PageRenderTime 48ms CodeModel.GetById 9ms RepoModel.GetById 0ms app.codeStats 0ms

/admin_users.php

https://github.com/Dratone/EveBB
PHP | 980 lines | 838 code | 87 blank | 55 comment | 146 complexity | f4fd990551e382332fc96bd8976dda2d MD5 | raw file
Possible License(s): GPL-2.0 
    

  1. <?php
    2. 

  2. 

  3. /**
    4. 

  4.  * Copyright (C) 2008-2010 FluxBB
    5. 

  5.  * based on code by Rickard Andersson copyright (C) 2002-2008 PunBB
    6. 

  6.  * License: http://www.gnu.org/licenses/gpl.html GPL version 2 or higher
    7. 

  7.  */
    8. 

  8. 

  9. // Tell header.php to use the admin template
    10. 

  10. define('PUN_ADMIN_CONSOLE', 1);
    11. 

  11. 

  12. define('PUN_ROOT', dirname(__FILE__).'/');
    13. 

  13. require PUN_ROOT.'include/common.php';
    14. 

  14. require PUN_ROOT.'include/common_admin.php';
    15. 

  15. 

  16. 

  17. if (!$pun_user['is_admmod'])
    18. 

  18. 	message($lang_common['No permission']);
    19. 

  19. 

  20. // Load the admin_users.php language file
    21. 

  21. require PUN_ROOT.'lang/'.$admin_language.'/admin_users.php';
    22. 

  22. 

  23. // Show IP statistics for a certain user ID
    24. 

  24. if (isset($_GET['ip_stats']))
    25. 

  25. {
    26. 

  26. 	$ip_stats = intval($_GET['ip_stats']);
    27. 

  27. 	if ($ip_stats < 1)
    28. 

  28. 		message($lang_common['Bad request']);
    29. 

  29. 

  30. 	// Fetch ip count
    31. 

  31. 	$result = $db->query('SELECT poster_ip, MAX(posted) AS last_used FROM '.$db->prefix.'posts WHERE poster_id='.$ip_stats.' GROUP BY poster_ip') or error('Unable to fetch post info', __FILE__, __LINE__, $db->error());
    32. 

  32. 	$num_ips = $db->num_rows($result);
    33. 

  33. 

  34. 	// Determine the ip offset (based on $_GET['p'])
    35. 

  35. 	$num_pages = ceil($num_ips / 50);
    36. 

  36. 

  37. 	$p = (!isset($_GET['p']) || $_GET['p'] <= 1 || $_GET['p'] > $num_pages) ? 1 : intval($_GET['p']);
    38. 

  38. 	$start_from = 50 * ($p - 1);
    39. 

  39. 

  40. 	// Generate paging links
    41. 

  41. 	$paging_links = '<span class="pages-label">'.$lang_common['Pages'].' </span>'.paginate($num_pages, $p, 'admin_users.php?ip_stats='.$ip_stats );
    42. 

  42. 

  43. 	$page_title = array(pun_htmlspecialchars($pun_config['o_board_title']), $lang_admin_common['Admin'], $lang_admin_common['Users'], $lang_admin_users['Results head']);
    44. 

  44. 	define('PUN_ACTIVE_PAGE', 'admin');
    45. 

  45. 	require PUN_ROOT.'header.php';
    46. 

  46. 

  47. ?>
    48. 

  48. <div class="linkst">
    49. 

  49. 	<div class="inbox crumbsplus">
    50. 

  50. 		<ul class="crumbs">
    51. 

  51. 			<li><a href="admin_index.php"><?php echo $lang_admin_common['Admin'].' '.$lang_admin_common['Index'] ?></a></li>
    52. 

  52. 			<li><span>»&#160;</span><a href="admin_users.php"><?php echo $lang_admin_common['Users'] ?></a></li>
    53. 

  53. 			<li><span>»&#160;</span><strong><?php echo $lang_admin_users['Results head'] ?></strong></li>
    54. 

  54. 		</ul>
    55. 

  55. 		<div class="pagepost">
    56. 

  56. 			<p class="pagelink"><?php echo $paging_links ?></p>
    57. 

  57. 		</div>
    58. 

  58. 		<div class="clearer"></div>
    59. 

  59. 	</div>
    60. 

  60. </div>
    61. 

  61. 

  62. <div id="users1" class="blocktable">
    63. 

  63. 	<h2><span><?php echo $lang_admin_users['Results head'] ?></span></h2>
    64. 

  64. 	<div class="box">
    65. 

  65. 		<div class="inbox">
    66. 

  66. 			<table cellspacing="0">
    67. 

  67. 			<thead>
    68. 

  68. 				<tr>
    69. 

  69. 					<th class="tcl" scope="col"><?php echo $lang_admin_users['Results IP address head'] ?></th>
    70. 

  70. 					<th class="tc2" scope="col"><?php echo $lang_admin_users['Results last used head'] ?></th>
    71. 

  71. 					<th class="tc3" scope="col"><?php echo $lang_admin_users['Results times found head'] ?></th>
    72. 

  72. 					<th class="tcr" scope="col"><?php echo $lang_admin_users['Results action head'] ?></th>
    73. 

  73. 				</tr>
    74. 

  74. 			</thead>
    75. 

  75. 			<tbody>
    76. 

  76. <?php
    77. 

  77. 

  78. 	$result = $db->query('SELECT poster_ip, MAX(posted) AS last_used, COUNT(id) AS used_times FROM '.$db->prefix.'posts WHERE poster_id='.$ip_stats.' GROUP BY poster_ip ORDER BY last_used DESC LIMIT '.$start_from.', 50') or error('Unable to fetch post info', __FILE__, __LINE__, $db->error());
    79. 

  79. 	if ($db->num_rows($result))
    80. 

  80. 	{
    81. 

  81. 		while ($cur_ip = $db->fetch_assoc($result))
    82. 

  82. 		{
    83. 

  83. 

  84. ?>
    85. 

  85. 				<tr>
    86. 

  86. 					<td class="tcl"><a href="moderate.php?get_host=<?php echo $cur_ip['poster_ip'] ?>"><?php echo $cur_ip['poster_ip'] ?></a></td>
    87. 

  87. 					<td class="tc2"><?php echo format_time($cur_ip['last_used']) ?></td>
    88. 

  88. 					<td class="tc3"><?php echo $cur_ip['used_times'] ?></td>
    89. 

  89. 					<td class="tcr"><a href="admin_users.php?show_users=<?php echo $cur_ip['poster_ip'] ?>"><?php echo $lang_admin_users['Results find more link'] ?></a></td>
    90. 

  90. 				</tr>
    91. 

  91. <?php
    92. 

  92. 

  93. 		}
    94. 

  94. 	}
    95. 

  95. 	else
    96. 

  96. 		echo "\t\t\t\t".'<tr><td class="tcl" colspan="4">'.$lang_admin_users['Results no posts found'].'</td></tr>'."\n";
    97. 

  97. 

  98. ?>
    99. 

  99. 			</tbody>
    100. 

  100. 			</table>
    101. 

  101. 		</div>
    102. 

  102. 	</div>
    103. 

  103. </div>
    104. 

  104. 

  105. <div class="linksb">
    106. 

  106. 	<div class="inbox crumbsplus">
    107. 

  107. 		<div class="pagepost">
    108. 

  108. 			<p class="pagelink"><?php echo $paging_links ?></p>
    109. 

  109. 		</div>
    110. 

  110. 		<ul class="crumbs">
    111. 

  111. 			<li><a href="admin_index.php"><?php echo $lang_admin_common['Admin'].' '.$lang_admin_common['Index'] ?></a></li>
    112. 

  112. 			<li><span>»&#160;</span><a href="admin_users.php"><?php echo $lang_admin_common['Users'] ?></a></li>
    113. 

  113. 			<li><span>»&#160;</span><strong><?php echo $lang_admin_users['Results head'] ?></strong></li>
    114. 

  114. 		</ul>
    115. 

  115. 		<div class="clearer"></div>
    116. 

  116. 	</div>
    117. 

  117. </div>
    118. 

  118. <?php
    119. 

  119. 

  120. 	require PUN_ROOT.'footer.php';
    121. 

  121. }
    122. 

  122. 

  123. 

  124. if (isset($_GET['show_users']))
    125. 

  125. {
    126. 

  126. 	$ip = trim($_GET['show_users']);
    127. 

  127. 

