I could only perform SQL injection. I couldn’t use submit_post. SQL seems to work, but standard phpBB events may be missing and BBcode to DB conversion does not occur.
add_action('publish_post', 'sync_wp_post_to_phpbb');
add_action('post_updated', 'sync_wp_post_update_to_phpbb', 10, 3);
add_action('before_delete_post', 'sync_wp_post_delete_to_phpbb');
add_action('comment_post', 'sync_wp_comment_to_phpbb', 10, 3);
add_action('edit_comment', 'sync_wp_comment_update_to_phpbb');
add_action('delete_comment', 'sync_wp_comment_delete_to_phpbb');
function sync_wp_post_to_phpbb($post_id) {
$post = get_post($post_id);
if ($post->post_status !== 'publish' || $post->post_type !== 'post') {
return;
}
$author = get_user_by('id', $post->post_author);
if (!$author) return;
$phpbb_user_id = get_phpbb_user_by_email($author->user_email);
if (!$phpbb_user_id) return;
global $wpdb;
$existing = $wpdb->get_row($wpdb->prepare(
"SELECT * FROM {$wpdb->prefix}phpbb_posts WHERE wp_post_id = %d",
$post_id
));
if ($existing) return;
$bbcode_content = html_to_bbcode_phpbb($post->post_content);
$result = create_phpbb_topic($phpbb_user_id, $post->post_title, $bbcode_content);
if ($result['success']) {
$wpdb->insert("{$wpdb->prefix}phpbb_posts", array(
'wp_post_id' => $post_id,
'phpbb_topic_id' => $result['topic_id'],
'phpbb_first_post_id' => $result['post_id'],
'wp_author_email' => $author->user_email,
), array('%d', '%d', '%d', '%s'));
error_log('WP→phpBB: Post ' . $post_id . ' → Topic ' . $result['topic_id'] . ' (Yazar: ' . $author->user_login . ')');
}
}
function sync_wp_post_update_to_phpbb($post_id, $post_before, $post_after) {
$post = get_post($post_id);
if ($post->post_status !== 'publish' || $post->post_type !== 'post') {
return;
}
global $wpdb;
$sync = $wpdb->get_row($wpdb->prepare(
"SELECT * FROM {$wpdb->prefix}phpbb_posts WHERE wp_post_id = %d",
$post_id
));
if (!$sync) return;
$author = get_user_by('id', $post->post_author);
if (!$author) return;
$phpbb_user_id = get_phpbb_user_by_email($author->user_email);
if (!$phpbb_user_id) return;
$bbcode_content = html_to_bbcode_phpbb($post->post_content);
update_phpbb_post_full($sync->phpbb_first_post_id, $post->post_title, $bbcode_content, $phpbb_user_id);
update_phpbb_topic_title($sync->phpbb_topic_id, $post->post_title);
update_phpbb_topic_author($sync->phpbb_topic_id, $phpbb_user_id);
$wpdb->update("{$wpdb->prefix}phpbb_posts",
array('updated_at' => current_time('mysql')),
array('wp_post_id' => $post_id)
);
error_log('WP→phpBB: Post ' . $post_id . ' güncellendi (Yazar: ' . $author->user_login . ')');
}
function sync_wp_post_delete_to_phpbb($post_id) {
$post = get_post($post_id);
if ($post->post_type !== 'post') return;
global $wpdb;
$sync = $wpdb->get_row($wpdb->prepare(
"SELECT * FROM {$wpdb->prefix}phpbb_posts WHERE wp_post_id = %d",
$post_id
));
if (!$sync) return;
soft_delete_phpbb_topic($sync->phpbb_topic_id);
$wpdb->delete("{$wpdb->prefix}phpbb_posts", array('wp_post_id' => $post_id));
error_log('WP→phpBB: Post ' . $post_id . ' silindi');
}
function sync_wp_comment_to_phpbb($comment_id, $comment_approved, $commentdata) {
$comment = get_comment($comment_id);
$post = get_post($comment->comment_post_ID);
if (!$post || $post->post_status !== 'publish') {
return;
}
global $wpdb;
$sync_post = $wpdb->get_row($wpdb->prepare(
