$submit = (isset($_POST['submit'])) ? true : false;

$action = request_var('action', '');

switch ($mode)

{

case 'attach':

include($phpbb_root_path . 'includes/functions_user.' . $phpEx);

$bansubmit = (isset($_POST['bansubmit'])) ? true : false;

$current_time = time();

$user->add_lang(array('acp/ban', 'acp/users'));

$this->tpl_name = 'acp_ban';

// Ban submitted?

if ($bansubmit)

$this->tpl_name = 'acp_bbcodes';

$this->page_title = 'ACP_BBCODES';

// Set up mode-specific vars

switch ($action)

$action = request_var('action', '');

$submit = (isset($_POST['submit'])) ? true : false;

/**

* Validation types are:

* string, int, bool,

'chg_passforce' => array('lang' => 'FORCE_PASS_CHANGE', 'validate' => 'int', 'type' => 'text:3:3', 'explain' => true, 'append' => ' ' . $user->lang['DAYS']),

'max_login_attempts' => array('lang' => 'MAX_LOGIN_ATTEMPTS', 'validate' => 'int', 'type' => 'text:3:3', 'explain' => true),

'tpl_allow_php' => array('lang' => 'TPL_ALLOW_PHP', 'validate' => 'bool', 'type' => 'radio:yes_no', 'explain' => true),

)

);

break;

// We validate the complete config if whished

validate_config_vars($display_vars['vars'], $cfg_array, $error);

// Do not write values if there is an error

if (sizeof($error))

{

$user->add_lang('acp/bots');

$this->tpl_name = 'acp_bots';

$this->page_title = 'ACP_BOTS';

// User wants to do something, how inconsiderate of them!

switch ($action)

$this->tpl_name = 'acp_captcha';

$this->page_title = 'ACP_VC_SETTINGS';

$submit = request_var('submit', '');

{

$config_vars = array_keys($config_vars);

foreach ($config_vars as $config_var)

}

trigger_error($user->lang['CONFIG_UPDATED'] . adm_back_link($this->u_action));

}

else

{

$this->tpl_name = 'acp_disallow';

$this->page_title = 'ACP_DISALLOW_USERNAMES';

$disallow = (isset($_POST['disallow'])) ? true : false;

$allow = (isset($_POST['allow'])) ? true : false;

if ($disallow)

{

$disallowed_user = str_replace('*', '%', utf8_normalize_nfc(request_var('disallowed_user', '', true)));

$this->tpl_name = 'acp_email';

$this->page_title = 'ACP_MASS_EMAIL';

// Set some vars

$submit = (isset($_POST['submit'])) ? true : false;

$error = array();

$use_queue = (isset($_POST['send_immediately'])) ? false : true;

$priority = request_var('mail_priority_flag', MAIL_NORMAL_PRIORITY);

if (!$subject)

{

$error[] = $user->lang['NO_EMAIL_SUBJECT'];

$this->tpl_name = 'acp_forums';

$this->page_title = 'ACP_MANAGE_FORUMS';

$action = request_var('action', '');

$update = (isset($_POST['update'])) ? true : false;

$forum_id = request_var('f', 0);

$forum_data = $errors = array();

// Check additional permissions

switch ($action)

{

$this->tpl_name = 'acp_groups';

$this->page_title = 'ACP_GROUPS_MANAGE';

include($phpbb_root_path . 'includes/functions_user.' . $phpEx);

// Check and set some common vars

$start = request_var('start', 0);

$update = (isset($_POST['update'])) ? true : false;

// Clear some vars

$can_upload = (file_exists($phpbb_root_path . $config['avatar_path']) && @is_writable($phpbb_root_path . $config['avatar_path']) && $file_uploads) ? true : false;

$group_row = array();

$error = array();

$user->add_lang('ucp');

$avatar_select = basename(request_var('avatar_select', ''));

$category = basename(request_var('category', ''));

// Did we submit?

if ($update)

{

$group_name = utf8_normalize_nfc(request_var('group_name', '', true));

$group_desc = utf8_normalize_nfc(request_var('group_desc', '', true));

$group_type = request_var('group_type', GROUP_FREE);

$action = request_var('action', '');

$mark = (isset($_REQUEST['mark'])) ? request_var('mark', array(0)) : array();

$start = request_var('start', 0);

// Sort keys

$sort_days = request_var('st', 0);

$sort_key = request_var('sk', 'i');

