Vergleich member.php - 1.8.7 - 1.8.22

$templatelist = "member_register,member_register_hiddencaptcha,member_coppa_form,member_register_coppa,member_register_agreement_coppa,member_register_agreement,usercp_options_tppselect,usercp_options_pppselect,member_register_referrer,member_register_customfield,member_register_requiredfields";
$templatelist .= ",member_resetpassword,member_loggedin_notice,member_profile_away,member_emailuser,member_register_regimage,member_register_regimage_recaptcha,member_register_regimage_nocaptcha,post_captcha_hidden,post_captcha,post_captcha_recaptcha,member_profile_addremove,member_emailuser_guest";
$templatelist .= ",member_profile_email,member_profile_offline,member_profile_reputation,member_profile_warn,member_profile_warninglevel,member_profile_customfields_field,member_profile_customfields,member_profile_adminoptions,member_profile,member_login,member_profile_online,member_viewnotes";
$templatelist .= ",member_profile_signature,member_profile_avatar,member_profile_groupimage,member_profile_referrals,member_profile_website,member_profile_reputation_vote,member_activate,member_resendactivation,member_lostpw,member_register_additionalfields,member_register_password,usercp_options_pppselect_option";
$templatelist .= ",member_profile_modoptions_manageuser,member_profile_modoptions_editprofile,member_profile_modoptions_banuser,member_profile_modoptions_viewnotes,member_profile_modoptions,member_profile_modoptions_editnotes,member_profile_modoptions_purgespammer,postbit_reputation_formatted,postbit_warninglevel_formatted";
$templatelist .= ",usercp_profile_profilefields_select_option,usercp_profile_profilefields_multiselect,usercp_profile_profilefields_select,usercp_profile_profilefields_textarea,usercp_profile_profilefields_radio,usercp_profile_profilefields_checkbox,usercp_profile_profilefields_text,usercp_options_tppselect_option";
$templatelist .= ",member_register_question,member_register_question_refresh,usercp_options_timezone,usercp_options_timezone_option,usercp_options_language_option,member_register_language,member_profile_userstar,member_profile_customfields_field_multi_item,member_profile_customfields_field_multi,member_register_day";
$templatelist .= ",member_profile_contact_fields_aim,member_profile_contact_fields_google,member_profile_contact_fields_icq,member_profile_contact_fields_skype,member_profile_contact_fields_yahoo,member_profile_pm,member_profile_contact_details,member_profile_banned,member_profile_findposts,member_profile_findthreads";

$templatelist = "member_register,member_register_hiddencaptcha,member_register_coppa,member_register_agreement_coppa,member_register_agreement,member_register_customfield,member_register_requiredfields,member_profile_findthreads";
$templatelist .= ",member_loggedin_notice,member_profile_away,member_register_regimage,member_register_regimage_recaptcha_invisible,member_register_regimage_nocaptcha,post_captcha_hidden,post_captcha,member_register_referrer";
$templatelist .= ",member_profile_email,member_profile_offline,member_profile_reputation,member_profile_warn,member_profile_warninglevel,member_profile_customfields_field,member_profile_customfields,member_profile_adminoptions,member_profile";
$templatelist .= ",member_profile_signature,member_profile_avatar,member_profile_groupimage,member_profile_referrals,member_profile_website,member_profile_reputation_vote,member_activate,member_lostpw,member_register_additionalfields";
$templatelist .= ",member_profile_modoptions_manageuser,member_profile_modoptions_editprofile,member_profile_modoptions_banuser,member_profile_modoptions_viewnotes,member_profile_modoptions_editnotes,member_profile_modoptions_purgespammer";
$templatelist .= ",usercp_profile_profilefields_select_option,usercp_profile_profilefields_multiselect,usercp_profile_profilefields_select,usercp_profile_profilefields_textarea,usercp_profile_profilefields_radio,member_viewnotes";
$templatelist .= ",member_register_question,member_register_question_refresh,usercp_options_timezone,usercp_options_timezone_option,usercp_options_language_option,member_profile_customfields_field_multi_item,member_profile_customfields_field_multi";
$templatelist .= ",member_profile_contact_fields_google,member_profile_contact_fields_icq,member_profile_contact_fields_skype,member_profile_pm,member_profile_contact_details,member_profile_modoptions_manageban";
$templatelist .= ",member_profile_banned_remaining,member_profile_addremove,member_emailuser_guest,member_register_day,usercp_options_tppselect_option,postbit_warninglevel_formatted,member_profile_userstar,member_profile_findposts";
$templatelist .= ",usercp_options_tppselect,usercp_options_pppselect,member_resetpassword,member_login,member_profile_online,usercp_options_pppselect_option,postbit_reputation_formatted,member_emailuser,usercp_profile_profilefields_text";
$templatelist .= ",member_profile_modoptions_ipaddress,member_profile_modoptions,member_profile_banned,member_register_language,member_resendactivation,usercp_profile_profilefields_checkbox,member_register_password,member_coppa_form";

		break;

		break;

	}

	}

	}

	}

		{

		{

			}
		}
		else
		{
			error($lang->error_spam_deny);
		}

			}
		}
		else
		{
			error($lang->error_spam_deny);
		}

	$errors = "";

	$errors = array();

	{

	{

	if(is_array($errors))

	if(!empty($errors))

		}

		}

			my_setcookie("mybbuser", $user_info['uid']."_".$user_info['loginkey'], null, true);

			my_setcookie("mybbuser", $user_info['uid']."_".$user_info['loginkey'], null, true, "lax");

			$lang->redirect_registered_coppa_activate = $lang->sprintf($lang->redirect_registered_coppa_activate, $mybb->settings['bbname'], $user_info['username']);

			$lang->redirect_registered_coppa_activate = $lang->sprintf($lang->redirect_registered_coppa_activate, $mybb->settings['bbname'], htmlspecialchars_uni($user_info['username']));

			$lang->redirect_registered_activation = $lang->sprintf($lang->redirect_registered_activation, $mybb->settings['bbname'], $user_info['username']);

			$lang->redirect_registered_activation = $lang->sprintf($lang->redirect_registered_activation, $mybb->settings['bbname'], htmlspecialchars_uni($user_info['username']));

					$emailmessage = $lang->sprintf($lang->email_randompassword, $user['username'], $mybb->settings['bbname'], $user_info['username'], $user_info['password']);

					$emailmessage = $lang->sprintf($lang->email_randompassword, $user['username'], $mybb->settings['bbname'], $user_info['username'], $mybb->get_input('password'));

					$emailmessage = $lang->sprintf($lang->email_randompassword1, $user['username'], $mybb->settings['bbname'], $user_info['username'], $user_info['password']);

