PageRenderTime 31ms CodeModel.GetById 20ms RepoModel.GetById 1ms app.codeStats 0ms

/upload/includes/ucp/usercp_register.php

http://torrentpier2.googlecode.com/
PHP | 791 lines | 627 code | 83 blank | 81 comment | 163 complexity | 99652ee64ee5d919219529210a634f6f MD5 | raw file
    

  1. <?php

    2. 

  2. 

    3. 

  3. if (!defined('BB_ROOT')) die(basename(__FILE__));

    4. 

  4. 

    5. 

  5. array_deep($_POST, 'trim');

    6. 

  6. 

    7. 

  7. set_die_append_msg();

    8. 

  8. 

    9. 

  9. if (IS_ADMIN)

    10. 

  10. {

    11. 

  11. 	$bb_cfg['reg_email_activation'] = false;

    12. 

  12. 

    13. 

  13. 	$new_user = (int) request_var('admin', '');

    14. 

  14. 	if ($new_user) $gen_simple_header = true;

    15. 

  15. 

    16. 

  16. 	$template->assign_vars(array(

    17. 

  17. 		'NEW_USER'  => $new_user,

    18. 

  18. 	));

    19. 

  19. }

    20. 

  20. 

    21. 

  21. $can_register = (IS_GUEST || IS_ADMIN);

    22. 

  22. 

    23. 

  23. $submit   = !empty($_POST['submit']);

    24. 

  24. $errors   = array();

    25. 

  25. $adm_edit = false; // ?????????????? ??????? ?????? ???????

    26. 

  26. 

    27. 

  27. require(INC_DIR .'bbcode.php');

    28. 

  28. require(INC_DIR .'functions_validate.php');

    29. 

  29. require(INC_DIR .'functions_selects.php');

    30. 

  30. 

    31. 

  31. $pr_data = array();   // ?????? ?????????????? ???? ???????????????? ???????

    32. 

  32. $db_data = array();   // ?????? ??? ????: ??????????????? ???? ?????????? ?????? ?????

    33. 

  33. $tp_data = array();   // ?????? ??? tpl

    34. 

  34. 

    35. 

  35. // ?????? ???????

    36. 

  36. switch ($mode)

    37. 

  37. {

    38. 

  38. 	/**

    39. 

  39. 	*  ???????????

    40. 

  40. 	*/

    41. 

  41. 	case 'register':

    42. 

  42. 		if (!$can_register)

    43. 

  43. 		{

    44. 

  44. 			redirect('index.php');

    45. 

  45. 		}

    46. 

  46. 		if (!IS_ADMIN)

    47. 

  47. 		{

    48. 

  48. 			// ??????????? ?? ip

    49. 

  49. 			if($bb_cfg['unique_ip'])

    50. 

  50. 			{

    51. 

  51. 				if($users = DB()->fetch_row("SELECT user_id, username FROM ". BB_USERS ." WHERE user_reg_ip = '". USER_IP ."' LIMIT 1"))

    52. 

  52. 				{

    53. 

  53. 					bb_die(sprintf($lang['ALREADY_REG_IP'], '<a href="'. PROFILE_URL . $users['user_id'] .'"><b>'. $users['username'] .'</b></a>', $bb_cfg['tech_admin_email']));

    54. 

  54. 				}

    55. 

  55. 			}

    56. 

  56. 			// ?????????? ???????????

    57. 

  57. 			if ($bb_cfg['new_user_reg_disabled'] || ($bb_cfg['reg_email_activation'] && $bb_cfg['emailer_disabled']))

    58. 

  58. 			{

    59. 

  59. 				bb_die($lang['NEW_USER_REG_DISABLED']);

    60. 

  60. 			}

    61. 

  61. 			// ??????????? ?? ???????

    62. 

  62. 			else if ($bb_cfg['new_user_reg_restricted'])

    63. 

  63. 			{

    64. 

  64. 				if (in_array(date('G'), array(0,/*1,2,3,4,5,6,7,8,11,12,13,14,15,16,*/17,18,19,20,21,22,23)))

    65. 

  65. 				{

    66. 

  66. 					bb_die($lang['REGISTERED_IN_TIME']);

    67. 

  67. 				}

    68. 

  68. 			}

    69. 

  69. 		}

    70. 

  70. 

    71. 

  71. 		// field => can_edit

    72. 

  72. 		$profile_fields = array(

    73. 

  73. 			'username'         => true,

    74. 

  74. 			'user_password'    => true,

    75. 

  75. 			'user_email'       => true,

    76. 

  76. 			'user_timezone'    => true,

    77. 

  77. 			'user_lang'        => true,

    78. 

  78. 		);

    79. 

  79. 

    80. 

  80. 		$pr_data = array(

    81. 

  81. 			'user_id'          => GUEST_UID,

    82. 

  82. 			'username'         => '',

    83. 

  83. 			'user_password'    => '',

    84. 

  84. 			'user_email'       => '',

    85. 

  85. 			'user_timezone'    => $bb_cfg['board_timezone'],

    86. 

  86. 			'user_lang'        => $bb_cfg['default_lang'],

    87. 

  87. 			'user_opt'         => 0,

    88. 

  88. 			'avatar_ext_id'    => 0,

    89. 

  89. 		);

    90. 

  90. 		break;

    91. 

  91. 

    92. 

  92. 	/**

    93. 

  93. 	*  ?????????????? ???????

    94. 

  94. 	*/

    95. 

  95. 	case 'editprofile':

    96. 

  96. 		if (IS_GUEST)

    97. 

  97. 		{

    98. 

  98. 			login_redirect();

    99. 

  99. 		}

    100. 

  100. 

    101. 

  101. 		// field => can_edit

    102. 

