PageRenderTime 41ms CodeModel.GetById 26ms RepoModel.GetById 0ms app.codeStats 1ms

/forum/admin/admin_users.php

https://code.google.com/p/torrentpier/
PHP | 970 lines | 801 code | 119 blank | 50 comment | 167 complexity | f76c5f2ad3affcde90216b011639525d MD5 | raw file
Possible License(s): GPL-2.0 
    

  1. <?php

    2. 

  2. 

    3. 

  3. // ACP Header - START

    4. 

  4. if (!empty($setmodules))

    5. 

  5. {

    6. 

  6. 	$module['Users']['Manage'] = basename(__FILE__);

    7. 

  7. 	return;

    8. 

  8. }

    9. 

  9. require('./pagestart.php');

    10. 

  10. // ACP Header - END

    11. 

  11. 

    12. 

  12. require(INC_DIR .'bbcode.php');

    13. 

  13. require(INC_DIR .'functions_post.php');

    14. 

  14. require(INC_DIR .'functions_selects.php');

    15. 

  15. require(INC_DIR .'functions_validate.php');

    16. 

  16. require(INC_DIR .'functions_group.php');

    17. 

  17. 

    18. 

  18. array_deep($_POST, 'trim');

    19. 

  19. 

    20. 

  20. $html_entities_match = array('#<#', '#>#');

    21. 

  21. $html_entities_replace = array('&lt;', '&gt;');

    22. 

  22. 

    23. 

  23. $message = $error_msg = $username_sql = $signature_bbcode_uid = '';

    24. 

  24. $group_moderator = $mark_list = array();

    25. 

  25. 

    26. 

  26. $mode = isset($_REQUEST['mode']) ? $_REQUEST['mode'] : '';

    27. 

  27. 

    28. 

  28. function return_msg_ua ($status_msg)

    29. 

  29. {

    30. 

  30. 	global $lang;

    31. 

  31. 

    32. 

  32. 	$message = $status_msg;

    33. 

  33. 

    34. 

  34. 	$message .= '<br /><br />';

    35. 

  35. 	$message .= sprintf($lang['CLICK_RETURN_USERADMIN'], '<a href="'. append_sid("admin_users.php") .'">', '</a>');

    36. 

  36. 	$message .= '<br /><br />';

    37. 

  37. 	$message .= sprintf($lang['CLICK_RETURN_ADMIN_INDEX'], '<a href="'. append_sid("index.php?pane=right") .'">', '</a>');

    38. 

  38. 

    39. 

  39. 	return $message;

    40. 

  40. }

    41. 

  41. 

    42. 

  42. //

    43. 

  43. // Begin program

    44. 

  44. //

    45. 

  45. if ( $mode == 'edit' || $mode == 'save' && ( isset($_POST['username']) || isset($_GET[POST_USERS_URL]) || isset( $_POST[POST_USERS_URL]) ) )

    46. 

  46. {

    47. 

  47. 	attachment_quota_settings('user', @$_POST['submit'], $mode);

    48. 

  48. 

    49. 

  49. 	//

    50. 

  50. 	// Ok, the profile has been modified and submitted, let's update

    51. 

  51. 	//

    52. 

  52. 	if ( ( $mode == 'save' && isset( $_POST['submit'] ) ) || isset( $_POST['avatargallery'] ) || isset( $_POST['submitavatar'] ) || isset( $_POST['cancelavatar'] ) )

    53. 

  53. 	{

    54. 

  54. 		$user_id = (int) $_POST['id'];

    55. 

  55. 

    56. 

  56. 		if (!$this_userdata = get_userdata($user_id))

    57. 

  57. 		{

    58. 

  58. 			message_die(GENERAL_MESSAGE, $lang['NO_USER_ID_SPECIFIED']);

    59. 

  59. 		}

    60. 

  60. 

    61. 

  61. 		if ($userdata['user_id'] != $user_id)

    62. 

  62. 		{

    63. 

  63. 			if (!empty($_POST['deleteuser']))

    64. 

  64. 			{

    65. 

  65. 				delete_user_sessions($user_id);

    66. 

  66. 				user_delete($user_id, !empty($_POST['delete_user_posts']));

    67. 

  67. 

    68. 

  68. 				if ($this_userdata['user_level'] == MOD)

    69. 

  69. 				{

    70. 

  70. 					$datastore->update('moderators');

    71. 

  71. 				}

    72. 

  72. 

    73. 

  73. 				message_die(GENERAL_MESSAGE, return_msg_ua($lang['USER_DELETED']));

    74. 

  74. 			}

    75. 

  75. 			else if (!empty($_POST['delete_user_posts']))

    76. 

  76. 			{

    77. 

  77. 				post_delete('user', $user_id);

    78. 

  78. 				message_die(GENERAL_MESSAGE, return_msg_ua('User posts were deleted'));

    79. 

  79. 			}

    80. 

  80. 		}

    81. 

  81. 

    82. 

  82. 		$username = ( !empty($_POST['username']) ) ? phpbb_clean_username($_POST['username']) : '';

    83. 

  83. 		$email = ( !empty($_POST['email']) ) ? trim(strip_tags(htmlspecialchars( $_POST['email'] ) )) : '';

    84. 

  84. 

    85. 

  85. 		$password = ( !empty($_POST['password']) ) ? trim(strip_tags(htmlspecialchars( $_POST['password'] ) )) : '';

    86. 

  86. 		$password_confirm = ( !empty($_POST['password_confirm']) ) ? trim(strip_tags(htmlspecialchars( $_POST['password_confirm'] ) )) : '';

    87. 

  87. 

    88. 

  88. 		$icq = ( !empty($_POST['icq']) ) ? trim(strip_tags( $_POST['icq'] ) ) : '';

    89. 

  89. 

    90. 

  90. 		$website = ( !empty($_POST['website']) ) ? trim(strip_tags( $_POST['website'] ) ) : '';

    91. 

  91. 		$location = ( !empty($_POST['location']) ) ? trim(strip_tags( $_POST['location'] ) ) : '';

    92. 

  92. 		$occupation = ( !empty($_POST['occupation']) ) ? trim(strip_tags( $_POST['occupation'] ) ) : '';

    93. 

  93. 		$interests = ( !empty($_POST['interests']) ) ? trim(strip_tags( $_POST['interests'] ) ) : '';

    94. 

  94. 		$signature = ( !empty($_POST['signature']) ) ? trim(str_replace('<br />', "\n", $_POST['signature'] ) ) : '';

    95. 

  95. 

    96. 

  96. 		validate_optional_fields($icq, $website, $location, $occupation, $interests, $signature);

    97. 

  97. 

    98. 

  98. 		$allowviewonline = ( isset( $_POST['hideonline']) ) ? ( ( $_POST['hideonline'] ) ? 0 : TRUE ) : TRUE;

    99. 

  99. 		$notifyreply = ( isset( $_POST['notifyreply']) ) ? ( ( $_POST['notifyreply'] ) ? TRUE : 0 ) : 0;

    100. 

  100. 		$notifypm = ( isset( $_POST['notifypm']) ) ? ( ( $_POST['notifypm'] ) ? TRUE : 0 ) : TRUE;

    101. 

  101. 		$viewemail = (int) !empty($_POST['viewemail']);

    102. 

  102. 		$attachsig = (int) !empty($_POST['attachsig']);

    103. 

  103. 

    104. 

  104. 		$user_lang = ( $_POST['language'] != $bb_cfg['board_lang'] ) ? $_POST['language'] : '';

    105. 

  105. 		$user_timezone = ( isset($_POST['timezone']) ) ? str_replace(',', '.', doubleval($_POST['timezone'])) : $bb_cfg['board_timezone'];

    106. 

  106. 

    107. 

  107. 		$user_flag = (@$_POST['user_flag'] && $_POST['user_flag'] != 'blank.gif') ? $_POST['user_flag'] : '';

    108. 

  108. 

    109. 

  109. 		$user_template = ( @$_POST['template'] ) ? $_POST['template'] : @$bb_cfg['board_template'];

    110. 

  110. 		$user_dateformat = (!empty($_POST['dateformat']) && $_POST['dateformat'] != $bb_cfg['board_dateformat']) ? $_POST['dateformat'] : '';

    111. 

  111. 

    112. 

