function reportUser($userID, $reporterID, $reason) { $user = getUserForID($userID); if (!$user) { return returnResponse(0, "Failed to report, user not found.", $result); } $username = $user['username']; $fullName = $user['fullName']; $emailAdd = $user['emailAddress']; $result = dbResultFromQuery("INSERT INTO reported_users (user_id, username, fullName, emailAddress, reporter_id, reportReason) VALUES ('{$userID}', '{$username}', '{$fullName}', '{$emailAdd}', '{$reporterID}', '{$reason}');"); if ($result) { return returnResponse(1, "User reported, thank you for keeping the community clean."); } else { return returnResponse(0, "Failed to report, please try again."); } }
</section> '; } else { // Loop through posts foreach ($posts as $post) { $timestamp = wordedTimestamp($post['timestamp'], true); $postURL = "post.php?id=" . $post['post_id']; $postBody = $post['body']; $postBody = str_replace('<br />', ' ', $postBody); $postImgURL = $post['thumbURL'] ? $post['thumbURL'] : NULL; $postImage = file_exists($postImgURL) ? '<img class="uploaded_image" height="100" width="100" src="' . $postImgURL . '" alt="Post Image">' : NULL; if (strlen($postBody) > 500) { $postBody = substr($postBody, 0, 460); $postBody .= '... <a href="' . $postURL . '">Read more</a>'; } $user = getUserForID($post['user_id']); $userURL = "user.php?id=" . $user['user_id']; $authorName = $user['username']; echo ' <section id="content" class="body"> <article class="hentry"> <header> <h2 class="entry-title"><a href="' . $postURL . '" rel="bookmark">' . $post['title'] . '</a></h2> </header> <footer class="post-info"> <abbr class="published">' . $timestamp . '</abbr> <address class="vcard author">by <a class="url fn" href="' . $userURL . '">' . $authorName . '</a></address> </footer>' . $postImage . '<div class="entry-content"><p>' . $postBody . '</p></div> </article> </section> ';
} $imagePath = $imagesDir . $imageName; $uploaded = move_uploaded_file($imageTempDir, $imagePath); if ($uploaded) { $imageURL = $imagePath; $submittingDetails['profileImage'] = $imageURL; squareImageAtPath($imagePath, $imagePath, 200); } } if (isValidEmail($_POST['emailAddress'])) { updateUserForID($myUserID, $submittingDetails); } else { $errorMsg = "<b>* Invalid email address</b><br><br>"; } } $user = getUserForID($myUserID); $profilePicURL = $user['profileImage'] ? $user['profileImage'] : NULL; $profilePic = file_exists($profilePicURL) ? $profilePicURL : "images/default.png"; $fullName = $user['fullName'] ? $user['fullName'] : "No name set"; $username = $user['username'] ? $user['username'] : "******"; $emailAdd = $user['emailAddress'] ? $user['emailAddress'] : "No email address set"; ?> <!DOCTYPE html> <html> <head> <title>Account Settings</title> <meta charset="utf-8" /> <link rel="stylesheet" href="css/main.css" type="text/css" /> <!--[if IE]> <script src="http://html5shiv.googlecode.com/svn/trunk/html5.js"></script><![endif]-->
$commentID = isset($_GET['commentID']) ? $_GET['commentID'] : 0; $postID = isset($_GET['postID']) ? $_GET['postID'] : 0; $responseMsg = NULL; $reportingMsg = "<p>Cannot report user/comment at this moment.</p>"; $reporting = NULL; if ($commentID && $postID) { // Reporting comment $reporting = "comment"; $user = getUserForID($id); $url = 'post.php?id=' . $postID . '#' . $commentID; $reportingMsg = '<p>Reporting comment <a href="' . $url . '">' . $commentID . '</a></p>'; } else { if ($userID && !$commentID) { // Reporting user $reporting = "user"; $user = getUserForID($id); $url = 'user.php?id=' . $id; $reportingMsg = '<p>Reporting user <a href="' . $url . '">' . $user['username'] . '</a></p>'; } } if ($submitted) { if ($reason) { if ($reporting === "user") { // Insert user report to db $reported = reportUser($userID, $myUserID, $reason); if ($reported['success']) { header("Location:user.php?id={$userID}"); } else { $responseMsg = $reported['response'] . "<br><br>"; } } else {