
+        redirect('admin/' . basename(__FILE__) . '?mode=list');
+        break;
+
+    case 'edit':
+        $sql = DB()->fetch_rowset('SELECT * FROM ' . BB_CRON . " WHERE cron_id = $job_id");
+
+        foreach ($sql as $row) {
+            $template->assign_vars(array(
+                'CRON_ID' => $row['cron_id'],
+                'CRON_ACTIVE' => $row['cron_active'],
+                'CRON_TITLE' => $row['cron_title'],
+                'CRON_SCRIPT' => $row['cron_script'],
+                'SCHEDULE' => $row['schedule'] ? $lang['SCHEDULE'][$row['schedule']] : '',
+                'RUN_DAY' => $row['run_day'],
+                'RUN_TIME' => $row['run_time'],
+                'RUN_ORDER' => $row['run_order'],
+                'LAST_RUN' => $row['last_run'],
+                'NEXT_RUN' => $row['next_run'],
+                'RUN_INTERVAL' => $row['run_interval'],
+                'LOG_ENABLED' => $row['log_enabled'],
+                'LOG_FILE' => $row['log_file'],
+                'LOG_SQL_QUERIES' => $row['log_sql_queries'],
+                'DISABLE_BOARD' => $row['disable_board'],
+                'RUN_COUNTER' => $row['run_counter'],
+            ));
+        }
+
+        $run_day = array($lang['DELTA_TIME']['INTERVALS']['mday'][0] => 0);
+        for ($i = 1; $i <= 28; $i++) {
+            $run_day[$i] = $i;
+        }
+
+        $schedule = array($lang['SCHEDULE']['select'] => 0);
+        foreach ($lang['SCHEDULE'] as $type => $key) {
+            $schedule[$key] = $type;
+        }
+
+        $template->assign_vars(array(
+            'TPL_CRON_EDIT' => true,
+            'S_CRON_ACTION' => 'admin_cron.php',
+            'S_MODE' => 'edit',
+            'SCHEDULE' => build_select('schedule', $schedule, $row['schedule']),
+            'RUN_DAY' => build_select('run_day', $run_day, $row['run_day']),
+            'L_CRON_EDIT_HEAD' => $lang['CRON_EDIT_HEAD_EDIT'],
+        ));
+        break;
+
+    case 'add':
+        $run_day = array($lang['DELTA_TIME']['INTERVALS']['mday'][0] => 0);
+        for ($i = 1; $i <= 28; $i++) {
+            $run_day[$i] = $i;
+        }
+
+        $schedule = [];
+        foreach ($lang['SCHEDULE'] as $type => $key) {
+            $schedule[$key] = $type;
+        }
+
+        $template->assign_vars(array(
+            'TPL_CRON_EDIT' => true,
+            'S_CRON_ACTION' => 'admin_cron.php',
+            'S_MODE' => 'add',
+            'SCHEDULE' => build_select('schedule', $schedule, 'select', null, null),
+            'RUN_DAY' => build_select('run_day', $run_day, 0, null, null),
+            'CRON_ID' => '',
+            'CRON_ACTIVE' => 1,
+            'CRON_TITLE' => '',
+            'CRON_SCRIPT' => '',
+            'RUN_TIME' => '',
+            'RUN_ORDER' => 255,
+            'LAST_RUN' => '1900-01-01 00:00:00',
+            'NEXT_RUN' => '1900-01-01 00:00:00',
+            'RUN_INTERVAL' => '',
+            'LOG_ENABLED' => 0,
+            'LOG_FILE' => '',
+            'LOG_SQL_QUERIES' => 0,
+            'DISABLE_BOARD' => 0,
+            'RUN_COUNTER' => 0,
+        ));
+        break;
+
+    case 'delete':
+        \TorrentPier\Legacy\Admin\Cron::delete_jobs($job_id);
+        bb_die($lang['JOB_REMOVED'] . '<br /><br />' . sprintf($lang['CLICK_RETURN_JOBS'], '<a href="admin_cron.php?mode=list">', '</a>') . '<br /><br />' . sprintf($lang['CLICK_RETURN_ADMIN_INDEX'], '<a href="index.php?pane=right">', '</a>'));
+        break;
+}
+
+if ($submit) {
+    $mode2 = $_POST['mode'] ?? '';
+    if ($mode2 == 'list') {
+        if ($cron_action == 'run' && $jobs) {
+            \TorrentPier\Legacy\Admin\Cron::run_jobs($jobs);
+        } elseif ($cron_action == 'delete' && $jobs) {
+            \TorrentPier\Legacy\Admin\Cron::delete_jobs($jobs);
+        } elseif (($cron_action == 'disable' || $cron_action == 'enable') && $jobs) {
+            \TorrentPier\Legacy\Admin\Cron::toggle_active($jobs, $cron_action);
+        }
+        redirect('admin/' . basename(__FILE__) . '?mode=list');
+    } elseif (\TorrentPier\Legacy\Admin\Cron::validate_cron_post($_POST) == 1) {
+        if ($mode2 == 'edit') {
+            \TorrentPier\Legacy\Admin\Cron::update_cron_job($_POST);
+        } elseif ($mode2 == 'add') {
+            \TorrentPier\Legacy\Admin\Cron::insert_cron_job($_POST);
+        } else {
+            bb_die("Invalid mode: $mode2");
+        }
+
+        redirect('admin/' . basename(__FILE__) . '?mode=list');
+    } else {
+        bb_die(\TorrentPier\Legacy\Admin\Cron::validate_cron_post($_POST));
+    }
+}
+
+print_page('admin_cron.tpl', 'admin');

admin/admin_disallow.php

@@ -0,0 +1,86 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+if (!empty($setmodules)) {
+    $module['USERS']['DISALLOW'] = basename(__FILE__);
+    return;
+}
+
+require __DIR__ . '/pagestart.php';
+
+$message = '';
+
+if (isset($_POST['add_name'])) {
+    $disallowed_user = isset($_POST['disallowed_user']) ? trim($_POST['disallowed_user']) : trim($_GET['disallowed_user']);
+
+    if ($disallowed_user == '') {
+        bb_die($lang['FIELDS_EMPTY']);
+    }
+    if (\TorrentPier\Validate::username($disallowed_user)) {
+        $message = $lang['DISALLOWED_ALREADY'];
+    } else {
+        $sql = 'INSERT INTO ' . BB_DISALLOW . " (disallow_username) VALUES('" . DB()->escape($disallowed_user) . "')";
+        $result = DB()->sql_query($sql);
+        if (!$result) {
+            bb_die('Could not add disallowed user');
+        }
+        $message = $lang['DISALLOW_SUCCESSFUL'];
+    }
+
+    $message .= '<br /><br />' . sprintf($lang['CLICK_RETURN_DISALLOWADMIN'], '<a href="admin_disallow.php">', '</a>') . '<br /><br />' . sprintf($lang['CLICK_RETURN_ADMIN_INDEX'], '<a href="index.php?pane=right">', '</a>');
+
+    bb_die($message);
+} elseif (isset($_POST['delete_name'])) {
+    $disallowed_id = isset($_POST['disallowed_id']) ? (int)$_POST['disallowed_id'] : (int)$_GET['disallowed_id'];
+
+    if (!empty($disallowed_id)) {
+        $sql = 'DELETE FROM ' . BB_DISALLOW . " WHERE disallow_id = $disallowed_id";
+        $result = DB()->sql_query($sql);
+        if (!$result) {
+            bb_die('Could not removed disallowed user');
+        }
+
+        $message .= $lang['DISALLOWED_DELETED'] . '<br /><br />' . sprintf($lang['CLICK_RETURN_DISALLOWADMIN'], '<a href="admin_disallow.php">', '</a>') . '<br /><br />' . sprintf($lang['CLICK_RETURN_ADMIN_INDEX'], '<a href="index.php?pane=right">', '</a>');
+
+        bb_die($message);
+    }
+}
+
+/**
+ * Grab the current list of disallowed usernames
+ */
+$sql = 'SELECT * FROM ' . BB_DISALLOW;
+$result = DB()->sql_query($sql);
+if (!$result) {
+    bb_die('Could not get disallowed users');
+}
+
+$disallowed = DB()->sql_fetchrowset($result);
+
+/**
+ * Now generate the info for the template, which will be put out no matter what mode we are in
+ */
+$disallow_select = '<select name="disallowed_id">';
+
+if (count($disallowed) <= 0) {
+    $disallow_select .= '<option value="">' . $lang['NO_DISALLOWED'] . '</option>';
+} else {
+    for ($i = 0, $iMax = count($disallowed); $i < $iMax; $i++) {
+        $disallow_select .= '<option value="' . $disallowed[$i]['disallow_id'] . '">' . $disallowed[$i]['disallow_username'] . '</option>';
+    }
+}
+
+$disallow_select .= '</select>';
+
+$template->assign_vars([
+    'S_DISALLOW_SELECT' => $disallow_select,
+    'S_FORM_ACTION' => 'admin_disallow.php',
+]);
+
+print_page('admin_disallow.tpl', 'admin');

admin/admin_extensions.php

@@ -0,0 +1,677 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+if (!empty($setmodules)) {
+    $filename = basename(__FILE__);
+    $module['ATTACHMENTS']['EXTENSION_CONTROL'] = $filename . '?mode=extensions';
+    $module['ATTACHMENTS']['EXTENSION_GROUP_MANAGE'] = $filename . '?mode=groups';
+    return;
+}
+
+require __DIR__ . '/pagestart.php';
+
+function update_attach_extensions()
+{
+    $GLOBALS['datastore']->update('attach_extensions');
+}
+
+register_shutdown_function('update_attach_extensions');
+
+if (($attach_config['upload_dir'][0] == '/') || (($attach_config['upload_dir'][0] != '/') && ($attach_config['upload_dir'][1] == ':'))) {
+    $upload_dir = $attach_config['upload_dir'];
+} else {
+    $upload_dir = BB_ROOT . $attach_config['upload_dir'];
+}
+
+include ATTACH_DIR . '/includes/functions_selects.php';
+
+// Init Vars
+$types_download = array(INLINE_LINK, PHYSICAL_LINK);
+$modes_download = array('inline', 'physical');
+
+$types_category = array(IMAGE_CAT);
+$modes_category = array($lang['CATEGORY_IMAGES']);
+
+$size = get_var('size', '');
+$mode = get_var('mode', '');
+$e_mode = get_var('e_mode', '');
+
+$error = false;
+$add_forum = isset($_POST['add_forum']);
+$delete_forum = isset($_POST['del_forum']);
+$submit = isset($_POST['submit']);
+
+// Check for demo mode
+if (IN_DEMO_MODE && ($submit || $add_forum || $delete_forum)) {
+    bb_die($lang['CANT_EDIT_IN_DEMO_MODE']);
+}
+
+// Get Attachment Config
+$attach_config = [];
+
+$sql = 'SELECT * FROM ' . BB_ATTACH_CONFIG;
+
+if (!($result = DB()->sql_query($sql))) {
+    bb_die('Could not query attachment information');
+}
+
+while ($row = DB()->sql_fetchrow($result)) {
+    $attach_config[$row['config_name']] = trim($row['config_value']);
+}
+DB()->sql_freeresult($result);
+
+// Extension Management
+if ($submit && $mode == 'extensions') {
+    // Change Extensions ?
+    $extension_change_list = get_var('extension_change_list', array(0));
+    $extension_explain_list = get_var('extension_explain_list', array(''));
+    $group_select_list = get_var('group_select', array(0));
+
+    // Generate correct Change List
+    $extensions = [];
+
+    for ($i = 0, $iMax = count($extension_change_list); $i < $iMax; $i++) {
+        $extensions['_' . $extension_change_list[$i]]['comment'] = $extension_explain_list[$i];
+        $extensions['_' . $extension_change_list[$i]]['group_id'] = (int)$group_select_list[$i];
+    }
+
+    $sql = 'SELECT * FROM ' . BB_EXTENSIONS . ' ORDER BY ext_id';
+    if (!($result = DB()->sql_query($sql))) {
+        bb_die('Could not get extension informations #1');
+    }
+
+    $num_rows = DB()->num_rows($result);
+    $extension_row = DB()->sql_fetchrowset($result);
+    DB()->sql_freeresult($result);
+
+    if ($num_rows > 0) {
+        for ($i = 0, $iMax = count($extension_row); $i < $iMax; $i++) {
+            if ($extension_row[$i]['comment'] != $extensions['_' . $extension_row[$i]['ext_id']]['comment'] || (int)$extension_row[$i]['group_id'] != (int)$extensions['_' . $extension_row[$i]['ext_id']]['group_id']) {
+                $sql_ary = array(
+                    'comment' => (string)$extensions['_' . $extension_row[$i]['ext_id']]['comment'],
+                    'group_id' => (int)$extensions['_' . $extension_row[$i]['ext_id']]['group_id']
+                );
+
+                $sql = 'UPDATE ' . BB_EXTENSIONS . ' SET ' . DB()->build_array('UPDATE', $sql_ary) . '
+					WHERE ext_id = ' . (int)$extension_row[$i]['ext_id'];
+
+                if (!DB()->sql_query($sql)) {
+                    bb_die('Could not update extension informations');
+                }
+            }
+        }
+    }
+
+    // Delete Extension?
+    $extension_id_list = get_var('extension_id_list', array(0));
+
+    $extension_id_sql = implode(', ', $extension_id_list);
+
+    if ($extension_id_sql != '') {
+        $sql = 'DELETE FROM ' . BB_EXTENSIONS . ' WHERE ext_id IN (' . $extension_id_sql . ')';
+
+        if (!$result = DB()->sql_query($sql)) {
+            bb_die('Could not delete extensions');
+        }
+    }
+
+    // Add Extension ?
+    $extension = get_var('add_extension', '');
+    $extension_explain = get_var('add_extension_explain', '');
+    $extension_group = get_var('add_group_select', 0);
+    $add = isset($_POST['add_extension_check']);
+
+    if ($extension != '' && $add) {
+        $template->assign_vars(array(
+            'ADD_EXTENSION' => $extension,
+            'ADD_EXTENSION_EXPLAIN' => $extension_explain,
+        ));
+
+        if (!$error) {
+            // check extension
+            $sql = 'SELECT extension FROM ' . BB_EXTENSIONS;
+
+            if (!($result = DB()->sql_query($sql))) {
+                bb_die('Could not query extensions');
+            }
+
+            $row = DB()->sql_fetchrowset($result);
+            $num_rows = DB()->num_rows($result);
+            DB()->sql_freeresult($result);
+
+            if ($num_rows > 0) {
+                for ($i = 0; $i < $num_rows; $i++) {
+                    if (strtolower(trim($row[$i]['extension'])) == strtolower(trim($extension))) {
+                        $error = true;
+                        if (isset($error_msg)) {
+                            $error_msg .= '<br />';
+                        }
+                        $error_msg .= sprintf($lang['EXTENSION_EXIST'], strtolower(trim($extension)));
+                    }
+                }
+            }
+
+            if (!$error) {
+                $sql_ary = array(
+                    'group_id' => (int)$extension_group,
+                    'extension' => (string)strtolower($extension),
+                    'comment' => (string)$extension_explain
+                );
+
+                $sql = 'INSERT INTO ' . BB_EXTENSIONS . ' ' . DB()->build_array('INSERT', $sql_ary);
+
+                if (!DB()->sql_query($sql)) {
+                    bb_die('Could not add extension');
+                }
+            }
+        }
+    }
+
+    if (!$error) {
+        bb_die($lang['ATTACH_CONFIG_UPDATED'] . '<br /><br />' . sprintf($lang['CLICK_RETURN_ATTACH_CONFIG'], '<a href="admin_extensions.php?mode=extensions">', '</a>') . '<br /><br />' . sprintf($lang['CLICK_RETURN_ADMIN_INDEX'], '<a href="index.php?pane=right">', '</a>'));
+    }
+}
+
+if ($mode == 'extensions') {
+    // Extensions
+    $template->assign_vars(array(
+        'TPL_ATTACH_EXTENSIONS' => true,
+        'S_CANCEL_ACTION' => 'admin_extensions.php?mode=extensions',
+        'S_ATTACH_ACTION' => 'admin_extensions.php?mode=extensions',
+    ));
+
+    if ($submit) {
+        $template->assign_vars(array(
+                'S_ADD_GROUP_SELECT' => group_select('add_group_select', $extension_group))
+        );
+    } else {
+        $template->assign_vars(array(
+                'S_ADD_GROUP_SELECT' => group_select('add_group_select'))
+        );
+    }
+
+    $sql = 'SELECT * FROM ' . BB_EXTENSIONS . ' ORDER BY group_id';
+
+    if (!($result = DB()->sql_query($sql))) {
+        bb_die('Could not get extension informations #2');
+    }
+
+    $extension_row = DB()->sql_fetchrowset($result);
+    $num_extension_row = DB()->num_rows($result);
+    DB()->sql_freeresult($result);
+
+    if ($num_extension_row > 0) {
+        $extension_row = sort_multi_array($extension_row, 'group_id');
+
+        for ($i = 0; $i < $num_extension_row; $i++) {
+            if ($submit) {
+                $template->assign_block_vars('extension_row', array(
+                        'EXT_ID' => $extension_row[$i]['ext_id'],
+                        'EXTENSION' => $extension_row[$i]['extension'],
+                        'EXTENSION_EXPLAIN' => $extension_explain_list[$i],
+                        'S_GROUP_SELECT' => group_select('group_select[]', $group_select_list[$i]))
+                );
+            } else {
+                $template->assign_block_vars('extension_row', array(
+                        'EXT_ID' => $extension_row[$i]['ext_id'],
+                        'EXTENSION' => $extension_row[$i]['extension'],
+                        'EXTENSION_EXPLAIN' => $extension_row[$i]['comment'],
+                        'S_GROUP_SELECT' => group_select('group_select[]', $extension_row[$i]['group_id']))
+                );
+            }
+        }
+    }
+}
+
+// Extension Groups
+if ($submit && $mode == 'groups') {
+    // Change Extension Groups ?
+    $group_change_list = get_var('group_change_list', array(0));
+    $extension_group_list = get_var('extension_group_list', array(''));
+    $group_allowed_list = get_var('allowed_list', array(0));
+    $download_mode_list = get_var('download_mode_list', array(0));
+    $category_list = get_var('category_list', array(0));
+    $upload_icon_list = get_var('upload_icon_list', array(''));
+    $filesize_list = get_var('max_filesize_list', array(0));
+    $size_select_list = get_var('size_select_list', array(''));
+
+    $allowed_list = [];
+
+    foreach ($group_allowed_list as $iValue) {
+        for ($j = 0, $jMax = count($group_change_list); $j < $jMax; $j++) {
+            if ($iValue == $group_change_list[$j]) {
+                $allowed_list[$j] = 1;
+            }
+        }
+    }
+
+    for ($i = 0, $iMax = count($group_change_list); $i < $iMax; $i++) {
+        $allowed = isset($allowed_list[$i]) ? 1 : 0;
+
+        $filesize_list[$i] = ($size_select_list[$i] == 'kb') ? round($filesize_list[$i] * 1024) : (($size_select_list[$i] == 'mb') ? round($filesize_list[$i] * 1048576) : $filesize_list[$i]);
+
+        $sql_ary = array(
+            'group_name' => (string)$extension_group_list[$i],
+            'cat_id' => (int)$category_list[$i],
+            'allow_group' => (int)$allowed,
+            'download_mode' => (int)$download_mode_list[$i],
+            'upload_icon' => (string)$upload_icon_list[$i],
+            'max_filesize' => (int)$filesize_list[$i]
+        );
+
+        $sql = 'UPDATE ' . BB_EXTENSION_GROUPS . ' SET ' . DB()->build_array('UPDATE', $sql_ary) . '
+			WHERE group_id = ' . (int)$group_change_list[$i];
+
+        if (!DB()->sql_query($sql)) {
+            bb_die('Could not update extension groups informations');
+        }
+    }
+
+    // Delete Extension Groups
+    $group_id_list = get_var('group_id_list', array(0));
+
+    $group_id_sql = implode(', ', $group_id_list);
+
+    if ($group_id_sql != '') {
+        $sql = 'DELETE
+		FROM ' . BB_EXTENSION_GROUPS . '
+		WHERE group_id IN (' . $group_id_sql . ')';
+
+        if (!($result = DB()->sql_query($sql))) {
+            bb_die('Could not delete extension groups');
+        }
+
+        // Set corresponding Extensions to a pending Group
+        $sql = 'UPDATE ' . BB_EXTENSIONS . '
+			SET group_id = 0
+			WHERE group_id IN (' . $group_id_sql . ')';
+
+        if (!$result = DB()->sql_query($sql)) {
+            bb_die('Could not assign extensions to pending group');
+        }
+    }
+
+    // Add Extensions?
+    $extension_group = get_var('add_extension_group', '');
+    $download_mode = get_var('add_download_mode', 0);
+    $cat_id = get_var('add_category', 0);
+    $upload_icon = get_var('add_upload_icon', '');
+    $filesize = get_var('add_max_filesize', 0);
+    $size_select = get_var('add_size_select', '');
+
+    $is_allowed = isset($_POST['add_allowed']) ? 1 : 0;
+    $add = isset($_POST['add_extension_group_check']);
+
+    if ($extension_group != '' && $add) {
+        // check Extension Group
+        $sql = 'SELECT group_name FROM ' . BB_EXTENSION_GROUPS;
+
+        if (!($result = DB()->sql_query($sql))) {
+            bb_die('Could not query extension groups table');
+        }
+
+        $row = DB()->sql_fetchrowset($result);
+        $num_rows = DB()->num_rows($result);
+        DB()->sql_freeresult($result);
+
+        if ($num_rows > 0) {
+            for ($i = 0; $i < $num_rows; $i++) {
+                if ($row[$i]['group_name'] == $extension_group) {
+                    $error = true;
+                    if (isset($error_msg)) {
+                        $error_msg .= '<br />';
+                    }
+                    $error_msg .= sprintf($lang['EXTENSION_GROUP_EXIST'], $extension_group);
+                }
+            }
+        }
+
+        if (!$error) {
+            $filesize = ($size_select == 'kb') ? round($filesize * 1024) : (($size_select == 'mb') ? round($filesize * 1048576) : $filesize);
+
+            $sql_ary = array(
+                'group_name' => (string)$extension_group,
+                'cat_id' => (int)$cat_id,
+                'allow_group' => (int)$is_allowed,
+                'download_mode' => (int)$download_mode,
+                'upload_icon' => (string)$upload_icon,
+                'max_filesize' => (int)$filesize,
+                'forum_permissions' => ''
+            );
+
+            $sql = 'INSERT INTO ' . BB_EXTENSION_GROUPS . ' ' . DB()->build_array('INSERT', $sql_ary);
+
+            if (!DB()->sql_query($sql)) {
+                bb_die('Could not add extension group');
+            }
+        }
+    }
+
+    if (!$error) {
+        bb_die($lang['ATTACH_CONFIG_UPDATED'] . '<br /><br />' . sprintf($lang['CLICK_RETURN_ATTACH_CONFIG'], '<a href="admin_extensions.php?mode=groups">', '</a>') . '<br /><br />' . sprintf($lang['CLICK_RETURN_ADMIN_INDEX'], '<a href="index.php?pane=right">', '</a>'));
+    }
+}
+
+if ($mode == 'groups') {
+    // Extension Groups
+    if (!$size && !$submit) {
+        $max_add_filesize = $attach_config['max_filesize'];
+
+        $size = ($max_add_filesize >= 1048576) ? 'mb' : (($max_add_filesize >= 1024) ? 'kb' : 'b');
+    }
+
+    if ($max_add_filesize >= 1048576) {
+        $max_add_filesize = round($max_add_filesize / 1048576 * 100) / 100;
+    } elseif ($max_add_filesize >= 1024) {
+        $max_add_filesize = round($max_add_filesize / 1024 * 100) / 100;
+    }
+
+    $viewgroup = get_var(POST_GROUPS_URL, 0);
+
+    $template->assign_vars(array(
+        'TPL_ATTACH_EXTENSION_GROUPS' => true,
+        'ADD_GROUP_NAME' => $extension_group ?? '',
+        'MAX_FILESIZE' => $max_add_filesize,
+        'S_FILESIZE' => size_select('add_size_select', $size),
+        'S_ADD_DOWNLOAD_MODE' => download_select('add_download_mode'),
+        'S_SELECT_CAT' => category_select('add_category'),
+        'S_CANCEL_ACTION' => 'admin_extensions.php?mode=groups',
+        'S_ATTACH_ACTION' => 'admin_extensions.php?mode=groups',
+    ));
+
+    $sql = 'SELECT * FROM ' . BB_EXTENSION_GROUPS;
+
+    if (!($result = DB()->sql_query($sql))) {
+        bb_die('Could not get extension group informations');
+    }
+
+    $extension_group = DB()->sql_fetchrowset($result);
+    $num_extension_group = DB()->num_rows($result);
+    DB()->sql_freeresult($result);
+
+    for ($i = 0; $i < $num_extension_group; $i++) {
+        // Format the filesize
+        if (!$extension_group[$i]['max_filesize']) {
+            $extension_group[$i]['max_filesize'] = $attach_config['max_filesize'];
+        }
+
+        $size_format = ($extension_group[$i]['max_filesize'] >= 1048576) ? 'mb' : (($extension_group[$i]['max_filesize'] >= 1024) ? 'kb' : 'b');
+
+        if ($extension_group[$i]['max_filesize'] >= 1048576) {
+            $extension_group[$i]['max_filesize'] = round($extension_group[$i]['max_filesize'] / 1048576 * 100) / 100;
+        } elseif ($extension_group[$i]['max_filesize'] >= 1024) {
+            $extension_group[$i]['max_filesize'] = round($extension_group[$i]['max_filesize'] / 1024 * 100) / 100;
+        }
+
+        $s_allowed = ($extension_group[$i]['allow_group'] == 1) ? 'checked' : '';
+
+        $template->assign_block_vars('grouprow', array(
+            'GROUP_ID' => $extension_group[$i]['group_id'],
+            'EXTENSION_GROUP' => $extension_group[$i]['group_name'],
+            'UPLOAD_ICON' => $extension_group[$i]['upload_icon'],
+
+            'S_ALLOW_SELECTED' => $s_allowed,
+            'S_SELECT_CAT' => category_select('category_list[]', $extension_group[$i]['group_id']),
+            'S_DOWNLOAD_MODE' => download_select('download_mode_list[]', $extension_group[$i]['group_id']),
+            'S_FILESIZE' => size_select('size_select_list[]', $size_format),
+
+            'MAX_FILESIZE' => $extension_group[$i]['max_filesize'],
+            'CAT_BOX' => ($viewgroup == $extension_group[$i]['group_id']) ? '-' : '+',
+            'U_VIEWGROUP' => ($viewgroup == $extension_group[$i]['group_id']) ? 'admin_extensions.php?mode=groups' : 'admin_extensions.php?mode=groups&' . POST_GROUPS_URL . '=' . $extension_group[$i]['group_id'],
+            'U_FORUM_PERMISSIONS' => "admin_extensions.php?mode=$mode&amp;e_mode=perm&amp;e_group=" . $extension_group[$i]['group_id'],
+        ));
+
+        if ($viewgroup && $viewgroup == $extension_group[$i]['group_id']) {
+            $sql = 'SELECT comment, extension FROM ' . BB_EXTENSIONS . ' WHERE group_id = ' . (int)$viewgroup;
+
+            if (!$result = DB()->sql_query($sql)) {
+                bb_die('Could not get extension informations #3');
+            }
+
+            $extension = DB()->sql_fetchrowset($result);
+            $num_extension = DB()->num_rows($result);
+            DB()->sql_freeresult($result);
+
+            for ($j = 0; $j < $num_extension; $j++) {
+                $template->assign_block_vars('grouprow.extensionrow', array(
+                        'EXPLANATION' => $extension[$j]['comment'],
+                        'EXTENSION' => $extension[$j]['extension'])
+                );
+            }
+        }
+    }
+}
+
+if ($e_mode == 'perm') {
+    $group = get_var('e_group', 0);
+
+    if (isset($_POST['close_perm'])) {
+        $e_mode = '';
+    }
+}
+
+// Add Forums
+if ($add_forum && $e_mode == 'perm' && $group) {
+    $add_forums_list = get_var('entries', array(0));
+    $add_all_forums = false;
+
+    foreach ($add_forums_list as $iValue) {
+        if ($iValue == 0) {
+            $add_all_forums = true;
+        }
+    }
+
+    // If we add ALL FORUMS, we are able to overwrite the Permissions
+    if ($add_all_forums) {
+        $sql = 'UPDATE ' . BB_EXTENSION_GROUPS . " SET forum_permissions = '' WHERE group_id = " . (int)$group;
+        if (!($result = DB()->sql_query($sql))) {
+            bb_die('Could not update permissions #1');
+        }
+    }
+
+    // Else we have to add Permissions
+    if (!$add_all_forums) {
+        $sql = 'SELECT forum_permissions
+			FROM ' . BB_EXTENSION_GROUPS . '
+			WHERE group_id = ' . (int)$group . '
+			LIMIT 1';
+
+        if (!($result = DB()->sql_query($sql))) {
+            bb_die('Could not get group permissions from ' . BB_EXTENSION_GROUPS);
+        }
+
+        $row = DB()->sql_fetchrow($result);
+        DB()->sql_freeresult($result);
+
+        if (trim($row['forum_permissions']) == '') {
+            $auth_p = [];
+        } else {
+            $auth_p = auth_unpack($row['forum_permissions']);
+        }
+
+        // Generate array for Auth_Pack, do not add doubled forums
+        foreach ($add_forums_list as $i => $iValue) {
+            if (!in_array($add_forums_list[$i], $auth_p)) {
+                $auth_p[] = $iValue;
+            }
+        }
+
+        $auth_bitstream = auth_pack($auth_p);
+
+        $sql = 'UPDATE ' . BB_EXTENSION_GROUPS . " SET forum_permissions = '" . DB()->escape($auth_bitstream) . "' WHERE group_id = " . (int)$group;
+
+        if (!($result = DB()->sql_query($sql))) {
+            bb_die('Could not update permissions #2');
+        }
+    }
+}
+
+// Delete Forums
+if ($delete_forum && $e_mode == 'perm' && $group) {
+    $delete_forums_list = get_var('entries', array(0));
+
+    // Get the current Forums
+    $sql = 'SELECT forum_permissions
+		FROM ' . BB_EXTENSION_GROUPS . '
+		WHERE group_id = ' . (int)$group . '
+		LIMIT 1';
+
+    if (!($result = DB()->sql_query($sql))) {
+        bb_die('Could not get group permissions from ' . BB_EXTENSION_GROUPS);
+    }
+
+    $row = DB()->sql_fetchrow($result);
+    DB()->sql_freeresult($result);
+
+    $auth_p2 = auth_unpack(trim($row['forum_permissions']));
+    $auth_p = [];
+
+    // Generate array for Auth_Pack, delete the chosen ones
+    foreach ($auth_p2 as $i => $iValue) {
+        if (!in_array($auth_p2[$i], $delete_forums_list)) {
+            $auth_p[] = $iValue;
+        }
+    }
+
+    $auth_bitstream = (count($auth_p) > 0) ? auth_pack($auth_p) : '';
+
+    $sql = 'UPDATE ' . BB_EXTENSION_GROUPS . " SET forum_permissions = '" . DB()->escape($auth_bitstream) . "' WHERE group_id = " . (int)$group;
+
+    if (!($result = DB()->sql_query($sql))) {
+        bb_die('Could not update permissions #3');
+    }
+}
+
+// Display the Group Permissions Box for configuring it
+if ($e_mode == 'perm' && $group) {
+    $sql = 'SELECT group_name, forum_permissions
+		FROM ' . BB_EXTENSION_GROUPS . '
+		WHERE group_id = ' . (int)$group . '
+		LIMIT 1';
+
+    if (!($result = DB()->sql_query($sql))) {
+        bb_die('Could not get group name from ' . BB_EXTENSION_GROUPS);
+    }
+
+    $row = DB()->sql_fetchrow($result);
+    DB()->sql_freeresult($result);
+
+    $group_name = $row['group_name'];
+    $allowed_forums = trim($row['forum_permissions']);
+
+    $forum_perm = [];
+
+    if ($allowed_forums == '') {
+        $forum_perm[0]['forum_id'] = 0;
+        $forum_perm[0]['forum_name'] = $lang['PERM_ALL_FORUMS'];
+    } else {
+        $forum_p = [];
+        $act_id = 0;
+        $forum_p = auth_unpack($allowed_forums);
+        $sql = 'SELECT forum_id, forum_name FROM ' . BB_FORUMS . ' WHERE forum_id IN (' . implode(', ', $forum_p) . ')';
+        if (!($result = DB()->sql_query($sql))) {
+            bb_die('Could not get forum names');
+        }
+
+        while ($row = DB()->sql_fetchrow($result)) {
+            $forum_perm[$act_id]['forum_id'] = $row['forum_id'];
+            $forum_perm[$act_id]['forum_name'] = $row['forum_name'];
+            $act_id++;
+        }
+    }
+
+    for ($i = 0, $iMax = count($forum_perm); $i < $iMax; $i++) {
+        $template->assign_block_vars('allow_option_values', array(
+                'VALUE' => $forum_perm[$i]['forum_id'],
+                'OPTION' => htmlCHR($forum_perm[$i]['forum_name']))
+        );
+    }
+
+    $template->assign_vars(array(
+        'TPL_ATTACH_EXTENSION_GROUPS_PERMISSIONS' => true,
+        'L_GROUP_PERMISSIONS_TITLE' => sprintf($lang['GROUP_PERMISSIONS_TITLE_ADMIN'], trim($group_name)),
+        'A_PERM_ACTION' => "admin_extensions.php?mode=groups&amp;e_mode=perm&amp;e_group=$group",
+    ));
+
+    $forum_option_values = array(0 => $lang['PERM_ALL_FORUMS']);
+
+    $sql = 'SELECT forum_id, forum_name FROM ' . BB_FORUMS;
+
+    if (!($result = DB()->sql_query($sql))) {
+        bb_die('Could not get forums #1');
+    }
+
+    while ($row = DB()->sql_fetchrow($result)) {
+        $forum_option_values[(int)$row['forum_id']] = $row['forum_name'];
+    }
+    DB()->sql_freeresult($result);
+
+    foreach ($forum_option_values as $value => $option) {
+        $template->assign_block_vars('forum_option_values', array(
+                'VALUE' => $value,
+                'OPTION' => htmlCHR($option))
+        );
+    }
+
+    $empty_perm_forums = [];
+
+    $sql = 'SELECT forum_id, forum_name FROM ' . BB_FORUMS . ' WHERE auth_attachments < ' . AUTH_ADMIN;
+
+    if (!($f_result = DB()->sql_query($sql))) {
+        bb_die('Could not get forums #2');
+    }
+
+    while ($row = DB()->sql_fetchrow($f_result)) {
+        $forum_id = $row['forum_id'];
+
+        $sql = 'SELECT forum_permissions
+		FROM ' . BB_EXTENSION_GROUPS . '
+		WHERE allow_group = 1
+		ORDER BY group_name ASC';
+
+        if (!($result = DB()->sql_query($sql))) {
+            bb_die('Could not query extension groups');
+        }
+
+        $rows = DB()->sql_fetchrowset($result);
+        $num_rows = DB()->num_rows($result);
+        DB()->sql_freeresult($result);
+
+        $found_forum = false;
+
+        for ($i = 0; $i < $num_rows; $i++) {
+            $allowed_forums = auth_unpack(trim($rows[$i]['forum_permissions']));
+            if (in_array($forum_id, $allowed_forums) || trim($rows[$i]['forum_permissions']) == '') {
+                $found_forum = true;
+                break;
+            }
+        }
+
+        if (!$found_forum) {
+            $empty_perm_forums[$forum_id] = $row['forum_name'];
+        }
+    }
+    DB()->sql_freeresult($f_result);
+
+    $message = '';
+
+    foreach ($empty_perm_forums as $forum_id => $forum_name) {
+        $message .= ($message == '') ? $forum_name : '<br />' . $forum_name;
+    }
+
+    if (count($empty_perm_forums) > 0) {
+        $template->assign_vars(array('ERROR_MESSAGE' => $lang['NOTE_ADMIN_EMPTY_GROUP_PERMISSIONS'] . $message));
+    }
+}
+
+if ($error) {
+    $template->assign_vars(array('ERROR_MESSAGE' => $error_msg));
+}
+
+print_page('admin_extensions.tpl', 'admin');

admin/admin_forum_prune.php

@@ -0,0 +1,61 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+if (!empty($setmodules)) {
+    $module['FORUMS']['PRUNE'] = basename(__FILE__);
+    return;
+}
+
+require __DIR__ . '/pagestart.php';
+
+$all_forums = -1;
+$pruned_total = 0;
+$prune_performed = false;
+
+if (isset($_REQUEST['submit'])) {
+    if (!$var =& $_REQUEST['f'] or !$f_selected = get_id_ary($var)) {
+        bb_die($lang['SELECT_FORUM']);
+    }
+    if (!$var =& $_REQUEST['prunedays'] or !$prunedays = abs((int)$var)) {
+        bb_die($lang['NOT_DAYS']);
+    }
+
+    $prunetime = TIMENOW - 86400 * $prunedays;
+    $forum_csv = in_array($all_forums, $f_selected) ? $all_forums : implode(',', $f_selected);
+
+    $where_sql = ($forum_csv != $all_forums) ? "WHERE forum_id IN($forum_csv)" : '';
+
+    $sql = 'SELECT forum_id, forum_name FROM ' . BB_FORUMS . " $where_sql";
+
+    foreach (DB()->fetch_rowset($sql) as $i => $row) {
+        $pruned_topics = \TorrentPier\Legacy\Admin\Common::topic_delete('prune', $row['forum_id'], $prunetime, !empty($_POST['prune_all_topic_types']));
+        $pruned_total += $pruned_topics;
+        $prune_performed = true;
+
+        $template->assign_block_vars('pruned', [
+            'ROW_CLASS' => !($i % 2) ? 'row1' : 'row2',
+            'FORUM_NAME' => htmlCHR($row['forum_name']),
+            'PRUNED_TOPICS' => $pruned_topics
+        ]);
+    }
+    if (!$prune_performed) {
+        bb_die($lang['NONE_SELECTED']);
+    }
+    if (!$pruned_total) {
+        bb_die($lang['NO_SEARCH_MATCH']);
+    }
+}
+
+$template->assign_vars([
+    'PRUNED_TOTAL' => $pruned_total,
+    'S_PRUNE_ACTION' => basename(__FILE__),
+    'SEL_FORUM' => get_forum_select('admin', 'f[]', null, 65, 16, '', $all_forums)
+]);
+
+print_page('admin_forum_prune.tpl', 'admin');

admin/admin_forumauth.php

@@ -0,0 +1,228 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+if (!empty($setmodules)) {
+    $module['FORUMS']['PERMISSIONS'] = basename(__FILE__);
+    return;
+}
+
+require __DIR__ . '/pagestart.php';
+
+$forum_auth_fields = [
+    'auth_view',
+    'auth_read',
+    'auth_reply',
+    'auth_edit',
+    'auth_delete',
+    'auth_vote',
+    'auth_pollcreate',
+    'auth_attachments',
+    'auth_download',
+    'auth_post',
+    'auth_sticky',
+    'auth_announce',
+];
+
+// View  Read  Reply  Edit  Delete  Vote  Poll  PostAttach  DownAttach  PostTopic  Sticky  Announce
+$simple_auth_ary = [
+    0 => [AUTH_ALL, AUTH_ALL, AUTH_ALL, AUTH_REG, AUTH_REG, AUTH_REG, AUTH_REG, AUTH_REG, AUTH_ALL, AUTH_ALL, AUTH_MOD, AUTH_MOD], // Public
+    1 => [AUTH_ALL, AUTH_ALL, AUTH_REG, AUTH_REG, AUTH_REG, AUTH_REG, AUTH_REG, AUTH_REG, AUTH_REG, AUTH_REG, AUTH_MOD, AUTH_MOD], // Registered
+    2 => [AUTH_REG, AUTH_REG, AUTH_REG, AUTH_REG, AUTH_REG, AUTH_REG, AUTH_REG, AUTH_REG, AUTH_REG, AUTH_REG, AUTH_MOD, AUTH_MOD], // Registered [Hidden]
+    3 => [AUTH_REG, AUTH_ACL, AUTH_ACL, AUTH_ACL, AUTH_ACL, AUTH_ACL, AUTH_ACL, AUTH_ACL, AUTH_ACL, AUTH_ACL, AUTH_MOD, AUTH_MOD], // Private
+    4 => [AUTH_ACL, AUTH_ACL, AUTH_ACL, AUTH_ACL, AUTH_ACL, AUTH_ACL, AUTH_ACL, AUTH_ACL, AUTH_ACL, AUTH_ACL, AUTH_MOD, AUTH_MOD], // Private [Hidden]
+    5 => [AUTH_REG, AUTH_MOD, AUTH_MOD, AUTH_MOD, AUTH_MOD, AUTH_MOD, AUTH_MOD, AUTH_MOD, AUTH_MOD, AUTH_MOD, AUTH_MOD, AUTH_MOD], // Moderators
+    6 => [AUTH_MOD, AUTH_MOD, AUTH_MOD, AUTH_MOD, AUTH_MOD, AUTH_MOD, AUTH_MOD, AUTH_MOD, AUTH_MOD, AUTH_MOD, AUTH_MOD, AUTH_MOD], // Moderators [Hidden]
+];
+
+$simple_auth_types = [
+    $lang['PUBLIC'],
+    $lang['REGISTERED'],
+    $lang['REGISTERED'] . ' [' . $lang['HIDDEN'] . ']',
+    $lang['PRIVATE'],
+    $lang['PRIVATE'] . ' [' . $lang['HIDDEN'] . ']',
+    $lang['MODERATORS'],
+    $lang['MODERATORS'] . ' [' . $lang['HIDDEN'] . ']',
+];
+
+$field_names = [];
+foreach ($forum_auth_fields as $auth_type) {
+    $field_names[$auth_type] = $lang[strtoupper($auth_type)];
+}
+
+$forum_auth_levels = ['ALL', 'REG', 'PRIVATE', 'MOD', 'ADMIN'];
+$forum_auth_const = [AUTH_ALL, AUTH_REG, AUTH_ACL, AUTH_MOD, AUTH_ADMIN];
+
+if (isset($_REQUEST[POST_FORUM_URL])) {
+    $forum_id = (int)$_REQUEST[POST_FORUM_URL];
+    $forum_sql = "WHERE forum_id = $forum_id";
+} else {
+    unset($forum_id);
+    $forum_sql = '';
+}
+
+if (isset($_GET['adv'])) {
+    $adv = (int)$_GET['adv'];
+} else {
+    unset($adv);
+}
+
+$submit = isset($_POST['submit']);
+
+// Check for demo mode
+if (IN_DEMO_MODE && $submit) {
+    bb_die($lang['CANT_EDIT_IN_DEMO_MODE']);
+}
+
+/**
+ * Start program proper
+ */
+if ($submit) {
+    $sql = '';
+
+    if (!empty($forum_id)) {
+        if (isset($_POST['simpleauth'])) {
+            $simple_ary = $simple_auth_ary[(int)$_POST['simpleauth']];
+
+            for ($i = 0, $iMax = count($simple_ary); $i < $iMax; $i++) {
+                $sql .= (($sql != '') ? ', ' : '') . $forum_auth_fields[$i] . ' = ' . $simple_ary[$i];
+            }
+
+            if (is_array($simple_ary)) {
+                $sql = 'UPDATE ' . BB_FORUMS . " SET $sql WHERE forum_id = $forum_id";
+            }
+        } else {
+            for ($i = 0, $iMax = count($forum_auth_fields); $i < $iMax; $i++) {
+                $value = (int)$_POST[$forum_auth_fields[$i]];
+
+                if ($forum_auth_fields[$i] == 'auth_vote') {
+                    if ($_POST['auth_vote'] == AUTH_ALL) {
+                        $value = AUTH_REG;
+                    }
+                }
+
+                $sql .= (($sql != '') ? ', ' : '') . $forum_auth_fields[$i] . ' = ' . $value;
+            }
+
+            $sql = 'UPDATE ' . BB_FORUMS . " SET $sql WHERE forum_id = $forum_id";
+        }
+
+        if ($sql != '') {
+            if (!DB()->sql_query($sql)) {
+                bb_die('Could not update auth table');
+            }
+        }
+
+        $forum_sql = '';
+        $adv = 0;
+    }
+
+    $datastore->update('cat_forums');
+    CACHE('bb_cache')->rm();
+    bb_die($lang['FORUM_AUTH_UPDATED'] . '<br /><br />' . sprintf($lang['CLICK_RETURN_FORUMAUTH'], '<a href="' . 'admin_forumauth.php' . '">', '</a>'));
+}
+
+/**
+ * Get required information
+ */
+$forum_rows = DB()->fetch_rowset('SELECT * FROM ' . BB_FORUMS . " $forum_sql");
+
+if (empty($forum_id)) {
+    // Output the selection table if no forum id was specified
+    $template->assign_vars([
+        'TPL_AUTH_SELECT_FORUM' => true,
+        'S_AUTH_ACTION' => 'admin_forumauth.php',
+        'S_AUTH_SELECT' => get_forum_select('admin', 'f', null, 80),
+    ]);
+} else {
+    // Output the authorisation details if an id was specified
+    $forum_name = reset($forum_rows)['forum_name'];
+
+    reset($simple_auth_ary);
+    foreach ($simple_auth_ary as $key => $auth_levels) {
+        $matched = 1;
+        for ($k = 0, $kMax = count($auth_levels); $k < $kMax; $k++) {
+            $matched_type = $key;
+
+            if ($forum_rows[0][$forum_auth_fields[$k]] != $auth_levels[$k]) {
+                $matched = 0;
+            }
+        }
+
+        if ($matched) {
+            break;
+        }
+    }
+
+    //
+    // If we didn't get a match above then we
+    // automatically switch into 'advanced' mode
+    //
+    if (!isset($adv) && !$matched) {
+        $adv = 1;
+    }
+
+    $s_column_span = 0;
+
+    if (empty($adv)) {
+        $simple_auth = '<select name="simpleauth">';
+
+        for ($j = 0, $jMax = count($simple_auth_types); $j < $jMax; $j++) {
+            $selected = ($matched_type == $j) ? ' selected' : '';
+            $simple_auth .= '<option value="' . $j . '"' . $selected . '>' . $simple_auth_types[$j] . '</option>';
+        }
+
+        $simple_auth .= '</select>';
+
+        $template->assign_block_vars('forum_auth', [
+            'CELL_TITLE' => $lang['SIMPLE_MODE'],
+            'S_AUTH_LEVELS_SELECT' => $simple_auth,
+        ]);
+
+        $s_column_span++;
+    } else {
+        // Output values of individual fields
+        for ($j = 0, $jMax = count($forum_auth_fields); $j < $jMax; $j++) {
+            $custom_auth[$j] = '&nbsp;<select name="' . $forum_auth_fields[$j] . '">';
+
+            for ($k = 0, $kMax = count($forum_auth_levels); $k < $kMax; $k++) {
+                $selected = ($forum_rows[0][$forum_auth_fields[$j]] == $forum_auth_const[$k]) ? ' selected' : '';
+                $custom_auth[$j] .= '<option value="' . $forum_auth_const[$k] . '"' . $selected . '>' . $lang['FORUM_' . strtoupper($forum_auth_levels[$k])] . '</OPTION>';
+            }
+            $custom_auth[$j] .= '</select>&nbsp;';
+
+            $cell_title = $field_names[$forum_auth_fields[$j]];
+
+            $template->assign_block_vars('forum_auth', [
+                'CELL_TITLE' => $cell_title,
+                'S_AUTH_LEVELS_SELECT' => $custom_auth[$j],
+            ]);
+
+            $s_column_span++;
+        }
+    }
+
+    $adv_mode = empty($adv) ? '1' : '0';
+    $switch_mode = "admin_forumauth.php?" . POST_FORUM_URL . "=$forum_id&amp;adv=$adv_mode";
+    $switch_mode_text = empty($adv) ? $lang['ADVANCED_MODE'] : $lang['SIMPLE_MODE'];
+    $u_switch_mode = '<a href="' . $switch_mode . '">' . $switch_mode_text . '</a>';
+
+    $s_hidden_fields = '<input type="hidden" name="' . POST_FORUM_URL . '" value="' . $forum_id . '">';
+
+    $template->assign_vars([
+        'TPL_EDIT_FORUM_AUTH' => true,
+        'FORUM_NAME' => htmlCHR($forum_name),
+        'U_VIEWFORUM' => BB_ROOT . FORUM_URL . $forum_id,
+        'U_SWITCH_MODE' => $u_switch_mode,
+        'S_FORUMAUTH_ACTION' => 'admin_forumauth.php',
+        'S_COLUMN_SPAN' => $s_column_span,
+        'S_HIDDEN_FIELDS' => $s_hidden_fields,
+    ]);
+}
+
+print_page('admin_forumauth.tpl', 'admin');

