Vergleich admin/modules/user/users.php - 1.6.1 - 1.6.7

Keine Änderungen Hinzugefügt Modifiziert Entfernt
Zeile 6	Zeile 6
* Website: http://mybb.com * License: http://mybb.com/about/license *	* Website: http://mybb.com * License: http://mybb.com/about/license *
* $Id: users.php 5161 2010-08-01 20:45:07Z RyanGordon $	* $Id: users.php 5765 2012-03-27 09:52:45Z Tomm $
*/ // Disallow direct access to this file for security reasons	*/ // Disallow direct access to this file for security reasons
Zeile 159	Zeile 159
// We've selected a new avatar for this user! if($mybb->input['avatar']) {	// We've selected a new avatar for this user! if($mybb->input['avatar']) {
	if(!verify_post_check($mybb->input['my_post_key'])) { echo $lang->invalid_post_verify_key2; exit; }
$mybb->input['avatar'] = str_replace(array("./", ".."), "", $mybb->input['avatar']); if(file_exists("../".$mybb->settings['avatardir']."/".$mybb->input['avatar']))	$mybb->input['avatar'] = str_replace(array("./", ".."), "", $mybb->input['avatar']); if(file_exists("../".$mybb->settings['avatardir']."/".$mybb->input['avatar']))
Zeile 181	Zeile 187
// Now a tad of javascript to submit the parent window form echo "<script type=\"text/javascript\">window.parent.submitUserForm();</script>"; exit;	// Now a tad of javascript to submit the parent window form echo "<script type=\"text/javascript\">window.parent.submitUserForm();</script>"; exit;
}	}
echo "<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Transitional//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\">\n"; echo "<html xmlns=\"http://www.w3.org/1999/xhtml\">\n"; echo "<head profile=\"http://gmpg.org/xfn/1\">\n";	echo "<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Transitional//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\">\n"; echo "<html xmlns=\"http://www.w3.org/1999/xhtml\">\n"; echo "<head profile=\"http://gmpg.org/xfn/1\">\n";
Zeile 204	Zeile 210
if(!is_dir($mybb->settings['avatardir']) && is_dir(MYBB_ROOT."/images/avatars/")) { $mybb->settings['avatardir'] = "../images/avatars/";	if(!is_dir($mybb->settings['avatardir']) && is_dir(MYBB_ROOT."/images/avatars/")) { $mybb->settings['avatardir'] = "../images/avatars/";
}	}
// Within a gallery if(!empty($gallery)) {	// Within a gallery if(!empty($gallery)) {
Zeile 223	Zeile 229
$gallery_name = ucwords($gallery_name); if($gallery_path[$key+1])	$gallery_name = ucwords($gallery_name); if($gallery_path[$key+1])
{	{
$breadcrumb .= " » <a href=\"index.php?module=user-users&action=avatar_gallery&uid={$user['uid']}&gallery={$breadcrumb_url}\">{$gallery_name}</a>"; } else { $breadcrumb .= " » {$gallery_name}";	$breadcrumb .= " » <a href=\"index.php?module=user-users&action=avatar_gallery&uid={$user['uid']}&gallery={$breadcrumb_url}\">{$gallery_name}</a>"; } else { $breadcrumb .= " » {$gallery_name}";
}	}
} } else	} } else
Zeile 238	Zeile 244
} } else	} } else
{	{
$path = ""; $real_path = $mybb->settings['avatardir']; }	$path = ""; $real_path = $mybb->settings['avatardir']; }
Zeile 252	Zeile 258
foreach($files as $file) { if($file == "." \|\| $file == ".." \|\| $file == ".svn")	foreach($files as $file) { if($file == "." \|\| $file == ".." \|\| $file == ".svn")
{	{
continue; }	continue; }
Zeile 294	Zeile 300
"width" => $dimensions[0], "height" => $dimensions[1] );	"width" => $dimensions[0], "height" => $dimensions[1] );
} } } require_once MYBB_ROOT."inc/functions_image.php";	} } } require_once MYBB_ROOT."inc/functions_image.php";
// Now we're done, we can simply show our gallery page echo "<div id=\"gallery_breadcrumb\">{$breadcrumb}</div>\n"; echo "<div id=\"gallery\">\n";	// Now we're done, we can simply show our gallery page echo "<div id=\"gallery_breadcrumb\">{$breadcrumb}</div>\n"; echo "<div id=\"gallery\">\n";
Zeile 322	Zeile 328
$top = ceil((80-$scaled_dimensions['height'])/2); $left = ceil((80-$scaled_dimensions['width'])/2); echo "<li><a href=\"index.php?module=user-users&action=avatar_gallery&uid={$user['uid']}&gallery={$gallery['path']}\"><span class=\"image\"><img src=\"{$gallery['thumb']}\" alt=\"\" style=\"margin-top: {$top}px;\" height=\"{$scaled_dimensions['height']}\" width=\"{$scaled_dimensions['width']}\"></span><span class=\"title\">{$gallery['friendly_name']}</span></a></li>\n";	$top = ceil((80-$scaled_dimensions['height'])/2); $left = ceil((80-$scaled_dimensions['width'])/2); echo "<li><a href=\"index.php?module=user-users&action=avatar_gallery&uid={$user['uid']}&gallery={$gallery['path']}\"><span class=\"image\"><img src=\"{$gallery['thumb']}\" alt=\"\" style=\"margin-top: {$top}px;\" height=\"{$scaled_dimensions['height']}\" width=\"{$scaled_dimensions['width']}\"></span><span class=\"title\">{$gallery['friendly_name']}</span></a></li>\n";
} }	} }
echo "</ul>\n"; // Build the list of any actual avatars we have echo "<ul id=\"avatars\">\n";	echo "</ul>\n"; // Build the list of any actual avatars we have echo "<ul id=\"avatars\">\n";
Zeile 334	Zeile 340
$scaled_dimensions = scale_image($avatar['width'], $avatar['height'], 80, 80); $top = ceil((80-$scaled_dimensions['height'])/2); $left = ceil((80-$scaled_dimensions['width'])/2);	$scaled_dimensions = scale_image($avatar['width'], $avatar['height'], 80, 80); $top = ceil((80-$scaled_dimensions['height'])/2); $left = ceil((80-$scaled_dimensions['width'])/2);
