+function user_get_id_name(&$user_id_ary, &$username_ary, $only_active = false)

+ $sql_in = ($which_ary == 'user_id_ary') ? array_map('intval', $$which_ary) : array_map('utf8_clean_string', $$which_ary);

+ $sql_where = ($which_ary == 'user_id_ary') ? 'user_id' : 'username_clean';

+

+ if ($only_active)

+ {

+ $sql .= ' AND user_type IN (' . USER_NORMAL . ', ' . USER_FOUNDER . ')';

+ }

+

+ 'username_clean' => utf8_clean_string($user_row['username']),

+ 'user_passchg' => time(),

+ 'user_inactive_reason' => 0,

+ 'user_inactive_time' => 0,

+ 'user_interests' => '',

+ global $cache, $config, $db, $user, $auth;

+ global $phpbb_root_path, $phpEx;

+

+ if ($post_username === false)

+ {

+ $post_username = $user->lang['GUEST'];

+ }

+

+ SET forum_last_poster_id = ' . ANONYMOUS . ", forum_last_poster_name = '" . $db->sql_escape($post_username) . "', forum_last_poster_colour = ''

+ SET poster_id = ' . ANONYMOUS . ", post_username = '" . $db->sql_escape($post_username) . "'

+ $sql = 'UPDATE ' . POSTS_TABLE . '

+ SET post_edit_user = ' . ANONYMOUS . "

+ WHERE post_edit_user = $user_id";

+ $db->sql_query($sql);

+

+ SET topic_poster = ' . ANONYMOUS . ", topic_first_poster_name = '" . $db->sql_escape($post_username) . "', topic_first_poster_colour = ''

+ SET topic_last_poster_id = ' . ANONYMOUS . ", topic_last_poster_name = '" . $db->sql_escape($post_username) . "', topic_last_poster_colour = ''

+

+ // Since we change every post by this author, we need to count this amount towards the anonymous user

+ $sql = 'SELECT user_posts

+ FROM ' . USERS_TABLE . '

+ WHERE user_id = ' . $user_id;

+ $result = $db->sql_query($sql);

+ $num_posts = (int) $db->sql_fetchfield('user_posts');

+ $db->sql_freeresult($result);

+

+ // Update the post count for the anonymous user

+ if ($num_posts)

+ {

+ $sql = 'UPDATE ' . USERS_TABLE . '

+ SET user_posts = user_posts + ' . $num_posts . '

+ WHERE user_id = ' . ANONYMOUS;

+ $db->sql_query($sql);

+ }

+ $table_ary = array(USERS_TABLE, USER_GROUP_TABLE, TOPICS_WATCH_TABLE, FORUMS_WATCH_TABLE, ACL_USERS_TABLE, TOPICS_TRACK_TABLE, TOPICS_POSTED_TABLE, FORUMS_TRACK_TABLE, PROFILE_FIELDS_DATA_TABLE, MODERATOR_CACHE_TABLE);

+ $cache->destroy('sql', MODERATOR_CACHE_TABLE);

+

+ include_once($phpbb_root_path . 'includes/functions_privmsgs.' . $phpEx);

+

+ // Remove any undelivered mails...

+ $sql = 'SELECT msg_id, user_id

+ FROM ' . PRIVMSGS_TO_TABLE . '

+ WHERE author_id = ' . $user_id . '

+ AND folder_id = ' . PRIVMSGS_NO_BOX;

+ $result = $db->sql_query($sql);

+

+ $undelivered_msg = $undelivered_user = array();

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $undelivered_msg[] = $row['msg_id'];

+ $undelivered_user[$row['user_id']][] = true;

+ }

+ $db->sql_freeresult($result);

+

+ if (sizeof($undelivered_msg))

+ {

+ $sql = 'DELETE FROM ' . PRIVMSGS_TABLE . '

+ WHERE ' . $db->sql_in_set('msg_id', $undelivered_msg);

+ $db->sql_query($sql);

+ }

+

+ $sql = 'DELETE FROM ' . PRIVMSGS_TO_TABLE . '

+ WHERE author_id = ' . $user_id . '

+ AND folder_id = ' . PRIVMSGS_NO_BOX;

+ $db->sql_query($sql);

+

+ // Delete all to-informations

+ $sql = 'DELETE FROM ' . PRIVMSGS_TO_TABLE . '

+ WHERE user_id = ' . $user_id;

