6 * @copyright (c) 2005 phpBB Group
7 * @license http://opensource.org/licenses/gpl-license.php GNU Public License
14 if (!defined('IN_PHPBB'))
27 function __construct(&$p_master)
29 $this->p_master
= &$p_master;
32 function main($id, $mode)
36 phpbb
::$user->add_lang(array('posting', 'ucp', 'acp/users'));
37 $this->tpl_name
= 'acp_users';
38 $this->page_title
= 'ACP_USER_' . strtoupper($mode);
41 $username = utf8_normalize_nfc(request_var('username', '', true));
42 $user_id = request_var('u', 0);
43 $action = request_var('action', '');
45 $submit = (phpbb_request
::is_set_post('update') && !phpbb_request
::is_set_post('cancel')) ?
true : false;
47 $form_name = 'acp_users';
48 add_form_key($form_name);
50 // Whois (special case)
51 if ($action == 'whois')
53 include(PHPBB_ROOT_PATH
. 'includes/functions_user.' . PHP_EXT
);
55 $this->page_title
= 'WHOIS';
56 $this->tpl_name
= 'simple_body';
58 $user_ip = request_var('user_ip', '');
59 $domain = gethostbyaddr($user_ip);
60 $ipwhois = user_ipwhois($user_ip);
62 phpbb
::$template->assign_vars(array(
63 'MESSAGE_TITLE' => sprintf(phpbb
::$user->lang
['IP_WHOIS_FOR'], $domain),
64 'MESSAGE_TEXT' => nl2br($ipwhois),
70 // Show user selection mask
71 if (!$username && !$user_id)
73 $this->page_title
= 'SELECT_USER';
75 phpbb
::$template->assign_vars(array(
76 'U_ACTION' => $this->u_action
,
77 'ANONYMOUS_USER_ID' => ANONYMOUS
,
79 'S_SELECT_USER' => true,
80 'U_FIND_USERNAME' => append_sid('memberlist', 'mode=searchuser&form=select_user&field=username&select_single=true'),
88 $sql = 'SELECT user_id
89 FROM ' . USERS_TABLE
. "
90 WHERE username_clean = '" . phpbb
::$db->sql_escape(utf8_clean_string($username)) . "'";
91 $result = phpbb
::$db->sql_query($sql);
92 $user_id = (int) phpbb
::$db->sql_fetchfield('user_id');
93 phpbb
::$db->sql_freeresult($result);
97 trigger_error(phpbb
::$user->lang
['NO_USER'] . adm_back_link($this->u_action
), E_USER_WARNING
);
101 // Generate content for all modes
102 $sql = 'SELECT u.*, s.*
103 FROM ' . USERS_TABLE
. ' u
104 LEFT JOIN ' . SESSIONS_TABLE
. ' s ON (s.session_user_id = u.user_id)
105 WHERE u.user_id = ' . $user_id . '
106 ORDER BY s.session_time DESC';
107 $result = phpbb
::$db->sql_query($sql);
108 $user_row = phpbb
::$db->sql_fetchrow($result);
109 phpbb
::$db->sql_freeresult($result);
113 trigger_error(phpbb
::$user->lang
['NO_USER'] . adm_back_link($this->u_action
), E_USER_WARNING
);
116 // Generate overall "header" for user admin
117 $s_form_options = '';
119 // Build modes dropdown list
120 $sql = 'SELECT module_mode, module_auth
121 FROM ' . MODULES_TABLE
. "
122 WHERE module_basename = 'users'
123 AND module_enabled = 1
124 AND module_class = 'acp'
125 ORDER BY left_id, module_mode";
126 $result = phpbb
::$db->sql_query($sql);
128 $dropdown_modes = array();
129 while ($row = phpbb
::$db->sql_fetchrow($result))
131 if (!$this->p_master
->module_auth($row['module_auth']))
136 $dropdown_modes[$row['module_mode']] = true;
138 phpbb
::$db->sql_freeresult($result);
140 foreach ($dropdown_modes as $module_mode => $null)
142 $selected = ($mode == $module_mode) ?
' selected="selected"' : '';
143 $s_form_options .= '<option value="' . $module_mode . '"' . $selected . '>' . phpbb
::$user->lang
['ACP_USER_' . strtoupper($module_mode)] . '</option>';
146 phpbb
::$template->assign_vars(array(
147 'U_BACK' => $this->u_action
,
148 'U_MODE_SELECT' => append_sid(PHPBB_ADMIN_PATH
. 'index.' . PHP_EXT
, "i=$id&u=$user_id"),
149 'U_ACTION' => $this->u_action
. '&u=' . $user_id,
150 'S_FORM_OPTIONS' => $s_form_options,
151 'MANAGED_USERNAME' => $user_row['username'],
154 // Prevent normal users/admins change/view founders if they are not a founder by themselves
155 if (!phpbb
::$user->is_founder
&& $user_row['user_type'] == phpbb
::USER_FOUNDER
)
157 trigger_error(phpbb
::$user->lang
['NOT_MANAGE_FOUNDER'] . adm_back_link($this->u_action
), E_USER_WARNING
);
164 include(PHPBB_ROOT_PATH
. 'includes/functions_user.' . PHP_EXT
);
166 phpbb
::$user->add_lang('acp/ban');
168 $delete = request_var('delete', 0);
169 $delete_type = request_var('delete_type', '');
170 $ip = request_var('ip', 'ip');
174 // You can't delete the founder
175 if ($delete && $user_row['user_type'] != phpbb
::USER_FOUNDER
)
177 if (!phpbb
::$acl->acl_get('a_userdel'))
179 trigger_error(phpbb
::$user->lang
['NO_AUTH_OPERATION'] . adm_back_link($this->u_action
. '&u=' . $user_id), E_USER_WARNING
);
182 // Check if the user wants to remove himself or the guest user account
183 if ($user_id == ANONYMOUS
)
185 trigger_error(phpbb
::$user->lang
['CANNOT_REMOVE_ANONYMOUS'] . adm_back_link($this->u_action
. '&u=' . $user_id), E_USER_WARNING
);
188 if ($user_id == phpbb
::$user->data
['user_id'])
190 trigger_error(phpbb
::$user->lang
['CANNOT_REMOVE_YOURSELF'] . adm_back_link($this->u_action
. '&u=' . $user_id), E_USER_WARNING
);
193 if (confirm_box(true))
195 user_delete($delete_type, $user_id, $user_row['username']);
197 add_log('admin', 'LOG_USER_DELETED', $user_row['username']);
198 trigger_error(phpbb
::$user->lang
['USER_DELETED'] . adm_back_link($this->u_action
));
202 confirm_box(false, phpbb
::$user->lang
['CONFIRM_OPERATION'], build_hidden_fields(array(
209 'delete_type' => $delete_type))
214 // Handle quicktool actions
221 if ($user_id == phpbb
::$user->data
['user_id'])
223 trigger_error(phpbb
::$user->lang
['CANNOT_BAN_YOURSELF'] . adm_back_link($this->u_action
. '&u=' . $user_id), E_USER_WARNING
);
226 if ($user_row['user_type'] == phpbb
::USER_FOUNDER
)
228 trigger_error(phpbb
::$user->lang
['CANNOT_BAN_FOUNDER'] . adm_back_link($this->u_action
. '&u=' . $user_id), E_USER_WARNING
);
231 if (!check_form_key($form_name))
233 trigger_error(phpbb
::$user->lang
['FORM_INVALID'] . adm_back_link($this->u_action
. '&u=' . $user_id), E_USER_WARNING
);
241 $ban[] = $user_row['username'];
242 $reason = 'USER_ADMIN_BAN_NAME_REASON';
243 $log = 'LOG_USER_BAN_USER';
247 $ban[] = $user_row['user_email'];
248 $reason = 'USER_ADMIN_BAN_EMAIL_REASON';
249 $log = 'LOG_USER_BAN_EMAIL';
253 $ban[] = $user_row['user_ip'];
255 $sql = 'SELECT DISTINCT poster_ip
256 FROM ' . POSTS_TABLE
. "
257 WHERE poster_id = $user_id";
258 $result = phpbb
::$db->sql_query($sql);
260 while ($row = phpbb
::$db->sql_fetchrow($result))
262 $ban[] = $row['poster_ip'];
264 phpbb
::$db->sql_freeresult($result);
266 $reason = 'USER_ADMIN_BAN_IP_REASON';
267 $log = 'LOG_USER_BAN_IP';
271 $ban_reason = utf8_normalize_nfc(request_var('ban_reason', phpbb
::$user->lang
[$reason], true));
272 $ban_give_reason = utf8_normalize_nfc(request_var('ban_give_reason', '', true));
274 // Log not used at the moment, we simply utilize the ban function.
275 $result = user_ban(substr($action, 3), $ban, 0, 0, 0, $ban_reason, $ban_give_reason);
277 trigger_error((($result === false) ? phpbb
::$user->lang
['BAN_ALREADY_ENTERED'] : phpbb
::$user->lang
['BAN_SUCCESSFUL']) . adm_back_link($this->u_action
. '&u=' . $user_id));
283 if ($user_id == phpbb
::$user->data
['user_id'])
285 trigger_error(phpbb
::$user->lang
['CANNOT_FORCE_REACT_YOURSELF'] . adm_back_link($this->u_action
. '&u=' . $user_id), E_USER_WARNING
);
288 if (!check_form_key($form_name))
290 trigger_error(phpbb
::$user->lang
['FORM_INVALID'] . adm_back_link($this->u_action
. '&u=' . $user_id), E_USER_WARNING
);
293 if ($user_row['user_type'] == phpbb
::USER_FOUNDER
)
295 trigger_error(phpbb
::$user->lang
['CANNOT_FORCE_REACT_FOUNDER'] . adm_back_link($this->u_action
. '&u=' . $user_id), E_USER_WARNING
);
298 if ($user_row['user_type'] == phpbb
::USER_IGNORE
)
300 trigger_error(phpbb
::$user->lang
['CANNOT_FORCE_REACT_BOT'] . adm_back_link($this->u_action
. '&u=' . $user_id), E_USER_WARNING
);
303 if (phpbb
::$config['email_enable'])
305 include_once(PHPBB_ROOT_PATH
. 'includes/functions_messenger.' . PHP_EXT
);
307 $server_url = generate_board_url();
309 $user_actkey = gen_rand_string(10);
310 $key_len = 54 - (strlen($server_url));
311 $key_len = ($key_len > 6) ?
$key_len : 6;
312 $user_actkey = substr($user_actkey, 0, $key_len);
313 $email_template = ($user_row['user_type'] == phpbb
::USER_NORMAL
) ?