  128. 	if (!@preg_match('/^[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}$/', $ip) && !@preg_match('/^((([0-9A-Fa-f]{1,4}:){7}[0-9A-Fa-f]{1,4})|(([0-9A-Fa-f]{1,4}:){6}:[0-9A-Fa-f]{1,4})|(([0-9A-Fa-f]{1,4}:){5}:([0-9A-Fa-f]{1,4}:)?[0-9A-Fa-f]{1,4})|(([0-9A-Fa-f]{1,4}:){4}:([0-9A-Fa-f]{1,4}:){0,2}[0-9A-Fa-f]{1,4})|(([0-9A-Fa-f]{1,4}:){3}:([0-9A-Fa-f]{1,4}:){0,3}[0-9A-Fa-f]{1,4})|(([0-9A-Fa-f]{1,4}:){2}:([0-9A-Fa-f]{1,4}:){0,4}[0-9A-Fa-f]{1,4})|(([0-9A-Fa-f]{1,4}:){6}((\b((25[0-5])|(1\d{2})|(2[0-4]\d)|(\d{1,2}))\b)\.){3}(\b((25[0-5])|(1\d{2})|(2[0-4]\d)|(\d{1,2}))\b))|(([0-9A-Fa-f]{1,4}:){0,5}:((\b((25[0-5])|(1\d{2})|(2[0-4]\d)|(\d{1,2}))\b)\.){3}(\b((25[0-5])|(1\d{2})|(2[0-4]\d)|(\d{1,2}))\b))|(::([0-9A-Fa-f]{1,4}:){0,5}((\b((25[0-5])|(1\d{2})|(2[0-4]\d)|(\d{1,2}))\b)\.){3}(\b((25[0-5])|(1\d{2})|(2[0-4]\d)|(\d{1,2}))\b))|([0-9A-Fa-f]{1,4}::([0-9A-Fa-f]{1,4}:){0,5}[0-9A-Fa-f]{1,4})|(::([0-9A-Fa-f]{1,4}:){0,6}[0-9A-Fa-f]{1,4})|(([0-9A-Fa-f]{1,4}:){1,7}:))$/', $ip))
    129. 

  129. 		message($lang_admin_users['Bad IP message']);
    130. 

  130. 

  131. 	// Fetch user count
    132. 

  132. 	$result = $db->query('SELECT DISTINCT poster_id, poster FROM '.$db->prefix.'posts WHERE poster_ip=\''.$db->escape($ip).'\'') or error('Unable to fetch post info', __FILE__, __LINE__, $db->error());
    133. 

  133. 	$num_users = $db->num_rows($result);
    134. 

  134. 

  135. 	// Determine the user offset (based on $_GET['p'])
    136. 

  136. 	$num_pages = ceil($num_users / 50);
    137. 

  137. 

  138. 	$p = (!isset($_GET['p']) || $_GET['p'] <= 1 || $_GET['p'] > $num_pages) ? 1 : intval($_GET['p']);
    139. 

  139. 	$start_from = 50 * ($p - 1);
    140. 

  140. 

  141. 	// Generate paging links
    142. 

  142. 	$paging_links = '<span class="pages-label">'.$lang_common['Pages'].' </span>'.paginate($num_pages, $p, 'admin_users.php?show_users='.$ip);
    143. 

  143. 

  144. 	$page_title = array(pun_htmlspecialchars($pun_config['o_board_title']), $lang_admin_common['Admin'], $lang_admin_common['Users'], $lang_admin_users['Results head']);
    145. 

  145. 	define('PUN_ACTIVE_PAGE', 'admin');
    146. 

  146. 	require PUN_ROOT.'header.php';
    147. 

  147. 

  148. ?>
    149. 

  149. <div class="linkst">
    150. 

  150. 	<div class="inbox crumbsplus">
    151. 

  151. 		<ul class="crumbs">
    152. 

  152. 			<li><a href="admin_index.php"><?php echo $lang_admin_common['Admin'].' '.$lang_admin_common['Index'] ?></a></li>
    153. 

  153. 			<li><span>»&#160;</span><a href="admin_users.php"><?php echo $lang_admin_common['Users'] ?></a></li>
    154. 

  154. 			<li><span>»&#160;</span><strong><?php echo $lang_admin_users['Results head'] ?></strong></li>
    155. 

  155. 		</ul>
    156. 

  156. 		<div class="pagepost">
    157. 

  157. 			<p class="pagelink"><?php echo $paging_links ?></p>
    158. 

  158. 		</div>
    159. 

  159. 		<div class="clearer"></div>
    160. 

  160. 	</div>
    161. 

  161. </div>
    162. 

  162. 

  163. <div id="users2" class="blocktable">
    164. 

  164. 	<h2><span><?php echo $lang_admin_users['Results head'] ?></span></h2>
    165. 

  165. 	<div class="box">
    166. 

  166. 		<div class="inbox">
    167. 

  167. 			<table cellspacing="0">
    168. 

  168. 			<thead>
    169. 

  169. 				<tr>
    170. 

  170. 					<th class="tcl" scope="col"><?php echo $lang_admin_users['Results username head'] ?></th>
    171. 

  171. 					<th class="tc2" scope="col"><?php echo $lang_admin_users['Results e-mail head'] ?></th>
    172. 

  172. 					<th class="tc3" scope="col"><?php echo $lang_admin_users['Results title head'] ?></th>
    173. 

  173. 					<th class="tc4" scope="col"><?php echo $lang_admin_users['Results posts head'] ?></th>
    174. 

  174. 					<th class="tc5" scope="col"><?php echo $lang_admin_users['Results admin note head'] ?></th>
    175. 

  175. 					<th class="tcr" scope="col"><?php echo $lang_admin_users['Results actions head'] ?></th>
    176. 

  176. 				</tr>
    177. 

  177. 			</thead>
    178. 

  178. 			<tbody>
    179. 

  179. <?php
    180. 

  180. 

  181. 	$result = $db->query('SELECT DISTINCT poster_id, poster FROM '.$db->prefix.'posts WHERE poster_ip=\''.$db->escape($ip).'\' ORDER BY poster DESC') or error('Unable to fetch post info', __FILE__, __LINE__, $db->error());
    182. 

  182. 	$num_posts = $db->num_rows($result);
    183. 

  183. 

  184. 	if ($num_posts)
    185. 

  185. 	{
    186. 

  186. 		// Loop through users and print out some info
    187. 

  187. 		for ($i = 0; $i < $num_posts; ++$i)
    188. 

  188. 		{
    189. 

  189. 			list($poster_id, $poster) = $db->fetch_row($result);
    190. 

  190. 

  191. 			$result2 = $db->query('SELECT u.id, u.username, u.email, u.title, u.num_posts, u.admin_note, g.g_id, g.g_user_title FROM '.$db->prefix.'users AS u INNER JOIN '.$db->prefix.'groups AS g ON g.g_id=u.group_id WHERE u.id>1 AND u.id='.$poster_id) or error('Unable to fetch user info', __FILE__, __LINE__, $db->error());
    192. 

  192. 

  193. 			if (($user_data = $db->fetch_assoc($result2)))
    194. 

  194. 			{
    195. 

  195. 				$user_title = get_title($user_data);
    196. 

  196. 

  197. 				$actions = '<a href="admin_users.php?ip_stats='.$user_data['id'].'">'.$lang_admin_users['Results view IP link'].'</a> | <a href="search.php?action=show_user_posts&amp;user_id='.$user_data['id'].'">'.$lang_admin_users['Results show posts link'].'</a>';
    198. 

  198. 

  199. ?>
    200. 

  200. 				<tr>
    201. 

  201. 					<td class="tcl"><?php echo '<a href="profile.php?id='.$user_data['id'].'">'.pun_htmlspecialchars($user_data['username']).'</a>' ?></td>
    202. 

  202. 					<td class="tc2"><a href="mailto:<?php echo $user_data['email'] ?>"><?php echo $user_data['email'] ?></a></td>
    203. 

  203. 					<td class="tc3"><?php echo $user_title ?></td>
    204. 

  204. 					<td class="tc4"><?php echo forum_number_format($user_data['num_posts']) ?></td>
    205. 

  205. 					<td class="tc5"><?php echo ($user_data['admin_note'] != '') ? pun_htmlspecialchars($user_data['admin_note']) : '&#160;' ?></td>
    206. 

  206. 					<td class="tcr"><?php echo $actions ?></td>
    207. 

  207. 				</tr>
    208. 

  208. <?php
    209. 

  209. 

  210. 			}
    211. 

  211. 			else
    212. 

  212. 			{
    213. 

  213. 

  214. ?>
    215. 

  215. 				<tr>
    216. 

  216. 					<td class="tcl"><?php echo pun_htmlspecialchars($poster) ?></td>
    217. 

  217. 					<td class="tc2">&#160;</td>
    218. 

  218. 					<td class="tc3"><?php echo $lang_admin_users['Results guest'] ?></td>
    219. 

  219. 					<td class="tc4">&#160;</td>
    220. 

  220. 					<td class="tc5">&#160;</td>
    221. 

  221. 					<td class="tcr">&#160;</td>
    222. 

  222. 				</tr>
    223. 

  223. <?php
    224. 

  224. 

  225. 			}
    226. 

  226. 		}
    227. 

  227. 	}
    228. 

  228. 	else
    229. 

  229. 		echo "\t\t\t\t".'<tr><td class="tcl" colspan="6">'.$lang_admin_users['Results no IP found'].'</td></tr>'."\n";
    230. 

  230. 

  231. ?>
    232. 

  232. 			</tbody>
    233. 

  233. 			</table>
    234. 

  234. 		</div>
    235. 

  235. 	</div>
    236. 

  236. </div>
    237. 

  237. 

  238. <div class="linksb">
    239. 

  239. 	<div class="inbox crumbsplus">
    240. 

  240. 		<div class="pagepost">
    241. 

  241. 			<p class="pagelink"><?php echo $paging_links ?></p>
    242. 

  242. 		</div>
    243. 

  243. 		<ul class="crumbs">
    244. 

  244. 			<li><a href="admin_index.php"><?php echo $lang_admin_common['Admin'].' '.$lang_admin_common['Index'] ?></a></li>
    245. 

