global $user, $main_smarty, $the_template, $CSRF;

if(isset($_POST['email'])){

$savemsg = save_profile();

$main_smarty->assign('savemsg', $savemsg);

}

$CSRF->create('profile_change', true, true);

// assign avatar source to smarty

$main_smarty->assign('UseAvatars', do_we_use_avatars());

$main_smarty->assign('Avatar_ImgLarge', get_avatar('large', $user->avatar_source, $user->username, $user->email));

$main_smarty->assign('Avatar_ImgSmall', get_avatar('small', $user->avatar_source, $user->username, $user->email));

// module system hook

$vars = '';

check_actions('profile_show', $vars);

// assign profile information to smarty

$main_smarty->assign('user_id', $user->id);

$main_smarty->assign('user_email', $user->email);

$main_smarty->assign('user_login', $user->username);

$main_smarty->assign('user_names', $user->names);

$main_smarty->assign('user_username', $user->username);

$main_smarty->assign('user_url', $user->url);

$main_smarty->assign('user_publicemail', $user->public_email);

$main_smarty->assign('user_location', $user->location);

$main_smarty->assign('user_occupation', $user->occupation);

$main_smarty->assign('user_language', !empty($user->language) ? $user->language : 'english');

$main_smarty->assign('user_aim', $user->aim);

$main_smarty->assign('user_msn', $user->msn);

$main_smarty->assign('user_yahoo', $user->yahoo);

$main_smarty->assign('user_gtalk', $user->gtalk);

$main_smarty->assign('user_skype', $user->skype);

$main_smarty->assign('user_irc', $user->irc);

$main_smarty->assign('user_karma', $user->karma);

$main_smarty->assign('user_joined', get_date($user->date));

$main_smarty->assign('user_avatar_source', $user->avatar_source);

$user->all_stats();

$main_smarty->assign('user_total_links', $user->total_links);

$main_smarty->assign('user_published_links', $user->published_links);

$main_smarty->assign('user_total_comments', $user->total_comments);

$main_smarty->assign('user_total_votes', $user->total_votes);

$main_smarty->assign('user_published_votes', $user->published_votes);

$languages = array();

$files = glob("languages/*.conf");

foreach ($files as $file)

if (preg_match('/lang_(.+?)\.conf/',$file,$m))

$languages[] = $m[1];

$main_smarty->assign('languages', $languages);

// pagename

define('pagename', 'profile');

$main_smarty->assign('pagename', pagename);

$main_smarty->assign('form_action', $_SERVER["PHP_SELF"]);

// show the template

$main_smarty->assign('tpl_center', $the_template . '/profile_center');

$main_smarty->display($the_template . '/pligg.tpl');

global $user, $current_user, $db, $main_smarty, $CSRF, $canIhaveAccess, $language;

if ($CSRF->check_valid(sanitize($_POST['token'], 3), 'profile_change')){

if(!isset($_POST['save_profile']) || !$_POST['process'] || (!$canIhaveAccess && sanitize($_POST['user_id'], 3) != $current_user->user_id)) return;

if ($user->email!=sanitize($_POST['email'], 3))

{

if(!check_email(sanitize($_POST['email'], 3))) {

$savemsg = $main_smarty->get_config_vars("PLIGG_Visual_Profile_BadEmail");

return $savemsg;

}

elseif(email_exists(trim(sanitize($_POST['email'], 3)))) { // if email already exists

$savemsg = $main_smarty->get_config_vars("PLIGG_Visual_Register_Error_EmailExists");

return $savemsg;

}

else {

if(pligg_validate()){

$encode=md5($_POST['email'] . $user->karma . $user->username. pligg_hash().$main_smarty->get_config_vars('PLIGG_Visual_Name'));

$domain = $main_smarty->get_config_vars('PLIGG_Visual_Name');

$validation = my_base_url . my_pligg_base . "/validation.php?code=$encode&uid=".urlencode($user->username)."&email=".urlencode($_POST['email']);

