PageRenderTime 84ms CodeModel.GetById 17ms RepoModel.GetById 0ms app.codeStats 1ms

/forum/memberlist.php

https://bitbucket.org/itoxable/chiron-gaming
PHP | 1757 lines | 1375 code | 282 blank | 100 comment | 318 complexity | 2db7a67596e2b38c243e8a3aa112f62a MD5 | raw file
Possible License(s): AGPL-1.0, GPL-2.0

Large files files are truncated, but you can click here to view the full file

    

  1. <?php

    2. 

  2. /**

    3. 

  3. *

    4. 

  4. * @package phpBB3

    5. 

  5. * @version $Id$

    6. 

  6. * @copyright (c) 2005 phpBB Group

    7. 

  7. * @license http://opensource.org/licenses/gpl-license.php GNU Public License

    8. 

  8. *

    9. 

  9. */

    10. 

  10. 

    11. 

  11. /**

    12. 

  12. * @ignore

    13. 

  13. */

    14. 

  14. define('IN_PHPBB', true);

    15. 

  15. $phpbb_root_path = (defined('PHPBB_ROOT_PATH')) ? PHPBB_ROOT_PATH : './';

    16. 

  16. $phpEx = substr(strrchr(__FILE__, '.'), 1);

    17. 

  17. include($phpbb_root_path . 'common.' . $phpEx);

    18. 

  18. include($phpbb_root_path . 'includes/functions_display.' . $phpEx);

    19. 

  19. 

    20. 

  20. // Start session management

    21. 

  21. $user->session_begin();

    22. 

  22. $auth->acl($user->data);

    23. 

  23. $user->setup(array('memberlist', 'groups'));

    24. 

  24. 

    25. 

  25. // Grab data

    26. 

  26. $mode		= request_var('mode', '');

    27. 

  27. $action		= request_var('action', '');

    28. 

  28. $user_id	= request_var('u', ANONYMOUS);

    29. 

  29. $username	= request_var('un', '', true);

    30. 

  30. $group_id	= request_var('g', 0);

    31. 

  31. $topic_id	= request_var('t', 0);

    32. 

  32. 

    33. 

  33. // Check our mode...

    34. 

  34. if (!in_array($mode, array('', 'group', 'viewprofile', 'email', 'contact', 'searchuser', 'leaders')))

    35. 

  35. {

    36. 

  36. 	trigger_error('NO_MODE');

    37. 

  37. }

    38. 

  38. 

    39. 

  39. switch ($mode)

    40. 

  40. {

    41. 

  41. 	case 'email':

    42. 

  42. 	break;

    43. 

  43. 

    44. 

  44. 	default:

    45. 

  45. 		// Can this user view profiles/memberlist?

    46. 

  46. 		if (!$auth->acl_gets('u_viewprofile', 'a_user', 'a_useradd', 'a_userdel'))

    47. 

  47. 		{

    48. 

  48. 			if ($user->data['user_id'] != ANONYMOUS)

    49. 

  49. 			{

    50. 

  50. 				trigger_error('NO_VIEW_USERS');

    51. 

  51. 			}

    52. 

  52. 

    53. 

  53. 			login_box('', ((isset($user->lang['LOGIN_EXPLAIN_' . strtoupper($mode)])) ? $user->lang['LOGIN_EXPLAIN_' . strtoupper($mode)] : $user->lang['LOGIN_EXPLAIN_MEMBERLIST']));

    54. 

  54. 		}

    55. 

  55. 	break;

    56. 

  56. }

    57. 

  57. 

    58. 

  58. $start	= request_var('start', 0);

    59. 

  59. $submit = (isset($_POST['submit'])) ? true : false;

    60. 

  60. 

    61. 

  61. $default_key = 'c';

    62. 

  62. $sort_key = request_var('sk', $default_key);

    63. 

  63. $sort_dir = request_var('sd', 'a');

    64. 

  64. 

    65. 

  65. 

    66. 

  66. // Grab rank information for later

    67. 

  67. $ranks = $cache->obtain_ranks();

    68. 

  68. 

    69. 

  69. 

    70. 

  70. // What do you want to do today? ... oops, I think that line is taken ...

    71. 

  71. switch ($mode)

    72. 

  72. {

    73. 

  73. 	case 'leaders':

    74. 

  74. 		// Display a listing of board admins, moderators

    75. 

  75. 		include($phpbb_root_path . 'includes/functions_user.' . $phpEx);

    76. 

  76. 

    77. 

  77. 		$page_title = $user->lang['THE_TEAM'];

    78. 

  78. 		$template_html = 'memberlist_leaders.html';

    79. 

  79. 

    80. 

  80. 		$user_ary = $auth->acl_get_list(false, array('a_', 'm_'), false);

    81. 

  81. 

    82. 

  82. 		$admin_id_ary = $global_mod_id_ary = $mod_id_ary = $forum_id_ary = array();

    83. 

  83. 		foreach ($user_ary as $forum_id => $forum_ary)

    84. 

  84. 		{

    85. 

  85. 			foreach ($forum_ary as $auth_option => $id_ary)

    86. 

  86. 			{

    87. 

  87. 				if (!$forum_id)

    88. 

  88. 				{

    89. 

  89. 					if ($auth_option == 'a_')

    90. 

  90. 					{

    91. 

  91. 						$admin_id_ary = array_merge($admin_id_ary, $id_ary);

    92. 

  92. 					}

    93. 

  93. 					else

    94. 

  94. 					{

    95. 

  95. 						$global_mod_id_ary = array_merge($global_mod_id_ary, $id_ary);

    96. 

  96. 					}

    97. 

  97. 					continue;

    98. 

  98. 				}

    99. 

  99. 				else

    100. 

  100. 				{

    101. 

  101. 					$mod_id_ary = array_merge($mod_id_ary, $id_ary);

    102. 

  102. 				}

    103. 

  103. 

    104. 

  104. 				if ($forum_id)

    105. 

  105. 				{

    106. 

  106. 					foreach ($id_ary as $id)

    107. 

  107. 					{

    108. 

  108. 						$forum_id_ary[$id][] = $forum_id;

    109. 

  109. 					}

    110. 

  110. 				}

    111. 

  111. 			}

    112. 

  112. 		}

    113. 

  113. 

    114. 

  114. 		$admin_id_ary = array_unique($admin_id_ary);

    115. 

  115. 		$global_mod_id_ary = array_unique($global_mod_id_ary);

    116. 

  116. 

    117. 

  117. 		$mod_id_ary = array_merge($mod_id_ary, $global_mod_id_ary);

    118. 

  118. 		$mod_id_ary = array_unique($mod_id_ary);

    119. 

  119. 

    120. 

  120. 		// Admin group id...

    121. 

  121. 		$sql = 'SELECT group_id

    122. 

  122. 			FROM ' . GROUPS_TABLE . "

    123. 

  123. 			WHERE group_name = 'ADMINISTRATORS'";

    124. 

  124. 		$result = $db->sql_query($sql);

    125. 

  125. 		$admin_group_id = (int) $db->sql_fetchfield('group_id');

    126. 

  126. 		$db->sql_freeresult($result);

    127. 

  127. 

    128. 

  128. 		// Get group memberships for the admin id ary...

    129. 

  129. 		$admin_memberships = group_memberships($admin_group_id, $admin_id_ary);

    130. 

  130. 

    131. 

  131. 		$admin_user_ids = array();

    132. 

  132. 

    133. 

  133. 		if (!empty($admin_memberships))

    134. 

  134. 		{

    135. 

  135. 			// ok, we only need the user ids...

    136. 

  136. 			foreach ($admin_memberships as $row)

    137. 

  137. 			{

    138. 

  138. 				$admin_user_ids[$row['user_id']] = true;

    139. 

  139. 			}

    140. 

  140. 		}

    141. 

  141. 		unset($admin_memberships);

    142. 

  142. 

    143. 

  143. 		$sql = 'SELECT forum_id, forum_name

    144. 

  144. 			FROM ' . FORUMS_TABLE;

    145. 

  145. 		$result = $db->sql_query($sql);

    146. 

  146. 

    147. 

  147. 		$forums = array();

    148. 

  148. 		while ($row = $db->sql_fetchrow($result))

    149. 

  149. 		{

    150. 

  150. 			$forums[$row['forum_id']] = $row['forum_name'];

    151. 

  151. 		}

    152. 

  152. 		$db->sql_freeresult($result);

    153. 

  153. 

    154. 

  154. 		$sql = $db->sql_build_query('SELECT', array(

    155. 

  155. 			'SELECT'	=> 'u.user_id, u.group_id as default_group, u.username, u.username_clean, u.user_colour, u.user_rank, u.user_posts, u.user_allow_pm, g.group_id, g.group_name, g.group_colour, g.group_type, ug.user_id as ug_user_id',

    156. 

  156. 

    157. 

  157. 			'FROM'		=> array(

    158. 

  158. 				USERS_TABLE		=> 'u',

    159. 

  159. 				GROUPS_TABLE	=> 'g'

    160. 

  160. 			),

    161. 

  161. 

    162. 

  162. 			'LEFT_JOIN'	=> array(

    163. 

  163. 				array(

    164. 

  164. 					'FROM'	=> array(USER_GROUP_TABLE => 'ug'),

    165. 

  165. 					'ON'	=> 'ug.group_id = g.group_id AND ug.user_pending = 0 AND ug.user_id = ' . $user->data['user_id']

    166. 

  166. 				)

    167. 

  167. 			),

    168. 

  168. 

    169. 

  169. 			'WHERE'		=> $db->sql_in_set('u.user_id', array_unique(array_merge($admin_id_ary, $mod_id_ary)), false, true) . '

    170. 

  170. 				AND u.group_id = g.group_id',

    171. 

  171. 

    172. 

  172. 			'ORDER_BY'	=> 'g.group_name ASC, u.username_clean ASC'

    173. 

  173. 		));

    174. 

  174. 		$result = $db->sql_query($sql);

    175. 

  175. 

    176. 

  176. 		while ($row = $db->sql_fetchrow($result))

    177. 

  177. 		{

    178. 

  178. 			$which_row = (in_array($row['user_id'], $admin_id_ary)) ? 'admin' : 'mod';

    179. 

  179. 

    180. 

  180. 			// We sort out admins not within the 'Administrators' group.

    181. 

  181. 			// Else, we will list those as admin only having the permission to view logs for example.

    182. 

  182. 			if ($which_row == 'admin' && empty($admin_user_ids[$row['user_id']]))

    183. 

  183. 			{

    184. 

  184. 				// Remove from admin_id_ary, because the user may be a mod instead

    185. 

  185. 				unset($admin_id_ary[array_search($row['user_id'], $admin_id_ary)]);

    186. 

  186. 

    187. 

  187. 				if (!in_array($row['user_id'], $mod_id_ary) && !in_array($row['user_id'], $global_mod_id_ary))

    188. 

  188. 				{

    189. 

  189. 					continue;

    190. 

  190. 				}

    191. 

  191. 				else

    192. 

  192. 				{

    193. 

  193. 					$which_row = 'mod';

    194. 

  194. 				}

    195. 

  195. 			}

    196. 

  196. 

    197. 

  197. 			$s_forum_select = '';

    198. 

  198. 			$undisclosed_forum = false;

    199. 

  199. 

    200. 

  200. 			if (isset($forum_id_ary[$row['user_id']]) && !in_array($row['user_id'], $global_mod_id_ary))

    201. 

  201. 			{

    202. 

  202. 				if ($which_row == 'mod' && sizeof(array_diff(array_keys($forums), $forum_id_ary[$row['user_id']])))

    203. 

  203. 				{

    204. 

