/forum/includes/functions_user.php

Large files files are truncated, but you can click here to view the full file

<?php

/**

*

* @package phpBB3

* @version $Id$

* @copyright (c) 2005 phpBB Group

* @license http://opensource.org/licenses/gpl-license.php GNU Public License

*

*/



/**

* @ignore

*/

if (!defined('IN_PHPBB'))

{

	exit;

}



/**

* Obtain user_ids from usernames or vice versa. Returns false on

* success else the error string

*

* @param array &$user_id_ary The user ids to check or empty if usernames used

* @param array &$username_ary The usernames to check or empty if user ids used

* @param mixed $user_type Array of user types to check, false if not restricting by user type

*/

function user_get_id_name(&$user_id_ary, &$username_ary, $user_type = false)

{

	global $db;



	// Are both arrays already filled? Yep, return else

	// are neither array filled?

	if ($user_id_ary && $username_ary)

	{

		return false;

	}

	else if (!$user_id_ary && !$username_ary)

	{

		return 'NO_USERS';

	}



	$which_ary = ($user_id_ary) ? 'user_id_ary' : 'username_ary';



	if ($$which_ary && !is_array($$which_ary))

	{

		$$which_ary = array($$which_ary);

	}



	$sql_in = ($which_ary == 'user_id_ary') ? array_map('intval', $$which_ary) : array_map('utf8_clean_string', $$which_ary);

	unset($$which_ary);



	$user_id_ary = $username_ary = array();



	// Grab the user id/username records

	$sql_where = ($which_ary == 'user_id_ary') ? 'user_id' : 'username_clean';

	$sql = 'SELECT user_id, username

		FROM ' . USERS_TABLE . '

		WHERE ' . $db->sql_in_set($sql_where, $sql_in);



	if ($user_type !== false && !empty($user_type))

	{

		$sql .= ' AND ' . $db->sql_in_set('user_type', $user_type);

	}



	$result = $db->sql_query($sql);



	if (!($row = $db->sql_fetchrow($result)))

	{

		$db->sql_freeresult($result);

		return 'NO_USERS';

	}



	do

	{

		$username_ary[$row['user_id']] = $row['username'];

		$user_id_ary[] = $row['user_id'];

	}

	while ($row = $db->sql_fetchrow($result));

	$db->sql_freeresult($result);



	return false;

}



/**

* Get latest registered username and update database to reflect it

*/

function update_last_username()

{

	global $db;



	// Get latest username

	$sql = 'SELECT user_id, username, user_colour

		FROM ' . USERS_TABLE . '

		WHERE user_type IN (' . USER_NORMAL . ', ' . USER_FOUNDER . ')

		ORDER BY user_id DESC';

	$result = $db->sql_query_limit($sql, 1);

	$row = $db->sql_fetchrow($result);

	$db->sql_freeresult($result);



	if ($row)

	{

		set_config('newest_user_id', $row['user_id'], true);

		set_config('newest_username', $row['username'], true);

		set_config('newest_user_colour', $row['user_colour'], true);

	}

}



/**

* Updates a username across all relevant tables/fields

*

* @param string $old_name the old/current username

* @param string $new_name the new username

*/

function user_update_name($old_name, $new_name)

{

	global $config, $db, $cache;



	$update_ary = array(

		FORUMS_TABLE			=> array('forum_last_poster_name'),

		MODERATOR_CACHE_TABLE	=> array('username'),

		POSTS_TABLE				=> array('post_username'),

		TOPICS_TABLE			=> array('topic_first_poster_name', 'topic_last_poster_name'),

	);



	foreach ($update_ary as $table => $field_ary)

	{

		foreach ($field_ary as $field)

		{

			$sql = "UPDATE $table

				SET $field = '" . $db->sql_escape($new_name) . "'

				WHERE $field = '" . $db->sql_escape($old_name) . "'";

			$db->sql_query($sql);

		}

	}



	if ($config['newest_username'] == $old_name)

	{

		set_config('newest_username', $new_name, true);

	}



	// Because some tables/caches use username-specific data we need to purge this here.

	$cache->destroy('sql', MODERATOR_CACHE_TABLE);

}



/**

* Adds an user

*

* @param mixed $user_row An array containing the following keys (and the appropriate values): username, group_id (the group to place the user in), user_email and the user_type(usually 0). Additional entries not overridden by defaults will be forwarded.

* @param string $cp_data custom profile fields, see custom_profile::build_insert_sql_array

* @return the new user's ID.

*/

function user_add($user_row, $cp_data = false)

{

	global $db, $user, $auth, $config, $phpbb_root_path, $phpEx;



	if (empty($user_row['username']) || !isset($user_row['group_id']) || !isset($user_row['user_email']) || !isset($user_row['user_type']))

	{

		return false;

	}



	$username_clean = utf8_clean_string($user_row['username']);



	if (empty($username_clean))

	{

		return false;

	}



	$sql_ary = array(

		'username'			=> $user_row['username'],

		'username_clean'	=> $username_clean,

		'user_password'		=> (isset($user_row['user_password'])) ? $user_row['user_password'] : '',

		'user_pass_convert'	=> 0,

		'user_email'		=> strtolower($user_row['user_email']),

		'user_email_hash'	=> phpbb_email_hash($user_row['user_email']),

		'group_id'			=> $user_row['group_id'],

		'user_type'			=> $user_row['user_type'],

	);



	// These are the additional vars able to be specified

	$additional_vars = array(

		'user_permissions'	=> '',

		'user_timezone'		=> $config['board_timezone'],

		'user_dateformat'	=> $config['default_dateformat'],

		'user_lang'			=> $config['default_lang'],

		'user_style'		=> (int) $config['default_style'],

		'user_actkey'		=> '',

		'user_ip'			=> '',

		'user_regdate'		=> time(),

		'user_passchg'		=> time(),

		'user_options'		=> 230271,

		// We do not set the new flag here - registration scripts need to specify it

		'user_new'			=> 0,



		'user_inactive_reason'	=> 0,

		'user_inactive_time'	=> 0,

		'user_lastmark'			=> time(),

		'user_lastvisit'		=> 0,

		'user_lastpost_time'	=> 0,

		'user_lastpage'			=> '',

		'user_posts'			=> 0,

		'user_dst'				=> (int) $config['board_dst'],

		'user_colour'			=> '',

		'user_occ'				=> '',

		'user_interests'		=> '',

		'user_avatar'			=> '',

		'user_avatar_type'		=> 0,

		'user_avatar_width'		=> 0,

		'user_avatar_height'	=> 0,

		'user_new_privmsg'		=> 0,

		'user_unread_privmsg'	=> 0,

		'user_last_privmsg'		=> 0,

		'user_message_rules'	=> 0,

		'user_full_folder'		=> PRIVMSGS_NO_BOX,

		'user_emailtime'		=> 0,



		'user_notify'			=> 0,

		'user_notify_pm'		=> 1,

		'user_notify_type'		=> NOTIFY_EMAIL,

		'user_allow_pm'			=> 1,

		'user_allow_viewonline'	=> 1,

		'user_allow_viewemail'	=> 1,

		'user_allow_massemail'	=> 1,



		'user_sig'					=> '',

		'user_sig_bbcode_uid'		=> '',

		'user_sig_bbcode_bitfield'	=> '',



		'user_form_salt'			=> unique_id(),

	);



	// Now fill the sql array with not required variables

	foreach ($additional_vars as $key => $default_value)

	{

		$sql_ary[$key] = (isset($user_row[$key])) ? $user_row[$key] : $default_value;

	}



	// Any additional variables in $user_row not covered above?

