root/trunk/includes/input.php

<?php

/**
 * Package: Spam Board 5
 * File: includes/input.php
 * Description: validation of input variables
 *
 * Copyright (C) 2007, 2008, 2009, 2012 Hannes Schueller
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Affero General Public License as
 * published by the Free Software Foundation, version 3 of the
 * License.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU Affero General Public License for more details.
 *
 * You should have received a copy of the GNU Affero General Public License
 * along with this program (see LICENCE). If not,
 * see <http://www.gnu.org/licenses/>.
 **/

/* register_globals atrocity can't just be disabled by using ini_set,
 * because the damage is already done once that takes effect, so... */
if (ini_get('register_globals') !== 0 && strtolower(ini_get('register_globals')) !== 'off') {
    // don't touch the following:
    $not = Array();
    $not[] = 'SETTINGS';
    $not[] = 'VERSION';
    $not[] = 'BOTS';
    $not[] = 'MEMBERSTAGES';
    $not[] = 'CIPHER';
    $not[] = 'HASH';
    $not[] = 'LANG';
    $not[] = 'RULES';
    $not[] = 'DEFAULTGROUPS';
    // 'de-register' all local names of global variables
    foreach ($_SERVER as $key=>$val) {
        if (in_array($key, $not) === FALSE) {
            unset($$key);
        }
    }
    foreach ($_GET as $key=>$val) {
        if (in_array($key, $not) === FALSE) {
            unset($$key);
        }
    }
    foreach ($_POST as $key=>$val) {
        if (in_array($key, $not) === FALSE) {
            unset($$key);
        }
    }
    foreach ($_COOKIE as $key=>$val) {
        if (in_array($key, $not) === FALSE) {
            unset($$key);
        }
    }
    foreach ($_FILES as $key=>$val) {
        if (in_array($key, $not) === FALSE) {
            unset($$key);
        }
    }
    foreach ($_ENV as $key=>$val) {
        if (in_array($key, $not) === FALSE) {
            unset($$key);
        }
    }
    foreach ($_REQUEST as $key=>$val) {
        if (in_array($key, $not) === FALSE) {
            unset($$key);
        }
    }
    if (isset($_SESSION) && is_array($_SESSION)) {
        foreach ($_SESSION as $key=>$val) {
            if (in_array($key, $not) === FALSE) {
                unset($$key);
            }
        }
    }
}

// handle PHP's 'magic quotes' feature (bug) in case disabling it through .htaccess failed
function stripslashes_array($data) {
    if (is_array($data)){
        // another array within array
        foreach ($data as $key => $value){
            // recursive call
            $data[$key] = stripslashes_array($value);
        }
        return $data;
    } else {
        // endpoint of recursion
        return stripslashes($data);
    }
}
if (get_magic_quotes_gpc()) {
    // strip slashes from global arrays
    $_SERVER = stripslashes_array($_SERVER);
    $_GET = stripslashes_array($_GET);
    $_POST = stripslashes_array($_POST);
    $_COOKIE = stripslashes_array($_COOKIE);
    $_FILES = stripslashes_array($_FILES);
    $_ENV = stripslashes_array($_ENV);
    $_REQUEST = stripslashes_array($_REQUEST);
    if (isset($_SESSION) && is_array($_SESSION)) {
        $_SESSION = stripslashes_array($_SESSION, '');
    }
}

// check only for characters which actually are illegal in the current encoding
function check_legal($str) {
    global $SETTINGS, $F;
    if (mb_check_encoding($str, $SETTINGS['encoding']) === FALSE || @simplexml_load_string('<root>' . $F->htmlentities($str) . '</root>') === FALSE) {
        return FALSE;
    } else {
        return TRUE;
    }
}

/* translate input variables to local names and check their integrity */

if (isset($_GET['show']) && $_GET['show'] != '') {
    $INPUT['show'] = $_GET['show'];
    if ($INPUT['show'] == 'index') { $INPUT['show'] = 'category'; }
    if (preg_match('/^[a-z]+$/', $INPUT['show']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'show', $LANG['warning_input']);
        $INPUT['show'] = 'category';
    }
} else {
    $INPUT['show'] = 'category';
}

if (isset($_GET['category']) && $_GET['category'] != '') {
    $INPUT['category'] = $_GET['category'];
    if (preg_match('/^[0-9]+$/', $INPUT['category']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'category', $LANG['warning_input']);
        unset($INPUT['category']);
    }
}

if (isset($_POST['id']) && $_POST['id'] != '') {
    $INPUT['id'] = $_POST['id'];
} elseif (isset($_GET['id']) && $_GET['id'] != '') {
    $INPUT['id'] = $_GET['id'];
}
if (isset($INPUT['id']) && $INPUT['id'] != '') {
    if (preg_match('/^[0-9]+$/', $INPUT['id']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'id', $LANG['warning_input']);
        unset($INPUT['id']);
    }
}

if (isset($_POST['page']) && $_POST['page'] != '') {
    $INPUT['page'] = $_POST['page'];
} elseif (isset($_GET['page']) && $_GET['page'] != '') {
    $INPUT['page'] = $_GET['page'];
}
if (isset($INPUT['page']) && $INPUT['page'] != '') {
    if (preg_match('/^[0-9]+$/', $INPUT['page']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'page', $LANG['warning_input']);
        unset($INPUT['page']);
    }
}

if (isset($_POST['remember'])) {
    $INPUT['remember'] = $_POST['remember'];
    if (preg_match('/^[y]?$/', $INPUT['remember']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'remember', $LANG['warning_input']);
        unset($INPUT['remember']);
    }
}

if (isset($_POST['user'])) {
    $INPUT['user'] = $_POST['user'];
} elseif (isset($_GET['user'])) {
    $INPUT['user'] = $_GET['user'];
}
if (isset($INPUT['user'])) {
    if (check_legal($INPUT['user']) === FALSE) {
        $WARNINGS[] = str_replace('%var%', 'user', $LANG['warning_input']);
        unset($INPUT['user']);
    }
}

