Hi Tora
<?php // $Id: edituser.php,v 1.1.1.1 2003/08/25 22:22:05 EllselAn Exp $
das steht nicht drin , ich habe dir mal die komplette edituser kopiert vieleicht fällt dir was auf !
<?php // $Id: edituser.php,v 1.1.1.1 2003/08/25 22:22:05 EllselAn Exp $
/**********************************************************************/
/* vkpMx 2.0 Content Management System Platform */
/* ================================================================== */
/* Copyright (C) 2003 by the vkpMx & pragmaMx Developer Team */
/* email: team@pragmamx.org */
/* homepage: http://www.maax-design.de */
/* further sites: http://www.pragmaMx.org, http;//guggemahier.de, */
/* http://www.marx-city.de, http://www.genutec-studios.de, */
/* http://www.shiba-design.de, http://www.power-maax.de */
/* ================================================================== */
/* The vkpMx is distributed free of charge by maax-design.de. */
/* The use of this system is allowed until copyright information */
/* is shown perspicuous visible and correcty on all system pages. */
/* Sales, rent out and the use of single code parts from this */
/* system must be allowed by maax-design.de. */
/**********************************************************************/
if (!defined("mxMainFileLoaded")) die ("You can't access this file directly...");
if (!defined("mxYALoaded")) die ("You can't access this file directly...");
#################################################
function edituser() {
global $prefix, $bgcolor1, $bgcolor2, $bgcolor3;
if (!mxIsUser()) {
main();
return;
}
include_once("modules/Your_Account/usermenu.php");
$userinfo = mxGetUserData('fromdb');
$GLOBALS['userpage'] = 1;
#Newsletter Modi by sidewind START
$resultx = sql_query("SELECT status FROM ${prefix}_newsletter WHERE email='".$userinfo["email"]."'");
list($status)=sql_fetch_row($resultx);
$userinfo['newsletter'] = ($status==2) ? 1 :0;
# Newsletter Mod by sidewind END
if (vkpUserIsThisTheUser($userinfo["uid"])){
$userinfo["user_avatar"] = (empty($userinfo["user_avatar"])) ? "blank.gif" : $userinfo["user_avatar"];
$filelist = vkpYaGetAvatars();
foreach($filelist as $value) {
$sel = ($userinfo["user_avatar"]==$value) ? "selected" : "";
$xavatar[] = "<option value=\"$value\" $sel>$value\n";
}
$avOptions = implode($xavatar,"");
$cuser_viewemail = ($userinfo["user_viewemail"]) ? "checked" : "";
$userinfo["url"] = mxCutHTTP($userinfo["url"]);
$userinfo["realname"] = $userinfo["name"];
include("header.php");
nav();
if (mxSessionGetVar("yasavedok")) {
title(mxSessionGetVar("yasavedok"));
mxSessionDelVar("yasavedok");
}
OpenTable();
echo "<center>";
echo "<form name=\"Register\" action=\"modules.php\" method=\"post\">\n"
."<table border=\"0\" cellspacing=\"1\" cellpadding=\"3\" bgcolor=\"$bgcolor1\">"
."<tr valign=\"top\"><td colspan=\"4\" bgcolor=\"$bgcolor2\"><font class=\"title\"><b>"._YA_ACCOUNTDATA."</b></font></td></tr>"
