Code Forge

<?php

/**

*

* @package acp

* @version $Id$

* @copyright (c) 2005 phpBB Group

* @license http://opensource.org/licenses/gpl-license.php GNU Public License

*

*/

/**

* @ignore

*/

if (!defined('IN_PHPBB'))

{

        exit;

}

/**

* @package acp

*/

class acp_users

{

        var $u_action;

        var $p_master;

        function acp_users(&$p_master)

        {

                $this->p_master = &$p_master;

        }

        function main($id, $mode)

        {

                global $config, $db, $user, $auth, $template, $cache;

                global $phpbb_root_path, $phpbb_admin_path, $phpEx, $table_prefix, $file_uploads;

                $user->add_lang(array('posting', 'ucp', 'acp/users'));

                $this->tpl_name = 'acp_users';

                $this->page_title = 'ACP_USER_' . strtoupper($mode);

                $error                = array();

                $username        = utf8_normalize_nfc(request_var('username', '', true));

                $user_id        = request_var('u', 0);

                $action                = request_var('action', '');

                $submit                = (isset($_POST['update']) && !isset($_POST['cancel'])) ? true : false;

                $form_name = 'acp_users';

                add_form_key($form_name);

                // Whois (special case)

                if ($action == 'whois')

                {

                        include($phpbb_root_path . 'includes/functions_user.' . $phpEx);

                        $this->page_title = 'WHOIS';

                        $this->tpl_name = 'simple_body';

                        $user_ip = request_var('user_ip', '');

                        $domain = gethostbyaddr($user_ip);

                        $ipwhois = user_ipwhois($user_ip);

                        $template->assign_vars(array(

                                'MESSAGE_TITLE'                => sprintf($user->lang['IP_WHOIS_FOR'], $domain),

                                'MESSAGE_TEXT'                => nl2br($ipwhois))

                        );

                        return;

                }

                // Show user selection mask

                if (!$username && !$user_id)

                {

                        $this->page_title = 'SELECT_USER';

                        $template->assign_vars(array(

                                'U_ACTION'                        => $this->u_action,

                                'ANONYMOUS_USER_ID'        => ANONYMOUS,

                                'S_SELECT_USER'                => true,

                                'U_FIND_USERNAME'        => append_sid("{$phpbb_root_path}memberlist.$phpEx", 'mode=searchuser&form=select_user&field=username&select_single=true'),

                        ));

                        return;

                }

                if (!$user_id)

                {

                        $sql = 'SELECT user_id

                                FROM ' . USERS_TABLE . "

                                WHERE username_clean = '" . $db->sql_escape(utf8_clean_string($username)) . "'";

                        $result = $db->sql_query($sql);

                        $user_id = (int) $db->sql_fetchfield('user_id');

                        $db->sql_freeresult($result);

                        if (!$user_id)

                        {

                                trigger_error($user->lang['NO_USER'] . adm_back_link($this->u_action), E_USER_WARNING);

                        }

                }

                // Generate content for all modes

                $sql = 'SELECT u.*, s.*

                        FROM ' . USERS_TABLE . ' u

                                LEFT JOIN ' . SESSIONS_TABLE . ' s ON (s.session_user_id = u.user_id)

                        WHERE u.user_id = ' . $user_id . '

                        ORDER BY s.session_time DESC';

                $result = $db->sql_query_limit($sql, 1);

                $user_row = $db->sql_fetchrow($result);

                $db->sql_freeresult($result);

                if (!$user_row)

                {

                        trigger_error($user->lang['NO_USER'] . adm_back_link($this->u_action), E_USER_WARNING);

                }

                // Generate overall "header" for user admin

                $s_form_options = '';

                // Build modes dropdown list

                $sql = 'SELECT module_mode, module_auth

                        FROM ' . MODULES_TABLE . "

                        WHERE module_basename = 'users'

                                AND module_enabled = 1

                                AND module_class = 'acp'

                        ORDER BY left_id, module_mode";

                $result = $db->sql_query($sql);

                $dropdown_modes = array();

                while ($row = $db->sql_fetchrow($result))