'user_reactivate_account' : 'user_resend_inactive';
315 if ($user_row['user_type'] == phpbb
::USER_NORMAL
)
317 user_active_flip('deactivate', $user_id, INACTIVE_REMIND
);
319 $sql = 'UPDATE ' . USERS_TABLE
. "
320 SET user_actkey = '" . phpbb
::$db->sql_escape($user_actkey) . "'
321 WHERE user_id = $user_id";
322 phpbb
::$db->sql_query($sql);
326 // Grabbing the last confirm key - we only send a reminder
327 $sql = 'SELECT user_actkey
328 FROM ' . USERS_TABLE
. '
329 WHERE user_id = ' . $user_id;
330 $result = phpbb
::$db->sql_query($sql);
331 $user_actkey = (string) phpbb
::$db->sql_fetchfield('user_actkey');
332 phpbb
::$db->sql_freeresult($result);
335 $messenger = new messenger(false);
337 $messenger->template($email_template, $user_row['user_lang']);
339 $messenger->to($user_row['user_email'], $user_row['username']);
341 $messenger->headers('X-AntiAbuse: Board servername - ' . phpbb
::$config['server_name']);
342 $messenger->headers('X-AntiAbuse: User_id - ' . phpbb
::$user->data
['user_id']);
343 $messenger->headers('X-AntiAbuse: Username - ' . phpbb
::$user->data
['username']);
344 $messenger->headers('X-AntiAbuse: User IP - ' . phpbb
::$user->ip
);
346 $messenger->assign_vars(array(
347 'WELCOME_MSG' => htmlspecialchars_decode(sprintf(phpbb
::$user->lang
['WELCOME_SUBJECT'], phpbb
::$config['sitename'])),
348 'USERNAME' => htmlspecialchars_decode($user_row['username']),
349 'U_ACTIVATE' => "$server_url/ucp." . PHP_EXT
. "?mode=activate&u={$user_row['user_id']}&k=$user_actkey")
352 $messenger->send(NOTIFY_EMAIL
);
354 add_log('admin', 'LOG_USER_REACTIVATE', $user_row['username']);
355 add_log('user', $user_id, 'LOG_USER_REACTIVATE_USER');
357 trigger_error(phpbb
::$user->lang
['FORCE_REACTIVATION_SUCCESS'] . adm_back_link($this->u_action
. '&u=' . $user_id));
364 if ($user_id == phpbb
::$user->data
['user_id'])
366 // It is only deactivation since the user is already activated (else he would not have reached this page)
367 trigger_error(phpbb
::$user->lang
['CANNOT_DEACTIVATE_YOURSELF'] . adm_back_link($this->u_action
. '&u=' . $user_id), E_USER_WARNING
);
370 if (!check_form_key($form_name))
372 trigger_error(phpbb
::$user->lang
['FORM_INVALID'] . adm_back_link($this->u_action
. '&u=' . $user_id), E_USER_WARNING
);
375 if ($user_row['user_type'] == phpbb
::USER_FOUNDER
)
377 trigger_error(phpbb
::$user->lang
['CANNOT_DEACTIVATE_FOUNDER'] . adm_back_link($this->u_action
. '&u=' . $user_id), E_USER_WARNING
);
380 if ($user_row['user_type'] == phpbb
::USER_IGNORE
)
382 trigger_error(phpbb
::$user->lang
['CANNOT_DEACTIVATE_BOT'] . adm_back_link($this->u_action
. '&u=' . $user_id), E_USER_WARNING
);
385 user_active_flip('flip', $user_id);
387 $message = ($user_row['user_type'] == phpbb
::USER_INACTIVE
) ?
'USER_ADMIN_ACTIVATED' : 'USER_ADMIN_DEACTIVED';
388 $log = ($user_row['user_type'] == phpbb
::USER_INACTIVE
) ?
'LOG_USER_ACTIVE' : 'LOG_USER_INACTIVE';
390 add_log('admin', $log, $user_row['username']);
391 add_log('user', $user_id, $log . '_USER');
393 trigger_error(phpbb
::$user->lang
[$message] . adm_back_link($this->u_action
. '&u=' . $user_id));
399 if (!check_form_key($form_name))
401 trigger_error(phpbb
::$user->lang
['FORM_INVALID'] . adm_back_link($this->u_action
. '&u=' . $user_id), E_USER_WARNING
);
406 'user_sig_bbcode_uid' => '',
407 'user_sig_bbcode_bitfield' => ''
410 $sql = 'UPDATE ' . USERS_TABLE
. ' SET ' . phpbb
::$db->sql_build_array('UPDATE', $sql_ary) . "
411 WHERE user_id = $user_id";
412 phpbb
::$db->sql_query($sql);
414 add_log('admin', 'LOG_USER_DEL_SIG', $user_row['username']);
415 add_log('user', $user_id, 'LOG_USER_DEL_SIG_USER');
417 trigger_error(phpbb
::$user->lang
['USER_ADMIN_SIG_REMOVED'] . adm_back_link($this->u_action
. '&u=' . $user_id));
423 if (!check_form_key($form_name))
425 trigger_error(phpbb
::$user->lang
['FORM_INVALID'] . adm_back_link($this->u_action
. '&u=' . $user_id), E_USER_WARNING
);
430 'user_avatar_type' => 0,
431 'user_avatar_width' => 0,
432 'user_avatar_height' => 0,
435 $sql = 'UPDATE ' . USERS_TABLE
. '
436 SET ' . phpbb
::$db->sql_build_array('UPDATE', $sql_ary) . "
437 WHERE user_id = $user_id";
438 phpbb
::$db->sql_query($sql);
440 // Delete old avatar if present
441 if ($user_row['user_avatar'] && $user_row['user_avatar_type'] != AVATAR_GALLERY
)
443 avatar_delete('user', $user_row);
446 add_log('admin', 'LOG_USER_DEL_AVATAR', $user_row['username']);
447 add_log('user', $user_id, 'LOG_USER_DEL_AVATAR_USER');
449 trigger_error(phpbb
::$user->lang
['USER_ADMIN_AVATAR_REMOVED'] . adm_back_link($this->u_action
. '&u=' . $user_id));
454 if (confirm_box(true))
456 // Delete posts, attachments, etc.
457 delete_posts('poster_id', $user_id);
459 add_log('admin', 'LOG_USER_DEL_POSTS', $user_row['username']);
460 trigger_error(phpbb
::$user->lang
['USER_POSTS_DELETED'] . adm_back_link($this->u_action
. '&u=' . $user_id));
464 confirm_box(false, phpbb
::$user->lang
['CONFIRM_OPERATION'], build_hidden_fields(array(
477 if (confirm_box(true))
479 delete_attachments('user', $user_id);
481 add_log('admin', 'LOG_USER_DEL_ATTACH', $user_row['username']);
482 trigger_error(phpbb
::$user->lang
['USER_ATTACHMENTS_REMOVED'] . adm_back_link($this->u_action
. '&u=' . $user_id));
486 confirm_box(false, phpbb
::$user->lang
['CONFIRM_OPERATION'], build_hidden_fields(array(
499 if (!check_form_key($form_name))
501 trigger_error(phpbb
::$user->lang
['FORM_INVALID'] . adm_back_link($this->u_action
. '&u=' . $user_id), E_USER_WARNING
);
504 phpbb
::$user->add_lang('acp/forums');
506 $new_forum_id = request_var('new_f', 0);
510 $this->page_title
= 'USER_ADMIN_MOVE_POSTS';
512 phpbb
::$template->assign_vars(array(
513 'S_SELECT_FORUM' => true,
514 'U_ACTION' => $this->u_action
. "&action=$action&u=$user_id",
515 'U_BACK' => $this->u_action
. "&u=$user_id",
516 'S_FORUM_OPTIONS' => make_forum_select(false, false, false, true),
522 // Is the new forum postable to?
523 $sql = 'SELECT forum_name, forum_type
524 FROM ' . FORUMS_TABLE
. "
525 WHERE forum_id = $new_forum_id";
526 $result = phpbb
::$db->sql_query($sql);
527 $forum_info = phpbb
::$db->sql_fetchrow($result);
528 phpbb
::$db->sql_freeresult($result);
532 trigger_error(phpbb
::$user->lang
['NO_FORUM'] . adm_back_link($this->u_action
. '&u=' . $user_id), E_USER_WARNING
);
535 if ($forum_info['forum_type'] != FORUM_POST
)
537 trigger_error(phpbb
::$user->lang
['MOVE_POSTS_NO_POSTABLE_FORUM'] . adm_back_link($this->u_action
. '&u=' . $user_id), E_USER_WARNING
);
541 // Move topics comprising only posts from this user
542 $topic_id_ary = $move_topic_ary = $move_post_ary = $new_topic_id_ary = array();
543 $forum_id_ary = array($new_forum_id);
545 $sql = 'SELECT topic_id, COUNT(post_id) AS total_posts
546 FROM ' . POSTS_TABLE
. "
547 WHERE poster_id = $user_id
548 AND forum_id <> $new_forum_id
550 $result = phpbb
::$db->sql_query($sql);
552 while ($row = phpbb
::$db->sql_fetchrow($result))
554 $topic_id_ary[$row['topic_id']] = $row['total_posts'];
556 phpbb
::$db->sql_freeresult($result);
558 if (sizeof($topic_id_ary))
560 $sql = 'SELECT topic_id, forum_id, topic_title, topic_replies, topic_replies_real, topic_attachment
561 FROM ' . TOPICS_TABLE
. '
562 WHERE ' . phpbb
::$db->sql_in_set('topic_id', array_keys($topic_id_ary));
563 $result = phpbb
::$db->sql_query($sql);
565 while ($row = phpbb
::$db->sql_fetchrow($result))
567 if (max($row['topic_replies'], $row['topic_replies_real']) +
1 == $topic_id_ary[$row['topic_id']])
569 $move_topic_ary[] = $row['topic_id'];
573 $move_post_ary[$row['topic_id']]['title'] = $row['topic_title'];
574 $move_post_ary[$row['topic_id']]['attach'] = ($row['topic_attachment']) ?
1 : 0;
577 $forum_id_ary[] = $row['forum_id'];
579 phpbb
::$db->sql_freeresult($result);
582 // Entire topic comprises posts by this user, move these topics
583 if (sizeof($move_topic_ary))
585 move_topics($move_topic_ary, $new_forum_id, false);
588 if (sizeof($move_post_ary))
591 // Update post_ids, report_ids, attachment_ids
592 foreach ($move_post_ary as $topic_id => $post_ary)
595 $sql = 'INSERT INTO ' . TOPICS_TABLE
. ' ' . phpbb
::$db->sql_build_array('INSERT', array(
596 'topic_poster' => $user_id,
597 'topic_time' => time(),
598 'forum_id' => $new_forum_id,
600 'topic_approved' => 1,
601 'topic_title' => $post_ary['title'],
602 'topic_first_poster_name' => $user_row['username'],
603 'topic_type' => POST_NORMAL
,
604 'topic_time_limit' => 0,
605 'topic_attachment' => $post_ary['attach'])
607 phpbb
::$db->sql_query($sql);
609 $new_topic_id = phpbb
::$db->sql_nextid();
612 $sql = 'UPDATE ' . POSTS_TABLE
. "
613 SET forum_id = $new_forum_id, topic_id = $new_topic_id
614 WHERE topic_id = $topic_id
615 AND poster_id = $user_id";
616 phpbb
::$db->sql_query($sql);
618 if ($post_ary['attach'])
620 $sql = 'UPDATE ' . ATTACHMENTS_TABLE
. "
621 SET topic_id = $new_topic_id
622 WHERE topic_id = $topic_id
623 AND poster_id = $user_id";
624 phpbb
::$db->sql_query($sql);
627 $new_topic_id_ary[] = $new_topic_id;
631 $forum_id_ary = array_unique($forum_id_ary);
632 $topic_id_ary = array_unique(array_merge(array_keys($topic_id_ary), $new_topic_id_ary));
634 if (sizeof($topic_id_ary))
636 sync('topic_reported', 'topic_id', $topic_id_ary);
637 sync('topic', 'topic_id', $topic_id_ary);
640 if (sizeof($forum_id_ary))
642 sync('forum', 'forum_id', $forum_id_ary, false, true);
646 add_log('admin', 'LOG_USER_MOVE_POSTS', $user_row['username'], $forum_info['forum_name']);
647 add_log('user', $user_id, 'LOG_USER_MOVE_POSTS_USER', $forum_info['forum_name']);
649 trigger_error(phpbb
::$user->lang
['USER_POSTS_MOVED'] . adm_back_link($this->u_action
. '&u=' . $user_id));
654 // Handle registration info updates
656 'username' => utf8_normalize_nfc(request_var('user', $user_row['username'], true)),
657 'user_founder' => request_var('user_founder', ($user_row['user_type'] == phpbb
::USER_FOUNDER
) ?
