Skip to content
Snippets Groups Projects
userprofil.php 6.52 KiB
Newer Older
Eric Laufer's avatar
1.1
Eric Laufer committed
<?php
userstatus();

// Variabeln definieren
if (!isset($_POST['aendern'])) $_POST['aendern'] = "";
if (!isset($_POST['acc_del'])) $_POST['acc_del'] = "";
if (!isset($_POST['del_passwort'])) $_POST['del_passwort'] = "";
if (!isset($_POST['pwd'])) $_POST['pwd'] = "";
if (!isset($_POST['pwd2'])) $_POST['pwd2'] = "";
if (!isset($_POST['nickname'])) $_POST['nickname'] = "";
if (!isset($_POST['newsletter'])) $_POST['newsletter'] = "";
if (!isset($_POST['paidmails'])) $_POST['paidmails'] = "";
if (!isset($_POST['bdate'])) $_POST['bdate'] = "";
if (!isset($change)) $change = "";
if (!isset($mailstatus)) $mailstatus = "";
if (!isset($delchange)) $delchange = "";

if ($_POST['acc_del'] == 'Jetzt löschen!' && $_POST['del_passwort']) {
    $schnittstelle = mysqli_fetch_array(db_query("SELECT `passwort` FROM " . $db_prefix . "_kontodaten LIMIT 1")) or die("Userinfo");
    if ($schnittstelle['passwort'] != md5($_GET['del_passwort'])) {
        echo 'Passwort falsch';
    } else {
        $sperrzeit = time() + (86400 * 30);
        db_query("DELETE FROM " . $db_prefix . "_kontodaten WHERE uid=" . $_SESSION['uid'] . "");
        db_query("DELETE FROM " . $db_prefix . "_emaildaten WHERE uid=" . $_SESSION['uid'] . "");
        db_query("DELETE FROM " . $db_prefix . "_userdaten WHERE uid=" . $_SESSION['uid'] . "");
        db_query("DELETE FROM " . $db_prefix . "_werberdaten WHERE uid=" . $_SESSION['uid'] . "");
        db_query("UPDATE " . $db_prefix . "_werberdaten SET werber = 0 WHERE werber=" . $_SESSION['uid'] . "");
        db_query ('DELETE FROM ' . $db_prefix . '_admin_abuse WHERE uid = ' . $_SESSION['uid']);
        db_query ('DELETE FROM ' . $db_prefix . '_adscan_userblacklist WHERE uid = ' . $_SESSION['uid']);
        db_query ('DELETE FROM vms_buchungen WHERE uid = ' . $_SESSION['uid']);
        db_query ('DELETE FROM vms_reloads WHERE uid = ' . $_SESSION['uid']);
        db_query ('DELETE FROM vms_schnittstelle_anfragen WHERE uid = ' . $_SESSION['uid']);
        echo '<meta http-equiv="refresh" content="0; URL=http://' . $_SERVER['HTTP_HOST'] . '/?content=/intern/startseite&logout=true">';
    }
}

if ($_POST['aendern'] == 'Jetzt ändern!') {
    // Passwort ändern beginn!
    if ($_POST['pwd'] && $_POST['pwd2']) {
        if ($_POST['pwd'] == $_POST['pwd2']) {
            if (strlen($_POST['pwd']) >= 8) {
isaack's avatar
isaack committed
				$pw = pw_erstellen($_POST['pwd']);
                db_query("UPDATE " . $db_prefix . "_kontodaten SET passwort = '" . $pw . "' WHERE uid=" . $_SESSION['uid'] . "");
Eric Laufer's avatar
1.1
Eric Laufer committed
                echo '<meta http-equiv="refresh" content="0; URL=http://' . $_SERVER['HTTP_HOST'] . '/?content=/intern/startseite&logout=true">';
                // $change .= 'Das Passwort wurde geändert!<br><b><font color="#FF0000">Bitte logge Dich jetzt aus und wieder neu ein!</font></b><br>';
            } else {
                $change = 'Passwörter müssen min. 8 Zeichen haben!';
            }
        } else {
            $change = 'Die Passwörter stimmen nicht überein!';
        }
    }
    // Passwort ändern ende!
    if ($_POST['aendern'] == 'Jetzt ändern!') {
isaack's avatar
isaack committed
        if (check_email($_POST['emailadresse']) == false) {
Eric Laufer's avatar
1.1
Eric Laufer committed
            $change .= 'Der Emailsyntax ist falsch!<br>';
        } else {
            if ($_POST['newsletter'] == 0 and $_POST['paidmails'] == 0) $mailstatus = 0;
            if ($_POST['newsletter'] == 1 and $_POST['paidmails'] == 0) $mailstatus = 1;
            if ($_POST['newsletter'] == 0 and $_POST['paidmails'] == 1) $mailstatus = 2;
            if ($_POST['newsletter'] == 1 and $_POST['paidmails'] == 1) $mailstatus = 3;
            $_POST['max_forced'] = (int)$_POST['max_forced'];
            db_query("UPDATE " . $db_prefix . "_emaildaten SET freigabe_fuer = " . mysqli_real_escape_string($sql_open,$mailstatus) . ",
																emailadresse = '" . mysqli_real_escape_string($sql_open,$_POST['emailadresse']) . "'
																WHERE uid=" . $_SESSION['uid'] . "");
            