  102. 		$profile_fields = array(

    103. 

  103. 			'user_active'      => IS_ADMIN,

    104. 

  104. 			'username'         => (IS_ADMIN || $bb_cfg['allow_namechange']),

    105. 

  105. 			'user_password'    => true,

    106. 

  106. 			'user_email'       => true, // ?????? ???? ????? user_password

    107. 

  107. 			'user_lang'        => true,

    108. 

  108. 			'user_gender'      => true,

    109. 

  109. 			'user_birthday'    => true,

    110. 

  110. 			'user_timezone'    => true,

    111. 

  111. 			'user_opt'         => true,

    112. 

  112. 			'avatar_ext_id'    => true,

    113. 

  113. 			'user_icq'         => true,

    114. 

  114. 			'user_skype'       => true,

    115. 

  115. 			'user_website'     => true,

    116. 

  116. 			'user_from'        => true,

    117. 

  117. 			'user_sig'         => true,

    118. 

  118. 			'user_occ'         => true,

    119. 

  119. 			'user_interests'   => true,

    120. 

  120. 			'tpl_name'         => true,

    121. 

  121. 		);

    122. 

  122. 

    123. 

  123. 		// ????? ???????: ??? ????? ????, ??? ?????? ?????

    124. 

  124. 		if (IS_ADMIN && !empty($_REQUEST['u']))

    125. 

  125. 		{

    126. 

  126. 			$pr_user_id = (int) $_REQUEST['u'];

    127. 

  127. 			$adm_edit   = ($pr_user_id != $userdata['user_id']);

    128. 

  128. 		}

    129. 

  129. 		else

    130. 

  130. 		{

    131. 

  131. 			$pr_user_id = $userdata['user_id'];

    132. 

  132. 		}

    133. 

  133. 		$profile_fields_sql = join(', ', array_keys($profile_fields));

    134. 

  134. 		$sql = "

    135. 

  135. 			SELECT

    136. 

  136. 				user_id,

    137. 

  137. 				user_rank,

    138. 

  138. 				user_level,

    139. 

  139. 				user_email,

    140. 

  140. 				$profile_fields_sql

    141. 

  141. 			FROM ". BB_USERS ."

    142. 

  142. 			WHERE user_id = $pr_user_id

    143. 

  143. 			LIMIT 1

    144. 

  144. 		";

    145. 

  145. 		if (!$pr_data = DB()->fetch_row($sql))

    146. 

  146. 		{

    147. 

  147. 			bb_die($lang['PROFILE_NOT_FOUND']);

    148. 

  148. 		}

    149. 

  149. 		break;

    150. 

  150. 

    151. 

  151. 	default:

    152. 

  152. 		trigger_error("invalid mode: $mode", E_USER_ERROR);

    153. 

  153. }

    154. 

  154. 

    155. 

  155. // CAPTCHA

    156. 

  156. $need_captcha = ($mode == 'register' && !IS_ADMIN);

    157. 

  157. 

    158. 

  158. if ($submit)

    159. 

  159. {

    160. 

  160. 	if ($need_captcha && !CAPTCHA()->verify_code())

    161. 

  161. 	{

    162. 

  162. 		$errors[] = $lang['CONFIRM_CODE_WRONG'];

    163. 

  163. 	}

    164. 

  164. }

    165. 

  165. 

    166. 

  166. // ????????? ??????

    167. 

  167. $cur_pass_valid = $adm_edit;

    168. 

  168. 

    169. 

  169. foreach ($profile_fields as $field => $can_edit)

    170. 

  170. {

    171. 

  171. 	switch ($field)

    172. 

  172. 	{

    173. 

  173. 	/**

    174. 

  174. 	*  ????????? (edit, reg)

    175. 

  175. 	*/

    176. 

  176. 	case 'user_active':

    177. 

  177. 		$active = isset($_POST['user_active']) ? (int) $_POST['user_active'] : $pr_data['user_active'];

    178. 

  178. 		if ($submit && $adm_edit)

    179. 

  179. 		{

    180. 

  180. 			$pr_data['user_active'] = $active;

    181. 

  181. 			$db_data['user_active'] = $active;

    182. 

  182. 		}

    183. 

  183. 		break;

    184. 

  184. 

    185. 

  185. 	/**

    186. 

  186. 	*  ??? (edit, reg)

    187. 

  187. 	*/

    188. 

  188. 	case 'username':

    189. 

  189. 		$username = !empty($_POST['username']) ? clean_username($_POST['username']) : $pr_data['username'];

    190. 

  190. 

    191. 

  191. 		if ($submit)

    192. 

  192. 		{

    193. 

  193. 			$err = validate_username($username);

    194. 

  194. 			if (!$errors AND $err && $mode == 'register')

    195. 

  195. 			{

    196. 

  196. 				$errors[] = $err;

    197. 

  197. 			}

    198. 

  198. 			if ($can_edit && $username != $pr_data['username'] || $mode == 'register')

    199. 

  199. 			{

    200. 

  200. 				$pr_data['username'] = $username;

    201. 

  201. 				$db_data['username'] = $username;

    202. 

  202. 			}

    203. 

  203. 		}

    204. 

  204. 		$tp_data['CAN_EDIT_USERNAME'] = $can_edit;

    205. 

  205. 		$tp_data['USERNAME'] = $pr_data['username'];

    206. 

  206. 		break;

    207. 

  207. 

    208. 

  208. 	/**

    209. 

  209. 	*  ?????? (edit, reg)

    210. 

  210. 	*/

    211. 

  211. 	case 'user_password':

    212. 

  212. 		if ($submit)

    213. 

  213. 		{

    214. 