1 : 0),
658 'email' => strtolower(request_var('user_email', $user_row['user_email'])),
659 'email_confirm' => strtolower(request_var('email_confirm', '')),
660 'new_password' => request_var('new_password', '', true),
661 'password_confirm' => request_var('password_confirm', '', true),
664 // Validation data - we do not check the password complexity setting here
666 'new_password' => array(
667 array('string', true, phpbb
::$config['min_pass_chars'], phpbb
::$config['max_pass_chars']),
669 'password_confirm' => array('string', true, phpbb
::$config['min_pass_chars'], phpbb
::$config['max_pass_chars']),
672 // Check username if altered
673 if ($data['username'] != $user_row['username'])
677 array('string', false, phpbb
::$config['min_name_chars'], phpbb
::$config['max_name_chars']),
678 array('username', $user_row['username'])
683 // Check email if altered
684 if ($data['email'] != $user_row['user_email'])
688 array('string', false, 6, 60),
689 array('email', $user_row['user_email'])
691 'email_confirm' => array('string', true, 6, 60)
695 $error = validate_data($data, $check_ary);
697 if ($data['new_password'] && $data['password_confirm'] != $data['new_password'])
699 $error[] = 'NEW_PASSWORD_ERROR';
702 if ($data['email'] != $user_row['user_email'] && $data['email_confirm'] != $data['email'])
704 $error[] = 'NEW_EMAIL_ERROR';
707 if (!check_form_key($form_name))
709 $error[] = 'FORM_INVALID';
712 // Which updates do we need to do?
713 $update_username = ($user_row['username'] != $data['username']) ?
$data['username'] : false;
714 $update_password = ($data['new_password'] && !phpbb_check_hash($user_row['user_password'], $data['new_password'])) ?
true : false;
715 $update_email = ($data['email'] != $user_row['user_email']) ?
$data['email'] : false;
721 if ($user_row['user_type'] != phpbb
::USER_FOUNDER || phpbb
::$user->is_founder
)
723 // Only allow founders updating the founder status...
724 if (phpbb
::$user->is_founder
)
726 // Setting a normal member to be a founder
727 if ($data['user_founder'] && $user_row['user_type'] != phpbb
::USER_FOUNDER
)
729 // Make sure the user is not setting an Inactive or ignored user to be a founder
730 if ($user_row['user_type'] == phpbb
::USER_IGNORE
)
732 trigger_error(phpbb
::$user->lang
['CANNOT_SET_FOUNDER_IGNORED'] . adm_back_link($this->u_action
. '&u=' . $user_id), E_USER_WARNING
);
735 if ($user_row['user_type'] == phpbb
::USER_INACTIVE
)
737 trigger_error(phpbb
::$user->lang
['CANNOT_SET_FOUNDER_INACTIVE'] . adm_back_link($this->u_action
. '&u=' . $user_id), E_USER_WARNING
);
740 $sql_ary['user_type'] = phpbb
::USER_FOUNDER
;
742 else if (!$data['user_founder'] && $user_row['user_type'] == phpbb
::USER_FOUNDER
)
744 // Check if at least one founder is present
745 $sql = 'SELECT user_id
746 FROM ' . USERS_TABLE
. '
747 WHERE user_type = ' . phpbb
::USER_FOUNDER
. '
748 AND user_id <> ' . $user_id;
749 $result = phpbb
::$db->sql_query_limit($sql, 1);
750 $row = phpbb
::$db->sql_fetchrow($result);
751 phpbb
::$db->sql_freeresult($result);
755 $sql_ary['user_type'] = phpbb
::USER_NORMAL
;
759 trigger_error(phpbb
::$user->lang
['AT_LEAST_ONE_FOUNDER'] . adm_back_link($this->u_action
. '&u=' . $user_id), E_USER_WARNING
);
765 if ($update_username !== false)
767 $sql_ary['username'] = $update_username;
768 $sql_ary['username_clean'] = utf8_clean_string($update_username);
770 add_log('user', $user_id, 'LOG_USER_UPDATE_NAME', $user_row['username'], $update_username);
773 if ($update_email !== false)
776 'user_email' => $update_email,
777 'user_email_hash' => hexdec(crc32($update_email) . strlen($update_email))
780 add_log('user', $user_id, 'LOG_USER_UPDATE_EMAIL', $user_row['username'], $user_row['user_email'], $update_email);
783 if ($update_password)
786 'user_password' => phpbb_hash($data['new_password']),
787 'user_passchg' => time(),
788 'user_pass_convert' => 0,
791 phpbb
::$user->reset_login_keys($user_id);
792 add_log('user', $user_id, 'LOG_USER_NEW_PASSWORD', $user_row['username']);
795 if (sizeof($sql_ary))
797 $sql = 'UPDATE ' . USERS_TABLE
. '
798 SET ' . phpbb
::$db->sql_build_array('UPDATE', $sql_ary) . '
799 WHERE user_id = ' . $user_id;
800 phpbb
::$db->sql_query($sql);
803 if ($update_username)
805 user_update_name($user_row['username'], $update_username);
808 // Let the users permissions being updated
809 phpbb
::$acl->acl_clear_prefetch($user_id);
811 add_log('admin', 'LOG_USER_USER_UPDATE', $data['username']);
813 trigger_error(phpbb
::$user->lang
['USER_OVERVIEW_UPDATED'] . adm_back_link($this->u_action
. '&u=' . $user_id));
816 // Replace "error" strings with their real, localised form
817 $error = preg_replace('#^([A-Z_]+)$#e', "phpbb::\$user->lang('\\1')", $error);
820 if ($user_id == phpbb
::$user->data
['user_id'])
822 $quick_tool_ary = array('delsig' => 'DEL_SIG', 'delavatar' => 'DEL_AVATAR', 'moveposts' => 'MOVE_POSTS', 'delposts' => 'DEL_POSTS', 'delattach' => 'DEL_ATTACH');
826 $quick_tool_ary = array();
828 if ($user_row['user_type'] != phpbb
::USER_FOUNDER
)
830 $quick_tool_ary +
= array('banuser' => 'BAN_USER', 'banemail' => 'BAN_EMAIL', 'banip' => 'BAN_IP');
833 if ($user_row['user_type'] != phpbb
::USER_FOUNDER
&& $user_row['user_type'] != phpbb
::USER_IGNORE
)
835 $quick_tool_ary +
= array('active' => (($user_row['user_type'] == phpbb
::USER_INACTIVE
) ?
'ACTIVATE' : 'DEACTIVATE'));
838 $quick_tool_ary +
= array('delsig' => 'DEL_SIG', 'delavatar' => 'DEL_AVATAR', 'moveposts' => 'MOVE_POSTS', 'delposts' => 'DEL_POSTS', 'delattach' => 'DEL_ATTACH');
840 if (phpbb
::$config['email_enable'] && ($user_row['user_type'] == phpbb
::USER_NORMAL ||
$user_row['user_type'] == phpbb
::USER_INACTIVE
))
842 $quick_tool_ary['reactivate'] = 'FORCE';
846 $s_action_options = '<option class="sep" value="">' . phpbb
::$user->lang
['SELECT_OPTION'] . '</option>';
847 foreach ($quick_tool_ary as $value => $lang)
849 $s_action_options .= '<option value="' . $value . '">' . phpbb
::$user->lang
['USER_ADMIN_' . $lang] . '</option>';
852 if (phpbb
::$config['load_onlinetrack'])
854 $sql = 'SELECT MAX(session_time) AS session_time, MIN(session_viewonline) AS session_viewonline
855 FROM ' . SESSIONS_TABLE
. "
856 WHERE session_user_id = $user_id";
857 $result = phpbb
::$db->sql_query($sql);
858 $row = phpbb
::$db->sql_fetchrow($result);
859 phpbb
::$db->sql_freeresult($result);
861 $user_row['session_time'] = (isset($row['session_time'])) ?
$row['session_time'] : 0;
862 $user_row['session_viewonline'] = (isset($row['session_viewonline'])) ?
$row['session_viewonline'] : 0;
866 $last_visit = (!empty($user_row['session_time'])) ?
$user_row['session_time'] : $user_row['user_lastvisit'];
868 $inactive_reason = '';
869 if ($user_row['user_type'] == phpbb
::USER_INACTIVE
)
871 $inactive_reason = phpbb
::$user->lang
['INACTIVE_REASON_UNKNOWN'];
873 switch ($user_row['user_inactive_reason'])
875 case INACTIVE_REGISTER
:
876 $inactive_reason = phpbb
::$user->lang
['INACTIVE_REASON_REGISTER'];
879 case INACTIVE_PROFILE
:
880 $inactive_reason = phpbb
::$user->lang
['INACTIVE_REASON_PROFILE'];
883 case INACTIVE_MANUAL
:
884 $inactive_reason = phpbb
::$user->lang
['INACTIVE_REASON_MANUAL'];
887 case INACTIVE_REMIND
:
888 $inactive_reason = phpbb
::$user->lang
['INACTIVE_REASON_REMIND'];
894 $sql = 'SELECT COUNT(post_id) as posts_in_queue
895 FROM ' . POSTS_TABLE
. '
896 WHERE poster_id = ' . $user_id . '
897 AND post_approved = 0';
898 $result = phpbb
::$db->sql_query($sql);
899 $user_row['posts_in_queue'] = (int) phpbb
::$db->sql_fetchfield('posts_in_queue');
900 phpbb
::$db->sql_freeresult($result);
902 phpbb
::$template->assign_vars(array(
903 'L_NAME_CHARS_EXPLAIN' => sprintf(phpbb
::$user->lang
[phpbb
::$config['allow_name_chars'] . '_EXPLAIN'], phpbb
::$config['min_name_chars'], phpbb
::$config['max_name_chars']),
904 'L_CHANGE_PASSWORD_EXPLAIN' => sprintf(phpbb
::$user->lang
[phpbb
::$config['pass_complex'] . '_EXPLAIN'], phpbb
::$config['min_pass_chars'], phpbb
::$config['max_pass_chars']),
905 'L_POSTS_IN_QUEUE' => phpbb
::$user->lang('NUM_POSTS_IN_QUEUE', $user_row['posts_in_queue']),
906 'S_FOUNDER' => phpbb
::$user->is_founder
,
908 'S_OVERVIEW' => true,
909 'S_USER_IP' => ($user_row['user_ip']) ?
true : false,
910 'S_USER_FOUNDER' => ($user_row['user_type'] == phpbb
::USER_FOUNDER
) ?
true : false,
911 'S_ACTION_OPTIONS' => $s_action_options,
912 'S_OWN_ACCOUNT' => ($user_id == phpbb
::$user->data
['user_id']) ?
true : false,
913 'S_USER_INACTIVE' => ($user_row['user_type'] == phpbb
::USER_INACTIVE
) ?
true : false,
915 'U_SHOW_IP' => $this->u_action
. "&u=$user_id&ip=" . (($ip == 'ip') ?
