3 require_once("../config.php");
4 require_once("$CFG->libdir/gdlib.php");
6 $id = optional_param('id', 0, PARAM_INT
); // user id
7 $course = optional_param('course', SITEID
, PARAM_INT
); // course id (defaults to Site)
9 if (empty($id)) { // See your own profile by default
14 if (! $user = get_record("user", "id", $id)) {
15 error("User ID was incorrect");
18 if (! $course = get_record("course", "id", $course)) {
19 error("Course ID was incorrect");
22 if ($user->confirmed
and user_not_fully_set_up($user)) {
23 // Special case which can only occur when a new account
24 // has just been created by EXTERNAL authentication
25 // This is the only page in Moodle that has the exception
26 // so that users can set up their accounts
29 if (empty($USER->id
)) {
30 error("Sessions don't seem to be working on this server!");
35 require_login($course->id
);
38 if ($USER->id
<> $user->id
) { // Current user editing someone else's profile
39 if (isadmin()) { // Current user is an admin
40 if ($mainadmin = get_admin()) {
41 if ($user->id
== $mainadmin->id
) { // Can't edit primary admin
42 print_error('adminprimarynoedit');
46 print_error('onlyeditown');
51 print_error('guestnoeditprofile');
54 if (isguest($user->id
)) {
55 print_error('guestnoeditprofileother');
59 // load the relevant auth libraries
60 if (!empty($user->auth
)) {
62 if (!file_exists("$CFG->dirroot/auth/$auth/lib.php")) {
63 trigger_error("Can't find auth module $auth , default to internal.");
64 $auth = "manual"; // Can't find auth module, default to internal
66 require_once("$CFG->dirroot/auth/$auth/lib.php");
70 /// If data submitted, then process and store.
72 if ($usernew = data_submitted()) {
74 if (($USER->id
<> $usernew->id
) && !isadmin()) {
75 print_error('onlyeditown');
78 if (isset($USER->username
)) {
79 check_for_restricted_user($USER->username
, "$CFG->wwwroot/course/view.php?id=$course->id");
82 if (isset($usernew->password
)) {
83 unset($usernew->password
);
87 // username is validated in find_form_errors
88 $usernew->country
= clean_param($usernew->country
, PARAM_ALPHA
);
89 $usernew->lang
= clean_param($usernew->lang
, PARAM_FILE
);
90 $usernew->url
= clean_param($usernew->url
, PARAM_URL
);
91 $usernew->icq
= clean_param($usernew->icq
, PARAM_INT
);
95 $usernew->skype
= clean_param($usernew->skype
, PARAM_CLEAN
);
96 $usernew->yahoo
= clean_param($usernew->yahoo
, PARAM_CLEAN
);
97 $usernew->aim
= clean_param($usernew->aim
, PARAM_CLEAN
);
98 $usernew->msn
= clean_param($usernew->msn
, PARAM_CLEAN
);
100 $usernew->maildisplay
= clean_param($usernew->maildisplay
, PARAM_INT
);
101 $usernew->mailformat
= clean_param($usernew->mailformat
, PARAM_INT
);
102 if (!empty($CFG->unicodedb
) && $CFG->allowusermailcharset
) {
103 $usernew->mailcharset
= clean_param($usernew->mailcharset
, PARAM_CLEAN
);
104 if (!empty($usernew->mailcharset
)) {
105 set_user_preference('mailcharset', $usernew->mailcharset
, $user->id
);
107 unset_user_preference('mailcharset', $user->id
);
110 unset_user_preference('mailcharset', $user->id
);
112 $usernew->maildigest
= clean_param($usernew->maildigest
, PARAM_INT
);
113 $usernew->autosubscribe
= clean_param($usernew->autosubscribe
, PARAM_INT
);
114 if (!empty($CFG->htmleditor
)) {
115 $usernew->htmleditor
= clean_param($usernew->htmleditor
, PARAM_INT
);
118 unset( $usernew->htmleditor
);
120 $usernew->emailstop
= clean_param($usernew->emailstop
, PARAM_INT
);
122 if (isset($usernew->timezone
)) {
123 if ($CFG->forcetimezone
!= 99) { // Don't allow changing this in any way
124 unset($usernew->timezone
);
125 } else { // Clean up the data a bit, just in case of injections
126 $usernew->timezone
= clean_param($usernew->timezone
, PARAM_PATH
); //not a path, but it looks like it anyway
130 foreach ($usernew as $key => $data) {
131 $usernew->$key = addslashes(clean_text(stripslashes(trim($usernew->$key)), FORMAT_MOODLE
));
134 $usernew->firstname
= strip_tags($usernew->firstname
);
135 $usernew->lastname
= strip_tags($usernew->lastname
);
137 if (isset($usernew->username
)) {
138 $usernew->username
= moodle_strtolower($usernew->username
);
141 if (!empty($_FILES) and !(empty($CFG->disableuserimages
) or isadmin())) {
142 error('Users can not update profile images!');
