Vergleich member.php - 1.8.6 - 1.8.11

  Keine Änderungen   Hinzugefügt   Modifiziert   Entfernt
Zeile 14Zeile 14
define("ALLOWABLE_PAGE", "register,do_register,login,do_login,logout,lostpw,do_lostpw,activate,resendactivation,do_resendactivation,resetpassword,viewnotes");

$nosession['avatar'] = 1;

define("ALLOWABLE_PAGE", "register,do_register,login,do_login,logout,lostpw,do_lostpw,activate,resendactivation,do_resendactivation,resetpassword,viewnotes");

$nosession['avatar'] = 1;

$templatelist = "member_register,member_register_hiddencaptcha,member_coppa_form,member_register_coppa,member_register_agreement_coppa,member_register_agreement,usercp_options_tppselect,usercp_options_pppselect,member_register_referrer,member_register_customfield,member_register_requiredfields";
$templatelist .= ",member_resetpassword,member_loggedin_notice,member_profile_away,member_emailuser,member_register_regimage,member_register_regimage_recaptcha,member_register_regimage_nocaptcha,member_register_regimage_ayah,post_captcha_hidden,post_captcha,post_captcha_recaptcha,post_captcha_ayah,member_profile_addremove,member_emailuser_guest";
$templatelist .= ",member_profile_email,member_profile_offline,member_profile_reputation,member_profile_warn,member_profile_warninglevel,member_profile_customfields_field,member_profile_customfields,member_profile_adminoptions,member_profile,member_login,member_profile_online,member_viewnotes";
$templatelist .= ",member_profile_signature,member_profile_avatar,member_profile_groupimage,member_profile_referrals,member_profile_website,member_profile_reputation_vote,member_activate,member_resendactivation,member_lostpw,member_register_additionalfields,member_register_password,usercp_options_pppselect_option";
$templatelist .= ",member_profile_modoptions_manageuser,member_profile_modoptions_editprofile,member_profile_modoptions_banuser,member_profile_modoptions_viewnotes,member_profile_modoptions,member_profile_modoptions_editnotes,member_profile_modoptions_purgespammer,postbit_reputation_formatted,postbit_warninglevel_formatted";
$templatelist .= ",usercp_profile_profilefields_select_option,usercp_profile_profilefields_multiselect,usercp_profile_profilefields_select,usercp_profile_profilefields_textarea,usercp_profile_profilefields_radio,usercp_profile_profilefields_checkbox,usercp_profile_profilefields_text,usercp_options_tppselect_option";
$templatelist .= ",member_register_question,member_register_question_refresh,usercp_options_timezone,usercp_options_timezone_option,usercp_options_language_option,member_register_language,member_profile_userstar,member_profile_customfields_field_multi_item,member_profile_customfields_field_multi,member_register_day";



$templatelist = "member_register,member_register_hiddencaptcha,member_coppa_form,member_register_coppa,member_register_agreement_coppa,member_register_agreement,member_register_customfield,member_register_requiredfields,member_register_password";
$templatelist .= ",member_loggedin_notice,member_profile_away,member_register_regimage,member_register_regimage_recaptcha,member_register_regimage_nocaptcha,post_captcha_hidden,post_captcha,post_captcha_recaptcha,member_viewnotes,member_register_referrer";
$templatelist .= ",member_profile_email,member_profile_offline,member_profile_reputation,member_profile_warn,member_profile_warninglevel,member_profile_customfields_field,member_profile_customfields,member_profile_adminoptions,member_profile";
$templatelist .= ",member_profile_signature,member_profile_avatar,member_profile_groupimage,member_profile_referrals,member_profile_website,member_profile_reputation_vote,member_activate,member_resendactivation,member_lostpw,member_register_additionalfields";
$templatelist .= ",member_profile_modoptions_manageuser,member_profile_modoptions_editprofile,member_profile_modoptions_banuser,member_profile_modoptions_viewnotes,member_profile_modoptions_editnotes,member_profile_modoptions_purgespammer";
$templatelist .= ",usercp_profile_profilefields_select_option,usercp_profile_profilefields_multiselect,usercp_profile_profilefields_select,usercp_profile_profilefields_textarea,usercp_profile_profilefields_radio,usercp_profile_profilefields_checkbox";
$templatelist .= ",member_register_question,member_register_question_refresh,usercp_options_timezone,usercp_options_timezone_option,usercp_options_language_option,member_register_language,member_profile_customfields_field_multi_item,member_profile_customfields_field_multi";

$templatelist .= ",member_profile_contact_fields_aim,member_profile_contact_fields_google,member_profile_contact_fields_icq,member_profile_contact_fields_skype,member_profile_contact_fields_yahoo,member_profile_pm,member_profile_contact_details,member_profile_banned";

$templatelist .= ",member_profile_contact_fields_aim,member_profile_contact_fields_google,member_profile_contact_fields_icq,member_profile_contact_fields_skype,member_profile_contact_fields_yahoo,member_profile_pm,member_profile_contact_details,member_profile_banned";

 
$templatelist .= ",member_profile_banned_remaining,member_profile_addremove,member_emailuser_guest,member_register_day,usercp_options_tppselect_option,postbit_warninglevel_formatted,member_profile_userstar,member_profile_findposts,member_profile_findthreads";
$templatelist .= ",usercp_options_tppselect,usercp_options_pppselect,member_resetpassword,member_login,member_profile_online,usercp_options_pppselect_option,postbit_reputation_formatted,member_emailuser,member_profile_modoptions,usercp_profile_profilefields_text";


require_once "./global.php";
require_once MYBB_ROOT."inc/functions_post.php";


require_once "./global.php";
require_once MYBB_ROOT."inc/functions_post.php";

Zeile 49Zeile 52
		break;
case "lostpw":
add_breadcrumb($lang->nav_lostpw);

		break;
case "lostpw":
add_breadcrumb($lang->nav_lostpw);

		break;

		break;

	case "resetpassword":
add_breadcrumb($lang->nav_resetpassword);
break;

	case "resetpassword":
add_breadcrumb($lang->nav_resetpassword);
break;

