<?php



/*-------------------------------------------------------+

| PHP-Fusion Security Edition Content Management System

| Copyright (C) 2002 - 2008 Nick Jones & Brandon Davis

| http://www.php-fusion.co.uk/ & http://www.phpfusionsecurity.com/

+--------------------------------------------------------+

| Filename: edit_profile.php

| Author: Nick Jones (Digitanium)

| MODDED BY NETRIX PHPFUSION-MODS.NET

| About Modification: Allow member's to delete there account

|                     without requiring administrative rules.                   

+--------------------------------------------------------+

| This program is released as free software under the

| Affero GPL license. You can redistribute it and/or

| modify it under the terms of this license which you

| can read by viewing the included agpl.txt or online

| at www.gnu.org/licenses/agpl.html. Removal of this

| copyright header is strictly prohibited without

| written permission from the original author(s).

+--------------------------------------------------------*/

require_once "maincore.php";

require_once THEMES . "templates/header.php";

include LOCALE . LOCALESET . "edit_profile.php";

include LOCALE . LOCALESET . "user_fields.php";



if (!iMEMBER)

{

    redirect("index.php");

}



$user_data = $userdata;



if (isset($_POST['update_profile']))

{

    require_once INCLUDES . "update_profile_include.php";

}



require_once INCLUDES . "bbcode_include.php";

opentable($locale['400']);

$offset_list = "";

for ($i = -13; $i < 17; $i++)

{

    if ($i > 0)

    {

        $offset = "+" . $i;

    } else

    {

        $offset = $i;

    }

    $offset_list .= "<option" . ($offset == $user_data['user_offset'] ?

        " selected='selected'" : "") . ">" . $offset . "</option>\n";

}

echo "<form name='inputform' method='post' action='" . FUSION_SELF .

    "' enctype='multipart/form-data'>\n";

echo "<table cellpadding='0' cellspacing='0' class='center'>\n";

if (isset($_GET['update_profile']))

{

    echo "<tr>\n<td align='center' colspan='2' class='tbl'>" . $locale['411'] .

        "<br /><br />\n</td>\n</tr>\n";

    echo "<tr>\n<td align='center' colspan='2' class='tbl'>";

    echo '<center><script type="text/javascript"><!--

google_ad_client = "pub-7277300469198625";

/* 468x60, created 6/25/09 */

google_ad_slot = "7885283957";

google_ad_width = 500;

google_ad_height = 60;

//-->

</script>

<script type="text/javascript"

src="http://pagead2.googlesyndication.com/pagead/show_ads.js">

</script></center><br/>';

    echo "<br />\n</td>\n</tr>\n";

} elseif (!isset($_POST['update_profile']))

{

    echo "<tr>\n<td align='center' colspan='2' class='tbl'>" . $locale['410'] .

        "<br /><br />\n</td>\n</tr>\n";

}

echo "<tr>\n<td class='tbl'>" . $locale['u001'] .

    ":<span style='color:#ff0000'>*</span></td>\n";

echo "<td class='tbl'><input type='text' readonly name='user_name' value='" . $user_data['user_name'] .

    "' maxlength='30' class='textbox' style='width:200px;' /> <br><br><a href='edit_profile.php?delete' onclick='return DeleteMember();'>Account L&ouml;schen</a></td>\n";

echo "</tr>\n<tr>\n";

echo "<td class='tbl'>" . $locale['420'] . ":</td>\n";

echo "<td class='tbl'><input type='password' name='user_password' maxlength='20' class='textbox' style='width:200px;' /></td>\n";

echo "</tr>\n<tr>\n";

echo "<td class='tbl'>" . $locale['u003'] . ":</td>\n";

echo "<td class='tbl'><input type='password' name='user_new_password' maxlength='20' class='textbox' style='width:200px;' /></td>\n";

echo "</tr>\n<tr>\n";

echo "<td class='tbl'>" . $locale['u004'] . ":</td>\n";

echo "<td class='tbl'><input type='password' name='user_new_password2' maxlength='20' class='textbox' style='width:200px;' /></td>\n";

echo "</tr>\n<tr>\n";

if (iADMIN)

{

    if ($user_data['user_admin_password'])

    {

        echo "<td class='tbl2'>" . $locale['421'] . ":</td>\n";

        echo "<td class='tbl2'><input type='password' name='user_admin_password' maxlength='20' class='textbox' style='width:200px;' /></td>\n";

        echo "</tr>\n<tr>\n";

    }

    echo "<td class='tbl2'>" . $locale['422'] . ":</td>\n";

    echo "<td class='tbl2'><input type='password' name='user_new_admin_password' maxlength='20' class='textbox' style='width:200px;' /></td>\n";

    echo "</tr>\n<tr>\n";

    echo "<td class='tbl2'>" . $locale['423'] . ":</td>\n";

    echo "<td class='tbl2'><input type='password' name='user_new_admin_password2' maxlength='20' class='textbox' style='width:200px;' /></td>\n";

    echo "</tr>\n<tr>\n";

}

echo "<td class='tbl'>" . $locale['u005'] .

    ":<span style='color:#ff0000'>*</span></td>\n";

echo "<td class='tbl'><input type='text' name='user_email' value='" . $user_data['user_email'] .