  245. 			<li><span>»&#160;</span><a href="admin_users.php"><?php echo $lang_admin_common['Users'] ?></a></li>
    246. 

  246. 			<li><span>»&#160;</span><strong><?php echo $lang_admin_users['Results head'] ?></strong></li>
    247. 

  247. 		</ul>
    248. 

  248. 		<div class="clearer"></div>
    249. 

  249. 	</div>
    250. 

  250. </div>
    251. 

  251. <?php
    252. 

  252. 	require PUN_ROOT.'footer.php';
    253. 

  253. }
    254. 

  254. 

  255. 

  256. // Move multiple users to other user groups
    257. 

  257. else if (isset($_POST['move_users']) || isset($_POST['move_users_comply']))
    258. 

  258. {
    259. 

  259.     if ($pun_user['g_id'] > PUN_ADMIN)
    260. 

  260.         message($lang_common['No permission']);
    261. 

  261.     confirm_referrer('admin_users.php');
    262. 

  262.     if (isset($_POST['users']))
    263. 

  263.     {
    264. 

  264.         $user_ids = is_array($_POST['users']) ? array_keys($_POST['users']) : explode(',', $_POST['users']);
    265. 

  265.         $user_ids = array_map('intval', $user_ids);
    266. 

  266.         // Delete invalid IDs
    267. 

  267.         $user_ids = array_diff($user_ids, array(0, 1));
    268. 

  268.     }
    269. 

  269.     else
    270. 

  270.         $user_ids = array();
    271. 

  271.     if (empty($user_ids))
    272. 

  272.         message($lang_admin_users['No users selected']);
    273. 

  273.     // Are we trying to batch move any admins?
    274. 

  274.     $result = $db->query('SELECT COUNT(*) FROM '.$db->prefix.'users WHERE id IN ('.implode(',', $user_ids).') AND group_id='.PUN_ADMIN) or error('Unable to fetch user info', __FILE__, __LINE__, $db->error());
    275. 

  275.     if ($db->result($result) > 0)
    276. 

  276.         message($lang_admin_users['No move admins message']);
    277. 

  277.     // Fetch all user groups
    278. 

  278.     $all_groups = array();
    279. 

  279.     $result = $db->query('SELECT g_id, g_title FROM '.$db->prefix.'groups WHERE g_id NOT IN ('.PUN_GUEST.','.PUN_ADMIN.') ORDER BY g_title ASC') or error('Unable to fetch groups', __FILE__, __LINE__, $db->error());
    280. 

  280.     while ($row = $db->fetch_row($result))
    281. 

  281.         $all_groups[$row[0]] = $row[1];
    282. 

  282.     if (isset($_POST['move_users_comply']))
    283. 

  283.     {
    284. 

  284.         $new_group = isset($_POST['new_group']) && isset($all_groups[$_POST['new_group']]) ? $_POST['new_group'] : message($lang_admin_users['Invalid group message']);
    285. 

  285.         // Is the new group a moderator group?
    286. 

  286.         $result = $db->query('SELECT g_moderator FROM '.$db->prefix.'groups WHERE g_id='.$new_group) or error('Unable to fetch group info', __FILE__, __LINE__, $db->error());
    287. 

  287.         $new_group_mod = $db->result($result);
    288. 

  288.         // Fetch user groups
    289. 

  289.         $user_groups = array();
    290. 

  290.         $result = $db->query('SELECT id, group_id FROM '.$db->prefix.'users WHERE id IN ('.implode(',', $user_ids).')') or error('Unable to fetch user groups', __FILE__, __LINE__, $db->error());
    291. 

  291.         while ($cur_user = $db->fetch_assoc($result))
    292. 

  292.         {
    293. 

  293.             if (!isset($user_groups[$cur_user['group_id']]))
    294. 

  294.                 $user_groups[$cur_user['group_id']] = array();
    295. 

  295.             $user_groups[$cur_user['group_id']][] = $cur_user['id'];
    296. 

  296.         }
    297. 

  297.         // Are any users moderators?
    298. 

  298.         $group_ids = array_keys($user_groups);
    299. 

  299.         $result = $db->query('SELECT g_id, g_moderator FROM '.$db->prefix.'groups WHERE g_id IN ('.implode(',', $group_ids).')') or error('Unable to fetch group moderators', __FILE__, __LINE__, $db->error());
    300. 

  300.         while ($cur_group = $db->fetch_assoc($result))
    301. 

  301.         {
    302. 

  302.             if ($cur_group['g_moderator'] == '0')
    303. 

  303.                 unset($user_groups[$cur_group['g_id']]);
    304. 

  304.         }
    305. 

  305.         if (!empty($user_groups) && $new_group != PUN_ADMIN && $new_group_mod != '1')
    306. 

  306.         {
    307. 

  307.             // Fetch forum list and clean up their moderator list
    308. 

  308.             $result = $db->query('SELECT id, moderators FROM '.$db->prefix.'forums') or error('Unable to fetch forum list', __FILE__, __LINE__, $db->error());
    309. 

  309.             while ($cur_forum = $db->fetch_assoc($result))
    310. 

  310.             {
    311. 

  311.                 $cur_moderators = ($cur_forum['moderators'] != '') ? unserialize($cur_forum['moderators']) : array();
    312. 

  312.                 foreach ($user_groups as $group_users)
    313. 

  313.                     $cur_moderators = array_diff($cur_moderators, $group_users);
    314. 

  314.                 $cur_moderators = (!empty($cur_moderators)) ? '\''.$db->escape(serialize($cur_moderators)).'\'' : 'NULL';
    315. 

  315.                 $db->query('UPDATE '.$db->prefix.'forums SET moderators='.$cur_moderators.' WHERE id='.$cur_forum['id']) or error('Unable to update forum', __FILE__, __LINE__, $db->error());
    316. 

  316.             }
    317. 

  317.         }
    318. 

  318.         // Change user group
    319. 

  319.         $db->query('UPDATE '.$db->prefix.'users SET group_id='.$new_group.' WHERE id IN ('.implode(',', $user_ids).')') or error('Unable to change user group', __FILE__, __LINE__, $db->error());
    320. 

  320.         redirect('admin_users.php', $lang_admin_users['Users move redirect']);
    321. 

  321.     }
    322. 

  322.     $page_title = array(pun_htmlspecialchars($pun_config['o_board_title']), $lang_admin_common['Admin'], $lang_admin_common['Users'], $lang_admin_users['Move users']);
    323. 

  323.     define('PUN_ACTIVE_PAGE', 'admin');
    324. 

  324.     require PUN_ROOT.'header.php';
    325. 

  325.     generate_admin_menu('users');
    326. 

  326. ?>
    327. 

  327.     <div class="blockform">
    328. 

  328.         <h2><span><?php echo $lang_admin_users['Move users'] ?></span></h2>
    329. 

  329.         <div class="box">
    330. 

  330.             <form name="confirm_move_users" method="post" action="admin_users.php">
    331. 

  331.                 <input type="hidden" name="users" value="<?php echo implode(',', $user_ids) ?>" />
    332. 

  332.                 <div class="inform">
    333. 

  333.                     <fieldset>
    334. 

  334.                         <legend><?php echo $lang_admin_users['Move users subhead'] ?></legend>
    335. 

  335.                         <div class="infldset">
    336. 

  336.                             <table class="aligntop" cellspacing="0">
    337. 

  337.                                 <tr>
    338. 

  338.                                     <th scope="row"><?php echo $lang_admin_users['New group label'] ?></th>
    339. 

  339.                                     <td>
    340. 

  340.                                         <select name="new_group" tabindex="1">
    341. 

  341. <?php foreach ($all_groups as $gid => $group) : ?>                                            <option value="<?php echo $gid ?>"><?php echo pun_htmlspecialchars($group) ?></option>
    342. 

  342. <?php endforeach; ?>
    343. 

  343.                                         </select>
    344. 

  344.                                         <span><?php echo $lang_admin_users['New group help'] ?></span>
    345. 

  345.                                     </td>
    346. 

  346.                                 </tr>
    347. 

  347.                             </table>
    348. 

  348.                         </div>
    349. 

  349.                     </fieldset>
    350. 

  350.                 </div>
    351. 

  351.                 <p class="submitend"><input type="submit" name="move_users_comply" value="<?php echo $lang_admin_common['Save'] ?>" tabindex="2" /></p>
    352. 

  352.             </form>
    353. 

  353.         </div>
    354. 

  354.     </div>
    355. 

  355.     <div class="clearer"></div>
    356. 

  356. </div>
    357. 

  357. <?php
    358. 

  358.     require PUN_ROOT.'footer.php';
    359. 

  359. }
    360. 

  360. // Delete multiple users
    361. 

  361. else if (isset($_POST['delete_users']) || isset($_POST['delete_users_comply']))
    362. 

  362. {
    363. 

  363.     if ($pun_user['g_id'] > PUN_ADMIN)
    364. 

  364.         message($lang_common['No permission']);
    365. 

  365.     confirm_referrer('admin_users.php');
    366. 

  366.     if (isset($_POST['users']))
    367. 

  367.     {
    368. 

  368.         $user_ids = is_array($_POST['users']) ? array_keys($_POST['users']) : explode(',', $_POST['users']);
    369. 

  369.         $user_ids = array_map('intval', $user_ids);
    370. 