"SELECT phpbb_topic_id FROM {$wpdb->prefix}phpbb_posts WHERE wp_post_id = %d",
$comment->comment_post_ID
));
if (!$sync_post) return;
$commenter_email = $comment->comment_author_email;
$phpbb_user_id = get_phpbb_user_by_email($commenter_email);
if (!$phpbb_user_id) return;
$bbcode_content = html_to_bbcode_phpbb($comment->comment_content);
$parent_phpbb_post_id = 0;
if ($comment->comment_parent > 0) {
$parent_sync = $wpdb->get_row($wpdb->prepare(
"SELECT phpbb_post_id FROM {$wpdb->prefix}phpbb_comments WHERE wp_comment_id = %d",
$comment->comment_parent
));
$parent_phpbb_post_id = $parent_sync ? $parent_sync->phpbb_post_id : 0;
}
$result = create_phpbb_post(
$phpbb_user_id,
$sync_post->phpbb_topic_id,
substr($bbcode_content, 0, 50),
$bbcode_content,
$parent_phpbb_post_id
);
if ($result['success']) {
$wpdb->insert("{$wpdb->prefix}phpbb_comments", array(
'wp_comment_id' => $comment_id,
'wp_post_id' => $comment->comment_post_ID,
'phpbb_post_id' => $result['post_id'],
'phpbb_topic_id' => $sync_post->phpbb_topic_id,
'wp_comment_parent_id' => $comment->comment_parent,
'phpbb_post_parent_id' => $parent_phpbb_post_id,
'approved' => $comment_approved,
'wp_author_email' => $commenter_email,
), array('%d', '%d', '%d', '%d', '%d', '%d', '%d', '%s'));
error_log('WP→phpBB: Comment ' . $comment_id . ' → Post ' . $result['post_id'] . ' (Yazar: ' . $comment->comment_author . ')');
}
}
function sync_wp_comment_update_to_phpbb($comment_id) {
$comment = get_comment($comment_id);
global $wpdb;
$sync = $wpdb->get_row($wpdb->prepare(
"SELECT * FROM {$wpdb->prefix}phpbb_comments WHERE wp_comment_id = %d",
$comment_id
));
if (!$sync) return;
$commenter_email = $comment->comment_author_email;
$phpbb_user_id = get_phpbb_user_by_email($commenter_email);
if (!$phpbb_user_id) return;
$bbcode_content = html_to_bbcode_phpbb($comment->comment_content);
update_phpbb_post_full($sync->phpbb_post_id, '', $bbcode_content, $phpbb_user_id);
$wpdb->update("{$wpdb->prefix}phpbb_comments",
array('updated_at' => current_time('mysql')),
array('wp_comment_id' => $comment_id)
);
error_log('WP→phpBB: Comment ' . $comment_id . ' güncellendi');
}
function sync_wp_comment_delete_to_phpbb($comment_id) {
global $wpdb;
$sync = $wpdb->get_row($wpdb->prepare(
"SELECT * FROM {$wpdb->prefix}phpbb_comments WHERE wp_comment_id = %d",
$comment_id
));
if (!$sync) return;
soft_delete_phpbb_post($sync->phpbb_post_id);
$wpdb->delete("{$wpdb->prefix}phpbb_comments", array('wp_comment_id' => $comment_id));
error_log('WP→phpBB: Comment ' . $comment_id . ' silindi');
}
function get_phpbb_user_by_email($email) {
$pdo = get_phpbb_connection();
if (!$pdo) return false;
try {
$stmt = $pdo->prepare("SELECT user_id, username FROM " . PHPBB_DB_PREFIX . "users WHERE user_email = :email");
$stmt->execute([':email' => $email]);
$row = $stmt->fetch(PDO::FETCH_ASSOC);
return $row ? (int)$row['user_id'] : false;
} catch (PDOException $e) {
error_log('PHPBB USER QUERY ERROR: ' . $e->getMessage());
return false;
}
}
function get_phpbb_connection() {
try {
$pdo = new PDO(
'mysql:host=' . PHPBB_DB_HOST . ';dbname=' . PHPBB_DB_NAME . ';charset=utf8mb4',
PHPBB_DB_USER,
PHPBB_DB_PASS
);
$pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
return $pdo;
} catch (PDOException $e) {