admin/admin_forumauth_list.php

@@ -0,0 +1,327 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+if (!empty($setmodules)) {
+    $module['FORUMS']['PERMISSIONS_LIST'] = basename(__FILE__);
+    return;
+}
+
+require __DIR__ . '/pagestart.php';
+
+//  View  Read  Post  Reply  Edit  Delete  Sticky  Announce  Vote  Poll  PostAttach  Download
+$simple_auth_ary = [
+    0 => [AUTH_ALL, AUTH_ALL, AUTH_ALL, AUTH_ALL, AUTH_REG, AUTH_REG, AUTH_MOD, AUTH_MOD, AUTH_REG, AUTH_REG, AUTH_REG, AUTH_ALL], // Public
+    1 => [AUTH_ALL, AUTH_ALL, AUTH_REG, AUTH_REG, AUTH_REG, AUTH_REG, AUTH_MOD, AUTH_MOD, AUTH_REG, AUTH_REG, AUTH_REG, AUTH_REG], // Registered
+    2 => [AUTH_REG, AUTH_REG, AUTH_REG, AUTH_REG, AUTH_REG, AUTH_REG, AUTH_MOD, AUTH_MOD, AUTH_REG, AUTH_REG, AUTH_REG, AUTH_REG], // Registered [Hidden]
+    3 => [AUTH_REG, AUTH_ACL, AUTH_ACL, AUTH_ACL, AUTH_ACL, AUTH_ACL, AUTH_MOD, AUTH_MOD, AUTH_ACL, AUTH_ACL, AUTH_ACL, AUTH_ACL], // Private
+    4 => [AUTH_ACL, AUTH_ACL, AUTH_ACL, AUTH_ACL, AUTH_ACL, AUTH_ACL, AUTH_MOD, AUTH_MOD, AUTH_ACL, AUTH_ACL, AUTH_ACL, AUTH_ACL], // Private [Hidden]
+    5 => [AUTH_REG, AUTH_MOD, AUTH_MOD, AUTH_MOD, AUTH_MOD, AUTH_MOD, AUTH_MOD, AUTH_MOD, AUTH_MOD, AUTH_MOD, AUTH_MOD, AUTH_MOD], // Moderators
+    6 => [AUTH_MOD, AUTH_MOD, AUTH_MOD, AUTH_MOD, AUTH_MOD, AUTH_MOD, AUTH_MOD, AUTH_MOD, AUTH_MOD, AUTH_MOD, AUTH_MOD, AUTH_MOD], // Moderators [Hidden]
+];
+
+$simple_auth_types = [
+    $lang['PUBLIC'],
+    $lang['REGISTERED'],
+    $lang['REGISTERED'] . ' [' . $lang['HIDDEN'] . ']',
+    $lang['PRIVATE'],
+    $lang['PRIVATE'] . ' [' . $lang['HIDDEN'] . ']',
+    $lang['MODERATORS'],
+    $lang['MODERATORS'] . ' [' . $lang['HIDDEN'] . ']',
+];
+
+$forum_auth_fields = [
+    'auth_view',
+    'auth_read',
+    'auth_reply',
+    'auth_edit',
+    'auth_delete',
+    'auth_vote',
+    'auth_pollcreate',
+    'auth_attachments',
+    'auth_download',
+    'auth_post',
+    'auth_sticky',
+    'auth_announce',
+];
+
+$field_names = [];
+foreach ($forum_auth_fields as $auth_type) {
+    $field_names[$auth_type] = $lang[strtoupper($auth_type)];
+}
+
+$forum_auth_levels = ['ALL', 'REG', 'PRIVATE', 'MOD', 'ADMIN'];
+$forum_auth_const = [AUTH_ALL, AUTH_REG, AUTH_ACL, AUTH_MOD, AUTH_ADMIN];
+
+if (isset($_GET[POST_FORUM_URL]) || isset($_POST[POST_FORUM_URL])) {
+    $forum_id = isset($_POST[POST_FORUM_URL]) ? (int)$_POST[POST_FORUM_URL] : (int)$_GET[POST_FORUM_URL];
+    $forum_sql = "AND forum_id = $forum_id";
+} else {
+    unset($forum_id);
+    $forum_sql = '';
+}
+
+if (isset($_GET[POST_CAT_URL]) || isset($_POST[POST_CAT_URL])) {
+    $cat_id = isset($_POST[POST_CAT_URL]) ? (int)$_POST[POST_CAT_URL] : (int)$_GET[POST_CAT_URL];
+    $cat_sql = "AND c.cat_id = $cat_id";
+} else {
+    unset($cat_id);
+    $cat_sql = '';
+}
+
+if (isset($_GET['adv'])) {
+    $adv = (int)$_GET['adv'];
+} else {
+    unset($adv);
+}
+
+$submit = isset($_POST['submit']);
+
+// Check for demo mode
+if (IN_DEMO_MODE && $submit) {
+    bb_die($lang['CANT_EDIT_IN_DEMO_MODE']);
+}
+
+/**
+ * Start program proper
+ */
+if ($submit) {
+    $sql = '';
+
+    if (!empty($forum_id)) {
+        if (isset($_POST['simpleauth'])) {
+            $simple_ary = $simple_auth_ary[(int)$_POST['simpleauth']];
+
+            for ($i = 0, $iMax = count($simple_ary); $i < $iMax; $i++) {
+                $sql .= (($sql != '') ? ', ' : '') . $forum_auth_fields[$i] . ' = ' . $simple_ary[$i];
+            }
+
+            if (is_array($simple_ary)) {
+                $sql = 'UPDATE ' . BB_FORUMS . " SET $sql WHERE forum_id = $forum_id";
+            }
+        } else {
+            for ($i = 0, $iMax = count($forum_auth_fields); $i < $iMax; $i++) {
+                $value = (int)$_POST[$forum_auth_fields[$i]];
+
+                if ($forum_auth_fields[$i] == 'auth_vote') {
+                    if ($_POST['auth_vote'] == AUTH_ALL) {
+                        $value = AUTH_REG;
+                    }
+                }
+
+                $sql .= (($sql != '') ? ', ' : '') . $forum_auth_fields[$i] . ' = ' . $value;
+            }
+
+            $sql = 'UPDATE ' . BB_FORUMS . " SET $sql WHERE forum_id = $forum_id";
+        }
+
+        if ($sql != '') {
+            if (!DB()->sql_query($sql)) {
+                bb_die('Could not update auth table #1');
+            }
+        }
+
+        $forum_sql = '';
+        $adv = 0;
+    } elseif (!empty($cat_id)) {
+        for ($i = 0, $iMax = count($forum_auth_fields); $i < $iMax; $i++) {
+            $value = (int)$_POST[$forum_auth_fields[$i]];
+
+            if ($forum_auth_fields[$i] == 'auth_vote') {
+                if ($_POST['auth_vote'] == AUTH_ALL) {
+                    $value = AUTH_REG;
+                }
+            }
+
+            $sql .= (($sql != '') ? ', ' : '') . $forum_auth_fields[$i] . ' = ' . $value;
+        }
+
+        $sql = 'UPDATE ' . BB_FORUMS . " SET $sql WHERE cat_id = $cat_id";
+
+        if ($sql != '') {
+            if (!DB()->sql_query($sql)) {
+                bb_die('Could not update auth table #2');
+            }
+        }
+
+        $cat_sql = '';
+    }
+
+    $datastore->update('cat_forums');
+    CACHE('bb_cache')->rm();
+    bb_die($lang['FORUM_AUTH_UPDATED'] . '<br /><br />' . sprintf($lang['CLICK_RETURN_FORUMAUTH'], '<a href="admin_forumauth_list.php">', '</a>'));
+} // End of submit
+
+//
+// Get required information, either all forums if
+// no id was specified or just the requsted forum
+// or category if it was
+//
+$sql = 'SELECT f.*
+	FROM ' . BB_FORUMS . ' f, ' . BB_CATEGORIES . " c
+	WHERE c.cat_id = f.cat_id
+	$forum_sql $cat_sql
+	ORDER BY c.cat_order ASC, f.forum_order ASC";
+if (!($result = DB()->sql_query($sql))) {
+    bb_die('Could not obtain forum list');
+}
+
+$forum_rows = DB()->sql_fetchrowset($result);
+DB()->sql_freeresult($result);
+
+if (empty($forum_id) && empty($cat_id)) {
+    //
+    // Output the summary list if no forum id was
+    // specified
+    //
+    $template->assign_vars(array(
+        'TPL_AUTH_FORUM_LIST' => true,
+        'S_COLUMN_SPAN' => count($forum_auth_fields) + 1,
+    ));
+
+    for ($i = 0, $iMax = count($forum_auth_fields); $i < $iMax; $i++) {
+        $template->assign_block_vars('forum_auth_titles', array(
+            'CELL_TITLE' => $field_names[$forum_auth_fields[$i]],
+        ));
+    }
+
+    // Obtain the category list
+    $sql = 'SELECT c.cat_id, c.cat_title, c.cat_order
+		FROM ' . BB_CATEGORIES . ' c
+		ORDER BY c.cat_order';
+    if (!($result = DB()->sql_query($sql))) {
+        bb_die('Could not query categories list #1');
+    }
+
+    $category_rows = DB()->sql_fetchrowset($result);
+    $cat_count = count($category_rows);
+
+    for ($i = 0; $i < $cat_count; $i++) {
+        $cat_id = $category_rows[$i]['cat_id'];
+
+        $template->assign_block_vars('cat_row', array(
+                'CAT_NAME' => htmlCHR($category_rows[$i]['cat_title']),
+                'CAT_URL' => 'admin_forumauth_list.php' . '?' . POST_CAT_URL . '=' . $category_rows[$i]['cat_id'])
+        );
+
+        for ($j = 0, $jMax = count($forum_rows); $j < $jMax; $j++) {
+            if ($cat_id == $forum_rows[$j]['cat_id']) {
+                $template->assign_block_vars('cat_row.forum_row', array(
+                    'ROW_CLASS' => !($j % 2) ? 'row4' : 'row5',
+                    'FORUM_NAME' => '<a class="' . ($forum_rows[$j]['forum_parent'] ? 'genmed' : 'gen') . '" href="admin_forumauth.php?' . POST_FORUM_URL . '=' . $forum_rows[$j]['forum_id'] . '">' . htmlCHR($forum_rows[$j]['forum_name']) . '</a>',
+                    'IS_SUBFORUM' => $forum_rows[$j]['forum_parent'],
+                ));
+
+                for ($k = 0, $kMax = count($forum_auth_fields); $k < $kMax; $k++) {
+                    $item_auth_value = $forum_rows[$j][$forum_auth_fields[$k]];
+                    for ($l = 0, $lMax = count($forum_auth_const); $l < $lMax; $l++) {
+                        if ($item_auth_value == $forum_auth_const[$l]) {
+                            $item_auth_level = $forum_auth_levels[$l];
+                            break;
+                        }
+                    }
+                    $template->assign_block_vars('cat_row.forum_row.forum_auth_data', array(
+                            'CELL_VALUE' => $lang['FORUM_' . $item_auth_level],
+                            'AUTH_EXPLAIN' => sprintf($lang[strtoupper('FORUM_AUTH_LIST_EXPLAIN_' . $forum_auth_fields[$k])], $lang[strtoupper('FORUM_AUTH_LIST_EXPLAIN_' . $item_auth_level)]))
+                    );
+                }
+            }
+        }
+    }
+} else {
+    //
+    // output the authorisation details if an category id was
+    // specified
+    //
+
+    //
+    // first display the current details for all forums
+    // in the category
+    //
+    for ($i = 0, $iMax = count($forum_auth_fields); $i < $iMax; $i++) {
+        $template->assign_block_vars('forum_auth_titles', array(
+            'CELL_TITLE' => $field_names[$forum_auth_fields[$i]],
+        ));
+    }
+
+    // obtain the category list
+    $sql = 'SELECT c.cat_id, c.cat_title, c.cat_order
+		FROM ' . BB_CATEGORIES . " c
+		WHERE c.cat_id = $cat_id
+		ORDER BY c.cat_order";
+    if (!($result = DB()->sql_query($sql))) {
+        bb_die('Could not query categories list #2');
+    }
+
+    $category_rows = DB()->sql_fetchrowset($result);
+
+    $cat_id = reset($category_rows)['cat_id'];
+    $cat_name = reset($category_rows)['cat_title'];
+
+    $template->assign_block_vars('cat_row', array(
+            'CAT_NAME' => htmlCHR($cat_name),
+            'CAT_URL' => 'admin_forumauth_list.php?' . POST_CAT_URL . '=' . $cat_id)
+    );
+
+    for ($j = 0, $jMax = count($forum_rows); $j < $jMax; $j++) {
+        if ($cat_id == $forum_rows[$j]['cat_id']) {
+            $template->assign_block_vars('cat_row.forum_row', array(
+                'ROW_CLASS' => !($j % 2) ? 'row4' : 'row5',
+                'FORUM_NAME' => '<a class="' . ($forum_rows[$j]['forum_parent'] ? 'genmed' : 'gen') . '" href="admin_forumauth.php?' . POST_FORUM_URL . '=' . $forum_rows[$j]['forum_id'] . '">' . htmlCHR($forum_rows[$j]['forum_name']) . '</a>',
+                'IS_SUBFORUM' => $forum_rows[$j]['forum_parent'],
+            ));
+
+            for ($k = 0, $kMax = count($forum_auth_fields); $k < $kMax; $k++) {
+                $item_auth_value = $forum_rows[$j][$forum_auth_fields[$k]];
+                for ($l = 0, $lMax = count($forum_auth_const); $l < $lMax; $l++) {
+                    if ($item_auth_value == $forum_auth_const[$l]) {
+                        $item_auth_level = $forum_auth_levels[$l];
+                        break;
+                    }
+                }
+                $template->assign_block_vars('cat_row.forum_row.forum_auth_data', array(
+                        'CELL_VALUE' => $lang['FORUM_' . $item_auth_level],
+                        'AUTH_EXPLAIN' => sprintf($lang[strtoupper('FORUM_AUTH_LIST_EXPLAIN_' . $forum_auth_fields[$k])], $lang[strtoupper('FORUM_AUTH_LIST_EXPLAIN_' . $item_auth_level)]))
+                );
+            }
+        }
+    }
+
+    //
+    // next generate the information to allow the permissions to be changed
+    // note: we always read from the first forum in the category
+    //
+    for ($j = 0, $jMax = count($forum_auth_fields); $j < $jMax; $j++) {
+        $custom_auth[$j] = '<select name="' . $forum_auth_fields[$j] . '">';
+
+        for ($k = 0, $kMax = count($forum_auth_levels); $k < $kMax; $k++) {
+            $selected = (!empty($forum_rows) && $forum_rows[0][$forum_auth_fields[$j]] == $forum_auth_const[$k]) ? ' selected' : '';
+            $custom_auth[$j] .= '<option value="' . $forum_auth_const[$k] . '"' . $selected . '>' . $lang['FORUM_' . $forum_auth_levels[$k]] . '</option>';
+        }
+        $custom_auth[$j] .= '</select>';
+
+        $template->assign_block_vars('forum_auth_data', array(
+                'S_AUTH_LEVELS_SELECT' => $custom_auth[$j])
+        );
+    }
+
+    //
+    // finally pass any remaining items to the template
+    //
+    $s_hidden_fields = '<input type="hidden" name="' . POST_CAT_URL . '" value="' . $cat_id . '">';
+
+    $template->assign_vars(array(
+        'TPL_AUTH_CAT' => true,
+        'CAT_NAME' => htmlCHR($cat_name),
+        'S_FORUMAUTH_ACTION' => 'admin_forumauth_list.php',
+        'S_COLUMN_SPAN' => count($forum_auth_fields) + 1,
+        'S_HIDDEN_FIELDS' => $s_hidden_fields,
+    ));
+}
+
+print_page('admin_forumauth_list.tpl', 'admin');

admin/admin_groups.php

@@ -0,0 +1,168 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+if (!empty($setmodules)) {
+    $module['GROUPS']['MANAGE'] = basename(__FILE__);
+    return;
+}
+
+require __DIR__ . '/pagestart.php';
+
+$group_id = isset($_REQUEST[POST_GROUPS_URL]) ? (int)$_REQUEST[POST_GROUPS_URL] : 0;
+$mode = isset($_REQUEST['mode']) ? (string)$_REQUEST['mode'] : '';
+
+attachment_quota_settings('group', $mode, isset($_POST['group_update']));
+
+if (!empty($_POST['edit']) || !empty($_POST['new'])) {
+    if (!empty($_POST['edit'])) {
+        if (!$row = \TorrentPier\Legacy\Group::get_group_data($group_id)) {
+            bb_die($lang['GROUP_NOT_EXIST']);
+        }
+        $group_info = [
+            'group_name' => $row['group_name'],
+            'group_description' => $row['group_description'],
+            'group_moderator' => $row['group_moderator'],
+            'group_mod_name' => $row['moderator_name'],
+            'group_type' => $row['group_type'],
+            'release_group' => $row['release_group']
+        ];
+        $mode = 'editgroup';
+        $template->assign_block_vars('group_edit', []);
+    } elseif (!empty($_POST['new'])) {
+        $group_info = [
+            'group_name' => '',
+            'group_description' => '',
+            'group_moderator' => '',
+            'group_mod_name' => '',
+            'group_type' => GROUP_OPEN,
+            'release_group' => 0
+        ];
+        $mode = 'newgroup';
+    }
+
+    // Ok, now we know everything about them, let's show the page.
+    $s_hidden_fields = '
+		<input type="hidden" name="mode" value="' . $mode . '" />
+		<input type="hidden" name="' . POST_GROUPS_URL . '" value="' . $group_id . '" />
+	';
+
+    $template->assign_vars([
+        'TPL_EDIT_GROUP' => true,
+
+        'GROUP_NAME' => stripslashes(htmlspecialchars($group_info['group_name'])),
+        'GROUP_DESCRIPTION' => stripslashes(htmlspecialchars($group_info['group_description'])),
+        'GROUP_MODERATOR' => replace_quote($group_info['group_mod_name']),
+        'T_GROUP_EDIT_DELETE' => ($mode == 'newgroup') ? $lang['CREATE_NEW_GROUP'] : $lang['EDIT_GROUP'],
+        'U_SEARCH_USER' => BB_ROOT . 'search.php?mode=searchuser',
+        'S_GROUP_OPEN_TYPE' => GROUP_OPEN,
+        'S_GROUP_CLOSED_TYPE' => GROUP_CLOSED,
+        'S_GROUP_HIDDEN_TYPE' => GROUP_HIDDEN,
+        'S_GROUP_OPEN_CHECKED' => ($group_info['group_type'] == GROUP_OPEN) ? HTML_CHECKED : '',
+        'S_GROUP_CLOSED_CHECKED' => ($group_info['group_type'] == GROUP_CLOSED) ? HTML_CHECKED : '',
+        'S_GROUP_HIDDEN_CHECKED' => ($group_info['group_type'] == GROUP_HIDDEN) ? HTML_CHECKED : '',
+        'RELEASE_GROUP' => (bool)$group_info['release_group'],
+        'S_GROUP_ACTION' => 'admin_groups.php',
+        'S_HIDDEN_FIELDS' => $s_hidden_fields
+    ]);
+} elseif (!empty($_POST['group_update'])) {
+    if (!empty($_POST['group_delete'])) {
+        if (!$group_info = \TorrentPier\Legacy\Group::get_group_data($group_id)) {
+            bb_die($lang['GROUP_NOT_EXIST']);
+        }
+        // Delete Group
+        \TorrentPier\Legacy\Group::delete_group($group_id);
+
+        $message = $lang['DELETED_GROUP'] . '<br /><br />';
+        $message .= sprintf($lang['CLICK_RETURN_GROUPSADMIN'], '<a href="admin_groups.php">', '</a>') . '<br /><br />';
+        $message .= sprintf($lang['CLICK_RETURN_ADMIN_INDEX'], '<a href="index.php?pane=right">', '</a>');
+
+        bb_die($message);
+    } else {
+        $group_type = isset($_POST['group_type']) ? (int)$_POST['group_type'] : GROUP_OPEN;
+        $release_group = isset($_POST['release_group']) ? (int)$_POST['release_group'] : 0;
+        $group_name = isset($_POST['group_name']) ? trim($_POST['group_name']) : '';
+        $group_desc = isset($_POST['group_description']) ? trim($_POST['group_description']) : '';
+        $group_moderator = $_POST['username'] ?? '';
+
+        if ($group_name === '') {
+            bb_die($lang['NO_GROUP_NAME']);
+        } elseif ($group_moderator === '') {
+            bb_die($lang['NO_GROUP_MODERATOR']);
+        }
+        $this_userdata = get_userdata($group_moderator, true);
+
+        if (!$group_moderator = $this_userdata['user_id']) {
+            bb_die($lang['NO_GROUP_MODERATOR']);
+        }
+
+        $sql_ary = [
+            'group_type' => (int)$group_type,
+            'release_group' => (int)$release_group,
+            'group_name' => (string)$group_name,
+            'group_description' => (string)$group_desc,
+            'group_moderator' => (int)$group_moderator,
+            'group_single_user' => 0,
+        ];
+
+        if ($mode == 'editgroup') {
+            if (!$group_info = \TorrentPier\Legacy\Group::get_group_data($group_id)) {
+                bb_die($lang['GROUP_NOT_EXIST']);
+            }
+
+            if ($group_info['group_moderator'] != $group_moderator) {
+                // Create user_group for new group's moderator
+                \TorrentPier\Legacy\Group::add_user_into_group($group_id, $group_moderator);
+                $sql_ary['mod_time'] = TIMENOW;
+
+                // Delete old moderator's user_group
+                if (isset($_POST['delete_old_moderator'])) {
+                    \TorrentPier\Legacy\Group::delete_user_group($group_id, $group_info['group_moderator']);
+                }
+            }
+
+            $sql_args = DB()->build_array('UPDATE', $sql_ary);
+
+            // Update group's data
+            DB()->query('UPDATE ' . BB_GROUPS . " SET $sql_args WHERE group_id = $group_id");
+
+            $message = $lang['UPDATED_GROUP'] . '<br /><br />';
+            $message .= sprintf($lang['CLICK_RETURN_GROUPSADMIN'], '<a href="admin_groups.php">', '</a>') . '<br /><br />';
+            $message .= sprintf($lang['CLICK_RETURN_ADMIN_INDEX'], '<a href="index.php?pane=right">', '</a>');
+
+            bb_die($message);
+        } elseif ($mode == 'newgroup') {
+            $sql_ary['group_time'] = $sql_ary['mod_time'] = TIMENOW;
+            $sql_args = DB()->build_array('INSERT', $sql_ary);
+
+            // Create new group
+            DB()->query('INSERT INTO ' . BB_GROUPS . " $sql_args");
+            $new_group_id = DB()->sql_nextid();
+
+            // Create user_group for group's moderator
+            \TorrentPier\Legacy\Group::add_user_into_group($new_group_id, $group_moderator);
+
+            $message = $lang['ADDED_NEW_GROUP'] . '<br /><br />';
+            $message .= sprintf($lang['CLICK_RETURN_GROUPSADMIN'], '<a href="admin_groups.php">', '</a>') . '<br /><br />';
+            $message .= sprintf($lang['CLICK_RETURN_ADMIN_INDEX'], '<a href="index.php?pane=right">', '</a>');
+
+            bb_die($message);
+        } else {
+            bb_die($lang['NO_GROUP_ACTION']);
+        }
+    }
+} else {
+    $template->assign_vars([
+        'TPL_GROUP_SELECT' => true,
+
+        'S_GROUP_ACTION' => 'admin_groups.php',
+        'S_GROUP_SELECT' => stripslashes(get_select('groups')),
+    ]);
+}
+
+print_page('admin_groups.tpl', 'admin');

admin/admin_log.php

@@ -0,0 +1,362 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+if (!empty($setmodules)) {
+    $module['USERS']['ACTIONS_LOG'] = basename(__FILE__);
+    return;
+}
+
+require __DIR__ . '/pagestart.php';
+
+$datastore->enqueue([
+    'moderators',
+    'cat_forums',
+]);
+
+$log_action->init();
+
+$per_page = 50;
+$row_class_1 = 'row1';
+$row_class_2 = 'row2';
+$def_days = 3;
+$def_datetime = TIMENOW;
+$max_forum_name_len = 40;
+$title_match_max_len = 60;
+$poster_name_max_len = 25;
+$select_max_height = 16;
+$dt_format = 'Y-m-d';   // used in one-day filter
+
+$url = basename(__FILE__);
+
+// Key names
+$type_key = 'type';
+$forum_key = POST_FORUM_URL;
+$topic_key = POST_TOPIC_URL;
+$user_key = POST_USERS_URL;
+$datetime_key = 'dt';   // value should be strtotime() time ("2006-06-25" etc.)
+$daysback_key = 'db';
+$sort_key = 'sort';
+$title_match_key = 'tm';
+
+// Key values
+$all_types = 0;  // =|
+$all_users = 0;  //  |> only "0" is a valid value
+$all_forums = 0;  // =|
+
+$sort_asc = 'ASC';
+$sort_desc = 'DESC';
+
+// Defaults
+$def_types = $all_types;
+$def_users = $all_users;
+$def_forums = $all_forums;
+$def_sort = $sort_desc;
+
+// Moderators data
+if (!$mod = $datastore->get('moderators')) {
+    $datastore->update('moderators');
+    $mod = $datastore->get('moderators');
+}
+array_deep($mod['moderators'], 'html_entity_decode');
+array_deep($mod['admins'], 'html_entity_decode');
+
+$users = array($lang['ACTS_LOG_ALL_ACTIONS'] => $all_users) + array_flip($mod['moderators']) + array_flip($mod['admins']);
+
+unset($mod);
+
+// Forums data
+if (!$forums = $datastore->get('cat_forums')) {
+    $datastore->update('cat_forums');
+    $forums = $datastore->get('cat_forums');
+}
+$f_data = $forums['f'];
+
+unset($forums);
+
+// Start
+$start = isset($_REQUEST['start']) ? abs((int)$_REQUEST['start']) : 0;
+
+// Type
+$type_selected = array($def_types);
+$type_csv = '';
+
+if ($var =& $_REQUEST[$type_key]) {
+    $type_selected = get_id_ary($var);
+
+    if (in_array($all_types, $type_selected)) {
+        $type_selected = array($all_types);
+    }
+    $type_csv = implode(',', $type_selected);
+    $url = ($type_csv != $def_types) ? url_arg($url, $type_key, $type_csv) : $url;
+}
+
+// User
+$user_selected = array($def_users);
+$user_csv = '';
+
+if ($var =& $_REQUEST[$user_key]) {
+    $user_selected = get_id_ary($var);
+
+    if (in_array($all_users, $user_selected)) {
+        $user_selected = array($all_users);
+    }
+    $user_csv = implode(',', $user_selected);
+    $url = ($user_csv != $def_users) ? url_arg($url, $user_key, $user_csv) : $url;
+}
+
+// Forum
+$forum_selected = array($def_forums);
+$forum_csv = '';
+
+if ($var =& $_REQUEST[$forum_key]) {
+    $forum_selected = get_id_ary($var);
+
+    if (in_array($all_forums, $forum_selected)) {
+        $forum_selected = array($all_forums);
+    }
+    $forum_csv = implode(',', $forum_selected);
+    $url = ($forum_csv != $def_forums) ? url_arg($url, $forum_key, $forum_csv) : $url;
+}
+
+// Topic
+$topic_selected = null;
+$topic_csv = '';
+
+if ($var =& $_REQUEST[$topic_key]) {
+    $topic_selected = get_id_ary($var);
+    $topic_csv = implode(',', $topic_selected);
+    $url = $topic_csv ? url_arg($url, $topic_key, $topic_csv) : $url;
+}
+
+// Sort
+$sort_val = $def_sort;
+
+if ($var =& $_REQUEST[$sort_key] && $var != $def_sort) {
+    $sort_val = ($var == $sort_asc) ? $sort_asc : $sort_desc;
+    $url = url_arg($url, $sort_key, $sort_val);
+}
+
+// Time
+$datetime_val = $def_datetime;
+$daysback_val = $def_days;
+
+if ($var =& $_REQUEST[$daysback_key] && $var != $def_days) {
+    $daysback_val = max((int)$var, 1);
+    $url = url_arg($url, $daysback_key, $daysback_val);
+}
+if ($var =& $_REQUEST[$datetime_key] && $var != $def_datetime) {
+    $tz = TIMENOW + (3600 * config()->get('board_timezone'));
+    if (($tmp_timestamp = strtotime($var, $tz)) > 0) {
+        $datetime_val = $tmp_timestamp;
+        $url = url_arg($url, $datetime_key, date($dt_format, $datetime_val));
+    }
+}
+
+$time_end_val = 86400 + mktime(0, 0, 0, date('m', $datetime_val), date('d', $datetime_val), date('Y', $datetime_val));
+$time_start_val = $time_end_val - 86400 * $daysback_val;
+
+// First log time
+$row = DB()->fetch_row('SELECT MIN(log_time) AS first_log_time FROM ' . BB_LOG);
+$first_log_time = (int)$row['first_log_time'];
+
+// Title match
+$title_match_val = $title_match_sql = '';
+
+if ($var =& $_REQUEST[$title_match_key]) {
+    if ($tmp_title_match = substr(urldecode(trim($var)), 0, $title_match_max_len)) {
+        $title_match_sql = DB()->escape($tmp_title_match);
+        $url = url_arg($url, $title_match_key, urlencode($tmp_title_match));
+    }
+}
+
+// SQL
+$where = " WHERE l.log_time BETWEEN '$time_start_val' AND '$time_end_val'";
+$where .= $type_csv ? " AND l.log_type_id IN($type_csv)" : '';
+$where .= $user_csv ? " AND l.log_user_id IN($user_csv)" : '';
+$where .= $forum_csv ? " AND l.log_forum_id IN($forum_csv)" : '';
+$where .= $topic_csv ? " AND l.log_topic_id IN($topic_csv)" : '';
+$where .= $title_match_sql ? " AND MATCH (l.log_topic_title) AGAINST ('$title_match_sql' IN BOOLEAN MODE)" : '';
+
+$sql = 'SELECT l.*, u.*
+	FROM ' . BB_LOG . ' l
+	LEFT JOIN ' . BB_USERS . " u ON(u.user_id = l.log_user_id)
+	$where
+	ORDER BY l.log_time
+	$sort_val
+	LIMIT $start, " . ($per_page + 1);
+
+$log_rowset = DB()->fetch_rowset($sql);
+$log_count = count($log_rowset);
+
+if ($log_count == $per_page + 1) {
+    $items_count = $start + ($per_page * 2);
+    $pages = '?';
+    array_pop($log_rowset);
+} else {
+    $items_count = $start + $log_count;
+    $pages = (!$log_count) ? 1 : ceil($items_count / $per_page);
+}
+
+generate_pagination($url, $items_count, $per_page, $start);
+
+$filter = [];
+
+if ($log_rowset) {
+    $log_type = $log_action->log_type;
+    $log_type_flip = array_flip($log_type);
+
+    foreach ($log_rowset as $row_num => $row) {
+        $msg = '';
+        $forum_name = $forum_name_new = '';
+        $topic_title = $topic_title_new = '';
+
+        $topic_deleted = ($row['log_type_id'] == $log_type['mod_topic_delete']);
+
+        switch ($row['log_type_id']) {
+            case $log_type['mod_topic_delete']:
+            case $log_type['mod_topic_move']:
+            case $log_type['mod_topic_lock']:
+            case $log_type['mod_topic_unlock']:
+            case $log_type['mod_topic_set_downloaded']:
+            case $log_type['mod_topic_unset_downloaded']:
+            case $log_type['mod_topic_change_tor_status']:
+            case $log_type['mod_topic_change_tor_type']:
+            case $log_type['mod_topic_tor_unregister']:
+            case $log_type['mod_topic_renamed']:
+            case $log_type['mod_post_delete']:
+            case $log_type['mod_post_pin']:
+            case $log_type['mod_post_unpin']:
+            case $log_type['mod_topic_split']:
+                // topic_title
+                if (!empty($row['log_topic_title'])) {
+                    $topic_title = $row['log_topic_title'];
+                }
+                // topic_title_new
+                if (!empty($row['log_topic_title_new'])) {
+                    $topic_title_new = $row['log_topic_title_new'];
+                }
+                // forum_name
+                if ($fid =& $row['log_forum_id']) {
+                    $forum_name = ($fname =& $f_data[$fid]['forum_name']) ? $fname : 'id:' . $row['log_forum_id'];
+                }
+                // forum_name_new
+                if ($fid =& $row['log_forum_id_new']) {
+                    $forum_name_new = ($fname =& $f_data[$fid]['forum_name']) ? $fname : 'id:' . $row['log_forum_id'];
+                }
+
+                break;
+        }
+
+        $msg .= " {$row['log_msg']}";
+
+        $row_class = !($row_num & 1) ? $row_class_1 : $row_class_2;
+
+        $datetime_href_s = url_arg($url, $datetime_key, date($dt_format, $row['log_time']));
+        $datetime_href_s = url_arg($datetime_href_s, $daysback_key, 1);
+
+        $template->assign_block_vars('log', array(
+            'ACTION_DESC' => $lang['LOG_ACTION']['LOG_TYPE'][$log_type_flip[$row['log_type_id']]],
+            'ACTION_HREF_S' => url_arg($url, $type_key, $row['log_type_id']),
+
+            'USER_ID' => $row['log_user_id'],
+            'USERNAME' => profile_url($row, true),
+            'USER_HREF_S' => url_arg($url, $user_key, $row['log_user_id']),
+            'USER_IP' => \TorrentPier\Helpers\IPHelper::isValid($row['log_user_ip']) ? \TorrentPier\Helpers\IPHelper::long2ip_extended($row['log_user_ip']) : '127.0.0.1',
+
+            'FORUM_ID' => $row['log_forum_id'],
+            'FORUM_HREF' => BB_ROOT . FORUM_URL . $row['log_forum_id'],
+            'FORUM_HREF_S' => url_arg($url, $forum_key, $row['log_forum_id']),
+            'FORUM_NAME' => htmlCHR($forum_name),
+
+            'FORUM_ID_NEW' => $row['log_forum_id_new'],
+            'FORUM_HREF_NEW' => BB_ROOT . FORUM_URL . $row['log_forum_id_new'],
+            'FORUM_HREF_NEW_S' => url_arg($url, $forum_key, $row['log_forum_id_new']),
+            'FORUM_NAME_NEW' => htmlCHR($forum_name_new),
+
+            'TOPIC_ID' => $row['log_topic_id'],
+            'TOPIC_HREF' => (!$topic_deleted) ? BB_ROOT . TOPIC_URL . $row['log_topic_id'] : '',
+            'TOPIC_HREF_S' => url_arg($url, $topic_key, $row['log_topic_id']),
+            'TOPIC_TITLE' => $topic_title,
+
+            'TOPIC_ID_NEW' => $row['log_topic_id_new'],
+            'TOPIC_HREF_NEW' => BB_ROOT . TOPIC_URL . $row['log_topic_id_new'],
+            'TOPIC_HREF_NEW_S' => url_arg($url, $topic_key, $row['log_topic_id_new']),
+            'TOPIC_TITLE_NEW' => $topic_title_new,
+
+            'DATETIME' => bb_date($row['log_time'], 'd-M-y H:i'),
+            'DATETIME_HREF_S' => $datetime_href_s,
+            'MSG' => $msg,
+            'ROW_CLASS' => $row_class,
+
+        ));
+
+        // Topics
+        if ($topic_csv && empty($filter['topics'][$row['log_topic_title']])) {
+            $template->assign_block_vars('topics', array(
+                'TOPIC_TITLE' => $row['log_topic_title'],
+            ));
+            $filter['topics'][$row['log_topic_title']] = true;
+        }
+        // Forums
+        if ($forum_csv && empty($filter['forums'][$forum_name])) {
+            $template->assign_block_vars('forums', array(
+                'FORUM_NAME' => htmlCHR($forum_name),
+            ));
+            $filter['forums'][$forum_name] = true;
+        }
+        // Users
+        if ($user_csv && empty($filter['users'])) {
+            $template->assign_block_vars('users', array(
+                'USERNAME' => profile_url($row, true),
+            ));
+            $filter['users'] = true;
+        }
+    }
+
+    $template->assign_vars(array(
+        'FILTERS' => $topic_csv || $forum_csv || $user_csv,
+        'FILTER_TOPICS' => !empty($filter['topics']),
+        'FILTER_FORUMS' => !empty($filter['forums']),
+        'FILTER_USERS' => !empty($filter['users']),
+    ));
+} else {
+    $template->assign_block_vars('log_not_found', []);
+}
+
+// Select
+$log_type_select = array($lang['ACTS_LOG_ALL_ACTIONS'] => $all_types) + $log_action->log_type_select;
+
+$template->assign_vars(array(
+    'LOG_COLSPAN' => 4,
+
+    'DATETIME_NAME' => $datetime_key,
+    'DATETIME_VAL' => date('Y-m-d', $datetime_val),
+    'DAYSBACK_NAME' => $daysback_key,
+    'DAYSBACK_VAL' => $daysback_val,
+    'FIRST_LOG_TIME' => $first_log_time ? date('Y-m-d', $first_log_time) : $lang['ACC_NONE'],
+
+    'TITLE_MATCH_MAX' => $title_match_max_len,
+    'TITLE_MATCH_NAME' => $title_match_key,
+    'TITLE_MATCH_VAL' => $title_match_val,
+
+    'SORT_NAME' => $sort_key,
+    'SORT_ASC' => $sort_asc,
+    'SORT_DESC' => $sort_desc,
+    'SORT_ASC_CHECKED' => ($sort_val == $sort_asc) ? HTML_CHECKED : '',
+    'SORT_DESC_CHECKED' => ($sort_val == $sort_desc) ? HTML_CHECKED : '',
+
+    'SEL_FORUM' => get_forum_select('admin', "{$forum_key}[]", $forum_selected, $max_forum_name_len, $select_max_height, '', $all_forums),
+    'SEL_LOG_TYPE' => build_select("{$type_key}[]", $log_type_select, $type_selected, 60, $select_max_height),
+    'SEL_USERS' => build_select("{$user_key}[]", $users, $user_selected, 16, $select_max_height),
+
+    'S_LOG_ACTION' => 'admin_log.php',
+    'TOPIC_CSV' => $topic_csv,
+));
+
+print_page('admin_log.tpl', 'admin');

admin/admin_mass_email.php

@@ -0,0 +1,105 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+if (!empty($setmodules)) {
+    $module['MODS']['MASS_EMAIL'] = basename(__FILE__);
+    return;
+}
+
+require __DIR__ . '/pagestart.php';
+
+if (!config()->get('emailer.enabled')) {
+    bb_die($lang['EMAILER_DISABLED']);
+}
+
+set_time_limit(1200);
+
+$subject = trim(request_var('subject', ''));
+$message = (string)request_var('message', '');
+$group_id = (int)request_var(POST_GROUPS_URL, 0);
+$reply_to = (string)request_var('reply_to', config()->get('board_email'));
+$message_type = (string)request_var('message_type', '');
+
+$errors = $user_id_sql = [];
+
+if (isset($_POST['submit'])) {
+    if (!$subject) {
+        $errors[] = $lang['EMPTY_SUBJECT'];
+    }
+    if (!$message) {
+        $errors[] = $lang['EMPTY_MESSAGE'];
+    }
+    if (!$group_id) {
+        $errors[] = $lang['GROUP_NOT_EXIST'];
+    }
+
+    if (!$errors) {
+        $banned_users = ($get_banned_users = get_banned_users()) ? (', ' . implode(', ', $get_banned_users)) : '';
+
+        if ($group_id != -1) {
+            $user_list = DB()->fetch_rowset('
+				SELECT u.username, u.user_email, u.user_lang
+				FROM ' . BB_USERS . ' u, ' . BB_USER_GROUP . " ug
+				WHERE ug.group_id = $group_id
+					AND ug.user_pending = 0
+					AND u.user_id = ug.user_id
+					AND u.user_active = 1
+					AND u.user_id NOT IN(" . EXCLUDED_USERS . $banned_users . ')
+			');
+        } else {
+            $user_list = DB()->fetch_rowset('
+				SELECT username, user_email, user_lang
+				FROM ' . BB_USERS . '
+				WHERE user_active = 1
+					AND user_id NOT IN(' . EXCLUDED_USERS . $banned_users . ')
+			');
+        }
+
+        foreach ($user_list as $i => $row) {
+            // Sending email
+            $emailer = new TorrentPier\Emailer();
+
+            $emailer->set_to($row['user_email'], $row['username']);
+            $emailer->set_subject($subject);
+            $emailer->set_reply($reply_to);
+
+            $emailer->set_template('admin_send_email');
+            $emailer->assign_vars(['MESSAGE' => trim(html_entity_decode($message))]);
+
+            $emailer->send($message_type);
+        }
+    }
+}
+
+//
+// Generate page
+//
+$sql = 'SELECT group_id, group_name
+	FROM ' . BB_GROUPS . '
+	WHERE group_single_user = 0
+	ORDER BY group_name
+';
+
+$groups = ['-- ' . $lang['ALL_USERS'] . ' --' => -1];
+foreach (DB()->fetch_rowset($sql) as $row) {
+    $groups[$row['group_name']] = $row['group_id'];
+}
+
+$template->assign_vars([
+    'MESSAGE' => $message,
+    'SUBJECT' => $subject,
+    'REPLY_TO' => $reply_to,
+
+    'ERROR_MESSAGE' => $errors ? implode('<br />', array_unique($errors)) : '',
+
+    'S_USER_ACTION' => 'admin_mass_email.php',
+    'S_GROUP_SELECT' => build_select(POST_GROUPS_URL, $groups)
+]);
+
+print_page('admin_mass_email.tpl', 'admin');

admin/admin_migrations.php

@@ -0,0 +1,79 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+if (!empty($setmodules)) {
+    if (IS_SUPER_ADMIN) {
+        $module['GENERAL']['MIGRATIONS_STATUS'] = basename(__FILE__);
+    }
+    return;
+}
+
+require __DIR__ . '/pagestart.php';
+
+if (!IS_SUPER_ADMIN) {
+    bb_die(__('ONLY_FOR_SUPER_ADMIN'));
+}
+
+use TorrentPier\Database\MigrationStatus;
+
+// Initialize migration status
+$migrationStatus = new MigrationStatus();
+$status = $migrationStatus->getMigrationStatus();
+$schemaInfo = $migrationStatus->getSchemaInfo();
+
+// Template variables
+$template->assign_vars([
+    'PAGE_TITLE' => __('MIGRATIONS_STATUS'),
+    'CURRENT_TIME' => date('Y-m-d H:i:s'),
+
+    // Migration status individual fields
+    'MIGRATION_TABLE_EXISTS' => $status['table_exists'],
+    'MIGRATION_CURRENT_VERSION' => $status['current_version'],
+    'MIGRATION_APPLIED_COUNT' => count($status['applied_migrations']),
+    'MIGRATION_PENDING_COUNT' => count($status['pending_migrations']),
+
+    // Setup status fields
+    'SETUP_REQUIRES_SETUP' => $status['requires_setup'] ?? false,
+    'SETUP_TYPE' => $status['setup_status']['type'] ?? __('UNKNOWN'),
+    'SETUP_MESSAGE' => $status['setup_status']['message'] ?? '',
+    'SETUP_ACTION_REQUIRED' => $status['setup_status']['action_required'] ?? false,
+    'SETUP_INSTRUCTIONS' => $status['setup_status']['instructions'] ?? '',
+
+    // Schema info individual fields
+    'SCHEMA_DATABASE_NAME' => $schemaInfo['database_name'],
+    'SCHEMA_TABLE_COUNT' => $schemaInfo['table_count'],
+    'SCHEMA_SIZE_MB' => $schemaInfo['size_mb'],
+]);
+
+// Assign migration data for template
+if (!empty($status['applied_migrations'])) {
+    foreach ($status['applied_migrations'] as $i => $migration) {
+        $template->assign_block_vars('applied_migrations', [
+            'VERSION' => $migration['version'],
+            'NAME' => $migration['migration_name'] ?? __('UNKNOWN'),
+            'START_TIME' => $migration['start_time'] ?? __('UNKNOWN'),
+            'END_TIME' => $migration['end_time'] ?? __('UNKNOWN'),
+            'ROW_CLASS' => ($i % 2) ? 'row1' : 'row2'
+        ]);
+    }
+}
+
+if (!empty($status['pending_migrations'])) {
+    foreach ($status['pending_migrations'] as $i => $migration) {
+        $template->assign_block_vars('pending_migrations', [
+            'VERSION' => $migration['version'],
+            'NAME' => $migration['name'],
+            'FILENAME' => $migration['filename'],
+            'ROW_CLASS' => ($i % 2) ? 'row1' : 'row2'
+        ]);
+    }
+}
+
+// Output template using standard admin pattern
+print_page('admin_migrations.tpl', 'admin');

admin/admin_phpinfo.php

@@ -0,0 +1,29 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+if (!empty($setmodules)) {
+    if (IS_SUPER_ADMIN) {
+        $module['GENERAL']['PHP_INFO'] = basename(__FILE__);
+    }
+    return;
+}
+
+require __DIR__ . '/pagestart.php';
+
+if (!IS_SUPER_ADMIN) {
+    bb_die($lang['ONLY_FOR_SUPER_ADMIN']);
+}
+
+// Check for demo mode
+if (IN_DEMO_MODE) {
+    bb_die($lang['CANT_EDIT_IN_DEMO_MODE']);
+}
+
+/** @noinspection ForgottenDebugOutputInspection */
+phpinfo();

admin/admin_ranks.php

@@ -0,0 +1,202 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+if (!empty($setmodules)) {
+    $module['USERS']['RANKS'] = basename(__FILE__);
+    return;
+}
+
+require __DIR__ . '/pagestart.php';
+
+if (isset($_GET['mode']) || isset($_POST['mode'])) {
+    $mode = $_GET['mode'] ?? $_POST['mode'];
+} else {
+    //
+    // These could be entered via a form button
+    //
+    if (isset($_POST['add'])) {
+        $mode = 'add';
+    } elseif (isset($_POST['save'])) {
+        $mode = 'save';
+    } else {
+        $mode = '';
+    }
+}
+
+if ($mode == 'delete' && isset($_POST['cancel'])) {
+    $mode = '';
+}
+
+if ($mode != '') {
+    if ($mode == 'edit' || $mode == 'add') {
+        //
+        // They want to add a new rank, show the form.
+        //
+        $rank_id = isset($_GET['id']) ? (int)$_GET['id'] : 0;
+
+        $s_hidden_fields = '';
+
+        if ($mode == 'edit') {
+            if (empty($rank_id)) {
+                bb_die($lang['MUST_SELECT_RANK']);
+            }
+
+            $sql = 'SELECT * FROM ' . BB_RANKS . " WHERE rank_id = $rank_id";
+            if (!$result = DB()->sql_query($sql)) {
+                bb_die('Could not obtain ranks data #1');
+            }
+
+            $rank_info = DB()->sql_fetchrow($result);
+            $s_hidden_fields .= '<input type="hidden" name="id" value="' . $rank_id . '" />';
+        }
+
+        $s_hidden_fields .= '<input type="hidden" name="mode" value="save" />';
+
+        $template->assign_vars([
+            'TPL_RANKS_EDIT' => true,
+
+            'RANK' => !empty($rank_info['rank_title']) ? $rank_info['rank_title'] : '',
+            'IMAGE' => !empty($rank_info['rank_image']) ? $rank_info['rank_image'] : 'styles/images/ranks/rank_image.png',
+            'STYLE' => !empty($rank_info['rank_style']) ? $rank_info['rank_style'] : '',
+            'IMAGE_DISPLAY' => !empty($rank_info['rank_image']) ? '<img src="../' . $rank_info['rank_image'] . '" />' : '',
+
+            'S_RANK_ACTION' => 'admin_ranks.php',
+            'S_HIDDEN_FIELDS' => $s_hidden_fields
+        ]);
+    } elseif ($mode == 'save') {
+        //
+        // Ok, they sent us our info, let's update it.
+        //
+
+        $rank_id = isset($_POST['id']) ? (int)$_POST['id'] : 0;
+        $rank_title = isset($_POST['title']) ? trim($_POST['title']) : '';
+        $rank_style = isset($_POST['style']) ? trim($_POST['style']) : '';
+        $rank_image = isset($_POST['rank_image']) ? trim($_POST['rank_image']) : '';
+
+        if ($rank_title == '') {
+            bb_die($lang['MUST_SELECT_RANK']);
+        }
+
+        //
+        // The rank image has to be a jpg, gif or png
+        //
+        if ($rank_image != '') {
+            if (!preg_match('/(\.gif|\.png|\.jpg|\.jpeg|\.bmp|\.webp|\.avif\.ico)$/is', $rank_image)) {
+                $rank_image = '';
+            }
+        }
+
+        if ($rank_id) {
+
+            $sql = 'UPDATE ' . BB_USERS . " SET user_rank = 0 WHERE user_rank = $rank_id";
+            if (!$result = DB()->sql_query($sql)) {
+                bb_die($lang['NO_UPDATE_RANKS']);
+            }
+
+            $sql = 'UPDATE ' . BB_RANKS . "
+				SET rank_title = '" . DB()->escape($rank_title) . "',
+					rank_image = '" . DB()->escape($rank_image) . "',
+					rank_style = '" . DB()->escape($rank_style) . "'
+				WHERE rank_id = $rank_id";
+
+            $message = $lang['RANK_UPDATED'];
+        } else {
+            $sql = 'INSERT INTO ' . BB_RANKS . " (rank_title, rank_image, rank_style)
+				VALUES ('" . DB()->escape($rank_title) . "', '" . DB()->escape($rank_image) . "', '" . DB()->escape($rank_style) . "')";
+
+            $message = $lang['RANK_ADDED'];
+        }
+
+        if (!$result = DB()->sql_query($sql)) {
+            bb_die('Could not update / insert into ranks table');
+        }
+
+        $message .= '<br /><br />' . sprintf($lang['CLICK_RETURN_RANKADMIN'], '<a href="admin_ranks.php">', '</a>') . '<br /><br />' . sprintf($lang['CLICK_RETURN_ADMIN_INDEX'], '<a href="index.php?pane=right">', '</a>');
+
+        $datastore->update('ranks');
+
+        bb_die($message);
+    } elseif ($mode == 'delete') {
+        //
+        // Ok, they want to delete their rank
+        //
+
+        $confirmed = isset($_POST['confirm']);
+        if (isset($_POST['id']) || isset($_GET['id'])) {
+            $rank_id = isset($_POST['id']) ? (int)$_POST['id'] : (int)$_GET['id'];
+        } else {
+            $rank_id = 0;
+        }
+
+        if ($confirmed) {
+            if ($rank_id) {
+                $sql = 'DELETE FROM ' . BB_RANKS . " WHERE rank_id = $rank_id";
+
+                if (!$result = DB()->sql_query($sql)) {
+                    bb_die('Could not delete rank data');
+                }
+
+                $sql = 'UPDATE ' . BB_USERS . " SET user_rank = 0 WHERE user_rank = $rank_id";
+                if (!$result = DB()->sql_query($sql)) {
+                    bb_die($lang['NO_UPDATE_RANKS']);
+                }
+
+                $datastore->update('ranks');
+
+                bb_die($lang['RANK_REMOVED'] . '<br /><br />' . sprintf($lang['CLICK_RETURN_RANKADMIN'], '<a href="admin_ranks.php">', '</a>') . '<br /><br />' . sprintf($lang['CLICK_RETURN_ADMIN_INDEX'], '<a href="index.php?pane=right">', '</a>'));
+            } else {
+                bb_die($lang['MUST_SELECT_RANK']);
+            }
+        } else {
+            $hidden_fields = '<input type="hidden" name="mode" value="' . $mode . '" />';
+            $hidden_fields .= '<input type="hidden" name="id" value="' . $rank_id . '" />';
+
+            print_confirmation([
+                'FORM_ACTION' => 'admin_ranks.php',
+                'HIDDEN_FIELDS' => $hidden_fields,
+            ]);
+        }
+    } else {
+        bb_die('Invalid mode');
+    }
+} else {
+    //
+    // Show the default page
+    //
+    $sql = 'SELECT * FROM ' . BB_RANKS . ' ORDER BY rank_title';
+    if (!$result = DB()->sql_query($sql)) {
+        bb_die('Could not obtain ranks data #2');
+    }
+    $rank_count = DB()->num_rows($result);
+    $rank_rows = DB()->sql_fetchrowset($result);
+
+    $template->assign_vars([
+        'TPL_RANKS_LIST' => true,
+        'S_RANKS_ACTION' => 'admin_ranks.php'
+    ]);
+
+    for ($i = 0; $i < $rank_count; $i++) {
+        $rank = $rank_rows[$i]['rank_title'];
+        $rank_id = $rank_rows[$i]['rank_id'];
+
+        $row_class = !($i % 2) ? 'row1' : 'row2';
+
+        $template->assign_block_vars('ranks', [
+            'ROW_CLASS' => $row_class,
+            'RANK' => $rank,
+            'STYLE' => $rank_rows[$i]['rank_style'],
+            'IMAGE_DISPLAY' => $rank_rows[$i]['rank_image'] ? '<img src="../' . $rank_rows[$i]['rank_image'] . '" />' : '',
+
+            'U_RANK_EDIT' => "admin_ranks.php?mode=edit&amp;id=$rank_id",
+            'U_RANK_DELETE' => "admin_ranks.php?mode=delete&amp;id=$rank_id"
+        ]);
+    }
+}
+
+print_page('admin_ranks.tpl', 'admin');