                {

                        if (!$this->p_master->module_auth($row['module_auth']))

                        {

                                continue;

                        }

                        $dropdown_modes[$row['module_mode']] = true;

                }

                $db->sql_freeresult($result);

                foreach ($dropdown_modes as $module_mode => $null)

                {

                        $selected = ($mode == $module_mode) ? ' selected="selected"' : '';

                        $s_form_options .= '<option value="' . $module_mode . '"' . $selected . '>' . $user->lang['ACP_USER_' . strtoupper($module_mode)] . '</option>';

                }

                $template->assign_vars(array(

                        'U_BACK'                        => $this->u_action,

                        'U_MODE_SELECT'                => append_sid("{$phpbb_admin_path}index.$phpEx", "i=$id&u=$user_id"),

                        'U_ACTION'                        => $this->u_action . '&u=' . $user_id,

                        'S_FORM_OPTIONS'        => $s_form_options,

                        'MANAGED_USERNAME'        => $user_row['username'])

                );

                // Prevent normal users/admins change/view founders if they are not a founder by themselves

                if ($user->data['user_type'] != USER_FOUNDER && $user_row['user_type'] == USER_FOUNDER)

                {

                        trigger_error($user->lang['NOT_MANAGE_FOUNDER'] . adm_back_link($this->u_action), E_USER_WARNING);

                }

                switch ($mode)

                {

                        case 'overview':

                                include($phpbb_root_path . 'includes/functions_user.' . $phpEx);

                                $user->add_lang('acp/ban');

                                $delete                        = request_var('delete', 0);

                                $delete_type        = request_var('delete_type', '');

                                $ip                                = request_var('ip', 'ip');

                                if ($submit)

                                {

                                        // You can't delete the founder

                                        if ($delete && $user_row['user_type'] != USER_FOUNDER)

                                        {

                                                if (!$auth->acl_get('a_userdel'))

                                                {

                                                        trigger_error($user->lang['NO_AUTH_OPERATION'] . adm_back_link($this->u_action . '&u=' . $user_id), E_USER_WARNING);

                                                }

                                                // Check if the user wants to remove himself or the guest user account

                                                if ($user_id == ANONYMOUS)

                                                {

                                                        trigger_error($user->lang['CANNOT_REMOVE_ANONYMOUS'] . adm_back_link($this->u_action . '&u=' . $user_id), E_USER_WARNING);

                                                }

                                                if ($user_id == $user->data['user_id'])

                                                {

                                                        trigger_error($user->lang['CANNOT_REMOVE_YOURSELF'] . adm_back_link($this->u_action . '&u=' . $user_id), E_USER_WARNING);

                                                }

                                                if ($delete_type)

                                                {

                                                        if (confirm_box(true))

                                                        {

                                                                user_delete($delete_type, $user_id, $user_row['username']);

                                                                add_log('admin', 'LOG_USER_DELETED', $user_row['username']);

                                                                trigger_error($user->lang['USER_DELETED'] . adm_back_link($this->u_action));

                                                        }

                                                        else

                                                        {

                                                                confirm_box(false, $user->lang['CONFIRM_OPERATION'], build_hidden_fields(array(

                                                                        'u'                                => $user_id,

                                                                        'i'                                => $id,

                                                                        'mode'                        => $mode,

                                                                        'action'                => $action,

                                                                        'update'                => true,

                                                                        'delete'                => 1,

                                                                        'delete_type'        => $delete_type))

                                                                );

                                                        }

                                                }

                                                else

                                                {

                                                        trigger_error($user->lang['NO_MODE'] . adm_back_link($this->u_action . '&u=' . $user_id), E_USER_WARNING);

                                                }

                                        }

                                        // Handle quicktool actions

                                        switch ($action)

                                        {

                                                case 'banuser':

                                                case 'banemail':

                                                case 'banip':

                                                        if ($user_id == $user->data['user_id'])

                                                        {

                                                                trigger_error($user->lang['CANNOT_BAN_YOURSELF'] . adm_back_link($this->u_action . '&u=' . $user_id), E_USER_WARNING);

