david
790d6f170a
git-svn-id: https://192.168.0.254/svn/Proyectos.MatritumCantat_Web/trunk@2 8e3496fd-7892-4c45-be36-0ff06e9dacc6
1208 lines
39 KiB
PHP
1208 lines
39 KiB
PHP
<?php
|
|
/*************************************************************
|
|
* Mambo Community Builder
|
|
* Author MamboJoe
|
|
* @ Released under GNU/GPL License : http://www.gnu.org/copyleft/gpl.html
|
|
*************************************************************/
|
|
|
|
|
|
defined( '_VALID_MOS' ) or die( 'Direct Access to this location is not allowed.' );
|
|
|
|
$access = new stdClass();
|
|
$access->canEdit = $acl->acl_check( 'action', 'edit', 'users', $my->usertype, 'content', 'all' );
|
|
$access->canEditOwn = $acl->acl_check( 'action', 'edit', 'users', $my->usertype, 'content', 'own' );
|
|
|
|
require_once ( $mainframe->getPath( 'front_html' ) );
|
|
include_once( "administrator/components/com_comprofiler/ue_config.php" );
|
|
include_once ("administrator/components/com_comprofiler/comprofiler.class.php");
|
|
$mosConfig_lang=$mainframe->getCfg( 'lang' );
|
|
$UEAdminPath=$mainframe->getCfg( 'absolute_path' ).'/administrator/components/com_comprofiler';
|
|
|
|
|
|
if (file_exists($UEAdminPath.'/language/'.$mosConfig_lang.'.php')) {
|
|
include_once($UEAdminPath.'/language/'.$mosConfig_lang.'.php');
|
|
} else {
|
|
include_once($UEAdminPath.'/language/english.php');
|
|
}
|
|
|
|
//print $ueConfig['allow_profileviewbyGID'];
|
|
|
|
$form=mosGetParam( $_REQUEST, 'reportform', 1 );
|
|
$uid=mosGetParam( $_REQUEST, 'uid', 0 );
|
|
$act=mosGetParam( $_REQUEST, 'act', 1 );
|
|
|
|
switch( $task ) {
|
|
|
|
case "userDetails":
|
|
userEdit( $option, $my->id, _UE_UPDATE );
|
|
break;
|
|
|
|
case "saveUserEdit":
|
|
userSave( $option, $my->id );
|
|
break;
|
|
|
|
case "userProfile":
|
|
userProfile($option, $my->id, _UE_UPDATE);
|
|
break;
|
|
|
|
case "usersList":
|
|
usersList($option, $my->id, _UE_UPDATE, $listCuerdas);
|
|
break;
|
|
|
|
case "userAvatar":
|
|
userAvatar($option, $my->id, _UE_UPDATE);
|
|
break;
|
|
|
|
case "lostPassword":
|
|
lostPassForm( $option );
|
|
break;
|
|
|
|
case "sendNewPass":
|
|
sendNewPass( $option );
|
|
break;
|
|
|
|
case "registers":
|
|
registerForm( $option, $mosConfig_emailpass );
|
|
break;
|
|
|
|
case "saveRegistration":
|
|
saveRegistration( $option );
|
|
break;
|
|
|
|
case "login":
|
|
login();
|
|
break;
|
|
|
|
case "confirm":
|
|
confirm($confirmCode);
|
|
break;
|
|
|
|
case "moderateImages":
|
|
moderateImages($option);
|
|
break;
|
|
|
|
case "moderateReports":
|
|
moderateReports($option);
|
|
break;
|
|
|
|
case "moderateBans":
|
|
moderateBans($option);
|
|
break;
|
|
|
|
case "approveImage":
|
|
approveImage();
|
|
break;
|
|
|
|
case "reportUser":
|
|
reportUser($option,$form,$uid);
|
|
break;
|
|
|
|
case "processReports":
|
|
processReports();
|
|
break;
|
|
|
|
case "banProfile":
|
|
banUser($option,$uid,$form,$act);
|
|
break;
|
|
|
|
case "viewReports":
|
|
viewReports($option,$uid);
|
|
break;
|
|
|
|
case "emailUser":
|
|
emailUser($option,$uid);
|
|
break;
|
|
|
|
case "pendingApprovalUser":
|
|
pendingApprovalUsers($option);
|
|
break;
|
|
|
|
case "approveUser":
|
|
approveUser($option,$uids);
|
|
break;
|
|
|
|
case "rejectUser":
|
|
rejectUser($option,$uids);
|
|
break;
|
|
|
|
case "sendUserEmail":
|
|
sendUserEmail($_POST['toID'],$_POST['fromID'],$_POST['emailSubject'],$_POST['emailBody']);
|
|
break;
|
|
|
|
default:
|
|
userProfile($option, $my->id, _UE_UPDATE);
|
|
break;
|
|
}
|
|
|
|
function sendUserEmail($toid,$fromid,$subject,$message) {
|
|
global $database,$ueConfig,$my,$_SERVER,$mosConfig_live_site,$mosConfig_sitename;
|
|
|
|
$rowFrom = new mosUser( $database );
|
|
$rowFrom->load( $fromid );
|
|
|
|
$rowTo = new mosUser( $database );
|
|
$rowTo->load( $toid );
|
|
$uname=getNameFormat($rowFrom->name,$rowFrom->username,$ueConfig['name_format']);
|
|
$to=$rowTo->email;
|
|
$from= $uname. " @ ".$mosConfig_sitename." <" . $rowFrom->email . ">";
|
|
$subject=$subject;
|
|
$premessage=sprintf(_UE_SENDEMAILNOTICE,$uname,$mosConfig_sitename,$mosConfig_live_site,$mosConfig_sitename);
|
|
$message=$premessage."\r\n\r\n".stripslashes($message);
|
|
$header = "MIME-Version: 1.0\r\n";
|
|
$header .= "Content-type: text/plain; charset=iso-8859-1\r\n";
|
|
$header .= "Organization: ".$mosConfig_sitename."\r\n";
|
|
$header .= "Content-Transfer-encoding: 8bit\r\n";
|
|
$header .= "From: ".$from."\r\n";
|
|
$header .= "Reply-To: ".$from."\r\n";
|
|
$header .= "Message-ID: <".md5(uniqid(time()))."@{$_SERVER['SERVER_NAME']}>\r\n";
|
|
$header .= "Return-Path: ".$from."\r\n";
|
|
$header .= "X-Priority: 3\r\n";
|
|
$header .= "X-MSmail-Priority: Low\r\n";
|
|
$header .= "X-Mailer: PHP\r\n"; //hotmail and others dont like PHP mailer. --Microsoft Office Outlook, Build 11.0.5510
|
|
$header .= "X-Sender: ".$from."\r\n";
|
|
|
|
|
|
|
|
if(mail ($to,$subject,$message,$header)) echo _UE_SENTEMAILSUCCESS;
|
|
else echo _UE_SENTEMAILFAILED;
|
|
|
|
}
|
|
|
|
function emailUser($option,$uid) {
|
|
global $database,$ueConfig,$my;
|
|
if ($my->id == 0) {
|
|
mosNotAuth();
|
|
return;
|
|
}
|
|
$rowFrom = new mosUser( $database );
|
|
$rowFrom->load( $my->id );
|
|
|
|
$rowTo = new mosUser( $database );
|
|
$rowTo->load( $uid );
|
|
HTML_comprofiler::emailUser($option,$rowFrom,$rowTo);
|
|
}
|
|
|
|
function userEdit( $option, $uid, $submitvalue) {
|
|
global $database,$ueConfig;
|
|
if ($uid == 0) {
|
|
mosNotAuth();
|
|
return;
|
|
}
|
|
$row = new mosUser( $database );
|
|
|
|
// Rodax Software
|
|
//$row->load( $uid );
|
|
if(!$_REQUEST['user']) {
|
|
$row->load( $uid );
|
|
} else {
|
|
$row->load( $_REQUEST['user'] );
|
|
}
|
|
|
|
$row->orig_password = $row->password;
