function changeProfile() {
global $dblink,$siteConfig,$user;
if (isset($_POST['chg'])) { $chg = inCode($_POST['chg']); } else { $chg = false; }
if (isset($_POST['chg_email'])) { $chg_email = inCode($_POST['chg_email']); } else { $chg_email = ""; }
if (isset($_POST['chg_sito'])) { $chg_sito = inCode($_POST['chg_sito']); } else { $chg_sito = ""; }
if (isset($_POST['chg_icq'])) { $chg_icq = inCode($_POST['chg_icq']); } else { $chg_icq = ""; }
if (isset($_POST['chg_msn'])) { $chg_msn = inCode($_POST['chg_msn']); } else { $chg_msn = ""; }
if (isset($_POST['chg_aol'])) { $chg_aol = inCode($_POST['chg_aol']); } else { $chg_aol = ""; }
if (isset($_POST['chg_yahoo'])) { $chg_yahoo = inCode($_POST['chg_yahoo']); } else { $chg_yahoo = ""; }
if (isset($_POST['chg_notify_pvtmsg'])) { $chg_notify_pvtmsg = intval($_POST['chg_notify_pvtmsg']); } else { $chg_notify_pvtmsg = 0; }
if (isset($_POST['chg_notify_forum'])) { $chg_notify_forum = intval($_POST['chg_notify_forum']); } else { $chg_notify_forum = 0; }
if (isset($_POST['chg_avatar'])) { $chg_avatar = inCode($_POST['chg_avatar']); } else { $chg_avatar = ""; }
if (isset($_POST['chg_gender'])) { $chg_gender = inCode($_POST['chg_gender']); } else { $chg_gender = ""; }
if (isset($_POST['chg_signature'])) { $chg_signature = inCode($_POST['chg_signature']); } else { $chg_signature = ""; }
if (isset($_POST['chg_pass0'])) { $chg_pass0 = inCode($_POST['chg_pass0']); } else { $chg_pass0 = ""; }
if (isset($_POST['chg_pass'])) { $chg_pass = inCode($_POST['chg_pass']); } else { $chg_pass = ""; }
if (isset($_POST['chg_pass2'])) { $chg_pass2 = inCode($_POST['chg_pass2']); } else { $chg_pass2 = ""; }
$feedurl = (isset($_POST['feedurl'])) ? inCode($_POST['feedurl']) : "" ;
if (!$chg) {
if (isUser($user)) {
$row_info = $dblink->get_row("SELECT * FROM memht_utenti WHERE user='$user'");
$pass = $row_info['pass'];
$email = outCode($row_info['email']);
$sito = outCode($row_info['sito']);
$icq = outCode($row_info['icq']);
$msn = outCode($row_info['msn']);
$aol = outCode($row_info['aol']);
$yahoo = outCode($row_info['yahoo']);
$notify_pvtmsg = intval($row_info['notify_pvtmsg']);
$notify_forum = intval($row_info['notify_forum']);
$avatar = outCode($row_info['avatar']);
$gender = intval($row_info['gender']);
$signature = outCode($row_info['signature']);
$showsignature = censure(bb2html(outCode($row_info['signature'],0)));
$feedurl = outCode($row_info['feed']);
if (($avatar=="blank.png") OR ($avatar=="")) {
$check_avatar="";
$show_image="images/avatar/blank.png";
}else{
$check_avatar=$avatar;
$show_image=$avatar;
}
openTable(_MODIFYPROFILE_);
echo "<table width='100%' border='0' cellspacing='0' cellpadding='2'>\n";
echo "<form name='form' method='post' action='index.php?page=users&op=editProfile'>\n";
echo "<tr><th>"._USERNAME_.":</th><td><b>$user</b></td></tr>\n";
echo "<tr><th class='std_hlight'>"._EMAIL_.":</th><td class='std_hlight'><input type='text' name='chg_email' value="$email" size='30' maxlength='255'></td></tr>\n";
