Vergleich admin/modules/user/users.php - 1.8.7 - 1.8.10

Keine Änderungen Hinzugefügt Modifiziert Entfernt
Zeile 254	Zeile 254
my_mail($user['email'], $lang->sprintf($lang->emailsubject_activateaccount, $mybb->settings['bbname']), $message); // Log admin action	my_mail($user['email'], $lang->sprintf($lang->emailsubject_activateaccount, $mybb->settings['bbname']), $message); // Log admin action
log_admin_action($user['uid'], $user['username']);	log_admin_action($user['uid'], htmlspecialchars_uni($user['username']));
if($mybb->input['from'] == "home") {	if($mybb->input['from'] == "home") {
Zeile 359	Zeile 359
$plugins->run_hooks("admin_user_users_add_commit"); // Log admin action	$plugins->run_hooks("admin_user_users_add_commit"); // Log admin action
log_admin_action($user_info['uid'], $user_info['username']);	log_admin_action($user_info['uid'], htmlspecialchars_uni($user_info['username']));
flash_message($lang->success_user_created, 'success'); admin_redirect("index.php?module=user-users&action=edit&uid={$user_info['uid']}");	flash_message($lang->success_user_created, 'success'); admin_redirect("index.php?module=user-users&action=edit&uid={$user_info['uid']}");
Zeile 393	Zeile 393
} $form_container = new FormContainer($lang->required_profile_info);	} $form_container = new FormContainer($lang->required_profile_info);
$form_container->output_row($lang->username." <em>*</em>", "", $form->generate_text_box('username', $mybb->input['username'], array('id' => 'username')), 'username');	$form_container->output_row($lang->username." <em>*</em>", "", $form->generate_text_box('username', htmlspecialchars_uni($mybb->get_input('username')), array('id' => 'username')), 'username');
$form_container->output_row($lang->password." <em></em>", "", $form->generate_password_box('password', $mybb->input['password'], array('id' => 'password', 'autocomplete' => 'off')), 'password'); $form_container->output_row($lang->confirm_password." <em></em>", "", $form->generate_password_box('confirm_password', $mybb->input['confirm_password'], array('id' => 'confirm_new_password')), 'confirm_new_password'); $form_container->output_row($lang->email_address." <em>*</em>", "", $form->generate_text_box('email', $mybb->input['email'], array('id' => 'email')), 'email');	$form_container->output_row($lang->password." <em></em>", "", $form->generate_password_box('password', $mybb->input['password'], array('id' => 'password', 'autocomplete' => 'off')), 'password'); $form_container->output_row($lang->confirm_password." <em></em>", "", $form->generate_password_box('confirm_password', $mybb->input['confirm_password'], array('id' => 'confirm_new_password')), 'confirm_new_password'); $form_container->output_row($lang->email_address." <em>*</em>", "", $form->generate_text_box('email', $mybb->input['email'], array('id' => 'email')), 'email');
Zeile 405	Zeile 405
{ $options[$usergroup['gid']] = htmlspecialchars_uni($usergroup['title']); $display_group_options[$usergroup['gid']] = htmlspecialchars_uni($usergroup['title']);	{ $options[$usergroup['gid']] = htmlspecialchars_uni($usergroup['title']); $display_group_options[$usergroup['gid']] = htmlspecialchars_uni($usergroup['title']);
}	}
$form_container->output_row($lang->primary_user_group." <em></em>", "", $form->generate_select_box('usergroup', $options, $mybb->input['usergroup'], array('id' => 'usergroup')), 'usergroup'); $form_container->output_row($lang->additional_user_groups, $lang->additional_user_groups_desc, $form->generate_select_box('additionalgroups[]', $options, $mybb->input['additionalgroups'], array('id' => 'additionalgroups', 'multiple' => true, 'size' => 5)), 'additionalgroups'); $form_container->output_row($lang->display_user_group." <em></em>", "", $form->generate_select_box('displaygroup', $display_group_options, $mybb->input['displaygroup'], array('id' => 'displaygroup')), 'displaygroup'); // Output custom profile fields - required output_custom_profile_fields($profile_fields['required'], $mybb->input['profile_fields'], $form_container, $form);	$form_container->output_row($lang->primary_user_group." <em></em>", "", $form->generate_select_box('usergroup', $options, $mybb->input['usergroup'], array('id' => 'usergroup')), 'usergroup'); $form_container->output_row($lang->additional_user_groups, $lang->additional_user_groups_desc, $form->generate_select_box('additionalgroups[]', $options, $mybb->input['additionalgroups'], array('id' => 'additionalgroups', 'multiple' => true, 'size' => 5)), 'additionalgroups'); $form_container->output_row($lang->display_user_group." <em></em>", "", $form->generate_select_box('displaygroup', $display_group_options, $mybb->input['displaygroup'], array('id' => 'displaygroup')), 'displaygroup'); // Output custom profile fields - required output_custom_profile_fields($profile_fields['required'], $mybb->input['profile_fields'], $form_container, $form);

$form_container->end(); $buttons[] = $form->generate_submit_button($lang->save_user); $form->output_submit_wrapper($buttons);	$form_container->end(); $buttons[] = $form->generate_submit_button($lang->save_user); $form->output_submit_wrapper($buttons);
Zeile 447	Zeile 447
if(is_array($mybb->input['additionalgroups'])) { foreach($mybb->input['additionalgroups'] as $key => $gid)	if(is_array($mybb->input['additionalgroups'])) { foreach($mybb->input['additionalgroups'] as $key => $gid)
