Skip to content
Snippets Groups Projects
userprofil.php 13.2 KiB
Newer Older
Joel Kuder's avatar
Joel Kuder committed
<?php
userstatus();
// Variabeln definieren
if (!isset($_POST['aendern'])) $_POST['aendern'] = "";
if (!isset($_POST['acc_del'])) $_POST['acc_del'] = "";
if (!isset($_POST['del_passwort'])) $_POST['del_passwort'] = "";
if (!isset($_POST['pwd'])) $_POST['pwd'] = "";
if (!isset($_POST['pwd2'])) $_POST['pwd2'] = "";
if (!isset($_POST['nickname'])) $_POST['nickname'] = "";
if (!isset($_POST['newsletter'])) $_POST['newsletter'] = "";
if (!isset($_POST['paidmails'])) $_POST['paidmails'] = "";
if (!isset($change)) $change = "";
if (!isset($mailstatus)) $mailstatus = "";
if (!isset($delchange)) $delchange = "";

if ($_POST['acc_del'] == 'Jetzt löschen!' && $_POST['del_passwort']) {
Henoch Einbier's avatar
Henoch Einbier committed
    $sql = sql::$db->query("SELECT `passwort` FROM " . _VMS_ . "_kontodaten LIMIT 1") or die("Userinfo");
    $schnittstelle = $sql->fetch();
Joel Kuder's avatar
Joel Kuder committed
    if ($schnittstelle['passwort'] != md5($_GET['del_passwort'])) {
        echo 'Passwort falsch';
    } else {
        $sperrzeit = time() + (86400 * 30);
Henoch Einbier's avatar
Henoch Einbier committed
        $sql = sql::$db->prepare("DELETE FROM " . _VMS_ . "_kontodaten WHERE uid=:session_uid");
        $sql -> bindParam(':session_uid', $_SESSION['uid'], PDO::PARAM_INT);
        $sql -> execute();
        $sql = sql::$db->prepare("DELETE FROM " . _VMS_ . "_emaildaten WHERE uid=:session_uid");
        $sql -> bindParam(':session_uid', $_SESSION['uid'], PDO::PARAM_INT);
        $sql -> execute();
        $sql = sql::$db->prepare("DELETE FROM " . _VMS_ . "_userdaten WHERE uid=:session_uid");
        $sql -> bindParam(':session_uid', $_SESSION['uid'], PDO::PARAM_INT);
        $sql -> execute();
        $sql = sql::$db->prepare("DELETE FROM " . _VMS_ . "_werberdaten WHERE uid=:session_uid");
        $sql -> bindParam(':session_uid', $_SESSION['uid'], PDO::PARAM_INT);
        $sql -> execute();
        $sql = sql::$db->prepare("UPDATE " . _VMS_ . "_werberdaten SET werber = 0 WHERE werber=:session_uid");
        $sql -> bindParam(':session_uid', $_SESSION['uid'], PDO::PARAM_INT);
        $sql -> execute();
        //db_query ('DELETE FROM ' . _VMS_ . '_admin_abuse WHERE uid = ' . $_SESSION['uid']); //tabelle existiert nicht
        $sql = sql::$db->prepare("DELETE FROM " . _VMS_ . "_buchungen WHERE uid=:session_uid");
        $sql -> bindParam(':session_uid', $_SESSION['uid'], PDO::PARAM_INT);
        $sql -> execute();
        $sql = sql::$db->prepare("DELETE FROM " . _VMS_ . "_reloads WHERE uid=:session_uid");
        $sql -> bindParam(':session_uid', $_SESSION['uid'], PDO::PARAM_INT);
        $sql -> execute();
        $sql = sql::$db->prepare("DELETE FROM " . _VMS_ . "_schnittstelle_anfragen WHERE uid=:session_uid");
        $sql -> bindParam(':session_uid', $_SESSION['uid'], PDO::PARAM_INT);
        $sql -> execute();
Joel Kuder's avatar
Joel Kuder committed
        echo '<meta http-equiv="refresh" content="0; URL=http://' . $_SERVER['HTTP_HOST'] . '/?content=/intern/startseite&logout=true">';
    }
}