  214. 			$cur_pass = (string) @$_POST['cur_pass'];

    215. 

  215. 			$new_pass = (string) @$_POST['new_pass'];

    216. 

  216. 			$cfm_pass = (string) @$_POST['cfm_pass'];

    217. 

  217. 

    218. 

  218. 			// ?????? ??? ????? ? ??? ????? ?????? ??????

    219. 

  219. 			if (!empty($new_pass))

    220. 

  220. 			{

    221. 

  221. 				if (mb_strlen($new_pass, 'UTF-8') > 20)

    222. 

  222. 				{

    223. 

  223. 					$errors[] = sprintf($lang['CHOOSE_PASS_ERR_MAX'], 20);

    224. 

  224. 				}

    225. 

  225. 				elseif (mb_strlen($new_pass, 'UTF-8') < 4)

    226. 

  226. 				{

    227. 

  227. 					$errors[] = sprintf($lang['CHOOSE_PASS_ERR_MIN'], 4);

    228. 

  228. 				}

    229. 

  229. 				elseif ($new_pass != $cfm_pass)

    230. 

  230. 				{

    231. 

  231. 					$errors[] = $lang['CHOOSE_PASS_ERR'];

    232. 

  232. 				}

    233. 

  233. 				$db_data['user_password'] = md5(md5($new_pass));

    234. 

  234. 			}

    235. 

  235. 

    236. 

  236. 			if ($mode == 'register')

    237. 

  237. 			{

    238. 

  238. 				if (empty($new_pass))

    239. 

  239. 				{

    240. 

  240. 					$errors[] = $lang['CHOOSE_PASS'];

    241. 

  241. 				}

    242. 

  242. 			}

    243. 

  243. 			else

    244. 

  244. 			{

    245. 

  245. 				if (!empty($cur_pass))

    246. 

  246. 				{

    247. 

  247. 					$cur_pass_valid = ($pr_data['user_password'] === md5(md5($cur_pass)));

    248. 

  248. 				}

    249. 

  249. 				if (!empty($new_pass) && !$cur_pass_valid)

    250. 

  250. 				{

    251. 

  251. 					$errors[] = $lang['CHOOSE_PASS_FAILED'];

    252. 

  252. 				}

    253. 

  253. 			}

    254. 

  254. 		}

    255. 

  255. 		break;

    256. 

  256. 

    257. 

  257. 	/**

    258. 

  258. 	*  E-mail (edit, reg)

    259. 

  259. 	*/

    260. 

  260. 	case 'user_email':

    261. 

  261. 		$email = !empty($_POST['user_email']) ? (string) $_POST['user_email'] : $pr_data['user_email'];

    262. 

  262. 		if ($submit)

    263. 

  263. 		{

    264. 

  264. 			if ($mode == 'register')

    265. 

  265. 			{

    266. 

  266. 				if (empty($email))

    267. 

  267. 				{

    268. 

  268. 					$errors[] = $lang['CHOOSE_E_MAIL'];

    269. 

  269. 				}

    270. 

  270. 				if (!$errors AND $err = validate_email($email))

    271. 

  271. 				{

    272. 

  272. 					$errors[] = $err;

    273. 

  273. 				}

    274. 

  274. 				$db_data['user_email'] = $email;

    275. 

  275. 			}

    276. 

  276. 			else if ($email != $pr_data['user_email']) // ???? ????? ????? ??????

    277. 

  277. 			{

    278. 

  278. 				if (!$cur_pass_valid)

    279. 

  279. 				{

    280. 

  280. 					$errors[] = $lang['CONFIRM_PASSWORD_EXPLAIN'];

    281. 

  281. 				}

    282. 

  282. 				if (!$errors AND $err = validate_email($email))

    283. 

  283. 				{

    284. 

  284. 					$errors[] = $err;

    285. 

  285. 				}

    286. 

  286. 				if ($bb_cfg['reg_email_activation'])

    287. 

  287. 				{

    288. 

  288. 					$pr_data['user_active'] = 0;

    289. 

  289. 					$db_data['user_active'] = 0;

    290. 

  290. 				}

    291. 

  291. 				$db_data['user_email'] = $email;

    292. 

  292. 			}

    293. 

  293. 		}

    294. 

  294. 		$tp_data['USER_EMAIL'] = htmlCHR($email);

    295. 

  295. 		break;

    296. 

  296. 

    297. 

  297. 	/**

    298. 

  298. 	*  ???? (edit, reg)

    299. 

  299. 	*/

    300. 

  300. 	case 'user_lang':

    301. 

  301. 		$user_lang = isset($_POST['user_lang']) ? (string) $_POST['user_lang'] : $pr_data['user_lang'];

    302. 

  302. 		if ($submit && ($user_lang != $pr_data['user_lang'] || $mode == 'register'))

    303. 

  303. 		{

    304. 

  304. 			$pr_data['user_lang'] = $user_lang;

    305. 

  305. 			$db_data['user_lang'] = $user_lang;

    306. 

  306. 		}

    307. 

  307. 		break;

    308. 

  308. 

    309. 

  309. 	/**

    310. 

  310. 	*  ??????? ???? (edit, reg)

    311. 

  311. 	*/

    312. 

  312. 	case 'user_timezone':

    313. 

  313. 		$user_timezone = isset($_POST['user_timezone']) ? (int) $_POST['user_timezone'] : $pr_data['user_timezone'];

    314. 

  314. 		if ($submit && ($user_timezone != $pr_data['user_timezone'] || $mode == 'register'))

    315. 

  315. 		{

    316. 

  316. 			if (isset($lang['TZ'][$user_timezone]))

    317. 

  317. 			{

    318. 

  318. 				$pr_data['user_timezone'] = $user_timezone;

    319. 

