OSDN Git Service

Small changes to page titles. :P
[idb/iDB.git.git] / inc / members.php
1 <?php
2 /*
3     This program is free software; you can redistribute it and/or modify
4     it under the terms of the Revised BSD License.
5
6     This program is distributed in the hope that it will be useful,
7     but WITHOUT ANY WARRANTY; without even the implied warranty of
8     MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
9     Revised BSD License for more details.
10
11     Copyright 2004-2007 Cool Dude 2k - http://intdb.sourceforge.net/
12     Copyright 2004-2007 Game Maker 2k - http://upload.idb.s1.jcink.com/
13
14     $FileInfo: members.php - Last Update: 09/06/2007 SVN 99 - Author: cooldude2k $
15 */
16 $File3Name = basename($_SERVER['SCRIPT_NAME']);
17 if ($File3Name=="members.php"||$File3Name=="/members.php") {
18         require('index.php');
19         exit(); }
20 if($_GET['act']=="list") {
21 $orderlist = null;
22 $orderlist = "order by `ID` asc";
23 if(!isset($_GET['orderby'])) { $_GET['orderby'] = null; }
24 if(!isset($_GET['sorttype'])) { $_GET['sorttype'] = null; }
25 if(!isset($_GET['ordertype'])) { $_GET['ordertype'] = null; }
26 if(!isset($_GET['orderby'])) { $_GET['orderby'] = null; }
27 if(!isset($_GET['sortby'])) { $_GET['sortby'] = null; }
28 if(!isset($_GET['gid'])) { $_GET['gid'] = null; }
29 if(!isset($_GET['groupid'])) { $_GET['groupid'] = null; }
30 if($_GET['orderby']==null) { 
31         if($_GET['sortby']!=null) { 
32                 $_GET['orderby'] = $_GET['sortby']; } }
33 if($_GET['orderby']==null) { $_GET['orderby'] = "joined"; }
34 if($_GET['orderby']!=null) {
35 if($_GET['orderby']=="id") { $orderlist = "order by `ID`"; }
36 if($_GET['orderby']=="name") { $orderlist = "order by `Name`"; }
37 if($_GET['orderby']=="joined") { $orderlist = "order by `Joined`"; }
38 if($_GET['orderby']=="active") { $orderlist = "order by `LastActive`"; }
39 if($_GET['orderby']=="posts") { $orderlist = "order by `PostCount`"; }
40 if($_GET['orderby']=="offset") { $orderlist = "order by `TimeZone`"; } }
41 if($_GET['ordertype']==null) { 
42         if($_GET['sorttype']!=null) { 
43                 $_GET['ordertype'] = $_GET['sorttype']; } }
44 if($_GET['ordertype']==null) { $_GET['ordertype'] = "asc"; }
45 if($_GET['ordertype']!=null) {
46 if($_GET['ordertype']=="ascending") { $orderlist .= " asc"; }
47 if($_GET['ordertype']=="descending") { $orderlist .= " desc"; }
48 if($_GET['ordertype']=="asc") { $orderlist .= " asc"; }
49 if($_GET['ordertype']=="desc") { $orderlist .= " desc"; } }
50 if(!is_numeric($_GET['gid'])) { $_GET['gid'] = null; }
51 if($_GET['gid']!=null&&$_GET['groupid']==null) { $_GET['groupid'] = $_GET['gid']; }
52 if(!is_numeric($_GET['groupid'])) { $_GET['groupid'] = null; }
53 $ggquery = query("SELECT * FROM `".$Settings['sqltable']."groups` WHERE `Name`='%s'", array($Settings['GuestGroup']));
54 $ggresult=mysql_query($ggquery);
55 $GGroup=mysql_result($ggresult,0,"id");
56 @mysql_free_result($ggresult);
57 if($_GET['groupid']==null) {
58 $query = query("SELECT * FROM `".$Settings['sqltable']."members` WHERE `GroupID`<>%i ".$orderlist, array($GGroup)); }
59 if($_GET['groupid']!=null) {
60 $query = query("SELECT * FROM `".$Settings['sqltable']."members` WHERE `GroupID`=%i AND `GroupID`<>%i ".$orderlist, array($_GET['groupid'],$GGroup)); }
61 $result=mysql_query($query);
62 $num=mysql_num_rows($result);
63 //Start MemberList Page Code (Will be used at later time)
64 if(!isset($Settings['max_memlist'])) { $Settings['max_memlist'] = 10; }
65 if($_GET['page']==null) { $_GET['page'] = 1; } 
66 if($_GET['page']<=0) { $_GET['page'] = 1; }
67 $nums = $_GET['page'] * $Settings['max_memlist'];
68 if($nums>$num) { $nums = $num; }
69 $numz = $nums - $Settings['max_memlist'];
70 if($numz<=0) { $numz = 0; }
71 $i=$numz;
72 if($nums<$num) { $nextpage = $_GET['page'] + 1; }
73 if($nums>=$num) { $nextpage = $_GET['page']; }
74 if($numz>=$Settings['max_memlist']) { $backpage = $_GET['page'] - 1; }
75 if($_GET['page']<=1) { $backpage = 1; }
76 $pnum = $num; $l = 1; $Pages = null;
77 while ($pnum>0) {
78 if($pnum>=$Settings['max_memlist']) { 
79         $pnum = $pnum - $Settings['max_memlist']; 
80         $Pages[$l] = $l; ++$l; }
81 if($pnum<$Settings['max_memlist']&&$pnum>0) { 
82         $pnum = $pnum - $pnum; 
83         $Pages[$l] = $l; ++$l; } }
84 //End MemberList Page Code (Its not used yet but its still good to have :P )
85 $i=0;
86 $pagenum=count($Pages);
87 $pagei=1; $pstring = "<div class=\"PageList\">Pages: ";
88 while ($pagei <= $pagenum) {
89 $pstring = $pstring."<a href=\"".url_maker($exfile['member'],$Settings['file_ext'],"act=list&page=".$Pages[$pagei],$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member'])."\">".$Pages[$pagei]."</a> ";
90         ++$pagei; } $pstring = $pstring."</div>";
91 ?>
92 <div class="Table1Border">
93 <table class="Table1">
94 <tr class="TableRow1">
95 <td class="TableRow1" colspan="7"><span style="float: left;">
