Code:
function docookie($setuid, $setusername, $setpass, $setstorynum, $setumode, $setuorder, $setthold, $setnoscore, $setublockon, $settheme, $setcommentmax) {
$info = base64_encode("$setuid:$setusername:$setpass:$setstorynum:$setumode:$setuorder:$setthold:$setnoscore:$setublockon:$settheme:$setcommentmax");
setcookie("user","$info",time()+2592000);
}
function login($username, $user_password, $redirect, $mode, $f, $t, $random_num, $gfx_check) {
global $nsnst_const, $setinfo, $user_prefix, $db, $module_name, $pm_login, $prefix;
include("config.php");
$sql = "SELECT user_password, user_id, storynum, umode, uorder, thold, noscore, ublockon, theme, commentmax FROM ".$user_prefix."_users WHERE username='$username'";
$result = $db->sql_query($sql);
$setinfo = $db->sql_fetchrow($result);
$forward = ereg_replace("redirect=", "", "$redirect");
if (ereg("privmsg", $forward)) {
$pm_login = "active";
}
if (($db->sql_numrows($result)==1) AND ($setinfo[user_id] != 1) AND ($setinfo[user_password] != "")) {
$dbpass=$setinfo[user_password];
$non_crypt_pass = $user_password;
$old_crypt_pass = crypt($user_password,substr($dbpass,0,2));
$new_pass = md5($user_password);
if (($dbpass == $non_crypt_pass) OR ($dbpass == $old_crypt_pass)) {
$db->sql_query("UPDATE ".$user_prefix."_users SET user_password='$new_pass' WHERE username='$username'");
$sql = "SELECT user_password FROM ".$user_prefix."_users WHERE username='$username'";
$result = $db->sql_query($sql);
$row = $db->sql_fetchrow($result);
$dbpass = $row[user_password];
}
if ($dbpass != $new_pass) {
Header("Location: modules.php?name=$module_name&stop=1");
return;
}
$datekey = date("F j");
$rcode = hexdec(md5($_SERVER[HTTP_USER_AGENT] . $sitekey . $random_num . $datekey));
$code = substr($rcode, 2, 6);
if (extension_loaded("gd") AND $code != $gfx_check AND ($gfx_chk == 2 OR $gfx_chk == 4 OR $gfx_chk == 5 OR $gfx_chk == 7)) {
Header("Location: modules.php?name=$module_name&stop=1");
die();
} else {
docookie($setinfo[user_id], $username, $new_pass, $setinfo[storynum], $setinfo[umode], $setinfo[uorder], $setinfo[thold], $setinfo[noscore], $setinfo[ublockon], $setinfo[theme], $setinfo[commentmax]);
if(!defined("NUKESENTINEL_IS_LOADED")) {
$uname = $_SERVER['REMOTE_ADDR'];
} else {
$uname = $nsnst_const['remote_ip'];
}
$db->sql_query("DELETE FROM ".$prefix."_session WHERE uname='$uname' AND guest='1'");
$db->sql_query("UPDATE ".$prefix."_users SET last_ip='$uname' WHERE username='$username'");
}
if ($pm_login != "") {
Header("Location: modules.php?name=Private_Messages&file=index&folder=inbox");
exit;
}
if ($redirect == "" ) {
Header("Location: account.html");
} else if ($mode == "") {
Header("Location: forums.html?file=$forward");
} else if ($t !="") {
Header("Location: forums.html?file=$forward&mode=$mode&t=$t");
} else {
Header("Location: forums.html?file=$forward&mode=$mode&f=$f");
}
} else {
Header("Location: modules.php?name=$module_name&stop=1");
}
}
function edituser() {
global $prefix, $db, $user, $userinfo, $cookie, $module_name, $bgcolor2, $bgcolor3;
cookiedecode($user);
getusrinfo($user);
if ((is_user($user)) AND (strtolower($userinfo['username']) == strtolower($cookie[1])) AND ($userinfo['user_password'] == $cookie[2])) {
include("header.php");
OpenTable();
echo "<center><font class=\"title\"><b>"._PERSONALINFO."</b></font></center>";
CloseTable();
echo "<br>";
OpenTable();
nav();
CloseTable();
echo "<br>";
if (!eregi("http://",$userinfo[user_website])) {
$userinfo[user_website] = "http://$userinfo[user_website]";
}
OpenTable();
echo "<table class=forumline cellpadding=\"3\" border=\"0\" width='100%'>"
."<form name=\"Register\" action=\"modules.php?name=$module_name\" method=\"post\">"
."<tr><td bgcolor='$bgcolor2'><b>"._USRNICKNAME."</b>:</td><td bgcolor='$bgcolor3'><b>$userinfo[username]</b></td></tr>"
."<tr><td bgcolor='$bgcolor2'><b>"._UREALNAME."</b>:<br>"._OPTIONAL."</td><td bgcolor='$bgcolor3'>"
."<input type=\"text\" name=\"realname\" value=\"$userinfo[name]\" size=\"50\" maxlength=\"60\"></td></tr>"
."<tr><td bgcolor='$bgcolor2'><b>"._UREALEMAIL.":</b><br>"._REQUIRED."</td>"
."<td bgcolor='$bgcolor3'><input type=\"text\" name=\"user_email\" value=\"$userinfo[user_email]\" size=\"50\" maxlength=\"255\"><br>"._EMAILNOTPUBLIC."</td></tr>"
