phpBB/memberlist.php

   1 <?php
   2 /**
   3 *
   4 * @package phpBB3
   5 * @version $Id$
   6 * @copyright (c) 2005 phpBB Group
   7 * @license http://opensource.org/licenses/gpl-license.php GNU Public License
   8 *
   9 */
  10
  11 /**
  12 * @ignore
  13 */
  14 define('IN_PHPBB', true);
  15 $phpbb_root_path = './';
  16 $phpEx = substr(strrchr(__FILE__, '.'), 1);
  17 include($phpbb_root_path . 'common.' . $phpEx);
  18
  19 // Start session management
  20 $user->session_begin();
  21 $auth->acl($user->data);
  22 $user->setup(array('memberlist', 'groups'));
  23
  24 // Grab data
  25 $mode           = request_var('mode', '');
  26 $action         = request_var('action', '');
  27 $user_id        = request_var('u', ANONYMOUS);
  28 $group_id       = request_var('g', 0);
  29 $topic_id       = request_var('t', 0);
  30
  31 switch ($mode)
  32 {
  33         case 'email':
  34         break;
  35
  36         default:
  37                 // Can this user view profiles/memberlist?
  38                 if (!$auth->acl_gets('u_viewprofile', 'a_user', 'a_useradd', 'a_userdel'))
  39                 {
  40                         if ($user->data['user_id'] != ANONYMOUS)
  41                         {
  42                                 trigger_error('NO_VIEW_USERS');
  43                         }
  44
  45                         login_box('', ((isset($user->lang['LOGIN_EXPLAIN_' . strtoupper($mode)])) ? $user->lang['LOGIN_EXPLAIN_' . strtoupper($mode)] : $user->lang['LOGIN_EXPLAIN_MEMBERLIST']));
  46                 }
  47         break;
  48 }
  49
  50
  51 $start  = request_var('start', 0);
  52 $submit = (isset($_POST['submit'])) ? true : false;
  53
  54 $sort_key = request_var('sk', 'c');
  55 $sort_dir = request_var('sd', 'a');
  56
  57
  58 // Grab rank information for later
  59 $ranks = array();
  60 $cache->obtain_ranks($ranks);
  61
  62
  63 // What do you want to do today? ... oops, I think that line is taken ...
  64 switch ($mode)
  65 {
  66         case 'leaders':
  67                 // Display a listing of board admins, moderators
  68                 $user->add_lang('groups');
  69
  70                 $page_title = $user->lang['THE_TEAM'];
  71                 $template_html = 'memberlist_leaders.html';
  72
  73                 $user_ary = $auth->acl_get_list(false, array('a_', 'm_'), false);
  74
  75                 $admin_id_ary = $mod_id_ary = $forum_id_ary = array();
  76                 foreach ($user_ary as $forum_id => $forum_ary)
  77                 {
  78                         foreach ($forum_ary as $auth_option => $id_ary)
  79                         {
  80                                 if (!$forum_id && $auth_option == 'a_')
  81                                 {
  82                                         $admin_id_ary = array_merge($admin_id_ary, $id_ary);
  83                                         continue;
  84                                 }
  85                                 else
  86                                 {
  87                                         $mod_id_ary = array_merge($mod_id_ary, $id_ary);
  88                                 }
  89
  90                                 if ($forum_id)
  91                                 {
  92                                         foreach ($id_ary as $id)
  93                                         {
  94                                                 $forum_id_ary[$id][] = $forum_id;
  95                                         }
  96                                 }
  97                         }
  98                 }
  99
 100                 $admin_id_ary = array_unique($admin_id_ary);
 101                 $mod_id_ary = array_unique($mod_id_ary);
 102
 103                 // Admin group id...
 104                 $sql = 'SELECT group_id
 105                         FROM ' . GROUPS_TABLE . "
 106                         WHERE group_name = 'ADMINISTRATORS'";
 107                 $result = $db->sql_query($sql);
 108                 $admin_group_id = (int) $db->sql_fetchfield('group_id');
 109                 $db->sql_freeresult($result);
 110
 111                 $sql = 'SELECT forum_id, forum_name
 112                         FROM ' . FORUMS_TABLE . '
 113                         WHERE forum_type = ' . FORUM_POST;
 114                 $result = $db->sql_query($sql);
 115
 116                 $forums = array();
 117                 while ($row = $db->sql_fetchrow($result))
 118                 {
 119                         $forums[$row['forum_id']] = $row['forum_name'];
 120                 }
 121                 $db->sql_freeresult($result);
 122
 123                 $sql = $db->sql_build_query('SELECT', array(
 124                         'SELECT'        => 'u.user_id, u.group_id as default_group, u.username, u.user_colour, u.user_rank, u.user_posts, g.group_id, g.group_name, g.group_colour, g.group_type, ug.user_id as ug_user_id',
 125
 126                         'FROM'          => array(
 127                                 USERS_TABLE             => 'u',
 128                                 GROUPS_TABLE    => 'g'
 129                         ),
 130
 131                         'LEFT_JOIN'     => array(
 132                                 array(
 133                                         'FROM'  => array(USER_GROUP_TABLE => 'ug'),
 134                                         'ON'    => 'ug.group_id = g.group_id AND ug.user_pending = 0 AND ug.user_id = ' . $user->data['user_id']
 135                                 )
 136                         ),
 137
 138                         'WHERE'         => 'u.user_id IN (' . implode(', ', array_unique(array_merge($admin_id_ary, $mod_id_ary))) . ')
 139                                 AND u.group_id = g.group_id',
 140
 141                         'ORDER_BY'      => 'g.group_name ASC, u.username ASC'
 142                 ));
 143
 144                 $result = $db->sql_query($sql);
 145
 146                 while ($row = $db->sql_fetchrow($result))
 147                 {
 148                         $which_row = (in_array($row['user_id'], $admin_id_ary)) ? 'admin' : 'mod';
 149
 150                         // We sort out admins not having the admin group as default
 151                         // The drawback is that only those admins are displayed which are within
 152                         // the special group 'Administrators' and also having it assigned as their default group.
 153                         // - might change
 154                         if ($which_row == 'admin' && $row['default_group'] != $admin_group_id)
 155                         {
 156                                 // Remove from admin_id_ary, because the user may be a mod instead
 157                                 unset($admin_id_ary[array_search($row['user_id'], $admin_id_ary)]);
 158
 159                                 if (!in_array($row['user_id'], $mod_id_ary))
 160                                 {
 161                                         continue;
 162                                 }
 163                                 else
 164                                 {
 165                                         $which_row = 'mod';
 166                                 }
 167                         }
 168
 169                         $s_forum_select = '';
 170
 171                         if (isset($forum_id_ary[$row['user_id']]))
 172                         {
 173                                 if ($which_row == 'mod' && sizeof(array_diff(array_keys($forums), $forum_id_ary[$row['user_id']])))
 174                                 {
 175                                         foreach ($forum_id_ary[$row['user_id']] as $forum_id)
 176                                         {
 177                                                 if (isset($forums[$forum_id]) && $auth->acl_get('f_list', $forum_id))
 178                                                 {
 179                                                         $s_forum_select .= '<option value="">' . $forums[$forum_id] . '</option>';
 180                                                 }
 181                                         }
 182                                 }
 183                         }
 184
 185                         if ($row['group_type'] == GROUP_HIDDEN && !$auth->acl_gets('a_group', 'a_groupadd', 'a_groupdel') && $row['ug_user_id'] != $user->data['user_id'])
 186                         {
 187                                 $group_name = $user->lang['GROUP_UNDISCLOSED'];
 188                                 $u_group = '';
 189                         }
 190                         else
 191                         {
 192                                 $group_name = ($row['group_type'] == GROUP_SPECIAL) ? $user->lang['G_' . $row['group_name']] : $row['group_name'];
 193                                 $u_group = append_sid("{$phpbb_root_path}memberlist.$phpEx", 'mode=group&amp;g=' . $row['group_id']);
 194                         }
 195
 196                         $rank_title = $rank_img = '';
 197                         get_user_rank($row['user_rank'], $row['user_posts'], $rank_title, $rank_img, $rank_img_src);
 198
 199                         $template->assign_block_vars($which_row, array(
 200                                 'USER_ID'               => $row['user_id'],
 201                                 'FORUMS'                => $s_forum_select,
 202                                 'USERNAME'              => $row['username'],
 203                                 'USER_COLOR'    => $row['user_colour'],
 204                                 'RANK_TITLE'    => $rank_title,
 205                                 'GROUP_NAME'    => $group_name,
 206                                 'GROUP_COLOR'   => $row['group_colour'],
 207
 208                                 'RANK_IMG'              => $rank_img,
 209                                 'RANK_IMG_SRC'  => $rank_img_src,
 210