  370.         // Delete invalid IDs
    371. 

  371.         $user_ids = array_diff($user_ids, array(0, 1));
    372. 

  372.     }
    373. 

  373.     else
    374. 

  374.         $user_ids = array();
    375. 

  375.     if (empty($user_ids))
    376. 

  376.         message($lang_admin_users['No users selected']);
    377. 

  377.     // Are we trying to delete any admins?
    378. 

  378.     $result = $db->query('SELECT COUNT(*) FROM '.$db->prefix.'users WHERE id IN ('.implode(',', $user_ids).') AND group_id='.PUN_ADMIN) or error('Unable to fetch user info', __FILE__, __LINE__, $db->error());
    379. 

  379.     if ($db->result($result) > 0)
    380. 

  380.         message($lang_admin_users['No delete admins message']);
    381. 

  381.     if (isset($_POST['delete_users_comply']))
    382. 

  382.     {
    383. 

  383.         // Fetch user groups
    384. 

  384.         $user_groups = array();
    385. 

  385.         $result = $db->query('SELECT id, group_id FROM '.$db->prefix.'users WHERE id IN ('.implode(',', $user_ids).')') or error('Unable to fetch user groups', __FILE__, __LINE__, $db->error());
    386. 

  386.         while ($cur_user = $db->fetch_assoc($result))
    387. 

  387.         {
    388. 

  388.             if (!isset($user_groups[$cur_user['group_id']]))
    389. 

  389.                 $user_groups[$cur_user['group_id']] = array();
    390. 

  390.             $user_groups[$cur_user['group_id']][] = $cur_user['id'];
    391. 

  391.         }
    392. 

  392.         // Are any users moderators?
    393. 

  393.         $group_ids = array_keys($user_groups);
    394. 

  394.         $result = $db->query('SELECT g_id, g_moderator FROM '.$db->prefix.'groups WHERE g_id IN ('.implode(',', $group_ids).')') or error('Unable to fetch group moderators', __FILE__, __LINE__, $db->error());
    395. 

  395.         while ($cur_group = $db->fetch_assoc($result))
    396. 

  396.         {
    397. 

  397.             if ($cur_group['g_moderator'] == '0')
    398. 

  398.                 unset($user_groups[$cur_group['g_id']]);
    399. 

  399.         }
    400. 

  400.         // Fetch forum list and clean up their moderator list
    401. 

  401.         $result = $db->query('SELECT id, moderators FROM '.$db->prefix.'forums') or error('Unable to fetch forum list', __FILE__, __LINE__, $db->error());
    402. 

  402.         while ($cur_forum = $db->fetch_assoc($result))
    403. 

  403.         {
    404. 

  404.             $cur_moderators = ($cur_forum['moderators'] != '') ? unserialize($cur_forum['moderators']) : array();
    405. 

  405.             foreach ($user_groups as $group_users)
    406. 

  406.                 $cur_moderators = array_diff($cur_moderators, $group_users);
    407. 

  407.             $cur_moderators = (!empty($cur_moderators)) ? '\''.$db->escape(serialize($cur_moderators)).'\'' : 'NULL';
    408. 

  408.             $db->query('UPDATE '.$db->prefix.'forums SET moderators='.$cur_moderators.' WHERE id='.$cur_forum['id']) or error('Unable to update forum', __FILE__, __LINE__, $db->error());
    409. 

  409.         }
    410. 

  410.         // Delete any subscriptions
    411. 

  411.         $db->query('DELETE FROM '.$db->prefix.'topic_subscriptions WHERE user_id IN ('.implode(',', $user_ids).')') or error('Unable to delete topic subscriptions', __FILE__, __LINE__, $db->error());
    412. 

  412.         $db->query('DELETE FROM '.$db->prefix.'forum_subscriptions WHERE user_id IN ('.implode(',', $user_ids).')') or error('Unable to delete forum subscriptions', __FILE__, __LINE__, $db->error());
    413. 

  413.         // Remove them from the online list (if they happen to be logged in)
    414. 

  414.         $db->query('DELETE FROM '.$db->prefix.'online WHERE user_id IN ('.implode(',', $user_ids).')') or error('Unable to remove users from online list', __FILE__, __LINE__, $db->error());
    415. 

  415.         // Should we delete all posts made by these users?
    416. 

  416.         if (isset($_POST['delete_posts']))
    417. 

  417.         {
    418. 

  418.             require PUN_ROOT.'include/search_idx.php';
    419. 

  419.             @set_time_limit(0);
    420. 

  420.             // Find all posts made by this user
    421. 

  421.             $result = $db->query('SELECT p.id, p.topic_id, t.forum_id FROM '.$db->prefix.'posts AS p INNER JOIN '.$db->prefix.'topics AS t ON t.id=p.topic_id INNER JOIN '.$db->prefix.'forums AS f ON f.id=t.forum_id WHERE p.poster_id IN ('.implode(',', $user_ids).')') or error('Unable to fetch posts', __FILE__, __LINE__, $db->error());
    422. 

  422.             if ($db->num_rows($result))
    423. 

  423.             {
    424. 

  424.                 while ($cur_post = $db->fetch_assoc($result))
    425. 

  425.                 {
    426. 

  426.                     // Determine whether this post is the "topic post" or not
    427. 

  427.                     $result2 = $db->query('SELECT id FROM '.$db->prefix.'posts WHERE topic_id='.$cur_post['topic_id'].' ORDER BY posted LIMIT 1') or error('Unable to fetch post info', __FILE__, __LINE__, $db->error());
    428. 

  428.                     if ($db->result($result2) == $cur_post['id'])
    429. 

  429.                         delete_topic($cur_post['topic_id']);
    430. 

  430.                     else
    431. 

  431.                         delete_post($cur_post['id'], $cur_post['topic_id']);
    432. 

  432.                     update_forum($cur_post['forum_id']);
    433. 

  433.                 }
    434. 

  434.             }
    435. 

  435.         }
    436. 

  436.         else
    437. 

  437.             // Set all their posts to guest
    438. 

  438.             $db->query('UPDATE '.$db->prefix.'posts SET poster_id=1 WHERE poster_id IN ('.implode(',', $user_ids).')') or error('Unable to update posts', __FILE__, __LINE__, $db->error());
    439. 

  439.         // Delete the users
    440. 

  440.         $db->query('DELETE FROM '.$db->prefix.'users WHERE id IN ('.implode(',', $user_ids).')') or error('Unable to delete users', __FILE__, __LINE__, $db->error());
    441. 

  441.         // Delete user avatars
    442. 

  442.         foreach ($user_ids as $user_id)
    443. 

  443.             delete_avatar($user_id);
    444. 

  444. // New PMS
    445. 

  445. 		require PUN_ROOT.'include/pms_new/common_pmsn.php';
    446. 

  446. 		
    447. 

  447. 		foreach ($user_ids as $user_id)
    448. 

  448. 			pmsn_user_delete($user_id, 2);
    449. 

  449. // New PMS
    450. 

  450.         redirect('admin_users.php', $lang_admin_users['Users delete redirect']);
    451. 

  451.     }
    452. 

  452.     $page_title = array(pun_htmlspecialchars($pun_config['o_board_title']), $lang_admin_common['Admin'], $lang_admin_common['Users'], $lang_admin_users['Delete users']);
    453. 

  453.     define('PUN_ACTIVE_PAGE', 'admin');
    454. 

  454.     require PUN_ROOT.'header.php';
    455. 

  455.     generate_admin_menu('users');
    456. 

  456. ?>
    457. 

  457.     <div class="blockform">
    458. 

  458.         <h2><span><?php echo $lang_admin_users['Delete users'] ?></span></h2>
    459. 

  459.         <div class="box">
    460. 

  460.             <form name="confirm_del_users" method="post" action="admin_users.php">
    461. 

  461.                 <input type="hidden" name="users" value="<?php echo implode(',', $user_ids) ?>" />
    462. 

  462.                 <div class="inform">
    463. 

  463.                     <fieldset>
    464. 

  464.                         <legend><?php echo $lang_admin_users['Confirm delete legend'] ?></legend>
    465. 

  465.                         <div class="infldset">
    466. 

  466.                             <p><?php echo $lang_admin_users['Confirm delete info'] ?></p>
    467. 

  467.                             <div class="rbox">
    468. 

  468.                                 <label><input type="checkbox" name="delete_posts" value="1" checked="checked" /><?php echo $lang_admin_users['Delete posts'] ?><br /></label>
    469. 

  469.                             </div>
    470. 

  470.                             <p class="warntext"><strong><?php echo $lang_admin_users['Delete warning'] ?></strong></p>
    471. 

  471.                         </div>
    472. 

  472.                     </fieldset>
    473. 

  473.                 </div>
    474. 

  474.                 <p class="buttons"><input type="submit" name="delete_users_comply" value="<?php echo $lang_admin_users['Delete'] ?>" /> <a href="javascript:history.go(-1)"><?php echo $lang_admin_common['Go back'] ?></a></p>
    475. 

  475.             </form>
    476. 

  476.         </div>
    477. 

  477.     </div>
    478. 

  478.     <div class="clearer"></div>
    479. 

  479. </div>
    480. 

  480. <?php
    481. 

  481.     require PUN_ROOT.'footer.php';
    482. 

  482. }
    483. 

