PHP-Quelltext

<?php
##################################################################
#                                                                #
#                                                                #
#                            PHPKIT                              #
#          --------------------------------------------          #
#          Copyright (c) 2002-2003 Gersöne & Schott GbR          #
#                                                                #
#                                                                #
# ############################################################## #
#                                                                #
#     Diese Datei / die PHPKIT-Software ist keine Freeware!      #
#   Für weitere Information besuchen Sie bitte unsere Webseite   #
#             oder kontaktieren uns per E-Mail:                  #
#                                                                #
#       This file / the PHPKIT-software is not freeware!         #
#       For further informations please vistit our website       #
#                 or contact us via email:                       #
#                                                                #
#              Website: http://www.phpkit.de                     #
#                   Email: info@phpkit.de                        #
#                                                                #
# ############################################################## #
#                                                                #
#  File:          /inc/public/usereditprofile.php                #
#  Author:        Pierre Gersöne                                 #
#  Created:       Version 1.6.1 - 2004-05-09                     #
#  Last Modified: Version 1.6.1 - 2004-05-09                     #
#  Description:   not available for this file                    #
#                                                                #
# ############################################################## #
#                                                                #
#     SIE SIND NICHT BERECHTIGT, UNRECHTMÄSSIGE KOPIEN DIESER    #
#  DATEI ZU ERSTELLEN UND/ODER DIESE INFORMATIONEN ZU ENTFERNEN  #
#                                                                #
#    YOU ARE NOT AUTHORISED TO CREATE ILLEGAL COPIES OF THIS     #
#          FILE AND/OR TO REMOVE THIS INFORMATIONS               #
#                                                                #
##################################################################


$S=&$SQL;

pkLoadFunc('user');

$info=array('user_id'=>0);
$bd_option_year=$uderror=$editprofile_userfield=
$user_email_option_1=$user_email_option_0=$event=
$user_sex_option_1=$user_sex_option_2=$user_sex_option_0=NULL;

if(pkGetUservalue('id')) {
    $info=$S->fetch_assoc($S->query("SELECT 
        user_id,
        user_name,
        user_pw,
        user_profillock,
        user_status,
        user_nick,
        user_pw,
        user_email,
        user_sex,
        user_hpage,
        user_aimid,
        user_yim,
        user_icqid,
user_vorname,
user_wohnort,
user_marke,
user_modell,
user_liter,
user_pskw,
user_baujahr,
        user_emailshow,
        user_country,
        user_bd_day,
        user_bd_month,
        user_bd_year,
        signin,
        user_qou,
        user_innen,
        user_aussen,
        user_carhifi,
        user_geplant,
        user_sig,
        user_hobby
        FROM ".pkSQLTAB_USER." 
        WHERE user_name='".$SQL->f(pkGetUservalue('name'))."' AND
            user_pw='".$SQL->f(pkGetUservalue('pass'))."' AND
            user_id='".$SQL->f(pkGetUservalue('id'))."'
        LIMIT 1"));
    }

if(!pkGetUservalue('id') || $info['user_id']!=pkGetUservalue('id'))
    return pkEvent('access_refused');

if($info['user_profillock']==1)
    return pkEvent('eventtitle_profile_update_disabled');


$ACTION=isset($_POST['action']) ? $_POST['action'] : false;

if(isset($_POST['save']) && $ACTION==$_POST['save']) {
    $_POST['ud_nick']=trim($_POST['ud_nick']);
    $_POST['ud_email']=trim($_POST['ud_email']);

/********************************  Pflichtfeld Anfang. Original wir nur angepasst  ********************************/
 if($_POST['user_bd_month']=='0' or $_POST['user_bd_day']=='0' or $_POST['user_bd_year']=='0') $uderror='profileupdate_kein_datum_angegeben';

 if(!checkdate($_POST['user_bd_month'],$_POST['user_bd_day'],$_POST['user_bd_year'])) $uderror='profileupdate_wechsel_datum';

 if ($_POST['ud_country']=='def') $uderror='profileupdate_kein_bundesland_gewaehlt';   
 elseif ($_POST['ud_country']=='00') $uderror='profileupdate_kein_bundesland_gewaehlt';  
 elseif ($_POST['ud_country']=='') $uderror='profileupdate_kein_bundesland_gewaehlt';              
 if ($_POST['ud_sex']=='d') $uderror='profileupdate_kein_geschlecht_gewaehlt';      
 