|
|
$database->setQuery( "SELECT * FROM #__comprofiler"
|
|
. "\n WHERE id='$uid'");
|
|
$rowExtras = $database->loadObjectList();
|
|
$rowExtras = $rowExtras[0];
|
|
$database->setQuery( "SELECT t.title as 'tab',t.description as 'tabdesc', f.* FROM #__comprofiler_fields f, #__comprofiler_tabs t"
|
|
. "\n WHERE t.tabid = f.tabid AND f.published=1 AND t.enabled=1"
|
|
. "\n ORDER BY t.ordering, f.ordering" );
|
|
$rowFields = $database->loadObjectList();
|
|
$rowFieldValues=array();
|
|
$fieldJS=' ';
|
|
for($i=0, $n=count( $rowFields ); $i < $n; $i++) {
|
|
|
|
$k = "\$rowExtras->".$rowFields[$i]->name;
|
|
eval("\$k = \"$k\";");
|
|
if($rowFields[$i]->type=='editorta') {
|
|
ob_start();
|
|
getEditorContents( 'editor'.$rowFields[$i]->name, $rowFields[$i]->name ) ;
|
|
$fieldJS .= ob_get_contents();
|
|
ob_end_clean();
|
|
$fieldJS .= "\ncoll.".$rowFields[$i]->name.".setAttribute('mosReq',".$rowFields[$i]->required."); \ncoll.".$rowFields[$i]->name.".setAttribute('mosLabel','".getLangDefinition($rowFields[$i]->title)."');\n";
|
|
|
|
}
|
|
$database->setQuery( "SELECT fieldtitle FROM #__comprofiler_field_values"
|
|
. "\n WHERE fieldid = ".$rowFields[$i]->fieldid
|
|
. "\n ORDER BY ordering" );
|
|
$Values = $database->loadObjectList();
|
|
if($rowFields[$i]->readonly == 1) $oreadonly = " DISABLED ";
|
|
else $oreadonly = " ";
|
|
if(count($Values) > 0) {
|
|
if($rowFields[$i]->type=='radio') $rowFieldValues['lst_'.$rowFields[$i]->name] = moscomprofilerHTML::radioList( $Values, $rowFields[$i]->name, 'class="inputbox" size="1" '.$oreadonly.' mosReq="'.$rowFields[$i]->required.'" mosLabel="'.getLangDefinition($rowFields[$i]->title).'"', 'fieldtitle', 'fieldtitle', stripslashes($k));
|
|
else $rowFieldValues['lst_'.$rowFields[$i]->name] = moscomprofilerHTML::selectList( $Values, $rowFields[$i]->name, 'class="inputbox" size="1" '.$oreadonly.' mosReq="'.$rowFields[$i]->required.'" mosLabel="'.getLangDefinition($rowFields[$i]->title).'"', 'fieldtitle', 'fieldtitle', stripslashes($k));
|
|
}
|
|
}
|
|
|
|
|
|
HTML_comprofiler::userEdit( $row, $rowExtras, $rowFields, $rowFieldValues, $option, $submitvalue,$fieldJS);
|
|
}
|
|
|
|
function userAvatar( $option, $uid, $submitvalue) {
|
|
global $database;
|
|
if ($uid == 0) {
|
|
mosNotAuth();
|
|
return;
|
|
}
|
|
$row = new mosUser( $database );
|
|
|
|
// Rodax Software
|
|
// $row->load( $uid );
|
|
if(!$_REQUEST['user']) {
|
|
$row->load( $uid );
|
|
} else {
|
|
$row->load( $_REQUEST['user'] );
|
|
}
|
|
|
|
$row->orig_password = $row->password;
|
|
HTML_comprofiler::userAvatar( $row, $option, $submitvalue);
|
|
}
|
|
|
|
function userProfile( $option, $uid, $submitvalue) {
|
|
global $database, $_REQUEST, $ueConfig,$acl,$my;
|
|
if (!allowAccess( $ueConfig['allow_profileviewbyGID'],'RECURSE', userGID($my->id), $acl)) {
|
|
echo _UE_NOT_AUTHORIZED;
|
|
return;
|
|
}
|
|
if (!$_REQUEST['user'] && $uid==0) {
|
|
echo _UE_REGISTERFORPROFILE;
|
|
return;
|
|
}
|
|
$row = new mosUser( $database );
|
|
if(!$_REQUEST['user']) {
|
|
$database->setQuery( "SELECT * FROM #__comprofiler c, #__users u WHERE c.id=u.id AND c.id='".$uid."'");
|
|
} else {
|
|
$database->setQuery( "SELECT * FROM #__comprofiler c, #__users u WHERE c.id=u.id AND c.id='".$_REQUEST['user']."'");
|
|
}
|
|
$users = $database->loadObjectList();
|
|
$user = $users[0];
|
|
IF ($ueConfig['allow_email_display']==0) $whereAdd = " AND f.type != 'emailaddress' ";
|
|
$database->setQuery( "SELECT f.*, t.title as tab, t.width FROM #__comprofiler_fields f, #__comprofiler_tabs t"
|
|
. "\n WHERE f.published=1 AND f.profile=1 AND f.tabid = t.tabid AND t.enabled=1"
|
|
. $whereAdd
|
|
. "\n ORDER BY t.ordering, f.ordering" );
|
|
$rowFields = $database->loadObjectList();
|
|
|
|
$i=1;
|
|
$t=1;
|
|
$tabs=0;
|
|
$sqlFormat = "Y-m-d";
|
|
$colCount=0;
|
|
$tabevenodd = $tabcount % 2;
|
|
$tablist = array();
|
|
$poldtab=$rowFields[0]->tab;
|
|
$tabwidth=$rowFields[0]->width;
|
|
for($i=0, $n=count( $rowFields ); $i < $n; $i++) {
|
|
|
|
if($poldtab <> $rowFields[$i]->tab) {
|
|
if($tabfields != '') {
|
|
$tablist[$tabs][name]=$poldtab;
|
|
$tablist[$tabs][content]=$tabfields;
|
|
$tablist[$tabs][width]=$tabwidth;
|
|
$tabs++;
|
|
|
|
$tabfields='';
|
|
}
|
|
}
|
|
|
|
$poldtab=$rowFields[$i]->tab;
|
|
$tabwidth=$rowFields[$i]->width;
|
|
$fValue='$user->'.$rowFields[$i]->name;
|
|
eval("\$fValue = \"".$fValue."\";");
|
|
$oValue = getFieldValue($rowFields[$i]->type,stripslashes($fValue),$user);
|
|
if($oValue!=null || trim($oValue)!='') {
|
|
$evenodd = $t % 2;
|
|
if ($evenodd == 0) {
|
|
$class = "sectiontableentry1";
|
|
} else {
|
|
$class = "sectiontableentry2";
|
|
}
|
|
$t++;
|
|
$tabfields .= "\n\t\t\t\t<tr>";
|
|
$tabfields .= "\n\t\t\t\t\t<td class=".$class." width=40% style=\"font-weight:bold;\">". getLangDefinition($rowFields[$i]->title) .":</td>";
|
|
|
|
$tabfields .= "\n\t\t\t\t\t<td class=".$class.">".$oValue."</td>";
|
|
$tabfields .= "\n\t\t\t\t</tr>";
|
|
}
|
|
if($i==$n-1) {
|
|
if($tabfields != '') {
|
|
$tablist[$tabs][name]=$poldtab;
|
|
$tablist[$tabs][content]=$tabfields;
|
|
$tablist[$tabs][width]=$tabwidth;
|
|
$tabs++;
|
|
|
|
$tabfields='';
|
|
}
|
|
}
|
|
|
|
}
|
|
|
|
HTML_comprofiler::userProfile( $user, $tablist, $option, $submitvalue);
|
|
}
|
|
|
|
function usersList( $option, $uid, $submitvalue, $listCuerdas) {
|
|
global $database,$my,$ueConfig,$acl,$_POST,$_REQUEST;
|
|
if (!allowAccess( $ueConfig['allow_listviewbyGID'],'RECURSE', userGID($my->id), $acl)) {
|
|
echo _UE_NOT_AUTHORIZED;
|
|
return;
|
|
}
|
|
$database->setQuery("SELECT listid, title FROM #__comprofiler_lists WHERE published=1 ORDER BY ordering");
|
|
$plists = $database->loadObjectList();
|
|
$lists = array();
|
