|
1
|
|
|
<?php |
|
2
|
|
|
|
|
3
|
|
|
/** |
|
4
|
|
|
* Handles the loading of custom and standard fields |
|
5
|
|
|
* |
|
6
|
|
|
* @package ElkArte Forum |
|
7
|
|
|
* @copyright ElkArte Forum contributors |
|
8
|
|
|
* @license BSD http://opensource.org/licenses/BSD-3-Clause (see accompanying LICENSE.txt file) |
|
9
|
|
|
* |
|
10
|
|
|
* @version 2.0 dev |
|
11
|
|
|
* |
|
12
|
|
|
*/ |
|
13
|
|
|
|
|
14
|
|
|
namespace ElkArte\Profile; |
|
15
|
|
|
|
|
16
|
|
|
use BBC\ParserWrapper; |
|
17
|
|
|
use ElkArte\Errors\ErrorContext; |
|
18
|
|
|
use ElkArte\Exceptions\Exception; |
|
19
|
|
|
use ElkArte\Helper\DataValidator; |
|
20
|
|
|
use ElkArte\Helper\Util; |
|
21
|
|
|
use ElkArte\Languages\Txt; |
|
22
|
|
|
use ElkArte\MembersList; |
|
23
|
|
|
use ElkArte\User; |
|
24
|
|
|
|
|
25
|
|
|
/** |
|
26
|
|
|
* The ProfileFields class is responsible for loading and rendering profile fields. |
|
27
|
|
|
*/ |
|
28
|
|
|
class ProfileFields |
|
29
|
|
|
{ |
|
30
|
|
|
/** |
|
31
|
|
|
* Load any custom fields for this area. |
|
32
|
|
|
* No area means load all, 'summary' loads all public ones. |
|
33
|
|
|
* |
|
34
|
|
|
* @param int $memID |
|
35
|
|
|
* @param string $area = 'summary' |
|
36
|
|
|
* @param array $custom_fields = array() |
|
37
|
|
|
*/ |
|
38
|
|
|
public function loadCustomFields($memID, $area = 'summary', array $custom_fields = []): void |
|
39
|
|
|
{ |
|
40
|
|
|
global $context; |
|
41
|
|
|
|
|
42
|
|
|
$context['custom_fields'] = []; |
|
43
|
|
|
$context['custom_fields_required'] = false; |
|
44
|
|
|
|
|
45
|
|
|
require_once(SUBSDIR . '/Profile.subs.php'); |
|
46
|
|
|
$where = $this->getProfileFieldWhereClause($area, $memID); |
|
47
|
|
|
$data = getCustomFieldData($where, $area); |
|
48
|
|
|
foreach ($data as $row) |
|
49
|
|
|
{ |
|
50
|
|
|
// Shortcut. |
|
51
|
|
|
$options = MembersList::get($memID)->options; |
|
|
|
|
|
|
52
|
|
|
$value = $options[$row['col_name']] ?? $row['default_value']; |
|
53
|
|
|
|
|
54
|
|
|
// If this was submitted already then make the value the posted version. |
|
55
|
|
|
if (!empty($custom_fields) && isset($custom_fields[$row['col_name']])) |
|
56
|
|
|
{ |
|
57
|
|
|
$value = Util::htmlspecialchars($custom_fields[$row['col_name']]); |
|
58
|
|
|
if (in_array($row['field_type'], ['select', 'radio'])) |
|
59
|
|
|
{ |
|
60
|
|
|
$options = explode(',', $row['field_options']); |
|
61
|
|
|
$value = $options[$value] ?? ''; |
|
62
|
|
|
} |
|
63
|
|
|
} |
|
64
|
|
|
|
|
65
|
|
|
// Generate HTML for the various form inputs. |
|
66
|
|
|
[$input_html, $output_html, $key] = $this->generateFormFieldHtml($row, $value); |
|
67
|
|
|
$output_html = $this->postProcessOutputHtml($row, $output_html, $key); |
|
68
|
|
|
|
|
69
|
|
|
$context['custom_fields_required'] = $context['custom_fields_required'] || $row['show_reg']; |
|
70
|
|
|
$valid_areas = ['register', 'account', 'forumprofile', 'theme']; |
|
71
|
|
|
|
|
72
|
|
|
if (($value === '' || $value === 'no_default') && !in_array($area, $valid_areas)) |
|
73
|
|
|
{ |
|
74
|
|
|
continue; |
|
75
|
|
|
} |
|
76
|
|
|
|
|
77
|
|
|
$context['custom_fields'][] = [ |
|
78
|
|
|
'name' => $row['field_name'], |
|
79
|
|
|
'desc' => $row['field_desc'], |
|
80
|
|
|
'field_type' => $row['field_type'], |
|
81
|
|
|
'input_html' => $input_html, |
|
82
|
|
|
'output_html' => $output_html, |
|
83
|
|
|
'placement' => $row['placement'], |
|
84
|
|
|
'colname' => $row['col_name'], |
|
85
|
|
|
'value' => $value, |
|
86
|
|
|
'show_reg' => $row['show_reg'], |
|
87
|
|
|
'field_length' => $row['field_length'], |
|
88
|
|
|
'mask' => $row['mask'], |
|
89
|
|
|
]; |
|
90
|
|
|
} |
|
91
|
|
|
|
|
92
|
|
|
call_integration_hook('integrate_load_custom_profile_fields', [$memID, $area]); |
|
93
|
|
|
} |
|
94
|
|
|
|
|
95
|
|
|
/** |
|
96
|
|
|
* Generate HTML for a form field based on the given row and value. |
|
97
|
|
|
* |
|
98
|
|
|
* @param array $row - The row containing information about the field. |
|
99
|
|
|
* @param mixed $value - The current value of the field. |
|
100
|
|
|
* |
|
101
|
|
|
* @return array - An array containing the generated input HTML and the corresponding output HTML. |
|
102
|
|
|
*/ |
|
103
|
|
|
private function generateFormFieldHtml($row, $value): array |
|
104
|
|
|
{ |
|
105
|
|
|
global $txt; |
|
106
|
|
|
|
|
107
|
|
|
$output_html = $value; |
|
108
|
|
|
$key = null; |
|
109
|
|
|
|
|
110
|
|
|
// Implement form field HTML generation based on field_type |
|
111
|
|
|
switch ($row['field_type']) |
|
112
|
|
|
{ |
|
113
|
|
|
case 'check': |
|
114
|
|
|
// generate HTML for checkbox |
|
115
|
|
|
$true = (bool) $value; |
|
116
|
|
|
$input_html = '<input id="' . $row['col_name'] . '" type="checkbox" name="customfield[' . $row['col_name'] . ']" ' . ($true ? 'checked="checked"' : '') . ' class="input_check" />'; |
|
117
|
|
|
$output_html = $true ? $txt['yes'] : $txt['no']; |
|
118
|
|
|
break; |
|
119
|
|
|
case 'select': |
|
120
|
|
|
// generate HTML for select |
|
121
|
|
|
$input_html = '<select id="' . $row['col_name'] . '" name="customfield[' . $row['col_name'] . ']"><option value=""' . ($row['default_value'] === 'no_default' ? ' selected="selected"' : '') . '></option>'; |
|
122
|
|
|
$options = explode(',', $row['field_options']); |
|
123
|
|
|
|
|
124
|
|
|
foreach ($options as $k => $v) |
|
125
|
|
|
{ |
|
126
|
|
|
$true = ($value === $v); |
|
127
|
|
|
$input_html .= '<option value="' . $k . '"' . ($true ? ' selected="selected"' : '') . '>' . $v . '</option>'; |
|
128
|
|
|
if ($true) |
|
129
|
|
|
{ |
|
130
|
|
|
$key = $k; |
|
131
|
|
|
$output_html = $v; |
|
132
|
|
|
} |
|
133
|
|
|
} |
|
134
|
|
|
|
|
135
|
|
|
$input_html .= '</select>'; |
|
136
|
|
|
break; |
|
137
|
|
|
case 'radio': |
|
138
|
|
|
// generate HTML for radio |
|
139
|
|
|
$input_html = '<fieldset><legend>' . $row['field_name'] . '</legend>'; |
|
140
|
|
|
$options = explode(',', $row['field_options']); |
|
141
|
|
|
|
|
142
|
|
|
foreach ($options as $k => $v) |
|
143
|
|
|
{ |
|
144
|
|
|
$true = ($value === $v); |
|
145
|
|
|
$input_html .= '<label for="customfield_' . $row['col_name'] . '_' . $k . '"><input type="radio" name="customfield[' . $row['col_name'] . ']" class="input_radio" id="customfield_' . $row['col_name'] . '_' . $k . '" value="' . $k . '" ' . ($true ? 'checked="checked"' : '') . ' />' . $v . '</label><br />'; |