if ($_POST['aendern'] == 'Jetzt ändern!') {
    // Passwort ändern beginn!
    if ($_POST['pwd'] && $_POST['pwd2']) {
        if ($_POST['pwd'] == $_POST['pwd2']) {
            if (strlen($_POST['pwd']) >= 8) {
Henoch Einbier's avatar
Henoch Einbier committed
                $sql = sql::$db->prepare("UPDATE " . _VMS_ . "_kontodaten SET passwort = :pass WHERE uid = :session_uid");
                $sql -> bindParam(':pass', md5($_POST['pwd']), PDO::PARAM_STR);
                $sql -> bindParam(':session_uid', $_SESSION['uid'], PDO::PARAM_INT);
                $sql -> execute();
Joel Kuder's avatar
Joel Kuder committed
                echo '<meta http-equiv="refresh" content="0; URL=http://' . $_SERVER['HTTP_HOST'] . '/?content=/intern/startseite&logout=true">';
                // $change .= 'Das Passwort wurde geändert!<br><b><font color="#FF0000">Bitte logge Dich jetzt aus und wieder neu ein!</font></b><br>';
            } else {
                $change = 'Passwörter müssen min. 8 Zeichen haben!';
            }
        } else {
            $change = 'Die Passwörter stimmen nicht überein!';
        }
    }
    // Passwort ändern ende!
    // Nickname ändern beginn !
    if ($_POST['aendern'] == 'Jetzt ändern!') {
        if (isset ($_POST['nickname'])) {
Henoch Einbier's avatar
Henoch Einbier committed
            $nickname = ucfirst($_POST['nickname']);
            $nickname_check = sql::$db->prepare("SELECT `nickname` FROM " . _VMS_ . "_userdaten WHERE nickname = :nickname");
            $nickname_check -> bindParam(':nickname', $nickname, PDO::PARAM_STR);
            $nickname_check -> execute();
            $nickname_check2 = sql::$db->prepare("SELECT `nickname` FROM " . _VMS_ . "_userdaten WHERE nickname = :nickname AND uid = :session_uid");
            $nickname_check2 -> bindParam(':nickname', $nickname, PDO::PARAM_STR);
            $nickname_check2 -> bindParam(':session_uid', $_SESSION['uid'], PDO::PARAM_STR);
            $nickname_check2 -> execute();

            if ($nickname_check->rowCount() )
                if ($nickname_check2->rowCount() ) {
Joel Kuder's avatar
Joel Kuder committed
                } else {
                    $change = 'Dieser Nickname ist schon vergeben!<br>';
                } else {
Henoch Einbier's avatar
Henoch Einbier committed
                    $sql = sql::$db->prepare("UPDATE " . _VMS_ . "_userdaten SET nickname = :nickname WHERE uid = :session_uid");
                    $sql -> bindParam(':nickname', $nickname, PDO::PARAM_STR);
                    $sql -> bindParam(':session_uid', $_SESSION['uid'], PDO::PARAM_STR);
                    $sql -> execute();
        if (!filter_var($_POST['emailadresse'],FILTER_VALIDATE_EMAIL)) {
Joel Kuder's avatar
Joel Kuder committed
            $change .= 'Der Emailsyntax ist falsch!<br>';
        } else {
            if ($_POST['newsletter'] == 0 and $_POST['paidmails'] == 0) $mailstatus = 0;
            if ($_POST['newsletter'] == 1 and $_POST['paidmails'] == 0) $mailstatus = 1;
            if ($_POST['newsletter'] == 0 and $_POST['paidmails'] == 1) $mailstatus = 2;
            if ($_POST['newsletter'] == 1 and $_POST['paidmails'] == 1) $mailstatus = 3;
            $_POST['max_forced'] = (int)$_POST['max_forced'];
Henoch Einbier's avatar
Henoch Einbier committed
            $sql = sql::$db->prepare("UPDATE " . _VMS_ . "_emaildaten SET freigabe_fuer = :mailstatus, emailadresse = :emailadresse WHERE uid = :session_uid");
            $sql -> bindParam(':mailstatus', $mailstatus, PDO::PARAM_INT);
            $sql -> bindParam(':emailadresse', $_POST['emailadresse'], PDO::PARAM_STR);
            $sql -> bindParam(':session_uid', $_SESSION['uid'], PDO::PARAM_INT);
            $sql -> execute();
            $sql = sql::$db->prepare("UPDATE " . _VMS_ . "_userdaten SET max_forced = :max_forced WHERE uid = :session_uid");
            $sql -> bindParam(':max_forced', $_POST['max_forced'], PDO::PARAM_STR);
            $sql -> bindParam(':session_uid', $_SESSION['uid'], PDO::PARAM_INT);
            $sql -> execute();
Joel Kuder's avatar
Joel Kuder committed
            $change .= 'Deine Daten wurden aktualisiert!<br>';
        }
    }