96 <?php echo $ThemeSet['TitleIcon'] ?><a href="<?php echo url_maker($exfile['member'],$Settings['file_ext'],"act=list",$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member']); ?>">Member List</a>
97 </span><span style="float: right;">&nbsp;</span></td>
98 </tr>
99 <tr id="Member" class="TableRow2">
100 <th class="TableRow2" style="width: 5%;">ID</th>
101 <th class="TableRow2" style="width: 28%;">Name</th>
102 <th class="TableRow2" style="width: 10%;">Group</th>
103 <th class="TableRow2" style="width: 10%;">Posts</th>
104 <th class="TableRow2" style="width: 20%;">Joined</th>
105 <th class="TableRow2" style="width: 20%;">Last Active</th>
106 <th class="TableRow2" style="width: 7%;">Website</th>
107 </tr>
108 <?php
109 while ($i < $num) {
110 $MemList['ID']=mysql_result($result,$i,"id");
111 $MemList['Name']=mysql_result($result,$i,"Name");
112 $MemList['Email']=mysql_result($result,$i,"Email");
113 $MemList['GroupID']=mysql_result($result,$i,"GroupID");
114 $MemList['WarnLevel']=mysql_result($result,$i,"WarnLevel");
115 $MemList['Interests']=mysql_result($result,$i,"Interests");
116 $MemList['Title']=mysql_result($result,$i,"Title");
117 $MemList['Joined']=mysql_result($result,$i,"Joined");
118 $MemList['Joined']=GMTimeChange("F j Y, g:i a",$MemList['Joined'],$_SESSION['UserTimeZone'],0,$_SESSION['UserDST']);
119 $MemList['LastActive']=mysql_result($result,$i,"LastActive");
120 $MemList['LastActive']=GMTimeChange("F j Y, g:i a",$MemList['LastActive'],$_SESSION['UserTimeZone'],0,$_SESSION['UserDST']);
121 $MemList['Website']=mysql_result($result,$i,"Website");
122 $MemList['Gender']=mysql_result($result,$i,"Gender");
123 $MemList['PostCount']=mysql_result($result,$i,"PostCount");
124 $MemList['TimeZone']=mysql_result($result,$i,"TimeZone");
125 $MemList['DST']=mysql_result($result,$i,"DST");
126 $MemList['IP']=mysql_result($result,$i,"IP");
127 $gquery = query("SELECT * FROM `".$Settings['sqltable']."groups` WHERE `id`=%i", array($MemList['GroupID']));
128 $gresult=mysql_query($gquery);
129 $MemList['Group']=mysql_result($gresult,0,"Name");
130 @mysql_free_result($gresult);
131 $membertitle = " ".$ThemeSet['TitleDivider']." Member List";
132 if($MemList['Group']!=$Settings['GuestGroup']) {
133 ?>
134 <tr class="TableRow3" id="Member<?php echo $MemList['ID']; ?>">
135 <td class="TableRow3" style="text-align: center;"><?php echo $MemList['ID']; ?></td>
136 <td class="TableRow3">&nbsp;<a href="<?php echo url_maker($exfile['member'],$Settings['file_ext'],"act=view&id=".$MemList['ID'],$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member']); ?>"><?php echo $MemList['Name']; ?></a></td>
137 <td class="TableRow3" style="text-align: center;"><a href="<?php echo url_maker($exfile['member'],$Settings['file_ext'],"act=list&gid=".$MemList['GroupID'],$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member']); ?>"><?php echo $MemList['Group']; ?></a></td>
138 <td class="TableRow3" style="text-align: center;"><?php echo $MemList['PostCount']; ?></td>
139 <td class="TableRow3" style="text-align: center;"><?php echo $MemList['Joined']; ?></td>
140 <td class="TableRow3" style="text-align: center;"><?php echo $MemList['LastActive']; ?></td>
141 <td class="TableRow3" style="text-align: center;"><a href="<?php echo $MemList['Website']; ?>" onclick="window.open(this.href);return false;">Website</a></td>
142 </tr>
143 <?php }
144 ++$i; } @mysql_free_result($result);
145 ?>
146 <tr id="MemEnd" class="TableRow4">
147 <td class="TableRow4" colspan="7">&nbsp;</td>
148 </tr>
149 </table></div>
150 <?php }
151 if($_GET['act']=="view") { 
152 $query = query("SELECT * FROM `".$Settings['sqltable']."members` WHERE `id`=%i", array($_GET['id']));
153 $result=mysql_query($query);
154 $num=mysql_num_rows($result);
155 $i=0;
156 if($num==0||$_GET['id']=="-1") { redirect("location",$basedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false));
157 ob_clean(); @header("Content-Type: text/plain; charset=".$Settings['charset']);
158 gzip_page($Settings['use_gzip'],$GZipEncode['Type']); @mysql_close(); die(); }
159 $ViewMem['ID']=mysql_result($result,$i,"id");
160 $ViewMem['Name']=mysql_result($result,$i,"Name");
161 $ViewMem['Signature']=mysql_result($result,$i,"Signature");
162 $ViewMem['Avatar']=mysql_result($result,$i,"Avatar");
163 $ViewMem['AvatarSize']=mysql_result($result,$i,"AvatarSize");
164 $ViewMem['Email']=mysql_result($result,$i,"Email");
165 $ViewMem['GroupID']=mysql_result($result,$i,"GroupID");
166 $ViewMem['WarnLevel']=mysql_result($result,$i,"WarnLevel");
167 $ViewMem['Interests']=mysql_result($result,$i,"Interests");
168 $ViewMem['Title']=mysql_result($result,$i,"Title");
169 $ViewMem['Joined']=mysql_result($result,$i,"Joined");
170 $ViewMem['Joined']=GMTimeChange("M j Y, g:i a",$ViewMem['Joined'],$_SESSION['UserTimeZone'],0,$_SESSION['UserDST']);
171 $ViewMem['LastActive']=mysql_result($result,$i,"LastActive");