|
146
|
|
|
if ($true) |
|
147
|
|
|
{ |
|
148
|
|
|
$key = $k; |
|
149
|
|
|
$output_html = $v; |
|
150
|
|
|
} |
|
151
|
|
|
} |
|
152
|
|
|
|
|
153
|
|
|
$input_html .= '</fieldset>'; |
|
154
|
|
|
break; |
|
155
|
|
|
case 'text': |
|
156
|
|
|
case 'url': |
|
157
|
|
|
case 'search': |
|
158
|
|
|
case 'date': |
|
159
|
|
|
case 'email': |
|
160
|
|
|
case 'color': |
|
161
|
|
|
// A standard input field, including some html5 variants |
|
162
|
|
|
$row['field_length'] = (int) $row['field_length']; |
|
163
|
|
|
$input_html = '<input id="' . $row['col_name'] . '" type="' . $row['field_type'] . '" name="customfield[' . $row['col_name'] . ']"'; |
|
164
|
|
|
|
|
165
|
|
|
if ($row['field_length'] !== 0) |
|
166
|
|
|
{ |
|
167
|
|
|
$input_html .= ' maxlength="' . $row['field_length'] . '"'; |
|
168
|
|
|
} |
|
169
|
|
|
|
|
170
|
|
|
if ($row['field_length'] === 0 || $row['field_length'] >= 50) |
|
171
|
|
|
{ |
|
172
|
|
|
$input_html .= ' size="50"'; |
|
173
|
|
|
} |
|
174
|
|
|
elseif ($row['field_length'] > 30) |
|
175
|
|
|
{ |
|
176
|
|
|
$input_html .= ' size="30"'; |
|
177
|
|
|
} |
|
178
|
|
|
elseif ($row['field_length'] > 10) |
|
179
|
|
|
{ |
|
180
|
|
|
$input_html .= ' size="20"'; |
|
181
|
|
|
} |
|
182
|
|
|
else |
|
183
|
|
|
{ |
|
184
|
|
|
$input_html .= ' size="10"'; |
|
185
|
|
|
} |
|
186
|
|
|
|
|
187
|
|
|
$input_html .= ' value="' . $value . '" placeholder="' . $row['field_name'] . '" class="input_text" />'; |
|
188
|
|
|
break; |
|
189
|
|
|
default: |
|
190
|
|
|
// generate HTML for textarea |
|
191
|
|
|
$input_html = '<textarea id="' . $row['col_name'] . '" name="customfield[' . $row['col_name'] . ']"'; |
|
192
|
|
|
|
|
193
|
|
|
if (!empty($row['rows'])) |
|
194
|
|
|
{ |
|
195
|
|
|
$input_html .= ' rows="' . $row['rows'] . '"'; |
|
196
|
|
|
} |
|
197
|
|
|
|
|
198
|
|
|
if (!empty($row['cols'])) |
|
199
|
|
|
{ |
|
200
|
|
|
$input_html .= ' cols="' . $row['cols'] . '"'; |
|
201
|
|
|
} |
|
202
|
|
|
|
|
203
|
|
|
$input_html .= '>' . $value . '</textarea>'; |
|
204
|
|
|
break; |
|
205
|
|
|
} |
|
206
|
|
|
|
|
207
|
|
|
return [$input_html, $output_html, $key]; |
|
208
|
|
|
} |
|
209
|
|
|
|
|
210
|
|
|
/** |
|
211
|
|
|
* This defines every profile field known to man. |
|
212
|
|
|
* |
|
213
|
|
|
* @param bool $force_reload = false |
|
214
|
|
|
*/ |
|
215
|
|
|
public function loadProfileFields($force_reload = false): void |
|
216
|
|
|
{ |
|
217
|
|
|
global $context, $profile_fields, $txt, $scripturl, $modSettings, $cur_profile, $language, $settings; |
|
218
|
|
|
|
|
219
|
|
|
// Don't load this twice! |
|
220
|
|
|
if (!empty($profile_fields) && !$force_reload) |
|
221
|
|
|
{ |
|
222
|
|
|
return; |
|
223
|
|
|
} |
|
224
|
|
|
|
|
225
|
|
|
/** |
|
226
|
|
|
* This horrific array defines all the profile fields in the whole world! |
|
227
|
|
|
* In general each "field" has one array - the key of which is the database |
|
228
|
|
|
* column name associated with said field. |
|
229
|
|
|
* |
|
230
|
|
|
* Each item can have the following attributes: |
|
231
|
|
|
* |
|
232
|
|
|
* string $type: The type of field this is - valid types are: |
|
233
|
|
|
* - callback: This is a field which has its own callback mechanism for templating. |
|
234
|
|
|
* - check: A simple checkbox. |
|
235
|
|
|
* - hidden: This doesn't have any visual aspects but may have some validity. |
|
236
|
|
|
* - password: A password box. |
|
237
|
|
|
* - select: A select box. |
|
238
|
|
|
* - text: A string of some description. |
|
239
|
|
|
* |
|
240
|
|
|
* string $label: The label for this item - default will be $txt[$key] if this isn't set. |
|
241
|
|
|
* string $subtext: The subtext (Small label) for this item. |
|
242
|
|
|
* int $size: Optional size for a text area. |
|
243
|
|
|
* array $input_attr: An array of text strings to be added to the input box for this item. |
|
244
|
|
|
* string $value: The value of the item. If not set $cur_profile[$key] is assumed. |
|
245
|
|
|
* string $permission: Permission required for this item (Excluded _any/_own suffix which is applied automatically). |
|
246
|
|
|
* func $input_validate: A runtime function which validates the element before going to the database. It is passed |
|
247
|
|
|
* the relevant $_POST element if it exists and should be treated like a reference. |
|
248
|
|
|
* |
|
249
|
|
|
* Return types: |
|
250
|
|
|
* - true: Element can be stored. |
|
251
|
|
|
* - false: Skip this element. |
|
252
|
|
|
* - a text string: An error occurred - this is the error message. |
|
253
|
|
|
* |
|
254
|
|
|
* function $preload: A function that is used to load data required for this element to be displayed. Must return |
|
255
|
|
|
* true to be displayed at all. |
|
256
|
|
|
* |
|
257
|
|
|
* string $cast_type: If set casts the element to a certain type. Valid types (bool, int, float). |
|
258
|
|
|
* string $save_key: If the index of this element isn't the database column name it can be overridden with this string. |
|
259
|
|
|
* bool $is_dummy: If set then nothing is acted upon for this element. |
|
260
|
|
|
* bool $enabled: A test to determine whether this is even available - if not is unset. |
|
261
|
|
|
* string $link_with: Key which links this field to an overall set. |
|
262
|
|
|
* |
|
263
|
|
|
* string $js_submit: javascript to add inside the function checkProfileSubmit() in the template |
|
264
|
|
|
* string $js: javascript to add to the page in general |
|
265
|
|
|
* string $js_load: filename of js to be loaded with loadJavasciptFile |
|
266
|
|
|
* |
|
267
|
|
|
* Note that all elements that have a custom input_validate must ensure they set the value of $cur_profile correct to enable |
|
268
|
|
|
* the changes to be displayed correctly on submit of the form. |
|
269
|
|
|
*/ |
|
270
|
|
|
|
|
271
|
|
|
$profile_fields = [ |
|
272
|
|
|
'avatar_choice' => [ |
|
273
|
|
|
'type' => 'callback', |
|
274
|
|
|
'callback_func' => 'avatar_select', |
|
275
|
|
|
// This handles the permissions too. |
|
276
|
|
|
'preload' => 'profileLoadAvatarData', |
|
277
|
|
|
'input_validate' => 'profileSaveAvatarData', |
|
278
|
|
|
'save_key' => 'avatar', |
|
279
|
|
|
], |
|
280
|
|
|
'bday1' => [ |
|
281
|
|
|
'type' => 'callback', |
