1 | <?php
|
---|
2 | /***************************************************************************
|
---|
3 | * usercp_avatar.php
|
---|
4 | * -------------------
|
---|
5 | * begin : Saturday, Feb 13, 2001
|
---|
6 | * copyright : (C) 2001 The phpBB Group
|
---|
7 | * email : support@phpbb.com
|
---|
8 | *
|
---|
9 | * $Id: usercp_avatar.php,v 1.8.2.23 2006/01/27 21:23:22 grahamje Exp $
|
---|
10 | *
|
---|
11 | *
|
---|
12 | ***************************************************************************/
|
---|
13 |
|
---|
14 | /***************************************************************************
|
---|
15 | *
|
---|
16 | * This program is free software; you can redistribute it and/or modify
|
---|
17 | * it under the terms of the GNU General Public License as published by
|
---|
18 | * the Free Software Foundation; either version 2 of the License, or
|
---|
19 | * (at your option) any later version.
|
---|
20 | *
|
---|
21 | *
|
---|
22 | ***************************************************************************/
|
---|
23 |
|
---|
24 | function check_image_type(&$type, &$error, &$error_msg)
|
---|
25 | {
|
---|
26 | global $lang;
|
---|
27 |
|
---|
28 | switch( $type )
|
---|
29 | {
|
---|
30 | case 'jpeg':
|
---|
31 | case 'pjpeg':
|
---|
32 | case 'jpg':
|
---|
33 | return '.jpg';
|
---|
34 | break;
|
---|
35 | case 'gif':
|
---|
36 | return '.gif';
|
---|
37 | break;
|
---|
38 | case 'png':
|
---|
39 | return '.png';
|
---|
40 | break;
|
---|
41 | default:
|
---|
42 | $error = true;
|
---|
43 | $error_msg = (!empty($error_msg)) ? $error_msg . '<br />' . $lang['Avatar_filetype'] : $lang['Avatar_filetype'];
|
---|
44 | break;
|
---|
45 | }
|
---|
46 |
|
---|
47 | return false;
|
---|
48 | }
|
---|
49 |
|
---|
50 | function user_avatar_delete($avatar_type, $avatar_file)
|
---|
51 | {
|
---|
52 | global $board_config, $userdata;
|
---|
53 |
|
---|
54 | $avatar_file = basename($avatar_file);
|
---|
55 | if ( $avatar_type == USER_AVATAR_UPLOAD && $avatar_file != '' )
|
---|
56 | {
|
---|
57 | if ( @file_exists(@phpbb_realpath('./' . $board_config['avatar_path'] . '/' . $avatar_file)) )
|
---|
58 | {
|
---|
59 | @unlink('./' . $board_config['avatar_path'] . '/' . $avatar_file);
|
---|
60 | }
|
---|
61 | }
|
---|
62 |
|
---|
63 | return ", user_avatar = '', user_avatar_type = " . USER_AVATAR_NONE;
|
---|
64 | }
|
---|
65 |
|
---|
66 | function user_avatar_gallery($mode, &$error, &$error_msg, $avatar_filename, $avatar_category)
|
---|
67 | {
|
---|
68 | global $board_config;
|
---|
69 |
|
---|
70 | $avatar_filename = phpbb_ltrim(basename($avatar_filename), "'");
|
---|
71 | $avatar_category = phpbb_ltrim(basename($avatar_category), "'");
|
---|
72 |
|
---|
73 | if(!preg_match('/(\.gif$|\.png$|\.jpg|\.jpeg)$/is', $avatar_filename))
|
---|
74 | {
|
---|
75 | return '';
|
---|
76 | }
|
---|
77 |
|
---|
