root/admin/admin_users.php

<?php
/***************************************************************************</span>
<span class="code-comment"> *                              admin_users.php
 *                            -------------------
 *   begin                : Saturday, Feb 13, 2001
 *   copyright            : (C) 2001 The phpBB Group
 *   email                : support@phpbb.com
 *
 *   $Id: admin_users.php,v 1.57.2.29 2005/10/30 15:17:13 acydburn Exp $
 *
 *
 ***************************************************************************/

/***************************************************************************
 *
 *   This program is free software; you can redistribute it and/or modify
 *   it under the terms of the GNU General Public License as published by
 *   the Free Software Foundation; either version 2 of the License, or
 *   (at your option) any later version.
 *
 ***************************************************************************/

if( !empty($setmodules) )</span>
<span class="code-keyword">{
        $filename = basename(__FILE__);
        $module['users']['manage'] = $filename;

        return;
}

define('IN_PHPBB', 1);

$root_path = './../';</span>
<span class="code-lang">require($root_path . 'extension.inc');
require('./pagestart.' . $phpEx);
require($root_path . 'phpBB2/includes/bbcode.'.$phpEx);
require($root_path . 'phpBB2/includes/functions_post.'.$phpEx);
require($root_path . 'include/functions_selects.'.$phpEx);
require($root_path . 'include/functions_check.'.$phpEx);

@include ($root_path . 'languages/lang_' . $config['default_lang'] . '/lang_modcomment_log.php');

$html_entities_match = array('#<#', '#>#');
$html_entities_replace = array('&lt;', '&gt;');
$modcomment = array();

//</span>
<span class="code-comment">// Set mode
//
$mode = request_var('mode', '');

//</span>
<span class="code-comment">// Begin program
//

switch ( $mode ) {</span>
<span class="code-keyword">
    case 'save':
        $user_id = request_var('id', 0);

        if ( isset($_POST['submit']) ) {
            if ( !($this_userdata = get_userdata($user_id)) ) {
                trigger_error($lang['no_user_id_specified'] );
                return;
            }

            if( isset($_POST['deleteuser']) && ( $userdata['uid'] != $user_id ) ) {
                require_once ($root_path . 'include/functions_delete.'.$phpEx);
                $users_id = array($user_id);
                deleteuser($users_id);

                $message = $lang['user_deleted'] . '<br /><br />' . sprintf($lang['click_return_useradmin'], '<a href="' . append_sid("admin_users.$phpEx") . '">', '</a>') . '<br /><br />' . sprintf($lang['click_return_admin_index'], '<a href="' . append_sid("index.$phpEx?pane=right") . '">', '</a>');

                trigger_error($message);
                return;
            }

            $check_fields_ary = array(
                'username' => '',
                'email' => '',
                'password' => '',
                'password_confirm' => '',
                'user_avatar' => '',
                'icq' => '',
                'aim' => '',
                'msn' => '',
                'yim' => '',
                'skype' => '',
                'user_sig' => '',
                'notifypm' => '',
                'parked' => 0,
                'accept_pm' => 1,
                'deletepms' => 0,
                'savepms' => 0,
                'commentpm' => 0,
                'gender' => 0,
                'language' => $config['default_lang'],
                'country' => 1,
                'timezone' => $config['board_timezone'],
                'dst' => $config['board_dst'],
                'torrents_per_page' => 0,
                'show_avatars' => 0,
                'donor' => 0,
                'hidden_torrents' => 0,
                'autodemote' => 0,
                'title' => '',
                'autodemote' => 0,
                'account_status' => 0,
                'user_status' => 0,
                'invites' => 0,
                'add_upload' => 0.0,
                'add_upload_reason' => '',
                'privacy' => PRIVACY_LEVEL_LOW,
                'upload' => 0,
                'download' => 0,
                'year' => 0,
                'month' => 0,
                'day' => 0,
                'bonus' => 0
            );

            foreach ( $check_fields_ary AS $field => $def_value ) {
                $$field = request_var($field, $def_value);
            }