                                                        }

                                                        if ($user_id == ANONYMOUS)

                                                        {

                                                                trigger_error($user->lang['CANNOT_BAN_ANONYMOUS'] . adm_back_link($this->u_action . '&u=' . $user_id), E_USER_WARNING);

                                                        }

                                                        if ($user_row['user_type'] == USER_FOUNDER)

                                                        {

                                                                trigger_error($user->lang['CANNOT_BAN_FOUNDER'] . adm_back_link($this->u_action . '&u=' . $user_id), E_USER_WARNING);

                                                        }

                                                        if (!check_form_key($form_name))

                                                        {

                                                                trigger_error($user->lang['FORM_INVALID'] . adm_back_link($this->u_action . '&u=' . $user_id), E_USER_WARNING);

                                                        }

                                                        $ban = array();

                                                        switch ($action)

                                                        {

                                                                case 'banuser':

                                                                        $ban[] = $user_row['username'];

                                                                        $reason = 'USER_ADMIN_BAN_NAME_REASON';

                                                                        $log = 'LOG_USER_BAN_USER';

                                                                break;

                                                                case 'banemail':

                                                                        $ban[] = $user_row['user_email'];

                                                                        $reason = 'USER_ADMIN_BAN_EMAIL_REASON';

                                                                        $log = 'LOG_USER_BAN_EMAIL';

                                                                break;

                                                                case 'banip':

                                                                        $ban[] = $user_row['user_ip'];

                                                                        $sql = 'SELECT DISTINCT poster_ip

                                                                                FROM ' . POSTS_TABLE . "

                                                                                WHERE poster_id = $user_id";

                                                                        $result = $db->sql_query($sql);

                                                                        while ($row = $db->sql_fetchrow($result))

                                                                        {

                                                                                $ban[] = $row['poster_ip'];

                                                                        }

                                                                        $db->sql_freeresult($result);

                                                                        $reason = 'USER_ADMIN_BAN_IP_REASON';

                                                                        $log = 'LOG_USER_BAN_IP';

                                                                break;

                                                        }

                                                        $ban_reason = utf8_normalize_nfc(request_var('ban_reason', $user->lang[$reason], true));

                                                        $ban_give_reason = utf8_normalize_nfc(request_var('ban_give_reason', '', true));

                                                        // Log not used at the moment, we simply utilize the ban function.

                                                        $result = user_ban(substr($action, 3), $ban, 0, 0, 0, $ban_reason, $ban_give_reason);

                                                        trigger_error((($result === false) ? $user->lang['BAN_ALREADY_ENTERED'] : $user->lang['BAN_SUCCESSFUL']) . adm_back_link($this->u_action . '&u=' . $user_id));

                                                break;

                                                case 'reactivate':

                                                        if ($user_id == $user->data['user_id'])

                                                        {

                                                                trigger_error($user->lang['CANNOT_FORCE_REACT_YOURSELF'] . adm_back_link($this->u_action . '&u=' . $user_id), E_USER_WARNING);

                                                        }

                                                        if (!check_form_key($form_name))

                                                        {

                                                                trigger_error($user->lang['FORM_INVALID'] . adm_back_link($this->u_action . '&u=' . $user_id), E_USER_WARNING);

                                                        }

                                                        if ($user_row['user_type'] == USER_FOUNDER)

                                                        {

                                                                trigger_error($user->lang['CANNOT_FORCE_REACT_FOUNDER'] . adm_back_link($this->u_action . '&u=' . $user_id), E_USER_WARNING);

                                                        }

                                                        if ($user_row['user_type'] == USER_IGNORE)

                                                        {

                                                                trigger_error($user->lang['CANNOT_FORCE_REACT_BOT'] . adm_back_link($this->u_action . '&u=' . $user_id), E_USER_WARNING);

                                                        }

                                                        if ($config['email_enable'])

                                                        {

                                                                include_once($phpbb_root_path . 'includes/functions_messenger.' . $phpEx);

                                                                $server_url = generate_board_url();

                                                                $user_actkey = gen_rand_string(mt_rand(6, 10));