|
282
|
|
|
'callback_func' => 'birthdate', |
|
283
|
|
|
'permission' => 'profile_extra', |
|
284
|
|
|
'preload' => static function () { |
|
285
|
|
|
global $cur_profile, $context; |
|
286
|
|
|
|
|
287
|
|
|
// Split up the birth date.... |
|
288
|
|
|
[$uyear, $umonth, $uday] = explode('-', empty($cur_profile['birthdate']) || $cur_profile['birthdate'] === '0001-01-01' ? '0000-00-00' : $cur_profile['birthdate']); |
|
289
|
|
|
$context['member']['birth_date'] = [ |
|
290
|
|
|
'year' => $uyear === '0004' ? '0000' : $uyear, |
|
291
|
|
|
'month' => $umonth, |
|
292
|
|
|
'day' => $uday, |
|
293
|
|
|
]; |
|
294
|
|
|
|
|
295
|
|
|
return true; |
|
296
|
|
|
}, |
|
297
|
|
|
'input_validate' => static function (&$value) { |
|
298
|
|
|
global $profile_vars, $cur_profile; |
|
299
|
|
|
|
|
300
|
|
|
if (isset($_POST['bday1'])) |
|
301
|
|
|
{ |
|
302
|
|
|
$date_parts = explode('-', $_POST['bday1']); |
|
303
|
|
|
$bday3 = isset($date_parts[0]) ? (int) $date_parts[0] : 1; // Year |
|
304
|
|
|
$bday1 = isset($date_parts[1]) ? (int) $date_parts[1] : 1; // Month |
|
305
|
|
|
$bday2 = isset($date_parts[2]) ? (int) $date_parts[2] : 1; // Day |
|
306
|
|
|
|
|
307
|
|
|
// Set to blank? |
|
308
|
|
|
if ($bday3 === 1 && $bday2 === 1 && $bday1 === 1) |
|
309
|
|
|
{ |
|
310
|
|
|
$value = '0001-01-01'; |
|
311
|
|
|
} |
|
312
|
|
|
else |
|
313
|
|
|
{ |
|
314
|
|
|
$value = checkdate($bday1, $bday2, max($bday3, 4)) ? sprintf('%04d-%02d-%02d', max($bday3, 4), $bday1, $bday2) : '0001-01-01'; |
|
315
|
|
|
} |
|
316
|
|
|
} |
|
317
|
|
|
else |
|
318
|
|
|
{ |
|
319
|
|
|
$value = '0001-01-01'; |
|
320
|
|
|
} |
|
321
|
|
|
$profile_vars['birthdate'] = $value; |
|
322
|
|
|
$cur_profile['birthdate'] = $value; |
|
323
|
|
|
|
|
324
|
|
|
return false; |
|
325
|
|
|
}, |
|
326
|
|
|
], |
|
327
|
|
|
'date_registered' => [ |
|
328
|
|
|
'type' => 'date', |
|
329
|
|
|
'value' => empty($cur_profile['date_registered']) ? $txt['not_applicable'] : Util::strftime('%Y-%m-%d', $cur_profile['date_registered'] + (User::$info->time_offset + $modSettings['time_offset']) * 3600), |
|
|
|
|
|
|
330
|
|
|
'label' => $txt['date_registered'], |
|
331
|
|
|
'log_change' => true, |
|
332
|
|
|
'permission' => 'moderate_forum', |
|
333
|
|
|
'input_validate' => static function (&$value) { |
|
334
|
|
|
global $txt, $modSettings, $cur_profile; |
|
335
|
|
|
|
|
336
|
|
|
// Bad date! Go try again - please? |
|
337
|
|
|
if (($value = strtotime($value)) === -1) |
|
338
|
|
|
{ |
|
339
|
|
|
$value = $cur_profile['date_registered']; |
|
340
|
|
|
|
|
341
|
|
|
return $txt['invalid_registration'] . ' ' . Util::strftime('%d %b %Y ' . (strpos(User::$info->time_format, '%H') !== false ? '%I:%M:%S %p' : '%H:%M:%S'), forum_time(false)); |
|
|
|
|
|
|
342
|
|
|
} |
|
343
|
|
|
|
|
344
|
|
|
// As long as it doesn't equal "N/A"... |
|
345
|
|
|
if ($value !== $txt['not_applicable'] && $value !== strtotime(Util::strftime('%Y-%m-%d', $cur_profile['date_registered'] + (User::$info->time_offset + $modSettings['time_offset']) * 3600))) |
|
|
|
|
|
|
346
|
|
|
{ |
|
347
|
|
|
$value -= (User::$info->time_offset + $modSettings['time_offset']) * 3600; |
|
348
|
|
|
} |
|
349
|
|
|
else |
|
350
|
|
|
{ |
|
351
|
|
|
$value = $cur_profile['date_registered']; |
|
352
|
|
|
} |
|
353
|
|
|
|
|
354
|
|
|
return true; |
|
355
|
|
|
}, |
|
356
|
|
|
], |
|
357
|
|
|
'email_address' => [ |
|
358
|
|
|
'type' => 'email', |
|
359
|
|
|
'label' => $txt['user_email_address'], |
|
360
|
|
|
'subtext' => $txt['valid_email'], |
|
361
|
|
|
'log_change' => true, |
|
362
|
|
|
'permission' => 'profile_identity', |
|
363
|
|
|
'input_validate' => function ($value) { |
|
364
|
|
|
global $context, $old_profile, $profile_vars, $modSettings; |
|
365
|
|
|
|
|
366
|
|
|
if (strtolower($value) === strtolower($old_profile['email_address'])) |
|
367
|
|
|
{ |
|
368
|
|
|
return false; |
|
369
|
|
|
} |
|
370
|
|
|
|
|
371
|
|
|
$isValid = ProfileFields::profileValidateEmail($value, $context['id_member']); |
|
372
|
|
|
|
|
373
|
|
|
// Do they need to re-validate? If so schedule the function! |
|
374
|
|
|
if ($isValid === true && !empty($modSettings['send_validation_onChange']) && !allowedTo('moderate_forum')) |
|
375
|
|
|
{ |
|
376
|
|
|
require_once(SUBSDIR . '/Auth.subs.php'); |
|
377
|
|
|
$old_profile['validation_code'] = generateValidationCode(14); |
|
378
|
|
|
$profile_vars['validation_code'] = substr(hash('sha256', $old_profile['validation_code']), 0, 10); |
|
379
|
|
|
$profile_vars['is_activated'] = 2; |
|
380
|
|
|
$context['profile_execute_on_save'][] = 'profileSendActivation'; |
|
381
|
|
|
unset($context['profile_execute_on_save']['reload_user']); |
|
382
|
|
|
} |
|
383
|
|
|
|
|
384
|
|
|
return $isValid; |
|
385
|
|
|
}, |
|
386
|
|
|
], |
|
387
|
|
|
// Selecting group membership is a complicated one, so we treat it separate! |
|
388
|
|
|
'id_group' => [ |
|
389
|
|
|
'type' => 'callback', |
|
390
|
|
|
'callback_func' => 'group_manage', |
|
391
|
|
|
'permission' => 'manage_membergroups', |
|
392
|
|
|
'preload' => 'profileLoadGroups', |
|
393
|
|
|
'log_change' => true, |
|
394
|
|
|
'input_validate' => 'profileSaveGroups', |
|
395
|
|
|
], |
|
396
|
|
|
'id_theme' => [ |
|
397
|
|
|
'type' => 'callback', |
|
398
|
|
|
'callback_func' => 'theme_pick', |
|
399
|
|
|
'permission' => 'profile_extra', |
|
400
|
|
|
'enabled' => empty($settings['disable_user_variant']) || !empty($modSettings['theme_allow']) || allowedTo('admin_forum'), |
|
401
|
|
|
'preload' => static function () { |
|
402
|
|
|
global $context, $cur_profile, $txt; |
|
403
|
|
|
|
|
404
|
|
|
$db = database(); |
|
405
|
|
|
$request = $db->query('', ' |
|
406
|
|
|
SELECT value |
|
407
|
|
|
FROM {db_prefix}themes |
|
408
|
|
|
WHERE id_theme = {int:id_theme} |
|
409
|
|
|
AND variable = {string:variable} |
|
410
|
|
|
LIMIT 1', [ |
|
411
|
|
|
'id_theme' => $cur_profile['id_theme'], |
|
412
|
|
|
'variable' => 'name', |
|
413
|
|
|
] |
|
414
|
|
|
); |
|
415
|
|
|
[$name] = $request->fetch_row(); |
|
416
|
|
|
$request->free_result(); |
|
417
|
|
|
$context['member']['theme'] = [ |
|
418
|
|
|
'id' => $cur_profile['id_theme'], |
|
419
|
|
|
'name' => empty($cur_profile['id_theme']) ? $txt['theme_forum_default'] : $name |
|
420
|
|
|
]; |
|
421
|
|
|
|