."<tr><td bgcolor='$bgcolor2'><b>"._UFAKEMAIL.":</b><br>"._OPTIONAL."</td>"
."<td bgcolor='$bgcolor3'><input type=\"text\" name=\"femail\" value=\"$userinfo[femail]\" size=\"50\" maxlength=\"255\"><br>"._EMAILPUBLIC."</td></tr>"
."<tr><td bgcolor='$bgcolor2'><b>"._YOURHOMEPAGE.":</b><br>"._OPTIONAL."</td>"
."<td bgcolor='$bgcolor3'><input type=\"text\" name=\"user_website\" value=\"$userinfo[user_website]\" size=\"50\" maxlength=\"255\"></td></tr>";
echo "<tr><td bgcolor='$bgcolor2'><b>"._YICQ.":</b><br>"._OPTIONAL."</td>"
."<td bgcolor='$bgcolor3'><input type=\"text\" name=\"user_icq\" value=\"$userinfo[user_icq]\" size=\"30\" maxlength=\"100\"></td></tr>"
."<tr><td bgcolor='$bgcolor2'><b>"._YAIM.":</b><br>"._OPTIONAL."</td>"
."<td bgcolor='$bgcolor3'><input type=\"text\" name=\"user_aim\" value=\"$userinfo[user_aim]\" size=\"30\" maxlength=\"100\"></td></tr>"
."<tr><td bgcolor='$bgcolor2'><b>"._YYIM.":</b><br>"._OPTIONAL."</td>"
."<td bgcolor='$bgcolor3'><input type=\"text\" name=\"user_yim\" value=\"$userinfo[user_yim]\" size=\"30\" maxlength=\"100\"></td></tr>"
."<tr><td bgcolor='$bgcolor2'><b>"._YMSNM.":</b><br>"._OPTIONAL."</td>"
."<td bgcolor='$bgcolor3'><input type=\"text\" name=\"user_msnm\" value=\"$userinfo[user_msnm]\" size=\"30\" maxlength=\"100\"></td></tr>"
."<tr><td bgcolor='$bgcolor2'><b>"._YLOCATION.":</b><br>"._OPTIONAL."</td>"
."<td bgcolor='$bgcolor3'><input type=\"text\" name=\"user_from\" value=\"$userinfo[user_from]\" size=\"30\" maxlength=\"100\"></td></tr>"
."<tr><td bgcolor='$bgcolor2'><b>"._YOCCUPATION.":</b><br>"._OPTIONAL."</td>"
."<td bgcolor='$bgcolor3'><input type=\"text\" name=\"user_occ\" value=\"$userinfo[user_occ]\" size=\"30\" maxlength=\"100\"></td></tr>"
."<tr><td bgcolor='$bgcolor2'><b>"._YINTERESTS.":</b><br>"._OPTIONAL."</td>"
."<td bgcolor='$bgcolor3'><input type=\"text\" name=\"user_interests\" value=\"$userinfo[user_interests]\" size=\"30\" maxlength=\"100\"></td></tr>";
echo "<tr><td bgcolor='$bgcolor2'><b>"._RECEIVENEWSLETTER."</b></td><td bgcolor='$bgcolor3'>";
if ($userinfo[newsletter] == 1) {
echo "<input type=\"radio\" name=\"newsletter\" value=\"1\" checked>"._YES." "
."<input type=\"radio\" name=\"newsletter\" value=\"0\">"._NO."";
} elseif ($userinfo[newsletter] == 0) {
echo "<input type=\"radio\" name=\"newsletter\" value=\"1\">"._YES." "
."<input type=\"radio\" name=\"newsletter\" value=\"0\" checked>"._NO."";
}
echo "</td></tr>";
echo "<tr><td bgcolor='$bgcolor2'><b>"._ALWAYSSHOWEMAIL.":</b></td><td bgcolor='$bgcolor3'>";
if ($userinfo[user_viewemail] == 1) {
echo "<input type=\"radio\" name=\"user_viewemail\" value=\"1\" checked>"._YES." "
."<input type=\"radio\" name=\"user_viewemail\" value=\"0\">"._NO."";
} elseif ($userinfo[user_viewemail] == 0) {
echo "<input type=\"radio\" name=\"user_viewemail\" value=\"1\">"._YES." "
."<input type=\"radio\" name=\"user_viewemail\" value=\"0\" checked>"._NO."";
}
echo "</td></tr>";
echo "<tr><td bgcolor='$bgcolor2'><b>"._HIDEONLINE.":</b></td><td bgcolor='$bgcolor3'>";
if ($userinfo[user_allow_viewonline] == 1) {
echo "<input type=\"radio\" name=\"user_allow_viewonline\" value=\"0\">"._YES." "
."<input type=\"radio\" name=\"user_allow_viewonline\" value=\"1\" checked>"._NO."";
} elseif ($userinfo[user_allow_viewonline] == 0) {
echo "<input type=\"radio\" name=\"user_allow_viewonline\" value=\"0\" checked>"._YES." "
."<input type=\"radio\" name=\"user_allow_viewonline\" value=\"1\">"._NO."";
}
echo "</td></tr>";
echo "<tr><td bgcolor='$bgcolor2'><b>"._REPLYNOTIFY.":</b><br>"._REPLYNOTIFYMSG."</td><td bgcolor='$bgcolor3'>";
if ($userinfo[user_notify] == 1) {
echo "<input type=\"radio\" name=\"user_notify\" value=\"1\" checked>"._YES." "
."<input type=\"radio\" name=\"user_notify\" value=\"0\">"._NO."";
} elseif ($userinfo[user_notify] == 0) {
echo "<input type=\"radio\" name=\"user_notify\" value=\"1\">"._YES." "
."<input type=\"radio\" name=\"user_notify\" value=\"0\" checked>"._NO."";
}
echo "</td></tr>";
echo "<tr><td bgcolor='$bgcolor2'><b>"._PMNOTIFY.":</b></td><td bgcolor='$bgcolor3'>";
if ($userinfo[user_notify_pm] == 1) {
echo "<input type=\"radio\" name=\"user_notify_pm\" value=\"1\" checked>"._YES." "
."<input type=\"radio\" name=\"user_notify_pm\" value=\"0\">"._NO."";
