Re: preference problem
<?php
include "globals.php";
switch($_GET['action'])
{
case 'sexchange2':
do_sex_change();
break;
case 'sexchange':
conf_sex_change();
break;
case 'passchange2':
do_pass_change();
break;
case 'passchange':
pass_change();
break;
case 'namechange2':
do_name_change();
break;
case 'namechange':
name_change();
break;
case 'picchange2':
do_pic_change();
break;
case 'picchange':
pic_change();
break;
case 'newpropic':
new_propic();
break;
case 'newpropic2':
do_new_propic();
break ;
case 'smchange2':
do_sm_change();
break;
case 'smchange':
sm_change();
break;
case 'forumchange2':
do_forum_change();
break;
case 'forumchange':
forum_change();
break;
case 'pdetailchange2':
do_pdetail_change();
break;
case 'pdetailchange':
pdetail_change();
break;
default:
prefs_home();
break;
}
function prefs_home()
{
global $db,$ir,$c,$userid,$h;
print "<h3>Preferences</h3>
[url='preferences.php?action=sexchange']Sex Change[/url]
[url='preferences.php?action=passchange']Password Change[/url]
[url='preferences.php?action=namechange']Name Change[/url]
[url='preferences.php?action=picchange']Display Pic Change[/url]
[url='preferences.php?action=smchange']Status Message Change[/url]
[url='preferences.php?action=newpropic']Profile Pic Change[/url]
[url='preferences.php?action=forumchange']Forum Info Change[/url]
[url='preferences.php?action=pdetailchange']Personal Detail Change[/url]
";
}
function conf_sex_change()
{
global $ir,$c,$userid,$h;
if($ir['gender'] == "Male") { $g="Female"; } else { $g="Male"; }
print "Are you sure you want to become a $g?
[url='preferences.php?action=sexchange2']Yes[/url] | [url='preferences.php']No[/url]";
}
function do_sex_change()
{
global $db,$ir,$c,$userid,$h;
if($ir['gender'] == "Male") { $g="Female"; } else { $g="Male"; }
$db->query("UPDATE users SET gender='$g' WHERE userid=$userid");
print "Success, you are now $g!
[url='preferences.php']Back[/url]";
}
function pass_change()
{
global $ir,$c,$userid,$h;
print "<h3>Password Change</h3><form action='preferences.php?action=passchange2' method='post'>Current Password: <input type='password' name='oldpw' />
New Password: <input type='password' name='newpw' />
Confirm: <input type='password' name='newpw2' />
<input type='submit' value='Change PW' /></form>";
}
function do_pass_change()
{
global $db,$ir,$c,$userid,$h;
if(md5($_POST['oldpw']) != $ir['userpass'])
{
print "The current password you entered was wrong.
[url='preferences.php?action=passchange']> Back[/url]";
}
else if($_POST['newpw'] !== $_POST['newpw2'])
{
print "The new passwords you entered did not match!
[url='preferences.php?action=passchange']> Back[/url]";
}
else
{
$db->query("UPDATE users SET userpass=md5('{$_POST['newpw']}') WHERE userid=$userid");
print "Password changed!";
}
}
function name_change()
{
global $ir,$c,$userid,$h;
print "<h3>Name Change</h3>
Please note that you still use the same name to login, this procedure simply changes the name that is displayed. <form action='preferences.php?action=namechange2' method='post'>
New Name: <input type='text' name='newname' />
<input type='submit' value='Change Name' /></form>";
}
function do_name_change()
{
global $db,$ir,$c,$userid,$h;
// Edited by zero-affect
if($_POST['newname'] == "" || $_POST['newname'] == " " || $_POST['newname'] == " " || $_POST['newname'] == " " || $_POST['newname'] == " " || $_POST['newname'] == " " || $_POST['newname'] == " " || $_POST['newname'] == " " || $_POST['newname'] == " " || $_POST['newname'] == " " || $_POST['newname'] == " " || $_POST['newname'] == " " || $_POST['newname'] == " " || $_POST['newname'] == " " || $_POST['newname'] == " " && $_POST['newname'] == " ")
{
$_POST['newname'] = trim($_POST['newname']);
$i = mysql_query("SELECT * FROM users WHERE username='{$_POST['username']}'") or die(mysql_error());
if(mysql_num_rows($i)) { echo 'Username already in use!';$h->endpage(); exit; }
print "You did not enter a new name.