  204. 					foreach ($forum_id_ary[$row['user_id']] as $forum_id)

    205. 

  205. 					{

    206. 

  206. 						if (isset($forums[$forum_id]))

    207. 

  207. 						{

    208. 

  208. 							if ($auth->acl_get('f_list', $forum_id))

    209. 

  209. 							{

    210. 

  210. 								$s_forum_select .= '<option value="">' . $forums[$forum_id] . '</option>';

    211. 

  211. 							}

    212. 

  212. 							else

    213. 

  213. 							{

    214. 

  214. 								$undisclosed_forum = true;

    215. 

  215. 							}

    216. 

  216. 						}

    217. 

  217. 					}

    218. 

  218. 				}

    219. 

  219. 			}

    220. 

  220. 

    221. 

  221. 			// If the mod is only moderating non-viewable forums we skip the user. There is no gain in displaying the person then...

    222. 

  222. 			if (!$s_forum_select && $undisclosed_forum)

    223. 

  223. 			{

    224. 

  224. //				$s_forum_select = '<option value="">' . $user->lang['FORUM_UNDISCLOSED'] . '</option>';

    225. 

  225. 				continue;

    226. 

  226. 			}

    227. 

  227. 

    228. 

  228. 			// The person is moderating several "public" forums, therefore the person should be listed, but not giving the real group name if hidden.

    229. 

  229. 			if ($row['group_type'] == GROUP_HIDDEN && !$auth->acl_gets('a_group', 'a_groupadd', 'a_groupdel') && $row['ug_user_id'] != $user->data['user_id'])

    230. 

  230. 			{

    231. 

  231. 				$group_name = $user->lang['GROUP_UNDISCLOSED'];

    232. 

  232. 				$u_group = '';

    233. 

  233. 			}

    234. 

  234. 			else

    235. 

  235. 			{

    236. 

  236. 				$group_name = ($row['group_type'] == GROUP_SPECIAL) ? $user->lang['G_' . $row['group_name']] : $row['group_name'];

    237. 

  237. 				$u_group = append_sid("{$phpbb_root_path}memberlist.$phpEx", 'mode=group&amp;g=' . $row['group_id']);

    238. 

  238. 			}

    239. 

  239. 

    240. 

  240. 			$rank_title = $rank_img = '';

    241. 

  241. 			get_user_rank($row['user_rank'], (($row['user_id'] == ANONYMOUS) ? false : $row['user_posts']), $rank_title, $rank_img, $rank_img_src);

    242. 

  242. 

    243. 

  243. 			$template->assign_block_vars($which_row, array(

    244. 

  244. 				'USER_ID'		=> $row['user_id'],

    245. 

  245. 				'FORUMS'		=> $s_forum_select,

    246. 

  246. 				'RANK_TITLE'	=> $rank_title,

    247. 

  247. 				'GROUP_NAME'	=> $group_name,

    248. 

  248. 				'GROUP_COLOR'	=> $row['group_colour'],

    249. 

  249. 

    250. 

  250. 				'RANK_IMG'		=> $rank_img,

    251. 

  251. 				'RANK_IMG_SRC'	=> $rank_img_src,

    252. 

  252. 

    253. 

  253. 				'U_GROUP'			=> $u_group,

    254. 

  254. 				'U_PM'				=> ($config['allow_privmsg'] && $auth->acl_get('u_sendpm') && ($row['user_allow_pm'] || $auth->acl_gets('a_', 'm_') || $auth->acl_getf_global('m_'))) ? append_sid("{$phpbb_root_path}ucp.$phpEx", 'i=pm&amp;mode=compose&amp;u=' . $row['user_id']) : '',

    255. 

  255. 

    256. 

  256. 				'USERNAME_FULL'		=> get_username_string('full', $row['user_id'], $row['username'], $row['user_colour']),

    257. 

  257. 				'USERNAME'			=> get_username_string('username', $row['user_id'], $row['username'], $row['user_colour']),

    258. 

  258. 				'USER_COLOR'		=> get_username_string('colour', $row['user_id'], $row['username'], $row['user_colour']),

    259. 

  259. 				'U_VIEW_PROFILE'	=> get_username_string('profile', $row['user_id'], $row['username'], $row['user_colour']),

    260. 

  260. 			));

    261. 

  261. 		}

    262. 

  262. 		$db->sql_freeresult($result);

    263. 

  263. 

    264. 

  264. 		$template->assign_vars(array(

    265. 

  265. 			'PM_IMG'		=> $user->img('icon_contact_pm', $user->lang['SEND_PRIVATE_MESSAGE']))

    266. 

  266. 		);

    267. 

  267. 	break;

    268. 

  268. 

    269. 

  269. 	case 'contact':

    270. 

  270. 

    271. 

  271. 		$page_title = $user->lang['IM_USER'];

    272. 

  272. 		$template_html = 'memberlist_im.html';

    273. 

  273. 

    274. 

  274. 		if (!$auth->acl_get('u_sendim'))

    275. 

  275. 		{

    276. 

  276. 			trigger_error('NOT_AUTHORISED');

    277. 

  277. 		}

    278. 

  278. 

    279. 

  279. 		$presence_img = '';

    280. 

  280. 		switch ($action)

    281. 

  281. 		{

    282. 

  282. 			case 'aim':

    283. 

  283. 				$lang = 'AIM';

    284. 

  284. 				$sql_field = 'user_aim';

    285. 

  285. 				$s_select = 'S_SEND_AIM';

    286. 

  286. 				$s_action = '';

    287. 

  287. 			break;

    288. 

  288. 

    289. 

  289. 			case 'msnm':

    290. 

  290. 				$lang = 'MSNM';

    291. 

  291. 				$sql_field = 'user_msnm';

    292. 

  292. 				$s_select = 'S_SEND_MSNM';

    293. 

  293. 				$s_action = '';

    294. 

  294. 			break;

    295. 

  295. 

    296. 

  296. 			case 'jabber':

    297. 

  297. 				$lang = 'JABBER';

    298. 

  298. 				$sql_field = 'user_jabber';

    299. 

  299. 				$s_select = (@extension_loaded('xml') && $config['jab_enable']) ? 'S_SEND_JABBER' : 'S_NO_SEND_JABBER';

    300. 

  300. 				$s_action = append_sid("{$phpbb_root_path}memberlist.$phpEx", "mode=contact&amp;action=$action&amp;u=$user_id");

    301. 

  301. 			break;

    302. 

  302. 

    303. 

  303. 			default:

    304. 

  304. 				trigger_error('NO_MODE', E_USER_ERROR);

    305. 

  305. 			break;

    306. 

  306. 		}

    307. 

  307. 

    308. 

  308. 		// Grab relevant data

    309. 

  309. 		$sql = "SELECT user_id, username, user_email, user_lang, $sql_field

    310. 

  310. 			FROM " . USERS_TABLE . "

    311. 

  311. 			WHERE user_id = $user_id

    312. 

  312. 				AND user_type IN (" . USER_NORMAL . ', ' . USER_FOUNDER . ')';

    313. 

  313. 		$result = $db->sql_query($sql);

    314. 

  314. 		$row = $db->sql_fetchrow($result);

    315. 

  315. 		$db->sql_freeresult($result);

    316. 

  316. 

    317. 

  317. 		if (!$row)

    318. 

  318. 		{

    319. 

  319. 			trigger_error('NO_USER');

    320. 

  320. 		}

    321. 

  321. 		else if (empty($row[$sql_field]))

    322. 

  322. 		{

    323. 

  323. 			trigger_error('IM_NO_DATA');

    324. 

  324. 		}

    325. 

  325. 

    326. 

  326. 		// Post data grab actions

    327. 

  327. 		switch ($action)

    328. 

  328. 		{

    329. 

  329. 			case 'jabber':

    330. 

  330. 				add_form_key('memberlist_messaging');

    331. 

  331. 

    332. 

  332. 				if ($submit && @extension_loaded('xml') && $config['jab_enable'])

    333. 

  333. 				{

    334. 

  334. 					if (check_form_key('memberlist_messaging'))

    335. 

  335. 					{

    336. 

  336. 

    337. 

  337. 						include_once($phpbb_root_path . 'includes/functions_messenger.' . $phpEx);

    338. 

  338. 

    339. 

  339. 						$subject = sprintf($user->lang['IM_JABBER_SUBJECT'], $user->data['username'], $config['server_name']);

    340. 

  340. 						$message = utf8_normalize_nfc(request_var('message', '', true));

    341. 

  341. 

    342. 

  342. 						if (empty($message))

    343. 

  343. 						{

    344. 

  344. 							trigger_error('EMPTY_MESSAGE_IM');

    345. 

  345. 						}

    346. 

  346. 

    347. 

  347. 						$messenger = new messenger(false);

    348. 

  348. 

    349. 

  349. 						$messenger->template('profile_send_im', $row['user_lang']);

    350. 

  350. 						$messenger->subject(htmlspecialchars_decode($subject));

    351. 

  351. 

    352. 

  352. 						$messenger->replyto($user->data['user_email']);

    353. 

  353. 						$messenger->im($row['user_jabber'], $row['username']);

    354. 

  354. 

    355. 

  355. 						$messenger->assign_vars(array(

    356. 

  356. 							'BOARD_CONTACT'	=> $config['board_contact'],

    357. 

  357. 							'FROM_USERNAME'	=> htmlspecialchars_decode($user->data['username']),

    358. 

  358. 							'TO_USERNAME'	=> htmlspecialchars_decode($row['username']),

    359. 

  359. 							'MESSAGE'		=> htmlspecialchars_decode($message))

    360. 

  360. 						);

    361. 

  361. 

    362. 

  362. 						$messenger->send(NOTIFY_IM);

    363. 

  363. 

    364. 

  364. 						$s_select = 'S_SENT_JABBER';

    365. 

  365. 					}

    366. 

  366. 					else

    367. 

  367. 					{

    368. 

  368. 						trigger_error('FORM_INVALID');

    369. 

  369. 					}

    370. 

  370. 				}

    371. 

  371. 			break;

    372. 

  372. 		}

    373. 

  373. 

    374. 

  374. 		// Send vars to the template

    375. 

  375. 		$template->assign_vars(array(

    376. 

  376. 			'IM_CONTACT'	=> $row[$sql_field],

    377. 

  377. 			'A_IM_CONTACT'	=> addslashes($row[$sql_field]),

    378. 

  378. 

    379. 

  379. 			'U_AIM_CONTACT'	=> ($action == 'aim') ? 'aim:addbuddy?screenname=' . urlencode($row[$sql_field]) : '',

    380. 

  380. 			'U_AIM_MESSAGE'	=> ($action == 'aim') ? 'aim:goim?screenname=' . urlencode($row[$sql_field]) . '&amp;message=' . urlencode($config['sitename']) : '',

    381. 

  381. 

    382. 

  382. 			'USERNAME'		=> $row['username'],

    383. 

  383. 			'CONTACT_NAME'	=> $row[$sql_field],

    384. 

  384. 			'SITENAME'		=> $config['sitename'],

    385. 

  385. 

    386. 

  386. 			'PRESENCE_IMG'		=> $presence_img,

    387. 

  387. 

    388. 

  388. 			'L_SEND_IM_EXPLAIN'	=> $user->lang['IM_' . $lang],

    389. 

  389. 			'L_IM_SENT_JABBER'	=> sprintf($user->lang['IM_SENT_JABBER'], $row['username']),

    390. 

  390. 

    391. 

  391. 			$s_select			=> true,

    392. 

  392. 			'S_IM_ACTION'		=> $s_action)

    393. 

  393. 		);

    394. 

  394. 

    395. 

  395. 	break;

    396. 

  396. 

    397. 