172 $ViewMem['LastActive']=GMTimeChange("M j Y, g:i a",$ViewMem['LastActive'],$_SESSION['UserTimeZone'],0,$_SESSION['UserDST']);
173 $ViewMem['Website']=mysql_result($result,$i,"Website");
174 $ViewMem['Gender']=mysql_result($result,$i,"Gender");
175 $ViewMem['PostCount']=mysql_result($result,$i,"PostCount");
176 $ViewMem['TimeZone']=mysql_result($result,$i,"TimeZone");
177 $ViewMem['DST']=mysql_result($result,$i,"DST");
178 $ViewMem['IP']=mysql_result($result,$i,"IP");
179 $gquery = query("SELECT * FROM `".$Settings['sqltable']."groups` WHERE `id`=%i", array($ViewMem['GroupID']));
180 $gresult=mysql_query($gquery);
181 $ViewMem['Group']=mysql_result($gresult,0,"Name");
182 @mysql_free_result($gresult);
183 $membertitle = " ".$ThemeSet['TitleDivider']." ".$ViewMem['Name'];      
184 if ($ViewMem['Avatar']=="http://"||$ViewMem['Avatar']==null) {
185 $ViewMem['Avatar']=$ThemeSet['NoAvatar'];
186 $ViewMem['AvatarSize']=$ThemeSet['NoAvatarSize']; }
187 $AvatarSize1=explode("x", $ViewMem['AvatarSize']);
188 $AvatarSize1W=$AvatarSize1[0]; $AvatarSize1H=$AvatarSize1[1];
189 $ViewMem['Signature'] = text2icons($ViewMem['Signature'],$Settings['sqltable']);
190 if($_GET['view']==null) { $_GET['view'] = "profile"; }
191 if($_GET['view']!="profile"&&$_GET['view']!="avatar"&&
192         $_GET['view']!="website"&&$_GET['view']!="homepage") { $_GET['view'] = "profile"; }
193 if($_GET['view']=="avatar") { 
194         @session_write_close();
195         @header("Location: ".$ViewMem['Avatar']); }
196 if($_GET['view']=="website"||$_GET['view']=="homepage") { 
197         if ($ViewMem['Website']!="http://"&&$ViewMem['Website']!=null) {
198         @session_write_close();
199         @header("Location: ".$ViewMem['Website']); }
200         if ($ViewMem['Website']=="http://"||$ViewMem['Website']==null) {
201         @session_write_close();
202         @header("Location: ".$BoardURL."index.php?act=view"); } }
203 ?>
204 <div class="Table1Border">
205 <table class="Table1">
206 <tr class="TableRow1">
207 <td class="TableRow1" colspan="2"><span style="float: left;">
208 <?php echo $ThemeSet['TitleIcon'] ?><a href="<?php echo url_maker($exfile['member'],$Settings['file_ext'],"act=view&id=".$_GET['id'],$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member']); ?>">Viewing Profile</a>
209 </span><span style="float: right;">&nbsp;</span></td>
210 </tr>
211 <tr id="Member" class="TableRow2">
212 <th class="TableRow2" style="width: 50%;">Avatar</th>
213 <th class="TableRow2" style="width: 50%;">User Info</th>
214 </tr>
215 <tr class="TableRow3" id="MemberProfile">
216 <td class="TableRow3">
217 <?php  /* Avatar Table Thanks For SeanJ's Help at http://seanj.jcink.com/ */  ?>
218  <table class="AvatarTable" style="width: 100%; height: 100px; text-align: center;">
219         <tr class="AvatarRow" style="width: 100px; height: 100px;">
220                 <td class="AvatarRow" style="width: 100%; height: 100%; text-align: center; vertical-align: middle;">
221                 <img src="<?php echo $ViewMem['Avatar']; ?>" alt="<?php echo $ViewMem['Name']; ?>'s Avatar" title="<?php echo $ViewMem['Name']; ?>'s Avatar" style="border: 0px; width: <?php echo $AvatarSize1W; ?>px; height: <?php echo $AvatarSize1H; ?>px;" />
222                 </td>
223         </tr>
224  </table>
225 <div style="text-align: center;">
226 Name: <?php echo $ViewMem['Name']; ?><br />
227 Title: <?php echo $ViewMem['Title']; ?></div>
228 </td>
229 <td class="TableRow3">
230 &nbsp;User Name: <?php echo $ViewMem['Name']; ?><br />
231 &nbsp;User Title: <?php echo $ViewMem['Title']; ?><br />
232 &nbsp;User Group: <?php echo $ViewMem['Group']; ?><br />
233 &nbsp;User Joined: <?php echo $ViewMem['Joined']; ?><br />
234 &nbsp;Last Active: <?php echo $ViewMem['LastActive']; ?><br />
235 &nbsp;User Time: <?php echo GMTimeGet("M j Y, g:i a",$ViewMem['TimeZone'],0,$ViewMem['DST']); ?><br />
236 &nbsp;User Website: <a href="<?php echo $ViewMem['Website']; ?>" onclick="window.open(this.href);return false;">Website</a><br />
237 &nbsp;Post Count: <?php echo $ViewMem['PostCount']; ?><br />
238 &nbsp;Interests: <?php echo $ViewMem['Interests']; ?><br />
239 </td>
240 </tr>
241 <tr class="TableRow4">
242 <td class="TableRow4" colspan="2">&nbsp;</td>
243 </tr>
244 </table></div>
245 <?php } @mysql_free_result($result);
246 if($_GET['act']=="logout") {
247 @session_unset();
248 @setcookie("MemberName", null, GMTimeStamp() - 3600, $basedir);
249 @setcookie("UserID", null, GMTimeStamp() - 3600, $basedir);
250 @setcookie("SessPass", null, GMTimeStamp() - 3600, $basedir);
251 @setcookie(session_name(), "", GMTimeStamp() - 3600, $basedir);
252 unset($_COOKIE[session_name()]);
253 $_SESSION = array();
254 @session_unset();
255 @session_destroy();
256 @redirect("location",$basedir.url_maker($exfile['member'],$Settings['file_ext'],"act=login",$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member'],false));
257 ob_clean(); @header("Content-Type: text/plain; charset=".$Settings['charset']);
