Security line in all includes changed
[mailer.git] / inc / modules / admin / what-list_user.php
1 <?php
2 /************************************************************************
3  * MXChange v0.2.1                                    Start: 09/28/2003 *
4  * ===============                              Last change: 08/18/2004 *
5  *                                                                      *
6  * -------------------------------------------------------------------- *
7  * File              : what-list_user.php                               *
8  * -------------------------------------------------------------------- *
9  * Short description : List all or partial members                      *
10  * -------------------------------------------------------------------- *
11  * Kurzbeschreibung  : Alle oder nur bestimmte Mitglieder auflisten     *
12  * -------------------------------------------------------------------- *
13  *                                                                      *
14  * -------------------------------------------------------------------- *
15  * Copyright (c) 2003 - 2008 by Roland Haeder                           *
16  * For more information visit: http://www.mxchange.org                  *
17  *                                                                      *
18  * This program is free software; you can redistribute it and/or modify *
19  * it under the terms of the GNU General Public License as published by *
20  * the Free Software Foundation; either version 2 of the License, or    *
21  * (at your option) any later version.                                  *
22  *                                                                      *
23  * This program is distributed in the hope that it will be useful,      *
24  * but WITHOUT ANY WARRANTY; without even the implied warranty of       *
25  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the        *
26  * GNU General Public License for more details.                         *
27  *                                                                      *
28  * You should have received a copy of the GNU General Public License    *
29  * along with this program; if not, write to the Free Software          *
30  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston,               *
31  * MA  02110-1301  USA                                                  *
32  ************************************************************************/
33
34 // Some security stuff...
35 if ((!defined('__SECURITY')) || (!IS_ADMIN())) {
36         $INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), "/inc") + 4) . "/security.php";
37         require($INC);
38 } elseif ((!EXT_IS_ACTIVE("user")) || (GET_EXT_VERSION("user") == "")) {
39         // Missing extension!
40         ADD_FATAL(sprintf(EXTENSION_PROBLEM_NOT_INSTALLED, "user"));
41         return;
42 }
43
44 // Add description as navigation point
45 ADD_DESCR("admin", basename(__FILE__));
46
47 // Init title with "all accounts"
48 $listHeader = ADMIN_ALL_ACCOUNTS;
49 if (!empty($_GET['mode'])) {
50         // Set title according to the "mode"
51         $eval = sprintf("\$listHeader = ADMIN_LIST_%s_ACCOUNTS;", strtoupper(SQL_ESCAPE($_GET['mode'])));
52         eval($eval);
53 }
54
55 // Remember it
56 define('__TITLE', $listHeader);
57
58 $MORE = ", userid"; $colspan = "4"; //                 27
59 if (EXT_IS_ACTIVE("nickname")) { $MORE = ", nickname"; }
60
61 if (empty($_GET['letter'])) { $_GET['letter'] = _ALL2;    }
62 if (empty($_GET['sortby'])) { $_GET['sortby'] = "userid"; }
63 if (empty($_GET['page']))   { $_GET['page']   = "1";      }
64
65 // Set base URL
66 $BASE = "<A href=\"".URL."/modules.php?module=admin";
67
68 if (!empty($_GET['u_id']))
69 {
70         // Secure the user ID
71         $uid = bigintval($_GET['u_id']);
72
73         // Does the account exists?       0      1        2         3      4     5      6       7         8          9          10           11           12         13     14         15           16          17            18           19           20           21        22        23             24              25         26
74         $result = SQL_QUERY_ESC("SELECT gender, surname, family, street_nr, zip, city, country, email, birth_day, birth_month, birth_year, max_mails, receive_mails, refid, status, REMOTE_ADDR, last_online, last_module, ref_clicks, total_logins, used_points, emails_sent, joined, last_update, last_profile_sent, notified, ref_payout".$MORE."
75 FROM "._MYSQL_PREFIX."_user_data
76 WHERE userid=%s LIMIT 1",
77          array($uid), __FILE__, __LINE__);
78         if (SQL_NUMROWS($result) == 1)
79         {
80                 // Account found!
