Vergleich usercp.php - 1.2.1 - 1.2.8

 * Website: http://www.mybboard.com
 * License: http://www.mybboard.com/eula.html

 * Website: http://www.mybboard.net
 * License: http://www.mybboard.net/eula.html

 * $Id: usercp.php 2265 2006-09-26 14:49:36Z Tikitiki $

 * $Id: usercp.php 3139 2007-06-18 08:34:28Z chris $

	$mybb->user['pmfolders'] = "1**Inbox$%%$2**Sent Items$%%$3**Drafts$%%$4**Trash Can";

	$mybb->user['pmfolders'] = "1**".$lang->folder_inbox."$%%$2**".$lang->folder_sent_items."$%%$3**".$lang->folder_drafts."$%%$4**".$lang->folder_trash;

	if(($mybb->settings['sigimgcode'] == "no" && substr_count($parsed_sig, "<img") > 0) || ($mybb->settings['sigimgcode'] == "yes" && substr_count($parsed_sig, "<img") > $mybb->settings['maxsigimages']))

	if((($mybb->settings['sigimgcode'] == "no" && $mybb->settings['sigsmilies'] != 'yes') &&
		substr_count($parsed_sig, "<img") > 0) ||
		(($mybb->settings['sigimgcode'] == "yes" || $mybb->settings['sigsmilies'] == 'yes') &&
		substr_count($parsed_sig, "<img") > $mybb->settings['maxsigimages'])
	)

		if($mybb->input['awayday'] && $mybb->input['awaymonth'] && $mybb->input['awayyear'])

		if($mybb->input['awayday'])

			if ($returntimestamp < $awaytimestamp)

			if($returntimestamp < $awaytimestamp && $mybb->input['awayyear'] < my_date("Y"))

			$user['awayreason'] = htmlspecialchars_uni($user['awayreason']);

		"showcodebuttons" => $mybb->input['showcodebuttons'],

		"showcodebuttons" => intval($mybb->input['showcodebuttons']),

			{

			{

			}

			}

		}

		$plugins->run_hooks("usercp_do_options_end");

		}

		$plugins->run_hooks("usercp_do_options_end");

	else
	{
		$allownoticescheck = "";
	}

	else
	{
		$allownoticescheck = "";
	}

	{

	{

	}

	}

	{

	{

	}
	else
	{

	}
	else
	{

	}

	}

	else
	{
		$emailnotifycheck = "";
	}

	else
	{
		$emailnotifycheck = "";
	}

	}
	else
	{

	}
	else
	{

	}

	}

	else
	{
		$showavatarscheck = "";
	}

	else
	{
		$showavatarscheck = "";
	}

	}
	else
	{

	}
	else
	{

	}

	}

	else
	{
		$remembercheck = "";
	}

	else
	{
		$remembercheck = "";
	}

	}
	else

	}
	else

	}

	}

	else
	{
		$dstcheck = "";
	}

	else
	{
		$dstcheck = "";
	}

	{

	{

	}

	}

	{

	{

	}

	}

	}

	}

		}

		}

	
	$user = validate_password_from_uid($mybb->user['uid'], $mybb->input['password']); 
	if(!$user['uid']) 
	{ 
		error($lang->error_invalidpassword); 
	} 
	if($mybb->input['email'] != $mybb->input['email2']) 
	{ 
		error($lang->error_emailmismatch); 
	} 

	//Email Banning Code 
	if($mybb->settings['emailkeep'] != "yes") 
	{ 
		$bannedemails = explode(" ", $mybb->settings['emailban']); 
		if(is_array($bannedemails)) 
		{ 
			foreach($bannedemails as $key => $bannedemail) 
			{ 
				$bannedemail = trim($bannedemail); 
				if($bannedemail != "") 
				{ 
					if(strstr($mybb->input['email'], $bannedemail) != "") 
					{ 
							error($lang->error_bannedemail); 
					} 
				} 
			} 
		} 
	} 
	if(!preg_match("/^(.+)@[a-zA-Z0-9-]+\.[a-zA-Z0-9.-]+$/si", $mybb->input['email'])) 
	{ 
			error($lang->error_invalidemail); 
	} 
	if(function_exists("emailChanged")) 
	{ 
			emailChanged($mybb->user['uid'], $mybb->input['email']); 
	} 

	if(validate_password_from_uid($mybb->user['uid'], $mybb->input['password']) == false)
	{
		$errors[] = $lang->error_invalidpassword;
	}
	else
	{
		// Set up user handler.
		require_once "inc/datahandlers/user.php";
		$userhandler = new UserDataHandler("update");

	if($mybb->user['usergroup'] != "5") 
	{ 
		$activationcode = random_str(); 
		$now = time(); 
		$db->delete_query(TABLE_PREFIX."awaitingactivation", "uid='".$mybb->user['uid']."'"); 
		$newactivation = array( 