|
$publishedlists = array();
|
|
|
|
for ($i=0, $n=count( $plists ); $i < $n; $i++) {
|
|
$plist =& $plists[$i];
|
|
$publishedlists[] = mosHTML::makeOption( $plist->listid, getLangDefinition($plist->title) );
|
|
}
|
|
|
|
if(!isset($_POST['listid']) && !isset($_REQUEST['listid'])) {
|
|
$database->setQuery( "SELECT listid FROM #__comprofiler_lists "
|
|
. "\n WHERE `default`=1 AND published=1" );
|
|
$listid = $database->loadresult();
|
|
} else {
|
|
if(isset($_POST['listid'])) $listid = $_POST['listid'];
|
|
else $listid = $_REQUEST['listid'];
|
|
}
|
|
if(!$listid > 0) {
|
|
echo _UE_NOLISTFOUND;
|
|
return;
|
|
}
|
|
|
|
// $lists['plists'] = mosHTML::selectList( $publishedlists, 'listid', 'class="inputbox" size="1" onchange="document.ueform.submit();"', 'value', 'text', $listid );
|
|
$lists['plists'] = moscomprofilerHTML::selectlistcuerdas('listCuerdas', $listCuerdas);
|
|
// $lists['plists'] = $html;
|
|
|
|
$database->setQuery( "SELECT l.* FROM #__comprofiler_lists l"
|
|
. "\n WHERE l.listid='$listid' AND l.published=1" );
|
|
$row = $database->loadObjectList();
|
|
$col=$row[0]->col1fields;
|
|
$col=explode('|*|',$col);
|
|
|
|
for ($i=0, $n=count( $col ); $i < $n; $i++) {
|
|
if($i==0) $lfields .= "<td valign=top>\n";
|
|
else $lfields .= "<br/>\n";
|
|
if($col[$i]!='' && $col[$i]!=null) {
|
|
$database->setQuery( "SELECT f.name, f.title, f.type "
|
|
. "\nFROM #__comprofiler_fields AS f"
|
|
. "\nWHERE f.published = 1 AND f.fieldid=".$col[$i]);
|
|
$cfield = $database->loadObjectList();
|
|
$cfield = $cfield[0];
|
|
if($row[0]->col1captions==1) $oTitle = getLangDefinition($cfield->title).": ";
|
|
else $oTitle='';
|
|
$lfields .= " \".getFieldValue('".$cfield->type."',\$user->".$cfield->name.",\$user,'".$oTitle."').\"";
|
|
}
|
|
}
|
|
$lfields .= "</td>\n";
|
|
|
|
if($row[0]->col2enabled) {
|
|
$col=$row[0]->col2fields;
|
|
$col=explode('|*|',$col);
|
|
for ($i=0, $n=count( $col ); $i < $n; $i++) {
|
|
if($i==0) $lfields .= "<td valign=top>\n";
|
|
else $lfields .= "<br/>\n";
|
|
if($col[$i]!='' && $col[$i]!=null) {
|
|
$database->setQuery( "SELECT f.name, f.title, f.type "
|
|
. "\nFROM #__comprofiler_fields AS f"
|
|
. "\nWHERE f.published = 1 AND f.fieldid=".$col[$i]);
|
|
$cfield = $database->loadObjectList();
|
|
$cfield = $cfield[0];
|
|
if($row[0]->col2captions==1) $oTitle = getLangDefinition($cfield->title).": ";
|
|
else $oTitle='';
|
|
$lfields .= " \".getFieldValue('".$cfield->type."',\$user->".$cfield->name.",\$user,'".$oTitle."').\"";
|
|
}
|
|
}
|
|
$lfields .= "</td>\n";
|
|
}
|
|
|
|
if($row[0]->col3enabled) {
|
|
$col=$row[0]->col3fields;
|
|
$col=explode('|*|',$col);
|
|
for ($i=0, $n=count( $col ); $i < $n; $i++) {
|
|
if($i==0) $lfields .= "<td valign=top>\n";
|
|
else $lfields .= "<br/>\n";
|
|
$database->setQuery( "SELECT f.name, f.title, f.type "
|
|
. "\nFROM #__comprofiler_fields AS f"
|
|
. "\nWHERE f.published = 1 AND f.fieldid=".$col[$i]);
|
|
$cfield = $database->loadObjectList();
|
|
$cfield = $cfield[0];
|
|
if($row[0]->col3captions==1) $oTitle = getLangDefinition($cfield->title).": ";
|
|
else $oTitle='';
|
|
$lfields .= " \".getFieldValue('".$cfield->type."',\$user->".$cfield->name.",\$user,'".$oTitle."').\"";
|
|
}
|
|
$lfields .= "</td>\n";
|
|
}
|
|
|
|
if($row[0]->col4enabled) {
|
|
$col=$row[0]->col4fields;
|
|
$col=explode('|*|',$col);
|
|
for ($i=0, $n=count( $col ); $i < $n; $i++) {
|
|
if($i==0) $lfields .= "<td valign=top>\n";
|
|
else $lfields .= "<br/>\n";
|
|
if($col[$i]!='' && $col[$i]!=null) {
|
|
$database->setQuery( "SELECT f.name, f.title, f.type "
|
|
. "\nFROM #__comprofiler_fields AS f"
|
|
. "\nWHERE f.published = 1 AND f.fieldid=".$col[$i]);
|
|
$cfield = $database->loadObjectList();
|
|
$cfield = $cfield[0];
|
|
if($row[0]->col4captions==1) $oTitle = getLangDefinition($cfield->title).": ";
|
|
else $oTitle='';
|
|
$lfields .= " \".getFieldValue('".$cfield->type."',\$user->".$cfield->name.",\$user,'".$oTitle."').\"";
|
|
}
|
|
|
|
}
|
|
$lfields .= "</td>\n";
|
|
}
|
|
$row=$row[0];
|
|
HTML_comprofiler::usersList($row,$lfields,$lists,$listid,$listCuerdas);
|
|
}
|
|
|
|
function userSave( $option, $uid) {
|
|
global $database,$ueConfig,$_REQUEST,$_POST;
|
|
|
|
$user_id = intval( mosGetParam( $_POST, 'id', 0 ));
|
|
|
|
// Rodax Software
|
|
$isModerator = isModerator($uid);
|
|
|
|
// do some security checks
|
|
if ($uid == 0 || $user_id == 0 || (($user_id <> $uid) && (!isModerator))) {
|
|
mosNotAuth();
|
|
return;
|
|
}
|
|
$row = new mosUser( $database );
|
|
$row->load( $user_id );
|
|
$row->orig_password = $row->password;
|
|
|
|
|
|
if (!$row->bind( $_POST )) {
|
|
echo "<script> alert('".$row->getError()."'); window.history.go(-1); </script>\n";
|
|
exit();
|
|
}
|
|
|
|
SWITCH ($ueConfig['name_style']) {
|
|
case 2:
|
|
$row->name = $_POST['firstname'] . ' ' . $_POST['lastname'];
|
|
break;
|
|
case 3:
|
|
if(isset($_POST['middlename'])) $row->name = $_POST['firstname'] . ' ' . $_POST['middlename']. ' ' . $_POST['lastname'];
|
|
else $row->name = $_POST['firstname']. ' ' . $_POST['lastname'];
|
|
break;
|
|
}
|
|
mosMakeHtmlSafe($row);
|
|
|
|
|
|
if(isset($_POST["password"]) && $_POST["password"] != "") {
|
|
if(isset($_POST["verifyPass"]) && ($_POST["verifyPass"] == $_POST["password"])) {
|
|
$row->password = md5($_POST["password"]);
|
|
} else {
|
|
echo "<script> alert(\""._PASS_MATCH."\"); window.history.go(-1); </script>\n";
|
|
exit();
|
|
}
|
|
} else {
|
|
// Restore 'original password'
|
|
$row->password = $row->orig_password;
|
|
}
|
|
if (!$row->check()) {
|
|
echo "<script> alert('".$row->getError()."'); window.history.go(-1); </script>\n";
|
|
exit();
|
|
}
|
|
|
|
unset($row->orig_password); // prevent DB error!!