	$remaining_vars = array_diff(array_keys($user_row), array_keys($sql_ary));



	// Now fill our sql array with the remaining vars

	if (sizeof($remaining_vars))

	{

		foreach ($remaining_vars as $key)

		{

			$sql_ary[$key] = $user_row[$key];

		}

	}



	$sql = 'INSERT INTO ' . USERS_TABLE . ' ' . $db->sql_build_array('INSERT', $sql_ary);

	$db->sql_query($sql);



	$user_id = $db->sql_nextid();



	// Insert Custom Profile Fields

	if ($cp_data !== false && sizeof($cp_data))

	{

		$cp_data['user_id'] = (int) $user_id;



		if (!class_exists('custom_profile'))

		{

			include_once($phpbb_root_path . 'includes/functions_profile_fields.' . $phpEx);

		}



		$sql = 'INSERT INTO ' . PROFILE_FIELDS_DATA_TABLE . ' ' .

			$db->sql_build_array('INSERT', custom_profile::build_insert_sql_array($cp_data));

		$db->sql_query($sql);

	}



	// Place into appropriate group...

	$sql = 'INSERT INTO ' . USER_GROUP_TABLE . ' ' . $db->sql_build_array('INSERT', array(

		'user_id'		=> (int) $user_id,

		'group_id'		=> (int) $user_row['group_id'],

		'user_pending'	=> 0)

	);

	$db->sql_query($sql);



	// Now make it the users default group...

	group_set_user_default($user_row['group_id'], array($user_id), false);



	// Add to newly registered users group if user_new is 1

	if ($config['new_member_post_limit'] && $sql_ary['user_new'])

	{

		$sql = 'SELECT group_id

			FROM ' . GROUPS_TABLE . "

			WHERE group_name = 'NEWLY_REGISTERED'

				AND group_type = " . GROUP_SPECIAL;

		$result = $db->sql_query($sql);

		$add_group_id = (int) $db->sql_fetchfield('group_id');

		$db->sql_freeresult($result);



		if ($add_group_id)

		{

			// Because these actions only fill the log unneccessarily we skip the add_log() entry with a little hack. :/

			$GLOBALS['skip_add_log'] = true;



			// Add user to "newly registered users" group and set to default group if admin specified so.

			if ($config['new_member_group_default'])

			{

				group_user_add($add_group_id, $user_id, false, false, true);

				$user_row['group_id'] = $add_group_id;

			}

			else

			{

				group_user_add($add_group_id, $user_id);

			}



			unset($GLOBALS['skip_add_log']);

		}

	}



	// set the newest user and adjust the user count if the user is a normal user and no activation mail is sent

	if ($user_row['user_type'] == USER_NORMAL || $user_row['user_type'] == USER_FOUNDER)

	{

		set_config('newest_user_id', $user_id, true);

		set_config('newest_username', $user_row['username'], true);

		set_config_count('num_users', 1, true);



		$sql = 'SELECT group_colour

			FROM ' . GROUPS_TABLE . '

			WHERE group_id = ' . (int) $user_row['group_id'];

		$result = $db->sql_query_limit($sql, 1);

		$row = $db->sql_fetchrow($result);

		$db->sql_freeresult($result);



		set_config('newest_user_colour', $row['group_colour'], true);

	}



	return $user_id;

}



/**

* Remove User

*/

function user_delete($mode, $user_id, $post_username = false)

{

	global $cache, $config, $db, $user, $auth;

	global $phpbb_root_path, $phpEx;



	$sql = 'SELECT *

		FROM ' . USERS_TABLE . '

		WHERE user_id = ' . $user_id;

	$result = $db->sql_query($sql);

	$user_row = $db->sql_fetchrow($result);

	$db->sql_freeresult($result);



	if (!$user_row)

	{

		return false;

	}



	// Before we begin, we will remove the reports the user issued.

	$sql = 'SELECT r.post_id, p.topic_id

		FROM ' . REPORTS_TABLE . ' r, ' . POSTS_TABLE . ' p

		WHERE r.user_id = ' . $user_id . '

			AND p.post_id = r.post_id';

	$result = $db->sql_query($sql);



	$report_posts = $report_topics = array();

	while ($row = $db->sql_fetchrow($result))

	{

		$report_posts[] = $row['post_id'];

		$report_topics[] = $row['topic_id'];

	}

	$db->sql_freeresult($result);



	if (sizeof($report_posts))

	{

		$report_posts = array_unique($report_posts);

		$report_topics = array_unique($report_topics);



		// Get a list of topics that still contain reported posts

		$sql = 'SELECT DISTINCT topic_id

			FROM ' . POSTS_TABLE . '

			WHERE ' . $db->sql_in_set('topic_id', $report_topics) . '

				AND post_reported = 1

				AND ' . $db->sql_in_set('post_id', $report_posts, true);

		$result = $db->sql_query($sql);



		$keep_report_topics = array();

		while ($row = $db->sql_fetchrow($result))

		{

			$keep_report_topics[] = $row['topic_id'];

		}

		$db->sql_freeresult($result);



		if (sizeof($keep_report_topics))

		{

			$report_topics = array_diff($report_topics, $keep_report_topics);

		}

		unset($keep_report_topics);



		// Now set the flags back

		$sql = 'UPDATE ' . POSTS_TABLE . '

			SET post_reported = 0

			WHERE ' . $db->sql_in_set('post_id', $report_posts);

		$db->sql_query($sql);



		if (sizeof($report_topics))

		{

			$sql = 'UPDATE ' . TOPICS_TABLE . '

				SET topic_reported = 0

				WHERE ' . $db->sql_in_set('topic_id', $report_topics);

			$db->sql_query($sql);

		}

	}



	// Remove reports

	$db->sql_query('DELETE FROM ' . REPORTS_TABLE . ' WHERE user_id = ' . $user_id);



	if ($user_row['user_avatar'] && $user_row['user_avatar_type'] == AVATAR_UPLOAD)

	{

		avatar_delete('user', $user_row);

	}



	switch ($mode)

	{

		case 'retain':



			$db->sql_transaction('begin');



			if ($post_username === false)

			{

				$post_username = $user->lang['GUEST'];

			}



			// If the user is inactive and newly registered we assume no posts from this user being there...

			if ($user_row['user_type'] == USER_INACTIVE && $user_row['user_inactive_reason'] == INACTIVE_REGISTER && !$user_row['user_posts'])

			{

			}

			else

			{

				$sql = 'UPDATE ' . FORUMS_TABLE . '

					SET forum_last_poster_id = ' . ANONYMOUS . ", forum_last_poster_name = '" . $db->sql_escape($post_username) . "', forum_last_poster_colour = ''

					WHERE forum_last_poster_id = $user_id";

				$db->sql_query($sql);



				$sql = 'UPDATE ' . POSTS_TABLE . '

					SET poster_id = ' . ANONYMOUS . ", post_username = '" . $db->sql_escape($post_username) . "'

					WHERE poster_id = $user_id";

				$db->sql_query($sql);



				$sql = 'UPDATE ' . POSTS_TABLE . '

					SET post_edit_user = ' . ANONYMOUS . "

					WHERE post_edit_user = $user_id";

				$db->sql_query($sql);



				$sql = 'UPDATE ' . TOPICS_TABLE . '

					SET topic_poster = ' . ANONYMOUS . ", topic_first_poster_name = '" . $db->sql_escape($post_username) . "', topic_first_poster_colour = ''

					WHERE topic_poster = $user_id";

				$db->sql_query($sql);