} elseif ($userinfo[user_notify_pm] == 0) {
echo "<input type=\"radio\" name=\"user_notify_pm\" value=\"1\">"._YES." "
."<input type=\"radio\" name=\"user_notify_pm\" value=\"0\" checked>"._NO."";
}
echo "</td></tr>";
echo "<tr><td bgcolor='$bgcolor2'><b>"._POPPM.":</b><br>"._POPPMMSG."</td><td bgcolor='$bgcolor3'>";
if ($userinfo[user_popup_pm] == 1) {
echo "<input type=\"radio\" name=\"user_popup_pm\" value=\"1\" checked>"._YES." "
."<input type=\"radio\" name=\"user_popup_pm\" value=\"0\">"._NO."";
} elseif ($userinfo[user_popup_pm] == 0) {
echo "<input type=\"radio\" name=\"user_popup_pm\" value=\"1\">"._YES." "
."<input type=\"radio\" name=\"user_popup_pm\" value=\"0\" checked>"._NO."";
}
echo "</td></tr>";
echo "<tr><td bgcolor='$bgcolor2'><b>"._ATTACHSIG.":</b></td><td bgcolor='$bgcolor3'>";
if ($userinfo[user_attachsig] == 1) {
echo "<input type=\"radio\" name=\"user_attachsig\" value=\"1\" checked>"._YES." "
."<input type=\"radio\" name=\"user_attachsig\" value=\"0\">"._NO."";
} elseif ($userinfo[user_attachsig] == 0) {
echo "<input type=\"radio\" name=\"user_attachsig\" value=\"1\">"._YES." "
."<input type=\"radio\" name=\"user_attachsig\" value=\"0\" checked>"._NO."";
}
echo "</td></tr>";
echo "<tr><td bgcolor='$bgcolor2'><b>"._ALLOWBBCODE."</b></td><td bgcolor='$bgcolor3'>";
if ($userinfo[user_allowbbcode] == 1) {
echo "<input type=\"radio\" name=\"user_allowbbcode\" value=\"1\" checked>"._YES." "
."<input type=\"radio\" name=\"user_allowbbcode\" value=\"0\">"._NO."";
} elseif ($userinfo[user_allowbbcode] == 0) {
echo "<input type=\"radio\" name=\"user_allowbbcode\" value=\"1\">"._YES." "
."<input type=\"radio\" name=\"user_allowbbcode\" value=\"0\" checked>"._NO."";
}
echo "</td></tr>";
echo "<tr><td bgcolor='$bgcolor2'><b>"._ALLOWHTMLCODE."</b></td><td bgcolor='$bgcolor3'>";
if ($userinfo[user_allowhtml] == 1) {
echo "<input type=\"radio\" name=\"user_allowhtml\" value=\"1\" checked>"._YES." "
."<input type=\"radio\" name=\"user_allowhtml\" value=\"0\">"._NO."";
} elseif ($userinfo[user_allowhtml] == 0) {
echo "<input type=\"radio\" name=\"user_allowhtml\" value=\"1\">"._YES." "
."<input type=\"radio\" name=\"user_allowhtml\" value=\"0\" checked>"._NO."";
}
echo "</td></tr>";
echo "<tr><td bgcolor='$bgcolor2'><b>"._ALLOWSMILIES."</b></td><td bgcolor='$bgcolor3'>";
if ($userinfo[user_allowsmile] == 1) {
echo "<input type=\"radio\" name=\"user_allowsmile\" value=\"1\" checked>"._YES." "
."<input type=\"radio\" name=\"user_allowsmile\" value=\"0\">"._NO."";
} elseif ($userinfo[user_allowsmile] == 0) {
echo "<input type=\"radio\" name=\"user_allowsmile\" value=\"1\">"._YES." "
."<input type=\"radio\" name=\"user_allowsmile\" value=\"0\" checked>"._NO."";
}
echo "</td></tr>";
echo "<tr><td bgcolor='$bgcolor2'><b>"._FORUMSTIME."</b></td><td bgcolor='$bgcolor3'>";
echo "<select name='user_timezone'>";
for ($i=-12; $i<13; $i++) {
if ($i == 0) {
$dummy = "GMT";
} else {
if (!ereg("-", $i)) {
$i = "+$i";
}
$dummy = "GMT $i "._HOURS."";
}
if ($userinfo[user_timezone] == $i) {
echo "<option name=\"user_timezone\" value=\"$i\" selected>$dummy</option>";
} else {
echo "<option name=\"user_timezone\" value=\"$i\">$dummy</option>";
}
}
echo "</select>";
echo "</td></tr>";
echo "<tr><td bgcolor='$bgcolor2'><b>"._FORUMSDATE.":</b><br>"._FORUMSDATEMSG."</b></td><td bgcolor='$bgcolor3'>";
echo "<input size='15' maxlength='14' type=\"text\" name=\"user_dateformat\" value=\"$userinfo[user_dateformat]\">";
echo "</td></tr>";
echo "<tr><td bgcolor='$bgcolor2'><b>"._SIGNATURE.":</b><br>"._OPTIONAL."</td>"
."<td bgcolor='$bgcolor3'><textarea wrap=\"virtual\" cols=\"50\" rows=\"5\" name=\"user_sig\">$userinfo[user_sig]</textarea><br>"._255CHARMAX."</td></tr>"
."<tr><td bgcolor='$bgcolor2'><b>"._EXTRAINFO.":</b><br>"._OPTIONAL."</td>"
."<td bgcolor='$bgcolor3'><textarea wrap=\"virtual\" cols=\"50\" rows=\"5\" name=\"bio\">$userinfo[bio]</textarea><br>"._CANKNOWABOUT."</td></tr>"
."<tr><td bgcolor='$bgcolor2'><b>"._PASSWORD."</b>:</td><br>"
."<td bgcolor='$bgcolor3'><input type=\"password\" name=\"user_password\" size=\"22\" maxlength=\"20\"> <input type=\"password\" name=\"vpass\" size=\"22\" maxlength=\"20\"><br>"._TYPENEWPASSWORD."</td></tr>"
."<tr><td bgcolor='$bgcolor3' colspan='2' align='center'>"
