!C99Shell v. 1.0 pre-release build #13!

Software: Apache. PHP/5.5.15 

uname -a: Windows NT SVR-DMZ 6.1 build 7600 (Windows Server 2008 R2 Enterprise Edition) i586 

SYSTEM 

Safe-mode: OFF (not secure)

E:\xampp\xampp\htdocs\phpbb\includes\   drwxrwxrwx
Free 7.97 GB of 239.26 GB (3.33%)
Detected drives: [ a ] [ c ] [ d ] [ e ] [ f ]
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     usercp_register.php (43.46 KB)      -rw-rw-rw-
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php
/***************************************************************************
 *                            usercp_register.php
 *                            -------------------
 *   begin                : Saturday, Feb 13, 2001
 *   copyright            : (C) 2001 The phpBB Group
 *   email                : support@phpbb.com
 *
 *   $Id: usercp_register.php,v 1.20.2.60 2005/05/07 14:17:36 acydburn Exp $
 *
 *
 ***************************************************************************/

/***************************************************************************
 *
 *   This program is free software; you can redistribute it and/or modify
 *   it under the terms of the GNU General Public License as published by
 *   the Free Software Foundation; either version 2 of the License, or
 *   (at your option) any later version.
 *
 *
 ***************************************************************************/

/*

    This code has been modified from its original form by psoTFX @ phpbb.com
    Changes introduce the back-ported phpBB 2.2 visual confirmation code. 

    NOTE: Anyone using the modified code contained within this script MUST include
    a relevant message such as this in usercp_register.php ... failure to do so 
    will affect a breach of Section 2a of the GPL and our copyright

    png visual confirmation system : (c) phpBB Group, 2003 : All Rights Reserved

*/

if ( !defined('IN_PHPBB') )
{
    die(
"Hacking attempt");
    exit;
}

$unhtml_specialchars_match = array('#&gt;#''#&lt;#''#&quot;#''#&amp;#');
$unhtml_specialchars_replace = array('>''<''"''&');

// ---------------------------------------
// Load agreement template since user has not yet
// agreed to registration conditions/coppa
//
function show_coppa()
{
    global 
$userdata$template$lang$phpbb_root_path$phpEx;

    
$template->set_filenames(array(
        
'body' => 'agreement.tpl')
    );

    
$template->assign_vars(array(
        
'REGISTRATION' => $lang['Registration'],
        
'AGREEMENT' => $lang['Reg_agreement'],
        
"AGREE_OVER_13" => $lang['Agree_over_13'],
        
"AGREE_UNDER_13" => $lang['Agree_under_13'],
        
'DO_NOT_AGREE' => $lang['Agree_not'],

        
"U_AGREE_OVER13" => append_sid("profile.$phpEx?mode=register&amp;agreed=true"),
        
"U_AGREE_UNDER13" => append_sid("profile.$phpEx?mode=register&amp;agreed=true&amp;coppa=true"))
    );

    
$template->pparse('body');

}
//
// ---------------------------------------

$error FALSE;
$page_title = ( $mode == 'editprofile' ) ? $lang['Edit_profile'] : $lang['Register'];

if ( 
$mode == 'register' && !isset($HTTP_POST_VARS['agreed']) && !isset($HTTP_GET_VARS['agreed']) )
{
    include(
$phpbb_root_path 'includes/page_header.'.$phpEx);

    
show_coppa();

    include(
$phpbb_root_path 'includes/page_tail.'.$phpEx);
}

$coppa = ( empty($HTTP_POST_VARS['coppa']) && empty($HTTP_GET_VARS['coppa']) ) ? TRUE;

//
// Check and initialize some variables if needed
//
if (
    isset(
$HTTP_POST_VARS['submit']) ||
    isset(
$HTTP_POST_VARS['avatargallery']) ||
    isset(
$HTTP_POST_VARS['submitavatar']) ||
    isset(
$HTTP_POST_VARS['cancelavatar']) ||
    
$mode == 'register' )
{
    include(
$phpbb_root_path 'includes/functions_validate.'.$phpEx);
    include(
$phpbb_root_path 'includes/bbcode.'.$phpEx);
    include(
$phpbb_root_path 'includes/functions_post.'.$phpEx);

    if ( 
$mode == 'editprofile' )
    {
        
$user_id intval($HTTP_POST_VARS['user_id']);
        
$current_email trim(htmlspecialchars($HTTP_POST_VARS['current_email']));
    }

    
$strip_var_list = array('username' => 'username''email' => 'email''icq' => 'icq''aim' => 'aim''msn' => 'msn''yim' => 'yim''website' => 'website''location' => 'location''occupation' => 'occupation''interests' => 'interests');
    
$strip_var_list['confirm_code'] = 'confirm_code';

    
// Strip all tags from data ... may p**s some people off, bah, strip_tags is
    // doing the job but can still break HTML output ... have no choice, have
    // to use htmlspecialchars ... be prepared to be moaned at.
    
while( list($var$param) = @each($strip_var_list) )
    {
        if ( !empty(
$HTTP_POST_VARS[$param]) )
        {
            $
$var trim(htmlspecialchars($HTTP_POST_VARS[$param]));
        }
    }

    
$trim_var_list = array('cur_password' => 'cur_password''new_password' => 'new_password''password_confirm' => 'password_confirm''signature' => 'signature');

    while( list(
$var$param) = @each($trim_var_list) )
    {
        if ( !empty(
$HTTP_POST_VARS[$param]) )
        {
            $
$var trim($HTTP_POST_VARS[$param]);
        }
    }

    
$signature str_replace('<br />'"\n"$signature);

    
// Run some validation on the optional fields. These are pass-by-ref, so they'll be changed to
    // empty strings if they fail.
    
validate_optional_fields($icq$aim$msn$yim$website$location$occupation$interests$signature);

    
$viewemail = ( isset($HTTP_POST_VARS['viewemail']) ) ? ( ($HTTP_POST_VARS['viewemail']) ? TRUE ) : 0;
    
$allowviewonline = ( isset($HTTP_POST_VARS['hideonline']) ) ? ( ($HTTP_POST_VARS['hideonline']) ? TRUE ) : TRUE;
    
$notifyreply = ( isset($HTTP_POST_VARS['notifyreply']) ) ? ( ($HTTP_POST_VARS['notifyreply']) ? TRUE ) : 0;
    
$notifypm = ( isset($HTTP_POST_VARS['notifypm']) ) ? ( ($HTTP_POST_VARS['notifypm']) ? TRUE ) : TRUE;
    
$popup_pm = ( isset($HTTP_POST_VARS['popup_pm']) ) ? ( ($HTTP_POST_VARS['popup_pm']) ? TRUE ) : TRUE;

    if ( 
$mode == 'register' )
    {
        
$attachsig = ( isset($HTTP_POST_VARS['attachsig']) ) ? ( ($HTTP_POST_VARS['attachsig']) ? TRUE ) : $board_config['allow_sig'];

        
$allowhtml = ( isset($HTTP_POST_VARS['allowhtml']) ) ? ( ($HTTP_POST_VARS['allowhtml']) ? TRUE ) : $board_config['allow_html'];
        