[url='preferences.php?action=name_change']> Back[/url]";
}
else
{
$_POST['newname'] = trim($_POST['newname']);
$_POST['newname']=str_replace(array("<", ">", "\\\'"), array("<", ">", "'"), $_POST['newname']);
$_POST['newname']=str_replace(array("{", "}", "\\\'"), array("<", ">", "'"), $_POST['newname']);
$_POST['newname']=str_replace(array("eval", "alert", "\\\'"), array(".", ".", "."), $_POST['newname']);
$checkun=$db->num_rows($db->query("SELECT * FROM users WHERE username='{$_POST['newname']}' AND userid!=$userid"));
if($checkun)
{
echo "Username is already in use.";
$h->endpage();
exit;
}
$checkln=$db->num_rows($db->query("SELECT * FROM users WHERE login_name='{$_POST['newname']}' AND userid!=$userid"));
if($checkln)
{
echo "Username is already in use.";
$h->endpage();
exit;
}
$db->query("UPDATE users SET username='{$_POST['newname']}' WHERE userid=$userid");
print "Username changed!";
}
}
function pic_change()
{
global $ir,$c,$userid,$h;
print "<h3>Pic Change</h3>
Please note that this must be externally hosted, [url='http://imageshack.us']ImageShack[/url] is our recommendation.
Any images that are not 150x150 will be automatically resized <form action='preferences.php?action=picchange2' method='post'>
New Pic: <input type='text' name='newpic' value='{$ir['display_pic']}' />
<input type='submit' value='Change Name' /></form>";
}
function do_pic_change()
{
global $db,$ir,$c,$userid,$h;
if($_POST['newpic'] == "")
{
print "You did not enter a new pic.
[url='preferences.php?action=picchange']> Back[/url]";
}
else
{
$_POST['newpic']=str_replace('\\\'',''', $_POST['newpic']);
$db->query("UPDATE users SET display_pic='{$_POST['newpic']}' WHERE userid=$userid");
print "Pic changed!";
}
}
function new_propic()
{
global $ir,$c,$userid,$h;
print "<h3>Pic Change</h3>
Please note that this must be externally hosted, [url='http://imageshack.us']ImageShack[/url] is our recommendation.
Any images that are not 150x150 will be automatically resized <form action='preferences.php?action=newpropic2' method='post'>
New Pic: <input type='text' name='newpic1' value='{$ir['profile_pic']}' />
<input type='submit' value='Change profile pic' /></form>";
}
function do_new_propic()
{
global $db,$ir,$c,$userid,$h;
if($_POST['newpic1'] == "")
{
print "You did not enter a new pic.
[url='preferences.php?action=newpropic']> Back[/url]";
}
else
{
$_POST['newpic1']=str_replace('\\\'',''', $_POST['newpic']);
$db->query("UPDATE users SET profile_pic='{$_POST['newpic1']}' WHERE userid=$userid");
print "Pic changed!";
}
}
function forum_change()
{
global $ir,$c,$userid,$h;
print "<h3>Forum Info Change</h3>
Please note that the avatar must be externally hosted, [url='http://imageshack.us']ImageShack[/url] is our recommendation.
Any avatars that are not 100x100 will be automatically resized <form action='preferences.php?action=forumchange2' method='post'>
<table style='border-style:solid;border-width:1px;border-color:#303030;' cellpadding='5'>
<tr>
<td bgcolor='#606060'>Avatar:</td>
<td bgcolor='#404040'><input type='text' name='forums_avatar' value='{$ir['forums_avatar']}' /></td>
</tr>
<tr>
<td bgcolor='#606060'>Signature (you may use BBcode):</td>
<td bgcolor='#404040'><textarea rows=10 cols=50 name='forums_signature'>{$ir['forums_signature']}</textarea></td>
</tr>
<tr colspan='2' bgcolor='#404040'>
<td colspan='2'>
<input type='submit' value='Change Info' /></td>
</tr>
</table></form>";
}
function do_forum_change()
{
global $db,$ir,$c,$userid,$h;
$url=$_POST['forums_avatar'];
if(substr($url, -1)!="g" && substr($url, -1)!="G" && substr($url, -1)!="F" && substr($url, -1)!="f")
{
print"You need to supply a real image.