					$emailmessage = $lang->sprintf($lang->email_randompassword1, $user['username'], $mybb->settings['bbname'], $user_info['username'], $mybb->get_input('password'));

					$emailmessage = $lang->sprintf($lang->email_randompassword2, $user['username'], $mybb->settings['bbname'], $user_info['username'], $user_info['password']);

					$emailmessage = $lang->sprintf($lang->email_randompassword2, $user['username'], $mybb->settings['bbname'], $user_info['username'], $mybb->get_input('password'));

					$emailmessage = $lang->sprintf($lang->email_randompassword, $user['username'], $mybb->settings['bbname'], $user_info['username'], $user_info['password']);

					$emailmessage = $lang->sprintf($lang->email_randompassword, $user['username'], $mybb->settings['bbname'], $user_info['username'], $mybb->get_input('password'));

					if($recipient['language'] != $mybb->user['language'] && $lang->language_exists($recipient['language']))
					{
						$reset_lang = true;
						$lang->set_language($recipient['language']);
						$lang->load("member");
					}

					$subject = $lang->sprintf($lang->newregistration_subject, $mybb->settings['bbname']);
					$message = $lang->sprintf($lang->newregistration_message, $recipient['username'], $mybb->settings['bbname'], $user['username']);
					my_mail($recipient['email'], $subject, $message);
				}

				// Reset language
				if(isset($reset_lang))
				{
					$lang->set_language($mybb->user['language']);
					$lang->load("member");
				}
			}

			$lang->redirect_registered_admin_activate = $lang->sprintf($lang->redirect_registered_admin_activate, $mybb->settings['bbname'], $user_info['username']);

			$plugins->run_hooks("member_do_register_end");

			error($lang->redirect_registered_admin_activate);
		}
		else if($mybb->settings['regtype'] == "both")
		{
			$groups = $cache->read("usergroups");
			$admingroups = array();
			if(!empty($groups)) // Shouldn't be...
			{
				foreach($groups as $group)
				{
					if($group['cancp'] == 1)
					{
						$admingroups[] = (int)$group['gid'];
					}
				}
			}

			if(!empty($admingroups))
			{
				$sqlwhere = 'usergroup IN ('.implode(',', $admingroups).')';
				foreach($admingroups as $admingroup)
				{
					switch($db->type)
					{
						case 'pgsql':
						case 'sqlite':
							$sqlwhere .= " OR ','||additionalgroups||',' LIKE '%,{$admingroup},%'";
							break;
						default:
							$sqlwhere .= " OR CONCAT(',',additionalgroups,',') LIKE '%,{$admingroup},%'";
							break;
					}
				}
				$q = $db->simple_select('users', 'uid,username,email,language', $sqlwhere);
				while($recipient = $db->fetch_array($q))
				{
					// First we check if the user's a super admin: if yes, we don't care about permissions
					$is_super_admin = is_super_admin($recipient['uid']);
					if(!$is_super_admin)
					{
						// Include admin functions
						if(!file_exists(MYBB_ROOT.$mybb->config['admin_dir']."/inc/functions.php"))
						{
							continue;
						}

						require_once MYBB_ROOT.$mybb->config['admin_dir']."/inc/functions.php";

						// Verify if we have permissions to access user-users
						require_once MYBB_ROOT.$mybb->config['admin_dir']."/modules/user/module_meta.php";
						if(function_exists("user_admin_permissions"))
						{
							// Get admin permissions
							$adminperms = get_admin_permissions($recipient['uid']);

							$permissions = user_admin_permissions();
							if(array_key_exists('users', $permissions['permissions']) && $adminperms['user']['users'] != 1)
							{
								continue; // No permissions
							}
						}
					}

					// Load language
					if($recipient['language'] != $mybb->user['language'] && $lang->language_exists($recipient['language']))

					if($recipient['language'] != $lang->language && $lang->language_exists($recipient['language']))
					{
						$reset_lang = true;
						$lang->set_language($recipient['language']);
						$lang->load("member");
					}

					$subject = $lang->sprintf($lang->newregistration_subject, $mybb->settings['bbname']);
					$message = $lang->sprintf($lang->newregistration_message, $recipient['username'], $mybb->settings['bbname'], $user['username']);
					my_mail($recipient['email'], $subject, $message);
				}

				// Reset language
				if(isset($reset_lang))
				{
					$lang->set_language($mybb->settings['bblanguage']);
					$lang->load("member");
				}
			}

			$lang->redirect_registered_admin_activate = $lang->sprintf($lang->redirect_registered_admin_activate, $mybb->settings['bbname'], htmlspecialchars_uni($user_info['username']));

			$plugins->run_hooks("member_do_register_end");

			error($lang->redirect_registered_admin_activate);
		}
		else if($mybb->settings['regtype'] == "both")
		{
			$groups = $cache->read("usergroups");
			$admingroups = array();
			if(!empty($groups)) // Shouldn't be...
			{
				foreach($groups as $group)
				{
					if($group['cancp'] == 1)
					{
						$admingroups[] = (int)$group['gid'];
					}
				}
			}

			if(!empty($admingroups))
			{
				$sqlwhere = 'usergroup IN ('.implode(',', $admingroups).')';
				foreach($admingroups as $admingroup)
				{
					switch($db->type)
					{
						case 'pgsql':
						case 'sqlite':
							$sqlwhere .= " OR ','||additionalgroups||',' LIKE '%,{$admingroup},%'";
							break;
						default:
							$sqlwhere .= " OR CONCAT(',',additionalgroups,',') LIKE '%,{$admingroup},%'";
							break;
					}
				}
				$q = $db->simple_select('users', 'uid,username,email,language', $sqlwhere);
				while($recipient = $db->fetch_array($q))
				{
					// First we check if the user's a super admin: if yes, we don't care about permissions
					$is_super_admin = is_super_admin($recipient['uid']);
					if(!$is_super_admin)
					{
						// Include admin functions
						if(!file_exists(MYBB_ROOT.$mybb->config['admin_dir']."/inc/functions.php"))
						{
							continue;
						}

						require_once MYBB_ROOT.$mybb->config['admin_dir']."/inc/functions.php";

						// Verify if we have permissions to access user-users
						require_once MYBB_ROOT.$mybb->config['admin_dir']."/modules/user/module_meta.php";
						if(function_exists("user_admin_permissions"))
						{
							// Get admin permissions
							$adminperms = get_admin_permissions($recipient['uid']);

							$permissions = user_admin_permissions();
							if(array_key_exists('users', $permissions['permissions']) && $adminperms['user']['users'] != 1)
							{
								continue; // No permissions
							}
						}
					}

					// Load language
					if($recipient['language'] != $lang->language && $lang->language_exists($recipient['language']))

					$lang->set_language($mybb->user['language']);

					$lang->set_language($mybb->settings['bblanguage']);