81                 $DATA  = SQL_FETCHROW($result);
82                 SQL_FREERESULT($result);
83
84                 $REFS  = GET_TOTAL_DATA($uid, "refsystem", "counter");
85                 $CATS  = GET_TOTAL_DATA($uid, "user_cats", "id", "userid", true);
86                 $LINKS = GET_TOTAL_DATA($uid, "user_links", "id", "userid", true);
87
88                 if ($LINKS > 0) $LINKS = $BASE."&amp;what=list_links&amp;u_id=".$uid."\">".$LINKS."</A>";
89                 if ($DATA[13] > 0) $DATA[13] = str_replace(("u_id=".$uid), ("u_id=".$DATA[13]), $BASE."&amp;what=list_user\">".$DATA[13]."</A>");
90                 if (empty($DATA[17])) $DATA[17] = "---";
91                 if ($REFS > 0)  $REFS = $BASE."&amp;what=list_refs&amp;u_id=".$uid."\">".$REFS."</A></STRONG>";
92                 if ($CATS > 0) $CATS = $BASE."&amp;what=list_cats&amp;u_id=".$uid."\">".$CATS."</A>";
93
94                 // Prepare data for template
95                 define('_BIRTHDAY', MAKE_DATETIME(mktime(0, 0, 0, $DATA[9], $DATA[8], $DATA[10]), "3"));
96                 define('_REFS' , $REFS);
97                 define('_CATS' , $CATS);
98                 define('_LINKS', $LINKS);
99                 define('_ADMIN_LINKS', MEMBER_ACTION_LINKS($uid, $DATA[14]));
100                 $DATA[0]      = TRANSLATE_GENDER($DATA[0]);
101                 $DATA[28]     = CREATE_EMAIL_LINK($DATA[7], "user_data");
102                 $DATA[14]     = TRANSLATE_STATUS($DATA[14]);
103                 $DATA[16]     = MAKE_DATETIME($DATA[16], "0");
104                 $DATA[20]     = TRANSLATE_COMMA($DATA[20]);
105                 if ($DATA[21] > 0) $DATA[21] = $BASE."&amp;what=email_details&amp;u_id=".$uid."\">".$DATA[21]."</A>";
106                 $DATA[22]     = MAKE_DATETIME($DATA[22], "0");
107                 $DATA[23]     = MAKE_DATETIME($DATA[23], "0");
108                 $DATA[24]     = MAKE_DATETIME($DATA[24], "0");
109                 if ((empty($DATA[27])) || ($DATA[27] == $uid)) $DATA[27] = "---";
110                 $DATA['total']  = TRANSLATE_COMMA(GET_TOTAL_DATA($uid, "user_points", "points"));
111                 $DATA['locked'] = TRANSLATE_COMMA(GET_TOTAL_DATA($uid, "user_points", "locked_points"));
112
113                 if (EXT_IS_ACTIVE("nickname")) {
114                         if ((empty($DATA[27])) || ($DATA[27] == $uid)) $DATA[27] = "---";
115                 } else {
116                         $DATA[27] = EXT_NICKNAME_404;
117                 }
118
119                 // Template laden
120                 LOAD_TEMPLATE("admin_user_details", false, $uid);
121         }
122          else
123         {
124                 // Account does not exists!
125                 LOAD_TEMPLATE("admin_settings_saved", false, ADMIN_MEMBER_404_1.$uid.ADMIN_MEMBER_404_2);
126         }
127 }
128  else
129 {
130         $whereStatement = "";
131         if (($_GET['letter'] != _ALL2) && ($_GET['letter'] != _OTHERS) && (!empty($_GET['letter'])))
132         {
133                 // List only persons w
134                 $whereStatement = " WHERE family LIKE '".$_GET['letter']."%'";
135         }
136         if ($_GET['sortby'] == "family_name") $_GET['sortby'] = "family";
137
138         // Parse the mode parameter
139         if (isset($_GET['mode'])) {
140                 // Is a WHERE statement already there?
141                 if (!empty($whereStatement)) {
142                         // Then append the status column
143                         $whereStatement .= sprintf(" AND status='%s'", SQL_ESCAPE(strip_tags(strtoupper($_GET['mode']))));
144                 } else {
145                         // Start a new one
146                         $whereStatement = sprintf(" WHERE status='%s'", SQL_ESCAPE(strip_tags(strtoupper($_GET['mode']))));
147                 }
148         }
149
150         $SQL = "SELECT userid, gender, surname, family, email, REMOTE_ADDR, refid, status".$MORE." FROM "._MYSQL_PREFIX."_user_data".$whereStatement." ORDER BY ".$_GET['sortby'];
151         $result_master = SQL_QUERY($SQL, __FILE__, __LINE__);
152
153         // Calculate page count (0.5 fixes a bug with page count)
154         if ($_CONFIG['user_limit'] == 0) {
155                 $_CONFIG['user_limit'] = 100;
156                 LOAD_TEMPLATE("admin_settings_saved", false, EXTENSION_WARNING_USER_LIMIT);
157         }
158
159         // Activate the extension please!
