Vergleich admin/modules/user/users.php - 1.6.4 - 1.6.10

Keine Änderungen Hinzugefügt Modifiziert Entfernt
Zeile 6	Zeile 6
* Website: http://mybb.com * License: http://mybb.com/about/license *	* Website: http://mybb.com * License: http://mybb.com/about/license *
* $Id: users.php 5483 2011-07-06 00:57:17Z huji $	* $Id$
*/ // Disallow direct access to this file for security reasons	*/ // Disallow direct access to this file for security reasons
Zeile 149	Zeile 149
if($mybb->input['action'] == "avatar_gallery") { $plugins->run_hooks("admin_user_users_avatar_gallery");	if($mybb->input['action'] == "avatar_gallery") { $plugins->run_hooks("admin_user_users_avatar_gallery");

$user = get_user($mybb->input['uid']); if(!$user['uid'])	$user = get_user($mybb->input['uid']); if(!$user['uid'])
{	{
exit; }	exit; }

// We've selected a new avatar for this user!	// We've selected a new avatar for this user!
if($mybb->input['avatar'])	if(isset($mybb->input['avatar']))
{	{
	if(!verify_post_check($mybb->input['my_post_key'])) { echo $lang->invalid_post_verify_key2; exit; }
$mybb->input['avatar'] = str_replace(array("./", ".."), "", $mybb->input['avatar']); if(file_exists("../".$mybb->settings['avatardir']."/".$mybb->input['avatar']))	$mybb->input['avatar'] = str_replace(array("./", ".."), "", $mybb->input['avatar']); if(file_exists("../".$mybb->settings['avatardir']."/".$mybb->input['avatar']))
Zeile 195	Zeile 201
echo "<body id=\"avatar_gallery\">\n"; // Sanitize incoming path if we have one	echo "<body id=\"avatar_gallery\">\n"; // Sanitize incoming path if we have one
$gallery = str_replace(array("..", "\x0"), "", $mybb->input['gallery']);	$gallery = ''; if(isset($mybb->input['gallery'])) { $gallery = str_replace(array("..", "\x0"), "", $mybb->input['gallery']); }
$breadcrumb = "<a href=\"index.php?module=user-users&action=avatar_gallery&uid={$user['uid']}\">Default Gallery</a>";	$breadcrumb = "<a href=\"index.php?module=user-users&action=avatar_gallery&uid={$user['uid']}\">Default Gallery</a>";
Zeile 248	Zeile 258
$files = @scandir($real_path); if(is_array($files))	$files = @scandir($real_path); if(is_array($files))
{	{
foreach($files as $file) { if($file == "." \|\| $file == ".." \|\| $file == ".svn")	foreach($files as $file) { if($file == "." \|\| $file == ".." \|\| $file == ".svn")
Zeile 294	Zeile 304
"width" => $dimensions[0], "height" => $dimensions[1] );	"width" => $dimensions[0], "height" => $dimensions[1] );
} } }	} } }
require_once MYBB_ROOT."inc/functions_image.php"; // Now we're done, we can simply show our gallery page	require_once MYBB_ROOT."inc/functions_image.php"; // Now we're done, we can simply show our gallery page
Zeile 313	Zeile 323
$gallery['thumb'] = "styles/{$page->style}/images/avatar_gallery.gif"; $gallery['thumb_width'] = 64; $gallery['thumb_height'] = 64;	$gallery['thumb'] = "styles/{$page->style}/images/avatar_gallery.gif"; $gallery['thumb_width'] = 64; $gallery['thumb_height'] = 64;
}	}
else { $gallery['thumb'] = "{$mybb->settings['avatardir']}/{$gallery['thumb']}";	else { $gallery['thumb'] = "{$mybb->settings['avatardir']}/{$gallery['thumb']}";
Zeile 322	Zeile 332
$top = ceil((80-$scaled_dimensions['height'])/2); $left = ceil((80-$scaled_dimensions['width'])/2); echo "<li><a href=\"index.php?module=user-users&action=avatar_gallery&uid={$user['uid']}&gallery={$gallery['path']}\"><span class=\"image\"><img src=\"{$gallery['thumb']}\" alt=\"\" style=\"margin-top: {$top}px;\" height=\"{$scaled_dimensions['height']}\" width=\"{$scaled_dimensions['width']}\"></span><span class=\"title\">{$gallery['friendly_name']}</span></a></li>\n";	$top = ceil((80-$scaled_dimensions['height'])/2); $left = ceil((80-$scaled_dimensions['width'])/2); echo "<li><a href=\"index.php?module=user-users&action=avatar_gallery&uid={$user['uid']}&gallery={$gallery['path']}\"><span class=\"image\"><img src=\"{$gallery['thumb']}\" alt=\"\" style=\"margin-top: {$top}px;\" height=\"{$scaled_dimensions['height']}\" width=\"{$scaled_dimensions['width']}\"></span><span class=\"title\">{$gallery['friendly_name']}</span></a></li>\n";
}	}
} echo "</ul>\n"; // Build the list of any actual avatars we have echo "<ul id=\"avatars\">\n"; if(is_array($avatars))	} echo "</ul>\n"; // Build the list of any actual avatars we have echo "<ul id=\"avatars\">\n"; if(is_array($avatars))
{	{
foreach($avatars as $avatar) { $scaled_dimensions = scale_image($avatar['width'], $avatar['height'], 80, 80); $top = ceil((80-$scaled_dimensions['height'])/2); $left = ceil((80-$scaled_dimensions['width'])/2);	foreach($avatars as $avatar) { $scaled_dimensions = scale_image($avatar['width'], $avatar['height'], 80, 80); $top = ceil((80-$scaled_dimensions['height'])/2); $left = ceil((80-$scaled_dimensions['width'])/2);
echo "<li><a href=\"index.php?module=user-users&action=avatar_gallery&uid={$user['uid']}&avatar={$avatar['path']}\"><span class=\"image\"><img src=\"{$mybb->settings['avatardir']}/{$avatar['path']}\" alt=\"\" style=\"margin-top: {$top}px;\" height=\"{$scaled_dimensions['height']}\" width=\"{$scaled_dimensions['width']}\" /></span><span class=\"title\">{$avatar['friendly_name']}</span></a></li>\n";	echo "<li><a href=\"index.php?module=user-users&action=avatar_gallery&uid={$user['uid']}&avatar={$avatar['path']}&my_post_key={$mybb->post_code}\"><span class=\"image\"><img src=\"{$mybb->settings['avatardir']}/{$avatar['path']}\" alt=\"\" style=\"margin-top: {$top}px;\" height=\"{$scaled_dimensions['height']}\" width=\"{$scaled_dimensions['width']}\" /></span><span class=\"title\">{$avatar['friendly_name']}</span></a></li>\n";
} } echo "</ul>\n";	} } echo "</ul>\n";
Zeile 347	Zeile 357
if($mybb->input['action'] == "activate_user") { $plugins->run_hooks("admin_user_users_coppa_activate");	if($mybb->input['action'] == "activate_user") { $plugins->run_hooks("admin_user_users_coppa_activate");
	if(!verify_post_check($mybb->input['my_post_key'])) { flash_message($lang->invalid_post_verify_key2, 'error'); admin_redirect("index.php?module=user-users"); }
$query = $db->simple_select("users", "*", "uid='".intval($mybb->input['uid'])."'"); $user = $db->fetch_array($query);	$query = $db->simple_select("users", "*", "uid='".intval($mybb->input['uid'])."'"); $user = $db->fetch_array($query);
Zeile 526	Zeile 542
$form_container->output_row($lang->email_address." <em>*</em>", "", $form->generate_text_box('email', $mybb->input['email'], array('id' => 'email')), 'email'); $display_group_options[0] = $lang->use_primary_user_group;	$form_container->output_row($lang->email_address." <em>*</em>", "", $form->generate_text_box('email', $mybb->input['email'], array('id' => 'email')), 'email'); $display_group_options[0] = $lang->use_primary_user_group;
	$options = array();
$query = $db->simple_select("usergroups", "gid, title", "gid != '1'", array('order_by' => 'title')); while($usergroup = $db->fetch_array($query)) {	$query = $db->simple_select("usergroups", "gid, title", "gid != '1'", array('order_by' => 'title')); while($usergroup = $db->fetch_array($query)) {
Zeile 611	Zeile 628
"aim" => $mybb->input['aim'], "yahoo" => $mybb->input['yahoo'], "msn" => $mybb->input['msn'],	"aim" => $mybb->input['aim'], "yahoo" => $mybb->input['yahoo'], "msn" => $mybb->input['msn'],
	"birthday" => array( "day" => $mybb->input['bday1'], "month" => $mybb->input['bday2'], "year" => $mybb->input['bday3'] ),
"style" => $mybb->input['style'], "signature" => $mybb->input['signature'], "dateformat" => intval($mybb->input['dateformat']),	"style" => $mybb->input['style'], "signature" => $mybb->input['signature'], "dateformat" => intval($mybb->input['dateformat']),
Zeile 708	Zeile 730
else if($mybb->input['avatar_url'] && $mybb->input['avatar_url'] != $user['avatar']) { $mybb->input['avatar_url'] = preg_replace("#script:#i", "", $mybb->input['avatar_url']);	else if($mybb->input['avatar_url'] && $mybb->input['avatar_url'] != $user['avatar']) { $mybb->input['avatar_url'] = preg_replace("#script:#i", "", $mybb->input['avatar_url']);
$mybb->input['avatar_url'] = htmlspecialchars($mybb->input['avatar_url']);	$mybb->input['avatar_url'] = htmlspecialchars_uni($mybb->input['avatar_url']);
$ext = get_extension($mybb->input['avatar_url']); // Copy the avatar to the local server (work around remote URL access disabled for getimagesize)	$ext = get_extension($mybb->input['avatar_url']); // Copy the avatar to the local server (work around remote URL access disabled for getimagesize)
Zeile 890	Zeile 912
{ $user['usertitle'] = htmlspecialchars_decode($user['usertitle']); $mybb->input = $user;	{ $user['usertitle'] = htmlspecialchars_decode($user['usertitle']); $mybb->input = $user;
	$options = array( 'bday1', 'bday2', 'bday3', 'new_password', 'confirm_new_password', 'action_time', 'action_period', 'modpost_period', 'moderateposting', 'modpost_time', 'suspost_period', 'suspost_time' ); foreach($options as $option) { if(!isset($mybb->input[$option])) { $mybb->input[$option] = ''; } }
// We need to fetch this users profile field values $query = $db->simple_select("userfields", "*", "ufid='{$user['uid']}'"); $mybb->input['profile_fields'] = $db->fetch_array($query);	// We need to fetch this users profile field values $query = $db->simple_select("userfields", "*", "ufid='{$user['uid']}'"); $mybb->input['profile_fields'] = $db->fetch_array($query);
	} if($mybb->input['bday1'] \|\| $mybb->input['bday2'] \|\| $mybb->input['bday3']) { $mybb->input['bday'][0] = $mybb->input['bday1']; $mybb->input['bday'][1] = $mybb->input['bday2']; $mybb->input['bday'][2] = intval($mybb->input['bday3']); } else { $mybb->input['bday'] = array(0, 0, ''); if($user['birthday']) { $mybb->input['bday'] = explode('-', $user['birthday']); }
} // Fetch custom profile fields	} // Fetch custom profile fields
Zeile 1045	Zeile 1098
$warning_level = get_colored_warning_level($warning_level); }	$warning_level = get_colored_warning_level($warning_level); }
	$age = $lang->na;
if($user['birthday'])	if($user['birthday'])
{	{
$age = get_age($user['birthday']);	$age = get_age($user['birthday']);
} else { $age = '';
} $table->construct_cell("<div style=\"width: 126px; height: 126px;\" class=\"user_avatar\"><img src=\"".htmlspecialchars_uni($user['avatar'])."\" style=\"margin-top: {$avatar_top}px\" width=\"{$scaled_dimensions['width']}\" height=\"{$scaled_dimensions['height']}\" alt=\"\" /></div>", array('rowspan' => 6, 'width' => 1));	} $table->construct_cell("<div style=\"width: 126px; height: 126px;\" class=\"user_avatar\"><img src=\"".htmlspecialchars_uni($user['avatar'])."\" style=\"margin-top: {$avatar_top}px\" width=\"{$scaled_dimensions['width']}\" height=\"{$scaled_dimensions['height']}\" alt=\"\" /></div>", array('rowspan' => 6, 'width' => 1));
Zeile 1091	Zeile 1139
$form_container->output_row($lang->email_address." <em>*</em>", "", $form->generate_text_box('email', $mybb->input['email'], array('id' => 'email')), 'email'); $display_group_options[0] = $lang->use_primary_user_group;	$form_container->output_row($lang->email_address." <em>*</em>", "", $form->generate_text_box('email', $mybb->input['email'], array('id' => 'email')), 'email'); $display_group_options[0] = $lang->use_primary_user_group;
	$options = array();
$query = $db->simple_select("usergroups", "gid, title", "gid != '1'", array('order_by' => 'title')); while($usergroup = $db->fetch_array($query)) {	$query = $db->simple_select("usergroups", "gid, title", "gid != '1'", array('order_by' => 'title')); while($usergroup = $db->fetch_array($query)) {
Zeile 1109	Zeile 1158
$form_container->output_row($lang->post_count." <em>*</em>", "", $form->generate_text_box('postnum', $mybb->input['postnum'], array('id' => 'postnum')), 'postnum'); // Output custom profile fields - required	$form_container->output_row($lang->post_count." <em>*</em>", "", $form->generate_text_box('postnum', $mybb->input['postnum'], array('id' => 'postnum')), 'postnum'); // Output custom profile fields - required
	if(!isset($profile_fields['required'])) { $profile_fields['required'] = array(); }
output_custom_profile_fields($profile_fields['required'], $mybb->input['profile_fields'], $form_container, $form); $form_container->end();	output_custom_profile_fields($profile_fields['required'], $mybb->input['profile_fields'], $form_container, $form); $form_container->end();
Zeile 1120	Zeile 1173
$form_container->output_row($lang->aim_handle, "", $form->generate_text_box('aim', $mybb->input['aim'], array('id' => 'aim')), 'aim'); $form_container->output_row($lang->yahoo_messanger_handle, "", $form->generate_text_box('yahoo', $mybb->input['yahoo'], array('id' => 'yahoo')), 'yahoo'); $form_container->output_row($lang->msn_messanger_handle, "", $form->generate_text_box('msn', $mybb->input['msn'], array('id' => 'msn')), 'msn');	$form_container->output_row($lang->aim_handle, "", $form->generate_text_box('aim', $mybb->input['aim'], array('id' => 'aim')), 'aim'); $form_container->output_row($lang->yahoo_messanger_handle, "", $form->generate_text_box('yahoo', $mybb->input['yahoo'], array('id' => 'yahoo')), 'yahoo'); $form_container->output_row($lang->msn_messanger_handle, "", $form->generate_text_box('msn', $mybb->input['msn'], array('id' => 'msn')), 'msn');