|
|
|
|
if (!$row->store()) {
|
|
echo "<script> alert('store:".$row->getError()."'); window.history.go(-1); </script>\n";
|
|
exit();
|
|
}
|
|
$sqlFormat = "Y-m-d";
|
|
$selFields = '';
|
|
$database->setQuery( "SELECT f.* FROM #__comprofiler_fields f, #__comprofiler_tabs t"
|
|
. "\n WHERE f.published=1 and f.tabid = t.tabid AND t.enabled=1" );
|
|
$rowFields = $database->loadObjectList();
|
|
for($i=0, $n=count( $rowFields ); $i < $n; $i++) {
|
|
if($i > 0) $selFields .=", ";
|
|
switch($rowFields[$i]->type) {
|
|
CASE 'date':
|
|
$selFields .= "`".$rowFields[$i]->name."`='".dateConverter($_POST[$rowFields[$i]->name],$ueConfig[date_format],$sqlFormat)."' ";
|
|
break;
|
|
CASE 'webaddress':
|
|
CASE 'emailaddress':
|
|
$selFields .= "`".$rowFields[$i]->name."`='".htmlspecialchars(addslashes(str_replace(array('mailto:','http://','https://'),'',strtolower($_POST[$rowFields[$i]->name]))))."' ";
|
|
break;
|
|
CASE 'editorta':
|
|
$selFields .= "`".$rowFields[$i]->name."`='".addslashes($_POST[$rowFields[$i]->name])."' ";
|
|
break;
|
|
DEFAULT:
|
|
$selFields .= "`".$rowFields[$i]->name."`='".htmlspecialchars(addslashes($_POST[$rowFields[$i]->name]))."' ";
|
|
break;
|
|
}
|
|
}
|
|
if($selFields !='') $selFields .=", ";
|
|
$selFields .= " `lastupdatedate`='".date('Y-m-d\TH:i:s')."', `firstname`='".$_POST['firstname']."', `middlename`='".$_POST['middlename']."', `lastname`='".$_POST['lastname']."'";
|
|
$sql = "UPDATE #__comprofiler SET ".stripslashes($selFields)." WHERE id='$user_id'";
|
|
$database->setQuery( $sql );
|
|
if (!$database->query()) {
|
|
die("SQL error" . $database->stderr(true));
|
|
}
|
|
|
|
$database->setQuery("SELECT id FROM #__menu WHERE link = 'index.php?option=com_comprofiler'");
|
|
$Itemid = $database->loadResult();
|
|
mosRedirect ("index.php?option=com_comprofiler&Itemid=".$Itemid."&task=userDetails&user=".$user_id, _USER_DETAILS_SAVE);
|
|
//mosRedirect ("index.php?option=$option&Itemid=".$Itemid, _USER_DETAILS_SAVE);
|
|
}
|
|
function mosGetConfig() {
|
|
$configfile = "administrator/components/com_comprofiler/ue_config.php";
|
|
include_once( $configfile );
|
|
RETURN $ueConfig;
|
|
}
|
|
|
|
function lostPassForm( $option ) {
|
|
HTML_comprofiler::lostPassForm($option);
|
|
}
|
|
|
|
function sendNewPass( $option ) {
|
|
global $database, $Itemid;
|
|
global $mosConfig_live_site, $mosConfig_sitename,$ueConfig;
|
|
|
|
$_live_site = $mosConfig_live_site;
|
|
$_sitename = $mosConfig_sitename;
|
|
|
|
// ensure no malicous sql gets past
|
|
$checkusername = trim( mosGetParam( $_POST, 'checkusername', '') );
|
|
$checkusername = $database->getEscaped( $checkusername );
|
|
$confirmEmail = trim( mosGetParam( $_POST, 'confirmEmail', '') );
|
|
$confirmEmail = $database->getEscaped( $confirmEmail );
|
|
|
|
$database->setQuery( "SELECT id FROM #__users"
|
|
. "\nWHERE username='$checkusername' AND email='$confirmEmail'"
|
|
);
|
|
|
|
if (!($user_id = $database->loadResult()) || !$checkusername || !$confirmEmail) {
|
|
mosRedirect( "index.php?option=$option&task=lostPassword&mosmsg="._ERROR_PASS );
|
|
}
|
|
|
|
$newpass = makePass();
|
|
$message = _NEWPASS_MSG;
|
|
eval ("\$message = \"$message\";");
|
|
$subject = _NEWPASS_SUB;
|
|
eval ("\$subject = \"$subject\";");
|
|
$headers = "";
|
|
$headers .= "From: ".$ueConfig['reg_email_name']." <".$ueConfig['reg_email_from'].">\r\n";
|
|
$headers .= "Reply-To: <".$ueConfig['reg_email_replyto'].">\r\n";
|
|
$headers .= "X-Priority: 3\r\n";
|
|
$headers .= "X-MSMail-Priority: Low\r\n";
|
|
$headers .= "X-Mailer: Mambo Open Source 4.5\r\n";
|
|
|
|
mail( $confirmEmail, $subject, $message, $headers );
|
|
|
|
$newpass = md5( $newpass );
|
|
$sql = "UPDATE #__users SET password='$newpass' WHERE id='$user_id'";
|
|
$database->setQuery( $sql );
|
|
if (!$database->query()) {
|
|
die("SQL error" . $database->stderr(true));
|
|
}
|
|
|
|
mosRedirect( "index.php?Itemid=$Itemid&mosmsg="._NEWPASS_SENT );
|
|
}
|
|
|
|
function makePass(){
|
|
$makepass="";
|
|
$salt = "abchefghjkmnpqrstuvwxyz0123456789";
|
|
srand((double)microtime()*1000000);
|
|
$i = 0;
|
|
while ($i <= 7) {
|
|
$num = rand() % 33;
|
|
$tmp = substr($salt, $num, 1);
|
|
$makepass = $makepass . $tmp;
|
|
$i++;
|
|
}
|
|
return ($makepass);
|
|
}
|
|
|
|
function registerForm( $option, $emailpass ) {
|
|
global $mosConfig_allowUserRegistration, $database, $my, $acl;
|
|
|
|
$database->setQuery( "SELECT f.* FROM #__comprofiler_fields f, #__comprofiler_tabs t"
|
|
. "\n WHERE t.tabid = f.tabid AND f.published=1 AND f.registration=1 AND t.enabled=1"
|
|
. "\n ORDER BY t.ordering, f.ordering" );
|
|
$rowFields = $database->loadObjectList();
|
|
$rowFieldValues=array();
|
|
for($i=0, $n=count( $rowFields ); $i < $n; $i++) {
|
|
|
|
$k = "\$rowExtras->".$rowFields[$i]->name;
|
|
eval("\$k = \"$k\";");
|
|
$database->setQuery( "SELECT fieldtitle FROM #__comprofiler_field_values"
|
|
. "\n WHERE fieldid = ".$rowFields[$i]->fieldid
|
|
. "\n ORDER BY ordering" );
|
|
$Values = $database->loadObjectList();
|
|
if(count($Values) > 0) {
|
|