160         $PAGES = round(SQL_NUMROWS($result_master) / $_CONFIG['user_limit'] + 0.5);
161
162         if (empty($_GET['page']))   $_GET['page']   = "1";
163         if (empty($_GET['offset'])) $_GET['offset'] = $_CONFIG['user_limit'];
164
165         // Add limitation to SQL string and run him again
166         $SQL .= " LIMIT ".($_GET['offset'] * $_GET['page'] - $_GET['offset']).", ".$_GET['offset'];
167         $result = SQL_QUERY($SQL, __FILE__, __LINE__);
168
169         $result_user = SQL_QUERY("SELECT emails_sent FROM "._MYSQL_PREFIX."_user_data WHERE status='CONFIRMED'", __FILE__, __LINE__);
170         $user_count = SQL_NUMROWS($result_user);
171         SQL_FREERESULT($result_user);
172
173         if (SQL_NUMROWS($result_master) > 0)
174         {
175                 // Free memory
176                 SQL_FREERESULT($result_master);
177
178                 // We have some (new?) registrations!
179                 define('__COLSPAN1'  , $colspan);
180                 define('__COLSPAN2'  , ($colspan + 2));
181                 define('__USER_CNT'  , $user_count);
182
183                 if ((function_exists('alpha')) && (function_exists('SortLinks'))) {
184                         define('__ALPHA_SORT', alpha($_GET['sortby'], $colspan, true));
185                         define('__SORT_LINKS', SortLinks($_GET['letter'], $_GET['sortby'], $colspan, true));
186                 } else {
187                         define('__ALPHA_SORT', "");
188                         define('__SORT_LINKS', "");
189                 }
190
191                 if ($PAGES > 1) {
192                         define('__PAGE_NAV', ADD_PAGENAV($PAGES, $_CONFIG['user_limit'], true, $colspan, true));
193                 } else {
194                         // No page navigation is required
195                         define('__PAGE_NAV', "");
196                 }
197
198                 // Column with nickname when nickname extension is present
199                 if (EXT_IS_ACTIVE("nickname"))
200                 {
201                         // Nickname extension found
202                         define('__NICKNAME_TH', "  <TD class=\"admin_title bottom2\" align=\"center\">".NICKNAME."</TD>");
203                 }
204                  else
205                 {
206                         // Not found
207                         define('__NICKNAME_TH', "");
208                 }
209
210                 $SW = 2; $OUT = "";
211                 while (list($uid, $gender, $sname, $fname, $email, $IP, $ref, $status, $nick) = SQL_FETCHROW($result))
212                 {
213                         if ($ref > 0) $ref = ADMIN_USER_PROFILE_LINK($ref);
214                         $LINKS = TRANSLATE_COMMA(GET_TOTAL_DATA($uid, "user_links", "id", "userid", true));
215                         if ($LINKS > 0) $LINKS = $BASE."&amp;what=list_links&amp;u_id=".$uid."\">".$LINKS."</A>";
216
217                         // Add nickname
218                         if (empty($nick) || $nick == $uid) $nick = "---";
219
220                         // Transfer data to array
221                         $content = array(
222                                 'sw'     => $SW,
223                                 'uid'    => ADMIN_USER_PROFILE_LINK($uid),
224                                 'gender' => TRANSLATE_GENDER($gender),
225                                 'sname'  => $sname,
226                                 'fname'  => $fname,
227                                 'email'  => "<A href=\"".CREATE_EMAIL_LINK($email, "user_data")."\">".$email."</A>",
228                                 'addr'   => $IP,
229                                 'ref'    => $ref,
230                                 'status' => TRANSLATE_STATUS($status),
231                                 'links'  => $LINKS,
232                                 'nick'   => $nick,
233                                 'alinks' => MEMBER_ACTION_LINKS($uid, $status)
234                         );
235
236                         // Load row template and switch colors
237                         $OUT .= LOAD_TEMPLATE("admin_list_user_row", true, $content);
238                         $SW = 3 - $SW;
239                 }
240
241                 // Free memory
242                 SQL_FREERESULT($result);
243
244                 define('__USER_ROWS', $OUT);
245
246                 // Load main template
247                 LOAD_TEMPLATE("admin_list_user");
248
249                 // Free some memory
250                 SQL_FREERESULT($result_master);
251         }
252          else
253         {
254                 // No one as registered so far! :-(
255                 LOAD_TEMPLATE("admin_settings_saved", false, ADMIN_NO_NONE_REGISTERED);
256         }
257 }
258
259 //
260 ?>