Removing what out of this PHP document
| From: | Todd Williamsen | Date: | Tue, 06 Nov 2001 16:08:49 +0000 |
| Subject: | Removing what out of this PHP document | ||
| Groups: | php.windows | ||
| Request: | Send a blank email to php-windows+get-10236@lists.php.net to get a copy of this message | ||
What I want to do is remove the ability for users to register and have admin
control. This is a PHPNUke item, but I am not all that familiar with PHP to
remove what from what... I want to remove the form and put in a link to
register contact admin@yourhost.com. But I want to leave in the login box
so that users can login...
Here is the code:
<?php
/************************************************************************/
/* PHP-NUKE: Web Portal System */
/* =========================== */
/* */
/* Copyright (c) 2001 by Francisco Burzi (fbc@mandrakesoft.com) */
/* http://phpnuke.org
*/
/* */
/* This program is free software. You can redistribute it and/or modify */
/* it under the terms of the GNU General Public License as published by */
/* the Free Software Foundation; either version 2 of the License. */
/************************************************************************/
if(!isset($mainfile)) { include("mainfile.php"); }
$userpage = 1;
function nav() {
global $userimg;
echo "<table border=\"0\" cellpadding=\"15\"
align=\"center\"><tr><td>";
echo "<font class=\"content\">"
."<center><a href=%22user.php?op=edituser/"><img
src=%22$userimg/info.gif/%22 border=\"0\"
alt=\""._CHANGEYOURINFO."\"></a><br>"
."<a href=%22user.php?op=edituser/">"._CHANGEYOURINFO."</a>"
."</center></font></td>";
echo "<td><font class=\"content\">"
."<center><a href=%22user.php?op=edithome/"><img
src=%22$userimg/home.gif/%22 border=\"0\"
alt=\""._CHANGEHOME."\"></a><br>"
."<a href=%22user.php?op=edithome/">"._CHANGEHOME."</a>"
."</center></form></font></td>";
echo "<td><font class=\"content\">"
."<center><a href=%22user.php?op=editcomm/"><img
src=%22$userimg/comments.gif/%22 border=\"0\"
alt=\""._CONFIGCOMMENTS."\"></a><br>"
."<a href=%22user.php?op=editcomm/">"._CONFIGCOMMENTS."</a>"
."</center></form></font></td>";
echo "<td><font class=\"content\">"
."<center><a href=%22user.php?op=chgtheme/"><img
src=%22$userimg/themes.gif/%22 border=\"0\"
alt=\""._SELECTTHETHEME."\"></a><br>"
."<a href=%22user.php?op=chgtheme/">"._SELECTTHETHEME."</a>"
."</center></form></font></td>";
echo "<td><font class=\"content\">"
."<center><a href=%22user.php?op=logout/"><img
src=%22$userimg/exit.gif/%22
border=\"0\" alt=\""._LOGOUTEXIT."\"></a><br>"
."<a href=%22user.php?op=logout/">"._LOGOUTEXIT."</a>"
."</center></form></font>";
echo "</td></tr></table>\n";
}
function userCheck($uname, $email) {
global $stop, $prefix;
if ((!$email) || ($email=="") ||
(!eregi("^[_\.0-9a-z-]+@([0-9a-z][0-9a-z-]+\.)+[a-z]{2,3}$",$email))) $stop
= "<center>"._ERRORINVEMAIL."</center><br>";
if (strrpos($email,' ') > 0) $stop =
"<center>"._ERROREMAILSPACES."</center>";
if ((!$uname) || ($uname=="") || (ereg("[^a-zA-Z0-9_-]",$uname))) $stop
= "<center>"._ERRORINVNICK."</center><br>";
if (strlen($uname) > 25) $stop =
"<center>"._NICK2LONG."</center>";
if
(eregi("^((root)|(adm)|(linux)|(webmaster)|(admin)|(god)|(administrator)|(ad
ministrador)|(nobody)|(anonymous)|(anonimo)|(anónimo)|(operator))$",$uname))
$stop = "<center>"._NAMERESERVED."";
if (strrpos($uname,' ') > 0) $stop =
"<center>"._NICKNOSPACES."</center>";
if (mysql_num_rows(mysql_query("select uname from $prefix"._users."
where uname='$uname'")) > 0) $stop =
"<center>"._NICKTAKEN."</center><br>";
if (mysql_num_rows(mysql_query("select email from $prefix"._users."