		$user = array(

			"dateline" => time(), 
			"code" => $activationcode, 
            "type" => "e", 
            "oldgroup" => $mybb->user['usergroup'], 
            "misc" => $db->escape_string($mybb->input['email']) 

			"email" => $mybb->input['email'],
			"email2" => $mybb->input['email2']

		$db->insert_query(TABLE_PREFIX."awaitingactivation", $newactivation); 
	 
		$username = $mybb->user['username']; 
		$uid = $mybb->user['uid']; 
		$lang->emailsubject_changeemail = sprintf($lang->emailsubject_changeemail, $mybb->settings['bbname']); 
		$lang->email_changeemail = sprintf($lang->email_changeemail, $mybb->user['username'], $mybb->settings['bbname'], $mybb->user['email'], $mybb->input['email'], $mybb->settings['bburl'], $activationcode, $mybb->user['username'], $mybb->user['uid']); 
		my_mail($mybb->input['email'], $lang->emailsubject_changeemail, $lang->email_changeemail); 
		$plugins->run_hooks("usercp_do_email_verify"); 
		error($lang->redirect_changeemail_activation); 
	} 
	else 
	{ 
		$db->update_query(TABLE_PREFIX."users", array('email' => $db->escape_string($mybb->input['email'])), "uid='".$mybb->user['uid']."'"); 
		$plugins->run_hooks("usercp_do_email_changed"); 
		redirect("usercp.php", $lang->redirect_emailupdated); 
	}
}

				$username = $mybb->user['username'];
				$uid = $mybb->user['uid'];
				$lang->emailsubject_changeemail = sprintf($lang->emailsubject_changeemail, $mybb->settings['bbname']);
				$lang->email_changeemail = sprintf($lang->email_changeemail, $mybb->user['username'], $mybb->settings['bbname'], $mybb->user['email'], $mybb->input['email'], $mybb->settings['bburl'], $activationcode, $mybb->user['username'], $mybb->user['uid']);
				my_mail($mybb->input['email'], $lang->emailsubject_changeemail, $lang->email_changeemail);
				$plugins->run_hooks("usercp_do_email_verify");
				error($lang->redirect_changeemail_activation);
			}
			else
			{
				$userhandler->update_user();
				$plugins->run_hooks("usercp_do_email_changed");
				redirect("usercp.php", $lang->redirect_emailupdated);
			}
		}
	}
	if(count($errors) > 0)
	{
			$mybb->input['action'] = "email";
			$errors = inline_error($errors);
	}
}

{

{
	// Coming back to this page after one or more errors were experienced, show fields the user previously entered (with the exception of the password)
	if($errors)
	{
		$email = htmlspecialchars_uni($mybb->input['email']);
		$email2 = htmlspecialchars_uni($mybb->input['email2']);
	}
	else
	{
		$email = $email2 = '';
	}

	{
        error($lang->error_invalidpassword); 
	} 
	if($mybb->input['password'] == "") 
	{ 
		error($lang->error_invalidnewpassword); 
	} 
	if($mybb->input['password'] != $mybb->input['password2']) 
	{ 
		error($lang->error_passwordmismatch); 
	} 
	$plugins->run_hooks("usercp_do_password_process"); 
	$logindetails = update_password($mybb->user['uid'], md5($mybb->input['password']), $mybb->user['salt']); 
	
	my_setcookie("mybbuser", $mybb->user['uid']."_".$logindetails['loginkey']); 
	$plugins->run_hooks("usercp_do_password_end"); 
 	redirect("usercp.php", $lang->redirect_passwordupdated); 
}

	{
		$errors[] = $lang->error_invalidpassword;
	}
	else
	{
		// Set up user handler.
		require_once "inc/datahandlers/user.php";
		$userhandler = new UserDataHandler("update");

