Skip to content
Snippets Groups Projects
userprofil.php 6.42 KiB
Newer Older
Eric Laufer's avatar
1.1
Eric Laufer committed
<?php
userstatus();

// Variabeln definieren
if (!isset($_POST['aendern'])) $_POST['aendern'] = "";
if (!isset($_POST['acc_del'])) $_POST['acc_del'] = "";
if (!isset($_POST['del_passwort'])) $_POST['del_passwort'] = "";
if (!isset($_POST['pwd'])) $_POST['pwd'] = "";
if (!isset($_POST['pwd2'])) $_POST['pwd2'] = "";
if (!isset($_POST['nickname'])) $_POST['nickname'] = "";
if (!isset($_POST['newsletter'])) $_POST['newsletter'] = "";
if (!isset($_POST['paidmails'])) $_POST['paidmails'] = "";
if (!isset($_POST['bdate'])) $_POST['bdate'] = "";
if (!isset($change)) $change = "";
if (!isset($mailstatus)) $mailstatus = "";
if (!isset($delchange)) $delchange = "";

if ($_POST['acc_del'] == 'Jetzt löschen!' && $_POST['del_passwort']) {
    $schnittstelle = mysqli_fetch_array(db_query("SELECT `passwort` FROM " . $db_prefix . "_kontodaten LIMIT 1")) or die("Userinfo");
    if ($schnittstelle['passwort'] != md5($_GET['del_passwort'])) {
        echo 'Passwort falsch';
    } else {
        $sperrzeit = time() + (86400 * 30);
        db_query("DELETE FROM " . $db_prefix . "_kontodaten WHERE uid=" . $_SESSION['uid'] . "");
        db_query("DELETE FROM " . $db_prefix . "_emaildaten WHERE uid=" . $_SESSION['uid'] . "");
        db_query("DELETE FROM " . $db_prefix . "_userdaten WHERE uid=" . $_SESSION['uid'] . "");
        db_query("DELETE FROM " . $db_prefix . "_werberdaten WHERE uid=" . $_SESSION['uid'] . "");
        db_query("UPDATE " . $db_prefix . "_werberdaten SET werber = 0 WHERE werber=" . $_SESSION['uid'] . "");
        db_query ('DELETE FROM ' . $db_prefix . '_admin_abuse WHERE uid = ' . $_SESSION['uid']);
        db_query ('DELETE FROM vms_buchungen WHERE uid = ' . $_SESSION['uid']);
Christoph Zysik's avatar
Christoph Zysik committed
        $vms->reloads->deleteByUserId( $_SESSION['uid'] );
Eric Laufer's avatar
1.1
Eric Laufer committed
        db_query ('DELETE FROM vms_schnittstelle_anfragen WHERE uid = ' . $_SESSION['uid']);
        echo '<meta http-equiv="refresh" content="0; URL=http://' . $_SERVER['HTTP_HOST'] . '/?content=/intern/startseite&logout=true">';
    }
}

if ($_POST['aendern'] == 'Jetzt ändern!') {
    // Passwort ändern beginn!
    if ($_POST['pwd'] && $_POST['pwd2']) {
        if ($_POST['pwd'] == $_POST['pwd2']) {
            if (strlen($_POST['pwd']) >= 8) {
isaack's avatar
isaack committed
				$pw = pw_erstellen($_POST['pwd']);
                db_query("UPDATE " . $db_prefix . "_kontodaten SET passwort = '" . $pw . "' WHERE uid=" . $_SESSION['uid'] . "");
Eric Laufer's avatar
1.1
Eric Laufer committed
                echo '<meta http-equiv="refresh" content="0; URL=http://' . $_SERVER['HTTP_HOST'] . '/?content=/intern/startseite&logout=true">';
                // $change .= 'Das Passwort wurde geändert!<br><b><font color="#FF0000">Bitte logge Dich jetzt aus und wieder neu ein!</font></b><br>';
            } else {
                $change = 'Passwörter müssen min. 8 Zeichen haben!';
            }
        } else {
            $change = 'Die Passwörter stimmen nicht überein!';
        }
    }
    // Passwort ändern ende!
    if ($_POST['aendern'] == 'Jetzt ändern!') {
isaack's avatar
isaack committed
        if (check_email($_POST['emailadresse']) == false) {
Eric Laufer's avatar
1.1
Eric Laufer committed
            $change .= 'Der Emailsyntax ist falsch!<br>';
        } else {
            if ($_POST['newsletter'] == 0 and $_POST['paidmails'] == 0) $mailstatus = 0;
            if ($_POST['newsletter'] == 1 and $_POST['paidmails'] == 0) $mailstatus = 1;
            if ($_POST['newsletter'] == 0 and $_POST['paidmails'] == 1) $mailstatus = 2;
            if ($_POST['newsletter'] == 1 and $_POST['paidmails'] == 1) $mailstatus = 3;
            $_POST['max_forced'] = (int)$_POST['max_forced'];
            db_query("UPDATE " . $db_prefix . "_emaildaten SET freigabe_fuer = " . mysqli_real_escape_string($sql_open,$mailstatus) . ",
																emailadresse = '" . mysqli_real_escape_string($sql_open,$_POST['emailadresse']) . "'
																WHERE uid=" . $_SESSION['uid'] . "");
            