// Birthday	// Birthday
	$birthday_days = array(0 => ''); for($i = 1; $i <= 31; $i++) { $birthday_days[$i] = $i; } $birthday_months = array( 0 => '', 1 => $lang->january, 2 => $lang->february, 3 => $lang->march, 4 => $lang->april, 5 => $lang->may, 6 => $lang->june, 7 => $lang->july, 8 => $lang->august, 9 => $lang->september, 10 => $lang->october, 11 => $lang->november, 12 => $lang->december ); $birthday_row = $form->generate_select_box('bday1', $birthday_days, $mybb->input['bday'][0], array('id' => 'bday_day')); $birthday_row .= ' '.$form->generate_select_box('bday2', $birthday_months, $mybb->input['bday'][1], array('id' => 'bday_month')); $birthday_row .= ' '.$form->generate_text_box('bday3', $mybb->input['bday'][2], array('id' => 'bday_year', 'style' => 'width: 3em;')); $form_container->output_row($lang->birthday, "", $birthday_row, 'birthday');
// Output custom profile fields - optional output_custom_profile_fields($profile_fields['optional'], $mybb->input['profile_fields'], $form_container, $form);	// Output custom profile fields - optional output_custom_profile_fields($profile_fields['optional'], $mybb->input['profile_fields'], $form_container, $form);
Zeile 1131	Zeile 1212
// // ACCOUNT SETTINGS //	// // ACCOUNT SETTINGS //

