Code Forge

<?php

/** 

*

* @package phpBB3

* @version $Id: memberlist.php 5247 2005-10-02 18:47:06Z acydburn $

* @copyright (c) 2005 phpBB Group 

* @license http://opensource.org/licenses/gpl-license.php GNU Public License 

*

*/

/**

*/

define('IN_PHPBB', true);

$phpbb_root_path = './';

$phpEx = substr(strrchr(__FILE__, '.'), 1);

include($phpbb_root_path . 'common.'.$phpEx);

// Start session management

$user->session_begin();

$auth->acl($user->data);

$user->setup(array('memberlist', 'groups'));

// Grab data

$mode                = request_var('mode', '');

$action                = request_var('action', '');

$user_id        = request_var('u', ANONYMOUS);

$group_id        = request_var('g', 0);

$topic_id        = request_var('t', 0);

switch ($mode)

{

        case 'email':

                break;

        default:

                // Can this user view profiles/memberlist?

                if (!$auth->acl_gets('u_viewprofile', 'a_user', 'a_useradd', 'a_userdel'))

                {

                        if ($user->data['user_id'] != ANONYMOUS)

                        {

                                trigger_error('NO_VIEW_USERS');

                        }

                        login_box('', $user->lang['LOGIN_EXPLAIN_' . strtoupper($mode)]);

                }

                break;

}

$start        = request_var('start', 0);

$submit = (isset($_POST['submit'])) ? true : false;

$sort_key = request_var('sk', 'c');

$sort_dir = request_var('sd', 'a');

// Grab rank information for later

$ranks = array();

$cache->obtain_ranks($ranks);

// What do you want to do today? ... oops, I think that line is taken ...

switch ($mode)

{

        case 'leaders':

                // Display a listing of board admins, moderators

                $user->add_lang('groups');

                $page_title = $user->lang['THE_TEAM'];

                $template_html = 'memberlist_leaders.html';

                $user_ary = $auth->acl_get_list(false, array('a_', 'm_'), false);

                $admin_id_ary = $mod_id_ary = $forum_id_ary = array();

                foreach ($user_ary as $forum_id => $forum_ary)

                {

                        foreach ($forum_ary as $auth_option => $id_ary)

                        {

                                (!$forum_id && $auth_option == 'a_') ? $admin_id_ary += $id_ary : $mod_id_ary += $id_ary;

                                if ($forum_id)

                                {

                                        foreach ($id_ary as $id)

                                        {

                                                $forum_id_ary[$id][] = $forum_id;

                                        }

                                }

                        }

                }

                $sql = 'SELECT forum_id, forum_name 

                        FROM ' . FORUMS_TABLE . '

                        WHERE forum_type = ' . FORUM_POST;

                $result = $db->sql_query($sql);

                $forums = array();

                while ($row = $db->sql_fetchrow($result))

                {

                        $forums[$row['forum_id']] = $row['forum_name'];

                }

                $db->sql_freeresult($result);

                $sql = 'SELECT u.user_id, u.username, u.user_colour, u.user_rank, u.user_posts, g.group_id, g.group_name, g.group_colour, g.group_type, ug.user_id as ug_user_id

                        FROM ' . USERS_TABLE . ' u, ' . GROUPS_TABLE . ' g

                        LEFT JOIN ' . USER_GROUP_TABLE . ' ug ON (ug.group_id = g.group_id AND ug.user_id = ' . $user->data['user_id'] . ')

                        WHERE u.user_id IN (' . implode(', ', $admin_id_ary + $mod_id_ary) . ')

                                AND u.group_id = g.group_id

                        ORDER BY g.group_name ASC, u.username ASC';

                $result = $db->sql_query($sql);

                while ($row = $db->sql_fetchrow($result))

                {

                        $which_row = (in_array($row['user_id'], $admin_id_ary)) ? 'admin' : 'mod';

                        $s_forum_select = '';

                        if ($which_row == 'mod' && sizeof(array_diff(array_keys($forums), $forum_id_ary[$row['user_id']])))

                        {

                                foreach ($forum_id_ary[$row['user_id']] as $forum_id)

                                {

                                        if (isset($forums[$forum_id]) && $auth->acl_get('f_list', $forum_id))

                                        {

                                                $s_forum_select .= '<option value="">' . $forums[$forum_id] . '</option>';

                                        }

                                }

                        }

                        if ($row['group_type'] == GROUP_HIDDEN && !$auth->acl_gets('a_group', 'a_groupadd', 'a_groupdel') && $row['ug_user_id'] != $user->data['user_id'])