			$lang->redirect_registered_activation = $lang->sprintf($lang->redirect_registered_activation, $mybb->settings['bbname'], $user_info['username']);

			$lang->redirect_registered_activation = $lang->sprintf($lang->redirect_registered_activation, $mybb->settings['bbname'], htmlspecialchars_uni($user_info['username']));

			$lang->redirect_registered = $lang->sprintf($lang->redirect_registered, $mybb->settings['bbname'], $user_info['username']);

			$lang->redirect_registered = $lang->sprintf($lang->redirect_registered, $mybb->settings['bbname'], htmlspecialchars_uni($user_info['username']));

	$mybb->input['bday3'] = $mybb->get_input('bday3', MyBB::INPUT_INT);

	$birthday_year = $mybb->get_input('bday3', MyBB::INPUT_INT);

	if($mybb->input['bday3'] == 0)

	if($birthday_year == 0)

		$mybb->input['bday3'] = '';

		$birthday_year = '';

		if($mybb->input['bday1'] && $mybb->input['bday2'] && $mybb->input['bday3'])

		if($mybb->input['bday1'] && $mybb->input['bday2'] && $birthday_year)

			$months = get_bdays($mybb->input['bday3']);
			if($mybb->input['bday2'] < 1 || $mybb->input['bday2'] > 12 || $mybb->input['bday3'] < (date("Y")-100) || $mybb->input['bday3'] > date("Y") || $mybb->input['bday1'] > $months[$mybb->input['bday2']-1])

			$months = get_bdays($birthday_year);
			if($mybb->input['bday2'] < 1 || $mybb->input['bday2'] > 12 || $birthday_year < (date("Y")-100) || $birthday_year > date("Y") || $mybb->input['bday1'] > $months[$mybb->input['bday2']-1])

			$bdaytime = @mktime(0, 0, 0, $mybb->input['bday2'], $mybb->input['bday1'], $mybb->input['bday3']);

			$bdaytime = @mktime(0, 0, 0, $mybb->input['bday2'], $mybb->input['bday1'], $birthday_year);

			my_setcookie("coppadob", "{$mybb->input['bday1']}-{$mybb->input['bday2']}-{$mybb->input['bday3']}", -1);

			my_setcookie("coppadob", "{$mybb->input['bday1']}-{$mybb->input['bday2']}-{$birthday_year}", -1);

		$validator_extra = '';

		// JS validator extra
		if($mybb->settings['maxnamelength'] > 0 && $mybb->settings['minnamelength'] > 0)
		{
			$lang->js_validator_username_length = $lang->sprintf($lang->js_validator_username_length, $mybb->settings['minnamelength'], $mybb->settings['maxnamelength']);
		}

		$validator_javascript = "<script type=\"text/javascript\">
$(function() {
	$('#registration_form').validate({
		rules: {
			username: {
				required: true,
				minlength: {$mybb->settings['minnamelength']},
				maxlength: {$mybb->settings['maxnamelength']},
				remote: {
					url: 'xmlhttp.php?action=username_availability',
					type: 'post',
					dataType: 'json',
					data:
					{
						my_post_key: my_post_key
					},
				},
			},
			email: {
				required: true,
				email: true,
				remote: {
					url: 'xmlhttp.php?action=email_availability',
					type: 'post',
					dataType: 'json',
					data:
					{
						my_post_key: my_post_key
					},
				},
			},
			email2: {
				required: true,
				email: true,
				equalTo: '#email'
			},
		},
		messages: {
			username: {
				minlength: '{$lang->js_validator_username_length}',
				maxlength: '{$lang->js_validator_username_length}',
			},
			email: '{$lang->js_validator_invalid_email}',
			email2: '{$lang->js_validator_email_match}',
		},
		errorPlacement: function(error, element) {
			if(element.is(':checkbox') || element.is(':radio'))
				error.insertAfter($('input[name=\"' + element.attr('name') + '\"]').last().next('span'));
			else
				error.insertAfter(element);
		}
	});\n";

		}

		}

		}

		}

				{

				{

				}
			}

				}
			}

				$ref = $db->fetch_array($query);
				$referrername = $ref['username'];

				$ref = $db->fetch_array($query);
				$ref['username'] = htmlspecialchars_uni($ref['username']);
				$referrername = $ref['username'];

			{

			{

		}
		else

		}
		else

		{

		{

				}

				}

				$code = $select = $val = $options = $expoptions = $useropts = $seloptions = '';

				$code = $select = $val = $options = $expoptions = $useropts = '';
				$seloptions = array();

				{

				{

				{
					if($errors)
					{
						$useropts = $userfield;
					}
					else
					{
						$useropts = explode("\n", $userfield);
					}
					if(is_array($useropts))
					{
						foreach($useropts as $key => $val)
						{
							$seloptions[$val] = $val;
						}
					}
					$expoptions = explode("\n", $options);
					if(is_array($expoptions))
					{
						foreach($expoptions as $key => $val)
						{
							$val = trim($val);

				{
					if($errors)
					{
						$useropts = $userfield;
					}
					else
					{
						$useropts = explode("\n", $userfield);
					}
					if(is_array($useropts))
					{
						foreach($useropts as $key => $val)
						{
							$seloptions[$val] = $val;
						}
					}
					$expoptions = explode("\n", $options);
					if(is_array($expoptions))
					{
						foreach($expoptions as $key => $val)
						{
							$val = trim($val);

							if($val == $userfield)
							{
								$sel = ' selected="selected"';

							if($val == $userfield)
							{
								$sel = ' selected="selected"';

						}

						}

				{

				{

					}

					}

							$inp_selector = "$('textarea[name=\"profile_fields[{$field}]\"]')";					

							$inp_selector = "$('textarea[name=\"profile_fields[{$field}]\"]')";

							$inp_selector = "$('select[name=\"profile_fields[{$field}][]\"]')";					

							$inp_selector = "$('select[name=\"profile_fields[{$field}][]\"]')";

							$inp_selector = "$('input[name=\"profile_fields[{$field}][]\"]')";	

							$inp_selector = "$('input[name=\"profile_fields[{$field}][]\"]')";

						
						$validator_extra .= "
						{$inp_selector}.rules('add', {
							required: true,
							messages: {
								required: '{$lang->js_validator_not_empty}'
							}
						});\n";

						$validator_javascript .= "
	{$inp_selector}.rules('add', {
		required: true,
		messages: {
			required: '{$lang->js_validator_not_empty}'
		}
	});\n";

				}

				}

					$validator_extra .= "
					$('#imagestring').rules('add', {
						required: true,
						remote:{
							url: 'xmlhttp.php?action=validate_captcha',
							type: 'post',
							dataType: 'json',
							data:
							{
								imagehash: function () {
									return $('#imagehash').val();
								},
								my_post_key: my_post_key
							},
						},
						messages: {
							remote: '{$lang->js_validator_no_image_text}'
						}
					});\n";

