Oxygen

<?php

/**

 * Project:     Oxygen Bulletin Board

 * File :       $HeadURL$

 * Revision :   $Revision$

 * Author :     $Author$

 * Date :       $Date$

 * Id :         $Id$

 *

 * Oxygen is free software; you can redistribute it and/or modify it

 * under the terms of the GNU General Public License as published

 * by the Free Software Foundation; either version 2 of the License,

 * or (at your option) any later version.

 *

 * Oxygen is distributed in the hope that it will be useful, but

 * WITHOUT ANY WARRANTY; without even the implied warranty of

 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

 * GNU General Public License for more details.

 *

 * You should have received a copy of the GNU General Public License

 * along with this program; if not, write to the Free Software

 * Foundation, Inc., 59 Temple Place, Suite 330, Boston,

 * MA  02111-1307  USA

 *

 * @link http://www.o2php.com/

 * @copyright 2002-2006 Oxygen Team.

 * @author Eric Fredj <heltem at o2php dot com>

 * @package o2php

 * @version [VERSION]

 */

$TPL_LOAD = 'header, footer, memcp_profile_avatarurl, memcp_profile_avatarlist, tzoneselect, cp_profile, memcp_profile_notify';

require('./header.php');

if($status != "Administrator") {

        redirect("javascript:history.go(-1)");

        message($lang['notadmin']);

        exit;

}

if($action == "profile") {

        if(!isset($submit)) {

                $query = $db->query(sprintf('SELECT * FROM %s WHERE uid=%d', $table['members'], $user));

                $member = $db->fetch_assoc($query);

                if($member['showemail'] == "yes") {

                        $checked['showemail'] = 'checked="checked"';

                }

                if($allownotify == "yes") {

                        if($member['emailnotify'] == "yes") {

                                $checked['notify'] = 'checked="checked"';

                        }

                        eval("\$memcp_profile_notify = \"" . template("memcp_profile_notify")."\";");

                }

                if($member['newsletter'] == "yes") {

                        $checked['news'] = 'checked="checked"';

                }

                if($member['u2upopup'] == "yes") {

                        $checked['u2upopup'] = 'checked="checked"';

                }

                if($member['hidden'] == "yes") {

                        $checked['hidden'] = 'checked="checked"';

                }

                if($member['hidesig'] == "yes") {

                        $checked['hidesig'] = 'checked="checked"';

                }

                if($member['hideavatar'] == "yes") {

                        $checked['hideavatar'] = 'checked="checked"';

                }

                $coochk[$member['logintime']] = "selected=\"selected\"";

                $currdate = gmdate($huser['timecode']);

                eval($lang['evaloffset']);

                $timeseloffset = array('-12', '-11', '-10', '-9', '-8', '-7', '-6', '-5', '-4', '-3.5', '-3', '-2', '-1', '0', '1', '2', '3', '3.5', '4', '4.5', '5', '5.5', '6', '7', '8', '9', '9.5', '10', '11', '12');

                $tzindex = array_search($member['timeoffset'], $timeseloffset) + 1;

                $timesel[$tzindex] = 'selected="selected"';

                $pop = new wdgPopup('thememem');

                $pop->setKeyName('id');

                $pop->setValueName('name');

                $pop->setValues(getThemes());

                $pop->selected = $member['theme_id'];

                $pop->setBlank($lang['textusedefault'], 0);

                $themelist = $pop->render();

                if($dir = @opendir("lang")) {

                        while ($thafile = readdir($dir)) {

                                if(is_file("lang/$thafile") && preg_match('/\.lang\.php$/', $thafile)) {

                                        $temparray[] = str_replace(".lang.php", "", $thafile);

                                }

                        }

                        closedir($dir);

                }

                $langfileselect = popup("langfilenew", $temparray, false, "", $member['langfile']);

                $listday = implode('", "', array($lang['timesunprfx'], $lang['timemonprfx'], $lang['timetueprfx'], $lang['timewedprfx'], $lang['timethuprfx'], $lang['timefriprfx'], $lang['timesatprfx']));