'hostname' : 'ip'),
916 'U_WHOIS' => $this->u_action
. "&action=whois&user_ip={$user_row['user_ip']}",
917 'U_MCP_QUEUE' => (phpbb
::$acl->acl_getf_global('m_approve')) ?
append_sid('mcp', 'i=queue', true, phpbb
::$user->session_id
) : '',
919 'U_SWITCH_PERMISSIONS' => (phpbb
::$acl->acl_get('a_switchperm') && phpbb
::$user->data
['user_id'] != $user_row['user_id']) ?
append_sid('ucp', "mode=switch_perm&u={$user_row['user_id']}") : '',
921 'POSTS_IN_QUEUE' => $user_row['posts_in_queue'],
922 'USER' => $user_row['username'],
923 'USER_REGISTERED' => phpbb
::$user->format_date($user_row['user_regdate']),
924 'REGISTERED_IP' => ($ip == 'hostname') ?
gethostbyaddr($user_row['user_ip']) : $user_row['user_ip'],
925 'USER_LASTACTIVE' => ($last_visit) ? phpbb
::$user->format_date($last_visit) : ' - ',
926 'USER_EMAIL' => $user_row['user_email'],
927 'USER_WARNINGS' => $user_row['user_warnings'],
928 'USER_POSTS' => $user_row['user_posts'],
929 'USER_INACTIVE_REASON' => $inactive_reason,
936 phpbb
::$user->add_lang('mcp');
938 // Set up general vars
939 $start = request_var('start', 0);
940 $deletemark = phpbb_request
::is_set_post('delmarked');
941 $deleteall = phpbb_request
::is_set_post('delall');
942 $marked = request_var('mark', array(0));
943 $message = utf8_normalize_nfc(request_var('message', '', true));
946 $sort_days = request_var('st', 0);
947 $sort_key = request_var('sk', 't');
948 $sort_dir = request_var('sd', 'd');
950 // Delete entries if requested and able
951 if (($deletemark ||
$deleteall) && phpbb
::$acl->acl_get('a_clearlogs'))
953 if (!check_form_key($form_name))
955 trigger_error(phpbb
::$user->lang
['FORM_INVALID'] . adm_back_link($this->u_action
. '&u=' . $user_id), E_USER_WARNING
);
959 if ($deletemark && $marked)
962 foreach ($marked as $mark)
966 $where_sql = ' AND ' . phpbb
::$db->sql_in_set('log_id', $sql_in);
970 if ($where_sql ||
$deleteall)
972 $sql = 'DELETE FROM ' . LOG_TABLE
. '
973 WHERE log_type = ' . LOG_USERS
. "
974 AND reportee_id = $user_id
976 phpbb
::$db->sql_query($sql);
978 add_log('admin', 'LOG_CLEAR_USER', $user_row['username']);
982 if ($submit && $message)
984 if (!check_form_key($form_name))
986 trigger_error(phpbb
::$user->lang
['FORM_INVALID'] . adm_back_link($this->u_action
. '&u=' . $user_id), E_USER_WARNING
);
989 add_log('admin', 'LOG_USER_FEEDBACK', $user_row['username']);
990 add_log('mod', 0, 0, 'LOG_USER_FEEDBACK', $user_row['username']);
991 add_log('user', $user_id, 'LOG_USER_GENERAL', $message);
993 trigger_error(phpbb
::$user->lang
['USER_FEEDBACK_ADDED'] . adm_back_link($this->u_action
. '&u=' . $user_id));
997 $limit_days = array(0 => phpbb
::$user->lang
['ALL_ENTRIES'], 1 => phpbb
::$user->lang
['1_DAY'], 7 => phpbb
::$user->lang
['7_DAYS'], 14 => phpbb
::$user->lang
['2_WEEKS'], 30 => phpbb
::$user->lang
['1_MONTH'], 90 => phpbb
::$user->lang
['3_MONTHS'], 180 => phpbb
::$user->lang
['6_MONTHS'], 365 => phpbb
::$user->lang
['1_YEAR']);
998 $sort_by_text = array('u' => phpbb
::$user->lang
['SORT_USERNAME'], 't' => phpbb
::$user->lang
['SORT_DATE'], 'i' => phpbb
::$user->lang
['SORT_IP'], 'o' => phpbb
::$user->lang
['SORT_ACTION']);
999 $sort_by_sql = array('u' => 'u.username_clean', 't' => 'l.log_time', 'i' => 'l.log_ip', 'o' => 'l.log_operation');
1001 $s_limit_days = $s_sort_key = $s_sort_dir = $u_sort_param = '';
1002 gen_sort_selects($limit_days, $sort_by_text, $sort_days, $sort_key, $sort_dir, $s_limit_days, $s_sort_key, $s_sort_dir, $u_sort_param);
1004 // Define where and sort sql for use in displaying logs
1005 $sql_where = ($sort_days) ?
(time() - ($sort_days * 86400)) : 0;
1006 $sql_sort = $sort_by_sql[$sort_key] . ' ' . (($sort_dir == 'd') ?
'DESC' : 'ASC');
1009 $log_data = array();
1011 view_log('user', $log_data, $log_count, phpbb
::$config['topics_per_page'], $start, 0, 0, $user_id, $sql_where, $sql_sort);
1013 phpbb
::$template->assign_vars(array(
1014 'S_FEEDBACK' => true,
1015 'S_ON_PAGE' => on_page($log_count, phpbb
::$config['topics_per_page'], $start),
1016 'PAGINATION' => generate_pagination($this->u_action
. "&u=$user_id&$u_sort_param", $log_count, phpbb
::$config['topics_per_page'], $start, true),
1018 'S_LIMIT_DAYS' => $s_limit_days,
1019 'S_SORT_KEY' => $s_sort_key,
1020 'S_SORT_DIR' => $s_sort_dir,
1021 'S_CLEARLOGS' => phpbb
::$acl->acl_get('a_clearlogs'),
1024 foreach ($log_data as $row)
1026 phpbb
::$template->assign_block_vars('log', array(
1027 'USERNAME' => $row['username_full'],
1029 'DATE' => phpbb
::$user->format_date($row['time']),
1030 'ACTION' => nl2br($row['action']),
1039 include(PHPBB_ROOT_PATH
. 'includes/functions_user.' . PHP_EXT
);
1040 include(PHPBB_ROOT_PATH
. 'includes/functions_profile_fields.' . PHP_EXT
);
1042 $cp = new custom_profile();
1044 $cp_data = $cp_error = array();
1046 $sql = 'SELECT lang_id
1047 FROM ' . LANG_TABLE
. "
1048 WHERE lang_iso = '" . phpbb
::$db->sql_escape(phpbb
::$user->data
['user_lang']) . "'";
1049 $result = phpbb
::$db->sql_query($sql);
1050 $row = phpbb
::$db->sql_fetchrow($result);
1051 phpbb
::$db->sql_freeresult($result);
1053 $user_row['iso_lang_id'] = $row['lang_id'];
1056 'icq' => request_var('icq', $user_row['user_icq']),
1057 'aim' => request_var('aim', $user_row['user_aim']),
1058 'msn' => request_var('msn', $user_row['user_msnm']),
1059 'yim' => request_var('yim', $user_row['user_yim']),
1060 'jabber' => utf8_normalize_nfc(request_var('jabber', $user_row['user_jabber'], true)),
1061 'website' => request_var('website', $user_row['user_website']),
1062 'location' => utf8_normalize_nfc(request_var('location', $user_row['user_from'], true)),
1063 'occupation' => utf8_normalize_nfc(request_var('occupation', $user_row['user_occ'], true)),
1064 'interests' => utf8_normalize_nfc(request_var('interests', $user_row['user_interests'], true)),
1070 if ($user_row['user_birthday'])
1072 list($data['bday_day'], $data['bday_month'], $data['bday_year']) = explode('-', $user_row['user_birthday']);
1075 $data['bday_day'] = request_var('bday_day', $data['bday_day']);
1076 $data['bday_month'] = request_var('bday_month', $data['bday_month']);
1077 $data['bday_year'] = request_var('bday_year', $data['bday_year']);
1078 $data['user_birthday'] = sprintf('%2d-%2d-%4d', $data['bday_day'], $data['bday_month'], $data['bday_year']);
1083 $error = validate_data($data, array(
1085 array('string', true, 3, 15),
1086 array('match', true, '#^[0-9]+$#i')),
1087 'aim' => array('string', true, 3, 255),
1088 'msn' => array('string', true, 5, 255),
1090 array('string', true, 5, 255),
1092 'yim' => array('string', true, 5, 255),
1094 array('string', true, 12, 255),
1095 array('match', true, '#^http[s]?://(.*?\.)*?[a-z0-9\-]+\.[a-z]{2,4}#i')),
1096 'location' => array('string', true, 2, 100),
1097 'occupation' => array('string', true, 2, 500),
1098 'interests' => array('string', true, 2, 500),
1099 'bday_day' => array('num', true, 1, 31),
1100 'bday_month' => array('num', true, 1, 12),
1101 'bday_year' => array('num', true, 1901, gmdate('Y', time())),
1102 'user_birthday' => array('date', true),
1105 // validate custom profile fields
1106 $cp->submit_cp_field('profile', $user_row['iso_lang_id'], $cp_data, $cp_error);
1108 if (sizeof($cp_error))
1110 $error = array_merge($error, $cp_error);
1112 if (!check_form_key($form_name))
1114 $error[] = 'FORM_INVALID';
1117 if (!sizeof($error))
1120 'user_icq' => $data['icq'],
1121 'user_aim' => $data['aim'],
1122 'user_msnm' => $data['msn'],
1123 'user_yim' => $data['yim'],
1124 'user_jabber' => $data['jabber'],
1125 'user_website' => $data['website'],
1126 'user_from' => $data['location'],
1127 'user_occ' => $data['occupation'],
1128 'user_interests'=> $data['interests'],
1129 'user_birthday' => $data['user_birthday'],
1132 $sql = 'UPDATE ' . USERS_TABLE
. '
1133 SET ' . phpbb
::$db->sql_build_array('UPDATE', $sql_ary) . "
1134 WHERE user_id = $user_id";
1135 phpbb
::$db->sql_query($sql);
1137 // Update Custom Fields
1138 if (sizeof($cp_data))
1140 switch (phpbb
::$db->dbms_type
)
1146 $right_delim = $left_delim = '"';
1156 $right_delim = $left_delim = '`';
1160 foreach ($cp_data as $key => $value)
1162 $cp_data[$left_delim . $key . $right_delim] = $value;
1163 unset($cp_data[$key]);
1166 $sql = 'UPDATE ' . PROFILE_FIELDS_DATA_TABLE
. '
1167 SET ' . phpbb
::$db->sql_build_array('UPDATE', $cp_data) . "
1168 WHERE user_id = $user_id";
1169 phpbb
::$db->sql_query($sql);
1171 if (!phpbb
::$db->sql_affectedrows())
1173 $cp_data['user_id'] = (int) $user_id;
1175 phpbb
::$db->sql_return_on_error(true);
1177 $sql = 'INSERT INTO ' . PROFILE_FIELDS_DATA_TABLE
. ' ' . phpbb
::$db->sql_build_array('INSERT', $cp_data);
1178 phpbb
::$db->sql_query($sql);
1180 phpbb
::$db->sql_return_on_error(false);
1184 trigger_error(phpbb
::$user->lang
['USER_PROFILE_UPDATED'] . adm_back_link($this->u_action
. '&u=' . $user_id));
1187 // Replace "error" strings with their real, localised form
1188 $error = preg_replace('#^([A-Z_]+)$#e', "phpbb::\$user->lang('\\1')", $error);
1191 $s_birthday_day_options = '<option value="0"' . ((!$data['bday_day']) ?
