closeaccount.php

   1 <?php
   2 require 'config.php';
   3 $require_login = true;
   4 $page_name = 'Close User Account';
   5 $level_restriction = PENDING_CLOSE;
   6 require 'top.inc.php';
   7 require 'encryption.inc.php';
   8
   9 if ( isset($_POST['submit']) ) {
  10         list($ip) = mysql_fetch_row(mysql_query('SELECT INET_NTOA(`register_ip`) AS `ip` FROM `users`
  11                         WHERE `user` = '.$userinfo['user']));
  12         if ( $_POST['submit'] == 'Close Account' ) {
  13                 if ( $userinfo['password'] != encrypt($_POST['enterpass'], $ip) )
  14                         echo '<div class="alert">Your current password does not match the one entered.</div>',"\n";
  15                 elseif ( $_POST['enterpass'] != $_POST['fux'] )
  16                         echo '<div class="alert">The passwords do not match.</div>',"\n";
  17                 else {
  18                         mysql_query('UPDATE `users` SET `level` = '.PENDING_CLOSE.'
  19                                         WHERE `user` = '.$userinfo['user'].'
  20                                         AND `password` = \''.encrypt($_POST['enterpass'], $ip).'\' LIMIT 1');
  21                         stop('Your account is now pending closure and will be permanently closed after 24 hours with no login.');
  22                 }
  23         }
  24         elseif ( $_POST['submit'] == 'Unclose Account' ) {
  25                 mysql_query('UPDATE `users` SET `level` = '.NEW_USER.' WHERE `userid` = '.$userinfo['user'].' LIMIT 1');
  26                 stop('Your account has now been reopened at level '.NEW_USER.'.');
  27         }
  28 }
  29
  30 if ( $userinfo['level'] >= NEW_USER )
  31         echo '<form method="post" action="',$_SERVER['PHP_SELF'],URL_STRING,'">
  32 <div class="alert">Warning: After an account is closed it cannot be reopened.</div>
  33 <dl class=',colour(),'>
  34 <dt>Confirm current password</dt>
  35 <dd><input type="password" name="enterpass"/></dd>
  36 <dt>Again</dt>
  37 <dd><input type="password" name="fux"/></dd>
  38 <dt>Then click here</dt>
  39 <dd><input type="submit" name="submit" value="Close Account"/></dd>
  40 </dl>
  41 </form>
  42 ';
  43 else
  44         echo '<form method="post" action="',$_SERVER['PHP_SELF'],URL_STRING,'">
  45 <div class=',colour(),'>
  46 <input type="submit" name="submit" value="Unclose Account"/>
  47 </div>
  48 </form>
  49 ';
  50
  51 require 'foot.php';
  52 ?>