1 | <?php
|
---|
2 | /**
|
---|
3 | *
|
---|
4 | * @package ucp
|
---|
5 | * @version $Id: ucp.php 8915 2008-09-23 13:30:52Z acydburn $
|
---|
6 | * @copyright (c) 2005 phpBB Group
|
---|
7 | * @license http://opensource.org/licenses/gpl-license.php GNU Public License
|
---|
8 | *
|
---|
9 | */
|
---|
10 |
|
---|
11 | /**
|
---|
12 | * @ignore
|
---|
13 | */
|
---|
14 | define('IN_PHPBB', true);
|
---|
15 | $phpbb_root_path = (defined('PHPBB_ROOT_PATH')) ? PHPBB_ROOT_PATH : './';
|
---|
16 | $phpEx = substr(strrchr(__FILE__, '.'), 1);
|
---|
17 | require($phpbb_root_path . 'common.' . $phpEx);
|
---|
18 | require($phpbb_root_path . 'includes/functions_user.' . $phpEx);
|
---|
19 | require($phpbb_root_path . 'includes/functions_module.' . $phpEx);
|
---|
20 |
|
---|
21 | // Basic parameter data
|
---|
22 | $id = request_var('i', '');
|
---|
23 | $mode = request_var('mode', '');
|
---|
24 |
|
---|
25 | if ($mode == 'login' || $mode == 'logout' || $mode == 'confirm')
|
---|
26 | {
|
---|
27 | define('IN_LOGIN', true);
|
---|
28 | }
|
---|
29 |
|
---|
30 | // Start session management
|
---|
31 | $user->session_begin();
|
---|
32 | $auth->acl($user->data);
|
---|
33 | $user->setup('ucp');
|
---|
34 |
|
---|
35 | // Setting a variable to let the style designer know where he is...
|
---|
36 | $template->assign_var('S_IN_UCP', true);
|
---|
37 |
|
---|
38 | $module = new p_master();
|
---|
39 | $default = false;
|
---|
40 |
|
---|
41 | // Basic "global" modes
|
---|
42 | switch ($mode)
|
---|
43 | {
|
---|
44 | case 'activate':
|
---|
45 | $module->load('ucp', 'activate');
|
---|
46 | $module->display($user->lang['UCP_ACTIVATE']);
|
---|
47 |
|
---|
48 | redirect(append_sid("{$phpbb_root_path}index.$phpEx"));
|
---|
49 | break;
|
---|
50 |
|
---|
51 | case 'resend_act':
|
---|
52 | $module->load('ucp', 'resend');
|
---|
53 | $module->display($user->lang['UCP_RESEND']);
|
---|
54 | break;
|
---|
55 |
|
---|
56 | case 'sendpassword':
|
---|
57 | $module->load('ucp', 'remind');
|
---|
58 | $module->display($user->lang['UCP_REMIND']);
|
---|
59 | break;
|
---|
60 |
|
---|
61 | case 'register':
|
---|
62 | if ($user->data['is_registered'] || isset($_REQUEST['not_agreed']))
|
---|
63 | {
|
---|
64 | redirect(append_sid("{$phpbb_root_path}index.$phpEx"));
|
---|
65 | }
|
---|
66 |
|
---|
67 | $module->load('ucp', 'register');
|
---|
68 | $module->display($user->lang['REGISTER']);
|
---|
69 | break;
|
---|
70 |
|
---|
71 | case 'confirm':
|
---|
72 | $module->load('ucp', 'confirm');
|
---|
73 | break;
|
---|
74 |
|
---|
75 | case 'login':
|
---|
76 | if ($user->data['is_registered'])
|
---|
77 | {
|
---|
78 | redirect(append_sid("{$phpbb_root_path}index.$phpEx"));
|
---|
79 | }
|
---|
80 |
|
---|
81 | login_box(request_var('redirect', "index.$phpEx"));
|
---|
82 | break;
|
---|
83 |
|
---|
84 | case 'logout':
|
---|
85 | if ($user->data['user_id'] != ANONYMOUS && isset($_GET['sid']) && !is_array($_GET['sid']) && $_GET['sid'] === $user->session_id)
|
---|
86 | {
|
---|
87 | $user->session_kill();
|
---|
88 | $user->session_begin();
|
---|
89 | $message = $user->lang['LOGOUT_REDIRECT'];
|
---|
90 | }
|
---|
91 | else
|
---|
92 | {
|
---|
93 | $message = ($user->data['user_id'] == ANONYMOUS) ? $user->lang['LOGOUT_REDIRECT'] : $user->lang['LOGOUT_FAILED'];
|
---|
94 | }
|
---|
