account.php 12.7 KB
Newer Older
Dries's avatar
Dries committed
1
<?
Dries's avatar
   
Dries committed
2
3
include "config.inc";
include "functions.inc";
Dries's avatar
Dries committed
4

5
6
7
8
function dbsave($dbase, $data, $id=0) {
  foreach ($data as $key=>$value) {
    if ($key == "passwd") { $query .= "$key=PASSWORD('". addslashes($value) ."'), "; }
    else { $query .= "$key='". addslashes($value) ."', "; }
Dries's avatar
Dries committed
9
  }
10
  $query = substr($query, 0, -2);
Dries's avatar
Dries committed
11
  dbconnect();
12
13
14
15
16
17
18
19
  if (!empty($id)) { mysql_query("UPDATE $dbase SET $query WHERE id=$id") or die(mysql_error()); return $id; }
  else { mysql_query("INSERT INTO $dbase SET $query") or die(mysql_error()); return mysql_insert_id(); }
}
function showLogin($userid = "") {
  print("<FORM ACTION=\"account.php\" METHOD=post>\n");
  print("<TABLE BORDER=0 CELLPADDING=2 CELLSPACING=2>\n");
  print("<TR><TH>User ID:</TH><TD><INPUT NAME=userid VALUE=\"$userid\"></TD></TR>\n");
  print("<TR><TH>Password:</TH><TD><INPUT NAME=passwd TYPE=password></TD></TR>\n");
20
  print("<TR><TD ALIGN=center><INPUT NAME=op TYPE=submit VALUE=\"Login\"></TD></TR>\n");
natrak's avatar
Fixed:    
natrak committed
21
  print("<TR><TD ALIGN=center><A HREF=\"account.php?op=new\">Register</A> as new user.</A></TD></TR>\n");
22
23
24
25
26
27
28
29
30
31
32
  print("<TR><TD COLSPAN=2>$user->ublock</TD></TR>\n");
  print("</TABLE>\n");
  print("</FORM>\n");
}
function showAccess() {
  global $user, $access;
  foreach ($access as $key=>$value) if ($user->access & $value) $result .= "$key<BR>";
  return $result;
}
function showUser() {
  include('theme.inc');
Dries's avatar
Dries committed
33
  $theme->header();
34
  if (!empty($user->userid)) {
natrak's avatar
natrak committed
35
    print("<P>Welcome $user->name! This is <B>your</B> user info page. There are many more, but this one is yours. You are probably most interested in editing something, but if you need to kill some time, this place is as good as any other place.</P>\n");
36
37
38
39
40
41
42
43
    print("<TABLE BORDER=0 CELLPADDING=2 CELLSPACING=2>\n");
    print("<TR><TD><B>Name:</B></TD><TD>$user->name</TD></TR>\n");
    print("<TR><TD><B>User ID:</B></TD><TD>$user->userid</TD></TR>\n");
    print("<TR><TD><B>E-mail:</B></TD><TD>$user->email</TD></TR>\n");
    if ($user->access > 0) print("<TR><TD VALIGN=top><B>Access:</B></TD><TD>". showAccess() ."</TD></TR>\n");
    print("<TR><TD><B>Bio:</B></TD><TD>$user->bio</TD></TR>\n");
    print("<TR><TD COLSPAN=2>$user->ublock</TD></TR>\n");
    print("</TABLE>\n");
Dries's avatar
Dries committed
44
  }
45
  else { showLogin($userid); }
Dries's avatar
Dries committed
46
47
  $theme->footer();
}
48
49
function newUser($user = "", $error="") {
  include('theme.inc');
Dries's avatar
Dries committed
50
  $theme->header();
51
52
53
  print("<FORM ACTION=\"account.php\" METHOD=post>\n");
  print("<TABLE BORDER=0 CELLPADDING=2 CELLSPACING=2>\n");
  if (!empty($error)) { print("<TR><TD COLSPAN=2>$error</TD></TR>\n"); }
natrak's avatar
natrak committed
54
55
56
  print("<TR><TH>Name:</TH><TD><INPUT NAME=\"new[name]\" VALUE=\"$new[name]\"></TD></TR>\n");
  print("<TR><TH>User ID:</TR><TD><INPUT NAME=\"new[userid]\" VALUE=\"$new[userid]\"></TD></TR>\n");
  print("<TR><TH>E-mail:</TH><TD><INPUT NAME=\"new[email]\" VALUE=\"$new[email]\"></TD></TR>\n");
57
  print("<TR><TD ALIGN=right COLSPAN=2><INPUT NAME=op TYPE=submit VALUE=\"Register\"></TD></TR>\n");
58
59
  print("</TABLE>\n");
  print("</FORM>\n");
Dries's avatar
Dries committed
60
61
  $theme->footer();
}
62
function validateUser($user) {
Dries's avatar
   
