memcp.php

速度很快的PHP论坛源程序

		} else {
			$dateformatnew = '';
		}

		$invisiblenew = $allowinvisible && $invisiblenew ? 1 : 0;
		$locationnew = cutstr(censor(dhtmlspecialchars($locationnew)), 30);

		$cstatusadd = $allowcstatus ? ', customstatus=\''.cutstr(censor(dhtmlspecialchars($cstatusnew)), 30).'\'' : '';

		if($regverify == 1 && $adminid == 0 && $groupid > 7) {
			$query = $db->query("SELECT email FROM {$tablepre}members WHERE uid='$discuz_uid'");
			if($emailnew != $db->result($query, 0)) {
				if(!$doublee) {
					$query = $db->query("SELECT uid FROM {$tablepre}members WHERE email='$emailnew' LIMIT 1");
					if($db->result($query, 0)) {
						showmessage('profile_email_duplicate');
					}
				}					

				$idstring = random(6);
				$groupid = 8;

				require_once DISCUZ_ROOT.'./forumdata/cache/usergroup_8.php';

				$authstradd1 = ", groupid='8'";
				$authstradd2 = ", authstr='$timestamp\t2\t$idstring'";
				sendmail($emailnew, 'email_verify_subject', 'email_verify_message');
			}
		} else {
			$authstradd1 = $authstradd2 = '';
		}

		$sightmlnew = addslashes(discuzcode(stripslashes($signaturenew), 1, 0, 0, 0, ($allowsigbbcode ? ($allowcusbbcode ? 2 : 1) : 0), $allowsigimgcode, 0));

		$db->query("UPDATE {$tablepre}members SET secques='$secquesnew', gender='$gendernew', email='$emailnew', styleid='$styleidnew', bday='$bdaynew',
			showemail='$showemailnew', timeoffset='$timeoffsetnew', tpp='$tppnew', ppp='$pppnew', newsletter='$newsletternew', invisible='$invisiblenew',
			timeformat='$timeformatnew', dateformat='$dateformatnew', pmsound='$pmsoundnew', styleid='$styleidnew', sigstatus='$sigstatusnew' $newpasswdadd $authstradd1
			WHERE uid='$discuz_uid'");

		$query = $db->query("SELECT uid FROM {$tablepre}memberfields WHERE uid='$discuz_uid'");
		if(!$db->num_rows($query)) {
			$db->query("REPLACE INTO {$tablepre}memberfields (uid) VALUES ('$discuz_uid')");
		}

		$db->query("UPDATE {$tablepre}memberfields SET site='$sitenew', location='$locationnew', bio='$bionew', signature='$signaturenew', sightml='$sightmlnew',
			icq='$icqnew', qq='$qqnew', yahoo='$yahoonew', msn='$msnnew' $avataradd $cstatusadd $fieldadd $authstradd2 WHERE uid='$discuz_uid'");

		$styleid = $styleidnew;

		if($authstradd) {
			showmessage('profile_email_verify');
		} else {
			showmessage('profile_succeed', 'memcp.php');
		}
	}

} elseif($action == 'favorites') {

	if($favadd && !submitcheck('favsubmit')) {

		$query = $db->query("SELECT tid FROM {$tablepre}favorites WHERE tid='$favadd' AND uid='$discuz_uid' LIMIT 1");
		if($db->result($query, 0)) {
			showmessage('favorite_exists'); 
		} else {
			$db->query("INSERT INTO {$tablepre}favorites (uid, tid)
				VALUES ('$discuz_uid', '$favadd')");
			showmessage('favorite_add_succeed', dreferer());
		}