Zeile 59Zeile 62
	case "emailuser":
add_breadcrumb($lang->nav_emailuser);
break;

	case "emailuser":
add_breadcrumb($lang->nav_emailuser);
break;

}

}


if(($mybb->input['action'] == "register" || $mybb->input['action'] == "do_register") && $mybb->usergroup['cancp'] != 1)
{


if(($mybb->input['action'] == "register" || $mybb->input['action'] == "do_register") && $mybb->usergroup['cancp'] != 1)
{

Zeile 295Zeile 298
				);
$db->update_query("questions", $update_question, "qid='{$question['qid']}'");
}

				);
$db->update_query("questions", $update_question, "qid='{$question['qid']}'");
}





			$db->delete_query("questionsessions", "sid='{$sid}'");
}
}

			$db->delete_query("questionsessions", "sid='{$sid}'");
}
}

Zeile 325Zeile 328
			$no_subscribe_selected = "selected=\"selected\"";
}
else if($mybb->get_input('subscriptionmethod', MyBB::INPUT_INT) == 2)

			$no_subscribe_selected = "selected=\"selected\"";
}
else if($mybb->get_input('subscriptionmethod', MyBB::INPUT_INT) == 2)

		{

		{

			$instant_email_subscribe_selected = "selected=\"selected\"";
}
else if($mybb->get_input('subscriptionmethod', MyBB::INPUT_INT) == 3)

			$instant_email_subscribe_selected = "selected=\"selected\"";
}
else if($mybb->get_input('subscriptionmethod', MyBB::INPUT_INT) == 3)

Zeile 335Zeile 338
		else
{
$no_auto_subscribe_selected = "selected=\"selected\"";

		else
{
$no_auto_subscribe_selected = "selected=\"selected\"";

		}

if($mybb->get_input('receivepms', MyBB::INPUT_INT) == 1)
{

		}

if($mybb->get_input('receivepms', MyBB::INPUT_INT) == 1)
{

			$receivepmscheck = "checked=\"checked\"";
}


			$receivepmscheck = "checked=\"checked\"";
}


Zeile 392Zeile 395

if(isset($mybb->cookies['coppauser']))
{


if(isset($mybb->cookies['coppauser']))
{

			$lang->redirect_registered_coppa_activate = $lang->sprintf($lang->redirect_registered_coppa_activate, $mybb->settings['bbname'], $user_info['username']);

			$lang->redirect_registered_coppa_activate = $lang->sprintf($lang->redirect_registered_coppa_activate, $mybb->settings['bbname'], htmlspecialchars_uni($user_info['username']));

			my_unsetcookie("coppauser");
my_unsetcookie("coppadob");
$plugins->run_hooks("member_do_register_end");

			my_unsetcookie("coppauser");
my_unsetcookie("coppadob");
$plugins->run_hooks("member_do_register_end");

Zeile 407Zeile 410
				"dateline" => TIME_NOW,
"code" => $activationcode,
"type" => "r"

				"dateline" => TIME_NOW,
"code" => $activationcode,
"type" => "r"

			);
$db->insert_query("awaitingactivation", $activationarray);
$emailsubject = $lang->sprintf($lang->emailsubject_activateaccount, $mybb->settings['bbname']);
switch($mybb->settings['username_method'])
{
case 0:
$emailmessage = $lang->sprintf($lang->email_activateaccount, $user_info['username'], $mybb->settings['bbname'], $mybb->settings['bburl'], $user_info['uid'], $activationcode);
break;

			);
$db->insert_query("awaitingactivation", $activationarray);
$emailsubject = $lang->sprintf($lang->emailsubject_activateaccount, $mybb->settings['bbname']);
switch($mybb->settings['username_method'])
{
case 0:
$emailmessage = $lang->sprintf($lang->email_activateaccount, $user_info['username'], $mybb->settings['bbname'], $mybb->settings['bburl'], $user_info['uid'], $activationcode);
break;

				case 1:
$emailmessage = $lang->sprintf($lang->email_activateaccount1, $user_info['username'], $mybb->settings['bbname'], $mybb->settings['bburl'], $user_info['uid'], $activationcode);
break;

				case 1:
$emailmessage = $lang->sprintf($lang->email_activateaccount1, $user_info['username'], $mybb->settings['bbname'], $mybb->settings['bburl'], $user_info['uid'], $activationcode);
break;

Zeile 423Zeile 426
					break;
default:
$emailmessage = $lang->sprintf($lang->email_activateaccount, $user_info['username'], $mybb->settings['bbname'], $mybb->settings['bburl'], $user_info['uid'], $activationcode);

					break;
default:
$emailmessage = $lang->sprintf($lang->email_activateaccount, $user_info['username'], $mybb->settings['bbname'], $mybb->settings['bburl'], $user_info['uid'], $activationcode);

					break;
}

					break;
}

			my_mail($user_info['email'], $emailsubject, $emailmessage);


			my_mail($user_info['email'], $emailsubject, $emailmessage);


			$lang->redirect_registered_activation = $lang->sprintf($lang->redirect_registered_activation, $mybb->settings['bbname'], $user_info['username']);

			$lang->redirect_registered_activation = $lang->sprintf($lang->redirect_registered_activation, $mybb->settings['bbname'], htmlspecialchars_uni($user_info['username']));


$plugins->run_hooks("member_do_register_end");



$plugins->run_hooks("member_do_register_end");


Zeile 439Zeile 442
			switch($mybb->settings['username_method'])
{
case 0:

			switch($mybb->settings['username_method'])
{
case 0:

					$emailmessage = $lang->sprintf($lang->email_randompassword, $user['username'], $mybb->settings['bbname'], $user_info['username'], $user_info['password']);
break;