258 gzip_page($Settings['use_gzip'],$GZipEncode['Type']); @mysql_close(); die(); }
259 if($_GET['act']=="login") {
260 $membertitle = " ".$ThemeSet['TitleDivider']." Login";
261 ?>
262 <div class="Table1Border">
263 <table class="Table1">
264 <tr class="TableRow1">
265 <td class="TableRow1"><span style="float: left;">
266 <?php echo $ThemeSet['TitleIcon'] ?><a href="<?php echo url_maker($exfile['member'],$Settings['file_ext'],"act=login",$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member']); ?>">Log in</a>
267 </span><span style="float: right;">&nbsp;</span></td>
268 </tr>
269 <tr class="TableRow2">
270 <th class="TableRow2" style="width: 100%; text-align: left;">&nbsp;Inert your login info: </th>
271 </tr>
272 <tr class="TableRow3">
273 <td class="TableRow3">
274 <form method="post" action="<?php echo url_maker($exfile['member'],$Settings['file_ext'],"act=login_now",$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member']); ?>">
275 <table style="text-align: left;">
276 <tr style="text-align: left;">
277         <td style="width: 30%;"><label class="TextBoxLabel" for="username">Enter UserName: </label></td>
278         <td style="width: 70%;"><input maxlength="20" class="TextBox" id="username" type="text" name="username" /></td>
279 </tr><tr>
280         <td style="width: 30%;"><label class="TextBoxLabel" for="userpass">Enter Password: </label></td>
281         <td style="width: 70%;"><input maxlength="30" class="TextBox" id="userpass" type="password" name="userpass" /></td>
282 </tr><tr>
283         <td style="width: 30%;"><label class="TextBoxLabel" title="Store userinfo as a cookie so you dont need to login again." for="storecookie">Store as cookie?</label></td>
284         <td style="width: 70%;"><select id="storecookie" name="storecookie" class="TextBox">
285 <option value="true">Yes</option>
286 <option value="false">No</option>
287 </select></td>
288 </tr></table>
289 <table style="text-align: left;">
290 <tr style="text-align: left;">
291 <td style="width: 100%;">
292 <input type="hidden" name="act" value="loginmember" style="display: none;" />
293 <input class="Button" type="submit" value="Log in" />
294 </td></tr></table>
295 </form>
296 </td>
297 </tr>
298 <tr class="TableRow4">
299 <td class="TableRow4">&nbsp;</td>
300 </tr>
301 </table></div>
302 <?php } if($_POST['act']=="loginmember"&&$_GET['act']=="login_now") {
303 $membertitle = " ".$ThemeSet['TitleDivider']." Login";
304 $REFERERurl = parse_url($_SERVER['HTTP_REFERER']);
305 $URL['REFERER'] = $REFERERurl['host'];
306 $URL['HOST'] = $_SERVER["SERVER_NAME"];
307 $REFERERurl = null; unset($REFERERurl);
308 ?>
309 <div class="Table1Border">
310 <table class="Table1">
311 <tr class="TableRow1">
312 <td class="TableRow1">
313 <span style="float: left;">&nbsp;<a href="<?php echo url_maker($exfile['member'],$Settings['file_ext'],"act=login",$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member']); ?>">Log in</a></span>
314 <span style="float: right;">&nbsp;</span></td>
315 </tr>
316 <tr class="TableRow2">
317 <th class="TableRow2" style="width: 100%; text-align: left;">&nbsp;Login Message: </th>
318 </tr>
319 <tr class="TableRow3">
320 <td class="TableRow3">
321 <table style="width: 100%; height: 25%; text-align: center;">
322 <?php
323 if (strlen($_POST['userpass'])>="30") { $Error="Yes";  ?>
324 <tr>
325         <td><span class="TableMessage">
326         <br />Your password is too big.<br />
327         </span></td>
328 </tr>
329 <?php } if (strlen($_POST['username'])>="20") { $Error="Yes";  ?>
330 <tr>
331         <td><span class="TableMessage">
332         <br />Your user name is too big.<br />
333         <span></td>
334 </tr>
335 <?php } if ($Settings['TestReferer']==true) {
336         if ($URL['HOST']!=$URL['REFERER']) { $Error="Yes";  ?>
337 <tr>
338         <td><span class="TableMessage">
339         <br />Sorry the referering url dose not match our host name.<br />
340         <span></td>
341 </tr>
342 <?php } }
343 if ($Error=="Yes") {
344 @redirect("refresh",$basedir.url_maker($exfile['member'],$Settings['file_ext'],"act=login",$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member'],false),"4"); }
345 if($Error!="Yes"){
346 $YourName = stripcslashes(htmlspecialchars($_POST['username'], ENT_QUOTES));
347 //$YourName = preg_replace("/&amp;#(x[a-f0-9]+|[0-9]+);/i", "&#$1;", $YourName);
348 $YourName = @remove_spaces($YourName);
349 $passtype="ODFH";
350 $querylog = query("SELECT * FROM `".$Settings['sqltable']."members` WHERE `Name`='%s'", array($YourName));
351 $resultlog=mysql_query($querylog);
352 $numlog=mysql_num_rows($resultlog);
353 if($numlog>=1) {
354 $i=0;
355 $YourPassTry=mysql_result($resultlog,$i,"Password");
356 $HashType=mysql_result($resultlog,$i,"HashType");
357 $JoinedPass=mysql_result($resultlog,$i,"Joined");
358 $HashSalt=mysql_result($resultlog,$i,"Salt");
359 $UpdateHash = false;
360 if($HashType=="ODFH") { $YourPassword = sha1(md5($_POST['userpass'])); }