  112. 		$user_avatar_local = ( isset( $_POST['avatarselect'] ) && !empty($_POST['submitavatar'] ) && $bb_cfg['allow_avatar_local'] ) ? $_POST['avatarselect'] : ( ( isset( $_POST['avatarlocal'] )  ) ? $_POST['avatarlocal'] : '' );

    113. 

  113. 		$user_avatar_category = ( isset($_POST['avatarcatname']) && $bb_cfg['allow_avatar_local'] ) ? htmlspecialchars($_POST['avatarcatname']) : '' ;

    114. 

  114. 

    115. 

  115. 		$user_avatar_remoteurl = ( !empty($_POST['avatarremoteurl']) ) ? trim( $_POST['avatarremoteurl'] ) : '';

    116. 

  116. 		$user_avatar_url = ( !empty($_POST['avatarurl']) ) ? trim( $_POST['avatarurl'] ) : '';

    117. 

  117. 		$user_avatar_loc = ( @$_FILES['avatar']['tmp_name'] != "none") ? $_FILES['avatar']['tmp_name'] : '';

    118. 

  118. 		$user_avatar_name = ( !empty($_FILES['avatar']['name']) ) ? $_FILES['avatar']['name'] : '';

    119. 

  119. 		$user_avatar_size = ( !empty($_FILES['avatar']['size']) ) ? $_FILES['avatar']['size'] : 0;

    120. 

  120. 		$user_avatar_filetype = ( !empty($_FILES['avatar']['type']) ) ? $_FILES['avatar']['type'] : '';

    121. 

  121. 

    122. 

  122. 		$user_avatar = ( empty($user_avatar_loc) ) ? $this_userdata['user_avatar'] : '';

    123. 

  123. 		$user_avatar_type = ( empty($user_avatar_loc) ) ? $this_userdata['user_avatar_type'] : '';

    124. 

  124. 

    125. 

  125. 		$user_status = ( !empty($_POST['user_status']) ) ? intval( $_POST['user_status'] ) : 0;

    126. 

  126. 		$user_allowpm = ( !empty($_POST['user_allowpm']) ) ? intval( $_POST['user_allowpm'] ) : 0;

    127. 

  127. 		$user_rank = ( !empty($_POST['user_rank']) ) ? intval( $_POST['user_rank'] ) : 0;

    128. 

  128. 		$user_allowavatar = ( !empty($_POST['user_allowavatar']) ) ? intval( $_POST['user_allowavatar'] ) : 0;

    129. 

  129. 

    130. 

  130. 		if( isset( $_POST['avatargallery'] ) || isset( $_POST['submitavatar'] ) || isset( $_POST['cancelavatar'] ) )

    131. 

  131. 		{

    132. 

  132. 			$username = stripslashes($username);

    133. 

  133. 			$email = stripslashes($email);

    134. 

  134. 			$password = '';

    135. 

  135. 			$password_confirm = '';

    136. 

  136. 

    137. 

  137. 			$icq = stripslashes($icq);

    138. 

  138. 

    139. 

  139. 			$website = htmlspecialchars(stripslashes($website));

    140. 

  140. 			$location = htmlspecialchars(stripslashes($location));

    141. 

  141. 			$occupation = htmlspecialchars(stripslashes($occupation));

    142. 

  142. 			$interests = htmlspecialchars(stripslashes($interests));

    143. 

  143. 			$signature = htmlspecialchars(stripslashes($signature));

    144. 

  144. 

    145. 

  145. 			$user_lang = stripslashes($user_lang);

    146. 

  146. 			$user_dateformat = htmlspecialchars(stripslashes($user_dateformat));

    147. 

  147. 

    148. 

  148. 			if ( !isset($_POST['cancelavatar']))

    149. 

  149. 			{

    150. 

  150. 				$user_avatar = $user_avatar_category . '/' . $user_avatar_local;

    151. 

  151. 				$user_avatar_type = USER_AVATAR_GALLERY;

    152. 

  152. 			}

    153. 

  153. 		}

    154. 

  154. 	}

    155. 

  155. 

    156. 

  156. 	if( isset( $_POST['submit'] ) )

    157. 

  157. 	{

    158. 

  158. 		include(INC_DIR . 'ucp/usercp_avatar.php');

    159. 

  159. 

    160. 

  160. 		$error = FALSE;

    161. 

  161. 

    162. 

  162. 		if (stripslashes($username) != $this_userdata['username'])

    163. 

  163. 		{

    164. 

  164. 			unset($rename_user);

    165. 

  165. 

    166. 

  166. 			if ( stripslashes(strtolower($username)) != strtolower($this_userdata['username']) )

    167. 

  167. 			{

    168. 

  168. 				$result = validate_username($username);

    169. 

  169. 				if ( $result['error'] )

    170. 

  170. 				{

    171. 

  171. 					$error = TRUE;

    172. 

  172. 					$error_msg .= ( ( isset($error_msg) ) ? '<br />' : '' ) . $result['error_msg'];

    173. 

  173. 				}

    174. 

  174. 				else if ( strtolower(str_replace("\\'", "''", $username)) == strtolower($userdata['username']) )

    175. 

  175. 				{

    176. 

  176. 					$error = TRUE;

    177. 

  177. 					$error_msg .= ( ( isset($error_msg) ) ? '<br />' : '' ) . $lang['USERNAME_TAKEN'];

    178. 

  178. 				}

    179. 

  179. 			}

    180. 

  180. 

    181. 

  181. 			if (!$error)

    182. 

  182. 			{

    183. 

  183. 				$username_sql = "username = '" . str_replace("\\'", "''", $username) . "', ";

    184. 

  184. 				$rename_user = $username; // Used for renaming usergroup

    185. 

  185. 			}

    186. 

  186. 		}

    187. 

  187. 

    188. 

  188. 		$passwd_sql = '';

    189. 

  189. 		if( !empty($password) && !empty($password_confirm) )

    190. 

  190. 		{

    191. 

  191. 			//

    192. 

  192. 			// Awww, the user wants to change their password, isn't that cute..

    193. 

  193. 			//

    194. 

  194. 			if($password != $password_confirm)

    195. 

  195. 			{

    196. 

  196. 				$error = TRUE;

    197. 

  197. 				$error_msg .= ( ( isset($error_msg) ) ? '<br />' : '' ) . $lang['PASSWORD_MISMATCH'];

    198. 

  198. 			}

    199. 

  199. 			else

    200. 

  200. 			{

    201. 

  201. 				$password = md5($password);

    202. 

  202. 				$passwd_sql = "user_password = '$password', ";

    203. 

  203. 			}

    204. 

  204. 		}

    205. 

  205. 		else if( $password && !$password_confirm )

    206. 

  206. 		{

    207. 

  207. 			$error = TRUE;

    208. 

  208. 			$error_msg .= ( ( isset($error_msg) ) ? '<br />' : '' ) . $lang['PASSWORD_MISMATCH'];

    209. 

  209. 		}

    210. 

  210. 		else if( !$password && $password_confirm )

    211. 

  211. 		{

    212. 

  212. 			$error = TRUE;

    213. 

  213. 			$error_msg .= ( ( isset($error_msg) ) ? '<br />' : '' ) . $lang['PASSWORD_MISMATCH'];

    214. 

  214. 		}

    215. 

  215. 

    216. 

  216. 		if ($signature != '')

    217. 

  217. 		{

    218. 

  218. 			$sig_length_check = preg_replace('/(\[.*?)(=.*?)\]/is', '\\1]', stripslashes($signature));

    219. 

  219. 			$signature_bbcode_uid = ($bb_cfg['allow_bbcode']) ? make_bbcode_uid() : '';

    220. 

  220. 			$signature = prepare_message($signature, $bb_cfg['allow_bbcode'], $bb_cfg['allow_smilies'], $signature_bbcode_uid);

    221. 

  221. 

    222. 

  222. 			if ( strlen($sig_length_check) > $bb_cfg['max_sig_chars'] )

    223. 

  223. 			{

    224. 

  224. 				$error = TRUE;

    225. 

  225. 				$error_msg .=  ( ( isset($error_msg) ) ? '<br />' : '' ) . $lang['SIGNATURE_TOO_LONG'];

    226. 

  226. 			}

    227. 

  227. 		}

    228. 

  228. 

    229. 

  229. 		//

    230. 

  230. 		// Avatar stuff

    231. 

  231. 		//

    232. 

  232. 		$avatar_sql = "";

    233. 