  397. 	case 'viewprofile':

    398. 

  398. 		// Display a profile

    399. 

  399. 		if ($user_id == ANONYMOUS && !$username)

    400. 

  400. 		{

    401. 

  401. 			trigger_error('NO_USER');

    402. 

  402. 		}

    403. 

  403. 

    404. 

  404. 		// Get user...

    405. 

  405. 		$sql = 'SELECT *

    406. 

  406. 			FROM ' . USERS_TABLE . '

    407. 

  407. 			WHERE ' . (($username) ? "username_clean = '" . $db->sql_escape(utf8_clean_string($username)) . "'" : "user_id = $user_id");

    408. 

  408. 		$result = $db->sql_query($sql);

    409. 

  409. 		$member = $db->sql_fetchrow($result);

    410. 

  410. 		$db->sql_freeresult($result);

    411. 

  411. 

    412. 

  412. 		if (!$member)

    413. 

  413. 		{

    414. 

  414. 			trigger_error('NO_USER');

    415. 

  415. 		}

    416. 

  416. 

    417. 

  417. 		// a_user admins and founder are able to view inactive users and bots to be able to manage them more easily

    418. 

  418. 		// Normal users are able to see at least users having only changed their profile settings but not yet reactivated.

    419. 

  419. 		if (!$auth->acl_get('a_user') && $user->data['user_type'] != USER_FOUNDER)

    420. 

  420. 		{

    421. 

  421. 			if ($member['user_type'] == USER_IGNORE)

    422. 

  422. 			{

    423. 

  423. 				trigger_error('NO_USER');

    424. 

  424. 			}

    425. 

  425. 			else if ($member['user_type'] == USER_INACTIVE && $member['user_inactive_reason'] != INACTIVE_PROFILE)

    426. 

  426. 			{

    427. 

  427. 				trigger_error('NO_USER');

    428. 

  428. 			}

    429. 

  429. 		}

    430. 

  430. 

    431. 

  431. 		$user_id = (int) $member['user_id'];

    432. 

  432. 

    433. 

  433. 		// Get group memberships

    434. 

  434. 		// Also get visiting user's groups to determine hidden group memberships if necessary.

    435. 

  435. 		$auth_hidden_groups = ($user_id === (int) $user->data['user_id'] || $auth->acl_gets('a_group', 'a_groupadd', 'a_groupdel')) ? true : false;

    436. 

  436. 		$sql_uid_ary = ($auth_hidden_groups) ? array($user_id) : array($user_id, (int) $user->data['user_id']);

    437. 

  437. 

    438. 

  438. 		// Do the SQL thang

    439. 

  439. 		$sql = 'SELECT g.group_id, g.group_name, g.group_type, ug.user_id

    440. 

  440. 			FROM ' . GROUPS_TABLE . ' g, ' . USER_GROUP_TABLE . ' ug

    441. 

  441. 			WHERE ' . $db->sql_in_set('ug.user_id', $sql_uid_ary) . '

    442. 

  442. 				AND g.group_id = ug.group_id

    443. 

  443. 				AND ug.user_pending = 0';

    444. 

  444. 		$result = $db->sql_query($sql);

    445. 

  445. 

    446. 

  446. 		// Divide data into profile data and current user data

    447. 

  447. 		$profile_groups = $user_groups = array();

    448. 

  448. 		while ($row = $db->sql_fetchrow($result))

    449. 

  449. 		{

    450. 

  450. 			$row['user_id'] = (int) $row['user_id'];

    451. 

  451. 			$row['group_id'] = (int) $row['group_id'];

    452. 

  452. 

    453. 

  453. 			if ($row['user_id'] == $user_id)

    454. 

  454. 			{

    455. 

  455. 				$profile_groups[] = $row;

    456. 

  456. 			}

    457. 

  457. 			else

    458. 

  458. 			{

    459. 

  459. 				$user_groups[$row['group_id']] = $row['group_id'];

    460. 

  460. 			}

    461. 

  461. 		}

    462. 

  462. 		$db->sql_freeresult($result);

    463. 

  463. 

    464. 

  464. 		// Filter out hidden groups and sort groups by name

    465. 

  465. 		$group_data = $group_sort = array();

    466. 

  466. 		foreach ($profile_groups as $row)

    467. 

  467. 		{

    468. 

  468. 			if ($row['group_type'] == GROUP_SPECIAL)

    469. 

  469. 			{

    470. 

  470. 				// Lookup group name in language dictionary

    471. 

  471. 				if (isset($user->lang['G_' . $row['group_name']]))

    472. 

  472. 				{

    473. 

  473. 					$row['group_name'] = $user->lang['G_' . $row['group_name']];

    474. 

  474. 				}

    475. 

  475. 			}

    476. 

  476. 			else if (!$auth_hidden_groups && $row['group_type'] == GROUP_HIDDEN && !isset($user_groups[$row['group_id']]))

    477. 

  477. 			{

    478. 

  478. 				// Skip over hidden groups the user cannot see

    479. 

  479. 				continue;

    480. 

  480. 			}

    481. 

  481. 

    482. 

  482. 			$group_sort[$row['group_id']] = utf8_clean_string($row['group_name']);

    483. 

  483. 			$group_data[$row['group_id']] = $row;

    484. 

  484. 		}

    485. 

  485. 		unset($profile_groups);

    486. 

  486. 		unset($user_groups);

    487. 

  487. 		asort($group_sort);

    488. 

  488. 

    489. 

  489. 		$group_options = '';

    490. 

  490. 		foreach ($group_sort as $group_id => $null)

    491. 

  491. 		{

    492. 

  492. 			$row = $group_data[$group_id];

    493. 

  493. 

    494. 

  494. 			$group_options .= '<option value="' . $row['group_id'] . '"' . (($row['group_id'] == $member['group_id']) ? ' selected="selected"' : '') . '>' . $row['group_name'] . '</option>';

    495. 

  495. 		}

    496. 

  496. 		unset($group_data);

    497. 

  497. 		unset($group_sort);

    498. 

  498. 

    499. 

  499. 		// What colour is the zebra

    500. 

  500. 		$sql = 'SELECT friend, foe

    501. 

  501. 			FROM ' . ZEBRA_TABLE . "

    502. 

  502. 			WHERE zebra_id = $user_id

    503. 

  503. 				AND user_id = {$user->data['user_id']}";

    504. 

  504. 

    505. 

  505. 		$result = $db->sql_query($sql);

    506. 

  506. 		$row = $db->sql_fetchrow($result);

    507. 

  507. 		$foe = ($row['foe']) ? true : false;

    508. 

  508. 		$friend = ($row['friend']) ? true : false;

    509. 

  509. 		$db->sql_freeresult($result);

    510. 

  510. 

    511. 

  511. 		if ($config['load_onlinetrack'])

    512. 

  512. 		{

    513. 

  513. 			$sql = 'SELECT MAX(session_time) AS session_time, MIN(session_viewonline) AS session_viewonline

    514. 

  514. 				FROM ' . SESSIONS_TABLE . "

    515. 

  515. 				WHERE session_user_id = $user_id";

    516. 

  516. 			$result = $db->sql_query($sql);

    517. 

  517. 			$row = $db->sql_fetchrow($result);

    518. 

  518. 			$db->sql_freeresult($result);

    519. 

  519. 

    520. 

  520. 			$member['session_time'] = (isset($row['session_time'])) ? $row['session_time'] : 0;

    521. 

  521. 			$member['session_viewonline'] = (isset($row['session_viewonline'])) ? $row['session_viewonline'] :	0;

    522. 

  522. 			unset($row);

    523. 

  523. 		}

    524. 

  524. 

    525. 

  525. 		if ($config['load_user_activity'])

    526. 

  526. 		{

    527. 

  527. 			display_user_activity($member);

    528. 

  528. 		}

    529. 

  529. 

    530. 

  530. 		// Do the relevant calculations

    531. 

  531. 		$memberdays = max(1, round((time() - $member['user_regdate']) / 86400));

    532. 

  532. 		$posts_per_day = $member['user_posts'] / $memberdays;

    533. 

  533. 		$percentage = ($config['num_posts']) ? min(100, ($member['user_posts'] / $config['num_posts']) * 100) : 0;

    534. 

  534. 

    535. 

  535. 

    536. 

  536. 		if ($member['user_sig'])

    537. 

  537. 		{

    538. 

  538. 			$member['user_sig'] = censor_text($member['user_sig']);

    539. 

  539. 

    540. 

  540. 			if ($member['user_sig_bbcode_bitfield'])

    541. 

  541. 			{

    542. 

  542. 				include_once($phpbb_root_path . 'includes/bbcode.' . $phpEx);

    543. 

  543. 				$bbcode = new bbcode();

    544. 

  544. 				$bbcode->bbcode_second_pass($member['user_sig'], $member['user_sig_bbcode_uid'], $member['user_sig_bbcode_bitfield']);

    545. 

  545. 			}

    546. 

  546. 

    547. 

  547. 			$member['user_sig'] = bbcode_nl2br($member['user_sig']);

    548. 

  548. 			$member['user_sig'] = smiley_text($member['user_sig']);

    549. 

  549. 		}

    550. 

  550. 

    551. 

  551. 		$poster_avatar = get_user_avatar($member['user_avatar'], $member['user_avatar_type'], $member['user_avatar_width'], $member['user_avatar_height']);

    552. 

  552. 

    553. 

  553. 		// We need to check if the modules 'zebra' ('friends' & 'foes' mode),  'notes' ('user_notes' mode) and  'warn' ('warn_user' mode) are accessible to decide if we can display appropriate links

    554. 

  554. 		$zebra_enabled = $friends_enabled = $foes_enabled = $user_notes_enabled = $warn_user_enabled = false;

    555. 

  555. 

    556. 

  556. 		// Only check if the user is logged in

    557. 

  557. 		if ($user->data['is_registered'])

    558. 

  558. 		{

    559. 

  559. 			if (!class_exists('p_master'))

    560. 

  560. 			{

    561. 

  561. 				include($phpbb_root_path . 'includes/functions_module.' . $phpEx);

    562. 

  562. 			}

    563. 

  563. 			$module = new p_master();

    564. 

  564. 

    565. 

  565. 			$module->list_modules('ucp');

    566. 

  566. 			$module->list_modules('mcp');

    567. 

  567. 

    568. 

  568. 			$user_notes_enabled = ($module->loaded('notes', 'user_notes')) ? true : false;

    569. 

  569. 			$warn_user_enabled = ($module->loaded('warn', 'warn_user')) ? true : false;

    570. 

  570. 			$zebra_enabled = ($module->loaded('zebra')) ? true : false;

    571. 

  571. 			$friends_enabled = ($module->loaded('zebra', 'friends')) ? true : false;

    572. 

  572. 			$foes_enabled = ($module->loaded('zebra', 'foes')) ? true : false;

    573. 

  573. 

    574. 

  574. 			unset($module);

    575. 

  575. 		}

    576. 

  576. 

    577. 

  577. 		$template->assign_vars(show_profile($member, $user_notes_enabled, $warn_user_enabled));

    578. 

  578. 

    579. 

  579. 		// Custom Profile Fields

    580. 

  580. 		$profile_fields = array();

    581. 

  581. 		if ($config['load_cpf_viewprofile'])

    582. 

  582. 		{

    583. 

  583. 			include_once($phpbb_root_path . 'includes/functions_profile_fields.' . $phpEx);

    584. 

  584. 			$cp = new custom_profile();

    585. 

  585. 			$profile_fields = $cp->generate_profile_fields_template('grab', $user_id);

    586. 

  586. 			$profile_fields = (isset($profile_fields[$user_id])) ? $cp->generate_profile_fields_template('show', false, $profile_fields[$user_id]) : array();

    587. 