361 if($HashType=="DF4H") { $YourPassword = b64e_hmac($_POST['userpass'],$JoinedPass,$HashSalt,"sha1"); }
362 if($HashType=="iDBH"||$UpdateHash!=true) { $YourPassword = b64e_hmac($_POST['userpass'],$JoinedPass,$HashSalt,"sha1"); }
363 if($YourPassword==$YourPassTry) { $passright = false; } 
364 if($YourPassword==$YourPassTry) { $passright = true;
365 $YourIDM=mysql_result($resultlog,$i,"id");
366 $YourNameM=mysql_result($resultlog,$i,"Name");
367 $YourPassM=mysql_result($resultlog,$i,"Password");
368 $PostCount=mysql_result($resultlog,$i,"PostCount");
369 $YourGroupM=mysql_result($resultlog,$i,"GroupID");
370 $gquery = query("SELECT * FROM `".$Settings['sqltable']."groups` WHERE `id`=%i", array($YourGroupM));
371 $gresult=mysql_query($gquery);
372 $YourGroupM=mysql_result($gresult,0,"Name");
373 @mysql_free_result($gresult);
374 $YourTimeZoneM=mysql_result($resultlog,$i,"TimeZone");
375 $YourDSTM=mysql_result($resultlog,$i,"DST");
376 $JoinedDate=mysql_result($resultlog,$i,"Joined");
377 $UseTheme=mysql_result($resultlog,$i,"UseTheme");
378 $NewHashSalt = salt_hmac();
379 $NewPassword = b64e_hmac($_POST['userpass'],$JoinedPass,$NewHashSalt,"sha1");
380 $NewDay=GMTimeStamp();
381 $NewIP=$_SERVER['REMOTE_ADDR'];
382 $queryup = query("UPDATE `".$Settings['sqltable']."members` SET `Password`='%s',`HashType`='iDBH',`LastActive`=%i,`IP`='%s',`Salt`='%s' WHERE `id`=%i", array($NewPassword,$NewDay,$NewIP,$NewHashSalt,$YourIDM));
383 mysql_query($queryup);
384 @mysql_free_result($resultlog); @mysql_free_result($queryup);
385 //session_regenerate_id();
386 $_SESSION['Theme']=$UseTheme;
387 $_SESSION['MemberName']=$YourNameM;
388 $_SESSION['UserID']=$YourIDM;
389 $_SESSION['UserTimeZone']=$YourTimeZoneM;
390 $_SESSION['UserGroup']=$YourGroupM;
391 $_SESSION['UserDST']=$YourDSTM;
392 $_SESSION['UserPass']=$NewPassword;
393 $_SESSION['DBName']=$Settings['sqldb'];
394 if($_POST['storecookie']==true) {
395 setcookie("MemberName", $YourNameM, time() + (7 * 86400), $basedir);
396 setcookie("UserID", $YourIDM, time() + (7 * 86400), $basedir);
397 setcookie("SessPass", $NewPassword, time() + (7 * 86400), $basedir); }
398 } } if($numlog<=0) {
399 //echo "Password was not right or user not found!! <_< ";
400 } ?>
401 <?php if($passright==true) {
402 @redirect("refresh",$basedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false),"3"); ?>
403 <tr>
404         <td><span class="TableMessage">
405         <br />Welcome to the Board <?php echo $_SESSION['MemberName']; ?>. ^_^<br />
406         Click <a href="<?php echo url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index']); ?>">here</a> to continue to board.<br />&nbsp;
407         </span></td>
408 </tr>
409 <?php } if($passright==false) { ?>
410 <tr>
411         <td><span class="TableMessage">
412         <br />Password was not right or user not found!! &lt;_&lt;<br />
413         Click <a href="<?php echo url_maker($exfile['member'],$Settings['file_ext'],"act=login",$Settings['qstr'],$Settings['qsep'],$exqstr['member'],$prexqstr['member']); ?>">here</a> to try again.<br />&nbsp;
414         </span></td>
415 </tr>
416 <?php } } ?>
417 </table>
418 </td></tr>
419 <tr class="TableRow4">
420 <td class="TableRow4">&nbsp;</td>
421 </tr>
422 </table></div>
423 <?php }
424 if($_GET['act']=="signup")
425
426 $membertitle = " ".$ThemeSet['TitleDivider']." Signing up"; ?>
427 <div class="Table1Border">
428 <table class="Table1">
429 <tr class="TableRow1">
430 <td class="TableRow1"><span style="float: left;">
431 <?php echo $ThemeSet['TitleIcon'] ?><a href="<?php echo url_maker($exfile['member'],$Settings['file_ext'],"act=signup",$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member']); ?>">Register</a>
432 </span><span style="float: right;">&nbsp;</span></td>
433 </tr>
434 <tr class="TableRow2">
435 <th class="TableRow2" style="width: 100%; text-align: left;">&nbsp;Inert your user info: </th>
436 </tr>
437 <tr class="TableRow3">
438 <td class="TableRow3">
439 <form method="post" action="<?php echo url_maker($exfile['member'],$Settings['file_ext'],"act=makemember",$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member']); ?>">
440 <table style="text-align: left;">
441 <tr style="text-align: left;">
442         <td style="width: 30%;"><label class="TextBoxLabel" for="Name">Insert a UserName:</label></td>
443         <td style="width: 70%;"><input maxlength="20" type="text" class="TextBox" name="Name" size="20" id="Name" /></td>
444 </tr><tr>
445         <td style="width: 30%;"><label class="TextBoxLabel" for="Password">Insert a Password:</label></td>
446         <td style="width: 70%;"><input maxlength="30" type="password" class="TextBox" name="Password" size="20" id="Password" /></td>
447 </tr><tr>
448         <td style="width: 30%;"><label class="TextBoxLabel" for="RePassword">ReInsert a Password:</label></td>
449         <td style="width: 70%;"><input maxlength="30" type="password" class="TextBox" name="RePassword" size="20" id="RePassword" /></td>
