PageRenderTime 56ms CodeModel.GetById 15ms RepoModel.GetById 0ms app.codeStats 1ms

/admin_users.php

https://github.com/gencer/fluxbb
PHP | 1318 lines | 1017 code | 244 blank | 57 comment | 141 complexity | f708547d46fabc1e24ea9b49be9a75fe MD5 | raw file
Possible License(s): GPL-2.0 
    

  1. <?php
    2. 

  2. 

  3. /**
    4. 

  4.  * Copyright (C) 2008-2012 FluxBB
    5. 

  5.  * based on code by Rickard Andersson copyright (C) 2002-2008 PunBB
    6. 

  6.  * License: http://www.gnu.org/licenses/gpl.html GPL version 2 or higher
    7. 

  7.  */
    8. 

  8. 

  9. // Tell header.php to use the admin template
    10. 

  10. define('PUN_ADMIN_CONSOLE', 1);
    11. 

  11. 

  12. define('PUN_ROOT', dirname(__FILE__).'/');
    13. 

  13. require PUN_ROOT.'include/common.php';
    14. 

  14. require PUN_ROOT.'include/common_admin.php';
    15. 

  15. 

  16. 

  17. if (!$pun_user['is_admmod'])
    18. 

  18. 	message($lang->t('No permission'));
    19. 

  19. 

  20. // Load the admin_users.php language file
    21. 

  21. $lang->load('admin_users');
    22. 

  22. 

  23. // Show IP statistics for a certain user ID
    24. 

  24. if (isset($_GET['ip_stats']))
    25. 

  25. {
    26. 

  26. 	$ip_stats = intval($_GET['ip_stats']);
    27. 

  27. 	if ($ip_stats < 1)
    28. 

  28. 		message($lang->t('Bad request'));
    29. 

  29. 

  30. 	// Fetch ip count: TODO: This query is horrible - why do we fetch all the data just to count it? We should use something like
    31. 

  31. 	// SELECT COUNT(DISTINCT poster_ip) FROM posts WHERE poster_id = :poster_id - though PostgreSQL doesn't seem to support that :(
    32. 

  32. 	$query = $db->select(array('poster_ip' => 'p.poster_ip', 'last_used' => 'MAX(p.posted) AS last_used'), 'posts AS p');
    33. 

  33. 	$query->where = 'p.poster_id = :poster_id';
    34. 

  34. 	$query->group = array('poster_ip' => 'p.poster_ip');
    35. 

  35. 

  36. 	$params = array(':poster_id' => $ip_stats);
    37. 

  37. 

  38. 	$result = $query->run($params);
    39. 

  39. 	$num_ips = count($result);
    40. 

  40. 	unset ($result, $query, $params);
    41. 

  41. 

  42. 	// Determine the ip offset (based on $_GET['p'])
    43. 

  43. 	$num_pages = ceil($num_ips / 50);
    44. 

  44. 

  45. 	$p = (!isset($_GET['p']) || $_GET['p'] <= 1 || $_GET['p'] > $num_pages) ? 1 : intval($_GET['p']);
    46. 

  46. 	$start_from = 50 * ($p - 1);
    47. 

  47. 

  48. 	// Generate paging links
    49. 

  49. 	$paging_links = '<span class="pages-label">'.$lang->t('Pages').' </span>'.paginate($num_pages, $p, 'admin_users.php?ip_stats='.$ip_stats );
    50. 

  50. 

  51. 	$page_title = array(pun_htmlspecialchars($pun_config['o_board_title']), $lang->t('Admin'), $lang->t('Users'), $lang->t('Results head'));
    52. 

  52. 	define('PUN_ACTIVE_PAGE', 'admin');
    53. 

  53. 	require PUN_ROOT.'header.php';
    54. 

  54. 

  55. ?>
    56. 

  56. <div class="linkst">
    57. 

  57. 	<div class="inbox crumbsplus">
    58. 

  58. 		<ul class="crumbs">
    59. 

  59. 			<li><a href="admin_index.php"><?php echo $lang->t('Admin').' '.$lang->t('Index') ?></a></li>
    60. 

  60. 			<li><span>»&#160;</span><a href="admin_users.php"><?php echo $lang->t('Users') ?></a></li>
    61. 

  61. 			<li><span>»&#160;</span><strong><?php echo $lang->t('Results head') ?></strong></li>
    62. 

  62. 		</ul>
    63. 

  63. 		<div class="pagepost">
    64. 

  64. 			<p class="pagelink"><?php echo $paging_links ?></p>
    65. 

  65. 		</div>
    66. 

  66. 		<div class="clearer"></div>
    67. 

  67. 	</div>
    68. 

  68. </div>
    69. 

  69. 

  70. <div id="users1" class="blocktable">
    71. 

  71. 	<h2><span><?php echo $lang->t('Results head') ?></span></h2>
    72. 

  72. 	<div class="box">
    73. 

  73. 		<div class="inbox">
    74. 

  74. 			<table cellspacing="0">
    75. 

  75. 			<thead>
    76. 

  76. 				<tr>
    77. 

  77. 					<th class="tcl" scope="col"><?php echo $lang->t('Results IP address head') ?></th>
    78. 

  78. 					<th class="tc2" scope="col"><?php echo $lang->t('Results last used head') ?></th>
    79. 

  79. 					<th class="tc3" scope="col"><?php echo $lang->t('Results times found head') ?></th>
    80. 

  80. 					<th class="tcr" scope="col"><?php echo $lang->t('Results action head') ?></th>
    81. 

  81. 				</tr>
    82. 

  82. 			</thead>
    83. 

  83. 			<tbody>
    84. 

  84. <?php
    85. 

  85. 

  86. 	$query = $db->select(array('poster_ip' => 'p.poster_ip', 'last_used' => 'MAX(p.posted) AS last_used', 'used_times' => 'COUNT(p.id) AS used_times'), 'posts AS p');
    87. 

  87. 	$query->where = 'p.poster_id = :poster_id';
    88. 

  88. 	$query->group = array('poster_ip' => 'p.poster_ip');
    89. 

  89. 	$query->order = array('last_used' => 'last_used DESC');
    90. 

  90. 	$query->offset = $start_from;
    91. 

  91. 	$query->limit = 50;
    92. 

  92. 

  93. 	$params = array(':poster_id' => $ip_stats);
    94. 

  94. 

  95. 	$result = $query->run($params);
    96. 

  96. 	if (!empty($result))
    97. 

  97. 	{
    98. 

  98. 		foreach ($result as $cur_ip)
    99. 

  99. 		{
    100. 

  100. 

  101. ?>
    102. 

  102. 				<tr>
    103. 

  103. 					<td class="tcl"><a href="moderate.php?get_host=<?php echo $cur_ip['poster_ip'] ?>"><?php echo $cur_ip['poster_ip'] ?></a></td>
    104. 

  104. 					<td class="tc2"><?php echo format_time($cur_ip['last_used']) ?></td>
    105. 

  105. 					<td class="tc3"><?php echo $cur_ip['used_times'] ?></td>
    106. 

  106. 					<td class="tcr"><a href="admin_users.php?show_users=<?php echo $cur_ip['poster_ip'] ?>"><?php echo $lang->t('Results find more link') ?></a></td>
    107. 

  107. 				</tr>
    108. 

  108. <?php
    109. 

  109. 

  110. 		}
    111. 

  111. 	}
    112. 

  112. 	else
    113. 

  113. 		echo "\t\t\t\t".'<tr><td class="tcl" colspan="4">'.$lang->t('Results no posts found').'</td></tr>'."\n";
    114. 

  114. 

  115. 	unset ($result, $query, $params);
    116. 

  116. 

  117. ?>
    118. 

  118. 			</tbody>
    119. 

  119. 			</table>
    120. 

  120. 		</div>
    121. 

  121. 	</div>
    122. 

  122. </div>
    123. 

  123. 

  124. <div class="linksb">
    125. 

  125. 	<div class="inbox crumbsplus">
    126. 

  126. 		<div class="pagepost">
    127. 

  127. 			<p class="pagelink"><?php echo $paging_links ?></p>
    128. 

  128. 		</div>
    129. 

  129. 		<ul class="crumbs">
    130. 

  130. 			<li><a href="admin_index.php"><?php echo $lang->t('Admin').' '.$lang->t('Index') ?></a></li>
    131. 

  131. 			<li><span>»&#160;</span><a href="admin_users.php"><?php echo $lang->t('Users') ?></a></li>
    132. 

  132. 			<li><span>»&#160;</span><strong><?php echo $lang->t('Results head') ?></strong></li>
    133. 

  133. 		</ul>
    134. 

  134. 		<div class="clearer"></div>
    135. 

  135. 	</div>
    136. 

  136. </div>
    137. 

  137. <?php
    138. 

  138. 

  139. 	require PUN_ROOT.'footer.php';
    140. 

  140. }
    141. 

  141. 

  142. 

  143. if (isset($_GET['show_users']))
    144. 

  144. {
    145. 

  145. 	$ip = trim($_GET['show_users']);
    146. 

  146. 

  147. 	if (!@preg_match('%^[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}$%', $ip) && !@preg_match('%^((([0-9A-Fa-f]{1,4}:){7}[0-9A-Fa-f]{1,4})|(([0-9A-Fa-f]{1,4}:){6}:[0-9A-Fa-f]{1,4})|(([0-9A-Fa-f]{1,4}:){5}:([0-9A-Fa-f]{1,4}:)?[0-9A-Fa-f]{1,4})|(([0-9A-Fa-f]{1,4}:){4}:([0-9A-Fa-f]{1,4}:){0,2}[0-9A-Fa-f]{1,4})|(([0-9A-Fa-f]{1,4}:){3}:([0-9A-Fa-f]{1,4}:){0,3}[0-9A-Fa-f]{1,4})|(([0-9A-Fa-f]{1,4}:){2}:([0-9A-Fa-f]{1,4}:){0,4}[0-9A-Fa-f]{1,4})|(([0-9A-Fa-f]{1,4}:){6}((\b((25[0-5])|(1\d{2})|(2[0-4]\d)|(\d{1,2}))\b)\.){3}(\b((25[0-5])|(1\d{2})|(2[0-4]\d)|(\d{1,2}))\b))|(([0-9A-Fa-f]{1,4}:){0,5}:((\b((25[0-5])|(1\d{2})|(2[0-4]\d)|(\d{1,2}))\b)\.){3}(\b((25[0-5])|(1\d{2})|(2[0-4]\d)|(\d{1,2}))\b))|(::([0-9A-Fa-f]{1,4}:){0,5}((\b((25[0-5])|(1\d{2})|(2[0-4]\d)|(\d{1,2}))\b)\.){3}(\b((25[0-5])|(1\d{2})|(2[0-4]\d)|(\d{1,2}))\b))|([0-9A-Fa-f]{1,4}::([0-9A-Fa-f]{1,4}:){0,5}[0-9A-Fa-f]{1,4})|(::([0-9A-Fa-f]{1,4}:){0,6}[0-9A-Fa-f]{1,4})|(([0-9A-Fa-f]{1,4}:){1,7}:))$%', $ip))
    148. 

