X-Git-Url: https://git.mxchange.org/?p=mailer.git;a=blobdiff_plain;f=inc%2Flibs%2Fuser_functions.php;h=517f0ebdd3bac261128c507becdce894c5515509;hp=faa279ca7d988c97fbbe148e18c1e22d655f6872;hb=f2aeaab0cd313b2eeb151642455ed558f6b186dc;hpb=2fcca56060d097bb6b12437d224296386447d97b diff --git a/inc/libs/user_functions.php b/inc/libs/user_functions.php index faa279ca7d..517f0ebdd3 100644 --- a/inc/libs/user_functions.php +++ b/inc/libs/user_functions.php @@ -1,7 +1,7 @@ ".$ltr.""; - } - else - { + $OUT .= '' . $ltr . ''; + } else { // Output link to letter - $OUT .= "".$ltr.""; + $OUT .= '' . $ltr . ''; } - if ((($counter / $_CONFIG['user_alpha']) == round($counter / $_CONFIG['user_alpha'])) && ($counter > 0)) - { - $OUT .= " ]
[ "; - } - elseif ( $counter != $num ) - { - $OUT .= " | "; + + if ((($counter / getConfig('user_alpha')) == round($counter / getConfig('user_alpha'))) && ($counter > 0)) { + $OUT .= ']
['; + } elseif ( $counter != $num ) { + $OUT .= '|'; } - } - define('__ALPHA_LIST', $OUT); + } // END - while + + // Prepare content + $content = array ( + 'colspan2' => $colspan, + 'alpha_selection' => $OUT + ); // Load template - $OUT = LOAD_TEMPLATE("admin_list_user_alpha", true); - if ($return) - { + $OUT = loadTemplate('admin_list_user_alpha', true, $content); + if ($return === true) { // Return generated code return $OUT; - } - else - { + } else { // Output generated code - OUTPUT_HTML($OUT); + outputHtml($OUT); } } // Add links for sorting -function SortLinks($letter, $sortby, $colspan, $return=false) -{ - $OUT = ""; - if (empty($_GET['offset'])) $_GET['offset'] = 0; - $ADD = "&page=".$_GET['page']."&offset=".$_GET['offset']; - if (!empty($_GET['mode'])) $ADD .= "&mode=".SQL_ESCAPE($_GET['mode']); +function addSortLinks ($letter, $sortby, $colspan, $return=false) { + $OUT = ''; + if (!isGetRequestParameterSet('offset')) setGetRequestParameter('offset', 0); + if (!isGetRequestParameterSet('page')) setGetRequestParameter('page' , 0); + + // Add page and offset + $add = '&page=' . getRequestParameter('page') . '&offset=' . getRequestParameter('offset'); + + // Add status or mode + if (isGetRequestParameterSet('status')) $add .= '&mode=' . getRequestParameter('status'); + elseif (isGetRequestParameterSet('mode')) $add .= '&mode=' . getRequestParameter('mode'); // Makes order by links.. - if ($letter == "front") $letter = _ALL2; + if ($letter == 'front') $letter = '{--_ALL2--}'; // Prepare array with all possible sorters $list = array( - 'userid' => _UID, - 'family' => FAMILY_NAME, - 'email' => ADDY, - 'REMOTE_ADDR' => REMOTE_IP + 'userid' => getMessage('_UID'), + 'family' => getMessage('FAMILY'), + 'email' => getMessage('EMAIL'), + 'REMOTE_ADDR' => getMessage('REMOTE_IP') ); // Add nickname if extension is installed - if (EXT_IS_ACTIVE("nickname")) { - $list['nickname'] = NICKNAME; - } + if (isExtensionActive('nickname')) { + $list['nickname'] = '{--NICKNAME--}'; + } // END - if foreach ($list as $sort => $title) { if ($sortby == $sort) { - $OUT .= "".$title." | "; + $OUT .= '' . $title . '|'; } else { - $OUT .= "".$title." | "; + $OUT .= '' . $title . '|'; } - } - define('__SORT_LIST', substr($OUT, 0, -13)); + } // END - foreach + + // Add list and colspan + $content['list'] = substr($OUT, 0, -13); + $content['colspan2'] = $colspan; // Load template - $OUT = LOAD_TEMPLATE("admin_list_user_sort", true); - if ($return) - { + $OUT = loadTemplate('admin_list_user_sort', true, $content); + + // Should we return or output? + if ($return === true) { // Return code return $OUT; - } - else - { + } else { // Output code - OUTPUT_HTML($OUT); + outputHtml($OUT); } } // Add page navigation -function ADD_PAGENAV($PAGES, $offset, $show_form, $colspan,$return=false) -{ - if (!