// Plugin hook note - we should add hooks in above each output_row for the below so users can add their own options to each group :> echo "<div id=\"tab_settings\">\n";	// Plugin hook note - we should add hooks in above each output_row for the below so users can add their own options to each group :> echo "<div id=\"tab_settings\">\n";
Zeile 1154	Zeile 1235
$form->generate_check_box("pmnotice", 1, $lang->alert_new_pms, array("checked" => $mybb->input['pmnotice'])), $form->generate_check_box("pmnotify", 1, $lang->email_notify_new_pms, array("checked" => $mybb->input['pmnotify'])), "<label for=\"subscriptionmethod\">{$lang->default_thread_subscription_mode}:</label><br />".$form->generate_select_box("subscriptionmethod", array($lang->do_not_subscribe, $lang->no_email_notification, $lang->instant_email_notification), $mybb->input['subscriptionmethod'], array('id' => 'subscriptionmethod'))	$form->generate_check_box("pmnotice", 1, $lang->alert_new_pms, array("checked" => $mybb->input['pmnotice'])), $form->generate_check_box("pmnotify", 1, $lang->email_notify_new_pms, array("checked" => $mybb->input['pmnotify'])), "<label for=\"subscriptionmethod\">{$lang->default_thread_subscription_mode}:</label><br />".$form->generate_select_box("subscriptionmethod", array($lang->do_not_subscribe, $lang->no_email_notification, $lang->instant_email_notification), $mybb->input['subscriptionmethod'], array('id' => 'subscriptionmethod'))
);	);
$form_container->output_row($lang->messaging_and_notification, "", "<div class=\"user_settings_bit\">".implode("</div><div class=\"user_settings_bit\">", $messaging_options)."</div>"); $date_format_options = array($lang->use_default);	$form_container->output_row($lang->messaging_and_notification, "", "<div class=\"user_settings_bit\">".implode("</div><div class=\"user_settings_bit\">", $messaging_options)."</div>"); $date_format_options = array($lang->use_default);
Zeile 1309	Zeile 1390
else { $sig_checked = 0;	else { $sig_checked = 0;
	$user_suspend_info = '';
} $actions = '	} $actions = '
Zeile 1359	Zeile 1441
$form->generate_radio_button("update_posts", "no", $lang->do_nothing, array("checked" => 1)) );	$form->generate_radio_button("update_posts", "no", $lang->do_nothing, array("checked" => 1)) );
$form_container->output_row($lang->singature_preferences, "", implode("<br />", $signature_options));	$form_container->output_row($lang->signature_preferences, "", implode("<br />", $signature_options));
$form_container->end(); echo "</div>\n";	$form_container->end(); echo "</div>\n";
Zeile 1373	Zeile 1455
$table->construct_cell("<div style=\"width: 126px; height: 126px;\" class=\"user_avatar\"><img src=\"".htmlspecialchars_uni($user['avatar'])."\" width=\"{$scaled_dimensions['width']}\" style=\"margin-top: {$avatar_top}px\" height=\"{$scaled_dimensions['height']}\" alt=\"\" /></div>", array('width' => 1));	$table->construct_cell("<div style=\"width: 126px; height: 126px;\" class=\"user_avatar\"><img src=\"".htmlspecialchars_uni($user['avatar'])."\" width=\"{$scaled_dimensions['width']}\" style=\"margin-top: {$avatar_top}px\" height=\"{$scaled_dimensions['height']}\" alt=\"\" /></div>", array('width' => 1));
	$avatar_url = '';
if($user['avatartype'] == "upload" \|\| stristr($user['avatar'], $mybb->settings['avataruploadpath'])) { $current_avatar_msg = "<br /><strong>{$lang->user_current_using_uploaded_avatar}</strong>";	if($user['avatartype'] == "upload" \|\| stristr($user['avatar'], $mybb->settings['avataruploadpath'])) { $current_avatar_msg = "<br /><strong>{$lang->user_current_using_uploaded_avatar}</strong>";
Zeile 1447	Zeile 1530
); echo "<div id=\"tab_modoptions\">\n";	); echo "<div id=\"tab_modoptions\">\n";
$form_container = new FormContainer($lang->mod_options);	$form_container = new FormContainer($lang->mod_options.": {$user['username']}");
$form_container->output_row($lang->user_notes, '', $form->generate_text_area('usernotes', $mybb->input['usernotes'], array('id' => 'usernotes')), 'usernotes'); // Mod posts	$form_container->output_row($lang->user_notes, '', $form->generate_text_area('usernotes', $mybb->input['usernotes'], array('id' => 'usernotes')), 'usernotes'); // Mod posts
Zeile 1455	Zeile 1538
$modpost_options = $form->generate_select_box('modpost_period', $periods, $mybb->input['modpost_period'], array('id' => 'modpost_period')); // Do we have any existing suspensions here?	$modpost_options = $form->generate_select_box('modpost_period', $periods, $mybb->input['modpost_period'], array('id' => 'modpost_period')); // Do we have any existing suspensions here?
	$existing_info = '';
if($user['moderateposts'] \|\| ($mybb->input['moderateposting'] && !empty($errors))) { $mybb->input['moderateposting'] = 1;	if($user['moderateposts'] \|\| ($mybb->input['moderateposting'] && !empty($errors))) { $mybb->input['moderateposting'] = 1;
Zeile 1483	Zeile 1567
$mybb->input['suspendposting'] = 1; if($user['suspensiontime'] == 0 \|\| $mybb->input['suspost_period'] == "never")	$mybb->input['suspendposting'] = 1; if($user['suspensiontime'] == 0 \|\| $mybb->input['suspost_period'] == "never")
{	{
$existing_info = $lang->suspended_perm; } else	$existing_info = $lang->suspended_perm; } else
Zeile 1570	Zeile 1654
$plugins->run_hooks("admin_user_users_delete"); $query = $db->simple_select("users", "*", "uid='".intval($mybb->input['uid'])."'");	$plugins->run_hooks("admin_user_users_delete"); $query = $db->simple_select("users", "*", "uid='".intval($mybb->input['uid'])."'");
$user = $db->fetch_array($query);	$user = $db->fetch_array($query);
// Does the user not exist? if(!$user['uid']) { flash_message($lang->error_invalid_user, 'error');	// Does the user not exist? if(!$user['uid']) { flash_message($lang->error_invalid_user, 'error');
admin_redirect("index.php?module=user-users");	admin_redirect("index.php?module=user-users");
} if(is_super_admin($mybb->input['uid']) && $mybb->user['uid'] != $mybb->input['uid'] && !is_super_admin($mybb->user['uid']))	} if(is_super_admin($mybb->input['uid']) && $mybb->user['uid'] != $mybb->input['uid'] && !is_super_admin($mybb->user['uid']))
Zeile 1587	Zeile 1671
// User clicked no if($mybb->input['no'])	// User clicked no if($mybb->input['no'])
{	{
admin_redirect("index.php?module=user-users"); } if($mybb->request_method == "post") { // Delete the user	admin_redirect("index.php?module=user-users"); } if($mybb->request_method == "post") { // Delete the user
$db->update_query("posts", array('uid' => 0), "uid='{$user['uid']}'");
$db->delete_query("userfields", "ufid='{$user['uid']}'"); $db->delete_query("privatemessages", "uid='{$user['uid']}'"); $db->delete_query("events", "uid='{$user['uid']}'");	$db->delete_query("userfields", "ufid='{$user['uid']}'"); $db->delete_query("privatemessages", "uid='{$user['uid']}'"); $db->delete_query("events", "uid='{$user['uid']}'");
Zeile 1607	Zeile 1690
$db->delete_query("joinrequests", "uid='{$user['uid']}'"); $db->delete_query("warnings", "uid='{$user['uid']}'"); $db->delete_query("reputation", "uid='{$user['uid']}' OR adduid='{$user['uid']}'");	$db->delete_query("joinrequests", "uid='{$user['uid']}'"); $db->delete_query("warnings", "uid='{$user['uid']}'"); $db->delete_query("reputation", "uid='{$user['uid']}' OR adduid='{$user['uid']}'");
$db->delete_query("awaitingactivation", "uid='{$uid}'");	$db->delete_query("awaitingactivation", "uid='{$user['uid']}'"); $db->delete_query("posts", "uid = '{$user['uid']}' AND visible = '-2'"); $db->delete_query("threads", "uid = '{$user['uid']}' AND visible = '-2'");
// Update forum stats update_stats(array('numusers' => '-1'));	// Update forum stats update_stats(array('numusers' => '-1'));
	// Update forums & threads if user is the lastposter $db->update_query("posts", array('uid' => 0), "uid='{$user['uid']}'"); $db->update_query("forums", array("lastposteruid" => 0), "lastposteruid = '{$user['uid']}'"); $db->update_query("threads", array("lastposteruid" => 0), "lastposteruid = '{$user['uid']}'");
// Did this user have an uploaded avatar? if($user['avatartype'] == "upload")	// Did this user have an uploaded avatar? if($user['avatartype'] == "upload")
{	{
// Removes the ./ at the beginning the timestamp on the end... @unlink("../".substr($user['avatar'], 2, -20)); }	// Removes the ./ at the beginning the timestamp on the end... @unlink("../".substr($user['avatar'], 2, -20)); }
Zeile 1672	Zeile 1762
$admin_view['conditions'] = unserialize($admin_view['conditions']); $admin_view['conditions']['referrer'] = $mybb->input['uid'];	$admin_view['conditions'] = unserialize($admin_view['conditions']); $admin_view['conditions']['referrer'] = $mybb->input['uid'];
echo build_users_view($admin_view);	$view = build_users_view($admin_view); // No referred users if(!$view) { $table = new Table; $table->construct_cell($lang->error_no_referred_users); $table->construct_row(); $table->output($lang->show_referrers); } else { echo $view; }
$page->output_footer(); }	$page->output_footer(); }

if($mybb->input['action'] == "ipaddresses") { $plugins->run_hooks("admin_user_users_ipaddresses");	if($mybb->input['action'] == "ipaddresses") { $plugins->run_hooks("admin_user_users_ipaddresses");

$page->add_breadcrumb_item($lang->ip_addresses); $page->output_header($lang->ip_addresses);	$page->add_breadcrumb_item($lang->ip_addresses); $page->output_header($lang->ip_addresses);
Zeile 1691	Zeile 1794
); $page->output_nav_tabs($sub_tabs, 'ipaddresses');	); $page->output_nav_tabs($sub_tabs, 'ipaddresses');