  587. 		}

    588. 

  588. 

    589. 

  589. 		// If the user has m_approve permission or a_user permission, then list then display unapproved posts

    590. 

  590. 		if ($auth->acl_getf_global('m_approve') || $auth->acl_get('a_user'))

    591. 

  591. 		{

    592. 

  592. 			$sql = 'SELECT COUNT(post_id) as posts_in_queue

    593. 

  593. 				FROM ' . POSTS_TABLE . '

    594. 

  594. 				WHERE poster_id = ' . $user_id . '

    595. 

  595. 					AND post_approved = 0';

    596. 

  596. 			$result = $db->sql_query($sql);

    597. 

  597. 			$member['posts_in_queue'] = (int) $db->sql_fetchfield('posts_in_queue');

    598. 

  598. 			$db->sql_freeresult($result);

    599. 

  599. 		}

    600. 

  600. 		else

    601. 

  601. 		{

    602. 

  602. 			$member['posts_in_queue'] = 0;

    603. 

  603. 		}

    604. 

  604. 

    605. 

  605. 		$template->assign_vars(array(

    606. 

  606. 			'L_POSTS_IN_QUEUE'	=> $user->lang('NUM_POSTS_IN_QUEUE', $member['posts_in_queue']),

    607. 

  607. 

    608. 

  608. 			'POSTS_DAY'			=> sprintf($user->lang['POST_DAY'], $posts_per_day),

    609. 

  609. 			'POSTS_PCT'			=> sprintf($user->lang['POST_PCT'], $percentage),

    610. 

  610. 

    611. 

  611. 			'OCCUPATION'	=> (!empty($member['user_occ'])) ? censor_text($member['user_occ']) : '',

    612. 

  612. 			'INTERESTS'		=> (!empty($member['user_interests'])) ? censor_text($member['user_interests']) : '',

    613. 

  613. 			'SIGNATURE'		=> $member['user_sig'],

    614. 

  614. 			'POSTS_IN_QUEUE'=> $member['posts_in_queue'],

    615. 

  615. 

    616. 

  616. 			'AVATAR_IMG'	=> $poster_avatar,

    617. 

  617. 			'PM_IMG'		=> $user->img('icon_contact_pm', $user->lang['SEND_PRIVATE_MESSAGE']),

    618. 

  618. 			'EMAIL_IMG'		=> $user->img('icon_contact_email', $user->lang['EMAIL']),

    619. 

  619. 			'WWW_IMG'		=> $user->img('icon_contact_www', $user->lang['WWW']),

    620. 

  620. 			'ICQ_IMG'		=> $user->img('icon_contact_icq', $user->lang['ICQ']),

    621. 

  621. 			'AIM_IMG'		=> $user->img('icon_contact_aim', $user->lang['AIM']),

    622. 

  622. 			'MSN_IMG'		=> $user->img('icon_contact_msnm', $user->lang['MSNM']),

    623. 

  623. 			'YIM_IMG'		=> $user->img('icon_contact_yahoo', $user->lang['YIM']),

    624. 

  624. 			'JABBER_IMG'	=> $user->img('icon_contact_jabber', $user->lang['JABBER']),

    625. 

  625. 			'SEARCH_IMG'	=> $user->img('icon_user_search', $user->lang['SEARCH']),

    626. 

  626. 

    627. 

  627. 			'S_PROFILE_ACTION'	=> append_sid("{$phpbb_root_path}memberlist.$phpEx", 'mode=group'),

    628. 

  628. 			'S_GROUP_OPTIONS'	=> $group_options,

    629. 

  629. 			'S_CUSTOM_FIELDS'	=> (isset($profile_fields['row']) && sizeof($profile_fields['row'])) ? true : false,

    630. 

  630. 

    631. 

  631. 			'U_USER_ADMIN'			=> ($auth->acl_get('a_user')) ? append_sid("{$phpbb_root_path}adm/index.$phpEx", 'i=users&amp;mode=overview&amp;u=' . $user_id, true, $user->session_id) : '',

    632. 

  632. 			'U_USER_BAN'			=> ($auth->acl_get('m_ban') && $user_id != $user->data['user_id']) ? append_sid("{$phpbb_root_path}mcp.$phpEx", 'i=ban&amp;mode=user&amp;u=' . $user_id, true, $user->session_id) : '',

    633. 

  633. 			'U_MCP_QUEUE'			=> ($auth->acl_getf_global('m_approve')) ? append_sid("{$phpbb_root_path}mcp.$phpEx", 'i=queue', true, $user->session_id) : '',

    634. 

  634. 

    635. 

  635. 			'U_SWITCH_PERMISSIONS'	=> ($auth->acl_get('a_switchperm') && $user->data['user_id'] != $user_id) ? append_sid("{$phpbb_root_path}ucp.$phpEx", "mode=switch_perm&amp;u={$user_id}&amp;hash=" . generate_link_hash('switchperm')) : '',

    636. 

  636. 

    637. 

  637. 			'S_USER_NOTES'		=> ($user_notes_enabled) ? true : false,

    638. 

  638. 			'S_WARN_USER'		=> ($warn_user_enabled) ? true : false,

    639. 

  639. 			'S_ZEBRA'			=> ($user->data['user_id'] != $user_id && $user->data['is_registered'] && $zebra_enabled) ? true : false,

    640. 

  640. 			'U_ADD_FRIEND'		=> (!$friend && !$foe && $friends_enabled) ? append_sid("{$phpbb_root_path}ucp.$phpEx", 'i=zebra&amp;add=' . urlencode(htmlspecialchars_decode($member['username']))) : '',

    641. 

  641. 			'U_ADD_FOE'			=> (!$friend && !$foe && $foes_enabled) ? append_sid("{$phpbb_root_path}ucp.$phpEx", 'i=zebra&amp;mode=foes&amp;add=' . urlencode(htmlspecialchars_decode($member['username']))) : '',

    642. 

  642. 			'U_REMOVE_FRIEND'	=> ($friend && $friends_enabled) ? append_sid("{$phpbb_root_path}ucp.$phpEx", 'i=zebra&amp;remove=1&amp;usernames[]=' . $user_id) : '',

    643. 

  643. 			'U_REMOVE_FOE'		=> ($foe && $foes_enabled) ? append_sid("{$phpbb_root_path}ucp.$phpEx", 'i=zebra&amp;remove=1&amp;mode=foes&amp;usernames[]=' . $user_id) : '',

    644. 

  644. 		));

    645. 

  645. 

    646. 

  646. 		if (!empty($profile_fields['row']))

    647. 

  647. 		{

    648. 

  648. 			$template->assign_vars($profile_fields['row']);

    649. 

  649. 		}

    650. 

  650. 

    651. 

  651. 		if (!empty($profile_fields['blockrow']))

    652. 

  652. 		{

    653. 

  653. 			foreach ($profile_fields['blockrow'] as $field_data)

    654. 

  654. 			{

    655. 

  655. 				$template->assign_block_vars('custom_fields', $field_data);

    656. 

  656. 			}

    657. 

  657. 		}

    658. 

  658. 

    659. 

  659. 		// Inactive reason/account?

    660. 

  660. 		if ($member['user_type'] == USER_INACTIVE)

    661. 

  661. 		{

    662. 

  662. 			$user->add_lang('acp/common');

    663. 

  663. 

    664. 

  664. 			$inactive_reason = $user->lang['INACTIVE_REASON_UNKNOWN'];

    665. 

  665. 

    666. 

  666. 			switch ($member['user_inactive_reason'])

    667. 

  667. 			{

    668. 

  668. 				case INACTIVE_REGISTER:

    669. 

  669. 					$inactive_reason = $user->lang['INACTIVE_REASON_REGISTER'];

    670. 

  670. 				break;

    671. 

  671. 

    672. 

  672. 				case INACTIVE_PROFILE:

    673. 

  673. 					$inactive_reason = $user->lang['INACTIVE_REASON_PROFILE'];

    674. 

  674. 				break;

    675. 

  675. 

    676. 

  676. 				case INACTIVE_MANUAL:

    677. 

  677. 					$inactive_reason = $user->lang['INACTIVE_REASON_MANUAL'];

    678. 

  678. 				break;

    679. 

  679. 

    680. 

  680. 				case INACTIVE_REMIND:

    681. 

  681. 					$inactive_reason = $user->lang['INACTIVE_REASON_REMIND'];

    682. 

  682. 				break;

    683. 

  683. 			}

    684. 

  684. 

    685. 

  685. 			$template->assign_vars(array(

    686. 

  686. 				'S_USER_INACTIVE'		=> true,

    687. 

  687. 				'USER_INACTIVE_REASON'	=> $inactive_reason)

    688. 

  688. 			);

    689. 

  689. 		}

    690. 

  690. 

    691. 

  691. 		// Now generate page title

    692. 

  692. 		$page_title = sprintf($user->lang['VIEWING_PROFILE'], $member['username']);

    693. 

  693. 		$template_html = 'memberlist_view.html';

    694. 

  694. 

    695. 

  695. 	break;

    696. 

  696. 

    697. 

  697. 	case 'email':

    698. 

  698. 

    699. 

  699. 		// Send an email

    700. 

  700. 		$page_title = $user->lang['SEND_EMAIL'];

    701. 

  701. 		$template_html = 'memberlist_email.html';

    702. 

  702. 

    703. 

  703. 		add_form_key('memberlist_email');

    704. 

  704. 

    705. 

  705. 		if (!$config['email_enable'])

    706. 

  706. 		{

    707. 

  707. 			trigger_error('EMAIL_DISABLED');

    708. 

  708. 		}

    709. 

  709. 

    710. 

  710. 		if (!$auth->acl_get('u_sendemail'))

    711. 

  711. 		{

    712. 

  712. 			trigger_error('NO_EMAIL');

    713. 

  713. 		}

    714. 

  714. 

    715. 

  715. 		// Are we trying to abuse the facility?

    716. 

  716. 		if (time() - $user->data['user_emailtime'] < $config['flood_interval'])

    717. 

  717. 		{

    718. 

  718. 			trigger_error('FLOOD_EMAIL_LIMIT');

    719. 

  719. 		}

    720. 

  720. 

    721. 

  721. 		// Determine action...

    722. 

  722. 		$user_id = request_var('u', 0);

    723. 

  723. 		$topic_id = request_var('t', 0);

    724. 

  724. 

    725. 

  725. 		// Send email to user...

    726. 

  726. 		if ($user_id)

    727. 

  727. 		{

    728. 

  728. 			if ($user_id == ANONYMOUS || !$config['board_email_form'])

    729. 

  729. 			{

    730. 

  730. 				trigger_error('NO_EMAIL');

    731. 

  731. 			}

    732. 

  732. 

    733. 

  733. 			// Get the appropriate username, etc.

    734. 

  734. 			$sql = 'SELECT username, user_email, user_allow_viewemail, user_lang, user_jabber, user_notify_type

    735. 

  735. 				FROM ' . USERS_TABLE . "

    736. 

  736. 				WHERE user_id = $user_id

    737. 

  737. 					AND user_type IN (" . USER_NORMAL . ', ' . USER_FOUNDER . ')';

    738. 

  738. 			$result = $db->sql_query($sql);

    739. 

  739. 			$row = $db->sql_fetchrow($result);

    740. 

  740. 			$db->sql_freeresult($result);

    741. 

  741. 

    742. 

  742. 			if (!$row)

    743. 

  743. 			{

    744. 

  744. 				trigger_error('NO_USER');

    745. 

  745. 			}

    746. 

  746. 

    747. 

  747. 			// Can we send email to this user?

    748. 