					$validator_javascript .= "
	$('#imagestring').rules('add', {
		required: true,
		remote:{
			url: 'xmlhttp.php?action=validate_captcha',
			type: 'post',
			dataType: 'json',
			data:
			{
				imagehash: function () {
					return $('#imagehash').val();
				},
				my_post_key: my_post_key
			},
		},
		messages: {
			remote: '{$lang->js_validator_no_image_text}'
		}
	});\n";

		}

		}

				
				$validator_extra .= "
				$('#answer').rules('add', {
					required: true,
					remote:{
						url: 'xmlhttp.php?action=validate_question',
						type: 'post',
						dataType: 'json',
						data:
						{
							question: function () {
								return $('#question_id').val();
							},
							my_post_key: my_post_key
						},
					},
					messages: {
						remote: '{$lang->js_validator_no_security_question}'
					}
				});\n";

				$validator_javascript .= "
	$('#answer').rules('add', {
		required: true,
		remote:{
			url: 'xmlhttp.php?action=validate_question',
			type: 'post',
			dataType: 'json',
			data:
			{
				question: function () {
					return $('#question_id').val();
				},
				my_post_key: my_post_key
			},
		},
		messages: {
			remote: '{$lang->js_validator_no_security_question}'
		}
	});\n";

			{

			{

				
				$validator_extra .= "
				$('#password').rules('add', {
					required: true,
					minlength: {$mybb->settings['minpasswordlength']},
					remote:{
						url: 'xmlhttp.php?action=complex_password',
						type: 'post',
						dataType: 'json',
						data:
						{
							my_post_key: my_post_key
						},
					},
					messages: {
						minlength: '{$lang->js_validator_password_length}',
						required: '{$lang->js_validator_password_length}',
						remote: '{$lang->js_validator_no_image_text}'
					}
				});\n";

				$validator_javascript .= "
	$('#password').rules('add', {
		required: true,
		minlength: {$mybb->settings['minpasswordlength']},
		remote:{
			url: 'xmlhttp.php?action=complex_password',
			type: 'post',
			dataType: 'json',
			data:
			{
				my_post_key: my_post_key
			},
		},
		passwordSecurity: '',
		messages: {
			minlength: '{$lang->js_validator_password_length}',
			required: '{$lang->js_validator_password_length}',
			remote: '{$lang->js_validator_no_image_text}'
		}
	});\n";

				$validator_extra .= "
				$('#password').rules('add', {
					required: true,
					minlength: {$mybb->settings['minpasswordlength']},
					messages: {
						minlength: '{$lang->js_validator_password_length}',
						required: '{$lang->js_validator_password_length}'
					}
				});\n";

				$validator_javascript .= "
	$('#password').rules('add', {
		required: true,
		minlength: {$mybb->settings['minpasswordlength']},
        passwordSecurity: '',
		messages: {
			minlength: '{$lang->js_validator_password_length}',
			required: '{$lang->js_validator_password_length}'
		}
	});\n";

			$validator_extra .= "
				$('#password2').rules('add', {
					required: true,
					minlength: {$mybb->settings['minpasswordlength']},
					equalTo: '#password',
					messages: {
						minlength: '{$lang->js_validator_password_length}',
						required: '{$lang->js_validator_password_length}',
						equalTo: '{$lang->js_validator_password_matches}'
					}
				});\n";

			eval("\$passboxes = \"".$templates->get("member_register_password")."\";");

			$validator_javascript .= "
	$('#password2').rules('add', {
		required: true,
		minlength: {$mybb->settings['minpasswordlength']},
		equalTo: '#password',
		messages: {
			minlength: '{$lang->js_validator_password_length}',
			required: '{$lang->js_validator_password_length}',
			equalTo: '{$lang->js_validator_password_matches}'

		// JS validator extra
		if($mybb->settings['maxnamelength'] > 0 && $mybb->settings['minnamelength'] > 0)
		{
			$lang->js_validator_username_length = $lang->sprintf($lang->js_validator_username_length, $mybb->settings['minnamelength'], $mybb->settings['maxnamelength']);

			eval("\$passboxes = \"".$templates->get("member_register_password")."\";");

		if($activation['code'] != $mybb->get_input('code'))

		if($activation['code'] !== $mybb->get_input('code'))

		}

		$db->delete_query("awaitingactivation", "uid='".$user['uid']."' AND (type='r' OR type='e')");

		}

		$db->delete_query("awaitingactivation", "uid='".$user['uid']."' AND (type='r' OR type='e')");

		while($user = $db->fetch_array($query))

		if(count($errors) == 0)
		{
			while($user = $db->fetch_array($query))
			{
				if($user['type'] == "b" && $user['validated'] == 1)
				{
					error($lang->error_activated_by_admin);
				}

				if($user['usergroup'] == 5)
				{
					if(!$user['code'])
					{
						$user['code'] = random_str();
						$uid = $user['uid'];
						$awaitingarray = array(
							"uid" => $uid,
							"dateline" => TIME_NOW,
							"code" => $user['code'],
							"type" => $user['type']
						);
						$db->insert_query("awaitingactivation", $awaitingarray);
					}
					$username = $user['username'];
					$email = $user['email'];
					$activationcode = $user['code'];
					$emailsubject = $lang->sprintf($lang->emailsubject_activateaccount, $mybb->settings['bbname']);
					switch($mybb->settings['username_method'])
					{
						case 0:
							$emailmessage = $lang->sprintf($lang->email_activateaccount, $user['username'], $mybb->settings['bbname'], $mybb->settings['bburl'], $user['uid'], $activationcode);
							break;
						case 1:
							$emailmessage = $lang->sprintf($lang->email_activateaccount1, $user['username'], $mybb->settings['bbname'], $mybb->settings['bburl'], $user['uid'], $activationcode);
							break;
						case 2:
							$emailmessage = $lang->sprintf($lang->email_activateaccount2, $user['username'], $mybb->settings['bbname'], $mybb->settings['bburl'], $user['uid'], $activationcode);
							break;
						default:
							$emailmessage = $lang->sprintf($lang->email_activateaccount, $user['username'], $mybb->settings['bbname'], $mybb->settings['bburl'], $user['uid'], $activationcode);
							break;
					}
					my_mail($email, $emailsubject, $emailmessage);
				}
			}