  148. 		message($lang->t('Bad IP message'));
    149. 

  149. 

  150. 	// Fetch user count: TODO: Again, we really shouldn't fetch all the data just to count it...
    151. 

  151. 	$query = $db->select(array('poster_id' => 'p.poster_id', 'poster' => 'p.poster'), 'posts AS p', true);
    152. 

  152. 	$query->where = 'poster_ip = :poster_ip';
    153. 

  153. 

  154. 	$params = array(':poster_ip' => $ip);
    155. 

  155. 	$result = $query->run($params);
    156. 

  156. 

  157. 	$num_users = count($result);
    158. 

  158. 	unset ($result, $query, $params);
    159. 

  159. 

  160. 	// Determine the user offset (based on $_GET['p'])
    161. 

  161. 	$num_pages = ceil($num_users / 50);
    162. 

  162. 

  163. 	$p = (!isset($_GET['p']) || $_GET['p'] <= 1 || $_GET['p'] > $num_pages) ? 1 : intval($_GET['p']);
    164. 

  164. 	$start_from = 50 * ($p - 1);
    165. 

  165. 

  166. 	// Generate paging links
    167. 

  167. 	$paging_links = '<span class="pages-label">'.$lang->t('Pages').' </span>'.paginate($num_pages, $p, 'admin_users.php?show_users='.$ip);
    168. 

  168. 

  169. 	$page_title = array(pun_htmlspecialchars($pun_config['o_board_title']), $lang->t('Admin'), $lang->t('Users'), $lang->t('Results head'));
    170. 

  170. 	define('PUN_ACTIVE_PAGE', 'admin');
    171. 

  171. 	require PUN_ROOT.'header.php';
    172. 

  172. 

  173. ?>
    174. 

  174. <div class="linkst">
    175. 

  175. 	<div class="inbox crumbsplus">
    176. 

  176. 		<ul class="crumbs">
    177. 

  177. 			<li><a href="admin_index.php"><?php echo $lang->t('Admin').' '.$lang->t('Index') ?></a></li>
    178. 

  178. 			<li><span>»&#160;</span><a href="admin_users.php"><?php echo $lang->t('Users') ?></a></li>
    179. 

  179. 			<li><span>»&#160;</span><strong><?php echo $lang->t('Results head') ?></strong></li>
    180. 

  180. 		</ul>
    181. 

  181. 		<div class="pagepost">
    182. 

  182. 			<p class="pagelink"><?php echo $paging_links ?></p>
    183. 

  183. 		</div>
    184. 

  184. 		<div class="clearer"></div>
    185. 

  185. 	</div>
    186. 

  186. </div>
    187. 

  187. 

  188. <div id="users2" class="blocktable">
    189. 

  189. 	<h2><span><?php echo $lang->t('Results head') ?></span></h2>
    190. 

  190. 	<div class="box">
    191. 

  191. 		<div class="inbox">
    192. 

  192. 			<table cellspacing="0">
    193. 

  193. 			<thead>
    194. 

  194. 				<tr>
    195. 

  195. 					<th class="tcl" scope="col"><?php echo $lang->t('Results username head') ?></th>
    196. 

  196. 					<th class="tc2" scope="col"><?php echo $lang->t('Results email head') ?></th>
    197. 

  197. 					<th class="tc3" scope="col"><?php echo $lang->t('Results title head') ?></th>
    198. 

  198. 					<th class="tc4" scope="col"><?php echo $lang->t('Results posts head') ?></th>
    199. 

  199. 					<th class="tc5" scope="col"><?php echo $lang->t('Results admin note head') ?></th>
    200. 

  200. 					<th class="tcr" scope="col"><?php echo $lang->t('Results actions head') ?></th>
    201. 

  201. 				</tr>
    202. 

  202. 			</thead>
    203. 

  203. 			<tbody>
    204. 

  204. <?php
    205. 

  205. 

  206. 	$query = $db->select(array('poster_id' => 'p.poster_id', 'poster' => 'p.poster'), 'posts AS p', true);
    207. 

  207. 	$query->where = 'p.poster_ip = :poster_ip';
    208. 

  208. 	$query->order = array('poster' => 'p.poster DESC');
    209. 

  209. 

  210. 	$params = array(':poster_ip' => $ip);
    211. 

  211. 

  212. 	$result = $query->run($params);
    213. 

  213. 	$num_posts = count($result);
    214. 

  214. 	unset ($query, $params);
    215. 

  215. 

  216. 	if ($num_posts)
    217. 

  217. 	{
    218. 

  218. 		$query = $db->select(array('id' => 'u.id', 'username' => 'u.username', 'email' => 'u.email', 'title' => 'u.title', 'num_posts' => 'u.num_posts', 'admin_note' => 'u.admin_note', 'g_id' => 'g.g_id', 'g_user_title' => 'g.g_user_title'), 'users AS u');
    219. 

  219. 		$query->innerJoin('g', 'groups AS g', 'g.g_id = u.group_id');
    220. 

  220. 		$query->where = 'u.id > 1 AND u.id = :poster_id';
    221. 

  221. 

  222. 		// Loop through users and print out some info
    223. 

  223. 		foreach ($result as $cur_post)
    224. 

  224. 		{
    225. 

  225. 			$poster_id = $cur_post['poster_id'];
    226. 

  226. 			$poster = $cur_post['poster'];
    227. 

  227. 

  228. 			// TODO: Do we really need a query within a query here...?
    229. 

  229. 			$params = array(':poster_id' => $poster_id);
    230. 

  230. 			$result_user = $query->run($params);
    231. 

  231. 

  232. 			if (!empty($result_user))
    233. 

  233. 			{
    234. 

  234. 				$user_data = $result_user[0];
    235. 

  235. 

  236. 				$user_title = get_title($user_data);
    237. 

  237. 

  238. 				$actions = '<a href="admin_users.php?ip_stats='.$user_data['id'].'">'.$lang->t('Results view IP link').'</a> | <a href="search.php?action=show_user_posts&amp;user_id='.$user_data['id'].'">'.$lang->t('Results show posts link').'</a>';
    239. 

  239. 

  240. ?>
    241. 

  241. 				<tr>
    242. 

  242. 					<td class="tcl"><?php echo '<a href="profile.php?id='.$user_data['id'].'">'.pun_htmlspecialchars($user_data['username']).'</a>' ?></td>
    243. 

  243. 					<td class="tc2"><a href="mailto:<?php echo $user_data['email'] ?>"><?php echo $user_data['email'] ?></a></td>
    244. 

  244. 					<td class="tc3"><?php echo $user_title ?></td>
    245. 

  245. 					<td class="tc4"><?php echo forum_number_format($user_data['num_posts']) ?></td>
    246. 

  246. 					<td class="tc5"><?php echo ($user_data['admin_note'] != '') ? pun_htmlspecialchars($user_data['admin_note']) : '&#160;' ?></td>
    247. 

  247. 					<td class="tcr"><?php echo $actions ?></td>
    248. 

  248. 				</tr>
    249. 

  249. <?php
    250. 

  250. 

  251. 			}
    252. 

  252. 			else
    253. 

  253. 			{
    254. 

  254. 

  255. ?>
    256. 

  256. 				<tr>
    257. 

  257. 					<td class="tcl"><?php echo pun_htmlspecialchars($poster) ?></td>
    258. 

  258. 					<td class="tc2">&#160;</td>
    259. 

  259. 					<td class="tc3"><?php echo $lang->t('Results guest') ?></td>
    260. 

  260. 					<td class="tc4">&#160;</td>
    261. 

  261. 					<td class="tc5">&#160;</td>
    262. 

  262. 					<td class="tcr">&#160;</td>
    263. 

  263. 				</tr>
    264. 

  264. <?php
    265. 

  265. 

  266. 			}
    267. 

  267. 		}
    268. 

  268. 

  269. 		unset ($query, $params, $result_user);
    270. 

  270. 	}
    271. 

  271. 	else
    272. 

  272. 		echo "\t\t\t\t".'<tr><td class="tcl" colspan="6">'.$lang->t('Results no IP found').'</td></tr>'."\n";
    273. 

  273. 

  274. 	unset ($result);
    275. 

  275. 

  276. ?>
    277. 

  277. 			</tbody>
    278. 

  278. 			</table>
    279. 

  279. 		</div>
    280. 

  280. 	</div>
    281. 

  281. </div>
    282. 

  282. 

  283. <div class="linksb">
    284. 

  284. 	<div class="inbox crumbsplus">
    285. 

  285. 		<div class="pagepost">
    286. 

  286. 			<p class="pagelink"><?php echo $paging_links ?></p>
    287. 

  287. 		</div>
    288. 

  288. 		<ul class="crumbs">
    289. 

  289. 			<li><a href="admin_index.php"><?php echo $lang->t('Admin').' '.$lang->t('Index') ?></a></li>
    290. 

  290. 			<li><span>»&#160;</span><a href="admin_users.php"><?php echo $lang->t('Users') ?></a></li>
    291. 

  291. 			<li><span>»&#160;</span><strong><?php echo $lang->t('Results head') ?></strong></li>
    292. 

  292. 		</ul>
    293. 

  293. 		<div class="clearer"></div>
    294. 

  294. 	</div>
    295. 

  295. </div>
    296. 

  296. <?php
    297. 

  297. 	require PUN_ROOT.'footer.php';
    298. 

  298. }
    299. 

  299. 

  300. 

  301. // Move multiple users to other user groups
    302. 

  302. else if (isset($_POST['move_users']) || isset($_POST['move_users_comply']))
    303. 

  303. {
    304. 

  304. 	if ($pun_user['g_id'] > PUN_ADMIN)
    305. 

  305. 		message($lang->t('No permission'));
    306. 

  306. 

  307. 	confirm_referrer('admin_users.php');
    308. 

  308. 