if($rowFields[$i]->type=='radio') $rowFieldValues['lst_'.$rowFields[$i]->name] = moscomprofilerHTML::radioList( $Values, $rowFields[$i]->name, 'class="inputbox" size="1" mosReq="'.$rowFields[$i]->required.'" mosLabel="'.getLangDefinition($rowFields[$i]->title).'"', 'fieldtitle', 'fieldtitle', $k);
|
|
else $rowFieldValues['lst_'.$rowFields[$i]->name] = moscomprofilerHTML::selectList( $Values, $rowFields[$i]->name, 'class="inputbox" size="1" mosReq="'.$rowFields[$i]->required.'" mosLabel="'.getLangDefinition($rowFields[$i]->title).'"', 'fieldtitle', 'fieldtitle', $k);
|
|
}
|
|
}
|
|
|
|
|
|
HTML_comprofiler::registerForm($option, $emailpass, $rowFields, $rowFieldValues);
|
|
}
|
|
|
|
function saveRegistration( $option ) {
|
|
global $database, $my, $acl,$ueConfig,$_POST;
|
|
global $mosConfig_live_site, $mosConfig_emailpass, $mosConfig_allowUserRegistration,$uDetails;
|
|
|
|
if ($mosConfig_allowUserRegistration=="0") {
|
|
mosNotAuth();
|
|
return;
|
|
}
|
|
|
|
$database->setQuery("SELECT id FROM #__users WHERE email = '".$_POST['email']."' AND username='0'");
|
|
$uid = $database->loadResult();
|
|
|
|
if($uid >0 ) $_POST['id'] = $uid;
|
|
|
|
$row = new mosUser( $database );
|
|
|
|
if (!$row->bind( $_POST )) {
|
|
echo "<script> alert('".$row->getError()."'); window.history.go(-1); </script>\n";
|
|
exit();
|
|
}
|
|
|
|
SWITCH ($ueConfig['name_style']) {
|
|
case 2:
|
|
$row->name = $_POST['firstname'] . ' ' . $_POST['lastname'];
|
|
break;
|
|
case 3:
|
|
if(isset($_POST['middlename'])) $row->name = $_POST['firstname'] . ' ' . $_POST['middlename']. ' ' . $_POST['lastname'];
|
|
else $row->name = $_POST['firstname']. ' ' . $_POST['lastname'];
|
|
break;
|
|
}
|
|
mosMakeHtmlSafe($row);
|
|
$pwd = '';
|
|
$row->gid = $acl->get_group_id('Registered','ARO');
|
|
|
|
if (!$row->password) {
|
|
$pwd = makePass();
|
|
$row->password = md5( $pwd );
|
|
$includePWD=1;
|
|
} else {
|
|
$pwd = $row->password;
|
|
$row->password = md5( $row->password );
|
|
$includePWD=0;
|
|
}
|
|
|
|
$row->registerDate = date("Y-m-d\TH:i:s");
|
|
|
|
if (!$row->check()) {
|
|
echo "<script> alert('".$row->getError()."'); window.history.go(-1); </script>\n";
|
|
exit();
|
|
}
|
|
|
|
if (!$row->store()) {
|
|
echo "<script> alert('".$row->getError()."'); window.history.go(-1); </script>\n";
|
|
exit();
|
|
}
|
|
$sqlFormat = "Y-m-d";
|
|
$selFields = '';
|
|
$database->setQuery( "SELECT f.* FROM #__comprofiler_fields f, #__comprofiler_tabs t"
|
|
. "\n WHERE f.published=1 and f.tabid = t.tabid and f.registration=1 and t.enabled=1" );
|
|
$rowFields = $database->loadObjectList();
|
|
|
|
$database->setQuery("SELECT id FROM #__users WHERE username = '".$_POST['username']."'");
|
|
$uid = $database->loadResult();
|
|
$sqlType = 'I';
|
|
|
|
if ($ueConfig['reg_admin_approval']=="0") {
|
|
$approved="1";
|
|
} else {
|
|
$approved="0";
|
|
}
|
|
if ($ueConfig['reg_confirmation']=="0") {
|
|
$confirmed="1";
|
|
} else {
|
|
$confirmed="0";
|
|
}
|
|
$acceptedterms=$_POST['acceptedterms'];
|
|
|
|
$colList = "id, user_id, approved, confirmed, acceptedterms, firstname, lastname";
|
|
$valueList = "'$uid','$uid','$approved','$confirmed','$acceptedterms','".$_POST['firstname']."','".$_POST['lastname']."'";
|
|
for($i=0, $n=count( $rowFields ); $i < $n; $i++) {
|
|
if($i > 0) $selFields .=", ";
|
|
|
|
switch($rowFields[$i]->type) {
|
|
CASE 'date':
|
|
$colList .= ", ".$rowFields[$i]->name;
|
|
$valueList .= ", '".dateConverter($_POST[$rowFields[$i]->name],$ueConfig[date_format],$sqlFormat)."'";
|
|
break;
|
|
CASE 'webaddress':
|
|
CASE 'emailaddress':
|
|
$colList .= ", ".$rowFields[$i]->name;
|
|
$valueList .= ", '".addslashes(str_replace(array('mailto:','http://','https://'),'',strtolower($_POST[$rowFields[$i]->name])))."'";
|
|
break;
|
|
DEFAULT:
|
|
$colList .= ", ".$rowFields[$i]->name;
|
|
$valueList .= ", '".addslashes($_POST[$rowFields[$i]->name])."'";
|
|
break;
|
|
}
|
|
}
|
|
$sql = "INSERT INTO #__comprofiler (".stripslashes($colList).") VALUES (".stripslashes($valueList).")";
|
|
$database->setQuery( $sql );
|
|
if (!$database->query()) {
|
|
die("SQL error" . $database->stderr(true));
|
|
}
|
|
$row->checkin();
|
|
if($mosConfig_emailpass == "1") $row->password =$pwd ;
|
|
else $mosConfig_emailpass=0;
|
|
|
|
if($confirmed==0) {
|
|
createEmail($row,'pending',$ueConfig,null,$includePWD);
|
|
$emailType=null;
|
|
} elseif($approved==0 && $confirmed==1) {
|
|
createEmail($row,'pending',$ueConfig);
|
|
$emailType='pendingAdmin';
|
|
} else {
|
|
createEmail($row,'welcome',$ueConfig);
|
|
$emailType='welcomeAdmin';
|
|
}
|
|
if($emailType!=null) {
|
|
if($ueConfig['moderatorEmail']==1) {
|
|
$database->setQuery( "SELECT name, username, email FROM #__users"
|
|
."\n WHERE gid >='".$ueConfig['imageApproverGid']."'" );
|
|
$rowAdmins = $database->loadObjectList();
|
|
foreach ($rowAdmins AS $rowAdmin) {
|
|
createEmail($row,$emailType,$ueConfig,$rowAdmin);
|
|
}
|
|
}
|
|
}
|
|
|
|
if ($mosConfig_emailpass == "1" && $ueConfig['reg_admin_approval']=="1" && $ueConfig['reg_confirmation']=="0"){
|
|