where email='$email'")) > 0) $stop =
"<center>"._EMAILREGISTERED."</center><br>";
return($stop);
}
function makePass() {
$makepass="";
$syllables="er,in,tia,wol,fe,pre,vet,jo,nes,al,len,son,cha,ir,ler,bo,ok,tio,
nar,sim,ple,bla,ten,toe,cho,co,lat,spe,ak,er,po,co,lor,pen,cil,li,ght,wh,at,
the,he,ck,is,mam,bo,no,fi,ve,any,way,pol,iti,cs,ra,dio,sou,rce,sea,rch,pa,pe
r,com,bo,sp,eak,st,fi,rst,gr,oup,boy,ea,gle,tr,ail,bi,ble,brb,pri,dee,kay,en
,be,se";
$syllable_array=explode(",", $syllables);
srand((double)microtime()*1000000);
for ($count=1;$count<=4;$count++) {
if (rand()%10 == 1) {
$makepass .= sprintf("%0.0f",(rand()%50)+1);
} else {
$makepass .= sprintf("%s",$syllable_array[rand()%62]);
}
}
return($makepass);
userCheck($uname, $email);
if (!$stop) {
OpenTable();
echo ""._UUSERNAME.": $uname<br>"
.""._EMAIL.": $email<br>";
if (($user_avatar) || ($user_avatar!="")) echo ""._AVATAR.": <img
src=%22images/forum/avatar/$user_avatar/%22 alt=\"\"><br>";
if (($url) || ($url!="")) echo ""._WEBSITE.": $url<br>";
if (($user_icq) || ($user_icq!="")) echo ""._ICQ.":
$user_icq<br>";
if (($user_aim) || ($user_aim!="")) echo ""._AIM.":
$user_aim<br>";
if (($user_yim) || ($user_yim!="")) echo ""._YIM.":
$user_yim<br>";
if (($user_msnm) || ($user_msnm!="")) echo ""._MSNM.":
$user_msnm<br>";
if (($user_from) || ($user_from!="")) echo ""._LOCATION.":
$user_from<br>";
if (($user_occ) || ($user_occ!="")) echo ""._OCCUPATION.":
$user_occ<br>";
if (($user_intrest) || ($user_intrest!="")) echo ""._INTERESTS.":
$user_intrest<br>";
if (($user_sig) || ($user_sig!="")) echo ""._SIGNATURE.":
$user_sig<br>";
echo "<form action=%22user.php/%22 method=\"post\">"
."<input type=\"hidden\" name=\"uname\"
value=\"$uname\">"
."<input type=\"hidden\" name=\"email\"
value=\"$email\">"
."<input type=\"hidden\" name=\"user_avatar\"
value=\"$user_avatar\">"
."<input type=\"hidden\" name=\"user_icq\"
value=\"$user_icq\">"
."<input type=\"hidden\" name=\"url\"
value=\"$url\">"
."<input type=\"hidden\" name=\"user_from\"
value=\"$user_from\">"
."<input type=\"hidden\" name=\"user_occ\"
value=\"$user_occ\">"
."<input type=\"hidden\" name=\"user_intrest\"
value=\"$user_intrest\">"
."<input type=\"hidden\" name=\"user_sig\"
value=\"$user_sig\">"
."<input type=\"hidden\" name=\"user_aim\"
value=\"$user_aim\">"
."<input type=\"hidden\" name=\"user_yim\"
value=\"$user_yim\">"
."<input type=\"hidden\" name=\"user_msnm\"
value=\"$user_msnm\">"
."<input type=\"hidden\" name=\"user_viewemail\"
value=\"$user_viewemail\">"
."<input type=\"hidden\" name=\"op\"
value=\"finish\"><br><br>"
."<input type=\"submit\"
value=\""._FINISH."\"></form>";
CloseTable();
} else {
OpenTable();
echo "<center><font class=\"title\"><b>Registration
Error!</b></font><br><br>";
echo "<font
class=\"content\">$stop<br>"._GOBACK."</font></center>";
CloseTable();
}
include("footer.php");
else {
echo "$stop";
include("footer.php");
function userinfo($uname, $bypass=0) {
global $user, $cookie, $sitename, $prefix;
$result = mysql_query("select femail, url, bio, user_avatar, user_icq,
user_aim, user_yim, user_msnm, user_from, user_occ, user_intrest, user_sig,
pass from $prefix"._users." where uname='$uname'");
$userinfo = mysql_fetch_array($result);
if(!$bypass) cookiedecode($user);
include("header.php");
OpenTable();
echo "<center>";
if(($uname == $cookie[1]) AND ($userinfo[pass] == $cookie[2])) {
echo "<center><font class=\"option\">$uname, "._WELCOMETO."