            $signature = str_replace('<br />', "\n", $user_sig);
            $notifypm = '';

            validate_optional_fields($icq, $aim, $msn, $yim, $skype, $signature);

            $user_lang = $language;
            $user_country = $country;
            $user_timezone = $timezone;
            $user_dst = $dst;

            $error = FALSE;
            $error_msg = '';
            $updateset = array();

            if ($username != $this_userdata['name'])
            {
                unset($rename_user);

                if ( utf_strtolower($username) != utf_strtolower($this_userdata['name']) )
                {
                    $result = check_username($username);
                    if ( $result['error'] )
                    {
                        $error = TRUE;
                        $error_msg .= ( ( isset($error_msg) ) ? '<br />' : '' ) . $result['error_msg'];
                    }
                    else if ( utf_strtolower(str_replace("\\'", "''", $username)) == utf_strtolower($userdata['name']) )
                    {
                        $error = TRUE;
                        $error_msg .= ( ( isset($error_msg) ) ? '<br />' : '' ) . $lang['username_taken'];
                    }
                }

                if (!$error)
                {
                    $updateset[] = "name = '" . $db->sql_escape($username) . "'";
                    $rename_user = $username; // Used for renaming usergroup
                }
            }

            $passwd_changed = false;
            if( !empty($password) && !empty($password_confirm) )
            {
                //
                // Awww, the user wants to change their password, isn't that cute..
                //
                if( $password != $password_confirm ) {
                    $error = TRUE;
                    $error_msg .= ( ( isset($error_msg) ) ? '<br />' : '' ) . $lang['password_mismatch'];
                }
                else
                {
                    $secret = mksecret();
                    $password = md5($secret . $password . $secret);
                    $passwd_changed = true;

                    $updateset[] = "pass = '" . $db->sql_escape($password) . "'";
                    $updateset[] = "secret = '" . $db->sql_escape($secret) . "'";
                }
            }
            else if( $password && !$password_confirm )
            {
                $error = TRUE;
                $error_msg .= ( ( isset($error_msg) ) ? '<br />' : '' ) . $lang['password_mismatch'];
            }
            else if( !$password && $password_confirm )
            {
                $error = TRUE;
                $error_msg .= ( ( isset($error_msg) ) ? '<br />' : '' ) . $lang['password_mismatch'];
            }

            if ( $signature != '' )
            {
                $sig_length_check = preg_replace('/(\[.*?)(=.*?)\]/is', '\\1]', $signature);

                $signature = prepare_message($signature, $config['allow_html'], $config['allow_bbcode'], $config['allow_smilies']);

                if ( strlen($sig_length_check) > $config['max_sig_chars'] )
                {
                    $error = TRUE;
                    $error_msg .=  ( ( isset($error_msg) ) ? '<br />' : '' ) . sprintf($lang['signature_too_long'], $config['max_sig_chars']);
                }
            }

            if( isset($_POST['avatardel']) )
            {
                $updateset[] = "avatar = ''";
            }

            if ( $user_avatar && $user_avatar != $this_userdata['avatar'] && strpos($user_avatar, 'user_avatar_' . $this_userdata['uid']) === false && $config['allow_avatar_remote'] ) {
                if ( $error = check_remote_avatar($user_avatar) ) {
                    $error = true;
                    $error_msg = ( !empty($error_msg) ) ? $error_msg . "<br />" . $error : $error;
                }

                $updateset[] = "avatar = '" . $db->sql_escape($user_avatar) . "'";
            }
            if ( isset($_FILES['avatar_upload']) && !empty($_FILES['avatar_upload']['name']) && $config['allow_avatar_upload'] ) {
                $user_avatar = check_upload_image($_FILES['avatar_upload'], $config['avatar_path'] . '/', $config['avatar_filesize'], $config['avatar_max_height'], $config['avatar_max_width'], 'user_avatar_' . $this_userdata['uid']);
                $user_avatar = $user_avatar['filename'];