  309. 	if (isset($_POST['users']))
    310. 

  310. 	{
    311. 

  311. 		$user_ids = is_array($_POST['users']) ? array_keys($_POST['users']) : explode(',', $_POST['users']);
    312. 

  312. 		$user_ids = array_map('intval', $user_ids);
    313. 

  313. 

  314. 		// Delete invalid IDs
    315. 

  315. 		$user_ids = array_diff($user_ids, array(0, 1));
    316. 

  316. 	}
    317. 

  317. 	else
    318. 

  318. 		$user_ids = array();
    319. 

  319. 

  320. 	if (empty($user_ids))
    321. 

  321. 		message($lang->t('No users selected'));
    322. 

  322. 

  323. 	// Are we trying to batch move any admins?
    324. 

  324. 	$query = $db->select(array('count' => 'COUNT(u.*) AS count'), 'users AS u');
    325. 

  325. 	$query->where = 'u.id IN :user_ids AND u.group_id = :group_id';
    326. 

  326. 

  327. 	$params = array(':user_ids' => $user_ids, ':group_id' => PUN_ADMIN);
    328. 

  328. 

  329. 	$result = $query->run($params);
    330. 

  330. 	if ($result[0]['count'] > 0)
    331. 

  331. 		message($lang->t('No move admins message'));
    332. 

  332. 

  333. 	unset($query, $params, $result);
    334. 

  334. 

  335. 	// Fetch all user groups
    336. 

  336. 	$query = $db->select(array('g_id' => 'g.g_id', 'g_title' => 'g.g_title'), 'groups AS g');
    337. 

  337. 	$query->where = 'g.g_id NOT IN :group_ids';
    338. 

  338. 	$query->order = array('g_title' => 'g.g_title ASC');
    339. 

  339. 

  340. 	$params = array(':group_ids' => array(PUN_GUEST, PUN_ADMIN));
    341. 

  341. 

  342. 	$result = $query->run($params);
    343. 

  343. 	$all_groups = array();
    344. 

  344. 	foreach ($result as $row)
    345. 

  345. 		$all_groups[$row['g_id']] = $row['g_title'];
    346. 

  346. 	unset($query, $params, $result);
    347. 

  347. 

  348. 	if (isset($_POST['move_users_comply']))
    349. 

  349. 	{
    350. 

  350. 		$new_group = isset($_POST['new_group']) && isset($all_groups[$_POST['new_group']]) ? $_POST['new_group'] : message($lang->t('Invalid group message'));
    351. 

  351. 

  352. 		// Is the new group a moderator group?
    353. 

  353. 		$query = $db->select(array('g_moderator' => 'g.g_moderator'), 'groups AS g');
    354. 

  354. 		$query->where = 'g.g_id = :group_id';
    355. 

  355. 

  356. 		$params = array(':group_id' => $new_group);
    357. 

  357. 

  358. 		$result = $query->run($params);
    359. 

  359. 		$new_group_mod = $result[0]['g_moderator'];
    360. 

  360. 		unset ($result, $query, $params);
    361. 

  361. 

  362. 		// Fetch user groups
    363. 

  363. 		$user_groups = array();
    364. 

  364. 		$query = $db->select(array('id' => 'u.id', 'group_id' => 'u.group_id'), 'users AS u');
    365. 

  365. 		$query->where = 'u.id IN :user_ids';
    366. 

  366. 

  367. 		$params = array(':user_ids' => $user_ids);
    368. 

  368. 

  369. 		$result = $query->run($params);
    370. 

  370. 		foreach ($result as $cur_user)
    371. 

  371. 		{
    372. 

  372. 			if (!isset($user_groups[$cur_user['group_id']]))
    373. 

  373. 				$user_groups[$cur_user['group_id']] = array();
    374. 

  374. 

  375. 			$user_groups[$cur_user['group_id']][] = $cur_user['id'];
    376. 

  376. 		}
    377. 

  377. 

  378. 		unset($query, $params, $result);
    379. 

  379. 

  380. 		// Are any users moderators?
    381. 

  381. 		$group_ids = array_keys($user_groups);
    382. 

  382. 		$query = $db->select(array('g_id' => 'g.g_id', 'g_moderator' => 'g.g_moderator'), 'groups AS g');
    383. 

  383. 		$query->where = 'g.g_id IN :group_ids';
    384. 

  384. 

  385. 		$params = array(':group_ids' => $group_ids);
    386. 

  386. 

  387. 		$result = $query->run($params);
    388. 

  388. 		foreach ($result as $cur_group)
    389. 

  389. 		{
    390. 

  390. 			if ($cur_group['g_moderator'] == '0')
    391. 

  391. 				unset($user_groups[$cur_group['g_id']]);
    392. 

  392. 		}
    393. 

  393. 		unset($query, $params, $result);
    394. 

  394. 

  395. 		if (!empty($user_groups) && $new_group != PUN_ADMIN && $new_group_mod != '1')
    396. 

  396. 		{
    397. 

  397. 			// Fetch forum list and clean up their moderator list
    398. 

  398. 			$query = $db->select(array('id' => 'f.id', 'moderators' => 'f.moderators'), 'forums AS f');
    399. 

  399. 			$params = array();
    400. 

  400. 

  401. 			$result = $query->run($params);
    402. 

  402. 			unset ($query, $params);
    403. 

  403. 

  404. 			$update_query = $db->update(array('moderators' => ':moderators'), 'forums');
    405. 

  405. 			$update_query->where = 'id = :forum_id';
    406. 

  406. 

  407. 			foreach ($result as $cur_forum)
    408. 

  408. 			{
    409. 

  409. 				$cur_moderators = ($cur_forum['moderators'] != '') ? unserialize($cur_forum['moderators']) : array();
    410. 

  410. 

  411. 				foreach ($user_groups as $group_users)
    412. 

  412. 					$cur_moderators = array_diff($cur_moderators, $group_users);
    413. 

  413. 

  414. 				$params = array(':moderators' => empty($cur_moderators) ? null : serialize($cur_moderators), ':forum_id' => $cur_forum['id']);
    415. 

  415. 

  416. 				$update_query->run($params);
    417. 

  417. 				unset ($params);
    418. 

  418. 			}
    419. 

  419. 

  420. 			unset ($result, $update_query);
    421. 

  421. 		}
    422. 

  422. 

  423. 		// Change user group
    424. 

  424. 		$query = $db->update(array('group_id' => ':group_id'), 'users');
    425. 

  425. 		$query->where = 'id IN :uids';
    426. 

  426. 

  427. 		$params = array(':group_id' => $new_group, ':uids' => $user_ids);
    428. 

  428. 

  429. 		$query->run($params);
    430. 

  430. 		unset ($query, $params);
    431. 

  431. 

  432. 		redirect('admin_users.php', $lang->t('Users move redirect'));
    433. 

  433. 	}
    434. 

  434. 

  435. 	$page_title = array(pun_htmlspecialchars($pun_config['o_board_title']), $lang->t('Admin'), $lang->t('Users'), $lang->t('Move users'));
    436. 

  436. 	define('PUN_ACTIVE_PAGE', 'admin');
    437. 

  437. 	require PUN_ROOT.'header.php';
    438. 

  438. 

  439. 	generate_admin_menu('users');
    440. 

  440. 

  441. ?>
    442. 

  442. 	<div class="blockform">
    443. 

  443. 		<h2><span><?php echo $lang->t('Move users') ?></span></h2>
    444. 

  444. 		<div class="box">
    445. 

  445. 			<form name="confirm_move_users" method="post" action="admin_users.php">
    446. 

  446. 				<input type="hidden" name="users" value="<?php echo implode(',', $user_ids) ?>" />
    447. 

  447. 				<div class="inform">
    448. 

  448. 					<fieldset>
    449. 

  449. 						<legend><?php echo $lang->t('Move users subhead') ?></legend>
    450. 

  450. 						<div class="infldset">
    451. 

  451. 							<table class="aligntop" cellspacing="0">
    452. 

  452. 								<tr>
    453. 

  453. 									<th scope="row"><?php echo $lang->t('New group label') ?></th>
    454. 

  454. 									<td>
    455. 

  455. 										<select name="new_group" tabindex="1">
    456. 

  456. <?php foreach ($all_groups as $gid => $group) : ?>											<option value="<?php echo $gid ?>"><?php echo pun_htmlspecialchars($group) ?></option>
    457. 

  457. <?php endforeach; ?>
    458. 

  458. 										</select>
    459. 

  459. 										<span><?php echo $lang->t('New group help') ?></span>
    460. 

  460. 									</td>
    461. 

  461. 								</tr>
    462. 

  462. 							</table>
    463. 

  463. 						</div>
    464. 

  464. 					</fieldset>
    465. 

  465. 				</div>
    466. 

  466. 				<p class="submitend"><input type="submit" name="move_users_comply" value="<?php echo $lang->t('Save') ?>" tabindex="2" /></p>
    467. 

  467. 			</form>
    468. 

  468. 		</div>
    469. 

  469. 	</div>
    470. 

  470. 	<div class="clearer"></div>
    471. 

  471. </div>
    472. 

  472. <?php
    473. 

  473. 

  474. 	require PUN_ROOT.'footer.php';
    475. 

  475. }
    476. 

  476. 

  477. 

  478. // Delete multiple users
    479. 

  479. else if (isset($_POST['delete_users']) || isset($_POST['delete_users_comply']))
    480. 

  480. {
    481. 

  481. 	if ($pun_user['g_id'] > PUN_ADMIN)
    482. 

  482. 		message($lang->t('No permission'));
    483. 

  483. 

  484. 	confirm_referrer('admin_users.php');
    485. 

  485. 

  486. 	if (isset($_POST['users']))
    487. 

  487. 	{
    488. 

  488. 		$user_ids = is_array($_POST['users']) ? array_keys($_POST['users']) : explode(',', $_POST['users']);
    489. 

  489. 		$user_ids = array_map('intval', $user_ids);
    490. 

  490. 

  491. 		// Delete invalid IDs
    492. 

  492. 		$user_ids = array_diff($user_ids, array(0, 1));
    493. 

  493. 	}
    494. 

  494. 	else
    495. 

  495. 		$user_ids = array();
    496. 

  496. 

  497. 	if (empty($user_ids))
    498. 

  498. 		message($lang->t('No users selected'));
    499. 

  499. 

  500. 	// Are we trying to delete any admins?
    501. 

  501. 	$query = $db->select(array('count' => 'COUNT(u.*) AS count'), 'users AS u');
    502. 

