Skip to content
Snippets Groups Projects
userprofil.php 10.4 KiB
Newer Older
Eric Laufer's avatar
1.1
Eric Laufer committed
<?php
userstatus();

// Variabeln definieren
if (!isset($_POST['aendern'])) $_POST['aendern'] = "";
if (!isset($_POST['acc_del'])) $_POST['acc_del'] = "";
if (!isset($_POST['del_passwort'])) $_POST['del_passwort'] = "";
if (!isset($_POST['pwd'])) $_POST['pwd'] = "";
if (!isset($_POST['pwd2'])) $_POST['pwd2'] = "";
if (!isset($_POST['nickname'])) $_POST['nickname'] = "";
if (!isset($_POST['newsletter'])) $_POST['newsletter'] = "";
if (!isset($_POST['paidmails'])) $_POST['paidmails'] = "";
if (!isset($_POST['bdate'])) $_POST['bdate'] = "";
if (!isset($change)) $change = "";
if (!isset($mailstatus)) $mailstatus = "";
if (!isset($delchange)) $delchange = "";

if ($_POST['acc_del'] == 'Jetzt löschen!' && $_POST['del_passwort']) {
    $schnittstelle = mysqli_fetch_array(db_query("SELECT `passwort` FROM " . $db_prefix . "_kontodaten LIMIT 1")) or die("Userinfo");
    if ($schnittstelle['passwort'] != md5($_GET['del_passwort'])) {
        echo 'Passwort falsch';
    } else {
        $sperrzeit = time() + (86400 * 30);
        db_query("DELETE FROM " . $db_prefix . "_kontodaten WHERE uid=" . $_SESSION['uid'] . "");
        db_query("DELETE FROM " . $db_prefix . "_emaildaten WHERE uid=" . $_SESSION['uid'] . "");
        db_query("DELETE FROM " . $db_prefix . "_userdaten WHERE uid=" . $_SESSION['uid'] . "");
        db_query("DELETE FROM " . $db_prefix . "_werberdaten WHERE uid=" . $_SESSION['uid'] . "");
        db_query("UPDATE " . $db_prefix . "_werberdaten SET werber = 0 WHERE werber=" . $_SESSION['uid'] . "");
        db_query ('DELETE FROM ' . $db_prefix . '_admin_abuse WHERE uid = ' . $_SESSION['uid']);
        db_query ('DELETE FROM ' . $db_prefix . '_adscan_userblacklist WHERE uid = ' . $_SESSION['uid']);
        db_query ('DELETE FROM vms_buchungen WHERE uid = ' . $_SESSION['uid']);
        db_query ('DELETE FROM vms_reloads WHERE uid = ' . $_SESSION['uid']);
        db_query ('DELETE FROM vms_schnittstelle_anfragen WHERE uid = ' . $_SESSION['uid']);
        echo '<meta http-equiv="refresh" content="0; URL=http://' . $_SERVER['HTTP_HOST'] . '/?content=/intern/startseite&logout=true">';
    }
}

if ($_POST['aendern'] == 'Jetzt ändern!') {
    // Passwort ändern beginn!
    if ($_POST['pwd'] && $_POST['pwd2']) {
        if ($_POST['pwd'] == $_POST['pwd2']) {
            if (strlen($_POST['pwd']) >= 8) {
isaack's avatar
isaack committed
				$pw = pw_erstellen($_POST['pwd']);
                db_query("UPDATE " . $db_prefix . "_kontodaten SET passwort = '" . $pw . "' WHERE uid=" . $_SESSION['uid'] . "");
Eric Laufer's avatar
1.1
Eric Laufer committed
                echo '<meta http-equiv="refresh" content="0; URL=http://' . $_SERVER['HTTP_HOST'] . '/?content=/intern/startseite&logout=true">';
                // $change .= 'Das Passwort wurde geändert!<br><b><font color="#FF0000">Bitte logge Dich jetzt aus und wieder neu ein!</font></b><br>';
            } else {
                $change = 'Passwörter müssen min. 8 Zeichen haben!';
            }
        } else {
            $change = 'Die Passwörter stimmen nicht überein!';
        }
    }
    // Passwort ändern ende!
    if ($_POST['aendern'] == 'Jetzt ändern!') {
        if (!eregi("^[_\.0-9a-z-]+@([0-9a-z][0-9a-z-]+\.)+[a-z]{2,4}$", $_POST['emailadresse'])) {
            $change .= 'Der Emailsyntax ist falsch!<br>';
        } else {
            if ($_POST['newsletter'] == 0 and $_POST['paidmails'] == 0) $mailstatus = 0;
            if ($_POST['newsletter'] == 1 and $_POST['paidmails'] == 0) $mailstatus = 1;
            if ($_POST['newsletter'] == 0 and $_POST['paidmails'] == 1) $mailstatus = 2;
            if ($_POST['newsletter'] == 1 and $_POST['paidmails'] == 1) $mailstatus = 3;
            $_POST['max_forced'] = (int)$_POST['max_forced'];
            db_query("UPDATE " . $db_prefix . "_emaildaten SET freigabe_fuer = " . mysqli_real_escape_string($sql_open,$mailstatus) . ",
																emailadresse = '" . mysqli_real_escape_string($sql_open,$_POST['emailadresse']) . "'
																WHERE uid=" . $_SESSION['uid'] . "");
            