|
422
|
|
|
return true; |
|
423
|
|
|
}, |
|
424
|
|
|
'input_validate' => static function (&$value) { |
|
425
|
|
|
$value = (int) $value; |
|
426
|
|
|
return true; |
|
427
|
|
|
}, |
|
428
|
|
|
], |
|
429
|
|
|
'karma_good' => [ |
|
430
|
|
|
'type' => 'callback', |
|
431
|
|
|
'callback_func' => 'karma_modify', |
|
432
|
|
|
'permission' => 'admin_forum', |
|
433
|
|
|
// Set karma_bad too! |
|
434
|
|
|
'input_validate' => static function (&$value) { |
|
435
|
|
|
global $profile_vars, $cur_profile; |
|
436
|
|
|
|
|
437
|
|
|
$value = (int) $value; |
|
438
|
|
|
if (isset($_POST['karma_bad'])) |
|
439
|
|
|
{ |
|
440
|
|
|
$profile_vars['karma_bad'] = $_POST['karma_bad'] !== '' ? (int) $_POST['karma_bad'] : 0; |
|
441
|
|
|
$cur_profile['karma_bad'] = $_POST['karma_bad'] !== '' ? (int) $_POST['karma_bad'] : 0; |
|
442
|
|
|
} |
|
443
|
|
|
|
|
444
|
|
|
return true; |
|
445
|
|
|
}, |
|
446
|
|
|
'preload' => static function () { |
|
447
|
|
|
global $context, $cur_profile; |
|
448
|
|
|
|
|
449
|
|
|
$context['member']['karma'] = [ |
|
450
|
|
|
'good' => (int) $cur_profile['karma_good'], |
|
451
|
|
|
'bad' => (int) $cur_profile['karma_bad'] |
|
452
|
|
|
]; |
|
453
|
|
|
|
|
454
|
|
|
return true; |
|
455
|
|
|
}, |
|
456
|
|
|
'enabled' => !empty($modSettings['karmaMode']), |
|
457
|
|
|
], |
|
458
|
|
|
'lngfile' => [ |
|
459
|
|
|
'type' => 'select', |
|
460
|
|
|
'options' => 'return $context[\'profile_languages\'];', |
|
461
|
|
|
'label' => $txt['preferred_language'], |
|
462
|
|
|
'permission' => 'profile_identity', |
|
463
|
|
|
'preload' => 'profileLoadLanguages', |
|
464
|
|
|
'enabled' => !empty($modSettings['userLanguage']), |
|
465
|
|
|
'value' => empty($cur_profile['lngfile']) ? $language : $cur_profile['lngfile'], |
|
466
|
|
|
'input_validate' => static function (&$value) { |
|
467
|
|
|
global $context, $cur_profile; |
|
468
|
|
|
|
|
469
|
|
|
// Load the languages. |
|
470
|
|
|
profileLoadLanguages(); |
|
471
|
|
|
if (isset($context['profile_languages'][$value])) |
|
472
|
|
|
{ |
|
473
|
|
|
if ($context['user']['is_owner'] && empty($context['password_auth_failed'])) |
|
474
|
|
|
{ |
|
475
|
|
|
$_SESSION['language'] = $value; |
|
476
|
|
|
} |
|
477
|
|
|
|
|
478
|
|
|
return true; |
|
479
|
|
|
} |
|
480
|
|
|
|
|
481
|
|
|
$value = $cur_profile['lngfile']; |
|
482
|
|
|
|
|
483
|
|
|
return false; |
|
484
|
|
|
}, |
|
485
|
|
|
], |
|
486
|
|
|
// The username is not always editable - so adjust it as such. |
|
487
|
|
|
'member_name' => [ |
|
488
|
|
|
'type' => allowedTo('admin_forum') && isset($_GET['changeusername']) ? 'text' : 'label', |
|
489
|
|
|
'label' => $txt['username'], |
|
490
|
|
|
'subtext' => allowedTo('admin_forum') && !isset($_GET['changeusername']) ? '[<a href="' . $scripturl . '?action=profile;u=' . $context['id_member'] . ';area=account;changeusername" class="em">' . $txt['username_change'] . '</a>]' : '', |
|
491
|
|
|
'log_change' => true, |
|
492
|
|
|
'permission' => 'profile_identity', |
|
493
|
|
|
'prehtml' => allowedTo('admin_forum') && isset($_GET['changeusername']) ? '<div class="warningbox">' . $txt['username_warning'] . '</div>' : '', |
|
494
|
|
|
'input_validate' => static function (&$value) { |
|
495
|
|
|
global $context, $cur_profile; |
|
496
|
|
|
|
|
497
|
|
|
if (allowedTo('admin_forum')) |
|
498
|
|
|
{ |
|
499
|
|
|
// We'll need this... |
|
500
|
|
|
require_once(SUBSDIR . '/Auth.subs.php'); |
|
501
|
|
|
|
|
502
|
|
|
// Maybe they are trying to change their password as well? |
|
503
|
|
|
$resetPassword = true; |
|
504
|
|
|
if (isset($_POST['passwrd1'], $_POST['passwrd2']) && $_POST['passwrd1'] !== '' && $_POST['passwrd1'] === $_POST['passwrd2'] && validatePassword($_POST['passwrd1'], $value, [$cur_profile['real_name'], User::$info->username, User::$info->name, User::$info->email]) === null) |
|
|
|
|
|
|
505
|
|
|
{ |
|
506
|
|
|
$resetPassword = false; |
|
507
|
|
|
} |
|
508
|
|
|
|
|
509
|
|
|
// Do the reset... this will email them too. |
|
510
|
|
|
if ($resetPassword) |
|
|
|
|
|
|
511
|
|
|
{ |
|
512
|
|
|
resetPassword($context['id_member'], $value); |
|
513
|
|
|
} |
|
514
|
|
|
elseif ($value !== null) |
|
515
|
|
|
{ |
|
516
|
|
|
$errors = ErrorContext::context('change_username', 0); |
|
517
|
|
|
|
|
518
|
|
|
validateUsername($context['id_member'], $value, 'change_username'); |
|
519
|
|
|
|
|
520
|
|
|
// No errors we can proceed normally |
|
521
|
|
|
if (!$errors->hasErrors()) |
|
522
|
|
|
{ |
|
523
|
|
|
updateMemberData($context['id_member'], ['member_name' => $value]); |
|
524
|
|
|
} |
|
525
|
|
|
else |
|
526
|
|
|
{ |
|
527
|
|
|
// If there are "important" errors, and you are not an admin: log the first error |
|
528
|
|
|
// Otherwise grab all of them and do not log anything |
|
529
|
|
|
$error_severity = $errors->hasErrors(1) && User::$info->is_admin === false ? 1 : null; |
|
530
|
|
|
foreach ($errors->prepareErrors($error_severity) as $error) |
|
531
|
|
|
{ |
|
532
|
|
|
throw new Exception($error, $error_severity === null ? false : 'general'); |
|
533
|
|
|
} |
|
534
|
|
|
} |
|
535
|
|
|
} |
|
536
|
|
|
} |
|
537
|
|
|
|
|
538
|
|
|
return false; |
|
539
|
|
|
}, |
|
540
|
|
|
], |
|
541
|
|
|
'passwrd1' => [ |
|
542
|
|
|
'type' => 'password', |
|
543
|
|
|
'label' => ucwords($txt['choose_pass']), |
|
544
|
|
|
'subtext' => $txt['password_strength'], |
|
545
|
|
|
'size' => 20, |
|
546
|
|
|
'value' => '', |
|
547
|
|
|
'enabled' => true, |
|
548
|
|
|
'permission' => 'profile_identity', |
|
549
|
|
|
'save_key' => 'passwd', |
|
550
|
|
|
// Note this will only work if passwrd2 also exists! |
|
551
|
|
|
'input_validate' => static function (&$value) { |
|
552
|
|
|
global $cur_profile; |
|
553
|
|
|
|
|
554
|
|
|
// If we didn't try it then ignore it! |
|
555
|
|
|
if ($value === '') |
|
556
|
|
|
{ |
|
557
|
|
|
return false; |
|
558
|
|
|
} |
|
559
|
|
|
|
|
560
|
|
|
// Do the two entries for the password even match? |
|
561
|
|
|
if (!isset($_POST['passwrd2']) || $value !== $_POST['passwrd2']) |
|
562
|
|
|
{ |
|
563
|
|
|
return 'bad_new_password'; |
|
564
|
|
|
} |
|
565
|
|
|
|
|
566
|
|
|
// Let's get the validation function into play... |
|
567
|
|
|
require_once(SUBSDIR . '/Auth.subs.php'); |
|
568
|
|
|