  319. 				$db_data['user_timezone'] = $user_timezone;

    320. 

  320. 			}

    321. 

  321. 		}

    322. 

  322. 		break;

    323. 

  323. 

    324. 

  324. 	/**

    325. 

  325. 	*  ??? (edit, reg)

    326. 

  326. 	*/

    327. 

  327. 	case 'user_gender':

    328. 

  328. 		$gender = isset($_POST['user_gender']) ? (int) $_POST['user_gender'] : $pr_data['user_gender'];

    329. 

  329. 		if ($submit && $gender != $pr_data['user_gender'])

    330. 

  330. 		{

    331. 

  331. 			$pr_data['user_gender'] = $gender;

    332. 

  332. 			$db_data['user_gender'] = $gender;

    333. 

  333. 		}

    334. 

  334. 		$tp_data['USER_GENDER'] = build_select('user_gender', array_flip($lang['GENDER_SELECT']), $pr_data['user_gender']);

    335. 

  335. 		break;

    336. 

  336. 

    337. 

  337.     /**

    338. 

  338. 	*  ??????? (edit)

    339. 

  339. 	*/

    340. 

  340. 	case 'user_birthday':

    341. 

  341. 		$user_birthday = ($pr_data['user_birthday'] != '0000-00-00') ? strtotime($pr_data['user_birthday']) : false;

    342. 

  342. 

    343. 

  343. 		$b_day  = (isset($_POST['b_day'])) ? (int) $_POST['b_day'] : (($user_birthday) ? date('j', $user_birthday) : 0);

    344. 

  344. 		$b_md   = (isset($_POST['b_md'])) ? (int) $_POST['b_md'] : (($user_birthday) ? date('n', $user_birthday) : 0);

    345. 

  345. 		$b_year = (isset($_POST['b_year'])) ? (int) $_POST['b_year'] : (($user_birthday) ? date('Y', $user_birthday) : 0);

    346. 

  346. 

    347. 

  347. 		if ($b_day || $b_md || $b_year)

    348. 

  348. 		{

    349. 

  349. 			if (!checkdate($b_md, $b_day, $b_year))

    350. 

  350. 			{

    351. 

  351. 				$errors[] = $lang['WRONG_BIRTHDAY_FORMAT'];

    352. 

  352. 				$birthday = '';

    353. 

  353. 				$next_birthday_greeting = 0;

    354. 

  354. 			}

    355. 

  355. 			else

    356. 

  356. 			{

    357. 

  357. 				$birthday = "$b_year-$b_md-$b_day";

    358. 

  358. 				$next_birthday_greeting = (date('md') < $b_md . (($b_day <= 9) ? '0' : '') . $b_day) ? date('Y') : date('Y') + 1;

    359. 

  359. 			}

    360. 

  360. 		}

    361. 

  361. 		else

    362. 

  362. 		{

    363. 

  363. 			$birthday = '';

    364. 

  364. 			$next_birthday_greeting = 0;

    365. 

  365. 		}

    366. 

  366. 

    367. 

  367. 		if ($submit && $birthday != $pr_data['user_birthday'])

    368. 

  368. 		{

    369. 

  369. 			$pr_data['user_birthday'] = $birthday;

    370. 

  370. 			$db_data['user_birthday'] = $birthday;

    371. 

  371. 			$db_data['user_next_birthday_greeting'] = $next_birthday_greeting;

    372. 

  372. 		}

    373. 

  373. 		break;

    374. 

  374. 

    375. 

  375. 	/**

    376. 

  376. 	*  opt (edit)

    377. 

  377. 	*/

    378. 

  378. 	case 'user_opt':

    379. 

  379. 		$user_opt = $pr_data['user_opt'];

    380. 

  380. 

    381. 

  381. 		$update_user_opt = array(

    382. 

  382. 			'viewemail'        => true,

    383. 

  383. 			'allow_viewonline' => true,

    384. 

  384. 			'notify'           => true,

    385. 

  385. 			'notify_pm'        => true,

    386. 

  386. 			'hide_porn_forums' => true,

    387. 

  387. 			'allow_dls'        => true,

    388. 

  388. 		);

    389. 

  389. 		foreach ($update_user_opt as $opt => $can_change_opt)

    390. 

  390. 		{

    391. 

  391. 			if ($submit && $can_change_opt && isset($_POST[$opt]))

    392. 

  392. 			{

    393. 

  393. 				setbit($user_opt, $bf['user_opt'][$opt], !empty($_POST[$opt]));

    394. 

  394. 			}

    395. 

  395. 			$tp_data[strtoupper($opt)] = bf($user_opt, 'user_opt', $opt);

    396. 

  396. 		}

    397. 

  397. 		if ($submit && $user_opt != $pr_data['user_opt'])

    398. 

  398. 		{

    399. 

  399. 			$pr_data['user_opt'] = $user_opt;

    400. 

  400. 			$db_data['user_opt'] = (int) $user_opt;

    401. 

  401. 		}

    402. 

  402. 		break;

    403. 

  403. 

    404. 

  404. 	/**

    405. 

  405. 	 *  Avatar (edit)

    406. 

  406. 	 */

    407. 

  407. 	case 'avatar_ext_id':

    408. 

  408. 		if ($submit && !bf($pr_data['user_opt'], 'user_opt', 'allow_avatar'))

    409. 

  409. 		{

    410. 

  410. 			if (isset($_POST['delete_avatar']))

    411. 

  411. 			{

    412. 

  412. 				delete_avatar($pr_data['user_id'], $pr_data['avatar_ext_id']);

    413. 

  413. 				$pr_data['avatar_ext_id'] = 0;

    414. 