Dries committed
63
  include "ban.inc";
Dries's avatar
   
Dries committed
64

65
66
67
  ### Verify username and e-mail address:
  $user[userid] = trim($user[userid]);
  if (empty($user[email]) || (!eregi("^[_\.0-9a-z-]+@([0-9a-z][0-9a-z-]+\.)+[a-z]{2,3}$", $user[email]))) $rval = "the specified e-mail address is not valid.<BR>";
Dries's avatar
   
Dries committed
68
  if (empty($user[userid]) || (ereg("[^a-zA-Z0-9_-]", $user[userid]))) $rval = "the specified username '$new[userid]' is not valid.<BR>";
69
  if (strlen($user[userid]) > 15) $rval = "the specified username is too long: it must be less than 15 characters.";
Dries's avatar
   
Dries committed
70
71
72
73

  ### Check to see whether the username or e-mail address are banned:
  if ($ban = ban_match($user[userid], $type[usernames])) $rval = "the specified username is banned  for the following reason: <I>$ban->reason</I>.";
  if ($ban = ban_match($user[email], $type[addresses])) $rval = "the specified e-mail address is banned for the following reason: <I>$ban->reason</I>.";
Dries's avatar
Dries committed
74

Dries's avatar
   
Dries committed
75
  ### Verify whether username and e-mail address are unique:
Dries's avatar
Dries committed
76
  dbconnect();
Dries's avatar
   
Dries committed
77
78
  if (mysql_num_rows(mysql_query("SELECT userid FROM users WHERE LOWER(userid)=LOWER('$user[userid]')")) > 0) $rval = "the specified username is already taken.";
  if (mysql_num_rows(mysql_query("SELECT email FROM users WHERE LOWER(email)=LOWER('$user[email]')")) > 0) $rval = "the specified e-mail address is already registered.";
79
  return($rval);
Dries's avatar
Dries committed
80
}
81
82
function makePassword($min_length=6) {
  mt_srand((double)microtime() * 1000000);
Dries's avatar
   
Dries committed
83
84
  $words = array("foo","bar","guy","neo","tux","moo","sun","god","geek","nerd","fish","hack","star","mice","warp","moon","hero","cola","girl","fish","java","boss");
  while(strlen($password) < $min_length) $password .= $words[mt_rand(0, count($words))];
85
  return $password;
Dries's avatar
Dries committed
86
87
}

88
switch ($op) {
Dries's avatar
Dries committed
89
  case "Login":
90
91
92
93
    session_start();
    $user = new User($userid,$passwd);
    if ($user->valid()) { session_register("user"); }
    showUser();
Dries's avatar
Dries committed
94
    break;
95
96
  case "new":
    newUser();
Dries's avatar
Dries committed
97
    break;
natrak's avatar
natrak committed
98
99
100
  case "logout":
    session_start();
    session_destroy();
natrak's avatar
natrak committed
101
    unset($user);
102
    showUser();
Dries's avatar
Dries committed
103
    break;
104
105
106
107
108
  case "Register":
    if ($rval = validateUser($new)) { newUser($new, "<B>Error: $rval</B>"); }
    else {
      include('theme.inc');
      $new[passwd] = makePassword();
Dries's avatar
   
Dries committed
109
      dbsave("users", $new);
110
111
112
      $theme->header();
      if ($system == 1) {
        print("Your password is: <B>$new[passwd]</B><BR>");
natrak's avatar
Fixed:    
natrak committed
113
        print("<A HREF=\"account.php?op=Login&userid=$new[userid]&passwd=$new[passwd]\">Login</A> to change your personal settings.");
114
      } else {
115
        $message = "Your $sitename member account has been created succesfully.  To be able to use it you must login using the information below.  Please save this mail for further reference.\n\n   username: $new[userid]\n     e-mail: $newu[email]\n   password: $new[passwd]\n\nThis password is generated by a randomizer.  It is recommended that you change this password immediately.\n\n$contact_signature";
116
        $subject = "Account details for $sitename";
117
        mail($new[email], $subject, $message, "From: $contact_email\nX-Mailer: PHP/" . phpversion());
Dries's avatar
   
