profile.php | searchcode

/website/profile.php

https://github.com/flagcapper/aichallenge
PHP | 322 lines | 296 code | 9 blank | 17 comment | 56 complexity | 8873bd2a227195b0cfab16067729c34a MD5 | raw file

<?php
// ini_set('error_reporting', E_ALL);
// ini_set('display_errors', true);

require_once('header.php');
require_once('mysql_login.php');
require_once('nice.php');

if (isset($_GET["user"])) {
    $user_id = $_GET["user"];
    if(!filter_var($user_id, FILTER_VALIDATE_INT)) {
        $user_id = NULL;
    }
}

if (!isset($user_id)) {
    require_once('footer.php');
    die();
}

require_once('profile_submissions_widget.php');
require_once('profile_games_widget.php');
require_once('game_list.php');

$rank = NULL;
$skill = NULL;
$userresult = contest_query("select_profile_user", $user_id);
if ($userresult) {
    $userdata = mysql_fetch_assoc($userresult);
    if ($userdata['rank']) {
        $rank = nice_rank($userdata["rank"],
                          $userdata["rank_change"]);
        $skill = nice_skill($userdata['skill'],
                             $userdata['mu'],
                             $userdata['sigma'],
                             $userdata['skill_change'],
                             $userdata['mu_change'],
                             $userdata['sigma_change']);
    }
}
$rank = ($rank == NULL)?"Not Ranked":$rank;
$skill = ($skill == NULL)?"No Skillz":$skill;

$username = htmlentities($userdata["username"], ENT_COMPAT, 'UTF-8');
$created = nice_date($userdata["created"]); // date("M jS Y",$userdata["created"]);
$country_id = htmlentities($userdata["country_id"], ENT_COMPAT, 'UTF-8');
$country_name = htmlentities($userdata["country_name"], ENT_COMPAT, 'UTF-8');
$country_name = $country_name == NULL ?
  "Unknown" : htmlentities($country_name, ENT_COMPAT, 'UTF-8');
$flag_filename = $userdata["flag_filename"];
$flag_filename = $flag_filename == NULL ? "" : "<img alt=\"$country_name\" width=\"16\" height=\"11\" title=\"$country_name\" src=\"flags/$flag_filename\" />";
$org_id = htmlentities($userdata["org_id"], ENT_COMPAT, 'UTF-8');
$org_name = htmlentities($userdata["org_name"], ENT_COMPAT, 'UTF-8');
$bio = str_replace("\n","<br />",str_replace("\r","", htmlentities($userdata["bio"], ENT_COMPAT, 'UTF-8')));
if ($org_name == NULL) {
  $org_name = "None";
}
if (logged_in_with_valid_credentials() &&
    (current_user_id() == $user_id || logged_in_as_admin())) {
    $logged_in = true;
    $sid = session_id();
    $update_key = sha1(
        $sid . $userdata["activation_code"] . $userdata["email"]);
} else {
    $logged_in = false;
}
if (!$userresult) {
  echo "<p>Invalid User ID</p>";
} else {
$title="Profile for ".$username;

echo "    <h2>Profile for $username</h2>";