                        {

                                $group_name = $user->lang['UNDISCLOSED'];

                                $u_group = '';

                        }

                        else

                        {

                                $group_name = ($row['group_type'] == GROUP_SPECIAL) ? $user->lang['G_' . $row['group_name']] : $row['group_name'];

                                $u_group = "{$phpbb_root_path}memberlist.$phpEx$SID&mode=group&g={$row['group_id']}";

                        }

                        $rank_title = $rank_img = '';

                        get_user_rank($row['user_rank'], $row['user_posts'], $rank_title, $rank_img);

                        $template->assign_block_vars($which_row, array(

                                'USER_ID'                => $row['user_id'],

                                'FORUMS'                => $s_forum_select,

                                'USERNAME'                => $row['username'],

                                'USER_COLOR'        => $row['user_colour'],

                                'RANK_TITLE'        => $rank_title,

                                'GROUP_NAME'        => $group_name,

                                'GROUP_COLOR'        => $row['group_colour'],

                                'RANK_IMG'                => $rank_img,

                                'U_GROUP'                => $u_group,

                                'U_VIEWPROFILE'        => "{$phpbb_root_path}memberlist.$phpEx$SID&mode=viewprofile&u={$row['user_id']}",

                                'U_PM'                        => ($auth->acl_get('u_sendpm')) ? "{$phpbb_root_path}ucp.$phpEx$SID&i=pm&mode=compose&u={$row['user_id']}" : '')

                        );

                }

                $db->sql_freeresult($result);

                $template->assign_vars(array(

                        'PM_IMG'                => $user->img('btn_pm', $user->lang['MESSAGE']))

                );

                break;

        case 'contact':

                $page_title = $user->lang['IM_USER'];

                $template_html = 'memberlist_im.html';

                $presence_img = '';

                switch ($action)

                {

                        case 'icq':

                                $lang = 'ICQ';

                                $sql_field = 'user_icq';

                                $s_select = 'S_SEND_ICQ';

                                $s_action = 'http://wwp.icq.com/scripts/WWPMsg.dll';

                                break;

                        case 'aim':

                                $lang = 'AIM';

                                $sql_field = 'user_aim';

                                $s_select = 'S_SEND_AIM';

                                $s_action = '';

                                break;

                        case 'msnm':

                                $lang = 'MSNM';

                                $sql_field = 'user_msnm';

                                $s_select = 'S_SEND_MSNM';

                                $s_action = '';

                                break;

                        case 'jabber':

                                $lang = 'JABBER';

                                $sql_field = 'user_jabber';

                                $s_select = (@extension_loaded('xml')) ? 'S_SEND_JABBER' : 'S_NO_SEND_JABBER';

                                $s_action = "{$phpbb_root_path}memberlist.$phpEx$SID&mode=contact&action=$action&u=$user_id";

                                break;

                        default:

                                $sql_field = '';

                                break;

                }

                // Grab relevant data

                $sql = "SELECT user_id, username, user_email, user_lang, $sql_field

                        FROM " . USERS_TABLE . "

                        WHERE user_id = $user_id

                                AND user_type IN (" . USER_NORMAL . ', ' . USER_FOUNDER . ')';

                $result = $db->sql_query($sql);

                if (!($row = $db->sql_fetchrow($result)))

                {

                        trigger_error('NO_USER_DATA');

                }

                $db->sql_freeresult($result);

                // Post data grab actions

                switch ($action)

                {

                        case 'icq':

                                $presence_img = '<img src="http://web.icq.com/whitepages/online?icq=' . $row[$sql_field] . '&amp;img=5" width="18" height="18" alt="" />';

                                break;

                        case 'jabber':

                                if ($submit && @extension_loaded('xml'))

                                {

                                        include_once($phpbb_root_path . 'includes/functions_messenger.'.$phpEx);

                                        $subject = sprintf($user->lang['IM_JABBER_SUBJECT'], $user->data['username'], $config['server_name']);

                                        $message = $_POST['message'];

                                        $messenger = new messenger();

                                        $messenger->template('profile_send_email', $row['user_lang']);

                                        $messenger->subject($subject);

                                        $messenger->replyto($user->data['user_email']);

                                        $messenger->im($row['user_jabber'], $row['username']);

                                        $messenger->assign_vars(array(

                                                'SITENAME'                => $config['sitename'],

                                                'BOARD_EMAIL'        => $config['board_contact'],

                                                'FROM_USERNAME' => $user->data['username'],

                                                'TO_USERNAME'        => $row['username'],

                                                'MESSAGE'                => $message)