				$sql = 'UPDATE ' . TOPICS_TABLE . '

					SET topic_last_poster_id = ' . ANONYMOUS . ", topic_last_poster_name = '" . $db->sql_escape($post_username) . "', topic_last_poster_colour = ''

					WHERE topic_last_poster_id = $user_id";

				$db->sql_query($sql);



				$sql = 'UPDATE ' . ATTACHMENTS_TABLE . '

					SET poster_id = ' . ANONYMOUS . "

					WHERE poster_id = $user_id";

				$db->sql_query($sql);



				// Since we change every post by this author, we need to count this amount towards the anonymous user



				// Update the post count for the anonymous user

				if ($user_row['user_posts'])

				{

					$sql = 'UPDATE ' . USERS_TABLE . '

						SET user_posts = user_posts + ' . $user_row['user_posts'] . '

						WHERE user_id = ' . ANONYMOUS;

					$db->sql_query($sql);

				}

			}



			$db->sql_transaction('commit');



		break;



		case 'remove':



			if (!function_exists('delete_posts'))

			{

				include($phpbb_root_path . 'includes/functions_admin.' . $phpEx);

			}



			// Delete posts, attachments, etc.

			delete_posts('poster_id', $user_id);



		break;

	}



	$db->sql_transaction('begin');



	$table_ary = array(USERS_TABLE, USER_GROUP_TABLE, TOPICS_WATCH_TABLE, FORUMS_WATCH_TABLE, ACL_USERS_TABLE, TOPICS_TRACK_TABLE, TOPICS_POSTED_TABLE, FORUMS_TRACK_TABLE, PROFILE_FIELDS_DATA_TABLE, MODERATOR_CACHE_TABLE, DRAFTS_TABLE, BOOKMARKS_TABLE, SESSIONS_KEYS_TABLE, PRIVMSGS_FOLDER_TABLE, PRIVMSGS_RULES_TABLE);



	foreach ($table_ary as $table)

	{

		$sql = "DELETE FROM $table

			WHERE user_id = $user_id";

		$db->sql_query($sql);

	}



	$cache->destroy('sql', MODERATOR_CACHE_TABLE);



	// Delete user log entries about this user

	$sql = 'DELETE FROM ' . LOG_TABLE . '

		WHERE reportee_id = ' . $user_id;

	$db->sql_query($sql);



	// Change user_id to anonymous for this users triggered events

	$sql = 'UPDATE ' . LOG_TABLE . '

		SET user_id = ' . ANONYMOUS . '

		WHERE user_id = ' . $user_id;

	$db->sql_query($sql);



	// Delete the user_id from the zebra table

	$sql = 'DELETE FROM ' . ZEBRA_TABLE . '

		WHERE user_id = ' . $user_id . '

			OR zebra_id = ' . $user_id;

	$db->sql_query($sql);



	// Delete the user_id from the banlist

	$sql = 'DELETE FROM ' . BANLIST_TABLE . '

		WHERE ban_userid = ' . $user_id;

	$db->sql_query($sql);



	// Delete the user_id from the session table

	$sql = 'DELETE FROM ' . SESSIONS_TABLE . '

		WHERE session_user_id = ' . $user_id;

	$db->sql_query($sql);



	// Remove any undelivered mails...

	$sql = 'SELECT msg_id, user_id

		FROM ' . PRIVMSGS_TO_TABLE . '

		WHERE author_id = ' . $user_id . '

			AND folder_id = ' . PRIVMSGS_NO_BOX;

	$result = $db->sql_query($sql);



	$undelivered_msg = $undelivered_user = array();

	while ($row = $db->sql_fetchrow($result))

	{

		$undelivered_msg[] = $row['msg_id'];

		$undelivered_user[$row['user_id']][] = true;

	}

	$db->sql_freeresult($result);



	if (sizeof($undelivered_msg))

	{

		$sql = 'DELETE FROM ' . PRIVMSGS_TABLE . '

			WHERE ' . $db->sql_in_set('msg_id', $undelivered_msg);

		$db->sql_query($sql);

	}



	$sql = 'DELETE FROM ' . PRIVMSGS_TO_TABLE . '

		WHERE author_id = ' . $user_id . '

			AND folder_id = ' . PRIVMSGS_NO_BOX;

	$db->sql_query($sql);



	// Delete all to-information

	$sql = 'DELETE FROM ' . PRIVMSGS_TO_TABLE . '

		WHERE user_id = ' . $user_id;

	$db->sql_query($sql);



	// Set the remaining author id to anonymous - this way users are still able to read messages from users being removed

	$sql = 'UPDATE ' . PRIVMSGS_TO_TABLE . '

		SET author_id = ' . ANONYMOUS . '

		WHERE author_id = ' . $user_id;

	$db->sql_query($sql);



	$sql = 'UPDATE ' . PRIVMSGS_TABLE . '

		SET author_id = ' . ANONYMOUS . '

		WHERE author_id = ' . $user_id;

	$db->sql_query($sql);



	foreach ($undelivered_user as $_user_id => $ary)

	{

		if ($_user_id == $user_id)

		{

			continue;

		}



		$sql = 'UPDATE ' . USERS_TABLE . '

			SET user_new_privmsg = user_new_privmsg - ' . sizeof($ary) . ',

				user_unread_privmsg = user_unread_privmsg - ' . sizeof($ary) . '

			WHERE user_id = ' . $_user_id;

		$db->sql_query($sql);

	}



	$db->sql_transaction('commit');



	// Reset newest user info if appropriate

	if ($config['newest_user_id'] == $user_id)

	{

		update_last_username();

	}



	// Decrement number of users if this user is active

	if ($user_row['user_type'] != USER_INACTIVE && $user_row['user_type'] != USER_IGNORE)

	{

		set_config_count('num_users', -1, true);

	}



	return false;

}



/**

* Flips user_type from active to inactive and vice versa, handles group membership updates

*

* @param string $mode can be flip for flipping from active/inactive, activate or deactivate

*/

function user_active_flip($mode, $user_id_ary, $reason = INACTIVE_MANUAL)

{

	global $config, $db, $user, $auth;



	$deactivated = $activated = 0;

	$sql_statements = array();



	if (!is_array($user_id_ary))

	{

		$user_id_ary = array($user_id_ary);

	}



	if (!sizeof($user_id_ary))

	{

		return;

	}



	$sql = 'SELECT user_id, group_id, user_type, user_inactive_reason

		FROM ' . USERS_TABLE . '

		WHERE ' . $db->sql_in_set('user_id', $user_id_ary);

	$result = $db->sql_query($sql);



	while ($row = $db->sql_fetchrow($result))

	{

		$sql_ary = array();



		if ($row['user_type'] == USER_IGNORE || $row['user_type'] == USER_FOUNDER ||

			($mode == 'activate' && $row['user_type'] != USER_INACTIVE) ||

			($mode == 'deactivate' && $row['user_type'] == USER_INACTIVE))

		{

			continue;

		}



		if ($row['user_type'] == USER_INACTIVE)

		{

			$activated++;

		}

		else

		{

			$deactivated++;



			// Remove the users session key...