$sort_dir = request_var('sd', 'd');

{

switch ($action)

{

case 'activate':

$jab_package_size = request_var('jab_package_size', $config['jab_package_size']);

$jab_use_ssl = request_var('jab_use_ssl', $config['jab_use_ssl']);

if ($submit)

{

$error = array();

$message = $user->lang['JAB_SETTINGS_CHANGED'];

$this->default_variables();

// Check and set some common vars

$lang_id = request_var('id', 0);

if (isset($_POST['missing_file']))

$this->tpl_name = 'acp_language';

$this->page_title = 'ACP_LANGUAGE_PACKS';

{

$test_connection = false;

$action = 'upload_file';

switch ($action)

{

case 'upload_file':

include_once($phpbb_root_path . 'includes/functions_transfer.' . $phpEx);

$method = request_var('method', '');

case 'update_details':

if (!$lang_id)

{

trigger_error($user->lang['NO_LANG_ID'] . adm_back_link($this->u_action), E_USER_WARNING);

case 'submit_file':

case 'download_file':

case 'upload_data':

if (!$lang_id || empty($_POST['entry']))

{

$action = request_var('action', '');

$action = (isset($_POST['add'])) ? 'add' : $action;

switch ($mode)

{

case 'admin_roles':

case 'add':

$role_name = utf8_normalize_nfc(request_var('role_name', '', true));

$role_description = utf8_normalize_nfc(request_var('role_description', '', true));

$auth_settings = request_var('setting', array('' => 0));

$this->permission_trace($user_id, $forum_id, $permission);

return;

}

trigger_error('NO_MODE', E_USER_ERROR);

}

$group_id = request_var('group_id', array(0));

$select_all_groups = request_var('select_all_groups', 0);

// If select all groups is set, we pre-build the group id array (this option is used for other screens to link to the permission settings screen)

if ($select_all_groups)

{

switch ($action)

{

case 'delete':

// All users/groups selected?

$all_users = (isset($_POST['all_users'])) ? true : false;

$all_groups = (isset($_POST['all_groups'])) ? true : false;

{

trigger_error($user->lang['NO_AUTH_SETTING_FOUND'] . adm_back_link($this->u_action), E_USER_WARNING);

}

$this->set_permissions($mode, $permission_type, $auth_admin, $user_id, $group_id);

break;

{

trigger_error($user->lang['NO_AUTH_SETTING_FOUND'] . adm_back_link($this->u_action), E_USER_WARNING);

}

$this->set_all_permissions($mode, $permission_type, $auth_admin, $user_id, $group_id);

break;

$this->tpl_name = 'acp_ranks';

$this->page_title = 'ACP_MANAGE_RANKS';

switch ($action)

{

case 'save':

$rank_title = utf8_normalize_nfc(request_var('title', '', true));

$special_rank = request_var('special_rank', 0);

$min_posts = ($special_rank) ? 0 : request_var('min_posts', 0);

case 'edit':

case 'add':

$data = $ranks = $existing_imgs = array();

$sql = 'SELECT *

$this->tpl_name = 'acp_reasons';

$this->page_title = 'ACP_REASONS';

$error = array();

switch ($action)

if ($submit)

{

// Reason specified?

if (!$reason_row['reason_title'] || !$reason_row['reason_description'])

{

$submit = (isset($_POST['update'])) ? true : false;

// Whois (special case)

if ($action == 'whois')

{

trigger_error($user->lang['CANNOT_BAN_FOUNDER'] . adm_back_link($this->u_action . '&u=' . $user_id), E_USER_WARNING);

}

$ban = array();

switch ($action)

trigger_error($user->lang['CANNOT_FORCE_REACT_YOURSELF'] . adm_back_link($this->u_action . '&u=' . $user_id), E_USER_WARNING);

}

if ($user_row['user_type'] == USER_FOUNDER)

{

trigger_error($user->lang['CANNOT_FORCE_REACT_FOUNDER'] . adm_back_link($this->u_action . '&u=' . $user_id), E_USER_WARNING);

trigger_error($user->lang['CANNOT_DEACTIVATE_YOURSELF'] . adm_back_link($this->u_action . '&u=' . $user_id), E_USER_WARNING);

}

if ($user_row['user_type'] == USER_FOUNDER)

{

trigger_error($user->lang['CANNOT_DEACTIVATE_FOUNDER'] . adm_back_link($this->u_action . '&u=' . $user_id), E_USER_WARNING);

case 'delsig':

$sql_ary = array(

'user_sig' => '',

'user_sig_bbcode_uid' => '',

break;

case 'delavatar':

$sql_ary = array(

'user_avatar' => '',

'user_avatar_type' => 0,

case 'moveposts':

$user->add_lang('acp/forums');

$new_forum_id = request_var('new_f', 0);

$error[] = 'NEW_EMAIL_ERROR';

}

// Which updates do we need to do?