{	{
if($gid == $mybb->input['usergroup']) { unset($mybb->input['additionalgroups'][$key]);	if($gid == $mybb->input['usergroup']) { unset($mybb->input['additionalgroups'][$key]);
Zeile 608	Zeile 608
{ $avatar = upload_avatar($_FILES['avatar_upload'], $user['uid']); if($avatar['error'])	{ $avatar = upload_avatar($_FILES['avatar_upload'], $user['uid']); if($avatar['error'])
{	{
$errors = array($avatar['error']); } else	$errors = array($avatar['error']); } else
Zeile 621	Zeile 621
"avatar" => $avatar['avatar'].'?dateline='.TIME_NOW, "avatardimensions" => $avatar_dimensions, "avatartype" => "upload"	"avatar" => $avatar['avatar'].'?dateline='.TIME_NOW, "avatardimensions" => $avatar_dimensions, "avatartype" => "upload"
); }	); }
} // Are we setting a new avatar from a URL? else if($mybb->input['avatar_url'] && $mybb->input['avatar_url'] != $user['avatar']) {	} // Are we setting a new avatar from a URL? else if($mybb->input['avatar_url'] && $mybb->input['avatar_url'] != $user['avatar']) {
if(filter_var($mybb->input['avatar_url'], FILTER_VALIDATE_EMAIL) !== false)	if(!$mybb->settings['allowremoteavatars'])
{	{
// Gravatar $email = md5(strtolower(trim($mybb->input['avatar_url']))); $s = ''; if(!$mybb->settings['maxavatardims']) { $mybb->settings['maxavatardims'] = '100x100'; // Hard limit of 100 if there are no limits } // Because Gravatars are square, hijack the width list($maxwidth, $maxheight) = explode("x", my_strtolower($mybb->settings['maxavatardims'])); $s = "?s={$maxwidth}"; $maxheight = (int)$maxwidth; $extra_user_updates = array( "avatar" => "https://www.gravatar.com/avatar/{$email}{$s}", "avatardimensions" => "{$maxheight}\|{$maxheight}", "avatartype" => "gravatar" );	$errors = array($lang->error_remote_avatar_not_allowed);
} else {	} else {
$mybb->input['avatar_url'] = preg_replace("#script:#i", "", $mybb->input['avatar_url']); $ext = get_extension($mybb->input['avatar_url']);	if(filter_var($mybb->input['avatar_url'], FILTER_VALIDATE_EMAIL) !== false) { // Gravatar $email = md5(strtolower(trim($mybb->input['avatar_url']))); $s = ''; if(!$mybb->settings['maxavatardims']) { $mybb->settings['maxavatardims'] = '100x100'; // Hard limit of 100 if there are no limits } // Because Gravatars are square, hijack the width list($maxwidth, $maxheight) = explode("x", my_strtolower($mybb->settings['maxavatardims']));

// Copy the avatar to the local server (work around remote URL access disabled for getimagesize) $file = fetch_remote_file($mybb->input['avatar_url']); if(!$file) { $avatar_error = $lang->error_invalidavatarurl; } else { $tmp_name = "../".$mybb->settings['avataruploadpath']."/remote_".md5(random_str()); $fp = @fopen($tmp_name, "wb"); if(!$fp) {	$s = "?s={$maxwidth}"; $maxheight = (int)$maxwidth; $extra_user_updates = array( "avatar" => "https://www.gravatar.com/avatar/{$email}{$s}", "avatardimensions" => "{$maxheight}\|{$maxheight}", "avatartype" => "gravatar" ); } else { $mybb->input['avatar_url'] = preg_replace("#script:#i", "", $mybb->input['avatar_url']); $ext = get_extension($mybb->input['avatar_url']); // Copy the avatar to the local server (work around remote URL access disabled for getimagesize) $file = fetch_remote_file($mybb->input['avatar_url']); if(!$file) {
$avatar_error = $lang->error_invalidavatarurl;	$avatar_error = $lang->error_invalidavatarurl;
}	}
else {	else {
fwrite($fp, $file); fclose($fp); list($width, $height, $type) = @getimagesize($tmp_name); @unlink($tmp_name); echo $type; if(!$type) { $avatar_error = $lang->error_invalidavatarurl; } } } if(empty($avatar_error)) { if($width && $height && $mybb->settings['maxavatardims'] != "") { list($maxwidth, $maxheight) = explode("x", my_strtolower($mybb->settings['maxavatardims'])); if(($maxwidth && $width > $maxwidth) \|\| ($maxheight && $height > $maxheight))	$tmp_name = "../".$mybb->settings['avataruploadpath']."/remote_".md5(random_str()); $fp = @fopen($tmp_name, "wb"); if(!$fp)
{	{
$lang->error_avatartoobig = $lang->sprintf($lang->error_avatartoobig, $maxwidth, $maxheight); $avatar_error = $lang->error_avatartoobig;	$avatar_error = $lang->error_invalidavatarurl; } else { fwrite($fp, $file); fclose($fp); list($width, $height, $type) = @getimagesize($tmp_name); @unlink($tmp_name); echo $type; if(!$type) { $avatar_error = $lang->error_invalidavatarurl; }
} }	} }
}

if(empty($avatar_error)) { if($width > 0 && $height > 0)	if(empty($avatar_error))
{	{
$avatar_dimensions = (int)$width."\|".(int)$height;	if($width && $height && $mybb->settings['maxavatardims'] != "") { list($maxwidth, $maxheight) = explode("x", my_strtolower($mybb->settings['maxavatardims'])); if(($maxwidth && $width > $maxwidth) \|\| ($maxheight && $height > $maxheight)) { $lang->error_avatartoobig = $lang->sprintf($lang->error_avatartoobig, $maxwidth, $maxheight); $avatar_error = $lang->error_avatartoobig; } } } if(empty($avatar_error)) { if($width > 0 && $height > 0) { $avatar_dimensions = (int)$width."\|".(int)$height; } $extra_user_updates = array( "avatar" => $db->escape_string($mybb->input['avatar_url'].'?dateline='.TIME_NOW), "avatardimensions" => $avatar_dimensions, "avatartype" => "remote" ); remove_avatars($user['uid']); } else { $errors = array($avatar_error);
}	}