	} elseif(!$favadd && !submitcheck('favsubmit')) {

		$favlist = array();
		$query = $db->query("SELECT t.tid, t.fid, t.subject, t.replies, t.lastpost, t.lastposter, f.name
			FROM {$tablepre}favorites fav, {$tablepre}threads t, {$tablepre}forums f
			WHERE fav.tid=t.tid AND t.displayorder>='0' AND fav.uid='$discuz_uid' AND t.fid=f.fid ORDER BY t.lastpost DESC");

		while($fav = $db->fetch_array($query)) {
			$fav['lastposterenc'] = rawurlencode($fav['lastposter']);
			$fav['lastpost'] = gmdate("$dateformat $timeformat", $fav['lastpost'] + $timeoffset * 3600);
			$favlist[] = $fav;
		}

		include template('memcp_misc');

	} elseif(!$favadd && submitcheck('favsubmit')) {

		$ids = $comma = '';
		if(is_array($delete)) {
			foreach($delete as $deleteid) {
				$ids .= $comma.$deleteid;
				$comma = ', ';
			}
		}

		if($ids) {
			$db->query("DELETE FROM {$tablepre}favorites WHERE uid='$discuz_uid' AND tid IN ($ids)");
		}
		showmessage('favorite_update_succeed', dreferer());
	}

} elseif($action == 'subscriptions') {

	if($subadd && !submitcheck('subsubmit')) {

		$query = $db->query("SELECT tid FROM {$tablepre}subscriptions WHERE tid='$subadd' AND uid='$discuz_uid' LIMIT 1");
		if($db->result($query, 0)) {
			showmessage('subscription_exists');
		} else {
			$db->query("INSERT INTO {$tablepre}subscriptions (uid, email, tid, lastnotify)
				VALUES ('$discuz_uid', '$email', '$subadd', '')");
			showmessage('subscription_add_succeed', dreferer());
		}

	} elseif(!$subadd && !submitcheck('subsubmit')) {

		$subslist = array();
		$query = $db->query("SELECT t.tid, t.fid, t.subject, t.replies, t.lastpost, t.lastposter, f.name
			FROM {$tablepre}subscriptions s, {$tablepre}threads t, {$tablepre}forums f
			WHERE t.tid=s.tid AND t.displayorder>='0' AND f.fid=t.fid AND s.uid='$discuz_uid' ORDER BY t.lastpost DESC");

		while($subs = $db->fetch_array($query)) {
			$subs['lastposterenc'] = rawurlencode($subs['lastposter']);
			$subs['lastpost'] = gmdate("$dateformat $timeformat", $subs['lastpost'] + $timeoffset * 3600);
			$subslist[] = $subs;
		}

		include template('memcp_misc');

	} elseif(!$subadd && submitcheck('subsubmit')) {

		$ids = $comma = '';
		if(is_array($delete)) {
			foreach($delete as $deleteid) {
				$ids .= "$comma$deleteid";
				$comma = ", ";
			}
		}

		if($ids) {
			$db->query("DELETE FROM {$tablepre}subscriptions WHERE uid='$discuz_uid' AND tid IN ($ids)");
		}
		showmessage('subscription_update_succeed', dreferer());
	}

} elseif($action == 'viewavatars') {

	if(!$allowavatar) {
		showmessage('undefined_action', NULL, 'HALTED');
	}

	if(!submitcheck('avasubmit')) {

		$app = 16;
		$avatarsdir = DISCUZ_ROOT.'./images/avatars';
		$page = !ispage($page) ? 1 : $page;

		$query = $db->query("SELECT avatar FROM {$tablepre}memberfields WHERE uid='$discuz_uid'");
		$member = $db->fetch_array($query);
		$avatarlist = '';
		$num = 0;
		if(is_dir($avatarsdir)) {
			$adir = dir($avatarsdir);
			while($entry = $adir->read()) {
				if(in_array(strtolower(fileext($entry)), $avatarextarray) && is_file("$avatarsdir/$entry")) {
					$avatars[++$num] = $entry;
				}
			}
			$adir->close();
		} else {
			showmessage('profile_avatardir_nonexistence');
		}

		$start = ($page - 1) * $app;
		$end = ($start + $app > $num) ? ($num) : ($start + $app - 1);