                                                                $email_template = ($user_row['user_type'] == USER_NORMAL) ? 'user_reactivate_account' : 'user_resend_inactive';

                                                                if ($user_row['user_type'] == USER_NORMAL)

                                                                {

                                                                        user_active_flip('deactivate', $user_id, INACTIVE_REMIND);

                                                                        $sql = 'UPDATE ' . USERS_TABLE . "

                                                                                SET user_actkey = '" . $db->sql_escape($user_actkey) . "'

                                                                                WHERE user_id = $user_id";

                                                                        $db->sql_query($sql);

                                                                }

                                                                else

                                                                {

                                                                        // Grabbing the last confirm key - we only send a reminder

                                                                        $sql = 'SELECT user_actkey

                                                                                FROM ' . USERS_TABLE . '

                                                                                WHERE user_id = ' . $user_id;

                                                                        $result = $db->sql_query($sql);

                                                                        $user_actkey = (string) $db->sql_fetchfield('user_actkey');

                                                                        $db->sql_freeresult($result);

                                                                }

                                                                $messenger = new messenger(false);

                                                                $messenger->template($email_template, $user_row['user_lang']);

                                                                $messenger->to($user_row['user_email'], $user_row['username']);

                                                                $messenger->anti_abuse_headers($config, $user);

                                                                $messenger->assign_vars(array(

                                                                        'WELCOME_MSG'        => htmlspecialchars_decode(sprintf($user->lang['WELCOME_SUBJECT'], $config['sitename'])),

                                                                        'USERNAME'                => htmlspecialchars_decode($user_row['username']),

                                                                        'U_ACTIVATE'        => "$server_url/ucp.$phpEx?mode=activate&u={$user_row['user_id']}&k=$user_actkey")

                                                                );

                                                                $messenger->send(NOTIFY_EMAIL);

                                                                add_log('admin', 'LOG_USER_REACTIVATE', $user_row['username']);

                                                                add_log('user', $user_id, 'LOG_USER_REACTIVATE_USER');

                                                                trigger_error($user->lang['FORCE_REACTIVATION_SUCCESS'] . adm_back_link($this->u_action . '&u=' . $user_id));

                                                        }

                                                break;

                                                case 'active':

                                                        if ($user_id == $user->data['user_id'])

                                                        {

                                                                // It is only deactivation since the user is already activated (else he would not have reached this page)

                                                                trigger_error($user->lang['CANNOT_DEACTIVATE_YOURSELF'] . adm_back_link($this->u_action . '&u=' . $user_id), E_USER_WARNING);

                                                        }

                                                        if (!check_form_key($form_name))

                                                        {

                                                                trigger_error($user->lang['FORM_INVALID'] . adm_back_link($this->u_action . '&u=' . $user_id), E_USER_WARNING);

                                                        }

                                                        if ($user_row['user_type'] == USER_FOUNDER)

                                                        {

                                                                trigger_error($user->lang['CANNOT_DEACTIVATE_FOUNDER'] . adm_back_link($this->u_action . '&u=' . $user_id), E_USER_WARNING);

                                                        }

                                                        if ($user_row['user_type'] == USER_IGNORE)

                                                        {

                                                                trigger_error($user->lang['CANNOT_DEACTIVATE_BOT'] . adm_back_link($this->u_action . '&u=' . $user_id), E_USER_WARNING);

                                                        }

                                                        user_active_flip('flip', $user_id);

                                                        if ($user_row['user_type'] == USER_INACTIVE)

                                                        {

                                                                if ($config['require_activation'] == USER_ACTIVATION_ADMIN)

                                                                {

                                                                        include_once($phpbb_root_path . 'includes/functions_messenger.' . $phpEx);

                                                                        $messenger = new messenger(false);

                                                                        $messenger->template('admin_welcome_activated', $user_row['user_lang']);

                                                                        $messenger->to($user_row['user_email'], $user_row['username']);

                                                                        $messenger->anti_abuse_headers($config, $user);

                                                                        $messenger->assign_vars(array(

                                                                                'USERNAME'        => htmlspecialchars_decode($user_row['username']))

                                                                        );