					$emailmessage = $lang->sprintf($lang->email_randompassword, $user['username'], $mybb->settings['bbname'], $user_info['username'], $user_info['password']);
break;

				case 1:
$emailmessage = $lang->sprintf($lang->email_randompassword1, $user['username'], $mybb->settings['bbname'], $user_info['username'], $user_info['password']);
break;

				case 1:
$emailmessage = $lang->sprintf($lang->email_randompassword1, $user['username'], $mybb->settings['bbname'], $user_info['username'], $user_info['password']);
break;

Zeile 452Zeile 455
					break;
}
my_mail($user_info['email'], $emailsubject, $emailmessage);

					break;
}
my_mail($user_info['email'], $emailsubject, $emailmessage);


$plugins->run_hooks("member_do_register_end");

error($lang->redirect_registered_passwordsent);
}


$plugins->run_hooks("member_do_register_end");

error($lang->redirect_registered_passwordsent);
}

		else if($mybb->settings['regtype'] == "admin")
{
$groups = $cache->read("usergroups");

		else if($mybb->settings['regtype'] == "admin")
{
$groups = $cache->read("usergroups");

Zeile 494Zeile 497
					// First we check if the user's a super admin: if yes, we don't care about permissions
$is_super_admin = is_super_admin($recipient['uid']);
if(!$is_super_admin)

					// First we check if the user's a super admin: if yes, we don't care about permissions
$is_super_admin = is_super_admin($recipient['uid']);
if(!$is_super_admin)

					{
// Include admin functions
if(!file_exists(MYBB_ROOT.$mybb->config['admin_dir']."/inc/functions.php"))
{
continue;
}

require_once MYBB_ROOT.$mybb->config['admin_dir']."/inc/functions.php";

// Verify if we have permissions to access user-users
require_once MYBB_ROOT.$mybb->config['admin_dir']."/modules/user/module_meta.php";
if(function_exists("user_admin_permissions"))
{
// Get admin permissions
$adminperms = get_admin_permissions($recipient['uid']);

$permissions = user_admin_permissions();
if(array_key_exists('users', $permissions['permissions']) && $adminperms['user']['users'] != 1)
{
continue; // No permissions
}
}
}

// Load language
if($recipient['language'] != $mybb->user['language'] && $lang->language_exists($recipient['language']))
{
$reset_lang = true;
$lang->set_language($recipient['language']);
$lang->load("member");
}

$subject = $lang->sprintf($lang->newregistration_subject, $mybb->settings['bbname']);
$message = $lang->sprintf($lang->newregistration_message, $recipient['username'], $mybb->settings['bbname'], $user['username']);
my_mail($recipient['email'], $subject, $message);
}

// Reset language
if(isset($reset_lang))
{
$lang->set_language($mybb->user['language']);
$lang->load("member");
}
}

$lang->redirect_registered_admin_activate = $lang->sprintf($lang->redirect_registered_admin_activate, $mybb->settings['bbname'], $user_info['username']);

$plugins->run_hooks("member_do_register_end");

error($lang->redirect_registered_admin_activate);
}
else if($mybb->settings['regtype'] == "both")
{
$groups = $cache->read("usergroups");
$admingroups = array();
if(!empty($groups)) // Shouldn't be...
{
foreach($groups as $group)
{
if($group['cancp'] == 1)
{
$admingroups[] = (int)$group['gid'];
}
}
}

if(!empty($admingroups))
{
$sqlwhere = 'usergroup IN ('.implode(',', $admingroups).')';
foreach($admingroups as $admingroup)
{
switch($db->type)
{
case 'pgsql':
case 'sqlite':
$sqlwhere .= " OR ','||additionalgroups||',' LIKE '%,{$admingroup},%'";
break;
default:
$sqlwhere .= " OR CONCAT(',',additionalgroups,',') LIKE '%,{$admingroup},%'";
break;
}
}
$q = $db->simple_select('users', 'uid,username,email,language', $sqlwhere);
while($recipient = $db->fetch_array($q))
{
// First we check if the user's a super admin: if yes, we don't care about permissions
$is_super_admin = is_super_admin($recipient['uid']);
if(!$is_super_admin)
{

					{

























































































						// Include admin functions
if(!file_exists(MYBB_ROOT.$mybb->config['admin_dir']."/inc/functions.php"))
{

						// Include admin functions
if(!file_exists(MYBB_ROOT.$mybb->config['admin_dir']."/inc/functions.php"))
{

Zeile 607Zeile 522
					}

// Load language

					}

// Load language

					if($recipient['language'] != $mybb->user['language'] && $lang->language_exists($recipient['language']))

					if($recipient['language'] != $lang->language && $lang->language_exists($recipient['language']))

					{
$reset_lang = true;
$lang->set_language($recipient['language']);

					{
$reset_lang = true;
$lang->set_language($recipient['language']);

Zeile 622Zeile 537
				// Reset language
if(isset($reset_lang))
{

				// Reset language
if(isset($reset_lang))
{

					$lang->set_language($mybb->user['language']);

























































































					$lang->set_language($mybb->settings['bblanguage']);
$lang->load("member");
}
}

$lang->redirect_registered_admin_activate = $lang->sprintf($lang->redirect_registered_admin_activate, $mybb->settings['bbname'], htmlspecialchars_uni($user_info['username']));

$plugins->run_hooks("member_do_register_end");

error($lang->redirect_registered_admin_activate);
}
else if($mybb->settings['regtype'] == "both")
{
$groups = $cache->read("usergroups");
$admingroups = array();
if(!empty($groups)) // Shouldn't be...
{
foreach($groups as $group)
{
if($group['cancp'] == 1)
{
$admingroups[] = (int)$group['gid'];
}
}
}

if(!empty($admingroups))
{
$sqlwhere = 'usergroup IN ('.implode(',', $admingroups).')';
foreach($admingroups as $admingroup)
{
switch($db->type)
{
case 'pgsql':
case 'sqlite':
$sqlwhere .= " OR ','||additionalgroups||',' LIKE '%,{$admingroup},%'";
break;
default:
$sqlwhere .= " OR CONCAT(',',additionalgroups,',') LIKE '%,{$admingroup},%'";
break;
}
}
$q = $db->simple_select('users', 'uid,username,email,language', $sqlwhere);
while($recipient = $db->fetch_array($q))
{
// First we check if the user's a super admin: if yes, we don't care about permissions
$is_super_admin = is_super_admin($recipient['uid']);
if(!$is_super_admin)
{
// Include admin functions
if(!file_exists(MYBB_ROOT.$mybb->config['admin_dir']."/inc/functions.php"))
{
continue;
}

require_once MYBB_ROOT.$mybb->config['admin_dir']."/inc/functions.php";