$allowbbcode = ( isset($HTTP_POST_VARS['allowbbcode']) ) ? ( ($HTTP_POST_VARS['allowbbcode']) ? TRUE ) : $board_config['allow_bbcode'];
        
$allowsmilies = ( isset($HTTP_POST_VARS['allowsmilies']) ) ? ( ($HTTP_POST_VARS['allowsmilies']) ? TRUE ) : $board_config['allow_smilies'];
    }
    else
    {
        
$attachsig = ( isset($HTTP_POST_VARS['attachsig']) ) ? ( ($HTTP_POST_VARS['attachsig']) ? TRUE ) : 0;

        
$allowhtml = ( isset($HTTP_POST_VARS['allowhtml']) ) ? ( ($HTTP_POST_VARS['allowhtml']) ? TRUE ) : $userdata['user_allowhtml'];
        
$allowbbcode = ( isset($HTTP_POST_VARS['allowbbcode']) ) ? ( ($HTTP_POST_VARS['allowbbcode']) ? TRUE ) : $userdata['user_allowbbcode'];
        
$allowsmilies = ( isset($HTTP_POST_VARS['allowsmilies']) ) ? ( ($HTTP_POST_VARS['allowsmilies']) ? TRUE ) : $userdata['user_allowsmile'];
    }

    
$user_style = ( isset($HTTP_POST_VARS['style']) ) ? intval($HTTP_POST_VARS['style']) : $board_config['default_style'];

    if ( !empty(
$HTTP_POST_VARS['language']) )
    {
        if ( 
preg_match('/^[a-z_]+$/i'$HTTP_POST_VARS['language']) )
        {
            
$user_lang htmlspecialchars($HTTP_POST_VARS['language']);
        }
        else
        {
            
$error true;
            
$error_msg $lang['Fields_empty'];
        }
    }
    else
    {
        
$user_lang $board_config['default_lang'];
    }

    
$user_timezone = ( isset($HTTP_POST_VARS['timezone']) ) ? doubleval($HTTP_POST_VARS['timezone']) : $board_config['board_timezone'];

    
$sql "SELECT config_value
        FROM " 
CONFIG_TABLE "
        WHERE config_name = 'default_dateformat'"
;
    if ( !(
$result $db->sql_query($sql)) )
    {
        
message_die(GENERAL_ERROR'Could not select default dateformat'''__LINE____FILE__$sql);
    }
    
$row $db->sql_fetchrow($result);
    
$board_config['default_dateformat'] = $row['config_value'];
    
$user_dateformat = ( !empty($HTTP_POST_VARS['dateformat']) ) ? trim(htmlspecialchars($HTTP_POST_VARS['dateformat'])) : $board_config['default_dateformat'];

    
$user_avatar_local = ( isset($HTTP_POST_VARS['avatarselect']) && !empty($HTTP_POST_VARS['submitavatar']) && $board_config['allow_avatar_local'] ) ? htmlspecialchars($HTTP_POST_VARS['avatarselect']) : ( ( isset($HTTP_POST_VARS['avatarlocal'])  ) ? htmlspecialchars($HTTP_POST_VARS['avatarlocal']) : '' );

    
$user_avatar_remoteurl = ( !empty($HTTP_POST_VARS['avatarremoteurl']) ) ? trim(htmlspecialchars($HTTP_POST_VARS['avatarremoteurl'])) : '';
    
$user_avatar_upload = ( !empty($HTTP_POST_VARS['avatarurl']) ) ? trim($HTTP_POST_VARS['avatarurl']) : ( ( $HTTP_POST_FILES['avatar']['tmp_name'] != "none") ? $HTTP_POST_FILES['avatar']['tmp_name'] : '' );
    
$user_avatar_name = ( !empty($HTTP_POST_FILES['avatar']['name']) ) ? $HTTP_POST_FILES['avatar']['name'] : '';
    
$user_avatar_size = ( !empty($HTTP_POST_FILES['avatar']['size']) ) ? $HTTP_POST_FILES['avatar']['size'] : 0;
    
$user_avatar_filetype = ( !empty($HTTP_POST_FILES['avatar']['type']) ) ? $HTTP_POST_FILES['avatar']['type'] : '';

    
$user_avatar = ( empty($user_avatar_loc) && $mode == 'editprofile' ) ? $userdata['user_avatar'] : '';
    
$user_avatar_type = ( empty($user_avatar_loc) && $mode == 'editprofile' ) ? $userdata['user_avatar_type'] : '';

    if ( (isset(
$HTTP_POST_VARS['avatargallery']) || isset($HTTP_POST_VARS['submitavatar']) || isset($HTTP_POST_VARS['cancelavatar'])) && (!isset($HTTP_POST_VARS['submit'])) )
    {
        
$username stripslashes($username);
        
$email stripslashes($email);
        
$cur_password htmlspecialchars(stripslashes($cur_password));
        
$new_password htmlspecialchars(stripslashes($new_password));
        
$password_confirm htmlspecialchars(stripslashes($password_confirm));

        
$icq stripslashes($icq);
        
$aim stripslashes($aim);
        
$msn stripslashes($msn);
        
$yim stripslashes($yim);

        
$website stripslashes($website);
        
$location stripslashes($location);
        
$occupation stripslashes($occupation);
        
$interests stripslashes($interests);
        
$signature stripslashes($signature);

        
$user_lang stripslashes($user_lang);
        
$user_dateformat stripslashes($user_dateformat);

        if ( !isset(
$HTTP_POST_VARS['cancelavatar']))
        {
            
$user_avatar $user_avatar_local;
            
$user_avatar_type USER_AVATAR_GALLERY;
        }
    }
}

//
// Let's make sure the user isn't logged in while registering,
// and ensure that they were trying to register a second time
// (Prevents double registrations)
//
if ($mode == 'register' && ($userdata['session_logged_in'] || $username == $userdata['username']))
{
    
message_die(GENERAL_MESSAGE$lang['Username_taken'], ''__LINE____FILE__);
}

//
// Did the user submit? In this case build a query to update the users profile in the DB
//
if ( isset($HTTP_POST_VARS['submit']) )
{
    include(
$phpbb_root_path 'includes/usercp_avatar.'.$phpEx);

    
$passwd_sql '';
    if ( 
$mode == 'editprofile' )
    {
        if ( 
$user_id != $userdata['user_id'] )
        {
            
$error TRUE;
            
$error_msg .= ( ( isset($error_msg) ) ? '<br />' '' ) . $lang['Wrong_Profile'];
        }
    }
    else if ( 
$mode == 'register' )
    {
        if ( empty(
$username) || empty($new_password) || empty($password_confirm) || empty($email) )
        {
            
$error TRUE;
            
$error_msg .= ( ( isset($error_msg) ) ? '<br />' '' ) . $lang['Fields_empty'];
        }
    }

    if (
$board_config['enable_confirm'] && $mode == 'register')
    {
        if (empty(
$HTTP_POST_VARS['confirm_id']))
        {
            
$error TRUE;
            
$error_msg .= ( ( isset($error_msg) ) ? '<br />' '' ) . $lang['Confirm_code_wrong'];
        }
        else
        {
            