                $updateset[] = "avatar = '" . $db->sql_escape($user_avatar) . "'";
            }

            if( !check_internet_speed($download) || !check_internet_speed($upload)  )
            {
                $error = true;
                $error_msg = ( !empty($error_msg) ) ? $error_msg . "<br />" . $lang['speed_invalid'] : $lang['speed_invalid'];
            }
            else {
                $updateset[] = "upload = '" . $db->sql_escape($upload) . "'";
                $updateset[] = "download = '" . $db->sql_escape($download) . "'";
            }

            if ( !checkdate($month, $day, $year) )
            {
                $error = true;
                $error_msg = ( !empty($error_msg) ) ? $error_msg . "<br />" . $lang['birthday_invalid'] : $lang['birthday_invalid'];
            }
            else {
                $user_birthday = $year . '-' . $month . '-' . $day;
                $updateset[] = "birthday = '" . $db->sql_escape($user_birthday) . "'";
            }

            if ( isset($_POST['reset_passkey']) ) {
                $torrent_pass = md5($this_userdata['name'] . time() . $this_userdata['pass']);

                $updateset[] = "torrent_pass = '" . $db->sql_escape($torrent_pass) . "'";
            }

            if ( $user_status != $this_userdata['enabled'] ) {
                $modcomment[] = sprintf($lang['modcomment_account_enabled_disabled'], 't' . time(), ( $user_status ? $lang['enabled'] : $lang['disabled'] ), $userdata['name'] );
            }

            if ( !empty($add_upload) && empty($add_upload_reason) ) {
                $error = true;
                $error_msg = ( !empty($error_msg) ) ? $error_msg . "<br />" . $lang['add_upload_js_failed'] : $lang['add_upload_js_failed'];
            }

            if ( $add_upload ) {
                $updateset[] = 'uploaded = uploaded + ' . $add_upload * 1024 * 1024 * 1024;
                $modcomment[] = sprintf($lang['modcomment_add_upload_text'], 't' . time(), $add_upload, $userdata['name'], $add_upload_reason );
            }

            if ( $bonus ) {
                $updateset[] = 'total_seed_time = total_seed_time + ' . ( ( 3600 * $bonus ) / $config['my_bonus_points'] );
                $modcomment[] = sprintf($lang['modcomment_add_bonus_text'], 't' . time(), $bonus, $userdata['name']);
            }

            if ( sizeof($modcomment) ) {
                $updateset[] = 'modcomment = \'' . $db->sql_escape($this_userdata['modcomment'] . "\n" . implode("\n", $modcomment)) . '\'';
            }

            //
            // Update entry in DB
            //
            if( !$error )
            {
                $user_notify = request_var('user_notify', array(''=>0));
                foreach ( $user_notify AS $key => $val ) {
                    $notifypm .= '[' . $key . ']';
                }

                $sql = 'SELECT id FROM ' . CATEGORIES_TABLE;
                $result = $db->sql_query($sql);
                while ( $row = $db->sql_fetchrow($result) ) {
                    if ( isset($_POST['cat' . $row['id']]) ) {
                        $notifypm .= '[cat' . $row['id'] . ']';
                    }
                }