			$plugins->run_hooks("member_do_resendactivation_end");

			redirect("index.php", $lang->redirect_activationresent);
		}
		else
		{
			$mybb->input['action'] = "resendactivation";
		}
	}
}

if($mybb->input['action'] == "resendactivation")
{
	$plugins->run_hooks("member_resendactivation");

	if($mybb->settings['regtype'] == "admin")
	{
		error($lang->error_activated_by_admin);
	}

	if($mybb->user['uid'] && $mybb->user['usergroup'] != 5)
	{
		error($lang->error_alreadyactivated);
	}

	$query = $db->simple_select("awaitingactivation", "*", "uid='".$mybb->user['uid']."' AND type='b'");
	$activation = $db->fetch_array($query);

	if($activation['validated'] == 1)
	{
		error($lang->error_activated_by_admin);
	}

	$captcha = '';
	// Generate CAPTCHA?
	if($mybb->settings['captchaimage'])
	{
		require_once MYBB_ROOT.'inc/class_captcha.php';
		$post_captcha = new captcha(true, "post_captcha");

		if($post_captcha->html)
		{
			$captcha = $post_captcha->html;
		}
	}

	if(isset($errors) && count($errors) > 0)
	{
		$errors = inline_error($errors);
		$email = htmlspecialchars_uni($mybb->get_input('email'));
	}
	else
	{
		$errors = '';
		$email = '';
	}

	$plugins->run_hooks("member_resendactivation_end");

	eval("\$activate = \"".$templates->get("member_resendactivation")."\";");
	output_page($activate);
}

if($mybb->input['action'] == "do_lostpw" && $mybb->request_method == "post")
{
	$plugins->run_hooks("member_do_lostpw_start");

	$errors = array();

	if($mybb->settings['captchaimage'])
	{
		require_once MYBB_ROOT.'inc/class_captcha.php';
		$captcha = new captcha;

		if($captcha->validate_captcha() == false)
		{
			// CAPTCHA validation failed
			foreach($captcha->get_errors() as $error)
			{
				$errors[] = $error;
			}
		}
	}

	$email = $db->escape_string($email);
	$query = $db->simple_select("users", "*", "email='".$db->escape_string($mybb->get_input('email'))."'");
	$numusers = $db->num_rows($query);
	if($numusers < 1)
	{
		error($lang->error_invalidemail);
	}
	else
	{
		if(count($errors) == 0)

			if($user['type'] == "b" && $user['validated'] == 1)

			while($user = $db->fetch_array($query))

				error($lang->error_activated_by_admin);
			}

			if($user['usergroup'] == 5)
			{
				if(!$user['code'])
				{
					$user['code'] = random_str();
					$uid = $user['uid'];
					$awaitingarray = array(
						"uid" => $uid,
						"dateline" => TIME_NOW,
						"code" => $user['code'],
						"type" => $user['type']
					);
					$db->insert_query("awaitingactivation", $awaitingarray);
				}

				$db->delete_query("awaitingactivation", "uid='{$user['uid']}' AND type='p'");
				$user['activationcode'] = random_str(30);
				$now = TIME_NOW;
				$uid = $user['uid'];
				$awaitingarray = array(
					"uid" => $user['uid'],
					"dateline" => TIME_NOW,
					"code" => $user['activationcode'],
					"type" => "p"
				);
				$db->insert_query("awaitingactivation", $awaitingarray);

				$activationcode = $user['code'];
				$emailsubject = $lang->sprintf($lang->emailsubject_activateaccount, $mybb->settings['bbname']);

				$activationcode = $user['activationcode'];
				$emailsubject = $lang->sprintf($lang->emailsubject_lostpw, $mybb->settings['bbname']);

						$emailmessage = $lang->sprintf($lang->email_activateaccount, $user['username'], $mybb->settings['bbname'], $mybb->settings['bburl'], $user['uid'], $activationcode);

						$emailmessage = $lang->sprintf($lang->email_lostpw, $username, $mybb->settings['bbname'], $mybb->settings['bburl'], $uid, $activationcode);

						$emailmessage = $lang->sprintf($lang->email_activateaccount1, $user['username'], $mybb->settings['bbname'], $mybb->settings['bburl'], $user['uid'], $activationcode);

						$emailmessage = $lang->sprintf($lang->email_lostpw1, $username, $mybb->settings['bbname'], $mybb->settings['bburl'], $uid, $activationcode);

						$emailmessage = $lang->sprintf($lang->email_activateaccount2, $user['username'], $mybb->settings['bbname'], $mybb->settings['bburl'], $user['uid'], $activationcode);

						$emailmessage = $lang->sprintf($lang->email_lostpw2, $username, $mybb->settings['bbname'], $mybb->settings['bburl'], $uid, $activationcode);

						$emailmessage = $lang->sprintf($lang->email_activateaccount, $user['username'], $mybb->settings['bbname'], $mybb->settings['bburl'], $user['uid'], $activationcode);

						$emailmessage = $lang->sprintf($lang->email_lostpw, $username, $mybb->settings['bbname'], $mybb->settings['bburl'], $uid, $activationcode);

	eval("\$lostpw = \"".$templates->get("member_lostpw")."\";");
	output_page($lostpw);
}

if($mybb->input['action'] == "do_lostpw" && $mybb->request_method == "post")
{
	$plugins->run_hooks("member_do_lostpw_start");

	$captcha = '';
	// Generate CAPTCHA?
	if($mybb->settings['captchaimage'])
	{
		require_once MYBB_ROOT.'inc/class_captcha.php';
		$post_captcha = new captcha(true, "post_captcha");

		if($post_captcha->html)
		{
			$captcha = $post_captcha->html;
		}
	}

	$email = $db->escape_string($email);
	$query = $db->simple_select("users", "*", "email='".$db->escape_string($mybb->get_input('email'))."'");
	$numusers = $db->num_rows($query);
	if($numusers < 1)
	{
		error($lang->error_invalidemail);

	if(isset($errors) && count($errors) > 0)
	{
		$errors = inline_error($errors);
		$email = htmlspecialchars_uni($mybb->get_input('email'));

		while($user = $db->fetch_array($query))
		{
			$db->delete_query("awaitingactivation", "uid='{$user['uid']}' AND type='p'");
			$user['activationcode'] = random_str();
			$now = TIME_NOW;
			$uid = $user['uid'];
			$awaitingarray = array(
				"uid" => $user['uid'],
				"dateline" => TIME_NOW,
				"code" => $user['activationcode'],
				"type" => "p"
			);
			$db->insert_query("awaitingactivation", $awaitingarray);
			$username = $user['username'];
			$email = $user['email'];
			$activationcode = $user['activationcode'];
			$emailsubject = $lang->sprintf($lang->emailsubject_lostpw, $mybb->settings['bbname']);
			switch($mybb->settings['username_method'])
			{
				case 0:
					$emailmessage = $lang->sprintf($lang->email_lostpw, $username, $mybb->settings['bbname'], $mybb->settings['bburl'], $uid, $activationcode);
					break;
				case 1:
					$emailmessage = $lang->sprintf($lang->email_lostpw1, $username, $mybb->settings['bbname'], $mybb->settings['bburl'], $uid, $activationcode);
					break;
				case 2:
					$emailmessage = $lang->sprintf($lang->email_lostpw2, $username, $mybb->settings['bbname'], $mybb->settings['bburl'], $uid, $activationcode);
					break;
				default:
					$emailmessage = $lang->sprintf($lang->email_lostpw, $username, $mybb->settings['bbname'], $mybb->settings['bburl'], $uid, $activationcode);
					break;
			}
			my_mail($email, $emailsubject, $emailmessage);
		}
	}
	$plugins->run_hooks("member_do_lostpw_end");

	redirect("index.php", $lang->redirect_lostpwsent, "", true);