                                        );

                                        $messenger->send(NOTIFY_IM);

                                        $messenger->save_queue();

                                        $s_select = 'S_SENT_JABBER';

                                }

                                break;

                }

                // Send vars to the template

                $template->assign_vars(array(

                        'IM_CONTACT'        => $row[$sql_field],

                        'USERNAME'                => addslashes($row['username']),

                        'EMAIL'                        => $row['user_email'],

                        'CONTACT_NAME'        => $row[$sql_field],

                        'SITENAME'                => addslashes($config['sitename']),

                        'PRESENCE_IMG'                => $presence_img,

                        'L_SEND_IM_EXPLAIN'        => $user->lang['IM_' . $lang],

                        'L_IM_SENT_JABBER'        => sprintf($user->lang['IM_SENT_JABBER'], $row['username']),

                        $s_select                        => true,

                        'S_IM_ACTION'                => $s_action)

                );

                break;

        case 'viewprofile':

                // Display a profile

                if ($user_id == ANONYMOUS)

                {

                        trigger_error('NO_USER');

                }

                // Do the SQL thang

                $sql = 'SELECT g.group_id, g.group_name, g.group_type

                        FROM ' . GROUPS_TABLE . ' g, ' . USER_GROUP_TABLE . " ug

                        WHERE ug.user_id = $user_id

                                AND g.group_id = ug.group_id" . ((!$auth->acl_gets('a_group')) ? ' AND group_type <> ' . GROUP_HIDDEN : '') . '

                        ORDER BY group_type, group_name';

                $result = $db->sql_query($sql);

                $group_options = '';

                while ($row = $db->sql_fetchrow($result))

                {

                        $group_options .= '<option value="' . $row['group_id'] . '">' . (($row['group_type'] == GROUP_SPECIAL) ? $user->lang['G_' . $row['group_name']] : $row['group_name']) . '</option>';

                }

                // We left join on the session table to see if the user is currently online

                $sql = 'SELECT username, user_id, user_type, user_colour, user_permissions, user_sig, user_sig_bbcode_uid, user_sig_bbcode_bitfield, user_allow_viewemail, user_posts, user_regdate, user_rank, user_from, user_occ, user_interests, user_website, user_email, user_icq, user_aim, user_yim, user_msnm, user_jabber, user_avatar, user_avatar_width, user_avatar_height, user_avatar_type, user_lastvisit

                        FROM ' . USERS_TABLE . "

                        WHERE user_id = $user_id

                                AND user_type IN (" . USER_NORMAL . ', ' . USER_FOUNDER . ')';

                $result = $db->sql_query($sql);

                if (!($member = $db->sql_fetchrow($result)))

                {

                        trigger_error('NO_USER');

                }

                $db->sql_freeresult($result);

                $sql = 'SELECT MAX(session_time) AS session_time

                        FROM ' . SESSIONS_TABLE . "

                        WHERE session_user_id = $user_id";

                $result = $db->sql_query($sql);

                $row = $db->sql_fetchrow($result);

                $db->sql_freeresult($result);

                $member['session_time'] = (isset($row['session_time'])) ? $row['session_time'] : 0;

                unset($row);

                // Obtain list of forums where this users post count is incremented

                $auth2 = new auth();

                $auth2->acl($member);

                $f_postcount_ary = $auth2->acl_getf('f_postcount');

                $sql_forums = array();

                foreach ($f_postcount_ary as $forum_id => $allow)

                {

                        if ($allow['f_postcount'])

                        {

                                $sql_forums[] = $forum_id;

                        }

                }

                $post_count_sql = (sizeof($sql_forums)) ? 'AND f.forum_id IN (' . implode(', ', $sql_forums) . ')' : '';

                unset($sql_forums, $f_postcount_ary, $auth2);

                // Grab all the relevant data

                $sql = 'SELECT COUNT(p.post_id) AS num_posts

                        FROM ' . POSTS_TABLE . ' p, ' . FORUMS_TABLE . " f

                        WHERE p.poster_id = $user_id

                                AND f.forum_id = p.forum_id

                                $post_count_sql";

                $result = $db->sql_query($sql);

                $num_real_posts = min($user->data['user_posts'], $db->sql_fetchfield('num_posts', 0, $result));

                $db->sql_freeresult($result);

                // Change post_count_sql to an forum_id array the user is able to see

                $f_forum_ary = $auth->acl_getf('f_read');

                $sql_forums = array();

                foreach ($f_forum_ary as $forum_id => $allow)

                {

                        if (isset($allow['f_read']) && $allow['f_read'])