			db_query("UPDATE " . $db_prefix . "_userdaten SET	max_forced = '" . mysqli_real_escape_string($sql_open,$_POST['max_forced']) . "',
																max_paidlinks = '". mysqli_real_escape_string($sql_open,$_POST['max_paidlinks']) ."'
																WHERE uid=" . $_SESSION['uid'] . "");
            $change .= 'Deine Daten wurden aktualisiert!<br>';
        }
    }
}
    $info = mysqli_fetch_array(db_query("SELECT u.*,e.emailadresse,e.freigabe_fuer FROM " . $db_prefix . "_userdaten AS u LEFT JOIN " . $db_prefix . "_emaildaten AS e ON e.uid=u.uid WHERE u.uid=" . $_SESSION['uid'] . " LIMIT 1"));

    if ($info['freigabe_fuer'] == 0) {
        $newsletter = 0;
        $paidmails = 0;
    }
    if ($info['freigabe_fuer'] == 1) {
        $newsletter = 1;
        $paidmails = 0;
    }
    if ($info['freigabe_fuer'] == 2) {
        $newsletter = 0;
        $paidmails = 1;
    }
    if ($info['freigabe_fuer'] == 3) {
        $newsletter = 1;
        $paidmails = 1;
    }
Eric Laufer's avatar
Eric Laufer committed
	$moeglich = mysqli_fetch_row(db_query('SELECT schnittstelle FROM ' . $db_prefix . '_schnittstelle WHERE aktiv > 0'));
Eric Laufer's avatar
1.1
Eric Laufer committed
    ?>
Eric Laufer's avatar
Eric Laufer committed
	
<div>
	<ul class="nav nav-tabs" role="tablist">
		<li role="presentation" class="active"><a href="#start" role="tab" data-toggle="tab">Profildaten</a></li>
		<?php
		if($moeglich != 0){
			echo '<li role="presentation"><a href="#profil" role="tab" data-toggle="tab">Externe Konten</a></li>';
		}
		?>
		<li role="presentation"><a href="#nickpage" role="tab" data-toggle="tab">Nickpage</a></li>
		<li role="presentation"><a href="#delete" role="tab" data-toggle="tab">Account l&ouml;schen</a></li>
	</ul>
	<div class="tab-content">
		<div role="tabpanel" class="tab-pane active" id="start">
			<?php require('content/konto/profil_include/profil.php');?>
		</div>
		<div role="tabpanel" class="tab-pane" id="profil">
		<?php
		if($moeglich != 0){
			require('content/konto/profil_include/externe_konten.php');
		}
		?>
		</div>
		<div role="tabpanel" class="tab-pane" id="nickpage">
			<?php require_once('content/konto/nickpage.php');?>
		</div>
		<div role="tabpanel" class="tab-pane" id="delete">
			<div class="alert alert-danger">
				Hier an dieser Stelle kannst Du deinen Account sofort selber löschen wenn Du es wünscht.
				Bitte bedenke das alle Daten von Dir verloren gehen und bestehendes Guthaben dann auch
				verloren geht, eine spätere Forderung an <? echo $waehrung;?> ist ausgeschlossen!
				<div align="center">
				<form action="" method="post"><br>
				<?php echo $delchange;?>
				Passwort:&nbsp;&nbsp;<input type="Password" name="del_passwort" value="">&nbsp;&nbsp;&nbsp;<input type="Submit" name="acc_del" value="Jetzt löschen!">
				</form>
				</div>
			</div>
		</div>
	</div>
Eric Laufer's avatar
1.1
Eric Laufer committed

Eric Laufer's avatar
Eric Laufer committed
</div>