145 require_once($CFG->dirroot
.'/lib/uploadlib.php');
146 $um = new upload_manager('imagefile',false,false,null,false,0,true,true);
148 // override locked values
150 $fields = get_user_fieldnames();
151 $authconfig = get_config( 'auth/' . $user->auth
);
152 foreach ($fields as $field) {
153 $configvariable = 'field_lock_' . $field;
154 if ( empty($authconfig->{$configvariable}) ) {
155 continue; //no locking set
157 if ( $authconfig->{$configvariable} === 'locked'
158 ||
($authconfig->{$configvariable} === 'unlockedifempty' && !empty($user->$field)) ) {
159 if (!empty( $user->$field)) {
160 $usernew->$field = $user->$field;
166 unset($configvariable);
168 if (find_form_errors($user, $usernew, $err, $um)) {
169 if (empty($err['imagefile']) && $usernew->picture
= save_profile_image($user->id
, $um,'users')) {
170 set_field('user', 'picture', $usernew->picture
, 'id', $user->id
); /// Note picture in DB
172 if (!empty($usernew->deletepicture
)) {
173 set_field('user', 'picture', 0, 'id', $user->id
); /// Delete picture
174 $usernew->picture
= 0;
178 $usernew->auth
= $user->auth
;
184 if (!$usernew->picture
= save_profile_image($user->id
,$um,'users')) {
185 if (!empty($usernew->deletepicture
)) {
186 set_field('user', 'picture', 0, 'id', $user->id
); /// Delete picture
187 $usernew->picture
= 0;
189 $usernew->picture
= $user->picture
;
193 $usernew->timemodified
= time();
196 if (!empty($usernew->newpassword
)) {
197 $usernew->password
= hash_internal_user_password($usernew->newpassword
);
198 // update external passwords
199 if (!empty($CFG->{'auth_'. $user->auth
.'_stdchangepassword'})) {
200 if (function_exists('auth_user_update_password')){
201 if (!auth_user_update_password($user->username
, $usernew->newpassword
)){
202 error('Failed to update password on external auth: ' . $user->auth
.
203 '. See the server logs for more details.');
206 error('Your external authentication module is misconfigued!');
210 // store forcepasswordchange in user's preferences
211 if (!empty($usernew->forcepasswordchange
)){
212 set_user_preference('auth_forcepasswordchange', 1, $user->id
);
214 unset_user_preference('auth_forcepasswordchange', $user->id
);
217 if (isset($usernew->newpassword
)) {
218 error("You can not change the password like that");
221 if ($usernew->url
and !(substr($usernew->url
, 0, 4) == "http")) {
222 $usernew->url
= "http://".$usernew->url
;
225 $userold = get_record('user','id',$usernew->id
);
226 if (update_record("user", $usernew)) {
227 if (function_exists("auth_user_update")){
228 // pass a true $userold here
229 if (!auth_user_update($userold, $usernew)) {
230 // auth update failed, rollback for moodle
231 update_record("user", $userold);
232 error('Failed to update user data on external auth: '.$user->auth
.
233 '. See the server logs for more details.');
237 if ($userold->email
!= $usernew->email
) {
238 set_bounce_count($usernew,true);
239 set_send_count($usernew,true);
242 /// Update forum track preference.
243 if (($usernew->trackforums
!= $USER->trackforums
) && !$usernew->trackforums
) {
244 require_once($CFG->dirroot
.'/mod/forum/lib.php');
245 forum_tp_delete_read_records($USER->id
);
248 add_to_log($course->id
, "user", "update", "view.php?id=$user->id&course=$course->id", "");
250 if ($user->id
== $USER->id
) {
251 // Copy data into $USER session variable
252 $usernew = (array)$usernew;
253 foreach ($usernew as $variable => $value) {
254 $USER->$variable = stripslashes($value);
256 if (isset($USER->newadminuser
)) {
257 unset($USER->newadminuser
);
258 redirect("$CFG->wwwroot/", get_string('changessaved'));
260 if (!empty($SESSION->wantsurl
)) { // User may have been forced to edit account, so let's
261 // send them to where they wanted to go originally
262 $wantsurl = $SESSION->wantsurl
;
263 $SESSION->wantsurl
= ''; // In case unset doesn't work as expected
264 unset($SESSION->wantsurl
);
265 redirect($wantsurl, get_string('changessaved'));
267 redirect("$CFG->wwwroot/user/view.php?id=$user->id&course=$course->id",
268 get_string("changessaved"));
271 redirect("$CFG->wwwroot/$CFG->admin/user.php", get_string("changessaved"));
274 error("Could not update the user record ($user->id)");
279 /// Otherwise fill and print the form.