$passwordErrors = validatePassword($value, $cur_profile['member_name'], [$cur_profile['real_name'], User::$info->username, User::$info->name, User::$info->email]); |
|
|
|
|
|
|
569
|
|
|
|
|
570
|
|
|
// Were there errors? |
|
571
|
|
|
if ($passwordErrors !== null) |
|
|
|
|
|
|
572
|
|
|
{ |
|
573
|
|
|
return 'password_' . $passwordErrors; |
|
574
|
|
|
} |
|
575
|
|
|
|
|
576
|
|
|
// Set up the new password variable... ready for storage. |
|
577
|
|
|
require_once(SUBSDIR . '/Auth.subs.php'); |
|
578
|
|
|
$value = validateLoginPassword($value, '', $cur_profile['member_name'], true); |
|
579
|
|
|
|
|
580
|
|
|
return true; |
|
581
|
|
|
}, |
|
582
|
|
|
], |
|
583
|
|
|
'passwrd2' => [ |
|
584
|
|
|
'type' => 'password', |
|
585
|
|
|
'label' => ucwords($txt['verify_pass']), |
|
586
|
|
|
'enabled' => true, |
|
587
|
|
|
'size' => 20, |
|
588
|
|
|
'value' => '', |
|
589
|
|
|
'permission' => 'profile_identity', |
|
590
|
|
|
'is_dummy' => true, |
|
591
|
|
|
], |
|
592
|
|
|
'enable_otp' => [ |
|
593
|
|
|
'type' => 'check', |
|
594
|
|
|
'value' => !empty($cur_profile['enable_otp']), |
|
595
|
|
|
'subtext' => $txt['otp_enabled_help'], |
|
596
|
|
|
'label' => $txt['otp_enabled'], |
|
597
|
|
|
'permission' => 'profile_identity', |
|
598
|
|
|
], |
|
599
|
|
|
'otp_secret' => [ |
|
600
|
|
|
'type' => 'text', |
|
601
|
|
|
'label' => ucwords($txt['otp_token']), |
|
602
|
|
|
'subtext' => $txt['otp_token_help'], |
|
603
|
|
|
'enabled' => true, |
|
604
|
|
|
'size' => 20, |
|
605
|
|
|
'value' => empty($cur_profile['otp_secret']) ? '' : $cur_profile['otp_secret'], |
|
606
|
|
|
'postinput' => '<div style="display: inline-block;"><input type="button" value="' . $txt['otp_generate'] . '" onclick="generateSecret();"></div><div id="qrcode"></div>', |
|
607
|
|
|
'permission' => 'profile_identity', |
|
608
|
|
|
], |
|
609
|
|
|
// This does contact-related settings |
|
610
|
|
|
'receive_from' => [ |
|
611
|
|
|
'type' => 'select', |
|
612
|
|
|
'options' => [ |
|
613
|
|
|
$txt['receive_from_everyone'], |
|
614
|
|
|
$txt['receive_from_ignore'], |
|
615
|
|
|
$txt['receive_from_buddies'], |
|
616
|
|
|
$txt['receive_from_admins'], |
|
617
|
|
|
], |
|
618
|
|
|
'subtext' => $txt['receive_from_description'], |
|
619
|
|
|
'value' => empty($cur_profile['receive_from']) ? 0 : $cur_profile['receive_from'], |
|
620
|
|
|
'input_validate' => static function (&$value) { |
|
621
|
|
|
global $cur_profile, $profile_vars; |
|
622
|
|
|
|
|
623
|
|
|
// Simple validate and apply the two "sub settings" |
|
624
|
|
|
$value = max(min($value, 3), 0); |
|
625
|
|
|
$cur_profile['receive_from'] = $profile_vars['receive_from'] = max(min((int) $_POST['receive_from'], 4), 0); |
|
626
|
|
|
|
|
627
|
|
|
return true; |
|
628
|
|
|
}, |
|
629
|
|
|
], |
|
630
|
|
|
// This does ALL the pm settings |
|
631
|
|
|
'pm_settings' => [ |
|
632
|
|
|
'type' => 'callback', |
|
633
|
|
|
'callback_func' => 'pm_settings', |
|
634
|
|
|
'permission' => 'pm_read', |
|
635
|
|
|
'save_key' => 'pm_prefs', |
|
636
|
|
|
'preload' => static function () { |
|
637
|
|
|
global $context, $cur_profile; |
|
638
|
|
|
|
|
639
|
|
|
$context['display_mode'] = $cur_profile['pm_prefs'] & 3; |
|
640
|
|
|
$context['send_email'] = $cur_profile['pm_email_notify']; |
|
641
|
|
|
|
|
642
|
|
|
return true; |
|
643
|
|
|
}, |
|
644
|
|
|
'input_validate' => static function (&$value) { |
|
645
|
|
|
global $cur_profile, $profile_vars; |
|
646
|
|
|
|
|
647
|
|
|
// Simple validate and apply the two "sub settings" |
|
648
|
|
|
$value = max(min($value, 2), 0); |
|
649
|
|
|
$cur_profile['pm_email_notify'] = $profile_vars['pm_email_notify'] = max(min((int) $_POST['pm_email_notify'], 2), 0); |
|
650
|
|
|
|
|
651
|
|
|
return true; |
|
652
|
|
|
}, |
|
653
|
|
|
], |
|
654
|
|
|
'posts' => [ |
|
655
|
|
|
'type' => 'int', |
|
656
|
|
|
'label' => $txt['profile_posts'], |
|
657
|
|
|
'log_change' => true, |
|
658
|
|
|
'size' => 7, |
|
659
|
|
|
'permission' => 'moderate_forum', |
|
660
|
|
|
'input_validate' => static function (&$value) { |
|
661
|
|
|
// Account for comma_format presentation up front |
|
662
|
|
|
$check = strtr($value, [',' => '', '.' => '', ' ' => '']); |
|
663
|
|
|
if (!is_numeric($check)) |
|
664
|
|
|
{ |
|
665
|
|
|
return 'digits_only'; |
|
666
|
|
|
} |
|
667
|
|
|
$value = $check !== '' ? $check : 0; |
|
668
|
|
|
|
|
669
|
|
|
return true; |
|
670
|
|
|
}, |
|
671
|
|
|
], |
|
672
|
|
|
'real_name' => [ |
|
673
|
|
|
'type' => !empty($modSettings['allow_editDisplayName']) || allowedTo('moderate_forum') ? 'text' : 'label', |
|
674
|
|
|
'label' => $txt['name'], |
|
675
|
|
|
'subtext' => $txt['display_name_desc'], |
|
676
|
|
|
'log_change' => true, |
|
677
|
|
|
'input_attr' => ['maxlength="60"'], |
|
678
|
|
|
'permission' => 'profile_identity', |
|
679
|
|
|
'enabled' => !empty($modSettings['allow_editDisplayName']) || allowedTo('moderate_forum'), |
|
680
|
|
|
'input_validate' => static function (&$value) { |
|
681
|
|
|
global $context, $cur_profile; |
|
682
|
|
|
|
|
683
|
|
|
$value = trim(preg_replace('~\s~u', ' ', $value)); |
|
684
|
|
|
if (trim($value) === '') |
|
685
|
|
|
{ |
|
686
|
|
|
return 'no_name'; |
|
687
|
|
|
} |
|
688
|
|
|
|
|
689
|
|
|
if (Util::strlen($value) > 60) |
|
690
|
|
|
{ |
|
691
|
|
|
return 'name_too_long'; |
|
692
|
|
|
} |
|
693
|
|
|
|
|
694
|
|
|
if ($cur_profile['real_name'] !== $value) |
|
695
|
|
|
{ |
|
696
|
|
|
require_once(SUBSDIR . '/Members.subs.php'); |
|
697
|
|
|
if (isReservedName($value, $context['id_member'])) |
|
698
|
|
|
{ |
|
699
|
|
|
return 'name_taken'; |
|
700
|
|
|
} |
|
701
|
|
|
} |
|
702
|
|
|
|
|
703
|
|
|
return true; |
|
704
|
|
|
}, |
|
705
|
|
|
], |
|
706
|
|
|
'secret_question' => [ |
|
707
|
|
|
'type' => 'text', |
|
708
|
|
|
'label' => $txt['secret_question'], |
|
709
|
|
|
'subtext' => $txt['secret_desc'], |
|
710
|
|
|
'size' => 50, |
|
711
|
|
|
'permission' => 'profile_identity', |
|
712
|
|
|
], |
|
713
|
|
|
'secret_answer' => [ |
|
714
|
|
|
'type' => 'text', |
|
715
|
|
|
'label' => $txt['secret_answer'], |
|
716
|
|
|
'subtext' => $txt['secret_desc2'], |
|
717
|
|
|
'size' => 20, |
|
718
|
|
|
'postinput' => '<span class="smalltext" style="margin-left: 4ex;">[<a href="' . $scripturl . '?action=quickhelp;help=secret_why_blank" onclick="return reqOverlayDiv(this.href);">' . $txt['secret_why_blank'] . '</a>]</span>', |