			$user->reset_login_keys($row['user_id']);

		}



		$sql_ary += array(

			'user_type'				=> ($row['user_type'] == USER_NORMAL) ? USER_INACTIVE : USER_NORMAL,

			'user_inactive_time'	=> ($row['user_type'] == USER_NORMAL) ? time() : 0,

			'user_inactive_reason'	=> ($row['user_type'] == USER_NORMAL) ? $reason : 0,

		);



		$sql_statements[$row['user_id']] = $sql_ary;

	}

	$db->sql_freeresult($result);



	if (sizeof($sql_statements))

	{

		foreach ($sql_statements as $user_id => $sql_ary)

		{

			$sql = 'UPDATE ' . USERS_TABLE . '

				SET ' . $db->sql_build_array('UPDATE', $sql_ary) . '

				WHERE user_id = ' . $user_id;

			$db->sql_query($sql);

		}



		$auth->acl_clear_prefetch(array_keys($sql_statements));

	}



	if ($deactivated)

	{

		set_config_count('num_users', $deactivated * (-1), true);

	}



	if ($activated)

	{

		set_config_count('num_users', $activated, true);

	}



	// Update latest username

	update_last_username();

}



/**

* Add a ban or ban exclusion to the banlist. Bans either a user, an IP or an email address

*

* @param string $mode Type of ban. One of the following: user, ip, email

* @param mixed $ban Banned entity. Either string or array with usernames, ips or email addresses

* @param int $ban_len Ban length in minutes

* @param string $ban_len_other Ban length as a date (YYYY-MM-DD)

* @param boolean $ban_exclude Exclude these entities from banning?

* @param string $ban_reason String describing the reason for this ban

* @return boolean

*/

function user_ban($mode, $ban, $ban_len, $ban_len_other, $ban_exclude, $ban_reason, $ban_give_reason = '')

{

	global $db, $user, $auth, $cache;



	// Delete stale bans

	$sql = 'DELETE FROM ' . BANLIST_TABLE . '

		WHERE ban_end < ' . time() . '

			AND ban_end <> 0';

	$db->sql_query($sql);



	$ban_list = (!is_array($ban)) ? array_unique(explode("\n", $ban)) : $ban;

	$ban_list_log = implode(', ', $ban_list);



	$current_time = time();



	// Set $ban_end to the unix time when the ban should end. 0 is a permanent ban.

	if ($ban_len)

	{

		if ($ban_len != -1 || !$ban_len_other)

		{

			$ban_end = max($current_time, $current_time + ($ban_len) * 60);

		}

		else

		{

			$ban_other = explode('-', $ban_len_other);

			if (sizeof($ban_other) == 3 && ((int)$ban_other[0] < 9999) &&

				(strlen($ban_other[0]) == 4) && (strlen($ban_other[1]) == 2) && (strlen($ban_other[2]) == 2))

			{

				$time_offset = (isset($user->timezone) && isset($user->dst)) ? (int) $user->timezone + (int) $user->dst : 0;

				$ban_end = max($current_time, gmmktime(0, 0, 0, (int)$ban_other[1], (int)$ban_other[2], (int)$ban_other[0]) - $time_offset);

			}

			else

			{

				trigger_error('LENGTH_BAN_INVALID', E_USER_WARNING);

			}

		}

	}

	else

	{

		$ban_end = 0;

	}



	$founder = $founder_names = array();



	if (!$ban_exclude)

	{

		// Create a list of founder...

		$sql = 'SELECT user_id, user_email, username_clean

			FROM ' . USERS_TABLE . '

			WHERE user_type = ' . USER_FOUNDER;

		$result = $db->sql_query($sql);



		while ($row = $db->sql_fetchrow($result))

		{

			$founder[$row['user_id']] = $row['user_email'];

			$founder_names[$row['user_id']] = $row['username_clean'];

		}

		$db->sql_freeresult($result);

	}



	$banlist_ary = array();



	switch ($mode)

	{

		case 'user':

			$type = 'ban_userid';



			// At the moment we do not support wildcard username banning



			// Select the relevant user_ids.

			$sql_usernames = array();



			foreach ($ban_list as $username)

			{

				$username = trim($username);

				if ($username != '')

				{

					$clean_name = utf8_clean_string($username);

					if ($clean_name == $user->data['username_clean'])

					{

						trigger_error('CANNOT_BAN_YOURSELF', E_USER_WARNING);

					}

					if (in_array($clean_name, $founder_names))

					{

						trigger_error('CANNOT_BAN_FOUNDER', E_USER_WARNING);

					}

					$sql_usernames[] = $clean_name;

				}

			}



			// Make sure we have been given someone to ban

			if (!sizeof($sql_usernames))

			{

				trigger_error('NO_USER_SPECIFIED', E_USER_WARNING);

			}



			$sql = 'SELECT user_id

				FROM ' . USERS_TABLE . '

				WHERE ' . $db->sql_in_set('username_clean', $sql_usernames);



			// Do not allow banning yourself, the guest account, or founders.

			$non_bannable = array($user->data['user_id'], ANONYMOUS);

			if (sizeof($founder))

			{

				$sql .= ' AND ' . $db->sql_in_set('user_id', array_merge(array_keys($founder), $non_bannable), true);

			}

			else

			{

				$sql .= ' AND ' . $db->sql_in_set('user_id', $non_bannable, true);

			}



			$result = $db->sql_query($sql);



			if ($row = $db->sql_fetchrow($result))

			{

				do

				{

					$banlist_ary[] = (int) $row['user_id'];

				}

				while ($row = $db->sql_fetchrow($result));

			}

			else

			{

				$db->sql_freeresult($result);

				trigger_error('NO_USERS', E_USER_WARNING);

			}

			$db->sql_freeresult($result);

		break;



		case 'ip':

			$type = 'ban_ip';



			foreach ($ban_list as $ban_item)

			{

				if (preg_match('#^([0-9]{1,3})\.([0-9]{1,3})\.([0-9]{1,3})\.([0-9]{1,3})[ ]*\-[ ]*([0-9]{1,3})\.([0-9]{1,3})\.([0-9]{1,3})\.([0-9]{1,3})$#', trim($ban_item), $ip_range_explode))

				{

					// This is an IP range

					// Don't ask about all this, just don't ask ... !

					$ip_1_counter = $ip_range_explode[1];

					$ip_1_end = $ip_range_explode[5];



					while ($ip_1_counter <= $ip_1_end)

					{

						$ip_2_counter = ($ip_1_counter == $ip_range_explode[1]) ? $ip_range_explode[2] : 0;

						$ip_2_end = ($ip_1_counter < $ip_1_end) ? 254 : $ip_range_explode[6];



						if ($ip_2_counter == 0 && $ip_2_end == 254)

						{

							$ip_2_counter = 256;

							$ip_2_fragment = 256;



							$banlist_ary[] = "$ip_1_counter.*";

						}



						while ($ip_2_counter <= $ip_2_end)

						{

							$ip_3_counter = ($ip_2_counter == $ip_range_explode[2] && $ip_1_counter == $ip_range_explode[1]) ? $ip_range_explode[3] : 0;

							$ip_3_end = ($ip_2_counter < $ip_2_end || $ip_1_counter < $ip_1_end) ? 254 : $ip_range_explode[7];



							if ($ip_3_counter == 0 && $ip_3_end == 254)

							{

								$ip_3_counter = 256;

								$ip_3_fragment = 256;



								$banlist_ary[] = "$ip_1_counter.$ip_2_counter.*";

							}



							while ($ip_3_counter <= $ip_3_end)

							{

								$ip_4_counter = ($ip_3_counter == $ip_range_explode[3] && $ip_2_counter == $ip_range_explode[2] && $ip_1_counter == $ip_range_explode[1]) ? $ip_range_explode[4] : 0;

								$ip_4_end = ($ip_3_counter < $ip_3_end || $ip_2_counter < $ip_2_end) ? 254 : $ip_range_explode[8];



								if ($ip_4_counter == 0 && $ip_4_end == 254)