78 | if ($avatar_filename == "" || $avatar_category == "")
|
---|
79 | {
|
---|
80 | return '';
|
---|
81 | }
|
---|
82 |
|
---|
83 | if ( file_exists(@phpbb_realpath($board_config['avatar_gallery_path'] . '/' . $avatar_category . '/' . $avatar_filename)) && ($mode == 'editprofile') )
|
---|
84 | {
|
---|
85 | $return = ", user_avatar = '" . str_replace("\'", "''", $avatar_category . '/' . $avatar_filename) . "', user_avatar_type = " . USER_AVATAR_GALLERY;
|
---|
86 | }
|
---|
87 | else
|
---|
88 | {
|
---|
89 | $return = '';
|
---|
90 | }
|
---|
91 | return $return;
|
---|
92 | }
|
---|
93 |
|
---|
94 | function user_avatar_url($mode, &$error, &$error_msg, $avatar_filename)
|
---|
95 | {
|
---|
96 | global $lang;
|
---|
97 |
|
---|
98 | if ( !preg_match('#^(http)|(ftp):\/\/#i', $avatar_filename) )
|
---|
99 | {
|
---|
100 | $avatar_filename = 'http://' . $avatar_filename;
|
---|
101 | }
|
---|
102 |
|
---|
103 | $avatar_filename = substr($avatar_filename, 0, 100);
|
---|
104 |
|
---|
105 | if ( !preg_match("#^((ht|f)tp://)([^ \?&=\#\"\n\r\t<]*?(\.(jpg|jpeg|gif|png))$)#is", $avatar_filename) )
|
---|
106 | {
|
---|
107 | $error = true;
|
---|
108 | $error_msg = ( !empty($error_msg) ) ? $error_msg . '<br />' . $lang['Wrong_remote_avatar_format'] : $lang['Wrong_remote_avatar_format'];
|
---|
109 | return;
|
---|
110 | }
|
---|
111 |
|
---|
112 | return ( $mode == 'editprofile' ) ? ", user_avatar = '" . str_replace("\'", "''", $avatar_filename) . "', user_avatar_type = " . USER_AVATAR_REMOTE : '';
|
---|
113 |
|
---|
114 | }
|
---|
115 |
|
---|
116 | function user_avatar_upload($mode, $avatar_mode, &$current_avatar, &$current_type, &$error, &$error_msg, $avatar_filename, $avatar_realname, $avatar_filesize, $avatar_filetype)
|
---|
117 | {
|
---|
118 | global $board_config, $db, $lang;
|
---|
119 |
|
---|
120 | $ini_val = ( @phpversion() >= '4.0.0' ) ? 'ini_get' : 'get_cfg_var';
|
---|
121 |
|
---|
122 | $width = $height = 0;
|
---|
123 | $type = '';
|
---|
124 |
|
---|
125 | if ( $avatar_mode == 'remote' && preg_match('/^(http:\/\/)?([\w\-\.]+)\:?([0-9]*)\/(.*)$/', $avatar_filename, $url_ary) )
|
---|
126 | {
|
---|
127 | if ( empty($url_ary[4]) )
|
---|
128 | {
|
---|
129 | $error = true;
|
---|
130 | $error_msg = ( !empty($error_msg) ) ? $error_msg . '<br />' . $lang['Incomplete_URL'] : $lang['Incomplete_URL'];
|
---|
131 | return;
|
---|
132 | }
|
---|
133 |
|
---|
134 | $base_get = '/' . $url_ary[4];
|
---|
135 | $port = ( !empty($url_ary[3]) ) ? $url_ary[3] : 80;
|
---|
136 |
|
---|
137 | if ( !($fsock = @fsockopen($url_ary[2], $port, $errno, $errstr)) )
|
---|
138 | {
|
---|
139 | $error = true;
|
---|
140 | $error_msg = ( !empty($error_msg) ) ? $error_msg . '<br />' . $lang['No_connection_URL'] : $lang['No_connection_URL'];
|
---|
141 | return;
|
---|
142 | }
|
---|
143 |
|
---|
144 | @fputs($fsock, "GET $base_get HTTP/1.1\r\n");
