Vergleich member.php - 1.8.8 - 1.8.34

Keine Änderungen Hinzugefügt Modifiziert Entfernt
Zeile 15	Zeile 15
$nosession['avatar'] = 1;	$nosession['avatar'] = 1;
$templatelist = "member_register,member_register_hiddencaptcha,member_coppa_form,member_register_coppa,member_register_agreement_coppa,member_register_agreement,member_register_customfield,member_register_requiredfields,member_register_password"; $templatelist .= ",member_loggedin_notice,member_profile_away,member_register_regimage,member_register_regimage_recaptcha,member_register_regimage_nocaptcha,post_captcha_hidden,post_captcha,post_captcha_recaptcha,member_viewnotes,member_register_referrer"; $templatelist .= ",member_profile_email,member_profile_offline,member_profile_reputation,member_profile_warn,member_profile_warninglevel,member_profile_customfields_field,member_profile_customfields,member_profile_adminoptions,member_profile"; $templatelist .= ",member_profile_signature,member_profile_avatar,member_profile_groupimage,member_profile_referrals,member_profile_website,member_profile_reputation_vote,member_activate,member_resendactivation,member_lostpw,member_register_additionalfields";	$templatelist = "member_register,member_register_hiddencaptcha,member_register_coppa,member_register_agreement_coppa,member_register_agreement,member_register_customfield,member_register_requiredfields,member_profile_findthreads"; $templatelist .= ",member_loggedin_notice,member_profile_away,member_register_regimage,member_register_regimage_recaptcha_invisible,member_register_regimage_nocaptcha,post_captcha_hcaptcha_invisible,post_captcha_hcaptcha,post_captcha_hidden,post_captcha,member_register_referrer"; $templatelist .= ",member_profile_email,member_profile_offline,member_profile_reputation,member_profile_warn,member_profile_warninglevel,member_profile_warninglevel_link,member_profile_customfields_field,member_profile_customfields,member_profile_adminoptions_manageban,member_profile_adminoptions,member_profile"; $templatelist .= ",member_profile_signature,member_profile_avatar,member_profile_groupimage,member_referrals_link,member_profile_referrals,member_profile_website,member_profile_reputation_vote,member_activate,member_lostpw,member_register_additionalfields";
$templatelist .= ",member_profile_modoptions_manageuser,member_profile_modoptions_editprofile,member_profile_modoptions_banuser,member_profile_modoptions_viewnotes,member_profile_modoptions_editnotes,member_profile_modoptions_purgespammer";	$templatelist .= ",member_profile_modoptions_manageuser,member_profile_modoptions_editprofile,member_profile_modoptions_banuser,member_profile_modoptions_viewnotes,member_profile_modoptions_editnotes,member_profile_modoptions_purgespammer";
$templatelist .= ",usercp_profile_profilefields_select_option,usercp_profile_profilefields_multiselect,usercp_profile_profilefields_select,usercp_profile_profilefields_textarea,usercp_profile_profilefields_radio,usercp_profile_profilefields_checkbox"; $templatelist .= ",member_register_question,member_register_question_refresh,usercp_options_timezone,usercp_options_timezone_option,usercp_options_language_option,member_register_language,member_profile_customfields_field_multi_item,member_profile_customfields_field_multi"; $templatelist .= ",member_profile_contact_fields_aim,member_profile_contact_fields_google,member_profile_contact_fields_icq,member_profile_contact_fields_skype,member_profile_contact_fields_yahoo,member_profile_pm,member_profile_contact_details,member_profile_banned"; $templatelist .= ",member_profile_banned_remaining,member_profile_addremove,member_emailuser_guest,member_register_day,usercp_options_tppselect_option,postbit_warninglevel_formatted,member_profile_userstar,member_profile_findposts,member_profile_findthreads"; $templatelist .= ",usercp_options_tppselect,usercp_options_pppselect,member_resetpassword,member_login,member_profile_online,usercp_options_pppselect_option,postbit_reputation_formatted,member_emailuser,member_profile_modoptions,usercp_profile_profilefields_text";	$templatelist .= ",usercp_profile_profilefields_select_option,usercp_profile_profilefields_multiselect,usercp_profile_profilefields_select,usercp_profile_profilefields_textarea,usercp_profile_profilefields_radio,member_viewnotes"; $templatelist .= ",member_register_question,member_register_question_refresh,usercp_options_timezone,usercp_options_timezone_option,usercp_options_language_option,member_profile_customfields_field_multi_item,member_profile_customfields_field_multi"; $templatelist .= ",member_profile_contact_fields_google,member_profile_contact_fields_icq,member_profile_contact_fields_skype,member_profile_pm,member_profile_contact_details,member_profile_modoptions_manageban"; $templatelist .= ",member_profile_banned_remaining,member_profile_addremove,member_emailuser_guest,member_register_day,usercp_options_tppselect_option,postbit_warninglevel_formatted,member_profile_userstar,member_profile_findposts"; $templatelist .= ",usercp_options_tppselect,usercp_options_pppselect,member_resetpassword,member_login,member_profile_online,usercp_options_pppselect_option,postbit_reputation_formatted,member_emailuser,usercp_profile_profilefields_text"; $templatelist .= ",member_profile_modoptions_ipaddress,member_profile_modoptions,member_profile_banned,member_register_language,member_resendactivation,usercp_profile_profilefields_checkbox,member_register_password,member_coppa_form";
require_once "./global.php"; require_once MYBB_ROOT."inc/functions_post.php"; require_once MYBB_ROOT."inc/functions_user.php"; require_once MYBB_ROOT."inc/class_parser.php";	require_once "./global.php"; require_once MYBB_ROOT."inc/functions_post.php"; require_once MYBB_ROOT."inc/functions_user.php"; require_once MYBB_ROOT."inc/class_parser.php";
	require_once MYBB_ROOT."inc/functions_modcp.php";
$parser = new postParser; // Load global language phrases	$parser = new postParser; // Load global language phrases
Zeile 88	Zeile 90
} }	} }
	$fromreg = 0;
if($mybb->input['action'] == "do_register" && $mybb->request_method == "post") { $plugins->run_hooks("member_do_register_start");	if($mybb->input['action'] == "do_register" && $mybb->request_method == "post") { $plugins->run_hooks("member_do_register_start");
Zeile 201	Zeile 204
$userhandler->set_data($user);	$userhandler->set_data($user);
$errors = "";	$errors = array();
if(!$userhandler->validate_user()) { $errors = $userhandler->get_friendly_errors();	if(!$userhandler->validate_user()) { $errors = $userhandler->get_friendly_errors();
}	}
if($mybb->settings['enablestopforumspam_on_register']) {	if($mybb->settings['enablestopforumspam_on_register']) {
Zeile 223	Zeile 226
try { if($stop_forum_spam_checker->is_user_a_spammer($user['username'], $user['email'], get_ip()))	try { if($stop_forum_spam_checker->is_user_a_spammer($user['username'], $user['email'], get_ip()))
{	{
error($lang->sprintf($lang->error_stop_forum_spam_spammer, $stop_forum_spam_checker->getErrorText(array( 'stopforumspam_check_usernames',	error($lang->sprintf($lang->error_stop_forum_spam_spammer, $stop_forum_spam_checker->getErrorText(array( 'stopforumspam_check_usernames',
Zeile 237	Zeile 240
if($mybb->settings['stopforumspam_block_on_error']) { error($lang->error_stop_forum_spam_fetching);	if($mybb->settings['stopforumspam_block_on_error']) { error($lang->error_stop_forum_spam_fetching);
} } }	} } }
if($mybb->settings['captchaimage']) {	if($mybb->settings['captchaimage']) {
Zeile 277	Zeile 280
foreach($valid_answers as $answers) { if(my_strtolower($answers) == my_strtolower($answer))	foreach($valid_answers as $answers) { if(my_strtolower($answers) == my_strtolower($answer))
{	{
$validated = 1; }	$validated = 1; }
}	}
if($validated != 1) { $update_question = array( "incorrect" => $question['incorrect'] + 1	if($validated != 1) { $update_question = array( "incorrect" => $question['incorrect'] + 1
);	);
$db->update_query("questions", $update_question, "qid='{$question['qid']}'"); $errors[] = $lang->error_question_wrong;	$db->update_query("questions", $update_question, "qid='{$question['qid']}'"); $errors[] = $lang->error_question_wrong;
}	}
else { $update_question = array(	else { $update_question = array(
Zeile 299	Zeile 302
$db->update_query("questions", $update_question, "qid='{$question['qid']}'"); }	$db->update_query("questions", $update_question, "qid='{$question['qid']}'"); }
$db->delete_query("questionsessions", "sid='{$sid}'");	$db->delete_query("questionsessions", "sid='{$question_id}'");
} }	} }
if(is_array($errors))	$regerrors = ''; if(!empty($errors))
{ $username = htmlspecialchars_uni($mybb->get_input('username')); $email = htmlspecialchars_uni($mybb->get_input('email'));	{ $username = htmlspecialchars_uni($mybb->get_input('username')); $email = htmlspecialchars_uni($mybb->get_input('email'));
Zeile 316	Zeile 320
if($mybb->get_input('allownotices', MyBB::INPUT_INT) == 1) { $allownoticescheck = "checked=\"checked\"";	if($mybb->get_input('allownotices', MyBB::INPUT_INT) == 1) { $allownoticescheck = "checked=\"checked\"";
}	}
if($mybb->get_input('hideemail', MyBB::INPUT_INT) == 1) { $hideemailcheck = "checked=\"checked\"";	if($mybb->get_input('hideemail', MyBB::INPUT_INT) == 1) { $hideemailcheck = "checked=\"checked\"";
Zeile 390	Zeile 394
if($mybb->settings['regtype'] != "randompass" && !isset($mybb->cookies['coppauser'])) { // Log them in	if($mybb->settings['regtype'] != "randompass" && !isset($mybb->cookies['coppauser'])) { // Log them in
my_setcookie("mybbuser", $user_info['uid']."_".$user_info['loginkey'], null, true);	my_setcookie("mybbuser", $user_info['uid']."_".$user_info['loginkey'], null, true, "lax");
} if(isset($mybb->cookies['coppauser']))	} if(isset($mybb->cookies['coppauser']))
Zeile 426	Zeile 430
break; default: $emailmessage = $lang->sprintf($lang->email_activateaccount, $user_info['username'], $mybb->settings['bbname'], $mybb->settings['bburl'], $user_info['uid'], $activationcode);	break; default: $emailmessage = $lang->sprintf($lang->email_activateaccount, $user_info['username'], $mybb->settings['bbname'], $mybb->settings['bburl'], $user_info['uid'], $activationcode);
break; } my_mail($user_info['email'], $emailsubject, $emailmessage); $lang->redirect_registered_activation = $lang->sprintf($lang->redirect_registered_activation, $mybb->settings['bbname'], htmlspecialchars_uni($user_info['username'])); $plugins->run_hooks("member_do_register_end");	break; } my_mail($user_info['email'], $emailsubject, $emailmessage); $lang->redirect_registered_activation = $lang->sprintf($lang->redirect_registered_activation, $mybb->settings['bbname'], htmlspecialchars_uni($user_info['username'])); $plugins->run_hooks("member_do_register_end");
error($lang->redirect_registered_activation); } else if($mybb->settings['regtype'] == "randompass")	error($lang->redirect_registered_activation); } else if($mybb->settings['regtype'] == "randompass")
Zeile 442	Zeile 446
switch($mybb->settings['username_method']) { case 0:	switch($mybb->settings['username_method']) { case 0:
$emailmessage = $lang->sprintf($lang->email_randompassword, $user['username'], $mybb->settings['bbname'], $user_info['username'], $user_info['password']);	$emailmessage = $lang->sprintf($lang->email_randompassword, $user['username'], $mybb->settings['bbname'], $user_info['username'], $mybb->get_input('password'));
break; case 1:	break; case 1:
$emailmessage = $lang->sprintf($lang->email_randompassword1, $user['username'], $mybb->settings['bbname'], $user_info['username'], $user_info['password']);	$emailmessage = $lang->sprintf($lang->email_randompassword1, $user['username'], $mybb->settings['bbname'], $user_info['username'], $mybb->get_input('password'));
break; case 2:	break; case 2:
$emailmessage = $lang->sprintf($lang->email_randompassword2, $user['username'], $mybb->settings['bbname'], $user_info['username'], $user_info['password']);	$emailmessage = $lang->sprintf($lang->email_randompassword2, $user['username'], $mybb->settings['bbname'], $user_info['username'], $mybb->get_input('password'));
break; default:	break; default:
$emailmessage = $lang->sprintf($lang->email_randompassword, $user['username'], $mybb->settings['bbname'], $user_info['username'], $user_info['password']);	$emailmessage = $lang->sprintf($lang->email_randompassword, $user['username'], $mybb->settings['bbname'], $user_info['username'], $mybb->get_input('password'));
break; } my_mail($user_info['email'], $emailsubject, $emailmessage);	break; } my_mail($user_info['email'], $emailsubject, $emailmessage);
Zeile 515	Zeile 519
$permissions = user_admin_permissions(); if(array_key_exists('users', $permissions['permissions']) && $adminperms['user']['users'] != 1)	$permissions = user_admin_permissions(); if(array_key_exists('users', $permissions['permissions']) && $adminperms['user']['users'] != 1)
{ continue; // No permissions } } } // Load language if($recipient['language'] != $lang->language && $lang->language_exists($recipient['language'])) { $reset_lang = true; $lang->set_language($recipient['language']); $lang->load("member"); } $subject = $lang->sprintf($lang->newregistration_subject, $mybb->settings['bbname']);	{ continue; // No permissions } } } // Load language if($recipient['language'] != $lang->language && $lang->language_exists($recipient['language'])) { $reset_lang = true; $lang->set_language($recipient['language']); $lang->load("member"); } $subject = $lang->sprintf($lang->newregistration_subject, $mybb->settings['bbname']);
$message = $lang->sprintf($lang->newregistration_message, $recipient['username'], $mybb->settings['bbname'], $user['username']); my_mail($recipient['email'], $subject, $message);	$message = $lang->sprintf($lang->newregistration_message, $recipient['username'], $mybb->settings['bbname'], $user['username']); my_mail($recipient['email'], $subject, $message);
}	}
// Reset language if(isset($reset_lang)) {	// Reset language if(isset($reset_lang)) {
Zeile 541	Zeile 545
$lang->load("member"); } }	$lang->load("member"); } }