  502. 	$query->where = 'u.id IN :user_ids AND group_id = :group_id';
    503. 

  503. 

  504. 	$params = array(':user_ids' => $user_ids, ':group_id' => PUN_ADMIN);
    505. 

  505. 

  506. 	$result = $query->run($params);
    507. 

  507. 	if ($result[0]['count'] > 0)
    508. 

  508. 		message($lang->t('No delete admins message'));
    509. 

  509. 	unset($query, $params, $result);
    510. 

  510. 

  511. 	if (isset($_POST['delete_users_comply']))
    512. 

  512. 	{
    513. 

  513. 		// Fetch user groups
    514. 

  514. 		$query = $db->select(array('id' => 'u.id', 'group_id' => 'u.group_id'), 'users AS u');
    515. 

  515. 		$query->where = 'u.id IN :user_ids';
    516. 

  516. 

  517. 		$params = array(':user_ids' => $user_ids);
    518. 

  518. 

  519. 		$result = $query->run($params);
    520. 

  520. 

  521. 		$user_groups = array();
    522. 

  522. 		foreach ($result as $cur_user)
    523. 

  523. 		{
    524. 

  524. 			if (!isset($user_groups[$cur_user['group_id']]))
    525. 

  525. 				$user_groups[$cur_user['group_id']] = array();
    526. 

  526. 

  527. 			$user_groups[$cur_user['group_id']][] = $cur_user['id'];
    528. 

  528. 		}
    529. 

  529. 

  530. 		unset($query, $params, $result);
    531. 

  531. 

  532. 		// Are any users moderators?
    533. 

  533. 		$group_ids = array_keys($user_groups);
    534. 

  534. 		$query = $db->select(array('g_id' => 'g.g_id', 'g_moderator' => 'g.g_moderator'), 'groups AS g');
    535. 

  535. 		$query->where = 'g.g_id IN :group_ids';
    536. 

  536. 

  537. 		$params = array(':group_ids' => $group_ids);
    538. 

  538. 

  539. 		$result = $query->run($params);
    540. 

  540. 		foreach ($result as $cur_group)
    541. 

  541. 		{
    542. 

  542. 			if ($cur_group['g_moderator'] == '0')
    543. 

  543. 				unset($user_groups[$cur_group['g_id']]);
    544. 

  544. 		}
    545. 

  545. 

  546. 		unset($query, $params, $result);
    547. 

  547. 

  548. 		// Fetch forum list and clean up their moderator list
    549. 

  549. 		$query = $db->select(array('id' => 'f.id', 'moderators' => 'f.moderators'), 'forums AS f');
    550. 

  550. 		$params = array();
    551. 

  551. 

  552. 		$result = $query->run($params);
    553. 

  553. 		unset ($query, $params);
    554. 

  554. 

  555. 		$update_query = $db->update(array('moderators' => ':moderators'), 'forums');
    556. 

  556. 		$update_query->where = 'id = :forum_id';
    557. 

  557. 

  558. 		foreach ($result as $cur_forum)
    559. 

  559. 		{
    560. 

  560. 			$cur_moderators = ($cur_forum['moderators'] != '') ? unserialize($cur_forum['moderators']) : array();
    561. 

  561. 

  562. 			foreach ($user_groups as $group_users)
    563. 

  563. 				$cur_moderators = array_diff($cur_moderators, $group_users);
    564. 

  564. 

  565. 			$params = array(':moderators' => empty($cur_moderators) ? null : serialize ($cur_moderators), ':forum_id' => $cur_forum['id']);
    566. 

  566. 

  567. 			$update_query->run($params);
    568. 

  568. 			unset ($params);
    569. 

  569. 		}
    570. 

  570. 

  571. 		unset ($result, $update_query);
    572. 

  572. 

  573. 		// Delete any subscriptions
    574. 

  574. 		$query = $db->delete('topic_subscriptions');
    575. 

  575. 		$query->where = 'user_id IN :uids';
    576. 

  576. 

  577. 		$params = array(':uids' => $user_ids);
    578. 

  578. 

  579. 		$query->run($params);
    580. 

  580. 		unset ($query, $params);
    581. 

  581. 

  582. 		$query = $db->delete('forum_subscriptions');
    583. 

  583. 		$query->where = 'user_id IN :uids';
    584. 

  584. 

  585. 		$params = array(':uids' => $user_ids);
    586. 

  586. 

  587. 		$query->run($params);
    588. 

  588. 		unset ($query, $params);
    589. 

  589. 

  590. 		// Remove them from the online list (if they happen to be logged in)
    591. 

  591. 		$query = $db->delete('online');
    592. 

  592. 		$query->where = 'user_id IN :uids';
    593. 

  593. 

  594. 		$params = array(':uids' => $user_ids);
    595. 

  595. 

  596. 		$query->run($params);
    597. 

  597. 		unset ($query, $params);
    598. 

  598. 

  599. 		// Should we delete all posts made by these users?
    600. 

  600. 		if (isset($_POST['delete_posts']))
    601. 

  601. 		{
    602. 

  602. 			require PUN_ROOT.'include/search_idx.php';
    603. 

  603. 			@set_time_limit(0);
    604. 

  604. 

  605. 			// Find all posts made by this user
    606. 

  606. 			$query = $db->select(array('id' => 'p.id', 'topic_id' => 'p.topic_id', 'forum_id' => 't.forum_id'), 'posts AS p');
    607. 

  607. 			$query->innerJoin('t', 'topics AS t', 't.id = p.topic_id');
    608. 

  608. 			$query->innerJoin('f', 'forums AS f', 'f.id = t.forum_id');
    609. 

  609. 			$query->where = 'p.poster_id IN :uids';
    610. 

  610. 

  611. 			$params = array(':uids' => $user_ids);
    612. 

  612. 			$result = $query->run($params);
    613. 

  613. 

  614. 			unset ($query, $params);
    615. 

  615. 

  616. 			if (!empty($result))
    617. 

  617. 			{
    618. 

  618. 				$query = $db->select(array('id' => 'p.id'), 'posts AS p');
    619. 

  619. 				$query->where = 'p.topic_id = :topic_id';
    620. 

  620. 				$query->order = array('posted' => 'p.posted');
    621. 

  621. 				$query->limit = '1';
    622. 

  622. 

  623. 				foreach ($result as $cur_post)
    624. 

  624. 				{
    625. 

  625. 					// Determine whether this post is the "topic post" or not
    626. 

  626. 					$params = array(':topic_id' => $cur_post['topic_id']);
    627. 

  627. 					$result2 = $query->run($params);
    628. 

  628. 

  629. 					if (isset($result2[0]['id']) && $result2[0]['id'] == $cur_post['id'])
    630. 

  630. 						delete_topic($cur_post['topic_id']);
    631. 

  631. 					else
    632. 

  632. 						delete_post($cur_post['id'], $cur_post['topic_id']);
    633. 

  633. 

  634. 					update_forum($cur_post['forum_id']);
    635. 

  635. 				}
    636. 

  636. 

  637. 				unset ($query, $params, $result2);
    638. 

  638. 			}
    639. 

  639. 

  640. 			unset ($result);
    641. 

  641. 		}
    642. 

  642. 		else
    643. 

  643. 		{
    644. 

  644. 			// Set all their posts to guest
    645. 

  645. 			$query = $db->update(array('poster_id' => '1'), 'posts');
    646. 

  646. 			$query->where = 'poster_id IN :uids';
    647. 

  647. 

  648. 			$params = array(':uids' => $user_ids);
    649. 

  649. 

  650. 			$query->run($params);
    651. 

  651. 			unset ($query, $params);
    652. 

  652. 		}
    653. 

  653. 

  654. 		// Delete the users
    655. 

  655. 		$query = $db->delete('users');
    656. 

  656. 		$query->where = 'id IN :uids';
    657. 

  657. 

  658. 		$params = array(':uids' => $user_ids);
    659. 

  659. 

  660. 		$query->run($params);
    661. 

  661. 		unset ($query, $params);
    662. 

  662. 

  663. 		// Delete user avatars
    664. 

  664. 		foreach ($user_ids as $user_id)
    665. 

  665. 			delete_avatar($user_id);
    666. 

  666. 

  667. 		// Regenerate the users info cache
    668. 

  668. 		$cache->delete('boardstats');
    669. 

  669. 

  670. 		redirect('admin_users.php', $lang->t('Users delete redirect'));
    671. 

  671. 	}
    672. 

  672. 

  673. 	$page_title = array(pun_htmlspecialchars($pun_config['o_board_title']), $lang->t('Admin'), $lang->t('Users'), $lang->t('Delete users'));
    674. 

  674. 	define('PUN_ACTIVE_PAGE', 'admin');
    675. 

  675. 	require PUN_ROOT.'header.php';
    676. 

  676. 

  677. 	generate_admin_menu('users');
    678. 

  678. 

  679. ?>
    680. 

  680. 	<div class="blockform">
    681. 

  681. 		<h2><span><?php echo $lang->t('Delete users') ?></span></h2>
    682. 

  682. 		<div class="box">
    683. 

  683. 			<form name="confirm_del_users" method="post" action="admin_users.php">
    684. 

  684. 				<input type="hidden" name="users" value="<?php echo implode(',', $user_ids) ?>" />
    685. 

  685. 				<div class="inform">
    686. 

  686. 					<fieldset>
    687. 

  687. 						<legend><?php echo $lang->t('Confirm delete users subhead') ?></legend>
    688. 

  688. 						<div class="infldset">
    689. 

  689. 							<p><?php echo $lang->t('Confirm delete users info') ?></p>
    690. 

  690. 							<div class="rbox">
    691. 

  691. 								<label><input type="checkbox" name="delete_posts" value="1" checked="checked" /><?php echo $lang->t('Delete posts') ?><br /></label>
    692. 

  692. 							</div>
    693. 

  693. 							<p class="warntext"><strong><?php echo $lang->t('Delete warning') ?></strong></p>
    694. 

  694. 						</div>
    695. 

  695. 					</fieldset>
    696. 

  696. 				</div>
    697. 

  697. 				<p class="buttons"><input type="submit" name="delete_users_comply" value="<?php echo $lang->t('Delete') ?>" /> <a href="javascript:history.go(-1)"><?php echo $lang->t('Go back') ?></a></p>
    698. 

  698. 			</form>
    699. 

  699. 		</div>
    700. 

  700. 	</div>
    701. 

  701. 	<div class="clearer"></div>
    702. 

