<!--
/************************************************************************************\
|                                                                                    |
|   ██╗███╗   ██╗████████╗███████╗██████╗ ███╗   ██╗███████╗████████╗                |
|   ██║████╗  ██║╚══██╔══╝██╔════╝██╔══██╗████╗  ██║██╔════╝╚══██╔══╝                |
|   ██║██╔██╗ ██║   ██║   █████╗  ██████╔╝██╔██╗ ██║█████╗     ██║                   |
|   ██║██║╚██╗██║   ██║   ██╔══╝  ██╔══██╗██║╚██╗██║██╔══╝     ██║                   |
|   ██║██║ ╚████║   ██║   ███████╗██║  ██║██║ ╚████║███████╗   ██║                   |
|   ╚═╝╚═╝  ╚═══╝   ╚═╝   ╚══════╝╚═╝  ╚═╝╚═╝  ╚═══╝╚══════╝   ╚═╝                   |
|                                                                                    |
|   ███╗   ███╗ ██████╗      ██╗███████╗████████╗███████╗██████╗                     |
|   ████╗ ████║██╔═══██╗     ██║██╔════╝╚══██╔══╝██╔════╝██╔══██╗                    |
|   ██╔████╔██║██║   ██║     ██║███████╗   ██║   █████╗  ██████╔╝                    |
|   ██║╚██╔╝██║██║   ██║██   ██║╚════██║   ██║   ██╔══╝  ██╔══██╗                    |
|   ██║ ╚═╝ ██║╚██████╔╝╚█████╔╝███████║   ██║   ███████╗██║  ██║                    |
|   ╚═╝     ╚═╝ ╚═════╝  ╚════╝ ╚══════╝   ╚═╝   ╚══════╝╚═╝  ╚═╝                    |
|                                                                                    |
|====================================================================================|
|                                                                                    |
|                  ░▒▓  THE CRADLE OF SLOVENIAN INTERNET SCENE  ▓▒░                  |
|                                                                                    |
|====================================================================================|
|                                                                                    |
|                       ⚡ RESTORED WITH LOVE ❤️ IN 2025 BY ⚡                         |
|                           TIMOTEJ • NIKI • ZAN                                     |
|                                                                                    |
|         This forum was THE meeting point for Slovenian webmasters,                 |
|        developers, designers, and internet enthusiasts in the late 2000s.          |
|           A digital gathering place where knowledge was shared,                    |
|              careers were launched, and friendships were forged.                   |
|                                                                                    |
|                 In 2025, with hearts full of nostalgia and joy,                    |
|               we brought it back to life. For the memories. For                    |
|              the community. For the love of the good old days.                     |
|                                                                                    |
|====================================================================================|
|                                                                                    |
|                  🏗️  Built with Laravel • Powered by Memories  💾                   |
|                       🌟  Made in Slovenia • 2025  🌟                               |
|                                                                                    |
\************************************************************************************/
-->
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=5.0, user-scalable=yes">
    <meta name="mobile-web-app-capable" content="yes">
    <meta name="apple-mobile-web-app-capable" content="yes">
    <meta name="apple-mobile-web-app-status-bar-style" content="default">
    <title>exploit WP :  timthumb.php - Internet Mojster</title>
	<link rel="icon" type="image/x-icon" href="/favicon.ico">
    <link rel="stylesheet" href="https://internetmojster.com/styles/style.css?v=1789197146">
    <link rel="stylesheet" href="https://internetmojster.com/styles/style-new.css?v=1789197146">
    <link rel="stylesheet" href="https://internetmojster.com/styles/style-panel.css?v=1789197146">
    <link rel="stylesheet" href="https://internetmojster.com/styles/style-responsive.css?v=1789197146">
    <link rel="stylesheet" href="https://internetmojster.com/styles/style-profile-mobile.css?v=1789197146">
    <link rel="stylesheet" href="https://internetmojster.com/styles/subscription.css?v=1789197146">
    <link rel="stylesheet" href="https://internetmojster.com/styles/jobs.css?v=1789197146">
    <script src="https://code.jquery.com/jquery-3.7.1.min.js"></script>
    <script src="https://internetmojster.com/js/scripts.js"></script>
    <script src="https://internetmojster.com/js/mobile.js"></script>