echo "<li><a href=\"index.php?module=user-users&action=avatar_gallery&uid={$user['uid']}&avatar={$avatar['path']}\"><span class=\"image\"><img src=\"{$mybb->settings['avatardir']}/{$avatar['path']}\" alt=\"\" style=\"margin-top: {$top}px;\" height=\"{$scaled_dimensions['height']}\" width=\"{$scaled_dimensions['width']}\" /></span><span class=\"title\">{$avatar['friendly_name']}</span></a></li>\n";	echo "<li><a href=\"index.php?module=user-users&action=avatar_gallery&uid={$user['uid']}&avatar={$avatar['path']}&my_post_key={$mybb->post_code}\"><span class=\"image\"><img src=\"{$mybb->settings['avatardir']}/{$avatar['path']}\" alt=\"\" style=\"margin-top: {$top}px;\" height=\"{$scaled_dimensions['height']}\" width=\"{$scaled_dimensions['width']}\" /></span><span class=\"title\">{$avatar['friendly_name']}</span></a></li>\n";
}	}
}	}
echo "</ul>\n"; echo "</div>"; echo "</body>";	echo "</ul>\n"; echo "</div>"; echo "</body>";
Zeile 347	Zeile 353
if($mybb->input['action'] == "activate_user") { $plugins->run_hooks("admin_user_users_coppa_activate");	if($mybb->input['action'] == "activate_user") { $plugins->run_hooks("admin_user_users_coppa_activate");
	if(!verify_post_check($mybb->input['my_post_key'])) { flash_message($lang->invalid_post_verify_key2, 'error'); admin_redirect("index.php?module=user-users"); }
$query = $db->simple_select("users", "*", "uid='".intval($mybb->input['uid'])."'"); $user = $db->fetch_array($query);	$query = $db->simple_select("users", "*", "uid='".intval($mybb->input['uid'])."'"); $user = $db->fetch_array($query);
Zeile 611	Zeile 623
"aim" => $mybb->input['aim'], "yahoo" => $mybb->input['yahoo'], "msn" => $mybb->input['msn'],	"aim" => $mybb->input['aim'], "yahoo" => $mybb->input['yahoo'], "msn" => $mybb->input['msn'],
	"birthday" => array( "day" => $mybb->input['bday1'], "month" => $mybb->input['bday2'], "year" => $mybb->input['bday3'] ),
"style" => $mybb->input['style'], "signature" => $mybb->input['signature'], "dateformat" => intval($mybb->input['dateformat']),	"style" => $mybb->input['style'], "signature" => $mybb->input['signature'], "dateformat" => intval($mybb->input['dateformat']),
Zeile 894	Zeile 911
// We need to fetch this users profile field values $query = $db->simple_select("userfields", "*", "ufid='{$user['uid']}'"); $mybb->input['profile_fields'] = $db->fetch_array($query);	// We need to fetch this users profile field values $query = $db->simple_select("userfields", "*", "ufid='{$user['uid']}'"); $mybb->input['profile_fields'] = $db->fetch_array($query);
	} if($mybb->input['bday1'] \|\| $mybb->input['bday2'] \|\| $mybb->input['bday3']) { $mybb->input['bday'][0] = $mybb->input['bday1']; $mybb->input['bday'][1] = $mybb->input['bday2']; $mybb->input['bday'][2] = intval($mybb->input['bday3']); } else { $mybb->input['bday'] = array(); if($user['birthday']) { $mybb->input['bday'] = explode('-', $user['birthday']); }
} // Fetch custom profile fields	} // Fetch custom profile fields
Zeile 973	Zeile 1006
if (!stristr($user['avatar'], 'http://')) { $user['avatar'] = "../{$user['avatar']}\n";	if (!stristr($user['avatar'], 'http://')) { $user['avatar'] = "../{$user['avatar']}\n";
} }	} }
else { $user['avatar'] = "styles/{$page->style}/images/default_avatar.gif";	else { $user['avatar'] = "styles/{$page->style}/images/default_avatar.gif";
Zeile 982	Zeile 1015
"width" => 120, "height" => 120 );	"width" => 120, "height" => 120 );
}	}
$avatar_top = ceil((126-$scaled_dimensions['height'])/2); if($user['lastactive']) { $last_active = my_date($mybb->settings['dateformat'], $user['lastactive']).", ".my_date($mybb->settings['timeformat'], $user['lastactive']);	$avatar_top = ceil((126-$scaled_dimensions['height'])/2); if($user['lastactive']) { $last_active = my_date($mybb->settings['dateformat'], $user['lastactive']).", ".my_date($mybb->settings['timeformat'], $user['lastactive']);
}	}
else { $last_active = $lang->never; } $reg_date = my_date($mybb->settings['dateformat'], $user['regdate']).", ".my_date($mybb->settings['timeformat'], $user['regdate']); if($user['dst'] == 1)	else { $last_active = $lang->never; } $reg_date = my_date($mybb->settings['dateformat'], $user['regdate']).", ".my_date($mybb->settings['timeformat'], $user['regdate']); if($user['dst'] == 1)
{	{
$timezone = $user['timezone']+1; } else	$timezone = $user['timezone']+1; } else
Zeile 1033	Zeile 1066
else { $reputation = "-";	else { $reputation = "-";
}	}
if($mybb->settings['enablewarningsystem'] != 0 && $user_permissions['canreceivewarnings'] != 0)	if($mybb->settings['enablewarningsystem'] != 0 && $user_permissions['canreceivewarnings'] != 0)
{	{
$warning_level = round($user['warningpoints']/$mybb->settings['maxwarningpoints']*100); if($warning_level > 100) {	$warning_level = round($user['warningpoints']/$mybb->settings['maxwarningpoints']*100); if($warning_level > 100) {
Zeile 1045	Zeile 1078
$warning_level = get_colored_warning_level($warning_level); }	$warning_level = get_colored_warning_level($warning_level); }
if($user['birthday']) { $age = get_age($user['birthday']); } else	$age = $lang->na; if($user['birthday'])
{	{
$age = '';	$age = get_age($user['birthday']);