  414. 				$db_data['avatar_ext_id'] = 0;

    415. 

  415. 			}

    416. 

  416. 			else if (!empty($_FILES['avatar']['name']) && $bb_cfg['avatars']['up_allowed'])

    417. 

  417. 			{

    418. 

  418. 				require(INC_DIR .'functions_upload.php');

    419. 

  419. 				$upload = new upload_common();

    420. 

  420. 

    421. 

  421. 				if ($upload->init($bb_cfg['avatars'], $_FILES['avatar']) AND $upload->store('avatar', $pr_data))

    422. 

  422. 				{

    423. 

  423. 					$pr_data['avatar_ext_id'] = $upload->file_ext_id;

    424. 

  424. 					$db_data['avatar_ext_id'] = (int) $upload->file_ext_id;

    425. 

  425. 				}

    426. 

  426. 				else

    427. 

  427. 				{

    428. 

  428. 					$errors = array_merge($errors, $upload->errors);

    429. 

  429. 				}

    430. 

  430. 			}

    431. 

  431. 		}

    432. 

  432. 		break;

    433. 

  433. 

    434. 

  434. 	/**

    435. 

  435. 	*  ICQ (edit)

    436. 

  436. 	*/

    437. 

  437. 	case 'user_icq':

    438. 

  438. 		$icq = isset($_POST['user_icq']) ? (string) $_POST['user_icq'] : $pr_data['user_icq'];

    439. 

  439. 		if ($submit && $icq != $pr_data['user_icq'])

    440. 

  440. 		{

    441. 

  441. 			if ($icq == '' || preg_match('#^\d{6,15}$#', $icq))

    442. 

  442. 			{

    443. 

  443. 				$pr_data['user_icq'] = $icq;

    444. 

  444. 				$db_data['user_icq'] = (string) $icq;

    445. 

  445. 			}

    446. 

  446. 			else

    447. 

  447. 			{

    448. 

  448. 				$pr_data['user_icq'] = '';

    449. 

  449. 				$errors[] = htmlCHR($lang['ICQ_ERROR']);

    450. 

  450. 			}

    451. 

  451. 		}

    452. 

  452. 		$tp_data['USER_ICQ'] = $pr_data['user_icq'];

    453. 

  453. 		break;

    454. 

  454. 

    455. 

  455. 	/**

    456. 

  456. 	*  ???? (edit)

    457. 

  457. 	*/

    458. 

  458. 	case 'user_website':

    459. 

  459. 		$website = isset($_POST['user_website']) ? (string) $_POST['user_website'] : $pr_data['user_website'];

    460. 

  460. 		$website = htmlCHR($website);

    461. 

  461. 		if ($submit && $website != $pr_data['user_website'])

    462. 

  462. 		{

    463. 

  463. 			if ($website == '' || preg_match('#^https?://[\w\#!$%&~/.\-;:=,?@?-??-?\[\]+]+$#iu', $website))

    464. 

  464. 			{

    465. 

  465. 				$pr_data['user_website'] = $website;

    466. 

  466. 				$db_data['user_website'] = (string) $website;

    467. 

  467. 			}

    468. 

  468. 			else

    469. 

  469. 			{

    470. 

  470. 				$pr_data['user_website'] = '';

    471. 

  471. 				$errors[] = htmlCHR($lang['WEBSITE_ERROR']);

    472. 

  472. 			}

    473. 

  473. 		}

    474. 

  474. 		$tp_data['USER_WEBSITE'] = $pr_data['user_website'];

    475. 

  475. 		break;

    476. 

  476. 

    477. 

  477. 	/**

    478. 

  478. 	*  ?????? (edit)

    479. 

  479. 	*/

    480. 

  480. 	case 'user_from':

    481. 

  481. 		$from = isset($_POST['user_from']) ? (string) $_POST['user_from'] : $pr_data['user_from'];

    482. 

  482. 		$from = htmlCHR($from);

    483. 

  483. 		if ($submit && $from != $pr_data['user_from'])

    484. 

  484. 		{

    485. 

  485. 			$pr_data['user_from'] = $from;

    486. 

  486. 			$db_data['user_from'] = (string) $from;

    487. 

  487. 		}

    488. 

  488. 		$tp_data['USER_FROM'] = $pr_data['user_from'];

    489. 

  489. 		break;

    490. 

  490. 

    491. 

  491. 	/**

    492. 

  492. 	*  ??????? (edit)

    493. 

  493. 	*/

    494. 

  494. 	case 'user_sig':

    495. 

  495. 		$sig = isset($_POST['user_sig']) ? (string) $_POST['user_sig'] : $pr_data['user_sig'];

    496. 

  496. 		if ($submit && $sig != $pr_data['user_sig'])

    497. 

  497. 		{

    498. 

  498. 			$sig = prepare_message($sig);

    499. 

  499. 

    500. 

  500. 			if (mb_strlen($sig, 'UTF-8') > $bb_cfg['max_sig_chars'])

    501. 

  501. 			{

    502. 

  502. 				$errors[] = $lang['SIGNATURE_TOO_LONG'];

    503. 

  503. 			}

    504. 

  504. 			else if (preg_match('#<(a|b|i|u|table|tr|td|img) #i', $sig) || preg_match('#(href|src|target|title)=#i', $sig))

    505. 

  505. 			{

    506. 

  506. 				$errors[] = $lang['SIGNATURE_ERROR_HTML'];

    507. 

  507. 			}

    508. 

  508. 

    509. 

  509. 			$pr_data['user_sig'] = $sig;

    510. 

  510. 			$db_data['user_sig'] = (string) $sig;

    511. 

  511. 		}

    512. 

  512. 		$tp_data['USER_SIG'] = $pr_data['user_sig'];

    513. 

