COM_accessLog("User {$_USER['username']} tried to illegally delete user {$uid} and failed CSRF checks.");
echo COM_refresh($_CONF['site_admin_url'] . '/index.php');
}
} elseif ($mode == $LANG_ADMIN['save'] && !empty($LANG_ADMIN['save']) && SEC_checkToken()) {
// save
$delphoto = '';
if (isset($_POST['delete_photo'])) {
$delphoto = $_POST['delete_photo'];
}
if (!isset($_POST['oldstatus'])) {
$_POST['oldstatus'] = USER_ACCOUNT_ACTIVE;
}
if (!isset($_POST['userstatus'])) {
$_POST['userstatus'] = USER_ACCOUNT_ACTIVE;
}
$display = saveusers(COM_applyFilter($_POST['uid'], true), $_POST['username'], $_POST['fullname'], $_POST['passwd'], $_POST['passwd_conf'], $_POST['email'], $_POST['regdate'], $_POST['homepage'], $_POST['groups'], $delphoto, $_POST['userstatus'], $_POST['oldstatus']);
if (!empty($display)) {
$tmp = COM_siteHeader('menu', $LANG28[22]);
$tmp .= $display;
$tmp .= COM_siteFooter();
$display = $tmp;
}
} elseif ($mode == 'edit') {
$display .= COM_siteHeader('menu', $LANG28[1]);
$msg = '';
if (isset($_GET['msg'])) {
$msg = COM_applyFilter($_GET['msg'], true);
}
$uid = '';
if (isset($_GET['uid'])) {
$uid = COM_applyFilter($_GET['uid'], true);
$_POST['userstatus'] = USER_ACCOUNT_ACTIVE;
}
$uid = COM_applyFilter($_POST['uid'], true);
if ($uid == 1) {
echo COM_refresh($_CONF['site_admin_url'] . '/index.php');
exit;
} else {
$passwd = '';
if (isset($_POST['passwd'])) {
$passwd = $_POST['passwd'];
}
$passwd_conf = '';
if (isset($_POST['passwd_conf'])) {
$passwd_conf = $_POST['passwd_conf'];
}
$display = saveusers($uid, $_POST['username'], $_POST['fullname'], $passwd, $passwd_conf, $_POST['email'], $_POST['regdate'], $_POST['homepage'], $_POST['groups'], $delphoto, $_POST['userstatus'], $_POST['oldstatus']);
if (!empty($display)) {
$display = COM_createHTMLDocument($display, array('pagetitle' => $LANG28[22]));
}
}
} elseif ($mode == 'edit') {
$msg = '';
if (isset($_GET['msg'])) {
$msg = COM_applyFilter($_GET['msg'], true);
}
$uid = '';
if (isset($_GET['uid'])) {
$uid = COM_applyFilter($_GET['uid'], true);
}
if ($uid == 1) {
echo COM_refresh($_CONF['site_admin_url'] . '/index.php');
general();
break;
case "savegeneral":
savegeneral($xsitename, $xnukeurl, $xslogan, $xstartdate, $xadmingraphic, $xgfx_chk, $xnuke_editor, $xdisplay_errors);
break;
case "themes":
themes();
break;
case "savethemes":
savethemes($xDefault_Theme, $xoverwrite_theme);
break;
case "users":
users();
break;
case "saveusers":
saveusers($xanonymous, $xanonpost, $xoverwrite_theme, $xminpass, $xbroadcast_msg, $xmy_headlines, $xuser_news);
break;
case "comments":
comments();
break;
case "savecomments":
savecomments($xanonpost, $xmoderate, $xcommentlimit, $xpollcomm, $xarticlecomm, $xCensorMode, $xCensorReplace);
break;
case "languages":
languages();
break;
case "savelanguages":
savelanguages($xlanguage, $xlocale, $xmultilingual, $xuseflags, $xbackend_language);
break;
case "footer":
footer();