$sitename!</font><br><br>";
echo "<font
class=\"content\">"._THISISYOURPAGE."</font></center><br><br>";
nav();
}
CloseTable();
echo "<center><br><br>";
OpenTable();
echo "<b>"._LAST10COMMENTS." $uname:</b><br>";
$result = mysql_query("select tid, sid, subject from
$prefix"._comments." where name='$uname' order by tid DESC limit 0,10");
while(list($tid, $sid, $subject) = mysql_fetch_row($result)) {
echo "
<ul>
<li><a
href=%22article.php?thold=-1&mode=flat&order=0&sid=$sid#$tid/">$subject</a><
br>";
}
CloseTable();
echo "<br><br>";
OpenTable();
echo "<b>"._LAST10SUBMISSIONS." $uname:</b><br>";
$result = mysql_query("select sid, title from $prefix"._stories." where
informant='$uname' order by sid DESC limit 0,10");
while(list($sid, $title) = mysql_fetch_row($result)) {
echo "<li><a
href=%22article.php?sid=$sid/">$title</a><br>";
}
CloseTable();
echo "</center>";
include("footer.php");
}
function main($user) {
global $stop;
if(!is_user($user)) {
include("header.php");
if ($stop) {
OpenTable();
echo "<center><font
class=\"title\"><b>"._LOGININCOR."</b></font></center>\n";
CloseTable();
echo "<br>\n";
} else {
OpenTable();
echo "<center><font
class=\"title\"><b>"._USERREGLOGIN."</b></font></center>\n";
CloseTable();
echo "<br>\n";
}
if (is_user($user)) {
} else {
OpenTable();
echo "<form action=%22user.php/%22 method=\"post\">\n"
."<b>"._USERLOGIN."</b><br><br>\n"
."<table border=\"0\"><tr><td>\n"
.""._NICKNAME.":</td><td><input type=\"text\"
name=\"uname\" size=\"26\"
maxlength=\"25\"></td></tr>\n"
."<tr><td>"._PASSWORD.":</td><td><input
type=\"password\" name=\"pass\"
size=\"21\" maxlength=\"20\"></td></tr></table>\n"
."<input type=\"hidden\" name=\"op\"
value=\"login\">\n"
."<input type=\"submit\" value=\""._LOGIN."\"> <font
class=\"content\">[
<a href=%22user.php#lost/">"._PASSWORDLOST."</a> ]</font>\n"
."</form>\n";
CloseTable();
echo "<br>";
}
OpenTable();
echo "<form name=\"Register\" action=%22user.php/%22
method=\"post\">\n"
."<b>"._REGNEWUSER."</b><br><br>\n"
."<table cellpadding=\"0\" cellspacing=\"0\"
border=\"0\">\n"
."<tr><td>"._NICKNAME.":</td><td><input
type=\"text\"
name=\"uname\" size=\"26\"
maxlength=\"25\"></td></tr>\n"
."<tr><td>"._EMAIL.":</td><td><input
type=\"text\" name=\"email\"
size=\"25\" maxlength=\"60\"></td></tr>\n"
."<tr><td>"._WEBSITE.":</td><td><input
type=\"text\" name=\"url\"
size=\"25\" maxlength=\"255\"></td></tr>\n"
."<tr><td>"._AVATAR.":</td><td>[ <a
href=%22user.php?op=avatarlist/">"._LIST."</a> ] \n"
."<select name=\"user_avatar\"
onChange=\"showimage()\">\n";
$direktori = "images/forum/avatar";
$handle=opendir($direktori);
while ($file = readdir($handle)) {
$filelist[] = $file;
}
asort($filelist);
while (list ($key, $file) = each ($filelist)) {
ereg(".gif|.jpg",$file);
if ($file == "." || $file == "..") {
$a=1;
} else {
echo "<option value=\"$file\">$file</option>\n";
}
}
echo "</select> <img src=%22images/forum/avatar/blank.gif/%22
name=\"avatar\" width=\"32\" height=\"32\"
alt=\"\">\n"
."</td></tr>\n"
."<tr><td>"._ICQ.":</td><td><input
type=\"text\" name=\"user_icq\"
size=\"20\" maxlength=\"20\"></td></tr>\n"
."<tr><td>"._AIM.":</td><td><input
type=\"text\" name=\"user_aim\"
size=\"20\" maxlength=\"20\"></td></tr>\n"
."<tr><td>"._YIM.":</td><td><input
type=\"text\" name=\"user_yim\"
size=\"20\" maxlength=\"20\"></td></tr>\n"
."<tr><td>"._MSNM.":</td><td><input
type=\"text\"
name=\"user_msnm\" size=\"20\"
maxlength=\"20\"></td></tr>\n"
."<tr><td>"._LOCATION.":</td><td><input
type=\"text\"
name=\"user_from\" size=\"25\"
maxlength=\"60\"></td></tr>\n"
."<tr><td>"._OCCUPATION.":</td><td><input
type=\"text\"
name=\"user_occ\" size=\"25\"
maxlength=\"60\"></td></tr>\n"
."<tr><td>"._INTERESTS.":</td><td><input
type=\"text\"
name=\"user_intrest\" size=\"25\"
maxlength=\"255\"></td></tr>\n"
."<tr><td>"._OPTION.":</td><td><INPUT
TYPE=\"CHECKBOX\"
NAME=\"user_viewemail\" VALUE=\"1\">
"._ALLOWEMAILVIEW."</td></tr>\n"
."<tr><td>"._SIGNATURE.":</td><td><TEXTAREA
NAME=\"user_sig\"
ROWS=\"6\" COLS=\"45\"></TEXTAREA></td></tr>\n"
."<tr><td>\n"
."<input type=\"hidden\" name=\"op\" value=\"new