// Verify if we have permissions to access user-users
require_once MYBB_ROOT.$mybb->config['admin_dir']."/modules/user/module_meta.php";
if(function_exists("user_admin_permissions"))
{
// Get admin permissions
$adminperms = get_admin_permissions($recipient['uid']);

$permissions = user_admin_permissions();
if(array_key_exists('users', $permissions['permissions']) && $adminperms['user']['users'] != 1)
{
continue; // No permissions
}
}
}

// Load language
if($recipient['language'] != $lang->language && $lang->language_exists($recipient['language']))
{
$reset_lang = true;
$lang->set_language($recipient['language']);
$lang->load("member");
}

$subject = $lang->sprintf($lang->newregistration_subject, $mybb->settings['bbname']);
$message = $lang->sprintf($lang->newregistration_message, $recipient['username'], $mybb->settings['bbname'], $user['username']);
my_mail($recipient['email'], $subject, $message);
}

// Reset language
if(isset($reset_lang))
{
$lang->set_language($mybb->settings['bblanguage']);

					$lang->load("member");
}
}

					$lang->load("member");
}
}

Zeile 652Zeile 655
					break;
}
my_mail($user_info['email'], $emailsubject, $emailmessage);

					break;
}
my_mail($user_info['email'], $emailsubject, $emailmessage);


$lang->redirect_registered_activation = $lang->sprintf($lang->redirect_registered_activation, $mybb->settings['bbname'], $user_info['username']);

$plugins->run_hooks("member_do_register_end");

error($lang->redirect_registered_activation);
}
else
{
$lang->redirect_registered = $lang->sprintf($lang->redirect_registered, $mybb->settings['bbname'], $user_info['username']);


$lang->redirect_registered_activation = $lang->sprintf($lang->redirect_registered_activation, $mybb->settings['bbname'], htmlspecialchars_uni($user_info['username']));










$plugins->run_hooks("member_do_register_end");



$plugins->run_hooks("member_do_register_end");


			redirect("index.php", $lang->redirect_registered);









			error($lang->redirect_registered_activation);
}
else
{
$lang->redirect_registered = $lang->sprintf($lang->redirect_registered, $mybb->settings['bbname'], htmlspecialchars_uni($user_info['username']));

$plugins->run_hooks("member_do_register_end");

redirect("index.php", $lang->redirect_registered);

		}
}
}

		}
}
}

Zeile 829Zeile 832
			{
$query = $db->simple_select("users", "uid,username", "uid='".(int)$mybb->cookies['mybb']['referrer']."'");
$ref = $db->fetch_array($query);

			{
$query = $db->simple_select("users", "uid,username", "uid='".(int)$mybb->cookies['mybb']['referrer']."'");
$ref = $db->fetch_array($query);

 
				$ref['username'] = htmlspecialchars_uni($ref['username']);

				$referrername = $ref['username'];
}
elseif(isset($referrer))
{
$query = $db->simple_select("users", "username", "uid='".(int)$referrer['uid']."'");
$ref = $db->fetch_array($query);

				$referrername = $ref['username'];
}
elseif(isset($referrer))
{
$query = $db->simple_select("users", "username", "uid='".(int)$referrer['uid']."'");
$ref = $db->fetch_array($query);

 
				$ref['username'] = htmlspecialchars_uni($ref['username']);

				$referrername = $ref['username'];
}
elseif(!empty($referrername))

				$referrername = $ref['username'];
}
elseif(!empty($referrername))

Zeile 888Zeile 893
					continue;
}


					continue;
}


				$code = $select = $val = $options = $expoptions = $useropts = $seloptions = '';


				$code = $select = $val = $options = $expoptions = $useropts = '';
$seloptions = array();

				$profilefield['type'] = htmlspecialchars_uni($profilefield['type']);
$thing = explode("\n", $profilefield['type'], "2");
$type = trim($thing[0]);

				$profilefield['type'] = htmlspecialchars_uni($profilefield['type']);
$thing = explode("\n", $profilefield['type'], "2");
$type = trim($thing[0]);

Zeile 1091Zeile 1097
		{
$allownoticescheck = "checked=\"checked\"";
$hideemailcheck = '';

		{
$allownoticescheck = "checked=\"checked\"";
$hideemailcheck = '';

			$emailnotifycheck = '';

 
			$receivepmscheck = "checked=\"checked\"";
$pmnoticecheck = " checked=\"checked\"";
$pmnotifycheck = '';

			$receivepmscheck = "checked=\"checked\"";
$pmnoticecheck = " checked=\"checked\"";
$pmnotifycheck = '';

Zeile 1294Zeile 1299
if($mybb->input['action'] == "activate")
{
$plugins->run_hooks("member_activate_start");

if($mybb->input['action'] == "activate")
{
$plugins->run_hooks("member_activate_start");


if(isset($mybb->input['username']))
{
$mybb->input['username'] = $mybb->get_input('username');
$options = array(
'username_method' => $mybb->settings['username_method'],
'fields' => '*',
);
$user = get_user_by_username($mybb->input['username'], $options);
if(!$user)


if(isset($mybb->input['username']))
{
$mybb->input['username'] = $mybb->get_input('username');
$options = array(
'username_method' => $mybb->settings['username_method'],
'fields' => '*',
);
$user = get_user_by_username($mybb->input['username'], $options);
if(!$user)

		{
switch($mybb->settings['username_method'])
{
case 0:

