//
// ------------------------------------------------------------------------ //
// This program is free software; you can redistribute it and/or modify //
// it under the terms of the GNU General Public License as published by //
// the Free Software Foundation; either version 2 of the License, or //
// (at your option) any later version. //
// //
// You may not change or alter any portion of this comment or credits //
// of supporting developers from this source code or any supporting //
// source code which is considered copyrighted (c) material of the //
// original comment or credit authors. //
// //
// This program is distributed in the hope that it will be useful, //
// but WITHOUT ANY WARRANTY; without even the implied warranty of //
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the //
// GNU General Public License for more details. //
// //
// You should have received a copy of the GNU General Public License //
// along with this program; if not, write to the Free Software //
// Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA //
// ------------------------------------------------------------------------ //
$xoopsOption['pagetype'] = 'user';
include 'mainfile.php';
include_once XOOPS_ROOT_PATH.'/class/xoopsformloader.php';
// If not a user, redirect
if (!is_object($xoopsUser)) {
redirect_header('index.php',3,_US_NOEDITRIGHT);
exit();
}
// initialize $op variable
$op = 'editprofile';
if (!empty($_POST['op'])) {
$op = $_POST['op'];
}
if (!empty($_GET['op'])) {
$op = $_GET['op'];
}
$config_handler =& xoops_gethandler('config');
$xoopsConfigUser =& $config_handler->getConfigsByCat(XOOPS_CONF_USER);
if ($op == 'saveuser') {
if (!XoopsSingleTokenHandler::quickValidate('edituser')) {
redirect_header('index.php',3,_US_NOEDITRIGHT);
exit;
}
$uid = 0;
if (!empty($_POST['uid'])) {
$uid = intval($_POST['uid']);
}
if (empty($uid) || $xoopsUser->getVar('uid') != $uid) {
redirect_header('index.php',3,_US_NOEDITRIGHT);
exit();
}
$errors = array();
$myts =& MyTextSanitizer::getInstance();
if ($xoopsConfigUser['allow_chgmail'] == 1) {
$email = '';
if (!empty($_POST['email'])) {
$email = $myts->stripSlashesGPC(trim($_POST['email']));
}
if ($email == '' || !checkEmail($email)) {
$errors[] = _US_INVALIDMAIL;
}
}
$password = '';
if (!empty($_POST['password'])) {
$password = $myts->stripSlashesGPC(trim($_POST['password']));
}
if ($password != '') {
if (strlen($password) < $xoopsConfigUser['minpass']) {
$errors[] = sprintf(_US_PWDTOOSHORT,$xoopsConfigUser['minpass']);
}
$vpass = '';
if (!empty($_POST['vpass'])) {
$vpass = $myts->stripSlashesGPC(trim($_POST['vpass']));
}
if ($password != $vpass) {
$errors[] = _US_PASSNOTSAME;
}
}
if (count($errors) > 0) {
include XOOPS_ROOT_PATH.'/header.php';
echo '';
foreach ($errors as $er) {
echo ''.$er.'