} $table->construct_cell("<div style=\"width: 126px; height: 126px;\" class=\"user_avatar\"><img src=\"".htmlspecialchars_uni($user['avatar'])."\" style=\"margin-top: {$avatar_top}px\" width=\"{$scaled_dimensions['width']}\" height=\"{$scaled_dimensions['height']}\" alt=\"\" /></div>", array('rowspan' => 6, 'width' => 1));	} $table->construct_cell("<div style=\"width: 126px; height: 126px;\" class=\"user_avatar\"><img src=\"".htmlspecialchars_uni($user['avatar'])."\" style=\"margin-top: {$avatar_top}px\" width=\"{$scaled_dimensions['width']}\" height=\"{$scaled_dimensions['height']}\" alt=\"\" /></div>", array('rowspan' => 6, 'width' => 1));
Zeile 1120	Zeile 1148
$form_container->output_row($lang->aim_handle, "", $form->generate_text_box('aim', $mybb->input['aim'], array('id' => 'aim')), 'aim'); $form_container->output_row($lang->yahoo_messanger_handle, "", $form->generate_text_box('yahoo', $mybb->input['yahoo'], array('id' => 'yahoo')), 'yahoo'); $form_container->output_row($lang->msn_messanger_handle, "", $form->generate_text_box('msn', $mybb->input['msn'], array('id' => 'msn')), 'msn');	$form_container->output_row($lang->aim_handle, "", $form->generate_text_box('aim', $mybb->input['aim'], array('id' => 'aim')), 'aim'); $form_container->output_row($lang->yahoo_messanger_handle, "", $form->generate_text_box('yahoo', $mybb->input['yahoo'], array('id' => 'yahoo')), 'yahoo'); $form_container->output_row($lang->msn_messanger_handle, "", $form->generate_text_box('msn', $mybb->input['msn'], array('id' => 'msn')), 'msn');

// Birthday	// Birthday
	$birthday_days = array(0 => ''); for($i = 1; $i <= 31; $i++) { $birthday_days[$i] = $i; } $birthday_months = array( 0 => '', 1 => $lang->january, 2 => $lang->february, 3 => $lang->march, 4 => $lang->april, 5 => $lang->may, 6 => $lang->june, 7 => $lang->july, 8 => $lang->august, 9 => $lang->september, 10 => $lang->october, 11 => $lang->november, 12 => $lang->december ); $birthday_row = $form->generate_select_box('bday1', $birthday_days, $mybb->input['bday'][0], array('id' => 'bday_day')); $birthday_row .= ' '.$form->generate_select_box('bday2', $birthday_months, $mybb->input['bday'][1], array('id' => 'bday_month')); $birthday_row .= ' '.$form->generate_text_box('bday3', $mybb->input['bday'][2], array('id' => 'bday_year', 'style' => 'width: 3em;')); $form_container->output_row($lang->birthday, "", $birthday_row, 'birthday');
// Output custom profile fields - optional output_custom_profile_fields($profile_fields['optional'], $mybb->input['profile_fields'], $form_container, $form);	// Output custom profile fields - optional output_custom_profile_fields($profile_fields['optional'], $mybb->input['profile_fields'], $form_container, $form);
Zeile 1447	Zeile 1503
); echo "<div id=\"tab_modoptions\">\n";	); echo "<div id=\"tab_modoptions\">\n";
$form_container = new FormContainer($lang->mod_options);	$form_container = new FormContainer($lang->mod_options.": {$user['username']}");
$form_container->output_row($lang->user_notes, '', $form->generate_text_area('usernotes', $mybb->input['usernotes'], array('id' => 'usernotes')), 'usernotes'); // Mod posts	$form_container->output_row($lang->user_notes, '', $form->generate_text_area('usernotes', $mybb->input['usernotes'], array('id' => 'usernotes')), 'usernotes'); // Mod posts
Zeile 1611	Zeile 1667
// Update forum stats update_stats(array('numusers' => '-1'));	// Update forum stats update_stats(array('numusers' => '-1'));
	// Update forums & threads if user is the lastposter $db->update_query("forums", array("lastposteruid" => 0), "lastposteruid = '{$user['uid']}'"); $db->update_query("threads", array("lastposteruid" => 0), "lastposteruid = '{$user['uid']}'");
// Did this user have an uploaded avatar? if($user['avatartype'] == "upload")	// Did this user have an uploaded avatar? if($user['avatartype'] == "upload")
{	{
// Removes the ./ at the beginning the timestamp on the end... @unlink("../".substr($user['avatar'], 2, -20));	// Removes the ./ at the beginning the timestamp on the end... @unlink("../".substr($user['avatar'], 2, -20));
}	}
// Was this user a moderator? if(is_moderator($user['uid']))	// Was this user a moderator? if(is_moderator($user['uid']))
Zeile 1627	Zeile 1687
} $plugins->run_hooks("admin_user_users_delete_commit");	} $plugins->run_hooks("admin_user_users_delete_commit");

// Log admin action log_admin_action($user['uid'], $user['username']);	// Log admin action log_admin_action($user['uid'], $user['username']);

flash_message($lang->success_user_deleted, 'success'); admin_redirect("index.php?module=user-users");	flash_message($lang->success_user_deleted, 'success'); admin_redirect("index.php?module=user-users");
}	}
else { $page->output_confirm_action("index.php?module=user-users&action=delete&uid={$user['uid']}", $lang->user_deletion_confirmation);	else { $page->output_confirm_action("index.php?module=user-users&action=delete&uid={$user['uid']}", $lang->user_deletion_confirmation);
} }	} }
if($mybb->input['action'] == "referrers") { $plugins->run_hooks("admin_user_users_referrers");	if($mybb->input['action'] == "referrers") { $plugins->run_hooks("admin_user_users_referrers");
Zeile 1694	Zeile 1754
$query = $db->simple_select("users", "uid, regip, username, lastip", "uid='{$mybb->input['uid']}'", array('limit' => 1)); $user = $db->fetch_array($query);	$query = $db->simple_select("users", "uid, regip, username, lastip", "uid='{$mybb->input['uid']}'", array('limit' => 1)); $user = $db->fetch_array($query);