95 | meta_refresh(3, append_sid("{$phpbb_root_path}index.$phpEx"));
|
---|
96 |
|
---|
97 | $message = $message . '<br /><br />' . sprintf($user->lang['RETURN_INDEX'], '<a href="' . append_sid("{$phpbb_root_path}index.$phpEx") . '">', '</a> ');
|
---|
98 | trigger_error($message);
|
---|
99 |
|
---|
100 | break;
|
---|
101 |
|
---|
102 | case 'terms':
|
---|
103 | case 'privacy':
|
---|
104 |
|
---|
105 | $message = ($mode == 'terms') ? 'TERMS_OF_USE_CONTENT' : 'PRIVACY_POLICY';
|
---|
106 | $title = ($mode == 'terms') ? 'TERMS_USE' : 'PRIVACY';
|
---|
107 |
|
---|
108 | if (empty($user->lang[$message]))
|
---|
109 | {
|
---|
110 | if ($user->data['is_registered'])
|
---|
111 | {
|
---|
112 | redirect(append_sid("{$phpbb_root_path}index.$phpEx"));
|
---|
113 | }
|
---|
114 |
|
---|
115 | login_box();
|
---|
116 | }
|
---|
117 |
|
---|
118 | $template->set_filenames(array(
|
---|
119 | 'body' => 'ucp_agreement.html')
|
---|
120 | );
|
---|
121 |
|
---|
122 | // Disable online list
|
---|
123 | page_header($user->lang[$title], false);
|
---|
124 |
|
---|
125 | $template->assign_vars(array(
|
---|
126 | 'S_AGREEMENT' => true,
|
---|
127 | 'AGREEMENT_TITLE' => $user->lang[$title],
|
---|
128 | 'AGREEMENT_TEXT' => sprintf($user->lang[$message], $config['sitename'], generate_board_url()),
|
---|
129 | 'U_BACK' => append_sid("{$phpbb_root_path}ucp.$phpEx", 'mode=login'),
|
---|
130 | 'L_BACK' => $user->lang['BACK_TO_LOGIN'])
|
---|
131 | );
|
---|
132 |
|
---|
133 | page_footer();
|
---|
134 |
|
---|
135 | break;
|
---|
136 |
|
---|
137 | case 'delete_cookies':
|
---|
138 |
|
---|
139 | // Delete Cookies with dynamic names (do NOT delete poll cookies)
|
---|
140 | if (confirm_box(true))
|
---|
141 | {
|
---|
142 | $set_time = time() - 31536000;
|
---|
143 |
|
---|
144 | foreach ($_COOKIE as $cookie_name => $cookie_data)
|
---|
145 | {
|
---|
146 | $cookie_name = str_replace($config['cookie_name'] . '_', '', $cookie_name);
|
---|
147 |
|
---|
148 | // Polls are stored as {cookie_name}_poll_{topic_id}, cookie_name_ got removed, therefore checking for poll_
|
---|
149 | if (strpos($cookie_name, 'poll_') !== 0)
|
---|
150 | {
|
---|
151 | $user->set_cookie($cookie_name, '', $set_time);
|
---|
152 | }
|
---|
153 | }
|
---|
154 |
|
---|
155 | $user->set_cookie('track', '', $set_time);
|
---|
156 | $user->set_cookie('u', '', $set_time);
|
---|
157 | $user->set_cookie('k', '', $set_time);
|
---|
158 | $user->set_cookie('sid', '', $set_time);
|
---|
159 |
|
---|
160 | // We destroy the session here, the user will be logged out nevertheless
|
---|
161 | $user->session_kill();
|
---|
162 | $user->session_begin();
|
---|
163 |
|
---|
164 | meta_refresh(3, append_sid("{$phpbb_root_path}index.$phpEx"));
|
---|
165 |
|
---|
166 | $message = $user->lang['COOKIES_DELETED'] . '<br /><br />' . sprintf($user->lang['RETURN_INDEX'], '<a href="' . append_sid("{$phpbb_root_path}index.$phpEx") . '">', '</a>');
|
---|
167 | trigger_error($message);
|
---|
168 | }
|
---|
169 | else
|
---|
170 | {
|
---|
171 | confirm_box(false, 'DELETE_COOKIES', '');
|
---|
172 | }
|
---|
173 |
|
---|
174 | redirect(append_sid("{$phpbb_root_path}index.$phpEx"));
|
---|
175 |
|
---|
176 | break;
|
---|
177 |
|
---|
178 | case 'switch_perm':
|
---|
179 |
|
---|
180 | $user_id = request_var('u', 0);
|
---|
181 |
|
---|
182 | $sql = 'SELECT *
|
---|