450 </tr><tr>
451         <td style="width: 30%;"><label class="TextBoxLabel" for="Email">Insert Your Email:</label></td>
452         <td style="width: 70%;"><input type="text" class="TextBox" name="Email" size="20" id="Email" /></td>
453 </tr><tr>
454         <td style="width: 30%;"><label class="TextBoxLabel" for="YourOffSet">Your TimeZone:</label></td>
455         <td style="width: 70%;"><select id="YourOffSet" name="YourOffSet" class="TextBox"><?php
456 $tsa_mem = explode(":",$Settings['DefaultTimeZone']);
457 $TimeZoneArray = array("offset" => $Settings['DefaultTimeZone'], "hour" => $tsa_mem[0], "minute" => $tsa_mem[1]);
458 $plusi = 1; $minusi = 12;
459 $plusnum = 13; $minusnum = 0;
460 while ($minusi > $minusnum) {
461 if($TimeZoneArray['hour']==-$minusi) {
462 echo "<option selected=\"selected\" value=\"-".$minusi."\">GMT - ".$minusi.":00 hours</option>\n"; }
463 if($TimeZoneArray['hour']!=-$minusi) {
464 echo "<option value=\"-".$minusi."\">GMT - ".$minusi.":00 hours</option>\n"; }
465 --$minusi; }
466 if($TimeZoneArray['hour']==0) { ?>
467 <option selected="selected" value="0">GMT +/- 0:00 hours</option>
468 <?php } if($TimeZoneArray['hour']!=0) { ?>
469 <option value="0">GMT +/- 0:00 hours</option>
470 <?php }
471 while ($plusi < $plusnum) {
472 if($TimeZoneArray['hour']==$plusi) {
473 echo "<option selected=\"selected\" value=\"".$plusi."\">GMT + ".$plusi.":00 hours</option>\n"; }
474 if($TimeZoneArray['hour']!=$plusi) {
475 echo "<option value=\"".$plusi."\">GMT + ".$plusi.":00 hours</option>\n"; }
476 ++$plusi; }
477 ?></select></td>
478 </tr><tr>
479         <td style="width: 50%;"><label class="TextBoxLabel" for="MinOffSet">Minute OffSet:</label></td>
480         <td style="width: 50%;"><select id="MinOffSet" name="MinOffSet" class="TextBox"><?php
481 $mini = 0; $minnum = 60;
482 while ($mini < $minnum) {
483 if(strlen($mini)==2) { $showmin = $mini; }
484 if(strlen($mini)==1) { $showmin = "0".$mini; }
485 if($mini==$TimeZoneArray['minute']) {
486 echo "\n<option selected=\"selected\" value=\"".$showmin."\">0:".$showmin." minutes</option>\n"; }
487 if($mini!=$TimeZoneArray['minute']) {
488 echo "<option value=\"".$showmin."\">0:".$showmin." minutes</option>\n"; }
489 ++$mini; }
490 ?></select></td>
491 </tr><tr>
492         <td style="width: 30%;"><label class="TextBoxLabel" for="DST">Is <span title="Daylight Savings Time">DST</span> / <span title="Summer Time">ST</span> on or off:</label></td>
493         <td style="width: 70%;"><select id="DST" name="DST" class="TextBox"><?php echo "\n" ?>
494 <?php if($Settings['DefaultDST']=="off"||$Settings['DefaultDST']!="on") { ?>
495 <option selected="selected" value="off">off</option><?php echo "\n" ?><option value="on">on</option>
496 <?php } if($Settings['DefaultDST']=="on") { ?>
497 <option selected="selected" value="on">on</option><?php echo "\n" ?><option value="off">off</option>
498 <?php } echo "\n" ?></select></td>
499 </tr><tr>
500         <td style="width: 30%;"><label class="TextBoxLabel" for="YourGender">Your Gender:</label></td>
501         <td style="width: 70%;"><select id="YourGender" name="YourGender" class="TextBox">
502 <option value="Male">Male</option>
503 <option value="Female">Female</option>
504 <option value="Unknow">Unknow</option>
505 </select></td>
506 </tr><tr>
507         <td style="width: 30%;"><label class="TextBoxLabel" for="Website">Insert your Website:</label></td>
508         <td style="width: 70%;"><input type="text" class="TextBox" name="Website" size="20" value="http://" id="Website" /></td>
509 </tr><tr>
510         <td style="width: 30%;"><label class="TextBoxLabel" for="Avatar">Insert a URL for Avatar:</label></td>
511         <td style="width: 70%;"><input type="text" class="TextBox" name="Avatar" size="20" value="http://" id="Avatar" /></td>
512 </tr><tr>
513         <td style="width: 30%;"><label class="TextBoxLabel" title="Store userinfo as a cookie so you dont need to login again." for="storecookie">Store as cookie?</label></td>
514         <td style="width: 70%;"><select id="storecookie" name="storecookie" class="TextBox">
515 <option value="true">Yes</option>
516 <option value="false">No</option>
517 </select></td>
518 </tr>
519 </table>
520 <table style="text-align: left;">
521 <tr style="text-align: left;">
522 <td style="width: 100%;">
523 <label class="TextBoxLabel" for="TOSBox">TOS - Please read fully and check 'I agree' box ONLY if you agree to terms</label><br />
524 <textarea rows="10" cols="58" id="TOSBox" name="TOSBox" class="TextBox" readonly="readonly" accesskey="T"><?php 
525         echo file_get_contents("TOS");  ?></textarea><br />
526 <input type="checkbox" class="TextBox" name="TOS" value="Agree" id="TOS" /><label class="TextBoxLabel" for="TOS">I Agree</label><br/>
527 <input type="hidden" style="display: none;" name="act" value="makemembers" />
528 <input type="submit" class="Button" value="Sign UP" />
529 </td></tr></table>
