Vergleich usercp.php - 1.8.12 - 1.8.26

Keine Änderungen Hinzugefügt Modifiziert Entfernt
Zeile 10	Zeile 10
define("IN_MYBB", 1); define('THIS_SCRIPT', 'usercp.php');	define("IN_MYBB", 1); define('THIS_SCRIPT', 'usercp.php');
	define("ALLOWABLE_PAGE", "removesubscription,removesubscriptions");
$templatelist = "usercp,usercp_nav,usercp_profile,usercp_changename,usercp_password,usercp_subscriptions_thread,forumbit_depth2_forum_lastpost,usercp_forumsubscriptions_forum,postbit_reputation_formatted,usercp_subscriptions_thread_icon"; $templatelist .= ",usercp_usergroups_memberof_usergroup,usercp_usergroups_memberof,usercp_usergroups_joinable_usergroup,usercp_usergroups_joinable,usercp_usergroups,usercp_nav_attachments,usercp_options_style,usercp_warnings_warning_post";	$templatelist = "usercp,usercp_nav,usercp_profile,usercp_changename,usercp_password,usercp_subscriptions_thread,forumbit_depth2_forum_lastpost,usercp_forumsubscriptions_forum,postbit_reputation_formatted,usercp_subscriptions_thread_icon"; $templatelist .= ",usercp_usergroups_memberof_usergroup,usercp_usergroups_memberof,usercp_usergroups_joinable_usergroup,usercp_usergroups_joinable,usercp_usergroups,usercp_nav_attachments,usercp_options_style,usercp_warnings_warning_post";
Zeile 27	Zeile 28
$templatelist .= ",usercp_usergroups_leader_usergroup_memberlist,usercp_usergroups_leader_usergroup_moderaterequests,usercp_usergroups_memberof_usergroup_leaveprimary,usercp_usergroups_memberof_usergroup_display,usercp_email,usercp_options_pms"; $templatelist .= ",usercp_usergroups_memberof_usergroup_leaveleader,usercp_usergroups_memberof_usergroup_leaveother,usercp_usergroups_memberof_usergroup_leave,usercp_usergroups_joinable_usergroup_description,usercp_options_time_format"; $templatelist .= ",usercp_editlists_sent_request,usercp_editlists_received_request,usercp_drafts_none,usercp_usergroups_memberof_usergroup_setdisplay,usercp_usergroups_memberof_usergroup_description,usercp_options_quick_reply";	$templatelist .= ",usercp_usergroups_leader_usergroup_memberlist,usercp_usergroups_leader_usergroup_moderaterequests,usercp_usergroups_memberof_usergroup_leaveprimary,usercp_usergroups_memberof_usergroup_display,usercp_email,usercp_options_pms"; $templatelist .= ",usercp_usergroups_memberof_usergroup_leaveleader,usercp_usergroups_memberof_usergroup_leaveother,usercp_usergroups_memberof_usergroup_leave,usercp_usergroups_joinable_usergroup_description,usercp_options_time_format"; $templatelist .= ",usercp_editlists_sent_request,usercp_editlists_received_request,usercp_drafts_none,usercp_usergroups_memberof_usergroup_setdisplay,usercp_usergroups_memberof_usergroup_description,usercp_options_quick_reply";
	$templatelist .= ",usercp_addsubscription_thread,forumdisplay_password,forumdisplay_password_wrongpass,";
require_once "./global.php"; require_once MYBB_ROOT."inc/functions_post.php";	require_once "./global.php"; require_once MYBB_ROOT."inc/functions_post.php";
Zeile 40	Zeile 42
if($mybb->user['uid'] == 0 \|\| $mybb->usergroup['canusercp'] == 0) { error_no_permission();	if($mybb->user['uid'] == 0 \|\| $mybb->usergroup['canusercp'] == 0) { error_no_permission();
} if(!$mybb->user['pmfolders']) { $mybb->user['pmfolders'] = '1$%%$2$%%$3$%%$4'; $db->update_query('users', array('pmfolders' => $mybb->user['pmfolders']), "uid = {$mybb->user['uid']}");
} $errors = '';	} $errors = '';

$mybb->input['action'] = $mybb->get_input('action');	$mybb->input['action'] = $mybb->get_input('action');

usercp_menu();	usercp_menu();
	$server_http_referer = htmlentities($_SERVER['HTTP_REFERER']); if(my_strpos($server_http_referer, $mybb->settings['bburl'].'/') !== 0) { if(my_strpos($server_http_referer, '/') === 0) { $server_http_referer = my_substr($server_http_referer, 1); } $url_segments = explode('/', $server_http_referer); $server_http_referer = $mybb->settings['bburl'].'/'.end($url_segments); }
$plugins->run_hooks("usercp_start"); if($mybb->input['action'] == "do_editsig" && $mybb->request_method == "post")	$plugins->run_hooks("usercp_start"); if($mybb->input['action'] == "do_editsig" && $mybb->request_method == "post")
Zeile 140	Zeile 148
{ // Verify incoming POST request verify_post_check($mybb->get_input('my_post_key'));	{ // Verify incoming POST request verify_post_check($mybb->get_input('my_post_key'));
	$user = array();
$plugins->run_hooks("usercp_do_profile_start");	$plugins->run_hooks("usercp_do_profile_start");
Zeile 203	Zeile 213
require_once MYBB_ROOT."inc/datahandlers/user.php"; $userhandler = new UserDataHandler("update");	require_once MYBB_ROOT."inc/datahandlers/user.php"; $userhandler = new UserDataHandler("update");
$user = array(	$user = array_merge($user, array(
"uid" => $mybb->user['uid'], "postnum" => $mybb->user['postnum'], "usergroup" => $mybb->user['usergroup'],	"uid" => $mybb->user['uid'], "postnum" => $mybb->user['postnum'], "usergroup" => $mybb->user['usergroup'],
Zeile 212	Zeile 222
"birthdayprivacy" => $mybb->get_input('birthdayprivacy'), "away" => $away, "profile_fields" => $mybb->get_input('profile_fields', MyBB::INPUT_ARRAY)	"birthdayprivacy" => $mybb->get_input('birthdayprivacy'), "away" => $away, "profile_fields" => $mybb->get_input('profile_fields', MyBB::INPUT_ARRAY)
); foreach(array('icq', 'aim', 'yahoo', 'skype', 'google') as $cfield) { $csetting = 'allow'.$cfield.'field'; if($mybb->settings[$csetting] == '') { continue; } if(!is_member($mybb->settings[$csetting])) {	)); foreach(array('icq', 'skype', 'google') as $cfield) { $csetting = 'allow'.$cfield.'field'; if($mybb->settings[$csetting] == '') { continue; } if(!is_member($mybb->settings[$csetting])) {
continue; } if($cfield == 'icq') { $user[$cfield] = $mybb->get_input($cfield, 1);	continue; } if($cfield == 'icq') { $user[$cfield] = $mybb->get_input($cfield, 1);
	if(my_strlen($user[$cfield]) > 10) { error($lang->contact_field_icqerror); }
} else { $user[$cfield] = $mybb->get_input($cfield);	} else { $user[$cfield] = $mybb->get_input($cfield);
	if(my_strlen($user[$cfield]) > 75) { error($lang->contact_field_error); }
}	}
}	}
if($mybb->usergroup['canchangewebsite'] == 1) { $user['website'] = $mybb->get_input('website');	if($mybb->usergroup['canchangewebsite'] == 1) { $user['website'] = $mybb->get_input('website');
}	}
if($mybb->usergroup['cancustomtitle'] == 1) { if($mybb->get_input('usertitle') != '') { $user['usertitle'] = $mybb->get_input('usertitle');	if($mybb->usergroup['cancustomtitle'] == 1) { if($mybb->get_input('usertitle') != '') { $user['usertitle'] = $mybb->get_input('usertitle');
} else if(!empty($mybb->input['reverttitle']))	} elseif(!empty($mybb->input['reverttitle']))
{ $user['usertitle'] = ''; }	{ $user['usertitle'] = ''; }
Zeile 257	Zeile 277
if(!$userhandler->validate_user()) { $errors = $userhandler->get_friendly_errors();	if(!$userhandler->validate_user()) { $errors = $userhandler->get_friendly_errors();
	$raw_errors = $userhandler->get_errors();

// Set allowed value otherwise select options disappear if(in_array($lang->userdata_invalid_birthday_privacy, $errors))	// Set to stored value if invalid if(array_key_exists("invalid_birthday_privacy", $raw_errors))
{	{
$mybb->input['birthdayprivacy'] = 'none';	$mybb->input['birthdayprivacy'] = $mybb->user['birthdayprivacy'];
} $errors = inline_error($errors);	} $errors = inline_error($errors);
Zeile 278	Zeile 299
if($mybb->input['action'] == "profile") {	if($mybb->input['action'] == "profile") {
if($errors) {	if($errors) {
$user = $mybb->input; $bday = array(); $bday[0] = $mybb->get_input('bday1', MyBB::INPUT_INT);	$user = $mybb->input; $bday = array(); $bday[0] = $mybb->get_input('bday1', MyBB::INPUT_INT);
Zeile 287	Zeile 308
$bday[2] = $mybb->get_input('bday3', MyBB::INPUT_INT); } else	$bday[2] = $mybb->get_input('bday3', MyBB::INPUT_INT); } else
{	{
$user = $mybb->user; $bday = explode("-", $user['birthday']); if(!isset($bday[1]))	$user = $mybb->user; $bday = explode("-", $user['birthday']); if(!isset($bday[1]))
Zeile 329	Zeile 350
{ $allselected = " selected=\"selected\""; }	{ $allselected = " selected=\"selected\""; }
else if($user['birthdayprivacy'] == 'none')	elseif($user['birthdayprivacy'] == 'none')
{ $noneselected = " selected=\"selected\"";	{ $noneselected = " selected=\"selected\"";
} else if($user['birthdayprivacy'] == 'age') {	} elseif($user['birthdayprivacy'] == 'age') {
$ageselected = " selected=\"selected\""; } if(!my_validate_url($user['website'])) { $user['website'] = '';	$ageselected = " selected=\"selected\""; } if(!my_validate_url($user['website'])) { $user['website'] = '';
}	}
else	else
{	{
$user['website'] = htmlspecialchars_uni($user['website']); } if($user['icq'] != "0")	$user['website'] = htmlspecialchars_uni($user['website']); } if($user['icq'] != "0")
{	{
$user['icq'] = (int)$user['icq']; } if($user['icq'] == 0) { $user['icq'] = '';	$user['icq'] = (int)$user['icq']; } if($user['icq'] == 0) { $user['icq'] = '';
}	}
if($errors) { $user['skype'] = htmlspecialchars_uni($user['skype']); $user['google'] = htmlspecialchars_uni($user['google']);	if($errors) { $user['skype'] = htmlspecialchars_uni($user['skype']); $user['google'] = htmlspecialchars_uni($user['google']);
$user['aim'] = htmlspecialchars_uni($user['aim']); $user['yahoo'] = htmlspecialchars_uni($user['yahoo']);
} $contact_fields = array(); $contactfields = ''; $cfieldsshow = false;	} $contact_fields = array(); $contactfields = ''; $cfieldsshow = false;
foreach(array('icq', 'aim', 'yahoo', 'skype', 'google') as $cfield)	foreach(array('icq', 'skype', 'google') as $cfield)
{ $contact_fields[$cfield] = ''; $csetting = 'allow'.$cfield.'field';	{ $contact_fields[$cfield] = ''; $csetting = 'allow'.$cfield.'field';
Zeile 388	Zeile 407
$lang_string = 'contact_field_'.$cfield; $lang_string = $lang->{$lang_string}; $cfvalue = htmlspecialchars_uni($user[$cfield]);	$lang_string = 'contact_field_'.$cfield; $lang_string = $lang->{$lang_string}; $cfvalue = htmlspecialchars_uni($user[$cfield]);

