root/my.php

<?php</span>
<span class="code-lang">$root_path = './';
require ($root_path . 'include/config.php');
require ($root_path . 'include/functions_check.php');

$userdata = session_pagestart($user_ip);
init_userprefs($userdata);
loggedinorreturn();

$action = request_var('action', '');
$type = request_var('type', '');

$template->assign_vars(array(</span>
<span class="code-lang">        'TYPE'           => $type,
        'ALLOW_MY_BONUS' => ( $config['allow_my_bonus'] ? 1 : '' ),
        'U_MY'           => append_sid('my.php'),          )
);

$files = array();</span>
<span class="code-lang">if ( $dir = opendir($root_path . 'include/ucp/') ) {
    while ( false !== ($file = readdir($dir)) ) {
        if ( $file != '.' && $file != '..' ) {
            $file = substr($file, 0, strpos($file, '.php'));
            $files[] = $file;
            $template->assign_vars(array(
                'U_' . strtoupper($file) => append_sid('my.php?type=' . $file)
            ));
        }
    }
}

if ( $type ) {
    if ( in_array($type, $files) ) {
        require_once($root_path . 'include/ucp/' . $type . '.php');
    }
    else {
        trigger_error('invalid_action');
    }
}
else {
    if ( isset($_POST['submit']) ) {
        $updateset = array();
        $notifs = '';
        $full_cats = $cache->obtain_cats();

        $parked = request_var('parked', 0);
        $updateset['parked'] = ( $parked ? 1 : 0 );

        $user_limit_ary_allow_download = unserialize($config['user_limit_ary_allow_download']);
        $can_leech = ( isset($user_limit_ary_allow_download[$userdata['class']]) ? 1 : 0 );

        if ( $parked && $userdata['can_leech'] ) {
            $updateset['can_leech'] = 0;
        }
        elseif ( !$parked && !$userdata['can_leech'] && $can_leech ) {
            $updateset['can_leech'] = 1;
        }

        $accept_pms = request_var('acceptpms', 0);
        $updateset['acceptpms'] = ( $accept_pms == 1 ? 1 : ( !$accept_pms ? 0 : 2 ) );

        $updateset['deletepms'] = ( isset($_POST['deletepms']) ? 1 : 0 );

        $updateset['savepms'] = ( isset($_POST['savepms']) ? 1 : 0 );

        $user_notify = request_var('user_notify', array(''=>0));
        foreach ( $user_notify AS $key => $val ) {
            $notifs .= '[' . $key . ']';
        }

        $comment_pm = request_var('commentpm', 0);
        $updateset['commentpm'] = ( $comment_pm ? 1 : 0 );

        $expand_cats = request_var('expand_cats', 0);
        $notifs .= ( $expand_cats ? '[ex]' : '' );

        $cats = request_var('cats', array(0=>0));

        if ( sizeof($cats) ) {
            foreach ( $cats AS $cat_id => $_null ) {
                if ( $full_cats[$cat_id]['cat_parent'] ) {
                    $notifs .= '[cat' . $cat_id . ']';
                }
                //no cat parent, try to get all child cats
                else {
                    foreach ( $full_cats AS $_key => $_ary ) {
                        if ( $_ary['cat_parent'] == $cat_id ) {
                            $notifs .= '[cat' . $_key . ']';
                        }
                    }
                    $notifs .= '[cat' . $cat_id . ']';
                }
            }
            $updateset['notifs'] = $notifs;
        }
        else {
            $updateset['notifs'] = $notifs;
        }

        $language = request_var('language', $config['default_lang']);
        if (!check_language($language)) {
            $language = $config['default_lang'];
        }
        $updateset['language'] = $db->sql_escape($language);

        $style = request_var('style', $config['default_style']);
        if (!check_style_id($style)) {
            $style = $config['default_style'];
        }
        $updateset['user_style'] = $style;

