Просмотр файла admin/admin_users.php

Конкурс дизайнеров на 15000 рублей
Большой форум,библиотека креативами
Размер файла: 51.71Kb 
  1. <?php
  2. /***************************************************************************
  3.  *                                mides.ru
  4.  *                            -------------------
  5.  ***************************************************************************/
  6. define('IN_PHPBB', 1);
  7.  
  8. if( !empty($setmodules) )
  9. {
  10. 	$filename = basename(__FILE__);
  11. 	$module['Users']['Manage'] = $filename;
  12.  
  13. 	return;
  14. }
  15.  
  16. $phpbb_root_path = './../';
  17. require($phpbb_root_path . 'extension.inc');
  18. require('./pagestart.' . $phpEx);
  19. require($phpbb_root_path . 'includes/bbcode.'.$phpEx);
  20. require($phpbb_root_path . 'includes/functions_post.'.$phpEx);
  21. require($phpbb_root_path . 'includes/functions_selects.'.$phpEx);
  22. require($phpbb_root_path . 'includes/functions_validate.'.$phpEx);
  23.  
  24. $html_entities_match = array('#<#', '#>#');
  25. $html_entities_replace = array('&lt;', '&gt;');
  26.  
  27. if( isset( $HTTP_POST_VARS['mode'] ) || isset( $HTTP_GET_VARS['mode'] ) )
  28. {
  29. 	$mode = ( isset( $HTTP_POST_VARS['mode']) ) ? $HTTP_POST_VARS['mode'] : $HTTP_GET_VARS['mode'];
  30. 	$mode = htmlspecialchars($mode);
  31. }
  32. else
  33. {
  34. 	$mode = '';
  35. }
  36.  
  37. if ( $mode == 'edit' || $mode == 'save' && ( isset($HTTP_POST_VARS['username']) || isset($HTTP_GET_VARS[POST_USERS_URL]) || isset( $HTTP_POST_VARS[POST_USERS_URL]) ) )
  38. {
  39. attachment_quota_settings('user', $HTTP_POST_VARS['submit'], $mode);
  40.  
  41. 	if ( ( $mode == 'save' && isset( $HTTP_POST_VARS['submit'] ) ) || isset( $HTTP_POST_VARS['avatargallery'] ) || isset( $HTTP_POST_VARS['submitavatar'] ) || isset( $HTTP_POST_VARS['cancelavatar'] ) )
  42. 	{
  43. 		$user_id = intval($HTTP_POST_VARS['id']);
  44.  
  45. 		if (!($this_userdata = get_userdata($user_id)))
  46. 		{
  47. 			message_die(GENERAL_MESSAGE, $lang['No_user_id_specified'] );
  48. 		}
  49.  
  50. 		if( $HTTP_POST_VARS['deleteuser'] && ( $userdata['user_id'] != $user_id ) )
  51. 		{
  52. 			$sql = "SELECT g.group_id 
  53. 				FROM " . USER_GROUP_TABLE . " ug, " . GROUPS_TABLE . " g  
  54. 				WHERE ug.user_id = $user_id 
  55. 					AND g.group_id = ug.group_id 
  56. 					AND g.group_single_user = 1";
  57. 			if( !($result = $db->sql_query($sql)) )
  58. 			{
  59. 				message_die(GENERAL_ERROR, 'Could not obtain group information for this user', '', __LINE__, __FILE__, $sql);
  60. 			}
  61. // Πᬮ ͨ᳠
  62. $sql = "UPDATE " . SHOUTBOX_TABLE . "
  63. 	SET shout_user_id = " . DELETED . ", shout_username = '$username' 
  64. 	WHERE shout_user_id = $user_id";
  65. 	if( !$db->sql_query($sql) )
  66. 	{
  67. 		message_die(GENERAL_ERROR, 'Could not update shouts for this user', '', __LINE__, __FILE__, $sql);
  68. 	}
  69. // ˮ ͨ᳠
  70. 			$row = $db->sql_fetchrow($result);
  71. 			
  72. 			$sql = "UPDATE " . POSTS_TABLE . "
  73. 				SET poster_id = " . DELETED . ", post_username = '" . str_replace("\\'", "''", addslashes($this_userdata['username'])) . "' 
  74. 				WHERE poster_id = $user_id";
  75. 			if( !$db->sql_query($sql) )
  76. 			{
  77. 				message_die(GENERAL_ERROR, 'Could not update posts for this user', '', __LINE__, __FILE__, $sql);
  78. 			}
  79.  
  80. 			$sql = "UPDATE " . TOPICS_TABLE . "
  81. 				SET topic_poster = " . DELETED . " 
  82. 				WHERE topic_poster = $user_id";
  83. 			if( !$db->sql_query($sql) )
  84. 			{
  85. 				message_die(GENERAL_ERROR, 'Could not update topics for this user', '', __LINE__, __FILE__, $sql);
  86. 			}
  87. 			
  88. 			$sql = "UPDATE " . VOTE_USERS_TABLE . "
  89. 				SET vote_user_id = " . DELETED . "
  90. 				WHERE vote_user_id = $user_id";
  91. 			if( !$db->sql_query($sql) )
  92. 			{
  93. 				message_die(GENERAL_ERROR, 'Could not update votes for this user', '', __LINE__, __FILE__, $sql);
  94. 			}
  95. 			
  96. 			$sql = "UPDATE " . GROUPS_TABLE . "
  97. 				SET group_moderator = " . $userdata['user_id'] . "
  98. 				WHERE group_moderator = $user_id";
  99. 			if( !$db->sql_query($sql) )
  100. 			{
  101. 				message_die(GENERAL_ERROR, 'Could not update group moderators', '', __LINE__, __FILE__, $sql);
  102. 			}
  103.  
  104. 			$sql = "DELETE FROM " . USERS_TABLE . "
  105. 				WHERE user_id = $user_id";
  106. 			if( !$db->sql_query($sql) )
  107. 			{
  108. 				message_die(GENERAL_ERROR, 'Could not delete user', '', __LINE__, __FILE__, $sql);
  109. 			}
  110.  
  111. 			$sql = "DELETE FROM " . USER_GROUP_TABLE . "
  112. 				WHERE user_id = $user_id";
  113. 			if( !$db->sql_query($sql) )
  114. 			{
  115. 				message_die(GENERAL_ERROR, 'Could not delete user from user_group table', '', __LINE__, __FILE__, $sql);
  116. 			}
  117.  
  118. 			$sql = "DELETE FROM " . GROUPS_TABLE . "
  119. 				WHERE group_id = " . $row['group_id'];
  120. 			if( !$db->sql_query($sql) )
  121. 			{
  122. 				message_die(GENERAL_ERROR, 'Could not delete group for this user', '', __LINE__, __FILE__, $sql);
  123. 			}
  124.  
  125. 			$sql = "DELETE FROM " . AUTH_ACCESS_TABLE . "
  126. 				WHERE group_id = " . $row['group_id'];
  127. 			if( !$db->sql_query($sql) )
  128. 			{
  129. 				message_die(GENERAL_ERROR, 'Could not delete group for this user', '', __LINE__, __FILE__, $sql);
  130. 			}
  131.  
  132. 			$sql = "DELETE FROM " . TOPICS_WATCH_TABLE . "
  133. 				WHERE user_id = $user_id";
  134. 			if ( !$db->sql_query($sql) )
  135. 			{
  136. 				message_die(GENERAL_ERROR, 'Could not delete user from topic watch table', '', __LINE__, __FILE__, $sql);
  137. 			}
  138. 			
  139. 			$sql = "DELETE FROM " . BANLIST_TABLE . "
  140. 				WHERE ban_userid = $user_id";
  141. 			if ( !$db->sql_query($sql) )
  142. 			{
  143. 				message_die(GENERAL_ERROR, 'Could not delete user from banlist table', '', __LINE__, __FILE__, $sql);
  144. 			}
  145.  
  146. 			$sql = "DELETE FROM " . SESSIONS_TABLE . "
  147. 				WHERE session_user_id = $user_id";
  148. 			if ( !$db->sql_query($sql) )
  149. 			{
  150. 				message_die(GENERAL_ERROR, 'Could not delete sessions for this user', '', __LINE__, __FILE__, $sql);
  151. 			}
  152. 			
  153. 			$sql = "DELETE FROM " . SESSIONS_KEYS_TABLE . "
  154. 				WHERE user_id = $user_id";
  155. 			if ( !$db->sql_query($sql) )
  156. 			{
  157. 				message_die(GENERAL_ERROR, 'Could not delete auto-login keys for this user', '', __LINE__, __FILE__, $sql);
  158. 			}
  159.  
  160. 			$sql = "SELECT privmsgs_id
  161. 				FROM " . PRIVMSGS_TABLE . "
  162. 				WHERE privmsgs_from_userid = $user_id 
  163. 					OR privmsgs_to_userid = $user_id";
  164. 			if ( !($result = $db->sql_query($sql)) )
  165. 			{
  166. 				message_die(GENERAL_ERROR, 'Could not select all users private messages', '', __LINE__, __FILE__, $sql);
  167. 			}
  168.  
  169. 			while ( $row_privmsgs = $db->sql_fetchrow($result) )
  170. 			{
  171. 				$mark_list[] = $row_privmsgs['privmsgs_id'];
  172. 			}
  173. 			
  174. 			if ( count($mark_list) )
  175. 			{
  176. 				$delete_sql_id = implode(', ', $mark_list);
  177. 				
  178. 				$delete_text_sql = "DELETE FROM " . PRIVMSGS_TEXT_TABLE . "
  179. 					WHERE privmsgs_text_id IN ($delete_sql_id)";
  180. 				$delete_sql = "DELETE FROM " . PRIVMSGS_TABLE . "
  181. 					WHERE privmsgs_id IN ($delete_sql_id)";
  182. 				
  183. 				if ( !$db->sql_query($delete_sql) )
  184. 				{
  185. 					message_die(GENERAL_ERROR, 'Could not delete private message info', '', __LINE__, __FILE__, $delete_sql);
  186. 				}
  187. 				