$query = $db->simple_select("users", "uid, regip, username, lastip", "uid='{$mybb->input['uid']}'", array('limit' => 1)); $user = $db->fetch_array($query);	$query = $db->simple_select("users", "uid, regip, username, lastip", "uid='{$mybb->input['uid']}'", array('limit' => 1)); $user = $db->fetch_array($query);
Zeile 1702	Zeile 1805
$table->construct_header($lang->ip_address); $table->construct_header($lang->controls, array('width' => 200, 'class' => "align_center"));	$table->construct_header($lang->ip_address); $table->construct_header($lang->controls, array('width' => 200, 'class' => "align_center"));

if(empty($user['lastip'])) { $user['lastip'] = $lang->unknown;	if(empty($user['lastip'])) { $user['lastip'] = $lang->unknown;
Zeile 1788	Zeile 1891
{ flash_message($lang->error_no_perms_super_admin, 'error'); admin_redirect("index.php?module=user-users");	{ flash_message($lang->error_no_perms_super_admin, 'error'); admin_redirect("index.php?module=user-users");
}	}
if($source_user['uid'] == $destination_user['uid']) { $errors[] = $lang->error_cannot_merge_same_account; }	if($source_user['uid'] == $destination_user['uid']) { $errors[] = $lang->error_cannot_merge_same_account; }

if(empty($errors)) { // Begin to merge the accounts	if(empty($errors)) { // Begin to merge the accounts
Zeile 1820	Zeile 1923
$db->update_query("pollvotes", $uid_update, "uid='{$source_user['uid']}'"); $db->update_query("posts", $uid_update, "uid='{$source_user['uid']}'"); $db->update_query("privatemessages", $uid_update, "uid='{$source_user['uid']}'");	$db->update_query("pollvotes", $uid_update, "uid='{$source_user['uid']}'"); $db->update_query("posts", $uid_update, "uid='{$source_user['uid']}'"); $db->update_query("privatemessages", $uid_update, "uid='{$source_user['uid']}'");
	$db->update_query("reportedposts", $uid_update, "uid='{$source_user['uid']}'");
$db->update_query("threadratings", $uid_update, "uid='{$source_user['uid']}'"); $db->update_query("threads", $uid_update, "uid='{$source_user['uid']}'"); $db->delete_query("sessions", "uid='{$source_user['uid']}'");	$db->update_query("threadratings", $uid_update, "uid='{$source_user['uid']}'"); $db->update_query("threads", $uid_update, "uid='{$source_user['uid']}'"); $db->delete_query("sessions", "uid='{$source_user['uid']}'");
Zeile 1832	Zeile 1936
// Update the moderator cache... $cache->update_moderators(); }	// Update the moderator cache... $cache->update_moderators(); }
	// Forums & Threads $db->update_query("forums", array("lastposteruid" => $destination_user['uid']), "lastposteruid = '{$source_user['uid']}'"); $db->update_query("threads", array("lastposteruid" => $destination_user['uid']), "lastposteruid = '{$source_user['uid']}'"); // Banning $db->update_query("banned", array('admin' => $destination_user['uid']), "admin = '{$source_user['uid']}'");
// Merging Reputation // First, let's change all the details over to our new user...	// Merging Reputation // First, let's change all the details over to our new user...
Zeile 2044	Zeile 2155
$admin_view['sortby'] = $mybb->input['sortby']; }	$admin_view['sortby'] = $mybb->input['sortby']; }
if($mybb->input['perpage'])	if(intval($mybb->input['perpage']))
{ $admin_view['perpage'] = $mybb->input['perpage']; }	{ $admin_view['perpage'] = $mybb->input['perpage']; }
Zeile 2388	Zeile 2499
echo $form->generate_hidden_field('inline_action', 'multiban'); echo $form->generate_hidden_field('processed', '1');	echo $form->generate_hidden_field('inline_action', 'multiban'); echo $form->generate_hidden_field('processed', '1');
$form_container = new FormContainer('<div class="float_right"><a href="index.php?module=user-users&action=inline_edit&inline_action=multilift&my_post_key={$mybb->post_code}">'.$lang->lift_bans.'</a></div>'.$lang->mass_ban);	$form_container = new FormContainer('<div class="float_right"><a href="index.php?module=user-users&action=inline_edit&inline_action=multilift&my_post_key='.$mybb->post_code.'">'.$lang->lift_bans.'</a></div>'.$lang->mass_ban);
$form_container->output_row($lang->ban_reason, "", $form->generate_text_box('reason', $mybb->input['reason'], array('id' => 'reason')), 'reason'); $ban_times = fetch_ban_times(); foreach($ban_times as $time => $period)	$form_container->output_row($lang->ban_reason, "", $form->generate_text_box('reason', $mybb->input['reason'], array('id' => 'reason')), 'reason'); $ban_times = fetch_ban_times(); foreach($ban_times as $time => $period)
Zeile 2573	Zeile 2684
} // Require the rebuild functions	} // Require the rebuild functions
require_once(MYBB_ROOT.'/inc/functions.php'); require_once(MYBB_ROOT.'/inc/functions_rebuild.php');	require_once MYBB_ROOT.'/inc/functions.php'; require_once MYBB_ROOT.'/inc/functions_rebuild.php';
// We've finished deleting user's posts, so let's delete the threads if(is_array($prune_array['to_delete']) && count($prune_array['to_delete']) > 0)	// We've finished deleting user's posts, so let's delete the threads if(is_array($prune_array['to_delete']) && count($prune_array['to_delete']) > 0)
Zeile 2584	Zeile 2695
$db->delete_query("threads", "tid='$tid'"); $db->delete_query("threads", "closed='moved\|$tid'"); $db->delete_query("threadsubscriptions", "tid='$tid'");	$db->delete_query("threads", "tid='$tid'"); $db->delete_query("threads", "closed='moved\|$tid'"); $db->delete_query("threadsubscriptions", "tid='$tid'");
$db->delete_query("polls", "tid='$tid'");;	$db->delete_query("polls", "tid='$tid'");
$db->delete_query("threadsread", "tid='$tid'");	$db->delete_query("threadsread", "tid='$tid'");
	$db->delete_query("threadratings", "tid='$tid'");
} }	} }
Zeile 2700	Zeile 2812
unset($mybb->input['additionalgroups'][$key]); } }	unset($mybb->input['additionalgroups'][$key]); } }
$additionalgroups = implode(",", $mybb->input['additionalgroups']);	$additionalgroups = implode(",", array_map('intval', $mybb->input['additionalgroups']));
} else {	} else {
Zeile 2709	Zeile 2821
// Create an update array $update_array = array(	// Create an update array $update_array = array(
"usergroup" => $mybb->input['usergroup'],	"usergroup" => intval($mybb->input['usergroup']),
"additionalgroups" => $additionalgroups,	"additionalgroups" => $additionalgroups,
"displaygroup" => $mybb->input['displaygroup']	"displaygroup" => intval($mybb->input['displaygroup'])
); // Do the usergroup update for all those selected	); // Do the usergroup update for all those selected
Zeile 2770	Zeile 2882
// Usergroups $display_group_options[0] = $lang->use_primary_user_group;	// Usergroups $display_group_options[0] = $lang->use_primary_user_group;
	$options = array();
$query = $db->simple_select("usergroups", "gid, title", "gid != '1'", array('order_by' => 'title')); while($usergroup = $db->fetch_array($query)) { $options[$usergroup['gid']] = $usergroup['title']; $display_group_options[$usergroup['gid']] = $usergroup['title'];	$query = $db->simple_select("usergroups", "gid, title", "gid != '1'", array('order_by' => 'title')); while($usergroup = $db->fetch_array($query)) { $options[$usergroup['gid']] = $usergroup['title']; $display_group_options[$usergroup['gid']] = $usergroup['title'];
}	}
if(!is_array($mybb->input['additionalgroups'])) { $mybb->input['additionalgroups'] = explode(',', $mybb->input['additionalgroups']); }	if(!is_array($mybb->input['additionalgroups'])) { $mybb->input['additionalgroups'] = explode(',', $mybb->input['additionalgroups']); }

$form_container->output_row($lang->primary_user_group, "", $form->generate_select_box('usergroup', $options, $mybb->input['usergroup'], array('id' => 'usergroup')), 'usergroup'); $form_container->output_row($lang->additional_user_groups, $lang->additional_user_groups_desc, $form->generate_select_box('additionalgroups[]', $options, $mybb->input['additionalgroups'], array('id' => 'additionalgroups', 'multiple' => true, 'size' => 5)), 'additionalgroups'); $form_container->output_row($lang->display_user_group, "", $form->generate_select_box('displaygroup', $display_group_options, $mybb->input['displaygroup'], array('id' => 'displaygroup')), 'displaygroup');	$form_container->output_row($lang->primary_user_group, "", $form->generate_select_box('usergroup', $options, $mybb->input['usergroup'], array('id' => 'usergroup')), 'usergroup'); $form_container->output_row($lang->additional_user_groups, $lang->additional_user_groups_desc, $form->generate_select_box('additionalgroups[]', $options, $mybb->input['additionalgroups'], array('id' => 'additionalgroups', 'multiple' => true, 'size' => 5)), 'additionalgroups'); $form_container->output_row($lang->display_user_group, "", $form->generate_select_box('displaygroup', $display_group_options, $mybb->input['displaygroup'], array('id' => 'displaygroup')), 'displaygroup');
Zeile 2794	Zeile 2907
$page->output_footer(); break; }	$page->output_footer(); break; }
}	}
} if(!$mybb->input['action']) { $plugins->run_hooks("admin_user_users_start");	} if(!$mybb->input['action']) { $plugins->run_hooks("admin_user_users_start");

