');
$form->addElement('button', 'generate_api_key', get_lang('GenerateApiKey'),array('id' => 'id_generate_api_key','onclick' => 'generate_open_id_form()'));//generate_open_id_form()
}
// SUBMIT
if (is_profile_editable()) {
$form->addElement('style_submit_button', 'apply_change', get_lang('SaveSettings'), 'class="save"');
} else {
$form->freeze();
}
$user_data = array_merge($user_data,$extra_data);
$form->setDefaults($user_data);
/*
==============================================================================
FUNCTIONS
==============================================================================
*/
/*
-----------------------------------------------------------
LOGIC FUNCTIONS
-----------------------------------------------------------
*/
/**
* Can a user edit his/her profile?
*
* @return boolean Editability of the profile
*/
function is_profile_editable()
{
return $GLOBALS['profileIsEditable'];
}
/*
-----------------------------------------------------------
USER IMAGE FUNCTIONS
-----------------------------------------------------------
*/
/**
* Upload a submitted user image.
*
* @param $user_id User id
* @return The filename of the new picture or FALSE if the upload has failed
*/
function upload_user_image($user_id)
{
/* Originally added by Miguel (miguel@cesga.es) - 2003-11-04
* Code Refactoring by Hugues Peeters (hugues.peeters@claroline.net) - 2003-11-24
* Moved inside a function and refactored by Thomas Corthals - 2005-11-04
*/
$image_path = UserManager::get_user_picture_path_by_id($user_id,'system',true);
$image_repository = $image_path['dir'];
$existing_image = $image_path['file'];
$file_extension = explode('.', $_FILES['picture']['name']);
$file_extension = strtolower($file_extension[count($file_extension) - 1]);
if (!file_exists($image_repository)) {
mkpath($image_repository);
}
if ($existing_image != '') {
if (KEEP_THE_NAME_WHEN_CHANGE_IMAGE) {
$picture_filename = $existing_image;
$old_picture_filename = 'saved_'.date('Y_m_d_H_i_s').'_'.uniqid('').'_'.$existing_image;
} else {
$old_picture_filename = $existing_image;
$picture_filename = (PREFIX_IMAGE_FILENAME_WITH_UID ? 'u'.$user_id.'_' : '').uniqid('').'.'.$file_extension;
}
if (KEEP_THE_OLD_IMAGE_AFTER_CHANGE) {
@rename($image_repository.$existing_image, $image_repository.$old_picture_filename);
} else {
@unlink($image_repository.$existing_image);
}
} else {
$picture_filename = (PREFIX_IMAGE_FILENAME_WITH_UID ? $user_id.'_' : '').uniqid('').'.'.$file_extension;
}
// get the picture and resize it 200x200 only if the picture is bigger than 200px (width)
$temp = new image($_FILES['picture']['tmp_name']);
$picture_infos=getimagesize($_FILES['picture']['tmp_name']);
$max_size_for_picture = 200; // in pixels
if ($picture_infos[0]>$max_size_for_picture) {
$thumbwidth = $max_size_for_picture;
if (empty($thumbwidth) or $thumbwidth==0) {
$thumbwidth=$max_size_for_picture;
}
$new_height = round(($thumbwidth/$picture_infos[0])*$picture_infos[1]);
$temp->resize($thumbwidth,$new_height,0);
}
$type=$picture_infos[2];
// original picture
$big_temp = new image($_FILES['picture']['tmp_name']);
switch (!empty($type)) {
case 2 : $temp->send_image('JPG',$image_repository.$picture_filename);
$big_temp->send_image('JPG',$image_repository.'big_'.$picture_filename);
break;
case 3 : $temp->send_image('PNG',$image_repository.$picture_filename);
$big_temp->send_image('JPG',$image_repository.'big_'.$picture_filename);
break;
case 1 : $temp->send_image('GIF',$image_repository.$picture_filename);
$big_temp->send_image('JPG',$image_repository.'big_'.$picture_filename);
break;
}
return $picture_filename;
}
/**
* Remove an existing user image.
*
* @param $user_id User id
*/
function remove_user_image($user_id)
{
$image_path = UserManager::get_user_picture_path_by_id($user_id,'system');
$image_repository = $image_path['dir'];
$image = $image_path['file'];
if ($image != '')
{
if (KEEP_THE_OLD_IMAGE_AFTER_CHANGE)
{
@rename($image_repository.$image, $image_repository.'deleted_'.date('Y_m_d_H_i_s').'_'.$image);
}
else
{
@unlink($image_repository.$image);
}
}
}
/*
-----------------------------------------------------------
PRODUCTIONS FUNCTIONS
-----------------------------------------------------------
*/
/**
* Upload a submitted user production.