  483. // Ban multiple users
    484. 

  484. else if (isset($_POST['ban_users']) || isset($_POST['ban_users_comply']))
    485. 

  485. {
    486. 

  486.     if ($pun_user['g_id'] != PUN_ADMIN && ($pun_user['g_moderator'] != '1' || $pun_user['g_mod_ban_users'] == '0'))
    487. 

  487.         message($lang_common['No permission']);
    488. 

  488.     confirm_referrer('admin_users.php');
    489. 

  489.     if (isset($_POST['users']))
    490. 

  490.     {
    491. 

  491.         $user_ids = is_array($_POST['users']) ? array_keys($_POST['users']) : explode(',', $_POST['users']);
    492. 

  492.         $user_ids = array_map('intval', $user_ids);
    493. 

  493.         // Delete invalid IDs
    494. 

  494.         $user_ids = array_diff($user_ids, array(0, 1));
    495. 

  495.     }
    496. 

  496.     else
    497. 

  497.         $user_ids = array();
    498. 

  498.     if (empty($user_ids))
    499. 

  499.         message($lang_admin_users['No users selected']);
    500. 

  500.     // Are we trying to ban any admins?
    501. 

  501.     $result = $db->query('SELECT COUNT(*) FROM '.$db->prefix.'users WHERE id IN ('.implode(',', $user_ids).') AND group_id='.PUN_ADMIN) or error('Unable to fetch group info', __FILE__, __LINE__, $db->error());
    502. 

  502.     if ($db->result($result) > 0)
    503. 

  503.         message($lang_admin_users['No ban admins message']);
    504. 

  504.     // Also, we cannot ban moderators
    505. 

  505.     $result = $db->query('SELECT COUNT(*) FROM '.$db->prefix.'users AS u INNER JOIN '.$db->prefix.'groups AS g ON u.group_id=g.g_id WHERE g.g_moderator=1 AND u.id IN ('.implode(',', $user_ids).')') or error('Unable to fetch moderator group info', __FILE__, __LINE__, $db->error());
    506. 

  506.     if ($db->result($result) > 0)
    507. 

  507.         message($lang_admin_users['No ban mods message']);
    508. 

  508.     if (isset($_POST['ban_users_comply']))
    509. 

  509.     {
    510. 

  510.         $ban_message = pun_trim($_POST['ban_message']);
    511. 

  511.         $ban_expire = pun_trim($_POST['ban_expire']);
    512. 

  512.         $ban_the_ip = isset($_POST['ban_the_ip']) ? intval($_POST['ban_the_ip']) : 0;
    513. 

  513.         if ($ban_expire != '' && $ban_expire != 'Never')
    514. 

  514.         {
    515. 

  515.             $ban_expire = strtotime($ban_expire.' GMT');
    516. 

  516.             if ($ban_expire == -1 || !$ban_expire)
    517. 

  517.                 message($lang_admin_users['Invalid date message'].' '.$lang_admin_users['Invalid date reasons']);
    518. 

  518.             $diff = ($pun_user['timezone'] + $pun_user['dst']) * 3600;
    519. 

  519.             $ban_expire -= $diff;
    520. 

  520.             if ($ban_expire <= time())
    521. 

  521.                 message($lang_admin_users['Invalid date message'].' '.$lang_admin_users['Invalid date reasons']);
    522. 

  522.         }
    523. 

  523.         else
    524. 

  524.             $ban_expire = 'NULL';
    525. 

  525.         $ban_message = ($ban_message != '') ? '\''.$db->escape($ban_message).'\'' : 'NULL';
    526. 

  526.         // Fetch user information
    527. 

  527.         $user_info = array();
    528. 

  528.         $result = $db->query('SELECT id, username, email, registration_ip FROM '.$db->prefix.'users WHERE id IN ('.implode(',', $user_ids).')') or error('Unable to fetch user info', __FILE__, __LINE__, $db->error());
    529. 

  529.         while ($cur_user = $db->fetch_assoc($result))
    530. 

  530.             $user_info[$cur_user['id']] = array('username' => $cur_user['username'], 'email' => $cur_user['email'], 'ip' => $cur_user['registration_ip']);
    531. 

  531.         // Overwrite the registration IP with one from the last post (if it exists)
    532. 

  532.         if ($ban_the_ip != 0)
    533. 

  533.         {
    534. 

  534.             $result = $db->query('SELECT p.poster_id, p.poster_ip FROM '.$db->prefix.'posts AS p INNER JOIN (SELECT MAX(id) AS id FROM '.$db->prefix.'posts WHERE poster_id IN ('.implode(',', $user_ids).') GROUP BY poster_id) AS i ON p.id=i.id') or error('Unable to fetch post info', __FILE__, __LINE__, $db->error());
    535. 

  535.             while ($cur_address = $db->fetch_assoc($result))
    536. 

  536.                 $user_info[$cur_address['poster_id']]['ip'] = $cur_address['poster_ip'];
    537. 

  537.         }
    538. 

  538.         // And insert the bans!
    539. 

  539.         foreach ($user_ids as $user_id)
    540. 

  540.         {
    541. 

  541.             $ban_username = '\''.$db->escape($user_info[$user_id]['username']).'\'';
    542. 

  542.             $ban_email = '\''.$db->escape($user_info[$user_id]['email']).'\'';
    543. 

  543.             $ban_ip = ($ban_the_ip != 0) ? '\''.$db->escape($user_info[$user_id]['ip']).'\'' : 'NULL';
    544. 

  544.             $db->query('INSERT INTO '.$db->prefix.'bans (username, ip, email, message, expire, ban_creator) VALUES('.$ban_username.', '.$ban_ip.', '.$ban_email.', '.$ban_message.', '.$ban_expire.', '.$pun_user['id'].')') or error('Unable to add ban', __FILE__, __LINE__, $db->error());
    545. 

  545.         }
    546. 

  546.         // Regenerate the bans cache
    547. 

  547.         if (!defined('FORUM_CACHE_FUNCTIONS_LOADED'))
    548. 

  548.             require PUN_ROOT.'include/cache.php';
    549. 

  549.         generate_bans_cache();
    550. 

  550.         redirect('admin_users.php', $lang_admin_users['Users banned redirect']);
    551. 

  551.     }
    552. 

  552.     $page_title = array(pun_htmlspecialchars($pun_config['o_board_title']), $lang_admin_common['Admin'], $lang_admin_common['Bans']);
    553. 

  553.     $focus_element = array('bans2', 'ban_message');
    554. 

  554.     define('PUN_ACTIVE_PAGE', 'admin');
    555. 

  555.     require PUN_ROOT.'header.php';
    556. 

  556.     generate_admin_menu('users');
    557. 

  557. ?>
    558. 

  558.     <div class="blockform">
    559. 

  559.         <h2><span><?php echo $lang_admin_users['Ban users'] ?></span></h2>
    560. 

  560.         <div class="box">
    561. 

  561.             <form id="bans2" name="confirm_ban_users" method="post" action="admin_users.php">
    562. 

  562.                 <input type="hidden" name="users" value="<?php echo implode(',', $user_ids) ?>" />
    563. 

  563.                 <div class="inform">
    564. 

  564.                     <fieldset>
    565. 

  565.                         <legend><?php echo $lang_admin_users['Message expiry subhead'] ?></legend>
    566. 

  566.                         <div class="infldset">
    567. 

  567.                             <table class="aligntop" cellspacing="0">
    568. 

  568.                                 <tr>
    569. 

  569.                                     <th scope="row"><?php echo $lang_admin_users['Ban message label'] ?></th>
    570. 

  570.                                     <td>
    571. 

  571.                                         <input type="text" name="ban_message" size="50" maxlength="255" tabindex="1" />
    572. 

  572.                                         <span><?php echo $lang_admin_users['Ban message help'] ?></span>
    573. 

  573.                                     </td>
    574. 

  574.                                 </tr>
    575. 

  575.                                 <tr>
    576. 

  576.                                     <th scope="row"><?php echo $lang_admin_users['Expire date label'] ?></th>
    577. 

  577.                                     <td>
    578. 

  578.                                         <input type="text" name="ban_expire" size="17" maxlength="10" tabindex="2" />
    579. 

  579.                                         <span><?php echo $lang_admin_users['Expire date help'] ?></span>
    580. 

  580.                                     </td>
    581. 

  581.                                 </tr>
    582. 

  582.                                 <tr>
    583. 

  583.                                     <th scope="row"><?php echo $lang_admin_users['Ban IP label'] ?></th>
    584. 

  584.                                     <td>
    585. 

  585.                                         <input type="radio" name="ban_the_ip" tabindex="3" value="1" checked="checked" />&#160;<strong><?php echo $lang_admin_common['Yes'] ?></strong>&#160;&#160;&#160;<input type="radio" name="ban_the_ip" tabindex="4" value="0" checked="checked" />&#160;<strong><?php echo $lang_admin_common['No'] ?></strong>
    586. 

  586.                                         <span><?php echo $lang_admin_users['Ban IP help'] ?></span>
    587. 

  587.                                     </td>
    588. 

  588.                                 </tr>
    589. 

  589.                             </table>
    590. 

  590.                         </div>
    591. 

  591.                     </fieldset>
    592. 

  592.                 </div>
    593. 