user\">\n"
."<input type=\"submit\"
value=\""._NEWUSER."\">\n"
."</td></tr></table>\n"
."</form>\n"
."<br>\n"
.""._PASSWILLSEND."<br><br>\n"
.""._COOKIEWARNING."<br>\n"
.""._ASREGUSER."<br>\n"
."<ul>\n"
."<li>"._ASREG1."\n"
."<li>"._ASREG2."\n"
."<li>"._ASREG3."\n"
."<li>"._ASREG4."\n"
."<li>"._ASREG5."\n"
."<li>"._ASREG6."\n"
."<li>"._ASREG7."\n"
."</ul>\n"
.""._REGISTERNOW."<br>\n"
.""._WEDONTGIVE."\n";
CloseTable();
echo "<br>";
OpenTable();
echo "<a name=\"lost\">";
echo "<b>"._PASSWORDLOST."</b><br><br>\n"
.""._NOPROBLEM."<br>\n"
."<form action=%22user.php/%22 method=\"post\">\n"
."<table border=\"0\"><tr><td>\n"
.""._NICKNAME.":</td><td><input type=\"text\"
name=\"uname\"
size=\"26\" maxlength=\"25\"></td></tr>\n"
."<tr><td>"._CONFIRMATIONCODE.":</td><td><input
type=\"text\"
name=\"code\" size=\"5\"
maxlength=\"6\"></td></tr></table>\n"
."<input type=\"hidden\" name=\"op\"
value=\"mailpasswd\">\n"
."<input type=\"submit\"
value=\""._SENDPASSWORD."\">\n"
."</form>\n";
CloseTable();
include("footer.php");
} elseif(is_user($user)) {
global $cookie;
cookiedecode($user);
userinfo($cookie[1]);
}
}
function logout() {
setcookie("user");
include("header.php");
OpenTable();
echo "<center><font
class=\"option\"><b>"._YOUARELOGGEDOUT."</b></font></center>";
CloseTable();
include("footer.php");
}
function mail_password($uname, $code) {
global $sitename, $system, $adminmail, $nukeurl, $prefix;
$result = mysql_query("select email, pass from $prefix"._users." where
(uname='$uname')");
if(!$result) {
OpenTable();
echo "<center>"._SORRYNOUSERINFO."</center>";
CloseTable();
} else {
$host_name = getenv("REMOTE_ADDR");
list($email, $pass) = mysql_fetch_row($result);
$areyou = substr($pass, 0, 5);
if ($areyou==$code) {
$newpass=makepass();
$message = ""._USERACCOUNT." '$uname' "._AT." $sitename
"._HASTHISEMAIL." "._AWEBUSERFROM." $host_name
"._HASREQUESTED."\n\n"._YOURNEWPASSWORD." $newpass\n\n
"._YOUCANCHANGE."
$nukeurl/user.php\n\n"._IFYOUDIDNOTASK."";
$subject = ""._USERPASSWORD4." $uname";
mail($email, $subject, $message, "From: $adminmail\nX-Mailer: PHP/" .
phpversion());
/* Next step: add the new password to the database */
if(!$system) {
$cryptpass=crypt($newpass);
} else {
$cryptpass=$newpass;
}
$query="update $prefix"._users." set pass='$cryptpass' where
uname='$uname'";
if(!mysql_query($query)) {
echo ""._UPDATEFAILED."";
}
include ("header.php");
OpenTable();
echo "<center>"._PASSWORD4." $uname
"._MAILED."</center>";
CloseTable();
include ("footer.php");
/* If no Code, send it */
} else {
$result = mysql_query("select email, pass from $prefix"._users." where
(uname='$uname')");
if(!$result) {
echo "<center>"._SORRYNOUSERINFO."</center>";
} else {
$host_name = getenv("REMOTE_ADDR");
list($email, $pass) = mysql_fetch_row($result);
$areyou = substr($pass, 0, 5);
$message = ""._USERACCOUNT." '$uname' "._AT." $sitename
"._HASTHISEMAIL." "._AWEBUSERFROM." $host_name
"._CODEREQUESTED."\n\n"._YOURCODEIS." $areyou \n\n"._WITHTHISCODE."
$nukeurl/user.php\n"._IFYOUDIDNOTASK2."";
$subject=""._CODEFOR." $uname";
mail($email, $subject, $message, "From: $adminmail\nX-Mailer: PHP/" .
phpversion());
include ("header.php");
echo "<center>"._CODEFOR." $uname "._MAILED."";
include ("footer.php");
}
}
}
}
function docookie($setuid, $setuname, $setpass, $setstorynum, $setumode,
$setuorder, $setthold, $setnoscore, $setublockon, $settheme, $setcommentmax)
{
$info =
base64_encode("$setuid:$setuname:$setpass:$setstorynum:$setumode:$setuorder:
$setthold:$setnoscore:$setublockon:$settheme:$setcommentmax");
setcookie("user","$info",time()+15552000);
}
function login($uname, $pass) {
global $setinfo, $system, $prefix;
$result = mysql_query("select pass, uid, storynum, umode, uorder, thold,
noscore, ublockon, theme, commentmax from $prefix"._users." where
uname='$uname'");
if(mysql_num_rows($result)==1) {
$setinfo = mysql_fetch_array($result);
$dbpass=$setinfo[pass];
if(!$system) {
$pass=crypt($pass,substr($dbpass,0,2));
}
if (strcmp($dbpass,$pass)) {
Header("Location: user.php?stop=1");
return;
}
docookie($setinfo[uid], $uname, $pass, $setinfo[storynum],