  702. </div>
    703. 

  703. <?php
    704. 

  704. 

  705. 	require PUN_ROOT.'footer.php';
    706. 

  706. }
    707. 

  707. 

  708. 

  709. // Ban multiple users
    710. 

  710. else if (isset($_POST['ban_users']) || isset($_POST['ban_users_comply']))
    711. 

  711. {
    712. 

  712. 	if ($pun_user['g_id'] != PUN_ADMIN && ($pun_user['g_moderator'] != '1' || $pun_user['g_mod_ban_users'] == '0'))
    713. 

  713. 		message($lang->t('No permission'));
    714. 

  714. 

  715. 	confirm_referrer('admin_users.php');
    716. 

  716. 

  717. 	if (isset($_POST['users']))
    718. 

  718. 	{
    719. 

  719. 		$user_ids = is_array($_POST['users']) ? array_keys($_POST['users']) : explode(',', $_POST['users']);
    720. 

  720. 		$user_ids = array_map('intval', $user_ids);
    721. 

  721. 

  722. 		// Delete invalid IDs
    723. 

  723. 		$user_ids = array_diff($user_ids, array(0, 1));
    724. 

  724. 	}
    725. 

  725. 	else
    726. 

  726. 		$user_ids = array();
    727. 

  727. 

  728. 	if (empty($user_ids))
    729. 

  729. 		message($lang->t('No users selected'));
    730. 

  730. 

  731. 	// Are we trying to ban any admins?
    732. 

  732. 	$query = $db->select(array('count' => 'COUNT(u.id) AS count'), 'users AS u');
    733. 

  733. 	$query->where = 'u.id IN :user_ids AND u.group_id = :group_id';
    734. 

  734. 

  735. 	$params = array(':user_ids' => $user_ids, ':group_id' => PUN_ADMIN);
    736. 

  736. 

  737. 	$result = $query->run($params);
    738. 

  738. 	if ($result[0]['count'])
    739. 

  739. 		message($lang->t('No ban admins message'));
    740. 

  740. 

  741. 	unset($query, $params, $result);
    742. 

  742. 

  743. 	// Also, we cannot ban moderators
    744. 

  744. 	$query = $db->select(array('count' => 'COUNT(u.id) AS count'), 'users AS u');
    745. 

  745. 	$query->innerJoin('g', 'groups AS g', 'u.group_id = g.g_id');
    746. 

  746. 	$query->where = 'g.g_moderator = 1 AND u.id IN :user_ids';
    747. 

  747. 

  748. 	$params = array(':user_ids' => $user_ids);
    749. 

  749. 

  750. 	$result = $query->run($params);
    751. 

  751. 	if ($result[0]['count'])
    752. 

  752. 		message($lang->t('No ban mods message'));
    753. 

  753. 

  754. 	unset($query, $params, $result);
    755. 

  755. 

  756. 	if (isset($_POST['ban_users_comply']))
    757. 

  757. 	{
    758. 

  758. 		$ban_message = pun_trim($_POST['ban_message']);
    759. 

  759. 		$ban_expire = pun_trim($_POST['ban_expire']);
    760. 

  760. 		$ban_the_ip = isset($_POST['ban_the_ip']) ? intval($_POST['ban_the_ip']) : 0;
    761. 

  761. 

  762. 		if ($ban_expire != '' && $ban_expire != 'Never')
    763. 

  763. 		{
    764. 

  764. 			$ban_expire = strtotime($ban_expire.' GMT');
    765. 

  765. 

  766. 			if ($ban_expire == -1 || !$ban_expire)
    767. 

  767. 				message($lang->t('Invalid date message').' '.$lang->t('Invalid date reasons'));
    768. 

  768. 

  769. 			$diff = ($pun_user['timezone'] + $pun_user['dst']) * 3600;
    770. 

  770. 			$ban_expire -= $diff;
    771. 

  771. 

  772. 			if ($ban_expire <= time())
    773. 

  773. 				message($lang->t('Invalid date message').' '.$lang->t('Invalid date reasons'));
    774. 

  774. 		}
    775. 

  775. 		else
    776. 

  776. 			$ban_expire = 'NULL';
    777. 

  777. 

  778. 		// Fetch user information
    779. 

  779. 		$user_info = array();
    780. 

  780. 		$query = $db->select(array('id' => 'u.id', 'username' => 'u.username', 'email' => 'u.email', 'registration_ip' => 'u.registration_ip'), 'users AS u');
    781. 

  781. 		$query->where = 'u.id IN :user_ids';
    782. 

  782. 

  783. 		$params = array(':user_ids' => $user_ids);
    784. 

  784. 

  785. 		$result = $query->run($params);
    786. 

  786. 		foreach ($result as $cur_user)
    787. 

  787. 			$user_info[$cur_user['id']] = array('username' => $cur_user['username'], 'email' => $cur_user['email'], 'ip' => $cur_user['registration_ip']);
    788. 

  788. 

  789. 		unset($query, $params, $result);
    790. 

  790. 

  791. 		// Overwrite the registration IP with one from the last post (if it exists)
    792. 

  792. 		if ($ban_the_ip != 0)
    793. 

  793. 		{
    794. 

  794. 			// Fetch last post id
    795. 

  795. 			$query_pid = $db->select(array('id' => 'MAX(id) AS id'), 'posts');
    796. 

  796. 			$query_pid->where = 'poster_id IN :user_ids';
    797. 

  797. 			$query_pid->group = array('poster_id' => 'poster_id');
    798. 

  798. 

  799. 			$query = $db->select(array('poster_id' => 'p.poster_id', 'poster_ip' => 'p.poster_ip'), $db->prefix.'posts AS p');
    800. 

  800. 			$query->usePrefix = false; // Don't want prefix for innerJoin
    801. 

  801. 			$query->innerJoin('i', '('.$query_pid->compile().') AS i', 'p.id = i.id');
    802. 

  802. 

  803. 			$params = array(':user_ids' => $user_ids);
    804. 

  804. 

  805. 			$result = $query->run($params);
    806. 

  806. 			foreach ($result as $cur_address)
    807. 

  807. 				$user_info[$cur_address['poster_id']]['ip'] = $cur_address['poster_ip'];
    808. 

  808. 

  809. 			unset($query_pid, $query, $params, $result);
    810. 

  810. 		}
    811. 

  811. 

  812. 		// And insert the bans!
    813. 

  813. 		foreach ($user_ids as $user_id)
    814. 

  814. 		{
    815. 

  815. 			$ban_username = $user_info[$user_id]['username'];
    816. 

  816. 			$ban_email = $user_info[$user_id]['email'];
    817. 

  817. 			$ban_ip = ($ban_the_ip != 0) ? $user_info[$user_id]['ip'] : NULL;
    818. 

  818. 

  819. 			$query = $db->insert(array('username' => ':username', 'ip' => ':ip', 'email' => ':email', 'message' => ':message', 'expire' => ':expire', 'ban_creator' => ':user_id'), 'bans');
    820. 

  820. 			$params = array(':username' => $ban_username, ':ip' => $ban_ip, ':email' => $ban_email, ':message' => $ban_message, ':expire' => $ban_expire, ':user_id' => $pun_user['id']);
    821. 

  821. 			$query->run($params);
    822. 

  822. 			unset($query, $params);
    823. 

  823. 		}
    824. 

  824. 

  825. 		// Regenerate the bans cache
    826. 

  826. 		$cache->delete('bans');
    827. 

  827. 

  828. 		redirect('admin_users.php', $lang->t('Users banned redirect'));
    829. 

  829. 	}
    830. 

  830. 

  831. 	$page_title = array(pun_htmlspecialchars($pun_config['o_board_title']), $lang->t('Admin'), $lang->t('Bans'));
    832. 

  832. 	$focus_element = array('bans2', 'ban_message');
    833. 

  833. 	define('PUN_ACTIVE_PAGE', 'admin');
    834. 

  834. 	require PUN_ROOT.'header.php';
    835. 

  835. 

  836. 	generate_admin_menu('users');
    837. 

  837. 

  838. ?>
    839. 

  839. 	<div class="blockform">
    840. 

  840. 		<h2><span><?php echo $lang->t('Ban users') ?></span></h2>
    841. 

  841. 		<div class="box">
    842. 

  842. 			<form id="bans2" name="confirm_ban_users" method="post" action="admin_users.php">
    843. 

  843. 				<input type="hidden" name="users" value="<?php echo implode(',', $user_ids) ?>" />
    844. 

  844. 				<div class="inform">
    845. 

  845. 					<fieldset>
    846. 

  846. 						<legend><?php echo $lang->t('Message expiry subhead') ?></legend>
    847. 

  847. 						<div class="infldset">
    848. 

  848. 							<table class="aligntop" cellspacing="0">
    849. 

  849. 								<tr>
    850. 

  850. 									<th scope="row"><?php echo $lang->t('Ban message label') ?></th>
    851. 

  851. 									<td>
    852. 

  852. 										<input type="text" name="ban_message" size="50" maxlength="255" tabindex="1" />
    853. 

  853. 										<span><?php echo $lang->t('Bans message help') ?></span>
    854. 

  854. 									</td>
    855. 

  855. 								</tr>
    856. 

  856. 								<tr>
    857. 

  857. 									<th scope="row"><?php echo $lang->t('Expire date label') ?></th>
    858. 

  858. 									<td>
    859. 

  859. 										<input type="text" name="ban_expire" size="17" maxlength="10" tabindex="2" />
    860. 

  860. 										<span><?php echo $lang->t('Expire date help') ?></span>
    861. 

  861. 									</td>
    862. 

  862. 								</tr>
    863. 

  863. 								<tr>
    864. 

  864. 									<th scope="row"><?php echo $lang->t('Ban IP label') ?></th>
    865. 

  865. 									<td>
    866. 

  866. 										<input type="radio" name="ban_the_ip" tabindex="3" value="1" checked="checked" />&#160;<strong><?php echo $lang->t('Yes') ?></strong>&#160;&#160;&#160;<input type="radio" name="ban_the_ip" tabindex="4" value="0" checked="checked" />&#160;<strong><?php echo $lang->t('No') ?></strong>
    867. 

  867. 										<span><?php echo $lang->t('Ban IP help') ?></span>
    868. 

  868. 									</td>
    869. 

  869. 								</tr>
    870. 

  870. 							</table>
    871. 

  871. 						</div>
    872. 

  872. 					</fieldset>
    873. 

  873. 				</div>
    874. 