    <script>(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
    new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
    j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
    'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);
    })(window,document,'script','dataLayer','GTM-KGVKX3ZD');</script>
    <script src="https://internetmojster.com/tinymce/js/tinymce/tinymce.min.js"></script>
    
    <link rel="stylesheet" href="https://internetmojster.com/styles/image-uploader.css">
    </head>
<body class="vz">
    <noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-KGVKX3ZD"
    height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript>
    <div id="container">
        <div id="head">
            <a href="https://internetmojster.com" id="home" title="Domov">&nbsp;</a>
            <ul>
                <li class="">
                    <a href="https://internetmojster.com">Domov</a>
                </li>
                
                <li id="search"><a href="#" data-popup="search">Iskanje</a></li>
                <li class="">
                    <a href="https://internetmojster.com/zaposlitve">Zaposlitve</a>
                </li>
                                                        <li id="register"><a href="https://internetmojster.com/registracija">Registracija</a></li>
                    <li id="login"><a href="https://internetmojster.com/prijava">Prijava</a></li>
                
                            </ul>
            <h1>exploit WP :  timthumb.php</h1>
        </div>

        <div class="container">
            <div id="content">
    <div id="topads">&nbsp;</div>


    <div id="forum">
                <div class="nav">
            <div class="bc">
                <a href="https://internetmojster.com">Domov</a> &gt;
                <a href="https://internetmojster.com/administracija" class="top">Administracija strežnikov in spletnih strani</a> &gt;
                <a href="https://internetmojster.com/administracija/exploit-wp-timthumb-php" class="top">exploit WP :  timthumb.php</a>
            </div>

            <!-- Pagination -->
            <div class="page">
                stran 1 od 1
                                    <span class="first">|&lt;</span>
                    <span class="prev">&lt;</span>
                
                
                                                            <span class="p">1</span>
                                    
                
                                    <span class="next">&gt;</span>
                    <span class="last">&gt;|</span>
                            </div>
        </div>

        <table class="forum" id="thread">
            <colgroup class="post">
                <col class="user" />
                <col class="content" />
            </colgroup>

            <thead>
                <tr class="head">
                    <th colspan="2" class="main first last">exploit WP :  timthumb.php</th>
                </tr>
                <tr class="hsep">
                    <td colspan="2">&nbsp;</td>
                </tr>
            </thead>

                            <tbody id="body141922">
                <tr class="post">
                    <!-- USER COLUMN -->
                    <td class="user first" rowspan="2">
                                                                                <a href="https://internetmojster.com/uporabnik/1qay1qay/teme" class="user">1qay1qay</a>
                            <span class="ts">18. avg 2011 07:39:16</span>
                            <span class="add">
                                Pridružen od:<br />
                                12. avg 2010<br />
                                2967 objav<br />
                            </span>
                           <span class="rate" id="user-rate-2213">
                                <span class="tup">2430</span>
                                <span class="tdn">194</span>
                                <span class="spm">84</span>
                            </span>
                                            </td>

                    <!-- POST CONTENT -->
                    <td class="content last">
                        <div class="inner" id="post141922">
                            <a id="p141922" href="#p141922" class="pnum">#1</a>
                            <p>občutljivi so najmanj tele plugini in teme :</p><br />
<br />
<p>plugins we’ve seen getting scanned by the attackers (total of 25):</p><br />
<br />
<p>a-gallery<br><br />
dukapress<br><br />
front-slider<br><br />
geotag<br><br />
highlighter<br><br />
igit-posts-slider-widget<br><br />
igit-related-posts-with-thumb-images-after-posts<br><br />
islidex<br><br />
jquery-slider-for-featured-content<br><br />
kc-related-posts-by-category<br><br />
lisl-last-image-slider<br><br />
meenews<br><br />
meenews-newsletter<br><br />
mobile-smart<br><br />
seo-image-galleries<br><br />
shortcodes-ultimate<br><br />
smart-related-posts-thumbnails<br><br />
webphysiology-portfolio<br><br />
wordpress-gallery-plugin<br><br />
wp-mobile-detector<br><br />
wp-slick-slider<br><br />
shortcodes-ultimate<br><br />
social-profiles-widget<br><br />
woo-tumblog</p><br />
<br />
<p>Here are the themes we’ve seen scanned (total of 45):</p><br />
<br />
<p>aqua-blue<br><br />
bueno<br><br />
canvas<br><br />
deep-blue<br><br />
flashnews<br><br />
freshnews<br><br />
magazinum<br><br />
Magnificent<br><br />
mymag<br><br />
sportpress<br><br />
TheStyle<br><br />
wp-creativix<br><br />
backstage<br><br />
bueno<br><br />
busybee<br><br />
canvas<br><br />
cinch<br><br />
cityguide<br><br />
coffeebreak<br><br />
dailyedition<br><br />
delegate<br><br />
delicate<br><br />
digitalfarm<br><br />
ElegantEstate<br><br />
flashnews<br><br />
freshnews<br><br />
gazette<br><br />
headlines<br><br />
magazinum<br><br />
Magnificent<br><br />
mystream<br><br />
nomadic<br><br />
object<br><br />
openair<br><br />
optimize<br><br />
overeasy<br><br />
premiumnews<br><br />
retreat<br><br />
royalle<br><br />
slanted<br><br />
sophisticatedfolio<br><br />
sportpress<br><br />
thejournal<br><br />
thestation<br><br />
TheStyle</p><br />
<br />
<p>If you have any of these installed on your site, please verify them for the TimThumb script. If they contain the script ensure it is updated immediately.</p><br />