// passwords are hashed anyway, so users are allowed to enter what they like
if (isset($_POST['password'])) {
    $INPUT['password'] = $_POST['password'];
    if (check_legal($INPUT['password']) === FALSE) {
        $WARNINGS[] = str_replace('%var%', 'password', $LANG['warning_input']);
        unset($INPUT['password']);
    }
}
if (isset($_POST['newpassword'])) {
    $INPUT['newpassword'] = $_POST['newpassword'];
    if (check_legal($INPUT['newpassword']) === FALSE) {
        $WARNINGS[] = str_replace('%var%', 'newpassword', $LANG['warning_input']);
        unset($INPUT['newpassword']);
    }
}
if (isset($_POST['newpassword2'])) {
    $INPUT['newpassword2'] = $_POST['newpassword2'];
    if (check_legal($INPUT['newpassword2']) === FALSE) {
        $WARNINGS[] = str_replace('%var%', 'newpassword2', $LANG['warning_input']);
        unset($INPUT['newpassword2']);
    }
}

if (isset($_GET['month']) && $_GET['month'] != '') {
    $INPUT['month'] = $_GET['month'];
    if (preg_match('/^[0-9]{1,2}$/', $INPUT['month']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'month', $LANG['warning_input']);
        unset($INPUT['month']);
    }
}

if (isset($_GET['year']) && $_GET['year'] != '') {
    $INPUT['year'] = $_GET['year'];
    if (preg_match('/^[0-9]{4}$/', $INPUT['year']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'year', $LANG['warning_input']);
        unset($INPUT['year']);
    }
}

if (isset($_GET['order']) && $_GET['order'] != '') {
    $INPUT['order'] = $_GET['order'];
    if (preg_match('/^[a-z]+$/', $INPUT['order']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'order', $LANG['warning_input']);
        unset($INPUT['order']);
    }
}

if (isset($_GET['showresults'])) {
    $INPUT['showresults'] = $_GET['showresults'];
    if (preg_match('/^(yes)?$/', $INPUT['showresults']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'showresults', $LANG['warning_input']);
        unset($INPUT['showresults']);
    }
}

if (isset($_POST['poll']) && $_POST['poll'] != '') {
    $INPUT['poll'] = $_POST['poll'];
    if (preg_match('/^[0-9]+$/', $INPUT['poll']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'poll', $LANG['warning_input']);
        unset($INPUT['poll']);
    }
}

if (isset($_POST['topic']) && $_POST['topic'] != '') {
    $INPUT['topic'] = $_POST['topic'];
} elseif (isset($_GET['topic']) && $_GET['topic'] != '') {
    $INPUT['topic'] = $_GET['topic'];
}
if (isset($INPUT['topic'])) {
    if (preg_match('/^[0-9]+$/', $INPUT['topic']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'topic', $LANG['warning_input']);
        unset($INPUT['topic']);
    }
}

if (isset($_POST['search_scope']) && $_POST['search_scope'] != '') {
    $INPUT['search_scope'] = $_POST['search_scope'];
} elseif (isset($_GET['search_scope']) && $_GET['search_scope'] != '') {
    $INPUT['search_scope'] = $_GET['search_scope'];
}
if (isset($INPUT['search_scope'])) {
    if (preg_match('/^[a-z]*[=]?[0-9]*$/', $INPUT['search_scope']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'search_scope', $LANG['warning_input']);
        unset($INPUT['search_scope']);
    }
}

if (isset($_POST['search_mode']) && $_POST['search_mode'] != '') {
    $INPUT['search_mode'] = $_POST['search_mode'];
} elseif (isset($_GET['search_mode']) && $_GET['search_mode'] != '') {
    $INPUT['search_mode'] = $_GET['search_mode'];
}
if (isset($INPUT['search_mode'])) {
    if (preg_match('/^(all|any|phrase|member)?$/', $INPUT['search_mode']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'search_mode', $LANG['warning_input']);
        unset($INPUT['search_mode']);
    }
}

if (isset($_POST['search_fields']) && $_POST['search_fields'] != '') {
    $INPUT['search_fields'] = $_POST['search_fields'];
} elseif (isset($_GET['search_fields']) && $_GET['search_fields'] != '') {
    $INPUT['search_fields'] = $_GET['search_fields'];
}
if (isset($INPUT['search_fields'])) {
    if (preg_match('/^(both|posts|topics)?$/', $INPUT['search_fields']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'search_fields', $LANG['warning_input']);
        unset($INPUT['search_fields']);
    }
}

if (isset($_POST['search_age']) && $_POST['search_age'] != '') {
    $INPUT['search_age'] = $_POST['search_age'];
} elseif (isset($_GET['search_age']) && $_GET['search_age'] != '') {
    $INPUT['search_age'] = $_GET['search_age'];
}
if (isset($INPUT['search_age'])) {
    if (preg_match('/^(all|day|week|month|year)?$/', $INPUT['search_age']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'search_age', $LANG['warning_input']);
        unset($INPUT['search_age']);
    }
}

if (isset($_POST['all']) && $_POST['all'] != '') {
    $INPUT['all'] = $_POST['all'];
} elseif (isset($_GET['all']) && $_GET['all'] != '') {
    $INPUT['all'] = $_GET['all'];
}
if (isset($INPUT['all'])) {
    if (check_legal($INPUT['all']) === FALSE) {
        $WARNINGS[] = str_replace('%var%', 'all', $LANG['warning_input']);
        unset($INPUT['all']);
    }
}

if (isset($_POST['forum']) && $_POST['forum'] != '') {
    $INPUT['forum'] = $_POST['forum'];
} elseif (isset($_GET['forum']) && $_GET['forum'] != '') {
    $INPUT['forum'] = $_GET['forum'];
}
if (isset($INPUT['forum'])) {
    if (preg_match('/^[0-9]+$/', $INPUT['forum']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'forum', $LANG['warning_input']);
        unset($INPUT['forum']);
    }
}