$extra_user_updates = array( "avatar" => $db->escape_string($mybb->input['avatar_url'].'?dateline='.TIME_NOW), "avatardimensions" => $avatar_dimensions, "avatartype" => "remote" ); remove_avatars($user['uid']); } else { $errors = array($avatar_error);
} } }	} } }
Zeile 740	Zeile 747
"update_length" => "suspensiontime" ) );	"update_length" => "suspensiontime" ) );

require_once MYBB_ROOT."inc/functions_warnings.php"; foreach($moderator_options as $option) {	require_once MYBB_ROOT."inc/functions_warnings.php"; foreach($moderator_options as $option) {
Zeile 752	Zeile 759
$extra_user_updates[$option['update_field']] = 0; $extra_user_updates[$option['update_length']] = 0; }	$extra_user_updates[$option['update_field']] = 0; $extra_user_updates[$option['update_length']] = 0; }

// Skip this option if we haven't selected it continue; } if($mybb->input[$option['action']])	// Skip this option if we haven't selected it continue; } if($mybb->input[$option['action']])
{	{
if((int)$mybb->input[$option['time']] == 0 && $mybb->input[$option['period']] != "never" && $user[$option['update_field']] != 1) { // User has selected a type of ban, but not entered a valid time frame $string = $option['action']."_error"; $errors[] = $lang->$string;	if((int)$mybb->input[$option['time']] == 0 && $mybb->input[$option['period']] != "never" && $user[$option['update_field']] != 1) { // User has selected a type of ban, but not entered a valid time frame $string = $option['action']."_error"; $errors[] = $lang->$string;
}	}
if(!is_array($errors)) { $suspend_length = fetch_time_length((int)$mybb->input[$option['time']], $mybb->input[$option['period']]); if($user[$option['update_field']] == 1 && ($mybb->input[$option['time']] \|\| $mybb->input[$option['period']] == "never"))	if(!is_array($errors)) { $suspend_length = fetch_time_length((int)$mybb->input[$option['time']], $mybb->input[$option['period']]); if($user[$option['update_field']] == 1 && ($mybb->input[$option['time']] \|\| $mybb->input[$option['period']] == "never"))
{	{
// We already have a suspension, but entered a new time if($suspend_length == "-1") {	// We already have a suspension, but entered a new time if($suspend_length == "-1") {
Zeile 791	Zeile 798
if($suspend_length == "-1") { $extra_user_updates[$option['update_length']] = 0;	if($suspend_length == "-1") { $extra_user_updates[$option['update_length']] = 0;
}	}
else { $extra_user_updates[$option['update_length']] = TIME_NOW + $suspend_length;	else { $extra_user_updates[$option['update_length']] = TIME_NOW + $suspend_length;
Zeile 804	Zeile 811
if($extra_user_updates['moderateposts'] && $extra_user_updates['suspendposting']) { $errors[] = $lang->suspendmoderate_error;	if($extra_user_updates['moderateposts'] && $extra_user_updates['suspendposting']) { $errors[] = $lang->suspendmoderate_error;
}	}
if(isset($away_in_past))	if(isset($away_in_past))
{	{
$errors[] = $lang->error_acp_return_date_past; } if(!$errors)	$errors[] = $lang->error_acp_return_date_past; } if(!$errors)
{	{
$user_info = $userhandler->update_user(); $plugins->run_hooks("admin_user_users_edit_commit_start");	$user_info = $userhandler->update_user(); $plugins->run_hooks("admin_user_users_edit_commit_start");
Zeile 826	Zeile 833
'includesig' => ($mybb->input['update_posts'] == 'enable' ? 1 : 0) ); $db->update_query("posts", $update_signature, "uid='{$user['uid']}'");	'includesig' => ($mybb->input['update_posts'] == 'enable' ? 1 : 0) ); $db->update_query("posts", $update_signature, "uid='{$user['uid']}'");
}	}
$plugins->run_hooks("admin_user_users_edit_commit");	$plugins->run_hooks("admin_user_users_edit_commit");
Zeile 836	Zeile 843
} // Log admin action	} // Log admin action
log_admin_action($user['uid'], $mybb->input['username']);	log_admin_action($user['uid'], htmlspecialchars_uni($mybb->input['username']));
flash_message($lang->success_user_updated, 'success'); admin_redirect("index.php?module=user-users");	flash_message($lang->success_user_updated, 'success'); admin_redirect("index.php?module=user-users");
}	}
} }	} }
Zeile 867	Zeile 874
// We need to fetch this users profile field values $query = $db->simple_select("userfields", "*", "ufid='{$user['uid']}'"); $mybb->input['profile_fields'] = $db->fetch_array($query);	// We need to fetch this users profile field values $query = $db->simple_select("userfields", "*", "ufid='{$user['uid']}'"); $mybb->input['profile_fields'] = $db->fetch_array($query);
}	}
if($mybb->input['bday1'] \|\| $mybb->input['bday2'] \|\| $mybb->input['bday3'])	if($mybb->input['bday1'] \|\| $mybb->input['bday2'] \|\| $mybb->input['bday3'])
{	{
$mybb->input['bday'][0] = $mybb->input['bday1']; $mybb->input['bday'][1] = $mybb->input['bday2']; $mybb->input['bday'][2] = $mybb->get_input('bday3', MyBB::INPUT_INT);	$mybb->input['bday'][0] = $mybb->input['bday1']; $mybb->input['bday'][1] = $mybb->input['bday2']; $mybb->input['bday'][2] = $mybb->get_input('bday3', MyBB::INPUT_INT);
}	}
else { $mybb->input['bday'] = array(0, 0, '');	else { $mybb->input['bday'] = array(0, 0, '');
Zeile 882	Zeile 889
if($user['birthday']) { $mybb->input['bday'] = explode('-', $user['birthday']);	if($user['birthday']) { $mybb->input['bday'] = explode('-', $user['birthday']);
} }	} }
if($mybb->input['away_day'] \|\| $mybb->input['away_month'] \|\| $mybb->input['away_year']) {	if($mybb->input['away_day'] \|\| $mybb->input['away_month'] \|\| $mybb->input['away_year']) {
