user.php
35 lines
| 1.5 KiB
| text/x-php
|
PhpLexer
/ include / user.php
| r1 | <?php | |||
| $currentuser=false; | ||||
| function getCurrentUser() { | ||||
| global $currentuser; | ||||
| echo $currentuser->name; | ||||
| } | ||||
| function get_userdatabyid( $id ) { | ||||
| r4 | global $mtdb; | |||
| r1 | return $mtdb->getRow( 'SELECT id,name,email,nameplate,default_image,default_link FROM contributor WHERE id = ' . (int)$id ); | |||
| } | ||||
| function get_userdatabylogin( $username ) { | ||||
| global $mtdb; | ||||
| r4 | return $mtdb->getRow( 'SELECT id,name,email,nameplate,default_image,default_link FROM contributor WHERE name = "' . mysqli_real_escape_string($mtdb->link, $username) . '"' ); | |||
| r1 | } | |||
| function save_userdata( $user ) { | ||||
| adminlog("Saved changes to user ".$user->id." (".$user->name.").", MTS_USER, MTA_UPDATE); | ||||
| global $mtdb; | ||||
| return $mtdb->query( sprintf( 'UPDATE contributor SET email="%s", nameplate="%s", default_image="%s", default_link="%s" WHERE id=%d', | ||||
| r4 | mysqli_real_escape_string($mtdb->link, $user->email), mysqli_real_escape_string($mtdb->link, $user->nameplate), | |||
| mysqli_real_escape_string($mtdb->link, $user->default_image), mysqli_real_escape_string($mtdb->link, $user->default_link), $user->id) ); | ||||
| r1 | } | |||
| function change_password( $user ) { | ||||
| adminlog("Changed password for user ".$user->id." (".$user->name.").", MTS_USER, MTA_UPDATE); | ||||
| global $mtdb, $currentuser; | ||||
| if( $currentuser->id === $user->id ) mt_setcookie($user->name, $user->password, false, ADMINURL, FALSE ); | ||||
| r4 | return $mtdb->query( 'UPDATE contributor SET password=SHA1( "' . mysqli_real_escape_string($mtdb->link, $user->password) . '" ) WHERE id = "' . mysqli_real_escape_string($mtdb->link, $user->id) . '"' ); | |||
| r1 | } | |||
| ?> | ||||