 211                                 'U_GROUP'               => $u_group,
 212                                 'U_VIEWPROFILE' => append_sid("{$phpbb_root_path}memberlist.$phpEx", 'mode=viewprofile&amp;u=' . $row['user_id']),
 213                                 'U_PM'                  => ($config['allow_privmsg'] && $auth->acl_get('u_sendpm')) ? append_sid("{$phpbb_root_path}ucp.$phpEx", 'i=pm&amp;mode=compose&amp;u=' . $row['user_id']) : '')
 214                         );
 215                 }
 216                 $db->sql_freeresult($result);
 217
 218                 $template->assign_vars(array(
 219                         'PM_IMG'                => $user->img('btn_pm', $user->lang['SEND_PRIVATE_MESSAGE']))
 220                 );
 221         break;
 222
 223         case 'contact':
 224                 $page_title = $user->lang['IM_USER'];
 225                 $template_html = 'memberlist_im.html';
 226
 227                 $presence_img = '';
 228                 switch ($action)
 229                 {
 230                         case 'aim':
 231                                 $lang = 'AIM';
 232                                 $sql_field = 'user_aim';
 233                                 $s_select = 'S_SEND_AIM';
 234                                 $s_action = '';
 235                         break;
 236
 237                         case 'msnm':
 238                                 $lang = 'MSNM';
 239                                 $sql_field = 'user_msnm';
 240                                 $s_select = 'S_SEND_MSNM';
 241                                 $s_action = '';
 242                         break;
 243
 244                         case 'jabber':
 245                                 $lang = 'JABBER';
 246                                 $sql_field = 'user_jabber';
 247                                 $s_select = (@extension_loaded('xml') && $config['jab_enable']) ? 'S_SEND_JABBER' : 'S_NO_SEND_JABBER';
 248                                 $s_action = append_sid("{$phpbb_root_path}memberlist.$phpEx", "mode=contact&amp;action=$action&amp;u=$user_id");
 249                         break;
 250
 251                         default:
 252                                 trigger_error('This contact option is not supported', E_USER_ERROR);
 253                         break;
 254                 }
 255
 256                 // Grab relevant data
 257                 $sql = "SELECT user_id, username, user_email, user_lang, $sql_field
 258                         FROM " . USERS_TABLE . "
 259                         WHERE user_id = $user_id
 260                                 AND user_type IN (" . USER_NORMAL . ', ' . USER_FOUNDER . ')';
 261                 $result = $db->sql_query($sql);
 262                 $row = $db->sql_fetchrow($result);
 263                 $db->sql_freeresult($result);
 264
 265                 if (!$row)
 266                 {
 267                         trigger_error('NO_USER_DATA');
 268                 }
 269
 270                 // Post data grab actions
 271                 switch ($action)
 272                 {
 273                         case 'jabber':
 274                                 if ($submit && @extension_loaded('xml') && $config['jab_enable'])
 275                                 {
 276                                         include_once($phpbb_root_path . 'includes/functions_messenger.' . $phpEx);
 277
 278                                         $subject = sprintf($user->lang['IM_JABBER_SUBJECT'], $user->data['username'], $config['server_name']);
 279                                         $message = request_var('message', '', true);
 280
 281                                         $messenger = new messenger(false);
 282
 283                                         $messenger->template('profile_send_im', $row['user_lang']);
 284                                         $messenger->subject(html_entity_decode($subject));
 285
 286                                         $messenger->replyto($user->data['user_email']);
 287                                         $messenger->im($row['user_jabber'], $row['username']);
 288
 289                                         $messenger->assign_vars(array(
 290                                                 'SITENAME'              => $config['sitename'],
 291                                                 'BOARD_EMAIL'   => $config['board_contact'],
 292                                                 'FROM_USERNAME' => html_entity_decode($user->data['username']),
 293                                                 'TO_USERNAME'   => html_entity_decode($row['username']),
 294                                                 'MESSAGE'               => html_entity_decode($message))
 295                                         );
 296
 297                                         $messenger->send(NOTIFY_IM);
 298
 299                                         $s_select = 'S_SENT_JABBER';
 300                                 }
 301                         break;
 302                 }
 303
 304                 // Send vars to the template
 305                 $template->assign_vars(array(
 306                         'IM_CONTACT'    => $row[$sql_field],
 307                         'USERNAME'              => $row['username'],
 308                         'CONTACT_NAME'  => $row[$sql_field],
 309                         'SITENAME'              => $config['sitename'],
 310
 311                         'PRESENCE_IMG'          => $presence_img,
 312
 313                         'L_SEND_IM_EXPLAIN'     => $user->lang['IM_' . $lang],
 314                         'L_IM_SENT_JABBER'      => sprintf($user->lang['IM_SENT_JABBER'], $row['username']),
 315
 316                         $s_select                       => true,
 317                         'S_IM_ACTION'           => $s_action)
 318                 );
 319
 320         break;
 321
 322         case 'viewprofile':
 323                 // Display a profile
 324                 if ($user_id == ANONYMOUS)
 325                 {
 326                         trigger_error('NO_USER');
 327                 }
 328
 329                 // Get user...
 330                 $sql = 'SELECT *
 331                         FROM ' . USERS_TABLE . "
 332                         WHERE user_id = $user_id
 333                                 AND user_type IN (" . USER_NORMAL . ', ' . USER_FOUNDER . ')';
 334                 $result = $db->sql_query($sql);
 335                 $member = $db->sql_fetchrow($result);
 336                 $db->sql_freeresult($result);
 337
 338                 if (!$member)
 339                 {
 340                         trigger_error('NO_USER');
 341                 }
 342
 343                 // Do the SQL thang
 344                 $sql = 'SELECT g.group_id, g.group_name, g.group_type
 345                         FROM ' . GROUPS_TABLE . ' g, ' . USER_GROUP_TABLE . " ug
 346                         WHERE ug.user_id = $user_id
 347                                 AND g.group_id = ug.group_id" . ((!$auth->acl_get('a_group')) ? ' AND group_type <> ' . GROUP_HIDDEN : '') . '
 348                         ORDER BY group_type, group_name';
 349                 $result = $db->sql_query($sql);
 350
 351                 $group_options = '';
 352                 while ($row = $db->sql_fetchrow($result))
 353                 {
 354                         $group_options .= '<option value="' . $row['group_id'] . '"' . (($row['group_id'] == $member['group_id']) ? ' selected="selected"' : '') . '>' . (($row['group_type'] == GROUP_SPECIAL) ? $user->lang['G_' . $row['group_name']] : $row['group_name']) . '</option>';
 355                 }
 356
 357                 if ($config['load_onlinetrack'])
 358                 {
 359                         $sql = 'SELECT MAX(session_time) AS session_time, MIN(session_viewonline) AS session_viewonline
 360                                 FROM ' . SESSIONS_TABLE . "
 361                                 WHERE session_user_id = $user_id";
 362                         $result = $db->sql_query($sql);
 363                         $row = $db->sql_fetchrow($result);
 364                         $db->sql_freeresult($result);
 365
 366                         $member['session_time'] = (isset($row['session_time'])) ? $row['session_time'] : 0;
 367                         $member['session_viewonline'] = (isset($row['session_viewonline'])) ? $row['session_viewonline'] :      0;
 368                         unset($row);
 369                 }
 370
 371                 if ($config['load_user_activity'])
 372                 {
 373                         if (!function_exists('display_user_activity'))
 374                         {
 375                                 include_once($phpbb_root_path . 'includes/functions_display.' . $phpEx);
 376                         }
 377                         display_user_activity($member);
 378                 }
 379
 380                 // Do the relevant calculations
 381                 $memberdays = max(1, round((time() - $member['user_regdate']) / 86400));
 382                 $posts_per_day = $member['user_posts'] / $memberdays;
 383                 $percentage = ($config['num_posts']) ? min(100, ($member['user_posts'] / $config['num_posts']) * 100) : 0;
 384
 385                 if ($member['user_sig_bbcode_bitfield'] && $member['user_sig'])
 386                 {
 387                         include_once($phpbb_root_path . 'includes/bbcode.' . $phpEx);
 388                         $bbcode = new bbcode();
 389                         $bbcode->bbcode_second_pass($member['user_sig'], $member['user_sig_bbcode_uid'], $member['user_sig_bbcode_bitfield']);
 390                 }
 391
 392                 if ($member['user_sig'])
 393                 {
 394                         $member['user_sig'] = censor_text(smiley_text($member['user_sig']));
 395                 }
 396
 397                 $poster_avatar = '';