eval('$contact_fields[$cfield] = "'.$templates->get('usercp_profile_contact_fields_field').'";'); }	eval('$contact_fields[$cfield] = "'.$templates->get('usercp_profile_contact_fields_field').'";'); }
Zeile 403	Zeile 422
if($errors) { if($user['away'] == 1)	if($errors) { if($user['away'] == 1)
{ $awaycheck[1] = "checked=\"checked\"";	{ $awaycheck[1] = "checked=\"checked\"";
} else {	} else {
Zeile 524	Zeile 543
foreach($useropts as $key => $val) { $val = htmlspecialchars_uni($val);	foreach($useropts as $key => $val) { $val = htmlspecialchars_uni($val);
$seloptions[$val] = $val; } } $expoptions = explode("\n", $options); if(is_array($expoptions)) { foreach($expoptions as $key => $val) { $val = trim($val); $val = str_replace("\n", "\\n", $val); $sel = ""; if(isset($seloptions[$val]) && $val == $seloptions[$val]) { $sel = " selected=\"selected\""; } eval("\$select .= \"".$templates->get("usercp_profile_profilefields_select_option")."\";"); } if(!$profilefield['length']) {	$seloptions[$val] = $val; } } $expoptions = explode("\n", $options); if(is_array($expoptions)) { foreach($expoptions as $key => $val) { $val = trim($val); $val = str_replace("\n", "\\n", $val); $sel = ""; if(isset($seloptions[$val]) && $val == $seloptions[$val]) { $sel = " selected=\"selected\""; } eval("\$select .= \"".$templates->get("usercp_profile_profilefields_select_option")."\";"); } if(!$profilefield['length']) {
$profilefield['length'] = 3; }	$profilefield['length'] = 3; }
Zeile 557	Zeile 576
if(is_array($expoptions)) { foreach($expoptions as $key => $val)	if(is_array($expoptions)) { foreach($expoptions as $key => $val)
{	{
$val = trim($val); $val = str_replace("\n", "\\n", $val); $sel = "";	$val = trim($val); $val = str_replace("\n", "\\n", $val); $sel = "";
Zeile 574	Zeile 593
} eval("\$code = \"".$templates->get("usercp_profile_profilefields_select")."\";");	} eval("\$code = \"".$templates->get("usercp_profile_profilefields_select")."\";");
}	}
} elseif($type == "radio") {	} elseif($type == "radio") {
	$userfield = htmlspecialchars_uni($userfield);
$expoptions = explode("\n", $options); if(is_array($expoptions)) {	$expoptions = explode("\n", $options); if(is_array($expoptions)) {
Zeile 595	Zeile 615
} elseif($type == "checkbox") {	} elseif($type == "checkbox") {
	$userfield = htmlspecialchars_uni($userfield);
if($errors)	if($errors)
{	{
$useropts = $userfield; } else	$useropts = $userfield; } else
Zeile 609	Zeile 630
{ $seloptions[$val] = $val; }	{ $seloptions[$val] = $val; }
}	}
$expoptions = explode("\n", $options); if(is_array($expoptions)) {	$expoptions = explode("\n", $options); if(is_array($expoptions)) {
Zeile 626	Zeile 647
} } elseif($type == "textarea")	} } elseif($type == "textarea")
{	{
$value = htmlspecialchars_uni($userfield); eval("\$code = \"".$templates->get("usercp_profile_profilefields_textarea")."\";"); }	$value = htmlspecialchars_uni($userfield); eval("\$code = \"".$templates->get("usercp_profile_profilefields_textarea")."\";"); }
Zeile 643	Zeile 664
} if($profilefield['required'] == 1)	} if($profilefield['required'] == 1)
{	{
eval("\$requiredfields .= \"".$templates->get("usercp_profile_customfield")."\";"); } else	eval("\$requiredfields .= \"".$templates->get("usercp_profile_customfield")."\";"); } else
Zeile 735	Zeile 756
{ // Verify incoming POST request verify_post_check($mybb->get_input('my_post_key'));	{ // Verify incoming POST request verify_post_check($mybb->get_input('my_post_key'));
	$user = array();
$plugins->run_hooks("usercp_do_options_start");	$plugins->run_hooks("usercp_do_options_start");
Zeile 742	Zeile 765
require_once MYBB_ROOT."inc/datahandlers/user.php"; $userhandler = new UserDataHandler("update");	require_once MYBB_ROOT."inc/datahandlers/user.php"; $userhandler = new UserDataHandler("update");
$user = array(	$user = array_merge($user, array(
"uid" => $mybb->user['uid'], "style" => $mybb->get_input('style', MyBB::INPUT_INT), "dateformat" => $mybb->get_input('dateformat', MyBB::INPUT_INT),	"uid" => $mybb->user['uid'], "style" => $mybb->get_input('style', MyBB::INPUT_INT), "dateformat" => $mybb->get_input('dateformat', MyBB::INPUT_INT),
Zeile 751	Zeile 774
"language" => $mybb->get_input('language'), 'usergroup' => $mybb->user['usergroup'], 'additionalgroups' => $mybb->user['additionalgroups']	"language" => $mybb->get_input('language'), 'usergroup' => $mybb->user['usergroup'], 'additionalgroups' => $mybb->user['additionalgroups']
);	));
$user['options'] = array( "allownotices" => $mybb->get_input('allownotices', MyBB::INPUT_INT),	$user['options'] = array( "allownotices" => $mybb->get_input('allownotices', MyBB::INPUT_INT),
Zeile 808	Zeile 831
if($mybb->input['action'] == "options") {	if($mybb->input['action'] == "options") {
$plugins->run_hooks("usercp_options_start");
if($errors != '')	if($errors != '')
{	{
$user = $mybb->input; } else { $user = $mybb->user; }	$user = $mybb->input; } else { $user = $mybb->user; }
	$plugins->run_hooks("usercp_options_start");
$languages = $lang->get_languages(); $board_language = $langoptions = '';	$languages = $lang->get_languages(); $board_language = $langoptions = '';
Zeile 872	Zeile 895
{ $no_subscribe_selected = "selected=\"selected\""; }	{ $no_subscribe_selected = "selected=\"selected\""; }
else if(isset($user['subscriptionmethod']) && $user['subscriptionmethod'] == 2)	elseif(isset($user['subscriptionmethod']) && $user['subscriptionmethod'] == 2)
{ $instant_email_subscribe_selected = "selected=\"selected\""; }	{ $instant_email_subscribe_selected = "selected=\"selected\""; }
else if(isset($user['subscriptionmethod']) && $user['subscriptionmethod'] == 3)	elseif(isset($user['subscriptionmethod']) && $user['subscriptionmethod'] == 3)
{ $instant_pm_subscribe_selected = "selected=\"selected\""; }	{ $instant_pm_subscribe_selected = "selected=\"selected\""; }
Zeile 962	Zeile 985
{ $dst_auto_selected = "selected=\"selected\""; }	{ $dst_auto_selected = "selected=\"selected\""; }
else if(isset($user['dstcorrection']) && $user['dstcorrection'] == 1)	elseif(isset($user['dstcorrection']) && $user['dstcorrection'] == 1)
{ $dst_enabled_selected = "selected=\"selected\""; }	{ $dst_enabled_selected = "selected=\"selected\""; }
Zeile 1191	Zeile 1214
} else {	} else {
if($mybb->user['usergroup'] != "5" && $mybb->usergroup['cancp'] != 1 && $mybb->settings['regtype'] != "verify")	$activation = false; // Checking for pending activations for non-activated accounts if($mybb->user['usergroup'] == 5 && ($mybb->settings['regtype'] == "verify" \|\| $mybb->settings['regtype'] == "both")) { $query = $db->simple_select("awaitingactivation", "*", "uid='".$mybb->user['uid']."' AND (type='r' OR type='b')"); $activation = $db->fetch_array($query); } if($activation) { $userhandler->update_user(); $db->delete_query("awaitingactivation", "uid='".$mybb->user['uid']."'"); // Send new activation mail for non-activated accounts $activationcode = random_str(); $activationarray = array( "uid" => $mybb->user['uid'], "dateline" => TIME_NOW, "code" => $activationcode, "type" => $activation['type'] ); $db->insert_query("awaitingactivation", $activationarray); $emailsubject = $lang->sprintf($lang->emailsubject_activateaccount, $mybb->settings['bbname']); switch($mybb->settings['username_method']) { case 0: $emailmessage = $lang->sprintf($lang->email_activateaccount, $mybb->user['username'], $mybb->settings['bbname'], $mybb->settings['bburl'], $mybb->user['uid'], $activationcode); break; case 1: $emailmessage = $lang->sprintf($lang->email_activateaccount1, $mybb->user['username'], $mybb->settings['bbname'], $mybb->settings['bburl'], $mybb->user['uid'], $activationcode); break; case 2: $emailmessage = $lang->sprintf($lang->email_activateaccount2, $mybb->user['username'], $mybb->settings['bbname'], $mybb->settings['bburl'], $mybb->user['uid'], $activationcode); break; default: $emailmessage = $lang->sprintf($lang->email_activateaccount, $mybb->user['username'], $mybb->settings['bbname'], $mybb->settings['bburl'], $mybb->user['uid'], $activationcode); break; } my_mail($mybb->user['email'], $emailsubject, $emailmessage); $plugins->run_hooks("usercp_do_email_changed"); redirect("usercp.php?action=email", $lang->redirect_emailupdated); } elseif($mybb->usergroup['cancp'] != 1 && ($mybb->settings['regtype'] == "verify" \|\| $mybb->settings['regtype'] == "both"))
{ $uid = $mybb->user['uid']; $username = $mybb->user['username'];	{ $uid = $mybb->user['uid']; $username = $mybb->user['username'];
Zeile 1207	Zeile 1273
"type" => "e", "misc" => $db->escape_string($mybb->get_input('email')) );	"type" => "e", "misc" => $db->escape_string($mybb->get_input('email')) );

$db->insert_query("awaitingactivation", $newactivation); $mail_message = $lang->sprintf($lang->email_changeemail, $mybb->user['username'], $mybb->settings['bbname'], $mybb->user['email'], $mybb->get_input('email'), $mybb->settings['bburl'], $activationcode, $mybb->user['username'], $mybb->user['uid']);	$db->insert_query("awaitingactivation", $newactivation); $mail_message = $lang->sprintf($lang->email_changeemail, $mybb->user['username'], $mybb->settings['bbname'], $mybb->user['email'], $mybb->get_input('email'), $mybb->settings['bburl'], $activationcode, $mybb->user['username'], $mybb->user['uid']);
Zeile 1217	Zeile 1283
$plugins->run_hooks("usercp_do_email_verify"); error($lang->redirect_changeemail_activation);	$plugins->run_hooks("usercp_do_email_verify"); error($lang->redirect_changeemail_activation);
}	}
else { $userhandler->update_user();	else { $userhandler->update_user();
Zeile 1232	Zeile 1298
if(count($errors) > 0) { $mybb->input['action'] = "email";	if(count($errors) > 0) { $mybb->input['action'] = "email";
$errors = inline_error($errors);	$errors = inline_error($errors);
} }	} }
Zeile 1240	Zeile 1306
{ // Coming back to this page after one or more errors were experienced, show fields the user previously entered (with the exception of the password) if($errors)	{ // Coming back to this page after one or more errors were experienced, show fields the user previously entered (with the exception of the password) if($errors)
{	{
$email = htmlspecialchars_uni($mybb->get_input('email')); $email2 = htmlspecialchars_uni($mybb->get_input('email2'));	$email = htmlspecialchars_uni($mybb->get_input('email')); $email2 = htmlspecialchars_uni($mybb->get_input('email2'));
} else	} else
{ $email = $email2 = '';	{ $email = $email2 = '';
}	}
$plugins->run_hooks("usercp_email"); eval("\$changemail = \"".$templates->get("usercp_email")."\";");	$plugins->run_hooks("usercp_email"); eval("\$changemail = \"".$templates->get("usercp_email")."\";");
Zeile 1259	Zeile 1325
{ // Verify incoming POST request verify_post_check($mybb->get_input('my_post_key'));	{ // Verify incoming POST request verify_post_check($mybb->get_input('my_post_key'));
	$user = array();
$errors = array();	$errors = array();