// Log admin action log_admin_action($user['uid'], $user['username']);	// Log admin action log_admin_action($user['uid'], $user['username']);

$table = new Table; $table->construct_header($lang->ip_address);	$table = new Table; $table->construct_header($lang->ip_address);
Zeile 1719	Zeile 1779
$controls = $popup->fetch(); } $table->construct_cell("<strong>{$lang->last_known_ip}:</strong> {$user['lastip']}");	$controls = $popup->fetch(); } $table->construct_cell("<strong>{$lang->last_known_ip}:</strong> {$user['lastip']}");
$table->construct_cell($controls, array('class' => "align_center")); $table->construct_row();	$table->construct_cell($controls, array('class' => "align_center")); $table->construct_row();
if(empty($user['regip'])) { $user['regip'] = $lang->unknown;	if(empty($user['regip'])) { $user['regip'] = $lang->unknown;
Zeile 1820	Zeile 1880
$db->update_query("pollvotes", $uid_update, "uid='{$source_user['uid']}'"); $db->update_query("posts", $uid_update, "uid='{$source_user['uid']}'"); $db->update_query("privatemessages", $uid_update, "uid='{$source_user['uid']}'");	$db->update_query("pollvotes", $uid_update, "uid='{$source_user['uid']}'"); $db->update_query("posts", $uid_update, "uid='{$source_user['uid']}'"); $db->update_query("privatemessages", $uid_update, "uid='{$source_user['uid']}'");
	$db->update_query("reportedposts", $uid_update, "uid='{$source_user['uid']}'");
$db->update_query("threadratings", $uid_update, "uid='{$source_user['uid']}'"); $db->update_query("threads", $uid_update, "uid='{$source_user['uid']}'"); $db->delete_query("sessions", "uid='{$source_user['uid']}'");	$db->update_query("threadratings", $uid_update, "uid='{$source_user['uid']}'"); $db->update_query("threads", $uid_update, "uid='{$source_user['uid']}'"); $db->delete_query("sessions", "uid='{$source_user['uid']}'");
Zeile 1832	Zeile 1893
// Update the moderator cache... $cache->update_moderators(); }	// Update the moderator cache... $cache->update_moderators(); }
	// Forums & Threads $db->update_query("forums", array("lastposteruid" => $destination_user['uid']), "lastposteruid = '{$source_user['uid']}'"); $db->update_query("threads", array("lastposteruid" => $destination_user['uid']), "lastposteruid = '{$source_user['uid']}'"); // Banning $db->update_query("banned", array('admin' => $destination_user['uid']), "admin = '{$source_user['uid']}'");
// Merging Reputation // First, let's change all the details over to our new user...	// Merging Reputation // First, let's change all the details over to our new user...
Zeile 2044	Zeile 2112
$admin_view['sortby'] = $mybb->input['sortby']; }	$admin_view['sortby'] = $mybb->input['sortby']; }
if($mybb->input['perpage'])	if(intval($mybb->input['perpage']))
{ $admin_view['perpage'] = $mybb->input['perpage']; }	{ $admin_view['perpage'] = $mybb->input['perpage']; }
Zeile 2388	Zeile 2456
echo $form->generate_hidden_field('inline_action', 'multiban'); echo $form->generate_hidden_field('processed', '1');	echo $form->generate_hidden_field('inline_action', 'multiban'); echo $form->generate_hidden_field('processed', '1');
$form_container = new FormContainer('<div class="float_right"><a href="index.php?module=user-users&action=inline_edit&inline_action=multilift&my_post_key={$mybb->post_code}">'.$lang->lift_bans.'</a></div>'.$lang->mass_ban);	$form_container = new FormContainer('<div class="float_right"><a href="index.php?module=user-users&action=inline_edit&inline_action=multilift&my_post_key='.$mybb->post_code.'">'.$lang->lift_bans.'</a></div>'.$lang->mass_ban);
$form_container->output_row($lang->ban_reason, "", $form->generate_text_box('reason', $mybb->input['reason'], array('id' => 'reason')), 'reason'); $ban_times = fetch_ban_times(); foreach($ban_times as $time => $period)	$form_container->output_row($lang->ban_reason, "", $form->generate_text_box('reason', $mybb->input['reason'], array('id' => 'reason')), 'reason'); $ban_times = fetch_ban_times(); foreach($ban_times as $time => $period)
Zeile 2700	Zeile 2768
unset($mybb->input['additionalgroups'][$key]); } }	unset($mybb->input['additionalgroups'][$key]); } }
$additionalgroups = implode(",", $mybb->input['additionalgroups']);	$additionalgroups = implode(",", array_map('intval', $mybb->input['additionalgroups']));
} else {	} else {
Zeile 2709	Zeile 2777
// Create an update array $update_array = array(	// Create an update array $update_array = array(
"usergroup" => $mybb->input['usergroup'],	"usergroup" => intval($mybb->input['usergroup']),
"additionalgroups" => $additionalgroups,	"additionalgroups" => $additionalgroups,
"displaygroup" => $mybb->input['displaygroup']	"displaygroup" => intval($mybb->input['displaygroup'])
); // Do the usergroup update for all those selected	); // Do the usergroup update for all those selected
Zeile 2845	Zeile 2913
while($view = $db->fetch_array($query)) { $popup->add_item(htmlspecialchars_uni($view['title']), "index.php?module=user-users&vid={$view['vid']}");	while($view = $db->fetch_array($query)) { $popup->add_item(htmlspecialchars_uni($view['title']), "index.php?module=user-users&vid={$view['vid']}");
}	}
$popup->add_item("<em>{$lang->manage_views}</em>", "index.php?module=user-users&action=views"); $admin_view['popup'] = $popup->fetch();	$popup->add_item("<em>{$lang->manage_views}</em>", "index.php?module=user-users&action=views"); $admin_view['popup'] = $popup->fetch();