 398                 if (!empty($member['user_avatar']))
 399                 {
 400                         switch ($member['user_avatar_type'])
 401                         {
 402                                 case AVATAR_UPLOAD:
 403                                         $poster_avatar = $config['avatar_path'] . '/';
 404                                 break;
 405
 406                                 case AVATAR_GALLERY:
 407                                         $poster_avatar = $config['avatar_gallery_path'] . '/';
 408                                 break;
 409                         }
 410                         $poster_avatar .= $member['user_avatar'];
 411
 412                         $poster_avatar = '<img src="' . $poster_avatar . '" width="' . $member['user_avatar_width'] . '" height="' . $member['user_avatar_height'] . '" alt="" />';
 413                 }
 414
 415                 $template->assign_vars(show_profile($member));
 416
 417                 // Custom Profile Fields
 418                 $profile_fields = array();
 419                 if ($config['load_cpf_viewprofile'])
 420                 {
 421                         include_once($phpbb_root_path . 'includes/functions_profile_fields.' . $phpEx);
 422                         $cp = new custom_profile();
 423                         $profile_fields = $cp->generate_profile_fields_template('grab', $user_id);
 424                         $profile_fields = (isset($profile_fields[$user_id])) ? $cp->generate_profile_fields_template('show', false, $profile_fields[$user_id]) : array();
 425                 }
 426
 427                 // We need to check if the module 'zebra' is accessible
 428                 $zebra_enabled = false;
 429
 430                 if ($user->data['user_id'] != $user_id && $user->data['is_registered'])
 431                 {
 432                         include_once($phpbb_root_path . 'includes/functions_module.' . $phpEx);
 433                         $module = new p_master();
 434                         $module->list_modules('ucp');
 435                         $module->set_active('zebra');
 436
 437                         $zebra_enabled = ($module->active_module === false) ? false : true;
 438
 439                         unset($module);
 440                 }
 441
 442                 $template->assign_vars(array(
 443                         'POSTS_DAY'                     => sprintf($user->lang['POST_DAY'], $posts_per_day),
 444                         'POSTS_PCT'                     => sprintf($user->lang['POST_PCT'], $percentage),
 445
 446                         'OCCUPATION'    => (!empty($member['user_occ'])) ? censor_text($member['user_occ']) : '',
 447                         'INTERESTS'             => (!empty($member['user_interests'])) ? censor_text($member['user_interests']) : '',
 448                         'SIGNATURE'             => (!empty($member['user_sig'])) ? str_replace("\n", '<br />', $member['user_sig']) : '',
 449
 450                         'AVATAR_IMG'    => $poster_avatar,
 451                         'PM_IMG'                => $user->img('btn_pm', $user->lang['SEND_PRIVATE_MESSAGE']),
 452                         'EMAIL_IMG'             => $user->img('btn_email', $user->lang['EMAIL']),
 453                         'WWW_IMG'               => $user->img('btn_www', $user->lang['WWW']),
 454                         'ICQ_IMG'               => $user->img('btn_icq', $user->lang['ICQ']),
 455                         'AIM_IMG'               => $user->img('btn_aim', $user->lang['AIM']),
 456                         'MSN_IMG'               => $user->img('btn_msnm', $user->lang['MSNM']),
 457                         'YIM_IMG'               => $user->img('btn_yim', $user->lang['YIM']),
 458                         'JABBER_IMG'    => $user->img('btn_jabber', $user->lang['JABBER']),
 459                         'SEARCH_IMG'    => $user->img('btn_search', $user->lang['SEARCH']),
 460
 461                         'S_PROFILE_ACTION'      => append_sid("{$phpbb_root_path}memberlist.$phpEx", 'mode=group'),
 462                         'S_GROUP_OPTIONS'       => $group_options,
 463                         'S_CUSTOM_FIELDS'       => (isset($profile_fields['row']) && sizeof($profile_fields['row'])) ? true : false,
 464                         'S_SHOW_ACTIVITY'       => ($config['load_user_activity']) ? true : false,
 465
 466                         'U_USER_ADMIN'                  => ($auth->acl_get('a_user')) ? append_sid("{$phpbb_root_path}adm/index.$phpEx", 'i=users&amp;mode=overview&amp;u=' . $user_id, true, $user->session_id) : '',
 467                         'U_SWITCH_PERMISSIONS'  => ($auth->acl_get('a_switchperm') && $user->data['user_id'] != $user_id) ? append_sid("{$phpbb_root_path}ucp.$phpEx", "mode=switch_perm&amp;u={$user_id}") : '',
 468
 469                         'S_ZEBRA'                       => ($user->data['user_id'] != $user_id && $user->data['is_registered'] && $zebra_enabled) ? true : false,
 470                         'U_ADD_FRIEND'          => append_sid("{$phpbb_root_path}ucp.$phpEx", 'i=zebra&amp;add=' . urlencode($member['username'])),
 471                         'U_ADD_FOE'                     => append_sid("{$phpbb_root_path}ucp.$phpEx", 'i=zebra&amp;mode=foes&amp;add=' . urlencode($member['username'])))
 472                 );
 473
 474                 if (!empty($profile_fields['row']))
 475                 {
 476                         $template->assign_vars($profile_fields['row']);
 477                 }
 478
 479                 if (!empty($profile_fields['blockrow']))
 480                 {
 481                         foreach ($profile_fields['blockrow'] as $field_data)
 482                         {
 483                                 $template->assign_block_vars('custom_fields', $field_data);
 484                         }
 485                 }
 486
 487                 // Now generate page tilte
 488                 $page_title = sprintf($user->lang['VIEWING_PROFILE'], $member['username']);
 489                 $template_html = 'memberlist_view.html';
 490
 491         break;
 492
 493         case 'email':
 494
 495                 // Send an email
 496                 $page_title = $user->lang['SEND_EMAIL'];
 497                 $template_html = 'memberlist_email.html';
 498
 499                 if (!$config['email_enable'])
 500                 {
 501                         trigger_error('EMAIL_DISABLED');
 502                 }
 503
 504                 if (!$auth->acl_get('u_sendemail'))
 505                 {
 506                         trigger_error('NO_EMAIL');
 507                 }
 508
 509                 // Are we trying to abuse the facility?
 510                 if (time() - $user->data['user_emailtime'] < $config['flood_interval'])
 511                 {
 512                         trigger_error('FLOOD_EMAIL_LIMIT');
 513                 }
 514
 515                 // Determine action...
 516                 $user_id = request_var('u', 0);
 517                 $topic_id = request_var('t', 0);
 518
 519                 // Send email to user...
 520                 if ($user_id)
 521                 {
 522                         if ($user_id == ANONYMOUS || !$config['board_email_form'])
 523                         {
 524                                 trigger_error('NO_EMAIL');
 525                         }
 526
 527                         // Get the appropriate username, etc.
 528                         $sql = 'SELECT username, user_email, user_allow_viewemail, user_lang, user_jabber, user_notify_type
 529                                 FROM ' . USERS_TABLE . "
 530                                 WHERE user_id = $user_id
 531                                         AND user_type IN (" . USER_NORMAL . ', ' . USER_FOUNDER . ')';
 532                         $result = $db->sql_query($sql);
 533                         $row = $db->sql_fetchrow($result);
 534                         $db->sql_freeresult($result);
 535
 536                         if (!$row)
 537                         {
 538                                 trigger_error('NO_USER');
 539                         }
 540
 541                         // Can we send email to this user?
 542                         if (!$row['user_allow_viewemail'] && !$auth->acl_get('a_user'))
 543                         {
 544                                 trigger_error('NO_EMAIL');
 545                         }
 546                 }
 547                 else if ($topic_id)
 548                 {
 549                         // Send topic heads-up to email address
 550                         $sql = 'SELECT forum_id, topic_title
 551                                 FROM ' . TOPICS_TABLE . "
 552                                 WHERE topic_id = $topic_id";
 553                         $result = $db->sql_query($sql);
 554                         $row = $db->sql_fetchrow($result);
 555                         $db->sql_freeresult($result);
 556
 557                         if (!$row)
 558                         {
 559                                 trigger_error('NO_TOPIC');
 560                         }
 561
 562                         if ($row['forum_id'])
 563                         {
 564                                 if (!$auth->acl_get('f_read', $row['forum_id']))
 565                                 {
 566                                         trigger_error($user->lang['SORRY_AUTH_READ']);
 567                                 }
 568
 569                                 if (!$auth->acl_get('f_email', $row['forum_id']))
 570                                 {
 571                                         trigger_error('NO_EMAIL');
 572                                 }
 573                         }
 574                         else
 575                         {
 576                                 // If global announcement, we need to check if the user is able to at least read and email in one forum...