								{

									$ip_4_counter = 256;

									$ip_4_fragment = 256;



									$banlist_ary[] = "$ip_1_counter.$ip_2_counter.$ip_3_counter.*";

								}



								while ($ip_4_counter <= $ip_4_end)

								{

									$banlist_ary[] = "$ip_1_counter.$ip_2_counter.$ip_3_counter.$ip_4_counter";

									$ip_4_counter++;

								}

								$ip_3_counter++;

							}

							$ip_2_counter++;

						}

						$ip_1_counter++;

					}

				}

				else if (preg_match('#^([0-9]{1,3})\.([0-9\*]{1,3})\.([0-9\*]{1,3})\.([0-9\*]{1,3})$#', trim($ban_item)) || preg_match('#^[a-f0-9:]+\*?$#i', trim($ban_item)))

				{

					// Normal IP address

					$banlist_ary[] = trim($ban_item);

				}

				else if (preg_match('#^\*$#', trim($ban_item)))

				{

					// Ban all IPs

					$banlist_ary[] = '*';

				}

				else if (preg_match('#^([\w\-_]\.?){2,}$#is', trim($ban_item)))

				{

					// hostname

					$ip_ary = gethostbynamel(trim($ban_item));



					if (!empty($ip_ary))

					{

						foreach ($ip_ary as $ip)

						{

							if ($ip)

							{

								if (strlen($ip) > 40)

								{

									continue;

								}



								$banlist_ary[] = $ip;

							}

						}

					}

				}



				if (empty($banlist_ary))

				{

					trigger_error('NO_IPS_DEFINED', E_USER_WARNING);

				}

			}

		break;



		case 'email':

			$type = 'ban_email';



			foreach ($ban_list as $ban_item)

			{

				$ban_item = trim($ban_item);



				if (preg_match('#^.*?@*|(([a-z0-9\-]+\.)+([a-z]{2,3}))$#i', $ban_item))

				{

					if (strlen($ban_item) > 100)

					{

						continue;

					}



					if (!sizeof($founder) || !in_array($ban_item, $founder))

					{

						$banlist_ary[] = $ban_item;

					}

				}

			}



			if (sizeof($ban_list) == 0)

			{

				trigger_error('NO_EMAILS_DEFINED', E_USER_WARNING);

			}

		break;



		default:

			trigger_error('NO_MODE', E_USER_WARNING);

		break;

	}



	// Fetch currently set bans of the specified type and exclude state. Prevent duplicate bans.

	$sql_where = ($type == 'ban_userid') ? 'ban_userid <> 0' : "$type <> ''";



	$sql = "SELECT $type

		FROM " . BANLIST_TABLE . "

		WHERE $sql_where

			AND ban_exclude = " . (int) $ban_exclude;

	$result = $db->sql_query($sql);



	// Reset $sql_where, because we use it later...

	$sql_where = '';



	if ($row = $db->sql_fetchrow($result))

	{

		$banlist_ary_tmp = array();

		do

		{

			switch ($mode)

			{

				case 'user':

					$banlist_ary_tmp[] = $row['ban_userid'];

				break;



				case 'ip':

					$banlist_ary_tmp[] = $row['ban_ip'];

				break;



				case 'email':

					$banlist_ary_tmp[] = $row['ban_email'];

				break;

			}

		}

		while ($row = $db->sql_fetchrow($result));



		$banlist_ary_tmp = array_intersect($banlist_ary, $banlist_ary_tmp);



		if (sizeof($banlist_ary_tmp))

		{

			// One or more entities are already banned/excluded, delete the existing bans, so they can be re-inserted with the given new length

			$sql = 'DELETE FROM ' . BANLIST_TABLE . '

				WHERE ' . $db->sql_in_set($type, $banlist_ary_tmp) . '

					AND ban_exclude = ' . (int) $ban_exclude;

			$db->sql_query($sql);

		}



		unset($banlist_ary_tmp);

	}

	$db->sql_freeresult($result);



	// We have some entities to ban

	if (sizeof($banlist_ary))

	{

		$sql_ary = array();



		foreach ($banlist_ary as $ban_entry)

		{

			$sql_ary[] = array(

				$type				=> $ban_entry,

				'ban_start'			=> (int) $current_time,

				'ban_end'			=> (int) $ban_end,

				'ban_exclude'		=> (int) $ban_exclude,

				'ban_reason'		=> (string) $ban_reason,

				'ban_give_reason'	=> (string) $ban_give_reason,

			);

		}



		$db->sql_multi_insert(BANLIST_TABLE, $sql_ary);



		// If we are banning we want to logout anyone matching the ban

		if (!$ban_exclude)

		{

			switch ($mode)

			{

				case 'user':

					$sql_where = 'WHERE ' . $db->sql_in_set('session_user_id', $banlist_ary);

				break;



				case 'ip':

					$sql_where = 'WHERE ' . $db->sql_in_set('session_ip', $banlist_ary);

				break;



				case 'email':

					$banlist_ary_sql = array();



					foreach ($banlist_ary as $ban_entry)

					{

						$banlist_ary_sql[] = (string) str_replace('*', '%', $ban_entry);

					}



					$sql = 'SELECT user_id

						FROM ' . USERS_TABLE . '

						WHERE ' . $db->sql_in_set('user_email', $banlist_ary_sql);

					$result = $db->sql_query($sql);



					$sql_in = array();



					if ($row = $db->sql_fetchrow($result))

					{

						do

						{

							$sql_in[] = $row['user_id'];

						}

						while ($row = $db->sql_fetchrow($result));



						$sql_where = 'WHERE ' . $db->sql_in_set('session_user_id', $sql_in);

					}

					$db->sql_freeresult($result);

				break;

			}



			if (isset($sql_where) && $sql_where)

			{

				$sql = 'DELETE FROM ' . SESSIONS_TABLE . "

					$sql_where";

				$db->sql_query($sql);



				if ($mode == 'user')

				{

					$sql = 'DELETE FROM ' . SESSIONS_KEYS_TABLE . ' ' . ((in_array('*', $banlist_ary)) ? '' : 'WHERE ' . $db->sql_in_set('user_id', $banlist_ary));

					$db->sql_query($sql);

				}

			}

		}



		// Update log

		$log_entry = ($ban_exclude) ? 'LOG_BAN_EXCLUDE_' : 'LOG_BAN_';



		// Add to moderator log, admin log and user notes

		add_log('admin', $log_entry . strtoupper($mode), $ban_reason, $ban_list_log);

		add_log('mod', 0, 0, $log_entry . strtoupper($mode), $ban_reason, $ban_list_log);

		if ($mode == 'user')

		{

			foreach ($banlist_ary as $user_id)

			{

				add_log('user', $user_id, $log_entry . strtoupper($mode), $ban_reason, $ban_list_log);

			}

		}



		$cache->destroy('sql', BANLIST_TABLE);



		return true;

	}



	// There was nothing to ban/exclude. But destroying the cache because of the removal of stale bans.

