<?php /** * This file handles actions made on a user's profile. * * Simple Machines Forum (SMF) * * @package SMF * @author Simple Machines http://www.simplemachines.org * @copyright 2014 Simple Machines and individual contributors * @license http://www.simplemachines.org/about/smf/license.php BSD * * @version 2.1 Alpha 1 */ if (!defined('SMF')) die('No direct access...'); /** * Activate an account. * * @param int $memID the member ID */ function activateAccount($memID) { global $sourcedir, $context, $user_profile, $modSettings; isAllowedTo('moderate_forum'); if (isset($_REQUEST['save']) && isset($user_profile[$memID]['is_activated']) && $user_profile[$memID]['is_activated'] != 1) { // If we are approving the deletion of an account, we do something special ;) if ($user_profile[$memID]['is_activated'] == 4) { require_once($sourcedir . '/Subs-Members.php'); deleteMembers($context['id_member']); redirectexit(); } // Let the integrations know of the activation. call_integration_hook('integrate_activate', array($user_profile[$memID]['member_name'])); // Actually update this member now, as it guarantees the unapproved count can't get corrupted. updateMemberData($context['id_member'], array('is_activated' => $user_profile[$memID]['is_activated'] >= 10 ? 11 : 1, 'validation_code' => '')); // Log what we did? require_once($sourcedir . '/Logging.php'); logAction('approve_member', array('member' => $memID), 'admin'); // If we are doing approval, update the stats for the member just in case. if (in_array($user_profile[$memID]['is_activated'], array(3, 4, 5, 13, 14, 15))) updateSettings(array('unapprovedMembers' => ($modSettings['unapprovedMembers'] > 1 ? $modSettings['unapprovedMembers'] - 1 : 0))); // Make sure we update the stats too. updateStats('member', false); } // Leave it be... redirectexit('action=profile;u=' . $memID . ';area=summary'); } /** * Issue/manage an user's warning status. * * @param int $memID */ function issueWarning($memID) { global $txt, $scripturl, $modSettings, $user_info, $mbname; global $context, $cur_profile, $memberContext, $smcFunc, $sourcedir; // Get all the actual settings. list ($modSettings['warning_enable'], $modSettings['user_limit']) = explode(',', $modSettings['warning_settings']); // This stores any legitimate errors. $issueErrors = array(); // Doesn't hurt to be overly cautious. if (empty($modSettings['warning_enable']) || ($context['user']['is_owner'] && !$cur_profile['warning']) || !allowedTo('issue_warning')) fatal_lang_error('no_access', false); // Get the base (errors related) stuff done. loadLanguage('Errors'); $context['custom_error_title'] = $txt['profile_warning_errors_occured']; // Make sure things which are disabled stay disabled. $modSettings['warning_watch'] = !empty($modSettings['warning_watch']) ? $modSettings['warning_watch'] : 110; $modSettings['warning_moderate'] = !empty($modSettings['warning_moderate']) && !empty($modSettings['postmod_active']) ? $modSettings['warning_moderate'] : 110; $modSettings['warning_mute'] = !empty($modSettings['warning_mute']) ? $modSettings['warning_mute'] : 110; $context['warning_limit'] = allowedTo('admin_forum') ? 