		{
switch($mybb->settings['username_method'])
{
case 0:

					error($lang->error_invalidpworusername);

					error($lang->error_invalidpworusername);

					break;
case 1:
error($lang->error_invalidpworusername1);

					break;
case 1:
error($lang->error_invalidpworusername1);

Zeile 1343Zeile 1348
		if($activation['type'] == "b" && $activation['validated'] == 1)
{
error($lang->error_alreadyvalidated);

		if($activation['type'] == "b" && $activation['validated'] == 1)
{
error($lang->error_alreadyvalidated);

		}


		}


		$db->delete_query("awaitingactivation", "uid='".$user['uid']."' AND (type='r' OR type='e')");

if($user['usergroup'] == 5 && $activation['type'] != "e" && $activation['type'] != "b")

		$db->delete_query("awaitingactivation", "uid='".$user['uid']."' AND (type='r' OR type='e')");

if($user['usergroup'] == 5 && $activation['type'] != "e" && $activation['type'] != "b")

		{

		{

			$db->update_query("users", array("usergroup" => 2), "uid='".$user['uid']."'");

$cache->update_awaitingactivation();

			$db->update_query("users", array("usergroup" => 2), "uid='".$user['uid']."'");

$cache->update_awaitingactivation();

Zeile 1383Zeile 1388
	else
{
$plugins->run_hooks("member_activate_form");

	else
{
$plugins->run_hooks("member_activate_form");


$code = $mybb->get_input('code');


$code = htmlspecialchars_uni($mybb->get_input('code'));


if(!isset($user['username']))
{
$user['username'] = '';
}


if(!isset($user['username']))
{
$user['username'] = '';
}

 
		$user['username'] = htmlspecialchars_uni($user['username']);


eval("\$activate = \"".$templates->get("member_activate")."\";");
output_page($activate);


eval("\$activate = \"".$templates->get("member_activate")."\";");
output_page($activate);

Zeile 1542Zeile 1548
					break;
case 2:
$emailmessage = $lang->sprintf($lang->email_lostpw2, $username, $mybb->settings['bbname'], $mybb->settings['bburl'], $uid, $activationcode);

					break;
case 2:
$emailmessage = $lang->sprintf($lang->email_lostpw2, $username, $mybb->settings['bbname'], $mybb->settings['bburl'], $uid, $activationcode);

					break;

					break;

				default:
$emailmessage = $lang->sprintf($lang->email_lostpw, $username, $mybb->settings['bbname'], $mybb->settings['bburl'], $uid, $activationcode);
break;

				default:
$emailmessage = $lang->sprintf($lang->email_lostpw, $username, $mybb->settings['bbname'], $mybb->settings['bburl'], $uid, $activationcode);
break;

Zeile 1590Zeile 1596
	{
$user = get_user($mybb->get_input('uid', MyBB::INPUT_INT));
}

	{
$user = get_user($mybb->get_input('uid', MyBB::INPUT_INT));
}

 


	if(isset($mybb->input['code']) && $user)
{
$query = $db->simple_select("awaitingactivation", "code", "uid='".$user['uid']."' AND type='p'");

	if(isset($mybb->input['code']) && $user)
{
$query = $db->simple_select("awaitingactivation", "code", "uid='".$user['uid']."' AND type='p'");

Zeile 1601Zeile 1608
		}
$db->delete_query("awaitingactivation", "uid='".$user['uid']."' AND type='p'");
$username = $user['username'];

		}
$db->delete_query("awaitingactivation", "uid='".$user['uid']."' AND type='p'");
$username = $user['username'];





		// Generate a new password, then update it
$password_length = (int)$mybb->settings['minpasswordlength'];

if($password_length < 8)
{

		// Generate a new password, then update it
$password_length = (int)$mybb->settings['minpasswordlength'];

if($password_length < 8)
{

			$password_length = 8;
}

$password = random_str($password_length);
$logindetails = update_password($user['uid'], md5($password), $user['salt']);

























			$password_length = min(8, (int)$mybb->settings['maxpasswordlength']);
}

// Set up user handler.
require_once MYBB_ROOT.'inc/datahandlers/user.php';
$userhandler = new UserDataHandler('update');

while(!$userhandler->verify_password())
{
$password = random_str($password_length, $mybb->settings['requirecomplexpasswords']);

$userhandler->set_data(array(
'uid' => $user['uid'],
'username' => $user['username'],
'email' => $user['email'],
'password' => $password
));

$userhandler->set_validated(true);
$userhandler->errors = array();
}

$userhandler->update_user();

$logindetails = array(
'salt' => $userhandler->data['salt'],
'password' => $userhandler->data['saltedpw'],
'loginkey' => $userhandler->data['loginkey'],
);


$email = $user['email'];

$plugins->run_hooks("member_resetpassword_process");


$email = $user['email'];

$plugins->run_hooks("member_resetpassword_process");





		$emailsubject = $lang->sprintf($lang->emailsubject_passwordreset, $mybb->settings['bbname']);
$emailmessage = $lang->sprintf($lang->email_passwordreset, $username, $mybb->settings['bbname'], $password);
my_mail($email, $emailsubject, $emailmessage);

		$emailsubject = $lang->sprintf($lang->emailsubject_passwordreset, $mybb->settings['bbname']);
$emailmessage = $lang->sprintf($lang->email_passwordreset, $username, $mybb->settings['bbname'], $password);
my_mail($email, $emailsubject, $emailmessage);





		$plugins->run_hooks("member_resetpassword_reset");

error($lang->redirect_passwordreset);

		$plugins->run_hooks("member_resetpassword_reset");

error($lang->redirect_passwordreset);

	}

	}

	else
{
$plugins->run_hooks("member_resetpassword_form");

	else
{
$plugins->run_hooks("member_resetpassword_form");

Zeile 1651Zeile 1682
		{
$user['username'] = '';
}

		{
$user['username'] = '';
}

 
		$user['username'] = htmlspecialchars_uni($user['username']);


eval("\$activate = \"".$templates->get("member_resetpassword")."\";");
output_page($activate);


eval("\$activate = \"".$templates->get("member_resetpassword")."\";");
output_page($activate);