admin/admin_rebuild_search.php

@@ -0,0 +1,588 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+if (!empty($setmodules)) {
+    if (IS_SUPER_ADMIN) {
+        $module['GENERAL']['REBUILD_SEARCH_INDEX'] = basename(__FILE__);
+    }
+    return;
+}
+
+require __DIR__ . '/pagestart.php';
+
+if (!IS_SUPER_ADMIN) {
+    bb_die($lang['ONLY_FOR_SUPER_ADMIN']);
+}
+
+require INC_DIR . '/bbcode.php';
+
+define('REBUILD_SEARCH_ABORTED', 0);  // when the user aborted the processing
+define('REBUILD_SEARCH_PROCESSED', 1);  // when a batch of posts has been processed
+define('REBUILD_SEARCH_COMPLETED', 2);  // when all the db posts have been processed
+
+//
+// Define initial vars
+//
+$def_post_limit = 50;
+$def_refresh_rate = 3;
+$def_time_limit = ($sys_time_limit = ini_get('max_execution_time')) ? $sys_time_limit : 30;
+
+$last_session_data = get_rebuild_session_details('last', 'all');
+$last_session_id = (int)$last_session_data['rebuild_session_id'];
+$max_post_id = get_latest_post_id();
+$start_time = TIMENOW;
+
+$mode = isset($_REQUEST['mode']) ? (string)$_REQUEST['mode'] : '';
+
+// check if the user has choosen to stop processing
+if (isset($_REQUEST['cancel_button'])) {
+    // update the rebuild_status
+    if ($last_session_id) {
+        DB()->query('
+			UPDATE ' . BB_SEARCH_REBUILD . ' SET
+				rebuild_session_status = ' . REBUILD_SEARCH_ABORTED . "
+			WHERE rebuild_session_id = $last_session_id
+		");
+    }
+
+    bb_die(sprintf($lang['REBUILD_SEARCH_ABORTED'], $last_session_data['end_post_id']) . '<br /><br />' . sprintf($lang['CLICK_RETURN_REBUILD_SEARCH'], '<a href="admin_rebuild_search.php">', '</a>'));
+}
+
+// from which post to start processing
+$start = isset($_REQUEST['start']) ? abs((int)$_REQUEST['start']) : 0;
+
+// get the total number of posts in the db
+$total_posts = get_total_posts();
+
+// clear the search tables and clear mode (delete or truncate)
+$clear_search = isset($_REQUEST['clear_search']) ? (int)$_REQUEST['clear_search'] : 0;
+
+// get the number of total/session posts already processed
+$total_posts_processed = ($start != 0) ? get_total_posts('before', $last_session_data['end_post_id']) : 0;
+$session_posts_processed = ($mode == 'refresh') ? get_processed_posts('session') : 0;
+
+// find how many posts aren't processed
+$total_posts_processing = $total_posts - $total_posts_processed;
+
+// how many posts to process in this session
+$session_posts_processing = isset($_REQUEST['session_posts_processing']) ? (int)$_REQUEST['session_posts_processing'] : null;
+if (null !== $session_posts_processing) {
+    if ($mode == 'submit') {
+        // check if we passed over total_posts just after submitting
+        if ($session_posts_processing + $total_posts_processed > $total_posts) {
+            $session_posts_processing = $total_posts - $total_posts_processed;
+        }
+    }
+    // correct it when posts are deleted during processing
+    $session_posts_processing = ($session_posts_processing > $total_posts) ? $total_posts : $session_posts_processing;
+} else {
+    // if we have finished, get all the posts, else only the remaining
+    $session_posts_processing = (!$total_posts_processing) ? $total_posts : $total_posts_processing;
+}
+
+// how many posts to process per cycle
+$post_limit = isset($_REQUEST['post_limit']) ? (int)$_REQUEST['post_limit'] : $def_post_limit;
+
+// correct the post_limit when we pass over it
+if ($session_posts_processed + $post_limit > $session_posts_processing) {
+    $post_limit = $session_posts_processing - $session_posts_processed;
+}
+
+// how much time to wait per cycle
+if (isset($_REQUEST['time_limit'])) {
+    $time_limit = (int)$_REQUEST['time_limit'];
+} else {
+    $time_limit = $def_time_limit;
+    $time_limit_explain = $lang['TIME_LIMIT_EXPLAIN'];
+
+    // check for webserver timeout (IE returns null)
+    if (isset($_SERVER['HTTP_KEEP_ALIVE'])) {
+        // get webserver timeout
+        $webserver_timeout = (int)$_SERVER['HTTP_KEEP_ALIVE'];
+        $time_limit_explain .= '<br />' . sprintf($lang['TIME_LIMIT_EXPLAIN_WEBSERVER'], $webserver_timeout);
+
+        if ($time_limit > $webserver_timeout) {
+            $time_limit = $webserver_timeout;
+        }
+    }
+}
+
+// how much time to wait between page refreshes
+$refresh_rate = isset($_REQUEST['refresh_rate']) ? (int)$_REQUEST['refresh_rate'] : $def_refresh_rate;
+
+// check if the user gave wrong input
+if ($mode == 'submit') {
+    if (($session_posts_processing || $post_limit || $refresh_rate || $time_limit) <= 0) {
+        bb_die($lang['WRONG_INPUT'] . '<br /><br />' . sprintf($lang['CLICK_RETURN_REBUILD_SEARCH'], '<a href="admin_rebuild_search.php">', '</a>'));
+    }
+}
+
+// Increase maximum execution time in case of a lot of posts, but don't complain about it if it isn't allowed.
+set_time_limit($time_limit + 20);
+
+// check if we are should start processing
+if ($mode == 'submit' || $mode == 'refresh') {
+    // check if we are in the beginning of processing
+    if ($start == 0) {
+        $last_session_data = get_empty_last_session_data();
+        clear_search_tables($clear_search);
+    }
+
+    // get the db sizes
+    [$search_data_size, $search_index_size, $search_tables_size] = get_db_sizes();
+
+    // get the post subject/text of each post
+    $result = DB()->query("
+		SELECT
+			pt.post_id, pt.post_text,
+			IF(p.post_id = t.topic_first_post_id, t.topic_title, '') AS post_subject
+		FROM
+			" . BB_POSTS_TEXT . ' pt,
+			' . BB_POSTS . ' p,
+			' . BB_TOPICS . ' t
+		WHERE p.post_id = pt.post_id
+			AND t.topic_id = p.topic_id
+			AND p.poster_id NOT IN(' . BOT_UID . ")
+			AND pt.post_id >= $start
+		ORDER BY pt.post_id ASC
+		LIMIT $post_limit
+	");
+
+    $expire_time = $start_time + $time_limit - 5;
+    $start_post_id = $end_post_id = $num_rows = 0;
+    $timer_expired = false;
+    $words_sql = [];
+
+    while ($row = DB()->fetch_next($result) and !$timer_expired) {
+        set_time_limit(600);
+        $start_post_id = ($num_rows == 0) ? $row['post_id'] : $start_post_id;
+        $end_post_id = $row['post_id'];
+
+        // Get search words
+        $s_post_text = str_replace('\n', "\n", $row['post_text']);
+        $s_post_subject = str_replace('\n', "\n", $row['post_subject']);
+        $words_sql[] = array(
+            'post_id' => (int)$row['post_id'],
+            'search_words' => add_search_words($row['post_id'], stripslashes($s_post_text), stripslashes($s_post_subject), true),
+        );
+
+        $timer_expired = (TIMENOW > $expire_time);
+        $num_rows++;
+    }
+
+    // Store search words
+    if ($words_sql) {
+        DB()->query('REPLACE INTO ' . BB_POSTS_SEARCH . DB()->build_array('MULTI_INSERT', $words_sql));
+    }
+
+    // find how much time the last cycle took
+    $last_cycle_time = (int)(TIMENOW - $start_time);
+
+    // check if we had any data
+    if ($num_rows != 0) {
+        if ($mode == 'submit') {
+            // insert a new session entry
+            $args = DB()->build_array('INSERT', array(
+                'end_post_id' => (int)$end_post_id,
+                'end_time' => (int)TIMENOW,
+                'last_cycle_time' => (int)$last_cycle_time,
+                'session_time' => (int)$last_cycle_time,
+                'session_posts' => (int)$num_rows,
+                'session_cycles' => (int)1,
+                'start_post_id' => (int)$start_post_id,
+                'start_time' => (int)$start_time,
+                'search_size' => (int)$search_tables_size,
+                'rebuild_session_status' => REBUILD_SEARCH_PROCESSED,
+            ));
+            DB()->query('REPLACE INTO ' . BB_SEARCH_REBUILD . $args);
+        } else {
+            // refresh
+
+            // update the last session entry
+            DB()->query('
+				UPDATE ' . BB_SEARCH_REBUILD . " SET
+					end_post_id     = $end_post_id,
+					end_time        = " . TIMENOW . ",
+					last_cycle_time = $last_cycle_time,
+					session_time    = session_time + $last_cycle_time,
+					session_posts   = session_posts + $num_rows,
+					session_cycles  = session_cycles + 1,
+					rebuild_session_status = " . REBUILD_SEARCH_PROCESSED . "
+				WHERE rebuild_session_id = $last_session_id
+			");
+        }
+    }
+
+    $last_session_data = get_rebuild_session_details('last', 'all');
+    $template->assign_vars(array('TPL_REBUILD_SEARCH_PROGRESS' => true));
+
+    $processing_messages = '';
+    $processing_messages .= $timer_expired ? sprintf($lang['TIMER_EXPIRED'], TIMENOW - $start_time) : '';
+    $processing_messages .= ($start == 0 && $clear_search) ? $lang['CLEARED_SEARCH_TABLES'] : '';
+
+    // check if we have reached the end of our post processing
+    $session_posts_processed = get_processed_posts('session');
+    $total_posts_processed = get_total_posts('before', $last_session_data['end_post_id']);
+    $total_posts = get_total_posts();
+
+    if ($session_posts_processed < $session_posts_processing && $total_posts_processed < $total_posts) {
+        $form_parameters = '&start=' . ($end_post_id + 1);
+        $form_parameters .= '&session_posts_processing=' . $session_posts_processing;
+        $form_parameters .= '&post_limit=' . $post_limit;
+        $form_parameters .= '&time_limit=' . $time_limit;
+        $form_parameters .= '&refresh_rate=' . $refresh_rate;
+
+        $form_action = 'admin_rebuild_search.php' . '?mode=refresh' . $form_parameters;
+        $next_button = $lang['NEXT'];
+        $progress_bar_img = $images['progress_bar'];
+
+        $processing_messages .= sprintf($lang['PROCESSING_NEXT_POSTS'], $post_limit);
+
+        meta_refresh($form_action, $refresh_rate);
+
+        // create the meta tag for refresh
+        $template->assign_vars(array(
+            'CANCEL_BUTTON' => true,
+        ));
+    } else {
+        // end of processing
+
+        $form_action = 'admin_rebuild_search.php';
+        $next_button = $lang['FINISHED'];
+        $progress_bar_img = $images['progress_bar_full'];
+
+        $processing_messages .= ($session_posts_processed < $session_posts_processing) ? sprintf($lang['DELETED_POSTS'], $session_posts_processing - $session_posts_processed) : '';
+        $processing_messages .= ($total_posts_processed == $total_posts) ? $lang['ALL_POSTS_PROCESSED'] : $lang['ALL_SESSION_POSTS_PROCESSED'];
+
+        // if we have processed all the db posts we need to update the rebuild_status
+        DB()->query('UPDATE ' . BB_SEARCH_REBUILD . ' SET
+				rebuild_session_status = ' . REBUILD_SEARCH_COMPLETED . "
+			WHERE rebuild_session_id = $last_session_id
+				AND end_post_id = $max_post_id
+		");
+
+        // optimize all search tables when finished
+        $table_ary = array(BB_POSTS_SEARCH);
+
+        foreach ($table_ary as $table) {
+            DB()->query("ANALYZE  TABLE $table");
+            DB()->query("OPTIMIZE TABLE $table");
+        }
+
+        $processing_messages .= '<br />' . $lang['ALL_TABLES_OPTIMIZED'];
+    }
+
+    // calculate the percent
+    if ($session_posts_processing > 0) {
+        $session_percent = ($session_posts_processed / $session_posts_processing) * 100;
+    } else {
+        $session_percent = 100;
+    }
+    if ($total_posts > 0) {
+        $total_percent = ($total_posts_processed / $total_posts) * 100;
+    } else {
+        $total_percent = 100;
+    }
+
+    // get the db sizes
+    [$search_data_size, $search_index_size, $search_tables_size] = get_db_sizes();
+
+    // calculate the final (estimated) values
+    $final_search_tables_size = '';
+
+    if ($search_tables_size) {
+        $start_search_tables_size = $last_session_data['search_size'];
+        $final_search_tables_size = $start_search_tables_size + round(($search_tables_size - $start_search_tables_size) * (100 / $session_percent));
+    }
+
+    // calculate various times
+    $session_time = $last_session_data['session_time'];
+    if ($last_session_data['session_cycles'] > 0) {
+        $session_average_cycle_time = round($session_time / $last_session_data['session_cycles']);
+    } else {
+        $session_average_cycle_time = 0;
+    }
+    $session_estimated_time = round($session_time * (100 / $session_percent)) - $session_time;
+
+    // create the percent boxes
+    create_percent_box('session', create_percent_color($session_percent), $session_percent);
+    create_percent_box('total', create_percent_color($total_percent), $total_percent);
+
+    $template->assign_vars(array(
+        'L_NEXT' => $next_button,
+        'L_TIME_LAST_POSTS_ADMIN' => sprintf($lang['TIME_LAST_POSTS'], $num_rows),
+
+        'PROCESSING_POSTS' => sprintf($lang['PROCESSED_POST_IDS'], $start_post_id, $end_post_id),
+        'PROCESSING_MESSAGES' => $processing_messages,
+        'PROGRESS_BAR_IMG' => $progress_bar_img,
+
+        'SESSION_DETAILS' => sprintf($lang['PROCESS_DETAILS'], $session_posts_processed - $num_rows + 1, $session_posts_processed, $session_posts_processing),
+        'SESSION_PERCENT' => sprintf($lang['PERCENT_COMPLETED'], round($session_percent, 2)),
+
+        'TOTAL_DETAILS' => sprintf($lang['PROCESS_DETAILS'], $total_posts_processed - $num_rows + 1, $total_posts_processed, $total_posts),
+        'TOTAL_PERCENT' => sprintf($lang['PERCENT_COMPLETED'], round($total_percent, 2)),
+
+        'LAST_CYCLE_TIME' => delta_time(TIMENOW),
+        'SESSION_TIME' => delta_time(($last_session_data['start_time'] == 0) ? TIMENOW : $last_session_data['start_time']),
+        'SESSION_AVERAGE_CYCLE_TIME' => delta_time((int)$session_average_cycle_time, 0),
+        'SESSION_ESTIMATED_TIME' => delta_time((int)$session_estimated_time, 0),
+
+        'SEARCH_TABLES_SIZE' => humn_size($search_tables_size),
+        'FINAL_SEARCH_TABLES_SIZE' => humn_size($final_search_tables_size),
+        'SEARCH_DATA_SIZE' => humn_size($search_data_size),
+        'SEARCH_INDEX_SIZE' => humn_size($search_index_size),
+
+        'START_POST' => $last_session_data['start_post_id'],
+        'POST_LIMIT' => $num_rows,
+        'TIME_LIMIT' => $time_limit,
+        'REFRESH_RATE' => $refresh_rate,
+
+        'S_REBUILD_SEARCH_ACTION' => $form_action,
+    ));
+} else {// show the input page
+    // create the page
+    // used only with the select input
+    $post_limit_hidden = ($def_post_limit > $total_posts) ? $total_posts : $def_post_limit;
+
+    $s_hidden_fields = '<input type="hidden" name="post_limit_stored" value="' . $post_limit_hidden . '" />';
+    $s_hidden_fields .= '<input type="hidden" name="total_posts_stored" value="' . $total_posts . '" />';
+
+    $next_start_post_id = 0;
+    $last_saved_processing = '';
+    $clear_search_disabled = '';
+
+    if ($last_session_data['rebuild_session_id']) {
+        $last_saved_post_id = $last_session_data['end_post_id'];
+        $next_start_post_id = $last_saved_post_id + 1;
+        $last_saved_date = bb_date($last_session_data['end_time']);
+
+        // check our last status
+        if ($last_session_data['rebuild_session_status'] == REBUILD_SEARCH_PROCESSED) {
+            $last_saved_processing = sprintf($lang['INFO_PROCESSING_STOPPED'], $last_saved_post_id, $total_posts_processed, $last_saved_date);
+            $clear_search_disabled = 'disabled';
+
+            $template->assign_block_vars('start_select_input', []);
+        } elseif ($last_session_data['rebuild_session_status'] == REBUILD_SEARCH_ABORTED) {
+            $last_saved_processing = sprintf($lang['INFO_PROCESSING_ABORTED'], $last_saved_post_id, $total_posts_processed, $last_saved_date);
+            // check if the interrupted cycle has finished
+            if (TIMENOW - $last_session_data['end_time'] < $last_session_data['last_cycle_time']) {
+                $last_saved_processing .= '<br />' . $lang['INFO_PROCESSING_ABORTED_SOON'];
+            }
+            $clear_search_disabled = 'disabled';
+
+            $template->assign_block_vars('start_select_input', []);
+        } else {
+            // when finished
+
+            if ($last_session_data['end_post_id'] < $max_post_id) {
+                $last_saved_processing = sprintf($lang['INFO_PROCESSING_FINISHED_NEW'], $last_saved_post_id, $total_posts_processed, $last_saved_date, $total_posts - $total_posts_processed);
+                $clear_search_disabled = 'disabled';
+
+                $template->assign_block_vars('start_select_input', []);
+            } else {
+                $last_saved_processing = sprintf($lang['INFO_PROCESSING_FINISHED'], $total_posts, $last_saved_date);
+
+                $template->assign_block_vars('start_text_input', []);
+            }
+        }
+
+        $template->assign_block_vars('last_saved_info', []);
+    } else {
+        $template->assign_block_vars('start_text_input', []);
+    }
+
+    // create the output of page
+    $template->assign_vars(array(
+        'TPL_REBUILD_SEARCH_MAIN' => true,
+
+        'L_TIME_LIMIT_EXPLAIN' => $time_limit_explain,
+
+        'NEXT_START_POST_ID' => $next_start_post_id,
+        'CLEAR_SEARCH_DISABLED' => $clear_search_disabled,
+        'SESSION_POSTS_PROCESSING' => $session_posts_processing,
+        'POST_LIMIT' => $post_limit,
+        'REFRESH_RATE' => $refresh_rate,
+        'TIME_LIMIT' => $time_limit,
+
+        'LAST_SAVED_PROCESSING' => $last_saved_processing,
+
+        'SESSION_ID' => $userdata['session_id'],
+
+        'S_HIDDEN_FIELDS' => $s_hidden_fields,
+        'S_REBUILD_SEARCH_ACTION' => 'admin_rebuild_search.php?mode=submit',
+    ));
+}
+
+print_page('admin_rebuild_search.tpl', 'admin');
+
+//
+// Functions
+//
+function get_db_sizes()
+{
+    $search_data_size = $search_index_size = 0;
+    $search_table_like = DB()->escape(BB_POSTS_SEARCH);
+
+    $sql = 'SHOW TABLE STATUS FROM `' . DB()->selected_db . "` LIKE '$search_table_like'";
+
+    foreach (DB()->fetch_rowset($sql) as $row) {
+        $search_data_size += $row['Data_length'];
+        $search_index_size += $row['Index_length'];
+    }
+
+    return array($search_data_size, $search_index_size, $search_data_size + $search_index_size);
+}
+
+// get the latest post_id in the forum
+function get_latest_post_id()
+{
+    $row = DB()->fetch_row('SELECT MAX(post_id) as post_id FROM ' . BB_POSTS_TEXT);
+
+    return (int)$row['post_id'];
+}
+
+function get_empty_last_session_data()
+{
+    return array(
+        'rebuild_session_id' => 0,
+        'start_post_id' => 0,
+        'end_post_id' => 0,
+        'start_time' => 0,
+        'end_time' => 0,
+        'last_cycle_time' => 0,
+        'session_time' => 0,
+        'session_posts' => 0,
+        'session_cycles' => 0,
+        'search_size' => 0,
+        'rebuild_session_status' => REBUILD_SEARCH_COMPLETED,
+    );
+}
+
+// get some or all of the rebuild details of a specific session or of the last session
+// $id is the id or the 'last' id
+// $details is one of the fields or 'all' of them
+function get_rebuild_session_details($id, $details = 'all')
+{
+    $session_details = get_empty_last_session_data();
+
+    if ($id != 'last') {
+        $sql = 'SELECT * FROM ' . BB_SEARCH_REBUILD . " WHERE rebuild_session_id = $id";
+    } else {
+        $sql = 'SELECT * FROM ' . BB_SEARCH_REBUILD . ' ORDER BY rebuild_session_id DESC LIMIT 1';
+    }
+
+    if ($row = DB()->fetch_row($sql)) {
+        $session_details = ($details == 'all') ? $row : $row[$details];
+    }
+
+    return $session_details;
+}
+
+// get the number of processed posts in the last session or in all sessions
+// 'total' to get the sum of posts of all sessions
+// 'session' to get the posts of the last session
+function get_processed_posts($mode = 'session')
+{
+    global $last_session_data;
+    $row = [];
+
+    if ($mode == 'total') {
+        $sql = 'SELECT SUM(session_posts) as posts FROM ' . BB_SEARCH_REBUILD;
+        $row = DB()->fetch_row($sql);
+    } else {
+        $row['posts'] = $last_session_data['session_posts'];
+    }
+
+    return (int)$row['posts'];
+}
+
+// how many posts are in the db before or after a specific post_id
+// after/before require and the post_id
+function get_total_posts($mode = 'after', $post_id = 0)
+{
+    if ($post_id) {
+        $sql = 'SELECT COUNT(post_id) as total_posts FROM ' . BB_POSTS_TEXT . '
+			WHERE post_id ' . (($mode == 'after') ? '>= ' : '<= ') . (int)$post_id;
+    } else {
+        $sql = 'SELECT COUNT(*) as total_posts FROM ' . BB_POSTS_TEXT;
+    }
+
+    $row = DB()->fetch_row($sql);
+    $totalPosts = (int)$row['total_posts'];
+
+    if ($totalPosts < 0) {
+        return 0;
+    }
+
+    return $totalPosts;
+}
+
+function clear_search_tables($mode = '')
+{
+    DB()->query('DELETE FROM ' . BB_SEARCH_REBUILD);
+
+    if ($mode) {
+        $table_ary = array(BB_POSTS_SEARCH);
+
+        foreach ($table_ary as $table) {
+            $sql = (($mode == 1) ? 'DELETE FROM ' : 'TRUNCATE TABLE ') . $table;
+            DB()->query($sql);
+        }
+    }
+}
+
+// Create the percent color
+// We use an array with the color percent limits.
+// One color stays constantly at FF when the percent is between its limits
+// and we adjust the other 2 accordingly to percent, from 200 to 0.
+// We limit the result to 200, in order to avoid white (255).
+function create_percent_color($percent)
+{
+    $percent_color = null;
+    $percent_ary = array(
+        'r' => array(86, 100),
+        'g' => array(0, 50),
+        'b' => array(51, 85),
+    );
+
+    foreach ($percent_ary as $key => $value) {
+        if ($percent <= $value[1]) {
+            $percent_color = create_color($key, round(200 - ($percent - $value[0]) * (200 / ($value[1] - $value[0]))));
+            break;
+        }
+    }
+
+    return $percent_color;
+}
+
+// create the hex representation of color
+function create_color($mode, $code)
+{
+    return (($mode == 'r') ? 'FF' : sprintf('%02X', $code)) . (($mode == 'g') ? 'FF' : sprintf('%02X', $code)) . (($mode == 'b') ? 'FF' : sprintf('%02X', $code));
+}
+
+// create the percent bar & box
+function create_percent_box($box, $percent_color, $percent_width)
+{
+    global $template;
+
+    if ($box == 'session') {
+        $template->assign_vars(array(
+            'SESSION_PERCENT_BOX' => true,
+            'SESSION_PERCENT_COLOR' => $percent_color,
+            'SESSION_PERCENT_WIDTH' => round($percent_width),
+        ));
+    } else {
+        $template->assign_vars(array(
+            'TOTAL_PERCENT_BOX' => true,
+            'TOTAL_PERCENT_COLOR' => $percent_color,
+            'TOTAL_PERCENT_WIDTH' => round($percent_width),
+        ));
+    }
+}

admin/admin_robots.php

@@ -0,0 +1,45 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+if (!empty($setmodules)) {
+    $module['MODS']['ROBOTS_TXT_EDITOR_TITLE'] = basename(__FILE__);
+    return;
+}
+
+require __DIR__ . '/pagestart.php';
+
+$robots_file = BB_ROOT . 'robots.txt';
+
+// Обработка сохранения
+if (isset($_POST['save'])) {
+    $robots_txt = $_POST['robots_txt'] ?? '';
+
+    if (!is_writable($robots_file) && is_file($robots_file)) {
+        bb_die('File robots.txt is not writable #1');
+    }
+
+    $bytes = file_put_contents($robots_file, $robots_txt);
+    if ($bytes === false) {
+        bb_die('Could not write robots.txt #2');
+    }
+
+    bb_die($lang['ROBOTS_TXT_UPDATED_SUCCESSFULLY'] . '<br /><br />' . sprintf($lang['CLICK_RETURN_ROBOTS_TXT_CONFIG'], '<a href="admin_robots.php">', '</a>') . '<br /><br />' . sprintf($lang['CLICK_RETURN_ADMIN_INDEX'], '<a href="index.php?pane=right">', '</a>'));
+}
+
+$current_content = '';
+if (is_file($robots_file)) {
+    $current_content = file_get_contents($robots_file);
+}
+
+$template->assign_vars([
+    'S_ACTION' => 'admin_robots.php',
+    'ROBOTS_TXT' => htmlCHR($current_content),
+]);
+
+print_page('admin_robots.tpl', 'admin');

admin/admin_sitemap.php

@@ -0,0 +1,50 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+if (!empty($setmodules)) {
+    $module['MODS']['SITEMAP'] = basename(__FILE__);
+    return;
+}
+
+require __DIR__ . '/pagestart.php';
+
+$sql = "SELECT * FROM " . BB_CONFIG . " WHERE config_name IN('sitemap_time', 'static_sitemap')";
+
+if (!$result = DB()->sql_query($sql)) {
+    bb_die('Could not query config information in admin_sitemap');
+} else {
+    $new_params = [];
+
+    while ($row = DB()->sql_fetchrow($result)) {
+        $config_name = $row['config_name'];
+        $config_value = $row['config_value'];
+        $default_config[$config_name] = $config_value;
+        $new[$config_name] = $_POST[$config_name] ?? $default_config[$config_name];
+
+        if (isset($_POST['submit']) && $row['config_value'] != $new[$config_name]) {
+            $new_params[$config_name] = $new[$config_name];
+        }
+    }
+
+    if (isset($_POST['submit'])) {
+        if (!empty($new_params)) {
+            bb_update_config($new_params);
+        }
+    }
+}
+
+$s_mess = $lang['SITEMAP_CREATED'] . ': <b>' . bb_date($new['sitemap_time'], config()->get('post_date_format')) . '</b> ' . $lang['SITEMAP_AVAILABLE'] . ': <a href="' . make_url('sitemap/sitemap.xml') . '" target="_blank">' . make_url('sitemap/sitemap.xml') . '</a>';
+$message = is_file(SITEMAP_DIR . '/sitemap.xml') ? $s_mess : $lang['SITEMAP_NOT_CREATED'];
+
+$template->assign_vars([
+    'STATIC_SITEMAP' => $new['static_sitemap'],
+    'MESSAGE' => $message
+]);
+
+print_page('admin_sitemap.tpl', 'admin');

admin/admin_smilies.php

@@ -0,0 +1,334 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+if (!empty($setmodules)) {
+    $module['GENERAL']['SMILIES'] = basename(__FILE__);
+    return;
+}
+
+require __DIR__ . '/pagestart.php';
+
+// Check to see what mode we should operate in
+if (isset($_POST['mode']) || isset($_GET['mode'])) {
+    $mode = $_POST['mode'] ?? $_GET['mode'];
+    $mode = htmlspecialchars($mode);
+} else {
+    $mode = '';
+}
+
+if ($mode == 'delete' && isset($_POST['cancel'])) {
+    $mode = '';
+}
+
+$pathToSmilesDir = BB_ROOT . config()->get('smilies_path');
+$delimeter = '=+:';
+$s_hidden_fields = '';
+$smiley_paks = $smiley_images = [];
+
+// Read a listing of uploaded smiles
+$smilesDirectory = new DirectoryIterator($pathToSmilesDir);
+
+foreach ($smilesDirectory as $files) {
+    if ($files->isFile()) {
+        $extension = strtolower(pathinfo($files->getFilename(), PATHINFO_EXTENSION));
+        if (in_array($extension, ['png', 'gif'], true) && getimagesize($pathToSmilesDir . '/' . $files->getFilename())) {
+            $smiley_images[] = $files->getFilename();
+        } else if ($extension === 'pak') {
+            $smiley_paks[] = $files->getFilename();
+        }
+    }
+}
+
+// Select main mode
+if (isset($_GET['import_pack']) || isset($_POST['import_pack'])) {
+    $smile_pak = (string)request_var('smile_pak', '');
+    $clear_current = (int)request_var('clear_current', '');
+    $replace_existing = (int)request_var('replace', '');
+
+    if (!empty($smile_pak)) {
+        // The user has already selected a smile_pak file.. Import it
+        if (!empty($clear_current)) {
+            $sql = 'DELETE FROM ' . BB_SMILIES;
+            if (!$result = DB()->sql_query($sql)) {
+                bb_die('Could not delete current smilies');
+            }
+            $datastore->update('smile_replacements');
+        } else {
+            $sql = 'SELECT code FROM ' . BB_SMILIES;
+            if (!$result = DB()->sql_query($sql)) {
+                bb_die('Could not get current smilies');
+            }
+
+            $cur_smilies = DB()->sql_fetchrowset($result);
+
+            for ($i = 0, $iMax = count($cur_smilies); $i < $iMax; $i++) {
+                $k = $cur_smilies[$i]['code'];
+                $smiles[$k] = 1;
+            }
+        }
+
+        $fcontents = file($pathToSmilesDir . '/' . $smile_pak);
+
+        if (empty($fcontents)) {
+            bb_die('Could not read smiley pak file');
+        }
+
+        foreach ($fcontents as $i => $iValue) {
+            $smile_data = explode($delimeter, trim(addslashes($fcontents[$i])));
+
+            for ($j = 2, $jMax = count($smile_data); $j < $jMax; $j++) {
+                // Replace > and < with the proper html_entities for matching
+                $smile_data[$j] = str_replace('<', '&lt;', $smile_data[$j]);
+                $smile_data[$j] = str_replace('>', '&gt;', $smile_data[$j]);
+                $k = $smile_data[$j];
+
+                if (isset($smiles[$k])) {
+                    if (!empty($replace_existing)) {
+                        $sql = 'UPDATE ' . BB_SMILIES . "
+							SET smile_url = '" . DB()->escape($smile_data[0]) . "', emoticon = '" . DB()->escape($smile_data[1]) . "'
+							WHERE code = '" . DB()->escape($smile_data[$j]) . "'";
+                    } else {
+                        $sql = '';
+                    }
+                } else {
+                    $sql = 'INSERT INTO ' . BB_SMILIES . " (code, smile_url, emoticon)
+						VALUES('" . DB()->escape($smile_data[$j]) . "', '" . DB()->escape($smile_data[0]) . "', '" . DB()->escape($smile_data[1]) . "')";
+                }
+
+                if ($sql != '') {
+                    $result = DB()->sql_query($sql);
+                    if (!$result) {
+                        bb_die('Could not update smilies #1');
+                    }
+                    $datastore->update('smile_replacements');
+                }
+            }
+        }
+
+        bb_die($lang['SMILEY_IMPORT_SUCCESS'] . '<br /><br />' . sprintf($lang['CLICK_RETURN_SMILEADMIN'], '<a href="admin_smilies.php">', '</a>') . '<br /><br />' . sprintf($lang['CLICK_RETURN_ADMIN_INDEX'], '<a href="index.php?pane=right">', '</a>'));
+    } else {
+        // Display the script to get the smile_pak cfg file
+        $smile_paks_select = '<select name="smile_pak"><option value="">' . $lang['SELECT_PAK'] . '</option>';
+        foreach ($smiley_paks as $key => $value) {
+            if (!empty($value)) {
+                $smile_paks_select .= '<option>' . $value . '</option>';
+            }
+        }
+        $smile_paks_select .= '</select>';
+
+        $hidden_vars = '<input type="hidden" name="mode" value="import">';
+
+        $template->assign_vars([
+            'TPL_SMILE_IMPORT' => true,
+
+            'S_SMILEY_ACTION' => 'admin_smilies.php',
+            'S_SMILE_SELECT' => $smile_paks_select,
+            'S_HIDDEN_FIELDS' => $hidden_vars
+        ]);
+    }
+} elseif (isset($_POST['export_pack']) || isset($_GET['export_pack'])) {
+    $export_pack = (string)request_var('export_pack', '');
+
+    if ($export_pack == 'send') {
+        $sql = 'SELECT * FROM ' . BB_SMILIES;
+        if (!$result = DB()->sql_query($sql)) {
+            bb_die('Could not get smiley list');
+        }
+
+        $resultset = DB()->sql_fetchrowset($result);
+
+        $smile_pak = '';
+        for ($i = 0, $iMax = count($resultset); $i < $iMax; $i++) {
+            $smile_pak .= $resultset[$i]['smile_url'] . $delimeter;
+            $smile_pak .= $resultset[$i]['emoticon'] . $delimeter;
+            $smile_pak .= $resultset[$i]['code'] . "\n";
+        }
+
+        header('Content-Type: text/x-delimtext; name="smiles.pak"');
+        header('Content-disposition: attachment; filename=smiles.pak');
+
+        echo $smile_pak;
+
+        exit;
+    }
+
+    bb_die(sprintf($lang['EXPORT_SMILES'], '<a href="admin_smilies.php?export_pack=send">', '</a>') . '<br /><br />' . sprintf($lang['CLICK_RETURN_SMILEADMIN'], '<a href="admin_smilies.php">', '</a>') . '<br /><br />' . sprintf($lang['CLICK_RETURN_ADMIN_INDEX'], '<a href="index.php?pane=right">', '</a>'));
+} elseif (isset($_POST['add']) || isset($_GET['add'])) {
+    $filename_list = '';
+    for ($i = 0, $iMax = count($smiley_images); $i < $iMax; $i++) {
+        $filename_list .= '<option value="' . $smiley_images[$i] . '">' . $smiley_images[$i] . '</option>';
+    }
+
+    $s_hidden_fields = '<input type="hidden" name="mode" value="savenew" />';
+
+    $template->assign_vars([
+        'TPL_SMILE_EDIT' => true,
+        'SMILEY_IMG' => $pathToSmilesDir . '/' . $smiley_images[0],
+        'S_SMILEY_ACTION' => 'admin_smilies.php',
+        'S_HIDDEN_FIELDS' => $s_hidden_fields,
+        'S_FILENAME_OPTIONS' => $filename_list,
+        'S_SMILEY_BASEDIR' => $pathToSmilesDir
+    ]);
+} elseif ($mode != '') {
+    switch ($mode) {
+        case 'delete':
+            $confirmed = isset($_POST['confirm']);
+            $smiley_id = (!empty($_POST['id'])) ? $_POST['id'] : $_GET['id'];
+            $smiley_id = (int)$smiley_id;
+
+            if ($confirmed) {
+                $sql = 'DELETE FROM ' . BB_SMILIES . ' WHERE smilies_id = ' . $smiley_id;
+                $result = DB()->sql_query($sql);
+                if (!$result) {
+                    bb_die('Could not delete smiley');
+                }
+
+                $datastore->update('smile_replacements');
+                bb_die($lang['SMILEY_DEL_SUCCESS'] . '<br /><br />' . sprintf($lang['CLICK_RETURN_SMILEADMIN'], '<a href="admin_smilies.php">', '</a>') . '<br /><br />' . sprintf($lang['CLICK_RETURN_ADMIN_INDEX'], '<a href="index.php?pane=right">', '</a>'));
+            } else {
+                $hidden_fields = '<input type="hidden" name="mode" value="' . $mode . '" />';
+                $hidden_fields .= '<input type="hidden" name="id" value="' . $smiley_id . '" />';
+
+                print_confirmation([
+                    'FORM_ACTION' => 'admin_smilies.php',
+                    'HIDDEN_FIELDS' => $hidden_fields,
+                ]);
+            }
+            break;
+
+        case 'edit':
+            $smiley_id = (!empty($_POST['id'])) ? $_POST['id'] : $_GET['id'];
+            $smiley_id = (int)$smiley_id;
+
+            $sql = 'SELECT * FROM ' . BB_SMILIES . ' WHERE smilies_id = ' . $smiley_id;
+            $result = DB()->sql_query($sql);
+            if (!$result) {
+                bb_die('Could not obtain emoticon information');
+            }
+            $smile_data = DB()->sql_fetchrow($result);
+
+            $filename_list = $smiley_edit_img = '';
+            for ($i = 0, $iMax = count($smiley_images); $i < $iMax; $i++) {
+                if ($smiley_images[$i] == $smile_data['smile_url']) {
+                    $smiley_selected = 'selected';
+                    $smiley_edit_img = $smiley_images[$i];
+                } else {
+                    $smiley_selected = '';
+                }
+                $filename_list .= '<option value="' . $smiley_images[$i] . '"' . $smiley_selected . '>' . $smiley_images[$i] . '</option>';
+            }
+
+            $s_hidden_fields = '<input type="hidden" name="mode" value="save" /><input type="hidden" name="smile_id" value="' . $smile_data['smilies_id'] . '" />';
+
+            $template->assign_vars([
+                'TPL_SMILE_EDIT' => true,
+                'SMILEY_CODE' => $smile_data['code'],
+                'SMILEY_EMOTICON' => $smile_data['emoticon'],
+                'SMILEY_IMG' => $pathToSmilesDir . '/' . $smiley_edit_img,
+                'S_SMILEY_ACTION' => 'admin_smilies.php',
+                'S_HIDDEN_FIELDS' => $s_hidden_fields,
+                'S_FILENAME_OPTIONS' => $filename_list,
+                'S_SMILEY_BASEDIR' => $pathToSmilesDir
+            ]);
+
+            break;
+
+        case 'save':
+            $smile_code = isset($_POST['smile_code']) ? trim($_POST['smile_code']) : trim($_GET['smile_code']);
+            $smile_url = isset($_POST['smile_url']) ? trim($_POST['smile_url']) : trim($_GET['smile_url']);
+            $smile_url = ltrim(basename($smile_url), "'");
+            $smile_emotion = isset($_POST['smile_emotion']) ? trim($_POST['smile_emotion']) : trim($_GET['smile_emotion']);
+            $smile_id = isset($_POST['smile_id']) ? (int)$_POST['smile_id'] : (int)$_GET['smile_id'];
+
+            // If no code was entered complain
+            if ($smile_code == '' || $smile_url == '') {
+                bb_die($lang['FIELDS_EMPTY']);
+            }
+
+            // Convert < and > to proper htmlentities for parsing
+            $smile_code = str_replace(['<', '>'], ['&lt;', '&gt;'], $smile_code);
+
+            // Proceed with updating the smiley table
+            $sql = 'UPDATE ' . BB_SMILIES . "
+				SET code = '" . DB()->escape($smile_code) . "', smile_url = '" . DB()->escape($smile_url) . "', emoticon = '" . DB()->escape($smile_emotion) . "'
+				WHERE smilies_id = $smile_id";
+            if (!($result = DB()->sql_query($sql))) {
+                bb_die('Could not update smilies #2');
+            }
+            $datastore->update('smile_replacements');
+
+            bb_die($lang['SMILEY_EDIT_SUCCESS'] . '<br /><br />' . sprintf($lang['CLICK_RETURN_SMILEADMIN'], '<a href="admin_smilies.php">', '</a>') . '<br /><br />' . sprintf($lang['CLICK_RETURN_ADMIN_INDEX'], '<a href="index.php?pane=right">', '</a>'));
+            break;
+
+        case 'savenew':
+            $smile_code = $_POST['smile_code'] ?? $_GET['smile_code'];
+            $smile_url = $_POST['smile_url'] ?? $_GET['smile_url'];
+            $smile_url = ltrim(basename($smile_url), "'");
+            $smile_emotion = $_POST['smile_emotion'] ?? $_GET['smile_emotion'];
+            $smile_code = trim($smile_code);
+            $smile_url = trim($smile_url);
+            $smile_emotion = trim($smile_emotion);
+
+            // If no code was entered complain
+            if ($smile_code == '' || $smile_url == '') {
+                bb_die($lang['FIELDS_EMPTY']);
+            }
+
+            // Convert < and > to proper htmlentities for parsing
+            $smile_code = str_replace(['<', '>'], ['&lt;', '&gt;'], $smile_code);
+
+            // Save the data to the smiley table
+            $sql = 'INSERT INTO ' . BB_SMILIES . " (code, smile_url, emoticon)
+				VALUES ('" . DB()->escape($smile_code) . "', '" . DB()->escape($smile_url) . "', '" . DB()->escape($smile_emotion) . "')";
+            $result = DB()->sql_query($sql);
+            if (!$result) {
+                bb_die('Could not insert new smiley');
+            }
+            $datastore->update('smile_replacements');
+
+            bb_die($lang['SMILEY_ADD_SUCCESS'] . '<br /><br />' . sprintf($lang['CLICK_RETURN_SMILEADMIN'], '<a href="admin_smilies.php">', '</a>') . '<br /><br />' . sprintf($lang['CLICK_RETURN_ADMIN_INDEX'], '<a href="index.php?pane=right">', '</a>'));
+            break;
+    }
+} else {
+    $sql = 'SELECT * FROM ' . BB_SMILIES;
+    $result = DB()->sql_query($sql);
+    if (!$result) {
+        bb_die('Could not obtain smileys from database');
+    }
+
+    $smilies = DB()->sql_fetchrowset($result);
+
+    $template->assign_vars([
+        'TPL_SMILE_MAIN' => true,
+        'S_HIDDEN_FIELDS' => $s_hidden_fields,
+        'S_SMILEY_ACTION' => 'admin_smilies.php'
+    ]);
+
+    // Loop throuh the rows of smilies setting block vars for the template
+    for ($i = 0, $iMax = count($smilies); $i < $iMax; $i++) {
+        // Replace htmlentites for < and > with actual character
+        $smilies[$i]['code'] = str_replace('&lt;', '<', $smilies[$i]['code']);
+        $smilies[$i]['code'] = str_replace('&gt;', '>', $smilies[$i]['code']);
+
+        $row_class = !($i % 2) ? 'row1' : 'row2';
+
+        $template->assign_block_vars('smiles', [
+            'ROW_CLASS' => $row_class,
+
+            'SMILEY_IMG' => $pathToSmilesDir . '/' . $smilies[$i]['smile_url'],
+            'CODE' => $smilies[$i]['code'],
+            'EMOT' => $smilies[$i]['emoticon'],
+
+            'U_SMILEY_EDIT' => 'admin_smilies.php?mode=edit&amp;id=' . $smilies[$i]['smilies_id'],
+            'U_SMILEY_DELETE' => 'admin_smilies.php?mode=delete&amp;id=' . $smilies[$i]['smilies_id'],
+        ]);
+    }
+}
+
+print_page('admin_smilies.tpl', 'admin');

admin/admin_terms.php

@@ -0,0 +1,32 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+if (!empty($setmodules)) {
+    $module['GENERAL']['TERMS'] = basename(__FILE__);
+    return;
+}
+
+require __DIR__ . '/pagestart.php';
+require INC_DIR . '/bbcode.php';
+
+$preview = isset($_POST['preview']);
+
+if (isset($_POST['post']) && (config()->get('terms') !== $_POST['message'])) {
+    bb_update_config(['terms' => $_POST['message']]);
+    bb_die($lang['TERMS_UPDATED_SUCCESSFULLY'] . '<br /><br />' . sprintf($lang['CLICK_RETURN_TERMS_CONFIG'], '<a href="admin_terms.php">', '</a>') . '<br /><br />' . sprintf($lang['CLICK_RETURN_ADMIN_INDEX'], '<a href="index.php?pane=right">', '</a>'));
+}
+
+$template->assign_vars([
+    'S_ACTION' => 'admin_terms.php',
+    'EXT_LINK_NW' => config()->get('ext_link_new_win'),
+    'MESSAGE' => $preview ? $_POST['message'] : config()->get('terms'),
+    'PREVIEW_HTML' => $preview ? bbcode2html($_POST['message']) : '',
+]);
+
+print_page('admin_terms.tpl', 'admin');

admin/admin_ug_auth.php

@@ -0,0 +1,426 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+if (!empty($setmodules)) {
+    $module['USERS']['PERMISSIONS'] = basename(__FILE__) . '?mode=user';
+    $module['GROUPS']['PERMISSIONS'] = basename(__FILE__) . '?mode=group';
+    return;
+}
+
+require __DIR__ . '/pagestart.php';
+
+$max_forum_name_length = 50;
+
+$yes_sign = '&radic;';
+$no_sign = 'x';
+
+$group_id = isset($_REQUEST[POST_GROUPS_URL]) ? (int)$_REQUEST[POST_GROUPS_URL] : 0;
+$user_id = isset($_REQUEST[POST_USERS_URL]) ? (int)$_REQUEST[POST_USERS_URL] : 0;
+$cat_id = isset($_REQUEST[POST_CAT_URL]) ? (int)$_REQUEST[POST_CAT_URL] : 0;
+$mode = isset($_REQUEST['mode']) ? (string)$_REQUEST['mode'] : '';
+$submit = isset($_REQUEST['submit']);
+
+// Check for demo mode
+if (IN_DEMO_MODE && $submit) {
+    bb_die($lang['CANT_EDIT_IN_DEMO_MODE']);
+}
+
+$group_data = [];
+
+$forum_auth_fields = array(
+    'auth_view',
+    'auth_read',
+    'auth_reply',
+    'auth_edit',
+    'auth_delete',
+    'auth_vote',
+    'auth_pollcreate',
+    'auth_attachments',
+    'auth_download',
+    'auth_post',
+    'auth_sticky',
+    'auth_announce',
+);
+
+if ($submit && $mode == 'user') {
+    $this_user_level = null;
+
+    // Obtain relevant data for this user
+    if (!$row = get_userdata($user_id)) {
+        bb_die($lang['NO_SUCH_USER']);
+    }
+    $this_user_level = $row['user_level'];
+
+    // Get "single_user" group_id for this user
+    $sql = 'SELECT g.group_id
+		FROM ' . BB_USER_GROUP . ' ug, ' . BB_GROUPS . " g
+		WHERE ug.user_id = $user_id
+			AND g.group_id = ug.group_id
+			AND g.group_single_user = 1";
+
+    if ($row = DB()->fetch_row($sql)) {
+        $group_id = $row['group_id'];
+    } else {
+        $group_id = \TorrentPier\Legacy\Group::create_user_group($user_id);
+    }
+
+    if (!$group_id || !$user_id || null === $this_user_level) {
+        trigger_error('data missing', E_USER_ERROR);
+    }
+
+    // Make user an admin (if already user)
+    if (isset($_POST['userlevel'])) {
+        if ($_POST['userlevel'] === 'admin') {
+            if ($userdata['user_id'] == $user_id || $user_id == GUEST_UID || $user_id == BOT_UID) {
+                bb_die($lang['AUTH_GENERAL_ERROR']);
+            }
+
+            DB()->query('UPDATE ' . BB_USERS . ' SET user_level = ' . ADMIN . " WHERE user_id = $user_id");
+
+            // Delete any entries in auth_access, they are not required if user is becoming an admin
+            \TorrentPier\Legacy\Group::delete_permissions($group_id, $user_id);
+
+            $message = $lang['AUTH_UPDATED'] . '<br /><br />';
+            $message .= sprintf($lang['CLICK_RETURN_USERAUTH'], '<a href="admin_ug_auth.php?mode=' . $mode . '&' . POST_USERS_URL . '=' . $user_id . '">', '</a>') . '<br /><br />';
+            $message .= sprintf($lang['CLICK_RETURN_ADMIN_INDEX'], '<a href="index.php?pane=right">', '</a>');
+
+            bb_die($message);
+        } // Make admin a user (if already admin)
+        elseif ($_POST['userlevel'] === 'user') {
+            // ignore if you're trying to change yourself from an admin to user!
+            if ($userdata['user_id'] == $user_id) {
+                bb_die($lang['AUTH_SELF_ERROR']);
+            }
+            // Update users level, reset to USER
+            DB()->query('UPDATE ' . BB_USERS . ' SET user_level = ' . USER . " WHERE user_id = $user_id");
+
+            \TorrentPier\Legacy\Group::delete_permissions($group_id, $user_id);
+
+            $message = $lang['AUTH_UPDATED'] . '<br /><br />';
+            $message .= sprintf($lang['CLICK_RETURN_USERAUTH'], '<a href="admin_ug_auth.php?mode=' . $mode . '&' . POST_USERS_URL . '=' . $user_id . '">', '</a>') . '<br /><br />';
+            $message .= sprintf($lang['CLICK_RETURN_ADMIN_INDEX'], '<a href="index.php?pane=right">', '</a>');
+
+            bb_die($message);
+        }
+    }
+
+    //
+    // Submit new USER permissions
+    //
+    $auth = [];
+
+    if (!empty($_POST['auth']) && is_array($_POST['auth'])) {
+        array_deep($_POST['auth'], 'intval');
+
+        foreach ($_POST['auth'] as $f_id => $bf_ary) {
+            if (array_sum($bf_ary)) {
+                $auth[$f_id] = bit2dec(array_keys($bf_ary, 1));
+            }
+        }
+    }
+
+    \TorrentPier\Legacy\Group::delete_permissions($group_id, null, $cat_id);
+    \TorrentPier\Legacy\Group::store_permissions($group_id, $auth);
+    \TorrentPier\Legacy\Group::update_user_level($user_id);
+
+    $l_auth_return = ($mode == 'user') ? $lang['CLICK_RETURN_USERAUTH'] : $lang['CLICK_RETURN_GROUPAUTH'];
+    $message = $lang['AUTH_UPDATED'] . '<br /><br />';
+    $message .= sprintf($l_auth_return, '<a href="admin_ug_auth.php?mode=' . $mode . '&' . POST_USERS_URL . '=' . $user_id . '">', '</a>') . '<br /><br />';
+    $message .= sprintf($lang['CLICK_RETURN_ADMIN_INDEX'], '<a href="index.php?pane=right">', '</a>');
+
+    bb_die($message);
+}
+//
+// Submit new GROUP permissions
+//
+elseif ($submit && $mode == 'group' && (!empty($_POST['auth']) && is_array($_POST['auth']))) {
+    if (!$group_data = \TorrentPier\Legacy\Group::get_group_data($group_id)) {
+        bb_die($lang['GROUP_NOT_EXIST']);
+    }
+
+    $auth = [];
+    array_deep($_POST['auth'], 'intval');
+
+    foreach ($_POST['auth'] as $f_id => $bf_ary) {
+        if (array_sum($bf_ary)) {
+            $auth[$f_id] = bit2dec(array_keys($bf_ary, 1));
+        }
+    }
+
+    \TorrentPier\Legacy\Group::delete_permissions($group_id, null, $cat_id);
+    \TorrentPier\Legacy\Group::store_permissions($group_id, $auth);
+    \TorrentPier\Legacy\Group::update_user_level('all');
+
+    $l_auth_return = $lang['CLICK_RETURN_GROUPAUTH'];
+    $message = $lang['AUTH_UPDATED'] . '<br /><br />';
+    $message .= sprintf($l_auth_return, '<a href="admin_ug_auth.php?mode=' . $mode . '&' . POST_GROUPS_URL . '=' . $group_id . '">', '</a>') . '<br /><br />';
+    $message .= sprintf($lang['CLICK_RETURN_ADMIN_INDEX'], '<a href="index.php?pane=right">', '</a>');
+
+    bb_die($message);
+}
+
+//
+// Front end (changing permissions)
+//
+if ($mode == 'user' && (!empty($_POST['username']) || $user_id)) {
+    $page_cfg['quirks_mode'] = true;
+
+    if (!empty($_POST['username'])) {
+        $this_userdata = get_userdata($_POST['username'], true);
+        $user_id = $this_userdata['user_id'];
+    } else {
+        $this_userdata = get_userdata($user_id);
+    }
+    if (!$this_userdata) {
+        bb_die($lang['NO_SUCH_USER']);
+    }
+
+    if (!$forums = $datastore->get('cat_forums')) {
+        $datastore->update('cat_forums');
+        $forums = $datastore->get('cat_forums');
+    }
+    $base_url = basename(__FILE__) . "?mode=user&amp;" . POST_USERS_URL . "=$user_id";
+
+    $ug_data = $this_userdata;
+    $ug_data['session_logged_in'] = 1;
+
+    $u_access = auth(AUTH_ALL, AUTH_LIST_ALL, $ug_data, [], UG_PERM_USER_ONLY);
+    $g_access = auth(AUTH_ALL, AUTH_LIST_ALL, $ug_data, [], UG_PERM_GROUP_ONLY);
+
+    foreach ($forums['c'] as $c_id => $c_data) {
+        $template->assign_block_vars('c', array(
+            'CAT_ID' => $c_id,
+            'CAT_TITLE' => $forums['cat_title_html'][$c_id],
+            'CAT_HREF' => "$base_url&amp;" . POST_CAT_URL . "=$c_id",
+        ));
+
+        if (!$c =& $_REQUEST[POST_CAT_URL] or !in_array($c, array('all', $c_id)) or empty($c_data['forums'])) {
+            continue;
+        }
+
+        foreach ($c_data['forums'] as $f_id) {
+            $f_data = $forums['f'][$f_id];
+            $auth_mod = ($u_access[$f_id]['auth_mod'] || $g_access[$f_id]['auth_mod']);
+            $disabled = $g_access[$f_id]['auth_mod'];
+
+            $template->assign_block_vars('c.f', array(
+                'DISABLED' => $disabled,
+                'FORUM_ID' => $f_id,
+                'FORUM_NAME' => str_short($forums['forum_name_html'][$f_id], $max_forum_name_length),
+                'SF_SPACER' => $f_data['forum_parent'] ? HTML_SF_SPACER : '',
+                'IS_MODERATOR' => (bool)$auth_mod,
+                'MOD_STATUS' => $auth_mod ? $lang['MODERATOR'] : $lang['NONE'],
+                'MOD_CLASS' => $auth_mod ? ($disabled ? 'yesDisabled' : 'yesMOD') : 'noMOD',
+                'AUTH_MOD_VAL' => $auth_mod ? 1 : 0,
+            ));
+
+            foreach ($forum_auth_fields as $auth_type) {
+                $bf_num = $bf['forum_perm'][$auth_type];
+                $f_perm = $f_data[$auth_type];
+                $auth_via_acl = ($u_access[$f_id][$auth_type] || $g_access[$f_id][$auth_type]);
+
+                if ($f_perm == AUTH_ACL) {
+                    $disabled = ($auth_mod || $g_access[$f_id][$auth_type]);
+                    $perm_sign = ($auth_via_acl || $auth_mod) ? $yes_sign : $no_sign;
+                    $acl_class = ($auth_via_acl || $auth_mod) ? 'yes' : 'no';
+                } else {
+                    $disabled = true;
+                    $perm_sign = $auth_via_acl ? $yes_sign : $no_sign;
+                    $acl_class = $auth_via_acl ? 'yes' : 'no';
+                }
+
+                $template->assign_block_vars('c.f.acl', array(
+                    'DISABLED' => $disabled,
+                    'PERM_SIGN' => $perm_sign,
+                    'ACL_CLASS' => $acl_class,
+                    'FORUM_ID' => $f_id,
+                    'ACL_TYPE_BF' => $bf_num,
+                    'ACL_VAL' => $auth_via_acl ? 1 : 0,
+                ));
+            }
+        }
+    }
+
+    $template->assign_vars(array(
+        'AUTH_MOD_BF' => AUTH_MOD,
+    ));
+
+    $s_column_span = 2;
+
+    foreach ($forum_auth_fields as $auth_type) {
+        $template->assign_block_vars('acltype', array(
+            'ACL_TYPE_NAME' => preg_replace('#(.{5})#u', "\\1<br />", $lang[strtoupper($auth_type)]),
+            'ACL_TYPE_BF' => $bf['forum_perm'][$auth_type],
+        ));
+        $s_column_span++;
+    }
+
+    unset($forums, $u_access, $g_access);
+    $datastore->rm('cat_forums');
+
+    $s_hidden_fields = '
+		<input type="hidden" name="mode" value="' . $mode . '" />
+		<input type="hidden" name="' . POST_USERS_URL . '" value="' . $user_id . '" />
+	';
+
+    $s_user_type = ($this_userdata['user_level'] == ADMIN) ? '
+		<select name="userlevel">
+			<option value="admin" selected>' . $lang['AUTH_ADMIN'] . '</option>
+			<option value="user">' . $lang['AUTH_USER'] . '</option>
+		</select>
+	' : '
+		<select name="userlevel">
+			<option value="admin">' . $lang['AUTH_ADMIN'] . '</option>
+			<option value="user" selected>' . $lang['AUTH_USER'] . '</option>
+		</select>
+	';
+
+    $template->assign_block_vars('switch_user_auth', []);
+
+    $template->assign_vars(array(
+        'TPL_AUTH_UG_MAIN' => true,
+        'USER_OR_GROUPNAME' => profile_url($this_userdata, true),
+        'USER_LEVEL' => $lang['USER_LEVEL'] . ' : ' . $s_user_type,
+        'T_USER_OR_GROUPNAME' => $lang['USERNAME'],
+        'T_AUTH_TITLE' => $lang['AUTH_CONTROL_USER'],
+        'T_AUTH_EXPLAIN' => $lang['USER_AUTH_EXPLAIN'],
+        'S_COLUMN_SPAN' => $s_column_span,
+        'S_HIDDEN_FIELDS' => $s_hidden_fields,
+    ));
+} elseif ($mode == 'group' && $group_id) {
+    $page_cfg['quirks_mode'] = true;
+
+    if (!$group_data = \TorrentPier\Legacy\Group::get_group_data($group_id)) {
+        bb_die($lang['GROUP_NOT_EXIST']);
+    }
+
+    if (!$forums = $datastore->get('cat_forums')) {
+        $datastore->update('cat_forums');
+        $forums = $datastore->get('cat_forums');
+    }
+    $base_url = basename(__FILE__) . "?mode=group&amp;" . POST_GROUPS_URL . "=$group_id";
+
+    $ug_data = array('group_id' => $group_id);
+    $u_access = auth(AUTH_ALL, AUTH_LIST_ALL, $ug_data);
+
+    foreach ($forums['c'] as $c_id => $c_data) {
+        $template->assign_block_vars('c', array(
+            'CAT_ID' => $c_id,
+            'CAT_TITLE' => $forums['cat_title_html'][$c_id],
+            'CAT_HREF' => "$base_url&amp;" . POST_CAT_URL . "=$c_id",
+        ));
+
+        if (!($c =& $_REQUEST[POST_CAT_URL]) || !in_array($c, array('all', $c_id)) || empty($c_data['forums'])) {
+            continue;
+        }
+
+        foreach ($c_data['forums'] as $f_id) {
+            $f_data = $forums['f'][$f_id];
+            $auth_mod = $u_access[$f_id]['auth_mod'];
+
+            $template->assign_block_vars('c.f', array(
+                'DISABLED' => false,
+                'FORUM_ID' => $f_id,
+                'FORUM_NAME' => str_short($forums['forum_name_html'][$f_id], $max_forum_name_length),
+                'SF_SPACER' => $f_data['forum_parent'] ? HTML_SF_SPACER : '',
+                'IS_MODERATOR' => (bool)$auth_mod,
+                'MOD_STATUS' => $auth_mod ? $lang['MODERATOR'] : $lang['NO'],
+                'MOD_CLASS' => $auth_mod ? 'yesMOD' : 'noMOD',
+                'AUTH_MOD_VAL' => $auth_mod ? 1 : 0,
+            ));
+
+            foreach ($forum_auth_fields as $auth_type) {
+                $bf_num = $bf['forum_perm'][$auth_type];
+                $f_perm = $f_data[$auth_type];
+                $auth_via_acl = $u_access[$f_id][$auth_type];
+
+                if ($f_perm == AUTH_ACL) {
+                    $disabled = $auth_mod;
+                    $perm_sign = ($auth_via_acl || $auth_mod) ? $yes_sign : $no_sign;
+                    $acl_class = ($auth_via_acl || $auth_mod) ? 'yes' : 'no';
+                } else {
+                    $disabled = true;
+                    $perm_sign = $auth_via_acl ? $yes_sign : $no_sign;
+                    $acl_class = $auth_via_acl ? 'yes' : 'no';
+                }
+
+                $template->assign_block_vars('c.f.acl', array(
+                    'DISABLED' => $disabled,
+                    'PERM_SIGN' => $perm_sign,
+                    'ACL_CLASS' => $acl_class,
+                    'FORUM_ID' => $f_id,
+                    'ACL_TYPE_BF' => $bf_num,
+                    'ACL_VAL' => $auth_via_acl ? 1 : 0,
+                ));
+            }
+        }
+    }
+
+    $template->assign_vars(array(
+        'AUTH_MOD_BF' => AUTH_MOD,
+    ));
+
+    $s_column_span = 2;
+
+    foreach ($forum_auth_fields as $auth_type) {
+        $template->assign_block_vars('acltype', array(
+            'ACL_TYPE_NAME' => preg_replace('#(.{5})#u', "\\1<br />", $lang[strtoupper($auth_type)]),
+            'ACL_TYPE_BF' => $bf['forum_perm'][$auth_type],
+        ));
+        $s_column_span++;
+    }
+
+    unset($forums, $ug_data, $u_access);
+    $datastore->rm('cat_forums');
+
+    $s_hidden_fields = '
+		<input type="hidden" name="mode" value="' . $mode . '" />
+		<input type="hidden" name="' . POST_GROUPS_URL . '" value="' . $group_id . '" />
+	';
+
+    $template->assign_vars(array(
+        'TPL_AUTH_UG_MAIN' => true,
+        'T_USER_OR_GROUPNAME' => $lang['GROUP_NAME'],
+        'USER_LEVEL' => false,
+        'T_AUTH_TITLE' => $lang['AUTH_CONTROL_GROUP'],
+        'T_AUTH_EXPLAIN' => $lang['GROUP_AUTH_EXPLAIN'],
+        'USER_OR_GROUPNAME' => ('<span class="gen">' . htmlCHR($group_data['group_name']) . '</span>'),
+        'S_COLUMN_SPAN' => $s_column_span,
+        'S_HIDDEN_FIELDS' => $s_hidden_fields,
+    ));
+} else {
+    // Select a user/group
+    if ($mode == 'user') {
+        $template->assign_vars(array(
+            'TPL_SELECT_USER' => true,
+            'U_SEARCH_USER' => BB_ROOT . 'search.php?mode=searchuser',
+        ));
+    } else {
+        $template->assign_vars(array(
+            'TPL_SELECT_GROUP' => true,
+            'S_GROUP_SELECT' => get_select('groups'),
+        ));
+    }
+
+    $s_hidden_fields = '<input type="hidden" name="mode" value="' . $mode . '" />';
+
+    $template->assign_vars(array(
+        'S_HIDDEN_FIELDS' => $s_hidden_fields,
+    ));
+}
+
+$template->assign_vars(array(
+    'YES_SIGN' => $yes_sign,
+    'NO_SIGN' => $no_sign,
+    'S_AUTH_ACTION' => 'admin_ug_auth.php',
+    'SELECTED_CAT' => !empty($_REQUEST[POST_CAT_URL]) ? $_REQUEST[POST_CAT_URL] : '',
+    'U_ALL_FORUMS' => !empty($base_url) ? "$base_url&amp;" . POST_CAT_URL . "=all" : '',
+));
+
+print_page('admin_ug_auth.tpl', 'admin');