                                                                        $messenger->send(NOTIFY_EMAIL);

                                                                }

                                                        }

                                                        $message = ($user_row['user_type'] == USER_INACTIVE) ? 'USER_ADMIN_ACTIVATED' : 'USER_ADMIN_DEACTIVED';

                                                        $log = ($user_row['user_type'] == USER_INACTIVE) ? 'LOG_USER_ACTIVE' : 'LOG_USER_INACTIVE';

                                                        add_log('admin', $log, $user_row['username']);

                                                        add_log('user', $user_id, $log . '_USER');

                                                        trigger_error($user->lang[$message] . adm_back_link($this->u_action . '&u=' . $user_id));

                                                break;

                                                case 'delsig':

                                                        if (!check_form_key($form_name))

                                                        {

                                                                trigger_error($user->lang['FORM_INVALID'] . adm_back_link($this->u_action . '&u=' . $user_id), E_USER_WARNING);

                                                        }

                                                        $sql_ary = array(

                                                                'user_sig'                                        => '',

                                                                'user_sig_bbcode_uid'                => '',

                                                                'user_sig_bbcode_bitfield'        => ''

                                                        );

                                                        $sql = 'UPDATE ' . USERS_TABLE . ' SET ' . $db->sql_build_array('UPDATE', $sql_ary) . "

                                                                WHERE user_id = $user_id";

                                                        $db->sql_query($sql);

                                                        add_log('admin', 'LOG_USER_DEL_SIG', $user_row['username']);

                                                        add_log('user', $user_id, 'LOG_USER_DEL_SIG_USER');

                                                        trigger_error($user->lang['USER_ADMIN_SIG_REMOVED'] . adm_back_link($this->u_action . '&u=' . $user_id));

                                                break;

                                                case 'delavatar':

                                                        if (!check_form_key($form_name))

                                                        {

                                                                trigger_error($user->lang['FORM_INVALID'] . adm_back_link($this->u_action . '&u=' . $user_id), E_USER_WARNING);

                                                        }

                                                        $sql_ary = array(

                                                                'user_avatar'                        => '',

                                                                'user_avatar_type'                => 0,

                                                                'user_avatar_width'                => 0,

                                                                'user_avatar_height'        => 0,

                                                        );

                                                        $sql = 'UPDATE ' . USERS_TABLE . '

                                                                SET ' . $db->sql_build_array('UPDATE', $sql_ary) . "

                                                                WHERE user_id = $user_id";

                                                        $db->sql_query($sql);

                                                        // Delete old avatar if present

                                                        if ($user_row['user_avatar'] && $user_row['user_avatar_type'] != AVATAR_GALLERY)

                                                        {

                                                                avatar_delete('user', $user_row);

                                                        }

                                                        add_log('admin', 'LOG_USER_DEL_AVATAR', $user_row['username']);

                                                        add_log('user', $user_id, 'LOG_USER_DEL_AVATAR_USER');

                                                        trigger_error($user->lang['USER_ADMIN_AVATAR_REMOVED'] . adm_back_link($this->u_action . '&u=' . $user_id));

                                                break;

                                                case 'delposts':

                                                        if (confirm_box(true))

                                                        {

                                                                // Delete posts, attachments, etc.

                                                                delete_posts('poster_id', $user_id);

                                                                add_log('admin', 'LOG_USER_DEL_POSTS', $user_row['username']);

                                                                trigger_error($user->lang['USER_POSTS_DELETED'] . adm_back_link($this->u_action . '&u=' . $user_id));

                                                        }

                                                        else

                                                        {

                                                                confirm_box(false, $user->lang['CONFIRM_OPERATION'], build_hidden_fields(array(

                                                                        'u'                                => $user_id,

                                                                        'i'                                => $id,

                                                                        'mode'                        => $mode,

                                                                        'action'                => $action,

                                                                        'update'                => true))

                                                                );

                                                        }

                                                break;

                                                case 'delattach':

                                                        if (confirm_box(true))

                                                        {

                                                                delete_attachments('user', $user_id);

                                                                add_log('admin', 'LOG_USER_DEL_ATTACH', $user_row['username']);