/*
 * Top Profile Info section ====================================================
 */
echo "<div class=\"profile\">";
if ($logged_in) {
echo <<< EOT
    <script>
    function toggle_change_org() {
       if (document.getElementById('orgchange').style.display == 'none') {
          document.getElementById('orgchange').style.display='inline';
          document.getElementById('org_ctxt').innerHTML = 'Cancel';
       } else {
          document.getElementById('orgchange').style.display='none';
          document.getElementById('org_ctxt').innerHTML = 'Change';
       }
    }
    function toggle_change_country() {
       if (document.getElementById('countrychange').style.display == 'none') {
          document.getElementById('countrychange').style.display='inline';
          document.getElementById('country_ctxt').innerHTML = 'Cancel';
       } else {
          document.getElementById('countrychange').style.display='none';
          document.getElementById('country_ctxt').innerHTML = 'Change';
       }
    }
    function toggle_change_bio() {
       if (document.getElementById('bio_submit').style.display == 'none') {
           document.getElementById('bio_submit').style.display = 'inline';
           document.getElementById('bio_span').style.display = 'none';
           document.getElementById('bio_edit').style.display = 'inline';
           document.getElementById('bio_ctxt').innerHTML = 'Cancel';
       } else {
           document.getElementById('bio_submit').style.display = 'none';
           document.getElementById('bio_edit').style.display = 'none';
           document.getElementById('bio_span').style.display = 'inline';
           document.getElementById('bio_ctxt').innerHTML = 'Edit';
       }
    }
    </script>
    <form method="post" action="save_profile.php">
        <input type="hidden" name="update_key" value="$update_key" />
EOT;
}
echo <<<EOT
    <p><strong>Country:</strong>&nbsp;
    <a href="country_profile.php?country=$country_id">$flag_filename
      $country_name</a>
EOT;
if ($logged_in) {
echo <<<EOT
    <span style="padding-left: 1em; font-size: smaller">
      <a href="#" id="country_ctxt" onclick="toggle_change_country()">Change</a>
    <span id="countrychange" style="display: none">
      <select name="user_country" style="width:210px;">
EOT;
  $query = "SELECT * FROM country ORDER BY country_id";
  $result = mysql_query($query);
  while ($row = mysql_fetch_assoc($result)) {
    $option_id = $row['country_id'];
    $option_name = $row['name'];
    if ($option_id == $country_id) {
      echo "<option selected value=$option_id>$option_name</option>";
    } else {
      echo "<option value=$option_id>$option_name</option>";
    }
    if ($option_id == 11) {
        echo "<option value=999>---</option>";
    }
  }
echo <<<EOT
      </select><input type="submit" value="Save" />
    </span></span></p>
EOT;
}
echo <<<EOT
    <p>
    <strong>Affiliation:</strong>&nbsp;
    <a href="organization_profile.php?org=$org_id">$org_name</a>
EOT;
if ($logged_in) {
echo <<<EOT
      <span style="padding-left: 1em; font-size: smaller">
        <a href="#" id="org_ctxt" onclick="toggle_change_org()">Change</a>
      <span id="orgchange" style="display: none">
      <select name="user_organization" style="width:210px;">
      <option value="0">Other</option>
      <option value="1">University of Waterloo</option>
      <option value="999">---</option>
EOT;
  $query = "SELECT * FROM organization WHERE org_id > 1 ORDER BY name";
  $result = mysql_query($query);
  while ($row = mysql_fetch_assoc($result)) {
    $option_id = $row['org_id'];
    $option_name = $row['name'];
    if ($option_id == $org_id) {
      echo "<option selected value=$option_id>$option_name</option>";
    } else {
      echo "<option value=$option_id>$option_name</option>";
    }
  }
echo <<<EOT
     </select><input type="submit" value="Save" /></span></span>
EOT;
}
echo <<<EOT
    </p>
    <p><strong>Joined:</strong>&nbsp;$created</p>
EOT;
if ($bio != NULL) {
echo <<<EOT
    <p><strong>About Me:</strong><br />
      <span id="bio_span">$bio</span>
EOT;
  if ($logged_in) {
echo <<<EOT
      <textarea id="bio_edit" style="display: none" name="user_bio" cols="40" rows="3">$bio</textarea>
    <input id="bio_submit" style="display: none" type="submit" value="Save" />
    <span style="padding-left: 1em; font-size: smaller">
      <a href="#" id="bio_ctxt" onclick="toggle_change_bio()">Edit</a>
    </span>
    </p>
    <p>
    	<a href="change_password.php">Change Password</a>
    </p>
    </form>
EOT;
  } else {
    echo "</p>";
  }
} elseif ($logged_in) {
echo <<<EOT
    <p><strong>About Me:</strong><br />
      <span id="bio_span">You currently have no information entered.</span>
      <textarea id="bio_edit" style="display: none" name="user_bio" cols="40" rows="3"></textarea>
    <input id="bio_submit" style="display: none" type="submit" value="Save" />
    <span style="font-size: smaller">
      <a href="#" id="bio_ctxt" onclick="toggle_change_bio()">Edit</a>
    </span>
    </p>
    <p>
    	<a href="change_password.php">Change Password</a>
    </p>
    </form>
EOT;
}
echo "</div>";