  233. 		if( isset($_POST['avatardel']) )

    234. 

  234. 		{

    235. 

  235. 			if( $this_userdata['user_avatar_type'] == USER_AVATAR_UPLOAD && $this_userdata['user_avatar'] != "" )

    236. 

  236. 			{

    237. 

  237. 				if( @file_exists(@phpbb_realpath('./../' . $bb_cfg['avatar_path'] . "/" . $this_userdata['user_avatar'])) )

    238. 

  238. 				{

    239. 

  239. 					@unlink('./../' . $bb_cfg['avatar_path'] . "/" . $this_userdata['user_avatar']);

    240. 

  240. 				}

    241. 

  241. 			}

    242. 

  242. 			$avatar_sql = ", user_avatar = '', user_avatar_type = " . USER_AVATAR_NONE;

    243. 

  243. 		}

    244. 

  244. 		else if( ( $user_avatar_loc != "" || !empty($user_avatar_url) ) && !$error )

    245. 

  245. 		{

    246. 

  246. 			//

    247. 

  247. 			// Only allow one type of upload, either a

    248. 

  248. 			// filename or a URL

    249. 

  249. 			//

    250. 

  250. 			if( !empty($user_avatar_loc) && !empty($user_avatar_url) )

    251. 

  251. 			{

    252. 

  252. 				$error = TRUE;

    253. 

  253. 				if( isset($error_msg) )

    254. 

  254. 				{

    255. 

  255. 					$error_msg .= "<br />";

    256. 

  256. 				}

    257. 

  257. 				$error_msg .= $lang['ONLY_ONE_AVATAR'];

    258. 

  258. 			}

    259. 

  259. 

    260. 

  260. 			if( $user_avatar_loc != "" )

    261. 

  261. 			{

    262. 

  262. 				if( file_exists(@phpbb_realpath($user_avatar_loc)) && preg_match("/\.(gif|jpg|png)$/", $user_avatar_name) )

    263. 

  263. 				{

    264. 

  264. 					if( $user_avatar_size <= $bb_cfg['avatar_filesize'] && $user_avatar_size > 0)

    265. 

  265. 					{

    266. 

  266. 						$error_type = false;

    267. 

  267. 

    268. 

  268. 						//

    269. 

  269. 						// Opera appends the image name after the type, not big, not clever!

    270. 

  270. 						//

    271. 

  271. 						preg_match("'image\/[x\-]*([a-z]+)'", $user_avatar_filetype, $user_avatar_filetype);

    272. 

  272. 						$user_avatar_filetype = $user_avatar_filetype[1];

    273. 

  273. 

    274. 

  274. 						switch( $user_avatar_filetype )

    275. 

  275. 						{

    276. 

  276. 							case "jpeg":

    277. 

  277. 							case "pjpeg":

    278. 

  278. 							case "jpg":

    279. 

  279. 								$imgtype = '.jpg';

    280. 

  280. 								break;

    281. 

  281. 							case "gif":

    282. 

  282. 								$imgtype = '.gif';

    283. 

  283. 								break;

    284. 

  284. 							case "png":

    285. 

  285. 								$imgtype = '.png';

    286. 

  286. 								break;

    287. 

  287. 							default:

    288. 

  288. 								$error = true;

    289. 

  289. 								$error_msg = (!empty($error_msg)) ? $error_msg . "<br />" . $lang['AVATAR_FILETYPE'] : $lang['AVATAR_FILETYPE'];

    290. 

  290. 								break;

    291. 

  291. 						}

    292. 

  292. 

    293. 

  293. 						if( !$error )

    294. 

  294. 						{

    295. 

  295. 							list($width, $height) = @getimagesize($user_avatar_loc);

    296. 

  296. 

    297. 

  297. 							if( $width <= $bb_cfg['avatar_max_width'] && $height <= $bb_cfg['avatar_max_height'] )

    298. 

  298. 							{

    299. 

  299. 								$user_id = $this_userdata['user_id'];

    300. 

  300. 

    301. 

  301. 								$avatar_filename = $user_id . $imgtype;

    302. 

  302. 

    303. 

  303. 								if( $this_userdata['user_avatar_type'] == USER_AVATAR_UPLOAD && $this_userdata['user_avatar'] != "" )

    304. 

  304. 								{

    305. 

  305. 									if( @file_exists(@phpbb_realpath("./../" . $bb_cfg['avatar_path'] . "/" . $this_userdata['user_avatar'])) )

    306. 

  306. 									{

    307. 

  307. 										@unlink("./../" . $bb_cfg['avatar_path'] . "/". $this_userdata['user_avatar']);

    308. 

  308. 									}

    309. 

  309. 								}

    310. 

  310. 								@copy($user_avatar_loc, "./../" . $bb_cfg['avatar_path'] . "/$avatar_filename");

    311. 

  311. 

    312. 

  312. 								$avatar_sql = ", user_avatar = '$avatar_filename', user_avatar_type = " . USER_AVATAR_UPLOAD;

    313. 

  313. 							}

    314. 

  314. 							else

    315. 

  315. 							{

    316. 

  316. 								$l_avatar_size = sprintf($lang['AVATAR_IMAGESIZE'], $bb_cfg['avatar_max_width'], $bb_cfg['avatar_max_height']);

    317. 

  317. 

    318. 

  318. 								$error = true;

    319. 

  319. 								$error_msg = ( !empty($error_msg) ) ? $error_msg . "<br />" . $l_avatar_size : $l_avatar_size;

    320. 

  320. 							}

    321. 

  321. 						}

    322. 

  322. 					}

    323. 

  323. 					else

    324. 

  324. 					{

    325. 

  325. 						$l_avatar_size = sprintf($lang['AVATAR_FILESIZE'], round($bb_cfg['avatar_filesize'] / 1024));

    326. 

  326. 

    327. 

  327. 						$error = true;

    328. 

  328. 						$error_msg = ( !empty($error_msg) ) ? $error_msg . "<br />" . $l_avatar_size : $l_avatar_size;

    329. 

  329. 					}

    330. 

  330. 				}

    331. 

  331. 				else

    332. 

  332. 				{

    333. 

  333. 					$error = true;

    334. 

  334. 					$error_msg = ( !empty($error_msg) ) ? $error_msg . "<br />" . $lang['AVATAR_FILETYPE'] : $lang['AVATAR_FILETYPE'];

    335. 

  335. 				}

    336. 

  336. 			}

    337. 

  337. 			else if( !empty($user_avatar_url) )

    338. 

  338. 			{

    339. 

  339. 				//

    340. 

  340. 				// First check what port we should connect

    341. 

  341. 				// to, look for a :[xxxx]/ or, if that doesn't

    342. 

  342. 				// exist assume port 80 (http)

    343. 

  343. 				//

    344. 

  344. 				preg_match("/^(http:\/\/)?([\w\-\.]+)\:?([0-9]*)\/(.*)$/", $user_avatar_url, $url_ary);

    345. 

  345. 

    346. 

  346. 				if( !empty($url_ary[4]) )

    347. 

  347. 				{

    348. 

  348. 					$port = (!empty($url_ary[3])) ? $url_ary[3] : 80;

    349. 

  349. 

    350. 

  350. 					$fsock = @fsockopen($url_ary[2], $port, $errno, $errstr);

    351. 

  351. 					if( $fsock )

    352. 

  352. 					{

    353. 

  353. 						$base_get = "/" . $url_ary[4];

    354. 

  354. 

    355. 

  355. 						//

    356. 

  356. 						// Uses HTTP 1.1, could use HTTP 1.0 ...

    357. 

  357. 						//

    358. 

  358. 						@fputs($fsock, "GET $base_get HTTP/1.1\r\n");

    359. 

  359. 						@fputs($fsock, "HOST: " . $url_ary[2] . "\r\n");

    360. 

  360. 						@fputs($fsock, "Connection: close\r\n\r\n");

    361. 

  361. 

    362. 

  362. 						$avatar_data = '';

    363. 

  363. 						while( !@feof($fsock) )

    364. 

  364. 						{

    365. 

  365. 							$avatar_data .= @fread($fsock, $bb_cfg['avatar_filesize']);

    366. 

  366. 						}

    367. 

  367. 						@fclose($fsock);

    368. 

  368. 

    369. 