                        {

                                $sql_forums[] = $forum_id;

                        }

                }

                $post_count_sql = (sizeof($sql_forums)) ? 'AND f.forum_id IN (' . implode(', ', $sql_forums) . ')' : '';

                unset($sql_forums, $f_forum_ary);

                if ($post_count_sql)

                {

                        $sql = 'SELECT f.forum_id, f.forum_name, COUNT(post_id) AS num_posts

                                FROM ' . POSTS_TABLE . ' p, ' . FORUMS_TABLE . " f

                                WHERE p.poster_id = $user_id

                                        AND f.forum_id = p.forum_id

                                        $post_count_sql

                                GROUP BY f.forum_id, f.forum_name

                                ORDER BY num_posts DESC";

                        $result = $db->sql_query_limit($sql, 1);

                        $active_f_row = $db->sql_fetchrow($result);

                        $db->sql_freeresult($result);

                        $sql = 'SELECT t.topic_id, t.topic_title, COUNT(p.post_id) AS num_posts

                                FROM ' . POSTS_TABLE . ' p, ' . TOPICS_TABLE . ' t, ' . FORUMS_TABLE . " f

                                WHERE p.poster_id = $user_id

                                        AND t.topic_id = p.topic_id

                                        AND f.forum_id = t.forum_id

                                        $post_count_sql

                                GROUP BY t.topic_id, t.topic_title

                                ORDER BY num_posts DESC";

                        $result = $db->sql_query_limit($sql, 1);

                        $active_t_row = $db->sql_fetchrow($result);

                        $db->sql_freeresult($result);

                }

                else

                {

                        $active_f_row = $active_t_row = array();

                }

                // Do the relevant calculations

                $memberdays = max(1, round((time() - $member['user_regdate']) / 86400));

                $posts_per_day = $member['user_posts'] / $memberdays;

                $percentage = ($config['num_posts']) ? min(100, ($num_real_posts / $config['num_posts']) * 100) : 0;

                $active_f_name = $active_f_id = $active_f_count = $active_f_pct = '';

                if (!empty($active_f_row['num_posts']))

                {

                        $active_f_name = $active_f_row['forum_name'];

                        $active_f_id = $active_f_row['forum_id'];

                        $active_f_count = $active_f_row['num_posts'];

                        $active_f_pct = ($member['user_posts']) ? ($active_f_count / $member['user_posts']) * 100 : 0;

                }

                unset($active_f_row);

                $active_t_name = $active_t_id = $active_t_count = $active_t_pct = '';

                if (!empty($active_t_row['num_posts']))

                {

                        $active_t_name = $active_t_row['topic_title'];

                        $active_t_id = $active_t_row['topic_id'];

                        $active_t_count = $active_t_row['num_posts'];

                        $active_t_pct = ($member['user_posts']) ? ($active_t_count / $member['user_posts']) * 100 : 0;

                }

                unset($active_t_row);

                if ($member['user_sig_bbcode_bitfield'] && $member['user_sig'])

                {

                        include_once($phpbb_root_path . 'includes/bbcode.'.$phpEx);

                        $bbcode = new bbcode();

                        $bbcode->bbcode_second_pass($member['user_sig'], $member['user_sig_bbcode_uid'], $member['user_sig_bbcode_bitfield']);

                }

                if ($member['user_sig'])

                {

                        $member['user_sig'] = censor_text(smiley_text($member['user_sig']));

                }

                $poster_avatar = '';

                if (!empty($member['user_avatar']))

                {

                        switch ($member['user_avatar_type'])

                        {

                                case AVATAR_UPLOAD:

                                        $poster_avatar = $config['avatar_path'] . '/';

                                        break;

                                case AVATAR_GALLERY:

                                        $poster_avatar = $config['avatar_gallery_path'] . '/';

                                        break;

                        }

                        $poster_avatar .= $member['user_avatar'];

                        $poster_avatar = '<img src="' . $poster_avatar . '" width="' . $member['user_avatar_width'] . '" height="' . $member['user_avatar_height'] . '" border="0" alt="" />';

                }

                $template->assign_vars(show_profile($member));

                // Custom Profile Fields

                $profile_fields = array();

                if ($config['load_cpf_viewprofile'])

                {

                        include($phpbb_root_path . 'includes/functions_profile_fields.' . $phpEx);

                        $cp = new custom_profile();

                        $profile_fields = $cp->generate_profile_fields_template('grab', $user_id);

                        $profile_fields = (isset($profile_fields[$user_id])) ? $cp->generate_profile_fields_template('show', false, $profile_fields[$user_id]) : array();