|
719
|
|
|
'value' => '', |
|
720
|
|
|
'permission' => 'profile_identity', |
|
721
|
|
|
'input_validate' => static function (&$value) { |
|
722
|
|
|
global $cur_profile; |
|
723
|
|
|
|
|
724
|
|
|
if (empty($value)) |
|
725
|
|
|
{ |
|
726
|
|
|
require_once(SUBSDIR . '/Members.subs.php'); |
|
727
|
|
|
$member = getBasicMemberData($cur_profile['id_member'], ['authentication' => true]); |
|
728
|
|
|
|
|
729
|
|
|
// No previous answer was saved, so that\'s all good |
|
730
|
|
|
if (empty($member['secret_answer'])) |
|
731
|
|
|
{ |
|
732
|
|
|
return true; |
|
733
|
|
|
} |
|
734
|
|
|
|
|
735
|
|
|
// There is a previous secret answer to the secret question, so let\'s put it back in the db... |
|
736
|
|
|
$value = $member['secret_answer']; |
|
737
|
|
|
|
|
738
|
|
|
// We have to tell the code is an error otherwise an empty value will go into the db |
|
739
|
|
|
return false; |
|
740
|
|
|
} |
|
741
|
|
|
|
|
742
|
|
|
$value = $value !== '' ? md5($value) : ''; |
|
743
|
|
|
|
|
744
|
|
|
return true; |
|
745
|
|
|
}, |
|
746
|
|
|
], |
|
747
|
|
|
'signature' => [ |
|
748
|
|
|
'type' => 'callback', |
|
749
|
|
|
'callback_func' => 'signature_modify', |
|
750
|
|
|
'permission' => 'profile_extra', |
|
751
|
|
|
'enabled' => strpos($modSettings['signature_settings'], (string) 1) === 0, |
|
752
|
|
|
'preload' => 'profileLoadSignatureData', |
|
753
|
|
|
'input_validate' => 'profileValidateSignature', |
|
754
|
|
|
], |
|
755
|
|
|
'show_online' => [ |
|
756
|
|
|
'type' => 'check', |
|
757
|
|
|
'label' => $txt['show_online'], |
|
758
|
|
|
'permission' => 'profile_identity', |
|
759
|
|
|
'enabled' => !empty($modSettings['allow_hideOnline']) || allowedTo('moderate_forum'), |
|
760
|
|
|
], |
|
761
|
|
|
// Pretty much a dummy entry - it populates all the theme settings. |
|
762
|
|
|
'theme_settings' => [ |
|
763
|
|
|
'type' => 'callback', |
|
764
|
|
|
'callback_func' => 'theme_settings', |
|
765
|
|
|
'permission' => 'profile_extra', |
|
766
|
|
|
'is_dummy' => true, |
|
767
|
|
|
'preload' => static function () { |
|
768
|
|
|
global $context; |
|
769
|
|
|
|
|
770
|
|
|
Txt::load('Settings'); |
|
771
|
|
|
|
|
772
|
|
|
// Can they disable censoring? |
|
773
|
|
|
$context['allow_no_censored'] = false; |
|
774
|
|
|
if (User::$info->is_admin || $context['user']['is_owner']) |
|
|
|
|
|
|
775
|
|
|
{ |
|
776
|
|
|
$context['allow_no_censored'] = allowedTo('disable_censor'); |
|
777
|
|
|
} |
|
778
|
|
|
|
|
779
|
|
|
return true; |
|
780
|
|
|
}, |
|
781
|
|
|
], |
|
782
|
|
|
'time_format' => [ |
|
783
|
|
|
'type' => 'callback', |
|
784
|
|
|
'callback_func' => 'timeformat_modify', |
|
785
|
|
|
'permission' => 'profile_extra', |
|
786
|
|
|
'preload' => static function () { |
|
787
|
|
|
global $context, $txt, $cur_profile, $modSettings; |
|
788
|
|
|
|
|
789
|
|
|
$context['easy_timeformats'] = [ |
|
790
|
|
|
['format' => '', 'title' => $txt['timeformat_default']], |
|
791
|
|
|
['format' => '%B %d, %Y, %I:%M:%S %p', 'title' => $txt['timeformat_easy1']], |
|
792
|
|
|
['format' => '%B %d, %Y, %H:%M:%S', 'title' => $txt['timeformat_easy2']], |
|
793
|
|
|
['format' => '%Y-%m-%d, %H:%M:%S', 'title' => $txt['timeformat_easy3']], |
|
794
|
|
|
['format' => '%d %B %Y, %H:%M:%S', 'title' => $txt['timeformat_easy4']], |
|
795
|
|
|
['format' => '%d-%m-%Y, %H:%M:%S', 'title' => $txt['timeformat_easy5']] |
|
796
|
|
|
]; |
|
797
|
|
|
$context['member']['time_format'] = $cur_profile['time_format']; |
|
798
|
|
|
$context['current_forum_time'] = standardTime(time() - User::$info->time_offset * 3600, false); |
|
|
|
|
|
|
799
|
|
|
$context['current_forum_time_js'] = Util::strftime('%Y,' . ((int) Util::strftime('%m', time() + $modSettings['time_offset'] * 3600) - 1) . ',%d,%H,%M,%S', time() + $modSettings['time_offset'] * 3600); |
|
800
|
|
|
$context['current_forum_time_hour'] = (int) Util::strftime('%H', forum_time(false)); |
|
801
|
|
|
|
|
802
|
|
|
return true; |
|
803
|
|
|
}, |
|
804
|
|
|
], |
|
805
|
|
|
'time_offset' => [ |
|
806
|
|
|
'type' => 'callback', |
|
807
|
|
|
'callback_func' => 'timeoffset_modify', |
|
808
|
|
|
'permission' => 'profile_extra', |
|
809
|
|
|
'preload' => static function () { |
|
810
|
|
|
global $context, $cur_profile; |
|
811
|
|
|
|
|
812
|
|
|
$context['member']['time_offset'] = $cur_profile['time_offset']; |
|
813
|
|
|
|
|
814
|
|
|
return true; |
|
815
|
|
|
}, |
|
816
|
|
|
'input_validate' => static function (&$value) { |
|
817
|
|
|
// Validate the time_offset... |
|
818
|
|
|
$value = (float) str_replace(',', '.', $value); |
|
819
|
|
|
if ($value < -23.5 || $value > 23.5) |
|
820
|
|
|
{ |
|
821
|
|
|
return 'bad_offset'; |
|
822
|
|
|
} |
|
823
|
|
|
|
|
824
|
|
|
return true; |
|
825
|
|
|
}, |
|
826
|
|
|
], |
|
827
|
|
|
'usertitle' => [ |
|
828
|
|
|
'type' => 'text', |
|
829
|
|
|
'label' => $txt['custom_title'], |
|
830
|
|
|
'log_change' => true, |
|
831
|
|
|
'input_attr' => ['maxlength="50"'], |
|
832
|
|
|
'size' => 50, |
|
833
|
|
|
'permission' => 'profile_title', |
|
834
|
|
|
'enabled' => !empty($modSettings['titlesEnable']), |
|
835
|
|
|
'input_validate' => static function ($value) { |
|
836
|
|
|
if (Util::strlen($value) > 50) |
|
837
|
|
|
{ |
|
838
|
|
|
return 'user_title_too_long'; |
|
839
|
|
|
} |
|
840
|
|
|
|
|
841
|
|
|
return true; |
|
842
|
|
|
}, |
|
843
|
|
|
], |
|
844
|
|
|
'website_title' => [ |
|
845
|
|
|
'type' => 'text', |
|
846
|
|
|
'label' => $txt['website_title'], |
|
847
|
|
|
'subtext' => $txt['include_website_url'], |
|
848
|
|
|
'size' => 50, |
|
849
|
|
|
'permission' => 'profile_extra', |
|
850
|
|
|
'link_with' => 'website', |
|
851
|
|
|
], |
|
852
|
|
|
'website_url' => [ |
|
853
|
|
|
'type' => 'url', |
|
854
|
|
|
'label' => $txt['website_url'], |
|
855
|
|
|
'subtext' => $txt['complete_url'], |
|
856
|
|
|
'size' => 50, |
|
857
|
|
|
'permission' => 'profile_extra', |
|
858
|
|
|
// Fix the URL... |
|
859
|
|
|
'input_validate' => static function (&$value) { |
|
860
|
|
|
$value = addProtocol($value, ['http://', 'https://', 'ftp://', 'ftps://']); |
|
861
|
|
|
if (strlen($value) < 8) |
|
862
|
|
|
{ |
|
863
|
|
|
$value = ''; |
|
864
|
|
|
} |
|
865
|
|
|
|
|
866
|
|
|
return true; |
|
867
|
|
|