530 </form>
531 </td>
532 </tr>
533 <tr class="TableRow4">
534 <td class="TableRow4">&nbsp;</td>
535 </tr>
536 </table></div>
537 <?php } if($_GET['act']=="makemember") {
538         if($_POST['act']=="makemembers") {
539 $membertitle = " ".$ThemeSet['TitleDivider']." Signing up";
540 $REFERERurl = parse_url($_SERVER['HTTP_REFERER']);
541 $URL['REFERER'] = $REFERERurl['host'];
542 $URL['HOST'] = $_SERVER["SERVER_NAME"];
543 $REFERERurl = null; unset($REFERERurl);
544 if(!isset($_POST['username'])) { $_POST['username'] = null; }
545 if(!isset($_POST['TOS'])) { $_POST['TOS'] = null; }
546 ?>
547 <div class="Table1Border">
548 <table class="Table1">
549 <tr class="TableRow1">
550 <td class="TableRow1"><span style="float: right;">&nbsp;</span>
551 &nbsp;<a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=signup",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>">Register</a></td>
552 </tr>
553 <tr class="TableRow2">
554 <th class="TableRow2" style="width: 100%; text-align: left;">&nbsp;Signup Message: </th>
555 </tr>
556 <tr class="TableRow3">
557 <td class="TableRow3">
558 <table style="width: 100%; height: 25%; text-align: center;">
559 <?php if (strlen($_POST['Password'])>="30") { $Error="Yes";  ?>
560 <tr>
561         <td><span class="TableMessage">
562         <br />Your password is too big.<br />
563         </span></td>
564 </tr>
565 <?php } if (strlen($_POST['username'])>="20") { $Error="Yes";  ?>
566 <tr>
567         <td><span class="TableMessage">
568         <br />Your user name is too big.<br />
569         </span></td>
570 </tr>
571 <?php } if ($_POST['Password']!=$_POST['RePassword']) { $Error="Yes";  ?>
572 <tr>
573         <td><span class="TableMessage">
574         <br />Your passwords did not match.<br />
575         </span></td>
576 </tr>
577 <?php } if ($Settings['TestReferer']==true) {
578         if ($URL['HOST']!=$URL['REFERER']) { $Error="Yes";  ?>
579 <tr>
580         <td><span class="TableMessage">
581         <br />Sorry the referering url dose not match our host name.<br />
582         </span></td>
583 </tr>
584 <?php } }
585 $Name = stripcslashes(htmlspecialchars($_POST['Name'], ENT_QUOTES));
586 //$Name = preg_replace("/&amp;#(x[a-f0-9]+|[0-9]+);/i", "&#$1;", $Name);
587 $Name = @remove_spaces($Name);
588 $sql_email_check = mysql_query(query("SELECT `Email` FROM `".$Settings['sqltable']."members` WHERE `Email`='%s'", array($_POST['Email'])));
589 $sql_username_check = mysql_query(query("SELECT `Name` FROM `".$Settings['sqltable']."members` WHERE `Name`='%s'", array($Name)));
590 $email_check = mysql_num_rows($sql_email_check); 
591 $username_check = mysql_num_rows($sql_username_check);
592 @mysql_free_result($sql_email_check); @mysql_free_result($sql_username_check);
593 if ($_POST['TOS']!="Agree") { $Error="Yes";  ?>
594 <tr>
595         <td><span class="TableMessage">
596         <br />You need to  agree to the tos.<br />
597         </span></td>
598 </tr>
599 <?php } if ($_POST['Name']==null) { $Error="Yes"; ?>
600 <tr>
601         <td><span class="TableMessage">
602         <br />You need to enter a name.<br />
603         </span></td>
604 </tr>
605 <?php } if ($_POST['Name']=="ShowMe") { $Error="Yes"; ?>
606 <tr>
607         <td><span class="TableMessage">
608         <br />You need to enter a name.<br />
609         </span></td>
610 </tr>
611 <?php } if ($_POST['Password']==null) { $Error="Yes"; ?>
612 <tr>
613         <td><span class="TableMessage">
614         <br />You need to enter a password.<br />
615         </span></td>
616 </tr>
617 <?php } if ($_POST['Email']==null) { $Error="Yes"; ?>
618 <tr>
619         <td><span class="TableMessage">
620         <br />You need to enter a email.<br />
621         </span></td>
622 </tr>
623 <?php } if($email_check > 0) { $Error="Yes"; ?>
624 <tr>
625         <td><span class="TableMessage">
626         <br />Email address is already used.<br />
627         </span></td>
628 </tr>
629 <?php } if($username_check > 0) { $Error="Yes"; ?>
630 <tr>
631         <td><span class="TableMessage">
632         <br />UserName is already used.<br />
633         </span></td>
634 </tr>
635 <?php } if ($Error=="Yes") {
636 @redirect("refresh",$basedir.url_maker($exfile['member'],$Settings['file_ext'],"act=signup",$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member'],FALSE),"4"); }
637 if ($Error!="Yes") {
638 $_POST['UserIP'] = $_SERVER['REMOTE_ADDR'];
639 $_POST['Group'] = $Settings['MemberGroup'];
640 $_POST['Joined'] = GMTimeStamp(); $_POST['LastActive'] = GMTimeStamp();
641 $_POST['Signature'] = ""; $_POST['Interests'] = "";
642 $_POST['Title'] = ""; $_POST['PostCount'] = "0";
643 if($Settings['AdminValidate']==true||$Settings['AdminValidate']!=false)
644 { $ValidateStats="no"; $yourgroup=$Settings['ValidateGroup']; }
645 if($Settings['AdminValidate']==false)
646 { $ValidateStats="yes"; $yourgroup=$Settings['MemberGroup']; }
647 $HashSalt = salt_hmac(); 