$plugins->run_hooks("usercp_do_password_start"); if(validate_password_from_uid($mybb->user['uid'], $mybb->get_input('oldpassword')) == false)	$plugins->run_hooks("usercp_do_password_start"); if(validate_password_from_uid($mybb->user['uid'], $mybb->get_input('oldpassword')) == false)
{ $errors[] = $lang->error_invalidpassword; } else { // Set up user handler. require_once MYBB_ROOT."inc/datahandlers/user.php"; $userhandler = new UserDataHandler("update"); $user = array(	{ $errors[] = $lang->error_invalidpassword; } else { // Set up user handler. require_once MYBB_ROOT."inc/datahandlers/user.php"; $userhandler = new UserDataHandler("update"); $user = array_merge($user, array(
"uid" => $mybb->user['uid'], "password" => $mybb->get_input('password'), "password2" => $mybb->get_input('password2')	"uid" => $mybb->user['uid'], "password" => $mybb->get_input('password'), "password2" => $mybb->get_input('password2')
);	));
$userhandler->set_data($user); if(!$userhandler->validate_user())	$userhandler->set_data($user); if(!$userhandler->validate_user())
{	{
$errors = $userhandler->get_friendly_errors(); } else { $userhandler->update_user();	$errors = $userhandler->get_friendly_errors(); } else { $userhandler->update_user();
my_setcookie("mybbuser", $mybb->user['uid']."_".$userhandler->data['loginkey'], null, true);	my_setcookie("mybbuser", $mybb->user['uid']."_".$userhandler->data['loginkey'], null, true, "lax");
// Notify the user by email that their password has been changed $mail_message = $lang->sprintf($lang->email_changepassword, $mybb->user['username'], $mybb->user['email'], $mybb->settings['bbname'], $mybb->settings['bburl']);	// Notify the user by email that their password has been changed $mail_message = $lang->sprintf($lang->email_changepassword, $mybb->user['username'], $mybb->user['email'], $mybb->settings['bbname'], $mybb->settings['bburl']);
Zeile 1298	Zeile 1365
$plugins->run_hooks("usercp_do_password_end"); redirect("usercp.php?action=password", $lang->redirect_passwordupdated); }	$plugins->run_hooks("usercp_do_password_end"); redirect("usercp.php?action=password", $lang->redirect_passwordupdated); }
}	}
if(count($errors) > 0) { $mybb->input['action'] = "password";	if(count($errors) > 0) { $mybb->input['action'] = "password";
Zeile 1312	Zeile 1379
eval("\$editpassword = \"".$templates->get("usercp_password")."\";"); output_page($editpassword);	eval("\$editpassword = \"".$templates->get("usercp_password")."\";"); output_page($editpassword);
}	}
if($mybb->input['action'] == "do_changename" && $mybb->request_method == "post") { // Verify incoming POST request verify_post_check($mybb->get_input('my_post_key'));	if($mybb->input['action'] == "do_changename" && $mybb->request_method == "post") { // Verify incoming POST request verify_post_check($mybb->get_input('my_post_key'));
$plugins->run_hooks("usercp_do_changename_start");	$errors = array();
if($mybb->usergroup['canchangename'] != 1) { error_no_permission();	if($mybb->usergroup['canchangename'] != 1) { error_no_permission();
}	} $user = array(); $plugins->run_hooks("usercp_do_changename_start");
if(validate_password_from_uid($mybb->user['uid'], $mybb->get_input('password')) == false) {	if(validate_password_from_uid($mybb->user['uid'], $mybb->get_input('password')) == false) {
Zeile 1335	Zeile 1407
require_once MYBB_ROOT."inc/datahandlers/user.php"; $userhandler = new UserDataHandler("update");	require_once MYBB_ROOT."inc/datahandlers/user.php"; $userhandler = new UserDataHandler("update");
$user = array(	$user = array_merge($user, array(
"uid" => $mybb->user['uid'], "username" => $mybb->get_input('username')	"uid" => $mybb->user['uid'], "username" => $mybb->get_input('username')
);	));
$userhandler->set_data($user); if(!$userhandler->validate_user())	$userhandler->set_data($user); if(!$userhandler->validate_user())
{	{
$errors = $userhandler->get_friendly_errors(); } else	$errors = $userhandler->get_friendly_errors(); } else
Zeile 1351	Zeile 1423
$userhandler->update_user(); $plugins->run_hooks("usercp_do_changename_end"); redirect("usercp.php?action=changename", $lang->redirect_namechanged);	$userhandler->update_user(); $plugins->run_hooks("usercp_do_changename_end"); redirect("usercp.php?action=changename", $lang->redirect_namechanged);
} }	} }
if(count($errors) > 0) { $errors = inline_error($errors); $mybb->input['action'] = "changename";	if(count($errors) > 0) { $errors = inline_error($errors); $mybb->input['action'] = "changename";
}	}
} if($mybb->input['action'] == "changename")	} if($mybb->input['action'] == "changename")
Zeile 1367	Zeile 1438
if($mybb->usergroup['canchangename'] != 1) { error_no_permission();	if($mybb->usergroup['canchangename'] != 1) { error_no_permission();
}	} // Coming back to this page after one or more errors were experienced, show field the user previously entered (with the exception of the password) if($errors) { $username = htmlspecialchars_uni($mybb->get_input('username')); } else { $username = ''; }
$plugins->run_hooks("usercp_changename_end"); eval("\$changename = \"".$templates->get("usercp_changename")."\";");	$plugins->run_hooks("usercp_changename_end"); eval("\$changename = \"".$templates->get("usercp_changename")."\";");
Zeile 1379	Zeile 1460
{ // Verify incoming POST request verify_post_check($mybb->get_input('my_post_key'));	{ // Verify incoming POST request verify_post_check($mybb->get_input('my_post_key'));
$plugins->run_hooks("usercp_do_subscriptions_start");
if(!isset($mybb->input['check']) \|\| !is_array($mybb->input['check'])) { error($lang->no_subscriptions_selected); }	if(!isset($mybb->input['check']) \|\| !is_array($mybb->input['check'])) { error($lang->no_subscriptions_selected); }
	$plugins->run_hooks("usercp_do_subscriptions_start");
// Clean input - only accept integers thanks! $mybb->input['check'] = array_map('intval', $mybb->get_input('check', MyBB::INPUT_ARRAY));	// Clean input - only accept integers thanks! $mybb->input['check'] = array_map('intval', $mybb->get_input('check', MyBB::INPUT_ARRAY));
Zeile 1393	Zeile 1474
// Deleting these subscriptions? if($mybb->get_input('do') == "delete")	// Deleting these subscriptions? if($mybb->get_input('do') == "delete")
{	{
$db->delete_query("threadsubscriptions", "tid IN ($tids) AND uid='{$mybb->user['uid']}'"); } // Changing subscription type	$db->delete_query("threadsubscriptions", "tid IN ($tids) AND uid='{$mybb->user['uid']}'"); } // Changing subscription type
Zeile 1403	Zeile 1484
{ $new_notification = 0; }	{ $new_notification = 0; }
else if($mybb->get_input('do') == "email_notification")	elseif($mybb->get_input('do') == "email_notification")
{ $new_notification = 1; }	{ $new_notification = 1; }
else if($mybb->get_input('do') == "pm_notification")	elseif($mybb->get_input('do') == "pm_notification")
{ $new_notification = 2; }	{ $new_notification = 2; }
Zeile 1494	Zeile 1575
// Hmm, you don't have permission to view this thread - unsubscribe! $del_subscriptions[] = $subscription['sid']; }	// Hmm, you don't have permission to view this thread - unsubscribe! $del_subscriptions[] = $subscription['sid']; }
else if($subscription['tid'])	elseif($subscription['tid'])
{ $subscriptions[$subscription['tid']] = $subscription; }	{ $subscriptions[$subscription['tid']] = $subscription; }
Zeile 1514	Zeile 1595
if($threadcount < 0) { $threadcount = 0;	if($threadcount < 0) { $threadcount = 0;
} }	} }
if(!empty($subscriptions)) { $tids = implode(",", array_keys($subscriptions)); $readforums = array();	if(!empty($subscriptions)) { $tids = implode(",", array_keys($subscriptions)); $readforums = array();

// Build a forum cache. $query = $db->query(" SELECT f.fid, fr.dateline AS lastread	// Build a forum cache. $query = $db->query(" SELECT f.fid, fr.dateline AS lastread
Zeile 1530	Zeile 1611
WHERE f.active != 0 ORDER BY pid, disporder ");	WHERE f.active != 0 ORDER BY pid, disporder ");