Zeile 2951	Zeile 3019
if(!isset($admin_session['data']['last_users_view']) \|\| $admin_session['data']['last_users_view'] != str_replace("&", "&", $view['url'])) { update_admin_session('last_users_url', str_replace("&", "&", $view['url']));	if(!isset($admin_session['data']['last_users_view']) \|\| $admin_session['data']['last_users_view'] != str_replace("&", "&", $view['url'])) { update_admin_session('last_users_url', str_replace("&", "&", $view['url']));
	} if(isset($view['conditions']['referrer'])){ $view['url'] .= "&action=referrers&uid=".htmlspecialchars($view['conditions']['referrer']);
} // Do we not have any views? if(empty($view))	} // Do we not have any views? if(empty($view))
{ return false; }	{ return false; }
$table = new Table;	$table = new Table;
Zeile 2967	Zeile 3039
foreach($view['fields'] as $field) { if(!$user_view_fields[$field])	foreach($view['fields'] as $field) { if(!$user_view_fields[$field])
{	{
continue; } $view_field = $user_view_fields[$field];	continue; } $view_field = $user_view_fields[$field];
Zeile 2981	Zeile 3053
$field_options['class'] = "align_".$view_field['align']; } $table->construct_header($view_field['title'], $field_options);	$field_options['class'] = "align_".$view_field['align']; } $table->construct_header($view_field['title'], $field_options);
}	}
$table->construct_header("<input type=\"checkbox\" name=\"allbox\" onclick=\"inlineModeration.checkAll(this);\" />"); // Create a header for the "select" boxes } $search_sql = '1=1';	$table->construct_header("<input type=\"checkbox\" name=\"allbox\" onclick=\"inlineModeration.checkAll(this);\" />"); // Create a header for the "select" boxes } $search_sql = '1=1';

// Build the search SQL for users // List of valid LIKE search fields $user_like_fields = array("username", "email", "website", "icq", "aim", "yahoo", "msn", "signature", "usertitle"); foreach($user_like_fields as $search_field) {	// Build the search SQL for users // List of valid LIKE search fields $user_like_fields = array("username", "email", "website", "icq", "aim", "yahoo", "msn", "signature", "usertitle"); foreach($user_like_fields as $search_field) {
if($view['conditions'][$search_field]) {	if($view['conditions'][$search_field] && !$view['conditions'][$search_field.'_blank']) {
$search_sql .= " AND u.{$search_field} LIKE '%".$db->escape_string_like($view['conditions'][$search_field])."%'";	$search_sql .= " AND u.{$search_field} LIKE '%".$db->escape_string_like($view['conditions'][$search_field])."%'";
	} else if(isset($view['conditions'][$search_field.'_blank'])) { $search_sql .= " AND u.{$search_field} != ''";
} }	} }
Zeile 3028	Zeile 3104
$direction = "="; } $search_sql .= " AND u.{$search_field}{$direction}'".$db->escape_string($view['conditions'][$search_field])."'";	$direction = "="; } $search_sql .= " AND u.{$search_field}{$direction}'".$db->escape_string($view['conditions'][$search_field])."'";
	} } // Registration searching $reg_fields = array("regdate"); foreach($reg_fields as $search_field) { if(intval($view['conditions'][$search_field])) { $threshold = TIME_NOW - (intval($view['conditions'][$search_field]) * 24 * 60 * 60); $search_sql .= " AND u.{$search_field} >= '{$threshold}'";
} }	} }
Zeile 3067	Zeile 3155
{ $view['conditions']['postip'] = str_replace("*", "%", $view['conditions']['postip']); $ip_sql = "ipaddress LIKE '".$db->escape_string($view['conditions']['postip'])."'";	{ $view['conditions']['postip'] = str_replace("*", "%", $view['conditions']['postip']); $ip_sql = "ipaddress LIKE '".$db->escape_string($view['conditions']['postip'])."'";
} else {	} else {
$ip_range = fetch_longipv4_range($view['conditions']['postip']); if(!is_array($ip_range)) { $ip_sql = "longipaddress='{$ip_range}'"; } else	$ip_range = fetch_longipv4_range($view['conditions']['postip']); if(!is_array($ip_range)) { $ip_sql = "longipaddress='{$ip_range}'"; } else
{	{
$ip_sql = "longipaddress > '{$ip_range[0]}' AND longipaddress < '{$ip_range[1]}'"; } } $ip_uids = array(0); $query = $db->simple_select("posts", "uid", $ip_sql); while($uid = $db->fetch_field($query, "uid"))	$ip_sql = "longipaddress > '{$ip_range[0]}' AND longipaddress < '{$ip_range[1]}'"; } } $ip_uids = array(0); $query = $db->simple_select("posts", "uid", $ip_sql); while($uid = $db->fetch_field($query, "uid"))
{	{
$ip_uids[] = $uid; } $search_sql .= " AND u.uid IN(".implode(',', $ip_uids).")";	$ip_uids[] = $uid; } $search_sql .= " AND u.uid IN(".implode(',', $ip_uids).")";
Zeile 3097	Zeile 3185
foreach($view['custom_profile_fields'] as $column => $input) { if(is_array($input))	foreach($view['custom_profile_fields'] as $column => $input) { if(is_array($input))
{	{
foreach($input as $value => $text) {	foreach($input as $value => $text) {
if($value == "N/A") {	if($value == $column) { $value = $text; } if($value == $lang->na) {
continue; }	continue; }
$userfield_sql .= ' AND '.$db->escape_string($column)."='".$db->escape_string($value)."'"; } }	if(strpos($column, '_blank') !== false) { $column = str_replace('_blank', '', $column); $userfield_sql .= ' AND '.$db->escape_string($column)." != ''"; } else { $userfield_sql .= ' AND '.$db->escape_string($column)."='".$db->escape_string($value)."'"; } } }