		$user = array(
			"uid" => $mybb->user['uid'],
			"password" => $mybb->input['password'],
			"password2" => $mybb->input['password2']
		);

		$userhandler->set_data($user);

		if(!$userhandler->validate_user())
		{
			$errors = $userhandler->get_friendly_errors();
		}
		else
		{
			$userhandler->update_user();
			my_setcookie("mybbuser", $mybb->user['uid']."_".$userhandler->data['loginkey']);
			$plugins->run_hooks("usercp_do_password_end");
			redirect("usercp.php", $lang->redirect_passwordupdated);
		}
	}
	if(count($errors) > 0)
	{
			$mybb->input['action'] = "password";
			$errors = inline_error($errors);
	}
}

{

{

	if($mybb->usergroup['canchangename'] != "yes")
	{

	if($mybb->usergroup['canchangename'] != "yes")
	{

	}

	}

	if(validate_password_from_uid($mybb->user['uid'], $mybb->input['password']) == false)
	{
		$errors[] = $lang->error_invalidpassword;
	}
	else
	{
		// Set up user handler.
		require_once "inc/datahandlers/user.php";
		$userhandler = new UserDataHandler("update");

		$user = array(
			"uid" => $mybb->user['uid'],
			"username" => $mybb->input['username']
		);

		$userhandler->set_data($user);

		if(!$userhandler->validate_user())
		{
			$errors = $userhandler->get_friendly_errors();
		}
		else
		{
			$userhandler->update_user();
			$plugins->run_hooks("usercp_do_changename_end");
			redirect("usercp.php", $lang->redirect_namechanged);

	if(!trim($mybb->input['username']) || eregi("<|>|&", $mybb->input['username'])) 
	{ 
		error($lang->error_bannedusername); 
	} 
	$query = $db->simple_select(TABLE_PREFIX."users", "username", "LOWER(username)='".strtolower($mybb->input['username'])."'"); 
	
	if($db->fetch_array($query)) 
	{ 
		error($lang->error_usernametaken); 
	} 
	$plugins->run_hooks("usercp_do_changename_process"); 
	$db->update_query(TABLE_PREFIX."users", array('username' => $db->escape_string($mybb->input['username'])), "uid='".$mybb->user['uid']."'"); 
	$db->update_query(TABLE_PREFIX."forums", array('lastposter' => $db->escape_string($mybb->input['username'])), "lastposter='".$mybb->user['username']."'"); 
	$db->update_query(TABLE_PREFIX."threads", array('lastposter' => $db->escape_string($mybb->input['username'])), "lastposter='".$mybb->user['username']."'"); 
	$plugins->run_hooks("usercp_do_changename_end"); 
	redirect("usercp.php", $lang->redirect_namechanged); 

		}
	}
	if(count($errors) > 0)
	{
		$errors = inline_error($errors);
		$mybb->input['action'] = "changename";
	}

			}
			else

			}
			else

			}

			}

			}

			}

			}

			}

			{

			{

{

{

	{

	{

		{

		{

	{

	{

	}
	else

	}
	else

	}

	}

 	if($mybb->input['action'] == "do_avatar" && $mybb->request_method == "post") 

if($mybb->input['action'] == "do_avatar" && $mybb->request_method == "post") 
{ 
	$plugins->run_hooks("usercp_do_avatar_start"); 
	require_once MYBB_ROOT."inc/functions_upload.php"; 
	if($mybb->input['remove']) // remove avatar 

		$plugins->run_hooks("usercp_do_avatar_start"); 
        require_once MYBB_ROOT."inc/functions_upload.php"; 
        if($mybb->input['remove']) // remove avatar 
        { 
	        $updated_avatar = array( 
	            "avatar" => "", 
	            "avatardimensions" => "", 
                "avatartype" => "" 
            ); 
            $db->update_query(TABLE_PREFIX."users", $updated_avatar, "uid='".$mybb->user['uid']."'"); 
            remove_avatars($mybb->user['uid']); 