		$multipage = multi($num, $app, $page, 'memcp.php?action=viewavatars');
		for($i = $start; $i <= $end; $i += 4) {
			$avatarlist .= "<tr>\n";
			for($j = 0; $j < 4; $j++) {
				$thisbg = ($thisbg == ALTBG1) ? ALTBG2 : ALTBG1;
				$avatarlist .= "<td bgcolor=\"$thisbg\" width=\"25%\" align=\"center\">";
				if($avatars[$i + $j] && ($i + $j)) {
					$avatarlist .= "<img src=\"images/avatars/".$avatars[$i + $j]."\"></td>\n";
				} else {
					$avatarlist .= "&nbsp;</td>\n";
				}
			}
			$avatarlist .= "</tr><tr>\n";
			for($j = 0; $j < 4; $j++) {
				$avatarlist .= "<td bgcolor=\"$thisbg\" width=\"25%\" align=\"center\">";
				if($avatars[$i + $j] && ($i + $j)) {
					if(strpos($member['avatar'], $avatars[$i + $j])) {
						$checked = 'checked';
					} else {
						$checked = '';
					}
					$avatarlist .= "<input type=\"radio\" value=\"images/avatars/".$avatars[$i + $j]."\" name=\"avatarnew\" $checked>".$avatars[$i + $j]."\n";
				} elseif($i + $j == 0) {
					if(!$member['avatar']) {
						$checked = 'checked';
					}
					$avatarlist .= "<input type=\"radio\" value=\"\" name=\"avatarnew\" $checked><span class=\"bold\">None</span>\n";
				} else {
					$avatarlist .= "&nbsp;</td>\n";
				}
				$thisbg = ($thisbg == ALTBG1) ? ALTBG2 : ALTBG1;
			}
			$avatarlist .= "</tr><tr><td bcolspan=\"4\" class=\"singleborder\"></td></tr>\n\n";
		}

		include template('memcp_misc');

	} else {

		@list($avatarwidthnew, $avatarheightnew) = getimagesize($avatarnew);
		$maxsize = max($avatarwidthnew, $avatarheightnew);
		if($maxsize > $maxavatarpixel) {
			$avatarwidthnew = $avatarwidthnew * $maxavatarpixel / $maxsize;
			$avatarheightnew = $avatarheightnew * $maxavatarpixel / $maxsize;
		}
		$db->query("UPDATE {$tablepre}memberfields SET avatar='$avatarnew', avatarwidth='$avatarwidthnew', avatarheight='$avatarheightnew' WHERE uid='$discuz_uid'");
		showmessage('profile_avatar_succeed', 'memcp.php?action=profile');

	}

} elseif($action == 'buddylist') {

	if(empty($delete)) {
		$query = $db->query("SELECT uid FROM {$tablepre}members WHERE ".(isset($buddyid) ? "uid='$buddyid'" : "username='$buddy'"));
		$buddyid = $db->result($query, 0);
		if(!$buddyid) {
			showmessage('buddy_add_nonexistence');
		}

		$query = $db->query("SELECT buddyid FROM {$tablepre}buddys WHERE uid='$discuz_uid'");
		if(!in_array($adminid, array(1, 2, 3)) && ($db->num_rows($query)) > 20) {
			showmessage('buddy_add_toomany');
		}
		while($buddy = $db->fetch_array($query)) {
			if($buddy['buddyid'] == $buddyid) {
				showmessage('buddy_add_invalid');
			}
		}

		$db->query("INSERT INTO {$tablepre}buddys (uid, buddyid) VALUES ('$discuz_uid', '$buddyid')");
		showmessage('buddy_update_succeed', 'memcp.php');
	} else {
		$db->query("DELETE FROM {$tablepre}buddys WHERE uid='$discuz_uid' AND buddyid='$delete'");
		showmessage('buddy_update_succeed', 'memcp.php');
	}

}

?>