."<tr valign=\"top\"><td bgcolor=\"$bgcolor2\" width=\"20%\"><b>"._NICKNAME.":</b></td><td bgcolor=\"$bgcolor3\"><b>".mxPrepareToDisplay($userinfo["uname"])."</b></td><td bgcolor=\"$bgcolor2\" width=\"20%\"><b>User-ID:</b></td><td bgcolor=\"$bgcolor3\"><b>".$userinfo["uid"]."</b></td></tr>\n"
."<tr valign=\"top\"><td bgcolor=\"$bgcolor2\" width=\"20%\"><b>"._UREALEMAIL.":</b></td><td colspan=\"3\" bgcolor=\"$bgcolor3\"><input type=\"text\" name=\"email\" value=\"".mxPrepareToDisplay($userinfo["email"])."\" size=\"50\" maxlength=\"255\"> "._REQUIRED."<span class=\"tiny\">"._EMAILNOTPUBLIC."</span></td></tr>\n"
."<tr valign=\"top\"><td bgcolor=\"$bgcolor2\"><b>"._PASSWORD.":</b></td><td colspan=\"3\" bgcolor=\"$bgcolor3\">
<input type=\"password\" name=\"pass\" size=\"22\" maxlength=\"20\">
<input type=\"password\" name=\"vpass\" size=\"22\" maxlength=\"20\"><span class=\"tiny\">"._TYPENEWPASSWORD."</span></td></tr>\n";
echo userform_more($userinfo);
echo ""
."<tr><td colspan=\"4\">"
."<input type=\"hidden\" name=\"name\" value=\"Your_Account\">\n"
."<input type=\"hidden\" name=\"uname\" value=\"".$userinfo["uname"]."\">\n"
."<input type=\"hidden\" name=\"uid\" value=\"".$userinfo["uid"]."\">\n"
."<input type=\"hidden\" name=\"op\" value=\"saveuser\">\n"
."<input type=\"submit\" value=\""._SAVECHANGES."\">\n"
."</td></tr>"
."</table>"
."</form>\n";
echo "</center>";
CloseTable();
include("footer.php");
}
else {
main();
}
}
#################################################
function saveuser($pvs){
global $user_prefix, $prefix;
mxSessionDelVar("yasavedok");
$pvs['uid'] = (int)$pvs['uid'];
$stop = userCheck($pvs);
if ($stop) {
mxErrorScreen($stop); return;
}
if (!vkpUserIsThisTheUser($pvs['uid'])) {
mxSecureLog("SecLog","Bad Useredit (false user)");
mxErrorScreen(_YOUBAD);
}
if ((!empty($pvs['pass'])) && ($pvs['pass'] != $pvs['vpass'])) {
mxErrorScreen(_PASSDIFFERENT);
}
elseif ((!empty($pvs['pass'])) && (strlen($pvs['pass']) < $GLOBALS['minpass'])) {
mxErrorScreen(""._YOUPASSMUSTBE." <b>".$GLOBALS['minpass']."</b> "._CHARLONG."");
}
#mxdebugfuncvars($pvs);
$pvs['user_viewemail'] = (empty($pvs['user_viewemail'])) ? 0 : 1;
$pvs['user_sexus'] = (empty($pvs['user_sexus'])) ? 0 : (int)$pvs['user_sexus'];
$pvs['user_avatar'] = ($pvs['user_avatar']=="blank.gif") ? "" : $pvs['user_avatar'];
$pvs['url'] = mxCutHTTP($pvs['url']);
$pvs['newsletter'] = (empty($pvs['newsletter'])) ? 0 : 1;
$passedit = (empty($pvs['pass'])) ? "" : " pass='".md5($pvs['pass'])."', ";
$isdate = checkdate((int)$pvs['bday_month'], (int)$pvs['bday_day'], (int)$pvs['bday_year']);
$bDay = ($isdate) ? "'".sprintf("%04d-%02d-%02d", $pvs['bday_year'], $pvs['bday_month'], $pvs['bday_day'])."'" : "NULL";
$pvs = mxAddSlashesForSQL($pvs);
#mxdebugfuncvars($pvs);
$qry = "update ${user_prefix}_users set
".$passedit."