$show_form) - { - // Empty row - define('__FORM_HEADER', " "); - } - else - { - // Load form for changing number of lines - define('__FORM_HEADER', LOAD_TEMPLATE("admin_list_user_sort_form", true)); - } - if (!$show_form) - { - // Add line with bottom border - define('__FORM_FOOTER', " "); - } - else - { - // Add line without bottom border - define('__FORM_FOOTER', " "); - } +function addPageNavigation ($numPages, $offset, $showForm, $colspan, $return=false) { + // @TODO These two constants are no longer used, maybe we reactivate this code? + //if ($showForm === true) { + // // Load form for changing number of lines + // define('__FORM_HEADER', loadTemplate('admin_list_user_sort_form', true)); + // define('__FORM_FOOTER', ' '); + //} else { + // // Empty row + // define('__FORM_HEADER', ' '); + // define('__FORM_FOOTER', ' '); + //} - $OUT = ""; - for ($page = 1; $page <= $PAGES; $page++) - { - if (($page == $_GET['page']) || ((empty($_GET['page'])) && ($page == "1"))) - { - $OUT .= "-"; - } - else - { - if (empty($_GET['letter'])) $_GET['letter'] = _ALL2; - if (empty($_GET['sortby'])) $_GET['sortby'] = "userid"; - $OUT .= ""; + $OUT = ''; + for ($page = 1; $page <= $numPages; $page++) { + if (($page == getRequestParameter('page')) || ((!isGetRequestParameterSet('page')) && ($page == 1))) { + $OUT .= '-'; + } else { + if (!isGetRequestParameterSet('letter')) setGetRequestParameter('letter', getMessage('_ALL2')); + if (!isGetRequestParameterSet('sortby')) setGetRequestParameter('sortby', 'userid'); + + // Base link + $OUT .= ''; } + $OUT .= $page; - if (($page == $_GET['page']) || ((empty($_GET['page'])) && ($page == "1"))) - { - $OUT .= "-"; - } - else - { - $OUT .= ""; + + if (($page == getRequestParameter('page')) || ((!isGetRequestParameterSet('page')) && ($page == 1))) { + $OUT .= '-'; + } else { + $OUT .= ''; } - if ($page < $PAGES) $OUT .= " | "; - } - define('__PAGENAV_LIST', $OUT); + + if ($page < $numPages) $OUT .= '|'; + } // END - for + + // Remember the list and colspan + $content['list'] = $OUT; + $content['colspan2'] = $colspan; // Load template - $OUT = LOAD_TEMPLATE("admin_list_user_pagenav", true); - if ($return) - { + $OUT = loadTemplate('admin_list_user_pagenav', true, $content); + if ($return === true) { // Return code return $OUT; - } - else - { + } else { // Output code - OUTPUT_HTML($OUT); + outputHtml($OUT); } } // Create email link to user's account -function USER_CREATE_EMAIL_LINK($email, $mod="admin") -{ - $locked = " AND status='CONFIRMED'"; - if (IS_ADMIN()) $locked = ""; - $result = SQL_QUERY_ESC("SELECT userid -FROM "._MYSQL_PREFIX."_user_data -WHERE email='%s'".$locked." LIMIT 1", - array($email), __FILE__, __LINE__); - if (SQL_NUMROWS($result) == 1) - { +function generateUserEmailLink($email, $mod = 'admin') { + // Show contact link only if user is confirmed by default + $locked = " AND `status`='CONFIRMED'"; + + // But admins shall always see it + if (isAdmin()) $locked = ''; + + $result = SQL_QUERY_ESC("SELECT + `userid` +FROM + `{?_MYSQL_PREFIX?}_user_data` +WHERE + `email`='%s'" . $locked." +LIMIT 1", + array($email), __FUNCTION__, __LINE__); + if (SQL_NUMROWS($result) == 1) { // Load userid - list($uid) = SQL_FETCHROW($result); + list($userid) = SQL_FETCHROW($result); // Rewrite email address to contact link - $email = URL."/modules.php?module=".$mod."&what=user_contct&u_id=".bigintval($uid); - } + $email = '{%url=modules.php?module=' . $mod . '&what=user_contct&userid=' . bigintval($userid) . '%}'; + } // END - if // Free memory SQL_FREERESULT($result); @@ -227,16 +231,15 @@ WHERE email='%s'".