if (isset($_POST['method']) && $_POST['method'] != '') {
    $INPUT['method'] = $_POST['method'];
} elseif (isset($_GET['method']) && $_GET['method'] != '') {
    $INPUT['method'] = $_GET['method'];
}
if (isset($INPUT['method'])) {
    if (preg_match('/^[a-z]+$/', $INPUT['method']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'method', $LANG['warning_input']);
        unset($INPUT['method']);
    }
}

if (isset($_POST['results']) && $_POST['results'] != '') {
    $INPUT['results'] = $_POST['results'];
} elseif (isset($_GET['results']) && $_GET['results'] != '') {
    $INPUT['results'] = $_GET['results'];
}
if (isset($INPUT['results'])) {
    if (preg_match('/^[y]?$/', $INPUT['results']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'results', $LANG['warning_input']);
        unset($INPUT['results']);
    }
}

if (isset($_POST['commit']) && $_POST['commit'] != '') {
    $INPUT['commit'] = $_POST['commit'];
} elseif (isset($_GET['commit']) && $_GET['commit'] != '') {
    $INPUT['commit'] = $_GET['commit'];
}
if (isset($INPUT['commit'])) {
    if (preg_match('/^[y]?$/', $INPUT['commit']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'commit', $LANG['warning_input']);
        unset($INPUT['commit']);
    }
}

if (isset($_POST['email']) && $_POST['email'] != '') {
    $INPUT['email'] = $_POST['email'];
    if (preg_match('/^[a-zA-Z][\w\.-]*[a-zA-Z0-9]@[a-zA-Z0-9][\w\.-]*[a-zA-Z0-9]\.[a-zA-Z][a-zA-Z\.]*[a-zA-Z]$/', $INPUT['email']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'email', $LANG['warning_input']);
        unset($INPUT['email']);
    }
}

if (isset($_POST['hideemail'])) {
    $INPUT['hideemail'] = $_POST['hideemail'];
    if (preg_match('/^[0-1]?$/', $INPUT['hideemail']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'hideemail', $LANG['warning_input']);
        unset($INPUT['hideemail']);
    }
}

if (isset($_POST['homepage']) && $_POST['homepage'] != '') {
    $INPUT['homepage'] = $_POST['homepage'];
    if (preg_match('/^(ftp|http|https|gopher|mailto|news|nntp|telnet|wais|file|prospero|aim|webcal):\/\/[A-Za-z0-9\$_\.+!*(),;\/?:@&~=\-]+$/', $INPUT['homepage']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'homepage', $LANG['warning_input']);
        unset($INPUT['homepage']);
    }
}

if (isset($_POST['birthday0']) && $_POST['birthday0'] != '') {
    $INPUT['birthday0'] = $_POST['birthday0'];
    if (preg_match('/^[0-9]{4}$/', $INPUT['birthday0']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'birthday0', $LANG['warning_input']);
        unset($INPUT['birthday0']);
    }
}

if (isset($_POST['birthday1']) && $_POST['birthday1'] != '') {
    $INPUT['birthday1'] = $_POST['birthday1'];
    if (preg_match('/^[0-9]{2}$/', $INPUT['birthday1']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'birthday1', $LANG['warning_input']);
        unset($INPUT['birthday1']);
    }
}

if (isset($_POST['birthday2']) && $_POST['birthday2'] != '') {
    $INPUT['birthday2'] = $_POST['birthday2'];
    if (preg_match('/^[0-9]{2}$/', $INPUT['birthday2']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'birthday2', $LANG['warning_input']);
        unset($INPUT['birthday2']);
    }
}

// no way to check these, but they're escaped before using them
if (isset($_POST['subject'])) {
    $INPUT['subject'] = $_POST['subject'];
    if (check_legal($INPUT['subject']) === FALSE) {
        $WARNINGS[] = str_replace('%var%', 'subject', $LANG['warning_input']);
        unset($INPUT['subject']);
    }
}

if (isset($_POST['location'])) {
    $INPUT['location'] = $_POST['location'];
    if (check_legal($INPUT['location']) === FALSE) {
        $WARNINGS[] = str_replace('%var%', 'location', $LANG['warning_input']);
        unset($INPUT['location']);
    }
}

if (isset($_POST['aim'])) {
    $INPUT['aim'] = $_POST['aim'];
    if (check_legal($INPUT['aim']) === FALSE) {
        $WARNINGS[] = str_replace('%var%', 'aim', $LANG['warning_input']);
        unset($INPUT['aim']);
    }
}

if (isset($_POST['yahoo'])) {
    $INPUT['yahoo'] = $_POST['yahoo'];
    if (check_legal($INPUT['yahoo']) === FALSE) {
        $WARNINGS[] = str_replace('%var%', 'yahoo', $LANG['warning_input']);
        unset($INPUT['yahoo']);
    }
}

if (isset($_POST['msn'])) {
    $INPUT['msn'] = $_POST['msn'];
    if (check_legal($INPUT['msn']) === FALSE) {
        $WARNINGS[] = str_replace('%var%', 'msn', $LANG['warning_input']);
        unset($INPUT['msn']);
    }
}

if (isset($_POST['jabber'])) {
    $INPUT['jabber'] = $_POST['jabber'];
    if (check_legal($INPUT['jabber']) === FALSE) {
        $WARNINGS[] = str_replace('%var%', 'jabber', $LANG['warning_input']);
        unset($INPUT['jabber']);
    }
}

if (isset($_POST['signature'])) {
    $INPUT['signature'] = $_POST['signature'];
    if (check_legal($INPUT['signature']) === FALSE) {
        $WARNINGS[] = str_replace('%var%', 'signature', $LANG['warning_input']);
        unset($INPUT['signature']);
    }
}

if (isset($_POST['attachments'])) {
    $INPUT['attachments'] = $_POST['attachments'];
    if (preg_match('/^[0-9]*$/', $INPUT['attachments']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'attachments', $LANG['warning_input']);
        unset($INPUT['attachments']);
    }
}

if (isset($_POST['avatar'])) {
    $INPUT['avatar'] = $_POST['avatar'];
    if (preg_match('/^[0-9a-zA-Z\.\/_\-]*$/', $INPUT['avatar']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'avatar', $LANG['warning_input']);
        unset($INPUT['avatar']);
    }
}