$lang->redirect_registered_admin_activate = $lang->sprintf($lang->redirect_registered_admin_activate, $mybb->settings['bbname'], htmlspecialchars_uni($user_info['username'])); $plugins->run_hooks("member_do_register_end");	$lang->redirect_registered_admin_activate = $lang->sprintf($lang->redirect_registered_admin_activate, $mybb->settings['bbname'], htmlspecialchars_uni($user_info['username'])); $plugins->run_hooks("member_do_register_end");
Zeile 559	Zeile 563
if($group['cancp'] == 1) { $admingroups[] = (int)$group['gid'];	if($group['cancp'] == 1) { $admingroups[] = (int)$group['gid'];
} }	} }
} if(!empty($admingroups))	} if(!empty($admingroups))
Zeile 596	Zeile 600
// Verify if we have permissions to access user-users require_once MYBB_ROOT.$mybb->config['admin_dir']."/modules/user/module_meta.php";	// Verify if we have permissions to access user-users require_once MYBB_ROOT.$mybb->config['admin_dir']."/modules/user/module_meta.php";
if(function_exists("user_admin_permissions")) {
// Get admin permissions $adminperms = get_admin_permissions($recipient['uid']);	// Get admin permissions $adminperms = get_admin_permissions($recipient['uid']);
$permissions = user_admin_permissions(); if(array_key_exists('users', $permissions['permissions']) && $adminperms['user']['users'] != 1)	if(empty($adminperms['user']['users']) \|\| $adminperms['user']['users'] != 1)
{ continue; // No permissions }	{ continue; // No permissions }
} }	}
// Load language if($recipient['language'] != $lang->language && $lang->language_exists($recipient['language'])) {	// Load language if($recipient['language'] != $lang->language && $lang->language_exists($recipient['language'])) {
Zeile 620	Zeile 619
$subject = $lang->sprintf($lang->newregistration_subject, $mybb->settings['bbname']); $message = $lang->sprintf($lang->newregistration_message, $recipient['username'], $mybb->settings['bbname'], $user['username']); my_mail($recipient['email'], $subject, $message);	$subject = $lang->sprintf($lang->newregistration_subject, $mybb->settings['bbname']); $message = $lang->sprintf($lang->newregistration_message, $recipient['username'], $mybb->settings['bbname'], $user['username']); my_mail($recipient['email'], $subject, $message);
}	}
// Reset language if(isset($reset_lang)) {	// Reset language if(isset($reset_lang)) {
Zeile 629	Zeile 628
$lang->load("member"); } }	$lang->load("member"); } }

$activationcode = random_str(); $activationarray = array( "uid" => $user_info['uid'],	$activationcode = random_str(); $activationarray = array( "uid" => $user_info['uid'],
Zeile 712	Zeile 711
$bdaymonthsel[$number] = ''; } $bdaymonthsel[$mybb->input['bday2']] = "selected=\"selected\"";	$bdaymonthsel[$number] = ''; } $bdaymonthsel[$mybb->input['bday2']] = "selected=\"selected\"";
$mybb->input['bday3'] = $mybb->get_input('bday3', MyBB::INPUT_INT); if($mybb->input['bday3'] == 0) { $mybb->input['bday3'] = '';	$birthday_year = $mybb->get_input('bday3', MyBB::INPUT_INT); if($birthday_year == 0) { $birthday_year = '';
} // Is COPPA checking enabled? if($mybb->settings['coppa'] != "disabled" && !isset($mybb->input['step'])) { // Just selected DOB, we check	} // Is COPPA checking enabled? if($mybb->settings['coppa'] != "disabled" && !isset($mybb->input['step'])) { // Just selected DOB, we check
if($mybb->input['bday1'] && $mybb->input['bday2'] && $mybb->input['bday3'])	if($mybb->input['bday1'] && $mybb->input['bday2'] && $birthday_year)
{ my_unsetcookie("coppauser");	{ my_unsetcookie("coppauser");
$months = get_bdays($mybb->input['bday3']); if($mybb->input['bday2'] < 1 \|\| $mybb->input['bday2'] > 12 \|\| $mybb->input['bday3'] < (date("Y")-100) \|\| $mybb->input['bday3'] > date("Y") \|\| $mybb->input['bday1'] > $months[$mybb->input['bday2']-1])	$months = get_bdays($birthday_year); if($mybb->input['bday2'] < 1 \|\| $mybb->input['bday2'] > 12 \|\| $birthday_year < (date("Y")-100) \|\| $birthday_year > date("Y") \|\| $mybb->input['bday1'] > $months[$mybb->input['bday2']-1])
{ error($lang->error_invalid_birthday); }	{ error($lang->error_invalid_birthday); }
$bdaytime = @mktime(0, 0, 0, $mybb->input['bday2'], $mybb->input['bday1'], $mybb->input['bday3']);	$bdaytime = @mktime(0, 0, 0, $mybb->input['bday2'], $mybb->input['bday1'], $birthday_year);
// Store DOB in cookie so we can save it with the registration	// Store DOB in cookie so we can save it with the registration
my_setcookie("coppadob", "{$mybb->input['bday1']}-{$mybb->input['bday2']}-{$mybb->input['bday3']}", -1);	my_setcookie("coppadob", "{$mybb->input['bday1']}-{$mybb->input['bday2']}-{$birthday_year}", -1);
// User is <= 13, we mark as a coppa user if($bdaytime >= mktime(0, 0, 0, my_date('n'), my_date('d'), my_date('Y')-13))	// User is <= 13, we mark as a coppa user if($bdaytime >= mktime(0, 0, 0, my_date('n'), my_date('d'), my_date('Y')-13))
Zeile 753	Zeile 752
my_unsetcookie("coppauser");	my_unsetcookie("coppauser");
	$coppa_desc = $mybb->settings['coppa'] == 'deny' ? $lang->coppa_desc_for_deny : $lang->coppa_desc;
eval("\$coppa = \"".$templates->get("member_register_coppa")."\";"); output_page($coppa); exit;	eval("\$coppa = \"".$templates->get("member_register_coppa")."\";"); output_page($coppa); exit;
Zeile 782	Zeile 782
{ $plugins->run_hooks("member_register_start");	{ $plugins->run_hooks("member_register_start");
$validator_extra = '';	// JS validator extra if($mybb->settings['maxnamelength'] > 0 && $mybb->settings['minnamelength'] > 0) { $lang->js_validator_username_length = $lang->sprintf($lang->js_validator_username_length, $mybb->settings['minnamelength'], $mybb->settings['maxnamelength']); }
if(isset($mybb->input['timezoneoffset'])) {	if(isset($mybb->input['timezoneoffset'])) {
Zeile 835	Zeile 839
$ref['username'] = htmlspecialchars_uni($ref['username']); $referrername = $ref['username']; }	$ref['username'] = htmlspecialchars_uni($ref['username']); $referrername = $ref['username']; }
elseif(isset($referrer))	elseif(!empty($referrer))
{ $query = $db->simple_select("users", "username", "uid='".(int)$referrer['uid']."'"); $ref = $db->fetch_array($query);	{ $query = $db->simple_select("users", "username", "uid='".(int)$referrer['uid']."'"); $ref = $db->fetch_array($query);
Zeile 886	Zeile 890
if(is_array($pfcache)) {	if(is_array($pfcache)) {
	$jsvar_reqfields = array();
foreach($pfcache as $profilefield) { if($profilefield['required'] != 1 && $profilefield['registration'] != 1 \|\| !is_member($profilefield['editableby'], array('usergroup' => $mybb->user['usergroup'], 'additionalgroups' => $usergroup)))	foreach($pfcache as $profilefield) { if($profilefield['required'] != 1 && $profilefield['registration'] != 1 \|\| !is_member($profilefield['editableby'], array('usergroup' => $mybb->user['usergroup'], 'additionalgroups' => $usergroup)))
Zeile 893	Zeile 898
continue; }	continue; }
$code = $select = $val = $options = $expoptions = $useropts = $seloptions = '';	$code = $select = $val = $options = $expoptions = $useropts = ''; $seloptions = array();
$profilefield['type'] = htmlspecialchars_uni($profilefield['type']);	$profilefield['type'] = htmlspecialchars_uni($profilefield['type']);
$thing = explode("\n", $profilefield['type'], "2");	$thing = explode("\n", $profilefield['type'], 2);
$type = trim($thing[0]);	$type = trim($thing[0]);
$options = $thing[1];	$options = isset($thing[1]) ? $thing[1] : null;
$select = ''; $field = "fid{$profilefield['fid']}"; $profilefield['description'] = htmlspecialchars_uni($profilefield['description']); $profilefield['name'] = htmlspecialchars_uni($profilefield['name']);	$select = ''; $field = "fid{$profilefield['fid']}"; $profilefield['description'] = htmlspecialchars_uni($profilefield['description']); $profilefield['name'] = htmlspecialchars_uni($profilefield['name']);
if($errors && isset($mybb->input['profile_fields'][$field]))	if(!empty($errors) && isset($mybb->input['profile_fields'][$field]))
{ $userfield = $mybb->input['profile_fields'][$field]; }	{ $userfield = $mybb->input['profile_fields'][$field]; }
Zeile 912	Zeile 918
} if($type == "multiselect") {	} if($type == "multiselect") {
if($errors)	if(!empty($errors))
{ $useropts = $userfield; }	{ $useropts = $userfield; }
Zeile 995	Zeile 1001
} elseif($type == "checkbox") {	} elseif($type == "checkbox") {
if($errors)	if(!empty($errors))
{ $useropts = $userfield; }	{ $useropts = $userfield; }
Zeile 1047	Zeile 1053
// JS validator extra, choose correct selectors for everything except single select which always has value if($type != 'select') {	// JS validator extra, choose correct selectors for everything except single select which always has value if($type != 'select') {
if($type == "textarea") { $inp_selector = "$('textarea[name=\"profile_fields[{$field}]\"]')"; } elseif($type == "multiselect") { $inp_selector = "$('select[name=\"profile_fields[{$field}][]\"]')"; } elseif($type == "checkbox") { $inp_selector = "$('input[name=\"profile_fields[{$field}][]\"]')"; } else { $inp_selector = "$('input[name=\"profile_fields[{$field}]\"]')"; } $validator_extra .= " {$inp_selector}.rules('add', { required: true, messages: { required: '{$lang->js_validator_not_empty}' } });\n";	$jsvar_reqfields[] = array( 'type' => $type, 'fid' => $field, );
} eval("\$requiredfields .= \"".$templates->get("member_register_customfield")."\";");	} eval("\$requiredfields .= \"".$templates->get("member_register_customfield")."\";");
}	}
else { eval("\$customfields .= \"".$templates->get("member_register_customfield")."\";"); } }	else { eval("\$customfields .= \"".$templates->get("member_register_customfield")."\";"); } }

if($requiredfields) { eval("\$requiredfields = \"".$templates->get("member_register_requiredfields")."\";");	if($requiredfields) { eval("\$requiredfields = \"".$templates->get("member_register_requiredfields")."\";");
}	}
if($customfields) { eval("\$customfields = \"".$templates->get("member_register_additionalfields")."\";"); } }	if($customfields) { eval("\$customfields = \"".$templates->get("member_register_additionalfields")."\";"); } }
if(!isset($fromreg))	if(!isset($fromreg) \|\| $fromreg == 0)
{ $allownoticescheck = "checked=\"checked\""; $hideemailcheck = '';	{ $allownoticescheck = "checked=\"checked\""; $hideemailcheck = '';
$emailnotifycheck = '';
$receivepmscheck = "checked=\"checked\""; $pmnoticecheck = " checked=\"checked\""; $pmnotifycheck = '';	$receivepmscheck = "checked=\"checked\""; $pmnoticecheck = " checked=\"checked\""; $pmnotifycheck = '';
Zeile 1111	Zeile 1096
$regerrors = ''; } // Spambot registration image thingy	$regerrors = ''; } // Spambot registration image thingy
	$captcha_html = 0; $regimage = '';
if($mybb->settings['captchaimage']) { require_once MYBB_ROOT.'inc/class_captcha.php'; $captcha = new captcha(true, "member_register_regimage");	if($mybb->settings['captchaimage']) { require_once MYBB_ROOT.'inc/class_captcha.php'; $captcha = new captcha(true, "member_register_regimage");

