profile.php

在综合英文版XOOPS 2.09, 2.091, 2.092 的基础上正式发布XOOPS 2.09中文版 XOOPS 2.09x 版主要是PHP5升级、bug修正和安全补正： 1 全面兼容PHP 5.

<?php
$title = "个人资料";
/* <Profile | My Profile> */

function add_magic_quotes($array) {
	foreach ($array as $k => $v) {
		if (is_array($v)) {
			$array[$k] = add_magic_quotes($v);
		} else {
			$array[$k] = addslashes($v);
		}
	}
	return $array;
}

if (!get_magic_quotes_gpc()) {
	$_GET    = add_magic_quotes($_GET);
	$_POST   = add_magic_quotes($_POST);
	$_COOKIE = add_magic_quotes($_COOKIE);
}

$wpvarstoreset = array('action','standalone','redirect','profile','user');
for ($i=0; $i<count($wpvarstoreset); $i += 1) {
	$wpvar = $wpvarstoreset[$i];
	if (!isset($$wpvar)) {
		if (empty($_POST["$wpvar"])) {
			if (empty($_GET["$wpvar"])) {
				$$wpvar = '';
			} else {
				$$wpvar = $_GET["$wpvar"];
			}
		} else {
			$$wpvar = $_POST["$wpvar"];
		}
	}
}

require_once('../wp-config.php');
require_once(ABSPATH.'/wp-admin/auth.php');
switch($action) {

case 'update':

	get_currentuserinfo();
	wp_refcheck("/wp-admin");

	/* checking the nickname has been typed */
	if (empty($_POST["newuser_nickname"])) {
		die (_LANG_WPF_ERR_NICKNAME);
		return false;
	}

	/* if the ICQ UIN has been entered, check to see if it has only numbers */
	if (!empty($_POST["newuser_icq"])) {
		if ((ereg("^[0-9]+$",$_POST["newuser_icq"]))==false) {
			die (_LANG_WPF_ERR_ICQUIN);
			return false;
		}
	}

	/* checking e-mail address */
	if (empty($_POST["newuser_email"])) {
		die (_LANG_WPF_ERR_TYPEMAIL);
		return false;
	} else if (!is_email($_POST["newuser_email"])) {
		die (_LANG_WPF_ERR_CORRECT);
		return false;
	}

	if ($_POST["pass1"] == "") {
		if ($_POST["pass2"] != "")
			die (_LANG_WPF_ERR_TYPETWICE);
		$updatepassword = "";
	} else {
		if ($_POST["pass2"] == "")
			die (_LANG_WPF_ERR_TYPETWICE);
		if ($_POST["pass1"] != $_POST["pass2"])
			die (_LANG_WPF_ERR_DIFFERENT);
		$newuser_pass = $_POST["pass1"];
		$updatepassword = "user_pass='$newuser_pass', ";
		setcookie("wordpresspass_".$cookiehash,md5($newuser_pass),time()[phone]);
	}

	$newuser_firstname=addslashes(stripslashes($_POST['newuser_firstname']));
	$newuser_lastname=addslashes(stripslashes($_POST['newuser_lastname']));
	$newuser_nickname=addslashes(stripslashes($_POST['newuser_nickname']));
	$newuser_icq=addslashes(stripslashes($_POST['newuser_icq']));
	$newuser_aim=addslashes(stripslashes($_POST['newuser_aim']));
	$newuser_msn=addslashes(stripslashes($_POST['newuser_msn']));
	$newuser_yim=addslashes(stripslashes($_POST['newuser_yim']));
	$newuser_email=addslashes(stripslashes($_POST['newuser_email']));
	$newuser_url=addslashes(stripslashes($_POST['newuser_url']));
	$newuser_idmode=addslashes(stripslashes($_POST['newuser_idmode']));
	$user_description = addslashes(stripslashes($_POST['user_description']));