  593.                 <p class="submitend"><input type="submit" name="ban_users_comply" value="<?php echo $lang_admin_common['Save'] ?>" tabindex="3" /></p>
    594. 

  594.             </form>
    595. 

  595.         </div>
    596. 

  596.     </div>
    597. 

  597.     <div class="clearer"></div>
    598. 

  598. </div>
    599. 

  599. <?php
    600. 

  600.     require PUN_ROOT.'footer.php';
    601. 

  601. }
    602. 

  602. 

  603. else if (isset($_GET['find_user']))
    604. 

  604. {
    605. 

  605. 	$form = isset($_GET['form']) ? $_GET['form'] : array();
    606. 

  606. 

  607. 	// trim() all elements in $form
    608. 

  608. 	$form = array_map('pun_trim', $form);
    609. 

  609. 	$conditions = $query_str = array();
    610. 

  610. 

  611. 	$posts_greater = isset($_GET['posts_greater']) ? trim($_GET['posts_greater']) : '';
    612. 

  612. 	$posts_less = isset($_GET['posts_less']) ? trim($_GET['posts_less']) : '';
    613. 

  613. 	$last_post_after = isset($_GET['last_post_after']) ? trim($_GET['last_post_after']) : '';
    614. 

  614. 	$last_post_before = isset($_GET['last_post_before']) ? trim($_GET['last_post_before']) : '';
    615. 

  615. 	$registered_after = isset($_GET['registered_after']) ? trim($_GET['registered_after']) : '';
    616. 

  616. 	$registered_before = isset($_GET['registered_before']) ? trim($_GET['registered_before']) : '';
    617. 

  617. 	$order_by = isset($_GET['order_by']) && in_array($_GET['order_by'], array('username', 'email', 'num_posts', 'last_post', 'registered')) ? $_GET['order_by'] : 'username';
    618. 

  618. 	$direction = isset($_GET['direction']) && $_GET['direction'] == 'DESC' ? 'DESC' : 'ASC';
    619. 

  619. 	$user_group = isset($_GET['user_group']) ? intval($_GET['user_group']) : -1;
    620. 

  620. 

  621. 	$query_str[] = 'order_by='.$order_by;
    622. 

  622. 	$query_str[] = 'direction='.$direction;
    623. 

  623. 	$query_str[] = 'user_group='.$user_group;
    624. 

  624. 

  625. 	if (preg_match('/[^0-9]/', $posts_greater.$posts_less))
    626. 

  626. 		message($lang_admin_users['Non numeric message']);
    627. 

  627. 

  628. 	// Try to convert date/time to timestamps
    629. 

  629. 	if ($last_post_after != '')
    630. 

  630. 	{
    631. 

  631. 		$query_str[] = 'last_post_after='.$last_post_after;
    632. 

  632. 

  633. 		$last_post_after = strtotime($last_post_after);
    634. 

  634. 		if ($last_post_after === false || $last_post_after == -1)
    635. 

  635. 			message($lang_admin_users['Invalid date time message']);
    636. 

  636. 

  637. 		$conditions[] = 'u.last_post>'.$last_post_after;
    638. 

  638. 	}
    639. 

  639. 	if ($last_post_before != '')
    640. 

  640. 	{
    641. 

  641. 		$query_str[] = 'last_post_before='.$last_post_before;
    642. 

  642. 

  643. 		$last_post_before = strtotime($last_post_before);
    644. 

  644. 		if ($last_post_before === false || $last_post_before == -1)
    645. 

  645. 			message($lang_admin_users['Invalid date time message']);
    646. 

  646. 

  647. 		$conditions[] = 'u.last_post<'.$last_post_before;
    648. 

  648. 	}
    649. 

  649. 	if ($registered_after != '')
    650. 

  650. 	{
    651. 

  651. 		$query_str[] = 'registered_after='.$registered_after;
    652. 

  652. 

  653. 		$registered_after = strtotime($registered_after);
    654. 

  654. 		if ($registered_after === false || $registered_after == -1)
    655. 

  655. 			message($lang_admin_users['Invalid date time message']);
    656. 

  656. 

  657. 		$conditions[] = 'u.registered>'.$registered_after;
    658. 

  658. 	}
    659. 

  659. 	if ($registered_before != '')
    660. 

  660. 	{
    661. 

  661. 		$query_str[] = 'registered_before='.$registered_before;
    662. 

  662. 

  663. 		$registered_before = strtotime($registered_before);
    664. 

  664. 		if ($registered_before === false || $registered_before == -1)
    665. 

  665. 			message($lang_admin_users['Invalid date time message']);
    666. 

  666. 

  667. 		$conditions[] = 'u.registered<'.$registered_before;
    668. 

  668. 	}
    669. 

  669. 

  670. 	$like_command = ($db_type == 'pgsql') ? 'ILIKE' : 'LIKE';
    671. 

  671. 	foreach ($form as $key => $input)
    672. 

  672. 	{
    673. 

  673. 		if ($input != '' && in_array($key, array('username', 'email', 'title', 'realname', 'url', 'jabber', 'icq', 'msn', 'aim', 'yahoo', 'location', 'signature', 'admin_note')))
    674. 

  674. 		{
    675. 

  675. 			$conditions[] = 'u.'.$db->escape($key).' '.$like_command.' \''.$db->escape(str_replace('*', '%', $input)).'\'';
    676. 

  676. 			$query_str[] = 'form%5B'.$key.'%5D='.urlencode($input);
    677. 

  677. 		}
    678. 

  678. 	}
    679. 

  679. 

  680. 	if ($posts_greater != '')
    681. 

  681. 	{
    682. 

  682. 		$query_str[] = 'posts_greater='.$posts_greater;
    683. 

  683. 		$conditions[] = 'u.num_posts>'.$posts_greater;
    684. 

  684. 	}
    685. 

  685. 	if ($posts_less != '')
    686. 

  686. 	{
    687. 

  687. 		$query_str[] = 'posts_less='.$posts_less;
    688. 

  688. 		$conditions[] = 'u.num_posts<'.$posts_less;
    689. 

  689. 	}
    690. 

  690. 

  691. 	if ($user_group > -1)
    692. 

  692. 		$conditions[] = 'u.group_id='.$user_group;
    693. 

  693. 

  694. 	// Fetch user count
    695. 

  695. 	$result = $db->query('SELECT COUNT(id) FROM '.$db->prefix.'users AS u LEFT JOIN '.$db->prefix.'groups AS g ON g.g_id=u.group_id WHERE u.id>1'.(!empty($conditions) ? ' AND '.implode(' AND ', $conditions) : '')) or error('Unable to fetch user info', __FILE__, __LINE__, $db->error());
    696. 

  696. 	$num_users = $db->result($result);
    697. 

  697. 

  698. 	// Determine the user offset (based on $_GET['p'])
    699. 

  699. 	$num_pages = ceil($num_users / 50);
    700. 

  700. 

  701. 	$p = (!isset($_GET['p']) || $_GET['p'] <= 1 || $_GET['p'] > $num_pages) ? 1 : intval($_GET['p']);
    702. 

  702. 	$start_from = 50 * ($p - 1);
    703. 

  703. 

  704. 	// Generate paging links
    705. 

  705. 	$paging_links = '<span class="pages-label">'.$lang_common['Pages'].' </span>'.paginate($num_pages, $p, 'admin_users.php?find_user=&amp;'.implode('&amp;', $query_str));
    706. 

  706. 	
    707. 

  707. 	// Some helper variables for permissions
    708. 

  708. 	$can_delete = $can_move = $pun_user['g_id'] == PUN_ADMIN;
    709. 

  709. 	$can_ban = $pun_user['g_id'] == PUN_ADMIN || ($pun_user['g_moderator'] == '1' && $pun_user['g_mod_ban_users'] == '1');
    710. 

  710. 	$can_action = ($can_delete || $can_ban || $can_move) && $num_users > 0;
    711. 

  711. 

  712. 	$page_title = array(pun_htmlspecialchars($pun_config['o_board_title']), $lang_admin_common['Admin'], $lang_admin_common['Users'], $lang_admin_users['Results head']);
    713. 

  713. 	$page_head = array('js' => '<script type="text/javascript" src="common.js"></script>');
    714. 

  714. 	define('PUN_ACTIVE_PAGE', 'admin');
    715. 

  715. 	require PUN_ROOT.'header.php';
    716. 

  716. 

  717. ?>
    718. 

  718. <div class="linkst">
    719. 

  719. 	<div class="inbox crumbsplus">
    720. 

  720. 		<ul class="crumbs">
    721. 

  721. 			<li><a href="admin_index.php"><?php echo $lang_admin_common['Admin'].' '.$lang_admin_common['Index'] ?></a></li>
    722. 

  722. 			<li><span>»&#160;</span><a href="admin_users.php"><?php echo $lang_admin_common['Users'] ?></a></li>
    723. 

  723. 			<li><span>»&#160;</span><strong><?php echo $lang_admin_users['Results head'] ?></strong></li>
    724. 

  724. 		</ul>
    725. 

  725. 		<div class="pagepost">
    726. 

  726. 			<p class="pagelink"><?php echo $paging_links ?></p>
    727. 

  727. 		</div>
    728. 

  728. 		<div class="clearer"></div>
    729. 

  729. 	</div>
    730. 

  730. </div>
    731. 

  731. 