$page->output_header($lang->browse_users); echo "<script type=\"text/javascript\" src=\"jscripts/users.js\"></script>"; $page->output_nav_tabs($sub_tabs, 'browse_users');	$page->output_header($lang->browse_users); echo "<script type=\"text/javascript\" src=\"jscripts/users.js\"></script>"; $page->output_nav_tabs($sub_tabs, 'browse_users');
if($mybb->input['search_id'] && $admin_session['data']['user_views'][$mybb->input['search_id']])	if(isset($mybb->input['search_id']) && $admin_session['data']['user_views'][$mybb->input['search_id']])
{ $admin_view = $admin_session['data']['user_views'][$mybb->input['search_id']]; unset($admin_view['extra_sql']);	{ $admin_view = $admin_session['data']['user_views'][$mybb->input['search_id']]; unset($admin_view['extra_sql']);
Zeile 2814	Zeile 2927
else { // Showing a specific view	else { // Showing a specific view
if($mybb->input['vid'])	if(isset($mybb->input['vid']))
{ $query = $db->simple_select("adminviews", "*", "vid='".intval($mybb->input['vid'])."'"); $admin_view = $db->fetch_array($query);	{ $query = $db->simple_select("adminviews", "*", "vid='".intval($mybb->input['vid'])."'"); $admin_view = $db->fetch_array($query);
Zeile 2822	Zeile 2935
if(!$admin_view['vid'] \|\| ($admin_view['visibility'] == 1 && $admin_view['uid'] != $mybb->user['uid'])) { unset($admin_view);	if(!$admin_view['vid'] \|\| ($admin_view['visibility'] == 1 && $admin_view['uid'] != $mybb->user['uid'])) { unset($admin_view);
}	}
} // Don't have a view? Fetch the default	} // Don't have a view? Fetch the default
if(!$admin_view)	if(!isset($admin_view))
{ $default_view = fetch_default_view("user"); if(!$default_view)	{ $default_view = fetch_default_view("user"); if(!$default_view)
Zeile 2835	Zeile 2948
} $query = $db->simple_select("adminviews", "*", "type='user' AND (vid='{$default_view}' OR uid=0)", array("order_by" => "uid", "order_dir" => "desc")); $admin_view = $db->fetch_array($query);	} $query = $db->simple_select("adminviews", "*", "type='user' AND (vid='{$default_view}' OR uid=0)", array("order_by" => "uid", "order_dir" => "desc")); $admin_view = $db->fetch_array($query);
} }	} }
// Fetch a list of all of the views for this user $popup = new PopupMenu("views", $lang->views); $query = $db->simple_select("adminviews", "*", "type='user' AND (visibility=2 OR uid={$mybb->user['uid']})", array("order_by" => "title")); while($view = $db->fetch_array($query))	// Fetch a list of all of the views for this user $popup = new PopupMenu("views", $lang->views); $query = $db->simple_select("adminviews", "*", "type='user' AND (visibility=2 OR uid={$mybb->user['uid']})", array("order_by" => "title")); while($view = $db->fetch_array($query))
{	{
$popup->add_item(htmlspecialchars_uni($view['title']), "index.php?module=user-users&vid={$view['vid']}"); } $popup->add_item("<em>{$lang->manage_views}</em>", "index.php?module=user-users&action=views"); $admin_view['popup'] = $popup->fetch();	$popup->add_item(htmlspecialchars_uni($view['title']), "index.php?module=user-users&vid={$view['vid']}"); } $popup->add_item("<em>{$lang->manage_views}</em>", "index.php?module=user-users&action=views"); $admin_view['popup'] = $popup->fetch();
if($mybb->input['type'])	if(isset($mybb->input['type']))
{ $admin_view['view_type'] = $mybb->input['type']; }	{ $admin_view['view_type'] = $mybb->input['type']; }
Zeile 2879	Zeile 2992
if($inline != true) { echo "<div style=\"display: inline; float: right;\">{$admin_view['popup']}</div><br />\n";	if($inline != true) { echo "<div style=\"display: inline; float: right;\">{$admin_view['popup']}</div><br />\n";
}	}
$page->output_inline_error($errors); }	$page->output_inline_error($errors); }
Zeile 2892	Zeile 3005
{ global $mybb, $db, $cache, $lang, $user_view_fields, $page;	{ global $mybb, $db, $cache, $lang, $user_view_fields, $page;
	$view_title = '';
if($view['title']) { $title_string = "view_title_{$view['vid']}";	if($view['title']) { $title_string = "view_title_{$view['vid']}";
Zeile 2905	Zeile 3019
} // Build the URL to this view	} // Build the URL to this view
if(!$view['url'])	if(!isset($view['url']))
{ $view['url'] = "index.php?module=user-users"; }	{ $view['url'] = "index.php?module=user-users"; }
Zeile 2921	Zeile 3035
{ $view['custom_profile_fields'] = unserialize($view['custom_profile_fields']); }	{ $view['custom_profile_fields'] = unserialize($view['custom_profile_fields']); }
if($mybb->input['username'])	if(isset($mybb->input['username']))
{ $view['conditions']['username'] = $mybb->input['username']; }	{ $view['conditions']['username'] = $mybb->input['username']; }
Zeile 2933	Zeile 3047
{ // If this is a custom view we need to save everything ready to pass it on from page to page global $admin_session;	{ // If this is a custom view we need to save everything ready to pass it on from page to page global $admin_session;
if(!$_REQUEST['search_id'])	if(!$mybb->input['search_id'])
{ $search_id = md5(random_str()); $admin_session['data']['user_views'][$search_id] = $view; update_admin_session('user_views', $admin_session['data']['user_views']);	{ $search_id = md5(random_str()); $admin_session['data']['user_views'][$search_id] = $view; update_admin_session('user_views', $admin_session['data']['user_views']);
$_REQUEST['search_id'] = $search_id;	$mybb->input['search_id'] = $search_id;
}	}
$view['url'] .= "&search_id=".htmlspecialchars($_REQUEST['search_id']);	$view['url'] .= "&search_id=".htmlspecialchars_uni($mybb->input['search_id']);
}	}
if($mybb->input['username'])	if(isset($mybb->input['username']))
{ $view['url'] .= "&username=".urlencode(htmlspecialchars_uni($mybb->input['username'])); }	{ $view['url'] .= "&username=".urlencode(htmlspecialchars_uni($mybb->input['username'])); }
Zeile 2954	Zeile 3068
} if(isset($view['conditions']['referrer'])){	} if(isset($view['conditions']['referrer'])){
$view['url'] .= "&action=referrers&uid=".htmlspecialchars($view['conditions']['referrer']);	$view['url'] .= "&action=referrers&uid=".htmlspecialchars_uni($view['conditions']['referrer']);
} // Do we not have any views?	} // Do we not have any views?
Zeile 2996	Zeile 3110
// List of valid LIKE search fields $user_like_fields = array("username", "email", "website", "icq", "aim", "yahoo", "msn", "signature", "usertitle"); foreach($user_like_fields as $search_field)	// List of valid LIKE search fields $user_like_fields = array("username", "email", "website", "icq", "aim", "yahoo", "msn", "signature", "usertitle"); foreach($user_like_fields as $search_field)
{ if($view['conditions'][$search_field]) {	{ if(!empty($view['conditions'][$search_field]) && !$view['conditions'][$search_field.'_blank']) {
$search_sql .= " AND u.{$search_field} LIKE '%".$db->escape_string_like($view['conditions'][$search_field])."%'";	$search_sql .= " AND u.{$search_field} LIKE '%".$db->escape_string_like($view['conditions'][$search_field])."%'";
} }	} else if(!empty($view['conditions'][$search_field.'_blank'])) { $search_sql .= " AND u.{$search_field} != ''"; } }
// EXACT matching fields $user_exact_fields = array("referrer"); foreach($user_exact_fields as $search_field)	// EXACT matching fields $user_exact_fields = array("referrer"); foreach($user_exact_fields as $search_field)
{ if($view['conditions'][$search_field])	{ if(!empty($view['conditions'][$search_field]))
{ $search_sql .= " AND u.{$search_field}='".$db->escape_string($view['conditions'][$search_field])."'";	{ $search_sql .= " AND u.{$search_field}='".$db->escape_string($view['conditions'][$search_field])."'";
} }	} }
// LESS THAN or GREATER THAN $direction_fields = array("postnum"); foreach($direction_fields as $search_field) { $direction_field = $search_field."_dir";	// LESS THAN or GREATER THAN $direction_fields = array("postnum"); foreach($direction_fields as $search_field) { $direction_field = $search_field."_dir";
if(($view['conditions'][$search_field] \|\| $view['conditions'][$search_field] === '0') && $view['conditions'][$direction_field])	if(!empty($view['conditions'][$search_field]) && ($view['conditions'][$search_field] \|\| $view['conditions'][$search_field] === '0') && $view['conditions'][$direction_field])
{ switch($view['conditions'][$direction_field]) { case "greater_than": $direction = ">";	{ switch($view['conditions'][$direction_field]) { case "greater_than": $direction = ">";
break;	break;
case "less_than": $direction = "<"; break;	case "less_than": $direction = "<"; break;
Zeile 3032	Zeile 3150
$direction = "="; } $search_sql .= " AND u.{$search_field}{$direction}'".$db->escape_string($view['conditions'][$search_field])."'";	$direction = "="; } $search_sql .= " AND u.{$search_field}{$direction}'".$db->escape_string($view['conditions'][$search_field])."'";
	} } // Registration searching $reg_fields = array("regdate"); foreach($reg_fields as $search_field) { if(!empty($view['conditions'][$search_field]) && intval($view['conditions'][$search_field])) { $threshold = TIME_NOW - (intval($view['conditions'][$search_field]) * 24 * 60 * 60); $search_sql .= " AND u.{$search_field} >= '{$threshold}'";
} }	} }
Zeile 3039	Zeile 3169
$ip_fields = array("regip", "lastip"); foreach($ip_fields as $search_field) {	$ip_fields = array("regip", "lastip"); foreach($ip_fields as $search_field) {
if($view['conditions'][$search_field])	if(!empty($view['conditions'][$search_field]))
{ // IPv6 IP if(strpos($view['conditions'][$search_field], ":") !== false)	{ // IPv6 IP if(strpos($view['conditions'][$search_field], ":") !== false)
Zeile 3064	Zeile 3194
} // Post IP searching	} // Post IP searching
if($view['conditions']['postip'])	if(!empty($view['conditions']['postip']))
{ // IPv6 IP if(strpos($view['conditions']['postip'], ":") !== false)	{ // IPv6 IP if(strpos($view['conditions']['postip'], ":") !== false)
Zeile 3113	Zeile 3243
{ continue; }	{ continue; }
$userfield_sql .= ' AND '.$db->escape_string($column)."='".$db->escape_string($value)."'";	if(strpos($column, '_blank') !== false) { $column = str_replace('_blank', '', $column); $userfield_sql .= ' AND '.$db->escape_string($column)." != ''"; } else { $userfield_sql .= ' AND '.$db->escape_string($column)."='".$db->escape_string($value)."'"; }
} } else if(!empty($input))	} } else if(!empty($input))
Zeile 3123	Zeile 3261
{ continue; }	{ continue; }
$userfield_sql .= ' AND '.$db->escape_string($column)." LIKE '%".$db->escape_string($input)."%'";	if(strpos($column, '_blank') !== false) { $column = str_replace('_blank', '', $column); $userfield_sql .= ' AND '.$db->escape_string($column)." != ''"; } else { $userfield_sql .= ' AND '.$db->escape_string($column)." LIKE '%".$db->escape_string($input)."%'"; }
} }	} }