';
}
echo '
';
$op = 'editprofile';
} else {
$member_handler =& xoops_gethandler('member');
$edituser =& $member_handler->getUser($uid);
$edituser->setVar('name', $_POST['name']);
if ($xoopsConfigUser['allow_chgmail'] == 1) {
$edituser->setVar('email', $email, true);
}
$edituser->setVar('url', formatURL($_POST['url']));
$edituser->setVar('user_icq', $_POST['user_icq']);
$edituser->setVar('user_from', $_POST['user_from']);
$edituser->setVar('user_sig', xoops_substr($_POST['user_sig'], 0, 255));
$user_viewemail = (!empty($_POST['user_viewemail'])) ? 1 : 0;
$edituser->setVar('user_viewemail', $user_viewemail);
$edituser->setVar('user_aim', $_POST['user_aim']);
$edituser->setVar('user_yim', $_POST['user_yim']);
$edituser->setVar('user_msnm', $_POST['user_msnm']);
if ($password != '') {
$edituser->setVar('pass', md5($password), true);
}
$attachsig = !empty($_POST['attachsig']) ? 1 : 0;
$edituser->setVar('attachsig', $attachsig);
//$edituser->setVar('timezone_offset', $_POST['timezone_offset']);
$edituser->setVar('uorder', $_POST['uorder']);
$edituser->setVar('umode', $_POST['umode']);
$edituser->setVar('notify_method', $_POST['notify_method']);
$edituser->setVar('notify_mode', $_POST['notify_mode']);
$edituser->setVar('bio', xoops_substr($_POST['bio'], 0, 255));
$edituser->setVar('user_occ', $_POST['user_occ']);
$edituser->setVar('user_intrest', $_POST['user_intrest']);
$edituser->setVar('user_mailok', $_POST['user_mailok']);
if (!empty($_POST['usecookie'])) {
setcookie($xoopsConfig['usercookie'], $xoopsUser->getVar('uname'), time()+ 31536000);
} else {
setcookie($xoopsConfig['usercookie']);
}
if (!$member_handler->insertUser($edituser)) {
include XOOPS_ROOT_PATH.'/header.php';
echo $edituser->getHtmlErrors();
include XOOPS_ROOT_PATH.'/footer.php';
} else {
redirect_header('userinfo.php?uid='.$uid, 1, _US_PROFUPDATED);
}
exit();
}
}
if ($op == 'editprofile') {
include_once XOOPS_ROOT_PATH.'/header.php';
include_once XOOPS_ROOT_PATH.'/include/comment_constants.php';
echo ''. _US_PROFILE .' »» '. _US_EDITPROFILE .'
';
$form = new XoopsThemeForm(_US_EDITPROFILE, 'userinfo', 'edituser.php');
$uname_label = new XoopsFormLabel(_US_NICKNAME, $xoopsUser->getVar('uname'));
$form->addElement($uname_label);
$name_text = new XoopsFormText(_US_REALNAME, 'name', 30, 60, $xoopsUser->getVar('name', 'E'));
$form->addElement($name_text);
$email_tray = new XoopsFormElementTray(_US_EMAIL, '
');
if ($xoopsConfigUser['allow_chgmail'] == 1) {
$email_text = new XoopsFormText('', 'email', 30, 60, $xoopsUser->getVar('email'));
} else {
$email_text = new XoopsFormLabel('', $xoopsUser->getVar('email'));
}
$email_tray->addElement($email_text);
$email_cbox_value = $xoopsUser->user_viewemail() ? 1 : 0;
$email_cbox = new XoopsFormCheckBox('', 'user_viewemail', $email_cbox_value);
$email_cbox->addOption(1, _US_ALLOWVIEWEMAIL);
$email_tray->addElement($email_cbox);
$form->addElement($email_tray);
$url_text = new XoopsFormText(_US_WEBSITE, 'url', 30, 100, $xoopsUser->getVar('url', 'E'));