    "' maxlength='100' class='textbox' style='width:200px;' /></td>\n";

echo "</tr>\n<tr>\n";

echo "<td class='tbl'>" . $locale['u006'] . ":</td>\n";

echo "<td class='tbl'><label><input type='radio' name='user_hide_email' value='1'" . ($user_data['user_hide_email'] ==

    "1" ? " checked='checked'" : "") . " />" . $locale['u007'] . "</label> ";

echo "<label><input type='radio' name='user_hide_email' value='0'" . ($user_data['user_hide_email'] ==

    "0" ? " checked='checked'" : "") . " />" . $locale['u008'] . "</label></td>\n";

echo "</tr>\n";



if (!$user_data['user_avatar'])

{

    echo "<tr>\n";

    echo "<td valign='top' class='tbl'>" . $locale['u010'] . ":</td>\n";

    echo "<td class='tbl'><input type='file' name='user_avatar' class='textbox' style='width:200px;' /><br />\n";

    echo "<span class='small2'>" . $locale['u011'] . "</span><br />\n";

    echo "<span class='small2'>" . sprintf($locale['u012'], parsebytesize(30720),

        100, 100) . "</span></td>\n";

    echo "</tr>\n";

} else

{

    echo "<tr>\n";

    echo "<td valign='top' class='tbl'>" . $locale['u010'] . ":</td>\n";

    echo "<td class='tbl'><img src='" . IMAGES . "avatars/" . $user_data['user_avatar'] .

        "' alt='" . $locale['u010'] . "' /><br />\n";

    echo "<input type='checkbox' name='del_avatar' value='y' /> " . $locale['u013'] .

        "\n";

    echo "<input type='hidden' name='user_avatar' value='" . $user_data['user_avatar'] .

        "' /></td>\n";

    echo "</tr>\n";

}



$profile_method = "input";

$result2 = dbquery("SELECT * FROM " . DB_USER_FIELDS .

    " WHERE field_group != '4' GROUP BY field_group");

while ($data2 = dbarray($result2))

{

    $result3 = dbquery("SELECT * FROM " . DB_USER_FIELDS . " WHERE field_group='" .

        $data2['field_group'] . "' ORDER BY field_order");

    if (dbrows($result3))

    {

        echo "<tr>\n<td class='tbl2'></td>\n";

        echo "<td class='tbl2'><strong>";

        if ($data2['field_group'] == 1)

        {

            echo $locale['u044'];

        } elseif ($data2['field_group'] == 2)

        {

            echo $locale['u045'];

        } elseif ($data2['field_group'] == 3)

        {

            echo $locale['u046'];

        }

        echo "</strong></td>\n</tr>\n";

        while ($data3 = dbarray($result3))

        {

            if (file_exists(LOCALE . LOCALESET . "user_fields/" . $data3['field_name'] .

                ".php"))

            {

                include LOCALE . LOCALESET . "user_fields/" . $data3['field_name'] . ".php";

            }

            if (file_exists(INCLUDES . "user_fields/" . $data3['field_name'] .

                "_include.php"))

            {

                include INCLUDES . "user_fields/" . $data3['field_name'] . "_include.php";

            }

        }

    }

}



echo "<tr>\n<td align='center' colspan='2' class='tbl'><br />\n";

echo "<input type='hidden' name='user_hash' value='" . $user_data['user_password'] .

    "' />\n";

echo "<input type='submit' name='update_profile' value='" . $locale['424'] .

    "' class='button' /></td>\n";

echo "</tr>\n</table>\n</form>\n";

closetable();



if (isset($_GET["delete"]))

{

    $udata = dbarray(dbquery("SELECT * FROM " . DB_USERS . " WHERE user_id='" . $userdata['user_id'] .

        "'"));

    if ($udata['user_level'] < 102)

    {

        $result = dbquery("DELETE FROM " . DB_USERS . " WHERE user_id='" . $userdata['user_id'] .

            "'");

        $result = dbquery("DELETE FROM " . DB_ARTICLES . " WHERE article_name='" . $userdata['user_id'] .

            "'");

        $result = dbquery("DELETE FROM " . DB_COMMENTS . " WHERE comment_name='" . $userdata['user_id'] .

            "'");

        $result = dbquery("DELETE FROM " . DB_MESSAGES . " WHERE message_to='" . $userdata['user_id'] .

            "' OR message_from='" . $userdata['user_id'] . "'");

        $result = dbquery("DELETE FROM " . DB_NEWS . " WHERE news_name='" . $userdata['user_id'] .

            "'");

        $result = dbquery("DELETE FROM " . DB_POLL_VOTES . " WHERE vote_user='" . $userdata['user_id'] .

            "'");

        $result = dbquery("DELETE FROM " . DB_RATINGS . " WHERE rating_user='" . $userdata['user_id'] .

            "'");

        $result = dbquery("DELETE FROM " . DB_SHOUTBOX . " WHERE shout_name='" . $userdata['user_id'] .

            "'");

        $result = dbquery("DELETE FROM " . DB_THREADS . " WHERE thread_author='" . $userdata['user_id'] .

            "'");

        $result = dbquery("DELETE FROM " . DB_POSTS . " WHERE post_author='" . $userdata['user_id'] .

            "'");

        $result = dbquery("DELETE FROM " . DB_THREAD_NOTIFY . " WHERE notify_user='" . $userdata['user_id'] .

            "'");

    }

    redirect("index.php");

}

echo "<script type='text/javascript'>" . "\n" .

    "function DeleteMember(username) {\n";

echo "return confirm('Sind Sie sicher das der Account geloescht werden soll ?');\n}\n</script>\n";

require_once THEMES . "templates/footer.php";



?>