+ $db->sql_query($sql);

+

+ // Set the remaining author id to anonymous - this way users are still able to read messages from users being removed

+ $sql = 'UPDATE ' . PRIVMSGS_TO_TABLE . '

+ SET author_id = ' . ANONYMOUS . '

+ WHERE author_id = ' . $user_id;

+ $db->sql_query($sql);

+

+ $sql = 'UPDATE ' . PRIVMSGS_TABLE . '

+ SET author_id = ' . ANONYMOUS . '

+ WHERE author_id = ' . $user_id;

+ $db->sql_query($sql);

+

+ foreach ($undelivered_user as $_user_id => $ary)

+ {

+ if ($_user_id == $user_id)

+ {

+ continue;

+ }

+

+ $sql = 'UPDATE ' . USERS_TABLE . '

+ SET user_new_privmsg = user_new_privmsg - ' . sizeof($ary) . ',

+ user_unread_privmsg = user_unread_privmsg - ' . sizeof($ary) . '

+ WHERE user_id = ' . $_user_id;

+ $db->sql_query($sql);

+ }

+

+* Flips user_type from active to inactive and vice versa, handles group membership updates

+*

+* @param string $mode can be flip for flipping from active/inactive, activate or deactivate

+function user_active_flip($mode, $user_id_ary, $reason = INACTIVE_MANUAL)

+ global $config, $db, $user, $auth;

+ $deactivated = $activated = 0;

+ $sql_statements = array();

+ if (!is_array($user_id_ary))

+ $user_id_ary = array($user_id_ary);

+ }

+

+ if (!sizeof($user_id_ary))

+ {

+ return;

+ $sql = 'SELECT user_id, group_id, user_type, user_inactive_reason

+ FROM ' . USERS_TABLE . '

+ WHERE ' . $db->sql_in_set('user_id', $user_id_ary);

+ $sql_ary = array();

+

+ if ($row['user_type'] == USER_IGNORE || $row['user_type'] == USER_FOUNDER ||

+ ($mode == 'activate' && $row['user_type'] != USER_INACTIVE) ||

+ ($mode == 'deactivate' && $row['user_type'] == USER_INACTIVE))

+ continue;

+ if ($row['user_type'] == USER_INACTIVE)

+ {

+ $activated++;

+ }

+ else

+ {

+ $deactivated++;

+ // Remove the users session key...

+ $user->reset_login_keys($row['user_id']);

+ }

+ $sql_ary += array(

+ 'user_type' => ($row['user_type'] == USER_NORMAL) ? USER_INACTIVE : USER_NORMAL,

+ 'user_inactive_time' => ($row['user_type'] == USER_NORMAL) ? time() : 0,

+ 'user_inactive_reason' => ($row['user_type'] == USER_NORMAL) ? $reason : 0,

+ );

+ $sql_statements[$row['user_id']] = $sql_ary;

+ }

+ $db->sql_freeresult($result);

+ if (sizeof($sql_statements))

+ foreach ($sql_statements as $user_id => $sql_ary)

+ {

+ $sql = 'UPDATE ' . USERS_TABLE . '

+ SET ' . $db->sql_build_array('UPDATE', $sql_ary) . '

+ WHERE user_id = ' . $user_id;

+ $db->sql_query($sql);

+ }

+

+ $auth->acl_clear_prefetch(array_keys($sql_statements));

+ if ($deactivated)

+ set_config('num_users', $config['num_users'] - $deactivated, true);

+ if ($activated)

+ set_config('num_users', $config['num_users'] + $activated, true);

+ // Update latest username

+ update_last_username();

+ $sql_usernames[] = utf8_clean_string($username);

+ WHERE ' . $db->sql_in_set('username_clean', $sql_usernames);

+ // Do not allow banning yourself

+ $sql .= ' AND ' . $db->sql_in_set('user_id', array_merge(array_keys($founder), array($user->data['user_id'])), true);

+ }

+ else

+ {

+ $sql .= ' AND user_id <> ' . $user->data['user_id'];

+ $db->sql_multi_insert(BANLIST_TABLE, $sql_ary);

+ if ($min && utf8_strlen(htmlspecialchars_decode($string)) < $min)

+ else if ($max && utf8_strlen(htmlspecialchars_decode($string)) > $max)

+* @todo do we really check and disallow the " character in usernames as written above. Has it only be forgotten to include the check?