$form->addElement($url_text);
//$timezone_select = new XoopsFormSelectTimezone(_US_TIMEZONE, 'timezone_offset', $xoopsUser->getVar('timezone_offset'));
$icq_text = new XoopsFormText(_US_ICQ, 'user_icq', 15, 15, $xoopsUser->getVar('user_icq', 'E'));
$aim_text = new XoopsFormText(_US_AIM, 'user_aim', 18, 18, $xoopsUser->getVar('user_aim', 'E'));
$yim_text = new XoopsFormText(_US_YIM, 'user_yim', 25, 25, $xoopsUser->getVar('user_yim', 'E'));
$msnm_text = new XoopsFormText(_US_MSNM, 'user_msnm', 30, 100, $xoopsUser->getVar('user_msnm', 'E'));
$location_text = new XoopsFormText(_US_LOCATION, 'user_from', 30, 100, $xoopsUser->getVar('user_from', 'E'));
$occupation_text = new XoopsFormText(_US_OCCUPATION, 'user_occ', 30, 100, $xoopsUser->getVar('user_occ', 'E'));
$interest_text = new XoopsFormText(_US_INTEREST, 'user_intrest', 30, 150, $xoopsUser->getVar('user_intrest', 'E'));
$sig_tray = new XoopsFormElementTray(_US_SIGNATURE, '
');
include_once 'include/xoopscodes.php';
$sig_tarea = new XoopsFormDhtmlTextArea('', 'user_sig', $xoopsUser->getVar('user_sig', 'E'));
$sig_tray->addElement($sig_tarea);
$sig_cbox_value = $xoopsUser->getVar('attachsig') ? 1 : 0;
$sig_cbox = new XoopsFormCheckBox('', 'attachsig', $sig_cbox_value);
$sig_cbox->addOption(1, _US_SHOWSIG);
$sig_tray->addElement($sig_cbox);
$umode_select = new XoopsFormSelect(_US_CDISPLAYMODE, 'umode', $xoopsUser->getVar('umode'));
$umode_select->addOptionArray(array('nest'=>_NESTED, 'flat'=>_FLAT, 'thread'=>_THREADED));
$uorder_select = new XoopsFormSelect(_US_CSORTORDER, 'uorder', $xoopsUser->getVar('uorder'));
$uorder_select->addOptionArray(array(XOOPS_COMMENT_OLD1ST => _OLDESTFIRST, XOOPS_COMMENT_NEW1ST => _NEWESTFIRST));
// RMV-NOTIFY
// TODO: add this to admin user-edit functions...
include_once XOOPS_ROOT_PATH . "/language/" . $xoopsConfig['language'] . '/notification.php';
include_once XOOPS_ROOT_PATH . '/include/notification_constants.php';
$notify_method_select = new XoopsFormSelect(_NOT_NOTIFYMETHOD, 'notify_method', $xoopsUser->getVar('notify_method'));
$notify_method_select->addOptionArray(array(XOOPS_NOTIFICATION_METHOD_DISABLE=>_NOT_METHOD_DISABLE, XOOPS_NOTIFICATION_METHOD_PM=>_NOT_METHOD_PM, XOOPS_NOTIFICATION_METHOD_EMAIL=>_NOT_METHOD_EMAIL));
$notify_mode_select = new XoopsFormSelect(_NOT_NOTIFYMODE, 'notify_mode', $xoopsUser->getVar('notify_mode'));
$notify_mode_select->addOptionArray(array(XOOPS_NOTIFICATION_MODE_SENDALWAYS=>_NOT_MODE_SENDALWAYS, XOOPS_NOTIFICATION_MODE_SENDONCETHENDELETE=>_NOT_MODE_SENDONCE, XOOPS_NOTIFICATION_MODE_SENDONCETHENWAIT=>_NOT_MODE_SENDONCEPERLOGIN));
$bio_tarea = new XoopsFormTextArea(_US_EXTRAINFO, 'bio', $xoopsUser->getVar('bio', 'E'));
$cookie_radio_value = empty($_COOKIE[$xoopsConfig['usercookie']]) ? 0 : 1;
$cookie_radio = new XoopsFormRadioYN(_US_USECOOKIE, 'usecookie', $cookie_radio_value, _YES, _NO);
$pwd_text = new XoopsFormPassword('', 'password', 10, 32);
$pwd_text2 = new XoopsFormPassword('', 'vpass', 10, 32);
$pwd_tray = new XoopsFormElementTray(_US_PASSWORD.'