Henoch Einbier's avatar
Henoch Einbier committed
    $sql = sql::$db->prepare("SELECT u.*,e.emailadresse,e.freigabe_fuer FROM " . _VMS_ . "_userdaten AS u LEFT JOIN " . _VMS_ . "_emaildaten AS e ON e.uid=u.uid WHERE u.uid = :session_uid LIMIT 1");
    $sql -> bindParam(':session_uid', $_SESSION['uid'], PDO::PARAM_INT);
    $sql -> execute();

    $info = $sql->fetch();
Joel Kuder's avatar
Joel Kuder committed

    if ($info['freigabe_fuer'] == 0) {
        $newsletter = 0;
        $paidmails = 0;
    }
    if ($info['freigabe_fuer'] == 1) {
        $newsletter = 1;
        $paidmails = 0;
    }
    if ($info['freigabe_fuer'] == 2) {
        $newsletter = 0;
        $paidmails = 1;
    }
    if ($info['freigabe_fuer'] == 3) {
        $newsletter = 1;
        $paidmails = 1;
    }

    ?>

<?php head("Userprofil");?>
Joel Kuder's avatar
Joel Kuder committed
Hier findest Du deine Profildaten, bitte passe diese Daten immer an so das diese aktuell sind. Deaktiviere bitte
die Paidmails wenn Du keine haben möchtest!<br>
Joel Kuder's avatar
Joel Kuder committed
<?php foot();?>

<?php head("Profildaten");?>
Joel Kuder's avatar
Joel Kuder committed
  <form action="" method="post">
  <table width="100%" border="0" cellpadding="1" cellspacing="1">
   <tr>
    <td>Nickname:</td>
    <td><input type="text" name="nickname" value="<?php echo $info['nickname'];?>"></td>
   </tr>
   <tr>
    <td>Name:</td>
    <td><input type="text" value="<?php echo $info['nachname'];?>"></td>
   </tr>
   <tr>
    <td>Vorname:</td>
    <td><input type="text" value="<?php echo $info['vorname'];?>"></td>
   </tr>
   <tr>
    <td>Emailadresse:</td>
    <td><input type="text" name="emailadresse" value="<?php echo $info['emailadresse'];?>"></td>
   </tr>
   <tr>
    <td><?php echo $system['waehrung']; ?>-Id:</td>
Joel Kuder's avatar
Joel Kuder committed
    <td><?php echo $_SESSION['uid'];?></td>
   </tr>
   <tr>
    <td>Neues Passwort:</td>
    <td><input type="password" name="pwd"></td>
   </tr>
   <tr>
    <td>Neues Passwortbestätigung:</td>
    <td><input type="password" name="pwd2"></td>
   </tr>
   <tr>
    <td>Newsletter:</td>
    <td>
	<select name="newsletter">
	<option value="1" <?php if ($newsletter == 1) echo 'selected';?>>Ja</option>
	<option value="0" <?php if ($newsletter == 0) echo 'selected';?>>Nein</option>
	</select>
	</td>
   </tr>
   <tr>
    <td>Paidmails:</td>
    <td>
	<select name="paidmails">
	<option value="1" <?php if ($paidmails == 1) echo 'selected';?>>Ja</option>
	<option value="0" <?php if ($paidmails == 0) echo 'selected';?>>Nein</option>
	</select>
	</td>
   </tr>
   <tr>
    <td>Max. anzeigbare Forcedbanner:</td>
    <td>
	<select name="max_forced">
	<option value="3" <?php if ($info['max_forced'] == 3) echo 'selected';?>>3</option>
	<option value="5" <?php if ($info['max_forced'] == 5) echo 'selected';?>>5</option>
	<option value="10" <?php if ($info['max_forced'] == 10) echo 'selected';?>>10</option>
	<option value="20" <?php if ($info['max_forced'] == 20) echo 'selected';?>>20</option>
	<option value="30" <?php if ($info['max_forced'] == 30) echo 'selected';?>>30</option>
	<option value="40" <?php if ($info['max_forced'] == 40) echo 'selected';?>>40</option>
	<option value="50" <?php if ($info['max_forced'] == 50) echo 'selected';?>>50</option>
	</select>
	</td>
   </tr>
   <tr>
   <td align="center" colspan="2"><br>
   <input type="submit" name="aendern" value="Jetzt ändern!"><br>
   <br>
   <?php echo $change;?>
   </td>
   </tr>
  </table>
     </form>
<?php foot();
    $sql = sql::$db->query("SELECT schnittstelle FROM " . _VMS_ . "_schnittstelle WHERE aktiv > 0");
    $moeglich = $sql->fetch(PDO::FETCH_NUM);
Joel Kuder's avatar
Joel Kuder committed

    if ($moeglich != 0) {
        head("Externe Konten");

