userctrl.php

   1 <?php
   2 /*=====================================================================*\
   3 || ###################################################################
   4 || # Bugdar [#]version[#]
   5 || # Copyright ©2002-[#]year[#] Iris Studios, Inc.
   6 || #
   7 || # This program is free software; you can redistribute it and/or modify
   8 || # it under the terms of the GNU General Public License as published by
   9 || # the Free Software Foundation; version [#]gpl[#] of the License.
  10 || #
  11 || # This program is distributed in the hope that it will be useful, but
  12 || # WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
  13 || # or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
  14 || # more details.
  15 || #
  16 || # You should have received a copy of the GNU General Public License along
  17 || # with this program; if not, write to the Free Software Foundation, Inc.,
  18 || # 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA
  19 || ###################################################################
  20 \*=====================================================================*/
  21
  22 $fetchtemplates = array(
  23         'userctrl'
  24 );
  25
  26 define('SVN', '$Id$');
  27
  28 $focus['user'] = 'focus';
  29
  30 require_once('./global.php');
  31 require_once('./includes/class_api_error.php');
  32 require_once('./includes/api_user.php');
  33
  34 APIError(array(new API_Error_Handler($message), 'user_cumulative'));
  35
  36 if (!$bugsys->userinfo['userid'])
  37 {
  38         $message->error_permission();
  39 }
  40
  41 $userapi = new UserAPI($bugsys);
  42 $userapi->set('userid',         $bugsys->userinfo['userid']);
  43 $userapi->set_condition();
  44
  45 $userinfo = $bugsys->userinfo;
  46
  47 // ###################################################################
  48
  49 if (empty($_REQUEST['do']))
  50 {
  51         $_REQUEST['do'] = 'modify';
  52 }
  53
  54 // ###################################################################
  55
  56 if ($_POST['do'] == 'update')
  57 {
  58         // -------------------------------------------------------------------
  59         // authentication
  60         if (!empty($bugsys->in['password']) OR !empty($bugsys->in['email']))
  61         {
  62                 if (empty($bugsys->in['validate']))
  63                 {
  64                         $message->add_error($lang->string('You need to enter your current password to change your email or password'));
  65                 }
  66                 else
  67                 {
  68                         if (md5(md5($bugsys->in['validate']) . md5($bugsys->userinfo['salt'])) != $bugsys->userinfo['password'])
  69                         {
  70                                 $message->add_error($lang->string('Your authentication password does not match the one in our records'));
  71                         }
  72                 }
  73         }
  74
  75         // -------------------------------------------------------------------
  76         // email validation
  77         if (!empty($bugsys->in['email']))
  78         {
  79                 if (!empty($bugsys->in['email']) AND empty($bugsys->in['email_confirm']))
  80                 {
  81                         $message->add_error($lang->string('You need to enter both the email and confirm email fields to change your address'));
  82                 }
  83
  84                 if ($bugsys->in['email'] != $bugsys->in['email_confirm'])
  85                 {
  86                         $message->add_error($lang->string('Your email and confirm email addresses do not match'));
  87                 }
  88
  89                 $userapi->set('email',  $bugsys->in['email']);
  90         }
  91
  92         // -------------------------------------------------------------------
  93         // password validation
  94         if (!empty($bugsys->in['password']))
  95         {
  96                 if (!empty($bugsys->in['password']) AND empty($bugsys->in['password_confirm']))
  97                 {
  98                         $message->add_error($lang->string('You need to enter both the password and confirm password fields to change your password'));
  99                 }
 100                 else
 101                 {
 102                         if ($bugsys->in['password'] != $bugsys->in['password_confirm'])
 103                         {
 104                                 $message->add_error($lang->string('Your password and confirm password do not match'));
 105                         }
 106                 }
 107
 108                 $userapi->set('password',       $bugsys->in['password']);
 109         }
 110
 111         $userapi->set('displayname',    $bugsys->in['displayname']);
 112         $userapi->set('showemail',              $bugsys->in['showemail']);
 113         $userapi->set('showcolours',    $bugsys->in['showcolours']);