$confirm_id htmlspecialchars($HTTP_POST_VARS['confirm_id']);
            if (!
preg_match('/^[A-Za-z0-9]+$/'$confirm_id))
            {
                
$confirm_id '';
            }
            
            
$sql 'SELECT code 
                FROM ' 
CONFIRM_TABLE 
                WHERE confirm_id = '
$confirm_id
                    AND session_id = '" 
$userdata['session_id'] . "'";
            if (!(
$result $db->sql_query($sql)))
            {
                
message_die(GENERAL_ERROR'Could not obtain confirmation code'__LINE____FILE__$sql);
            }

            if (
$row $db->sql_fetchrow($result))
            {
                if (
$row['code'] != $confirm_code)
                {
                    
$error TRUE;
                    
$error_msg .= ( ( isset($error_msg) ) ? '<br />' '' ) . $lang['Confirm_code_wrong'];
                }
                else
                {
                    
$sql 'DELETE FROM ' CONFIRM_TABLE 
                        WHERE confirm_id = '
$confirm_id
                            AND session_id = '" 
$userdata['session_id'] . "'";
                    if (!
$db->sql_query($sql))
                    {
                        
message_die(GENERAL_ERROR'Could not delete confirmation code'__LINE____FILE__$sql);
                    }
                }
            }
            else
            {        
                
$error TRUE;
                
$error_msg .= ( ( isset($error_msg) ) ? '<br />' '' ) . $lang['Confirm_code_wrong'];
            }
            
$db->sql_freeresult($result);
        }
    }

    
$passwd_sql '';
    if ( !empty(
$new_password) && !empty($password_confirm) )
    {
        if ( 
$new_password != $password_confirm )
        {
            
$error TRUE;
            
$error_msg .= ( ( isset($error_msg) ) ? '<br />' '' ) . $lang['Password_mismatch'];
        }
        else if ( 
strlen($new_password) > 32 )
        {
            
$error TRUE;
            
$error_msg .= ( ( isset($error_msg) ) ? '<br />' '' ) . $lang['Password_long'];
        }
        else
        {
            if ( 
$mode == 'editprofile' )
            {
                
$sql "SELECT user_password
                    FROM " 
USERS_TABLE "
                    WHERE user_id = 
$user_id";
                if ( !(
$result $db->sql_query($sql)) )
                {
                    
message_die(GENERAL_ERROR'Could not obtain user_password information'''__LINE____FILE__$sql);
                }

                
$row $db->sql_fetchrow($result);

                if ( 
$row['user_password'] != md5($cur_password) )
                {
                    
$error TRUE;
                    
$error_msg .= ( ( isset($error_msg) ) ? '<br />' '' ) . $lang['Current_password_mismatch'];
                }
            }

            if ( !
$error )
            {
                
$new_password md5($new_password);
                
$passwd_sql "user_password = '$new_password', ";
            }
        }
    }
    else if ( ( empty(
$new_password) && !empty($password_confirm) ) || ( !empty($new_password) && empty($password_confirm) ) )
    {
        
$error TRUE;
        
$error_msg .= ( ( isset($error_msg) ) ? '<br />' '' ) . $lang['Password_mismatch'];
    }

    
//
    // Do a ban check on this email address
    //
    
if ( $email != $userdata['user_email'] || $mode == 'register' )
    {
        
$result validate_email($email);
        if ( 
$result['error'] )
        {
            
$email $userdata['user_email'];

            
$error TRUE;
            
$error_msg .= ( ( isset($error_msg) ) ? '<br />' '' ) . $result['error_msg'];
        }

        if ( 
$mode == 'editprofile' )
        {
            
$sql "SELECT user_password
                FROM " 
USERS_TABLE "
                WHERE user_id = 
$user_id";
            if ( !(
$result $db->sql_query($sql)) )
            {
                
message_die(GENERAL_ERROR'Could not obtain user_password information'''__LINE____FILE__$sql);
            }

            
$row $db->sql_fetchrow($result);

            if ( 
$row['user_password'] != md5($cur_password) )
            {
                
$email $userdata['user_email'];

                
$error TRUE;
                
$error_msg .= ( ( isset($error_msg) ) ? '<br />' '' ) . $lang['Current_password_mismatch'];
            }
        }
    }

    
$username_sql '';
    if ( 
$board_config['allow_namechange'] || $mode == 'register' )
    {
        if ( empty(
$username) )
        {
            
// Error is already triggered, since one field is empty.
            
$error TRUE;
        }
        else if ( 
$username != $userdata['username'] || $mode == 'register')
        {
            if (
strtolower($username) != strtolower($userdata['username']) || $mode == 'register')
            {
                
$result validate_username($username);
                if ( 
$result['error'] )
                {
                    
$error TRUE;
                    
$error_msg .= ( ( isset($error_msg) ) ? '<br />' '' ) . $result['error_msg'];
                }
            }

            if (!
$error)
            {
                
$username_sql "username = '" str_replace("\'""''"$username) . "', ";
            }
        }
    }

    if ( 
$signature != '' )
    {
        if ( 
strlen($signature) > $board_config['max_sig_chars'] )
        {
            
$error TRUE;
            
$error_msg .= ( ( isset($error_msg) ) ? '<br />' '' ) . $lang['Signature_too_long'];
        }

        if ( 
$signature_bbcode_uid == '' )
        {
            
$signature_bbcode_uid = ( $allowbbcode ) ? make_bbcode_uid() : '';
        }
        
$signature prepare_message($signature$allowhtml$allowbbcode$allowsmilies$signature_bbcode_uid);
    }

    if ( 
$website != '' )
    {
        
rawurlencode($website);
    }

    
$avatar_sql '';

    if ( isset(
$HTTP_POST_VARS['avatardel']) && $mode == 'editprofile' )
    {
        
$avatar_sql user_avatar_delete($userdata['user_avatar_type'], $userdata['user_avatar']);
    }

    if ( ( !empty(
$user_avatar_upload) || !empty($user_avatar_name) ) && $board_config['allow_avatar_upload'] )
    {
        if ( !empty(
$user_avatar_upload) )
        {
            
$avatar_mode = (empty($user_avatar_name)) ? 'remote' 'local';
            
$avatar_sql user_avatar_upload($mode$avatar_mode$userdata['user_avatar'], $userdata['user_avatar_type'], $error$error_msg$user_avatar_upload$user_avatar_name$user_avatar_size$user_avatar_filetype);
        }
        else if ( !empty(
$user_avatar_name) )
        {
            
$l_avatar_size sprintf($lang['Avatar_filesize'], round($board_config['avatar_filesize'] / 1024));

            
$error true;
            
$error_msg .= ( ( !empty($error_msg) ) ? '<br />' '' ) . $l_avatar_size;
        }
    }
    else if ( 
$user_avatar_remoteurl != '' && $board_config['allow_avatar_remote'] )
    {
        if ( @
file_exists(@phpbb_realpath('./' $board_config['avatar_path'] . '/' $userdata['user_avatar'])) )
        {
            @
unlink(@phpbb_realpath('./' $board_config['avatar_path'] . '/' $userdata['user_avatar']));
        }
        