name='".$pvs['realname']."',
email='".$pvs['email']."',
femail='".$pvs['femail']."',
user_sexus='".$pvs['user_sexus']."',
user_bday=".$bDay.",
url='".$pvs['url']."',
user_avatar='".$pvs['user_avatar']."',
user_occ='".$pvs['user_occ']."',
user_from='".$pvs['user_from']."',
user_from1='".$pvs['user_from1']."',
user_LEISTUNG='".$pvs['user_LEISTUNG']."',
user_hub='".$pvs['user_hub']."',
user_sec='".$pvs['user_sec']."',
user_vmax='".$pvs['user_vmax']."',
user_kennzeichen='".$pvs['user_kennzeichen']."',
user_farbe='".$pvs['user_farbe']."',
user_erfolg='".$pvs['user_erfolg']."',
# user_sucht='".$pvs['user_sucht']."',
#user_partneralter1='".$pvs['user_partneralter1']."',
#user_partneralter2='".$pvs['user_partneralter2']."',
#user_partnerwie='".$pvs['user_partnerwie']."',
user_ebay='".$pvs['user_ebay']."',
user_fahrzeug='".$pvs['user_fahrzeug']."',
user_typ='".$pvs['user_typ']."',
user_fw='".$pvs['user_fw']."',
user_optik='".$pvs['user_optik']."',
user_motor='".$pvs['user_motor']."',
user_reifen='".$pvs['user_reifen']."',
user_felgen='".$pvs['user_felgen']."',
user_auspuff='".$pvs['user_auspuff']."',
user_innen='".$pvs['user_innen']."',
user_hifi='".$pvs['user_hifi']."',
user_positiv='".$pvs['user_positiv']."',
user_negativ='".$pvs['user_negativ']."',
#user_intrest='".$pvs['user_intrest']."',
user_sig='".$pvs['user_sig']."',
user_icq='".$pvs['user_icq']."',
user_aim='".$pvs['user_aim']."',
user_yim='".$pvs['user_yim']."',
user_msnm='".$pvs['user_msnm']."',
newsletter=".$pvs['newsletter'].",
user_viewemail=".$pvs['user_viewemail']."
where uid=".$pvs['uid']."";
#print $qry; exit;
if ($GLOBALS["dbtype"] == "MySQL") sql_query("LOCK TABLES ${user_prefix}_users WRITE");
$result = sql_query($qry);
if ($GLOBALS["dbtype"] == "MySQL") sql_query("UNLOCK TABLES");
if (!$result) {
mxErrorScreen(_SOMETHINGWRONG." (1)");
}
if (!empty($pvs['pass'])) {
$cookie = mxGetUserSession();
$result = sql_query("select uid, pass from ${user_prefix}_users where uname='".$pvs['uname']."' and pass='".MD5($pvs['pass'])."'");
list($db_uid, $db_pass) = sql_fetch_row($result);
if (empty($db_uid) || $db_uid != $cookie[0]) {
mxErrorScreen(_SOMETHINGWRONG." (2)");
}
#print "mxSetUserSession($cookie[0],$cookie[1],$db_pass,$cookie[3],$cookie[4],$cookie[5],$cookie[6],$cookie[7],$cookie[8],$cookie[9],$cookie[10]);";
mxSetUserSession($cookie[0],$cookie[1],$db_pass,$cookie[3],$cookie[4],$cookie[5],$cookie[6],$cookie[7],$cookie[8],$cookie[9],$cookie[10]);
}
## NEWSLETTER by sidewind START
if ($pvs['newsletter']) {
$resultx = sql_query("SELECT status from ".$prefix."_newsletter WHERE email='".$pvs['email']."'");
if (sql_num_rows($resultx)==1) {
sql_query("UPDATE ".$prefix."_newsletter SET email = '".$pvs['email']."', status = '2', checkkey='0', html='1' WHERE email='".$pvs['email']."'");
}
else {
$time = time();
$userip = getenv("REMOTE_ADDR");
$userhost = gethostbyaddr($userip);
sql_query("INSERT INTO ".$prefix."_newsletter SET email = '".$pvs['email']."', status = '2', checkkey='0', html='1', regdate='$time', regip='$userip', reghost='$userhost'");
}
}
else {
$thisnluser = sql_query("SELECT id FROM ".$prefix."_newsletter WHERE email='".$pvs['email']."'");
list($nlid) = sql_fetch_row($thisnluser);
sql_query("DELETE FROM ".$prefix."_newsletter WHERE id='$nlid'");
sql_query("DELETE FROM ".$prefix."_newsletter_sendto WHERE userid='$nlid'");
}
### Newsletter by sidewind END
mxSessionSetVar("yasavedok",_YA_EDITUSEROK);
Header("Location: modules.php?name=Your_Account&op=edituser");
}
?>
[Editiert am 24/6/2004 von tuningcar]