}, |
|
868
|
|
|
'link_with' => 'website', |
|
869
|
|
|
], |
|
870
|
|
|
]; |
|
871
|
|
|
|
|
872
|
|
|
call_integration_hook('integrate_load_profile_fields', [&$profile_fields]); |
|
873
|
|
|
|
|
874
|
|
|
$disabled_fields = empty($modSettings['disabled_profile_fields']) ? [] : explode(',', $modSettings['disabled_profile_fields']); |
|
875
|
|
|
|
|
876
|
|
|
// Hard to imagine this won't be necessary |
|
877
|
|
|
require_once(SUBSDIR . '/Members.subs.php'); |
|
878
|
|
|
|
|
879
|
|
|
// For each of the above let's take out the bits which don't apply - to save memory and security! |
|
880
|
|
|
foreach ($profile_fields as $key => $field) |
|
881
|
|
|
{ |
|
882
|
|
|
// Do we have permission to do this? |
|
883
|
|
|
if (isset($field['permission']) && !allowedTo(($context['user']['is_owner'] ? [$field['permission'] . '_own', $field['permission'] . '_any'] : $field['permission'] . '_any')) && !allowedTo($field['permission'])) |
|
884
|
|
|
{ |
|
885
|
|
|
unset($profile_fields[$key]); |
|
886
|
|
|
} |
|
887
|
|
|
|
|
888
|
|
|
// Is it enabled? |
|
889
|
|
|
if (isset($field['enabled']) && !$field['enabled']) |
|
890
|
|
|
{ |
|
891
|
|
|
unset($profile_fields[$key]); |
|
892
|
|
|
} |
|
893
|
|
|
|
|
894
|
|
|
// Is it specifically disabled? |
|
895
|
|
|
if (in_array($key, $disabled_fields, true) || (isset($field['link_with']) && in_array($field['link_with'], $disabled_fields, true))) |
|
896
|
|
|
{ |
|
897
|
|
|
unset($profile_fields[$key]); |
|
898
|
|
|
} |
|
899
|
|
|
} |
|
900
|
|
|
} |
|
901
|
|
|
|
|
902
|
|
|
/** |
|
903
|
|
|
* Save the profile changes. |
|
904
|
|
|
* |
|
905
|
|
|
* @param string[] $fields |
|
906
|
|
|
* @param string $hook |
|
907
|
|
|
*/ |
|
908
|
|
|
public function saveProfileFields($fields, $hook): void |
|
909
|
|
|
{ |
|
910
|
|
|
global $profile_fields, $profile_vars, $context, $old_profile, $post_errors, $cur_profile; |
|
911
|
|
|
|
|
912
|
|
|
if (!empty($hook)) |
|
913
|
|
|
{ |
|
914
|
|
|
call_integration_hook('integrate_' . $hook . '_profile_fields', [&$fields]); |
|
915
|
|
|
} |
|
916
|
|
|
|
|
917
|
|
|
// Load them up. |
|
918
|
|
|
$this->loadProfileFields(); |
|
919
|
|
|
|
|
920
|
|
|
// This makes things easier... |
|
921
|
|
|
$old_profile = $cur_profile; |
|
922
|
|
|
|
|
923
|
|
|
// This allows variables to call activities when they save |
|
924
|
|
|
// - by default just to reload their settings |
|
925
|
|
|
$context['profile_execute_on_save'] = []; |
|
926
|
|
|
if ($context['user']['is_owner']) |
|
927
|
|
|
{ |
|
928
|
|
|
$context['profile_execute_on_save']['reload_user'] = 'profileReloadUser'; |
|
929
|
|
|
} |
|
930
|
|
|
|
|
931
|
|
|
// Assume we log nothing. |
|
932
|
|
|
$context['log_changes'] = []; |
|
933
|
|
|
|
|
934
|
|
|
// Cycle through the profile fields working out what to do! |
|
935
|
|
|
foreach ($fields as $key) |
|
936
|
|
|
{ |
|
937
|
|
|
if (!isset($profile_fields[$key])) |
|
938
|
|
|
{ |
|
939
|
|
|
continue; |
|
940
|
|
|
} |
|
941
|
|
|
|
|
942
|
|
|
$field = $profile_fields[$key]; |
|
943
|
|
|
|
|
944
|
|
|
if (!isset($_POST[$key]) || !empty($field['is_dummy']) || (isset($_POST['preview_signature']) && $key === 'signature')) |
|
945
|
|
|
{ |
|
946
|
|
|
continue; |
|
947
|
|
|
} |
|
948
|
|
|
|
|
949
|
|
|
// What gets updated? |
|
950
|
|
|
$db_key = $field['save_key'] ?? $key; |
|
951
|
|
|
|
|
952
|
|
|
// Right - we have something that is enabled, we can act upon and has a value |
|
953
|
|
|
// posted to it. Does it have a validation function? |
|
954
|
|
|
if (isset($field['input_validate'])) |
|
955
|
|
|
{ |
|
956
|
|
|
$is_valid = $field['input_validate']($_POST[$key]); |
|
957
|
|
|
|
|
958
|
|
|
// An error occurred - set it as such! |
|
959
|
|
|
if ($is_valid !== true) |
|
960
|
|
|
{ |
|
961
|
|
|
// Is this an actual error? |
|
962
|
|
|
if ($is_valid !== false) |
|
963
|
|
|
{ |
|
964
|
|
|
$post_errors[$key] = $is_valid; |
|
965
|
|
|
$profile_fields[$key]['is_error'] = $is_valid; |
|
966
|
|
|
} |
|
967
|
|
|
|
|
968
|
|
|
// Retain the old value. |
|
969
|
|
|
$cur_profile[$key] = $_POST[$key]; |
|
970
|
|
|
continue; |
|
971
|
|
|
} |
|
972
|
|
|
} |
|
973
|
|
|
|
|
974
|
|
|
// Are we doing a cast? |
|
975
|
|
|
$field['cast_type'] = empty($field['cast_type']) ? $field['type'] : $field['cast_type']; |
|
976
|
|
|
|
|
977
|
|
|
// Finally, clean up certain types. |
|
978
|
|
|
if ($field['cast_type'] === 'int') |
|
979
|
|
|
{ |
|
980
|
|
|
$_POST[$key] = (int) $_POST[$key]; |
|
981
|
|
|
} |
|
982
|
|
|
elseif ($field['cast_type'] === 'float') |
|
983
|
|
|
{ |
|
984
|
|
|
$_POST[$key] = (float) $_POST[$key]; |
|
985
|
|
|
} |
|
986
|
|
|
elseif ($field['cast_type'] === 'check') |
|
987
|
|
|
{ |
|
988
|
|
|
$_POST[$key] = empty($_POST[$key]) ? 0 : 1; |
|
989
|
|
|
} |
|
990
|
|
|
|
|
991
|
|
|
// If we got here we're doing OK. |
|
992
|
|
|
if ($field['type'] !== 'hidden' && (!isset($old_profile[$key]) || $_POST[$key] != $old_profile[$key])) |
|
993
|
|
|
{ |
|
994
|
|
|
// Set the save variable. |
|
995
|
|
|
$profile_vars[$db_key] = $_POST[$key]; |
|
996
|
|
|
|
|
997
|
|
|
// And update the user profile. |
|
998
|
|
|
$cur_profile[$key] = $_POST[$key]; |
|
999
|
|
|
|
|
1000
|
|
|
// Are we logging it? |
|
1001
|
|
|
if (!empty($field['log_change']) && isset($old_profile[$key])) |
|
1002
|
|
|
{ |
|
1003
|
|
|
$context['log_changes'][$key] = [ |
|
1004
|
|
|
'previous' => $old_profile[$key], |
|
1005
|
|
|
'new' => $_POST[$key], |
|
1006
|
|
|
]; |
|
1007
|
|
|
} |
|
1008
|
|
|
} |
|
1009
|
|
|
|
|
1010
|
|
|
// Logging group changes are a bit different... |
|
1011
|
|
|
if ($key === 'id_group' && $field['log_change']) |
|
1012
|
|
|
{ |
|
1013
|
|
|
profileLoadGroups(); |
|
1014
|
|
|
|
|
1015
|
|
|
// Any changes to primary group? |
|
1016
|
|
|
if ((int) $_POST['id_group'] !== (int) $old_profile['id_group']) |
|
1017
|
|
|
{ |
|
1018
|
|
|
$context['log_changes']['id_group'] = [ |
|
1019
|
|
|
'previous' => !empty($old_profile[$key]) && isset($context['member_groups'][$old_profile[$key]]) ? $context['member_groups'][$old_profile[$key]]['name'] : '', |
|
1020
|
|
|
'new' => !empty($_POST[$key]) && isset($context['member_groups'][$_POST[$key]]) ? $context['member_groups'][$_POST[$key]]['name'] : '', |
|
1021
|
|
|
]; |
|
1022
|
|
|
} |
|
1023
|
|
|