$avatar_sql user_avatar_url($mode$error$error_msg$user_avatar_remoteurl);
    }
    else if ( 
$user_avatar_local != '' && $board_config['allow_avatar_local'] )
    {
        if ( @
file_exists(@phpbb_realpath('./' $board_config['avatar_path'] . '/' $userdata['user_avatar'])) )
        {
            @
unlink(@phpbb_realpath('./' $board_config['avatar_path'] . '/' $userdata['user_avatar']));
        }
        
$avatar_sql user_avatar_gallery($mode$error$error_msg$user_avatar_local);
    }

    if ( !
$error )
    {
        if ( 
$avatar_sql == '' )
        {
            
$avatar_sql = ( $mode == 'editprofile' ) ? '' "'', " USER_AVATAR_NONE;
        }

        if ( 
$mode == 'editprofile' )
        {
            if ( 
$email != $userdata['user_email'] && $board_config['require_activation'] != USER_ACTIVATION_NONE && $userdata['user_level'] != ADMIN )
            {
                
$user_active 0;

                
$user_actkey gen_rand_string(true);
                
$key_len 54 - ( strlen($server_url) );
                
$key_len = ( $key_len ) ? $key_len 6;
                
$user_actkey substr($user_actkey0$key_len);

                if ( 
$userdata['session_logged_in'] )
                {
                    
session_end($userdata['session_id'], $userdata['user_id']);
                }
            }
            else
            {
                
$user_active 1;
                
$user_actkey '';
            }

            
$sql "UPDATE " USERS_TABLE "
                SET " 
$username_sql $passwd_sql "user_email = '" str_replace("\'""''"$email) ."', user_icq = '" str_replace("\'""''"$icq) . "', user_website = '" str_replace("\'""''"$website) . "', user_occ = '" str_replace("\'""''"$occupation) . "', user_from = '" str_replace("\'""''"$location) . "', user_interests = '" str_replace("\'""''"$interests) . "', user_sig = '" str_replace("\'""''"$signature) . "', user_sig_bbcode_uid = '$signature_bbcode_uid', user_viewemail = $viewemail, user_aim = '" str_replace("\'""''"str_replace(' ''+'$aim)) . "', user_yim = '" str_replace("\'""''"$yim) . "', user_msnm = '" str_replace("\'""''"$msn) . "', user_attachsig = $attachsig, user_allowsmile = $allowsmilies, user_allowhtml = $allowhtml, user_allowbbcode = $allowbbcode, user_allow_viewonline = $allowviewonline, user_notify = $notifyreply, user_notify_pm = $notifypm, user_popup_pm = $popup_pm, user_timezone = $user_timezone, user_dateformat = '" str_replace("\'""''"$user_dateformat) . "', user_lang = '" str_replace("\'""''"$user_lang) . "', user_style = $user_style, user_active = $user_active, user_actkey = '" str_replace("\'""''"$user_actkey) . "'" $avatar_sql "
                WHERE user_id = 
$user_id";
            if ( !(
$result $db->sql_query($sql)) )
            {
                
message_die(GENERAL_ERROR'Could not update users table'''__LINE____FILE__$sql);
            }

            if ( !
$user_active )
            {
                
//
                // The users account has been deactivated, send them an email with a new activation key
                //
                
include($phpbb_root_path 'includes/emailer.'.$phpEx);
                
$emailer = new emailer($board_config['smtp_delivery']);

                
$emailer->from($board_config['board_email']);
                
$emailer->replyto($board_config['board_email']);

                
$emailer->use_template('user_activate'stripslashes($user_lang));
                
$emailer->email_address($email);
                
$emailer->set_subject($lang['Reactivate']);

                
$emailer->assign_vars(array(
                    
'SITENAME' => $board_config['sitename'],
                    
'USERNAME' => preg_replace($unhtml_specialchars_match$unhtml_specialchars_replacesubstr(str_replace("\'""'"$username), 025)),
                    
'EMAIL_SIG' => (!empty($board_config['board_email_sig'])) ? str_replace('<br />'"\n""-- \n" $board_config['board_email_sig']) : '',

                    
'U_ACTIVATE' => $server_url '?mode=activate&' POST_USERS_URL '=' $user_id '&act_key=' $user_actkey)
                );
                
$emailer->send();
                
$emailer->reset();

                
$message $lang['Profile_updated_inactive'] . '<br /><br />' sprintf($lang['Click_return_index'],  '<a href="' append_sid("index.$phpEx") . '">''</a>');
            }
            else
            {
                
$message $lang['Profile_updated'] . '<br /><br />' sprintf($lang['Click_return_index'],  '<a href="' append_sid("index.$phpEx") . '">''</a>');
            }

            
$template->assign_vars(array(
                
"META" => '<meta http-equiv="refresh" content="5;url=' append_sid("index.$phpEx") . '">')
            );

            
message_die(GENERAL_MESSAGE$message);
        }
        else
        {
            
$sql "SELECT MAX(user_id) AS total
                FROM " 
USERS_TABLE;
            if ( !(
$result $db->sql_query($sql)) )
            {
                
message_die(GENERAL_ERROR'Could not obtain next user_id information'''__LINE____FILE__$sql);
            }

            if ( !(
$row $db->sql_fetchrow($result)) )
            {
                
message_die(GENERAL_ERROR'Could not obtain next user_id information'''__LINE____FILE__$sql);
            }
            
$user_id $row['total'] + 1;

            
//
            // Get current date
            //
            
$sql "INSERT INTO " USERS_TABLE "    (user_id, username, user_regdate, user_password, user_email, user_icq, user_website, user_occ, user_from, user_interests, user_sig, user_sig_bbcode_uid, user_avatar, user_avatar_type, user_viewemail, user_aim, user_yim, user_msnm, user_attachsig, user_allowsmile, user_allowhtml, user_allowbbcode, user_allow_viewonline, user_notify, user_notify_pm, user_popup_pm, user_timezone, user_dateformat, user_lang, user_style, user_level, user_allow_pm, user_active, user_actkey)
                VALUES (
$user_id, '" str_replace("\'""''"$username) . "', " time() . ", '" str_replace("\'""''"$new_password) . "', '" str_replace("\'""''"$email) . "', '" str_replace("\'""''"$icq) . "', '" str_replace("\'""''"$website) . "', '" str_replace("\'""''"$occupation) . "', '" str_replace("\'""''"$location) . "', '" str_replace("\'""''"$interests) . "', '" str_replace("\'""''"$signature) . "', '$signature_bbcode_uid', $avatar_sql$viewemail, '" str_replace("\'""''"str_replace(' ''+'$aim)) . "', '" str_replace("\'""''"$yim) . "', '" str_replace("\'""''"$msn) . "', $attachsig$allowsmilies$allowhtml$allowbbcode$allowviewonline$notifyreply$notifypm$popup_pm$user_timezone, '" str_replace("\'""''"$user_dateformat) . "', '" str_replace("\'""''"$user_lang) . "', $user_style, 0, 1, ";
            if ( 
$board_config['require_activation'] == USER_ACTIVATION_SELF || $board_config['require_activation'] == USER_ACTIVATION_ADMIN || $coppa )
            {
                