	$cache->destroy('sql', BANLIST_TABLE);



	return false;

}



/**

* Unban User

*/

function user_unban($mode, $ban)

{

	global $db, $user, $auth, $cache;



	// Delete stale bans

	$sql = 'DELETE FROM ' . BANLIST_TABLE . '

		WHERE ban_end < ' . time() . '

			AND ban_end <> 0';

	$db->sql_query($sql);



	if (!is_array($ban))

	{

		$ban = array($ban);

	}



	$unban_sql = array_map('intval', $ban);



	if (sizeof($unban_sql))

	{

		// Grab details of bans for logging information later

		switch ($mode)

		{

			case 'user':

				$sql = 'SELECT u.username AS unban_info, u.user_id

					FROM ' . USERS_TABLE . ' u, ' . BANLIST_TABLE . ' b

					WHERE ' . $db->sql_in_set('b.ban_id', $unban_sql) . '

						AND u.user_id = b.ban_userid';

			break;



			case 'email':

				$sql = 'SELECT ban_email AS unban_info

					FROM ' . BANLIST_TABLE . '

					WHERE ' . $db->sql_in_set('ban_id', $unban_sql);

			break;



			case 'ip':

				$sql = 'SELECT ban_ip AS unban_info

					FROM ' . BANLIST_TABLE . '

					WHERE ' . $db->sql_in_set('ban_id', $unban_sql);

			break;

		}

		$result = $db->sql_query($sql);



		$l_unban_list = '';

		$user_ids_ary = array();

		while ($row = $db->sql_fetchrow($result))

		{

			$l_unban_list .= (($l_unban_list != '') ? ', ' : '') . $row['unban_info'];

			if ($mode == 'user')

			{

				$user_ids_ary[] = $row['user_id'];

			}

		}

		$db->sql_freeresult($result);



		$sql = 'DELETE FROM ' . BANLIST_TABLE . '

			WHERE ' . $db->sql_in_set('ban_id', $unban_sql);

		$db->sql_query($sql);



		// Add to moderator log, admin log and user notes

		add_log('admin', 'LOG_UNBAN_' . strtoupper($mode), $l_unban_list);

		add_log('mod', 0, 0, 'LOG_UNBAN_' . strtoupper($mode), $l_unban_list);

		if ($mode == 'user')

		{

			foreach ($user_ids_ary as $user_id)

			{

				add_log('user', $user_id, 'LOG_UNBAN_' . strtoupper($mode), $l_unban_list);

			}

		}

	}



	$cache->destroy('sql', BANLIST_TABLE);



	return false;

}



/**

* Internet Protocol Address Whois

* RFC3912: WHOIS Protocol Specification

*

* @param string $ip		Ip address, either IPv4 or IPv6.

*

* @return string		Empty string if not a valid ip address.

*						Otherwise make_clickable()'ed whois result.

*/

function user_ipwhois($ip)

{

	if (empty($ip))

	{

		return '';

	}



	if (preg_match(get_preg_expression('ipv4'), $ip))

	{

		// IPv4 address

		$whois_host = 'whois.arin.net.';

	}

	else if (preg_match(get_preg_expression('ipv6'), $ip))

	{

		// IPv6 address

		$whois_host = 'whois.sixxs.net.';

	}

	else

	{

		return '';

	}



	$ipwhois = '';



	if (($fsk = @fsockopen($whois_host, 43)))

	{

		// CRLF as per RFC3912

		fputs($fsk, "$ip\r\n");

		while (!feof($fsk))

		{

			$ipwhois .= fgets($fsk, 1024);

		}

		@fclose($fsk);

	}



	$match = array();



	// Test for referrals from $whois_host to other whois databases, roll on rwhois

	if (preg_match('#ReferralServer: whois://(.+)#im', $ipwhois, $match))

	{

		if (strpos($match[1], ':') !== false)

		{

			$pos	= strrpos($match[1], ':');

			$server	= substr($match[1], 0, $pos);

			$port	= (int) substr($match[1], $pos + 1);

			unset($pos);

		}

		else

		{

			$server	= $match[1];

			$port	= 43;

		}



		$buffer = '';



		if (($fsk = @fsockopen($server, $port)))

		{

			fputs($fsk, "$ip\r\n");

			while (!feof($fsk))

			{

				$buffer .= fgets($fsk, 1024);

			}

			@fclose($fsk);

		}



		// Use the result from $whois_host if we don't get any result here

		$ipwhois = (empty($buffer)) ? $ipwhois : $buffer;

	}



	$ipwhois = htmlspecialchars($ipwhois);



	// Magic URL ;)

	return trim(make_clickable($ipwhois, false, ''));

}



/**

* Data validation ... used primarily but not exclusively by ucp modules

*

* "Master" function for validating a range of data types

*/

function validate_data($data, $val_ary)

{

	global $user;



	$error = array();



	foreach ($val_ary as $var => $val_seq)

	{

		if (!is_array($val_seq[0]))

		{

			$val_seq = array($val_seq);

		}



		foreach ($val_seq as $validate)

		{

			$function = array_shift($validate);

			array_unshift($validate, $data[$var]);



			if ($result = call_user_func_array('validate_' . $function, $validate))

			{

				// Since errors are checked later for their language file existence, we need to make sure custom errors are not adjusted.

				$error[] = (empty($user->lang[$result . '_' . strtoupper($var)])) ? $result : $result . '_' . strtoupper($var);

			}

		}

	}



	return $error;

}



/**

* Validate String

*

* @return	boolean|string	Either false if validation succeeded or a string which will be used as the error message (with the variable name appended)

*/

function validate_string($string, $optional = false, $min = 0, $max = 0)

{

	if (empty($string) && $optional)

	{

		return false;

	}



	if ($min && utf8_strlen(htmlspecialchars_decode($string)) < $min)

	{

		return 'TOO_SHORT';

	}

	else if ($max && utf8_strlen(htmlspecialchars_decode($string)) > $max)

	{

		return 'TOO_LONG';

	}



	return false;

}



/**

* Validate Number

*

* @return	boolean|string	Either false if validation succeeded or a string which will be used as the error message (with the variable name appended)

*/

function validate_num($num, $optional = false, $min = 0, $max = 1E99)

{

	if (empty($num) && $optional)

	{

		return false;

	}



	if ($num < $min)

	{

		return 'TOO_SMALL';

	}

	else if ($num > $max)

	{

		return 'TOO_LARGE';

	}



	return false;

}



/**

* Validate Date

* @param String $string a date in the dd-mm-yyyy format

* @return	boolean

*/

function validate_date($date_string, $optional = false)

{

	$date = explode('-', $date_string);

	if ((empty($date) || sizeof($date) != 3) && $optional)

	{

		return false;

	}

	else if ($optional)

	{

		for ($field = 0; $field <= 1; $field++)

		{

			$date[$field] = (int) $date[$field];

			if (empty($date[$field]))

			{

				$date[$field] = 1;

			}

		}

		$date[2] = (int) $date[2];

		// assume an arbitrary leap year

		if (empty($date[2]))

		{

			$date[2] = 1980;

		}

	}



	if (sizeof($date) != 3 || !checkdate($date[1], $date[0], $date[2]))

	{

		return 'INVALID';

	}



	return false;

}





/**

* Validate Match

*

* @return	boolean|string	Either false if validation succeeded or a string which will be used as the error message (with the variable name appended)

*/

function validate_match($string, $optional = false, $match = '')

{

	if (empty($string) && $optional)

	{

		return false;

	}



	if (empty($match))

	{

		return false;

	}



	if (!preg_match($match, $string))

	{

		return 'WRONG_DATA';

	}



	return false;

}



/**

* Validate Language Pack ISO Name

*

* Tests whether a language name is valid and installed

*

* @param string $lang_iso	The language string to test

*

* @return bool|string		Either false if validation succeeded or

*							a string which will be used as the error message

*							(with the variable name appended)

*/

function validate_language_iso_name($lang_iso)

{

	global $db;



	$sql = 'SELECT lang_id

		FROM ' . LANG_TABLE . "

		WHERE lang_iso = '" . $db->sql_escape($lang_iso) . "'";

	$result = $db->sql_query($sql);

	$lang_id = (int) $db->sql_fetchfield('lang_id');

	$db->sql_freeresult($result);



	return ($lang_id) ? false : 'WRONG_DATA';

}



/**

* Check to see if the username has been taken, or if it is disallowed.

