Name bug

Feky · June 30, 2009

Re: Name bug

works now

AlabamaHit · June 30, 2009

Re: Name bug

Just add

$_POST['NewName'] = trim($_POST['NewName']);

after

if (isset($_POST['NewName'])) {

Feky · June 30, 2009

Re: Name bug

Just add

$_POST['NewName'] = trim($_POST['NewName']);

after

if (isset($_POST['NewName'])) {

thanks mate it work now +4 for you but +1 when ever i am on

AlabamaHit · July 1, 2009

Re: Name bug

No need to +1 me, lol. I just said how to apply what Haunted Dawg was trying to get you to do :-D

Feky · July 1, 2009

Re: Name bug

yea i plus+ you and hound dawg lol

Zero-Affect · July 12, 2009

Re: Name bug

wasn't this guys issue about people doing the same name has overs?

simply in name change check all username, login_name against the new name if they are active then error text... so simple a child could do it

Strats · July 12, 2009

Re: Name bug

I have changed mine about a bit.

Can someone tell me where it should be on mine.

I have tested All these ideas out and they don't work for me.

Here's my pref :

<?php
include "globals.php";
switch($_GET['action'])
{
case 'sexchange2':
do_sex_change();
break;

case 'sexchange':
conf_sex_change();
break;

case 'passchange2':
do_pass_change();
break;

case 'passchange':
pass_change();
break;

case 'namechange2':
do_name_change();
break;

case 'namechange':
name_change();
break;


case 'picchange2':
do_pic_change();
break;

case 'picchange':
pic_change();
break;

case 'forumchange2':
do_forum_change();
break;

case 'forumchange':
forum_change();
break;

default:
prefs_home();
break;
}
function prefs_home()
{
global $db,$ir,$c,$userid,$h;
print "<h3>Preferences</h3>
[url='preferences.php?action=sexchange']Sex Change[/url]

[url='preferences.php?action=passchange']Password Change[/url]

[url='preferences.php?action=namechange']Name Change[/url]

[url='preferences.php?action=picchange']Display Pic Change[/url]

[url='preferences.php?action=forumchange']Forum Info Change[/url]
";
}
function conf_sex_change()
{
global $ir,$c,$userid,$h;
if($ir['gender'] == "Male") { $g="Female"; } else { $g="Male"; }
print "Are you sure you want to become a $g?

[url='preferences.php?action=sexchange2']Yes[/url] | [url='preferences.php']No[/url]";
}
function do_sex_change()
{
global $db,$ir,$c,$userid,$h;
if($ir['gender'] == "Male") { $g="Female"; } else { $g="Male"; }
$db->query("UPDATE users SET gender='$g' WHERE userid=$userid");
print "Success, you are now $g!

[url='preferences.php']Back[/url]";
}
function pass_change()
{
global $ir,$c,$userid,$h;
print "<h3>Password Change</h3><form action='preferences.php?action=passchange2' method='post'>Current Password: <input type='password' name='oldpw' />

New Password: <input type='password' name='newpw' />

Confirm: <input type='password' name='newpw2' />

<input type='submit' value='Change PW' /></form>";
}
function do_pass_change()
{
global $db,$ir,$c,$userid,$h;
if(md5($_POST['oldpw']) != $ir['userpass'])
{
print "The current password you entered was wrong.

[url='preferences.php?action=passchange']> Back[/url]";
}
else if($_POST['newpw'] !== $_POST['newpw2'])
{
print "The new passwords you entered did not match!

[url='preferences.php?action=passchange']> Back[/url]";
}
else
{
$db->query("UPDATE users SET userpass=md5('{$_POST['newpw']}') WHERE userid=$userid");
print "Password changed!";
}
}
function name_change()
{
global $ir,$c,$userid,$h;
print "<h3>Name Change</h3>
Please note that you still use the same name to login, this procedure simply changes the name that is displayed. <form action='preferences.php?action=namechange2' method='post'>
New Name: <input type='text' name='newname' />

<input type='submit' value='Change Name' /></form>";
}
function do_name_change()
{
global $db,$ir,$c,$userid,$h;
if($_POST['newname'] == "")
{
print "You did not enter a new name.

[url='preferences.php?action=namechange']> Back[/url]";
}
else
{
$_POST['newname']=str_replace(array("<", ">", "\\\'"), array("<", ">", "'"), $_POST['newname']);
$db->query("UPDATE users SET username='{$_POST['newname']}' WHERE userid=$userid");
print "Username changed!";
}
}
function pic_change()
{
global $ir,$c,$userid,$h;
print "<h3>Pic Change</h3>
Please note that this must be externally hosted, [url='http://imageshack.us']ImageShack[/url] is our recommendation.

Any images that are not 150x150 will be automatically resized <form action='preferences.php?action=picchange2' method='post'>
New Pic: <input type='text' name='newpic' value='{$ir['display_pic']}' />

<input type='submit' value='Change Name' /></form>";
}
function do_pic_change()
{
global $db,$ir,$c,$userid,$h;
if($_POST['newpic'] == "")
{
print "You did not enter a new pic.

[url='preferences.php?action=picchange']> Back[/url]";
}
else
{
$_POST['newpic']=str_replace('\\\'',''', $_POST['newpic']);
$db->query("UPDATE users SET display_pic='{$_POST['newpic']}' WHERE userid=$userid");
print "Pic changed!";
}
}
function forum_change()
{
global $ir,$c,$userid,$h;
print "<h3>Forum Info Change</h3>
Please note that the avatar must be externally hosted, [url='http://imageshack.us']ImageShack[/url] is our recommendation.