  748. 			if (!$row['user_allow_viewemail'] && !$auth->acl_get('a_user'))

    749. 

  749. 			{

    750. 

  750. 				trigger_error('NO_EMAIL');

    751. 

  751. 			}

    752. 

  752. 		}

    753. 

  753. 		else if ($topic_id)

    754. 

  754. 		{

    755. 

  755. 			// Send topic heads-up to email address

    756. 

  756. 			$sql = 'SELECT forum_id, topic_title

    757. 

  757. 				FROM ' . TOPICS_TABLE . "

    758. 

  758. 				WHERE topic_id = $topic_id";

    759. 

  759. 			$result = $db->sql_query($sql);

    760. 

  760. 			$row = $db->sql_fetchrow($result);

    761. 

  761. 			$db->sql_freeresult($result);

    762. 

  762. 

    763. 

  763. 			if (!$row)

    764. 

  764. 			{

    765. 

  765. 				trigger_error('NO_TOPIC');

    766. 

  766. 			}

    767. 

  767. 

    768. 

  768. 			if ($row['forum_id'])

    769. 

  769. 			{

    770. 

  770. 				if (!$auth->acl_get('f_read', $row['forum_id']))

    771. 

  771. 				{

    772. 

  772. 					trigger_error('SORRY_AUTH_READ');

    773. 

  773. 				}

    774. 

  774. 

    775. 

  775. 				if (!$auth->acl_get('f_email', $row['forum_id']))

    776. 

  776. 				{

    777. 

  777. 					trigger_error('NO_EMAIL');

    778. 

  778. 				}

    779. 

  779. 			}

    780. 

  780. 			else

    781. 

  781. 			{

    782. 

  782. 				// If global announcement, we need to check if the user is able to at least read and email in one forum...

    783. 

  783. 				if (!$auth->acl_getf_global('f_read'))

    784. 

  784. 				{

    785. 

  785. 					trigger_error('SORRY_AUTH_READ');

    786. 

  786. 				}

    787. 

  787. 

    788. 

  788. 				if (!$auth->acl_getf_global('f_email'))

    789. 

  789. 				{

    790. 

  790. 					trigger_error('NO_EMAIL');

    791. 

  791. 				}

    792. 

  792. 			}

    793. 

  793. 		}

    794. 

  794. 		else

    795. 

  795. 		{

    796. 

  796. 			trigger_error('NO_EMAIL');

    797. 

  797. 		}

    798. 

  798. 

    799. 

  799. 		$error = array();

    800. 

  800. 

    801. 

  801. 		$name		= utf8_normalize_nfc(request_var('name', '', true));

    802. 

  802. 		$email		= request_var('email', '');

    803. 

  803. 		$email_lang = request_var('lang', $config['default_lang']);

    804. 

  804. 		$subject	= utf8_normalize_nfc(request_var('subject', '', true));

    805. 

  805. 		$message	= utf8_normalize_nfc(request_var('message', '', true));

    806. 

  806. 		$cc			= (isset($_POST['cc_email'])) ? true : false;

    807. 

  807. 		$submit		= (isset($_POST['submit'])) ? true : false;

    808. 

  808. 

    809. 

  809. 		if ($submit)

    810. 

  810. 		{

    811. 

  811. 			if (!check_form_key('memberlist_email'))

    812. 

  812. 			{

    813. 

  813. 				$error[] = 'FORM_INVALID';

    814. 

  814. 			}

    815. 

  815. 			if ($user_id)

    816. 

  816. 			{

    817. 

  817. 				if (!$subject)

    818. 

  818. 				{

    819. 

  819. 					$error[] = $user->lang['EMPTY_SUBJECT_EMAIL'];

    820. 

  820. 				}

    821. 

  821. 

    822. 

  822. 				if (!$message)

    823. 

  823. 				{

    824. 

  824. 					$error[] = $user->lang['EMPTY_MESSAGE_EMAIL'];

    825. 

  825. 				}

    826. 

  826. 

    827. 

  827. 				$name = $row['username'];

    828. 

  828. 				$email_lang = $row['user_lang'];

    829. 

  829. 				$email = $row['user_email'];

    830. 

  830. 			}

    831. 

  831. 			else

    832. 

  832. 			{

    833. 

  833. 				if (!$email || !preg_match('/^' . get_preg_expression('email') . '$/i', $email))

    834. 

  834. 				{

    835. 

  835. 					$error[] = $user->lang['EMPTY_ADDRESS_EMAIL'];

    836. 

  836. 				}

    837. 

  837. 

    838. 

  838. 				if (!$name)

    839. 

  839. 				{

    840. 

  840. 					$error[] = $user->lang['EMPTY_NAME_EMAIL'];

    841. 

  841. 				}

    842. 

  842. 			}

    843. 

  843. 

    844. 

  844. 			if (!sizeof($error))

    845. 

  845. 			{

    846. 

  846. 				$sql = 'UPDATE ' . USERS_TABLE . '

    847. 

  847. 					SET user_emailtime = ' . time() . '

    848. 

  848. 					WHERE user_id = ' . $user->data['user_id'];

    849. 

  849. 				$result = $db->sql_query($sql);

    850. 

  850. 

    851. 

  851. 				include_once($phpbb_root_path . 'includes/functions_messenger.' . $phpEx);

    852. 

  852. 				$messenger = new messenger(false);

    853. 

  853. 				$email_tpl = ($user_id) ? 'profile_send_email' : 'email_notify';

    854. 

  854. 

    855. 

  855. 				$mail_to_users = array();

    856. 

  856. 

    857. 

  857. 				$mail_to_users[] = array(

    858. 

  858. 					'email_lang'		=> $email_lang,

    859. 

  859. 					'email'				=> $email,

    860. 

  860. 					'name'				=> $name,

    861. 

  861. 					'username'			=> ($user_id) ? $row['username'] : '',

    862. 

  862. 					'to_name'			=> $name,

    863. 

  863. 					'user_jabber'		=> ($user_id) ? $row['user_jabber'] : '',

    864. 

  864. 					'user_notify_type'	=> ($user_id) ? $row['user_notify_type'] : NOTIFY_EMAIL,

    865. 

  865. 					'topic_title'		=> (!$user_id) ? $row['topic_title'] : '',

    866. 

  866. 					'forum_id'			=> (!$user_id) ? $row['forum_id'] : 0,

    867. 

  867. 				);

    868. 

  868. 

    869. 

  869. 				// Ok, now the same email if CC specified, but without exposing the users email address

    870. 

  870. 				if ($cc)

    871. 

  871. 				{

    872. 

  872. 					$mail_to_users[] = array(

    873. 

  873. 						'email_lang'		=> $user->data['user_lang'],

    874. 

  874. 						'email'				=> $user->data['user_email'],

    875. 

  875. 						'name'				=> $user->data['username'],

    876. 

  876. 						'username'			=> $user->data['username'],

    877. 

  877. 						'to_name'			=> $name,

    878. 

  878. 						'user_jabber'		=> $user->data['user_jabber'],

    879. 

  879. 						'user_notify_type'	=> ($user_id) ? $user->data['user_notify_type'] : NOTIFY_EMAIL,

    880. 

  880. 						'topic_title'		=> (!$user_id) ? $row['topic_title'] : '',

    881. 

  881. 						'forum_id'			=> (!$user_id) ? $row['forum_id'] : 0,

    882. 

  882. 					);

    883. 

  883. 				}

    884. 

  884. 

    885. 

  885. 				foreach ($mail_to_users as $row)

    886. 

  886. 				{

    887. 

  887. 					$messenger->template($email_tpl, $row['email_lang']);

    888. 

  888. 					$messenger->replyto($user->data['user_email']);

    889. 

  889. 					$messenger->to($row['email'], $row['name']);

    890. 

  890. 

    891. 

  891. 					if ($user_id)

    892. 

  892. 					{

    893. 

  893. 						$messenger->subject(htmlspecialchars_decode($subject));

    894. 

  894. 						$messenger->im($row['user_jabber'], $row['username']);

    895. 

  895. 						$notify_type = $row['user_notify_type'];

    896. 

  896. 					}

    897. 

  897. 					else

    898. 

  898. 					{

    899. 

  899. 						$notify_type = NOTIFY_EMAIL;

    900. 

  900. 					}

    901. 

  901. 

    902. 

  902. 					$messenger->headers('X-AntiAbuse: Board servername - ' . $config['server_name']);

    903. 

  903. 					$messenger->headers('X-AntiAbuse: User_id - ' . $user->data['user_id']);

    904. 

  904. 					$messenger->headers('X-AntiAbuse: Username - ' . $user->data['username']);

    905. 

  905. 					$messenger->headers('X-AntiAbuse: User IP - ' . $user->ip);

    906. 

  906. 

    907. 

  907. 					$messenger->assign_vars(array(

    908. 

  908. 						'BOARD_CONTACT'	=> $config['board_contact'],

    909. 

  909. 						'TO_USERNAME'	=> htmlspecialchars_decode($row['to_name']),

    910. 

  910. 						'FROM_USERNAME'	=> htmlspecialchars_decode($user->data['username']),

    911. 

  911. 						'MESSAGE'		=> htmlspecialchars_decode($message))

    912. 

  912. 					);

    913. 

  913. 

    914. 

  914. 					if ($topic_id)

    915. 

  915. 					{

    916. 

  916. 						$messenger->assign_vars(array(

    917. 

  917. 							'TOPIC_NAME'	=> htmlspecialchars_decode($row['topic_title']),

    918. 

  918. 							'U_TOPIC'		=> generate_board_url() . "/viewtopic.$phpEx?f=" . $row['forum_id'] . "&t=$topic_id")

    919. 

  919. 						);

    920. 

  920. 					}

    921. 

  921. 

    922. 

  922. 					$messenger->send($notify_type);

    923. 

  923. 				}

    924. 

  924. 

    925. 

  925. 				meta_refresh(3, append_sid("{$phpbb_root_path}index.$phpEx"));

    926. 

  926. 				$message = ($user_id) ? sprintf($user->lang['RETURN_INDEX'], '<a href="' . append_sid("{$phpbb_root_path}index.$phpEx") . '">', '</a>') : sprintf($user->lang['RETURN_TOPIC'],  '<a href="' . append_sid("{$phpbb_root_path}viewtopic.$phpEx", "f={$row['forum_id']}&amp;t=$topic_id") . '">', '</a>');

    927. 

  927. 				trigger_error($user->lang['EMAIL_SENT'] . '<br /><br />' . $message);

    928. 

  928. 			}

    929. 

  929. 		}

    930. 

  930. 

    931. 

  931. 		if ($user_id)

    932. 

  932. 		{

    933. 

  933. 			$template->assign_vars(array(

    934. 

  934. 				'S_SEND_USER'	=> true,

    935. 

  935. 				'USERNAME'		=> $row['username'],

    936. 

  936. 

    937. 

  937. 				'L_EMAIL_BODY_EXPLAIN'	=> $user->lang['EMAIL_BODY_EXPLAIN'],

    938. 

  938. 				'S_POST_ACTION'			=> append_sid("{$phpbb_root_path}memberlist.$phpEx", 'mode=email&amp;u=' . $user_id))

    939. 

  939. 			);

    940. 

  940. 		}

    941. 

  941. 		else

    942. 

  942. 		{

    943. 

  943. 			$template->assign_vars(array(

    944. 

  944. 				'EMAIL'				=> $email,

    945. 

  945. 				'NAME'				=> $name,

    946. 

  946. 				'S_LANG_OPTIONS'	=> language_select($email_lang),

    947. 

  947. 

    948. 

  948. 				'L_EMAIL_BODY_EXPLAIN'	=> $user->lang['EMAIL_TOPIC_EXPLAIN'],

    949. 