if($captcha->html) {	if($captcha->html) {
	$captcha_html = 1;
$regimage = $captcha->html;	$regimage = $captcha->html;
if($mybb->settings['captchaimage'] == 1) { // JS validator extra for our default CAPTCHA $validator_extra .= " $('#imagestring').rules('add', { required: true, remote:{ url: 'xmlhttp.php?action=validate_captcha', type: 'post', dataType: 'json', data: { imagehash: function () { return $('#imagehash').val(); }, my_post_key: my_post_key }, }, messages: { remote: '{$lang->js_validator_no_image_text}' } });\n"; }
} } // Security Question $questionbox = '';	} } // Security Question $questionbox = '';
	$question_exists = 0;
if($mybb->settings['securityquestion']) { $sid = generate_question();	if($mybb->settings['securityquestion']) { $sid = generate_question();
Zeile 1159	Zeile 1124
"); if($db->num_rows($query) > 0) {	"); if($db->num_rows($query) > 0) {
	$question_exists = 1;
$question = $db->fetch_array($query);	$question = $db->fetch_array($query);
	//Set parser options for security question $parser_options = array( "allow_html" => 0, "allow_mycode" => 1, "allow_smilies" => 1, "allow_imgcode" => 1, "allow_videocode" => 1, "filter_badwords" => 1, "me_username" => 0, "shorten_urls" => 0, "highlight" => 0, ); //Parse question $question['question'] = $parser->parse_message($question['question'], $parser_options); $question['sid'] = htmlspecialchars_uni($question['sid']);
$refresh = ''; // Total questions	$refresh = ''; // Total questions
Zeile 1169	Zeile 1152
{ eval("\$refresh = \"".$templates->get("member_register_question_refresh")."\";"); }	{ eval("\$refresh = \"".$templates->get("member_register_question_refresh")."\";"); }

eval("\$questionbox = \"".$templates->get("member_register_question")."\";");	eval("\$questionbox = \"".$templates->get("member_register_question")."\";");
$validator_extra .= " $('#answer').rules('add', { required: true, remote:{ url: 'xmlhttp.php?action=validate_question', type: 'post', dataType: 'json', data: { question: function () { return $('#question_id').val(); }, my_post_key: my_post_key }, }, messages: { remote: '{$lang->js_validator_no_security_question}' } });\n";
} }	} }
Zeile 1211	Zeile 1174
if($mybb->settings['requirecomplexpasswords'] == 1) { $lang->password = $lang->complex_password = $lang->sprintf($lang->complex_password, $mybb->settings['minpasswordlength']);	if($mybb->settings['requirecomplexpasswords'] == 1) { $lang->password = $lang->complex_password = $lang->sprintf($lang->complex_password, $mybb->settings['minpasswordlength']);
$validator_extra .= " $('#password').rules('add', { required: true, minlength: {$mybb->settings['minpasswordlength']}, remote:{ url: 'xmlhttp.php?action=complex_password', type: 'post', dataType: 'json', data: { my_post_key: my_post_key }, }, messages: { minlength: '{$lang->js_validator_password_length}', required: '{$lang->js_validator_password_length}', remote: '{$lang->js_validator_no_image_text}' } });\n"; } else { $validator_extra .= " $('#password').rules('add', { required: true, minlength: {$mybb->settings['minpasswordlength']}, messages: { minlength: '{$lang->js_validator_password_length}', required: '{$lang->js_validator_password_length}' } });\n";
}	}
$validator_extra .= " $('#password2').rules('add', { required: true, minlength: {$mybb->settings['minpasswordlength']}, equalTo: '#password', messages: { minlength: '{$lang->js_validator_password_length}', required: '{$lang->js_validator_password_length}', equalTo: '{$lang->js_validator_password_matches}' } });\n";
eval("\$passboxes = \"".$templates->get("member_register_password")."\";");	eval("\$passboxes = \"".$templates->get("member_register_password")."\";");
} // JS validator extra if($mybb->settings['maxnamelength'] > 0 && $mybb->settings['minnamelength'] > 0) { $lang->js_validator_username_length = $lang->sprintf($lang->js_validator_username_length, $mybb->settings['minnamelength'], $mybb->settings['maxnamelength']);
} $languages = $lang->get_languages();	} $languages = $lang->get_languages();
Zeile 1278	Zeile 1190
if($mybb->get_input('language') == $name) { $sel = " selected=\"selected\"";	if($mybb->get_input('language') == $name) { $sel = " selected=\"selected\"";
}	}
eval('$langoptions .= "'.$templates->get('usercp_options_language_option').'";'); }	eval('$langoptions .= "'.$templates->get('usercp_options_language_option').'";'); }
Zeile 1290	Zeile 1202
$time = TIME_NOW; $plugins->run_hooks("member_register_end");	$time = TIME_NOW; $plugins->run_hooks("member_register_end");
	$jsvar_reqfields = json_encode($jsvar_reqfields); $validator_javascript = "<script type=\"text/javascript\"> var regsettings = { requiredfields: '{$jsvar_reqfields}', minnamelength: '{$mybb->settings['minnamelength']}', maxnamelength: '{$mybb->settings['maxnamelength']}', minpasswordlength: '{$mybb->settings['minpasswordlength']}', captchaimage: '{$mybb->settings['captchaimage']}', captchahtml: '{$captcha_html}', securityquestion: '{$mybb->settings['securityquestion']}', questionexists: '{$question_exists}', requirecomplexpasswords: '{$mybb->settings['requirecomplexpasswords']}', regtype: '{$mybb->settings['regtype']}', hiddencaptchaimage: '{$mybb->settings['hiddencaptchaimage']}' }; lang.js_validator_no_username = '{$lang->js_validator_no_username}'; lang.js_validator_username_length = '{$lang->js_validator_username_length}'; lang.js_validator_invalid_email = '{$lang->js_validator_invalid_email}'; lang.js_validator_email_match = '{$lang->js_validator_email_match}'; lang.js_validator_not_empty = '{$lang->js_validator_not_empty}'; lang.js_validator_password_length = '{$lang->js_validator_password_length}'; lang.js_validator_password_matches = '{$lang->js_validator_password_matches}'; lang.js_validator_no_image_text = '{$lang->js_validator_no_image_text}'; lang.js_validator_no_security_question = '{$lang->js_validator_no_security_question}'; lang.js_validator_bad_password_security = '{$lang->js_validator_bad_password_security}'; </script>\n";
eval("\$registration = \"".$templates->get("member_register")."\";"); output_page($registration); } }	eval("\$registration = \"".$templates->get("member_register")."\";"); output_page($registration); } }

if($mybb->input['action'] == "activate") { $plugins->run_hooks("member_activate_start");	if($mybb->input['action'] == "activate") { $plugins->run_hooks("member_activate_start");
if(isset($mybb->input['username'])) { $mybb->input['username'] = $mybb->get_input('username'); $options = array( 'username_method' => $mybb->settings['username_method'], 'fields' => '*', ); $user = get_user_by_username($mybb->input['username'], $options); if(!$user) { switch($mybb->settings['username_method']) { case 0: error($lang->error_invalidpworusername); break; case 1: error($lang->error_invalidpworusername1); break; case 2:	if(isset($mybb->input['username'])) { $mybb->input['username'] = $mybb->get_input('username'); $options = array( 'username_method' => $mybb->settings['username_method'], 'fields' => '*', ); $user = get_user_by_username($mybb->input['username'], $options); if(!$user) { switch($mybb->settings['username_method']) { case 0: error($lang->error_invalidpworusername); break; case 1: error($lang->error_invalidpworusername1); break; case 2:
error($lang->error_invalidpworusername2); break; default:	error($lang->error_invalidpworusername2); break; default:
Zeile 1340	Zeile 1281
{ error($lang->error_alreadyactivated); }	{ error($lang->error_alreadyactivated); }
if($activation['code'] != $mybb->get_input('code'))	if($activation['code'] !== $mybb->get_input('code'))
{ error($lang->error_badactivationcode);	{ error($lang->error_badactivationcode);
}	}
if($activation['type'] == "b" && $activation['validated'] == 1) { error($lang->error_alreadyvalidated);	if($activation['type'] == "b" && $activation['validated'] == 1) { error($lang->error_alreadyvalidated);
}	}
$db->delete_query("awaitingactivation", "uid='".$user['uid']."' AND (type='r' OR type='e')"); if($user['usergroup'] == 5 && $activation['type'] != "e" && $activation['type'] != "b")	$db->delete_query("awaitingactivation", "uid='".$user['uid']."' AND (type='r' OR type='e')"); if($user['usergroup'] == 5 && $activation['type'] != "e" && $activation['type'] != "b")
Zeile 1359	Zeile 1300
$cache->update_awaitingactivation(); } if($activation['type'] == "e")	$cache->update_awaitingactivation(); } if($activation['type'] == "e")
{	{
$newemail = array( "email" => $db->escape_string($activation['misc']), );	$newemail = array( "email" => $db->escape_string($activation['misc']), );
Zeile 1369	Zeile 1310
redirect("usercp.php", $lang->redirect_emailupdated); } elseif($activation['type'] == "b")	redirect("usercp.php", $lang->redirect_emailupdated); } elseif($activation['type'] == "b")
{	{
$update = array( "validated" => 1, );	$update = array( "validated" => 1, );
Zeile 1379	Zeile 1320
redirect("index.php", $lang->redirect_accountactivated_admin, "", true); } else	redirect("index.php", $lang->redirect_accountactivated_admin, "", true); } else
{	{
$plugins->run_hooks("member_activate_accountactivated"); redirect("index.php", $lang->redirect_accountactivated);	$plugins->run_hooks("member_activate_accountactivated"); redirect("index.php", $lang->redirect_accountactivated);
Zeile 1399	Zeile 1340
eval("\$activate = \"".$templates->get("member_activate")."\";"); output_page($activate);	eval("\$activate = \"".$templates->get("member_activate")."\";"); output_page($activate);
}	} } if($mybb->input['action'] == "do_resendactivation" && $mybb->request_method == "post") { $plugins->run_hooks("member_do_resendactivation_start"); if($mybb->settings['regtype'] == "admin") { error($lang->error_activated_by_admin); } $errors = array(); if($mybb->settings['captchaimage']) { require_once MYBB_ROOT.'inc/class_captcha.php'; $captcha = new captcha; if($captcha->validate_captcha() == false) { // CAPTCHA validation failed foreach($captcha->get_errors() as $error) { $errors[] = $error; } } } $query = $db->query(" SELECT u.uid, u.username, u.usergroup, u.email, a.code, a.type, a.validated FROM ".TABLE_PREFIX."users u LEFT JOIN ".TABLE_PREFIX."awaitingactivation a ON (a.uid=u.uid AND (a.type='r' OR a.type='b')) WHERE u.email='".$db->escape_string($mybb->get_input('email'))."' "); $numusers = $db->num_rows($query); if($numusers < 1) { error($lang->error_invalidemail); } else { if(count($errors) == 0) { while($user = $db->fetch_array($query)) { if($user['type'] == "b" && $user['validated'] == 1) { error($lang->error_activated_by_admin); } if($user['usergroup'] == 5) { if(!$user['code']) { $user['code'] = random_str(); $uid = $user['uid']; $awaitingarray = array( "uid" => $uid, "dateline" => TIME_NOW, "code" => $user['code'], "type" => $user['type'] ); $db->insert_query("awaitingactivation", $awaitingarray); } $username = $user['username']; $email = $user['email']; $activationcode = $user['code']; $emailsubject = $lang->sprintf($lang->emailsubject_activateaccount, $mybb->settings['bbname']); switch($mybb->settings['username_method']) { case 0: $emailmessage = $lang->sprintf($lang->email_activateaccount, $user['username'], $mybb->settings['bbname'], $mybb->settings['bburl'], $user['uid'], $activationcode); break; case 1: $emailmessage = $lang->sprintf($lang->email_activateaccount1, $user['username'], $mybb->settings['bbname'], $mybb->settings['bburl'], $user['uid'], $activationcode); break; case 2: $emailmessage = $lang->sprintf($lang->email_activateaccount2, $user['username'], $mybb->settings['bbname'], $mybb->settings['bburl'], $user['uid'], $activationcode); break; default: $emailmessage = $lang->sprintf($lang->email_activateaccount, $user['username'], $mybb->settings['bbname'], $mybb->settings['bburl'], $user['uid'], $activationcode); break; } my_mail($email, $emailsubject, $emailmessage); } } $plugins->run_hooks("member_do_resendactivation_end"); redirect("index.php", $lang->redirect_activationresent); } else { $mybb->input['action'] = "resendactivation"; } }
} if($mybb->input['action'] == "resendactivation")	} if($mybb->input['action'] == "resendactivation")
Zeile 1407	Zeile 1444
$plugins->run_hooks("member_resendactivation"); if($mybb->settings['regtype'] == "admin")	$plugins->run_hooks("member_resendactivation"); if($mybb->settings['regtype'] == "admin")
{ error($lang->error_activated_by_admin); }	{ error($lang->error_activated_by_admin); }
if($mybb->user['uid'] && $mybb->user['usergroup'] != 5) { error($lang->error_alreadyactivated);	if($mybb->user['uid'] && $mybb->user['usergroup'] != 5) { error($lang->error_alreadyactivated);
} $query = $db->simple_select("awaitingactivation", "*", "uid='".$user['uid']."' AND type='b'");	} $query = $db->simple_select("awaitingactivation", "*", "uid='".$mybb->user['uid']."' AND type='b'");
$activation = $db->fetch_array($query); if($activation['validated'] == 1) { error($lang->error_activated_by_admin);	$activation = $db->fetch_array($query); if($activation['validated'] == 1) { error($lang->error_activated_by_admin);
	} $captcha = ''; // Generate CAPTCHA? if($mybb->settings['captchaimage']) { require_once MYBB_ROOT.'inc/class_captcha.php'; $post_captcha = new captcha(true, "post_captcha"); if($post_captcha->html) { $captcha = $post_captcha->html; } } if(isset($errors) && count($errors) > 0) { $errors = inline_error($errors); $email = htmlspecialchars_uni($mybb->get_input('email')); } else { $errors = ''; $email = '';
} $plugins->run_hooks("member_resendactivation_end"); eval("\$activate = \"".$templates->get("member_resendactivation")."\";"); output_page($activate);	} $plugins->run_hooks("member_resendactivation_end"); eval("\$activate = \"".$templates->get("member_resendactivation")."\";"); output_page($activate);
} if($mybb->input['action'] == "do_resendactivation" && $mybb->request_method == "post") { $plugins->run_hooks("member_do_resendactivation_start"); if($mybb->settings['regtype'] == "admin") { error($lang->error_activated_by_admin); } $query = $db->query(" SELECT u.uid, u.username, u.usergroup, u.email, a.code, a.type, a.validated FROM ".TABLE_PREFIX."users u LEFT JOIN ".TABLE_PREFIX."awaitingactivation a ON (a.uid=u.uid AND a.type='r' OR a.type='b') WHERE u.email='".$db->escape_string($mybb->get_input('email'))."' ");	} if($mybb->input['action'] == "do_lostpw" && $mybb->request_method == "post") { $plugins->run_hooks("member_do_lostpw_start"); $errors = array(); if($mybb->settings['captchaimage']) { require_once MYBB_ROOT.'inc/class_captcha.php'; $captcha = new captcha; if($captcha->validate_captcha() == false) { // CAPTCHA validation failed foreach($captcha->get_errors() as $error) { $errors[] = $error; } } } $query = $db->simple_select("users", "*", "email='".$db->escape_string($mybb->get_input('email'))."'");
$numusers = $db->num_rows($query); if($numusers < 1)	$numusers = $db->num_rows($query); if($numusers < 1)
{	{
error($lang->error_invalidemail); } else {	error($lang->error_invalidemail); } else {
while($user = $db->fetch_array($query))	if(count($errors) == 0)
{	{
if($user['type'] == "b" && $user['validated'] == 1)	while($user = $db->fetch_array($query))
{	{
error($lang->error_activated_by_admin); } if($user['usergroup'] == 5) { if(!$user['code']) { $user['code'] = random_str(); $uid = $user['uid']; $awaitingarray = array( "uid" => $uid, "dateline" => TIME_NOW, "code" => $user['code'], "type" => $user['type'] ); $db->insert_query("awaitingactivation", $awaitingarray); }	$db->delete_query("awaitingactivation", "uid='{$user['uid']}' AND type='p'"); $user['activationcode'] = random_str(30); $now = TIME_NOW; $uid = $user['uid']; $awaitingarray = array( "uid" => $user['uid'], "dateline" => TIME_NOW, "code" => $user['activationcode'], "type" => "p" ); $db->insert_query("awaitingactivation", $awaitingarray);
$username = $user['username']; $email = $user['email'];	$username = $user['username']; $email = $user['email'];
$activationcode = $user['code']; $emailsubject = $lang->sprintf($lang->emailsubject_activateaccount, $mybb->settings['bbname']);	$activationcode = $user['activationcode']; $emailsubject = $lang->sprintf($lang->emailsubject_lostpw, $mybb->settings['bbname']);
switch($mybb->settings['username_method']) { case 0:	switch($mybb->settings['username_method']) { case 0:
$emailmessage = $lang->sprintf($lang->email_activateaccount, $user['username'], $mybb->settings['bbname'], $mybb->settings['bburl'], $user['uid'], $activationcode);	$emailmessage = $lang->sprintf($lang->email_lostpw, $username, $mybb->settings['bbname'], $mybb->settings['bburl'], $uid, $activationcode);
break; case 1:	break; case 1:
$emailmessage = $lang->sprintf($lang->email_activateaccount1, $user['username'], $mybb->settings['bbname'], $mybb->settings['bburl'], $user['uid'], $activationcode);	$emailmessage = $lang->sprintf($lang->email_lostpw1, $username, $mybb->settings['bbname'], $mybb->settings['bburl'], $uid, $activationcode);
break; case 2:	break; case 2:
$emailmessage = $lang->sprintf($lang->email_activateaccount2, $user['username'], $mybb->settings['bbname'], $mybb->settings['bburl'], $user['uid'], $activationcode);	$emailmessage = $lang->sprintf($lang->email_lostpw2, $username, $mybb->settings['bbname'], $mybb->settings['bburl'], $uid, $activationcode);
break; default:	break; default:
$emailmessage = $lang->sprintf($lang->email_activateaccount, $user['username'], $mybb->settings['bbname'], $mybb->settings['bburl'], $user['uid'], $activationcode);	$emailmessage = $lang->sprintf($lang->email_lostpw, $username, $mybb->settings['bbname'], $mybb->settings['bburl'], $uid, $activationcode);
break; } my_mail($email, $emailsubject, $emailmessage); }	break; } my_mail($email, $emailsubject, $emailmessage); }
} $plugins->run_hooks("member_do_resendactivation_end");