  if(is_array($_POST['profilefields']))
  foreach($_POST['profilefields'] as $id => $value){
  $felder=$DB->fetch_array($DB->query("SELECT * FROM `".$db_tab['profilefields']."` WHERE `profilefields_id`='".intval($id)."' LIMIT 1"));
  if($felder['profilefields_pflicht']==1){
  if($value=="") $uderror='profileupdate_profilfelder_nicht_ausgefuellt';}
  if($felder['profilefields_area']==2 AND $felder['profilefields_drop_down']==0){
  if(preg_match('/[^-.0-9]/', $value)) $uderror='profileupdate_nummerisch';}}

    if($_POST['ud_newpw1']!=$_POST['ud_newpw2'])  
        $uderror='profileupdate_passwords_unequal';  
    elseif($_POST['ud_newpw1']==$_POST['ud_newpw2'] && $_POST['ud_newpw1']!='')  
        $ud_userpw=md5($_POST['ud_newpw1']);  
    elseif($ud_newpw1=="" && $ud_newpw2=="")  
        $ud_userpw=$USER['pass'];      
    if($_POST['ud_email']=='')  
        $uderror='profileupdate_email_empty';  
    elseif(!emailcheck($_POST['ud_email']))  
        $uderror='profileupdate_email_invalid';  

    elseif($_POST['ud_email']!='')
        $getmail=$S->fetch_array($S->query("SELECT   
            COUNT(user_email) as count   
            FROM ".pkSQLTAB_USER."   
            WHERE user_email='".$S->f($_POST['ud_email'])."'     
            AND user_name!='".$S->f($USER['name'])."' LIMIT 1")); 
        if($getmail['count']>0)   
            $uderror='profileupdate_email_in_use'; 
    else  
        $ud_email=$_POST['ud_email'];  
 
    if($_POST['ud_nick']=='')  
        $uderror='profileupdate_nickname_empty';  
    elseif(!checkusername($_POST['ud_nick']))  
        $uderror='profileupdate_nickname_invalid';  
    else {  
        $getnick=$S->fetch_array($S->query("SELECT   
            COUNT(user_name) as count   
            FROM ".pkSQLTAB_USER."   
            WHERE user_nick='".$S->f($_POST['ud_nick'])."'   
                AND user_name!='".$S->f($USER['name'])."'  
            LIMIT 1"));  
          
        if($getnick['count']>0)   
            $uderror='profileupdate_nickname_in_use';  
        }  
    if($uderror)  
        pkHeaderLocation('inc/lang/de/event.php','','event='.$uderror);   
/********************************  Pflichtfeld Ende.   Original wir nur angepasst  ********************************/

    $vars=array(
        'ud_nick'=>'ud_nick',
        'ud_hpage'=>'ud_hpage',
        'ud_aimid'=>'ud_aimid',
        'ud_yim'=>'ud_yim',
        'ud_icqid'=>'ud_icqid',
'ud_vorname'=>'ud_vorname',
'ud_wohnort'=>'ud_wohnort',
'ud_marke'=>'ud_marke',
'ud_modell'=>'ud_modell',
'ud_liter'=>'ud_liter',
'ud_pskw'=>'ud_pskw',
'ud_baujahr'=>'ud_baujahr',
        'ud_usersig'=>'ud_usersig',
        'ud_userqou'=>'ud_userqou',
        'ud_innen'=>'ud_innen',
        'ud_aussen'=>'ud_aussen',
        'ud_carhifi'=>'ud_carhifi',
        'ud_geplant'=>'ud_geplant',
        'ud_userhobby'=>'ud_userhobby',
        'ud_sex'=>'ud_sex',
        'ud_emailshow'=>'ud_emailshow',
        'ud_country'=>'ud_country',
        'user_bd_day'=>'user_bd_day',
        'user_bd_month'=>'user_bd_month',
        'user_bd_year'=>'user_bd_year'    
        );
    
    foreach($vars as $k=>$v)
        $$k=$ENV->_post($v);
    
    $ud_hpage=pkUrlCheck($ud_hpage) ? $ud_hpage : '';

    if($user_bd_year > (date('Y',pkTIME)-5) || $user_bd_year<=1900 || !checkdate($user_bd_month,$user_bd_day,$user_bd_year))
        $user_bd_day=$user_bd_month=$user_bd_year=0;    