		$updated_avatar = array( 
			"avatar" => "", 
			"avatardimensions" => "", 
			"avatartype" => "" 
		); 
		$db->update_query(TABLE_PREFIX."users", $updated_avatar, "uid='".$mybb->user['uid']."'"); 
		remove_avatars($mybb->user['uid']); 
	} 
	elseif($mybb->input['gallery']) // Gallery avatar 
	{
		if(empty($mybb->input['avatar']))
		{
			$avatar_error = $lang->error_noavatar;
		}

		if(empty($avatar_error))
		{
			if($mybb->input['gallery'] == "default") 
			{ 
				$avatarpath = $db->escape_string($mybb->settings['avatardir']."/".$mybb->input['avatar']); 
			} 
			else 
			{ 
				$avatarpath = $db->escape_string($mybb->settings['avatardir']."/".$mybb->input['gallery']."/".$mybb->input['avatar']); 
			} 
			if(file_exists($avatarpath)) 
			{
				$updated_avatar = array( 
					"avatar" => $avatarpath, 
					"avatardimensions" => "", 
					"avatartype" => "gallery" 
				);
				$db->update_query(TABLE_PREFIX."users", $updated_avatar, "uid='".$mybb->user['uid']."'"); 
			} 
			remove_avatars($mybb->user['uid']);
		}
	} 
	elseif($_FILES['avatarupload']['name']) // upload avatar 
	{ 
		if($mybb->usergroup['canuploadavatars'] == "no") 
		{ 
			error_no_permission(); 

		elseif($mybb->input['gallery']) // Gallery avatar 
        { 
	        if($mybb->input['gallery'] == "default") 
            { 
            	$avatarpath = $db->escape_string($mybb->settings['avatardir']."/".$mybb->input['avatar']); 

		$avatar = upload_avatar(); 
		if($avatar['error']) 
		{ 
			$avatar_error = $avatar['error'];
		}
		else
		{
			if($avatar['width'] > 0 && $avatar['height'] > 0) 
			{
				$avatar_dimensions = $avatar['width']."|".$avatar['height']; 
			} 
			$updated_avatar = array( 
				"avatar" => $avatar['avatar'], 
				"avatardimensions" => $avatar_dimensions, 
				"avatartype" => "upload" 
			); 
			$db->update_query(TABLE_PREFIX."users", $updated_avatar, "uid='".$mybb->user['uid']."'");
		}
	} 
	else // remote avatar 
	{ 
		$mybb->input['avatarurl'] = preg_replace("#script:#i", "", $mybb->input['avatarurl']); 
		$mybb->input['avatarurl'] = htmlspecialchars($mybb->input['avatarurl']); 
		$ext = get_extension($mybb->input['avatarurl']); 

		// Copy the avatar to the local server (work around remote URL access disabled for getimagesize)
		$file = fetch_remote_file($mybb->input['avatarurl']);
		if(!$file)
		{
			$avatar_error = $lang->error_invalidavatarurl;
		}
		else
		{
			$tmp_name = $mybb->settings['avataruploadpath']."/remote_".md5(uniqid(rand(), true));
			$fp = @fopen($tmp_name, "wb");
			if(!$fp)
			{
				$avatar_error = $lang->error_invalidavatarurl;
			}
			else
			{
				fwrite($fp, $file);
				fclose($fp);
				list($width, $height, $type) = @getimagesize($tmp_name);
				@unlink($tmp_name);
				if(!$type)
				{
					$avatar_error = $lang->error_invalidavatarurl;
				}
			}
		}

		if(empty($avatar_error))
		{
			if($width && $height && $mybb->settings['maxavatardims'] != "") 
			{ 
				list($maxwidth, $maxheight) = explode("x", $mybb->settings['maxavatardims']); 
				if(($maxwidth && $width > $maxwidth) || ($maxheight && $height > $maxheight)) 
				{ 
					$lang->error_avatartoobig = sprintf($lang->error_avatartoobig, $maxwidth, $maxheight); 
					$avatar_error = $lang->error_avatartoobig;
				} 
			}
		}

		if(empty($avatar_error))
		{
			if($width > 0 && $height > 0) 
			{ 
				$avatar_dimensions = intval($width)."|".intval($height); 