$user_actkey gen_rand_string(true);
                
$key_len 54 - (strlen($server_url));
                
$key_len = ( $key_len ) ? $key_len 6;
                
$user_actkey substr($user_actkey0$key_len);
                
$sql .= "0, '" str_replace("\'""''"$user_actkey) . "')";
            }
            else
            {
                
$sql .= "1, '')";
            }

            if ( !(
$result $db->sql_query($sqlBEGIN_TRANSACTION)) )
            {
                
message_die(GENERAL_ERROR'Could not insert data into users table'''__LINE____FILE__$sql);
            }

            
$sql "INSERT INTO " GROUPS_TABLE " (group_name, group_description, group_single_user, group_moderator)
                VALUES ('', 'Personal User', 1, 0)"
;
            if ( !(
$result $db->sql_query($sql)) )
            {
                
message_die(GENERAL_ERROR'Could not insert data into groups table'''__LINE____FILE__$sql);
            }

            
$group_id $db->sql_nextid();

            
$sql "INSERT INTO " USER_GROUP_TABLE " (user_id, group_id, user_pending)
                VALUES (
$user_id$group_id, 0)";
            if( !(
$result $db->sql_query($sqlEND_TRANSACTION)) )
            {
                
message_die(GENERAL_ERROR'Could not insert data into user_group table'''__LINE____FILE__$sql);
            }

            if ( 
$coppa )
            {
                
$message $lang['COPPA'];
                
$email_template 'coppa_welcome_inactive';
            }
            else if ( 
$board_config['require_activation'] == USER_ACTIVATION_SELF )
            {
                
$message $lang['Account_inactive'];
                
$email_template 'user_welcome_inactive';
            }
            else if ( 
$board_config['require_activation'] == USER_ACTIVATION_ADMIN )
            {
                
$message $lang['Account_inactive_admin'];
                
$email_template 'admin_welcome_inactive';
            }
            else
            {
                
$message $lang['Account_added'];
                
$email_template 'user_welcome';
            }

            include(
$phpbb_root_path 'includes/emailer.'.$phpEx);
            
$emailer = new emailer($board_config['smtp_delivery']);

            
$emailer->from($board_config['board_email']);
            
$emailer->replyto($board_config['board_email']);

            
$emailer->use_template($email_templatestripslashes($user_lang));
            
$emailer->email_address($email);
            
$emailer->set_subject(sprintf($lang['Welcome_subject'], $board_config['sitename']));

            if( 
$coppa )
            {
                
$emailer->assign_vars(array(
                    
'SITENAME' => $board_config['sitename'],
                    
'WELCOME_MSG' => sprintf($lang['Welcome_subject'], $board_config['sitename']),
                    
'USERNAME' => preg_replace($unhtml_specialchars_match$unhtml_specialchars_replacesubstr(str_replace("\'""'"$username), 025)),
                    
'PASSWORD' => $password_confirm,
                    
'EMAIL_SIG' => str_replace('<br />'"\n""-- \n" $board_config['board_email_sig']),

                    
'FAX_INFO' => $board_config['coppa_fax'],
                    
'MAIL_INFO' => $board_config['coppa_mail'],
                    
'EMAIL_ADDRESS' => $email,
                    
'ICQ' => $icq,
                    
'AIM' => $aim,
                    
'YIM' => $yim,
                    
'MSN' => $msn,
                    
'WEB_SITE' => $website,
                    
'FROM' => $location,
                    
'OCC' => $occupation,
                    
'INTERESTS' => $interests,
                    
'SITENAME' => $board_config['sitename']));
            }
            else
            {
                
$emailer->assign_vars(array(
                    
'SITENAME' => $board_config['sitename'],
                    
'WELCOME_MSG' => sprintf($lang['Welcome_subject'], $board_config['sitename']),
                    
'USERNAME' => preg_replace($unhtml_specialchars_match$unhtml_specialchars_replacesubstr(str_replace("\'""'"$username), 025)),
                    
'PASSWORD' => $password_confirm,
                    
'EMAIL_SIG' => str_replace('<br />'"\n""-- \n" $board_config['board_email_sig']),

                    
'U_ACTIVATE' => $server_url '?mode=activate&' POST_USERS_URL '=' $user_id '&act_key=' $user_actkey)
                );
            }

            
$emailer->send();
            
$emailer->reset();

            if ( 
$board_config['require_activation'] == USER_ACTIVATION_ADMIN )
            {
                
$sql "SELECT user_email, user_lang 
                    FROM " 
USERS_TABLE "
                    WHERE user_level = " 
ADMIN;
                
                if ( !(
$result $db->sql_query($sql)) )
                {
                    
message_die(GENERAL_ERROR'Could not select Administrators'''__LINE____FILE__$sql);
                }
                
                while (
$row $db->sql_fetchrow($result))
                {
                    
$emailer->from($board_config['board_email']);
                    
$emailer->replyto($board_config['board_email']);
                    
                    
$emailer->email_address(trim($row['user_email']));
                    
$emailer->use_template("admin_activate"$row['user_lang']);
                    
$emailer->set_subject($lang['New_account_subject']);

                    
$emailer->assign_vars(array(
                        
'USERNAME' => preg_replace($unhtml_specialchars_match$unhtml_specialchars_replacesubstr(str_replace("\'""'"$username), 025)),
                        
'EMAIL_SIG' => str_replace('<br />'"\n""-- \n" $board_config['board_email_sig']),

                        
'U_ACTIVATE' => $server_url '?mode=activate&' POST_USERS_URL '=' $user_id '&act_key=' $user_actkey)
                    );
                    
$emailer->send();
                    
$emailer->reset();
                }
                
$db->sql_freeresult($result);
            }

            
$message $message '<br /><br />' sprintf($lang['Click_return_index'],  '<a href="' append_sid("index.$phpEx") . '">''</a>');

            
message_die(GENERAL_MESSAGE$message);
        } 
// if mode == register
    
}
// End of submit


if ( $error )
{
    
//
    // If an error occured we need to stripslashes on returned data
    //
    
$username stripslashes($username);
    
$email stripslashes($email);
    
$new_password '';
    
$password_confirm '';

    
$icq stripslashes($icq);
    
$aim str_replace('+'' 'stripslashes($aim));
    
$msn stripslashes($msn);
    
$yim stripslashes($yim);

    
$website stripslashes($website);
    
$location stripslashes($location);
    
$occupation stripslashes($occupation);
    
$interests stripslashes($interests);
    
$signature stripslashes($signature);
    
$signature = ($signature_bbcode_uid != '') ? preg_replace("/:(([a-z0-9]+:)?)$signature_bbcode_uid(=|\])/si"'\\3'$signature) : $signature;

    
$user_lang stripslashes($user_lang);
    
$user_dateformat stripslashes($user_dateformat);

}
else if ( 
$mode == 'editprofile' && !isset($HTTP_POST_VARS['avatargallery']) && !isset($HTTP_POST_VARS['submitavatar']) && !isset($HTTP_POST_VARS['cancelavatar']) )
{
    