else if(!empty($input)) {	else if(!empty($input)) {
if($input == "N/A") {	if($input == $lang->na) {
continue; }	continue; }
$userfield_sql .= ' AND '.$db->escape_string($column)." LIKE '%".$db->escape_string($input)."%'";	if(strpos($column, '_blank') !== false) { $column = str_replace('_blank', '', $column); $userfield_sql .= ' AND '.$db->escape_string($column)." != ''"; } else { $userfield_sql .= ' AND '.$db->escape_string($column)." LIKE '%".$db->escape_string($input)."%'"; }
} }	} }

if($userfield_sql != '1=1') { $userfield_uids = array(0);	if($userfield_sql != '1=1') { $userfield_uids = array(0);
Zeile 3129	Zeile 3238
} $search_sql .= " AND u.uid IN(".implode(',', $userfield_uids).")"; unset($userfield_uids);	} $search_sql .= " AND u.uid IN(".implode(',', $userfield_uids).")"; unset($userfield_uids);
} }	} }
// Usergroup based searching if($view['conditions']['usergroup']) { if(!is_array($view['conditions']['usergroup'])) { $view['conditions']['usergroup'] = array($view['conditions']['usergroup']);	// Usergroup based searching if($view['conditions']['usergroup']) { if(!is_array($view['conditions']['usergroup'])) { $view['conditions']['usergroup'] = array($view['conditions']['usergroup']);
}	}
foreach($view['conditions']['usergroup'] as $usergroup) {	foreach($view['conditions']['usergroup'] as $usergroup) {
	$usergroup = intval($usergroup); if(!$usergroup) { continue; }
switch($db->type) { case "pgsql":	switch($db->type) { case "pgsql":
Zeile 3151	Zeile 3267
default: $additional_sql .= "OR CONCAT(',',additionalgroups,',') LIKE '%,{$usergroup},%'"; }	default: $additional_sql .= "OR CONCAT(',',additionalgroups,',') LIKE '%,{$usergroup},%'"; }
} $search_sql .= " AND (u.usergroup IN (".implode(",", $view['conditions']['usergroup']).") {$additional_sql})"; }	} $search_sql .= " AND (u.usergroup IN (".implode(",", array_map('intval', $view['conditions']['usergroup'])).") {$additional_sql})"; }
// COPPA users only? if($view['conditions']['coppa']) { $search_sql .= " AND u.coppauser=1 AND u.usergroup=5";	// COPPA users only? if($view['conditions']['coppa']) { $search_sql .= " AND u.coppauser=1 AND u.usergroup=5";
}	}
// Extra SQL? if($view['extra_sql']) {	// Extra SQL? if($view['extra_sql']) {
Zeile 3188	Zeile 3305
$view['perpage'] = 20; } $view['perpage'] = intval($view['perpage']);	$view['perpage'] = 20; } $view['perpage'] = intval($view['perpage']);

// Establish which page we're viewing and the starting index for querying $mybb->input['page'] = intval($mybb->input['page']); if($mybb->input['page'])	// Establish which page we're viewing and the starting index for querying $mybb->input['page'] = intval($mybb->input['page']); if($mybb->input['page'])
Zeile 3269	Zeile 3386
{ if($user['coppauser']) {	{ if($user['coppauser']) {
$popup->add_item($lang->approve_coppa_user, "index.php?module=user-users&action=activate_user&uid={$user['uid']}{$from_bit}");	$popup->add_item($lang->approve_coppa_user, "index.php?module=user-users&action=activate_user&uid={$user['uid']}&my_post_key={$mybb->post_code}{$from_bit}");
} else {	} else {
$popup->add_item($lang->approve_user, "index.php?module=user-users&action=activate_user&uid={$user['uid']}{$from_bit}");	$popup->add_item($lang->approve_user, "index.php?module=user-users&action=activate_user&uid={$user['uid']}&my_post_key={$mybb->post_code}{$from_bit}");
} }	} }
Zeile 3301	Zeile 3418
$warning_level = 100; } $user['view']['warninglevel'] = get_colored_warning_level($warning_level);	$warning_level = 100; } $user['view']['warninglevel'] = get_colored_warning_level($warning_level);
}	}
if($user['avatar'] && !stristr($user['avatar'], 'http://'))	if($user['avatar'] && !stristr($user['avatar'], 'http://'))
{	{
$user['avatar'] = "../{$user['avatar']}";	$user['avatar'] = "../{$user['avatar']}";
} if($view['view_type'] == "card") {	} if($view['view_type'] == "card") {
$scaled_avatar = fetch_scaled_avatar($user, 80, 80); } else	$scaled_avatar = fetch_scaled_avatar($user, 80, 80); } else
Zeile 3322	Zeile 3439
$user['view']['avatar'] = "<img src=\"".htmlspecialchars_uni($user['avatar'])."\" alt=\"\" width=\"{$scaled_avatar['width']}\" height=\"{$scaled_avatar['height']}\" />"; if($view['view_type'] == "card")	$user['view']['avatar'] = "<img src=\"".htmlspecialchars_uni($user['avatar'])."\" alt=\"\" width=\"{$scaled_avatar['width']}\" height=\"{$scaled_avatar['height']}\" />"; if($view['view_type'] == "card")
{	{
$users .= build_user_view_card($user, $view, $i);	$users .= build_user_view_card($user, $view, $i);
}	}
else { build_user_view_table($user, $view, $table); }	else { build_user_view_table($user, $view, $table); }
}	}
// If card view, we need to output the results if($view['view_type'] == "card")	// If card view, we need to output the results if($view['view_type'] == "card")
Zeile 3357	Zeile 3474
else { $switch_view .= "<a href=\"{$switch_url}&type=table\" style=\"font-weight: normal;\">{$lang->table_view}</a> \| <strong>{$lang->card_view}</strong>";	else { $switch_view .= "<a href=\"{$switch_url}&type=table\" style=\"font-weight: normal;\">{$lang->table_view}</a> \| <strong>{$lang->card_view}</strong>";
}	}
$switch_view .= "</div>"; // Do we need to construct the pagination?	$switch_view .= "</div>"; // Do we need to construct the pagination?