        if (isset($_POST['veri'])) {
Henoch Einbier's avatar
Henoch Einbier committed
            $sql = sql::$db->prepare("SELECT * FROM " . _VMS_ . "_schnittstelle WHERE schnittstelle = :schnittstelle AND aktiv > 0 LIMIT 1");
            $sql -> bindParam(':schnittstelle', $_POST['schnittstelle'], PDO::PARAM_STR);
            $sql -> execute();
            $schnittstelle = $sql->fetch();
Joel Kuder's avatar
Joel Kuder committed
            // User beim Betreiber prüfen
            $sql = sql::$db->prepare("INSERT INTO " . _VMS_ . "_schnittstelle_anfragen (zeit,uid) VALUES (?,?)");
            $sql->execute(array( $tag, $_SESSION['uid'] ));
Joel Kuder's avatar
Joel Kuder committed
            require_once ("lib/schnittstellen/" . $schnittstelle['schnittstelle'] . ".php");
            uservalidate ($schnittstelle['betreiber_id'], $schnittstelle['betreiber_passwort'], $_POST['veri_id'], $_POST['veri_pw']);
            $error = $trans_ausgabe;
            print_r($error);
            if (!$error) {
Henoch Einbier's avatar
Henoch Einbier committed
            $sql = sql::$db->prepare("INSERT INTO " . _VMS_ . "_multi_konten (uid, kontoid, waehrung) VALUES(?,?,?) ON DUPLICATE KEY UPDATE kontoid=?");
            $sql->execute(array( $_SESSION['uid'], $_POST['veri_id'], $_POST['schnittstelle'], $_POST['veri_id'] ));
Henoch Einbier's avatar
Henoch Einbier committed
        $moeglichkeiten_q = sql::$db->prepare('SELECT schnittstelle FROM ' . _VMS_ . '_schnittstelle WHERE aktiv > 0 AND schnittstelle NOT IN (SELECT waehrung AS schnittstelle FROM vms_multi_konten WHERE uid = :session_uid)');
        $moeglichkeiten_q -> bindParam(':session_uid', $_SESSION['uid'], PDO::PARAM_INT);
        $moeglichkeiten_q -> execute();
Joel Kuder's avatar
Joel Kuder committed

        ?>
  <form action="" method="post">
  <table width="100%" border="0" cellpadding="1" cellspacing="1">
   <tr>
    <td>Konto:</td>
    <td><select name="schnittstelle">
  <?php
        while ($moeglichkeiten = $moeglichkeiten_q->fetch() ) { ?>
Joel Kuder's avatar
Joel Kuder committed
<option value="<?php echo $moeglichkeiten['schnittstelle']; ?>"><?php echo $moeglichkeiten['schnittstelle']; ?></option>
  <?php } ?>
  </select>
</td>
   </tr>
   <tr>
    <td>ID:</td>
    <td><input type="text" name="veri_id" /></td>
   </tr>
   <tr>
    <td>Kennwort:</td>
    <td><input type="text" name="veri_pw" /></td>
   </tr>
   <tr>
    <td>&nbsp;</td>
    <td><input type="submit" name="veri" value="Verifizieren" /></td>
   </tr>
  </table>
</form>
Bereits&nbsp;verifiziert:<br />
<table>
    <?php
Henoch Einbier's avatar
Henoch Einbier committed
        $veri = sql::$db->prepare('SELECT * FROM vms_multi_konten WHERE uid=:session_uid');
        $veri -> bindParam(':session_uid', $_SESSION['uid'], PDO::PARAM_INT);
        $veri -> execute();

        while ($verid = $veri->fetch() ) { ?>
Joel Kuder's avatar
Joel Kuder committed
	<tr>
		<td><?php echo $verid['waehrung']; ?>:</td>
		<td><?php echo $verid['kontoid']; ?></td>
	</tr>
        <?php } ?></table>

    <?php foot();
    }

    ?>



<?php head("Account löschen");?>
Joel Kuder's avatar
Joel Kuder committed
Hier an dieser Stelle kannst Du deinen Account sofort selber löschen wenn Du es wünscht.
Bitte bedenke das alle Daten von Dir verloren gehen und bestehendes Guthaben dann auch
verloren geht, eine spätere Forderung an <?php echo $system['waehrung'];?> ist ausgeschlossen!
Joel Kuder's avatar
Joel Kuder committed
<div align="center">
<form action="" method="post"><br>
<?php echo $delchange;?>
Passwort:&nbsp;&nbsp;<input type="Password" name="del_passwort" value="">&nbsp;&nbsp;&nbsp;<input type="Submit" name="acc_del" value="Jetzt löschen!">
</form>
</div>
<?php foot();?>