$update_username = ($user_row['username'] != $data['username']) ? $data['username'] : false;

$update_password = ($data['new_password'] && $user_row['user_password'] != md5($data['new_password'])) ? true : false;

// Delete entries if requested and able

if (($deletemark || $deleteall) && $auth->acl_get('a_clearlogs'))

{

$where_sql = '';

if ($deletemark && $marked)

{

if ($submit && $message)

{

add_log('admin', 'LOG_USER_FEEDBACK', $user_row['username']);

add_log('mod', 0, 0, 'LOG_USER_FEEDBACK', $user_row['username']);

add_log('user', $user_id, 'LOG_USER_GENERAL', $message);

{

$error = array_merge($error, $cp_error);

}

if (!sizeof($error))

{

'post_sd' => array('string', false, 1, 1),

));

if (!sizeof($error))

{

$this->optionset($user_row, 'popuppm', $data['popuppm']);

if ($submit)

{

if (avatar_process_user($error, $user_row))

{

trigger_error($user->lang['USER_AVATAR_UPDATED'] . adm_back_link($this->u_action . '&u=' . $user_row['user_id']));

if ($submit)

{

$rank_id = request_var('user_rank', 0);

$sql = 'UPDATE ' . USERS_TABLE . "

{

$error[] = implode('<br />', $message_parser->warn_msg);

}

if (!sizeof($error) && $submit)

{

$sql_ary = array(

// Add user to group?

if ($submit)

{

if (!$group_id)

{

trigger_error($user->lang['NO_GROUP'] . adm_back_link($this->u_action . '&amp;u=' . $user_id), E_USER_WARNING);

$this->tpl_name = 'acp_words';

$this->page_title = 'ACP_WORDS';

switch ($action)

{

case 'edit':

break;

case 'save':

$word_id = request_var('id', 0);

$word = utf8_normalize_nfc(request_var('word', '', true));

$replacement = utf8_normalize_nfc(request_var('replacement', '', true));

);

}

// Message/Login boxes

/**

}

$sql_insert_ary = array();

for ($i = 0, $size = sizeof($poll['poll_options']); $i < $size; $i++)

{

if (strlen(trim($poll['poll_options'][$i])))

$db->sql_query($sql);

}

}

}

$db->sql_multi_insert(POLL_OPTIONS_TABLE, $sql_insert_ary);

$ban_exclude = request_var('banexclude', 0);

$ban_reason = utf8_normalize_nfc(request_var('banreason', '', true));

$ban_give_reason = utf8_normalize_nfc(request_var('bangivereason', '', true));

if ($ban)

{

$sk = request_var('sk', 'b');

$sd = request_var('sd', 'd');

$sql_where = ($user_id) ? "user_id = $user_id" : "username_clean = '" . $db->sql_escape(utf8_clean_string($username)) . "'";

$sql = 'SELECT *

if ($where_sql || $deleteall)

{

$redirect = $this->u_action . '&amp;u=' . $user_id;

meta_refresh(3, $redirect);

trigger_error($user->lang[$msg] . '<br /><br />' . sprintf($user->lang['RETURN_PAGE'], '<a href="' . $redirect . '">', '</a>'));

if ($usernote && $action == 'add_feedback')

{

$redirect = $this->u_action;

meta_refresh(3, $redirect);

}

// Generate the appropriate user information for the user we are looking at

// Get post data

$post_info = get_post_data(array($post_id), false, true);

if (!sizeof($post_info))

{

trigger_error('POST_NOT_EXIST');

if ($auth->acl_get('m_chgposter', $post_info['forum_id']))

{

}

break;

$to_forum_id = request_var('to_forum_id', 0);

$post_id_list = request_var('post_id_list', array(0));

$sort = isset($_POST['sort']) ? true : false;

// Split Topic?

if ($action == 'split_all' || $action == 'split_beyond')