	$query = "UPDATE {$wpdb->users} SET user_firstname='$newuser_firstname', $updatepassword user_lastname='$newuser_lastname', user_nickname='$newuser_nickname', user_icq='$newuser_icq', user_email='$newuser_email', user_url='$newuser_url', user_aim='$newuser_aim', user_msn='$newuser_msn', user_yim='$newuser_yim', user_idmode='$newuser_idmode', user_description = '$user_description' WHERE ID = $user_ID";
	$result = $wpdb->query($query);
	if (!$result) {
		die (_LANG_WPF_ERR_PROFILE);
	}
	header('Location: profile.php?updated=true');
break;

case 'viewprofile':


	$profiledata = get_userdata($user);
	if ($_COOKIE['wordpressuser_'.$cookiehash] == $profiledata->user_login)
		header ('Location: profile.php');

	include_once('admin-header.php');
	?>

<h2><?php echo _LANG_WPF_SUBT_VIEW; ?> &#8220;
  <?php
	switch($profiledata->user_idmode) {
		case 'nickname':
			$r = $profiledata->user_nickname;
			break;
		case 'login':
			$r = $profiledata->user_login;
			break;
		case 'firstname':
			$r = $profiledata->user_firstname;
			break;
		case 'lastname':
			$r = $profiledata->user_lastname;
			break;
		case 'namefl':
			$r = $profiledata->user_firstname.' '.$profiledata->user_lastname;
			break;
 		case 'namelf':
			$r = $profiledata->user_lastname.' '.$profiledata->user_firstname;
			break;
	}
	echo $r;
	?>
  &#8221;</h2>

  <div id="profile">
<p>
  <strong>Login</strong> <?php echo $profiledata->user_login ?>
  | <strong>User #</strong> <?php echo $profiledata->ID ?> | <strong>Level</strong>
  <?php echo $profiledata->user_level ?> | <strong>Posts</strong>
  <?php
	$posts = get_usernumposts($user);
	echo $posts;
	?>
</p>

<p> <strong><?php echo _LANG_WPF_SUBT_FIRST; ?></strong> <?php echo $profiledata->user_firstname ?> </p>

<p> <strong><?php echo _LANG_WPF_SUBT_LAST; ?></strong> <?php echo $profiledata->user_lastname ?> </p>

<p> <strong><?php echo _LANG_WPF_SUBT_NICK; ?></strong> <?php echo $profiledata->user_nickname ?> </p>

<p> <strong><?php echo _LANG_WPF_SUBT_MAIL; ?></strong> <?php echo make_clickable($profiledata->user_email) ?>
</p>

<p> <strong><?php echo _LANG_WPF_SUBT_URL; ?></strong> <?php echo $profiledata->user_url ?> </p>

<p> <strong><?php echo _LANG_WPF_SUBT_ICQ; ?></strong>
  <?php if ($profiledata->user_icq > 0) { echo make_clickable("icq:".$profiledata->user_icq); } ?>
</p>

<p> <strong><?php echo _LANG_WPF_SUBT_MSN; ?></strong> <?php echo $profiledata->user_msn ?> </p>

<p> <strong><?php echo _LANG_WPF_SUBT_YAHOO; ?></strong> <?php echo $profiledata->user_yim ?> </p>

</div>

	<?php

break;


case 'IErightclick':


	$bookmarklet_tbpb  = (get_settings('use_trackback')) ? '&trackback=1' : '';
	$bookmarklet_tbpb .= (get_settings('use_pingback'))  ? '&pingback=1'  : '';
	$bookmarklet_height= (get_settings('use_trackback')) ? 590 : 550;