Dries committed
118
        print("Your member account has been created and the details necessary to login have been sent to your e-mail account <B>$new[email]</B>.  Once you received the account confirmation, hit <A HREF=\"account.php\">this link</A> to login.");
119
120
121
      }
      $theme->footer();
    }
Dries's avatar
Dries committed
122
    break;
123
  case "edituser":
natrak's avatar
natrak committed
124
    if ($user->valid() == 0) { showLogin(); }
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
    include('theme.inc');
    $theme->header();
    print("<FORM ACTION=\"account.php\" METHOD=post>\n");
    print("<B>Real name:</B><BR>\n");
    print("<INPUT NAME=\"edit[name]\" MAXLENGTH=55 SIZE=30 VALUE=\"$user->name\"><BR>\n");
    print("<I>Optional.</I><P>\n");
    print("<B>Real e-mail address:</B><BR>\n");
    print("<INPUT NAME=\"edit[email]\" MAXLENGTH=55 SIZE=30 VALUE=\"$user->email\"><BR>\n");
    print("<I>Required, but never displayed publicly: needed in case you lose your password.</I><P>\n");
    print("<B>Fake e-mail address:</B><BR>\n");
    print("<INPUT NAME=\"edit[femail]\" MAXLENGTH=55 SIZE=30 VALUE=\"$user->femail\"><BR>\n");
    print("<I>Optional, and displayed publicly by your comments. You may spam proof it if you want.</I><P>\n");
    print("<B>URL of homepage:</B><BR>\n");
    print("<INPUT NAME=\"edit[url]\" MAXLENGTH=55 SIZE=30 VALUE=\"$user->url\"><BR>\n");
    print("<I>Optional, but make sure you enter fully qualified URLs only. That is, remember to include \"http://\".</I><P>\n");
    print("<B>Bio:</B> (255 char limit)<BR>\n");
    print("<TEXTAREA NAME=\"edit[bio]\" COLS=35 ROWS=5 WRAP=virtual>$user->bio</TEXTAREA><BR>\n");
    print("<I>Optional. This biographical information is publicly displayed on your user page.</I><P>\n");
    print("<B>User block:</B> (255 char limit)<BR>\n");
    print("<TEXTAREA NAME=\"edit[ublock]\" COLS=35 ROWS=5 WRAP=virtual>$user->ublock</TEXTAREA><BR>\n");
    print("<INPUT NAME=\"edit[ublockon]\" TYPE=checkbox". ($user->ublockon == 1 ? " CHECKED" : "") .">Enable user block<BR>\n");
    print("<I>Enable the checkbox and whatever you enter below will appear on your costum main page.</I><P>\n");
    print("<B>Password:</B><BR>\n");
    print("<INPUT TYPE=password NAME=\"edit[pass1]\" SIZE=10 MAXLENGTH=20> <INPUT TYPE=password NAME=edit[pass2] SIZE=10 MAXLENGTH=20><BR>\n");
    print("<I>Enter your new password twice if you want to change your current password or leave it blank if you are happy with your current password.</I><P>\n");
150
    print("<INPUT TYPE=submit NAME=op VALUE=\"Save user information\"><BR>\n");
151
152
    print("</FORM>\n");
    $theme->footer();
Dries's avatar
Dries committed
153
    break;
154
  case "editpage":
Dries's avatar
   
Dries committed
155
    include('config.inc');
156
157
158
159
    include('theme.inc');
    $theme->header();
    print("<FORM ACTION=\"account.php\" METHOD=post>\n");
    print("<B>Theme:</B><BR>\n");
Dries's avatar
   
Dries committed
160
161
162
163

    ### Loop (dynamically) through all available themes:
    $handle = opendir('themes');
    while ($file = readdir($handle)) {
Dries's avatar
   
Dries committed
164
      if(!ereg("^\.",$file) && file_exists("themes/$file/theme.class.php")) {
Dries's avatar
   
Dries committed
165
        $options .= "<OPTION VALUE=\"$file\"". (((!empty($userinfo[theme])) && ($file == $cfg_theme)) || ($user->theme == $file) ? " SELECTED" : "") .">$file</OPTION>";
166
167
      }
    }
Dries's avatar
   
Dries committed
168
169
    closedir($handle);