."<input type=\"hidden\" name=\"username\" value=\"$userinfo[username]\">"
."<input type=\"hidden\" name=\"user_id\" value=\"$userinfo[user_id]\">"
."<input type=\"hidden\" name=\"op\" value=\"saveuser\">"
."<input class=button type=\"submit\" value=\""._SAVECHANGES."\">"
."</form></td></tr>";
$avatar_category = ( !empty($HTTP_POST_VARS['avatarcategory']) ) ? $HTTP_POST_VARS['avatarcategory'] : '';
$direktori = "modules/Forums/images/avatars";
$dir = @opendir($direktori);
$avatar_images = array();
while( $file = @readdir($dir) )
{
if( $file != '.' && $file != '..' && !is_file($direktori . '/' . $file) && !is_link($direktori . '/' . $file) )
{
$sub_dir = @opendir($direktori . '/' . $file);
$avatar_row_count = 0;
$avatar_col_count = 0;
while( $sub_file = @readdir($sub_dir) )
{
if( preg_match('/(\.gif$|\.png$|\.jpg|\.jpeg)$/is', $sub_file) )
{
$avatar_images[$file][$avatar_row_count][$avatar_col_count] = $file . '/' . $sub_file;
$avatar_name[$file][$avatar_row_count][$avatar_col_count] = ucfirst(str_replace("_", " ", preg_replace('/^(.*)\..*$/', '\1', $sub_file)));
$avatar_col_count++;
if( $avatar_col_count == 5 )
{
$avatar_row_count++;
$avatar_col_count = 0;
}
}
}
}
}
@closedir($dir);
@ksort($avatar_images);
@reset($avatar_images);
if( empty($category) )
{
list($category, ) = each($avatar_images);
}
@reset($avatar_images);
$s_categories = '<select name="avatarcategory">';
while( list($key) = each($avatar_images) )
{
$selected = ( $key == $category ) ? ' selected="selected"' : '';
if( count($avatar_images[$key]) )
{
$s_categories .= '<option value="' . $key . '"' . $selected . '>' . ucfirst($key) . '</option>';
}
}
$s_categories .= '</select>';
$sql = "SELECT * FROM ".$prefix."_bbconfig";
$result = $db->sql_query($sql);
while ( $row = $db->sql_fetchrow($result) )
{
$board_config[$row['config_name']] = $row['config_value'];
}
if ($userinfo[user_avatar_type] == 1) {
$userinfo[user_avatar] = $board_config['avatar_path']."/".$userinfo[user_avatar];
} elseif ($userinfo[user_avatar_type] == 2) {
$userinfo[user_avatar] = $userinfo[user_avatar];
} else {
$userinfo[user_avatar] = $board_config[avatar_gallery_path]."/".$userinfo[user_avatar];
}
echo "<tr><td bgcolor='$bgcolor3' colspan='2' align='center'>"
."</form></TD></TR></TABLE>";
CloseTable();
include("footer.php");
} else {
main($user);
}
}
function saveuser($realname, $user_email, $femail, $user_website, $user_icq, $user_aim, $user_yim, $user_msnm, $user_from, $user_occ, $user_interests, $newsletter, $user_viewemail, $user_allow_viewonline, $user_notify, $user_notify_pm, $user_popup_pm, $user_attachsig, $user_allowbbcode, $user_allowhtml, $user_allowsmile, $user_timezone, $user_dateformat, $user_sig, $bio, $user_password, $vpass, $username, $user_id) {
global $user, $cookie, $userinfo, $EditedMessage, $user_prefix, $db, $module_name, $minpass;
cookiedecode($user);
$check = $cookie[1];
$check2 = $cookie[2];
$sql = "SELECT user_id, user_password FROM ".$user_prefix."_users WHERE username='$check'";
$result = $db->sql_query($sql);
$row = $db->sql_fetchrow($result);
$vuid = intval($row[user_id]);
$ccpass = $row[user_password];
$user_sig = htmlspecialchars($user_sig);
$user_email = check_html($user_email, nohtml);
$femail = check_html($femail, nohtml);
$user_website = check_html($user_website, nohtml);
$bio = check_html($bio, nohtml);
$user_icq = check_html($user_icq, nohtml);
$user_aim = check_html($user_aim, nohtml);
$user_yim = check_html($user_yim, nohtml);
$user_msnm = check_html($user_msnm, nohtml);
$user_occ = check_html($user_occ, nohtml);
$user_from = check_html($user_from, nohtml);
$user_interests = check_html($user_interests, nohtml);
$realname = check_html($realname, nohtml);
$user_avatar = "$user_avatar";
if (($user_id == $vuid) AND ($check2 == $ccpass)) {
if (!eregi("http://", $user_website)) {
$user_website = "http://$user_website";
}
if ((isset($user_password)) && ("$user_password" != "$vpass")) {
echo "<center>"._PASSDIFFERENT."</center>";
} elseif (($user_password != "") && (strlen($user_password) < $minpass)) {
echo "<center>"._YOUPASSMUSTBE." <b>$minpass</b> "._CHARLONG."</center>";
} else {
if ($bio) { filter_text($bio); $bio = $EditedMessage; $bio = FixQuotes($bio); }
if ($user_password != "") {
cookiedecode($user);