|
---|
145 | @fputs($fsock, "HOST: " . $url_ary[2] . "\r\n");
|
---|
146 | @fputs($fsock, "Connection: close\r\n\r\n");
|
---|
147 |
|
---|
148 | unset($avatar_data);
|
---|
149 | while( !@feof($fsock) )
|
---|
150 | {
|
---|
151 | $avatar_data .= @fread($fsock, $board_config['avatar_filesize']);
|
---|
152 | }
|
---|
153 | @fclose($fsock);
|
---|
154 |
|
---|
155 | if (!preg_match('#Content-Length\: ([0-9]+)[^ /][\s]+#i', $avatar_data, $file_data1) || !preg_match('#Content-Type\: image/[x\-]*([a-z]+)[\s]+#i', $avatar_data, $file_data2))
|
---|
156 | {
|
---|
157 | $error = true;
|
---|
158 | $error_msg = ( !empty($error_msg) ) ? $error_msg . '<br />' . $lang['File_no_data'] : $lang['File_no_data'];
|
---|
159 | return;
|
---|
160 | }
|
---|
161 |
|
---|
162 | $avatar_filesize = $file_data1[1];
|
---|
163 | $avatar_filetype = $file_data2[1];
|
---|
164 |
|
---|
165 | if ( !$error && $avatar_filesize > 0 && $avatar_filesize < $board_config['avatar_filesize'] )
|
---|
166 | {
|
---|
167 | $avatar_data = substr($avatar_data, strlen($avatar_data) - $avatar_filesize, $avatar_filesize);
|
---|
168 |
|
---|
169 | $tmp_path = ( !@$ini_val('safe_mode') ) ? '/tmp' : './' . $board_config['avatar_path'] . '/tmp';
|
---|
170 | $tmp_filename = tempnam($tmp_path, uniqid(rand()) . '-');
|
---|
171 |
|
---|
172 | $fptr = @fopen($tmp_filename, 'wb');
|
---|
173 | $bytes_written = @fwrite($fptr, $avatar_data, $avatar_filesize);
|
---|
174 | @fclose($fptr);
|
---|
175 |
|
---|
176 | if ( $bytes_written != $avatar_filesize )
|
---|
177 | {
|
---|
178 | @unlink($tmp_filename);
|
---|
179 | message_die(GENERAL_ERROR, 'Could not write avatar file to local storage. Please contact the board administrator with this message', '', __LINE__, __FILE__);
|
---|
180 | }
|
---|
181 |
|
---|
182 | list($width, $height, $type) = @getimagesize($tmp_filename);
|
---|
183 | }
|
---|
184 | else
|
---|
185 | {
|
---|
186 | $l_avatar_size = sprintf($lang['Avatar_filesize'], round($board_config['avatar_filesize'] / 1024));
|
---|
187 |
|
---|
188 | $error = true;
|
---|
189 | $error_msg = ( !empty($error_msg) ) ? $error_msg . '<br />' . $l_avatar_size : $l_avatar_size;
|
---|
190 | }
|
---|
191 | }
|
---|
192 | else if ( ( file_exists(@phpbb_realpath($avatar_filename)) ) && preg_match('/\.(jpg|jpeg|gif|png)$/i', $avatar_realname) )
|
---|
193 | {
|
---|
194 | if ( $avatar_filesize <= $board_config['avatar_filesize'] && $avatar_filesize > 0 )
|
---|
195 | {
|
---|
196 | preg_match('#image\/[x\-]*([a-z]+)#', $avatar_filetype, $avatar_filetype);
|
---|
197 | $avatar_filetype = $avatar_filetype[1];
|
---|
198 | }
|
---|
199 | else
|
---|
200 | {
|
---|
201 | $l_avatar_size = sprintf($lang['Avatar_filesize'], round($board_config['avatar_filesize'] / 1024));
|
---|
202 |
|
---|
203 | $error = true;
|
---|