Any avatars that are not 100x100 will be automatically resized <form action='preferences.php?action=forumchange2' method='post'>

<table style='border-style:solid;border-width:1px;border-color:#303030;' cellpadding='5'>
<tr>
<td bgcolor='#606060'>Avatar:</td>
<td bgcolor='#404040'><input type='text' name='forums_avatar' value='{$ir['forums_avatar']}' /></td>
</tr>
<tr>
<td bgcolor='#606060'>Signature (you may use BBcode):</td>
<td bgcolor='#404040'><textarea rows=10 cols=50 name='forums_signature'>{$ir['forums_signature']}</textarea></td>
</tr>
<tr colspan='2' bgcolor='#404040'>
<td colspan='2'>
<input type='submit' value='Change Info' /></td>
</tr>
</table></form>";
}
function do_forum_change()
{
global $db,$ir,$c,$userid,$h;
$url=$_POST['forums_avatar'];
if(substr($url, -1)!="g" && substr($url, -1)!="G" && substr($url, -1)!="F" && substr($url, -1)!="f")
{
print"You need to supply a real image.
[url='preferences.php?action=forumchange']> Back[/url]";
include"int2.php";
die("");
}
if (preg_match("/.jpg/", $url) || preg_match("/.php/", $url))
{
}
else if(preg_match("/.jpeg/", $url) || preg_match("/.php/", $url))
{
}
else if(preg_match("/.gif/", $url) || preg_match("/.php/", $url))
{
}
else if(preg_match("/.JPG/", $url) || preg_match("/.php/", $url))
{
}
else if(preg_match("/.JPEG/", $url) || preg_match("/.php/", $url))
{
}
else if(preg_match("/.GIF/", $url) || preg_match("/.php/", $url))
{
}
else if(preg_match("/.PNG/", $url) || preg_match("/.php/", $url))
{
}
else if(preg_match("/.png/", $url) || preg_match("/.php/", $url))
{
}
else
{
print"You need to supply a real image.
[url='preferences.php?action=forumchange']> Back[/url]";
include"int2.php";
die("");
}
$_POST['forums_avatar']=mysql_real_escape_string($_POST['forums_avatar']);
$_POST['forums_signature']=mysql_real_escape_string($_POST['forums_signature']);
mysql_query("UPDATE users SET forums_avatar='{$_POST['forums_avatar']}', forums_signature='{$_POST['forums_signature']}' WHERE userid=$userid");
print "Forum Info changed!";
}
$h->endpage();
?>

Voice4Vision · July 12, 2009

Re: Name bug

Strats

Use this

function do_name_change()
{
global $db,$ir,$c,$userid,$h;
// Edited by zero-affect
if($_POST['newname'] == "" || $_POST['newname'] == " " || $_POST['newname'] == "  " || $_POST['newname'] == "  " || $_POST['newname'] == "   " || $_POST['newname'] == "   " || $_POST['newname'] == "   " || $_POST['newname'] == "   " || $_POST['newname'] == "   " || $_POST['newname'] == "   " || $_POST['newname'] == "    " || $_POST['newname'] == "     " || $_POST['newname'] == "     " || $_POST['newname'] == "     " || $_POST['newname'] == "     " && $_POST['newname'] == "      ")
{
	$_POST['newname'] = trim($_POST['newname']);
	$i = mysql_query("SELECT * FROM users WHERE username='{$_POST['username']}'") or die(mysql_error());
	if(mysql_num_rows($i)) {echo 'Username already in use!';$h->endpage(); exit; }
	print "You did not enter a new name.

			[url='preferences.php?action=name_change']> Back[/url]";
}
else
{
	$_POST['newname'] = trim($_POST['newname']);
	$_POST['newname']=str_replace(array("<", ">", "\\\'"), array("<", ">", "'"), $_POST['newname']);
	$_POST['newname']=str_replace(array("{", "}", "\\\'"), array("<", ">", "'"), $_POST['newname']);
	$_POST['newname']=str_replace(array("eval", "alert", "\\\'"), array(".", ".", "."), $_POST['newname']);
	$checkun=$db->num_rows($db->query("SELECT * FROM users WHERE username='{$_POST['newname']}' AND userid!=$userid"));
	if($checkun)
	{
		echo "Username is already in use.";
		$h->endpage();
		exit;
	}
	$checkln=$db->num_rows($db->query("SELECT * FROM users WHERE login_name='{$_POST['newname']}' AND userid!=$userid"));
	if($checkln)
	{
		echo "Username is already in use.";
		$h->endpage();
		exit;
	}
	$db->query("UPDATE users SET username='{$_POST['newname']}' WHERE userid=$userid");
	print "Username changed!";
}
}

AlabamaHit · July 12, 2009

Re: Name bug

just add

$_POST['newname'] = trim($_POST['newname']);

above

if($_POST['newname'] == "")

{

print "You did not enter a new name.

> Back";

}

Strats · July 12, 2009

Re: Name bug

Voice4Vision's code worked great.

I had already put it in before you posted that.

CrazyT · July 13, 2009

Re: Name bug

Meh, no need for all that code -.- just filter out the space(s)

Sign In

Name bug

Recommended Posts

Feky

AlabamaHit

Feky

AlabamaHit

Feky

Zero-Affect

Strats

Voice4Vision

AlabamaHit

Strats

CrazyT

Join the conversation

Browse

Activity

Hosting