if($userfield_sql != '1=1')	if($userfield_sql != '1=1')
{	{
$userfield_uids = array(0); $query = $db->simple_select("userfields", "ufid", $userfield_sql); while($userfield = $db->fetch_array($query))	$userfield_uids = array(0); $query = $db->simple_select("userfields", "ufid", $userfield_sql); while($userfield = $db->fetch_array($query))
{	{
$userfield_uids[] = $userfield['ufid']; } $search_sql .= " AND u.uid IN(".implode(',', $userfield_uids).")"; unset($userfield_uids);	$userfield_uids[] = $userfield['ufid']; } $search_sql .= " AND u.uid IN(".implode(',', $userfield_uids).")"; unset($userfield_uids);
}	}
} // Usergroup based searching	} // Usergroup based searching
if($view['conditions']['usergroup'])	if(isset($view['conditions']['usergroup']))
{ if(!is_array($view['conditions']['usergroup'])) { $view['conditions']['usergroup'] = array($view['conditions']['usergroup']);	{ if(!is_array($view['conditions']['usergroup'])) { $view['conditions']['usergroup'] = array($view['conditions']['usergroup']);
}	}
foreach($view['conditions']['usergroup'] as $usergroup) {	foreach($view['conditions']['usergroup'] as $usergroup) {
	$usergroup = intval($usergroup); if(!$usergroup) { continue; }
switch($db->type) { case "pgsql":	switch($db->type) { case "pgsql":
Zeile 3161	Zeile 3314
$additional_sql .= "OR CONCAT(',',additionalgroups,',') LIKE '%,{$usergroup},%'"; } }	$additional_sql .= "OR CONCAT(',',additionalgroups,',') LIKE '%,{$usergroup},%'"; } }
$search_sql .= " AND (u.usergroup IN (".implode(",", $view['conditions']['usergroup']).") {$additional_sql})";	$search_sql .= " AND (u.usergroup IN (".implode(",", array_map('intval', $view['conditions']['usergroup'])).") {$additional_sql})";
} // COPPA users only?	} // COPPA users only?
if($view['conditions']['coppa'])	if(isset($view['conditions']['coppa']))
{ $search_sql .= " AND u.coppauser=1 AND u.usergroup=5"; } // Extra SQL?	{ $search_sql .= " AND u.coppauser=1 AND u.usergroup=5"; } // Extra SQL?
if($view['extra_sql'])	if(isset($view['extra_sql']))
{ $search_sql .= $view['extra_sql']; }	{ $search_sql .= $view['extra_sql']; }
Zeile 3199	Zeile 3353
$view['perpage'] = intval($view['perpage']); // Establish which page we're viewing and the starting index for querying	$view['perpage'] = intval($view['perpage']); // Establish which page we're viewing and the starting index for querying
$mybb->input['page'] = intval($mybb->input['page']);	// Establish which page we're viewing and the starting index for querying if(!isset($mybb->input['page'])) { $mybb->input['page'] = 1; } else { $mybb->input['page'] = intval($mybb->input['page']); }
if($mybb->input['page']) { $start = ($mybb->input['page'] - 1) * $view['perpage'];	if($mybb->input['page']) { $start = ($mybb->input['page'] - 1) * $view['perpage'];
Zeile 3208	Zeile 3371
{ $start = 0; $mybb->input['page'] = 1;	{ $start = 0; $mybb->input['page'] = 1;
}	}
$from_bit = "";	$from_bit = "";
if($mybb->input['from'] == "home") {	if(isset($mybb->input['from']) && $mybb->input['from'] == "home") {
$from_bit = "&from=home"; }	$from_bit = "&from=home"; }
Zeile 3232	Zeile 3395
break; default: $view['sortby'] = "username";	break; default: $view['sortby'] = "username";
}	}
if($view['sortorder'] != "desc") {	if($view['sortorder'] != "desc") {
Zeile 3249	Zeile 3412
ORDER BY {$view['sortby']} {$view['sortorder']} LIMIT {$start}, {$view['perpage']} ");	ORDER BY {$view['sortby']} {$view['sortorder']} LIMIT {$start}, {$view['perpage']} ");
	$users = '';
while($user = $db->fetch_array($query))	while($user = $db->fetch_array($query))
{	{ $comma = $groups_list = '';
$user['view']['username'] = "<a href=\"index.php?module=user-users&action=edit&uid={$user['uid']}\">".format_name($user['username'], $user['usergroup'], $user['displaygroup'])."</a>"; $user['view']['usergroup'] = $usergroups[$user['usergroup']]['title'];	$user['view']['username'] = "<a href=\"index.php?module=user-users&action=edit&uid={$user['uid']}\">".format_name($user['username'], $user['usergroup'], $user['displaygroup'])."</a>"; $user['view']['usergroup'] = $usergroups[$user['usergroup']]['title'];
$additional_groups = explode(",", $user['additionalgroups']); $comma = $groups_list = ''; foreach($additional_groups as $group) { $groups_list .= "{$comma}{$usergroups[$group]['title']}"; $comma = $lang->comma;	if($user['additionalgroups']) { $additional_groups = explode(",", $user['additionalgroups']); foreach($additional_groups as $group) { $groups_list .= "{$comma}{$usergroups[$group]['title']}"; $comma = $lang->comma; }
} if(!$groups_list) {	} if(!$groups_list) {
Zeile 3278	Zeile 3446
{ if($user['coppauser']) {	{ if($user['coppauser']) {
$popup->add_item($lang->approve_coppa_user, "index.php?module=user-users&action=activate_user&uid={$user['uid']}{$from_bit}");	$popup->add_item($lang->approve_coppa_user, "index.php?module=user-users&action=activate_user&uid={$user['uid']}&my_post_key={$mybb->post_code}{$from_bit}");
} else {	} else {
$popup->add_item($lang->approve_user, "index.php?module=user-users&action=activate_user&uid={$user['uid']}{$from_bit}");	$popup->add_item($lang->approve_user, "index.php?module=user-users&action=activate_user&uid={$user['uid']}&my_post_key={$mybb->post_code}{$from_bit}");
} }	} }
Zeile 3294	Zeile 3462
// Fetch the reputation for this user if($usergroups[$user['usergroup']]['usereputationsystem'] == 1 && $mybb->settings['enablereputation'] == 1)	// Fetch the reputation for this user if($usergroups[$user['usergroup']]['usereputationsystem'] == 1 && $mybb->settings['enablereputation'] == 1)
{	{
$user['view']['reputation'] = get_reputation($user['reputation']);	$user['view']['reputation'] = get_reputation($user['reputation']);
}	}
else { $reputation = "-";	else { $reputation = "-";
}	}
if($mybb->settings['enablewarningsystem'] != 0 && $usergroups[$user['usergroup']]['canreceivewarnings'] != 0) { $warning_level = round($user['warningpoints']/$mybb->settings['maxwarningpoints']*100);	if($mybb->settings['enablewarningsystem'] != 0 && $usergroups[$user['usergroup']]['canreceivewarnings'] != 0) { $warning_level = round($user['warningpoints']/$mybb->settings['maxwarningpoints']*100);
Zeile 3315	Zeile 3483
if($user['avatar'] && !stristr($user['avatar'], 'http://')) { $user['avatar'] = "../{$user['avatar']}";	if($user['avatar'] && !stristr($user['avatar'], 'http://')) { $user['avatar'] = "../{$user['avatar']}";
}	}
if($view['view_type'] == "card") { $scaled_avatar = fetch_scaled_avatar($user, 80, 80);	if($view['view_type'] == "card") { $scaled_avatar = fetch_scaled_avatar($user, 80, 80);
Zeile 3329	Zeile 3497
$user['avatar'] = "styles/{$page->style}/images/default_avatar.gif"; } $user['view']['avatar'] = "<img src=\"".htmlspecialchars_uni($user['avatar'])."\" alt=\"\" width=\"{$scaled_avatar['width']}\" height=\"{$scaled_avatar['height']}\" />";	$user['avatar'] = "styles/{$page->style}/images/default_avatar.gif"; } $user['view']['avatar'] = "<img src=\"".htmlspecialchars_uni($user['avatar'])."\" alt=\"\" width=\"{$scaled_avatar['width']}\" height=\"{$scaled_avatar['height']}\" />";