echo "<tr><th>"._SITE_.":</th><td><input type='text' name='chg_sito' value="$sito" size='30' maxlength='255'></td></tr>\n";
echo "<tr><th class='std_hlight'>"._ICQ_.":</th><td class='std_hlight'><input type='text' name='chg_icq' value="$icq" size='30' maxlength='255'></td></tr>\n";
echo "<tr><th>"._MSN_.":</th><td><input type='text' name='chg_msn' value="$msn" size='30' maxlength='255'></td></tr>\n";
echo "<tr><th class='std_hlight'>"._AOL_.":</th><td class='std_hlight'><input type='text' name='chg_aol' value="$aol" size='30' maxlength='255'></td></tr>\n";
echo "<tr><th>"._YAHOO_.":</th><td><input type='text' name='chg_yahoo' value="$yahoo" size='30' maxlength='255'></td></tr>\n";
echo "<tr><td class='std_hlight' nowrap><b>"._NOTIFICATION_."</b> ("._MESSAGES_.")<b>:</b><div class='info'>"._ALWAYS_."</div></td><td class='std_hlight'>";
echo "<select name='chg_notify_pvtmsg'>";
if ($notify_pvtmsg==1) {
echo "<option value='1' selected>"._YES_."</option>\n";
echo "<option value='0'>"._NO_."</option>\n";
} else {
echo "<option value='1'>"._YES_."</option>\n";
echo "<option value='0' selected>"._NO_."</option>\n";
}
echo "</select>";
echo "</td></tr>\n";
echo "<tr><td nowrap><b>"._NOTIFICATION_."</b> ("._FORUM_.")<b>:</b><div class='info'>"._ALWAYS_."</div></td><td>";
echo "<select name='chg_notify_forum'>";
if ($notify_forum==1) {
echo "<option value='1' selected>"._YES_."</option>\n";
echo "<option value='0'>"._NO_."</option>\n";
} else {
echo "<option value='1'>"._YES_."</option>\n";
echo "<option value='0' selected>"._NO_."</option>\n";
}
echo "</select>";
echo "</td></tr>\n";
echo "<tr><th class='std_hlight' valign='top'>"._AVATAR_.":</th><td class='std_hlight'><img name='chgavapro' src='$show_image' border='0' title='$user'>";
echo "<div style='padding:2px 0 0 0;'><input type='text' name='chg_avatar' value="$check_avatar" size='30' maxlength='255'></div>";
echo "</td></tr>\n";
echo "<tr><th>"._GENDER_.":</th><td>";
echo "<select name='chg_gender'>\n";
if ($gender==0) {
echo "<option value='0' selected>"._NEUTRAL_."</option>\n";
echo "<option value='1'>"._MALE_."</option>\n";
echo "<option value='2'>"._FEMALE_."</option>\n";
} else if ($gender==1) {
echo "<option value='0'>"._NEUTRAL_."</option>\n";
echo "<option value='1' selected>"._MALE_."</option>\n";
echo "<option value='2'>"._FEMALE_."</option>\n";
} else {
echo "<option value='0'>"._NEUTRAL_."</option>\n";
echo "<option value='1'>"._MALE_."</option>\n";
echo "<option value='2' selected>"._FEMALE_."</option>\n";
}
echo "</select>\n";
echo "</td></tr>\n";
echo "<tr><td class='std_hlight'><b>"._RSS_FEEDS_.":</b></td><td class='std_hlight'><select name='feedurl'>";
$result = $dblink->get_list("SELECT title,link FROM memht_rssreader_links ORDER BY title");
foreach ($result as $row) {
$title = outCode($row['title']);
$link = outCode($row['link']);
$selected = ($feedurl==$link) ? " selected" : "" ;
echo "<option value="$link"$selected>$title</option>\n";