$str = $main_smarty->get_config_vars('PLIGG_PassEmail_verification_message');

eval("\$str = \"$str\";");

$message = "$str";

if(phpnum()>=5)

require("libs/class.phpmailer5.php");

else

require("libs/class.phpmailer4.php");

$mail = new PHPMailer();

$mail->From = $main_smarty->get_config_vars('PLIGG_PassEmail_From');

$mail->FromName = $main_smarty->get_config_vars('PLIGG_PassEmail_Name');

$mail->AddAddress($_POST['email']);

$mail->AddReplyTo($main_smarty->get_config_vars('PLIGG_PassEmail_From'));

$mail->IsHTML(false);

$mail->Subject = $main_smarty->get_config_vars('PLIGG_PassEmail_Subject_verification');

$mail->Body = $message;

$mail->CharSet = 'utf-8';

#print_r($mail);

if(!$mail->Send())

return false;

$savemsg = $main_smarty->get_config_vars("PLIGG_Visual_Register_Noemail").' '.sprintf($main_smarty->get_config_vars("PLIGG_Visual_Register_ToDo"),$main_smarty->get_config_vars('PLIGG_PassEmail_From'));

}

else

$user->email=sanitize($_POST['email'], 3);

}

}

$user->url=sanitize($_POST['url'], 3);

$user->public_email=sanitize($_POST['public_email'], 3);

$user->location=sanitize($_POST['location'], 3);

$user->occupation=sanitize($_POST['occupation'], 3);

$user->aim=sanitize($_POST['aim'], 3);

$user->msn=sanitize($_POST['msn'], 3);

$user->yahoo=sanitize($_POST['yahoo'], 3);

$user->gtalk=sanitize($_POST['gtalk'], 3);

$user->skype=sanitize($_POST['skype'], 3);

$user->irc=sanitize($_POST['irc'], 3);

$user->names=sanitize($_POST['names'], 3);

if (user_language)

$user->language=sanitize($_POST['language'], 3);

// module system hook

$vars = '';

check_actions('profile_save', $vars);

$avatar_source = sanitize($_POST['avatarsource'], 3);

if($avatar_source != "" && $avatar_source != "useruploaded"){

loghack('Updating profile, avatar source is not one of the list options.', 'username: ' . sanitize($_POST["username"], 3) . '|email: ' . sanitize($_POST["email"], 3));

$avatar_source == "";

}

$user->avatar_source=$avatar_source;

if(!empty($_POST['newpassword']) || !empty($_POST['newpassword2'])) {

$oldpass = sanitize($_POST['oldpassword'], 3);

$userX=$db->get_row("SELECT user_id, user_pass, user_login FROM " . table_users . " WHERE user_login = '".$user->username."'");

$saltedpass=generateHash($oldpass, substr($userX->user_pass, 0, SALT_LENGTH));

if($userX->user_pass == $saltedpass){

if(sanitize($_POST['newpassword'], 3) !== sanitize($_POST['newpassword2'], 3)) {

$savemsg = $main_smarty->get_config_vars("PLIGG_Visual_Profile_BadPass");

return $savemsg;

} else {

$saltedpass=generateHash(sanitize($_POST['newpassword'], 3));

$user->pass = $saltedpass;

$user->store();

$savemsg = $main_smarty->get_config_vars("PLIGG_Visual_Profile_PassUpdated");

return $savemsg;

}

} else {

$savemsg = $main_smarty->get_config_vars("PLIGG_Visual_Profile_BadOldPass");

return $savemsg;

}

}

$user->store();

$user->read();

if ($language != $user->language)

{

header("Location: ".getmyurl('profile'));

exit;

}

$current_user->Authenticate($user->username, $user->pass);

if(!isset($savemsg)){$savemsg = $main_smarty->get_config_vars("PLIGG_Visual_Profile_DataUpdated");}

return $savemsg;

} else {

return 'There was a token error.';

}