$setinfo[umode], $setinfo[uorder], $setinfo[thold], $setinfo[noscore],
$setinfo[ublockon], $setinfo[theme], $setinfo[commentmax]);
Header("Location: user.php?op=userinfo&bypass=1&uname=$uname");
} else {
Header("Location: user.php?stop=1");
}
}
function edituser() {
global $user, $userinfo, $cookie;
include("header.php");
getusrinfo($user);
OpenTable();
echo "<center><font
class=\"title\"><b>"._PERSONALINFO."</b></font></center>";
CloseTable();
echo "<br>";
OpenTable();
nav();
CloseTable();
echo "<br>";
OpenTable();
echo "<table cellpadding=\"8\"
border=\"0\"><tr><td>"
."<form name=\"Register\" action=%22user.php/%22
method=\"post\">"
."<b>"._UREALNAME."</b> "._OPTIONAL."<br>"
."<input type=\"text\" name=\"name\"
value=\"$userinfo[name]\" size=\"30\"
maxlength=\"60\"><br><br>"
."<b>"._UREALEMAIL."</b> "._REQUIRED."<br>"
.""._EMAILNOTPUBLIC."<br>"
."<input type=\"text\" name=\"email\"
value=\"$userinfo[email]\"
size=\"30\" maxlength=\"60\"><br><br>"
."<b>"._UFAKEMAIL."</b> "._OPTIONAL."<br>"
.""._EMAILPUBLIC."<br>"
."<input type=\"text\" name=\"femail\"
value=\"$userinfo[femail]\"
size=\"30\" maxlength=\"60\"><br><br>"
."<b>"._YOURHOMEPAGE."</b> "._OPTIONAL."<br>"
."<input type=\"text\" name=\"url\" value=\"$userinfo[url]\"
size=\"30\"
maxlength=\"100\"><br><br>"
."<b>"._YOURAVATAR."</b> "._OPTIONAL."<br>[ </a>
<a
href=%22user.php?op=avatarlist/">"._LIST."</a> ] "
."<select name=\"user_avatar\" onChange=\"showimage()\">"
."<option
value=\"$userinfo[user_avatar]\">$userinfo[user_avatar]</option>";
$direktori = "images/forum/avatar";
$handle=opendir($direktori);
while ($file = readdir($handle)) {
$filelist[] = $file;
}
asort($filelist);
while (list ($key, $file) = each ($filelist)) {
ereg(".gif|.jpg",$file);
if ($file == "." || $file == "..") {
$a=1;
} else {
echo "<option value=\"$file\">$file</option>";
}
}
echo "</select> <img
src=%22images/forum/avatar/$userinfo[user_avatar]/%22 name=\"avatar\"
width=\"32\" height=\"32\" alt=\"\">"
."<br><br>"
."<b>"._YICQ."</b> "._OPTIONAL."<br>"
."<input type=\"text\" name=\"user_icq\"
value=\"$userinfo[user_icq]\"
size=\"30\" maxlength=\"100\"><br><br>"
."<b>"._YAIM."</b> "._OPTIONAL."<br>"
."<input type=\"text\" name=\"user_aim\"
value=\"$userinfo[user_aim]\"
size=\"30\" maxlength=\"100\"><br><br>"
."<b>"._YYIM."</b> "._OPTIONAL."<br>"
."<input type=\"text\" name=\"user_yim\"
value=\"$userinfo[user_yim]\"
size=\"30\" maxlength=\"100\"><br><br>"
."<b>"._YMSNM."</b> "._OPTIONAL."<br>"
."<input type=\"text\" name=\"user_msnm\"
value=\"$userinfo[user_msnm]\"
size=\"30\" maxlength=\"100\"><br><br>"
."<b>"._YLOCATION."</b> "._OPTIONAL."<br>"
."<input type=\"text\" name=\"user_from\"
value=\"$userinfo[user_from]\"
size=\"30\" maxlength=\"100\"><br><br>"
."<b>"._YOCCUPATION."</b> "._OPTIONAL."<br>"
."<input type=\"text\" name=\"user_occ\"
value=\"$userinfo[user_occ]\"
size=\"30\" maxlength=\"100\"><br><br>"
."<b>"._YINTERESTS."</b> "._OPTIONAL."<br>"
."<input type=\"text\" name=\"user_intrest\"
value=\"$userinfo[user_intrest]\" size=\"30\"
maxlength=\"100\"><br><br>"
."<b>"._SIGNATURE."</b> "._OPTIONAL."<br>"
.""._255CHARMAX."<br>"
."<textarea wrap=\"virtual\" cols=\"50\" rows=\"5\"
name=\"user_sig\">$userinfo[user_sig]</textarea><br>"
."<br><br>"
."<b>"._EXTRAINFO."</b> "._OPTIONAL."<br>"
.""._CANKNOWABOUT."<br>"
."<textarea wrap=\"virtual\" cols=\"50\" rows=\"5\"
name=\"bio\">$userinfo[bio]</textarea>"
."<br><br>"
."<b>"._PASSWORD."</b> "._TYPENEWPASSWORD."<br>"
."<input type=\"password\" name=\"pass\" size=\"10\"
maxlength=\"20\"> <input type=\"password\"
name=\"vpass\"
size=\"10\" maxlength=\"20\">"
."<br><br>"
."<input type=\"hidden\" name=\"uname\"
value=\"$userinfo[uname]\">"
."<input type=\"hidden\" name=\"uid\"
value=\"$userinfo[uid]\">"
."<input type=\"hidden\" name=\"op\"
value=\"saveuser\">"
."<input type=\"submit\" value=\""._SAVECHANGES."\">"
."</form></td></tr></table>";
CloseTable();
include("footer.php");
}
function saveuser($uid, $name, $uname, $email, $femail, $url, $pass, $vpass,
$bio, $user_avatar, $user_icq, $user_occ, $user_from, $user_intrest,