	?>

	<div class="menutop">&nbsp;<?php echo _LANG_WPF_SUBT_ONE; ?></div>

	<table width="100%" cellpadding="20">
	<tr><td>

	<p><?php echo _LANG_WPF_SUBT_COPY; ?></p>
	<?php
	$regedit = "REGEDIT4\r\n[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\Post To &WP : ".get_settings('blogname')."]\r\n@=\"javascript:doc=external.menuArguments.document;Q=doc.selection.createRange().text;void(btw=window.open('".$siteurl."/wp-admin/bookmarklet.php?text='+escape(Q)+'".$bookmarklet_tbpb."&popupurl='+escape(doc.location.href)+'&popuptitle='+escape(doc.title),'bookmarklet','scrollbars=no,width=480,height=".$bookmarklet_height.",left=100,top=150,status=yes'));btw.focus();\"\r\n\"contexts\"=hex:31\"";
	?>
	<pre style="margin: 20px; background-color: #cccccc; border: 1px dashed #333333; padding: 5px; font-size: 12px;"><?php echo $regedit; ?></pre>
	<p><?php echo _LANG_WPF_SUBT_BOOK; ?></p>
<!--
	<p align="center">
		<form>
		<input class="search" type="button" value="<?php echo _LANG_WPF_SUBT_CLOSE; ?>" name="close" onClick='window.close'/>
		</form>
	</p>
-->
	</td></tr>
	</table>
	<?php
	exit();
break;


default:
	$parent_file = 'profile.php';
	include_once('admin-header.php');
	$profiledata=get_userdata($user_ID);

	$bookmarklet_tbpb  = (get_settings('use_trackback')) ? '&trackback=1' : '';
	$bookmarklet_tbpb .= (get_settings('use_pingback'))  ? '&pingback=1'  : '';
	$bookmarklet_height= (get_settings('use_trackback')) ? 480 : 440;