$db->sql_query("LOCK TABLES ".$user_prefix."_users WRITE");
$user_password = md5($user_password);
$newsletter = intval($newsletter);
$user_allow_viewonline = intval($user_allow_viewonline);
$user_notify = intval($user_notify);
$user_notify_pm = intval($user_notify_pm);
$user_popup_pm = intval($user_popup_pm);
$user_allowbbcode = intval($user_allowbbcode);
$user_allowhtml = intval($user_allowhtml);
$user_allowsmile = intval($user_allowsmile);
$user_id = intval($user_id);
$db->sql_query("UPDATE ".$user_prefix."_users SET name='$realname', user_email='$user_email', femail='$femail', user_website='$user_website', user_password='$user_password', bio='$bio', user_icq='$user_icq', user_occ='$user_occ', user_from='$user_from', user_interests='$user_interests', user_sig='$user_sig', user_aim='$user_aim', user_yim='$user_yim', user_msnm='$user_msnm', newsletter='$newsletter', user_viewemail='$user_viewemail', user_allow_viewonline='$user_allow_viewonline', user_notify='$user_notify', user_notify_pm='$user_notify_pm', user_popup_pm='$user_popup_pm', user_attachsig='$user_attachsig', user_allowbbcode='$user_allowbbcode', user_allowhtml='$user_allowhtml', user_allowsmile='$user_allowsmile', user_timezone='$user_timezone', user_dateformat='$user_dateformat' WHERE user_id='$user_id'");
$sql = "SELECT user_id, username, user_password, storynum, umode, uorder, thold, noscore, ublockon, theme FROM ".$user_prefix."_users WHERE username='$username' AND user_password='$user_password'";
$result = $db->sql_query($sql);
if ($db->sql_numrows($result) == 1) {
$userinfo = $db->sql_fetchrow($result);
docookie($userinfo[user_id],$userinfo[username],$userinfo[user_password],$userinfo[storynum],$userinfo[umode],$userinfo[uorder],$userinfo[thold],$userinfo[noscore],$userinfo[ublockon],$userinfo[theme],$userinfo[commentmax]);
} else {
echo "<center>"._SOMETHINGWRONG."</center><br>";
}
$db->sql_query("UNLOCK TABLES");
} else {
$db->sql_query("UPDATE ".$user_prefix."_users SET name='$realname', user_email='$user_email', femail='$femail', user_website='$user_website', bio='$bio', user_icq='$user_icq', user_occ='$user_occ', user_from='$user_from', user_interests='$user_interests', user_sig='$user_sig', user_aim='$user_aim', user_yim='$user_yim', user_msnm='$user_msnm', newsletter='$newsletter', user_viewemail='$user_viewemail', user_allow_viewonline='$user_allow_viewonline', user_notify='$user_notify', user_notify_pm='$user_notify_pm', user_popup_pm='$user_popup_pm', user_attachsig='$user_attachsig', user_allowbbcode='$user_allowbbcode', user_allowhtml='$user_allowhtml', user_allowsmile='$user_allowsmile', user_timezone='$user_timezone', user_dateformat='$user_dateformat' WHERE user_id='$user_id'");
}
Header("Location: modules.php?name=$module_name");
}
}
}
function edithome() {
global $user, $userinfo, $Default_Theme, $cookie, $broadcast_msg, $user_news, $storyhome, $module_name;
cookiedecode($user);
getusrinfo($user);
if ((is_user($user)) AND (strtolower($userinfo['username']) == strtolower($cookie[1])) AND ($userinfo['user_password'] == $cookie[2])) {
include ("header.php");
OpenTable();
echo "<center><font class=\"title\"><b>"._HOMECONFIG."</b></font></center>";
CloseTable();
echo "<br>";
OpenTable();
nav();
CloseTable();
echo "<br>";
if($userinfo[theme]=="") {
$userinfo[theme] = "$Default_Theme";
}
OpenTable();
echo "<form action=\"modules.php?name=$module_name\" method=\"post\">";
if ($user_news == 1) {
echo "<b>"._NEWSINHOME."</b> "._MAX127." "
."<input type=\"text\" name=\"storynum\" size=\"4\" maxlength=\"3\" value=\"$userinfo[storynum]\">"
."<br><br>";
} else {
echo "<input type=\"hidden\" name=\"storynum\" value=\"$storyhome\">";
}
if ($userinfo[ublockon]==1) {
$sel = "checked";
}
if ($broadcast_msg == 1) {
if ($userinfo[broadcast] == 1) {
$sel1 = "checked";
$sel2 = "";
} elseif ($userinfo[broadcast] == 0) {
$sel1 = "";
$sel2 = "checked";
}
echo "<b>"._MESSAGEACTIVATE."</b> <input type=\"radio\" name=\"broadcast\" value=\"1\" $sel1> "._YES." <input type=\"radio\" name=\"broadcast\" value=\"0\" $sel2>"._NO."<br><br>";
} else {
echo "<input type=\"hidden\" name=\"broadcast\" value=\"1\">";
}
echo "<input type=\"checkbox\" name=\"ublockon\" $sel>"
." <b>"._ACTIVATEPERSONAL."</b>"
."<br>"._CHECKTHISOPTION.""