  188. 				if ( !$db->sql_query($delete_text_sql) )
  189. 				{
  190. 					message_die(GENERAL_ERROR, 'Could not delete private message text', '', __LINE__, __FILE__, $delete_text_sql);
  191. 				}
  192. 			}
  193.  
  194. 			$message = $lang['User_deleted'] . '<br /><br />' . sprintf($lang['Click_return_useradmin'], '<a href="' . append_sid("admin_users.$phpEx") . '">', '</a>') . '<br /><br />' . sprintf($lang['Click_return_admin_index'], '<a href="' . append_sid("index.$phpEx?pane=right") . '">', '</a>');
  195.  
  196. 			message_die(GENERAL_MESSAGE, $message);
  197. 		}
  198.  
  199. 		$username = ( !empty($HTTP_POST_VARS['username']) ) ? phpbb_clean_username($HTTP_POST_VARS['username']) : '';
  200. 		$email = ( !empty($HTTP_POST_VARS['email']) ) ? trim(strip_tags(htmlspecialchars( $HTTP_POST_VARS['email'] ) )) : '';
  201. 		$nic_color = ( !empty($HTTP_POST_VARS['nic_color']) ) ? trim(strip_tags(htmlspecialchars( $HTTP_POST_VARS['nic_color'] ) )) : '';
  202.  
  203. 		$password = ( !empty($HTTP_POST_VARS['password']) ) ? trim(strip_tags(htmlspecialchars( $HTTP_POST_VARS['password'] ) )) : '';
  204. 		$password_confirm = ( !empty($HTTP_POST_VARS['password_confirm']) ) ? trim(strip_tags(htmlspecialchars( $HTTP_POST_VARS['password_confirm'] ) )) : '';
  205.  
  206. 		$icq = ( !empty($HTTP_POST_VARS['icq']) ) ? trim(strip_tags( $HTTP_POST_VARS['icq'] ) ) : '';
  207. 		$aim = ( !empty($HTTP_POST_VARS['aim']) ) ? trim(strip_tags( $HTTP_POST_VARS['aim'] ) ) : '';
  208. 		$msn = ( !empty($HTTP_POST_VARS['msn']) ) ? trim(strip_tags( $HTTP_POST_VARS['msn'] ) ) : '';
  209. 		$yim = ( !empty($HTTP_POST_VARS['yim']) ) ? trim(strip_tags( $HTTP_POST_VARS['yim'] ) ) : '';
  210.  
  211. 		$website = ( !empty($HTTP_POST_VARS['website']) ) ? trim(strip_tags( $HTTP_POST_VARS['website'] ) ) : '';
  212. 		$location = ( !empty($HTTP_POST_VARS['location']) ) ? trim(strip_tags( $HTTP_POST_VARS['location'] ) ) : '';
  213. 		$occupation = ( !empty($HTTP_POST_VARS['occupation']) ) ? trim(strip_tags( $HTTP_POST_VARS['occupation'] ) ) : '';
  214. 		$interests = ( !empty($HTTP_POST_VARS['interests']) ) ? trim(strip_tags( $HTTP_POST_VARS['interests'] ) ) : '';
  215. 		$number = ( !empty($HTTP_POST_VARS['number']) ) ? trim(strip_tags( $HTTP_POST_VARS['number'] ) ) : '';
  216. 		$gender = ( isset($HTTP_POST_VARS['gender']) ) ? intval ($HTTP_POST_VARS['gender']) : 0;
  217.  
  218. 		if (isset($HTTP_POST_VARS['birthday']) )
  219. 		{
  220. 			$birthday = intval ($HTTP_POST_VARS['birthday']);
  221. 			$b_day = realdate('j',$birthday);
  222. 			$b_md = realdate('n',$birthday);
  223. 			$b_year = realdate('Y',$birthday);
  224. 		} else
  225. 		{
  226. 			$b_day = ( isset($HTTP_POST_VARS['b_day']) ) ? intval ($HTTP_POST_VARS['b_day']) : 0;
  227. 			$b_md = ( isset($HTTP_POST_VARS['b_md']) ) ? intval ($HTTP_POST_VARS['b_md']) : 0;
  228. 			$b_year = ( isset($HTTP_POST_VARS['b_year']) ) ? intval ($HTTP_POST_VARS['b_year']) : 0;
  229. 			$birthday = mkrealdate($b_day,$b_md,$b_year);
  230. 		}
  231. 		$next_birthday_greeting = ( !empty($HTTP_POST_VARS['next_birthday_greeting']) ) ? intval( $HTTP_POST_VARS['next_birthday_greeting'] ) : 0;
  232.  
  233. 		$signature = ( !empty($HTTP_POST_VARS['signature']) ) ? trim(str_replace('<br />', "\n", $HTTP_POST_VARS['signature'] ) ) : '';
  234.  
  235. 		validate_optional_fields($icq, $aim, $msn, $yim, $website, $location, $occupation, $interests, $signature);
  236.  
  237. 		$viewemail = ( isset( $HTTP_POST_VARS['viewemail']) ) ? ( ( $HTTP_POST_VARS['viewemail'] ) ? TRUE : 0 ) : 0;
  238. 		$allowviewonline = ( isset( $HTTP_POST_VARS['hideonline']) ) ? ( ( $HTTP_POST_VARS['hideonline'] ) ? 0 : TRUE ) : TRUE;
  239. 		$notifyreply = ( isset( $HTTP_POST_VARS['notifyreply']) ) ? ( ( $HTTP_POST_VARS['notifyreply'] ) ? TRUE : 0 ) : 0;
  240. 		$notifypm = ( isset( $HTTP_POST_VARS['notifypm']) ) ? ( ( $HTTP_POST_VARS['notifypm'] ) ? TRUE : 0 ) : TRUE;
  241. 		$games_block_pm = ( isset($HTTP_POST_VARS['games_block_pm']) ) ? ( ($HTTP_POST_VARS['games_block_pm']) ? TRUE : 0 ) : TRUE;
  242. 		$popuppm = ( isset( $HTTP_POST_VARS['popup_pm']) ) ? ( ( $HTTP_POST_VARS['popup_pm'] ) ? TRUE : 0 ) : TRUE;
  243. $gb_email = ( isset($HTTP_POST_VARS['gb_email']) ) ? ( ($HTTP_POST_VARS['gb_email']) ? TRUE : 0 ) : TRUE;
  244. $gb_can = ( isset($HTTP_POST_VARS['gb_can']) ) ? ( ($HTTP_POST_VARS['gb_can']) ? TRUE : 0 ) : TRUE;
  245. 		$attachsig = ( isset( $HTTP_POST_VARS['attachsig']) ) ? ( ( $HTTP_POST_VARS['attachsig'] ) ? TRUE : 0 ) : 0;
  246.  
  247. 		$allowhtml = ( isset( $HTTP_POST_VARS['allowhtml']) ) ? intval( $HTTP_POST_VARS['allowhtml'] ) : $board_config['allow_html'];
  248. 		$allowbbcode = ( isset( $HTTP_POST_VARS['allowbbcode']) ) ? intval( $HTTP_POST_VARS['allowbbcode'] ) : $board_config['allow_bbcode'];
  249. 		$allowsmilies = ( isset( $HTTP_POST_VARS['allowsmilies']) ) ? intval( $HTTP_POST_VARS['allowsmilies'] ) : $board_config['allow_smilies'];
  250. 		$user_timezone = ( isset( $HTTP_POST_VARS['timezone']) ) ? doubleval( $HTTP_POST_VARS['timezone'] ) : $board_config['board_timezone'];
  251. 		$user_dateformat = ( $HTTP_POST_VARS['dateformat'] ) ? trim( $HTTP_POST_VARS['dateformat'] ) : $board_config['default_dateformat'];
  252.  
  253. 		$user_avatar_local = ( isset( $HTTP_POST_VARS['avatarselect'] ) && !empty($HTTP_POST_VARS['submitavatar'] ) && $board_config['allow_avatar_local'] ) ? $HTTP_POST_VARS['avatarselect'] : ( ( isset( $HTTP_POST_VARS['avatarlocal'] )  ) ? $HTTP_POST_VARS['avatarlocal'] : '' );
  254. 		$user_avatar_category = ( isset($HTTP_POST_VARS['avatarcatname']) && $board_config['allow_avatar_local'] ) ? htmlspecialchars($HTTP_POST_VARS['avatarcatname']) : '' ;
  255.  
  256. 		$user_avatar_remoteurl = ( !empty($HTTP_POST_VARS['avatarremoteurl']) ) ? trim( $HTTP_POST_VARS['avatarremoteurl'] ) : '';
  257. 		$user_avatar_url = ( !empty($HTTP_POST_VARS['avatarurl']) ) ? trim( $HTTP_POST_VARS['avatarurl'] ) : '';
  258. 		$user_avatar_loc = ( $HTTP_POST_FILES['avatar']['tmp_name'] != "none") ? $HTTP_POST_FILES['avatar']['tmp_name'] : '';
  259. 		$user_avatar_name = ( !empty($HTTP_POST_FILES['avatar']['name']) ) ? $HTTP_POST_FILES['avatar']['name'] : '';
  260. 		$user_avatar_size = ( !empty($HTTP_POST_FILES['avatar']['size']) ) ? $HTTP_POST_FILES['avatar']['size'] : 0;
  261. 		$user_avatar_filetype = ( !empty($HTTP_POST_FILES['avatar']['type']) ) ? $HTTP_POST_FILES['avatar']['type'] : '';
  262.  
  263. 		$user_avatar = ( empty($user_avatar_loc) ) ? $this_userdata['user_avatar'] : '';
  264. 		$user_avatar_type = ( empty($user_avatar_loc) ) ? $this_userdata['user_avatar_type'] : '';		
  265.  
  266. 		$user_status = ( !empty($HTTP_POST_VARS['user_status']) ) ? intval( $HTTP_POST_VARS['user_status'] ) : 0;
  267. 		$user_allowpm = ( !empty($HTTP_POST_VARS['user_allowpm']) ) ? intval( $HTTP_POST_VARS['user_allowpm'] ) : 0;
  268. 		$user_rank = ( !empty($HTTP_POST_VARS['user_rank']) ) ? intval( $HTTP_POST_VARS['user_rank'] ) : 0;
  269. 		$user_allowavatar = ( !empty($HTTP_POST_VARS['user_allowavatar']) ) ? intval( $HTTP_POST_VARS['user_allowavatar'] ) : 0;
  270.  