                        </div>
                        <div class="submit_buttons">
                            <div class="rate"
                                data-user-id="2213"
                                data-post-id="141922"
                                data-thread="exploit-wp-timthumb-php"
                                data-category="administracija"
                                data-voted=""
                                >
                                <span class="tup vote " data-type="thumbup">všeč</span><small>(3)</small>
                                <span class="tdn vote " data-type="thumbdown">ni všeč</span><small>(0)</small>
                                <span class="spm vote " data-type="spam">spam</span><small>(0)</small>
                            </div>
                                                    </div>
                                                    <div class="sig">Delko <a href="www.delko.si" target="_blank" rel="noopener noreferrer">www.delko.si</a> [Moto akumulatorji] | [Polnilne baterije] | [GP baterije]</div>
                                            </td>
                </tr>
                <tr class="post">
                    <td class="menu last">&nbsp;</td>
                </tr>
                <tr class="psep">
                    <td colspan="3">&nbsp;</td>
                </tr>
                </tbody>
                            <tbody id="body146168">
                <tr class="post">
                    <!-- USER COLUMN -->
                    <td class="user first" rowspan="2">
                                                                                <a href="https://internetmojster.com/uporabnik/Sergej/teme" class="user">Sergej</a>
                            <span class="ts">16. sep 2011 12:37:38</span>
                            <span class="add">
                                Pridružen od:<br />
                                19. okt 2010<br />
                                81 objav<br />
                            </span>
                           <span class="rate" id="user-rate-2420">
                                <span class="tup">63</span>
                                <span class="tdn">6</span>
                                <span class="spm">1</span>
                            </span>
                                            </td>

                    <!-- POST CONTENT -->
                    <td class="content last">
                        <div class="inner" id="post146168">
                            <a id="p146168" href="#p146168" class="pnum">#2</a>
                            <p>Tukaj je pa dobro poročilo in nova "veja" tega dodatka (WordThumb):</p><br />
<br />
<p><a href="http://markmaunder.com/2011/08/01/zero-day-vulnerability-in-many-wordpress-themes/">http://markmaunder.com/2011/08/01/zero-day-vulnerability-in-many-wordpress-themes/</a></p><br />
<br />
<p>Hudo, kar pokaže ta Alucar shell (slika na povezavi)</p><br />