error_log('PHPBB CONNECTION ERROR: ' . $e->getMessage());
return null;
}
}
function create_phpbb_topic($phpbb_user_id, $topic_title, $message) {
$pdo = get_phpbb_connection();
if (!$pdo) return array('success' => false);
try {
$forum_id = 24;
$post_time = time();
$stmt = $pdo->prepare("SELECT username FROM " . PHPBB_DB_PREFIX . "users WHERE user_id = :uid");
$stmt->execute([':uid' => (int)$phpbb_user_id]);
$user = $stmt->fetch(PDO::FETCH_ASSOC);
if (!$user) return array('success' => false);
$topic_data = array(
'forum_id' => (int)$forum_id,
'topic_title' => $topic_title,
'topic_poster' => (int)$phpbb_user_id,
'topic_first_poster_name' => $user['username'],
'topic_time' => $post_time,
'topic_views' => 0,
'topic_status' => 0,
'topic_posts_approved' => 1,
'topic_posts_unapproved' => 0,
'topic_posts_softdeleted' => 0,
'topic_type' => 0,
'topic_visibility' => 1,
'topic_last_view_time' => $post_time,
);
$cols = implode(', ', array_keys($topic_data));
$vals = implode(', ', array_map(function($k) { return ':' . $k; }, array_keys($topic_data)));
$stmt = $pdo->prepare("INSERT INTO " . PHPBB_DB_PREFIX . "topics ($cols) VALUES ($vals)");
$stmt->execute($topic_data);
$topic_id = (int)$pdo->lastInsertId();
$post_data = array(
'forum_id' => (int)$forum_id,
'topic_id' => (int)$topic_id,
'poster_id' => (int)$phpbb_user_id,
'post_time' => $post_time,
'enable_bbcode' => 1,
'enable_smilies' => 0,
'enable_magic_url' => 1,
'enable_sig' => 1,
'post_subject' => $topic_title,
'post_text' => $message,
'post_checksum' => md5($message),
'post_attachment' => 0,
'post_postcount' => 1,
'post_visibility' => 1,
'post_edit_locked' => 0,
'post_edit_time' => 0,
'post_modified' => 0,
'post_created' => $post_time,
);
$cols = implode(', ', array_keys($post_data));
$vals = implode(', ', array_map(function($k) { return ':' . $k; }, array_keys($post_data)));
$stmt = $pdo->prepare("INSERT INTO " . PHPBB_DB_PREFIX . "posts ($cols) VALUES ($vals)");
$stmt->execute($post_data);
$post_id = (int)$pdo->lastInsertId();
$username_escaped = $pdo->quote($user['username']);
$pdo->query("UPDATE " . PHPBB_DB_PREFIX . "topics
SET topic_first_post_id = $post_id,
topic_last_post_id = $post_id,
topic_last_poster_id = $phpbb_user_id,
topic_last_poster_name = $username_escaped,
topic_last_post_time = $post_time
WHERE topic_id = $topic_id");
$pdo->query("UPDATE " . PHPBB_DB_PREFIX . "forums
SET forum_posts_approved = forum_posts_approved + 1,
forum_topics_approved = forum_topics_approved + 1,
forum_last_post_time = $post_time,
forum_last_poster_id = $phpbb_user_id,
forum_last_poster_name = $username_escaped,
forum_last_post_id = $post_id
WHERE forum_id = $forum_id");
$pdo->query("UPDATE " . PHPBB_DB_PREFIX . "users
SET user_posts = user_posts + 1,
user_lastpost_time = $post_time
WHERE user_id = $phpbb_user_id");
return array('success' => true, 'topic_id' => $topic_id, 'post_id' => $post_id);
} catch (Exception $e) {
error_log('CREATE TOPIC ERROR: ' . $e->getMessage());
return array('success' => false);
}
}
function create_phpbb_post($phpbb_user_id, $topic_id, $post_title, $message, $parent_post_id = 0) {
$pdo = get_phpbb_connection();
if (!$pdo) return array('success' => false);
try {
$post_time = time();
$stmt = $pdo->prepare("SELECT forum_id FROM " . PHPBB_DB_PREFIX . "topics WHERE topic_id = :tid");