  369. 						if( preg_match("/Content-Length\: ([0-9]+)[^\/ ][\s]+/i", $avatar_data, $file_data1) && preg_match("/Content-Type\: image\/[x\-]*([a-z]+)[\s]+/i", $avatar_data, $file_data2) )

    370. 

  370. 						{

    371. 

  371. 							$file_size = $file_data1[1];

    372. 

  372. 							$file_type = $file_data2[1];

    373. 

  373. 

    374. 

  374. 							switch( $file_type )

    375. 

  375. 							{

    376. 

  376. 								case "jpeg":

    377. 

  377. 								case "pjpeg":

    378. 

  378. 								case "jpg":

    379. 

  379. 									$imgtype = '.jpg';

    380. 

  380. 									break;

    381. 

  381. 								case "gif":

    382. 

  382. 									$imgtype = '.gif';

    383. 

  383. 									break;

    384. 

  384. 								case "png":

    385. 

  385. 									$imgtype = '.png';

    386. 

  386. 									break;

    387. 

  387. 								default:

    388. 

  388. 									$error = true;

    389. 

  389. 									$error_msg = (!empty($error_msg)) ? $error_msg . "<br />" . $lang['AVATAR_FILETYPE'] : $lang['AVATAR_FILETYPE'];

    390. 

  390. 									break;

    391. 

  391. 							}

    392. 

  392. 

    393. 

  393. 							if( !$error && $file_size > 0 && $file_size < $bb_cfg['avatar_filesize'] )

    394. 

  394. 							{

    395. 

  395. 								$avatar_data = substr($avatar_data, strlen($avatar_data) - $file_size, $file_size);

    396. 

  396. 

    397. 

  397. 								$tmp_filename = tempnam ("/tmp", $this_userdata['user_id'] . "-");

    398. 

  398. 								$fptr = @fopen($tmp_filename, "wb");

    399. 

  399. 								$bytes_written = @fwrite($fptr, $avatar_data, $file_size);

    400. 

  400. 								@fclose($fptr);

    401. 

  401. 

    402. 

  402. 								if( $bytes_written == $file_size )

    403. 

  403. 								{

    404. 

  404. 									list($width, $height) = @getimagesize($tmp_filename);

    405. 

  405. 

    406. 

  406. 									if( $width <= $bb_cfg['avatar_max_width'] && $height <= $bb_cfg['avatar_max_height'] )

    407. 

  407. 									{

    408. 

  408. 										$user_id = $this_userdata['user_id'];

    409. 

  409. 

    410. 

  410. 										$avatar_filename = $user_id . $imgtype;

    411. 

  411. 

    412. 

  412. 										if( $this_userdata['user_avatar_type'] == USER_AVATAR_UPLOAD && $this_userdata['user_avatar'] != "")

    413. 

  413. 										{

    414. 

  414. 											if( file_exists(@phpbb_realpath("./../" . $bb_cfg['avatar_path'] . "/" . $this_userdata['user_avatar'])) )

    415. 

  415. 											{

    416. 

  416. 												@unlink("./../" . $bb_cfg['avatar_path'] . "/" . $this_userdata['user_avatar']);

    417. 

  417. 											}

    418. 

  418. 										}

    419. 

  419. 										@copy($tmp_filename, "./../" . $bb_cfg['avatar_path'] . "/$avatar_filename");

    420. 

  420. 										@unlink($tmp_filename);

    421. 

  421. 

    422. 

  422. 										$avatar_sql = ", user_avatar = '$avatar_filename', user_avatar_type = " . USER_AVATAR_UPLOAD;

    423. 

  423. 									}

    424. 

  424. 									else

    425. 

  425. 									{

    426. 

  426. 										$l_avatar_size = sprintf($lang['AVATAR_IMAGESIZE'], $bb_cfg['avatar_max_width'], $bb_cfg['avatar_max_height']);

    427. 

  427. 

    428. 

  428. 										$error = true;

    429. 

  429. 										$error_msg = ( !empty($error_msg) ) ? $error_msg . "<br />" . $l_avatar_size : $l_avatar_size;

    430. 

  430. 									}

    431. 

  431. 								}

    432. 

  432. 								else

    433. 

  433. 								{

    434. 

  434. 									//

    435. 

  435. 									// Error writing file

    436. 

  436. 									//

    437. 

  437. 									@unlink($tmp_filename);

    438. 

  438. 									message_die(GENERAL_ERROR, "Could not write avatar file to local storage. Please contact the board administrator with this message", "", __LINE__, __FILE__);

    439. 

  439. 								}

    440. 

  440. 							}

    441. 

  441. 						}

    442. 

  442. 						else

    443. 

  443. 						{

    444. 

  444. 							//

    445. 

  445. 							// No data

    446. 

  446. 							//

    447. 

  447. 							$error = true;

    448. 

  448. 							$error_msg = ( !empty($error_msg) ) ? $error_msg . "<br />" . $lang['FILE_NO_DATA'] : $lang['FILE_NO_DATA'];

    449. 

  449. 						}

    450. 

  450. 					}

    451. 

  451. 					else

    452. 

  452. 					{

    453. 

  453. 						//

    454. 

  454. 						// No connection

    455. 

  455. 						//

    456. 

  456. 						$error = true;

    457. 

  457. 						$error_msg = ( !empty($error_msg) ) ? $error_msg . "<br />" . $lang['NO_CONNECTION_URL'] : $lang['NO_CONNECTION_URL'];

    458. 

  458. 					}

    459. 

  459. 				}

    460. 

  460. 				else

    461. 

  461. 				{

    462. 

  462. 					$error = true;

    463. 

  463. 					$error_msg = ( !empty($error_msg) ) ? $error_msg . "<br />" . $lang['INCOMPLETE_URL'] : $lang['INCOMPLETE_URL'];

    464. 

  464. 				}

    465. 

  465. 			}

    466. 

  466. 			else if( !empty($user_avatar_name) )

    467. 

  467. 			{

    468. 

  468. 				$l_avatar_size = sprintf($lang['AVATAR_FILESIZE'], round($bb_cfg['avatar_filesize'] / 1024));

    469. 

  469. 

    470. 

  470. 				$error = true;

    471. 

  471. 				$error_msg = ( !empty($error_msg) ) ? $error_msg . "<br />" . $l_avatar_size : $l_avatar_size;

    472. 

  472. 			}

    473. 

  473. 		}

    474. 

  474. 		else if( $user_avatar_remoteurl != "" && $avatar_sql == "" && !$error )

    475. 

  475. 		{

    476. 

  476. 			if( !preg_match("#^http:\/\/#i", $user_avatar_remoteurl) )

    477. 

  477. 			{

    478. 

  478. 				$user_avatar_remoteurl = "http://" . $user_avatar_remoteurl;

    479. 

  479. 			}

    480. 

  480. 

    481. 

  481. 			if( preg_match("#^(http:\/\/[a-z0-9\-]+?\.([a-z0-9\-]+\.)*[a-z]+\/.*?\.(gif|jpg|png)$)#is", $user_avatar_remoteurl) )

    482. 

  482. 			{

    483. 

  483. 				$avatar_sql = ", user_avatar = '" . str_replace("\'", "''", $user_avatar_remoteurl) . "', user_avatar_type = " . USER_AVATAR_REMOTE;

    484. 

  484. 			}

    485. 

  485. 			else

    486. 

  486. 			{

    487. 

  487. 				$error = true;

    488. 

  488. 				$error_msg = ( !empty($error_msg) ) ? $error_msg . "<br />" . $lang['WRONG_REMOTE_AVATAR_FORMAT'] : $lang['WRONG_REMOTE_AVATAR_FORMAT'];

    489. 

  489. 			}

    490. 

  490. 		}

    491. 

  491. 		else if( $user_avatar_local != "" && $avatar_sql == "" && !$error )

    492. 

  492. 		{

    493. 

  493. 			$avatar_sql = ", user_avatar = '" . str_replace("\'", "''", phpbb_ltrim(basename($user_avatar_category), "'") . '/' . phpbb_ltrim(basename($user_avatar_local), "'")) . "', user_avatar_type = " . USER_AVATAR_GALLERY;

    494. 

  494. 		}

    495. 

  495. 

    496. 

  496. 		//

    497. 

  497. 		// Update entry in DB

    498. 

  498. 		//

    499. 

  499. 		if( !$error )

    500. 

  500. 		{

    501. 

  501. 			$update_user_opt = array(

    502. 