  874. 				<p class="submitend"><input type="submit" name="ban_users_comply" value="<?php echo $lang->t('Save') ?>" tabindex="3" /></p>
    875. 

  875. 			</form>
    876. 

  876. 		</div>
    877. 

  877. 	</div>
    878. 

  878. 	<div class="clearer"></div>
    879. 

  879. </div>
    880. 

  880. <?php
    881. 

  881. 

  882. 	require PUN_ROOT.'footer.php';
    883. 

  883. }
    884. 

  884. 

  885. 

  886. else if (isset($_GET['find_user']))
    887. 

  887. {
    888. 

  888. 	$form = isset($_GET['form']) ? $_GET['form'] : array();
    889. 

  889. 

  890. 	// trim() all elements in $form
    891. 

  891. 	$form = array_map('pun_trim', $form);
    892. 

  892. 	$conditions = $query_str = array();
    893. 

  893. 

  894. 	$posts_greater = isset($_GET['posts_greater']) ? trim($_GET['posts_greater']) : '';
    895. 

  895. 	$posts_less = isset($_GET['posts_less']) ? trim($_GET['posts_less']) : '';
    896. 

  896. 	$last_post_after = isset($_GET['last_post_after']) ? trim($_GET['last_post_after']) : '';
    897. 

  897. 	$last_post_before = isset($_GET['last_post_before']) ? trim($_GET['last_post_before']) : '';
    898. 

  898. 	$last_visit_after = isset($_GET['last_visit_after']) ? trim($_GET['last_visit_after']) : '';
    899. 

  899. 	$last_visit_before = isset($_GET['last_visit_before']) ? trim($_GET['last_visit_before']) : '';
    900. 

  900. 	$registered_after = isset($_GET['registered_after']) ? trim($_GET['registered_after']) : '';
    901. 

  901. 	$registered_before = isset($_GET['registered_before']) ? trim($_GET['registered_before']) : '';
    902. 

  902. 	$order_by = isset($_GET['order_by']) && in_array($_GET['order_by'], array('username', 'email', 'num_posts', 'last_post', 'last_visit', 'registered')) ? $_GET['order_by'] : 'username';
    903. 

  903. 	$direction = isset($_GET['direction']) && $_GET['direction'] == 'DESC' ? 'DESC' : 'ASC';
    904. 

  904. 	$user_group = isset($_GET['user_group']) ? intval($_GET['user_group']) : -1;
    905. 

  905. 

  906. 	$query_str[] = 'order_by='.$order_by;
    907. 

  907. 	$query_str[] = 'direction='.$direction;
    908. 

  908. 	$query_str[] = 'user_group='.$user_group;
    909. 

  909. 

  910. 	if (preg_match('%[^0-9]%', $posts_greater.$posts_less))
    911. 

  911. 		message($lang->t('Non numeric message'));
    912. 

  912. 

  913. 	// Try to convert date/time to timestamps
    914. 

  914. 	if ($last_post_after != '')
    915. 

  915. 	{
    916. 

  916. 		$query_str[] = 'last_post_after='.$last_post_after;
    917. 

  917. 

  918. 		$last_post_after = strtotime($last_post_after);
    919. 

  919. 		if ($last_post_after === false || $last_post_after == -1)
    920. 

  920. 			message($lang->t('Invalid date time message'));
    921. 

  921. 

  922. 		$conditions[] = 'u.last_post>'.$last_post_after;
    923. 

  923. 	}
    924. 

  924. 	if ($last_post_before != '')
    925. 

  925. 	{
    926. 

  926. 		$query_str[] = 'last_post_before='.$last_post_before;
    927. 

  927. 

  928. 		$last_post_before = strtotime($last_post_before);
    929. 

  929. 		if ($last_post_before === false || $last_post_before == -1)
    930. 

  930. 			message($lang->t('Invalid date time message'));
    931. 

  931. 

  932. 		$conditions[] = 'u.last_post<'.$last_post_before;
    933. 

  933. 	}
    934. 

  934. 	if ($last_visit_after != '')
    935. 

  935. 	{
    936. 

  936. 		$query_str[] = 'last_visit_after='.$last_visit_after;
    937. 

  937. 

  938. 		$last_visit_after = strtotime($last_visit_after);
    939. 

  939. 		if ($last_visit_after === false || $last_visit_after == -1)
    940. 

  940. 			message($lang->t('Invalid date time message'));
    941. 

  941. 

  942. 		$conditions[] = 'u.last_visit>'.$last_visit_after;
    943. 

  943. 	}
    944. 

  944. 	if ($last_visit_before != '')
    945. 

  945. 	{
    946. 

  946. 		$query_str[] = 'last_visit_before='.$last_visit_before;
    947. 

  947. 

  948. 		$last_visit_before = strtotime($last_visit_before);
    949. 

  949. 		if ($last_visit_before === false || $last_visit_before == -1)
    950. 

  950. 			message($lang->t('Invalid date time message'));
    951. 

  951. 

  952. 		$conditions[] = 'u.last_visit<'.$last_visit_before;
    953. 

  953. 	}
    954. 

  954. 	if ($registered_after != '')
    955. 

  955. 	{
    956. 

  956. 		$query_str[] = 'registered_after='.$registered_after;
    957. 

  957. 

  958. 		$registered_after = strtotime($registered_after);
    959. 

  959. 		if ($registered_after === false || $registered_after == -1)
    960. 

  960. 			message($lang->t('Invalid date time message'));
    961. 

  961. 

  962. 		$conditions[] = 'u.registered>'.$registered_after;
    963. 

  963. 	}
    964. 

  964. 	if ($registered_before != '')
    965. 

  965. 	{
    966. 

  966. 		$query_str[] = 'registered_before='.$registered_before;
    967. 

  967. 

  968. 		$registered_before = strtotime($registered_before);
    969. 

  969. 		if ($registered_before === false || $registered_before == -1)
    970. 

  970. 			message($lang->t('Invalid date time message'));
    971. 

  971. 

  972. 		$conditions[] = 'u.registered<'.$registered_before;
    973. 

  973. 	}
    974. 

  974. 

  975. 	$like_command = ($db_type == 'pgsql') ? 'ILIKE' : 'LIKE';
    976. 

  976. 	foreach ($form as $key => $input)
    977. 

  977. 	{
    978. 

  978. 		if ($input != '' && in_array($key, array('username', 'email', 'title', 'realname', 'url', 'jabber', 'icq', 'msn', 'aim', 'yahoo', 'location', 'signature', 'admin_note')))
    979. 

  979. 		{
    980. 

  980. 			$conditions[] = 'u.'.$key.' '.$like_command.' '.$db->quote(str_replace('*', '%', $input));
    981. 

  981. 			$query_str[] = 'form%5B'.$key.'%5D='.urlencode($input);
    982. 

  982. 		}
    983. 

  983. 	}
    984. 

  984. 

  985. 	if ($posts_greater != '')
    986. 

  986. 	{
    987. 

  987. 		$query_str[] = 'posts_greater='.$posts_greater;
    988. 

  988. 		$conditions[] = 'u.num_posts>'.$posts_greater;
    989. 

  989. 	}
    990. 

  990. 	if ($posts_less != '')
    991. 

  991. 	{
    992. 

  992. 		$query_str[] = 'posts_less='.$posts_less;
    993. 

  993. 		$conditions[] = 'u.num_posts<'.$posts_less;
    994. 

  994. 	}
    995. 

  995. 

  996. 	if ($user_group > -1)
    997. 

  997. 		$conditions[] = 'u.group_id='.$user_group;
    998. 

  998. 

  999. 	// Fetch user count
    1000. 

  1000. 	$query = $db->select(array('count' => 'COUNT(u.id) AS num_users'), 'users AS u ');
    1001. 

  1001. 	$query->leftJoin('g', 'groups AS g', 'g.g_id = u.group_id');
    1002. 

  1002. 	$query->where = 'u.id > 1'.(!empty($conditions) ? ' AND '.implode(' AND ', $conditions) : '');
    1003. 

  1003. 

  1004. 	$result = $query->run();
    1005. 

  1005. 

  1006. 	$num_users = $result[0]['num_users'];
    1007. 

  1007. 

  1008. 	// Determine the user offset (based on $_GET['p'])
    1009. 

  1009. 	$num_pages = ceil($num_users / 50);
    1010. 

  1010. 

  1011. 	$p = (!isset($_GET['p']) || $_GET['p'] <= 1 || $_GET['p'] > $num_pages) ? 1 : intval($_GET['p']);
    1012. 

  1012. 	$start_from = 50 * ($p - 1);
    1013. 

  1013. 

  1014. 	// Generate paging links
    1015. 

  1015. 	$paging_links = '<span class="pages-label">'.$lang->t('Pages').' </span>'.paginate($num_pages, $p, 'admin_users.php?find_user=&amp;'.implode('&amp;', $query_str));
    1016. 

  1016. 

  1017. 	// Some helper variables for permissions
    1018. 

  1018. 	$can_delete = $can_move = $pun_user['g_id'] == PUN_ADMIN;
    1019. 

  1019. 	$can_ban = $pun_user['g_id'] == PUN_ADMIN || ($pun_user['g_moderator'] == '1' && $pun_user['g_mod_ban_users'] == '1');
    1020. 

  1020. 	$can_action = ($can_delete || $can_ban || $can_move) && $num_users > 0;
    1021. 

  1021. 

  1022. 	$page_title = array(pun_htmlspecialchars($pun_config['o_board_title']), $lang->t('Admin'), $lang->t('Users'), $lang->t('Results head'));
    1023. 

  1023. 	$page_head = array('js' => '<script type="text/javascript" src="common.js"></script>');
    1024. 

  1024. 	define('PUN_ACTIVE_PAGE', 'admin');
    1025. 

  1025. 	require PUN_ROOT.'header.php';
    1026. 

  1026. 

  1027. ?>
    1028. 

  1028. <div class="linkst">
    1029. 

  1029. 	<div class="inbox crumbsplus">
    1030. 

  1030. 		<ul class="crumbs">
    1031. 

  1031. 			<li><a href="admin_index.php"><?php echo $lang->t('Admin').' '.$lang->t('Index') ?></a></li>
    1032. 

  1032. 			<li><span>»&#160;</span><a href="admin_users.php"><?php echo $lang->t('Users') ?></a></li>
    1033. 

  1033. 			<li><span>»&#160;</span><strong><?php echo $lang->t('Results head') ?></strong></li>
    1034. 

  1034. 		</ul>
    1035. 