                }

                $template->assign_vars(array(

                        'POSTS_DAY'                        => sprintf($user->lang['POST_DAY'], $posts_per_day),

                        'POSTS_PCT'                        => sprintf($user->lang['POST_PCT'], $percentage),

                        'ACTIVE_FORUM'                => $active_f_name,

                        'ACTIVE_FORUM_POSTS'=> ($active_f_count == 1) ? sprintf($user->lang['USER_POST'], 1) : sprintf($user->lang['USER_POSTS'], $active_f_count),

                        'ACTIVE_FORUM_PCT'        => sprintf($user->lang['POST_PCT'], $active_f_pct),

                        'ACTIVE_TOPIC'                => censor_text($active_t_name),

                        'ACTIVE_TOPIC_POSTS'=> ($active_t_count == 1) ? sprintf($user->lang['USER_POST'], 1) : sprintf($user->lang['USER_POSTS'], $active_t_count),

                        'ACTIVE_TOPIC_PCT'        => sprintf($user->lang['POST_PCT'], $active_t_pct),

                        'OCCUPATION'        => (!empty($member['user_occ'])) ? censor_text($member['user_occ']) : '',

                        'INTERESTS'                => (!empty($member['user_interests'])) ? censor_text($member['user_interests']) : '',

                        'SIGNATURE'                => (!empty($member['user_sig'])) ? str_replace("\n", '<br />', $member['user_sig']) : '',

                        'AVATAR_IMG'        => $poster_avatar,

                        'PM_IMG'                => $user->img('btn_pm', $user->lang['MESSAGE']),

                        'EMAIL_IMG'                => $user->img('btn_email', $user->lang['EMAIL']),

                        'WWW_IMG'                => $user->img('btn_www', $user->lang['WWW']),

                        'ICQ_IMG'                => $user->img('btn_icq', $user->lang['ICQ']),

                        'AIM_IMG'                => $user->img('btn_aim', $user->lang['AIM']),

                        'MSN_IMG'                => $user->img('btn_msnm', $user->lang['MSNM']),

                        'YIM_IMG'                => $user->img('btn_yim', $user->lang['YIM']),

                        'JABBER_IMG'        => $user->img('btn_jabber', $user->lang['JABBER']),

                        'SEARCH_IMG'        => $user->img('btn_search', $user->lang['SEARCH']),

                        'S_PROFILE_ACTION'        => "{$phpbb_root_path}memberlist.$phpEx$SID&mode=group",

                        'S_GROUP_OPTIONS'        => $group_options,

                        'S_CUSTOM_FIELDS'        => (isset($profile_fields['row']) && sizeof($profile_fields['row'])) ? true : false,

                        'U_ADD_FRIEND'                => "ucp.$phpEx$SID&i=zebra&add=" . urlencode($member['username']),

                        'U_ADD_FOE'                        => "ucp.$phpEx$SID&i=zebra&mode=foes&add=" . urlencode($member['username']),

                        'U_ACTIVE_FORUM'        => "viewforum.$phpEx$SID&f=$active_f_id",

                        'U_ACTIVE_TOPIC'        => "viewtopic.$phpEx$SID&t=$active_t_id",)

                );

                if (isset($profile_fields['row']) && sizeof($profile_fields['row']))

                {

                        $template->assign_vars($profile_fields['row']);

                }

                if (isset($profile_fields['blockrow']) && sizeof($profile_fields['blockrow']))

                {

                        foreach ($profile_fields['blockrow'] as $field_data)

                        {

                                $template->assign_block_vars('custom_fields', $field_data);

                        }

                }

                // Now generate page tilte

                $page_title = sprintf($user->lang['VIEWING_PROFILE'], $member['username']);

                $template_html = 'memberlist_view.html';

        break;

        case 'email':

                // Send an email

                $page_title = $user->lang['SEND_EMAIL'];

                $template_html = 'memberlist_email.html';

                if (!$config['email_enable'])

                {

                        trigger_error('EMAIL_DISABLED');

                }

                if (($user_id == ANONYMOUS || !$config['board_email_form']) && !$topic_id)

                {

                        trigger_error('NO_EMAIL');

                }

                if (!$auth->acl_get('u_sendemail'))

                {

                        trigger_error('NO_EMAIL');

                }

                // Are we trying to abuse the facility?

                if (time() - $user->data['user_emailtime'] < $config['flood_interval'])

                {

                        trigger_error('FLOOD_EMAIL_LIMIT');

                }

                $name                = strip_tags(request_var('name', ''));

                $email                = strip_tags(request_var('email', ''));

                $email_lang = request_var('lang', '');

                $subject        = request_var('subject', '');

                $message        = request_var('message', '');

                $cc                        = (!empty($_POST['cc_email'])) ? true : false;

                // Are we sending an email to a user on this board? Or are we sending a

                // topic heads-up message?

                if (!$topic_id)

                {

                        // Get the appropriate username, etc.