Zeile 898	Zeile 905
if($user['returndate']) { list($mybb->input['away_day'], $mybb->input['away_month'], $mybb->input['away_year']) = explode('-', $user['returndate']);	if($user['returndate']) { list($mybb->input['away_day'], $mybb->input['away_month'], $mybb->input['away_year']) = explode('-', $user['returndate']);
}	}
} // Fetch custom profile fields	} // Fetch custom profile fields
Zeile 923	Zeile 930
<link rel="stylesheet" href="../jscripts/sceditor/editor_themes/mybb.css" type="text/css" media="all" /> <script type="text/javascript" src="../jscripts/sceditor/jquery.sceditor.bbcode.min.js?ver=1805"></script>	<link rel="stylesheet" href="../jscripts/sceditor/editor_themes/mybb.css" type="text/css" media="all" /> <script type="text/javascript" src="../jscripts/sceditor/jquery.sceditor.bbcode.min.js?ver=1805"></script>
<script type="text/javascript" src="../jscripts/bbcodes_sceditor.js?ver=1804"></script>	<script type="text/javascript" src="../jscripts/bbcodes_sceditor.js?ver=1808"></script>
<script type="text/javascript" src="../jscripts/sceditor/editor_plugins/undo.js?ver=1805"></script> EOF; $page->output_header($lang->edit_user);	<script type="text/javascript" src="../jscripts/sceditor/editor_plugins/undo.js?ver=1805"></script> EOF; $page->output_header($lang->edit_user);
Zeile 945	Zeile 952
// Is this user a COPPA user? We show a warning & activate link if($user['coppauser'])	// Is this user a COPPA user? We show a warning & activate link if($user['coppauser'])
{	{
echo $lang->sprintf($lang->warning_coppa_user, $user['uid']); }	echo $lang->sprintf($lang->warning_coppa_user, $user['uid']); }

$tabs = array( "overview" => $lang->overview, "profile" => $lang->profile,	$tabs = array( "overview" => $lang->overview, "profile" => $lang->profile,
Zeile 959	Zeile 966
); $tabs = $plugins->run_hooks("admin_user_users_edit_graph_tabs", $tabs); $page->output_tab_control($tabs);	); $tabs = $plugins->run_hooks("admin_user_users_edit_graph_tabs", $tabs); $page->output_tab_control($tabs);
//	//
// OVERVIEW // echo "<div id=\"tab_overview\">\n";	// OVERVIEW // echo "<div id=\"tab_overview\">\n";
Zeile 970	Zeile 977
// Avatar $avatar_dimensions = explode("\|", $user['avatardimensions']);	// Avatar $avatar_dimensions = explode("\|", $user['avatardimensions']);
if($user['avatar'])	if($user['avatar'] && (my_strpos($user['avatar'], '://') === false \|\| $mybb->settings['allowremoteavatars']))
{ if($user['avatardimensions']) {	{ if($user['avatardimensions']) {
Zeile 985	Zeile 992
"height" => 120 ); }	"height" => 120 ); }
if(my_substr($user['avatar'], 0, 7) !== 'http://' && my_substr($user['avatar'], 0, 8) !== 'https://')	if(!my_validate_url($user['avatar']))
{ $user['avatar'] = "../{$user['avatar']}\n"; } } else {	{ $user['avatar'] = "../{$user['avatar']}\n"; } } else {
$user['avatar'] = "../".$mybb->settings['useravatar'];	if(my_validate_url($mybb->settings['useravatar'])) { $user['avatar'] = str_replace('{theme}', 'images', $mybb->settings['useravatar']); } else { $user['avatar'] = "../".str_replace('{theme}', 'images', $mybb->settings['useravatar']); }
$scaled_dimensions = array( "width" => 120, "height" => 120	$scaled_dimensions = array( "width" => 120, "height" => 120
Zeile 1010	Zeile 1024
$reg_date = my_date('relative', $user['regdate']); if($user['dst'] == 1) {	$reg_date = my_date('relative', $user['regdate']); if($user['dst'] == 1) {
$timezone = $user['timezone']+1;	$timezone = (float)$user['timezone']+1;
} else {	} else {
$timezone = $user['timezone'];	$timezone = (float)$user['timezone'];
} $local_date = gmdate($mybb->settings['dateformat'], TIME_NOW + ($timezone * 3600)); $local_time = gmdate($mybb->settings['timeformat'], TIME_NOW + ($timezone * 3600));	} $local_date = gmdate($mybb->settings['dateformat'], TIME_NOW + ($timezone * 3600)); $local_time = gmdate($mybb->settings['timeformat'], TIME_NOW + ($timezone * 3600));
Zeile 1098	Zeile 1112
$table->construct_cell("<strong>{$lang->last_known_ip}:</strong> ".my_inet_ntop($db->unescape_binary($user['lastip']))); $table->construct_row();	$table->construct_cell("<strong>{$lang->last_known_ip}:</strong> ".my_inet_ntop($db->unescape_binary($user['lastip']))); $table->construct_row();
$table->output("{$lang->user_overview}: {$user['username']}");	$username = htmlspecialchars_uni($user['username']); $table->output("{$lang->user_overview}: {$username}");
echo "</div>\n"; //	echo "</div>\n"; //
Zeile 1106	Zeile 1121
// echo "<div id=\"tab_profile\">\n";	// echo "<div id=\"tab_profile\">\n";
$form_container = new FormContainer($lang->required_profile_info.": {$user['username']}");	$form_container = new FormContainer($lang->required_profile_info.": ".htmlspecialchars_uni($user['username']));