echo _UE_REG_COMPLETE_NOPASS_NOAPPR;
|
|
} elseif ($mosConfig_emailpass == "1" && $ueConfig['reg_admin_approval']=="1" && $ueConfig['reg_confirmation']=="1") {
|
|
echo _UE_REG_COMPLETE_NOPASS_NOAPPR_CONF;
|
|
} elseif ($mosConfig_emailpass == "1" && $ueConfig['reg_admin_approval']=="0" && $ueConfig['reg_confirmation']=="0") {
|
|
echo _UE_REG_COMPLETE_NOPASS;
|
|
} elseif ($mosConfig_emailpass == "1" && $ueConfig['reg_admin_approval']=="0" && $ueConfig['reg_confirmation']=="1") {
|
|
echo _UE_REG_COMPLETE_NOPASS_CONF;
|
|
} elseif ($mosConfig_emailpass == "0" && $ueConfig['reg_admin_approval']=="1" && $ueConfig['reg_confirmation']=="0") {
|
|
echo _UE_REG_COMPLETE_NOAPPR;
|
|
} elseif ($mosConfig_emailpass == "0" && $ueConfig['reg_admin_approval']=="1" && $ueConfig['reg_confirmation']=="1") {
|
|
echo _UE_REG_COMPLETE_NOAPPR_CONF;
|
|
} elseif ($mosConfig_emailpass == "0" && $ueConfig['reg_admin_approval']=="0" && $ueConfig['reg_confirmation']=="1") {
|
|
echo _UE_REG_COMPLETE_CONF;
|
|
} else {
|
|
echo _UE_REG_COMPLETE;
|
|
}
|
|
|
|
}
|
|
|
|
|
|
function login( $username=null,$passwd=null ) {
|
|
global $acl,$database,$_COOKIE,$_POST,$mainframe;
|
|
|
|
$usercookie = mosGetParam( $_COOKIE, 'usercookie', '' );
|
|
$sessioncookie = mosGetParam( $_COOKIE, 'sessioncookie', '' );
|
|
if (!$username || !$passwd) {
|
|
$return = trim( mosGetParam( $_POST, 'return', '' ) );
|
|
$username = trim( mosGetParam( $_POST, 'username', '' ) );
|
|
$passwd2 = trim( mosGetParam( $_POST, 'passwd', '' ) );
|
|
$passwd = md5( $passwd2 );
|
|
}
|
|
$remember = trim( mosGetParam( $_POST, 'remember', '' ) );
|
|
|
|
if (!$username || !$passwd) {
|
|
echo "<script> alert(\""._LOGIN_INCOMPLETE."\"); window.history.go(-1); </script>\n";
|
|
exit();
|
|
} else {
|
|
$database->setQuery( "SELECT u.id, u.gid, u.block, u.usertype, ue.approved, ue.confirmed"
|
|
. "\nFROM #__users u, "
|
|
. "\n#__comprofiler ue"
|
|
. "\nWHERE u.username='$username' AND u.password='$passwd' AND u.id = ue.id"
|
|
);
|
|
$row = null;
|
|
if ($database->loadObject( $row )) {
|
|
if ($row->block == 1) {
|
|
echo "<script>alert(\""._LOGIN_BLOCKED."\"); window.history.go(-1); </script>\n";
|
|
exit();
|
|
}
|
|
else if ($row->approved == 2){
|
|
echo "<script>alert(\""._LOGIN_REJECTED."\"); window.history.go(-1); </script>\n";
|
|
exit();
|
|
}
|
|
else if ($row->approved == 0){
|
|
echo "<script>alert(\""._LOGIN_NOT_APPROVED."\"); window.history.go(-1); </script>\n";
|
|
exit();
|
|
}
|
|
else if ($row->confirmed != 1){
|
|
echo "<script>alert(\""._LOGIN_NOT_CONFIRMED."\"); window.history.go(-1); </script>\n";
|
|
exit();
|
|
}
|
|
} else {
|
|
echo "<script>alert(\""._LOGIN_INCORRECT."\"); window.history.go(-1); </script>\n";
|
|
exit();
|
|
}
|
|
echo "<div style='visibility:hidden;'><form action=".sefRelToAbs("index.php?option=login")." method=post name=login2 id=login2>\n";
|
|
echo "<input type=hidden name=username value='$username' />\n";
|
|
echo "<input type=hidden name=passwd value='$passwd2' />\n";
|
|
echo "<input type=hidden name=op2 value='login' />\n";
|
|
echo "<input type=hidden name=lang value='$mosConfig_lang' />\n";
|
|
echo "<input type=hidden name=return value='$return' />\n";
|
|
echo "<input type=hidden name=remember value='$remember' />\n";
|
|
echo "<input type=submit name=btnsubmit />\n";
|
|
echo "</form></div>\n";
|
|
|
|
echo "<script> document.login2.submit(); </script>\n";
|
|
|
|
}
|
|
}
|
|
function confirm($confirmCode){
|
|
global $database,$my,$ueConfig;
|
|
if($my->id < 1) {
|
|
|
|
$query = "SELECT * FROM #__comprofiler c JOIN #__users u ON c.id=u.id WHERE md5(c.id) = '" . $confirmCode . "'";
|
|
$database->setQuery($query);
|
|
$user = $database->loadObjectList();
|
|
|
|
$query = "UPDATE #__comprofiler SET confirmed = 1 WHERE md5(id) = '" . $confirmCode . "'";
|
|
$database->setQuery($query);
|
|
$database->query();
|
|
|
|
if(mysql_affected_rows() == 0){
|
|
echo _UE_USER_NOTCONFIRMED;
|
|
}
|
|
elseif($user[0]->approved == 0) {
|
|
if($ueConfig['moderatorEmail']==1) {
|
|
$database->setQuery( "SELECT name, username, email FROM #__users"
|
|
."\n WHERE gid >='".$ueConfig['imageApproverGid']."'" );
|
|
$rowAdmins = $database->loadObjectList();
|
|
foreach ($rowAdmins AS $rowAdmin) {
|
|
createEmail($user[0],'pendingAdmin',$ueConfig,$rowAdmin);
|
|
}
|
|
}
|
|
echo _UE_USER_CONFIRMED_NEEDAPPR . "<br>";
|
|
|
|
} else {
|
|
if($ueConfig['moderatorEmail']==1) {
|
|
$database->setQuery( "SELECT name, username, email FROM #__users"
|
|
."\n WHERE gid >='".$ueConfig['imageApproverGid']."'" );
|
|
$rowAdmins = $database->loadObjectList();
|
|
foreach ($rowAdmins AS $rowAdmin) {
|
|
createEmail($user[0],'welcomeAdmin',$ueConfig,$rowAdmin);
|
|
}
|
|
}
|
|
echo _UE_USER_CONFIRMED . "<br>";
|
|
}
|
|
|
|
|
|
} else {
|
|
$database->setQuery("SELECT id FROM #__menu WHERE link = 'index.php?option=com_comprofiler'");
|
|
$Itemid = $database->loadResult();
|
|
mosRedirect(sefRelToAbs('index.php?option=com_comprofiler&Itemid'.$Itemid));
|
|
}
|
|
|
|
}
|
|
|
|
|
|
function approveImage(){
|
|