while($forum = $db->fetch_array($query)) { $readforums[$forum['fid']] = $forum['lastread'];	while($forum = $db->fetch_array($query)) { $readforums[$forum['fid']] = $forum['lastread'];
Zeile 1538	Zeile 1619
// Check participation by the current user in any of these threads - for 'dot' folder icons if($mybb->settings['dotfolders'] != 0)	// Check participation by the current user in any of these threads - for 'dot' folder icons if($mybb->settings['dotfolders'] != 0)
{	{
$query = $db->simple_select("posts", "tid,uid", "uid='{$mybb->user['uid']}' AND tid IN ({$tids})"); while($post = $db->fetch_array($query)) { $subscriptions[$post['tid']]['doticon'] = 1;	$query = $db->simple_select("posts", "tid,uid", "uid='{$mybb->user['uid']}' AND tid IN ({$tids})"); while($post = $db->fetch_array($query)) { $subscriptions[$post['tid']]['doticon'] = 1;
}	}
} // Read threads	} // Read threads
Zeile 1557	Zeile 1638
} $icon_cache = $cache->read("posticons");	} $icon_cache = $cache->read("posticons");
$threadprefixes = build_prefixes();	$threadprefixes = build_prefixes();
$threads = ''; // Now we can build our subscription list	$threads = ''; // Now we can build our subscription list
Zeile 1639	Zeile 1720
else { $lastread = 1;	else { $lastread = 1;
} }	} }
if(!$lastread)	if(!$lastread)
{	{
$readcookie = $threadread = my_get_array_cookie("threadread", $thread['tid']); if($readcookie > $forum_read) { $lastread = $readcookie;	$readcookie = $threadread = my_get_array_cookie("threadread", $thread['tid']); if($readcookie > $forum_read) { $lastread = $readcookie;
}	}
else { $lastread = $forum_read; }	else { $lastread = $forum_read; }
}	}
if($lastread && $lastread < $thread['lastpost']) {	if($lastread && $lastread < $thread['lastpost']) {
Zeile 1677	Zeile 1758
} if($thread['closed'] == 1)	} if($thread['closed'] == 1)
{ $folder .= "lock"; $folder_label .= $lang->icon_lock; } $folder .= "folder";	{ $folder .= "close"; $folder_label .= $lang->icon_close; } $folder .= "folder";
if($thread['visible'] == 0)	if($thread['visible'] == 0)
{	{
$bgcolor = "trow_shaded";	$bgcolor = "trow_shaded";
}	}
// Build last post info $lastpostdate = my_date('relative', $thread['lastpost']);	// Build last post info $lastpostdate = my_date('relative', $thread['lastpost']);
$lastposter = htmlspecialchars_uni($thread['lastposter']);	if(!$lastposteruid && !$thread['lastposter']) { $lastposter = htmlspecialchars_uni($lang->guest); } else { $lastposter = htmlspecialchars_uni($thread['lastposter']); }
$lastposteruid = $thread['lastposteruid']; // Don't link to guest's profiles (they have no profile).	$lastposteruid = $thread['lastposteruid']; // Don't link to guest's profiles (they have no profile).
Zeile 1794	Zeile 1882
$threads = my_number_format($forum['threads']); }	$threads = my_number_format($forum['threads']); }
if($forum['lastpost'] == 0 \|\| $forum['lastposter'] == "")	if($forum['lastpost'] == 0)
{ eval("\$lastpost = \"".$templates->get("forumbit_depth2_forum_lastpost_never")."\";"); }	{ eval("\$lastpost = \"".$templates->get("forumbit_depth2_forum_lastpost_never")."\";"); }
Zeile 1808	Zeile 1896
$forum['lastpostsubject'] = $parser->parse_badwords($forum['lastpostsubject']); $lastpost_date = my_date('relative', $forum['lastpost']); $lastposttid = $forum['lastposttid'];	$forum['lastpostsubject'] = $parser->parse_badwords($forum['lastpostsubject']); $lastpost_date = my_date('relative', $forum['lastpost']); $lastposttid = $forum['lastposttid'];
$lastposter = htmlspecialchars_uni($forum['lastposter']); $lastpost_profilelink = build_profile_link($lastposter, $forum['lastposteruid']);	if(!$forum['lastposteruid'] && !$forum['lastposter']) { $lastposter = htmlspecialchars_uni($lang->guest); } else { $lastposter = htmlspecialchars_uni($forum['lastposter']); } if($forum['lastposteruid'] == 0) { $lastpost_profilelink = $lastposter; } else { $lastpost_profilelink = build_profile_link($lastposter, $forum['lastposteruid']); }
$full_lastpost_subject = $lastpost_subject = htmlspecialchars_uni($forum['lastpostsubject']); if(my_strlen($lastpost_subject) > 25) { $lastpost_subject = my_substr($lastpost_subject, 0, 25) . "...";	$full_lastpost_subject = $lastpost_subject = htmlspecialchars_uni($forum['lastpostsubject']); if(my_strlen($lastpost_subject) > 25) { $lastpost_subject = my_substr($lastpost_subject, 0, 25) . "...";
}	}
$lastpost_link = get_thread_link($forum['lastposttid'], 0, "lastpost"); eval("\$lastpost = \"".$templates->get("forumbit_depth2_forum_lastpost")."\";"); }	$lastpost_link = get_thread_link($forum['lastposttid'], 0, "lastpost"); eval("\$lastpost = \"".$templates->get("forumbit_depth2_forum_lastpost")."\";"); }
Zeile 1836	Zeile 1938
eval("\$forumsubscriptions = \"".$templates->get("usercp_forumsubscriptions")."\";"); output_page($forumsubscriptions);	eval("\$forumsubscriptions = \"".$templates->get("usercp_forumsubscriptions")."\";"); output_page($forumsubscriptions);
	} if($mybb->input['action'] == "do_addsubscription" && $mybb->get_input('type') != "forum") { // Verify incoming POST request verify_post_check($mybb->get_input('my_post_key')); $thread = get_thread($mybb->get_input('tid')); if(!$thread \|\| $thread['visible'] == -1) { error($lang->error_invalidthread); } // Is the currently logged in user a moderator of this forum? $ismod = is_moderator($thread['fid']); // Make sure we are looking at a real thread here. if(($thread['visible'] != 1 && $ismod == false) \|\| ($thread['visible'] > 1 && $ismod == true)) { error($lang->error_invalidthread); } $forumpermissions = forum_permissions($thread['fid']); if($forumpermissions['canview'] == 0 \|\| $forumpermissions['canviewthreads'] == 0 \|\| (isset($forumpermissions['canonlyviewownthreads']) && $forumpermissions['canonlyviewownthreads'] != 0 && $thread['uid'] != $mybb->user['uid'])) { error_no_permission(); } // check if the forum requires a password to view. If so, we need to show a form to the user check_forum_password($thread['fid']); // Naming of the hook retained for backward compatibility while dropping usercp2.php $plugins->run_hooks("usercp2_do_addsubscription"); add_subscribed_thread($thread['tid'], $mybb->get_input('notification', MyBB::INPUT_INT)); if($mybb->get_input('referrer')) { $mybb->input['referrer'] = $mybb->get_input('referrer'); if(my_strpos($mybb->input['referrer'], $mybb->settings['bburl'].'/') !== 0) { if(my_strpos($mybb->input['referrer'], '/') === 0) { $mybb->input['referrer'] = my_substr($mybb->input['url'], 1); } $url_segments = explode('/', $mybb->input['referrer']); $mybb->input['referrer'] = $mybb->settings['bburl'].'/'.end($url_segments); } $url = htmlspecialchars_uni($mybb->input['referrer']); } else { $url = get_thread_link($thread['tid']); } redirect($url, $lang->redirect_subscriptionadded); } if($mybb->input['action'] == "addsubscription") { // Verify incoming POST request verify_post_check($mybb->get_input('my_post_key')); if($mybb->get_input('type') == "forum") { $forum = get_forum($mybb->get_input('fid', MyBB::INPUT_INT)); if(!$forum) { error($lang->error_invalidforum); } $forumpermissions = forum_permissions($forum['fid']); if($forumpermissions['canview'] == 0 \|\| $forumpermissions['canviewthreads'] == 0) { error_no_permission(); } // check if the forum requires a password to view. If so, we need to show a form to the user check_forum_password($forum['fid']); // Naming of the hook retained for backward compatibility while dropping usercp2.php $plugins->run_hooks("usercp2_addsubscription_forum"); add_subscribed_forum($forum['fid']); if($server_http_referer && $mybb->request_method != 'post') { $url = $server_http_referer; } else { $url = "index.php"; } redirect($url, $lang->redirect_forumsubscriptionadded); } else { $thread = get_thread($mybb->get_input('tid', MyBB::INPUT_INT)); if(!$thread \|\| $thread['visible'] == -1) { error($lang->error_invalidthread); } // Is the currently logged in user a moderator of this forum? $ismod = is_moderator($thread['fid']); // Make sure we are looking at a real thread here. if(($thread['visible'] != 1 && $ismod == false) \|\| ($thread['visible'] > 1 && $ismod == true)) { error($lang->error_invalidthread); } add_breadcrumb($lang->nav_subthreads, "usercp.php?action=subscriptions"); add_breadcrumb($lang->nav_addsubscription); $forumpermissions = forum_permissions($thread['fid']); if($forumpermissions['canview'] == 0 \|\| $forumpermissions['canviewthreads'] == 0 \|\| (isset($forumpermissions['canonlyviewownthreads']) && $forumpermissions['canonlyviewownthreads'] != 0 && $thread['uid'] != $mybb->user['uid'])) { error_no_permission(); } // check if the forum requires a password to view. If so, we need to show a form to the user check_forum_password($thread['fid']); $referrer = ''; if($server_http_referer) { $referrer = $server_http_referer; } require_once MYBB_ROOT."inc/class_parser.php"; $parser = new postParser; $thread['subject'] = $parser->parse_badwords($thread['subject']); $thread['subject'] = htmlspecialchars_uni($thread['subject']); $lang->subscribe_to_thread = $lang->sprintf($lang->subscribe_to_thread, $thread['subject']); $notification_none_checked = $notification_email_checked = $notification_pm_checked = ''; if($mybb->user['subscriptionmethod'] == 1 \|\| $mybb->user['subscriptionmethod'] == 0) { $notification_none_checked = "checked=\"checked\""; } elseif($mybb->user['subscriptionmethod'] == 2) { $notification_email_checked = "checked=\"checked\""; } elseif($mybb->user['subscriptionmethod'] == 3) { $notification_pm_checked = "checked=\"checked\""; } // Naming of the hook retained for backward compatibility while dropping usercp2.php $plugins->run_hooks("usercp2_addsubscription_thread"); eval("\$add_subscription = \"".$templates->get("usercp_addsubscription_thread")."\";"); output_page($add_subscription); exit; } } if($mybb->input['action'] == "removesubscription" && ($mybb->request_method == "post" \|\| verify_post_check($mybb->get_input('my_post_key'), true))) { // Verify incoming POST request verify_post_check($mybb->get_input('my_post_key')); if($mybb->get_input('type') == "forum") { $forum = get_forum($mybb->get_input('fid', MyBB::INPUT_INT)); if(!$forum) { error($lang->error_invalidforum); } // check if the forum requires a password to view. If so, we need to show a form to the user check_forum_password($forum['fid']); // Naming of the hook retained for backward compatibility while dropping usercp2.php $plugins->run_hooks("usercp2_removesubscription_forum"); remove_subscribed_forum($forum['fid']); if($server_http_referer && $mybb->request_method != 'post') { $url = $server_http_referer; } else { $url = "usercp.php?action=forumsubscriptions"; } redirect($url, $lang->redirect_forumsubscriptionremoved); } else { $thread = get_thread($mybb->get_input('tid', MyBB::INPUT_INT)); if(!$thread) { error($lang->error_invalidthread); } // Is the currently logged in user a moderator of this forum? $ismod = is_moderator($thread['fid']); // Make sure we are looking at a real thread here. if(($thread['visible'] != 1 && $ismod == false) \|\| ($thread['visible'] > 1 && $ismod == true)) { error($lang->error_invalidthread); } // check if the forum requires a password to view. If so, we need to show a form to the user check_forum_password($thread['fid']); // Naming of the hook retained for backward compatibility while dropping usercp2.php $plugins->run_hooks("usercp2_removesubscription_thread"); remove_subscribed_thread($thread['tid']); if($server_http_referer && $mybb->request_method != 'post') { $url = $server_http_referer; } else { $url = "usercp.php?action=subscriptions"; } redirect($url, $lang->redirect_subscriptionremoved); } } // Show remove subscription form when GET method and without valid my_post_key if($mybb->input['action'] == "removesubscription") { $referrer = ''; if($mybb->get_input('type') == "forum") { $forum = get_forum($mybb->get_input('fid', MyBB::INPUT_INT)); if(!$forum) { error($lang->error_invalidforum); } add_breadcrumb($lang->nav_forumsubscriptions, "usercp.php?action=forumsubscriptions"); add_breadcrumb($lang->nav_removesubscription); $forumpermissions = forum_permissions($forum['fid']); if($forumpermissions['canview'] == 0 \|\| $forumpermissions['canviewthreads'] == 0) { error_no_permission(); } // check if the forum requires a password to view. If so, we need to show a form to the user check_forum_password($forum['fid']); $lang->unsubscribe_from_forum = $lang->sprintf($lang->unsubscribe_from_forum, $forum['name']); // Naming of the hook retained for backward compatibility while dropping usercp2.php $plugins->run_hooks("usercp2_removesubscription_display_forum"); eval("\$remove_forum_subscription = \"".$templates->get("usercp_removesubscription_forum")."\";"); output_page($remove_forum_subscription); exit; } else { $thread = get_thread($mybb->get_input('tid', MyBB::INPUT_INT)); if(!$thread \|\| $thread['visible'] == -1) { error($lang->error_invalidthread); } // Is the currently logged in user a moderator of this forum? $ismod = is_moderator($thread['fid']); // Make sure we are looking at a real thread here. if(($thread['visible'] != 1 && $ismod == false) \|\| ($thread['visible'] > 1 && $ismod == true)) { error($lang->error_invalidthread); } add_breadcrumb($lang->nav_subthreads, "usercp.php?action=subscriptions"); add_breadcrumb($lang->nav_removesubscription); $forumpermissions = forum_permissions($thread['fid']); if($forumpermissions['canview'] == 0 \|\| $forumpermissions['canviewthreads'] == 0 \|\| (isset($forumpermissions['canonlyviewownthreads']) && $forumpermissions['canonlyviewownthreads'] != 0 && $thread['uid'] != $mybb->user['uid'])) { error_no_permission(); } // check if the forum requires a password to view. If so, we need to show a form to the user check_forum_password($thread['fid']); require_once MYBB_ROOT."inc/class_parser.php"; $parser = new postParser; $thread['subject'] = $parser->parse_badwords($thread['subject']); $thread['subject'] = htmlspecialchars_uni($thread['subject']); $lang->unsubscribe_from_thread = $lang->sprintf($lang->unsubscribe_from_thread, $thread['subject']); // Naming of the hook retained for backward compatibility while dropping usercp2.php $plugins->run_hooks("usercp2_removesubscription_display_thread"); eval("\$remove_thread_subscription = \"".$templates->get("usercp_removesubscription_thread")."\";"); output_page($remove_thread_subscription); exit; } } if($mybb->input['action'] == "removesubscriptions") { // Verify incoming POST request verify_post_check($mybb->get_input('my_post_key')); if($mybb->get_input('type') == "forum") { // Naming of the hook retained for backward compatibility while dropping usercp2.php $plugins->run_hooks("usercp2_removesubscriptions_forum"); $db->delete_query("forumsubscriptions", "uid='".$mybb->user['uid']."'"); if($server_http_referer) { $url = $server_http_referer; } else { $url = "usercp.php?action=forumsubscriptions"; } redirect($url, $lang->redirect_forumsubscriptionsremoved); } else { // Naming of the hook retained for backward compatibility while dropping usercp2.php $plugins->run_hooks("usercp2_removesubscriptions_thread"); $db->delete_query("threadsubscriptions", "uid='".$mybb->user['uid']."'"); if($server_http_referer) { $url = $server_http_referer; } else { $url = "usercp.php?action=subscriptions"; } redirect($url, $lang->redirect_subscriptionsremoved); }
} if($mybb->input['action'] == "do_editsig" && $mybb->request_method == "post") { // Verify incoming POST request verify_post_check($mybb->get_input('my_post_key'));	} if($mybb->input['action'] == "do_editsig" && $mybb->request_method == "post") { // Verify incoming POST request verify_post_check($mybb->get_input('my_post_key'));
$plugins->run_hooks("usercp_do_editsig_start");
// User currently has a suspended signature if($mybb->user['suspendsignature'] == 1 && $mybb->user['suspendsigtime'] > TIME_NOW) { error_no_permission(); }	// User currently has a suspended signature if($mybb->user['suspendsignature'] == 1 && $mybb->user['suspendsigtime'] > TIME_NOW) { error_no_permission(); }
	$plugins->run_hooks("usercp_do_editsig_start");
if($mybb->get_input('updateposts') == "enable") {	if($mybb->get_input('updateposts') == "enable") {
Zeile 1909	Zeile 2349
// Usergroup has no permission to use this facility error_no_permission(); }	// Usergroup has no permission to use this facility error_no_permission(); }
else if($mybb->usergroup['canusesig'] == 1 && $mybb->usergroup['canusesigxposts'] > 0 && $mybb->user['postnum'] < $mybb->usergroup['canusesigxposts'])	elseif($mybb->usergroup['canusesig'] == 1 && $mybb->usergroup['canusesigxposts'] > 0 && $mybb->user['postnum'] < $mybb->usergroup['canusesigxposts'])
{ // Usergroup can use this facility, but only after x posts error($lang->sprintf($lang->sig_suspended_posts, $mybb->usergroup['canusesigxposts']));	{ // Usergroup can use this facility, but only after x posts error($lang->sprintf($lang->sig_suspended_posts, $mybb->usergroup['canusesigxposts']));
Zeile 1983	Zeile 2423
$sig = htmlspecialchars_uni($sig); $lang->edit_sig_note2 = $lang->sprintf($lang->edit_sig_note2, $sigsmilies, $sigmycode, $sigimgcode, $sightml, $mybb->settings['siglength']);	$sig = htmlspecialchars_uni($sig); $lang->edit_sig_note2 = $lang->sprintf($lang->edit_sig_note2, $sigsmilies, $sigmycode, $sigimgcode, $sightml, $mybb->settings['siglength']);
if($mybb->settings['bbcodeinserter'] != 0 \|\| $mybb->user['showcodebuttons'] != 0)	if($mybb->settings['sigmycode'] != 0 && $mybb->settings['bbcodeinserter'] != 0 && $mybb->user['showcodebuttons'] != 0)
{ $codebuttons = build_mycode_inserter("signature"); }	{ $codebuttons = build_mycode_inserter("signature"); }
Zeile 2059	Zeile 2499
} // Because Gravatars are square, hijack the width	} // Because Gravatars are square, hijack the width
list($maxwidth, $maxheight) = explode("x", my_strtolower($mybb->settings['maxavatardims']));	list($maxwidth, $maxheight) = preg_split('/[\|x]/', my_strtolower($mybb->settings['maxavatardims']));
$maxheight = (int)$maxwidth; // Rating?	$maxheight = (int)$maxwidth; // Rating?
Zeile 2117	Zeile 2557
{ if($width && $height && $mybb->settings['maxavatardims'] != "") {	{ if($width && $height && $mybb->settings['maxavatardims'] != "") {
list($maxwidth, $maxheight) = explode("x", my_strtolower($mybb->settings['maxavatardims']));	list($maxwidth, $maxheight) = preg_split('/[\|x]/', my_strtolower($mybb->settings['maxavatardims']));
if(($maxwidth && $width > $maxwidth) \|\| ($maxheight && $height > $maxheight)) { $lang->error_avatartoobig = $lang->sprintf($lang->error_avatartoobig, $maxwidth, $maxheight); $avatar_error = $lang->error_avatartoobig; } }	if(($maxwidth && $width > $maxwidth) \|\| ($maxheight && $height > $maxheight)) { $lang->error_avatartoobig = $lang->sprintf($lang->error_avatartoobig, $maxwidth, $maxheight); $avatar_error = $lang->error_avatartoobig; } }
	} // Limiting URL string to stay within database limit if(strlen($mybb->input['avatarurl']) > 200) { $avatar_error = $lang->error_avatarurltoolong;
} if(empty($avatar_error))	} if(empty($avatar_error))
Zeile 2180	Zeile 2626
if($mybb->settings['maxavatardims'] != "") {	if($mybb->settings['maxavatardims'] != "") {
list($maxwidth, $maxheight) = explode("x", my_strtolower($mybb->settings['maxavatardims']));	list($maxwidth, $maxheight) = preg_split('/[\|x]/', my_strtolower($mybb->settings['maxavatardims']));
$lang->avatar_note .= "<br />".$lang->sprintf($lang->avatar_note_dimensions, $maxwidth, $maxheight); }	$lang->avatar_note .= "<br />".$lang->sprintf($lang->avatar_note_dimensions, $maxwidth, $maxheight); }
Zeile 2197	Zeile 2643
{ eval("\$auto_resize = \"".$templates->get("usercp_avatar_auto_resize_auto")."\";"); }	{ eval("\$auto_resize = \"".$templates->get("usercp_avatar_auto_resize_auto")."\";"); }
else if($mybb->settings['avatarresizing'] == "user")	elseif($mybb->settings['avatarresizing'] == "user")
{ eval("\$auto_resize = \"".$templates->get("usercp_avatar_auto_resize_user")."\";"); }	{ eval("\$auto_resize = \"".$templates->get("usercp_avatar_auto_resize_user")."\";"); }
Zeile 2218	Zeile 2664
if(!empty($mybb->user['avatar'])) { eval("\$removeavatar = \"".$templates->get("usercp_avatar_remove")."\";");	if(!empty($mybb->user['avatar'])) { eval("\$removeavatar = \"".$templates->get("usercp_avatar_remove")."\";");
} $plugins->run_hooks("usercp_avatar_end");	} $plugins->run_hooks("usercp_avatar_end");
if(!isset($avatar_error))	if(!isset($avatar_error))
{	{
$avatar_error = ''; }	$avatar_error = ''; }
Zeile 2240	Zeile 2686
$query = $db->simple_select('buddyrequests', '*', 'id='.$mybb->get_input('id', MyBB::INPUT_INT).' AND touid='.(int)$mybb->user['uid']); $request = $db->fetch_array($query); if(empty($request))	$query = $db->simple_select('buddyrequests', '*', 'id='.$mybb->get_input('id', MyBB::INPUT_INT).' AND touid='.(int)$mybb->user['uid']); $request = $db->fetch_array($query); if(empty($request))
{	{
error($lang->invalid_request); }	error($lang->invalid_request); }
Zeile 2251	Zeile 2697
{ // We want to add us to this user's buddy list if($user['buddylist'] != '')	{ // We want to add us to this user's buddy list if($user['buddylist'] != '')
{	{
$user['buddylist'] = explode(',', $user['buddylist']); } else	$user['buddylist'] = explode(',', $user['buddylist']); } else
Zeile 2264	Zeile 2710
// Now we have the new list, so throw it all back together $new_list = implode(",", $user['buddylist']);	// Now we have the new list, so throw it all back together $new_list = implode(",", $user['buddylist']);
// And clean it up a little to ensure there is no possibility of bad values $new_list = preg_replace("#,{2,}#", ",", $new_list); $new_list = preg_replace("#[^0-9,]#", "", $new_list);	// And clean it up a little to ensure there is no possibility of bad values $new_list = preg_replace("#,{2,}#", ",", $new_list); $new_list = preg_replace("#[^0-9,]#", "", $new_list);
if(my_substr($new_list, 0, 1) == ",") { $new_list = my_substr($new_list, 1);	if(my_substr($new_list, 0, 1) == ",") { $new_list = my_substr($new_list, 1);
Zeile 2359	Zeile 2805
else { error($lang->user_doesnt_exist);	else { error($lang->user_doesnt_exist);
}	}
$plugins->run_hooks("usercp_declinerequest_end"); redirect("usercp.php?action=editlists", $lang->buddyrequest_declined);	$plugins->run_hooks("usercp_declinerequest_end"); redirect("usercp.php?action=editlists", $lang->buddyrequest_declined);
}	}
elseif($mybb->input['action'] == "cancelrequest")	elseif($mybb->input['action'] == "cancelrequest")
{ // Verify incoming POST request verify_post_check($mybb->get_input('my_post_key'));	{ // Verify incoming POST request verify_post_check($mybb->get_input('my_post_key'));
// Validate request $query = $db->simple_select('buddyrequests', '*', 'id='.$mybb->get_input('id', MyBB::INPUT_INT).' AND uid='.(int)$mybb->user['uid']); $request = $db->fetch_array($query); if(empty($request))	// Validate request $query = $db->simple_select('buddyrequests', '*', 'id='.$mybb->get_input('id', MyBB::INPUT_INT).' AND uid='.(int)$mybb->user['uid']); $request = $db->fetch_array($query); if(empty($request))
{	{
error($lang->invalid_request); }	error($lang->invalid_request); }