                $updateset[] = "email = '" . $db->sql_escape($email) . "'";
                $updateset[] = "icq = '" . $db->sql_escape($icq) . "'";
                $updateset[] = "aim = '" . $db->sql_escape($aim) . "'";
                $updateset[] = "yahoo = '" . $db->sql_escape($yim) . "'";
                $updateset[] = "msn = '" . $db->sql_escape($msn) . "'";
                $updateset[] = "skype = '" . $db->sql_escape($skype) . "'";
                $updateset[] = "enabled = '" . $db->sql_escape($user_status) . "'";
                $updateset[] = "tzoffset = '" . $db->sql_escape($user_timezone) . "'";
                $updateset[] = "user_dst = '" . $db->sql_escape($user_dst) . "'";
                $updateset[] = "notifs = '" . $db->sql_escape($notifypm) . "'";
                $updateset[] = "parked = '" . $db->sql_escape($parked) . "'";
                $updateset[] = "acceptpms = '" . $db->sql_escape($accept_pm) . "'";
                $updateset[] = "savepms = '" . $db->sql_escape($savepms) . "'";
                $updateset[] = "deletepms = '" . $db->sql_escape($deletepms) . "'";
                $updateset[] = "commentpm = '" . $db->sql_escape($commentpm) . "'";
                $updateset[] = "gender = '" . $db->sql_escape($gender) . "'";
                $updateset[] = "country = '" . $db->sql_escape($user_country) . "'";
                $updateset[] = "torrentsperpage = '" . $db->sql_escape($torrents_per_page) . "'";
                $updateset[] = "avatars = '" . $db->sql_escape($show_avatars) . "'";
                $updateset[] = "donor = '" . $db->sql_escape($donor) . "'";
                $updateset[] = "title = '" . $db->sql_escape($title) . "'";
                $updateset[] = "hiddentorrents = '" . $db->sql_escape($hidden_torrents) . "'";
                $updateset[] = "autodemote = '" . $db->sql_escape($autodemote) . "'";
                $updateset[] = "status = '" . $db->sql_escape($account_status) . "'";
                $updateset[] = "invites = '" . $db->sql_escape($invites) . "'";
                $updateset[] = "status = '" . $db->sql_escape($account_status) . "'";
                $updateset[] = "user_sig = '" . $db->sql_escape($signature) . "'";
                $updateset[] = "privacy = '" . $db->sql_escape($privacy) . "'";
                $updateset[] = "language = '" . $db->sql_escape($user_lang) . "'";


                $sql = 'UPDATE ' . USERS_TABLE . ' SET ' . implode(', ', $updateset) . ' WHERE uid = ' . $user_id;
                $result = $db->sql_query($sql);

                if( isset($rename_user) )
                {
                    $sql = "UPDATE " . GROUPS_TABLE . "
                        SET group_name = '".str_replace("\'", "''", $rename_user)."'
                        WHERE group_name = '".str_replace("'", "''", $this_userdata['name'] )."'";
                    $result = $db->sql_query($sql);
                }

                // Delete user session, to prevent the user navigating the forum (if logged in) when disabled
                if ( !$user_status )
                {
                    $sql = "DELETE FROM " . SESSIONS_TABLE . "
                        WHERE session_user_id = " . $user_id;
                    $db->sql_query($sql);
                }

                // We remove all stored login keys since the password has been updated
                // and change the current one (if applicable)
                if ( $passwd_changed )
                {
                    session_reset_keys($user_id, $user_ip);
                }

                $message = $lang['admin_user_updated'];

                $message .= '<br /><br />' . sprintf($lang['click_return_useradmin'], '<a href="' . append_sid("admin_users.$phpEx") . '">', '</a>') . '<br /><br />' . sprintf($lang['click_return_admin_index'], '<a href="' . append_sid("index.$phpEx?pane=right") . '">', '</a>');

                trigger_error($message);
                return;
            }
            else
            {
                trigger_error($error_msg);
            }
        }
    break;

    case 'edit':
            $user_id = request_var(POST_USERS_URL, 0);
            $username = request_var('username', '');

            if ( $user_id ) {
                $this_userdata = get_userdata($user_id);
            }
            else {
                $this_userdata = get_userdata($username, true);
            }

            if( !$this_userdata )
            {
                trigger_error($lang['no_user_id_specified'] );
                return;
            }
            //
            // Now parse and display it as a template
            //
            $user_id = $this_userdata['uid'];
            $username = $this_userdata['name'];
            $email = $this_userdata['email'];
            $password = '';
            $password_confirm = '';