$user_sig, $user_aim, $user_yim, $user_msnm, $attach) {
global $user, $cookie, $userinfo, $EditedMessage, $system, $prefix;
cookiedecode($user);
$check = $cookie[1];
$check2 = $cookie[2];
$result = mysql_query("select uid, pass from $prefix"._users." where
uname='$check'");
list($vuid, $ccpass) = mysql_fetch_row($result);
if (($uid == $vuid) AND ($check2 == $ccpass)) {
if ((isset($pass)) && ("$pass" != "$vpass")) {
echo "<center>"._PASSDIFFERENT."</center>";
} elseif (($pass != "") && (strlen($pass) < $minpass)) {
echo "<center>"._YOUPASSMUSTBE." <b>$minpass</b>
"._CHARLONG."</center>";
} else {
if ($bio) { filter_text($bio); $bio = $EditedMessage; $bio =
FixQuotes($bio); }
if ($pass != "") {
cookiedecode($user);
mysql_query("LOCK TABLES $prefix"._users." WRITE");
if(!$system)
$pass=crypt($pass);
mysql_query("update $prefix"._users." set name='$name',
email='$email',
femail='$femail', url='$url', pass='$pass', bio='$bio' ,
user_avatar='$user_avatar', user_icq='$user_icq',
user_occ='$user_occ',
user_from='$user_from', user_intrest='$user_intrest',
user_sig='$user_sig',
user_aim='$user_aim', user_yim='$user_yim', user_msnm='$user_msnm'
where
uid='$uid'");
$result = mysql_query("select uid, uname, pass, storynum, umode, uorder,
thold, noscore, ublockon, theme from $prefix"._users." where uname='$uname'
and pass='$pass'");
if(mysql_num_rows($result)==1) {
$userinfo = mysql_fetch_array($result);
docookie($userinfo[uid],$userinfo[uname],$userinfo[pass],$userinfo[storynum]
,$userinfo[umode],$userinfo[uorder],$userinfo[thold],$userinfo[noscore],$use
rinfo[ublockon],$userinfo[theme],$userinfo[commentmax]);
} else {
echo "<center>"._SOMETHINGWRONG."</center><br>";
}
mysql_query("UNLOCK TABLES");
} else {
mysql_query("update $prefix"._users." set name='$name',
email='$email',
femail='$femail', url='$url', bio='$bio',
user_avatar='$user_avatar',
user_icq='$user_icq', user_occ='$user_occ', user_from='$user_from',
user_intrest='$user_intrest', user_sig='$user_sig',
user_aim='$user_aim',
user_yim='$user_yim', user_msnm='$user_msnm' where uid='$uid'");
if ($attach) {
$a = 1;
} else {
$a = 0;
}
}
Header("Location: user.php?");
}
}
}
function edithome() {
global $user, $userinfo, $Default_Theme;
include ("header.php");
getusrinfo($user);
OpenTable();
echo "<center><font
class=\"title\"><b>"._HOMECONFIG."</b></font></center>";
CloseTable();
echo "<br>";
OpenTable();
nav();
CloseTable();
echo "<br>";
if($userinfo[theme]=="") {
$userinfo[theme] = "$Default_Theme";
}
OpenTable();
echo "<form action=%22user.php/%22 method=\"post\">"
."<b>"._NEWSINHOME."</b> "._MAX127." "
."<input type=\"text\" name=\"storynum\" size=\"3\"
maxlength=\"3\"
value=\"$userinfo[storynum]\">"
."<br><br>";
if ($userinfo[ublockon]==1) {
$sel = "checked";
}
echo "<input type=\"checkbox\" name=\"ublockon\" $sel>"
." <b>"._ACTIVATEPERSONAL."</b>"
."<br>"._CHECKTHISOPTION.""
."<br>"._YOUCANUSEHTML."<br>"
."<textarea cols=\"55\" rows=\"5\"
name=\"ublock\">$userinfo[ublock]</textarea>"
."<br><br>"
."<input type=\"hidden\" name=\"theme\"
value=\"$userinfo[theme]\">"
."<input type=\"hidden\" name=\"uname\"
value=\"$userinfo[uname]\">"
."<input type=\"hidden\" name=\"uid\"
value=\"$userinfo[uid]\">"
."<input type=\"hidden\" name=\"op\"
value=\"savehome\">"
."<input type=\"submit\" value=\""._SAVECHANGES."\">"
."</form>";
CloseTable();
include ("footer.php");
}
function chgtheme() {
global $user, $userinfo, $Default_Theme;
include ("header.php");
getusrinfo($user);
OpenTable();
echo "<center><font
class=\"title\"><b>"._THEMESELECTION."</b></font></center>";
CloseTable();
echo "<br>";
OpenTable();
nav();
CloseTable();
echo "<br>";
OpenTable();
echo "<center>"
."<form action=%22user.php/%22 method=\"post\">"
."<b>"._SELECTTHEME."</b><br>"
."<select name=\"theme\">";
$handle=opendir('themes');
while ($file = readdir($handle)) {
if ( (!ereg("[.]",$file)) ) {
$themelist .= "$file ";
}
}
closedir($handle);
$themelist = explode(" ", $themelist);
sort($themelist);
for ($i=0; $i < sizeof($themelist); $i++) {
if($themelist[$i]!="") {
echo "<option value=\"$themelist[$i]\" ";