  502. 				'viewemail',

    503. 

  503. 				'attachsig',

    504. 

  504. 			);

    505. 

  505. 			$user_opt = $this_userdata['user_opt'];

    506. 

  506. 

    507. 

  507. 			foreach ($update_user_opt as $opt)

    508. 

  508. 			{

    509. 

  509. 				setbit($user_opt, $bf['user_opt'][$opt], !empty($_POST[$opt]));

    510. 

  510. 			}

    511. 

  511. 

    512. 

  512. 			$sql = "UPDATE " . USERS_TABLE . "

    513. 

  513. 				SET " . $username_sql . $passwd_sql . "

    514. 

  514. 					user_email = '" . str_replace("\'", "''", $email) . "',

    515. 

  515. 					user_icq = '" . str_replace("\'", "''", $icq) . "',

    516. 

  516. 					user_website = '" . str_replace("\'", "''", $website) . "',

    517. 

  517. 					user_occ = '" . str_replace("\'", "''", $occupation) . "',

    518. 

  518. 					user_from = '" . str_replace("\'", "''", $location) . "',

    519. 

  519. 					user_from_flag = '$user_flag',

    520. 

  520. 					user_interests = '" . str_replace("\'", "''", $interests) . "',

    521. 

  521. 					user_sig = '" . str_replace("\'", "''", $signature) . "',

    522. 

  522. 					user_opt = $user_opt,

    523. 

  523. 					user_allow_viewonline = $allowviewonline,

    524. 

  524. 					user_notify = $notifyreply,

    525. 

  525. 					user_notify_pm = $notifypm,

    526. 

  526. 					user_sig_bbcode_uid = '$signature_bbcode_uid',

    527. 

  527. 					user_allowavatar = $user_allowavatar,

    528. 

  528. 					user_allow_pm = $user_allowpm,

    529. 

  529. 					user_lang = '" . str_replace("\'", "''", $user_lang) . "',

    530. 

  530. 					user_timezone = $user_timezone,

    531. 

  531. 					user_dateformat = '" . str_replace("\'", "''", $user_dateformat) . "',

    532. 

  532. 					user_active = $user_status,

    533. 

  533. 					user_rank = $user_rank" . $avatar_sql . ",

    534. 

  534. 					user_actkey = ''

    535. 

  535. 				WHERE user_id = $user_id";

    536. 

  536. 

    537. 

  537. 			if( $result = $db->sql_query($sql) )

    538. 

  538. 			{

    539. 

  539. 				// Delete user session, to prevent the user navigating the forum (if logged in) when disabled

    540. 

  540. 				if (!$user_status)

    541. 

  541. 				{

    542. 

  542. 					delete_user_sessions($user_id);

    543. 

  543. 				}

    544. 

  544. 

    545. 

  545. 				$message .= $lang['ADMIN_USER_UPDATED'];

    546. 

  546. 			}

    547. 

  547. 			else

    548. 

  548. 			{

    549. 

  549. 				$error = TRUE;

    550. 

  550. 				$error_msg .= ( ( isset($error_msg) ) ? '<br />' : '' ) . $lang['ADMIN_USER_FAIL'];

    551. 

  551. 			}

    552. 

  552. 

    553. 

  553. 			if ($this_userdata['user_level'] == MOD)

    554. 

  554. 			{

    555. 

  555. 				$datastore->update('moderators');

    556. 

  556. 			}

    557. 

  557. 

    558. 

  558. 			if ($this_userdata['user_active'] != $user_status)

    559. 

  559. 			{

    560. 

  560. 				$log_action_type = (!$user_status) ? 'adm_user_ban' : 'adm_user_unban';

    561. 

  561. 

    562. 

  562. 				$log_action->admin($log_action_type, array(

    563. 

  563. 					'log_msg' => 'user: '. get_usernames_for_log($user_id),

    564. 

  564. 				));

    565. 

  565. 			}

    566. 

  566. 

    567. 

  567. 			$message .= '<br /><br />' . sprintf($lang['CLICK_RETURN_USERADMIN'], '<a href="' . append_sid("admin_users.php") . '">', '</a>') . '<br /><br />' . sprintf($lang['CLICK_RETURN_ADMIN_INDEX'], '<a href="' . append_sid("index.php?pane=right") . '">', '</a>');

    568. 

  568. 

    569. 

  569. 			message_die(GENERAL_MESSAGE, $message);

    570. 

  570. 		}

    571. 

  571. 		else

    572. 

  572. 		{

    573. 

  573. 			$template->assign_vars(array('ERROR_MESSAGE' => $error_msg));

    574. 

  574. 

    575. 

  575. 			$username = htmlspecialchars(stripslashes($username));

    576. 

  576. 			$email = stripslashes($email);

    577. 

  577. 			$password = '';

    578. 

  578. 			$password_confirm = '';

    579. 

  579. 

    580. 

  580. 			$icq = stripslashes($icq);

    581. 

  581. 

    582. 

  582. 			$website = htmlspecialchars(stripslashes($website));

    583. 

  583. 			$location = htmlspecialchars(stripslashes($location));

    584. 

  584. 			$occupation = htmlspecialchars(stripslashes($occupation));

    585. 

  585. 			$interests = htmlspecialchars(stripslashes($interests));

    586. 

  586. 			$signature = htmlspecialchars(stripslashes($signature));

    587. 

  587. 

    588. 

  588. 			$user_lang = stripslashes($user_lang);

    589. 

  589. 			$user_dateformat = htmlspecialchars(stripslashes($user_dateformat));

    590. 

  590. 		}

    591. 

  591. 	}

    592. 

  592. 	else if( !isset( $_POST['submit'] ) && $mode != 'save' && !isset( $_POST['avatargallery'] ) && !isset( $_POST['submitavatar'] ) && !isset( $_POST['cancelavatar'] ) )

    593. 

  593. 	{

    594. 

  594. 		if( isset( $_GET[POST_USERS_URL]) || isset( $_POST[POST_USERS_URL]) )

    595. 

  595. 		{

    596. 

  596. 			$user_id = ( isset( $_POST[POST_USERS_URL]) ) ? intval( $_POST[POST_USERS_URL]) : intval( $_GET[POST_USERS_URL]);

    597. 

  597. 			$this_userdata = get_userdata($user_id);

    598. 

  598. 			if( !$this_userdata )

    599. 

  599. 			{

    600. 

  600. 				message_die(GENERAL_MESSAGE, $lang['NO_USER_ID_SPECIFIED'] );

    601. 

  601. 			}

    602. 

  602. 		}

    603. 

  603. 		else

    604. 

  604. 		{

    605. 

  605. 			$this_userdata = get_userdata($_POST['username'], true);

    606. 

  606. 			if( !$this_userdata )

    607. 

  607. 			{

    608. 

  608. 				message_die(GENERAL_MESSAGE, $lang['NO_USER_ID_SPECIFIED'] );

    609. 

  609. 			}

    610. 

  610. 		}

    611. 

  611. 

    612. 

  612. 		//

    613. 

  613. 		// Now parse and display it as a template

    614. 

  614. 		//

    615. 

  615. 		$user_id = $this_userdata['user_id'];

    616. 

  616. 		$username = $this_userdata['username'];

    617. 

  617. 		$email = $this_userdata['user_email'];

    618. 

  618. 		$password = '';

    619. 

  619. 		$password_confirm = '';

    620. 

  620. 

    621. 

  621. 		$icq = $this_userdata['user_icq'];

    622. 

  622. 

    623. 

  623. 		$website = htmlspecialchars($this_userdata['user_website']);

    624. 

  624. 		$location = htmlspecialchars($this_userdata['user_from']);

    625. 

  625. 		$user_flag = htmlspecialchars($this_userdata['user_from_flag']);

    626. 

  626. 

    627. 

  627. 		$occupation = htmlspecialchars($this_userdata['user_occ']);

    628. 

  628. 		$interests = htmlspecialchars($this_userdata['user_interests']);

    629. 

  629. 

    630. 

  630. 		$signature = ($this_userdata['user_sig_bbcode_uid'] != '') ? preg_replace('#:' . $this_userdata['user_sig_bbcode_uid'] . '#si', '', $this_userdata['user_sig']) : $this_userdata['user_sig'];

    631. 

  631. 		$signature = preg_replace($html_entities_match, $html_entities_replace, $signature);

    632. 