            $icq = $this_userdata['icq'];
            $aim = str_replace('+', ' ', $this_userdata['aim'] );
            $msn = $this_userdata['msn'];
            $yim = $this_userdata['yahoo'];
            $skype = $this_userdata['skype'];

            $user_avatar = $this_userdata['avatar'];

            $signature = $this_userdata['user_sig'];
            $signature = preg_replace($html_entities_match, $html_entities_replace, $signature);

            $parked = ( $this_userdata['parked'] ? 1 : 0 );
            $accept_pm = $this_userdata['acceptpms'];
            $delete_pms = $this_userdata['deletepms'];
            $save_pms = $this_userdata['savepms'];
            $commentpm  = $this_userdata['commentpm'];
            $gender  = $this_userdata['gender'];

            $user_lang = $this_userdata['language'];
            $user_country = $this_userdata['country'];
            $user_timezone = $this_userdata['tzoffset'];
            // [start] DST
            $user_dst = $this_userdata['user_dst'];
            // [end] DST
            $user_birthday = $this_userdata['birthday'];
            $torrents_per_page = intval($this_userdata['torrentsperpage']);
            $show_avatars = $this_userdata['avatars'];
            $donor = ( $this_userdata['donor'] ? 1 : 0 );
            $title = $this_userdata['title'];
            $hidden_torrents = ( $this_userdata['hiddentorrents'] ? 1 : 0 );
            $autodemote = ( $this_userdata['autodemote'] ? 1 : 0 );
            $account_status  = ( $this_userdata['status'] ? 1 : 0 );

            $user_status = $this_userdata['enabled'];
            $invites = intval($this_userdata['invites']);
            $bonus = number_format( $config['my_bonus_points'] * ( $this_userdata['total_seed_time'] / 3600 ), 2 );


            $s_hidden_fields = '<input type="hidden" name="mode" value="save" /><input type="hidden" name="agreed" value="true" />';
            $s_hidden_fields .= '<input type="hidden" name="id" value="' . $this_userdata['uid'] . '" />';
            $s_hidden_fields .= '<input type="hidden" name="add_upload_reason" value="" />';
            //$s_hidden_fields .= '<input type="hidden" name="signature" value="' . str_replace("\"", "&quot;", $signature) . '" />';

            $avatar = get_user_avatar($this_userdata['uid'], $this_userdata['avatar']);
            $avatar = ( $this_userdata['avatar']? ' <img src="' . $avatar . '" alt="" />' : '' );

            $cats = $cache->obtain_cats();

            if ( $cats ) {
                $catsperrow = 2;
                $cats_split_row = $catsperrow - 1;
                $row = 0;
                $col = 0;

                foreach ( $cats AS $cat_id => $cat_ary ) {
                    if (!$col) {
                        $template->assign_block_vars('cats_row', array());
                    }
                     $template->assign_block_vars('cats_row.cats_col', array(
                        'CAT_ID' => $cat_id,
                        'CAT_NAME' => $cat_ary['cat_name'],
                        'CHECKED' => ( strpos($this_userdata['notifs'], '[cat' . $cat_id . ']') !== false ? ' checked="checked"' : "")
                    ));

                    if ( $col == $cats_split_row ) {
                        $col = 0;
                        $row++;
                    }
                    else {
                        $col++;
                    }
                }
                if ( $col ) {
                    $template->assign_block_vars('cats_row.colspan', array(
                        'CATS_COLSPAN' => ( $catsperrow - $col )
                    ));
                }
            }
            $uploadspeed = generate_internet_speed($this_userdata['upload'], 'upload');
            $downloadspeed = generate_internet_speed($this_userdata['download'], 'download');
            $countries = countries_select($user_country);
            $birthday_select = birthday_select(substr($this_userdata['birthday'], 0, 4), substr($this_userdata['birthday'], 5, 2), substr($this_userdata['birthday'], 8, 2));