|
|
1024
|
|
|
// Prepare additional groups for comparison. |
|
1025
|
|
|
$additional_groups = [ |
|
1026
|
|
|
'previous' => empty($old_profile['additional_groups']) ? [] : explode(',', $old_profile['additional_groups']), |
|
1027
|
|
|
'new' => empty($_POST['additional_groups']) ? [] : array_diff($_POST['additional_groups'], [0]), |
|
1028
|
|
|
]; |
|
1029
|
|
|
|
|
1030
|
|
|
sort($additional_groups['previous']); |
|
1031
|
|
|
sort($additional_groups['new']); |
|
1032
|
|
|
|
|
1033
|
|
|
// What about additional groups? |
|
1034
|
|
|
if ($additional_groups['previous'] !== $additional_groups['new']) |
|
1035
|
|
|
{ |
|
1036
|
|
|
foreach ($additional_groups as $type => $groups) |
|
1037
|
|
|
{ |
|
1038
|
|
|
foreach ($groups as $id => $group) |
|
1039
|
|
|
{ |
|
1040
|
|
|
if (isset($context['member_groups'][$group])) |
|
1041
|
|
|
{ |
|
1042
|
|
|
$additional_groups[$type][$id] = $context['member_groups'][$group]['name']; |
|
1043
|
|
|
} |
|
1044
|
|
|
else |
|
1045
|
|
|
{ |
|
1046
|
|
|
unset($additional_groups[$type][$id]); |
|
1047
|
|
|
} |
|
1048
|
|
|
} |
|
1049
|
|
|
|
|
1050
|
|
|
$additional_groups[$type] = implode(', ', $additional_groups[$type]); |
|
1051
|
|
|
} |
|
1052
|
|
|
|
|
1053
|
|
|
$context['log_changes']['additional_groups'] = $additional_groups; |
|
1054
|
|
|
} |
|
1055
|
|
|
} |
|
1056
|
|
|
} |
|
1057
|
|
|
|
|
1058
|
|
|
// @todo Temporary |
|
1059
|
|
|
if ($context['user']['is_owner']) |
|
1060
|
|
|
{ |
|
1061
|
|
|
$changeOther = allowedTo(['profile_extra_any', 'profile_extra_own']); |
|
1062
|
|
|
} |
|
1063
|
|
|
else |
|
1064
|
|
|
{ |
|
1065
|
|
|
$changeOther = allowedTo('profile_extra_any'); |
|
1066
|
|
|
} |
|
1067
|
|
|
|
|
1068
|
|
|
if ($changeOther && empty($post_errors)) |
|
1069
|
|
|
{ |
|
1070
|
|
|
makeThemeChanges($context['id_member'], isset($_POST['id_theme']) ? (int) $_POST['id_theme'] : $old_profile['id_theme']); |
|
1071
|
|
|
if (!empty($_REQUEST['sa'])) |
|
1072
|
|
|
{ |
|
1073
|
|
|
makeCustomFieldChanges($context['id_member'], $_REQUEST['sa'], false); |
|
1074
|
|
|
} |
|
1075
|
|
|
} |
|
1076
|
|
|
|
|
1077
|
|
|
// Free memory! |
|
1078
|
|
|
unset($profile_fields); |
|
1079
|
|
|
} |
|
1080
|
|
|
|
|
1081
|
|
|
/** |
|
1082
|
|
|
* Validate an email address. |
|
1083
|
|
|
* |
|
1084
|
|
|
* @param string $email |
|
1085
|
|
|
* @param int $memID = 0 |
|
1086
|
|
|
* |
|
1087
|
|
|
* @return bool|string |
|
1088
|
|
|
*/ |
|
1089
|
|
|
public static function profileValidateEmail($email, $memID = 0) |
|
1090
|
|
|
{ |
|
1091
|
|
|
// Check the name and email for validity. |
|
1092
|
|
|
$check = []; |
|
1093
|
|
|
$check['email'] = strtr($email, [''' => "'"]); |
|
1094
|
|
|
if (DataValidator::is_valid($check, ['email' => 'valid_email|required'], ['email' => 'trim'])) |
|
1095
|
|
|
{ |
|
1096
|
|
|
$email = $check['email']; |
|
1097
|
|
|
} |
|
1098
|
|
|
else |
|
1099
|
|
|
{ |
|
1100
|
|
|
return empty($check['email']) ? 'no_email' : 'bad_email'; |
|
1101
|
|
|
} |
|
1102
|
|
|
|
|
1103
|
|
|
// Email addresses should be and stay unique. |
|
1104
|
|
|
$num = isUniqueEmail($memID, $email); |
|
1105
|
|
|
|
|
1106
|
|
|
return ($num > 0) ? 'email_taken' : true; |
|
1107
|
|
|
} |
|
1108
|
|
|
|
|
1109
|
|
|
/** |
|
1110
|
|
|
* Get the WHERE clause for retrieving profile fields. |
|
1111
|
|
|
* |
|
1112
|
|
|
* @param string $area |
|
1113
|
|
|
* @param int $memID |
|
1114
|
|
|
* @return string |
|
1115
|
|
|
*/ |
|
1116
|
|
|
public function getProfileFieldWhereClause(string $area, int $memID): string |
|
1117
|
|
|
{ |
|
1118
|
|
|
// Get the right restrictions in place... |
|
1119
|
|
|
$where = 'active = 1'; |
|
1120
|
|
|
if ($area !== 'register' && !allowedTo('admin_forum')) |
|
1121
|
|
|
{ |
|
1122
|
|
|
// If it's the owner they can see two types of private fields, regardless. |
|
1123
|
|
|
if ($memID === User::$info->id) |
|
|
|
|
|
|
1124
|
|
|
{ |
|
1125
|
|
|
$where .= $area === 'summary' ? ' AND private < 3' : ' AND (private = 0 OR private = 2)'; |
|
1126
|
|
|
} |
|
1127
|
|
|
else |
|
1128
|
|
|
{ |
|
1129
|
|
|
$where .= $area === 'summary' ? ' AND private < 2' : ' AND private = 0'; |
|
1130
|
|
|
} |
|
1131
|
|
|
} |
|
1132
|
|
|
|
|
1133
|
|
|
if ($area === 'register') |
|
1134
|
|
|
{ |
|
1135
|
|
|
$where .= ' AND show_reg != 0'; |
|
1136
|
|
|
} |
|
1137
|
|
|
elseif ($area !== 'summary') |
|
1138
|
|
|
{ |
|
1139
|
|
|
$where .= ' AND show_profile = {string:area}'; |
|
1140
|
|
|
} |
|
1141
|
|
|
|
|
1142
|
|
|
return $where; |
|
1143
|
|
|
} |
|
1144
|
|
|
|
|
1145
|
|
|
/** |
|
1146
|
|
|
* Do any post-processing to the output HTML for custom fields. |
|
1147
|
|
|
* |
|
1148
|
|
|
* @param array $row |
|
1149
|
|
|
* @param string $output_html |
|
1150
|
|
|
* @param string $key |
|
1151
|
|
|
* |
|
1152
|
|
|
* @return string |
|
1153
|
|
|
*/ |
|
1154
|
|
|
public function postProcessOutputHtml($row, $output_html, $key): string |
|
1155
|
|
|
{ |
|
1156
|
|
|
global $scripturl, $settings; |
|
1157
|
|
|
|
|
1158
|
|
|
// Parse BBCode |
|
1159
|
|
|
if ($row['bbc']) |
|
1160
|
|
|
{ |
|
1161
|
|
|
$bbc_parser = ParserWrapper::instance(); |
|
1162
|
|
|
|
|
1163
|
|
|
$output_html = $bbc_parser->parseCustomFields($output_html); |
|
1164
|
|
|
} |
|
1165
|
|
|
// Allow for newlines at least |
|
1166
|
|
|
elseif ($row['field_type'] === 'textarea') |
|
1167
|
|
|
{ |
|
1168
|
|
|
$output_html = strtr($output_html, ["\n" => '<br />']); |
|
1169
|
|
|
} |
|
1170
|
|
|
|
|
1171
|
|
|
// Enclosing the user input within some other text? |
|
1172
|
|
|
if (!empty($row['enclose']) && !empty($output_html)) |
|
1173
|
|
|
{ |
|
1174
|
|
|
$replacements = [ |
|
1175
|
|
|
'{SCRIPTURL}' => $scripturl, |
|
1176
|
|
|
'{IMAGES_URL}' => $settings['images_url'], |
|
1177
|
|
|
'{DEFAULT_IMAGES_URL}' => $settings['default_images_url'], |
|
1178
|
|
|
'{INPUT}' => $output_html, |
|
1179
|
|
|
]; |
|
1180
|
|
|
|
|
1181
|
|
|
if (in_array($row['field_type'], ['radio', 'select'])) |
|
1182
|
|
|
{ |
|
1183
|
|
|
$replacements['{KEY}'] = $row['col_name'] . '_' . ($key ?? 0); |
|
1184
|
|
|
} |
|
1185
|
|
|
|
|
1186
|
|
|
$output_html = strtr($row['enclose'], $replacements); |
|
1187
|
|
|
} |
|
1188
|
|
|
|
|
1189
|
|
|
return $output_html; |
|
1190
|
|
|
} |
|
1191
|
|
|
} |
|
1192
|
|
|
|