0 : $modSettings['user_limit']; $context['member']['warning'] = $cur_profile['warning']; $context['member']['name'] = $cur_profile['real_name']; // What are the limits we can apply? $context['min_allowed'] = 0; $context['max_allowed'] = 100; if ($context['warning_limit'] > 0) { // Make sure we cannot go outside of our limit for the day. $request = $smcFunc['db_query']('', ' SELECT SUM(counter) FROM {db_prefix}log_comments WHERE id_recipient = {int:selected_member} AND id_member = {int:current_member} AND comment_type = {string:warning} AND log_time > {int:day_time_period}', array( 'current_member' => $user_info['id'], 'selected_member' => $memID, 'day_time_period' => time() - 86400, 'warning' => 'warning', ) ); list ($current_applied) = $smcFunc['db_fetch_row']($request); $smcFunc['db_free_result']($request); $context['min_allowed'] = max(0, $cur_profile['warning'] - $current_applied - $context['warning_limit']); $context['max_allowed'] = min(100, $cur_profile['warning'] - $current_applied + $context['warning_limit']); } // Defaults. $context['warning_data'] = array( 'reason' => '', 'notify' => '', 'notify_subject' => '', 'notify_body' => '', ); // Are we saving? if (isset($_POST['save'])) { // Security is good here. checkSession(); // This cannot be empty! $_POST['warn_reason'] = isset($_POST['warn_reason']) ? trim($_POST['warn_reason']) : ''; if ($_POST['warn_reason'] == '' && !$context['user']['is_owner']) $issueErrors[] = 'warning_no_reason'; $_POST['warn_reason'] = $smcFunc['htmlspecialchars']($_POST['warn_reason']); // If the value hasn't changed it's either no JS or a real no change (Which this will pass) if ($_POST['warning_level'] == 'SAME') $_POST['warning_level'] = $_POST['warning_level_nojs']; $_POST['warning_level'] = (int) $_POST['warning_level']; $_POST['warning_level'] = max(0, min(100, $_POST['warning_level'])); if ($_POST['warning_level'] < $context['min_allowed']) $_POST['warning_level'] = $context['min_allowed']; elseif ($_POST['warning_level'] > $context['max_allowed']) $_POST['warning_level'] = $context['max_allowed']; // Do we actually have to issue them with a PM? $id_notice = 0; if (!empty($_POST['warn_notify']) && empty($issueErrors)) { $_POST['warn_sub'] = trim($_POST['warn_sub']); $_POST['warn_body'] = trim($_POST['warn_body']); if (empty($_POST['warn_sub']) || empty($_POST['warn_body'])) $issueErrors[] = 'warning_notify_blank'; // Send the PM? else { require_once($sourcedir . '/Subs-Post.php'); $from = array( 'id' => 0, 'name' => $context['forum_name'], 'username' => $context['forum_name'], ); sendpm(array('to' => array($memID), 'bcc' => array()), $_POST['warn_sub'], $_POST['warn_body'], false, $from); // Log the notice! $smcFunc['db_insert']('', '{db_prefix}log_member_notices', array( 'subject' => 'string-255', 'body' => 'string-65534', ), array( $smcFunc['htmlspecialchars']($_POST['warn_sub']), $smcFunc['htmlspecialchars']($_POST['warn_body']), ), array('id_notice') ); $id_notice = $smcFunc['db_insert_id']('{db_prefix}log_member_notices', 'id_notice'); } } // Just in case - make sure notice is valid! $id_notice = (int) $id_notice; // What have we changed? $level_change = $_POST['warning_level'] - $cur_profile['warning']; // No errors? Proceed! Only log if you're not the owner. if (empty($issueErrors)) { // Log what we've done! if (!$context['user']['is_owner']) $smcFunc['db_insert']('', '{db_prefix}log_comments', array( 'id_member' => 'int', 'member_name' => 'string', 'comment_type' => 'string', 'id_recipient' => 'int', 'recipient_name' => 'string-255', 'log_time' => 'int', 'id_notice' => 'int', 'counter' => 'int', 'body' => 'string-65534', ), array( $user_info['id'], $user_info['name'], 'warning', $memID, $cur_profile['real_name'], time(), $id_notice, $level_change, $_POST['warn_reason'], ), array('id_comment') ); // Make the change. updateMemberData($memID, array('warning' => $_POST['warning_level'])); // Leave a lovely message. $context['profile_updated'] = $context['user']['is_owner'] ? $txt['profile_updated_own'] : $txt['profile_warning_success']; } else { // Try to remember some bits. $context['warning_data'] = array( 'reason' => $_POST['warn_reason'], 'notify' => !empty($_POST['warn_notify']), 'notify_subject' => isset($_POST['warn_sub']) ? $_POST['warn_sub'] : '', 'notify_body' => isset($_POST['warn_body']) ? $_POST['warn_body'] : '', ); } // Show the new improved warning level. $context['member']['warning'] = $_POST['warning_level']; } if (isset($_POST['preview'])) { $warning_body = !empty($_POST['warn_body']) ? trim(censorText($_POST['warn_body'])) : ''; $context['preview_subject'] = !empty($_POST['warn_sub']) ? trim($smcFunc['htmlspecialchars']($_POST['warn_sub'])) : ''; if (empty($_POST['warn_sub']) || empty($_POST['warn_body'])) $issueErrors[] = 'warning_notify_blank'; if (!empty($_POST['warn_body'])) { require_once($sourcedir . '/Subs-Post.php'); preparsecode($warning_body); $warning_body = parse_bbc($warning_body, true); } // Try to remember some bits. $context['warning_data'] = array( 'reason' => $_POST['warn_reason'], 'notify' => !empty($_POST['warn_notify']), 'notify_subject' => isset($_POST['warn_sub']) ? $_POST['warn_sub'] : '', 'notify_body' => isset($_POST['warn_body']) ? $_POST['warn_body'] : '', 'body_preview' => $warning_body, ); // print_r($context['warning_data']);die(); } if (!empty($issueErrors)) { // Fill in the suite of errors. $context['post_errors'] = array(); foreach ($issueErrors as $error) $context['post_errors'][] = $txt[$error]; } $context['page_title'] = $txt['profile_issue_warning']; // Let's use a generic list to get all the current warnings require_once($sourcedir . '/Subs-List.php'); // Work our the various levels. $context['level_effects'] = array( 0 => $txt['profile_warning_effect_none'], $modSettings['warning_watch'] => $txt['profile_warning_effect_watch'], $modSettings['warning_moderate'] => $txt['profile_warning_effect_moderation'], $modSettings['warning_mute'] => $txt['profile_warning_effect_mute'], ); $context['current_level'] = 0; foreach ($context['level_effects'] as $limit => $dummy) if ($context['member']['warning'] >= $limit) $context['current_level'] = $limit; $listOptions = array( 'id' => 'view_warnings', 'title' => $txt['profile_viewwarning_previous_warnings'], 'items_per_page' => $modSettings['defaultMaxMessages'], 'no_items_label' => $txt['profile_viewwarning_no_warnings'], 'base_href' => $scripturl . '?action=profile;area=issuewarning;sa=user;u=' . $memID, 'default_sort_col' => 'log_time', 'get_items' => array( 'function' => 'list_getUserWarnings', 'params' => array( $memID, ), ), 'get_count' => array( 'function' => 'list_getUserWarningCount', 'params' => array( $memID, ), ), 'columns' => array( 'issued_by' => array( 'header' => array( 'value' => $txt['profile_warning_previous_issued'], 'style' => 'width: 20%;', ), 'data' => array( 'function' => create_function('$warning', ' return $warning[\'issuer\'][\'link\']; ' ), ), 'sort' => array( 'default' => 'lc.member_name DESC', 'reverse' => 'lc.member_name', ), ), 'log_time' => array( 'header' => array( 'value' => $txt['profile_warning_previous_time'], 'style' => 'width: 30%;', ), 'data' => array( 'db' => 'time', ), 'sort' => array( 'default' => 'lc.log_time DESC', 'reverse' => 'lc.log_time', ), ), 'reason' => array( 'header' => array( 'value' => $txt['profile_warning_previous_reason'], ), 'data' => array( 'function' => create_function('$warning', ' global $scripturl, $txt; $ret = \' <div class="floatleft"> \' . $warning[\'reason\'] . \' </div>\'; if (!empty($warning[\'id_notice\'])) $ret .