}
echo "</select></td></tr>\n";
echo "<tr><td valign='top' colspan='2'><b>"._SIGNATURE_.":</b><br><br>";
if ($showsignature!="") { echo "<div class='box' style='overflow:auto;'>$showsignature</div><br>"; }
bbcodeToolbar("form","chg_signature","public");
echo "<br>";
textarea("chg_signature","100%","100px",0,"",$signature);
echo "</td></tr>\n";
echo "<tr><td colspan='2' class='small'>"._COMPILEONLYIFCHANGEPASS_.":</td></tr>\n";
echo "<tr><th class='std_hlight'>"._ACTUALPASSWORD_.":</th><td class='std_hlight'><input type='password' name='chg_pass0' size='20' maxlength='50'></td></tr>\n";
echo "<tr><th>"._PASSWORD_.":</th><td><input type='password' name='chg_pass' size='20' maxlength='50'></td></tr>\n";
echo "<tr><th class='std_hlight'>"._REPASSWORD_.":</th><td class='std_hlight'><input type='password' name='chg_pass2' size='20' maxlength='50'></td></tr>\n";
echo "<input type='hidden' name='chg' value='true'>";
echo "<tr><td colspan='2' align='center'><input type='submit' name='Submit' value='"._MODIFY_."'></td></tr>\n";
echo "</form>\n";
echo "</table>";
closeTable();
} else {
openTable();
echo "<div align='center' id='errorText'><b>"._ACCESSDENIED_."</b></div>";
closeTable();
}
} else {
if (isUser($user)) {
$change = true;
if ($chg_sito!="" AND !validate($chg_sito,"^[http://]*[a-zA-Z0-9~._-]*.[a-zA-Z0-9~._-]*.[A-Za-z]{2,4}/?$")) { $change = false; $msg = "<b>"._FIELDINVALID_."</b>: "._SITE_; }
if ($chg_icq!="" AND !validate($chg_icq,"^[0-9]*$")) { $change = false; $msg = "<b>"._FIELDINVALID_."</b>: "._ICQ_; }
if ($chg_msn!="" AND !validEmail($chg_msn)) { $change = false; $msg = "<b>"._FIELDINVALID_."</b>: "._MSN_; }
if ($chg_aol!="" AND !validEmail($chg_aol)) { $change = false; $msg = "<b>"._FIELDINVALID_."</b>: "._AOL_; }
if ($chg_yahoo!="" AND !validEmail($chg_yahoo)) { $change = false; $msg = "<b>"._FIELDINVALID_."</b>: "._YAHOO_; }
if (!validEmail($chg_email)) { $change = false; $msg = _MAILNOTVALID_; }
$row_info = $dblink->get_row("SELECT pass FROM memht_utenti WHERE user='$user'");
$old_pass = $row_info['pass'];
if ($chg_pass!="" AND $chg_pass2!="") {
if (validPass($chg_pass) && md5($chg_pass0)==$old_pass && $chg_pass==$chg_pass2) {
$passquery = ",pass='".md5($chg_pass)."'";
} else {
$change = false;
$msg = _PASSNOTVALID_;
}
} else { $passquery = ""; }
if ($change) {
$dblink->query("UPDATE memht_utenti SET email='$chg_email',sito='$chg_sito',icq='$chg_icq',msn='$chg_msn',aol='$chg_aol',yahoo='$chg_yahoo',avatar='$chg_avatar',gender='$chg_gender',signature='$chg_signature',feed='$feedurl',notify_pvtmsg='$chg_notify_pvtmsg',notify_forum='$chg_notify_forum'".$passquery." WHERE user='$user'");
echo "<meta http-equiv='refresh' content='0;URL=".$siteConfig['site_url']."/index.php?page=users'>";
} else {
openTable();
echo "<div align='center' id='errorText'>$msg</div>";
closeTable();
}
} else {
openTable();
echo "<div align='center' id='errorText'><b>"._ACCESSDENIED_."</b></div>";
closeTable();
}
}
}
| 