  271. 		if (isset($HTTP_POST_VARS['topics_per_page']) )
  272. 		{
  273. 			$user_topics_per_page = ( intval($HTTP_POST_VARS['topics_per_page']) == 0 ) ? $board_config['topics_per_page'] : intval($HTTP_POST_VARS['topics_per_page']);
  274. 			$user_topics_per_page = ( $user_topics_per_page > $board_config['max_user_topics_per_page'] ) ? $board_config['topics_per_page'] : $user_topics_per_page;
  275. 		}
  276. 		if (isset($HTTP_POST_VARS['posts_per_page']) )
  277. 		{
  278. 			$user_posts_per_page = ( intval($HTTP_POST_VARS['topics_per_page']) == 0 ) ? $board_config['posts_per_page'] : intval($HTTP_POST_VARS['posts_per_page']);
  279. 			$user_posts_per_page = ( $user_topics_per_page > $board_config['max_user_posts_per_page'] ) ? $board_config['posts_per_page'] : $user_posts_per_page;
  280. 		}
  281.  
  282.  
  283. 		if( isset( $HTTP_POST_VARS['avatargallery'] ) || isset( $HTTP_POST_VARS['submitavatar'] ) || isset( $HTTP_POST_VARS['cancelavatar'] ) )
  284. 		{
  285. 			$username = stripslashes($username);
  286. 			$email = stripslashes($email);
  287. 			$nic_color = stripslashes($nic_color);
  288. 			$password = '';
  289. 			$password_confirm = '';
  290.  
  291. 			$icq = stripslashes($icq);
  292. 			$aim = htmlspecialchars(stripslashes($aim));
  293. 			$msn = htmlspecialchars(stripslashes($msn));
  294. 			$yim = htmlspecialchars(stripslashes($yim));
  295. 			$number = stripslashes($number);
  296.  
  297. 			$website = htmlspecialchars(stripslashes($website));
  298. 			$location = htmlspecialchars(stripslashes($location));
  299. 			$occupation = htmlspecialchars(stripslashes($occupation));
  300. 			$interests = htmlspecialchars(stripslashes($interests));
  301. 			$user_dateformat = htmlspecialchars(stripslashes($user_dateformat));
  302.  
  303. 			if ( !isset($HTTP_POST_VARS['cancelavatar'])) 
  304. 			{
  305. 				$user_avatar = $user_avatar_category . '/' . $user_avatar_local;
  306. 				$user_avatar_type = USER_AVATAR_GALLERY;
  307. 			}
  308. 		}
  309. 	}
  310.  
  311. 	if( isset( $HTTP_POST_VARS['submit'] ) )
  312. 	{
  313. 		include($phpbb_root_path . 'includes/usercp_avatar.'.$phpEx);
  314.  
  315. 		$error = FALSE;
  316.  
  317. 		if (stripslashes($username) != $this_userdata['username'])
  318. 		{
  319. 			unset($rename_user);
  320.  
  321. 			if ( stripslashes(strtolower($username)) != strtolower($this_userdata['username']) ) 
  322. 			{
  323. 				$result = validate_username($username);
  324. 				if ( $result['error'] )
  325. 				{
  326. 					$error = TRUE;
  327. 					$error_msg .= ( ( isset($error_msg) ) ? '<br />' : '' ) . $result['error_msg'];
  328. 				}
  329. 				else if ( strtolower(str_replace("\\'", "''", $username)) == strtolower($userdata['username']) )
  330. 				{
  331. 					$error = TRUE;
  332. 					$error_msg .= ( ( isset($error_msg) ) ? '<br />' : '' ) . $lang['Username_taken'];
  333. 				}
  334. 			}
  335.  
  336. 			if (!$error)
  337. 			{
  338. 				$username_sql = "username = '" . str_replace("\\'", "''", $username) . "', ";
  339. 				$rename_user = $username;
  340. 			}
  341. 		}
  342.  
  343. 		$passwd_sql = '';
  344. 		if( !empty($password) && !empty($password_confirm) )
  345. 		{
  346.  
  347. 			if($password != $password_confirm)
  348. 			{
  349. 				$error = TRUE;
  350. 				$error_msg .= ( ( isset($error_msg) ) ? '<br />' : '' ) . $lang['Password_mismatch'];
  351. 			}
  352. 			else
  353. 			{
  354. 				$password = md5($password);
  355. 				$passwd_sql = "user_password = '$password', ";
  356. 			}
  357. 		}
  358. 		else if( $password && !$password_confirm )
  359. 		{
  360. 			$error = TRUE;
  361. 			$error_msg .= ( ( isset($error_msg) ) ? '<br />' : '' ) . $lang['Password_mismatch'];
  362. 		}
  363. 		else if( !$password && $password_confirm )
  364. 		{
  365. 			$error = TRUE;
  366. 			$error_msg .= ( ( isset($error_msg) ) ? '<br />' : '' ) . $lang['Password_mismatch'];
  367. 		}
  368.  
  369. 		$avatar_sql = "";
  370. 		if( isset($HTTP_POST_VARS['avatardel']) )
  371. 		{
  372. 			if( $this_userdata['user_avatar_type'] == USER_AVATAR_UPLOAD && $this_userdata['user_avatar'] != "" )
  373. 			{
  374. 				if( @file_exists(@phpbb_realpath('./../' . $board_config['avatar_path'] . "/" . $this_userdata['user_avatar'])) )
  375. 				{
  376. 					@unlink('./../' . $board_config['avatar_path'] . "/" . $this_userdata['user_avatar']);
  377. 				}
  378. 			}
  379. 			$avatar_sql = ", user_avatar = '', user_avatar_type = " . USER_AVATAR_NONE;
  380. 		}
  381. 		else if( ( $user_avatar_loc != "" || !empty($user_avatar_url) ) && !$error )
  382. 		{
  383.  
  384. 			if( !empty($user_avatar_loc) && !empty($user_avatar_url) )
  385. 			{
  386. 				$error = TRUE;
  387. 				if( isset($error_msg) )
  388. 				{
  389. 					$error_msg .= "<br />";
  390. 				}
  391. 				$error_msg .= $lang['Only_one_avatar'];
  392. 			}
  393.  
  394. 			if( $user_avatar_loc != "" )
  395. 			{
  396. 				if( file_exists(@phpbb_realpath($user_avatar_loc)) && ereg(".jpg$|.gif$|.png$", $user_avatar_name) )
  397. 				{
  398. 					if( $user_avatar_size <= $board_config['avatar_filesize'] && $user_avatar_size > 0)
  399. 					{
  400. 						$error_type = false;
  401.  
  402. 						preg_match("'image\/[x\-]*([a-z]+)'", $user_avatar_filetype, $user_avatar_filetype);
  403. 						$user_avatar_filetype = $user_avatar_filetype[1];
  404.  
  405. 						switch( $user_avatar_filetype )
  406. 						{
  407. 							case "jpeg":
  408. 							case "pjpeg":
  409. 							case "jpg":
  410. 								$imgtype = '.jpg';
  411. 								break;
  412. 							case "gif":
  413. 								$imgtype = '.gif';
  414. 								break;
  415. 							case "png":
  416. 								$imgtype = '.png';
  417. 								break;
  418. 							default:
  419. 								$error = true;
  420. 								$error_msg = (!empty($error_msg)) ? $error_msg . "<br />" . $lang['Avatar_filetype'] : $lang['Avatar_filetype'];
  421. 								break;
  422. 						}
  423.  
  424. 						if( !$error )
  425. 						{
  426. 							list($width, $height) = @getimagesize($user_avatar_loc);
  427.  
  428. 							if( $width <= $board_config['avatar_max_width'] && $height <= $board_config['avatar_max_height'] )
  429. 							{
  430. 								$user_id = $this_userdata['user_id'];
  431.  
  432. 								$avatar_filename = $user_id . $imgtype;
  433.  
  434. 								if( $this_userdata['user_avatar_type'] == USER_AVATAR_UPLOAD && $this_userdata['user_avatar'] != "" )
  435. 								{
  436. 									if( @file_exists(@phpbb_realpath("./../" . $board_config['avatar_path'] . "/" . $this_userdata['user_avatar'])) )
  437. 									{
  438. 										@unlink("./../" . $board_config['avatar_path'] . "/". $this_userdata['user_avatar']);
  439. 									}
  440. 								}
  441. 								@copy($user_avatar_loc, "./../" . $board_config['avatar_path'] . "/$avatar_filename");
  442.  
  443. 								$avatar_sql = ", user_avatar = '$avatar_filename', user_avatar_type = " . USER_AVATAR_UPLOAD;
  444. 							}
  445. 							else
  446. 							{
  447. 								$l_avatar_size = sprintf($lang['Avatar_imagesize'], $board_config['avatar_max_width'], $board_config['avatar_max_height']);
  448.  
  449. 								$error = true;
  450. 								$error_msg = ( !empty($error_msg) ) ? $error_msg . "<br />" . $l_avatar_size : $l_avatar_size;
  451. 							}
  452. 						}
  453. 					}
  454. 					else
  455. 					{
  456. 						$l_avatar_size = sprintf($lang['Avatar_filesize'], round($board_config['avatar_filesize'] / 1024));
  457.  
  458. 						$error = true;
  459. 						$error_msg = ( !empty($error_msg) ) ? $error_msg . "<br />" . $l_avatar_size : $l_avatar_size;
  460. 					}
  461. 				}
  462. 				else
  463. 				{
  464. 					$error = true;
  465. 					$error_msg = ( !empty($error_msg) ) ? $error_msg . "<br />" . $lang['Avatar_filetype'] : $lang['Avatar_filetype'];
  466. 				}
  467. 			}
  468. 			else if( !empty($user_avatar_url) )
  469. 			{
  470.  
  471. 				preg_match("/^(http:\/\/)?([\w\-\.]+)\:?([0-9]*)\/(.*)$/", $user_avatar_url, $url_ary);
  472.  