if((($userinfo[theme]=="") && ($themelist[$i]=="$Default_Theme"))
||
($userinfo[theme]==$themelist[$i])) echo "selected";
echo ">$themelist[$i]\n";
}
}
if($userinfo[theme]=="") $userinfo[theme] = "$Default_Theme";
echo "</select><br>"
.""._THEMETEXT1."<br>"
.""._THEMETEXT2."<br>"
.""._THEMETEXT3."<br><br>"
."<input type=\"hidden\" name=\"storynum\"
value=\"$userinfo[storynum]\">"
."<input type=\"hidden\" name=\"ublockon\"
value=\"$userinfo[ublockon]\">"
."<input type=\"hidden\" name=\"ublock\"
value=\"$userinfo[ublock]\">"
."<input type=\"hidden\" name=\"uname\"
value=\"$userinfo[uname]\">"
."<input type=\"hidden\" name=\"uid\"
value=\"$userinfo[uid]\">"
."<input type=\"hidden\" name=\"op\"
value=\"savetheme\">"
."<input type=\"submit\" value=\""._SAVECHANGES."\">"
."</form>";
CloseTable();
include ("footer.php");
}
function savehome($uid, $uname, $theme, $storynum, $ublockon, $ublock) {
global $user, $cookie, $userinfo, $prefix;
cookiedecode($user);
$check = $cookie[1];
$check2 = $cookie[2];
$result = mysql_query("select uid, pass from $prefix"._users." where
uname='$check'");
list($vuid, $ccpass) = mysql_fetch_row($result);
if (($uid == $vuid) AND ($check2 == $ccpass)) {
if(isset($ublockon)) $ublockon=1; else $ublockon=0;
$ublock = FixQuotes($ublock);
mysql_query("update $prefix"._users." set storynum='$storynum',
ublockon='$ublockon', ublock='$ublock' where uid=$uid");
getusrinfo($user);
docookie($userinfo[uid],$userinfo[uname],$userinfo[pass],$userinfo[storynum]
,$userinfo[umode],$userinfo[uorder],$userinfo[thold],$userinfo[noscore],$use
rinfo[ublockon],$userinfo[theme],$userinfo[commentmax]);
Header("Location: user.php?theme=$theme");
}
}
function savetheme($uid, $theme) {
global $user, $cookie, $userinfo, $prefix;
cookiedecode($user);
$check = $cookie[1];
$check2 = $cookie[2];
$result = mysql_query("select uid, pass from $prefix"._users." where
uname='$check'");
list($vuid, $ccpass) = mysql_fetch_row($result);
if (($uid == $vuid) AND ($check2 == $ccpass)) {
mysql_query("update $prefix"._users." set theme='$theme' where
uid=$uid");
getusrinfo($user);
docookie($userinfo[uid],$userinfo[uname],$userinfo[pass],$userinfo[storynum]
,$userinfo[umode],$userinfo[uorder],$userinfo[thold],$userinfo[noscore],$use
rinfo[ublockon],$userinfo[theme],$userinfo[commentmax]);
Header("Location: user.php?theme=$theme");
}
}
function editcomm() {
global $user, $userinfo;
include ("header.php");
getusrinfo($user);
OpenTable();
echo "<center><font
class=\"title\"><b>"._COMMENTSCONFIG."</b></font></center>";
CloseTable();
echo "<br>";
OpenTable();
nav();
CloseTable();
echo "<br>";
OpenTable();
echo "<table cellpadding=\"8\"
border=\"0\"><tr><td>"
."<form action=%22user.php/%22 method=\"post\">"
."<b>"._DISPLAYMODE."</b>"
."<select name=\"umode\">";
?>
<option value="nocomments" <?php if ($userinfo[umode] == 'nocomments')
{ echo "selected"; } ?>><?php echo _NOCOMMENTS ?>
<option value="nested" <?php if ($userinfo[umode] == 'nested') { echo
"selected"; } ?>><?php echo _NESTED ?>
<option value="flat" <?php if ($userinfo[umode] == 'flat') { echo
"selected"; } ?>><?php echo _FLAT ?>
<option value="thread" <?php if (!isset($userinfo[umode]) ||
($userinfo[umode]=="") || $userinfo[umode]=='thread') { echo
"selected"; }
?>><?php echo _THREAD ?>
</select>
<br><br>
<b><?php echo _SORTORDER ?></b>
<select name="uorder">
<option value="0" <?php if (!$userinfo[uorder]) { echo "selected"; }
?>><?php echo _OLDEST ?>
<option value="1" <?php if ($userinfo[uorder]==1) { echo "selected"; }
?>><?php echo _NEWEST ?>
<option value="2" <?php if ($userinfo[uorder]==2) { echo "selected"; }
?>><?php echo _HIGHEST ?>
</select>
<br><br>
<b><?php echo _THRESHOLD ?></b>
<?php echo _COMMENTSWILLIGNORED ?><br>
<select name="thold">
<option value="-1" <?php if ($userinfo[thold]==-1) { echo "selected";
}
?>>-1: <?php echo _UNCUT ?>
<option value="0" <?php if ($userinfo[thold]==0) { echo "selected"; }
?>>0: <?php echo _EVERYTHING ?>
<option value="1" <?php if ($userinfo[thold]==1) { echo "selected"; }
?>>1: <?php echo _FILTERMOSTANON ?>
<option value="2" <?php if ($userinfo[thold]==2) { echo "selected"; }