            $privacy_input = '<input type="radio" name="privacy" id="privacy" value="' . PRIVACY_LEVEL_LOW . '"' . ( $this_userdata['privacy'] == PRIVACY_LEVEL_LOW ?' checked="checked"':'') . ' /> ' . $lang['low'];
             $privacy_input .= ' <input type="radio" name="privacy" id="privacy" value="' . PRIVACY_LEVEL_NORMAL . '"' . ( $this_userdata['privacy'] == PRIVACY_LEVEL_NORMAL ?' checked="checked"':'') . ' /> ' . $lang['normal'];
             $privacy_input .= ' <input type="radio" name="privacy" id="privacy" value="' . PRIVACY_LEVEL_HIGH . '"' . ( $this_userdata['privacy'] == PRIVACY_LEVEL_HIGH ?' checked="checked"':'') . ' /> ' . $lang['high'];

            $notifs = array('pm', 'forum', 'comments');

            $notifs_options = '';
            foreach ( $notifs AS $_null => $val ) {
                $name = 'user_notify[' . $val . ']';
                $notifs_options .= '<input type="checkbox" id="' . $name . '" name="' . $name . '"' . ( strpos($this_userdata['notifs'], '[' . $val . ']') !== false ? ' checked="checked"' : '' ) . ' value="1" /> ' . $lang['email_notifis_' . $val] . '<br />';
            }

            $template->set_filenames(array(
                "body" => "../admin/user_edit_body.tpl"
            ));

            //
            // Let's do an overall check for settings/versions which would prevent
            // us from doing file uploads....
            //
            $ini_val = ( phpversion() >= '4.0.0' ) ? 'ini_get' : 'get_cfg_var';
            $form_enctype = ( !@$ini_val('file_uploads') || phpversion() == '4.0.4pl1' || ( phpversion() < '4.0.3' && @$ini_val('open_basedir') != '' ) ) ? '' : 'enctype="multipart/form-data"';

            $template->assign_vars(array(
                'USERNAME' => $username,
                'EMAIL' => $email,
                'YIM' => $yim,
                'ICQ' => $icq,
                'MSN' => $msn,
                'AIM' => $aim,
                'SKYPE' => $skype,
                'SIGNATURE' => str_replace('<br />', "\n", $signature),
                'NOTIFY_OPTIONS' => $notifs_options,
                'PARKED_YES' => ( $parked ) ? 'checked="checked"' : '',
                'PARKED_NO' => ( !$parked ) ? 'checked="checked"' : '',
                'ACCEPT_PM_ALL' => ( $accept_pm == 1) ? 'checked="checked"':'',
                'ACCEPT_PM_FRIENDS' => ( $accept_pm == 2) ? 'checked="checked"':'',
                'ACCEPT_PM_ADMIN' => ( !$accept_pm) ? 'checked="checked"':'',
                'SAVE_PM' => ( $save_pms ) ? 'checked="checked"':'',
                'DELETE_PM' => ( $delete_pms ) ? 'checked="checked"':'',
                'COMMENT_PM_YES' => ( $commentpm ) ? 'checked="checked"':'',
                'COMMENT_PM_NO' => ( !$commentpm ) ? 'checked="checked"':'',
                'UPLOAD_SPEED_SELECT' => $uploadspeed,
                'DOWNLOAD_SPEED_SELECT' => $downloadspeed,
                'GENDER_MALE' => ( !$gender ) ?  'checked="checked"':'',
                'GENDER_FEMALE' => ( $gender ) ?  'checked="checked"':'',
                'SHOW_AVATARS' => ($show_avatars) ? 'checked="checked"':'',
                'DONOR_YES' => ( $donor ) ? 'checked="checked"' : '',
                'DONOR_NO' => ( !$donor ) ? 'checked="checked"' : '',
                'TITLE' => $title,
                'HIDDEN_TORRENTS_YES' => ( $hidden_torrents ) ? 'checked="checked"' : '',
                'HIDDEN_TORRENTS_NO' => ( !$hidden_torrents ) ? 'checked="checked"' : '',
                'AUTODEMOTE_YES' => ( $autodemote  ) ? 'checked="checked"' : '',
                'AUTODEMOTE_NO' => ( !$autodemote ) ? 'checked="checked"' : '',
                'ACCOUNT_CONFIRMED_SELECTED' => ( $account_status ) ? 'selected="selected"': '',
                'ACCOUNT_PENDING_SELECTED' => ( !$account_status ) ? 'selected="selected"': '',

