forked from Moearly/YouBBS-EOEN
/
admin-setuser.php
186 lines (163 loc) · 7.82 KB
/
admin-setuser.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
<?php
define('IN_SAESPOT', 1);
define('CURRENT_DIR', pathinfo(__FILE__, PATHINFO_DIRNAME));
include(CURRENT_DIR . '/config.php');
include(CURRENT_DIR . '/common.php');
if (!$cur_user || $cur_user['flag']<99) exit('error: 403 Access Denied');
$mid = intval($_GET['mid']);
if($mid==$cur_user['id']){
header('location: /setting');
exit;
}
$query = "SELECT * FROM yunbbs_users WHERE id='$mid'";
$m_obj = $DBS->fetch_one_array($query);
if(!$m_obj){
exit('404');
}
$m_obj['regtime'] = showtime($m_obj['regtime']);
$tip1 = '';
$tip2 = '';
$tip3 = '';
$tip4 = '';
$av_time = '';
if($_SERVER['REQUEST_METHOD'] == 'POST'){
$action = $_POST['action'];
if($action == 'info'){
$email = addslashes(filter_chr(trim($_POST['email'])));
$url = char_cv(filter_chr(trim($_POST['url'])));
$about = addslashes(trim($_POST['about']));
if($DBS->unbuffered_query("UPDATE yunbbs_users SET email='$email', url='$url', about='$about' WHERE id='$mid'")){
//更新缓存
$m_obj['email'] = $email;
$m_obj['url'] = $url;
$m_obj['about'] = $about;
$tip1 = '已成功保存';
}else{
$tip1 = '数据库更新失败，修改尚未保存，请稍后再试';
}
}else if($action == 'avatar'){
if($_FILES['avatar']['size'] && $_FILES['avatar']['size'] < 301000){
$img_info = getimagesize($_FILES['avatar']['tmp_name']);
if($img_info){
//创建源图片
if($img_info[2]==1){
$img_obj = imagecreatefromgif($_FILES['avatar']['tmp_name']);
}else if($img_info[2]==2){
$img_obj = imagecreatefromjpeg($_FILES['avatar']['tmp_name']);
}else if($img_info[2]==3){
$img_obj = imagecreatefrompng($_FILES['avatar']['tmp_name']);
}
//如果上传的文件是jpg/gif/png则处理
if(isset($img_obj)){
// 缩略图比例
$max_px = max($img_info[0], $img_info[1]);
//large
if($max_px>73){
$percent = 73/$max_px;
$new_w = round($img_info[0]*$percent);
$new_h = round($img_info[1]*$percent);
$new_image = imagecreatetruecolor($new_w, $new_h);
$bg = imagecolorallocate ( $new_image, 255, 255, 255 );
imagefill ( $new_image, 0, 0, $bg );
////目标文件，源文件，目标文件坐标，源文件坐标，目标文件宽高，源宽高
imagecopyresampled($new_image, $img_obj, 0, 0, 0, 0, $new_w, $new_h, $img_info[0], $img_info[1]);
imagejpeg($new_image, 'avatar/large/'.$mid.'.png', 95);
}else{
imagejpeg($img_obj, 'avatar/large/'.$mid.'.png', 95);
}
//normal
if($max_px>48){
$percent = 48/$max_px;
$new_w = round($img_info[0]*$percent);
$new_h = round($img_info[1]*$percent);
$new_image = imagecreate($new_w, $new_h);
$new_image = imagecreatetruecolor($new_w, $new_h);
$bg = imagecolorallocate ( $new_image, 255, 255, 255 );
imagefill ( $new_image, 0, 0, $bg );
////目标文件，源文件，目标文件坐标，源文件坐标，目标文件宽高，源宽高
imagecopyresampled($new_image, $img_obj, 0, 0, 0, 0, $new_w, $new_h, $img_info[0], $img_info[1]);
imagejpeg($new_image, 'avatar/normal/'.$mid.'.png', 95);
}else{
imagejpeg($img_obj, 'avatar/normal/'.$mid.'.png', 95);
}
// mini
if($max_px>24){
$percent = 24/$max_px;
$new_w = round($img_info[0]*$percent);
$new_h = round($img_info[1]*$percent);
$new_image = imagecreate($new_w, $new_h);
$new_image = imagecreatetruecolor($new_w, $new_h);
$bg = imagecolorallocate ( $new_image, 255, 255, 255 );
imagefill ( $new_image, 0, 0, $bg );
////目标文件，源文件，目标文件坐标，源文件坐标，目标文件宽高，源宽高
imagecopyresampled($new_image, $img_obj, 0, 0, 0, 0, $new_w, $new_h, $img_info[0], $img_info[1]);
imagejpeg($new_image, 'avatar/mini/'.$mid.'.png', 95);
}else{
imagejpeg($img_obj, 'avatar/mini/'.$mid.'.png', 95);
}
imagedestroy($img_obj);
if(isset($new_image)){
imagedestroy($new_image);
}
//
if($cur_user['avatar']!=$mid){
if($DBS->unbuffered_query("UPDATE yunbbs_users SET avatar='$mid' WHERE id='$mid'")){
// pass
}else{
$tip2 = '数据保存失败，请稍后再试';
}
}
$av_time = $timestamp;
}else{
$tip2 = '图片转换失败，请稍后再试';
}
}else{
$tip2 = '你上传的不是图片文件，只支持jpg/gif/png三种格式';
}
}else{
$tip2 = '图片尚未上传或太大了';
}
}else if($action == 'chpw'){
$password_new = addslashes(trim($_POST['password_new']));
$password_again = addslashes(trim($_POST['password_again']));
if($password_new && $password_again){
if($password_new == $password_again){
$db_user2 = $DBS->fetch_one_array("SELECT `regtime` FROM `yunbbs_users` WHERE `id`='$mid'");
$new_md5pw = encode_password($password_new, $db_user2['regtime']);
if($DBS->unbuffered_query("UPDATE yunbbs_users SET password='$new_md5pw' WHERE id='$mid'")){
$tip3 = '密码已成功更改，请记住新密码';
}else{
$tip3 = '数据保存失败，请稍后再试';
}
}else{
$tip3 = '新密码、重复新密码不一致';
}
}else{
$tip3 = '请填写完整，新密码、重复新密码';
}
}else if($action == 'setflag'){
$flag = intval(trim($_POST['flag']));
if($flag>=0 && $flag<=99){
if($DBS->unbuffered_query("UPDATE yunbbs_users SET flag='$flag' WHERE id='$mid'")){
$m_obj['flag'] = $flag;
$tip4 = '用户权限已成功更改';
}else{
$tip4 = '数据保存失败，请稍后再试';
}
}else{
$tip4 = '数值不正确，请填写0~99之间的数字';
}
}else if($action == 'rmgauth'){
if($DBS->unbuffered_query("UPDATE yunbbs_users SET gauthsecret=Null WHERE id='$mid'")){
//更新缓存和cookie
$tip5 = '成功取消Google Auth二次验证！';
}else{
$tip5 = '数据保存失败，请稍后再试！';
}
}
}
// 页面变量
$title = '修改用户资料';
$pagefile = CURRENT_DIR . '/templates/default/'.$tpl.'admin-setuser.php';
include(CURRENT_DIR . '/templates/default/'.$tpl.'layout.php');
?>