function customized($memID)
{
global $context, $modSettings, $sourcedir, $db_prefix, $func;
// filter bad HTML...
require_once $sourcedir . '/InputFilter.php';
$allowed_tags = array ('b', 'i', 'u', 'a', 'p', 'br', 'span', 'style', 'div', 'img', 'hr', 'table', 'tr', 'td', 'object', 'embed', 'param', 'ul', 'ol', 'li', 'strong', 'em');
$allowed_attribs = array ('href', 'title', 'id', 'class', 'style', 'align', 'type', 'src', 'height', 'width', 'alt', 'valign', 'border', 'cellspacing', 'cellpadding', 'colspan', 'name', 'value', 'flashvars');
$myFilter = new InputFilter($allowed_tags, $allowed_attribs, 0, 0);
// HTML&CSS customization field
$request = db_query ('SELECT value FROM ' . $db_prefix . 'themes
WHERE ID_MEMBER = "' . $memID . '" AND variable = "css"', __FILE__, __LINE__);
while ($row = mysql_fetch_assoc ($request)) {
$html = $myFilter->process (un_htmlspecialchars ($row['value']));
db_query ('UPDATE ' . $db_prefix . 'themes SET
value = SUBSTRING('' . addslashes (htmlspecialchars ($html)) . '', 1, 65534)
WHERE ID_MEMBER = "' . $memID . '" AND variable = "css"', __FILE__, __LINE__);
}
// MediaBox field
$request = db_query ('SELECT value FROM ' . $db_prefix . 'themes
WHERE ID_MEMBER = "' . $memID . '" AND variable = "media"', __FILE__, __LINE__);
while ($row = mysql_fetch_assoc ($request)) {
$html = $myFilter->process (un_htmlspecialchars ($row['value']));
db_query ('UPDATE ' . $db_prefix . 'themes SET
value = SUBSTRING('' . addslashes (htmlspecialchars ($html)) . '', 1, 65534)
WHERE ID_MEMBER = "' . $memID . '" AND variable = "media"', __FILE__, __LINE__);
}
// Just this and nothing more thanks to the SMF's powerful template system
$context['show_spellchecking'] = !empty($modSettings['enableSpellChecking']) && function_exists('pspell_new');
loadThemeOptions($memID);
}
function buddies($memID)
{
global $modSettings, $context, $db_prefix, $user_profile, $scripturl;
// For avatars: if we're always html resizing, assume it's too large.
if ($modSettings['avatar_action_too_large'] == 'option_html_resize' || $modSettings['avatar_action_too_large'] == 'option_js_resize') {
$avatar_width = !empty($modSettings['avatar_max_width_external']) ? ' width="' . $modSettings['avatar_max_width_external'] . '"' : '';
$avatar_height = !empty($modSettings['avatar_max_height_external']) ? ' height="' . $modSettings['avatar_max_height_external'] . '"' : '';
} else {
$avatar_width = '';
$avatar_height = '';
}
if (isset ($modSettings['enable_buddylist']) && $modSettings['enable_buddylist'] == '1') {
$buddies = array();
$request = db_query ('SELECT BUDDY_ID FROM ' . $db_prefix . 'buddies
WHERE ID_MEMBER = ' . $context['member']['id'] . ' AND approved = 1
ORDER BY position ASC, time_updated DESC', __FILE__, __LINE__);
while ($row = mysql_fetch_assoc ($request))
$buddies[] = $row['BUDDY_ID'];
loadMemberData($buddies);
foreach ($buddies as $buddy) {
$user_data = $user_profile[$buddy];
$user_data['avatar_image'] = $user_data['avatar'] == '' ? ($user_data['ID_ATTACH'] > 0 ? '<img src="' . (empty($user_data['attachmentType']) ? $scripturl . '?action=dlattach;attach=' . $user_data['ID_ATTACH'] . ';type=avatar' : $modSettings['custom_avatar_url'] . '/' . $user_data['filename']) . '" alt="" class="avatar" border="0" />' : '') : (stristr($user_data['avatar'], 'http://') ? '<img src="' . $user_data['avatar'] . '"' . $avatar_width . $avatar_height . ' alt="" class="avatar" border="0" />' : '<img src="' . $modSettings['avatar_url'] . '/' . htmlspecialchars($user_data['avatar']) . '" alt="" class="avatar" border="0" />');
$user_data['is_online'] = (!empty($user_data['showOnline']) || allowedTo('moderate_forum')) && $user_data['isOnline'] > 0;
if ($buddy != $memID)
$context['member']['buddies_data'][$buddy] = $user_data;
}
}
}
function pictures($memID)
{
global $sourcedir;
require_once $sourcedir . '/ProfilePictures.php';
PicturesController($memID);
}
function get_extension ($filename)
{
return substr (strrchr ($filename, '.'), 1);
}
function is_buddy ($memID, $buddyID)
{
global $db_prefix, $buddy_list, $modSettings;
// when buddy list if off, everybody is your friend
if (!isset ($modSettings['enable_buddylist']) || $modSettings['enable_buddylist'] == '0')
return true;
if (!is_array ($buddy_list)) {
$request = db_query ('SELECT buddy_list FROM ' . $db_prefix . 'members WHERE ID_MEMBER = ' . $memID, __FILE__, __LINE__);
list ($buddy_list) = mysql_fetch_row ($request);
$buddy_list = explode (',', $buddy_list);
}
if (in_array ($buddyID, $buddy_list))
return true;
else
return false;
}
function comment($memID)
{
global $context, $db_prefix, $txt, $sourcedir;
// guests ar not allowed to comment
is_not_guest();
if (isset ($_GET['add'])) {
if (!$_POST['comment'])
fatal_error ($txt['profile_comment_field'], false);
checkSession('post');
// only buddies can post comments?