admin/admin_user_ban.php

@@ -0,0 +1,81 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+if (!empty($setmodules)) {
+    $module['USERS']['BAN_MANAGEMENT'] = basename(__FILE__);
+    return;
+}
+
+require __DIR__ . '/pagestart.php';
+
+$submit = isset($_POST['submit']);
+
+// Check for demo mode
+if (IN_DEMO_MODE && $submit) {
+    bb_die($lang['CANT_EDIT_IN_DEMO_MODE']);
+}
+
+if ($submit) {
+    // Ban action
+    if (!empty($_POST['username'])) {
+        if (!$this_userdata = get_userdata($_POST['username'], true)) {
+            bb_die($lang['NO_USER_ID_SPECIFIED'] . '<br /><br />' . sprintf($lang['CLICK_RETURN_BANADMIN'], '<a href="admin_user_ban.php">', '</a>') . '<br /><br />' . sprintf($lang['CLICK_RETURN_ADMIN_INDEX'], '<a href="index.php?pane=right">', '</a>'));
+        }
+
+        if (!getBanInfo((int)$this_userdata['user_id'])) {
+            $sql = 'INSERT INTO ' . BB_BANLIST . ' (ban_userid) VALUES (' . $this_userdata['user_id'] . ')';
+            if (!DB()->sql_query($sql)) {
+                bb_die('Could not insert ban_userid info into database');
+            }
+        }
+    }
+
+    // Unban action
+    $where_sql = '';
+
+    if (!empty($_POST['unban_user'])) {
+        $user_list = $_POST['unban_user'];
+
+        for ($i = 0, $iMax = count($user_list); $i < $iMax; $i++) {
+            if ($user_list[$i] != -1) {
+                $where_sql .= (($where_sql != '') ? ', ' : '') . (int)$user_list[$i];
+            }
+        }
+
+        if ($where_sql != '') {
+            $sql = 'DELETE FROM ' . BB_BANLIST . " WHERE ban_id IN ($where_sql)";
+            if (!DB()->sql_query($sql)) {
+                bb_die('Could not delete ban info from database');
+            }
+        }
+    }
+
+    $datastore->update('ban_list');
+    bb_die($lang['BAN_UPDATE_SUCESSFUL'] . '<br /><br />' . sprintf($lang['CLICK_RETURN_BANADMIN'], '<a href="admin_user_ban.php">', '</a>') . '<br /><br />' . sprintf($lang['CLICK_RETURN_ADMIN_INDEX'], '<a href="index.php?pane=right">', '</a>'));
+} else {
+    $template->assign_vars(['S_BANLIST_ACTION' => 'admin_user_ban.php']);
+
+    $select_userlist = '';
+    foreach (getBanInfo() as $ban) {
+        $select_userlist .= '<option value="' . $ban['ban_id'] . '">' . get_username($ban['ban_userid']) . '</option>';
+    }
+
+    if ($select_userlist == '') {
+        $select_userlist = '<option value="-1">' . $lang['NO_BANNED_USERS'] . '</option>';
+    }
+    $select_userlist = '<select name="unban_user[]" multiple size="5">' . $select_userlist . '</select>';
+
+    $template->assign_vars([
+        'U_SEARCH_USER' => './../search.php?mode=searchuser',
+        'S_UNBAN_USERLIST_SELECT' => $select_userlist,
+        'S_BAN_ACTION' => 'admin_user_ban.php'
+    ]);
+}
+
+print_page('admin_user_ban.tpl', 'admin');

admin/admin_user_search.php

@@ -0,0 +1,937 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+if (!empty($setmodules)) {
+    $module['USERS']['SEARCH'] = basename(__FILE__);
+    return;
+}
+
+require __DIR__ . '/pagestart.php';
+
+array_deep($_POST, 'trim');
+
+$total_sql = '';
+
+if (!isset($_REQUEST['dosearch'])) {
+    $sql = 'SELECT group_id, group_name
+				FROM ' . BB_GROUPS . '
+					WHERE group_single_user = 0
+						ORDER BY group_name ASC';
+
+    if (!$result = DB()->sql_query($sql)) {
+        bb_die('Could not select group data #1');
+    }
+
+    $group_list = '';
+
+    if (DB()->num_rows($result) != 0) {
+        $template->assign_block_vars('groups_exist', []);
+
+        while ($row = DB()->sql_fetchrow($result)) {
+            $group_list .= '<option value="' . $row['group_id'] . '">' . strip_tags(htmlspecialchars($row['group_name'])) . '</option>';
+        }
+    }
+
+    $sql = 'SELECT * FROM ' . BB_RANKS . ' ORDER BY rank_title';
+    if (!($result = DB()->sql_query($sql))) {
+        bb_die('Could not obtain ranks data');
+    }
+    $rank_select_box = '';
+    if (DB()->num_rows($result) != 0) {
+        $template->assign_block_vars('ranks_exist', []);
+        while ($row = DB()->sql_fetchrow($result)) {
+            $rank = $row['rank_title'];
+            $rank_id = $row['rank_id'];
+            $rank_select_box .= '<option value="' . $rank_id . '">' . $rank . '</option>';
+        }
+    }
+
+    $language_list = \TorrentPier\Legacy\Common\Select::language('', 'language_type');
+    $timezone_list = \TorrentPier\Legacy\Common\Select::timezone('', 'timezone_type');
+
+    $sql = 'SELECT f.forum_id, f.forum_name, f.forum_parent, c.cat_id, c.cat_title
+				FROM ( ' . BB_FORUMS . ' AS f INNER JOIN ' . BB_CATEGORIES . ' AS c ON c.cat_id = f.cat_id )
+				ORDER BY c.cat_order, f.forum_order ASC';
+
+    if (!$result = DB()->sql_query($sql)) {
+        bb_die('Could not select forum data');
+    }
+
+    $forums = [];
+    $last_cat_id = -1;
+    $forums_list = '';
+
+    if (DB()->num_rows($result) != 0) {
+        $template->assign_block_vars('forums_exist', []);
+
+        while ($row = DB()->sql_fetchrow($result)) {
+            if ($row['cat_id'] != $last_cat_id) {
+                $forums_list .= '<optgroup label="' . htmlCHR($row['cat_title']) . '">';
+                $last_cat_id = $row['cat_id'];
+            }
+
+            $forums_list .= '<option value="' . $row['forum_id'] . '">' . ($row['forum_parent'] ? HTML_SF_SPACER : '') . htmlCHR($row['forum_name']) . '</option>';
+        }
+    }
+
+    $lastvisited = [1, 7, 14, 30, 60, 120, 365, 500, 730, 1000];
+    $lastvisited_list = '';
+
+    foreach ($lastvisited as $days) {
+        $lastvisited_list .= '<option value="' . $days . '">' . delta_time((TIMENOW - 86400 * $days), TIMENOW, 'days') . '</option>';
+    }
+
+    $template->assign_vars([
+        'TPL_ADMIN_USER_SEARCH_MAIN' => true,
+
+        'YEAR' => date('Y'),
+        'MONTH' => date('m'),
+        'DAY' => date('d'),
+        'GROUP_LIST' => $group_list,
+        'RANK_SELECT_BOX' => $rank_select_box,
+        'LANGUAGE_LIST' => $language_list,
+        'TIMEZONE_LIST' => $timezone_list,
+        'FORUMS_LIST' => $forums_list,
+        'LASTVISITED_LIST' => $lastvisited_list,
+
+        'U_SEARCH_USER' => BB_ROOT . 'search.php?mode=searchuser',
+        'S_SEARCH_ACTION' => 'admin_user_search.php'
+    ]);
+} else {
+    $mode = '';
+
+    // validate mode
+    if (isset($_REQUEST['search_username'])) {
+        $mode = 'search_username';
+    } elseif (isset($_REQUEST['search_email'])) {
+        $mode = 'search_email';
+    } elseif (isset($_REQUEST['search_ip'])) {
+        $mode = 'search_ip';
+    } elseif (isset($_REQUEST['search_joindate'])) {
+        $mode = 'search_joindate';
+    } elseif (isset($_REQUEST['search_group'])) {
+        $mode = 'search_group';
+    } elseif (isset($_REQUEST['search_rank'])) {
+        $mode = 'search_rank';
+    } elseif (isset($_REQUEST['search_postcount'])) {
+        $mode = 'search_postcount';
+    } elseif (isset($_REQUEST['search_userfield'])) {
+        $mode = 'search_userfield';
+    } elseif (isset($_REQUEST['search_lastvisited'])) {
+        $mode = 'search_lastvisited';
+    } elseif (isset($_REQUEST['search_language'])) {
+        $mode = 'search_language';
+    } elseif (isset($_REQUEST['search_timezone'])) {
+        $mode = 'search_timezone';
+    } elseif (isset($_REQUEST['search_moderators'])) {
+        $mode = 'search_moderators';
+    } elseif (isset($_REQUEST['search_misc'])) {
+        $mode = 'search_misc';
+    }
+
+    // validate fields (that they exist)
+    switch ($mode) {
+        case 'search_username':
+            $username = $_REQUEST['username'];
+            if (!$username) {
+                bb_die($lang['SEARCH_INVALID_USERNAME']);
+            }
+            break;
+
+        case 'search_email':
+            $email = $_REQUEST['email'];
+            if (!$email) {
+                bb_die($lang['SEARCH_INVALID_EMAIL']);
+            }
+            break;
+
+        case 'search_ip':
+            $ip_address = $_REQUEST['ip_address'];
+            if (!$ip_address) {
+                bb_die($lang['SEARCH_INVALID_IP']);
+            }
+            break;
+
+        case 'search_joindate':
+            $date_type = $_REQUEST['date_type'];
+            $date_day = $_REQUEST['date_day'];
+            $date_month = $_REQUEST['date_month'];
+            $date_year = $_REQUEST['date_year'];
+            if (!($date_type || $date_day || $date_month || $date_year)) {
+                bb_die($lang['SEARCH_INVALID_DATE']);
+            }
+            break;
+
+        case 'search_group':
+            $group_id = $_REQUEST['group_id'];
+            if (!$group_id) {
+                bb_die($lang['SEARCH_INVALID_GROUP']);
+            }
+            break;
+
+        case 'search_rank':
+            $rank_id = $_REQUEST['rank_id'];
+            if (!$rank_id) {
+                bb_die($lang['SEARCH_INVALID_RANK']);
+            }
+            break;
+
+        case 'search_postcount':
+            $postcount_type = $_REQUEST['postcount_type'];
+            $postcount_value = $_REQUEST['postcount_value'];
+            if (!$postcount_type || (!$postcount_value && $postcount_value != 0)) {
+                bb_die($lang['SEARCH_INVALID_POSTCOUNT']);
+            }
+            break;
+
+        case 'search_userfield':
+            $userfield_type = $_REQUEST['userfield_type'];
+            $userfield_value = $_REQUEST['userfield_value'];
+            if (!$userfield_type || !$userfield_value) {
+                bb_die($lang['SEARCH_INVALID_USERFIELD']);
+            }
+            break;
+
+        case 'search_lastvisited':
+            $lastvisited_days = $_REQUEST['lastvisited_days'];
+            $lastvisited_type = $_REQUEST['lastvisited_type'];
+            if (!$lastvisited_days || !$lastvisited_type) {
+                bb_die($lang['SEARCH_INVALID_LASTVISITED']);
+            }
+            break;
+
+        case 'search_language':
+            $language_type = $_REQUEST['language_type'];
+            if (!$language_type) {
+                bb_die($lang['SEARCH_INVALID_LANGUAGE']);
+            }
+            break;
+
+        case 'search_timezone':
+            $timezone_type = $_REQUEST['timezone_type'];
+            if (!$timezone_type && $timezone_type != 0) {
+                bb_die($lang['SEARCH_INVALID_TIMEZONE']);
+            }
+            break;
+
+        case 'search_moderators':
+            $moderators_forum = $_REQUEST['moderators_forum'];
+            if (!$moderators_forum) {
+                bb_die($lang['SEARCH_INVALID_MODERATORS']);
+            }
+            break;
+
+        case 'search_misc':
+            $misc = $_REQUEST['misc'];
+            if (!$misc) {
+                bb_die($lang['SEARCH_INVALID']);
+            }
+            break;
+
+        default:
+            bb_die('Invalid mode');
+    }
+
+    $base_url = 'admin_user_search.php?dosearch=true';
+
+    $select_sql = 'SELECT u.user_id, u.username, u.user_rank, u.user_email, u.user_posts, u.user_regdate, u.user_level, u.user_active, u.user_lastvisit FROM ' . BB_USERS . ' AS u';
+
+    $lower_b = 'LOWER(';
+    $lower_e = ')';
+
+    // validate data & prepare sql
+    switch ($mode) {
+        case 'search_username':
+            $base_url .= '&search_username=true&username=' . rawurlencode(stripslashes($username));
+
+            $text = sprintf($lang['SEARCH_FOR_USERNAME'], strip_tags(htmlspecialchars(stripslashes($username))));
+
+            $username = str_replace('*', '%', trim(strip_tags(strtolower($username))));
+            if (str_contains($username, '%')) {
+                $op = 'LIKE';
+            } else {
+                $op = '=';
+            }
+
+            if ($username == '') {
+                bb_die($lang['SEARCH_INVALID_USERNAME']);
+            }
+
+            $total_sql .= 'SELECT COUNT(user_id) AS total FROM ' . BB_USERS . " WHERE {$lower_b}username{$lower_e} $op '" . DB()->escape($username) . "' AND user_id <> " . GUEST_UID;
+            $select_sql .= "	WHERE {$lower_b}u.username{$lower_e} $op '" . DB()->escape($username) . "' AND u.user_id <> " . GUEST_UID;
+            break;
+
+        case 'search_email':
+            $base_url .= '&search_email=true&email=' . rawurlencode(stripslashes($email));
+
+            $text = sprintf($lang['SEARCH_FOR_EMAIL'], strip_tags(htmlspecialchars(stripslashes($email))));
+
+            $email = str_replace('*', '%', trim(strip_tags(strtolower($email))));
+            if (str_contains($email, '%')) {
+                $op = 'LIKE';
+            } else {
+                $op = '=';
+            }
+
+            if ($email == '') {
+                bb_die($lang['SEARCH_INVALID_EMAIL']);
+            }
+
+            $total_sql .= 'SELECT COUNT(user_id) AS total FROM ' . BB_USERS . " WHERE {$lower_b}user_email{$lower_e} $op '" . DB()->escape($email) . "' AND user_id <> " . GUEST_UID;
+            $select_sql .= "	WHERE {$lower_b}u.user_email{$lower_e} $op '" . DB()->escape($email) . "' AND u.user_id <> " . GUEST_UID;
+            break;
+
+        case 'search_ip':
+            $base_url .= '&search_ip=true&ip_address=' . rawurlencode(stripslashes($ip_address));
+
+            $ip_address = trim($ip_address);
+
+            $text = sprintf($lang['SEARCH_FOR_IP'], strip_tags(htmlspecialchars(stripslashes($ip_address))));
+
+            unset($users);
+            $users = [];
+
+            if (\TorrentPier\Helpers\IPHelper::isValid($ip_address)) {
+                $ip = \TorrentPier\Helpers\IPHelper::ip2long($ip_address);
+                $users[] = $ip;
+            } else {
+                bb_die($lang['SEARCH_INVALID_IP']);
+            }
+
+            $ip_in_sql = $ip_like_sql = $ip_like_sql_flylast = $ip_like_sql_flyreg = '';
+
+            foreach ($users as $address) {
+                $ip_in_sql .= ($ip_in_sql == '') ? "'$address'" : ", '$address'";
+            }
+
+            $where_sql = '';
+            $where_sql .= ($ip_in_sql != '') ? "poster_ip IN ($ip_in_sql)" : '';
+            $where_sql .= ($ip_like_sql != '') ? ($where_sql != '') ? " OR $ip_like_sql" : (string)$ip_like_sql : '';
+
+            if (!$where_sql) {
+                bb_die('invalid request');
+            }
+
+            // start search
+            $no_result_search = false;
+            $ip_users_sql = '';
+            $sql = 'SELECT poster_id FROM ' . BB_POSTS . ' WHERE poster_id <> ' . GUEST_UID . " AND ($where_sql) GROUP BY poster_id";
+
+            if (!$result = DB()->sql_query($sql)) {
+                bb_die('Could not count users #1');
+            }
+
+            if (DB()->num_rows($result) == 0) {
+                $no_result_search = true;
+            } else {
+                $total_pages['total'] = DB()->num_rows($result);
+                $total_sql = null;
+                $ip_users_sql = '';
+                while ($row = DB()->sql_fetchrow($result)) {
+                    $ip_users_sql .= ($ip_users_sql == '') ? $row['poster_id'] : ', ' . $row['poster_id'];
+                }
+            }
+            $where_sql = '';
+            $where_sql .= ($ip_in_sql != '') ? "user_last_ip IN ($ip_in_sql)" : '';
+            $where_sql .= ($ip_like_sql_flylast != '') ? ($where_sql != '') ? " OR $ip_like_sql_flylast" : (string)$ip_like_sql_flylast : '';
+            $sql = 'SELECT user_id FROM ' . BB_USERS . ' WHERE user_id <> ' . GUEST_UID . " AND ($where_sql) GROUP BY user_id";
+            if (!$result = DB()->sql_query($sql)) {
+                bb_die('Could not count users #2');
+            }
+            if (DB()->num_rows($result) != 0) {
+                if ($no_result_search == true) {
+                    $no_result_search = false;
+                }
+                $total_pages['total'] = DB()->num_rows($result);
+                $total_sql = null;
+                while ($row = DB()->sql_fetchrow($result)) {
+                    $ip_users_sql .= ($ip_users_sql == '') ? $row['user_id'] : ', ' . $row['user_id'];
+                }
+            }
+            $where_sql = '';
+            $where_sql .= ($ip_in_sql != '') ? "user_reg_ip IN ($ip_in_sql)" : '';
+            $where_sql .= ($ip_like_sql_flyreg != '') ? ($where_sql != '') ? " OR $ip_like_sql_flyreg" : (string)$ip_like_sql_flyreg : '';
+            $sql = 'SELECT user_id FROM ' . BB_USERS . ' WHERE user_id <> ' . GUEST_UID . " AND ($where_sql) GROUP BY user_id";
+            if (!$result = DB()->sql_query($sql)) {
+                bb_die('Could not count users #3');
+            }
+            if (DB()->num_rows($result) != 0) {
+                if ($no_result_search == true) {
+                    $no_result_search = false;
+                }
+                $total_pages['total'] = DB()->num_rows($result);
+                $total_sql = null;
+                while ($row = DB()->sql_fetchrow($result)) {
+                    $ip_users_sql .= ($ip_users_sql == '') ? $row['user_id'] : ', ' . $row['user_id'];
+                }
+            }
+            if ($no_result_search == true) {
+                bb_die($lang['SEARCH_NO_RESULTS']);
+            }
+
+            $select_sql .= "	WHERE u.user_id IN ($ip_users_sql)";
+            break;
+
+        case 'search_joindate':
+            $base_url .= '&search_joindate=true&date_type=' . rawurlencode($date_type) . '&date_day=' . rawurlencode($date_day) . '&date_month=' . rawurlencode($date_month) . '&date_year=' . rawurlencode(stripslashes($date_year));
+
+            $date_type = strtolower(trim($date_type));
+
+            if ($date_type != 'before' && $date_type != 'after') {
+                bb_die($lang['SEARCH_INVALID_DATE']);
+            }
+
+            $date_day = (int)$date_day;
+
+            if (!preg_match('/^([1-9]|[0-2][0-9]|3[0-1])$/', $date_day)) {
+                bb_die($lang['SEARCH_INVALID_DAY']);
+            }
+
+            $date_month = (int)$date_month;
+
+            if (!preg_match('/^(0?[1-9]|1[0-2])$/', $date_month)) {
+                bb_die($lang['SEARCH_INVALID_MONTH']);
+            }
+
+            $date_year = (int)$date_year;
+
+            if (!preg_match('/^(20[0-9]{2}|19[0-9]{2})$/', $date_year)) {
+                bb_die($lang['SEARCH_INVALID_YEAR']);
+            }
+
+            $text = sprintf($lang['SEARCH_FOR_DATE'], strip_tags(htmlspecialchars(stripslashes($date_type))), $date_year, $date_month, $date_day);
+
+            $time = mktime(0, 0, 0, $date_month, $date_day, $date_year);
+
+            if ($date_type == 'before') {
+                $arg = '<';
+            } else {
+                $arg = '>';
+            }
+
+            $total_sql .= 'SELECT COUNT(user_id) AS total FROM ' . BB_USERS . " WHERE user_regdate $arg $time AND user_id <> " . GUEST_UID;
+            $select_sql .= "	WHERE u.user_regdate $arg $time AND u.user_id <> " . GUEST_UID;
+            break;
+
+        case 'search_group':
+            $group_id = (int)$group_id;
+
+            $base_url .= '&search_group=true&group_id=' . rawurlencode($group_id);
+
+            if (!$group_id) {
+                bb_die($lang['SEARCH_INVALID_GROUP']);
+            }
+
+            $sql = 'SELECT group_name FROM ' . BB_GROUPS . " WHERE group_id = $group_id AND group_single_user = 0";
+
+            if (!$result = DB()->sql_query($sql)) {
+                bb_die('Could not select group data #2');
+            }
+
+            if (DB()->num_rows($result) == 0) {
+                bb_die($lang['SEARCH_INVALID_GROUP']);
+            }
+
+            $group_name = DB()->sql_fetchrow($result);
+
+            $text = sprintf($lang['SEARCH_FOR_GROUP'], strip_tags(htmlspecialchars($group_name['group_name'])));
+
+            $total_sql .= 'SELECT COUNT(u.user_id) AS total
+							FROM ' . BB_USERS . ' AS u, ' . BB_USER_GROUP . " AS ug
+								WHERE u.user_id = ug.user_id
+										AND ug.group_id = $group_id
+										AND u.user_id <> " . GUEST_UID;
+
+            $select_sql .= ', ' . BB_USER_GROUP . " AS ug
+								WHERE u.user_id = ug.user_id
+										AND ug.group_id = $group_id
+										AND u.user_id <> " . GUEST_UID;
+            break;
+
+        case 'search_rank':
+            $rank_id = (int)$rank_id;
+
+            $base_url .= '&search_rank=true&rank_id=' . rawurlencode($rank_id);
+
+            if (!$rank_id) {
+                bb_die($lang['SEARCH_INVALID_RANK']);
+            }
+
+            $sql = 'SELECT rank_title FROM ' . BB_RANKS . " WHERE rank_id = $rank_id";
+
+            if (!$result = DB()->sql_query($sql)) {
+                bb_die('Could not select rank data');
+            }
+
+            if (DB()->num_rows($result) == 0) {
+                bb_die($lang['SEARCH_INVALID_RANK']);
+            }
+
+            $rank_title = DB()->sql_fetchrow($result);
+
+            $text = sprintf($lang['SEARCH_FOR_RANK'], strip_tags(htmlspecialchars($rank_title['rank_title'])));
+
+            $total_sql .= 'SELECT COUNT(user_id) AS total
+							FROM ' . BB_USERS . "
+								WHERE user_rank = $rank_id
+									AND user_id <> " . GUEST_UID;
+
+            $select_sql .= "	WHERE u.user_rank = $rank_id
+									AND u.user_id <> " . GUEST_UID;
+            break;
+
+        case 'search_postcount':
+            $postcount_type = strtolower(trim($postcount_type));
+            $postcount_value = strtolower(trim($postcount_value));
+
+            $base_url .= '&search_postcount=true&postcount_type=' . rawurlencode($postcount_type) . '&postcount_value=' . rawurlencode(stripslashes($postcount_value));
+
+            switch ($postcount_type) {
+                case 'greater':
+                    $postcount_value = (int)$postcount_value;
+
+                    $text = sprintf($lang['SEARCH_FOR_POSTCOUNT_GREATER'], $postcount_value);
+
+                    $total_sql .= 'SELECT COUNT(user_id) AS total
+									FROM ' . BB_USERS . "
+										WHERE user_posts > $postcount_value
+											AND user_id <> " . GUEST_UID;
+
+                    $select_sql .= "	WHERE u.user_posts > $postcount_value
+											AND u.user_id <> " . GUEST_UID;
+                    break;
+                case 'lesser':
+                    $postcount_value = (int)$postcount_value;
+
+                    $text = sprintf($lang['SEARCH_FOR_POSTCOUNT_LESSER'], $postcount_value);
+
+                    $total_sql .= 'SELECT COUNT(user_id) AS total
+									FROM ' . BB_USERS . "
+										WHERE user_posts < $postcount_value
+											AND user_id <> " . GUEST_UID;
+
+                    $select_sql .= "	WHERE u.user_posts < $postcount_value
+											AND u.user_id <> " . GUEST_UID;
+                    break;
+                case 'equals':
+                    // looking for a -
+                    if (str_contains($postcount_value, '-')) {
+                        $range = preg_split('/[-\s]+/', $postcount_value);
+
+                        $range_begin = (int)$range[0];
+                        $range_end = (int)$range[1];
+
+                        if ($range_begin > $range_end) {
+                            bb_die($lang['SEARCH_INVALID_POSTCOUNT']);
+                        }
+
+                        $text = sprintf($lang['SEARCH_FOR_POSTCOUNT_RANGE'], $range_begin, $range_end);
+
+                        $total_sql .= 'SELECT COUNT(user_id) AS total
+										FROM ' . BB_USERS . "
+											WHERE user_posts >= $range_begin
+												AND user_posts <= $range_end
+												AND user_id <> " . GUEST_UID;
+
+                        $select_sql .= "	WHERE u.user_posts >= $range_begin
+												AND u.user_posts <= $range_end
+												AND u.user_id <> " . GUEST_UID;
+                    } else {
+                        $postcount_value = (int)$postcount_value;
+
+                        $text = sprintf($lang['SEARCH_FOR_POSTCOUNT_EQUALS'], $postcount_value);
+
+                        $total_sql .= 'SELECT COUNT(user_id) AS total
+										FROM ' . BB_USERS . "
+											WHERE user_posts = $postcount_value
+												AND user_id <> " . GUEST_UID;
+
+                        $select_sql .= "	WHERE u.user_posts = $postcount_value
+												AND u.user_id <> " . GUEST_UID;
+                    }
+                    break;
+                default:
+                    bb_die($lang['SEARCH_INVALID']);
+            }
+            break;
+
+        case 'search_userfield':
+            $base_url .= '&search_userfield=true&userfield_type=' . rawurlencode($userfield_type) . '&userfield_value=' . rawurlencode(stripslashes($userfield_value));
+
+            $text = strip_tags(htmlspecialchars(stripslashes($userfield_value)));
+
+            $userfield_value = str_replace('*', '%', trim(strip_tags(strtolower($userfield_value))));
+            if (str_contains($userfield_value, '%')) {
+                $op = 'LIKE';
+            } else {
+                $op = '=';
+            }
+
+            if ($userfield_value == '') {
+                bb_die($lang['SEARCH_INVALID_USERFIELD']);
+            }
+
+            $userfield_type = strtolower(trim($userfield_type));
+
+            switch ($userfield_type) {
+                case 'icq':
+                    $text = sprintf($lang['SEARCH_FOR_USERFIELD_ICQ'], $text);
+                    $field = 'user_icq';
+                    break;
+                case 'skype':
+                    $text = sprintf($lang['SEARCH_FOR_USERFIELD_SKYPE'], $text);
+                    $field = 'user_skype';
+                    break;
+                case 'twitter':
+                    $text = sprintf($lang['SEARCH_FOR_USERFIELD_TWITTER'], $text);
+                    $field = 'user_twitter';
+                    break;
+                case 'website':
+                    $text = sprintf($lang['SEARCH_FOR_USERFIELD_WEBSITE'], $text);
+                    $field = 'user_website';
+                    break;
+                case 'location':
+                    $text = sprintf($lang['SEARCH_FOR_USERFIELD_LOCATION'], $text);
+                    $field = 'user_from';
+                    break;
+                case 'interests':
+                    $text = sprintf($lang['SEARCH_FOR_USERFIELD_INTERESTS'], $text);
+                    $field = 'user_interests';
+                    break;
+                case 'occupation':
+                    $text = sprintf($lang['SEARCH_FOR_USERFIELD_OCCUPATION'], $text);
+                    $field = 'user_occ';
+                    break;
+                default:
+                    bb_die($lang['SEARCH_INVALID']);
+            }
+
+            $total_sql .= 'SELECT COUNT(user_id) AS total
+							FROM ' . BB_USERS . "
+								WHERE {$lower_b}$field{$lower_e} $op '" . DB()->escape($userfield_value) . "'
+									AND user_id <> " . GUEST_UID;
+
+            $select_sql .= "	WHERE {$lower_b}u.$field{$lower_e} $op '" . DB()->escape($userfield_value) . "'
+									AND u.user_id <> " . GUEST_UID;
+            break;
+
+        case 'search_lastvisited':
+            $lastvisited_type = strtolower(trim($lastvisited_type));
+            $lastvisited_days = (int)$lastvisited_days;
+
+            $base_url .= '&search_lastvisited=true&lastvisited_type=' . rawurlencode(stripslashes($lastvisited_type)) . '&lastvisited_days=' . rawurlencode($lastvisited_days);
+
+            $lastvisited_seconds = (TIMENOW - ((($lastvisited_days * 24) * 60) * 60));
+
+            switch ($lastvisited_type) {
+                case 'in':
+                    $text = sprintf($lang['SEARCH_FOR_LASTVISITED_INTHELAST'], delta_time((TIMENOW - 86400 * $lastvisited_days), TIMENOW, 'days'));
+
+                    $total_sql .= 'SELECT COUNT(user_id) AS total
+									FROM ' . BB_USERS . "
+										WHERE user_lastvisit >= $lastvisited_seconds
+											AND user_id <> " . GUEST_UID;
+
+                    $select_sql .= "	WHERE u.user_lastvisit >= $lastvisited_seconds
+											AND u.user_id <> " . GUEST_UID;
+                    break;
+                case 'after':
+                    $text = sprintf($lang['SEARCH_FOR_LASTVISITED_AFTERTHELAST'], delta_time((TIMENOW - 86400 * $lastvisited_days), TIMENOW, 'days'));
+
+                    $total_sql .= 'SELECT COUNT(user_id) AS total
+									FROM ' . BB_USERS . "
+										WHERE user_lastvisit < $lastvisited_seconds
+											AND user_id <> " . GUEST_UID;
+
+                    $select_sql .= "	WHERE u.user_lastvisit < $lastvisited_seconds
+											AND u.user_id <> " . GUEST_UID;
+
+                    break;
+                default:
+                    bb_die($lang['SEARCH_INVALID_LASTVISITED']);
+            }
+            break;
+
+        case 'search_language':
+            $base_url .= '&search_language=true&language_type=' . rawurlencode(stripslashes($language_type));
+
+            $language_type = strtolower(trim(stripslashes($language_type)));
+
+            if ($language_type == '') {
+                bb_die($lang['SEARCH_INVALID_LANGUAGE']);
+            }
+
+            $text = sprintf($lang['SEARCH_FOR_LANGUAGE'], strip_tags(htmlspecialchars($language_type)));
+
+            $total_sql .= 'SELECT COUNT(user_id) AS total
+							FROM ' . BB_USERS . "
+								WHERE user_lang = '" . DB()->escape($language_type) . "'
+									AND user_id <> " . GUEST_UID;
+
+            $select_sql .= "	WHERE u.user_lang = '" . DB()->escape($language_type) . "'
+									AND u.user_id <> " . GUEST_UID;
+            break;
+
+        case 'search_timezone':
+            $base_url .= '&search_timezone=true&timezone_type=' . rawurlencode(stripslashes($timezone_type));
+            $text = sprintf($lang['SEARCH_FOR_TIMEZONE'], strip_tags(htmlspecialchars(stripslashes($timezone_type))));
+
+            $timezone_type = (int)$timezone_type;
+
+            $total_sql .= 'SELECT COUNT(user_id) AS total
+							FROM ' . BB_USERS . "
+								WHERE user_timezone = $timezone_type
+									AND user_id <> " . GUEST_UID;
+
+            $select_sql .= "	WHERE u.user_timezone = $timezone_type
+									AND u.user_id <> " . GUEST_UID;
+            break;
+
+        case 'search_moderators':
+            $base_url .= '&search_moderators=true&moderators_forum=' . rawurlencode(stripslashes($moderators_forum));
+            $moderators_forum = (int)$moderators_forum;
+
+            $sql = 'SELECT forum_name FROM ' . BB_FORUMS . ' WHERE forum_id = ' . $moderators_forum;
+
+            if (!$result = DB()->sql_query($sql)) {
+                bb_die('Could not select forum data');
+            }
+
+            if (DB()->num_rows($result) == 0) {
+                bb_die($lang['SEARCH_INVALID_MODERATORS']);
+            }
+
+            $forum_name = DB()->sql_fetchrow($result);
+
+            $text = sprintf($lang['SEARCH_FOR_MODERATORS'], htmlCHR($forum_name['forum_name']));
+
+            $total_sql .= 'SELECT COUNT(DISTINCT u.user_id) AS total
+							FROM ' . BB_USERS . ' AS u, ' . BB_GROUPS . ' AS g, ' . BB_USER_GROUP . ' AS ug, ' . BB_AUTH_ACCESS . ' AS aa
+								WHERE u.user_id = ug.user_id
+									AND ug.group_id = g.group_id
+									AND	g.group_id = aa.group_id
+									AND aa.forum_id = ' . $moderators_forum . '
+									AND aa.forum_perm & ' . BF_AUTH_MOD . '
+									AND u.user_id <> ' . GUEST_UID;
+
+            $select_sql .= ', ' . BB_GROUPS . ' AS g, ' . BB_USER_GROUP . ' AS ug, ' . BB_AUTH_ACCESS . ' AS aa
+								WHERE u.user_id = ug.user_id
+									AND ug.group_id = g.group_id
+									AND	g.group_id = aa.group_id
+									AND aa.forum_id = ' . $moderators_forum . '
+									AND aa.forum_perm & ' . BF_AUTH_MOD . '
+									AND u.user_id <> ' . GUEST_UID . '
+								GROUP BY u.user_id, u.username, u.user_email, u.user_posts, u.user_regdate, u.user_level, u.user_active, u.user_lastvisit';
+            break;
+
+        case 'search_misc':
+        default:
+            $misc = strtolower(trim($misc));
+
+            $base_url .= '&search_misc=true&misc=' . rawurlencode(stripslashes($misc));
+
+            switch ($misc) {
+                case 'admins':
+                    $text = $lang['SEARCH_FOR_ADMINS'];
+
+                    $total_sql .= 'SELECT COUNT(user_id) AS total
+									FROM ' . BB_USERS . '
+										WHERE user_level = ' . ADMIN . '
+											AND user_id <> ' . GUEST_UID;
+
+                    $select_sql .= '	WHERE u.user_level = ' . ADMIN . '
+											AND u.user_id <> ' . GUEST_UID;
+                    break;
+                case 'mods':
+                    $text = $lang['SEARCH_FOR_MODS'];
+
+                    $total_sql .= 'SELECT COUNT(user_id) AS total
+									FROM ' . BB_USERS . '
+										WHERE user_level = ' . MOD . '
+											AND user_id <> ' . GUEST_UID;
+
+                    $select_sql .= '	WHERE u.user_level = ' . MOD . '
+											AND u.user_id <> ' . GUEST_UID;
+                    break;
+                case 'banned':
+                    $text = $lang['SEARCH_FOR_BANNED'];
+
+                    $total_sql .= 'SELECT COUNT(u.user_id) AS total
+									FROM ' . BB_USERS . ' AS u, ' . BB_BANLIST . ' AS b
+										WHERE u.user_id = b.ban_userid
+											AND u.user_id <> ' . GUEST_UID;
+
+                    $select_sql .= ', ' . BB_BANLIST . ' AS b
+										WHERE u.user_id = b.ban_userid
+											AND u.user_id <> ' . GUEST_UID;
+
+                    break;
+                case 'disabled':
+                    $text = $lang['SEARCH_FOR_DISABLED'];
+
+                    $total_sql .= 'SELECT COUNT(user_id) AS total
+									FROM ' . BB_USERS . '
+										WHERE user_active = 0
+											AND user_id <> ' . GUEST_UID;
+
+                    $select_sql .= '	WHERE u.user_active = 0
+											AND u.user_id <> ' . GUEST_UID;
+
+                    break;
+                default:
+                    bb_die($lang['SEARCH_INVALID']);
+            }
+    }
+
+    $select_sql .= '	ORDER BY ';
+
+    if (isset($_GET['sort'])) {
+        switch (strtolower($_GET['sort'])) {
+            case 'regdate':
+                $sort = 'regdate';
+                $select_sql .= 'u.user_regdate';
+                break;
+
+            case 'posts':
+                $sort = 'posts';
+                $select_sql .= 'u.user_posts';
+                break;
+
+            case 'user_email':
+                $sort = 'user_email';
+                $select_sql .= 'u.user_email';
+                break;
+
+            case 'lastvisit':
+                $sort = 'lastvisit';
+                $select_sql .= 'u.user_lastvisit';
+                break;
+
+            case 'username':
+                $sort = 'username';
+                $select_sql .= 'u.username';
+        }
+    } else {
+        $sort = 'username';
+        $select_sql .= 'u.username';
+    }
+
+    if (isset($_GET['order'])) {
+        $o_order = 'ASC';
+        $order = 'DESC';
+    } else {
+        $o_order = 'DESC';
+        $order = 'ASC';
+    }
+
+    $select_sql .= " $order";
+
+    $page = isset($_GET['page']) ? (int)$_GET['page'] : 0;
+
+    if ($page < 1) {
+        $page = 1;
+    }
+
+    if ($page == 1) {
+        $offset = 0;
+    } else {
+        $offset = (($page - 1) * config()->get('topics_per_page'));
+    }
+
+    $limit = "LIMIT $offset, " . config()->get('topics_per_page');
+
+    $select_sql .= " $limit";
+
+    if (null !== $total_sql) {
+        if (!$result = DB()->sql_query($total_sql)) {
+            bb_die('Could not count users');
+        }
+
+        $total_pages = DB()->sql_fetchrow($result);
+
+        if ($total_pages['total'] == 0) {
+            bb_die($lang['SEARCH_NO_RESULTS']);
+        }
+    }
+    $num_pages = ceil($total_pages['total'] / config()->get('topics_per_page'));
+
+    $pagination = '';
+
+    if ($page > 1) {
+        $pagination .= '<a href="' . $base_url . '&sort=' . $sort . '&order=' . $order . '&page=' . ($page - 1) . '">' . $lang['BACK'] . '</a>';
+    }
+    if ($page < $num_pages) {
+        $pagination .= ($pagination == '') ? '<a href="' . $base_url . '&sort=' . $sort . '&order=' . $order . '&page=' . ($page + 1) . '">' . $lang['NEXT'] . '</a>' : ' | <a href="' . $base_url . '&sort=' . $sort . '&order=' . $order . '&page=' . ($page + 1) . '">' . $lang['NEXT'] . '</a>';
+    }
+    if ($num_pages > 2) {
+        $pagination .= '&nbsp;&nbsp;<input type="text" name="page" maxlength="5" size="2" class="post" />&nbsp;<input type="submit" name="submit" value="' . $lang['GO'] . '" class="post" />';
+    }
+    $template->assign_vars([
+        'TPL_ADMIN_USER_SEARCH_RESULTS' => true,
+
+        'PAGE_NUMBER' => sprintf($lang['PAGE_OF'], $page, $num_pages),
+        'PAGINATION' => $pagination,
+        'NEW_SEARCH' => sprintf($lang['SEARCH_USERS_NEW'], $text, $total_pages['total'], 'admin_user_search.php'),
+
+        'U_USERNAME' => ($sort == 'username') ? "$base_url&sort=$sort&order=$o_order" : "$base_url&sort=username&order=$order",
+        'U_EMAIL' => ($sort == 'user_email') ? "$base_url&sort=$sort&order=$o_order" : "$base_url&sort=user_email&order=$order",
+        'U_POSTS' => ($sort == 'posts') ? "$base_url&sort=$sort&order=$o_order" : "$base_url&sort=posts&order=$order",
+        'U_JOINDATE' => ($sort == 'regdate') ? "$base_url&sort=$sort&order=$o_order" : "$base_url&sort=regdate&order=$order",
+        'U_LASTVISIT' => ($sort == 'lastvisit') ? "$base_url&sort=$sort&order=$o_order" : "$base_url&sort=lastvisit&order=$order",
+
+        'S_POST_ACTION' => "$base_url&sort=$sort&order=$order"
+    ]);
+
+    if (!$result = DB()->sql_query($select_sql)) {
+        bb_die('Could not select user data');
+    }
+
+    $rowset = DB()->sql_fetchrowset($result);
+
+    $users_sql = '';
+
+    foreach ($rowset as $array) {
+        $users_sql .= ($users_sql == '') ? $array['user_id'] : ', ' . $array['user_id'];
+    }
+
+    $sql = 'SELECT ban_userid AS user_id FROM ' . BB_BANLIST . " WHERE ban_userid IN ($users_sql)";
+
+    if (!$result = DB()->sql_query($sql)) {
+        bb_die('Could not select banned data');
+    }
+
+    unset($banned);
+
+    $banned = [];
+
+    while ($row = DB()->sql_fetchrow($result)) {
+        $banned[$row['user_id']] = true;
+    }
+
+    for ($i = 0, $iMax = count($rowset); $i < $iMax; $i++) {
+        $row_class = !($i % 2) ? 'row1' : 'row2';
+
+        $template->assign_block_vars('userrow', [
+            'ROW_CLASS' => $row_class,
+            'USER' => profile_url($rowset[$i], true),
+            'EMAIL' => $rowset[$i]['user_email'],
+            'JOINDATE' => bb_date($rowset[$i]['user_regdate']),
+            'LASTVISIT' => $rowset[$i]['user_lastvisit'] ? bb_date($rowset[$i]['user_lastvisit']) : $lang['NEVER'],
+            'POSTS' => $rowset[$i]['user_posts'],
+            'BAN' => (!isset($banned[$rowset[$i]['user_id']])) ? $lang['NOT_BANNED'] : $lang['BANNED'],
+            'ABLED' => $rowset[$i]['user_active'] ? $lang['ENABLED'] : $lang['DISABLED'],
+
+            'U_VIEWPOSTS' => "../search.php?search_author=1&amp;uid={$rowset[$i]['user_id']}",
+            'U_MANAGE' => '../profile.php?mode=editprofile&' . POST_USERS_URL . '=' . $rowset[$i]['user_id'] . '&admin=1',
+            'U_PERMISSIONS' => 'admin_ug_auth.php?mode=user&' . POST_USERS_URL . '=' . $rowset[$i]['user_id'],
+        ]);
+    }
+}
+
+print_page('admin_user_search.tpl', 'admin');

admin/admin_words.php

@@ -0,0 +1,138 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+if (!empty($setmodules)) {
+    $module['GENERAL']['WORD_CENSOR'] = basename(__FILE__);
+    return;
+}
+
+require __DIR__ . '/pagestart.php';
+
+if (!config()->get('use_word_censor')) {
+    bb_die('Word censor disabled <br /><br /> (use_word_censor in config.php)');
+}
+
+$mode = request_var('mode', '');
+$mode = htmlspecialchars($mode);
+
+if (isset($_POST['add'])) {
+    $mode = 'add';
+} elseif (isset($_POST['save'])) {
+    $mode = 'save';
+}
+
+if ($mode != '') {
+    if ($mode == 'edit' || $mode == 'add') {
+        $word_id = (int)request_var('id', 0);
+
+        $s_hidden_fields = $word = $replacement = '';
+
+        if ($mode == 'edit') {
+            if ($word_id) {
+                $sql = 'SELECT * FROM ' . BB_WORDS . " WHERE word_id = $word_id";
+                if (!$result = DB()->sql_query($sql)) {
+                    bb_die('Could not query words table #1');
+                }
+
+                $word_info = DB()->sql_fetchrow($result);
+                $s_hidden_fields .= '<input type="hidden" name="id" value="' . $word_id . '" />';
+                $word = $word_info['word'];
+                $replacement = $word_info['replacement'];
+            } else {
+                bb_die($lang['NO_WORD_SELECTED']);
+            }
+        }
+
+        $template->assign_vars([
+            'TPL_ADMIN_WORDS_EDIT' => true,
+            'WORD' => $word,
+            'REPLACEMENT' => $replacement,
+            'S_WORDS_ACTION' => 'admin_words.php',
+            'S_HIDDEN_FIELDS' => $s_hidden_fields,
+        ]);
+    } elseif ($mode == 'save') {
+        $word_id = (int)request_var('id', 0);
+        $word = trim(request_var('word', ''));
+        $replacement = trim(request_var('replacement', ''));
+
+        if ($word == '' || $replacement == '') {
+            bb_die($lang['MUST_ENTER_WORD']);
+        }
+
+        if ($word_id) {
+            $sql = 'UPDATE ' . BB_WORDS . "
+				SET word = '" . DB()->escape($word) . "', replacement = '" . DB()->escape($replacement) . "'
+				WHERE word_id = $word_id";
+            $message = $lang['WORD_UPDATED'];
+        } else {
+            $sql = 'INSERT INTO ' . BB_WORDS . " (word, replacement)
+				VALUES ('" . DB()->escape($word) . "', '" . DB()->escape($replacement) . "')";
+            $message = $lang['WORD_ADDED'];
+        }
+
+        if (!$result = DB()->sql_query($sql)) {
+            bb_die('Could not insert data into words table');
+        }
+
+        $datastore->update('censor');
+        censor()->reload(); // Reload the singleton instance with updated words
+        $message .= '<br /><br />' . sprintf($lang['CLICK_RETURN_WORDADMIN'], '<a href="admin_words.php">', '</a>') . '<br /><br />' . sprintf($lang['CLICK_RETURN_ADMIN_INDEX'], '<a href="index.php?pane=right">', '</a>');
+
+        bb_die($message);
+    } elseif ($mode == 'delete') {
+        $word_id = (int)request_var('id', 0);
+
+        if ($word_id) {
+            $sql = 'DELETE FROM ' . BB_WORDS . " WHERE word_id = $word_id";
+
+            if (!$result = DB()->sql_query($sql)) {
+                bb_die('Could not remove data from words table');
+            }
+
+            $datastore->update('censor');
+            censor()->reload(); // Reload the singleton instance with updated words
+
+            bb_die($lang['WORD_REMOVED'] . '<br /><br />' . sprintf($lang['CLICK_RETURN_WORDADMIN'], '<a href="admin_words.php">', '</a>') . '<br /><br />' . sprintf($lang['CLICK_RETURN_ADMIN_INDEX'], '<a href="index.php?pane=right">', '</a>'));
+        } else {
+            bb_die($lang['NO_WORD_SELECTED']);
+        }
+    }
+} else {
+    $sql = 'SELECT * FROM ' . BB_WORDS . ' ORDER BY word';
+    if (!$result = DB()->sql_query($sql)) {
+        bb_die('Could not query words table #2');
+    }
+
+    $word_rows = DB()->sql_fetchrowset($result);
+    $word_count = count($word_rows);
+
+    $template->assign_vars([
+        'TPL_ADMIN_WORDS_LIST' => true,
+        'S_WORDS_ACTION' => 'admin_words.php',
+        'S_HIDDEN_FIELDS' => ''
+    ]);
+
+    for ($i = 0; $i < $word_count; $i++) {
+        $word = $word_rows[$i]['word'];
+        $replacement = $word_rows[$i]['replacement'];
+        $word_id = $word_rows[$i]['word_id'];
+
+        $row_class = !($i % 2) ? 'row1' : 'row2';
+
+        $template->assign_block_vars('words', [
+            'ROW_CLASS' => $row_class,
+            'WORD' => $word,
+            'REPLACEMENT' => $replacement,
+            'U_WORD_EDIT' => "admin_words.php?mode=edit&amp;id=$word_id",
+            'U_WORD_DELETE' => "admin_words.php?mode=delete&amp;id=$word_id"
+        ]);
+    }
+}
+
+print_page('admin_words.tpl', 'admin');