  513. 		break;

    514. 

  514. 

    515. 

  515. 	/**

    516. 

  516. 	*  ??? ??????? (edit)

    517. 

  517. 	*/

    518. 

  518. 	case 'user_occ':

    519. 

  519. 		$occ = isset($_POST['user_occ']) ? (string) $_POST['user_occ'] : $pr_data['user_occ'];

    520. 

  520. 		$occ = htmlCHR($occ);

    521. 

  521. 		if ($submit && $occ != $pr_data['user_occ'])

    522. 

  522. 		{

    523. 

  523. 			$pr_data['user_occ'] = $occ;

    524. 

  524. 			$db_data['user_occ'] = (string) $occ;

    525. 

  525. 		}

    526. 

  526. 		$tp_data['USER_OCC'] = $pr_data['user_occ'];

    527. 

  527. 		break;

    528. 

  528. 

    529. 

  529. 	/**

    530. 

  530. 	*  ????????

    531. 

  531. 	*/

    532. 

  532. 	case 'user_interests':

    533. 

  533. 		$interests = isset($_POST['user_interests']) ? (string) $_POST['user_interests'] : $pr_data['user_interests'];

    534. 

  534. 		$interests = htmlCHR($interests);

    535. 

  535. 		if ($submit && $interests != $pr_data['user_interests'])

    536. 

  536. 		{

    537. 

  537. 			$pr_data['user_interests'] = $interests;

    538. 

  538. 			$db_data['user_interests'] = (string) $interests;

    539. 

  539. 		}

    540. 

  540. 		$tp_data['USER_INTERESTS'] = $pr_data['user_interests'];

    541. 

  541. 		break;

    542. 

  542. 

    543. 

  543. 	/**

    544. 

  544. 	*  Skype

    545. 

  545. 	*/

    546. 

  546. 	case 'user_skype':

    547. 

  547. 		$skype = isset($_POST['user_skype']) ? (string) $_POST['user_skype'] : $pr_data['user_skype'];

    548. 

  548. 		if ($submit && $skype != $pr_data['user_skype'])

    549. 

  549. 		{

    550. 

  550. 			if ($skype != '' && !preg_match("#^[a-zA-Z0-9_.\-@,]{6,32}$#", $skype))

    551. 

  551. 			{

    552. 

  552. 				$errors[] = $lang['SKYPE_ERROR'];

    553. 

  553. 			}

    554. 

  554. 			$pr_data['user_skype'] = $skype;

    555. 

  555. 			$db_data['user_skype'] = (string) $skype;

    556. 

  556. 		}

    557. 

  557. 		$tp_data['USER_SKYPE'] = $pr_data['user_skype'];

    558. 

  558. 		break;

    559. 

  559. 

    560. 

  560. 	/**

    561. 

  561. 	*  ????? ??????? (edit)

    562. 

  562. 	*/

    563. 

  563. 	case 'tpl_name':

    564. 

  564. 		$templates = isset($_POST['tpl_name']) ? (string) $_POST['tpl_name'] : $pr_data['tpl_name'];

    565. 

  565. 		$templates = htmlCHR($templates);

    566. 

  566. 		if ($submit && $templates != $pr_data['tpl_name'])

    567. 

  567. 		{

    568. 

  568. 			$pr_data['tpl_name'] = $bb_cfg['tpl_name'];

    569. 

  569. 			$db_data['tpl_name'] = (string) $bb_cfg['tpl_name'];

    570. 

  570. 			foreach ($bb_cfg['templates'] as $folder => $name)

    571. 

  571. 			{

    572. 

  572. 				if ($templates == $folder)

    573. 

  573. 				{

    574. 

  574. 					$pr_data['tpl_name'] = $templates;

    575. 

  575. 					$db_data['tpl_name'] = (string) $templates;

    576. 

  576. 				}

    577. 

  577. 			}

    578. 

  578. 		}

    579. 

  579. 		$tp_data['TEMPLATES_SELECT'] = templates_select($pr_data['tpl_name'], 'tpl_name');

    580. 

  580. 		break;

    581. 

  581. 

    582. 

  582. 	/**

    583. 

  583. 	*  default

    584. 

  584. 	*/

    585. 

  585. 	default:

    586. 

  586. 		trigger_error("invalid profile field: $field", E_USER_ERROR);

    587. 

  587. 	}

    588. 

  588. }

    589. 

  589. 

    590. 

  590. if ($bb_cfg['birthday_enabled'] && $mode != 'register')

    591. 

  591. {

    592. 

  592. 	$days = array($lang['DELTA_TIME']['INTERVALS']['mday'][0] => 0);

    593. 

  593. 	for ($i = 1; $i <= 31; $i++)

    594. 

  594. 	{

    595. 

  595. 		$days[$i] = $i;

    596. 

  596. 	}

    597. 

  597. 	$s_birthday = build_select('b_day', $days, $b_day);

    598. 

  598. 

    599. 

  599. 	$months = array($lang['DELTA_TIME']['INTERVALS']['mon'][0] => 0);

    600. 

  600. 	for ($i = 1; $i <= 12; $i++)

    601. 

  601. 	{

    602. 

  602. 		$month = bb_date(mktime(0, 0, 0, ($i+1), 0, 0), 'F');

    603. 

  603. 		$months[$month] = $i;

    604. 

  604. 	}

    605. 

  605. 	$s_birthday .= build_select('b_md', $months, $b_md);

    606. 

  606. 

    607. 

  607. 	$year = bb_date(TIMENOW, 'Y', 'false');

    608. 

  608. 	$years = array($lang['DELTA_TIME']['INTERVALS']['year'][0] => 0);

    609. 