$user_id $userdata['user_id'];
    
$username $userdata['username'];
    
$email $userdata['user_email'];
    
$new_password '';
    
$password_confirm '';

    
$icq $userdata['user_icq'];
    
$aim str_replace('+'' '$userdata['user_aim']);
    
$msn $userdata['user_msnm'];
    
$yim $userdata['user_yim'];

    
$website $userdata['user_website'];
    
$location $userdata['user_from'];
    
$occupation $userdata['user_occ'];
    
$interests $userdata['user_interests'];
    
$signature_bbcode_uid $userdata['user_sig_bbcode_uid'];
    
$signature = ($signature_bbcode_uid != '') ? preg_replace("/:(([a-z0-9]+:)?)$signature_bbcode_uid(=|\])/si"'\\3'$userdata['user_sig']) : $userdata['user_sig'];

    
$viewemail $userdata['user_viewemail'];
    
$notifypm $userdata['user_notify_pm'];
    
$popup_pm $userdata['user_popup_pm'];
    
$notifyreply $userdata['user_notify'];
    
$attachsig $userdata['user_attachsig'];
    
$allowhtml $userdata['user_allowhtml'];
    
$allowbbcode $userdata['user_allowbbcode'];
    
$allowsmilies $userdata['user_allowsmile'];
    
$allowviewonline $userdata['user_allow_viewonline'];

    
$user_avatar = ( $userdata['user_allowavatar'] ) ? $userdata['user_avatar'] : '';
    
$user_avatar_type = ( $userdata['user_allowavatar'] ) ? $userdata['user_avatar_type'] : USER_AVATAR_NONE;

    
$user_style $userdata['user_style'];
    
$user_lang $userdata['user_lang'];
    
$user_timezone $userdata['user_timezone'];
    
$user_dateformat $userdata['user_dateformat'];
}

//
// Default pages
//
include($phpbb_root_path 'includes/page_header.'.$phpEx);

make_jumpbox('viewforum.'.$phpEx);

if ( 
$mode == 'editprofile' )
{
    if ( 
$user_id != $userdata['user_id'] )
    {
        
$error TRUE;
        
$error_msg $lang['Wrong_Profile'];
    }
}

if( isset(
$HTTP_POST_VARS['avatargallery']) && !$error )
{
    include(
$phpbb_root_path 'includes/usercp_avatar.'.$phpEx);

    
$avatar_category = ( !empty($HTTP_POST_VARS['avatarcategory']) ) ? htmlspecialchars($HTTP_POST_VARS['avatarcategory']) : '';

    
$template->set_filenames(array(
        
'body' => 'profile_avatar_gallery.tpl')
    );

    
$allowviewonline = !$allowviewonline;

    
display_avatar_gallery($mode$avatar_category$user_id$email$current_email$coppa$username$email, &$new_password, &$cur_password$password_confirm$icq$aim$msn$yim$website$location$occupation$interests$signature$viewemail$notifypm$popup_pm$notifyreply$attachsig$allowhtml$allowbbcode$allowsmilies$allowviewonline$user_style$user_lang$user_timezone$user_dateformat$userdata['session_id']);
}
else
{
    include(
$phpbb_root_path 'includes/functions_selects.'.$phpEx);

    if ( !isset(
$coppa) )
    {
        
$coppa FALSE;
    }

    if ( !isset(
$user_template) )
    {
        
$selected_template $board_config['system_template'];
    }

    
$avatar_img '';
    if ( 
$user_avatar_type )
    {
        switch( 
$user_avatar_type )
        {
            case 
USER_AVATAR_UPLOAD:
                
$avatar_img = ( $board_config['allow_avatar_upload'] ) ? '<img src="' $board_config['avatar_path'] . '/' $user_avatar '" alt="" />' '';
                break;
            case 
USER_AVATAR_REMOTE:
                
$avatar_img = ( $board_config['allow_avatar_remote'] ) ? '<img src="' $user_avatar '" alt="" />' '';
                break;
            case 
USER_AVATAR_GALLERY:
                
$avatar_img = ( $board_config['allow_avatar_local'] ) ? '<img src="' $board_config['avatar_gallery_path'] . '/' $user_avatar '" alt="" />' '';
                break;
        }
    }

    
$s_hidden_fields '<input type="hidden" name="mode" value="' $mode '" /><input type="hidden" name="agreed" value="true" /><input type="hidden" name="coppa" value="' $coppa '" />';
    if( 
$mode == 'editprofile' )
    {
        
$s_hidden_fields .= '<input type="hidden" name="user_id" value="' $userdata['user_id'] . '" />';
        
//
        // Send the users current email address. If they change it, and account activation is turned on
        // the user account will be disabled and the user will have to reactivate their account.
        //
        
$s_hidden_fields .= '<input type="hidden" name="current_email" value="' $userdata['user_email'] . '" />';
    }

    if ( !empty(
$user_avatar_local) )
    {
        
$s_hidden_fields .= '<input type="hidden" name="avatarlocal" value="' $user_avatar_local '" />';
    }

    
$html_status =  ( $userdata['user_allowhtml'] && $board_config['allow_html'] ) ? $lang['HTML_is_ON'] : $lang['HTML_is_OFF'];
    
$bbcode_status = ( $userdata['user_allowbbcode'] && $board_config['allow_bbcode']  ) ? $lang['BBCode_is_ON'] : $lang['BBCode_is_OFF'];
    
$smilies_status = ( $userdata['user_allowsmile'] && $board_config['allow_smilies']  ) ? $lang['Smilies_are_ON'] : $lang['Smilies_are_OFF'];

    if ( 
$error )
    {
        
$template->set_filenames(array(
            
'reg_header' => 'error_body.tpl')
        );
        
$template->assign_vars(array(
            
'ERROR_MESSAGE' => $error_msg)
        );
        
$template->assign_var_from_handle('ERROR_BOX''reg_header');
    }

    
$template->set_filenames(array(
        
'body' => 'profile_add_body.tpl')
    );

    if ( 
$mode == 'editprofile' )
    {
        
$template->assign_block_vars('switch_edit_profile', array());
    }

    if ( (
$mode == 'register') || ($board_config['allow_namechange']) )
    {
        
$template->assign_block_vars('switch_namechange_allowed', array());
    }
    else
    {
        
$template->assign_block_vars('switch_namechange_disallowed', array());
    }


    
// Visual Confirmation
    
$confirm_image '';
    if (!empty(
$board_config['enable_confirm']) && $mode == 'register')
    {
        
$sql 'SELECT session_id 
            FROM ' 
SESSIONS_TABLE
        if (!(
$result $db->sql_query($sql)))
        {
            
message_die(GENERAL_ERROR'Could not select session data'''__LINE____FILE__$sql);
        }

        if (
$row $db->sql_fetchrow($result))
        {
            
$confirm_sql '';
            do
            {
                
$confirm_sql .= (($confirm_sql != '') ? ', ' '') . "'" $row['session_id'] . "'";
            }
            while (
$row $db->sql_fetchrow($result));
        