  632. 

    633. 

  633. 		$viewemail = bf($this_userdata['user_opt'], 'user_opt', 'viewemail');

    634. 

  634. 		$notifypm = $this_userdata['user_notify_pm'];

    635. 

  635. 		$notifyreply = $this_userdata['user_notify'];

    636. 

  636. 		$attachsig = bf($this_userdata['user_opt'], 'user_opt', 'attachsig');

    637. 

  637. 		$allowviewonline = $this_userdata['user_allow_viewonline'];

    638. 

  638. 

    639. 

  639. 		$user_avatar = $this_userdata['user_avatar'];

    640. 

  640. 		$user_avatar_type = $this_userdata['user_avatar_type'];

    641. 

  641. 		$user_timezone = $this_userdata['user_timezone'];

    642. 

  642. 

    643. 

  643. 		$user_lang       = ($this_userdata['user_lang']) ? $this_userdata['user_lang'] : $bb_cfg['default_lang'];

    644. 

  644. 		$user_dateformat = ($this_userdata['user_dateformat']) ? $this_userdata['user_dateformat'] : $bb_cfg['default_dateformat'];

    645. 

  645. 

    646. 

  646. 		$user_status = $this_userdata['user_active'];

    647. 

  647. 		$user_allowavatar = $this_userdata['user_allowavatar'];

    648. 

  648. 		$user_allowpm = $this_userdata['user_allow_pm'];

    649. 

  649. 

    650. 

  650. 		$bbcode_status = ($bb_cfg['allow_bbcode']) ? $lang['BBCODE_IS_ON'] : $lang['BBCODE_IS_OFF'];

    651. 

  651. 		$smilies_status = ($bb_cfg['allow_smilies']) ? $lang['SMILIES_ARE_ON'] : $lang['SMILIES_ARE_OFF'];

    652. 

  652. 	}

    653. 

  653. 

    654. 

  654. 	if( isset($_POST['avatargallery']) && !$error )

    655. 

  655. 	{

    656. 

  656. 		if( !$error )

    657. 

  657. 		{

    658. 

  658. 			$user_id = intval($_POST['id']);

    659. 

  659. 

    660. 

  660. 			$dir = @opendir("../" . $bb_cfg['avatar_gallery_path']);

    661. 

  661. 

    662. 

  662. 			$avatar_images = array();

    663. 

  663. 			while( $file = @readdir($dir) )

    664. 

  664. 			{

    665. 

  665. 				if( $file != "." && $file != ".." && !is_file(phpbb_realpath("./../" . $bb_cfg['avatar_gallery_path'] . "/" . $file)) && !is_link(phpbb_realpath("./../" . $bb_cfg['avatar_gallery_path'] . "/" . $file)) )

    666. 

  666. 				{

    667. 

  667. 					$sub_dir = @opendir("../" . $bb_cfg['avatar_gallery_path'] . "/" . $file);

    668. 

  668. 

    669. 

  669. 					$avatar_row_count = 0;

    670. 

  670. 					$avatar_col_count = 0;

    671. 

  671. 

    672. 

  672. 					while( $sub_file = @readdir($sub_dir) )

    673. 

  673. 					{

    674. 

  674. 						if( preg_match("/(\.gif$|\.png$|\.jpg)$/is", $sub_file) )

    675. 

  675. 						{

    676. 

  676. 							$avatar_images[$file][$avatar_row_count][$avatar_col_count] = $sub_file;

    677. 

  677. 

    678. 

  678. 							$avatar_col_count++;

    679. 

  679. 							if( $avatar_col_count == 5 )

    680. 

  680. 							{

    681. 

  681. 								$avatar_row_count++;

    682. 

  682. 								$avatar_col_count = 0;

    683. 

  683. 							}

    684. 

  684. 						}

    685. 

  685. 					}

    686. 

  686. 				}

    687. 

  687. 			}

    688. 

  688. 

    689. 

  689. 			@closedir($dir);

    690. 

  690. 

    691. 

  691. 			if( isset($_POST['avatarcategory']) )

    692. 

  692. 			{

    693. 

  693. 				$category = htmlspecialchars($_POST['avatarcategory']);

    694. 

  694. 			}

    695. 

  695. 			else

    696. 

  696. 			{

    697. 

  697. 				list($category, ) = each($avatar_images);

    698. 

  698. 			}

    699. 

  699. 			@reset($avatar_images);

    700. 

  700. 

    701. 

  701. 			$s_categories = "";

    702. 

  702. 			while( list($key) = each($avatar_images) )

    703. 

  703. 			{

    704. 

  704. 				$selected = ( $key == $category ) ? "selected=\"selected\"" : "";

    705. 

  705. 				if( count($avatar_images[$key]) )

    706. 

  706. 				{

    707. 

  707. 					$s_categories .= '<option value="' . $key . '"' . $selected . '>' . ucfirst($key) . '</option>';

    708. 

  708. 				}

    709. 

  709. 			}

    710. 

  710. 

    711. 

  711. 			$s_colspan = 0;

    712. 

  712. 			for($i = 0; $i < count($avatar_images[$category]); $i++)

    713. 

  713. 			{

    714. 

  714. 				$template->assign_block_vars("avatar_row", array());

    715. 

  715. 

    716. 

  716. 				$s_colspan = max($s_colspan, count($avatar_images[$category][$i]));

    717. 

  717. 

    718. 

  718. 				for($j = 0; $j < count($avatar_images[$category][$i]); $j++)

    719. 

  719. 				{

    720. 

  720. 					$template->assign_block_vars("avatar_row.avatar_column", array(

    721. 

  721. 						"AVATAR_IMAGE" => "../" . $bb_cfg['avatar_gallery_path'] . '/' . $category . '/' . $avatar_images[$category][$i][$j])

    722. 

  722. 					);

    723. 

  723. 

    724. 

  724. 					$template->assign_block_vars("avatar_row.avatar_option_column", array(

    725. 

  725. 						"S_OPTIONS_AVATAR" => $avatar_images[$category][$i][$j])

    726. 

  726. 					);

    727. 

  727. 				}

    728. 

  728. 			}

    729. 

  729. 

    730. 

  730. 			$s_hidden_fields = '<input type="hidden" name="mode" value="edit" /><input type="hidden" name="avatarcatname" value="' . $category . '" />';

    731. 

  731. 			$s_hidden_fields .= '<input type="hidden" name="id" value="' . $user_id . '" />';

    732. 

  732. 

    733. 

  733. 			$s_hidden_fields .= '<input type="hidden" name="username" value="' . str_replace("\"", "&quot;", $username) . '" />';

    734. 

  734. 			$s_hidden_fields .= '<input type="hidden" name="email" value="' . str_replace("\"", "&quot;", $email) . '" />';

    735. 

  735. 			$s_hidden_fields .= '<input type="hidden" name="icq" value="' . str_replace("\"", "&quot;", $icq) . '" />';

    736. 

  736. 			$s_hidden_fields .= '<input type="hidden" name="website" value="' . str_replace("\"", "&quot;", $website) . '" />';

    737. 

  737. 			$s_hidden_fields .= '<input type="hidden" name="location" value="' . str_replace("\"", "&quot;", $location) . '" />';

    738. 

  738. 

    739. 

  739. // FLAGHACK-start

    740. 

  740. 			$s_hidden_fields .= '<input type="hidden" name="user_flag" value="' . $user_flag . '" />';

    741. 

  741. // FLAGHACK-end

    742. 

  742. 

    743. 

  743. 			$s_hidden_fields .= '<input type="hidden" name="occupation" value="' . str_replace("\"", "&quot;", $occupation) . '" />';

    744. 

  744. 			$s_hidden_fields .= '<input type="hidden" name="interests" value="' . str_replace("\"", "&quot;", $interests) . '" />';

    745. 

  745. 			$s_hidden_fields .= '<input type="hidden" name="signature" value="' . str_replace("\"", "&quot;", $signature) . '" />';

    746. 

  746. 			$s_hidden_fields .= '<input type="hidden" name="viewemail" value="' . $viewemail . '" />';

    747. 

  747. 			$s_hidden_fields .= '<input type="hidden" name="notifypm" value="' . $notifypm . '" />';

    748. 

  748. 			$s_hidden_fields .= '<input type="hidden" name="notifyreply" value="' . $notifyreply . '" />';

    749. 