204 | $error_msg = ( !empty($error_msg) ) ? $error_msg . '<br />' . $l_avatar_size : $l_avatar_size;
|
---|
205 | return;
|
---|
206 | }
|
---|
207 |
|
---|
208 | list($width, $height, $type) = @getimagesize($avatar_filename);
|
---|
209 | }
|
---|
210 |
|
---|
211 | if ( !($imgtype = check_image_type($avatar_filetype, $error, $error_msg)) )
|
---|
212 | {
|
---|
213 | return;
|
---|
214 | }
|
---|
215 |
|
---|
216 | switch ($type)
|
---|
217 | {
|
---|
218 | // GIF
|
---|
219 | case 1:
|
---|
220 | if ($imgtype != '.gif')
|
---|
221 | {
|
---|
222 | @unlink($tmp_filename);
|
---|
223 | message_die(GENERAL_ERROR, 'Unable to upload file', '', __LINE__, __FILE__);
|
---|
224 | }
|
---|
225 | break;
|
---|
226 |
|
---|
227 | // JPG, JPC, JP2, JPX, JB2
|
---|
228 | case 2:
|
---|
229 | case 9:
|
---|
230 | case 10:
|
---|
231 | case 11:
|
---|
232 | case 12:
|
---|
233 | if ($imgtype != '.jpg' && $imgtype != '.jpeg')
|
---|
234 | {
|
---|
235 | @unlink($tmp_filename);
|
---|
236 | message_die(GENERAL_ERROR, 'Unable to upload file', '', __LINE__, __FILE__);
|
---|
237 | }
|
---|
238 | break;
|
---|
239 |
|
---|
240 | // PNG
|
---|
241 | case 3:
|
---|
242 | if ($imgtype != '.png')
|
---|
243 | {
|
---|
244 | @unlink($tmp_filename);
|
---|
245 | message_die(GENERAL_ERROR, 'Unable to upload file', '', __LINE__, __FILE__);
|
---|
246 | }
|
---|
247 | break;
|
---|
248 |
|
---|
249 | default:
|
---|
250 | @unlink($tmp_filename);
|
---|
251 | message_die(GENERAL_ERROR, 'Unable to upload file', '', __LINE__, __FILE__);
|
---|
252 | }
|
---|
253 |
|
---|
254 | if ( $width > 0 && $height > 0 && $width <= $board_config['avatar_max_width'] && $height <= $board_config['avatar_max_height'] )
|
---|
255 | {
|
---|
256 | $new_filename = uniqid(rand()) . $imgtype;
|
---|
257 |
|
---|
258 | if ( $mode == 'editprofile' && $current_type == USER_AVATAR_UPLOAD && $current_avatar != '' )
|
---|
259 | {
|
---|
260 | user_avatar_delete($current_type, $current_avatar);
|
---|
261 | }
|
---|
262 |
|
---|
263 | if( $avatar_mode == 'remote' )
|
---|
264 | {
|
---|
265 | @copy($tmp_filename, './' . $board_config['avatar_path'] . "/$new_filename");
|
---|
266 | @unlink($tmp_filename);
|
---|
267 | }
|
---|
268 | else
|
---|
269 | {
|
---|
270 | if ( @$ini_val('open_basedir') != '' )
|
---|
271 | {
|
---|
272 | if ( @phpversion() < '4.0.3' )
|
---|
273 | {
|
---|
274 | message_die(GENERAL_ERROR, 'open_basedir is set and your PHP version does not allow move_uploaded_file', '', __LINE__, __FILE__);
|
---|
275 | }
|
---|
276 |
|
---|
277 | $move_file = 'move_uploaded_file';
|
---|
278 | }
|
---|
279 | else
|
---|
280 | {
|
---|
281 | $move_file = 'copy';
|
---|
282 | }
|
---|
283 |
|
---|
284 | if (!is_uploaded_file($avatar_filename))
|
---|
285 | {
|
---|
286 | message_die(GENERAL_ERROR, 'Unable to upload file', '', __LINE__, __FILE__);
|
---|
287 | }
|
---|