    $S->query("UPDATE ".pkSQLTAB_USER." SET 
        uid='".pkRand()."',
        user_pw='".$S->F($ud_userpw)."',
        user_email='".$S->F($ud_email)."',
        user_emailshow='".$S->F($ud_emailshow)."',
        user_nick='".$S->F($ud_nick)."',
        user_sex='".$S->F($ud_sex)."',
        user_country='".$S->F($ud_country)."',
        user_hpage='".$S->F($ud_hpage)."',
        user_aimid='".$S->F($ud_aimid)."',
        user_yim='".$S->F($ud_yim)."',
        user_icqid='".$S->F($ud_icqid)."',
user_vorname='".$S->F($ud_vorname)."',
user_wohnort='".$S->F($ud_wohnort)."',
user_marke='".$S->F($ud_marke)."',
user_modell='".$S->F($ud_modell)."',
user_liter='".$S->F($ud_liter)."',
user_pskw='".$S->F($ud_pskw)."',
user_baujahr='".$S->F($ud_baujahr)."',
        user_sig='".$S->F($ud_usersig)."',
        user_qou='".$S->F($ud_userqou)."',
        user_innen='".$S->F($ud_innen)."',
        user_aussen='".$S->F($ud_aussen)."',
        user_carhifi='".$S->F($ud_carhifi)."',
        user_geplant='".$S->F($ud_geplant)."',
        user_hobby='".$S->F($ud_userhobby)."',
        user_bd_day='".$S->F($user_bd_day)."',
        user_bd_month='".$S->F($user_bd_month)."',
        user_bd_year='".$S->F($user_bd_year)."'
        WHERE user_id='".intval($USER['id'])."'"
        );
        
        
    $info=$S->fetch_array($S->query("SELECT 
        * 
        FROM ".pkSQLTAB_USER." 
        WHERE user_id='".$USER['id']."'"));

    if(isset($_POST['profilefields']) && is_array($_POST['profilefields'])) {
        $query=NULL;
        $userfield_counter=$S->fetch_array($S->query("SELECT 
            COUNT(userid) as counter 
            FROM ".$db_tab['userfields']." 
            WHERE userid='".intval($USER['id'])."' LIMIT 1"));
        
        if($userfield_counter['counter']<1) 
            $S->query("INSERT INTO ".pkSQLTAB_USER_FIELDS." (userid) VALUES ('".intval($USER['id'])."')");
            
        foreach($_POST['profilefields'] as $id=>$value)
            $query.=(empty($query) ? '' : ',')."field_".intval($id)."='".$S->f($value)."'";
            
        if($query) 
            $S->query("UPDATE ".pkSQLTAB_USER_FIELDS." 
                SET ".$query." 
                WHERE userid='".intval($USER['id'])."'");
        }    
        
    session_register("USER");
        
    $array=array(
        'nick'=>'nick',
        'pass'=>'pw',
        'email'=>'email',
        'sex'=>'sex',
        'hpage'=>'hpage',
        'icqid'=>'icqid',
        'vorname'=>'vorname',
        'wohnort'=>'wohnort',
        'marke'=>'marke',
        'modell'=>'modell',
        'liter'=>'liter',
        'pskw'=>'pskw',
        'baujahr'=>'baujahr',
        'status'=>'status'
        );
        
    foreach($array as $k=>$v)
        $USER[$k]=$info['user_'.$v];
    
    $SESSION->save('USER',$USER);

    pkHeaderLocation('usereditprofile','','event=profileupdate');
    }

    
pkLoadLang('profile');


$userfields=$S->fetch_assoc($S->query("SELECT * 
    FROM ".pkSQLTAB_USER_FIELDS." 
    WHERE userid='".$USER['id']."' LIMIT 1"));