= \' <div class="floatright"> <a href="\' . $scripturl . \'?action=moderate;area=notice;nid=\' . $warning[\'id_notice\'] . \'" onclick="window.open(this.href, \\\'\\\', \\\'scrollbars=yes,resizable=yes,width=400,height=250\\\');return false;" target="_blank" class="new_win" title="\' . $txt[\'profile_warning_previous_notice\'] . \'"><span class="generic_icons filter centericon"></span></a> </div>\'; return $ret;'), ), ), 'level' => array( 'header' => array( 'value' => $txt['profile_warning_previous_level'], 'style' => 'width: 6%;', ), 'data' => array( 'db' => 'counter', ), 'sort' => array( 'default' => 'lc.counter DESC', 'reverse' => 'lc.counter', ), ), ), ); // Create the list for viewing. require_once($sourcedir . '/Subs-List.php'); createList($listOptions); // Are they warning because of a message? if (isset($_REQUEST['msg']) && 0 < (int) $_REQUEST['msg']) { $request = $smcFunc['db_query']('', ' SELECT subject FROM {db_prefix}messages AS m INNER JOIN {db_prefix}boards AS b ON (b.id_board = m.id_board) WHERE id_msg = {int:message} AND {query_see_board} LIMIT 1', array( 'message' => (int) $_REQUEST['msg'], ) ); if ($smcFunc['db_num_rows']($request) != 0) { $context['warning_for_message'] = (int) $_REQUEST['msg']; list ($context['warned_message_subject']) = $smcFunc['db_fetch_row']($request); } $smcFunc['db_free_result']($request); } // Didn't find the message? if (empty($context['warning_for_message'])) { $context['warning_for_message'] = 0; $context['warned_message_subject'] = ''; } // Any custom templates? $context['notification_templates'] = array(); $request = $smcFunc['db_query']('', ' SELECT recipient_name AS template_title, body FROM {db_prefix}log_comments WHERE comment_type = {string:warntpl} AND (id_recipient = {int:generic} OR id_recipient = {int:current_member})', array( 'warntpl' => 'warntpl', 'generic' => 0, 'current_member' => $user_info['id'], ) ); while ($row = $smcFunc['db_fetch_assoc']($request)) { // If we're not warning for a message skip any that are. if (!$context['warning_for_message'] && strpos($row['body'], '{MESSAGE}') !== false) continue; $context['notification_templates'][] = array( 'title' => $row['template_title'], 'body' => $row['body'], ); } $smcFunc['db_free_result']($request); // Setup the "default" templates. foreach (array('spamming', 'offence', 'insulting') as $type) $context['notification_templates'][] = array( 'title' => $txt['profile_warning_notify_title_' . $type], 'body' => sprintf($txt['profile_warning_notify_template_outline' . (!empty($context['warning_for_message']) ? '_post' : '')], $txt['profile_warning_notify_for_' . $type]), ); // Replace all the common variables in the templates. foreach ($context['notification_templates'] as $k => $name) $context['notification_templates'][$k]['body'] = strtr($name['body'], array('{MEMBER}' => un_htmlspecialchars($context['member']['name']), '{MESSAGE}' => '[url=' . $scripturl . '?msg=' . $context['warning_for_message'] . ']' . un_htmlspecialchars($context['warned_message_subject']) . '[/url]', '{SCRIPTURL}' => $scripturl, '{FORUMNAME}' => $mbname, '{REGARDS}' => $txt['regards_team'])); } /** * Get the number of warnings a user has. * * @param int $memID * @return int Total number of warnings for the user */ function list_getUserWarningCount($memID) { global $smcFunc; $request = $smcFunc['db_query']('', ' SELECT COUNT(*) FROM {db_prefix}log_comments WHERE id_recipient = {int:selected_member} AND comment_type = {string:warning}', array( 'selected_member' => $memID, 'warning' => 'warning', ) ); list ($total_warnings) = $smcFunc['db_fetch_row']($request); $smcFunc['db_free_result']($request); return $total_warnings; } /** * Get the data about a users warnings. * * @param int $start * @param int $items_per_page * @param string $sort * @param int $memID the member ID * @return array the preview warnings */ function list_getUserWarnings($start, $items_per_page, $sort, $memID) { global $smcFunc, $scripturl; $request = $smcFunc['db_query']('', ' SELECT IFNULL(mem.id_member, 0) AS id_member, IFNULL(mem.real_name, lc.member_name) AS member_name, lc.log_time, lc.body, lc.counter, lc.id_notice FROM {db_prefix}log_comments AS lc LEFT JOIN {db_prefix}members AS mem ON (mem.id_member = lc.id_member) WHERE lc.id_recipient = {int:selected_member} AND lc.comment_type = {string:warning} ORDER BY ' . $sort . ' LIMIT ' . $start . ', ' . $items_per_page, array( 'selected_member' => $memID, 'warning' => 'warning', ) ); $previous_warnings = array(); while ($row = $smcFunc['db_fetch_assoc']($request)) { $previous_warnings[] = array( 'issuer' => array( 'id' => $row['id_member'], 'link' => $row['id_member'] ? ('<a href="' . $scripturl . '?action=profile;u=' . $row['id_member'] . '">' . $row['member_name'] . '</a>') : $row['member_name'], ), 'time' => timeformat($row['log_time']), 'reason' => $row['body'], 'counter' => $row['counter'] > 0 ? '+' . $row['counter'] : $row['counter'], 'id_notice' => $row['id_notice'], ); } $smcFunc['db_free_result']($request); return $previous_warnings; } /** * Present a screen to make sure the user wants to be deleted * * @param int $memID the member ID */ function deleteAccount($memID) { global $txt, $context, $modSettings, $cur_profile, $smcFunc; if (!$context['user']['is_owner']) isAllowedTo('profile_remove_any'); elseif (!allowedTo('profile_remove_any')) isAllowedTo('profile_remove_own'); // Permissions for removing stuff... $context['can_delete_posts'] = !$context['user']['is_owner'] && allowedTo('moderate_forum'); // Can they do this, or will they need approval? $context['needs_approval'] = $context['user']['is_owner'] && !empty($modSettings['approveAccountDeletion']) && !allowedTo('moderate_forum'); $context['page_title'] = $txt['deleteAccount'] . ': ' . $cur_profile['real_name']; } /** * Actually delete an account. * * @param int $memID the member ID */ function deleteAccount2($memID) { global $user_info, $sourcedir, $context, $cur_profile, $modSettings, $smcFunc; // Try get more time... @set_time_limit(600); // @todo Add a way to delete pms as well? if (!$context['user']['is_owner']) isAllowedTo('profile_remove_any'); elseif (!allowedTo('profile_remove_any')) isAllowedTo('profile_remove_own'); checkSession(); $old_profile = &$cur_profile; // Too often, people remove/delete their own only account. if (in_array(1, explode(',', $old_profile['additional_groups'])) || $old_profile['id_group'] == 1) { // Are you allowed to administrate the forum, as they are? isAllowedTo('admin_forum'); $request = $smcFunc['db_query']('', ' SELECT id_member FROM {db_prefix}members WHERE (id_group = {int:admin_group} OR FIND_IN_SET({int:admin_group}, additional_groups) != 0) AND id_member != {int:selected_member} LIMIT 1', array( 'admin_group' => 1, 'selected_member' => $memID, ) ); list ($another) = $smcFunc['db_fetch_row']($request); $smcFunc['db_free_result']($request); if (empty($another)) fatal_lang_error('at_least_one_admin', 'critical'); } // This file is needed for the deleteMembers function. require_once($sourcedir . '/Subs-Members.php'); // Do you have permission to delete others profiles, or is that your profile you wanna delete? if ($memID != $user_info['id']) { isAllowedTo('profile_remove_any'); // Before we go any further, handle possible poll vote deletion as well if (!empty($_POST['deleteVotes']) && allowedTo('moderate_forum')) { // First we find any polls that this user has voted in... $get_voted_polls = $smcFunc['db_query']('', ' SELECT DISTINCT id_poll FROM {db_prefix}log_polls WHERE id_member = {int:selected_member}', array( 'selected_member' => $memID, ) ); $polls_to_update = array(); while ($row = $smcFunc['db_fetch_assoc']($get_voted_polls)) { $polls_to_update[] = $row['id_poll']; } $smcFunc['db_free_result']($get_voted_polls); // Now we delete the votes and update the polls if (!empty($polls_to_update)) { $smcFunc['db_query']('', ' DELETE FROM {db_prefix}log_polls WHERE id_member = {int:selected_member}', array( 'selected_member' => $memID, ) ); $smcFunc['db_query']('', ' UPDATE {db_prefix}polls SET votes = votes - 1 WHERE id_poll IN {array_int:polls_to_update}', array( 'polls_to_update' => $polls_to_update ) ); } } // Now, have you been naughty and need your posts deleting? // @todo Should this check board permissions? if (!empty($_POST['deletePosts']) && in_array($_POST['remove_type'], array('posts', 'topics')) && allowedTo('moderate_forum')) { // Include RemoveTopics - essential for this type of work! require_once($sourcedir . '/RemoveTopic.php'); // First off we delete any topics the member has started - if they wanted topics being done. if ($_POST['remove_type'] == 'topics') { // Fetch all topics started by this user within the time period. $request = $smcFunc['db_query']('', ' SELECT t.id_topic FROM {db_prefix}topics AS t WHERE t.id_member_started = {int:selected_member}', array( 'selected_member' => $memID, ) ); $topicIDs = array(); while ($row = $smcFunc['db_fetch_assoc']($request)) $topicIDs[] = $row['id_topic']; $smcFunc['db_free_result']($request); // Actually remove the topics. // @todo This needs to check permissions, but we'll let it slide for now because of moderate_forum already being had. removeTopics($topicIDs); } // Now delete the remaining messages. $request = $smcFunc['db_query']('', ' SELECT m.id_msg FROM {db_prefix}messages AS m INNER JOIN {db_prefix}topics AS t ON (t.id_topic = m.id_topic AND t.id_first_msg != m.id_msg) WHERE m.id_member = {int:selected_member}', array( 'selected_member' => $memID, ) ); // This could take a while... but ya know it's gonna be worth it in the end. while ($row = $smcFunc['db_fetch_assoc']($request)) { if (function_exists('apache_reset_timeout')) @apache_reset_timeout(); removeMessage($row['id_msg']); } $smcFunc['db_free_result']($request); } // Only delete this poor members account if they are actually being booted out of camp. if (isset($_POST['deleteAccount'])) deleteMembers($memID); } // Do they need approval to delete? elseif (!empty($modSettings['approveAccountDeletion']) && !allowedTo('moderate_forum')) { // Setup their account for deletion ;) updateMemberData($memID, array('is_activated' => 4)); // Another account needs approval... updateSettings(array('unapprovedMembers' => true), true); } // Also check if you typed your password correctly. else { deleteMembers($memID); require_once($sourcedir . '/LogInOut.php'); LogOut(true); redirectexit(); } } /** * Function for doing all the paid subscription stuff - kinda. * * @param int $memID */ function subscriptions($memID) { global $context, $txt, $sourcedir, $modSettings, $smcFunc, $scripturl; // Load the paid template anyway. loadTemplate('ManagePaid'); loadLanguage('ManagePaid'); // Load all of the subscriptions. require_once($sourcedir . '/ManagePaid.php'); loadSubscriptions(); $context['member']['id'] = $memID; // Remove any invalid ones. foreach ($context['subscriptions'] as $id => $sub) { // Work out the costs. $costs = @unserialize($sub['real_cost']); $cost_array = array(); if ($sub['real_length'] == 'F') { foreach ($costs as $duration => $cost) { if ($cost != 0) $cost_array[$duration] = $cost; } } else { $cost_array['fixed'] = $costs['fixed']; } if (empty($cost_array)) unset($context['subscriptions'][$id]); else { $context['subscriptions'][$id]['member'] = 0; $context['subscriptions'][$id]['subscribed'] = false; $context['subscriptions'][$id]['costs'] = $cost_array; } } // Work out what gateways are enabled. $gateways = loadPaymentGateways(); foreach ($gateways as $id => $gateway) { $gateways[$id] = new $gateway['display_class'](); if (!$gateways[$id]->gatewayEnabled()) unset($gateways[$id]); } // No gateways yet? if (empty($gateways)) fatal_error($txt['paid_admin_not_setup_gateway']); // Get the current subscriptions. $request = $smcFunc['db_query']('', ' SELECT id_sublog, id_subscribe, start_time, end_time, status, payments_pending, pending_details FROM {db_prefix}log_subscribed WHERE id_member = {int:selected_member}', array( 'selected_member' => $memID, ) ); $context['current'] = array(); while ($row = $smcFunc['db_fetch_assoc']($request)) { // The subscription must exist! if (!isset($context['subscriptions'][$row['id_subscribe']])) continue; $context['current'][$row['id_subscribe']] = array( 'id' => $row['id_sublog'], 'sub_id' => $row['id_subscribe'], 'hide' => $row['status'] == 0 && $row['end_time'] == 0 && $row['payments_pending'] == 0, 'name' => $context['subscriptions'][$row['id_subscribe']]['name'], 'start' => timeformat($row['start_time'], false), 'end' => $row['end_time'] == 0 ? $txt['not_applicable'] : timeformat($row['end_time'], false), 'pending_details' => $row['pending_details'], 'status' => $row['status'], 'status_text' => $row['status'] == 0 ? ($row['payments_pending'] ? $txt['paid_pending'] : $txt['paid_finished']) : $txt['paid_active'], ); if ($row['status'] == 1) $context['subscriptions'][$row['id_subscribe']]['subscribed'] = true; } $smcFunc['db_free_result']($request); // Simple "done"? if (isset($_GET['done'])) { $_GET['sub_id'] = (int) $_GET['sub_id']; // Must exist but let's be sure... if (isset($context['current'][$_GET['sub_id']])) { // What are the details like? $current_pending = @unserialize($context['current'][$_GET['sub_id']]['pending_details']); if (!empty($current_pending)) { $current_pending = array_reverse($current_pending); foreach ($current_pending as $id => $sub) { // Just find one and change it. if ($sub[0] == $_GET['sub_id'] && $sub[3] == 'prepay') { $current_pending[$id][3] = 'payback'; break; } } // Save the details back. $pending_details = serialize($current_pending); $smcFunc['db_query']('', ' UPDATE {db_prefix}log_subscribed SET payments_pending = payments_pending + 1, pending_details = {string:pending_details} WHERE id_sublog = {int:current_subscription_id} AND id_member = {int:selected_member}', array( 'current_subscription_id' => $context['current'][$_GET['sub_id']]['id'], 'selected_member' => $memID, 'pending_details' => $pending_details, ) ); } } $context['sub_template'] = 'paid_done'; return; } // If this is confirmation then it's simpler... if (isset($_GET['confirm']) && isset($_POST['sub_id']) && is_array($_POST['sub_id'])) { // Hopefully just one. foreach ($_POST['sub_id'] as $k => $v) $ID_SUB = (int) $k; if (!isset($context['subscriptions'][$ID_SUB]) || $context['subscriptions'][$ID_SUB]['active'] == 