            else 
		    { 
	            $avatarpath = $db->escape_string($mybb->settings['avatardir']."/".$mybb->input['gallery']."/".$mybb->input['avatar']); 
            } 
            if(file_exists($avatarpath)) 
            { 
	            $updated_avatar = array( 
	                "avatar" => $avatarpath, 
                    "avatardimensions" => "", 
                    "avatartype" => "gallery" 
               ); 
               $db->update_query(TABLE_PREFIX."users", $updated_avatar, "uid='".$mybb->user['uid']."'"); 
            } 
            remove_avatars($mybb->user['uid']); 
		} 
        elseif($_FILES['avatarupload']['name']) // upload avatar 
        { 
	        if($mybb->usergroup['canuploadavatars'] == "no") 
            { 
	            error_no_permission(); 
            } 
            $avatar = upload_avatar(); 
            if($avatar['error']) 
            { 
	            error($avatar['error']); 
            } 
            if($avatar['width'] > 0 && $avatar['height'] > 0) 
            { 
	            $avatar_dimensions = $avatar['width']."|".$avatar['height']; 
            } 
 	        	$updated_avatar = array( 
                	"avatar" => $avatar['avatar'], 
                    "avatardimensions" => $avatar_dimensions, 
					"avatartype" => "upload" 
                ); 
                $db->update_query(TABLE_PREFIX."users", $updated_avatar, "uid='".$mybb->user['uid']."'"); 
		} 
        else // remote avatar 
        { 
	    	$mybb->input['avatarurl'] = preg_replace("#script:#i", "", $mybb->input['avatarurl']); 
            $mybb->input['avatarurl'] = htmlspecialchars($mybb->input['avatarurl']); 
            $ext = get_extension($mybb->input['avatarurl']); 
            list($width, $height, $type) = @getimagesize($mybb->input['avatarurl']); 

			$updated_avatar = array( 
				"avatar" => $db->escape_string($mybb->input['avatarurl']), 
				"avatardimensions" => $avatar_dimensions, 
				"avatartype" => "remote" 
			); 
			$db->update_query(TABLE_PREFIX."users", $updated_avatar, "uid='".$mybb->user['uid']."'");
			remove_avatars($mybb->user['uid']);
		}
	}

            if(!$type) 
            { 
	        	error($lang->error_invalidavatarurl); 
            } 

            if($width && $height && $mybb->settings['maxavatardims'] != "") 
            { 
            	list($maxwidth, $maxheight) = explode("x", $mybb->settings['maxavatardims']); 
                if(($maxwidth && $width > $maxwidth) || ($maxheight && $height > $maxheight)) 
                { 
                	$lang->error_avatartoobig = sprintf($lang->error_avatartoobig, $maxwidth, $maxheight); 
                    error($lang->error_avatartoobig); 
                } 
            } 
            if($width > 0 && $height > 0) 
            { 
	            $avatar_dimensions = intval($width)."|".intval($height); 
            } 
            $updated_avatar = array( 
            	"avatar" => $db->escape_string($mybb->input['avatarurl']), 
                "avatardimensions" => $avatar_dimensions, 
                "avatartype" => "remote" 
            ); 
            $db->update_query(TABLE_PREFIX."users", $updated_avatar, "uid='".$mybb->user['uid']."'"); 
            remove_avatars($mybb->user['uid']); 
		} 
	$plugins->run_hooks("usercp_do_avatar_end"); 
	redirect("usercp.php", $lang->redirect_avatarupdated); 

	if(empty($avatar_error))
	{
		$plugins->run_hooks("usercp_do_avatar_end");
		redirect("usercp.php", $lang->redirect_avatarupdated);
	}
	else
	{
		$mybb->input['action'] = "avatar";
		$avatar_error = inline_error($avatar_error);
	}

		$percent = round(($totalusage/($mybb->usergroup['attachquota']*1000))*100)."%";
		$attachquota = get_friendly_size($mybb->usergroup['attachquota']*1000);

		$percent = round(($totalusage/($mybb->usergroup['attachquota']*1024))*100)."%";
		$attachquota = get_friendly_size($mybb->usergroup['attachquota']*1024);

	$query = $db->simple_select(TABLE_PREFIX."posts", "COUNT(pid) AS posts", "visible > 0");
	$posts = $db->fetch_field($query, "posts");

	$stats = $cache->read("stats");
	$posts = $stats['numposts'];

	if($mybb->usergroup['usereputationsystem'] == 'yes')

	if($mybb->usergroup['usereputationsystem'] == 'yes' && $mybb->settings['enablereputation'] == 'yes')