648 $NewPassword = b64e_hmac($_POST['Password'],$_POST['Joined'],$HashSalt,"sha1");
649 $_GET['YourPost'] = $_POST['Signature'];
650 //require( './'.$SettDir['misc'].'HTMLTags.php');
651 $_GET['YourPost'] = htmlspecialchars($_GET['YourPost'], ENT_QUOTES);
652 $_GET['YourPost'] = preg_replace("/&amp;#(x[a-f0-9]+|[0-9]+);/i", "&#$1;", $_GET['YourPost']);
653 $NewSignature = $_GET['YourPost'];
654 $_GET['YourPost'] = preg_replace("/\t+/"," ",$_GET['YourPost']);
655 $_GET['YourPost'] = preg_replace("/\s\s+/"," ",$_GET['YourPost']);
656 $_GET['YourPost'] = remove_bad_entities($_GET['YourPost']);
657 $Avatar = stripcslashes(htmlspecialchars($_POST['Avatar'], ENT_QUOTES));
658 $Avatar = preg_replace("/&amp;#(x[a-f0-9]+|[0-9]+);/i", "&#$1;", $Avatar);
659 $Avatar = @remove_spaces($Avatar);
660 $Website = stripcslashes(htmlspecialchars($_POST['Website'], ENT_QUOTES));
661 $Website = preg_replace("/&amp;#(x[a-f0-9]+|[0-9]+);/i", "&#$1;", $Website);
662 $Website = @remove_spaces($Website);
663 $gquerys = query("SELECT * FROM `".$Settings['sqltable']."groups` WHERE `Name`='%s'", array($yourgroup));
664 $gresults=mysql_query($gquerys);
665 $yourgroup=mysql_result($gresults,0,"id");
666 @mysql_free_result($gresults);
667 $yourid = getnextid($Settings['sqltable'],"members");
668 $_POST['Interests'] = @remove_spaces($_POST['Interests']);
669 $_POST['Title'] = @remove_spaces($_POST['Title']);
670 $_POST['Email'] = @remove_spaces($_POST['Email']);
671 if(!is_numeric($_POST['YourOffSet'])) { $_POST['YourOffSet'] = "0"; }
672 if($_POST['YourOffSet']>12) { $_POST['YourOffSet'] = "12"; }
673 if($_POST['YourOffSet']<-12) { $_POST['YourOffSet'] = "-12"; }
674 if(!is_numeric($_POST['MinOffSet'])) { $_POST['MinOffSet'] = "00"; }
675 if($_POST['MinOffSet']>59) { $_POST['MinOffSet'] = "59"; }
676 if($_POST['MinOffSet']<0) { $_POST['MinOffSet'] = "00"; }
677 $_POST['YourOffSet'] = $_POST['YourOffSet'].":".$_POST['MinOffSet'];
678 $query = query("INSERT INTO `".$Settings['sqltable']."members` VALUES (".$yourid.",'%s','%s','%s','%s','%s','%s',%i,'%s','%s',%i,%i,'0','0','0','%s','%s','%s','%s','%s','%s',%i,'%s','%s','%s','%s','%s')", array($Name,$NewPassword,"iDBH",$_POST['Email'],$yourgroup,$ValidateStats,"0",$_POST['Interests'],$_POST['Title'],$_POST['Joined'],$_POST['LastActive'],$NewSignature,'Your Notes',$Avatar,"100x100",$Website,$_POST['YourGender'],$_POST['PostCount'],$_POST['YourOffSet'],$_POST['DST'],$Settings['DefaultTheme'],$_POST['UserIP'],$HashSalt));
679 mysql_query($query);
680 $querylogr = query("SELECT * FROM `".$Settings['sqltable']."members` WHERE `Name`='%s' AND `Password`='%s'", array($Name,$NewPassword));
681 $resultlogr=mysql_query($querylogr);
682 $numlogr=mysql_num_rows($resultlogr);
683 if($numlogr>=1) {
684 $ir=0;
685 $YourIDMr=mysql_result($resultlogr,$ir,"id");
686 $YourNameMr=mysql_result($resultlogr,$ir,"Name");
687 $YourGroupMr=mysql_result($resultlogr,$ir,"GroupID");
688 $gquery = query("SELECT * FROM `".$Settings['sqltable']."groups` WHERE `id`=%i", array($YourGroupMr));
689 $gresult=mysql_query($gquery);
690 $YourGroupMr=mysql_result($gresult,0,"Name");
691 @mysql_free_result($gresult);
692 $YourTimeZoneMr=mysql_result($resultlogr,$ir,"TimeZone");
693 $YourDSTMr=mysql_result($resultlogr,$ir,"DST"); }
694 @mysql_free_result($resultlogr);
695 @session_regenerate_id(true);
696 $_SESSION['Loggedin']=true;
697 $_SESSION['MemberName']=$YourNameMr;
698 $_SESSION['UserID']=$YourIDMr;
699 $_SESSION['UserTimeZone']=$YourTimeZoneMr;
700 $_SESSION['UserDST']=$YourDSTMr;
701 $_SESSION['UserGroup']=$YourGroupMr;
702 $_SESSION['UserPass']=$NewPassword;
703 $_SESSION['DBName']=$Settings['sqldb'];
704 if($_POST['storecookie']==true) {
705 @setcookie("MemberName", $YourNameM, time() + (7 * 86400), $basedir);
706 @setcookie("UserID", $YourIDM, time() + (7 * 86400), $basedir);
707 @setcookie("SessPass", $NewPassword, time() + (7 * 86400), $basedir); }
708 /*
709 $SendPMtoID=$_SESSION['UserID'];
710 $YourPMID = 1;
711 $PMTitle = "Welcome ".$Name.".";
712 $YourMessage = "Hello ".$Name.". Welcome to ".$Settings['board_name'].". I hope you enjoy your stay here. ^_^ ";
713 $_POST['YourDate'] = $_POST['Joined'];
714 $query = query("INSERT INTO `".$Settings['sqltable']."messenger` VALUES (null,%i,%i,'%s','%s','%s','%s',0)", array($YourPMID,$SendPMtoID,'',$PMTitle,$YourMessage,$_POST['YourDate']));
715 //mysql_query($query);
716 @redirect("refresh",$basedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],FALSE),"3");
717 */
718 ?>
719 <tr>
720         <td><span class="TableMessage">
721         <br />Welcome to the Board <?php echo $_SESSION['MemberName']; ?>. ^_^<br />
722         Click <a href="<?php echo url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index']); ?>">here</a> to continue to board.<br />&nbsp;
723         </span></td>
724 </tr>
725 <?php } ?>
726 </table>
727 </td></tr>
728 <tr class="TableRow4">
729 <td class="TableRow4">&nbsp;</td>
730 </tr>
731 </table></div>
732 <?php } } ?>
733 <div>&nbsp;</div>