        $download = request_var('download', '');
        $upload = request_var('upload', '');
        if ( !check_internet_speed($upload) || !check_internet_speed($download) ) {
            trigger_error($lang['speed_invalid']);
        }
        $updateset['download'] = $download;
        $updateset['upload'] = $upload;

        $icq = request_var('icq', '');

        $msn = request_var('msn', '');

        $aim = request_var('aim', '');

        $yim = request_var('yahoo', '');

        $skype = request_var('skype', '');

        $country = request_var('country', 0);

        if ( !check_country_id($country) ) {
            trigger_error($lang['invalid_country']);
        }
        $updateset['country'] = $country;

        $tzoffset = (float) request_var('tzoffset', 0.0);
        $updateset['tzoffset'] = $tzoffset;

        $user_dst = request_var('dst', 0);
        $updateset['user_dst'] = ( $user_dst ? 1 : 0 );

        $gender = request_var('gender', 0);
        $updateset['gender'] = ( $gender ? 1 : 0 );

        $year = request_var('year', 0);
        $month = request_var('month', 0);
        $day = request_var('day', 0);
        if ( !checkdate($month, $day, $year) ) {
            trigger_error($lang['birthday_invalid']);
        }
        $birthday = $year . '-' . $month . '-' . $day;
        $updateset['birthday'] = $birthday;

        $avatar = request_var('avatar_link', '');
        if ( $avatar && $avatar != $userdata['avatar'] && strpos($avatar, 'user_avatar_' . $userdata['uid']) === false && $config['allow_avatar_remote'] ) {
            if ( $error = check_remote_avatar($avatar) ) {
                trigger_error($error);
            }
        }
        if ( isset($_FILES['avatar_upload']) && !empty($_FILES['avatar_upload']['name']) && $config['allow_avatar_upload'] ) {
            $avatar = check_upload_image($_FILES['avatar_upload'], $config['avatar_path'] . '/', $config['avatar_filesize'], $config['avatar_max_height'], $config['avatar_max_width'], 'user_avatar_' . $userdata['uid']);
            $avatar = $avatar['filename'];
        }
        $updateset['avatar'] = $avatar;

        $torrentperpage = request_var('torrentsperpage', 0);
        $updateset['torrentsperpage'] = min(200, $torrentperpage);

        $updateset['avatars'] = ( isset($_POST['avatars']) ? 1 : 0);

        $privacy = request_var('privacy', PRIVACY_LEVEL_LOW);
        $privacy = min($privacy, PRIVACY_LEVEL_HIGH);
        $updateset['privacy'] = $privacy;

        //start signature section
        $signature = request_var('signature', '');

        validate_optional_fields($icq, $aim, $msn, $yim, $skype, $signature);

        $updateset['icq'] = $icq;
        $updateset['msn'] = $msn;
        $updateset['aim'] = $aim;
        $updateset['yahoo'] = $yim;
        $updateset['skype'] = $skype;

        if ( $signature != '' ) {
            define ('IN_PHPBB', true);
            require($root_path . 'phpBB2/includes/bbcode.php');
            require($root_path . 'phpBB2/includes/functions_post.php');

            if ( strlen($signature) > $config['max_sig_chars'] ) {
                trigger_error( sprintf($lang['signature_too_long'], $config['max_sig_chars']) );
            }

            $signature = prepare_message($signature, $config['allow_html'], $config['allow_bbcode'], $config['allow_smilies']);
            $updateset['user_sig'] = $signature;
        }
        else {
            $updateset['user_sig'] = '';
        }
        //end signature section


        // start email section
        $urladd = '';
        $changedemail = 0;
        $email = request_var('email', '');
        if ( $email != $userdata['email'] ) {
            if ( $error = check_email($email) ) {
                trigger_error($error['error_msg']);
            }
            $changedemail = 1;
        }
        if ( $changedemail ) {
            $sec = mksecret();
            $hash = md5($sec . $email . $sec);
            $obemail = urlencode($email);
            $updateset['editsecret'] = $sec;

            include_once($root_path . 'include/functions_messenger.php');
            $messenger = new messenger(false);
            $messenger->template('account_email_change', $userdata['language']);
            $messenger->replyto($userdata['email']);
            $messenger->to($userdata['email'], $userdata['name']);