$form_container->output_row($lang->username." <em>*</em>", "", $form->generate_text_box('username', $mybb->input['username'], array('id' => 'username')), 'username'); $form_container->output_row($lang->new_password, $lang->new_password_desc, $form->generate_password_box('new_password', $mybb->input['new_password'], array('id' => 'new_password', 'autocomplete' => 'off')), 'new_password'); $form_container->output_row($lang->confirm_new_password, $lang->new_password_desc, $form->generate_password_box('confirm_new_password', $mybb->input['confirm_new_password'], array('id' => 'confirm_new_password')), 'confirm_new_password');	$form_container->output_row($lang->username." <em>*</em>", "", $form->generate_text_box('username', $mybb->input['username'], array('id' => 'username')), 'username'); $form_container->output_row($lang->new_password, $lang->new_password_desc, $form->generate_password_box('new_password', $mybb->input['new_password'], array('id' => 'new_password', 'autocomplete' => 'off')), 'new_password'); $form_container->output_row($lang->confirm_new_password, $lang->new_password_desc, $form->generate_password_box('confirm_new_password', $mybb->input['confirm_new_password'], array('id' => 'confirm_new_password')), 'confirm_new_password');
Zeile 1141	Zeile 1156
$form_container->end();	$form_container->end();
$form_container = new FormContainer($lang->optional_profile_info.": {$user['username']}");	$form_container = new FormContainer($lang->optional_profile_info.': '.htmlspecialchars_uni($user['username']));
$form_container->output_row($lang->custom_user_title, $lang->custom_user_title_desc, $form->generate_text_box('usertitle', $mybb->input['usertitle'], array('id' => 'usertitle')), 'usertitle'); $form_container->output_row($lang->website, "", $form->generate_text_box('website', $mybb->input['website'], array('id' => 'website')), 'website'); $form_container->output_row($lang->icq_number, "", $form->generate_numeric_field('icq', $mybb->input['icq'], array('id' => 'icq', 'min' => 0)), 'icq');	$form_container->output_row($lang->custom_user_title, $lang->custom_user_title_desc, $form->generate_text_box('usertitle', $mybb->input['usertitle'], array('id' => 'usertitle')), 'usertitle'); $form_container->output_row($lang->website, "", $form->generate_text_box('website', $mybb->input['website'], array('id' => 'website')), 'website'); $form_container->output_row($lang->icq_number, "", $form->generate_numeric_field('icq', $mybb->input['icq'], array('id' => 'icq', 'min' => 0)), 'icq');
Zeile 1187	Zeile 1202
if($mybb->settings['allowaway'] != 0) {	if($mybb->settings['allowaway'] != 0) {
$form_container = new FormContainer($lang->away_information.": {$user['username']}");	$form_container = new FormContainer($lang->away_information.': '.htmlspecialchars_uni($user['username']));
$awaycheck = array(false, true); if($mybb->input['away'] == 1) {	$awaycheck = array(false, true); if($mybb->input['away'] == 1) {
Zeile 1215	Zeile 1230
// Plugin hook note - we should add hooks in above each output_row for the below so users can add their own options to each group :> echo "<div id=\"tab_settings\">\n";	// Plugin hook note - we should add hooks in above each output_row for the below so users can add their own options to each group :> echo "<div id=\"tab_settings\">\n";
$form_container = new FormContainer($lang->account_settings.": {$user['username']}");	$form_container = new FormContainer($lang->account_settings.': '.htmlspecialchars_uni($user['username']));
$login_options = array( $form->generate_check_box("invisible", 1, $lang->hide_from_whos_online, array("checked" => $mybb->input['invisible'])), );	$login_options = array( $form->generate_check_box("invisible", 1, $lang->hide_from_whos_online, array("checked" => $mybb->input['invisible'])), );
Zeile 1359	Zeile 1374
$sig_imgcode = $lang->on; } echo "<div id=\"tab_signature\">\n";	$sig_imgcode = $lang->on; } echo "<div id=\"tab_signature\">\n";
$form_container = new FormContainer("{$lang->signature}: {$user['username']}");	$form_container = new FormContainer($lang->signature.': '.htmlspecialchars_uni($user['username']));
$form_container->output_row($lang->signature, $lang->sprintf($lang->signature_desc, $sig_mycode, $sig_smilies, $sig_imgcode, $sig_html), $signature_editor, 'signature'); $periods = array(	$form_container->output_row($lang->signature, $lang->sprintf($lang->signature_desc, $sig_mycode, $sig_smilies, $sig_imgcode, $sig_html), $signature_editor, 'signature'); $periods = array(
Zeile 1481	Zeile 1496
{ $current_avatar_msg = "<br /><strong>{$lang->user_current_using_uploaded_avatar}</strong>"; }	{ $current_avatar_msg = "<br /><strong>{$lang->user_current_using_uploaded_avatar}</strong>"; }
elseif($user['avatartype'] == "remote" \|\| my_strpos(my_strtolower($user['avatar']), "http://") !== false)	elseif($user['avatartype'] == "remote" \|\| my_validate_url($user['avatar']))
{ $current_avatar_msg = "<br /><strong>{$lang->user_current_using_remote_avatar}</strong>"; $avatar_url = $user['avatar'];	{ $current_avatar_msg = "<br /><strong>{$lang->user_current_using_remote_avatar}</strong>"; $avatar_url = $user['avatar'];
Zeile 1512	Zeile 1527
$table->construct_cell($lang->avatar_desc."{$remove_avatar}<br /><small>{$max_size}</small>"); $table->construct_row();	$table->construct_cell($lang->avatar_desc."{$remove_avatar}<br /><small>{$max_size}</small>"); $table->construct_row();
$table->output($lang->avatar.": {$user['username']}");	$table->output($lang->avatar.': '.htmlspecialchars_uni($user['username']));
// Custom avatar if($mybb->settings['avatarresizing'] == "auto")	// Custom avatar if($mybb->settings['avatarresizing'] == "auto")
Zeile 1525	Zeile 1540