  473. 				if( !empty($url_ary[4]) )
  474. 				{
  475. 					$port = (!empty($url_ary[3])) ? $url_ary[3] : 80;
  476.  
  477. 					$fsock = @fsockopen($url_ary[2], $port, $errno, $errstr);
  478. 					if( $fsock )
  479. 					{
  480. 						$base_get = "/" . $url_ary[4];
  481.  
  482. 						@fputs($fsock, "GET $base_get HTTP/1.1\r\n");
  483. 						@fputs($fsock, "HOST: " . $url_ary[2] . "\r\n");
  484. 						@fputs($fsock, "Connection: close\r\n\r\n");
  485.  
  486. 						unset($avatar_data);
  487. 						while( !@feof($fsock) )
  488. 						{
  489. 							$avatar_data .= @fread($fsock, $board_config['avatar_filesize']);
  490. 						}
  491. 						@fclose($fsock);
  492.  
  493. 						if( preg_match("/Content-Length\: ([0-9]+)[^\/ ][\s]+/i", $avatar_data, $file_data1) && preg_match("/Content-Type\: image\/[x\-]*([a-z]+)[\s]+/i", $avatar_data, $file_data2) )
  494. 						{
  495. 							$file_size = $file_data1[1]; 
  496. 							$file_type = $file_data2[1];
  497.  
  498. 							switch( $file_type )
  499. 							{
  500. 								case "jpeg":
  501. 								case "pjpeg":
  502. 								case "jpg":
  503. 									$imgtype = '.jpg';
  504. 									break;
  505. 								case "gif":
  506. 									$imgtype = '.gif';
  507. 									break;
  508. 								case "png":
  509. 									$imgtype = '.png';
  510. 									break;
  511. 								default:
  512. 									$error = true;
  513. 									$error_msg = (!empty($error_msg)) ? $error_msg . "<br />" . $lang['Avatar_filetype'] : $lang['Avatar_filetype'];
  514. 									break;
  515. 							}
  516.  
  517. 							if( !$error && $file_size > 0 && $file_size < $board_config['avatar_filesize'] )
  518. 							{
  519. 								$avatar_data = substr($avatar_data, strlen($avatar_data) - $file_size, $file_size);
  520.  
  521. 								$tmp_filename = tempnam ("/tmp", $this_userdata['user_id'] . "-");
  522. 								$fptr = @fopen($tmp_filename, "wb");
  523. 								$bytes_written = @fwrite($fptr, $avatar_data, $file_size);
  524. 								@fclose($fptr);
  525.  
  526. 								if( $bytes_written == $file_size )
  527. 								{
  528. 									list($width, $height) = @getimagesize($tmp_filename);
  529.  
  530. 									if( $width <= $board_config['avatar_max_width'] && $height <= $board_config['avatar_max_height'] )
  531. 									{
  532. 										$user_id = $this_userdata['user_id'];
  533.  
  534. 										$avatar_filename = $user_id . $imgtype;
  535.  
  536. 										if( $this_userdata['user_avatar_type'] == USER_AVATAR_UPLOAD && $this_userdata['user_avatar'] != "")
  537. 										{
  538. 											if( file_exists(@phpbb_realpath("./../" . $board_config['avatar_path'] . "/" . $this_userdata['user_avatar'])) )
  539. 											{
  540. 												@unlink("./../" . $board_config['avatar_path'] . "/" . $this_userdata['user_avatar']);
  541. 											}
  542. 										}
  543. 										@copy($tmp_filename, "./../" . $board_config['avatar_path'] . "/$avatar_filename");
  544. 										@unlink($tmp_filename);
  545.  
  546. 										$avatar_sql = ", user_avatar = '$avatar_filename', user_avatar_type = " . USER_AVATAR_UPLOAD;
  547. 									}
  548. 									else
  549. 									{
  550. 										$l_avatar_size = sprintf($lang['Avatar_imagesize'], $board_config['avatar_max_width'], $board_config['avatar_max_height']);
  551.  
  552. 										$error = true;
  553. 										$error_msg = ( !empty($error_msg) ) ? $error_msg . "<br />" . $l_avatar_size : $l_avatar_size;
  554. 									}
  555. 								}
  556. 								else
  557. 								{
  558.  
  559. 									@unlink($tmp_filename);
  560. 									message_die(GENERAL_ERROR, "Could not write avatar file to local storage. Please contact the board administrator with this message", "", __LINE__, __FILE__);
  561. 								}
  562. 							}
  563. 						}
  564. 						else
  565. 						{
  566.  
  567. 							$error = true;
  568. 							$error_msg = ( !empty($error_msg) ) ? $error_msg . "<br />" . $lang['File_no_data'] : $lang['File_no_data'];
  569. 						}
  570. 					}
  571. 					else
  572. 					{
  573.  
  574. 						$error = true;
  575. 						$error_msg = ( !empty($error_msg) ) ? $error_msg . "<br />" . $lang['No_connection_URL'] : $lang['No_connection_URL'];
  576. 					}
  577. 				}
  578. 				else
  579. 				{
  580. 					$error = true;
  581. 					$error_msg = ( !empty($error_msg) ) ? $error_msg . "<br />" . $lang['Incomplete_URL'] : $lang['Incomplete_URL'];
  582. 				}
  583. 			}
  584. 			else if( !empty($user_avatar_name) )
  585. 			{
  586. 				$l_avatar_size = sprintf($lang['Avatar_filesize'], round($board_config['avatar_filesize'] / 1024));
  587.  
  588. 				$error = true;
  589. 				$error_msg = ( !empty($error_msg) ) ? $error_msg . "<br />" . $l_avatar_size : $l_avatar_size;
  590. 			}
  591. 		}
  592. 		else if( $user_avatar_remoteurl != "" && $avatar_sql == "" && !$error )
  593. 		{
  594. 			if( !preg_match("#^http:\/\/#i", $user_avatar_remoteurl) )
  595. 			{
  596. 				$user_avatar_remoteurl = "http://" . $user_avatar_remoteurl;
  597. 			}
  598.  
  599. 			if( preg_match("#^(http:\/\/[a-z0-9\-]+?\.([a-z0-9\-]+\.)*[a-z]+\/.*?\.(gif|jpg|png)$)#is", $user_avatar_remoteurl) )
  600. 			{
  601. 				$avatar_sql = ", user_avatar = '" . str_replace("\'", "''", $user_avatar_remoteurl) . "', user_avatar_type = " . USER_AVATAR_REMOTE;
  602. 			}
  603. 			else
  604. 			{
  605. 				$error = true;
  606. 				$error_msg = ( !empty($error_msg) ) ? $error_msg . "<br />" . $lang['Wrong_remote_avatar_format'] : $lang['Wrong_remote_avatar_format'];
  607. 			}
  608. 		}
  609. 		else if( $user_avatar_local != "" && $avatar_sql == "" && !$error )
  610. 		{
  611. 			$avatar_sql = ", user_avatar = '" . str_replace("\'", "''", phpbb_ltrim(basename($user_avatar_category), "'") . '/' . phpbb_ltrim(basename($user_avatar_local), "'")) . "', user_avatar_type = " . USER_AVATAR_GALLERY;
  612. 		}
  613.  
  614. 		if ($b_day || $b_md || $b_year) 
  615. 		{
  616. 			$user_age=(date('md')>=$b_md.(($b_day <= 9) ? '0':'').$b_day) ? date('Y') - $b_year : date('Y') - $b_year - 1 ;
  617. 			if (!checkdate($b_md,$b_day,$b_year))
  618. 			{
  619. 				$error = TRUE;
  620. 				if( isset($error_msg) )$error_msg .= "<br />";
  621. 				$error_msg .= $lang['Wrong_birthday_format'];
  622. 			} else
  623. 			if ($user_age>$board_config['max_user_age'])
  624. 			{
  625. 				$error = TRUE;
  626. 				if( isset($error_msg) )$error_msg .= "<br />";
  627. 				$error_msg .= sprintf($lang['Birthday_to_high'],$board_config['max_user_age']);
  628. 			} else
  629. 			if ($user_age<$board_config['min_user_age'])
  630. 			{
  631. 				$error = TRUE;
  632. 				if( isset($error_msg) )$error_msg .= "<br />";
  633. 				$error_msg .= sprintf($lang['Birthday_to_low'],$board_config['min_user_age']);
  634. 			} else
  635. 			{
  636. 				$birthday = ($error) ? $birthday : mkrealdate($b_day,$b_md,$b_year);
  637. 			}
  638. 		} else $birthday = ($error) ? '' : 999999;
  639.  
  640. 		if( !$error )
  641. 		{
  642. 			$sql = "UPDATE " . USERS_TABLE . "
  643. 				SET " . $username_sql . $passwd_sql . "user_email = '" . str_replace("\'", "''", $email) . "', user_icq = '" . str_replace("\'", "''", $icq) . "', user_number = '" . str_replace("\'", "''", $number) . "', user_nic_color = '" . str_replace("\'", "''", $nic_color) . "', user_website = '" . str_replace("\'", "''", $website) . "', user_occ = '" . str_replace("\'", "''", $occupation) . "', user_from = '" . str_replace("\'", "''", $location) . "', user_interests = '" . str_replace("\'", "''", $interests) . "', user_topics_per_page = '$user_topics_per_page', user_posts_per_page = '$user_posts_per_page', user_birthday='$birthday', user_next_birthday_greeting=$next_birthday_greeting, user_viewemail = $viewemail, user_aim = '" . str_replace("\'", "''", $aim) . "', user_yim = '" . str_replace("\'", "''", $yim) . "', user_msnm = '" . str_replace("\'", "''", $msn) . "', user_attachsig = $attachsig, user_sig_bbcode_uid = '$signature_bbcode_uid', user_allowsmile = $allowsmilies, user_allowhtml = $allowhtml, user_allowavatar = $user_allowavatar, user_allowbbcode = $allowbbcode, user_allow_viewonline = $allowviewonline, user_notify = $notifyreply, user_allow_pm = $user_allowpm, user_notify_pm = $notifypm, user_popup_pm = $popuppm,  user_email_new_gb = $gb_email, user_can_gb = $gb_can, user_timezone = $user_timezone, user_dateformat = '" . str_replace("\'", "''", $user_dateformat) . "', user_active = $user_status, user_rank = $user_rank, user_gender = '$gender'" . $avatar_sql . "
  644. 				WHERE user_id = $user_id";
  645.  