/********************************  Pflichtfeld Anfang. Original wir nur angepasst  ********************************/
$result=$S->query("SELECT 
    profilefields_id, 
    profilefields_description,
    profilefields_name,
    profilefields_maxlength,
    profilefields_drop_down,
    profilefields_groups,
    profilefields_status_edit,
    profilefields_pflicht,
    profilefields_area,
    profilefields_bbcode
    FROM ".pkSQLTAB_USER_PROFILEFIELDS."
    ORDER by profilefields_order ASC");
while(list($fieldid,$fielddescription,$fieldname,$fieldlength,$fielddrop,$fieldstatusedit,$fieldpflicht,$fieldarea,$fieldbbcode)=$S->fetch_row($result)) {
    $value=pkEntities($userfields['field_'.$fieldid]);
    $name='profilefields['.$fieldid.']';
    if($fieldbbcode==1 AND $fielddescription!='') $code_ausgabe='<br><span style="color:#d70007;">BBCodes erlaubt</span>'; 
    elseif($fieldbbcode==1 AND $fielddescription=='') $code_ausgabe='<span style="color:#d70007;">BBCodes erlaubt</span>';
    else $code_ausgabe='';
    if($fieldgroup !="") 
    eval ("\$user_ext_group = \"".pkTpl("usereditprofile_userfield_group")."\";");
    else unset($user_ext_group);
    if (getrights($fieldstatusedit)=="true" 
# Telfonerweiterung von philosapiens Anfang    
    AND getrights($config['telefon_infoshow'])=="true"
# Telfonerweiterung von philosapiens Ende    
    ){
    /********************* Dropdown Anfang *********************/
    if($fielddrop==1) {
    $getdrops=$DB->query("SELECT * FROM `".$sqlprefix."_dropdown` WHERE `id_field`='".intval($fieldid)."' ORDER by `id_sort` ASC"); 
    while ($drops=$DB->fetch_array($getdrops)) {
    $info_drop.='<option value="'.$drops['text'].'"';
    if ($value==$drops['text']) $info_drop.=' selected';
    $info_drop.='>'.htmlentities(stripslashes(trim($drops['text']))).'</option>';
    }
    if($fieldpflicht==1) $pflichtfeld='<span style="color:#d70007;">*</span>';
    eval ("\$editprofile_userfield.= \"".pkTpl("usereditprofile_userfield_drop")."\";");
    unset($info_drop);
    unset($pflichtfeld);}
    elseif($fieldpflicht=="0" AND $fieldarea=="0"){ unset($pflichtfeld);
/********************* Dropdown Ende ***********************/
    eval ("\$editprofile_userfield.= \"".pkTpl("usereditprofile_userfield")."\";");}
    elseif($fieldpflicht=="0" AND $fieldarea=="1"){ unset($pflichtfeld);
    eval ("\$editprofile_userfield.= \"".pkTpl("usereditprofile_userfield_area")."\";");}
    elseif($fieldpflicht=="0" AND $fieldarea=="2"){ unset($pflichtfeld);
    eval ("\$editprofile_userfield.= \"".pkTpl("usereditprofile_userfield_num")."\";");}
    elseif($fieldpflicht=="1" AND $fieldarea=="0"){$pflichtfeld='<span style="color:#d70007;">*</span>';
    eval ("\$editprofile_userfield.= \"".pkTpl("usereditprofile_userfield")."\";");}
    elseif($fieldpflicht=="1" AND $fieldarea=="1"){$pflichtfeld='<span style="color:#d70007;">*</span>';
    eval ("\$editprofile_userfield.= \"".pkTpl("usereditprofile_userfield_area")."\";");}
    elseif($fieldpflicht=="1" AND $fieldarea=="2"){$pflichtfeld='<span style="color:#d70007;">*</span>';
    eval ("\$editprofile_userfield.= \"".pkTpl("usereditprofile_userfield_num")."\";");}
    } else eval ("\$editprofile_userfield.= \"".pkTpl("usereditprofile_no_edit")."\";");
    }
/********************************  Pflichtfeld Ende.   Original wir nur angepasst  ********************************/

switch($info['user_sex']) {
    case 'w' :
        $user_sex_option_1='selected="selected"';
        break;
    case 'm' :
        $user_sex_option_2='selected="selected"';
        break;
    default :
        $user_sex_option_0='selected="selected"';
    }

foreach(range(1,31) as $d)
    $bd_option_day.='<option value="'.$d.'"'.($info['user_bd_day']==$d ? ' selected="selected"' : '').'>'.$d.'</option>';

foreach(range(1,12) as $m)
    $bd_option_month.='<option value="'.$m.'"'.($info['user_bd_month']==$m ? ' selected="selected"' : '').'>'.pkGetSpecialLang('month',$m).'</option>';
  
foreach(range(date('Y')-5,1900) as $y)
    $bd_option_year.='<option '.($info['user_bd_year']==$y ? ' selected="selected"' : '').'>'.$y.'</option>';


