Beispiel #1
0
});
// The url router wasn't matching "/users/:email" probably something to do with the @ and the dots in emails
if (startsWith(request_uri(), '/users/') && strlen(trim(request_uri(), '/')) > 5) {
    $email = remove_first(request_uri(), '/users/');
    if (!account_exists($email)) {
        render('err404', null, false);
        die;
    }
    if ($email !== user_email() && !is_reviewer()) {
        render('err403', null, false);
        die;
    }
    $data = account_data($email);
    $email = $data['email'];
    if (request_method() == 'GET') {
        render('user', array('head_title' => $data['email'], 'user' => $data, 'user_apps' => app_get_user($data['email'], valid_bool(from($_REQUEST, 'show-deleted'))), 'is_self' => user_email() == $email));
    } else {
        if (request_method() == 'POST') {
            $action = from($_REQUEST, 'action');
            switch (strtolower($action)) {
                case 'desc':
                    account_change_desc($email, from($_REQUEST, 'desc'));
                    redirect('/users/' . $email);
                    break;
                case 'username':
                    account_change_username($email, from($_REQUEST, 'username'));
                    redirect('/users/' . $email);
                    break;
                case 'group':
                    if (!is_admin()) {
                        render('err403', null, false);
Beispiel #2
0
                    </a>
                <?php 
        }
        ?>
            </div>
        <?php 
    } else {
        ?>
            <span>None</span>
        <?php 
    }
    ?>
    </div>
    <?php 
}
?>
</div>
<?php 
if (is_reviewer()) {
    ?>
    <?php 
    if (valid_bool(from($_REQUEST, 'show-deleted'))) {
        ?>
        <a href="?">Hide deleted</a>
    <?php 
    } else {
        ?>
        <a href="?show-deleted=1">Show deleted</a>
    <?php 
    }
}