  646. 			if( $result = $db->sql_query($sql) )
  647. 			{
  648. 				if( isset($rename_user) )
  649. 				{
  650. 					$sql = "UPDATE " . GROUPS_TABLE . "
  651. 						SET group_name = '".str_replace("\'", "''", $rename_user)."'
  652. 						WHERE group_name = '".str_replace("'", "''", $this_userdata['username'] )."'";
  653. 					if( !$result = $db->sql_query($sql) )
  654. 					{
  655. 						message_die(GENERAL_ERROR, 'Could not rename users group', '', __LINE__, __FILE__, $sql);
  656. 					}
  657. 				}
  658.  
  659. 				if (!$user_status)
  660. 				{
  661. 					$sql = "DELETE FROM " . SESSIONS_TABLE . " 
  662. 						WHERE session_user_id = " . $user_id;
  663.  
  664. 					if ( !$db->sql_query($sql) )
  665. 					{
  666. 						message_die(GENERAL_ERROR, 'Error removing user session', '', __LINE__, __FILE__, $sql);
  667. 					}
  668. 				}
  669.  
  670. 				if ( !empty($passwd_sql) )
  671. 				{
  672. 					session_reset_keys($user_id, $user_ip);
  673. 				}
  674. 				
  675. 				$message .= $lang['Admin_user_updated'];
  676. 			}
  677. 			else
  678. 			{
  679. 				message_die(GENERAL_ERROR, 'Admin_user_fail', '', __LINE__, __FILE__, $sql);
  680. 			}
  681.  
  682. 			$message .= '<br /><br />' . sprintf($lang['Click_return_useradmin'], '<a href="' . append_sid("admin_users.$phpEx") . '">', '</a>') . '<br /><br />' . sprintf($lang['Click_return_admin_index'], '<a href="' . append_sid("index.$phpEx?pane=right") . '">', '</a>');
  683.  
  684. 			message_die(GENERAL_MESSAGE, $message);
  685. 		}
  686. 		else
  687. 		{
  688. 			$template->set_filenames(array(
  689. 				'reg_header' => 'error_body.tpl')
  690. 			);
  691.  
  692. 			$template->assign_vars(array(
  693. 				'ERROR_MESSAGE' => $error_msg)
  694. 			);
  695.  
  696. 			$template->assign_var_from_handle('ERROR_BOX', 'reg_header');
  697.  
  698. 			$username = htmlspecialchars(stripslashes($username));
  699. 			$email = stripslashes($email);
  700. 			$nic_color = stripslashes($nic_color);
  701. 			$password = '';
  702. 			$password_confirm = '';
  703.  
  704. 			$icq = stripslashes($icq);
  705. 			$number = stripslashes($number);
  706. 			$aim = htmlspecialchars(str_replace('+', ' ', stripslashes($aim)));
  707. 			$msn = htmlspecialchars(stripslashes($msn));
  708. 			$yim = htmlspecialchars(stripslashes($yim));
  709.  
  710. 			$website = htmlspecialchars(stripslashes($website));
  711. 			$location = htmlspecialchars(stripslashes($location));
  712. 			$occupation = htmlspecialchars(stripslashes($occupation));
  713. 			$interests = htmlspecialchars(stripslashes($interests));
  714. 			$user_dateformat = htmlspecialchars(stripslashes($user_dateformat));
  715. 		}
  716. 	}
  717. 	else if( !isset( $HTTP_POST_VARS['submit'] ) && $mode != 'save' && !isset( $HTTP_POST_VARS['avatargallery'] ) && !isset( $HTTP_POST_VARS['submitavatar'] ) && !isset( $HTTP_POST_VARS['cancelavatar'] ) )
  718. 	{
  719. 		if( isset( $HTTP_GET_VARS[POST_USERS_URL]) || isset( $HTTP_POST_VARS[POST_USERS_URL]) )
  720. 		{
  721. 			$user_id = ( isset( $HTTP_POST_VARS[POST_USERS_URL]) ) ? intval( $HTTP_POST_VARS[POST_USERS_URL]) : intval( $HTTP_GET_VARS[POST_USERS_URL]);
  722. 			$this_userdata = get_userdata($user_id);
  723. 			if( !$this_userdata )
  724. 			{
  725. 				message_die(GENERAL_MESSAGE, $lang['No_user_id_specified'] );
  726. 			}
  727. 		}
  728. 		else
  729. 		{
  730. 			$this_userdata = get_userdata($HTTP_POST_VARS['username'], true);
  731. 			if( !$this_userdata )
  732. 			{
  733. 				message_die(GENERAL_MESSAGE, $lang['No_user_id_specified'] );
  734. 			}
  735. 		}
  736.  
  737. 		$user_id = $this_userdata['user_id'];
  738. 		$username = $this_userdata['username'];
  739. 		$email = $this_userdata['user_email'];
  740. 		$password = '';
  741. 		$password_confirm = '';
  742.  
  743. 		$icq = $this_userdata['user_icq'];
  744. 		$aim = htmlspecialchars(str_replace('+', ' ', $this_userdata['user_aim'] ));
  745. 		$msn = htmlspecialchars($this_userdata['user_msnm']);
  746. 		$yim = htmlspecialchars($this_userdata['user_yim']);
  747. 		$nic_color = htmlspecialchars($this_userdata['user_nic_color']);
  748.  
  749. 		$website = htmlspecialchars($this_userdata['user_website']);
  750. 		$location = htmlspecialchars($this_userdata['user_from']);
  751. 		$occupation = htmlspecialchars($this_userdata['user_occ']);
  752. 		$interests = htmlspecialchars($this_userdata['user_interests']);
  753. 		$number = $this_userdata['user_number'];
  754. 		$gender = $this_userdata['user_gender'];
  755.  
  756. 		$next_birthday_greeting = $this_userdata['user_next_birthday_greeting'];
  757. 		if ($this_userdata['user_birthday']!=999999)
  758. 		{
  759. 			$birthday = realdate($lang['Submit_date_format'],$this_userdata['user_birthday']);
  760. 			$b_day = realdate('j',$this_userdata['user_birthday']);
  761. 			$b_md = realdate('n',$this_userdata['user_birthday']);
  762. 			$b_year = realdate('Y',$this_userdata['user_birthday']);
  763. 		} else
  764. 		{
  765. 			$b_day = '';
  766. 			$b_md = '';
  767. 			$b_year = '';
  768. 			$birthday = '';
  769. 		}
  770.  
  771. 		$viewemail = $this_userdata['user_viewemail'];
  772. 		$notifypm = $this_userdata['user_notify_pm'];
  773. 		$games_block_pm = $this_userdata['games_block_pm'];
  774. 		$popuppm = $this_userdata['user_popup_pm'];
  775. $gb_email = $this_userdata['user_email_new_gb'];
  776. $gb_can = $this_userdata['user_can_gb'];
  777. 		$notifyreply = $this_userdata['user_notify'];
  778. 		$attachsig = $this_userdata['user_attachsig'];
  779. 		$allowhtml = $this_userdata['user_allowhtml'];
  780. 		$allowbbcode = $this_userdata['user_allowbbcode'];
  781. 		$allowsmilies = $this_userdata['user_allowsmile'];
  782. 		$allowviewonline = $this_userdata['user_allow_viewonline'];
  783.  
  784. 		$user_avatar = $this_userdata['user_avatar'];
  785. 		$user_avatar_type = $this_userdata['user_avatar_type'];
  786. 		$user_timezone = $this_userdata['user_timezone'];
  787. 		$user_dateformat = htmlspecialchars($this_userdata['user_dateformat']);
  788. 		
  789. 		$user_status = $this_userdata['user_active'];
  790. 		$user_allowavatar = $this_userdata['user_allowavatar'];
  791. 		$user_allowpm = $this_userdata['user_allow_pm'];
  792. 		$user_topics_per_page = $this_userdata['user_topics_per_page'];
  793. 		$user_posts_per_page = $this_userdata['user_posts_per_page'];
  794. 		
  795. 		$COPPA = false;
  796.  
  797. 		$html_status =  ($this_userdata['user_allowhtml'] ) ? $lang['HTML_is_ON'] : $lang['HTML_is_OFF'];
  798. 		$bbcode_status = ($this_userdata['user_allowbbcode'] ) ? $lang['BBCode_is_ON'] : $lang['BBCode_is_OFF'];
  799. 		$smilies_status = ($this_userdata['user_allowsmile'] ) ? $lang['Smilies_are_ON'] : $lang['Smilies_are_OFF'];
  800. 	}
  801.  
  802. 	if( isset($HTTP_POST_VARS['avatargallery']) && !$error )
  803. 	{
  804. 		if( !$error )
  805. 		{
  806. 			$user_id = intval($HTTP_POST_VARS['id']);
  807.  
  808. 			$template->set_filenames(array(
  809. 				"body" => "admin/user_avatar_gallery.tpl")
  810. 			);
  811.  
  812. 			$dir = @opendir("../" . $board_config['avatar_gallery_path']);
  813.  
  814. 			$avatar_images = array();
  815. 			while( $file = @readdir($dir) )
  816. 			{
  817. 				if( $file != "." && $file != ".." && !is_file(phpbb_realpath("./../" . $board_config['avatar_gallery_path'] . "/" . $file)) && !is_link(phpbb_realpath("./../" . $board_config['avatar_gallery_path'] . "/" . $file)) )
  818. 				{
  819. 					$sub_dir = @opendir("../" . $board_config['avatar_gallery_path'] . "/" . $file);
  820.  
  821. 					$avatar_row_count = 0;
  822. 					$avatar_col_count = 0;
  823.  
  824. 					while( $sub_file = @readdir($sub_dir) )
  825. 					{
  826. 						if( preg_match("/(\.gif$|\.png$|\.jpg)$/is", $sub_file) )
  827. 						{
  828. 							$avatar_images[$file][$avatar_row_count][$avatar_col_count] = $sub_file;
  829.  