Zeile 1666Zeile 1698
	// Is a fatal call if user has had too many tries
$errors = array();
$logins = login_attempt_check();

	// Is a fatal call if user has had too many tries
$errors = array();
$logins = login_attempt_check();





	require_once MYBB_ROOT."inc/datahandlers/login.php";
$loginhandler = new LoginDataHandler("get");


	require_once MYBB_ROOT."inc/datahandlers/login.php";
$loginhandler = new LoginDataHandler("get");


Zeile 1728Zeile 1760

$mybb->input['url'] = $mybb->get_input('url');



$mybb->input['url'] = $mybb->get_input('url');


		if(!empty($mybb->input['url']) && my_strpos(basename($mybb->input['url']), 'member.php') === false)

		if(!empty($mybb->input['url']) && my_strpos(basename($mybb->input['url']), 'member.php') === false && !preg_match('#^javascript:#i', $mybb->input['url']))

		{
if((my_strpos(basename($mybb->input['url']), 'newthread.php') !== false || my_strpos(basename($mybb->input['url']), 'newreply.php') !== false) && my_strpos($mybb->input['url'], '&processed=1') !== false)

		{
if((my_strpos(basename($mybb->input['url']), 'newthread.php') !== false || my_strpos(basename($mybb->input['url']), 'newreply.php') !== false) && my_strpos($mybb->input['url'], '&processed=1') !== false)

			{

			{

				$mybb->input['url'] = str_replace('&processed=1', '', $mybb->input['url']);
}

$mybb->input['url'] = str_replace('&amp;', '&', $mybb->input['url']);

				$mybb->input['url'] = str_replace('&processed=1', '', $mybb->input['url']);
}

$mybb->input['url'] = str_replace('&amp;', '&', $mybb->input['url']);





			// Redirect to the URL if it is not member.php

			// Redirect to the URL if it is not member.php

			redirect(htmlentities($mybb->input['url']), $lang->redirect_loggedin);
}

			redirect($mybb->input['url'], $lang->redirect_loggedin);
}

		else
{

		else
{





			redirect("index.php", $lang->redirect_loggedin);
}
}

			redirect("index.php", $lang->redirect_loggedin);
}
}

Zeile 1753Zeile 1785
if($mybb->input['action'] == "login")
{
$plugins->run_hooks("member_login");

if($mybb->input['action'] == "login")
{
$plugins->run_hooks("member_login");





	$member_loggedin_notice = "";
if($mybb->user['uid'] != 0)
{

	$member_loggedin_notice = "";
if($mybb->user['uid'] != 0)
{

 
		$mybb->user['username'] = htmlspecialchars_uni($mybb->user['username']);

		$lang->already_logged_in = $lang->sprintf($lang->already_logged_in, build_profile_link($mybb->user['username'], $mybb->user['uid']));
eval("\$member_loggedin_notice = \"".$templates->get("member_loggedin_notice")."\";");

		$lang->already_logged_in = $lang->sprintf($lang->already_logged_in, build_profile_link($mybb->user['username'], $mybb->user['uid']));
eval("\$member_loggedin_notice = \"".$templates->get("member_loggedin_notice")."\";");

	}


	}


	// Checks to make sure the user can login; they haven't had too many tries at logging in.
// Is a fatal call if user has had too many tries
login_attempt_check();

	// Checks to make sure the user can login; they haven't had too many tries at logging in.
// Is a fatal call if user has had too many tries
login_attempt_check();

Zeile 1774Zeile 1807
	{
$redirect_url = '';
}

	{
$redirect_url = '';
}





	$captcha = '';
// Show captcha image for guests if enabled and only if we have to do
if($mybb->settings['captchaimage'] && $do_captcha == true)

	$captcha = '';
// Show captcha image for guests if enabled and only if we have to do
if($mybb->settings['captchaimage'] && $do_captcha == true)

Zeile 1785Zeile 1818
		if($login_captcha->type == 1)
{
if(!$correct)

		if($login_captcha->type == 1)
{
if(!$correct)

			{

			{

				$login_captcha->build_captcha();
}
else

				$login_captcha->build_captcha();
}
else

Zeile 1796Zeile 1829
		elseif($login_captcha->type == 2 || $login_captcha->type == 4)
{
$login_captcha->build_recaptcha();

		elseif($login_captcha->type == 2 || $login_captcha->type == 4)
{
$login_captcha->build_recaptcha();

		}
elseif($login_captcha->type == 3)
{
$login_captcha->build_ayah();

 
		}

if($login_captcha->html)

		}

if($login_captcha->html)

Zeile 1856Zeile 1885
	}

// Check session ID if we have one

	}

// Check session ID if we have one

	if(isset($mybb->input['sid']) && $mybb->get_input('sid') != $session->sid)

	if(isset($mybb->input['sid']) && $mybb->get_input('sid') !== $session->sid)

	{
error($lang->error_notloggedout);
}
// Otherwise, check logoutkey

	{
error($lang->error_notloggedout);
}
// Otherwise, check logoutkey

	else if(!isset($mybb->input['sid']) && $mybb->get_input('logoutkey') != $mybb->user['logoutkey'])

	else if(!isset($mybb->input['sid']) && $mybb->get_input('logoutkey') !== $mybb->user['logoutkey'])

	{
error($lang->error_notloggedout);
}

	{
error($lang->error_notloggedout);
}

Zeile 1898Zeile 1927
		error_no_permission();
}


		error_no_permission();
}


 
	$user['username'] = htmlspecialchars_uni($user['username']);

	$lang->view_notes_for = $lang->sprintf($lang->view_notes_for, $user['username']);

$user['usernotes'] = nl2br(htmlspecialchars_uni($user['usernotes']));

	$lang->view_notes_for = $lang->sprintf($lang->view_notes_for, $user['username']);