$plugins->run_hooks("usercp_cancelrequest_start");	$plugins->run_hooks("usercp_cancelrequest_start");

$db->delete_query('buddyrequests', 'id='.(int)$request['id']); $plugins->run_hooks("usercp_cancelrequest_end");	$db->delete_query('buddyrequests', 'id='.(int)$request['id']); $plugins->run_hooks("usercp_cancelrequest_end");
Zeile 2402	Zeile 2848
if($mybb->user['ignorelist']) { $existing_users = explode(",", $mybb->user['ignorelist']);	if($mybb->user['ignorelist']) { $existing_users = explode(",", $mybb->user['ignorelist']);
} if($mybb->user['buddylist']) {	} if($mybb->user['buddylist']) {
// Create a list of buddies... $selected_list = explode(",", $mybb->user['buddylist']); } } else	// Create a list of buddies... $selected_list = explode(",", $mybb->user['buddylist']); } } else
{	{
if($mybb->user['buddylist']) { $existing_users = explode(",", $mybb->user['buddylist']);	if($mybb->user['buddylist']) { $existing_users = explode(",", $mybb->user['buddylist']);
Zeile 2423	Zeile 2869
$selected_list = explode(",", $mybb->user['ignorelist']); } }	$selected_list = explode(",", $mybb->user['ignorelist']); } }