 577                                 if (!$auth->acl_getf_global('f_read'))
 578                                 {
 579                                         trigger_error($user->lang['SORRY_AUTH_READ']);
 580                                 }
 581
 582                                 if (!$auth->acl_getf_global('f_email'))
 583                                 {
 584                                         trigger_error('NO_EMAIL');
 585                                 }
 586                         }
 587                 }
 588                 else
 589                 {
 590                         trigger_error('NO_EMAIL');
 591                 }
 592
 593                 $error = array();
 594
 595                 $name           = request_var('name', '');
 596                 $email          = request_var('email', '');
 597                 $email_lang = request_var('lang', $config['default_lang']);
 598                 $subject        = request_var('subject', '');
 599                 $message        = request_var('message', '');
 600                 $cc                     = (isset($_POST['cc_email'])) ? true : false;
 601                 $submit         = (isset($_POST['submit'])) ? true : false;
 602
 603                 if ($submit)
 604                 {
 605                         if ($user_id)
 606                         {
 607                                 if (!$subject)
 608                                 {
 609                                         $error[] = $user->lang['EMPTY_SUBJECT_EMAIL'];
 610                                 }
 611
 612                                 if (!$message)
 613                                 {
 614                                         $error[] = $user->lang['EMPTY_MESSAGE_EMAIL'];
 615                                 }
 616
 617                                 $name = $row['username'];
 618                                 $email_lang = $row['user_lang'];
 619                                 $email = $row['user_email'];
 620                         }
 621                         else
 622                         {
 623                                 if (!$email || !preg_match('#^.*?@(.*?\.)?[a-z0-9\-]+\.[a-z]{2,4}$#i', $email))
 624                                 {
 625                                         $error[] = $user->lang['EMPTY_ADDRESS_EMAIL'];
 626                                 }
 627
 628                                 if (!$name)
 629                                 {
 630                                         $error[] = $user->lang['EMPTY_NAME_EMAIL'];
 631                                 }
 632                         }
 633
 634                         if (!sizeof($error))
 635                         {
 636                                 $sql = 'UPDATE ' . USERS_TABLE . '
 637                                         SET user_emailtime = ' . time() . '
 638                                         WHERE user_id = ' . $user->data['user_id'];
 639                                 $result = $db->sql_query($sql);
 640
 641                                 include_once($phpbb_root_path . 'includes/functions_messenger.' . $phpEx);
 642                                 $messenger = new messenger(false);
 643                                 $email_tpl = ($user_id) ? 'profile_send_email' : 'email_notify';
 644
 645                                 $mail_to_users = array();
 646
 647                                 $mail_to_users[] = array(
 648                                         'email_lang'            => $email_lang,
 649                                         'email'                         => $email,
 650                                         'name'                          => $name,
 651                                         'username'                      => $row['username'],
 652                                         'to_name'                       => $name,
 653                                         'user_jabber'           => $row['user_jabber'],
 654                                         'user_notify_type'      => $row['user_notify_type'],
 655                                 );
 656
 657                                 // Ok, now the same email if CC specified, but without exposing the users email address
 658                                 if ($cc)
 659                                 {
 660                                         $mail_to_users[] = array(
 661                                                 'email_lang'            => $user->data['user_lang'],
 662                                                 'email'                         => $user->data['user_email'],
 663                                                 'name'                          => $user->data['username'],
 664                                                 'username'                      => $user->data['username'],
 665                                                 'to_name'                       => $name,
 666                                                 'user_jabber'           => $user->data['user_jabber'],
 667                                                 'user_notify_type'      => ($user_id) ? $user->data['user_notify_type'] : NOTIFY_EMAIL,
 668                                         );
 669                                 }
 670
 671                                 foreach ($mail_to_users as $row)
 672                                 {
 673                                         $messenger->template($email_tpl, $row['email_lang']);
 674                                         $messenger->replyto($user->data['user_email']);
 675                                         $messenger->to($row['email'], $row['name']);
 676
 677                                         if ($user_id)
 678                                         {
 679                                                 $messenger->subject(html_entity_decode($subject));
 680                                                 $messenger->im($row['user_jabber'], $row['username']);
 681                                                 $notify_type = $row['user_notify_type'];
 682                                         }
 683                                         else
 684                                         {
 685                                                 $notify_type = NOTIFY_EMAIL;
 686                                         }
 687
 688                                         $messenger->headers('X-AntiAbuse: Board servername - ' . $config['server_name']);
 689                                         $messenger->headers('X-AntiAbuse: User_id - ' . $user->data['user_id']);
 690                                         $messenger->headers('X-AntiAbuse: Username - ' . $user->data['username']);
 691                                         $messenger->headers('X-AntiAbuse: User IP - ' . $user->ip);
 692
 693                                         $messenger->assign_vars(array(
 694                                                 'SITENAME'              => $config['sitename'],
 695                                                 'BOARD_EMAIL'   => $config['board_contact'],
 696                                                 'TO_USERNAME'   => html_entity_decode($row['to_name']),
 697                                                 'FROM_USERNAME' => html_entity_decode($user->data['username']),
 698                                                 'MESSAGE'               => html_entity_decode($message))
 699                                         );
 700
 701                                         if ($topic_id)
 702                                         {
 703                                                 $messenger->assign_vars(array(
 704                                                         'TOPIC_NAME'    => html_entity_decode($row['topic_title']),
 705                                                         'U_TOPIC'               => generate_board_url() . "/viewtopic.$phpEx?f=" . $row['forum_id'] . "&t=$topic_id")
 706                                                 );
 707                                         }
 708
 709                                         $messenger->send($notify_type);
 710                                 }
 711
 712                                 meta_refresh(3, append_sid("{$phpbb_root_path}index.$phpEx"));
 713                                 $message = ($user_id) ? sprintf($user->lang['RETURN_INDEX'],  '<a href="' . append_sid("{$phpbb_root_path}index.$phpEx") . '">', '</a>') : sprintf($user->lang['RETURN_TOPIC'],  '<a href="' . append_sid("{$phpbb_root_path}viewtopic.$phpEx", "f={$row['forum_id']}&amp;t=$topic_id") . '">', '</a>');
 714                                 trigger_error($user->lang['EMAIL_SENT'] . '<br /><br />' . $message);
 715                         }
 716                 }
 717
 718                 if ($user_id)
 719                 {
 720                         $template->assign_vars(array(
 721                                 'S_SEND_USER'   => true,
 722                                 'USERNAME'              => $row['username'],
 723
 724                                 'L_EMAIL_BODY_EXPLAIN'  => $user->lang['EMAIL_BODY_EXPLAIN'],
 725                                 'S_POST_ACTION'                 => append_sid("{$phpbb_root_path}memberlist.$phpEx", 'mode=email&amp;u=' . $user_id))
 726                         );
 727                 }
 728                 else
 729                 {
 730                         $template->assign_vars(array(
 731                                 'EMAIL'                         => $email,
 732                                 'NAME'                          => $name,
 733                                 'S_LANG_OPTIONS'        => language_select($email_lang),