*
* @param $user_id User id
* @return The filename of the new production or FALSE if the upload has failed
*/
function upload_user_production($user_id)
{
$image_path = UserManager::get_user_picture_path_by_id($user_id,'system',true);
$production_repository = $image_path['dir'].$user_id.'/';
if (!file_exists($production_repository))
{
mkpath($production_repository);
}
$filename = replace_dangerous_char($_FILES['production']['name']);
$filename = disable_dangerous_file($filename);
if(filter_extension($filename))
{
if (@move_uploaded_file($_FILES['production']['tmp_name'], $production_repository.$filename))
{
return $filename;
}
}
return false; // this should be returned if anything went wrong with the upload
}
/**
* Check current user's current password
* @param char password
* @return bool true o false
* @uses Gets user ID from global variable
*/
function check_user_password($password){
global $_user;
$user_id = $_user['user_id'];
if ( $user_id != strval(intval($user_id)) || empty($password) ) { return false; }
$table_user = Database :: get_main_table(TABLE_MAIN_USER);
$password = api_get_encrypted_password($password);
$sql_password="SELECT * FROM $table_user WHERE user_id='".$user_id."' AND password='".$password."'";
$result=api_sql_query($sql_password, __FILE__, __LINE__);
if (Database::num_rows($result)==0) {
return false;
} else {
return true;
}
}
/*
==============================================================================
MAIN CODE
==============================================================================
*/
$filtered_extension = false;
$update_success = false;
$upload_picture_success = false;
$upload_production_success = false;
if (!empty($_SESSION['profile_update']))
{
$update_success = ($_SESSION['profile_update'] == 'success');
unset($_SESSION['profile_update']);
}
if (!empty($_SESSION['image_uploaded']))
{
$upload_picture_success = ($_SESSION['image_uploaded'] == 'success');
unset($_SESSION['image_uploaded']);
}
if (!empty($_SESSION['production_uploaded']))
{
$upload_production_success = ($_SESSION['production_uploaded'] == 'success');
unset($_SESSION['production_uploaded']);
} elseif (isset($_POST['remove_production'])) {
foreach (array_keys($_POST['remove_production']) as $production)
{
UserManager::remove_user_production($_user['user_id'], urldecode($production));
}
if ($production_list = UserManager::build_production_list($_user['user_id'], true,true))
$form->insertElementBefore($form->createElement('static', null, null, $production_list), 'productions_list');
$form->removeElement('productions_list');
$file_deleted = true;
} elseif ($form->validate()) {
$wrong_current_password = false;
$user_data = $form->exportValues();
//
// set password if a new one was provided
if(!empty($user_data['password0'])){
$val=check_user_password($user_data['password0']);
if ($val==true){
if (!empty($user_data['password1']))
$password = $user_data['password1'];
} else {
$wrong_current_password = true;
}
}
if (empty($user_data['password0']) && !empty($user_data['password1'])) {
$wrong_current_password = true;
}
// upload picture if a new one is provided
if ($_FILES['picture']['size'])
{
if ($new_picture = upload_user_image($_user['user_id']))
{
$user_data['picture_uri'] = $new_picture;
$_SESSION['image_uploaded'] = 'success';
}
}
// remove existing picture if asked
elseif (!empty($user_data['remove_picture']))
{
remove_user_image($_user['user_id']);
$user_data['picture_uri'] = '';
}
// upload production if a new one is provided
if ($_FILES['production']['size'])
{
$res = upload_user_production($_user['user_id']);
if(!$res)
{
//it's a bit excessive to assume the extension is the reason why upload_user_production() returned false, but it's true in most cases
$filtered_extension = true;
}
else
{
$_SESSION['production_uploaded'] = 'success';
}
}
// remove values that shouldn't go in the database
unset($user_data['password0'],$user_data['password1'], $user_data['password2'], $user_data['MAX_FILE_SIZE'],
$user_data['remove_picture'], $user_data['apply_change']);
// Following RFC2396 (http://www.faqs.org/rfcs/rfc2396.html), a URI uses ':' as a reserved character
// we can thus ensure the URL doesn't contain any scheme name by searching for ':' in the string
$my_user_openid=isset($user_data['openid']) ? $user_data['openid'] : '';
if(!preg_match('/^[^:]*:\/\/.*$/',$my_user_openid))
{ //ensure there is at least a http:// scheme in the URI provided
$user_data['openid'] = 'http://'.$my_user_openid;
}
$extras = array();
// build SQL query
$sql = "UPDATE $table_user SET";
unset($user_data['api_key_generate']);
foreach($user_data as $key => $value)
{
if(substr($key,0,6)=='extra_') //an extra field
{
$extras[substr($key,6)] = $value;
}
else
{
$sql .= " $key = '".Database::escape_string($value)."',";
}
}
if (isset($password))
{
$password = api_get_encrypted_password($password);
$sql .= " password = '".Database::escape_string($password)."'";
}
else // remove trailing , from the query we have so far
{
$sql = rtrim($sql, ',');
}
$sql .= " WHERE user_id = '".$_user['user_id']."'";
api_sql_query($sql, __FILE__, __LINE__);
//update the extra fields
foreach($extras as $key=>$value)
{
$myres = UserManager::update_extra_field_value($_user['user_id'],$key,$value);
}
// re-init the system to take new settings into account
$uidReset = true;
include (api_get_path(INCLUDE_PATH).'local.inc.php');
$_SESSION['profile_update'] = 'success';
header("Location: ".api_get_self()."?{$_SERVER['QUERY_STRING']}".($filtered_extension && strstr($_SERVER['QUERY_STRING'],'&fe=1')===false?'&fe=1':'').($wrong_current_password && strstr($_SERVER['QUERY_STRING'],'&cp=1')===false?'&cp=1':''));
exit;
}
if (isset($_GET['show'])) {
if ((api_get_setting('allow_social_tool')=='true' && api_get_setting('allow_message_tool')=='true') ||(api_get_setting('allow_social_tool')=='true')) {
$interbreadcrumb[]= array (
'url' => '#',
'name' => get_lang('SocialNetwork')
);
} elseif ((api_get_setting('allow_social_tool')=='false' && api_get_setting('allow_message_tool')=='true')) {
$interbreadcrumb[]= array (
'url' => '#',
'name' => get_lang('MessageTool')
);
}
}
/*
==============================================================================
MAIN DISPLAY SECTION
==============================================================================
*/
Display :: display_header('');
if (api_get_setting('extended_profile') == 'true') {
echo '
';
if ($number_of_new_messages_of_friend>0) {
echo '