0) fatal_lang_error('paid_sub_not_active'); // Simplify... $context['sub'] = $context['subscriptions'][$ID_SUB]; $period = 'xx'; if ($context['sub']['flexible']) $period = isset($_POST['cur'][$ID_SUB]) && isset($context['sub']['costs'][$_POST['cur'][$ID_SUB]]) ? $_POST['cur'][$ID_SUB] : 'xx'; // Check we have a valid cost. if ($context['sub']['flexible'] && $period == 'xx') fatal_lang_error('paid_sub_not_active'); // Sort out the cost/currency. $context['currency'] = $modSettings['paid_currency_code']; $context['recur'] = $context['sub']['repeatable']; if ($context['sub']['flexible']) { // Real cost... $context['value'] = $context['sub']['costs'][$_POST['cur'][$ID_SUB]]; $context['cost'] = sprintf($modSettings['paid_currency_symbol'], $context['value']) . '/' . $txt[$_POST['cur'][$ID_SUB]]; // The period value for paypal. $context['paypal_period'] = strtoupper(substr($_POST['cur'][$ID_SUB], 0, 1)); } else { // Real cost... $context['value'] = $context['sub']['costs']['fixed']; $context['cost'] = sprintf($modSettings['paid_currency_symbol'], $context['value']); // Recur? preg_match('~(\d*)(\w)~', $context['sub']['real_length'], $match); $context['paypal_unit'] = $match[1]; $context['paypal_period'] = $match[2]; } // Setup the gateway context. $context['gateways'] = array(); foreach ($gateways as $id => $gateway) { $fields = $gateways[$id]->fetchGatewayFields($context['sub']['id'] . '+' . $memID, $context['sub'], $context['value'], $period, $scripturl . '?action=profile;u=' . $memID . ';area=subscriptions;sub_id=' . $context['sub']['id'] . ';done'); if (!empty($fields['form'])) $context['gateways'][] = $fields; } // Bugger?! if (empty($context['gateways'])) fatal_error($txt['paid_admin_not_setup_gateway']); // Now we are going to assume they want to take this out ;) $new_data = array($context['sub']['id'], $context['value'], $period, 'prepay'); if (isset($context['current'][$context['sub']['id']])) { // What are the details like? $current_pending = array(); if ($context['current'][$context['sub']['id']]['pending_details'] != '') $current_pending = @unserialize($context['current'][$context['sub']['id']]['pending_details']); // Don't get silly. if (count($current_pending) > 9) $current_pending = array(); $pending_count = 0; // Only record real pending payments as will otherwise confuse the admin! foreach ($current_pending as $pending) if ($pending[3] == 'payback') $pending_count++; if (!in_array($new_data, $current_pending)) { $current_pending[] = $new_data; $pending_details = serialize($current_pending); $smcFunc['db_query']('', ' UPDATE {db_prefix}log_subscribed SET payments_pending = {int:pending_count}, pending_details = {string:pending_details} WHERE id_sublog = {int:current_subscription_item} AND id_member = {int:selected_member}', array( 'pending_count' => $pending_count, 'current_subscription_item' => $context['current'][$context['sub']['id']]['id'], 'selected_member' => $memID, 'pending_details' => $pending_details, ) ); } } // Never had this before, lovely. else { $pending_details = serialize(array($new_data)); $smcFunc['db_insert']('', '{db_prefix}log_subscribed', array( 'id_subscribe' => 'int', 'id_member' => 'int', 'status' => 'int', 'payments_pending' => 'int', 'pending_details' => 'string-65534', 'start_time' => 'int', 'vendor_ref' => 'string-255', ), array( $context['sub']['id'], $memID, 0, 0, $pending_details, time(), '', ), array('id_sublog') ); } // Change the template. $context['sub_template'] = 'choose_payment'; // Quit. return; } else $context['sub_template'] = 'user_subscription'; } ?>