$locked." LIMIT 1", } // Selects a random user id as the new referal id if they have at least X confirmed mails in this run -function SELECT_RANDOM_REFID () { - global $_CONFIG; - +// @TODO Double-check configuration entry here +function determineRandomReferalId () { // Default is zero refid - $refid = 0; + $refid = '0'; // Is the extension version fine? - if (GET_EXT_VERSION("user") >= "0.3.4") { + if (isExtensionInstalledAndNewer('user', '0.3.4')) { // Get all user ids - $totalUsers = GET_TOTAL_DATA("CONFIRMED", "user_data", "userid", "status", true, " AND `rand_confirmed` >= ".$_CONFIG['user_min_confirmed'].""); + $totalUsers = countSumTotalData('CONFIRMED', 'user_data', 'userid', 'status', true, " AND `rand_confirmed` >= {?user_min_confirmed?}"); // Do we have at least one? if ($totalUsers > 0) { @@ -244,8 +247,8 @@ function SELECT_RANDOM_REFID () { $randNum = mt_rand(0, ($totalUsers - 1)); // Look for random user - $result = SQL_QUERY_ESC("SELECT `userid` FROM `"._MYSQL_PREFIX."_user_data` WHERE `status`='CONFIRMED' AND `rand_confirmed` >= %s ORDER BY `rand_confirmed` DESC LIMIT %s, 1", - array($_CONFIG['user_min_confirmed'], $randNum), __FILE__, __LINE__); + $result = SQL_QUERY_ESC("SELECT `userid` FROM `{?_MYSQL_PREFIX?}_user_data` WHERE `status`='CONFIRMED' AND `rand_confirmed` >= {?user_min_confirmed?} ORDER BY `rand_confirmed` DESC LIMIT %s, 1", + array($randNum), __FUNCTION__, __LINE__); // Do we have one entry there? if (SQL_NUMROWS($result) == 1) { @@ -253,8 +256,8 @@ function SELECT_RANDOM_REFID () { list($refid) = SQL_FETCHROW($result); // Reset this user's counter - SQL_QUERY_ESC("UPDATE `"._MYSQL_PREFIX."_iser_data` SET `rand_confirmed`=0 WHERE userid=%s LIMIT 1", - array($refid), __FILE__, __LINE__); + SQL_QUERY_ESC("UPDATE `{?_MYSQL_PREFIX?}_user_data` SET `rand_confirmed`=0 WHERE `userid`=%s LIMIT 1", + array($refid), __FUNCTION__, __LINE__); } // END - if // Free result @@ -266,5 +269,273 @@ function SELECT_RANDOM_REFID () { return $refid; } +// Do the user login +function doUserLogin ($userid, $passwd, $successUrl = '', $errorUrl = 'modules.php?module=index&what=login&login=') { + // Init variables + $dmy = ''; + $add = ''; + $errorCode = '0'; + $ext = ''; + + // Init array + $content = array( + 'password' => '', + 'userid' => '', + 'last_online' => 0, + 'last_login' => 0, + 'hash' => '' + ); + + // Check login data + if ((isExtensionActive('nickname')) && (isNicknameUsed($userid))) { + // Nickname entered + fetchUserData($userid, 'nickname'); + } elseif (isNicknameUsed($userid)) { + // No nickname installed + $errorCode = getCode('EXTENSION_PROBLEM'); + $ext = 'nickname'; + } else { + // Direct userid entered + fetchUserData($userid); + } + + // No error found? + if ($errorCode == '0') { + // Get user data array and set userid (e.g. important if we login with nickname) + $content = getUserDataArray(); + if (!empty($content['userid'])) $userid = bigintval($content['userid']); + } // END - if + + // Is there an entry? + if ((isUserDataValid()) && (getUserData('status') == 'CONFIRMED') && (!empty($content['userid']))) { + // Check for old MD5 passwords + if ((strlen(getUserData('password')) == 32) && (md5($passwd) == getUserData('password'))) { + // Just set the hash to the password from DB... :) + $content['hash'] = getUserData('password'); + } else { + // Hash password with improved way for comparsion + $content['hash'] = generateHash($passwd, substr(getUserData('password'), 0, -40)); + } + + // Does the password match the hash? + if ($content['hash'] == getUserData('password')) { + // New hashed password found so let's generate a new one + $content['hash'] = generateHash($passwd); + + // ... and update database + // @TODO Make this filter working: $ADDON = runFilterChain('post_login_update', $content); + SQL_QUERY_ESC("UPDATE `{?_MYSQL_PREFIX?