$action_target=pkLink('usereditprofile');

$user_name=pkEntities($info['user_name']);
$user_nick=pkEntities($info['user_nick']);
$user_email=pkEntities($info['user_email']);
$user_aimid=pkEntities($info['user_aimid']);
$user_yim=pkEntities($info['user_yim']);
$user_vorname=pkEntities($info['user_vorname']);
$user_wohnort=pkEntities($info['user_wohnort']);
$user_marke=pkEntities($info['user_marke']);
$user_modell=pkEntities($info['user_modell']);
$user_liter=pkEntities($info['user_liter']);
$user_pskw=pkEntities($info['user_pskw']);
$user_baujahr=pkEntities($info['user_baujahr']);
$user_sig=pkEntities($info['user_sig']);
$user_qou=pkEntities($info['user_qou']);
$user_innen=pkEntities($info['user_innen']);
$user_aussen=pkEntities($info['user_aussen']);
$user_carhifi=pkEntities($info['user_carhifi']);
$user_geplant=pkEntities($info['user_geplant']);
$user_hobby=pkEntities($info['user_hobby']);
$user_hpage=pkEntities($info['user_hpage']);

$user_status=pkUserStatus($info['user_status']);
$user_signin=formattime($info['signin']);
$user_country=pkUserCountryOptionlist($info['user_country']);
$user_icqid=intval($info['user_icqid'])>0 ? intval($info['user_icqid']) : NULL;
$info['user_emailshow']==1 ? $user_email_option_1=' checked="checked"' : $user_email_option_0=' checked="checked"';

$user_navigation=pkUsernavigation();

$L_save=pkGetLang('save');
$L_reset=pkGetLang('reset');

foreach(array(
        'edit_profile',
        'username',
        'username_description',
        'userstatus',
        'userstatus_description',
        'member_since',
        'required_specifications',
        'nickname',
        'nickname_description',
        'password',
        'password_description',
        'confirm_password',
        'confirm_password_description',
        'email',
        'email_description',
        'optional_specifications',
        'show_email',
        'show_email_description',
        'sex',
        'sex_description',
        'sex_not_specified',
        'sex_male',
        'sex_female',
        'dateofbirth',
        'dateofbirth_description',
        'dateofbirth_day',
        'dateofbirth_month',
        'dateofbirth_year',
        'origin',
        'origin_description',
        'origin_bw',
        'origin_bay',
        'origin_b',
        'origin_bb',
        'origin_hb',
        'origin_hh',
        'origin_h',
        'origin_mv',
        'origin_n',
        'origin_nw',
        'origin_rp',
        'origin_s',
        'origin_sa',
        'origin_saa',
        'origin_sh',
        'origin_t',
        'origin_00',
        'origin_aut',
        'origin_ch',
        'origin_nl',
        'origin_oth',
        'origin_def',
        'homepage',
        'homepage_description',
        'aim_screenname',
        'aim_screenname_description',
        'yim',
        'yim_description',
        'icq',
        'icq_description',
        'vorname',
        'vorname_description',
        'wohnort',
        'wohnort_description',
        'marke',
        'marke_description',
        'modell',
        'modell_description',
        'liter',
        'liter_description',
        'pskw',
        'pskw_description',
        'baujahr',
        'baujahr_description',
        'signature',
        'signature_description',
        'quotation',
        'quotation_description',
        'innen',
        'innen_description',
        'aussen',
        'aussen_description',
        'carhifi',
        'carhifi_description',
        'geplant',
        'geplant_description',
        'hobbies',
        'hobbies_description'
        ) as $l) {
    $v='L_editprofile_'.$l;
    $$v=pkGetLang($l);
    }

eval("\$site_body.= \"".pkTpl("usereditprofile")."\";");
unset($S);
?>

PHP-Quelltext

while(list($fieldid,$fielddescription,$fieldname,$fieldlength,$fielddrop,$fieldstatusedit,$fieldpflicht,$fieldarea,$fieldbbcode)=$S->fetch_row($result)) {

Quellcode

$fieldgroup,

PHP-Quelltext

while(list($fieldid,$fielddescription,$fieldname,$fieldlength,$fieldgroup,$fielddrop,$fieldstatusedit,$fieldpflicht,$fieldarea,$fieldbbcode)=$S->fetch_row($result)) {