'._US_TYPEPASSTWICE);
$pwd_tray->addElement($pwd_text);
$pwd_tray->addElement($pwd_text2);
$mailok_radio = new XoopsFormRadioYN(_US_MAILOK, 'user_mailok', $xoopsUser->getVar('user_mailok'));
$uid_hidden = new XoopsFormHidden('uid', $xoopsUser->getVar('uid'));
$op_hidden = new XoopsFormHidden('op', 'saveuser');
$token_hidden = new XoopsFormToken(XoopsSingleTokenHandler::quickCreate('edituser'));
$submit_button = new XoopsFormButton('', 'submit', _US_SAVECHANGES, 'submit');
$form->addElement($timezone_select);
$form->addElement($icq_text);
$form->addElement($aim_text);
$form->addElement($yim_text);
$form->addElement($msnm_text);
$form->addElement($location_text);
$form->addElement($occupation_text);
$form->addElement($interest_text);
$form->addElement($sig_tray);
$form->addElement($umode_select);
$form->addElement($uorder_select);
$form->addElement($notify_method_select);
$form->addElement($notify_mode_select);
$form->addElement($bio_tarea);
$form->addElement($pwd_tray);
$form->addElement($cookie_radio);
$form->addElement($mailok_radio);
$form->addElement($uid_hidden);
$form->addElement($op_hidden);
$form->addElement($token_hidden);
$form->addElement($submit_button);
if ($xoopsConfigUser['allow_chgmail'] == 1) {
$form->setRequired($email_text);
}
$form->display();
include XOOPS_ROOT_PATH.'/footer.php';
}
if ($op == 'avatarform') {
include XOOPS_ROOT_PATH.'/header.php';
echo ''. _US_PROFILE .' »» '. _US_UPLOADMYAVATAR .'
';
$oldavatar = $xoopsUser->getVar('user_avatar');
if (!empty($oldavatar) && $oldavatar != 'blank.gif') {
echo ''._US_OLDDELETED.'
';
echo '
![](".XOOPS_UPLOAD_URL."/".$xoopsUser->getVar("user_avatar", "E").")
"._LIST.""));
$form2->addElement($avatar_tray);
$form2->addElement(new XoopsFormHidden('uid', $xoopsUser->getVar('uid')));
$form2->addElement(new XoopsFormHidden('op', 'avatarchoose'));
$form2->addElement(new XoopsFormToken(XoopsSingleTokenHandler::quickCreate('avatarchoose')));
$form2->addElement(new XoopsFormButton('', 'submit2', _SUBMIT, 'submit'));
$form2->display();
include XOOPS_ROOT_PATH.'/footer.php';
}
if ($op == 'avatarupload') {
if (!XoopsSingleTokenHandler::quickValidate('avatarupload')) {
redirect_header('index.php',3,_US_NOEDITRIGHT);
exit;
}
$xoops_upload_file = array();
$uid = 0;
if (!empty($_POST['xoops_upload_file']) && is_array($_POST['xoops_upload_file'])){
$xoops_upload_file = $_POST['xoops_upload_file'];
}
if (!empty($_POST['uid'])) {
$uid = intval($_POST['uid']);
}
if (empty($uid) || $xoopsUser->getVar('uid') != $uid ) {
redirect_header('index.php',3,_US_NOEDITRIGHT);
exit();
}
if ($xoopsConfigUser['avatar_allow_upload'] == 1 && $xoopsUser->getVar('posts') >= $xoopsConfigUser['avatar_minposts']) {
include_once XOOPS_ROOT_PATH.'/class/uploader.php';
$uploader = new XoopsMediaUploader(XOOPS_UPLOAD_PATH, array('image/gif', 'image/jpeg', 'image/pjpeg', 'image/x-png', 'image/png'), $xoopsConfigUser['avatar_maxsize'], $xoopsConfigUser['avatar_width'], $xoopsConfigUser['avatar_height']);
$uploader->setAllowedExtensions(array('gif', 'jpeg', 'jpg', 'png'));
if ($uploader->fetchMedia($_POST['xoops_upload_file'][0])) {
$uploader->setPrefix('cavt');
if ($uploader->upload()) {
$avt_handler =& xoops_gethandler('avatar');
$avatar =& $avt_handler->create();
$avatar->setVar('avatar_file', $uploader->getSavedFileName());
$avatar->setVar('avatar_name', $xoopsUser->getVar('uname'));