  949. 				'S_POST_ACTION'			=> append_sid("{$phpbb_root_path}memberlist.$phpEx", 'mode=email&amp;t=' . $topic_id))

    950. 

  950. 			);

    951. 

  951. 		}

    952. 

  952. 

    953. 

  953. 		$template->assign_vars(array(

    954. 

  954. 			'ERROR_MESSAGE'		=> (sizeof($error)) ? implode('<br />', $error) : '',

    955. 

  955. 			'SUBJECT'			=> $subject,

    956. 

  956. 			'MESSAGE'			=> $message,

    957. 

  957. 			)

    958. 

  958. 		);

    959. 

  959. 

    960. 

  960. 	break;

    961. 

  961. 

    962. 

  962. 	case 'group':

    963. 

  963. 	default:

    964. 

  964. 		// The basic memberlist

    965. 

  965. 		$page_title = $user->lang['MEMBERLIST'];

    966. 

  966. 		$template_html = 'memberlist_body.html';

    967. 

  967. 

    968. 

  968. 		// Sorting

    969. 

  969. 		$sort_key_text = array('a' => $user->lang['SORT_USERNAME'], 'b' => $user->lang['SORT_LOCATION'], 'c' => $user->lang['SORT_JOINED'], 'd' => $user->lang['SORT_POST_COUNT'], 'f' => $user->lang['WEBSITE'], 'g' => $user->lang['ICQ'], 'h' => $user->lang['AIM'], 'i' => $user->lang['MSNM'], 'j' => $user->lang['YIM'], 'k' => $user->lang['JABBER']);

    970. 

  970. 		$sort_key_sql = array('a' => 'u.username_clean', 'b' => 'u.user_from', 'c' => 'u.user_regdate', 'd' => 'u.user_posts', 'f' => 'u.user_website', 'g' => 'u.user_icq', 'h' => 'u.user_aim', 'i' => 'u.user_msnm', 'j' => 'u.user_yim', 'k' => 'u.user_jabber');

    971. 

  971. 

    972. 

  972. 		if ($auth->acl_get('a_user'))

    973. 

  973. 		{

    974. 

  974. 			$sort_key_text['e'] = $user->lang['SORT_EMAIL'];

    975. 

  975. 			$sort_key_sql['e'] = 'u.user_email';

    976. 

  976. 		}

    977. 

  977. 

    978. 

  978. 		if ($auth->acl_get('u_viewonline'))

    979. 

  979. 		{

    980. 

  980. 			$sort_key_text['l'] = $user->lang['SORT_LAST_ACTIVE'];

    981. 

  981. 			$sort_key_sql['l'] = 'u.user_lastvisit';

    982. 

  982. 		}

    983. 

  983. 

    984. 

  984. 		$sort_key_text['m'] = $user->lang['SORT_RANK'];

    985. 

  985. 		$sort_key_sql['m'] = 'u.user_rank';

    986. 

  986. 

    987. 

  987. 		$sort_dir_text = array('a' => $user->lang['ASCENDING'], 'd' => $user->lang['DESCENDING']);

    988. 

  988. 

    989. 

  989. 		$s_sort_key = '';

    990. 

  990. 		foreach ($sort_key_text as $key => $value)

    991. 

  991. 		{

    992. 

  992. 			$selected = ($sort_key == $key) ? ' selected="selected"' : '';

    993. 

  993. 			$s_sort_key .= '<option value="' . $key . '"' . $selected . '>' . $value . '</option>';

    994. 

  994. 		}

    995. 

  995. 

    996. 

  996. 		$s_sort_dir = '';

    997. 

  997. 		foreach ($sort_dir_text as $key => $value)

    998. 

  998. 		{

    999. 

  999. 			$selected = ($sort_dir == $key) ? ' selected="selected"' : '';

    1000. 

  1000. 			$s_sort_dir .= '<option value="' . $key . '"' . $selected . '>' . $value . '</option>';

    1001. 

  1001. 		}

    1002. 

  1002. 

    1003. 

  1003. 		// Additional sorting options for user search ... if search is enabled, if not

    1004. 

  1004. 		// then only admins can make use of this (for ACP functionality)

    1005. 

  1005. 		$sql_select = $sql_where_data = $sql_from = $sql_where = $order_by = '';

    1006. 

  1006. 

    1007. 

  1007. 

    1008. 

  1008. 		$form			= request_var('form', '');

    1009. 

  1009. 		$field			= request_var('field', '');

    1010. 

  1010. 		$select_single 	= request_var('select_single', false);

    1011. 

  1011. 

    1012. 

  1012. 		// Search URL parameters, if any of these are in the URL we do a search

    1013. 

  1013. 		$search_params = array('username', 'email', 'icq', 'aim', 'yahoo', 'msn', 'jabber', 'search_group_id', 'joined_select', 'active_select', 'count_select', 'joined', 'active', 'count', 'ip');

    1014. 

  1014. 

    1015. 

  1015. 		// We validate form and field here, only id/class allowed

    1016. 

  1016. 		$form = (!preg_match('/^[a-z0-9_-]+$/i', $form)) ? '' : $form;

    1017. 

  1017. 		$field = (!preg_match('/^[a-z0-9_-]+$/i', $field)) ? '' : $field;

    1018. 

  1018. 		if (($mode == 'searchuser' || sizeof(array_intersect(array_keys($_GET), $search_params)) > 0) && ($config['load_search'] || $auth->acl_get('a_')))

    1019. 

  1019. 		{

    1020. 

  1020. 			$username	= request_var('username', '', true);

    1021. 

  1021. 			$email		= strtolower(request_var('email', ''));

    1022. 

  1022. 			$icq		= request_var('icq', '');

    1023. 

  1023. 			$aim		= request_var('aim', '');

    1024. 

  1024. 			$yahoo		= request_var('yahoo', '');

    1025. 

  1025. 			$msn		= request_var('msn', '');

    1026. 

  1026. 			$jabber		= request_var('jabber', '');

    1027. 

  1027. 			$search_group_id	= request_var('search_group_id', 0);

    1028. 

  1028. 

    1029. 

  1029. 			// when using these, make sure that we actually have values defined in $find_key_match

    1030. 

  1030. 			$joined_select	= request_var('joined_select', 'lt');

    1031. 

  1031. 			$active_select	= request_var('active_select', 'lt');

    1032. 

  1032. 			$count_select	= request_var('count_select', 'eq');

    1033. 

  1033. 

    1034. 

  1034. 			$joined			= explode('-', request_var('joined', ''));

    1035. 

  1035. 			$active			= explode('-', request_var('active', ''));

    1036. 

  1036. 			$count			= (request_var('count', '') !== '') ? request_var('count', 0) : '';

    1037. 

  1037. 			$ipdomain		= request_var('ip', '');

    1038. 

  1038. 

    1039. 

  1039. 			$find_key_match = array('lt' => '<', 'gt' => '>', 'eq' => '=');

    1040. 

  1040. 

    1041. 

  1041. 			$find_count = array('lt' => $user->lang['LESS_THAN'], 'eq' => $user->lang['EQUAL_TO'], 'gt' => $user->lang['MORE_THAN']);

    1042. 

  1042. 			$s_find_count = '';

    1043. 

  1043. 			foreach ($find_count as $key => $value)

    1044. 

  1044. 			{

    1045. 

  1045. 				$selected = ($count_select == $key) ? ' selected="selected"' : '';

    1046. 

  1046. 				$s_find_count .= '<option value="' . $key . '"' . $selected . '>' . $value . '</option>';

    1047. 

  1047. 			}

    1048. 

  1048. 

    1049. 

  1049. 			$find_time = array('lt' => $user->lang['BEFORE'], 'gt' => $user->lang['AFTER']);

    1050. 

  1050. 			$s_find_join_time = '';

    1051. 

  1051. 			foreach ($find_time as $key => $value)

    1052. 

  1052. 			{

    1053. 

  1053. 				$selected = ($joined_select == $key) ? ' selected="selected"' : '';

    1054. 

  1054. 				$s_find_join_time .= '<option value="' . $key . '"' . $selected . '>' . $value . '</option>';

    1055. 

  1055. 			}

    1056. 

  1056. 

    1057. 

  1057. 			$s_find_active_time = '';

    1058. 

  1058. 			foreach ($find_time as $key => $value)

    1059. 

  1059. 			{

    1060. 

  1060. 				$selected = ($active_select == $key) ? ' selected="selected"' : '';

    1061. 

  1061. 				$s_find_active_time .= '<option value="' . $key . '"' . $selected . '>' . $value . '</option>';

    1062. 

  1062. 			}

    1063. 

  1063. 

    1064. 

  1064. 			$sql_where .= ($username) ? ' AND u.username_clean ' . $db->sql_like_expression(str_replace('*', $db->any_char, utf8_clean_string($username))) : '';

    1065. 

  1065. 			$sql_where .= ($auth->acl_get('a_user') && $email) ? ' AND u.user_email ' . $db->sql_like_expression(str_replace('*', $db->any_char, $email)) . ' ' : '';

    1066. 

  1066. 			$sql_where .= ($icq) ? ' AND u.user_icq ' . $db->sql_like_expression(str_replace('*', $db->any_char, $icq)) . ' ' : '';

    1067. 

  1067. 			$sql_where .= ($aim) ? ' AND u.user_aim ' . $db->sql_like_expression(str_replace('*', $db->any_char, $aim)) . ' ' : '';

    1068. 

  1068. 			$sql_where .= ($yahoo) ? ' AND u.user_yim ' . $db->sql_like_expression(str_replace('*', $db->any_char, $yahoo)) . ' ' : '';

    1069. 

  1069. 			$sql_where .= ($msn) ? ' AND u.user_msnm ' . $db->sql_like_expression(str_replace('*', $db->any_char, $msn)) . ' ' : '';

    1070. 

  1070. 			$sql_where .= ($jabber) ? ' AND u.user_jabber ' . $db->sql_like_expression(str_replace('*', $db->any_char, $jabber)) . ' ' : '';

    1071. 

  1071. 			$sql_where .= (is_numeric($count) && isset($find_key_match[$count_select])) ? ' AND u.user_posts ' . $find_key_match[$count_select] . ' ' . (int) $count . ' ' : '';

    1072. 

  1072. 

    1073. 

  1073. 			if (isset($find_key_match[$joined_select]) && sizeof($joined) == 3)

    1074. 

  1074. 			{

    1075. 

  1075. 				// Before PHP 5.1 an error value -1 can be returned instead of false.

    1076. 

  1076. 				// Theoretically gmmktime() can also legitimately return -1 as an actual timestamp.

    1077. 

  1077. 				// But since we do not pass the $second parameter to gmmktime(),

    1078. 

  1078. 				// an actual unix timestamp -1 cannot be returned in this case.

    1079. 

  1079. 				// Thus we can check whether it is -1 and treat -1 as an error.

    1080. 

  1080. 				$joined_time = gmmktime(0, 0, 0, (int) $joined[1], (int) $joined[2], (int) $joined[0]);

    1081. 

  1081. 

    1082. 

  1082. 				if ($joined_time !== false && $joined_time !== -1)

    1083. 

  1083. 				{

    1084. 

  1084. 					$sql_where .= " AND u.user_regdate " . $find_key_match[$joined_select] . ' ' . $joined_time;

    1085. 

  1085. 				}

    1086. 

  1086. 			}

    1087. 

  1087. 

    1088. 

  1088. 			if (isset($find_key_match[$active_select]) && sizeof($active) == 3 && $auth->acl_get('u_viewonline'))

    1089. 

  1089. 			{

    1090. 

  1090. 				$active_time = gmmktime(0, 0, 0, (int) $active[1], (int) $active[2], (int) $active[0]);

    1091. 