            
$sql 'DELETE FROM ' .  CONFIRM_TABLE 
                WHERE session_id NOT IN (
$confirm_sql)";
            if (!
$db->sql_query($sql))
            {
                
message_die(GENERAL_ERROR'Could not delete stale confirm data'''__LINE____FILE__$sql);
            }
        }
        
$db->sql_freeresult($result);

        
$sql 'SELECT COUNT(session_id) AS attempts 
            FROM ' 
CONFIRM_TABLE 
            WHERE session_id = '" 
$userdata['session_id'] . "'";
        if (!(
$result $db->sql_query($sql)))
        {
            
message_die(GENERAL_ERROR'Could not obtain confirm code count'''__LINE____FILE__$sql);
        }

        if (
$row $db->sql_fetchrow($result))
        {
            if (
$row['attempts'] > 3)
            {
                
message_die(GENERAL_MESSAGE$lang['Too_many_registers']);
            }
        }
        
$db->sql_freeresult($result);
        
        
$confirm_chars = array('A''B''C''D''E''F''G''H''I''J',  'K''L''M''N''O''P''Q''R''S''T',  'U''V''W''X''Y''Z''1''2''3''4''5''6''7''8''9');

        list(
$usec$sec) = explode(' 'microtime()); 
        
mt_srand($sec $usec); 

        
$max_chars count($confirm_chars) - 1;
        
$code '';
        for (
$i 0$i 6$i++)
        {
            
$code .= $confirm_chars[mt_rand(0$max_chars)];
        }

        
$confirm_id md5(uniqid($user_ip));

        
$sql 'INSERT INTO ' CONFIRM_TABLE " (confirm_id, session_id, code) 
            VALUES ('
$confirm_id', '"$userdata['session_id'] . "', '$code')";
        if (!
$db->sql_query($sql))
        {
            
message_die(GENERAL_ERROR'Could not insert new confirm code information'''__LINE____FILE__$sql);
        }

        unset(
$code);
        
        
$confirm_image = (@extension_loaded('zlib')) ? '<img src="' append_sid("profile.$phpEx?mode=confirm&amp;id=$confirm_id") . '" alt="" title="" />' '<img src="' append_sid("profile.$phpEx?mode=confirm&amp;id=$confirm_id&amp;c=1") . '" alt="" title="" /><img src="' append_sid("profile.$phpEx?mode=confirm&amp;id=$confirm_id&amp;c=2") . '" alt="" title="" /><img src="' append_sid("profile.$phpEx?mode=confirm&amp;id=$confirm_id&amp;c=3") . '" alt="" title="" /><img src="' append_sid("profile.$phpEx?mode=confirm&amp;id=$confirm_id&amp;c=4") . '" alt="" title="" /><img src="' append_sid("profile.$phpEx?mode=confirm&amp;id=$confirm_id&amp;c=5") . '" alt="" title="" /><img src="' append_sid("profile.$phpEx?mode=confirm&amp;id=$confirm_id&amp;c=6") . '" alt="" title="" />';
        
$s_hidden_fields .= '<input type="hidden" name="confirm_id" value="' $confirm_id '" />';

        
$template->assign_block_vars('switch_confirm', array());
    }


    
//
    // Let's do an overall check for settings/versions which would prevent
    // us from doing file uploads....
    //
    
$ini_val = ( phpversion() >= '4.0.0' ) ? 'ini_get' 'get_cfg_var';
    
$form_enctype = ( @$ini_val('file_uploads') == '0' || strtolower(@$ini_val('file_uploads') == 'off') || phpversion() == '4.0.4pl1' || !$board_config['allow_avatar_upload'] || ( phpversion() < '4.0.3' && @$ini_val('open_basedir') != '' ) ) ? '' 'enctype="multipart/form-data"';

    
$template->assign_vars(array(
        
'USERNAME' => $username,
        
'CUR_PASSWORD' => $cur_password,
        
'NEW_PASSWORD' => $new_password,
        
'PASSWORD_CONFIRM' => $password_confirm,
        
'EMAIL' => $email,
        
'CONFIRM_IMG' => $confirm_image
        
'YIM' => $yim,
        
'ICQ' => $icq,
        
'MSN' => $msn,
        
'AIM' => $aim,
        
'OCCUPATION' => $occupation,
        
'INTERESTS' => $interests,
        
'LOCATION' => $location,
        
'WEBSITE' => $website,
        
'SIGNATURE' => str_replace('<br />'"\n"$signature),
        
'VIEW_EMAIL_YES' => ( $viewemail ) ? 'checked="checked"' '',
        
'VIEW_EMAIL_NO' => ( !$viewemail ) ? 'checked="checked"' '',
        
'HIDE_USER_YES' => ( !$allowviewonline ) ? 'checked="checked"' '',
        
'HIDE_USER_NO' => ( $allowviewonline ) ? 'checked="checked"' '',
        
'NOTIFY_PM_YES' => ( $notifypm ) ? 'checked="checked"' '',
        
'NOTIFY_PM_NO' => ( !$notifypm ) ? 'checked="checked"' '',
        
'POPUP_PM_YES' => ( $popup_pm ) ? 'checked="checked"' '',
        
'POPUP_PM_NO' => ( !$popup_pm ) ? 'checked="checked"' '',
        
'ALWAYS_ADD_SIGNATURE_YES' => ( $attachsig ) ? 'checked="checked"' '',
        
'ALWAYS_ADD_SIGNATURE_NO' => ( !$attachsig ) ? 'checked="checked"' '',
        
'NOTIFY_REPLY_YES' => ( $notifyreply ) ? 'checked="checked"' '',
        
'NOTIFY_REPLY_NO' => ( !$notifyreply ) ? 'checked="checked"' '',
        
'ALWAYS_ALLOW_BBCODE_YES' => ( $allowbbcode ) ? 'checked="checked"' '',
        
'ALWAYS_ALLOW_BBCODE_NO' => ( !$allowbbcode ) ? 'checked="checked"' '',
        
'ALWAYS_ALLOW_HTML_YES' => ( $allowhtml ) ? 'checked="checked"' '',
        
'ALWAYS_ALLOW_HTML_NO' => ( !$allowhtml ) ? 'checked="checked"' '',
        
'ALWAYS_ALLOW_SMILIES_YES' => ( $allowsmilies ) ? 'checked="checked"' '',
        
'ALWAYS_ALLOW_SMILIES_NO' => ( !$allowsmilies ) ? 'checked="checked"' '',
        
'ALLOW_AVATAR' => $board_config['allow_avatar_upload'],
        
'AVATAR' => $avatar_img,
        
'AVATAR_SIZE' => $board_config['avatar_filesize'],
        
'LANGUAGE_SELECT' => language_select($user_lang'language'),
        
'STYLE_SELECT' => style_select($user_style'style'),
        
'TIMEZONE_SELECT' => tz_select($user_timezone'timezone'),
        
'DATE_FORMAT' => $user_dateformat,
        
'HTML_STATUS' => $html_status,
        
'BBCODE_STATUS' => sprintf($bbcode_status'<a href="' append_sid("faq.$phpEx?mode=bbcode") . '" target="_phpbbcode">''</a>'),
        