 734
 735                                 'L_EMAIL_BODY_EXPLAIN'  => $user->lang['EMAIL_TOPIC_EXPLAIN'],
 736                                 'S_POST_ACTION'                 => append_sid("{$phpbb_root_path}memberlist.$phpEx", 'mode=email&amp;t=' . $topic_id))
 737                         );
 738                 }
 739
 740                 $template->assign_vars(array(
 741                         'ERROR_MESSAGE'         => (sizeof($error)) ? implode('<br />', $error) : '')
 742                 );
 743
 744         break;
 745
 746         case 'group':
 747         default:
 748                 // The basic memberlist
 749                 $page_title = $user->lang['MEMBERLIST'];
 750                 $template_html = 'memberlist_body.html';
 751
 752                 // Sorting
 753                 $sort_key_text = array('a' => $user->lang['SORT_USERNAME'], 'b' => $user->lang['SORT_LOCATION'], 'c' => $user->lang['SORT_JOINED'], 'd' => $user->lang['SORT_POST_COUNT'], 'e' => $user->lang['SORT_EMAIL'], 'f' => $user->lang['WEBSITE'], 'g' => $user->lang['ICQ'], 'h' => $user->lang['AIM'], 'i' => $user->lang['MSNM'], 'j' => $user->lang['YIM'], 'k' => $user->lang['JABBER'], 'l' => $user->lang['SORT_LAST_ACTIVE'], 'm' => $user->lang['SORT_RANK'], 'n' => $user->lang['LOCATION'] );
 754                 $sort_key_sql = array('a' => 'u.username', 'b' => 'u.user_from', 'c' => 'u.user_regdate', 'd' => 'u.user_posts', 'e' => 'u.user_email', 'f' => 'u.user_website', 'g' => 'u.user_icq', 'h' => 'u.user_aim', 'i' => 'u.user_msnm', 'j' => 'u.user_yim', 'k' => 'u.user_jabber', 'l' => 'u.user_lastvisit', 'm' => 'u.user_rank DESC, u.user_posts', 'n' => 'u.user_from');
 755
 756                 $sort_dir_text = array('a' => $user->lang['ASCENDING'], 'd' => $user->lang['DESCENDING']);
 757
 758                 $s_sort_key = '';
 759                 foreach ($sort_key_text as $key => $value)
 760                 {
 761                         $selected = ($sort_key == $key) ? ' selected="selected"' : '';
 762                         $s_sort_key .= '<option value="' . $key . '"' . $selected . '>' . $value . '</option>';
 763                 }
 764
 765                 $s_sort_dir = '';
 766                 foreach ($sort_dir_text as $key => $value)
 767                 {
 768                         $selected = ($sort_dir == $key) ? ' selected="selected"' : '';
 769                         $s_sort_dir .= '<option value="' . $key . '"' . $selected . '>' . $value . '</option>';
 770                 }
 771
 772                 // Additional sorting options for user search ... if search is enabled, if not
 773                 // then only admins can make use of this (for ACP functionality)
 774                 $sql_select = $sql_from = $sql_where = $order_by = '';
 775
 776                 $form   = request_var('form', '');
 777                 $field  = request_var('field', '');
 778
 779                 if ($mode == 'searchuser' && ($config['load_search'] || $auth->acl_get('a_')))
 780                 {
 781                         $username       = request_var('username', '', true);
 782                         $email          = request_var('email', '');
 783                         $icq            = request_var('icq', '');
 784                         $aim            = request_var('aim', '');
 785                         $yahoo          = request_var('yahoo', '');
 786                         $msn            = request_var('msn', '');
 787                         $jabber         = request_var('jabber', '');
 788                         $search_group_id        = request_var('search_group_id', 0);
 789
 790                         $joined_select  = request_var('joined_select', 'lt');
 791                         $active_select  = request_var('active_select', 'lt');
 792                         $count_select   = request_var('count_select', 'eq');
 793                         $joined                 = explode('-', request_var('joined', ''));
 794                         $active                 = explode('-', request_var('active', ''));
 795                         $count                  = (request_var('count', '') !== '') ? request_var('count', 0) : '';
 796                         $ipdomain               = request_var('ip', '');
 797
 798                         $find_key_match = array('lt' => '<', 'gt' => '>', 'eq' => '=');
 799
 800                         $find_count = array('lt' => $user->lang['LESS_THAN'], 'eq' => $user->lang['EQUAL_TO'], 'gt' => $user->lang['MORE_THAN']);
 801                         $s_find_count = '';
 802                         foreach ($find_count as $key => $value)
 803                         {
 804                                 $selected = ($count_select == $key) ? ' selected="selected"' : '';
 805                                 $s_find_count .= '<option value="' . $key . '"' . $selected . '>' . $value . '</option>';
 806                         }
 807
 808                         $find_time = array('lt' => $user->lang['BEFORE'], 'gt' => $user->lang['AFTER']);
 809                         $s_find_join_time = '';
 810                         foreach ($find_time as $key => $value)
 811                         {
 812                                 $selected = ($joined_select == $key) ? ' selected="selected"' : '';
 813                                 $s_find_join_time .= '<option value="' . $key . '"' . $selected . '>' . $value . '</option>';
 814                         }
 815
 816                         $s_find_active_time = '';
 817                         foreach ($find_time as $key => $value)
 818                         {
 819                                 $selected = ($active_select == $key) ? ' selected="selected"' : '';
 820                                 $s_find_active_time .= '<option value="' . $key . '"' . $selected . '>' . $value . '</option>';
 821                         }
 822
 823                         $sql_where .= ($username) ? " AND u.username LIKE '" . str_replace('*', '%', $db->sql_escape($username)) . "'" : '';
 824                         $sql_where .= ($email) ? " AND u.user_email LIKE '" . str_replace('*', '%', $db->sql_escape($email)) . "' " : '';
 825                         $sql_where .= ($icq) ? " AND u.user_icq LIKE '" . str_replace('*', '%', $db->sql_escape($icq)) . "' " : '';
 826                         $sql_where .= ($aim) ? " AND u.user_aim LIKE '" . str_replace('*', '%', $db->sql_escape($aim)) . "' " : '';
 827                         $sql_where .= ($yahoo) ? " AND u.user_yim LIKE '" . str_replace('*', '%', $db->sql_escape($yahoo)) . "' " : '';
 828                         $sql_where .= ($msn) ? " AND u.user_msnm LIKE '" . str_replace('*', '%', $db->sql_escape($msn)) . "' " : '';
 829                         $sql_where .= ($jabber) ? " AND u.user_jabber LIKE '" . str_replace('*', '%', $db->sql_escape($jabber)) . "' " : '';
 830                         $sql_where .= (is_numeric($count)) ? ' AND u.user_posts ' . $find_key_match[$count_select] . ' ' . (int) $count . ' ' : '';
 831                         $sql_where .= (sizeof($joined) > 1) ? " AND u.user_regdate " . $find_key_match[$joined_select] . ' ' . gmmktime(0, 0, 0, intval($joined[1]), intval($joined[2]), intval($joined[0])) : '';
 832                         $sql_where .= (sizeof($active) > 1) ? " AND u.user_lastvisit " . $find_key_match[$active_select] . ' ' . gmmktime(0, 0, 0, $active[1], intval($active[2]), intval($active[0])) : '';
 833                         $sql_where .= ($search_group_id) ? " AND u.user_id = ug.user_id AND ug.group_id = $search_group_id " : '';
 834
 835                         if ($search_group_id)
 836                         {
 837                                 $sql_from = ', ' . USER_GROUP_TABLE . ' ug ';
 838                         }
 839
 840                         if ($ipdomain && $auth->acl_getf_global('m_info'))
 841                         {
 842                                 $ips = (preg_match('#[a-z]#', $ipdomain)) ? implode(', ', preg_replace('#([0-9]{1,3}\.[0-9]{1,3}[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3})#', "'\\1'", gethostbynamel($ipdomain))) : "'" . str_replace('*', '%', $ipdomain) . "'";
 843
 844                                 $ip_forums = array_keys($auth->acl_getf('m_info', true));
 845                                 $sql = 'SELECT DISTINCT poster_id
 846                                         FROM ' . POSTS_TABLE . '
 847                                         WHERE poster_ip ' . ((preg_match('#%#', $ips)) ? 'LIKE' : 'IN') . " ($ips)
 848                                                 AND forum_id IN (0, " . implode(',', $ip_forums) . ')';
 849                                 $result = $db->sql_query($sql);
 850
 851                                 if ($row = $db->sql_fetchrow($result))
 852                                 {
 853                                         $ip_sql = array();
 854                                         do
 855                                         {
 856                                                 $ip_sql[] = $row['poster_id'];
 857                                         }
 858                                         while ($row = $db->sql_fetchrow($result));
 859
 860                                         $sql_where .= ' AND u.user_id IN (' . implode(', ', $ip_sql) . ')';
 861                                 }
 862                                 else
 863                                 {
 864                                         // A minor fudge but it does the job :D
 865                                         $sql_where .= " AND u.user_id IN ('-1')";
 866                                 }
 867                                 unset($ip_forums);
 868                         }