} $form_container = new FormContainer($lang->specify_custom_avatar); $form_container->output_row($lang->upload_avatar, $auto_resize, $form->generate_file_upload_box('avatar_upload', array('id' => 'avatar_upload')), 'avatar_upload');	} $form_container = new FormContainer($lang->specify_custom_avatar); $form_container->output_row($lang->upload_avatar, $auto_resize, $form->generate_file_upload_box('avatar_upload', array('id' => 'avatar_upload')), 'avatar_upload');
$form_container->output_row($lang->or_specify_avatar_url, "", $form->generate_text_box('avatar_url', $avatar_url, array('id' => 'avatar_url')), 'avatar_url');	if($mybb->settings['allowremoteavatars']) { $form_container->output_row($lang->or_specify_avatar_url, "", $form->generate_text_box('avatar_url', $avatar_url, array('id' => 'avatar_url')), 'avatar_url'); }
$form_container->end(); echo "</div>\n";	$form_container->end(); echo "</div>\n";
Zeile 1541	Zeile 1559
); echo "<div id=\"tab_modoptions\">\n";	); echo "<div id=\"tab_modoptions\">\n";
$form_container = new FormContainer($lang->mod_options.": {$user['username']}");	$form_container = new FormContainer($lang->mod_options.': '.htmlspecialchars_uni($user['username']));
$form_container->output_row($lang->user_notes, '', $form->generate_text_area('usernotes', $mybb->input['usernotes'], array('id' => 'usernotes')), 'usernotes'); // Mod posts	$form_container->output_row($lang->user_notes, '', $form->generate_text_area('usernotes', $mybb->input['usernotes'], array('id' => 'usernotes')), 'usernotes'); // Mod posts
Zeile 1581	Zeile 1599
} $modpost_div = '<div id="modpost">'.$existing_info.''.$lang->moderate_for.' '.$form->generate_numeric_field("modpost_time", $mybb->input['modpost_time'], array('style' => 'width: 3em;', 'min' => 0)).' '.$modpost_options.'</div>';	} $modpost_div = '<div id="modpost">'.$existing_info.''.$lang->moderate_for.' '.$form->generate_numeric_field("modpost_time", $mybb->input['modpost_time'], array('style' => 'width: 3em;', 'min' => 0)).' '.$modpost_options.'</div>';
$lang->moderate_posts_info = $lang->sprintf($lang->moderate_posts_info, $user['username']);	$lang->moderate_posts_info = $lang->sprintf($lang->moderate_posts_info, htmlspecialchars_uni($user['username']));
$form_container->output_row($form->generate_check_box("moderateposting", 1, $lang->moderate_posts, array("id" => "moderateposting", "onclick" => "toggleBox('modpost');", "checked" => $mybb->input['moderateposting'])), $lang->moderate_posts_info, $modpost_div); // Suspend posts	$form_container->output_row($form->generate_check_box("moderateposting", 1, $lang->moderate_posts, array("id" => "moderateposting", "onclick" => "toggleBox('modpost');", "checked" => $mybb->input['moderateposting'])), $lang->moderate_posts_info, $modpost_div); // Suspend posts
Zeile 1621	Zeile 1639
} $suspost_div = '<div id="suspost">'.$existing_info.''.$lang->suspend_for.' '.$form->generate_numeric_field("suspost_time", $mybb->input['suspost_time'], array('style' => 'width: 3em;', 'min' => 0)).' '.$suspost_options.'</div>';	} $suspost_div = '<div id="suspost">'.$existing_info.''.$lang->suspend_for.' '.$form->generate_numeric_field("suspost_time", $mybb->input['suspost_time'], array('style' => 'width: 3em;', 'min' => 0)).' '.$suspost_options.'</div>';
$lang->suspend_posts_info = $lang->sprintf($lang->suspend_posts_info, $user['username']);	$lang->suspend_posts_info = $lang->sprintf($lang->suspend_posts_info, htmlspecialchars_uni($user['username']));
$form_container->output_row($form->generate_check_box("suspendposting", 1, $lang->suspend_posts, array("id" => "suspendposting", "onclick" => "toggleBox('suspost');", "checked" => $mybb->input['suspendposting'])), $lang->suspend_posts_info, $suspost_div);	$form_container->output_row($form->generate_check_box("suspendposting", 1, $lang->suspend_posts, array("id" => "suspendposting", "onclick" => "toggleBox('suspost');", "checked" => $mybb->input['suspendposting'])), $lang->suspend_posts_info, $suspost_div);
Zeile 1738	Zeile 1756
$plugins->run_hooks("admin_user_users_delete_commit_end");	$plugins->run_hooks("admin_user_users_delete_commit_end");
log_admin_action($user['uid'], $user['username']);	log_admin_action($user['uid'], htmlspecialchars_uni($user['username']));
flash_message($lang->success_user_deleted, 'success'); admin_redirect("index.php?module=user-users");	flash_message($lang->success_user_deleted, 'success'); admin_redirect("index.php?module=user-users");
Zeile 1818	Zeile 1836
$user = $db->fetch_array($query); // Log admin action	$user = $db->fetch_array($query); // Log admin action
log_admin_action($user['uid'], $user['username']);	log_admin_action($user['uid'], htmlspecialchars_uni($user['username']));
$table = new Table;	$table = new Table;
Zeile 1883	Zeile 1901
$table->construct_row(); }	$table->construct_row(); }
$table->output($lang->ip_address_for." {$user['username']}");	$table->output($lang->ip_address_for.' '.htmlspecialchars_uni($user['username']));
$page->output_footer(); }	$page->output_footer(); }
Zeile 2113	Zeile 2131
$cache->update_awaitingactivation(); // Log admin action	$cache->update_awaitingactivation(); // Log admin action
log_admin_action($source_user['uid'], $source_user['username'], $destination_user['uid'], $destination_user['username']);	log_admin_action($source_user['uid'], htmlspecialchars_uni($source_user['username']), $destination_user['uid'], htmlspecialchars_uni($destination_user['username']));
// Redirect!	// Redirect!