Zeile 3371	Zeile 3488
{ $search_class = ''; $search_style = "text-align: right;";	{ $search_class = ''; $search_style = "text-align: right;";
}	}
$search_action = $view['url']; // stop &username= in the query string if($view_upos = strpos($search_action, '&username=')) { $search_action = substr($search_action, 0, $view_upos);	$search_action = $view['url']; // stop &username= in the query string if($view_upos = strpos($search_action, '&username=')) { $search_action = substr($search_action, 0, $view_upos);
}	}
$search_action = str_replace("&", "&", $search_action); $search = new Form(htmlspecialchars_uni($search_action), 'post', 'search_form', 0, '', true); $built_view = $search->construct_return; $built_view .= "<div class=\"{$search_class}\" style=\"padding-bottom: 3px; margin-top: -9px; {$search_style}\">"; $built_view .= $search->generate_hidden_field('action', 'search')."\n"; if($view['conditions']['username'])	$search_action = str_replace("&", "&", $search_action); $search = new Form(htmlspecialchars_uni($search_action), 'post', 'search_form', 0, '', true); $built_view = $search->construct_return; $built_view .= "<div class=\"{$search_class}\" style=\"padding-bottom: 3px; margin-top: -9px; {$search_style}\">"; $built_view .= $search->generate_hidden_field('action', 'search')."\n"; if($view['conditions']['username'])
{	{
$default_class = ''; $value = $view['conditions']['username']; }	$default_class = ''; $value = $view['conditions']['username']; }
Zeile 3413	Zeile 3530
var search = document.getElementById('search_keywords'); search.onfocus = function()	var search = document.getElementById('search_keywords'); search.onfocus = function()
{	{
if(this.value == '{$lang->search_for_user}') { $(this).removeClassName('search_default');	if(this.value == '{$lang->search_for_user}') { $(this).removeClassName('search_default');
Zeile 3524	Zeile 3641
if($user['view'][$field]) { $value = $user['view'][$field];	if($user['view'][$field]) { $value = $user['view'][$field];
}	}
else { $value = $user[$field];	else { $value = $user[$field];
Zeile 3635	Zeile 3752
list($type, $options) = explode("\n", $profile_field['type'], 2); $type = trim($type); $field_name = "fid{$profile_field['fid']}";	list($type, $options) = explode("\n", $profile_field['type'], 2); $type = trim($type); $field_name = "fid{$profile_field['fid']}";

switch($type) { case "multiselect":	switch($type) { case "multiselect":
Zeile 3687	Zeile 3805
{ $profile_field['length'] = 1; }	{ $profile_field['length'] = 1; }
$code = $form->generate_select_box("profile_fields[{$field_name}]", $options, $values[$field_name], array('id' => "profile_field_{$field_name}", 'size' => $profile_field['length']));	if($search == true) { $code = $form->generate_select_box("profile_fields[{$field_name}][{$field_name}]", $options, $values[$field_name], array('id' => "profile_field_{$field_name}", 'size' => $profile_field['length'])); } else { $code = $form->generate_select_box("profile_fields[{$field_name}]", $options, $values[$field_name], array('id' => "profile_field_{$field_name}", 'size' => $profile_field['length'])); }
break; case "radio": $radio_options = array();	break; case "radio": $radio_options = array();
Zeile 3728	Zeile 3853
} break; case "textarea":	} break; case "textarea":
$code = $form->generate_text_area("profile_fields[{$field_name}]", $values[$field_name], array('id' => "profile_field_{$field_name}", 'rows' => 6, 'cols' => 50));	$extra = ''; if($mybb->input['action'] == "search") { $extra = " {$lang->or} ".$form->generate_check_box("profile_fields[{$field_name}_blank]", 1, $lang->is_not_blank, array('id' => "{$field_name}_blank", 'checked' => $values[$field_name.'_blank'])); } $code = $form->generate_text_area("profile_fields[{$field_name}]", $values[$field_name], array('id' => "profile_field_{$field_name}", 'rows' => 6, 'cols' => 50)).$extra;
break; default:	break; default:
$code = $form->generate_text_box("profile_fields[{$field_name}]", $values[$field_name], array('id' => "profile_field_{$field_name}", 'maxlength' => $profile_field['maxlength'], 'length' => $profile_field['length']));	$extra = ''; if($mybb->input['action'] == "search") { $extra = " {$lang->or} ".$form->generate_check_box("profile_fields[{$field_name}_blank]", 1, $lang->is_not_blank, array('id' => "{$field_name}_blank", 'checked' => $values[$field_name.'_blank'])); } $code = $form->generate_text_box("profile_fields[{$field_name}]", $values[$field_name], array('id' => "profile_field_{$field_name}", 'maxlength' => $profile_field['maxlength'], 'length' => $profile_field['length'])).$extra;
break; }	break; }

$form_container->output_row($profile_field['name'], $profile_field['description'], $code, "", array('id' => "profile_field_{$field_name}")); $code = $user_options = $selected_options = $radio_options = $val = $options = ''; }	$form_container->output_row($profile_field['name'], $profile_field['description'], $code, "", array('id' => "profile_field_{$field_name}")); $code = $user_options = $selected_options = $radio_options = $val = $options = ''; }
Zeile 3750	Zeile 3888
if(!is_array($input['conditions'])) {	if(!is_array($input['conditions'])) {
$input['conditions'] = unserialize($input['conditions']);	$input['conditions'] = unserialize($input['conditions']); } if(!is_array($input['profile_fields'])) { $input['profile_fields'] = unserialize($input['profile_fields']);
} if(!is_array($input['fields']))	} if(!is_array($input['fields']))
Zeile 3770	Zeile 3913
$form_container->output_row($lang->is_member_of_groups, $lang->additional_user_groups_desc, $form->generate_select_box('conditions[usergroup][]', $options, $input['conditions']['usergroup'], array('id' => 'usergroups', 'multiple' => true, 'size' => 5)), 'usergroups');	$form_container->output_row($lang->is_member_of_groups, $lang->additional_user_groups_desc, $form->generate_select_box('conditions[usergroup][]', $options, $input['conditions']['usergroup'], array('id' => 'usergroups', 'multiple' => true, 'size' => 5)), 'usergroups');
