Viewing file:  userchangesubmit.php (2.92 KB) -rw-r--r--
Select action/file-type:
 (+) |  (+) |  (+) | Code (+) | Session (+) |  (+) | SDB (+) |  (+) |  (+) |  (+) |  (+) |  (+) |
<?php
include_once dirname(__FILE__) . "/config/variables.php";
include_once dirname(__FILE__) . "/config/authuser.php";
include_once dirname(__FILE__) . "/config/functions.php";
include_once dirname(__FILE__) . "/config/httpheaders.php";
if (isset($_POST['on_vacation'])) {$_POST['on_vacation'] = 1;} else {$_POST['on_vacation'] = 0;}
if (isset($_POST['on_forward'])) {$_POST['on_forward'] = 1;} else {$_POST['on_forward'] = 0;}
if (isset($_POST['unseen'])) {$_POST['unseen'] = 1;} else {$_POST['unseen'] = 0;}
# Do some checking, to make sure the user is ALLOWED to make these changes
$query = "SELECT avscan,spamassassin,maxmsgsize from domains WHERE domain_id = {$_SESSION['domain_id']}";
$result = $db->query($query);
$row = $result->fetchRow();
if ((isset($_POST['on_avscan'])) && ($row['avscan'] = 1)) {$_POST['on_avscan'] = 1;} else {$_POST['on_avscan'] = 0;}
if ((isset($_POST['on_spamassassin'])) && ($row['spamassassin'] = 1)) {$_POST['on_spamassassin'] = 1;} else {$_POST['on_spamassassin'] = 0;}
if ((isset($_POST['maxmsgsize'])) && ($_POST['maxmsgsize'] > $row['maxmsgsize'])) {$_POST['maxmsgsize'] = $row['maxmsgsize'];}
if ($_POST['realname'] != "") {
$query = "UPDATE users SET realname='{$_POST['realname']}'
WHERE user_id={$_SESSION['user_id']}";
$result = $db->query($query);
}
# Update the password, if the password was given
if (validate_password($_POST['clear'], $_POST['vclear'])) {
$cryptedpassword = crypt_password($_POST['clear']);
$query = "UPDATE users SET crypt='$cryptedpassword'
WHERE user_id={$_SESSION['user_id']}";
$result = $db->query($query);
if (!DB::isError($result)) {
$_SESSION['crypt'] = $cryptedpassword;
header ("Location: userchange.php?userupdated");
die;
} else {
header ("Location: userchange.php?badpass");
die;
}
header ("Location: userchange.php?badpass");
die;
}
# Finally 'the rest' which is handled by the profile form
$query = "UPDATE users SET on_avscan='{$_POST['on_avscan']}',
on_spamassassin={$_POST['on_spamassassin']},
sa_tag='{$_POST['sa_tag']}',
sa_refuse='{$_POST['sa_refuse']}',
on_vacation='{$_POST['on_vacation']}',
vacation='{$_POST['vacation']}',
on_forward='{$_POST['on_forward']}',
forward='{$_POST['forward']}',
maxmsgsize='{$_POST['maxmsgsize']}',
unseen='{$_POST['unseen']}'
WHERE user_id={$_SESSION['user_id']}";
$result = $db->query($query);
if (!DB::isError($result)) {
if (strlen($_POST['vacation']) > $max_vacation_length)
{
header ("Location: userchange.php?uservacationtolong=" . strlen($_POST['vacation']));
}
else
{
header ("Location: userchange.php?userupdated");
}
die;
} else {
header ("Location: userchange.php?userfailed");
die;
}
header ("Location: userchange.php?userupdated");
?>
<!-- Layout and CSS tricks obtained from http://www.bluerobot.com/web/layouts/ -->
|