?>>2: <?php echo _USCORE ?> +2
<option value="3" <?php if ($userinfo[thold]==3) { echo "selected"; }
?>>3: <?php echo _USCORE ?> +3
<option value="4" <?php if ($userinfo[thold]==4) { echo "selected"; }
?>>4: <?php echo _USCORE ?> +4
<option value="5" <?php if ($userinfo[thold]==5) { echo "selected"; }
?>>5: <?php echo _USCORE ?> +5
</select><br>
<i><?php echo _SCORENOTE ?></i>
<br><br>
<INPUT type="checkbox" name="noscore" <?php if ($userinfo[noscore]==1)
{ echo "checked"; } ?>><b> <?php echo _NOSCORES ?></b> <?php
echo
_HIDDESCORES ?>
<br><br>
<b><?php echo _MAXCOMMENT ?></b> <?php echo _TRUNCATES ?><br>
<input type="text" name="commentmax" value="<?php echo
$userinfo[commentmax] ?>" size=11 maxlength=11> <?php echo _BYTESNOTE ?>
<br><br>
<input type="hidden" name="uname" value="<?php
echo"$userinfo[uname]";
?>">
<input type="hidden" name="uid" value="<?php
echo"$userinfo[uid]"; ?>">
<input type="hidden" name="op" value="savecomm">
<input type="submit" value="<?php echo _SAVECHANGES ?>">
</form></td></tr></table>
<?php
CloseTable();
echo "<br><br>";
include ("footer.php");
}
function savecomm($uid, $uname, $umode, $uorder, $thold, $noscore,
$commentmax) {
global $user, $cookie, $userinfo, $prefix;
cookiedecode($user);
$check = $cookie[1];
$check2 = $cookie[2];
$result = mysql_query("select uid, pass from $prefix"._users." where
uname='$check'");
list($vuid, $ccpass) = mysql_fetch_row($result);
if (($uid == $vuid) AND ($check2 == $ccpass)) {
if(isset($noscore)) $noscore=1; else $noscore=0;
mysql_query("update $prefix"._users." set umode='$umode',
uorder='$uorder',
thold='$thold', noscore='$noscore', commentmax='$commentmax' where
uid=$uid");
getusrinfo($user);
docookie($userinfo[uid],$userinfo[uname],$userinfo[pass],$userinfo[storynum]
,$userinfo[umode],$userinfo[uorder],$userinfo[thold],$userinfo[noscore],$use
rinfo[ublockon],$userinfo[theme],$userinfo[commentmax]);
Header("Location: user.php?");
}
}
function avatarlist() {
include("header.php");
Opentable();
echo "<center><font
class=\"option\"><b>"._AVAILABLEAVATARS."</b></font><br><br>";
$direktori = "images/forum/avatar";
$handle=opendir($direktori);
while ($file = readdir($handle)) {
$filelist[] = $file;
}
asort($filelist);
$temcount = 1;
while (list ($key, $file) = each ($filelist)) {
if (ereg(".gif",$file)) {
if ($file == "." || $file == "..") {
$a=1;
} else {
echo "<img src=%22images/forum/avatar/$file/%22 border=\"0\"
width=\"32\"
height=\"32\" alt=\"$file\" hspace=\"10\"
vspace=\"10\">";
}
if ($temcount == 10) {
echo "<br>";
$temcount -= 10;
}
$temcount ++;
}
}
echo "<br><br><br>"
.""._GOBACK.""
."</center>";
CloseTable();
include("footer.php");
}
switch($op) {
case "logout":
logout();
break;
case "lost_pass":
lost_pass();
break;
case "new user":
confirmNewUser($uname, $email, $url, $user_avatar, $user_icq, $user_occ,
$user_from, $user_intrest, $user_sig, $user_viewemail, $user_aim, $user_yim,
$user_msnm);
break;
case "finish":
finishNewUser($uname, $email, $url, $user_avatar, $user_icq, $user_occ,
$user_from, $user_intrest, $user_sig, $user_viewemail, $user_aim, $user_yim,
$user_msnm);
break;
case "mailpasswd":
mail_password($uname, $code);
break;
case "userinfo":
userinfo($uname, $bypass);
break;
case "login":
login($uname, $pass);
break;
case "dummy":
Header("Location: user.php");
break;
case "edituser":
edituser();
break;
case "saveuser":
saveuser($uid, $name, $uname, $email, $femail, $url, $pass, $vpass, $bio,
$user_avatar, $user_icq, $user_occ, $user_from, $user_intrest, $user_sig,
$user_aim, $user_yim, $user_msnm, $attach);
break;
case "edithome":
edithome();
break;
case "chgtheme":
chgtheme();
break;
case "savehome":
savehome($uid, $uname, $theme, $storynum, $ublockon, $ublock);
break;
case "savetheme":
savetheme($uid, $theme);
break;
case "avatarlist":
avatarlist();
break;
case "editcomm":
editcomm();
break;
case "savecomm":
savecomm($uid, $uname, $umode, $uorder, $thold, $noscore, $commentmax);
break;
default:
main($user);
break;
}
?>
Lots of code eh? Thanks a bunch... I have posted many threads on phpnuke's
forums, but no one responds over there..