flash_message("<strong>{$source_user['username']}</strong> {$lang->success_merged} {$destination_user['username']}", "success");	$username = htmlspecialchars_uni($source_user['username']); $destination_username = htmlspecialchars_uni($destination_user['username']); flash_message("<strong>{$username}</strong> {$lang->success_merged} {$destination_username}", "success");
admin_redirect("index.php?module=user-users"); exit; }	admin_redirect("index.php?module=user-users"); exit; }
Zeile 2617	Zeile 2637
foreach($ban_times as $time => $period) { if($time != '---')	foreach($ban_times as $time => $period) { if($time != '---')
{ $friendly_time = my_date("D, jS M Y @ g:ia", ban_date2timestamp($time));	{ $friendly_time = my_date("D, jS M Y @ {$mybb->settings['timeformat']}", ban_date2timestamp($time));
$period = "{$period} ({$friendly_time})"; } $length_list[$time] = $period;	$period = "{$period} ({$friendly_time})"; } $length_list[$time] = $period;
Zeile 3102	Zeile 3122
function build_users_view($view) { global $mybb, $db, $cache, $lang, $user_view_fields, $page;	function build_users_view($view) { global $mybb, $db, $cache, $lang, $user_view_fields, $page;
	if($view['view_type'] != 'card') { $view['view_type'] = 'table'; }
$view_title = ''; if($view['title'])	$view_title = ''; if($view['title'])
Zeile 3124	Zeile 3149
if(!is_array($view['conditions'])) { $view['conditions'] = my_unserialize($view['conditions']);	if(!is_array($view['conditions'])) { $view['conditions'] = my_unserialize($view['conditions']);
}	}
if(!is_array($view['fields'])) { $view['fields'] = my_unserialize($view['fields']);	if(!is_array($view['fields'])) { $view['fields'] = my_unserialize($view['fields']);
Zeile 3136	Zeile 3161
if(isset($mybb->input['username'])) { $view['conditions']['username'] = $mybb->input['username'];	if(isset($mybb->input['username'])) { $view['conditions']['username'] = $mybb->input['username'];
	$view['url'] .= "&username=".urlencode(htmlspecialchars_uni($mybb->input['username']));
} if($view['vid']) {	} if($view['vid']) {
Zeile 3146	Zeile 3172
// If this is a custom view we need to save everything ready to pass it on from page to page global $admin_session; if(!$mybb->input['search_id'])	// If this is a custom view we need to save everything ready to pass it on from page to page global $admin_session; if(!$mybb->input['search_id'])
{	{
$search_id = md5(random_str()); $admin_session['data']['user_views'][$search_id] = $view; update_admin_session('user_views', $admin_session['data']['user_views']); $mybb->input['search_id'] = $search_id; } $view['url'] .= "&search_id=".htmlspecialchars_uni($mybb->input['search_id']);	$search_id = md5(random_str()); $admin_session['data']['user_views'][$search_id] = $view; update_admin_session('user_views', $admin_session['data']['user_views']); $mybb->input['search_id'] = $search_id; } $view['url'] .= "&search_id=".htmlspecialchars_uni($mybb->input['search_id']);
} if(isset($mybb->input['username'])) { $view['url'] .= "&username=".urlencode(htmlspecialchars_uni($mybb->input['username']));
} if(!isset($admin_session['data']['last_users_view']) \|\| $admin_session['data']['last_users_view'] != str_replace("&", "&", $view['url']))	} if(!isset($admin_session['data']['last_users_view']) \|\| $admin_session['data']['last_users_view'] != str_replace("&", "&", $view['url']))
Zeile 3340	Zeile 3361
if($input == $lang->na) { continue;	if($input == $lang->na) { continue;
}	}
if(strpos($column, '_blank') !== false) {	if(strpos($column, '_blank') !== false) {
Zeile 3482	Zeile 3503
} if($view['sortorder'] != "desc")	} if($view['sortorder'] != "desc")
{	{
$view['sortorder'] = "asc"; }	$view['sortorder'] = "asc"; }
Zeile 3500	Zeile 3521
while($user = $db->fetch_array($query)) { $comma = $groups_list = '';	while($user = $db->fetch_array($query)) { $comma = $groups_list = '';
	$user['username'] = htmlspecialchars_uni($user['username']);
$user['view']['username'] = "<a href=\"index.php?module=user-users&action=edit&uid={$user['uid']}\">".format_name($user['username'], $user['usergroup'], $user['displaygroup'])."</a>"; $user['view']['usergroup'] = htmlspecialchars_uni($usergroups[$user['usergroup']]['title']); if($user['additionalgroups'])	$user['view']['username'] = "<a href=\"index.php?module=user-users&action=edit&uid={$user['uid']}\">".format_name($user['username'], $user['usergroup'], $user['displaygroup'])."</a>"; $user['view']['usergroup'] = htmlspecialchars_uni($usergroups[$user['usergroup']]['title']); if($user['additionalgroups'])
Zeile 3554	Zeile 3576
$popup->add_item($lang->delete_user, "index.php?module=user-users&action=delete&uid={$user['uid']}&my_post_key={$mybb->post_code}", "return AdminCP.deleteConfirmation(this, '{$lang->user_deletion_confirmation}')"); $popup->add_item($lang->show_referred_users, "index.php?module=user-users&action=referrers&uid={$user['uid']}"); $popup->add_item($lang->show_ip_addresses, "index.php?module=user-users&action=ipaddresses&uid={$user['uid']}");	$popup->add_item($lang->delete_user, "index.php?module=user-users&action=delete&uid={$user['uid']}&my_post_key={$mybb->post_code}", "return AdminCP.deleteConfirmation(this, '{$lang->user_deletion_confirmation}')"); $popup->add_item($lang->show_referred_users, "index.php?module=user-users&action=referrers&uid={$user['uid']}"); $popup->add_item($lang->show_ip_addresses, "index.php?module=user-users&action=ipaddresses&uid={$user['uid']}");
$popup->add_item($lang->show_attachments, "index.php?module=forum-attachments&results=1&username=".urlencode(htmlspecialchars_uni($user['username'])));	$popup->add_item($lang->show_attachments, "index.php?module=forum-attachments&results=1&username=".urlencode($user['username']));
$user['view']['controls'] = $popup->fetch(); // Fetch the reputation for this user	$user['view']['controls'] = $popup->fetch(); // Fetch the reputation for this user
Zeile 3582	Zeile 3604
$user['view']['warninglevel'] = get_colored_warning_level($warning_level); }	$user['view']['warninglevel'] = get_colored_warning_level($warning_level); }
if($user['avatar'] && my_substr($user['avatar'], 0, 7) !== 'http://' && my_substr($user['avatar'], 0, 8) !== 'https://')	if($user['avatar'] && !my_validate_url($user['avatar']))