{

if ($total == -1)

{

$total = $topic_info['topic_replies'] + 1;

$posts_per_page = max(0, request_var('posts_per_page', intval($config['posts_per_page'])));

if ($posts_per_page == 0)

{

'S_POST_UNAPPROVED' => ($row['post_approved']) ? false : true,

'S_CHECKED' => ($post_id_list && in_array(intval($row['post_id']), $post_id_list)) ? true : false,

'S_HAS_ATTACHMENTS' => (!empty($attachments[$row['post_id']])) ? true : false,

'U_POST_DETAILS' => "$url&amp;i=$id&amp;p={$row['post_id']}&amp;mode=post_details" . (($forum_id) ? "&amp;f=$forum_id" : ''),

'U_MCP_APPROVE' => ($auth->acl_get('m_approve', $topic_info['forum_id'])) ? append_sid("{$phpbb_root_path}mcp.$phpEx", 'i=queue&amp;mode=approve_details&amp;f=' . $topic_info['forum_id'] . '&amp;p=' . $row['post_id']) : '',

'U_MCP_REPORT' => ($auth->acl_get('m_report', $topic_info['forum_id'])) ? append_sid("{$phpbb_root_path}mcp.$phpEx", 'i=reports&amp;mode=report_details&amp;f=' . $topic_info['forum_id'] . '&amp;p=' . $row['post_id']) : '')

}

}

}

$s_hidden_fields = build_hidden_fields(array(

'st_old' => $sort_days,

));

$template->assign_vars(array(

'TOPIC_TITLE' => $topic_info['topic_title'],

'U_VIEW_TOPIC' => append_sid("{$phpbb_root_path}viewtopic.$phpEx", 'f=' . $topic_info['forum_id'] . '&amp;t=' . $topic_info['topic_id']),

'S_REPORT_VIEW' => ($action == 'reports') ? true : false,

'S_MERGE_VIEW' => ($action == 'merge') ? true : false,

'S_SPLIT_VIEW' => ($action == 'split') ? true : false,

'S_HIDDEN_FIELDS' => $s_hidden_fields,

'S_SHOW_TOPIC_ICONS' => $s_topic_icons,

$this->page_title = 'MCP_WARN';

switch ($mode)

{

case 'front':

if ($warning && $action == 'add_warning')

{

$redirect = append_sid("{$phpbb_root_path}mcp.$phpEx", "i=notes&amp;mode=user_notes&amp;u=$user_id");

meta_refresh(2, $redirect);

trigger_error($user->lang['USER_WARNING_ADDED'] . '<br /><br />' . sprintf($user->lang['RETURN_PAGE'], '<a href="' . $redirect . '">', '</a>'));

if ($warning && $action == 'add_warning')

{

$redirect = append_sid("{$phpbb_root_path}mcp.$phpEx", "i=notes&amp;mode=user_notes&amp;u=$user_id");

meta_refresh(2, $redirect);

}

// Generate the appropriate user information for the user we are looking at

$this->set_cookie('sid', $this->session_id, $cookie_expire);

unset($cookie_expire);

}

else

{

$this->page_title = 'UCP_USERGROUPS_MANAGE';

$action = (isset($_POST['addusers'])) ? 'addusers' : request_var('action', '');

$group_id = request_var('g', 0);

if ($group_id)

{

}

}

if (!sizeof($error))

{

// Only set the rank, colour, etc. if it's changed or if we're adding a new

$user->add_lang('viewforum');

$unwatch = (isset($_POST['unwatch'])) ? true : false;

if ($unwatch)

{

{

{

}

}

}

$forbidden_forums = array();

$s_hidden_fields = ($edit) ? '<input type="hidden" name="edit" value="' . $draft_id . '" />' : '';

$draft_subject = $draft_message = '';

if ($delete)

{

{

}

}

if ($submit && $edit)

{

$draft_subject = utf8_normalize_nfc(request_var('subject', '', true));

$draft_message = utf8_normalize_nfc(request_var('message', '', true));

{

}

else

{

}

}

{

$action = 'post';

}

// Grab only parameters needed here

$to_user_id = request_var('u', 0);

if ($submit || $preview || $refresh)

{

$subject = utf8_normalize_nfc(request_var('subject', '', true));

$message_parser->message = utf8_normalize_nfc(request_var('message', '', true));

$redirect_url = append_sid("{$phpbb_root_path}ucp.$phpEx", "i=pm&amp;mode=options");