* Also checks if it includes the " character, which we don't allow in usernames.

* Used for registering, changing names, and posting anonymously with a username

*

* @param string $username The username to check

* @param string $allowed_username An allowed username, default being $user->data['username']

*

* @return	mixed	Either false if validation succeeded or a string which will be used as the error message (with the variable name appended)

*/

function validate_username($username, $allowed_username = false)

{

	global $config, $db, $user, $cache;



	$clean_username = utf8_clean_string($username);

	$allowed_username = ($allowed_username === false) ? $user->data['username_clean'] : utf8_clean_string($allowed_username);



	if ($allowed_username == $clean_username)

	{

		return false;

	}



	// ... fast checks first.

	if (strpos($username, '&quot;') !== false || strpos($username, '"') !== false || empty($clean_username))

	{

		return 'INVALID_CHARS';

	}



	$mbstring = $pcre = false;



	// generic UTF-8 character types supported?

	if ((version_compare(PHP_VERSION, '5.1.0', '>=') || (version_compare(PHP_VERSION, '5.0.0-dev', '<=') && version_compare(PHP_VERSION, '4.4.0', '>='))) && @preg_match('/\p{L}/u', 'a') !== false)

	{

		$pcre = true;

	}

	else if (function_exists('mb_ereg_match'))

	{

		mb_regex_encoding('UTF-8');

		$mbstring = true;

	}



	switch ($config['allow_name_chars'])

	{

		case 'USERNAME_CHARS_ANY':

			$pcre = true;

			$regex = '.+';

		break;



		case 'USERNAME_ALPHA_ONLY':

			$pcre = true;

			$regex = '[A-Za-z0-9]+';

		break;



		case 'USERNAME_ALPHA_SPACERS':

			$pcre = true;

			$regex = '[A-Za-z0-9-[\]_+ ]+';

		break;



		case 'USERNAME_LETTER_NUM':

			if ($pcre)

			{

				$regex = '[\p{Lu}\p{Ll}\p{N}]+';

			}

			else if ($mbstring)

			{

				$regex = '[[:upper:][:lower:][:digit:]]+';

			}

			else

			{

				$pcre = true;

				$regex = '[a-zA-Z0-9]+';

			}

		break;



		case 'USERNAME_LETTER_NUM_SPACERS':

			if ($pcre)

			{

				$regex = '[-\]_+ [\p{Lu}\p{Ll}\p{N}]+';

			}

			else if ($mbstring)

			{

				$regex = '[-\]_+ \[[:upper:][:lower:][:digit:]]+';

			}

			else

			{

				$pcre = true;

				$regex = '[-\]_+ [a-zA-Z0-9]+';

			}

		break;



		case 'USERNAME_ASCII':

		default:

			$pcre = true;

			$regex = '[\x01-\x7F]+';

		break;

	}



	if ($pcre)

	{

		if (!preg_match('#^' . $regex . '$#u', $username))

		{

			return 'INVALID_CHARS';

		}

	}

	else if ($mbstring)

	{

		mb_ereg_search_init($username, '^' . $regex . '$');

		if (!mb_ereg_search())

		{

			return 'INVALID_CHARS';

		}

	}



	$sql = 'SELECT username

		FROM ' . USERS_TABLE . "

		WHERE username_clean = '" . $db->sql_escape($clean_username) . "'";

	$result = $db->sql_query($sql);

	$row = $db->sql_fetchrow($result);

	$db->sql_freeresult($result);



	if ($row)

	{

		return 'USERNAME_TAKEN';

	}



	$sql = 'SELECT group_name

		FROM ' . GROUPS_TABLE . "

		WHERE LOWER(group_name) = '" . $db->sql_escape(utf8_strtolower($username)) . "'";

	$result = $db->sql_query($sql);

	$row = $db->sql_fetchrow($result);

	$db->sql_freeresult($result);



	if ($row)

	{

		return 'USERNAME_TAKEN';

	}



	$bad_usernames = $cache->obtain_disallowed_usernames();



	foreach ($bad_usernames as $bad_username)

	{

		if (preg_match('#^' . $bad_username . '$#', $clean_username))

		{

			return 'USERNAME_DISALLOWED';

		}

	}



	return false;

}



/**

* Check to see if the password meets the complexity settings

*

* @return	boolean|string	Either false if validation succeeded or a string which will be used as the error message (with the variable name appended)

*/

function validate_password($password)

{

	global $config, $db, $user;



	if ($password === '' || $config['pass_complex'] === 'PASS_TYPE_ANY')

	{

		// Password empty or no password complexity required.

		return false;

	}



	$pcre = $mbstring = false;



	// generic UTF-8 character types supported?

	if ((version_compare(PHP_VERSION, '5.1.0', '>=') || (version_compare(PHP_VERSION, '5.0.0-dev', '<=') && version_compare(PHP_VERSION, '4.4.0', '>='))) && @preg_match('/\p{L}/u', 'a') !== false)

	{

		$upp = '\p{Lu}';

		$low = '\p{Ll}';

		$num = '\p{N}';

		$sym = '[^\p{Lu}\p{Ll}\p{N}]';

		$pcre = true;

	}

	else if (function_exists('mb_ereg_match'))

	{

		mb_regex_encoding('UTF-8');

		$upp = '[[:upper:]]';

		$low = '[[:lower:]]';

		$num = '[[:digit:]]';

		$sym = '[^[:upper:][:lower:][:digit:]]';

		$mbstring = true;

	}

	else

	{

		$upp = '[A-Z]';

		$low = '[a-z]';

		$num = '[0-9]';

		$sym = '[^A-Za-z0-9]';

		$pcre = true;

	}



	$chars = array();



	switch ($config['pass_complex'])

	{

		// No break statements below ...

		// We require strong passwords in case pass_complex is not set or is invalid

		default:



		// Require mixed case letters, numbers and symbols

		case 'PASS_TYPE_SYMBOL':

			$chars[] = $sym;



		// Require mixed case letters and numbers

		case 'PASS_TYPE_ALPHA':

			$chars[] = $num;



		// Require mixed case letters

		case 'PASS_TYPE_CASE':

			$chars[] = $low;

			$chars[] = $upp;

	}



	if ($pcre)

	{

		foreach ($chars as $char)

		{

			if (!preg_match('#' . $char . '#u', $password))

			{

				return 'INVALID_CHARS';

			}

		}

	}

	else if ($mbstring)

	{

		foreach ($chars as $char)

		{

			if (mb_ereg($char, $password) === false)

			{

				return 'INVALID_CHARS';

			}

		}

	}



	return false;

}



/**

* Check to see if email address is banned or already present in the DB

*

* @param string $email The email to check

* @param string $allowed_email An allowed email, default being $user->data['user_email']

*

* @return mixed Either false if validation succeeded or a string which will be used as the error message (with the variable name appended)

*/

function validate_email($email, $allowed_email = false)

{

	global $config, $db, $user;



	$email = strtolower($email);

	$allowed_email = ($allowed_email === false) ? strtolower($user->data['user_email']) : strtolower($allowed_email);



	if ($allowed_email == $email)

	{

		return false;

	}



	if (!preg_match('/^' . get_preg_expression('email') . '$/i', $email))

	{

		return 'EMAIL_INVALID';

	}



	// Check MX record.