                        $sql = 'SELECT username, user_email, user_allow_viewemail, user_lang, user_jabber, user_notify_type

                                FROM ' . USERS_TABLE . "

                                WHERE user_id = $user_id

                                        AND user_type IN (" . USER_NORMAL . ', ' . USER_FOUNDER . ')';

                        $result = $db->sql_query($sql);

                        if (!($row = $db->sql_fetchrow($result)))

                        {

                                trigger_error('NO_USER');

                        }

                        $db->sql_freeresult($result);

                        // Can we send email to this user?

                        if (!$row['user_allow_viewemail'] && !$auth->acl_get('a_user'))

                        {

                                trigger_error('NO_EMAIL');

                        }

                }

                else

                {

                        $sql = 'SELECT forum_id, topic_title

                                FROM ' . TOPICS_TABLE . "

                                WHERE topic_id = $topic_id";

                        $result = $db->sql_query($sql);

                        if (!($row = $db->sql_fetchrow($result)))

                        {

                                trigger_error('NO_TOPIC');

                        }

                        $db->sql_freeresult($result);

                        if (!$auth->acl_get('f_read', $row['forum_id']))

                        {

                                trigger_error('NO_FORUM_READ');

                        }

                        if (!$auth->acl_get('f_email', $row['forum_id']))

                        {

                                trigger_error('NO_EMAIL');

                        }

                }

                // User has submitted a message, handle it

                $error = array();

                if ($submit)

                {

                        if (!$topic_id)

                        {

                                if (!$subject)

                                {

                                        $error[] = $user->lang['EMPTY_SUBJECT_EMAIL'];

                                }

                                if (!$message)

                                {

                                        $error[] = $user->lang['EMPTY_MESSAGE_EMAIL'];

                                }

                        }

                        else

                        {

                                if (!$email || !preg_match('#^.*?@(.*?\.)?[a-z0-9\-]+\.[a-z]{2,4}$#i', $email))

                                {

                                        $error[] = $user->lang['EMPTY_ADDRESS_EMAIL'];

                                }

                                if (!$name)

                                {

                                        $error[] = $user->lang['EMPTY_NAME_EMAIL'];

                                }

                        }

                        if (!sizeof($error))

                        {

                                $sql = 'UPDATE ' . USERS_TABLE . '

                                        SET user_emailtime = ' . time() . '

                                        WHERE user_id = ' . $user->data['user_id'];

                                $result = $db->sql_query($sql);

                                include_once($phpbb_root_path . 'includes/functions_messenger.'.$phpEx);

                                $email_tpl        = (!$topic_id) ? 'profile_send_email' : 'email_notify';

                                $email_lang = (!$topic_id) ? $row['user_lang'] : $email_lang;

                                $email                = (!$topic_id) ? $row['user_email'] : $email;

                                $messenger = new messenger();

                                $messenger->template($email_tpl, $email_lang);

                                $messenger->subject($subject);

                                $messenger->replyto($user->data['user_email']);

                                $messenger->to($email, $row['username']);

                                if (!$topic_id)

                                {

                                        $messenger->im($row['user_jabber'], $row['username']);

                                }

                                if ($cc)

                                {

                                        $messenger->cc($user->data['user_email'], $user->data['username']);

                                }

                                $messenger->headers('X-AntiAbuse: Board servername - ' . $config['server_name']);

                                $messenger->headers('X-AntiAbuse: User_id - ' . $user->data['user_id']);

                                $messenger->headers('X-AntiAbuse: Username - ' . $user->data['username']);

                                $messenger->headers('X-AntiAbuse: User IP - ' . $user->ip);

                                $messenger->assign_vars(array(

                                        'SITENAME'                => $config['sitename'],

                                        'BOARD_EMAIL'        => $config['board_contact'],

                                        'FROM_USERNAME' => stripslashes($user->data['username']),

                                        'TO_USERNAME'        => ($topic_id) ? stripslashes($name) : stripslashes($row['username']),

                                        'MESSAGE'                => $message,

                                        'TOPIC_NAME'        => ($topic_id) ? strtr($row['topic_title'], array_flip(get_html_translation_table(HTML_ENTITIES))) : '',