			db_query("UPDATE " . $db_prefix . "_userdaten SET	max_forced = '" . mysqli_real_escape_string($sql_open,$_POST['max_forced']) . "',
																max_paidlinks = '". mysqli_real_escape_string($sql_open,$_POST['max_paidlinks']) ."'
																WHERE uid=" . $_SESSION['uid'] . "");
            $change .= 'Deine Daten wurden aktualisiert!<br>';
        }
    }
}
    $info = mysqli_fetch_array(db_query("SELECT u.*,e.emailadresse,e.freigabe_fuer FROM " . $db_prefix . "_userdaten AS u LEFT JOIN " . $db_prefix . "_emaildaten AS e ON e.uid=u.uid WHERE u.uid=" . $_SESSION['uid'] . " LIMIT 1"));

    if ($info['freigabe_fuer'] == 0) {
        $newsletter = 0;
        $paidmails = 0;
    }
    if ($info['freigabe_fuer'] == 1) {
        $newsletter = 1;
        $paidmails = 0;
    }
    if ($info['freigabe_fuer'] == 2) {
        $newsletter = 0;
        $paidmails = 1;
    }
    if ($info['freigabe_fuer'] == 3) {
        $newsletter = 1;
        $paidmails = 1;
    }

    ?>

<?php head("$seitenname - Userprofil");?>
Hier findest Du deine Profildaten, bitte passe diese Daten immer an so das diese aktuell sind. Deaktiviere bitte
die Paidmails wenn Du keine habe möchtest!<br>
<?php foot();?>

<?php head("$seitenname - Profildaten");?>
  <form action="" method="post">
isaack's avatar
isaack committed
  <table class="table">
Eric Laufer's avatar
1.1
Eric Laufer committed
   <tr>
isaack's avatar
isaack committed
    <td>Nickname/UID:</td>
    <td><?php echo $info['nickname'];?>&nbsp;/&nbsp;<?php echo $_SESSION['uid'];?></td>
Eric Laufer's avatar
1.1
Eric Laufer committed
   </tr>
   <tr>
    <td>Name:</td>
    <td><input type="text" value="<?php echo $info['nachname'];?>"></td>
   </tr>
   <tr>
    <td>Vorname:</td>
    <td><input type="text" value="<?php echo $info['vorname'];?>"></td>
   </tr>
   <tr>
    <td>Emailadresse:</td>
    <td><input type="text" name="emailadresse" value="<?php echo $info['emailadresse'];?>"></td>
   </tr>
   <tr>
    <td>Neues Passwort:</td>
    <td><input type="password" name="pwd"></td>
   </tr>
   <tr>
    <td>Neues Passwortbestätigung:</td>
    <td><input type="password" name="pwd2"></td>
   </tr>
   <tr>
    <td>Newsletter:</td>
    <td>
	<select name="newsletter">
	<option value="1" <?php if ($newsletter == 1) echo 'selected';?>>Ja</option>
	<option value="0" <?php if ($newsletter == 0) echo 'selected';?>>Nein</option>
	</select>
	</td>
   </tr>
   <tr>
    <td>Paidmails:</td>
    <td>
	<select name="paidmails">
	<option value="1" <?php if ($paidmails == 1) echo 'selected';?>>Ja</option>
	<option value="0" <?php if ($paidmails == 0) echo 'selected';?>>Nein</option>
	</select>
	</td>
   </tr>
   <tr>
    <td>Max. anzeigbare Forcedbanner:</td>
    <td>
		<table>
			<tr>
				<td><input name="max_forced" id="sliderValue1" type="Text" value="<?php echo $info['max_forced'];?>" size="3"></td>
				<td><script language="JavaScript" src="js/userprofil_slieder/slider1.js"></script></td>
			</tr>
		</table>
	</td>
   </tr>
   <tr>
    <td>Max. anzeigbare Textlinks:</td>
    <td>
		<table>
			<tr>
				<td><input name="max_paidlinks" id="sliderValue2" type="Text" value="<?php echo $info['max_paidlinks'];?>" size="3"></td>
				<td><script language="JavaScript" src="js/userprofil_slieder/slider2.js"></script></td>
			</tr>
		</table>
	</td>
   </tr>
   <tr>
   <td align="center" colspan="2"><br>
   <input type="submit" name="aendern" value="Jetzt ändern!"><br>
   <br>
   <?php echo $change;?>
   </td>
   </tr>
  </table>
     </form>
<?php foot();
    $moeglich = mysqli_fetch_row(db_query('SELECT schnittstelle FROM ' . $db_prefix . '_schnittstelle WHERE aktiv > 0'));