288 | $move_file($avatar_filename, './' . $board_config['avatar_path'] . "/$new_filename");
|
---|
289 | }
|
---|
290 |
|
---|
291 | @chmod('./' . $board_config['avatar_path'] . "/$new_filename", 0777);
|
---|
292 |
|
---|
293 | $avatar_sql = ( $mode == 'editprofile' ) ? ", user_avatar = '$new_filename', user_avatar_type = " . USER_AVATAR_UPLOAD : "'$new_filename', " . USER_AVATAR_UPLOAD;
|
---|
294 | }
|
---|
295 | else
|
---|
296 | {
|
---|
297 | $l_avatar_size = sprintf($lang['Avatar_imagesize'], $board_config['avatar_max_width'], $board_config['avatar_max_height']);
|
---|
298 |
|
---|
299 | $error = true;
|
---|
300 | $error_msg = ( !empty($error_msg) ) ? $error_msg . '<br />' . $l_avatar_size : $l_avatar_size;
|
---|
301 | }
|
---|
302 |
|
---|
303 | return $avatar_sql;
|
---|
304 | }
|
---|
305 |
|
---|
306 | function display_avatar_gallery($mode, &$category, &$user_id, &$email, &$current_email, &$coppa, &$username, &$email, &$new_password, &$cur_password, &$password_confirm, &$icq, &$aim, &$msn, &$yim, &$website, &$location, &$occupation, &$interests, &$signature, &$viewemail, &$notifypm, &$popup_pm, &$notifyreply, &$attachsig, &$allowhtml, &$allowbbcode, &$allowsmilies, &$hideonline, &$style, &$language, &$timezone, &$dateformat, &$session_id)
|
---|
307 | {
|
---|
308 | global $board_config, $db, $template, $lang, $images, $theme;
|
---|
309 | global $phpbb_root_path, $phpEx;
|
---|
310 |
|
---|
311 | $dir = @opendir($board_config['avatar_gallery_path']);
|
---|
312 |
|
---|
313 | $avatar_images = array();
|
---|
314 | while( $file = @readdir($dir) )
|
---|
315 | {
|
---|
316 | if( $file != '.' && $file != '..' && !is_file($board_config['avatar_gallery_path'] . '/' . $file) && !is_link($board_config['avatar_gallery_path'] . '/' . $file) )
|
---|
317 | {
|
---|
318 | $sub_dir = @opendir($board_config['avatar_gallery_path'] . '/' . $file);
|
---|
319 |
|
---|
320 | $avatar_row_count = 0;
|
---|
321 | $avatar_col_count = 0;
|
---|
322 | while( $sub_file = @readdir($sub_dir) )
|
---|
323 | {
|
---|
324 | if( preg_match('/(\.gif$|\.png$|\.jpg|\.jpeg)$/is', $sub_file) )
|
---|
325 | {
|
---|
326 | $avatar_images[$file][$avatar_row_count][$avatar_col_count] = $sub_file;
|
---|
327 | $avatar_name[$file][$avatar_row_count][$avatar_col_count] = ucfirst(str_replace("_", " ", preg_replace('/^(.*)\..*$/', '\1', $sub_file)));
|
---|
328 |
|
---|
329 | $avatar_col_count++;
|
---|
330 | if( $avatar_col_count == 5 )
|
---|
331 | {
|
---|
332 | $avatar_row_count++;
|
---|
333 | $avatar_col_count = 0;
|
---|
334 | }
|
---|
335 | }
|
---|
336 | }
|
---|
337 | }
|
---|
338 | }
|
---|
339 |
|
---|
340 | @closedir($dir);
|
---|
341 |
|
---|
342 | @ksort($avatar_images);
|
---|
343 | @reset($avatar_images);
|
---|
344 |
|
---|
345 | if( empty($category) )
|
---|
346 | {
|
---|
347 | list($category, ) = each($avatar_images);
|
---|
348 | }
|
---|
349 | @reset($avatar_images);