' selected="selected"' : '') . '>--</option>';
1192 for ($i = 1; $i < 32; $i++
)
1194 $selected = ($i == $data['bday_day']) ?
' selected="selected"' : '';
1195 $s_birthday_day_options .= "<option value=\"$i\"$selected>$i</option>";
1198 $s_birthday_month_options = '<option value="0"' . ((!$data['bday_month']) ?
' selected="selected"' : '') . '>--</option>';
1199 for ($i = 1; $i < 13; $i++
)
1201 $selected = ($i == $data['bday_month']) ?
' selected="selected"' : '';
1202 $s_birthday_month_options .= "<option value=\"$i\"$selected>$i</option>";
1204 $s_birthday_year_options = '';
1207 $s_birthday_year_options = '<option value="0"' . ((!$data['bday_year']) ?
' selected="selected"' : '') . '>--</option>';
1208 for ($i = $now['year'] - 100; $i < $now['year']; $i++
)
1210 $selected = ($i == $data['bday_year']) ?
' selected="selected"' : '';
1211 $s_birthday_year_options .= "<option value=\"$i\"$selected>$i</option>";
1215 phpbb
::$template->assign_vars(array(
1216 'ICQ' => $data['icq'],
1217 'YIM' => $data['yim'],
1218 'AIM' => $data['aim'],
1219 'MSN' => $data['msn'],
1220 'JABBER' => $data['jabber'],
1221 'WEBSITE' => $data['website'],
1222 'LOCATION' => $data['location'],
1223 'OCCUPATION' => $data['occupation'],
1224 'INTERESTS' => $data['interests'],
1226 'S_BIRTHDAY_DAY_OPTIONS' => $s_birthday_day_options,
1227 'S_BIRTHDAY_MONTH_OPTIONS' => $s_birthday_month_options,
1228 'S_BIRTHDAY_YEAR_OPTIONS' => $s_birthday_year_options,
1230 'S_PROFILE' => true,
1233 // Get additional profile fields and assign them to the template block var 'profile_fields'
1234 phpbb
::$user->get_profile_fields($user_id);
1236 $cp->generate_profile_fields('profile', $user_row['iso_lang_id']);
1242 include(PHPBB_ROOT_PATH
. 'includes/functions_user.' . PHP_EXT
);
1245 'dateformat' => utf8_normalize_nfc(request_var('dateformat', $user_row['user_dateformat'], true)),
1246 'lang' => basename(request_var('lang', $user_row['user_lang'])),
1247 'tz' => request_var('tz', (float) $user_row['user_timezone']),
1248 'style' => request_var('style', $user_row['user_style']),
1249 'dst' => request_var('dst', $user_row['user_dst']),
1250 'viewemail' => request_var('viewemail', $user_row['user_allow_viewemail']),
1251 'massemail' => request_var('massemail', $user_row['user_allow_massemail']),
1252 'hideonline' => request_var('hideonline', !$user_row['user_allow_viewonline']),
1253 'notifymethod' => request_var('notifymethod', $user_row['user_notify_type']),
1254 'notifypm' => request_var('notifypm', $user_row['user_notify_pm']),
1255 'popuppm' => request_var('popuppm', $this->optionget($user_row, 'popuppm')),
1256 'allowpm' => request_var('allowpm', $user_row['user_allow_pm']),
1258 'topic_sk' => request_var('topic_sk', ($user_row['user_topic_sortby_type']) ?
$user_row['user_topic_sortby_type'] : 't'),
1259 'topic_sd' => request_var('topic_sd', ($user_row['user_topic_sortby_dir']) ?
$user_row['user_topic_sortby_dir'] : 'd'),
1260 'topic_st' => request_var('topic_st', ($user_row['user_topic_show_days']) ?
$user_row['user_topic_show_days'] : 0),
1262 'post_sk' => request_var('post_sk', ($user_row['user_post_sortby_type']) ?
$user_row['user_post_sortby_type'] : 't'),
1263 'post_sd' => request_var('post_sd', ($user_row['user_post_sortby_dir']) ?
$user_row['user_post_sortby_dir'] : 'a'),
1264 'post_st' => request_var('post_st', ($user_row['user_post_show_days']) ?
$user_row['user_post_show_days'] : 0),
1266 'view_images' => request_var('view_images', $this->optionget($user_row, 'viewimg')),
1267 'view_flash' => request_var('view_flash', $this->optionget($user_row, 'viewflash')),
1268 'view_smilies' => request_var('view_smilies', $this->optionget($user_row, 'viewsmilies')),
1269 'view_sigs' => request_var('view_sigs', $this->optionget($user_row, 'viewsigs')),
1270 'view_avatars' => request_var('view_avatars', $this->optionget($user_row, 'viewavatars')),
1271 'view_wordcensor' => request_var('view_wordcensor', $this->optionget($user_row, 'viewcensors')),
1273 'bbcode' => request_var('bbcode', $this->optionget($user_row, 'bbcode')),
1274 'smilies' => request_var('smilies', $this->optionget($user_row, 'smilies')),
1275 'sig' => request_var('sig', $this->optionget($user_row, 'attachsig')),
1276 'notify' => request_var('notify', $user_row['user_notify']),
1281 $error = validate_data($data, array(
1282 'dateformat' => array('string', false, 1, 30),
1283 'lang' => array('match', false, '#^[a-z_\-]{2,}$#i'),
1284 'tz' => array('num', false, -14, 14),
1286 'topic_sk' => array('string', false, 1, 1),
1287 'topic_sd' => array('string', false, 1, 1),
1288 'post_sk' => array('string', false, 1, 1),
1289 'post_sd' => array('string', false, 1, 1),
1292 if (!check_form_key($form_name))
1294 $error[] = 'FORM_INVALID';
1297 if (!sizeof($error))
1299 $this->optionset($user_row, 'popuppm', $data['popuppm']);
1300 $this->optionset($user_row, 'viewimg', $data['view_images']);
1301 $this->optionset($user_row, 'viewflash', $data['view_flash']);
1302 $this->optionset($user_row, 'viewsmilies', $data['view_smilies']);
1303 $this->optionset($user_row, 'viewsigs', $data['view_sigs']);
1304 $this->optionset($user_row, 'viewavatars', $data['view_avatars']);
1305 $this->optionset($user_row, 'viewcensors', $data['view_wordcensor']);
1306 $this->optionset($user_row, 'bbcode', $data['bbcode']);
1307 $this->optionset($user_row, 'smilies', $data['smilies']);
1308 $this->optionset($user_row, 'attachsig', $data['sig']);
1311 'user_options' => $user_row['user_options'],
1313 'user_allow_pm' => $data['allowpm'],
1314 'user_allow_viewemail' => $data['viewemail'],
1315 'user_allow_massemail' => $data['massemail'],
1316 'user_allow_viewonline' => !$data['hideonline'],
1317 'user_notify_type' => $data['notifymethod'],
1318 'user_notify_pm' => $data['notifypm'],
1320 'user_dst' => $data['dst'],
1321 'user_dateformat' => $data['dateformat'],
1322 'user_lang' => $data['lang'],
1323 'user_timezone' => $data['tz'],
1324 'user_style' => $data['style'],
1326 'user_topic_sortby_type' => $data['topic_sk'],
1327 'user_post_sortby_type' => $data['post_sk'],
1328 'user_topic_sortby_dir' => $data['topic_sd'],
1329 'user_post_sortby_dir' => $data['post_sd'],
1331 'user_topic_show_days' => $data['topic_st'],
1332 'user_post_show_days' => $data['post_st'],
1334 'user_notify' => $data['notify'],
1337 $sql = 'UPDATE ' . USERS_TABLE
. '
1338 SET ' . phpbb
::$db->sql_build_array('UPDATE', $sql_ary) . "
1339 WHERE user_id = $user_id";
1340 phpbb
::$db->sql_query($sql);
1342 trigger_error(phpbb
::$user->lang
['USER_PREFS_UPDATED'] . adm_back_link($this->u_action
. '&u=' . $user_id));
1345 // Replace "error" strings with their real, localised form
1346 $error = preg_replace('#^([A-Z_]+)$#e', "phpbb::\$user->lang('\\1')", $error);
1349 $dateformat_options = '';
1350 foreach (phpbb
::$user->lang
['dateformats'] as $format => $null)
1352 $dateformat_options .= '<option value="' . $format . '"' . (($format == $data['dateformat']) ?