$stmt->execute([':tid' => (int)$topic_id]);
$topic = $stmt->fetch(PDO::FETCH_ASSOC);
if (!$topic) return array('success' => false);
$post_data = array(
'forum_id' => (int)$topic['forum_id'],
'topic_id' => (int)$topic_id,
'poster_id' => (int)$phpbb_user_id,
'post_time' => $post_time,
'enable_bbcode' => 1,
'enable_smilies' => 0,
'enable_magic_url' => 1,
'enable_sig' => 1,
'post_subject' => $post_title,
'post_text' => $message,
'post_checksum' => md5($message),
'post_attachment' => 0,
'post_postcount' => 1,
'post_visibility' => 1,
);
$cols = implode(', ', array_keys($post_data));
$vals = implode(', ', array_map(function($k) { return ':' . $k; }, array_keys($post_data)));
$stmt = $pdo->prepare("INSERT INTO " . PHPBB_DB_PREFIX . "posts ($cols) VALUES ($vals)");
$stmt->execute($post_data);
$post_id = (int)$pdo->lastInsertId();
if ($parent_post_id > 0) {
$pdo->query("UPDATE " . PHPBB_DB_PREFIX . "posts SET post_parent = $parent_post_id WHERE post_id = $post_id");
}
$stmt = $pdo->prepare("SELECT username FROM " . PHPBB_DB_PREFIX . "users WHERE user_id = :uid");
$stmt->execute([':uid' => (int)$phpbb_user_id]);
$user = $stmt->fetch(PDO::FETCH_ASSOC);
$username_escaped = $pdo->quote($user['username']);
$pdo->query("UPDATE " . PHPBB_DB_PREFIX . "topics
SET topic_posts_approved = topic_posts_approved + 1,
topic_last_post_id = $post_id,
topic_last_poster_id = $phpbb_user_id,
topic_last_poster_name = $username_escaped,
topic_last_post_time = $post_time
WHERE topic_id = $topic_id");
$pdo->query("UPDATE " . PHPBB_DB_PREFIX . "forums
SET forum_posts_approved = forum_posts_approved + 1,
forum_last_post_time = $post_time,
forum_last_poster_id = $phpbb_user_id,
forum_last_poster_name = $username_escaped,
forum_last_post_id = $post_id
WHERE forum_id = " . (int)$topic['forum_id']);
$pdo->query("UPDATE " . PHPBB_DB_PREFIX . "users
SET user_posts = user_posts + 1,
user_lastpost_time = $post_time
WHERE user_id = $phpbb_user_id");
return array('success' => true, 'post_id' => $post_id);
} catch (Exception $e) {
error_log('CREATE POST ERROR: ' . $e->getMessage());
return array('success' => false);
}
}
function update_phpbb_post_full($post_id, $post_title, $message, $poster_id) {
$pdo = get_phpbb_connection();
if (!$pdo) return;
try {
$edit_time = time();
$message_checksum = md5($message);
if (!empty($post_title)) {
$pdo->query("UPDATE " . PHPBB_DB_PREFIX . "posts
SET post_text = " . $pdo->quote($message) . ",
post_checksum = '$message_checksum',
post_subject = " . $pdo->quote($post_title) . ",
poster_id = $poster_id,
post_edit_time = $edit_time
WHERE post_id = $post_id");
} else {
$pdo->query("UPDATE " . PHPBB_DB_PREFIX . "posts
SET post_text = " . $pdo->quote($message) . ",
post_checksum = '$message_checksum',
poster_id = $poster_id,
post_edit_time = $edit_time
WHERE post_id = $post_id");
}
} catch (Exception $e) {
error_log('UPDATE POST FULL ERROR: ' . $e->getMessage());
}
}
function update_phpbb_topic_title($topic_id, $new_title) {
$pdo = get_phpbb_connection();
if (!$pdo) return;
try {
$pdo->query("UPDATE " . PHPBB_DB_PREFIX . "topics
SET topic_title = " . $pdo->quote($new_title) . "
WHERE topic_id = $topic_id");
} catch (Exception $e) {
error_log('UPDATE TOPIC TITLE ERROR: ' . $e->getMessage());
}
}
function update_phpbb_topic_author($topic_id, $new_user_id) {