  609. 	for ($i = $year-$bb_cfg['birthday_max_age']; $i <= $year - $bb_cfg['birthday_min_age']; $i++)

    610. 

  610. 	{

    611. 

  611. 		$years[$i] = $i;

    612. 

  612. 	}

    613. 

  613. 	$s_birthday .= build_select('b_year', $years, $b_year);

    614. 

  614. 	$tp_data['BIRTHDAY'] = $s_birthday;

    615. 

  615. }

    616. 

  616. 

    617. 

  617. // submit

    618. 

  618. if ($submit && !$errors)

    619. 

  619. {

    620. 

  620. 	/**

    621. 

  621. 	*  ???????? ?????? ???????

    622. 

  622. 	*/

    623. 

  623. 	if ($mode == 'register')

    624. 

  624. 	{

    625. 

  625. 		if ($bb_cfg['reg_email_activation'])

    626. 

  626. 		{

    627. 

  627. 			$user_actkey = make_rand_str(12);

    628. 

  628. 			$db_data['user_active'] = 0;

    629. 

  629. 			$db_data['user_actkey'] = $user_actkey;

    630. 

  630. 		}

    631. 

  631. 		else

    632. 

  632. 		{

    633. 

  633. 			$db_data['user_active'] = 1;

    634. 

  634. 			$db_data['user_actkey'] = '';

    635. 

  635. 		}

    636. 

  636. 		$db_data['user_regdate'] = TIMENOW;

    637. 

  637. 

    638. 

  638. 		if (!IS_ADMIN) $db_data['user_reg_ip'] = USER_IP;

    639. 

  639. 

    640. 

  640. 		if (!isset($db_data['tpl_name'])) $db_data['tpl_name'] = (string) $bb_cfg['tpl_name'];

    641. 

  641. 

    642. 

  642. 		$sql_args = DB()->build_array('INSERT', $db_data);

    643. 

  643. 

    644. 

  644. 		DB()->query("INSERT INTO ". BB_USERS . $sql_args);

    645. 

  645. 		$new_user_id = DB()->sql_nextid();

    646. 

  646. 

    647. 

  647. 		if (IS_ADMIN)

    648. 

  648. 		{

    649. 

  649. 			set_pr_die_append_msg($new_user_id);

    650. 

  650. 			$message = $lang['ACCOUNT_ADDED'];

    651. 

  651. 		}

    652. 

  652. 		else

    653. 

  653. 		{

    654. 

  654. 			if ($bb_cfg['reg_email_activation'])

    655. 

  655. 			{

    656. 

  656. 				$message = $lang['ACCOUNT_INACTIVE'];

    657. 

  657. 				$email_template = 'user_welcome_inactive';

    658. 

  658. 			}

    659. 

  659. 			else

    660. 

  660. 			{

    661. 

  661. 				$message = $lang['ACCOUNT_ADDED'];

    662. 

  662. 				$email_template = 'user_welcome';

    663. 

  663. 			}

    664. 

  664. 

    665. 

  665. 			require(INC_DIR .'emailer.class.php');

    666. 

  666. 			$emailer = new emailer($bb_cfg['smtp_delivery']);

    667. 

  667. 

    668. 

  668. 			$emailer->from($bb_cfg['sitename'] ." <{$bb_cfg['board_email']}>");

    669. 

  669. 			$emailer->email_address("$username <$email>");

    670. 

  670. 

    671. 

  671. 			$emailer->use_template($email_template, $user_lang);

    672. 

  672. 

    673. 

  673. 			$emailer->assign_vars(array(

    674. 

  674. 				'SITENAME'    => $bb_cfg['sitename'],

    675. 

  675. 				'WELCOME_MSG' => sprintf($lang['WELCOME_SUBJECT'], $bb_cfg['sitename']),

    676. 

  676. 				'USERNAME'    => html_entity_decode($username),

    677. 

  677. 				'PASSWORD'    => $new_pass,

    678. 

  678. 

    679. 

  679. 				'U_ACTIVATE'  => make_url('profile.php?mode=activate&' . POST_USERS_URL . '=' . $new_user_id . '&act_key=' . $db_data['user_actkey'])

    680. 

  680. 			));

    681. 

  681. 

    682. 

  682. 			$emailer->send();

    683. 

  683. 			$emailer->reset();

    684. 

  684. 		}

    685. 

  685. 

    686. 

  686. 		bb_die($message);

    687. 

  687. 	}

    688. 

  688. 	/**

    689. 

  689. 	*  ??????????????

    690. 

  690. 	*/

    691. 

  691. 	else

    692. 

  692. 	{

    693. 

  693. 		set_pr_die_append_msg($pr_data['user_id']);

    694. 

  694. 

    695. 

  695. 		// ???? ???-?? ???? ????????

    696. 

  696. 		if ($db_data)

    697. 

  697. 		{

    698. 

  698. 			if (!$pr_data['user_active'])

    699. 

  699. 			{

    700. 

  700. 				$user_actkey = make_rand_str(12);

    701. 

  701. 				$pr_data['user_actkey'] = $user_actkey;

    702. 

  702. 				$db_data['user_actkey'] = $user_actkey;

    703. 

  703. 

    704. 

  704. 				require(INC_DIR .'emailer.class.php');

    705. 

  705. 				$emailer = new emailer($bb_cfg['smtp_delivery']);

    706. 

  706. 

    707. 

  707.  				$emailer->from($bb_cfg['sitename'] ." <{$bb_cfg['board_email']}>");

    708. 

  708. 				$emailer->use_template('user_activate', $pr_data['user_lang']);

    709. 

  709. 				$emailer->email_address("$username <$email>");

    710. 

  710. 

    711. 