global $database,$_POST,$_REQUEST,$mosConfig_absolute_path,$my,$ueConfig;
|
|
$isModerator=isModerator($my->id);
|
|
if ($isModerator == 0) {
|
|
mosNotAuth();
|
|
return;
|
|
}
|
|
$avatars=array();
|
|
if(isset($_POST['avatar'])) $avatars=$_POST['avatar'];
|
|
else $avatars[] = $_REQUEST['avatars'];
|
|
if(isset($_POST['act'])) $act=$_POST['act'];
|
|
else $act = $_REQUEST['flag'];
|
|
if($act=='1') {
|
|
foreach ($avatars AS $avatar) {
|
|
$query = "UPDATE #__comprofiler SET avatarapproved = 1, lastupdatedate='".date('Y-m-d\TH:i:s')."' WHERE id = '" . $avatar . "'";
|
|
$database->setQuery($query);
|
|
$database->query();
|
|
echo $database->getquery();
|
|
$database->setQuery( "SELECT name, email FROM #__users"
|
|
."\n WHERE id='$avatar'" );
|
|
$rows = $database->loadObjectList();
|
|
echo $database->getquery();
|
|
foreach ($rows AS $row) {
|
|
createEmail($row,'imageApproved',$ueConfig);
|
|
}
|
|
}
|
|
} else {
|
|
foreach ($avatars AS $avatar) {
|
|
$query = "SELECT avatar FROM #__comprofiler WHERE id = '" . $avatar . "'";
|
|
$database->setQuery($query);
|
|
$file = $database->loadResult();
|
|
if(eregi("gallery/",$file)==false && is_file($mosConfig_absolute_path."/images/comprofiler/".$file)) {
|
|
unlink($mosConfig_absolute_path."/images/comprofiler/".$file);
|
|
if(is_file($mosConfig_absolute_path."/images/comprofiler/tn".$file)) unlink($mosConfig_absolute_path."/images/comprofiler/tn".$file);
|
|
}
|
|
$query = "UPDATE #__comprofiler SET avatarapproved = 1, avatar=null WHERE id = '" . $avatar . "'";
|
|
$database->setQuery($query);
|
|
$database->query();
|
|
$database->setQuery( "SELECT name, email FROM #__users"
|
|
."\n WHERE id='$avatar'" );
|
|
$rows = $database->loadObjectList();
|
|
foreach ($rows AS $row) {
|
|
createEmail($row,'imageRejected',$ueConfig);
|
|
}
|
|
}
|
|
|
|
}
|
|
mosRedirect(sefRelToAbs('index.php?option=com_comprofiler&task=moderateImages'));
|
|
}
|
|
|
|
function isModerator($oID){
|
|
global $ueConfig;
|
|
$gid = userGID($oID);
|
|
if($gid >= $ueConfig['imageApproverGid']) return 1;
|
|
else return 0;
|
|
}
|
|
|
|
function userGID($oID){
|
|
global $database,$ueConfig;
|
|
if($oID > 0) {
|
|
$query = "SELECT gid FROM #__users WHERE id = '".$oID."'";
|
|
$database->setQuery($query);
|
|
$gid = $database->loadResult();
|
|
return $gid;
|
|
}
|
|
else return 0;
|
|
}
|
|
|
|
function reportUser($option,$form=1,$uid=0) {
|
|
global $database,$ueConfig,$_POST;
|
|
if($ueConfig['allowUserReports']==0) {
|
|
echo _UE_FUNCTIONALITY_DISABLED;
|
|
exit();
|
|
}
|
|
if($form==1) {
|
|
HTML_comprofiler::reportUserForm($option,$uid);
|
|
} else {
|
|
$row = new moscomprofilerUserReport( $database );
|
|
|
|
if (!$row->bind( $_POST )) {
|
|
echo "<script> alert('".$row->getError()."'); window.history.go(-1); </script>\n";
|
|
exit();
|
|
}
|
|
|
|
mosMakeHtmlSafe($row);
|
|
|
|
$row->reportedondate = date("Y-m-d\TH:i:s");
|
|
|
|
if (!$row->check()) {
|
|
echo "<script> alert('".$row->getError()."'); window.history.go(-1); </script>\n";
|
|
exit();
|
|
}
|
|
|
|
if (!$row->store()) {
|
|
echo "<script> alert('".$row->getError()."'); window.history.go(-1); </script>\n";
|
|
exit();
|
|
}
|
|
if($ueConfig['moderatorEmail']==1) {
|
|
$database->setQuery( "SELECT name, email FROM #__users"
|
|
."\n WHERE gid >='".$ueConfig['imageApproverGid']."'" );
|
|
$rowAdmins = $database->loadObjectList();
|
|
foreach ($rowAdmins AS $rowAdmin) {
|
|
createEmail($row,'reportAdmin',$ueConfig,$rowAdmin);
|
|
}
|
|
}
|
|
echo _UE_USERREPORT_SUCCESSFUL;
|
|
}
|
|
}
|
|
|
|
function banUser($option,$uid,$form=1,$act=1) {
|
|
global $database,$ueConfig,$_POST,$my;
|
|
$isModerator=isModerator($my->id);
|
|
if($ueConfig['allowUserBanning']==0) {
|
|
echo _UE_FUNCTIONALITY_DISABLED;
|
|
exit();
|
|
}
|
|
if($form==1) {
|
|
$database->setquery("SELECT bannedreason FROM #__comprofiler WHERE id = '$uid'");
|
|
$orgbannedreason=$database->loadresult();
|
|
HTML_comprofiler::banUserForm($option,$uid,$act,$orgbannedreason);
|
|
} else {
|
|
if($act==1) {
|
|
if ($isModerator!=1){
|
|
mosNotAuth();
|
|
return;
|
|
}
|
|
$sql="UPDATE #__comprofiler SET banned='1', bannedby='".$_POST['bannedby']."', banneddate='".date('Y-m-d\TH:i:s')."', bannedreason='<b>".htmlspecialchars("["._UE_MODERATORBANRESPONSE."]")."</b>\n".$_POST['bannedreason']."' WHERE id='$uid'";
|
|
$database->SetQuery($sql);
|
|
$database->query();
|
|
$database->setQuery( "SELECT name, email FROM #__users"
|
|
."\n WHERE id='$uid'" );
|
|
$rows = $database->loadObjectList();
|
|
foreach ($rows AS $row) {
|
|
createEmail($row,'banUser',$ueConfig);
|
|
}
|
|
echo _UE_USERBAN_SUCCESSFUL;
|
|
} elseif($act==0) {
|
|
if ($isModerator!=1){
|
|
mosNotAuth();
|
|
return;
|
|
}
|
|
$sql="UPDATE #__comprofiler SET banned='0', bannedby=null, banneddate=null, bannedreason=null WHERE id='$uid'";
|
|
$database->SetQuery($sql);
|
|
$database->query();
|
|
|
|
$database->setQuery( "SELECT name, email FROM #__users"
|
|
."\n WHERE id='$uid'" );
|
|
$rows = $database->loadObjectList();
|
|
foreach ($rows AS $row) {
|
|