redirect("index.php", $lang->redirect_activationresent);	$plugins->run_hooks("member_do_lostpw_end"); redirect("index.php", $lang->redirect_lostpwsent, "", true); } else { $mybb->input['action'] = "lostpw"; }
} }	} }
Zeile 1504	Zeile 1572
{ $plugins->run_hooks("member_lostpw");	{ $plugins->run_hooks("member_lostpw");
eval("\$lostpw = \"".$templates->get("member_lostpw")."\";"); output_page($lostpw); } if($mybb->input['action'] == "do_lostpw" && $mybb->request_method == "post") { $plugins->run_hooks("member_do_lostpw_start"); $email = $db->escape_string($email); $query = $db->simple_select("users", "*", "email='".$db->escape_string($mybb->get_input('email'))."'"); $numusers = $db->num_rows($query); if($numusers < 1) { error($lang->error_invalidemail); } else	$captcha = ''; // Generate CAPTCHA? if($mybb->settings['captchaimage'])
{	{
while($user = $db->fetch_array($query))	require_once MYBB_ROOT.'inc/class_captcha.php'; $post_captcha = new captcha(true, "post_captcha"); if($post_captcha->html)
{	{
$db->delete_query("awaitingactivation", "uid='{$user['uid']}' AND type='p'"); $user['activationcode'] = random_str(); $now = TIME_NOW; $uid = $user['uid']; $awaitingarray = array( "uid" => $user['uid'], "dateline" => TIME_NOW, "code" => $user['activationcode'], "type" => "p" ); $db->insert_query("awaitingactivation", $awaitingarray); $username = $user['username']; $email = $user['email']; $activationcode = $user['activationcode']; $emailsubject = $lang->sprintf($lang->emailsubject_lostpw, $mybb->settings['bbname']); switch($mybb->settings['username_method']) { case 0: $emailmessage = $lang->sprintf($lang->email_lostpw, $username, $mybb->settings['bbname'], $mybb->settings['bburl'], $uid, $activationcode); break; case 1: $emailmessage = $lang->sprintf($lang->email_lostpw1, $username, $mybb->settings['bbname'], $mybb->settings['bburl'], $uid, $activationcode); break; case 2: $emailmessage = $lang->sprintf($lang->email_lostpw2, $username, $mybb->settings['bbname'], $mybb->settings['bburl'], $uid, $activationcode); break; default: $emailmessage = $lang->sprintf($lang->email_lostpw, $username, $mybb->settings['bbname'], $mybb->settings['bburl'], $uid, $activationcode); break; } my_mail($email, $emailsubject, $emailmessage);	$captcha = $post_captcha->html;
} }	} }
$plugins->run_hooks("member_do_lostpw_end");

redirect("index.php", $lang->redirect_lostpwsent, "", true);	if(isset($errors) && count($errors) > 0) { $errors = inline_error($errors); $email = htmlspecialchars_uni($mybb->get_input('email')); } else { $errors = ''; $email = ''; } eval("\$lostpw = \"".$templates->get("member_lostpw")."\";"); output_page($lostpw);
} if($mybb->input['action'] == "resetpassword")	} if($mybb->input['action'] == "resetpassword")
Zeile 1602	Zeile 1641
$query = $db->simple_select("awaitingactivation", "code", "uid='".$user['uid']."' AND type='p'"); $activationcode = $db->fetch_field($query, 'code'); $now = TIME_NOW;	$query = $db->simple_select("awaitingactivation", "code", "uid='".$user['uid']."' AND type='p'"); $activationcode = $db->fetch_field($query, 'code'); $now = TIME_NOW;
if(!$activationcode \|\| $activationcode != $mybb->get_input('code'))	if(!$activationcode \|\| $activationcode !== $mybb->get_input('code'))
{ error($lang->error_badlostpwcode); }	{ error($lang->error_badlostpwcode); }
Zeile 1642	Zeile 1681
'salt' => $userhandler->data['salt'], 'password' => $userhandler->data['saltedpw'], 'loginkey' => $userhandler->data['loginkey'],	'salt' => $userhandler->data['salt'], 'password' => $userhandler->data['saltedpw'], 'loginkey' => $userhandler->data['loginkey'],
); $email = $user['email'];	); $email = $user['email'];
$plugins->run_hooks("member_resetpassword_process");	$plugins->run_hooks("member_resetpassword_process");
Zeile 1663	Zeile 1702
switch($mybb->settings['username_method']) { case 0:	switch($mybb->settings['username_method']) { case 0:
$lang_username = $lang->username;	$lang_username = $lang->username;
break; case 1: $lang_username = $lang->username1;	break; case 1: $lang_username = $lang->username1;
Zeile 1676	Zeile 1715
break; }	break; }
$code = $mybb->get_input('code'); if(!isset($user['username']))	$code = htmlspecialchars_uni($mybb->get_input('code')); if(!isset($mybb->input['username']))
{	{
$user['username'] = '';	$input_username = '';
}	}
$user['username'] = htmlspecialchars_uni($user['username']);	$input_username = htmlspecialchars_uni($mybb->input['username']);
eval("\$activate = \"".$templates->get("member_resetpassword")."\";"); output_page($activate);	eval("\$activate = \"".$templates->get("member_resetpassword")."\";"); output_page($activate);
Zeile 1693	Zeile 1732
$inline_errors = ""; if($mybb->input['action'] == "do_login" && $mybb->request_method == "post") {	$inline_errors = ""; if($mybb->input['action'] == "do_login" && $mybb->request_method == "post") {
$plugins->run_hooks("member_do_login_start"); // Is a fatal call if user has had too many tries	verify_post_check($mybb->get_input('my_post_key'));
$errors = array();	$errors = array();
$logins = login_attempt_check();	$plugins->run_hooks("member_do_login_start");
require_once MYBB_ROOT."inc/datahandlers/login.php"; $loginhandler = new LoginDataHandler("get"); if($mybb->get_input('quick_password') && $mybb->get_input('quick_username'))	require_once MYBB_ROOT."inc/datahandlers/login.php"; $loginhandler = new LoginDataHandler("get"); if($mybb->get_input('quick_password') && $mybb->get_input('quick_username'))
{	{
$mybb->input['password'] = $mybb->get_input('quick_password'); $mybb->input['username'] = $mybb->get_input('quick_username'); $mybb->input['remember'] = $mybb->get_input('quick_remember');	$mybb->input['password'] = $mybb->get_input('quick_password'); $mybb->input['username'] = $mybb->get_input('quick_username'); $mybb->input['remember'] = $mybb->get_input('quick_remember');
}	}
$user = array( 'username' => $mybb->get_input('username'), 'password' => $mybb->get_input('password'), 'remember' => $mybb->get_input('remember'), 'imagestring' => $mybb->get_input('imagestring')	$user = array( 'username' => $mybb->get_input('username'), 'password' => $mybb->get_input('password'), 'remember' => $mybb->get_input('remember'), 'imagestring' => $mybb->get_input('imagestring')
);	);
$options = array( 'fields' => 'loginattempts', 'username_method' => (int)$mybb->settings['username_method'], ); $user_loginattempts = get_user_by_username($user['username'], $options);	$options = array( 'fields' => 'loginattempts', 'username_method' => (int)$mybb->settings['username_method'], ); $user_loginattempts = get_user_by_username($user['username'], $options);
$user['loginattempts'] = (int)$user_loginattempts['loginattempts'];	if(!empty($user_loginattempts)) { $user['loginattempts'] = (int)$user_loginattempts['loginattempts']; }
$loginhandler->set_data($user); $validated = $loginhandler->validate_login(); if(!$validated)	$loginhandler->set_data($user); $validated = $loginhandler->validate_login(); if(!$validated)
{	{
$mybb->input['action'] = "login"; $mybb->request_method = "get";	$mybb->input['action'] = "login"; $mybb->request_method = "get";
my_setcookie('loginattempts', $logins + 1); $db->update_query("users", array('loginattempts' => 'loginattempts+1'), "uid='".(int)$loginhandler->login_data['uid']."'", 1, true);	$login_user_uid = 0; if(!empty($loginhandler->login_data)) { $login_user_uid = (int)$loginhandler->login_data['uid']; $user['loginattempts'] = (int)$loginhandler->login_data['loginattempts']; } // Is a fatal call if user has had too many tries $logins = login_attempt_check($login_user_uid); $db->update_query("users", array('loginattempts' => 'loginattempts+1'), "uid='".$login_user_uid."'", 1, true);
$errors = $loginhandler->get_friendly_errors();	$errors = $loginhandler->get_friendly_errors();
$user['loginattempts'] = (int)$loginhandler->login_data['loginattempts'];
// If we need a captcha set it here	// If we need a captcha set it here
if($mybb->settings['failedcaptchalogincount'] > 0 && ($user['loginattempts'] > $mybb->settings['failedcaptchalogincount'] \|\| (int)$mybb->cookies['loginattempts'] > $mybb->settings['failedcaptchalogincount'])) {	if( $mybb->settings['failedcaptchalogincount'] > 0 && ( ( isset($user['loginattempts']) && $user['loginattempts'] > $mybb->settings['failedcaptchalogincount'] ) \|\| ( isset($mybb->cookies['loginattempts']) && (int)$mybb->cookies['loginattempts'] > $mybb->settings['failedcaptchalogincount'] ) ) ) {
$do_captcha = true; $correct = $loginhandler->captcha_verified; }	$do_captcha = true; $correct = $loginhandler->captcha_verified; }
Zeile 1750	Zeile 1811
{ // Successful login if($loginhandler->login_data['coppauser'])	{ // Successful login if($loginhandler->login_data['coppauser'])
{	{
error($lang->error_awaitingcoppa); }	error($lang->error_awaitingcoppa); }
Zeile 1759	Zeile 1820
$plugins->run_hooks("member_do_login_end"); $mybb->input['url'] = $mybb->get_input('url');	$plugins->run_hooks("member_do_login_end"); $mybb->input['url'] = $mybb->get_input('url');