281 $usehtmleditor = can_use_html_editor();
283 //temporary hack to disable htmleditor in IE when loginhttps on and wwwroot starts with http://
285 if (!empty($CFG->loginhttps
) and check_browser_version('MSIE', 5.5) and (strpos($CFG->wwwroot
, 'http://') === 0)) {
286 $usehtmleditor = false;
289 $streditmyprofile = get_string("editmyprofile");
290 $strparticipants = get_string("participants");
291 $strnewuser = get_string("newuser");
293 if (over_bounce_threshold($user) && empty($err['email'])) {
294 $err['email'] = get_string('toomanybounces');
297 if (($user->firstname
and $user->lastname
) or $newaccount) {
299 $userfullname = $strnewuser;
301 $userfullname = fullname($user, isteacher($course->id
));
303 if ($course->category
) {
304 print_header("$course->shortname: $streditmyprofile", "$course->fullname: $streditmyprofile",
305 "<a href=\"$CFG->wwwroot/course/view.php?id=$course->id\">$course->shortname</a>
306 -> <a href=\"index.php?id=$course->id\">$strparticipants</a>
307 -> <a href=\"view.php?id=$user->id&course=$course->id\">$userfullname</a>
308 -> $streditmyprofile", "");
310 if (isset($USER->newadminuser
)) {
313 print_header("$course->shortname: $streditmyprofile", "$course->fullname",
314 "<a href=\"view.php?id=$user->id&course=$course->id\">$userfullname</a>
315 -> $streditmyprofile", "");
319 $userfullname = $strnewuser;
320 $straddnewuser = get_string("addnewuser");
322 $stradministration = get_string("administration");
323 print_header("$course->shortname: $streditmyprofile", "$course->fullname",
324 "<a href=\"$CFG->wwwroot/$CFG->admin/\">$stradministration</a> -> ".
325 "<a href=\"$CFG->wwwroot/$CFG->admin/users.php\">$strusers</a> -> $straddnewuser", "");
329 if (isset($USER->newadminuser
)) {
330 print_simple_box(get_string('configintroadmin', 'admin'), 'center', '50%');
333 /// Print tabs at top
334 /// This same call is made in:
338 $currenttab = 'editprofile';
342 print_simple_box_start("center");
346 notify(get_string("someerrorswerefound"));
350 $teacher = strtolower($course->teacher
);
352 $teacheronly = '('.get_string('teacheronly', '', $teacher).')';
357 include("edit.html");
359 if (!isadmin()) { /// Lock all the locked fields using Javascript
360 $fields = get_user_fieldnames();
362 echo '<script type="text/javascript">'."\n";
365 $authconfig = get_config( 'auth/' . $user->auth
);
367 foreach ($fields as $field) {
368 $configvariable = 'field_lock_' . $field;
369 if (isset($authconfig->{$configvariable})) {
370 if ( $authconfig->{$configvariable} === 'locked'
371 ||
($authconfig->{$configvariable} === 'unlockedifempty' && !empty($user->$field)) ) {
372 echo "eval('document.form.$field.disabled=true');\n";
378 echo '</script>'."\n";
381 print_simple_box_end();
383 if ($usehtmleditor) {
384 use_html_editor("description");
387 if (!isset($USER->newadminuser
)) {
388 print_footer($course);
395 /// FUNCTIONS ////////////////////
397 function find_form_errors(&$user, &$usernew, &$err, &$um) {
401 if (empty($usernew->username
)) {
402 $err["username"] = get_string("missingusername");
404 } else if (record_exists("user", "username", $usernew->username
) and $user->username
== "changeme") {
405 $err["username"] = get_string("usernameexists");
408 if (empty($CFG->extendedusernamechars
)) {
409 $string = eregi_replace("[^(-\.[:alnum:])]", "", $usernew->username
);
410 if (strcmp($usernew->username
, $string)) {
411 $err["username"] = get_string("alphanumerical");
416 if (empty($usernew->newpassword
) and empty($user->password
) and is_internal_auth() )
417 $err["newpassword"] = get_string("missingpassword");
419 if (($usernew->newpassword
== "admin") or ($user->password
== md5("admin") and empty($usernew->newpassword
)) ) {
420 $err["newpassword"] = get_string("unsafepassword");
424 if (empty($usernew->email
))
425 $err["email"] = get_string("missingemail");
427 if (over_bounce_threshold($user) && $user->email
== $usernew->email
)
428 $err['email'] = get_string('toomanybounces');
430 if (empty($usernew->description
) and !isadmin())
431 $err["description"] = get_string("missingdescription");
433 if (empty($usernew->city
))
434 $err["city"] = get_string("missingcity");
436 if (empty($usernew->firstname
))
437 $err["firstname"] = get_string("missingfirstname");
439 if (empty($usernew->lastname
))
440 $err["lastname"] = get_string("missinglastname");
442 if (empty($usernew->country
))
443 $err["country"] = get_string("missingcountry");
445 if (! validate_email($usernew->email
)) {
446 $err["email"] = get_string("invalidemail");
448 } else if ($otheruser = get_record("user", "email", $usernew->email
)) {
449 if ($otheruser->id
<> $user->id
) {
450 $err["email"] = get_string("emailexists");
454 if (empty($err["email"]) and !isadmin()) {
455 if ($error = email_is_not_allowed($usernew->email
)) {
456 $err["email"] = $error;
460 if (!$um->preprocess_files()) {
461 $err['imagefile'] = $um->notify
;
464 $user->email
= $usernew->email
;