  732. <form id="search-users-form" action="admin_users.php" method="post">
    733. 

  733. <div id="users2" class="blocktable">
    734. 

  734. 	<h2><span><?php echo $lang_admin_users['Results head'] ?></span></h2>
    735. 

  735. 	<div class="box">
    736. 

  736. 		<div class="inbox">
    737. 

  737. 			<table cellspacing="0">
    738. 

  738. 			<thead>
    739. 

  739. 				<tr>
    740. 

  740. 					<th class="tcl" scope="col"><?php echo $lang_admin_users['Results username head'] ?></th>
    741. 

  741. 					<th class="tc2" scope="col"><?php echo $lang_admin_users['Results e-mail head'] ?></th>
    742. 

  742. 					<th class="tc3" scope="col"><?php echo $lang_admin_users['Results title head'] ?></th>
    743. 

  743. 					<th class="tc4" scope="col"><?php echo $lang_admin_users['Results posts head'] ?></th>
    744. 

  744. 					<th class="tc5" scope="col"><?php echo $lang_admin_users['Results admin note head'] ?></th>
    745. 

  745. 					<th class="tcr" scope="col"><?php echo $lang_admin_users['Results actions head'] ?></th>
    746. 

  746. <?php if ($can_action): ?>                    <th class="tcmod" scope="col"><?php echo $lang_admin_users['Select'] ?></th>
    747. 

  747. <?php endif; ?>
    748. 

  748. 				</tr>
    749. 

  749. 			</thead>
    750. 

  750. 			<tbody>
    751. 

  751. <?php
    752. 

  752. 

  753. 	$result = $db->query('SELECT u.id, u.username, u.email, u.title, u.num_posts, u.admin_note, g.g_id, g.g_user_title FROM '.$db->prefix.'users AS u LEFT JOIN '.$db->prefix.'groups AS g ON g.g_id=u.group_id WHERE u.id>1'.(!empty($conditions) ? ' AND '.implode(' AND ', $conditions) : '').' ORDER BY '.$db->escape($order_by).' '.$db->escape($direction).' LIMIT '.$start_from.', 50') or error('Unable to fetch user info', __FILE__, __LINE__, $db->error());
    754. 

  754. 	if ($db->num_rows($result))
    755. 

  755. 	{
    756. 

  756. 		while ($user_data = $db->fetch_assoc($result))
    757. 

  757. 		{
    758. 

  758. 			$user_title = get_title($user_data);
    759. 

  759. 

  760. 			// This script is a special case in that we want to display "Not verified" for non-verified users
    761. 

  761. 			if (($user_data['g_id'] == '' || $user_data['g_id'] == PUN_UNVERIFIED) && $user_title != $lang_common['Banned'])
    762. 

  762. 				$user_title = '<span class="warntext">'.$lang_admin_users['Not verified'].'</span>';
    763. 

  763. 

  764. 			$actions = '<a href="admin_users.php?ip_stats='.$user_data['id'].'">'.$lang_admin_users['Results view IP link'].'</a> | <a href="search.php?action=show_user_posts&amp;user_id='.$user_data['id'].'">'.$lang_admin_users['Results show posts link'].'</a>';
    765. 

  765. 

  766. ?>
    767. 

  767. 				<tr>
    768. 

  768. 					<td class="tcl"><?php echo '<a href="profile.php?id='.$user_data['id'].'">'.pun_htmlspecialchars($user_data['username']).'</a>' ?></td>
    769. 

  769. 					<td class="tc2"><a href="mailto:<?php echo $user_data['email'] ?>"><?php echo $user_data['email'] ?></a></td>
    770. 

  770. 					<td class="tc3"><?php echo $user_title ?></td>
    771. 

  771. 					<td class="tc4"><?php echo forum_number_format($user_data['num_posts']) ?></td>
    772. 

  772. 					<td class="tc5"><?php echo ($user_data['admin_note'] != '') ? pun_htmlspecialchars($user_data['admin_note']) : '&#160;' ?></td>
    773. 

  773. 					<td class="tcr"><?php echo $actions ?></td>
    774. 

  774. <?php if ($can_action): ?>                    <td class="tcmod"><input type="checkbox" name="users[<?php echo $user_data['id'] ?>]" value="1" /></td>
    775. 

  775. <?php endif; ?>
    776. 

  776. 				</tr>
    777. 

  777. <?php
    778. 

  778. 

  779. 		}
    780. 

  780. 	}
    781. 

  781. 	else
    782. 

  782. 		echo "\t\t\t\t".'<tr><td class="tcl" colspan="6">'.$lang_admin_users['No match'].'</td></tr>'."\n";
    783. 

  783. 

  784. ?>
    785. 

  785. 			</tbody>
    786. 

  786. 			</table>
    787. 

  787. 		</div>
    788. 

  788. 	</div>
    789. 

  789. </div>
    790. 

  790. 

  791. <div class="linksb">
    792. 

  792. 	<div class="inbox crumbsplus">
    793. 

  793. 		<div class="pagepost">
    794. 

  794. 			<p class="pagelink"><?php echo $paging_links ?></p>
    795. 

  795. <?php if ($can_action): ?>            <p class="conr modbuttons"><a href="#" onclick="return select_checkboxes('search-users-form', this, '<?php echo $lang_admin_users['Unselect all'] ?>')"><?php echo $lang_admin_users['Select all'] ?></a> <?php if ($can_ban) : ?><input type="submit" name="ban_users" value="<?php echo $lang_admin_users['Ban'] ?>" /><?php endif; if ($can_delete) : ?><input type="submit" name="delete_users" value="<?php echo $lang_admin_users['Delete'] ?>" /><?php endif; if ($can_move) : ?><input type="submit" name="move_users" value="<?php echo $lang_admin_users['Change group'] ?>" /><?php endif; ?></p>
    796. 

  796. <?php endif; ?>
    797. 

  797. 

  798. 		</div>
    799. 

  799. 		<ul class="crumbs">
    800. 

  800. 			<li><a href="admin_index.php"><?php echo $lang_admin_common['Admin'].' '.$lang_admin_common['Index'] ?></a></li>
    801. 

  801. 			<li><span>»&#160;</span><a href="admin_users.php"><?php echo $lang_admin_common['Users'] ?></a></li>
    802. 

  802. 			<li><span>»&#160;</span><strong><?php echo $lang_admin_users['Results head'] ?></strong></li>
    803. 

  803. 		</ul>
    804. 

  804. 		<div class="clearer"></div>
    805. 

  805. 	</div>
    806. 

  806. </div>
    807. 

  807. </form>
    808. 

  808. <?php
    809. 

  809. 

  810. 	require PUN_ROOT.'footer.php';
    811. 

  811. }
    812. 

  812. 

  813. 

  814. else
    815. 

  815. {
    816. 

  816. 	$page_title = array(pun_htmlspecialchars($pun_config['o_board_title']), $lang_admin_common['Admin'], $lang_admin_common['Users']);
    817. 

  817. 	$focus_element = array('find_user', 'form[username]');
    818. 

  818. 	define('PUN_ACTIVE_PAGE', 'admin');
    819. 

  819. 	require PUN_ROOT.'header.php';
    820. 

  820. 

  821. 	generate_admin_menu('users');
    822. 

  822. 

  823. ?>
    824. 

  824. 	<div class="blockform">
    825. 

  825. 		<h2><span><?php echo $lang_admin_users['User search head'] ?></span></h2>
    826. 

  826. 		<div class="box">
    827. 

  827. 			<form id="find_user" method="get" action="admin_users.php">
    828. 

  828. 				<p class="submittop"><input type="submit" name="find_user" value="<?php echo $lang_admin_users['Submit search'] ?>" tabindex="1" /></p>
    829. 

  829. 				<div class="inform">
    830. 

  830. 					<fieldset>
    831. 

  831. 						<legend><?php echo $lang_admin_users['User search subhead'] ?></legend>
    832. 

  832. 						<div class="infldset">
    833. 

  833. 							<p><?php echo $lang_admin_users['User search info'] ?></p>
    834. 

  834. 							<table class="aligntop" cellspacing="0">
    835. 

  835. 								<tr>
    836. 

  836. 									<th scope="row"><?php echo $lang_admin_users['Username label'] ?></th>
    837. 

  837. 									<td><input type="text" name="form[username]" size="25" maxlength="25" tabindex="2" /></td>
    838. 

  838. 								</tr>
    839. 

  839. 								<tr>
    840. 

  840. 									<th scope="row"><?php echo $lang_admin_users['E-mail address label'] ?></th>
    841. 

  841. 									<td><input type="text" name="form[email]" size="30" maxlength="80" tabindex="3" /></td>
    842. 

  842. 								</tr>
    843. 

  843. 								<tr>
    844. 

  844. 									<th scope="row"><?php echo $lang_admin_users['Title label'] ?></th>
    845. 

  845. 									<td><input type="text" name="form[title]" size="30" maxlength="50" tabindex="4" /></td>
    846. 

  846. 								</tr>
    847. 

  847. 								<tr>
    848. 

  848. 									<th scope="row"><?php echo $lang_admin_users['Real name label'] ?></th>
    849. 

  849. 									<td><input type="text" name="form[realname]" size="30" maxlength="40" tabindex="5" /></td>
    850. 

  850. 								</tr>
    851. 

  851. 								<tr>
    852. 