$error_message = ""; $message = "";	$error_message = ""; $message = "";
Zeile 2439	Zeile 2885
foreach($users as $key => $username) { if(empty($username))	foreach($users as $key => $username) { if(empty($username))
{ unset($users[$key]);	{ unset($users[$key]);
continue; }	continue; }
Zeile 2451	Zeile 2897
continue; } $users[$key] = $db->escape_string($username);	continue; } $users[$key] = $db->escape_string($username);
}	}
// Get the requests we have sent that are still pending $query = $db->simple_select('buddyrequests', 'touid', 'uid='.(int)$mybb->user['uid']); $requests = array();	// Get the requests we have sent that are still pending $query = $db->simple_select('buddyrequests', 'touid', 'uid='.(int)$mybb->user['uid']); $requests = array();
while($req = $db->fetch_array($query))	while($req = $db->fetch_array($query))
{ $requests[$req['touid']] = true; }	{ $requests[$req['touid']] = true; }
Zeile 2495	Zeile 2941
if($mybb->get_input('manage') == "ignored") { $error_message = "ignore";	if($mybb->get_input('manage') == "ignored") { $error_message = "ignore";
} else {	} else {
$error_message = "buddy"; }	$error_message = "buddy"; }
Zeile 2514	Zeile 2960
} if(isset($requests[$user['uid']]))	} if(isset($requests[$user['uid']]))
{ if($mybb->get_input('manage') != "ignored") {	{ if($mybb->get_input('manage') != "ignored") {
$error_message = $lang->users_already_sent_request; } elseif($mybb->get_input('manage') == "ignored") { $error_message = $lang->users_already_sent_request_alt;	$error_message = $lang->users_already_sent_request; } elseif($mybb->get_input('manage') == "ignored") { $error_message = $lang->users_already_sent_request_alt;
}	}
array_pop($users); // To maintain a proper count when we call count($users) continue; } if(isset($requests_rec[$user['uid']]))	array_pop($users); // To maintain a proper count when we call count($users) continue; } if(isset($requests_rec[$user['uid']]))
{	{
if($mybb->get_input('manage') != "ignored") { $error_message = $lang->users_already_rec_request;	if($mybb->get_input('manage') != "ignored") { $error_message = $lang->users_already_rec_request;
Zeile 2551	Zeile 2997
$pm = array( 'subject' => 'buddyrequest_new_buddy', 'message' => 'buddyrequest_new_buddy_message',	$pm = array( 'subject' => 'buddyrequest_new_buddy', 'message' => 'buddyrequest_new_buddy_message',
'touid' => $user['uid'], 'receivepms' => (int)$user['buddyrequestspm'], 'language' => $user['language'], 'language_file' => 'usercp' ); send_pm($pm); }	'touid' => $user['uid'], 'receivepms' => (int)$user['buddyrequestspm'], 'language' => $user['language'], 'language_file' => 'usercp' ); send_pm($pm); }
elseif($user['buddyrequestsauto'] != 1 && $mybb->get_input('manage') != "ignored") { // Send request	elseif($user['buddyrequestsauto'] != 1 && $mybb->get_input('manage') != "ignored") { // Send request
Zeile 2630	Zeile 3076
} // Removing a user from this list	} // Removing a user from this list
else if($mybb->get_input('delete', MyBB::INPUT_INT))	elseif($mybb->get_input('delete', MyBB::INPUT_INT))
{ // Check if user exists on the list $key = array_search($mybb->get_input('delete', MyBB::INPUT_INT), $existing_users);	{ // Check if user exists on the list $key = array_search($mybb->get_input('delete', MyBB::INPUT_INT), $existing_users);
Zeile 2750	Zeile 3196
if($new_list == "") { echo "\$(\"#".$mybb->get_input('manage')."_count\").html(\"0\");\n";	if($new_list == "") { echo "\$(\"#".$mybb->get_input('manage')."_count\").html(\"0\");\n";
	echo "\$(\"#buddylink\").remove();\n";
if($mybb->get_input('manage') == "ignored") { echo "\$(\"#ignore_list\").html(\"<li>{$lang->ignore_list_empty}</li>\");\n";	if($mybb->get_input('manage') == "ignored") { echo "\$(\"#ignore_list\").html(\"<li>{$lang->ignore_list_empty}</li>\");\n";
Zeile 2791	Zeile 3239
{ $type = "buddy"; $query = $db->simple_select("users", "*", "uid IN ({$mybb->user['buddylist']})", array("order_by" => "username"));	{ $type = "buddy"; $query = $db->simple_select("users", "*", "uid IN ({$mybb->user['buddylist']})", array("order_by" => "username"));
while($user = $db->fetch_array($query)) { $user['username'] = htmlspecialchars_uni($user['username']); $profile_link = build_profile_link(format_name($user['username'], $user['usergroup'], $user['displaygroup']), $user['uid']); if($user['lastactive'] > $timecut && ($user['invisible'] == 0 \|\| $mybb->usergroup['canviewwolinvis'] == 1) && $user['lastvisit'] != $user['lastactive']) { $status = "online"; } else {	while($user = $db->fetch_array($query)) { $user['username'] = htmlspecialchars_uni($user['username']); $profile_link = build_profile_link(format_name($user['username'], $user['usergroup'], $user['displaygroup']), $user['uid']); if($user['lastactive'] > $timecut && ($user['invisible'] == 0 \|\| $mybb->usergroup['canviewwolinvis'] == 1) && $user['lastvisit'] != $user['lastactive']) { $status = "online"; } else {
$status = "offline"; } eval("\$buddy_list .= \"".$templates->get("usercp_editlists_user")."\";");	$status = "offline"; } eval("\$buddy_list .= \"".$templates->get("usercp_editlists_user")."\";");
Zeile 2867	Zeile 3315
{ $bgcolor = alt_trow(); $request['username'] = build_profile_link(htmlspecialchars_uni($request['username']), (int)$request['touid']);	{ $bgcolor = alt_trow(); $request['username'] = build_profile_link(htmlspecialchars_uni($request['username']), (int)$request['touid']);
$request['date'] = my_date($mybb->settings['dateformat'], $request['date'])." ".my_date($mybb->settings['timeformat'], $request['date']);	$request['date'] = my_date('relative', $request['date']);
eval("\$sent_rows .= \"".$templates->get("usercp_editlists_sent_request", 1, 0)."\";"); }	eval("\$sent_rows .= \"".$templates->get("usercp_editlists_sent_request", 1, 0)."\";"); }
Zeile 2901	Zeile 3349
{ $bgcolor = alt_trow(); $request['username'] = build_profile_link(htmlspecialchars_uni($request['username']), (int)$request['uid']);	{ $bgcolor = alt_trow(); $request['username'] = build_profile_link(htmlspecialchars_uni($request['username']), (int)$request['uid']);
$request['date'] = my_date($mybb->settings['dateformat'], $request['date'])." ".my_date($mybb->settings['timeformat'], $request['date']);	$request['date'] = my_date('relative', $request['date']);
eval("\$received_rows .= \"".$templates->get("usercp_editlists_received_request")."\";"); }	eval("\$received_rows .= \"".$templates->get("usercp_editlists_received_request")."\";"); }
Zeile 2923	Zeile 3371
{ $bgcolor = alt_trow(); $request['username'] = build_profile_link(htmlspecialchars_uni($request['username']), (int)$request['touid']);	{ $bgcolor = alt_trow(); $request['username'] = build_profile_link(htmlspecialchars_uni($request['username']), (int)$request['touid']);
$request['date'] = my_date($mybb->settings['dateformat'], $request['date'])." ".my_date($mybb->settings['timeformat'], $request['date']);	$request['date'] = my_date('relative', $request['date']);
eval("\$sent_rows .= \"".$templates->get("usercp_editlists_sent_request")."\";"); }	eval("\$sent_rows .= \"".$templates->get("usercp_editlists_sent_request")."\";"); }
Zeile 2983	Zeile 3431
$editurl = "newthread.php?action=editdraft&tid={$draft['tid']}"; $id = $draft['tid']; $type = "thread";	$editurl = "newthread.php?action=editdraft&tid={$draft['tid']}"; $id = $draft['tid']; $type = "thread";
}	}
$draft['subject'] = htmlspecialchars_uni($draft['subject']); $savedate = my_date('relative', $draft['dateline']); eval("\$drafts .= \"".$templates->get("usercp_drafts_draft")."\";");	$draft['subject'] = htmlspecialchars_uni($draft['subject']); $savedate = my_date('relative', $draft['dateline']); eval("\$drafts .= \"".$templates->get("usercp_drafts_draft")."\";");
Zeile 2994	Zeile 3442
{ $disable_delete_drafts = 'disabled="disabled"'; eval("\$drafts = \"".$templates->get("usercp_drafts_none")."\";");	{ $disable_delete_drafts = 'disabled="disabled"'; eval("\$drafts = \"".$templates->get("usercp_drafts_none")."\";");
} $plugins->run_hooks("usercp_drafts_end");	} $plugins->run_hooks("usercp_drafts_end");
eval("\$draftlist = \"".$templates->get("usercp_drafts")."\";"); output_page($draftlist);	eval("\$draftlist = \"".$templates->get("usercp_drafts")."\";"); output_page($draftlist);
Zeile 3006	Zeile 3454
{ // Verify incoming POST request verify_post_check($mybb->get_input('my_post_key'));	{ // Verify incoming POST request verify_post_check($mybb->get_input('my_post_key'));
$plugins->run_hooks("usercp_do_drafts_start");
$mybb->input['deletedraft'] = $mybb->get_input('deletedraft', MyBB::INPUT_ARRAY); if(empty($mybb->input['deletedraft'])) { error($lang->no_drafts_selected); }	$mybb->input['deletedraft'] = $mybb->get_input('deletedraft', MyBB::INPUT_ARRAY); if(empty($mybb->input['deletedraft'])) { error($lang->no_drafts_selected); }
	$plugins->run_hooks("usercp_do_drafts_start");
$pidin = array(); $tidin = array();	$pidin = array(); $tidin = array();

foreach($mybb->input['deletedraft'] as $id => $val) { if($val == "post")	foreach($mybb->input['deletedraft'] as $id => $val) { if($val == "post")
Zeile 3052	Zeile 3503
if($mybb->input['action'] == "usergroups") {	if($mybb->input['action'] == "usergroups") {
$plugins->run_hooks("usercp_usergroups_start");
$ingroups = ",".$mybb->user['usergroup'].",".$mybb->user['additionalgroups'].",".$mybb->user['displaygroup'].",";	$ingroups = ",".$mybb->user['usergroup'].",".$mybb->user['additionalgroups'].",".$mybb->user['displaygroup'].",";

$usergroups = $mybb->cache->read('usergroups');	$usergroups = $mybb->cache->read('usergroups');
	$plugins->run_hooks("usercp_usergroups_start");
// Changing our display group if($mybb->get_input('displaygroup', MyBB::INPUT_INT))	// Changing our display group if($mybb->get_input('displaygroup', MyBB::INPUT_INT))
Zeile 3087	Zeile 3539
verify_post_check($mybb->input['my_post_key']); if(my_strpos($ingroups, ",".$mybb->get_input('leavegroup', MyBB::INPUT_INT).",") === false)	verify_post_check($mybb->input['my_post_key']); if(my_strpos($ingroups, ",".$mybb->get_input('leavegroup', MyBB::INPUT_INT).",") === false)
{	{
error($lang->not_member_of_group); } if($mybb->user['usergroup'] == $mybb->get_input('leavegroup', MyBB::INPUT_INT))	error($lang->not_member_of_group); } if($mybb->user['usergroup'] == $mybb->get_input('leavegroup', MyBB::INPUT_INT))
Zeile 3099	Zeile 3551
if($usergroup['type'] != 4 && $usergroup['type'] != 3 && $usergroup['type'] != 5) { error($lang->cannot_leave_group);	if($usergroup['type'] != 4 && $usergroup['type'] != 3 && $usergroup['type'] != 5) { error($lang->cannot_leave_group);
}	}
leave_usergroup($mybb->user['uid'], $mybb->get_input('leavegroup', MyBB::INPUT_INT)); $plugins->run_hooks("usercp_usergroups_leave_group"); redirect("usercp.php?action=usergroups", $lang->left_group); exit;	leave_usergroup($mybb->user['uid'], $mybb->get_input('leavegroup', MyBB::INPUT_INT)); $plugins->run_hooks("usercp_usergroups_leave_group"); redirect("usercp.php?action=usergroups", $lang->left_group); exit;
} $groupleaders = array();	} $groupleaders = array();
// List of usergroup leaders $query = $db->query("	// List of usergroup leaders $query = $db->query("
Zeile 3119	Zeile 3571
{ $groupleaders[$leader['gid']][$leader['uid']] = $leader; }	{ $groupleaders[$leader['gid']][$leader['uid']] = $leader; }

