+

+//

+//

+//

+if( $mode == "edit" || $mode == "save" && ( isset($HTTP_POST_VARS['username']) || isset($HTTP_GET_VARS[POST_USERS_URL]) || isset($HTTP_POST_VARS[POST_USERS_URL]) ) )

+

+ // Ok, the profile has been modified and submitted, let's update

+ if( $mode == "save" && isset($HTTP_POST_VARS['submit']) )

+ $user_id = intval($HTTP_POST_VARS['id']);

+

+ $username = (!empty($HTTP_POST_VARS['username'])) ? trim(strip_tags($HTTP_POST_VARS['username'])) : "";

+ $email = (!empty($HTTP_POST_VARS['email'])) ? trim(strip_tags(htmlspecialchars($HTTP_POST_VARS['email']))) : "";

+

+ $password = (!empty($HTTP_POST_VARS['password'])) ? trim(strip_tags(htmlspecialchars($HTTP_POST_VARS['password']))) : "";

+ $password_confirm = (!empty($HTTP_POST_VARS['password_confirm'])) ? trim(strip_tags(htmlspecialchars($HTTP_POST_VARS['password_confirm']))) : "";

+

+ $icq = (!empty($HTTP_POST_VARS['icq'])) ? trim(strip_tags($HTTP_POST_VARS['icq'])) : "";

+ $aim = (!empty($HTTP_POST_VARS['aim'])) ? trim(strip_tags($HTTP_POST_VARS['aim'])) : "";

+ $msn = (!empty($HTTP_POST_VARS['msn'])) ? trim(strip_tags($HTTP_POST_VARS['msn'])) : "";

+ $yim = (!empty($HTTP_POST_VARS['yim'])) ? trim(strip_tags($HTTP_POST_VARS['yim'])) : "";

+

+ $website = (!empty($HTTP_POST_VARS['website'])) ? trim(strip_tags($HTTP_POST_VARS['website'])) : "";

+ $location = (!empty($HTTP_POST_VARS['location'])) ? trim(strip_tags($HTTP_POST_VARS['location'])) : "";

+ $occupation = (!empty($HTTP_POST_VARS['occupation'])) ? trim(strip_tags($HTTP_POST_VARS['occupation'])) : "";

+ $interests = (!empty($HTTP_POST_VARS['interests'])) ? trim(strip_tags($HTTP_POST_VARS['interests'])) : "";

+ $signature = (!empty($HTTP_POST_VARS['signature'])) ? trim(strip_tags(str_replace("<br />", "\n", $HTTP_POST_VARS['signature']))) : "";

+

+ validate_optional_fields($icq, $aim, $msn, $yim, $website, $location, $occupation, $interests, $signature);

+

+ $viewemail = (isset($HTTP_POST_VARS['viewemail'])) ? intval($HTTP_POST_VARS['viewemail']) : 0;

+ $allowviewonline = (isset($HTTP_POST_VARS['hideonline'])) ? ( ($HTTP_POST_VARS['hideonline']) ? 0 : 1 ) : 1;

+ $notifypm = (isset($HTTP_POST_VARS['notifypm'])) ? intval($HTTP_POST_VARS['notifypm']) : 1;

+ $popuppm = (isset($HTTP_POST_VARS['popup_pm'])) ? ( ($HTTP_POST_VARS['popup_pm']) ? TRUE : 0 ) : TRUE;

+ $attachsig = (isset($HTTP_POST_VARS['attachsig'])) ? intval($HTTP_POST_VARS['attachsig']) : 0;

+

+ $allowhtml = (isset($HTTP_POST_VARS['allowhtml'])) ? intval($HTTP_POST_VARS['allowhtml']) : $board_config['allow_html'];

+ $allowbbcode = (isset($HTTP_POST_VARS['allowbbcode'])) ? intval($HTTP_POST_VARS['allowbbcode']) : $board_config['allow_bbcode'];

+ $allowsmilies = (isset($HTTP_POST_VARS['allowsmilies'])) ? intval($HTTP_POST_VARS['allowsmilies']) : $board_config['allow_smilies'];

+

+ $user_style = ($HTTP_POST_VARS['style']) ? intval($HTTP_POST_VARS['style']) : $board_config['default_style'];

+ $user_lang = ($HTTP_POST_VARS['language']) ? $HTTP_POST_VARS['language'] : $board_config['default_lang'];

+ $user_timezone = (isset($HTTP_POST_VARS['timezone'])) ? doubleval($HTTP_POST_VARS['timezone']) : $board_config['board_timezone'];

+ $user_template = ($HTTP_POST_VARS['template']) ? $HTTP_POST_VARS['template'] : $board_config['board_template'];