 869                 }
 870
 871                 $first_char = request_var('first_char', '');
 872
 873                 if ($first_char == 'other')
 874                 {
 875                         for ($i = 65; $i < 91; $i++)
 876                         {
 877                                 $sql_where .= " AND u.username NOT LIKE '" . chr($i) . "%'";
 878                         }
 879                 }
 880                 else if ($first_char)
 881                 {
 882                         $sql_where .= " AND u.username LIKE '" . $db->sql_escape(substr($first_char, 0, 1)) . "%'";
 883                 }
 884
 885                 // Are we looking at a usergroup? If so, fetch additional info
 886                 // and further restrict the user info query
 887                 if ($mode == 'group')
 888                 {
 889                         // We JOIN here to save a query for determining membership for hidden groups. ;)
 890                         $sql = 'SELECT g.*, ug.user_id
 891                                 FROM ' . GROUPS_TABLE . ' g
 892                                 LEFT JOIN ' . USER_GROUP_TABLE . ' ug ON (ug.user_pending = 0 AND ug.user_id = ' . $user->data['user_id'] . " AND ug.group_id = $group_id)
 893                                 WHERE g.group_id = $group_id";
 894                         $result = $db->sql_query($sql);
 895                         $group_row = $db->sql_fetchrow($result);
 896                         $db->sql_freeresult($result);
 897
 898                         if (!$group_row)
 899                         {
 900                                 trigger_error('NO_GROUP');
 901                         }
 902
 903                         switch ($group_row['group_type'])
 904                         {
 905                                 case GROUP_OPEN:
 906                                         $group_row['l_group_type'] = 'OPEN';
 907                                 break;
 908
 909                                 case GROUP_CLOSED:
 910                                         $group_row['l_group_type'] = 'CLOSED';
 911                                 break;
 912
 913                                 case GROUP_HIDDEN:
 914                                         $group_row['l_group_type'] = 'HIDDEN';
 915
 916                                         // Check for membership or special permissions
 917                                         if (!$auth->acl_gets('a_group', 'a_groupadd', 'a_groupdel') && $group_row['user_id'] != $user->data['user_id'])
 918                                         {
 919                                                 trigger_error('NO_GROUP');
 920                                         }
 921                                 break;
 922
 923                                 case GROUP_SPECIAL:
 924                                         $group_row['l_group_type'] = 'SPECIAL';
 925                                 break;
 926
 927                                 case GROUP_FREE:
 928                                         $group_row['l_group_type'] = 'FREE';
 929                                 break;
 930                         }
 931
 932                         $avatar_img = '';
 933                         if ($group_row['group_avatar'])
 934                         {
 935                                 switch ($group_row['group_avatar_type'])
 936                                 {
 937                                         case AVATAR_UPLOAD:
 938                                                 $avatar_img = $phpbb_root_path . $config['avatar_path'] . '/';
 939                                         break;
 940
 941                                         case AVATAR_GALLERY:
 942                                                 $avatar_img = $phpbb_root_path . $config['avatar_gallery_path'] . '/';
 943                                         break;
 944                                 }
 945                                 $avatar_img .= $group_row['group_avatar'];
 946
 947                                 $avatar_img = '<img src="' . $avatar_img . '" width="' . $group_row['group_avatar_width'] . '" height="' . $group_row['group_avatar_height'] . '" alt="" />';
 948                         }
 949
 950                         $rank_title = $rank_img = $rank_img_src = '';
 951                         if ($group_row['group_rank'] != -1)
 952                         {
 953                                 if (isset($ranks['special'][$group_row['group_rank']]))
 954                                 {
 955                                         $rank_title = $ranks['special'][$group_row['group_rank']]['rank_title'];
 956                                 }
 957                                 $rank_img = (!empty($ranks['special'][$group_row['group_rank']]['rank_image'])) ? '<img src="' . $config['ranks_path'] . '/' . $ranks['special'][$group_row['group_rank']]['rank_image'] . '" border="0" alt="' . $ranks['special'][$group_row['group_rank']]['rank_title'] . '" title="' . $ranks['special'][$group_row['group_rank']]['rank_title'] . '" /><br />' : '';
 958                                 $rank_img_src = (!empty($ranks['special'][$group_row['group_rank']]['rank_image'])) ? $config['ranks_path'] . '/' . $ranks['special'][$group_row['group_rank']]['rank_image'] : '';
 959                         }
 960                         else if ($group_row['group_rank'] == -1)
 961                         {
 962                                 $rank_title = '';
 963                                 $rank_img = '';
 964                                 $rank_img_src = '';
 965                         }
 966
 967                         $template->assign_vars(array(
 968                                 'GROUP_DESC'    => generate_text_for_display($group_row['group_desc'], $group_row['group_desc_uid'], $group_row['group_desc_bitfield']),
 969                                 'GROUP_NAME'    => ($group_row['group_type'] == GROUP_SPECIAL) ? $user->lang['G_' . $group_row['group_name']] : $group_row['group_name'],
 970                                 'GROUP_COLOR'   => $group_row['group_colour'],
 971                                 'GROUP_TYPE'    => $user->lang['GROUP_IS_' . $group_row['l_group_type']],
 972                                 'GROUP_RANK'    => $rank_title,
 973
 974                                 'AVATAR_IMG'    => $avatar_img,
 975                                 'RANK_IMG'              => $rank_img,
 976                                 'RANK_IMG_SRC'  => $rank_img_src,
 977
 978                                 'U_PM'                  => ($auth->acl_get('u_sendpm') && $auth->acl_get('u_masspm') && $group_row['group_receive_pm'] && $config['allow_privmsg'] && $config['allow_mass_pm']) ? append_sid("{$phpbb_root_path}ucp.$phpEx", 'i=pm&amp;mode=compose&amp;g=' . $group_id) : '',)
 979                         );
 980
 981                         $sql_select = ', ug.group_leader';
 982                         $sql_from = ', ' . USER_GROUP_TABLE . ' ug ';
 983                         $order_by = 'ug.group_leader DESC, ';
 984
 985                         $sql_where .= " AND ug.user_pending = 0 AND u.user_id = ug.user_id AND ug.group_id = $group_id";
 986                 }
 987
 988                 // Sorting and order
 989                 $order_by .= $sort_key_sql[$sort_key] . '  ' . (($sort_dir == 'a') ? 'ASC' : 'DESC');
 990
 991                 // Count the users ...
 992                 if ($sql_where)
 993                 {
 994                         $sql = 'SELECT COUNT(u.user_id) AS total_users
 995                                 FROM ' . USERS_TABLE . " u$sql_from
 996                                 WHERE u.user_type IN (" . USER_NORMAL . ', ' . USER_FOUNDER . ")
 997                                 $sql_where";
 998                         $result = $db->sql_query($sql);
 999                         $total_users = (int) $db->sql_fetchfield('total_users');
1000                         $db->sql_freeresult($result);
1001                 }
1002                 else
1003                 {
1004                         $total_users = $config['num_users'];
1005                 }
1006
1007                 $s_char_options = '<option value=""' . ((!$first_char) ? ' selected="selected"' : '') . '>&nbsp; &nbsp;</option>';
1008                 for ($i = 65; $i < 91; $i++)
1009                 {
1010                         $s_char_options .= '<option value="' . chr($i) . '"' . (($first_char == chr($i)) ? ' selected="selected"' : '') . '>' . chr($i) . '</option>';
1011                 }
1012                 $s_char_options .= '<option value="other"' . (($first_char == 'other') ? ' selected="selected"' : '') . '>Other</option>';
1013
1014                 // Build a relevant pagination_url
1015                 $params = array();
1016                 foreach (array('_POST', '_GET') as $global_var)
1017                 {
1018                         foreach ($$global_var as $key => $var)
1019                         {
1020                                 if ($global_var == '_POST')
1021                                 {
1022                                         unset($_GET[$key]);
1023                                 }
1024
1025                                 if (in_array($key, array('submit', 'start', 'mode', 'char')) || empty($var))
1026                                 {
1027                                         continue;
1028                                 }
1029
1030                                 $params[] = $key . '=' . urlencode(htmlspecialchars($var));
1031                         }
1032                 }
1033
1034                 $u_hide_find_member = append_sid("{$phpbb_root_path}memberlist.$phpEx", implode('&amp;', $params));