	// The idea for this is from reading the UseBB blog/announcement. :)

	if ($config['email_check_mx'])

	{

		list(, $domain) = explode('@', $email);



		if (phpbb_checkdnsrr($domain, 'A') === false && phpbb_checkdnsrr($domain, 'MX') === false)

		{

			return 'DOMAIN_NO_MX_RECORD';

		}

	}



	if (($ban_reason = $user->check_ban(false, false, $email, true)) !== false)

	{

		return ($ban_reason === true) ? 'EMAIL_BANNED' : $ban_reason;

	}



	if (!$config['allow_emailreuse'])

	{

		$sql = 'SELECT user_email_hash

			FROM ' . USERS_TABLE . "

			WHERE user_email_hash = " . $db->sql_escape(phpbb_email_hash($email));

		$result = $db->sql_query($sql);

		$row = $db->sql_fetchrow($result);

		$db->sql_freeresult($result);



		if ($row)

		{

			return 'EMAIL_TAKEN';

		}

	}



	return false;

}



/**

* Validate jabber address

* Taken from the jabber class within flyspray (see author notes)

*

* @author flyspray.org

*/

function validate_jabber($jid)

{

	if (!$jid)

	{

		return false;

	}



	$seperator_pos = strpos($jid, '@');



	if ($seperator_pos === false)

	{

		return 'WRONG_DATA';

	}



	$username = substr($jid, 0, $seperator_pos);

	$realm = substr($jid, $seperator_pos + 1);



	if (strlen($username) == 0 || strlen($realm) < 3)

	{

		return 'WRONG_DATA';

	}



	$arr = explode('.', $realm);



	if (sizeof($arr) == 0)

	{

		return 'WRONG_DATA';

	}



	foreach ($arr as $part)

	{

		if (substr($part, 0, 1) == '-' || substr($part, -1, 1) == '-')

		{

			return 'WRONG_DATA';

		}



		if (!preg_match("@^[a-zA-Z0-9-.]+$@", $part))

		{

			return 'WRONG_DATA';

		}

	}



	$boundary = array(array(0, 127), array(192, 223), array(224, 239), array(240, 247), array(248, 251), array(252, 253));



	// Prohibited Characters RFC3454 + RFC3920

	$prohibited = array(

		// Table C.1.1

		array(0x0020, 0x0020),		// SPACE

		// Table C.1.2

		array(0x00A0, 0x00A0),		// NO-BREAK SPACE

		array(0x1680, 0x1680),		// OGHAM SPACE MARK

		array(0x2000, 0x2001),		// EN QUAD

		array(0x2001, 0x2001),		// EM QUAD

		array(0x2002, 0x2002),		// EN SPACE

		array(0x2003, 0x2003),		// EM SPACE

		array(0x2004, 0x2004),		// THREE-PER-EM SPACE

		array(0x2005, 0x2005),		// FOUR-PER-EM SPACE

		array(0x2006, 0x2006),		// SIX-PER-EM SPACE

		array(0x2007, 0x2007),		// FIGURE SPACE

		array(0x2008, 0x2008),		// PUNCTUATION SPACE

		array(0x2009, 0x2009),		// THIN SPACE

		array(0x200A, 0x200A),		// HAIR SPACE

		array(0x200B, 0x200B),		// ZERO WIDTH SPACE

		array(0x202F, 0x202F),		// NARROW NO-BREAK SPACE

		array(0x205F, 0x205F),		// MEDIUM MATHEMATICAL SPACE

		array(0x3000, 0x3000),		// IDEOGRAPHIC SPACE

		// Table C.2.1

		array(0x0000, 0x001F),		// [CONTROL CHARACTERS]

		array(0x007F, 0x007F),		// DELETE

		// Table C.2.2

		array(0x0080, 0x009F),		// [CONTROL CHARACTERS]

		array(0x06DD, 0x06DD),		// ARABIC END OF AYAH

		array(0x070F, 0x070F),		// SYRIAC ABBREVIATION MARK

		array(0x180E, 0x180E),		// MONGOLIAN VOWEL SEPARATOR

		array(0x200C, 0x200C), 		// ZERO WIDTH NON-JOINER

		array(0x200D, 0x200D),		// ZERO WIDTH JOINER

		array(0x2028, 0x2028),		// LINE SEPARATOR

		array(0x2029, 0x2029),		// PARAGRAPH SEPARATOR

		array(0x2060, 0x2060),		// WORD JOINER

		array(0x2061, 0x2061),		// FUNCTION APPLICATION

		array(0x2062, 0x2062),		// INVISIBLE TIMES

		array(0x2063, 0x2063),		// INVISIBLE SEPARATOR

		array(0x206A, 0x206F),		// [CONTROL CHARACTERS]

		array(0xFEFF, 0xFEFF),		// ZERO WIDTH NO-BREAK SPACE

		array(0xFFF9, 0xFFFC),		// [CONTROL CHARACTERS]

		array(0x1D173, 0x1D17A),	// [MUSICAL CONTROL CHARACTERS]

		// Table C.3

		array(0xE000, 0xF8FF),		// [PRIVATE USE, PLANE 0]

		array(0xF0000, 0xFFFFD),	// [PRIVATE USE, PLANE 15]

		array(0x100000, 0x10FFFD),	// [PRIVATE USE, PLANE 16]

		// Table C.4

		array(0xFDD0, 0xFDEF),		// [NONCHARACTER CODE POINTS]

		array(0xFFFE, 0xFFFF),		// [NONCHARACTER CODE POINTS]

		array(0x1FFFE, 0x1FFFF),	// [NONCHARACTER CODE POINTS]

		array(0x2FFFE, 0x2FFFF),	// [NONCHARACTER CODE POINTS]

		array(0x3FFFE, 0x3FFFF),	// [NONCHARACTER CODE POINTS]

		array(0x4FFFE, 0x4FFFF),	// [NONCHARACTER CODE POINTS]

		array(0x5FFFE, 0x5FFFF),	// [NONCHARACTER CODE POINTS]

		array(0x6FFFE, 0x6FFFF),	// [NONCHARACTER CODE POINTS]

		array(0x7FFFE, 0x7FFFF),	// [NONCHARACTER CODE POINTS]

		array(0x8FFFE, 0x8FFFF),	// [NONCHARACTER CODE POINTS]

		array(0x9FFFE, 0x9FFFF),	// [NONCHARACTER CODE POINTS]

		array(0xAFFFE, 0xAFFFF),	// [NONCHARACTER CODE POINTS]

		array(0xBFFFE, 0xBFFFF),	// [NONCHARACTER CODE POINTS]

		array(0xCFFFE, 0xCFFFF),	// [NONCHARACTER CODE POINTS]

		array(0xDFFFE, 0xDFFFF),	// [NONCHARACTER CODE POINTS]

		array(0xEFFFE, 0xEFFFF),	// [NONCHARACTER CODE POINTS]

		array(0xFFFFE, 0xFFFFF),	// [NONCHARACTER CODE POINTS]

		array(0x10FFFE, 0x10FFFF),	// [NONCHARACTER CODE POINTS]

		// Table C.5

		array(0xD800, 0xDFFF),		// [SURROGATE CODES]

		// Table C.6

		array(0xFFF9, 0xFFF9),		// INTERLINEAR ANNOTATION ANCHOR

		array(0xFFFA, 0xFFFA),		// INTERLINEAR ANNOTATION SEPARATOR

		array(0xFFFB, 0xFFFB),		// INTERLINEAR ANNOTATION TERMINATOR

		array(0xFFFC, 0xFFFC),		// OBJECT REPLACEMEN…