admin/index.php

@@ -0,0 +1,228 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+require __DIR__ . '/pagestart.php';
+
+// Statistics
+if (!$stats = $datastore->get('stats')) {
+    $datastore->update('stats');
+    $stats = $datastore->get('stats');
+}
+
+// Check for updates
+if (!$update_data = $datastore->get('check_updates')) {
+    $datastore->update('check_updates');
+    $update_data = $datastore->get('check_updates');
+}
+
+// Generate relevant output
+if (isset($_GET['pane']) && $_GET['pane'] == 'left') {
+    $module = [];
+
+    // Scan modules
+    if (!CACHE('bb_cache')->get('admin_module_' . $user->id)) {
+        $dir = opendir('.');
+        $setmodules = true;
+        while ($file = readdir($dir)) {
+            if (preg_match('/^admin_.*?\.php$/', $file)) {
+                include './' . $file;
+            }
+        }
+        unset($setmodules);
+        closedir($dir);
+
+        // Set modules into cache
+        CACHE('bb_cache')->set('admin_module_' . $user->id, $module, 600);
+    }
+
+    // Get modules from cache
+    $module = CACHE('bb_cache')->get('admin_module_' . $user->id);
+
+    $template->assign_vars([
+        'TPL_ADMIN_NAVIGATE' => true,
+        'U_FORUM_INDEX' => '../index.php',
+        'U_ADMIN_INDEX' => 'index.php?pane=right',
+    ]);
+
+    ksort($module);
+
+    foreach ($module as $cat => $action_array) {
+        $cat = (!empty($lang[$cat])) ? $lang[$cat] : str_replace("_", ' ', $cat);
+
+        $template->assign_block_vars('catrow', [
+            'ADMIN_CATEGORY' => $cat,
+        ]);
+
+        ksort($action_array);
+
+        $row_count = 0;
+        foreach ($action_array as $action => $file) {
+            $row_class = !($row_count % 2) ? 'row1' : 'row2';
+
+            $action = (!empty($lang[$action])) ? $lang[$action] : str_replace("_", ' ', $action);
+
+            $template->assign_block_vars('catrow.modulerow', [
+                'ROW_CLASS' => $row_class,
+                'ADMIN_MODULE' => $action,
+                'U_ADMIN_MODULE' => $file,
+            ]);
+            $row_count++;
+        }
+    }
+} elseif (isset($_GET['pane']) && $_GET['pane'] == 'right') {
+    $template->assign_vars([
+        'TPL_ADMIN_MAIN' => true,
+        'ADMIN_LOCK' => (bool)config()->get('board_disable'),
+        'ADMIN_LOCK_CRON' => is_file(BB_DISABLED),
+    ]);
+
+    // Check for updates
+    if (isset($update_data['available_update'])) {
+        $template->assign_block_vars('updater', [
+            'UPDATE_AVAILABLE' => $update_data['available_update'],
+            'NEW_VERSION_NUMBER' => $update_data['latest_version'],
+            'NEW_VERSION_SIZE' => $update_data['latest_version_size'],
+            'NEW_VERSION_DL_LINK' => $update_data['latest_version_dl_link'],
+            'NEW_VERSION_LINK' => $update_data['latest_version_link'],
+            'NEW_VERSION_HASH' => $update_data['latest_version_checksum']
+        ]);
+    }
+
+    // Get forum statistics
+    $total_posts = $stats['postcount'];
+    $total_topics = $stats['topiccount'];
+    $total_users = $stats['usercount'];
+    $start_date = bb_date(config()->get('board_startdate'));
+    $boarddays = (TIMENOW - config()->get('board_startdate')) / 86400;
+
+    $posts_per_day = sprintf('%.2f', $total_posts / $boarddays);
+    $topics_per_day = sprintf('%.2f', $total_topics / $boarddays);
+    $users_per_day = sprintf('%.2f', $total_users / $boarddays);
+
+    $avatar_dir_size = 0;
+
+    if ($avatar_dir = opendir(config()->get('avatars.upload_path'))) {
+        while ($file = readdir($avatar_dir)) {
+            if ($file != '.' && $file != '..') {
+                $avatar_dir_size += @filesize(config()->get('avatars.upload_path') . $file);
+            }
+        }
+        closedir($avatar_dir);
+
+        $avatar_dir_size = humn_size($avatar_dir_size);
+    } else {
+        $avatar_dir_size = $lang['NOT_AVAILABLE'];
+    }
+
+    if ((int)$posts_per_day > $total_posts) {
+        $posts_per_day = $total_posts;
+    }
+
+    if ((int)$topics_per_day > $total_topics) {
+        $topics_per_day = $total_topics;
+    }
+
+    if ($users_per_day > $total_users) {
+        $users_per_day = $total_users;
+    }
+
+    $template->assign_vars([
+        'NUMBER_OF_POSTS' => $total_posts,
+        'NUMBER_OF_TOPICS' => $total_topics,
+        'NUMBER_OF_USERS' => $total_users,
+        'START_DATE' => $start_date,
+        'POSTS_PER_DAY' => $posts_per_day,
+        'TOPICS_PER_DAY' => $topics_per_day,
+        'USERS_PER_DAY' => $users_per_day,
+        'AVATAR_DIR_SIZE' => $avatar_dir_size,
+    ]);
+
+    if (isset($_GET['users_online'])) {
+        $template->assign_vars([
+            'SHOW_USERS_ONLINE' => true,
+        ]);
+
+        // Get users online information.
+        $sql = 'SELECT u.user_id, u.username, u.user_rank, s.session_time AS user_session_time, u.user_opt, s.session_logged_in, s.session_ip, s.session_start
+			FROM ' . BB_USERS . ' u, ' . BB_SESSIONS . ' s
+			WHERE s.session_logged_in = 1
+				AND u.user_id = s.session_user_id
+				AND u.user_id <> ' . GUEST_UID . '
+				AND s.session_time >= ' . (TIMENOW - 300) . '
+			ORDER BY s.session_ip ASC, s.session_time DESC';
+        if (!$result = DB()->sql_query($sql)) {
+            bb_die('Could not obtain reged user / online information');
+        }
+        $onlinerow_reg = DB()->sql_fetchrowset($result);
+
+        // Get guests online information.
+        $sql = 'SELECT session_logged_in, session_time, session_ip, session_start
+			FROM ' . BB_SESSIONS . '
+			WHERE session_logged_in = 0
+				AND session_time >= ' . (TIMENOW - 300) . '
+			ORDER BY session_ip ASC, session_time DESC';
+        if (!$result = DB()->sql_query($sql)) {
+            bb_die('Could not obtain guest user / online information');
+        }
+        $onlinerow_guest = DB()->sql_fetchrowset($result);
+
+        // Reg users
+        if (count($onlinerow_reg)) {
+            $users_count = 0;
+
+            for ($i = 0, $iMax = count($onlinerow_reg); $i < $iMax; $i++) {
+                $users_count++;
+                $row_class = 'row1';
+                $reg_ip = \TorrentPier\Helpers\IPHelper::long2ip_extended($onlinerow_reg[$i]['session_ip']);
+
+                $template->assign_block_vars('reg_user_row', [
+                    'ROW_CLASS' => $row_class,
+                    'USER' => profile_url($onlinerow_reg[$i], true),
+                    'STARTED' => bb_date($onlinerow_reg[$i]['session_start'], 'd-M-Y H:i', false),
+                    'LASTUPDATE' => bb_date($onlinerow_reg[$i]['user_session_time'], 'd-M-Y H:i', false),
+                    'IP_ADDRESS' => $reg_ip,
+                    'U_WHOIS_IP' => config()->get('whois_info') . $reg_ip,
+                ]);
+            }
+        }
+
+        // Guest users
+        if (count($onlinerow_guest)) {
+            $guest_users = 0;
+
+            for ($i = 0, $iMax = count($onlinerow_guest); $i < $iMax; $i++) {
+                $guest_users++;
+                $row_class = 'row2';
+                $guest_ip = \TorrentPier\Helpers\IPHelper::long2ip_extended($onlinerow_guest[$i]['session_ip']);
+
+                $template->assign_block_vars('guest_user_row', [
+                    'ROW_CLASS' => $row_class,
+                    'STARTED' => bb_date($onlinerow_guest[$i]['session_start'], 'd-M-Y H:i', false),
+                    'LASTUPDATE' => bb_date($onlinerow_guest[$i]['session_time'], 'd-M-Y H:i', false),
+                    'IP_ADDRESS' => $guest_ip,
+                    'U_WHOIS_IP' => config()->get('whois_info') . $guest_ip,
+                ]);
+            }
+        }
+    } else {
+        $template->assign_vars([
+            'USERS_ONLINE_HREF' => 'index.php?pane=right&users_online=1',
+        ]);
+    }
+} else {
+    // Generate frameset
+    $template->assign_vars([
+        'CONTENT_ENCODING' => DEFAULT_CHARSET,
+        'TPL_ADMIN_FRAMESET' => true,
+    ]);
+    send_no_cache_headers();
+    print_page('index.tpl', 'admin', 'no_header');
+}
+
+print_page('index.tpl', 'admin');

admin/pagestart.php

@@ -0,0 +1,30 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+define('BB_ROOT', './../');
+define('IN_ADMIN', true);
+
+require dirname(__DIR__) . '/common.php';
+require ATTACH_DIR . '/attachment_mod.php';
+require ATTACH_DIR . '/includes/functions_admin.php';
+
+$user->session_start();
+
+if (IS_GUEST) {
+    redirect(LOGIN_URL . '?redirect=admin/index.php');
+}
+
+if (!IS_ADMIN) {
+    bb_die($lang['NOT_ADMIN']);
+}
+
+if (!$userdata['session_admin']) {
+    $redirect = url_arg($_SERVER['REQUEST_URI'], 'admin', 1);
+    redirect(LOGIN_URL . "?redirect=$redirect");
+}

admin/stats/tr_stats.php

@@ -0,0 +1,46 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+define('BB_ROOT', './../../');
+define('IN_ADMIN', true);
+
+require BB_ROOT . 'common.php';
+
+$user->session_start();
+
+if (!IS_ADMIN) {
+    bb_die($lang['NOT_AUTHORISED']);
+}
+
+$sql[] = 'SELECT count(*) FROM `' . BB_USERS . '` WHERE `user_lastvisit` < UNIX_TIMESTAMP()-2592000 AND user_id NOT IN (' . EXCLUDED_USERS . ')';
+$sql[] = 'SELECT count(*) FROM `' . BB_USERS . '` WHERE `user_lastvisit` < UNIX_TIMESTAMP()-7776000 AND user_id NOT IN (' . EXCLUDED_USERS . ')';
+$sql[] = 'SELECT round(avg(size)) FROM `' . BB_BT_TORRENTS . '`';
+$sql[] = 'SELECT count(*) FROM `' . BB_BT_TORRENTS . '`';
+$sql[] = 'SELECT count(distinct(topic_id)) FROM `' . BB_BT_TRACKER_SNAP . '` WHERE seeders > 0';
+$sql[] = 'SELECT count(distinct(topic_id)) FROM `' . BB_BT_TRACKER_SNAP . '` WHERE seeders > 5';
+$sql[] = 'SELECT count(distinct(poster_id)) FROM `' . BB_BT_TORRENTS . '`';
+$sql[] = 'SELECT count(distinct(poster_id)) FROM `' . BB_BT_TORRENTS . '` WHERE reg_time >= UNIX_TIMESTAMP()-2592000';
+
+echo '<html><body><head></head>';
+echo '<br /><br /><table border="1" cellspacing="0" cellpadding="6" align="center">';
+
+foreach ($sql as $i => $query) {
+    $result = DB()->fetch_row($query);
+    $row = array_values($result)[0]; // Get first column value
+    $row = ($i == 2) ? humn_size($row) : $row;
+    echo "<tr><td>{$lang['TR_STATS'][$i]}</td><td><b>$row</b></td>";
+}
+
+echo '</table>';
+echo '<div align="center"><pre>';
+
+echo 'gen time: <b>' . sprintf('%.3f', array_sum(explode(' ', microtime())) - TIMESTART) . "</b> sec\n";
+
+echo '</pre></div>';
+echo '</body></html>';

admin/stats/tracker.php

@@ -0,0 +1,182 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+define('BB_ROOT', './../../');
+define('IN_ADMIN', true);
+
+require BB_ROOT . 'common.php';
+
+$user->session_start();
+
+if (!IS_ADMIN) {
+    bb_die($lang['NOT_AUTHORISED']);
+}
+
+$peers_in_last_minutes = [30, 15, 5, 1];
+$peers_in_last_sec_limit = 300;
+
+$announce_interval = (int)config()->get('announce_interval');
+$stat = [];
+
+define('TMP_TRACKER_TABLE', 'tmp_tracker');
+
+DB()->query('
+	CREATE TEMPORARY TABLE ' . TMP_TRACKER_TABLE . " (
+		`topic_id` mediumint(8) unsigned NOT NULL default '0',
+		`user_id` mediumint(9) NOT NULL default '0',
+		`ip` char(42) binary default '0',
+		`ipv6` char(42) binary default '0',
+		`peer_id` char(20) binary default '0',
+		`seeder` tinyint(1) NOT NULL default '0',
+		`speed_up` mediumint(8) unsigned NOT NULL default '0',
+		`speed_down` mediumint(8) unsigned NOT NULL default '0',
+		`update_time` int(11) NOT NULL default '0'
+	)
+	SELECT
+		topic_id, user_id, ip, ipv6, peer_id, seeder, speed_up, speed_down, update_time
+	FROM " . BB_BT_TRACKER . '
+');
+
+// Peers within announce interval
+$stat += DB()->fetch_row('SELECT COUNT(*) AS p_within_ann FROM ' . TMP_TRACKER_TABLE . ' WHERE update_time >= ' . (TIMENOW - $announce_interval));
+// All peers, "max_peer_time"
+$stat += DB()->fetch_row('SELECT COUNT(*) AS p_all, SUM(speed_up) as speed_up, SUM(speed_down) as speed_down, UNIX_TIMESTAMP() - MIN(update_time) AS max_peer_time, UNIX_TIMESTAMP() - MAX(update_time) AS last_peer_time FROM ' . TMP_TRACKER_TABLE);
+// Active users
+$stat += DB()->fetch_row('SELECT COUNT(DISTINCT user_id) AS u_bt_active FROM ' . TMP_TRACKER_TABLE);
+// All bt-users
+$stat += DB()->fetch_row('SELECT COUNT(*) AS u_bt_all FROM ' . BB_BT_USERS);
+// All bb-users
+$stat += DB()->fetch_row('SELECT COUNT(*) AS u_bb_all FROM ' . BB_USERS . ' WHERE user_id != ' . BOT_UID);
+// Active torrents
+$stat += DB()->fetch_row('SELECT COUNT(DISTINCT topic_id) AS tor_active FROM ' . TMP_TRACKER_TABLE);
+// With seeder
+$stat += DB()->fetch_row('SELECT COUNT(DISTINCT topic_id) AS tor_with_seeder FROM ' . TMP_TRACKER_TABLE . ' WHERE seeder = 1');
+// All torrents
+$stat += DB()->fetch_row('SELECT COUNT(*) AS tor_all, SUM(size) AS torrents_size FROM ' . BB_BT_TORRENTS);
+
+// Last xx minutes
+$peers_in_last_min = [];
+foreach ($peers_in_last_minutes as $t) {
+    $row = DB()->fetch_row('
+		SELECT COUNT(*) AS peers FROM ' . TMP_TRACKER_TABLE . ' WHERE update_time >= ' . (TIMENOW - 60 * $t) . '
+	');
+    $peers_in_last_min[$t] = (int)$row['peers'];
+}
+// Last xx seconds
+$peers_in_last_sec = [];
+$rowset = DB()->fetch_rowset('SELECT COUNT(*) AS peers FROM ' . TMP_TRACKER_TABLE . ' ORDER BY update_time DESC LIMIT ' . $peers_in_last_sec_limit);
+foreach ($rowset as $cnt => $row) {
+    $peers_in_last_sec[] = sprintf('%3s', $row['peers']) . (($cnt && !(++$cnt % 15)) ? "  \n" : '');
+}
+
+// Detailed statistics for peer clients
+
+$client_list = '';
+$clients_percentage = [];
+$numwant = !empty($_GET['client_numwant']) ? (int)$_GET['client_numwant'] : 100;
+$client_full = !empty($_GET['client_length']) ? (int)$_GET['client_length'] : false;
+
+if ($client_full || !$stats_cache = CACHE('tr_cache')->get('tracker_clients_stats')) {
+
+    $rowset = DB()->fetch_rowset('SELECT peer_id AS client FROM ' . TMP_TRACKER_TABLE);
+
+    if (!empty($rowset)) {
+
+        $client_count = 0;
+
+        foreach ($rowset as $cnt => $row) {
+            $clientString = $client_full ? substr($row['client'], 0, $client_full) : substr($row['client'], 0, 3);
+            if (!isset($clients[$clientString])) {
+                $clients[$clientString] = 1;
+            } else {
+                $clients[$clientString]++;
+            }
+            $client_count++;
+        }
+
+        arsort($clients, SORT_NUMERIC);
+        foreach ($clients as $client => $count) {
+            $percentage = number_format(($count / $client_count) * 100, 2);
+            $clients_percentage[$client] = "[$count] => $percentage%";
+        }
+
+        if (!$client_full) {
+            CACHE('tr_cache')->set('tracker_clients_stats', $clients_percentage, 3600);
+        }
+    }
+} else {
+    $clients_percentage = $stats_cache;
+}
+
+$n = 1;
+foreach (array_slice($clients_percentage, 0, $numwant) as $client => $value) {
+    $client_list .= ($client_full) ? ("$client => $value<br/>") : "$n. " . get_user_torrent_client($client) . " $value<br/>";
+    $n++;
+}
+
+function commify_callback($matches)
+{
+    return commify($matches[0]);
+}
+
+function commify_ob($contents)
+{
+    return preg_replace_callback("#\b\d+\b#", 'commify_callback', $contents);
+}
+
+ob_start('commify_ob');
+
+echo '<html><body><head></head>';
+echo '<br /><br /><table border="1" cellspacing="0" cellpadding="6" align="center"><col width="40%"><col width="60%">';
+echo "\n<tr><td align=center> users: bb-all / bt-all / bt-active </td><td align=center> $stat[u_bb_all] / $stat[u_bt_all] / <b>$stat[u_bt_active]</b> </td></tr>\n";
+
+echo "\n
+	<tr><td align=center> torrents:  all / active / with seeder </td>
+	<td align=center>
+		$stat[tor_all] / <b>$stat[tor_active]</b> / $stat[tor_with_seeder]
+		&nbsp;
+		[ " . humn_size($stat['torrents_size']) . " ]
+	</td></tr>
+\n";
+
+echo "\n
+	<tr><td align=center> peers: all ($stat[max_peer_time] s) / in ann interval ($announce_interval s) </td>
+	<td align=center>
+		$stat[p_all] / <b>$stat[p_within_ann]</b>
+		&nbsp;
+		[ up:   " . humn_size($stat['speed_up']) . '/s,
+		  down: ' . humn_size($stat['speed_down']) . "/s ]
+	</td></tr>
+\n";
+
+echo "\n<tr><td align=center> peers: in last " . implode(' / ', $peers_in_last_minutes) . " min</td>\n";
+echo "\n<td align=center>" . implode(' / ', $peers_in_last_min) . "</td></tr>\n";
+echo "\n<tr><td align=center> peers in last $peers_in_last_sec_limit sec <br /> [ per second, DESC order --> ] <br /> last peer: $stat[last_peer_time] seconds ago <br /> " . date('j M H:i:s [T O]') . " </td>\n";
+echo '<td align=center style="font-size: 13px; font-family: \'Courier New\',Courier,monospace;"><pre> ' . implode(' ', $peers_in_last_sec) . "</pre></td></tr>\n";
+echo "\n
+	<tr><td align=center> clients: </td>
+	<td align=center>
+
+    $client_list
+<br/>
+\n";
+echo (count($clients_percentage) > $numwant) ? ('<a href="' . 'tracker.php?client_numwant=' . ($numwant + 100) . '">' . 'Show more' . '</a><br/>') : '';
+echo $client_full ? '<br/><b>Get more length and numbers via modifying the parameters in the url<b>' : (!empty($client_list) ? '<a href="tracker.php?client_length=6&client_numwant=10">Peer_ids with more length (version debugging)</a>' : '');
+echo '</td></tr>';
+echo '</table>';
+echo !$client_full ? '<p style = "text-align:right;">Simple stats for clients are being cached for one hour.</p>' : '';
+echo '<div align="center"><pre>';
+
+echo 'gen time: <b>' . sprintf('%.3f', array_sum(explode(' ', microtime())) - TIMESTART) . "</b> sec\n";
+echo '</pre></div>';
+echo '</body></html>';
+
+DB()->query('DROP TEMPORARY TABLE ' . TMP_TRACKER_TABLE);
+
+exit();

ajax.php

@@ -0,0 +1,45 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+define('BB_SCRIPT', 'ajax');
+define('IN_AJAX', true);
+
+require __DIR__ . '/common.php';
+
+// Init Ajax class
+$ajax = new TorrentPier\Ajax();
+$ajax->init();
+
+// Init userdata
+$user->session_start();
+
+// Load actions required modules
+switch ($ajax->action) {
+    case 'view_post':
+    case 'posts':
+    case 'post_mod_comment':
+        require INC_DIR . '/bbcode.php';
+        break;
+
+    case 'view_torrent':
+    case 'mod_action':
+    case 'change_tor_status':
+    case 'change_torrent':
+    case 'passkey':
+        require ATTACH_DIR . '/attachment_mod.php';
+        break;
+}
+
+$ajax->exec();
+
+/**
+ * @deprecated ajax_common
+ * Dirty class removed from here since 2.2.0
+ * To add new actions see at src/Ajax.php
+ */

bt/announce.php

@@ -0,0 +1,549 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+define('IN_TRACKER', true);
+define('BB_ROOT', './../');
+require dirname(__DIR__) . '/common.php';
+
+// Check User-Agent for existence
+$userAgent = (string)$_SERVER['HTTP_USER_AGENT'];
+if (empty($userAgent)) {
+    header('Location: http://127.0.0.1', true, 301);
+    die;
+}
+
+$announce_interval = config()->get('announce_interval');
+$passkey_key = config()->get('passkey_key');
+
+// Recover info_hash
+if (isset($_GET['?info_hash']) && !isset($_GET['info_hash'])) {
+    $_GET['info_hash'] = $_GET['?info_hash'];
+}
+
+// Initial request verification
+if (str_contains($_SERVER['REQUEST_URI'], 'scrape')) {
+    msg_die('Please disable SCRAPE!');
+}
+
+if (!isset($_GET[$passkey_key]) || !is_string($_GET[$passkey_key])) {
+    msg_die('Please LOG IN and RE-DOWNLOAD this torrent (passkey not found)');
+}
+
+// Input var names
+// String
+$input_vars_str = ['info_hash', 'peer_id', 'event', $passkey_key];
+// Numeric
+$input_vars_num = ['port', 'uploaded', 'downloaded', 'left', 'numwant', 'compact'];
+
+// Init received data
+// String
+foreach ($input_vars_str as $var_name) {
+    $$var_name = isset($_GET[$var_name]) ? (string)$_GET[$var_name] : null;
+}
+
+// Numeric
+foreach ($input_vars_num as $var_name) {
+    $$var_name = isset($_GET[$var_name]) ? (float)$_GET[$var_name] : null;
+}
+
+// Passkey
+$passkey = $$passkey_key ?? null;
+
+// Verify request
+// Required params (info_hash, peer_id, port, uploaded, downloaded, left, passkey)
+if (!isset($peer_id)) {
+    msg_die('peer_id was not provided');
+}
+if (strlen($peer_id) !== 20) {
+    msg_die('Invalid peer_id: ' . $peer_id);
+}
+
+// Check for client ban
+if (config()->get('client_ban.enabled')) {
+    $targetClient = [];
+
+    foreach (config()->get('client_ban.clients') as $clientId => $banReason) {
+        if (str_starts_with($peer_id, $clientId)) {
+            $targetClient = [
+                'peer_id' => $clientId,
+                'ban_reason' => $banReason
+            ];
+            break;
+        }
+    }
+
+    if (config()->get('client_ban.only_allow_mode')) {
+        if (empty($targetClient['peer_id'])) {
+            msg_die('Your BitTorrent client has been banned!');
+        }
+    } else {
+        if (!empty($targetClient['peer_id'])) {
+            msg_die(empty($targetClient['ban_reason']) ? 'Your BitTorrent client has been banned!' : $targetClient['ban_reason']);
+        }
+    }
+}
+
+// Verify info_hash
+if (!isset($info_hash)) {
+    msg_die('info_hash was not provided');
+}
+
+/**
+ * Verify event
+ *
+ * @see https://github.com/HDInnovations/UNIT3D-Community-Edition/blob/c64275f0b5dcb3c4c845d5204871adfe24f359d6/app/Http/Controllers/AnnounceController.php#L275
+ */
+$event = strtolower((string)$event);
+if (!in_array($event, ['started', 'completed', 'stopped', 'paused', ''])) {
+    msg_die('Invalid event: ' . $event);
+}
+
+// Store info hash in hex format
+$info_hash_hex = bin2hex($info_hash);
+
+// Store peer id
+$peer_id_sql = preg_replace('/[^a-zA-Z0-9\-\_]/', '', $peer_id);
+
+// Stopped event
+$stopped = ($event === 'stopped');
+
+// Check info_hash length
+if (strlen($info_hash) !== 20) {
+    msg_die('Invalid info_hash: ' . (mb_check_encoding($info_hash, DEFAULT_CHARSET) ? $info_hash : $info_hash_hex));
+}
+
+/**
+ * Block system-reserved ports since 99.9% of the time they're fake and thus not connectable
+ * Some clients will send port of 0 on 'stopped' events. Let them through as they won't receive peers anyway.
+ *
+ * @see https://github.com/HDInnovations/UNIT3D-Community-Edition/blob/c64275f0b5dcb3c4c845d5204871adfe24f359d6/app/Http/Controllers/AnnounceController.php#L284
+ */
+if (
+    !isset($port)
+    || !is_numeric($port)
+    || ($port < 1024 && !$stopped)
+    || $port > 0xFFFF
+    || (!empty(config()->get('disallowed_ports')) && in_array($port, config()->get('disallowed_ports')))
+) {
+    msg_die('Invalid port: ' . $port);
+}
+
+if (!isset($uploaded) || !is_numeric($uploaded) || $uploaded < 0) {
+    msg_die('Invalid uploaded value: ' . $uploaded);
+}
+
+if (!isset($downloaded) || !is_numeric($downloaded) || $downloaded < 0) {
+    msg_die('Invalid downloaded value: ' . $downloaded);
+}
+
+if (!isset($left) || !is_numeric($left) || $left < 0) {
+    msg_die('Invalid left value: ' . $left);
+}
+
+/**
+ * Check User-Agent length
+ *
+ * @see https://github.com/HDInnovations/UNIT3D-Community-Edition/blob/c64275f0b5dcb3c4c845d5204871adfe24f359d6/app/Http/Controllers/AnnounceController.php#L177
+ */
+if (strlen($userAgent) > 64) {
+    msg_die('User-Agent must be less than 64 characters long');
+}
+
+/**
+ * Block Browser by checking the User-Agent
+ *
+ * @see https://github.com/HDInnovations/UNIT3D-Community-Edition/blob/c64275f0b5dcb3c4c845d5204871adfe24f359d6/app/Http/Controllers/AnnounceController.php#L182
+ */
+if (preg_match('/(Mozilla|Browser|Chrome|Safari|AppleWebKit|Opera|Links|Lynx|Bot|Unknown)/i', $userAgent)) {
+    msg_die('Browser disallowed');
+}
+
+// IP
+$ip = $_SERVER['REMOTE_ADDR'];
+
+// 'ip' query handling
+if (!config()->get('ignore_reported_ip') && isset($_GET['ip']) && $ip !== $_GET['ip']) {
+    if (!config()->get('verify_reported_ip') && isset($_SERVER['HTTP_X_FORWARDED_FOR'])) {
+        $x_ip = $_SERVER['HTTP_X_FORWARDED_FOR'];
+
+        if ($x_ip === $_GET['ip']) {
+            $filteredIp = filter_var($x_ip, FILTER_VALIDATE_IP);
+            if ($filteredIp !== false && (config()->get('allow_internal_ip') || !filter_var($filteredIp, FILTER_VALIDATE_IP, FILTER_FLAG_NO_PRIV_RANGE | FILTER_FLAG_NO_RES_RANGE))) {
+                $ip = $filteredIp;
+            }
+        }
+    }
+}
+
+// Check that IP format is valid
+if (!\TorrentPier\Helpers\IPHelper::isValid($ip)) {
+    msg_die("Invalid IP: $ip");
+}
+
+// Convert IP to long format
+$ip_sql = \TorrentPier\Helpers\IPHelper::ip2long($ip);
+
+// Detect IP version
+$ipv4 = $ipv6 = null;
+$ip_version = \TorrentPier\Helpers\IPHelper::isValidv6($ip) ? 'ipv6' : 'ip';
+if ($ip_version === 'ipv6') {
+    $ipv6 = $ip_sql;
+} else {
+    $ipv4 = $ip_sql;
+}
+
+// Peer unique id
+$peer_hash = hash('xxh128', $passkey . $info_hash_hex . $port);
+
+// Set seeder & complete
+$complete = $seeder = ($left == 0) ? 1 : 0;
+
+// Get cached peer info from previous announce (last peer info)
+$lp_info = CACHE('tr_cache')->get(PEER_HASH_PREFIX . $peer_hash);
+
+// Stopped event, slice peer's cache life to 30 seconds
+if ($stopped && $lp_info) {
+    CACHE('tr_cache')->set(PEER_HASH_PREFIX . $peer_hash, $lp_info, 30);
+}
+
+// Drop fast announce
+if ($lp_info && (!isset($event) || !$stopped)) {
+    if ($lp_info['ip_ver4'] === $ipv4 || $lp_info['ip_ver6'] === $ipv6 || isset($lp_info['ip_ver4'], $lp_info['ip_ver6'])) {
+        if ($lp_cached_peers = CACHE('tr_cache')->get(PEERS_LIST_PREFIX . $lp_info['topic_id'])) {
+            drop_fast_announce($lp_info, $lp_cached_peers); // Use cache but with new calculated interval and seed, peer count set
+        }
+    }
+}
+
+// Get last peer info from DB
+if (!CACHE('tr_cache')->used && !$lp_info) {
+    $lp_info = DB()->fetch_row("
+		SELECT * FROM " . BB_BT_TRACKER . " WHERE peer_hash = '$peer_hash' LIMIT 1
+	");
+}
+
+if ($lp_info) {
+    $user_id = $lp_info['user_id'];
+    $topic_id = $lp_info['topic_id'];
+    $releaser = $lp_info['releaser'];
+    $tor_type = $lp_info['tor_type'];
+    $hybrid_unrecord = $lp_info['hybrid_unrecord'] ?? false;
+} else {
+    $info_hash_sql = rtrim(DB()->escape($info_hash), ' ');
+
+    /**
+     * Currently torrent clients send truncated v2 hashes (the design raises questions).
+     * @see https://github.com/bittorrent/bittorrent.org/issues/145#issuecomment-1720040343
+     */
+    $info_hash_where = "WHERE tor.info_hash = '$info_hash_sql' OR SUBSTRING(tor.info_hash_v2, 1, 20) = '$info_hash_sql'";
+
+    $passkey_sql = DB()->escape($passkey);
+
+    $sql = "
+		SELECT tor.topic_id, tor.poster_id, tor.tor_type, tor.tor_status, tor.info_hash, tor.info_hash_v2, bt.*, u.user_level
+		FROM " . BB_BT_TORRENTS . " tor
+		LEFT JOIN " . BB_BT_USERS . " bt ON bt.auth_key = '$passkey_sql'
+		LEFT JOIN " . BB_USERS . " u ON u.user_id = bt.user_id
+		$info_hash_where
+		LIMIT 1
+	";
+    $row = DB()->fetch_row($sql);
+
+    // Verify if torrent registered on tracker and user authorized
+    if (empty($row['topic_id'])) {
+        msg_die('Torrent not registered, info_hash = ' . (mb_check_encoding($info_hash, DEFAULT_CHARSET) ? $info_hash : $info_hash_hex));
+    }
+    if (empty($row['user_id'])) {
+        msg_die('Please LOG IN and RE-DOWNLOAD this torrent (user not found)');
+    }
+
+    // Assign variables
+    $user_id = $row['user_id'];
+    define('IS_GUEST', (int)$user_id === GUEST_UID);
+    define('IS_ADMIN', !IS_GUEST && (int)$row['user_level'] === ADMIN);
+    define('IS_MOD', !IS_GUEST && (int)$row['user_level'] === MOD);
+    define('IS_GROUP_MEMBER', !IS_GUEST && (int)$row['user_level'] === GROUP_MEMBER);
+    define('IS_USER', !IS_GUEST && (int)$row['user_level'] === USER);
+    define('IS_SUPER_ADMIN', IS_ADMIN && isset(config()->get('super_admins')[$user_id]));
+    define('IS_AM', IS_ADMIN || IS_MOD);
+    $topic_id = $row['topic_id'];
+    $releaser = (int)($user_id == $row['poster_id']);
+    $tor_type = $row['tor_type'];
+    $tor_status = $row['tor_status'];
+
+    // Check tor status
+    if (!IS_AM && isset(config()->get('tor_frozen')[$tor_status]) && !(isset(config()->get('tor_frozen_author_download')[$tor_status]) && $releaser)) {
+        msg_die('Torrent frozen and cannot be downloaded');
+    }
+
+    // Check hybrid status
+    if (!empty($row['info_hash']) && !empty($row['info_hash_v2'])) {
+        $stat_protocol = match ((int)config()->get('tracker.hybrid_stat_protocol')) {
+            2 => substr($row['info_hash_v2'], 0, 20),
+            default => $row['info_hash'] // 1
+        };
+        if ($info_hash !== $stat_protocol) {
+            $hybrid_unrecord = true; // This allows us to announce only for one info-hash
+        }
+    }
+
+    // Ratio limits
+    if ((RATIO_ENABLED || config()->get('tracker.limit_concurrent_ips')) && !$stopped) {
+        $user_ratio = get_bt_ratio($row);
+        if ($user_ratio === null) {
+            $user_ratio = 1;
+        }
+        $rating_msg = '';
+
+        if (!$seeder) {
+            foreach (config()->get('rating') as $ratio => $limit) {
+                if ($user_ratio < $ratio) {
+                    config()->set('tracker.limit_active_tor', 1);
+                    config()->set('tracker.limit_leech_count', $limit);
+                    $rating_msg = " (ratio < $ratio)";
+                    break;
+                }
+            }
+        }
+
+        // Limit active torrents
+        if (!isset(config()->get('unlimited_users')[$user_id]) && config()->get('tracker.limit_active_tor') && ((config()->get('tracker.limit_seed_count') && $seeder) || (config()->get('tracker.limit_leech_count') && !$seeder))) {
+            $sql = "SELECT COUNT(DISTINCT topic_id) AS active_torrents
+				FROM " . BB_BT_TRACKER . "
+				WHERE user_id = $user_id
+					AND seeder = $seeder
+					AND topic_id != $topic_id";
+
+            if (!$seeder && config()->get('tracker.leech_expire_factor') && $user_ratio < 0.5) {
+                $sql .= " AND update_time > " . (TIMENOW - 60 * config()->get('tracker.leech_expire_factor'));
+            }
+            $sql .= " GROUP BY user_id";
+
+            if ($row = DB()->fetch_row($sql)) {
+                if ($seeder && config()->get('tracker.limit_seed_count') && $row['active_torrents'] >= config()->get('tracker.limit_seed_count')) {
+                    msg_die('Only ' . config()->get('tracker.limit_seed_count') . ' torrent(s) allowed for seeding');
+                } elseif (!$seeder && config()->get('tracker.limit_leech_count') && $row['active_torrents'] >= config()->get('tracker.limit_leech_count')) {
+                    msg_die('Only ' . config()->get('tracker.limit_leech_count') . ' torrent(s) allowed for leeching' . $rating_msg);
+                }
+            }
+        }
+
+        // Limit concurrent IPs
+        if (config()->get('tracker.limit_concurrent_ips') && ((config()->get('tracker.limit_seed_ips') && $seeder) || (config()->get('tracker.limit_leech_ips') && !$seeder))) {
+            $sql = "SELECT COUNT(DISTINCT ip) AS ips
+				FROM " . BB_BT_TRACKER . "
+				WHERE topic_id = $topic_id
+					AND user_id = $user_id
+					AND seeder = $seeder
+					AND $ip_version != '$ip_sql'";
+
+            if (!$seeder && config()->get('tracker.leech_expire_factor')) {
+                $sql .= " AND update_time > " . (TIMENOW - 60 * config()->get('tracker.leech_expire_factor'));
+            }
+            $sql .= " GROUP BY topic_id";
+
+            if ($row = DB()->fetch_row($sql)) {
+                if ($seeder && config()->get('tracker.limit_seed_ips') && $row['ips'] >= config()->get('tracker.limit_seed_ips')) {
+                    msg_die('You can seed only from ' . config()->get('tracker.limit_seed_ips') . " IP's");
+                } elseif (!$seeder && config()->get('tracker.limit_leech_ips') && $row['ips'] >= config()->get('tracker.limit_leech_ips')) {
+                    msg_die('You can leech only from ' . config()->get('tracker.limit_leech_ips') . " IP's");
+                }
+            }
+        }
+    }
+}
+
+// Up/Down speed
+$speed_up = $speed_down = 0;
+
+if ($lp_info && $lp_info['update_time'] < TIMENOW) {
+    if ($uploaded > $lp_info['uploaded']) {
+        $speed_up = ceil(($uploaded - $lp_info['uploaded']) / (TIMENOW - $lp_info['update_time']));
+    }
+    if ($downloaded > $lp_info['downloaded']) {
+        $speed_down = ceil(($downloaded - $lp_info['downloaded']) / (TIMENOW - $lp_info['update_time']));
+    }
+}
+
+// Up/Down addition
+$up_add = ($lp_info && $uploaded > $lp_info['uploaded']) ? $uploaded - $lp_info['uploaded'] : 0;
+$down_add = ($lp_info && $downloaded > $lp_info['downloaded']) ? $downloaded - $lp_info['downloaded'] : 0;
+
+// Gold/Silver releases
+if (config()->get('tracker.gold_silver_enabled') && $down_add) {
+    if ($tor_type == TOR_TYPE_GOLD) {
+        $down_add = 0;
+    } // Silver releases
+    elseif ($tor_type == TOR_TYPE_SILVER) {
+        $down_add = ceil($down_add / 2);
+    }
+}
+
+// Freeleech
+if (config()->get('tracker.freeleech') && $down_add) {
+    $down_add = 0;
+}
+
+// Insert / update peer info
+$peer_info_updated = false;
+$update_time = ($stopped) ? 0 : TIMENOW;
+
+if ($lp_info && empty($hybrid_unrecord)) {
+    $sql = "UPDATE " . BB_BT_TRACKER . " SET update_time = $update_time";
+
+    $sql .= ", $ip_version = '$ip_sql'";
+    $sql .= ", port = '$port'";
+    $sql .= ", seeder = $seeder";
+    $sql .= ($releaser != $lp_info['releaser']) ? ", releaser = $releaser" : '';
+
+    $sql .= ($tor_type != $lp_info['tor_type']) ? ", tor_type = $tor_type" : '';
+
+    $sql .= ($uploaded != $lp_info['uploaded']) ? ", uploaded = $uploaded" : '';
+    $sql .= ($downloaded != $lp_info['downloaded']) ? ", downloaded = $downloaded" : '';
+    $sql .= ", remain = $left";
+
+    $sql .= $up_add ? ", up_add = up_add + $up_add" : '';
+    $sql .= $down_add ? ", down_add = down_add + $down_add" : '';
+
+    $sql .= ", speed_up = $speed_up";
+    $sql .= ", speed_down = $speed_down";
+
+    $sql .= ", complete = $complete";
+    $sql .= ", peer_id = '$peer_id_sql'";
+
+    $sql .= " WHERE peer_hash = '$peer_hash'";
+    $sql .= " LIMIT 1";
+
+    DB()->query($sql);
+
+    $peer_info_updated = DB()->affected_rows();
+}
+
+if ((!$lp_info || !$peer_info_updated) && !$stopped && empty($hybrid_unrecord)) {
+    $columns = "peer_hash, topic_id, user_id, $ip_version, port, seeder, releaser, tor_type, uploaded, downloaded, remain, speed_up, speed_down, up_add, down_add, update_time, complete, peer_id";
+    $values = "'$peer_hash', $topic_id, $user_id, '$ip_sql', $port, $seeder, $releaser, $tor_type, $uploaded, $downloaded, $left, $speed_up, $speed_down, $up_add, $down_add, $update_time, $complete, '$peer_id_sql'";
+
+    DB()->query("REPLACE INTO " . BB_BT_TRACKER . " ($columns) VALUES ($values)");
+}
+
+// Exit if stopped
+if ($stopped) {
+    dummy_exit();
+}
+
+// Store peer info in cache
+$lp_info_new = [
+    'downloaded' => (float)$downloaded,
+    'releaser' => (int)$releaser,
+    'seeder' => (int)$seeder,
+    'topic_id' => (int)$topic_id,
+    'update_time' => (int)TIMENOW,
+    'uploaded' => (float)$uploaded,
+    'user_id' => (int)$user_id,
+    'tor_type' => (int)$tor_type,
+    'complete' => (int)$complete,
+    'ip_ver4' => $lp_info['ip_ver4'] ?? $ipv4,
+    'ip_ver6' => $lp_info['ip_ver6'] ?? $ipv6,
+];
+
+if (!empty($hybrid_unrecord)) {
+    $lp_info_new['hybrid_unrecord'] = $hybrid_unrecord;
+}
+
+// Cache new list with peer hash
+$lp_info_cached = CACHE('tr_cache')->set(PEER_HASH_PREFIX . $peer_hash, $lp_info_new, PEER_HASH_EXPIRE);
+
+// Get cached output
+$output = CACHE('tr_cache')->get(PEERS_LIST_PREFIX . $topic_id);
+
+if (!$output) {
+    // Retrieve peers
+    $numwant = (int)config()->get('tracker.numwant');
+    $compact_mode = (config()->get('tracker.compact_mode') || !empty($compact));
+
+    $rowset = DB()->fetch_rowset("
+        SELECT ip, ipv6, port
+        FROM " . BB_BT_TRACKER . "
+        WHERE topic_id = $topic_id
+        ORDER BY seeder ASC, RAND()
+        LIMIT $numwant
+    ");
+
+    if (empty($rowset)) {
+        $rowset[] = ['ip' => $ip_sql, 'port' => (int)$port];
+    }
+
+    if ($compact_mode) {
+        $peers = '';
+        $peers6 = '';
+
+        foreach ($rowset as $peer) {
+            if (!empty($peer['ip'])) {
+                $peer_ipv4 = \TorrentPier\Helpers\IPHelper::long2ip_extended($peer['ip']);
+                $peers .= inet_pton($peer_ipv4) . pack('n', $peer['port']);
+            }
+            if (!empty($peer['ipv6'])) {
+                $peer_ipv6 = \TorrentPier\Helpers\IPHelper::long2ip_extended($peer['ipv6']);
+                $peers6 .= inet_pton($peer_ipv6) . pack('n', $peer['port']);
+            }
+        }
+    } else {
+        $peers = [];
+
+        foreach ($rowset as $peer) {
+            if (!empty($peer['ip'])) {
+                $peer_ipv4 = \TorrentPier\Helpers\IPHelper::long2ip_extended($peer['ip']);
+                $peers[] = ['ip' => \TorrentPier\Helpers\IPHelper::long2ip_extended($peer['ip']), 'port' => (int)$peer['port']];
+            }
+            if (!empty($peer['ipv6'])) {
+                $peer_ipv6 = \TorrentPier\Helpers\IPHelper::long2ip_extended($peer['ipv6']);
+                $peers[] = ['ip' => \TorrentPier\Helpers\IPHelper::long2ip_extended($peer['ipv6']), 'port' => (int)$peer['port']];
+            }
+        }
+    }
+
+    $seeders = $leechers = $client_completed = 0;
+
+    if (config()->get('tracker.scrape')) {
+        $row = DB()->fetch_row("
+			SELECT seeders, leechers, completed
+			FROM " . BB_BT_TRACKER_SNAP . "
+			WHERE topic_id = $topic_id
+			LIMIT 1
+		");
+
+        $seeders = $row['seeders'] ?? ($seeder ? 1 : 0);
+        $leechers = $row['leechers'] ?? (!$seeder ? 1 : 0);
+        $client_completed = $row['completed'] ?? 0;
+    }
+
+    $output = [
+        'interval' => (int)$announce_interval,
+        'complete' => (int)$seeders,
+        'incomplete' => (int)$leechers,
+        'downloaded' => (int)$client_completed,
+    ];
+
+    if (!empty($peers)) {
+        $output['peers'] = $peers;
+    }
+
+    if (!empty($peers6)) {
+        $output['peers6'] = $peers6;
+    }
+
+    $peers_list_cached = CACHE('tr_cache')->set(PEERS_LIST_PREFIX . $topic_id, $output, PEERS_LIST_EXPIRE);
+}
+
+$output['external ip'] = inet_pton($ip);
+
+// Return data to client
+echo \Arokettu\Bencode\Bencode::encode($output);
+
+exit;

bt/includes/init_tr.php

@@ -0,0 +1,84 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+if (!defined('IN_TRACKER')) {
+    die(basename(__FILE__));
+}
+
+// Exit if tracker is disabled
+if (config()->get('tracker.bt_off')) {
+    msg_die(config()->get('tracker.bt_off_reason'));
+}
+
+//
+// Functions
+//
+function silent_exit($msg = '')
+{
+    echo \Arokettu\Bencode\Bencode::encode(['warning message' => str_compact($msg)]);
+
+    exit;
+}
+
+function error_exit($msg = '')
+{
+    echo \Arokettu\Bencode\Bencode::encode(['failure reason' => str_compact($msg)]);
+
+    exit;
+}
+
+function drop_fast_announce($lp_info, $lp_cached_peers = [])
+{
+    global $announce_interval;
+
+    if ($lp_info['update_time'] < (TIMENOW - $announce_interval + 60)) {
+        return; // if announce interval correct
+    }
+
+    $new_ann_intrv = $lp_info['update_time'] + $announce_interval - TIMENOW;
+
+    dummy_exit($new_ann_intrv, $lp_cached_peers);
+}
+
+function msg_die($msg)
+{
+    $output = \Arokettu\Bencode\Bencode::encode([
+        'interval' => (int)1800,
+        'failure reason' => (string)$msg,
+    ]);
+
+    die($output);
+}
+
+function dummy_exit($interval = 1800, $cache_dict = [])
+{
+    $output = [
+        'interval' => (int)$interval,
+        'peers' => (string)DUMMY_PEER,
+        'external ip' => inet_pton($_SERVER['REMOTE_ADDR']),
+    ];
+
+    if (!empty($cache_dict)) {
+        $output['complete'] = $cache_dict['complete'];
+        $output['incomplete'] = $cache_dict['incomplete'];
+        $output['downloaded'] = $cache_dict['downloaded'];
+    }
+
+    if (isset($cache_dict['peers'])) {
+        $output['peers'] = $cache_dict['peers'];
+    }
+
+    if (isset($cache_dict['peers6'])) {
+        $output['peers6'] = $cache_dict['peers6'];
+    }
+
+    $output = \Arokettu\Bencode\Bencode::encode($output);
+
+    die($output);
+}

bt/index.php

@@ -0,0 +1,10 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+require __DIR__ . '/announce.php';

bt/scrape.php

@@ -0,0 +1,103 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+define('IN_TRACKER', true);
+define('BB_ROOT', './../');
+require dirname(__DIR__) . '/common.php';
+
+if (!config()->get('tracker.scrape')) {
+    msg_die('Please disable SCRAPE!');
+}
+
+// Recover info_hash
+if (isset($_GET['?info_hash']) && !isset($_GET['info_hash'])) {
+    $_GET['info_hash'] = $_GET['?info_hash'];
+}
+
+$info_hash = isset($_GET['info_hash']) ? (string)$_GET['info_hash'] : null;
+
+// Verify info_hash
+if (!isset($info_hash)) {
+    msg_die('info_hash was not provided');
+}
+
+// Store info hash in hex format
+$info_hash_hex = bin2hex($info_hash);
+
+// Check info_hash length
+if (strlen($info_hash) !== 20) {
+    msg_die('Invalid info_hash: ' . (mb_check_encoding($info_hash, DEFAULT_CHARSET) ? $info_hash : $info_hash_hex));
+}
+
+// Handle multiple hashes
+preg_match_all('/info_hash=([^&]*)/i', $_SERVER['QUERY_STRING'], $info_hash_array);
+
+$torrents = [];
+$info_hashes = [];
+
+foreach ($info_hash_array[1] as $hash) {
+    $decoded_hash = urldecode($hash);
+
+    if (strlen($decoded_hash) !== 20) {
+        continue;
+    }
+
+    if ($scrape_cache = CACHE('tr_cache')->get(SCRAPE_LIST_PREFIX . bin2hex($decoded_hash))) {
+        $torrents['files'][$info_key = array_key_first($scrape_cache)] = $scrape_cache[$info_key];
+    } else {
+        $info_hashes[] = DB()->escape(($decoded_hash));
+    }
+}
+
+$info_hash_count = count($info_hashes);
+
+if (!empty($info_hash_count)) {
+    if ($info_hash_count > config()->get('max_scrapes')) {
+        $info_hashes = array_slice($info_hashes, 0, config()->get('max_scrapes'));
+    }
+
+    $info_hashes_sql = implode('\', \'', $info_hashes);
+
+    /**
+     * Currently torrent clients send truncated v2 hashes (the design raises questions).
+     * @see https://github.com/bittorrent/bittorrent.org/issues/145#issuecomment-1720040343
+     */
+    $info_hash_where = "tor.info_hash IN ('$info_hashes_sql') OR SUBSTRING(tor.info_hash_v2, 1, 20) IN ('$info_hashes_sql')";
+
+    $sql = "
+        SELECT tor.info_hash, tor.info_hash_v2, tor.complete_count, snap.seeders, snap.leechers
+        FROM " . BB_BT_TORRENTS . " tor
+        LEFT JOIN " . BB_BT_TRACKER_SNAP . " snap ON (snap.topic_id = tor.topic_id)
+        WHERE $info_hash_where
+    ";
+
+    $scrapes = DB()->fetch_rowset($sql);
+
+    if (!empty($scrapes)) {
+        foreach ($scrapes as $scrape) {
+            $hash_v1 = !empty($scrape['info_hash']) ? $scrape['info_hash'] : '';
+            $hash_v2 = !empty($scrape['info_hash_v2']) ? substr($scrape['info_hash_v2'], 0, 20) : '';
+            $info_hash_scrape = (in_array(urlencode($hash_v1), $info_hash_array[1])) ? $hash_v1 : $hash_v2; // Replace logic to prioritize $hash_v2, in case of future prioritization of v2
+
+            $torrents['files'][$info_hash_scrape] = [
+                'complete' => (int)$scrape['seeders'],
+                'downloaded' => (int)$scrape['complete_count'],
+                'incomplete' => (int)$scrape['leechers']
+            ];
+            CACHE('tr_cache')->set(SCRAPE_LIST_PREFIX . bin2hex($info_hash_scrape), array_slice($torrents['files'], -1, null, true), SCRAPE_LIST_EXPIRE);
+        }
+    }
+}
+
+// Verify if torrent registered on tracker
+if (empty($torrents)) {
+    msg_die('Torrent not registered, info_hash = ' . (mb_check_encoding($info_hash, DEFAULT_CHARSET) ? $info_hash : $info_hash_hex));
+}
+
+die(\Arokettu\Bencode\Bencode::encode($torrents));