                        </div>
                        <div class="submit_buttons">
                            <div class="rate"
                                data-user-id="2420"
                                data-post-id="146168"
                                data-thread="exploit-wp-timthumb-php"
                                data-category="administracija"
                                data-voted=""
                                >
                                <span class="tup vote " data-type="thumbup">všeč</span><small>(0)</small>
                                <span class="tdn vote " data-type="thumbdown">ni všeč</span><small>(0)</small>
                                <span class="spm vote " data-type="spam">spam</span><small>(0)</small>
                            </div>
                                                    </div>
                                                    <div class="sig"><a href="http://naslovka.com" target="_blank" rel="noopener noreferrer">Naslovna slika</a> | <a href="http://www.prezentacija.si" target="_blank" rel="noopener noreferrer">Prezentacije in javno nastopanje</a> | <a href="http://spletin.net/sl/cenik-spletnih-strani" target="_blank" rel="noopener noreferrer">Cenik spletnih strani</a></div>
                                            </td>
                </tr>
                <tr class="post">
                    <td class="menu last">&nbsp;</td>
                </tr>
                <tr class="psep">
                    <td colspan="3">&nbsp;</td>
                </tr>
                </tbody>
                            <tbody id="body146171">
                <tr class="post">
                    <!-- USER COLUMN -->
                    <td class="user first" rowspan="2">
                                                                                <a href="https://internetmojster.com/uporabnik/slayer/teme" class="user">slayer</a>
                            <span class="ts">16. sep 2011 13:06:42</span>
                            <span class="add">
                                Pridružen od:<br />
                                4. jul 2011<br />
                                472 objav<br />
                            </span>
                           <span class="rate" id="user-rate-3125">
                                <span class="tup">295</span>
                                <span class="tdn">32</span>
                                <span class="spm">11</span>
                            </span>
                                            </td>

                    <!-- POST CONTENT -->
                    <td class="content last">
                        <div class="inner" id="post146171">
                            <a id="p146171" href="#p146171" class="pnum">#3</a>
                            <p>Mimogrede, alucar se da prosto dobit na netu.</p><br />

                        </div>
                        <div class="submit_buttons">
                            <div class="rate"
                                data-user-id="3125"
                                data-post-id="146171"
                                data-thread="exploit-wp-timthumb-php"
                                data-category="administracija"
                                data-voted=""
                                >
                                <span class="tup vote " data-type="thumbup">všeč</span><small>(2)</small>
                                <span class="tdn vote " data-type="thumbdown">ni všeč</span><small>(0)</small>
                                <span class="spm vote " data-type="spam">spam</span><small>(0)</small>
                            </div>
                                                    </div>
                                                    <div class="sig"><a href="http://www.1splet.net" target="_blank" rel="noopener noreferrer">Magento spletne trgovine</a></div>
                                            </td>
                </tr>
                <tr class="post">
                    <td class="menu last">&nbsp;</td>
                </tr>
                <tr class="psep">
                    <td colspan="3">&nbsp;</td>
                </tr>
                </tbody>
                    </table>

        <div class="nav">
            <div class="bc">
                <a href="https://internetmojster.com">Domov</a> &gt;
                <a href="https://internetmojster.com/administracija" class="top">Administracija strežnikov in spletnih strani</a> &gt;
                <a href="https://internetmojster.com/administracija/exploit-wp-timthumb-php" class="top">exploit WP :  timthumb.php</a>
            </div>

            <!-- Pagination -->
            <div class="page">
                stran 1 od 1
                                    <span class="first">|&lt;</span>
                    <span class="prev">&lt;</span>
                
                
                                                            <span class="p">1</span>
                                    
                
                                    <span class="next">&gt;</span>
                    <span class="last">&gt;|</span>
                            </div>
        </div>
        
        <div id="bottomads">&nbsp;</div>

<div id="topadsrepl">
            
        <div class="left">
            <div class="ad ad-space-1">
                <a href="https://internetmojster.com/novice/internet-mojster-je-nazaj-1760371354" class="ad-announcement">
                    <div class="ad-icon">🎉</div>
                    <div class="ad-content">
                        <div class="ad-title">Internet Mojster je nazaj!</div>
                        <div class="ad-subtitle">Preberite zgodbo o oživitvi legendarne slovenske spletne skupnosti</div>
                    </div>
                    <div class="ad-arrow">→</div>
                </a>
            </div>
        </div>
        <div class="right">
            <div class="ad ad-space-2">
                                
                                    <a href="https://internetmojster.com/zaposlitve" class="ad-job-fallback">
                        <div class="job-content">
                            <div class="job-title">Išči med razpoložljivimi zaposlitvami</div>
                            <div class="job-subtitle">Odkrijte priložnosti za delo v digitalni industriji</div>
                        </div>
                        <div class="job-arrow">→</div>
                    </a>
                            </div>
        </div>
    </div>
    </div>
</div>
                <!-- Login prompt for guests -->
            <div class="notification_box">
                <p>
                    🔒 Za odgovor na to temo se moraš prijaviti.
                </p>
                <a href="https://internetmojster.com/prijava" class="button1">
                    Prijavi se
                </a>
            </div>
                </div>
    </div>
    