}_user_data` SET `password`='%s' WHERE `userid`=%s AND `status`='CONFIRMED' LIMIT 1", + array($content['hash'], $userid), __FUNCTION__, __LINE__); + + // No login bonus by default + $GLOBALS['bonus_payed'] = false; + + // Probe for last online timemark + $probe = time() - getUserData('last_online'); + if (getUserData('last_login') > 0) $probe = time() - getUserData('last_login'); + + if ((isExtensionInstalledAndNewer('bonus', '0.2.2')) && ($probe >= getConfig('login_timeout'))) { + // Add login bonus to user's account + $add = ', `login_bonus`=`login_bonus`+{?login_bonus?}'; + $GLOBALS['bonus_payed'] = true; + + // Subtract login bonus from userid's account or jackpot + if ((isExtensionInstalledAndNewer('bonus', '0.3.5')) && (getConfig('bonus_mode') != 'ADD')) handleBonusPoints('login_bonus'); + } // END - if + + // @TODO Make this filter working: $url = runFilterChain('do_login', array('content' => $content, 'addon' => $ADDON)); + + // Set member id + setMemberId($userid); + + // Try to set session data (which shall normally always work!) + //* DEBUG: */ logDebugMessage(__FUNCTION__, __LINE__, 'userid=' . $userid . ',hash=' . $content['hash'] . '(' . strlen($content['hash']) . ')'); + if ((setSession('userid', $userid )) && (setSession('u_hash', encodeHashForCookie($content['hash'])))) { + // Update database records + SQL_QUERY_ESC("UPDATE `{?_MYSQL_PREFIX?}_user_data` SET `total_logins`=`total_logins`+1" . $add . " WHERE `userid`=%s LIMIT 1", + array($userid), __FUNCTION__, __LINE__); + if (SQL_AFFECTEDROWS() == 1) { + // Is a success URL set? + if (empty($successUrl)) { + // Procedure to checking for login data + if (($GLOBALS['bonus_payed'] === true) && (isExtensionActive('bonus'))) { + // Bonus added (just displaying!) + $url = 'modules.php?module=chk_login&mode=bonus'; + } else { + // Bonus not added + $url = 'modules.php?module=chk_login&mode=login'; + } + } else { + // Use this URL + $url = $successUrl; + } + } else { + // Cannot update counter! + $errorCode = getCode('CNTR_FAILED'); + } + } else { + // Cookies not setable! + $errorCode = getCode('COOKIES_DISABLED'); + } + } elseif (isExtensionInstalledAndNewer('sql_patches', '0.6.1')) { + // Update failture counter + SQL_QUERY_ESC("UPDATE `{?_MYSQL_PREFIX?}_user_data` SET `login_failures`=`login_failures`+1,`last_failure`=NOW() WHERE `userid`=%s LIMIT 1", + array($userid), __FUNCTION__, __LINE__); + + // Wrong password! + $errorCode = getCode('WRONG_PASS'); + } + } elseif (getUserData('status') != 'CONFIRMED') { + // Create an error code from given status + $errorCode = generateErrorCodeFromUserStatus(getUserData('status')); + + // Set userid in session + setSession('current_userid', getUserData('userid')); + } elseif (!isUserDataValid()) { + // User id not found! + $errorCode = getCode('WRONG_ID'); + } else { + // Unknown error + $errorCode = getCode('UNKNOWN_ERROR'); + } + + // Error code provided? + if ($errorCode > 0) { + // Then reconstruct the URL + $url = $errorUrl . $errorCode; + + // Extension set? Then add it as well. + if (!empty($ext)) $url .= '&ext=' . $ext; + } // END - if + + // Return URL + return $url; +} + +// Try to send a new password for the given user account +function doNewUserPassword ($email, $userid) { + // Init result and error + $errorCode = ''; + $result = false; + + // Probe userid/nickname + // @TODO We should try to rewrite this to fetchUserData() somehow + if (!empty($email)) { + // Email entered + $result = SQL_QUERY_ESC("SELECT `userid`, `status` FROM `{?_MYSQL_PREFIX?}_user_data` WHERE `email`='%s' OR `email`='%s' LIMIT 1", + array($email, str_replace('.', '{DOT}', $email)), __FUNCTION__, __LINE__); + } elseif ((isExtensionActive('nickname')) && (isNicknameOrUserid($userid))) { + // Nickname entered + $result = SQL_QUERY_ESC("SELECT `userid`, `status` FROM `{?