."<br>"._YOUCANUSEHTML."<br>"
."<textarea cols=\"55\" rows=\"5\" name=\"ublock\">$userinfo[ublock]</textarea>"
."<br><br>"
."<input type=\"hidden\" name=\"username\" value=\"$userinfo[username]\">"
."<input type=\"hidden\" name=\"user_id\" value=\"$userinfo[user_id]\">"
."<input type=\"hidden\" name=\"op\" value=\"savehome\">"
."<input type=\"submit\" value=\""._SAVECHANGES."\">"
."</form>";
CloseTable();
include ("footer.php");
} else {
main($user);
}
}
function chgtheme() {
global $user, $userinfo, $Default_Theme, $cookie, $module_name;
cookiedecode($user);
getusrinfo($user);
if ((is_user($user)) AND (strtolower($userinfo['username']) == strtolower($cookie[1])) AND ($userinfo['user_password'] == $cookie[2])) {
include ("header.php");
OpenTable();
echo "<center><font class=\"title\"><b>"._THEMESELECTION."</b></font></center>";
CloseTable();
echo "<br>";
OpenTable();
nav();
CloseTable();
echo "<br>";
OpenTable();
echo "<center>"
."<form action=\"modules.php?name=$module_name\" method=\"post\">"
."<b>"._SELECTTHEME."</b><br>"
."<select name=\"theme\">";
$handle=opendir('themes');
while ($file = readdir($handle)) {
if ( (!ereg("[.]",$file) AND file_exists("themes/$file/theme.php")) ) {
$themelist .= "$file ";
}
}
closedir($handle);
$themelist = explode(" ", $themelist);
sort($themelist);
for ($i=0; $i < sizeof($themelist); $i++) {
if($themelist[$i]!="") {
echo "<option value=\"$themelist[$i]\" ";
if((($userinfo[theme]=="") && ($themelist[$i]=="$Default_Theme")) || ($userinfo[theme]==$themelist[$i])) echo "selected";
echo ">$themelist[$i]\n";
}
}
if($userinfo[theme]=="") $userinfo[theme] = "$Default_Theme";
echo "</select><br>"
.""._THEMETEXT1."<br>"
.""._THEMETEXT2."<br>"
.""._THEMETEXT3."<br><br>"
."<input type=\"hidden\" name=\"user_id\" value=\"$userinfo[user_id]\">"
."<input type=\"hidden\" name=\"op\" value=\"savetheme\">"
."<input type=\"submit\" value=\""._SAVECHANGES."\">"
."</form>";
CloseTable();
include ("footer.php");
} else {
main($user);
}
}
function savehome($user_id, $username, $storynum, $ublockon, $ublock, $broadcast) {
global $user, $cookie, $userinfo, $user_prefix, $db, $module_name;
cookiedecode($user);
$check = $cookie[1];
$check2 = $cookie[2];
$sql = "SELECT user_id, user_password FROM ".$user_prefix."_users WHERE username='$check'";
$result = $db->sql_query($sql);
$row = $db->sql_fetchrow($result);
$vuid = intval($row[user_id]);
$ccpass = $row[user_password];
if (($user_id == $vuid) AND ($check2 == $ccpass)) {
if(isset($ublockon)) $ublockon=1; else $ublockon=0;
$ublock = FixQuotes($ublock);
$db->sql_query("UPDATE ".$user_prefix."_users SET storynum='$storynum', ublockon='$ublockon', ublock='$ublock', broadcast='$broadcast' WHERE user_id='$user_id'");
getusrinfo($user);
docookie($userinfo[user_id],$userinfo[username],$userinfo[user_password],$userinfo[storynum],$userinfo[umode],$userinfo[uorder],$userinfo[thold],$userinfo[noscore],$userinfo[ublockon],$userinfo[theme],$userinfo[commentmax]);
Header("Location: modules.php?name=$module_name");
}
}
function savetheme($user_id, $theme) {
global $user, $cookie, $userinfo, $user_prefix, $db, $module_name;
cookiedecode($user);
$check = $cookie[1];
$check2 = $cookie[2];
$theme_error = "";
$sql = "SELECT user_id, user_password FROM ".$user_prefix."_users WHERE username='$check'";
$result = $db->sql_query($sql);
$row = $db->sql_fetchrow($result);
$vuid = intval($row[user_id]);
$ccpass = $row[user_password];
if (($user_id == $vuid) AND ($check2 == $ccpass)) {
$db->sql_query("UPDATE ".$user_prefix."_users SET user_style='$theme_id' WHERE user_id='$user_id'");
$db->sql_query("UPDATE ".$user_prefix."_users SET theme='$theme' WHERE user_id='$user_id'");
getusrinfo($user);
docookie($userinfo[user_id],$userinfo[username],$userinfo[user_password],$userinfo[storynum],$userinfo[umode],$userinfo[uorder],$userinfo[thold],$userinfo[noscore],$userinfo[ublockon],$userinfo[theme],$userinfo[commentmax]);
Header("Location: modules.php?name=$module_name&theme=$theme");
}
}
function editcomm() {
global $user, $userinfo, $cookie, $module_name;
cookiedecode($user);
getusrinfo($user);
if ((is_user($user)) AND (strtolower($userinfo['username']) == strtolower($cookie[1])) AND ($userinfo['user_password'] == $cookie[2])) {
include ("header.php");
OpenTable();
echo "<center><font class=\"title\"><b>"._COMMENTSCONFIG."</b></font></center>";
CloseTable();
echo "<br>";
OpenTable();
nav();
CloseTable();
echo "<br>";
OpenTable();
echo "<table cellpadding=\"8\" border=\"0\"><tr><td>"
."<form action=\"modules.php?name=$module_name\" method=\"post\">"
."<b>"._DISPLAYMODE."</b>"
."<select name=\"umode\">";
?>
<option value="nocomments" <?php if ($userinfo[umode] == 'nocomments') { echo "selected"; } ?>><?php echo _NOCOMMENTS ?>