' selected="selected"' : '') . '>';
1353 $dateformat_options .= phpbb
::$user->format_date(time(), $format, false) . ((strpos($format, '|') !== false) ? phpbb
::$user->lang
['VARIANT_DATE_SEPARATOR'] . phpbb
::$user->format_date(time(), $format, true) : '');
1354 $dateformat_options .= '</option>';
1359 $dateformat_options .= '<option value="custom"';
1360 if (!isset(phpbb
::$user->lang
['dateformats'][$data['dateformat']]))
1362 $dateformat_options .= ' selected="selected"';
1365 $dateformat_options .= '>' . phpbb
::$user->lang
['CUSTOM_DATEFORMAT'] . '</option>';
1367 $sort_dir_text = array('a' => phpbb
::$user->lang
['ASCENDING'], 'd' => phpbb
::$user->lang
['DESCENDING']);
1369 // Topic ordering options
1370 $limit_topic_days = array(0 => phpbb
::$user->lang
['ALL_TOPICS'], 1 => phpbb
::$user->lang
['1_DAY'], 7 => phpbb
::$user->lang
['7_DAYS'], 14 => phpbb
::$user->lang
['2_WEEKS'], 30 => phpbb
::$user->lang
['1_MONTH'], 90 => phpbb
::$user->lang
['3_MONTHS'], 180 => phpbb
::$user->lang
['6_MONTHS'], 365 => phpbb
::$user->lang
['1_YEAR']);
1371 $sort_by_topic_text = array('a' => phpbb
::$user->lang
['AUTHOR'], 't' => phpbb
::$user->lang
['POST_TIME'], 'r' => phpbb
::$user->lang
['REPLIES'], 's' => phpbb
::$user->lang
['SUBJECT'], 'v' => phpbb
::$user->lang
['VIEWS']);
1373 // Post ordering options
1374 $limit_post_days = array(0 => phpbb
::$user->lang
['ALL_POSTS'], 1 => phpbb
::$user->lang
['1_DAY'], 7 => phpbb
::$user->lang
['7_DAYS'], 14 => phpbb
::$user->lang
['2_WEEKS'], 30 => phpbb
::$user->lang
['1_MONTH'], 90 => phpbb
::$user->lang
['3_MONTHS'], 180 => phpbb
::$user->lang
['6_MONTHS'], 365 => phpbb
::$user->lang
['1_YEAR']);
1375 $sort_by_post_text = array('a' => phpbb
::$user->lang
['AUTHOR'], 't' => phpbb
::$user->lang
['POST_TIME'], 's' => phpbb
::$user->lang
['SUBJECT']);
1377 $_options = array('topic', 'post');
1378 foreach ($_options as $sort_option)
1380 $
{'s_limit_' . $sort_option . '_days'} = '<select name="' . $sort_option . '_st">';
1381 foreach ($
{'limit_' . $sort_option . '_days'} as $day => $text)
1383 $selected = ($data[$sort_option . '_st'] == $day) ?
' selected="selected"' : '';
1384 $
{'s_limit_' . $sort_option . '_days'} .= '<option value="' . $day . '"' . $selected . '>' . $text . '</option>';
1386 $
{'s_limit_' . $sort_option . '_days'} .= '</select>';
1388 $
{'s_sort_' . $sort_option . '_key'} = '<select name="' . $sort_option . '_sk">';
1389 foreach ($
{'sort_by_' . $sort_option . '_text'} as $key => $text)
1391 $selected = ($data[$sort_option . '_sk'] == $key) ?
' selected="selected"' : '';
1392 $
{'s_sort_' . $sort_option . '_key'} .= '<option value="' . $key . '"' . $selected . '>' . $text . '</option>';
1394 $
{'s_sort_' . $sort_option . '_key'} .= '</select>';
1396 $
{'s_sort_' . $sort_option . '_dir'} = '<select name="' . $sort_option . '_sd">';
1397 foreach ($sort_dir_text as $key => $value)
1399 $selected = ($data[$sort_option . '_sd'] == $key) ?
' selected="selected"' : '';
1400 $
{'s_sort_' . $sort_option . '_dir'} .= '<option value="' . $key . '"' . $selected . '>' . $value . '</option>';
1402 $
{'s_sort_' . $sort_option . '_dir'} .= '</select>';
1405 phpbb
::$template->assign_vars(array(
1407 'S_JABBER_DISABLED' => (phpbb
::$config['jab_enable'] && $user_row['user_jabber'] && @extension_loaded
('xml')) ?
false : true,
1409 'VIEW_EMAIL' => $data['viewemail'],
1410 'MASS_EMAIL' => $data['massemail'],
1411 'ALLOW_PM' => $data['allowpm'],
1412 'HIDE_ONLINE' => $data['hideonline'],
1413 'NOTIFY_EMAIL' => ($data['notifymethod'] == NOTIFY_EMAIL
) ?
true : false,
1414 'NOTIFY_IM' => ($data['notifymethod'] == NOTIFY_IM
) ?
true : false,
1415 'NOTIFY_BOTH' => ($data['notifymethod'] == NOTIFY_BOTH
) ?
true : false,
1416 'NOTIFY_PM' => $data['notifypm'],
1417 'POPUP_PM' => $data['popuppm'],
1418 'DST' => $data['dst'],
1419 'BBCODE' => $data['bbcode'],
1420 'SMILIES' => $data['smilies'],
1421 'ATTACH_SIG' => $data['sig'],
1422 'NOTIFY' => $data['notify'],
1423 'VIEW_IMAGES' => $data['view_images'],
1424 'VIEW_FLASH' => $data['view_flash'],
1425 'VIEW_SMILIES' => $data['view_smilies'],
1426 'VIEW_SIGS' => $data['view_sigs'],
1427 'VIEW_AVATARS' => $data['view_avatars'],
1428 'VIEW_WORDCENSOR' => $data['view_wordcensor'],
1430 'S_TOPIC_SORT_DAYS' => $s_limit_topic_days,
1431 'S_TOPIC_SORT_KEY' => $s_sort_topic_key,
1432 'S_TOPIC_SORT_DIR' => $s_sort_topic_dir,
1433 'S_POST_SORT_DAYS' => $s_limit_post_days,
1434 'S_POST_SORT_KEY' => $s_sort_post_key,
1435 'S_POST_SORT_DIR' => $s_sort_post_dir,
1437 'DATE_FORMAT' => $data['dateformat'],
1438 'S_DATEFORMAT_OPTIONS' => $dateformat_options,
1439 'S_CUSTOM_DATEFORMAT' => $s_custom,
1440 'DEFAULT_DATEFORMAT' => phpbb
::$config['default_dateformat'],
1441 'A_DEFAULT_DATEFORMAT' => addslashes(phpbb
::$config['default_dateformat']),
1443 'S_LANG_OPTIONS' => language_select($data['lang']),
1444 'S_STYLE_OPTIONS' => style_select($data['style']),
1445 'S_TZ_OPTIONS' => tz_select($data['tz'], true),
1452 include(PHPBB_ROOT_PATH
. 'includes/functions_display.' . PHP_EXT
);
1453 include(PHPBB_ROOT_PATH
. 'includes/functions_user.' . PHP_EXT
);
1455 $can_upload = (file_exists(PHPBB_ROOT_PATH
. phpbb
::$config['avatar_path']) && @is_writable
(PHPBB_ROOT_PATH
. phpbb
::$config['avatar_path']) && $file_uploads) ?
true : false;
1460 if (!check_form_key($form_name))
1462 trigger_error(phpbb
::$user->lang
['FORM_INVALID'] . adm_back_link($this->u_action
. '&u=' . $user_id), E_USER_WARNING
);
1465 if (avatar_process_user($error, $user_row))
1467 trigger_error(phpbb
::$user->lang
['USER_AVATAR_UPDATED'] . adm_back_link($this->u_action
. '&u=' . $user_row['user_id']));
1470 // Replace "error" strings with their real, localised form
1471 $error = preg_replace('#^([A-Z_]+)$#e', "phpbb::\$user->lang('\\1')", $error);
1474 // Generate users avatar
1475 $avatar_img = ($user_row['user_avatar']) ?
get_user_avatar($user_row['user_avatar'], $user_row['user_avatar_type'], $user_row['user_avatar_width'], $user_row['user_avatar_height']) : '<img src="' . PHPBB_ADMIN_PATH
. 'images/no_avatar.gif" alt="" />';
1477 $display_gallery = phpbb_request
::is_set_post('display_gallery');
1478 $avatar_select = basename(request_var('avatar_select', ''));
1479 $category = basename(request_var('category', ''));
1481 if (phpbb
::$config['allow_avatar_local'] && $display_gallery)
1483 avatar_gallery($category, $avatar_select, 4);
1486 phpbb
::$template->assign_vars(array(
1488 'S_CAN_UPLOAD' => ($can_upload && phpbb
::$config['allow_avatar_upload']) ?
true : false,
1489 'S_ALLOW_REMOTE' => (phpbb
::$config['allow_avatar_remote']) ?
true : false,
1490 'S_DISPLAY_GALLERY' => (phpbb
::$config['allow_avatar_local'] && !$display_gallery) ?
true : false,
1491 'S_IN_GALLERY' => (phpbb
::$config['allow_avatar_local'] && $display_gallery) ?
true : false,
1493 'AVATAR_IMAGE' => $avatar_img,
1494 'AVATAR_MAX_FILESIZE' => phpbb
::$config['avatar_filesize'],
1495 'USER_AVATAR_WIDTH' => $user_row['user_avatar_width'],
1496 'USER_AVATAR_HEIGHT' => $user_row['user_avatar_height'],
1498 'L_AVATAR_EXPLAIN' => sprintf(phpbb
::$user->lang
['AVATAR_EXPLAIN'], phpbb
::$config['avatar_max_width'], phpbb
::$config['avatar_max_height'], round(phpbb
::$config['avatar_filesize'] / 1024)),
1507 if (!check_form_key($form_name))
1509 trigger_error(phpbb
::$user->lang
['FORM_INVALID'] . adm_back_link($this->u_action
. '&u=' . $user_id), E_USER_WARNING
);
1512 $rank_id = request_var('user_rank', 0);
1514 $sql = 'UPDATE ' . USERS_TABLE
. "
1515 SET user_rank = $rank_id
1516 WHERE user_id = $user_id";
1517 phpbb
::$db->sql_query($sql);
1519 trigger_error(phpbb
::$user->lang
['USER_RANK_UPDATED'] . adm_back_link($this->u_action
. '&u=' . $user_id));
1523 FROM ' . RANKS_TABLE
. '
1524 WHERE rank_special = 1
1525 ORDER BY rank_title';
1526 $result = phpbb
::$db->sql_query($sql);
1528 $s_rank_options = '<option value="0"' . ((!$user_row['user_rank']) ?
' selected="selected"' : '') . '>' . phpbb
::$user->lang
['NO_SPECIAL_RANK'] . '</option>';
1530 while ($row = phpbb
::$db->sql_fetchrow($result))
1532 $selected = ($user_row['user_rank'] && $row['rank_id'] == $user_row['user_rank']) ?
' selected="selected"' : '';
1533 $s_rank_options .= '<option value="' . $row['rank_id'] . '"' . $selected . '>' . $row['rank_title'] . '</option>';
1535 phpbb
::$db->sql_freeresult($result);
1537 phpbb
::$template->assign_vars(array(
1539 'S_RANK_OPTIONS' => $s_rank_options,
1546 include_once(PHPBB_ROOT_PATH
. 'includes/functions_posting.' . PHP_EXT
);
1547 include_once(PHPBB_ROOT_PATH
. 'includes/functions_display.' . PHP_EXT
);
1549 $enable_bbcode = (phpbb
::$config['allow_sig_bbcode']) ?
((request_var('disable_bbcode', !phpbb
::$user->optionget('bbcode'))) ?
false : true) : false;
1550 $enable_smilies = (phpbb
::$config['allow_sig_smilies']) ?
((request_var('disable_smilies', !phpbb
::$user->optionget('smilies'))) ?
false : true) : false;
1551 $enable_urls = (phpbb
::$config['allow_sig_links']) ?