{ $user['avatar'] = "../{$user['avatar']}"; }	{ $user['avatar'] = "../{$user['avatar']}"; }
Zeile 3594	Zeile 3616
{ $scaled_avatar = fetch_scaled_avatar($user, 34, 34); }	{ $scaled_avatar = fetch_scaled_avatar($user, 34, 34); }
if(!$user['avatar'])	if(!$user['avatar'] \|\| (my_strpos($user['avatar'], '://') !== false && !$mybb->settings['allowremoteavatars']))
{	{
$user['avatar'] = "../".$mybb->settings['useravatar'];	if(my_validate_url($mybb->settings['useravatar'])) { $user['avatar'] = str_replace('{theme}', 'images', $mybb->settings['useravatar']); } else { $user['avatar'] = "../".str_replace('{theme}', 'images', $mybb->settings['useravatar']); }
} $user['view']['avatar'] = "<img src=\"".htmlspecialchars_uni($user['avatar'])."\" alt=\"\" width=\"{$scaled_avatar['width']}\" height=\"{$scaled_avatar['height']}\" />"; // Convert IP's to readable $user['regip'] = my_inet_ntop($db->unescape_binary($user['regip'])); $user['lastip'] = my_inet_ntop($db->unescape_binary($user['lastip']));	} $user['view']['avatar'] = "<img src=\"".htmlspecialchars_uni($user['avatar'])."\" alt=\"\" width=\"{$scaled_avatar['width']}\" height=\"{$scaled_avatar['height']}\" />"; // Convert IP's to readable $user['regip'] = my_inet_ntop($db->unescape_binary($user['regip'])); $user['lastip'] = my_inet_ntop($db->unescape_binary($user['lastip']));

if($view['view_type'] == "card") { $users .= build_user_view_card($user, $view, $i);	if($view['view_type'] == "card") { $users .= build_user_view_card($user, $view, $i);
Zeile 3646	Zeile 3675
// Do we need to construct the pagination? if($num_results > $view['perpage']) {	// Do we need to construct the pagination? if($num_results > $view['perpage']) {
$pagination = draw_admin_pagination($mybb->input['page'], $view['perpage'], $num_results, $view['url']."&type={$view['view_type']}");	$view_type = htmlspecialchars_uni($view['view_type']); $pagination = draw_admin_pagination($mybb->input['page'], $view['perpage'], $num_results, $view['url']."&type={$view_type}");
$search_class = "float_right"; $search_style = "";	$search_class = "float_right"; $search_style = "";
}	}
else { $search_class = ''; $search_style = "text-align: right;";	else { $search_class = ''; $search_style = "text-align: right;";
}	}
$search_action = $view['url']; // stop &username= in the query string if($view_upos = strpos($search_action, '&username=')) { $search_action = substr($search_action, 0, $view_upos);	$search_action = $view['url']; // stop &username= in the query string if($view_upos = strpos($search_action, '&username=')) { $search_action = substr($search_action, 0, $view_upos);
}	}
$search_action = str_replace("&", "&", $search_action); $search = new Form(htmlspecialchars_uni($search_action), 'post', 'search_form', 0, '', true); $built_view = $search->construct_return; $built_view .= "<div class=\"{$search_class}\" style=\"padding-bottom: 3px; margin-top: -9px; {$search_style}\">"; $built_view .= $search->generate_hidden_field('action', 'search')."\n"; if(isset($view['conditions']['username']))	$search_action = str_replace("&", "&", $search_action); $search = new Form(htmlspecialchars_uni($search_action), 'post', 'search_form', 0, '', true); $built_view = $search->construct_return; $built_view .= "<div class=\"{$search_class}\" style=\"padding-bottom: 3px; margin-top: -9px; {$search_style}\">"; $built_view .= $search->generate_hidden_field('action', 'search')."\n"; if(isset($view['conditions']['username']))
{	{
$default_class = ''; $value = $view['conditions']['username']; }	$default_class = ''; $value = $view['conditions']['username']; }
Zeile 3677	Zeile 3707
$default_class = "search_default"; $value = $lang->search_for_user; }	$default_class = "search_default"; $value = $lang->search_for_user; }
$built_view .= $search->generate_text_box('username', $value, array('id' => 'search_keywords', 'class' => "{$default_class} field150 field_small"))."\n";	$built_view .= $search->generate_text_box('username', htmlspecialchars_uni($value), array('id' => 'search_keywords', 'class' => "{$default_class} field150 field_small"))."\n";
$built_view .= "<input type=\"submit\" class=\"search_button\" value=\"{$lang->search}\" />\n"; if($view['popup']) {	$built_view .= "<input type=\"submit\" class=\"search_button\" value=\"{$lang->search}\" />\n"; if($view['popup']) {
Zeile 3688	Zeile 3718
form.submit(function() { var search = $('#search_keywords'); if(search.val() == '' \|\| search.val() == '".addcslashes($lang->search_for_user, "'")."')	form.submit(function() { var search = $('#search_keywords'); if(search.val() == '' \|\| search.val() == '".addcslashes($lang->search_for_user, "'")."')
{	{
search.focus(); return false; }	search.focus(); return false; }
Zeile 3702	Zeile 3732
{ searched_focus.removeClass(\"search_default\"); searched_focus.val(\"\");	{ searched_focus.removeClass(\"search_default\"); searched_focus.val(\"\");
} });	} });
search.blur(function() { var searched_blur = $(this);	search.blur(function() { var searched_blur = $(this);
Zeile 3919	Zeile 3949
"height" => $max_height, );	"height" => $max_height, );
if($user['avatar'])	global $mybb; if($user['avatar'] && (my_strpos($user['avatar'], '://') === false \|\| $mybb->settings['allowremoteavatars']))
{ if($user['avatardimensions']) {	{ if($user['avatardimensions']) {
Zeile 4111	Zeile 4143
} $form_container = new FormContainer($lang->find_users_where);	} $form_container = new FormContainer($lang->find_users_where);
$form_container->output_row($lang->username_contains, "", $form->generate_text_box('conditions[username]', $input['conditions']['username'], array('id' => 'username')), 'username');	$form_container->output_row($lang->username_contains, "", $form->generate_text_box('conditions[username]', htmlspecialchars_uni($input['conditions']['username']), array('id' => 'username')), 'username');
$form_container->output_row($lang->email_address_contains, "", $form->generate_text_box('conditions[email]', $input['conditions']['email'], array('id' => 'email')), 'email'); $options = array();	$form_container->output_row($lang->email_address_contains, "", $form->generate_text_box('conditions[email]', $input['conditions']['email'], array('id' => 'email')), 'email'); $options = array();