<option value="nested" <?php if ($userinfo[umode] == 'nested') { echo "selected"; } ?>><?php echo _NESTED ?>
<option value="flat" <?php if ($userinfo[umode] == 'flat') { echo "selected"; } ?>><?php echo _FLAT ?>
<option value="thread" <?php if (!isset($userinfo[umode]) || ($userinfo[umode]=="") || $userinfo[umode]=='thread') { echo "selected"; } ?>><?php echo _THREAD ?>
</select>
<br><br>
<b><?php echo _SORTORDER ?></b>
<select name="uorder">
<option value="0" <?php if (!$userinfo[uorder]) { echo "selected"; } ?>><?php echo _OLDEST ?>
<option value="1" <?php if ($userinfo[uorder]==1) { echo "selected"; } ?>><?php echo _NEWEST ?>
<option value="2" <?php if ($userinfo[uorder]==2) { echo "selected"; } ?>><?php echo _HIGHEST ?>
</select>
<br><br>
<b><?php echo _THRESHOLD ?></b>
<?php echo _COMMENTSWILLIGNORED ?><br>
<select name="thold">
<option value="-1" <?php if ($userinfo[thold]==-1) { echo "selected"; } ?>>-1: <?php echo _UNCUT ?>
<option value="0" <?php if ($userinfo[thold]==0) { echo "selected"; } ?>>0: <?php echo _EVERYTHING ?>
<option value="1" <?php if ($userinfo[thold]==1) { echo "selected"; } ?>>1: <?php echo _FILTERMOSTANON ?>
<option value="2" <?php if ($userinfo[thold]==2) { echo "selected"; } ?>>2: <?php echo _USCORE ?> +2
<option value="3" <?php if ($userinfo[thold]==3) { echo "selected"; } ?>>3: <?php echo _USCORE ?> +3
<option value="4" <?php if ($userinfo[thold]==4) { echo "selected"; } ?>>4: <?php echo _USCORE ?> +4
<option value="5" <?php if ($userinfo[thold]==5) { echo "selected"; } ?>>5: <?php echo _USCORE ?> +5
</select><br>
<i><?php echo _SCORENOTE ?></i>
<br><br>
<INPUT type="checkbox" name="noscore" <?php if ($userinfo[noscore]==1) { echo "checked"; } ?>><b> <?php echo _NOSCORES ?></b> <?php echo _HIDDESCORES ?>
<br><br>
<b><?php echo _MAXCOMMENT ?></b> <?php echo _TRUNCATES ?><br>
<input type="text" name="commentmax" value="<?php echo $userinfo[commentmax] ?>" size=11 maxlength=11> <?php echo _BYTESNOTE ?>
<br><br>
<input type="hidden" name="username" value="<?php echo"$userinfo[username]"; ?>">
<input type="hidden" name="user_id" value="<?php echo"$userinfo[user_id]"; ?>">
<input type="hidden" name="op" value="savecomm">
<input type="submit" value="<?php echo _SAVECHANGES ?>">
</form></td></tr></table>
<?php
CloseTable();
echo "<br><br>";
include ("footer.php");
} else {
main($user);
}
}
function savecomm($user_id, $username, $umode, $uorder, $thold, $noscore, $commentmax) {
global $user, $cookie, $userinfo, $user_prefix, $db, $module_name;
cookiedecode($user);
$check = $cookie[1];
$check2 = $cookie[2];
$sql = "SELECT user_id, user_password FROM ".$user_prefix."_users WHERE username='$check'";
$result = $db->sql_query($sql);
$row = $db->sql_fetchrow($result);
$vuid = intval($row[user_id]);
$ccpass = $row[user_password];
if (($user_id == $vuid) AND ($check2 == $ccpass)) {
if(isset($noscore)) $noscore=1; else $noscore=0;
$db->sql_query("UPDATE ".$user_prefix."_users SET umode='$umode', uorder='$uorder', thold='$thold', noscore='$noscore', commentmax='$commentmax' WHERE user_id='$user_id'");
getusrinfo($user);
docookie($userinfo[user_id],$userinfo[username],$userinfo[user_password],$userinfo[storynum],$userinfo[umode],$userinfo[uorder],$userinfo[thold],$userinfo[noscore],$userinfo[ublockon],$userinfo[theme],$userinfo[commentmax]);
Header("Location: modules.php?name=$module_name");
}
}
function avatarlist($avatarcategory) {
global $module_name;
include("header.php");
$avatarcatname = ereg_replace ("_", " ", $avatarcategory);
title("".$avatarcategory." Avatar Gallery");
Opentable();
nav();
CloseTable();
Opentable();
echo "<center><font class=\"title\"><b>"._AVAILABLEAVATARS." on category ".$avatarcatname."</b></font><br><br>";
echo "<b>To Select Your Avatar Click On It</b><br><br></center>";
Opentable2();
echo "<center>";
$d = dir("modules/Forums/images/avatars/$avatarcategory");
$temcount = 1;
while (false !== ($entry = $d->read())) {
if( preg_match('/(\.gif$|\.png$|\.jpg|\.jpeg)$/is', $entry) ) {
if( $entry != '.' && $entry != '..' ) {
$patterns[0] = "/\.gif/";
$patterns[1] = "/\.png/";
$patterns[2] = "/\.jpg/";
$patterns[3] = "/\.jpeg/";
$patterns[4] = "/-/";
$patterns[5] = "/_/";
$replacements[5] = "";
$replacements[4] = " ";
$replacements[3] = "";
$replacements[2] = "";
$replacements[1] = "";
$replacements[0] = "";
ksort($patterns);
ksort($replacements);
$entryname = preg_replace($patterns, $replacements, $entry);
$a=1;
echo "<a href=\"modules.php?name=$module_name&op=avatarsave&category=$avatarcategory&avatar=$entry\"><img src=\"modules/Forums/images/avatars/$avatarcategory/$entry\" border=\"0\" alt=\"$entryname\" title=\"$entryname\" hspace=\"10\" vspace=\"10\"></a>";
}
if ($temcount == 10) {
echo "<br>";
$temcount -= 10;
}
$temcount ++;
}
}
echo "</center>";
CloseTable2();
echo "<center><br>"
.""._GOBACK.""