                                                                trigger_error($user->lang['USER_ATTACHMENTS_REMOVED'] . adm_back_link($this->u_action . '&u=' . $user_id));

                                                        }

                                                        else

                                                        {

                                                                confirm_box(false, $user->lang['CONFIRM_OPERATION'], build_hidden_fields(array(

                                                                        'u'                                => $user_id,

                                                                        'i'                                => $id,

                                                                        'mode'                        => $mode,

                                                                        'action'                => $action,

                                                                        'update'                => true))

                                                                );

                                                        }

                                                break;

                                                case 'deloutbox':

                                                        if (confirm_box(true))

                                                        {

                                                                $msg_ids = array();

                                                                $lang = 'EMPTY';

                                                                $sql = 'SELECT msg_id

                                                                        FROM ' . PRIVMSGS_TO_TABLE . "

                                                                        WHERE author_id = $user_id

                                                                                AND folder_id = " . PRIVMSGS_OUTBOX;

                                                                $result = $db->sql_query($sql);

                                                                if ($row = $db->sql_fetchrow($result))

                                                                {

                                                                        if (!function_exists('delete_pm'))

                                                                        {

                                                                                include($phpbb_root_path . 'includes/functions_privmsgs.' . $phpEx);

                                                                        }

                                                                        do

                                                                        {

                                                                                $msg_ids[] = (int) $row['msg_id'];

                                                                        }

                                                                        while ($row = $db->sql_fetchrow($result));

                                                                        $db->sql_freeresult($result);

                                                                        delete_pm($user_id, $msg_ids, PRIVMSGS_OUTBOX);

                                                                        add_log('admin', 'LOG_USER_DEL_OUTBOX', $user_row['username']);

                                                                        $lang = 'EMPTIED';

                                                                }

                                                                $db->sql_freeresult($result);

                                                                trigger_error($user->lang['USER_OUTBOX_' . $lang] . adm_back_link($this->u_action . '&u=' . $user_id));

                                                        }

                                                        else

                                                        {

                                                                confirm_box(false, $user->lang['CONFIRM_OPERATION'], build_hidden_fields(array(

                                                                        'u'                                => $user_id,

                                                                        'i'                                => $id,

                                                                        'mode'                        => $mode,

                                                                        'action'                => $action,

                                                                        'update'                => true))

                                                                );

                                                        }

                                                break;

                                                case 'moveposts':

                                                        if (!check_form_key($form_name))

                                                        {

                                                                trigger_error($user->lang['FORM_INVALID'] . adm_back_link($this->u_action . '&u=' . $user_id), E_USER_WARNING);

                                                        }

                                                        $user->add_lang('acp/forums');

                                                        $new_forum_id = request_var('new_f', 0);

                                                        if (!$new_forum_id)

                                                        {

                                                                $this->page_title = 'USER_ADMIN_MOVE_POSTS';

                                                                $template->assign_vars(array(

                                                                        'S_SELECT_FORUM'                => true,

                                                                        'U_ACTION'                                => $this->u_action . "&action=$action&u=$user_id",

                                                                        'U_BACK'                                => $this->u_action . "&u=$user_id",

                                                                        'S_FORUM_OPTIONS'                => make_forum_select(false, false, false, true))

                                                                );

                                                                return;

                                                        }

                                                        // Is the new forum postable to?

                                                        $sql = 'SELECT forum_name, forum_type

                                                                FROM ' . FORUMS_TABLE . "

                                                                WHERE forum_id = $new_forum_id";

                                                        $result = $db->sql_query($sql);

                                                        $forum_info = $db->sql_fetchrow($result);

                                                        $db->sql_freeresult($result);

                                                        if (!$forum_info)

                                                        {

                                                                trigger_error($user->lang['NO_FORUM'] . adm_back_link($this->u_action . '&u=' . $user_id), E_USER_WARNING);

                                                        }

                                                        if ($forum_info['forum_type'] != FORUM_POST)

                                                        {

                                                                trigger_error($user->lang['MOVE_POSTS_NO_POSTABLE_FORUM'] . adm_back_link($this->u_action . '&u=' . $user_id), E_USER_WARNING);

                                                        }

                                                        // Two stage?