if (isset($_POST['icq'])) {
    $INPUT['icq'] = $_POST['icq'];
    if (preg_match('/^[0-9]*$/', $INPUT['icq']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'icq', $LANG['warning_input']);
        unset($INPUT['icq']);
    }
}

if (isset($_POST['action']) && $_POST['action'] != '') {
    $INPUT['action'] = $_POST['action'];
} elseif (isset($_GET['action']) && $_GET['action'] != '') {
    $INPUT['action'] = $_GET['action'];
}
if (isset($INPUT['action'])) {
    if (preg_match('/^[a-z]*$/', $INPUT['action']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'action', $LANG['warning_input']);
        unset($INPUT['action']);
    }
}

if (isset($_POST['reply']) && $_POST['reply'] != '') {
    $INPUT['reply'] = $_POST['reply'];
} elseif (isset($_GET['reply']) && $_GET['reply'] != '') {
    $INPUT['reply'] = $_GET['reply'];
}
if (isset($INPUT['reply'])) {
    if (preg_match('/^[0-9]*$/', $INPUT['reply']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'reply', $LANG['warning_input']);
        unset($INPUT['reply']);
    }
}

if (isset($_POST['to'])) {
    $INPUT['to'] = $_POST['to'];
    if (check_legal($INPUT['to']) === FALSE) {
        $WARNINGS[] = str_replace('%var%', 'to', $LANG['warning_input']);
        unset($INPUT['to']);
    }
}

if (isset($_POST['title'])) {
    $INPUT['title'] = $_POST['title'];
    if (check_legal($INPUT['title']) === FALSE) {
        $WARNINGS[] = str_replace('%var%', 'title', $LANG['warning_input']);
        unset($INPUT['title']);
    }
}

if (isset($_POST['post']) && $_POST['post'] != '') {
    $INPUT['post'] = $_POST['post'];
} elseif (isset($_GET['post']) && $_GET['post'] != '') {
    $INPUT['post'] = $_GET['post'];
}
if (isset($INPUT['post'])) {
    if (check_legal($INPUT['post']) === FALSE) {
        $WARNINGS[] = str_replace('%var%', 'post', $LANG['warning_input']);
        unset($INPUT['post']);
    }
}

if (isset($_POST['messagenotification_email'])) {
    $INPUT['messagenotification_email'] = $_POST['messagenotification_email'];
    if (preg_match('/^[0-1]?$/', $INPUT['messagenotification_email']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'messagenotification_email', $LANG['warning_input']);
        unset($INPUT['messagenotification_email']);
    }
}

if (isset($_POST['messagenotification_popup'])) {
    $INPUT['messagenotification_popup'] = $_POST['messagenotification_popup'];
    if (preg_match('/^[0-1]?$/', $INPUT['messagenotification_popup']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'messagenotification_popup', $LANG['warning_input']);
        unset($INPUT['messagenotification_popup']);
    }
}

if (isset($_POST['quote']) && $_POST['quote'] != '') {
    $INPUT['quote'] = $_POST['quote'];
} elseif (isset($_GET['quote']) && $_GET['quote'] != '') {
    $INPUT['quote'] = $_GET['quote'];
}
if (isset($INPUT['quote'])) {
    if (preg_match('/^[0-9]+$/', $INPUT['quote']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'quote', $LANG['warning_input']);
        unset($INPUT['quote']);
    }
}

if (isset($_POST['pollchoices'])) {
    $INPUT['pollchoices'] = $_POST['pollchoices'];
    if (check_legal($INPUT['pollchoices']) === FALSE) {
        $WARNINGS[] = str_replace('%var%', 'pollchoices', $LANG['warning_input']);
        unset($INPUT['pollchoices']);
    }
}

if (isset($_POST['vote'])) {
    $INPUT['vote'] = $_POST['vote'];
    if (preg_match('/^[0-9]*$/', $INPUT['vote']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'vote', $LANG['warning_input']);
        unset($INPUT['vote']);
    }
}

if (isset($_POST['auth_code'])) {
    $INPUT['auth_code'] = $_POST['auth_code'];
    if (preg_match('/^[0-9a-zA-Z!\$@+\-]*$/', $INPUT['auth_code']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'auth_code', $LANG['warning_input']);
        unset($INPUT['auth_code']);
    }
}

if (isset($_POST['boardstyle'])) {
    $INPUT['boardstyle'] = $_POST['boardstyle'];
    if (preg_match('/^[a-zA-Z0-9\-_]*(\.css)?$/', $INPUT['boardstyle']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'boardstyle', $LANG['warning_input']);
        unset($INPUT['boardstyle']);
    }
}

if (isset($_POST['newsqltype'])) {
    $INPUT['newsqltype'] = $_POST['newsqltype'];
    if (preg_match('/^[a-z]*$/', $INPUT['newsqltype']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'newsqltype', $LANG['warning_input']);
        unset($INPUT['newsqltype']);
    }
}

if (isset($_POST['newsqlhost'])) {
    $INPUT['newsqlhost'] = $_POST['newsqlhost'];
    if (preg_match('/^[a-zA-Z0-9\-_:\/\.]*$/', $INPUT['newsqlhost']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'newsqlhost', $LANG['warning_input']);
        unset($INPUT['newsqlhost']);
    }
}

if (isset($_POST['newsqluser'])) {
    $INPUT['newsqluser'] = $_POST['newsqluser'];
    if (preg_match('/^[a-zA-Z0-9\-_]*$/', $INPUT['newsqluser']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'newsqluser', $LANG['warning_input']);
        unset($INPUT['newsqluser']);
    }
}

if (isset($_POST['newsqlpassword'])) {
    $INPUT['newsqlpassword'] = $_POST['newsqlpassword'];
    if (check_legal($INPUT['newsqlpassword']) === FALSE) {
        $WARNINGS[] = str_replace('%var%', 'newsqlpassword', $LANG['warning_input']);
        unset($INPUT['newsqlpassword']);
    }
}