  749. 			$s_hidden_fields .= '<input type="hidden" name="attachsig" value="' . $attachsig . '" />';

    750. 

  750. 			$s_hidden_fields .= '<input type="hidden" name="hideonline" value="' . !$allowviewonline . '" />';

    751. 

  751. 			$s_hidden_fields .= '<input type="hidden" name="language" value="' . $user_lang . '" />';

    752. 

  752. 			$s_hidden_fields .= '<input type="hidden" name="timezone" value="' . $user_timezone . '" />';

    753. 

  753. 			$s_hidden_fields .= '<input type="hidden" name="dateformat" value="' . htmlCHR($user_dateformat) . '" />';

    754. 

  754. 

    755. 

  755. 			$s_hidden_fields .= '<input type="hidden" name="user_status" value="' . $user_status . '" />';

    756. 

  756. 			$s_hidden_fields .= '<input type="hidden" name="user_allowpm" value="' . $user_allowpm . '" />';

    757. 

  757. 			$s_hidden_fields .= '<input type="hidden" name="user_allowavatar" value="' . $user_allowavatar . '" />';

    758. 

  758. 			$s_hidden_fields .= '<input type="hidden" name="user_rank" value="' . $user_rank . '" />';

    759. 

  759. 

    760. 

  760. 			$template->assign_vars(array(

    761. 

  761. 				'TPL_ADMIN_USER_AVATAR_GALLERY' => true,

    762. 

  762. 

    763. 

  763. 				"L_USER_EXPLAIN" => $lang['USER_ADMIN_EXPLAIN'],

    764. 

  764. 

    765. 

  765. 				"S_OPTIONS_CATEGORIES" => $s_categories,

    766. 

  766. 				"S_COLSPAN" => $s_colspan,

    767. 

  767. 				"S_PROFILE_ACTION" => append_sid("admin_users.php?mode=$mode"),

    768. 

  768. 				"S_HIDDEN_FIELDS" => $s_hidden_fields)

    769. 

  769. 			);

    770. 

  770. 		}

    771. 

  771. 	}

    772. 

  772. 	else

    773. 

  773. 	{

    774. 

  774. 		$s_hidden_fields = '<input type="hidden" name="mode" value="save" />';

    775. 

  775. 		$s_hidden_fields .= '<input type="hidden" name="id" value="' . $this_userdata['user_id'] . '" />';

    776. 

  776. 

    777. 

  777. 		if( !empty($user_avatar_local) )

    778. 

  778. 		{

    779. 

  779. 			$s_hidden_fields .= '<input type="hidden" name="avatarlocal" value="' . $user_avatar_local . '" /><input type="hidden" name="avatarcatname" value="' . $user_avatar_category . '" />';

    780. 

  780. 		}

    781. 

  781. 

    782. 

  782. 		if( $user_avatar_type )

    783. 

  783. 		{

    784. 

  784. 			switch( $user_avatar_type )

    785. 

  785. 			{

    786. 

  786. 				case USER_AVATAR_UPLOAD:

    787. 

  787. 					$avatar = '<img src="../' . $bb_cfg['avatar_path'] . '/' . $user_avatar . '" alt="" />';

    788. 

  788. 					break;

    789. 

  789. 				case USER_AVATAR_REMOTE:

    790. 

  790. 					$avatar = '<img src="' . $user_avatar . '" alt="" />';

    791. 

  791. 					break;

    792. 

  792. 				case USER_AVATAR_GALLERY:

    793. 

  793. 					$avatar = '<img src="../' . $bb_cfg['avatar_gallery_path'] . '/' . $user_avatar . '" alt="" />';

    794. 

  794. 					break;

    795. 

  795. 			}

    796. 

  796. 		}

    797. 

  797. 		else

    798. 

  798. 		{

    799. 

  799. 			$avatar = "";

    800. 

  800. 		}

    801. 

  801. 

    802. 

  802. 		$sql = "SELECT * FROM " . RANKS_TABLE . "

    803. 

  803. 			WHERE rank_special = 1

    804. 

  804. 			ORDER BY rank_title";

    805. 

  805. 		if ( !($result = $db->sql_query($sql)) )

    806. 

  806. 		{

    807. 

  807. 			message_die(GENERAL_ERROR, 'Could not obtain ranks data', '', __LINE__, __FILE__, $sql);

    808. 

  808. 		}

    809. 

  809. 

    810. 

  810. 		$rank_select_box = '<option value="0">' . $lang['NO_ASSIGNED_RANK'] . '</option>';

    811. 

  811. 		while( $row = $db->sql_fetchrow($result) )

    812. 

  812. 		{

    813. 

  813. 			$rank = $row['rank_title'];

    814. 

  814. 			$rank_id = $row['rank_id'];

    815. 

  815. 

    816. 

  816. 			$selected = ( $this_userdata['user_rank'] == $rank_id ) ? ' selected="selected"' : '';

    817. 

  817. 			$rank_select_box .= '<option value="' . $rank_id . '"' . $selected . '>' . $rank . '</option>';

    818. 

  818. 		}

    819. 

  819. 

    820. 

  820. 		//

    821. 

  821. 		// Let's do an overall check for settings/versions which would prevent

    822. 

  822. 		// us from doing file uploads....

    823. 

  823. 		//

    824. 

  824. 		$ini_val = ( phpversion() >= '4.0.0' ) ? 'ini_get' : 'get_cfg_var';

    825. 

  825. 		$form_enctype = ( !@$ini_val('file_uploads') || phpversion() == '4.0.4pl1' || !$bb_cfg['allow_avatar_upload'] || ( phpversion() < '4.0.3' && @$ini_val('open_basedir') != '' ) ) ? '' : 'enctype="multipart/form-data"';

    826. 

  826. 

    827. 

  827. 		// query to get the list of flags

    828. 

  828. 		$sql = "SELECT *

    829. 

  829. 			FROM " . COUNTRIES_TABLE . "

    830. 

  830. 			ORDER BY country_id";

    831. 

  831. 		if(!$flags_result = $db->sql_query($sql))

    832. 

  832. 		{

    833. 

  833. 			message_die(GENERAL_ERROR, "Couldn't obtain flags information.", "", __LINE__, __FILE__, $sql);

    834. 

  834. 		}

    835. 

  835. 		$flag_row = $db->sql_fetchrowset($flags_result);

    836. 

  836. 		$num_flags = $db->sql_numrows($flags_result);

    837. 

  837. 	

    838. 

  838. 		// build the html select statement

    839. 

  839. 		if(!defined('COUNTRIES_LANG'))

    840. 

  840. 		{

    841. 

  841. 			include(LANG_DIR . "lang_countries.php");

    842. 

  842. 		}

    843. 

  843. 	

    844. 

  844. 		$flag_start_image = 'blank.gif' ;

    845. 

  845. 		$selected = ( isset($user_flag) ) ? '' : HTML_SELECTED;

    846. 

  846. 		$flag_select = "<select name=\"user_flag\" onChange=\"document.images['user_flag'].src = '../images/flags/' + this.value + '.png';\" >";

    847. 

  847. 		$flag_select .= "<option value=\"blank.gif\"$selected>" . $lang['SELECT_COUNTRY'] . "</option>";

    848. 

  848. 		

    849. 

  849. 		for ($i = 0; $i < $num_flags; $i++)

    850. 

  850. 		{

    851. 

  851. 			$country_code = $flag_row[$i]['country_code'];

    852. 

  852. 			$country_name = $lang['COUNTRIES'][$country_code];

    853. 

  853. 			$flag_image = $country_code . '.png';

    854. 

  854. 			$selected = ( isset( $user_flag) ) ? (($user_flag == $country_code) ? HTML_SELECTED : '' ) : '' ;

    855. 

  855. 			$flag_select .= "\t<option value=\"$country_code\"$selected>$country_name</option>";

    856. 

  856. 			if ( isset( $user_flag) && ($user_flag == $country_code))

    857. 

  857. 			{

    858. 

  858. 				$flag_start_image = $flag_image ;

    859. 

  859. 			}

    860. 

  860. 		}

    861. 

  861. 		$flag_select .= '</select>';

    862. 

  862. 

    863. 

  863. 		$template->assign_vars(array(

    864. 

  864. 			'TPL_ADMIN_USER_EDIT' => true,

    865. 

  865. 

    866. 

  866. 			'USERNAME' => $username,

    867. 