  852. 									<th scope="row"><?php echo $lang_admin_users['Website label'] ?></th>
    853. 

  853. 									<td><input type="text" name="form[url]" size="35" maxlength="100" tabindex="6" /></td>
    854. 

  854. 								</tr>
    855. 

  855. 								<tr>
    856. 

  856. 									<th scope="row"><?php echo $lang_admin_users['Jabber label'] ?></th>
    857. 

  857. 									<td><input type="text" name="form[jabber]" size="30" maxlength="75" tabindex="7" /></td>
    858. 

  858. 								</tr>
    859. 

  859. 								<tr>
    860. 

  860. 									<th scope="row"><?php echo $lang_admin_users['ICQ label'] ?></th>
    861. 

  861. 									<td><input type="text" name="form[icq]" size="12" maxlength="12" tabindex="8" /></td>
    862. 

  862. 								</tr>
    863. 

  863. 								<tr>
    864. 

  864. 									<th scope="row"><?php echo $lang_admin_users['MSN label'] ?></th>
    865. 

  865. 									<td><input type="text" name="form[msn]" size="30" maxlength="50" tabindex="9" /></td>
    866. 

  866. 								</tr>
    867. 

  867. 								<tr>
    868. 

  868. 									<th scope="row"><?php echo $lang_admin_users['AOL label'] ?></th>
    869. 

  869. 									<td><input type="text" name="form[aim]" size="20" maxlength="20" tabindex="10" /></td>
    870. 

  870. 								</tr>
    871. 

  871. 								<tr>
    872. 

  872. 									<th scope="row"><?php echo $lang_admin_users['Yahoo label'] ?></th>
    873. 

  873. 									<td><input type="text" name="form[yahoo]" size="20" maxlength="20" tabindex="11" /></td>
    874. 

  874. 								</tr>
    875. 

  875. 								<tr>
    876. 

  876. 									<th scope="row"><?php echo $lang_admin_users['Location label'] ?></th>
    877. 

  877. 									<td><input type="text" name="form[location]" size="30" maxlength="30" tabindex="12" /></td>
    878. 

  878. 								</tr>
    879. 

  879. 								<tr>
    880. 

  880. 									<th scope="row"><?php echo $lang_admin_users['Signature label'] ?></th>
    881. 

  881. 									<td><input type="text" name="form[signature]" size="35" maxlength="512" tabindex="13" /></td>
    882. 

  882. 								</tr>
    883. 

  883. 								<tr>
    884. 

  884. 									<th scope="row"><?php echo $lang_admin_users['Admin note label'] ?></th>
    885. 

  885. 									<td><input type="text" name="form[admin_note]" size="30" maxlength="30" tabindex="14" /></td>
    886. 

  886. 								</tr>
    887. 

  887. 								<tr>
    888. 

  888. 									<th scope="row"><?php echo $lang_admin_users['Posts more than label'] ?></th>
    889. 

  889. 									<td><input type="text" name="posts_greater" size="5" maxlength="8" tabindex="15" /></td>
    890. 

  890. 								</tr>
    891. 

  891. 								<tr>
    892. 

  892. 									<th scope="row"><?php echo $lang_admin_users['Posts less than label'] ?></th>
    893. 

  893. 									<td><input type="text" name="posts_less" size="5" maxlength="8" tabindex="16" /></td>
    894. 

  894. 								</tr>
    895. 

  895. 								<tr>
    896. 

  896. 									<th scope="row"><?php echo $lang_admin_users['Last post after label'] ?></th>
    897. 

  897. 									<td><input type="text" name="last_post_after" size="24" maxlength="19" tabindex="17" />
    898. 

  898. 									<span><?php echo $lang_admin_users['Date help'] ?></span></td>
    899. 

  899. 								</tr>
    900. 

  900. 								<tr>
    901. 

  901. 									<th scope="row"><?php echo $lang_admin_users['Last post before label'] ?></th>
    902. 

  902. 									<td><input type="text" name="last_post_before" size="24" maxlength="19" tabindex="18" />
    903. 

  903. 									<span><?php echo $lang_admin_users['Date help'] ?></span></td>
    904. 

  904. 								</tr>
    905. 

  905. 								<tr>
    906. 

  906. 									<th scope="row"><?php echo $lang_admin_users['Registered after label'] ?></th>
    907. 

  907. 									<td><input type="text" name="registered_after" size="24" maxlength="19" tabindex="19" />
    908. 

  908. 									<span><?php echo $lang_admin_users['Date help'] ?></span></td>
    909. 

  909. 								</tr>
    910. 

  910. 								<tr>
    911. 

  911. 									<th scope="row"><?php echo $lang_admin_users['Registered before label'] ?></th>
    912. 

  912. 									<td><input type="text" name="registered_before" size="24" maxlength="19" tabindex="20" />
    913. 

  913. 									<span><?php echo $lang_admin_users['Date help'] ?></span></td>
    914. 

  914. 								</tr>
    915. 

  915. 								<tr>
    916. 

  916. 									<th scope="row"><?php echo $lang_admin_users['Order by label'] ?></th>
    917. 

  917. 									<td>
    918. 

  918. 										<select name="order_by" tabindex="21">
    919. 

  919. 											<option value="username" selected="selected"><?php echo $lang_admin_users['Order by username'] ?></option>
    920. 

  920. 											<option value="email"><?php echo $lang_admin_users['Order by e-mail'] ?></option>
    921. 

  921. 											<option value="num_posts"><?php echo $lang_admin_users['Order by posts'] ?></option>
    922. 

  922. 											<option value="last_post"><?php echo $lang_admin_users['Order by last post'] ?></option>
    923. 

  923. 											<option value="registered"><?php echo $lang_admin_users['Order by registered'] ?></option>
    924. 

  924. 										</select>&#160;&#160;&#160;<select name="direction" tabindex="22">
    925. 

  925. 											<option value="ASC" selected="selected"><?php echo $lang_admin_users['Ascending'] ?></option>
    926. 

  926. 											<option value="DESC"><?php echo $lang_admin_users['Descending'] ?></option>
    927. 

  927. 										</select>
    928. 

  928. 									</td>
    929. 

  929. 								</tr>
    930. 

  930. 								<tr>
    931. 

  931. 									<th scope="row"><?php echo $lang_admin_users['User group label'] ?></th>
    932. 

  932. 									<td>
    933. 

  933. 										<select name="user_group" tabindex="23">
    934. 

  934. 											<option value="-1" selected="selected"><?php echo $lang_admin_users['All groups'] ?></option>
    935. 

  935. 											<option value="0"><?php echo $lang_admin_users['Unverified users'] ?></option>
    936. 

  936. <?php
    937. 

  937. 

  938. 	$result = $db->query('SELECT g_id, g_title FROM '.$db->prefix.'groups WHERE g_id!='.PUN_GUEST.' ORDER BY g_title') or error('Unable to fetch user group list', __FILE__, __LINE__, $db->error());
    939. 

  939. 

  940. 	while ($cur_group = $db->fetch_assoc($result))
    941. 

  941. 		echo "\t\t\t\t\t\t\t\t\t\t\t".'<option value="'.$cur_group['g_id'].'">'.pun_htmlspecialchars($cur_group['g_title']).'</option>'."\n";
    942. 

  942. 

  943. ?>
    944. 

  944. 										</select>
    945. 

  945. 									</td>
    946. 

  946. 								</tr>
    947. 

  947. 							</table>
    948. 

  948. 						</div>
    949. 

  949. 					</fieldset>
    950. 

  950. 				</div>
    951. 

  951. 				<p class="submitend"><input type="submit" name="find_user" value="<?php echo $lang_admin_users['Submit search'] ?>" tabindex="25" /></p>
    952. 

  952. 			</form>
    953. 

  953. 		</div>
    954. 

  954. 

  955. 		<h2 class="block2"><span><?php echo $lang_admin_users['IP search head'] ?></span></h2>
    956. 

  956. 		<div class="box">
    957. 

  957. 			<form method="get" action="admin_users.php">
    958. 

  958. 				<div class="inform">
    959. 

  959. 					<fieldset>
    960. 

  960. 						<legend><?php echo $lang_admin_users['IP search subhead'] ?></legend>
    961. 

  961. 						<div class="infldset">
    962. 

  962. 							<table class="aligntop" cellspacing="0">
    963. 

  963. 								<tr>
    964. 

  964. 									<th scope="row"><?php echo $lang_admin_users['IP address label'] ?><div><input type="submit" value="<?php echo $lang_admin_users['Find IP address'] ?>" tabindex="26" /></div></th>
    965. 

  965. 									<td><input type="text" name="show_users" size="18" maxlength="15" tabindex="24" />
    966. 

  966. 									<span><?php echo $lang_admin_users['IP address help'] ?></span></td>
    967. 

  967. 								</tr>
    968. 

  968. 							</table>
    969. 

  969. 						</div>
    970. 

  970. 					</fieldset>
    971. 

  971. 				</div>
    972. 

  972. 			</form>
    973. 

  973. 		</div>
    974. 

  974. 	</div>
    975. 

  975. 	<div class="clearer"></div>
    976. 

  976. </div>
    977. 

  977. <?php
    978. 

  978. 

  979. 	require PUN_ROOT.'footer.php';
    980. 

  980. }
    981. 

  981.