                $listmonth = implode('", "', $month_names);

                if(isset($member['bmonth'])) {

                        $member['bmonth'] = (int) $member['bmonth'];

                }

                if(isset($member['bday'])) {

                        $member['bday'] = (int) $member['bday'];

                }

                $day_names = array();

                for($i = 1; $i < 32; $i++) {

                        $day_names[] = $i;

                }

                $dayselect = newpopup('day', $day_names, array('blank' => true, 'attr' => '', 'usekey' => false), $member['bday']);

                $monthselect = newpopup('month', $month_names, array('blank' => true, 'attr' => '', 'usekey' => true), $member['bmonth']);

                if('24' == $member['timeformat']) {

                        $check24 = 'checked="checked"';

                } else {

                        $check12 = 'checked="checked"';

                }

                if('yes' == $settings['sigbbcode']) {

                        $bbcodeis = $lang['textyes'];

                } else {

                        $bbcodeis = $lang['textno'];

                }

                if('yes' == $settings['sightml']) {

                        $htmlis = $lang['textyes'];

                } else {

                        $htmlis = $lang['textno'];

                }

                // Change username code

                $newname = '<input type="text" name="newusername" size="25" value="' . $member['username'] . '" />';

                // Custom status code

                $custom = '<input type="text" name="newcstatus" size="40" value="' . $member['customstatus'] . '" />';

                $avatars = " <option value=\"\" />$lang[textnone]</option>  ";

                if(false !== ($dir = @opendir("images/avatars"))) {

                        while($avatar1 = readdir($dir)) {

                                if(is_file("images/avatars/$avatar1")) {

                                        $avatars .= " <option value=\"images/avatars/$avatar1\" />$avatar1</option>  ";

                                }

                        }

                        closedir($dir);

                }

                $avatars = str_replace("value=\"$member[avatar]\"", "value=\"$member[avatar]\" selected=\"selected\"", $avatars);

                $avatarbox = "<select name=\"avatarlist\" onchange='setimage(this);'>$avatars</select>";

                eval("\$cp_avatar = \"".template("memcp_profile_avatarlist")."\";");

                eval("\$cp_avatar .= \"".template("memcp_profile_avatarurl")."\";");

                $navigation = "&raquo; <a href=\"cp.php\">$lang[textcp]</a> &raquo; $lang[textprofor] $member[username]";

                setCSS('CalendarPopup.css', 'calendar');

                eval("\$header = \"".template("header")."\";");

                echo $header;

                eval("\$offset = \"".template("tzoneselect")."\";");

                eval("\$profile = \"".template("cp_profile")."\";");

                echo $profile;

        } else {

                $query = $db->query("SELECT * FROM $table[members] WHERE uid=" . (int) $user);

                $member = $db->fetch_assoc($query);

                if(!$member['username']) {

                        message($lang['badname']);

                        exit;

                }

                $clause = array();

                $newusername = addslashes(trim($newusername));

                if('' != $newusername && $newusername != $member['username'] && !preg_match('`("|%|<|,|\||\'|' . chr(160) . ')`', $newusername)) {

                        $query = $db->query("SELECT uid FROM $table[members] WHERE username='$newusername'");

                        if(!$db->fetch_assoc($query)) {

                                $clause['username'] = "username='" . $newusername . "',";

                        } else {

                                redirect("javascript:history.go(-1)");

                                message($lang['alreadyreg']);

                                exit;

                        }

                }

                if($showemail != "yes") {

                        $showemail = "no";

                }

                if($hidden != "yes") {

                        $hidden = "no";

                }

                if($hidesig != "yes") {

                        $hidesig = "no";

                }

                if($hideavatar != "yes") {

                        $hideavatar = "no";

                }

                if($newemailnotifydef != "yes" || $allownotify == "no") {

                        $newemailnotifydef = "no";