/*
 * Rank, Skill and Next Game section ====================================================
 */
    echo "<div class=\"rank\">";
    echo "<p><strong>Rank:</strong> <span class=\"stats\">$rank</span> <strong>Skill:</strong> <span class=\"stats\">$skill</span></p>";
    if ($logged_in && ($user_id == current_user_id() or logged_in_as_admin())) {
        $in_game_result = contest_query("select_in_game", $user_id);
        if ($in_game_result and mysql_num_rows($in_game_result) > 0) {
            echo "<p><strong>In Game:</strong> Playing in a game right now.</p>";
        } else {    
            $next_game_result = contest_query("select_next_game_in", $user_id);
            if ($next_game_result) {
                while ($next_game_row = mysql_fetch_assoc($next_game_result)) {
                    echo "<p><strong>Next Game:</strong> ".$next_game_row["players_ahead"]." players are ahead.<br />";
                    echo "The current player rate is about ".$next_game_row["players_per_minute"]." players per minute.<br />";
                    echo "The current game rate is about ".$next_game_row["games_per_minute"]." games per minute.<br />";
                    if ($next_game_row["players_per_minute"] == 0) {
                        echo "Next game could take awhile...";
                    } else {
                        echo "Next game should be within ".$next_game_row["next_game_in_adjusted"]." minutes.";
                    }
                    echo "<br />Page refreshed at ".
                        nice_datetime("now") .".";
                    echo "</p>";
                }
            } else {
                echo "<p><strong>Next Game:</strong> The current game rate is unavailable. :'(</p>";
            }
        }
    }
    echo "</div>"; 

    echo "<h3><span>Latest Games</span><div class=\"divider\" /></h3>";
    echo get_user_game_list($user_id, 0, True, 'profile_games.php');
    echo "<p></p>";

/*
 * Submission activation / deactivation section
 */
    if (logged_in_with_valid_credentials() && (logged_in_as_admin() || current_user_id() == $user_id)) {
        $status_result = contest_query("select_submission_status", $user_id);
        if ($status_row = mysql_fetch_assoc($status_result)) {
            if ($status_row['status'] == 100 || $status_row['status'] == 40) {
                echo "<div class=\"activate\">";
                echo "<form method=\"post\" action=\"update_submission.php\">";
                if ($status_row['status'] == 100) {
                    echo "<p>Your current submission was deactivated on ".$status_row['shutdown_date']." (".
                         nice_ago($status_row['shutdown_date']).")</p>";
                }                
                echo "<input type=\"hidden\" name=\"update_key\" value=\"$update_key\" />
                      <input type=\"submit\" name=\"activate\" value=\"Activate\" />";

                if ($status_row['status'] == 40) {
                    echo "<input type=\"submit\" name=\"deactivate\" value=\"Deactivate\" />";
                    echo "<p>Your current submission will be deactivated on ".$status_row['shutdown_date']." (".
                         nice_ago($status_row['shutdown_date']).")</p>";
                }
                echo "<p><em>Inactive submissions will not be chosen as a seed player for a new matchup, but may still be chosen as an opponent in a game.</em><p>";
                echo "</form>";
                echo "</div>";
            }
        }
    }       
    
    echo "<h3><span>Recent Submissions</span><div class=\"divider\" /></h3>";
    echo getSubmissionTableString($user_id, true, 10, "profile_submissions.php?user=$user_id&page=1");

}

if (logged_in_with_valid_credentials() && logged_in_as_admin()) {
    $username = current_username();
    echo <<<EOT
<form  method="post" action="disable_account.php"
 onSubmit='return confirm("Are you sure you want do disable this account?")'>
  <h2>Disable Account:</h2>
  <p>Reason: <input name="reason" type="text" />&nbsp;by&nbsp;$username.</p>
  <input type="submit" value="Disable Account" />
  <input type="hidden" name="user_id" value="$user_id" />
</form>
EOT;
}

echo '
<script>
$(function () {
    $(".games").tablesorter({
        /*textExtraction: function (node) {
            node = $(node);
            if (node.attr("class") === "number") {
        		var n = parseFloat(node.text());
                return isNaN(n) ? 0.0 : n;
            } else {
                return node.text();
            }
        }*/
    });
});
</script>
';

include 'footer.php';
?>