1035
1036                 $params[] = "mode=$mode";
1037                 $pagination_url = append_sid("{$phpbb_root_path}memberlist.$phpEx", implode('&amp;', $params));
1038
1039                 // Some search user specific data
1040                 if ($mode == 'searchuser' && ($config['load_search'] || $auth->acl_get('a_')))
1041                 {
1042                         $group_selected = request_var('search_group_id', 0);
1043                         $s_group_select = '<option value="0"' . ((!$group_selected) ? ' selected="selected"' : '') . '>&nbsp;</option>';
1044
1045                         $sql = 'SELECT group_id, group_name, group_type
1046                                 FROM ' . GROUPS_TABLE . '
1047                                 WHERE group_type <> ' . GROUP_HIDDEN . '
1048                                 ORDER BY group_name ASC';
1049                         $result = $db->sql_query($sql);
1050
1051                         while ($row = $db->sql_fetchrow($result))
1052                         {
1053                                 $s_group_select .= '<option value="' . $row['group_id'] . '"' . (($group_selected == $row['group_id']) ? ' selected="selected"' : '') . '>' . (($row['group_type'] == GROUP_SPECIAL) ? $user->lang['G_' . $row['group_name']] : $row['group_name']) . '</option>';
1054                         }
1055                         $db->sql_freeresult($result);
1056
1057                         $template->assign_vars(array(
1058                                 'USERNAME'      => $username,
1059                                 'EMAIL'         => $email,
1060                                 'ICQ'           => $icq,
1061                                 'AIM'           => $aim,
1062                                 'YAHOO'         => $yahoo,
1063                                 'MSNM'          => $msn,
1064                                 'JABBER'        => $jabber,
1065                                 'JOINED'        => implode('-', $joined),
1066                                 'ACTIVE'        => implode('-', $active),
1067                                 'COUNT'         => $count,
1068                                 'IP'            => $ipdomain,
1069
1070                                 'S_SEARCH_USER'                 => true,
1071                                 'S_FORM_NAME'                   => $form,
1072                                 'S_FIELD_NAME'                  => $field,
1073                                 'S_COUNT_OPTIONS'               => $s_find_count,
1074                                 'S_SORT_OPTIONS'                => $s_sort_key,
1075                                 'S_JOINED_TIME_OPTIONS' => $s_find_join_time,
1076                                 'S_ACTIVE_TIME_OPTIONS' => $s_find_active_time,
1077                                 'S_GROUP_SELECT'                => $s_group_select,
1078                                 'S_SEARCH_ACTION'               => append_sid("{$phpbb_root_path}memberlist.$phpEx", "mode=searchuser&amp;form=$form&amp;field=$field"))
1079                         );
1080                 }
1081
1082                 $sql = 'SELECT session_user_id, MAX(session_time) AS session_time
1083                         FROM ' . SESSIONS_TABLE . '
1084                         WHERE session_time >= ' . (time() - $config['session_length']) . '
1085                                 AND session_user_id <> ' . ANONYMOUS . '
1086                         GROUP BY session_user_id';
1087                 $result = $db->sql_query($sql);
1088
1089                 $session_times = array();
1090                 while ($row = $db->sql_fetchrow($result))
1091                 {
1092                         $session_times[$row['session_user_id']] = $row['session_time'];
1093                 }
1094                 $db->sql_freeresult($result);
1095
1096                 // Do the SQL thang
1097                 $sql = "SELECT u.*
1098                                 $sql_select
1099                         FROM " . USERS_TABLE . " u
1100                                 $sql_from
1101                         WHERE u.user_type IN (" . USER_NORMAL . ', ' . USER_FOUNDER . ")
1102                                 $sql_where
1103                         ORDER BY $order_by";
1104                 $result = $db->sql_query_limit($sql, $config['topics_per_page'], $start);
1105
1106                 $id_cache = array();
1107                 while ($row = $db->sql_fetchrow($result))
1108                 {
1109                         $row['session_time'] = (!empty($session_times[$row['user_id']])) ? $session_times[$row['user_id']] : '';
1110
1111                         $id_cache[$row['user_id']] = $row;
1112                 }
1113                 $db->sql_freeresult($result);
1114
1115                 // Load custom profile fields
1116                 if ($config['load_cpf_memberlist'])
1117                 {
1118                         include_once($phpbb_root_path . 'includes/functions_profile_fields.' . $phpEx);
1119                         $cp = new custom_profile();
1120
1121                         // Grab all profile fields from users in id cache for later use - similar to the poster cache
1122                         $profile_fields_cache = $cp->generate_profile_fields_template('grab', array_keys($id_cache));
1123                 }
1124
1125                 $i = 0;
1126                 foreach ($id_cache as $user_id => $row)
1127                 {
1128                         $cp_row = array();
1129                         if ($config['load_cpf_memberlist'])
1130                         {
1131                                 $cp_row = (isset($profile_fields_cache[$user_id])) ? $cp->generate_profile_fields_template('show', false, $profile_fields_cache[$user_id]) : array();
1132                         }
1133
1134                         $memberrow = array_merge(show_profile($row), array(
1135                                 'ROW_NUMBER'            => $i + ($start + 1),
1136
1137                                 'S_CUSTOM_PROFILE'      => (isset($cp_row['row']) && sizeof($cp_row['row'])) ? true : false,
1138                                 'S_GROUP_LEADER'        => (isset($row['group_leader']) && $row['group_leader']) ? true : false,
1139
1140                                 'U_VIEWPROFILE'         => append_sid("{$phpbb_root_path}memberlist.$phpEx", 'mode=viewprofile&amp;u=' . $user_id))
1141                         );
1142
1143                         if (isset($cp_row['row']) && sizeof($cp_row['row']))
1144                         {
1145                                 $memberrow = array_merge($memberrow, $cp_row['row']);
1146                         }
1147
1148                         $template->assign_block_vars('memberrow', $memberrow);
1149
1150                         if (isset($cp_row['blockrow']) && sizeof($cp_row['blockrow']))
1151                         {
1152                                 foreach ($cp_row['blockrow'] as $field_data)
1153                                 {
1154                                         $template->assign_block_vars('memberrow.custom_fields', $field_data);
1155                                 }
1156                         }
1157
1158                         $i++;
1159                         unset($id_cache[$user_id]);
1160                 }
1161
1162                 // Generate page
1163                 $template->assign_vars(array(
1164                         'PAGINATION'    => generate_pagination($pagination_url, $total_users, $config['topics_per_page'], $start),
1165                         'PAGE_NUMBER'   => on_page($total_users, $config['topics_per_page'], $start),
1166                         'TOTAL_USERS'   => ($total_users == 1) ? $user->lang['LIST_USER'] : sprintf($user->lang['LIST_USERS'], $total_users),
1167
1168                         'PROFILE_IMG'   => $user->img('btn_profile', $user->lang['PROFILE']),
1169                         'PM_IMG'                => $user->img('btn_pm', $user->lang['SEND_PRIVATE_MESSAGE']),
1170                         'EMAIL_IMG'             => $user->img('btn_email', $user->lang['EMAIL']),
1171                         'WWW_IMG'               => $user->img('btn_www', $user->lang['WWW']),
1172                         'ICQ_IMG'               => $user->img('btn_icq', $user->lang['ICQ']),
1173                         'AIM_IMG'               => $user->img('btn_aim', $user->lang['AIM']),
1174                         'MSN_IMG'               => $user->img('btn_msnm', $user->lang['MSNM']),
1175                         'YIM_IMG'               => $user->img('btn_yim', $user->lang['YIM']),
1176                         'JABBER_IMG'    => $user->img('btn_jabber', $user->lang['JABBER']),
1177                         'SEARCH_IMG'    => $user->img('btn_search', $user->lang['SEARCH']),
1178
1179                         'U_FIND_MEMBER'                 => ($config['load_search'] || $auth->acl_get('a_')) ? append_sid("{$phpbb_root_path}memberlist.$phpEx", 'mode=searchuser') : '',
1180                         'U_HIDE_FIND_MEMBER'    => ($mode == 'searchuser') ? $u_hide_find_member : '',
1181                         'U_SORT_USERNAME'               => $pagination_url . '&amp;sk=a&amp;sd=' . (($sort_key == 'a' && $sort_dir == 'a') ? 'd' : 'a'),
1182                         'U_SORT_FROM'                   => $pagination_url . '&amp;sk=b&amp;sd=' . (($sort_key == 'b' && $sort_dir == 'a') ? 'd' : 'a'),
1183                         'U_SORT_JOINED'                 => $pagination_url . '&amp;sk=c&amp;sd=' . (($sort_key == 'c' && $sort_dir == 'a') ? 'd' : 'a'),
1184                         'U_SORT_POSTS'                  => $pagination_url . '&amp;sk=d&amp;sd=' . (($sort_key == 'd' && $sort_dir == 'a') ? 'd' : 'a'),