if (isset($_POST['newdbname'])) {
    $INPUT['newdbname'] = $_POST['newdbname'];
    if (preg_match('/^[a-zA-Z0-9\-\._]*$/', $INPUT['newdbname']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'newdbname', $LANG['warning_input']);
        unset($INPUT['newdbname']);
    }
}

if (isset($_POST['newdbtableprefix'])) {
    $INPUT['newdbtableprefix'] = $_POST['newdbtableprefix'];
    if (preg_match('/^[a-zA-Z0-9\-_]*$/', $INPUT['newdbtableprefix']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'newdbtableprefix', $LANG['warning_input']);
        unset($INPUT['newdbtableprefix']);
    }
}

if (isset($_POST['newforumname'])) {
    $INPUT['newforumname'] = $_POST['newforumname'];
    if (check_legal($INPUT['newforumname']) === FALSE) {
        $WARNINGS[] = str_replace('%var%', 'newforumname', $LANG['warning_input']);
        unset($INPUT['newforumname']);
    }
}

if (isset($_POST['newslogan'])) {
    $INPUT['newslogan'] = $_POST['newslogan'];
    if (check_legal($INPUT['newslogan']) === FALSE) {
        $WARNINGS[] = str_replace('%var%', 'newslogan', $LANG['warning_input']);
        unset($INPUT['newslogan']);
    }
}

if (isset($_POST['newforumlogo'])) {
    $INPUT['newforumlogo'] = $_POST['newforumlogo'];
    if (preg_match('/^[a-zA-Z0-9\-_\.]*$/', $INPUT['newforumlogo']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'newforumlogo', $LANG['warning_input']);
        unset($INPUT['newforumlogo']);
    }
}

if (isset($_POST['newsitename'])) {
    $INPUT['newsitename'] = $_POST['newsitename'];
    if (check_legal($INPUT['newsitename']) === FALSE) {
        $WARNINGS[] = str_replace('%var%', 'newsitename', $LANG['warning_input']);
        unset($INPUT['newsitename']);
    }
}

if (isset($_POST['newsiteurl']) && $_POST['newsiteurl'] != '') {
    $INPUT['newsiteurl'] = $_POST['newsiteurl'];
    if (check_legal($INPUT['newsiteurl']) === FALSE) {
        $WARNINGS[] = str_replace('%var%', 'newsiteurl', $LANG['warning_input']);
        unset($INPUT['newsiteurl']);
    }
}

if (isset($_POST['newforumadmin'])) {
    $INPUT['newforumadmin'] = $_POST['newforumadmin'];
    if (check_legal($INPUT['newforumadmin']) === FALSE) {
        $WARNINGS[] = str_replace('%var%', 'newforumadmin', $LANG['warning_input']);
        unset($INPUT['newforumadmin']);
    }
}

if (isset($_POST['newforumadminemail']) && $_POST['newforumadminemail'] != '') {
    $INPUT['newforumadminemail'] = $_POST['newforumadminemail'];
    if (preg_match('/^[a-zA-Z][\w\.-]*[a-zA-Z0-9]@[a-zA-Z0-9][\w\.-]*[a-zA-Z0-9]\.[a-zA-Z][a-zA-Z\.]*[a-zA-Z]$/', $INPUT['newforumadminemail']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'newforumadminemail', $LANG['warning_input']);
        unset($INPUT['newforumadminemail']);
    }
}

if (isset($_POST['newtopicsperpage'])) {
    $INPUT['newtopicsperpage'] = $_POST['newtopicsperpage'];
    if (preg_match('/^[0-9]*$/', $INPUT['newtopicsperpage']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'newtopicsperpage', $LANG['warning_input']);
        unset($INPUT['newtopicsperpage']);
    }
}

if (isset($_POST['newpostsperpage'])) {
    $INPUT['newpostsperpage'] = $_POST['newpostsperpage'];
    if (preg_match('/^[0-9]*$/', $INPUT['newpostsperpage']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'newpostsperpage', $LANG['warning_input']);
        unset($INPUT['newpostsperpage']);
    }
}

if (isset($_POST['newmaxavatarsize'])) {
    $INPUT['newmaxavatarsize'] = $_POST['newmaxavatarsize'];
    if (preg_match('/^[0-9]*$/', $INPUT['newmaxavatarsize']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'newmaxavatarsize', $LANG['warning_input']);
        unset($INPUT['newmaxavatarsize']);
    }
}

if (isset($_POST['newguestemail'])) {
    $INPUT['newguestemail'] = $_POST['newguestemail'];
    if (preg_match('/^[0-1]?$/', $INPUT['newguestemail']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'newguestemail', $LANG['warning_input']);
        unset($INPUT['newguestemail']);
    }
}

if (isset($_POST['newfloodcontrol'])) {
    $INPUT['newfloodcontrol'] = $_POST['newfloodcontrol'];
    if (preg_match('/^[0-9]*$/', $INPUT['newfloodcontrol']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'newfloodcontrol', $LANG['warning_input']);
        unset($INPUT['newfloodcontrol']);
    }
}

if (isset($_POST['newfloodcontrol_search'])) {
    $INPUT['newfloodcontrol_search'] = $_POST['newfloodcontrol_search'];
    if (preg_match('/^[0-9]*$/', $INPUT['newfloodcontrol_search']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'newfloodcontrol_search', $LANG['warning_input']);
        unset($INPUT['newfloodcontrol_search']);
    }
}

if (isset($_POST['newmaxuploadsize'])) {
    $INPUT['newmaxuploadsize'] = $_POST['newmaxuploadsize'];
    if (preg_match('/^[0-9]*$/', $INPUT['newmaxuploadsize']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'newmaxuploadsize', $LANG['warning_input']);
        unset($INPUT['newmaxuploadsize']);
    }
}

if (isset($_POST['newuploadextensions'])) {
    $INPUT['newuploadextensions'] = $_POST['newuploadextensions'];
    if (preg_match('/^[0-9A-Za-z\.,]*$/', $INPUT['newuploadextensions']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'newuploadextensions', $LANG['warning_input']);
        unset($INPUT['newuploadextensions']);
    }
}