            $messenger->assign_vars(array(
                'USERNAME' => html_entity_decode($userdata['name']),
                'EMAIL' => $email,
                'IP' => $user_ip,
                'U_LINK' => generate_base_url() . '/signup.php?id=' . $userdata['uid'] . '&type=change_mail&hash=' . $hash . '&email=' . $obemail )
            );
            $messenger->send(NOTIFY_EMAIL);
            $messenger->reset();
            $urladd .= '&mailsent=1';
        }
        // end email section

        if ( isset($_POST['resetpasskey']) ) {
            $torrent_pass = md5($userdata['name'] . time() . $userdata['pass']);
            $updateset['torrent_pass'] = $torrent_pass;
        }

        //start password section
        $chpassword = request_var('chpassword', '');
        $passagain = request_var('passagain', '');
        if ($chpassword != '') {
            if (strlen($chpassword) > 40) {
                trigger_error($lang['pass_too_long']);
            }
            if ($chpassword != $passagain) {
                trigger_error($lang['passwords_not_the_same']);
            }
            $sec = mksecret();
            $passhash = md5($sec . $chpassword . $sec);
            $updateset['secret'] = $sec;
            $updateset['pass'] = $passhash;
            session_reset_keys($userdata['uid'], $user_ip);
        }
        //end password section

        $sql = 'UPDATE ' . USERS_TABLE . ' SET ' . $db->sql_build_array('UPDATE', $updateset) . ' WHERE uid = ' . $userdata['uid'];
        $db->sql_query($sql);
        redirect( append_sid('my.php?edited=1' . $urladd));
    }
    else {
        require($root_path . 'include/functions_selects.php');

        $template->assign_block_vars('main_part', array());

        if ( isset($_GET['mailsent']) ) {
            $message = $lang['mail_sent'];
        }
        elseif ( isset($_GET['edited']) ) {
            $message = $lang['profile_edited'];
        }
        elseif ( isset($_GET['emailch']) ) {
            $message = $lang['mail_edited'];
        }
        else {
            $message = '';
        }


