##################################################################
# #
# #
# PHPKIT #
# -------------------------------------------- #
# Copyright (c) 2002-2003 Gersöne & Schott GbR #
# #
# #
# ############################################################## #
# #
# Diese Datei / die PHPKIT-Software ist keine Freeware! #
# Für weitere Information besuchen Sie bitte unsere Webseite #
# oder kontaktieren uns per E-Mail: #
# #
# This file / the PHPKIT-software is not freeware! #
# For further informations please vistit our website #
# or contact us via email: #
# #
# Website: http://www.phpkit.de #
# Email: info@phpkit.de #
# #
# ############################################################## #
# #
# File: /inc/public/usereditprofile.php #
# Author: Pierre Gersöne #
# Created: Version 1.6.1 - 2004-05-09 #
# Last Modified: Version 1.6.1 - 2004-05-09 #
# Description: not available for this file #
# #
# ############################################################## #
# #
# SIE SIND NICHT BERECHTIGT, UNRECHTMÄSSIGE KOPIEN DIESER #
# DATEI ZU ERSTELLEN UND/ODER DIESE INFORMATIONEN ZU ENTFERNEN #
# #
# YOU ARE NOT AUTHORISED TO CREATE ILLEGAL COPIES OF THIS #
# FILE AND/OR TO REMOVE THIS INFORMATIONS #
# #
##################################################################


$S=&$SQL;

pkLoadFunc('user');

$info=array('user_id'=>0);
$bd_option_year=$uderror=$editprofile_userfield=
$user_email_option_1=$user_email_option_0=$event=
$user_sex_option_1=$user_sex_option_2=$user_sex_option_0=NULL;

if(pkGetUservalue('id')) {
$info=$S->fetch_assoc($S->query("SELECT
user_id,
user_name,
user_pw,
user_profillock,
user_status,
user_nick,
user_pw,
user_email,
user_sex,
user_hpage,
user_aimid,
user_yim,
user_icqid,
user_emailshow,
user_country,
user_bd_day,
user_bd_month,
user_bd_year,
signin,
user_qou,
user_sig,
user_hobby
FROM ".pkSQLTAB_USER."
WHERE user_name='".$SQL->f(pkGetUservalue('name'))."' AND
user_pw='".$SQL->f(pkGetUservalue('pass'))."' AND
user_id='".$SQL->f(pkGetUservalue('id'))."'
LIMIT 1"));
}

if(!pkGetUservalue('id') || $info['user_id']!=pkGetUservalue('id'))
return pkEvent('access_refused');

if($info['user_profillock']==1)
return pkEvent('eventtitle_profile_update_disabled');


$ACTION=isset($_POST['action']) ? $_POST['action'] : false;

if(isset($_POST['save']) && $ACTION==$_POST['save']) {
$_POST['ud_nick']=trim($_POST['ud_nick']);
$_POST['ud_email']=trim($_POST['ud_email']);

if($_POST['ud_newpw1']!=$_POST['ud_newpw2'])
$uderror='passwords_unequal';
elseif($_POST['ud_newpw1']==$_POST['ud_newpw2'] && $_POST['ud_newpw1']!='')
$ud_userpw=md5($_POST['ud_newpw1']);
elseif($ud_newpw1=="" && $ud_newpw2=="")
$ud_userpw=$USER['pass'];
if($_POST['ud_email']=='')
$uderror='email_empty';
elseif(!emailcheck($_POST['ud_email']))
$uderror='email_invalid';
else
$ud_email=$_POST['ud_email'];

if($_POST['ud_nick']=='')
$uderror='profileupdate_nickname_empty';
elseif(!checkusername($_POST['ud_nick']))
$uderror='nickname_invalid';
else {
$getnick=$S->fetch_array($S->query("SELECT
COUNT(user_name) as count
FROM ".pkSQLTAB_USER."
WHERE user_nick='".$S->f($_POST['ud_nick'])."'
AND user_name!='".$S->f($USER['name'])."'
LIMIT 1"));

if($getnick['count']>0)
$uderror='profileupdate_nickname_in_use';
}

if($uderror)
pkHeaderLocation('editprofile','','uderror='.$uderror);

$vars=array(
'ud_nick'=>'ud_nick',
'ud_hpage'=>'ud_hpage',
'ud_aimid'=>'ud_aimid',
'ud_yim'=>'ud_yim',
'ud_icqid'=>'ud_icqid',
'ud_usersig'=>'ud_usersig',
'ud_userqou'=>'ud_userqou',
'ud_userhobby'=>'ud_userhobby',
'ud_sex'=>'ud_sex',
'ud_emailshow'=>'ud_emailshow',
'ud_country'=>'ud_country',
'user_bd_day'=>'user_bd_day',
'user_bd_month'=>'user_bd_month',
'user_bd_year'=>'user_bd_year'
);

foreach($vars as $k=>$v)
$$k=$ENV->_post($v);

$ud_hpage=pkUrlCheck($ud_hpage) ? $ud_hpage : '';

if($user_bd_year > (date('Y',pkTIME)-5) || $user_bd_year<=1900 || !checkdate($user_bd_month,$user_bd_day,$user_bd_year))
$user_bd_day=$user_bd_month=$user_bd_year=0;