if($view['view_type'] == "card") { $users .= build_user_view_card($user, $view, $i);	if($view['view_type'] == "card") { $users .= build_user_view_card($user, $view, $i);
Zeile 3348	Zeile 3516
} }	} }
if(!$view['table_id'])	if(!isset($view['table_id']))
{ $view['table_id'] = "users_list";	{ $view['table_id'] = "users_list";
}	}
$switch_view = "<div class=\"float_right\">"; $switch_url = $view['url'];	$switch_view = "<div class=\"float_right\">"; $switch_url = $view['url'];
Zeile 3393	Zeile 3561
$built_view = $search->construct_return; $built_view .= "<div class=\"{$search_class}\" style=\"padding-bottom: 3px; margin-top: -9px; {$search_style}\">"; $built_view .= $search->generate_hidden_field('action', 'search')."\n";	$built_view = $search->construct_return; $built_view .= "<div class=\"{$search_class}\" style=\"padding-bottom: 3px; margin-top: -9px; {$search_style}\">"; $built_view .= $search->generate_hidden_field('action', 'search')."\n";
if($view['conditions']['username'])	if(isset($view['conditions']['username']))
{ $default_class = ''; $value = $view['conditions']['username'];	{ $default_class = ''; $value = $view['conditions']['username'];
Zeile 3413	Zeile 3581
var form = document.getElementById('search_form'); form.onsubmit = function() { var search = document.getElementById('search_keywords');	var form = document.getElementById('search_form'); form.onsubmit = function() { var search = document.getElementById('search_keywords');
if(search.value == '' \|\| search.value == '{$lang->search_for_user}')	if(search.value == '' \|\| search.value == '".addcslashes($lang->search_for_user, "'")."')
{ search.focus(); return false;	{ search.focus(); return false;
Zeile 3423	Zeile 3591
var search = document.getElementById('search_keywords'); search.onfocus = function() {	var search = document.getElementById('search_keywords'); search.onfocus = function() {
if(this.value == '{$lang->search_for_user}')	if(this.value == '".addcslashes($lang->search_for_user, "'")."')
{ $(this).removeClassName('search_default'); this.value = '';	{ $(this).removeClassName('search_default'); this.value = '';
Zeile 3434	Zeile 3602
if(this.value == '') { $(this).addClassName('search_default');	if(this.value == '') { $(this).addClassName('search_default');
this.value = '{$lang->search_for_user}';	this.value = '".addcslashes($lang->search_for_user, "'")."';
} } // fix the styling used if we have a different default value	} } // fix the styling used if we have a different default value
if(search.value != '{$lang->search_for_user}') { $(search).removeClassName('search_default'); }	if(search.value != '".addcslashes($lang->search_for_user, "'")."') { $(search).removeClassName('search_default'); }
</script>\n"; $built_view .= "</div>\n";	</script>\n"; $built_view .= "</div>\n";
Zeile 3453	Zeile 3621
new autoComplete("search_keywords", "../xmlhttp.php?action=get_users", {valueSpan: "username"}); // --> </script>';	new autoComplete("search_keywords", "../xmlhttp.php?action=get_users", {valueSpan: "username"}); // --> </script>';

$built_view .= $search->end();	$built_view .= $search->end();
$built_view .= $pagination;	if(isset($pagination)) { $built_view .= $pagination; }
if($view['view_type'] != "card") { $checkbox = '';	if($view['view_type'] != "card") { $checkbox = '';
}	}
else { $checkbox = "<input type=\"checkbox\" name=\"allbox\" onclick=\"inlineModeration.checkAll(this)\" /> "; } $built_view .= $table->construct_html("{$switch_view}<div>{$checkbox}{$lang->users}{$view_title}</div>", 1, "", $view['table_id']);	else { $checkbox = "<input type=\"checkbox\" name=\"allbox\" onclick=\"inlineModeration.checkAll(this)\" /> "; } $built_view .= $table->construct_html("{$switch_view}<div>{$checkbox}{$lang->users}{$view_title}</div>", 1, "", $view['table_id']);
$built_view .= $pagination;	if(isset($pagination)) { $built_view .= $pagination; }
$built_view .= ' <script type="text/javascript" src="'.$mybb->settings['bburl'].'/jscripts/inline_moderation.js?ver=1400"></script>	$built_view .= ' <script type="text/javascript" src="'.$mybb->settings['bburl'].'/jscripts/inline_moderation.js?ver=1400"></script>
Zeile 3526	Zeile 3700
else if($field == "controls") { $controls = $user['view']['controls'];	else if($field == "controls") { $controls = $user['view']['controls'];
}	}
// Otherwise, just user data else if($field != "username") {	// Otherwise, just user data else if($field != "username") {
if($user['view'][$field])	if(isset($user['view'][$field]))
{ $value = $user['view'][$field]; }	{ $value = $user['view'][$field]; }
Zeile 3562	Zeile 3736
$card = "<fieldset id=\"uid_{$user['uid']}\" style=\"width: 47%; float: {$float};\">\n"; $card .= "<legend><input type=\"checkbox\" class=\"checkbox\" name=\"inlinemod_{$user['uid']}\" id=\"inlinemod_{$user['uid']}\" value=\"1\" onclick=\"$('uid_{$user['uid']}').toggleClassName('inline_selected');\" /> {$user['view']['username']}</legend>\n"; if($avatar)	$card = "<fieldset id=\"uid_{$user['uid']}\" style=\"width: 47%; float: {$float};\">\n"; $card .= "<legend><input type=\"checkbox\" class=\"checkbox\" name=\"inlinemod_{$user['uid']}\" id=\"inlinemod_{$user['uid']}\" value=\"1\" onclick=\"$('uid_{$user['uid']}').toggleClassName('inline_selected');\" /> {$user['view']['username']}</legend>\n"; if($avatar)
{	{
$card .= "<div class=\"user_avatar\">{$avatar}</div>\n"; } if($user_details)	$card .= "<div class=\"user_avatar\">{$avatar}</div>\n"; } if($user_details)
Zeile 3583	Zeile 3757
global $user_view_fields; foreach($view['fields'] as $field)	global $user_view_fields; foreach($view['fields'] as $field)
{	{
if(!$user_view_fields[$field]) { continue;	if(!$user_view_fields[$field]) { continue;
Zeile 3692	Zeile 3866
{ $val = trim($val); $options[$val] = $val;	{ $val = trim($val); $options[$val] = $val;
} if(!$profile_field['length']) {	} if(!$profile_field['length']) {
$profile_field['length'] = 1; } if($search == true) { $code = $form->generate_select_box("profile_fields[{$field_name}][{$field_name}]", $options, $values[$field_name], array('id' => "profile_field_{$field_name}", 'size' => $profile_field['length']));	$profile_field['length'] = 1; } if($search == true) { $code = $form->generate_select_box("profile_fields[{$field_name}][{$field_name}]", $options, $values[$field_name], array('id' => "profile_field_{$field_name}", 'size' => $profile_field['length']));
}	}
else { $code = $form->generate_select_box("profile_fields[{$field_name}]", $options, $values[$field_name], array('id' => "profile_field_{$field_name}", 'size' => $profile_field['length']));	else { $code = $form->generate_select_box("profile_fields[{$field_name}]", $options, $values[$field_name], array('id' => "profile_field_{$field_name}", 'size' => $profile_field['length']));
Zeile 3714	Zeile 3888
} $radio_options += explode("\n", $options); foreach($radio_options as $val)	} $radio_options += explode("\n", $options); foreach($radio_options as $val)
{	{
$val = trim($val); $code .= $form->generate_radio_button("profile_fields[{$field_name}]", $val, $val, array('id' => "profile_field_{$field_name}", 'checked' => ($val == $values[$field_name] ? true : false)))."<br />"; } break; case "checkbox": if(!is_array($values[$field_name]))	$val = trim($val); $code .= $form->generate_radio_button("profile_fields[{$field_name}]", $val, $val, array('id' => "profile_field_{$field_name}", 'checked' => ($val == $values[$field_name] ? true : false)))."<br />"; } break; case "checkbox": if(!is_array($values[$field_name]))
{	{
$user_options = explode("\n", $values[$field_name]); } else	$user_options = explode("\n", $values[$field_name]); } else
Zeile 3742	Zeile 3916
{ $val = trim($val); $code .= $form->generate_check_box("profile_fields[{$field_name}][]", $val, $val, array('id' => "profile_field_{$field_name}", 'checked' => ($val == $selected_options[$val] ? true : false)))."<br />";	{ $val = trim($val); $code .= $form->generate_check_box("profile_fields[{$field_name}][]", $val, $val, array('id' => "profile_field_{$field_name}", 'checked' => ($val == $selected_options[$val] ? true : false)))."<br />";
} break;	} break;
case "textarea":	case "textarea":
$code = $form->generate_text_area("profile_fields[{$field_name}]", $values[$field_name], array('id' => "profile_field_{$field_name}", 'rows' => 6, 'cols' => 50)); break;	$extra = ''; if(isset($mybb->input['action']) && $mybb->input['action'] == "search") { $extra = " {$lang->or} ".$form->generate_check_box("profile_fields[{$field_name}_blank]", 1, $lang->is_not_blank, array('id' => "{$field_name}_blank", 'checked' => $values[$field_name.'_blank'])); } $code = $form->generate_text_area("profile_fields[{$field_name}]", $values[$field_name], array('id' => "profile_field_{$field_name}", 'rows' => 6, 'cols' => 50)).$extra; break;
default:	default:
$code = $form->generate_text_box("profile_fields[{$field_name}]", $values[$field_name], array('id' => "profile_field_{$field_name}", 'maxlength' => $profile_field['maxlength'], 'length' => $profile_field['length']));	$extra = ''; if(isset($mybb->input['action']) && $mybb->input['action'] == "search") { $extra = " {$lang->or} ".$form->generate_check_box("profile_fields[{$field_name}_blank]", 1, $lang->is_not_blank, array('id' => "{$field_name}_blank", 'checked' => $values[$field_name.'_blank'])); } $code = $form->generate_text_box("profile_fields[{$field_name}]", $values[$field_name], array('id' => "profile_field_{$field_name}", 'maxlength' => $profile_field['maxlength'], 'length' => $profile_field['length'])).$extra;
break; }	break; }