+ global $config, $db, $user, $cache;

+ $clean_username = utf8_clean_string($username);

+

+ if (utf8_clean_string($user->data['username']) == $clean_username)

+ if (!preg_match('#^' . str_replace('\\\\', '\\', $config['allow_name_chars']) . '$#i', $username) || strpos($username, '&quot;') !== false || strpos($username, '"') !== false)

+ WHERE username_clean = '" . $db->sql_escape($clean_username) . "'";

+ WHERE LOWER(group_name) = '" . $db->sql_escape(utf8_strtolower($username)) . "'";

+ $bad_usernames = $cache->obtain_disallowed_usernames();

+

+ foreach ($bad_usernames as $bad_username)

+ if (preg_match('#^' . $bad_username . '#', $clean_username))

+* Check to see if the password meets the complexity settings

+*

+* @return boolean|string Either false if validation succeeded or a string which will be used as the error message (with the variable name appended)

+*/

+function validate_password($password)

+{

+ global $config, $db, $user;

+

+ if (!$password)

+ {

+ return false;

+ }

+

+ // We only check for existance of characters

+ if (!preg_match('#' . str_replace('\\\\', '\\', $config['pass_complex']) . '#i', $password))

+ {

+ return 'INVALID_CHARS';

+ }

+

+ return false;

+}

+

+/**

+ // Check MX record.

+ // The idea for this is from reading the UseBB blog/announcement. :)

+ if ($config['email_check_mx'])

+ {

+ list(, $domain) = explode('@', $email);

+

+ if (phpbb_checkdnsrr($domain, 'MX') === false)

+ {

+ return 'DOMAIN_NO_MX_RECORD';

+ }

+ }

+

+function avatar_delete($mode, $row)

+ // Check if the users avatar is actually *not* a group avatar

+ if ($mode == 'user')

+ if (strpos($row['user_avatar'], 'g' . $row['group_id'] . '_') === 0 || strpos($row['user_avatar'], $row['user_id'] . '_') !== 0)

+ {

+ return false;

+ }

+ }

+

+ if (file_exists($phpbb_root_path . $config['avatar_path'] . '/' . basename($row[$mode . '_avatar'])))

+ {

+ @unlink($phpbb_root_path . $config['avatar_path'] . '/' . basename($row[$mode . '_avatar']));

+ return true;

+ global $config, $db, $user, $phpbb_root_path, $phpEx;

+ // Check image type

+ include_once($phpbb_root_path . 'includes/functions_upload.' . $phpEx);

+ $types = fileupload::image_types();

+ $extension = strtolower(filespec::get_extension($data['remotelink']));

+

+ if (!isset($types[$image_data[2]]) || !in_array($extension, $types[$image_data[2]]))

+ {

+ if (!isset($types[$image_data[2]]))

+ {

+ $error[] = $user->lang['UNABLE_GET_IMAGE_SIZE'];

+ }

+ else

+ {

+ $error[] = sprintf($user->lang['IMAGE_FILETYPE_MISMATCH'], $types[$image_data[2]][0], $extension);

+ }

+ return false;

+ }

+

+

+ $destination = $config['avatar_path'];

+

+ if ($destination{(sizeof($destination)-1)} == '/' || $destination{(sizeof($destination)-1)} == '\\')

+ {

+ $destination = substr($destination, 0, sizeof($destination)-2);

+ }

+

+ $destination = str_replace(array('../', '..\\', './', '.\\'), '', $destination);

+ if ($destination && ($destination[0] == '/' || $destination[0] == "\\"))

+ {

+ $destination = '';

+ }

+

+ $file->move_file($destination);

+ if ($file[0] != '.' && is_dir("$path/$file"))

+ if (!utf8_strlen($name) || utf8_strlen($name) > 40)

+ $error[] = (!utf8_strlen($name)) ? $user->lang['GROUP_ERR_USERNAME'] : $user->lang['GROUP_ERR_USER_LONG'];

+ if (utf8_strlen($desc) > 255)

+ $sql_ary[$attribute] = $group_attributes[$attribute];

+ $sql = 'SELECT user_id

+ FROM ' . USERS_TABLE . '

+ WHERE group_id = ' . $group_id;

+ $result = $db->sql_query($sql);

+ $user_ary = array();

+ while ($row = $db->sql_fetchrow($result))

+ {

+ $user_ary[] = $row['user_id'];

+ $db->sql_freeresult($result);