$S->query("UPDATE ".pkSQLTAB_USER." SET
uid='".pkRand()."',
user_pw='".$S->F($ud_userpw)."',
user_email='".$S->F($ud_email)."',
user_emailshow='".$S->F($ud_emailshow)."',
user_nick='".$S->F($ud_nick)."',
user_sex='".$S->F($ud_sex)."',
user_country='".$S->F($ud_country)."',
user_hpage='".$S->F($ud_hpage)."',
user_aimid='".$S->F($ud_aimid)."',
user_yim='".$S->F($ud_yim)."',
user_icqid='".$S->F($ud_icqid)."',
user_sig='".$S->F($ud_usersig)."',
user_qou='".$S->F($ud_userqou)."',
user_hobby='".$S->F($ud_userhobby)."',
user_bd_day='".$S->F($user_bd_day)."',
user_bd_month='".$S->F($user_bd_month)."',
user_bd_year='".$S->F($user_bd_year)."'
WHERE user_id='".$USER['id']."'"
);



session_register("USER");

$array=array(
'nick'=>'nick',
'pass'=>'pw',
'email'=>'email',
'sex'=>'sex',
'hpage'=>'hpage',
'icqid'=>'icqid',
'status'=>'status'
);

foreach($array as $k=>$v)
$USER[$k]=$info['user_'.$v];

$SESSION->save('USER',$USER);

pkHeaderLocation('usereditprofile','','event=profileupdate');
}


pkLoadLang('profile');


$userfields=$S->fetch_assoc($S->query("SELECT *
FROM ".pkSQLTAB_USER_FIELDS."
WHERE userid='".$USER['id']."' LIMIT 1"));

$result=$S->query("SELECT
profilefields_id,
profilefields_description,
profilefields_name,
profilefields_maxlength
FROM ".pkSQLTAB_USER_PROFILEFIELDS."
ORDER by profilefields_order ASC");
while(list($fieldid,$fielddescription,$fieldname,$fieldlength)=$S->fetch_row($result)) {
$value=pkEntities($userfields['field_'.$fieldid]);
$name='profilefields['.$fieldid.']';

eval("\$editprofile_userfield.= \"".pkTpl("usereditprofile_userfield")."\";");
}

switch($info['user_sex']) {
case 'w' :
$user_sex_option_1='selected="selected"';
break;
case 'm' :
$user_sex_option_2='selected="selected"';
break;
default :
$user_sex_option_0='selected="selected"';
}

foreach(range(1,31) as $d)
$bd_option_day.='<option value="'.$d.'"'.($info['user_bd_day']==$d ? ' selected="selected"' : '').'>'.$d.'</option>';

foreach(range(1,12) as $m)
$bd_option_month.='<option value="'.$m.'"'.($info['user_bd_month']==$m ? ' selected="selected"' : '').'>'.pkGetSpecialLang('month',$m).'</option>';

foreach(range(date('Y')-5,1900) as $y)
$bd_option_year.='<option '.($info['user_bd_year']==$y ? ' selected="selected"' : '').'>'.$y.'</option>';


$action_target=pkLink('usereditprofile');

$user_name=pkEntities($info['user_name']);
$user_nick=pkEntities($info['user_nick']);
$user_email=pkEntities($info['user_email']);
$user_aimid=pkEntities($info['user_aimid']);
$user_yim=pkEntities($info['user_yim']);
$user_sig=pkEntities($info['user_sig']);
$user_qou=pkEntities($info['user_qou']);
$user_hobby=pkEntities($info['user_hobby']);
$user_hpage=pkEntities($info['user_hpage']);

$user_status=pkUserStatus($info['user_status']);
$user_signin=formattime($info['signin']);
$user_country=pkUserCountryOptionlist($info['user_country']);
$user_icqid=intval($info['user_icqid'])>0 ? intval($info['user_icqid']) : NULL;
$info['user_emailshow']==1 ? $user_email_option_1=' checked="checked"' : $user_email_option_0=' checked="checked"';

$user_navigation=pkUsernavigation();

$L_save=pkGetLang('save');
$L_reset=pkGetLang('reset');

foreach(array(
'edit_profile',
'username',
'username_description',
'userstatus',
'userstatus_description',
'member_since',
'required_specifications',
'nickname',
'nickname_description',
'password',
'password_description',
'confirm_password',
'confirm_password_description',
'email',
'email_description',
'optional_specifications',
'show_email',
'show_email_description',
'sex',
'sex_description',
'sex_not_specified',
'sex_male',
'sex_female',
'dateofbirth',
'dateofbirth_description',
'dateofbirth_day',
'dateofbirth_month',
'dateofbirth_year',
'origin',
'origin_description',
'origin_bw',
'origin_bay',
'origin_b',
'origin_bb',
'origin_hb',
'origin_hh',
'origin_h',
'origin_mv',
'origin_n',
'origin_nw',
'origin_rp',
'origin_s',
'origin_sa',
'origin_saa',
'origin_sh',
'origin_t',
'origin_00',
'origin_aut',
'origin_ch',
'origin_nl',
'origin_oth',
'origin_def',
'homepage',
'homepage_description',
'aim_screenname',
'aim_screenname_description',
'yim',
'yim_description',
'icq',
'icq_description',
'signature',
'signature_description',
'quotation',
'quotation_description',
'hobbies',
'hobbies_description'
) as $l) {
$v='L_editprofile_'.$l;
$$v=pkGetLang($l);
}

eval("\$site_body.= \"".pkTpl("usereditprofile")."\";");
unset($S);
?>