if(!empty($mybb->input['url']) && my_strpos(basename($mybb->input['url']), 'member.php') === false && !preg_match('#^javascript:#i', $mybb->input['url'])) { if((my_strpos(basename($mybb->input['url']), 'newthread.php') !== false \|\| my_strpos(basename($mybb->input['url']), 'newreply.php') !== false) && my_strpos($mybb->input['url'], '&processed=1') !== false)	if(!empty($mybb->input['url']) && my_strpos(basename($mybb->input['url']), 'member.php') === false && !preg_match('#^javascript:#i', $mybb->input['url'])) { if((my_strpos(basename($mybb->input['url']), 'newthread.php') !== false \|\| my_strpos(basename($mybb->input['url']), 'newreply.php') !== false) && my_strpos($mybb->input['url'], '&processed=1') !== false)
{	{
$mybb->input['url'] = str_replace('&processed=1', '', $mybb->input['url']);	$mybb->input['url'] = str_replace('&processed=1', '', $mybb->input['url']);
}	}
$mybb->input['url'] = str_replace('&', '&', $mybb->input['url']);	$mybb->input['url'] = str_replace('&', '&', $mybb->input['url']);
	if(my_strpos($mybb->input['url'], $mybb->settings['bburl'].'/') !== 0) { if(my_strpos($mybb->input['url'], '/') === 0) { $mybb->input['url'] = my_substr($mybb->input['url'], 1); } $url_segments = explode('/', $mybb->input['url']); $mybb->input['url'] = $mybb->settings['bburl'].'/'.end($url_segments); }
// Redirect to the URL if it is not member.php redirect($mybb->input['url'], $lang->redirect_loggedin);	// Redirect to the URL if it is not member.php redirect($mybb->input['url'], $lang->redirect_loggedin);
Zeile 1795	Zeile 1866
} // Checks to make sure the user can login; they haven't had too many tries at logging in.	} // Checks to make sure the user can login; they haven't had too many tries at logging in.
// Is a fatal call if user has had too many tries	// Is a fatal call if user has had too many tries. This particular check uses cookies, as a uid is not set yet // and we can't check loginattempts in the db
login_attempt_check(); // Redirect to the page where the user came from, but not if that was the login page.	login_attempt_check(); // Redirect to the page where the user came from, but not if that was the login page.
Zeile 1815	Zeile 1887
require_once MYBB_ROOT.'inc/class_captcha.php'; $login_captcha = new captcha(false, "post_captcha");	require_once MYBB_ROOT.'inc/class_captcha.php'; $login_captcha = new captcha(false, "post_captcha");
if($login_captcha->type == 1)	if($login_captcha->type == captcha::DEFAULT_CAPTCHA)
{ if(!$correct) {	{ if(!$correct) {
Zeile 1826	Zeile 1898
$captcha = $login_captcha->build_hidden_captcha(); } }	$captcha = $login_captcha->build_hidden_captcha(); } }
elseif($login_captcha->type == 2 \|\| $login_captcha->type == 4)	elseif(in_array($login_captcha->type, array(captcha::NOCAPTCHA_RECAPTCHA, captcha::RECAPTCHA_INVISIBLE, captcha::RECAPTCHA_V3)))
{ $login_captcha->build_recaptcha();	{ $login_captcha->build_recaptcha();
	} elseif(in_array($login_captcha->type, array(captcha::HCAPTCHA, captcha::HCAPTCHA_INVISIBLE))) { $login_captcha->build_hcaptcha();
} if($login_captcha->html) { $captcha = $login_captcha->html; }	} if($login_captcha->html) { $captcha = $login_captcha->html; }
}	}
$username = ""; $password = ""; if(isset($mybb->input['username']) && $mybb->request_method == "post") { $username = htmlspecialchars_uni($mybb->get_input('username'));	$username = ""; $password = ""; if(isset($mybb->input['username']) && $mybb->request_method == "post") { $username = htmlspecialchars_uni($mybb->get_input('username'));
}	}
if(isset($mybb->input['password']) && $mybb->request_method == "post") {	if(isset($mybb->input['password']) && $mybb->request_method == "post") {
Zeile 1855	Zeile 1931
$mybb->request_method = "get"; $inline_errors = inline_error($errors);	$mybb->request_method = "get"; $inline_errors = inline_error($errors);
}	}
switch($mybb->settings['username_method']) {	switch($mybb->settings['username_method']) {
Zeile 1941	Zeile 2017
if($mybb->input['action'] == "profile") {	if($mybb->input['action'] == "profile") {
$plugins->run_hooks("member_profile_start");
if($mybb->usergroup['canviewprofiles'] == 0) { error_no_permission();	if($mybb->usergroup['canviewprofiles'] == 0) { error_no_permission();
}	}
$uid = $mybb->get_input('uid', MyBB::INPUT_INT); if($uid) {	$uid = $mybb->get_input('uid', MyBB::INPUT_INT); if($uid) {
Zeile 1968	Zeile 2042
} $uid = $memprofile['uid'];	} $uid = $memprofile['uid'];
	$plugins->run_hooks("member_profile_start");
$me_username = $memprofile['username']; $memprofile['username'] = htmlspecialchars_uni($memprofile['username']);	$me_username = $memprofile['username']; $memprofile['username'] = htmlspecialchars_uni($memprofile['username']);
Zeile 1975	Zeile 2051
// Get member's permissions $memperms = user_permissions($memprofile['uid']);	// Get member's permissions $memperms = user_permissions($memprofile['uid']);
	// Set display group $displaygroupfields = array("title", "description", "namestyle", "usertitle", "stars", "starimage", "image"); if(!$memprofile['displaygroup']) { $memprofile['displaygroup'] = $memprofile['usergroup']; } $displaygroup = usergroup_displaygroup($memprofile['displaygroup']); if(is_array($displaygroup)) { $memperms = array_merge($memperms, $displaygroup); }
$lang->nav_profile = $lang->sprintf($lang->nav_profile, $memprofile['username']); add_breadcrumb($lang->nav_profile); $lang->users_forum_info = $lang->sprintf($lang->users_forum_info, $memprofile['username']); $lang->users_contact_details = $lang->sprintf($lang->users_contact_details, $memprofile['username']);	$lang->nav_profile = $lang->sprintf($lang->nav_profile, $memprofile['username']); add_breadcrumb($lang->nav_profile); $lang->users_forum_info = $lang->sprintf($lang->users_forum_info, $memprofile['username']); $lang->users_contact_details = $lang->sprintf($lang->users_contact_details, $memprofile['username']);
if($mybb->settings['enablepms'] != 0 && (($memprofile['receivepms'] != 0 && $memperms['canusepms'] != 0 && my_strpos(",".$memprofile['ignorelist'].",", ",".$mybb->user['uid'].",") === false) \|\| $mybb->usergroup['canoverridepm'] == 1)) { $lang->send_pm = $lang->sprintf($lang->send_pm, $memprofile['username']); } else { $lang->send_pm = ''; }	$lang->send_pm = $lang->sprintf($lang->send_pm, $memprofile['username']);
$lang->away_note = $lang->sprintf($lang->away_note, $memprofile['username']); $lang->users_additional_info = $lang->sprintf($lang->users_additional_info, $memprofile['username']); $lang->users_signature = $lang->sprintf($lang->users_signature, $memprofile['username']);	$lang->away_note = $lang->sprintf($lang->away_note, $memprofile['username']); $lang->users_additional_info = $lang->sprintf($lang->users_additional_info, $memprofile['username']); $lang->users_signature = $lang->sprintf($lang->users_signature, $memprofile['username']);
Zeile 1999	Zeile 2081
eval("\$avatar = \"".$templates->get("member_profile_avatar")."\";"); $website = $sendemail = $sendpm = $contact_details = '';	eval("\$avatar = \"".$templates->get("member_profile_avatar")."\";"); $website = $sendemail = $sendpm = $contact_details = '';

if(my_validate_url($memprofile['website']) && !is_member($mybb->settings['hidewebsite']) && $memperms['canchangewebsite'] == 1) { $memprofile['website'] = htmlspecialchars_uni($memprofile['website']); $bgcolor = alt_trow(); eval("\$website = \"".$templates->get("member_profile_website")."\";"); }	if(my_validate_url($memprofile['website']) && !is_member($mybb->settings['hidewebsite']) && $memperms['canchangewebsite'] == 1) { $memprofile['website'] = htmlspecialchars_uni($memprofile['website']); $bgcolor = alt_trow(); eval("\$website = \"".$templates->get("member_profile_website")."\";"); }
if($memprofile['hideemail'] != 1 && (my_strpos(",".$memprofile['ignorelist'].",", ",".$mybb->user['uid'].",") === false \|\| $mybb->usergroup['cansendemailoverride'] != 0))	if($mybb->usergroup['cansendemail'] == 1 && $uid != $mybb->user['uid'] && $memprofile['hideemail'] != 1 && (my_strpos(",".$memprofile['ignorelist'].",", ",".$mybb->user['uid'].",") === false \|\| $mybb->usergroup['cansendemailoverride'] != 0))
{	{
$bgcolor = alt_trow();	$bgcolor = alt_trow();
eval("\$sendemail = \"".$templates->get("member_profile_email")."\";");	eval("\$sendemail = \"".$templates->get("member_profile_email")."\";");
} if($mybb->settings['enablepms'] == 1 && $memprofile['receivepms'] != 0 && $mybb->usergroup['cansendpms'] == 1 && my_strpos(",".$memprofile['ignorelist'].",", ",".$mybb->user['uid'].",") === false) { $bgcolor = alt_trow();	} if($mybb->settings['enablepms'] != 0 && $uid != $mybb->user['uid'] && $mybb->usergroup['canusepms'] == 1 && (($memprofile['receivepms'] != 0 && $memperms['canusepms'] != 0 && my_strpos(",".$memprofile['ignorelist'].",", ",".$mybb->user['uid'].",") === false) \|\| $mybb->usergroup['canoverridepm'] == 1)) { $bgcolor = alt_trow();
eval('$sendpm = "'.$templates->get("member_profile_pm").'";'); }	eval('$sendpm = "'.$templates->get("member_profile_pm").'";'); }

$contact_fields = array(); $any_contact_field = false;	$contact_fields = array(); $any_contact_field = false;
foreach(array('icq', 'aim', 'yahoo', 'skype', 'google') as $field)	foreach(array('icq', 'skype', 'google') as $field)
{ $contact_fields[$field] = ''; $settingkey = 'allow'.$field.'field'; if(!empty($memprofile[$field]) && is_member($mybb->settings[$settingkey], array('usergroup' => $memprofile['usergroup'], 'additionalgroups' => $memprofile['additionalgroups'])))	{ $contact_fields[$field] = ''; $settingkey = 'allow'.$field.'field'; if(!empty($memprofile[$field]) && is_member($mybb->settings[$settingkey], array('usergroup' => $memprofile['usergroup'], 'additionalgroups' => $memprofile['additionalgroups'])))
{	{
$any_contact_field = true;	$any_contact_field = true;

if($field == 'icq') { $memprofile[$field] = (int)$memprofile[$field];	if($field == 'icq') { $memprofile[$field] = (int)$memprofile[$field];
}	}
else { $memprofile[$field] = htmlspecialchars_uni($memprofile[$field]);	else { $memprofile[$field] = htmlspecialchars_uni($memprofile[$field]);
Zeile 2042	Zeile 2124
$bgcolors[$field] = alt_trow(); eval('$contact_fields[\''.$field.'\'] = "'.$templates->get($tmpl).'";');	$bgcolors[$field] = alt_trow(); eval('$contact_fields[\''.$field.'\'] = "'.$templates->get($tmpl).'";');
} }	} }
if($any_contact_field \|\| $sendemail \|\| $sendpm \|\| $website) { eval('$contact_details = "'.$templates->get("member_profile_contact_details").'";'); }	if($any_contact_field \|\| $sendemail \|\| $sendpm \|\| $website) { eval('$contact_details = "'.$templates->get("member_profile_contact_details").'";'); }