  830. 							$avatar_col_count++;
  831. 							if( $avatar_col_count == 5 )
  832. 							{
  833. 								$avatar_row_count++;
  834. 								$avatar_col_count = 0;
  835. 							}
  836. 						}
  837. 					}
  838. 				}
  839. 			}
  840. 	
  841. 			@closedir($dir);
  842.  
  843. 			if( isset($HTTP_POST_VARS['avatarcategory']) )
  844. 			{
  845. 				$category = htmlspecialchars($HTTP_POST_VARS['avatarcategory']);
  846. 			}
  847. 			else
  848. 			{
  849. 				list($category, ) = each($avatar_images);
  850. 			}
  851. 			@reset($avatar_images);
  852.  
  853. 			$s_categories = "";
  854. 			while( list($key) = each($avatar_images) )
  855. 			{
  856. 				$selected = ( $key == $category ) ? "selected=\"selected\"" : "";
  857. 				if( count($avatar_images[$key]) )
  858. 				{
  859. 					$s_categories .= '<option value="' . $key . '"' . $selected . '>' . ucfirst($key) . '</option>';
  860. 				}
  861. 			}
  862.  
  863. 			$s_colspan = 0;
  864. 			for($i = 0; $i < count($avatar_images[$category]); $i++)
  865. 			{
  866. 				$template->assign_block_vars("avatar_row", array());
  867.  
  868. 				$s_colspan = max($s_colspan, count($avatar_images[$category][$i]));
  869.  
  870. 				for($j = 0; $j < count($avatar_images[$category][$i]); $j++)
  871. 				{
  872. 					$template->assign_block_vars("avatar_row.avatar_column", array(
  873. 						"AVATAR_IMAGE" => "../" . $board_config['avatar_gallery_path'] . '/' . $category . '/' . $avatar_images[$category][$i][$j])
  874. 					);
  875.  
  876. 					$template->assign_block_vars("avatar_row.avatar_option_column", array(
  877. 						"S_OPTIONS_AVATAR" => $avatar_images[$category][$i][$j])
  878. 					);
  879. 				}
  880. 			}
  881.  
  882. 			$coppa = ( ( !$HTTP_POST_VARS['coppa'] && !$HTTP_GET_VARS['coppa'] ) || $mode == "register") ? 0 : TRUE;
  883.  
  884. 			$s_hidden_fields = '<input type="hidden" name="mode" value="edit" /><input type="hidden" name="agreed" value="true" /><input type="hidden" name="coppa" value="' . $coppa . '" /><input type="hidden" name="avatarcatname" value="' . $category . '" />';
  885. 			$s_hidden_fields .= '<input type="hidden" name="id" value="' . $user_id . '" />';
  886.  
  887. 			$s_hidden_fields .= '<input type="hidden" name="username" value="' . str_replace("\"", "&quot;", $username) . '" />';
  888. 			$s_hidden_fields .= '<input type="hidden" name="email" value="' . str_replace("\"", "&quot;", $email) . '" />';
  889. 			$s_hidden_fields .= '<input type="hidden" name="icq" value="' . str_replace("\"", "&quot;", $icq) . '" />';
  890. 			$s_hidden_fields .= '<input type="hidden" name="aim" value="' . str_replace("\"", "&quot;", $aim) . '" />';
  891. 			$s_hidden_fields .= '<input type="hidden" name="msn" value="' . str_replace("\"", "&quot;", $msn) . '" />';
  892. 			$s_hidden_fields .= '<input type="hidden" name="yim" value="' . str_replace("\"", "&quot;", $yim) . '" />';
  893. 			$s_hidden_fields .= '<input type="hidden" name="website" value="' . str_replace("\"", "&quot;", $website) . '" />';
  894. 			$s_hidden_fields .= '<input type="hidden" name="location" value="' . str_replace("\"", "&quot;", $location) . '" />';
  895. 			$s_hidden_fields .= '<input type="hidden" name="occupation" value="' . str_replace("\"", "&quot;", $occupation) . '" />';
  896. 			$s_hidden_fields .= '<input type="hidden" name="interests" value="' . str_replace("\"", "&quot;", $interests) . '" />';
  897. 			$s_hidden_fields .= '<input type="hidden" name="number" value="' . str_replace("\"", "&quot;", $number) . '" />';
  898. 			$s_hidden_fields .= '<input type="hidden" name="birthday" value="'.$birthday.'" />';
  899. 			$s_hidden_fields .= '<input type="hidden" name="next_birthday_greeting" value="'.$next_birthday_greeting.'" />';
  900. 			$s_hidden_fields .= '<input type="hidden" name="viewemail" value="' . $viewemail . '" />';
  901. 			$s_hidden_fields .= '<input type="hidden" name="gender" value="' . $gender . '" />';
  902. 			$s_hidden_fields .= '<input type="hidden" name="notifypm" value="' . $notifypm . '" />';
  903. 			$s_hidden_fields .= '<input type="hidden" name="popup_pm" value="' . $popuppm . '" />';
  904. 			$s_hidden_fields .= '<input type="hidden" name="notifyreply" value="' . $notifyreply . '" />';
  905. 			$s_hidden_fields .= '<input type="hidden" name="attachsig" value="' . $attachsig . '" />';
  906. 			$s_hidden_fields .= '<input type="hidden" name="allowhtml" value="' . $allowhtml . '" />';
  907. 			$s_hidden_fields .= '<input type="hidden" name="allowbbcode" value="' . $allowbbcode . '" />';
  908. 			$s_hidden_fields .= '<input type="hidden" name="allowsmilies" value="' . $allowsmilies . '" />';
  909. 			$s_hidden_fields .= '<input type="hidden" name="hideonline" value="' . !$allowviewonline . '" />';
  910. 			$s_hidden_fields .= '<input type="hidden" name="timezone" value="' . $user_timezone . '" />';
  911. 			$s_hidden_fields .= '<input type="hidden" name="dateformat" value="' . str_replace("\"", "&quot;", $user_dateformat) . '" />';
  912. 			$s_hidden_fields .= '<input type="hidden" name="user_status" value="' . $user_status . '" />';
  913. 			$s_hidden_fields .= '<input type="hidden" name="user_allowpm" value="' . $user_allowpm . '" />';
  914. 			$s_hidden_fields .= '<input type="hidden" name="user_allowavatar" value="' . $user_allowavatar . '" />';
  915. 			$s_hidden_fields .= '<input type="hidden" name="user_rank" value="' . $user_rank . '" />';
  916. 			$s_hidden_fields .= '<input type="hidden" name="topics_per_page" value="' . $user_topics_per_page . '" />';
  917. 			$s_hidden_fields .= '<input type="hidden" name="posts_per_page" value="' . $user_posts_per_page . '" />';
  918.  
  919. 			$template->assign_vars(array(
  920. 				"L_USER_TITLE" => $lang['User_admin'],
  921. 				"L_USER_EXPLAIN" => $lang['User_admin_explain'],
  922. 				"L_AVATAR_GALLERY" => $lang['Avatar_gallery'], 
  923. 				"L_SELECT_AVATAR" => $lang['Select_avatar'], 
  924. 				"L_RETURN_PROFILE" => $lang['Return_profile'], 
  925. 				"L_CATEGORY" => $lang['Select_category'], 
  926. 				"L_GO" => $lang['Go'],
  927.  
  928. 				"S_OPTIONS_CATEGORIES" => $s_categories, 
  929. 				"S_COLSPAN" => $s_colspan, 
  930. 				"S_PROFILE_ACTION" => append_sid("admin_users.$phpEx?mode=$mode"), 
  931. 				"S_HIDDEN_FIELDS" => $s_hidden_fields)
  932. 			);
  933. 		}
  934. 	}
  935. 	else
  936. 	{
  937. 		$s_hidden_fields = '<input type="hidden" name="mode" value="save" /><input type="hidden" name="agreed" value="true" /><input type="hidden" name="coppa" value="' . $coppa . '" />';
  938. 		$s_hidden_fields .= '<input type="hidden" name="id" value="' . $this_userdata['user_id'] . '" />';
  939.  
  940. 		if( !empty($user_avatar_local) )
  941. 		{
  942. 			$s_hidden_fields .= '<input type="hidden" name="avatarlocal" value="' . $user_avatar_local . '" /><input type="hidden" name="avatarcatname" value="' . $user_avatar_category . '" />';
  943. 		}
  944.  
  945. 		if( $user_avatar_type )
  946. 		{
  947. 			switch( $user_avatar_type )
  948. 			{
  949. 				case USER_AVATAR_UPLOAD:
  950. 					$avatar = '<img src="../' . $board_config['avatar_path'] . '/' . $user_avatar . '" alt="" />';
  951. 					break;
  952. 				case USER_AVATAR_REMOTE:
  953. 					$avatar = '<img src="' . $user_avatar . '" alt="" />';
  954. 					break;
  955. 				case USER_AVATAR_GALLERY:
  956. 					$avatar = '<img src="../' . $board_config['avatar_gallery_path'] . '/' . $user_avatar . '" alt="" />';
  957. 					break;
  958. 			}
  959. 		}
  960. 		else
  961. 		{
  962. 			$avatar = "";
  963. 		}
  964.  
  965. 		$sql = "SELECT * FROM " . RANKS_TABLE . "
  966. 			WHERE rank_special = 1
  967. 			ORDER BY rank_title";
  968. 		if ( !($result = $db->sql_query($sql)) )
  969. 		{
  970. 			message_die(GENERAL_ERROR, 'Could not obtain ranks data', '', __LINE__, __FILE__, $sql);
  971. 		}
  972.  
  973. 		$rank_select_box = '<option value="0">' . $lang['No_assigned_rank'] . '</option>';
  974. 		while( $row = $db->sql_fetchrow($result) )
  975. 		{
  976. 			$rank = $row['rank_title'];
  977. 			$rank_id = $row['rank_id'];
  978. 			