        $user_sig = $userdata['user_sig'];
        $template->assign_vars(array(
                'U_USERBAR' => append_sid('my.php?type=get_userbar'),
                'L_MESSAGE' => $message,
                'L_AVATAR_DESCR' => sprintf($lang['avatar_url_descr'], $config['avatar_max_width'], $config['avatar_max_height'], mksize($config['avatar_filesize'])),
                'USER_ID' => $userdata['uid'],
                'USERNAME' => $userdata['name'],
                'ACCOUNT_PARKED_INPUT' => '<input type="radio" class="radio" name="parked"' . ($userdata['parked'] ? ' checked="checked"' : '') . ' value="1" /> ' . $lang['yes'] . ' <input type="radio" class="radio" id="parked" name="parked"' .  ( !$userdata['parked'] ? ' checked="checked"' : ''). ' value="0" /> ' . $lang['no'],
                'ACCEPT_PM_INPUT' => '<input type="radio" class="radio" id="acceptpms" name="acceptpms"' . ( $userdata['acceptpms'] ? ' checked="checked"' : '') . ' value="1" /> ' . $lang['all_except_block'] . '<br /><input type="radio" class="radio" name="acceptpms"' .  ($userdata['acceptpms'] == 2 ? ' checked="checked"' : '') . ' value="2" /> ' . $lang['only_friends'] . '<br /><input type="radio" class="radio" name="acceptpms"' .  ( !$userdata['acceptpms'] ? ' checked="checked"' : '') . ' value="0" /> ' . $lang['only_admins'],
                'DELETE_PM_INPUT' => '<input type="checkbox" id="deletepms" name="deletepms"' . ( $userdata['deletepms'] ? ' checked="checked"' : '') . ' />',
                'SAVE_PM_INPUT' => '<input type="checkbox" id="savepms" name="savepms"' . ( $userdata['savepms'] ? ' checked="checked"' : '') . ' />',
                'COMMENTPM_INPUT' => '<input type="radio" class="radio" id="commentpm" name="commentpm"' . ( $userdata['commentpm'] ? ' checked="checked"' : '') . ' value="1" /> ' . $lang['yes'] . ' <input type="radio" class="radio" name="commentpm"' .  ( !$userdata['commentpm'] ? ' checked="checked"' : '') . ' value="0" /> ' . $lang['no'],
                'USER_ICQ' => $userdata['icq'],
                'USER_SKYPE' => $userdata['skype'],
                'USER_AIM' => $userdata['aim'],
                'USER_MSN' => $userdata['msn'],
                'USER_YAHOO' => $userdata['yahoo'],
                'USER_SIGNATURE' => ( $config['allow_sig'] ? '<textarea rows="4" cols="40" id="signature" name="signature">' . $user_sig . '</textarea>' : '' ),
                'GENDER_INPUT' => '<input type="radio" class="radio" id="gender" name="gender"' . ( !$userdata['gender'] ? ' checked="checked"' : '') . ' value="0" />' . $lang['gender_male'] . ' <input type="radio" class="radio" name="gender"' .  ($userdata['gender'] ? ' checked="checked"' : '') . ' value="1" />' . $lang['gender_female'],
                'USER_AVATAR_LINK_INPUT' =>  ( $config['allow_avatar_remote'] ? '<input type="text" id="avatar" name="avatar_link" size="45" value="' . htmlspecialchars($userdata['avatar']) . '" />' : '' ),
                'USER_AVATAR_UPLOAD_INPUT' => ( $config['allow_avatar_upload'] ?  '<input type="file" id="avatar" name="avatar_upload" size="40" value="" />' : '' ),
                'TORRENTS_PER_PAGE_INPUT' => '<input type="text" size="10" maxlength="3" id="torrentsperpage" name="torrentsperpage" value="' . $userdata['torrentsperpage'] . '" />',
                'SHOW_AVATARS_INPUT' => '<input type="checkbox" id="avatars" name="avatars"' . ($userdata['avatars'] ? ' checked="checked"' : '') . ' />',
                'EMAIL_ADRESS_INPUT' =>  '<input type="text" id="email" name="email" size="45" value="' . $userdata['email'] . '" />',
                'EXPAND_CATS_INPUT' => '<input type="radio" name="expand_cats" value="1"' . ( strpos($userdata['notifs'], '[ex]') !== false ? ' checked="checked"' : '' ) . ' /> ' . $lang['yes'] . ' <input type="radio" name="expand_cats" value="0"' . ( strpos($userdata['notifs'], '[ex]') === false ? ' checked="checked"' : '' ) . ' /> ' . $lang['no']
        ));

        $countries = countries_select($userdata['country']);
        $uploadspeed = generate_internet_speed($userdata['upload'], 'upload');
        $downloadspeed = generate_internet_speed($userdata['download'], 'download');
        $timezone = tz_select($userdata['tzoffset'], 'tzoffset');
        $lang_select = language_select($userdata['language']);
        $birthday_select = birthday_select(substr($userdata['birthday'], 0, 4), substr($userdata['birthday'], 5, 2), substr($userdata['birthday'], 8, 2));
        $style_select = style_select($userdata['user_style']);

        $dst = '<input type="radio" class="radio" id="dst" name="dst" value="1"' . ($userdata['user_dst']?' checked="checked"':'') . ' /> ' . $lang['yes'];
        $dst .= ' <input type="radio" class="radio" id="dst" name="dst" value="0"' . (!$userdata['user_dst']?' checked="checked"':'') . ' /> ' . $lang['no'];

