usercp.php

<?php
/*
    Copyright (C) 2004-2010 Kestas J. Kuliukas

	This file is part of webDiplomacy.

    webDiplomacy is free software: you can redistribute it and/or modify
    it under the terms of the GNU Affero General Public License as published by
    the Free Software Foundation, either version 3 of the License, or
    (at your option) any later version.

    webDiplomacy is distributed in the hope that it will be useful,
    but WITHOUT ANY WARRANTY; without even the implied warranty of
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
    GNU General Public License for more details.

    You should have received a copy of the GNU Affero General Public License
    along with webDiplomacy.  If not, see <http://www.gnu.org/licenses/>.
 */

/**
 * @package Base
 * @subpackage Forms
 */

// Staging test commit

require_once('header.php');

require_once(l_r('objects/mailer.php'));

global $Mailer;
$Mailer = new Mailer();

if(!$User->type['User'])
{
	libHTML::error(l_t("You can't use the user control panel, you're using a guest account."));
}

libHTML::starthtml();

if ( isset($_REQUEST['emailToken']))
{
	libAuth::formToken_Valid();

	if( !($email = libAuth::emailToken_email($_REQUEST['emailToken'])) )
		libHTML::notice(l_t("Email change validation"), l_t("A bad email token was given, please check the validation link try again"));

	$email = $DB->escape($email);

	if( User::findEmail($email) )
		libHTML::notice(l_t("Email change validation"), l_t("The email address '%s', is already in use. Please contact the moderators at %s for assistance.",$email, Config::$modEMail));

	$DB->sql_put("UPDATE wD_Users SET email='".$email."' WHERE id = ".$User->id);

	$User->email = $email;

	print '<div class="content"><p class="notice">'.l_t('Your e-mail address has been succesfully changed').'</p></div>';
}

if ( isset($_REQUEST['userForm']) )
{
	libAuth::formToken_Valid();
	
	
	// A small hack for the RSS-Button
	if (isset($_POST['rssButton']))
	{
		if ($_POST['rssButton'] != "Delete")
		{
			do {
				$rssID = ''; $keyspace = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';
				$max = mb_strlen($keyspace, '8bit') - 1;
				for ($i = 0; $i < 30; ++$i)
					$rssID .= $keyspace[random_int(0, $max)];
				
				$DB->sql_put("UPDATE wD_Users SET rssID = '".$rssID."' WHERE id = ".$User->id);
				list($ok) = $DB->sql_row('SELECT count(*) FROM wD_Users WHERE rssID="'.$rssID.'"');
			} while ($ok > 1);	
		} else {
			$DB->sql_put("UPDATE wD_Users SET rssID = '' WHERE id = ".$User->id);
		}
	}
		
	$formOutput = '';
	
	try
	{
		
		$errors = array();
		$SQLVars = User::processForm($_REQUEST['userForm'], $errors);

		if( count($errors) )
			throw new Exception(implode('. ',$errors));

		unset($errors);

		$allowed = array(
				'showCountryNames'=>'showCountryNames',
				'showCountryNamesMap'=>'showCountryNamesMap',
				'color Correct'=>'colorCorrect',
				'SortOrder'=>'sortOrder',
				'UnitOrder'=>'unitOrder',
				'pointNClick opt in'=>'pointNClick',
				'Add greyout overlay'=>'terrGrey',
				'greyout intensity' => 'greyOut',
				'cssStyle'=>'cssStyle',
				'forceDesktop'=>'forceDesktop',
				'Remove scrollbars from smallmap'=>'scrollbars',
				'Button size'=>'buttonWidth',
				'E-mail'=>'email','E-mail hiding'=>'hideEmail', 'Homepage'=>'homepage','Comment'=>'comment');

		$User->options->set($_REQUEST['userForm']);
		$User->options->load();

		$set = '';
		foreach( $allowed as $name=>$SQLName )
		{
			if ( ! isset($SQLVars[$SQLName]) or $User->{$SQLName} == $SQLVars[$SQLName] ) continue;

			if ( $SQLName == 'email' )
			{
				if( User::findEmail($SQLVars['email']) )
					throw new Exception(l_t("The e-mail address '%s', is already in use. Please choose another.",$SQLVars['email']));

				$Mailer->Send(array($SQLVars['email']=>$User->username), l_t('Changing your e-mail address'),
					l_t("Hello %s",$User->username).",<br><br>

					".l_t("You can use this link to change your account's e-mail address to this one:")."<br>
					".libAuth::email_validateURL($SQLVars['email'])."<br><br>