((request_var('disable_magic_url', false)) ?
false : true) : false;
1552 $signature = utf8_normalize_nfc(request_var('signature', (string) $user_row['user_sig'], true));
1554 $preview = phpbb_request
::is_set_post('preview');
1556 if ($submit ||
$preview)
1558 include_once(PHPBB_ROOT_PATH
. 'includes/message_parser.' . PHP_EXT
);
1560 $message_parser = new parse_message($signature);
1562 // Allowing Quote BBCode
1563 $message_parser->parse($enable_bbcode, $enable_urls, $enable_smilies, phpbb
::$config['allow_sig_img'], phpbb
::$config['allow_sig_flash'], true, phpbb
::$config['allow_sig_links'], true, 'sig');
1565 if (sizeof($message_parser->warn_msg
))
1567 $error[] = implode('<br />', $message_parser->warn_msg
);
1570 if (!check_form_key($form_name))
1572 $error = 'FORM_INVALID';
1575 if (!sizeof($error) && $submit)
1578 'user_sig' => (string) $message_parser->message
,
1579 'user_sig_bbcode_uid' => (string) $message_parser->bbcode_uid
,
1580 'user_sig_bbcode_bitfield' => (string) $message_parser->bbcode_bitfield
1583 $sql = 'UPDATE ' . USERS_TABLE
. '
1584 SET ' . phpbb
::$db->sql_build_array('UPDATE', $sql_ary) . '
1585 WHERE user_id = ' . $user_id;
1586 phpbb
::$db->sql_query($sql);
1588 trigger_error(phpbb
::$user->lang
['USER_SIG_UPDATED'] . adm_back_link($this->u_action
. '&u=' . $user_id));
1591 // Replace "error" strings with their real, localised form
1592 $error = preg_replace('#^([A-Z_]+)$#e', "phpbb::\$user->lang('\\1')", $error);
1595 $signature_preview = '';
1599 // Now parse it for displaying
1600 $signature_preview = $message_parser->format_display($enable_bbcode, $enable_urls, $enable_smilies, false);
1601 unset($message_parser);
1604 decode_message($signature, $user_row['user_sig_bbcode_uid']);
1606 phpbb
::$template->assign_vars(array(
1607 'S_SIGNATURE' => true,
1609 'SIGNATURE' => $signature,
1610 'SIGNATURE_PREVIEW' => $signature_preview,
1612 'S_BBCODE_CHECKED' => (!$enable_bbcode) ?
' checked="checked"' : '',
1613 'S_SMILIES_CHECKED' => (!$enable_smilies) ?
' checked="checked"' : '',
1614 'S_MAGIC_URL_CHECKED' => (!$enable_urls) ?
' checked="checked"' : '',
1616 'BBCODE_STATUS' => (phpbb
::$config['allow_sig_bbcode']) ?
sprintf(phpbb
::$user->lang
['BBCODE_IS_ON'], '<a href="' . append_sid('faq', 'mode=bbcode') . '">', '</a>') : sprintf(phpbb
::$user->lang
['BBCODE_IS_OFF'], '<a href="' . append_sid('faq', 'mode=bbcode') . '">', '</a>'),
1617 'SMILIES_STATUS' => (phpbb
::$config['allow_sig_smilies']) ? phpbb
::$user->lang
['SMILIES_ARE_ON'] : phpbb
::$user->lang
['SMILIES_ARE_OFF'],
1618 'IMG_STATUS' => (phpbb
::$config['allow_sig_img']) ? phpbb
::$user->lang
['IMAGES_ARE_ON'] : phpbb
::$user->lang
['IMAGES_ARE_OFF'],
1619 'FLASH_STATUS' => (phpbb
::$config['allow_sig_flash']) ? phpbb
::$user->lang
['FLASH_IS_ON'] : phpbb
::$user->lang
['FLASH_IS_OFF'],
1620 'URL_STATUS' => (phpbb
::$config['allow_sig_links']) ? phpbb
::$user->lang
['URL_IS_ON'] : phpbb
::$user->lang
['URL_IS_OFF'],
1622 'L_SIGNATURE_EXPLAIN' => sprintf(phpbb
::$user->lang
['SIGNATURE_EXPLAIN'], phpbb
::$config['max_sig_chars']),
1624 'S_BBCODE_ALLOWED' => phpbb
::$config['allow_sig_bbcode'],
1625 'S_SMILIES_ALLOWED' => phpbb
::$config['allow_sig_smilies'],
1626 'S_BBCODE_IMG' => (phpbb
::$config['allow_sig_img']) ?
true : false,
1627 'S_BBCODE_FLASH' => (phpbb
::$config['allow_sig_flash']) ?
true : false,
1628 'S_LINKS_ALLOWED' => (phpbb
::$config['allow_sig_links']) ?
true : false,
1631 // Assigning custom bbcodes
1632 display_custom_bbcodes();
1638 $start = request_var('start', 0);
1639 $deletemark = phpbb_request
::is_set_post('delmarked');
1640 $marked = request_var('mark', array(0));
1643 $sort_key = request_var('sk', 'a');
1644 $sort_dir = request_var('sd', 'd');
1646 if ($deletemark && sizeof($marked))
1648 $sql = 'SELECT attach_id
1649 FROM ' . ATTACHMENTS_TABLE
. '
1650 WHERE poster_id = ' . $user_id . '
1652 AND ' . phpbb
::$db->sql_in_set('attach_id', $marked);
1653 $result = phpbb
::$db->sql_query($sql);
1656 while ($row = phpbb
::$db->sql_fetchrow($result))
1658 $marked[] = $row['attach_id'];
1660 phpbb
::$db->sql_freeresult($result);
1663 if ($deletemark && sizeof($marked))
1665 if (confirm_box(true))
1667 $sql = 'SELECT real_filename
1668 FROM ' . ATTACHMENTS_TABLE
. '
1669 WHERE ' . phpbb
::$db->sql_in_set('attach_id', $marked);
1670 $result = phpbb
::$db->sql_query($sql);
1672 $log_attachments = array();
1673 while ($row = phpbb
::$db->sql_fetchrow($result))
1675 $log_attachments[] = $row['real_filename'];
1677 phpbb
::$db->sql_freeresult($result);
1679 delete_attachments('attach', $marked);
1681 $message = (sizeof($log_attachments) == 1) ? phpbb
::$user->lang
['ATTACHMENT_DELETED'] : phpbb
::$user->lang
['ATTACHMENTS_DELETED'];
1683 add_log('admin', 'LOG_ATTACHMENTS_DELETED', implode(', ', $log_attachments));
1684 trigger_error($message . adm_back_link($this->u_action
. '&u=' . $user_id));
1688 confirm_box(false, phpbb
::$user->lang
['CONFIRM_OPERATION'], build_hidden_fields(array(
1692 'action' => $action,
1693 'delmarked' => true,
1699 $sk_text = array('a' => phpbb
::$user->lang
['SORT_FILENAME'], 'c' => phpbb
::$user->lang
['SORT_EXTENSION'], 'd' => phpbb
::$user->lang
['SORT_SIZE'], 'e' => phpbb
::$user->lang
['SORT_DOWNLOADS'], 'f' => phpbb
::$user->lang
['SORT_POST_TIME'], 'g' => phpbb
::$user->lang
['SORT_TOPIC_TITLE']);
1700 $sk_sql = array('a' => 'a.real_filename', 'c' => 'a.extension', 'd' => 'a.filesize', 'e' => 'a.download_count', 'f' => 'a.filetime', 'g' => 't.topic_title');
1702 $sd_text = array('a' => phpbb
::$user->lang
['ASCENDING'], 'd' => phpbb
::$user->lang
['DESCENDING']);
1705 foreach ($sk_text as $key => $value)
1707 $selected = ($sort_key == $key) ?
' selected="selected"' : '';
1708 $s_sort_key .= '<option value="' . $key . '"' . $selected . '>' . $value . '</option>';
1712 foreach ($sd_text as $key => $value)
1714 $selected = ($sort_dir == $key) ?
' selected="selected"' : '';
1715 $s_sort_dir .= '<option value="' . $key . '"' . $selected . '>' . $value . '</option>';
1718 if (!isset($sk_sql[$sort_key]))
1723 $order_by = $sk_sql[$sort_key] . ' ' . (($sort_dir == 'a') ?
'ASC' : 'DESC');
1725 $sql = 'SELECT COUNT(attach_id) as num_attachments
1726 FROM ' . ATTACHMENTS_TABLE
. "
1727 WHERE poster_id = $user_id
1729 $result = phpbb
::$db->sql_query_limit($sql, 1);
1730 $num_attachments = (int) phpbb
::$db->sql_fetchfield('num_attachments');
1731 phpbb
::$db->sql_freeresult($result);
1733 $sql = 'SELECT a.*, t.topic_title, p.message_subject as message_title
1734 FROM ' . ATTACHMENTS_TABLE
. ' a
1735 LEFT JOIN ' . TOPICS_TABLE
. ' t ON (a.topic_id = t.topic_id
1736 AND a.in_message = 0)
1737 LEFT JOIN ' . PRIVMSGS_TABLE
. ' p ON (a.post_msg_id = p.msg_id
1738 AND a.in_message = 1)
1739 WHERE a.poster_id = ' . $user_id . "
1741 ORDER BY $order_by";
1742 $result = phpbb
::$db->sql_query_limit($sql, phpbb
::$config['posts_per_page'], $start);
1744 while ($row = phpbb
::$db->sql_fetchrow($result))
1746 if ($row['in_message'])
1748 $view_topic = append_sid('ucp', "i=pm&p={$row['post_msg_id']}");
1752 $view_topic = append_sid('viewtopic', "t={$row['topic_id']}&p={$row['post_msg_id']}") . '#p' . $row['post_msg_id'];
1755 phpbb
::$template->assign_block_vars('attach', array(
1756 'REAL_FILENAME' => $row['real_filename'],
1757 'COMMENT' => nl2br($row['attach_comment']),
1758 'EXTENSION' => $row['extension'],
1759 'SIZE' => get_formatted_filesize($row['filesize']),
1760 'DOWNLOAD_COUNT' => $row['download_count'],
1761 'POST_TIME' => phpbb
::$user->format_date($row['filetime']),
1762 'TOPIC_TITLE' => ($row['in_message']) ?