    if ($moeglich != 0) {
        head("Externe Konten");

        if (isset($_POST['veri'])) {
            $schnittstelle = mysqli_fetch_array(db_query("SELECT * FROM " . $db_prefix . "_schnittstelle WHERE schnittstelle='" . $_POST['schnittstelle'] . "' AND aktiv > 0 LIMIT 1"));
            echo mysqli_error($sql_open);
            // User beim Betreiber prüfen
            db_query("INSERT INTO " . $db_prefix . "_schnittstelle_anfragen (zeit,uid) VALUES ('" . $tag . "'," . $_SESSION['uid'] . ")");
            echo mysqli_error($sql_open);
            require_once ("lib/schnittstellen/" . $schnittstelle['schnittstelle'] . ".php");
            uservalidate ($schnittstelle['betreiber_id'], $schnittstelle['betreiber_passwort'], $_POST['veri_id'], $_POST['veri_pw']);
            $error = $trans_ausgabe;
            print_r($error);
            if (!$error) db_query("INSERT INTO " . $db_prefix . "_multi_konten (uid, kontoid, waehrung) VALUES( " . $_SESSION['uid'] . ", '" . $_POST['veri_id'] . "', '" . $_POST['schnittstelle'] . "') ON DUPLICATE KEY UPDATE kontoid='" . $_POST['veri_id'] . "'");
            echo mysqli_error();
        }

        $moeglichkeiten_q = db_query('SELECT schnittstelle FROM ' . $db_prefix . '_schnittstelle WHERE aktiv > 0 AND schnittstelle NOT IN (SELECT waehrung AS schnittstelle FROM vms_multi_konten WHERE uid=' . $_SESSION['uid'] . ')');

        ?>
  <form action="" method="post">
  <table width="100%" border="0" cellpadding="1" cellspacing="1">
   <tr>
    <td>Konto:</td>
    <td><select name="schnittstelle">
  <?php
        while ($moeglichkeiten = mysqli_fetch_array($moeglichkeiten_q)) { ?>
<option value="<?php echo $moeglichkeiten['schnittstelle']; ?>"><?php echo $moeglichkeiten['schnittstelle']; ?></option>
  <?php } ?>
  </select>
</td>
   </tr>
   <tr>
    <td>ID:</td>
    <td><input type="text" name="veri_id" /></td>
   </tr>
   <tr>
    <td>Kennwort:</td>
    <td><input type="text" name="veri_pw" /></td>
   </tr>
   <tr>
    <td>&nbsp;</td>
    <td><input type="submit" name="veri" value="Verifizieren" /></td>
   </tr>
  </table>
</form>
Bereits&nbsp;verifiziert:<br />
<table>
    <?php
        $veri = mysqli_query('SELECT * FROM vms_multi_konten WHERE uid=' . $_SESSION['uid'] . '');
        while ($verid = mysqli_fetch_array($veri)) { ?>
	<tr>
		<td><?php echo $verid['waehrung']; ?>:</td>
		<td><?php echo $verid['kontoid']; ?></td>
	</tr>
        <?php } ?></table>

    <?php foot();
    }

    ?>
<?php
head("Nickpage einrichten");
require_once('content/konto/nickpage.php');
foot();?>


<?php head("$seitenname - Account löschen");?>
Hier an dieser Stelle kannst Du deinen Account sofort selber löschen wenn Du es wünscht.
Bitte bedenke das alle Daten von Dir verloren gehen und bestehendes Guthaben dann auch
verloren geht, eine spätere Forderung an <? echo $waehrung;?> ist ausgeschlossen!
<div align="center">
<form action="" method="post"><br>
<?php echo $delchange;?>
Passwort:&nbsp;&nbsp;<input type="Password" name="del_passwort" value="">&nbsp;&nbsp;&nbsp;<input type="Submit" name="acc_del" value="Jetzt löschen!">
</form>
</div>
<?php foot();?>