if (isset($_POST['newlanguage'])) {
    $INPUT['newlanguage'] = trim($_POST['newlanguage']);
    if (preg_match('/^[0-9a-zA-Z_\-]*$/', $INPUT['newlanguage']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'newlanguage', $LANG['warning_input']);
        unset($INPUT['newlanguage']);
    }
}

if (isset($_POST['newurl_rewriting'])) {
    $INPUT['newurl_rewriting'] = $_POST['newurl_rewriting'];
    if (preg_match('/^[0-1]?$/', $INPUT['newurl_rewriting']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'newurl_rewriting', $LANG['warning_input']);
        unset($INPUT['newurl_rewriting']);
    }
}

if (isset($_POST['newtimezone'])) {
    $INPUT['newtimezone'] = $_POST['newtimezone'];
    if ($INPUT['newtimezone'] != '' && $INPUT['newtimezone'] != ' ') {
        if (preg_match('/^[+\-]?[0-9]{1,2}(:[0-9]{2})?$/', $INPUT['newtimezone']) != 1) {
            $WARNINGS[] = str_replace('%var%', 'newtimezone', $LANG['warning_input']);
            unset($INPUT['newtimezone']);
        }
    }
}

if (isset($_POST['newencoding'])) {
    $INPUT['newencoding'] = $_POST['newencoding'];
    if (preg_match('/^[0-9a-zA-Z\-]*$/', $INPUT['newencoding']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'newencoding', $LANG['warning_input']);
        unset($INPUT['newencoding']);
    }
}

if (isset($_POST['newdefaultstyle'])) {
    $INPUT['newdefaultstyle'] = $_POST['newdefaultstyle'];
    if (preg_match('/^[0-9a-zA-Z\-_]*$/', $INPUT['newdefaultstyle']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'newdefaultstyle', $LANG['warning_input']);
        unset($INPUT['newdefaultstyle']);
    }
}

if (isset($_POST['newdebug'])) {
    $INPUT['newdebug'] = $_POST['newdebug'];
    if (preg_match('/^[0-2]?$/', $INPUT['newdebug']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'newdebug', $LANG['warning_input']);
        unset($INPUT['newdebug']);
    }
}

if (isset($_POST['warnings'])) {
    $INPUT['warnings'] = $_POST['warnings'];
    if (preg_match('/^[0-1]?$/', $INPUT['warnings']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'warnings', $LANG['warning_input']);
        unset($INPUT['warnings']);
    }
}

if (isset($_POST['newexpire'])) {
    $INPUT['newexpire'] = $_POST['newexpire'];
    if (preg_match('/^[0-9]*$/', $INPUT['newexpire']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'newexpire', $LANG['warning_input']);
        unset($INPUT['newexpire']);
    }
}

if (isset($_POST['newhash'])) {
    $INPUT['newhash'] = $_POST['newhash'];
    if (preg_match('/^[a-z0-9,]*$/', $INPUT['newhash']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'newhash', $LANG['warning_input']);
        unset($INPUT['newhash']);
    }
}

if (isset($_POST['newauthcodes'])) {
    $INPUT['newauthcodes'] = $_POST['newauthcodes'];
    if (preg_match('/^[0-2]{1}$/', $INPUT['newauthcodes']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'newauthcodes', $LANG['warning_input']);
        unset($INPUT['newauthcodes']);
    }
}

if (isset($_POST['newheader'])) {
    $INPUT['newheader'] = $_POST['newheader'];
    if (check_legal($INPUT['newheader']) === FALSE) {
        $WARNINGS[] = str_replace('%var%', 'newheader', $LANG['warning_input']);
        unset($INPUT['newheader']);
    }
}

if (isset($_POST['newcategory'])) {
    $INPUT['newcategory'] = $_POST['newcategory'];
    if (check_legal($INPUT['newcategory']) === FALSE) {
        $WARNINGS[] = str_replace('%var%', 'newcategory', $LANG['warning_input']);
        unset($INPUT['newcategory']);
    }
}

if (isset($_POST['admin'])) {
    $INPUT['admin'] = $_POST['admin'];
    if (preg_match('/^[1]?$/', $INPUT['admin']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'admin', $LANG['warning_input']);
        unset($INPUT['admin']);
    }
}

if (isset($_POST['newcategoryname']) && is_array($_POST['newcategoryname'])) {
    $INPUT['newcategoryname'] = $_POST['newcategoryname'];
    foreach ($INPUT['newcategoryname'] as $key=>$_name) {
        if (check_legal($_name) === FALSE) {
            $WARNINGS[] = str_replace('%var%', 'newcategoryname[' . $key . ']', $LANG['warning_input']);
            unset($INPUT['newcategoryname'][$key]);
        }
    }
}

if (isset($_POST['newcategoryorder']) && is_array($_POST['newcategoryorder'])) {
    $INPUT['newcategoryorder'] = $_POST['newcategoryorder'];
    foreach ($INPUT['newcategoryorder'] as $key=>$_order) {
        if (preg_match('/^[0-9]*$/', $_order) != 1) {
            $WARNINGS[] = str_replace('%var%', 'newcategoryorder[' . $key . ']', $LANG['warning_input']);
            unset($INPUT['newcategoryorder'][$key]);
        }
    }
}

if (isset($_POST['newdesc']) && is_array($_POST['newdesc'])) {
    $INPUT['newdesc'] = $_POST['newdesc'];
    foreach ($INPUT['newdesc'] as $key=>$_desc) {
        if (check_legal($_desc) === FALSE) {
            $WARNINGS[] = str_replace('%var%', 'newdesc[' . $key . ']', $LANG['warning_input']);
            unset($INPUT['newdesc'][$key]);
        }
    }
}

if (isset($_POST['newforum']) && is_array($_POST['newforum'])) {
    $INPUT['newforum'] = $_POST['newforum'];
    foreach ($INPUT['newforum'] as $_forum=>$val) {
        if (preg_match('/^[0-9]*$/', $_forum) != 1) {
            $WARNINGS[] = str_replace('%var%', 'newforum[' . $_forum . ']', $LANG['warning_input']);
            unset($INPUT['newforum'][$_forum]);
        }
    }
}