                                        'U_TOPIC'        => ($topic_id) ? generate_board_url() . "/viewtopic.$phpEx?f=" . $row['forum_id'] . "&t=$topic_id" : '')

                                );

                                $messenger->send($row['user_notify_type']);

                                $messenger->save_queue();

                                meta_refresh(3, "index.$phpEx$SID");

                                $message = (!$topic_id) ? sprintf($user->lang['RETURN_INDEX'],  '<a href="' . "index.$phpEx$SID" . '">', '</a>') : sprintf($user->lang['RETURN_TOPIC'],  "<a href=\"viewtopic.$phpEx$SID&amp;f=$forum_id&amp;t=" . $row['topic_id'] . '">', '</a>');

                                trigger_error($user->lang['EMAIL_SENT'] . '<br /><br />' . $message);

                        }

                }

                if ($topic_id)

                {

                        $template->assign_vars(array(

                                'EMAIL'                        => htmlspecialchars($email),

                                'NAME'                        => htmlspecialchars($name),

                                'TOPIC_TITLE'        => $row['topic_title'],

                                'U_TOPIC'        => "{$phpbb_root_path}viewtopic.$phpEx$SID&f={$row['forum_id']}&t=$topic_id",

                                'S_LANG_OPTIONS'=> ($topic_id) ? language_select($email_lang) : '')

                        );

                }

                $template->assign_vars(array(

                        'USERNAME'                => (!$topic_id) ? addslashes($row['username']) : '',

                        'ERROR_MESSAGE'        => (sizeof($error)) ? implode('<br />', $error) : '',

                        'L_EMAIL_BODY_EXPLAIN'        => (!$topic_id) ? $user->lang['EMAIL_BODY_EXPLAIN'] : $user->lang['EMAIL_TOPIC_EXPLAIN'],

                        'S_POST_ACTION' => (!$topic_id) ? "{$phpbb_root_path}memberlist.$phpEx$SID&mode=email&u=$user_id" : "{$phpbb_root_path}memberlist.$phpEx$SID&mode=email&f=$forum_id&t=$topic_id",

                        'S_SEND_USER'        => (!$topic_id) ? true : false)

                );

                break;

        case 'group':

        default:

                // The basic memberlist

                $page_title = $user->lang['MEMBERLIST'];

                $template_html = 'memberlist_body.html';

                // Sorting

                $sort_key_text = array('a' => $user->lang['SORT_USERNAME'], 'b' => $user->lang['SORT_LOCATION'], 'c' => $user->lang['SORT_JOINED'], 'd' => $user->lang['SORT_POST_COUNT'], 'e' => $user->lang['SORT_EMAIL'], 'f' => $user->lang['WEBSITE'], 'g' => $user->lang['ICQ'], 'h' => $user->lang['AIM'], 'i' => $user->lang['MSNM'], 'j' => $user->lang['YIM'], 'k' => $user->lang['JABBER'], 'l' => $user->lang['SORT_LAST_ACTIVE'], 'm' => $user->lang['SORT_RANK']);

                $sort_key_sql = array('a' => 'u.username', 'b' => 'u.user_from', 'c' => 'u.user_regdate', 'd' => 'u.user_posts', 'e' => 'u.user_email', 'f' => 'u.user_website', 'g' => 'u.user_icq', 'h' => 'u.user_aim', 'i' => 'u.user_msnm', 'j' => 'u.user_yim', 'k' => 'u.user_jabber', 'l' => 'u.user_lastvisit', 'm' => 'u.user_rank DESC, u.user_posts');

                $sort_dir_text = array('a' => $user->lang['ASCENDING'], 'd' => $user->lang['DESCENDING']);

                $s_sort_key = '';

                foreach ($sort_key_text as $key => $value)

                {

                        $selected = ($sort_key == $key) ? ' selected="selected"' : '';

                        $s_sort_key .= '<option value="' . $key . '"' . $selected . '>' . $value . '</option>';

                }

                $s_sort_dir = '';

                foreach ($sort_dir_text as $key => $value)

                {

                        $selected = ($sort_dir == $key) ? ' selected="selected"' : '';

                        $s_sort_dir .= '<option value="' . $key . '"' . $selected . '>' . $value . '</option>';

                }

                // Additional sorting options for user search ... if search is enabled, if not

                // then only admins can make use of this (for ACP functionality)

                $sql_select = $sql_from = $sql_where = $order_by = '';

                $form        = request_var('form', '');