183 | FROM ' . USERS_TABLE . '
|
---|
184 | WHERE user_id = ' . (int) $user_id;
|
---|
185 | $result = $db->sql_query($sql);
|
---|
186 | $user_row = $db->sql_fetchrow($result);
|
---|
187 | $db->sql_freeresult($result);
|
---|
188 |
|
---|
189 | if (!$auth->acl_get('a_switchperm') || !$user_row || $user_id == $user->data['user_id'])
|
---|
190 | {
|
---|
191 | redirect(append_sid("{$phpbb_root_path}index.$phpEx"));
|
---|
192 | }
|
---|
193 |
|
---|
194 | include($phpbb_root_path . 'includes/acp/auth.' . $phpEx);
|
---|
195 |
|
---|
196 | $auth_admin = new auth_admin();
|
---|
197 | if (!$auth_admin->ghost_permissions($user_id, $user->data['user_id']))
|
---|
198 | {
|
---|
199 | redirect(append_sid("{$phpbb_root_path}index.$phpEx"));
|
---|
200 | }
|
---|
201 |
|
---|
202 | add_log('admin', 'LOG_ACL_TRANSFER_PERMISSIONS', $user_row['username']);
|
---|
203 |
|
---|
204 | $message = sprintf($user->lang['PERMISSIONS_TRANSFERRED'], $user_row['username']) . '<br /><br />' . sprintf($user->lang['RETURN_INDEX'], '<a href="' . append_sid("{$phpbb_root_path}index.$phpEx") . '">', '</a>');
|
---|
205 | trigger_error($message);
|
---|
206 |
|
---|
207 | break;
|
---|
208 |
|
---|
209 | case 'restore_perm':
|
---|
210 |
|
---|
211 | if (!$user->data['user_perm_from'] || !$auth->acl_get('a_switchperm'))
|
---|
212 | {
|
---|
213 | redirect(append_sid("{$phpbb_root_path}index.$phpEx"));
|
---|
214 | }
|
---|
215 |
|
---|
216 | $auth->acl_cache($user->data);
|
---|
217 |
|
---|
218 | $sql = 'UPDATE ' . USERS_TABLE . "
|
---|
219 | SET user_perm_from = 0
|
---|
220 | WHERE user_id = " . $user->data['user_id'];
|
---|
221 | $db->sql_query($sql);
|
---|
222 |
|
---|
223 | $sql = 'SELECT username
|
---|
224 | FROM ' . USERS_TABLE . '
|
---|
225 | WHERE user_id = ' . $user->data['user_perm_from'];
|
---|
226 | $result = $db->sql_query($sql);
|
---|
227 | $username = $db->sql_fetchfield('username');
|
---|
228 | $db->sql_freeresult($result);
|
---|
229 |
|
---|
230 | add_log('admin', 'LOG_ACL_RESTORE_PERMISSIONS', $username);
|
---|
231 |
|
---|
232 | $message = $user->lang['PERMISSIONS_RESTORED'] . '<br /><br />' . sprintf($user->lang['RETURN_INDEX'], '<a href="' . append_sid("{$phpbb_root_path}index.$phpEx") . '">', '</a>');
|
---|
233 | trigger_error($message);
|
---|
234 |
|
---|
235 | break;
|
---|
236 |
|
---|
237 | default:
|
---|
238 | $default = true;
|
---|
239 | break;
|
---|
240 | }
|
---|
241 |
|
---|
242 | // We use this approach because it does not impose large code changes
|
---|
243 | if (!$default)
|
---|
244 | {
|
---|
245 | return true;
|
---|
246 | }
|
---|
247 |
|
---|
248 | // Only registered users can go beyond this point
|
---|
249 | if (!$user->data['is_registered'])
|
---|
250 | {
|
---|
251 | if ($user->data['is_bot'])
|
---|
252 | {
|
---|
253 | redirect(append_sid("{$phpbb_root_path}index.$phpEx"));
|
---|
254 | }
|
---|
255 |
|
---|
256 | login_box('', $user->lang['LOGIN_EXPLAIN_UCP']);
|
---|
257 | }
|
---|
258 |
|
---|
259 | // Instantiate module system and generate list of available modules
|
---|
260 | $module->list_modules('ucp');
|
---|
261 |
|
---|
262 | // Check if the zebra module is set
|
---|
263 | if ($module->is_active('zebra', 'friends'))
|
---|
264 | {
|
---|
265 | // Output listing of friends online
|
---|
266 | $update_time = $config['load_online_time'] * 60;