                                                        // Move topics comprising only posts from this user

                                                        $topic_id_ary = $move_topic_ary = $move_post_ary = $new_topic_id_ary = array();

                                                        $forum_id_ary = array($new_forum_id);

                                                        $sql = 'SELECT topic_id, COUNT(post_id) AS total_posts

                                                                FROM ' . POSTS_TABLE . "

                                                                WHERE poster_id = $user_id

                                                                        AND forum_id <> $new_forum_id

                                                                GROUP BY topic_id";

                                                        $result = $db->sql_query($sql);

                                                        while ($row = $db->sql_fetchrow($result))

                                                        {

                                                                $topic_id_ary[$row['topic_id']] = $row['total_posts'];

                                                        }

                                                        $db->sql_freeresult($result);

                                                        if (sizeof($topic_id_ary))

                                                        {

                                                                $sql = 'SELECT topic_id, forum_id, topic_title, topic_replies, topic_replies_real, topic_attachment

                                                                        FROM ' . TOPICS_TABLE . '

                                                                        WHERE ' . $db->sql_in_set('topic_id', array_keys($topic_id_ary));

                                                                $result = $db->sql_query($sql);

                                                                while ($row = $db->sql_fetchrow($result))

                                                                {

                                                                        if (max($row['topic_replies'], $row['topic_replies_real']) + 1 == $topic_id_ary[$row['topic_id']])

                                                                        {

                                                                                $move_topic_ary[] = $row['topic_id'];

                                                                        }

                                                                        else

                                                                        {

                                                                                $move_post_ary[$row['topic_id']]['title'] = $row['topic_title'];

                                                                                $move_post_ary[$row['topic_id']]['attach'] = ($row['topic_attachment']) ? 1 : 0;

                                                                        }

                                                                        $forum_id_ary[] = $row['forum_id'];

                                                                }

                                                                $db->sql_freeresult($result);

                                                        }

                                                        // Entire topic comprises posts by this user, move these topics

                                                        if (sizeof($move_topic_ary))

                                                        {

                                                                move_topics($move_topic_ary, $new_forum_id, false);

                                                        }

                                                        if (sizeof($move_post_ary))

                                                        {

                                                                // Create new topic

                                                                // Update post_ids, report_ids, attachment_ids

                                                                foreach ($move_post_ary as $topic_id => $post_ary)

                                                                {

                                                                        // Create new topic

                                                                        $sql = 'INSERT INTO ' . TOPICS_TABLE . ' ' . $db->sql_build_array('INSERT', array(

                                                                                'topic_poster'                                => $user_id,

                                                                                'topic_time'                                => time(),

                                                                                'forum_id'                                         => $new_forum_id,

                                                                                'icon_id'                                        => 0,

                                                                                'topic_approved'                        => 1,

                                                                                'topic_title'                                 => $post_ary['title'],

                                                                                'topic_first_poster_name'        => $user_row['username'],

                                                                                'topic_type'                                => POST_NORMAL,

                                                                                'topic_time_limit'                        => 0,

                                                                                'topic_attachment'                        => $post_ary['attach'])

                                                                        );

                                                                        $db->sql_query($sql);

                                                                        $new_topic_id = $db->sql_nextid();

                                                                        // Move posts

                                                                        $sql = 'UPDATE ' . POSTS_TABLE . "

                                                                                SET forum_id = $new_forum_id, topic_id = $new_topic_id

                                                                                WHERE topic_id = $topic_id

                                                                                        AND poster_id = $user_id";

                                                                        $db->sql_query($sql);

                                                                        if ($post_ary['attach'])

                                                                        {

                                                                                $sql = 'UPDATE ' . ATTACHMENTS_TABLE . "

                                                                                        SET topic_id = $new_topic_id

                                                                                        WHERE topic_id = $topic_id

                                                                                                AND poster_id = $user_id";

                                                                                $db->sql_query($sql);

                                                                        }

                                                                        $new_topic_id_ary[] = $new_topic_id;