  711. 				$emailer->assign_vars(array(

    712. 

  712. 					'SITENAME'   => $bb_cfg['sitename'],

    713. 

  713. 					'USERNAME'   => html_entity_decode($username),

    714. 

  714. 					'U_ACTIVATE' => make_url("profile.php?mode=activate&u={$pr_data['user_id']}&act_key=$user_actkey"),

    715. 

  715. 				));

    716. 

  716. 				$emailer->send();

    717. 

  717. 				$emailer->reset();

    718. 

  718. 

    719. 

  719. 				$message = $lang['PROFILE_UPDATED_INACTIVE'];

    720. 

  720. 				$user->session_end();

    721. 

  721. 			}

    722. 

  722. 			else

    723. 

  723. 			{

    724. 

  724. 				meta_refresh('index.php' , 10);

    725. 

  725. 				$message = $lang['PROFILE_UPDATED'];

    726. 

  726. 			}

    727. 

  727. 

    728. 

  728. 			$sql_args = DB()->build_array('UPDATE', $db_data);

    729. 

  729. 

    730. 

  730. 			DB()->query("UPDATE ". BB_USERS ." SET $sql_args WHERE user_id = {$pr_data['user_id']} LIMIT 1");

    731. 

  731. 

    732. 

  732. 			if ($pr_data['user_id'] != $userdata['user_id'])

    733. 

  733. 			{

    734. 

  734. 				if ($pr_data['user_level'] == MOD && !empty($db_data['username']))

    735. 

  735. 				{

    736. 

  736. 					$datastore->update('moderators');

    737. 

  737. 				}

    738. 

  738. 			}

    739. 

  739. 

    740. 

  740. 			cache_rm_user_sessions ($pr_data['user_id']);

    741. 

  741. 

    742. 

  742. 			if($adm_edit)

    743. 

  743. 			{

    744. 

  744. 				bb_die($lang['PROFILE_USER'] . ' <b>'. profile_url($pr_data) .'</b> '. $lang['GOOD_UPDATE']);

    745. 

  745. 			}

    746. 

  746. 			elseif(!$pr_data['user_active'])

    747. 

  747. 			{

    748. 

  748. 				bb_die($lang['PROFILE_UPDATED_INACTIVE']);

    749. 

  749. 			}

    750. 

  750. 			else

    751. 

  751. 			{

    752. 

  752. 				meta_refresh('index.php' , 10);

    753. 

  753. 				bb_die($lang['PROFILE_UPDATED']);

    754. 

  754. 			}

    755. 

  755. 		}

    756. 

  756. 		else

    757. 

  757. 		{

    758. 

  758. 			bb_die($lang['NOTHING_HAS_CHANGED']);

    759. 

  759. 		}

    760. 

  760. 	}

    761. 

  761. }

    762. 

  762. 

    763. 

  763. $template->assign_vars($tp_data);

    764. 

  764. 

    765. 

  765. $template->assign_vars(array(

    766. 

  766. 	'PAGE_TITLE'         => ($mode == 'editprofile') ? $lang['EDIT_PROFILE'] . ($adm_edit ? " :: {$pr_data['username']}" : '') : $lang['REGISTER'],

    767. 

  767. 	'SHOW_REG_AGREEMENT' => ($mode == 'register' && !IS_ADMIN),

    768. 

  768. 	'ERROR_MESSAGE'      => ($errors) ? join('<br />', array_unique($errors)) : '',

    769. 

  769. 	'MODE'               => $mode,

    770. 

  770. 	'EDIT_PROFILE'       => ($mode == 'editprofile'),

    771. 

  771. 	'ADM_EDIT'           => $adm_edit,

    772. 

  772. 	'SHOW_PASS'          => ($adm_edit || ($mode == 'register' && IS_ADMIN)),

    773. 

  773. 	'CAPTCHA_HTML'       => ($need_captcha) ? CAPTCHA()->get_html() : '',

    774. 

  774. 

    775. 

  775. 	'LANGUAGE_SELECT'    => language_select($user_lang, 'user_lang'),

    776. 

  776. 	'TIMEZONE_SELECT'    => tz_select($user_timezone, 'user_timezone'),

    777. 

  777. 	'USER_TIMEZONE'      => $pr_data['user_timezone'],

    778. 

  778. 

    779. 

  779. 	'AVATAR_EXPLAIN'     => sprintf($lang['AVATAR_EXPLAIN'], $bb_cfg['avatars']['max_width'], $bb_cfg['avatars']['max_height'], (round($bb_cfg['avatars']['max_size'] / 1024))),

    780. 

  780. 	'AVATAR_DISALLOWED'  => bf($pr_data['user_opt'], 'user_opt', 'allow_avatar'),

    781. 

  781. 

    782. 

  782. 	'SIGNATURE_EXPLAIN'  => sprintf($lang['SIGNATURE_EXPLAIN'], $bb_cfg['max_sig_chars']),

    783. 

  783. 	'SIG_DISALLOWED'     => bf($pr_data['user_opt'], 'user_opt', 'allow_sig'),

    784. 

  784. 

    785. 

  785. 	'PR_USER_ID'         => $pr_data['user_id'],

    786. 

  786. 	'U_RESET_AUTOLOGIN'  => LOGIN_URL . "?logout=1&amp;reset_autologin=1&amp;sid={$userdata['session_id']}",

    787. 

  787. 

    788. 

  788. 	'AVATAR_URL_PATH'    => ($pr_data['avatar_ext_id']) ? get_avatar_path($pr_data['user_id'], $pr_data['avatar_ext_id']) : '',

    789. 

  789. ));

    790. 

  790. 

    791. 

  791. print_page('usercp_register.tpl');
    792.