$pdo = get_phpbb_connection();
if (!$pdo) return;
try {
$stmt = $pdo->prepare("SELECT username FROM " . PHPBB_DB_PREFIX . "users WHERE user_id = :uid");
$stmt->execute([':uid' => (int)$new_user_id]);
$user = $stmt->fetch(PDO::FETCH_ASSOC);
if ($user) {
$username_escaped = $pdo->quote($user['username']);
$pdo->query("UPDATE " . PHPBB_DB_PREFIX . "topics
SET topic_poster = $new_user_id,
topic_first_poster_name = $username_escaped
WHERE topic_id = $topic_id");
}
} catch (Exception $e) {
error_log('UPDATE TOPIC AUTHOR ERROR: ' . $e->getMessage());
}
}
function soft_delete_phpbb_topic($topic_id) {
$pdo = get_phpbb_connection();
if (!$pdo) return;
try {
$pdo->query("UPDATE " . PHPBB_DB_PREFIX . "topics SET topic_visibility = 2 WHERE topic_id = $topic_id");
$pdo->query("UPDATE " . PHPBB_DB_PREFIX . "posts SET post_visibility = 2 WHERE topic_id = $topic_id");
} catch (Exception $e) {
error_log('SOFT DELETE TOPIC ERROR: ' . $e->getMessage());
}
}
function soft_delete_phpbb_post($post_id) {
$pdo = get_phpbb_connection();
if (!$pdo) return;
try {
$pdo->query("UPDATE " . PHPBB_DB_PREFIX . "posts SET post_visibility = 2 WHERE post_id = $post_id");
} catch (Exception $e) {
error_log('SOFT DELETE POST ERROR: ' . $e->getMessage());
}
}
function html_to_bbcode_phpbb($html) {
$html = stripslashes($html);
$html = wp_specialchars_decode($html);
$html = preg_replace('/<p[^>]*>/is', '', $html);
$html = preg_replace('/<\/p>/is', "\n\n", $html);
$html = preg_replace('/<h[1-6][^>]*>(.*?)<\/h[1-6]>/is', '[b]$1[/b]' . "\n", $html);
$html = preg_replace('/<strong[^>]*>(.*?)<\/strong>/is', '[b]$1[/b]', $html);
$html = preg_replace('/<b[^>]*>(.*?)<\/b>/is', '[b]$1[/b]', $html);
$html = preg_replace('/<em[^>]*>(.*?)<\/em>/is', '[i]$1[/i]', $html);
$html = preg_replace('/<i[^>]*>(.*?)<\/i>/is', '[i]$1[/i]', $html);
$html = preg_replace('/<u[^>]*>(.*?)<\/u>/is', '[u]$1[/u]', $html);
$html = preg_replace('/<s[^>]*>(.*?)<\/s>/is', '[s]$1[/s]', $html);
$html = preg_replace('/<del[^>]*>(.*?)<\/del>/is', '[s]$1[/s]', $html);
$html = preg_replace('/<a\s+href=["\']([^"\']+)["\']\s*title=["\']([^"\']*)["\'][^>]*>(.*?)<\/a>/is', '[url=$1]$3[/url]', $html);
$html = preg_replace('/<a\s+href=["\']([^"\']+)["\'][^>]*>(.*?)<\/a>/is', '[url=$1]$2[/url]', $html);
$html = preg_replace('/<img\s+src=["\']([^"\']+)["\'][^>]*>/is', '[img]$1[/img]', $html);
$html = preg_replace('/<ul[^>]*>/is', '[list]', $html);
$html = preg_replace('/<ol[^>]*>/is', '[list=1]', $html);
$html = preg_replace('/<\/ul>/is', '[/list]', $html);
$html = preg_replace('/<\/ol>/is', '[/list]', $html);
$html = preg_replace('/<li[^>]*>(.*?)<\/li>/is', '[*]$1', $html);
$html = preg_replace('/<blockquote[^>]*>(.*?)<\/blockquote>/is', '[quote]$1[/quote]', $html);
$html = preg_replace('/<code[^>]*>(.*?)<\/code>/is', '[code]$1[/code]', $html);
$html = preg_replace('/<pre[^>]*>(.*?)<\/pre>/is', '[code]$1[/code]', $html);
$html = preg_replace('/<br\s*\/?>/is', "\n", $html);
$html = preg_replace('/<div[^>]*>(.*?)<\/div>/is', '$1' . "\n", $html);
$html = preg_replace('/<hr\s*\/?>/is', "\n---\n", $html);
$html = strip_tags($html);
$html = html_entity_decode($html, ENT_QUOTES, 'UTF-8');
$html = preg_replace('/[ \t]+/u', ' ', $html);
$html = preg_replace('/\n{3,}/u', "\n\n", $html);
$html = trim($html);
return $html;
}