 114         $userapi->set('languageid',             $bugsys->in['languageid']);
 115         $userapi->set('timezone',               $bugsys->in['timezone']);
 116         $userapi->set('usedst',                 $bugsys->in['usedst']);
 117
 118         // -------------------------------------------------------------------
 119         // copy fields
 120         $userinfo['displayname'] = $bugsys->in['displayname'];
 121         $userinfo['showemail'] = $bugsys->in['showemail'];
 122         $userinfo['showcolours'] = $bugsys->in['showcolours'];
 123         $userinfo['languageid'] = $bugsys->in['languageid'];
 124         $userinfo['timezone'] = $bugsys->in['timezone'];
 125         $userinfo['usedst'] = $bugsys->in['usedst'];
 126
 127         $email = $bugsys->in['email'];
 128         $email_confirm = $bugsys->in['email_confirm'];
 129
 130         // -------------------------------------------------------------------
 131         // error handling
 132         if ($message->items)
 133         {
 134                 $message->error_list_process();
 135
 136                 $show['errors'] = true;
 137                 $_REQUEST['do'] = 'modify';
 138         }
 139         else
 140         {
 141                 $userapi->update();
 142
 143                 if (can_perform('canbeassignedto'))
 144                 {
 145                         require_once('./includes/functions_datastore.php');
 146                         build_assignedto();
 147                 }
 148
 149                 $db->query("DELETE FROM " . TABLE_PREFIX . "useremail WHERE userid = " . $bugsys->userinfo['userid']);
 150                 $bugsys->input_clean('emailopts', TYPE_INT);
 151                 foreach ($bugsys->in['emailopts'] AS $relation => $bitarr)
 152                 {
 153                         $bitmask = 0;
 154                         foreach ($bitarr AS $option => $yes)
 155                         {
 156                                 $bitmask += $option * $yes;
 157                         }
 158                         $db->query("INSERT INTO " . TABLE_PREFIX . "useremail (userid, relation, mask) VALUES (" . $bugsys->userinfo['userid'] . ", $relation, $bitmask)");
 159                 }
 160
 161                 $message->redirect($lang->string('The changes to your account have been made.'), 'userctrl.php');
 162         }
 163 }
 164
 165 // ###################################################################
 166
 167 if ($_REQUEST['do'] == 'modify')
 168 {
 169         $langselect = construct_datastore_select('language', 'title', 'languageid', $userinfo['languageid']);
 170
 171         foreach ($datef->fetch_timezone_list() AS $value => $label)
 172         {
 173                 $selected = ($value == $userinfo['timezone']);
 174                 eval('$tzselect .= "' . $template->fetch('selectoption') . '";');
 175         }
 176
 177         $checked = array();
 178         if (!is_array($bugsys->in['emailopts']))
 179         {
 180                 $options = $db->query("SELECT * FROM " . TABLE_PREFIX . "useremail WHERE userid = " . $bugsys->userinfo['userid']);
 181                 while ($opt = $db->fetch_array($options))
 182                 {
 183                         foreach ($bugsys->emailoptions['notifications'] AS $name => $notif)
 184                         {
 185                                 foreach ($bugsys->emailoptions['relations'] AS $name => $relation)
 186                                 {
 187                                         if ($opt['mask'] & $notif AND $opt['relation'] == $relation)
 188                                         {
 189                                                 $checked["$relation"]["$notif"] = HTML_CHECKED;
 190                                         }
 191                                 }
 192                         }
 193                 }
 194         }
 195         else
 196         {
 197                 $checked = $bugsys->in['emailopts'];
 198                 foreach ($checked AS $key1 => $value1)
 199                 {
 200                         foreach ($value1 AS $key2 => $value2)
 201                         {
 202                                 if ($value2)
 203                                 {
 204                                         $checked["$key1"]["$key2"] = HTML_CHECKED;
 205                                 }
 206                         }
 207                 }
 208         }
 209
 210         eval('$template->flush("' . $template->fetch('userctrl') . '");');
 211 }
 212
 213 /*=====================================================================*\
 214 || ###################################################################
 215 || # $HeadURL$
 216 || # $Id$
 217 || ###################################################################
 218 \*=====================================================================*/
 219 ?>