cliff.toml

@@ -0,0 +1,126 @@
+# git-cliff ~ TorrentPier configuration file
+# https://git-cliff.org/docs/configuration
+#
+# Lines starting with "#" are comments.
+# Configuration options are organized into tables and keys.
+# See documentation for more information on available options.
+
+[remote.github]
+owner = "torrentpier"
+repo = "torrentpier"
+
+[changelog]
+# template for the changelog header
+header = """
+[![TorrentPier](https://raw.githubusercontent.com/torrentpier/.github/refs/heads/main/versions/Cattle.png)](https://github.com/torrentpier)\n
+# 📖 Change Log\n
+"""
+# template for the changelog body
+# https://keats.github.io/tera/docs/#introduction
+body = """
+{%- macro remote_url() -%}
+  https://github.com/{{ remote.github.owner }}/{{ remote.github.repo }}
+{%- endmacro -%}
+
+{%- macro nightly_url() -%}
+  https://nightly.link/{{ remote.github.owner }}/{{ remote.github.repo }}/workflows/ci/master/TorrentPier-master
+{%- endmacro -%}
+
+{% macro print_commit(commit) -%}
+    - {% if commit.scope %}*({{ commit.scope }})* {% endif %}\
+        {% if commit.breaking %}[**breaking**] {% endif %}\
+        {{ commit.message | upper_first }} - \
+        ([{{ commit.id | truncate(length=7, end="") }}]({{ self::remote_url() }}/commit/{{ commit.id }}))\
+{% endmacro -%}
+
+{% if version %}\
+    {% if previous.version %}\
+        ## [{{ version }}]\
+          ({{ self::remote_url() }}/compare/{{ previous.version }}..{{ version }}) ({{ timestamp | date(format="%Y-%m-%d") }})
+    {% else %}\
+        ## {{ version }} ({{ timestamp | date(format="%Y-%m-%d") }})
+    {% endif %}\
+{% else %}\
+    ## [nightly]({{ self::nightly_url() }})
+{% endif %}\
+
+{% for group, commits in commits | group_by(attribute="group") %}
+    ### {{ group | striptags | trim | upper_first }}
+    {% for commit in commits
+    | filter(attribute="scope")
+    | sort(attribute="scope") %}
+        {{ self::print_commit(commit=commit) }}
+    {%- endfor %}
+    {% for commit in commits %}
+        {%- if not commit.scope -%}
+            {{ self::print_commit(commit=commit) }}
+        {% endif -%}
+    {% endfor -%}
+{% endfor -%}
+{%- if github -%}
+{% if github.contributors | filter(attribute="is_first_time", value=true) | length != 0 %}
+  ## New Contributors ❤️
+{% endif %}\
+{% for contributor in github.contributors | filter(attribute="is_first_time", value=true) %}
+  * @{{ contributor.username }} made their first contribution
+    {%- if contributor.pr_number %} in \
+      [#{{ contributor.pr_number }}]({{ self::remote_url() }}/pull/{{ contributor.pr_number }}) \
+    {%- endif %}
+{%- endfor -%}
+{%- endif %}
+
+
+"""
+# template for the changelog footer
+footer = """
+"""
+# remove the leading and trailing whitespace from the templates
+trim = true
+# postprocessors
+postprocessors = [
+  { pattern = '<REPO>', replace = "https://github.com/torrentpier/torrentpier" }, # replace repository URL
+]
+
+[git]
+# parse the commits based on https://www.conventionalcommits.org
+conventional_commits = true
+# filter out the commits that are not conventional
+filter_unconventional = true
+# process each line of a commit as an individual commit
+split_commits = false
+# regex for preprocessing the commit messages
+commit_preprocessors = [
+  # Replace issue numbers
+  { pattern = '\((\w+\s)?#([0-9]+)\)', replace = "([#${2}](<REPO>/pull/${2}))" },
+  # Check spelling of the commit with https://github.com/crate-ci/typos
+  # If the spelling is incorrect, it will be automatically fixed.
+  # { pattern = '.*', replace_command = 'typos --write-changes -' },
+]
+# regex for parsing and grouping commits
+commit_parsers = [
+  { message = "^feat", group = "<!-- 0 -->🚀 Features" },
+  { message = "^fix", group = "<!-- 1 -->🐛 Bug Fixes" },
+  { message = "^doc", group = "<!-- 3 -->📚 Documentation" },
+  { message = "^perf", group = "<!-- 4 -->⚡ Performance" },
+  { message = "^refactor", group = "<!-- 2 -->🚜 Refactor" },
+  { message = "^style", group = "<!-- 5 -->🎨 Styling" },
+  { message = "^test", group = "<!-- 6 -->🧪 Testing" },
+  { message = "^ignore|^release|^changelog", skip = true },
+  { message = "^chore|^ci|^misc", group = "<!-- 7 -->⚙️ Miscellaneous" },
+  { body = ".*security", group = "<!-- 8 -->🛡️ Security" },
+  { message = "^revert", group = "<!-- 9 -->◀️ Revert" },
+  { message = "^crowdin|^crodwin", group = "<!-- 10 -->🈳 New translations" }, # crowdin pulls supporting
+  { message = "^Composer", group = "<!-- 11 -->📦 Dependencies" }, # dependabot pulls supporting
+  { message = "^rem|^drop|^removed", group = "<!-- 12 -->🗑️ Removed" },
+  { message = ".*", group = "<!-- 13 -->💼 Other" },
+]
+# protect breaking changes from being skipped due to matching a skipping commit_parser
+protect_breaking_commits = false
+# filter out the commits that are not matched by commit parsers
+filter_commits = false
+# regex for matching git tags
+tag_pattern = "v[0-9].*"
+# sort the tags topologically
+topo_order = false
+# sort the commits inside sections by oldest/newest order
+sort_commits = "newest"

common.php

@@ -0,0 +1,456 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+if (isset($_REQUEST['GLOBALS'])) {
+    die();
+}
+
+define('TIMESTART', utime());
+define('TIMENOW', time());
+define('BB_PATH', __DIR__);
+
+if (empty($_SERVER['REMOTE_ADDR'])) {
+    $_SERVER['REMOTE_ADDR'] = '127.0.0.1';
+}
+if (empty($_SERVER['HTTP_USER_AGENT'])) {
+    $_SERVER['HTTP_USER_AGENT'] = '';
+}
+if (empty($_SERVER['HTTP_REFERER'])) {
+    $_SERVER['HTTP_REFERER'] = '';
+}
+if (empty($_SERVER['SERVER_NAME'])) {
+    $_SERVER['SERVER_NAME'] = getenv('SERVER_NAME');
+}
+if (empty($_SERVER['SERVER_ADDR'])) {
+    $_SERVER['SERVER_ADDR'] = getenv('SERVER_ADDR');
+}
+
+if (!defined('BB_ROOT')) {
+    define('BB_ROOT', './');
+}
+if (!defined('BB_SCRIPT')) {
+    define('BB_SCRIPT', null);
+}
+
+header('X-Frame-Options: SAMEORIGIN');
+date_default_timezone_set('UTC');
+
+// Set remote address
+$allowedCDNs = ['HTTP_X_FORWARDED_FOR', 'HTTP_FASTLY_CLIENT_IP', 'HTTP_CF_CONNECTING_IP'];
+foreach ($allowedCDNs as $allowedCDN) {
+    if (isset($_SERVER[$allowedCDN]) && filter_var($_SERVER[$allowedCDN], FILTER_VALIDATE_IP, FILTER_FLAG_NO_PRIV_RANGE | FILTER_FLAG_NO_RES_RANGE)) {
+        $_SERVER['REMOTE_ADDR'] = $_SERVER[$allowedCDN];
+    }
+}
+
+// Get all constants
+require_once BB_PATH . '/library/defines.php';
+
+// Composer
+if (!is_file(BB_PATH . '/vendor/autoload.php')) {
+    die('🔩 Manual install: <a href="https://getcomposer.org/download/" target="_blank" rel="noreferrer" style="color:#0a25bb;">Install composer</a> and run <code style="background:#222;color:#00e01f;padding:2px 6px;border-radius:3px;">composer install</code>.<br/>☕️ Quick install: Run <code style="background:#222;color:#00e01f;padding:2px 6px;border-radius:3px;">php install.php</code> in CLI mode.');
+}
+require_once BB_PATH . '/vendor/autoload.php';
+
+/**
+ * Gets the value of an environment variable.
+ *
+ * @param string $key
+ * @param mixed|null $default
+ * @return mixed
+ */
+function env(string $key, mixed $default = null): mixed
+{
+    return \TorrentPier\Env::get($key, $default);
+}
+
+// Load ENV
+try {
+    $dotenv = Dotenv\Dotenv::createMutable(BB_PATH);
+    $dotenv->load();
+} catch (\Dotenv\Exception\InvalidPathException $pathException) {
+    die('🔩 Manual install: Rename from <code style="background:#222;color:#00e01f;padding:2px 6px;border-radius:3px;">.env.example</code> to <code style="background:#222;color:#00e01f;padding:2px 6px;border-radius:3px;">.env</code>, and configure it.<br/>☕️ Quick install: Run <code style="background:#222;color:#00e01f;padding:2px 6px;border-radius:3px;">php install.php</code> in CLI mode.');
+}
+
+// Load config
+require_once BB_PATH . '/library/config.php';
+
+// Local config
+if (is_file(BB_PATH . '/library/config.local.php')) {
+    require_once BB_PATH . '/library/config.local.php';
+}
+
+/** @noinspection PhpUndefinedVariableInspection */
+// Initialize Config singleton, bb_cfg from global file config
+$config = \TorrentPier\Config::init($bb_cfg);
+
+/**
+ * Get the Config instance
+ *
+ * @return \TorrentPier\Config
+ */
+function config(): \TorrentPier\Config
+{
+    return \TorrentPier\Config::getInstance();
+}
+
+/**
+ * Get the Censor instance
+ *
+ * @return \TorrentPier\Censor
+ */
+function censor(): \TorrentPier\Censor
+{
+    return \TorrentPier\Censor::getInstance();
+}
+
+/**
+ * Get the Dev instance
+ *
+ * @return \TorrentPier\Dev
+ */
+function dev(): \TorrentPier\Dev
+{
+    return \TorrentPier\Dev::getInstance();
+}
+
+/**
+ * Get the Language instance
+ *
+ * @return \TorrentPier\Language
+ */
+function lang(): \TorrentPier\Language
+{
+    return \TorrentPier\Language::getInstance();
+}
+
+/**
+ * Get a language string (shorthand for lang()->get())
+ *
+ * @param string $key Language key, supports dot notation (e.g., 'DATETIME.TODAY')
+ * @param mixed $default Default value if key doesn't exist
+ * @return mixed Language string or default value
+ */
+function __(string $key, mixed $default = null): mixed
+{
+    return \TorrentPier\Language::getInstance()->get($key, $default);
+}
+
+/**
+ * Echo a language string (shorthand for echo __())
+ *
+ * @param string $key Language key, supports dot notation
+ * @param mixed $default Default value if key doesn't exist
+ * @return void
+ */
+function _e(string $key, mixed $default = null): void
+{
+    echo \TorrentPier\Language::getInstance()->get($key, $default);
+}
+
+/**
+ * Initialize debug
+ */
+define('APP_ENV', env('APP_ENV', 'production'));
+if (APP_ENV === 'development') {
+    define('DBG_USER', true); // forced debug
+} else {
+    define('DBG_USER', isset($_COOKIE[COOKIE_DBG]));
+}
+(\TorrentPier\Dev::init());
+
+/**
+ * Server variables initialize
+ */
+$server_protocol = config()->get('cookie_secure') ? 'https://' : 'http://';
+$server_port = in_array((int)config()->get('server_port'), [80, 443], true) ? '' : ':' . config()->get('server_port');
+define('FORUM_PATH', config()->get('script_path'));
+define('FULL_URL', $server_protocol . config()->get('server_name') . $server_port . config()->get('script_path'));
+unset($server_protocol, $server_port);
+
+// Initialize the new DB factory with database configuration
+TorrentPier\Database\DatabaseFactory::init(config()->get('db'), config()->get('db_alias', []));
+
+/**
+ * Get the Database instance
+ *
+ * @param string $db_alias
+ * @return \TorrentPier\Database\Database
+ */
+function DB(string $db_alias = 'db'): \TorrentPier\Database\Database
+{
+    return TorrentPier\Database\DatabaseFactory::getInstance($db_alias);
+}
+
+// Initialize Unified Cache System
+TorrentPier\Cache\UnifiedCacheSystem::getInstance(config()->all());
+
+/**
+ * Get cache manager instance (replaces legacy cache system)
+ *
+ * @param string $cache_name
+ * @return \TorrentPier\Cache\CacheManager
+ */
+function CACHE(string $cache_name): \TorrentPier\Cache\CacheManager
+{
+    return TorrentPier\Cache\UnifiedCacheSystem::getInstance()->get_cache_obj($cache_name);
+}
+
+/**
+ * Get datastore manager instance (replaces legacy datastore system)
+ *
+ * @return \TorrentPier\Cache\DatastoreManager
+ */
+function datastore(): \TorrentPier\Cache\DatastoreManager
+{
+    return TorrentPier\Cache\UnifiedCacheSystem::getInstance()->getDatastore(config()->get('datastore_type', 'file'));
+}
+
+/**
+ * Backward compatibility: Global datastore variable
+ * This allows existing code to continue using global $datastore
+ */
+$datastore = datastore();
+
+// Functions
+function utime()
+{
+    return array_sum(explode(' ', microtime()));
+}
+
+function bb_log($msg, $file_name = 'logs', $return_path = false)
+{
+    if (is_array($msg)) {
+        $msg = implode(LOG_LF, $msg);
+    }
+    $file_name .= (LOG_EXT) ? '.' . LOG_EXT : '';
+
+    $path = (LOG_DIR . '/' . $file_name);
+    if ($return_path) {
+        return $path;
+    }
+
+    return file_write($msg, $path);
+}
+
+function file_write($str, $file, $max_size = LOG_MAX_SIZE, $lock = true, $replace_content = false)
+{
+    $bytes_written = false;
+    clearstatcache();
+
+    if (is_file($file) && ($max_size && (filesize($file) >= $max_size))) {
+        $file_parts = pathinfo($file);
+        $new_name = ($file_parts['dirname'] . '/' . $file_parts['filename'] . '_[old]_' . date('Y-m-d_H-i-s_') . getmypid() . '.' . $file_parts['extension']);
+        clearstatcache();
+        if (!is_file($new_name)) {
+            rename($file, $new_name);
+        }
+    }
+
+    clearstatcache();
+    if (bb_mkdir(dirname($file))) {
+        if ($fp = fopen($file, 'ab+')) {
+            if ($lock) {
+                flock($fp, LOCK_EX);
+            }
+            if ($replace_content) {
+                ftruncate($fp, 0);
+                fseek($fp, 0, SEEK_SET);
+            }
+            $bytes_written = fwrite($fp, $str);
+            fclose($fp);
+        }
+    }
+
+    return $bytes_written;
+}
+
+function bb_mkdir($path, $mode = 0777)
+{
+    $old_um = umask(0);
+    $dir = mkdir_rec($path, $mode);
+    umask($old_um);
+    return $dir;
+}
+
+function mkdir_rec($path, $mode): bool
+{
+    if (is_dir($path)) {
+        return ($path !== '.' && $path !== '..') && is_writable($path);
+    }
+
+    return mkdir_rec(dirname($path), $mode) && mkdir($path, $mode);
+}
+
+function verify_id($id, $length): bool
+{
+    return (is_string($id) && preg_match('#^[a-zA-Z0-9]{' . $length . '}$#', $id));
+}
+
+function clean_filename($fname)
+{
+    static $s = ['\\', '/', ':', '*', '?', '"', '<', '>', '|', ' '];
+    return str_replace($s, '_', str_compact($fname));
+}
+
+/**
+ * Convert special characters to HTML entities
+ *
+ * @param $txt
+ * @param bool $double_encode
+ * @param int $quote_style
+ * @param ?string $charset
+ * @return string
+ */
+function htmlCHR($txt, bool $double_encode = false, int $quote_style = ENT_QUOTES, ?string $charset = DEFAULT_CHARSET): string
+{
+    return (string)htmlspecialchars($txt ?? '', $quote_style, $charset, $double_encode);
+}
+
+/**
+ * @param string $str
+ * @return string
+ */
+function str_compact($str)
+{
+    return preg_replace('/\s\s+/', ' ', trim($str ?? ''));
+}
+
+/**
+ * Generate a "random" alphanumeric string.
+ *
+ * Should not be considered sufficient for cryptography, etc.
+ *
+ * @param int $length
+ * @return string
+ * @throws Exception
+ */
+function make_rand_str(int $length = 10): string
+{
+    $pool = str_shuffle('0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ');
+
+    $randomString = '';
+    for ($i = 0; $i < $length; $i++) {
+        $randomString .= $pool[random_int(0, 61)];
+    }
+
+    return $randomString;
+}
+
+/**
+ * Calculates user ratio
+ *
+ * @param array $btu
+ * @return float|null
+ */
+function get_bt_ratio(array $btu): ?float
+{
+    return
+        (!empty($btu['u_down_total']) && $btu['u_down_total'] > MIN_DL_FOR_RATIO)
+            ? round((($btu['u_up_total'] + $btu['u_up_release'] + $btu['u_up_bonus']) / $btu['u_down_total']), 2)
+            : null;
+}
+
+function array_deep(&$var, $fn, $one_dimensional = false, $array_only = false, $timeout = false)
+{
+    if ($timeout) {
+        static $recursions = 0;
+        if (time() > (TIMENOW + $timeout)) {
+            return [
+                'timeout' => true,
+                'recs' => $recursions
+            ];
+        }
+        $recursions++;
+    }
+    if (is_array($var)) {
+        foreach ($var as $k => $v) {
+            if (is_array($v)) {
+                if ($one_dimensional) {
+                    unset($var[$k]);
+                } elseif ($array_only) {
+                    $var[$k] = $fn($v);
+                } else {
+                    array_deep($var[$k], $fn, timeout: $timeout);
+                }
+            } elseif (!$array_only) {
+                $var[$k] = $fn($v);
+            }
+        }
+    } elseif (!$array_only) {
+        $var = $fn($var);
+    }
+}
+
+/**
+ * Hide BB_PATH
+ *
+ * @param string $path
+ * @return string
+ */
+function hide_bb_path(string $path): string
+{
+    return ltrim(str_replace(BB_PATH, '', $path), '/\\');
+}
+
+/**
+ * Returns memory usage statistic
+ *
+ * @param string $param
+ * @return int|void
+ */
+function sys(string $param)
+{
+    switch ($param) {
+        case 'mem':
+            return memory_get_usage();
+        case 'mem_peak':
+            return memory_get_peak_usage();
+        default:
+            trigger_error("invalid param: $param", E_USER_ERROR);
+    }
+}
+
+/**
+ * Some shared defines
+ */
+// Initialize demo mode
+define('IN_DEMO_MODE', env('APP_DEMO_MODE', false));
+
+// Ratio status
+define('RATIO_ENABLED', TR_RATING_LIMITS && MIN_DL_FOR_RATIO > 0);
+
+// Initialization
+if (!defined('IN_TRACKER')) {
+    // Init board
+    require_once INC_DIR . '/init_bb.php';
+} else {
+    define('DUMMY_PEER', pack('Nn', \TorrentPier\Helpers\IPHelper::ip2long($_SERVER['REMOTE_ADDR']), !empty($_GET['port']) ? (int)$_GET['port'] : random_int(1000, 65000)));
+
+    define('PEER_HASH_EXPIRE', round(config()->get('announce_interval') * (0.85 * config()->get('tracker.expire_factor'))));
+    define('PEERS_LIST_EXPIRE', round(config()->get('announce_interval') * 0.7));
+    define('SCRAPE_LIST_EXPIRE', round(config()->get('scrape_interval') * 0.7));
+
+    define('PEER_HASH_PREFIX', 'peer_');
+    define('PEERS_LIST_PREFIX', 'peers_list_');
+    define('SCRAPE_LIST_PREFIX', 'scrape_list_');
+
+    // Init tracker
+    require_once BB_PATH . '/bt/includes/init_tr.php';
+
+    header('Content-Type: text/plain');
+    header('Pragma: no-cache');
+
+    if (!defined('IN_ADMIN')) {
+        // Exit if tracker is disabled via ON/OFF trigger
+        if (is_file(BB_DISABLED)) {
+            dummy_exit(random_int(60, 2400));
+        }
+    }
+}

composer.json

@@ -0,0 +1,102 @@
+{
+  "name": "torrentpier/torrentpier",
+  "description": "TorrentPier. Bull-powered BitTorrent tracker engine",
+  "type": "project",
+  "keywords": [
+    "bittorrent",
+    "forum",
+    "torrent",
+    "tracker"
+  ],
+  "homepage": "https://github.com/torrentpier",
+  "license": "MIT",
+  "authors": [
+    {
+      "name": "Exile",
+      "email": "admin@torrentpier.com",
+      "homepage": "https://github.com/Exileum",
+      "role": "Developer"
+    },
+    {
+      "name": "Diolektor",
+      "homepage": "https://github.com/diolektor",
+      "role": "Developer"
+    },
+    {
+      "name": "PheRum",
+      "homepage": "https://github.com/PheRum",
+      "role": "Developer"
+    },
+    {
+      "name": "belomaxorka",
+      "email": "roman25052006.kelesh@gmail.com",
+      "homepage": "https://github.com/belomaxorka",
+      "role": "Developer"
+    },
+    {
+      "name": "kovalensky",
+      "email": "kovalensky@evergarden.ru",
+      "homepage": "https://github.com/kovalensky",
+      "role": "Developer"
+    }
+  ],
+  "support": {
+    "email": "support@torrentpier.com",
+    "issues": "https://github.com/torrentpier/torrentpier/issues",
+    "forum": "https://torrentpier.com"
+  },
+  "require": {
+    "php": ">=8.2",
+    "arokettu/bencode": "^4.1.0",
+    "arokettu/monsterid": "^4.1.0",
+    "arokettu/random-polyfill": "1.0.2",
+    "arokettu/torrent-file": "^5.2.1",
+    "belomaxorka/captcha": "1.*",
+    "bugsnag/bugsnag": "^v3.29.1",
+    "claviska/simpleimage": "^4.0",
+    "egulias/email-validator": "^4.0.1",
+    "filp/whoops": "^2.15",
+    "gemorroj/m3u-parser": "^6.0.1",
+    "gigablah/sphinxphp": "2.0.8",
+    "google/recaptcha": "^1.3",
+    "jacklul/monolog-telegram": "^3.1",
+    "josantonius/cookie": "^2.0",
+    "league/flysystem": "^3.28",
+    "longman/ip-tools": "1.2.1",
+    "monolog/monolog": "^3.4",
+    "nette/caching": "^3.3",
+    "nette/database": "^3.2",
+    "php-curl-class/php-curl-class": "^12.0.0",
+    "robmorgan/phinx": "^0.16.9",
+    "samdark/sitemap": "2.4.1",
+    "symfony/mailer": "^7.3",
+    "symfony/polyfill": "v1.32.0",
+    "vlucas/phpdotenv": "^5.5",
+    "z4kn4fein/php-semver": "^v3.0.0"
+  },
+  "require-dev": {
+    "mockery/mockery": "^1.6",
+    "pestphp/pest": "^3.8",
+    "symfony/var-dumper": "^7.3"
+  },
+  "autoload": {
+    "psr-4": {
+      "TorrentPier\\": "src/"
+    }
+  },
+  "autoload-dev": {
+    "psr-4": {
+      "Tests\\": "tests/"
+    }
+  },
+  "config": {
+    "sort-packages": true,
+    "optimize-autoloader": true,
+    "allow-plugins": {
+      "pestphp/pest-plugin": true,
+      "php-http/discovery": true
+    }
+  },
+  "minimum-stability": "stable",
+  "prefer-stable": true
+}

contributors.txt

@@ -1,45 +0,0 @@
-Уважаемые пользователи TorrentPier II!
-
-За помощь, оказанную в развитии нашего движка, выражаем особую благодарность нижеперечисленным участникам форума:
-
-***************************
-**    Сборы 2013 года    **
-***************************
-
-emilio13
-UralSOFT
-aik
-Sarymian
-eve
-Алексей Письменский
-qaqra
-rserg99
-leszav
-Dr_Brown
-Bullit
-Triceratop (http://goldenshara.com/)
-Ramzess
-
-****************************
-**    Сборы 2014 года     **
-****************************
-
-SamSeGo
-alesel (http://sporttracker.kz/)
-Bullit
-igorsaevets
-vasilich619
-wint1000 (http://asmlocator.ru/)
-Philstone (http://worldofminecraft.su/)
-Nightwolf
-nord51
-Вася
-
-*****************************
-**    Прочая информация    **
-*****************************
-
-Большое вам всем спасибо за помощь.
-
-Если в данных списках кто-то не указан, либо если вы хотите указать дополнительно адрес своего трекера, отправьте письмо по адресу admin@torrentpier.me,
-с указанием вашего ника на форуме и адреса вашего трекера, дабы мы могли вас добавить в этот список.

cron.php

@@ -0,0 +1,13 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+define('START_CRON', true);
+define('BB_ROOT', __DIR__ . '/');
+
+require __DIR__ . '/common.php';

crowdin.yml

@@ -0,0 +1,9 @@
+files:
+  - source: /styles/templates/default/images/lang/source/*.*
+    translation: /styles/templates/default/images/lang/%two_letters_code%/%original_file_name%
+  - source: /library/language/source/*.*
+    translation: /library/language/%two_letters_code%/%original_file_name%
+  - source: /library/language/source/email/*.*
+    translation: /library/language/%two_letters_code%/email/%original_file_name%
+  - source: /library/language/source/html/*.*
+    translation: /library/language/%two_letters_code%/html/%original_file_name%

dl.php

@@ -0,0 +1,244 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+define('BB_SCRIPT', 'dl');
+define('NO_GZIP', true);
+
+require __DIR__ . '/common.php';
+require ATTACH_DIR . '/attachment_mod.php';
+
+$datastore->enqueue([
+    'attach_extensions',
+    'cat_forums'
+]);
+
+$download_id = request_var('id', 0);
+$thumbnail = request_var('thumb', 0);
+$m3u = isset($_GET['m3u']) && $_GET['m3u'];
+
+// Send file to browser
+function send_file_to_browser($attachment, $upload_dir)
+{
+    global $lang;
+
+    $filename = $upload_dir . '/' . $attachment['physical_filename'];
+    $gotit = false;
+
+    if (is_file(realpath($filename))) {
+        $gotit = true;
+    } else {
+        bb_die($lang['ERROR_NO_ATTACHMENT'] . '<br /><br />' . htmlCHR($filename));
+    }
+
+    // Correct the mime type - we force application/octet-stream for all files, except images
+    // Please do not change this, it is a security precaution
+    if (!str_contains($attachment['mimetype'], 'image')) {
+        $attachment['mimetype'] = 'application/octet-stream';
+    } else {
+        header('Cache-Control: public, max-age=3600');
+    }
+
+    //bt
+    if (!(isset($_GET['original']) && !IS_USER)) {
+        \TorrentPier\Legacy\Torrent::send_torrent_with_passkey($filename);
+    }
+
+    // Now the tricky part... let's dance
+    header('Pragma: public');
+    $real_filename = clean_filename(basename($attachment['real_filename']));
+    $mimetype = $attachment['mimetype'] . ';';
+    $charset = 'charset=' . DEFAULT_CHARSET . ';';
+
+    // Send out the Headers
+    header("Content-Type: $mimetype $charset name=\"$real_filename\"");
+    header("Content-Disposition: inline; filename=\"$real_filename\"");
+    unset($real_filename);
+
+    // Now send the File Contents to the Browser
+    if ($gotit) {
+        $size = filesize($filename);
+        if ($size) {
+            header("Content-length: $size");
+        }
+        readfile($filename);
+    } else {
+        bb_die($lang['ERROR_NO_ATTACHMENT'] . '<br /><br />' . htmlCHR($filename));
+    }
+
+    exit;
+}
+
+//
+// Start Session Management
+//
+$user->session_start();
+
+set_die_append_msg();
+
+if (!$download_id) {
+    bb_die($lang['NO_ATTACHMENT_SELECTED']);
+}
+
+if ($attach_config['disable_mod'] && !IS_ADMIN) {
+    bb_die($lang['ATTACHMENT_FEATURE_DISABLED']);
+}
+
+$sql = 'SELECT * FROM ' . BB_ATTACHMENTS_DESC . ' WHERE attach_id = ' . (int)$download_id;
+
+if (!($result = DB()->sql_query($sql))) {
+    bb_die('Could not query attachment information #1');
+}
+
+if (!($attachment = DB()->sql_fetchrow($result))) {
+    bb_die($lang['ERROR_NO_ATTACHMENT']);
+}
+
+$attachment['physical_filename'] = basename($attachment['physical_filename']);
+
+if ($thumbnail) {
+    // Re-define $attachment['physical_filename'] for thumbnails
+    $attachment['physical_filename'] = THUMB_DIR . '/t_' . $attachment['physical_filename'];
+} elseif ($m3u) {
+    // Check m3u file exist
+    if (!$m3uFile = (new \TorrentPier\TorrServerAPI())->getM3UPath($download_id)) {
+        bb_die($lang['ERROR_NO_ATTACHMENT']);
+    }
+
+    $attachment['physical_filename'] = $attachment['real_filename'] = basename($m3uFile);
+    $attachment['mimetype'] = mime_content_type($m3uFile);
+    $attachment['extension'] = str_replace('.', '', \TorrentPier\TorrServerAPI::M3U['extension']);
+}
+
+DB()->sql_freeresult($result);
+
+// get forum_id for attachment authorization or private message authorization
+$authorised = false;
+
+$sql = 'SELECT * FROM ' . BB_ATTACHMENTS . ' WHERE attach_id = ' . (int)$attachment['attach_id'];
+
+if (!($result = DB()->sql_query($sql))) {
+    bb_die('Could not query attachment information #2');
+}
+
+$auth_pages = DB()->sql_fetchrowset($result);
+$num_auth_pages = DB()->num_rows($result);
+
+for ($i = 0; $i < $num_auth_pages && $authorised == false; $i++) {
+    $auth_pages[$i]['post_id'] = (int)$auth_pages[$i]['post_id'];
+
+    if ($auth_pages[$i]['post_id'] != 0) {
+        $sql = 'SELECT forum_id, topic_id FROM ' . BB_POSTS . ' WHERE post_id = ' . (int)$auth_pages[$i]['post_id'];
+
+        if (!($result = DB()->sql_query($sql))) {
+            bb_die('Could not query post information');
+        }
+
+        $row = DB()->sql_fetchrow($result);
+
+        $topic_id = $row['topic_id'];
+        $forum_id = $row['forum_id'];
+
+        $is_auth = auth(AUTH_ALL, $forum_id, $userdata);
+        set_die_append_msg($forum_id, $topic_id);
+
+        if ($is_auth['auth_download']) {
+            $authorised = true;
+        }
+    }
+}
+
+// Check the auth rights
+if (!$authorised) {
+    bb_die($lang['SORRY_AUTH_VIEW_ATTACH'], 403);
+}
+
+$datastore->rm('cat_forums');
+
+// Check tor status
+if (!IS_AM && ($attachment['mimetype'] === TORRENT_MIMETYPE)) {
+    $sql = 'SELECT tor_status, poster_id FROM ' . BB_BT_TORRENTS . ' WHERE attach_id = ' . (int)$attachment['attach_id'];
+
+    if (!($result = DB()->sql_query($sql))) {
+        bb_die('Could not query tor_status information');
+    }
+
+    $row = DB()->sql_fetchrow($result);
+
+    if (isset(config()->get('tor_frozen')[$row['tor_status']]) && !(isset(config()->get('tor_frozen_author_download')[$row['tor_status']]) && $userdata['user_id'] === $row['poster_id'])) {
+        bb_die($lang['TOR_STATUS_FORBIDDEN'] . $lang['TOR_STATUS_NAME'][$row['tor_status']]);
+    }
+
+    DB()->sql_freeresult($result);
+}
+
+// Get Information on currently allowed Extensions
+$rows = get_extension_informations();
+$num_rows = count($rows);
+
+$allowed_extensions = $download_mode = [];
+for ($i = 0; $i < $num_rows; $i++) {
+    $extension = strtolower(trim($rows[$i]['extension']));
+    // Get allowed extensions
+    if ((int)$rows[$i]['allow_group'] === 1) {
+        $allowed_extensions[] = $extension;
+    }
+    $download_mode[$extension] = $rows[$i]['download_mode'];
+}
+
+// Disallowed
+if (!in_array($attachment['extension'], $allowed_extensions) && !IS_ADMIN) {
+    bb_die(sprintf($lang['EXTENSION_DISABLED_AFTER_POSTING'], $attachment['extension']) . '<br /><br />' . $lang['FILENAME'] . ":&nbsp;" . $attachment['physical_filename']);
+}
+
+// Getting download mode by extension
+if (isset($download_mode[$attachment['extension']])) {
+    $download_mode = (int)$download_mode[$attachment['extension']];
+} else {
+    bb_die(sprintf($lang['EXTENSION_DISABLED_AFTER_POSTING'], $attachment['extension']) . '<br /><br />' . $lang['FILENAME'] . ":&nbsp;" . $attachment['physical_filename']);
+}
+
+// Update download count
+if (!$m3u && !$thumbnail && is_file(realpath($upload_dir . '/' . $attachment['physical_filename']))) {
+    $sql = 'UPDATE ' . BB_ATTACHMENTS_DESC . ' SET download_count = download_count + 1 WHERE attach_id = ' . (int)$attachment['attach_id'];
+
+    if (!DB()->sql_query($sql)) {
+        bb_die('Could not update attachment download count');
+    }
+}
+
+// Determine the 'presenting'-method
+switch ($download_mode) {
+    case PHYSICAL_LINK:
+        $url = make_url($upload_dir . '/' . $attachment['physical_filename']);
+        header('Location: ' . $url);
+        exit;
+    case INLINE_LINK:
+        if (IS_GUEST && !config()->get('captcha.disabled') && !bb_captcha('check')) {
+            global $template;
+
+            $redirect_url = $_POST['redirect_url'] ?? $_SERVER['HTTP_REFERER'] ?? '/';
+            $message = '<form action="' . DL_URL . $attachment['attach_id'] . '" method="post">';
+            $message .= $lang['CAPTCHA'] . ':';
+            $message .= '<div  class="mrg_10" align="center">' . bb_captcha('get') . '</div>';
+            $message .= '<input type="hidden" name="redirect_url" value="' . $redirect_url . '" />';
+            $message .= '<input type="submit" class="bold" value="' . $lang['SUBMIT'] . '" /> &nbsp;';
+            $message .= '<input type="button" class="bold" value="' . $lang['GO_BACK'] . '" onclick="document.location.href = \'' . $redirect_url . '\';" />';
+            $message .= '</form>';
+
+            $template->assign_vars(['ERROR_MESSAGE' => $message]);
+
+            require(PAGE_HEADER);
+            require(PAGE_FOOTER);
+        }
+
+        send_file_to_browser($attachment, $upload_dir);
+        exit;
+    default:
+        bb_die('Incorrect download mode: ' . $download_mode);
+}

dl_list.php

@@ -0,0 +1,139 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+define('BB_SCRIPT', 'dl_list');
+
+require __DIR__ . '/common.php';
+
+$forum_id = $_REQUEST[POST_FORUM_URL] ?? 0;
+$topic_id = $_REQUEST[POST_TOPIC_URL] ?? 0;
+$mode = isset($_REQUEST['mode']) ? (string)$_REQUEST['mode'] : '';
+$confirmed = isset($_POST['confirm']);
+
+// Get new DL-status
+if ($mode == 'set_dl_status' || $mode == 'set_topics_dl_status') {
+    if (isset($_POST['dl_set_will'])) {
+        $new_dl_status = DL_STATUS_WILL;
+        $dl_key = 'dlw';
+    } elseif (isset($_POST['dl_set_down'])) {
+        $new_dl_status = DL_STATUS_DOWN;
+        $dl_key = 'dld';
+    } elseif (isset($_POST['dl_set_complete'])) {
+        $new_dl_status = DL_STATUS_COMPLETE;
+        $dl_key = 'dlc';
+    } elseif (isset($_POST['dl_set_cancel'])) {
+        $new_dl_status = DL_STATUS_CANCEL;
+        $dl_key = 'dla';
+    } else {
+        bb_die('Invalid download status');
+    }
+}
+
+// Define redirect URL
+$full_url = isset($_POST['full_url']) ? str_replace('&amp;', '&', htmlspecialchars($_POST['full_url'])) : '';
+
+if (isset($_POST['redirect_type']) && $_POST['redirect_type'] == 'search') {
+    $redirect_type = 'search.php';
+    $redirect = $full_url ?: "$dl_key=1";
+} else {
+    $redirect_type = (!$topic_id) ? 'viewforum.php' : 'viewtopic.php';
+    $redirect = $full_url ?: ((!$topic_id) ? POST_FORUM_URL . "=$forum_id" : POST_TOPIC_URL . "=$topic_id");
+}
+
+// Start session management
+$user->session_start();
+
+set_die_append_msg();
+
+// Check if user logged in
+if (IS_GUEST) {
+    redirect(LOGIN_URL . "?redirect=$redirect_type&$redirect");
+}
+
+// Check if user did not confirm
+if (isset($_POST['cancel']) && $_POST['cancel']) {
+    redirect("$redirect_type?$redirect");
+}
+
+// Delete DL-list
+if ($mode == 'dl_delete' && $topic_id) {
+    if (!IS_ADMIN) {
+        $sql = "SELECT forum_id FROM " . BB_TOPICS . " WHERE topic_id = $topic_id LIMIT 1";
+
+        if (!$row = DB()->sql_fetchrow(DB()->sql_query($sql))) {
+            bb_die('Could not obtain forum_id for this topic');
+        }
+
+        $is_auth = auth(AUTH_ALL, $row['forum_id'], $userdata);
+
+        if (!$is_auth['auth_mod']) {
+            bb_die($lang['NOT_MODERATOR']);
+        }
+    }
+
+    if (!$confirmed) {
+        $hidden_fields = [
+            POST_TOPIC_URL => $topic_id,
+            'mode' => 'dl_delete',
+        ];
+
+        print_confirmation([
+            'QUESTION' => $lang['DL_LIST_DEL_CONFIRM'],
+            'FORM_ACTION' => 'dl_list.php',
+            'HIDDEN_FIELDS' => build_hidden_fields($hidden_fields),
+        ]);
+    }
+
+    clear_dl_list($topic_id);
+    redirect("$redirect_type?$redirect");
+}
+
+// Update DL status
+$req_topics_ary = $topics_ary = [];
+
+// Get topics selected by user
+if ($mode == 'set_topics_dl_status') {
+    if (!isset($_POST['dl_topics_id_list']) || !is_array($_POST['dl_topics_id_list'])) {
+        bb_die($lang['NONE_SELECTED']);
+    }
+
+    foreach ($_POST['dl_topics_id_list'] as $topic_id) {
+        $req_topics_ary[] = (int)$topic_id;
+    }
+} elseif ($mode == 'set_dl_status') {
+    $req_topics_ary[] = (int)$topic_id;
+}
+
+// Get existing topics
+if ($req_topics_sql = implode(',', $req_topics_ary)) {
+    $sql = "SELECT topic_id FROM " . BB_TOPICS . " WHERE topic_id IN($req_topics_sql)";
+
+    foreach (DB()->fetch_rowset($sql) as $row) {
+        $topics_ary[] = $row['topic_id'];
+    }
+}
+
+if ($topics_ary && ($mode == 'set_dl_status' || $mode == 'set_topics_dl_status')) {
+    $new_dlstatus_ary = [];
+
+    foreach ($topics_ary as $topic_id) {
+        $new_dlstatus_ary[] = [
+            'user_id' => (int)$user->id,
+            'topic_id' => (int)$topic_id,
+            'user_status' => (int)$new_dl_status,
+        ];
+    }
+    $new_dlstatus_sql = DB()->build_array('MULTI_INSERT', $new_dlstatus_ary);
+
+    DB()->query("REPLACE INTO " . BB_BT_DLSTATUS . " $new_dlstatus_sql");
+
+    redirect("$redirect_type?$redirect");
+}
+
+redirect('index.php');

feed.php

@@ -0,0 +1,67 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+define('BB_SCRIPT', 'feed');
+
+require __DIR__ . '/common.php';
+
+// Init userdata
+$user->session_start(['req_login' => true]);
+
+$mode = $_REQUEST['mode'] ?? '';
+$type = $_POST['type'] ?? '';
+$id = isset($_POST['id']) ? (int)$_POST['id'] : 0;
+$timecheck = TIMENOW - 600;
+
+if (!$mode) {
+    bb_simple_die($lang['ATOM_NO_MODE']);
+}
+
+if ($mode === 'get_feed_url' && ($type === 'f' || $type === 'u') && $id >= 0) {
+    if ($type == 'f') {
+        // Check if the user has actually sent a forum ID
+        $sql = "SELECT allow_reg_tracker, forum_name FROM " . BB_FORUMS . " WHERE forum_id = $id LIMIT 1";
+        if (!$forum_data = DB()->fetch_row($sql)) {
+            if ($id == 0) {
+                $forum_data = [];
+            } else {
+                bb_simple_die($lang['ATOM_ERROR'] . ' #1');
+            }
+        }
+        if (is_file(config()->get('atom.path') . '/f/' . $id . '.atom') && filemtime(config()->get('atom.path') . '/f/' . $id . '.atom') > $timecheck) {
+            redirect(config()->get('atom.url') . '/f/' . $id . '.atom');
+        } else {
+            if (\TorrentPier\Legacy\Atom::update_forum_feed($id, $forum_data)) {
+                redirect(config()->get('atom.url') . '/f/' . $id . '.atom');
+            } else {
+                bb_simple_die($lang['ATOM_NO_FORUM']);
+            }
+        }
+    }
+    if ($type === 'u') {
+        // Check if the user has actually sent a user ID
+        if ($id < 1) {
+            bb_simple_die($lang['ATOM_ERROR'] . ' #2');
+        }
+        if (!$username = get_username($id)) {
+            bb_simple_die($lang['ATOM_ERROR'] . ' #3');
+        }
+        if (is_file(config()->get('atom.path') . '/u/' . floor($id / 5000) . '/' . ($id % 100) . '/' . $id . '.atom') && filemtime(config()->get('atom.path') . '/u/' . floor($id / 5000) . '/' . ($id % 100) . '/' . $id . '.atom') > $timecheck) {
+            redirect(config()->get('atom.url') . '/u/' . floor($id / 5000) . '/' . ($id % 100) . '/' . $id . '.atom');
+        } else {
+            if (\TorrentPier\Legacy\Atom::update_user_feed($id, $username)) {
+                redirect(config()->get('atom.url') . '/u/' . floor($id / 5000) . '/' . ($id % 100) . '/' . $id . '.atom');
+            } else {
+                bb_simple_die($lang['ATOM_NO_USER']);
+            }
+        }
+    }
+} else {
+    bb_simple_die($lang['ATOM_ERROR'] . ' #4');
+}

filelist.php

@@ -0,0 +1,117 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+define('BB_SCRIPT', 'filelist');
+
+require __DIR__ . '/common.php';
+
+// Start session management
+$user->session_start();
+
+if (config()->get('bt_disable_dht') && IS_GUEST) {
+    bb_die($lang['BT_PRIVATE_TRACKER'], 403);
+}
+
+$topic_id = isset($_GET[POST_TOPIC_URL]) ? (int)$_GET[POST_TOPIC_URL] : 0;
+if (!$topic_id) {
+    bb_die($lang['INVALID_TOPIC_ID'], 404);
+}
+
+$sql = 'SELECT t.forum_id, t.attach_id, t.info_hash, t.info_hash_v2, t.size, ad.physical_filename
+        FROM ' . BB_BT_TORRENTS . ' t
+        LEFT JOIN ' . BB_ATTACHMENTS_DESC . ' ad
+        ON t.attach_id = ad.attach_id
+        WHERE t.topic_id = ' . $topic_id . '
+        LIMIT 1';
+
+if (!$row = DB()->fetch_row($sql)) {
+    bb_die($lang['INVALID_TOPIC_ID_DB'], 404);
+}
+
+// Check rights
+$is_auth = auth(AUTH_ALL, $row['forum_id'], $userdata);
+if (!$is_auth['auth_view']) {
+    bb_die($lang['SORRY_AUTH_VIEW_ATTACH'], 403);
+}
+
+// Protocol meta
+$meta_v1 = !empty($row['info_hash']);
+$meta_v2 = !empty($row['info_hash_v2']);
+
+// Method fields
+$t_version_field = $meta_v2 ? 'v2' : 'v1';
+$t_files_field = $meta_v2 ? 'getFileTree' : 'getFiles';
+$t_hash_field = $meta_v2 ? 'piecesRoot' : 'sha1';
+
+$file_path = get_attachments_dir() . '/' . $row['physical_filename'];
+if (!is_file($file_path)) {
+    bb_die($lang['TOR_NOT_FOUND'], 410);
+}
+
+$file_contents = file_get_contents($file_path);
+if (config()->get('flist_max_files')) {
+    $filetree_pos = $meta_v2 ? strpos($file_contents, '9:file tree') : false;
+    $files_pos = $meta_v1 ? strpos($file_contents, '5:files', $filetree_pos) : false;
+
+    if ($filetree_pos) {
+        $file_count = substr_count($file_contents, '6:length', $filetree_pos, ($files_pos ? ($files_pos - $filetree_pos) : null));
+    } else {
+        $file_count = substr_count($file_contents, '6:length', $files_pos);
+    }
+
+    if ($file_count > config()->get('flist_max_files')) {
+        bb_die(sprintf($lang['BT_FLIST_LIMIT'], config()->get('flist_max_files'), $file_count), 410);
+    }
+}
+
+try {
+    $torrent = \Arokettu\Torrent\TorrentFile::loadFromString($file_contents);
+} catch (\Exception $e) {
+    bb_die(htmlCHR("{$lang['TORFILE_INVALID']}: {$e->getMessage()}"), 410);
+}
+
+if (IS_GUEST && $torrent->isPrivate()) {
+    bb_die($lang['BT_PRIVATE_TORRENT'], 403);
+}
+
+// Get torrent files
+$files = $torrent->$t_version_field()->$t_files_field();
+if ($meta_v2) {
+    $files = new \RecursiveIteratorIterator($files); // Flatten the list
+}
+
+$files_count = 0;
+foreach ($files as $file) {
+    $files_count++;
+    $row_class = ($files_count % 2) ? 'row1' : 'row2';
+    $template->assign_block_vars('filelist', [
+        'ROW_NUMBER' => $files_count,
+        'ROW_CLASS' => $row_class,
+        'FILE_PATH' => clean_tor_dirname(implode('/', $file->path)),
+        'FILE_LENGTH' => humn_size($file->length, 2),
+        'FILE_HASH' => $file->$t_hash_field ?? '-'
+    ]);
+}
+
+$torrent_name = !empty($t_name = $torrent->getName()) ? str_short(htmlCHR($t_name), 200) : $lang['UNKNOWN'];
+$torrent_size = humn_size($row['size'], 2);
+
+// Output page
+$template->assign_vars([
+    'PAGE_TITLE' => "$torrent_name (" . $torrent_size . ")",
+    'FILES_COUNT' => sprintf($lang['BT_FLIST_FILE_PATH'], declension(iterator_count($files), 'files')),
+    'TORRENT_CREATION_DATE' => (!empty($dt = $torrent->getCreationDate()) && is_numeric($creation_date = $dt->getTimestamp())) ? date('d-M-Y H:i (e)', $creation_date) : $lang['UNKNOWN'],
+    'TORRENT_CLIENT' => !empty($creator = $torrent->getCreatedBy()) ? htmlCHR($creator) : $lang['UNKNOWN'],
+    'TORRENT_PRIVATE' => $torrent->isPrivate() ? $lang['YES'] : $lang['NO'],
+
+    'BTMR_NOTICE' => sprintf($lang['BT_FLIST_BTMR_NOTICE'], 'https://github.com/kovalensky/tmrr'),
+    'U_TOPIC' => TOPIC_URL . $topic_id,
+]);
+
+print_page('filelist.tpl');