createEmail($row,'unbanUser',$ueConfig);
|
|
}
|
|
|
|
echo _UE_USERUNBAN_SUCCESSFUL;
|
|
}elseif($act==2) {
|
|
if ($my->id!=$uid){
|
|
mosNotAuth();
|
|
return;
|
|
}
|
|
$bannedreason = "<b>".htmlspecialchars("["._UE_USERBANRESPONSE."]")."</b>\n".$_POST['bannedreason']."\n".$_POST['orgbannedreason'];
|
|
$sql="UPDATE #__comprofiler SET banned='2', bannedreason='$bannedreason' WHERE id='$uid'";
|
|
$database->SetQuery($sql);
|
|
$database->query();
|
|
if($ueConfig['moderatorEmail']==1) {
|
|
$database->setQuery( "SELECT name, email FROM #__users"
|
|
."\n WHERE gid >='".$ueConfig['imageApproverGid']."'" );
|
|
$rowAdmins = $database->loadObjectList();
|
|
foreach ($rowAdmins AS $rowAdmin) {
|
|
createEmail($row,'unbanAdmin',$ueConfig,$rowAdmin);
|
|
}
|
|
}
|
|
echo _UE_USERUNBANREQUEST_SUCCESSFUL;
|
|
|
|
}
|
|
}
|
|
}
|
|
|
|
function processReports(){
|
|
global $database,$_POST,$mosConfig_absolute_path,$my;
|
|
$isModerator=isModerator($my->id);
|
|
if ($isModerator == 0) {
|
|
mosNotAuth();
|
|
return;
|
|
}
|
|
$reports=array();
|
|
$reports=$_POST['reports'];
|
|
foreach ($reports AS $report) {
|
|
$query = "UPDATE #__comprofiler_userreports SET reportedstatus = 1 WHERE reportid = '" . $report . "'";
|
|
$database->setQuery($query);
|
|
$database->query();
|
|
}
|
|
mosRedirect(sefRelToAbs('index.php?option=com_comprofiler&task=moderateReports'));
|
|
}
|
|
function moderator(){
|
|
global $database,$_POST,$mosConfig_absolute_path,$my;
|
|
$isModerator=isModerator($my->id);
|
|
if ($isModerator == 0) {
|
|
mosNotAuth();
|
|
return;
|
|
}
|
|
$query = "SELECT count(*) FROM #__comprofiler WHERE avatarapproved=0";
|
|
if(!$database->setQuery($query)) print $database->getErrorMsg();
|
|
$totalimages = $database->loadResult();
|
|
|
|
$query = "SELECT count(*) FROM #__comprofiler_userreports WHERE reportedstatus=0 ";
|
|
if(!$database->setQuery($query)) print $database->getErrorMsg();
|
|
$totaluserreports = $database->loadResult();
|
|
|
|
$query = "SELECT count(*) FROM #__comprofiler WHERE banned=2";
|
|
if(!$database->setQuery($query)) print $database->getErrorMsg();
|
|
$totalunban = $database->loadResult();
|
|
|
|
if($totalunban > 0 || $totaluserreports > 0 || $totalimages > 0) {
|
|
if($totalunban > 0) echo "<div>".$totalunban._UE_UNBANREQUIREACTION."</div>";
|
|
if($totaluserreports > 0) echo "<div>".$totaluserreports._UE_USERREPORTSREQUIREACTION."</div>";
|
|
if($totalimages > 0) echo "<div>".$totalimages._UE_IMAGESREQUIREACTION."</div>";
|
|
|
|
|
|
} else {
|
|
echo _UE_NOACTIONREQUIRED;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
function approveUser($option,$uids) {
|
|
global $database,$ueConfig,$_POST,$my,$mosConfig_emailpass;
|
|
$isModerator=isModerator($my->id);
|
|
if($ueConfig['allowModUserApproval']==0) {
|
|
echo _UE_FUNCTIONALITY_DISABLED;
|
|
exit();
|
|
}
|
|
if ($isModerator!=1){
|
|
mosNotAuth();
|
|
return;
|
|
}
|
|
if($mosConfig_emailpass!=1) $mosConfig_emailpass=0;
|
|
|
|
foreach($uids AS $uid) {
|
|
$sql="UPDATE #__comprofiler SET approved='1'WHERE id='$uid'";
|
|
$database->SetQuery($sql);
|
|
$database->query();
|
|
$database->setQuery( "SELECT name, username, email FROM #__users"
|
|
."\n WHERE id='$uid'" );
|
|
$rows = $database->loadObjectList();
|
|
foreach ($rows AS $row) {
|
|
createEmail($row,'welcome',$ueConfig,null,$mosConfig_emailpass);
|
|
}
|
|
//$comment='comment'.$uid;
|
|
$comment=$_POST[$comment];
|
|
//print $uid;
|
|
// print "<br>".$_POST['comment'.$uid];
|
|
}
|
|
echo _UE_USERAPPROVAL_SUCCESSFUL;
|
|
|
|
}
|
|
|
|
function rejectUser($option,&$uids) {
|
|
global $database,$ueConfig,$_POST,$my,$mosConfig_emailpass;
|
|
$isModerator=isModerator($my->id);
|
|
if($ueConfig['allowModUserApproval']==0) {
|
|
echo _UE_FUNCTIONALITY_DISABLED;
|
|
exit();
|
|
}
|
|
if ($isModerator!=1){
|
|
mosNotAuth();
|
|
return;
|
|
}
|
|
if($mosConfig_emailpass!=1) $mosConfig_emailpass=0;
|
|
foreach($uids AS $uid) {
|
|
$sql="UPDATE #__comprofiler SET approved='2'WHERE id='$uid'";
|
|
$database->SetQuery($sql);
|
|
$database->query();
|
|
$database->setQuery( "SELECT name, username, email FROM #__users"
|
|
."\n WHERE id='$uid'" );
|
|
$rows = $database->loadObjectList();
|
|
foreach ($rows AS $row) {
|
|
createEmail($row,'rejectUser',$ueConfig,$_POST['comment'.$uid],$mosConfig_emailpass);
|
|
}
|
|
}
|
|
echo _UE_USERREJECT_SUCCESSFUL;
|
|
|
|
}
|
|
|
|
function pendingApprovalUsers($option) {
|
|
global $database,$ueConfig,$_POST,$my,$mosConfig_emailpass;
|
|
$isModerator=isModerator($my->id);
|
|
if($ueConfig['allowModUserApproval']==0) {
|
|
echo _UE_FUNCTIONALITY_DISABLED;
|
|
exit();
|
|
}
|
|
if ($isModerator!=1){
|
|
mosNotAuth();
|
|
return;
|
|
}
|
|
if($mosConfig_emailpass!=1) $mosConfig_emailpass=0;
|
|
|
|
$database->setQuery( "SELECT u.id, u.name, u.username, u.email, u.registerDate "
|
|
."\n FROM #__users u, #__comprofiler c "
|
|
."\n WHERE u.id=c.id AND c.approved=0 AND c.confirmed=1" );
|
|
$rows = $database->loadObjectList();
|
|
|
|
HTML_comprofiler::pendingApprovalUsers($option, $rows);
|
|
}
|
|
|
|
?>
|