	?>
<?php if (!empty($updated)) { ?>
<div class="wrap">
<p><strong><?php echo _LANG_WPF_SUBT_UPDATED; ?></strong></p>
</div>
<?php } ?>
<div class="wrap">
<form name="profile" id="profile" action="profile.php" method="post">
	<h2><?php echo _LANG_WPF_SUBT_EDIT; ?></h2>
  <p>
    <input type="hidden" name="action" value="update" />
    <input type="hidden" name="checkuser_id" value="<?php echo $user_ID ?>" />
  </p>
  <p><strong><?php echo _LANG_WPF_SUBT_USERID; ?></strong> <?php echo $profiledata->ID ?> | <strong><?php echo _LANG_WPF_SUBT_LEVEL; ?></strong>
    <?php echo $profiledata->user_level ?> | <strong><?php echo _LANG_WPF_SUBT_POSTS; ?></strong>
    <?php
	$posts = get_usernumposts($user_ID);
	echo $posts;
	?>
    | <strong><?php echo _LANG_WPF_SUBT_LOGIN; ?></strong> <?php echo $profiledata->user_login ?></p>
	<style type="text/css" media="screen">
	th { text-align: right; }
	</style>
  <table width="99%"  border="0" cellspacing="2" cellpadding="3">
    <tr>
      <th width="15%" scope="row"><?php echo _LANG_WPF_SUBT_FIRST; ?></th>
      <td><input type="text" name="newuser_firstname" id="newuser_firstname" value="<?php echo $profiledata->user_firstname ?>" /></td>
    </tr>
    <tr>
      <th scope="row"><?php echo _LANG_WPF_SUBT_LAST; ?></th>
      <td><input type="text" name="newuser_lastname" id="newuser_lastname2" value="<?php echo $profiledata->user_lastname ?>" /></td>
    </tr>
    <tr>
      <th scope="row"><?php echo _LANG_WPF_SUBT_DESC; ?></th>
      <td><textarea name="user_description" rows="5" id="textarea2" style="width: 99%; "><?php echo $profiledata->user_description ?></textarea></td>
    </tr>
    <tr>
      <th scope="row"><?php echo _LANG_WPF_SUBT_NICK; ?></th>
      <td><input type="text" name="newuser_nickname" id="newuser_nickname2" value="<?php echo $profiledata->user_nickname ?>" /></td>
    </tr>
    <tr>
      <th scope="row"><?php echo _LANG_WPF_SUBT_MAIL; ?></th>
      <td><input type="text" name="newuser_email" id="newuser_email2" value="<?php echo $profiledata->user_email ?>" /></td>
    </tr>
    <tr>
      <th scope="row"><?php echo _LANG_WPF_SUBT_URL; ?></th>
      <td><input type="text" name="newuser_url" id="newuser_url2" value="<?php echo $profiledata->user_url ?>" /></td>
    </tr>
    <tr>
      <th scope="row"><?php echo _LANG_WPF_SUBT_ICQ; ?></th>
      <td><input type="text" name="newuser_icq" id="newuser_icq2" value="<?php if ($profiledata->user_icq > 0) { echo $profiledata->user_icq; } ?>" /></td>
    </tr>
    <tr>
      <th scope="row"><?php echo _LANG_WPF_SUBT_AIM; ?></th>
      <td><input type="text" name="newuser_aim" id="newuser_aim2" value="<?php echo $profiledata->user_aim ?>" /></td>
    </tr>
    <tr>
      <th scope="row"><?php echo _LANG_WPF_SUBT_MSN; ?> </th>
      <td><input type="text" name="newuser_msn" id="newuser_msn2" value="<?php echo $profiledata->user_msn ?>" /></td>
    </tr>
    <tr>
      <th scope="row"><?php echo _LANG_WPF_SUBT_YAHOO; ?> </th>
      <td>        <input type="text" name="newuser_yim" id="newuser_yim2" value="<?php echo $profiledata->user_yim ?>" />      </td>
    </tr>
    <tr>
      <th scope="row"><?php echo _LANG_WPF_SUBT_IDENTITY; ?> </th>
      <td><select name="newuser_idmode">
        <option value="nickname"<?php
	if ($profiledata->user_idmode == 'nickname')
	echo " selected"; ?>><?php echo $profiledata->user_nickname ?></option>
        <option value="login"<?php
	if ($profiledata->user_idmode=="login")
	echo " selected"; ?>><?php echo $profiledata->user_login ?></option>
        <option value="firstname"<?php
	if ($profiledata->user_idmode=="firstname")
	echo " selected"; ?>><?php echo $profiledata->user_firstname ?></option>
        <option value="lastname"<?php
	if ($profiledata->user_idmode=="lastname")
	echo " selected"; ?>><?php echo $profiledata->user_lastname ?></option>
        <option value="namefl"<?php
	if ($profiledata->user_idmode=="namefl")
	echo " selected"; ?>><?php echo $profiledata->user_firstname." ".$profiledata->user_lastname ?></option>
        <option value="namelf"<?php
	if ($profiledata->user_idmode=="namelf")
	echo " selected"; ?>><?php echo $profiledata->user_lastname." ".$profiledata->user_firstname ?></option>
      </select>        </td>
    </tr>
<?php if (0) { ?>
    <tr>
      <th scope="row"><?php echo _LANG_WPF_SUBT_NEWPASS; ?></th>
      <td><input type="password" name="pass1" size="16" value="" />
        <input type="password" name="pass2" size="16" value="" /></td>
    </tr>
<?php } ?>
	</table>
  <p style=" text-align: center;">
    <input type="submit" value="<?php echo _LANG_WPF_SUBT_UPDATE; ?>" name="submit" /></p>
	</div>
  </form>
</div>
<?php if ($is_gecko) { ?>
    <script language="JavaScript" type="text/javascript">
function addPanel()
        {
          if ((typeof window.sidebar == "object") && (typeof window.sidebar.addPanel == "function"))
            window.sidebar.addPanel("WordPress Post: <?php echo get_settings('blogname') ?>","<?php echo $siteurl ?>/wp-admin/sidebar.php","");
          else
            alert(_LANG_WPF_SUBT_MOZILLA);
        }
</script>
    <strong><?php echo _LANG_WPF_SUBT_SIDEBAR; ?></strong><br />
    Add the <a href="#" onclick="addPanel()">WordPress Sidebar</a>!
    <?php } elseif (($is_winIE) || ($is_macIE)) { ?>
<div class="wrap">
    <h2>SideBar</h2>
    <?php echo _LANG_WPF_SUBT_FAVORITES; ?> <a href="javascript:Q='';if(top.frames.length==0)Q=document.selection.createRange().text;void(_search=open('<?php echo $siteurl ?>/wp-admin/sidebar.php?text='+escape(Q)+'&popupurl='+escape(location.href)+'&popuptitle='+escape(document.title),'_search'))">WordPress
    Sidebar</a>.

</div>
<?php } ?>
	<?php

break;
}

/* </Profile | My Profile> */
include('admin-footer.php') ?>