$user['usernotes'] = nl2br(htmlspecialchars_uni($user['usernotes']));

Zeile 1939Zeile 1969

$uid = $memprofile['uid'];



$uid = $memprofile['uid'];


 
	$me_username = $memprofile['username'];
$memprofile['username'] = htmlspecialchars_uni($memprofile['username']);

	$lang->profile = $lang->sprintf($lang->profile, $memprofile['username']);

// Get member's permissions

	$lang->profile = $lang->sprintf($lang->profile, $memprofile['username']);

// Get member's permissions

Zeile 1949Zeile 1981

$lang->users_forum_info = $lang->sprintf($lang->users_forum_info, $memprofile['username']);
$lang->users_contact_details = $lang->sprintf($lang->users_contact_details, $memprofile['username']);


$lang->users_forum_info = $lang->sprintf($lang->users_forum_info, $memprofile['username']);
$lang->users_contact_details = $lang->sprintf($lang->users_contact_details, $memprofile['username']);


if($mybb->settings['enablepms'] != 0 && (($memprofile['receivepms'] != 0 && $memperms['canusepms'] != 0 && my_strpos(",".$memprofile['ignorelist'].",", ",".$mybb->user['uid'].",") === false) || $mybb->usergroup['canoverridepm'] == 1))
{
$lang->send_pm = $lang->sprintf($lang->send_pm, $memprofile['username']);
}
else
{
$lang->send_pm = '';
}

	$lang->send_pm = $lang->sprintf($lang->send_pm, $memprofile['username']);









	$lang->away_note = $lang->sprintf($lang->away_note, $memprofile['username']);
$lang->users_additional_info = $lang->sprintf($lang->users_additional_info, $memprofile['username']);
$lang->users_signature = $lang->sprintf($lang->users_signature, $memprofile['username']);

	$lang->away_note = $lang->sprintf($lang->away_note, $memprofile['username']);
$lang->users_additional_info = $lang->sprintf($lang->users_additional_info, $memprofile['username']);
$lang->users_signature = $lang->sprintf($lang->users_signature, $memprofile['username']);

Zeile 1968Zeile 1992

$website = $sendemail = $sendpm = $contact_details = '';



$website = $sendemail = $sendpm = $contact_details = '';


	if($memprofile['website'] && !is_member($mybb->settings['hidewebsite']) && $memperms['canchangewebsite'] == 1)

	if(my_validate_url($memprofile['website']) && !is_member($mybb->settings['hidewebsite']) && $memperms['canchangewebsite'] == 1)

	{
$memprofile['website'] = htmlspecialchars_uni($memprofile['website']);
$bgcolor = alt_trow();
eval("\$website = \"".$templates->get("member_profile_website")."\";");

	{
$memprofile['website'] = htmlspecialchars_uni($memprofile['website']);
$bgcolor = alt_trow();
eval("\$website = \"".$templates->get("member_profile_website")."\";");

	}

	}

	
if($memprofile['hideemail'] != 1 && (my_strpos(",".$memprofile['ignorelist'].",", ",".$mybb->user['uid'].",") === false || $mybb->usergroup['cansendemailoverride'] != 0))
{

	
if($memprofile['hideemail'] != 1 && (my_strpos(",".$memprofile['ignorelist'].",", ",".$mybb->user['uid'].",") === false || $mybb->usergroup['cansendemailoverride'] != 0))
{

Zeile 1981Zeile 2005
		eval("\$sendemail = \"".$templates->get("member_profile_email")."\";");
}


		eval("\$sendemail = \"".$templates->get("member_profile_email")."\";");
}


	if($mybb->settings['enablepms'] == 1 && $memprofile['receivepms'] != 0 && $mybb->usergroup['cansendpms'] == 1 && my_strpos(",".$memprofile['ignorelist'].",", ",".$mybb->user['uid'].",") === false)

	if($mybb->settings['enablepms'] != 0 && (($memprofile['receivepms'] != 0 && $memperms['canusepms'] != 0 && my_strpos(",".$memprofile['ignorelist'].",", ",".$mybb->user['uid'].",") === false) || $mybb->usergroup['canoverridepm'] == 1))

	{
$bgcolor = alt_trow();
eval('$sendpm = "'.$templates->get("member_profile_pm").'";');

	{
$bgcolor = alt_trow();
eval('$sendpm = "'.$templates->get("member_profile_pm").'";');

Zeile 2026Zeile 2050
			"allow_mycode" => $mybb->settings['sigmycode'],
"allow_smilies" => $mybb->settings['sigsmilies'],
"allow_imgcode" => $mybb->settings['sigimgcode'],

			"allow_mycode" => $mybb->settings['sigmycode'],
"allow_smilies" => $mybb->settings['sigsmilies'],
"allow_imgcode" => $mybb->settings['sigimgcode'],

			"me_username" => $memprofile['username'],

			"me_username" => $me_username,

			"filter_badwords" => 1
);


			"filter_badwords" => 1
);


Zeile 2038Zeile 2062
		if($mybb->user['showimages'] != 1 && $mybb->user['uid'] != 0 || $mybb->settings['guestimages'] != 1 && $mybb->user['uid'] == 0)
{
$sig_parser['allow_imgcode'] = 0;

		if($mybb->user['showimages'] != 1 && $mybb->user['uid'] != 0 || $mybb->settings['guestimages'] != 1 && $mybb->user['uid'] == 0)
{
$sig_parser['allow_imgcode'] = 0;

		}

		}


$memprofile['signature'] = $parser->parse_message($memprofile['signature'], $sig_parser);
eval("\$signature = \"".$templates->get("member_profile_signature")."\";");


$memprofile['signature'] = $parser->parse_message($memprofile['signature'], $sig_parser);
eval("\$signature = \"".$templates->get("member_profile_signature")."\";");

Zeile 2099Zeile 2123
	if($thread_percent > 100)
{
$thread_percent = 100;

	if($thread_percent > 100)
{
$thread_percent = 100;