."<br></center>";
$d->close();
CloseTable();
include("footer.php");
}
function avatarsave($avatar, $category) {
global $user_prefix, $db, $module_name, $user, $cookie;
if (is_user($user)) {
getusrinfo($user);
cookiedecode($user);
include("header.php");
title("Avatar Selection Successful!");
OpenTable();
nav();
CloseTable();
OpenTable();
$newavatar=$category."/".$avatar;
$db->sql_query("UPDATE ".$user_prefix."_users SET user_avatar='$newavatar', user_avatar_type='3' WHERE username='$cookie[1]'");
echo "<center><font class=\"content\">Avatar for ".$cookie[1]." Saved!</center></font><br><br>";
if (ereg("(http)", $newavatar)) { echo "<center>Your New Avatar:<br><br><IMG alt=\"\" src=\"$newavatar\"><br><br> [ <a href=\"modules.php?name=$module_name&op=edituser\">Back to Profile</a> | <a href=\"modules.php?name=$module_name\">Done</a> ]<br><br></center>"; } elseif ($newavatar) { echo "<center>Your New Avatar:<br><br><IMG alt=\"\" src=\"modules/Forums/images/avatars/$newavatar\"><br><br>[ <a href=\"modules.php?name=$module_name&op=edituser\">Back to Profile</a> | <a href=\"modules.php?name=$module_name\">Done</a> ]<br><br></center>"; }
CloseTable();
include("footer.php");
}
}
function avatarlinksave($avatar) {
global $user_prefix, $db, $module_name, $user, $cookie;
if (is_user($user)) {
getusrinfo($user);
cookiedecode($user);
include("header.php");
title("Avatar Selection Successful!");
OpenTable();
nav();
CloseTable();
OpenTable();
$db->sql_query("UPDATE ".$user_prefix."_users SET user_avatar='$avatar', user_avatar_type='2' WHERE username='$cookie[1]'");
echo "<center><font class=\"content\">Avatar for ".$cookie[1]." Saved!</center></font><br><br>";
if (ereg("(http)", $avatar)) { echo "<center>Your New Avatar:<br><br><IMG alt=\"\" src=\"$avatar\"><br><br>[ <a href=\"modules.php?name=$module_name&op=edituser\">Back to Profile</a> | <a href=\"modules.php?name=$module_name\">Done</a> ]<br><br></center>"; } elseif ($avatar) { echo "<center>Your New Avatar:<br><br><IMG alt=\"\" src=\"modules/Forums/images/avatars/$avatar\"><br><br>[ <a href=\"modules.php?name=$module_name&op=edituser\">Back to Profile</a> | <a href=\"modules.php?name=$module_name\">Done</a> ]<br><br></center>"; }
CloseTable();
include("footer.php");
}
}
function broadcast($the_message, $who) {
global $prefix, $db, $broadcast_msg, $module_name, $cookie, $user, $userinfo;
cookiedecode($user);
getusrinfo($user);
if ((is_user($user)) AND (strtolower($who) == strtolower($cookie[1])) AND (strtolower($userinfo['username']) == strtolower($cookie[1])) AND ($userinfo['user_password'] == $cookie[2])) {
$who = $cookie[1];
$the_message = htmlentities($the_message);
if ($broadcast_msg == 1) {
include("header.php");
title(""._BROADCAST."");
OpenTable();
$numrows = $db->sql_numrows($db->sql_query("SELECT * FROM ".$prefix."_public_messages WHERE who='$who'"));
$the_message = FixQuotes(filter_text($the_message, "nohtml"));
if ($the_message != "" AND $numrows == 0) {
$the_time = time();
$who = htmlspecialchars(stripslashes($who));
$db->sql_query("INSERT INTO ".$prefix."_public_messages VALUES (NULL, '$the_message', '$the_time', '$who')");
update_points(20);
echo "<center>"._BROADCASTSENT."<br><br>[ <a href=\"modules.php?name=$module_name\">"._RETURNPAGE."</a> ]</center>";
} else {
echo "<center>"._BROADCASTNOTSENT."<br><br>[ <a href=\"modules.php?name=$module_name\">"._RETURNPAGE."</a> ]</center>";
}
CloseTable();
include("footer.php");
} else {
echo "I don't like you...";
}
}
}
function CoolSize($size) {
$mb = 1024*1024;
if ( $size > $mb ) {
$mysize = sprintf ("%01.2f",$size/$mb) . " MB";
} elseif ( $size >= 1024 ) {
$mysize = sprintf ("%01.2f",$size/1024) . " Kb";
} else {
$mysize = $size . " bytes";
}
return $mysize;
}
function gfx($random_num) {
global $prefix, $db, $module_name;;
require("config.php");
$datekey = date("F j");
$rcode = hexdec(md5($_SERVER[HTTP_USER_AGENT] . $sitekey . $random_num . $datekey));
$code = substr($rcode, 2, 6);
$image = imagecreatefrompng("modules/$module_name/images/code_bg.png");
$text_color = ImageColorAllocate($image, 80, 80, 80);
Header("Content-type: image/png");
ImageString ($image, 5, 12, 2, $code, $text_color);
Imagepng($image, '', 75);
ImageDestroy($image);
die();
}
switch($op) {
case "logout":
logout();
break;
case "avatarsave":
avatarsave($avatar, $category);
break;
case "avatarlinksave":
avatarlinksave($avatar);
break;
case "broadcast":
broadcast($the_message, $who);
break;
case "lost_pass":
lost_pass();
break;
case "new user":
confirmNewUser($username, $user_email, $user_password, $user_password2, $random_num, $gfx_check);
break;
case "finish":
finishNewUser($username, $user_email, $user_password, $random_num, $gfx_check);
break;
case "mailpasswd":
mail_password($username, $code);
break;
case "userinfo":
userinfo($username, $bypass, $hid, $url);
break;
case "login":
login($username, $user_password, $redirect, $mode, $f, $t, $random_num, $gfx_check);
break;
case "edituser":
edituser();
break;
case "saveuser":
saveuser($realname, $user_email, $femail, $user_website, $user_icq, $user_aim, $user_yim, $user_msnm, $user_from, $user_occ, $user_interests, $newsletter, $user_viewemail, $user_allow_viewonline, $user_notify, $user_notify_pm, $user_popup_pm, $user_attachsig, $user_allowbbcode, $user_allowhtml, $user_allowsmile, $user_timezone, $user_dateformat, $user_sig, $bio, $user_password, $vpass, $username, $user_id);
break;
case "edithome":
edithome();
break;
case "chgtheme":
chgtheme();
break;
case "savehome":
savehome($user_id, $username, $storynum, $ublockon, $ublock, $broadcast);
break;
case "savetheme":
savetheme($user_id, $theme);
break;
case "avatarlist":
avatarlist($avatarcategory);
break;
case "editcomm":
editcomm();
break;
case "savecomm":
savecomm($user_id, $username, $umode, $uorder, $thold, $noscore, $commentmax);
break;
case "pass_lost":
pass_lost();
break;
case "new_user":
new_user();
break;
case "gfx":
gfx($random_num);
break;
case "activate":
activate($username, $check_num);
break;
case "CoolSize":
CoolSize($size);
break;
default:
main($user);
break;
}
?>
|
![[Valid RSS]](https://www.ravenphpscripts.com/images/valid-rss.png "Validate my RSS feed"){kind=small}