    <!-- Ad Spaces Above Footer -->
    <div id="footer-ads">
        <div id="topadsrepl">
            
                
        <div class="left">
            <div class="ad ad-space-1">
                                    <a href="https://internetmojster.com/zaposlitve" class="ad-job-fallback">
                        <div class="job-content">
                            <div class="job-title">Išči med razpoložljivimi zaposlitvami</div>
                            <div class="job-subtitle">Odkrijte priložnosti za delo v digitalni industriji</div>
                        </div>
                        <div class="job-arrow">→</div>
                    </a>
                            </div>
        </div>
        <div class="right">
            <div class="ad ad-space-2">
                                    <a href="https://internetmojster.com/zaposlitve" class="ad-job-fallback">
                        <div class="job-content">
                            <div class="job-title">Išči med razpoložljivimi zaposlitvami</div>
                            <div class="job-subtitle">Odkrijte priložnosti za delo v digitalni industriji</div>
                        </div>
                        <div class="job-arrow">→</div>
                    </a>
                            </div>
        </div>
    </div>
    </div>
    
    <div id="foot">
        powered by Internet Mojster © 2006-2026 :
        <a href="https://internetmojster.com/pravila">pravila obnašanja</a> :
        <a href="https://internetmojster.com/pogoji">pogoji uporabe</a> :
        <a href="https://internetmojster.com/kontakt">kontakt</a> :
        <a href="https://internetmojster.com/piskotki">piškotki</a>
    </div>

    <div id="popup_backdrop" class="popup_backdrop"></div>
	<div id="popup_auth" class="popup" >
		<div class="popup_header">
			<div id="popup_close" class="popup_close">× zapri</div>
		</div>
		<table>
			<tr>
                <td class="login">
                    <h2>Prijava</h2>
                    <form action="https://internetmojster.com/prijava" method="post">
                        <input type="hidden" name="_token" value="9ZnLstKyEQvMw15BwxWhFgq3wMz5eGeSdHTDOY12" autocomplete="off">                                                <p><input class="text" type="text" name="username" placeholder="uporabniško ime"></p>
                        <p><input class="text" type="password" name="password" placeholder="geslo"></p>
                        <p class="options">
                            <label><input type="checkbox" name="remember"> zapomni si me</label>
                        </p>
                        <p style="text-align:right; margin-top:6px;">
                            <button type="submit">prijava</button>
                        </p>
                    </form>
                </td>
                <td class="reg">
                    <h2>Registracija</h2>
                    <p>Še nimate računa? <a href="https://internetmojster.com/registracija">Ustvari nov račun</a>.</p>
                </td>
			</tr>
		</table>
	</div>
	<div id="popup_search" class="popup" >
		<div class="popup_header">
			<div id="popup_close" class="popup_close">× zapri</div>
		</div>
		<table>
			<tr>
			<td>
				<h2>Iskanje</h2>
				<form action="https://internetmojster.com/iskanje" method="get">
                    <p><input class="text" type="text" name="q" placeholder="išči…" style="width:260px"></p>
                    <div class="submit_buttons">
                        <button type="submit" class="button1">išči</button>
                    </div>
				</form>
			</td>
			</tr>
		</table>
	</div>

    <div id="cookie-notice" class="cookie-notice hidden">
            <div class="cookie-content">
                <p>
                    🍪 Ta spletna stran uporablja piškotke za izboljšanje uporabniške izkušnje.
                    <a href="https://internetmojster.com/piskotki" target="_blank">Več o piškotkih</a>.
                </p>
                <div class="cookie-buttons">
                    <button id="cookie-accept" class="button1">Sprejmi</button>
                    <button id="cookie-decline" class="button2">Zavrni</button>
                </div>
            </div>
        </div>

    <script>/*
        // Initialize TinyMCE for content creation and editing
        document.addEventListener('DOMContentLoaded', function() {
            // Initialize WYSIWYG editor for thread content
            if (document.getElementById('content')) {
                // Remove required attribute to prevent validation issues
                document.getElementById('content').removeAttribute('required');
                