  979. 			$selected = ( $this_userdata['user_rank'] == $rank_id ) ? ' selected="selected"' : '';
  980. 			$rank_select_box .= '<option value="' . $rank_id . '"' . $selected . '>' . $rank . '</option>';
  981. 		}
  982.  
  983. 		$template->set_filenames(array(
  984. 			"body" => "admin/user_edit_body.tpl")
  985. 		);
  986.  
  987. 		$s_b_day = '<span class="genmed">' . $lang['Day'] . '&nbsp;</span><select name="b_day" size="1" class="gensmall"> 
  988. 		<option value="0">&nbsp;-&nbsp;</option> 
  989. 			<option value="1">&nbsp;1&nbsp;</option>
  990. 			<option value="2">&nbsp;2&nbsp;</option>
  991. 			<option value="3">&nbsp;3&nbsp;</option>
  992. 			<option value="4">&nbsp;4&nbsp;</option>
  993. 			<option value="5">&nbsp;5&nbsp;</option>
  994. 			<option value="6">&nbsp;6&nbsp;</option>
  995. 			<option value="7">&nbsp;7&nbsp;</option>
  996. 			<option value="8">&nbsp;8&nbsp;</option>
  997. 			<option value="9">&nbsp;9&nbsp;</option>
  998. 			<option value="10">&nbsp;10&nbsp;</option>
  999. 			<option value="11">&nbsp;11&nbsp;</option>
  1000. 			<option value="12">&nbsp;12&nbsp;</option>
  1001. 			<option value="13">&nbsp;13&nbsp;</option>
  1002. 			<option value="14">&nbsp;14&nbsp;</option>
  1003. 			<option value="15">&nbsp;15&nbsp;</option>
  1004. 			<option value="16">&nbsp;16&nbsp;</option>
  1005. 			<option value="17">&nbsp;17&nbsp;</option>
  1006. 			<option value="18">&nbsp;18&nbsp;</option>
  1007. 			<option value="19">&nbsp;19&nbsp;</option>
  1008. 			<option value="20">&nbsp;20&nbsp;</option>
  1009. 			<option value="21">&nbsp;21&nbsp;</option>
  1010. 			<option value="22">&nbsp;22&nbsp;</option>
  1011. 			<option value="23">&nbsp;23&nbsp;</option>
  1012. 			<option value="24">&nbsp;24&nbsp;</option>
  1013. 			<option value="25">&nbsp;25&nbsp;</option>
  1014. 			<option value="26">&nbsp;26&nbsp;</option>
  1015. 			<option value="27">&nbsp;27&nbsp;</option>
  1016. 			<option value="28">&nbsp;28&nbsp;</option>
  1017. 			<option value="29">&nbsp;29&nbsp;</option>
  1018. 			<option value="30">&nbsp;30&nbsp;</option>
  1019. 			<option value="31">&nbsp;31&nbsp;</option>
  1020. 			</select>&nbsp;&nbsp;';
  1021. 		$s_b_md = '<span class="genmed">' . $lang['Month'] . '&nbsp;</span><select name="b_md" size="1" class="gensmall"> 
  1022.      		<option value="0">&nbsp;-&nbsp;</option> 
  1023. 			<option value="1">&nbsp;'.$lang['datetime']['January'].'&nbsp;</option>
  1024. 			<option value="2">&nbsp;'.$lang['datetime']['February'].'&nbsp;</option>
  1025. 			<option value="3">&nbsp;'.$lang['datetime']['March'].'&nbsp;</option>
  1026. 			<option value="4">&nbsp;'.$lang['datetime']['April'].'&nbsp;</option>
  1027. 			<option value="5">&nbsp;'.$lang['datetime']['May'].'&nbsp;</option>
  1028. 			<option value="6">&nbsp;'.$lang['datetime']['June'].'&nbsp;</option>
  1029. 			<option value="7">&nbsp;'.$lang['datetime']['July'].'&nbsp;</option>
  1030. 			<option value="8">&nbsp;'.$lang['datetime']['August'].'&nbsp;</option>
  1031. 			<option value="9">&nbsp;'.$lang['datetime']['September'].'&nbsp;</option>
  1032. 			<option value="10">&nbsp;'.$lang['datetime']['October'].'&nbsp;</option>
  1033. 			<option value="11">&nbsp;'.$lang['datetime']['November'].'&nbsp;</option>
  1034. 			<option value="12">&nbsp;'.$lang['datetime']['December'].'&nbsp;</option>
  1035. 			</select>&nbsp;&nbsp;';
  1036. 		$s_b_day= str_replace("value=\"".$b_day."\">", "value=\"".$b_day."\" SELECTED>" ,$s_b_day);
  1037. 		$s_b_md = str_replace("value=\"".$b_md."\">", "value=\"".$b_md."\" SELECTED>" ,$s_b_md);
  1038. 		$s_b_year = '<span class="genmed">' . $lang['Year'] . '&nbsp;</span><input type="text" class="post" style="width: 50px" name="b_year" size="4" maxlength="4" value="' . $b_year . '" />&nbsp;&nbsp;'; 
  1039. 		$i = 0;
  1040. 		$s_birthday = '';
  1041. 		for ($i=0;$i<=strlen($lang['Submit_date_format']);$i++)
  1042. 		{
  1043. 			switch ($lang['Submit_date_format'][$i])
  1044. 			{
  1045. 				case d:  $s_birthday .=$s_b_day;break;
  1046. 				case m:  $s_birthday .=$s_b_md;break;
  1047. 				case Y:  $s_birthday .=$s_b_year;break;
  1048. 			}
  1049. 		}
  1050.  
  1051. switch ($gender) 
  1052. { 
  1053.    case 1: $gender_male_checked="checked=\"checked\"";break; 
  1054.    case 2: $gender_female_checked="checked=\"checked\"";break; 
  1055.    default:$gender_no_specify_checked="checked=\"checked\""; 
  1056. }
  1057.  
  1058. 		$ini_val = ( phpversion() >= '4.0.0' ) ? 'ini_get' : 'get_cfg_var';
  1059. 		$form_enctype = ( !@$ini_val('file_uploads') || phpversion() == '4.0.4pl1' || !$board_config['allow_avatar_upload'] || ( phpversion() < '4.0.3' && @$ini_val('open_basedir') != '' ) ) ? '' : 'enctype="multipart/form-data"';
  1060.  
  1061. 		$template->assign_vars(array(
  1062. 			'USERNAME' => $username,
  1063. 			'EMAIL' => $email,
  1064. 			'YIM' => $yim,
  1065. 			'ICQ' => $icq,
  1066. 			'NUMBER' => $number,
  1067. 			'MSN' => $msn,
  1068. 			'AIM' => $aim,
  1069. 			'OCCUPATION' => $occupation,
  1070. 			'INTERESTS' => $interests,
  1071. 			'NEXT_BIRTHDAY_GREETING' => $next_birthday_greeting,
  1072. 			'S_BIRTHDAY' => $s_birthday,
  1073. 			'GENDER' => $gender, 
  1074. 			'GENDER_NO_SPECIFY_CHECKED' => $gender_no_specify_checked, 
  1075. 			'GENDER_MALE_CHECKED' => $gender_male_checked, 
  1076. 			'GENDER_FEMALE_CHECKED' => $gender_female_checked,
  1077.  
  1078. 			'LOCATION' => $location,
  1079. 			'WEBSITE' => $website,
  1080. 			'VIEW_EMAIL_YES' => ($viewemail) ? 'checked="checked"' : '',
  1081. 			'VIEW_EMAIL_NO' => (!$viewemail) ? 'checked="checked"' : '',
  1082. 			'HIDE_USER_YES' => (!$allowviewonline) ? 'checked="checked"' : '',
  1083. 			'HIDE_USER_NO' => ($allowviewonline) ? 'checked="checked"' : '',
  1084. 			'NOTIFY_PM_YES' => ($notifypm) ? 'checked="checked"' : '',
  1085. 			'NOTIFY_PM_NO' => (!$notifypm) ? 'checked="checked"' : '',
  1086. 			'BLOCK_PM_YES' => ( $games_block_pm ) ? 'checked="checked"' : '', 
  1087. 			'BLOCK_PM_NO' => ( !$games_block_pm ) ? 'checked="checked"' : '',
  1088. 			'POPUP_PM_YES' => ($popuppm) ? 'checked="checked"' : '',
  1089. 			'POPUP_PM_NO' => (!$popuppm) ? 'checked="checked"' : '',
  1090. 		'GB_EMAIL_YES' => ($gb_email) ? 'checked="checked"' : '',
  1091. 		'GB_EMAIL_NO' => (!$gb_email) ? 'checked="checked"' : '',
  1092. 		'GB_CAN_YES' => ($gb_can) ? 'checked="checked"' : '',
  1093. 		'GB_CAN_NO' => (!$gb_can) ? 'checked="checked"' : '',
  1094. 			'ALWAYS_ADD_SIGNATURE_YES' => ($attachsig) ? 'checked="checked"' : '',
  1095. 			'ALWAYS_ADD_SIGNATURE_NO' => (!$attachsig) ? 'checked="checked"' : '',
  1096. 			'NOTIFY_REPLY_YES' => ( $notifyreply ) ? 'checked="checked"' : '',
  1097. 			'NOTIFY_REPLY_NO' => ( !$notifyreply ) ? 'checked="checked"' : '',
  1098. 			'ALWAYS_ALLOW_BBCODE_YES' => ($allowbbcode) ? 'checked="checked"' : '',
  1099. 			'ALWAYS_ALLOW_BBCODE_NO' => (!$allowbbcode) ? 'checked="checked"' : '',
  1100. 			'ALWAYS_ALLOW_HTML_YES' => ($allowhtml) ? 'checked="checked"' : '',
  1101. 			'ALWAYS_ALLOW_HTML_NO' => (!$allowhtml) ? 'checked="checked"' : '',
  1102. 			'ALWAYS_ALLOW_SMILIES_YES' => ($allowsmilies) ? 'checked="checked"' : '',
  1103. 			'ALWAYS_ALLOW_SMILIES_NO' => (!$allowsmilies) ? 'checked="checked"' : '',
  1104. 			'AVATAR' => $avatar,
  1105. 			'TIMEZONE_SELECT' => tz_select($user_timezone),
  1106. 			'DATE_FORMAT' => $user_dateformat,
  1107. 			'ALLOW_PM_YES' => ($user_allowpm) ? 'checked="checked"' : '',
  1108. 			'ALLOW_PM_NO' => (!$user_allowpm) ? 'checked="checked"' : '',
  1109. 			'ALLOW_AVATAR_YES' => ($user_allowavatar) ? 'checked="checked"' : '',
  1110. 			'ALLOW_AVATAR_NO' => (!$user_allowavatar) ? 'checked="checked"' : '',
  1111. 			'USER_ACTIVE_YES' => ($user_status) ? 'checked="checked"' : '',
  1112. 			'USER_ACTIVE_NO' => (!$user_status) ? 'checked="checked"' : '', 
  1113. 			'RANK_SELECT_BOX' => $rank_select_box,
  1114. 			'TOPICS_PER_PAGE' => $user_topics_per_page,
  1115. 			'POSTS_PER_PAGE' => $user_posts_per_page,
  1116.  