$form_container->output_row($profile_field['name'], $profile_field['description'], $code, "", array('id' => "profile_field_{$field_name}")); $code = $user_options = $selected_options = $radio_options = $val = $options = ''; }	$form_container->output_row($profile_field['name'], $profile_field['description'], $code, "", array('id' => "profile_field_{$field_name}")); $code = $user_options = $selected_options = $radio_options = $val = $options = ''; }
Zeile 3784	Zeile 3971
$form_container->output_row($lang->username_contains, "", $form->generate_text_box('conditions[username]', $input['conditions']['username'], array('id' => 'username')), 'username'); $form_container->output_row($lang->email_address_contains, "", $form->generate_text_box('conditions[email]', $input['conditions']['email'], array('id' => 'email')), 'email');	$form_container->output_row($lang->username_contains, "", $form->generate_text_box('conditions[username]', $input['conditions']['username'], array('id' => 'username')), 'username'); $form_container->output_row($lang->email_address_contains, "", $form->generate_text_box('conditions[email]', $input['conditions']['email'], array('id' => 'email')), 'email');
	$options = array();
$query = $db->simple_select("usergroups", "gid, title", "gid != '1'", array('order_by' => 'title')); while($usergroup = $db->fetch_array($query)) {	$query = $db->simple_select("usergroups", "gid, title", "gid != '1'", array('order_by' => 'title')); while($usergroup = $db->fetch_array($query)) {
Zeile 3792	Zeile 3980
$form_container->output_row($lang->is_member_of_groups, $lang->additional_user_groups_desc, $form->generate_select_box('conditions[usergroup][]', $options, $input['conditions']['usergroup'], array('id' => 'usergroups', 'multiple' => true, 'size' => 5)), 'usergroups');	$form_container->output_row($lang->is_member_of_groups, $lang->additional_user_groups_desc, $form->generate_select_box('conditions[usergroup][]', $options, $input['conditions']['usergroup'], array('id' => 'usergroups', 'multiple' => true, 'size' => 5)), 'usergroups');
$form_container->output_row($lang->website_contains, "", $form->generate_text_box('conditions[website]', $input['conditions']['website'], array('id' => 'website')), 'website'); $form_container->output_row($lang->icq_number_contains, "", $form->generate_text_box('conditions[icq]', $input['conditions']['icq'], array('id' => 'icq')), 'icq'); $form_container->output_row($lang->aim_handle_contains, "", $form->generate_text_box('conditions[aim]', $input['conditions']['aim'], array('id' => 'aim')), 'aim'); $form_container->output_row($lang->yahoo_contains, "", $form->generate_text_box('conditions[yahoo]', $input['conditions']['yahoo'], array('id' => 'yahoo')), 'yahoo'); $form_container->output_row($lang->msn_contains, "", $form->generate_text_box('conditions[msn]', $input['conditions']['msn'], array('id' => 'msn')), 'msn'); $form_container->output_row($lang->signature_contains, "", $form->generate_text_box('conditions[signature]', $input['conditions']['signature'], array('id' => 'signature')), 'signature'); $form_container->output_row($lang->user_title_contains, "", $form->generate_text_box('conditions[usertitle]', $input['conditions']['usertitle'], array('id' => 'usertitle')), 'usertitle');	$form_container->output_row($lang->website_contains, "", $form->generate_text_box('conditions[website]', $input['conditions']['website'], array('id' => 'website'))." {$lang->or} ".$form->generate_check_box('conditions[website_blank]', 1, $lang->is_not_blank, array('id' => 'website_blank', 'checked' => $input['conditions']['website_blank'])), 'website'); $form_container->output_row($lang->icq_number_contains, "", $form->generate_text_box('conditions[icq]', $input['conditions']['icq'], array('id' => 'icq'))." {$lang->or} ".$form->generate_check_box('conditions[icq_blank]', 1, $lang->is_not_blank, array('id' => 'icq_blank', 'checked' => $input['conditions']['icq_blank'])), 'icq'); $form_container->output_row($lang->aim_handle_contains, "", $form->generate_text_box('conditions[aim]', $input['conditions']['aim'], array('id' => 'aim'))." {$lang->or} ".$form->generate_check_box('conditions[aim_blank]', 1, $lang->is_not_blank, array('id' => 'aim_blank', 'checked' => $input['conditions']['aim_blank'])), 'aim'); $form_container->output_row($lang->yahoo_contains, "", $form->generate_text_box('conditions[yahoo]', $input['conditions']['yahoo'], array('id' => 'yahoo'))." {$lang->or} ".$form->generate_check_box('conditions[yahoo_blank]', 1, $lang->is_not_blank, array('id' => 'yahoo_blank', 'checked' => $input['conditions']['yahoo_blank'])), 'yahoo'); $form_container->output_row($lang->msn_contains, "", $form->generate_text_box('conditions[msn]', $input['conditions']['msn'], array('id' => 'msn'))." {$lang->or} ".$form->generate_check_box('conditions[msn_blank]', 1, $lang->is_not_blank, array('id' => 'msn_blank', 'checked' => $input['conditions']['msn_blank'])), 'msn'); $form_container->output_row($lang->signature_contains, "", $form->generate_text_box('conditions[signature]', $input['conditions']['signature'], array('id' => 'signature'))." {$lang->or} ".$form->generate_check_box('conditions[signature_blank]', 1, $lang->is_not_blank, array('id' => 'signature_blank', 'checked' => $input['conditions']['signature_blank'])), 'signature'); $form_container->output_row($lang->user_title_contains, "", $form->generate_text_box('conditions[usertitle]', $input['conditions']['usertitle'], array('id' => 'usertitle'))." {$lang->or} ".$form->generate_check_box('conditions[usertitle_blank]', 1, $lang->is_not_blank, array('id' => 'usertitle_blank', 'checked' => $input['conditions']['usertitle_blank'])), 'usertitle');
$greater_options = array( "greater_than" => $lang->greater_than, "is_exactly" => $lang->is_exactly,	$greater_options = array( "greater_than" => $lang->greater_than, "is_exactly" => $lang->is_exactly,
Zeile 3806	Zeile 3994
); $form_container->output_row($lang->post_count_is, "", $form->generate_select_box('conditions[postnum_dir]', $greater_options, $input['conditions']['postnum_dir'], array('id' => 'numposts_dir'))." ".$form->generate_text_box('conditions[postnum]', $input['conditions']['postnum'], array('id' => 'numposts')), 'numposts');	); $form_container->output_row($lang->post_count_is, "", $form->generate_select_box('conditions[postnum_dir]', $greater_options, $input['conditions']['postnum_dir'], array('id' => 'numposts_dir'))." ".$form->generate_text_box('conditions[postnum]', $input['conditions']['postnum'], array('id' => 'numposts')), 'numposts');
	$form_container->output_row($lang->reg_in_x_days, '', $form->generate_text_box('conditions[regdate]', $input['conditions']['regdate'], array('id' => 'regdate')).' '.$lang->days, 'regdate');
$form_container->output_row($lang->reg_ip_matches, $lang->wildcard, $form->generate_text_box('conditions[regip]', $input['conditions']['regip'], array('id' => 'regip')), 'regip'); $form_container->output_row($lang->last_known_ip, $lang->wildcard, $form->generate_text_box('conditions[lastip]', $input['conditions']['lastip'], array('id' => 'lastip')), 'lastip'); $form_container->output_row($lang->posted_with_ip, $lang->wildcard, $form->generate_text_box('conditions[postip]', $input['conditions']['postip'], array('id' => 'postip')), 'postip');	$form_container->output_row($lang->reg_ip_matches, $lang->wildcard, $form->generate_text_box('conditions[regip]', $input['conditions']['regip'], array('id' => 'regip')), 'regip'); $form_container->output_row($lang->last_known_ip, $lang->wildcard, $form->generate_text_box('conditions[lastip]', $input['conditions']['lastip'], array('id' => 'lastip')), 'lastip'); $form_container->output_row($lang->posted_with_ip, $lang->wildcard, $form->generate_text_box('conditions[postip]', $input['conditions']['postip'], array('id' => 'postip')), 'postip');