                tinymce.init({
                    selector: '#content',
                    height: 300,
                    menubar: false,
                    plugins: [
                        'advlist', 'autolink', 'lists', 'link', 'image', 'charmap',
                        'anchor', 'searchreplace', 'visualblocks', 'code', 'fullscreen',
                        'insertdatetime', 'media', 'table', 'preview', 'help', 'wordcount'
                    ],
                    toolbar: 'undo redo | blocks | ' +
                        'bold italic forecolor | alignleft aligncenter ' +
                        'alignright alignjustify | bullist numlist outdent indent | ' +
                        'smiley-btn | removeformat | help',
                    content_style: 'body { font-family: Arial, sans-serif; font-size: 14px; }',
                    setup: function(editor) {
                        // Add custom smiley button
                        editor.ui.registry.addButton('smiley-btn', {
                            text: '😊',
                            tooltip: 'Insert Smiley',
                            onAction: function() {
                                showSmileyPicker(editor);
                            }
                        });
                    }
                });
            }

            // Initialize WYSIWYG editor for reply content
            if (document.getElementById('reply-content')) {
                // Remove required attribute to prevent validation issues
                document.getElementById('reply-content').removeAttribute('required');
                
                tinymce.init({
                    selector: '#reply-content',
                    height: 200,
                    menubar: false,
                    plugins: [
                        'advlist', 'autolink', 'lists', 'link', 'charmap',
                        'anchor', 'searchreplace', 'visualblocks', 'code',
                        'insertdatetime', 'table', 'help', 'wordcount'
                    ],
                    toolbar: 'undo redo | blocks | ' +
                        'bold italic forecolor | alignleft aligncenter ' +
                        'alignright alignjustify | bullist numlist | ' +
                        'link | smiley-btn | removeformat | help',
                    content_style: 'body { font-family: Arial, sans-serif; font-size: 14px; }',
                    setup: function(editor) {
                        // Add custom smiley button
                        editor.ui.registry.addButton('smiley-btn', {
                            text: '😊',
                            tooltip: 'Insert Smiley',
                            onAction: function() {
                                showSmileyPicker(editor);
                            }
                        });
                    }
                });
            }
            
            // Handle all form submissions that might contain TinyMCE editors
            document.addEventListener('submit', function(e) {
                // Check if this form contains any TinyMCE editors
                const form = e.target;
                const textareas = form.querySelectorAll('textarea');
                let hasValidationErrors = false;
                
                textareas.forEach(function(textarea) {
                    // Check if this textarea has been replaced by TinyMCE
                    if (tinymce.get(textarea.id)) {
                        const editor = tinymce.get(textarea.id);
                        
                        // Sync the TinyMCE content back to the textarea
                        editor.save();
                        
                        // Check if content is required and empty
                        const content = editor.getContent({format: 'text'}).trim();
                        if (textarea.hasAttribute('data-required') && !content) {
                            e.preventDefault();
                            hasValidationErrors = true;
                            
                            // Show error message
                            alert('Please enter some content before submitting.');
                            
                            // Focus the editor
                            editor.focus();
                            
                            return false;
                        }
                    }
                });
                
                if (hasValidationErrors) {
                    return false;
                }
            });
            
            // Smiley picker functionality
            window.showSmileyPicker = function(editor) {
                // Define classic phpBB-style smileys
                const smileys = {
                    'Happy': [':)', ':D', ':P', ';)', ':lol:'],
                    'Sad': [':(', ":'(", ':cry:'],
                    'Other': [':o', ':shock:', '8)', ':cool:', ':|', ':oops:', ':mrgreen:']
                };
                
                let pickerHtml = '<div style="padding: 10px; max-width: 300px;">';
                pickerHtml += '<h4 style="margin: 0 0 10px 0; color: #333;">Insert Smiley</h4>';
                
                for (const [category, codes] of Object.entries(smileys)) {
                    pickerHtml += `<div style="margin-bottom: 10px;">`;
                    pickerHtml += `<strong style="font-size: 12px; color: #666; display: block; margin-bottom: 5px;">${category}</strong>`;
                    
                    codes.forEach(function(code) {
                        const unicode = getSmileyUnicode(code);
                        pickerHtml += `<span style="cursor: pointer; padding: 5px; margin: 2px; display: inline-block; border-radius: 3px; border: 1px solid #ddd; background: #f9f9f9; font-size: 16px;" onclick="insertSmiley('${code}', '${editor.id}')" title="${code}">${unicode}</span>`;
                    });
                    
                    pickerHtml += '</div>';
                }
                
                pickerHtml += '</div>';
                