                }

                if($newsletter != "yes") {

                        $newsletter = "no";

                }

                $bday = (int) $day;

                $bmonth = (int) $month;

                $byear = (int) $year;

                if(0 === $bday || 0 === $bmonth || !checkdate($bmonth, $bday, $byear)) {

                        $bday = 'NULL';

                        $bmonth = 'NULL';

                        $byear = 'NULL';

                } else if(0 === $byear) {

                        $byear = 'NULL';

                } else {

                        $db->query("UPDATE $table[settings] SET value= '0' WHERE variable='birthdate'");

                }

                if($avatarurl != "") {

                        $avatar = getavatarsetting($avatarurl);

                } else {

                        $avatar = $avatarlist;

                }

                $avatar = addslashes($avatar);

                $memlocation = addslashes($memlocation);

                $icq = addslashes($_POST['icq']);

                $yahoo = addslashes($_POST['yahoo']);

                $aim = addslashes($_POST['aim']);

                $msn = addslashes($_POST['msn']);

                $email = addslashes($email);

                $site = addslashes($site);

                $bio = addslashes($_POST['bio']);

                $newcstatus = addslashes($newcstatus);

                $langilenew = addslashes($langilenew);

                $firstname = addslashes($_POST['firstname']);

                $realname = addslashes($_POST['realname']);

                $timeformatnew = addslashes($_POST['timeformatnew']);

                $dateformatnew = addslashes($_POST['dateformatnew']);

                $pppnew = (int) $pppnew;

                $tppnew = (int) $tppnew;

                $timeoffset = (int) $_POST['timeoffset'];

                $cookielife = (int) $_POST['cookielife'];

                if('yes' == $settings['sightml']) {

                        $bbT->handleTags('html');

                }

                // Cache Smilies

                smcwcache(true, false);

                $smilies = $o2cache['smilies'];

                if($smilies[0] > 0) {

                        $bbT->addSmilies($smilies[1]);

                }

                $signaturehtml = $bbT->processHtml($signature);

                $signaturehtml = $bbT->processWrap($signaturehtml);

                $signaturehtml = $bbT->processTags($signaturehtml, true);

                if('yes' == $settings['sightml']) {

                        $bbT->removeTags('html');

                }

                $signature = $db->textFormat($signature);

                $signaturehtml = $db->textFormat($signaturehtml);

                if(!empty($newpassword)) {

                        $clause['password'] =  "password='" . md5($newpassword) . "',";

                }

                $db->query("UPDATE $table[members] SET $clause[username] $clause[password] customstatus='$newcstatus', email='$email', site='$site', aim='$aim', location='$memlocation', bio='$bio', sig=$signature, sightml=$signaturehtml, showemail='$showemail', timeoffset=$timeoffset, icq='$icq', avatar='$avatar', yahoo='$yahoo', theme='$thememem', bday=$bday, bmonth=$bmonth, byear=$byear, langfile='$langfilenew', tpp=$tppnew, ppp=$pppnew, newsletter='$newsletter', timeformat='$timeformatnew', msn='$msn', dateformat='$dateformatnew', realname='$realname', firstname='$firstname', emailnotify='$newemailnotifydef', u2upopup='$newu2upopup', hidden='$hidden', hidesig='$hidesig', hideavatar='$hideavatar', logintime=$cookielife WHERE uid=$user");

                redirect('member.php?action=viewpro&uid=' . urlencode($member['uid']));

                message($lang['editedpro']);

                exit;

        }

}

if($action == "avatargal") {

        $navigation = "&raquo; <a href=\"cp.php\">$lang[textcp]</a> &raquo; $lang[avatartitle]";

        eval("\$header = \"".template("header")."\";");

        echo $header;

        include("include/avatargal.inc.php");

}

$timing->chrono($now);

$endtime = $timing->getchrono($now);

$totaltime = $endtime[2];

eval("\$footer = \"".template("footer")."\";");

echo $footer;