// Change "full folder" setting - what to do if folder is full

if (isset($_POST['fullfolder']))

{

$full_action = request_var('full_action', 0);

$set_folder_id = 0;

// Add Folder

if (isset($_POST['addfolder']))

{

{

{

}

}

// Rename folder

if (isset($_POST['rename_folder']))

{

{

meta_refresh(3, $redirect_url);

trigger_error($message);

}

// Add Rule

if (isset($_POST['add_rule']))

{

{

meta_refresh(3, $redirect_url);

trigger_error($message);

}

switch ($mode)

{

case 'personal':

$data = array(

'notifymethod' => request_var('notifymethod', $user->data['user_notify_type']),

'dateformat' => request_var('dateformat', $user->data['user_dateformat'], true),

'tz' => array('num', false, -14, 14),

));

if (!sizeof($error))

{

$user->optionset('popuppm', $data['popuppm']);

case 'view':

$data = array(

'topic_sk' => request_var('topic_sk', (!empty($user->data['user_topic_sortby_type'])) ? $user->data['user_topic_sortby_type'] : 't'),

'topic_sd' => request_var('topic_sd', (!empty($user->data['user_topic_sortby_dir'])) ? $user->data['user_topic_sortby_dir'] : 'd'),

'post_sd' => array('string', false, 1, 1),

));

if (!sizeof($error))

{

$user->optionset('viewimg', $data['images']);

'sig' => request_var('sig', $user->optionget('attachsig')),

'notify' => request_var('notify', $user->data['user_notify']),

);

if ($submit)

{

meta_refresh(3, $this->u_action);

trigger_error($message);

}

'password_confirm' => request_var('password_confirm', '', true),

);

if ($submit)

{

// Do not check cur_password, it is the old one.

$error[] = 'NEW_EMAIL_ERROR';

}

if (!sizeof($error))

{

$sql_ary = array(

trigger_error($message);

}

// Replace "error" strings with their real, localised form

$error = preg_replace('#^([A-Z_]+)$#e', "(!empty(\$user->lang['\\1'])) ? \$user->lang['\\1'] : '\\1'", $error);

}

$data['bday_year'] = request_var('bday_year', $data['bday_year']);

}

if ($submit)

{

$validate_array = array(

$error = array_merge($error, $cp_error);

}

if (!sizeof($error))

{

$sql_ary = array(

$signature = utf8_normalize_nfc(request_var('signature', (string) $user->data['user_sig'], true));

if ($submit || $preview)

{

include($phpbb_root_path . 'includes/message_parser.' . $phpEx);

$error[] = implode('<br />', $message_parser->warn_msg);

}

if (!sizeof($error) && $submit)

{

$sql_ary = array(

'S_BBCODE_FLASH' => ($config['allow_sig_flash']) ? true : false,

'S_LINKS_ALLOWED' => ($config['allow_sig_links']) ? true : false)

);

// Build custom bbcodes array

display_custom_bbcodes();

$can_upload = ($config['allow_avatar_upload'] && file_exists($phpbb_root_path . $config['avatar_path']) && @is_writable($phpbb_root_path . $config['avatar_path']) && $auth->acl_get('u_chgavatar') && (@ini_get('file_uploads') || strtolower(@ini_get('file_uploads')) == 'on')) ? true : false;

if ($submit)

{

{

}

// Replace "error" strings with their real, localised form

$error = preg_replace('#^([A-Z_]+)$#e', "(!empty(\$user->lang['\\1'])) ? \$user->lang['\\1'] : '\\1'", $error);

}

$change_lang = request_var('change_lang', '');

$user_lang = request_var('lang', $user->lang_name);

if ($change_lang || $user_lang != $config['default_lang'])

{

$use_lang = ($change_lang) ? basename($change_lang) : basename($user_lang);

return;

}

// Try to manually determine the timezone and adjust the dst if the server date/time complies with the default setting +/- 1

$timezone = date('Z') / 3600;

$is_dst = date('I');

$email = strtolower(request_var('email', ''));

$submit = (isset($_POST['submit'])) ? true : false;

if ($submit)

{

$sql = 'SELECT user_id, group_id, username, user_email, user_type, user_lang, user_actkey, user_inactive_reason

FROM ' . USERS_TABLE . "

WHERE user_email = '" . $db->sql_escape($email) . "'