        $privacy_input = '<input type="radio" name="privacy" id="privacy" value="' . PRIVACY_LEVEL_LOW . '"' . ( $userdata['privacy'] == PRIVACY_LEVEL_LOW ?' checked="checked"':'') . ' /> ' . $lang['low'];
        $privacy_input .= ' <input type="radio" name="privacy" id="privacy" value="' . PRIVACY_LEVEL_NORMAL . '"' . ( $userdata['privacy'] == PRIVACY_LEVEL_NORMAL ?' checked="checked"':'') . ' /> ' . $lang['normal'];
        $privacy_input .= ' <input type="radio" name="privacy" id="privacy" value="' . PRIVACY_LEVEL_HIGH . '"' . ( $userdata['privacy'] == PRIVACY_LEVEL_HIGH ?' checked="checked"':'') . ' /> ' . $lang['high'];

        $catoptions = '';

        $sql = 'SELECT * FROM ' . CATEGORIES_TABLE . ' ORDER BY cat_parent_id, name';
        $result = $db->sql_query($sql, 30 * 60);

        $cats = array();
        while( $row = $db->sql_fetchrow($result) ){
            $parent_cat_id = ( $row['cat_parent_id'] ? $row['cat_parent_id'] : $row['id'] );
            $cats[$parent_cat_id][$row['id']] = $row;
        }

        if ( sizeof($cats) ) {
            $catsperrow = 2;
            $cats_split_row = $catsperrow - 1;
            $row = 0;
            $col = 0;

            foreach ( $cats AS $cat_id => $ary ) {
                if (!$col) {
                    $template->assign_block_vars('cats_row', array());
                }

                 $template->assign_block_vars('cats_row.cats_col', array(
                    'CAT_ID' => $cat_id,
                    'CAT_NAME' => $ary[$cat_id]['name'],
                    'CHECKED' => ( strpos($userdata['notifs'], '[cat' . $cat_id . ']') !== false ? ' checked="checked"' : "")
                ));

                if ($col == $cats_split_row) {
                    $col = 0;
                    $row++;
                }
                else {
                    $col++;
                }

                unset($ary[$cat_id]);
                if ( $count = sizeof($ary) ) {
                    $value = '';
                    foreach( $ary AS $key => $sub_ary ) {
                         $template->assign_block_vars('cats_row.cats_col.subcats_row', array(
                            'CAT_ID' => $key,
                            'CAT_NAME' => $sub_ary['name'],
                            'CHECKED' => ( strpos($userdata['notifs'], '[cat' . $key . ']') !== false ? ' checked="checked"' : "")
                        ));
                    }
                }
            }

            if ($col) {
                $template->assign_block_vars('cats_row.colspan', array(
                    'CATS_COLSPAN' => ( $catsperrow - $col )
                ));
            }
        }

        $notifs = array('pm', 'forum', 'comments');

        $notifs_options = '';
        foreach ( $notifs AS $_null => $val ) {
            $name = 'user_notify[' . $val . ']';
            $notifs_options .= '<input type="checkbox" id="' . $name . '" name="' . $name . '"' . ( strpos($userdata['notifs'], '[' . $val . ']') !== false ? ' checked="checked"' : '' ) . ' value="1" /> ' . $lang['email_notifis_' . $val] . '<br />';
        }

        $template->assign_vars(array(
                'LANG_INPUT' => $lang_select,
                'UPLOAD_SPEED_OPTIONS' => $uploadspeed,
                'DOWNLOAD_SPEED_OPTIONS' => $downloadspeed,
                'COUNTRIES_OPTIONS' => $countries,
                'TIMEZONE' => $timezone,
                'STYLE_SELECT' => $style_select,
                'DST' => $dst,
                'BIRTHDAY_OPTIONS' => $birthday_select,
                'PRIVACY_INPUT' => $privacy_input,
                'EMAIL_NOTIFIS_INPUT' => $notifs_options
        ));
    }

    $body = 'ucp_body.html';
}

stdhead(sprintf($lang['personal_page'], (!isset($_GET['id']) ? $userdata['name'] : '')));
$template->set_filenames(array(</span>
<span class="code-lang">        'body' => $body)
);
stdfoot();
?>