                $field        = request_var('field', '');

                if ($mode == 'searchuser' && ($config['load_search'] || $auth->acl_get('a_')))

                {

                        $username        = request_var('username', '');

                        $email                = request_var('email', '');

                        $icq                = request_var('icq', '');

                        $aim                = request_var('aim', '');

                        $yahoo                = request_var('yahoo', '');

                        $msn                = request_var('msn', '');

                        $jabber                = request_var('jabber', '');

                        $search_group_id        = request_var('search_group_id', 0);

                        $joined_select        = request_var('joined_select', 'lt');

                        $active_select        = request_var('active_select', 'lt');

                        $count_select        = request_var('count_select', 'eq');

                        $joined                        = explode('-', request_var('joined', ''));

                        $active                        = explode('-', request_var('active', ''));

                        $count                        = (request_var('count', '')) ? request_var('count', 0) : '';

                        $ipdomain                = request_var('ip', '');

                        $find_key_match = array('lt' => '<', 'gt' => '>', 'eq' => '=');

                        $find_count = array('lt' => $user->lang['LESS_THAN'], 'eq' => $user->lang['EQUAL_TO'], 'gt' => $user->lang['MORE_THAN']);

                        $s_find_count = '';

                        foreach ($find_count as $key => $value)

                        {

                                $selected = ($count_select == $key) ? ' selected="selected"' : '';

                                $s_find_count .= '<option value="' . $key . '"' . $selected . '>' . $value . '</option>';

                        }

                        $find_time = array('lt' => $user->lang['BEFORE'], 'gt' => $user->lang['AFTER']);

                        $s_find_join_time = '';

                        foreach ($find_time as $key => $value)

                        {

                                $selected = ($joined_select == $key) ? ' selected="selected"' : '';

                                $s_find_join_time .= '<option value="' . $key . '"' . $selected . '>' . $value . '</option>';

                        }

                        $s_find_active_time = '';

                        foreach ($find_time as $key => $value)

                        {

                                $selected = ($active_select == $key) ? ' selected="selected"' : '';

                                $s_find_active_time .= '<option value="' . $key . '"' . $selected . '>' . $value . '</option>';

                        }

                        $sql_where .= ($username) ? " AND u.username LIKE '" . str_replace('*', '%', $db->sql_escape($username)) . "'" : '';

                        $sql_where .= ($email) ? " AND u.user_email LIKE '" . str_replace('*', '%', $db->sql_escape($email)) . "' " : '';

                        $sql_where .= ($icq) ? " AND u.user_icq LIKE '" . str_replace('*', '%', $db->sql_escape($icq)) . "' " : '';

                        $sql_where .= ($aim) ? " AND u.user_aim LIKE '" . str_replace('*', '%', $db->sql_escape($aim)) . "' " : '';

                        $sql_where .= ($yahoo) ? " AND u.user_yim LIKE '" . str_replace('*', '%', $db->sql_escape($yahoo)) . "' " : '';

                        $sql_where .= ($msn) ? " AND u.user_msnm LIKE '" . str_replace('*', '%', $db->sql_escape($msn)) . "' " : '';

                        $sql_where .= ($jabber) ? " AND u.user_jabber LIKE '" . str_replace('*', '%', $db->sql_escape($jabber)) . "' " : '';

                        $sql_where .= (is_numeric($count)) ? ' AND u.user_posts ' . $find_key_match[$count_select] . ' ' . (int) $count . ' ' : '';

                        $sql_where .= (sizeof($joined) > 1) ? " AND u.user_regdate " . $find_key_match[$joined_select] . ' ' . gmmktime(0, 0, 0, intval($joined[1]), intval($joined[2]), intval($joined[0])) : '';

                        $sql_where .= (sizeof($active) > 1) ? " AND u.user_lastvisit " . $find_key_match[$active_select] . ' ' . gmmktime(0, 0, 0, $active[1], intval($active[2]), intval($active[0])) : '';

                        $sql_where .= ($search_group_id) ? " AND u.user_id = ug.user_id AND ug.group_id = $search_group_id " : '';

                        if ($search_group_id)

                        {

                                $sql_from = ', ' . USER_GROUP_TABLE . ' ug ';

                        }

                        if ($ipdomain && $auth->acl_get('m_ip'))

                        {

                                $ips = (preg_match('#[a-z]#', $ipdomain)) ? implode(', ', preg_replace('#([0-9]{1,3}\.[0-9]{1,3}[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3})#', "'\\1'", gethostbynamel($ipdomain))) : "'" . str_replace('*', '%', $ipdomain) . "'";