+ $user_dateformat = ($HTTP_POST_VARS['dateformat']) ? trim($HTTP_POST_VARS['dateformat']) : $board_config['default_dateformat'];

+

+ $user_status = (!empty($HTTP_POST_VARS['user_status'])) ? intval($HTTP_POST_VARS['user_status']) : 0;

+ $user_allowpm = (!empty($HTTP_POST_VARS['user_allowpm'])) ? intval($HTTP_POST_VARS['user_allowpm']) : 0;

+ $user_allowavatar = (!empty($HTTP_POST_VARS['user_allowavatar'])) ? intval($HTTP_POST_VARS['user_allowavatar']) : 0;

+ $user_rank = (!empty($HTTP_POST_VARS['user_rank'])) ? intval($HTTP_POST_VARS['user_rank']) : 0;

+

+ if( isset($HTTP_POST_VARS['submit']) )

+ {

+ $error = FALSE;

+ $passwd_sql = "";

+ }

+ else

+ {

+ $error = TRUE;

+ $passwd_sql = "";

+ }

+

+ if( !empty($password) && !empty($password_confirm) )

+ {

+ // Awww, the user wants to change their password, isn't that cute..

+ if($password != $password_confirm)

+ {

+ $error = TRUE;

+ $error_msg .= $lang['Password_mismatch'];

+ }

+ else

+ {

+ $password = md5($password);

+ $passwd_sql = "user_password = '$password', ";

+ }

+ }

+ else if( $password && !$password_confirm )

+ {

+ $error = TRUE;

+ $error_msg .= $lang['Password_mismatch'];

+ }

+ else if( !$password && $password_confirm )

+ {

+ $error = TRUE;

+ $error_msg .= $lang['Password_mismatch'];

+ }

+

+ if( $signature != "" )

+ {

+ $signature_bbcode_uid = ( $allowbbcode ) ? make_bbcode_uid() : "";

+ $signature = prepare_message($signature, $allowhtml, $allowbbcode, $allowsmilies, $signature_bbcode_uid);

+ }

+

+ if( isset($HTTP_POST_VARS['avatardel']) )

+ {

+ if( $user_avatar_type == USER_AVATAR_UPLOAD )

+ {

+ if( @file_exists("./../" . $board_config['avatar_path'] . "/" . $user_avatar) )

+ {

+ @unlink("./../" . $board_config['avatar_path'] . "/" . $user_avatar);

+ }

+ }

+ $avatar_sql = ", user_avatar = '', user_avatar_type = " . USER_AVATAR_NONE;

+ }

+

+ if( !$error )

+ {

+ if( $HTTP_POST_VARS['deleteuser'] )

+ {

+ $sql = "UPDATE " . POSTS_TABLE . "

+ SET poster_id = '-1', post_username = '$username'

+ WHERE poster_id = $user_id";

+ if( $result = $db->sql_query($sql) )

+ {

+ $sql = "UPDATE " . TOPICS_TABLE . "

+ SET topic_poster = '-1'

+ WHERE topic_poster = $user_id";

+ if( $result = $db->sql_query($sql) )

+ {

+ $sql = "DELETE FROM " . USERS_TABLE . "

+ WHERE user_id = $user_id";

+ if( $result = $db->sql_query($sql) )

+ {

+ $sql = "DELETE FROM " . USER_GROUP_TABLE . "

+ WHERE user_id = $user_id";

+ $result = @$db->sql_query($sql);

+

+ $message = $lang['User_deleted'];

+ }

+ else

+ {

+ $error = TRUE;

+ }

+ }

+ else

+ {

+ $error = TRUE;

+ }

+ }

+ else

+ {

+ $error = TRUE;

+ }

+

+ if( $error == TRUE )

+ {

+ $error_msg .= $lang['Admin_user_fail'];

+ }

+ }

+ else

+ {

+ $sql = "UPDATE " . USERS_TABLE . "

+ SET " . $username_sql . $passwd_sql . "user_email = '$email', user_icq = '$icq', user_website = '$website', user_occ = '$occupation', user_from = '$location', user_interests = '$interests', user_sig = '$signature', user_viewemail = $viewemail, user_aim = '$aim', user_yim = '$yim', user_msnm = '$msn', user_attachsig = $attachsig, user_sig_bbcode_uid = '$signature_bbcode_uid', user_allowsmile = $allowsmilies, user_allowhtml = $allowhtml, user_allowavatar = $user_allowavatar, user_allowbbcode = $allowbbcode, user_allow_viewonline = $allowviewonline, user_allow_pm = $user_allowpm, user_notify_pm = $notifypm, user_popup_pm = $popuppm, user_lang = '$user_lang', user_style = $user_style, user_timezone = $user_timezone, user_dateformat = '$user_dateformat', user_active = $user_status, user_actkey = '$user_actkey', user_rank = $user_rank" . $avatar_sql . "