  1035. 		<div class="pagepost">
    1036. 

  1036. 			<p class="pagelink"><?php echo $paging_links ?></p>
    1037. 

  1037. 		</div>
    1038. 

  1038. 		<div class="clearer"></div>
    1039. 

  1039. 	</div>
    1040. 

  1040. </div>
    1041. 

  1041. 

  1042. 

  1043. <form id="search-users-form" action="admin_users.php" method="post">
    1044. 

  1044. <div id="users2" class="blocktable">
    1045. 

  1045. 	<h2><span><?php echo $lang->t('Results head') ?></span></h2>
    1046. 

  1046. 	<div class="box">
    1047. 

  1047. 		<div class="inbox">
    1048. 

  1048. 			<table cellspacing="0">
    1049. 

  1049. 			<thead>
    1050. 

  1050. 				<tr>
    1051. 

  1051. 					<th class="tcl" scope="col"><?php echo $lang->t('Results username head') ?></th>
    1052. 

  1052. 					<th class="tc2" scope="col"><?php echo $lang->t('Results email head') ?></th>
    1053. 

  1053. 					<th class="tc3" scope="col"><?php echo $lang->t('Results title head') ?></th>
    1054. 

  1054. 					<th class="tc4" scope="col"><?php echo $lang->t('Results posts head') ?></th>
    1055. 

  1055. 					<th class="tc5" scope="col"><?php echo $lang->t('Results admin note head') ?></th>
    1056. 

  1056. 					<th class="tcr" scope="col"><?php echo $lang->t('Results actions head') ?></th>
    1057. 

  1057. <?php if ($can_action): ?>					<th class="tcmod" scope="col"><?php echo $lang->t('Select') ?></th>
    1058. 

  1058. <?php endif; ?>
    1059. 

  1059. 				</tr>
    1060. 

  1060. 			</thead>
    1061. 

  1061. 			<tbody>
    1062. 

  1062. <?php
    1063. 

  1063. 

  1064. 	$query = $db->select(array('id' => 'u.id', 'username' => 'u.username', 'email' => 'u.email', 'title' => 'u.title', 'num_posts' => 'u.num_posts', 'admin_note' => 'u.admin_note', 'g_id' => 'g.g_id', 'g_user_title' => 'g.g_user_title'), 'users AS u');
    1065. 

  1065. 	$query->leftJoin('g', 'groups AS g', 'g.g_id = u.group_id');
    1066. 

  1066. 	$query->where = 'u.id > 1'.(!empty($conditions) ? ' AND '.implode(' AND ', $conditions) : '');
    1067. 

  1067. 	$query->order = array('order' => $order_by.' '.$direction);
    1068. 

  1068. 	$query->limit = '50';
    1069. 

  1069. 	$query->offset = $start_from;
    1070. 

  1070. 

  1071. 	$result = $query->run();
    1072. 

  1072. 

  1073. 	if (!empty($result))
    1074. 

  1074. 	{
    1075. 

  1075. 		foreach ($result as $user_data)
    1076. 

  1076. 		{
    1077. 

  1077. 			$user_title = get_title($user_data);
    1078. 

  1078. 

  1079. 			// This script is a special case in that we want to display "Not verified" for non-verified users
    1080. 

  1080. 			if (($user_data['g_id'] == '' || $user_data['g_id'] == PUN_UNVERIFIED) && $user_title != $lang->t('Banned'))
    1081. 

  1081. 				$user_title = '<span class="warntext">'.$lang->t('Not verified').'</span>';
    1082. 

  1082. 

  1083. 			$actions = '<a href="admin_users.php?ip_stats='.$user_data['id'].'">'.$lang->t('Results view IP link').'</a> | <a href="search.php?action=show_user_posts&amp;user_id='.$user_data['id'].'">'.$lang->t('Results show posts link').'</a>';
    1084. 

  1084. 

  1085. ?>
    1086. 

  1086. 				<tr>
    1087. 

  1087. 					<td class="tcl"><?php echo '<a href="profile.php?id='.$user_data['id'].'">'.pun_htmlspecialchars($user_data['username']).'</a>' ?></td>
    1088. 

  1088. 					<td class="tc2"><a href="mailto:<?php echo $user_data['email'] ?>"><?php echo $user_data['email'] ?></a></td>
    1089. 

  1089. 					<td class="tc3"><?php echo $user_title ?></td>
    1090. 

  1090. 					<td class="tc4"><?php echo forum_number_format($user_data['num_posts']) ?></td>
    1091. 

  1091. 					<td class="tc5"><?php echo ($user_data['admin_note'] != '') ? pun_htmlspecialchars($user_data['admin_note']) : '&#160;' ?></td>
    1092. 

  1092. 					<td class="tcr"><?php echo $actions ?></td>
    1093. 

  1093. <?php if ($can_action): ?>					<td class="tcmod"><input type="checkbox" name="users[<?php echo $user_data['id'] ?>]" value="1" /></td>
    1094. 

  1094. <?php endif; ?>
    1095. 

  1095. 				</tr>
    1096. 

  1096. <?php
    1097. 

  1097. 

  1098. 		}
    1099. 

  1099. 	}
    1100. 

  1100. 	else
    1101. 

  1101. 		echo "\t\t\t\t".'<tr><td class="tcl" colspan="6">'.$lang->t('No match').'</td></tr>'."\n";
    1102. 

  1102. 

  1103. 	unset ($result, $query);
    1104. 

  1104. 

  1105. ?>
    1106. 

  1106. 			</tbody>
    1107. 

  1107. 			</table>
    1108. 

  1108. 		</div>
    1109. 

  1109. 	</div>
    1110. 

  1110. </div>
    1111. 

  1111. 

  1112. <div class="linksb">
    1113. 

  1113. 	<div class="inbox crumbsplus">
    1114. 

  1114. 		<div class="pagepost">
    1115. 

  1115. 			<p class="pagelink"><?php echo $paging_links ?></p>
    1116. 

  1116. <?php if ($can_action): ?>			<p class="conr modbuttons"><a href="#" onclick="return select_checkboxes('search-users-form', this, '<?php echo $lang->t('Unselect all') ?>')"><?php echo $lang->t('Select all') ?></a> <?php if ($can_ban) : ?><input type="submit" name="ban_users" value="<?php echo $lang->t('Ban') ?>" /><?php endif; if ($can_delete) : ?><input type="submit" name="delete_users" value="<?php echo $lang->t('Delete') ?>" /><?php endif; if ($can_move) : ?><input type="submit" name="move_users" value="<?php echo $lang->t('Change group') ?>" /><?php endif; ?></p>
    1117. 

  1117. <?php endif; ?>
    1118. 

  1118. 		</div>
    1119. 

  1119. 		<ul class="crumbs">
    1120. 

  1120. 			<li><a href="admin_index.php"><?php echo $lang->t('Admin').' '.$lang->t('Index') ?></a></li>
    1121. 

  1121. 			<li><span>»&#160;</span><a href="admin_users.php"><?php echo $lang->t('Users') ?></a></li>
    1122. 

  1122. 			<li><span>»&#160;</span><strong><?php echo $lang->t('Results head') ?></strong></li>
    1123. 

  1123. 		</ul>
    1124. 

  1124. 		<div class="clearer"></div>
    1125. 

  1125. 	</div>
    1126. 

  1126. </div>
    1127. 

  1127. </form>
    1128. 

  1128. <?php
    1129. 

  1129. 

  1130. 	require PUN_ROOT.'footer.php';
    1131. 

  1131. }
    1132. 

  1132. 

  1133. 

  1134. else
    1135. 

  1135. {
    1136. 

  1136. 	$page_title = array(pun_htmlspecialchars($pun_config['o_board_title']), $lang->t('Admin'), $lang->t('Users'));
    1137. 

  1137. 	$focus_element = array('find_user', 'form[username]');
    1138. 

  1138. 	define('PUN_ACTIVE_PAGE', 'admin');
    1139. 

  1139. 	require PUN_ROOT.'header.php';
    1140. 

  1140. 

  1141. 	generate_admin_menu('users');
    1142. 

  1142. 

  1143. ?>
    1144. 

  1144. 	<div class="blockform">
    1145. 

  1145. 		<h2><span><?php echo $lang->t('User search head') ?></span></h2>
    1146. 

  1146. 		<div class="box">
    1147. 

  1147. 			<form id="find_user" method="get" action="admin_users.php">
    1148. 

  1148. 				<p class="submittop"><input type="submit" name="find_user" value="<?php echo $lang->t('Submit search') ?>" tabindex="1" /></p>
    1149. 

  1149. 				<div class="inform">
    1150. 

  1150. 					<fieldset>
    1151. 

  1151. 						<legend><?php echo $lang->t('User search subhead') ?></legend>
    1152. 

  1152. 						<div class="infldset">
    1153. 

  1153. 							<p><?php echo $lang->t('User search info') ?></p>
    1154. 

  1154. 							<table class="aligntop" cellspacing="0">
    1155. 

  1155. 								<tr>
    1156. 

  1156. 									<th scope="row"><?php echo $lang->t('Username label') ?></th>
    1157. 

  1157. 									<td><input type="text" name="form[username]" size="25" maxlength="25" tabindex="2" /></td>
    1158. 

  1158. 								</tr>
    1159. 

  1159. 								<tr>
    1160. 

  1160. 									<th scope="row"><?php echo $lang->t('Email address label') ?></th>
    1161. 

  1161. 									<td><input type="text" name="form[email]" size="30" maxlength="80" tabindex="3" /></td>
    1162. 

  1162. 								</tr>
    1163. 

  1163. 								<tr>
    1164. 

  1164. 									<th scope="row"><?php echo $lang->t('Title label') ?></th>
    1165. 

  1165. 									<td><input type="text" name="form[title]" size="30" maxlength="50" tabindex="4" /></td>
    1166. 

  1166. 								</tr>
    1167. 

  1167. 								<tr>
    1168. 

  1168. 									<th scope="row"><?php echo $lang->t('Real name label') ?></th>
    1169. 

  1169. 									<td><input type="text" name="form[realname]" size="30" maxlength="40" tabindex="5" /></td>
    1170. 

  1170. 								</tr>
    1171. 

  1171. 								<tr>
    1172. 

  1172. 									<th scope="row"><?php echo $lang->t('Website label') ?></th>
    1173. 

  1173. 									<td><input type="text" name="form[url]" size="35" maxlength="100" tabindex="6" /></td>
    1174. 