loadThemeOptions($memID);
if (isset ($context['member']['options']['comments_budd_only']) && $context['member']['options']['comments_budd_only'] == 1) {
if (!is_buddy ($memID, $context['user']['id']) && !allowedTo('profile_extra_any'))
fatal_error ($txt['profile_comments_buddies_only'], false);
}
$request = db_query ('INSERT INTO ' . $db_prefix . 'profile_comments SET
ID_MEMBER = "' . $context['user']['id'] . '",
comment = '' . htmlspecialchars ($_POST['comment']) . '',
time = "' . time() . '",
COMMENT_MEMBER_ID = "' . $memID . '"', __FILE__, __LINE__);
// should we notify user?
if (@$context['member']['options']['comments_notif_disable'] != 1 && $context['user']['id'] != $memID) {
require_once $sourcedir . '/Subs-Post.php';
sendpm (array('to' => array($memID), 'bcc' => array()), sprintf ($txt['profile_notif_com_subject'], $context['user']['name']), sprintf ($txt['profile_notif_com_body'], $context['user']['name']), false, array ('id' => 0, 'name' => $txt['profile_notif_com_user'], 'username' => $txt['profile_notif_com_user']));
}
redirectexit('action=profile;u=' . $memID);
} elseif (isset ($_GET['delete'])) {
checkSession('get');
$allowed = false;
if (allowedTo('profile_extra_any'))
$allowed = true;
elseif ($context['user']['is_owner'] && allowedTo('profile_extra_own')) {
// Are you deleting comment that is on your own profile?
$request = db_query ('SELECT COMMENT_MEMBER_ID FROM ' . $db_prefix . 'profile_comments WHERE ID_COMMENT = "' . (int)$_GET['delete'] . '"', __FILE__, __LINE__);
list ($user_id) = mysql_fetch_row ($request);
if ($context['user']['id'] == $user_id)
$allowed = true;
}
if ($allowed)
db_query ('DELETE FROM ' . $db_prefix . 'profile_comments WHERE ID_COMMENT = "' . (int)$_GET['delete'] . '"', __FILE__, __LINE__);
redirectexit ('action=profile;u=' . $memID);
} else {
// only buddies can post comments?
loadThemeOptions($memID);
if (isset ($context['member']['options']['comments_budd_only']) && $context['member']['options']['comments_budd_only'] == 1) {
if (!is_buddy ($memID, $context['user']['id']) && !allowedTo('edit_ultimate_profile_any'))
fatal_error ($txt['profile_comments_buddies_only'], false);
}
$context['sub_template'] = 'add_comment';
}
}
function report($memID)
{
global $context, $txt, $scripturl, $db_prefix, $user_info, $ID_MEMBER, $modSettings, $sourcedir, $language;
is_not_guest();
if ($memID == $ID_MEMBER)
fatal_lang_error('profile_report_own', false);
if (isset($_POST['sc']) || isset($_POST['submit'])) {
checkSession();
spamProtection('spam');
$reporterName = un_htmlspecialchars($user_info['name']) . ($user_info['name'] != $user_info['username'] && $user_info['username'] != '' ? ' (' . $user_info['username'] . ')' : '');
require_once($sourcedir . '/Subs-Post.php');
// Find all of this forum's administrators.
$request = db_query("
SELECT ID_MEMBER, emailAddress, lngfile
FROM {$db_prefix}members
WHERE ID_GROUP = 1 OR FIND_IN_SET(1, additionalGroups)
AND notifyTypes != 4
ORDER BY lngfile", __FILE__, __LINE__);
// Send every moderator an email.
while ($row = mysql_fetch_assoc($request))
{
loadLanguage('UltimateProfile', empty($row['lngfile']) || empty($modSettings['userLanguage']) ? $language : $row['lngfile'], false);
// Send it to the administrator.
sendmail($row['emailAddress'], $txt['profile_report_subject'] . ': ' . $context['member']['name'],
sprintf($txt['profile_report_email1'], $context['member']['name']) . $txt['profile_report_email2'] . ' ' . (empty($ID_MEMBER) ? $txt['guest'] . ' (' . $user_info['ip'] . ')' : $reporterName) . ' ' . $txt['profile_report_email3'] . ": " .
$scripturl . '?action=profile;u=' . $context['member']['id'] . " " .
$txt['profile_report_comment'] . ": " .
$_POST['comment'] . " " .
$txt[130], $user_info['email']);
}
mysql_free_result($request);
redirectexit();
}
$context['sub_template'] = 'report_profile';
}
Konu: Ultimate Profile Mod 
C.tesi Ekim 24, 2009 8:41 am