+ WHERE user_id = $user_id";

+ if( $result = $db->sql_query($sql) )

+ {

+ $message .= $lang['Admin_user_updated'];

+ }

+ else

+ {

+ $error = TRUE;

+ $error_msg .= $lang['Admin_user_fail'];

+ }

+ }

+

+ $message .= "<br /><br />" . sprintf($lang['Click_return_useradmin'], "<a href=\"" . append_sid("admin_users.$phpEx") . "\">", "</a>") . "<br /><br />" . sprintf($lang['Click_return_admin_index'], "<a href=\"" . append_sid("index.$phpEx?pane=right") . "\">", "</a>");

+

+ message_die(GENERAL_MESSAGE, $message);

+ }

+ else

+ {

+ $template->set_filenames(array(

+ "reg_header" => "error_body.tpl")

+ );

+ $template->assign_vars(array(

+ "ERROR_MESSAGE" => $error_msg)

+ );

+ $template->assign_var_from_handle("ERROR_BOX", "reg_header");

+

+ $username = stripslashes($username);

+ $email = stripslashes($email);

+ $password = "";

+ $password_confirm = "";

+

+ $icq = stripslashes($icq);

+ $aim = stripslashes($aim);

+ $msn = stripslashes($msn);

+ $yim = stripslashes($yim);

+

+ $website = stripslashes($website);

+ $location = stripslashes($location);

+ $occupation = stripslashes($occupation);

+ $interests = stripslashes($interests);

+ $signature = stripslashes($signature);

+

+ $user_lang = stripslashes($user_lang);

+ $user_dateformat = stripslashes($user_dateformat);

+ }

+ // Let's find out a little about them...

+ if( !isset($HTTP_POST_VARS['submit']) && $mode != "save" )

+ {

+ if( isset($HTTP_GET_VARS[POST_USERS_URL]) || isset($HTTP_POST_VARS[POST_USERS_URL]) )

+ {

+ $user_id = ( isset($HTTP_POST_VARS[POST_USERS_URL]) ) ? $HTTP_POST_VARS[POST_USERS_URL] : $HTTP_GET_VARS[POST_USERS_URL];

+ $this_userdata = get_userdata_from_id($user_id);

+ }

+ else

+ {

+ $this_userdata = get_userdata($HTTP_POST_VARS['username']);

+ }

+

+ //

+ // Now parse and display it as a template

+ //

+ $user_id = $this_userdata['user_id'];

+ $username = $this_userdata['username'];

+ $email = $this_userdata['user_email'];

+ $password = "";

+ $password_confirm = "";

+

+ $icq = $this_userdata['user_icq'];

+ $aim = $this_userdata['user_aim'];

+ $msn = $this_userdata['user_msnm'];

+ $yim = $this_userdata['user_yim'];

+

+ $website = $this_userdata['user_website'];

+ $location = $this_userdata['user_from'];

+ $occupation = $this_userdata['user_occ'];

+ $interests = $this_userdata['user_interests'];

+ $signature = $this_userdata['user_sig'];

+

+ $viewemail = $this_userdata['user_viewemail'];

+ $notifypm = $this_userdata['user_notify_pm'];

+ $popuppm = $userdata['user_popup_pm'];

+ $attachsig = $this_userdata['user_attachsig'];

+ $allowhtml = $this_userdata['user_allowhtml'];

+ $allowbbcode = $this_userdata['user_allowbbcode'];

+ $allowsmilies = $this_userdata['user_allowsmile'];

+ $allowviewonline = $this_userdata['user_allow_viewonline'];

+

+ $user_avatar = $this_userdata['user_avatar'];

+ $user_avatar_type = $this_userdata['user_avatar_type'];

+ $user_style = $this_userdata['user_style'];

+ $user_lang = $this_userdata['user_lang'];

+ $user_timezone = $this_userdata['user_timezone'];

+ $user_dateformat = $this_userdata['user_dateformat'];

+

+ $user_status = $this_userdata['user_active'];

+ $user_allowavatar = $this_userdata['user_allowavatar'];

+ $user_allowpm = $this_userdata['user_allow_pm'];

+

+ $COPPA = false;

+ $html_status = ($this_userdata['user_allowhtml']) ? $lang['HTML_is_ON'] : $lang['HTML_is_OFF'];

+ $bbcode_status = ($this_userdata['user_allowbbcode']) ? $lang['BBCode_is_ON'] : $lang['BBCode_is_OFF'];

+ $smilies_status = ($this_userdata['user_allowsmile']) ? $lang['Smilies_are_ON'] : $lang['Smilies_are_OFF'];