  1117. 			'L_USERNAME' => $lang['Username'],
  1118. 			'L_USER_TITLE' => $lang['User_admin'],
  1119. 			'L_USER_EXPLAIN' => $lang['User_admin_explain'],
  1120. 			'L_NEW_PASSWORD' => $lang['New_password'], 
  1121. 			'L_PASSWORD_IF_CHANGED' => $lang['password_if_changed'],
  1122. 			'L_CONFIRM_PASSWORD' => $lang['Confirm_password'],
  1123. 			'L_PASSWORD_CONFIRM_IF_CHANGED' => $lang['password_confirm_if_changed'],
  1124. 			'L_SUBMIT' => $lang['Submit'],
  1125. 			'L_RESET' => $lang['Reset'],
  1126. 			'L_ICQ_NUMBER' => $lang['ICQ'],
  1127. 			'L_MESSENGER' => $lang['MSNM'],
  1128. 			'L_YAHOO' => $lang['YIM'],
  1129. 			'L_WEBSITE' => $lang['Website'],
  1130. 			'L_AIM' => $lang['AIM'],
  1131. 			'L_LOCATION' => $lang['Location'],
  1132. 			'L_OCCUPATION' => $lang['Occupation'],
  1133. 			'L_BOARD_LANGUAGE' => $lang['Board_lang'],
  1134. 			'L_BOARD_STYLE' => $lang['Board_style'],
  1135. 			'L_TIMEZONE' => $lang['Timezone'],
  1136. 			'L_DATE_FORMAT' => $lang['Date_format'],
  1137. 			'L_DATE_FORMAT_EXPLAIN' => $lang['Date_format_explain'],
  1138. 			'L_YES' => $lang['Yes'],
  1139. 			'L_NO' => $lang['No'],
  1140. 			'L_INTERESTS' => $lang['Interests'],
  1141. 			'L_NUMBER' => $lang['Number'],
  1142.  
  1143. 			'L_BIRTHDAY' => $lang['Birthday'],
  1144. 			'L_NEXT_BIRTHDAY_GREETING' => $lang['Next_birthday_greeting'],
  1145. 			'L_NEXT_BIRTHDAY_GREETING_EXPLAIN' => $lang['Next_birthday_greeting_expain'],
  1146.  
  1147. 			'L_GENDER' => $lang['Gender'], 
  1148. 			'L_NIC_COLOR' => $lang['Nic_color'], 
  1149. 			'NIC_COLOR' => $nic_color, 
  1150. 			'L_GENDER_MALE' =>$lang['Male'], 
  1151. 			'L_GENDER_FEMALE' =>$lang['Female'], 
  1152. 			'L_GENDER_NOT_SPECIFY' =>$lang['No_gender_specify'],
  1153.  
  1154. 			'L_ALWAYS_ALLOW_SMILIES' => $lang['Always_smile'],
  1155. 			'L_ALWAYS_ALLOW_BBCODE' => $lang['Always_bbcode'],
  1156. 			'L_ALWAYS_ALLOW_HTML' => $lang['Always_html'],
  1157. 			'L_HIDE_USER' => $lang['Hide_user'],
  1158. 			'L_ALWAYS_ADD_SIGNATURE' => $lang['Always_add_sig'],
  1159. 			
  1160. 			'L_SPECIAL' => $lang['User_special'],
  1161. 			'L_SPECIAL_EXPLAIN' => $lang['User_special_explain'],
  1162. 			'L_USER_ACTIVE' => $lang['User_status'],
  1163. 			'L_ALLOW_PM' => $lang['User_allowpm'],
  1164. 			'L_ALLOW_AVATAR' => $lang['User_allowavatar'],
  1165. 			
  1166. 			'L_AVATAR_PANEL' => $lang['Avatar_panel'],
  1167. 			'L_AVATAR_EXPLAIN' => $lang['Admin_avatar_explain'],
  1168. 			'L_DELETE_AVATAR' => $lang['Delete_Image'],
  1169. 			'L_CURRENT_IMAGE' => $lang['Current_Image'],
  1170. 			'L_UPLOAD_AVATAR_FILE' => $lang['Upload_Avatar_file'],
  1171. 			'L_UPLOAD_AVATAR_URL' => $lang['Upload_Avatar_URL'],
  1172. 			'L_AVATAR_GALLERY' => $lang['Select_from_gallery'],
  1173. 			'L_SHOW_GALLERY' => $lang['View_avatar_gallery'],
  1174. 			'L_LINK_REMOTE_AVATAR' => $lang['Link_remote_Avatar'],
  1175.  
  1176. 			'L_SIGNATURE' => $lang['Signature'],
  1177. 			'L_SIGNATURE_EXPLAIN' => sprintf($lang['Signature_explain'], $board_config['max_sig_chars'] ),
  1178. 			'L_NOTIFY_ON_PRIVMSG' => $lang['Notify_on_privmsg'],
  1179. 			'L_BLOCK_ARCADE_PM' => $lang['Block_Arcade_pm'],
  1180. 			'L_NOTIFY_ON_REPLY' => $lang['Always_notify'],
  1181. 			'L_POPUP_ON_PRIVMSG' => $lang['Popup_on_privmsg'],
  1182. 		'L_GB_EMAIL' => $lang['gb_email'],
  1183. 		'L_GB_CAN' => $lang['gb_can'],
  1184. 			'L_PREFERENCES' => $lang['Preferences'],
  1185. 			'L_PUBLIC_VIEW_EMAIL' => $lang['Public_view_email'],
  1186. 			'L_ITEMS_REQUIRED' => $lang['Items_required'],
  1187. 			'L_REGISTRATION_INFO' => $lang['Registration_info'],
  1188. 			'L_PROFILE_INFO' => $lang['Profile_info'],
  1189. 			'L_PROFILE_INFO_NOTICE' => $lang['Profile_info_warn'],
  1190. 			'L_EMAIL_ADDRESS' => $lang['Email_address'],
  1191. 			'S_FORM_ENCTYPE' => $form_enctype,
  1192.  
  1193. 			'HTML_STATUS' => $html_status,
  1194. 			'BBCODE_STATUS' => sprintf($bbcode_status, '<a href="../' . append_sid("faq.$phpEx?mode=bbcode") . '" target="_phpbbcode">', '</a>'), 
  1195. 			'SMILIES_STATUS' => $smilies_status,
  1196.  
  1197. 			'L_DELETE_USER' => $lang['User_delete'],
  1198. 			'L_DELETE_USER_EXPLAIN' => $lang['User_delete_explain'],
  1199. 			'L_SELECT_RANK' => $lang['Rank_title'],
  1200. 			'L_TOPICS_PER_PAGE' => $lang['Topics_per_page'],
  1201. 			'L_POSTS_PER_PAGE' => $lang['Posts_per_page'],
  1202.  
  1203. 			'S_HIDDEN_FIELDS' => $s_hidden_fields,
  1204. 			'S_PROFILE_ACTION' => append_sid("admin_users.$phpEx"))
  1205. 		);
  1206.  
  1207. 		if( file_exists(@phpbb_realpath('./../' . $board_config['avatar_path'])) && ($board_config['allow_avatar_upload'] == TRUE) )
  1208. 		{
  1209. 			if ( $form_enctype != '' )
  1210. 			{
  1211. 				$template->assign_block_vars('avatar_local_upload', array() );
  1212. 			}
  1213. 			$template->assign_block_vars('avatar_remote_upload', array() );
  1214. 		}
  1215.  
  1216. 		if( file_exists(@phpbb_realpath('./../' . $board_config['avatar_gallery_path'])) && ($board_config['allow_avatar_local'] == TRUE) )
  1217. 		{
  1218. 			$template->assign_block_vars('avatar_local_gallery', array() );
  1219. 		}
  1220. 		
  1221. 		if( $board_config['allow_avatar_remote'] == TRUE )
  1222. 		{
  1223. 			$template->assign_block_vars('avatar_remote_link', array() );
  1224. 		}
  1225. 	}
  1226.  
  1227. 	$template->pparse('body');
  1228. }
  1229. else
  1230. {
  1231.  
  1232. 	$template->set_filenames(array(
  1233. 		'body' => 'admin/user_select_body.tpl')
  1234. 	);
  1235.  
  1236. 	$template->assign_vars(array(
  1237. 		'L_USER_TITLE' => $lang['User_admin'],
  1238. 		'L_USER_EXPLAIN' => $lang['User_admin_explain'],
  1239. 		'L_USER_SELECT' => $lang['Select_a_User'],
  1240. 		'L_LOOK_UP' => $lang['Look_up_user'],
  1241. 		'L_FIND_USERNAME' => $lang['Find_username'],
  1242.  
  1243. 		'U_SEARCH_USER' => append_sid("./../search.$phpEx?mode=searchuser"), 
  1244.  
  1245. 		'S_USER_ACTION' => append_sid("admin_users.$phpEx"),
  1246. 		'S_USER_SELECT' => $select_list)
  1247. 	);
  1248. 	$template->pparse('body');
  1249.  
  1250. }
  1251.  
  1252. include('./page_footer_admin.'.$phpEx);
  1253.  
  1254. ?>