// Joining a group if($mybb->get_input('joingroup', MyBB::INPUT_INT)) { // Verify incoming POST request verify_post_check($mybb->get_input('my_post_key'));	// Joining a group if($mybb->get_input('joingroup', MyBB::INPUT_INT)) { // Verify incoming POST request verify_post_check($mybb->get_input('my_post_key'));

$usergroup = $usergroups[$mybb->get_input('joingroup', MyBB::INPUT_INT)]; if($usergroup['type'] == 5) { error($lang->cannot_join_invite_group);	$usergroup = $usergroups[$mybb->get_input('joingroup', MyBB::INPUT_INT)]; if($usergroup['type'] == 5) { error($lang->cannot_join_invite_group);
}	}
if(($usergroup['type'] != 4 && $usergroup['type'] != 3) \|\| !$usergroup['gid']) {	if(($usergroup['type'] != 4 && $usergroup['type'] != 3) \|\| !$usergroup['gid']) {
Zeile 3145	Zeile 3597
$query = $db->simple_select("joinrequests", "*", "uid='".$mybb->user['uid']."' AND gid='".$mybb->get_input('joingroup', MyBB::INPUT_INT)."'"); $joinrequest = $db->fetch_array($query);	$query = $db->simple_select("joinrequests", "*", "uid='".$mybb->user['uid']."' AND gid='".$mybb->get_input('joingroup', MyBB::INPUT_INT)."'"); $joinrequest = $db->fetch_array($query);

if($joinrequest['rid'])	if($joinrequest['rid'])
{	{
error($lang->already_sent_join_request); }	error($lang->already_sent_join_request); }

if($mybb->get_input('do') == "joingroup" && $usergroup['type'] == 4) {	if($mybb->get_input('do') == "joingroup" && $usergroup['type'] == 4) {
	$reasonlength = my_strlen($mybb->get_input('reason')); if($reasonlength > 250) // Reason field is varchar(250) in database { error($lang->sprintf($lang->joinreason_too_long, ($reasonlength - 250))); }
$now = TIME_NOW; $joinrequest = array( "uid" => $mybb->user['uid'],	$now = TIME_NOW; $joinrequest = array( "uid" => $mybb->user['uid'],
Zeile 3214	Zeile 3675
$query = $db->simple_select("joinrequests", "*", "uid='".$mybb->user['uid']."' AND gid='".$mybb->get_input('acceptinvite', MyBB::INPUT_INT)."' AND invite='1'"); $joinrequest = $db->fetch_array($query); if($joinrequest['rid'])	$query = $db->simple_select("joinrequests", "*", "uid='".$mybb->user['uid']."' AND gid='".$mybb->get_input('acceptinvite', MyBB::INPUT_INT)."' AND invite='1'"); $joinrequest = $db->fetch_array($query); if($joinrequest['rid'])
{	{
join_usergroup($mybb->user['uid'], $mybb->get_input('acceptinvite', MyBB::INPUT_INT)); $db->delete_query("joinrequests", "uid='{$mybb->user['uid']}' AND gid='".$mybb->get_input('acceptinvite', MyBB::INPUT_INT)."'"); $plugins->run_hooks("usercp_usergroups_accept_invite");	join_usergroup($mybb->user['uid'], $mybb->get_input('acceptinvite', MyBB::INPUT_INT)); $db->delete_query("joinrequests", "uid='{$mybb->user['uid']}' AND gid='".$mybb->get_input('acceptinvite', MyBB::INPUT_INT)."'"); $plugins->run_hooks("usercp_usergroups_accept_invite");
Zeile 3229	Zeile 3690
// List of groups this user is a leader of $groupsledlist = '';	// List of groups this user is a leader of $groupsledlist = '';

switch($db->type) { case "pgsql": case "sqlite":	switch($db->type) { case "pgsql": case "sqlite":
$query = $db->query(" SELECT g.title, g.gid, g.type, COUNT(DISTINCT u.uid) AS users, COUNT(DISTINCT j.rid) AS joinrequests, l.canmanagerequests, l.canmanagemembers, l.caninvitemembers FROM ".TABLE_PREFIX."groupleaders l	$query = $db->query(" SELECT g.title, g.gid, g.type, COUNT(DISTINCT u.uid) AS users, COUNT(DISTINCT j.rid) AS joinrequests, l.canmanagerequests, l.canmanagemembers, l.caninvitemembers FROM ".TABLE_PREFIX."groupleaders l
LEFT JOIN ".TABLE_PREFIX."usergroups g ON(g.gid=l.gid) LEFT JOIN ".TABLE_PREFIX."users u ON(((','\|\| u.additionalgroups\|\| ',' LIKE '%,'\|\| g.gid\|\| ',%') OR u.usergroup = g.gid)) LEFT JOIN ".TABLE_PREFIX."joinrequests j ON(j.gid=g.gid AND j.uid != 0)	LEFT JOIN ".TABLE_PREFIX."usergroups g ON(g.gid=l.gid) LEFT JOIN ".TABLE_PREFIX."users u ON(((','\|\| u.additionalgroups\|\| ',' LIKE '%,'\|\| g.gid\|\| ',%') OR u.usergroup = g.gid)) LEFT JOIN ".TABLE_PREFIX."joinrequests j ON(j.gid=g.gid AND j.uid != 0)
Zeile 3272	Zeile 3733
$groupleader[$usergroup['gid']] = 1; $trow = alt_trow(); eval("\$groupsledlist .= \"".$templates->get("usercp_usergroups_leader_usergroup")."\";");	$groupleader[$usergroup['gid']] = 1; $trow = alt_trow(); eval("\$groupsledlist .= \"".$templates->get("usercp_usergroups_leader_usergroup")."\";");
}	}
$leadinggroups = ''; if($groupsledlist) {	$leadinggroups = ''; if($groupsledlist) {
Zeile 3288	Zeile 3749
eval("\$leavelink = \"".$templates->get("usercp_usergroups_memberof_usergroup_leaveprimary")."\";"); $trow = alt_trow(); if($usergroup['candisplaygroup'] == 1 && $usergroup['gid'] == $mybb->user['displaygroup'])	eval("\$leavelink = \"".$templates->get("usercp_usergroups_memberof_usergroup_leaveprimary")."\";"); $trow = alt_trow(); if($usergroup['candisplaygroup'] == 1 && $usergroup['gid'] == $mybb->user['displaygroup'])
{	{
eval("\$displaycode = \"".$templates->get("usercp_usergroups_memberof_usergroup_display")."\";"); } elseif($usergroup['candisplaygroup'] == 1)	eval("\$displaycode = \"".$templates->get("usercp_usergroups_memberof_usergroup_display")."\";"); } elseif($usergroup['candisplaygroup'] == 1)
{	{
eval("\$displaycode = \"".$templates->get("usercp_usergroups_memberof_usergroup_setdisplay")."\";"); } else	eval("\$displaycode = \"".$templates->get("usercp_usergroups_memberof_usergroup_setdisplay")."\";"); } else
{	{
$displaycode = ''; }	$displaycode = ''; }
Zeile 3304	Zeile 3765
$showmemberof = false; if($mybb->user['additionalgroups']) {	$showmemberof = false; if($mybb->user['additionalgroups']) {
$query = $db->simple_select("usergroups", "*", "gid IN (".$mybb->user['additionalgroups'].") AND gid !='".$mybb->user['usergroup']."'", array('order_by' => 'title'));	$additionalgroups = implode( ',', array_map( 'intval', explode(',', $mybb->user['additionalgroups']) ) ); $query = $db->simple_select("usergroups", "*", "gid IN (".$additionalgroups.") AND gid !='".$mybb->user['usergroup']."'", array('order_by' => 'title'));
while($usergroup = $db->fetch_array($query)) { $showmemberof = true;	while($usergroup = $db->fetch_array($query)) { $showmemberof = true;
Zeile 3359	Zeile 3827
$existinggroups = $mybb->user['usergroup']; if($mybb->user['additionalgroups']) {	$existinggroups = $mybb->user['usergroup']; if($mybb->user['additionalgroups']) {
$existinggroups .= ",".$mybb->user['additionalgroups'];	$additionalgroups = implode( ',', array_map( 'intval', explode(',', $mybb->user['additionalgroups']) ) ); $existinggroups .= ",".$additionalgroups;
} $joinablegroups = $joinablegrouplist = '';	} $joinablegroups = $joinablegrouplist = '';
Zeile 3380	Zeile 3855
if($usergroup['type'] == 4) { $conditions = $lang->usergroup_joins_moderated;	if($usergroup['type'] == 4) { $conditions = $lang->usergroup_joins_moderated;
}	}
elseif($usergroup['type'] == 5) { $conditions = $lang->usergroup_joins_invite;	elseif($usergroup['type'] == 5) { $conditions = $lang->usergroup_joins_invite;
}	}
else { $conditions = $lang->usergroup_joins_anyone;	else { $conditions = $lang->usergroup_joins_anyone;
}	}
if(isset($appliedjoin[$usergroup['gid']]) && $usergroup['type'] != 5) { $applydate = my_date('relative', $appliedjoin[$usergroup['gid']]);	if(isset($appliedjoin[$usergroup['gid']]) && $usergroup['type'] != 5) { $applydate = my_date('relative', $appliedjoin[$usergroup['gid']]);
Zeile 3404	Zeile 3879
$joinlink = "--"; } else	$joinlink = "--"; } else
{	{
eval("\$joinlink = \"".$templates->get("usercp_usergroups_joinable_usergroup_join")."\";"); }	eval("\$joinlink = \"".$templates->get("usercp_usergroups_joinable_usergroup_join")."\";"); }
Zeile 3431	Zeile 3906
if($joinablegrouplist) { eval("\$joinablegroups = \"".$templates->get("usercp_usergroups_joinable")."\";");	if($joinablegrouplist) { eval("\$joinablegroups = \"".$templates->get("usercp_usergroups_joinable")."\";");
}	}
$plugins->run_hooks("usercp_usergroups_end"); eval("\$groupmemberships = \"".$templates->get("usercp_usergroups")."\";");	$plugins->run_hooks("usercp_usergroups_end"); eval("\$groupmemberships = \"".$templates->get("usercp_usergroups")."\";");
Zeile 3441	Zeile 3916
if($mybb->input['action'] == "attachments") {	if($mybb->input['action'] == "attachments") {
$plugins->run_hooks("usercp_attachments_start");
require_once MYBB_ROOT."inc/functions_upload.php";	require_once MYBB_ROOT."inc/functions_upload.php";