$form_container->output_row($lang->website_contains, "", $form->generate_text_box('conditions[website]', $input['conditions']['website'], array('id' => 'website')), 'website'); $form_container->output_row($lang->icq_number_contains, "", $form->generate_text_box('conditions[icq]', $input['conditions']['icq'], array('id' => 'icq')), 'icq'); $form_container->output_row($lang->aim_handle_contains, "", $form->generate_text_box('conditions[aim]', $input['conditions']['aim'], array('id' => 'aim')), 'aim'); $form_container->output_row($lang->yahoo_contains, "", $form->generate_text_box('conditions[yahoo]', $input['conditions']['yahoo'], array('id' => 'yahoo')), 'yahoo'); $form_container->output_row($lang->msn_contains, "", $form->generate_text_box('conditions[msn]', $input['conditions']['msn'], array('id' => 'msn')), 'msn'); $form_container->output_row($lang->signature_contains, "", $form->generate_text_box('conditions[signature]', $input['conditions']['signature'], array('id' => 'signature')), 'signature'); $form_container->output_row($lang->user_title_contains, "", $form->generate_text_box('conditions[usertitle]', $input['conditions']['usertitle'], array('id' => 'usertitle')), 'usertitle');	$form_container->output_row($lang->website_contains, "", $form->generate_text_box('conditions[website]', $input['conditions']['website'], array('id' => 'website'))." {$lang->or} ".$form->generate_check_box('conditions[website_blank]', 1, $lang->is_not_blank, array('id' => 'website_blank', 'checked' => $input['conditions']['website_blank'])), 'website'); $form_container->output_row($lang->icq_number_contains, "", $form->generate_text_box('conditions[icq]', $input['conditions']['icq'], array('id' => 'icq'))." {$lang->or} ".$form->generate_check_box('conditions[icq_blank]', 1, $lang->is_not_blank, array('id' => 'icq_blank', 'checked' => $input['conditions']['icq_blank'])), 'icq'); $form_container->output_row($lang->aim_handle_contains, "", $form->generate_text_box('conditions[aim]', $input['conditions']['aim'], array('id' => 'aim'))." {$lang->or} ".$form->generate_check_box('conditions[aim_blank]', 1, $lang->is_not_blank, array('id' => 'aim_blank', 'checked' => $input['conditions']['aim_blank'])), 'aim'); $form_container->output_row($lang->yahoo_contains, "", $form->generate_text_box('conditions[yahoo]', $input['conditions']['yahoo'], array('id' => 'yahoo'))." {$lang->or} ".$form->generate_check_box('conditions[yahoo_blank]', 1, $lang->is_not_blank, array('id' => 'yahoo_blank', 'checked' => $input['conditions']['yahoo_blank'])), 'yahoo'); $form_container->output_row($lang->msn_contains, "", $form->generate_text_box('conditions[msn]', $input['conditions']['msn'], array('id' => 'msn'))." {$lang->or} ".$form->generate_check_box('conditions[msn_blank]', 1, $lang->is_not_blank, array('id' => 'msn_blank', 'checked' => $input['conditions']['msn_blank'])), 'msn'); $form_container->output_row($lang->signature_contains, "", $form->generate_text_box('conditions[signature]', $input['conditions']['signature'], array('id' => 'signature'))." {$lang->or} ".$form->generate_check_box('conditions[signature_blank]', 1, $lang->is_not_blank, array('id' => 'signature_blank', 'checked' => $input['conditions']['signature_blank'])), 'signature'); $form_container->output_row($lang->user_title_contains, "", $form->generate_text_box('conditions[usertitle]', $input['conditions']['usertitle'], array('id' => 'usertitle'))." {$lang->or} ".$form->generate_check_box('conditions[usertitle_blank]', 1, $lang->is_not_blank, array('id' => 'usertitle_blank', 'checked' => $input['conditions']['usertitle_blank'])), 'usertitle');
$greater_options = array( "greater_than" => $lang->greater_than, "is_exactly" => $lang->is_exactly,	$greater_options = array( "greater_than" => $lang->greater_than, "is_exactly" => $lang->is_exactly,
Zeile 3784	Zeile 3927
); $form_container->output_row($lang->post_count_is, "", $form->generate_select_box('conditions[postnum_dir]', $greater_options, $input['conditions']['postnum_dir'], array('id' => 'numposts_dir'))." ".$form->generate_text_box('conditions[postnum]', $input['conditions']['postnum'], array('id' => 'numposts')), 'numposts');	); $form_container->output_row($lang->post_count_is, "", $form->generate_select_box('conditions[postnum_dir]', $greater_options, $input['conditions']['postnum_dir'], array('id' => 'numposts_dir'))." ".$form->generate_text_box('conditions[postnum]', $input['conditions']['postnum'], array('id' => 'numposts')), 'numposts');
	$form_container->output_row($lang->reg_in_x_days, '', $form->generate_text_box('conditions[regdate]', $input['conditions']['regdate'], array('id' => 'regdate')).' '.$lang->days, 'regdate');
$form_container->output_row($lang->reg_ip_matches, $lang->wildcard, $form->generate_text_box('conditions[regip]', $input['conditions']['regip'], array('id' => 'regip')), 'regip'); $form_container->output_row($lang->last_known_ip, $lang->wildcard, $form->generate_text_box('conditions[lastip]', $input['conditions']['lastip'], array('id' => 'lastip')), 'lastip'); $form_container->output_row($lang->posted_with_ip, $lang->wildcard, $form->generate_text_box('conditions[postip]', $input['conditions']['postip'], array('id' => 'postip')), 'postip');	$form_container->output_row($lang->reg_ip_matches, $lang->wildcard, $form->generate_text_box('conditions[regip]', $input['conditions']['regip'], array('id' => 'regip')), 'regip'); $form_container->output_row($lang->last_known_ip, $lang->wildcard, $form->generate_text_box('conditions[lastip]', $input['conditions']['lastip'], array('id' => 'lastip')), 'lastip'); $form_container->output_row($lang->posted_with_ip, $lang->wildcard, $form->generate_text_box('conditions[postip]', $input['conditions']['postip'], array('id' => 'postip')), 'postip');
Zeile 3807	Zeile 3951
} }	} }
output_custom_profile_fields($profile_fields['required'], $mybb->input['profile_fields'], $form_container, $form, true); output_custom_profile_fields($profile_fields['optional'], $mybb->input['profile_fields'], $form_container, $form, true);	output_custom_profile_fields($profile_fields['required'], $input['profile_fields'], $form_container, $form, true); output_custom_profile_fields($profile_fields['optional'], $input['profile_fields'], $form_container, $form, true);
$form_container->end();	$form_container->end();