[url='preferences.php?action=forumchange']> Back[/url]";
include"int2.php";
die("");
}
if (preg_match("/.jpg/", $url) || preg_match("/.php/", $url))
{
}
else if(preg_match("/.jpeg/", $url) || preg_match("/.php/", $url))
{
}
else if(preg_match("/.gif/", $url) || preg_match("/.php/", $url))
{
}
else if(preg_match("/.JPG/", $url) || preg_match("/.php/", $url))
{
}
else if(preg_match("/.JPEG/", $url) || preg_match("/.php/", $url))
{
}
else if(preg_match("/.GIF/", $url) || preg_match("/.php/", $url))
{
}
else if(preg_match("/.PNG/", $url) || preg_match("/.php/", $url))
{
}
else if(preg_match("/.png/", $url) || preg_match("/.php/", $url))
{
}
else
{
print"You need to supply a real image.
[url='preferences.php?action=forumchange']> Back[/url]";
include"int2.php";
die("");
}
$_POST['forums_avatar']=mysql_real_escape_string($_POST['forums_avatar']);
$_POST['forums_signature']=mysql_real_escape_string($_POST['forums_signature']);
mysql_query("UPDATE users SET forums_avatar='{$_POST['forums_avatar']}', forums_signature='{$_POST['forums_signature']}' WHERE userid=$userid");
print "Forum Info changed!";
}
function sm_change()
{
global $ir,$c,$userid,$h;
print "<h3>Status Message Change Change</h3>
Here, you can change your status message that will be shown on your profile. <form action='preferences.php?action=smchange2' method='post'>
Status Message: <input type='text' name='sm' />
<input type='submit' value='Change Status Message' /></form>";
}
function do_sm_change()
{
global $db,$ir,$c,$userid,$h;
if($_POST['sm'] == "")
{
print "You did not enter a new status message.
[url='preferences.php?action=smchange']> Back[/url]";
}
else
{
$_POST['sm']=str_replace(array("<", ">", "\\\'"), array("<", ">", "'"), $_POST['sm']);
$db->query("UPDATE users SET sm='{$_POST['sm']}' WHERE userid=$userid");
print "Status Message Changed!";
}
}
function pdetail_change()
{
global $db,$userid;
echo "<h3>Personal Details Change</h3>";
$pd=$db->query("SELECT * FROM pdetails WHERE userid=$userid");
$p=$db->fetch_row($pd);
echo "<form action='preferences.php?action=pdetailchange2' method='post'>
First Name: <input type='text' name='fistname' value='{$p['first']}' />
Last Name: <input type='text' name='lastname' value='{$p['last']}' />
Age: <input type='text' name='age' value='{$p['age']}' />
Aim Of The Game: <input type='text' name='aog' value='{$p['aog']}' />
Msn: <input type='text' name='msn' value='{$p['msn']}' />
Aim: <input type='text' name='aim' value='{$p['aim']}' />
Aol: <input type='text' name='aol' value='{$p['aol']}' />
Yahoo: <input type='text' name='yahoo' value='{$p['yahoo']}' />
Personal Details: <select name='pdetails' type='dropdown'>
<option value='ON'>On
<option value='OFF'>Off</select>
<input type='submit' value='Update' /></form>";
}
function do_pdetail_change()
{
global $db,$userid;
$pd=$db->query("SELECT * FROM pdetails WHERE userid=$userid");
$p=$db->fetch_row($pd);
$db->query("UPDATE pdetails SET first='{$_POST['fistname']}', last='{$_POST['lastname']}', age='{$_POST['age']}', aog='{$_POST['aog']}', msn='{$_POST['msn']}', aim='{$_POST['aim']}', aol='{$_POST['aol']}', yahoo='{$_POST['yahoo']}', personal='{$_POST['pdetails']}' WHERE userid=$userid");
echo "Personal Details Changed!";
}
$h->endpage();
?>