  1091. 

    1092. 

  1092. 				if ($active_time !== false && $active_time !== -1)

    1093. 

  1093. 				{

    1094. 

  1094. 					$sql_where .= " AND u.user_lastvisit " . $find_key_match[$active_select] . ' ' . $active_time;

    1095. 

  1095. 				}

    1096. 

  1096. 			}

    1097. 

  1097. 

    1098. 

  1098. 			$sql_where .= ($search_group_id) ? " AND u.user_id = ug.user_id AND ug.group_id = $search_group_id AND ug.user_pending = 0 " : '';

    1099. 

  1099. 

    1100. 

  1100. 			if ($search_group_id)

    1101. 

  1101. 			{

    1102. 

  1102. 				$sql_from = ', ' . USER_GROUP_TABLE . ' ug ';

    1103. 

  1103. 			}

    1104. 

  1104. 

    1105. 

  1105. 			if ($ipdomain && $auth->acl_getf_global('m_info'))

    1106. 

  1106. 			{

    1107. 

  1107. 				if (strspn($ipdomain, 'abcdefghijklmnopqrstuvwxyz'))

    1108. 

  1108. 				{

    1109. 

  1109. 					$hostnames = gethostbynamel($ipdomain);

    1110. 

  1110. 

    1111. 

  1111. 					if ($hostnames !== false)

    1112. 

  1112. 					{

    1113. 

  1113. 						$ips = "'" . implode('\', \'', array_map(array($db, 'sql_escape'), preg_replace('#([0-9]{1,3}\.[0-9]{1,3}[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3})#', "\\1", gethostbynamel($ipdomain)))) . "'";

    1114. 

  1114. 					}

    1115. 

  1115. 					else

    1116. 

  1116. 					{

    1117. 

  1117. 						$ips = false;

    1118. 

  1118. 					}

    1119. 

  1119. 				}

    1120. 

  1120. 				else

    1121. 

  1121. 				{

    1122. 

  1122. 					$ips = "'" . str_replace('*', '%', $db->sql_escape($ipdomain)) . "'";

    1123. 

  1123. 				}

    1124. 

  1124. 

    1125. 

  1125. 				if ($ips === false)

    1126. 

  1126. 				{

    1127. 

  1127. 					// A minor fudge but it does the job :D

    1128. 

  1128. 					$sql_where .= " AND u.user_id = 0";

    1129. 

  1129. 				}

    1130. 

  1130. 				else

    1131. 

  1131. 				{

    1132. 

  1132. 					$ip_forums = array_keys($auth->acl_getf('m_info', true));

    1133. 

  1133. 

    1134. 

  1134. 					$sql = 'SELECT DISTINCT poster_id

    1135. 

  1135. 						FROM ' . POSTS_TABLE . '

    1136. 

  1136. 						WHERE poster_ip ' . ((strpos($ips, '%') !== false) ? 'LIKE' : 'IN') . " ($ips)

    1137. 

  1137. 							AND forum_id IN (0, " . implode(', ', $ip_forums) . ')';

    1138. 

  1138. 					$result = $db->sql_query($sql);

    1139. 

  1139. 

    1140. 

  1140. 					if ($row = $db->sql_fetchrow($result))

    1141. 

  1141. 					{

    1142. 

  1142. 						$ip_sql = array();

    1143. 

  1143. 						do

    1144. 

  1144. 						{

    1145. 

  1145. 							$ip_sql[] = $row['poster_id'];

    1146. 

  1146. 						}

    1147. 

  1147. 						while ($row = $db->sql_fetchrow($result));

    1148. 

  1148. 

    1149. 

  1149. 						$sql_where .= ' AND ' . $db->sql_in_set('u.user_id', $ip_sql);

    1150. 

  1150. 					}

    1151. 

  1151. 					else

    1152. 

  1152. 					{

    1153. 

  1153. 						// A minor fudge but it does the job :D

    1154. 

  1154. 						$sql_where .= " AND u.user_id = 0";

    1155. 

  1155. 					}

    1156. 

  1156. 					unset($ip_forums);

    1157. 

  1157. 

    1158. 

  1158. 					$db->sql_freeresult($result);

    1159. 

  1159. 				}

    1160. 

  1160. 			}

    1161. 

  1161. 		}

    1162. 

  1162. 

    1163. 

  1163. 		$first_char = request_var('first_char', '');

    1164. 

  1164. 

    1165. 

  1165. 		if ($first_char == 'other')

    1166. 

  1166. 		{

    1167. 

  1167. 			for ($i = 97; $i < 123; $i++)

    1168. 

  1168. 			{

    1169. 

  1169. 				$sql_where .= ' AND u.username_clean NOT ' . $db->sql_like_expression(chr($i) . $db->any_char);

    1170. 

  1170. 			}

    1171. 

  1171. 		}

    1172. 

  1172. 		else if ($first_char)

    1173. 

  1173. 		{

    1174. 

  1174. 			$sql_where .= ' AND u.username_clean ' . $db->sql_like_expression(substr($first_char, 0, 1) . $db->any_char);

    1175. 

  1175. 		}

    1176. 

  1176. 

    1177. 

  1177. 		// Are we looking at a usergroup? If so, fetch additional info

    1178. 

  1178. 		// and further restrict the user info query

    1179. 

  1179. 		if ($mode == 'group')

    1180. 

  1180. 		{

    1181. 

  1181. 			// We JOIN here to save a query for determining membership for hidden groups. ;)

    1182. 

  1182. 			$sql = 'SELECT g.*, ug.user_id

    1183. 

  1183. 				FROM ' . GROUPS_TABLE . ' g

    1184. 

  1184. 				LEFT JOIN ' . USER_GROUP_TABLE . ' ug ON (ug.user_pending = 0 AND ug.user_id = ' . $user->data['user_id'] . " AND ug.group_id = $group_id)

    1185. 

  1185. 				WHERE g.group_id = $group_id";

    1186. 

  1186. 			$result = $db->sql_query($sql);

    1187. 

  1187. 			$group_row = $db->sql_fetchrow($result);

    1188. 

  1188. 			$db->sql_freeresult($result);

    1189. 

  1189. 

    1190. 

  1190. 			if (!$group_row)

    1191. 

  1191. 			{

    1192. 

  1192. 				trigger_error('NO_GROUP');

    1193. 

  1193. 			}

    1194. 

  1194. 

    1195. 

  1195. 			switch ($group_row['group_type'])

    1196. 

  1196. 			{

    1197. 

  1197. 				case GROUP_OPEN:

    1198. 

  1198. 					$group_row['l_group_type'] = 'OPEN';

    1199. 

  1199. 				break;

    1200. 

  1200. 

    1201. 

  1201. 				case GROUP_CLOSED:

    1202. 

  1202. 					$group_row['l_group_type'] = 'CLOSED';

    1203. 

  1203. 				break;

    1204. 

  1204. 

    1205. 

  1205. 				case GROUP_HIDDEN:

    1206. 

  1206. 					$group_row['l_group_type'] = 'HIDDEN';

    1207. 

  1207. 

    1208. 

  1208. 					// Check for membership or special permissions

    1209. 

  1209. 					if (!$auth->acl_gets('a_group', 'a_groupadd', 'a_groupdel') && $group_row['user_id'] != $user->data['user_id'])

    1210. 

  1210. 					{

    1211. 

  1211. 						trigger_error('NO_GROUP');

    1212. 

  1212. 					}

    1213. 

  1213. 				break;

    1214. 

  1214. 

    1215. 

  1215. 				case GROUP_SPECIAL:

    1216. 

  1216. 					$group_row['l_group_type'] = 'SPECIAL';

    1217. 

  1217. 				break;

    1218. 

  1218. 

    1219. 

  1219. 				case GROUP_FREE:

    1220. 

  1220. 					$group_row['l_group_type'] = 'FREE';

    1221. 

  1221. 				break;

    1222. 

  1222. 			}

    1223. 

  1223. 

    1224. 

  1224. 			// Misusing the avatar function for displaying group avatars...

    1225. 

  1225. 			$avatar_img = get_user_avatar($group_row['group_avatar'], $group_row['group_avatar_type'], $group_row['group_avatar_width'], $group_row['group_avatar_height'], 'GROUP_AVATAR');

    1226. 

  1226. 

    1227. 

  1227. 			$rank_title = $rank_img = $rank_img_src = '';

    1228. 

  1228. 			if ($group_row['group_rank'])

    1229. 

  1229. 			{

    1230. 

  1230. 				if (isset($ranks['special'][$group_row['group_rank']]))

    1231. 

  1231. 				{

    1232. 

  1232. 					$rank_title = $ranks['special'][$group_row['group_rank']]['rank_title'];

    1233. 

  1233. 				}

    1234. 

  1234. 				$rank_img = (!empty($ranks['special'][$group_row['group_rank']]['rank_image'])) ? '<img src="' . $config['ranks_path'] . '/' . $ranks['special'][$group_row['group_rank']]['rank_image'] . '" alt="' . $ranks['special'][$group_row['group_rank']]['rank_title'] . '" title="' . $ranks['special'][$group_row['group_rank']]['rank_title'] . '" /><br />' : '';

    1235. 

  1235. 				$rank_img_src = (!empty($ranks['special'][$group_row['group_rank']]['rank_image'])) ? $config['ranks_path'] . '/' . $ranks['special'][$group_row['group_rank']]['rank_image'] : '';

    1236. 

  1236. 			}

    1237. 

  1237. 			else

    1238. 

  1238. 			{

    1239. 

  1239. 				$rank_title = '';

    1240. 

  1240. 				$rank_img = '';

    1241. 

  1241. 				$rank_img_src = '';

    1242. 

  1242. 			}

    1243. 

  1243. 

    1244. 

  1244. 			$template->assign_vars(array(

    1245. 

  1245. 				'GROUP_DESC'	=> generate_text_for_display($group_row['group_desc'], $group_row['group_desc_uid'], $group_row['group_desc_bitfield'], $group_row['group_desc_options']),

    1246. 

  1246. 				'GROUP_NAME'	=> ($group_row['group_type'] == GROUP_SPECIAL) ? $user->lang['G_' . $group_row['group_name']] : $group_row['group_name'],

    1247. 

  1247. 				'GROUP_COLOR'	=> $group_row['group_colour'],

    1248. 

  1248. 				'GROUP_TYPE'	=> $user->lang['GROUP_IS_' . $group_row['l_group_type']],

    1249. 

  1249. 				'GROUP_RANK'	=> $rank_title,

    1250. 

  1250. 

    1251. 

  1251. 				'AVATAR_IMG'	=> $avatar_img,

    1252. 

  1252. 				'RANK_IMG'		=> $rank_img,

    1253. 

  1253. 				'RANK_IMG_SRC'	=> $rank_img_src,

    1254. 

  1254. 

    1255. 

  1255. 				'U_PM'			=> ($auth->acl_get('u_sendpm') && $auth->acl_get('u_masspm_group') && $group_row['group_receive_pm'] && $config['allow_privmsg'] && $config['allow_mass_pm']) ? append_sid("{$phpbb_root_path}ucp.$phpEx", 'i=pm&amp;mode=compose&amp;g=' . $group_id) : '',)

    1256. 

  1256. 			);

    1257. 

  1257. 

    1258. 

  1258. 			$sql_select = ', ug.group_leader';

    1259. 

  1259. 			$sql_from = ', ' . USER_GROUP_TABLE . ' ug ';

    1260. 

  1260. 			$order_by = 'ug.group_leader DESC, ';

    1261. 

  1261. 

    1262. 