$row['message_title'] : $row['topic_title'],
1764 'ATTACH_ID' => $row['attach_id'],
1765 'POST_ID' => $row['post_msg_id'],
1766 'TOPIC_ID' => $row['topic_id'],
1768 'S_IN_MESSAGE' => $row['in_message'],
1770 'U_DOWNLOAD' => append_sid('download/file', 'mode=view&id=' . $row['attach_id']),
1771 'U_VIEW_TOPIC' => $view_topic,
1774 phpbb
::$db->sql_freeresult($result);
1776 phpbb
::$template->assign_vars(array(
1777 'S_ATTACHMENTS' => true,
1778 'S_ON_PAGE' => on_page($num_attachments, phpbb
::$config['topics_per_page'], $start),
1779 'S_SORT_KEY' => $s_sort_key,
1780 'S_SORT_DIR' => $s_sort_dir,
1782 'PAGINATION' => generate_pagination($this->u_action
. "&u=$user_id&sk=$sort_key&sd=$sort_dir", $num_attachments, phpbb
::$config['topics_per_page'], $start, true),
1789 include(PHPBB_ROOT_PATH
. 'includes/functions_user.' . PHP_EXT
);
1791 phpbb
::$user->add_lang(array('groups', 'acp/groups'));
1792 $group_id = request_var('g', 0);
1796 // Check the founder only entry for this group to make sure everything is well
1797 $sql = 'SELECT group_founder_manage
1798 FROM ' . GROUPS_TABLE
. '
1799 WHERE group_id = ' . $group_id;
1800 $result = phpbb
::$db->sql_query($sql);
1801 $founder_manage = (int) phpbb
::$db->sql_fetchfield('group_founder_manage');
1802 phpbb
::$db->sql_freeresult($result);
1804 if (!phpbb
::$user->is_founder
&& $founder_manage)
1806 trigger_error(phpbb
::$user->lang
['NOT_ALLOWED_MANAGE_GROUP'] . adm_back_link($this->u_action
. '&u=' . $user_id), E_USER_WARNING
);
1811 $founder_manage = 0;
1821 trigger_error(phpbb
::$user->lang
['NO_GROUP'] . adm_back_link($this->u_action
. '&u=' . $user_id), E_USER_WARNING
);
1823 group_user_attributes($action, $group_id, $user_id);
1825 if ($action == 'default')
1827 $user_row['group_id'] = $group_id;
1833 if (confirm_box(true))
1837 trigger_error(phpbb
::$user->lang
['NO_GROUP'] . adm_back_link($this->u_action
. '&u=' . $user_id), E_USER_WARNING
);
1840 if ($error = group_user_del($group_id, $user_id))
1842 trigger_error(phpbb
::$user->lang
[$error] . adm_back_link($this->u_action
. '&u=' . $user_id), E_USER_WARNING
);
1847 // The delete action was successful - therefore update the user row...
1848 $sql = 'SELECT u.*, s.*
1849 FROM ' . USERS_TABLE
. ' u
1850 LEFT JOIN ' . SESSIONS_TABLE
. ' s ON (s.session_user_id = u.user_id)
1851 WHERE u.user_id = ' . $user_id . '
1852 ORDER BY s.session_time DESC';
1853 $result = $db->sql_query($sql);
1854 $user_row = $db->sql_fetchrow($result);
1855 $db->sql_freeresult($result);
1859 confirm_box(false, phpbb
::$user->lang
['CONFIRM_OPERATION'], build_hidden_fields(array(
1863 'action' => $action,
1871 // Add user to group?
1875 if (!check_form_key($form_name))
1877 trigger_error(phpbb
::$user->lang
['FORM_INVALID'] . adm_back_link($this->u_action
. '&u=' . $user_id), E_USER_WARNING
);
1882 trigger_error(phpbb
::$user->lang
['NO_GROUP'] . adm_back_link($this->u_action
. '&u=' . $user_id), E_USER_WARNING
);
1885 // Add user/s to group
1886 if ($error = group_user_add($group_id, $user_id))
1888 trigger_error(phpbb
::$user->lang
[$error] . adm_back_link($this->u_action
. '&u=' . $user_id), E_USER_WARNING
);
1895 $sql = 'SELECT ug.*, g.*
1896 FROM ' . GROUPS_TABLE
. ' g, ' . USER_GROUP_TABLE
. " ug
1897 WHERE ug.user_id = $user_id
1898 AND g.group_id = ug.group_id
1899 ORDER BY g.group_type DESC, ug.user_pending ASC, g.group_name";
1900 $result = phpbb
::$db->sql_query($sql);
1903 $group_data = $id_ary = array();
1904 while ($row = phpbb
::$db->sql_fetchrow($result))
1906 $type = ($row['group_type'] == GROUP_SPECIAL
) ?
'special' : (($row['user_pending']) ?
'pending' : 'normal');
1908 $group_data[$type][$i]['group_id'] = $row['group_id'];
1909 $group_data[$type][$i]['group_name'] = $row['group_name'];
1910 $group_data[$type][$i]['group_leader'] = ($row['group_leader']) ?
1 : 0;
1912 $id_ary[] = $row['group_id'];
1916 phpbb
::$db->sql_freeresult($result);
1918 // Select box for other groups
1919 $sql = 'SELECT group_id, group_name, group_type, group_founder_manage
1920 FROM ' . GROUPS_TABLE
. '
1921 ' . ((sizeof($id_ary)) ?
'WHERE ' . phpbb
::$db->sql_in_set('group_id', $id_ary, true) : '') . '
1922 ORDER BY group_type DESC, group_name ASC';
1923 $result = phpbb
::$db->sql_query($sql);
1925 $s_group_options = '';
1926 while ($row = phpbb
::$db->sql_fetchrow($result))
1928 if (!phpbb
::$config['coppa_enable'] && $row['group_name'] == 'REGISTERED_COPPA')
1933 // Do not display those groups not allowed to be managed
1934 if (!phpbb
::$user->is_founder
&& $row['group_founder_manage'])
1939 $s_group_options .= '<option' . (($row['group_type'] == GROUP_SPECIAL
) ?
' class="sep"' : '') . ' value="' . $row['group_id'] . '">' . (($row['group_type'] == GROUP_SPECIAL
) ? phpbb
::$user->lang
['G_' . $row['group_name']] : $row['group_name']) . '</option>';
1941 phpbb
::$db->sql_freeresult($result);
1944 foreach ($group_data as $group_type => $data_ary)
1946 if ($current_type != $group_type)
1948 phpbb
::$template->assign_block_vars('group', array(
1949 'S_NEW_GROUP_TYPE' => true,
1950 'GROUP_TYPE' => phpbb
::$user->lang
['USER_GROUP_' . strtoupper($group_type)],
1954 foreach ($data_ary as $data)
1956 phpbb
::$template->assign_block_vars('group', array(
1957 'U_EDIT_GROUP' => append_sid(PHPBB_ADMIN_PATH
. 'index.' . PHP_EXT
, "i=groups&mode=manage&action=edit&u=$user_id&g={$data['group_id']}&back_link=acp_users_groups"),
1958 'U_DEFAULT' => $this->u_action
. "&action=default&u=$user_id&g=" . $data['group_id'],
1959 'U_DEMOTE_PROMOTE' => $this->u_action
. '&action=' . (($data['group_leader']) ?
'demote' : 'promote') . "&u=$user_id&g=" . $data['group_id'],
1960 'U_DELETE' => $this->u_action
. "&action=delete&u=$user_id&g=" . $data['group_id'],
1962 'GROUP_NAME' => ($group_type == 'special') ? phpbb
::$user->lang
['G_' . $data['group_name']] : $data['group_name'],
1963 'L_DEMOTE_PROMOTE' => ($data['group_leader']) ? phpbb
::$user->lang
['GROUP_DEMOTE'] : phpbb
::$user->lang
['GROUP_PROMOTE'],
1965 'S_NO_DEFAULT' => ($user_row['group_id'] != $data['group_id']) ?
true : false,
1966 'S_SPECIAL_GROUP' => ($group_type == 'special') ?
true : false,
1971 phpbb
::$template->assign_vars(array(
1973 'S_GROUP_OPTIONS' => $s_group_options,
1980 include_once(PHPBB_ROOT_PATH
. 'includes/acp/auth.' . PHP_EXT
);
1982 $auth_admin = new auth_admin();
1984 phpbb
::$user->add_lang('acp/permissions');
1985 add_permission_language();
1987 $forum_id = request_var('f', 0);
1989 // Global Permissions
1992 // Select auth options
1993 $sql = 'SELECT auth_option, is_local, is_global
1994 FROM ' . ACL_OPTIONS_TABLE
. '
1995 WHERE auth_option ' . phpbb
::$db->sql_like_expression(phpbb
::$db->any_char
. '_') . '
1997 ORDER BY auth_option';
1998 $result = phpbb
::$db->sql_query($sql);
2000 $hold_ary = array();
2002 while ($row = phpbb
::$db->sql_fetchrow($result))
2004 $hold_ary = $auth_admin->get_mask('view', $user_id, false, false, $row['auth_option'], 'global', phpbb
::ACL_NEVER
);
2005 $auth_admin->display_mask('view', $row['auth_option'], $hold_ary, 'user', false, false);
2007 phpbb
::$db->sql_freeresult($result);
2013 $sql = 'SELECT auth_option, is_local, is_global
2014 FROM ' . ACL_OPTIONS_TABLE
. "
2015 WHERE auth_option " . phpbb
::$db->sql_like_expression(phpbb
::$db->any_char
. '_') . "
2017 ORDER BY is_global DESC, auth_option";
2018 $result = phpbb
::$db->sql_query($sql);
2020 while ($row = phpbb
::$db->sql_fetchrow($result))
2022 $hold_ary = $auth_admin->get_mask('view', $user_id, false, $forum_id, $row['auth_option'], 'local', phpbb
::ACL_NEVER
);
2023 $auth_admin->display_mask('view', $row['auth_option'], $hold_ary, 'user', true, false);
2025 phpbb
::$db->sql_freeresult($result);
2028 $s_forum_options = '<option value="0"' . ((!$forum_id) ?
' selected="selected"' : '') . '>' . phpbb
::$user->lang
['VIEW_GLOBAL_PERMS'] . '</option>';
2029 $s_forum_options .= make_forum_select($forum_id, false, true, false, false, false);
2031 phpbb
::$template->assign_vars(array(
2032 'S_PERMISSIONS' => true,
2034 'S_GLOBAL' => (!$forum_id) ?
true : false,
2035 'S_FORUM_OPTIONS' => $s_forum_options,
2037 'U_ACTION' => $this->u_action
. '&u=' . $user_id,
2038 'U_USER_PERMISSIONS' => append_sid(PHPBB_ADMIN_PATH
. 'index.' . PHP_EXT
, 'i=permissions&mode=setting_user_global&user_id[]=' . $user_id),
2039 'U_USER_FORUM_PERMISSIONS' => append_sid(PHPBB_ADMIN_PATH
. 'index.' . PHP_EXT
, 'i=permissions&mode=setting_user_local&user_id[]=' . $user_id),
2046 // Assign general variables
2047 phpbb
::$template->assign_vars(array(
2048 'S_ERROR' => (sizeof($error)) ?
true : false,
2049 'ERROR_MSG' => (sizeof($error)) ?
implode('<br />', $error) : '',
2054 * Optionset replacement for this module based on phpbb::$user->optionset
2056 function optionset(&$user_row, $key, $value, $data = false)
2058 $var = ($data) ?
$data : $user_row['user_options'];
2060 if ($value && !($var & 1 << phpbb
::$user->keyoptions
[$key]))
2062 $var +
= 1 << phpbb
::$user->keyoptions
[$key];
2064 else if (!$value && ($var & 1 << phpbb
::$user->keyoptions
[$key]))
2066 $var -= 1 << phpbb
::$user->keyoptions
[$key];
2070 return ($data) ?
$var : false;
2075 $user_row['user_options'] = $var;
2085 * Optionget replacement for this module based on phpbb::$user->optionget
2087 function optionget(&$user_row, $key, $data = false)
2089 $var = ($data) ?
$data : $user_row['user_options'];
2090 return ($var & 1 << phpbb
::$user->keyoptions
[$key]) ?
true : false;