		$errors = '';
		$email = '';
	}

	eval("\$lostpw = \"".$templates->get("member_lostpw")."\";");
	output_page($lostpw);

		if(!$activationcode || $activationcode != $mybb->get_input('code'))

		if(!$activationcode || $activationcode !== $mybb->get_input('code'))

			$password_length = 8;
		}

			$password_length = min(8, (int)$mybb->settings['maxpasswordlength']);
		}

		// Set up user handler.
		require_once MYBB_ROOT.'inc/datahandlers/user.php';
		$userhandler = new UserDataHandler('update');

		while(!$userhandler->verify_password())
		{
			$password = random_str($password_length, $mybb->settings['requirecomplexpasswords']);

			$userhandler->set_data(array(
				'uid'		=> $user['uid'],
				'username'	=> $user['username'],
				'email'		=> $user['email'],
				'password'	=> $password
			));

		$password = random_str($password_length);
		$logindetails = update_password($user['uid'], md5($password), $user['salt']);

		$email = $user['email'];

			$userhandler->set_validated(true);
			$userhandler->errors = array();
		}

		$userhandler->update_user();

		$logindetails = array(
			'salt'		=> $userhandler->data['salt'],
			'password'	=> $userhandler->data['saltedpw'],
			'loginkey'	=> $userhandler->data['loginkey'],
		);

		$email = $user['email'];

		$code = $mybb->get_input('code');

		$code = htmlspecialchars_uni($mybb->get_input('code'));

		if(!isset($user['username']))

		if(!isset($mybb->input['username']))

			$user['username'] = '';

			$input_username = '';

	$plugins->run_hooks("member_do_login_start");

    verify_post_check($mybb->get_input('my_post_key'));

	$logins = login_attempt_check();

	$plugins->run_hooks("member_do_login_start");

		my_setcookie('loginattempts', $logins + 1);

		$login_user = get_user_by_username($user['username'], array('fields' => 'uid'));

		// Is a fatal call if user has had too many tries
		$logins = login_attempt_check($login_user['uid']);

			redirect(htmlentities($mybb->input['url']), $lang->redirect_loggedin);

			redirect($mybb->input['url'], $lang->redirect_loggedin);

	// Is a fatal call if user has had too many tries

	// Is a fatal call if user has had too many tries. This particular check uses cookies, as a uid is not set yet
	// and we can't check loginattempts in the db

		elseif($login_captcha->type == 2 || $login_captcha->type == 4)

		elseif(in_array($login_captcha->type, array(2, 4, 5)))

	if(isset($mybb->input['sid']) && $mybb->get_input('sid') != $session->sid)

	if(isset($mybb->input['sid']) && $mybb->get_input('sid') !== $session->sid)

	else if(!isset($mybb->input['sid']) && $mybb->get_input('logoutkey') != $mybb->user['logoutkey'])

	else if(!isset($mybb->input['sid']) && $mybb->get_input('logoutkey') !== $mybb->user['logoutkey'])

	if($mybb->settings['enablepms'] != 0 && (($memprofile['receivepms'] != 0 && $memperms['canusepms'] != 0 && my_strpos(",".$memprofile['ignorelist'].",", ",".$mybb->user['uid'].",") === false) || $mybb->usergroup['canoverridepm'] == 1))
	{
		$lang->send_pm = $lang->sprintf($lang->send_pm, $memprofile['username']);
	}
	else
	{
		$lang->send_pm = '';
	}

	$lang->send_pm = $lang->sprintf($lang->send_pm, $memprofile['username']);

	
	if($memprofile['website'] && !is_member($mybb->settings['hidewebsite']) && $memperms['canchangewebsite'] == 1)
	{

	if(my_validate_url($memprofile['website']) && !is_member($mybb->settings['hidewebsite']) && $memperms['canchangewebsite'] == 1)
	{

		$bgcolor = alt_trow();

		$bgcolor = alt_trow();

	
	if($memprofile['hideemail'] != 1 && (my_strpos(",".$memprofile['ignorelist'].",", ",".$mybb->user['uid'].",") === false || $mybb->usergroup['cansendemailoverride'] != 0))

	if($mybb->usergroup['cansendemail'] == 1 && $uid != $mybb->user['uid'] && $memprofile['hideemail'] != 1 && (my_strpos(",".$memprofile['ignorelist'].",", ",".$mybb->user['uid'].",") === false || $mybb->usergroup['cansendemailoverride'] != 0))
	{
		$bgcolor = alt_trow();
		eval("\$sendemail = \"".$templates->get("member_profile_email")."\";");
	}

	if($mybb->settings['enablepms'] != 0 && $uid != $mybb->user['uid'] && $mybb->usergroup['canusepms'] == 1 && (($memprofile['receivepms'] != 0 && $memperms['canusepms'] != 0 && my_strpos(",".$memprofile['ignorelist'].",", ",".$mybb->user['uid'].",") === false) || $mybb->usergroup['canoverridepm'] == 1))

		$bgcolor = alt_trow();	
		eval("\$sendemail = \"".$templates->get("member_profile_email")."\";");
	}
	
	if($mybb->settings['enablepms'] == 1 && $memprofile['receivepms'] != 0 && $mybb->usergroup['cansendpms'] == 1 && my_strpos(",".$memprofile['ignorelist'].",", ",".$mybb->user['uid'].",") === false)
	{
		$bgcolor = alt_trow();	

		$bgcolor = alt_trow();

	foreach(array('icq', 'aim', 'yahoo', 'skype', 'google') as $field)

	foreach(array('icq', 'skype', 'google') as $field)

			"me_username" => $memprofile['username'],

			"me_username" => $me_username,

	}

	}

		eval("\$findposts = \"".$templates->get("member_profile_findposts")."\";");
		eval("\$findthreads = \"".$templates->get("member_profile_findthreads")."\";");

		if(!empty($memprofile['postnum']))
		{
			eval("\$findposts = \"".$templates->get("member_profile_findposts")."\";");
		}
		if(!empty($memprofile['threadnum']))
		{
			eval("\$findthreads = \"".$templates->get("member_profile_findthreads")."\";");
		}