$signature = ''; if($memprofile['signature'] && ($memprofile['suspendsignature'] == 0 \|\| $memprofile['suspendsigtime'] < TIME_NOW) && !is_member($mybb->settings['hidesignatures']) && $memperms['canusesig'] && $memperms['canusesigxposts'] <= $memprofile['postnum']) {	$signature = ''; if($memprofile['signature'] && ($memprofile['suspendsignature'] == 0 \|\| $memprofile['suspendsigtime'] < TIME_NOW) && !is_member($mybb->settings['hidesignatures']) && $memperms['canusesig'] && $memperms['canusesigxposts'] <= $memprofile['postnum']) {
Zeile 2067	Zeile 2149
$sig_parser['nofollow_on'] = 1; }	$sig_parser['nofollow_on'] = 1; }
if($mybb->user['showimages'] != 1 && $mybb->user['uid'] != 0 \|\| $mybb->settings['guestimages'] != 1 && $mybb->user['uid'] == 0)	if($mybb->user['uid'] != 0 && $mybb->user['showimages'] != 1 \|\| $mybb->settings['guestimages'] != 1 && $mybb->user['uid'] == 0)
{ $sig_parser['allow_imgcode'] = 0;	{ $sig_parser['allow_imgcode'] = 0;
}	}
$memprofile['signature'] = $parser->parse_message($memprofile['signature'], $sig_parser); eval("\$signature = \"".$templates->get("member_profile_signature")."\";");	$memprofile['signature'] = $parser->parse_message($memprofile['signature'], $sig_parser); eval("\$signature = \"".$templates->get("member_profile_signature")."\";");
Zeile 2136	Zeile 2218
$findposts = $findthreads = ''; if($mybb->usergroup['cansearch'] == 1) {	$findposts = $findthreads = ''; if($mybb->usergroup['cansearch'] == 1) {
eval("\$findposts = \"".$templates->get("member_profile_findposts")."\";"); eval("\$findthreads = \"".$templates->get("member_profile_findthreads")."\";");	if(!empty($memprofile['postnum'])) { eval("\$findposts = \"".$templates->get("member_profile_findposts")."\";"); } if(!empty($memprofile['threadnum'])) { eval("\$findthreads = \"".$templates->get("member_profile_findthreads")."\";"); }
} $awaybit = '';	} $awaybit = '';
Zeile 2192	Zeile 2280
eval("\$awaybit = \"".$templates->get("member_profile_away")."\";"); } }	eval("\$awaybit = \"".$templates->get("member_profile_away")."\";"); } }
	$memprofile['timezone'] = (float)$memprofile['timezone'];
if($memprofile['dst'] == 1) { $memprofile['timezone']++;	if($memprofile['dst'] == 1) { $memprofile['timezone']++;
Zeile 2201	Zeile 2291
$memprofile['timezone'] = "+{$memprofile['timezone']}"; } }	$memprofile['timezone'] = "+{$memprofile['timezone']}"; } }

$memregdate = my_date($mybb->settings['dateformat'], $memprofile['regdate']); $memlocaldate = gmdate($mybb->settings['dateformat'], TIME_NOW + ($memprofile['timezone'] * 3600)); $memlocaltime = gmdate($mybb->settings['timeformat'], TIME_NOW + ($memprofile['timezone'] * 3600)); $localtime = $lang->sprintf($lang->local_time_format, $memlocaldate, $memlocaltime);	$memregdate = my_date($mybb->settings['dateformat'], $memprofile['regdate']); $memlocaldate = gmdate($mybb->settings['dateformat'], TIME_NOW + ($memprofile['timezone'] * 3600)); $memlocaltime = gmdate($mybb->settings['timeformat'], TIME_NOW + ($memprofile['timezone'] * 3600)); $localtime = $lang->sprintf($lang->local_time_format, $memlocaldate, $memlocaltime);
if($memprofile['lastactive']) { $memlastvisitdate = my_date($mybb->settings['dateformat'], $memprofile['lastactive']); $memlastvisitsep = $lang->comma; $memlastvisittime = my_date($mybb->settings['timeformat'], $memprofile['lastactive']); } else { $memlastvisitdate = $lang->lastvisit_never; $memlastvisitsep = ''; $memlastvisittime = ''; }
if($memprofile['birthday']) { $membday = explode("-", $memprofile['birthday']);	if($memprofile['birthday']) { $membday = explode("-", $memprofile['birthday']);

if($memprofile['birthdayprivacy'] != 'none') { if($membday[0] && $membday[1] && $membday[2]) { $lang->membdayage = $lang->sprintf($lang->membdayage, get_age($memprofile['birthday']));	if($memprofile['birthdayprivacy'] != 'none') { if($membday[0] && $membday[1] && $membday[2]) { $lang->membdayage = $lang->sprintf($lang->membdayage, get_age($memprofile['birthday']));

$bdayformat = fix_mktime($mybb->settings['dateformat'], $membday[2]); $membday = mktime(0, 0, 0, $membday[1], $membday[0], $membday[2]); $membday = date($bdayformat, $membday);	$bdayformat = fix_mktime($mybb->settings['dateformat'], $membday[2]); $membday = mktime(0, 0, 0, $membday[1], $membday[0], $membday[2]); $membday = date($bdayformat, $membday);
Zeile 2241	Zeile 2318
{ $membday = mktime(0, 0, 0, 1, 1, $membday[2]); $membday = date("Y", $membday);	{ $membday = mktime(0, 0, 0, 1, 1, $membday[2]); $membday = date("Y", $membday);
$membdayage = '';	$membdayage = '';
} else {	} else {
Zeile 2249	Zeile 2326
$membday = date("F j", $membday); $membdayage = ''; }	$membday = date("F j", $membday); $membdayage = ''; }
}	}
if($memprofile['birthdayprivacy'] == 'age')	if($memprofile['birthdayprivacy'] == 'age')
{ $membday = $lang->birthdayhidden;	{ $membday = $lang->birthdayhidden;
} else if($memprofile['birthdayprivacy'] == 'none') {	} else if($memprofile['birthdayprivacy'] == 'none') {
Zeile 2262	Zeile 2339
} } else	} } else
{	{
$membday = $lang->not_specified; $membdayage = ''; }	$membday = $lang->not_specified; $membdayage = ''; }
if(!$memprofile['displaygroup']) { $memprofile['displaygroup'] = $memprofile['usergroup']; } // Grab the following fields from the user's displaygroup $displaygroupfields = array( "title", "usertitle", "stars", "starimage", "image", "usereputationsystem" ); $displaygroup = usergroup_displaygroup($memprofile['displaygroup']);
// Get the user title for this user	// Get the user title for this user
unset($usertitle);
unset($stars);	unset($stars);
	$usertitle = '';
$starimage = ''; if(trim($memprofile['usertitle']) != '') { // User has custom user title $usertitle = $memprofile['usertitle']; }	$starimage = ''; if(trim($memprofile['usertitle']) != '') { // User has custom user title $usertitle = $memprofile['usertitle']; }
elseif(trim($displaygroup['usertitle']) != '')	elseif(trim($memperms['usertitle']) != '')
{ // User has group title	{ // User has group title
$usertitle = $displaygroup['usertitle'];	$usertitle = $memperms['usertitle'];
} else {	} else {
// No usergroup title so get a default one $usertitles = $cache->read('usertitles'); if(is_array($usertitles))	if(!isset($usertitles))
{	{
foreach($usertitles as $title)	$usertitles = $cache->read('usertitles'); } // No usergroup title so get a default one if(is_array($usertitles)) { foreach($usertitles as $title)
{ if($memprofile['postnum'] >= $title['posts']) {	{ if($memprofile['postnum'] >= $title['posts']) {
Zeile 2315	Zeile 2379
break; } }	break; } }
} }	} }
$usertitle = htmlspecialchars_uni($usertitle);	$usertitle = htmlspecialchars_uni($usertitle);
if($displaygroup['stars'] \|\| $displaygroup['usertitle'])	if($memperms['stars'] \|\| $memperms['usertitle'])
{ // Set the number of stars if display group has constant number of stars	{ // Set the number of stars if display group has constant number of stars
$stars = $displaygroup['stars'];	$stars = $memperms['stars'];
}	}
elseif(!$stars)	elseif(!isset($stars))
{	{
if(!is_array($usertitles))	if(!isset($usertitles))
{ $usertitles = $cache->read('usertitles'); }	{ $usertitles = $cache->read('usertitles'); }
Zeile 2338	Zeile 2402
foreach($usertitles as $title) { if($memprofile['postnum'] >= $title['posts'])	foreach($usertitles as $title) { if($memprofile['postnum'] >= $title['posts'])
{	{
$stars = $title['stars']; $starimage = $title['starimage']; break; } }	$stars = $title['stars']; $starimage = $title['starimage']; break; } }
	} if(!isset($stars)) { $stars = 0;
} } $groupimage = '';	} } $groupimage = '';
if(!empty($displaygroup['image']))	if(!empty($memperms['image']))
{ if(!empty($mybb->user['language'])) {	{ if(!empty($mybb->user['language'])) {
Zeile 2358	Zeile 2427
{ $language = $mybb->settings['bblanguage']; }	{ $language = $mybb->settings['bblanguage']; }
$displaygroup['image'] = str_replace("{lang}", $language, $displaygroup['image']); $displaygroup['image'] = str_replace("{theme}", $theme['imgdir'], $displaygroup['image']);	$memperms['image'] = str_replace("{lang}", $language, $memperms['image']); $memperms['image'] = str_replace("{theme}", $theme['imgdir'], $memperms['image']);
eval("\$groupimage = \"".$templates->get("member_profile_groupimage")."\";"); } if(empty($starimage)) {	eval("\$groupimage = \"".$templates->get("member_profile_groupimage")."\";"); } if(empty($starimage)) {
$starimage = $displaygroup['starimage'];	$starimage = $memperms['starimage'];
} if(!empty($starimage))	} if(!empty($starimage))
Zeile 2384	Zeile 2453
$query = $db->simple_select("sessions", "location,nopermission", "uid='$uid' AND time>'{$timesearch}'", array('order_by' => 'time', 'order_dir' => 'DESC', 'limit' => 1)); $session = $db->fetch_array($query);	$query = $db->simple_select("sessions", "location,nopermission", "uid='$uid' AND time>'{$timesearch}'", array('order_by' => 'time', 'order_dir' => 'DESC', 'limit' => 1)); $session = $db->fetch_array($query);
$online_status = ''; if($memprofile['invisible'] != 1 \|\| $mybb->usergroup['canviewwolinvis'] == 1 \|\| $memprofile['uid'] == $mybb->user['uid'])	$timeonline = $lang->none_registered; $memlastvisitdate = $lang->lastvisit_never; $last_seen = max(array($memprofile['lastactive'], $memprofile['lastvisit'])); if(!empty($last_seen))
{	{
// Lastvisit if($memprofile['lastactive'])	// We have some stamp here if($memprofile['invisible'] == 1 && $mybb->usergroup['canviewwolinvis'] != 1 && $memprofile['uid'] != $mybb->user['uid'])
{	{
$memlastvisitsep = $lang->comma; $memlastvisitdate = my_date('relative', $memprofile['lastactive']); } // Time Online $timeonline = $lang->none_registered; if($memprofile['timeonline'] > 0) { $timeonline = nice_time($memprofile['timeonline']); } // Online? if(!empty($session)) { // Fetch their current location $lang->load("online"); require_once MYBB_ROOT."inc/functions_online.php"; $activity = fetch_wol_activity($session['location'], $session['nopermission']); $location = build_friendly_wol_location($activity); $location_time = my_date($mybb->settings['timeformat'], $memprofile['lastactive']); eval("\$online_status = \"".$templates->get("member_profile_online")."\";"); } // User is offline	$memlastvisitdate = $lang->lastvisit_hidden; $online_status = $timeonline = $lang->timeonline_hidden; }
else	else
{ eval("\$online_status = \"".$templates->get("member_profile_offline")."\";"); } } if($memprofile['invisible'] == 1 && $mybb->usergroup['canviewwolinvis'] != 1 && $memprofile['uid'] != $mybb->user['uid']) { $memlastvisitsep = ''; $memlastvisittime = ''; $memlastvisitdate = $lang->lastvisit_never;	{ $memlastvisitdate = my_date('relative', $last_seen);

if($memprofile['lastactive']) { // We have had at least some active time, hide it instead $memlastvisitdate = $lang->lastvisit_hidden;	if($memprofile['timeonline'] > 0) { $timeonline = nice_time($memprofile['timeonline']); } // Online? if(!empty($session)) { // Fetch their current location $lang->load("online"); require_once MYBB_ROOT."inc/functions_online.php"; $activity = fetch_wol_activity($session['location'], $session['nopermission']); $location = build_friendly_wol_location($activity); $location_time = my_date($mybb->settings['timeformat'], $last_seen); eval("\$online_status = \"".$templates->get("member_profile_online")."\";"); }
}	}
$timeonline = $lang->timeonline_hidden;	} if(!isset($online_status)) { eval("\$online_status = \"".$templates->get("member_profile_offline")."\";");
} // Reset the background colours to keep it inline $alttrow = 'trow1';	} // Reset the background colours to keep it inline $alttrow = 'trow1';

// Build Referral $referrals = ''; if($mybb->settings['usereferrals'] == 1)	// Build Referral $referrals = ''; if($mybb->settings['usereferrals'] == 1)
{ $bg_color = alt_trow();	{ $bg_color = alt_trow(); $uid = (int) $memprofile['uid']; $referral_count = $memprofile['referrals']; if ($referral_count > 0) { eval("\$memprofile['referrals'] = \"".$templates->get('member_referrals_link')."\";"); }

eval("\$referrals = \"".$templates->get("member_profile_referrals")."\";");	eval("\$referrals = \"".$templates->get('member_profile_referrals')."\";");
} // Fetch the reputation for this user $reputation = '';	} // Fetch the reputation for this user $reputation = '';
if($memperms['usereputationsystem'] == 1 && $displaygroup['usereputationsystem'] == 1 && $mybb->settings['enablereputation'] == 1)	if($memperms['usereputationsystem'] == 1 && $mybb->settings['enablereputation'] == 1)
{ $bg_color = alt_trow(); $reputation = get_reputation($memprofile['reputation']);	{ $bg_color = alt_trow(); $reputation = get_reputation($memprofile['reputation']);