if($mybb->settings['enableattachments'] == 0)	if($mybb->settings['enableattachments'] == 0)
{	{
error($lang->attachments_disabled);	error($lang->attachments_disabled);
	} $plugins->run_hooks("usercp_attachments_start"); // Get unviewable forums $f_perm_sql = ''; $unviewable_forums = get_unviewable_forums(true); $inactiveforums = get_inactive_forums(); if($unviewable_forums) { $f_perm_sql = " AND t.fid NOT IN ($unviewable_forums)"; } if($inactiveforums) { $f_perm_sql .= " AND t.fid NOT IN ($inactiveforums)";
} $attachments = '';	} $attachments = '';
Zeile 3478	Zeile 3967
FROM ".TABLE_PREFIX."attachments a LEFT JOIN ".TABLE_PREFIX."posts p ON (a.pid=p.pid) LEFT JOIN ".TABLE_PREFIX."threads t ON (t.tid=p.tid)	FROM ".TABLE_PREFIX."attachments a LEFT JOIN ".TABLE_PREFIX."posts p ON (a.pid=p.pid) LEFT JOIN ".TABLE_PREFIX."threads t ON (t.tid=p.tid)
WHERE a.uid='".$mybb->user['uid']."'	WHERE a.uid='".$mybb->user['uid']."' {$f_perm_sql}
ORDER BY p.dateline DESC LIMIT {$start}, {$perpage} ");	ORDER BY p.dateline DESC LIMIT {$start}, {$perpage} ");
$bandwidth = $totaldownloads = 0;	$bandwidth = $totaldownloads = $totalusage = $totalattachments = $processedattachments = 0;
while($attachment = $db->fetch_array($query)) { if($attachment['dateline'] && $attachment['tid'])	while($attachment = $db->fetch_array($query)) { if($attachment['dateline'] && $attachment['tid'])
Zeile 3505	Zeile 3994
// Add to bandwidth total $bandwidth += ($attachment['filesize'] * $attachment['downloads']); $totaldownloads += $attachment['downloads'];	// Add to bandwidth total $bandwidth += ($attachment['filesize'] * $attachment['downloads']); $totaldownloads += $attachment['downloads'];
	$totalusage += $attachment['filesize']; ++$totalattachments;
} else { // This little thing delets attachments without a thread/post remove_attachment($attachment['pid'], $attachment['posthash'], $attachment['aid']); }	} else { // This little thing delets attachments without a thread/post remove_attachment($attachment['pid'], $attachment['posthash'], $attachment['aid']); }
	++$processedattachments;
}	}
$query = $db->simple_select("attachments", "SUM(filesize) AS ausage, COUNT(aid) AS acount", "uid='".$mybb->user['uid']."'"); $usage = $db->fetch_array($query); $totalusage = $usage['ausage']; $totalattachments = $usage['acount']; $friendlyusage = get_friendly_size($totalusage);	if($processedattachments >= $perpage \|\| $page > 1) { $query = $db->query(" SELECT SUM(a.filesize) AS ausage, COUNT(a.aid) AS acount FROM ".TABLE_PREFIX."attachments a LEFT JOIN ".TABLE_PREFIX."posts p ON (a.pid=p.pid) LEFT JOIN ".TABLE_PREFIX."threads t ON (t.tid=p.tid) WHERE a.uid='".$mybb->user['uid']."' {$f_perm_sql} "); $usage = $db->fetch_array($query); $totalusage = $usage['ausage']; $totalattachments = $usage['acount']; $multipage = multipage($totalattachments, $perpage, $page, "usercp.php?action=attachments"); } $friendlyusage = get_friendly_size((int)$totalusage);
if($mybb->usergroup['attachquota']) {	if($mybb->usergroup['attachquota']) {
$percent = round(($totalusage/($mybb->usergroup['attachquota']1024))100)."%";	$percent = round(($totalusage/($mybb->usergroup['attachquota']1024))100); $friendlyusage .= $lang->sprintf($lang->attachments_usage_percent, $percent);
$attachquota = get_friendly_size($mybb->usergroup['attachquota']*1024);	$attachquota = get_friendly_size($mybb->usergroup['attachquota']*1024);
$usagenote = $lang->sprintf($lang->attachments_usage_quota, $friendlyusage, $attachquota, $percent, $totalattachments);	$usagenote = $lang->sprintf($lang->attachments_usage_quota, $friendlyusage, $attachquota, $totalattachments);
} else {	} else {
$percent = $lang->unlimited;
$attachquota = $lang->unlimited; $usagenote = $lang->sprintf($lang->attachments_usage, $friendlyusage, $totalattachments);	$attachquota = $lang->unlimited; $usagenote = $lang->sprintf($lang->attachments_usage, $friendlyusage, $totalattachments);
} $multipage = multipage($totalattachments, $perpage, $page, "usercp.php?action=attachments");	}
$bandwidth = get_friendly_size($bandwidth); if(!$attachments)	$bandwidth = get_friendly_size($bandwidth); if(!$attachments)
{	{
eval("\$attachments = \"".$templates->get("usercp_attachments_none")."\";"); $usagenote = '';	eval("\$attachments = \"".$templates->get("usercp_attachments_none")."\";"); $usagenote = '';
}	}
$plugins->run_hooks("usercp_attachments_end"); eval("\$manageattachments = \"".$templates->get("usercp_attachments")."\";");	$plugins->run_hooks("usercp_attachments_end"); eval("\$manageattachments = \"".$templates->get("usercp_attachments")."\";");
Zeile 3551	Zeile 4054
// Verify incoming POST request verify_post_check($mybb->get_input('my_post_key'));	// Verify incoming POST request verify_post_check($mybb->get_input('my_post_key'));
$plugins->run_hooks("usercp_do_attachments_start");
require_once MYBB_ROOT."inc/functions_upload.php"; if(!isset($mybb->input['attachments']) \|\| !is_array($mybb->input['attachments'])) { error($lang->no_attachments_selected); }	require_once MYBB_ROOT."inc/functions_upload.php"; if(!isset($mybb->input['attachments']) \|\| !is_array($mybb->input['attachments'])) { error($lang->no_attachments_selected); }
	$plugins->run_hooks("usercp_do_attachments_start"); // Get unviewable forums $f_perm_sql = ''; $unviewable_forums = get_unviewable_forums(true); $inactiveforums = get_inactive_forums(); if($unviewable_forums) { $f_perm_sql = " AND p.fid NOT IN ($unviewable_forums)"; } if($inactiveforums) { $f_perm_sql .= " AND p.fid NOT IN ($inactiveforums)"; }
$aids = implode(',', array_map('intval', $mybb->input['attachments']));	$aids = implode(',', array_map('intval', $mybb->input['attachments']));
$query = $db->simple_select("attachments", "*", "aid IN ($aids) AND uid='".$mybb->user['uid']."'");	$query = $db->query(" SELECT a.*, p.fid FROM ".TABLE_PREFIX."attachments a LEFT JOIN ".TABLE_PREFIX."posts p ON (a.pid=p.pid) WHERE aid IN ({$aids}) AND a.uid={$mybb->user['uid']} {$f_perm_sql} ");
while($attachment = $db->fetch_array($query)) { remove_attachment($attachment['pid'], '', $attachment['aid']);	while($attachment = $db->fetch_array($query)) { remove_attachment($attachment['pid'], '', $attachment['aid']);
Zeile 3632	Zeile 4157
{ $reputation_link = get_reputation($mybb->user['reputation']); eval("\$reputation = \"".$templates->get("usercp_reputation")."\";");	{ $reputation_link = get_reputation($mybb->user['reputation']); eval("\$reputation = \"".$templates->get("usercp_reputation")."\";");
}	}
$latest_warnings = ''; if($mybb->settings['enablewarningsystem'] != 0 && $mybb->settings['canviewownwarning'] != 0) { if($mybb->settings['maxwarningpoints'] < 1) { $mybb->settings['maxwarningpoints'] = 10;	$latest_warnings = ''; if($mybb->settings['enablewarningsystem'] != 0 && $mybb->settings['canviewownwarning'] != 0) { if($mybb->settings['maxwarningpoints'] < 1) { $mybb->settings['maxwarningpoints'] = 10;
}	}
$warning_level = round($mybb->user['warningpoints']/$mybb->settings['maxwarningpoints']*100); if($warning_level > 100) {	$warning_level = round($mybb->user['warningpoints']/$mybb->settings['maxwarningpoints']*100); if($warning_level > 100) {
Zeile 3688	Zeile 4213
if($warning['type_title']) { $warning_type = $warning['type_title'];	if($warning['type_title']) { $warning_type = $warning['type_title'];
} else	} else
{ $warning_type = $warning['title']; } $warning_type = htmlspecialchars_uni($warning_type); if($warning['points'] > 0)	{ $warning_type = $warning['title']; } $warning_type = htmlspecialchars_uni($warning_type); if($warning['points'] > 0)
{	{
$warning['points'] = "+{$warning['points']}"; } $points = $lang->sprintf($lang->warning_points, $warning['points']);	$warning['points'] = "+{$warning['points']}"; } $points = $lang->sprintf($lang->warning_points, $warning['points']);
Zeile 3715	Zeile 4240
} else {	} else {
$expires = my_date('relative', $warning['expires']);	$expires = nice_time($warning['expires']-TIME_NOW);
} $alt_bg = alt_trow(); eval("\$warnings .= \"".$templates->get("usercp_warnings_warning")."\";");	} $alt_bg = alt_trow(); eval("\$warnings .= \"".$templates->get("usercp_warnings_warning")."\";");
}	}
if($warnings) { eval("\$latest_warnings = \"".$templates->get("usercp_warnings")."\";");	if($warnings) { eval("\$latest_warnings = \"".$templates->get("usercp_warnings")."\";");
Zeile 3739	Zeile 4264
if($mybb->settings['usereferrals'] == 1) { $referral_link = $lang->sprintf($lang->referral_link, $settings['bburl'], $mybb->user['uid']);	if($mybb->settings['usereferrals'] == 1) { $referral_link = $lang->sprintf($lang->referral_link, $settings['bburl'], $mybb->user['uid']);
	$referral_count = (int) $mybb->user['referrals']; if($referral_count > 0) { $uid = (int) $mybb->user['uid']; eval("\$mybb->user['referrals'] = \"".$templates->get('member_referrals_link')."\";"); }
eval("\$referral_info = \"".$templates->get("usercp_referrals")."\";"); }	eval("\$referral_info = \"".$templates->get("usercp_referrals")."\";"); }
Zeile 3816	Zeile 4349
foreach($subscriptions as $thread) {	foreach($subscriptions as $thread) {
	$plugins->run_hooks("usercp_thread_subscriptions_thread");
$folder = ''; $folder_label = ''; $gotounread = '';	$folder = ''; $folder_label = ''; $gotounread = '';
Zeile 3856	Zeile 4390
{ $folder = "dot_"; $folder_label .= $lang->icon_dot;	{ $folder = "dot_"; $folder_label .= $lang->icon_dot;
}	}
// Check to see which icon we display if($thread['lastread'] && $thread['lastread'] < $thread['lastpost'])	// Check to see which icon we display if($thread['lastread'] && $thread['lastread'] < $thread['lastpost'])
{	{
$folder .= "new"; $folder_label .= $lang->icon_new; $new_class = "subject_new"; $thread['newpostlink'] = get_thread_link($thread['tid'], 0, "newpost"); eval("\$gotounread = \"".$templates->get("forumdisplay_thread_gotounread")."\";");	$folder .= "new"; $folder_label .= $lang->icon_new; $new_class = "subject_new"; $thread['newpostlink'] = get_thread_link($thread['tid'], 0, "newpost"); eval("\$gotounread = \"".$templates->get("forumdisplay_thread_gotounread")."\";");
}	}
else { $folder_label .= $lang->icon_no_new; $new_class = "subject_old";	else { $folder_label .= $lang->icon_no_new; $new_class = "subject_old";
}	}
$folder .= "folder"; if($thread['visible'] == 0) { $bgcolor = "trow_shaded";	$folder .= "folder"; if($thread['visible'] == 0) { $bgcolor = "trow_shaded";
}	}
$lastpostdate = my_date('relative', $thread['lastpost']);	$lastpostdate = my_date('relative', $thread['lastpost']);
$lastposter = htmlspecialchars_uni($thread['lastposter']);
$lastposteruid = $thread['lastposteruid'];	$lastposteruid = $thread['lastposteruid'];
	if(!$lastposteruid && !$thread['lastposter']) { $lastposter = htmlspecialchars_uni($lang->guest); } else { $lastposter = htmlspecialchars_uni($thread['lastposter']); }
if($lastposteruid == 0) {	if($lastposteruid == 0) {
Zeile 3968	Zeile 4509
WHERE f.active != 0 ORDER BY pid, disporder ");	WHERE f.active != 0 ORDER BY pid, disporder ");

while($forum = $db->fetch_array($query)) { $readforums[$forum['fid']] = $forum['lastread'];	while($forum = $db->fetch_array($query)) { $readforums[$forum['fid']] = $forum['lastread'];
Zeile 4001	Zeile 4542
$latest_threads_threads = ''; foreach($threadcache as $thread) {	$latest_threads_threads = ''; foreach($threadcache as $thread) {
	$plugins->run_hooks("usercp_latest_threads_thread");
if($thread['tid']) { $bgcolor = alt_trow();	if($thread['tid']) { $bgcolor = alt_trow();
Zeile 4117	Zeile 4659
if($thread['closed'] == 1) {	if($thread['closed'] == 1) {
$folder .= "lock"; $folder_label .= $lang->icon_lock;	$folder .= "close"; $folder_label .= $lang->icon_close;
} $folder .= "folder";	} $folder .= "folder";