+ }

+ "POPUP_PM_YES" => ($popuppm) ? "checked=\"checked\"" : "",

+ "POPUP_PM_NO" => (!$popuppm) ? "checked=\"checked\"" : "",

+ "L_USER_TITLE" => $lang['User_admin'],

+ "L_USER_EXPLAIN" => $lang['User_admin_explain'],

+ "L_POPUP_ON_PRIVMSG" => $lang['Popup_on_privmsg'],

+ "L_USER_TITLE" => $lang['User_admin'],

+ "L_USER_SELECT" => $lang['Select_a_User'],

+

+ if( $userdata['user_popup_pm'] )

+ {

+ $template->assign_block_vars("switch_enable_pm_popup", array());

+ }

+$lang['Notify_on_privmsg'] = "Notify on new Private Message";

+$lang['Popup_on_privmsg'] = "Pop up window on new Private Message";

+$lang['Popup_on_privmsg_explain'] = "Some templates may open a new window to inform you when new private messages arrive";

+ $popuppm = (isset($HTTP_POST_VARS['popup_pm'])) ? ( ($HTTP_POST_VARS['popup_pm']) ? TRUE : 0 ) : TRUE;

+ SET " . $username_sql . $passwd_sql . "user_email = '$email', user_icq = '$icq', user_website = '$website', user_occ = '$occupation', user_from = '$location', user_interests = '$interests', user_sig = '$signature', user_sig_bbcode_uid = '$signature_bbcode_uid', user_viewemail = $viewemail, user_aim = '$aim', user_yim = '$yim', user_msnm = '$msn', user_attachsig = $attachsig, user_allowsmile = $allowsmilies, user_allowhtml = $allowhtml, user_allowbbcode = $allowbbcode, user_allow_viewonline = $allowviewonline, user_notify = $notifyreply, user_notify_pm = $notifypm, user_popup_pm = $popuppm, user_timezone = $user_timezone, user_dateformat = '$user_dateformat', user_lang = '$user_lang', user_style = $user_style, user_active = $user_active, user_actkey = '$user_actkey'" . $avatar_sql . "

+ $sql = "INSERT INTO " . USERS_TABLE . " (user_id, username, user_regdate, user_password, user_email, user_icq, user_website, user_occ, user_from, user_interests, user_sig, user_sig_bbcode_uid, user_avatar, user_viewemail, user_aim, user_yim, user_msnm, user_attachsig, user_allowsmile, user_allowhtml, user_allowbbcode, user_allow_viewonline, user_notify, user_notify_pm, user_popup_pm, user_timezone, user_dateformat, user_lang, user_style, user_level, user_allow_pm, user_active, user_actkey)

+ VALUES ($new_user_id, '$username', " . time() . ", '$password', '$email', '$icq', '$website', '$occupation', '$location', '$interests', '$signature', '$signature_bbcode_uid', '$avatar_filename', $viewemail, '$aim', '$yim', '$msn', $attachsig, $allowsmilies, $allowhtml, $allowbbcode, $allowviewonline, $notifyreply, $notifypm, $popuppm $user_timezone, '$user_dateformat', '$user_lang', $user_style, 0, 1, ";

+ $popuppm = $userdata['user_popup_pm'];

+ $s_hidden_vars .= '<input type="hidden" name="popup_pm" value="' . $popuppm . '" />';

+ "POPUP_PM_YES" => ($popuppm) ? "checked=\"checked\"" : "",

+ "POPUP_PM_NO" => (!$popuppm) ? "checked=\"checked\"" : "",

+ "L_POPUP_ON_PRIVMSG" => $lang['Popup_on_privmsg'],

+ "L_POPUP_ON_PRIVMSG_EXPLAIN" => $lang['Popup_on_privmsg_explain'],

+{ERROR_BOX}

+

+ <td class="row1"><span class="gen">{L_POPUP_ON_PRIVMSG}:</span></td>

+ <td class="row2">

+ <input type="radio" name="popup_pm" value="1" {POPUP_PM_YES} />

+ <span class="gen">{L_YES}</span>&nbsp;&nbsp;

+ <input type="radio" name="popup_pm" value="0" {POPUP_PM_NO} />

+ <span class="gen">{L_NO}</span></td>

+ </tr>

+ <tr>

+ <td class="row1"><span class="gen">{L_POPUP_ON_PRIVMSG}:</span><br /><span class="gensmall">{L_POPUP_ON_PRIVMSG_EXPLAIN}</span></td>

+ <td class="row2">

+ <input type="radio" name="popup_pm" value="1" {POPUP_PM_YES} />

+ <span class="gen">{L_YES}</span>&nbsp;&nbsp;

+ <input type="radio" name="popup_pm" value="0" {POPUP_PM_NO} />

+ <span class="gen">{L_NO}</span></td>

+ </tr>

+ <tr>