                'LANGUAGE_SELECT' => language_select($user_lang),
                'TIMEZONE_SELECT' => tz_select($user_timezone),
                // [start] DST
                'DST_YES' => ($user_dst) ? 'checked="checked"' : '',
                'DST_NO' => (!$user_dst) ? 'checked="checked"' : '',
                // [end] DST
                'COUNTRIES_SELECT' => $countries,
                'BIRTHDAY_SELECT' => $birthday_select,
                'TORRENTS_PER_PAGE' => $torrents_per_page,
                'USER_ACTIVE_YES' => ( $user_status ) ? 'checked="checked"' : '',
                'USER_ACTIVE_NO' => ( !$user_status ) ? 'checked="checked"' : '',
                'INVITES' => $invites,
                'AVATAR' => $avatar,
                'PRIVACY_INPUT' => $privacy_input,
                'L_SIGNATURE_EXPLAIN' =>  sprintf($lang['signature_explain'], $config['max_sig_chars'] ),
                'L_DELETE_ACCOUNT_CONFIRM' => sprintf($lang['delete_account_confirm'], $username),

                'L_SPECIAL' => $lang['user_special'],
                'L_SPECIAL_EXPLAIN' => $lang['user_special_explain'],
                'L_USER_ACTIVE' => $lang['user_status'],

                'L_NOTIFY_ON_REPLY' => $lang['email_notifis_forum'],
                'L_NOTIFY_PM' => $lang['email_notifis_pm'],
                'L_PROFILE_INFO_NOTICE' => $lang['profile_info_warn'],
                'S_FORM_ENCTYPE' => $form_enctype,

                'L_AVATAR_EXPLAIN' => $lang['admin_avatar_explain'],
                'L_DELETE_AVATAR' => $lang['delete_image'],
                'L_AVATAR_GALLERY' => $lang['select_from_gallery'],
                'L_SHOW_GALLERY' => $lang['view_avatar_gallery'],

                'L_DELETE_USER' => $lang['user_delete'],
                'L_DELETE_USER_EXPLAIN' => $lang['user_delete_explain'],
                'L_SELECT_RANK' => $lang['rank_title'],

                'L_ADD_UPLOAD_JS_CONFIRM' => str_replace("'", "\'", $lang['add_upload_js_confirm']),
                'L_ADD_UPLOAD_JS_REASON' => str_replace("'", "\'", $lang['add_upload_js_reason']),
                'L_ADD_UPLOAD_JS_FAILED' => str_replace("'", "\'", $lang['add_upload_js_failed']),

                'S_HIDDEN_FIELDS' => $s_hidden_fields,
                'S_PROFILE_ACTION' => append_sid("admin_users.$phpEx"),

                'BONUS' => $bonus
            ));

            $template->display('body');
    break;

    default:
        //
        // Default user selection box
        //
        $template->set_filenames(array(
            'body' => '../admin/user_select_body.tpl'
        ));

        $template->assign_vars(array(
            'L_USER_TITLE' => $lang['user_admin'],
            'L_USER_EXPLAIN' => $lang['user_admin_explain'],
            //'U_SEARCH_USER' => append_sid("./../search.$phpEx?mode=searchuser"),
            'U_SEARCH_USER' => append_sid($root_path . "/phpbb2.php?page=search&amp;mode=searchuser"),

            'S_USER_ACTION' => append_sid("admin_users.$phpEx") )
        );
        $template->display('body');
    break;
}

include('./page_footer_admin.'.$phpEx);

?>