|
---|
267 |
|
---|
268 | $sql = $db->sql_build_query('SELECT_DISTINCT', array(
|
---|
269 | 'SELECT' => 'u.user_id, u.username, u.username_clean, u.user_colour, MAX(s.session_time) as online_time, MIN(s.session_viewonline) AS viewonline',
|
---|
270 |
|
---|
271 | 'FROM' => array(
|
---|
272 | USERS_TABLE => 'u',
|
---|
273 | ZEBRA_TABLE => 'z'
|
---|
274 | ),
|
---|
275 |
|
---|
276 | 'LEFT_JOIN' => array(
|
---|
277 | array(
|
---|
278 | 'FROM' => array(SESSIONS_TABLE => 's'),
|
---|
279 | 'ON' => 's.session_user_id = z.zebra_id'
|
---|
280 | )
|
---|
281 | ),
|
---|
282 |
|
---|
283 | 'WHERE' => 'z.user_id = ' . $user->data['user_id'] . '
|
---|
284 | AND z.friend = 1
|
---|
285 | AND u.user_id = z.zebra_id',
|
---|
286 |
|
---|
287 | 'GROUP_BY' => 'z.zebra_id, u.user_id, u.username_clean, u.user_colour, u.username',
|
---|
288 |
|
---|
289 | 'ORDER_BY' => 'u.username_clean ASC',
|
---|
290 | ));
|
---|
291 |
|
---|
292 | $result = $db->sql_query($sql);
|
---|
293 |
|
---|
294 | while ($row = $db->sql_fetchrow($result))
|
---|
295 | {
|
---|
296 | $which = (time() - $update_time < $row['online_time'] && ($row['viewonline'] || $auth->acl_get('u_viewonline'))) ? 'online' : 'offline';
|
---|
297 |
|
---|
298 | $template->assign_block_vars("friends_{$which}", array(
|
---|
299 | 'USER_ID' => $row['user_id'],
|
---|
300 |
|
---|
301 | 'U_PROFILE' => get_username_string('profile', $row['user_id'], $row['username'], $row['user_colour']),
|
---|
302 | 'USER_COLOUR' => get_username_string('colour', $row['user_id'], $row['username'], $row['user_colour']),
|
---|
303 | 'USERNAME' => get_username_string('username', $row['user_id'], $row['username'], $row['user_colour']),
|
---|
304 | 'USERNAME_FULL' => get_username_string('full', $row['user_id'], $row['username'], $row['user_colour']))
|
---|
305 | );
|
---|
306 | }
|
---|
307 | $db->sql_freeresult($result);
|
---|
308 | }
|
---|
309 |
|
---|
310 | // Do not display subscribed topics/forums if not allowed
|
---|
311 | if (!$config['allow_topic_notify'] && !$config['allow_forum_notify'])
|
---|
312 | {
|
---|
313 | $module->set_display('main', 'subscribed', false);
|
---|
314 | }
|
---|
315 |
|
---|
316 | // Select the active module
|
---|
317 | $module->set_active($id, $mode);
|
---|
318 |
|
---|
319 | // Load and execute the relevant module
|
---|
320 | $module->load_active();
|
---|
321 |
|
---|
322 | // Assign data to the template engine for the list of modules
|
---|
323 | $module->assign_tpl_vars(append_sid("{$phpbb_root_path}ucp.$phpEx"));
|
---|
324 |
|
---|
325 | // Generate the page, do not display/query online list
|
---|
326 | $module->display($module->get_page_title(), false);
|
---|
327 |
|
---|
328 | /**
|
---|
329 | * Function for assigning a template var if the zebra module got included
|
---|
330 | */
|
---|
331 | function _module_zebra($mode, &$module_row)
|
---|
332 | {
|
---|
333 | global $template;
|
---|
334 |
|
---|
335 | $template->assign_var('S_ZEBRA_ENABLED', true);
|
---|
336 |
|
---|
337 | if ($mode == 'friends')
|
---|
338 | {
|
---|
339 | $template->assign_var('S_ZEBRA_FRIENDS_ENABLED', true);
|
---|
340 | }
|
---|
341 |
|
---|
342 | if ($mode == 'foes')
|
---|
343 | {
|
---|
344 | $template->assign_var('S_ZEBRA_FOES_ENABLED', true);
|
---|
345 | }
|
---|
346 | }
|
---|
347 |
|
---|
348 | ?>
|
---|