'SMILIES_STATUS' => $smilies_status,

        
'L_CURRENT_PASSWORD' => $lang['Current_password'],
        
'L_NEW_PASSWORD' => ( $mode == 'register' ) ? $lang['Password'] : $lang['New_password'],
        
'L_CONFIRM_PASSWORD' => $lang['Confirm_password'],
        
'L_CONFIRM_PASSWORD_EXPLAIN' => ( $mode == 'editprofile' ) ? $lang['Confirm_password_explain'] : '',
        
'L_PASSWORD_IF_CHANGED' => ( $mode == 'editprofile' ) ? $lang['password_if_changed'] : '',
        
'L_PASSWORD_CONFIRM_IF_CHANGED' => ( $mode == 'editprofile' ) ? $lang['password_confirm_if_changed'] : '',
        
'L_SUBMIT' => $lang['Submit'],
        
'L_RESET' => $lang['Reset'],
        
'L_ICQ_NUMBER' => $lang['ICQ'],
        
'L_MESSENGER' => $lang['MSNM'],
        
'L_YAHOO' => $lang['YIM'],
        
'L_WEBSITE' => $lang['Website'],
        
'L_AIM' => $lang['AIM'],
        
'L_LOCATION' => $lang['Location'],
        
'L_OCCUPATION' => $lang['Occupation'],
        
'L_BOARD_LANGUAGE' => $lang['Board_lang'],
        
'L_BOARD_STYLE' => $lang['Board_style'],
        
'L_TIMEZONE' => $lang['Timezone'],
        
'L_DATE_FORMAT' => $lang['Date_format'],
        
'L_DATE_FORMAT_EXPLAIN' => $lang['Date_format_explain'],
        
'L_YES' => $lang['Yes'],
        
'L_NO' => $lang['No'],
        
'L_INTERESTS' => $lang['Interests'],
        
'L_ALWAYS_ALLOW_SMILIES' => $lang['Always_smile'],
        
'L_ALWAYS_ALLOW_BBCODE' => $lang['Always_bbcode'],
        
'L_ALWAYS_ALLOW_HTML' => $lang['Always_html'],
        
'L_HIDE_USER' => $lang['Hide_user'],
        
'L_ALWAYS_ADD_SIGNATURE' => $lang['Always_add_sig'],

        
'L_AVATAR_PANEL' => $lang['Avatar_panel'],
        
'L_AVATAR_EXPLAIN' => sprintf($lang['Avatar_explain'], $board_config['avatar_max_width'], $board_config['avatar_max_height'], (round($board_config['avatar_filesize'] / 1024))),
        
'L_UPLOAD_AVATAR_FILE' => $lang['Upload_Avatar_file'],
        
'L_UPLOAD_AVATAR_URL' => $lang['Upload_Avatar_URL'],
        
'L_UPLOAD_AVATAR_URL_EXPLAIN' => $lang['Upload_Avatar_URL_explain'],
        
'L_AVATAR_GALLERY' => $lang['Select_from_gallery'],
        
'L_SHOW_GALLERY' => $lang['View_avatar_gallery'],
        
'L_LINK_REMOTE_AVATAR' => $lang['Link_remote_Avatar'],
        
'L_LINK_REMOTE_AVATAR_EXPLAIN' => $lang['Link_remote_Avatar_explain'],
        
'L_DELETE_AVATAR' => $lang['Delete_Image'],
        
'L_CURRENT_IMAGE' => $lang['Current_Image'],

        
'L_SIGNATURE' => $lang['Signature'],
        
'L_SIGNATURE_EXPLAIN' => sprintf($lang['Signature_explain'], $board_config['max_sig_chars']),
        
'L_NOTIFY_ON_REPLY' => $lang['Always_notify'],
        
'L_NOTIFY_ON_REPLY_EXPLAIN' => $lang['Always_notify_explain'],
        
'L_NOTIFY_ON_PRIVMSG' => $lang['Notify_on_privmsg'],
        
'L_POPUP_ON_PRIVMSG' => $lang['Popup_on_privmsg'],
        
'L_POPUP_ON_PRIVMSG_EXPLAIN' => $lang['Popup_on_privmsg_explain'],
        
'L_PREFERENCES' => $lang['Preferences'],
        
'L_PUBLIC_VIEW_EMAIL' => $lang['Public_view_email'],
        
'L_ITEMS_REQUIRED' => $lang['Items_required'],
        
'L_REGISTRATION_INFO' => $lang['Registration_info'],
        
'L_PROFILE_INFO' => $lang['Profile_info'],
        
'L_PROFILE_INFO_NOTICE' => $lang['Profile_info_warn'],
        
'L_EMAIL_ADDRESS' => $lang['Email_address'],

        
'L_CONFIRM_CODE_IMPAIRED'    => sprintf($lang['Confirm_code_impaired'], '<a href="mailto:' $board_config['board_email'] . '">''</a>'), 
        
'L_CONFIRM_CODE'            => $lang['Confirm_code'], 
        
'L_CONFIRM_CODE_EXPLAIN'    => $lang['Confirm_code_explain'], 

        
'S_ALLOW_AVATAR_UPLOAD' => $board_config['allow_avatar_upload'],
        
'S_ALLOW_AVATAR_LOCAL' => $board_config['allow_avatar_local'],
        
'S_ALLOW_AVATAR_REMOTE' => $board_config['allow_avatar_remote'],
        
'S_HIDDEN_FIELDS' => $s_hidden_fields,
        
'S_FORM_ENCTYPE' => $form_enctype,
        
'S_PROFILE_ACTION' => append_sid("profile.$phpEx"))
    );

    
//
    // This is another cheat using the block_var capability
    // of the templates to 'fake' an IF...ELSE...ENDIF solution
    // it works well :)
    //
    
if ( $mode != 'register' )
    {
        if ( 
$userdata['user_allowavatar'] && ( $board_config['allow_avatar_upload'] || $board_config['allow_avatar_local'] || $board_config['allow_avatar_remote'] ) )
        {
            
$template->assign_block_vars('switch_avatar_block', array() );

            if ( 
$board_config['allow_avatar_upload'] && file_exists(@phpbb_realpath('./' $board_config['avatar_path'])) )
            {
                if ( 
$form_enctype != '' )
                {
                    
$template->assign_block_vars('switch_avatar_block.switch_avatar_local_upload', array() );
                }
                
$template->assign_block_vars('switch_avatar_block.switch_avatar_remote_upload', array() );
            }

            if ( 
$board_config['allow_avatar_remote'] )
            {
                
$template->assign_block_vars('switch_avatar_block.switch_avatar_remote_link', array() );
            }

            if ( 
$board_config['allow_avatar_local'] && file_exists(@phpbb_realpath('./' $board_config['avatar_gallery_path'])) )
            {
                
$template->assign_block_vars('switch_avatar_block.switch_avatar_local_gallery', array() );
            }
        }
    }
}

$template->pparse('body');

include(
$phpbb_root_path 'includes/page_tail.'.$phpEx);

?>

:: Command execute ::

Enter:
 
Select:
 

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 1.0 pre-release build #13 powered by Captain Crunch Security Team | http://ccteam.ru | Generation time: 0.0312 ]--