$avatar->setVar('avatar_mimetype', $uploader->getMediaType());
$avatar->setVar('avatar_display', 1);
$avatar->setVar('avatar_type', 'C');
if (!$avt_handler->insert($avatar)) {
@unlink($uploader->getSavedDestination());
} else {
$oldavatar = $xoopsUser->getVar('user_avatar');
if (!empty($oldavatar) && $oldavatar != 'blank.gif' && !preg_match("/^savt/", strtolower($oldavatar))) {
$avatars =& $avt_handler->getObjects(new Criteria('avatar_file', $oldavatar));
$avt_handler->delete($avatars[0]);
$oldavatar_path = str_replace("\\", "/", realpath(XOOPS_UPLOAD_PATH.'/'.$oldavatar));
if (0 === strpos($oldavatar_path, XOOPS_UPLOAD_PATH) && is_file($oldavatar_path)) {
unlink($oldavatar_path);
}
}
$sql = sprintf("UPDATE %s SET user_avatar = %s WHERE uid = %u", $xoopsDB->prefix('users'), $xoopsDB->quoteString($uploader->getSavedFileName()), $xoopsUser->getVar('uid'));
$xoopsDB->query($sql);
$avt_handler->addUser($avatar->getVar('avatar_id'), $xoopsUser->getVar('uid'));
redirect_header('userinfo.php?t='.time().'&uid='.$xoopsUser->getVar('uid'),0, _US_PROFUPDATED);
}
}
}
include XOOPS_ROOT_PATH.'/header.php';
echo $uploader->getErrors();
include XOOPS_ROOT_PATH.'/footer.php';
}
}
if ($op == 'avatarchoose') {
if (!XoopsSingleTokenHandler::quickValidate('avatarchoose')) {
redirect_header('index.php',3,_US_NOEDITRIGHT);
exit;
}
$uid = 0;
if (!empty($_POST['uid'])) {
$uid = intval($_POST['uid']);
}
if (empty($uid) || $xoopsUser->getVar('uid') != $uid ) {
redirect_header('index.php', 3, _US_NOEDITRIGHT);
exit();
}
$avt_handler =& xoops_gethandler('avatar');
$user_avatar = 'blank.gif';
$user_avatar_object = false;
$myts =& MyTextSanitizer::getInstance();
if ($user_avatar_req = trim($myts->stripSlashesGPC($_POST['user_avatar']))) {
// allow system avatar selection only
if (preg_match("/^savt/", $user_avatar_req)) {
$criteria =& new CriteriaCompo(new Criteria('avatar_file', addslashes($user_avatar_req)));
$criteria->add(new Criteria('avatar_type', 'S'));
if ($avatars = $avt_handler->getObjects($criteria)) {
if (is_object($avatars[0])) {
$user_avatar = $avatars[0]->getVar('avatar_file');
$user_avatar_object =& $avatars[0];
}
}
}
}
$user_avatarpath = str_replace("\\", "/", realpath(XOOPS_UPLOAD_PATH.'/'.$user_avatar));
if (0 === strpos($user_avatarpath, XOOPS_UPLOAD_PATH) && is_file($user_avatarpath)) {
$oldavatar = $xoopsUser->getVar('user_avatar');
$xoopsUser->setVar('user_avatar', $user_avatar);
$member_handler =& xoops_gethandler('member');
if (!$member_handler->insertUser($xoopsUser)) {
include XOOPS_ROOT_PATH.'/header.php';
echo $xoopsUser->getHtmlErrors();
include XOOPS_ROOT_PATH.'/footer.php';
exit();
}
if ($oldavatar && $oldavatar != 'blank.gif' && preg_match("/^cavt/", strtolower($oldavatar))) {
$criteria =& new CriteriaCompo(new Criteria('avatar_file', addslashes($oldavatar)));
$criteria->add(new Criteria('avatar_type', 'C'));
$avatars =& $avt_handler->getObjects($criteria);
if (is_object($avatars[0])) {
$avt_handler->delete($avatars[0]);
}
$oldavatar_path = str_replace("\\", "/", realpath(XOOPS_UPLOAD_PATH.'/'.$oldavatar));
if (0 === strpos($oldavatar_path, XOOPS_UPLOAD_PATH) && is_file($oldavatar_path)) {
unlink($oldavatar_path);
}
}
if (is_object($user_avatar_object)) {
$avt_handler->addUser($user_avatar_object->getVar('avatar_id'), $xoopsUser->getVar('uid'));
}
}
redirect_header('userinfo.php?uid='.$uid, 0, _US_PROFUPDATED);
}
?>