	$memprofile['timezone'] = (float)$memprofile['timezone'];

				$membdayage = '';

				$membdayage = '';

		{
			$membday = $lang->birthdayhidden;

		{
			$membday = $lang->birthdayhidden;

	{

	{

	elseif(trim($displaygroup['usertitle']) != '')

	elseif(trim($memperms['usertitle']) != '')

		$usertitle = $displaygroup['usertitle'];

		$usertitle = $memperms['usertitle'];

					$stars = $title['stars'];
					$starimage = $title['starimage'];

					break;
				}
			}
		}

					$stars = $title['stars'];
					$starimage = $title['starimage'];

					break;
				}
			}
		}

	if($displaygroup['stars'] || $displaygroup['usertitle'])

	if($memperms['stars'] || $memperms['usertitle'])

		$stars = $displaygroup['stars'];

		$stars = $memperms['stars'];

	if(!empty($displaygroup['image']))

	if(!empty($memperms['image']))

		$displaygroup['image'] = str_replace("{lang}", $language, $displaygroup['image']);
		$displaygroup['image'] = str_replace("{theme}", $theme['imgdir'], $displaygroup['image']);

		$memperms['image'] = str_replace("{lang}", $language, $memperms['image']);
		$memperms['image'] = str_replace("{theme}", $theme['imgdir'], $memperms['image']);

		$starimage = $displaygroup['starimage'];

		$starimage = $memperms['starimage'];

	$online_status = '';
	if($memprofile['invisible'] != 1 || $mybb->usergroup['canviewwolinvis'] == 1 || $memprofile['uid'] == $mybb->user['uid'])

	$timeonline = $lang->none_registered;
	$memlastvisitdate = $lang->lastvisit_never;
	$last_seen = max(array($memprofile['lastactive'], $memprofile['lastvisit']));
	if(!empty($last_seen))

		// Lastvisit
		if($memprofile['lastactive'])

		// We have some stamp here
		if($memprofile['invisible'] == 1 && $mybb->usergroup['canviewwolinvis'] != 1 && $memprofile['uid'] != $mybb->user['uid'])

			$memlastvisitsep = $lang->comma;
			$memlastvisitdate = my_date('relative', $memprofile['lastactive']);
		}

		// Time Online
		$timeonline = $lang->none_registered;
		if($memprofile['timeonline'] > 0)
		{
			$timeonline = nice_time($memprofile['timeonline']);
		}

		// Online?
		if(!empty($session))

			$memlastvisitdate = $lang->lastvisit_hidden;
			$online_status = $timeonline = $lang->timeonline_hidden;
		}
		else

			// Fetch their current location
			$lang->load("online");
			require_once MYBB_ROOT."inc/functions_online.php";
			$activity = fetch_wol_activity($session['location'], $session['nopermission']);
			$location = build_friendly_wol_location($activity);
			$location_time = my_date($mybb->settings['timeformat'], $memprofile['lastactive']);

			eval("\$online_status = \"".$templates->get("member_profile_online")."\";");
		}
		// User is offline
		else
		{
			eval("\$online_status = \"".$templates->get("member_profile_offline")."\";");
		}
	}

			$memlastvisitdate = my_date('relative', $last_seen);

			if($memprofile['timeonline'] > 0)
			{
				$timeonline = nice_time($memprofile['timeonline']);
			}

	if($memprofile['invisible'] == 1 && $mybb->usergroup['canviewwolinvis'] != 1 && $memprofile['uid'] != $mybb->user['uid'])
	{
		$memlastvisitsep = '';
		$memlastvisittime = '';
		$memlastvisitdate = $lang->lastvisit_never;

		if($memprofile['lastactive'])
		{
			// We have had at least some active time, hide it instead
			$memlastvisitdate = $lang->lastvisit_hidden;

			// Online?
			if(!empty($session))
			{
				// Fetch their current location
				$lang->load("online");
				require_once MYBB_ROOT."inc/functions_online.php";
				$activity = fetch_wol_activity($session['location'], $session['nopermission']);
				$location = build_friendly_wol_location($activity);
				$location_time = my_date($mybb->settings['timeformat'], $last_seen);
	
				eval("\$online_status = \"".$templates->get("member_profile_online")."\";");
			}

		$timeonline = $lang->timeonline_hidden;

	if(!isset($online_status))
	{		
		eval("\$online_status = \"".$templates->get("member_profile_offline")."\";");

	{
		$bg_color = alt_trow();

	{
		$bg_color = alt_trow();

		$uid = (int) $memprofile['uid'];
		$referral_count = $memprofile['referrals'];
		if ($referral_count > 0) {
			eval("\$memprofile['referrals'] = \"".$templates->get('member_referrals_link')."\";");
		}

		eval("\$referrals = \"".$templates->get("member_profile_referrals")."\";");

		eval("\$referrals = \"".$templates->get('member_profile_referrals')."\";");

	if($memperms['usereputationsystem'] == 1 && $displaygroup['usereputationsystem'] == 1 && $mybb->settings['enablereputation'] == 1)

	if($memperms['usereputationsystem'] == 1 && $mybb->settings['enablereputation'] == 1)

		}

		}

		{

		{

		}

		}

			if($mybb->usergroup['cancp'] != 1 && $mybb->usergroup['issupermod'] != 1 && $mybb->usergroup['canmodcp'] != 1 && !is_member($customfield['viewableby']))

			if($mybb->usergroup['cancp'] != 1 && $mybb->usergroup['issupermod'] != 1 && $mybb->usergroup['canmodcp'] != 1 && !is_member($customfield['viewableby']) || !$customfield['profile'])

					{

					{

					}

					}

					}
				}

					}
				}

					}

					}

				$timeremaining = "<span style=\"color: red;\">({$timeremaining} {$lang->ban_remaining})</span>";

				$banned_class = "high_banned";

				$timeremaining = "<span style=\"color: maroon;\">({$timeremaining} {$lang->ban_remaining})</span>";

				$banned_class = "moderate_banned";

				$timeremaining = "<span style=\"color: green;\">({$timeremaining} {$lang->ban_remaining})</span>";

				$banned_class = "low_banned";

				$timeremaining = "({$timeremaining} {$lang->ban_remaining})";

				$banned_class = "normal_banned";

		$memban['adminuser'] = build_profile_link($memban['adminuser'], $memban['admin']);

		$memban['adminuser'] = build_profile_link(htmlspecialchars_uni($memban['adminuser']), $memban['admin']);

	}

	}

	{

	{

	$modoptions = $viewnotes = $editnotes = $editprofile = $banuser = $manageuser = '';