+

+ if (sizeof($user_ary))

+ {

+ group_set_user_default($group_id, $user_ary, $sql_ary);

+ }

+ global $db, $phpbb_root_path, $phpEx;

+ if (!function_exists('cache_moderators'))

+ {

+ include($phpbb_root_path . 'includes/functions_admin.' . $phpEx);

+ }

+

+*

+* @return false if no errors occurred, else the user lang string for the relevant error, for example 'NO_USER'

+ $add_id_ary[] = (int) $row['user_id'];

+ $update_id_ary[] = (int) $row['user_id'];

+ $db->sql_transaction('begin');

+

+ // Insert the new users

+ $sql_ary = array();

+ foreach ($add_id_ary as $user_id)

+ {

+ $sql_ary[] = array(

+ 'user_id' => $user_id,

+ 'group_id' => $group_id,

+ 'group_leader' => $leader,

+ 'user_pending' => $pending,

+ );

+

+ $db->sql_multi_insert(USER_GROUP_TABLE, $sql_ary);

+ $db->sql_transaction('commit');

+

+ group_update_listings($group_id);

+

+ // Return false - no error

+ return false;

+*

+* @return false if no errors occurred, else the user lang string for the relevant error, for example 'NO_USER'

+ 'group_colour' => $row['group_colour'],

+ 'group_rank' => $row['group_rank'],

+ 'group_avatar' => $row['group_avatar'],

+ 'group_avatar_type' => $row['group_avatar_type'],

+ 'group_avatar_width' => $row['group_avatar_width'],

+ 'group_avatar_height' => $row['group_avatar_height'])

+ group_set_user_default($gid, $sql_where_ary[$gid], $special_group_data[$gid]);

+ // Return false - no error

+ return false;

+ 'USERNAME' => htmlspecialchars_decode($row['username']),

+ 'GROUP_NAME' => htmlspecialchars_decode($group_name),

+ $sql = 'SELECT user_id, group_id, user_avatar

+ avatar_delete('user', $row);

+

+ if (in_array('user_colour', array_keys($sql_ary)))

+ {

+ // Update any cached colour information for these users

+ $sql = 'UPDATE ' . FORUMS_TABLE . " SET forum_last_poster_colour = '" . $db->sql_escape($sql_ary['user_colour']) . "'

+ WHERE " . $db->sql_in_set('forum_last_poster_id', $user_id_ary);

+ $db->sql_query($sql);

+

+ $sql = 'UPDATE ' . TOPICS_TABLE . " SET topic_first_poster_colour = '" . $db->sql_escape($sql_ary['user_colour']) . "'

+ WHERE " . $db->sql_in_set('topic_poster', $user_id_ary);

+ $db->sql_query($sql);

+

+ $sql = 'UPDATE ' . TOPICS_TABLE . " SET topic_last_poster_colour = '" . $db->sql_escape($sql_ary['user_colour']) . "'

+ WHERE " . $db->sql_in_set('topic_last_poster_id', $user_id_ary);

+ $db->sql_query($sql);

+ }

+/**

+* Re-cache moderators and foes if group has a_ or m_ permissions

+*/

+function group_update_listings($group_id)

+{

+ global $auth;

+

+ $hold_ary = $auth->acl_group_raw_data($group_id, array('a_', 'm_'));

+

+ if (!sizeof($hold_ary))

+ {

+ return;

+ }

+

+ $mod_permissions = $admin_permissions = false;

+

+ foreach ($hold_ary as $g_id => $forum_ary)

+ {

+ foreach ($forum_ary as $forum_id => $auth_ary)

+ {

+ foreach ($auth_ary as $auth_option => $setting)

+ {

+ if ($mod_permissions && $admin_permissions)

+ {

+ break 3;

+ }

+

+ if ($setting != ACL_YES)

+ {

+ continue;

+ }

+

+ if ($auth_option == 'm_')

+ {

+ $mod_permissions = true;

+ }

+

+ if ($auth_option == 'a_')

+ {

+ $admin_permissions = true;

+ }

+ }

+ }

+ }

+

+ if ($mod_permissions)

+ {

+ if (!function_exists('cache_moderators'))

+ {

+ include($phpbb_root_path . 'includes/functions_admin.' . $phpEx);

+ }

+ cache_moderators();

+ }

+

+ if ($mod_permissions || $admin_permissions)

+ {

+ update_foes();

+ }

+}

+