// If this user has permission to give reputations show the vote link $vote_link = ''; if($mybb->usergroup['cangivereputations'] == 1 && $memprofile['uid'] != $mybb->user['uid'] && ($mybb->settings['posrep'] \|\| $mybb->settings['neurep'] \|\| $mybb->settings['negrep']))	// If this user has permission to give reputations show the vote link $vote_link = ''; if($mybb->usergroup['cangivereputations'] == 1 && $memprofile['uid'] != $mybb->user['uid'] && ($mybb->settings['posrep'] \|\| $mybb->settings['neurep'] \|\| $mybb->settings['negrep']))
Zeile 2462	Zeile 2526
} eval("\$reputation = \"".$templates->get("member_profile_reputation")."\";");	} eval("\$reputation = \"".$templates->get("member_profile_reputation")."\";");
}	}
$warning_level = ''; if($mybb->settings['enablewarningsystem'] != 0 && $memperms['canreceivewarnings'] != 0 && ($mybb->usergroup['canwarnusers'] != 0 \|\| ($mybb->user['uid'] == $memprofile['uid'] && $mybb->settings['canviewownwarning'] != 0))) { $bg_color = alt_trow();	$warning_level = ''; if($mybb->settings['enablewarningsystem'] != 0 && $memperms['canreceivewarnings'] != 0 && ($mybb->usergroup['canwarnusers'] != 0 \|\| ($mybb->user['uid'] == $memprofile['uid'] && $mybb->settings['canviewownwarning'] != 0))) { $bg_color = alt_trow();

if($mybb->settings['maxwarningpoints'] < 1) { $mybb->settings['maxwarningpoints'] = 10;	if($mybb->settings['maxwarningpoints'] < 1) { $mybb->settings['maxwarningpoints'] = 10;
}	}
$warning_level = round($memprofile['warningpoints']/$mybb->settings['maxwarningpoints']*100); if($warning_level > 100)	$warning_level = round($memprofile['warningpoints']/$mybb->settings['maxwarningpoints']*100); if($warning_level > 100)
Zeile 2481	Zeile 2545
$warning_level = 100; }	$warning_level = 100; }
$warn_user = ''; $warning_link = 'usercp.php';
$warning_level = get_colored_warning_level($warning_level);	$warning_level = get_colored_warning_level($warning_level);
if($mybb->usergroup['canwarnusers'] != 0 && $memprofile['uid'] != $mybb->user['uid'])	if($mybb->usergroup['canwarnusers'] != 0)
{ eval("\$warn_user = \"".$templates->get("member_profile_warn")."\";");	{ eval("\$warn_user = \"".$templates->get("member_profile_warn")."\";");
$warning_link = "warnings.php?uid={$memprofile['uid']}";	eval("\$warning_level = \"".$templates->get("member_profile_warninglevel_link")."\";"); } else { eval("\$warning_level = \"".$templates->get("member_profile_warninglevel")."\";");
}	}
eval("\$warning_level = \"".$templates->get("member_profile_warninglevel")."\";");
} $bgcolor = $alttrow = 'trow1';	} $bgcolor = $alttrow = 'trow1';
Zeile 2498	Zeile 2562
$query = $db->simple_select("userfields", "*", "ufid = '{$uid}'"); $userfields = $db->fetch_array($query);	$query = $db->simple_select("userfields", "*", "ufid = '{$uid}'"); $userfields = $db->fetch_array($query);

// If this user is an Administrator or a Moderator then we wish to show all profile fields $pfcache = $cache->read('profilefields');	// If this user is an Administrator or a Moderator then we wish to show all profile fields $pfcache = $cache->read('profilefields');
Zeile 2506	Zeile 2570
{ foreach($pfcache as $customfield) {	{ foreach($pfcache as $customfield) {
if($mybb->usergroup['cancp'] != 1 && $mybb->usergroup['issupermod'] != 1 && $mybb->usergroup['canmodcp'] != 1 && !is_member($customfield['viewableby']))	if($mybb->usergroup['cancp'] != 1 && $mybb->usergroup['issupermod'] != 1 && $mybb->usergroup['canmodcp'] != 1 && !is_member($customfield['viewableby']) \|\| !$customfield['profile'])
{ continue; }	{ continue; }
Zeile 2556	Zeile 2620
$parser_options['nl2br'] = 0; }	$parser_options['nl2br'] = 0; }
if($mybb->user['showimages'] != 1 && $mybb->user['uid'] != 0 \|\| $mybb->settings['guestimages'] != 1 && $mybb->user['uid'] == 0)	if($mybb->user['uid'] != 0 && $mybb->user['showimages'] != 1 \|\| $mybb->settings['guestimages'] != 1 && $mybb->user['uid'] == 0)
{ $parser_options['allow_imgcode'] = 0; }	{ $parser_options['allow_imgcode'] = 0; }
Zeile 2564	Zeile 2628
$customfieldval = $parser->parse_message($userfields[$field], $parser_options); } }	$customfieldval = $parser->parse_message($userfields[$field], $parser_options); } }

if($customfieldval) { $customfield['name'] = htmlspecialchars_uni($customfield['name']);	if($customfieldval) { $customfield['name'] = htmlspecialchars_uni($customfield['name']);
Zeile 2572	Zeile 2636
$bgcolor = alt_trow(); } }	$bgcolor = alt_trow(); } }
}	}
if($customfields) { eval("\$profilefields = \"".$templates->get("member_profile_customfields")."\";");	if($customfields) { eval("\$profilefields = \"".$templates->get("member_profile_customfields")."\";");
Zeile 2581	Zeile 2645
$memprofile['postnum'] = my_number_format($memprofile['postnum']); $lang->ppd_percent_total = $lang->sprintf($lang->ppd_percent_total, my_number_format($ppd), $post_percent);	$memprofile['postnum'] = my_number_format($memprofile['postnum']); $lang->ppd_percent_total = $lang->sprintf($lang->ppd_percent_total, my_number_format($ppd), $post_percent);

$memprofile['threadnum'] = my_number_format($memprofile['threadnum']); $lang->tpd_percent_total = $lang->sprintf($lang->tpd_percent_total, my_number_format($tpd), $thread_percent);	$memprofile['threadnum'] = my_number_format($memprofile['threadnum']); $lang->tpd_percent_total = $lang->sprintf($lang->tpd_percent_total, my_number_format($tpd), $thread_percent);
Zeile 2592	Zeile 2656
{ // Fetch details on their ban $query = $db->simple_select('banned b LEFT JOIN '.TABLE_PREFIX.'users a ON (b.admin=a.uid)', 'b.*, a.username AS adminuser', "b.uid='{$uid}'", array('limit' => 1));	{ // Fetch details on their ban $query = $db->simple_select('banned b LEFT JOIN '.TABLE_PREFIX.'users a ON (b.admin=a.uid)', 'b.*, a.username AS adminuser', "b.uid='{$uid}'", array('limit' => 1));
$memban = $db->fetch_array($query);

if($memban['reason'])	if($db->num_rows($query))
{	{
$memban['reason'] = htmlspecialchars_uni($parser->parse_badwords($memban['reason'])); } else { $memban['reason'] = $lang->na; }	$memban = $db->fetch_array($query);

if($memban['lifted'] == 'perm' \|\| $memban['lifted'] == '' \|\| $memban['bantime'] == 'perm' \|\| $memban['bantime'] == '---') { $banlength = $lang->permanent; $timeremaining = $lang->na; } else { // Set up the array of ban times. $bantimes = fetch_ban_times(); $banlength = $bantimes[$memban['bantime']]; $remaining = $memban['lifted']-TIME_NOW; $timeremaining = nice_time($remaining, array('short' => 1, 'seconds' => false)).""; $banned_class = ''; if($remaining < 3600) { $banned_class = "high_banned"; } else if($remaining < 86400) { $banned_class = "moderate_banned"; } else if($remaining < 604800) { $banned_class = "low_banned";	if($memban['reason']) { $memban['reason'] = htmlspecialchars_uni($parser->parse_badwords($memban['reason']));
} else {	} else {
	$memban['reason'] = $lang->na; } if($memban['lifted'] == 'perm' \|\| $memban['lifted'] == '' \|\| $memban['bantime'] == 'perm' \|\| $memban['bantime'] == '---') { $banlength = $lang->permanent; $timeremaining = $lang->na;
$banned_class = "normal_banned"; }	$banned_class = "normal_banned"; }
	else { // Set up the array of ban times. $bantimes = fetch_ban_times();

eval('$timeremaining = "'.$templates->get('member_profile_banned_remaining').'";'); } $memban['adminuser'] = build_profile_link(htmlspecialchars_uni($memban['adminuser']), $memban['admin']);	$banlength = $bantimes[$memban['bantime']]; $remaining = $memban['lifted']-TIME_NOW;