group.php

@@ -0,0 +1,600 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+define('BB_SCRIPT', 'group');
+
+require __DIR__ . '/common.php';
+require INC_DIR . '/bbcode.php';
+
+$page_cfg['use_tablesorter'] = true;
+
+$s_member_groups = $s_pending_groups = $s_member_groups_opt = $s_pending_groups_opt = '';
+$select_sort_mode = $select_sort_order = '';
+
+// Init userdata
+$user->session_start(['req_login' => true]);
+
+set_die_append_msg();
+
+$group_id = isset($_REQUEST[POST_GROUPS_URL]) ? (int)$_REQUEST[POST_GROUPS_URL] : null;
+$start = isset($_REQUEST['start']) ? abs((int)$_REQUEST['start']) : 0;
+$per_page = config()->get('group_members_per_page');
+$view_mode = isset($_REQUEST['view']) ? (string)$_REQUEST['view'] : null;
+$rel_limit = 50;
+
+$group_info = [];
+$is_moderator = false;
+
+if ($group_id) {
+    if (!$group_info = \TorrentPier\Legacy\Group::get_group_data($group_id)) {
+        bb_die($lang['GROUP_NOT_EXIST']);
+    }
+    if (!$group_info['group_id'] || !$group_info['group_moderator'] || !$group_info['moderator_name']) {
+        bb_die("Invalid group data [group_id: $group_id]");
+    }
+    $is_moderator = ($userdata['user_id'] == $group_info['group_moderator'] || IS_ADMIN);
+}
+
+if (!$group_id) {
+    // Show the main screen where the user can select a group.
+    $groups = [];
+    $pending = 10;
+    $member = 20;
+
+    $sql = "
+		SELECT
+			g.group_name, g.group_description, g.group_id, g.group_type, g.release_group,
+			IF(ug.user_id IS NOT NULL, IF(ug.user_pending = 1, $pending, $member), 0) AS membership,
+			g.group_moderator, u.username AS moderator_name,
+			IF(g.group_moderator = ug.user_id, 1, 0) AS is_group_mod,
+			COUNT(ug2.user_id) AS members, SUM(ug2.user_pending) AS candidates
+		FROM
+			" . BB_GROUPS . " g
+		LEFT JOIN
+			" . BB_USER_GROUP . " ug ON
+			    ug.group_id = g.group_id
+			AND ug.user_id = " . $userdata['user_id'] . "
+		LEFT JOIN
+			" . BB_USER_GROUP . " ug2 ON
+			    ug2.group_id = g.group_id
+		LEFT JOIN
+			" . BB_USERS . " u ON g.group_moderator = u.user_id
+		WHERE
+			g.group_single_user = 0
+		GROUP BY g.group_id
+		ORDER BY
+			is_group_mod DESC,
+			membership   DESC,
+			g.group_type ASC,
+			g.group_name ASC
+	";
+
+    foreach (DB()->fetch_rowset($sql) as $row) {
+        if ($row['is_group_mod']) {
+            $type = 'MOD';
+        } elseif ($row['membership'] == $member) {
+            $type = 'MEMBER';
+        } elseif ($row['membership'] == $pending) {
+            $type = 'PENDING';
+        } elseif ($row['group_type'] == GROUP_OPEN) {
+            $type = 'OPEN';
+        } elseif ($row['group_type'] == GROUP_CLOSED) {
+            $type = 'CLOSED';
+        } elseif ($row['group_type'] == GROUP_HIDDEN && IS_ADMIN) {
+            $type = 'HIDDEN';
+        } else {
+            continue;
+        }
+
+        $data = ['id' => $row['group_id'], 'm' => ($row['members'] - $row['candidates']), 'c' => $row['candidates'], 'rg' => $row['release_group']];
+
+        $groups[$type][$row['group_name']] = $data;
+    }
+
+    function build_group($params)
+    {
+        global $lang;
+
+        $options = '';
+        foreach ($params as $name => $data) {
+            $text = str_short(rtrim(htmlCHR($name)), HTML_SELECT_MAX_LENGTH);
+
+            $members = ($data['m']) ? $lang['MEMBERS_IN_GROUP'] . ': ' . $data['m'] : $lang['NO_GROUP_MEMBERS'];
+            $candidates = ($data['c']) ? $lang['PENDING_MEMBERS'] . ': ' . $data['c'] : $lang['NO_PENDING_GROUP_MEMBERS'];
+
+            $options .= '<li class="pad_2"><a href="' . GROUP_URL . $data['id'] . '" class="med bold">' . $text . '</a></li>';
+            $options .= ($data['rg']) ? '<ul><li class="med">' . $lang['RELEASE_GROUP'] . '</li>' : '<ul>';
+            $options .= '<li class="seedmed">' . $members . '</li>';
+            if (IS_AM) {
+                $options .= '<li class="leechmed">' . $candidates . '</li>';
+            }
+            $options .= '</ul>';
+        }
+        return $options;
+    }
+
+    if ($groups) {
+        $s_hidden_fields = '';
+
+        foreach ($groups as $type => $grp) {
+            $template->assign_block_vars('groups', [
+                'MEMBERSHIP' => $lang["GROUP_MEMBER_{$type}"],
+                'GROUP_SELECT' => build_group($grp)
+            ]);
+        }
+
+        $template->assign_vars([
+            'SELECT_GROUP' => true,
+            'PAGE_TITLE' => $lang['GROUP_CONTROL_PANEL'],
+            'S_USERGROUP_ACTION' => 'group.php',
+            'S_HIDDEN_FIELDS' => $s_hidden_fields
+        ]);
+    } else {
+        if (IS_ADMIN) {
+            redirect('admin/admin_groups.php');
+        } else {
+            bb_die($lang['NO_GROUPS_EXIST']);
+        }
+    }
+} elseif (isset($_POST['joingroup']) && $_POST['joingroup']) {
+    if ($group_info['group_type'] != GROUP_OPEN) {
+        bb_die($lang['THIS_CLOSED_GROUP']);
+    }
+
+    $sql = "SELECT g.group_id, g.group_name, ug.user_id, u.user_email, u.username, u.user_lang
+		FROM " . BB_GROUPS . " g
+		LEFT JOIN " . BB_USERS . " u ON(u.user_id = g.group_moderator)
+		LEFT JOIN " . BB_USER_GROUP . " ug ON(ug.group_id = g.group_id AND ug.user_id = {$userdata['user_id']})
+		WHERE g.group_id = $group_id
+			AND group_single_user = 0
+			AND g.group_type = " . GROUP_OPEN . "
+		LIMIT 1";
+
+    $row = $moderator = DB()->fetch_row($sql);
+
+    if (!$row['group_id']) {
+        bb_die($lang['NO_GROUPS_EXIST']);
+    }
+    if ($row['user_id']) {
+        set_die_append_msg(group_id: $group_id);
+        bb_die($lang['ALREADY_MEMBER_GROUP']);
+    }
+
+    \TorrentPier\Legacy\Group::add_user_into_group($group_id, $userdata['user_id'], 1, TIMENOW);
+
+    if (config()->get('group_send_email')) {
+        // Sending email
+        $emailer = new TorrentPier\Emailer();
+
+        $emailer->set_to($moderator['user_email'], $moderator['username']);
+        $emailer->set_subject($lang['EMAILER_SUBJECT']['GROUP_REQUEST']);
+
+        $emailer->set_template('group_request', $moderator['user_lang']);
+        $emailer->assign_vars([
+            'USER' => $userdata['username'],
+            'GROUP_MODERATOR' => $moderator['username'],
+            'U_GROUP' => make_url(GROUP_URL . $group_id)
+        ]);
+
+        $emailer->send();
+    }
+
+    set_die_append_msg(group_id: $group_id);
+    bb_die($lang['GROUP_JOINED']);
+} elseif (!empty($_POST['unsub']) || !empty($_POST['unsubpending'])) {
+    \TorrentPier\Legacy\Group::delete_user_group($group_id, $userdata['user_id']);
+
+    set_die_append_msg(group_id: $group_id);
+    bb_die($lang['UNSUB_SUCCESS']);
+} else {
+    // Handle Additions, removals, approvals and denials
+    $group_moderator = $group_info['group_moderator'];
+
+    if (!empty($_POST['add']) || !empty($_POST['remove']) || !empty($_POST['approve']) || !empty($_POST['deny'])) {
+        if (!$is_moderator) {
+            set_die_append_msg(group_id: $group_id);
+            bb_die($lang['NOT_GROUP_MODERATOR']);
+        }
+
+        if (!empty($_POST['add'])) {
+            if (isset($_POST['username']) && !($row = get_userdata($_POST['username'], true))) {
+                set_die_append_msg(group_id: $group_id);
+                bb_die($lang['COULD_NOT_ADD_USER']);
+            }
+
+            // Prevent adding moderator
+            if ($row['user_id'] == $group_moderator) {
+                set_die_append_msg(group_id: $group_id);
+                bb_die(sprintf($lang['USER_IS_MOD_GROUP'], profile_url($row)));
+            }
+
+            // Prevent infinity user adding into group
+            if ($is_member = DB()->fetch_row("SELECT user_id FROM " . BB_USER_GROUP . " WHERE group_id = $group_id AND user_id = " . $row['user_id'] . " LIMIT 1")) {
+                if ($is_member['user_id']) {
+                    set_die_append_msg(group_id: $group_id);
+                    bb_die(sprintf($lang['USER_IS_MEMBER_GROUP'], profile_url($row)));
+                }
+            }
+
+            \TorrentPier\Legacy\Group::add_user_into_group($group_id, $row['user_id']);
+
+            if (config()->get('group_send_email')) {
+                // Sending email
+                $emailer = new TorrentPier\Emailer();
+
+                $emailer->set_to($row['user_email'], $row['username']);
+                $emailer->set_subject($lang['EMAILER_SUBJECT']['GROUP_ADDED']);
+
+                $emailer->set_template('group_added', $row['user_lang']);
+                $emailer->assign_vars([
+                    'GROUP_NAME' => $group_info['group_name'],
+                    'U_GROUP' => make_url(GROUP_URL . $group_id)
+                ]);
+
+                $emailer->send();
+            }
+        } else {
+            if (((!empty($_POST['approve']) || !empty($_POST['deny'])) && !empty($_POST['pending_members'])) || (!empty($_POST['remove']) && !empty($_POST['members']))) {
+                $members = (!empty($_POST['approve']) || !empty($_POST['deny'])) ? $_POST['pending_members'] : $_POST['members'];
+
+                $sql_in = [];
+                foreach ($members as $members_id) {
+                    $sql_in[] = (int)$members_id;
+                }
+                if (!$sql_in = implode(',', $sql_in)) {
+                    set_die_append_msg(group_id: $group_id);
+                    bb_die($lang['NONE_SELECTED']);
+                }
+
+                if (!empty($_POST['approve'])) {
+                    DB()->query("
+						UPDATE " . BB_USER_GROUP . " SET
+							user_pending = 0
+						WHERE user_id IN($sql_in)
+							AND group_id = $group_id
+					");
+
+                    \TorrentPier\Legacy\Group::update_user_level($sql_in);
+                } elseif (!empty($_POST['deny']) || !empty($_POST['remove'])) {
+                    DB()->query("
+						DELETE FROM " . BB_USER_GROUP . "
+						WHERE user_id IN($sql_in)
+							AND group_id = $group_id
+					");
+
+                    if (!empty($_POST['remove'])) {
+                        \TorrentPier\Legacy\Group::update_user_level($sql_in);
+                    }
+                }
+                // Email users when they are approved
+                if (!empty($_POST['approve']) && config()->get('group_send_email')) {
+                    $sql_select = "SELECT username, user_email, user_lang
+                        FROM " . BB_USERS . "
+                        WHERE user_id IN($sql_in)";
+
+                    if (!$result = DB()->sql_query($sql_select)) {
+                        bb_die('Could not get user email information');
+                    }
+
+                    foreach (DB()->fetch_rowset($sql_select) as $row) {
+                        // Sending email
+                        $emailer = new TorrentPier\Emailer();
+
+                        $emailer->set_to($row['user_email'], $row['username']);
+                        $emailer->set_subject($lang['EMAILER_SUBJECT']['GROUP_APPROVED']);
+
+                        $emailer->set_template('group_approved', $row['user_lang']);
+                        $emailer->assign_vars([
+                            'GROUP_NAME' => $group_info['group_name'],
+                            'U_GROUP' => make_url(GROUP_URL . $group_id)
+                        ]);
+
+                        $emailer->send();
+                    }
+                }
+            }
+        }
+    }
+    // END approve or deny
+
+    // Get moderator details for this group
+    $group_moderator = DB()->fetch_row("
+		SELECT *
+		FROM " . BB_USERS . "
+		WHERE user_id = " . $group_info['group_moderator'] . "
+	");
+
+    // Current user membership
+    $is_group_member = $is_group_pending_member = false;
+
+    $sql = "SELECT user_pending
+		FROM " . BB_USER_GROUP . "
+		WHERE group_id = $group_id
+			AND user_id = " . $userdata['user_id'] . "
+		LIMIT 1";
+
+    if ($row = DB()->fetch_row($sql)) {
+        if ($row['user_pending'] == 0) {
+            $is_group_member = true;
+        } else {
+            $is_group_pending_member = true;
+        }
+    }
+
+    if ($userdata['user_id'] == $group_moderator['user_id']) {
+        $group_details = $lang['ARE_GROUP_MODERATOR'];
+        $s_hidden_fields = '<input type="hidden" name="' . POST_GROUPS_URL . '" value="' . $group_id . '" />';
+    } elseif ($is_group_member || $is_group_pending_member) {
+        $template->assign_vars([
+            'SHOW_UNSUBSCRIBE_CONTROLS' => true,
+            'CONTROL_NAME' => ($is_group_member) ? 'unsub' : 'unsubpending',
+        ]);
+        $group_details = ($is_group_pending_member) ? $lang['PENDING_THIS_GROUP'] : $lang['MEMBER_THIS_GROUP'];
+        $s_hidden_fields = '<input type="hidden" name="' . POST_GROUPS_URL . '" value="' . $group_id . '" />';
+    } elseif (IS_GUEST) {
+        $group_details = $lang['LOGIN_TO_JOIN'];
+        $s_hidden_fields = '';
+    } else {
+        if ($group_info['group_type'] == GROUP_OPEN) {
+            $template->assign_var('SHOW_SUBSCRIBE_CONTROLS');
+
+            $group_details = $lang['THIS_OPEN_GROUP'];
+            $s_hidden_fields = '<input type="hidden" name="' . POST_GROUPS_URL . '" value="' . $group_id . '" />';
+        } elseif ($group_info['group_type'] == GROUP_CLOSED) {
+            $group_details = $lang['THIS_CLOSED_GROUP'];
+            $s_hidden_fields = '';
+        } elseif ($group_info['group_type'] == GROUP_HIDDEN) {
+            $group_details = $lang['THIS_HIDDEN_GROUP'];
+            $s_hidden_fields = '';
+        }
+    }
+
+    // Add the moderator
+    $username = $group_moderator['username'];
+    $user_id = $group_moderator['user_id'];
+
+    $moderator_info = generate_user_info($group_moderator, $is_moderator);
+
+    $group_type = '';
+    if ($group_info['group_type'] == GROUP_OPEN) {
+        $group_type = $lang['GROUP_OPEN'];
+    } elseif ($group_info['group_type'] == GROUP_CLOSED) {
+        $group_type = $lang['GROUP_CLOSED'];
+    } elseif ($group_info['group_type'] == GROUP_HIDDEN) {
+        $group_type = $lang['GROUP_HIDDEN'];
+    }
+
+    $i = 0;
+    $template->assign_vars([
+        'ROW_NUMBER' => $i + ($start + 1),
+        'GROUP_INFO' => true,
+        'PAGE_TITLE' => $lang['GROUP_CONTROL_PANEL'],
+        'GROUP_NAME' => htmlCHR($group_info['group_name']),
+        'GROUP_DESCRIPTION' => bbcode2html($group_info['group_description']),
+        'GROUP_SIGNATURE' => bbcode2html($group_info['group_signature']),
+        'GROUP_AVATAR' => get_avatar(GROUP_AVATAR_MASK . $group_id, $group_info['avatar_ext_id']),
+        'GROUP_DETAILS' => $group_details,
+        'GROUP_TIME' => !empty($group_info['group_time']) ? sprintf('%s <span class="signature">(%s)</span>', bb_date($group_info['group_time']), delta_time($group_info['group_time'])) : $lang['NONE'],
+        'MOD_USER' => profile_url($group_moderator),
+        'MOD_AVATAR' => $moderator_info['avatar'],
+        'MOD_FROM' => $moderator_info['from'],
+        'MOD_JOINED' => $moderator_info['joined'],
+        'MOD_JOINED_RAW' => $moderator_info['joined_raw'],
+        'MOD_POSTS' => $moderator_info['posts'],
+        'MOD_PM' => $moderator_info['pm'],
+        'MOD_EMAIL' => $moderator_info['email'],
+        'MOD_WWW' => $moderator_info['www'],
+        'MOD_TIME' => !empty($group_info['mod_time']) ? sprintf('%s <span class="signature">(%s)</span>', bb_date($group_info['mod_time']), delta_time($group_info['mod_time'])) : $lang['NONE'],
+        'MOD_TIME_RAW' => !empty($group_info['mod_time']) ? $group_info['mod_time'] : '',
+        'U_SEARCH_USER' => 'search.php?mode=searchuser',
+        'U_SEARCH_RELEASES' => "tracker.php?srg=$group_id",
+        'U_GROUP_RELEASES' => GROUP_URL . $group_id . "&view=releases",
+        'U_GROUP_MEMBERS' => GROUP_URL . $group_id . "&view=members",
+        'U_GROUP_CONFIG' => "group_edit.php?" . POST_GROUPS_URL . "=$group_id",
+        'RELEASE_GROUP' => (bool)$group_info['release_group'],
+        'GROUP_TYPE' => $group_type,
+
+        'S_GROUP_OPEN_TYPE' => GROUP_OPEN,
+        'S_GROUP_CLOSED_TYPE' => GROUP_CLOSED,
+        'S_GROUP_HIDDEN_TYPE' => GROUP_HIDDEN,
+        'S_GROUP_OPEN_CHECKED' => ($group_info['group_type'] == GROUP_OPEN) ? ' checked' : '',
+        'S_GROUP_CLOSED_CHECKED' => ($group_info['group_type'] == GROUP_CLOSED) ? ' checked' : '',
+        'S_GROUP_HIDDEN_CHECKED' => ($group_info['group_type'] == GROUP_HIDDEN) ? ' checked' : '',
+        'S_HIDDEN_FIELDS' => $s_hidden_fields,
+        'S_MODE_SELECT' => $select_sort_mode,
+        'S_ORDER_SELECT' => $select_sort_order,
+
+        'S_GROUP_ACTION' => GROUP_URL . $group_id,
+    ]);
+
+    switch ($view_mode) {
+        case 'releases':
+            // TODO Correct SQL to posts with attach and limit them, optimization
+
+            if (!$group_info['release_group']) {
+                set_die_append_msg(group_id: $group_id);
+                bb_die($lang['NOT_A_RELEASE_GROUP']);
+            }
+
+            // Count releases for pagination
+            $all_releases = DB()->fetch_rowset("
+				SELECT p.topic_id, p.forum_id, p.poster_id, t.topic_title, t.topic_time, f.forum_name, u.username, u.avatar_ext_id, u.user_opt, u.user_rank
+				FROM " . BB_POSTS . " p
+				LEFT JOIN " . BB_TOPICS . " t ON(p.topic_id = t.topic_id)
+				LEFT JOIN " . BB_FORUMS . " f ON(p.forum_id= f.forum_id)
+				LEFT JOIN " . BB_USERS . " u ON(p.poster_id = u.user_id)
+				WHERE p.poster_rg_id = $group_id
+				ORDER BY t.topic_time DESC
+				LIMIT $rel_limit
+			");
+            $count_releases = count($all_releases);
+
+            generate_pagination(GROUP_URL . $group_id . "&amp;view=releases", $count_releases, $per_page, $start);
+
+            $sql = "
+				SELECT p.topic_id, p.forum_id, p.poster_id, t.topic_title, t.topic_time, f.forum_name, u.username, u.avatar_ext_id, u.user_opt, u.user_rank
+				FROM " . BB_POSTS . " p
+				LEFT JOIN " . BB_TOPICS . " t ON(p.topic_id = t.topic_id)
+				LEFT JOIN " . BB_FORUMS . " f ON(p.forum_id= f.forum_id)
+				LEFT JOIN " . BB_USERS . " u ON(p.poster_id = u.user_id)
+				WHERE p.poster_rg_id = $group_id
+				ORDER BY t.topic_time DESC
+				LIMIT $start, $per_page
+			";
+
+            if (!$releases = DB()->fetch_rowset($sql)) {
+                set_die_append_msg(group_id: $group_id);
+                bb_die($lang['NO_SEARCH_MATCH']);
+            }
+
+            foreach ($releases as $i => $release) {
+                $row_class = !($i % 2) ? 'row1' : 'row2';
+
+                $template->assign_block_vars('releases', [
+                    'ROW_NUMBER' => $i + ($start + 1),
+                    'ROW_CLASS' => $row_class,
+                    'RELEASER' => profile_url(['user_id' => $release['poster_id'], 'username' => $release['username'], 'user_rank' => $release['user_rank']]),
+                    'AVATAR_IMG' => get_avatar($release['poster_id'], $release['avatar_ext_id'], !bf($release['user_opt'], 'user_opt', 'dis_avatar'), 50, 50),
+                    'RELEASE_NAME' => sprintf('<a href="%s">%s</a>', TOPIC_URL . $release['topic_id'], htmlCHR($release['topic_title'])),
+                    'RELEASE_TIME' => bb_date($release['topic_time']),
+                    'RELEASE_FORUM' => sprintf('<a href="%s">%s</a>', FORUM_URL . $release['forum_id'], htmlCHR($release['forum_name'])),
+                ]);
+            }
+
+            $template->assign_vars(['RELEASES' => true]);
+
+            break;
+
+        case 'members':
+        default:
+
+            // Members
+            $count_members = DB()->fetch_rowset("
+				SELECT u.username, u.user_rank, u.user_id, u.user_opt, u.user_posts, u.user_regdate, u.user_from, u.user_website, u.user_email, ug.user_pending, ug.user_time
+				FROM " . BB_USER_GROUP . " ug, " . BB_USERS . " u
+				WHERE ug.group_id = $group_id
+					AND ug.user_pending = 0
+					AND ug.user_id <> " . $group_moderator['user_id'] . "
+					AND u.user_id = ug.user_id
+				ORDER BY u.username
+			");
+            $count_members = count($count_members);
+
+            // Get user information for this group
+            $modgroup_pending_count = 0;
+
+            // Members
+            $group_members = DB()->fetch_rowset("
+				SELECT u.username, u.avatar_ext_id, u.user_rank, u.user_id, u.user_opt, u.user_posts, u.user_regdate, u.user_from, u.user_website, u.user_email, ug.user_pending, ug.user_time
+				FROM " . BB_USER_GROUP . " ug, " . BB_USERS . " u
+				WHERE ug.group_id = $group_id
+					AND ug.user_pending = 0
+					AND ug.user_id <> " . $group_moderator['user_id'] . "
+					AND u.user_id = ug.user_id
+				ORDER BY u.username
+				LIMIT $start, $per_page
+			");
+            $members_count = count($group_members);
+
+            generate_pagination(GROUP_URL . $group_id, $count_members, $per_page, $start);
+
+            // Dump out the remaining users
+            foreach ($group_members as $i => $member) {
+                $user_id = $member['user_id'];
+
+                $member_info = generate_user_info($member, $is_moderator);
+
+                if ($group_info['group_type'] != GROUP_HIDDEN || $is_group_member || $is_moderator) {
+                    $row_class = !($i % 2) ? 'row1' : 'row2';
+
+                    $template->assign_block_vars('member', [
+                        'ROW_NUMBER' => $i + ($start + 1),
+                        'ROW_CLASS' => $row_class,
+                        'USER' => profile_url($member),
+                        'AVATAR_IMG' => $member_info['avatar'],
+                        'FROM' => $member_info['from'],
+                        'JOINED' => $member_info['joined'],
+                        'JOINED_RAW' => $member_info['joined_raw'],
+                        'POSTS' => $member_info['posts'],
+                        'USER_ID' => $user_id,
+                        'PM' => $member_info['pm'],
+                        'EMAIL' => $member_info['email'],
+                        'WWW' => $member_info['www'],
+                        'TIME' => $member_info['user_time'],
+                        'TIME_RAW' => $member_info['user_time_raw']
+                    ]);
+
+                    if ($is_moderator) {
+                        $template->assign_block_vars('member.switch_mod_option', []);
+                    }
+                }
+            }
+
+            // No group members
+            if (!$members_count) {
+                $template->assign_block_vars('switch_no_members', []);
+            }
+
+            // No group members
+            if ($group_info['group_type'] == GROUP_HIDDEN && !$is_group_member && !$is_moderator) {
+                $template->assign_block_vars('switch_hidden_group', []);
+            }
+
+            // Pending
+            if ($is_moderator) {
+                $modgroup_pending_list = DB()->fetch_rowset("
+					SELECT u.username, u.avatar_ext_id, u.user_rank, u.user_id, u.user_opt, u.user_posts, u.user_regdate, u.user_from, u.user_website, u.user_email
+					FROM " . BB_USER_GROUP . " ug, " . BB_USERS . " u
+					WHERE ug.group_id = $group_id
+						AND ug.user_pending = 1
+						AND u.user_id = ug.user_id
+					ORDER BY u.username
+					LIMIT 200
+				");
+                $modgroup_pending_count = count($modgroup_pending_list);
+            }
+
+            if ($is_moderator && $modgroup_pending_list) {
+                foreach ($modgroup_pending_list as $i => $member) {
+                    $user_id = $member['user_id'];
+
+                    $pending_info = generate_user_info($member, $is_moderator);
+
+                    $row_class = !($i % 2) ? 'row1' : 'row2';
+
+                    $user_select = '<input type="checkbox" name="member[]" value="' . $user_id . '">';
+
+                    $template->assign_block_vars('pending', [
+                        'ROW_CLASS' => $row_class,
+                        'AVATAR_IMG' => $pending_info['avatar'],
+                        'USER' => profile_url($member),
+                        'FROM' => $pending_info['from'],
+                        'JOINED' => $pending_info['joined'],
+                        'JOINED_RAW' => $pending_info['joined_raw'],
+                        'POSTS' => $pending_info['posts'],
+                        'USER_ID' => $user_id,
+                        'PM' => $pending_info['pm'],
+                        'EMAIL' => $pending_info['email'],
+                        'WWW' => $pending_info['www']
+                    ]);
+                }
+
+                $template->assign_vars(['PENDING_USERS' => true]);
+            }
+
+            $template->assign_vars(['MEMBERS' => true]);
+    }
+
+    if ($is_moderator) {
+        $template->assign_block_vars('switch_mod_option', []);
+        $template->assign_block_vars('switch_add_member', []);
+    }
+}
+
+print_page('group.tpl');

group_edit.php

@@ -0,0 +1,98 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+define('BB_SCRIPT', 'group_edit');
+
+require __DIR__ . '/common.php';
+
+$page_cfg['include_bbcode_js'] = true;
+
+// Start session management
+$user->session_start(['req_login' => true]);
+
+$group_id = isset($_REQUEST[POST_GROUPS_URL]) ? (int)$_REQUEST[POST_GROUPS_URL] : null;
+$group_info = [];
+$is_moderator = false;
+
+$submit = !empty($_POST['submit']);
+
+if ($group_id) {
+    if (!$group_info = \TorrentPier\Legacy\Group::get_group_data($group_id)) {
+        bb_die($lang['GROUP_NOT_EXIST']);
+    }
+    if (!$group_info['group_id'] || !$group_info['group_moderator'] || !$group_info['moderator_name']) {
+        bb_die("Invalid group data [group_id: $group_id]");
+    }
+    $is_moderator = ($userdata['user_id'] == $group_info['group_moderator'] || IS_ADMIN);
+}
+
+if ($is_moderator) {
+    // Avatar
+    if ($submit) {
+        if (!empty($_FILES['avatar']['name']) && config()->get('group_avatars.up_allowed')) {
+            $upload = new TorrentPier\Legacy\Common\Upload();
+
+            if ($upload->init(config()->get('group_avatars'), $_FILES['avatar']) and $upload->store('avatar', ['user_id' => GROUP_AVATAR_MASK . $group_id, 'avatar_ext_id' => $group_info['avatar_ext_id']])) {
+                $avatar_ext_id = (int)$upload->file_ext_id;
+                DB()->query("UPDATE " . BB_GROUPS . " SET avatar_ext_id = $avatar_ext_id WHERE group_id = $group_id LIMIT 1");
+            } else {
+                bb_die(implode($upload->errors));
+            }
+        }
+    }
+
+    $group_type = '';
+    if ($group_info['group_type'] == GROUP_OPEN) {
+        $group_type = $lang['GROUP_OPEN'];
+    } elseif ($group_info['group_type'] == GROUP_CLOSED) {
+        $group_type = $lang['GROUP_CLOSED'];
+    } elseif ($group_info['group_type'] == GROUP_HIDDEN) {
+        $group_type = $lang['GROUP_HIDDEN'];
+    }
+
+    $s_hidden_fields = '<input type="hidden" name="' . POST_GROUPS_URL . '" value="' . $group_id . '" />';
+
+    $template->assign_vars([
+        'PAGE_TITLE' => $lang['GROUP_CONTROL_PANEL'],
+        'GROUP_NAME' => htmlCHR($group_info['group_name']),
+        'GROUP_ID' => $group_id,
+        'GROUP_DESCRIPTION' => htmlCHR($group_info['group_description']),
+        'GROUP_SIGNATURE' => htmlCHR($group_info['group_signature']),
+        'U_GROUP_URL' => GROUP_URL . $group_id,
+        'RELEASE_GROUP' => (bool)$group_info['release_group'],
+        'GROUP_TYPE' => $group_type,
+        'S_GROUP_OPEN_TYPE' => GROUP_OPEN,
+        'S_GROUP_CLOSED_TYPE' => GROUP_CLOSED,
+        'S_GROUP_HIDDEN_TYPE' => GROUP_HIDDEN,
+        'S_GROUP_OPEN_CHECKED' => ($group_info['group_type'] == GROUP_OPEN) ? ' checked' : '',
+        'S_GROUP_CLOSED_CHECKED' => ($group_info['group_type'] == GROUP_CLOSED) ? ' checked' : '',
+        'S_GROUP_HIDDEN_CHECKED' => ($group_info['group_type'] == GROUP_HIDDEN) ? ' checked' : '',
+        'S_HIDDEN_FIELDS' => $s_hidden_fields,
+        'S_GROUP_CONFIG_ACTION' => "group_edit.php?" . POST_GROUPS_URL . "=$group_id",
+
+        'AVATAR_EXPLAIN' => sprintf($lang['AVATAR_EXPLAIN'], config()->get('group_avatars.max_width'), config()->get('group_avatars.max_height'), humn_size(config()->get('group_avatars.max_size'))),
+        'AVATAR_IMG' => get_avatar(GROUP_AVATAR_MASK . $group_id, $group_info['avatar_ext_id']),
+    ]);
+
+    $template->set_filenames(['body' => 'group_edit.tpl']);
+    $template->assign_vars(['PAGE_TITLE' => $lang['GROUP_CONFIGURATION']]);
+
+    require(PAGE_HEADER);
+
+    $template->pparse('body');
+
+    require(PAGE_FOOTER);
+} else {
+    $redirect = 'index.php';
+
+    if ($group_id) {
+        $redirect = GROUP_URL . $group_id;
+    }
+    redirect($redirect);
+}

index.php

@@ -0,0 +1,434 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+define('BB_SCRIPT', 'index');
+
+require __DIR__ . '/common.php';
+
+$page_cfg['load_tpl_vars'] = [
+    'post_icons'
+];
+
+// Show last topic
+$show_last_topic = true;
+$last_topic_max_len = 28;
+
+// Show online stats
+$show_online_users = true;
+
+// Show subforums
+$show_subforums = true;
+
+$datastore->enqueue([
+    'stats',
+    'moderators',
+    'cat_forums'
+]);
+
+if (config()->get('show_latest_news')) {
+    $datastore->enqueue([
+        'latest_news'
+    ]);
+}
+if (config()->get('show_network_news')) {
+    $datastore->enqueue([
+        'network_news'
+    ]);
+}
+
+// Init userdata
+$user->session_start();
+
+// Set meta description
+$page_cfg['meta_description'] = config()->get('site_desc');
+
+// Init main vars
+$viewcat = isset($_GET[POST_CAT_URL]) ? (int)$_GET[POST_CAT_URL] : 0;
+$lastvisit = IS_GUEST ? TIMENOW : $userdata['user_lastvisit'];
+
+// Caching output
+$req_page = 'index_page';
+$req_page .= $viewcat ? "_c{$viewcat}" : '';
+
+define('REQUESTED_PAGE', $req_page);
+caching_output(IS_GUEST, 'send', REQUESTED_PAGE . '_guest_' . config()->get('default_lang'));
+
+$hide_cat_opt = isset($user->opt_js['h_cat']) ? (string)$user->opt_js['h_cat'] : 0;
+$hide_cat_user = array_flip(explode('-', $hide_cat_opt));
+$showhide = isset($_GET['sh']) ? (int)$_GET['sh'] : 0;
+
+// Topics read tracks
+$tracking_topics = get_tracks('topic');
+$tracking_forums = get_tracks('forum');
+
+// Statistics
+$stats = $datastore->get('stats');
+if ($stats === false) {
+    $datastore->update('stats');
+    $stats = $datastore->get('stats');
+}
+
+// Forums data
+$forums = $datastore->get('cat_forums');
+if ($forums === false) {
+    $datastore->update('cat_forums');
+    $forums = $datastore->get('cat_forums');
+}
+$cat_title_html = $forums['cat_title_html'];
+$forum_name_html = $forums['forum_name_html'];
+
+$anon = GUEST_UID;
+$excluded_forums_csv = $user->get_excluded_forums(AUTH_VIEW);
+$excluded_forums_array = $excluded_forums_csv ? explode(',', $excluded_forums_csv) : [];
+$only_new = $user->opt_js['only_new'];
+
+// Validate requested category id
+if ($viewcat && !($viewcat =& $forums['c'][$viewcat]['cat_id'])) {
+    redirect('index.php');
+}
+
+// Forums
+$forums_join_sql = 'f.cat_id = c.cat_id';
+$forums_join_sql .= $viewcat ? "
+	AND f.cat_id = $viewcat
+" : '';
+$forums_join_sql .= $excluded_forums_csv ? "
+	AND f.forum_id NOT IN($excluded_forums_csv)
+	AND f.forum_parent NOT IN($excluded_forums_csv)
+" : '';
+
+// Posts
+$posts_join_sql = 'p.post_id = f.forum_last_post_id';
+$posts_join_sql .= ($only_new == ONLY_NEW_POSTS) ? "
+	AND p.post_time > $lastvisit
+" : '';
+$join_p_type = ($only_new == ONLY_NEW_POSTS) ? 'INNER JOIN' : 'LEFT JOIN';
+
+// Topics
+$topics_join_sql = 't.topic_last_post_id = p.post_id';
+$topics_join_sql .= ($only_new == ONLY_NEW_TOPICS) ? "
+	AND t.topic_time > $lastvisit
+" : '';
+$join_t_type = ($only_new == ONLY_NEW_TOPICS) ? 'INNER JOIN' : 'LEFT JOIN';
+
+$sql = "
+	SELECT f.cat_id, f.forum_id, f.forum_status, f.forum_parent, f.show_on_index,
+		p.post_id AS last_post_id, p.post_time AS last_post_time,
+		t.topic_id AS last_topic_id, t.topic_title AS last_topic_title,
+		u.user_id AS last_post_user_id, u.user_rank AS last_post_user_rank,
+		IF(p.poster_id = $anon, p.post_username, u.username) AS last_post_username
+	FROM         " . BB_CATEGORIES . ' c
+	INNER JOIN   ' . BB_FORUMS . " f ON($forums_join_sql)
+	$join_p_type " . BB_POSTS . " p ON($posts_join_sql)
+	$join_t_type " . BB_TOPICS . " t ON($topics_join_sql)
+	LEFT JOIN    " . BB_USERS . ' u ON(u.user_id = p.poster_id)
+	ORDER BY c.cat_order, f.forum_order
+';
+
+$replace_in_parent = [
+    'last_post_id',
+    'last_post_time',
+    'last_post_user_id',
+    'last_post_username',
+    'last_post_user_rank',
+    'last_topic_title',
+    'last_topic_id'
+];
+
+$cache_name = 'index_sql_' . hash('xxh128', $sql);
+if (!$cat_forums = CACHE('bb_cache')->get($cache_name)) {
+    $cat_forums = [];
+    foreach (DB()->fetch_rowset($sql) as $row) {
+        if (!($cat_id = $row['cat_id']) || !($forum_id = $row['forum_id'])) {
+            continue;
+        }
+
+        if ($parent_id = $row['forum_parent']) {
+            if (!$parent =& $cat_forums[$cat_id]['f'][$parent_id]) {
+                $parent = $forums['f'][$parent_id];
+                $parent['last_post_time'] = 0;
+            }
+            if ($row['last_post_time'] > $parent['last_post_time']) {
+                foreach ($replace_in_parent as $key) {
+                    $parent[$key] = $row[$key];
+                }
+            }
+            if ($show_subforums && $row['show_on_index']) {
+                $parent['last_sf_id'] = $forum_id;
+            } else {
+                continue;
+            }
+        } else {
+            $f =& $forums['f'][$forum_id];
+            $row['forum_desc'] = $f['forum_desc'];
+            $row['forum_posts'] = $f['forum_posts'];
+            $row['forum_topics'] = $f['forum_topics'];
+        }
+        $cat_forums[$cat_id]['f'][$forum_id] = $row;
+    }
+    CACHE('bb_cache')->set($cache_name, $cat_forums, 180);
+    unset($row, $forums);
+    $datastore->rm('cat_forums');
+}
+
+// Obtain list of moderators
+$moderators = [];
+$mod = $datastore->get('moderators');
+if ($mod === false) {
+    $datastore->update('moderators');
+    $mod = $datastore->get('moderators');
+}
+
+if (!empty($mod)) {
+    foreach ($mod['mod_users'] as $forum_id => $user_ids) {
+        foreach ($user_ids as $user_id) {
+            $moderators[$forum_id][] = '<a href="' . PROFILE_URL . $user_id . '">' . $mod['name_users'][$user_id] . '</a>';
+        }
+    }
+    foreach ($mod['mod_groups'] as $forum_id => $group_ids) {
+        foreach ($group_ids as $group_id) {
+            $moderators[$forum_id][] = '<a href="' . GROUP_URL . $group_id . '">' . $mod['name_groups'][$group_id] . '</a>';
+        }
+    }
+}
+
+unset($mod);
+$datastore->rm('moderators');
+
+// Build index page
+$forums_count = 0;
+foreach ($cat_forums as $cid => $c) {
+    $template->assign_block_vars('h_c', [
+        'H_C_ID' => $cid,
+        'H_C_TITLE' => $cat_title_html[$cid],
+        'H_C_CHEKED' => in_array($cid, preg_split('/[-]+/', $hide_cat_opt)) ? 'checked' : '',
+    ]);
+
+    $template->assign_vars(['H_C_AL_MESS' => $hide_cat_opt && !$showhide]);
+
+    if (!$showhide && isset($hide_cat_user[$cid]) && !$viewcat) {
+        continue;
+    }
+
+    $template->assign_block_vars('c', [
+        'CAT_ID' => $cid,
+        'CAT_TITLE' => $cat_title_html[$cid],
+        'U_VIEWCAT' => CAT_URL . $cid,
+    ]);
+
+    foreach ($c['f'] as $fid => $f) {
+        if (!$fname_html =& $forum_name_html[$fid]) {
+            continue;
+        }
+        $is_sf = $f['forum_parent'];
+
+        $forums_count++;
+        $new = is_unread($f['last_post_time'], $f['last_topic_id'], $f['forum_id']) ? '_new' : '';
+        $folder_image = $is_sf ? $images["icon_minipost{$new}"] : $images["forum{$new}"];
+
+        if ($f['forum_status'] == FORUM_LOCKED) {
+            $folder_image = $is_sf ? $images['icon_minipost'] : $images['forum_locked'];
+        }
+
+        if ($is_sf) {
+            $template->assign_block_vars('c.f.sf', [
+                'SF_ID' => $fid,
+                'SF_NAME' => $fname_html,
+                'SF_NEW' => $new ? ' new' : ''
+            ]);
+            continue;
+        }
+
+        $template->assign_block_vars('c.f', [
+            'FORUM_FOLDER_IMG' => $folder_image,
+            'FORUM_ID' => $fid,
+            'FORUM_NAME' => $fname_html,
+            'FORUM_DESC' => $f['forum_desc'],
+            'POSTS' => commify($f['forum_posts']),
+            'TOPICS' => commify($f['forum_topics']),
+            'LAST_SF_ID' => $f['last_sf_id'] ?? null,
+            'MODERATORS' => isset($moderators[$fid]) ? implode(', ', $moderators[$fid]) : '',
+            'FORUM_FOLDER_ALT' => $new ? $lang['NEW'] : $lang['OLD']
+        ]);
+
+        if ($f['last_post_id']) {
+            $template->assign_block_vars('c.f.last', [
+                'LAST_TOPIC_ID' => $f['last_topic_id'],
+                'LAST_TOPIC_TIP' => $f['last_topic_title'],
+                'LAST_TOPIC_TITLE' => str_short($f['last_topic_title'], $last_topic_max_len),
+                'LAST_POST_TIME' => bb_date($f['last_post_time'], config()->get('last_post_date_format')),
+                'LAST_POST_USER' => profile_url(['username' => str_short($f['last_post_username'], 15), 'user_id' => $f['last_post_user_id'], 'user_rank' => $f['last_post_user_rank']]),
+            ]);
+        }
+    }
+}
+
+$template->assign_vars([
+    'SHOW_FORUMS' => $forums_count,
+    'SHOW_MAP' => isset($_GET['map']) && !IS_GUEST,
+    'PAGE_TITLE' => $viewcat ? $cat_title_html[$viewcat] : $lang['HOME'],
+    'NO_FORUMS_MSG' => $only_new ? $lang['NO_NEW_POSTS'] : $lang['NO_FORUMS'],
+
+    'TOTAL_TOPICS' => sprintf($lang['POSTED_TOPICS_TOTAL'], $stats['topiccount']),
+    'TOTAL_POSTS' => sprintf($lang['POSTED_ARTICLES_TOTAL'], $stats['postcount']),
+    'TOTAL_USERS' => sprintf($lang['REGISTERED_USERS_TOTAL'], $stats['usercount']),
+    'TOTAL_GENDER' => config()->get('gender') ? sprintf(
+        $lang['USERS_TOTAL_GENDER'],
+        $stats['male'],
+        $stats['female'],
+        $stats['unselect']
+    ) : '',
+    'NEWEST_USER' => sprintf($lang['NEWEST_USER'], profile_url($stats['newestuser'])),
+
+    // Tracker stats
+    'TORRENTS_STAT' => config()->get('tor_stats') ? sprintf(
+        $lang['TORRENTS_STAT'],
+        $stats['torrentcount'],
+        humn_size($stats['size'])
+    ) : '',
+    'PEERS_STAT' => config()->get('tor_stats') ? sprintf(
+        $lang['PEERS_STAT'],
+        $stats['peers'],
+        $stats['seeders'],
+        $stats['leechers']
+    ) : '',
+    'SPEED_STAT' => config()->get('tor_stats') ? sprintf(
+        $lang['SPEED_STAT'],
+        humn_size($stats['speed']) . '/s'
+    ) : '',
+    'SHOW_MOD_INDEX' => config()->get('show_mod_index'),
+    'FORUM_IMG' => $images['forum'],
+    'FORUM_NEW_IMG' => $images['forum_new'],
+    'FORUM_LOCKED_IMG' => $images['forum_locked'],
+
+    'SHOW_ONLY_NEW_MENU' => true,
+    'ONLY_NEW_POSTS_ON' => $only_new == ONLY_NEW_POSTS,
+    'ONLY_NEW_TOPICS_ON' => $only_new == ONLY_NEW_TOPICS,
+
+    'U_SEARCH_NEW' => 'search.php?new=1',
+    'U_SEARCH_SELF_BY_MY' => "search.php?uid={$userdata['user_id']}&amp;o=1",
+    'U_SEARCH_LATEST' => 'search.php?search_id=latest',
+    'U_SEARCH_UNANSWERED' => 'search.php?search_id=unanswered',
+    'U_ATOM_FEED' => is_file(config()->get('atom.path') . '/f/0.atom') ? make_url(config()->get('atom.url') . '/f/0.atom') : false,
+
+    'SHOW_LAST_TOPIC' => $show_last_topic,
+    'BOARD_START' => config()->get('show_board_start_index') ? ($lang['BOARD_STARTED'] . ':&nbsp;' . '<b>' . bb_date(config()->get('board_startdate')) . '</b>') : false,
+]);
+
+// Set tpl vars for bt_userdata
+if (config()->get('bt_show_dl_stat_on_index') && !IS_GUEST) {
+    show_bt_userdata($userdata['user_id']);
+}
+
+// Latest news
+if (config()->get('show_latest_news')) {
+    $latest_news = $datastore->get('latest_news');
+    if ($latest_news === false) {
+        $datastore->update('latest_news');
+        $latest_news = $datastore->get('latest_news');
+    }
+
+    $template->assign_vars(['SHOW_LATEST_NEWS' => true]);
+
+    foreach ($latest_news as $news) {
+        if (in_array($news['forum_id'], $excluded_forums_array)) {
+            continue;
+        }
+
+        $template->assign_block_vars('news', [
+            'NEWS_TOPIC_ID' => $news['topic_id'],
+            'NEWS_TITLE' => str_short(censor()->censorString($news['topic_title']), config()->get('max_news_title')),
+            'NEWS_TIME' => bb_date($news['topic_time'], 'd-M', false),
+            'NEWS_IS_NEW' => is_unread($news['topic_time'], $news['topic_id'], $news['forum_id']),
+        ]);
+    }
+}
+
+// Network news
+if (config()->get('show_network_news')) {
+    $network_news = $datastore->get('network_news');
+    if ($network_news === false) {
+        $datastore->update('network_news');
+        $network_news = $datastore->get('network_news');
+    }
+
+    $template->assign_vars(['SHOW_NETWORK_NEWS' => true]);
+
+    foreach ($network_news as $net) {
+        if (in_array($net['forum_id'], $excluded_forums_array)) {
+            continue;
+        }
+
+        $template->assign_block_vars('net', [
+            'NEWS_TOPIC_ID' => $net['topic_id'],
+            'NEWS_TITLE' => str_short(censor()->censorString($net['topic_title']), config()->get('max_net_title')),
+            'NEWS_TIME' => bb_date($net['topic_time'], 'd-M', false),
+            'NEWS_IS_NEW' => is_unread($net['topic_time'], $net['topic_id'], $net['forum_id']),
+        ]);
+    }
+}
+
+if (config()->get('birthday_check_day') && config()->get('birthday_enabled')) {
+    $week_list = $today_list = [];
+    $week_all = $today_all = false;
+
+    if (!empty($stats['birthday_week_list'])) {
+        shuffle($stats['birthday_week_list']);
+        foreach ($stats['birthday_week_list'] as $i => $week) {
+            if ($i >= 5) {
+                $week_all = true;
+                continue;
+            }
+            $week_list[] = profile_url($week) . ' <span class="small">(' . birthday_age(date('Y-m-d', strtotime('-1 year', strtotime($week['user_birthday'])))) . ')</span>';
+        }
+        $week_all = $week_all ? '&nbsp;<a class="txtb" href="#" onclick="ajax.exec({action: \'index_data\', mode: \'birthday_week\'}); return false;" title="' . $lang['ALL'] . '">...</a>' : '';
+        $week_list = sprintf($lang['BIRTHDAY_WEEK'], config()->get('birthday_check_day'), implode(', ', $week_list)) . $week_all;
+    } else {
+        $week_list = sprintf($lang['NOBIRTHDAY_WEEK'], config()->get('birthday_check_day'));
+    }
+
+    if (!empty($stats['birthday_today_list'])) {
+        shuffle($stats['birthday_today_list']);
+        foreach ($stats['birthday_today_list'] as $i => $today) {
+            if ($i >= 5) {
+                $today_all = true;
+                continue;
+            }
+            $today_list[] = profile_url($today) . ' <span class="small">(' . birthday_age($today['user_birthday']) . ')</span>';
+        }
+        $today_all = $today_all ? '&nbsp;<a class="txtb" href="#" onclick="ajax.exec({action: \'index_data\', mode: \'birthday_today\'}); return false;" title="' . $lang['ALL'] . '">...</a>' : '';
+        $today_list = $lang['BIRTHDAY_TODAY'] . implode(', ', $today_list) . $today_all;
+    } else {
+        $today_list = $lang['NOBIRTHDAY_TODAY'];
+    }
+
+    $template->assign_vars([
+        'WHOSBIRTHDAY_WEEK' => $week_list,
+        'WHOSBIRTHDAY_TODAY' => $today_list
+    ]);
+}
+
+// Allow cron
+if (IS_AM) {
+    if (is_file(CRON_RUNNING)) {
+        if (is_file(CRON_ALLOWED)) {
+            unlink(CRON_ALLOWED);
+        }
+        rename(CRON_RUNNING, CRON_ALLOWED);
+    }
+}
+
+// Display page
+define('SHOW_ONLINE', $show_online_users);
+
+if (isset($_GET['map'])) {
+    $template->assign_vars(['PAGE_TITLE' => $lang['FORUM_MAP']]);
+}
+
+print_page('index.tpl');

info.php

@@ -0,0 +1,51 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+define('BB_SCRIPT', 'info');
+
+require __DIR__ . '/common.php';
+
+// Start session management
+$user->session_start();
+
+$info = [];
+$htmlDir = LANG_DIR . 'html/';
+$show = isset($_REQUEST['show']) ? (string)$_REQUEST['show'] : '';
+
+switch ($show) {
+    case 'advert':
+        $info['title'] = $lang['ADVERT'];
+        $info['src'] = 'advert.html';
+        break;
+
+    case 'copyright_holders':
+        $info['title'] = $lang['COPYRIGHT_HOLDERS'];
+        $info['src'] = 'copyright_holders.html';
+        break;
+
+    case 'user_agreement':
+        $info['title'] = $lang['USER_AGREEMENT'];
+        $info['src'] = 'user_agreement.html';
+        break;
+
+    default:
+    case 'not_found':
+        $info['title'] = $lang['NOT_FOUND'];
+        $info['src'] = 'not_found.html';
+        break;
+}
+
+$require = is_file($htmlDir . $info['src']) ? ($htmlDir . $info['src']) : false;
+
+$template->assign_vars([
+    'PAGE_TITLE' => mb_strtoupper($info['title'], DEFAULT_CHARSET),
+    'REQUIRE' => $require ? file_get_contents($require) : $lang['NOT_FOUND'],
+]);
+
+print_page('info.tpl', 'simple');