Dries's avatar
   
Dries committed
170
    if ($userinfo[theme]=="") $userinfo[theme] = $cfg_theme;
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
    print("<SELECT NAME=\"edit[theme]\">$options</SELECT><BR>\n");
    print("<I>Changes the look and feel of the site.</I><P>\n");
    print("<B>Maximum number of stories:</B><BR>\n");
    print("<INPUT NAME=\"edit[storynum]\" MAXLENGTH=3 SIZE=3 VALUE=\"$user->storynum\"><P>\n");
    $options  = "<OPTION VALUE=\"nocomments\"". ($user->umode == 'nocomments' ? " SELECTED" : "") .">No comments</OPTION>";
    $options .= "<OPTION VALUE=\"nested\"". ($user->umode == 'nested' ? " SELECTED" : "") .">Nested</OPTION>";
    $options .= "<OPTION VALUE=\"flat\"". ($user->umode == 'flat' ? " SELECTED" : "") .">Flat</OPTION>";
    $options .= "<OPTION VALUE=\"threaded\"". ($user->umode == 'threaded' ? " SELECTED" : "") .">Threaded</OPTION>";
    print("<B>Display mode:</B><BR>\n");
    print("<SELECT NAME=\"edit[umode]\">$options</SELECT><P>\n");
    $options  = "<OPTION VALUE=0". ($user->uorder == 0 ? " SELECTED" : "") .">Oldest first</OPTION>";
    $options .= "<OPTION VALUE=1". ($user->uorder == 1 ? " SELECTED" : "") .">Newest first</OPTION>";
    $options .= "<OPTION VALUE=2". ($user->uorder == 2 ? " SELECTED" : "") .">Highest scoring first</OPTION>";
    print("<B>Sort order:</B><BR>\n");
    print("<SELECT NAME=\"edit[uorder]\">$options</SELECT><P>\n");
    $options  = "<OPTION VALUE=\"-1\"". ($user->thold == -1 ? " SELECTED" : "") .">-1: Display uncut and raw comments.</OPTION>";
    $options .= "<OPTION VALUE=0". ($user->thold == 0 ? " SELECTED" : "") .">0: Display almost all comments.</OPTION>";
    $options .= "<OPTION VALUE=1". ($user->thold == 1 ? " SELECTED" : "") .">1: Display almost no anonymous comments.</OPTION>";
    $options .= "<OPTION VALUE=2". ($user->thold == 2 ? " SELECTED" : "") .">2: Display comments with score +2 only.</OPTION>";
    $options .= "<OPTION VALUE=3". ($user->thold == 3 ? " SELECTED" : "") .">3: Display comments with score +3 only.</OPTION>";
    $options .= "<OPTION VALUE=4". ($user->thold == 4 ? " SELECTED" : "") .">4: Display comments with score +4 only.</OPTION>";
    $options .= "<OPTION VALUE=5". ($user->thold == 5 ? " SELECTED" : "") .">5: Display comments with score +5 only.</OPTION>";
    print("<B>Threshold:</B><BR>\n");
    print("<SELECT NAME=\"edit[thold]\">$options</SELECT><BR>\n");
    print("<I>Comments that scored less than this setting will be ignored. Anonymous comments start at 0, comments of people logged on start at 1 and moderators can add and subtract points.</I><P>\n");
    print("<B>Singature:</B> (255 char limit)<BR>\n");
    print("<TEXTAREA NAME=\"edit[signature]\" COLS=35 ROWS=5 WRAP=virtual>$user->signature</TEXTAREA><BR>\n");
    print("<I>Optional. This information will be publicly displayed at the end of your comments. </I><P>\n");
199
    print("<INPUT TYPE=submit NAME=op VALUE=\"Save page settings\"><BR>\n");
200
201
    print("</FORM>\n");
    $theme->footer();
Dries's avatar
Dries committed
202
    break;
203
204
205
206
207
208
209
210
211
212
  case "Save user information":
    if ($user->valid()) {
      $data[name] = $edit[name];
      $data[email] = $edit[email];
      $data[femail] = $edit[femail];
      $data[url] = $edit[url];
      $data[bio] = $edit[bio];
      $data[ublock] = $edit[ublock];
      $data[ublockon] = $edit[ublockon];
      if ($edit[pass1] == $edit[pass2] && !empty($edit[pass1])) { $data[passwd] = $edit[pass1]; }
Dries's avatar
   
Dries committed
213
      dbsave("users", $data, $user->id);
214
215
216
      $user->update();
    }
    showUser();
Dries's avatar
Dries committed
217
    break;
218
219
220
221
222
223
224
225
  case "Save page settings":
    if ($user->valid()) {
      $data[theme] = $edit[theme];
      $data[storynum] = $edit[storynum];
      $data[umode] = $edit[umode];
      $data[uorder] = $edit[uorder];
      $data[thold] = $edit[thold];
      $data[signature] = $edit[signature];
Dries's avatar
   
Dries committed
226
      dbsave("users", $data, $user->id);
227
228
229
      $user->update();
    }
    showUser();
Dries's avatar
Dries committed
230
    break;
231
  default: showUser();
Dries's avatar
Dries committed
232
233
}
?>