// Display a nice warning to the user eval('$bannedbit = "'.$templates->get('member_profile_banned').'";'); }	$timeremaining = nice_time($remaining, array('short' => 1, 'seconds' => false)).""; $banned_class = ''; if($remaining < 3600) { $banned_class = "high_banned"; } else if($remaining < 86400) { $banned_class = "moderate_banned"; } else if($remaining < 604800) { $banned_class = "low_banned"; } else { $banned_class = "normal_banned"; } } eval('$timeremaining = "'.$templates->get('member_profile_banned_remaining').'";'); $memban['adminuser'] = build_profile_link(htmlspecialchars_uni($memban['adminuser']), $memban['admin']); // Display a nice warning to the user eval('$bannedbit = "'.$templates->get('member_profile_banned').'";'); } else { // TODO: more specific output for converted/merged boards where no ban record is merged. $bannedbit = ''; } }
$adminoptions = ''; if($mybb->usergroup['cancp'] == 1 && $mybb->config['hide_admin_links'] != 1) {	$adminoptions = ''; if($mybb->usergroup['cancp'] == 1 && $mybb->config['hide_admin_links'] != 1) {
eval("\$adminoptions = \"".$templates->get("member_profile_adminoptions")."\";");	if($memperms['isbannedgroup'] == 1) { eval("\$adminoptions = \"".$templates->get("member_profile_adminoptions_manageban")."\";"); } else { eval("\$adminoptions = \"".$templates->get("member_profile_adminoptions")."\";"); }
}	}
$modoptions = $viewnotes = $editnotes = $editprofile = $banuser = $manageuser = '';	$modoptions = $viewnotes = $editnotes = $editprofile = $banuser = $manageban = $manageuser = '';
$can_purge_spammer = purgespammer_show($memprofile['postnum'], $memprofile['usergroup'], $memprofile['uid']); if($mybb->usergroup['canmodcp'] == 1 \|\| $can_purge_spammer) {	$can_purge_spammer = purgespammer_show($memprofile['postnum'], $memprofile['usergroup'], $memprofile['uid']); if($mybb->usergroup['canmodcp'] == 1 \|\| $can_purge_spammer) {
	if($mybb->usergroup['canuseipsearch'] == 1) { $memprofile['regip'] = my_inet_ntop($db->unescape_binary($memprofile['regip'])); $memprofile['lastip'] = my_inet_ntop($db->unescape_binary($memprofile['lastip'])); eval("\$ipaddress = \"".$templates->get("member_profile_modoptions_ipaddress")."\";"); }
$memprofile['usernotes'] = nl2br(htmlspecialchars_uni($memprofile['usernotes'])); if(!empty($memprofile['usernotes'])) { if(strlen($memprofile['usernotes']) > 100)	$memprofile['usernotes'] = nl2br(htmlspecialchars_uni($memprofile['usernotes'])); if(!empty($memprofile['usernotes'])) { if(strlen($memprofile['usernotes']) > 100)
{	{
eval("\$viewnotes = \"".$templates->get("member_profile_modoptions_viewnotes")."\";"); $memprofile['usernotes'] = my_substr($memprofile['usernotes'], 0, 100)."... {$viewnotes}";	eval("\$viewnotes = \"".$templates->get("member_profile_modoptions_viewnotes")."\";"); $memprofile['usernotes'] = my_substr($memprofile['usernotes'], 0, 100)."... {$viewnotes}";
}	}
} else { $memprofile['usernotes'] = $lang->no_usernotes; }	} else { $memprofile['usernotes'] = $lang->no_usernotes; }
if($mybb->usergroup['caneditprofiles'] == 1)	if($mybb->usergroup['caneditprofiles'] == 1 && modcp_can_manage_user($memprofile['uid']))
{	{
eval("\$editprofile = \"".$templates->get("member_profile_modoptions_editprofile")."\";"); eval("\$editnotes = \"".$templates->get("member_profile_modoptions_editnotes")."\";");	if(modcp_can_manage_user($memprofile['uid'])) { eval("\$editprofile = \"".$templates->get("member_profile_modoptions_editprofile")."\";"); eval("\$editnotes = \"".$templates->get("member_profile_modoptions_editnotes")."\";"); } } if($memperms['isbannedgroup'] == 1 && $mybb->usergroup['canbanusers'] == 1 && modcp_can_manage_user($memprofile['uid'])) { eval("\$manageban = \"".$templates->get("member_profile_modoptions_manageban")."\";");
}	}
if($mybb->usergroup['canbanusers'] == 1 && (!$memban['uid'] \|\| $memban['uid'] && ($mybb->user['uid'] == $memban['admin']) \|\| $mybb->usergroup['issupermod'] == 1 \|\| $mybb->usergroup['cancp'] == 1))	elseif(modcp_can_manage_user($memprofile['uid']) && $mybb->usergroup['canbanusers'] == 1)
{	{
eval("\$banuser = \"".$templates->get("member_profile_modoptions_banuser")."\";");	if(modcp_can_manage_user($memprofile['uid']) && $mybb->usergroup['canbanusers'] == 1) { eval("\$banuser = \"".$templates->get("member_profile_modoptions_banuser")."\";"); }
}	}
	$purgespammer = '';
if($can_purge_spammer) { eval("\$purgespammer = \"".$templates->get('member_profile_modoptions_purgespammer')."\";"); }	if($can_purge_spammer) { eval("\$purgespammer = \"".$templates->get('member_profile_modoptions_purgespammer')."\";"); }
if(!empty($editprofile) \|\| !empty($banuser) \|\| !empty($purgespammer))	if(!empty($editprofile) \|\| !empty($banuser) \|\| !empty($manageban) \|\| !empty($purgespammer))
{ eval("\$manageuser = \"".$templates->get("member_profile_modoptions_manageuser")."\";"); }	{ eval("\$manageuser = \"".$templates->get("member_profile_modoptions_manageuser")."\";"); }
Zeile 2730	Zeile 2830
} if(isset($memperms['canbereported']) && $memperms['canbereported'] == 1)	} if(isset($memperms['canbereported']) && $memperms['canbereported'] == 1)
{ $add_remove_options = array('url' => "javascript:Report.reportUser({$memprofile['uid']});", 'class' => 'report_user_button', 'lang' => $lang->report_user); eval("\$report_options = \"".$templates->get("member_profile_addremove")."\";"); // Report User } } $plugins->run_hooks("member_profile_end");	{ $reportable = true; $query = $db->simple_select("reportedcontent", "reporters", "reportstatus != '1' AND id = '{$memprofile['uid']}' AND type = 'profile'"); if($db->num_rows($query)) { $report = $db->fetch_array($query); $report['reporters'] = my_unserialize($report['reporters']); if(is_array($report['reporters']) && in_array($mybb->user['uid'], $report['reporters'])) { $reportable = false; } } if($reportable) { $add_remove_options = array('url' => "javascript:Report.reportUser({$memprofile['uid']});", 'class' => 'report_user_button', 'lang' => $lang->report_user); eval("\$report_options = \"".$templates->get("member_profile_addremove")."\";"); // Report User } } } $plugins->run_hooks("member_profile_end");
eval("\$profile = \"".$templates->get("member_profile")."\";"); output_page($profile);	eval("\$profile = \"".$templates->get("member_profile")."\";"); output_page($profile);
Zeile 2749	Zeile 2863
$plugins->run_hooks("member_do_emailuser_start");	$plugins->run_hooks("member_do_emailuser_start");
// Guests or those without permission can't email other users if($mybb->usergroup['cansendemail'] == 0) { error_no_permission(); } // Check group limits if($mybb->usergroup['maxemails'] > 0) { if($mybb->user['uid'] > 0) { $user_check = "fromuid='{$mybb->user['uid']}'"; } else { $user_check = "ipaddress=".$db->escape_binary($session->packedip); } $query = $db->simple_select("maillogs", "COUNT() AS sent_count", "{$user_check} AND dateline >= '".(TIME_NOW - (606024))."'"); $sent_count = $db->fetch_field($query, "sent_count"); if($sent_count >= $mybb->usergroup['maxemails']) { $lang->error_max_emails_day = $lang->sprintf($lang->error_max_emails_day, $mybb->usergroup['maxemails']); error($lang->error_max_emails_day); } } // Check email flood control if($mybb->usergroup['emailfloodtime'] > 0) { if($mybb->user['uid'] > 0) { $user_check = "fromuid='{$mybb->user['uid']}'"; } else { $user_check = "ipaddress=".$db->escape_binary($session->packedip); } $timecut = TIME_NOW-$mybb->usergroup['emailfloodtime']60; $query = $db->simple_select("maillogs", "mid, dateline", "{$user_check} AND dateline > '{$timecut}'", array('order_by' => "dateline", 'order_dir' => "DESC")); $last_email = $db->fetch_array($query); // Users last email was within the flood time, show the error if($last_email['mid']) { $remaining_time = ($mybb->usergroup['emailfloodtime']*60)-(TIME_NOW-$last_email['dateline']); if($remaining_time == 1) { $lang->error_emailflooding = $lang->sprintf($lang->error_emailflooding_1_second, $mybb->usergroup['emailfloodtime']); } elseif($remaining_time < 60) { $lang->error_emailflooding = $lang->sprintf($lang->error_emailflooding_seconds, $mybb->usergroup['emailfloodtime'], $remaining_time); } elseif($remaining_time > 60 && $remaining_time < 120) { $lang->error_emailflooding = $lang->sprintf($lang->error_emailflooding_1_minute, $mybb->usergroup['emailfloodtime']); } else { $remaining_time_minutes = ceil($remaining_time/60); $lang->error_emailflooding = $lang->sprintf($lang->error_emailflooding_minutes, $mybb->usergroup['emailfloodtime'], $remaining_time_minutes); }	// Guests or those without permission can't email other users if($mybb->usergroup['cansendemail'] == 0) { error_no_permission(); } // Check group limits if($mybb->usergroup['maxemails'] > 0) { if($mybb->user['uid'] > 0) { $user_check = "fromuid='{$mybb->user['uid']}'"; } else { $user_check = "ipaddress=".$db->escape_binary($session->packedip); } $query = $db->simple_select("maillogs", "COUNT() AS sent_count", "{$user_check} AND dateline >= '".(TIME_NOW - (606024))."'"); $sent_count = $db->fetch_field($query, "sent_count"); if($sent_count >= $mybb->usergroup['maxemails']) { $lang->error_max_emails_day = $lang->sprintf($lang->error_max_emails_day, $mybb->usergroup['maxemails']); error($lang->error_max_emails_day); } } // Check email flood control if($mybb->usergroup['emailfloodtime'] > 0) { if($mybb->user['uid'] > 0) { $user_check = "fromuid='{$mybb->user['uid']}'"; } else { $user_check = "ipaddress=".$db->escape_binary($session->packedip); } $timecut = TIME_NOW-$mybb->usergroup['emailfloodtime']60; $query = $db->simple_select("maillogs", "mid, dateline", "{$user_check} AND dateline > '{$timecut}'", array('order_by' => "dateline", 'order_dir' => "DESC")); $last_email = $db->fetch_array($query); // Users last email was within the flood time, show the error if(isset($last_email['mid'])) { $remaining_time = ($mybb->usergroup['emailfloodtime']*60)-(TIME_NOW-$last_email['dateline']); if($remaining_time == 1) { $lang->error_emailflooding = $lang->sprintf($lang->error_emailflooding_1_second, $mybb->usergroup['emailfloodtime']); } elseif($remaining_time < 60) { $lang->error_emailflooding = $lang->sprintf($lang->error_emailflooding_seconds, $mybb->usergroup['emailfloodtime'], $remaining_time); } elseif($remaining_time > 60 && $remaining_time < 120) { $lang->error_emailflooding = $lang->sprintf($lang->error_emailflooding_1_minute, $mybb->usergroup['emailfloodtime']); } else { $remaining_time_minutes = ceil($remaining_time/60); $lang->error_emailflooding = $lang->sprintf($lang->error_emailflooding_minutes, $mybb->usergroup['emailfloodtime'], $remaining_time_minutes); }
error($lang->error_emailflooding); } }	error($lang->error_emailflooding); } }
Zeile 2839	Zeile 2953
{ $mybb->input['fromemail'] = $mybb->user['email']; $mybb->input['fromname'] = $mybb->user['username'];	{ $mybb->input['fromemail'] = $mybb->user['email']; $mybb->input['fromname'] = $mybb->user['username'];
}	}
if(!validate_email_format($mybb->input['fromemail'])) { $errors[] = $lang->error_invalidfromemail;	if(!validate_email_format($mybb->input['fromemail'])) { $errors[] = $lang->error_invalidfromemail;
Zeile 2849	Zeile 2963
if(empty($mybb->input['fromname'])) { $errors[] = $lang->error_noname;	if(empty($mybb->input['fromname'])) { $errors[] = $lang->error_noname;
} if(empty($mybb->input['subject'])) { $errors[] = $lang->error_no_email_subject; }	} if(empty($mybb->input['subject'])) { $errors[] = $lang->error_no_email_subject; }
if(empty($mybb->input['message'])) {	if(empty($mybb->input['message'])) {
Zeile 2888	Zeile 3002
} $message = $lang->sprintf($lang->email_emailuser, $to_user['username'], $mybb->input['fromname'], $mybb->settings['bbname'], $mybb->settings['bburl'], $mybb->get_input('message'));	} $message = $lang->sprintf($lang->email_emailuser, $to_user['username'], $mybb->input['fromname'], $mybb->settings['bbname'], $mybb->settings['bburl'], $mybb->get_input('message'));
my_mail($to_user['email'], $mybb->get_input('subject'), $message, $from, "", "", false, "text", "", $mybb->input['fromemail']);	my_mail($to_user['email'], $mybb->get_input('subject'), $message, '', '', '', false, 'text', '', $from);
if($mybb->settings['mail_logging'] > 0) {	if($mybb->settings['mail_logging'] > 0) {
Zeile 2929	Zeile 3043
} // Check group limits	} // Check group limits
if($mybb->usergroup['maxemails'] > 0) { if($mybb->user['uid'] > 0) { $user_check = "fromuid='{$mybb->user['uid']}'"; } else	if($mybb->usergroup['maxemails'] > 0) { if($mybb->user['uid'] > 0) { $user_check = "fromuid='{$mybb->user['uid']}'"; } else
{ $user_check = "ipaddress=".$db->escape_binary($session->packedip); }	{ $user_check = "ipaddress=".$db->escape_binary($session->packedip); }
Zeile 2955	Zeile 3069
if($mybb->user['uid'] > 0) { $user_check = "fromuid='{$mybb->user['uid']}'";	if($mybb->user['uid'] > 0) { $user_check = "fromuid='{$mybb->user['uid']}'";
}	}
else { $user_check = "ipaddress=".$db->escape_binary($session->packedip); }	else { $user_check = "ipaddress=".$db->escape_binary($session->packedip); }

$timecut = TIME_NOW-$mybb->usergroup['emailfloodtime']*60; $query = $db->simple_select("maillogs", "mid, dateline", "{$user_check} AND dateline > '{$timecut}'", array('order_by' => "dateline", 'order_dir' => "DESC")); $last_email = $db->fetch_array($query);	$timecut = TIME_NOW-$mybb->usergroup['emailfloodtime']*60; $query = $db->simple_select("maillogs", "mid, dateline", "{$user_check} AND dateline > '{$timecut}'", array('order_by' => "dateline", 'order_dir' => "DESC")); $last_email = $db->fetch_array($query);

// Users last email was within the flood time, show the error	// Users last email was within the flood time, show the error
if($last_email['mid'])	if(isset($last_email['mid']))
{ $remaining_time = ($mybb->usergroup['emailfloodtime']*60)-(TIME_NOW-$last_email['dateline']);	{ $remaining_time = ($mybb->usergroup['emailfloodtime']*60)-(TIME_NOW-$last_email['dateline']);
Zeile 2976	Zeile 3090
$lang->error_emailflooding = $lang->sprintf($lang->error_emailflooding_1_second, $mybb->usergroup['emailfloodtime']); } elseif($remaining_time < 60)	$lang->error_emailflooding = $lang->sprintf($lang->error_emailflooding_1_second, $mybb->usergroup['emailfloodtime']); } elseif($remaining_time < 60)
{	{
$lang->error_emailflooding = $lang->sprintf($lang->error_emailflooding_seconds, $mybb->usergroup['emailfloodtime'], $remaining_time); } elseif($remaining_time > 60 && $remaining_time < 120)	$lang->error_emailflooding = $lang->sprintf($lang->error_emailflooding_seconds, $mybb->usergroup['emailfloodtime'], $remaining_time); } elseif($remaining_time > 60 && $remaining_time < 120)
Zeile 3057	Zeile 3171
eval("\$emailuser = \"".$templates->get("member_emailuser")."\";"); output_page($emailuser);	eval("\$emailuser = \"".$templates->get("member_emailuser")."\";"); output_page($emailuser);
	} if($mybb->input['action'] == 'referrals') { $plugins->run_hooks('member_referrals_start'); $uid = $mybb->get_input('uid', MyBB::INPUT_INT); if(!$uid) { error($lang->referrals_no_user_specified); } $user = get_user($uid); if(!$user['$uid']) { error($lang->referrals_invalid_user); } $lang->nav_referrals = $lang->sprintf($lang->nav_referrals, $user['username']); add_breadcrumb($lang->nav_referrals); $query = $db->simple_select('users', 'COUNT(uid) AS total', "referrer='{$uid}'"); $referral_count = $db->fetch_field($query, 'total'); $bg_color = 'trow1'; if($referral_count == 0) { eval("\$referral_rows = \"".$templates->get('member_no_referrals')."\";"); } else { // Figure out if we need to display multiple pages. $perpage = 20; if ((int) $mybb->settings['referralsperpage']) { $perpage = (int) $mybb->settings['referralsperpage']; } $page = 1; if($mybb->get_input('page', MyBB::INPUT_INT)) { $page = $mybb->get_input('page', MyBB::INPUT_INT); } $pages = ceil($referral_count / $perpage); if($page > $pages \|\| $page <= 0) { $page = 1; } if($page) { $start = ($page-1) * $perpage; } else { $start = 0; $page = 1; } $multipage = multipage($referral_count, $perpage, $page, "member.php?action=referrals&uid={$uid}"); foreach(get_user_referrals($uid, $start, $perpage) as $referral) { // Format user name link $username = htmlspecialchars_uni($referral['username']); $username = format_name($username, $referral['usergroup'], $referral['displaygroup']); $username = build_profile_link($username, $referral['uid']); $regdate = my_date('normal', $referral['regdate']); eval("\$referral_rows .= \"".$templates->get('member_referral_row')."\";"); $bg_color = alt_trow(); } } $plugins->run_hooks('member_referrals_end'); eval("\$referrals = \"".$templates->get("member_referrals")."\";"); output_page($referrals);
} if(!$mybb->input['action'])	} if(!$mybb->input['action'])