install.php

@@ -0,0 +1,331 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+define('BB_ROOT', __DIR__ . DIRECTORY_SEPARATOR);
+define('BB_PATH', BB_ROOT);
+
+// Check CLI mode
+if (PHP_SAPI != 'cli') {
+    die('Please run <code style="background:#222;color:#00e01f;padding:2px 6px;border-radius:3px;">php ' . basename(__FILE__) . '</code> in CLI mode');
+}
+
+// Get all constants
+require_once BB_ROOT . 'library/defines.php';
+
+// Include CLI functions
+require INC_DIR . '/functions_cli.php';
+
+/**
+ * System requirements
+ */
+const CHECK_REQUIREMENTS = [
+    'php_min_version' => '8.2.0',
+    'ext_list' => [
+        'json',
+        'curl',
+        'readline',
+        'mysqli',
+        'bcmath',
+        'mbstring',
+        'intl',
+        'xml',
+        'xmlwriter',
+        'zip',
+        'gd'
+    ],
+];
+
+// Welcoming message
+out("--- TorrentPier Installer ---\n", 'info');
+
+// Checking extensions
+out("- Checking installed extensions...", 'info');
+
+// [1] Check PHP Version
+if (!version_compare(PHP_VERSION, CHECK_REQUIREMENTS['php_min_version'], '>=')) {
+    out("- TorrentPier requires PHP version " . CHECK_REQUIREMENTS['php_min_version'] . "+ Your PHP version " . PHP_VERSION, 'warning');
+}
+
+// [2] Check installed PHP Extensions on server
+foreach (CHECK_REQUIREMENTS['ext_list'] as $ext) {
+    if (!extension_loaded($ext)) {
+        out("- ext-$ext not installed. Check out php.ini file", 'error');
+        if (!defined('EXTENSIONS_NOT_INSTALLED')) {
+            define('EXTENSIONS_NOT_INSTALLED', true);
+        }
+    } else {
+        out("- ext-$ext installed!");
+    }
+}
+if (!defined('EXTENSIONS_NOT_INSTALLED')) {
+    out("- All extensions are installed!\n", 'success');
+} else {
+    exit;
+}
+
+// Check if already installed
+if (is_file(BB_ROOT . '.env')) {
+    out('- TorrentPier already installed', 'warning');
+    echo 'Are you sure want to re-install TorrentPier? [y/N]: ';
+    if (str_starts_with(mb_strtolower(trim(readline())), 'y')) {
+        out("\n- Re-install process started...", 'info');
+        // environment
+        if (is_file(BB_ROOT . '.env')) {
+            if (unlink(BB_ROOT . '.env')) {
+                out('- Environment file successfully removed!');
+            } else {
+                out('- Cannot remove environment (.env) file. Delete it manually', 'error');
+                exit;
+            }
+        }
+        // composer.phar
+        if (is_file(BB_ROOT . 'composer.phar')) {
+            if (unlink(BB_ROOT . 'composer.phar')) {
+                out("- composer.phar file successfully removed!");
+            } else {
+                out('- Cannot remove composer.phar file. Delete it manually', 'error');
+                exit;
+            }
+        }
+        // composer dir
+        if (is_dir(BB_ROOT . 'vendor')) {
+            removeDir(BB_ROOT . 'vendor', true);
+            if (!is_dir(BB_ROOT . 'vendor')) {
+                out("- Composer directory successfully removed!");
+            } else {
+                out('- Cannot remove Composer directory. Delete it manually', 'error');
+                exit;
+            }
+        }
+        out("- Re-install process completed!\n", 'success');
+        out('- Starting installation...', 'info');
+    } else {
+        exit;
+    }
+}
+
+// Applying permissions
+out("- Applying permissions for folders...", 'info');
+chmod_r(BB_ROOT . 'data', 0755, 0644);
+chmod_r(BB_ROOT . 'internal_data', 0755, 0644);
+chmod_r(BB_ROOT . 'sitemap', 0755, 0644);
+out("- Permissions successfully applied!\n", 'success');
+
+// Check composer installation
+if (!is_file(BB_ROOT . 'vendor/autoload.php')) {
+    out('- Hmm, it seems there are no Composer dependencies', 'info');
+
+    // Downloading composer
+    if (!is_file(BB_ROOT . 'composer.phar')) {
+        out('- Downloading Composer...', 'info');
+        if (copy('https://getcomposer.org/installer', BB_ROOT . 'composer-setup.php')) {
+            out("- Composer successfully downloaded!\n", 'success');
+            runProcess('php ' . BB_ROOT . 'composer-setup.php --install-dir=' . BB_ROOT);
+        } else {
+            out('- Cannot download Composer. Please, download it (composer.phar) manually', 'error');
+            exit;
+        }
+        if (is_file(BB_ROOT . 'composer-setup.php')) {
+            if (unlink(BB_ROOT . 'composer-setup.php')) {
+                out("- Composer installation file successfully removed!\n", 'success');
+            } else {
+                out('- Cannot remove Composer installation file (composer-setup.php). Please, delete it manually', 'warning');
+            }
+        }
+    } else {
+        out("- composer.phar file found!\n", 'success');
+    }
+
+    // Installing dependencies
+    if (is_file(BB_ROOT . 'composer.phar')) {
+        out('- Installing dependencies...', 'info');
+
+        runProcess('php ' . BB_ROOT . 'composer.phar install --no-interaction --no-ansi');
+        define('COMPOSER_COMPLETED', true);
+    } else {
+        out('- composer.phar not found. Please, download it (composer.phar) manually', 'error');
+        exit;
+    }
+} else {
+    out('- Composer dependencies are present!', 'success');
+    out("- Note: Remove 'vendor' folder if you want to re-install dependencies\n");
+}
+
+// Check composer dependencies
+if (defined('COMPOSER_COMPLETED')) {
+    if (is_file(BB_ROOT . 'vendor/autoload.php')) {
+        out("- Completed! Composer dependencies are installed!\n", 'success');
+    } else {
+        exit;
+    }
+}
+
+// Preparing ENV
+if (is_file(BB_ROOT . '.env.example') && !is_file(BB_ROOT . '.env')) {
+    if (copy(BB_ROOT . '.env.example', BB_ROOT . '.env')) {
+        out("- Environment file created!\n", 'success');
+    } else {
+        out('- Cannot create environment file', 'error');
+        exit;
+    }
+}
+
+// Editing ENV file
+$DB_HOST = 'localhost';
+$DB_PORT = 3306;
+$DB_DATABASE = '';
+$DB_USERNAME = '';
+$DB_PASSWORD = '';
+
+if (is_file(BB_ROOT . '.env')) {
+    out("--- Configuring TorrentPier ---", 'info');
+
+    $envContent = file_get_contents(BB_ROOT . '.env');
+    if ($envContent === false) {
+        out('- Cannot open environment file', 'error');
+        exit;
+    }
+    $envLines = explode("\n", $envContent);
+
+    $editedLines = [];
+    foreach ($envLines as $line) {
+        if (trim($line) !== '' && !str_starts_with($line, '#')) {
+            $parts = explode('=', $line, 2);
+            $key = trim($parts[0]);
+            $value = (!empty($parts[1]) && $key !== 'DB_PASSWORD') ? trim($parts[1]) : '';
+
+            out("\nCurrent value of $key: $value", 'debug');
+            echo "Enter a new value for $key (or leave empty to not change): ";
+            $newValue = trim(readline());
+
+            if (!empty($newValue) || $key === 'DB_PASSWORD') {
+                if ($key === 'TP_HOST') {
+                    if (!preg_match('/^https?:\/\//', $newValue)) {
+                        $newValue = 'https://' . $newValue;
+                    }
+                    $newValue = parse_url($newValue, PHP_URL_HOST);
+                }
+                $line = "$key=$newValue";
+                $$key = $newValue;
+            } else {
+                $$key = $value;
+            }
+        }
+
+        $editedLines[] = $line;
+    }
+
+    $newEnvContent = implode("\n", $editedLines);
+    if (file_put_contents(BB_ROOT . '.env', $newEnvContent)) {
+        out("- TorrentPier successfully configured!\n", 'success');
+    } else {
+        out('- Cannot save environment file', 'error');
+        exit;
+    }
+} else {
+    out('- Environment file not found', 'error');
+    exit;
+}
+
+if (!empty($DB_HOST) && !empty($DB_DATABASE) && !empty($DB_USERNAME)) {
+    out("--- Checking environment settings ---\n", 'info');
+    // Connecting to database
+    out("- Trying connect to MySQL...", 'info');
+
+    // Checking mysqli extension installed
+    if (!extension_loaded('mysqli')) {
+        out('- ext-mysqli not found. Check out php.ini file', 'error');
+        exit;
+    }
+
+    // Connect to MySQL server
+    try {
+        $conn = new mysqli($DB_HOST, $DB_USERNAME, $DB_PASSWORD, port: $DB_PORT);
+    } catch (mysqli_sql_exception $exception) {
+        out("- Connection failed: {$exception->getMessage()}", 'error');
+        exit;
+    }
+    if (!$conn->connect_error) {
+        out('- Connected successfully!', 'success');
+    }
+
+    // Creating database if not exist
+    if ($conn->query("CREATE DATABASE IF NOT EXISTS $DB_DATABASE CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci")) {
+        out('- Database created successfully!', 'success');
+    } else {
+        out("- Cannot create database: $DB_DATABASE", 'error');
+        exit;
+    }
+    $conn->select_db($DB_DATABASE);
+
+    // Close database connection - migrations will handle their own connections
+    $conn->close();
+
+    // Run database migrations
+    out('- Setting up database using migrations...', 'info');
+
+    // Check if phinx.php exists
+    if (!is_file(BB_ROOT . 'phinx.php')) {
+        out('- Migration configuration (phinx.php) not found', 'error');
+        exit;
+    }
+
+    // Run migrations
+    $migrationResult = runProcess('php vendor/bin/phinx migrate --configuration=' . BB_ROOT . 'phinx.php');
+    if ($migrationResult !== 0) {
+        out('- Database migration failed', 'error');
+        exit;
+    }
+
+    out("- Database setup completed!\n", 'success');
+
+    // Autofill host in robots.txt
+    $robots_txt_file = BB_ROOT . 'robots.txt';
+    if (isset($TP_HOST) && is_file($robots_txt_file)) {
+        $content = file_get_contents($robots_txt_file);
+        $content = str_replace('example.com', $TP_HOST, $content);
+        file_put_contents($robots_txt_file, $content);
+    }
+
+    if (isset($APP_ENV) && $APP_ENV === 'local') {
+        if (!is_file(BB_ROOT . 'library/config.local.php')) {
+            if (copy(BB_ROOT . 'library/config.php', BB_ROOT . 'library/config.local.php')) {
+                out('- Local configuration file created!', 'success');
+            } else {
+                out('- Cannot create library/config.local.php file. You can create it manually, just copy config.php and rename it to config.local.php', 'warning');
+            }
+        }
+    } else {
+        if (rename(__FILE__, __FILE__ . '_' . hash('xxh128', time()))) {
+            out("- Installation file renamed!", 'success');
+        } else {
+            out('- Cannot rename installation file (' . __FILE__ . '). Please, rename it manually for security reasons', 'warning');
+        }
+    }
+
+    // Cleanup...
+    if (is_file(BB_ROOT . '_cleanup.php')) {
+        out("\n--- Finishing installation (Cleanup) ---\n", 'info');
+        out('The cleanup process will remove:');
+        out('- Development documentation (README, CHANGELOG)', 'debug');
+        out('- Git configuration files', 'debug');
+        out('- CI/CD pipelines and code analysis tools', 'debug');
+        out('- Translation and contribution guidelines', 'debug');
+        echo 'Do you want to delete these files permanently? [y/N]: ';
+        if (str_starts_with(mb_strtolower(trim(readline())), 'y')) {
+            out("\n- Cleanup...", 'info');
+            require_once BB_ROOT . '_cleanup.php';
+            unlink(BB_ROOT . '_cleanup.php');
+        } else {
+            out('- Skipping...', 'info');
+        }
+    }
+
+    out("\n- Voila! Good luck & have fun!", 'success');
+}

install/Caddyfile

@@ -0,0 +1,27 @@
+# Example Caddy configuration for TorrentPier
+
+example.com {
+    root * /path/to/root
+    encode gzip zstd
+    php_fastcgi unix//run/php/php-fpm.sock
+    try_files {path} {path}/ /index.php?{query}
+    file_server
+
+    @blocked {
+        path /install/* /internal_data/* /library/*
+        path /.ht* /.en*
+        path /.git/*
+        path *.sql *.tpl *.db *.inc *.log *.md
+    }
+    respond @blocked 404
+
+    redir /sitemap.xml /sitemap/sitemap.xml
+
+    @html_css_js {
+        path *.html *.css *.js *.json *.xml *.txt
+    }
+    header @html_css_js Content-Type "{mime}; charset=utf-8"
+}
+
+# Refer to the Caddy docs for more information:
+# https://caddyserver.com/docs/caddyfile

install/nginx.conf

@@ -0,0 +1,39 @@
+# Example nginx configuration for TorrentPier
+
+server {
+    listen 80; # port
+    server_name example.com; # your domain
+    root /path/to/root; # folder with TorrentPier installed
+    index index.php;
+    charset utf-8;
+
+    location / {
+        try_files \$uri \$uri/ /index.php?\$args;
+    }
+
+    location ~ \/(install|internal_data|library)\/ {
+        return 404;
+    }
+
+    location ~ /\.(ht|en) {
+        return 404;
+    }
+
+    location ~ /\.git {
+        return 404;
+    }
+
+    location ~ \.(.*sql|tpl|db|inc|log|md)$ {
+        return 404;
+    }
+
+    rewrite ^/sitemap.xml$ /sitemap/sitemap.xml;
+
+    location ~ \.php$ {
+        include fastcgi_params;
+        fastcgi_pass unix:/run/php/php-fpm.sock;
+        fastcgi_index index.php;
+        fastcgi_param SCRIPT_FILENAME \$document_root\$fastcgi_script_name;
+        include fastcgi_params;
+    }
+}

install/php-fpm+nginx/bash.txt

@@ -1,5 +0,0 @@
-$ mkdir /tmp/nginx
-$ mkdir /tmp/nginx/fastcgi_temp
-$ mkdir /tmp/nginx/client_temp
-
-$ mkdir /var/log/nginx/

install/php-fpm+nginx/fastcgi_params

@@ -1,31 +0,0 @@
-fastcgi_connect_timeout           60;
-fastcgi_send_timeout              180;
-fastcgi_read_timeout              180;
-fastcgi_buffer_size               32k;
-fastcgi_buffers                   4 32k;
-fastcgi_busy_buffers_size         32k;
-fastcgi_temp_file_write_size      32k;
-fastcgi_temp_path                 /tmp/nginx/fastcgi_temp 1 2;
-
-fastcgi_param  QUERY_STRING       $query_string;
-fastcgi_param  REQUEST_METHOD     $request_method;
-fastcgi_param  CONTENT_TYPE       $content_type;
-fastcgi_param  CONTENT_LENGTH     $content_length;
-
-fastcgi_param  SCRIPT_NAME        $fastcgi_script_name;
-fastcgi_param  REQUEST_URI        $request_uri;
-fastcgi_param  DOCUMENT_URI       $document_uri;
-fastcgi_param  DOCUMENT_ROOT      $document_root;
-fastcgi_param  SERVER_PROTOCOL    $server_protocol;
-
-fastcgi_param  GATEWAY_INTERFACE  CGI/1.1;
-fastcgi_param  SERVER_SOFTWARE    nginx/$nginx_version;
-
-fastcgi_param  REMOTE_ADDR        $remote_addr;
-fastcgi_param  REMOTE_PORT        $remote_port;
-fastcgi_param  SERVER_ADDR        $server_addr;
-fastcgi_param  SERVER_PORT        $server_port;
-fastcgi_param  SERVER_NAME        $server_name;
-
-# PHP only, required if PHP was built with --enable-force-cgi-redirect
-fastcgi_param  REDIRECT_STATUS    200;

install/php-fpm+nginx/nginx.conf

@@ -1,145 +0,0 @@
-user  www www;
-worker_processes  4;
-
-#error_log  /var/log/nginx/error.log;
-#error_log  /var/log/nginx/error.log  notice;
-#error_log  /var/log/nginx/error.log  info;
-
-pid        /var/run/nginx.pid;
-
-worker_rlimit_nofile  1024;
-events {
-    worker_connections  1024;
-}
-
-http {
-    include       mime.types;
-    default_type  application/octet-stream;
-
-    #log_format  main  '$remote_addr - $remote_user [$time_local] $request '
-    #                  '"$status" $body_bytes_sent "$http_referer" '
-    #                  '"$http_user_agent" "$http_x_forwarded_for"';
-
-    #log_format IP .$remote_addr.;
-
-    access_log off;
-
-    server_tokens off;
-    reset_timedout_connection  on;
-
-    sendfile        on;
-
-    # http://en.wikipedia.org/wiki/Asynchronous_I/O
-    # aio             sendfile;
-
-    output_buffers  1 64k;
-
-    tcp_nopush      on;
-    tcp_nodelay     on;
-    send_lowat      12000;
-    log_not_found   off;
-
-    keepalive_timeout 65;
-
-    limit_req_zone  $binary_remote_addr  zone=one:16m  rate=5r/s;
-
-    gzip  on;
-    gzip_vary on;
-    gzip_min_length 2048;
-    gzip_comp_level 5;
-    gzip_http_version 1.0;
-    gzip_proxied any;
-    gzip_disable "msie6";
-    gzip_types text/plain text/css application/x-javascript text/xml application/xml application/xml+rss text/javascript;
-
-    client_max_body_size 10m;
-    large_client_header_buffers 4 8k;
-    client_body_temp_path /tmp/nginx/client_temp 1 2;
-
-    server {
-        #listen       80 default sndbuf=32k rcvbuf=8k accept_filter=httpready;
-        #listen  [::]:80 default sndbuf=32k rcvbuf=8k accept_filter=httpready;
-
-        listen       80 default sndbuf=32k rcvbuf=8k;
-        server_name  sitedomain.ru;
-
-        charset utf8;
-
-        access_log off;
-
-        location / {
-            root  /var/www;
-            index index.html index.htm index.php;
-        }
-
-        error_page  404              /404.html;
-        error_page  500 502 503 504  /50x.html;
-
-        # pass the PHP scripts to FastCGI server listening on /tmp/php.sock;
-        #
-        location ~ \.php$ {
-            #limit_req  zone=one  burst=20  nodelay;
-            #limit_req_log_level  info;
-
-            root           /var/www;
-            fastcgi_index  index.php;
-            fastcgi_pass    unix:/tmp/php.sock; # 127.0.0.1:9000;
-            fastcgi_intercept_errors on;
-
-            # FreeBSD Optimization
-            fastcgi_pass_request_body off;
-            client_body_in_file_only clean;
-            fastcgi_param   REQUEST_BODY_FILE  $request_body_file;
-
-            fastcgi_param   SCRIPT_FILENAME $document_root$fastcgi_script_name;
-            fastcgi_param   PATH_TRANSLATED $document_root$fastcgi_script_name;
-
-            include         fastcgi_params;
-        }
-
-        # Old XBTT config
-#       location ^~ /bt/ {
-#           access_log   off;
-#           if ( $query_string ~ "^uk=([^&?]{10})[&?]+(.*)$" ) {
-#              set $uk $1;
-#              set $qs $2&ip=$remote_addr;
-#           }
-#           if ( $query_string ~ "^uk=([^&?]{10})[&?]+((.*&|)ip=.*)$" ) {
-#              set $uk $1;
-#              set $qs $2;
-#           }
-#           if ( $qs ) {
-#              rewrite ^.*/([a-z]+)(\.php|)$ /$uk/$1?$qs break;
-#           }
-#           rewrite ^/?(.*)$ /$1?ip=$remote_addr&$query_string break;
-#           proxy_pass http://127.0.0.1:2710/;
-#       }
-
-        # Cached Images
-        location ~* \.(jpg|jpeg|gif|png|css|js|ico)$ {
-            root         /var/www;
-            access_log   off;
-            expires      30d;
-            add_header   Cache-Control  public;
-        }
-
-        location ~ \/admin|backup\/ {
-            deny all;
-        #    allow YOUR_IP;
-        }
-        # Deny folder (Sec. lvl1)
-        location ~ \/(cache|log|attach_mod|config|includes|language|triggers)\/ {
-            deny all;
-        }
-
-        # deny access to .htaccess files, if Apache's document root
-        # concurs with nginx's one
-        # deny sql,tpl,db,inc,log
-        location ~ /\.ht {
-            deny  all;
-        }
-        location ~ \.(.*sql|tpl|db|inc|log)$ {
-            deny  all;
-        }
-    }
-}

install/sphinx/sphinx.conf

@@ -1,104 +0,0 @@
-source torrentpier
-{
-	type                    = mysql
-	sql_host                = localhost
-	sql_user                = user
-	sql_pass                = pass
-	sql_db                  = dbase
-	sql_query_pre           = SET NAMES utf8
-	sql_query_pre           = SET CHARACTER_SET_RESULTS=utf8
-	sql_query_pre           = SET CHARACTER_SET_CLIENT=utf8
-}
-
-source topics: torrentpier
-{
-	sql_query               = \
-		SELECT topic_id, forum_id, topic_title \
-		FROM bb_topics \
-		WHERE topic_id BETWEEN $start AND $end
-
-	sql_query_range         = SELECT MIN(topic_id), MAX(topic_id) FROM bb_topics
-	sql_range_step          = 100000
-
-	sql_attr_uint           = forum_id
-	sql_ranged_throttle     = 50
-	sql_query_info          = SELECT * FROM bb_topics WHERE topic_id = $id
-}
-
-source posts: torrentpier
-{
-	sql_query               = \
-		SELECT pt.post_id, pt.post_text, t.topic_title, t.topic_id, t.forum_id \
-		FROM bb_posts_text pt \
-			LEFT JOIN bb_topics t on pt.post_id = t.topic_first_post_id \
-		WHERE pt.post_id BETWEEN $start AND $end
-
-	sql_query_range         = SELECT MIN(post_id), MAX(post_id) FROM bb_posts_text
-	sql_range_step          = 100000
-
-	sql_attr_uint           = topic_id
-	sql_attr_uint           = forum_id
-	sql_ranged_throttle     = 50
-	sql_query_info          = SELECT * FROM bb_posts_text WHERE post_id = $id
-}
-
-source users: torrentpier
-{
-	sql_query               = \
-		SELECT user_id, username \
-		FROM bb_users \
-		WHERE user_id BETWEEN $start AND $end
-
-	sql_query_range         = SELECT 1, MAX(user_id) FROM bb_users
-	sql_range_step          = 1000
-	sql_query_info          = SELECT * FROM bb_users WHERE user_id = $id
-}
-
-index topics
-{
-	docinfo                 = extern
-	morphology              = stem_enru
-	charset_type            = utf-8
-	charset_table           = 0..9, A..Z->a..z, _, a..z, U+410..U+42C->U+430..U+44C, U+42E..U+42F->U+44E..U+44F, U+430..U+44C, U+44E..U+44F, U+0401->U+0435, U+0451->U+0435, U+042D->U+0435, U+044D->U+0435
-	min_prefix_len          = 0
-	min_infix_len           = 0
-	min_word_len            = 1
-	min_stemming_len        = 4
-	enable_star             = 1
-	phrase_boundary         = :, - , . , $
-	phrase_boundary_step    = 1
-	html_strip              = 1
-	path                    = ./sphinx/data/topics
-	source                  = topics
-}
-
-index posts: topics
-{
-	path                    = ./sphinx/data/posts
-	source                  = posts
-}
-
-index users: topics
-{
-	path                    = ./sphinx/data/users
-	source                  = users
-}
-
-indexer
-{
-	mem_limit               = 256M
-}
-
-searchd
-{
-	listen                  = 127.0.0.1:3312
-	log                     = ./sphinx/log/searchd.log
-	query_log               = ./sphinx/log/query.log
-	read_timeout            = 5
-	max_children            = 15
-	max_matches             = 5000
-	seamless_rotate         = 1
-	preopen_indexes         = 0
-	unlink_old              = 1
-	pid_file                = ./sphinx/searchd.pid
-}

library/ajax/avatar.php

@@ -0,0 +1,45 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+if (!defined('IN_AJAX')) {
+    die(basename(__FILE__));
+}
+
+global $lang, $user;
+
+if (!$mode = (string)$this->request['mode']) {
+    $this->ajax_die('invalid mode (empty)');
+}
+
+$user_id = (int)$this->request['user_id'];
+if (!$user_id or !$u_data = get_userdata($user_id)) {
+    $this->ajax_die($lang['NO_USER_ID_SPECIFIED']);
+}
+
+if (!IS_ADMIN && $user_id != $user->id) {
+    $this->ajax_die($lang['NOT_AUTHORISED']);
+}
+
+$new_ext_id = 0;
+$response = '';
+
+switch ($mode) {
+    case 'delete':
+        delete_avatar($user_id, $u_data['avatar_ext_id']);
+        $response = get_avatar($user_id, $new_ext_id);
+        break;
+    default:
+        $this->ajax_die('Invalid mode: ' . $mode);
+}
+
+DB()->query("UPDATE " . BB_USERS . " SET avatar_ext_id = $new_ext_id WHERE user_id = $user_id LIMIT 1");
+
+\TorrentPier\Sessions::cache_rm_user_sessions($user_id);
+
+$this->response['avatar_html'] = $response;

library/ajax/callseed.php

@@ -0,0 +1,93 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+if (!defined('IN_AJAX')) {
+    die(basename(__FILE__));
+}
+
+global $userdata, $lang;
+
+if (!config()->get('callseed')) {
+    $this->ajax_die($lang['MODULE_OFF']);
+}
+
+if (!$topic_id = (int)$this->request['topic_id']) {
+    $this->ajax_die($lang['INVALID_TOPIC_ID']);
+}
+
+if (!$t_data = topic_info($topic_id)) {
+    $this->ajax_die($lang['INVALID_TOPIC_ID_DB']);
+}
+
+$forum_id = $t_data['forum_id'];
+
+if ($t_data['seeders'] >= 3) {
+    $this->ajax_die(sprintf($lang['CALLSEED_HAVE_SEED'], $t_data['seeders']));
+} elseif ($t_data['call_seed_time'] >= (TIMENOW - 86400)) {
+    $time_left = delta_time($t_data['call_seed_time'] + 86400, TIMENOW, 'days');
+    $this->ajax_die(sprintf($lang['CALLSEED_MSG_SPAM'], $time_left));
+} elseif (isset(config()->get('tor_no_tor_act')[$t_data['tor_status']])) {
+    $this->ajax_die($lang['NOT_AVAILABLE']);
+}
+
+$banned_users = ($get_banned_users = get_banned_users()) ? (', ' . implode(', ', $get_banned_users)) : '';
+
+$user_list = DB()->fetch_rowset("
+	SELECT DISTINCT dl.user_id, u.user_opt, tr.user_id as active_dl
+	FROM " . BB_BT_DLSTATUS . " dl
+	LEFT JOIN " . BB_USERS . " u  ON(u.user_id = dl.user_id)
+	LEFT JOIN " . BB_BT_TRACKER . " tr ON(tr.user_id = dl.user_id)
+	WHERE dl.topic_id = $topic_id
+		AND dl.user_status IN (" . DL_STATUS_COMPLETE . ", " . DL_STATUS_DOWN . ")
+		AND dl.user_id NOT IN ({$userdata['user_id']}, " . EXCLUDED_USERS . $banned_users . ")
+		AND u.user_active = 1
+	GROUP BY dl.user_id
+");
+
+$subject = sprintf($lang['CALLSEED_SUBJECT'], $t_data['topic_title']);
+$message = sprintf($lang['CALLSEED_TEXT'], make_url(TOPIC_URL . $topic_id), $t_data['topic_title'], make_url(DL_URL . $t_data['attach_id']));
+
+if ($user_list) {
+    foreach ($user_list as $row) {
+        if (!empty($row['active_dl'])) {
+            continue;
+        }
+
+        if (bf($row['user_opt'], 'user_opt', 'user_callseed')) {
+            send_pm($row['user_id'], $subject, $message, BOT_UID);
+        }
+    }
+} else {
+    send_pm($t_data['poster_id'], $subject, $message, BOT_UID);
+}
+
+DB()->query("UPDATE " . BB_BT_TORRENTS . " SET call_seed_time = " . TIMENOW . " WHERE topic_id = $topic_id LIMIT 1");
+
+function topic_info($topic_id)
+{
+    global $lang;
+
+    $sql = "
+		SELECT
+			tor.poster_id, tor.forum_id, tor.attach_id, tor.call_seed_time, tor.tor_status,
+			t.topic_title, sn.seeders
+		FROM      " . BB_BT_TORRENTS . " tor
+		LEFT JOIN " . BB_TOPICS . " t  USING(topic_id)
+		LEFT JOIN " . BB_BT_TRACKER_SNAP . " sn USING(topic_id)
+		WHERE tor.topic_id = $topic_id
+	";
+
+    if (!$torrent = DB()->fetch_row($sql)) {
+        bb_die($lang['TOPIC_POST_NOT_EXIST'], 404);
+    }
+
+    return $torrent;
+}
+
+$this->response['response'] = $lang['CALLSEED_MSG_OK'];

library/ajax/change_tor_status.php

@@ -0,0 +1,139 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+if (!defined('IN_AJAX')) {
+    die(basename(__FILE__));
+}
+
+global $userdata, $lang, $log_action;
+
+if (!$attach_id = (int)$this->request['attach_id']) {
+    $this->ajax_die($lang['EMPTY_ATTACH_ID']);
+}
+
+if (!$mode = (string)$this->request['mode']) {
+    $this->ajax_die('invalid mode (empty)');
+}
+
+$comment = false;
+if (config()->get('tor_comment')) {
+    $comment = (string)$this->request['comment'];
+}
+
+$tor = DB()->fetch_row("
+	SELECT
+		tor.poster_id, tor.forum_id, tor.topic_id, tor.tor_status, tor.checked_time, tor.checked_user_id, f.cat_id, t.topic_title
+	FROM       " . BB_BT_TORRENTS . " tor
+	INNER JOIN " . BB_FORUMS . " f ON(f.forum_id = tor.forum_id)
+	INNER JOIN " . BB_TOPICS . " t ON(t.topic_id = tor.topic_id)
+	WHERE tor.attach_id = $attach_id
+	LIMIT 1
+");
+
+if (!$tor) {
+    $this->ajax_die($lang['TORRENT_FAILED']);
+}
+
+switch ($mode) {
+    case 'status':
+        $new_status = (int)$this->request['status'];
+
+        // Check status validity
+        if (!isset($lang['TOR_STATUS_NAME'][$new_status])) {
+            $this->ajax_die($lang['TOR_STATUS_FAILED']);
+        }
+        if (!isset($this->request['status'])) {
+            $this->ajax_die($lang['TOR_DONT_CHANGE']);
+        }
+        if (!IS_AM) {
+            $this->ajax_die($lang['NOT_MODERATOR']);
+        }
+
+        // Error if same status
+        if ($tor['tor_status'] == $new_status) {
+            $this->ajax_die($lang['TOR_STATUS_DUB']);
+        }
+
+        // Prohibition on changing/assigning CH-status by moderator
+        if ($new_status == TOR_CLOSED_CPHOLD && !IS_ADMIN) {
+            $this->ajax_die($lang['TOR_DONT_CHANGE']);
+        }
+
+        // Check rights to change status
+        if ($tor['tor_status'] == TOR_CLOSED_CPHOLD) {
+            if (!IS_ADMIN) {
+                $this->verify_mod_rights($tor['forum_id']);
+            }
+            DB()->query("UPDATE " . BB_TOPICS . " SET topic_status = " . TOPIC_UNLOCKED . " WHERE topic_id = {$tor['topic_id']} LIMIT 1");
+        } else {
+            $this->verify_mod_rights($tor['forum_id']);
+        }
+
+        // Confirmation of status change set by another moderator
+        if ($tor['tor_status'] != TOR_NOT_APPROVED && $tor['checked_user_id'] != $userdata['user_id'] && $tor['checked_time'] + 2 * 3600 > TIMENOW) {
+            if (empty($this->request['confirmed'])) {
+                $msg = $lang['TOR_STATUS_OF'] . " {$lang['TOR_STATUS_NAME'][$tor['tor_status']]}\n\n";
+                $msg .= ($username = get_username($tor['checked_user_id'])) ? $lang['TOR_STATUS_CHANGED'] . html_entity_decode($username) . ", " . delta_time($tor['checked_time']) . $lang['TOR_BACK'] . "\n\n" : "";
+                $msg .= $lang['PROCEED'] . '?';
+                $this->prompt_for_confirm($msg);
+            }
+        }
+
+        \TorrentPier\Legacy\Torrent::change_tor_status($attach_id, $new_status);
+
+        // Log action
+        $log_msg = sprintf($lang['TOR_STATUS_LOG_ACTION'], config()->get('tor_icons')[$new_status] . ' <b> ' . $lang['TOR_STATUS_NAME'][$new_status] . '</b>', config()->get('tor_icons')[$tor['tor_status']] . ' <b> ' . $lang['TOR_STATUS_NAME'][$tor['tor_status']] . '</b>');
+        if ($comment && $comment != $lang['COMMENT']) {
+            $log_msg .= "<br/>{$lang['COMMENT']}: <b>$comment</b>.";
+        }
+        $log_action->mod('mod_topic_change_tor_status', [
+            'forum_id' => $tor['forum_id'],
+            'topic_id' => $tor['topic_id'],
+            'topic_title' => $tor['topic_title'],
+            'log_msg' => $log_msg . '<br/>-------------',
+        ]);
+
+        $this->response['status'] = config()->get('tor_icons')[$new_status] . ' <b> ' . $lang['TOR_STATUS_NAME'][$new_status] . '</b> &middot; ' . profile_url($userdata) . ' &middot; <i>' . delta_time(TIMENOW) . $lang['TOR_BACK'] . '</i>';
+
+        if (config()->get('tor_comment') && (($comment && $comment != $lang['COMMENT']) || in_array($new_status, config()->get('tor_reply')))) {
+            if ($tor['poster_id'] > 0) {
+                $subject = sprintf($lang['TOR_MOD_TITLE'], $tor['topic_title']);
+                $message = sprintf($lang['TOR_MOD_MSG'], get_username($tor['poster_id']), make_url(TOPIC_URL . $tor['topic_id']), config()->get('tor_icons')[$new_status] . ' ' . $lang['TOR_STATUS_NAME'][$new_status]);
+
+                if ($comment && $comment != $lang['COMMENT']) {
+                    $message .= "\n\n[b]" . $lang['COMMENT'] . '[/b]: ' . $comment;
+                }
+
+                send_pm($tor['poster_id'], $subject, $message, $userdata['user_id']);
+                \TorrentPier\Sessions::cache_rm_user_sessions($tor['poster_id']);
+            }
+        }
+        break;
+
+    case 'status_reply':
+        if (!config()->get('tor_comment')) {
+            $this->ajax_die($lang['MODULE_OFF']);
+        }
+
+        $subject = sprintf($lang['TOR_AUTH_TITLE'], $tor['topic_title']);
+        $message = sprintf($lang['TOR_AUTH_MSG'], get_username($tor['checked_user_id']), make_url(TOPIC_URL . $tor['topic_id']), $tor['topic_title']);
+
+        if ($comment && $comment != $lang['COMMENT']) {
+            $message .= "\n\n[b]" . $lang['COMMENT'] . '[/b]: ' . $comment;
+        }
+
+        send_pm($tor['checked_user_id'], $subject, $message, $userdata['user_id']);
+        \TorrentPier\Sessions::cache_rm_user_sessions($tor['checked_user_id']);
+        break;
+
+    default:
+        $this->ajax_die('Invalid mode: ' . $mode);
+}
+
+$this->response['attach_id'] = $attach_id;

library/ajax/change_torrent.php

@@ -0,0 +1,97 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+if (!defined('IN_AJAX')) {
+    die(basename(__FILE__));
+}
+
+global $userdata, $lang, $log_action;
+
+if (!isset($this->request['attach_id'])) {
+    $this->ajax_die($lang['EMPTY_ATTACH_ID']);
+}
+if (!isset($this->request['type'])) {
+    $this->ajax_die('empty type');
+}
+
+$attach_id = (int)$this->request['attach_id'];
+$type = (string)$this->request['type'];
+
+if (!$torrent = \TorrentPier\Legacy\Torrent::get_torrent_info($attach_id)) {
+    $this->ajax_die($lang['INVALID_ATTACH_ID']);
+}
+
+if ($torrent['poster_id'] == $userdata['user_id'] && !IS_AM) {
+    if ($type == 'del_torrent' || $type == 'reg' || $type == 'unreg') {
+    } else {
+        $this->ajax_die($lang['ONLY_FOR_MOD']);
+    }
+} elseif (!IS_AM) {
+    $this->ajax_die($lang['ONLY_FOR_MOD']);
+}
+
+$title = $url = '';
+switch ($type) {
+    case 'set_gold':
+    case 'set_silver':
+    case 'unset_silver_gold':
+        if ($type == 'set_silver') {
+            $tor_type = TOR_TYPE_SILVER;
+            $tor_type_lang = $lang['SILVER'];
+        } elseif ($type == 'set_gold') {
+            $tor_type = TOR_TYPE_GOLD;
+            $tor_type_lang = $lang['GOLD'];
+        } else {
+            $tor_type = TOR_TYPE_DEFAULT;
+            $tor_type_lang = "{$lang['UNSET_GOLD_TORRENT']} / {$lang['UNSET_SILVER_TORRENT']}";
+        }
+
+        \TorrentPier\Legacy\Torrent::change_tor_type($attach_id, $tor_type);
+
+        // Log action
+        $log_action->mod('mod_topic_change_tor_type', [
+            'forum_id' => $torrent['forum_id'],
+            'topic_id' => $torrent['topic_id'],
+            'topic_title' => $torrent['topic_title'],
+            'log_msg' => sprintf($lang['TOR_TYPE_LOG_ACTION'], $tor_type_lang),
+        ]);
+
+        $title = $lang['CHANGE_TOR_TYPE'];
+        $url = make_url(TOPIC_URL . $torrent['topic_id']);
+        break;
+
+    case 'reg':
+        \TorrentPier\Legacy\Torrent::tracker_register($attach_id);
+        $url = (TOPIC_URL . $torrent['topic_id']);
+        break;
+
+    case 'unreg':
+        \TorrentPier\Legacy\Torrent::tracker_unregister($attach_id);
+        $url = (TOPIC_URL . $torrent['topic_id']);
+        break;
+
+    case 'del_torrent':
+        if (empty($this->request['confirmed'])) {
+            $this->prompt_for_confirm($lang['DEL_TORRENT']);
+        }
+        \TorrentPier\Legacy\Torrent::delete_torrent($attach_id);
+        $url = make_url(TOPIC_URL . $torrent['topic_id']);
+        break;
+
+    case 'del_torrent_move_topic':
+        if (empty($this->request['confirmed'])) {
+            $this->prompt_for_confirm($lang['DEL_MOVE_TORRENT']);
+        }
+        \TorrentPier\Legacy\Torrent::delete_torrent($attach_id);
+        $url = make_url("modcp.php?" . POST_TOPIC_URL . "={$torrent['topic_id']}&mode=move&sid={$userdata['session_id']}");
+        break;
+}
+
+$this->response['url'] = $url;
+$this->response['title'] = $title;

library/ajax/change_user_opt.php

@@ -0,0 +1,38 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+if (!defined('IN_AJAX')) {
+    die(basename(__FILE__));
+}
+
+global $bf, $lang;
+
+$user_id = (int)$this->request['user_id'];
+$new_opt = json_decode($this->request['user_opt'], true, 512, JSON_THROW_ON_ERROR);
+
+if (!$user_id or !$u_data = get_userdata($user_id)) {
+    $this->ajax_die($lang['NO_USER_ID_SPECIFIED']);
+}
+
+if (!is_array($new_opt)) {
+    $this->ajax_die('invalid new_opt');
+}
+
+foreach ($bf['user_opt'] as $opt_name => $opt_bit) {
+    if (isset($new_opt[$opt_name])) {
+        setbit($u_data['user_opt'], $opt_bit, !empty($new_opt[$opt_name]));
+    }
+}
+
+DB()->query("UPDATE " . BB_USERS . " SET user_opt = {$u_data['user_opt']} WHERE user_id = $user_id LIMIT 1");
+
+// Remove data from cache
+\TorrentPier\Sessions::cache_rm_user_sessions($user_id);
+
+$this->response['resp_html'] = $lang['SAVED'];

library/ajax/change_user_rank.php

@@ -0,0 +1,38 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+if (!defined('IN_AJAX')) {
+    die(basename(__FILE__));
+}
+
+global $datastore, $lang;
+
+if (!$ranks = $datastore->get('ranks')) {
+    $datastore->update('ranks');
+    $ranks = $datastore->get('ranks');
+}
+
+$rank_id = (int)$this->request['rank_id'];
+
+if (!$user_id = (int)$this->request['user_id'] or !$profiledata = get_userdata($user_id)) {
+    $this->ajax_die($lang['NO_USER_ID_SPECIFIED']);
+}
+
+if ($rank_id != 0 && !isset($ranks[$rank_id])) {
+    $this->ajax_die("invalid rank_id: $rank_id");
+}
+
+DB()->query("UPDATE " . BB_USERS . " SET user_rank = $rank_id WHERE user_id = $user_id LIMIT 1");
+
+\TorrentPier\Sessions::cache_rm_user_sessions($user_id);
+
+$user_rank = $rank_id ? '<span class="' . $ranks[$rank_id]['rank_style'] . '">' . $ranks[$rank_id]['rank_title'] . '</span>' : '';
+
+$this->response['html'] = $rank_id ? $lang['AWARDED_RANK'] . "<b> $user_rank </b>" : $lang['SHOT_RANK'];
+$this->response['rank_name'] = $rank_id ? $user_rank : $lang['USER'];

library/ajax/edit_group_profile.php

@@ -0,0 +1,54 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+if (!defined('IN_AJAX')) {
+    die(basename(__FILE__));
+}
+
+global $userdata, $lang;
+
+if (!$group_id = (int)$this->request['group_id'] or !$group_info = \TorrentPier\Legacy\Group::get_group_data($group_id)) {
+    $this->ajax_die($lang['NO_GROUP_ID_SPECIFIED']);
+}
+if (!$mode = (string)$this->request['mode']) {
+    $this->ajax_die('No mode specified');
+}
+
+$value = $this->request['value'] = (string)(isset($this->request['value'])) ? $this->request['value'] : 0;
+
+if (!IS_ADMIN && $userdata['user_id'] != $group_info['group_moderator']) {
+    $this->ajax_die($lang['ONLY_FOR_MOD']);
+}
+
+switch ($mode) {
+    case 'group_name':
+    case 'group_signature':
+    case 'group_description':
+        $value = htmlCHR($value, false, ENT_NOQUOTES);
+        $this->response['new_value'] = $value;
+        break;
+
+    case 'release_group':
+    case 'group_type':
+        $this->response['new_value'] = $value;
+        break;
+
+    case 'delete_avatar':
+        delete_avatar(GROUP_AVATAR_MASK . $group_id, $group_info['avatar_ext_id']);
+        $value = 0;
+        $mode = 'avatar_ext_id';
+        $this->response['remove_avatar'] = get_avatar(GROUP_AVATAR_MASK . $group_id, $value);
+        break;
+
+    default:
+        $this->ajax_die('Unknown mode');
+}
+
+$value_sql = DB()->escape($value, true);
+DB()->query("UPDATE " . BB_GROUPS . " SET $mode = $value_sql WHERE group_id = $group_id LIMIT 1");

library/ajax/edit_user_profile.php

@@ -0,0 +1,159 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+if (!defined('IN_AJAX')) {
+    die(basename(__FILE__));
+}
+
+global $lang;
+
+if (!$user_id = (int)$this->request['user_id'] or !$profiledata = get_userdata($user_id)) {
+    $this->ajax_die($lang['NO_USER_ID_SPECIFIED']);
+}
+
+if (!$field = (string)$this->request['field']) {
+    $this->ajax_die('invalid profile field');
+}
+
+// Check for demo mode
+if (IN_DEMO_MODE && in_array($field, ['username', 'user_email'])) {
+    $this->ajax_die($lang['CANT_EDIT_IN_DEMO_MODE']);
+}
+
+$table = BB_USERS;
+$value = $this->request['value'] = (string)(isset($this->request['value'])) ? $this->request['value'] : 0;
+
+switch ($field) {
+    case 'username':
+        $value = clean_username($value);
+        if ($err = \TorrentPier\Validate::username($value)) {
+            $this->ajax_die($err);
+        }
+        $this->response['new_value'] = $this->request['value'];
+        break;
+
+    case 'user_email':
+        $value = htmlCHR($value);
+        if ($err = \TorrentPier\Validate::email($value)) {
+            $this->ajax_die($err);
+        }
+        $this->response['new_value'] = $this->request['value'];
+        break;
+
+    case 'user_website':
+        if ($value == '' || preg_match('#^https?://[\w\#!$%&~/.\-;:=,?@а-яА-Я\[\]+]+$#iu', $value)) {
+            $this->response['new_value'] = htmlCHR($value);
+        } else {
+            $this->ajax_die($lang['WEBSITE_ERROR']);
+        }
+        break;
+
+    case 'user_gender':
+        if (!config()->get('gender')) {
+            $this->ajax_die($lang['MODULE_OFF']);
+        }
+        if (!isset($lang['GENDER_SELECT'][$value])) {
+            $this->ajax_die($lang['ERROR']);
+        }
+        $this->response['new_value'] = $lang['GENDER_SELECT'][$value];
+        break;
+
+    case 'user_birthday':
+        if (!config()->get('birthday_enabled')) {
+            $this->ajax_die($lang['MODULE_OFF']);
+        }
+        $birthday_date = date_parse($value);
+
+        if (!empty($birthday_date['year'])) {
+            if (strtotime($value) >= TIMENOW) {
+                $this->ajax_die($lang['WRONG_BIRTHDAY_FORMAT']);
+            } elseif (bb_date(TIMENOW, 'Y', false) - $birthday_date['year'] > config()->get('birthday_max_age')) {
+                $this->ajax_die(sprintf($lang['BIRTHDAY_TO_HIGH'], config()->get('birthday_max_age')));
+            } elseif (bb_date(TIMENOW, 'Y', false) - $birthday_date['year'] < config()->get('birthday_min_age')) {
+                $this->ajax_die(sprintf($lang['BIRTHDAY_TO_LOW'], config()->get('birthday_min_age')));
+            }
+        }
+
+        $this->response['new_value'] = $this->request['value'];
+        break;
+
+    case 'user_icq':
+        if ($value && !preg_match('#^\d{6,15}$#', $value)) {
+            $this->ajax_die($lang['ICQ_ERROR']);
+        }
+        $this->response['new_value'] = $this->request['value'];
+        break;
+
+    case 'user_skype':
+        if ($value && !preg_match("#^[a-zA-Z0-9_.\-@,]{6,32}$#", $value)) {
+            $this->ajax_die($lang['SKYPE_ERROR']);
+        }
+        $this->response['new_value'] = $this->request['value'];
+        break;
+
+    case 'user_twitter':
+        if ($value && !preg_match("#^[a-zA-Z0-9_]{1,15}$#", $value)) {
+            $this->ajax_die($lang['TWITTER_ERROR']);
+        }
+        $this->response['new_value'] = $this->request['value'];
+        break;
+
+    case 'user_occ':
+    case 'user_interests':
+        $this->response['new_value'] = htmlCHR($value);
+        break;
+
+    case 'u_up_total':
+    case 'u_down_total':
+    case 'u_up_release':
+    case 'u_up_bonus':
+        if (!IS_ADMIN) {
+            $this->ajax_die($lang['NOT_ADMIN']);
+        }
+
+        $table = BB_BT_USERS;
+        $value = (int)$this->request['value'];
+
+        if ($value < 0) {
+            $this->ajax_die($lang['WRONG_INPUT']);
+        }
+
+        foreach (['KB' => 1, 'MB' => 2, 'GB' => 3, 'TB' => 4, 'PB' => 5, 'EB' => 6, 'ZB' => 7, 'YB' => 8] as $s => $m) {
+            if (stripos($this->request['value'], $s) !== false) {
+                $value *= (1024 ** $m);
+                break;
+            }
+        }
+        $this->response['new_value'] = humn_size($value, space: ' ');
+
+        $btu = get_bt_userdata($user_id);
+        $btu[$field] = $value;
+        $this->response['update_ids']['u_ratio'] = (string)get_bt_ratio($btu);
+        CACHE('bb_cache')->rm('btu_' . $user_id);
+        break;
+
+    case 'user_points':
+        $value = (float)str_replace(',', '.', $this->request['value']);
+        $value = sprintf('%.2f', $value);
+        if ($value < 0.0 || strlen(strstr($value, '.', true)) > 14) {
+            $this->ajax_die($lang['WRONG_INPUT']);
+        }
+        $this->response['new_value'] = $value;
+        break;
+
+    default:
+        $this->ajax_die("invalid profile field: $field");
+}
+
+$value_sql = DB()->escape($value, true);
+DB()->query("UPDATE $table SET $field = $value_sql WHERE user_id = $user_id LIMIT 1");
+
+\TorrentPier\Sessions::cache_rm_user_sessions($user_id);
+
+$this->response['edit_id'] = $this->request['edit_id'];

library/ajax/ffprobe_info.php

@@ -0,0 +1,154 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+if (!defined('IN_AJAX')) {
+    die(basename(__FILE__));
+}
+
+global $lang;
+
+if (!config()->get('torr_server.enabled')) {
+    $this->ajax_die($lang['MODULE_OFF']);
+}
+
+if (config()->get('torr_server.disable_for_guest') && IS_GUEST) {
+    $this->ajax_die($lang['NEED_TO_LOGIN_FIRST']);
+}
+
+$attach_id = $this->request['attach_id'] ?? '';
+if (empty($attach_id) || !is_numeric($attach_id)) {
+    $this->ajax_die($lang['INVALID_ATTACH_ID']);
+}
+
+$file_index = $this->request['file_index'] ?? '';
+if (empty($file_index) || !is_numeric($file_index)) {
+    $this->ajax_die("Invalid file index: $file_index");
+}
+
+if (!$info_hash = (string)$this->request['info_hash'] or !ctype_xdigit($info_hash)) {
+    $this->ajax_die("Invalid info_hash: $info_hash");
+}
+
+$isAudio = isset($this->request['is_audio']) && $this->request['is_audio'];
+
+// Get ffprobe info from TorrServer
+$ffpInfo = (new \TorrentPier\TorrServerAPI())->getFfpInfo($info_hash, $file_index, $attach_id);
+$ffpInfo = $ffpInfo->{$file_index};
+if (isset($ffpInfo->streams)) {
+    // Video codec information
+    $videoCodecIndex = array_search('video', array_column($ffpInfo->streams, 'codec_type'));
+    if (is_int($videoCodecIndex)) {
+        $videoCodecInfo = $ffpInfo->streams[$videoCodecIndex];
+    }
+    // Audio codec information
+    $audioTracks = array_filter($ffpInfo->streams, function ($e) {
+        return $e->codec_type === 'audio';
+    });
+    // Audio tracks information
+    $audioDub = array_map(function ($stream) {
+        global $lang;
+
+        $result = '<span class="warnColor2">' . sprintf($lang['AUDIO_TRACK'], (!isset($stream->index) || $stream->index === 0) ? 1 : $stream->index) . '</span><br/>';
+        if (isset($stream->tags->language)) {
+            if (isset($stream->tags->title)) {
+                $result .= '<b>' . mb_strtoupper($stream->tags->language, DEFAULT_CHARSET) . ' (' . $stream->tags->title . ')' . '</b>';
+            } else {
+                $result .= '<b>' . mb_strtoupper($stream->tags->language, DEFAULT_CHARSET) . '</b>';
+            }
+            $result .= '<br/>';
+        }
+
+        if (!empty($stream->codec_name)) {
+            $result .= sprintf($lang['AUDIO_CODEC'], $stream->codec_long_name, mb_strtoupper($stream->codec_name, DEFAULT_CHARSET)) . '<br/>';
+        }
+        if (!empty($stream->bit_rate)) {
+            $result .= sprintf($lang['BITRATE'], humn_bitrate((int)$stream->bit_rate)) . '<br/>';
+        }
+        if (!empty($stream->sample_rate)) {
+            $result .= sprintf($lang['SAMPLE_RATE'], humn_sample_rate((int)$stream->sample_rate)) . '<br/>';
+        }
+        if (!empty($stream->channels)) {
+            $result .= sprintf($lang['CHANNELS'], $stream->channels) . '<br/>';
+        }
+        if (!empty($stream->channel_layout)) {
+            $result .= sprintf($lang['CHANNELS_LAYOUT'], $stream->channel_layout);
+        }
+
+        return $result;
+    }, $audioTracks);
+
+    // Generate output data
+    $data = [
+        'filesize' => sprintf($lang['FILESIZE'] . ': <b>%s</b>', humn_size($ffpInfo->format->size)),
+        'resolution' => (!$isAudio && isset($videoCodecInfo)) ? sprintf($lang['RESOLUTION'], $videoCodecInfo->width . 'x' . $videoCodecInfo->height) : '',
+        'video_codec' => (!$isAudio && isset($videoCodecInfo->codec_name)) ? sprintf($lang['VIDEO_CODEC'], $videoCodecInfo->codec_long_name, mb_strtoupper($videoCodecInfo->codec_name, DEFAULT_CHARSET)) : '',
+        'audio_dub' => implode('<hr/>', $audioDub)
+    ];
+
+    // Validate output data
+    $result = '<hr/>';
+    if (!empty($data['resolution'])) {
+        $result .= $data['resolution'] . '<br/>';
+    }
+    if (!empty($data['filesize'])) {
+        $result .= $data['filesize'] . '<br/>';
+    }
+    if (!empty($data['video_codec'])) {
+        $result .= $data['video_codec'];
+    }
+    if (!empty($data['audio_dub'])) {
+        $result .= '<hr/>' . $data['audio_dub'];
+    }
+
+    $this->response['ffprobe_data'] = $result;
+}
+
+/**
+ * Bitrate to human-readable format
+ *
+ * @param int $bitrate
+ * @param string $space
+ * @return string
+ */
+function humn_bitrate(int $bitrate, string $space = '&nbsp;'): string
+{
+    if ($bitrate >= 1000000) {
+        $unit = 'Mbps';
+        $bitrate /= 1000000;
+    } elseif ($bitrate >= 1000) {
+        $unit = 'kbps';
+        $bitrate /= 1000;
+    } else {
+        $unit = 'bps';
+    }
+
+    return sprintf('%d', commify($bitrate)) . $space . $unit;
+}
+
+/**
+ * Sample rate to human-readable format
+ *
+ * @param int $sample_rate
+ * @param string $space
+ * @return string
+ */
+function humn_sample_rate(int $sample_rate, string $space = '&nbsp;'): string
+{
+    if ($sample_rate >= 1000000) {
+        $unit = 'Mhz';
+    } elseif ($sample_rate >= 1000) {
+        $unit = 'kHz';
+    } else {
+        $unit = 'Hz';
+    }
+
+    return sprintf('%.1f', commify($sample_rate)) . $space . $unit;
+}
+
+$this->response['file_index'] = $file_index;

library/ajax/group_membership.php

@@ -0,0 +1,67 @@
+<?php
+/**
+ * TorrentPier – Bull-powered BitTorrent tracker engine
+ *
+ * @copyright Copyright (c) 2005-2025 TorrentPier (https://torrentpier.com)
+ * @link      https://github.com/torrentpier/torrentpier for the canonical source repository
+ * @license   https://github.com/torrentpier/torrentpier/blob/master/LICENSE MIT License
+ */
+
+if (!defined('IN_AJAX')) {
+    die(basename(__FILE__));
+}
+
+global $lang, $user;
+
+if (!$user_id = (int)$this->request['user_id'] or !$profiledata = get_userdata($user_id)) {
+    $this->ajax_die($lang['NO_USER_ID_SPECIFIED']);
+}
+
+if (!$mode = (string)$this->request['mode']) {
+    $this->ajax_die('invalid mode (empty)');
+}
+
+switch ($mode) {
+    case 'get_group_list':
+        $sql = "
+					SELECT ug.user_pending, g.group_id, g.group_type, g.group_name, g.group_moderator, self.user_id AS can_view
+					FROM       " . BB_USER_GROUP . " ug
+					INNER JOIN " . BB_GROUPS . " g ON(g.group_id = ug.group_id AND g.group_single_user = 0)
+					 LEFT JOIN " . BB_USER_GROUP . " self ON(self.group_id = g.group_id AND self.user_id = {$user->id} AND self.user_pending = 0)
+					WHERE ug.user_id = $user_id
+					ORDER BY g.group_name
+				";
+        $html = [];
+        foreach (DB()->fetch_rowset($sql) as $row) {
+            $class = ($row['user_pending']) ? 'med' : 'med bold';
+            $class .= ($row['group_moderator'] == $user_id) ? ' colorMod' : '';
+            $href = GROUP_URL . $row['group_id'];
+
+            if (IS_ADMIN) {
+                $href .= "&amp;" . POST_USERS_URL . "=$user_id";
+                $link = '<a href="' . $href . '" class="' . $class . '" target="_blank">' . htmlCHR($row['group_name']) . '</a>';
+                $html[] = $link;
+            } else {
+                // hidden group and the user himself is not a member of it
+                if ($row['group_type'] == GROUP_HIDDEN && !$row['can_view']) {
+                    continue;
+                }
+                if ($row['group_moderator'] == $user->id) {
+                    // the user himself is the moderator of this group
+                    $class .= ' selfMod';
+                    $href .= "&amp;" . POST_USERS_URL . "=$user_id";
+                }
+                $link = '<a href="' . $href . '" class="' . $class . '" target="_blank">' . htmlCHR($row['group_name']) . '</a>';
+                $html[] = $link;
+            }
+        }
+        if ($html) {
+            $this->response['group_list_html'] = '<ul><li>' . implode('</li><li>', $html) . '</li></ul>';
+        } else {
+            $this->response['group_list_html'] = $lang['GROUP_LIST_HIDDEN'];
+        }
+        break;
+
+    default:
+        $this->ajax_die("invalid mode: $mode");
+}