  867. 			'EMAIL' => $email,

    868. 

  868. 			'ICQ' => $icq,

    869. 

  869. 			'OCCUPATION' => $occupation,

    870. 

  870. 			'INTERESTS' => $interests,

    871. 

  871. 			'LOCATION' => $location,

    872. 

  872. 			'L_FLAG' => $lang['COUNTRY_FLAG'],

    873. 

  873. 			'FLAG_SELECT' => $flag_select,

    874. 

  874. 			'FLAG_START' => $flag_start_image,

    875. 

  875. 

    876. 

  876. 			'WEBSITE' => $website,

    877. 

  877. 			'SIGNATURE' => str_replace('<br />', "\n", $signature),

    878. 

  878. 			'VIEW_EMAIL_YES' => ($viewemail) ? 'checked="checked"' : '',

    879. 

  879. 			'VIEW_EMAIL_NO' => (!$viewemail) ? 'checked="checked"' : '',

    880. 

  880. 			'HIDE_USER_YES' => (!$allowviewonline) ? 'checked="checked"' : '',

    881. 

  881. 			'HIDE_USER_NO' => ($allowviewonline) ? 'checked="checked"' : '',

    882. 

  882. 			'NOTIFY_PM_YES' => ($notifypm) ? 'checked="checked"' : '',

    883. 

  883. 			'NOTIFY_PM_NO' => (!$notifypm) ? 'checked="checked"' : '',

    884. 

  884. 			'ALWAYS_ADD_SIGNATURE_YES' => ($attachsig) ? 'checked="checked"' : '',

    885. 

  885. 			'ALWAYS_ADD_SIGNATURE_NO' => (!$attachsig) ? 'checked="checked"' : '',

    886. 

  886. 			'NOTIFY_REPLY_YES' => ( $notifyreply ) ? 'checked="checked"' : '',

    887. 

  887. 			'NOTIFY_REPLY_NO' => ( !$notifyreply ) ? 'checked="checked"' : '',

    888. 

  888. 			'ADMIN_AVATAR' => $avatar,

    889. 

  889. 			'LANGUAGE_SELECT' => language_select($user_lang),

    890. 

  890. 			'TIMEZONE_SELECT' => tz_select($user_timezone),

    891. 

  891. 			'STYLE_SELECT' => $bb_cfg['tpl_name'],

    892. 

  892. 			'DATE_FORMAT' => $user_dateformat,

    893. 

  893. 			'ALLOW_PM_YES' => ($user_allowpm) ? 'checked="checked"' : '',

    894. 

  894. 			'ALLOW_PM_NO' => (!$user_allowpm) ? 'checked="checked"' : '',

    895. 

  895. 			'ALLOW_AVATAR_YES' => ($user_allowavatar) ? 'checked="checked"' : '',

    896. 

  896. 			'ALLOW_AVATAR_NO' => (!$user_allowavatar) ? 'checked="checked"' : '',

    897. 

  897. 			'USER_ACTIVE_YES' => ($user_status) ? 'checked="checked"' : '',

    898. 

  898. 			'USER_ACTIVE_NO' => (!$user_status) ? 'checked="checked"' : '',

    899. 

  899. 			'RANK_SELECT_BOX' => $rank_select_box,

    900. 

  900. 

    901. 

  901. 			'L_USER_EXPLAIN' => $lang['USER_ADMIN_EXPLAIN'],

    902. 

  902. 			'L_BOARD_LANGUAGE' => $lang['BOARD_LANG'],

    903. 

  903. 			'L_ALWAYS_ADD_SIGNATURE' => $lang['ALWAYS_ADD_SIG'],

    904. 

  904. 

    905. 

  905. 			'L_SPECIAL' => $lang['USER_SPECIAL'],

    906. 

  906. 			'L_SPECIAL_EXPLAIN' => $lang['USER_SPECIAL_EXPLAIN'],

    907. 

  907. 			'L_USER_ACTIVE' => $lang['USER_STATUS'],

    908. 

  908. 			'L_ALLOW_PM' => $lang['USER_ALLOWPM'],

    909. 

  909. 			'L_ALLOW_AVATAR' => $lang['USER_ALLOWAVATAR'],

    910. 

  910. 

    911. 

  911. 			'L_AVATAR_EXP' => $lang['ADMIN_AVATAR_EXPLAIN'],

    912. 

  912. 			'L_DELETE_AVATAR' => $lang['DELETE_IMAGE'],

    913. 

  913. 			'L_AVATAR_GALLERY' => $lang['SELECT_FROM_GALLERY'],

    914. 

  914. 			'L_SHOW_GALLERY' => $lang['VIEW_AVATAR_GALLERY'],

    915. 

  915. 			'L_LINK_REMOTE_AVATAR' => $lang['LINK_REMOTE_AVATAR'],

    916. 

  916. 

    917. 

  917. 			'L_SIGNATURE_EXP' => sprintf($lang['SIGNATURE_EXPLAIN'], $bb_cfg['max_sig_chars'] ),

    918. 

  918. 			'L_NOTIFY_ON_REPLY' => $lang['ALWAYS_NOTIFY'],

    919. 

  919. 			'L_PROFILE_INFO_NOTICE' => $lang['PROFILE_INFO_WARN'],

    920. 

  920. 			'S_FORM_ENCTYPE' => $form_enctype,

    921. 

  921. 

    922. 

  922. 			'BBCODE_STATUS' => sprintf(@$bbcode_status, '<a href="../' . append_sid("faq.php?mode=bbcode") . '" target="_phpbbcode">', '</a>'),

    923. 

  923. 			'SMILIES_STATUS' => @$smilies_status,

    924. 

  924. 

    925. 

  925. 			'L_DELETE_USER' => $lang['USER_DELETE'],

    926. 

  926. 			'L_DELETE_USER_EXPLAIN' => $lang['USER_DELETE_EXPLAIN'],

    927. 

  927. 			'L_SELECT_RANK' => $lang['RANK_TITLE'],

    928. 

  928. 

    929. 

  929. 			'S_HIDDEN_FIELDS' => $s_hidden_fields,

    930. 

  930. 			'S_PROFILE_ACTION' => append_sid("admin_users.php"))

    931. 

  931. 		);

    932. 

  932. 

    933. 

  933. 		if( file_exists(@phpbb_realpath('./../' . $bb_cfg['avatar_path'])) && ($bb_cfg['allow_avatar_upload'] == TRUE) )

    934. 

  934. 		{

    935. 

  935. 			if ( $form_enctype != '' )

    936. 

  936. 			{

    937. 

  937. 				$template->assign_block_vars('avatar_local_upload', array() );

    938. 

  938. 			}

    939. 

  939. 			$template->assign_block_vars('avatar_remote_upload', array() );

    940. 

  940. 		}

    941. 

  941. 

    942. 

  942. 		if( file_exists(@phpbb_realpath('./../' . $bb_cfg['avatar_gallery_path'])) && ($bb_cfg['allow_avatar_local'] == TRUE) )

    943. 

  943. 		{

    944. 

  944. 			$template->assign_block_vars('avatar_local_gallery', array() );

    945. 

  945. 		}

    946. 

  946. 

    947. 

  947. 		if( $bb_cfg['allow_avatar_remote'] == TRUE )

    948. 

  948. 		{

    949. 

  949. 			$template->assign_block_vars('avatar_remote_link', array() );

    950. 

  950. 		}

    951. 

  951. 	}

    952. 

  952. }

    953. 

  953. else

    954. 

  954. {

    955. 

  955. 	//

    956. 

  956. 	// Default user selection box

    957. 

  957. 	//

    958. 

  958. 	$template->assign_vars(array(

    959. 

  959. 		'TPL_ADMIN_USER_SELECT' => true,

    960. 

  960. 

    961. 

  961. 		'L_USER_EXPLAIN' => $lang['USER_ADMIN_EXPLAIN'],

    962. 

  962. 

    963. 

  963. 		'U_SEARCH_USER' => append_sid("./../search.php?mode=searchuser"),

    964. 

  964. 

    965. 

  965. 		'S_USER_ACTION' => append_sid("admin_users.php"),

    966. 

  966. 		'S_USER_SELECT' => @$select_list)

    967. 

  967. 	);

    968. 

  968. }

    969. 

  969. 

    970. 

  970. print_page('admin_users.tpl', 'admin');
    971.