	$modoptions = $viewnotes = $editnotes = $editprofile = $banuser = $manageban = $manageuser = '';

			}
		}

			}
		}

		}

		}

		}

		}

			eval("\$banuser = \"".$templates->get("member_profile_modoptions_banuser")."\";");

			if($memperms['isbannedgroup'] == 1 && $mybb->usergroup['canbanusers'] == 1)
			{
				eval("\$manageban = \"".$templates->get("member_profile_modoptions_manageban")."\";");
			}
			else
			{
				eval("\$banuser = \"".$templates->get("member_profile_modoptions_banuser")."\";");
			}

		}

		if(!empty($editprofile) || !empty($banuser) || !empty($purgespammer))
		{

		}

		if(!empty($editprofile) || !empty($banuser) || !empty($manageban) || !empty($purgespammer))
		{

		}

		}

		}

		}

		{

		{

			$add_remove_options = array('url' => "javascript:Report.reportUser({$memprofile['uid']});", 'class' => 'report_user_button', 'lang' => $lang->report_user);
			eval("\$report_options = \"".$templates->get("member_profile_addremove")."\";"); // Report User

			$reportable = true;
			$query = $db->simple_select("reportedcontent", "reporters", "reportstatus != '1' AND id = '{$memprofile['uid']}' AND type = 'profile'");
			if($db->num_rows($query))
			{
				$report = $db->fetch_array($query);
				$report['reporters'] = my_unserialize($report['reporters']);
				if(is_array($report['reporters']) && in_array($mybb->user['uid'], $report['reporters']))
				{
					$reportable = false;
				}
			}
			if($reportable)
			{
				$add_remove_options = array('url' => "javascript:Report.reportUser({$memprofile['uid']});", 'class' => 'report_user_button', 'lang' => $lang->report_user);
				eval("\$report_options = \"".$templates->get("member_profile_addremove")."\";"); // Report User
			}

	// Guests or those without permission can't email other users
	if($mybb->usergroup['cansendemail'] == 0)
	{
		error_no_permission();
	}

	// Check group limits
	if($mybb->usergroup['maxemails'] > 0)
	{
		if($mybb->user['uid'] > 0)
		{
			$user_check = "fromuid='{$mybb->user['uid']}'";
		}
		else
		{
			$user_check = "ipaddress=".$db->escape_binary($session->packedip);
		}

		$query = $db->simple_select("maillogs", "COUNT(*) AS sent_count", "{$user_check} AND dateline >= '".(TIME_NOW - (60*60*24))."'");
		$sent_count = $db->fetch_field($query, "sent_count");
		if($sent_count >= $mybb->usergroup['maxemails'])
		{
			$lang->error_max_emails_day = $lang->sprintf($lang->error_max_emails_day, $mybb->usergroup['maxemails']);
			error($lang->error_max_emails_day);
		}
	}

	// Check email flood control
	if($mybb->usergroup['emailfloodtime'] > 0)
	{
		if($mybb->user['uid'] > 0)
		{
			$user_check = "fromuid='{$mybb->user['uid']}'";
		}
		else
		{
			$user_check = "ipaddress=".$db->escape_binary($session->packedip);
		}

		$timecut = TIME_NOW-$mybb->usergroup['emailfloodtime']*60;

		$query = $db->simple_select("maillogs", "mid, dateline", "{$user_check} AND dateline > '{$timecut}'", array('order_by' => "dateline", 'order_dir' => "DESC"));
		$last_email = $db->fetch_array($query);

		// Users last email was within the flood time, show the error
		if($last_email['mid'])
		{
			$remaining_time = ($mybb->usergroup['emailfloodtime']*60)-(TIME_NOW-$last_email['dateline']);

	// Guests or those without permission can't email other users
	if($mybb->usergroup['cansendemail'] == 0)
	{
		error_no_permission();
	}

	// Check group limits
	if($mybb->usergroup['maxemails'] > 0)
	{
		if($mybb->user['uid'] > 0)
		{
			$user_check = "fromuid='{$mybb->user['uid']}'";
		}
		else
		{
			$user_check = "ipaddress=".$db->escape_binary($session->packedip);
		}

		$query = $db->simple_select("maillogs", "COUNT(*) AS sent_count", "{$user_check} AND dateline >= '".(TIME_NOW - (60*60*24))."'");
		$sent_count = $db->fetch_field($query, "sent_count");
		if($sent_count >= $mybb->usergroup['maxemails'])
		{
			$lang->error_max_emails_day = $lang->sprintf($lang->error_max_emails_day, $mybb->usergroup['maxemails']);
			error($lang->error_max_emails_day);
		}
	}

	// Check email flood control
	if($mybb->usergroup['emailfloodtime'] > 0)
	{
		if($mybb->user['uid'] > 0)
		{
			$user_check = "fromuid='{$mybb->user['uid']}'";
		}
		else
		{
			$user_check = "ipaddress=".$db->escape_binary($session->packedip);
		}

		$timecut = TIME_NOW-$mybb->usergroup['emailfloodtime']*60;

		$query = $db->simple_select("maillogs", "mid, dateline", "{$user_check} AND dateline > '{$timecut}'", array('order_by' => "dateline", 'order_dir' => "DESC"));
		$last_email = $db->fetch_array($query);

		// Users last email was within the flood time, show the error
		if($last_email['mid'])
		{
			$remaining_time = ($mybb->usergroup['emailfloodtime']*60)-(TIME_NOW-$last_email['dateline']);

			{

			{

	}

	}

	{

	{

	{

	{

	}

	}

	{

	{

	{

	{

		{

		{

	{
		if($mybb->settings['mail_handler'] == 'smtp')
		{
			$from = $mybb->input['fromemail'];
		}
		else

	{
		if($mybb->settings['mail_handler'] == 'smtp')
		{
			$from = $mybb->input['fromemail'];
		}
		else

		}

		$message = $lang->sprintf($lang->email_emailuser, $to_user['username'], $mybb->input['fromname'], $mybb->settings['bbname'], $mybb->settings['bburl'], $mybb->get_input('message'));
		my_mail($to_user['email'], $mybb->get_input('subject'), $message, $from, "", "", false, "text", "", $mybb->input['fromemail']);

		}

		$message = $lang->sprintf($lang->email_emailuser, $to_user['username'], $mybb->input['fromname'], $mybb->settings['bbname'], $mybb->settings['bburl'], $mybb->get_input('message'));
		my_mail($to_user['email'], $mybb->get_input('subject'), $message, '', '', '', false, 'text', '', $from);

	{
		error_no_permission();
	}

	{
		error_no_permission();
	}

	}

	}

	}

	}

		}
	}

		}
	}

	}

	}

	}

	}