_MYSQL_PREFIX?}_user_data` WHERE `nickname`='%s' OR `userid`='%s' OR `email`='%s' LIMIT 1", + array($userid, $userid, $email), __FUNCTION__, __LINE__); + } elseif (($userid > 0) && (empty($email))) { + // Direct userid entered + $result = SQL_QUERY_ESC("SELECT `userid`, `status` FROM `{?_MYSQL_PREFIX?}_user_data` WHERE `userid`=%s LIMIT 1", + array(bigintval($userid)), __FUNCTION__, __LINE__); + } else { + // Userid not set! + logDebugMessage(__FUNCTION__, __LINE__, 'Userid is not set! BUG!'); + $errorCode = getCode('WRONG_ID'); + } + + // Any entry found? + if (SQL_NUMROWS($result) == 1) { + // This data is valid, so we create a new pass... :-) + list($userid, $status) = SQL_FETCHROW($result); + + if ($status == 'CONFIRMED') { + // Ooppps, this was missing! ;-) We should update the database... + $NEW_PASS = generatePassword(); + SQL_QUERY_ESC("UPDATE `{?_MYSQL_PREFIX?}_user_data` SET `password`='%s' WHERE `userid`=%s LIMIT 1", + array(generateHash($NEW_PASS), $userid), __FUNCTION__, __LINE__); + + // Prepare data and message for email + $message = loadEmailTemplate('new-pass', array('new_pass' => $NEW_PASS, 'nickname' => $userid), $userid); + + // ... and send it away + sendEmail($userid, getMessage('GUEST_NEW_PASSWORD'), $message); + + // Output note to user + loadTemplate('admin_settings_saved', false, '{--GUEST_NEW_PASSWORD_SEND--}'); + } else { + // Account is locked or unconfirmed + $errorCode = generateErrorCodeFromUserStatus($status); + + // Load URL + redirectToUrl('modules.php?module=index&what=login&login='.$errorCode); + } + } else { + // id or email is wrong + loadTemplate('admin_settings_saved', false, '{--GUEST_WRONG_ID_EMAIL--}'); + } + + // Return the error code + return $errorCode; +} + +// Get timestamp for given stats type and data +function getTimestampFromUserStats ($statsType, $statsData, $userid = '0') { + // Default timestamp is zero + $data['inserted'] = '0'; + + // User id set? + if ((isMemberIdSet()) && ($userid == '0')) { + $userid = getMemberId(); + } // END - if + + // Is the extension installed and updated? + if ((!isExtensionActive('sql_patches')) || (isExtensionOlder('sql_patches', '0.5.6'))) { + // Return zero here + return $data['inserted']; + } // END - if + + // Try to find the entry + $result = SQL_QUERY_ESC("SELECT + UNIX_TIMESTAMP(`inserted`) AS inserted +FROM + `{?_MYSQL_PREFIX?}_user_stats_data` +WHERE + `userid`=%s AND + `stats_type`='%s' AND + `stats_data`='%s' +LIMIT 1", + array( + bigintval($userid), + $statsType, + $statsData + ), __FUNCTION__, __LINE__); + + // Is the entry there? + if (SQL_NUMROWS($result) == 1) { + // Get this stamp + $data = SQL_FETCHARRAY($result); + } // END - if + + // Free result + SQL_FREERESULT($result); + + // Return stamp + return $data['inserted']; +} + +// Inserts user stats +function insertUserStatsRecord ($userid, $statsType, $statsData) { + // Is the extension installed and updated? + if ((!isExtensionActive('sql_patches')) || (isExtensionOlder('sql_patches', '0.5.6'))) { + // Return zero here + return false; + } // END - if + + // Does it exist? + if ((!getTimestampFromUserStats($statsType, $statsData, $userid)) && (!is_array($statsData))) { + // Then insert it! + SQL_QUERY_ESC("INSERT INTO `{?_MYSQL_PREFIX?}_user_stats_data` (`userid`,`stats_type`,`stats_data`) VALUES (%s,'%s','%s')", + array(bigintval($userid), $statsType, $statsData), __FUNCTION__, __LINE__); + } elseif (is_array($statsData)) { + // Invalid data! + logDebugMessage(__FUNCTION__, __LINE__, "userid={$userid},type={$statsType},data={".gettype($statsData).": Invalid statistics data type!"); + } +} + // [EOF] ?>