  1262. 			$sql_where .= " AND ug.user_pending = 0 AND u.user_id = ug.user_id AND ug.group_id = $group_id";

    1263. 

  1263. 			$sql_where_data = " AND u.user_id = ug.user_id AND ug.group_id = $group_id";

    1264. 

  1264. 		}

    1265. 

  1265. 

    1266. 

  1266. 		// Sorting and order

    1267. 

  1267. 		if (!isset($sort_key_sql[$sort_key]))

    1268. 

  1268. 		{

    1269. 

  1269. 			$sort_key = $default_key;

    1270. 

  1270. 		}

    1271. 

  1271. 

    1272. 

  1272. 		$order_by .= $sort_key_sql[$sort_key] . ' ' . (($sort_dir == 'a') ? 'ASC' : 'DESC');

    1273. 

  1273. 

    1274. 

  1274. 		// Unfortunately we must do this here for sorting by rank, else the sort order is applied wrongly

    1275. 

  1275. 		if ($sort_key == 'm')

    1276. 

  1276. 		{

    1277. 

  1277. 			$order_by .= ', u.user_posts DESC';

    1278. 

  1278. 		}

    1279. 

  1279. 

    1280. 

  1280. 		// Count the users ...

    1281. 

  1281. 		if ($sql_where)

    1282. 

  1282. 		{

    1283. 

  1283. 			$sql = 'SELECT COUNT(u.user_id) AS total_users

    1284. 

  1284. 				FROM ' . USERS_TABLE . " u$sql_from

    1285. 

  1285. 				WHERE u.user_type IN (" . USER_NORMAL . ', ' . USER_FOUNDER . ")

    1286. 

  1286. 				$sql_where";

    1287. 

  1287. 			$result = $db->sql_query($sql);

    1288. 

  1288. 			$total_users = (int) $db->sql_fetchfield('total_users');

    1289. 

  1289. 			$db->sql_freeresult($result);

    1290. 

  1290. 		}

    1291. 

  1291. 		else

    1292. 

  1292. 		{

    1293. 

  1293. 			$total_users = $config['num_users'];

    1294. 

  1294. 		}

    1295. 

  1295. 

    1296. 

  1296. 		$s_char_options = '<option value=""' . ((!$first_char) ? ' selected="selected"' : '') . '>&nbsp; &nbsp;</option>';

    1297. 

  1297. 		for ($i = 97; $i < 123; $i++)

    1298. 

  1298. 		{

    1299. 

  1299. 			$s_char_options .= '<option value="' . chr($i) . '"' . (($first_char == chr($i)) ? ' selected="selected"' : '') . '>' . chr($i-32) . '</option>';

    1300. 

  1300. 		}

    1301. 

  1301. 		$s_char_options .= '<option value="other"' . (($first_char == 'other') ? ' selected="selected"' : '') . '>' . $user->lang['OTHER'] . '</option>';

    1302. 

  1302. 

    1303. 

  1303. 		// Build a relevant pagination_url

    1304. 

  1304. 		$params = $sort_params = array();

    1305. 

  1305. 

    1306. 

  1306. 		// We do not use request_var() here directly to save some calls (not all variables are set)

    1307. 

  1307. 		$check_params = array(

    1308. 

  1308. 			'g'				=> array('g', 0),

    1309. 

  1309. 			'sk'			=> array('sk', $default_key),

    1310. 

  1310. 			'sd'			=> array('sd', 'a'),

    1311. 

  1311. 			'form'			=> array('form', ''),

    1312. 

  1312. 			'field'			=> array('field', ''),

    1313. 

  1313. 			'select_single'	=> array('select_single', $select_single),

    1314. 

  1314. 			'username'		=> array('username', '', true),

    1315. 

  1315. 			'email'			=> array('email', ''),

    1316. 

  1316. 			'icq'			=> array('icq', ''),

    1317. 

  1317. 			'aim'			=> array('aim', ''),

    1318. 

  1318. 			'yahoo'			=> array('yahoo', ''),

    1319. 

  1319. 			'msn'			=> array('msn', ''),

    1320. 

  1320. 			'jabber'		=> array('jabber', ''),

    1321. 

  1321. 			'search_group_id'	=> array('search_group_id', 0),

    1322. 

  1322. 			'joined_select'	=> array('joined_select', 'lt'),

    1323. 

  1323. 			'active_select'	=> array('active_select', 'lt'),

    1324. 

  1324. 			'count_select'	=> array('count_select', 'eq'),

    1325. 

  1325. 			'joined'		=> array('joined', ''),

    1326. 

  1326. 			'active'		=> array('active', ''),

    1327. 

  1327. 			'count'			=> (request_var('count', '') !== '') ? array('count', 0) : array('count', ''),

    1328. 

  1328. 			'ip'			=> array('ip', ''),

    1329. 

  1329. 			'first_char'	=> array('first_char', ''),

    1330. 

  1330. 		);

    1331. 

  1331. 

    1332. 

  1332. 		foreach ($check_params as $key => $call)

    1333. 

  1333. 		{

    1334. 

  1334. 			if (!isset($_REQUEST[$key]))

    1335. 

  1335. 			{

    1336. 

  1336. 				continue;

    1337. 

  1337. 			}

    1338. 

  1338. 

    1339. 

  1339. 			$param = call_user_func_array('request_var', $call);

    1340. 

  1340. 			$param = urlencode($key) . '=' . ((is_string($param)) ? urlencode($param) : $param);

    1341. 

  1341. 			$params[] = $param;

    1342. 

  1342. 

    1343. 

  1343. 			if ($key != 'sk' && $key != 'sd')

    1344. 

  1344. 			{

    1345. 

  1345. 				$sort_params[] = $param;

    1346. 

  1346. 			}

    1347. 

  1347. 		}

    1348. 

  1348. 

    1349. 

  1349. 		$u_hide_find_member = append_sid("{$phpbb_root_path}memberlist.$phpEx", "start=$start" . (!empty($params) ? '&amp;' . implode('&amp;', $params) : ''));

    1350. 

  1350. 

    1351. 

  1351. 		if ($mode)

    1352. 

  1352. 		{

    1353. 

  1353. 			$params[] = "mode=$mode";

    1354. 

  1354. 		}

    1355. 

  1355. 		$sort_params[] = "mode=$mode";

    1356. 

  1356. 

    1357. 

  1357. 		$pagination_url = append_sid("{$phpbb_root_path}memberlist.$phpEx", implode('&amp;', $params));

    1358. 

  1358. 		$sort_url = append_sid("{$phpbb_root_path}memberlist.$phpEx", implode('&amp;', $sort_params));

    1359. 

  1359. 

    1360. 

  1360. 		unset($search_params, $sort_params);

    1361. 

  1361. 

    1362. 

  1362. 		// Some search user specific data

    1363. 

  1363. 		if ($mode == 'searchuser' && ($config['load_search'] || $auth->acl_get('a_')))

    1364. 

  1364. 		{

    1365. 

  1365. 			$group_selected = request_var('search_group_id', 0);

    1366. 

  1366. 			$s_group_select = '<option value="0"' . ((!$group_selected) ? ' selected="selected"' : '') . '>&nbsp;</option>';

    1367. 

  1367. 			$group_ids = array();

    1368. 

  1368. 

    1369. 

  1369. 			/**

    1370. 

  1370. 			* @todo add this to a separate function (function is responsible for returning the groups the user is able to see based on the users group membership)

    1371. 

  1371. 			*/

    1372. 

  1372. 

    1373. 

  1373. 			if ($auth->acl_gets('a_group', 'a_groupadd', 'a_groupdel'))

    1374. 

  1374. 			{

    1375. 

  1375. 				$sql = 'SELECT group_id, group_name, group_type

    1376. 

  1376. 					FROM ' . GROUPS_TABLE;

    1377. 

  1377. 

    1378. 

  1378. 				if (!$config['coppa_enable'])

    1379. 

  1379. 				{

    1380. 

  1380. 					$sql .= " WHERE group_name <> 'REGISTERED_COPPA'";

    1381. 

  1381. 				}

    1382. 

  1382. 

    1383. 

  1383. 				$sql .= ' ORDER BY group_name ASC';

    1384. 

  1384. 			}

    1385. 

  1385. 			else

    1386. 

  1386. 			{

    1387. 

  1387. 				$sql = 'SELECT g.group_id, g.group_name, g.group_type

    1388. 

  1388. 					FROM ' . GROUPS_TABLE . ' g

    1389. 

  1389. 					LEFT JOIN ' . USER_GROUP_TABLE . ' ug

    1390. 

  1390. 						ON (

    1391. 

  1391. 							g.group_id = ug.group_id

    1392. 

  1392. 							AND ug.user_id = ' . $user->data['user_id'] . '

    1393. 

  1393. 							AND ug.user_pending = 0

    1394. 

  1394. 						)

    1395. 

  1395. 					WHERE (g.group_type <> ' . GROUP_HIDDEN . ' OR ug.user_id = ' . $user->data['user_id'] . ')';

    1396. 

  1396. 

    1397. 

  1397. 				if (!$config['coppa_enable'])

    1398. 

  1398. 				{

    1399. 

  1399. 					$sql .= " AND g.group_name <> 'REGISTERED_COPPA'";

    1400. 

  1400. 				}

    1401. 

  1401. 

    1402. 

  1402. 				$sql .= ' ORDER BY g.group_name ASC';

    1403. 

  1403. 			}

    1404. 

  1404. 			$result = $db->sql_query($sql);

    1405. 

  1405. 

    1406. 

  1406. 			while ($row = $db->sql_fetchrow($result))

    1407. 

  1407. 			{

    1408. 

  1408. 				$group_ids[] = $row['group_id'];

    1409. 

  1409. 				$s_group_select .= '<option value="' . $row['group_id'] . '"' . (($group_selected == $row['group_id']) ? ' selected="selected"' : '') . '>' . (($row['group_type'] == GROUP_SPECIAL) ? $user->lang['G_' . $row['group_name']] : $row['group_name']) . '</option>';

    1410. 

  1410. 			}

    1411. 

  1411. 			$db->sql_freeresult($result);

    1412. 

  1412. 

    1413. 

  1413. 			if ($group_selected !== 0 && !in_array($group_selected, $group_ids))

    1414. 

  1414. 			{

    1415. 

  1415. 				trigger_error('NO_GROUP');

    1416. 

  1416. 			}

    1417. 

  1417. 

    1418. 

  1418. 			$template->assign_vars(array(

    1419. 

  1419. 				'USERNAME'	=> $username,

    1420. 

  1420. 				'EMAIL'		=> $email,

    1421. 

  1421. 				'ICQ'		=> $icq,

    1422. 

  1422. 				'AIM'		=> $aim,

    1423. 

  1423. 				'YAHOO'		=> $yahoo,

    1424. 

  1424. 				'MSNM'		=> $msn,

    1425. 

  1425. 				'JABBER'	=> $jabber,

    1426. 

  1426. 				'JOINED'	=> implode('-', $joined),

    1427. 

  1427. 				'ACTIVE'	=> implode('-', $active),

    1428. 

  1428. 				'COUNT'		=> $count,

    1429. 

  1429. 				'IP'		=> $ipdomain,

    1430. 

  1430. 

    1431. 

  1431. 				'S_IP_SEARCH_ALLOWED'	=> ($auth->acl_getf_global('m_info')) ? true : false,

    1432. 

  1432. 				'S_EMAIL_SEARCH_ALLOWED'=> ($auth->acl_get('a_user')) ? true : false,

    1433. 

  1433. 				'S_IN_SEARCH_POPUP'		=> ($form && $field) ? true : false,

    1434. 

  1434. 				'S_SEARCH_USER'	…
    1435.

Large files files are truncated, but you can click here to view the full file