                editor.windowManager.open({
                    title: 'Insert Smiley',
                    body: {
                        type: 'panel',
                        items: [{
                            type: 'htmlpanel',
                            html: pickerHtml
                        }]
                    },
                    buttons: [
                        {
                            type: 'cancel',
                            text: 'Close'
                        }
                    ]
                });
            };
            
            window.insertSmiley = function(code, editorId) {
                const editor = tinymce.get(editorId);
                if (editor) {
                    editor.insertContent(' ' + code + ' ');
                    editor.windowManager.close();
                }
            };
            
            window.getSmileyUnicode = function(code) {
                const unicodeMap = {
                    ':)': '🙂', ':D': '😀', ':P': '😛', ';)': '😉', ':lol:': '😂',
                    ':(': '🙁', ":'(": '😢', ':cry:': '😢',
                    ':o': '😮', ':shock:': '😱', '8)': '😎', ':cool:': '😎', 
                    ':|': '😐', ':oops:': '😳', ':mrgreen:': '😀'
                };
                return unicodeMap[code] || code;
            };
        });*/
    </script>
    <script src="https://internetmojster.com/js/image-uploader.js"></script>
<script>
document.addEventListener('DOMContentLoaded', function () {
    const hash = window.location.hash;

    if (hash && hash.startsWith('#p')) {
        const postId = hash.substring(2); // remove "#p"
        const postEl = document.getElementById('p' + postId);

        if (postEl) {
            // Post is already rendered on this page → scroll to it
            postEl.scrollIntoView({ behavior: 'smooth' });

            // Optional highlight
            postEl.style.transition = 'color 0.5s';
            postEl.style.color = '#075C85';
            setTimeout(() => postEl.style.color = '', 1000);
        } else {
            // Post is not on this page → fetch its page and redirect
            fetch(`/api/post-locator/${postId}`)
                .then(res => res.json())
                .then(data => {
                    const targetPage = data.page;

                    const url = new URL(window.location.href);
                    const currentPage = parseInt(url.searchParams.get('page') || '1');

                    if (currentPage !== targetPage) {
                        url.searchParams.set('page', targetPage);
                        window.location.href = url.toString(); // will re-run this script after reload
                    }
                });
        }
    }

    // Voting logic
    document.querySelectorAll('.rate').forEach(rateBox => {

        if (rateBox.dataset.disabled === 'true') return;

        const postId = rateBox.dataset.postId;
        const voted = rateBox.dataset.voted;

        const voteElements = rateBox.querySelectorAll('.vote');

        voteElements.forEach(btn => {
            if (voted) {
                if (btn.dataset.type === voted) {
                    btn.classList.add('active');
                } else {
                    btn.classList.add('inactive');
                }
            }

            btn.addEventListener('click', () => {
                const threadSlug = rateBox.dataset.thread;
                const categorySlug = rateBox.dataset.category;
                const userId = rateBox.dataset.userId;

                fetch(`/${categorySlug}/${threadSlug}/${postId}/glasuj`, {
                    method: 'POST',
                    headers: {
                        'Content-Type': 'application/json',
                        'X-CSRF-TOKEN': '9ZnLstKyEQvMw15BwxWhFgq3wMz5eGeSdHTDOY12'
                    },
                    body: JSON.stringify({ type: btn.dataset.type })
                })
                .then(res => res.json())
                .then(data => {
                    if (data.success) {
                        voteElements.forEach(el => {
                            el.classList.remove('active', 'inactive');
                            if (data.current && el.dataset.type === data.current) {
                                el.classList.add('active');
                            } else if (data.current) {
                                el.classList.add('inactive');
                            }
                        });

                        rateBox.querySelector('.tup + small').textContent = `(${data.counts.thumbup})`;
                        rateBox.querySelector('.tdn + small').textContent = `(${data.counts.thumbdown})`;
                        rateBox.querySelector('.spm + small').textContent = `(${data.counts.spam})`;

                        if (userId && data.user_counts) {
                            const userStatsBoxes = document.querySelectorAll(`#user-rate-${userId}`);
                            userStatsBoxes.forEach(userBox => {
                                userBox.querySelector('.tup').textContent = data.user_counts.thumbup;
                                userBox.querySelector('.tdn').textContent = data.user_counts.thumbdown;
                                userBox.querySelector('.spm').textContent = data.user_counts.spam;
                            });
                        }
                    }
                });
            });
        });
    });
});
</script>
</body>
</html>