					".l_t("If you have any further problems contact the server's admin at %s.",Config::$adminEMail)."<br>
					".l_t("Regards,<br>The webDiplomacy Gamemaster")."<br>
					");

				$formOutput .= l_t('A validation e-mail was sent to the new address, containing a link which will confirm '.
					'the e-mail change. If you don\'t see it after a few minutes check your spam folder.');

				unset($SQLVars['email']);
				continue;
			}
			elseif( $SQLName == 'comment' )
			{
				if ( $User->{$SQLName} == $DB->msg_escape($SQLVars[$SQLName]) ) continue;
			}

			if ( $set != '' ) $set .= ', ';

			$set .= $SQLName." = '".$SQLVars[$SQLName]."'";
			$formOutput .= l_t('%s updated successfully.',$name).' ';
		}
		
		if ( $set != '' )
		{
			$DB->sql_put("UPDATE wD_Users SET ".$set." WHERE id = ".$User->id);
		}

		if ( isset($SQLVars['password']) )
		{
			$DB->sql_put("UPDATE wD_Users SET password = ".$SQLVars['password']." WHERE id = ".$User->id);

			libAuth::keyWipe();
			header('refresh: 3; url=logon.php');

			$formOutput .= l_t('Password updated successfully. You have been logged out and will need to login with the new password.').' ';
		}
	}
	catch(Exception $e)
	{
		$formOutput .= $e->getMessage();
	}

	// We may have received no new data
	if ( $formOutput )
	{
		$User->load(); // Reload in case of a change

		print '<div class="content"><p class="notice">'.$formOutput.'</p></div>';
	}
}

// settings page tutorial
if (isset($_COOKIE['wD-Tutorial-Settings'])) 
{
	$tutorialMessage = l_t('
		These are your account settings. You can update your registered email here, change your password,
		and add a comment to your profile. You can also adjust the game board for different types of 
		colorblindness, set your site theme to a light theme or high-contrast dark theme, choose whether you
		display upcoming live games on your home screen, and more. Please set your registered email to one
		that you regularly check if you did not already when you registered, as your account can be banned 
		if the moderators attempt to contact you by email but do not receive a reply.
	');

	libHTML::help('Settings', $tutorialMessage);

	unset($_COOKIE['wD-Tutorial-Settings']);
	setcookie('wD-Tutorial-Settings', '', time()-3600);
}

function printAndFindTab()
{
	global $User, $Misc;

	$tabs = array();

	$tabs['General']=l_t("General settings");
	$tabs['Features']=l_t("Special features");
	$tabs['IAmap']=l_t("Interactive map");
	$tabs['CountrySwitch']=l_t("Send your games to other players");

	$tab = 'General';
	$tabNames = array_keys($tabs);

	if( isset($_REQUEST['tab']) && in_array($_REQUEST['tab'], $tabNames) )
		$tab = $_REQUEST['tab'];

	print '<div class="gamelistings-tabs">';
	foreach($tabs as $tabChoice=>$tabTitle)
	{
		print '<a title="'.$tabTitle.'" href="usercp.php?tab='.$tabChoice;
		print ( ( $tab == $tabChoice ) ?  '" class="current"' : '"');
		print '>'.l_t($tabChoice).'</a>';
	}
	print '</div>';
	return $tab;
}

print libHTML::pageTitle(l_t('User account settings'),l_t('Control settings for your account.'));

print '
<div class = "settings">
<div class = "settings">This page allows you to update your profile settings. Your email address will never be spammed or given out, and is only used 
by the moderator team to contact you. Please ensure your email is updated so that the moderators can contact you. </br></br> 
If you select "no" for "Hide email address" your email will be displayed to other site users in an image file to protect you from bots. 
If you leave the default of "yes" it is only visible to moderators.</div></br>
<form method="post" class = "settings_show" autocomplete="off">
<ul class="formlist">';

$tab = printAndFindTab();
print '<br>';

switch($tab)
{
	case 'Features':
		require_once(l_r('locales/English/accessability.php'));
		break;
	case 'CountrySwitch':
		require_once(l_r('locales/English/countryswitch.php'));
		break;
	case 'IAmap':
		require_once(l_r('locales/English/IAmap.php'));
		break;
	default:
		require_once(l_r('locales/English/user.php'));
}

print libAuth::formTokenHTML();
print '</form></div>';
print '</div>';

libHTML::$footerIncludes[] = l_j('help.js');
libHTML::footer();

?>