1185                         'U_SORT_EMAIL'                  => $pagination_url . '&amp;sk=e&amp;sd=' . (($sort_key == 'e' && $sort_dir == 'a') ? 'd' : 'a'),
1186                         'U_SORT_WEBSITE'                => $pagination_url . '&amp;sk=f&amp;sd=' . (($sort_key == 'f' && $sort_dir == 'a') ? 'd' : 'a'),
1187                         'U_SORT_LOCATION'               => $pagination_url . '&amp;sk=n&amp;sd=' . (($sort_key == 'n' && $sort_dir == 'a') ? 'd' : 'a'),
1188                         'U_SORT_ICQ'                    => $pagination_url . '&amp;sk=g&amp;sd=' . (($sort_key == 'g' && $sort_dir == 'a') ? 'd' : 'a'),
1189                         'U_SORT_AIM'                    => $pagination_url . '&amp;sk=h&amp;sd=' . (($sort_key == 'h' && $sort_dir == 'a') ? 'd' : 'a'),
1190                         'U_SORT_MSN'                    => $pagination_url . '&amp;sk=i&amp;sd=' . (($sort_key == 'i' && $sort_dir == 'a') ? 'd' : 'a'),
1191                         'U_SORT_YIM'                    => $pagination_url . '&amp;sk=j&amp;sd=' . (($sort_key == 'j' && $sort_dir == 'a') ? 'd' : 'a'),
1192                         'U_SORT_ACTIVE'                 => $pagination_url . '&amp;sk=k&amp;sd=' . (($sort_key == 'k' && $sort_dir == 'a') ? 'd' : 'a'),
1193                         'U_SORT_RANK'                   => $pagination_url . '&amp;sk=m&amp;sd=' . (($sort_key == 'm' && $sort_dir == 'a') ? 'd' : 'a'),
1194                         'U_LIST_CHAR'                   => $pagination_url . '&amp;sk=a&amp;sd=' . (($sort_key == 'l' && $sort_dir == 'a') ? 'd' : 'a'),
1195
1196                         'S_SHOW_GROUP'          => ($mode == 'group') ? true : false,
1197                         'S_MODE_SELECT'         => $s_sort_key,
1198                         'S_ORDER_SELECT'        => $s_sort_dir,
1199                         'S_CHAR_OPTIONS'        => $s_char_options,
1200                         'S_MODE_ACTION'         => $pagination_url . "&amp;form=$form")
1201                 );
1202 }
1203
1204 // Output the page
1205 page_header($page_title);
1206
1207 $template->set_filenames(array(
1208         'body' => $template_html)
1209 );
1210 make_jumpbox(append_sid("{$phpbb_root_path}viewforum.$phpEx"));
1211
1212 page_footer();
1213
1214 /**
1215 * Get user rank title and image
1216 */
1217 function get_user_rank($user_rank, $user_posts, &$rank_title, &$rank_img, &$rank_img_src)
1218 {
1219         global $ranks, $config;
1220
1221         if (!empty($user_rank))
1222         {
1223                 $rank_title = (isset($ranks['special'][$user_rank]['rank_title'])) ? $ranks['special'][$user_rank]['rank_title'] : '';
1224                 $rank_img = (!empty($ranks['special'][$user_rank]['rank_image'])) ? '<img src="' . $config['ranks_path'] . '/' . $ranks['special'][$user_rank]['rank_image'] . '" alt="' . $ranks['special'][$user_rank]['rank_title'] . '" title="' . $ranks['special'][$user_rank]['rank_title'] . '" />' : '';
1225                 $rank_img_src = (!empty($ranks['special'][$user_rank]['rank_image'])) ? $config['ranks_path'] . '/' . $ranks['special'][$user_rank]['rank_image'] : '';
1226         }
1227         else
1228         {
1229                 if (isset($ranks['normal']))
1230                 {
1231                         foreach ($ranks['normal'] as $rank)
1232                         {
1233                                 if ($user_posts >= $rank['rank_min'])
1234                                 {
1235                                         $rank_title = $rank['rank_title'];
1236                                         $rank_img = (!empty($rank['rank_image'])) ? '<img src="' . $config['ranks_path'] . '/' . $rank['rank_image'] . '" alt="' . $rank['rank_title'] . '" title="' . $rank['rank_title'] . '" />' : '';
1237                                         $rank_img_src = (!empty($rank['rank_image'])) ? $config['ranks_path'] . '/' . $rank['rank_image'] : '';
1238                                         break;
1239                                 }
1240                         }
1241                 }
1242         }
1243 }
1244
1245 /**
1246 * Prepare profile data
1247 */
1248 function show_profile($data)
1249 {
1250         global $config, $auth, $template, $user, $phpEx, $phpbb_root_path;
1251
1252         $username = $data['username'];
1253         $user_id = $data['user_id'];
1254
1255         $rank_title = $rank_img = $rank_img_src = '';
1256         get_user_rank($data['user_rank'], $data['user_posts'], $rank_title, $rank_img, $rank_img_src);
1257
1258         if (!empty($data['user_allow_viewemail']) || $auth->acl_get('a_email'))
1259         {
1260                 $email = ($config['board_email_form'] && $config['email_enable']) ? append_sid("{$phpbb_root_path}memberlist.$phpEx", 'mode=email&amp;u=' . $user_id) : (($config['board_hide_emails'] && !$auth->acl_get('a_email')) ? '' : 'mailto:' . $data['user_email']);
1261         }
1262         else
1263         {
1264                 $email = '';
1265         }
1266
1267         $last_visit = (!empty($data['session_time'])) ? $data['session_time'] : $data['user_lastvisit'];
1268
1269         if ($config['load_onlinetrack'])
1270         {
1271                 $update_time = $config['load_online_time'] * 60;
1272                 $online = (time() - $update_time < $data['session_time'] && ((isset($data['session_viewonline']) && $data['user_allow_viewonline']) || $auth->acl_get('u_viewonline'))) ? true : false;
1273         }
1274         else
1275         {
1276                 $online = false;
1277         }
1278
1279         $age = '';
1280
1281         if ($data['user_birthday'])
1282         {
1283                 list($bday_day, $bday_month, $bday_year) = array_map('intval', explode('-', $data['user_birthday']));
1284
1285                 if ($bday_year)
1286                 {
1287                         $time = time() + $user->timezone + $user->dst;
1288
1289                         $age = (int) (date('Y', $time) - $bday_year - ((((date('n', $time) - $bday_month) < 0) || ((date('j', $time) - $bday_day) < 0)) ? 1 : 0));
1290                 }
1291         }
1292
1293         // Dump it out to the template
1294         return array(
1295                 'AGE'                   => $age,
1296                 'USERNAME'              => $username,
1297                 'USER_COLOR'    => (!empty($data['user_colour'])) ? $data['user_colour'] : '',
1298                 'RANK_TITLE'    => $rank_title,
1299                 'JOINED'                => $user->format_date($data['user_regdate']),
1300                 'VISITED'               => (empty($last_visit)) ? ' - ' : $user->format_date($last_visit),
1301                 'POSTS'                 => ($data['user_posts']) ? $data['user_posts'] : 0,
1302                 'WARNINGS'              => isset($data['user_warnings']) ? $data['user_warnings'] : 0,
1303
1304                 'ONLINE_IMG'            =>  (!$config['load_onlinetrack']) ? '' : (($online) ? $user->img('btn_online', 'ONLINE') : $user->img('btn_offline', 'OFFLINE')),
1305                 'S_ONLINE'                      => ($config['load_onlinetrack'] && $online) ? true : false,
1306                 'RANK_IMG'                      => $rank_img,
1307                 'RANK_IMG_SRC'          => $rank_img_src,
1308                 'ICQ_STATUS_IMG'        => (!empty($data['user_icq'])) ? '<img src="http://web.icq.com/whitepages/online?icq=' . $data['user_icq'] . '&amp;img=5" width="18" height="18" />' : '',
1309                 'S_JABBER_ENABLED'      => ($config['jab_enable']) ? true : false,
1310
1311                 'U_PROFILE'             => append_sid("{$phpbb_root_path}memberlist.$phpEx", 'mode=viewprofile&amp;u=' . $user_id),
1312                 'U_SEARCH_USER' => ($auth->acl_get('u_search')) ? append_sid("{$phpbb_root_path}search.$phpEx", "author_id=$user_id&amp;sr=posts") : '',
1313                 'U_NOTES'               => $auth->acl_getf_global('m_') ? append_sid("{$phpbb_root_path}mcp.$phpEx", 'i=notes&amp;mode=user_notes&amp;u=' . $user_id, true, $user->session_id) : '',
1314                 'U_WARN'                => $auth->acl_getf_global('m_warn') ? append_sid("{$phpbb_root_path}mcp.$phpEx", 'i=warn&amp;mode=warn_user&amp;u=' . $user_id, true, $user->session_id) : '',
1315                 'U_PM'                  => ($config['allow_privmsg'] && $auth->acl_get('u_sendpm')) ? append_sid("{$phpbb_root_path}ucp.$phpEx", 'i=pm&amp;mode=compose&amp;u=' . $user_id) : '',
1316                 'U_EMAIL'               => $email,
1317                 'U_WWW'                 => (!empty($data['user_website'])) ? $data['user_website'] : '',
1318                 'U_ICQ'                 => ($data['user_icq']) ? 'http://www.icq.com/people/webmsg.php?to=' . $data['user_icq'] : '',
1319                 'U_AIM'                 => ($data['user_aim']) ? append_sid("{$phpbb_root_path}memberlist.$phpEx", 'mode=contact&amp;action=aim&amp;u=' . $user_id) : '',
1320                 'U_YIM'                 => ($data['user_yim']) ? 'http://edit.yahoo.com/config/send_webmesg?.target=' . $data['user_yim'] . '&amp;.src=pg' : '',
1321                 'U_MSN'                 => ($data['user_msnm']) ? append_sid("{$phpbb_root_path}memberlist.$phpEx", 'mode=contact&amp;action=msnm&amp;u=' . $user_id) : '',
1322                 'U_JABBER'              => ($data['user_jabber']) ? append_sid("{$phpbb_root_path}memberlist.$phpEx", 'mode=contact&amp;action=jabber&amp;u=' . $user_id) : '',
1323                 'LOCATION'              => ($data['user_from']) ? $data['user_from'] : '',
1324
1325                 'L_VIEWING_PROFILE'     => sprintf($user->lang['VIEWING_PROFILE'], $username),
1326         );
1327 }
1328
1329 ?>