|
---|
350 |
|
---|
351 | $s_categories = '<select name="avatarcategory">';
|
---|
352 | while( list($key) = each($avatar_images) )
|
---|
353 | {
|
---|
354 | $selected = ( $key == $category ) ? ' selected="selected"' : '';
|
---|
355 | if( count($avatar_images[$key]) )
|
---|
356 | {
|
---|
357 | $s_categories .= '<option value="' . $key . '"' . $selected . '>' . ucfirst($key) . '</option>';
|
---|
358 | }
|
---|
359 | }
|
---|
360 | $s_categories .= '</select>';
|
---|
361 |
|
---|
362 | $s_colspan = 0;
|
---|
363 | for($i = 0; $i < count($avatar_images[$category]); $i++)
|
---|
364 | {
|
---|
365 | $template->assign_block_vars("avatar_row", array());
|
---|
366 |
|
---|
367 | $s_colspan = max($s_colspan, count($avatar_images[$category][$i]));
|
---|
368 |
|
---|
369 | for($j = 0; $j < count($avatar_images[$category][$i]); $j++)
|
---|
370 | {
|
---|
371 | $template->assign_block_vars('avatar_row.avatar_column', array(
|
---|
372 | "AVATAR_IMAGE" => $board_config['avatar_gallery_path'] . '/' . $category . '/' . $avatar_images[$category][$i][$j],
|
---|
373 | "AVATAR_NAME" => $avatar_name[$category][$i][$j])
|
---|
374 | );
|
---|
375 |
|
---|
376 | $template->assign_block_vars('avatar_row.avatar_option_column', array(
|
---|
377 | "S_OPTIONS_AVATAR" => $avatar_images[$category][$i][$j])
|
---|
378 | );
|
---|
379 | }
|
---|
380 | }
|
---|
381 |
|
---|
382 | $params = array('coppa', 'user_id', 'username', 'email', 'current_email', 'cur_password', 'new_password', 'password_confirm', 'icq', 'aim', 'msn', 'yim', 'website', 'location', 'occupation', 'interests', 'signature', 'viewemail', 'notifypm', 'popup_pm', 'notifyreply', 'attachsig', 'allowhtml', 'allowbbcode', 'allowsmilies', 'hideonline', 'style', 'language', 'timezone', 'dateformat');
|
---|
383 |
|
---|
384 | $s_hidden_vars = '<input type="hidden" name="sid" value="' . $session_id . '" /><input type="hidden" name="agreed" value="true" /><input type="hidden" name="avatarcatname" value="' . $category . '" />';
|
---|
385 |
|
---|
386 | for($i = 0; $i < count($params); $i++)
|
---|
387 | {
|
---|
388 | $s_hidden_vars .= '<input type="hidden" name="' . $params[$i] . '" value="' . str_replace('"', '"', $$params[$i]) . '" />';
|
---|
389 | }
|
---|
390 |
|
---|
391 | $template->assign_vars(array(
|
---|
392 | 'L_AVATAR_GALLERY' => $lang['Avatar_gallery'],
|
---|
393 | 'L_SELECT_AVATAR' => $lang['Select_avatar'],
|
---|
394 | 'L_RETURN_PROFILE' => $lang['Return_profile'],
|
---|
395 | 'L_CATEGORY' => $lang['Select_category'],
|
---|
396 |
|
---|
397 | 'S_CATEGORY_SELECT' => $s_categories,
|
---|
398 | 'S_COLSPAN' => $s_colspan,
|
---|
399 | 'S_PROFILE_ACTION' => append_sid("profile.$phpEx?mode=$mode"),
|
---|
400 | 'S_HIDDEN_FIELDS' => $s_hidden_vars)
|
---|
401 | );
|
---|
402 |
|
---|
403 | return;
|
---|
404 | }
|
---|
405 |
|
---|
406 | ?>
|
---|