 
	}

$findposts = $findthreads = '';
if($mybb->usergroup['cansearch'] == 1)
{
eval("\$findposts = \"".$templates->get("member_profile_findposts")."\";");
eval("\$findthreads = \"".$templates->get("member_profile_findthreads")."\";");

	}

$awaybit = '';

	}

$awaybit = '';

Zeile 2151Zeile 2182
		if($memprofile['away'] == 1)
{
eval("\$awaybit = \"".$templates->get("member_profile_away")."\";");

		if($memprofile['away'] == 1)
{
eval("\$awaybit = \"".$templates->get("member_profile_away")."\";");

		}
}




		}
}

$memprofile['timezone'] = (float)$memprofile['timezone'];


	if($memprofile['dst'] == 1)
{
$memprofile['timezone']++;

	if($memprofile['dst'] == 1)
{
$memprofile['timezone']++;

Zeile 2191Zeile 2224
			if($membday[0] && $membday[1] && $membday[2])
{
$lang->membdayage = $lang->sprintf($lang->membdayage, get_age($memprofile['birthday']));

			if($membday[0] && $membday[1] && $membday[2])
{
$lang->membdayage = $lang->sprintf($lang->membdayage, get_age($memprofile['birthday']));





				$bdayformat = fix_mktime($mybb->settings['dateformat'], $membday[2]);
$membday = mktime(0, 0, 0, $membday[1], $membday[0], $membday[2]);
$membday = date($bdayformat, $membday);

				$bdayformat = fix_mktime($mybb->settings['dateformat'], $membday[2]);
$membday = mktime(0, 0, 0, $membday[1], $membday[0], $membday[2]);
$membday = date($bdayformat, $membday);

Zeile 2270Zeile 2303
				if($memprofile['postnum'] >= $title['posts'])
{
$usertitle = $title['title'];

				if($memprofile['postnum'] >= $title['posts'])
{
$usertitle = $title['title'];

					$stars = $title['stars'];
$starimage = $title['starimage'];

					$stars = $title['stars'];
$starimage = $title['starimage'];


break;
}


break;
}

Zeile 2391Zeile 2424
		{
// We have had at least some active time, hide it instead
$memlastvisitdate = $lang->lastvisit_hidden;

		{
// We have had at least some active time, hide it instead
$memlastvisitdate = $lang->lastvisit_hidden;

		}

		}


$timeonline = $lang->timeonline_hidden;
}


$timeonline = $lang->timeonline_hidden;
}

Zeile 2467Zeile 2500
	{
foreach($pfcache as $customfield)
{

	{
foreach($pfcache as $customfield)
{

			if($mybb->usergroup['cancp'] != 1 && $mybb->usergroup['issupermod'] != 1 && $mybb->usergroup['canmodcp'] != 1 && !is_member($customfield['viewableby']))

			if($mybb->usergroup['cancp'] != 1 && $mybb->usergroup['issupermod'] != 1 && $mybb->usergroup['canmodcp'] != 1 && !is_member($customfield['viewableby']) || !$customfield['profile'])

			{
continue;

			{
continue;

			}


			}


			$thing = explode("\n", $customfield['type'], "2");
$type = trim($thing[0]);


			$thing = explode("\n", $customfield['type'], "2");
$type = trim($thing[0]);


Zeile 2511Zeile 2544
					if($customfield['type'] == "textarea")
{
$parser_options['me_username'] = $memprofile['username'];

					if($customfield['type'] == "textarea")
{
$parser_options['me_username'] = $memprofile['username'];

					}

					}

					else
{
$parser_options['nl2br'] = 0;

					else
{
$parser_options['nl2br'] = 0;

Zeile 2579Zeile 2612

$timeremaining = nice_time($remaining, array('short' => 1, 'seconds' => false))."";



$timeremaining = nice_time($remaining, array('short' => 1, 'seconds' => false))."";


 
			$banned_class = '';

			if($remaining < 3600)
{

			if($remaining < 3600)
{

				$timeremaining = "<span style=\"color: red;\">({$timeremaining} {$lang->ban_remaining})</span>";

				$banned_class = "high_banned";

			}
else if($remaining < 86400)
{

			}
else if($remaining < 86400)
{

				$timeremaining = "<span style=\"color: maroon;\">({$timeremaining} {$lang->ban_remaining})</span>";

				$banned_class = "moderate_banned";

			}
else if($remaining < 604800)
{

			}
else if($remaining < 604800)
{

				$timeremaining = "<span style=\"color: green;\">({$timeremaining} {$lang->ban_remaining})</span>";

				$banned_class = "low_banned";

			}
else
{

			}
else
{

				$timeremaining = "({$timeremaining} {$lang->ban_remaining})";

				$banned_class = "normal_banned";

			}

			}

 

eval('$timeremaining = "'.$templates->get('member_profile_banned_remaining').'";');

		}


		}


		$memban['adminuser'] = build_profile_link($memban['adminuser'], $memban['admin']);

		$memban['adminuser'] = build_profile_link(htmlspecialchars_uni($memban['adminuser']), $memban['admin']);


// Display a nice warning to the user
eval('$bannedbit = "'.$templates->get('member_profile_banned').'";');


// Display a nice warning to the user
eval('$bannedbit = "'.$templates->get('member_profile_banned').'";');

Zeile 2954Zeile 2990
	$query = $db->simple_select("users", "uid, username, email, hideemail, ignorelist", "uid='".$mybb->get_input('uid', MyBB::INPUT_INT)."'");
$to_user = $db->fetch_array($query);


	$query = $db->simple_select("users", "uid, username, email, hideemail, ignorelist", "uid='".$mybb->get_input('uid', MyBB::INPUT_INT)."'");
$to_user = $db->fetch_array($query);


 
	$to_user['username'] = htmlspecialchars_uni($to_user['username']);

	$lang->email_user = $lang->sprintf($lang->email_user, $to_user['username']);

if(!$to_user['uid'])

	$lang->email_user = $lang->sprintf($lang->email_user, $to_user['username']);

if(!$to_user['uid'])