  1174. 								</tr>
    1175. 

  1175. 								<tr>
    1176. 

  1176. 									<th scope="row"><?php echo $lang->t('Jabber label') ?></th>
    1177. 

  1177. 									<td><input type="text" name="form[jabber]" size="30" maxlength="75" tabindex="7" /></td>
    1178. 

  1178. 								</tr>
    1179. 

  1179. 								<tr>
    1180. 

  1180. 									<th scope="row"><?php echo $lang->t('ICQ label') ?></th>
    1181. 

  1181. 									<td><input type="text" name="form[icq]" size="12" maxlength="12" tabindex="8" /></td>
    1182. 

  1182. 								</tr>
    1183. 

  1183. 								<tr>
    1184. 

  1184. 									<th scope="row"><?php echo $lang->t('MSN label') ?></th>
    1185. 

  1185. 									<td><input type="text" name="form[msn]" size="30" maxlength="50" tabindex="9" /></td>
    1186. 

  1186. 								</tr>
    1187. 

  1187. 								<tr>
    1188. 

  1188. 									<th scope="row"><?php echo $lang->t('AOL label') ?></th>
    1189. 

  1189. 									<td><input type="text" name="form[aim]" size="20" maxlength="20" tabindex="10" /></td>
    1190. 

  1190. 								</tr>
    1191. 

  1191. 								<tr>
    1192. 

  1192. 									<th scope="row"><?php echo $lang->t('Yahoo label') ?></th>
    1193. 

  1193. 									<td><input type="text" name="form[yahoo]" size="20" maxlength="20" tabindex="11" /></td>
    1194. 

  1194. 								</tr>
    1195. 

  1195. 								<tr>
    1196. 

  1196. 									<th scope="row"><?php echo $lang->t('Location label') ?></th>
    1197. 

  1197. 									<td><input type="text" name="form[location]" size="30" maxlength="30" tabindex="12" /></td>
    1198. 

  1198. 								</tr>
    1199. 

  1199. 								<tr>
    1200. 

  1200. 									<th scope="row"><?php echo $lang->t('Signature label') ?></th>
    1201. 

  1201. 									<td><input type="text" name="form[signature]" size="35" maxlength="512" tabindex="13" /></td>
    1202. 

  1202. 								</tr>
    1203. 

  1203. 								<tr>
    1204. 

  1204. 									<th scope="row"><?php echo $lang->t('Admin note label') ?></th>
    1205. 

  1205. 									<td><input type="text" name="form[admin_note]" size="30" maxlength="30" tabindex="14" /></td>
    1206. 

  1206. 								</tr>
    1207. 

  1207. 								<tr>
    1208. 

  1208. 									<th scope="row"><?php echo $lang->t('Posts more than label') ?></th>
    1209. 

  1209. 									<td><input type="text" name="posts_greater" size="5" maxlength="8" tabindex="15" /></td>
    1210. 

  1210. 								</tr>
    1211. 

  1211. 								<tr>
    1212. 

  1212. 									<th scope="row"><?php echo $lang->t('Posts less than label') ?></th>
    1213. 

  1213. 									<td><input type="text" name="posts_less" size="5" maxlength="8" tabindex="16" /></td>
    1214. 

  1214. 								</tr>
    1215. 

  1215. 								<tr>
    1216. 

  1216. 									<th scope="row"><?php echo $lang->t('Last post after label') ?></th>
    1217. 

  1217. 									<td><input type="text" name="last_post_after" size="24" maxlength="19" tabindex="17" />
    1218. 

  1218. 									<span><?php echo $lang->t('Date help') ?></span></td>
    1219. 

  1219. 								</tr>
    1220. 

  1220. 								<tr>
    1221. 

  1221. 									<th scope="row"><?php echo $lang->t('Last post before label') ?></th>
    1222. 

  1222. 									<td><input type="text" name="last_post_before" size="24" maxlength="19" tabindex="18" />
    1223. 

  1223. 									<span><?php echo $lang->t('Date help') ?></span></td>
    1224. 

  1224. 								</tr>
    1225. 

  1225. 								<tr>
    1226. 

  1226. 									<th scope="row"><?php echo $lang->t('Last visit after label') ?></th>
    1227. 

  1227. 									<td><input type="text" name="last_visit_after" size="24" maxlength="19" tabindex="17" />
    1228. 

  1228. 									<span><?php echo $lang->t('Date help') ?></span></td>
    1229. 

  1229. 								</tr>
    1230. 

  1230. 								<tr>
    1231. 

  1231. 									<th scope="row"><?php echo $lang->t('Last visit before label') ?></th>
    1232. 

  1232. 									<td><input type="text" name="last_visit_before" size="24" maxlength="19" tabindex="18" />
    1233. 

  1233. 									<span><?php echo $lang->t('Date help') ?></span></td>
    1234. 

  1234. 								</tr>
    1235. 

  1235. 								<tr>
    1236. 

  1236. 									<th scope="row"><?php echo $lang->t('Registered after label') ?></th>
    1237. 

  1237. 									<td><input type="text" name="registered_after" size="24" maxlength="19" tabindex="19" />
    1238. 

  1238. 									<span><?php echo $lang->t('Date help') ?></span></td>
    1239. 

  1239. 								</tr>
    1240. 

  1240. 								<tr>
    1241. 

  1241. 									<th scope="row"><?php echo $lang->t('Registered before label') ?></th>
    1242. 

  1242. 									<td><input type="text" name="registered_before" size="24" maxlength="19" tabindex="20" />
    1243. 

  1243. 									<span><?php echo $lang->t('Date help') ?></span></td>
    1244. 

  1244. 								</tr>
    1245. 

  1245. 								<tr>
    1246. 

  1246. 									<th scope="row"><?php echo $lang->t('Order by label') ?></th>
    1247. 

  1247. 									<td>
    1248. 

  1248. 										<select name="order_by" tabindex="21">
    1249. 

  1249. 											<option value="username" selected="selected"><?php echo $lang->t('Order by username') ?></option>
    1250. 

  1250. 											<option value="email"><?php echo $lang->t('Order by email') ?></option>
    1251. 

  1251. 											<option value="num_posts"><?php echo $lang->t('Order by posts') ?></option>
    1252. 

  1252. 											<option value="last_post"><?php echo $lang->t('Order by last post') ?></option>
    1253. 

  1253. 											<option value="last_visit"><?php echo $lang->t('Order by last visit') ?></option>
    1254. 

  1254. 											<option value="registered"><?php echo $lang->t('Order by registered') ?></option>
    1255. 

  1255. 										</select>&#160;&#160;&#160;<select name="direction" tabindex="22">
    1256. 

  1256. 											<option value="ASC" selected="selected"><?php echo $lang->t('Ascending') ?></option>
    1257. 

  1257. 											<option value="DESC"><?php echo $lang->t('Descending') ?></option>
    1258. 

  1258. 										</select>
    1259. 

  1259. 									</td>
    1260. 

  1260. 								</tr>
    1261. 

  1261. 								<tr>
    1262. 

  1262. 									<th scope="row"><?php echo $lang->t('User group label') ?></th>
    1263. 

  1263. 									<td>
    1264. 

  1264. 										<select name="user_group" tabindex="23">
    1265. 

  1265. 											<option value="-1" selected="selected"><?php echo $lang->t('All groups') ?></option>
    1266. 

  1266. 											<option value="0"><?php echo $lang->t('Unverified users') ?></option>
    1267. 

  1267. <?php
    1268. 

  1268. 

  1269. 	$query = $db->select(array('g_id' => 'g.g_id', 'g_title' => 'g.g_title'), 'groups AS g');
    1270. 

  1270. 	$query->where = 'g.g_id != :group_guest';
    1271. 

  1271. 	$query->order = array('g_title' => 'g.g_title DESC');
    1272. 

  1272. 

  1273. 	$params = array(':group_guest' => PUN_GUEST);
    1274. 

  1274. 

  1275. 	$result = $query->run($params);
    1276. 

  1276. 	foreach ($result as $cur_group)
    1277. 

  1277. 		echo "\t\t\t\t\t\t\t\t\t\t\t".'<option value="'.$cur_group['g_id'].'">'.pun_htmlspecialchars($cur_group['g_title']).'</option>'."\n";
    1278. 

  1278. 

  1279. 	unset ($result, $query, $params);
    1280. 

  1280. 

  1281. ?>
    1282. 

  1282. 										</select>
    1283. 

  1283. 									</td>
    1284. 

  1284. 								</tr>
    1285. 

  1285. 							</table>
    1286. 

  1286. 						</div>
    1287. 

  1287. 					</fieldset>
    1288. 

  1288. 				</div>
    1289. 

  1289. 				<p class="submitend"><input type="submit" name="find_user" value="<?php echo $lang->t('Submit search') ?>" tabindex="25" /></p>
    1290. 

  1290. 			</form>
    1291. 

  1291. 		</div>
    1292. 

  1292. 

  1293. 		<h2 class="block2"><span><?php echo $lang->t('IP search head') ?></span></h2>
    1294. 

  1294. 		<div class="box">
    1295. 

  1295. 			<form method="get" action="admin_users.php">
    1296. 

  1296. 				<div class="inform">
    1297. 

  1297. 					<fieldset>
    1298. 

  1298. 						<legend><?php echo $lang->t('IP search subhead') ?></legend>
    1299. 

  1299. 						<div class="infldset">
    1300. 

  1300. 							<table class="aligntop" cellspacing="0">
    1301. 

  1301. 								<tr>
    1302. 

  1302. 									<th scope="row"><?php echo $lang->t('IP address label') ?><div><input type="submit" value="<?php echo $lang->t('Find IP address') ?>" tabindex="26" /></div></th>
    1303. 

  1303. 									<td><input type="text" name="show_users" size="18" maxlength="15" tabindex="24" />
    1304. 

  1304. 									<span><?php echo $lang->t('IP address help') ?></span></td>
    1305. 

  1305. 								</tr>
    1306. 

  1306. 							</table>
    1307. 

  1307. 						</div>
    1308. 

  1308. 					</fieldset>
    1309. 

  1309. 				</div>
    1310. 

  1310. 			</form>
    1311. 

  1311. 		</div>
    1312. 

  1312. 	</div>
    1313. 

  1313. 	<div class="clearer"></div>
    1314. 

  1314. </div>
    1315. 

  1315. <?php
    1316. 

  1316. 

  1317. 	require PUN_ROOT.'footer.php';
    1318. 

  1318. }
    1319. 

  1319.