if (isset($_POST['tocategory']) && is_array($_POST['tocategory'])) {
    $INPUT['tocategory'] = $_POST['tocategory'];
    foreach ($INPUT['tocategory'] as $key=>$_cat) {
        if (preg_match('/^[0-9]*$/', $_cat) != 1) {
            $WARNINGS[] = str_replace('%var%', 'tocategory[' . $key . ']', $LANG['warning_input']);
            unset($INPUT['tocategory'][$key]);
        }
    }
}

if (isset($_POST['newmemberstage']) && is_array($_POST['newmemberstage'])) {
    $INPUT['newmemberstage'] = $_POST['newmemberstage'];
    foreach ($INPUT['newmemberstage'] as $key=>$_stage) {
        if (preg_match('/^[0-9]*$/', $_stage) != 1) {
            $WARNINGS[] = str_replace('%var%', 'newmemberstage[' . $key . ']', $LANG['warning_input']);
            unset($INPUT['newmemberstage'][$key]);
        }
    }
}

if (isset($_POST['newmemberstagename']) && is_array($_POST['newmemberstagename'])) {
    $INPUT['newmemberstagename'] = $_POST['newmemberstagename'];
    foreach ($INPUT['newmemberstagename'] as $key=>$_name) {
        if (check_legal($_name) === FALSE) {
            $WARNINGS[] = str_replace('%var%', 'newmemberstagename[' . $key . ']', $LANG['warning_input']);
            unset($INPUT['newmemberstagename'][$key]);
        }
    }
}

if (isset($_POST['changegroupname']) && is_array($_POST['changegroupname'])) {
    $INPUT['changegroupname'] = $_POST['changegroupname'];
    foreach ($INPUT['changegroupname'] as $key=>$_name) {
        if (check_legal($_name) === FALSE) {
            $WARNINGS[] = str_replace('%var%', 'changegroupname[' . $key . ']', $LANG['warning_input']);
            unset($INPUT['changegroupname'][$key]);
        }
    }
}

if (isset($_POST['changegrouppublic']) && is_array($_POST['changegrouppublic'])) {
    $INPUT['changegrouppublic'] = $_POST['changegrouppublic'];
    foreach ($INPUT['changegrouppublic'] as $key=>$_public) {
        if (preg_match('/^[1]?$/', $_public) != 1 || preg_match('/^[0-9]+$/', $key) != 1) {
            $WARNINGS[] = str_replace('%var%', 'changegrouppublic[' . $key . ']', $LANG['warning_input']);
            unset($INPUT['changegrouppublic'][$key]);
        }
    }
}

if (isset($_POST['changegroupdelete']) && is_array($_POST['changegroupdelete'])) {
    $INPUT['changegroupdelete'] = $_POST['changegroupdelete'];
    foreach ($INPUT['changegroupdelete'] as $key=>$_delete) {
        if (preg_match('/^[1]?$/', $_delete) != 1) {
            $WARNINGS[] = str_replace('%var%', 'changegroupdelete[' . $key . ']', $LANG['warning_input']);
            unset($INPUT['changegroupdelete'][$key]);
        }
    }
}

if (isset($_POST['newgroup'])) {
    $INPUT['newgroup'] = $_POST['newgroup'];
    if (check_legal($INPUT['newgroup']) === FALSE) {
        $WARNINGS[] = str_replace('%var%', 'newgroup', $LANG['warning_input']);
        unset($INPUT['newgroup']);
    }
}

if (isset($_POST['newgrouppublic'])) {
    $INPUT['newgrouppublic'] = $_POST['newgrouppublic'];
    if (preg_match('/^[1]?$/', $INPUT['newgrouppublic']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'newgrouppublic', $LANG['warning_input']);
        unset($INPUT['newgrouppublic']);
    }
}

if (isset($_POST['newpagepermissions']) && is_array($_POST['newpagepermissions'])) {
    $INPUT['newpagepermissions'] = $_POST['newpagepermissions'];
    foreach ($INPUT['newpagepermissions'] as $key=>$_perm) {
        if (preg_match('/^[A-Za-z0-9_=\/]+$/', $_perm) != 1) {
            $WARNINGS[] = str_replace('%var%', 'newpagepermissions[' . $key . ']', $LANG['warning_input']);
            unset($INPUT['newpagepermissions'][$key]);
        }
    }
}

if (isset($_POST['newpageread']) && is_array($_POST['newpageread'])) {
    $INPUT['newpageread'] = $_POST['newpageread'];
    foreach ($INPUT['newpageread'] as $key=>$_read) {
        if (preg_match('/^[1]?$/', $_read) != 1) {
            $WARNINGS[] = str_replace('%var%', 'newpageread[' . $key . ']', $LANG['warning_input']);
            unset($INPUT['newpageread'][$key]);
        }
    }
}

if (isset($_POST['newpagewrite']) && is_array($_POST['newpagewrite'])) {
    $INPUT['newpagewrite'] = $_POST['newpagewrite'];
    foreach ($INPUT['newpagewrite'] as $key=>$_write) {
        if (preg_match('/^[1]?$/', $_write) != 1) {
            $WARNINGS[] = str_replace('%var%', 'newpagewrite[' . $key . ']', $LANG['warning_input']);
            unset($INPUT['newpagewrite'][$key]);
        }
    }
}

if (isset($_POST['submit'])) {
    $INPUT['submit'] = $_POST['submit'];
    if (check_legal($INPUT['submit']) === FALSE) {
        $WARNINGS[] = str_replace('%var%', 'submit', $LANG['warning_input']);
        unset($INPUT['submit']);
    }
}

if (isset($_POST['status']) && $_POST['status'] != '') {
    $INPUT['status'] = $_POST['status'];
    if (preg_match('/^[0-9]+$/', $INPUT['status']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'status', $LANG['warning_input']);
        unset($INPUT['status']);
    }
}