			db_query("UPDATE " . $db_prefix . "_userdaten SET	max_forced = '" . mysqli_real_escape_string($sql_open,$_POST['max_forced']) . "',
																max_paidlinks = '". mysqli_real_escape_string($sql_open,$_POST['max_paidlinks']) ."'
																WHERE uid=" . $_SESSION['uid'] . "");
            $change .= 'Deine Daten wurden aktualisiert!<br>';
        }
    }
}
    $info = mysqli_fetch_array(db_query("SELECT u.*,e.emailadresse,e.freigabe_fuer FROM " . $db_prefix . "_userdaten AS u LEFT JOIN " . $db_prefix . "_emaildaten AS e ON e.uid=u.uid WHERE u.uid=" . $_SESSION['uid'] . " LIMIT 1"));

    if ($info['freigabe_fuer'] == 0) {
        $newsletter = 0;
        $paidmails = 0;
    }
    if ($info['freigabe_fuer'] == 1) {
        $newsletter = 1;
        $paidmails = 0;
    }
    if ($info['freigabe_fuer'] == 2) {
        $newsletter = 0;
        $paidmails = 1;
    }
    if ($info['freigabe_fuer'] == 3) {
        $newsletter = 1;
        $paidmails = 1;
    }
Eric Laufer's avatar
Eric Laufer committed
	$moeglich = mysqli_fetch_row(db_query('SELECT schnittstelle FROM ' . $db_prefix . '_schnittstelle WHERE aktiv > 0'));
Eric Laufer's avatar
1.1
Eric Laufer committed
    ?>
Eric Laufer's avatar
Eric Laufer committed
	
<div>
	<ul class="nav nav-tabs" role="tablist">
		<li role="presentation" class="active"><a href="#start" role="tab" data-toggle="tab">Profildaten</a></li>
		<?php
		if($moeglich != 0){
			echo '<li role="presentation"><a href="#profil" role="tab" data-toggle="tab">Externe Konten</a></li>';
		}
		?>
		<li role="presentation"><a href="#nickpage" role="tab" data-toggle="tab">Nickpage</a></li>
		<li role="presentation"><a href="#delete" role="tab" data-toggle="tab">Account l&ouml;schen</a></li>
	</ul>
	<div class="tab-content">
		<div role="tabpanel" class="tab-pane active" id="start">
			<?php require('content/konto/profil_include/profil.php');?>
		</div>
		<div role="tabpanel" class="tab-pane" id="profil">
		<?php
		if($moeglich != 0){
			require('content/konto/profil_include/externe_konten.php');
		}
		?>
		</div>
		<div role="tabpanel" class="tab-pane" id="nickpage">
			<?php require_once('content/konto/nickpage.php');?>
		</div>
		<div role="tabpanel" class="tab-pane" id="delete">
			<div class="alert alert-danger">
				Hier, an dieser Stelle, kannst du deinen Account sofort und selber l&ouml;schen, wenn du es w&uuml;nscht.
				Bitte bedenke, dass alle Daten von dir sowie bestehendes Guthaben ebenfalls
				verloren geht, eine sp&auml;tere Forderung an <? echo $pageconfig['waehrung'];?> ist ausgeschlossen!
Eric Laufer's avatar
Eric Laufer committed
				<div align="center">
				<form action="" method="post"><br>
				<?php echo $delchange;?>
				Passwort:&nbsp;&nbsp;<input type="Password" name="del_passwort" value="">&nbsp;&nbsp;&nbsp;<input type="Submit" name="acc_del" value="Jetzt löschen!">
				</form>
				</div>
			</div>
		</div>
	</div>
Eric Laufer's avatar
1.1
Eric Laufer committed

</div>