if (isset($_POST['newgroupmemberships']) && is_array($_POST['newgroupmemberships'])) {
    $INPUT['newgroupmemberships'] = $_POST['newgroupmemberships'];
    foreach ($INPUT['newgroupmemberships'] as $key=>$_group) {
        if (preg_match('/^[1]?$/', $_group) != 1) {
            $WARNINGS[] = str_replace('%var%', 'newgroupmemberships[' . $key . ']', $LANG['warning_input']);
            unset($INPUT['newgroupmemberships'][$key]);
        }
    }
}

if (isset($_POST['newbannedip'])) {
    $INPUT['newbannedip'] = $_POST['newbannedip'];
    if (check_legal($INPUT['newbannedip']) === FALSE) {
        $WARNINGS[] = str_replace('%var%', 'newbannedip', $LANG['warning_input']);
        unset($INPUT['newbannedip']);
    }
}

if (isset($_POST['newbannedname'])) {
    $INPUT['newbannedname'] = $_POST['newbannedname'];
    if (check_legal($INPUT['newbannedname']) === FALSE) {
        $WARNINGS[] = str_replace('%var%', 'newbannedname', $LANG['warning_input']);
        unset($INPUT['newbannedname']);
    }
}

if (isset($_POST['newbannedmail'])) {
    $INPUT['newbannedmail'] = $_POST['newbannedmail'];
    if (check_legal($INPUT['newbannedmail']) === FALSE) {
        $WARNINGS[] = str_replace('%var%', 'newbannedemail', $LANG['warning_input']);
        unset($INPUT['newbannedemail']);
    }
}

if (isset($_POST['newseveralaccountspermail'])) {
    $INPUT['newseveralaccountspermail'] = $_POST['newseveralaccountspermail'];
    if (preg_match('/^[0-1]?$/', $INPUT['newseveralaccountspermail']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'newseveralaccountspermail', $LANG['warning_input']);
        unset($INPUT['newseveralaccountspermail']);
    }
}

if (isset($_POST['newmaintainancemode'])) {
    $INPUT['newmaintainancemode'] = $_POST['newmaintainancemode'];
    if (preg_match('/^[1]?$/', $INPUT['newmaintainancemode']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'newmaintainencemode', $LANG['warning_input']);
        unset($INPUT['newmaintainencemode']);
    }
}

if (isset($_POST['newfspath'])) {
    $INPUT['newfspath'] = $_POST['newfspath'];
    if (preg_match('/^[A-Za-z0-9_\-\/\\:\.]*$/', $INPUT['newfspath']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'newfspath', $LANG['warning_input']);
        unset($INPUT['newfspath']);
    }
}

if (isset($_POST['newwebpath'])) {
    $INPUT['newwebpath'] = $_POST['newwebpath'];
    if (preg_match('/^[A-Za-z0-9_\-\/\.~]*$/', $INPUT['newwebpath']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'newwebpath', $LANG['warning_input']);
        unset($INPUT['newwebpath']);
    }
}

if (isset($_POST['newcookiepath'])) {
    $INPUT['newcookiepath'] = $_POST['newcookiepath'];
    if (preg_match('/^[A-Za-z0-9_\-\/\.~]*$/', $INPUT['newcookiepath']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'newcookiepath', $LANG['warning_input']);
        unset($INPUT['newcookiepath']);
    }
}

if (isset($_POST['newpolls'])) {
    $INPUT['newpolls'] = $_POST['newpolls'];
    if (preg_match('/^[0-1]?$/', $INPUT['newpolls']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'newpolls', $LANG['warning_input']);
        unset($INPUT['newpolls']);
    }
}

if (isset($_POST['subscribe'])) {
    $INPUT['subscribe'] = $_POST['subscribe'];
    if (preg_match('/^[0-1]?$/', $INPUT['subscribe']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'subscribe', $LANG['warning_input']);
        unset($INPUT['subscribe']);
    }
}

if (isset($_POST['newsubscribed']) && is_array($_POST['newsubscribed'])) {
    $INPUT['newsubscribed'] = $_POST['newsubscribed'];
    foreach ($INPUT['newsubscribed'] as $key=>$val) {
        if (preg_match('/^[0-9]+$/', $val) != 1 || preg_match('/^[0-9]+$/', $key) != 1) {
            $WARNINGS[] = str_replace('%var%', 'newsubscribed[' . $key . ']', $LANG['warning_input']);
            unset($INPUT['newsubscribed'][$key]);
        }
    }
}

if (isset($_POST['delete']) && is_array($_POST['delete'])) {
    $INPUT['delete'] = $_POST['delete'];
    foreach ($INPUT['delete'] as $key=>$val) {
        if (preg_match('/^[0-9]+$/', $val) != 1 || preg_match('/^[0-9]+$/', $key) != 1) {
            $WARNINGS[] = str_replace('%var%', 'delete[' . $key . ']', $LANG['warning_input']);
            unset($INPUT['delete'][$key]);
        }
    }
}

if (isset($_POST['statusorder']) && is_array($_POST['statusorder'])) {
    $INPUT['statusorder'] = $_POST['statusorder'];
    foreach ($INPUT['statusorder'] as $key=>$val) {
        if (preg_match('/^[0-9]+$/', $val) != 1 || preg_match('/^[0-9]+$/', $key) != 1) {
            $WARNINGS[] = str_replace('%var%', 'statusorder[' . $key . ']', $LANG['warning_input']);
            unset($INPUT['statusorder'][$key]);
        }
    }
}

if (isset($_POST['newip_logging'])) {
    $INPUT['newip_logging'] = $_POST['newip_logging'];
    if (preg_match('/^[0-1]?$/', $INPUT['newip_logging']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'newip_logging', $LANG['warning_input']);
        unset($INPUT['newip_logging']);
    }
}

if (isset($_POST['newloginattempts'])) {
    $INPUT['newloginattempts'] = $_POST['newloginattempts'];
    if (preg_match('/^[0-9]*$/', $INPUT['newloginattempts']) != 1) {
        $WARNINGS[] = str_replace('%var%', 'newloginattempts', $LANG['warning_input']);
        unset($INPUT['newloginattempts']);
    }
}

?>